syzbot


WARNING in __jbd2_log_wait_for_space

Status: upstream: reported C repro on 2025/01/03 03:46
Subsystems: ocfs2 ext4
[Documentation on labels]
Reported-by: syzbot+04ae2c9e709a347f1a81@syzkaller.appspotmail.com
First crash: 394d, last: 70d
Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: WARNING in __jbd2_log_wait_for_space (log)
Repro: C syz .config
  
Fix bisection: fixed by (bisect log) :
commit 93ce0ff117b0c468961d7c296a03ad57e1e8da9f
Author: Deepanshu Kartikey <kartikey406@gmail.com>
Date: Thu Oct 30 15:30:03 2025 +0000

  ocfs2: validate cl_bpc in allocator inodes to prevent divide-by-zero

  
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [ext4?] [ocfs2?] WARNING in __jbd2_log_wait_for_space 0 (2) 2025/12/24 00:32
Last patch testing requests (10)
Created Duration User Patch Repo Result
2026/01/29 01:59 29m retest repro git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci error
2026/01/14 08:11 1h27m retest repro git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci OK log
2025/12/31 00:17 20m retest repro upstream OK log
2025/12/09 11:04 23m retest repro upstream OK log
2025/11/19 21:17 21m retest repro git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci report log
2025/11/19 21:17 30m retest repro git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci report log
2025/11/05 07:43 24m retest repro git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci report log
2025/10/21 23:34 14m retest repro upstream report log
2025/09/28 21:34 13m retest repro upstream report log
2025/08/27 06:45 19m retest repro git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci report log
Fix bisection attempts (5)
Created Duration User Patch Repo Result
2025/12/23 18:00 6h30m bisect fix upstream OK (1) job log
2025/07/20 02:28 1h42m bisect fix upstream OK (0) job log log
2025/06/02 18:35 2h15m bisect fix upstream OK (0) job log log
2025/05/01 12:38 4h08m bisect fix upstream OK (0) job log log
2025/03/05 12:24 1h46m bisect fix upstream OK (0) job log log

Sample crash report:
__jbd2_log_wait_for_space: needed 5461 blocks and only had 1246 space available
__jbd2_log_wait_for_space: no way to get more journal space in loop0-75
------------[ cut here ]------------
WARNING: CPU: 1 PID: 6419 at fs/jbd2/checkpoint.c:115 __jbd2_log_wait_for_space+0x400/0x5cc fs/jbd2/checkpoint.c:116
Modules linked in:
CPU: 1 UID: 0 PID: 6419 Comm: syz-executor202 Not tainted 6.13.0-rc3-syzkaller-g573067a5a685 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __jbd2_log_wait_for_space+0x400/0x5cc fs/jbd2/checkpoint.c:116
lr : __jbd2_log_wait_for_space+0x3f8/0x5cc fs/jbd2/checkpoint.c:112
sp : ffff8000a2506fe0
x29: ffff8000a25070e0 x28: 0000000000000000 x27: dfff800000000000
x26: ffff0000c5fc00b0 x25: ffff0000c5fc0190 x24: 0000000000000000
x23: ffff0000c5fc0690 x22: 0000000000001555 x21: ffff80008ef538c1
x20: 00000000000004de x19: ffff0000c5fc0000 x18: 0000000000000008
x17: 6c206e6920656361 x16: ffff800083275834 x15: 0000000000000001
x14: 1fffe00036700aea x13: 0000000000000000 x12: 0000000000000000
x11: 0000000000000001 x10: 0000000000ff0100 x9 : b8bdcb2c5f900500
x8 : b8bdcb2c5f900500 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff8000a2506738 x4 : ffff80008fa8f840 x3 : ffff80008073f2fc
x2 : 0000000000000001 x1 : 00000000fffffffb x0 : ffff0000c5fc0000
Call trace:
 __jbd2_log_wait_for_space+0x400/0x5cc fs/jbd2/checkpoint.c:116 (P)
 add_transaction_credits+0x868/0xbec fs/jbd2/transaction.c:283
 start_this_handle+0x574/0x11c4 fs/jbd2/transaction.c:407
 jbd2__journal_start+0x298/0x544 fs/jbd2/transaction.c:505
 jbd2_journal_start+0x3c/0x4c fs/jbd2/transaction.c:544
 ocfs2_start_trans+0x3d0/0x71c fs/ocfs2/journal.c:352
 ocfs2_shutdown_local_alloc+0x1d8/0x8d8 fs/ocfs2/localalloc.c:417
 ocfs2_dismount_volume+0x1f4/0x920 fs/ocfs2/super.c:1877
 ocfs2_put_super+0xec/0x368 fs/ocfs2/super.c:1608
 generic_shutdown_super+0x12c/0x2bc fs/super.c:642
 kill_block_super+0x44/0x90 fs/super.c:1710
 deactivate_locked_super+0xc4/0x12c fs/super.c:473
 deactivate_super+0xe0/0x100 fs/super.c:506
 cleanup_mnt+0x34c/0x3dc fs/namespace.c:1373
 __cleanup_mnt+0x20/0x30 fs/namespace.c:1380
 task_work_run+0x230/0x2e0 kernel/task_work.c:239
 exit_task_work include/linux/task_work.h:43 [inline]
 do_exit+0x4ec/0x1ad0 kernel/exit.c:938
 do_group_exit+0x194/0x22c kernel/exit.c:1087
 __do_sys_exit_group kernel/exit.c:1098 [inline]
 __se_sys_exit_group kernel/exit.c:1096 [inline]
 pid_child_should_wake+0x0/0x1dc kernel/exit.c:1096
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744
 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600
irq event stamp: 66566
hardirqs last  enabled at (66565): [<ffff8000804aab50>] __up_console_sem kernel/printk/printk.c:344 [inline]
hardirqs last  enabled at (66565): [<ffff8000804aab50>] __console_unlock+0x70/0xc4 kernel/printk/printk.c:2869
hardirqs last disabled at (66566): [<ffff80008b69c83c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488
softirqs last  enabled at (64790): [<ffff800080129934>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (64788): [<ffff800080129900>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---
Aborting journal on device loop0-75.
(syz-executor202,6419,1):ocfs2_start_trans:357 ERROR: status = -30
OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal
On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
OCFS2: File system is now read-only.
(syz-executor202,6419,1):ocfs2_shutdown_local_alloc:419 ERROR: status = -30
(syz-executor202,6419,1):ocfs2_journal_shutdown:1085 ERROR: status = -5
ocfs2: Unmounting device (7,0) on (node local)

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/12/30 05:11 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 573067a5a685 d3ccff63 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-gce-arm64 WARNING in __jbd2_log_wait_for_space
2024/12/30 04:43 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 573067a5a685 d3ccff63 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-gce-arm64 WARNING in __jbd2_log_wait_for_space
2025/01/04 18:32 upstream 63676eefb7a0 f3558dbf .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs WARNING in __jbd2_log_wait_for_space
2025/07/29 22:35 upstream 86aa72182095 ba28e0a8 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci-snapshot-upstream-root WARNING in __jbd2_log_wait_for_space
2024/12/30 04:15 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 573067a5a685 d3ccff63 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-gce-arm64 WARNING in __jbd2_log_wait_for_space
2024/12/30 03:40 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 573067a5a685 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in __jbd2_log_wait_for_space
* Struck through repros no longer work on HEAD.