bisecting fixing commit since 0c88e405c97ed1828443b67891e6d4bb6e56cd4e building syzkaller on 1a1f4bd8c48f86af4bc94a2e3a86fc0de9c52c93 testing commit 0c88e405c97ed1828443b67891e6d4bb6e56cd4e with gcc (GCC) 8.1.0 kernel signature: 0821896a815688fa59b1dcf34e98bba8a0ceed12e3454cc9bbd7c9bb29adde5a run #0: crashed: general protection fault in bdevname run #1: crashed: kernel BUG in submit_bh_wbc run #2: crashed: kernel BUG in submit_bh_wbc run #3: crashed: kernel BUG in submit_bh_wbc run #4: crashed: general protection fault in bdevname run #5: crashed: general protection fault in bdevname run #6: crashed: kernel BUG in submit_bh_wbc run #7: crashed: kernel BUG in submit_bh_wbc run #8: crashed: kernel BUG in submit_bh_wbc run #9: crashed: kernel BUG in submit_bh_wbc testing current HEAD 2263955bf7e71ca8419b64d7a60510aad29002f6 testing commit 2263955bf7e71ca8419b64d7a60510aad29002f6 with gcc (GCC) 8.1.0 kernel signature: 0927e4a86dc19a045a259f24465996e184db9ddcf5fa0c94d9faf2be54f9975e all runs: crashed: kernel BUG in submit_bh_wbc revisions tested: 2, total time: 23m49.728369763s (build: 16m22.972889149s, test: 6m59.157832234s) the crash still happens on HEAD commit msg: Linux 4.19.170 crash: kernel BUG in submit_bh_wbc EXT4-fs (loop2): mount failed EXT4-fs error (device loop4): ext4_fill_super:4446: inode #2: comm syz-executor.4: iget: root inode unallocated EXT4-fs (loop4): get root inode failed EXT4-fs (loop4): mount failed ------------[ cut here ]------------ kernel BUG at fs/buffer.c:3049! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 9424 Comm: kmmpd-loop4 Not tainted 4.19.170-syzkaller #0 EXT4-fs error (device loop3): ext4_fill_super:4446: inode #2: comm syz-executor.3: iget: root inode unallocated Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:submit_bh_wbc+0x4e5/0x6f0 fs/buffer.c:3049 Code: 33 45 89 65 10 4c 89 ef e8 c8 c5 90 01 31 c0 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 f0 80 63 01 f7 e9 c1 fb ff ff 0f 0b <0f> 0b 0f 0b 0f 0b 0f 0b 0f 0b e8 7c 1a ea ff eb c6 e8 d5 19 ea ff RSP: 0018:ffff8881e55e7d58 EFLAGS: 00010246 RAX: 0000000000000005 RBX: ffff8881c6b60a80 RCX: 0000000000000000 RDX: 1ffff11038d6c150 RSI: 0000000000003800 RDI: 0000000000000001 RBP: ffff8881e55e7da0 R08: 0000000000000000 R09: ffffed1038d6c15c R10: ffffed1038d6c15c R11: ffff8881c6b60ae3 R12: 0000000000003800 R13: ffff8881e41a6e80 R14: ffff8881c8d87000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f61560f6018 CR3: 000000000986d002 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: submit_bh+0xe/0x10 fs/buffer.c:3096 write_mmp_block+0x1ac/0x2a0 fs/ext4/mmp.c:55 kmmpd+0x657/0x9e0 fs/ext4/mmp.c:246 kthread+0x347/0x410 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 Modules linked in: ---[ end trace ccbb34b3047644ae ]--- EXT4-fs (loop3): get root inode failed RIP: 0010:submit_bh_wbc+0x4e5/0x6f0 fs/buffer.c:3049 EXT4-fs (loop3): mount failed Code: 33 45 89 65 10 4c 89 ef e8 c8 c5 90 01 31 c0 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 f0 80 63 01 f7 e9 c1 fb ff ff 0f 0b <0f> 0b 0f 0b 0f 0b 0f 0b 0f 0b e8 7c 1a ea ff eb c6 e8 d5 19 ea ff RSP: 0018:ffff8881e55e7d58 EFLAGS: 00010246 RAX: 0000000000000005 RBX: ffff8881c6b60a80 RCX: 0000000000000000 RDX: 1ffff11038d6c150 RSI: 0000000000003800 RDI: 0000000000000001 RBP: ffff8881e55e7da0 R08: 0000000000000000 R09: ffffed1038d6c15c R10: ffffed1038d6c15c R11: ffff8881c6b60ae3 R12: 0000000000003800 R13: ffff8881e41a6e80 R14: ffff8881c8d87000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 EXT4-fs error (device loop3): ext4_fill_super:4446: inode #2: comm syz-executor.3: iget: root inode unallocated CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 EXT4-fs (loop3): get root inode failed CR2: 00007f615603e000 CR3: 000000000986d003 CR4: 00000000001606f0 EXT4-fs (loop3): mount failed DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400