ci2 starts bisection 2026-07-27 01:58:52.360017381 +0000 UTC m=+174391.909014124 bisecting fixing commit since 7a137e9bfa0e1919555d60f9dc0c05a7a5ba75d0 building syzkaller on a2f13f719e073f5891395e8e7374ba6640614a66 ensuring issue is reproducible on original commit 7a137e9bfa0e1919555d60f9dc0c05a7a5ba75d0 testing commit 7a137e9bfa0e1919555d60f9dc0c05a7a5ba75d0 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 6170ec267dfc1a4be15effef1897b22cb2390dc08418d9e9b88d6ca03bd42a17 all runs: crashed: WARNING in f2fs_rename2 representative crash: WARNING in f2fs_rename2, types: [WARNING] check whether we can drop unnecessary instrumentation disabling configs for [ubsan kasan locking atomic_sleep hang memleak], they are not needed testing commit 7a137e9bfa0e1919555d60f9dc0c05a7a5ba75d0 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 67a1229318f9bd9f3f65dcbd55068d90035edee62dd99ebe07751af1a1f5ab3a all runs: crashed: WARNING in f2fs_rename2 representative crash: WARNING in f2fs_rename2, types: [WARNING] the bug reproduces without the instrumentation disabling configs for [ubsan kasan locking atomic_sleep hang memleak], they are not needed kconfig minimization: base=3913 full=7801 leaves diff=2159 split chunks (needed=false): <2159> split chunk #0 of len 2159 into 5 parts testing without sub-chunk 1/5 disabling configs for [locking atomic_sleep hang memleak ubsan kasan], they are not needed testing commit 7a137e9bfa0e1919555d60f9dc0c05a7a5ba75d0 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 1b577ef71e0e4950c60c0dde1204237efc8c04987a9c43b70825a9e9fc5719ba all runs: crashed: WARNING in f2fs_rename2 representative crash: WARNING in f2fs_rename2, types: [WARNING] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [locking atomic_sleep hang memleak ubsan kasan], they are not needed testing commit 7a137e9bfa0e1919555d60f9dc0c05a7a5ba75d0 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: ab46e3a8c2195d025bce3bc4e374e43506bf94bfe31611b5144c13479e3ead2f all runs: OK false negative chance: 0.000 testing without sub-chunk 3/5 disabling configs for [kasan locking atomic_sleep hang memleak ubsan], they are not needed testing commit 7a137e9bfa0e1919555d60f9dc0c05a7a5ba75d0 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 69e4130371845fc7f8600048b2ba9c5e6085c95e529aa988c55cfdccf35eab96 all runs: crashed: WARNING in f2fs_rename2 representative crash: WARNING in f2fs_rename2, types: [WARNING] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [hang memleak ubsan kasan locking atomic_sleep], they are not needed testing commit 7a137e9bfa0e1919555d60f9dc0c05a7a5ba75d0 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 268859c36b5b40663c79a9f29762baedf2a470ff3c4ba62441eb16d4e3560706 all runs: crashed: WARNING in f2fs_rename2 representative crash: WARNING in f2fs_rename2, types: [WARNING] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [kasan locking atomic_sleep hang memleak ubsan], they are not needed testing commit 7a137e9bfa0e1919555d60f9dc0c05a7a5ba75d0 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: e7be62dcb8091a1e7726f70dd368f734731f729926365084163c31858cd430d2 all runs: crashed: WARNING in f2fs_rename2 representative crash: WARNING in f2fs_rename2, types: [WARNING] the chunk can be dropped minimized to 432 configs; suspects: [6LOWPAN ARCH_ENABLE_MEMORY_HOTREMOVE ASUS_WMI BLK_DEV_ZONED CHARGER_BQ24190 CMA COMMON_CLK DAX DLM DLN2_ADC DMABUF_HEAPS DMABUF_HEAPS_CMA DMABUF_HEAPS_SYSTEM DMABUF_MOVE_NOTIFY DMA_CMA DMA_ENGINE_RAID DM_AUDIT DM_BIO_PRISON DM_BUFIO DM_CACHE DM_CACHE_SMQ DM_CLONE DM_CRYPT DM_FLAKEY DM_INTEGRITY DM_MULTIPATH DM_MULTIPATH_QL DM_MULTIPATH_ST DM_PERSISTENT_DATA DM_RAID DM_SNAPSHOT DM_THIN_PROVISIONING DM_UEVENT DM_VERITY DM_VERITY_FEC DM_WRITECACHE DM_ZONED DRAGONRISE_FF DRM DRM_BOCHS DRM_BRIDGE DRM_BUDDY DRM_CIRRUS_QEMU DRM_DEBUG_MM DRM_DISPLAY_DP_HELPER DRM_DISPLAY_HDCP_HELPER DRM_DISPLAY_HDMI_HELPER DRM_DISPLAY_HELPER DRM_DP_AUX_BUS DRM_DP_AUX_CHARDEV DRM_FBDEV_EMULATION DRM_GEM_SHMEM_HELPER DRM_GM12U320 DRM_GUD DRM_I915 DRM_I915_CAPTURE_ERROR DRM_I915_COMPRESS_ERROR DRM_I915_USERPTR DRM_KMS_HELPER DRM_MIPI_DSI DRM_PANEL DRM_PANEL_BRIDGE DRM_PANEL_EDP DRM_PANEL_ORIENTATION_QUIRKS DRM_SIMPLEDRM DRM_TTM DRM_TTM_HELPER DRM_UDL DRM_VGEM DRM_VIRTIO_GPU DRM_VIRTIO_GPU_KMS DRM_VKMS DRM_VMWGFX DRM_VRAM_HELPER DUMMY DVB_AF9013 DVB_AF9033 DVB_AS102 DVB_AS102_FE DVB_B2C2_FLEXCOP DVB_B2C2_FLEXCOP_USB DVB_CORE DVB_DIB3000MB DVB_DIB3000MC DVB_EC100 DVB_GP8PSK_FE DVB_RTL2830 DVB_RTL2832 DVB_RTL2832_SDR DVB_TEST_DRIVERS DVB_TTUSB_BUDGET DVB_TTUSB_DEC DVB_USB DVB_USB_A800 DVB_USB_AF9005 DVB_USB_AF9005_REMOTE DVB_USB_AF9015 DVB_USB_AF9035 DVB_USB_ANYSEE DVB_USB_AU6610 DVB_USB_AZ6007 DVB_USB_AZ6027 DVB_USB_CE6230 DVB_USB_CINERGY_T2 DVB_USB_CXUSB DVB_USB_CXUSB_ANALOG DVB_USB_DIB0700 DVB_USB_DIB3000MC DVB_USB_DIBUSB_MB DVB_USB_DIBUSB_MC DVB_USB_DIGITV DVB_USB_DTT200U DVB_USB_DTV5100 DVB_USB_DVBSKY DVB_USB_DW2102 DVB_USB_EC168 DVB_USB_GL861 DVB_USB_GP8PSK DVB_USB_LME2510 DVB_USB_M920X DVB_USB_MXL111SF DVB_USB_NOVA_T_USB2 DVB_USB_OPERA1 DVB_USB_PCTV452E DVB_USB_RTL28XXU DVB_USB_TECHNISAT_USB2 DVB_USB_TTUSB2 DVB_USB_UMT_010 DVB_USB_V2 DVB_USB_VP702X DVB_USB_VP7045 DVB_USB_ZD1301 DVB_VIDTV DVB_ZL10353 ECRYPT_FS ECRYPT_FS_MESSAGING EDAC EEPROM_93CX6 EFS_FS ENCRYPTED_KEYS EQUALIZER EROFS_FS EROFS_FS_POSIX_ACL EROFS_FS_SECURITY EROFS_FS_XATTR EROFS_FS_ZIP EVM EVM_ADD_XATTRS EVM_ATTR_FSUUID EXFAT_FS EXPORTFS_BLOCK_OPS EXT3_FS EXT3_FS_POSIX_ACL EXT3_FS_SECURITY EXTCON EXTCON_INTEL_CHT_WC EXTCON_PTN5150 EXTCON_USBC_TUSB320 F2FS_CHECK_FS F2FS_FAULT_INJECTION F2FS_FS F2FS_FS_COMPRESSION F2FS_FS_LZ4 F2FS_FS_LZ4HC F2FS_FS_LZO F2FS_FS_LZORLE F2FS_FS_POSIX_ACL F2FS_FS_SECURITY F2FS_FS_XATTR F2FS_FS_ZSTD F2FS_STAT_FS FANOTIFY FANOTIFY_ACCESS_PERMISSIONS FB FB_CFB_COPYAREA FB_CFB_FILLRECT FB_CFB_IMAGEBLIT FB_CORE FB_DEFERRED_IO FB_DEVICE FB_IOMEM_FOPS FB_IOMEM_HELPERS FB_NOTIFY FB_SYSMEM_HELPERS FB_SYSMEM_HELPERS_DEFERRED FB_SYS_COPYAREA FB_SYS_FILLRECT FB_SYS_FOPS FB_SYS_IMAGEBLIT FB_TILEBLITTING FB_VESA FB_VGA16 FB_VIRTUAL FDDI FIREWIRE FIREWIRE_NET FIREWIRE_OHCI FIREWIRE_SBP2 FONT_8x16 FONT_8x8 FONT_SUPPORT FRAMEBUFFER_CONSOLE FRAMEBUFFER_CONSOLE_DETECT_PRIMARY FRAMEBUFFER_CONSOLE_ROTATION FS_DAX FS_DAX_PMD FS_ENCRYPTION FS_ENCRYPTION_ALGS FS_VERITY FS_VERITY_BUILTIN_SIGNATURES FTL FUSE_DAX FUSE_FS FW_LOADER_COMPRESS FW_LOADER_PAGED_BUF FW_LOADER_SYSFS FW_LOADER_USER_HELPER FW_LOADER_USER_HELPER_FALLBACK GACT_PROB GARP GENERIC_PHY GET_FREE_REGION GFS2_FS GFS2_FS_LOCKING_DLM GNSS GNSS_USB GOOGLE_COREBOOT_TABLE GOOGLE_FIRMWARE GOOGLE_MEMCONSOLE GOOGLE_MEMCONSOLE_COREBOOT GOOGLE_VPD GPIOLIB GPIOLIB_IRQCHIP GPIO_ACPI GPIO_DLN2 GPIO_VIPERBOARD GREENASIA_FF GREYBUS GREYBUS_BRIDGED_PHY GREYBUS_ES2 GREYBUS_HID GREYBUS_USB GTP GUEST_PERF_EVENTS HAS_LTO_CLANG HAVE_ARCH_NODE_DEV_GROUP HAVE_ARCH_USERFAULTFD_MINOR HAVE_ARCH_USERFAULTFD_WP HAVE_BOOTMEM_INFO_NODE HAVE_CLK_PREPARE HAVE_KVM_CPU_RELAX_INTERCEPT HAVE_KVM_DIRTY_RING HAVE_KVM_DIRTY_RING_ACQ_REL HAVE_KVM_DIRTY_RING_TSO HAVE_KVM_EVENTFD HAVE_KVM_IRQCHIP HAVE_KVM_IRQFD HAVE_KVM_IRQ_BYPASS HAVE_KVM_IRQ_ROUTING HAVE_KVM_MSI HAVE_KVM_NO_POLL HAVE_KVM_PFNCACHE HAVE_KVM_PM_NOTIFIER HAVE_SCHED_AVG_IRQ HDLC HDLC_CISCO HDLC_FR HDLC_PPP HDLC_RAW HDLC_RAW_ETH HDLC_X25 HDMI HFSPLUS_FS HFS_FS HID_ACCUTOUCH HID_ACRUX HID_ACRUX_FF HID_ALPS HID_APPLEIR HID_ASUS HID_AUREAL HID_BATTERY_STRENGTH HID_BETOP_FF HID_BIGBEN_FF HID_CMEDIA HID_CORSAIR HID_COUGAR HID_CP2112 HID_CREATIVE_SB0540 HID_DRAGONRISE HID_ELAN HID_ELECOM HID_ELO HID_EMS_FF HID_EVISION HID_FT260 HID_GEMBIRD HID_GFRM HID_GLORIOUS HID_GOOGLE_STADIA_FF HID_GREENASIA HID_GT683R HID_HOLTEK HID_ICADE HID_JABRA HID_KEYTOUCH HID_KYE HID_LCPOWER HID_LED HID_LENOVO HID_LETSKETCH HID_LOGITECH_DJ HID_LOGITECH_HIDPP HID_MACALLY HID_MAGICMOUSE HID_MALTRON HID_MAYFLASH HID_MCP2200 HID_MCP2221 HID_MEGAWORLD_FF HID_MULTITOUCH HID_NTI HID_ORTEK HID_PENMOUNT HID_PICOLCD HID_PICOLCD_BACKLIGHT HID_PICOLCD_CIR HID_PICOLCD_FB HID_PICOLCD_LCD HID_PICOLCD_LEDS HID_PLANTRONICS HID_PRIMAX HID_PRODIKEYS HID_PXRC HID_RAZER HID_RETRODE HID_RMI HID_ROCCAT HID_SAITEK HID_SEMITEK HID_SENSOR_ACCEL_3D HID_SENSOR_ALS HID_SENSOR_CUSTOM_INTEL_HINGE HID_SENSOR_CUSTOM_SENSOR HID_SENSOR_DEVICE_ROTATION HID_SENSOR_GYRO_3D HID_SENSOR_HUB HID_SENSOR_HUMIDITY HID_SENSOR_IIO_COMMON HID_SENSOR_IIO_TRIGGER HID_SENSOR_INCLINOMETER_3D HID_SENSOR_MAGNETOMETER_3D HID_SENSOR_PRESS HID_SENSOR_PROX HID_SENSOR_TEMP HID_SIGMAMICRO HID_SPEEDLINK HID_STEELSERIES HID_THINGM HID_TIVO HID_TOPRE HID_TWINHAN HID_U2FZERO HID_UCLOGIC HID_UDRAW_PS3 HID_VIEWSONIC HID_VIVALDI HID_VIVALDI_COMMON HID_VRC2 HID_WACOM HID_WALTOP HID_WIIMOTE HID_XIAOMI HID_XINMO HID_ZYDACRON HMM_MIRROR HOLTEK_FF HOTPLUG_PCI_PCIE HPET_MMAP HPET_MMAP_DEFAULT HPFS_FS I2C_ALGOBIT I2C_CHARDEV I2C_CP2615 I2C_DESIGNWARE_CORE I2C_DESIGNWARE_PLATFORM I2C_DIOLAN_U2C I2C_DLN2 I2C_HID_ACPI I2C_HID_CORE I2C_HID_OF I2C_MUX I2C_MUX_REG I2C_ROBOTFUZZ_OSIF I2C_SI4713 I2C_SLAVE I2C_SLAVE_EEPROM I2C_TINY_USB I2C_VIPERBOARD IEEE802154 IEEE802154_6LOWPAN IEEE802154_ATUSB IEEE802154_DRIVERS IEEE802154_HWSIM IEEE802154_NL802154_EXPERIMENTAL IEEE802154_SOCKET IFB IIO IIO_BUFFER IIO_KFIFO_BUF IIO_TRIGGER IIO_TRIGGERED_BUFFER IKCONFIG IKCONFIG_PROC IMA IMA_APPRAISE IMA_APPRAISE_MODSIG IMA_DEFAULT_HASH_SHA256 IMA_LSM_RULES IMA_MEASURE_ASYMMETRIC_KEYS IMA_NG_TEMPLATE IMA_QUEUE_EARLY_BOOT_KEYS IMA_READ_POLICY IMA_WRITE_POLICY INET6_ESPINTCP INET6_ESP_OFFLOAD INET6_IPCOMP INET6_TUNNEL INET6_XFRM_TUNNEL INET_AH INET_DCCP_DIAG INET_DIAG INET_DIAG_DESTROY INET_ESP INET_ESPINTCP INET_ESP_OFFLOAD INET_IPCOMP INET_MPTCP_DIAG INET_RAW_DIAG INET_SCTP_DIAG INET_TCP_DIAG INET_UDP_DIAG INET_XFRM_TUNNEL INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_ADDR_TRANS_CONFIGFS INFINIBAND_IPOIB INFINIBAND_IPOIB_CM INFINIBAND_IPOIB_DEBUG INFINIBAND_ISER INFINIBAND_ON_DEMAND_PAGING INFINIBAND_RTRS INFINIBAND_SRP INFINIBAND_USER_ACCESS INFINIBAND_USER_MAD INFINIBAND_USER_MEM INPUT_ATI_REMOTE2 INPUT_CM109 INPUT_IMS_PCU INPUT_JOYDEV INPUT_KEYSPAN_REMOTE INPUT_LEDS INPUT_MOUSEDEV INPUT_MOUSEDEV_PSAUX INPUT_POWERMATE INPUT_UINPUT INPUT_YEALINK INTEGRITY INTEGRITY_ASYMMETRIC_KEYS INTEGRITY_AUDIT INTEGRITY_SIGNATURE INTEGRITY_TRUSTED_KEYRING INTEL_CHTWC_INT33FE INTEL_IDMA64 INTEL_IOATDMA INTEL_IOMMU_DEFAULT_ON INTEL_IOMMU_SVM INTEL_ISHTP_ECLITE INTEL_ISH_FIRMWARE_DOWNLOADER INTEL_ISH_HID INTEL_SOC_PMIC_CHTWC INTERVAL_TREE INTERVAL_TREE_SPAN_ITER IOMMUFD IOMMUFD_TEST IOMMU_SVA IP6_NF_MATCH_AH IP6_NF_MATCH_EUI64 IP6_NF_MATCH_FRAG IP6_NF_MATCH_HL IP6_NF_MATCH_MH IP6_NF_MATCH_OPTS IP6_NF_MATCH_RPFILTER IP6_NF_MATCH_RT IP6_NF_MATCH_SRH IP6_NF_NAT IP6_NF_RAW IP6_NF_SECURITY IP6_NF_TARGET_HL IP6_NF_TARGET_MASQUERADE IP6_NF_TARGET_NPT IP6_NF_TARGET_SYNPROXY IPV6_FOU IPV6_FOU_TUNNEL IPV6_GRE IPV6_ILA IPV6_MIP6 IPV6_MROUTE IPV6_MROUTE_MULTIPLE_TABLES IPV6_MULTIPLE_TABLES IPV6_OPTIMISTIC_DAD IPV6_PIMSM_V2 IPV6_ROUTER_PREF IPV6_ROUTE_INFO IPV6_RPL_LWTUNNEL IPV6_SEG6_BPF IPV6_SEG6_HMAC IPV6_SEG6_LWTUNNEL IPV6_SIT_6RD IPV6_SUBTREES IPV6_TUNNEL IPV6_VTI IPVLAN IPVLAN_L3S IPVTAP IP_DCCP IP_DCCP_CCID3 IP_DCCP_TFRC_LIB IP_FIB_TRIE_STATS IP_MROUTE_MULTIPLE_TABLES IP_NF_ARPFILTER IP_NF_ARPTABLES IP_NF_ARP_MANGLE IP_NF_MATCH_AH IP_NF_MATCH_ECN IP_SCTP IRQ_TIME_ACCOUNTING LAPB LCD_CLASS_DEVICE MAC802154 MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_TEST_SUPPORT MEDIA_USB_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_DLN2 MFD_VIPERBOARD MPTCP MTD NETFILTER_ADVANCED NET_ACT_GACT NET_ACT_MIRRED NET_IPGRE_DEMUX NFT_FWD_NETDEV NF_TABLES NF_TABLES_NETDEV RADIO_ADAPTERS RADIO_SI4713 RAS RC_CORE REGULATOR RFKILL SND SOUND STAGING TRANSPARENT_HUGEPAGE TRUSTED_KEYS TYPEC TYPEC_MUX_PI3USB30532 USB_ROLES_INTEL_XHCI USB_ROLE_SWITCH VIDEO_DEV VIRTIO_FS WAN ZONE_DEVICE] disabling configs for [hang memleak ubsan kasan locking atomic_sleep], they are not needed determining the merge base between 7a137e9bfa0e1919555d60f9dc0c05a7a5ba75d0 and f5098b6bae761e346ebcd9da7f95622c04733cff ffc253263a1375a65fa6c9f62a893e9767fbebfa/Linux 6.6 is a merge base, check if it has the bug testing commit ffc253263a1375a65fa6c9f62a893e9767fbebfa gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 64782be1080d6d97766f9a53b22543a4bfbd47de4a9115f8096d6f716381f268 all runs: crashed: WARNING in f2fs_rename2 representative crash: WARNING in f2fs_rename2, types: [WARNING] testing current HEAD f5098b6bae761e346ebcd9da7f95622c04733cff testing commit f5098b6bae761e346ebcd9da7f95622c04733cff gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 517f96cba1d3ff54723ed8165053b533bbab3fbf88d3403f8eb912a74d8a1fa8 all runs: OK false negative chance: 0.000 # git bisect start f5098b6bae761e346ebcd9da7f95622c04733cff ffc253263a1375a65fa6c9f62a893e9767fbebfa Bisecting: 123592 revisions left to test after this (roughly 17 steps) [d48b663f410f8b35b8ba9bd597bafaa00f53293b] arm64/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch() determine whether the revision contains the guilty commit revision ffc253263a1375a65fa6c9f62a893e9767fbebfa crashed and is reachable testing commit d48b663f410f8b35b8ba9bd597bafaa00f53293b gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: d904995c81b97dfbf777a83ddfba8249bd578075989746eb9352f794dd4d141f all runs: boot failed: BUG: unable to handle kernel NULL pointer dereference in msix_capability_init unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 # git bisect skip d48b663f410f8b35b8ba9bd597bafaa00f53293b Bisecting: 123592 revisions left to test after this (roughly 17 steps) [3371f569223c4e8d36edbb0ba789ee5f5cb7316f] arm/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch() determine whether the revision contains the guilty commit revision ffc253263a1375a65fa6c9f62a893e9767fbebfa crashed and is reachable testing commit 3371f569223c4e8d36edbb0ba789ee5f5cb7316f gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 1399bb64799041bfc2b926f9dd02cba97ea95490cfdf3040f6ceb413ac352b65 all runs: boot failed: BUG: unable to handle kernel NULL pointer dereference in msix_capability_init unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 # git bisect skip 3371f569223c4e8d36edbb0ba789ee5f5cb7316f Bisecting: 123592 revisions left to test after this (roughly 17 steps) [190113989ae01da7f5925877815a3ac75856d9ed] Merge branch 'bpf-specify-access-type-of-bpf_sysctl_get_name-args' determine whether the revision contains the guilty commit revision ffc253263a1375a65fa6c9f62a893e9767fbebfa crashed and is reachable testing commit 190113989ae01da7f5925877815a3ac75856d9ed gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 18a63262e743c2b7984412509cf9ae730b9364732f0f4dc697f0365eab2a6b03 all runs: OK false negative chance: 0.000 # git bisect bad 190113989ae01da7f5925877815a3ac75856d9ed Bisecting: 75154 revisions left to test after this (roughly 16 steps) [e4956dc7a84da074fd8dc10f7abd147f15b3ae58] io_uring/sqpoll: annotate debug task == current with data_race() determine whether the revision contains the guilty commit revision ffc253263a1375a65fa6c9f62a893e9767fbebfa crashed and is reachable testing commit e4956dc7a84da074fd8dc10f7abd147f15b3ae58 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 0be325fedb96082eb632d58009c4a60c6ff0054b01ffacbd7d236b774e10d5cb all runs: crashed: WARNING in f2fs_rename2 representative crash: WARNING in f2fs_rename2, types: [WARNING] # git bisect good e4956dc7a84da074fd8dc10f7abd147f15b3ae58 Bisecting: 37589 revisions left to test after this (roughly 15 steps) [df60eac9efe8be41cd30767ed001c04f478e0f4e] Merge tag 'for-linus-6.14-1' of https://github.com/cminyard/linux-ipmi determine whether the revision contains the guilty commit revision e4956dc7a84da074fd8dc10f7abd147f15b3ae58 crashed and is reachable testing commit df60eac9efe8be41cd30767ed001c04f478e0f4e gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 88070fbf57ceda6f4b4fed4cfc9691d901c4a5dbcf04cceaaa9a42aeb1c5aa6f all runs: crashed: WARNING in f2fs_rename2 representative crash: WARNING in f2fs_rename2, types: [WARNING] # git bisect good df60eac9efe8be41cd30767ed001c04f478e0f4e Bisecting: 18794 revisions left to test after this (roughly 14 steps) [f83e10a233059b74eaa2716e903b57464b3d3b0c] cifs: Remove cifs_truncate_page() as it should be superfluous determine whether the revision contains the guilty commit revision df60eac9efe8be41cd30767ed001c04f478e0f4e crashed and is reachable testing commit f83e10a233059b74eaa2716e903b57464b3d3b0c gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 222283bc47abd82f87825bea182691c990e7585c31ab7e697a74c423553ba5c8 all runs: OK false negative chance: 0.000 # git bisect bad f83e10a233059b74eaa2716e903b57464b3d3b0c Bisecting: 9417 revisions left to test after this (roughly 13 steps) [023b1e9d265ca0662111a9df23d22b4632717a8a] Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net determine whether the revision contains the guilty commit revision e4956dc7a84da074fd8dc10f7abd147f15b3ae58 crashed and is reachable testing commit 023b1e9d265ca0662111a9df23d22b4632717a8a gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 55c1b15b157d5962b6d56dea0bac73bf2d6d56e680991dbda1594e5b8cb36d1f all runs: crashed: WARNING in f2fs_rename2 representative crash: WARNING in f2fs_rename2, types: [WARNING] # git bisect good 023b1e9d265ca0662111a9df23d22b4632717a8a Bisecting: 4651 revisions left to test after this (roughly 12 steps) [a9fc2304972b1db28b88af8203dffef23e1e92ba] Merge tag 'soc-drivers-6.15-1' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc determine whether the revision contains the guilty commit revision 023b1e9d265ca0662111a9df23d22b4632717a8a crashed and is reachable testing commit a9fc2304972b1db28b88af8203dffef23e1e92ba gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: ab6dfcd357d710735a5e3d287cbc898b794765563d5635e263022611f825b6fe all runs: crashed: WARNING in f2fs_rename2 representative crash: WARNING in f2fs_rename2, types: [WARNING] # git bisect good a9fc2304972b1db28b88af8203dffef23e1e92ba Bisecting: 1869 revisions left to test after this (roughly 11 steps) [0c86b42439b6c11d758b3392a21117934fef00c1] Merge tag 'drm-next-2025-03-28' of https://gitlab.freedesktop.org/drm/kernel determine whether the revision contains the guilty commit revision 3371f569223c4e8d36edbb0ba789ee5f5cb7316f crashed and is reachable testing commit 0c86b42439b6c11d758b3392a21117934fef00c1 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: b12d207c150a7f5bbf10c3021d1236ea7d69007af7d06537e46c424ea60ce848 all runs: OK false negative chance: 0.000 # git bisect bad 0c86b42439b6c11d758b3392a21117934fef00c1 Bisecting: 1390 revisions left to test after this (roughly 11 steps) [9e34d8d1a1abe693a77f8a1083e4ab97ca0362a0] drm/amdgpu/gfx: adjust workload profile handling determine whether the revision contains the guilty commit revision e4956dc7a84da074fd8dc10f7abd147f15b3ae58 crashed and is reachable testing commit 9e34d8d1a1abe693a77f8a1083e4ab97ca0362a0 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 3c90d86599a799ae0024bb6b8fb898f19a7276bcee666c618486160f4f02df69 all runs: crashed: WARNING in f2fs_rename2 representative crash: WARNING in f2fs_rename2, types: [WARNING] # git bisect good 9e34d8d1a1abe693a77f8a1083e4ab97ca0362a0 Bisecting: 694 revisions left to test after this (roughly 10 steps) [31eb415bf6f06c90fdd9b635caf3a6c5110a38b6] Merge tag 'ftrace-v6.15' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace determine whether the revision contains the guilty commit revision 023b1e9d265ca0662111a9df23d22b4632717a8a crashed and is reachable testing commit 31eb415bf6f06c90fdd9b635caf3a6c5110a38b6 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: c2698e46a0b9d8a3e9e4fa23f0bb91fa89156472e31cdf0293a069dcd75c1898 all runs: OK false negative chance: 0.000 # git bisect bad 31eb415bf6f06c90fdd9b635caf3a6c5110a38b6 Bisecting: 368 revisions left to test after this (roughly 9 steps) [0de1e84263a2cc47fc642bcccee589a1e5220792] Merge tag 'dlm-6.15' of git://git.kernel.org/pub/scm/linux/kernel/git/teigland/linux-dlm determine whether the revision contains the guilty commit revision df60eac9efe8be41cd30767ed001c04f478e0f4e crashed and is reachable testing commit 0de1e84263a2cc47fc642bcccee589a1e5220792 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: c493ee64bcbf6bf04aeda1697d00bbbb2316345fee51eb2bbc94e3303b5b5252 all runs: OK false negative chance: 0.000 # git bisect bad 0de1e84263a2cc47fc642bcccee589a1e5220792 Bisecting: 163 revisions left to test after this (roughly 7 steps) [2bbc4a45e5eb6b868357c1045bf6f38f6ba576e0] btrfs: zoned: fix zone activation with missing devices determine whether the revision contains the guilty commit revision ffc253263a1375a65fa6c9f62a893e9767fbebfa crashed and is reachable testing commit 2bbc4a45e5eb6b868357c1045bf6f38f6ba576e0 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: e591e5360d1a7303bf4962835a9514dc96cdab9abc8e4b5b0017e38ae0f84c21 all runs: crashed: WARNING in f2fs_rename2 representative crash: WARNING in f2fs_rename2, types: [WARNING] # git bisect good 2bbc4a45e5eb6b868357c1045bf6f38f6ba576e0 Bisecting: 76 revisions left to test after this (roughly 6 steps) [b2e7b0ffa56185d04871c6fe317b36d30ce2861d] Merge tag 'erofs-for-6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/xiang/erofs determine whether the revision contains the guilty commit revision e4956dc7a84da074fd8dc10f7abd147f15b3ae58 crashed and is reachable testing commit b2e7b0ffa56185d04871c6fe317b36d30ce2861d gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: ed56fc25f3c24e3310c34b091041ebbc09e116cd40ff4b276483a4a7c0588275 all runs: crashed: WARNING in f2fs_rename2 representative crash: WARNING in f2fs_rename2, types: [WARNING] # git bisect good b2e7b0ffa56185d04871c6fe317b36d30ce2861d Bisecting: 38 revisions left to test after this (roughly 5 steps) [20f974cd2124bd4e2eb599f047465232f63b57b0] f2fs: Add f2fs_get_lock_data_folio() determine whether the revision contains the guilty commit revision ffc253263a1375a65fa6c9f62a893e9767fbebfa crashed and is reachable testing commit 20f974cd2124bd4e2eb599f047465232f63b57b0 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 3b40c18189c73b431bc4fe7458cf696123aa33416c7a7e00de8f4a2e98df06ce all runs: OK false negative chance: 0.000 # git bisect bad 20f974cd2124bd4e2eb599f047465232f63b57b0 Bisecting: 18 revisions left to test after this (roughly 4 steps) [894ac9d330c9eb8e108d0d3771ffa7bc89112316] f2fs: Add f2fs_folio_put() determine whether the revision contains the guilty commit revision e4956dc7a84da074fd8dc10f7abd147f15b3ae58 crashed and is reachable testing commit 894ac9d330c9eb8e108d0d3771ffa7bc89112316 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 53a5bb65711d06b693a0a53870244f0eac8cd31f03dad64ff98bfa44b38811c0 all runs: OK false negative chance: 0.000 # git bisect bad 894ac9d330c9eb8e108d0d3771ffa7bc89112316 Bisecting: 8 revisions left to test after this (roughly 3 steps) [a907f3a68ee26ba493a08a958809208d17f3347e] f2fs: add a sysfs entry to reclaim POSIX_FADV_NOREUSE pages determine whether the revision contains the guilty commit revision ffc253263a1375a65fa6c9f62a893e9767fbebfa crashed and is reachable testing commit a907f3a68ee26ba493a08a958809208d17f3347e gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 4dbd2c3c0f62953c6dcd4ca9c32990ebc2844fcb8c87a220db91608d8f96cf47 all runs: crashed: WARNING in f2fs_rename2 representative crash: WARNING in f2fs_rename2, types: [WARNING] # git bisect good a907f3a68ee26ba493a08a958809208d17f3347e Bisecting: 4 revisions left to test after this (roughly 2 steps) [3147ee567dd9004a49826ddeaf0a4b12865d4409] f2fs: fix potential deadloop in prepare_compress_overwrite() determine whether the revision contains the guilty commit revision df60eac9efe8be41cd30767ed001c04f478e0f4e crashed and is reachable testing commit 3147ee567dd9004a49826ddeaf0a4b12865d4409 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 9e312558215db51c3b3baea50bc823e142370f43aa5d3c609380f157a24082e0 all runs: OK false negative chance: 0.000 # git bisect bad 3147ee567dd9004a49826ddeaf0a4b12865d4409 Bisecting: 1 revision left to test after this (roughly 1 step) [201e07aec617b10360df09090651dea9d0d4f7d3] f2fs: fix the missing write pointer correction determine whether the revision contains the guilty commit revision e4956dc7a84da074fd8dc10f7abd147f15b3ae58 crashed and is reachable testing commit 201e07aec617b10360df09090651dea9d0d4f7d3 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 4f88b613424d39062812c7d4bb53009c38a5f01fa2a9e963e406277335fd26cc all runs: crashed: WARNING in f2fs_rename2 representative crash: WARNING in f2fs_rename2, types: [WARNING] # git bisect good 201e07aec617b10360df09090651dea9d0d4f7d3 Bisecting: 0 revisions left to test after this (roughly 0 steps) [81edb983b3f5d6900d3e337b9af7b1bec4bef0f2] f2fs: add check for deleted inode determine whether the revision contains the guilty commit revision 201e07aec617b10360df09090651dea9d0d4f7d3 crashed and is reachable testing commit 81edb983b3f5d6900d3e337b9af7b1bec4bef0f2 gcc compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 kernel signature: 212d9d27635af88314440dc2d387ec00f667fe7a3add5132523dc89811645bce all runs: OK false negative chance: 0.000 # git bisect bad 81edb983b3f5d6900d3e337b9af7b1bec4bef0f2 81edb983b3f5d6900d3e337b9af7b1bec4bef0f2 is the first bad commit commit 81edb983b3f5d6900d3e337b9af7b1bec4bef0f2 Author: Leo Stone Date: Thu Feb 27 23:54:20 2025 +0800 f2fs: add check for deleted inode The syzbot reproducer mounts a f2fs image, then tries to unlink an existing file. However, the unlinked file already has a link count of 0 when it is read for the first time in do_read_inode(). Add a check to sanity_check_inode() for i_nlink == 0. [Chao Yu: rebase the code and fix orphan inode recovery issue] Reported-by: syzbot+b01a36acd7007e273a83@syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=b01a36acd7007e273a83 Fixes: 39a53e0ce0df ("f2fs: add superblock and major in-memory structure") Signed-off-by: Leo Stone Signed-off-by: Chao Yu Signed-off-by: Jaegeuk Kim fs/f2fs/namei.c | 8 ++++++++ 1 file changed, 8 insertions(+) accumulated error probability: 0.00 culprit signature: 212d9d27635af88314440dc2d387ec00f667fe7a3add5132523dc89811645bce parent signature: 4f88b613424d39062812c7d4bb53009c38a5f01fa2a9e963e406277335fd26cc revisions tested: 29, total time: 9h16m8.275365671s (build: 2h49m47.890371064s, test: 4h40m37.106140723s) first good commit: 81edb983b3f5d6900d3e337b9af7b1bec4bef0f2 f2fs: add check for deleted inode recipients (to): ["chao@kernel.org" "jaegeuk@kernel.org" "leocstone@gmail.com"] recipients (cc): []