syzbot


kernel BUG in bch2_btree_path_level_init (3)

Status: upstream: reported C repro on 2024/12/21 15:33
Subsystems: bcachefs
[Documentation on labels]
Reported-by: syzbot+5824b2660896028cfe7f@syzkaller.appspotmail.com
Fix commit: 9fe8ec866442 bcachefs: Don't build aux search tree when still repairing node
Patched on: [ci-qemu-gce-upstream-auto ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-snapshot-upstream-root ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci-upstream-rust-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu-native-arm64-kvm]
First crash: 258d, last: 1h49m
Cause bisection: introduced by (bisect log) :
commit 2d02bfb01b2743da06748ba396ff7da4425488ef
Author: Kent Overstreet <kent.overstreet@linux.dev>
Date: Fri Jan 5 19:17:57 2024 +0000

  bcachefs: improve validate_bset_keys()

Crash: kernel BUG in __bch2_bkey_unpack_key (log)
Repro: C syz .config
  
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [bcachefs?] kernel BUG in bch2_btree_path_level_init (3) 1 (3) 2025/07/19 01:31
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG in bch2_btree_path_level_init bcachefs -1 C 2 435d 446d 0/29 auto-obsoleted due to no activity on 2024/10/01 02:22
upstream kernel BUG in bch2_btree_path_level_init (2) bcachefs -1 C done 29 263d 313d 28/29 fixed on 2024/12/16 09:50

Sample crash report:
bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree
  while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
------------[ cut here ]------------
kernel BUG at fs/bcachefs/btree_iter.c:619!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 0 UID: 0 PID: 5822 Comm: syz-executor553 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:bch2_btree_path_level_init+0x9f5/0xa20 fs/bcachefs/btree_iter.c:619
Code: 89 f7 e8 2e 8b 06 fe e9 8d fb ff ff e8 04 b6 a6 fd 90 0f 0b e8 fc b5 a6 fd 90 0f 0b e8 f4 b5 a6 fd 90 0f 0b e8 ec b5 a6 fd 90 <0f> 0b e8 e4 b5 a6 fd 90 0f 0b e8 dc b5 a6 fd 90 0f 0b e8 d4 b5 a6
RSP: 0018:ffffc9000442e608 EFLAGS: 00010293
RAX: ffffffff84193af4 RBX: ffff88807ceac2f0 RCX: ffff88807be4da00
RDX: 0000000000000000 RSI: fffffffffffa0000 RDI: fffffffffff9ffff
RBP: ffff888034c2e9a7 R08: 0000000000000001 R09: 0000000000000000
R10: dffffc0000000000 R11: fffff52000885cb8 R12: fffffffffff9ffff
R13: fffffffffffa0000 R14: dffffc0000000000 R15: ffffffffffffffff
FS:  000055558c4ba380(0000) GS:ffff8881260f6000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f635fd8dd30 CR3: 000000007a26e000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 btree_path_lock_root fs/bcachefs/btree_iter.c:773 [inline]
 bch2_btree_path_traverse_one+0xe34/0x2430 fs/bcachefs/btree_iter.c:1189
 bch2_btree_path_traverse fs/bcachefs/btree_iter.h:248 [inline]
 __bch2_btree_iter_peek fs/bcachefs/btree_iter.c:2249 [inline]
 bch2_btree_iter_peek_max+0x988/0x5260 fs/bcachefs/btree_iter.c:2353
 bch2_btree_iter_peek_max_type fs/bcachefs/btree_iter.h:702 [inline]
 bch2_gc_btree fs/bcachefs/btree_gc.c:700 [inline]
 bch2_gc_btrees fs/bcachefs/btree_gc.c:763 [inline]
 bch2_check_allocations+0x11a5/0x5470 fs/bcachefs/btree_gc.c:1065
 bch2_run_recovery_pass+0xe2/0x1d0 fs/bcachefs/recovery_passes.c:227
 bch2_run_recovery_passes+0x2a0/0xdb0 fs/bcachefs/recovery_passes.c:280
 bch2_fs_recovery+0x2399/0x37b0 fs/bcachefs/recovery.c:937
 bch2_fs_start+0x70b/0xae0 fs/bcachefs/super.c:1096
 bch2_fs_get_tree+0xad7/0x13b0 fs/bcachefs/fs.c:2483
 vfs_get_tree+0x92/0x2b0 fs/super.c:1759
 do_new_mount+0x24a/0xa40 fs/namespace.c:3881
 do_mount fs/namespace.c:4221 [inline]
 __do_sys_mount fs/namespace.c:4432 [inline]
 __se_sys_mount+0x317/0x410 fs/namespace.c:4409
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xf6/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f6be81410aa
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffdd01e9cc8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffdd01e9ce0 RCX: 00007f6be81410aa
RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007ffdd01e9ce0
RBP: 0000200000000000 R08: 00007ffdd01e9d20 R09: 0000000000005ad7
R10: 0000000000800000 R11: 0000000000000282 R12: 0000200000000040
R13: 00007ffdd01e9d20 R14: 0000000000000003 R15: 0000000000800000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:bch2_btree_path_level_init+0x9f5/0xa20 fs/bcachefs/btree_iter.c:619
Code: 89 f7 e8 2e 8b 06 fe e9 8d fb ff ff e8 04 b6 a6 fd 90 0f 0b e8 fc b5 a6 fd 90 0f 0b e8 f4 b5 a6 fd 90 0f 0b e8 ec b5 a6 fd 90 <0f> 0b e8 e4 b5 a6 fd 90 0f 0b e8 dc b5 a6 fd 90 0f 0b e8 d4 b5 a6
RSP: 0018:ffffc9000442e608 EFLAGS: 00010293
RAX: ffffffff84193af4 RBX: ffff88807ceac2f0 RCX: ffff88807be4da00
RDX: 0000000000000000 RSI: fffffffffffa0000 RDI: fffffffffff9ffff
RBP: ffff888034c2e9a7 R08: 0000000000000001 R09: 0000000000000000
R10: dffffc0000000000 R11: fffff52000885cb8 R12: fffffffffff9ffff
R13: fffffffffffa0000 R14: dffffc0000000000 R15: ffffffffffffffff
FS:  000055558c4ba380(0000) GS:ffff8881261f6000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000562e6f37a168 CR3: 000000007a26e000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (469):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/05/24 08:54 upstream 4856ebd99715 ed351ea7 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs kernel BUG in bch2_btree_path_level_init
2024/12/23 08:10 upstream 4bbf9020becb b4fbdbd4 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs kernel BUG in bch2_btree_path_level_init
2025/05/24 02:09 upstream 7586ac7c340c ed351ea7 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2024/12/17 15:57 upstream f44d154d6e3d bc1a1b50 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/05/31 18:53 linux-next 3a83b350b5be 3d2f584d .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-linux-next-kasan-gce-root kernel BUG in bch2_btree_path_level_init
2025/02/12 18:30 upstream 09fbf3d50205 b27c2402 .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs kernel BUG in bch2_btree_path_level_init
2025/07/07 09:15 upstream d7b8f8e20813 4f67c4ae .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in bch2_btree_path_level_init
2025/09/01 21:19 upstream b320789d6883 807a3b61 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/09/01 18:46 upstream b320789d6883 807a3b61 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/09/01 15:50 upstream b320789d6883 807a3b61 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/09/01 12:52 upstream b320789d6883 807a3b61 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/09/01 10:12 upstream b320789d6883 807a3b61 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/09/01 00:43 upstream 5c3b3264e585 807a3b61 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/31 17:11 upstream c8bc81a52d5a 807a3b61 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/30 20:53 upstream 11e7861d680c 807a3b61 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/30 08:19 upstream fb679c832b64 807a3b61 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/30 07:05 upstream fb679c832b64 807a3b61 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/30 05:10 upstream fb679c832b64 807a3b61 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/30 01:31 upstream fb679c832b64 807a3b61 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/29 16:38 upstream 07d9df80082b 3e1beec6 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/29 14:15 upstream 07d9df80082b 3e1beec6 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/29 06:29 upstream 07d9df80082b d401b9d7 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/28 18:46 upstream 07d9df80082b bee60a83 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/28 16:42 upstream 07d9df80082b bee60a83 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/28 13:25 upstream 07d9df80082b bee60a83 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/27 22:56 upstream 39f90c196721 e12e5ba4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/27 17:41 upstream fab1beda7597 e12e5ba4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/27 17:37 upstream fab1beda7597 e12e5ba4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/27 00:38 upstream fab1beda7597 e12e5ba4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/26 20:32 upstream fab1beda7597 e12e5ba4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/26 19:18 upstream fab1beda7597 e12e5ba4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/26 04:25 upstream b6add54ba618 bf27483f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/25 16:51 upstream 1b237f190eb3 bf27483f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/25 09:49 upstream 1b237f190eb3 bf27483f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/25 04:05 upstream 69fd6b99b8f8 bf27483f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/25 02:09 upstream 69fd6b99b8f8 bf27483f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/24 18:00 upstream 69fd6b99b8f8 bf27483f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/24 11:33 upstream 8d245acc1e88 bf27483f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/24 10:21 upstream 8d245acc1e88 bf27483f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/24 04:58 upstream 8d245acc1e88 bf27483f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/24 00:21 upstream 8d245acc1e88 bf27483f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/23 17:19 upstream 6debb6904172 bf27483f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/23 15:05 upstream 6debb6904172 bf27483f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/23 09:58 upstream 6debb6904172 bf27483f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/23 08:10 upstream 6debb6904172 bf27483f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/22 21:47 upstream cf6fc5eefc5b bf27483f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/22 14:31 upstream 3957a5720157 bf27483f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/22 11:14 upstream 3957a5720157 bf27483f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/22 07:12 upstream 3957a5720157 bf27483f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/22 05:50 upstream 3957a5720157 bf27483f .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/21 20:35 upstream 32b7144f806e 3e79b825 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/21 11:15 upstream 41cd3fd15263 0b9605c8 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/21 07:23 upstream 41cd3fd15263 0b9605c8 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/20 18:01 upstream b19a97d57c15 bd178e57 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/20 13:39 upstream b19a97d57c15 bd178e57 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in bch2_btree_path_level_init
2025/08/22 08:15 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 8f5ae30d69d7 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in bch2_btree_path_level_init
* Struck through repros no longer work on HEAD.