kernel BUG in submit_bh_wbc

Status: upstream: reported C repro on 2023/06/15 00:20
Bug presence: origin:lts
Labels: missing-backport
[Documentation on labels]
Reported-by: syzbot+807c663f72dcf074e3e2@syzkaller.appspotmail.com
First crash: 1222d, last: 1h08m
Cause bisection: introduced by (bisect log) :
commit 8d5459c11f548131ce48b2fbf45cccc5c382558f
Author: Jan Kara <jack@suse.cz>
Date: Fri May 20 11:14:02 2022 +0000

  ext4: improve write performance with disabled delalloc

Crash: kernel BUG in submit_bh_wbc (log)
Repro: C syz .config
  
Fix bisection: fixed by (bisect log) :
commit 32b9fb9a67ec70bbe3afe931b0ea44203150a49a
Author: Ojaswin Mujoo <ojaswin@linux.ibm.com>
Date: Mon Sep 18 10:45:50 2023 +0000

  ext4: mark buffer new if it is unwritten to avoid stale data exposure

  
▶ ▼ Bug presence (2)
Date Name Commit Repro Result
2024/03/17 lts (merge base) 883d1a956208 C [report] kernel BUG in submit_bh_wbc
2024/03/31 upstream (ToT) 18737353cca0 C Didn't crash
▶ ▼ Similar bugs (11)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 kernel BUG in submit_bh_wbc origin:lts-only -1 syz, C done 19 864d 1293d 3/3 fixed on 2024/07/20 06:27
linux-6.6 kernel BUG in submit_bh_wbc origin:lts-only -1 syz, C inconclusive 4 21d 68d 0/2 upstream: reported C repro on 2026/08/11 15:13
upstream kernel BUG at fs/buffer.c:LINE! nilfs -1 syz, C done error 567 923d 3104d 25/29 fixed on 2024/04/10 03:59
upstream kernel BUG in submit_bh_wbc (2) udf -1 syz, C done 123 801d 907d 27/29 fixed on 2024/08/14 03:44
linux-4.14 kernel BUG at fs/buffer.c:LINE! -1 syz, C error 59 1337d 2731d 0/1 upstream: reported C repro on 2019/04/27 19:47
linux-6.1 kernel BUG in submit_bh_wbc (2) origin:lts-only -1 syz, C inconclusive 290 22d 814d 0/3 upstream: reported C repro on 2024/07/26 16:49
linux-4.19 kernel BUG at fs/buffer.c:LINE! (2) udf ext4 -1 syz, C error 31 1344d 2158d 0/1 upstream: reported C repro on 2020/11/21 07:48
android-54 kernel BUG at fs/buffer.c:LINE! ext4 -1 syz, C 4762 512d 2462d 0/2 upstream: reported C repro on 2020/01/21 13:12
upstream kernel BUG in submit_bh_wbc (3) nilfs fs -1 syz, C done 18 728d 735d 28/29 fixed on 2024/11/12 23:31
linux-5.15 kernel BUG in submit_bh_wbc -1 syz, C error 8 954d 1232d 0/3 auto-obsoleted due to no activity on 2024/06/16 14:58
upstream kernel BUG in submit_bh_wbc nilfs -1 syz, C done 10 908d 917d 25/29 fixed on 2024/04/24 18:26
▶ ▼ Fix bisection attempts (2)
Created Duration User Patch Repo Result
2024/03/11 21:14 3h12m bisect fix android14-6.1 OK (1) job log
2023/07/28 15:24 1h02m bisect fix android14-6.1 OK (0) job log log

Sample crash report:
------------[ cut here ]------------
kernel BUG at fs/buffer.c:2714!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 419 Comm: kmmpd-loop0 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 fs/buffer.c:2714
Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 68 d5 e7 ff e9 b0 fe ff ff e8 1e 38 a2 ff 0f 0b e8 17 38 a2 ff <0f> 0b e8 10 38 a2 ff 0f 0b e8 09 38 a2 ff 0f 0b e8 02 38 a2 ff 0f
RSP: 0018:ffffc90000b87ca0 EFLAGS: 00010293
RAX: ffffffff81cf3f59 RBX: 0000000000000000 RCX: ffff888118575100
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90000b87cf0 R08: ffff888123ffdc7f R09: 1ffff110247ffb8f
R10: dffffc0000000000 R11: ffffed10247ffb90 R12: 0000000000000000
R13: 1ffff110247ffb8f R14: ffff888123ffdc78 R15: 0000000000003801
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc8d0585fc0 CR3: 000000010fb65000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 submit_bh+0x1f/0x30 fs/buffer.c:2755
 write_mmp_block_thawed+0x397/0x510 fs/ext4/mmp.c:51
 write_mmp_block+0x138/0x2b0 fs/ext4/mmp.c:67
 kmmpd+0x215/0x950 fs/ext4/mmp.c:246
 kthread+0x281/0x320 kernel/kthread.c:386
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 fs/buffer.c:2714
Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 68 d5 e7 ff e9 b0 fe ff ff e8 1e 38 a2 ff 0f 0b e8 17 38 a2 ff <0f> 0b e8 10 38 a2 ff 0f 0b e8 09 38 a2 ff 0f 0b e8 02 38 a2 ff 0f
RSP: 0018:ffffc90000b87ca0 EFLAGS: 00010293
RAX: ffffffff81cf3f59 RBX: 0000000000000000 RCX: ffff888118575100
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90000b87cf0 R08: ffff888123ffdc7f R09: 1ffff110247ffb8f
R10: dffffc0000000000 R11: ffffed10247ffb90 R12: 0000000000000000
R13: 1ffff110247ffb8f R14: ffff888123ffdc78 R15: 0000000000003801
FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fffc219fff8 CR3: 0000000134683000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (2639):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/15 07:15 android14-6.1 cccf9748e7b1 6ccb967e .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 kernel BUG in submit_bh_wbc
2025/09/03 13:39 android14-6.1 79ccb6ecf51e 96a211bc .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-android-6-1 kernel BUG in submit_bh_wbc
2025/07/12 10:38 android14-6.1 e2deb0b42a3a 3cda49cf .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-android-6-1 kernel BUG in submit_bh_wbc
2025/06/15 19:48 android14-6.1 6246d345f550 5f4b362d .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-android-6-1 kernel BUG in submit_bh_wbc
2025/06/08 14:58 android14-6.1 7af56ffc913d 4826c28e .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-android-6-1 kernel BUG in submit_bh_wbc
2025/05/25 16:07 android14-6.1 3c6d0251e1fb ed351ea7 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-android-6-1 kernel BUG in submit_bh_wbc
2025/01/26 16:54 android14-6.1 ef4fb40b87a9 9fbd772e .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 kernel BUG in submit_bh_wbc
2024/12/16 06:57 android14-6.1 22b7ded8b55b 7cbfbb3a .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 kernel BUG in submit_bh_wbc
2024/11/30 07:55 android14-6.1 a887a44ace2a 68914665 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 kernel BUG in submit_bh_wbc
2024/11/21 19:03 android14-6.1 51bee181735e 4b25d554 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 kernel BUG in submit_bh_wbc
2024/10/08 00:13 android14-6.1 0e8b65e41ffd d7906eff .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 kernel BUG in submit_bh_wbc
2024/09/25 06:24 android14-6.1 5c7d0d4f4a38 5643e0e9 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 kernel BUG in submit_bh_wbc
2024/08/20 20:36 android14-6.1 edca080b95df 9f0ab3fb .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 kernel BUG in submit_bh_wbc
2024/03/17 12:15 android14-6.1 ef39f76e4d24 d615901c .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 kernel BUG in submit_bh_wbc
2023/10/24 12:09 android14-6.1 8a67c0609445 af8d2e46 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 kernel BUG in submit_bh_wbc
2023/09/24 09:56 android14-6.1 060ebb378d1c 0b6a67ac .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 kernel BUG in submit_bh_wbc
2023/06/15 00:46 android14-6.1 60662882b7bd 76decb82 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 kernel BUG in submit_bh_wbc
2023/06/15 00:18 android14-6.1 60662882b7bd 76decb82 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/10/19 10:23 android14-6.1 48e3cd973485 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/10/19 06:33 android14-6.1 48e3cd973485 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/10/18 23:55 android14-6.1 48e3cd973485 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/10/18 05:24 android14-6.1 48e3cd973485 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/10/18 03:27 android14-6.1 48e3cd973485 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/10/17 17:27 android14-6.1 48e3cd973485 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/10/15 14:35 android14-6.1 06aabb3c5541 8fb0ae89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/10/13 07:12 android14-6.1 31addbff5e86 5a1eeac4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/10/11 10:54 android14-6.1 9ea8d8374e5e 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/10/10 20:59 android14-6.1 9ea8d8374e5e 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/10/10 06:44 android14-6.1 9ea8d8374e5e 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/10/09 16:52 android14-6.1 9ea8d8374e5e b2734a59 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/10/09 15:09 android14-6.1 9ea8d8374e5e b2734a59 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/10/07 13:29 android14-6.1 3b0884642a50 6520ecdb .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/10/07 06:56 android14-6.1 3b0884642a50 f7710056 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/10/06 16:38 android14-6.1 3b0884642a50 f7710056 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/10/05 07:50 android14-6.1 6612ef9d0b09 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/10/04 12:24 android14-6.1 6612ef9d0b09 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/10/03 08:56 android14-6.1 6612ef9d0b09 57bbd979 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/10/02 13:50 android14-6.1 6612ef9d0b09 6d32eb1f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/09/30 12:54 android14-6.1 7a5c6f02c229 7808aef4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/09/29 13:26 android14-6.1 3d4bd33f0b0b 7bf4ea23 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/09/29 11:03 android14-6.1 3d4bd33f0b0b 7bf4ea23 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/09/28 20:11 android14-6.1 3d4bd33f0b0b a3c7249d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/09/27 16:54 android14-6.1 3d4bd33f0b0b a3c7249d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/09/27 09:21 android14-6.1 3d4bd33f0b0b a3c7249d .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/09/21 07:31 android14-6.1 8cef8b5b11b7 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/09/20 09:07 android14-6.1 8cef8b5b11b7 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/09/16 02:12 android14-6.1 c5dd09d80de6 2daa4bb5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/09/16 02:09 android14-6.1 c5dd09d80de6 2daa4bb5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/09/15 00:49 android14-6.1 f52fadf7c78f 81a27d1a .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/09/13 16:32 android14-6.1 6308d6d3f1b1 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/09/12 21:11 android14-6.1 6308d6d3f1b1 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/09/11 21:42 android14-6.1 6308d6d3f1b1 b6a5eeb7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/08/23 15:40 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/08/22 02:04 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/08/21 12:48 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/08/21 11:09 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/08/20 21:05 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/08/20 04:11 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/08/19 19:24 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/08/19 15:21 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/08/18 23:15 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/08/18 14:42 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/08/18 05:05 android14-6.1 92668decd5e0 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/08/17 17:02 android14-6.1 92668decd5e0 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/08/17 16:56 android14-6.1 92668decd5e0 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/08/17 14:13 android14-6.1 92668decd5e0 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2026/08/16 11:02 android14-6.1 92668decd5e0 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
2023/06/15 00:02 android14-6.1 60662882b7bd 76decb82 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1 kernel BUG in submit_bh_wbc
* Struck through repros no longer work on HEAD.