Buffer I/O error on dev loop3, logical block 0, async page read print_req_error: I/O error, dev loop3, sector 6 Buffer I/O error on dev loop3, logical block 3, async page read audit: type=1800 audit(1677104675.302:5): pid=10517 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=13899 res=0 ------------[ cut here ]------------ kernel BUG at fs/f2fs/node.c:2780! invalid opcode: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 0 PID: 8040 Comm: syz-executor.1 Not tainted 4.14.306-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 F2FS-fs (loop4): Found nat_bits in checkpoint task: ffff88809cc22400 task.stack: ffff8880b3710000 RIP: 0010:destroy_node_manager+0x4f4/0x780 fs/f2fs/node.c:2780 RSP: 0018:ffff8880b37178c0 EFLAGS: 00010297 RAX: ffff88809cc22400 RBX: ffff8880b3414e70 RCX: dffffc0000000000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880b3414e94 RBP: ffff8880b3414d80 R08: ffffffff8b9c7e20 R09: 000000000004069a R10: ffff88809cc22cb0 R11: ffff88809cc22400 R12: ffff8880b3414e98 R13: ffffed100a385516 R14: ffff8880b3414e70 R15: ffff888051c2a880 FS: 0000555555ddb400(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f2f94f97058 CR3: 000000009a817000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: f2fs_put_super+0x3e1/0x840 fs/f2fs/super.c:835 generic_shutdown_super+0x144/0x370 fs/super.c:446 kill_block_super+0x95/0xe0 fs/super.c:1161 deactivate_locked_super+0x6c/0xd0 fs/super.c:319 deactivate_super+0x7f/0xa0 fs/super.c:350 cleanup_mnt+0x186/0x2c0 fs/namespace.c:1183 task_work_run+0x11f/0x190 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop+0x1ad/0x200 arch/x86/entry/common.c:164 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline] syscall_return_slowpath arch/x86/entry/common.c:270 [inline] do_syscall_64+0x4a3/0x640 arch/x86/entry/common.c:297 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7fbe939b5567 RSP: 002b:00007ffe881f6d78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fbe939b5567 RDX: 00007ffe881f6e4a RSI: 000000000000000a RDI: 00007ffe881f6e40 RBP: 00007ffe881f6e40 R08: 00000000ffffffff R09: 00007ffe881f6c10 R10: 0000555555ddc903 R11: 0000000000000246 R12: 00007fbe93a0eb24 R13: 00007ffe881f7f00 R14: 0000555555ddc810 R15: 00007ffe881f7f40 Code: 40 6c 00 00 00 00 48 81 c4 d8 03 00 00 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 3a 35 89 fe 0f 0b e8 33 35 89 fe 0f 0b e8 2c 35 89 fe <0f> 0b e8 25 35 89 fe 0f 0b e8 1e 35 89 fe 48 8b 7c 24 28 e8 34 RIP: destroy_node_manager+0x4f4/0x780 fs/f2fs/node.c:2780 RSP: ffff8880b37178c0 ---[ end trace 1c27f62830537129 ]---