------------[ cut here ]------------
kernel BUG at fs/f2fs/node.c:1235!
ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 25738 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
RIP: 0010:f2fs_new_node_page+0x1942/0x1f40 fs/f2fs/node.c:1235
Code: 8f f8 ff ff 4c 89 ef e8 4c 1f 7d fe e9 77 f7 ff ff e8 42 1f 7d fe e9 48 f3 ff ff e8 38 1f 7d fe e9 21 f7 ff ff e8 ce 42 47 fe <0f> 0b e8 c7 42 47 fe 4d 8d 75 ff e9 e8 f0 ff ff e8 b9 42 47 fe 48
RSP: 0018:ffff8880ac2df390 EFLAGS: 00010246
RAX: 0000000000040000 RBX: ffff888095dd8200 RCX: ffffc90008217000
RDX: 0000000000040000 RSI: ffffffff831b42a2 RDI: 0000000000000005
RBP: ffffffff8b271190 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000005 R11: 000000001b0106f8 R12: ffffea0002a59980
R13: 0000000000001002 R14: ffff8880ac2df3f0 R15: 0000000000000000
FS:  00007f865e7ee700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fff5b6dbc20 CR3: 00000000973b3000 CR4: 00000000003406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 f2fs_new_inode_page+0xc2/0x110 fs/f2fs/node.c:1209
 f2fs_init_inode_metadata+0xcd/0x1430 fs/f2fs/dir.c:366
 f2fs_add_regular_entry+0x925/0x1560 fs/f2fs/dir.c:558
 f2fs_add_dentry+0x147/0x2f0 fs/f2fs/dir.c:604
 f2fs_do_add_link+0x307/0x4f0 fs/f2fs/dir.c:644
 f2fs_add_link fs/f2fs/f2fs.h:2862 [inline]
 f2fs_create+0x336/0x930 fs/f2fs/namei.c:295
 lookup_open+0x893/0x1a20 fs/namei.c:3235
 do_last fs/namei.c:3327 [inline]
 path_openat+0x1094/0x2df0 fs/namei.c:3537
 do_filp_open+0x18c/0x3f0 fs/namei.c:3567
 do_sys_open+0x3b3/0x520 fs/open.c:1085
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f866029c639
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f865e7ee168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f86603bd050 RCX: 00007f866029c639
RDX: 000000000000275a RSI: 0000000020000040 RDI: ffffffffffffff9c
RBP: 00007f86602f7a41 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc23a319df R14: 00007f865e7ee300 R15: 0000000000022000
Modules linked in:
ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1454310748
ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
ubi0: background thread "ubi_bgt0d" started, PID 25752
ubi: mtd0 is already attached to ubi0
ubi0: detaching mtd0
ubi0: mtd0 is detached
---[ end trace 5ed06bb2206e1389 ]---
RIP: 0010:f2fs_new_node_page+0x1942/0x1f40 fs/f2fs/node.c:1235
Code: 8f f8 ff ff 4c 89 ef e8 4c 1f 7d fe e9 77 f7 ff ff e8 42 1f 7d fe e9 48 f3 ff ff e8 38 1f 7d fe e9 21 f7 ff ff e8 ce 42 47 fe <0f> 0b e8 c7 42 47 fe 4d 8d 75 ff e9 e8 f0 ff ff e8 b9 42 47 fe 48
RSP: 0018:ffff8880ac2df390 EFLAGS: 00010246
RAX: 0000000000040000 RBX: ffff888095dd8200 RCX: ffffc90008217000
ubi0: attaching mtd0
RDX: 0000000000040000 RSI: ffffffff831b42a2 RDI: 0000000000000005
ubi0: scanning is finished
RBP: ffffffff8b271190 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000005 R11: 000000001b0106f8 R12: ffffea0002a59980
R13: 0000000000001002 R14: ffff8880ac2df3f0 R15: 0000000000000000
FS:  00007f865e7ee700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffd41fe0020 CR3: 00000000973b3000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400