Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts. 2026/07/21 21:46:12 parsed 1 programs 2026/07/21 21:46:12 serving rpc on tcp://37219 [ 20.320120][ T28] audit: type=1400 audit(1784670372.795:64): avc: denied { node_bind } for pid=295 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 20.322881][ T28] audit: type=1400 audit(1784670372.795:65): avc: denied { module_request } for pid=295 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 21.035146][ T28] audit: type=1400 audit(1784670373.505:66): avc: denied { mounton } for pid=301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.036181][ T301] cgroup: Unknown subsys name 'net' [ 21.057821][ T28] audit: type=1400 audit(1784670373.505:67): avc: denied { mount } for pid=301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.085060][ T28] audit: type=1400 audit(1784670373.545:68): avc: denied { unmount } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.085177][ T301] cgroup: Unknown subsys name 'devices' [ 21.229372][ T301] cgroup: Unknown subsys name 'hugetlb' [ 21.234967][ T301] cgroup: Unknown subsys name 'rlimit' [ 21.342296][ T28] audit: type=1400 audit(1784670373.815:69): avc: denied { setattr } for pid=301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.365471][ T28] audit: type=1400 audit(1784670373.815:70): avc: denied { create } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.373186][ T305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.385974][ T28] audit: type=1400 audit(1784670373.815:71): avc: denied { write } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.414638][ T28] audit: type=1400 audit(1784670373.815:72): avc: denied { read } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.434850][ T28] audit: type=1400 audit(1784670373.815:73): avc: denied { mounton } for pid=301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.466661][ T301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.028852][ T307] request_module fs-gadgetfs succeeded, but still no fs? [ 22.369054][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.376107][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.383647][ T339] device bridge_slave_0 entered promiscuous mode [ 22.391104][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.398140][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.405364][ T339] device bridge_slave_1 entered promiscuous mode [ 22.439638][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.446665][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.453938][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.460970][ T339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.477978][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.485187][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.492523][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.500086][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.509016][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.517200][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.524231][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.539503][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.547620][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.554641][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.562164][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.570923][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.580760][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.592707][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.600711][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.608241][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.616309][ T339] device veth0_vlan entered promiscuous mode [ 22.625394][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.634567][ T339] device veth1_macvtap entered promiscuous mode [ 22.643219][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.656186][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.682843][ T339] syz-executor (339) used greatest stack depth: 22016 bytes left 2026/07/21 21:46:15 executed programs: 0 [ 23.145028][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.152228][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.159603][ T371] device bridge_slave_0 entered promiscuous mode [ 23.166310][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.173385][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.180684][ T371] device bridge_slave_1 entered promiscuous mode [ 23.218945][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.225969][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.233233][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.240254][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.260945][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.268954][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.276064][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.284663][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.293034][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.300087][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.312769][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.320963][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.327993][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.339102][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.348278][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.365934][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.376156][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.384240][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.393149][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.400778][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.411732][ T371] device veth0_vlan entered promiscuous mode [ 23.422336][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.430466][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.439460][ T371] device veth1_macvtap entered promiscuous mode [ 23.448236][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.455826][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.464810][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.474477][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.482772][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.573180][ T376] loop2: detected capacity change from 0 to 40427 [ 23.579973][ T376] ======================================================= [ 23.579973][ T376] WARNING: The mand mount option has been deprecated and [ 23.579973][ T376] and is ignored by this kernel. Remove the mand [ 23.579973][ T376] option from the mount to silence this warning. [ 23.579973][ T376] ======================================================= [ 23.616951][ T376] F2FS-fs (loop2): invalid crc value [ 23.623792][ T376] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 23.649547][ T376] F2FS-fs (loop2): access invalid blkaddr:15 [ 23.655538][ T376] CPU: 0 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 23.662618][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 23.672657][ T376] Call Trace: [ 23.675912][ T376] [ 23.678819][ T376] __dump_stack+0x21/0x24 [ 23.683135][ T376] dump_stack_lvl+0x110/0x170 [ 23.687783][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 23.692789][ T376] ? f2fs_dirty_node_folio+0x226/0x330 [ 23.698225][ T376] dump_stack+0x15/0x24 [ 23.702358][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 23.707879][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 23.713331][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 23.719468][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 23.724993][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 23.730689][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 23.736915][ T376] ? __kasan_check_write+0x14/0x20 [ 23.742016][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 23.747458][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 23.753418][ T376] ? __dquot_initialize+0x236/0xc80 [ 23.758596][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 23.764726][ T376] ? _raw_spin_lock+0x94/0xf0 [ 23.769385][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 23.774560][ T376] f2fs_truncate+0x1d6/0x3d0 [ 23.779123][ T376] f2fs_evict_inode+0x94d/0x1790 [ 23.784037][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 23.789383][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 23.794821][ T376] ? __kasan_check_write+0x14/0x20 [ 23.799907][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 23.805080][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 23.810426][ T376] evict+0x4c4/0x8c0 [ 23.814299][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 23.819125][ T376] ? _raw_spin_lock+0x94/0xf0 [ 23.823777][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 23.828949][ T376] ? __kasan_check_read+0x11/0x20 [ 23.833949][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 23.838864][ T376] ? __kasan_check_write+0x14/0x20 [ 23.843949][ T376] iput+0x633/0x690 [ 23.847735][ T376] f2fs_fill_super+0x5b38/0x7380 [ 23.852649][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 23.857907][ T376] ? mutex_unlock+0x8f/0x230 [ 23.862473][ T376] ? set_blocksize+0x1cc/0x470 [ 23.867215][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 23.872046][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 23.877312][ T376] mount_bdev+0x29b/0x3d0 [ 23.881628][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 23.886889][ T376] f2fs_mount+0x34/0x40 [ 23.891021][ T376] legacy_get_tree+0xfe/0x1a0 [ 23.895694][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 23.900529][ T376] vfs_get_tree+0x9a/0x270 [ 23.904928][ T376] do_new_mount+0x251/0xb40 [ 23.909410][ T376] ? security_capable+0x99/0xc0 [ 23.914239][ T376] path_mount+0x640/0xfd0 [ 23.918552][ T376] __se_sys_mount+0x320/0x390 [ 23.923212][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 23.927953][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 23.933219][ T376] __x64_sys_mount+0xbf/0xd0 [ 23.937791][ T376] x64_sys_call+0x65d/0x9a0 [ 23.942307][ T376] do_syscall_64+0x4c/0xa0 [ 23.946704][ T376] ? clear_bhb_loop+0x30/0x80 [ 23.951358][ T376] ? clear_bhb_loop+0x30/0x80 [ 23.956011][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 23.961884][ T376] RIP: 0033:0x7ffa06d9f10a [ 23.966282][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 23.985865][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 23.994268][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 24.002215][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 24.010190][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 24.018139][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 24.026084][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 24.034035][ T376] [ 24.040669][ T376] F2FS-fs (loop2): access invalid blkaddr:9 [ 24.046617][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 24.053712][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 24.063747][ T376] Call Trace: [ 24.067030][ T376] [ 24.069942][ T376] __dump_stack+0x21/0x24 [ 24.074254][ T376] dump_stack_lvl+0x110/0x170 [ 24.078907][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 24.083909][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 24.089345][ T376] dump_stack+0x15/0x24 [ 24.093479][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 24.099002][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 24.104435][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 24.110573][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 24.116106][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 24.121805][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 24.128034][ T376] ? __kasan_check_write+0x14/0x20 [ 24.133125][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 24.138570][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 24.144534][ T376] ? __dquot_initialize+0x236/0xc80 [ 24.149716][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 24.155855][ T376] ? _raw_spin_lock+0x94/0xf0 [ 24.160516][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 24.165691][ T376] f2fs_truncate+0x1d6/0x3d0 [ 24.170260][ T376] f2fs_evict_inode+0x94d/0x1790 [ 24.175183][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 24.180533][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 24.185977][ T376] ? __kasan_check_write+0x14/0x20 [ 24.191067][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 24.196247][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 24.201604][ T376] evict+0x4c4/0x8c0 [ 24.205483][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 24.210318][ T376] ? _raw_spin_lock+0x94/0xf0 [ 24.214979][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 24.220157][ T376] ? __kasan_check_read+0x11/0x20 [ 24.225159][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 24.230075][ T376] ? __kasan_check_write+0x14/0x20 [ 24.235166][ T376] iput+0x633/0x690 [ 24.238961][ T376] f2fs_fill_super+0x5b38/0x7380 [ 24.243883][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 24.249151][ T376] ? mutex_unlock+0x8f/0x230 [ 24.253724][ T376] ? set_blocksize+0x1cc/0x470 [ 24.258489][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 24.263317][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 24.268584][ T376] mount_bdev+0x29b/0x3d0 [ 24.272897][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 24.278161][ T376] f2fs_mount+0x34/0x40 [ 24.282298][ T376] legacy_get_tree+0xfe/0x1a0 [ 24.286956][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 24.291788][ T376] vfs_get_tree+0x9a/0x270 [ 24.296183][ T376] do_new_mount+0x251/0xb40 [ 24.300668][ T376] ? security_capable+0x99/0xc0 [ 24.305506][ T376] path_mount+0x640/0xfd0 [ 24.309818][ T376] __se_sys_mount+0x320/0x390 [ 24.314474][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 24.319215][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 24.324483][ T376] __x64_sys_mount+0xbf/0xd0 [ 24.329049][ T376] x64_sys_call+0x65d/0x9a0 [ 24.333533][ T376] do_syscall_64+0x4c/0xa0 [ 24.337932][ T376] ? clear_bhb_loop+0x30/0x80 [ 24.342589][ T376] ? clear_bhb_loop+0x30/0x80 [ 24.347241][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 24.353121][ T376] RIP: 0033:0x7ffa06d9f10a [ 24.357515][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.377098][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 24.385491][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 24.393440][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 24.401389][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 24.409339][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 24.417291][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 24.425246][ T376] [ 24.432795][ T376] F2FS-fs (loop2): access invalid blkaddr:262144 [ 24.439919][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 24.447034][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 24.457063][ T376] Call Trace: [ 24.460318][ T376] [ 24.463225][ T376] __dump_stack+0x21/0x24 [ 24.467531][ T376] dump_stack_lvl+0x110/0x170 [ 24.472183][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 24.477181][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 24.482613][ T376] dump_stack+0x15/0x24 [ 24.486748][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 24.492272][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 24.497726][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 24.503864][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 24.509395][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 24.515106][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 24.521323][ T376] ? __kasan_check_write+0x14/0x20 [ 24.526406][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 24.531837][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 24.537794][ T376] ? __dquot_initialize+0x236/0xc80 [ 24.542987][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 24.549112][ T376] ? _raw_spin_lock+0x94/0xf0 [ 24.553763][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 24.558928][ T376] f2fs_truncate+0x1d6/0x3d0 [ 24.563487][ T376] f2fs_evict_inode+0x94d/0x1790 [ 24.568397][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 24.573741][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 24.579172][ T376] ? __kasan_check_write+0x14/0x20 [ 24.584254][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 24.589431][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 24.594779][ T376] evict+0x4c4/0x8c0 [ 24.598651][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 24.603495][ T376] ? _raw_spin_lock+0x94/0xf0 [ 24.608144][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 24.613313][ T376] ? __kasan_check_read+0x11/0x20 [ 24.618308][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 24.623218][ T376] ? __kasan_check_write+0x14/0x20 [ 24.628314][ T376] iput+0x633/0x690 [ 24.632098][ T376] f2fs_fill_super+0x5b38/0x7380 [ 24.637011][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 24.642267][ T376] ? mutex_unlock+0x8f/0x230 [ 24.646835][ T376] ? set_blocksize+0x1cc/0x470 [ 24.651573][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 24.656393][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 24.661650][ T376] mount_bdev+0x29b/0x3d0 [ 24.665957][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 24.671213][ T376] f2fs_mount+0x34/0x40 [ 24.675344][ T376] legacy_get_tree+0xfe/0x1a0 [ 24.679997][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 24.684818][ T376] vfs_get_tree+0x9a/0x270 [ 24.689204][ T376] do_new_mount+0x251/0xb40 [ 24.693681][ T376] ? security_capable+0x99/0xc0 [ 24.698501][ T376] path_mount+0x640/0xfd0 [ 24.702807][ T376] __se_sys_mount+0x320/0x390 [ 24.707456][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 24.712196][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 24.717458][ T376] __x64_sys_mount+0xbf/0xd0 [ 24.722018][ T376] x64_sys_call+0x65d/0x9a0 [ 24.726494][ T376] do_syscall_64+0x4c/0xa0 [ 24.730896][ T376] ? clear_bhb_loop+0x30/0x80 [ 24.735544][ T376] ? clear_bhb_loop+0x30/0x80 [ 24.740193][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 24.746074][ T376] RIP: 0033:0x7ffa06d9f10a [ 24.750461][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.770038][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 24.778423][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 24.786366][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 24.794306][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 24.802251][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 24.810201][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 24.818150][ T376] [ 24.823054][ T376] F2FS-fs (loop2): access invalid blkaddr:65536 [ 24.829410][ T376] CPU: 0 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 24.836523][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 24.846558][ T376] Call Trace: [ 24.849818][ T376] [ 24.852729][ T376] __dump_stack+0x21/0x24 [ 24.857034][ T376] dump_stack_lvl+0x110/0x170 [ 24.861691][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 24.866687][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 24.872120][ T376] dump_stack+0x15/0x24 [ 24.876251][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 24.881778][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 24.887210][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 24.893349][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 24.898883][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 24.904580][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 24.910799][ T376] ? __kasan_check_write+0x14/0x20 [ 24.915887][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 24.921325][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 24.927279][ T376] ? __dquot_initialize+0x236/0xc80 [ 24.932451][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 24.938581][ T376] ? _raw_spin_lock+0x94/0xf0 [ 24.943237][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 24.948416][ T376] f2fs_truncate+0x1d6/0x3d0 [ 24.952978][ T376] f2fs_evict_inode+0x94d/0x1790 [ 24.957889][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 24.963236][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 24.968671][ T376] ? __kasan_check_write+0x14/0x20 [ 24.973754][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 24.978930][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 24.984281][ T376] evict+0x4c4/0x8c0 [ 24.988167][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 24.993000][ T376] ? _raw_spin_lock+0x94/0xf0 [ 24.997655][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 25.002842][ T376] ? __kasan_check_read+0x11/0x20 [ 25.007858][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 25.012787][ T376] ? __kasan_check_write+0x14/0x20 [ 25.017883][ T376] iput+0x633/0x690 [ 25.021689][ T376] f2fs_fill_super+0x5b38/0x7380 [ 25.026621][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 25.031885][ T376] ? mutex_unlock+0x8f/0x230 [ 25.036465][ T376] ? set_blocksize+0x1cc/0x470 [ 25.041215][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 25.046049][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 25.051313][ T376] mount_bdev+0x29b/0x3d0 [ 25.055627][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 25.060894][ T376] f2fs_mount+0x34/0x40 [ 25.065032][ T376] legacy_get_tree+0xfe/0x1a0 [ 25.069689][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 25.074514][ T376] vfs_get_tree+0x9a/0x270 [ 25.078906][ T376] do_new_mount+0x251/0xb40 [ 25.083394][ T376] ? security_capable+0x99/0xc0 [ 25.088227][ T376] path_mount+0x640/0xfd0 [ 25.092537][ T376] __se_sys_mount+0x320/0x390 [ 25.097188][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 25.101928][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 25.107194][ T376] __x64_sys_mount+0xbf/0xd0 [ 25.111759][ T376] x64_sys_call+0x65d/0x9a0 [ 25.116242][ T376] do_syscall_64+0x4c/0xa0 [ 25.120642][ T376] ? clear_bhb_loop+0x30/0x80 [ 25.125293][ T376] ? clear_bhb_loop+0x30/0x80 [ 25.129948][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 25.135825][ T376] RIP: 0033:0x7ffa06d9f10a [ 25.140216][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.159796][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 25.168271][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 25.176223][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 25.184171][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 25.192119][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 25.200068][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 25.208026][ T376] [ 25.212361][ T376] F2FS-fs (loop2): access invalid blkaddr:2 [ 25.218433][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 25.225610][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 25.235642][ T376] Call Trace: [ 25.238901][ T376] [ 25.241806][ T376] __dump_stack+0x21/0x24 [ 25.246112][ T376] dump_stack_lvl+0x110/0x170 [ 25.250761][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 25.255763][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 25.261194][ T376] dump_stack+0x15/0x24 [ 25.265321][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 25.270842][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 25.276283][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 25.282423][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 25.287959][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 25.293661][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 25.299905][ T376] ? __kasan_check_write+0x14/0x20 [ 25.304993][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 25.310434][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 25.316395][ T376] ? __dquot_initialize+0x236/0xc80 [ 25.321573][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 25.327705][ T376] ? _raw_spin_lock+0x94/0xf0 [ 25.332358][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 25.337531][ T376] f2fs_truncate+0x1d6/0x3d0 [ 25.342098][ T376] f2fs_evict_inode+0x94d/0x1790 [ 25.347013][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 25.352357][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 25.357792][ T376] ? __kasan_check_write+0x14/0x20 [ 25.362888][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 25.368061][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 25.373406][ T376] evict+0x4c4/0x8c0 [ 25.377276][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 25.382100][ T376] ? _raw_spin_lock+0x94/0xf0 [ 25.386754][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 25.391928][ T376] ? __kasan_check_read+0x11/0x20 [ 25.396926][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 25.401837][ T376] ? __kasan_check_write+0x14/0x20 [ 25.406918][ T376] iput+0x633/0x690 [ 25.410709][ T376] f2fs_fill_super+0x5b38/0x7380 [ 25.415624][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 25.420879][ T376] ? mutex_unlock+0x8f/0x230 [ 25.425449][ T376] ? set_blocksize+0x1cc/0x470 [ 25.430191][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 25.435012][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 25.440274][ T376] mount_bdev+0x29b/0x3d0 [ 25.444580][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 25.449834][ T376] f2fs_mount+0x34/0x40 [ 25.453961][ T376] legacy_get_tree+0xfe/0x1a0 [ 25.458611][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 25.463432][ T376] vfs_get_tree+0x9a/0x270 [ 25.467825][ T376] do_new_mount+0x251/0xb40 [ 25.472320][ T376] ? security_capable+0x99/0xc0 [ 25.477155][ T376] path_mount+0x640/0xfd0 [ 25.481462][ T376] __se_sys_mount+0x320/0x390 [ 25.486113][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 25.490846][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 25.496208][ T376] __x64_sys_mount+0xbf/0xd0 [ 25.500784][ T376] x64_sys_call+0x65d/0x9a0 [ 25.505273][ T376] do_syscall_64+0x4c/0xa0 [ 25.509667][ T376] ? clear_bhb_loop+0x30/0x80 [ 25.514317][ T376] ? clear_bhb_loop+0x30/0x80 [ 25.518968][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 25.524838][ T376] RIP: 0033:0x7ffa06d9f10a [ 25.529226][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.548810][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 25.557196][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 25.565149][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 25.573094][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 25.581038][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 25.588982][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 25.596930][ T376] [ 25.602039][ T376] F2FS-fs (loop2): access invalid blkaddr:768 [ 25.608163][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 25.615246][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 25.625277][ T376] Call Trace: [ 25.628531][ T376] [ 25.631437][ T376] __dump_stack+0x21/0x24 [ 25.635744][ T376] dump_stack_lvl+0x110/0x170 [ 25.640402][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 25.645399][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 25.650831][ T376] dump_stack+0x15/0x24 [ 25.654960][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 25.660481][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 25.665917][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 25.672051][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 25.677591][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 25.683285][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 25.689501][ T376] ? __kasan_check_write+0x14/0x20 [ 25.694587][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 25.700023][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 25.705978][ T376] ? __dquot_initialize+0x236/0xc80 [ 25.711155][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 25.717288][ T376] ? _raw_spin_lock+0x94/0xf0 [ 25.721942][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 25.727202][ T376] f2fs_truncate+0x1d6/0x3d0 [ 25.731767][ T376] f2fs_evict_inode+0x94d/0x1790 [ 25.736695][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 25.742047][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 25.747488][ T376] ? __kasan_check_write+0x14/0x20 [ 25.752575][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 25.757754][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 25.763106][ T376] evict+0x4c4/0x8c0 [ 25.766984][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 25.771815][ T376] ? _raw_spin_lock+0x94/0xf0 [ 25.776470][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 25.781646][ T376] ? __kasan_check_read+0x11/0x20 [ 25.786646][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 25.791560][ T376] ? __kasan_check_write+0x14/0x20 [ 25.796652][ T376] iput+0x633/0x690 [ 25.800444][ T376] f2fs_fill_super+0x5b38/0x7380 [ 25.805362][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 25.810622][ T376] ? mutex_unlock+0x8f/0x230 [ 25.815195][ T376] ? set_blocksize+0x1cc/0x470 [ 25.819939][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 25.824765][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 25.830026][ T376] mount_bdev+0x29b/0x3d0 [ 25.834337][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 25.839596][ T376] f2fs_mount+0x34/0x40 [ 25.843727][ T376] legacy_get_tree+0xfe/0x1a0 [ 25.848388][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 25.853228][ T376] vfs_get_tree+0x9a/0x270 [ 25.857637][ T376] do_new_mount+0x251/0xb40 [ 25.862131][ T376] ? security_capable+0x99/0xc0 [ 25.866970][ T376] path_mount+0x640/0xfd0 [ 25.871291][ T376] __se_sys_mount+0x320/0x390 [ 25.875948][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 25.880689][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 25.885956][ T376] __x64_sys_mount+0xbf/0xd0 [ 25.890528][ T376] x64_sys_call+0x65d/0x9a0 [ 25.895023][ T376] do_syscall_64+0x4c/0xa0 [ 25.899423][ T376] ? clear_bhb_loop+0x30/0x80 [ 25.904080][ T376] ? clear_bhb_loop+0x30/0x80 [ 25.908732][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 25.914607][ T376] RIP: 0033:0x7ffa06d9f10a [ 25.918999][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.938593][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 25.946991][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 25.954940][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 25.962902][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 25.970855][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 25.978807][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 25.986765][ T376] [ 25.990315][ T376] F2FS-fs (loop2): access invalid blkaddr:33554944 [ 25.996823][ T376] CPU: 0 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 26.003906][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 26.013932][ T376] Call Trace: [ 26.017187][ T376] [ 26.020091][ T376] __dump_stack+0x21/0x24 [ 26.024397][ T376] dump_stack_lvl+0x110/0x170 [ 26.029056][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 26.034055][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 26.039487][ T376] dump_stack+0x15/0x24 [ 26.043634][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 26.049168][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 26.054606][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 26.060736][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 26.066256][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 26.071951][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 26.078191][ T376] ? __kasan_check_write+0x14/0x20 [ 26.083279][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 26.088711][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 26.094664][ T376] ? __dquot_initialize+0x236/0xc80 [ 26.099834][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 26.105965][ T376] ? _raw_spin_lock+0x94/0xf0 [ 26.110623][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 26.115791][ T376] f2fs_truncate+0x1d6/0x3d0 [ 26.120348][ T376] f2fs_evict_inode+0x94d/0x1790 [ 26.125259][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 26.130599][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 26.136035][ T376] ? __kasan_check_write+0x14/0x20 [ 26.141121][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 26.146293][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 26.151633][ T376] evict+0x4c4/0x8c0 [ 26.155505][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 26.160326][ T376] ? _raw_spin_lock+0x94/0xf0 [ 26.164989][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 26.170172][ T376] ? __kasan_check_read+0x11/0x20 [ 26.175174][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 26.180089][ T376] ? __kasan_check_write+0x14/0x20 [ 26.185172][ T376] iput+0x633/0x690 [ 26.188954][ T376] f2fs_fill_super+0x5b38/0x7380 [ 26.193872][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 26.199127][ T376] ? mutex_unlock+0x8f/0x230 [ 26.203692][ T376] ? set_blocksize+0x1cc/0x470 [ 26.208431][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 26.213254][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 26.218509][ T376] mount_bdev+0x29b/0x3d0 [ 26.222813][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 26.228071][ T376] f2fs_mount+0x34/0x40 [ 26.232199][ T376] legacy_get_tree+0xfe/0x1a0 [ 26.236857][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 26.241677][ T376] vfs_get_tree+0x9a/0x270 [ 26.246062][ T376] do_new_mount+0x251/0xb40 [ 26.250538][ T376] ? security_capable+0x99/0xc0 [ 26.255362][ T376] path_mount+0x640/0xfd0 [ 26.259669][ T376] __se_sys_mount+0x320/0x390 [ 26.264316][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 26.269069][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 26.274344][ T376] __x64_sys_mount+0xbf/0xd0 [ 26.278915][ T376] x64_sys_call+0x65d/0x9a0 [ 26.283396][ T376] do_syscall_64+0x4c/0xa0 [ 26.287786][ T376] ? clear_bhb_loop+0x30/0x80 [ 26.292445][ T376] ? clear_bhb_loop+0x30/0x80 [ 26.297092][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 26.302959][ T376] RIP: 0033:0x7ffa06d9f10a [ 26.307345][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.326921][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 26.335304][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 26.343246][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 26.351188][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 26.359130][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 26.367072][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 26.375020][ T376] [ 26.379124][ T376] F2FS-fs (loop2): access invalid blkaddr:3977478474 [ 26.387165][ T376] CPU: 0 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 26.394262][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 26.404293][ T376] Call Trace: [ 26.407550][ T376] [ 26.410454][ T376] __dump_stack+0x21/0x24 [ 26.414760][ T376] dump_stack_lvl+0x110/0x170 [ 26.419410][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 26.424409][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 26.429847][ T376] dump_stack+0x15/0x24 [ 26.434032][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 26.439557][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 26.444991][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 26.451130][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 26.456654][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 26.462367][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 26.468582][ T376] ? __kasan_check_write+0x14/0x20 [ 26.473665][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 26.479102][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 26.485056][ T376] ? __dquot_initialize+0x236/0xc80 [ 26.490228][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 26.496355][ T376] ? _raw_spin_lock+0x94/0xf0 [ 26.501010][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 26.506179][ T376] f2fs_truncate+0x1d6/0x3d0 [ 26.510745][ T376] f2fs_evict_inode+0x94d/0x1790 [ 26.515660][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 26.521008][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 26.526441][ T376] ? __kasan_check_write+0x14/0x20 [ 26.531525][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 26.536697][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 26.542041][ T376] evict+0x4c4/0x8c0 [ 26.545915][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 26.550758][ T376] ? _raw_spin_lock+0x94/0xf0 [ 26.555415][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 26.560674][ T376] ? __kasan_check_read+0x11/0x20 [ 26.565672][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 26.570580][ T376] ? __kasan_check_write+0x14/0x20 [ 26.575661][ T376] iput+0x633/0x690 [ 26.579445][ T376] f2fs_fill_super+0x5b38/0x7380 [ 26.584358][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 26.589614][ T376] ? mutex_unlock+0x8f/0x230 [ 26.594182][ T376] ? set_blocksize+0x1cc/0x470 [ 26.598925][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 26.603749][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 26.609005][ T376] mount_bdev+0x29b/0x3d0 [ 26.613310][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 26.618572][ T376] f2fs_mount+0x34/0x40 [ 26.622699][ T376] legacy_get_tree+0xfe/0x1a0 [ 26.627350][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 26.632170][ T376] vfs_get_tree+0x9a/0x270 [ 26.636556][ T376] do_new_mount+0x251/0xb40 [ 26.641032][ T376] ? security_capable+0x99/0xc0 [ 26.645878][ T376] path_mount+0x640/0xfd0 [ 26.650197][ T376] __se_sys_mount+0x320/0x390 [ 26.654850][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 26.659590][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 26.664853][ T376] __x64_sys_mount+0xbf/0xd0 [ 26.669415][ T376] x64_sys_call+0x65d/0x9a0 [ 26.673895][ T376] do_syscall_64+0x4c/0xa0 [ 26.678288][ T376] ? clear_bhb_loop+0x30/0x80 [ 26.682941][ T376] ? clear_bhb_loop+0x30/0x80 [ 26.687585][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 26.693451][ T376] RIP: 0033:0x7ffa06d9f10a [ 26.697843][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.717420][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 26.725806][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 26.733750][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 26.741692][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 26.749638][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 26.757579][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 26.765524][ T376] [ 26.771202][ T376] F2FS-fs (loop2): access invalid blkaddr:5 [ 26.777101][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 26.784192][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 26.794224][ T376] Call Trace: [ 26.797483][ T376] [ 26.800394][ T376] __dump_stack+0x21/0x24 [ 26.804732][ T376] dump_stack_lvl+0x110/0x170 [ 26.809389][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 26.814398][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 26.819837][ T376] dump_stack+0x15/0x24 [ 26.823969][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 26.829496][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 26.834938][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 26.841076][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 26.846605][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 26.852309][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 26.858539][ T376] ? __kasan_check_write+0x14/0x20 [ 26.863631][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 26.869072][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 26.875046][ T376] ? __dquot_initialize+0x236/0xc80 [ 26.880243][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 26.886389][ T376] ? _raw_spin_lock+0x94/0xf0 [ 26.891062][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 26.896250][ T376] f2fs_truncate+0x1d6/0x3d0 [ 26.900828][ T376] f2fs_evict_inode+0x94d/0x1790 [ 26.905761][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 26.911118][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 26.916564][ T376] ? __kasan_check_write+0x14/0x20 [ 26.921659][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 26.926848][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 26.932213][ T376] evict+0x4c4/0x8c0 [ 26.936099][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 26.940932][ T376] ? _raw_spin_lock+0x94/0xf0 [ 26.945594][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 26.950776][ T376] ? __kasan_check_read+0x11/0x20 [ 26.955787][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 26.960707][ T376] ? __kasan_check_write+0x14/0x20 [ 26.965816][ T376] iput+0x633/0x690 [ 26.969610][ T376] f2fs_fill_super+0x5b38/0x7380 [ 26.974532][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 26.979796][ T376] ? mutex_unlock+0x8f/0x230 [ 26.984377][ T376] ? set_blocksize+0x1cc/0x470 [ 26.989128][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 26.993957][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 26.999220][ T376] mount_bdev+0x29b/0x3d0 [ 27.003535][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 27.008797][ T376] f2fs_mount+0x34/0x40 [ 27.012933][ T376] legacy_get_tree+0xfe/0x1a0 [ 27.017602][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 27.022448][ T376] vfs_get_tree+0x9a/0x270 [ 27.026849][ T376] do_new_mount+0x251/0xb40 [ 27.031342][ T376] ? security_capable+0x99/0xc0 [ 27.036181][ T376] path_mount+0x640/0xfd0 [ 27.040497][ T376] __se_sys_mount+0x320/0x390 [ 27.045153][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 27.049895][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 27.055166][ T376] __x64_sys_mount+0xbf/0xd0 [ 27.059734][ T376] x64_sys_call+0x65d/0x9a0 [ 27.064221][ T376] do_syscall_64+0x4c/0xa0 [ 27.068627][ T376] ? clear_bhb_loop+0x30/0x80 [ 27.073298][ T376] ? clear_bhb_loop+0x30/0x80 [ 27.077960][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 27.083840][ T376] RIP: 0033:0x7ffa06d9f10a [ 27.088234][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.107820][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 27.116217][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 27.124172][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 27.132129][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 27.140093][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 27.148055][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 27.156017][ T376] [ 27.159442][ T376] F2FS-fs (loop2): access invalid blkaddr:2365652997 [ 27.166123][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 27.173206][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 27.183235][ T376] Call Trace: [ 27.186488][ T376] [ 27.189395][ T376] __dump_stack+0x21/0x24 [ 27.193711][ T376] dump_stack_lvl+0x110/0x170 [ 27.198364][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 27.203363][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 27.208881][ T376] dump_stack+0x15/0x24 [ 27.213009][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 27.218531][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 27.223964][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 27.230098][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 27.235622][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 27.241316][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 27.247535][ T376] ? __kasan_check_write+0x14/0x20 [ 27.252618][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 27.258060][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 27.264030][ T376] ? __dquot_initialize+0x236/0xc80 [ 27.269216][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 27.276062][ T376] ? _raw_spin_lock+0x94/0xf0 [ 27.280734][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 27.285907][ T376] f2fs_truncate+0x1d6/0x3d0 [ 27.290470][ T376] f2fs_evict_inode+0x94d/0x1790 [ 27.295382][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 27.300728][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 27.306163][ T376] ? __kasan_check_write+0x14/0x20 [ 27.311249][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 27.316423][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 27.321769][ T376] evict+0x4c4/0x8c0 [ 27.325643][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 27.330469][ T376] ? _raw_spin_lock+0x94/0xf0 [ 27.335123][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 27.340294][ T376] ? __kasan_check_read+0x11/0x20 [ 27.345291][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 27.350202][ T376] ? __kasan_check_write+0x14/0x20 [ 27.355285][ T376] iput+0x633/0x690 [ 27.359067][ T376] f2fs_fill_super+0x5b38/0x7380 [ 27.363983][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 27.369241][ T376] ? mutex_unlock+0x8f/0x230 [ 27.373803][ T376] ? set_blocksize+0x1cc/0x470 [ 27.378542][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 27.383364][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 27.388625][ T376] mount_bdev+0x29b/0x3d0 [ 27.392928][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 27.398181][ T376] f2fs_mount+0x34/0x40 [ 27.402308][ T376] legacy_get_tree+0xfe/0x1a0 [ 27.406959][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 27.411780][ T376] vfs_get_tree+0x9a/0x270 [ 27.416169][ T376] do_new_mount+0x251/0xb40 [ 27.420648][ T376] ? security_capable+0x99/0xc0 [ 27.425480][ T376] path_mount+0x640/0xfd0 [ 27.429787][ T376] __se_sys_mount+0x320/0x390 [ 27.434434][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 27.439171][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 27.444431][ T376] __x64_sys_mount+0xbf/0xd0 [ 27.448993][ T376] x64_sys_call+0x65d/0x9a0 [ 27.453468][ T376] do_syscall_64+0x4c/0xa0 [ 27.457862][ T376] ? clear_bhb_loop+0x30/0x80 [ 27.462511][ T376] ? clear_bhb_loop+0x30/0x80 [ 27.467157][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 27.473026][ T376] RIP: 0033:0x7ffa06d9f10a [ 27.477419][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.496995][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 27.505384][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 27.513330][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 27.521277][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 27.529220][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 27.537164][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 27.545111][ T376] [ 27.548465][ T376] F2FS-fs (loop2): access invalid blkaddr:105238222 [ 27.555056][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 27.562139][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 27.572173][ T376] Call Trace: [ 27.575428][ T376] [ 27.578351][ T376] __dump_stack+0x21/0x24 [ 27.582660][ T376] dump_stack_lvl+0x110/0x170 [ 27.587313][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 27.592308][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 27.597741][ T376] dump_stack+0x15/0x24 [ 27.601870][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 27.607393][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 27.612824][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 27.618955][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 27.624477][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 27.630173][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 27.636396][ T376] ? __kasan_check_write+0x14/0x20 [ 27.641481][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 27.646917][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 27.652872][ T376] ? __dquot_initialize+0x236/0xc80 [ 27.658045][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 27.664172][ T376] ? _raw_spin_lock+0x94/0xf0 [ 27.668823][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 27.674002][ T376] f2fs_truncate+0x1d6/0x3d0 [ 27.678567][ T376] f2fs_evict_inode+0x94d/0x1790 [ 27.683485][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 27.688834][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 27.694280][ T376] ? __kasan_check_write+0x14/0x20 [ 27.699367][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 27.704547][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 27.709895][ T376] evict+0x4c4/0x8c0 [ 27.713776][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 27.718609][ T376] ? _raw_spin_lock+0x94/0xf0 [ 27.723265][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 27.728443][ T376] ? __kasan_check_read+0x11/0x20 [ 27.733445][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 27.738361][ T376] ? __kasan_check_write+0x14/0x20 [ 27.743450][ T376] iput+0x633/0x690 [ 27.747240][ T376] f2fs_fill_super+0x5b38/0x7380 [ 27.752158][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 27.757418][ T376] ? mutex_unlock+0x8f/0x230 [ 27.761990][ T376] ? set_blocksize+0x1cc/0x470 [ 27.766736][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 27.771560][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 27.776822][ T376] mount_bdev+0x29b/0x3d0 [ 27.781135][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 27.786395][ T376] f2fs_mount+0x34/0x40 [ 27.790530][ T376] legacy_get_tree+0xfe/0x1a0 [ 27.795199][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 27.800025][ T376] vfs_get_tree+0x9a/0x270 [ 27.804420][ T376] do_new_mount+0x251/0xb40 [ 27.808905][ T376] ? security_capable+0x99/0xc0 [ 27.813737][ T376] path_mount+0x640/0xfd0 [ 27.818048][ T376] __se_sys_mount+0x320/0x390 [ 27.822700][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 27.827438][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 27.832704][ T376] __x64_sys_mount+0xbf/0xd0 [ 27.837268][ T376] x64_sys_call+0x65d/0x9a0 [ 27.841747][ T376] do_syscall_64+0x4c/0xa0 [ 27.846145][ T376] ? clear_bhb_loop+0x30/0x80 [ 27.850798][ T376] ? clear_bhb_loop+0x30/0x80 [ 27.855448][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 27.861320][ T376] RIP: 0033:0x7ffa06d9f10a [ 27.865711][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.885291][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 27.893694][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 27.901651][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 27.909611][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 27.917566][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 27.925519][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 27.933476][ T376] [ 27.937071][ T376] F2FS-fs (loop2): access invalid blkaddr:83886080 [ 27.943806][ T376] CPU: 0 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 27.950908][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 27.960940][ T376] Call Trace: [ 27.964193][ T376] [ 27.967097][ T376] __dump_stack+0x21/0x24 [ 27.971401][ T376] dump_stack_lvl+0x110/0x170 [ 27.976051][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 27.981048][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 27.986478][ T376] dump_stack+0x15/0x24 [ 27.990609][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 27.996131][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 28.001569][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 28.007701][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 28.013221][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 28.018916][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 28.025140][ T376] ? __kasan_check_write+0x14/0x20 [ 28.030244][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 28.035693][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 28.041756][ T376] ? __dquot_initialize+0x236/0xc80 [ 28.046938][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 28.053068][ T376] ? _raw_spin_lock+0x94/0xf0 [ 28.057725][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 28.062896][ T376] f2fs_truncate+0x1d6/0x3d0 [ 28.067459][ T376] f2fs_evict_inode+0x94d/0x1790 [ 28.072370][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 28.077724][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 28.083155][ T376] ? __kasan_check_write+0x14/0x20 [ 28.088238][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 28.093407][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 28.098748][ T376] evict+0x4c4/0x8c0 [ 28.102620][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 28.107440][ T376] ? _raw_spin_lock+0x94/0xf0 [ 28.112105][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 28.117277][ T376] ? __kasan_check_read+0x11/0x20 [ 28.122272][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 28.127183][ T376] ? __kasan_check_write+0x14/0x20 [ 28.132264][ T376] iput+0x633/0x690 [ 28.136048][ T376] f2fs_fill_super+0x5b38/0x7380 [ 28.140961][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 28.146223][ T376] ? mutex_unlock+0x8f/0x230 [ 28.150791][ T376] ? set_blocksize+0x1cc/0x470 [ 28.155539][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 28.160363][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 28.165630][ T376] mount_bdev+0x29b/0x3d0 [ 28.169941][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 28.175202][ T376] f2fs_mount+0x34/0x40 [ 28.179329][ T376] legacy_get_tree+0xfe/0x1a0 [ 28.183978][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 28.188801][ T376] vfs_get_tree+0x9a/0x270 [ 28.193187][ T376] do_new_mount+0x251/0xb40 [ 28.197664][ T376] ? security_capable+0x99/0xc0 [ 28.202489][ T376] path_mount+0x640/0xfd0 [ 28.206796][ T376] __se_sys_mount+0x320/0x390 [ 28.211442][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 28.216175][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 28.221434][ T376] __x64_sys_mount+0xbf/0xd0 [ 28.225991][ T376] x64_sys_call+0x65d/0x9a0 [ 28.230464][ T376] do_syscall_64+0x4c/0xa0 [ 28.234855][ T376] ? clear_bhb_loop+0x30/0x80 [ 28.239502][ T376] ? clear_bhb_loop+0x30/0x80 [ 28.244151][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 28.250017][ T376] RIP: 0033:0x7ffa06d9f10a [ 28.254405][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.273979][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 28.282372][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 28.290318][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 28.298260][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 28.306206][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 28.314164][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 28.322112][ T376] [ 28.327761][ T376] F2FS-fs (loop2): access invalid blkaddr:1792 [ 28.334000][ T376] CPU: 0 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 28.341098][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 28.351148][ T376] Call Trace: [ 28.354404][ T376] [ 28.357314][ T376] __dump_stack+0x21/0x24 [ 28.361626][ T376] dump_stack_lvl+0x110/0x170 [ 28.366277][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 28.371276][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 28.376712][ T376] dump_stack+0x15/0x24 [ 28.380846][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 28.386371][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 28.391809][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 28.397945][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 28.403476][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 28.409177][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 28.415418][ T376] ? __kasan_check_write+0x14/0x20 [ 28.420508][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 28.425946][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 28.431908][ T376] ? __dquot_initialize+0x236/0xc80 [ 28.437085][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 28.443217][ T376] ? _raw_spin_lock+0x94/0xf0 [ 28.447874][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 28.453047][ T376] f2fs_truncate+0x1d6/0x3d0 [ 28.457612][ T376] f2fs_evict_inode+0x94d/0x1790 [ 28.462526][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 28.467873][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 28.473309][ T376] ? __kasan_check_write+0x14/0x20 [ 28.478396][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 28.483574][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 28.488930][ T376] evict+0x4c4/0x8c0 [ 28.492810][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 28.497637][ T376] ? _raw_spin_lock+0x94/0xf0 [ 28.502292][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 28.507468][ T376] ? __kasan_check_read+0x11/0x20 [ 28.512470][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 28.517392][ T376] ? __kasan_check_write+0x14/0x20 [ 28.522499][ T376] iput+0x633/0x690 [ 28.526301][ T376] f2fs_fill_super+0x5b38/0x7380 [ 28.531227][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 28.536494][ T376] ? mutex_unlock+0x8f/0x230 [ 28.541069][ T376] ? set_blocksize+0x1cc/0x470 [ 28.545820][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 28.550644][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 28.555906][ T376] mount_bdev+0x29b/0x3d0 [ 28.560215][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 28.565473][ T376] f2fs_mount+0x34/0x40 [ 28.569601][ T376] legacy_get_tree+0xfe/0x1a0 [ 28.574258][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 28.579085][ T376] vfs_get_tree+0x9a/0x270 [ 28.583476][ T376] do_new_mount+0x251/0xb40 [ 28.587959][ T376] ? security_capable+0x99/0xc0 [ 28.592789][ T376] path_mount+0x640/0xfd0 [ 28.597102][ T376] __se_sys_mount+0x320/0x390 [ 28.601754][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 28.606492][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 28.611758][ T376] __x64_sys_mount+0xbf/0xd0 [ 28.616323][ T376] x64_sys_call+0x65d/0x9a0 [ 28.620804][ T376] do_syscall_64+0x4c/0xa0 [ 28.625198][ T376] ? clear_bhb_loop+0x30/0x80 [ 28.629850][ T376] ? clear_bhb_loop+0x30/0x80 [ 28.634500][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 28.640372][ T376] RIP: 0033:0x7ffa06d9f10a [ 28.644762][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.664344][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 28.672731][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 28.680678][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 28.688625][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 28.696571][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 28.704522][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 28.712478][ T376] [ 28.716570][ T376] F2FS-fs (loop2): access invalid blkaddr:46 [ 28.722624][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 28.729706][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 28.739751][ T376] Call Trace: [ 28.743014][ T376] [ 28.745916][ T376] __dump_stack+0x21/0x24 [ 28.750221][ T376] dump_stack_lvl+0x110/0x170 [ 28.754869][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 28.759863][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 28.765292][ T376] dump_stack+0x15/0x24 [ 28.769417][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 28.774937][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 28.780369][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 28.786498][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 28.792016][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 28.797713][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 28.803948][ T376] ? __kasan_check_write+0x14/0x20 [ 28.809071][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 28.814506][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 28.820459][ T376] ? __dquot_initialize+0x236/0xc80 [ 28.825633][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 28.831765][ T376] ? _raw_spin_lock+0x94/0xf0 [ 28.836421][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 28.841588][ T376] f2fs_truncate+0x1d6/0x3d0 [ 28.846150][ T376] f2fs_evict_inode+0x94d/0x1790 [ 28.851059][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 28.856403][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 28.861837][ T376] ? __kasan_check_write+0x14/0x20 [ 28.866920][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 28.872088][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 28.877433][ T376] evict+0x4c4/0x8c0 [ 28.881302][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 28.886125][ T376] ? _raw_spin_lock+0x94/0xf0 [ 28.890776][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 28.895944][ T376] ? __kasan_check_read+0x11/0x20 [ 28.900938][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 28.905847][ T376] ? __kasan_check_write+0x14/0x20 [ 28.910933][ T376] iput+0x633/0x690 [ 28.914744][ T376] f2fs_fill_super+0x5b38/0x7380 [ 28.919667][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 28.924921][ T376] ? mutex_unlock+0x8f/0x230 [ 28.929485][ T376] ? set_blocksize+0x1cc/0x470 [ 28.934224][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 28.939042][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 28.944297][ T376] mount_bdev+0x29b/0x3d0 [ 28.948599][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 28.953855][ T376] f2fs_mount+0x34/0x40 [ 28.957979][ T376] legacy_get_tree+0xfe/0x1a0 [ 28.962628][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 28.967447][ T376] vfs_get_tree+0x9a/0x270 [ 28.971832][ T376] do_new_mount+0x251/0xb40 [ 28.976311][ T376] ? security_capable+0x99/0xc0 [ 28.981132][ T376] path_mount+0x640/0xfd0 [ 28.985434][ T376] __se_sys_mount+0x320/0x390 [ 28.990079][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 28.994813][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 29.000073][ T376] __x64_sys_mount+0xbf/0xd0 [ 29.004631][ T376] x64_sys_call+0x65d/0x9a0 [ 29.009104][ T376] do_syscall_64+0x4c/0xa0 [ 29.013496][ T376] ? clear_bhb_loop+0x30/0x80 [ 29.018159][ T376] ? clear_bhb_loop+0x30/0x80 [ 29.022808][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 29.028672][ T376] RIP: 0033:0x7ffa06d9f10a [ 29.033059][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.052640][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 29.061033][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 29.068985][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 29.076933][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 29.084879][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 29.092827][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 29.100780][ T376] [ 29.105355][ T376] F2FS-fs (loop2): Inconsistent error blkaddr:11822, sit bitmap:0 [ 29.113209][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 29.120296][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.130321][ T376] Call Trace: [ 29.133572][ T376] [ 29.136474][ T376] __dump_stack+0x21/0x24 [ 29.140778][ T376] dump_stack_lvl+0x110/0x170 [ 29.145426][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 29.150425][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 29.155875][ T376] dump_stack+0x15/0x24 [ 29.160003][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 29.165524][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 29.170956][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 29.177086][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 29.182622][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 29.188316][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 29.194529][ T376] ? __kasan_check_write+0x14/0x20 [ 29.199614][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 29.205049][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 29.211000][ T376] ? __dquot_initialize+0x236/0xc80 [ 29.216172][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 29.222299][ T376] ? _raw_spin_lock+0x94/0xf0 [ 29.226952][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 29.232121][ T376] f2fs_truncate+0x1d6/0x3d0 [ 29.236682][ T376] f2fs_evict_inode+0x94d/0x1790 [ 29.241590][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 29.246935][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 29.252365][ T376] ? __kasan_check_write+0x14/0x20 [ 29.257450][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.262623][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 29.267966][ T376] evict+0x4c4/0x8c0 [ 29.271853][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 29.276679][ T376] ? _raw_spin_lock+0x94/0xf0 [ 29.281328][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.286498][ T376] ? __kasan_check_read+0x11/0x20 [ 29.291492][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 29.296398][ T376] ? __kasan_check_write+0x14/0x20 [ 29.301478][ T376] iput+0x633/0x690 [ 29.305259][ T376] f2fs_fill_super+0x5b38/0x7380 [ 29.310173][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 29.315430][ T376] ? mutex_unlock+0x8f/0x230 [ 29.319992][ T376] ? set_blocksize+0x1cc/0x470 [ 29.324728][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 29.329554][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 29.334809][ T376] mount_bdev+0x29b/0x3d0 [ 29.339119][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 29.344374][ T376] f2fs_mount+0x34/0x40 [ 29.348499][ T376] legacy_get_tree+0xfe/0x1a0 [ 29.353158][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 29.357977][ T376] vfs_get_tree+0x9a/0x270 [ 29.362366][ T376] do_new_mount+0x251/0xb40 [ 29.366844][ T376] ? security_capable+0x99/0xc0 [ 29.371666][ T376] path_mount+0x640/0xfd0 [ 29.375972][ T376] __se_sys_mount+0x320/0x390 [ 29.380623][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 29.385360][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 29.390619][ T376] __x64_sys_mount+0xbf/0xd0 [ 29.395181][ T376] x64_sys_call+0x65d/0x9a0 [ 29.399656][ T376] do_syscall_64+0x4c/0xa0 [ 29.404047][ T376] ? clear_bhb_loop+0x30/0x80 [ 29.408694][ T376] ? clear_bhb_loop+0x30/0x80 [ 29.413347][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 29.419229][ T376] RIP: 0033:0x7ffa06d9f10a [ 29.423619][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.443198][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 29.451586][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 29.459532][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 29.467477][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 29.475422][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 29.483368][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 29.491318][ T376] [ 29.497046][ T376] F2FS-fs (loop2): access invalid blkaddr:1701603686 [ 29.503996][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 29.511098][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.521130][ T376] Call Trace: [ 29.524388][ T376] [ 29.527298][ T376] __dump_stack+0x21/0x24 [ 29.531788][ T376] dump_stack_lvl+0x110/0x170 [ 29.536453][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 29.541456][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 29.546892][ T376] dump_stack+0x15/0x24 [ 29.551026][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 29.556554][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 29.561992][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 29.568132][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 29.573660][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 29.579362][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 29.585586][ T376] ? __kasan_check_write+0x14/0x20 [ 29.590676][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 29.596116][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 29.602076][ T376] ? __dquot_initialize+0x236/0xc80 [ 29.607254][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 29.613387][ T376] ? _raw_spin_lock+0x94/0xf0 [ 29.618047][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 29.623221][ T376] f2fs_truncate+0x1d6/0x3d0 [ 29.627785][ T376] f2fs_evict_inode+0x94d/0x1790 [ 29.632716][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 29.638067][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 29.643506][ T376] ? __kasan_check_write+0x14/0x20 [ 29.648594][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.653771][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 29.659123][ T376] evict+0x4c4/0x8c0 [ 29.663000][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 29.667830][ T376] ? _raw_spin_lock+0x94/0xf0 [ 29.672486][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.677662][ T376] ? __kasan_check_read+0x11/0x20 [ 29.682662][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 29.687578][ T376] ? __kasan_check_write+0x14/0x20 [ 29.692664][ T376] iput+0x633/0x690 [ 29.696452][ T376] f2fs_fill_super+0x5b38/0x7380 [ 29.701373][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 29.706634][ T376] ? mutex_unlock+0x8f/0x230 [ 29.711203][ T376] ? set_blocksize+0x1cc/0x470 [ 29.715958][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 29.720788][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 29.726058][ T376] mount_bdev+0x29b/0x3d0 [ 29.730366][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 29.735628][ T376] f2fs_mount+0x34/0x40 [ 29.739759][ T376] legacy_get_tree+0xfe/0x1a0 [ 29.744418][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 29.749246][ T376] vfs_get_tree+0x9a/0x270 [ 29.753646][ T376] do_new_mount+0x251/0xb40 [ 29.758128][ T376] ? security_capable+0x99/0xc0 [ 29.762959][ T376] path_mount+0x640/0xfd0 [ 29.767270][ T376] __se_sys_mount+0x320/0x390 [ 29.771922][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 29.776662][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 29.781926][ T376] __x64_sys_mount+0xbf/0xd0 [ 29.786493][ T376] x64_sys_call+0x65d/0x9a0 [ 29.790974][ T376] do_syscall_64+0x4c/0xa0 [ 29.795377][ T376] ? clear_bhb_loop+0x30/0x80 [ 29.800028][ T376] ? clear_bhb_loop+0x30/0x80 [ 29.804682][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 29.810558][ T376] RIP: 0033:0x7ffa06d9f10a [ 29.814951][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.834534][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 29.842922][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 29.850871][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 29.858818][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 29.866766][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 29.874719][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 29.882679][ T376] [ 29.885992][ T376] F2FS-fs (loop2): access invalid blkaddr:48 [ 29.892041][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 29.899127][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.909160][ T376] Call Trace: [ 29.912417][ T376] [ 29.915328][ T376] __dump_stack+0x21/0x24 [ 29.919639][ T376] dump_stack_lvl+0x110/0x170 [ 29.924292][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 29.929292][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 29.934727][ T376] dump_stack+0x15/0x24 [ 29.938859][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 29.944381][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 29.949816][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 29.955946][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 29.961486][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 29.967206][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 29.973422][ T376] ? __kasan_check_write+0x14/0x20 [ 29.978507][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 29.983944][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 29.989900][ T376] ? __dquot_initialize+0x236/0xc80 [ 29.995072][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 30.001203][ T376] ? _raw_spin_lock+0x94/0xf0 [ 30.005864][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 30.011049][ T376] f2fs_truncate+0x1d6/0x3d0 [ 30.015636][ T376] f2fs_evict_inode+0x94d/0x1790 [ 30.020566][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 30.025926][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 30.031370][ T376] ? __kasan_check_write+0x14/0x20 [ 30.036465][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.041655][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 30.047011][ T376] evict+0x4c4/0x8c0 [ 30.050888][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 30.055719][ T376] ? _raw_spin_lock+0x94/0xf0 [ 30.060377][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.065557][ T376] ? __kasan_check_read+0x11/0x20 [ 30.070561][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 30.075485][ T376] ? __kasan_check_write+0x14/0x20 [ 30.080593][ T376] iput+0x633/0x690 [ 30.084391][ T376] f2fs_fill_super+0x5b38/0x7380 [ 30.089313][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 30.094577][ T376] ? mutex_unlock+0x8f/0x230 [ 30.099154][ T376] ? set_blocksize+0x1cc/0x470 [ 30.103910][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 30.108739][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 30.114005][ T376] mount_bdev+0x29b/0x3d0 [ 30.118321][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 30.123587][ T376] f2fs_mount+0x34/0x40 [ 30.127722][ T376] legacy_get_tree+0xfe/0x1a0 [ 30.132383][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 30.137210][ T376] vfs_get_tree+0x9a/0x270 [ 30.141607][ T376] do_new_mount+0x251/0xb40 [ 30.146093][ T376] ? security_capable+0x99/0xc0 [ 30.150923][ T376] path_mount+0x640/0xfd0 [ 30.155324][ T376] __se_sys_mount+0x320/0x390 [ 30.159979][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 30.164719][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 30.169987][ T376] __x64_sys_mount+0xbf/0xd0 [ 30.174553][ T376] x64_sys_call+0x65d/0x9a0 [ 30.179035][ T376] do_syscall_64+0x4c/0xa0 [ 30.183436][ T376] ? clear_bhb_loop+0x30/0x80 [ 30.188092][ T376] ? clear_bhb_loop+0x30/0x80 [ 30.192832][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.198708][ T376] RIP: 0033:0x7ffa06d9f10a [ 30.203105][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.222687][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 30.231088][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 30.239039][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 30.246989][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 30.254941][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 30.262889][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 30.270843][ T376] [ 30.274337][ T376] F2FS-fs (loop2): access invalid blkaddr:1701603686 [ 30.281261][ T376] CPU: 0 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 30.288360][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.298387][ T376] Call Trace: [ 30.301639][ T376] [ 30.304548][ T376] __dump_stack+0x21/0x24 [ 30.308857][ T376] dump_stack_lvl+0x110/0x170 [ 30.313507][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 30.318503][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 30.323944][ T376] dump_stack+0x15/0x24 [ 30.328080][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 30.333622][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 30.339071][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 30.345206][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 30.350730][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 30.356430][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 30.362654][ T376] ? __kasan_check_write+0x14/0x20 [ 30.367744][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 30.373181][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 30.379143][ T376] ? __dquot_initialize+0x236/0xc80 [ 30.384318][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 30.390455][ T376] ? _raw_spin_lock+0x94/0xf0 [ 30.395121][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 30.400308][ T376] f2fs_truncate+0x1d6/0x3d0 [ 30.404877][ T376] f2fs_evict_inode+0x94d/0x1790 [ 30.409809][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 30.415157][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 30.420594][ T376] ? __kasan_check_write+0x14/0x20 [ 30.425697][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.430876][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 30.436228][ T376] evict+0x4c4/0x8c0 [ 30.440105][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 30.445026][ T376] ? _raw_spin_lock+0x94/0xf0 [ 30.449690][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.454875][ T376] ? __kasan_check_read+0x11/0x20 [ 30.459885][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 30.464799][ T376] ? __kasan_check_write+0x14/0x20 [ 30.469887][ T376] iput+0x633/0x690 [ 30.473672][ T376] f2fs_fill_super+0x5b38/0x7380 [ 30.478588][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 30.483846][ T376] ? mutex_unlock+0x8f/0x230 [ 30.488415][ T376] ? set_blocksize+0x1cc/0x470 [ 30.493157][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 30.497984][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 30.503245][ T376] mount_bdev+0x29b/0x3d0 [ 30.507550][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 30.512829][ T376] f2fs_mount+0x34/0x40 [ 30.516971][ T376] legacy_get_tree+0xfe/0x1a0 [ 30.521625][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 30.526451][ T376] vfs_get_tree+0x9a/0x270 [ 30.530856][ T376] do_new_mount+0x251/0xb40 [ 30.535335][ T376] ? security_capable+0x99/0xc0 [ 30.540162][ T376] path_mount+0x640/0xfd0 [ 30.544476][ T376] __se_sys_mount+0x320/0x390 [ 30.549125][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 30.553858][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 30.559119][ T376] __x64_sys_mount+0xbf/0xd0 [ 30.563682][ T376] x64_sys_call+0x65d/0x9a0 [ 30.568158][ T376] do_syscall_64+0x4c/0xa0 [ 30.572549][ T376] ? clear_bhb_loop+0x30/0x80 [ 30.577197][ T376] ? clear_bhb_loop+0x30/0x80 [ 30.581846][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.587734][ T376] RIP: 0033:0x7ffa06d9f10a [ 30.592123][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.611704][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 30.620090][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 30.628040][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 30.635983][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 30.643927][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 30.651872][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 30.659822][ T376] [ 30.663011][ T376] F2FS-fs (loop2): access invalid blkaddr:49 [ 30.669033][ T376] CPU: 0 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 30.676132][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.686166][ T376] Call Trace: [ 30.689421][ T376] [ 30.692328][ T376] __dump_stack+0x21/0x24 [ 30.696647][ T376] dump_stack_lvl+0x110/0x170 [ 30.701296][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 30.706292][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 30.711724][ T376] dump_stack+0x15/0x24 [ 30.715854][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 30.721373][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 30.726807][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 30.732940][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 30.738468][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 30.744162][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 30.750375][ T376] ? __kasan_check_write+0x14/0x20 [ 30.755460][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 30.760895][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 30.766849][ T376] ? __dquot_initialize+0x236/0xc80 [ 30.772019][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 30.778147][ T376] ? _raw_spin_lock+0x94/0xf0 [ 30.782798][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 30.787967][ T376] f2fs_truncate+0x1d6/0x3d0 [ 30.792529][ T376] f2fs_evict_inode+0x94d/0x1790 [ 30.797457][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 30.802803][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 30.808240][ T376] ? __kasan_check_write+0x14/0x20 [ 30.813322][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.818493][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 30.823835][ T376] evict+0x4c4/0x8c0 [ 30.827707][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 30.832532][ T376] ? _raw_spin_lock+0x94/0xf0 [ 30.837184][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.842355][ T376] ? __kasan_check_read+0x11/0x20 [ 30.847351][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 30.852258][ T376] ? __kasan_check_write+0x14/0x20 [ 30.857342][ T376] iput+0x633/0x690 [ 30.861124][ T376] f2fs_fill_super+0x5b38/0x7380 [ 30.866037][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 30.871295][ T376] ? mutex_unlock+0x8f/0x230 [ 30.875870][ T376] ? set_blocksize+0x1cc/0x470 [ 30.880612][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 30.885441][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 30.890695][ T376] mount_bdev+0x29b/0x3d0 [ 30.895001][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 30.900258][ T376] f2fs_mount+0x34/0x40 [ 30.904386][ T376] legacy_get_tree+0xfe/0x1a0 [ 30.909037][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 30.913859][ T376] vfs_get_tree+0x9a/0x270 [ 30.918257][ T376] do_new_mount+0x251/0xb40 [ 30.922736][ T376] ? security_capable+0x99/0xc0 [ 30.927559][ T376] path_mount+0x640/0xfd0 [ 30.931865][ T376] __se_sys_mount+0x320/0x390 [ 30.936516][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 30.941250][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 30.946533][ T376] __x64_sys_mount+0xbf/0xd0 [ 30.951095][ T376] x64_sys_call+0x65d/0x9a0 [ 30.955572][ T376] do_syscall_64+0x4c/0xa0 [ 30.959966][ T376] ? clear_bhb_loop+0x30/0x80 [ 30.964616][ T376] ? clear_bhb_loop+0x30/0x80 [ 30.969281][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.975155][ T376] RIP: 0033:0x7ffa06d9f10a [ 30.979559][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.999172][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 31.007570][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 31.015515][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 31.023465][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 31.031416][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 31.039392][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 31.047348][ T376] [ 31.050744][ T376] F2FS-fs (loop2): access invalid blkaddr:4 [ 31.056639][ T376] CPU: 0 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 31.063724][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.073796][ T376] Call Trace: [ 31.077052][ T376] [ 31.079963][ T376] __dump_stack+0x21/0x24 [ 31.084270][ T376] dump_stack_lvl+0x110/0x170 [ 31.088920][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.093922][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 31.099351][ T376] dump_stack+0x15/0x24 [ 31.103480][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 31.109000][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 31.114438][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 31.120567][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 31.126091][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 31.131786][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 31.138002][ T376] ? __kasan_check_write+0x14/0x20 [ 31.143098][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 31.148533][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 31.154487][ T376] ? __dquot_initialize+0x236/0xc80 [ 31.159659][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 31.165792][ T376] ? _raw_spin_lock+0x94/0xf0 [ 31.170443][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 31.175612][ T376] f2fs_truncate+0x1d6/0x3d0 [ 31.180174][ T376] f2fs_evict_inode+0x94d/0x1790 [ 31.185086][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 31.190430][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 31.195867][ T376] ? __kasan_check_write+0x14/0x20 [ 31.200948][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 31.206123][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 31.211470][ T376] evict+0x4c4/0x8c0 [ 31.215345][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 31.220188][ T376] ? _raw_spin_lock+0x94/0xf0 [ 31.224841][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 31.230012][ T376] ? __kasan_check_read+0x11/0x20 [ 31.235010][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 31.239919][ T376] ? __kasan_check_write+0x14/0x20 [ 31.245002][ T376] iput+0x633/0x690 [ 31.248784][ T376] f2fs_fill_super+0x5b38/0x7380 [ 31.253709][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 31.258968][ T376] ? mutex_unlock+0x8f/0x230 [ 31.263535][ T376] ? set_blocksize+0x1cc/0x470 [ 31.268273][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 31.273094][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 31.278350][ T376] mount_bdev+0x29b/0x3d0 [ 31.282656][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 31.287917][ T376] f2fs_mount+0x34/0x40 [ 31.292043][ T376] legacy_get_tree+0xfe/0x1a0 [ 31.296694][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 31.301513][ T376] vfs_get_tree+0x9a/0x270 [ 31.305899][ T376] do_new_mount+0x251/0xb40 [ 31.310378][ T376] ? security_capable+0x99/0xc0 [ 31.315212][ T376] path_mount+0x640/0xfd0 [ 31.319520][ T376] __se_sys_mount+0x320/0x390 [ 31.324175][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 31.328909][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 31.334169][ T376] __x64_sys_mount+0xbf/0xd0 [ 31.338729][ T376] x64_sys_call+0x65d/0x9a0 [ 31.343209][ T376] do_syscall_64+0x4c/0xa0 [ 31.347598][ T376] ? clear_bhb_loop+0x30/0x80 [ 31.352256][ T376] ? clear_bhb_loop+0x30/0x80 [ 31.356920][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.362803][ T376] RIP: 0033:0x7ffa06d9f10a [ 31.367201][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.386781][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 31.395167][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 31.403113][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 31.411059][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 31.419007][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 31.426954][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 31.434904][ T376] [ 31.438029][ T376] F2FS-fs (loop2): access invalid blkaddr:4 [ 31.443915][ T376] CPU: 0 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 31.450997][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.461024][ T376] Call Trace: [ 31.464276][ T376] [ 31.467182][ T376] __dump_stack+0x21/0x24 [ 31.471489][ T376] dump_stack_lvl+0x110/0x170 [ 31.476139][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.481139][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 31.486572][ T376] dump_stack+0x15/0x24 [ 31.490699][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 31.496220][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 31.501651][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 31.507784][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 31.513322][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 31.519015][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 31.525231][ T376] ? __kasan_check_write+0x14/0x20 [ 31.530311][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 31.535745][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 31.541698][ T376] ? __dquot_initialize+0x236/0xc80 [ 31.546872][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 31.553001][ T376] ? _raw_spin_lock+0x94/0xf0 [ 31.557669][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 31.562842][ T376] f2fs_truncate+0x1d6/0x3d0 [ 31.567403][ T376] f2fs_evict_inode+0x94d/0x1790 [ 31.572314][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 31.577656][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 31.583086][ T376] ? __kasan_check_write+0x14/0x20 [ 31.588169][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 31.593341][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 31.598684][ T376] evict+0x4c4/0x8c0 [ 31.602553][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 31.607393][ T376] ? _raw_spin_lock+0x94/0xf0 [ 31.612041][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 31.617212][ T376] ? __kasan_check_read+0x11/0x20 [ 31.622207][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 31.627113][ T376] ? __kasan_check_write+0x14/0x20 [ 31.632196][ T376] iput+0x633/0x690 [ 31.635981][ T376] f2fs_fill_super+0x5b38/0x7380 [ 31.640893][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 31.646147][ T376] ? mutex_unlock+0x8f/0x230 [ 31.650715][ T376] ? set_blocksize+0x1cc/0x470 [ 31.655454][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 31.660273][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 31.665530][ T376] mount_bdev+0x29b/0x3d0 [ 31.669837][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 31.675093][ T376] f2fs_mount+0x34/0x40 [ 31.679221][ T376] legacy_get_tree+0xfe/0x1a0 [ 31.683872][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 31.688691][ T376] vfs_get_tree+0x9a/0x270 [ 31.693078][ T376] do_new_mount+0x251/0xb40 [ 31.697558][ T376] ? security_capable+0x99/0xc0 [ 31.702381][ T376] path_mount+0x640/0xfd0 [ 31.706688][ T376] __se_sys_mount+0x320/0x390 [ 31.711335][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 31.716068][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 31.721328][ T376] __x64_sys_mount+0xbf/0xd0 [ 31.725889][ T376] x64_sys_call+0x65d/0x9a0 [ 31.730403][ T376] do_syscall_64+0x4c/0xa0 [ 31.734792][ T376] ? clear_bhb_loop+0x30/0x80 [ 31.739439][ T376] ? clear_bhb_loop+0x30/0x80 [ 31.744083][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.749949][ T376] RIP: 0033:0x7ffa06d9f10a [ 31.754336][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.773926][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 31.782313][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 31.790256][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 31.798201][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 31.806148][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 31.814090][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 31.822038][ T376] [ 31.825200][ T376] F2FS-fs (loop2): access invalid blkaddr:1219692001 [ 31.831894][ T376] CPU: 0 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 31.838982][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 31.849013][ T376] Call Trace: [ 31.852269][ T376] [ 31.855177][ T376] __dump_stack+0x21/0x24 [ 31.859488][ T376] dump_stack_lvl+0x110/0x170 [ 31.864146][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.869156][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 31.874609][ T376] dump_stack+0x15/0x24 [ 31.878753][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 31.884287][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 31.889731][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 31.895874][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 31.901405][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 31.907108][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 31.913333][ T376] ? __kasan_check_write+0x14/0x20 [ 31.918430][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 31.923874][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 31.929840][ T376] ? __dquot_initialize+0x236/0xc80 [ 31.935017][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 31.941149][ T376] ? _raw_spin_lock+0x94/0xf0 [ 31.945808][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 31.950980][ T376] f2fs_truncate+0x1d6/0x3d0 [ 31.955547][ T376] f2fs_evict_inode+0x94d/0x1790 [ 31.960470][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 31.965822][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 31.971259][ T376] ? __kasan_check_write+0x14/0x20 [ 31.976348][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 31.981525][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 31.986875][ T376] evict+0x4c4/0x8c0 [ 31.990753][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 31.995590][ T376] ? _raw_spin_lock+0x94/0xf0 [ 32.000261][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 32.005448][ T376] ? __kasan_check_read+0x11/0x20 [ 32.010458][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 32.015377][ T376] ? __kasan_check_write+0x14/0x20 [ 32.020565][ T376] iput+0x633/0x690 [ 32.024353][ T376] f2fs_fill_super+0x5b38/0x7380 [ 32.029273][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 32.034533][ T376] ? mutex_unlock+0x8f/0x230 [ 32.039108][ T376] ? set_blocksize+0x1cc/0x470 [ 32.043855][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 32.048683][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 32.053946][ T376] mount_bdev+0x29b/0x3d0 [ 32.058263][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 32.063546][ T376] f2fs_mount+0x34/0x40 [ 32.067694][ T376] legacy_get_tree+0xfe/0x1a0 [ 32.072358][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 32.077186][ T376] vfs_get_tree+0x9a/0x270 [ 32.081578][ T376] do_new_mount+0x251/0xb40 [ 32.086066][ T376] ? security_capable+0x99/0xc0 [ 32.090895][ T376] path_mount+0x640/0xfd0 [ 32.095207][ T376] __se_sys_mount+0x320/0x390 [ 32.099862][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 32.104602][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 32.109871][ T376] __x64_sys_mount+0xbf/0xd0 [ 32.114438][ T376] x64_sys_call+0x65d/0x9a0 [ 32.118930][ T376] do_syscall_64+0x4c/0xa0 [ 32.123324][ T376] ? clear_bhb_loop+0x30/0x80 [ 32.127974][ T376] ? clear_bhb_loop+0x30/0x80 [ 32.132623][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.138500][ T376] RIP: 0033:0x7ffa06d9f10a [ 32.142892][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.162474][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 32.170868][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 32.178818][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 32.186764][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 32.194711][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 32.202662][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 32.210620][ T376] [ 32.213751][ T376] F2FS-fs (loop2): Inconsistent error blkaddr:4099, sit bitmap:0 [ 32.221564][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 32.228664][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.238693][ T376] Call Trace: [ 32.241947][ T376] [ 32.244853][ T376] __dump_stack+0x21/0x24 [ 32.249162][ T376] dump_stack_lvl+0x110/0x170 [ 32.253808][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 32.258803][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 32.264234][ T376] dump_stack+0x15/0x24 [ 32.268360][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 32.273878][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 32.279311][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 32.285440][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 32.290956][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 32.296647][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 32.302858][ T376] ? __kasan_check_write+0x14/0x20 [ 32.307942][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 32.313380][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 32.319331][ T376] ? __dquot_initialize+0x236/0xc80 [ 32.324503][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 32.330629][ T376] ? _raw_spin_lock+0x94/0xf0 [ 32.335278][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 32.340447][ T376] f2fs_truncate+0x1d6/0x3d0 [ 32.345006][ T376] f2fs_evict_inode+0x94d/0x1790 [ 32.349916][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 32.355262][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 32.360694][ T376] ? __kasan_check_write+0x14/0x20 [ 32.365779][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 32.370954][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 32.376299][ T376] evict+0x4c4/0x8c0 [ 32.380168][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 32.384991][ T376] ? _raw_spin_lock+0x94/0xf0 [ 32.389639][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 32.394812][ T376] ? __kasan_check_read+0x11/0x20 [ 32.399807][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 32.404719][ T376] ? __kasan_check_write+0x14/0x20 [ 32.409801][ T376] iput+0x633/0x690 [ 32.413582][ T376] f2fs_fill_super+0x5b38/0x7380 [ 32.418490][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 32.423743][ T376] ? mutex_unlock+0x8f/0x230 [ 32.428307][ T376] ? set_blocksize+0x1cc/0x470 [ 32.433046][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 32.437862][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 32.443113][ T376] mount_bdev+0x29b/0x3d0 [ 32.447414][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 32.452668][ T376] f2fs_mount+0x34/0x40 [ 32.456794][ T376] legacy_get_tree+0xfe/0x1a0 [ 32.461444][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 32.466265][ T376] vfs_get_tree+0x9a/0x270 [ 32.470648][ T376] do_new_mount+0x251/0xb40 [ 32.475127][ T376] ? security_capable+0x99/0xc0 [ 32.479951][ T376] path_mount+0x640/0xfd0 [ 32.484256][ T376] __se_sys_mount+0x320/0x390 [ 32.488898][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 32.493631][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 32.498888][ T376] __x64_sys_mount+0xbf/0xd0 [ 32.503448][ T376] x64_sys_call+0x65d/0x9a0 [ 32.507921][ T376] do_syscall_64+0x4c/0xa0 [ 32.512309][ T376] ? clear_bhb_loop+0x30/0x80 [ 32.516962][ T376] ? clear_bhb_loop+0x30/0x80 [ 32.521631][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.527512][ T376] RIP: 0033:0x7ffa06d9f10a [ 32.531908][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.551497][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 32.559892][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 32.567845][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 32.575791][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 32.583733][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 32.591675][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 32.599624][ T376] [ 32.602771][ T376] ================================================================== [ 32.610825][ T376] BUG: KASAN: use-after-free in f2fs_truncate_data_blocks_range+0x714/0xef0 [ 32.619485][ T376] Read of size 4 at addr ffff88812dc4f000 by task syz.2.17/376 [ 32.627002][ T376] [ 32.629300][ T376] CPU: 0 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 32.636380][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.646402][ T376] Call Trace: [ 32.649656][ T376] [ 32.652562][ T376] __dump_stack+0x21/0x24 [ 32.656868][ T376] dump_stack_lvl+0x110/0x170 [ 32.661519][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 32.666518][ T376] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 32.672300][ T376] ? __wake_up+0x12e/0x1a0 [ 32.676692][ T376] ? f2fs_truncate_data_blocks_range+0x714/0xef0 [ 32.682994][ T376] print_address_description+0x71/0x200 [ 32.688514][ T376] print_report+0x4a/0x60 [ 32.692827][ T376] kasan_report+0x122/0x150 [ 32.697302][ T376] ? f2fs_truncate_data_blocks_range+0x714/0xef0 [ 32.703606][ T376] __asan_report_load4_noabort+0x14/0x20 [ 32.709215][ T376] f2fs_truncate_data_blocks_range+0x714/0xef0 [ 32.715349][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 32.720870][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 32.726566][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 32.732782][ T376] ? __kasan_check_write+0x14/0x20 [ 32.737869][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 32.743305][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 32.749257][ T376] ? __dquot_initialize+0x236/0xc80 [ 32.754444][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 32.760572][ T376] ? _raw_spin_lock+0x94/0xf0 [ 32.765226][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 32.770394][ T376] f2fs_truncate+0x1d6/0x3d0 [ 32.774954][ T376] f2fs_evict_inode+0x94d/0x1790 [ 32.779873][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 32.785218][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 32.790649][ T376] ? __kasan_check_write+0x14/0x20 [ 32.795733][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 32.800908][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 32.806252][ T376] evict+0x4c4/0x8c0 [ 32.810121][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 32.814943][ T376] ? _raw_spin_lock+0x94/0xf0 [ 32.819595][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 32.824764][ T376] ? __kasan_check_read+0x11/0x20 [ 32.829755][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 32.834664][ T376] ? __kasan_check_write+0x14/0x20 [ 32.839744][ T376] iput+0x633/0x690 [ 32.843534][ T376] f2fs_fill_super+0x5b38/0x7380 [ 32.848446][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 32.853704][ T376] ? mutex_unlock+0x8f/0x230 [ 32.858269][ T376] ? set_blocksize+0x1cc/0x470 [ 32.863009][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 32.867830][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 32.873086][ T376] mount_bdev+0x29b/0x3d0 [ 32.877389][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 32.882669][ T376] f2fs_mount+0x34/0x40 [ 32.886796][ T376] legacy_get_tree+0xfe/0x1a0 [ 32.891446][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 32.896265][ T376] vfs_get_tree+0x9a/0x270 [ 32.900649][ T376] do_new_mount+0x251/0xb40 [ 32.905124][ T376] ? security_capable+0x99/0xc0 [ 32.909948][ T376] path_mount+0x640/0xfd0 [ 32.914254][ T376] __se_sys_mount+0x320/0x390 [ 32.918898][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 32.923631][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 32.928888][ T376] __x64_sys_mount+0xbf/0xd0 [ 32.933464][ T376] x64_sys_call+0x65d/0x9a0 [ 32.937941][ T376] do_syscall_64+0x4c/0xa0 [ 32.942329][ T376] ? clear_bhb_loop+0x30/0x80 [ 32.946972][ T376] ? clear_bhb_loop+0x30/0x80 [ 32.951616][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.957484][ T376] RIP: 0033:0x7ffa06d9f10a [ 32.961875][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.981451][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 32.989835][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 32.997775][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 33.005722][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 33.013668][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 33.021620][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 33.029579][ T376] [ 33.032574][ T376] [ 33.034872][ T376] Allocated by task 345: [ 33.039083][ T376] kasan_set_track+0x4b/0x70 [ 33.043663][ T376] kasan_save_alloc_info+0x1f/0x30 [ 33.048748][ T376] __kasan_slab_alloc+0x72/0x80 [ 33.053574][ T376] slab_post_alloc_hook+0x4f/0x2d0 [ 33.058657][ T376] kmem_cache_alloc+0x166/0x320 [ 33.063480][ T376] dst_alloc+0x16a/0x1e0 [ 33.067690][ T376] icmp6_dst_alloc+0xf8/0x510 [ 33.072342][ T376] ndisc_send_skb+0x2ad/0xcd0 [ 33.077004][ T376] ndisc_send_ns+0xd4/0x160 [ 33.081476][ T376] addrconf_dad_work+0x9d6/0x14a0 [ 33.086474][ T376] process_one_work+0x717/0xc30 [ 33.091300][ T376] worker_thread+0xa4d/0x11d0 [ 33.095973][ T376] kthread+0x281/0x320 [ 33.100018][ T376] ret_from_fork+0x1f/0x30 [ 33.104411][ T376] [ 33.106709][ T376] Freed by task 13: [ 33.110485][ T376] kasan_set_track+0x4b/0x70 [ 33.115057][ T376] kasan_save_free_info+0x2b/0x40 [ 33.120055][ T376] ____kasan_slab_free+0x132/0x180 [ 33.125139][ T376] __kasan_slab_free+0x11/0x20 [ 33.129873][ T376] slab_free_freelist_hook+0xc2/0x190 [ 33.135219][ T376] kmem_cache_free+0x12d/0x300 [ 33.139954][ T376] dst_destroy+0x202/0x2e0 [ 33.144350][ T376] dst_destroy_rcu+0x19/0x20 [ 33.148914][ T376] rcu_do_batch+0x52b/0xc30 [ 33.153394][ T376] rcu_core+0x486/0xf00 [ 33.157516][ T376] rcu_core_si+0x9/0x10 [ 33.161651][ T376] handle_softirqs+0x1d7/0x600 [ 33.166383][ T376] run_ksoftirqd+0x28/0x30 [ 33.170772][ T376] smpboot_thread_fn+0x48c/0x8e0 [ 33.175682][ T376] kthread+0x281/0x320 [ 33.179719][ T376] ret_from_fork+0x1f/0x30 [ 33.184107][ T376] [ 33.186400][ T376] Last potentially related work creation: [ 33.192080][ T376] kasan_save_stack+0x3a/0x60 [ 33.196729][ T376] __kasan_record_aux_stack+0xb6/0xc0 [ 33.202071][ T376] kasan_record_aux_stack_noalloc+0xb/0x10 [ 33.207846][ T376] call_rcu+0xcf/0xf50 [ 33.211889][ T376] dst_release+0x123/0x190 [ 33.216278][ T376] __dev_queue_xmit+0xa46/0x3540 [ 33.221187][ T376] neigh_resolve_output+0x6ee/0x7f0 [ 33.226360][ T376] ip6_finish_output2+0x1619/0x18b0 [ 33.231557][ T376] ip6_finish_output+0x60b/0xbe0 [ 33.236464][ T376] ip6_output+0x1fa/0x410 [ 33.240764][ T376] ndisc_send_skb+0x7c8/0xcd0 [ 33.245408][ T376] ndisc_send_ns+0xd4/0x160 [ 33.249880][ T376] addrconf_dad_work+0x9d6/0x14a0 [ 33.254879][ T376] process_one_work+0x717/0xc30 [ 33.259700][ T376] worker_thread+0xa4d/0x11d0 [ 33.264345][ T376] kthread+0x281/0x320 [ 33.268385][ T376] ret_from_fork+0x1f/0x30 [ 33.272772][ T376] [ 33.275063][ T376] The buggy address belongs to the object at ffff88812dc4f000 [ 33.275063][ T376] which belongs to the cache ip6_dst_cache of size 248 [ 33.289254][ T376] The buggy address is located 0 bytes inside of [ 33.289254][ T376] 248-byte region [ffff88812dc4f000, ffff88812dc4f0f8) [ 33.302334][ T376] [ 33.304631][ T376] The buggy address belongs to the physical page: [ 33.311014][ T376] page:ffffea0004b713c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12dc4f [ 33.321222][ T376] flags: 0x4000000000000200(slab|zone=1) [ 33.326829][ T376] raw: 4000000000000200 0000000000000000 dead000000000122 ffff88810dc3f800 [ 33.335391][ T376] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 33.343997][ T376] page dumped because: kasan: bad access detected [ 33.350386][ T376] page_owner tracks the page as allocated [ 33.356082][ T376] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 345, tgid 345 (kworker/0:3), ts 24038182263, free_ts 22951669156 [ 33.375496][ T376] post_alloc_hook+0x1f5/0x210 [ 33.380239][ T376] prep_new_page+0x1c/0x110 [ 33.384714][ T376] get_page_from_freelist+0x2ca9/0x2d20 [ 33.390231][ T376] __alloc_pages+0x1fa/0x610 [ 33.394795][ T376] alloc_slab_page+0x6e/0xf0 [ 33.399354][ T376] new_slab+0x98/0x3e0 [ 33.403396][ T376] ___slab_alloc+0x70f/0xb70 [ 33.407957][ T376] __slab_alloc+0x5e/0xa0 [ 33.412259][ T376] kmem_cache_alloc+0x1a8/0x320 [ 33.417079][ T376] dst_alloc+0x16a/0x1e0 [ 33.421290][ T376] icmp6_dst_alloc+0xf8/0x510 [ 33.425941][ T376] ndisc_send_skb+0x2ad/0xcd0 [ 33.430587][ T376] ndisc_send_rs+0x66a/0x870 [ 33.435146][ T376] addrconf_dad_completed+0x958/0xe80 [ 33.440487][ T376] addrconf_dad_work+0xc1b/0x14a0 [ 33.445476][ T376] process_one_work+0x717/0xc30 [ 33.450293][ T376] page last free stack trace: [ 33.454932][ T376] free_unref_page_prepare+0x80c/0x820 [ 33.460367][ T376] free_unref_page+0x93/0x530 [ 33.465017][ T376] __free_pages+0x67/0x100 [ 33.469401][ T376] __vunmap+0xa3c/0xc00 [ 33.473524][ T376] vfree+0x61/0x90 [ 33.477214][ T376] kcov_close+0x2b/0x50 [ 33.481338][ T376] __fput+0x1fd/0x8f0 [ 33.485295][ T376] ____fput+0x15/0x20 [ 33.489246][ T376] task_work_run+0x1e1/0x250 [ 33.493806][ T376] do_exit+0xaf2/0x2850 [ 33.497933][ T376] do_group_exit+0x21b/0x2e0 [ 33.502495][ T376] get_signal+0x167c/0x1700 [ 33.506967][ T376] arch_do_signal_or_restart+0xd1/0x11c0 [ 33.512571][ T376] exit_to_user_mode_loop+0x7a/0xb0 [ 33.517737][ T376] exit_to_user_mode_prepare+0x87/0xd0 [ 33.523164][ T376] syscall_exit_to_user_mode+0x1a/0x30 [ 33.528594][ T376] [ 33.530890][ T376] Memory state around the buggy address: [ 33.536487][ T376] ffff88812dc4ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.544514][ T376] ffff88812dc4ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.552546][ T376] >ffff88812dc4f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 33.560573][ T376] ^ [ 33.564606][ T376] ffff88812dc4f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc [ 33.572632][ T376] ffff88812dc4f100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 33.580658][ T376] ================================================================== [ 33.589390][ T376] Disabling lock debugging due to kernel taint [ 33.595546][ T376] F2FS-fs (loop2): access invalid blkaddr:343184384 [ 33.600147][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 33.600157][ T28] audit: type=1400 audit(1784670386.065:105): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 33.602169][ T376] CPU: 0 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 33.610543][ T28] audit: type=1400 audit(1784670386.085:106): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.629820][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.629831][ T376] Call Trace: [ 33.629836][ T376] [ 33.629841][ T376] __dump_stack+0x21/0x24 [ 33.638653][ T28] audit: type=1400 audit(1784670386.085:107): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.659649][ T376] dump_stack_lvl+0x110/0x170 [ 33.659678][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 33.659694][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 33.670007][ T28] audit: type=1400 audit(1784670386.085:108): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.672984][ T376] dump_stack+0x15/0x24 [ 33.675898][ T28] audit: type=1400 audit(1784670386.085:109): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.680189][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 33.680212][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 33.680230][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 33.680253][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 33.702642][ T28] audit: type=1400 audit(1784670386.085:110): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.706048][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 33.711189][ T28] audit: type=1400 audit(1784670386.085:111): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.716465][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 33.841013][ T376] ? __kasan_check_write+0x14/0x20 [ 33.846103][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 33.851537][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 33.857513][ T376] ? __dquot_initialize+0x236/0xc80 [ 33.862688][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 33.868815][ T376] ? _raw_spin_lock+0x94/0xf0 [ 33.873471][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 33.878657][ T376] f2fs_truncate+0x1d6/0x3d0 [ 33.883218][ T376] f2fs_evict_inode+0x94d/0x1790 [ 33.888129][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 33.893474][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 33.898907][ T376] ? __kasan_check_write+0x14/0x20 [ 33.903989][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 33.909162][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 33.914516][ T376] evict+0x4c4/0x8c0 [ 33.918400][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 33.923234][ T376] ? _raw_spin_lock+0x94/0xf0 [ 33.927890][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 33.933062][ T376] ? __kasan_check_read+0x11/0x20 [ 33.938058][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 33.942969][ T376] ? __kasan_check_write+0x14/0x20 [ 33.948050][ T376] iput+0x633/0x690 [ 33.951832][ T376] f2fs_fill_super+0x5b38/0x7380 [ 33.956741][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 33.961995][ T376] ? mutex_unlock+0x8f/0x230 [ 33.966561][ T376] ? set_blocksize+0x1cc/0x470 [ 33.971296][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 33.976124][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 33.981378][ T376] mount_bdev+0x29b/0x3d0 [ 33.985680][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 33.990938][ T376] f2fs_mount+0x34/0x40 [ 33.995066][ T376] legacy_get_tree+0xfe/0x1a0 [ 33.999715][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 34.004537][ T376] vfs_get_tree+0x9a/0x270 [ 34.008924][ T376] do_new_mount+0x251/0xb40 [ 34.013402][ T376] ? security_capable+0x99/0xc0 [ 34.018225][ T376] path_mount+0x640/0xfd0 [ 34.022528][ T376] __se_sys_mount+0x320/0x390 [ 34.027172][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 34.031904][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 34.037176][ T376] __x64_sys_mount+0xbf/0xd0 [ 34.041758][ T376] x64_sys_call+0x65d/0x9a0 [ 34.046245][ T376] do_syscall_64+0x4c/0xa0 [ 34.050648][ T376] ? clear_bhb_loop+0x30/0x80 [ 34.055303][ T376] ? clear_bhb_loop+0x30/0x80 [ 34.059955][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.065829][ T376] RIP: 0033:0x7ffa06d9f10a [ 34.070219][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.089796][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 34.098182][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 34.106127][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 34.114070][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 34.122011][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 34.129956][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 34.137900][ T376] [ 34.141125][ T376] F2FS-fs (loop2): access invalid blkaddr:4294936705 [ 34.147833][ T376] CPU: 0 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 34.156407][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.166450][ T376] Call Trace: [ 34.169708][ T376] [ 34.172615][ T376] __dump_stack+0x21/0x24 [ 34.176927][ T376] dump_stack_lvl+0x110/0x170 [ 34.181585][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 34.186588][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 34.192023][ T376] dump_stack+0x15/0x24 [ 34.196163][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 34.201690][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 34.207130][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 34.213269][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 34.218799][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 34.224502][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 34.230724][ T376] ? __kasan_check_write+0x14/0x20 [ 34.235813][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 34.241255][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 34.247216][ T376] ? __dquot_initialize+0x236/0xc80 [ 34.252394][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 34.258531][ T376] ? _raw_spin_lock+0x94/0xf0 [ 34.263191][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 34.268366][ T376] f2fs_truncate+0x1d6/0x3d0 [ 34.272932][ T376] f2fs_evict_inode+0x94d/0x1790 [ 34.277852][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 34.283201][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 34.288639][ T376] ? __kasan_check_write+0x14/0x20 [ 34.293728][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 34.298903][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 34.304256][ T376] evict+0x4c4/0x8c0 [ 34.308134][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 34.312966][ T376] ? _raw_spin_lock+0x94/0xf0 [ 34.317618][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 34.322796][ T376] ? __kasan_check_read+0x11/0x20 [ 34.327799][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 34.332715][ T376] ? __kasan_check_write+0x14/0x20 [ 34.337805][ T376] iput+0x633/0x690 [ 34.341595][ T376] f2fs_fill_super+0x5b38/0x7380 [ 34.346515][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 34.351776][ T376] ? mutex_unlock+0x8f/0x230 [ 34.356348][ T376] ? set_blocksize+0x1cc/0x470 [ 34.361094][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 34.365921][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 34.371180][ T376] mount_bdev+0x29b/0x3d0 [ 34.375489][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 34.380750][ T376] f2fs_mount+0x34/0x40 [ 34.384884][ T376] legacy_get_tree+0xfe/0x1a0 [ 34.389541][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 34.394366][ T376] vfs_get_tree+0x9a/0x270 [ 34.398757][ T376] do_new_mount+0x251/0xb40 [ 34.403240][ T376] ? security_capable+0x99/0xc0 [ 34.408069][ T376] path_mount+0x640/0xfd0 [ 34.412388][ T376] __se_sys_mount+0x320/0x390 [ 34.417043][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 34.421782][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 34.427049][ T376] __x64_sys_mount+0xbf/0xd0 [ 34.431615][ T376] x64_sys_call+0x65d/0x9a0 [ 34.436097][ T376] do_syscall_64+0x4c/0xa0 [ 34.440492][ T376] ? clear_bhb_loop+0x30/0x80 [ 34.445146][ T376] ? clear_bhb_loop+0x30/0x80 [ 34.449797][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.455669][ T376] RIP: 0033:0x7ffa06d9f10a [ 34.460063][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.479643][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 34.488037][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 34.495988][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 34.503936][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 34.511885][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 34.519838][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 34.527791][ T376] [ 34.533736][ T376] F2FS-fs (loop2): access invalid blkaddr:13 [ 34.539835][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 34.548494][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.558525][ T376] Call Trace: [ 34.561779][ T376] [ 34.564687][ T376] __dump_stack+0x21/0x24 [ 34.568999][ T376] dump_stack_lvl+0x110/0x170 [ 34.573655][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 34.578655][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 34.584089][ T376] dump_stack+0x15/0x24 [ 34.588220][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 34.593744][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 34.599182][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 34.605319][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 34.610846][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 34.616545][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 34.622784][ T376] ? __kasan_check_write+0x14/0x20 [ 34.627872][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 34.633317][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 34.639278][ T376] ? __dquot_initialize+0x236/0xc80 [ 34.644458][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 34.650590][ T376] ? _raw_spin_lock+0x94/0xf0 [ 34.655252][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 34.660426][ T376] f2fs_truncate+0x1d6/0x3d0 [ 34.664989][ T376] f2fs_evict_inode+0x94d/0x1790 [ 34.669905][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 34.675255][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 34.680695][ T376] ? __kasan_check_write+0x14/0x20 [ 34.685782][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 34.690957][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 34.696309][ T376] evict+0x4c4/0x8c0 [ 34.700186][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 34.705014][ T376] ? _raw_spin_lock+0x94/0xf0 [ 34.709667][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 34.714843][ T376] ? __kasan_check_read+0x11/0x20 [ 34.719842][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 34.724753][ T376] ? __kasan_check_write+0x14/0x20 [ 34.729839][ T376] iput+0x633/0x690 [ 34.733622][ T376] f2fs_fill_super+0x5b38/0x7380 [ 34.738537][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 34.743794][ T376] ? mutex_unlock+0x8f/0x230 [ 34.748363][ T376] ? set_blocksize+0x1cc/0x470 [ 34.753110][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 34.757931][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 34.763191][ T376] mount_bdev+0x29b/0x3d0 [ 34.767499][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 34.772755][ T376] f2fs_mount+0x34/0x40 [ 34.776887][ T376] legacy_get_tree+0xfe/0x1a0 [ 34.781541][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 34.786364][ T376] vfs_get_tree+0x9a/0x270 [ 34.790754][ T376] do_new_mount+0x251/0xb40 [ 34.795235][ T376] ? security_capable+0x99/0xc0 [ 34.800062][ T376] path_mount+0x640/0xfd0 [ 34.804374][ T376] __se_sys_mount+0x320/0x390 [ 34.809024][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 34.813761][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 34.819022][ T376] __x64_sys_mount+0xbf/0xd0 [ 34.823585][ T376] x64_sys_call+0x65d/0x9a0 [ 34.828065][ T376] do_syscall_64+0x4c/0xa0 [ 34.832456][ T376] ? clear_bhb_loop+0x30/0x80 [ 34.837104][ T376] ? clear_bhb_loop+0x30/0x80 [ 34.841754][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.847625][ T376] RIP: 0033:0x7ffa06d9f10a [ 34.852016][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.871595][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 34.879982][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 34.887928][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 34.895883][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 34.903830][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 34.911775][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 34.919723][ T376] [ 34.924133][ T376] F2FS-fs (loop2): access invalid blkaddr:99680529 [ 34.930828][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 34.939388][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.949412][ T376] Call Trace: [ 34.952662][ T376] [ 34.955568][ T376] __dump_stack+0x21/0x24 [ 34.959875][ T376] dump_stack_lvl+0x110/0x170 [ 34.964528][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 34.969523][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 34.974952][ T376] dump_stack+0x15/0x24 [ 34.979078][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 34.984616][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 34.990045][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 34.996176][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 35.001693][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 35.007387][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 35.013601][ T376] ? __kasan_check_write+0x14/0x20 [ 35.018682][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 35.024113][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 35.030064][ T376] ? __dquot_initialize+0x236/0xc80 [ 35.035234][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 35.041360][ T376] ? _raw_spin_lock+0x94/0xf0 [ 35.046008][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 35.051177][ T376] f2fs_truncate+0x1d6/0x3d0 [ 35.055736][ T376] f2fs_evict_inode+0x94d/0x1790 [ 35.060644][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 35.065984][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 35.071415][ T376] ? __kasan_check_write+0x14/0x20 [ 35.076496][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 35.081664][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 35.087006][ T376] evict+0x4c4/0x8c0 [ 35.090876][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 35.095698][ T376] ? _raw_spin_lock+0x94/0xf0 [ 35.100346][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 35.105516][ T376] ? __kasan_check_read+0x11/0x20 [ 35.110511][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 35.115419][ T376] ? __kasan_check_write+0x14/0x20 [ 35.120501][ T376] iput+0x633/0x690 [ 35.124281][ T376] f2fs_fill_super+0x5b38/0x7380 [ 35.129193][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 35.134458][ T376] ? mutex_unlock+0x8f/0x230 [ 35.139020][ T376] ? set_blocksize+0x1cc/0x470 [ 35.143760][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 35.148581][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 35.153836][ T376] mount_bdev+0x29b/0x3d0 [ 35.158141][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 35.163396][ T376] f2fs_mount+0x34/0x40 [ 35.167519][ T376] legacy_get_tree+0xfe/0x1a0 [ 35.172168][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 35.176988][ T376] vfs_get_tree+0x9a/0x270 [ 35.181379][ T376] do_new_mount+0x251/0xb40 [ 35.185864][ T376] ? security_capable+0x99/0xc0 [ 35.190691][ T376] path_mount+0x640/0xfd0 [ 35.194997][ T376] __se_sys_mount+0x320/0x390 [ 35.199647][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 35.204382][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 35.209641][ T376] __x64_sys_mount+0xbf/0xd0 [ 35.214201][ T376] x64_sys_call+0x65d/0x9a0 [ 35.218686][ T376] do_syscall_64+0x4c/0xa0 [ 35.223082][ T376] ? clear_bhb_loop+0x30/0x80 [ 35.227730][ T376] ? clear_bhb_loop+0x30/0x80 [ 35.232377][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 35.238248][ T376] RIP: 0033:0x7ffa06d9f10a [ 35.242635][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.262215][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 35.270604][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 35.278551][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 35.286494][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 35.294434][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 35.302375][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 35.310322][ T376] [ 35.313617][ T376] F2FS-fs (loop2): access invalid blkaddr:343212928 [ 35.320224][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 35.328798][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 35.338829][ T376] Call Trace: [ 35.342086][ T376] [ 35.344990][ T376] __dump_stack+0x21/0x24 [ 35.349293][ T376] dump_stack_lvl+0x110/0x170 [ 35.353944][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 35.358944][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 35.364373][ T376] dump_stack+0x15/0x24 [ 35.368500][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 35.374022][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 35.379451][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 35.385586][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 35.391891][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 35.397586][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 35.403800][ T376] ? __kasan_check_write+0x14/0x20 [ 35.408890][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 35.414324][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 35.420278][ T376] ? __dquot_initialize+0x236/0xc80 [ 35.425449][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 35.431576][ T376] ? _raw_spin_lock+0x94/0xf0 [ 35.436231][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 35.441399][ T376] f2fs_truncate+0x1d6/0x3d0 [ 35.445961][ T376] f2fs_evict_inode+0x94d/0x1790 [ 35.450874][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 35.456220][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 35.461655][ T376] ? __kasan_check_write+0x14/0x20 [ 35.466759][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 35.471931][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 35.477274][ T376] evict+0x4c4/0x8c0 [ 35.481145][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 35.485971][ T376] ? _raw_spin_lock+0x94/0xf0 [ 35.490621][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 35.495793][ T376] ? __kasan_check_read+0x11/0x20 [ 35.500792][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 35.505704][ T376] ? __kasan_check_write+0x14/0x20 [ 35.510786][ T376] iput+0x633/0x690 [ 35.514571][ T376] f2fs_fill_super+0x5b38/0x7380 [ 35.519484][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 35.524742][ T376] ? mutex_unlock+0x8f/0x230 [ 35.529308][ T376] ? set_blocksize+0x1cc/0x470 [ 35.534047][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 35.538868][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 35.544123][ T376] mount_bdev+0x29b/0x3d0 [ 35.548430][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 35.553687][ T376] f2fs_mount+0x34/0x40 [ 35.557824][ T376] legacy_get_tree+0xfe/0x1a0 [ 35.562476][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 35.567298][ T376] vfs_get_tree+0x9a/0x270 [ 35.571685][ T376] do_new_mount+0x251/0xb40 [ 35.576165][ T376] ? security_capable+0x99/0xc0 [ 35.580987][ T376] path_mount+0x640/0xfd0 [ 35.585291][ T376] __se_sys_mount+0x320/0x390 [ 35.589938][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 35.594670][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 35.599933][ T376] __x64_sys_mount+0xbf/0xd0 [ 35.604494][ T376] x64_sys_call+0x65d/0x9a0 [ 35.608970][ T376] do_syscall_64+0x4c/0xa0 [ 35.613361][ T376] ? clear_bhb_loop+0x30/0x80 [ 35.618008][ T376] ? clear_bhb_loop+0x30/0x80 [ 35.622656][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 35.628521][ T376] RIP: 0033:0x7ffa06d9f10a [ 35.632910][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.652484][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 35.660868][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 35.668814][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 35.676762][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 35.684706][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 35.692649][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 35.700595][ T376] [ 35.704657][ T376] F2FS-fs (loop2): access invalid blkaddr:4294936705 [ 35.711388][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 35.719969][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 35.730438][ T376] Call Trace: [ 35.733691][ T376] [ 35.736595][ T376] __dump_stack+0x21/0x24 [ 35.740900][ T376] dump_stack_lvl+0x110/0x170 [ 35.745555][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 35.750549][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 35.755987][ T376] dump_stack+0x15/0x24 [ 35.760114][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 35.765634][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 35.771065][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 35.777194][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 35.782711][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 35.788409][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 35.794631][ T376] ? __kasan_check_write+0x14/0x20 [ 35.799713][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 35.805157][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 35.811110][ T376] ? __dquot_initialize+0x236/0xc80 [ 35.816290][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 35.822417][ T376] ? _raw_spin_lock+0x94/0xf0 [ 35.827068][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 35.832237][ T376] f2fs_truncate+0x1d6/0x3d0 [ 35.836805][ T376] f2fs_evict_inode+0x94d/0x1790 [ 35.841725][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 35.847075][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 35.852513][ T376] ? __kasan_check_write+0x14/0x20 [ 35.857603][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 35.862785][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 35.868141][ T376] evict+0x4c4/0x8c0 [ 35.872019][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 35.876849][ T376] ? _raw_spin_lock+0x94/0xf0 [ 35.881503][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 35.886706][ T376] ? __kasan_check_read+0x11/0x20 [ 35.891707][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 35.896628][ T376] ? __kasan_check_write+0x14/0x20 [ 35.901716][ T376] iput+0x633/0x690 [ 35.905502][ T376] f2fs_fill_super+0x5b38/0x7380 [ 35.910421][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 35.915683][ T376] ? mutex_unlock+0x8f/0x230 [ 35.920253][ T376] ? set_blocksize+0x1cc/0x470 [ 35.925001][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 35.929824][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 35.935090][ T376] mount_bdev+0x29b/0x3d0 [ 35.939415][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 35.944679][ T376] f2fs_mount+0x34/0x40 [ 35.948817][ T376] legacy_get_tree+0xfe/0x1a0 [ 35.953474][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 35.958302][ T376] vfs_get_tree+0x9a/0x270 [ 35.962694][ T376] do_new_mount+0x251/0xb40 [ 35.967181][ T376] ? security_capable+0x99/0xc0 [ 35.972012][ T376] path_mount+0x640/0xfd0 [ 35.976324][ T376] __se_sys_mount+0x320/0x390 [ 35.980976][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 35.985716][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 35.990985][ T376] __x64_sys_mount+0xbf/0xd0 [ 35.995552][ T376] x64_sys_call+0x65d/0x9a0 [ 36.000033][ T376] do_syscall_64+0x4c/0xa0 [ 36.004429][ T376] ? clear_bhb_loop+0x30/0x80 [ 36.009081][ T376] ? clear_bhb_loop+0x30/0x80 [ 36.013732][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.019609][ T376] RIP: 0033:0x7ffa06d9f10a [ 36.024001][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.043583][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 36.051972][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 36.059921][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 36.067869][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 36.075819][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 36.083766][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 36.091723][ T376] [ 36.095075][ T376] F2FS-fs (loop2): access invalid blkaddr:2220490224 [ 36.101837][ T376] CPU: 0 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 36.110414][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.120443][ T376] Call Trace: [ 36.123694][ T376] [ 36.126598][ T376] __dump_stack+0x21/0x24 [ 36.130903][ T376] dump_stack_lvl+0x110/0x170 [ 36.135568][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 36.140564][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 36.145994][ T376] dump_stack+0x15/0x24 [ 36.150118][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 36.155638][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 36.161072][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 36.167205][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 36.172727][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 36.178420][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 36.184635][ T376] ? __kasan_check_write+0x14/0x20 [ 36.189715][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 36.195148][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 36.201098][ T376] ? __dquot_initialize+0x236/0xc80 [ 36.206275][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 36.212403][ T376] ? _raw_spin_lock+0x94/0xf0 [ 36.217074][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 36.222244][ T376] f2fs_truncate+0x1d6/0x3d0 [ 36.226805][ T376] f2fs_evict_inode+0x94d/0x1790 [ 36.231717][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 36.237066][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 36.242499][ T376] ? __kasan_check_write+0x14/0x20 [ 36.247581][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 36.252751][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 36.258095][ T376] evict+0x4c4/0x8c0 [ 36.261964][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 36.266784][ T376] ? _raw_spin_lock+0x94/0xf0 [ 36.271430][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 36.276600][ T376] ? __kasan_check_read+0x11/0x20 [ 36.281592][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 36.286501][ T376] ? __kasan_check_write+0x14/0x20 [ 36.291582][ T376] iput+0x633/0x690 [ 36.295364][ T376] f2fs_fill_super+0x5b38/0x7380 [ 36.300277][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 36.305529][ T376] ? mutex_unlock+0x8f/0x230 [ 36.310094][ T376] ? set_blocksize+0x1cc/0x470 [ 36.314833][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 36.319649][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 36.324903][ T376] mount_bdev+0x29b/0x3d0 [ 36.329206][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 36.334459][ T376] f2fs_mount+0x34/0x40 [ 36.338583][ T376] legacy_get_tree+0xfe/0x1a0 [ 36.343234][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 36.348055][ T376] vfs_get_tree+0x9a/0x270 [ 36.352441][ T376] do_new_mount+0x251/0xb40 [ 36.356918][ T376] ? security_capable+0x99/0xc0 [ 36.361742][ T376] path_mount+0x640/0xfd0 [ 36.366043][ T376] __se_sys_mount+0x320/0x390 [ 36.370691][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 36.375424][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 36.380683][ T376] __x64_sys_mount+0xbf/0xd0 [ 36.385242][ T376] x64_sys_call+0x65d/0x9a0 [ 36.389720][ T376] do_syscall_64+0x4c/0xa0 [ 36.394111][ T376] ? clear_bhb_loop+0x30/0x80 [ 36.398766][ T376] ? clear_bhb_loop+0x30/0x80 [ 36.403413][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.409279][ T376] RIP: 0033:0x7ffa06d9f10a [ 36.413665][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.433242][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 36.441628][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 36.449567][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 36.457510][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 36.465453][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 36.473401][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 36.481349][ T376] [ 36.485448][ T376] F2FS-fs (loop2): access invalid blkaddr:2220382816 [ 36.492339][ T376] CPU: 0 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 36.500900][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.510928][ T376] Call Trace: [ 36.514182][ T376] [ 36.517087][ T376] __dump_stack+0x21/0x24 [ 36.521391][ T376] dump_stack_lvl+0x110/0x170 [ 36.526039][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 36.531038][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 36.536466][ T376] dump_stack+0x15/0x24 [ 36.540598][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 36.546118][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 36.551548][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 36.557679][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 36.563198][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 36.568891][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 36.575108][ T376] ? __kasan_check_write+0x14/0x20 [ 36.580190][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 36.585623][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 36.591583][ T376] ? __dquot_initialize+0x236/0xc80 [ 36.596756][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 36.602882][ T376] ? _raw_spin_lock+0x94/0xf0 [ 36.607534][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 36.612704][ T376] f2fs_truncate+0x1d6/0x3d0 [ 36.617264][ T376] f2fs_evict_inode+0x94d/0x1790 [ 36.622179][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 36.627521][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 36.632953][ T376] ? __kasan_check_write+0x14/0x20 [ 36.638036][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 36.643206][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 36.648554][ T376] evict+0x4c4/0x8c0 [ 36.652434][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 36.657265][ T376] ? _raw_spin_lock+0x94/0xf0 [ 36.661926][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 36.667103][ T376] ? __kasan_check_read+0x11/0x20 [ 36.672106][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 36.677023][ T376] ? __kasan_check_write+0x14/0x20 [ 36.682112][ T376] iput+0x633/0x690 [ 36.685899][ T376] f2fs_fill_super+0x5b38/0x7380 [ 36.690816][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 36.696076][ T376] ? mutex_unlock+0x8f/0x230 [ 36.700649][ T376] ? set_blocksize+0x1cc/0x470 [ 36.705398][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 36.710231][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 36.715493][ T376] mount_bdev+0x29b/0x3d0 [ 36.719805][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 36.725069][ T376] f2fs_mount+0x34/0x40 [ 36.729199][ T376] legacy_get_tree+0xfe/0x1a0 [ 36.733862][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 36.738689][ T376] vfs_get_tree+0x9a/0x270 [ 36.743079][ T376] do_new_mount+0x251/0xb40 [ 36.747561][ T376] ? security_capable+0x99/0xc0 [ 36.752388][ T376] path_mount+0x640/0xfd0 [ 36.756700][ T376] __se_sys_mount+0x320/0x390 [ 36.761354][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 36.766091][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 36.771357][ T376] __x64_sys_mount+0xbf/0xd0 [ 36.775923][ T376] x64_sys_call+0x65d/0x9a0 [ 36.780407][ T376] do_syscall_64+0x4c/0xa0 [ 36.784803][ T376] ? clear_bhb_loop+0x30/0x80 [ 36.789456][ T376] ? clear_bhb_loop+0x30/0x80 [ 36.794116][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.799988][ T376] RIP: 0033:0x7ffa06d9f10a [ 36.804384][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.824163][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 36.832552][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 36.840502][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 36.848449][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 36.856405][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 36.864369][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 36.872328][ T376] [ 36.875447][ T376] F2FS-fs (loop2): access invalid blkaddr:4294901760 [ 36.882378][ T376] CPU: 0 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 36.890954][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.900982][ T376] Call Trace: [ 36.904248][ T376] [ 36.907163][ T376] __dump_stack+0x21/0x24 [ 36.911481][ T376] dump_stack_lvl+0x110/0x170 [ 36.916137][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 36.921136][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 36.926569][ T376] dump_stack+0x15/0x24 [ 36.930695][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 36.936219][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 36.941651][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 36.947785][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 36.953325][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 36.959019][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 36.965239][ T376] ? __kasan_check_write+0x14/0x20 [ 36.970323][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 36.975754][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 36.981703][ T376] ? __dquot_initialize+0x236/0xc80 [ 36.986872][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 36.992998][ T376] ? _raw_spin_lock+0x94/0xf0 [ 36.997651][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 37.002817][ T376] f2fs_truncate+0x1d6/0x3d0 [ 37.007375][ T376] f2fs_evict_inode+0x94d/0x1790 [ 37.012288][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 37.017632][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 37.023062][ T376] ? __kasan_check_write+0x14/0x20 [ 37.028144][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 37.033314][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 37.038654][ T376] evict+0x4c4/0x8c0 [ 37.042522][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 37.047345][ T376] ? _raw_spin_lock+0x94/0xf0 [ 37.052003][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 37.057186][ T376] ? __kasan_check_read+0x11/0x20 [ 37.062192][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 37.067105][ T376] ? __kasan_check_write+0x14/0x20 [ 37.072187][ T376] iput+0x633/0x690 [ 37.075968][ T376] f2fs_fill_super+0x5b38/0x7380 [ 37.080883][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 37.086137][ T376] ? mutex_unlock+0x8f/0x230 [ 37.090703][ T376] ? set_blocksize+0x1cc/0x470 [ 37.095447][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 37.100270][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 37.105527][ T376] mount_bdev+0x29b/0x3d0 [ 37.109827][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 37.115085][ T376] f2fs_mount+0x34/0x40 [ 37.119212][ T376] legacy_get_tree+0xfe/0x1a0 [ 37.123861][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 37.128683][ T376] vfs_get_tree+0x9a/0x270 [ 37.133070][ T376] do_new_mount+0x251/0xb40 [ 37.137546][ T376] ? security_capable+0x99/0xc0 [ 37.142367][ T376] path_mount+0x640/0xfd0 [ 37.146670][ T376] __se_sys_mount+0x320/0x390 [ 37.151314][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 37.156046][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 37.161310][ T376] __x64_sys_mount+0xbf/0xd0 [ 37.165870][ T376] x64_sys_call+0x65d/0x9a0 [ 37.170355][ T376] do_syscall_64+0x4c/0xa0 [ 37.174759][ T376] ? clear_bhb_loop+0x30/0x80 [ 37.179414][ T376] ? clear_bhb_loop+0x30/0x80 [ 37.184069][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.189944][ T376] RIP: 0033:0x7ffa06d9f10a [ 37.194334][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.213911][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 37.222297][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 37.230241][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 37.238183][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 37.246130][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 37.254081][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 37.262028][ T376] [ 37.265754][ T376] F2FS-fs (loop2): access invalid blkaddr:4294939625 [ 37.272586][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 37.281169][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.291209][ T376] Call Trace: [ 37.294464][ T376] [ 37.297379][ T376] __dump_stack+0x21/0x24 [ 37.301687][ T376] dump_stack_lvl+0x110/0x170 [ 37.306338][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 37.311336][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 37.317115][ T376] dump_stack+0x15/0x24 [ 37.321244][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 37.326765][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 37.332201][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 37.338337][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 37.343858][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 37.349567][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 37.355784][ T376] ? __kasan_check_write+0x14/0x20 [ 37.360870][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 37.366304][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 37.372255][ T376] ? __dquot_initialize+0x236/0xc80 [ 37.377427][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 37.383555][ T376] ? _raw_spin_lock+0x94/0xf0 [ 37.388208][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 37.393382][ T376] f2fs_truncate+0x1d6/0x3d0 [ 37.397955][ T376] f2fs_evict_inode+0x94d/0x1790 [ 37.402866][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 37.408208][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 37.413640][ T376] ? __kasan_check_write+0x14/0x20 [ 37.418724][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 37.423894][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 37.429238][ T376] evict+0x4c4/0x8c0 [ 37.433108][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 37.437933][ T376] ? _raw_spin_lock+0x94/0xf0 [ 37.442598][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 37.447765][ T376] ? __kasan_check_read+0x11/0x20 [ 37.452764][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 37.457673][ T376] ? __kasan_check_write+0x14/0x20 [ 37.462757][ T376] iput+0x633/0x690 [ 37.466539][ T376] f2fs_fill_super+0x5b38/0x7380 [ 37.471448][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 37.476701][ T376] ? mutex_unlock+0x8f/0x230 [ 37.481268][ T376] ? set_blocksize+0x1cc/0x470 [ 37.486008][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 37.490827][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 37.496086][ T376] mount_bdev+0x29b/0x3d0 [ 37.500391][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 37.505646][ T376] f2fs_mount+0x34/0x40 [ 37.509771][ T376] legacy_get_tree+0xfe/0x1a0 [ 37.514425][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 37.519245][ T376] vfs_get_tree+0x9a/0x270 [ 37.523632][ T376] do_new_mount+0x251/0xb40 [ 37.528110][ T376] ? security_capable+0x99/0xc0 [ 37.532933][ T376] path_mount+0x640/0xfd0 [ 37.537235][ T376] __se_sys_mount+0x320/0x390 [ 37.541881][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 37.546614][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 37.551872][ T376] __x64_sys_mount+0xbf/0xd0 [ 37.556433][ T376] x64_sys_call+0x65d/0x9a0 [ 37.560908][ T376] do_syscall_64+0x4c/0xa0 [ 37.565296][ T376] ? clear_bhb_loop+0x30/0x80 [ 37.569946][ T376] ? clear_bhb_loop+0x30/0x80 [ 37.574592][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.580456][ T376] RIP: 0033:0x7ffa06d9f10a [ 37.584845][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.604419][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 37.612804][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 37.620752][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 37.628696][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 37.636641][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 37.644584][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 37.652531][ T376] [ 37.655854][ T376] F2FS-fs (loop2): access invalid blkaddr:767881944 [ 37.662560][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 37.671122][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.681150][ T376] Call Trace: [ 37.684404][ T376] [ 37.687312][ T376] __dump_stack+0x21/0x24 [ 37.691622][ T376] dump_stack_lvl+0x110/0x170 [ 37.696272][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 37.701268][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 37.706705][ T376] dump_stack+0x15/0x24 [ 37.710836][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 37.716368][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 37.721799][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 37.727930][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 37.733452][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 37.739148][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 37.745365][ T376] ? __kasan_check_write+0x14/0x20 [ 37.750450][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 37.755883][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 37.761837][ T376] ? __dquot_initialize+0x236/0xc80 [ 37.767009][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 37.773135][ T376] ? _raw_spin_lock+0x94/0xf0 [ 37.777805][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 37.782985][ T376] f2fs_truncate+0x1d6/0x3d0 [ 37.787544][ T376] f2fs_evict_inode+0x94d/0x1790 [ 37.792456][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 37.797801][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 37.803246][ T376] ? __kasan_check_write+0x14/0x20 [ 37.808327][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 37.813499][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 37.818842][ T376] evict+0x4c4/0x8c0 [ 37.822714][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 37.827535][ T376] ? _raw_spin_lock+0x94/0xf0 [ 37.832183][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 37.837352][ T376] ? __kasan_check_read+0x11/0x20 [ 37.842348][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 37.847258][ T376] ? __kasan_check_write+0x14/0x20 [ 37.852336][ T376] iput+0x633/0x690 [ 37.856118][ T376] f2fs_fill_super+0x5b38/0x7380 [ 37.861028][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 37.866308][ T376] ? mutex_unlock+0x8f/0x230 [ 37.870873][ T376] ? set_blocksize+0x1cc/0x470 [ 37.875614][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 37.880437][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 37.885693][ T376] mount_bdev+0x29b/0x3d0 [ 37.889998][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 37.895255][ T376] f2fs_mount+0x34/0x40 [ 37.899383][ T376] legacy_get_tree+0xfe/0x1a0 [ 37.904037][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 37.908862][ T376] vfs_get_tree+0x9a/0x270 [ 37.913249][ T376] do_new_mount+0x251/0xb40 [ 37.917732][ T376] ? security_capable+0x99/0xc0 [ 37.922571][ T376] path_mount+0x640/0xfd0 [ 37.926876][ T376] __se_sys_mount+0x320/0x390 [ 37.931523][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 37.936259][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 37.941521][ T376] __x64_sys_mount+0xbf/0xd0 [ 37.946080][ T376] x64_sys_call+0x65d/0x9a0 [ 37.950555][ T376] do_syscall_64+0x4c/0xa0 [ 37.954945][ T376] ? clear_bhb_loop+0x30/0x80 [ 37.959597][ T376] ? clear_bhb_loop+0x30/0x80 [ 37.964242][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.970107][ T376] RIP: 0033:0x7ffa06d9f10a [ 37.974496][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.994071][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 38.002462][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 38.010498][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 38.018452][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 38.026415][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 38.034366][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 38.042319][ T376] [ 38.046102][ T376] F2FS-fs (loop2): access invalid blkaddr:4294936705 [ 38.052848][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 38.061435][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.071473][ T376] Call Trace: [ 38.074738][ T376] [ 38.077650][ T376] __dump_stack+0x21/0x24 [ 38.081963][ T376] dump_stack_lvl+0x110/0x170 [ 38.086617][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 38.091618][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 38.097055][ T376] dump_stack+0x15/0x24 [ 38.101197][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 38.106894][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 38.112330][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 38.118811][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 38.124335][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 38.130030][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 38.136250][ T376] ? __kasan_check_write+0x14/0x20 [ 38.141342][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 38.146778][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 38.152735][ T376] ? __dquot_initialize+0x236/0xc80 [ 38.157910][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 38.164038][ T376] ? _raw_spin_lock+0x94/0xf0 [ 38.168692][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 38.173875][ T376] f2fs_truncate+0x1d6/0x3d0 [ 38.178441][ T376] f2fs_evict_inode+0x94d/0x1790 [ 38.183364][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 38.188716][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 38.194156][ T376] ? __kasan_check_write+0x14/0x20 [ 38.199250][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 38.204431][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 38.209781][ T376] evict+0x4c4/0x8c0 [ 38.213660][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 38.218492][ T376] ? _raw_spin_lock+0x94/0xf0 [ 38.223151][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 38.228330][ T376] ? __kasan_check_read+0x11/0x20 [ 38.233333][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 38.238248][ T376] ? __kasan_check_write+0x14/0x20 [ 38.243338][ T376] iput+0x633/0x690 [ 38.247128][ T376] f2fs_fill_super+0x5b38/0x7380 [ 38.252048][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 38.257309][ T376] ? mutex_unlock+0x8f/0x230 [ 38.261885][ T376] ? set_blocksize+0x1cc/0x470 [ 38.266631][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 38.271458][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 38.276721][ T376] mount_bdev+0x29b/0x3d0 [ 38.281032][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 38.286302][ T376] f2fs_mount+0x34/0x40 [ 38.290437][ T376] legacy_get_tree+0xfe/0x1a0 [ 38.295097][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 38.299927][ T376] vfs_get_tree+0x9a/0x270 [ 38.304320][ T376] do_new_mount+0x251/0xb40 [ 38.308804][ T376] ? security_capable+0x99/0xc0 [ 38.313636][ T376] path_mount+0x640/0xfd0 [ 38.318121][ T376] __se_sys_mount+0x320/0x390 [ 38.322777][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 38.327518][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 38.332785][ T376] __x64_sys_mount+0xbf/0xd0 [ 38.337357][ T376] x64_sys_call+0x65d/0x9a0 [ 38.341839][ T376] do_syscall_64+0x4c/0xa0 [ 38.346242][ T376] ? clear_bhb_loop+0x30/0x80 [ 38.350899][ T376] ? clear_bhb_loop+0x30/0x80 [ 38.355557][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.361444][ T376] RIP: 0033:0x7ffa06d9f10a [ 38.365839][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.385425][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 38.393816][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 38.401767][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 38.409720][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 38.417779][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 38.425732][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 38.433686][ T376] [ 38.440460][ T376] F2FS-fs (loop2): access invalid blkaddr:351764416 [ 38.447075][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 38.455649][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.465682][ T376] Call Trace: [ 38.468941][ T376] [ 38.471850][ T376] __dump_stack+0x21/0x24 [ 38.476164][ T376] dump_stack_lvl+0x110/0x170 [ 38.480822][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 38.485825][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 38.491261][ T376] dump_stack+0x15/0x24 [ 38.495400][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 38.500927][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 38.506365][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 38.512502][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 38.518030][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 38.523732][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 38.529952][ T376] ? __kasan_check_write+0x14/0x20 [ 38.535047][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 38.540487][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 38.546454][ T376] ? __dquot_initialize+0x236/0xc80 [ 38.551634][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 38.557767][ T376] ? _raw_spin_lock+0x94/0xf0 [ 38.562426][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 38.567599][ T376] f2fs_truncate+0x1d6/0x3d0 [ 38.572196][ T376] f2fs_evict_inode+0x94d/0x1790 [ 38.577115][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 38.582464][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 38.587907][ T376] ? __kasan_check_write+0x14/0x20 [ 38.592997][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 38.598174][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 38.603525][ T376] evict+0x4c4/0x8c0 [ 38.607414][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 38.612247][ T376] ? _raw_spin_lock+0x94/0xf0 [ 38.616903][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 38.622084][ T376] ? __kasan_check_read+0x11/0x20 [ 38.627106][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 38.632023][ T376] ? __kasan_check_write+0x14/0x20 [ 38.637110][ T376] iput+0x633/0x690 [ 38.640897][ T376] f2fs_fill_super+0x5b38/0x7380 [ 38.645815][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 38.651075][ T376] ? mutex_unlock+0x8f/0x230 [ 38.655643][ T376] ? set_blocksize+0x1cc/0x470 [ 38.660390][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 38.665216][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 38.670476][ T376] mount_bdev+0x29b/0x3d0 [ 38.674788][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 38.680051][ T376] f2fs_mount+0x34/0x40 [ 38.684183][ T376] legacy_get_tree+0xfe/0x1a0 [ 38.688842][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 38.693668][ T376] vfs_get_tree+0x9a/0x270 [ 38.698061][ T376] do_new_mount+0x251/0xb40 [ 38.702544][ T376] ? security_capable+0x99/0xc0 [ 38.707394][ T376] path_mount+0x640/0xfd0 [ 38.711705][ T376] __se_sys_mount+0x320/0x390 [ 38.716359][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 38.721098][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 38.726366][ T376] __x64_sys_mount+0xbf/0xd0 [ 38.730932][ T376] x64_sys_call+0x65d/0x9a0 [ 38.735423][ T376] do_syscall_64+0x4c/0xa0 [ 38.739820][ T376] ? clear_bhb_loop+0x30/0x80 [ 38.744474][ T376] ? clear_bhb_loop+0x30/0x80 [ 38.749126][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.755000][ T376] RIP: 0033:0x7ffa06d9f10a [ 38.759394][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.778983][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 38.787374][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 38.795324][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 38.803272][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 38.811219][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 38.819166][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 38.827119][ T376] [ 38.830361][ T376] F2FS-fs (loop2): access invalid blkaddr:4294936705 [ 38.837162][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 38.845721][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.855750][ T376] Call Trace: [ 38.859005][ T376] [ 38.861911][ T376] __dump_stack+0x21/0x24 [ 38.866215][ T376] dump_stack_lvl+0x110/0x170 [ 38.870866][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 38.875879][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 38.881310][ T376] dump_stack+0x15/0x24 [ 38.885443][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 38.890967][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 38.896402][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 38.902532][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 38.908059][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 38.913756][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 38.919973][ T376] ? __kasan_check_write+0x14/0x20 [ 38.925058][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 38.930492][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 38.936448][ T376] ? __dquot_initialize+0x236/0xc80 [ 38.941626][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 38.947933][ T376] ? _raw_spin_lock+0x94/0xf0 [ 38.952655][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 38.957830][ T376] f2fs_truncate+0x1d6/0x3d0 [ 38.962423][ T376] f2fs_evict_inode+0x94d/0x1790 [ 38.967339][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 38.972700][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 38.978135][ T376] ? __kasan_check_write+0x14/0x20 [ 38.983220][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 38.988396][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 38.993744][ T376] evict+0x4c4/0x8c0 [ 38.997615][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 39.002446][ T376] ? _raw_spin_lock+0x94/0xf0 [ 39.007105][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 39.012278][ T376] ? __kasan_check_read+0x11/0x20 [ 39.017274][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 39.022184][ T376] ? __kasan_check_write+0x14/0x20 [ 39.027267][ T376] iput+0x633/0x690 [ 39.031168][ T376] f2fs_fill_super+0x5b38/0x7380 [ 39.036148][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 39.041419][ T376] ? mutex_unlock+0x8f/0x230 [ 39.045991][ T376] ? set_blocksize+0x1cc/0x470 [ 39.050740][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 39.055574][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 39.060848][ T376] mount_bdev+0x29b/0x3d0 [ 39.065164][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 39.070426][ T376] f2fs_mount+0x34/0x40 [ 39.074577][ T376] legacy_get_tree+0xfe/0x1a0 [ 39.079232][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 39.084066][ T376] vfs_get_tree+0x9a/0x270 [ 39.088458][ T376] do_new_mount+0x251/0xb40 [ 39.092937][ T376] ? security_capable+0x99/0xc0 [ 39.097765][ T376] path_mount+0x640/0xfd0 [ 39.102075][ T376] __se_sys_mount+0x320/0x390 [ 39.106743][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 39.111528][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 39.116792][ T376] __x64_sys_mount+0xbf/0xd0 [ 39.121356][ T376] x64_sys_call+0x65d/0x9a0 [ 39.125834][ T376] do_syscall_64+0x4c/0xa0 [ 39.130228][ T376] ? clear_bhb_loop+0x30/0x80 [ 39.134883][ T376] ? clear_bhb_loop+0x30/0x80 [ 39.139539][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.145410][ T376] RIP: 0033:0x7ffa06d9f10a [ 39.149796][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.169374][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 39.177782][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 39.185740][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 39.193684][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 39.201628][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 39.209572][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 39.217528][ T376] [ 39.220977][ T376] F2FS-fs (loop2): access invalid blkaddr:767 [ 39.227050][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 39.235612][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 39.245645][ T376] Call Trace: [ 39.248904][ T376] [ 39.251818][ T376] __dump_stack+0x21/0x24 [ 39.256125][ T376] dump_stack_lvl+0x110/0x170 [ 39.260776][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 39.265776][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 39.271210][ T376] dump_stack+0x15/0x24 [ 39.275342][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 39.280866][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 39.286299][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 39.292430][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 39.297952][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 39.303649][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 39.309867][ T376] ? __kasan_check_write+0x14/0x20 [ 39.314959][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 39.320404][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 39.326359][ T376] ? __dquot_initialize+0x236/0xc80 [ 39.331531][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 39.337658][ T376] ? _raw_spin_lock+0x94/0xf0 [ 39.342312][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 39.347491][ T376] f2fs_truncate+0x1d6/0x3d0 [ 39.352058][ T376] f2fs_evict_inode+0x94d/0x1790 [ 39.356977][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 39.362328][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 39.367772][ T376] ? __kasan_check_write+0x14/0x20 [ 39.372865][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 39.378044][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 39.383398][ T376] evict+0x4c4/0x8c0 [ 39.387278][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 39.392111][ T376] ? _raw_spin_lock+0x94/0xf0 [ 39.396767][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 39.401946][ T376] ? __kasan_check_read+0x11/0x20 [ 39.406948][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 39.411866][ T376] ? __kasan_check_write+0x14/0x20 [ 39.416955][ T376] iput+0x633/0x690 [ 39.420744][ T376] f2fs_fill_super+0x5b38/0x7380 [ 39.425664][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 39.430927][ T376] ? mutex_unlock+0x8f/0x230 [ 39.435502][ T376] ? set_blocksize+0x1cc/0x470 [ 39.440250][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 39.445083][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 39.450345][ T376] mount_bdev+0x29b/0x3d0 [ 39.454657][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 39.459946][ T376] f2fs_mount+0x34/0x40 [ 39.464084][ T376] legacy_get_tree+0xfe/0x1a0 [ 39.468747][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 39.473574][ T376] vfs_get_tree+0x9a/0x270 [ 39.477966][ T376] do_new_mount+0x251/0xb40 [ 39.482453][ T376] ? security_capable+0x99/0xc0 [ 39.487283][ T376] path_mount+0x640/0xfd0 [ 39.491602][ T376] __se_sys_mount+0x320/0x390 [ 39.496256][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 39.500996][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 39.506263][ T376] __x64_sys_mount+0xbf/0xd0 [ 39.510829][ T376] x64_sys_call+0x65d/0x9a0 [ 39.515314][ T376] do_syscall_64+0x4c/0xa0 [ 39.519713][ T376] ? clear_bhb_loop+0x30/0x80 [ 39.524366][ T376] ? clear_bhb_loop+0x30/0x80 [ 39.529020][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.534898][ T376] RIP: 0033:0x7ffa06d9f10a [ 39.539301][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.558901][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 39.567305][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 39.575261][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 39.583232][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 39.591198][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 39.599155][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 39.607112][ T376] [ 39.610506][ T376] F2FS-fs (loop2): access invalid blkaddr:16777216 [ 39.617021][ T376] CPU: 0 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 39.625614][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 39.635674][ T376] Call Trace: [ 39.638951][ T376] [ 39.641883][ T376] __dump_stack+0x21/0x24 [ 39.646220][ T376] dump_stack_lvl+0x110/0x170 [ 39.650903][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 39.655928][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 39.661377][ T376] dump_stack+0x15/0x24 [ 39.665519][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 39.671047][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 39.676490][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 39.682632][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 39.688160][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 39.693875][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 39.700104][ T376] ? __kasan_check_write+0x14/0x20 [ 39.705204][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 39.710648][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 39.716628][ T376] ? __dquot_initialize+0x236/0xc80 [ 39.721835][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 39.728095][ T376] ? _raw_spin_lock+0x94/0xf0 [ 39.732774][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 39.737976][ T376] f2fs_truncate+0x1d6/0x3d0 [ 39.742561][ T376] f2fs_evict_inode+0x94d/0x1790 [ 39.747487][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 39.752885][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 39.758335][ T376] ? __kasan_check_write+0x14/0x20 [ 39.763426][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 39.768692][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 39.774045][ T376] evict+0x4c4/0x8c0 [ 39.777925][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 39.782760][ T376] ? _raw_spin_lock+0x94/0xf0 [ 39.787418][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 39.792605][ T376] ? __kasan_check_read+0x11/0x20 [ 39.797607][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 39.802523][ T376] ? __kasan_check_write+0x14/0x20 [ 39.807615][ T376] iput+0x633/0x690 [ 39.811404][ T376] f2fs_fill_super+0x5b38/0x7380 [ 39.816329][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 39.821592][ T376] ? mutex_unlock+0x8f/0x230 [ 39.826166][ T376] ? set_blocksize+0x1cc/0x470 [ 39.830915][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 39.835742][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 39.841005][ T376] mount_bdev+0x29b/0x3d0 [ 39.845318][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 39.850581][ T376] f2fs_mount+0x34/0x40 [ 39.854713][ T376] legacy_get_tree+0xfe/0x1a0 [ 39.859373][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 39.864222][ T376] vfs_get_tree+0x9a/0x270 [ 39.868636][ T376] do_new_mount+0x251/0xb40 [ 39.873129][ T376] ? security_capable+0x99/0xc0 [ 39.877964][ T376] path_mount+0x640/0xfd0 [ 39.882280][ T376] __se_sys_mount+0x320/0x390 [ 39.886951][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 39.891698][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 39.896969][ T376] __x64_sys_mount+0xbf/0xd0 [ 39.901538][ T376] x64_sys_call+0x65d/0x9a0 [ 39.906030][ T376] do_syscall_64+0x4c/0xa0 [ 39.910470][ T376] ? clear_bhb_loop+0x30/0x80 [ 39.915143][ T376] ? clear_bhb_loop+0x30/0x80 [ 39.919809][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.925699][ T376] RIP: 0033:0x7ffa06d9f10a [ 39.930111][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.949707][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 39.958111][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 39.966067][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 39.974021][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 39.981976][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 39.989956][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 39.997916][ T376] [ 40.001177][ T376] F2FS-fs (loop2): access invalid blkaddr:771752191 [ 40.007784][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 40.016362][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 40.026394][ T376] Call Trace: [ 40.029651][ T376] [ 40.032563][ T376] __dump_stack+0x21/0x24 [ 40.036870][ T376] dump_stack_lvl+0x110/0x170 [ 40.041546][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 40.046544][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 40.051978][ T376] dump_stack+0x15/0x24 [ 40.056123][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 40.061666][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 40.067124][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 40.073351][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 40.078877][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 40.084579][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 40.090799][ T376] ? __kasan_check_write+0x14/0x20 [ 40.095887][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 40.101326][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 40.107285][ T376] ? __dquot_initialize+0x236/0xc80 [ 40.112461][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 40.118599][ T376] ? _raw_spin_lock+0x94/0xf0 [ 40.123263][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 40.128437][ T376] f2fs_truncate+0x1d6/0x3d0 [ 40.133002][ T376] f2fs_evict_inode+0x94d/0x1790 [ 40.137917][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 40.143269][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 40.148708][ T376] ? __kasan_check_write+0x14/0x20 [ 40.153795][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 40.158980][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 40.164328][ T376] evict+0x4c4/0x8c0 [ 40.168202][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 40.173035][ T376] ? _raw_spin_lock+0x94/0xf0 [ 40.177686][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 40.182856][ T376] ? __kasan_check_read+0x11/0x20 [ 40.187879][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 40.192793][ T376] ? __kasan_check_write+0x14/0x20 [ 40.197879][ T376] iput+0x633/0x690 [ 40.201667][ T376] f2fs_fill_super+0x5b38/0x7380 [ 40.206580][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 40.211835][ T376] ? mutex_unlock+0x8f/0x230 [ 40.216401][ T376] ? set_blocksize+0x1cc/0x470 [ 40.221147][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 40.225967][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 40.231223][ T376] mount_bdev+0x29b/0x3d0 [ 40.235532][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 40.240788][ T376] f2fs_mount+0x34/0x40 [ 40.244917][ T376] legacy_get_tree+0xfe/0x1a0 [ 40.249659][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 40.254481][ T376] vfs_get_tree+0x9a/0x270 [ 40.258957][ T376] do_new_mount+0x251/0xb40 [ 40.263435][ T376] ? security_capable+0x99/0xc0 [ 40.268259][ T376] path_mount+0x640/0xfd0 [ 40.272575][ T376] __se_sys_mount+0x320/0x390 [ 40.277234][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 40.281969][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 40.287234][ T376] __x64_sys_mount+0xbf/0xd0 [ 40.291819][ T376] x64_sys_call+0x65d/0x9a0 [ 40.296296][ T376] do_syscall_64+0x4c/0xa0 [ 40.300687][ T376] ? clear_bhb_loop+0x30/0x80 [ 40.305336][ T376] ? clear_bhb_loop+0x30/0x80 [ 40.309983][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 40.315874][ T376] RIP: 0033:0x7ffa06d9f10a [ 40.320266][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.339845][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 40.348244][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 40.356191][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 40.364136][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 40.372091][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 40.380039][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 40.387991][ T376] [ 40.393708][ T376] F2FS-fs (loop2): access invalid blkaddr:128 [ 40.400123][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 40.403050][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.408709][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 40.408719][ T376] Call Trace: [ 40.408724][ T376] [ 40.408729][ T376] __dump_stack+0x21/0x24 [ 40.408752][ T376] dump_stack_lvl+0x110/0x170 [ 40.415750][ T381] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.425781][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 40.425799][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 40.425815][ T376] dump_stack+0x15/0x24 [ 40.429983][ T381] device bridge_slave_0 entered promiscuous mode [ 40.431989][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 40.436931][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.440943][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 40.440967][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 40.440991][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 40.448260][ T381] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.452978][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 40.459052][ T381] device bridge_slave_1 entered promiscuous mode [ 40.462637][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 40.514726][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.517676][ T376] ? __kasan_check_write+0x14/0x20 [ 40.523918][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.530887][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 40.530912][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 40.554565][ T376] ? __dquot_initialize+0x236/0xc80 [ 40.559752][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 40.565909][ T376] ? _raw_spin_lock+0x94/0xf0 [ 40.570573][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 40.575747][ T376] f2fs_truncate+0x1d6/0x3d0 [ 40.580311][ T376] f2fs_evict_inode+0x94d/0x1790 [ 40.585251][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 40.590598][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 40.596033][ T376] ? __kasan_check_write+0x14/0x20 [ 40.601117][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 40.606290][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 40.611637][ T376] evict+0x4c4/0x8c0 [ 40.615510][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 40.620334][ T376] ? _raw_spin_lock+0x94/0xf0 [ 40.624988][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 40.630161][ T376] ? __kasan_check_read+0x11/0x20 [ 40.635158][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 40.640076][ T376] ? __kasan_check_write+0x14/0x20 [ 40.645162][ T376] iput+0x633/0x690 [ 40.648945][ T376] f2fs_fill_super+0x5b38/0x7380 [ 40.653864][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 40.659127][ T376] ? mutex_unlock+0x8f/0x230 [ 40.663695][ T376] ? set_blocksize+0x1cc/0x470 [ 40.668435][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 40.673256][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 40.678512][ T376] mount_bdev+0x29b/0x3d0 [ 40.682816][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 40.688078][ T376] f2fs_mount+0x34/0x40 [ 40.692205][ T376] legacy_get_tree+0xfe/0x1a0 [ 40.696856][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 40.701677][ T376] vfs_get_tree+0x9a/0x270 [ 40.706068][ T376] do_new_mount+0x251/0xb40 [ 40.710548][ T376] ? security_capable+0x99/0xc0 [ 40.715655][ T376] path_mount+0x640/0xfd0 [ 40.719971][ T376] __se_sys_mount+0x320/0x390 [ 40.724622][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 40.729357][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 40.734623][ T376] __x64_sys_mount+0xbf/0xd0 [ 40.739187][ T376] x64_sys_call+0x65d/0x9a0 [ 40.743751][ T376] do_syscall_64+0x4c/0xa0 [ 40.748142][ T376] ? clear_bhb_loop+0x30/0x80 [ 40.752790][ T376] ? clear_bhb_loop+0x30/0x80 [ 40.757437][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 40.763306][ T376] RIP: 0033:0x7ffa06d9f10a [ 40.767711][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.787309][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 40.795696][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 40.803642][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 40.811591][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 40.819538][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 40.827484][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 40.835431][ T376] [ 40.838738][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.841565][ T376] F2FS-fs (loop2): access invalid blkaddr:767 [ 40.851831][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 40.860410][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 40.870447][ T376] Call Trace: [ 40.873709][ T376] [ 40.876620][ T376] __dump_stack+0x21/0x24 [ 40.880938][ T376] dump_stack_lvl+0x110/0x170 [ 40.885597][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 40.890697][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 40.896157][ T376] dump_stack+0x15/0x24 [ 40.900306][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 40.905842][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 40.911309][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 40.917461][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 40.923080][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 40.928787][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 40.935016][ T376] ? __kasan_check_write+0x14/0x20 [ 40.940110][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 40.945554][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 40.951517][ T376] ? __dquot_initialize+0x236/0xc80 [ 40.956701][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 40.962841][ T376] ? _raw_spin_lock+0x94/0xf0 [ 40.967502][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 40.972680][ T376] f2fs_truncate+0x1d6/0x3d0 [ 40.977268][ T376] f2fs_evict_inode+0x94d/0x1790 [ 40.982192][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 40.987549][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 40.992994][ T376] ? __kasan_check_write+0x14/0x20 [ 40.998088][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 41.003269][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 41.008632][ T376] evict+0x4c4/0x8c0 [ 41.012514][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 41.017362][ T376] ? _raw_spin_lock+0x94/0xf0 [ 41.022037][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 41.027226][ T376] ? __kasan_check_read+0x11/0x20 [ 41.032243][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 41.037173][ T376] ? __kasan_check_write+0x14/0x20 [ 41.042265][ T376] iput+0x633/0x690 [ 41.046058][ T376] f2fs_fill_super+0x5b38/0x7380 [ 41.050980][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 41.056245][ T376] ? mutex_unlock+0x8f/0x230 [ 41.060827][ T376] ? set_blocksize+0x1cc/0x470 [ 41.065576][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 41.070414][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 41.075683][ T376] mount_bdev+0x29b/0x3d0 [ 41.080005][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 41.085287][ T376] f2fs_mount+0x34/0x40 [ 41.089431][ T376] legacy_get_tree+0xfe/0x1a0 [ 41.094100][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 41.098935][ T376] vfs_get_tree+0x9a/0x270 [ 41.103333][ T376] do_new_mount+0x251/0xb40 [ 41.107827][ T376] ? security_capable+0x99/0xc0 [ 41.112663][ T376] path_mount+0x640/0xfd0 [ 41.116982][ T376] __se_sys_mount+0x320/0x390 [ 41.121640][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 41.126385][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 41.131655][ T376] __x64_sys_mount+0xbf/0xd0 [ 41.136228][ T376] x64_sys_call+0x65d/0x9a0 [ 41.140713][ T376] do_syscall_64+0x4c/0xa0 [ 41.145113][ T376] ? clear_bhb_loop+0x30/0x80 [ 41.149773][ T376] ? clear_bhb_loop+0x30/0x80 [ 41.154430][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 41.160308][ T376] RIP: 0033:0x7ffa06d9f10a [ 41.164701][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.184311][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 41.192707][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 41.200919][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 41.208868][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 41.216819][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 41.224794][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 41.232752][ T376] [ 41.235908][ T376] F2FS-fs (loop2): access invalid blkaddr:16777216 [ 41.242689][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.249944][ T376] CPU: 0 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 41.250247][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.258528][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 41.258538][ T376] Call Trace: [ 41.258544][ T376] [ 41.258550][ T376] __dump_stack+0x21/0x24 [ 41.286207][ T376] dump_stack_lvl+0x110/0x170 [ 41.290866][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 41.295874][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 41.301308][ T376] dump_stack+0x15/0x24 [ 41.305471][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 41.310993][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 41.316438][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 41.322571][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 41.328095][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 41.333794][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 41.340031][ T376] ? __kasan_check_write+0x14/0x20 [ 41.345119][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 41.350555][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 41.356510][ T376] ? __dquot_initialize+0x236/0xc80 [ 41.361685][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 41.367817][ T376] ? _raw_spin_lock+0x94/0xf0 [ 41.372471][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 41.377642][ T376] f2fs_truncate+0x1d6/0x3d0 [ 41.382206][ T376] f2fs_evict_inode+0x94d/0x1790 [ 41.387121][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 41.392466][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 41.397909][ T376] ? __kasan_check_write+0x14/0x20 [ 41.402995][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 41.408169][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 41.413517][ T376] evict+0x4c4/0x8c0 [ 41.417396][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 41.422243][ T376] ? _raw_spin_lock+0x94/0xf0 [ 41.426924][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 41.432102][ T376] ? __kasan_check_read+0x11/0x20 [ 41.437114][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 41.442025][ T376] ? __kasan_check_write+0x14/0x20 [ 41.447111][ T376] iput+0x633/0x690 [ 41.450984][ T376] f2fs_fill_super+0x5b38/0x7380 [ 41.455897][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 41.461155][ T376] ? mutex_unlock+0x8f/0x230 [ 41.465721][ T376] ? set_blocksize+0x1cc/0x470 [ 41.470553][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 41.475377][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 41.480654][ T376] mount_bdev+0x29b/0x3d0 [ 41.485141][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 41.490399][ T376] f2fs_mount+0x34/0x40 [ 41.494531][ T376] legacy_get_tree+0xfe/0x1a0 [ 41.499182][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 41.504177][ T376] vfs_get_tree+0x9a/0x270 [ 41.508566][ T376] do_new_mount+0x251/0xb40 [ 41.513049][ T376] ? security_capable+0x99/0xc0 [ 41.517878][ T376] path_mount+0x640/0xfd0 [ 41.522184][ T376] __se_sys_mount+0x320/0x390 [ 41.526832][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 41.531568][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 41.536831][ T376] __x64_sys_mount+0xbf/0xd0 [ 41.541395][ T376] x64_sys_call+0x65d/0x9a0 [ 41.545872][ T376] do_syscall_64+0x4c/0xa0 [ 41.550263][ T376] ? clear_bhb_loop+0x30/0x80 [ 41.554914][ T376] ? clear_bhb_loop+0x30/0x80 [ 41.559562][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 41.565431][ T376] RIP: 0033:0x7ffa06d9f10a [ 41.569821][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.589488][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 41.597876][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 41.605822][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 41.614207][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 41.622155][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 41.630106][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 41.638058][ T376] [ 41.641239][ T376] F2FS-fs (loop2): access invalid blkaddr:771752191 [ 41.647886][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 41.656471][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 41.666526][ T376] Call Trace: [ 41.669806][ T376] [ 41.672716][ T376] __dump_stack+0x21/0x24 [ 41.677024][ T376] dump_stack_lvl+0x110/0x170 [ 41.681677][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 41.686680][ T376] dump_stack+0x15/0x24 [ 41.690813][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 41.696339][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 41.701809][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 41.707946][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 41.713493][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 41.719192][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 41.725423][ T376] ? __kasan_check_write+0x14/0x20 [ 41.730529][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 41.735966][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 41.741925][ T376] ? __dquot_initialize+0x236/0xc80 [ 41.747109][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 41.753248][ T376] ? _raw_spin_lock+0x94/0xf0 [ 41.757910][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 41.763089][ T376] f2fs_truncate+0x1d6/0x3d0 [ 41.767658][ T376] f2fs_evict_inode+0x94d/0x1790 [ 41.772580][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 41.777935][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 41.783382][ T376] ? __kasan_check_write+0x14/0x20 [ 41.788476][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 41.793657][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 41.799019][ T376] evict+0x4c4/0x8c0 [ 41.802904][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 41.807739][ T376] ? _raw_spin_lock+0x94/0xf0 [ 41.812399][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 41.817581][ T376] ? __kasan_check_read+0x11/0x20 [ 41.822584][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 41.827504][ T376] ? __kasan_check_write+0x14/0x20 [ 41.832595][ T376] iput+0x633/0x690 [ 41.836388][ T376] f2fs_fill_super+0x5b38/0x7380 [ 41.841310][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 41.846573][ T376] ? mutex_unlock+0x8f/0x230 [ 41.851147][ T376] ? set_blocksize+0x1cc/0x470 [ 41.855897][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 41.860725][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 41.865988][ T376] mount_bdev+0x29b/0x3d0 [ 41.870301][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 41.875565][ T376] f2fs_mount+0x34/0x40 [ 41.879699][ T376] legacy_get_tree+0xfe/0x1a0 [ 41.884363][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 41.889202][ T376] vfs_get_tree+0x9a/0x270 [ 41.893620][ T376] do_new_mount+0x251/0xb40 [ 41.898121][ T376] ? security_capable+0x99/0xc0 [ 41.902966][ T376] path_mount+0x640/0xfd0 [ 41.907293][ T376] __se_sys_mount+0x320/0x390 [ 41.911969][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 41.916729][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 41.922016][ T376] __x64_sys_mount+0xbf/0xd0 [ 41.926591][ T376] x64_sys_call+0x65d/0x9a0 [ 41.931080][ T376] do_syscall_64+0x4c/0xa0 [ 41.935483][ T376] ? clear_bhb_loop+0x30/0x80 [ 41.940140][ T376] ? clear_bhb_loop+0x30/0x80 [ 41.944800][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 41.950677][ T376] RIP: 0033:0x7ffa06d9f10a [ 41.955073][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.974661][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 41.983056][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 41.991054][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 41.999006][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 42.006956][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 42.014940][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 42.022895][ T376] [ 42.026337][ T10] device bridge_slave_1 left promiscuous mode [ 42.032766][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.039909][ T376] F2FS-fs (loop2): access invalid blkaddr:767881424 [ 42.046538][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 42.046716][ T10] device bridge_slave_0 left promiscuous mode [ 42.055118][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 42.055129][ T376] Call Trace: [ 42.055135][ T376] [ 42.055140][ T376] __dump_stack+0x21/0x24 [ 42.055163][ T376] dump_stack_lvl+0x110/0x170 [ 42.055186][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 42.055204][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 42.055220][ T376] dump_stack+0x15/0x24 [ 42.055236][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 42.055256][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 42.061928][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.071332][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 42.071363][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 42.130598][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 42.136302][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 42.142519][ T376] ? __kasan_check_write+0x14/0x20 [ 42.147605][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 42.153039][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 42.158995][ T376] ? __dquot_initialize+0x236/0xc80 [ 42.164169][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 42.170298][ T376] ? _raw_spin_lock+0x94/0xf0 [ 42.174950][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 42.180127][ T376] f2fs_truncate+0x1d6/0x3d0 [ 42.184691][ T376] f2fs_evict_inode+0x94d/0x1790 [ 42.189606][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 42.194951][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 42.200384][ T376] ? __kasan_check_write+0x14/0x20 [ 42.205467][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 42.210643][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 42.216517][ T376] evict+0x4c4/0x8c0 [ 42.220393][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 42.225218][ T376] ? _raw_spin_lock+0x94/0xf0 [ 42.229870][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 42.235045][ T376] ? __kasan_check_read+0x11/0x20 [ 42.240068][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 42.244980][ T376] ? __kasan_check_write+0x14/0x20 [ 42.250063][ T376] iput+0x633/0x690 [ 42.253847][ T376] f2fs_fill_super+0x5b38/0x7380 [ 42.258761][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 42.264017][ T376] ? mutex_unlock+0x8f/0x230 [ 42.268585][ T376] ? set_blocksize+0x1cc/0x470 [ 42.273326][ T376] ? sb_set_blocksize+0xaa/0xf0 [ 42.278146][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 42.283422][ T376] mount_bdev+0x29b/0x3d0 [ 42.287809][ T376] ? __cfi_f2fs_fill_super+0x10/0x10 [ 42.293097][ T376] f2fs_mount+0x34/0x40 [ 42.297239][ T376] legacy_get_tree+0xfe/0x1a0 [ 42.301928][ T376] ? __cfi_f2fs_mount+0x10/0x10 [ 42.306763][ T376] vfs_get_tree+0x9a/0x270 [ 42.311155][ T376] do_new_mount+0x251/0xb40 [ 42.315636][ T376] ? security_capable+0x99/0xc0 [ 42.320464][ T376] path_mount+0x640/0xfd0 [ 42.324769][ T376] __se_sys_mount+0x320/0x390 [ 42.329422][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 42.334158][ T376] ? do_user_addr_fault+0x9a5/0x1030 [ 42.339439][ T376] __x64_sys_mount+0xbf/0xd0 [ 42.344001][ T376] x64_sys_call+0x65d/0x9a0 [ 42.348653][ T376] do_syscall_64+0x4c/0xa0 [ 42.353046][ T376] ? clear_bhb_loop+0x30/0x80 [ 42.357693][ T376] ? clear_bhb_loop+0x30/0x80 [ 42.362340][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 42.368212][ T376] RIP: 0033:0x7ffa06d9f10a [ 42.372610][ T376] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.392207][ T376] RSP: 002b:00007ffc176dbbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 42.400609][ T376] RAX: ffffffffffffffda RBX: 00007ffc176dbc80 RCX: 00007ffa06d9f10a [ 42.408565][ T376] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00007ffc176dbc40 [ 42.416541][ T376] RBP: 0000200000000140 R08: 00007ffc176dbc80 R09: 00000000000004c2 [ 42.424496][ T376] R10: 00000000000004c2 R11: 0000000000000246 R12: 0000200000000300 [ 42.432449][ T376] R13: 00007ffc176dbc40 R14: 0000000000005541 R15: 0000200000000a80 [ 42.440490][ T376] [ 42.443817][ T376] F2FS-fs (loop2): access invalid blkaddr:4294936705 [ 42.450524][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0 [ 42.450625][ T10] device veth1_macvtap left promiscuous mode [ 42.459099][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 42.459110][ T376] Call Trace: [ 42.459115][ T376] [ 42.459121][ T376] __dump_stack+0x21/0x24 [ 42.465169][ T10] device veth0_vlan left promiscuous mode [ 42.475113][ T376] dump_stack_lvl+0x110/0x170 [ 42.475134][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 42.475151][ T376] ? f2fs_dirty_node_folio+0x1fb/0x330 [ 42.506358][ T376] dump_stack+0x15/0x24 [ 42.510500][ T376] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 42.516025][ T376] f2fs_is_valid_blkaddr_raw+0x23/0x30 [ 42.521463][ T376] f2fs_truncate_data_blocks_range+0x5f3/0xef0 [ 42.527596][ T376] f2fs_truncate_data_blocks+0xf3/0x130 [ 42.533122][ T376] f2fs_truncate_inode_blocks+0x85b/0xfb0 [ 42.538837][ T376] ? __cfi_f2fs_truncate_inode_blocks+0x10/0x10 [ 42.545065][ T376] ? __kasan_check_write+0x14/0x20 [ 42.550167][ T376] f2fs_do_truncate_blocks+0x69f/0xbf0 [ 42.555614][ T376] ? __cfi_f2fs_do_truncate_blocks+0x10/0x10 [ 42.561598][ T376] ? __dquot_initialize+0x236/0xc80 [ 42.566778][ T376] ? __cfi_f2fs_convert_inline_inode+0x10/0x10 [ 42.572910][ T376] ? _raw_spin_lock+0x94/0xf0 [ 42.577582][ T376] f2fs_truncate_blocks+0x10b/0x310 [ 42.582760][ T376] f2fs_truncate+0x1d6/0x3d0 [ 42.587324][ T376] f2fs_evict_inode+0x94d/0x1790 [ 42.592235][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 42.597581][ T376] ? __cfi_wake_bit_function+0x10/0x10 [ 42.603021][ T376] ? __kasan_check_write+0x14/0x20 [ 42.608117][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 42.613290][ T376] ? __cfi_f2fs_evict_inode+0x10/0x10 [ 42.618638][ T376] evict+0x4c4/0x8c0 [ 42.622513][ T376] ? proc_nr_inodes+0x2f0/0x2f0 [ 42.627339][ T376] ? _raw_spin_lock+0x94/0xf0 [ 42.631992][ T376] ? __cfi__raw_spin_lock+0x10/0x10 [ 42.637165][ T376] ? __kasan_check_read+0x11/0x20 [ 42.642162][ T376] ? f2fs_drop_inode+0x173/0x9c0 [ 42.647084][ T376] ? __kasan_check_write+0x14/0x20 [ 42.652183][ T376] iput+0x633/0x690