program: setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) listen(r2, 0x1ff) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f00000000c0)='}', 0xffca, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f0000000280)='p', 0x1, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='netdevsim0\x00', 0x10) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r4) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x1, &(0x7f0000000180)="e2", 0xb, 0x1, 0xc45, 0x1010, 0x3, 0x0, 0x8, 'syz0\x00'}) r8 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) pwrite64(r8, &(0x7f0000000300)='_', 0x1, 0x10000000005) ftruncate(r0, 0x8002007ffb) [ 58.484629][ T5301] Bluetooth: hci0: command tx timeout [ 58.567954][ T5317] loop0: detected capacity change from 0 to 2048 [ 58.599368][ T5317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.648171][ T5316] ------------[ cut here ]------------ [ 58.650460][ T5316] kernel BUG at fs/ext4/inline.c:235! [ 58.652446][ T5316] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 58.655045][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 58.659500][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.664171][ T5316] RIP: 0010:ext4_write_inline_data+0x382/0x390 [ 58.666651][ T5316] Code: 89 f9 80 e1 07 fe c1 38 c1 0f 8c 22 ff ff ff 4c 89 ff e8 91 3a ab ff e9 15 ff ff ff e8 97 05 43 ff 90 0f 0b e8 8f 05 43 ff 90 <0f> 0b 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 58.674046][ T5316] RSP: 0018:ffffc9000d4577e0 EFLAGS: 00010287 [ 58.676424][ T5316] RAX: ffffffff82807171 RBX: 000000000000003c RCX: 0000000000100000 [ 58.679545][ T5316] RDX: ffffc9000e53a000 RSI: 00000000000017ff RDI: 0000000000001800 [ 58.682640][ T5316] RBP: 0000000000000001 R08: ffffffff82806f17 R09: 1ffff1100842c870 [ 58.685737][ T5316] R10: dffffc0000000000 R11: ffffed100842c871 R12: 0000010000000006 [ 58.689012][ T5316] R13: dffffc0000000000 R14: 0000010000000005 R15: ffffc9000d4578c0 [ 58.692635][ T5316] FS: 00007f5692dc16c0(0000) GS:ffff88808c60f000(0000) knlGS:0000000000000000 [ 58.696269][ T5316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.699623][ T5316] CR2: 0000200000010000 CR3: 000000004420e000 CR4: 0000000000352ef0 [ 58.702768][ T5316] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.705867][ T5316] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.709016][ T5316] Call Trace: [ 58.710431][ T5316] [ 58.711690][ T5316] ? __die_body+0x5f/0xb0 [ 58.713436][ T5316] ? die+0x99/0xc0 [ 58.715010][ T5316] ? do_trap+0x15a/0x3a0 [ 58.716729][ T5316] ? ext4_write_inline_data+0x382/0x390 [ 58.719126][ T5316] ? do_error_trap+0x1dd/0x2c0 [ 58.721074][ T5316] ? ext4_write_inline_data+0x382/0x390 [ 58.723294][ T5316] ? xattr_find_entry+0x2c3/0x310 [ 58.725336][ T5316] ? __pfx_do_error_trap+0x10/0x10 [ 58.727402][ T5316] ? handle_invalid_op+0x34/0x40 [ 58.729419][ T5316] ? ext4_write_inline_data+0x382/0x390 [ 58.731697][ T5316] ? exc_invalid_op+0x38/0x50 [ 58.733636][ T5316] ? asm_exc_invalid_op+0x1a/0x20 [ 58.735672][ T5316] ? ext4_write_inline_data+0x127/0x390 [ 58.737963][ T5316] ? ext4_write_inline_data+0x381/0x390 [ 58.740224][ T5316] ? ext4_write_inline_data+0x382/0x390 [ 58.742378][ T5316] ext4_write_inline_data_end+0x2f9/0xa90 [ 58.744559][ T5316] ? __pfx_ext4_write_inline_data_end+0x10/0x10 [ 58.746938][ T5316] ? ext4_da_write_end+0x261/0xcd0 [ 58.748942][ T5316] ? __pfx_ext4_da_write_end+0x10/0x10 [ 58.751128][ T5316] generic_perform_write+0x70b/0xa10 [ 58.753188][ T5316] ? do_raw_spin_unlock+0x58/0x8b0 [ 58.755121][ T5316] ? __pfx_generic_perform_write+0x10/0x10 [ 58.757479][ T5316] ? ext4_write_checks+0x255/0x2c0 [ 58.759591][ T5316] ext4_buffered_write_iter+0xc7/0x390 [ 58.761749][ T5316] ext4_file_write_iter+0x891/0x1ce0 [ 58.763861][ T5316] ? __lock_acquire+0xad5/0xd80 [ 58.765824][ T5316] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 58.768053][ T5316] vfs_write+0x70f/0xd10 [ 58.769823][ T5316] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 58.772095][ T5316] ? __pfx_vfs_write+0x10/0x10 [ 58.774019][ T5316] ? __fget_files+0x2a/0x420 [ 58.775931][ T5316] ? __fget_files+0x2a/0x420 [ 58.777732][ T5316] __x64_sys_pwrite64+0x1b5/0x250 [ 58.779660][ T5316] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 58.781897][ T5316] ? __secure_computing+0xef/0x2f0 [ 58.783922][ T5316] do_syscall_64+0xf3/0x230 [ 58.785621][ T5316] ? clear_bhb_loop+0x45/0xa0 [ 58.787398][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.789536][ T5316] RIP: 0033:0x7f5691f8d169 [ 58.791205][ T5316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.798239][ T5316] RSP: 002b:00007f5692dc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 58.801395][ T5316] RAX: ffffffffffffffda RBX: 00007f56921a5fa0 RCX: 00007f5691f8d169 [ 58.804521][ T5316] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000001 [ 58.807720][ T5316] RBP: 00007f569200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 58.810904][ T5316] R10: 0000010000000005 R11: 0000000000000246 R12: 0000000000000000 [ 58.814037][ T5316] R13: 0000000000000000 R14: 00007f56921a5fa0 R15: 00007fffa774a698 [ 58.817163][ T5316] [ 58.818429][ T5316] Modules linked in: [ 58.820562][ T5316] ---[ end trace 0000000000000000 ]--- [ 58.829795][ T5316] RIP: 0010:ext4_write_inline_data+0x382/0x390 [ 58.832413][ T5316] Code: 89 f9 80 e1 07 fe c1 38 c1 0f 8c 22 ff ff ff 4c 89 ff e8 91 3a ab ff e9 15 ff ff ff e8 97 05 43 ff 90 0f 0b e8 8f 05 43 ff 90 <0f> 0b 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 58.840449][ T5316] RSP: 0018:ffffc9000d4577e0 EFLAGS: 00010287 [ 58.842927][ T5316] RAX: ffffffff82807171 RBX: 000000000000003c RCX: 0000000000100000 [ 58.847178][ T5316] RDX: ffffc9000e53a000 RSI: 00000000000017ff RDI: 0000000000001800 [ 58.850567][ T5316] RBP: 0000000000000001 R08: ffffffff82806f17 R09: 1ffff1100842c870 [ 58.853980][ T5316] R10: dffffc0000000000 R11: ffffed100842c871 R12: 0000010000000006 [ 58.857182][ T5316] R13: dffffc0000000000 R14: 0000010000000005 R15: ffffc9000d4578c0 [ 58.860462][ T5316] FS: 00007f5692dc16c0(0000) GS:ffff88808c60f000(0000) knlGS:0000000000000000 [ 58.864780][ T5316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.867646][ T5316] CR2: 0000200000010000 CR3: 000000004420e000 CR4: 0000000000352ef0 [ 58.870950][ T5316] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.874484][ T5316] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.877843][ T5316] Kernel panic - not syncing: Fatal exception [ 58.880619][ T5316] Kernel Offset: disabled [ 58.882515][ T5316] Rebooting in 86400 seconds..