ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
F2FS-fs (loop0): Stopped filesystem due to reason: 3
------------[ cut here ]------------
kernel BUG at fs/f2fs/data.c:388!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 0 UID: 0 PID: 1038 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:f2fs_write_end_io+0x16df/0x1740 fs/f2fs/data.c:388
Code: 20 51 9b 8b e8 92 4c f6 fc 90 0f 0b e8 7a 04 93 fd 48 8b 3c 24 48 c7 c6 20 51 9b 8b e8 7a 4c f6 fc 90 0f 0b e8 62 04 93 fd 90 <0f> 0b e8 5a 04 93 fd 48 8b 3c 24 48 c7 c6 20 51 9b 8b e8 5a 4c f6
RSP: 0018:ffffc9000565ec78 EFLAGS: 00010246
RAX: ffffffff843167ae RBX: ffffea00017afb00 RCX: ffff8880274a0000
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100
RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000100
R10: dffffc0000000000 R11: fffffbfff1f10c7f R12: 000000005ebec000
R13: ffffea00017afb40 R14: 000000000000000b R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff888126183000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe9873695ec CR3: 000000003543a000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 blk_update_request+0x57e/0xe60 block/blk-mq.c:1016
 blk_mq_end_request+0x3e/0x70 block/blk-mq.c:1178
 blk_complete_reqs block/blk-mq.c:1253 [inline]
 blk_done_softirq+0x10a/0x160 block/blk-mq.c:1258
 handle_softirqs+0x1de/0x6d0 kernel/softirq.c:622
 __do_softirq kernel/softirq.c:656 [inline]
 __local_bh_enable_ip+0x170/0x2b0 kernel/softirq.c:302
 local_bh_enable include/linux/bottom_half.h:33 [inline]
 spin_unlock_bh include/linux/spinlock_rt.h:116 [inline]
 cfg80211_inform_single_bss_data+0x1445/0x1b80 net/wireless/scan.c:2388
 cfg80211_inform_bss_data+0x266/0x3c40 net/wireless/scan.c:3229
 cfg80211_inform_bss_frame_data+0x3c7/0x730 net/wireless/scan.c:3320
 ieee80211_bss_info_update+0x794/0xa40 net/mac80211/scan.c:230
 ieee80211_rx_bss_info net/mac80211/ibss.c:1088 [inline]
 ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1569 [inline]
 ieee80211_ibss_rx_queued_mgmt+0x1901/0x2cb0 net/mac80211/ibss.c:1596
 ieee80211_iface_process_skb net/mac80211/iface.c:1795 [inline]
 ieee80211_iface_work+0x845/0x1390 net/mac80211/iface.c:1849
 cfg80211_wiphy_work+0x2cf/0x460 net/wireless/core.c:513
 process_one_work kernel/workqueue.c:3314 [inline]
 process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3397
 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3478
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:f2fs_write_end_io+0x16df/0x1740 fs/f2fs/data.c:388
Code: 20 51 9b 8b e8 92 4c f6 fc 90 0f 0b e8 7a 04 93 fd 48 8b 3c 24 48 c7 c6 20 51 9b 8b e8 7a 4c f6 fc 90 0f 0b e8 62 04 93 fd 90 <0f> 0b e8 5a 04 93 fd 48 8b 3c 24 48 c7 c6 20 51 9b 8b e8 5a 4c f6
RSP: 0018:ffffc9000565ec78 EFLAGS: 00010246
RAX: ffffffff843167ae RBX: ffffea00017afb00 RCX: ffff8880274a0000
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100
RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000100
R10: dffffc0000000000 R11: fffffbfff1f10c7f R12: 000000005ebec000
R13: ffffea00017afb40 R14: 000000000000000b R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff888126183000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe9873695ec CR3: 000000003543a000 CR4: 00000000003526f0