kernel BUG in f2fs_evict_inode (4)

Status: upstream: reported C repro on 2024/11/16 12:19
Subsystems: f2fs
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+5c81eb8c0a380fa578b5@syzkaller.appspotmail.com
First crash: 724d, last: 7h04m
Cause bisection: introduced by (bisect log) :
commit acff9409dd40beaca2bd982678d222e2740ad84b
Author: Jaegeuk Kim <jaegeuk@kernel.org>
Date: Tue Nov 12 01:04:58 2024 +0000

  Revert "f2fs: remove unreachable lazytime mount option parsing"

Crash: WARNING in f2fs_init_xattr_caches (log)
Repro: C syz .config
  
▶ ▼ ✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision
63564dc8 assessment-security DenialOfService: ✅ Exploitable: ✅ FilesystemTrigger: ✅ NetworkTrigger: ❌ PeripheralTrigger: ✅ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ kernel BUG in f2fs_evict_inode (4) 2026/05/16 06:14 2026/05/16 06:14 2026/05/16 07:17 a15a64a6
f9ccb6a8 patching-compressed 💥 kernel BUG in f2fs_evict_inode (4) 2026/05/11 21:04 2026/05/11 22:01 2026/05/11 22:29 d168f260
▶ ▼ Discussions (20)
Title Replies (including bot) Last reply
[syzbot] Monthly f2fs report (Oct 2026) 0 (1) 2026/10/12 12:33
[syzbot] Monthly f2fs report (Sep 2026) 0 (1) 2026/09/11 12:33
[syzbot] Monthly f2fs report (Aug 2026) 0 (1) 2026/08/11 12:32
[syzbot] Monthly f2fs report (Jul 2026) 0 (1) 2026/07/11 12:32
[syzbot] Monthly f2fs report (Jun 2026) 0 (1) 2026/06/10 04:32
[syzbot] Monthly f2fs report (May 2026) 0 (1) 2026/05/10 04:32
[syzbot] Monthly f2fs report (Mar 2026) 0 (1) 2026/03/09 12:29
[syzbot] Monthly f2fs report (Feb 2026) 0 (1) 2026/02/05 12:34
[syzbot] Monthly f2fs report (Jan 2026) 0 (1) 2026/01/05 08:20
[syzbot] Monthly f2fs report (Dec 2025) 0 (1) 2025/12/04 23:06
[syzbot] Monthly f2fs report (Nov 2025) 0 (1) 2025/11/03 13:10
[syzbot] Monthly f2fs report (Oct 2025) 0 (1) 2025/10/03 06:37
[syzbot] Monthly f2fs report (Sep 2025) 0 (1) 2025/09/02 09:20
[syzbot] Monthly f2fs report (Aug 2025) 0 (1) 2025/08/01 13:49
[syzbot] Monthly f2fs report (Jul 2025) 0 (1) 2025/07/01 09:24
[syzbot] Monthly f2fs report (May 2025) 0 (1) 2025/06/03 11:11
[syzbot] Monthly f2fs report (Apr 2025) 0 (1) 2025/04/29 12:47
[syzbot] Monthly f2fs report (Mar 2025) 0 (1) 2025/03/31 13:08
[syzbot] Monthly f2fs report (Dec 2024) 0 (1) 2024/12/19 21:34
[syzbot] [f2fs?] kernel BUG in f2fs_evict_inode (4) 0 (3) 2024/12/07 22:59
▶ ▼ Similar bugs (10)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG in f2fs_evict_inode f2fs -1 syz, C error 135 1136d 1415d 23/29 fixed on 2023/10/12 12:47
linux-4.19 kernel BUG at fs/f2fs/inode.c:LINE! f2fs tmpfs -1 syz, C error 3 1413d 2215d 0/1 upstream: reported C repro on 2020/10/13 04:23
linux-6.1 kernel BUG in f2fs_evict_inode origin:upstream -1 syz, C error 101 239d 1305d 0/3 upstream: reported C repro on 2023/04/11 09:45
linux-6.6 kernel BUG in f2fs_evict_inode (2) origin:upstream -1 syz, C error 27 196d 289d 0/2 upstream: reported C repro on 2026/01/21 01:58
upstream kernel BUG in f2fs_evict_inode (2) f2fs -1 syz, C error 575 814d 1094d 27/29 fixed on 2024/08/14 03:44
linux-5.15 kernel BUG in f2fs_evict_inode (2) missing-backport origin:upstream -1 syz, C done 273 31d 1095d 0/3 upstream: reported C repro on 2023/11/06 18:33
linux-4.14 kernel BUG in f2fs_evict_inode f2fs tmpfs -1 syz, C 1 1343d 1411d 0/1 upstream: reported C repro on 2022/12/26 05:49
upstream kernel BUG in f2fs_evict_inode (3) f2fs -1 syz, C error 33 762d 810d 28/29 fixed on 2024/10/22 11:57
linux-6.6 kernel BUG in f2fs_evict_inode -1 8 422d 442d 0/2 auto-obsoleted due to no activity on 2025/12/19 03:18
linux-5.15 kernel BUG in f2fs_evict_inode -1 3 1302d 1322d 0/3 auto-obsoleted due to no activity on 2023/08/12 09:15
▶ ▼ Last patch testing requests (1)
Created Duration User Patch Repo Result
2024/12/22 13:35 15m retest repro upstream report log
▶ ▼ Fix bisection attempts (2)
Created Duration User Patch Repo Result
2025/03/01 22:16 3h34m bisect fix upstream OK (0) job log log
2025/01/30 05:26 1h21m bisect fix upstream OK (0) job log log

Sample crash report:
------------[ cut here ]------------
kernel BUG at fs/f2fs/inode.c:992!
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
CPU: 1 UID: 0 PID: 5631 Comm: syz-executor403 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
RIP: 0010:f2fs_evict_inode+0x1b6b/0x1b80 fs/f2fs/inode.c:992
Code: fd 48 c7 c7 c0 a5 bb 8e be 04 00 00 00 e8 dd 95 5d fd 65 48 ff 43 08 e9 02 e7 ff ff e8 2e 40 79 fd 90 0f 0b e8 26 40 79 fd 90 <0f> 0b e8 1e 40 79 fd 90 0f 0b 90 e9 d1 fe ff ff 0f 1f 44 00 00 90
RSP: 0018:ffffc900031af6c0 EFLAGS: 00010293
RAX: ffffffff844dc26a RBX: 0000000000000002 RCX: ffff88807bb60000
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
RBP: ffffc900031af870 R08: ffff88806f49161f R09: 1ffff1100de922c3
R10: dffffc0000000000 R11: ffffed100de922c4 R12: dffffc0000000000
R13: 1ffff1100de922c3 R14: ffff88806f491200 R15: ffff888078e8c0c0
FS:  0000555594d2b400(0000) GS:ffff88812505e000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555594d347a8 CR3: 000000007b183000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 evict+0x624/0xb50 fs/inode.c:825
 dispose_list fs/inode.c:867 [inline]
 evict_inodes+0x7e3/0x870 fs/inode.c:921
 generic_shutdown_super+0xaa/0x2d0 fs/super.c:633
 kill_block_super+0x44/0x90 fs/super.c:1671
 kill_f2fs_super+0x3eb/0x700 fs/f2fs/super.c:5595
 deactivate_locked_super+0xbc/0x130 fs/super.c:477
 cleanup_mnt+0x3d3/0x460 fs/namespace.c:1317
 task_work_run+0x1d9/0x270 kernel/task_work.c:233
 ptrace_notify+0x27c/0x2b0 kernel/signal.c:2531
 ptrace_report_syscall include/linux/ptrace.h:416 [inline]
 ptrace_report_syscall_exit+0x2d/0x50 include/linux/ptrace.h:478
 arch_ptrace_report_syscall_exit include/linux/entry-common.h:213 [inline]
 syscall_exit_work include/linux/entry-common.h:248 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:279 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:316 [inline]
 do_syscall_64+0x4f0/0x580 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fcec39bcd47
Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 88 bd 0a 00 00 00 00 00 eb 96 e8 91 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007ffe03dea878 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000015287 RCX: 00007fcec39bcd47
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe03dea930
RBP: 00007ffe03dea930 R08: 00007ffe03deb930 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe03deb9e0
R13: 0000555594d2c770 R14: 431bde82d7b634db R15: 00007ffe03deb984
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:f2fs_evict_inode+0x1b6b/0x1b80 fs/f2fs/inode.c:992
Code: fd 48 c7 c7 c0 a5 bb 8e be 04 00 00 00 e8 dd 95 5d fd 65 48 ff 43 08 e9 02 e7 ff ff e8 2e 40 79 fd 90 0f 0b e8 26 40 79 fd 90 <0f> 0b e8 1e 40 79 fd 90 0f 0b 90 e9 d1 fe ff ff 0f 1f 44 00 00 90
RSP: 0018:ffffc900031af6c0 EFLAGS: 00010293
RAX: ffffffff844dc26a RBX: 0000000000000002 RCX: ffff88807bb60000
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
RBP: ffffc900031af870 R08: ffff88806f49161f R09: 1ffff1100de922c3
R10: dffffc0000000000 R11: ffffed100de922c4 R12: dffffc0000000000
R13: 1ffff1100de922c3 R14: ffff88806f491200 R15: ffff888078e8c0c0
FS:  0000555594d2b400(0000) GS:ffff888124f5e000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fcec3a6fb00 CR3: 000000007b183000 CR4: 0000000000350ef0

Crashes (2597):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/07 04:35 upstream 0d8395707651 c38879ea .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-kasan-gce-root kernel BUG in f2fs_evict_inode
2025/05/14 21:21 upstream 1a80a098c606 a4fa04ef .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-upstream-fs kernel BUG in f2fs_evict_inode
2024/12/06 17:06 upstream b8f52214c61a 946d28f0 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs kernel BUG in f2fs_evict_inode
2025/03/24 22:32 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a2392f333575 875573af .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-gce-arm64 kernel BUG in f2fs_evict_inode
2025/06/04 04:29 upstream 5abc7438f1e9 a30356b7 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/05 20:25 upstream 67f0943b394d 1995e6c7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in f2fs_evict_inode
2026/08/06 20:01 upstream 0d8395707651 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root kernel BUG in f2fs_evict_inode
2026/06/23 14:29 upstream 502d801f0ab0 4b1d8f01 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in f2fs_evict_inode
2024/11/12 12:15 upstream 2d5404caa8c7 75bb1b32 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in f2fs_evict_inode
2026/11/06 08:47 upstream d68ce4e71248 5cecaf1f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/11/05 02:20 upstream 05441d697f7f 2ee8459f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/11/04 22:33 upstream 05441d697f7f 73438ed0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/11/04 17:28 upstream 05441d697f7f 73438ed0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/11/04 07:11 upstream 05441d697f7f 5af5b6c6 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/11/03 16:13 upstream 6628e7d4c6b2 e2d35131 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/11/03 13:26 upstream 6628e7d4c6b2 e2d35131 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/11/03 01:07 upstream 6628e7d4c6b2 0a94d799 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/11/02 21:42 upstream 6628e7d4c6b2 6969b601 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/11/02 20:25 upstream 6628e7d4c6b2 6969b601 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/11/02 06:55 upstream 46fec1c3029b 25a0ae84 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/11/02 03:05 upstream 46fec1c3029b 25a0ae84 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/11/01 19:21 upstream cbbddb6b08cc 25a0ae84 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/11/01 11:01 upstream cbbddb6b08cc 25a0ae84 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/31 17:22 upstream 36aad21d50d1 2041d3f8 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/31 04:34 upstream abf8c33470f7 2041d3f8 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/30 16:18 upstream d89e1d186ec9 0ec395f8 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/29 23:48 upstream 4dd16e31135e b498adee .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/29 13:59 upstream c339f4010dea 4902417d .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/29 06:21 upstream c339f4010dea b1d00f76 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/29 01:40 upstream c339f4010dea b1d00f76 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/28 03:51 upstream 62c457528529 96923c60 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/27 22:25 upstream 62c457528529 96923c60 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/26 18:38 upstream 6b4b543fa187 168cb7a2 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/26 15:34 upstream 6b4b543fa187 168cb7a2 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/26 15:17 upstream 6b4b543fa187 168cb7a2 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/25 16:22 upstream 330517c63aa9 1d9ca40b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/25 11:53 upstream 330517c63aa9 1d9ca40b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/25 03:38 upstream 5b0764a53235 1d9ca40b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/24 11:44 upstream 26344c0dd32a 1d9ca40b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/24 02:46 upstream 26344c0dd32a 1d9ca40b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/23 10:42 upstream a1c2b1da93f5 d566bfda .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/22 13:34 upstream 7be4bc52fd9e b55fad29 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/22 09:16 upstream 4df4d2a577db 4ba27f85 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/21 01:03 upstream 4a8bdffce502 61c200c7 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/20 14:58 upstream f47d223627f8 df8746fb .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/18 03:23 upstream 58161ead29e5 432c0077 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/17 17:29 upstream 58161ead29e5 432c0077 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/17 05:01 upstream 70dd4ee72eb2 432c0077 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/16 08:55 upstream 2f2f7eeef8b0 3f2522c6 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/16 02:26 upstream 045958acaa75 3f2522c6 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/16 01:16 upstream 045958acaa75 3f2522c6 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/15 02:24 upstream 0fcb05b72344 8fb0ae89 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/13 04:28 upstream 24a19b953e2a 745a967f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/12 14:36 upstream 24a19b953e2a 745a967f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/12 08:41 upstream b88c841d1164 4f92358f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/10/12 04:18 upstream b88c841d1164 4f92358f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/05/10 08:20 linux-next e98d21c170b0 29233ece .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in f2fs_evict_inode
2026/02/08 06:03 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 59e4d31a0470 4c131dc4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in f2fs_evict_inode
* Struck through repros no longer work on HEAD.