INFO: task hung in jbd2_journal_commit_transaction

Status: upstream: reported on 2026/08/05 05:38
Reported-by: syzbot+a6aabe9adc9f9269764d@syzkaller.appspotmail.com
First crash: 55d, last: 1d21h
▶ ▼ Similar bugs (13)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-6-12 INFO: task hung in jbd2_journal_commit_transaction origin:upstream 1 syz, C 85 1d02h 60d 0/1 premoderation: reported C repro on 2026/07/31 15:32
upstream INFO: task hung in jbd2_journal_commit_transaction (2) ext4 1 1 2028d 2028d 0/29 auto-closed as invalid on 2021/06/09 10:13
linux-6.6 INFO: task hung in jbd2_journal_commit_transaction (2) 1 138 13h57m 54d 0/2 upstream: reported on 2026/08/05 22:06
android-44 INFO: task hung in jbd2_journal_commit_transaction 1 syz, C 6 3013d 2726d 0/2 public: reported C repro on 2019/04/13 00:00
android-49 INFO: task hung in jbd2_journal_commit_transaction 1 5 2921d 3066d 0/3 auto-closed as invalid on 2019/03/29 12:13
upstream INFO: task hung in jbd2_journal_commit_transaction (5) prio:low ext4 1 syz, C error error 3209 41m 867d 0/29 upstream: reported C repro on 2024/05/15 03:54
linux-6.1 INFO: task hung in jbd2_journal_commit_transaction 1 1 1216d 1216d 0/3 auto-obsoleted due to no activity on 2023/09/09 09:50
linux-6.1 INFO: task hung in jbd2_journal_commit_transaction (2) origin:lts-only 1 syz, C inconclusive 93 1d00h 444d 0/3 upstream: reported C repro on 2025/07/11 16:44
upstream INFO: task hung in jbd2_journal_commit_transaction (4) ext4 1 7 1159d 1307d 0/29 auto-obsoleted due to no activity on 2023/10/25 18:13
upstream INFO: task hung in jbd2_journal_commit_transaction (3) ext4 1 syz, C error error 24 1461d 1745d 0/29 auto-obsoleted due to no activity on 2023/01/27 09:20
upstream INFO: task hung in jbd2_journal_commit_transaction ext4 1 syz, C 52 2908d 2927d 0/29 closed as dup on 2018/10/02 14:53
linux-6.6 INFO: task hung in jbd2_journal_commit_transaction 1 2 359d 445d 0/2 auto-obsoleted due to no activity on 2026/01/13 11:32
android-414 INFO: task hung in jbd2_journal_commit_transaction 1 syz, C 31 2912d 2728d 0/1 public: reported C repro on 2019/04/11 00:00

Sample crash report:
INFO: task jbd2/sda1-8:3520 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:jbd2/sda1-8     state:D stack:25872 pid: 3520 ppid:     2 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11c3/0x4350 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 io_schedule+0x7c/0xd0 kernel/sched/core.c:8503
 bit_wait_io+0xd/0xc0 kernel/sched/wait_bit.c:209
 __wait_on_bit kernel/sched/wait_bit.c:49 [inline]
 out_of_line_wait_on_bit+0x173/0x230 kernel/sched/wait_bit.c:64
 wait_on_buffer include/linux/buffer_head.h:390 [inline]
 jbd2_journal_commit_transaction+0x2f0b/0x5c30 fs/jbd2/commit.c:848
 kjournald2+0x45a/0x900 fs/jbd2/journal.c:213
 kthread+0x42e/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
INFO: task syz-executor:4173 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:23312 pid: 4173 ppid:  4172 flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11c3/0x4350 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 io_schedule+0x7c/0xd0 kernel/sched/core.c:8503
 bit_wait_io+0xd/0xc0 kernel/sched/wait_bit.c:209
 __wait_on_bit kernel/sched/wait_bit.c:49 [inline]
 out_of_line_wait_on_bit+0x173/0x230 kernel/sched/wait_bit.c:64
 wait_on_bit_io include/linux/wait_bit.h:101 [inline]
 do_get_write_access+0x134/0xe40 fs/jbd2/transaction.c:1116
 jbd2_journal_get_write_access+0x108/0x140 fs/jbd2/transaction.c:1251
 __ext4_journal_get_write_access+0x24d/0x6e0 fs/ext4/ext4_jbd2.c:235
 ext4_reserve_inode_write+0x203/0x2e0 fs/ext4/inode.c:5866
 __ext4_mark_inode_dirty+0x13b/0x6c0 fs/ext4/inode.c:6050
 ext4_dirty_inode+0xbf/0x100 fs/ext4/inode.c:6087
 __mark_inode_dirty+0x2c8/0xc90 fs/fs-writeback.c:2480
 generic_update_time+0x1cd/0x1f0 fs/inode.c:1881
 inode_update_time fs/inode.c:1894 [inline]
 file_update_time+0x3c0/0x440 fs/inode.c:2083
 ext4_page_mkwrite+0x1bc/0x1250 fs/ext4/inode.c:6205
 do_page_mkwrite+0x168/0x3c0 mm/memory.c:2922
 do_shared_fault mm/memory.c:4328 [inline]
 do_fault mm/memory.c:4396 [inline]
 handle_pte_fault mm/memory.c:4650 [inline]
 __handle_mm_fault mm/memory.c:4785 [inline]
 handle_mm_fault+0x1e47/0x4440 mm/memory.c:4883
 do_user_addr_fault+0x494/0xc90 arch/x86/mm/fault.c:1355
 handle_page_fault arch/x86/mm/fault.c:1443 [inline]
 exc_page_fault+0x60/0x100 arch/x86/mm/fault.c:1496
 asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:606
RIP: 0033:0x7f7557de11e3
RSP: 002b:00007fff900f5370 EFLAGS: 00010202
RAX: 00007f7554771000 RBX: 00007fff900f54a0 RCX: 0000000000dffde8
RDX: 00007f7554770ffc RSI: 0000000000000008 RDI: 00007fff900f54a0
RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000
R10: 00007fff900f5480 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
INFO: task kworker/u4:10:4324 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u4:10   state:D stack:23680 pid: 4324 ppid:     2 flags:0x00004000
Workqueue: writeback wb_workfn (flush-8:0)
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11c3/0x4350 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 io_schedule+0x7c/0xd0 kernel/sched/core.c:8503
 bit_wait_io+0xd/0xc0 kernel/sched/wait_bit.c:209
 __wait_on_bit kernel/sched/wait_bit.c:49 [inline]
 out_of_line_wait_on_bit+0x173/0x230 kernel/sched/wait_bit.c:64
 wait_on_bit_io include/linux/wait_bit.h:101 [inline]
 do_get_write_access+0x134/0xe40 fs/jbd2/transaction.c:1116
 jbd2_journal_get_write_access+0x108/0x140 fs/jbd2/transaction.c:1251
 __ext4_journal_get_write_access+0x24d/0x6e0 fs/ext4/ext4_jbd2.c:235
 ext4_mb_mark_diskspace_used+0x27d/0x14e0 fs/ext4/mballoc.c:3885
 ext4_mb_new_blocks+0x11ab/0x47c0 fs/ext4/mballoc.c:5806
 ext4_ext_map_blocks+0x17d1/0x63d0 fs/ext4/extents.c:4372
 ext4_map_blocks+0x97f/0x1a50 fs/ext4/inode.c:675
 mpage_map_one_extent fs/ext4/inode.c:2410 [inline]
 mpage_map_and_submit_extent fs/ext4/inode.c:2463 [inline]
 ext4_writepages+0x124a/0x2d40 fs/ext4/inode.c:2831
 do_writepages+0x493/0x700 mm/page-writeback.c:2386
 __writeback_single_inode+0x153/0xda0 fs/fs-writeback.c:1657
 writeback_sb_inodes+0xaaa/0x1750 fs/fs-writeback.c:1940
 __writeback_inodes_wb+0x12a/0x3f0 fs/fs-writeback.c:2011
 wb_writeback+0x45e/0xbc0 fs/fs-writeback.c:2116
 wb_check_old_data_flush fs/fs-writeback.c:2216 [inline]
 wb_do_writeback fs/fs-writeback.c:2269 [inline]
 wb_workfn+0xb15/0xf20 fs/fs-writeback.c:2298
 process_one_work+0x867/0xff0 kernel/workqueue.c:2310
 worker_thread+0xad7/0x12a0 kernel/workqueue.c:2457
 kthread+0x42e/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
INFO: task syz.3.42:4461 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.42        state:D stack:27312 pid: 4461 ppid:  4186 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11c3/0x4350 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 io_schedule+0x7c/0xd0 kernel/sched/core.c:8503
 bit_wait_io+0xd/0xc0 kernel/sched/wait_bit.c:209
 __wait_on_bit kernel/sched/wait_bit.c:49 [inline]
 out_of_line_wait_on_bit+0x173/0x230 kernel/sched/wait_bit.c:64
 wait_on_bit_io include/linux/wait_bit.h:101 [inline]
 do_get_write_access+0x134/0xe40 fs/jbd2/transaction.c:1116
 jbd2_journal_get_write_access+0x108/0x140 fs/jbd2/transaction.c:1251
 __ext4_journal_get_write_access+0x24d/0x6e0 fs/ext4/ext4_jbd2.c:235
 ext4_reserve_inode_write+0x203/0x2e0 fs/ext4/inode.c:5866
 __ext4_mark_inode_dirty+0x13b/0x6c0 fs/ext4/inode.c:6050
 ext4_dirty_inode+0xbf/0x100 fs/ext4/inode.c:6087
 __mark_inode_dirty+0x2c8/0xc90 fs/fs-writeback.c:2480
 generic_update_time+0x1cd/0x1f0 fs/inode.c:1881
 inode_update_time fs/inode.c:1894 [inline]
 file_update_time+0x3c0/0x440 fs/inode.c:2083
 ext4_page_mkwrite+0x1bc/0x1250 fs/ext4/inode.c:6205
 do_page_mkwrite+0x168/0x3c0 mm/memory.c:2922
 do_shared_fault mm/memory.c:4328 [inline]
 do_fault mm/memory.c:4396 [inline]
 handle_pte_fault mm/memory.c:4650 [inline]
 __handle_mm_fault mm/memory.c:4785 [inline]
 handle_mm_fault+0x1e47/0x4440 mm/memory.c:4883
 do_user_addr_fault+0x494/0xc90 arch/x86/mm/fault.c:1355
 handle_page_fault arch/x86/mm/fault.c:1443 [inline]
 exc_page_fault+0x60/0x100 arch/x86/mm/fault.c:1496
 asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:606
RIP: 0033:0x7f6c121bc809
RSP: 002b:00007ffc09f34400 EFLAGS: 00010202
RAX: 0000001b32724000 RBX: 0000000000000000 RCX: 00000000003ffde8
RDX: 0000001b32723ffc RSI: 00000000003ffde8 RDI: 00007f6c1309f700
RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f6c1255c000
R10: 00007f6c1309f700 R11: 0000000000000000 R12: 0000000000000000
R13: 000000000001296a R14: ffffffff819d64d4 R15: 00007f6c1309f720
 </TASK>
INFO: task syz.4.44:4470 blocked for more than 144 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.44        state:D stack:27696 pid: 4470 ppid:  4192 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11c3/0x4350 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 io_schedule+0x7c/0xd0 kernel/sched/core.c:8503
 bit_wait_io+0xd/0xc0 kernel/sched/wait_bit.c:209
 __wait_on_bit kernel/sched/wait_bit.c:49 [inline]
 out_of_line_wait_on_bit+0x173/0x230 kernel/sched/wait_bit.c:64
 wait_on_bit_io include/linux/wait_bit.h:101 [inline]
 do_get_write_access+0x134/0xe40 fs/jbd2/transaction.c:1116
 jbd2_journal_get_write_access+0x108/0x140 fs/jbd2/transaction.c:1251
 __ext4_journal_get_write_access+0x24d/0x6e0 fs/ext4/ext4_jbd2.c:235
 ext4_reserve_inode_write+0x203/0x2e0 fs/ext4/inode.c:5866
 __ext4_mark_inode_dirty+0x13b/0x6c0 fs/ext4/inode.c:6050
 ext4_dirty_inode+0xbf/0x100 fs/ext4/inode.c:6087
 __mark_inode_dirty+0x2c8/0xc90 fs/fs-writeback.c:2480
 generic_update_time+0x1cd/0x1f0 fs/inode.c:1881
 inode_update_time fs/inode.c:1894 [inline]
 file_update_time+0x3c0/0x440 fs/inode.c:2083
 ext4_page_mkwrite+0x1bc/0x1250 fs/ext4/inode.c:6205
 do_page_mkwrite+0x168/0x3c0 mm/memory.c:2922
 do_shared_fault mm/memory.c:4328 [inline]
 do_fault mm/memory.c:4396 [inline]
 handle_pte_fault mm/memory.c:4650 [inline]
 __handle_mm_fault mm/memory.c:4785 [inline]
 handle_mm_fault+0x1e47/0x4440 mm/memory.c:4883
 do_user_addr_fault+0x494/0xc90 arch/x86/mm/fault.c:1355
 handle_page_fault arch/x86/mm/fault.c:1443 [inline]
 exc_page_fault+0x60/0x100 arch/x86/mm/fault.c:1496
 asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:606
RIP: 0033:0x7f7ced524aa3
RSP: 002b:00007ffdfc83c430 EFLAGS: 00010246
RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b32464000
RDX: 0000001b32424000 RSI: 0000000000400000 RDI: 00007f7ced899708
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdfc83c6c0
 </TASK>
INFO: task syz.2.45:4471 blocked for more than 145 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.45        state:D stack:27696 pid: 4471 ppid:  4197 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11c3/0x4350 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 io_schedule+0x7c/0xd0 kernel/sched/core.c:8503
 bit_wait_io+0xd/0xc0 kernel/sched/wait_bit.c:209
 __wait_on_bit kernel/sched/wait_bit.c:49 [inline]
 out_of_line_wait_on_bit+0x173/0x230 kernel/sched/wait_bit.c:64
 wait_on_bit_io include/linux/wait_bit.h:101 [inline]
 do_get_write_access+0x134/0xe40 fs/jbd2/transaction.c:1116
 jbd2_journal_get_write_access+0x108/0x140 fs/jbd2/transaction.c:1251
 __ext4_journal_get_write_access+0x24d/0x6e0 fs/ext4/ext4_jbd2.c:235
 ext4_reserve_inode_write+0x203/0x2e0 fs/ext4/inode.c:5866
 __ext4_mark_inode_dirty+0x13b/0x6c0 fs/ext4/inode.c:6050
 ext4_dirty_inode+0xbf/0x100 fs/ext4/inode.c:6087
 __mark_inode_dirty+0x2c8/0xc90 fs/fs-writeback.c:2480
 generic_update_time+0x1cd/0x1f0 fs/inode.c:1881
 inode_update_time fs/inode.c:1894 [inline]
 file_update_time+0x3c0/0x440 fs/inode.c:2083
 ext4_page_mkwrite+0x1bc/0x1250 fs/ext4/inode.c:6205
 do_page_mkwrite+0x168/0x3c0 mm/memory.c:2922
 do_shared_fault mm/memory.c:4328 [inline]
 do_fault mm/memory.c:4396 [inline]
 handle_pte_fault mm/memory.c:4650 [inline]
 __handle_mm_fault mm/memory.c:4785 [inline]
 handle_mm_fault+0x1e47/0x4440 mm/memory.c:4883
 do_user_addr_fault+0x494/0xc90 arch/x86/mm/fault.c:1355
 handle_page_fault arch/x86/mm/fault.c:1443 [inline]
 exc_page_fault+0x60/0x100 arch/x86/mm/fault.c:1496
 asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:606
RIP: 0033:0x7f9f7ab97aa3
RSP: 002b:00007ffc9ac758a0 EFLAGS: 00010246
RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b32264000
RDX: 0000001b32224000 RSI: 0000000000400000 RDI: 00007f9f7af0c708
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc9ac75b30
 </TASK>
INFO: task syz.0.46:4472 blocked for more than 145 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.46        state:D stack:27696 pid: 4472 ppid:  4194 flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11c3/0x4350 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 io_schedule+0x7c/0xd0 kernel/sched/core.c:8503
 bit_wait_io+0xd/0xc0 kernel/sched/wait_bit.c:209
 __wait_on_bit kernel/sched/wait_bit.c:49 [inline]
 out_of_line_wait_on_bit+0x173/0x230 kernel/sched/wait_bit.c:64
 wait_on_bit_io include/linux/wait_bit.h:101 [inline]
 do_get_write_access+0x134/0xe40 fs/jbd2/transaction.c:1116
 jbd2_journal_get_write_access+0x108/0x140 fs/jbd2/transaction.c:1251
 __ext4_journal_get_write_access+0x24d/0x6e0 fs/ext4/ext4_jbd2.c:235
 ext4_reserve_inode_write+0x203/0x2e0 fs/ext4/inode.c:5866
 __ext4_mark_inode_dirty+0x13b/0x6c0 fs/ext4/inode.c:6050
 ext4_dirty_inode+0xbf/0x100 fs/ext4/inode.c:6087
 __mark_inode_dirty+0x2c8/0xc90 fs/fs-writeback.c:2480
 generic_update_time+0x1cd/0x1f0 fs/inode.c:1881
 inode_update_time fs/inode.c:1894 [inline]
 file_update_time+0x3c0/0x440 fs/inode.c:2083
 ext4_page_mkwrite+0x1bc/0x1250 fs/ext4/inode.c:6205
 do_page_mkwrite+0x168/0x3c0 mm/memory.c:2922
 do_shared_fault mm/memory.c:4328 [inline]
 do_fault mm/memory.c:4396 [inline]
 handle_pte_fault mm/memory.c:4650 [inline]
 __handle_mm_fault mm/memory.c:4785 [inline]
 handle_mm_fault+0x1e47/0x4440 mm/memory.c:4883
 do_user_addr_fault+0x494/0xc90 arch/x86/mm/fault.c:1355
 handle_page_fault arch/x86/mm/fault.c:1443 [inline]
 exc_page_fault+0x60/0x100 arch/x86/mm/fault.c:1496
 asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:606
RIP: 0033:0x7f3127356aa3
RSP: 002b:00007ffd4fefadd0 EFLAGS: 00010246
RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b32064000
RDX: 0000001b32024000 RSI: 0000000000400000 RDI: 00007f31276cb708
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd4fefb060
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/27:
 #0: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
2 locks held by getty/3943:
 #0: ffff88814d0f4098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:252
 #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 drivers/tty/n_tty.c:2158
3 locks held by syz-executor/4173:
 #0: ffff88807569ce28 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock+0x1c/0x50 include/linux/mmap_lock.h:117
 #1: ffff88807f0ce558 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs.h:1817 [inline]
 #1: ffff88807f0ce558 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs.h:1916 [inline]
 #1: ffff88807f0ce558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 fs/ext4/inode.c:6204
 #2: ffff88807f0d2990 (jbd2_handle){.+.+}-{0:0}, at: start_this_handle+0x12d5/0x1560 fs/jbd2/transaction.c:462
6 locks held by kworker/u4:10/4324:
 #0: ffff888141fb0138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 kernel/workqueue.c:-1
 #1: ffffc9000348fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 kernel/workqueue.c:2285
 #2: ffff88807f0ce0e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
 #3: ffff88807f0d0c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2d40 fs/ext4/inode.c:2691
 #4: ffff88807f0d2990 (jbd2_handle){.+.+}-{0:0}, at: start_this_handle+0x12d5/0x1560 fs/jbd2/transaction.c:462
 #5: ffff888074167020 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 fs/ext4/inode.c:668
1 lock held by syz.1.30/4392:
 #0: ffff888024d46460 (sb_writers#3){.+.+}-{0:0}, at: do_coredump+0x14c4/0x2a40 fs/coredump.c:893
1 lock held by syz.1.39/4435:
 #0: ffff888024d46460 (sb_writers#3){.+.+}-{0:0}, at: do_coredump+0x14c4/0x2a40 fs/coredump.c:893
3 locks held by syz.3.42/4461:
 #0: ffff88807b43dc28 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_trylock include/linux/mmap_lock.h:136 [inline]
 #0: ffff88807b43dc28 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 arch/x86/mm/fault.c:1296
 #1: ffff88807f0ce558 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs.h:1817 [inline]
 #1: ffff88807f0ce558 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs.h:1916 [inline]
 #1: ffff88807f0ce558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 fs/ext4/inode.c:6204
 #2: ffff88807f0d2990 (jbd2_handle){.+.+}-{0:0}, at: start_this_handle+0x12d5/0x1560 fs/jbd2/transaction.c:462
1 lock held by syz.2.43/4468:
 #0: ffff888025040460 (sb_writers#3){.+.+}-{0:0}, at: do_coredump+0x14c4/0x2a40 fs/coredump.c:893
3 locks held by syz.4.44/4470:
 #0: ffff8880792ee328 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_trylock include/linux/mmap_lock.h:136 [inline]
 #0: ffff8880792ee328 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 arch/x86/mm/fault.c:1296
 #1: ffff88807f0ce558 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs.h:1817 [inline]
 #1: ffff88807f0ce558 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs.h:1916 [inline]
 #1: ffff88807f0ce558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 fs/ext4/inode.c:6204
 #2: ffff88807f0d2990 (jbd2_handle){.+.+}-{0:0}, at: start_this_handle+0x12d5/0x1560 fs/jbd2/transaction.c:462
3 locks held by syz.2.45/4471:
 #0: ffff88807b43ce28 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_trylock include/linux/mmap_lock.h:136 [inline]
 #0: ffff88807b43ce28 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 arch/x86/mm/fault.c:1296
 #1: ffff88807f0ce558 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs.h:1817 [inline]
 #1: ffff88807f0ce558 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs.h:1916 [inline]
 #1: ffff88807f0ce558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 fs/ext4/inode.c:6204
 #2: ffff88807f0d2990 (jbd2_handle){.+.+}-{0:0}, at: start_this_handle+0x12d5/0x1560 fs/jbd2/transaction.c:462
3 locks held by syz.0.46/4472:
 #0: ffff88807b43c728 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_trylock include/linux/mmap_lock.h:136 [inline]
 #0: ffff88807b43c728 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 arch/x86/mm/fault.c:1296
 #1: ffff88807f0ce558 (sb_pagefaults){.+.+}-{0:0}, at: __sb_start_write include/linux/fs.h:1817 [inline]
 #1: ffff88807f0ce558 (sb_pagefaults){.+.+}-{0:0}, at: sb_start_pagefault include/linux/fs.h:1916 [inline]
 #1: ffff88807f0ce558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 fs/ext4/inode.c:6204
 #2: ffff88807f0d2990 (jbd2_handle){.+.+}-{0:0}, at: start_this_handle+0x12d5/0x1560 fs/jbd2/transaction.c:462

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 nmi_cpu_backtrace+0x3a2/0x3d0 lib/nmi_backtrace.c:111
 nmi_trigger_cpumask_backtrace+0x163/0x280 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:212 [inline]
 watchdog+0xe1b/0xe60 kernel/hung_task.c:369
 kthread+0x42e/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 4276 Comm: kworker/u4:8 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:arch_atomic_try_cmpxchg arch/x86/include/asm/atomic.h:202 [inline]
RIP: 0010:atomic_try_cmpxchg_acquire include/linux/atomic/atomic-instrumented.h:513 [inline]
RIP: 0010:queued_spin_lock include/asm-generic/qspinlock.h:82 [inline]
RIP: 0010:do_raw_spin_lock+0x135/0x2f0 kernel/locking/spinlock_debug.c:115
Code: df be 04 00 00 00 49 89 d6 e8 37 09 60 00 48 8d 7c 24 40 be 04 00 00 00 e8 28 09 60 00 8b 44 24 40 b9 01 00 00 00 f0 0f b1 0b <0f> 85 1c 01 00 00 43 c6 44 34 04 f8 65 8b 1d 60 d4 a3 7e 43 0f b6
RSP: 0018:ffffc900032cefe0 EFLAGS: 00000046
RAX: 0000000000000000 RBX: ffff8880b91280c0 RCX: 0000000000000001
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc900032cf020
RBP: ffffc900032cf090 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffff52000659e04 R12: 1ffff92000659e00
R13: ffff8880b91280c8 R14: dffffc0000000000 R15: 1ffff11017225019
FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000560401ace660 CR3: 000000002a42e000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:117 [inline]
 _raw_spin_lock_irqsave+0xbc/0x100 kernel/locking/spinlock.c:162
 lock_timer_base+0x123/0x270 kernel/time/timer.c:946
 __mod_timer+0xf9/0xd20 kernel/time/timer.c:1027
 queue_delayed_work_on+0x12d/0x1f0 kernel/workqueue.c:1715
 queue_delayed_work include/linux/workqueue.h:527 [inline]
 schedule_delayed_work include/linux/workqueue.h:631 [inline]
 kvfree_call_rcu+0x4d6/0x7f0 kernel/rcu/tree.c:3629
 cfg80211_update_known_bss+0x184/0xb60 net/wireless/scan.c:-1
 cfg80211_bss_update+0x156/0x21a0 net/wireless/scan.c:1830
 cfg80211_inform_single_bss_frame_data net/wireless/scan.c:2552 [inline]
 cfg80211_inform_bss_frame_data+0x88d/0x1ed0 net/wireless/scan.c:2585
 ieee80211_bss_info_update+0x6ba/0xa80 net/mac80211/scan.c:190
 ieee80211_rx_bss_info net/mac80211/ibss.c:1123 [inline]
 ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1614 [inline]
 ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 net/mac80211/ibss.c:1643
 ieee80211_iface_process_skb net/mac80211/iface.c:1465 [inline]
 ieee80211_iface_work+0x714/0xc50 net/mac80211/iface.c:1519
 cfg80211_wiphy_work+0x224/0x260 net/wireless/core.c:433
 process_one_work+0x867/0xff0 kernel/workqueue.c:2310
 worker_thread+0xad7/0x12a0 kernel/workqueue.c:2457
 kthread+0x42e/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>

Crashes (69):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/27 18:55 linux-5.15.y 0248c33e835e a3c7249d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/09/26 22:39 linux-5.15.y 0248c33e835e a3c7249d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/09/20 22:51 linux-5.15.y 0248c33e835e 853b104b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/09/10 16:03 linux-5.15.y 0996e0926f6b 1fe56c0a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/09/09 19:39 linux-5.15.y 0996e0926f6b 4e8b1cc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/09/09 06:55 linux-5.15.y 0996e0926f6b 8387c273 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/09/08 17:15 linux-5.15.y 0996e0926f6b 243b72f1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/09/08 09:59 linux-5.15.y 0996e0926f6b 680aa3e1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/09/07 20:05 linux-5.15.y 0996e0926f6b 680aa3e1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/09/07 13:56 linux-5.15.y 0996e0926f6b 680aa3e1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/09/05 08:22 linux-5.15.y 0996e0926f6b 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/09/03 02:26 linux-5.15.y 0996e0926f6b 85995287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/09/02 02:40 linux-5.15.y 28c35638ec51 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/09/01 20:10 linux-5.15.y 28c35638ec51 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/28 13:20 linux-5.15.y 28c35638ec51 e2fa417d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/27 19:44 linux-5.15.y 4a1eaf96ee5c 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/27 02:02 linux-5.15.y 945fa863f02c a2b77b9e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/24 14:36 linux-5.15.y 945fa863f02c b55bd4c3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/23 17:34 linux-5.15.y 945fa863f02c 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/23 17:32 linux-5.15.y 945fa863f02c 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/23 05:05 linux-5.15.y 0eb903b5b519 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/22 20:13 linux-5.15.y 0eb903b5b519 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/22 13:31 linux-5.15.y 0eb903b5b519 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/21 06:43 linux-5.15.y 0eb903b5b519 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/21 06:43 linux-5.15.y 0eb903b5b519 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/19 19:04 linux-5.15.y 0eb903b5b519 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/19 19:03 linux-5.15.y 0eb903b5b519 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/18 02:28 linux-5.15.y aabd761612db 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/16 20:35 linux-5.15.y aabd761612db 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/15 02:44 linux-5.15.y aabd761612db 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/15 02:44 linux-5.15.y aabd761612db 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/15 02:44 linux-5.15.y aabd761612db 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/14 14:19 linux-5.15.y aabd761612db 6f9b3e89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/14 14:19 linux-5.15.y aabd761612db 6f9b3e89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/14 14:18 linux-5.15.y aabd761612db 6f9b3e89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/13 20:45 linux-5.15.y aabd761612db b13552fe .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/13 20:44 linux-5.15.y aabd761612db b13552fe .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/12 20:59 linux-5.15.y aabd761612db 359b2492 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/12 20:59 linux-5.15.y aabd761612db 359b2492 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/12 09:34 linux-5.15.y aabd761612db f8d35649 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/12 04:30 linux-5.15.y aabd761612db f8d35649 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/12 04:30 linux-5.15.y aabd761612db f8d35649 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/10 22:04 linux-5.15.y aabd761612db 508909ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/09 18:29 linux-5.15.y aabd761612db 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/09 13:19 linux-5.15.y aabd761612db 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/08 11:09 linux-5.15.y aabd761612db 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/08 06:29 linux-5.15.y aabd761612db 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/08 06:27 linux-5.15.y aabd761612db 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/07 12:37 linux-5.15.y aabd761612db e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/07 12:37 linux-5.15.y aabd761612db e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/07 12:37 linux-5.15.y aabd761612db e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/07 09:30 linux-5.15.y aabd761612db c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/07 04:05 linux-5.15.y 9c7634c60784 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/06 20:25 linux-5.15.y 9c7634c60784 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/06 16:47 linux-5.15.y 6e2fd6534337 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/06 16:47 linux-5.15.y 6e2fd6534337 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/05 21:10 linux-5.15.y 6e2fd6534337 cd5b1963 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
2026/08/05 05:38 linux-5.15.y 6e2fd6534337 52aa2820 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in jbd2_journal_commit_transaction
* Struck through repros no longer work on HEAD.