------------[ cut here ]------------ block_group >= groups_count - block_group = 220115, groups_count = 1 WARNING: CPU: 0 PID: 4444 at fs/ext2/balloc.c:51 ext2_get_group_desc fs/ext2/balloc.c:-1 [inline] WARNING: CPU: 0 PID: 4444 at fs/ext2/balloc.c:51 read_block_bitmap+0x1ec/0x754 fs/ext2/balloc.c:136 Modules linked in: CPU: 0 PID: 4444 Comm: syz.2.3 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : ext2_get_group_desc fs/ext2/balloc.c:-1 [inline] pc : read_block_bitmap+0x1ec/0x754 fs/ext2/balloc.c:136 lr : ext2_get_group_desc fs/ext2/balloc.c:49 [inline] lr : read_block_bitmap+0x1e8/0x754 fs/ext2/balloc.c:136 sp : ffff800020f372b0 x29: ffff800020f372e0 x28: dfff800000000000 x27: 1fffe0001f06a8cf x26: 0000000000000001 x25: ffff0000de8a8000 x24: 0000000000035bd3 x23: ffff0000f8354678 x22: 0000000000000001 x21: ffff0000f8354678 x20: ffff0000f8354000 x19: 0000000000035bd3 x18: 0000000000000000 x17: 0000000000000000 x16: ffff8000082d9364 x15: 0000000000000000 x14: 0000000000000001 x13: 1fffe00033ea87a3 x12: 0000000000ff0100 x11: ff00800008194238 x10: 0000000000000000 x9 : 1320d93418cf8d00 x8 : 1320d93418cf8d00 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff800020f36d38 x4 : ffff8000152f4cc0 x3 : ffff800008538704 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: ext2_get_group_desc fs/ext2/balloc.c:-1 [inline] read_block_bitmap+0x1ec/0x754 fs/ext2/balloc.c:136 ext2_free_blocks+0x288/0x984 fs/ext2/balloc.c:521 ext2_free_data fs/ext2/inode.c:1099 [inline] __ext2_truncate_blocks+0x2c4/0xc08 fs/ext2/inode.c:1190 ext2_setsize fs/ext2/inode.c:1288 [inline] ext2_setattr+0x900/0xbe0 fs/ext2/inode.c:1658 notify_change+0xb0c/0xdcc fs/attr.c:499 do_truncate+0x188/0x20c fs/open.c:65 handle_truncate fs/namei.c:3293 [inline] do_open fs/namei.c:3638 [inline] path_openat+0x2110/0x26bc fs/namei.c:3791 do_filp_open+0x194/0x384 fs/namei.c:3818 do_sys_openat2+0x134/0x3f4 fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __arm64_sys_openat+0x118/0x14c fs/open.c:1347 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 806 hardirqs last enabled at (805): [] __up_console_sem+0xb4/0xfc kernel/printk/printk.c:261 hardirqs last disabled at (806): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (694): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (692): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ block_group >= groups_count - block_group = 207715, groups_count = 1 WARNING: CPU: 0 PID: 4444 at fs/ext2/balloc.c:51 ext2_get_group_desc fs/ext2/balloc.c:-1 [inline] WARNING: CPU: 0 PID: 4444 at fs/ext2/balloc.c:51 read_block_bitmap+0x1ec/0x754 fs/ext2/balloc.c:136 Modules linked in: CPU: 0 PID: 4444 Comm: syz.2.3 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : ext2_get_group_desc fs/ext2/balloc.c:-1 [inline] pc : read_block_bitmap+0x1ec/0x754 fs/ext2/balloc.c:136 lr : ext2_get_group_desc fs/ext2/balloc.c:49 [inline] lr : read_block_bitmap+0x1e8/0x754 fs/ext2/balloc.c:136 sp : ffff800020f372b0 x29: ffff800020f372e0 x28: dfff800000000000 x27: 1fffe0001f06a8cf x26: 0000000000000001 x25: ffff0000de8a8000 x24: 0000000000032b63 x23: ffff0000f8354678 x22: 0000000000000001 x21: ffff0000f8354678 x20: ffff0000f8354000 x19: 0000000000032b63 x18: ffff800011b8bf60 x17: ffff800018349000 x16: ffff8000082d9364 x15: ffff800017e2a000 x14: 0000000000000001 x13: 1fffe00019d4dd0b x12: 0000000000ff0100 x11: ff0080000819f070 x10: 0000000000000000 x9 : 1320d93418cf8d00 x8 : 1320d93418cf8d00 x7 : ffff80000a8dc744 x6 : 0000000000000000 x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000819f018 x2 : 0000000000000001 x1 : 0000000000000002 x0 : 0000000000000000 Call trace: ext2_get_group_desc fs/ext2/balloc.c:-1 [inline] read_block_bitmap+0x1ec/0x754 fs/ext2/balloc.c:136 ext2_free_blocks+0x288/0x984 fs/ext2/balloc.c:521 ext2_free_data fs/ext2/inode.c:1099 [inline] __ext2_truncate_blocks+0x2c4/0xc08 fs/ext2/inode.c:1190 ext2_setsize fs/ext2/inode.c:1288 [inline] ext2_setattr+0x900/0xbe0 fs/ext2/inode.c:1658 notify_change+0xb0c/0xdcc fs/attr.c:499 do_truncate+0x188/0x20c fs/open.c:65 handle_truncate fs/namei.c:3293 [inline] do_open fs/namei.c:3638 [inline] path_openat+0x2110/0x26bc fs/namei.c:3791 do_filp_open+0x194/0x384 fs/namei.c:3818 do_sys_openat2+0x134/0x3f4 fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __arm64_sys_openat+0x118/0x14c fs/open.c:1347 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 898 hardirqs last enabled at (897): [] call_rcu+0x594/0x94c kernel/rcu/tree.c:2884 hardirqs last disabled at (898): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (858): [] softirq_handle_end kernel/softirq.c:439 [inline] softirqs last enabled at (858): [] handle_softirqs+0xaec/0xc60 kernel/softirq.c:624 softirqs last disabled at (809): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ block_group >= groups_count - block_group = 3, groups_count = 1 WARNING: CPU: 0 PID: 4444 at fs/ext2/balloc.c:51 ext2_get_group_desc fs/ext2/balloc.c:-1 [inline] WARNING: CPU: 0 PID: 4444 at fs/ext2/balloc.c:51 read_block_bitmap+0x1ec/0x754 fs/ext2/balloc.c:136 Modules linked in: CPU: 0 PID: 4444 Comm: syz.2.3 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : ext2_get_group_desc fs/ext2/balloc.c:-1 [inline] pc : read_block_bitmap+0x1ec/0x754 fs/ext2/balloc.c:136 lr : ext2_get_group_desc fs/ext2/balloc.c:49 [inline] lr : read_block_bitmap+0x1e8/0x754 fs/ext2/balloc.c:136 sp : ffff800020f372b0 x29: ffff800020f372e0 x28: dfff800000000000 x27: 1fffe0001f06a8cf x26: 0000000000000001 x25: ffff0000de8a8000 x24: 0000000000000003 x23: ffff0000f8354678 x22: 0000000000000001 x21: ffff0000f8354678 x20: ffff0000f8354000 x19: 0000000000000003 x18: ffff800011b8bf60 x17: ffff800018349000 x16: ffff8000082d9364 x15: ffff8000089a0c30 x14: 0000000000000001 x13: 1ffff00002b4c762 x12: 0000000000ff0100 x11: ff0080000a8da424 x10: 0000000000000003 x9 : 1320d93418cf8d00 x8 : 1320d93418cf8d00 x7 : ffff80000805983c x6 : ffff800008059a4c x5 : ffff0000f84fb560 x4 : ffff800020f36ce8 x3 : 0000000000000000 x2 : 0000000000000006 x1 : ffff800011b8da80 x0 : 0000000000000000 Call trace: ext2_get_group_desc fs/ext2/balloc.c:-1 [inline] read_block_bitmap+0x1ec/0x754 fs/ext2/balloc.c:136 ext2_free_blocks+0x288/0x984 fs/ext2/balloc.c:521 ext2_free_data fs/ext2/inode.c:1099 [inline] __ext2_truncate_blocks+0x2c4/0xc08 fs/ext2/inode.c:1190 ext2_setsize fs/ext2/inode.c:1288 [inline] ext2_setattr+0x900/0xbe0 fs/ext2/inode.c:1658 notify_change+0xb0c/0xdcc fs/attr.c:499 do_truncate+0x188/0x20c fs/open.c:65 handle_truncate fs/namei.c:3293 [inline] do_open fs/namei.c:3638 [inline] path_openat+0x2110/0x26bc fs/namei.c:3791 do_filp_open+0x194/0x384 fs/namei.c:3818 do_sys_openat2+0x134/0x3f4 fs/open.c:1320 do_sys_open fs/open.c:1336 [inline] __do_sys_openat fs/open.c:1352 [inline] __se_sys_openat fs/open.c:1347 [inline] __arm64_sys_openat+0x118/0x14c fs/open.c:1347 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 1240 hardirqs last enabled at (1239): [] call_rcu+0x594/0x94c kernel/rcu/tree.c:2884 hardirqs last disabled at (1240): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (1216): [] softirq_handle_end kernel/softirq.c:439 [inline] softirqs last enabled at (1216): [] handle_softirqs+0xaec/0xc60 kernel/softirq.c:624 softirqs last disabled at (989): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]--- EXT2-fs (loop2): error: ext2_free_blocks: Freeing blocks not in datazone - block = 4294967040, count = 1