loop3: rw=1, sector=8192, nr_sectors = 4 limit=2 gfs2: fsid=syz:syz.0: Error 10 writing to journal, jid=0 gfs2: fsid=syz:syz.0: fatal: I/O error(s) gfs2: fsid=syz:syz.0: about to withdraw this file system BUG: sleeping function called from invalid context at kernel/sched/completion.c:101 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4320, name: syz-executor preempt_count: 1, expected: 0 RCU nest depth: 0, expected: 0 4 locks held by syz-executor/4320: #0: ffff0000db5080e0 (&type->s_umount_key#78){+.+.}-{3:3}, at: deactivate_super+0xe0/0x108 fs/super.c:362 #1: ffff0000de685058 (&sdp->sd_log_flush_lock){++++}-{3:3}, at: gfs2_log_flush+0xb0/0x1aa0 fs/gfs2/log.c:1043 #2: ffff0000de684e80 (&sdp->sd_log_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:351 [inline] #2: ffff0000de684e80 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_log_lock fs/gfs2/log.h:32 [inline] #2: ffff0000de684e80 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_flush_revokes+0x48/0x88 fs/gfs2/log.c:814 #3: ffff0000de685248 (&sdp->sd_freeze_mutex){+.+.}-{3:3}, at: signal_our_withdraw fs/gfs2/util.c:155 [inline] #3: ffff0000de685248 (&sdp->sd_freeze_mutex){+.+.}-{3:3}, at: gfs2_withdraw+0x424/0x13a8 fs/gfs2/util.c:354 Preemption disabled at: [] spin_lock include/linux/spinlock.h:351 [inline] [] gfs2_log_lock fs/gfs2/log.h:32 [inline] [] gfs2_flush_revokes+0x48/0x88 fs/gfs2/log.c:814 CPU: 0 PID: 4320 Comm: syz-executor Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 Call trace: dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf8/0x160 lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 __might_resched+0x350/0x4cc kernel/sched/core.c:9966 __might_sleep+0x94/0x110 kernel/sched/core.c:9895 __wait_for_common kernel/sched/completion.c:101 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion+0x24/0x5c kernel/sched/completion.c:138 kthread_stop+0x1d0/0x810 kernel/kthread.c:711 signal_our_withdraw fs/gfs2/util.c:159 [inline] gfs2_withdraw+0x48c/0x13a8 fs/gfs2/util.c:354 gfs2_ail1_empty+0x740/0x7d0 fs/gfs2/log.c:377 gfs2_flush_revokes+0x54/0x88 fs/gfs2/log.c:815 revoke_lo_before_commit+0x3c/0x608 fs/gfs2/lops.c:869 lops_before_commit fs/gfs2/lops.h:40 [inline] gfs2_log_flush+0x828/0x1aa0 fs/gfs2/log.c:1102 gfs2_kill_sb+0x5c/0xd4 fs/gfs2/ops_fstype.c:1729 deactivate_locked_super+0xac/0x124 fs/super.c:332 deactivate_super+0xe8/0x108 fs/super.c:363 cleanup_mnt+0x37c/0x404 fs/namespace.c:1191 __cleanup_mnt+0x20/0x30 fs/namespace.c:1198 task_work_run+0x1ec/0x270 kernel/task_work.c:203 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] do_notify_resume+0x2038/0x2b28 arch/arm64/kernel/signal.c:1137 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline] el0_svc+0x98/0x138 arch/arm64/kernel/entry-common.c:638 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 BUG: scheduling while atomic: syz-executor/4320/0x00000002 4 locks held by syz-executor/4320: #0: ffff0000db5080e0 (&type->s_umount_key#78){+.+.}-{3:3}, at: deactivate_super+0xe0/0x108 fs/super.c:362 #1: ffff0000de685058 (&sdp->sd_log_flush_lock){++++}-{3:3}, at: gfs2_log_flush+0xb0/0x1aa0 fs/gfs2/log.c:1043 #2: ffff0000de684e80 (&sdp->sd_log_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:351 [inline] #2: ffff0000de684e80 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_log_lock fs/gfs2/log.h:32 [inline] #2: ffff0000de684e80 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_flush_revokes+0x48/0x88 fs/gfs2/log.c:814 #3: ffff0000de685248 (&sdp->sd_freeze_mutex){+.+.}-{3:3}, at: signal_our_withdraw fs/gfs2/util.c:155 [inline] #3: ffff0000de685248 (&sdp->sd_freeze_mutex){+.+.}-{3:3}, at: gfs2_withdraw+0x424/0x13a8 fs/gfs2/util.c:354 Modules linked in: Preemption disabled at: [] spin_lock include/linux/spinlock.h:351 [inline] [] gfs2_log_lock fs/gfs2/log.h:32 [inline] [] gfs2_flush_revokes+0x48/0x88 fs/gfs2/log.c:814 CPU: 0 PID: 4320 Comm: syz-executor Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 Call trace: dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf8/0x160 lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 __schedule_bug+0x124/0x1c8 kernel/sched/core.c:5792 schedule_debug kernel/sched/core.c:5819 [inline] __schedule+0xe68/0x1b18 kernel/sched/core.c:6454 schedule+0xc4/0x170 kernel/sched/core.c:6637 schedule_timeout+0xb4/0x2cc kernel/time/timer.c:2144 do_wait_for_common+0x284/0x3e4 kernel/sched/completion.c:85 __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion+0x44/0x5c kernel/sched/completion.c:138 kthread_stop+0x1d0/0x810 kernel/kthread.c:711 signal_our_withdraw fs/gfs2/util.c:165 [inline] gfs2_withdraw+0x4f0/0x13a8 fs/gfs2/util.c:354 gfs2_ail1_empty+0x740/0x7d0 fs/gfs2/log.c:377 gfs2_flush_revokes+0x54/0x88 fs/gfs2/log.c:815 revoke_lo_before_commit+0x3c/0x608 fs/gfs2/lops.c:869 lops_before_commit fs/gfs2/lops.h:40 [inline] gfs2_log_flush+0x828/0x1aa0 fs/gfs2/log.c:1102 gfs2_kill_sb+0x5c/0xd4 fs/gfs2/ops_fstype.c:1729 deactivate_locked_super+0xac/0x124 fs/super.c:332 deactivate_super+0xe8/0x108 fs/super.c:363 cleanup_mnt+0x37c/0x404 fs/namespace.c:1191 __cleanup_mnt+0x20/0x30 fs/namespace.c:1198 task_work_run+0x1ec/0x270 kernel/task_work.c:203 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] do_notify_resume+0x2038/0x2b28 arch/arm64/kernel/signal.c:1137 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline] el0_svc+0x98/0x138 arch/arm64/kernel/entry-common.c:638 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 ============================= [ BUG: Invalid wait context ] syzkaller #0 Tainted: G W ----------------------------- syz-executor/4320 is trying to lock: ffff8000179e8cc8 (uevent_sock_mutex){+.+.}-{3:3}, at: kobject_uevent_env+0x4cc/0x868 lib/kobject_uevent.c:601 other info that might help us debug this: context-{4:4} 3 locks held by syz-executor/4320: #0: ffff0000db5080e0 (&type->s_umount_key#78){+.+.}-{3:3}, at: deactivate_super+0xe0/0x108 fs/super.c:362 #1: ffff0000de685058 (&sdp->sd_log_flush_lock){++++}-{3:3}, at: gfs2_log_flush+0xb0/0x1aa0 fs/gfs2/log.c:1043 #2: ffff0000de684e80 (&sdp->sd_log_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:351 [inline] #2: ffff0000de684e80 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_log_lock fs/gfs2/log.h:32 [inline] #2: ffff0000de684e80 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_flush_revokes+0x48/0x88 fs/gfs2/log.c:814 stack backtrace: CPU: 0 PID: 4320 Comm: syz-executor Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 Call trace: dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf8/0x160 lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 print_lock_invalid_wait_context kernel/locking/lockdep.c:4701 [inline] check_wait_context kernel/locking/lockdep.c:4762 [inline] __lock_acquire+0x1adc/0x6544 kernel/locking/lockdep.c:4999 lock_acquire+0x20c/0x644 kernel/locking/lockdep.c:5662 __mutex_lock_common+0x190/0x1f38 kernel/locking/mutex.c:603 __mutex_lock kernel/locking/mutex.c:747 [inline] mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799 kobject_uevent_env+0x4cc/0x868 lib/kobject_uevent.c:601 kobject_uevent+0x2c/0x3c lib/kobject_uevent.c:657 gfs2_withdraw+0xec4/0x13a8 fs/gfs2/util.c:356 gfs2_ail1_empty+0x740/0x7d0 fs/gfs2/log.c:377 gfs2_flush_revokes+0x54/0x88 fs/gfs2/log.c:815 revoke_lo_before_commit+0x3c/0x608 fs/gfs2/lops.c:869 lops_before_commit fs/gfs2/lops.h:40 [inline] gfs2_log_flush+0x828/0x1aa0 fs/gfs2/log.c:1102 gfs2_kill_sb+0x5c/0xd4 fs/gfs2/ops_fstype.c:1729 deactivate_locked_super+0xac/0x124 fs/super.c:332 deactivate_super+0xe8/0x108 fs/super.c:363 cleanup_mnt+0x37c/0x404 fs/namespace.c:1191 __cleanup_mnt+0x20/0x30 fs/namespace.c:1198 task_work_run+0x1ec/0x270 kernel/task_work.c:203 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] do_notify_resume+0x2038/0x2b28 arch/arm64/kernel/signal.c:1137 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline] el0_svc+0x98/0x138 arch/arm64/kernel/entry-common.c:638 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 gfs2: fsid=syz:syz.0: File system withdrawn CPU: 0 PID: 4320 Comm: syz-executor Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 Call trace: dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf8/0x160 lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 gfs2_withdraw+0xf9c/0x13a8 fs/gfs2/util.c:366 gfs2_ail1_empty+0x740/0x7d0 fs/gfs2/log.c:377 gfs2_flush_revokes+0x54/0x88 fs/gfs2/log.c:815 revoke_lo_before_commit+0x3c/0x608 fs/gfs2/lops.c:869 lops_before_commit fs/gfs2/lops.h:40 [inline] gfs2_log_flush+0x828/0x1aa0 fs/gfs2/log.c:1102 gfs2_kill_sb+0x5c/0xd4 fs/gfs2/ops_fstype.c:1729 deactivate_locked_super+0xac/0x124 fs/super.c:332 deactivate_super+0xe8/0x108 fs/super.c:363 cleanup_mnt+0x37c/0x404 fs/namespace.c:1191 __cleanup_mnt+0x20/0x30 fs/namespace.c:1198 task_work_run+0x1ec/0x270 kernel/task_work.c:203 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] do_notify_resume+0x2038/0x2b28 arch/arm64/kernel/signal.c:1137 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline] el0_svc+0x98/0x138 arch/arm64/kernel/entry-common.c:638 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585