bisecting fixing commit since 10b84daddbec72c6b440216a69de9a9605127f7a
building syzkaller on 0174c6c8f78a3fdd002a73a5fdf559c1b0ec8c34
testing commit 10b84daddbec72c6b440216a69de9a9605127f7a with gcc (GCC) 8.1.0
kernel signature: 89fe3036ff6ecdacf25818134a20ff81e2967eea68d123b2654e137069bc5962
all runs: crashed: WARNING in account_page_dirtied
testing current HEAD 1ada9010e578150984039a770c98f41799b30bc4
testing commit 1ada9010e578150984039a770c98f41799b30bc4 with gcc (GCC) 8.1.0
kernel signature: 42fa025ae6c5b41c227d9df4651e4c1865440f6ae4fee60df715636b4a7447ed
all runs: crashed: WARNING in account_page_dirtied
revisions tested: 2, total time: 15m57.984092699s (build: 8m28.350169937s, test: 6m49.997764092s)
the crash still happens on HEAD
commit msg: Merge tag 'char-misc-5.8-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc into master
crash: WARNING in account_page_dirtied
gfs2: fsid=loop1: Trying to join cluster "lock_nolock", "loop1"
gfs2: fsid=loop3.0: jid=0: Looking at journal...
gfs2: fsid=loop1: Now mounting FS...
gfs2: fsid=loop1.0: journal 0 mapped with 1 extents in 0ms
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3583 at include/linux/backing-dev.h:345 inode_to_wb include/linux/backing-dev.h:342 [inline]
WARNING: CPU: 1 PID: 3583 at include/linux/backing-dev.h:345 account_page_dirtied+0x262/0x2f0 mm/page-writeback.c:2432
Kernel panic - not syncing: panic_on_warn set ...
gfs2: fsid=loop1.0: jid=0, already locked for use
CPU: 1 PID: 3583 Comm: syz-executor2 Not tainted 5.8.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
gfs2: fsid=loop1.0: jid=0: Looking at journal...
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0xb9/0xf1 lib/dump_stack.c:118
 panic+0x115/0x30c kernel/panic.c:231
 __warn.cold.13+0x20/0x26 kernel/panic.c:600
 report_bug+0xc5/0x100 lib/bug.c:198
 handle_bug+0x39/0xa0 arch/x86/kernel/traps.c:235
 exc_invalid_op+0x18/0x70 arch/x86/kernel/traps.c:255
 asm_exc_invalid_op+0x12/0x20 arch/x86/include/asm/idtentry.h:540
RIP: 0010:inode_to_wb include/linux/backing-dev.h:342 [inline]
RIP: 0010:account_page_dirtied+0x262/0x2f0 mm/page-writeback.c:2432
Code: e8 e3 67 a1 01 85 c0 0f 85 39 fe ff ff 49 8b 86 a8 01 00 00 be ff ff ff ff 48 8d 78 70 e8 c6 67 a1 01 85 c0 0f 85 1c fe ff ff <0f> 0b e9 15 fe ff ff 4c 89 e6 4c 89 f7 e8 fc 0e 0f 00 e9 f7 fd ff
gfs2: fsid=loop4.0: jid=0: Journal head lookup took 119ms
RSP: 0018:ffffc9000019ba98 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffffea0008385940 RCX: 0000000000000000
RDX: ffff88820e1ec540 RSI: ffff8882144ba0e0 RDI: 0000000000000086
RBP: ffffc9000019bab8 R08: 000000000000022c R09: 0000000000000008
R10: 0000000000000001 R11: 975c4c2ac546eb45 R12: ffffea0008385940
R13: ffff888209acac28 R14: ffff8882154e73b8 R15: 0000000000000000
gfs2: fsid=loop4.0: jid=0: Done
 __set_page_dirty+0x52/0xc0 fs/buffer.c:609
 mark_buffer_dirty+0x118/0x170 fs/buffer.c:1138
 gfs2_unpin+0x63/0x350 fs/gfs2/lops.c:107
 buf_lo_after_commit+0x58/0x70 fs/gfs2/lops.c:739
 lops_after_commit fs/gfs2/lops.h:62 [inline]
 gfs2_log_flush+0x49f/0xdd0 fs/gfs2/log.c:974
 do_sync+0x21f/0x540 fs/gfs2/quota.c:967
gfs2: fsid=loop1.0: jid=0: Journal head lookup took 62ms
 gfs2_quota_sync+0x177/0x220 fs/gfs2/quota.c:1310
 gfs2_sync_fs+0x1b/0x50 fs/gfs2/super.c:751
gfs2: fsid=loop1.0: jid=0: Done
 __sync_filesystem fs/sync.c:39 [inline]
 sync_filesystem+0x3d/0x90 fs/sync.c:64
 generic_shutdown_super+0x22/0x100 fs/super.c:448
 kill_block_super+0x22/0x50 fs/super.c:1444
 gfs2_kill_sb+0x63/0x70 fs/gfs2/ops_fstype.c:1603
 deactivate_locked_super+0x30/0x70 fs/super.c:335
 deactivate_super+0x4c/0x50 fs/super.c:366
 cleanup_mnt+0xb8/0x140 fs/namespace.c:1118
 __cleanup_mnt+0xd/0x10 fs/namespace.c:1125
 task_work_run+0x6d/0xc0 kernel/task_work.c:135
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 exit_to_usermode_loop arch/x86/entry/common.c:239 [inline]
 __prepare_exit_to_usermode+0x1da/0x1e0 arch/x86/entry/common.c:269
gfs2: fsid=loop1.0: first mount done, others may mount
 __syscall_return_slowpath+0x5a/0x250 arch/x86/entry/common.c:352
 do_syscall_64+0x7b/0xf0 arch/x86/entry/common.c:393
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x457a57
Code: 44 00 00 b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007ffd921606a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000457a57
gfs2: fsid=loop1.0: found 1 quota changes
RDX: 00000000010cb9bb RSI: 0000000000000002 RDI: 00007ffd92161810
RBP: 00007ffd92161810 R08: 0000000000000000 R09: 0000000000000009
R10: 0000000000000005 R11: 0000000000000246 R12: 00000000010cb940
R13: 0000000000000000 R14: 0000000000000002 R15: 000000000000d047
Kernel Offset: disabled
Rebooting in 86400 seconds..