------------[ cut here ]------------ WARNING: CPU: 1 PID: 4425 at include/linux/backing-dev.h:247 inode_to_wb include/linux/backing-dev.h:243 [inline] WARNING: CPU: 1 PID: 4425 at include/linux/backing-dev.h:247 folio_account_dirtied mm/page-writeback.c:2587 [inline] WARNING: CPU: 1 PID: 4425 at include/linux/backing-dev.h:247 __folio_mark_dirty+0x8b8/0xce0 mm/page-writeback.c:2638 Modules linked in: CPU: 1 PID: 4425 Comm: syz-executor Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : inode_to_wb include/linux/backing-dev.h:243 [inline] pc : folio_account_dirtied mm/page-writeback.c:2587 [inline] pc : __folio_mark_dirty+0x8b8/0xce0 mm/page-writeback.c:2638 lr : inode_to_wb include/linux/backing-dev.h:243 [inline] lr : folio_account_dirtied mm/page-writeback.c:2587 [inline] lr : __folio_mark_dirty+0x8b8/0xce0 mm/page-writeback.c:2638 sp : ffff8000220c7700 x29: ffff8000220c7710 x28: 1fffff80006a25b0 x27: 0000000000000000 x26: dfff800000000000 x25: 0000000000000000 x24: ffff0000c049c998 x23: 0000000000000001 x22: 0000000000000000 x21: 1fffe00018093933 x20: ffff0000ccb64c40 x19: fffffc0003512d80 x18: 1fffe00033c1c97e x17: ffff80001641d000 x16: ffff8000082dbe80 x15: 000000000004ffff x14: 0000000000000001 x13: 1fffe00018093933 x12: 0000000000000000 x11: ff008000087196b8 x10: 0000000000000000 x9 : ffff8000087196b8 x8 : ffff0000d6d70000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff800008a6beb8 x2 : ffff0000cf33e060 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: inode_to_wb include/linux/backing-dev.h:243 [inline] folio_account_dirtied mm/page-writeback.c:2587 [inline] __folio_mark_dirty+0x8b8/0xce0 mm/page-writeback.c:2638 __set_page_dirty include/linux/pagemap.h:1090 [inline] mark_buffer_dirty+0x2b8/0x5c0 fs/buffer.c:1105 gfs2_unpin+0x128/0x918 fs/gfs2/lops.c:111 buf_lo_after_commit+0x144/0x18c fs/gfs2/lops.c:747 lops_after_commit fs/gfs2/lops.h:49 [inline] __gfs2_log_flush+0x12e8/0x1bd4 fs/gfs2/log.c:1118 gfs2_log_flush+0x3c/0x58 fs/gfs2/log.c:1180 gfs2_kill_sb+0x5c/0xd8 fs/gfs2/ops_fstype.c:1729 deactivate_locked_super+0xb4/0x128 fs/super.c:332 deactivate_super+0xe4/0x104 fs/super.c:363 cleanup_mnt+0x3a8/0x430 fs/namespace.c:1191 __cleanup_mnt+0x20/0x30 fs/namespace.c:1198 task_work_run+0x1f4/0x280 kernel/task_work.c:203 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] do_notify_resume+0x20f8/0x2c84 arch/arm64/kernel/signal.c:1151 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline] el0_svc+0x9c/0x12c arch/arm64/kernel/entry-common.c:638 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 164270 hardirqs last enabled at (164269): [] folio_memcg_lock+0xe8/0x1f8 mm/memcontrol.c:2113 hardirqs last disabled at (164270): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline] hardirqs last disabled at (164270): [] _raw_spin_lock_irqsave+0xa4/0xb0 kernel/locking/spinlock.c:162 softirqs last enabled at (164120): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (164118): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 4425 at include/linux/backing-dev.h:247 inode_to_wb include/linux/backing-dev.h:243 [inline] WARNING: CPU: 1 PID: 4425 at include/linux/backing-dev.h:247 __folio_start_writeback+0x8a8/0xa98 mm/page-writeback.c:3003 Modules linked in: CPU: 1 PID: 4425 Comm: syz-executor Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : inode_to_wb include/linux/backing-dev.h:243 [inline] pc : __folio_start_writeback+0x8a8/0xa98 mm/page-writeback.c:3003 lr : inode_to_wb include/linux/backing-dev.h:243 [inline] lr : __folio_start_writeback+0x8a8/0xa98 mm/page-writeback.c:3003 sp : ffff8000220c7180 x29: ffff8000220c7260 x28: ffff700004418e38 x27: 0000000000000000 x26: ffff0000c049c7f0 x25: 1fffff80006a25b1 x24: dfff800000000000 x23: ffff0000ccb64c40 x22: ffff8000220c71e0 x21: ffff0000c049c998 x20: 0000000000000001 x19: fffffc0003512d80 x18: 1fffe00033c1c97e x17: ffff80001641d000 x16: ffff8000082dbe80 x15: 0000000000000000 x14: 0000000000000001 x13: 1fffff80006a25b0 x12: 0000000000000000 x11: ff0080000871bbdc x10: 0000000000000000 x9 : ffff80000871bbdc x8 : ffff0000d6d70000 x7 : ffff80000871b62c x6 : 0000000000000000 x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000871b668 x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: inode_to_wb include/linux/backing-dev.h:243 [inline] __folio_start_writeback+0x8a8/0xa98 mm/page-writeback.c:3003 set_page_writeback+0x5c/0x7c mm/folio-compat.c:56 gfs2_aspace_writepage+0x524/0x6f4 fs/gfs2/meta_io.c:73 __gfs2_writepage+0x70/0x184 fs/gfs2/log.c:87 write_cache_pages+0x760/0xe00 mm/page-writeback.c:2382 gfs2_ail1_start_one fs/gfs2/log.c:143 [inline] gfs2_ail1_flush+0x7a8/0x9f0 fs/gfs2/log.c:223 gfs2_ail1_start fs/gfs2/log.c:254 [inline] empty_ail1_list+0x130/0x214 fs/gfs2/log.c:987 __gfs2_log_flush+0x15c8/0x1bd4 fs/gfs2/log.c:1133 gfs2_log_flush+0x3c/0x58 fs/gfs2/log.c:1180 gfs2_kill_sb+0x5c/0xd8 fs/gfs2/ops_fstype.c:1729 deactivate_locked_super+0xb4/0x128 fs/super.c:332 deactivate_super+0xe4/0x104 fs/super.c:363 cleanup_mnt+0x3a8/0x430 fs/namespace.c:1191 __cleanup_mnt+0x20/0x30 fs/namespace.c:1198 task_work_run+0x1f4/0x280 kernel/task_work.c:203 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] do_notify_resume+0x20f8/0x2c84 arch/arm64/kernel/signal.c:1151 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline] el0_svc+0x9c/0x12c arch/arm64/kernel/entry-common.c:638 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 164442 hardirqs last enabled at (164441): [] folio_memcg_lock+0xe8/0x1f8 mm/memcontrol.c:2113 hardirqs last disabled at (164442): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline] hardirqs last disabled at (164442): [] _raw_spin_lock_irqsave+0xa4/0xb0 kernel/locking/spinlock.c:162 softirqs last enabled at (164420): [] softirq_handle_end kernel/softirq.c:439 [inline] softirqs last enabled at (164420): [] handle_softirqs+0xb1c/0xc90 kernel/softirq.c:624 softirqs last disabled at (164273): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]--- syz-executor: attempt to access beyond end of device loop0: rw=12289, sector=68719479080, nr_sectors = 8 limit=32768 Buffer I/O error on dev loop0, logical block 8589934885, lost async page write ------------[ cut here ]------------ WARNING: CPU: 1 PID: 4425 at include/linux/backing-dev.h:247 inode_to_wb include/linux/backing-dev.h:243 [inline] WARNING: CPU: 1 PID: 4425 at include/linux/backing-dev.h:247 __folio_end_writeback+0x7d0/0x9cc mm/page-writeback.c:2951 Modules linked in: CPU: 1 PID: 4425 Comm: syz-executor Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : inode_to_wb include/linux/backing-dev.h:243 [inline] pc : __folio_end_writeback+0x7d0/0x9cc mm/page-writeback.c:2951 lr : inode_to_wb include/linux/backing-dev.h:243 [inline] lr : __folio_end_writeback+0x7d0/0x9cc mm/page-writeback.c:2951 sp : ffff8000220c6f90 x29: ffff8000220c6fb0 x28: 1fffff800066cf49 x27: 1fffff800066cf48 x26: dfff800000000000 x25: 0000000000000000 x24: ffff0000c049c7f0 x23: ffff0000c049c998 x22: ffff0000cd66e798 x21: ffff0000cd66e7a0 x20: 0000000000000001 x19: fffffc0003367a40 x18: 1fffe00033c1c97e x17: 73612074736f6c20 x16: ffff8000082dbe80 x15: 000000000004ffff x14: 0000000000000003 x13: 1ffff00004418de4 x12: 0000000000000000 x11: ff0080000871b138 x10: 0000000000000000 x9 : ffff80000871b138 x8 : ffff0000d6d70000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000080 x4 : 0000000000000000 x3 : 0000000000000010 x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: inode_to_wb include/linux/backing-dev.h:243 [inline] __folio_end_writeback+0x7d0/0x9cc mm/page-writeback.c:2951 folio_end_writeback+0x12c/0x410 mm/filemap.c:1641 end_page_writeback+0x58/0x74 mm/folio-compat.c:26 end_buffer_async_write+0x330/0x4fc fs/buffer.c:375 end_bio_bh_io_sync+0xb4/0x1e4 fs/buffer.c:2655 bio_endio+0x750/0x794 block/bio.c:1554 submit_bio_noacct+0x258/0x1660 block/blk-core.c:815 submit_bio+0x29c/0x3d0 block/blk-core.c:853 submit_bh_wbc+0x394/0x44c fs/buffer.c:2702 submit_bh+0x2c/0x3c fs/buffer.c:2707 gfs2_aspace_writepage+0x590/0x6f4 fs/gfs2/meta_io.c:78 __gfs2_writepage+0x70/0x184 fs/gfs2/log.c:87 write_cache_pages+0x760/0xe00 mm/page-writeback.c:2382 gfs2_ail1_start_one fs/gfs2/log.c:143 [inline] gfs2_ail1_flush+0x7a8/0x9f0 fs/gfs2/log.c:223 gfs2_ail1_start fs/gfs2/log.c:254 [inline] empty_ail1_list+0x130/0x214 fs/gfs2/log.c:987 __gfs2_log_flush+0x15c8/0x1bd4 fs/gfs2/log.c:1133 gfs2_log_flush+0x3c/0x58 fs/gfs2/log.c:1180 gfs2_kill_sb+0x5c/0xd8 fs/gfs2/ops_fstype.c:1729 deactivate_locked_super+0xb4/0x128 fs/super.c:332 deactivate_super+0xe4/0x104 fs/super.c:363 cleanup_mnt+0x3a8/0x430 fs/namespace.c:1191 __cleanup_mnt+0x20/0x30 fs/namespace.c:1198 task_work_run+0x1f4/0x280 kernel/task_work.c:203 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] do_notify_resume+0x20f8/0x2c84 arch/arm64/kernel/signal.c:1151 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline] el0_svc+0x9c/0x12c arch/arm64/kernel/entry-common.c:638 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 164564 hardirqs last enabled at (164563): [] folio_memcg_lock+0xe8/0x1f8 mm/memcontrol.c:2113 hardirqs last disabled at (164564): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline] hardirqs last disabled at (164564): [] _raw_spin_lock_irqsave+0xa4/0xb0 kernel/locking/spinlock.c:162 softirqs last enabled at (164478): [] softirq_handle_end kernel/softirq.c:439 [inline] softirqs last enabled at (164478): [] handle_softirqs+0xb1c/0xc90 kernel/softirq.c:624 softirqs last disabled at (164445): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]--- gfs2: fsid=syz:syz.0: fatal: I/O error block = 8589934885 function = gfs2_ail1_start_one, file = fs/gfs2/log.c, line = 124 gfs2: fsid=syz:syz.0: fatal: I/O error(s) gfs2: fsid=syz:syz.0: about to withdraw this file system