gfs2: fsid=syz:syz.0: fatal: I/O error(s) gfs2: fsid=syz:syz.0: about to withdraw this file system BUG: scheduling while atomic: syz-executor.2/5713/0x00000002 Modules linked in: CPU: 0 PID: 5713 Comm: syz-executor.2 Not tainted 6.6.0-rc2-syzkaller-00018-g2cf0f7156238 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x72/0xa0 lib/dump_stack.c:106 __schedule_bug+0x49/0x60 kernel/sched/core.c:5926 schedule_debug kernel/sched/core.c:5953 [inline] __schedule+0xf8f/0x1270 kernel/sched/core.c:6589 schedule+0x56/0xa0 kernel/sched/core.c:6771 schedule_timeout+0xc0/0x1d0 kernel/time/timer.c:2167 signal_our_withdraw fs/gfs2/util.c:157 [inline] gfs2_withdraw+0x714/0x840 fs/gfs2/util.c:342 gfs2_ail1_empty+0x442/0x450 fs/gfs2/log.c:377 gfs2_flush_revokes+0x31/0x40 fs/gfs2/log.c:815 revoke_lo_before_commit+0x22/0x250 fs/gfs2/lops.c:867 lops_before_commit fs/gfs2/lops.h:40 [inline] gfs2_log_flush+0x97b/0x1100 fs/gfs2/log.c:1101 gfs2_trans_end+0x1a6/0x330 fs/gfs2/trans.c:158 gfs2_iomap_begin_write fs/gfs2/bmap.c:1074 [inline] gfs2_iomap_begin+0x6f3/0x8f0 fs/gfs2/bmap.c:1126 iomap_iter+0x219/0x590 fs/iomap/iter.c:91 iomap_file_buffered_write+0xb4/0x4e0 fs/iomap/buffered-io.c:967 gfs2_file_buffered_write+0x190/0x510 fs/gfs2/file.c:1059 gfs2_file_write_iter+0x643/0x810 fs/gfs2/file.c:1157 __kernel_write_iter+0x10d/0x370 fs/read_write.c:517 dump_emit_page fs/coredump.c:888 [inline] dump_user_range+0x141/0x3a0 fs/coredump.c:915 elf_core_dump+0x10c4/0x1570 fs/binfmt_elf.c:2142 do_coredump+0x19b8/0x2030 fs/coredump.c:764 get_signal+0xf52/0x1010 kernel/signal.c:2878 arch_do_signal_or_restart+0x42/0x490 arch/x86/kernel/signal.c:309 exit_to_user_mode_loop kernel/entry/common.c:168 [inline] exit_to_user_mode_prepare+0xd1/0x140 kernel/entry/common.c:204 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline] syscall_exit_to_user_mode+0x21/0x50 kernel/entry/common.c:296 do_syscall_64+0x44/0xb0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f3f6ac7cae9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f3f6b9c40c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d RAX: ffffffffffffffe5 RBX: 00007f3f6ad9bf80 RCX: 00007f3f6ac7cae9 RDX: 000000007f010000 RSI: 0000000000000000 RDI: 0000000000000004 RBP: 00007f3f6acc847a R08: 0000000000000000 R09: 0000000000000000 R10: 00000000001000f4 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f3f6ad9bf80 R15: 00007ffd90fa0fe8 gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 gfs2: fsid=syz:syz.0: File system withdrawn CPU: 1 PID: 5713 Comm: syz-executor.2 Tainted: G W 6.6.0-rc2-syzkaller-00018-g2cf0f7156238 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x72/0xa0 lib/dump_stack.c:106 gfs2_withdraw+0x4a3/0x840 fs/gfs2/util.c:355 gfs2_ail1_empty+0x442/0x450 fs/gfs2/log.c:377 gfs2_flush_revokes+0x31/0x40 fs/gfs2/log.c:815 revoke_lo_before_commit+0x22/0x250 fs/gfs2/lops.c:867 lops_before_commit fs/gfs2/lops.h:40 [inline] gfs2_log_flush+0x97b/0x1100 fs/gfs2/log.c:1101 gfs2_trans_end+0x1a6/0x330 fs/gfs2/trans.c:158 gfs2_iomap_begin_write fs/gfs2/bmap.c:1074 [inline] gfs2_iomap_begin+0x6f3/0x8f0 fs/gfs2/bmap.c:1126 iomap_iter+0x219/0x590 fs/iomap/iter.c:91 iomap_file_buffered_write+0xb4/0x4e0 fs/iomap/buffered-io.c:967 gfs2_file_buffered_write+0x190/0x510 fs/gfs2/file.c:1059 gfs2_file_write_iter+0x643/0x810 fs/gfs2/file.c:1157 __kernel_write_iter+0x10d/0x370 fs/read_write.c:517 dump_emit_page fs/coredump.c:888 [inline] dump_user_range+0x141/0x3a0 fs/coredump.c:915 elf_core_dump+0x10c4/0x1570 fs/binfmt_elf.c:2142 do_coredump+0x19b8/0x2030 fs/coredump.c:764 get_signal+0xf52/0x1010 kernel/signal.c:2878 arch_do_signal_or_restart+0x42/0x490 arch/x86/kernel/signal.c:309 exit_to_user_mode_loop kernel/entry/common.c:168 [inline] exit_to_user_mode_prepare+0xd1/0x140 kernel/entry/common.c:204 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline] syscall_exit_to_user_mode+0x21/0x50 kernel/entry/common.c:296 do_syscall_64+0x44/0xb0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f3f6ac7cae9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f3f6b9c40c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d RAX: ffffffffffffffe5 RBX: 00007f3f6ad9bf80 RCX: 00007f3f6ac7cae9 RDX: 000000007f010000 RSI: 0000000000000000 RDI: 0000000000000004 RBP: 00007f3f6acc847a R08: 0000000000000000 R09: 0000000000000000 R10: 00000000001000f4 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f3f6ad9bf80 R15: 00007ffd90fa0fe8 syz-executor.2 (5713) used greatest stack depth: 10520 bytes left BUG: scheduling while atomic: syz-executor.2/5713/0x00000000 Modules linked in: BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12226d067 P4D 12226d067 PUD 0 BUG: kernel NULL pointer dereference, address: 0000000000000000