------------[ cut here ]------------
kernel BUG at fs/f2fs/checkpoint.c:91!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
PM: Marking nosave pages: [mem 0x00000000-0x00000fff]
Modules linked in:
CPU: 0 PID: 13185 Comm: syz-executor.0 Not tainted 4.14.291-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
task: ffff8880abb50600 task.stack: ffff88805be20000
PM: Marking nosave pages: [mem 0x0009f000-0x000fffff]
RIP: 0010:__get_meta_page+0x860/0x940 fs/f2fs/checkpoint.c:91
RSP: 0018:ffff88805be277f8 EFLAGS: 00010212
RAX: 0000000000040000 RBX: dffffc0000000000 RCX: ffffc90005c0a000
RDX: 0000000000026695 RSI: ffffffff82c6af00 RDI: ffff8880b328e340
PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
RBP: 00000000000003ff R08: ffffffff8b9c4b48 R09: 0000000000000001
R10: 0000000000000000 R11: ffff8880abb50600 R12: ffffea0002577340
R13: ffff88805d3dca00 R14: ffff8880abb38600 R15: ffffea0002577360
FS:  00007f38c04e4700(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8fb0ad3130 CR3: 00000000a1e5a000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 get_meta_page fs/f2fs/checkpoint.c:114 [inline]
 get_checkpoint_version+0x65/0xa10 fs/f2fs/checkpoint.c:725
 validate_checkpoint+0x184/0x970 fs/f2fs/checkpoint.c:770
PM: Basic memory bitmaps created
PM: Basic memory bitmaps freed
 get_valid_checkpoint+0x1df/0x13e0 fs/f2fs/checkpoint.c:808
 f2fs_fill_super+0x23d9/0x56a0 fs/f2fs/super.c:2548
 mount_bdev+0x2b3/0x360 fs/super.c:1134
 mount_fs+0x92/0x2a0 fs/super.c:1237
 vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046
 vfs_kern_mount fs/namespace.c:1036 [inline]
 do_new_mount fs/namespace.c:2572 [inline]
 do_mount+0xe65/0x2a30 fs/namespace.c:2905
 SYSC_mount fs/namespace.c:3121 [inline]
 SyS_mount+0xa8/0x120 fs/namespace.c:3098
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f38c1b707aa
RSP: 002b:00007f38c04e3f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f38c1b707aa
RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f38c04e3fe0
RBP: 00007f38c04e4020 R08: 00007f38c04e4020 R09: 0000000020000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000
R13: 0000000020000100 R14: 00007f38c04e3fe0 R15: 0000000020014900
Code: f6 48 c1 e7 29 48 c1 e0 27 ba 00 10 00 00 4c 01 e7 48 c1 ff 06 48 c1 e7 0c 48 01 c7 e8 9a 41 b8 fe 31 f6 4c 89 f7 e8 50 f6 ff ff <0f> 0b 48 89 df e8 86 4e b8 fe e9 32 fa ff ff e8 7c 4e b8 fe e9 
RIP: __get_meta_page+0x860/0x940 fs/f2fs/checkpoint.c:91 RSP: ffff88805be277f8
---[ end trace be05dee673cf4dda ]---