------------[ cut here ]------------ kernel BUG at fs/f2fs/data.c:356! Oops: invalid opcode: 0000 [#1] SMP KASAN PTI CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: bat_events batadv_nc_worker RIP: 0010:f2fs_write_end_io+0xb52/0xb60 fs/f2fs/data.c:355 Code: e8 03 25 16 fe e9 91 f6 ff ff 89 d9 80 e1 07 38 c1 0f 8c e3 f6 ff ff 48 89 df e8 79 25 16 fe e9 d6 f6 ff ff e8 3f 6d b1 fd 90 <0f> 0b 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 RSP: 0018:ffffc90000a08d28 EFLAGS: 00010246 RAX: ffffffff840e5861 RBX: 0000000000000000 RCX: ffff88801ce98000 RDX: 0000000000000100 RSI: 0000000000000000 RDI: 000000000000000d RBP: ffff8880339ffb40 R08: ffffea00008fa307 R09: 1ffffd400011f460 R10: dffffc0000000000 R11: fffff9400011f461 R12: 0000000000000006 R13: ffffea00008fa300 R14: 000000000000000d R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff888125ced000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4b62b61d58 CR3: 00000000778ca000 CR4: 00000000003526f0 Call Trace: blk_update_request+0x5eb/0xe70 block/blk-mq.c:987 blk_mq_end_request+0x3e/0x70 block/blk-mq.c:1149 blk_complete_reqs block/blk-mq.c:1224 [inline] blk_done_softirq+0x10a/0x160 block/blk-mq.c:1229 handle_softirqs+0x283/0x870 kernel/softirq.c:579 do_softirq+0xec/0x180 kernel/softirq.c:480 __local_bh_enable_ip+0x17d/0x1c0 kernel/softirq.c:407 spin_unlock_bh include/linux/spinlock.h:396 [inline] batadv_nc_purge_paths+0x318/0x3b0 net/batman-adv/network-coding.c:471 batadv_nc_worker+0x328/0x610 net/batman-adv/network-coding.c:720 process_one_work kernel/workqueue.c:3239 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3322 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3403 kthread+0x70e/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Modules linked in: vkms_vblank_simulate: vblank timer overrun ---[ end trace 0000000000000000 ]--- RIP: 0010:f2fs_write_end_io+0xb52/0xb60 fs/f2fs/data.c:355 Code: e8 03 25 16 fe e9 91 f6 ff ff 89 d9 80 e1 07 38 c1 0f 8c e3 f6 ff ff 48 89 df e8 79 25 16 fe e9 d6 f6 ff ff e8 3f 6d b1 fd 90 <0f> 0b 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 vkms_vblank_simulate: vblank timer overrun RSP: 0018:ffffc90000a08d28 EFLAGS: 00010246 RAX: ffffffff840e5861 RBX: 0000000000000000 RCX: ffff88801ce98000 RDX: 0000000000000100 RSI: 0000000000000000 RDI: 000000000000000d RBP: ffff8880339ffb40 R08: ffffea00008fa307 R09: 1ffffd400011f460 R10: dffffc0000000000 R11: fffff9400011f461 R12: 0000000000000006 R13: ffffea00008fa300 R14: 000000000000000d R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff888125ced000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4b62b61d58 CR3: 00000000778ca000 CR4: 00000000003526f0