gfs2: fsid=syz:syz.0: found 1 quota changes
syz-executor100: attempt to access beyond end of device
loop0: rw=1, sector=131324, nr_sectors = 4 limit=32768
gfs2: fsid=syz:syz.0: Error 10 writing to journal, jid=0
gfs2: fsid=syz:syz.0: fatal: I/O error(s)
gfs2: fsid=syz:syz.0: about to withdraw this file system
BUG: sleeping function called from invalid context at fs/gfs2/glock.c:1336
in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5005, name: syz-executor100
preempt_count: 1, expected: 0
RCU nest depth: 0, expected: 0
4 locks held by syz-executor100/5005:
 #0: ffff88802c5dc0e0 (&type->s_umount_key#45){+.+.}-{3:3}, at: deactivate_super+0xa9/0xd0 fs/super.c:361
 #1: ffff8880763dcb78 (&sdp->sd_quota_sync_mutex){+.+.}-{3:3}, at: gfs2_quota_sync+0xa8/0x660 fs/gfs2/quota.c:1302
 #2: ffff8880763dd060 (&sdp->sd_log_flush_lock){++++}-{3:3}, at: gfs2_log_flush+0xea/0x2900 fs/gfs2/log.c:1043
 #3: ffff8880763dce88 (&sdp->sd_log_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:350 [inline]
 #3: ffff8880763dce88 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_log_lock fs/gfs2/log.h:32 [inline]
 #3: ffff8880763dce88 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_flush_revokes+0x61/0x90 fs/gfs2/log.c:814
Preemption disabled at:
[<0000000000000000>] 0x0
CPU: 1 PID: 5005 Comm: syz-executor100 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x136/0x150 lib/dump_stack.c:106
 __might_resched+0x358/0x580 kernel/sched/core.c:10148
 gfs2_glock_wait+0x4e/0x2e0 fs/gfs2/glock.c:1336
 gfs2_glock_nq+0xd7a/0x17a0 fs/gfs2/glock.c:1587
 gfs2_glock_nq_init fs/gfs2/glock.h:261 [inline]
 gfs2_freeze_lock+0x64/0xe0 fs/gfs2/util.c:107
 signal_our_withdraw fs/gfs2/util.c:160 [inline]
 gfs2_withdraw+0xe92/0x1490 fs/gfs2/util.c:351
 gfs2_ail1_empty+0x829/0xa10 fs/gfs2/log.c:377
 gfs2_flush_revokes+0x6c/0x90 fs/gfs2/log.c:815
 revoke_lo_before_commit+0x22/0x650 fs/gfs2/lops.c:869
 lops_before_commit fs/gfs2/lops.h:40 [inline]
 gfs2_log_flush+0x1021/0x2900 fs/gfs2/log.c:1102
 do_sync+0x5ad/0xcf0 fs/gfs2/quota.c:975
 gfs2_quota_sync+0x2e6/0x660 fs/gfs2/quota.c:1318
 gfs2_sync_fs+0x44/0xb0 fs/gfs2/super.c:665
 sync_filesystem.part.0+0x75/0x1d0 fs/sync.c:56
 sync_filesystem+0x8f/0xc0 fs/sync.c:43
 generic_shutdown_super+0x74/0x480 fs/super.c:473
 kill_block_super+0xa1/0x100 fs/super.c:1407
 gfs2_kill_sb+0x378/0x430 fs/gfs2/ops_fstype.c:1804
 deactivate_locked_super+0x98/0x160 fs/super.c:331
 deactivate_super+0xb1/0xd0 fs/super.c:362
 cleanup_mnt+0x2ae/0x3d0 fs/namespace.c:1177
 task_work_run+0x16f/0x270 kernel/task_work.c:179
 exit_task_work include/linux/task_work.h:38 [inline]
 do_exit+0xb0d/0x29f0 kernel/exit.c:871
 do_group_exit+0xd4/0x2a0 kernel/exit.c:1021
 __do_sys_exit_group kernel/exit.c:1032 [inline]
 __se_sys_exit_group kernel/exit.c:1030 [inline]
 __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1030
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f4bae3f79b9
Code: Unable to access opcode bytes at 0x7f4bae3f798f.
RSP: 002b:00007ffe65b96588 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f4bae48c330 RCX: 00007f4bae3f79b9
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 000000000001f6db
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4bae48c330
R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
 </TASK>
BUG: scheduling while atomic: syz-executor100/5005/0x00000002
4 locks held by syz-executor100/5005:
 #0: ffff88802c5dc0e0 (&type->s_umount_key#45){+.+.}-{3:3}, at: deactivate_super+0xa9/0xd0 fs/super.c:361
 #1: ffff8880763dcb78 (&sdp->sd_quota_sync_mutex){+.+.}-{3:3}, at: gfs2_quota_sync+0xa8/0x660 fs/gfs2/quota.c:1302
 #2: ffff8880763dd060 (&sdp->sd_log_flush_lock){++++}-{3:3}, at: gfs2_log_flush+0xea/0x2900 fs/gfs2/log.c:1043
 #3: ffff8880763dce88 (&sdp->sd_log_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:350 [inline]
 #3: ffff8880763dce88 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_log_lock fs/gfs2/log.h:32 [inline]
 #3: ffff8880763dce88 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_flush_revokes+0x61/0x90 fs/gfs2/log.c:814
Modules linked in:
Preemption disabled at:
[<0000000000000000>] 0x0