ci2 starts bisection 2024-10-07 02:59:09.168165608 +0000 UTC m=+303236.749016109
bisecting fixing commit since af58dc05bbd2ea4e3996ff7c24db2f42176be3df
building syzkaller on ecca8a243762a781257ba0b65291bca940e13e9c
ensuring issue is reproducible on original commit af58dc05bbd2ea4e3996ff7c24db2f42176be3df

testing commit af58dc05bbd2ea4e3996ff7c24db2f42176be3df gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 16064310a1e58efeb77f464112de5002c4d8068d23b2cda256d5bf53189bd8a4
run #0: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #1: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #2: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #3: crashed: KASAN: slab-out-of-bounds Read in f2fs_truncate_data_blocks_range
run #4: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #5: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #6: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #7: crashed: KASAN: slab-out-of-bounds Read in f2fs_truncate_data_blocks_range
run #8: crashed: KASAN: slab-out-of-bounds Read in f2fs_truncate_data_blocks_range
run #9: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #10: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #11: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #12: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #13: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #14: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #15: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #16: crashed: KASAN: slab-out-of-bounds Read in f2fs_truncate_data_blocks_range
run #17: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #18: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #19: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
representative crash: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range, types: [KASAN]
check whether we can drop unnecessary instrumentation
disabling configs for [LEAK UBSAN BUG LOCKDEP ATOMIC_SLEEP HANG], they are not needed
testing commit af58dc05bbd2ea4e3996ff7c24db2f42176be3df gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: c0d7589fab87f75b7a8232a888ca3a86aaaae2d6f7d57622ed85b1f77d992263
run #0: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #1: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #2: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #3: crashed: KASAN: slab-out-of-bounds Read in f2fs_truncate_data_blocks_range
run #4: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #5: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #6: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #7: crashed: KASAN: slab-out-of-bounds Read in f2fs_truncate_data_blocks_range
run #8: crashed: KASAN: slab-out-of-bounds Read in f2fs_truncate_data_blocks_range
run #9: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
representative crash: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range, types: [KASAN]
the bug reproduces without the instrumentation
disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed
kconfig minimization: base=5179 full=6520 leaves diff=251
split chunks (needed=false): <251>
split chunk #0 of len 251 into 5 parts
testing without sub-chunk 1/5
disabling configs for [UBSAN BUG LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed
testing commit af58dc05bbd2ea4e3996ff7c24db2f42176be3df gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 34c75927a889f3d254c336bf89a8d0e9e90638896f36342e62b7c43cf3d1a2fa
run #0: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #1: crashed: KASAN: slab-out-of-bounds Read in f2fs_truncate_data_blocks_range
run #2: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #3: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #4: crashed: KASAN: slab-out-of-bounds Read in f2fs_truncate_data_blocks_range
run #5: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #6: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #7: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #8: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #9: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
representative crash: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range, types: [KASAN]
the chunk can be dropped
testing without sub-chunk 2/5
disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed
testing commit af58dc05bbd2ea4e3996ff7c24db2f42176be3df gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 3de445af7e6118d222c6f0e1ecd70bcd6fdbb8e10989cb4558a81bf1f2ed4b2b
run #0: crashed: KASAN: slab-out-of-bounds Read in f2fs_truncate_data_blocks_range
run #1: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #2: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #3: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #4: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #5: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #6: crashed: KASAN: slab-out-of-bounds Read in f2fs_truncate_data_blocks_range
run #7: crashed: KASAN: slab-out-of-bounds Read in f2fs_truncate_data_blocks_range
run #8: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
run #9: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
representative crash: KASAN: slab-out-of-bounds Read in f2fs_truncate_data_blocks_range, types: [KASAN]
the chunk can be dropped
testing without sub-chunk 3/5
disabling configs for [BUG LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed
testing commit af58dc05bbd2ea4e3996ff7c24db2f42176be3df gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 1fe013db0ab53ff5fce814a4eeb18546bf1298440822f907623669087388e4da
all runs: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
representative crash: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range, types: [KASAN]
the chunk can be dropped
testing without sub-chunk 4/5
disabling configs for [LEAK UBSAN BUG LOCKDEP ATOMIC_SLEEP HANG], they are not needed
testing commit af58dc05bbd2ea4e3996ff7c24db2f42176be3df gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: c4ed12db72c075fc0a054b547b57ed29f77a69546f83ec0030ce338bd811b2eb
all runs: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
representative crash: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range, types: [KASAN]
the chunk can be dropped
testing without sub-chunk 5/5
disabling configs for [HANG LEAK UBSAN BUG LOCKDEP ATOMIC_SLEEP], they are not needed
testing commit af58dc05bbd2ea4e3996ff7c24db2f42176be3df gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
failed building af58dc05bbd2ea4e3996ff7c24db2f42176be3df: net/socket.c:1225: undefined reference to `wext_handle_ioctl'
net/socket.c:3420: undefined reference to `compat_wext_handle_ioctl'
net/core/net-procfs.c:329: undefined reference to `wext_proc_init'
net/core/net-procfs.c:345: undefined reference to `wext_proc_exit'
minimized to 47 configs; suspects: [HID_ZEROPLUS USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_PURELIFI WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_SILABS WLAN_VENDOR_ZYDAS X86_X32_ABI ZEROPLUS_FF]
disabling configs for [HANG LEAK UBSAN BUG LOCKDEP ATOMIC_SLEEP], they are not needed
testing current HEAD d4dab27b9d1c37f6e52926b554ebfef294d93176
testing commit d4dab27b9d1c37f6e52926b554ebfef294d93176 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 2e5d7533b799f68a806b3478cdcb63fc47538101eeeb6ffed6ccd4657d8ba701
all runs: crashed: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
representative crash: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range, types: [KASAN]
crash still not fixed/happens on the oldest tested release
revisions tested: 7, total time: 2h16m36.355107734s (build: 1h15m53.232445633s, test: 57m21.477619294s)
crash still not fixed or there were kernel test errors
commit msg: UPSTREAM: f2fs: fix to update i_ctime in __f2fs_setxattr()
crash: KASAN: use-after-free Read in f2fs_truncate_data_blocks_range
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
==================================================================
BUG: KASAN: use-after-free in f2fs_truncate_data_blocks_range+0x5ca/0xca0 fs/f2fs/file.c:572
Read of size 4 at addr ffff88811d6ef000 by task syz-executor.0/356

CPU: 1 PID: 356 Comm: syz-executor.0 Not tainted 6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 print_address_description mm/kasan/report.c:316 [inline]
 print_report+0x158/0x4e0 mm/kasan/report.c:427
 kasan_report+0x13c/0x170 mm/kasan/report.c:531
 __asan_report_load4_noabort+0x14/0x20 mm/kasan/report_generic.c:350
 f2fs_truncate_data_blocks_range+0x5ca/0xca0 fs/f2fs/file.c:572
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>

Allocated by task 325:
 kasan_save_stack mm/kasan/common.c:45 [inline]
 kasan_set_track+0x4b/0x70 mm/kasan/common.c:52
 kasan_save_alloc_info+0x1f/0x30 mm/kasan/generic.c:505
 __kasan_slab_alloc+0x6c/0x80 mm/kasan/common.c:333
 kasan_slab_alloc include/linux/kasan.h:202 [inline]
 slab_post_alloc_hook+0x59/0x270 mm/slab.h:768
 slab_alloc_node mm/slub.c:3421 [inline]
 slab_alloc mm/slub.c:3429 [inline]
 __kmem_cache_alloc_lru mm/slub.c:3436 [inline]
 kmem_cache_alloc+0x175/0x2c0 mm/slub.c:3445
 __build_skb+0x29/0x3d0 net/core/skbuff.c:322
 build_skb+0x1b/0x190 net/core/skbuff.c:339
 page_to_skb+0xe2/0xa60 drivers/net/virtio_net.c:487
 receive_mergeable drivers/net/virtio_net.c:1128 [inline]
 receive_buf+0x3b7/0x4350 drivers/net/virtio_net.c:1267
 virtnet_receive drivers/net/virtio_net.c:1562 [inline]
 virtnet_poll+0x5bf/0x10e0 drivers/net/virtio_net.c:1680
 __napi_poll+0x9d/0x4b0 net/core/dev.c:6545
 napi_poll net/core/dev.c:6612 [inline]
 net_rx_action+0x533/0xcd0 net/core/dev.c:6726
 handle_softirqs+0x1d2/0x5f0 kernel/softirq.c:617
 __do_softirq kernel/softirq.c:655 [inline]
 invoke_softirq kernel/softirq.c:472 [inline]
 __irq_exit_rcu+0x52/0xf0 kernel/softirq.c:704
 irq_exit_rcu+0x9/0x10 kernel/softirq.c:716
 common_interrupt+0xb4/0xd0 arch/x86/kernel/irq.c:240
 asm_common_interrupt+0x27/0x40 arch/x86/include/asm/idtentry.h:644

Freed by task 325:
 kasan_save_stack mm/kasan/common.c:45 [inline]
 kasan_set_track+0x4b/0x70 mm/kasan/common.c:52
 kasan_save_free_info+0x2b/0x40 mm/kasan/generic.c:516
 ____kasan_slab_free+0x131/0x180 mm/kasan/common.c:241
 __kasan_slab_free+0x11/0x20 mm/kasan/common.c:249
 kasan_slab_free include/linux/kasan.h:178 [inline]
 slab_free_hook mm/slub.c:1745 [inline]
 slab_free_freelist_hook mm/slub.c:1771 [inline]
 slab_free mm/slub.c:3684 [inline]
 kmem_cache_free+0x264/0x450 mm/slub.c:3706
 kfree_skb_partial+0x26/0x70 net/core/skbuff.c:5427
 tcp_data_queue+0x50b1/0x7350 net/ipv4/tcp_input.c:5117
 tcp_rcv_established+0xc6b/0x1dc0 net/ipv4/tcp_input.c:6045
 tcp_v4_do_rcv+0x231/0x8a0 net/ipv4/tcp_ipv4.c:1683
 tcp_v4_rcv+0x1c2e/0x2410 net/ipv4/tcp_ipv4.c:2114
 ip_protocol_deliver_rcu+0x21b/0x540 net/ipv4/ip_input.c:205
 ip_local_deliver_finish+0x1d4/0x3d0 net/ipv4/ip_input.c:233
 NF_HOOK include/linux/netfilter.h:305 [inline]
 ip_local_deliver+0x17e/0x340 net/ipv4/ip_input.c:254
 dst_input include/net/dst.h:454 [inline]
 ip_sublist_rcv_finish net/ipv4/ip_input.c:580 [inline]
 ip_list_rcv_finish net/ipv4/ip_input.c:631 [inline]
 ip_sublist_rcv+0x69f/0x8f0 net/ipv4/ip_input.c:639
 ip_list_rcv+0x408/0x450 net/ipv4/ip_input.c:674
 __netif_receive_skb_list_ptype net/core/dev.c:5579 [inline]
 __netif_receive_skb_list_core+0x64b/0x7f0 net/core/dev.c:5627
 __netif_receive_skb_list net/core/dev.c:5679 [inline]
 netif_receive_skb_list_internal+0x80c/0xb00 net/core/dev.c:5770
 gro_normal_list include/net/gro.h:433 [inline]
 napi_complete_done+0x2e0/0x680 net/core/dev.c:6111
 virtqueue_napi_complete drivers/net/virtio_net.c:403 [inline]
 virtnet_poll+0xab1/0x10e0 drivers/net/virtio_net.c:1687
 __napi_poll+0x9d/0x4b0 net/core/dev.c:6545
 napi_poll net/core/dev.c:6612 [inline]
 net_rx_action+0x533/0xcd0 net/core/dev.c:6726
 handle_softirqs+0x1d2/0x5f0 kernel/softirq.c:617
 __do_softirq kernel/softirq.c:655 [inline]
 invoke_softirq kernel/softirq.c:472 [inline]
 __irq_exit_rcu+0x52/0xf0 kernel/softirq.c:704
 irq_exit_rcu+0x9/0x10 kernel/softirq.c:716
 common_interrupt+0xb4/0xd0 arch/x86/kernel/irq.c:240
 asm_common_interrupt+0x27/0x40 arch/x86/include/asm/idtentry.h:644

The buggy address belongs to the object at ffff88811d6ef000
 which belongs to the cache skbuff_head_cache of size 248
The buggy address is located 0 bytes inside of
 248-byte region [ffff88811d6ef000, ffff88811d6ef0f8)

The buggy address belongs to the physical page:
page:ffffea000475bbc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11d6ef
flags: 0x4000000000000200(slab|zone=1)
raw: 4000000000000200 0000000000000000 dead000000000122 ffff888100b71200
raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 325, tgid 325 (sftp-server), ts 40026099486, free_ts 40025904903
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook mm/page_alloc.c:2590 [inline]
 prep_new_page+0x512/0x5e0 mm/page_alloc.c:2597
 get_page_from_freelist+0x288b/0x2910 mm/page_alloc.c:4425
 __alloc_pages+0x39f/0x780 mm/page_alloc.c:5714
 alloc_slab_page+0x6c/0xf0
 allocate_slab mm/slub.c:1962 [inline]
 new_slab+0x7b/0x370 mm/slub.c:2015
 ___slab_alloc+0x611/0x9a0 mm/slub.c:3203
 kmem_cache_alloc_bulk+0x164/0x330 mm/slub.c:3853
 napi_skb_cache_get net/core/skbuff.c:258 [inline]
 __napi_build_skb+0x31a/0x510 net/core/skbuff.c:387
 __napi_alloc_skb+0x2e3/0x440 net/core/skbuff.c:693
 napi_alloc_skb include/linux/skbuff.h:3282 [inline]
 page_to_skb+0x27d/0xa60 drivers/net/virtio_net.c:501
 receive_mergeable drivers/net/virtio_net.c:1128 [inline]
 receive_buf+0x3b7/0x4350 drivers/net/virtio_net.c:1267
 virtnet_receive drivers/net/virtio_net.c:1562 [inline]
 virtnet_poll+0x5bf/0x10e0 drivers/net/virtio_net.c:1680
 __napi_poll+0x9d/0x4b0 net/core/dev.c:6545
 napi_poll net/core/dev.c:6612 [inline]
 net_rx_action+0x533/0xcd0 net/core/dev.c:6726
 handle_softirqs+0x1d2/0x5f0 kernel/softirq.c:617
 __do_softirq kernel/softirq.c:655 [inline]
 invoke_softirq kernel/softirq.c:472 [inline]
 __irq_exit_rcu+0x52/0xf0 kernel/softirq.c:704
page last free stack trace:
 reset_page_owner include/linux/page_owner.h:26 [inline]
 free_pages_prepare mm/page_alloc.c:1498 [inline]
 free_pcp_prepare mm/page_alloc.c:1572 [inline]
 free_unref_page_prepare+0x794/0x7a0 mm/page_alloc.c:3498
 free_unref_page+0xb2/0x5b0 mm/page_alloc.c:3594
 __folio_put_small mm/swap.c:105 [inline]
 __folio_put+0x7c/0xa0 mm/swap.c:128
 folio_put include/linux/mm.h:1427 [inline]
 put_page include/linux/mm.h:1479 [inline]
 anon_pipe_buf_release+0x10c/0x160 fs/pipe.c:138
 pipe_buf_release include/linux/pipe_fs_i.h:199 [inline]
 pipe_read+0x4df/0xdb0 fs/pipe.c:324
 call_read_iter include/linux/fs.h:2268 [inline]
 new_sync_read fs/read_write.c:389 [inline]
 vfs_read+0x760/0x9b0 fs/read_write.c:470
 ksys_read+0x15c/0x240 fs/read_write.c:613
 __do_sys_read fs/read_write.c:623 [inline]
 __se_sys_read fs/read_write.c:621 [inline]
 __x64_sys_read+0x76/0x80 fs/read_write.c:621
 x64_sys_call+0x28/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:1
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2

Memory state around the buggy address:
 ffff88811d6eef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 ffff88811d6eef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
>ffff88811d6ef000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                   ^
 ffff88811d6ef080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc
 ffff88811d6ef100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
==================================================================
F2FS-fs (loop0): access invalid blkaddr:492805568
CPU: 0 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:4294936705
CPU: 0 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:325
CPU: 0 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:82444532
CPU: 1 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:706505375
CPU: 0 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:706506215
CPU: 0 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:524312
CPU: 0 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:4133372684
CPU: 1 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:5
CPU: 1 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:840
CPU: 0 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:14
CPU: 0 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:2097153
CPU: 0 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:32768
CPU: 0 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:1
CPU: 0 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:5
CPU: 0 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:9
CPU: 0 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:3014664
CPU: 0 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:786458
CPU: 0 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:918
CPU: 0 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:3712
CPU: 0 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:568045568
CPU: 0 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:4294936705
CPU: 0 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:568045646
CPU: 0 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:4294936705
CPU: 0 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): Inconsistent error blkaddr:4352, sit bitmap:0
CPU: 0 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __is_bitmap_valid fs/f2fs/checkpoint.c:171 [inline]
 __f2fs_is_valid_blkaddr+0xa92/0x1320 fs/f2fs/checkpoint.c:218
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:1
CPU: 1 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:325
CPU: 1 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:116326636
CPU: 1 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164
 f2fs_do_truncate_blocks+0x5b8/0xbd0 fs/f2fs/file.c:719
 f2fs_truncate_blocks+0xd8/0x230 fs/f2fs/file.c:747
 f2fs_truncate+0x14b/0x2e0 fs/f2fs/file.c:797
 f2fs_setattr+0xa5e/0x10e0 fs/f2fs/file.c:1004
 notify_change+0xa05/0xdb0 fs/attr.c:499
 do_truncate+0x1d6/0x2c0 fs/open.c:66
 handle_truncate fs/namei.c:3286 [inline]
 do_open fs/namei.c:3631 [inline]
 path_openat+0x200e/0x2440 fs/namei.c:3784
 do_filp_open+0x226/0x430 fs/namei.c:3811
 do_sys_openat2+0x103/0x6e0 fs/open.c:1341
 do_sys_open fs/open.c:1357 [inline]
 __do_sys_creat fs/open.c:1433 [inline]
 __se_sys_creat fs/open.c:1427 [inline]
 __x64_sys_creat+0x11a/0x160 fs/open.c:1427
 x64_sys_call+0x27b/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:86
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f2b34a7c959
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2b345ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007f2b34b9bf80 RCX: 00007f2b34a7c959
RDX: 0000000000000000 RSI: 00000000000001f8 RDI: 00000000200000c0
RBP: 00007f2b34ad8c88 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2b34b9bf80 R15: 00007ffd9ac1fe38
 </TASK>
F2FS-fs (loop0): access invalid blkaddr:493810624
CPU: 1 PID: 356 Comm: syz-executor.0 Tainted: G    B              6.1.99-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106
 dump_stack+0x10/0x17 lib/dump_stack.c:113
 __f2fs_is_valid_blkaddr+0xb2c/0x1320 fs/f2fs/checkpoint.c:215
 f2fs_is_valid_blkaddr_raw+0x9/0x10 fs/f2fs/checkpoint.c:244
 f2fs_truncate_data_blocks_range+0x517/0xca0 fs/f2fs/file.c:591
 f2fs_truncate_data_blocks+0xbf/0x100 fs/f2fs/file.c:630
 truncate_dnode fs/f2fs/node.c:952 [inline]
 f2fs_truncate_inode_blocks+0x593/0xdd0 fs/f2fs/node.c:1164