kernel BUG in flush_commit_list

Status: upstream: reported C repro on 2026/05/24 00:29
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+c81ade0ddf881df1bccc@syzkaller.appspotmail.com
First crash: 107d, last: 4d06h
▶ ▼ Bug presence (2)
Date Name Commit Repro Result
2026/09/03 linux-6.1.y (ToT) cf82dcca9634 C [report] kernel BUG in flush_commit_list
2026/09/03 upstream (ToT) a500db7819c5 C Didn't crash
▶ ▼ Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 kernel BUG in flush_commit_list -1 1 855d 855d 0/3 auto-obsoleted due to no activity on 2024/08/13 19:18
upstream kernel BUG in flush_commit_list fs -1 2 1107d 1167d 0/29 auto-obsoleted due to no activity on 2023/12/05 13:22
upstream kernel BUG in flush_commit_list (2) fs -1 1 997d 993d 0/29 auto-obsoleted due to no activity on 2024/03/24 18:04
▶ ▼ Fix bisection attempts (2)
Created Duration User Patch Repo Result
2026/08/04 20:35 2h42m bisect fix linux-6.1.y OK (0) job log log
2026/07/05 03:15 3h14m bisect fix linux-6.1.y OK (0) job log log

Sample crash report:
------------[ cut here ]------------
kernel BUG at fs/reiserfs/journal.c:1108!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 4434 Comm: syz-executor Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : flush_commit_list+0x1844/0x1870 fs/reiserfs/journal.c:1108
lr : flush_commit_list+0x1844/0x1870 fs/reiserfs/journal.c:1108
sp : ffff800021297360
x29: ffff800021297400 x28: dfff800000000000 x27: ffff0000d101f400
x26: ffff0000ceb00678 x25: 1fffe00019d60003 x24: 00000000ffffffff
x23: ffff0000e0692d98 x22: ffff0000ceb00000 x21: ffff0000d101f4d0
x20: 0000000000000013 x19: 1fffe0001a203e9a x18: ffff800011b9bf60
x17: 1fffe00033eaa57e x16: ffff8000082d122c x15: 0000000040000000
x14: 0000000000000001 x13: 1fffe0001a203e83 x12: 0000000000ff0100
x11: ff00800008cf4018 x10: 0000000000000000 x9 : ffff800008cf4018
x8 : ffff0000ccd03780 x7 : ffff800008d01e14 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800008cf3548
x2 : 0000000000000000 x1 : 0000000000000002 x0 : 0000000000000000
Call trace:
 flush_commit_list+0x1844/0x1870 fs/reiserfs/journal.c:1108
 flush_older_commits fs/reiserfs/journal.c:919 [inline]
 flush_commit_list+0x368/0x1870 fs/reiserfs/journal.c:997
 do_journal_end+0x3060/0x3bac fs/reiserfs/journal.c:4376
 journal_end_sync+0x164/0x1d0 fs/reiserfs/journal.c:3539
 reiserfs_sync_fs+0xe0/0x170 fs/reiserfs/super.c:78
 sync_filesystem+0x1a0/0x218 fs/sync.c:66
 generic_shutdown_super+0x70/0x324 fs/super.c:474
 kill_block_super+0x70/0xdc fs/super.c:1470
 reiserfs_kill_sb+0x124/0x13c fs/reiserfs/super.c:570
 deactivate_locked_super+0xac/0x120 fs/super.c:332
 deactivate_super+0xe4/0x104 fs/super.c:363
 cleanup_mnt+0x390/0x418 fs/namespace.c:1191
 __cleanup_mnt+0x20/0x30 fs/namespace.c:1198
 task_work_run+0x1ec/0x278 kernel/task_work.c:203
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x1fa0/0x2aa4 arch/arm64/kernel/signal.c:1151
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0x98/0x128 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: aa1403e0 97efce18 17ffffc1 97deddc8 (d4210000) 
---[ end trace 0000000000000000 ]---

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/24 17:27 linux-6.1.y dcbcab9d7079 c69befb3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-6-1-kasan-arm64 kernel BUG in flush_commit_list
2026/06/03 16:04 linux-6.1.y 228da13e907e 234057e5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in flush_commit_list
2026/05/29 15:22 linux-6.1.y dcbcab9d7079 6b4a8443 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in flush_commit_list
2026/05/24 16:40 linux-6.1.y dcbcab9d7079 c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in flush_commit_list
2026/05/24 12:59 linux-6.1.y dcbcab9d7079 c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in flush_commit_list
2026/05/24 00:29 linux-6.1.y dcbcab9d7079 c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in flush_commit_list
* Struck through repros no longer work on HEAD.