------------[ cut here ]------------ block_group >= groups_count - block_group = 8096, groups_count = 1 WARNING: CPU: 1 PID: 4549 at fs/ext2/balloc.c:51 ext2_get_group_desc fs/ext2/balloc.c:-1 [inline] WARNING: CPU: 1 PID: 4549 at fs/ext2/balloc.c:51 read_block_bitmap+0x1ec/0x754 fs/ext2/balloc.c:136 Modules linked in: CPU: 1 PID: 4549 Comm: syz.4.31 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : ext2_get_group_desc fs/ext2/balloc.c:-1 [inline] pc : read_block_bitmap+0x1ec/0x754 fs/ext2/balloc.c:136 lr : ext2_get_group_desc fs/ext2/balloc.c:49 [inline] lr : read_block_bitmap+0x1e8/0x754 fs/ext2/balloc.c:136 sp : ffff800021507550 x29: ffff800021507580 x28: dfff800000000000 x27: 1fffe0001a72a0cf x26: 0000000000000001 x25: ffff0000e1033000 x24: 0000000000001fa0 x23: ffff0000d3950678 x22: 0000000000000001 x21: ffff0000d3950678 x20: ffff0000d3950000 x19: 0000000000001fa0 x18: ffff800011a5bd40 x17: 0000000000000000 x16: ffff8000082d3a08 x15: 0000000000000002 x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000080000 x11: 0000000000053ddb x10: ffff80002c7fc000 x9 : bae4a841f64b4b00 x8 : bae4a841f64b4b00 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff800021506fd8 x4 : ffff800015134e00 x3 : ffff80000852f9b8 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: ext2_get_group_desc fs/ext2/balloc.c:-1 [inline] read_block_bitmap+0x1ec/0x754 fs/ext2/balloc.c:136 ext2_free_blocks+0x288/0x988 fs/ext2/balloc.c:521 ext2_free_data fs/ext2/inode.c:1099 [inline] __ext2_truncate_blocks+0x2a8/0xbc0 fs/ext2/inode.c:1190 ext2_truncate_blocks fs/ext2/inode.c:1259 [inline] ext2_write_failed+0x1fc/0x270 fs/ext2/inode.c:65 ext2_write_begin+0x70/0x88 fs/ext2/inode.c:905 generic_perform_write+0x230/0x4e4 mm/filemap.c:3862 __generic_file_write_iter+0x130/0x250 mm/filemap.c:3960 generic_file_write_iter+0xb4/0x2b0 mm/filemap.c:3989 ext2_file_write_iter+0xc4/0x404 fs/ext2/file.c:179 call_write_iter include/linux/fs.h:2265 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x5ac/0x7c4 fs/read_write.c:584 ksys_pwrite64 fs/read_write.c:699 [inline] __do_sys_pwrite64 fs/read_write.c:709 [inline] __se_sys_pwrite64 fs/read_write.c:706 [inline] __arm64_sys_pwrite64+0x170/0x200 fs/read_write.c:706 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 1486 hardirqs last enabled at (1485): [] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:261 hardirqs last disabled at (1486): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (1412): [] softirq_handle_end kernel/softirq.c:439 [inline] softirqs last enabled at (1412): [] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:624 softirqs last disabled at (1241): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]--- EXT2-fs (loop4): error: ext2_free_blocks: Freeing blocks not in datazone - block = 29554, count = 1 syz.4.31: attempt to access beyond end of device loop4: rw=2049, sector=2, nr_sectors = 2 limit=2 Buffer I/O error on dev loop4, logical block 1, lost sync page write EXT2-fs (loop4): error: ext2_get_inode: unable to read inode block - inode=2, block=5