syzbot


WARNING in f2fs_rename2

Status: upstream: reported C repro on 2025/12/22 13:22
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+bbc70371727b60dcc014@syzkaller.appspotmail.com
First crash: 38d, last: 36d
Fix bisection: failed (error log, bisect log)
  
Bug presence (2)
Date Name Commit Repro Result
2025/12/23 linux-6.1.y (ToT) 50cbba13faa2 C [report] WARNING in f2fs_rename2
2025/12/23 upstream (ToT) b927546677c8 C Didn't crash
Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in f2fs_rename2 f2fs -1 C done 66 312d 429d 0/29 closed as dup on 2025/02/11 07:37
linux-5.15 WARNING in f2fs_rename2 missing-backport origin:upstream -1 C error 3 14d 384d 0/3 upstream: reported C repro on 2025/01/10 15:28
upstream WARNING in f2fs_rename2 (2) f2fs -1 C 5 95d 107d 29/29 fixed on 2026/01/07 12:29
Fix bisection attempts (2)
Created Duration User Patch Repo Result
2026/01/23 19:30 1m fix candidate upstream error job log
2026/01/22 22:13 0m bisect fix linux-6.1.y error job log

Sample crash report:
F2FS-fs (loop0): Found nat_bits in checkpoint
F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4457 at fs/inode.c:332 drop_nlink+0xe4/0x138 fs/inode.c:332
Modules linked in:
CPU: 1 PID: 4457 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : drop_nlink+0xe4/0x138 fs/inode.c:332
lr : drop_nlink+0xe4/0x138 fs/inode.c:332
sp : ffff8000208c77a0
x29: ffff8000208c77a0 x28: 0000000000000000 x27: ffff0000ea54a380
x26: dfff800000000000 x25: ffff0000ea5491c0 x24: 0000000000008000
x23: 1fffe0001d4a9479 x22: dfff800000000000 x21: 0000000000000000
x20: ffff0000ea54a3c8 x19: ffff0000ea54a380 x18: ffff800011a5bd40
x17: ffff800018184000 x16: ffff8000082cf240 x15: ffff800017c65000
x14: ffff0000d1ad2658 x13: ffff0000d1ad2720 x12: 0000000000ff0100
x11: ff008000089fdec0 x10: 0000000000000000 x9 : ffff8000089fdec0
x8 : ffff0000d1ad1bc0 x7 : 0000000000000000 x6 : 0000000000000000
x5 : ffff8000183405c0 x4 : 0000000000000002 x3 : ffff8000082cf434
x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 drop_nlink+0xe4/0x138 fs/inode.c:332
 f2fs_i_links_write fs/f2fs/f2fs.h:3049 [inline]
 f2fs_rename fs/f2fs/namei.c:992 [inline]
 f2fs_rename2+0x11d4/0x1bd4 fs/f2fs/namei.c:1265
 vfs_rename+0x954/0xdcc fs/namei.c:4882
 do_renameat2+0x738/0xa54 fs/namei.c:5035
 __do_sys_renameat2 fs/namei.c:5068 [inline]
 __se_sys_renameat2 fs/namei.c:5065 [inline]
 __arm64_sys_renameat2+0xe0/0xfc fs/namei.c:5065
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 272836
hardirqs last  enabled at (272835): [<ffff8000083c0b24>] seqcount_lockdep_reader_access include/linux/seqlock.h:104 [inline]
hardirqs last  enabled at (272835): [<ffff8000083c0b24>] ktime_get_coarse_real_ts64+0x114/0x244 kernel/time/timekeeping.c:2261
hardirqs last disabled at (272836): [<ffff8000118fa220>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (272608): [<ffff8000080309e0>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (272606): [<ffff8000080309ac>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/12/22 14:46 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2025/12/22 14:04 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2025/12/22 13:22 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
* Struck through repros no longer work on HEAD.