syzbot


kernel BUG in f2fs_evict_inode (4)

Status: upstream: reported C repro on 2024/11/16 12:19
Subsystems: f2fs
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+5c81eb8c0a380fa578b5@syzkaller.appspotmail.com
First crash: 596d, last: 3h45m
Cause bisection: introduced by (bisect log) :
commit acff9409dd40beaca2bd982678d222e2740ad84b
Author: Jaegeuk Kim <jaegeuk@kernel.org>
Date: Tue Nov 12 01:04:58 2024 +0000

  Revert "f2fs: remove unreachable lazytime mount option parsing"

Crash: WARNING in f2fs_init_xattr_caches (log)
Repro: C syz .config
  
✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision Error
63564dc8-4318-4924-b247-33d84cd0e6c2 assessment-security DenialOfService: ✅ Exploitable: ✅ FilesystemTrigger: ✅ NetworkTrigger: ❌ PeripheralTrigger: ✅ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ kernel BUG in f2fs_evict_inode (4) 2026/05/16 06:14 2026/05/16 06:14 2026/05/16 07:17 a15a64a66dd37b7f9c31f5c3efb1524bb9863162

			
		
f9ccb6a8-c087-41ce-ad5d-f840760b8130 patching-compressed 💥 kernel BUG in f2fs_evict_inode (4) 2026/05/11 21:04 2026/05/11 22:01 2026/05/11 22:29 d168f2605715ec7b7ab6840d636f69c758e424d9
reproducer did not crash
Discussions (16)
Title Replies (including bot) Last reply
[syzbot] Monthly f2fs report (Jun 2026) 0 (1) 2026/06/10 04:32
[syzbot] Monthly f2fs report (May 2026) 0 (1) 2026/05/10 04:32
[syzbot] Monthly f2fs report (Mar 2026) 0 (1) 2026/03/09 12:29
[syzbot] Monthly f2fs report (Feb 2026) 0 (1) 2026/02/05 12:34
[syzbot] Monthly f2fs report (Jan 2026) 0 (1) 2026/01/05 08:20
[syzbot] Monthly f2fs report (Dec 2025) 0 (1) 2025/12/04 23:06
[syzbot] Monthly f2fs report (Nov 2025) 0 (1) 2025/11/03 13:10
[syzbot] Monthly f2fs report (Oct 2025) 0 (1) 2025/10/03 06:37
[syzbot] Monthly f2fs report (Sep 2025) 0 (1) 2025/09/02 09:20
[syzbot] Monthly f2fs report (Aug 2025) 0 (1) 2025/08/01 13:49
[syzbot] Monthly f2fs report (Jul 2025) 0 (1) 2025/07/01 09:24
[syzbot] Monthly f2fs report (May 2025) 0 (1) 2025/06/03 11:11
[syzbot] Monthly f2fs report (Apr 2025) 0 (1) 2025/04/29 12:47
[syzbot] Monthly f2fs report (Mar 2025) 0 (1) 2025/03/31 13:08
[syzbot] Monthly f2fs report (Dec 2024) 0 (1) 2024/12/19 21:34
[syzbot] [f2fs?] kernel BUG in f2fs_evict_inode (4) 0 (3) 2024/12/07 22:59
Similar bugs (10)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG in f2fs_evict_inode f2fs -1 C error 135 1008d 1287d 23/29 fixed on 2023/10/12 12:47
linux-4.19 kernel BUG at fs/f2fs/inode.c:LINE! f2fs tmpfs -1 C error 3 1285d 2087d 0/1 upstream: reported C repro on 2020/10/13 04:23
linux-6.1 kernel BUG in f2fs_evict_inode origin:upstream -1 C error 101 112d 1177d 0/3 upstream: reported C repro on 2023/04/11 09:45
linux-6.6 kernel BUG in f2fs_evict_inode (2) origin:upstream -1 C error 27 68d 161d 0/2 upstream: reported C repro on 2026/01/21 01:58
upstream kernel BUG in f2fs_evict_inode (2) f2fs -1 C error 575 686d 966d 27/29 fixed on 2024/08/14 03:44
linux-5.15 kernel BUG in f2fs_evict_inode (2) missing-backport origin:upstream -1 C done 273 49d 968d 0/3 upstream: reported C repro on 2023/11/06 18:33
linux-4.14 kernel BUG in f2fs_evict_inode f2fs tmpfs -1 C 1 1215d 1283d 0/1 upstream: reported C repro on 2022/12/26 05:49
upstream kernel BUG in f2fs_evict_inode (3) f2fs -1 C error 33 634d 682d 28/29 fixed on 2024/10/22 11:57
linux-6.6 kernel BUG in f2fs_evict_inode -1 8 294d 314d 0/2 auto-obsoleted due to no activity on 2025/12/19 03:18
linux-5.15 kernel BUG in f2fs_evict_inode -1 3 1174d 1195d 0/3 auto-obsoleted due to no activity on 2023/08/12 09:15
Last patch testing requests (1)
Created Duration User Patch Repo Result
2024/12/22 13:35 15m retest repro upstream report log
Fix bisection attempts (2)
Created Duration User Patch Repo Result
2025/03/01 22:16 3h34m bisect fix upstream OK (0) job log log
2025/01/30 05:26 1h21m bisect fix upstream OK (0) job log log

Sample crash report:
F2FS-fs (loop0): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
------------[ cut here ]------------
kernel BUG at fs/f2fs/inode.c:944!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 1 UID: 0 PID: 5827 Comm: syz-executor139 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:f2fs_evict_inode+0x18b7/0x18e0 fs/f2fs/inode.c:944
Code: 02 00 00 00 e8 ba b5 ca fd 40 84 ed 75 2c e8 b0 b2 ca fd 4c 8b 2c 24 e9 18 e9 ff ff e8 a2 b2 ca fd 90 0f 0b e8 9a b2 ca fd 90 <0f> 0b e8 92 b2 ca fd 90 0f 0b 90 e9 ff fe ff ff e8 84 b2 ca fd e8
RSP: 0018:ffffc900043ef938 EFLAGS: 00010293
RAX: ffffffff83f53e66 RBX: ffff8880761591e0 RCX: ffff88802d78bc00
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
RBP: dffffc0000000000 R08: ffff888076159687 R09: 1ffff1100ec2b2d0
R10: dffffc0000000000 R11: ffffed100ec2b2d1 R12: ffff88807a7f4087
R13: 1ffff1100ec2b2d0 R14: 0000000000000002 R15: ffff888076159680
FS:  0000000000000000(0000) GS:ffff8881261fb000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb8e4dafdf8 CR3: 000000000dd38000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 evict+0x504/0x9c0 fs/inode.c:810
 __dentry_kill+0x209/0x660 fs/dcache.c:660
 dput+0x19f/0x2b0 fs/dcache.c:902
 __fput+0x68e/0xa70 fs/file_table.c:473
 task_work_run+0x1d1/0x260 kernel/task_work.c:227
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0x8d6/0x2550 kernel/exit.c:953
 do_group_exit+0x21c/0x2d0 kernel/exit.c:1102
 __do_sys_exit_group kernel/exit.c:1113 [inline]
 __se_sys_exit_group kernel/exit.c:1111 [inline]
 __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1111
 x64_sys_call+0x21ba/0x21c0 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xf6/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb8e4d65bc9
Code: Unable to access opcode bytes at 0x7fb8e4d65b9f.
RSP: 002b:00007ffed9f30458 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb8e4d65bc9
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 00007fb8e4de62d0 R08: ffffffffffffffb8 R09: 000055555cc424c0
R10: 000055555cc424c0 R11: 0000000000000246 R12: 00007fb8e4de62d0
R13: 0000000000000000 R14: 00007fb8e4de7040 R15: 00007fb8e4d33dd0
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:f2fs_evict_inode+0x18b7/0x18e0 fs/f2fs/inode.c:944
Code: 02 00 00 00 e8 ba b5 ca fd 40 84 ed 75 2c e8 b0 b2 ca fd 4c 8b 2c 24 e9 18 e9 ff ff e8 a2 b2 ca fd 90 0f 0b e8 9a b2 ca fd 90 <0f> 0b e8 92 b2 ca fd 90 0f 0b 90 e9 ff fe ff ff e8 84 b2 ca fd e8
RSP: 0018:ffffc900043ef938 EFLAGS: 00010293
RAX: ffffffff83f53e66 RBX: ffff8880761591e0 RCX: ffff88802d78bc00
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
RBP: dffffc0000000000 R08: ffff888076159687 R09: 1ffff1100ec2b2d0
R10: dffffc0000000000 R11: ffffed100ec2b2d1 R12: ffff88807a7f4087
R13: 1ffff1100ec2b2d0 R14: 0000000000000002 R15: ffff888076159680
FS:  0000000000000000(0000) GS:ffff8881261fb000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb8e4dafdf8 CR3: 0000000075f24000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (2233):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/05/14 21:21 upstream 1a80a098c606 a4fa04ef .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-upstream-fs kernel BUG in f2fs_evict_inode
2024/12/06 17:06 upstream b8f52214c61a 946d28f0 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs kernel BUG in f2fs_evict_inode
2025/03/24 22:32 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a2392f333575 875573af .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-gce-arm64 kernel BUG in f2fs_evict_inode
2025/06/04 04:29 upstream 5abc7438f1e9 a30356b7 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/23 14:29 upstream 502d801f0ab0 4b1d8f01 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in f2fs_evict_inode
2026/06/21 14:23 upstream 390d73adf896 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in f2fs_evict_inode
2026/06/20 21:07 upstream 1a3746ccbb0a 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in f2fs_evict_inode
2026/06/19 23:57 upstream 5e2e14749c3d 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in f2fs_evict_inode
2026/06/19 14:28 upstream 9ecfb2f7287a 570c59ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in f2fs_evict_inode
2026/06/19 10:28 upstream 9ecfb2f7287a 570c59ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in f2fs_evict_inode
2026/06/19 10:27 upstream 9ecfb2f7287a 570c59ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in f2fs_evict_inode
2026/06/18 14:00 upstream e771677c937d a776b0d0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in f2fs_evict_inode
2026/06/17 11:44 upstream 6b5a2b7d9bc1 62cc6db3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in f2fs_evict_inode
2026/04/19 11:10 upstream eb5249b12507 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in f2fs_evict_inode
2026/02/18 07:15 upstream d295082ea672 39751c21 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root kernel BUG in f2fs_evict_inode
2024/11/12 12:15 upstream 2d5404caa8c7 75bb1b32 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in f2fs_evict_inode
2026/07/01 16:18 upstream 665159e24674 5fb9973c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/07/01 10:08 upstream 665159e24674 00a5cf1c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/07/01 07:52 upstream 665159e24674 00a5cf1c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/30 14:09 upstream dc59e4fea9d8 e5173a01 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/30 05:51 upstream dc59e4fea9d8 fff8d0a0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/29 07:15 upstream dc59e4fea9d8 fb92f11c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/28 23:41 upstream 8b69c0475871 fb92f11c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/28 14:25 upstream 8b69c0475871 fb92f11c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/28 06:37 upstream 780d569e6c4b fb92f11c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/28 02:51 upstream 780d569e6c4b fb92f11c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/27 19:04 upstream 5a66900afbd6 fb92f11c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/27 17:00 upstream 5a66900afbd6 fb92f11c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/26 01:35 upstream 4edcdefd4083 7ff32d8b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/25 14:35 upstream ab9de95c9cf9 432fd51a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/25 04:17 upstream f0e6f20cb52b cfa969bf .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/24 19:48 upstream 840ef6c78e6a c1da772e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/24 03:38 upstream f31c00c377cc 042555ff .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/23 09:10 upstream 4708cac0e22c 5a630be6 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/22 21:04 upstream ef0c9f75a195 ab2703f0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/22 17:47 upstream ef0c9f75a195 ab2703f0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/22 11:56 upstream ef0c9f75a195 ab2703f0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/22 05:03 upstream 8cd8cf7a07e5 43bfcdb0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/21 20:46 upstream 8cd8cf7a07e5 43bfcdb0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/21 12:32 upstream 390d73adf896 43bfcdb0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/21 04:39 upstream 1a3746ccbb0a 43bfcdb0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/21 03:44 upstream 1a3746ccbb0a 43bfcdb0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/20 19:08 upstream 1a3746ccbb0a 43bfcdb0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/20 15:29 upstream 1a3746ccbb0a 43bfcdb0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/20 09:53 upstream a975094bf98c 43bfcdb0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/20 01:08 upstream a975094bf98c 43bfcdb0 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/19 20:47 upstream 9ecfb2f7287a 023e42b5 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/19 16:30 upstream 9ecfb2f7287a 023e42b5 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/19 08:02 upstream 83f1454877cc d7ffd47b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/19 05:06 upstream 83f1454877cc d7ffd47b .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/06/18 06:45 upstream e771677c937d b62b3ded .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in f2fs_evict_inode
2026/05/10 08:20 linux-next e98d21c170b0 29233ece .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in f2fs_evict_inode
2026/02/08 06:03 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 59e4d31a0470 4c131dc4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in f2fs_evict_inode
* Struck through repros no longer work on HEAD.