Warning: Permanently added '10.128.1.227' (ED25519) to the list of known hosts. 2026/01/06 18:21:27 parsed 1 programs [ 55.293586][ T27] audit: type=1400 audit(1767723687.420:109): avc: denied { unlink } for pid=384 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 55.313501][ T384] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.947399][ T27] audit: type=1401 audit(1767723688.070:110): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 56.023832][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.031055][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.038875][ T395] device bridge_slave_0 entered promiscuous mode [ 56.047126][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.054357][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.061783][ T395] device bridge_slave_1 entered promiscuous mode [ 56.182509][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.189700][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.197190][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.204339][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.228047][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.243777][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.263364][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.270950][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.283701][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.292076][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.299148][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.314294][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.322490][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.329608][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.337165][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.346258][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.357679][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.368412][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.376389][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.383970][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.391877][ T395] device veth0_vlan entered promiscuous mode [ 56.400818][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.410461][ T395] device veth1_macvtap entered promiscuous mode [ 56.418688][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 2026/01/06 18:21:28 executed programs: 0 [ 56.428040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.597535][ T444] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.604940][ T444] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.612213][ T444] device bridge_slave_0 entered promiscuous mode [ 56.620599][ T444] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.627854][ T444] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.635250][ T444] device bridge_slave_1 entered promiscuous mode [ 56.646441][ T446] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.653514][ T446] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.660893][ T446] device bridge_slave_0 entered promiscuous mode [ 56.669199][ T446] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.676332][ T446] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.683718][ T446] device bridge_slave_1 entered promiscuous mode [ 56.694319][ T445] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.701432][ T445] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.709212][ T445] device bridge_slave_0 entered promiscuous mode [ 56.728442][ T445] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.735529][ T445] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.742805][ T445] device bridge_slave_1 entered promiscuous mode [ 56.766787][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.773932][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.781212][ T441] device bridge_slave_0 entered promiscuous mode [ 56.796912][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.804139][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.811468][ T441] device bridge_slave_1 entered promiscuous mode [ 56.825933][ T447] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.833155][ T447] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.840471][ T447] device bridge_slave_0 entered promiscuous mode [ 56.848972][ T447] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.856181][ T447] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.863601][ T447] device bridge_slave_1 entered promiscuous mode [ 57.034447][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.041961][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.065286][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.072726][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.080274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.089239][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.097465][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.104582][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.112094][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.120594][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.128816][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.136020][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.143640][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.165048][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.173362][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.181486][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.188510][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.196076][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.205020][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.213288][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.220309][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.245918][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.254489][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.262474][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.270911][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.279117][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.287416][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.295581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.302916][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.310369][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.318735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.326910][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.334011][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.341404][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.350132][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.358345][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.365369][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.372782][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.381112][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.389156][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.400549][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.413142][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.440495][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.459587][ T445] device veth0_vlan entered promiscuous mode [ 57.469713][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.477979][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.485472][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.492910][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.501736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.509733][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.517074][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.525229][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.542424][ T445] device veth1_macvtap entered promiscuous mode [ 57.551716][ T444] device veth0_vlan entered promiscuous mode [ 57.561561][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.570060][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.578063][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.585756][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.593428][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.600909][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.608301][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.625076][ T446] device veth0_vlan entered promiscuous mode [ 57.641618][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.650405][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.658573][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.665700][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.673910][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.682267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.690497][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.697505][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.704910][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.713336][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.721468][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.728660][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.736217][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.744724][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.752811][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.760127][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.767584][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.775595][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.784030][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.792243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.800506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.808801][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.816529][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.828437][ T444] device veth1_macvtap entered promiscuous mode [ 57.844535][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.853037][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.867604][ T446] device veth1_macvtap entered promiscuous mode [ 57.879932][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.888498][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.898187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.917753][ T447] device veth0_vlan entered promiscuous mode [ 57.932182][ T10] device bridge_slave_1 left promiscuous mode [ 57.939265][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.946915][ T10] device bridge_slave_0 left promiscuous mode [ 57.955567][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.964036][ T10] device veth1_macvtap left promiscuous mode [ 57.970241][ T10] device veth0_vlan left promiscuous mode [ 58.063761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.072284][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.080438][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.088042][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.100175][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.108813][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.117392][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.126045][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.134730][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.143466][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.151882][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.172543][ T447] device veth1_macvtap entered promiscuous mode [ 58.187200][ T441] device veth0_vlan entered promiscuous mode [ 58.202249][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.212103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.220798][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.229451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.239504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.247430][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.255749][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.263947][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.271528][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.316006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.334049][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.352588][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.362692][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.372540][ T494] loop2: detected capacity change from 0 to 131072 [ 58.381800][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.388224][ T494] ======================================================= [ 58.388224][ T494] WARNING: The mand mount option has been deprecated and [ 58.388224][ T494] and is ignored by this kernel. Remove the mand [ 58.388224][ T494] option from the mount to silence this warning. [ 58.388224][ T494] ======================================================= [ 58.400216][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.433756][ T494] F2FS-fs (loop2): invalid crc value [ 58.441916][ T441] device veth1_macvtap entered promiscuous mode [ 58.476779][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.496738][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.505617][ T494] F2FS-fs (loop2): Found nat_bits in checkpoint [ 58.513475][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.544536][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.560159][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.580051][ T494] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 58.593865][ T27] audit: type=1400 audit(1767723690.720:111): avc: denied { mount } for pid=493 comm="syz.2.18" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 58.621769][ T494] F2FS-fs (loop2): access invalid blkaddr:2147563524 [ 58.651258][ T494] CPU: 0 PID: 494 Comm: syz.2.18 Not tainted syzkaller #0 [ 58.658683][ T494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.669086][ T494] Call Trace: [ 58.672368][ T494] [ 58.675392][ T494] __dump_stack+0x19/0x1c [ 58.679827][ T494] dump_stack_lvl+0xa3/0xec [ 58.684343][ T494] ? __cfi_dump_stack_lvl+0x8/0x8 [ 58.689454][ T494] ? _raw_spin_lock+0x8e/0x110 [ 58.694216][ T494] ? __cfi__raw_spin_lock+0x10/0x10 [ 58.699492][ T494] ? f2fs_init_read_extent_tree+0x423/0x980 [ 58.705386][ T494] dump_stack+0x10/0x1c [ 58.709713][ T494] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 58.715252][ T494] f2fs_is_valid_blkaddr+0x9/0x10 [ 58.720454][ T494] sanity_check_extent_cache+0x1ab/0x450 [ 58.726171][ T494] f2fs_iget+0x2fdb/0x48b0 [ 58.730792][ T494] f2fs_lookup+0x1f2/0x800 [ 58.735465][ T494] ? __cfi_f2fs_lookup+0x10/0x10 [ 58.740393][ T494] ? __cfi_d_alloc_parallel+0x10/0x10 [ 58.745850][ T494] ? downgrade_write+0x350/0x350 [ 58.750877][ T494] ? inode_permission+0x83/0x360 [ 58.755833][ T494] ? preempt_schedule+0xa7/0xb0 [ 58.760958][ T494] __lookup_slow+0x24e/0x330 [ 58.765832][ T494] ? lookup_one_len+0x260/0x260 [ 58.770679][ T494] ? down_read+0xa0/0xf0 [ 58.775008][ T494] lookup_slow+0x52/0x70 [ 58.779243][ T494] walk_component+0x261/0x370 [ 58.783912][ T494] path_lookupat+0x85/0x320 [ 58.788417][ T494] filename_lookup+0x1bc/0x420 [ 58.793260][ T494] ? __cfi_filename_lookup+0x10/0x10 [ 58.798574][ T494] ? strncpy_from_user+0x74/0x1c0 [ 58.803597][ T494] ? getname_flags+0xe2/0x440 [ 58.808285][ T494] user_path_at_empty+0x3b/0x170 [ 58.813216][ T494] do_sys_truncate+0x94/0x140 [ 58.817887][ T494] ? __cfi_do_sys_truncate+0x10/0x10 [ 58.823257][ T494] ? fpregs_restore_userregs+0xe1/0x1d0 [ 58.828799][ T494] __x64_sys_truncate+0x56/0x60 [ 58.833652][ T494] x64_sys_call+0x679/0x9a0 [ 58.838147][ T494] do_syscall_64+0x4c/0xa0 [ 58.842680][ T494] ? clear_bhb_loop+0x30/0x80 [ 58.847529][ T494] ? clear_bhb_loop+0x30/0x80 [ 58.852375][ T494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.858880][ T494] RIP: 0033:0x7f08c498e929 [ 58.863296][ T494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.883578][ T494] RSP: 002b:00007f08c5789038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 58.891989][ T494] RAX: ffffffffffffffda RBX: 00007f08c4bb5fa0 RCX: 00007f08c498e929 [ 58.900047][ T494] RDX: 0000000000000000 RSI: 0000000000001c9e RDI: 0000200000000280 [ 58.908102][ T494] RBP: 00007f08c4a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 58.916067][ T494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.924038][ T494] R13: 0000000000000000 R14: 00007f08c4bb5fa0 R15: 00007ffc0014dc38 [ 58.932029][ T494] [ 59.123261][ T494] F2FS-fs (loop2): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 59.157294][ T511] F2FS-fs (loop2): access invalid blkaddr:2147563524 [ 59.213240][ T511] CPU: 1 PID: 511 Comm: syz.2.18 Not tainted syzkaller #0 [ 59.220727][ T511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.230793][ T511] Call Trace: [ 59.234077][ T511] [ 59.237013][ T511] __dump_stack+0x19/0x1c [ 59.241362][ T511] dump_stack_lvl+0xa3/0xec [ 59.245877][ T511] ? __cfi_dump_stack_lvl+0x8/0x8 [ 59.251000][ T511] ? _raw_write_lock+0x8e/0xe0 [ 59.255769][ T511] ? __cfi__raw_write_lock+0x10/0x10 [ 59.261070][ T511] dump_stack+0x10/0x1c [ 59.265582][ T511] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 59.271234][ T511] f2fs_is_valid_blkaddr+0x9/0x10 [ 59.276264][ T511] sanity_check_extent_cache+0x1ab/0x450 [ 59.281996][ T511] f2fs_iget+0x2fdb/0x48b0 [ 59.286419][ T511] f2fs_lookup+0x1f2/0x800 [ 59.290840][ T511] ? __cfi_f2fs_lookup+0x10/0x10 [ 59.291209][ T498] loop5: detected capacity change from 0 to 131072 [ 59.295861][ T511] ? __cfi_d_alloc_parallel+0x10/0x10 [ 59.295872][ T511] ? __cfi_f2fs_lookup+0x10/0x10 [ 59.295877][ T511] path_openat+0xe8f/0x2aa0 [ 59.295887][ T511] ? do_filp_open+0x360/0x360 [ 59.295894][ T511] do_filp_open+0x1b0/0x360 [ 59.295899][ T511] ? __cfi_do_filp_open+0x10/0x10 [ 59.295907][ T511] ? alloc_fd+0x40c/0x4c0 [ 59.295916][ T511] do_sys_openat2+0x119/0x6b0 [ 59.295924][ T511] ? do_sys_open+0x80/0x80 [ 59.344991][ T511] ? up_read+0x56/0x1d0 [ 59.349154][ T511] __x64_sys_openat+0xf1/0x120 [ 59.351775][ T498] F2FS-fs (loop5): invalid crc value [ 59.353919][ T511] x64_sys_call+0x783/0x9a0 [ 59.353930][ T511] do_syscall_64+0x4c/0xa0 [ 59.353939][ T511] ? clear_bhb_loop+0x30/0x80 [ 59.353946][ T511] ? clear_bhb_loop+0x30/0x80 [ 59.353952][ T511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.353958][ T511] RIP: 0033:0x7f08c498e929 [ 59.353965][ T511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.407997][ T511] RSP: 002b:00007f08c5768038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 59.416567][ T511] RAX: ffffffffffffffda RBX: 00007f08c4bb6080 RCX: 00007f08c498e929 [ 59.424723][ T511] RDX: 0000000000101000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 59.432788][ T511] RBP: 00007f08c4a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 59.440850][ T511] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 59.448821][ T511] R13: 0000000000000001 R14: 00007f08c4bb6080 R15: 00007ffc0014dc38 [ 59.456891][ T511] [ 59.464083][ T511] ================================================================== [ 59.472429][ T511] BUG: KASAN: use-after-free in sanity_check_extent_cache+0x399/0x450 [ 59.480613][ T511] Read of size 4 at addr ffff888121278318 by task syz.2.18/511 [ 59.484785][ T498] F2FS-fs (loop5): Found nat_bits in checkpoint [ 59.488410][ T511] [ 59.488415][ T511] CPU: 1 PID: 511 Comm: syz.2.18 Not tainted syzkaller #0 [ 59.504351][ T511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.514408][ T511] Call Trace: [ 59.517685][ T511] [ 59.520623][ T511] __dump_stack+0x19/0x1c [ 59.525041][ T511] dump_stack_lvl+0xa3/0xec [ 59.529807][ T511] ? __cfi_dump_stack_lvl+0x8/0x8 [ 59.534836][ T511] ? dump_stack_lvl+0xb8/0xec [ 59.539619][ T511] print_address_description+0x71/0x200 [ 59.545563][ T511] print_report+0x4a/0x60 [ 59.549989][ T511] kasan_report+0x122/0x150 [ 59.554588][ T511] ? sanity_check_extent_cache+0x399/0x450 [ 59.560411][ T511] __asan_report_load4_noabort+0x14/0x20 [ 59.566222][ T511] sanity_check_extent_cache+0x399/0x450 [ 59.572135][ T511] f2fs_iget+0x2fdb/0x48b0 [ 59.576580][ T511] f2fs_lookup+0x1f2/0x800 [ 59.581009][ T511] ? __cfi_f2fs_lookup+0x10/0x10 [ 59.586071][ T511] ? __cfi_d_alloc_parallel+0x10/0x10 [ 59.591551][ T511] ? __cfi_f2fs_lookup+0x10/0x10 [ 59.596498][ T511] path_openat+0xe8f/0x2aa0 [ 59.601020][ T511] ? do_filp_open+0x360/0x360 [ 59.605887][ T511] do_filp_open+0x1b0/0x360 [ 59.610586][ T511] ? __cfi_do_filp_open+0x10/0x10 [ 59.615635][ T511] ? alloc_fd+0x40c/0x4c0 [ 59.620151][ T511] do_sys_openat2+0x119/0x6b0 [ 59.624840][ T511] ? do_sys_open+0x80/0x80 [ 59.629437][ T511] ? up_read+0x56/0x1d0 [ 59.633687][ T511] __x64_sys_openat+0xf1/0x120 [ 59.638542][ T511] x64_sys_call+0x783/0x9a0 [ 59.643051][ T511] do_syscall_64+0x4c/0xa0 [ 59.647472][ T511] ? clear_bhb_loop+0x30/0x80 [ 59.652164][ T511] ? clear_bhb_loop+0x30/0x80 [ 59.657109][ T511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.663280][ T511] RIP: 0033:0x7f08c498e929 [ 59.667723][ T511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.670620][ T501] loop3: detected capacity change from 0 to 131072 [ 59.687607][ T511] RSP: 002b:00007f08c5768038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 59.687622][ T511] RAX: ffffffffffffffda RBX: 00007f08c4bb6080 RCX: 00007f08c498e929 [ 59.687627][ T511] RDX: 0000000000101000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 59.687632][ T511] RBP: 00007f08c4a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 59.687636][ T511] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 59.687640][ T511] R13: 0000000000000001 R14: 00007f08c4bb6080 R15: 00007ffc0014dc38 [ 59.687647][ T511] [ 59.687657][ T511] [ 59.687659][ T511] Allocated by task 494: [ 59.687663][ T511] kasan_set_track+0x4b/0x70 [ 59.687674][ T511] kasan_save_alloc_info+0x25/0x30 [ 59.758345][ T505] loop6: detected capacity change from 0 to 131072 [ 59.763048][ T511] __kasan_slab_alloc+0x72/0x80 [ 59.774478][ T511] slab_post_alloc_hook+0x4f/0x280 [ 59.779625][ T511] kmem_cache_alloc+0x16e/0x330 [ 59.780206][ T501] F2FS-fs (loop3): invalid crc value [ 59.784473][ T511] __grab_extent_tree+0x1bb/0x410 [ 59.784483][ T511] f2fs_init_read_extent_tree+0x31d/0x980 [ 59.784489][ T511] f2fs_iget+0x2fcb/0x48b0 [ 59.784494][ T511] f2fs_lookup+0x1f2/0x800 [ 59.784500][ T511] __lookup_slow+0x24e/0x330 [ 59.784506][ T511] lookup_slow+0x52/0x70 [ 59.784511][ T511] walk_component+0x261/0x370 [ 59.823308][ T511] path_lookupat+0x85/0x320 [ 59.827908][ T511] filename_lookup+0x1bc/0x420 [ 59.830620][ T505] F2FS-fs (loop6): invalid crc value [ 59.832873][ T511] user_path_at_empty+0x3b/0x170 [ 59.843209][ T511] do_sys_truncate+0x94/0x140 [ 59.847899][ T511] __x64_sys_truncate+0x56/0x60 [ 59.852757][ T511] x64_sys_call+0x679/0x9a0 [ 59.857270][ T511] do_syscall_64+0x4c/0xa0 [ 59.861785][ T511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.867694][ T511] [ 59.870107][ T511] Freed by task 494: [ 59.873998][ T511] kasan_set_track+0x4b/0x70 [ 59.878776][ T511] kasan_save_free_info+0x31/0x50 [ 59.883904][ T511] ____kasan_slab_free+0x132/0x180 [ 59.889109][ T511] __kasan_slab_free+0x11/0x20 [ 59.893964][ T511] slab_free_freelist_hook+0xc2/0x190 [ 59.899349][ T511] kmem_cache_free+0x12f/0x2a0 [ 59.904212][ T511] __destroy_extent_tree+0x2f0/0x450 [ 59.905860][ T509] loop0: detected capacity change from 0 to 131072 [ 59.909612][ T511] f2fs_destroy_extent_tree+0xf/0x20 [ 59.909623][ T511] f2fs_evict_inode+0x3e5/0x11b0 [ 59.909630][ T511] evict+0x3eb/0x820 [ 59.925644][ T509] F2FS-fs (loop0): invalid crc value [ 59.926325][ T511] iput+0x4c1/0x4f0 [ 59.926336][ T511] iget_failed+0x167/0x1b0 [ 59.926343][ T511] f2fs_iget+0x171f/0x48b0 [ 59.926348][ T511] f2fs_lookup+0x1f2/0x800 [ 59.932367][ T498] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 59.935516][ T511] __lookup_slow+0x24e/0x330 [ 59.935525][ T511] lookup_slow+0x52/0x70 [ 59.935530][ T511] walk_component+0x261/0x370 [ 59.935536][ T511] path_lookupat+0x85/0x320 [ 59.935541][ T511] filename_lookup+0x1bc/0x420 [ 59.935546][ T511] user_path_at_empty+0x3b/0x170 [ 59.935551][ T511] do_sys_truncate+0x94/0x140 [ 59.935557][ T511] __x64_sys_truncate+0x56/0x60 [ 59.935562][ T511] x64_sys_call+0x679/0x9a0 [ 59.935569][ T511] do_syscall_64+0x4c/0xa0 [ 59.935577][ T511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.942672][ T498] F2FS-fs (loop5): access invalid blkaddr:2147563524 [ 59.943780][ T511] [ 59.943783][ T511] The buggy address belongs to the object at ffff8881212782d0 [ 59.943783][ T511] which belongs to the cache f2fs_extent_tree of size 88 [ 59.943789][ T511] The buggy address is located 72 bytes inside of [ 59.943789][ T511] 88-byte region [ffff8881212782d0, ffff888121278328) [ 59.943794][ T511] [ 59.943796][ T511] The buggy address belongs to the physical page: [ 59.943807][ T511] page:ffffea0004849e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x121278 [ 59.948208][ T498] CPU: 0 PID: 498 Comm: syz.5.17 Not tainted syzkaller #0 [ 59.952600][ T511] flags: 0x4000000000000200(slab|zone=1) [ 59.960042][ T498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.964707][ T511] raw: 4000000000000200 0000000000000000 dead000000000122 ffff888108878600 [ 59.968924][ T498] Call Trace: [ 59.968928][ T498] [ 59.973841][ T511] raw: 0000000000000000 0000000080220022 00000001ffffffff 0000000000000000 [ 59.978426][ T498] __dump_stack+0x19/0x1c [ 59.983165][ T511] page dumped because: kasan: bad access detected [ 59.988085][ T498] dump_stack_lvl+0xa3/0xec [ 59.992915][ T511] page_owner tracks the page as allocated [ 59.997832][ T498] ? __cfi_dump_stack_lvl+0x8/0x8 [ 60.002481][ T511] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 494, tgid 493 (syz.2.18), ts 58621725582, free_ts 0 [ 60.006963][ T498] ? _raw_spin_lock+0x8e/0x110 [ 60.012919][ T511] prep_new_page+0x58c/0x650 [ 60.019661][ T498] ? __cfi__raw_spin_lock+0x10/0x10 [ 60.021976][ T511] get_page_from_freelist+0x2f0f/0x2f80 [ 60.036357][ T498] ? f2fs_init_read_extent_tree+0x423/0x980 [ 60.049534][ T511] __alloc_pages+0x1c3/0x450 [ 60.051862][ T498] dump_stack+0x10/0x1c [ 60.058254][ T511] alloc_slab_page+0x6e/0xf0 [ 60.069153][ T498] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 60.076333][ T511] new_slab+0x7c/0x360 [ 60.081948][ T498] f2fs_is_valid_blkaddr+0x9/0x10 [ 60.092163][ T511] ___slab_alloc+0x5bf/0x970 [ 60.101009][ T498] sanity_check_extent_cache+0x1ab/0x450 [ 60.104287][ T511] __slab_alloc+0x53/0x90 [ 60.107212][ T498] f2fs_iget+0x2fdb/0x48b0 [ 60.115870][ T511] kmem_cache_alloc+0x1b0/0x330 [ 60.120277][ T498] f2fs_lookup+0x1f2/0x800 [ 60.126773][ T511] __grab_extent_tree+0x1bb/0x410 [ 60.131657][ T498] ? __cfi_f2fs_lookup+0x10/0x10 [ 60.137427][ T511] f2fs_init_read_extent_tree+0x31d/0x980 [ 60.142488][ T498] ? __cfi_d_alloc_parallel+0x10/0x10 [ 60.162596][ T511] f2fs_iget+0x2fcb/0x48b0 [ 60.167435][ T498] ? downgrade_write+0x350/0x350 [ 60.172098][ T511] f2fs_lookup+0x1f2/0x800 [ 60.177444][ T498] ? inode_permission+0x83/0x360 [ 60.182963][ T511] __lookup_slow+0x24e/0x330 [ 60.188832][ T498] ? preempt_schedule+0xa7/0xb0 [ 60.193487][ T511] lookup_slow+0x52/0x70 [ 60.197646][ T498] __lookup_slow+0x24e/0x330 [ 60.202655][ T511] walk_component+0x261/0x370 [ 60.208349][ T498] ? lookup_one_len+0x260/0x260 [ 60.212391][ T511] path_lookupat+0x85/0x320 [ 60.217634][ T498] ? down_read+0xa0/0xf0 [ 60.222197][ T511] page_owner free stack trace missing [ 60.227986][ T498] lookup_slow+0x52/0x70 [ 60.232375][ T511] [ 60.237028][ T498] walk_component+0x261/0x370 [ 60.241852][ T511] Memory state around the buggy address: [ 60.241863][ T511] ffff888121278200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 60.246249][ T498] path_lookupat+0x85/0x320 [ 60.251250][ T511] ffff888121278280: fc fc fc fc fc fc fc fc fc fc fa fb fb fb fb fb [ 60.256602][ T498] filename_lookup+0x1bc/0x420 [ 60.262393][ T511] >ffff888121278300: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 60.267833][ T498] ? __cfi_filename_lookup+0x10/0x10 [ 60.272227][ T511] ^ [ 60.277705][ T498] ? strncpy_from_user+0x74/0x1c0 [ 60.282130][ T511] ffff888121278380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 60.287150][ T498] ? getname_flags+0xe2/0x440 [ 60.291818][ T511] ffff888121278400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 60.296645][ T498] user_path_at_empty+0x3b/0x170 [ 60.300864][ T511] ================================================================== [ 60.320523][ T511] Disabling lock debugging due to kernel taint [ 60.324095][ T498] do_sys_truncate+0x94/0x140 [ 60.324110][ T498] ? __cfi_do_sys_truncate+0x10/0x10 [ 60.324117][ T498] ? fpregs_restore_userregs+0xe1/0x1d0 [ 60.324125][ T498] __x64_sys_truncate+0x56/0x60 [ 60.324130][ T498] x64_sys_call+0x679/0x9a0 [ 60.329598][ T511] F2FS-fs (loop2): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 60.333887][ T498] do_syscall_64+0x4c/0xa0 [ 60.333898][ T498] ? clear_bhb_loop+0x30/0x80 [ 60.333905][ T498] ? clear_bhb_loop+0x30/0x80 [ 60.333910][ T498] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.339807][ T27] audit: type=1400 audit(1767723692.070:112): avc: denied { read } for pid=81 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 60.341144][ T498] RIP: 0033:0x7feafa18e929 [ 60.354890][ T27] audit: type=1400 audit(1767723692.070:113): avc: denied { search } for pid=81 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.355008][ T498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.359684][ T27] audit: type=1400 audit(1767723692.070:114): avc: denied { write } for pid=81 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.367843][ T498] RSP: 002b:00007feafb0ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 60.367859][ T498] RAX: ffffffffffffffda RBX: 00007feafa3b5fa0 RCX: 00007feafa18e929 [ 60.367863][ T498] RDX: 0000000000000000 RSI: 0000000000001c9e RDI: 0000200000000280 [ 60.367867][ T498] RBP: 00007feafa210b39 R08: 0000000000000000 R09: 0000000000000000 [ 60.367871][ T498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.367875][ T498] R13: 0000000000000000 R14: 00007feafa3b5fa0 R15: 00007ffe1972f1a8 [ 60.367882][ T498] [ 60.373199][ T505] F2FS-fs (loop6): Found nat_bits in checkpoint [ 60.387349][ T27] audit: type=1400 audit(1767723692.070:115): avc: denied { add_name } for pid=81 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.415057][ T505] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 60.417652][ T27] audit: type=1400 audit(1767723692.070:116): avc: denied { create } for pid=81 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.429466][ T509] F2FS-fs (loop0): Found nat_bits in checkpoint [ 60.442880][ T27] audit: type=1400 audit(1767723692.070:117): avc: denied { append open } for pid=81 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.463394][ T498] F2FS-fs (loop5): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 60.478814][ T27] audit: type=1400 audit(1767723692.070:118): avc: denied { getattr } for pid=81 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.482812][ T505] F2FS-fs (loop6): access invalid blkaddr:2147563524 [ 60.485888][ T526] F2FS-fs (loop5): access invalid blkaddr:2147563524 [ 60.489980][ T505] CPU: 0 PID: 505 Comm: syz.6.20 Tainted: G B syzkaller #0 [ 60.534696][ T501] F2FS-fs (loop3): Found nat_bits in checkpoint [ 60.543143][ T505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.543149][ T505] Call Trace: [ 60.543153][ T505] [ 60.543156][ T505] __dump_stack+0x19/0x1c [ 60.543170][ T505] dump_stack_lvl+0xa3/0xec [ 60.692192][ T501] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 60.697147][ T505] ? __cfi_dump_stack_lvl+0x8/0x8 [ 60.697162][ T505] ? _raw_spin_lock+0x8e/0x110 [ 60.827108][ T505] ? __cfi__raw_spin_lock+0x10/0x10 [ 60.832298][ T505] ? f2fs_init_read_extent_tree+0x423/0x980 [ 60.838189][ T505] dump_stack+0x10/0x1c [ 60.842431][ T505] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 60.847291][ T509] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 60.848404][ T505] f2fs_is_valid_blkaddr+0x9/0x10 [ 60.860890][ T505] sanity_check_extent_cache+0x1ab/0x450 [ 60.866613][ T505] f2fs_iget+0x2fdb/0x48b0 [ 60.871042][ T505] f2fs_lookup+0x1f2/0x800 [ 60.875643][ T505] ? __cfi_f2fs_lookup+0x10/0x10 [ 60.880590][ T505] ? __cfi_d_alloc_parallel+0x10/0x10 [ 60.885955][ T505] ? downgrade_write+0x350/0x350 [ 60.890883][ T505] ? inode_permission+0x83/0x360 [ 60.895807][ T505] __lookup_slow+0x24e/0x330 [ 60.900396][ T505] ? lookup_one_len+0x260/0x260 [ 60.905240][ T505] ? down_read+0xa0/0xf0 [ 60.909468][ T505] lookup_slow+0x52/0x70 [ 60.913954][ T505] walk_component+0x261/0x370 [ 60.918626][ T505] path_lookupat+0x85/0x320 [ 60.923288][ T505] filename_lookup+0x1bc/0x420 [ 60.928264][ T505] ? __cfi_filename_lookup+0x10/0x10 [ 60.933632][ T505] ? strncpy_from_user+0x74/0x1c0 [ 60.938818][ T505] ? getname_flags+0xe2/0x440 [ 60.943657][ T505] user_path_at_empty+0x3b/0x170 [ 60.949021][ T505] do_sys_truncate+0x94/0x140 [ 60.953788][ T505] ? __cfi_do_sys_truncate+0x10/0x10 [ 60.959238][ T505] ? fpregs_restore_userregs+0xe1/0x1d0 [ 60.964947][ T505] __x64_sys_truncate+0x56/0x60 [ 60.969961][ T505] x64_sys_call+0x679/0x9a0 [ 60.974551][ T505] do_syscall_64+0x4c/0xa0 [ 60.979076][ T505] ? clear_bhb_loop+0x30/0x80 [ 60.984001][ T505] ? clear_bhb_loop+0x30/0x80 [ 60.988753][ T505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.993824][ T501] F2FS-fs (loop3): access invalid blkaddr:2147563524 [ 60.994831][ T505] RIP: 0033:0x7fae8e58e929 [ 60.994842][ T505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.994848][ T505] RSP: 002b:00007fae8e3ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 60.994858][ T505] RAX: ffffffffffffffda RBX: 00007fae8e7b5fa0 RCX: 00007fae8e58e929 [ 60.994863][ T505] RDX: 0000000000000000 RSI: 0000000000001c9e RDI: 0000200000000280 [ 61.005568][ T509] F2FS-fs (loop0): access invalid blkaddr:2147563524 [ 61.006401][ T505] RBP: 00007fae8e610b39 R08: 0000000000000000 R09: 0000000000000000 [ 61.066140][ T505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.074181][ T505] R13: 0000000000000000 R14: 00007fae8e7b5fa0 R15: 00007ffe7a311d58 [ 61.082233][ T505] [ 61.085772][ T526] CPU: 1 PID: 526 Comm: syz.5.17 Tainted: G B syzkaller #0 [ 61.094454][ T526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 61.104509][ T526] Call Trace: [ 61.107784][ T526] [ 61.110700][ T526] __dump_stack+0x19/0x1c [ 61.115020][ T526] dump_stack_lvl+0xa3/0xec [ 61.119505][ T526] ? __cfi_dump_stack_lvl+0x8/0x8 [ 61.124514][ T526] ? _raw_spin_lock+0x8e/0x110 [ 61.129363][ T526] ? __cfi__raw_spin_lock+0x10/0x10 [ 61.134654][ T526] ? f2fs_init_read_extent_tree+0x423/0x980 [ 61.140533][ T526] dump_stack+0x10/0x1c [ 61.144761][ T526] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 61.150340][ T526] f2fs_is_valid_blkaddr+0x9/0x10 [ 61.155356][ T526] sanity_check_extent_cache+0x1ab/0x450 [ 61.161250][ T526] f2fs_iget+0x2fdb/0x48b0 [ 61.165758][ T526] f2fs_lookup+0x1f2/0x800 [ 61.170180][ T526] ? __cfi_f2fs_lookup+0x10/0x10 [ 61.175273][ T526] ? __cfi_d_alloc_parallel+0x10/0x10 [ 61.180637][ T526] ? __cfi_f2fs_lookup+0x10/0x10 [ 61.185659][ T526] path_openat+0xe8f/0x2aa0 [ 61.190154][ T526] ? do_filp_open+0x360/0x360 [ 61.194828][ T526] do_filp_open+0x1b0/0x360 [ 61.199324][ T526] ? __cfi_do_filp_open+0x10/0x10 [ 61.204335][ T526] ? alloc_fd+0x40c/0x4c0 [ 61.208652][ T526] do_sys_openat2+0x119/0x6b0 [ 61.213318][ T526] ? do_sys_open+0x80/0x80 [ 61.217808][ T526] ? up_read+0x56/0x1d0 [ 61.221950][ T526] __x64_sys_openat+0xf1/0x120 [ 61.226701][ T526] x64_sys_call+0x783/0x9a0 [ 61.231365][ T526] do_syscall_64+0x4c/0xa0 [ 61.235784][ T526] ? clear_bhb_loop+0x30/0x80 [ 61.240545][ T526] ? clear_bhb_loop+0x30/0x80 [ 61.245511][ T526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.251389][ T526] RIP: 0033:0x7feafa18e929 [ 61.255792][ T526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.275582][ T526] RSP: 002b:00007feafb0cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 61.283987][ T526] RAX: ffffffffffffffda RBX: 00007feafa3b6080 RCX: 00007feafa18e929 [ 61.292036][ T526] RDX: 0000000000101000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 61.300087][ T526] RBP: 00007feafa210b39 R08: 0000000000000000 R09: 0000000000000000 [ 61.308056][ T526] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 61.316196][ T526] R13: 0000000000000001 R14: 00007feafa3b6080 R15: 00007ffe1972f1a8 [ 61.324424][ T526] [ 61.331932][ T509] CPU: 0 PID: 509 Comm: syz.0.16 Tainted: G B syzkaller #0 [ 61.340545][ T509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 61.343129][ T505] F2FS-fs (loop6): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 61.350686][ T509] Call Trace: [ 61.350690][ T509] [ 61.350693][ T509] __dump_stack+0x19/0x1c [ 61.350706][ T509] dump_stack_lvl+0xa3/0xec [ 61.378982][ T509] ? __cfi_dump_stack_lvl+0x8/0x8 [ 61.384364][ T509] ? _raw_spin_lock+0x8e/0x110 [ 61.389207][ T509] ? __cfi__raw_spin_lock+0x10/0x10 [ 61.394391][ T509] ? f2fs_init_read_extent_tree+0x423/0x980 [ 61.400382][ T509] dump_stack+0x10/0x1c [ 61.404528][ T509] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 61.410152][ T509] f2fs_is_valid_blkaddr+0x9/0x10 [ 61.415159][ T509] sanity_check_extent_cache+0x1ab/0x450 [ 61.416994][ T526] F2FS-fs (loop5): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 61.420882][ T509] f2fs_iget+0x2fdb/0x48b0 [ 61.420894][ T509] f2fs_lookup+0x1f2/0x800 [ 61.442915][ T509] ? __cfi_f2fs_lookup+0x10/0x10 [ 61.444901][ T527] F2FS-fs (loop6): access invalid blkaddr:2147563524 [ 61.447848][ T509] ? __cfi_d_alloc_parallel+0x10/0x10 [ 61.459990][ T509] ? downgrade_write+0x350/0x350 [ 61.465016][ T509] ? inode_permission+0x83/0x360 2026/01/06 18:21:33 executed programs: 16 [ 61.470032][ T509] ? preempt_schedule+0xa7/0xb0 [ 61.474871][ T509] __lookup_slow+0x24e/0x330 [ 61.479532][ T509] ? lookup_one_len+0x260/0x260 [ 61.484459][ T509] ? down_read+0xa0/0xf0 [ 61.488689][ T509] lookup_slow+0x52/0x70 [ 61.493001][ T509] walk_component+0x261/0x370 [ 61.497760][ T509] path_lookupat+0x85/0x320 [ 61.502432][ T509] filename_lookup+0x1bc/0x420 [ 61.507278][ T509] ? __cfi_filename_lookup+0x10/0x10 [ 61.512558][ T509] ? strncpy_from_user+0x74/0x1c0 [ 61.517587][ T509] ? getname_flags+0xe2/0x440 [ 61.522254][ T509] user_path_at_empty+0x3b/0x170 [ 61.527173][ T509] do_sys_truncate+0x94/0x140 [ 61.531836][ T509] ? __cfi_do_sys_truncate+0x10/0x10 [ 61.537103][ T509] ? fpregs_restore_userregs+0xe1/0x1d0 [ 61.542631][ T509] __x64_sys_truncate+0x56/0x60 [ 61.547466][ T509] x64_sys_call+0x679/0x9a0 [ 61.552055][ T509] do_syscall_64+0x4c/0xa0 [ 61.556572][ T509] ? clear_bhb_loop+0x30/0x80 [ 61.561255][ T509] ? clear_bhb_loop+0x30/0x80 [ 61.566099][ T509] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.571987][ T509] RIP: 0033:0x7fdf01d8e929 [ 61.576743][ T509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.596594][ T509] RSP: 002b:00007fdf02c79038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 61.604990][ T509] RAX: ffffffffffffffda RBX: 00007fdf01fb5fa0 RCX: 00007fdf01d8e929 [ 61.613032][ T509] RDX: 0000000000000000 RSI: 0000000000001c9e RDI: 0000200000000280 [ 61.621158][ T509] RBP: 00007fdf01e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 61.629112][ T509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.637155][ T509] R13: 0000000000000000 R14: 00007fdf01fb5fa0 R15: 00007ffe7e49dde8 [ 61.645201][ T509] [ 61.650243][ T509] F2FS-fs (loop0): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 61.658332][ T527] CPU: 1 PID: 527 Comm: syz.6.20 Tainted: G B syzkaller #0 [ 61.664090][ T531] F2FS-fs (loop0): access invalid blkaddr:2147563524 [ 61.672548][ T527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 61.689776][ T527] Call Trace: [ 61.693055][ T527] [ 61.695993][ T527] __dump_stack+0x19/0x1c [ 61.700312][ T527] dump_stack_lvl+0xa3/0xec [ 61.704811][ T527] ? __cfi_dump_stack_lvl+0x8/0x8 [ 61.709863][ T527] ? _raw_write_lock+0x8e/0xe0 [ 61.714713][ T527] ? __cfi__raw_write_lock+0x10/0x10 [ 61.719990][ T527] dump_stack+0x10/0x1c [ 61.724139][ T527] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 61.729760][ T527] f2fs_is_valid_blkaddr+0x9/0x10 [ 61.734856][ T527] sanity_check_extent_cache+0x1ab/0x450 [ 61.740623][ T527] f2fs_iget+0x2fdb/0x48b0 [ 61.745047][ T527] f2fs_lookup+0x1f2/0x800 [ 61.749553][ T527] ? __cfi_f2fs_lookup+0x10/0x10 [ 61.754526][ T527] ? __cfi_d_alloc_parallel+0x10/0x10 [ 61.759884][ T527] ? __cfi_f2fs_lookup+0x10/0x10 [ 61.765353][ T527] path_openat+0xe8f/0x2aa0 [ 61.769945][ T527] ? do_filp_open+0x360/0x360 [ 61.774710][ T527] do_filp_open+0x1b0/0x360 [ 61.779212][ T527] ? __cfi_do_filp_open+0x10/0x10 [ 61.784223][ T527] ? alloc_fd+0x40c/0x4c0 [ 61.788801][ T527] do_sys_openat2+0x119/0x6b0 [ 61.793558][ T527] ? do_sys_open+0x80/0x80 [ 61.798045][ T527] ? up_read+0x56/0x1d0 [ 61.802447][ T527] __x64_sys_openat+0xf1/0x120 [ 61.807283][ T527] x64_sys_call+0x783/0x9a0 [ 61.811856][ T527] do_syscall_64+0x4c/0xa0 [ 61.816260][ T527] ? clear_bhb_loop+0x30/0x80 [ 61.821003][ T527] ? clear_bhb_loop+0x30/0x80 [ 61.825844][ T527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.831739][ T527] RIP: 0033:0x7fae8e58e929 [ 61.836160][ T527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.855934][ T527] RSP: 002b:00007fae8e3de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 61.864446][ T527] RAX: ffffffffffffffda RBX: 00007fae8e7b6080 RCX: 00007fae8e58e929 [ 61.872405][ T527] RDX: 0000000000101000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 61.880359][ T527] RBP: 00007fae8e610b39 R08: 0000000000000000 R09: 0000000000000000 [ 61.888397][ T527] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 61.896438][ T527] R13: 0000000000000001 R14: 00007fae8e7b6080 R15: 00007ffe7a311d58 [ 61.904402][ T527] [ 61.907476][ T531] CPU: 0 PID: 531 Comm: syz.0.16 Tainted: G B syzkaller #0 [ 61.916155][ T531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 61.926199][ T531] Call Trace: [ 61.929467][ T531] [ 61.932389][ T531] __dump_stack+0x19/0x1c [ 61.936706][ T531] dump_stack_lvl+0xa3/0xec [ 61.941276][ T531] ? __cfi_dump_stack_lvl+0x8/0x8 [ 61.946284][ T531] ? _raw_write_lock+0x8e/0xe0 [ 61.951119][ T531] ? __cfi__raw_write_lock+0x10/0x10 [ 61.956399][ T531] dump_stack+0x10/0x1c [ 61.960573][ T531] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 61.966113][ T531] f2fs_is_valid_blkaddr+0x9/0x10 [ 61.971130][ T531] sanity_check_extent_cache+0x1ab/0x450 [ 61.976748][ T531] f2fs_iget+0x2fdb/0x48b0 [ 61.981149][ T531] f2fs_lookup+0x1f2/0x800 [ 61.985679][ T531] ? __cfi_f2fs_lookup+0x10/0x10 [ 61.990793][ T531] ? __cfi_d_alloc_parallel+0x10/0x10 [ 61.996171][ T531] ? __cfi_f2fs_lookup+0x10/0x10 [ 62.001097][ T531] path_openat+0xe8f/0x2aa0 [ 62.005594][ T531] ? do_filp_open+0x360/0x360 [ 62.010518][ T531] do_filp_open+0x1b0/0x360 [ 62.015008][ T531] ? __cfi_do_filp_open+0x10/0x10 [ 62.020015][ T531] ? alloc_fd+0x40c/0x4c0 [ 62.024415][ T531] do_sys_openat2+0x119/0x6b0 [ 62.029079][ T531] ? do_sys_open+0x80/0x80 [ 62.033473][ T531] ? up_read+0x56/0x1d0 [ 62.037616][ T531] __x64_sys_openat+0xf1/0x120 [ 62.042361][ T531] x64_sys_call+0x783/0x9a0 [ 62.046939][ T531] do_syscall_64+0x4c/0xa0 [ 62.051511][ T531] ? clear_bhb_loop+0x30/0x80 [ 62.056254][ T531] ? clear_bhb_loop+0x30/0x80 [ 62.060912][ T531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.066800][ T531] RIP: 0033:0x7fdf01d8e929 [ 62.071310][ T531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.091166][ T531] RSP: 002b:00007fdf02c58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 62.099647][ T531] RAX: ffffffffffffffda RBX: 00007fdf01fb6080 RCX: 00007fdf01d8e929 [ 62.107777][ T531] RDX: 0000000000101000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 62.115817][ T531] RBP: 00007fdf01e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 62.124041][ T531] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 62.132037][ T531] R13: 0000000000000001 R14: 00007fdf01fb6080 R15: 00007ffe7e49dde8 [ 62.140086][ T531] [ 62.145009][ T501] CPU: 0 PID: 501 Comm: syz.3.19 Tainted: G B syzkaller #0 [ 62.153693][ T501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.164183][ T501] Call Trace: [ 62.167604][ T501] [ 62.170652][ T501] __dump_stack+0x19/0x1c [ 62.174992][ T501] dump_stack_lvl+0xa3/0xec [ 62.179586][ T501] ? __cfi_dump_stack_lvl+0x8/0x8 [ 62.184613][ T501] ? _raw_spin_lock+0x8e/0x110 [ 62.189376][ T501] ? __cfi__raw_spin_lock+0x10/0x10 [ 62.194571][ T501] ? f2fs_init_read_extent_tree+0x423/0x980 [ 62.200473][ T501] dump_stack+0x10/0x1c [ 62.204620][ T501] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 62.210179][ T501] f2fs_is_valid_blkaddr+0x9/0x10 [ 62.215193][ T501] sanity_check_extent_cache+0x1ab/0x450 [ 62.220817][ T501] f2fs_iget+0x2fdb/0x48b0 [ 62.225319][ T501] f2fs_lookup+0x1f2/0x800 [ 62.229738][ T501] ? __cfi_f2fs_lookup+0x10/0x10 [ 62.234673][ T501] ? __cfi_d_alloc_parallel+0x10/0x10 [ 62.240038][ T501] ? downgrade_write+0x350/0x350 [ 62.244965][ T501] ? inode_permission+0x83/0x360 [ 62.249927][ T501] __lookup_slow+0x24e/0x330 [ 62.254509][ T501] ? lookup_one_len+0x260/0x260 [ 62.259537][ T501] ? down_read+0xa0/0xf0 [ 62.263864][ T501] lookup_slow+0x52/0x70 [ 62.268211][ T501] walk_component+0x261/0x370 [ 62.273238][ T501] path_lookupat+0x85/0x320 [ 62.277990][ T501] filename_lookup+0x1bc/0x420 [ 62.282835][ T501] ? __cfi_filename_lookup+0x10/0x10 [ 62.288118][ T501] ? strncpy_from_user+0x74/0x1c0 [ 62.293317][ T501] ? getname_flags+0xe2/0x440 [ 62.298074][ T501] user_path_at_empty+0x3b/0x170 [ 62.303003][ T501] do_sys_truncate+0x94/0x140 [ 62.307771][ T501] ? __cfi_do_sys_truncate+0x10/0x10 [ 62.313045][ T501] ? fpregs_restore_userregs+0xe1/0x1d0 [ 62.318669][ T501] __x64_sys_truncate+0x56/0x60 [ 62.323520][ T501] x64_sys_call+0x679/0x9a0 [ 62.328021][ T501] do_syscall_64+0x4c/0xa0 [ 62.332518][ T501] ? clear_bhb_loop+0x30/0x80 [ 62.337358][ T501] ? clear_bhb_loop+0x30/0x80 [ 62.342023][ T501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.347999][ T501] RIP: 0033:0x7f844318e929 [ 62.352409][ T501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.353130][ T527] F2FS-fs (loop6): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 62.372262][ T501] RSP: 002b:00007f8442fff038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 62.372274][ T501] RAX: ffffffffffffffda RBX: 00007f84433b5fa0 RCX: 00007f844318e929 [ 62.372279][ T501] RDX: 0000000000000000 RSI: 0000000000001c9e RDI: 0000200000000280 [ 62.372283][ T501] RBP: 00007f8443210b39 R08: 0000000000000000 R09: 0000000000000000 [ 62.372288][ T501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.426287][ T501] R13: 0000000000000000 R14: 00007f84433b5fa0 R15: 00007ffc00ade6b8 [ 62.434340][ T501] [ 62.503559][ T531] F2FS-fs (loop0): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 62.576943][ T501] F2FS-fs (loop3): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 62.600579][ T530] F2FS-fs (loop3): access invalid blkaddr:2147563524 [ 62.613311][ T530] CPU: 0 PID: 530 Comm: syz.3.19 Tainted: G B syzkaller #0 [ 62.622095][ T530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.632536][ T530] Call Trace: [ 62.635829][ T530] [ 62.638786][ T530] __dump_stack+0x19/0x1c [ 62.643138][ T530] dump_stack_lvl+0xa3/0xec [ 62.647909][ T530] ? __cfi_dump_stack_lvl+0x8/0x8 [ 62.653112][ T530] ? _raw_write_lock+0x8e/0xe0 [ 62.657975][ T530] ? __cfi__raw_write_lock+0x10/0x10 [ 62.663268][ T530] dump_stack+0x10/0x1c [ 62.667550][ T530] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 62.673181][ T530] f2fs_is_valid_blkaddr+0x9/0x10 [ 62.678425][ T530] sanity_check_extent_cache+0x1ab/0x450 [ 62.684067][ T530] f2fs_iget+0x2fdb/0x48b0 [ 62.688550][ T530] f2fs_lookup+0x1f2/0x800 [ 62.692966][ T530] ? __cfi_f2fs_lookup+0x10/0x10 [ 62.697985][ T530] ? __cfi_d_alloc_parallel+0x10/0x10 [ 62.703360][ T530] ? __cfi_f2fs_lookup+0x10/0x10 [ 62.708389][ T530] path_openat+0xe8f/0x2aa0 [ 62.713080][ T530] ? do_filp_open+0x360/0x360 [ 62.717934][ T530] do_filp_open+0x1b0/0x360 [ 62.722526][ T530] ? __cfi_do_filp_open+0x10/0x10 [ 62.727750][ T530] ? alloc_fd+0x40c/0x4c0 [ 62.732084][ T530] do_sys_openat2+0x119/0x6b0 [ 62.736768][ T530] ? do_sys_open+0x80/0x80 [ 62.741195][ T530] ? up_read+0x56/0x1d0 [ 62.745362][ T530] __x64_sys_openat+0xf1/0x120 [ 62.750217][ T530] x64_sys_call+0x783/0x9a0 [ 62.754726][ T530] do_syscall_64+0x4c/0xa0 [ 62.759237][ T530] ? clear_bhb_loop+0x30/0x80 [ 62.763924][ T530] ? clear_bhb_loop+0x30/0x80 [ 62.768684][ T530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.774842][ T530] RIP: 0033:0x7f844318e929 [ 62.779255][ T530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.799510][ T530] RSP: 002b:00007f8442fde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 62.808123][ T530] RAX: ffffffffffffffda RBX: 00007f84433b6080 RCX: 00007f844318e929 [ 62.816413][ T530] RDX: 0000000000101000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 62.817192][ T533] loop2: detected capacity change from 0 to 131072 [ 62.824395][ T530] RBP: 00007f8443210b39 R08: 0000000000000000 R09: 0000000000000000 [ 62.824403][ T530] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 62.824407][ T530] R13: 0000000000000001 R14: 00007f84433b6080 R15: 00007ffc00ade6b8 [ 62.824414][ T530] [ 62.950598][ T533] F2FS-fs (loop2): invalid crc value [ 62.973910][ T533] F2FS-fs (loop2): Found nat_bits in checkpoint [ 63.048893][ T530] F2FS-fs (loop3): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 63.073137][ T533] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 63.102897][ T533] F2FS-fs (loop2): access invalid blkaddr:2147563524 [ 63.124533][ T533] CPU: 1 PID: 533 Comm: syz.2.21 Tainted: G B syzkaller #0 [ 63.133238][ T533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.143317][ T533] Call Trace: [ 63.146679][ T533] [ 63.149889][ T533] __dump_stack+0x19/0x1c [ 63.154490][ T533] dump_stack_lvl+0xa3/0xec [ 63.158999][ T533] ? __cfi_dump_stack_lvl+0x8/0x8 [ 63.164034][ T533] ? _raw_spin_lock+0x8e/0x110 [ 63.168810][ T533] ? __cfi__raw_spin_lock+0x10/0x10 [ 63.174030][ T533] ? f2fs_init_read_extent_tree+0x423/0x980 [ 63.179923][ T533] dump_stack+0x10/0x1c [ 63.184080][ T533] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 63.189630][ T533] f2fs_is_valid_blkaddr+0x9/0x10 [ 63.194692][ T533] sanity_check_extent_cache+0x1ab/0x450 [ 63.200328][ T533] f2fs_iget+0x2fdb/0x48b0 [ 63.204846][ T533] f2fs_lookup+0x1f2/0x800 [ 63.209357][ T533] ? __cfi_f2fs_lookup+0x10/0x10 [ 63.214306][ T533] ? __cfi_d_alloc_parallel+0x10/0x10 [ 63.219763][ T533] ? downgrade_write+0x350/0x350 [ 63.224797][ T533] ? inode_permission+0x83/0x360 [ 63.229835][ T533] __lookup_slow+0x24e/0x330 [ 63.234437][ T533] ? lookup_one_len+0x260/0x260 [ 63.239308][ T533] ? down_read+0xa0/0xf0 [ 63.243633][ T533] lookup_slow+0x52/0x70 [ 63.247983][ T533] walk_component+0x261/0x370 [ 63.252661][ T533] path_lookupat+0x85/0x320 [ 63.257166][ T533] filename_lookup+0x1bc/0x420 [ 63.261941][ T533] ? __cfi_filename_lookup+0x10/0x10 [ 63.267317][ T533] ? strncpy_from_user+0x74/0x1c0 [ 63.272343][ T533] ? getname_flags+0xe2/0x440 [ 63.277115][ T533] user_path_at_empty+0x3b/0x170 [ 63.282068][ T533] do_sys_truncate+0x94/0x140 [ 63.286746][ T533] ? __cfi_do_sys_truncate+0x10/0x10 [ 63.292119][ T533] ? fpregs_restore_userregs+0xe1/0x1d0 [ 63.297753][ T533] __x64_sys_truncate+0x56/0x60 [ 63.302647][ T533] x64_sys_call+0x679/0x9a0 [ 63.307153][ T533] do_syscall_64+0x4c/0xa0 [ 63.311638][ T533] ? clear_bhb_loop+0x30/0x80 [ 63.316314][ T533] ? clear_bhb_loop+0x30/0x80 [ 63.320988][ T533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.322306][ T535] loop5: detected capacity change from 0 to 131072 [ 63.326876][ T533] RIP: 0033:0x7f08c498e929 [ 63.326886][ T533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.326892][ T533] RSP: 002b:00007f08c5789038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 63.326901][ T533] RAX: ffffffffffffffda RBX: 00007f08c4bb5fa0 RCX: 00007f08c498e929 [ 63.326906][ T533] RDX: 0000000000000000 RSI: 0000000000001c9e RDI: 0000200000000280 [ 63.326911][ T533] RBP: 00007f08c4a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 63.326915][ T533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.326919][ T533] R13: 0000000000000000 R14: 00007f08c4bb5fa0 R15: 00007ffc0014dc38 [ 63.326925][ T533] [ 63.422676][ T535] F2FS-fs (loop5): invalid crc value [ 63.428381][ T533] F2FS-fs (loop2): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 63.450641][ T544] F2FS-fs (loop2): access invalid blkaddr:2147563524 [ 63.457766][ T544] CPU: 0 PID: 544 Comm: syz.2.21 Tainted: G B syzkaller #0 [ 63.466362][ T544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.476435][ T544] Call Trace: [ 63.479732][ T544] [ 63.482762][ T544] __dump_stack+0x19/0x1c [ 63.487270][ T544] dump_stack_lvl+0xa3/0xec [ 63.491861][ T544] ? __cfi_dump_stack_lvl+0x8/0x8 [ 63.497065][ T544] ? _raw_write_lock+0x8e/0xe0 [ 63.502007][ T544] ? __cfi__raw_write_lock+0x10/0x10 [ 63.507395][ T544] dump_stack+0x10/0x1c [ 63.511734][ T544] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 63.517292][ T544] f2fs_is_valid_blkaddr+0x9/0x10 [ 63.522313][ T544] sanity_check_extent_cache+0x1ab/0x450 [ 63.528027][ T544] f2fs_iget+0x2fdb/0x48b0 [ 63.532501][ T544] f2fs_lookup+0x1f2/0x800 [ 63.536913][ T544] ? __cfi_f2fs_lookup+0x10/0x10 [ 63.541852][ T544] ? __cfi_d_alloc_parallel+0x10/0x10 [ 63.547222][ T544] ? __cfi_f2fs_lookup+0x10/0x10 [ 63.552161][ T544] path_openat+0xe8f/0x2aa0 [ 63.556672][ T544] ? do_filp_open+0x360/0x360 [ 63.561346][ T544] do_filp_open+0x1b0/0x360 [ 63.565842][ T544] ? __cfi_do_filp_open+0x10/0x10 [ 63.570955][ T544] ? alloc_fd+0x40c/0x4c0 [ 63.575377][ T544] do_sys_openat2+0x119/0x6b0 [ 63.580053][ T544] ? do_sys_open+0x80/0x80 [ 63.584466][ T544] ? up_read+0x56/0x1d0 [ 63.588651][ T544] __x64_sys_openat+0xf1/0x120 [ 63.593686][ T544] x64_sys_call+0x783/0x9a0 [ 63.598283][ T544] do_syscall_64+0x4c/0xa0 [ 63.602702][ T544] ? clear_bhb_loop+0x30/0x80 [ 63.607370][ T544] ? clear_bhb_loop+0x30/0x80 [ 63.612036][ T544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.617920][ T544] RIP: 0033:0x7f08c498e929 [ 63.622333][ T544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.642027][ T544] RSP: 002b:00007f08c5768038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 63.650534][ T544] RAX: ffffffffffffffda RBX: 00007f08c4bb6080 RCX: 00007f08c498e929 [ 63.658512][ T544] RDX: 0000000000101000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 63.666572][ T544] RBP: 00007f08c4a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 63.674727][ T544] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 63.682884][ T544] R13: 0000000000000001 R14: 00007f08c4bb6080 R15: 00007ffc0014dc38 [ 63.690947][ T544] [ 63.704494][ T544] F2FS-fs (loop2): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 63.718526][ T535] F2FS-fs (loop5): Found nat_bits in checkpoint [ 63.749732][ T535] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 63.790057][ T535] F2FS-fs (loop5): access invalid blkaddr:2147563524 [ 63.800898][ T535] CPU: 0 PID: 535 Comm: syz.5.22 Tainted: G B syzkaller #0 [ 63.809692][ T535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.820030][ T535] Call Trace: [ 63.823332][ T535] [ 63.826279][ T535] __dump_stack+0x19/0x1c [ 63.830670][ T535] dump_stack_lvl+0xa3/0xec [ 63.835179][ T535] ? __cfi_dump_stack_lvl+0x8/0x8 [ 63.840218][ T535] ? _raw_spin_lock+0x8e/0x110 [ 63.845187][ T535] ? __cfi__raw_spin_lock+0x10/0x10 [ 63.850487][ T535] ? f2fs_init_read_extent_tree+0x423/0x980 [ 63.856573][ T535] dump_stack+0x10/0x1c [ 63.860752][ T535] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 63.866315][ T535] f2fs_is_valid_blkaddr+0x9/0x10 [ 63.871523][ T535] sanity_check_extent_cache+0x1ab/0x450 [ 63.877257][ T535] f2fs_iget+0x2fdb/0x48b0 [ 63.881780][ T535] f2fs_lookup+0x1f2/0x800 [ 63.886298][ T535] ? __cfi_f2fs_lookup+0x10/0x10 [ 63.891250][ T535] ? __cfi_d_alloc_parallel+0x10/0x10 [ 63.896639][ T535] ? downgrade_write+0x350/0x350 [ 63.898605][ T537] loop6: detected capacity change from 0 to 131072 [ 63.901702][ T535] ? inode_permission+0x83/0x360 [ 63.913204][ T535] ? preempt_schedule+0xa7/0xb0 [ 63.918071][ T535] __lookup_slow+0x24e/0x330 [ 63.922836][ T535] ? lookup_one_len+0x260/0x260 [ 63.927863][ T535] ? down_read+0xa0/0xf0 [ 63.932245][ T535] lookup_slow+0x52/0x70 [ 63.936599][ T535] walk_component+0x261/0x370 [ 63.941377][ T535] path_lookupat+0x85/0x320 [ 63.945892][ T535] filename_lookup+0x1bc/0x420 [ 63.950665][ T535] ? __cfi_filename_lookup+0x10/0x10 [ 63.955964][ T535] ? strncpy_from_user+0x74/0x1c0 [ 63.961170][ T535] ? getname_flags+0xe2/0x440 [ 63.965938][ T535] user_path_at_empty+0x3b/0x170 [ 63.970969][ T535] do_sys_truncate+0x94/0x140 [ 63.975757][ T535] ? __cfi_do_sys_truncate+0x10/0x10 [ 63.981172][ T535] ? fpregs_restore_userregs+0xe1/0x1d0 [ 63.986725][ T535] __x64_sys_truncate+0x56/0x60 [ 63.990466][ T539] loop0: detected capacity change from 0 to 131072 [ 63.991571][ T535] x64_sys_call+0x679/0x9a0 [ 64.002729][ T535] do_syscall_64+0x4c/0xa0 [ 64.007146][ T535] ? clear_bhb_loop+0x30/0x80 [ 64.011835][ T535] ? clear_bhb_loop+0x30/0x80 [ 64.016554][ T535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.022524][ T535] RIP: 0033:0x7feafa18e929 [ 64.026940][ T535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.046803][ T535] RSP: 002b:00007feafb0ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 64.055211][ T535] RAX: ffffffffffffffda RBX: 00007feafa3b5fa0 RCX: 00007feafa18e929 [ 64.063178][ T535] RDX: 0000000000000000 RSI: 0000000000001c9e RDI: 0000200000000280 [ 64.071243][ T535] RBP: 00007feafa210b39 R08: 0000000000000000 R09: 0000000000000000 [ 64.079297][ T535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.087266][ T535] R13: 0000000000000000 R14: 00007feafa3b5fa0 R15: 00007ffe1972f1a8 [ 64.095240][ T535] [ 64.106578][ T539] F2FS-fs (loop0): invalid crc value [ 64.107792][ T535] F2FS-fs (loop5): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 64.112311][ T537] F2FS-fs (loop6): invalid crc value [ 64.131653][ T551] F2FS-fs (loop5): access invalid blkaddr:2147563524 [ 64.162377][ T551] CPU: 1 PID: 551 Comm: syz.5.22 Tainted: G B syzkaller #0 [ 64.171269][ T551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.181504][ T551] Call Trace: [ 64.184801][ T551] [ 64.187751][ T551] __dump_stack+0x19/0x1c [ 64.192083][ T551] dump_stack_lvl+0xa3/0xec [ 64.196679][ T551] ? __cfi_dump_stack_lvl+0x8/0x8 [ 64.201894][ T551] ? _raw_spin_lock+0x8e/0x110 [ 64.206671][ T551] ? __cfi__raw_spin_lock+0x10/0x10 [ 64.211987][ T551] ? f2fs_init_read_extent_tree+0x423/0x980 [ 64.217885][ T551] dump_stack+0x10/0x1c [ 64.222042][ T551] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 64.227758][ T551] f2fs_is_valid_blkaddr+0x9/0x10 [ 64.232770][ T551] sanity_check_extent_cache+0x1ab/0x450 [ 64.238533][ T551] f2fs_iget+0x2fdb/0x48b0 [ 64.243020][ T551] f2fs_lookup+0x1f2/0x800 [ 64.247423][ T551] ? __cfi_f2fs_lookup+0x10/0x10 [ 64.252344][ T551] ? __cfi_d_alloc_parallel+0x10/0x10 [ 64.257701][ T551] ? __cfi_f2fs_lookup+0x10/0x10 [ 64.262708][ T551] path_openat+0xe8f/0x2aa0 [ 64.267288][ T551] ? do_filp_open+0x360/0x360 [ 64.271948][ T551] do_filp_open+0x1b0/0x360 [ 64.276435][ T551] ? __cfi_do_filp_open+0x10/0x10 [ 64.281439][ T551] ? alloc_fd+0x40c/0x4c0 [ 64.285754][ T551] do_sys_openat2+0x119/0x6b0 [ 64.290417][ T551] ? do_sys_open+0x80/0x80 [ 64.294899][ T551] ? up_read+0x56/0x1d0 [ 64.299041][ T551] __x64_sys_openat+0xf1/0x120 [ 64.303791][ T551] x64_sys_call+0x783/0x9a0 [ 64.308428][ T551] do_syscall_64+0x4c/0xa0 [ 64.312830][ T551] ? clear_bhb_loop+0x30/0x80 [ 64.317551][ T551] ? clear_bhb_loop+0x30/0x80 [ 64.322304][ T551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.328177][ T551] RIP: 0033:0x7feafa18e929 [ 64.332628][ T551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.352391][ T551] RSP: 002b:00007feafb0cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 64.360967][ T551] RAX: ffffffffffffffda RBX: 00007feafa3b6080 RCX: 00007feafa18e929 [ 64.369015][ T551] RDX: 0000000000101000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 64.377145][ T551] RBP: 00007feafa210b39 R08: 0000000000000000 R09: 0000000000000000 [ 64.385284][ T551] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 64.393239][ T551] R13: 0000000000000001 R14: 00007feafa3b6080 R15: 00007ffe1972f1a8 [ 64.401201][ T551] [ 64.408811][ T539] F2FS-fs (loop0): Found nat_bits in checkpoint [ 64.440080][ T539] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 64.448528][ T539] F2FS-fs (loop0): access invalid blkaddr:2147563524 [ 64.450138][ T537] F2FS-fs (loop6): Found nat_bits in checkpoint [ 64.455614][ T539] CPU: 1 PID: 539 Comm: syz.0.24 Tainted: G B syzkaller #0 [ 64.470214][ T539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.480360][ T539] Call Trace: [ 64.483739][ T539] [ 64.486675][ T539] __dump_stack+0x19/0x1c [ 64.491011][ T539] dump_stack_lvl+0xa3/0xec [ 64.495537][ T539] ? __cfi_dump_stack_lvl+0x8/0x8 [ 64.500566][ T539] ? _raw_spin_lock+0x8e/0x110 [ 64.505327][ T539] ? __cfi__raw_spin_lock+0x10/0x10 [ 64.510534][ T539] ? f2fs_init_read_extent_tree+0x423/0x980 [ 64.516439][ T539] dump_stack+0x10/0x1c [ 64.520601][ T539] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 64.526147][ T539] f2fs_is_valid_blkaddr+0x9/0x10 [ 64.531178][ T539] sanity_check_extent_cache+0x1ab/0x450 [ 64.536830][ T539] f2fs_iget+0x2fdb/0x48b0 [ 64.541344][ T539] f2fs_lookup+0x1f2/0x800 [ 64.545761][ T539] ? __cfi_f2fs_lookup+0x10/0x10 [ 64.550788][ T539] ? __cfi_d_alloc_parallel+0x10/0x10 [ 64.556164][ T539] ? downgrade_write+0x350/0x350 [ 64.561191][ T539] ? inode_permission+0x83/0x360 [ 64.566215][ T539] __lookup_slow+0x24e/0x330 [ 64.570895][ T539] ? lookup_one_len+0x260/0x260 [ 64.575779][ T539] ? down_read+0xa0/0xf0 [ 64.580115][ T539] lookup_slow+0x52/0x70 [ 64.584362][ T539] walk_component+0x261/0x370 [ 64.589041][ T539] path_lookupat+0x85/0x320 [ 64.593631][ T539] filename_lookup+0x1bc/0x420 [ 64.598500][ T539] ? __cfi_filename_lookup+0x10/0x10 [ 64.603803][ T539] ? strncpy_from_user+0x74/0x1c0 [ 64.608873][ T539] ? getname_flags+0xe2/0x440 [ 64.613550][ T539] user_path_at_empty+0x3b/0x170 [ 64.618581][ T539] do_sys_truncate+0x94/0x140 [ 64.623472][ T539] ? __cfi_do_sys_truncate+0x10/0x10 [ 64.628853][ T539] ? fpregs_restore_userregs+0xe1/0x1d0 [ 64.634412][ T539] __x64_sys_truncate+0x56/0x60 [ 64.639269][ T539] x64_sys_call+0x679/0x9a0 [ 64.643335][ T551] F2FS-fs (loop5): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 64.643954][ T539] do_syscall_64+0x4c/0xa0 [ 64.661369][ T539] ? clear_bhb_loop+0x30/0x80 [ 64.666306][ T539] ? clear_bhb_loop+0x30/0x80 [ 64.671077][ T539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.676975][ T539] RIP: 0033:0x7fdf01d8e929 [ 64.681578][ T539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.701285][ T539] RSP: 002b:00007fdf02c79038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 64.710040][ T539] RAX: ffffffffffffffda RBX: 00007fdf01fb5fa0 RCX: 00007fdf01d8e929 [ 64.718029][ T539] RDX: 0000000000000000 RSI: 0000000000001c9e RDI: 0000200000000280 [ 64.726097][ T539] RBP: 00007fdf01e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 64.734087][ T539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.742078][ T539] R13: 0000000000000000 R14: 00007fdf01fb5fa0 R15: 00007ffe7e49dde8 [ 64.750240][ T539] [ 64.755048][ T539] F2FS-fs (loop0): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 64.755116][ T537] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 64.776338][ T563] F2FS-fs (loop0): access invalid blkaddr:2147563524 [ 64.792704][ T548] loop3: detected capacity change from 0 to 131072 [ 64.813138][ T563] CPU: 0 PID: 563 Comm: syz.0.24 Tainted: G B syzkaller #0 [ 64.817336][ T548] F2FS-fs (loop3): invalid crc value [ 64.821858][ T563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.821865][ T563] Call Trace: [ 64.821869][ T563] [ 64.821872][ T563] __dump_stack+0x19/0x1c [ 64.848171][ T563] dump_stack_lvl+0xa3/0xec [ 64.852687][ T563] ? __cfi_dump_stack_lvl+0x8/0x8 [ 64.857727][ T563] ? _raw_spin_lock+0x8e/0x110 [ 64.862503][ T563] ? __cfi__raw_spin_lock+0x10/0x10 [ 64.867704][ T563] ? f2fs_init_read_extent_tree+0x423/0x980 [ 64.873603][ T563] dump_stack+0x10/0x1c [ 64.873879][ T537] F2FS-fs (loop6): access invalid blkaddr:2147563524 [ 64.877841][ T563] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 64.877853][ T563] f2fs_is_valid_blkaddr+0x9/0x10 [ 64.877860][ T563] sanity_check_extent_cache+0x1ab/0x450 [ 64.900792][ T563] f2fs_iget+0x2fdb/0x48b0 [ 64.905212][ T563] f2fs_lookup+0x1f2/0x800 [ 64.909637][ T563] ? __cfi_f2fs_lookup+0x10/0x10 [ 64.915008][ T563] ? __cfi_d_alloc_parallel+0x10/0x10 [ 64.920466][ T563] ? __cfi_f2fs_lookup+0x10/0x10 [ 64.925396][ T563] path_openat+0xe8f/0x2aa0 [ 64.929936][ T563] ? do_filp_open+0x360/0x360 [ 64.934701][ T563] do_filp_open+0x1b0/0x360 [ 64.939195][ T563] ? __cfi_do_filp_open+0x10/0x10 [ 64.944303][ T563] ? alloc_fd+0x40c/0x4c0 [ 64.948651][ T563] do_sys_openat2+0x119/0x6b0 [ 64.953325][ T563] ? do_sys_open+0x80/0x80 [ 64.957738][ T563] ? up_read+0x56/0x1d0 [ 64.961889][ T563] __x64_sys_openat+0xf1/0x120 [ 64.966748][ T563] x64_sys_call+0x783/0x9a0 [ 64.971348][ T563] do_syscall_64+0x4c/0xa0 [ 64.975852][ T563] ? clear_bhb_loop+0x30/0x80 [ 64.980542][ T563] ? clear_bhb_loop+0x30/0x80 [ 64.985311][ T563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.991196][ T563] RIP: 0033:0x7fdf01d8e929 [ 64.995604][ T563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.015299][ T563] RSP: 002b:00007fdf02c58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 65.023972][ T563] RAX: ffffffffffffffda RBX: 00007fdf01fb6080 RCX: 00007fdf01d8e929 [ 65.031971][ T563] RDX: 0000000000101000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 65.039948][ T563] RBP: 00007fdf01e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 65.048096][ T563] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 65.056069][ T563] R13: 0000000000000001 R14: 00007fdf01fb6080 R15: 00007ffe7e49dde8 [ 65.064036][ T563] [ 65.067077][ T537] CPU: 1 PID: 537 Comm: syz.6.23 Tainted: G B syzkaller #0 [ 65.076017][ T537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.086079][ T537] Call Trace: [ 65.089444][ T537] [ 65.092454][ T537] __dump_stack+0x19/0x1c [ 65.097048][ T537] dump_stack_lvl+0xa3/0xec [ 65.101669][ T537] ? __cfi_dump_stack_lvl+0x8/0x8 [ 65.106688][ T537] ? _raw_spin_lock+0x8e/0x110 [ 65.111446][ T537] ? __cfi__raw_spin_lock+0x10/0x10 [ 65.116648][ T537] ? f2fs_init_read_extent_tree+0x423/0x980 [ 65.122552][ T537] dump_stack+0x10/0x1c [ 65.124052][ T548] F2FS-fs (loop3): Found nat_bits in checkpoint [ 65.126716][ T537] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 65.138506][ T537] f2fs_is_valid_blkaddr+0x9/0x10 [ 65.143548][ T537] sanity_check_extent_cache+0x1ab/0x450 [ 65.149266][ T537] f2fs_iget+0x2fdb/0x48b0 [ 65.153766][ T537] f2fs_lookup+0x1f2/0x800 [ 65.158268][ T537] ? __cfi_f2fs_lookup+0x10/0x10 [ 65.163300][ T537] ? __cfi_d_alloc_parallel+0x10/0x10 [ 65.168670][ T537] ? downgrade_write+0x350/0x350 [ 65.173702][ T537] ? inode_permission+0x83/0x360 [ 65.178636][ T537] __lookup_slow+0x24e/0x330 [ 65.183222][ T537] ? lookup_one_len+0x260/0x260 [ 65.188065][ T537] ? down_read+0xa0/0xf0 [ 65.192474][ T537] lookup_slow+0x52/0x70 [ 65.196808][ T537] walk_component+0x261/0x370 [ 65.201481][ T537] path_lookupat+0x85/0x320 [ 65.205976][ T537] filename_lookup+0x1bc/0x420 [ 65.210728][ T537] ? __cfi_filename_lookup+0x10/0x10 [ 65.216007][ T537] ? strncpy_from_user+0x74/0x1c0 [ 65.221036][ T537] ? getname_flags+0xe2/0x440 [ 65.225718][ T537] user_path_at_empty+0x3b/0x170 [ 65.230733][ T537] do_sys_truncate+0x94/0x140 [ 65.235402][ T537] ? __cfi_do_sys_truncate+0x10/0x10 [ 65.240763][ T537] ? fpregs_restore_userregs+0xe1/0x1d0 [ 65.246391][ T537] __x64_sys_truncate+0x56/0x60 [ 65.251233][ T537] x64_sys_call+0x679/0x9a0 [ 65.255736][ T537] do_syscall_64+0x4c/0xa0 [ 65.260423][ T537] ? clear_bhb_loop+0x30/0x80 [ 65.265261][ T537] ? clear_bhb_loop+0x30/0x80 [ 65.269937][ T537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.275833][ T537] RIP: 0033:0x7fae8e58e929 [ 65.280247][ T537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.299945][ T537] RSP: 002b:00007fae8e3ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 65.308648][ T537] RAX: ffffffffffffffda RBX: 00007fae8e7b5fa0 RCX: 00007fae8e58e929 [ 65.316718][ T537] RDX: 0000000000000000 RSI: 0000000000001c9e RDI: 0000200000000280 [ 65.324704][ T537] RBP: 00007fae8e610b39 R08: 0000000000000000 R09: 0000000000000000 [ 65.332685][ T537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.340661][ T537] R13: 0000000000000000 R14: 00007fae8e7b5fa0 R15: 00007ffe7a311d58 [ 65.348644][ T537] [ 65.359837][ T548] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 65.367622][ T537] F2FS-fs (loop6): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 65.393262][ T548] F2FS-fs (loop3): access invalid blkaddr:2147563524 [ 65.397722][ T563] F2FS-fs (loop0): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 65.413365][ T548] CPU: 0 PID: 548 Comm: syz.3.25 Tainted: G B syzkaller #0 [ 65.413374][ T567] F2FS-fs (loop6): access invalid blkaddr:2147563524 [ 65.421961][ T548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.438762][ T548] Call Trace: [ 65.442045][ T548] [ 65.444971][ T548] __dump_stack+0x19/0x1c [ 65.449294][ T548] dump_stack_lvl+0xa3/0xec [ 65.453802][ T548] ? __cfi_dump_stack_lvl+0x8/0x8 [ 65.458830][ T548] ? _raw_spin_lock+0x8e/0x110 [ 65.463588][ T548] ? __cfi__raw_spin_lock+0x10/0x10 [ 65.468784][ T548] ? f2fs_init_read_extent_tree+0x423/0x980 [ 65.474752][ T548] dump_stack+0x10/0x1c [ 65.478896][ T548] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 65.484604][ T548] f2fs_is_valid_blkaddr+0x9/0x10 [ 65.489617][ T548] sanity_check_extent_cache+0x1ab/0x450 [ 65.495235][ T548] f2fs_iget+0x2fdb/0x48b0 [ 65.499641][ T548] f2fs_lookup+0x1f2/0x800 [ 65.504126][ T548] ? __cfi_f2fs_lookup+0x10/0x10 [ 65.509136][ T548] ? __cfi_d_alloc_parallel+0x10/0x10 [ 65.514499][ T548] ? downgrade_write+0x350/0x350 [ 65.519515][ T548] ? inode_permission+0x83/0x360 [ 65.524495][ T548] ? preempt_schedule+0xa7/0xb0 [ 65.529443][ T548] __lookup_slow+0x24e/0x330 [ 65.534027][ T548] ? lookup_one_len+0x260/0x260 [ 65.538866][ T548] ? down_read+0xa0/0xf0 [ 65.543096][ T548] lookup_slow+0x52/0x70 [ 65.547329][ T548] walk_component+0x261/0x370 [ 65.551996][ T548] path_lookupat+0x85/0x320 [ 65.556580][ T548] filename_lookup+0x1bc/0x420 [ 65.561326][ T548] ? __cfi_filename_lookup+0x10/0x10 [ 65.566700][ T548] ? strncpy_from_user+0x74/0x1c0 [ 65.571814][ T548] ? getname_flags+0xe2/0x440 [ 65.576645][ T548] user_path_at_empty+0x3b/0x170 [ 65.581678][ T548] do_sys_truncate+0x94/0x140 [ 65.586345][ T548] ? __cfi_do_sys_truncate+0x10/0x10 [ 65.591614][ T548] ? fpregs_restore_userregs+0xe1/0x1d0 [ 65.597145][ T548] __x64_sys_truncate+0x56/0x60 [ 65.602090][ T548] x64_sys_call+0x679/0x9a0 [ 65.606671][ T548] do_syscall_64+0x4c/0xa0 [ 65.611076][ T548] ? clear_bhb_loop+0x30/0x80 [ 65.615742][ T548] ? clear_bhb_loop+0x30/0x80 [ 65.620412][ T548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.626293][ T548] RIP: 0033:0x7f844318e929 [ 65.630697][ T548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.650381][ T548] RSP: 002b:00007f8442fff038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 65.658792][ T548] RAX: ffffffffffffffda RBX: 00007f84433b5fa0 RCX: 00007f844318e929 [ 65.666772][ T548] RDX: 0000000000000000 RSI: 0000000000001c9e RDI: 0000200000000280 [ 65.674825][ T548] RBP: 00007f8443210b39 R08: 0000000000000000 R09: 0000000000000000 [ 65.682808][ T548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.690856][ T548] R13: 0000000000000000 R14: 00007f84433b5fa0 R15: 00007ffc00ade6b8 [ 65.698907][ T548] [ 65.702012][ T567] CPU: 1 PID: 567 Comm: syz.6.23 Tainted: G B syzkaller #0 [ 65.710615][ T567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.720683][ T567] Call Trace: [ 65.724017][ T567] [ 65.726958][ T567] __dump_stack+0x19/0x1c [ 65.731302][ T567] dump_stack_lvl+0xa3/0xec [ 65.735906][ T567] ? __cfi_dump_stack_lvl+0x8/0x8 [ 65.741121][ T567] ? _raw_write_lock+0x8e/0xe0 [ 65.745905][ T567] ? __cfi__raw_write_lock+0x10/0x10 [ 65.751285][ T567] dump_stack+0x10/0x1c [ 65.752078][ T562] loop2: detected capacity change from 0 to 131072 [ 65.755534][ T567] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 65.755545][ T567] f2fs_is_valid_blkaddr+0x9/0x10 [ 65.755550][ T567] sanity_check_extent_cache+0x1ab/0x450 [ 65.755558][ T567] f2fs_iget+0x2fdb/0x48b0 [ 65.755567][ T567] f2fs_lookup+0x1f2/0x800 [ 65.755573][ T567] ? __cfi_f2fs_lookup+0x10/0x10 [ 65.755579][ T567] ? __cfi_d_alloc_parallel+0x10/0x10 [ 65.755588][ T567] ? __cfi_f2fs_lookup+0x10/0x10 [ 65.755594][ T567] path_openat+0xe8f/0x2aa0 [ 65.763178][ T562] F2FS-fs (loop2): invalid crc value [ 65.767632][ T567] ? do_filp_open+0x360/0x360 [ 65.773481][ T548] F2FS-fs (loop3): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 65.778262][ T567] do_filp_open+0x1b0/0x360 [ 65.783236][ T574] F2FS-fs (loop3): access invalid blkaddr:2147563524 [ 65.787313][ T567] ? __cfi_do_filp_open+0x10/0x10 [ 65.846666][ T567] ? alloc_fd+0x40c/0x4c0 [ 65.850995][ T567] do_sys_openat2+0x119/0x6b0 [ 65.855781][ T567] ? do_sys_open+0x80/0x80 [ 65.860187][ T567] ? up_read+0x56/0x1d0 [ 65.864344][ T567] __x64_sys_openat+0xf1/0x120 [ 65.869104][ T567] x64_sys_call+0x783/0x9a0 [ 65.873602][ T567] do_syscall_64+0x4c/0xa0 [ 65.878100][ T567] ? clear_bhb_loop+0x30/0x80 [ 65.883033][ T567] ? clear_bhb_loop+0x30/0x80 [ 65.887790][ T567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.893772][ T567] RIP: 0033:0x7fae8e58e929 [ 65.898529][ T567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.916722][ T562] F2FS-fs (loop2): Found nat_bits in checkpoint [ 65.918224][ T567] RSP: 002b:00007fae8e3de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 65.933143][ T567] RAX: ffffffffffffffda RBX: 00007fae8e7b6080 RCX: 00007fae8e58e929 [ 65.941114][ T567] RDX: 0000000000101000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 65.949082][ T567] RBP: 00007fae8e610b39 R08: 0000000000000000 R09: 0000000000000000 [ 65.957047][ T567] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 65.965024][ T567] R13: 0000000000000001 R14: 00007fae8e7b6080 R15: 00007ffe7a311d58 [ 65.973172][ T567] [ 65.976571][ T574] CPU: 0 PID: 574 Comm: syz.3.25 Tainted: G B syzkaller #0 [ 65.985164][ T574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.995231][ T574] Call Trace: [ 65.998517][ T574] [ 66.001527][ T574] __dump_stack+0x19/0x1c [ 66.005844][ T574] dump_stack_lvl+0xa3/0xec [ 66.010335][ T574] ? __cfi_dump_stack_lvl+0x8/0x8 [ 66.015346][ T574] ? _raw_write_lock+0x8e/0xe0 [ 66.020191][ T574] ? __cfi__raw_write_lock+0x10/0x10 [ 66.025465][ T574] dump_stack+0x10/0x1c [ 66.029625][ T574] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 66.035271][ T574] f2fs_is_valid_blkaddr+0x9/0x10 [ 66.040282][ T574] sanity_check_extent_cache+0x1ab/0x450 [ 66.045982][ T574] f2fs_iget+0x2fdb/0x48b0 [ 66.050817][ T574] f2fs_lookup+0x1f2/0x800 [ 66.055213][ T574] ? __cfi_f2fs_lookup+0x10/0x10 [ 66.060215][ T574] ? __cfi_d_alloc_parallel+0x10/0x10 [ 66.065574][ T574] ? __cfi_f2fs_lookup+0x10/0x10 [ 66.070676][ T574] path_openat+0xe8f/0x2aa0 [ 66.075266][ T574] ? do_filp_open+0x360/0x360 [ 66.079947][ T574] do_filp_open+0x1b0/0x360 [ 66.084434][ T574] ? __cfi_do_filp_open+0x10/0x10 [ 66.089627][ T574] ? alloc_fd+0x40c/0x4c0 [ 66.093947][ T574] do_sys_openat2+0x119/0x6b0 [ 66.098692][ T574] ? do_sys_open+0x80/0x80 [ 66.103178][ T574] ? up_read+0x56/0x1d0 [ 66.107314][ T574] __x64_sys_openat+0xf1/0x120 [ 66.112157][ T574] x64_sys_call+0x783/0x9a0 [ 66.116645][ T574] do_syscall_64+0x4c/0xa0 [ 66.121060][ T574] ? clear_bhb_loop+0x30/0x80 [ 66.125825][ T574] ? clear_bhb_loop+0x30/0x80 [ 66.130493][ T574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.136493][ T574] RIP: 0033:0x7f844318e929 [ 66.140895][ T574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.160581][ T574] RSP: 002b:00007f8442fde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 66.169071][ T574] RAX: ffffffffffffffda RBX: 00007f84433b6080 RCX: 00007f844318e929 [ 66.177121][ T574] RDX: 0000000000101000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 66.185079][ T574] RBP: 00007f8443210b39 R08: 0000000000000000 R09: 0000000000000000 [ 66.193125][ T574] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 66.201261][ T574] R13: 0000000000000001 R14: 00007f84433b6080 R15: 00007ffc00ade6b8 [ 66.209215][ T574] [ 66.212569][ T567] F2FS-fs (loop6): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 66.214894][ T562] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 66.234675][ T574] F2FS-fs (loop3): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 66.313676][ T562] F2FS-fs (loop2): access invalid blkaddr:2147563524 [ 66.320397][ T562] CPU: 1 PID: 562 Comm: syz.2.26 Tainted: G B syzkaller #0 [ 66.329164][ T562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.339308][ T562] Call Trace: [ 66.342605][ T562] [ 66.345626][ T562] __dump_stack+0x19/0x1c [ 66.349953][ T562] dump_stack_lvl+0xa3/0xec [ 66.354453][ T562] ? __cfi_dump_stack_lvl+0x8/0x8 [ 66.359477][ T562] ? _raw_spin_lock+0x8e/0x110 [ 66.364238][ T562] ? __cfi__raw_spin_lock+0x10/0x10 [ 66.369440][ T562] ? f2fs_init_read_extent_tree+0x423/0x980 [ 66.375431][ T562] dump_stack+0x10/0x1c [ 66.379591][ T562] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 66.385135][ T562] f2fs_is_valid_blkaddr+0x9/0x10 [ 66.390248][ T562] sanity_check_extent_cache+0x1ab/0x450 [ 66.395961][ T562] f2fs_iget+0x2fdb/0x48b0 [ 66.400468][ T562] f2fs_lookup+0x1f2/0x800 [ 66.404874][ T562] ? __cfi_f2fs_lookup+0x10/0x10 [ 66.409819][ T562] ? __cfi_d_alloc_parallel+0x10/0x10 [ 66.415269][ T562] ? downgrade_write+0x350/0x350 [ 66.420204][ T562] ? inode_permission+0x83/0x360 [ 66.425149][ T562] __lookup_slow+0x24e/0x330 [ 66.429772][ T562] ? lookup_one_len+0x260/0x260 [ 66.434624][ T562] ? down_read+0xa0/0xf0 [ 66.438866][ T562] lookup_slow+0x52/0x70 [ 66.443276][ T562] walk_component+0x261/0x370 [ 66.447951][ T562] path_lookupat+0x85/0x320 [ 66.452545][ T562] filename_lookup+0x1bc/0x420 [ 66.457492][ T562] ? __cfi_filename_lookup+0x10/0x10 [ 66.462914][ T562] ? strncpy_from_user+0x74/0x1c0 [ 66.468124][ T562] ? getname_flags+0xe2/0x440 [ 66.472807][ T562] user_path_at_empty+0x3b/0x170 [ 66.477842][ T562] do_sys_truncate+0x94/0x140 [ 66.482606][ T562] ? __cfi_do_sys_truncate+0x10/0x10 [ 66.487980][ T562] ? fpregs_restore_userregs+0xe1/0x1d0 [ 66.493789][ T562] __x64_sys_truncate+0x56/0x60 [ 66.498738][ T562] x64_sys_call+0x679/0x9a0 [ 66.503251][ T562] do_syscall_64+0x4c/0xa0 [ 66.507755][ T562] ? clear_bhb_loop+0x30/0x80 [ 66.512492][ T562] ? clear_bhb_loop+0x30/0x80 [ 66.517268][ T562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.523336][ T562] RIP: 0033:0x7f08c498e929 [ 66.527843][ T562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.547475][ T562] RSP: 002b:00007f08c5789038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 66.556078][ T562] RAX: ffffffffffffffda RBX: 00007f08c4bb5fa0 RCX: 00007f08c498e929 [ 66.564144][ T562] RDX: 0000000000000000 RSI: 0000000000001c9e RDI: 0000200000000280 [ 66.572202][ T562] RBP: 00007f08c4a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 66.580177][ T562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.588160][ T562] R13: 0000000000000000 R14: 00007f08c4bb5fa0 R15: 00007ffc0014dc38 [ 66.596143][ T562] [ 66.820074][ T569] loop5: detected capacity change from 0 to 131072 [ 66.846657][ T569] F2FS-fs (loop5): invalid crc value [ 66.863119][ T562] F2FS-fs (loop2): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 66.902052][ T569] F2FS-fs (loop5): Found nat_bits in checkpoint [ 66.959866][ T569] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 66.983424][ T569] F2FS-fs (loop5): access invalid blkaddr:2147563524 [ 67.000339][ T569] CPU: 0 PID: 569 Comm: syz.5.27 Tainted: G B syzkaller #0 [ 67.009051][ T569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.019459][ T569] Call Trace: [ 67.022761][ T569] [ 67.025868][ T569] __dump_stack+0x19/0x1c [ 67.030279][ T569] dump_stack_lvl+0xa3/0xec [ 67.034867][ T569] ? __cfi_dump_stack_lvl+0x8/0x8 [ 67.039894][ T569] ? _raw_spin_lock+0x8e/0x110 [ 67.044657][ T569] ? __cfi__raw_spin_lock+0x10/0x10 [ 67.049934][ T569] ? f2fs_init_read_extent_tree+0x423/0x980 [ 67.055822][ T569] dump_stack+0x10/0x1c [ 67.059970][ T569] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 67.065509][ T569] f2fs_is_valid_blkaddr+0x9/0x10 [ 67.070527][ T569] sanity_check_extent_cache+0x1ab/0x450 [ 67.076338][ T569] f2fs_iget+0x2fdb/0x48b0 [ 67.080773][ T569] f2fs_lookup+0x1f2/0x800 [ 67.085372][ T569] ? __cfi_f2fs_lookup+0x10/0x10 [ 67.090397][ T569] ? __cfi_d_alloc_parallel+0x10/0x10 [ 67.095785][ T569] ? downgrade_write+0x350/0x350 [ 67.100723][ T569] ? inode_permission+0x83/0x360 [ 67.105747][ T569] __lookup_slow+0x24e/0x330 [ 67.110339][ T569] ? lookup_one_len+0x260/0x260 [ 67.115196][ T569] ? down_read+0xa0/0xf0 [ 67.119620][ T569] lookup_slow+0x52/0x70 [ 67.123851][ T569] walk_component+0x261/0x370 [ 67.128610][ T569] path_lookupat+0x85/0x320 [ 67.133214][ T569] filename_lookup+0x1bc/0x420 [ 67.137992][ T569] ? __cfi_filename_lookup+0x10/0x10 [ 67.143290][ T569] ? strncpy_from_user+0x74/0x1c0 [ 67.148486][ T569] ? getname_flags+0xe2/0x440 [ 67.153177][ T569] user_path_at_empty+0x3b/0x170 2026/01/06 18:21:39 executed programs: 25 [ 67.158487][ T569] do_sys_truncate+0x94/0x140 [ 67.163257][ T569] ? __cfi_do_sys_truncate+0x10/0x10 [ 67.168717][ T569] ? fpregs_restore_userregs+0xe1/0x1d0 [ 67.174270][ T569] __x64_sys_truncate+0x56/0x60 [ 67.179301][ T569] x64_sys_call+0x679/0x9a0 [ 67.183820][ T569] do_syscall_64+0x4c/0xa0 [ 67.188418][ T569] ? clear_bhb_loop+0x30/0x80 [ 67.193179][ T569] ? clear_bhb_loop+0x30/0x80 [ 67.197854][ T569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.203747][ T569] RIP: 0033:0x7feafa18e929 [ 67.208248][ T569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.228175][ T569] RSP: 002b:00007feafb0ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 67.236661][ T569] RAX: ffffffffffffffda RBX: 00007feafa3b5fa0 RCX: 00007feafa18e929 [ 67.244729][ T569] RDX: 0000000000000000 RSI: 0000000000001c9e RDI: 0000200000000280 [ 67.252707][ T569] RBP: 00007feafa210b39 R08: 0000000000000000 R09: 0000000000000000 [ 67.260953][ T569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.268914][ T569] R13: 0000000000000000 R14: 00007feafa3b5fa0 R15: 00007ffe1972f1a8 [ 67.277049][ T569] [ 67.438719][ T582] loop3: detected capacity change from 0 to 131072 [ 67.465411][ T582] F2FS-fs (loop3): invalid crc value [ 67.491197][ T582] F2FS-fs (loop3): Found nat_bits in checkpoint [ 67.497547][ T569] F2FS-fs (loop5): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 67.544474][ T587] F2FS-fs (loop5): access invalid blkaddr:2147563524 [ 67.551304][ T587] CPU: 1 PID: 587 Comm: syz.5.27 Tainted: G B syzkaller #0 [ 67.560003][ T587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.570159][ T587] Call Trace: [ 67.573446][ T587] [ 67.576483][ T587] __dump_stack+0x19/0x1c [ 67.580924][ T587] dump_stack_lvl+0xa3/0xec [ 67.585545][ T587] ? __cfi_dump_stack_lvl+0x8/0x8 [ 67.590659][ T587] ? _raw_write_lock+0x8e/0xe0 [ 67.595514][ T587] ? __cfi__raw_write_lock+0x10/0x10 [ 67.600820][ T587] dump_stack+0x10/0x1c [ 67.604995][ T587] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 67.610982][ T587] f2fs_is_valid_blkaddr+0x9/0x10 [ 67.616002][ T587] sanity_check_extent_cache+0x1ab/0x450 [ 67.621823][ T587] f2fs_iget+0x2fdb/0x48b0 [ 67.626345][ T587] f2fs_lookup+0x1f2/0x800 [ 67.630760][ T587] ? __cfi_f2fs_lookup+0x10/0x10 [ 67.635710][ T587] ? __cfi_d_alloc_parallel+0x10/0x10 [ 67.641266][ T587] ? __cfi_f2fs_lookup+0x10/0x10 [ 67.646381][ T587] path_openat+0xe8f/0x2aa0 [ 67.650908][ T587] ? do_filp_open+0x360/0x360 [ 67.655679][ T587] do_filp_open+0x1b0/0x360 [ 67.660184][ T587] ? __cfi_do_filp_open+0x10/0x10 [ 67.665301][ T587] ? alloc_fd+0x40c/0x4c0 [ 67.669901][ T587] do_sys_openat2+0x119/0x6b0 [ 67.674842][ T587] ? do_sys_open+0x80/0x80 [ 67.679256][ T587] ? up_read+0x56/0x1d0 [ 67.683409][ T587] __x64_sys_openat+0xf1/0x120 [ 67.686477][ T580] loop6: detected capacity change from 0 to 131072 [ 67.688166][ T587] x64_sys_call+0x783/0x9a0 [ 67.699234][ T587] do_syscall_64+0x4c/0xa0 [ 67.703657][ T587] ? clear_bhb_loop+0x30/0x80 [ 67.708425][ T587] ? clear_bhb_loop+0x30/0x80 [ 67.713206][ T587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.719368][ T587] RIP: 0033:0x7feafa18e929 [ 67.723796][ T587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.724174][ T580] F2FS-fs (loop6): invalid crc value [ 67.743500][ T587] RSP: 002b:00007feafb0cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 67.743513][ T587] RAX: ffffffffffffffda RBX: 00007feafa3b6080 RCX: 00007feafa18e929 [ 67.743518][ T587] RDX: 0000000000101000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 67.743522][ T587] RBP: 00007feafa210b39 R08: 0000000000000000 R09: 0000000000000000 [ 67.743527][ T587] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 67.743530][ T587] R13: 0000000000000001 R14: 00007feafa3b6080 R15: 00007ffe1972f1a8 [ 67.743537][ T587] [ 67.813162][ T582] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 67.816060][ T578] loop0: detected capacity change from 0 to 131072 [ 67.852988][ T582] F2FS-fs (loop3): access invalid blkaddr:2147563524 [ 67.854192][ T587] F2FS-fs (loop5): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 67.864575][ T582] CPU: 1 PID: 582 Comm: syz.3.30 Tainted: G B syzkaller #0 [ 67.874546][ T578] F2FS-fs (loop0): invalid crc value [ 67.881419][ T582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.881426][ T582] Call Trace: [ 67.900147][ T582] [ 67.903092][ T582] __dump_stack+0x19/0x1c [ 67.907431][ T582] dump_stack_lvl+0xa3/0xec [ 67.911926][ T582] ? __cfi_dump_stack_lvl+0x8/0x8 [ 67.917031][ T582] ? _raw_spin_lock+0x8e/0x110 [ 67.921788][ T582] ? __cfi__raw_spin_lock+0x10/0x10 [ 67.927242][ T582] ? f2fs_init_read_extent_tree+0x423/0x980 [ 67.933127][ T582] dump_stack+0x10/0x1c [ 67.937362][ T582] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 67.942900][ T582] f2fs_is_valid_blkaddr+0x9/0x10 [ 67.947912][ T582] sanity_check_extent_cache+0x1ab/0x450 [ 67.953543][ T582] f2fs_iget+0x2fdb/0x48b0 [ 67.958226][ T582] f2fs_lookup+0x1f2/0x800 [ 67.962653][ T582] ? __cfi_f2fs_lookup+0x10/0x10 [ 67.967780][ T582] ? __cfi_d_alloc_parallel+0x10/0x10 [ 67.973246][ T582] ? downgrade_write+0x350/0x350 [ 67.978268][ T582] ? inode_permission+0x83/0x360 [ 67.983203][ T582] ? preempt_schedule+0xa7/0xb0 [ 67.988307][ T582] __lookup_slow+0x24e/0x330 [ 67.992902][ T582] ? lookup_one_len+0x260/0x260 [ 67.997755][ T582] ? down_read+0xa0/0xf0 [ 68.002003][ T582] lookup_slow+0x52/0x70 [ 68.006253][ T582] walk_component+0x261/0x370 [ 68.010934][ T582] path_lookupat+0x85/0x320 [ 68.015449][ T582] filename_lookup+0x1bc/0x420 [ 68.020301][ T582] ? __cfi_filename_lookup+0x10/0x10 [ 68.025598][ T582] ? strncpy_from_user+0x74/0x1c0 [ 68.030629][ T582] ? getname_flags+0xe2/0x440 [ 68.035312][ T582] user_path_at_empty+0x3b/0x170 [ 68.040255][ T582] do_sys_truncate+0x94/0x140 [ 68.045027][ T582] ? __cfi_do_sys_truncate+0x10/0x10 [ 68.050330][ T582] ? fpregs_restore_userregs+0xe1/0x1d0 [ 68.055891][ T582] __x64_sys_truncate+0x56/0x60 [ 68.060764][ T582] x64_sys_call+0x679/0x9a0 [ 68.065280][ T582] do_syscall_64+0x4c/0xa0 [ 68.069793][ T582] ? clear_bhb_loop+0x30/0x80 [ 68.074747][ T582] ? clear_bhb_loop+0x30/0x80 [ 68.079541][ T582] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 68.085530][ T582] RIP: 0033:0x7f844318e929 [ 68.090046][ T582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.109670][ T582] RSP: 002b:00007f8442fff038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 68.118098][ T582] RAX: ffffffffffffffda RBX: 00007f84433b5fa0 RCX: 00007f844318e929 [ 68.126098][ T582] RDX: 0000000000000000 RSI: 0000000000001c9e RDI: 0000200000000280 [ 68.134265][ T582] RBP: 00007f8443210b39 R08: 0000000000000000 R09: 0000000000000000 [ 68.134748][ T592] loop2: detected capacity change from 0 to 131072 [ 68.142470][ T582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.142478][ T582] R13: 0000000000000000 R14: 00007f84433b5fa0 R15: 00007ffc00ade6b8 [ 68.142486][ T582] [ 68.143958][ T582] F2FS-fs (loop3): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 68.154756][ T580] F2FS-fs (loop6): Found nat_bits in checkpoint [ 68.158609][ T592] F2FS-fs (loop2): invalid crc value [ 68.165474][ T597] F2FS-fs (loop3): access invalid blkaddr:2147563524 [ 68.194287][ T580] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 68.210806][ T597] CPU: 1 PID: 597 Comm: syz.3.30 Tainted: G B syzkaller #0 [ 68.219586][ T597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.229924][ T597] Call Trace: [ 68.233314][ T597] [ 68.236255][ T597] __dump_stack+0x19/0x1c [ 68.240681][ T597] dump_stack_lvl+0xa3/0xec [ 68.245190][ T597] ? __cfi_dump_stack_lvl+0x8/0x8 [ 68.250230][ T597] ? _raw_spin_lock+0x8e/0x110 [ 68.254997][ T597] ? __cfi__raw_spin_lock+0x10/0x10 [ 68.260372][ T597] ? f2fs_init_read_extent_tree+0x423/0x980 [ 68.266266][ T597] dump_stack+0x10/0x1c [ 68.270511][ T597] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 68.276236][ T597] f2fs_is_valid_blkaddr+0x9/0x10 [ 68.281272][ T597] sanity_check_extent_cache+0x1ab/0x450 [ 68.286993][ T597] f2fs_iget+0x2fdb/0x48b0 [ 68.291413][ T597] f2fs_lookup+0x1f2/0x800 [ 68.293285][ T580] F2FS-fs (loop6): access invalid blkaddr:2147563524 [ 68.295823][ T597] ? __cfi_f2fs_lookup+0x10/0x10 [ 68.307592][ T597] ? __cfi_d_alloc_parallel+0x10/0x10 [ 68.312954][ T597] ? __cfi_f2fs_lookup+0x10/0x10 [ 68.317882][ T597] path_openat+0xe8f/0x2aa0 [ 68.322471][ T597] ? do_filp_open+0x360/0x360 [ 68.327144][ T597] do_filp_open+0x1b0/0x360 [ 68.331722][ T597] ? __cfi_do_filp_open+0x10/0x10 [ 68.336747][ T597] ? alloc_fd+0x40c/0x4c0 [ 68.341121][ T597] do_sys_openat2+0x119/0x6b0 [ 68.345880][ T597] ? do_sys_open+0x80/0x80 [ 68.350285][ T597] ? up_read+0x56/0x1d0 [ 68.354423][ T597] __x64_sys_openat+0xf1/0x120 [ 68.359168][ T597] x64_sys_call+0x783/0x9a0 [ 68.363654][ T597] do_syscall_64+0x4c/0xa0 [ 68.368055][ T597] ? clear_bhb_loop+0x30/0x80 [ 68.372714][ T597] ? clear_bhb_loop+0x30/0x80 [ 68.377377][ T597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 68.383249][ T597] RIP: 0033:0x7f844318e929 [ 68.387650][ T597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.407331][ T597] RSP: 002b:00007f8442fde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 68.415740][ T597] RAX: ffffffffffffffda RBX: 00007f84433b6080 RCX: 00007f844318e929 [ 68.423714][ T597] RDX: 0000000000101000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 68.431693][ T597] RBP: 00007f8443210b39 R08: 0000000000000000 R09: 0000000000000000 [ 68.439666][ T597] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 68.447715][ T597] R13: 0000000000000001 R14: 00007f84433b6080 R15: 00007ffc00ade6b8 [ 68.455682][ T597] [ 68.458868][ T580] CPU: 0 PID: 580 Comm: syz.6.29 Tainted: G B syzkaller #0 [ 68.466453][ T597] F2FS-fs (loop3): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 68.467550][ T580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.490883][ T580] Call Trace: [ 68.494174][ T580] [ 68.497119][ T580] __dump_stack+0x19/0x1c [ 68.501545][ T580] dump_stack_lvl+0xa3/0xec [ 68.506051][ T580] ? __cfi_dump_stack_lvl+0x8/0x8 [ 68.511087][ T580] ? _raw_spin_lock+0x8e/0x110 [ 68.515855][ T580] ? __cfi__raw_spin_lock+0x10/0x10 [ 68.521135][ T580] ? f2fs_init_read_extent_tree+0x423/0x980 [ 68.527105][ T580] dump_stack+0x10/0x1c [ 68.531256][ T580] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 68.536906][ T580] f2fs_is_valid_blkaddr+0x9/0x10 [ 68.541915][ T580] sanity_check_extent_cache+0x1ab/0x450 [ 68.547525][ T580] f2fs_iget+0x2fdb/0x48b0 [ 68.551926][ T580] f2fs_lookup+0x1f2/0x800 [ 68.556325][ T580] ? __cfi_f2fs_lookup+0x10/0x10 [ 68.561349][ T580] ? __cfi_d_alloc_parallel+0x10/0x10 [ 68.566708][ T580] ? downgrade_write+0x350/0x350 [ 68.571627][ T580] ? inode_permission+0x83/0x360 [ 68.576729][ T580] ? preempt_schedule+0xa7/0xb0 [ 68.581564][ T580] __lookup_slow+0x24e/0x330 [ 68.586315][ T580] ? lookup_one_len+0x260/0x260 [ 68.591146][ T580] ? down_read+0xa0/0xf0 [ 68.595378][ T580] lookup_slow+0x52/0x70 [ 68.599695][ T580] walk_component+0x261/0x370 [ 68.604362][ T580] path_lookupat+0x85/0x320 [ 68.608862][ T580] filename_lookup+0x1bc/0x420 [ 68.613694][ T580] ? __cfi_filename_lookup+0x10/0x10 [ 68.619046][ T580] ? strncpy_from_user+0x74/0x1c0 [ 68.624151][ T580] ? getname_flags+0xe2/0x440 [ 68.628810][ T580] user_path_at_empty+0x3b/0x170 [ 68.633729][ T580] do_sys_truncate+0x94/0x140 [ 68.638385][ T580] ? __cfi_do_sys_truncate+0x10/0x10 [ 68.643748][ T580] ? fpregs_restore_userregs+0xe1/0x1d0 [ 68.649480][ T580] __x64_sys_truncate+0x56/0x60 [ 68.654404][ T580] x64_sys_call+0x679/0x9a0 [ 68.658896][ T580] do_syscall_64+0x4c/0xa0 [ 68.663294][ T580] ? clear_bhb_loop+0x30/0x80 [ 68.668037][ T580] ? clear_bhb_loop+0x30/0x80 [ 68.672788][ T580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 68.678922][ T580] RIP: 0033:0x7fae8e58e929 [ 68.683517][ T580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.703509][ T580] RSP: 002b:00007fae8e3ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 68.712011][ T580] RAX: ffffffffffffffda RBX: 00007fae8e7b5fa0 RCX: 00007fae8e58e929 [ 68.719971][ T580] RDX: 0000000000000000 RSI: 0000000000001c9e RDI: 0000200000000280 [ 68.728020][ T580] RBP: 00007fae8e610b39 R08: 0000000000000000 R09: 0000000000000000 [ 68.735983][ T580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.744202][ T580] R13: 0000000000000000 R14: 00007fae8e7b5fa0 R15: 00007ffe7a311d58 [ 68.752251][ T580] [ 68.756747][ T578] F2FS-fs (loop0): Found nat_bits in checkpoint [ 68.763979][ T592] F2FS-fs (loop2): Found nat_bits in checkpoint [ 68.853217][ T592] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 68.903145][ T592] F2FS-fs (loop2): access invalid blkaddr:2147563524 [ 68.909857][ T592] CPU: 1 PID: 592 Comm: syz.2.31 Tainted: G B syzkaller #0 [ 68.918786][ T592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.929013][ T592] Call Trace: [ 68.932288][ T592] [ 68.935215][ T592] __dump_stack+0x19/0x1c [ 68.938506][ T578] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 68.939546][ T592] dump_stack_lvl+0xa3/0xec [ 68.951745][ T592] ? __cfi_dump_stack_lvl+0x8/0x8 [ 68.953389][ T578] F2FS-fs (loop0): access invalid blkaddr:2147563524 [ 68.956766][ T592] ? _raw_spin_lock+0x8e/0x110 [ 68.968205][ T592] ? __cfi__raw_spin_lock+0x10/0x10 [ 68.973510][ T592] ? f2fs_init_read_extent_tree+0x423/0x980 [ 68.979652][ T592] dump_stack+0x10/0x1c [ 68.983893][ T592] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 68.989581][ T592] f2fs_is_valid_blkaddr+0x9/0x10 [ 68.994677][ T592] sanity_check_extent_cache+0x1ab/0x450 [ 69.000298][ T592] f2fs_iget+0x2fdb/0x48b0 [ 69.004815][ T592] f2fs_lookup+0x1f2/0x800 [ 69.009221][ T592] ? __cfi_f2fs_lookup+0x10/0x10 [ 69.014468][ T592] ? __cfi_d_alloc_parallel+0x10/0x10 [ 69.019835][ T592] ? downgrade_write+0x350/0x350 [ 69.024762][ T592] ? inode_permission+0x83/0x360 [ 69.029701][ T592] __lookup_slow+0x24e/0x330 [ 69.034291][ T592] ? lookup_one_len+0x260/0x260 [ 69.039143][ T592] ? down_read+0xa0/0xf0 [ 69.043386][ T592] lookup_slow+0x52/0x70 [ 69.047632][ T592] walk_component+0x261/0x370 [ 69.052309][ T592] path_lookupat+0x85/0x320 [ 69.056813][ T592] filename_lookup+0x1bc/0x420 [ 69.061567][ T592] ? __cfi_filename_lookup+0x10/0x10 [ 69.066842][ T592] ? strncpy_from_user+0x74/0x1c0 [ 69.071861][ T592] ? getname_flags+0xe2/0x440 [ 69.076791][ T592] user_path_at_empty+0x3b/0x170 [ 69.081911][ T592] do_sys_truncate+0x94/0x140 [ 69.086582][ T592] ? __cfi_do_sys_truncate+0x10/0x10 [ 69.091860][ T592] ? fpregs_restore_userregs+0xe1/0x1d0 [ 69.097429][ T592] __x64_sys_truncate+0x56/0x60 [ 69.102275][ T592] x64_sys_call+0x679/0x9a0 [ 69.106768][ T592] do_syscall_64+0x4c/0xa0 [ 69.111273][ T592] ? clear_bhb_loop+0x30/0x80 [ 69.115946][ T592] ? clear_bhb_loop+0x30/0x80 [ 69.120613][ T592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.126584][ T592] RIP: 0033:0x7f08c498e929 [ 69.130999][ T592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.150869][ T592] RSP: 002b:00007f08c5789038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 69.159641][ T592] RAX: ffffffffffffffda RBX: 00007f08c4bb5fa0 RCX: 00007f08c498e929 [ 69.167716][ T592] RDX: 0000000000000000 RSI: 0000000000001c9e RDI: 0000200000000280 [ 69.175769][ T592] RBP: 00007f08c4a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 69.184005][ T592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.192066][ T592] R13: 0000000000000000 R14: 00007f08c4bb5fa0 R15: 00007ffc0014dc38 [ 69.200046][ T592] [ 69.204232][ T578] CPU: 0 PID: 578 Comm: syz.0.28 Tainted: G B syzkaller #0 [ 69.212925][ T578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.223075][ T578] Call Trace: [ 69.226358][ T578] [ 69.229382][ T578] __dump_stack+0x19/0x1c [ 69.233711][ T578] dump_stack_lvl+0xa3/0xec [ 69.238296][ T578] ? __cfi_dump_stack_lvl+0x8/0x8 [ 69.243321][ T578] ? _raw_spin_lock+0x8e/0x110 [ 69.248087][ T578] ? __cfi__raw_spin_lock+0x10/0x10 [ 69.253278][ T578] ? f2fs_init_read_extent_tree+0x423/0x980 [ 69.259165][ T578] dump_stack+0x10/0x1c [ 69.263322][ T578] __f2fs_is_valid_blkaddr+0xb28/0x12e0 [ 69.268870][ T578] f2fs_is_valid_blkaddr+0x9/0x10 [ 69.273976][ T578] sanity_check_extent_cache+0x1ab/0x450 [ 69.279686][ T578] f2fs_iget+0x2fdb/0x48b0 [ 69.284096][ T578] f2fs_lookup+0x1f2/0x800 [ 69.288505][ T578] ? __cfi_f2fs_lookup+0x10/0x10 [ 69.293431][ T578] ? __cfi_d_alloc_parallel+0x10/0x10 [ 69.298973][ T578] ? downgrade_write+0x350/0x350 [ 69.304075][ T578] ? inode_permission+0x83/0x360 [ 69.309169][ T578] ? preempt_schedule+0xa7/0xb0 [ 69.314142][ T578] __lookup_slow+0x24e/0x330 [ 69.318797][ T578] ? lookup_one_len+0x260/0x260 [ 69.324323][ T578] ? down_read+0xa0/0xf0 [ 69.328637][ T578] lookup_slow+0x52/0x70 [ 69.332952][ T578] walk_component+0x261/0x370 [ 69.337612][ T578] path_lookupat+0x85/0x320 [ 69.342094][ T578] filename_lookup+0x1bc/0x420 [ 69.346840][ T578] ? __cfi_filename_lookup+0x10/0x10 [ 69.352191][ T578] ? strncpy_from_user+0x74/0x1c0 [ 69.357203][ T578] ? getname_flags+0xe2/0x440 [ 69.361859][ T578] user_path_at_empty+0x3b/0x170 [ 69.366783][ T578] do_sys_truncate+0x94/0x140 [ 69.371439][ T578] ? __cfi_do_sys_truncate+0x10/0x10 [ 69.376703][ T578] ? fpregs_restore_userregs+0xe1/0x1d0 [ 69.382270][ T578] __x64_sys_truncate+0x56/0x60 [ 69.387102][ T578] x64_sys_call+0x679/0x9a0 [ 69.391587][ T578] do_syscall_64+0x4c/0xa0 [ 69.395985][ T578] ? clear_bhb_loop+0x30/0x80 [ 69.400655][ T578] ? clear_bhb_loop+0x30/0x80 [ 69.405314][ T578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.411185][ T578] RIP: 0033:0x7fdf01d8e929 [ 69.415582][ T578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.435257][ T578] RSP: 002b:00007fdf02c79038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 69.443740][ T578] RAX: ffffffffffffffda RBX: 00007fdf01fb5fa0 RCX: 00007fdf01d8e929 [ 69.451697][ T578] RDX: 0000000000000000 RSI: 0000000000001c9e RDI: 0000200000000280 [ 69.459647][ T578] RBP: 00007fdf01e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 69.467599][ T578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.475733][ T578] R13: 0000000000000000 R14: 00007fdf01fb5fa0 R15: 00007ffe7e49dde8 [ 69.483687][ T578] [ 69.487168][ T592] F2FS-fs (loop2): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix