F2FS-fs (loop5): access invalid blkaddr:4294901760 ------------[ cut here ]------------ WARNING: CPU: 1 PID: 3634 at fs/f2fs/checkpoint.c:199 arch_set_bit arch/x86/include/asm/bitops.h:55 [inline] WARNING: CPU: 1 PID: 3634 at fs/f2fs/checkpoint.c:199 set_bit include/asm-generic/bitops/instrumented-atomic.h:29 [inline] WARNING: CPU: 1 PID: 3634 at fs/f2fs/checkpoint.c:199 set_sbi_flag fs/f2fs/f2fs.h:2047 [inline] WARNING: CPU: 1 PID: 3634 at fs/f2fs/checkpoint.c:199 f2fs_is_valid_blkaddr+0xea2/0x1140 fs/f2fs/checkpoint.c:198 Modules linked in: CPU: 1 PID: 3634 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-11267-gb00ed48bb0a7 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:f2fs_is_valid_blkaddr+0xea2/0x1140 fs/f2fs/checkpoint.c:199 Code: 89 e2 48 89 df 48 c7 c6 80 a3 1b 8a e8 20 84 a7 05 48 8d bb b8 00 00 00 be 08 00 00 00 e8 a6 21 2e fe f0 80 8b b8 00 00 00 04 <0f> 0b e9 12 f7 ff ff e8 42 01 e2 fd 48 8d 7b 10 48 b8 00 00 00 00 RSP: 0018:ffffc900031470b0 EFLAGS: 00010202 RAX: 0000000000000001 RBX: ffff888074150000 RCX: ffffffff8397a16a RDX: ffffed100e82a018 RSI: 0000000000000008 RDI: ffff8880741500b8 RBP: 0000000000000007 R08: 0000000000000001 R09: ffff8880741500bf R10: ffffed100e82a017 R11: 0000000000000001 R12: 00000000ffff0000 R13: ffff888025ff9800 R14: 0000000000004000 R15: 0000000000000200 FS: 00005555561ab400(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c00dfa1000 CR3: 0000000043a12000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: f2fs_do_write_data_page+0x55d/0x1c50 fs/f2fs/data.c:2599 f2fs_write_single_data_page+0x11eb/0x18a0 fs/f2fs/data.c:2757 f2fs_write_cache_pages+0xae2/0x2100 fs/f2fs/data.c:3030 __f2fs_write_data_pages fs/f2fs/data.c:3180 [inline] f2fs_write_data_pages+0x4d5/0x1260 fs/f2fs/data.c:3207 do_writepages+0x1ab/0x690 mm/page-writeback.c:2443 filemap_fdatawrite_wbc mm/filemap.c:388 [inline] filemap_fdatawrite_wbc+0x143/0x1b0 mm/filemap.c:378 __filemap_fdatawrite_range+0xb4/0xf0 mm/filemap.c:421 f2fs_sync_dirty_inodes+0x276/0xdb0 fs/f2fs/checkpoint.c:1103 block_operations+0x28f/0xc40 fs/f2fs/checkpoint.c:1234 f2fs_write_checkpoint+0x607/0x4c70 fs/f2fs/checkpoint.c:1643 kill_f2fs_super+0x32c/0x3c0 fs/f2fs/super.c:4510 deactivate_locked_super+0x94/0x160 fs/super.c:332 deactivate_super+0xad/0xd0 fs/super.c:363 cleanup_mnt+0x3a2/0x540 fs/namespace.c:1186 task_work_run+0xdd/0x1a0 kernel/task_work.c:177 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] exit_to_user_mode_loop kernel/entry/common.c:169 [inline] exit_to_user_mode_prepare+0x23c/0x250 kernel/entry/common.c:201 __syscall_exit_to_user_mode_work kernel/entry/common.c:283 [inline] syscall_exit_to_user_mode+0x19/0x50 kernel/entry/common.c:294 do_syscall_64+0x42/0xb0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x46/0xb0 RIP: 0033:0x7f2ecb88a577 Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffdc23c56d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2ecb88a577 RDX: 00007ffdc23c57aa RSI: 000000000000000a RDI: 00007ffdc23c57a0 RBP: 00007ffdc23c57a0 R08: 00000000ffffffff R09: 00007ffdc23c5570 R10: 00005555561ac8b3 R11: 0000000000000246 R12: 00007f2ecb8e21f8 R13: 00007ffdc23c6860 R14: 00005555561ac810 R15: 00007ffdc23c68a0