f2fs_evict_inode+0x268/0x1920 fs/f2fs/inode.c:857 evict+0x501/0x9c0 fs/inode.c:810 dispose_list fs/inode.c:852 [inline] evict_inodes+0x636/0x6c0 fs/inode.c:906 generic_shutdown_super+0x9a/0x2c0 fs/super.c:628 kill_block_super+0x44/0x90 fs/super.c:1753 kill_f2fs_super+0x390/0x6c0 fs/f2fs/super.c:5082 deactivate_locked_super+0xbc/0x130 fs/super.c:474 cleanup_mnt+0x425/0x4c0 fs/namespace.c:1417 task_work_run+0x1d1/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0xec/0x110 kernel/entry/common.c:114 exit_to_user_mode_prepare include/linux/entry-common.h:330 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:414 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:449 [inline] do_syscall_64+0x2bd/0x3b0 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f ------------[ cut here ]------------ kernel BUG at mm/filemap.c:1498! Oops: invalid opcode: 0000 [#1] SMP KASAN PTI CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: writeback wb_workfn (flush-7:4) RIP: 0010:folio_unlock+0x13d/0x160 mm/filemap.c:1498 Code: de c8 ff 48 89 df 48 c7 c6 a0 36 94 8b e8 cb 6d 0e 00 90 0f 0b e8 13 de c8 ff 48 89 df 48 c7 c6 c0 2c 94 8b e8 b4 6d 0e 00 90 <0f> 0b e8 fc dd c8 ff 48 89 df 48 c7 c6 a0 36 94 8b e8 9d 6d 0e 00 RSP: 0018:ffffc90000116e28 EFLAGS: 00010246 RAX: 6c3007a9419ff500 RBX: ffffea0001712800 RCX: 0000000000000000 RDX: 0000000000000006 RSI: ffffffff8d96d7f4 RDI: 00000000ffffffff RBP: ffffc90000117110 R08: ffffffff8f9fdef7 R09: 1ffffffff1f3fbde R10: dffffc0000000000 R11: fffffbfff1f3fbdf R12: 1ffffd40002e2501 R13: 00fff00000004138 R14: ffffea0001712808 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff888125d86000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffd42267d34 CR3: 000000007e400000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: f2fs_sync_node_pages+0x180a/0x1a10 fs/f2fs/node.c:2081 f2fs_write_node_pages+0x303/0x6e0 fs/f2fs/node.c:2183 do_writepages+0x32b/0x550 mm/page-writeback.c:2636 __writeback_single_inode+0x145/0xff0 fs/fs-writeback.c:1680 writeback_sb_inodes+0x6b5/0x1000 fs/fs-writeback.c:1976 wb_writeback+0x43b/0xaf0 fs/fs-writeback.c:2156 wb_do_writeback fs/fs-writeback.c:2303 [inline] wb_workfn+0x409/0xef0 fs/fs-writeback.c:2343 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3321 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3402 kthread+0x70e/0x8a0 kernel/kthread.c:464 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:folio_unlock+0x13d/0x160 mm/filemap.c:1498 Code: de c8 ff 48 89 df 48 c7 c6 a0 36 94 8b e8 cb 6d 0e 00 90 0f 0b e8 13 de c8 ff 48 89 df 48 c7 c6 c0 2c 94 8b e8 b4 6d 0e 00 90 <0f> 0b e8 fc dd c8 ff 48 89 df 48 c7 c6 a0 36 94 8b e8 9d 6d 0e 00 RSP: 0018:ffffc90000116e28 EFLAGS: 00010246 RAX: 6c3007a9419ff500 RBX: ffffea0001712800 RCX: 0000000000000000 RDX: 0000000000000006 RSI: ffffffff8d96d7f4 RDI: 00000000ffffffff RBP: ffffc90000117110 R08: ffffffff8f9fdef7 R09: 1ffffffff1f3fbde R10: dffffc0000000000 R11: fffffbfff1f3fbdf R12: 1ffffd40002e2501 R13: 00fff00000004138 R14: ffffea0001712808 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff888125d86000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f08cb4ee368 CR3: 0000000075c5a000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400