WARNING in f2fs_rename2

Status: upstream: reported C repro on 2025/12/22 13:22
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+bbc70371727b60dcc014@syzkaller.appspotmail.com
First crash: 215d, last: 2h15m
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Bug presence (2)
Date Name Commit Repro Result
2025/12/23 linux-6.1.y (ToT) 50cbba13faa2 C [report] WARNING in f2fs_rename2
2025/12/23 upstream (ToT) b927546677c8 C Didn't crash
▶ ▼ Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in f2fs_rename2 f2fs -1 C done 66 489d 607d 0/29 closed as dup on 2025/02/11 07:37
linux-5.15 WARNING in f2fs_rename2 missing-backport origin:upstream -1 C error 3 8d21h 561d 0/3 upstream: reported C repro on 2025/01/10 15:28
linux-6.6 WARNING in f2fs_rename2 origin:lts-only -1 C error 4 119d 148d 0/2 upstream: reported C repro on 2026/02/27 08:52
upstream WARNING in f2fs_rename2 (2) f2fs -1 C 5 272d 285d 29/29 fixed on 2026/01/07 12:29
▶ ▼ Fix bisection attempts (5)
Created Duration User Patch Repo Result
2026/05/17 12:35 34m fix candidate upstream error job log
2026/03/27 15:07 1m fix candidate upstream error job log
2026/02/24 17:09 1m fix candidate upstream error job log
2026/01/23 19:30 1m fix candidate upstream error job log
2026/01/22 22:13 0m bisect fix linux-6.1.y error job log

Sample crash report:
F2FS-fs (loop0): Found nat_bits in checkpoint
F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
F2FS-fs (loop0): Corrupted max_depth of 3: 16842753
------------[ cut here ]------------
WARNING: CPU: 0 PID: 4498 at fs/inode.c:332 drop_nlink+0xe4/0x134 fs/inode.c:332
Modules linked in:
CPU: 0 PID: 4498 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : drop_nlink+0xe4/0x134 fs/inode.c:332
lr : drop_nlink+0xe4/0x134 fs/inode.c:332
sp : ffff800020df77c0
x29: ffff800020df77c0 x28: ffff0000c413e03f x27: ffff0000f3011238
x26: ffff0000c06508d0 x25: ffff0000f3011b18 x24: 0000000000008000
x23: 1fffe0001e60248d x22: ffff0000f3012468 x21: dfff800000000000
x20: 0000000000000000 x19: ffff0000f3012420 x18: 0000000000000000
x17: ffff80000a5175d4 x16: ffff8000082d86b8 x15: 000000000004ffff
x14: 0000000000000001 x13: 1fffe0001e60251b x12: 0000000000000000
x11: ff00800008a1b38c x10: 0000000000000000 x9 : ffff800008a1b38c
x8 : ffff0000d1be1c00 x7 : ffff80000a2c322c x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082d88b0
x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 drop_nlink+0xe4/0x134 fs/inode.c:332
 f2fs_i_links_write fs/f2fs/f2fs.h:3058 [inline]
 f2fs_rename fs/f2fs/namei.c:992 [inline]
 f2fs_rename2+0x1228/0x1c88 fs/f2fs/namei.c:1267
 vfs_rename+0xb08/0xe3c fs/namei.c:4882
 do_renameat2+0x760/0xaa4 fs/namei.c:5035
 __do_sys_renameat2 fs/namei.c:5068 [inline]
 __se_sys_renameat2 fs/namei.c:5065 [inline]
 __arm64_sys_renameat2+0xe8/0x104 fs/namei.c:5065
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 272604
hardirqs last  enabled at (272603): [<ffff8000083cceb0>] seqcount_lockdep_reader_access include/linux/seqlock.h:104 [inline]
hardirqs last  enabled at (272603): [<ffff8000083cceb0>] ktime_get_coarse_real_ts64+0x114/0x244 kernel/time/timekeeping.c:2261
hardirqs last disabled at (272604): [<ffff800011b3a55c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (272446): [<ffff800008031254>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (272444): [<ffff800008031220>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---

Crashes (15):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/06/29 05:58 linux-6.1.y fdb6fcb41cc7 fb92f11c .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2025/12/22 14:46 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2025/12/22 14:04 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2026/03/28 09:20 linux-6.1.y 1989cd3d56e2 356bdfc9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in f2fs_rename2
2026/03/28 09:19 linux-6.1.y 1989cd3d56e2 356bdfc9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in f2fs_rename2
2026/02/15 03:03 linux-6.1.y 8ce36b2849ef 1e62d198 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in f2fs_rename2
2026/07/26 03:59 linux-6.1.y dc5c83b7f5f8 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2026/07/26 03:57 linux-6.1.y dc5c83b7f5f8 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2026/07/15 14:45 linux-6.1.y 090666d3cc90 a4ed0f4f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2026/07/15 14:45 linux-6.1.y 090666d3cc90 a4ed0f4f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2026/06/29 05:49 linux-6.1.y fdb6fcb41cc7 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2026/06/29 05:49 linux-6.1.y fdb6fcb41cc7 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2026/06/29 05:29 linux-6.1.y fdb6fcb41cc7 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2026/06/29 05:28 linux-6.1.y fdb6fcb41cc7 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
2025/12/22 13:22 linux-6.1.y 50cbba13faa2 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in f2fs_rename2
* Struck through repros no longer work on HEAD.