F2FS-fs (loop1): access invalid blkaddr:3646126848
------------[ cut here ]------------
WARNING: CPU: 0 PID: 2677 at fs/f2fs/checkpoint.c:191 __lse_atomic64_or arch/arm64/include/asm/atomic_lse.h:177 [inline]
WARNING: CPU: 0 PID: 2677 at fs/f2fs/checkpoint.c:191 arch_atomic64_or arch/arm64/include/asm/atomic.h:65 [inline]
WARNING: CPU: 0 PID: 2677 at fs/f2fs/checkpoint.c:191 atomic64_or include/asm-generic/atomic-instrumented.h:1328 [inline]
WARNING: CPU: 0 PID: 2677 at fs/f2fs/checkpoint.c:191 atomic_long_or include/asm-generic/atomic-long.h:329 [inline]
WARNING: CPU: 0 PID: 2677 at fs/f2fs/checkpoint.c:191 set_bit include/asm-generic/bitops/atomic.h:17 [inline]
WARNING: CPU: 0 PID: 2677 at fs/f2fs/checkpoint.c:191 set_sbi_flag fs/f2fs/f2fs.h:1840 [inline]
WARNING: CPU: 0 PID: 2677 at fs/f2fs/checkpoint.c:191 f2fs_is_valid_blkaddr+0x2e4/0x344 fs/f2fs/checkpoint.c:190
Modules linked in:
CPU: 0 PID: 2677 Comm: syz-executor.1 Not tainted 5.12.0-rc2-syzkaller #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO BTYPE=--)
pc : f2fs_is_valid_blkaddr+0x2e4/0x344 fs/f2fs/checkpoint.c:191
lr : f2fs_is_valid_blkaddr+0x2d0/0x344 fs/f2fs/checkpoint.c:188
sp : ffff800014503920
x29: ffff800014503920 x28: ffff800013d5a468 
x27: 0000000000000000 x26: 0000000000000001 
x25: f0ff00001e9a9800 x24: f0ff00001e9a9840 
x23: f4ff00001ead9c00 x22: fdff00001caa8828 
x21: f3ff00001a5e0000 x20: ffff8000145039e0 
x19: f3ff00001a5e0000 x18: 00000000fffffffb 
x17: 0000000000000000 x16: 0000000000000000 
x15: 0000000000000020 x14: ffffffffffffffff 
x13: 0000000000000c4e x12: ffff800014503590 
x11: ffff800013a7b570 x10: 00000000ffffe000 
x9 : ffff800013a7b570 x8 : ffff8000139cb570 
x7 : ffff800013a7b570 x6 : 0000000000000000 
x5 : 0000000000000000 x4 : ffff00007fbc1948 
x3 : 0000000000000000 x2 : 0000000000000000 
x1 : f3ff00001a5e0048 x0 : 0000000000000004 
Call trace:
 __lse_atomic64_or arch/arm64/include/asm/atomic_lse.h:177 [inline]
 arch_atomic64_or arch/arm64/include/asm/atomic.h:65 [inline]
 atomic64_or include/asm-generic/atomic-instrumented.h:1328 [inline]
 atomic_long_or include/asm-generic/atomic-long.h:329 [inline]
 set_bit include/asm-generic/bitops/atomic.h:17 [inline]
 set_sbi_flag fs/f2fs/f2fs.h:1840 [inline]
 f2fs_is_valid_blkaddr+0x2e4/0x344 fs/f2fs/checkpoint.c:190
 f2fs_get_node_info+0x150/0x380 fs/f2fs/node.c:574
 read_node_page+0x104/0x1f0 fs/f2fs/node.c:1297
 __get_node_page fs/f2fs/node.c:1357 [inline]
 __get_node_page+0x9c/0x4c0 fs/f2fs/node.c:1342
 f2fs_get_node_page+0x18/0x24 fs/f2fs/node.c:1402
 do_read_inode fs/f2fs/inode.c:346 [inline]
 f2fs_iget+0x74/0x10b0 fs/f2fs/inode.c:497
 f2fs_fill_super+0xeb4/0x1f80 fs/f2fs/super.c:3885
 mount_bdev+0x1c0/0x1f0 fs/super.c:1367
 f2fs_mount+0x18/0x24 fs/f2fs/super.c:4105
 legacy_get_tree+0x30/0x60 fs/fs_context.c:592
 vfs_get_tree+0x28/0xf0 fs/super.c:1497
 do_new_mount fs/namespace.c:2903 [inline]
 path_mount+0x3e8/0xa84 fs/namespace.c:3233
 do_mount fs/namespace.c:3246 [inline]
 __do_sys_mount fs/namespace.c:3454 [inline]
 __se_sys_mount fs/namespace.c:3431 [inline]
 __arm64_sys_mount+0x1a8/0x2fc fs/namespace.c:3431
 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline]
 invoke_syscall arch/arm64/kernel/syscall.c:49 [inline]
 el0_svc_common.constprop.0+0x60/0x120 arch/arm64/kernel/syscall.c:129
 do_el0_svc+0x74/0x90 arch/arm64/kernel/syscall.c:168
 el0_svc+0x2c/0x54 arch/arm64/kernel/entry-common.c:416
 el0_sync_handler+0x1a4/0x1b0 arch/arm64/kernel/entry-common.c:432
 el0_sync+0x18c/0x1c0 arch/arm64/kernel/entry.S:699