WARNING in f2fs_rename2

Status: upstream: reported C repro on 2025/12/22 13:22
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+bbc70371727b60dcc014@syzkaller.appspotmail.com
First crash: 297d, last: 26d
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Bug presence (2)
Date Name Commit Repro Result
2025/12/23 linux-6.1.y (ToT) 50cbba13faa2 C [report] WARNING in f2fs_rename2
2025/12/23 upstream (ToT) b927546677c8 C Didn't crash
▶ ▼ Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in f2fs_rename2 f2fs -1 syz, C done 66 571d 689d 0/29 closed as dup on 2025/02/11 07:37
linux-5.15 WARNING in f2fs_rename2 missing-backport origin:upstream -1 syz, C error 3 14d 643d 0/3 upstream: reported C repro on 2025/01/10 15:28
linux-6.6 WARNING in f2fs_rename2 origin:lts-only -1 syz, C done 4 201d 230d 0/2 upstream: reported C repro on 2026/02/27 08:52
upstream WARNING in f2fs_rename2 (2) f2fs -1 syz, C 5 354d 367d 29/29 fixed on 2026/01/07 12:29
▶ ▼ Fix bisection attempts (5)
Created Duration User Patch Repo Result
2026/05/17 12:35 34m fix candidate upstream error job log
2026/03/27 15:07 1m fix candidate upstream error job log
2026/02/24 17:09 1m fix candidate upstream error job log
2026/01/23 19:30 1m fix candidate upstream error job log
2026/01/22 22:13 0m bisect fix linux-6.1.y error job log

Sample crash report:
F2FS-fs (loop0): invalid crc value
F2FS-fs (loop0): Found nat_bits in checkpoint
F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
------------[ cut here ]------------
WARNING: CPU: 0 PID: 4516 at fs/inode.c:332 drop_nlink+0xe4/0x134 fs/inode.c:332
Modules linked in:
CPU: 0 PID: 4516 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : drop_nlink+0xe4/0x134 fs/inode.c:332
lr : drop_nlink+0xe4/0x134 fs/inode.c:332
sp : ffff8000210977c0
x29: ffff8000210977c0 x28: ffff0000cea8f04a x27: ffff0000f1ce1238
x26: ffff0000cf20eeb0 x25: ffff0000e52a0000 x24: 0000000000008000
x23: 1fffe0001ca5412a x22: ffff0000e52a0950 x21: dfff800000000000
x20: 0000000000000000 x19: ffff0000e52a0908 x18: 1fffe00033e6997e
x17: ffff8000153bd000 x16: ffff8000082d8a04 x15: 000000000004ffff
x14: 0000000000000001 x13: 1fffe0001ca541b8 x12: 0000000000000000
x11: ff00800008a1da5c x10: 0000000000000000 x9 : ffff800008a1da5c
x8 : ffff0000ccb01c00 x7 : 0000000000000000 x6 : 0000000000000000
x5 : ffff8000186c49b8 x4 : 0000000000000002 x3 : ffff8000082d8bfc
x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 drop_nlink+0xe4/0x134 fs/inode.c:332
 f2fs_i_links_write fs/f2fs/f2fs.h:3058 [inline]
 f2fs_rename fs/f2fs/namei.c:993 [inline]
 f2fs_rename2+0x1228/0x1c88 fs/f2fs/namei.c:1268
 vfs_rename+0xb08/0xe3c fs/namei.c:4925
 do_renameat2+0x760/0xaa4 fs/namei.c:5078
 __do_sys_renameat2 fs/namei.c:5111 [inline]
 __se_sys_renameat2 fs/namei.c:5108 [inline]
 __arm64_sys_renameat2+0xe8/0x104 fs/namei.c:5108
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 273424
hardirqs last  enabled at (273423): [<ffff8000083cd2b0>] seqcount_lockdep_reader_access include/linux/seqlock.h:104 [inline]
hardirqs last  enabled at (273423): [<ffff8000083cd2b0>] ktime_get_coarse_real_ts64+0x114/0x244 kernel/time/timekeeping.c:2267
hardirqs last disabled at (273424): [<ffff800011bb2834>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (273182): [<ffff800008031254>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (273180): [<ffff800008031220>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---

Crashes (19):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/19 16:50 linux-6.1.y 1a8763b93150 853b104b .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2026/09/19 13:20 linux-6.1.y 1a8763b93150 853b104b .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2026/09/19 12:55 linux-6.1.y 1a8763b93150 853b104b .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2026/06/29 05:58 linux-6.1.y fdb6fcb41cc7 fb92f11c .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2025/12/22 14:46 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2025/12/22 14:04 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2026/03/28 09:20 linux-6.1.y 1989cd3d56e2 356bdfc9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in f2fs_rename2
2026/03/28 09:19 linux-6.1.y 1989cd3d56e2 356bdfc9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in f2fs_rename2
2026/02/15 03:03 linux-6.1.y 8ce36b2849ef 1e62d198 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in f2fs_rename2
2026/08/11 02:07 linux-6.1.y e4f7d8be268e 508909ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2026/07/26 03:59 linux-6.1.y dc5c83b7f5f8 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2026/07/26 03:57 linux-6.1.y dc5c83b7f5f8 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2026/07/15 14:45 linux-6.1.y 090666d3cc90 a4ed0f4f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2026/07/15 14:45 linux-6.1.y 090666d3cc90 a4ed0f4f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2026/06/29 05:49 linux-6.1.y fdb6fcb41cc7 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2026/06/29 05:49 linux-6.1.y fdb6fcb41cc7 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2026/06/29 05:29 linux-6.1.y fdb6fcb41cc7 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2026/06/29 05:28 linux-6.1.y fdb6fcb41cc7 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2025/12/22 13:22 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
* Struck through repros no longer work on HEAD.