WARNING in nilfs_btree_mark

Status: auto-obsoleted due to no activity on 2026/09/11 06:00
Reported-by: syzbot+7129cc66ef0a7ca362fc@syzkaller.appspotmail.com
First crash: 170d, last: 116d
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Bug presence (1)
Date Name Commit Repro Result
2026/09/11 upstream (ToT) 08df884136f1 C Didn't crash
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 WARNING in nilfs_btree_mark origin:upstream -1 syz, C error 4 134d 163d 0/3 auto-obsoleted due to no activity on 2026/08/19 13:34
upstream WARNING in nilfs_btree_mark nilfs -1 syz, C error 9 159d 185d 29/29 fixed on 2026/05/21 07:50

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4830 at fs/nilfs2/btree.c:2348 nilfs_btree_mark+0x1b4/0x1f8 fs/nilfs2/btree.c:2348
Modules linked in:
CPU: 1 PID: 4830 Comm: syz.2.128 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : nilfs_btree_mark+0x1b4/0x1f8 fs/nilfs2/btree.c:2348
lr : nilfs_btree_mark+0x1b4/0x1f8 fs/nilfs2/btree.c:2348
sp : ffff800021877550
x29: ffff800021877570 x28: dfff800000000000 x27: 0000000000000000
x26: ffff800020e8e048 x25: 1fffe0001c3f3dbb x24: dfff800000000000
x23: ffff800011f54f60 x22: 0000000000000008 x21: ffff0000e1f9ed00
x20: 00000000fffffffe x19: ffff0000f75bda00 x18: 0000000000000000
x17: ffff80001835b000 x16: ffff8000082d93d8 x15: ffff8000089f04f8
x14: 0000000000000004 x13: 1fffe0001eeb7c0f x12: 0000000000080000
x11: 0000000000006a50 x10: ffff80002822a000 x9 : ffff800009c5e964
x8 : 0000000000006a51 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000000 x4 : 0000000000000009 x3 : ffff800021877558
x2 : 0000000000000001 x1 : 00000000fffffffe x0 : 00000000fffffffe
Call trace:
 nilfs_btree_mark+0x1b4/0x1f8 fs/nilfs2/btree.c:2348
 nilfs_bmap_mark+0xb8/0x17c fs/nilfs2/bmap.c:420
 nilfs_ioctl_mark_blocks_dirty fs/nilfs2/ioctl.c:779 [inline]
 nilfs_ioctl_prepare_clean_segments+0x3ac/0x730 fs/nilfs2/ioctl.c:814
 nilfs_clean_segments+0x148/0x870 fs/nilfs2/segment.c:2516
 nilfs_ioctl_clean_segments fs/nilfs2/ioctl.c:940 [inline]
 nilfs_ioctl+0x22c0/0x2660 fs/nilfs2/ioctl.c:1304
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:870 [inline]
 __se_sys_ioctl fs/ioctl.c:856 [inline]
 __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:856
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 13030
hardirqs last  enabled at (13029): [<ffff800011b24364>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline]
hardirqs last  enabled at (13029): [<ffff800011b24364>] _raw_spin_unlock_irqrestore+0x48/0xac kernel/locking/spinlock.c:194
hardirqs last disabled at (13030): [<ffff800011a39234>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (12962): [<ffff800008030954>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (12960): [<ffff800008030920>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 4830 at fs/nilfs2/ioctl.c:782 nilfs_ioctl_mark_blocks_dirty fs/nilfs2/ioctl.c:782 [inline]
WARNING: CPU: 0 PID: 4830 at fs/nilfs2/ioctl.c:782 nilfs_ioctl_prepare_clean_segments+0x6bc/0x730 fs/nilfs2/ioctl.c:814
Modules linked in:
CPU: 0 PID: 4830 Comm: syz.2.128 Tainted: G        W          syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : nilfs_ioctl_mark_blocks_dirty fs/nilfs2/ioctl.c:782 [inline]
pc : nilfs_ioctl_prepare_clean_segments+0x6bc/0x730 fs/nilfs2/ioctl.c:814
lr : nilfs_ioctl_mark_blocks_dirty fs/nilfs2/ioctl.c:782 [inline]
lr : nilfs_ioctl_prepare_clean_segments+0x6bc/0x730 fs/nilfs2/ioctl.c:814
sp : ffff800021877600
x29: ffff8000218776a0 x28: dfff800000000000 x27: 0000000000000000
x26: ffff800020e8e048 x25: ffff800020e8e040 x24: 00000000fffffffe
x23: 1ffff000041d1c08 x22: 1ffff000041d1c07 x21: ffff800020e8e028
x20: ffff0000f6a752c8 x19: 0000000000000002 x18: 0000000000000000
x17: ffff80001835b000 x16: ffff8000082d93d8 x15: ffff8000089f04f8
x14: 0000000000000001 x13: 1fffe0001c3f3da7 x12: 0000000000080000
x11: 000000000007ffff x10: ffff80002822a000 x9 : ffff800009c9d280
x8 : 0000000000080000 x7 : ffff80000805983c x6 : ffff800008059a4c
x5 : ffff0000cb176ab0 x4 : ffff800021877238 x3 : ffff8000082d28c4
x2 : 0000000000000001 x1 : 00000000fffffffe x0 : 00000000fffffffe
Call trace:
 nilfs_ioctl_mark_blocks_dirty fs/nilfs2/ioctl.c:782 [inline]
 nilfs_ioctl_prepare_clean_segments+0x6bc/0x730 fs/nilfs2/ioctl.c:814
 nilfs_clean_segments+0x148/0x870 fs/nilfs2/segment.c:2516
 nilfs_ioctl_clean_segments fs/nilfs2/ioctl.c:940 [inline]
 nilfs_ioctl+0x22c0/0x2660 fs/nilfs2/ioctl.c:1304
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:870 [inline]
 __se_sys_ioctl fs/ioctl.c:856 [inline]
 __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:856
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 13366
hardirqs last  enabled at (13365): [<ffff8000088e8460>] kasan_quarantine_put+0xc4/0x200 mm/kasan/quarantine.c:242
hardirqs last disabled at (13366): [<ffff800011a39234>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (13352): [<ffff8000081ac410>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (13352): [<ffff8000081ac410>] handle_softirqs+0xaec/0xc60 kernel/softirq.c:624
softirqs last disabled at (13033): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---
NILFS (loop2): error -2 preparing GC: cannot mark copying blocks dirty

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/27 06:11 linux-6.1.y dcbcab9d7079 2b01f00e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nilfs_btree_mark
2026/04/03 21:22 linux-6.1.y 1989cd3d56e2 4440e7c2 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 WARNING in nilfs_btree_mark
2026/04/03 20:58 linux-6.1.y 1989cd3d56e2 4440e7c2 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-1-kasan-arm64 WARNING in nilfs_btree_mark
2026/04/03 20:30 linux-6.1.y 1989cd3d56e2 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nilfs_btree_mark
2026/04/03 20:30 linux-6.1.y 1989cd3d56e2 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nilfs_btree_mark
* Struck through repros no longer work on HEAD.