------------[ cut here ]------------ kernel BUG at fs/ext4/inode.c:2827! Internal error: Oops - BUG: 00000000f2000800 [#1] SMP Modules linked in: CPU: 0 UID: 0 PID: 5491 Comm: syz.1.170 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : ext4_do_writepages+0x3bbc/0x3bc0 fs/ext4/inode.c:2826 lr : ext4_do_writepages+0x3bbc/0x3bc0 fs/ext4/inode.c:2826 sp : ffff800099527320 x29: ffff8000995276e0 x28: 0000000000000001 x27: dfff800000000000 x26: ffff7000132a4e9c x25: 1ffff000132a4f34 x24: 1fffe0001e3b44ba x23: ffff7000132a4ee8 x22: ffff0000f1da25d0 x21: ffff0000d95b2000 x20: 0000006a10000000 x19: ffff0000d95b6000 x18: 00000000ffffffff x17: ffff80008a74f000 x16: 0000000000000007 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000008 x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000000003 x9 : 0000000000000000 x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000080 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800081017928 x2 : 0000004000000000 x1 : ffff0000d0b5d7c0 x0 : 0000000000000000 Call trace: ext4_do_writepages+0x3bbc/0x3bc0 fs/ext4/inode.c:2826 (P) ext4_writepages+0x198/0x2dc fs/ext4/inode.c:3043 do_writepages+0x284/0x47c mm/page-writeback.c:2571 filemap_writeback+0x230/0x2bc mm/filemap.c:387 filemap_flush_range mm/filemap.c:436 [inline] filemap_flush+0x30/0x40 mm/filemap.c:451 ext4_alloc_da_blocks+0x104/0x414 fs/ext4/inode.c:3354 ext4_release_file+0x68/0x2c0 fs/ext4/file.c:169 __fput+0x338/0x74c fs/file_table.c:512 ____fput+0x20/0x30 fs/file_table.c:540 task_work_run+0x1cc/0x25c kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:70 [inline] exit_to_user_mode_loop+0x10c/0x17c kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] arm64_syscall_exit_to_user_mode arch/arm64/kernel/entry-common.c:88 [inline] el0_svc+0x18c/0x260 arch/arm64/kernel/entry-common.c:737 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:755 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 Code: aa1303e0 97c24004 d4210000 97d8ea5c (d4210000) ---[ end trace 0000000000000000 ]---