kill_block_super+0x44/0x90 fs/super.c:1660 erofs_kill_sb+0x4c/0x140 fs/erofs/super.c:794 deactivate_locked_super+0x97/0x100 fs/super.c:481 cleanup_mnt+0x429/0x4c0 fs/namespace.c:1259 task_work_run+0x1ce/0x250 kernel/task_work.c:239 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] exit_to_user_mode_loop+0xe6/0x110 kernel/entry/common.c:177 exit_to_user_mode_prepare+0xf6/0x180 kernel/entry/common.c:210 __syscall_exit_to_user_mode_work kernel/entry/common.c:291 [inline] syscall_exit_to_user_mode+0x1a/0x50 kernel/entry/common.c:302 ------------[ cut here ]------------ WARNING: CPU: 1 PID: 5782 at include/linux/memcontrol.h:764 folio_lruvec include/linux/memcontrol.h:764 [inline] WARNING: CPU: 1 PID: 5782 at include/linux/memcontrol.h:764 folio_lruvec_lock_irqsave+0x212/0x270 mm/memcontrol.c:1369 Modules linked in: CPU: 1 PID: 5782 Comm: syz-executor Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 RIP: 0010:folio_lruvec include/linux/memcontrol.h:764 [inline] RIP: 0010:folio_lruvec_lock_irqsave+0x212/0x270 mm/memcontrol.c:1369 Code: 4c 89 f7 e8 30 31 f9 ff 48 8b 04 24 49 89 06 e9 1c ff ff ff 48 89 df 48 c7 c6 e0 ac b6 8a e8 d5 9a e1 ff c6 05 dc 79 51 0c 01 <0f> 0b e9 1b fe ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 9d fe RSP: 0018:ffffc900046cf018 EFLAGS: 00010246 RAX: 5e83d8044bd21e00 RBX: ffffea0000bec080 RCX: 5e83d8044bd21e00 RDX: 0000000000000005 RSI: ffffffff8aaace60 RDI: ffffffff8afc6b00 RBP: ffffc900046cf0c0 R08: ffffffff8e4a8d6f R09: 1ffffffff1c951ad R10: dffffc0000000000 R11: fffffbfff1c951ae R12: ffff8880b8f36c28 R13: dffffc0000000000 R14: ffff88807cf5c000 R15: 0000000000000000 FS: 00005555771de500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff154bb2000 CR3: 000000005e6e0000 CR4: 00000000003506e0 Call Trace: folio_lruvec_relock_irqsave include/linux/memcontrol.h:1654 [inline] folio_batch_move_lru+0x2d8/0x6b0 mm/swap.c:208 folio_add_lru+0x434/0xd50 mm/swap.c:509 wp_page_copy mm/memory.c:3163 [inline] do_wp_page+0x1e4c/0x3630 mm/memory.c:3468 handle_pte_fault mm/memory.c:5041 [inline] __handle_mm_fault mm/memory.c:5166 [inline] handle_mm_fault+0x12d4/0x4920 mm/memory.c:5331 do_user_addr_fault+0x738/0x12e0 arch/x86/mm/fault.c:1373 handle_page_fault arch/x86/mm/fault.c:1465 [inline] exc_page_fault+0x67/0x110 arch/x86/mm/fault.c:1521 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:608 RIP: 0010:rep_movs_alternative+0x33/0x90 arch/x86/lib/copy_user_64.S:58 Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb RSP: 0018:ffffc900046cf670 EFLAGS: 00050216 RAX: 554f524200000000 RBX: 0000000000000030 RCX: 0000000000000030 RDX: 0000000000000000 RSI: ffffffff8e1017a0 RDI: 00007ff154bb2000 RBP: ffffc900046cf830 R08: ffffffff8e1017cf R09: 1ffffffff1c202f9 R10: dffffc0000000000 R11: fffffbfff1c202fa R12: 00007ff154bb2030 R13: ffffffff8e1017a0 R14: 00007ff154bb2000 R15: ffffffff8e1017a0 copy_user_generic arch/x86/include/asm/uaccess_64.h:112 [inline] raw_copy_to_user arch/x86/include/asm/uaccess_64.h:133 [inline] _copy_to_user+0x85/0xa0 lib/usercopy.c:41 copy_to_user include/linux/uaccess.h:191 [inline] ebt_entry_to_user net/bridge/netfilter/ebtables.c:1487 [inline] copy_everything_to_user+0x602/0xc50 net/bridge/netfilter/ebtables.c:1585 do_ebt_get_ctl+0x439/0x1c40 net/bridge/netfilter/ebtables.c:2499 nf_getsockopt+0x262/0x280 net/netfilter/nf_sockopt.c:116 ip_getsockopt+0x1c1/0x210 net/ipv4/ip_sockglue.c:1790 do_sock_getsockopt+0x368/0x440 net/socket.c:2384 __sys_getsockopt net/socket.c:2413 [inline] __do_sys_getsockopt net/socket.c:2423 [inline] __se_sys_getsockopt net/socket.c:2420 [inline] __x64_sys_getsockopt+0x1d6/0x280 net/socket.c:2420 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7ff15499140a Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 RSP: 002b:00007ffda5fa58b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 RAX: ffffffffffffffda RBX: 00007ff154bb1f80 RCX: 00007ff15499140a RDX: 0000000000000083 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 0000000000000002 R08: 00007ffda5fa5950 R09: 00007ffda5fa51e7 R10: 00007ff154bb1f88 R11: 0000000000000246 R12: 00007ff154bb1f88 R13: 00007ff154bb1280 R14: 0000000000000003 R15: 00007ffda5fa5950 ---------------- Code disassembly (best guess): 0: 40 83 f9 08 rex cmp $0x8,%ecx 4: 73 21 jae 0x27 6: 85 c9 test %ecx,%ecx 8: 74 0f je 0x19 a: 8a 06 mov (%rsi),%al c: 88 07 mov %al,(%rdi) e: 48 ff c7 inc %rdi 11: 48 ff c6 inc %rsi 14: 48 ff c9 dec %rcx 17: 75 f1 jne 0xa 19: c3 ret 1a: 66 2e 0f 1f 84 00 00 cs nopw 0x0(%rax,%rax,1) 21: 00 00 00 24: 0f 1f 00 nopl (%rax) 27: 48 8b 06 mov (%rsi),%rax * 2a: 48 89 07 mov %rax,(%rdi) <-- trapping instruction 2d: 48 83 c6 08 add $0x8,%rsi 31: 48 83 c7 08 add $0x8,%rdi 35: 83 e9 08 sub $0x8,%ecx 38: 74 df je 0x19 3a: 83 f9 08 cmp $0x8,%ecx 3d: 73 e8 jae 0x27 3f: eb .byte 0xeb