syz-executor.3: attempt to access beyond end of device
loop3: rw=1, sector=3280942697285464, nr_sectors = 8 limit=32768
gfs2: fsid=syz:syz.0: Error 10 writing to journal, jid=0
gfs2: fsid=syz:syz.0: fatal: I/O error(s)
gfs2: fsid=syz:syz.0: about to withdraw this file system
BUG: scheduling while atomic: syz-executor.3/5719/0x00000002
Modules linked in:
CPU: 0 PID: 5719 Comm: syz-executor.3 Not tainted 6.7.0-rc3-syzkaller-gdf60cee26a2e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x72/0xa0 lib/dump_stack.c:106
 __schedule_bug+0x49/0x60 kernel/sched/core.c:5919
 schedule_debug kernel/sched/core.c:5946 [inline]
 __schedule+0xf92/0x1260 kernel/sched/core.c:6581
 __schedule_loop kernel/sched/core.c:6763 [inline]
 schedule+0x2d/0xb0 kernel/sched/core.c:6778
 schedule_timeout+0xc0/0x1d0 kernel/time/timer.c:2167
 signal_our_withdraw fs/gfs2/util.c:157 [inline]
 gfs2_withdraw+0x714/0x840 fs/gfs2/util.c:342
 gfs2_ail1_empty+0x442/0x450 fs/gfs2/log.c:377
 gfs2_flush_revokes+0x31/0x40 fs/gfs2/log.c:815
 revoke_lo_before_commit+0x22/0x250 fs/gfs2/lops.c:867
 lops_before_commit fs/gfs2/lops.h:42 [inline]
 gfs2_log_flush+0x97b/0x1100 fs/gfs2/log.c:1101
 gfs2_trans_end+0x1a6/0x330 fs/gfs2/trans.c:158
 gfs2_dirty_inode+0x2cd/0x420 fs/gfs2/super.c:532
 __mark_inode_dirty+0x99/0x630 fs/fs-writeback.c:2452
 mark_inode_dirty include/linux/fs.h:2306 [inline]
 gfs2_iomap_end+0x2a1/0x340 fs/gfs2/bmap.c:1182
 iomap_iter+0xcc/0x590 fs/iomap/iter.c:79
 iomap_file_buffered_write+0xb5/0x500 fs/iomap/buffered-io.c:986
 gfs2_file_buffered_write+0x1dc/0x500 fs/gfs2/file.c:1059
 gfs2_file_write_iter+0x50e/0x7d0 fs/gfs2/file.c:1163
 __kernel_write_iter+0x10d/0x340 fs/read_write.c:517
 dump_emit_page fs/coredump.c:888 [inline]
 dump_user_range+0x141/0x3a0 fs/coredump.c:915
 elf_core_dump+0x10c4/0x1570 fs/binfmt_elf.c:2077
 do_coredump+0x19b9/0x2030 fs/coredump.c:764
 get_signal+0xf51/0x1010 kernel/signal.c:2890
 arch_do_signal_or_restart+0x42/0x490 arch/x86/kernel/signal.c:309
 exit_to_user_mode_loop kernel/entry/common.c:168 [inline]
 exit_to_user_mode_prepare+0xd1/0x140 kernel/entry/common.c:204
 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]
 syscall_exit_to_user_mode+0x21/0x50 kernel/entry/common.c:296
 do_syscall_64+0x4b/0x110 arch/x86/entry/common.c:88
 entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7f30cea7cae9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f30cf8450c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
RAX: ffffffffffffffe5 RBX: 00007f30ceb9bf80 RCX: 00007f30cea7cae9
RDX: 000000007f010000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: 00007f30ceac847a R08: 0000000000000000 R09: 0000000000000000
R10: 00000000001000f4 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f30ceb9bf80 R15: 00007ffd1db54158
 </TASK>
gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
gfs2: fsid=syz:syz.0: File system withdrawn
CPU: 0 PID: 5719 Comm: syz-executor.3 Tainted: G        W          6.7.0-rc3-syzkaller-gdf60cee26a2e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x72/0xa0 lib/dump_stack.c:106
 gfs2_withdraw+0x4a3/0x840 fs/gfs2/util.c:355
 gfs2_ail1_empty+0x442/0x450 fs/gfs2/log.c:377
 gfs2_flush_revokes+0x31/0x40 fs/gfs2/log.c:815
 revoke_lo_before_commit+0x22/0x250 fs/gfs2/lops.c:867
 lops_before_commit fs/gfs2/lops.h:42 [inline]
 gfs2_log_flush+0x97b/0x1100 fs/gfs2/log.c:1101
 gfs2_trans_end+0x1a6/0x330 fs/gfs2/trans.c:158
 gfs2_dirty_inode+0x2cd/0x420 fs/gfs2/super.c:532
 __mark_inode_dirty+0x99/0x630 fs/fs-writeback.c:2452
 mark_inode_dirty include/linux/fs.h:2306 [inline]
 gfs2_iomap_end+0x2a1/0x340 fs/gfs2/bmap.c:1182
 iomap_iter+0xcc/0x590 fs/iomap/iter.c:79
 iomap_file_buffered_write+0xb5/0x500 fs/iomap/buffered-io.c:986
 gfs2_file_buffered_write+0x1dc/0x500 fs/gfs2/file.c:1059
 gfs2_file_write_iter+0x50e/0x7d0 fs/gfs2/file.c:1163
 __kernel_write_iter+0x10d/0x340 fs/read_write.c:517
 dump_emit_page fs/coredump.c:888 [inline]
 dump_user_range+0x141/0x3a0 fs/coredump.c:915
 elf_core_dump+0x10c4/0x1570 fs/binfmt_elf.c:2077
 do_coredump+0x19b9/0x2030 fs/coredump.c:764
 get_signal+0xf51/0x1010 kernel/signal.c:2890
 arch_do_signal_or_restart+0x42/0x490 arch/x86/kernel/signal.c:309
 exit_to_user_mode_loop kernel/entry/common.c:168 [inline]
 exit_to_user_mode_prepare+0xd1/0x140 kernel/entry/common.c:204
 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]
 syscall_exit_to_user_mode+0x21/0x50 kernel/entry/common.c:296
 do_syscall_64+0x4b/0x110 arch/x86/entry/common.c:88
 entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7f30cea7cae9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f30cf8450c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
RAX: ffffffffffffffe5 RBX: 00007f30ceb9bf80 RCX: 00007f30cea7cae9
RDX: 000000007f010000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: 00007f30ceac847a R08: 0000000000000000 R09: 0000000000000000
R10: 00000000001000f4 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f30ceb9bf80 R15: 00007ffd1db54158
 </TASK>
BUG: scheduling while atomic: syz-executor.3/5719/0x00000000
Modules linked in:
CPU: 0 PID: 5719 Comm: syz-executor.3 Tainted: G        W          6.7.0-rc3-syzkaller-gdf60cee26a2e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x72/0xa0 lib/dump_stack.c:106
 __schedule_bug+0x49/0x60 kernel/sched/core.c:5919
 schedule_debug kernel/sched/core.c:5946 [inline]
 __schedule+0xf92/0x1260 kernel/sched/core.c:6581
 __schedule_loop kernel/sched/core.c:6763 [inline]
 schedule+0x2d/0xb0 kernel/sched/core.c:6778
 io_schedule+0x41/0x70 kernel/sched/core.c:8998
 bit_wait_io+0xc/0x60 kernel/sched/wait_bit.c:209
 __wait_on_bit_lock+0x5b/0x90 kernel/sched/wait_bit.c:90
 out_of_line_wait_on_bit_lock+0x90/0xb0 kernel/sched/wait_bit.c:117
 wait_on_bit_lock_io include/linux/wait_bit.h:208 [inline]
 __lock_buffer+0x49/0x50 fs/buffer.c:71
 lock_buffer include/linux/buffer_head.h:404 [inline]
 gfs2_aspace_writepage+0x2f2/0x410 fs/gfs2/meta_io.c:56
 writepage_cb+0x22/0xa0 mm/page-writeback.c:2537
 write_cache_pages+0x232/0x6b0 mm/page-writeback.c:2474
 do_writepages+0x1c1/0x260 mm/page-writeback.c:2558
 filemap_fdatawrite_wbc mm/filemap.c:387 [inline]
 filemap_fdatawrite_wbc+0x91/0xc0 mm/filemap.c:377
 __filemap_fdatawrite_range+0x64/0x90 mm/filemap.c:420
 gfs2_write_inode+0xe4/0x1d0 fs/gfs2/super.c:459
 write_inode fs/fs-writeback.c:1473 [inline]
 __writeback_single_inode+0x49e/0x5c0 fs/fs-writeback.c:1690
 writeback_single_inode+0x176/0x300 fs/fs-writeback.c:1746
 sync_inode_metadata+0x50/0x70 fs/fs-writeback.c:2808
 gfs2_fsync+0x128/0x1e0 fs/gfs2/file.c:761
 vfs_fsync_range+0x5e/0xe0 fs/sync.c:188
 generic_write_sync include/linux/fs.h:2653 [inline]
 gfs2_file_write_iter+0x5c7/0x7d0 fs/gfs2/file.c:1165
 __kernel_write_iter+0x10d/0x340 fs/read_write.c:517
 dump_emit_page fs/coredump.c:888 [inline]
 dump_user_range+0x141/0x3a0 fs/coredump.c:915
 elf_core_dump+0x10c4/0x1570 fs/binfmt_elf.c:2077
 do_coredump+0x19b9/0x2030 fs/coredump.c:764
 get_signal+0xf51/0x1010 kernel/signal.c:2890
 arch_do_signal_or_restart+0x42/0x490 arch/x86/kernel/signal.c:309
 exit_to_user_mode_loop kernel/entry/common.c:168 [inline]
 exit_to_user_mode_prepare+0xd1/0x140 kernel/entry/common.c:204
 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]
 syscall_exit_to_user_mode+0x21/0x50 kernel/entry/common.c:296
 do_syscall_64+0x4b/0x110 arch/x86/entry/common.c:88
 entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7f30cea7cae9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f30cf8450c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
RAX: ffffffffffffffe5 RBX: 00007f30ceb9bf80 RCX: 00007f30cea7cae9
RDX: 000000007f010000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: 00007f30ceac847a R08: 0000000000000000 R09: 0000000000000000
R10: 00000000001000f4 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f30ceb9bf80 R15: 00007ffd1db54158
 </TASK>