Re: File system corruption after writing to unlinked file and using fdatasync on the file if system crashes

From: Viacheslav Dubeyko

Date: Wed Mar 11 2026 - 13:39:27 EST


On Wed, 2026-03-11 at 16:01 +0300, Vyacheslav Kovalevsky wrote:
> Detailed description
> ====================
>
> Hello, there seems to be an issue with NILFS2 crash behavior:
>
> 1. Create new file and truncate to some length.
> 2. Unlink the file but keep the file descriptor open.
> 3. Make new empty directory.
> 4. Sync file system.
> 5. Write some data to the file.
> 6. Apply fdatasync() to the file.
>
> After system crash (e.g. power failure) mounting file system results
> in
> error message `Stale file handle`. See details below.
>
>
> System info
> ===========
>
> Linux version 7.0-rc2, also tested on 6.19.2
> nilfs-tools version 2.2.11
>
>
> How to reproduce
> ================
>
> ```
> #include <errno.h>
> #include <fcntl.h>
> #include <stdio.h>
> #include <string.h>
> #include <sys/stat.h>
> #include <sys/types.h>
> #include <unistd.h>
>
> int main() {
>    int status;
>    int file_fd;
>
>    status =
>        open("file", O_WRONLY | O_CREAT, S_IRWXU | S_IRWXG | S_IROTH |
> S_IXOTH);
>    printf("OPEN: %d\n", status);
>    file_fd = status;
>
>    status = ftruncate(file_fd, 1000);
>    printf("FTRUNCATE: %d\n", status);
>
>    status = unlink("file");
>    printf("UNLINK: %d\n", status);
>
>    status = mkdir("dir", S_IRWXU | S_IRWXG | S_IROTH | S_IXOTH);
>    printf("MKDIR: %d\n", status);
>
>    sync();
>
>    status = write(file_fd, "Test data!", 10);
>    printf("WRITE: %d\n", status);
>
>    status = fdatasync(file_fd); // everything is fine if using
> fsync()
> instead...
>    printf("FDATASYNC: %d\n", status);
> }
> // file system is unmountable after crash
>
> // `mount` output:
> // mount.nilfs2: Error while mounting /dev/vdb on /mnt/fstest: Stale
> file handle
>
> // `dmesg` output:
> // [   29.941736] NILFS (vdb): mounting unchecked fs
> // [   29.953605] NILFS (vdb): error -116 recovering data block
> (ino=11,
> block-offset=0)
> // [   29.953609] NILFS (vdb): error -116 roll-forwarding partial
> segment at blocknr = 26
> ```
>
> Steps:
>
> 1. Create and mount new NILFS2 file system in default configuration.
> 2. Change directory to root of the file system and run the compiled
> test.
> 3. Cause hard system crash (e.g. QEMU `system_reset` command).
> 4. Remount file system after crash.
> 5. Observe that mount fails.

Thank you for the report. The issue [1] has been created.

What's about to fix the issue? ;)

Thanks,
Slava.

[1] https://github.com/nilfs-dev/nilfs2/issues/164