F2FS-fs (loop2): access invalid blkaddr:1 ------------[ cut here ]------------ WARNING: CPU: 1 PID: 20579 at fs/f2fs/checkpoint.c:189 arch_set_bit arch/x86/include/asm/bitops.h:55 [inline] WARNING: CPU: 1 PID: 20579 at fs/f2fs/checkpoint.c:189 set_bit include/asm-generic/bitops/instrumented-atomic.h:29 [inline] WARNING: CPU: 1 PID: 20579 at fs/f2fs/checkpoint.c:189 set_sbi_flag fs/f2fs/f2fs.h:1788 [inline] WARNING: CPU: 1 PID: 20579 at fs/f2fs/checkpoint.c:189 f2fs_is_valid_blkaddr+0xea2/0x1140 fs/f2fs/checkpoint.c:188 Modules linked in: CPU: 1 PID: 20579 Comm: syz-executor.2 Not tainted 5.11.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:f2fs_is_valid_blkaddr+0xea2/0x1140 fs/f2fs/checkpoint.c:189 Code: 89 e2 48 89 df 48 c7 c6 e0 cb 92 89 e8 b3 2d 65 05 48 8d bb b8 00 00 00 be 08 00 00 00 e8 b6 cc 55 fe f0 80 8b b8 00 00 00 04 <0f> 0b e9 12 f7 ff ff e8 42 0e 13 fe 48 8d 7b 10 48 b8 00 00 00 00 RSP: 0018:ffffc90017257700 EFLAGS: 00010206 RAX: 0000000000000001 RBX: ffff888076a94000 RCX: ffffffff835fbb6a RDX: ffffed100ed52818 RSI: 0000000000000008 RDI: ffff888076a940b8 RBP: 0000000000000007 R08: 0000000000000001 R09: ffff888076a940bf R10: ffffed100ed52817 R11: 0000000000000000 R12: 0000000000000001 R13: 0000000000001000 R14: 0000000000004000 R15: 0000000000000200 FS: 00007fbd574d4700(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000074ab98 CR3: 0000000029dde000 CR4: 0000000000350ee0 Call Trace: f2fs_get_node_info+0x4b4/0xbc0 fs/f2fs/node.c:575 read_node_page+0x4a6/0x9b0 fs/f2fs/node.c:1298 __get_node_page.part.0+0xa2/0xac0 fs/f2fs/node.c:1358 __get_node_page fs/f2fs/node.c:35 [inline] f2fs_get_node_page+0x109/0x180 fs/f2fs/node.c:1403 do_read_inode fs/f2fs/inode.c:346 [inline] f2fs_iget+0x233/0x4e10 fs/f2fs/inode.c:497 f2fs_fill_super+0x40af/0x7310 fs/f2fs/super.c:3742 mount_bdev+0x34d/0x410 fs/super.c:1366 legacy_get_tree+0x105/0x220 fs/fs_context.c:592 vfs_get_tree+0x89/0x2f0 fs/super.c:1496 do_new_mount fs/namespace.c:2878 [inline] path_mount+0x13ad/0x20c0 fs/namespace.c:3208 do_mount fs/namespace.c:3221 [inline] __do_sys_mount fs/namespace.c:3429 [inline] __se_sys_mount fs/namespace.c:3406 [inline] __x64_sys_mount+0x27f/0x300 fs/namespace.c:3406 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x460c6a Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 RSP: 002b:00007fbd574d3a78 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fbd574d3b10 RCX: 0000000000460c6a RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fbd574d3ad0 RBP: 00007fbd574d3ad0 R08: 00007fbd574d3b10 R09: 0000000020000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900