EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. ------------[ cut here ]------------ kernel BUG at fs/ext4/extents.c:3200! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 5134 Comm: syz.1.263 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : ext4_split_extent_at+0xd78/0xdcc fs/ext4/extents.c:3200 lr : ext4_split_extent_at+0xd78/0xdcc fs/ext4/extents.c:3200 sp : ffff800023df7380 x29: ffff800023df7480 x28: 0000000000000041 x27: dfff800000000000 x26: ffff0000f7733c18 x25: ffff0000f7733c1c x24: 0000000000000002 x23: 0000000000000000 x22: ffff0000f7733c1e x21: 1fffe0001eee6783 x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000000 x17: ffff80001835a000 x16: ffff8000082d7db8 x15: ffff8000089f004c x14: 0000000000000002 x13: 1fffe00019450d88 x12: 0000000000080000 x11: 0000000000004427 x10: ffff800022489000 x9 : ffff800008d347d4 x8 : 0000000000004428 x7 : 0000000000000000 x6 : ffff800008059a4c x5 : 0000000050000028 x4 : 0000000000000000 x3 : 0000000000000041 x2 : ffff0000ca286c00 x1 : 0000000000000000 x0 : 0000000000000041 Call trace: ext4_split_extent_at+0xd78/0xdcc fs/ext4/extents.c:3200 ext4_force_split_extent_at fs/ext4/extents.c:342 [inline] ext4_ext_remove_space+0x63c/0x3ac4 fs/ext4/extents.c:2892 ext4_punch_hole+0x694/0xb58 fs/ext4/inode.c:4141 ext4_fallocate+0x224/0x1abc fs/ext4/extents.c:4818 vfs_fallocate+0x4a4/0x5f4 fs/open.c:323 ioctl_preallocate+0x20c/0x2b4 fs/ioctl.c:290 file_ioctl fs/ioctl.c:-1 [inline] do_vfs_ioctl+0x1874/0x2100 fs/ioctl.c:849 __do_sys_ioctl fs/ioctl.c:868 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __arm64_sys_ioctl+0xe4/0x1c8 fs/ioctl.c:856 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Code: aa1303e0 97eecb30 17ffff2e 97dddb72 (d4210000) ---[ end trace 0000000000000000 ]---