EXT4-fs (loop0): start 384, size 130688, fe_logical 131072
------------[ cut here ]------------
kernel BUG at fs/ext4/mballoc.c:4656!
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 13 Comm: kworker/u4:1 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Workqueue: writeback wb_workfn (flush-7:0)
RIP: 0010:ext4_mb_normalize_request+0x1cc9/0x1d00 fs/ext4/mballoc.c:4656
Code: 3c a5 ff 48 8b 44 24 38 48 8b 38 48 c7 c6 80 3a e4 8b 48 c7 c2 00 53 e4 8b 48 8b 4c 24 28 4d 89 f0 49 89 d9 e8 98 65 0a 00 90 <0f> 0b e8 b0 71 39 ff 90 0f 0b e8 a8 71 39 ff 90 0f 0b e8 a0 71 39
RSP: 0000:ffffc9000026e520 EFLAGS: 00010246
RAX: 83a7faf698babf00 RBX: 0000000000020000 RCX: 83a7faf698babf00
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 0000000000000180 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff1cbd61c R12: 0000000000000060
R13: dffffc0000000000 R14: 000000000001fe80 R15: 0000000000020000
FS:  0000000000000000(0000) GS:ffff88808ca55000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2beb5953d0 CR3: 0000000012397000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 ext4_mb_new_blocks+0xc7f/0x4780 fs/ext4/mballoc.c:6309
 ext4_ext_map_blocks+0x150a/0x58b0 fs/ext4/extents.c:4436
 ext4_map_create_blocks+0x11d/0x540 fs/ext4/inode.c:616
 ext4_map_blocks+0x7cd/0x11d0 fs/ext4/inode.c:809
 mpage_map_one_extent fs/ext4/inode.c:2373 [inline]
 mpage_map_and_submit_extent fs/ext4/inode.c:2467 [inline]
 ext4_do_writepages+0x22c0/0x46e0 fs/ext4/inode.c:2925
 ext4_writepages+0x241/0x3b0 fs/ext4/inode.c:3019
 do_writepages+0x32e/0x550 mm/page-writeback.c:2554
 __writeback_single_inode+0x133/0x11a0 fs/fs-writeback.c:1750
 writeback_sb_inodes+0x992/0x1a20 fs/fs-writeback.c:2042
 __writeback_inodes_wb+0x111/0x240 fs/fs-writeback.c:2118
 wb_writeback+0x46a/0xb70 fs/fs-writeback.c:2229
 wb_check_start_all fs/fs-writeback.c:2355 [inline]
 wb_do_writeback fs/fs-writeback.c:2381 [inline]
 wb_workfn+0x95b/0xf50 fs/fs-writeback.c:2414
 process_one_work kernel/workqueue.c:3276 [inline]
 process_scheduled_works+0xb6e/0x18c0 kernel/workqueue.c:3359
 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3440
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:ext4_mb_normalize_request+0x1cc9/0x1d00 fs/ext4/mballoc.c:4656
Code: 3c a5 ff 48 8b 44 24 38 48 8b 38 48 c7 c6 80 3a e4 8b 48 c7 c2 00 53 e4 8b 48 8b 4c 24 28 4d 89 f0 49 89 d9 e8 98 65 0a 00 90 <0f> 0b e8 b0 71 39 ff 90 0f 0b e8 a8 71 39 ff 90 0f 0b e8 a0 71 39
RSP: 0000:ffffc9000026e520 EFLAGS: 00010246
RAX: 83a7faf698babf00 RBX: 0000000000020000 RCX: 83a7faf698babf00
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: 0000000000000180 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff1cbd61c R12: 0000000000000060
R13: dffffc0000000000 R14: 000000000001fe80 R15: 0000000000020000
FS:  0000000000000000(0000) GS:ffff88808ca55000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2beb4a6a30 CR3: 0000000031b7f000 CR4: 0000000000352ef0