syzbot

 sign-in | mailing list | source | docs
🐞 Open [872] ≡ Subsystems 🐞 Fixed [4871] 🐞 Invalid [11621] ⬇ Missing Backports [67] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

kernel BUG in btrfs_free_tree_block

Status: upstream: reported C repro on 2022/09/26 17:49
Subsystems: btrfs
[Documentation on labels]
Reported-by: syzbot+a306f914b4d01b3958fe@syzkaller.appspotmail.com
First crash: 428d, last: 3d04h
Cause bisection: failed (error log, bisect log)
  
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
[syzbot] kernel BUG in btrfs_free_tree_block 0 (1) 2022/09/26 17:49
▶ ▼ Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 kernel BUG in btrfs_free_tree_block origin:upstream C 1 19d 107d 0/3 upstream: reported C repro on 2023/08/12 21:44
linux-5.15 kernel BUG in btrfs_free_tree_block origin:upstream C error 2 72d 148d 0/3 upstream: reported C repro on 2023/07/03 03:56
▶ ▼ Fix bisection attempts (2)
Created Duration User Patch Repo Result
2023/03/25 15:38 44m bisect fix upstream job log (0) log
2022/11/21 20:00 39m bisect fix upstream job log (0) log

Sample crash report:
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fffbf819058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fffbf8190c8 RCX: 00007f098226bad9
RDX: 00000000200003c0 RSI: 00000000c4009420 RDI: 0000000000000004
RBP: 00007fffbf819060 R08: 0000000000000002 R09: 0000000000003233
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
R13: 00007fffbf8191a0 R14: 431bde82d7b634db R15: 00007fffbf8190a0
 </TASK>
------------[ cut here ]------------
kernel BUG at fs/btrfs/extent-tree.c:3252!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 5022 Comm: syz-executor168 Not tainted 6.4.0-syzkaller-11478-gd528014517f2 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
RIP: 0010:btrfs_free_tree_block+0x266/0xb40 fs/btrfs/extent-tree.c:3252
Code: 00 48 8b 74 24 10 31 d2 4c 89 e7 e8 24 b1 17 00 31 ff 89 c6 89 44 24 10 e8 47 f2 1d fe 8b 44 24 10 85 c0 74 26 e8 1a f6 1d fe <0f> 0b e8 13 f6 1d fe 48 89 ee 48 c7 c7 fa ff ff ff c6 44 24 58 01
RSP: 0018:ffffc90003abf368 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff888028b40000 RCX: 0000000000000000
RDX: ffff8880281cbb80 RSI: ffffffff8366e956 RDI: 0000000000000005
RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
R10: 00000000fffffff4 R11: 0000000000000001 R12: ffff8880749c2000
R13: 1ffff92000757e71 R14: 0000000000000001 R15: ffff888027498000
FS:  0000555556c7e3c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fffcb171908 CR3: 000000007accf000 CR4: 0000000000350ee0
Call Trace:
 <TASK>
 __btrfs_cow_block+0xf68/0x18e0 fs/btrfs/ctree.c:601
 btrfs_cow_block+0x2fa/0x820 fs/btrfs/ctree.c:712
 btrfs_search_slot+0x11c6/0x2dc0 fs/btrfs/ctree.c:2194
 btrfs_insert_empty_items+0xbd/0x1c0 fs/btrfs/ctree.c:4376
 btrfs_insert_empty_item fs/btrfs/ctree.h:635 [inline]
 insert_balance_item.isra.0+0x144/0x1460 fs/btrfs/volumes.c:3475
 btrfs_balance+0x1145/0x4100 fs/btrfs/volumes.c:4380
 btrfs_ioctl_balance fs/btrfs/ioctl.c:3604 [inline]
 btrfs_ioctl+0x12b7/0x5b50 fs/btrfs/ioctl.c:4637
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:870 [inline]
 __se_sys_ioctl fs/ioctl.c:856 [inline]
 __x64_sys_ioctl+0x19d/0x210 fs/ioctl.c:856
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f098226bad9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fffbf819058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fffbf8190c8 RCX: 00007f098226bad9
RDX: 00000000200003c0 RSI: 00000000c4009420 RDI: 0000000000000004
RBP: 00007fffbf819060 R08: 0000000000000002 R09: 0000000000003233
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
R13: 00007fffbf8191a0 R14: 431bde82d7b634db R15: 00007fffbf8190a0
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:btrfs_free_tree_block+0x266/0xb40 fs/btrfs/extent-tree.c:3252
Code: 00 48 8b 74 24 10 31 d2 4c 89 e7 e8 24 b1 17 00 31 ff 89 c6 89 44 24 10 e8 47 f2 1d fe 8b 44 24 10 85 c0 74 26 e8 1a f6 1d fe <0f> 0b e8 13 f6 1d fe 48 89 ee 48 c7 c7 fa ff ff ff c6 44 24 58 01
RSP: 0018:ffffc90003abf368 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff888028b40000 RCX: 0000000000000000
RDX: ffff8880281cbb80 RSI: ffffffff8366e956 RDI: 0000000000000005
RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
R10: 00000000fffffff4 R11: 0000000000000001 R12: ffff8880749c2000
R13: 1ffff92000757e71 R14: 0000000000000001 R15: ffff888027498000
FS:  0000555556c7e3c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fffcb171908 CR3: 000000007accf000 CR4: 0000000000350ee0
----------------
Code disassembly (best guess):
   0:	28 00                	sub    %al,(%rax)
   2:	00 00                	add    %al,(%rax)
   4:	75 05                	jne    0xb
   6:	48 83 c4 28          	add    $0x28,%rsp
   a:	c3                   	retq
   b:	e8 d1 17 00 00       	callq  0x17e1
  10:	90                   	nop
  11:	48 89 f8             	mov    %rdi,%rax
  14:	48 89 f7             	mov    %rsi,%rdi
  17:	48 89 d6             	mov    %rdx,%rsi
  1a:	48 89 ca             	mov    %rcx,%rdx
  1d:	4d 89 c2             	mov    %r8,%r10
  20:	4d 89 c8             	mov    %r9,%r8
  23:	4c 8b 4c 24 08       	mov    0x8(%rsp),%r9
  28:	0f 05                	syscall
* 2a:	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax <-- trapping instruction
  30:	73 01                	jae    0x33
  32:	c3                   	retq
  33:	48 c7 c1 c0 ff ff ff 	mov    $0xffffffffffffffc0,%rcx
  3a:	f7 d8                	neg    %eax
  3c:	64 89 01             	mov    %eax,%fs:(%rcx)
  3f:	48                   	rex.W

Crashes (83):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/07/05 10:02 upstream d528014517f2 80298b6f .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kasan-gce-root kernel BUG in btrfs_free_tree_block
2023/06/25 15:21 upstream a92b7d26c743 09ffe269 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kasan-gce-selinux-root kernel BUG in btrfs_free_tree_block
2023/06/10 15:45 upstream 64569520920a 7086cdb9 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kasan-gce-selinux-root kernel BUG in btrfs_free_tree_block
2023/05/05 00:02 upstream 1a5304fecee5 3a560463 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kasan-gce-smack-root kernel BUG in btrfs_free_tree_block
2022/12/27 05:54 upstream 1b929c02afd3 9da18ae8 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kasan-gce-root kernel BUG in btrfs_free_tree_block
2022/12/09 06:47 upstream ce19275f0103 1034e5fa .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kasan-gce-root kernel BUG in btrfs_free_tree_block
2022/12/02 21:45 upstream a4412fdd49dc e080de16 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-upstream-fs kernel BUG in btrfs_free_tree_block
2022/09/27 16:30 upstream 3800a713b607 10323ddf .config strace log report syz C ci2-upstream-fs kernel BUG in btrfs_free_tree_block
2023/08/13 05:16 linux-next 21ef7b1e17d0 39990d51 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-linux-next-kasan-gce-root kernel BUG in btrfs_free_tree_block
2023/01/22 02:27 linux-next d514392f17fd 559a440a .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-linux-next-kasan-gce-root kernel BUG in btrfs_free_tree_block
2023/01/06 17:24 linux-next cc3c08b41a9c 1dac8c7a .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-linux-next-kasan-gce-root kernel BUG in btrfs_free_tree_block
2022/09/26 05:11 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci c194837ebb57 0042f2b4 .config console log report syz C [disk image] [vmlinux] ci-upstream-gce-arm64 kernel BUG in btrfs_free_tree_block
2023/11/05 23:29 upstream 1c41041124bd 500bfdc4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in btrfs_free_tree_block
2023/10/31 22:22 upstream 5a6a09e97199 58499c95 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in btrfs_free_tree_block
2023/09/11 18:34 upstream 0bb80ecc33a8 59da8366 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in btrfs_free_tree_block
2023/09/05 08:18 upstream 3f86ed6ec0b3 0b6286dc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs kernel BUG in btrfs_free_tree_block
2023/09/03 14:34 upstream 92901222f83d 696ea0d2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in btrfs_free_tree_block
2023/11/25 10:59 upstream 0f5cc96c367f 5b429f39 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/11/20 21:42 upstream 98b1cc82c4af cb976f63 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/11/17 08:48 upstream 7475e51b8796 cb976f63 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/11/17 00:19 upstream 7475e51b8796 cb976f63 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/11/10 07:20 upstream a12deb44f973 45e9b83e .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/11/09 08:45 upstream 34f763262743 4862372a .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/11/04 15:13 upstream 2c40c1c6adab 500bfdc4 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/11/01 11:44 upstream 89ed67ef126c 69904c9f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/10/21 12:47 upstream 9c5d00cb7b6b 361b23dc .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/10/08 01:17 upstream 59f3fd30af35 5e837c76 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/10/02 09:46 upstream e81a2dabc3f3 8e26a358 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/09/30 16:32 upstream 9f3ebbef746f 8e26a358 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/09/15 20:23 upstream 9fdfb15a3dbf 0b6a67ac .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/09/11 22:08 upstream 0bb80ecc33a8 59da8366 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/09/08 12:33 upstream ff6e6ded5472 72324844 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/09/06 02:25 upstream 65d6e954e378 0b6286dc .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/09/05 08:07 upstream 7a1415eebeec 0b6286dc .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/11/08 13:19 upstream 305230142ae0 b93f63e8 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in btrfs_free_tree_block
2023/09/22 02:28 upstream b5cbe7c00aa0 0b6a67ac .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in btrfs_free_tree_block
2023/08/28 20:40 upstream 2dde18cd1d8f 7ba13a15 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/08/28 10:26 upstream 2dde18cd1d8f 03d9c195 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in btrfs_free_tree_block
2023/08/20 08:36 upstream 9e6c269de404 d216d8a0 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/08/15 19:42 upstream 91aa6c412d7f 39990d51 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/08/06 13:44 upstream f0ab9f34e59e 4ffcc9ef .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/07/31 13:32 upstream 5d0c230f1de8 2a0d0f29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in btrfs_free_tree_block
2023/07/27 16:20 upstream 0a8db05b571a 92476829 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/07/27 11:34 upstream 0a8db05b571a 41fe1bae .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/07/25 15:33 upstream 0b5547c51827 3b91ad04 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/07/25 05:04 upstream 20ea1e7d13c1 9a0ddda3 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/07/17 06:49 upstream 20edcec23f92 35d9ecc5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root kernel BUG in btrfs_free_tree_block
2023/07/10 01:58 upstream 06c2afb862f9 668cb1fa .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/07/07 15:22 upstream a452483508d7 22ae5830 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root kernel BUG in btrfs_free_tree_block
2023/07/01 15:44 upstream b25f62ccb490 af3053d2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root kernel BUG in btrfs_free_tree_block
2023/06/29 19:51 upstream 6e2332e0ab53 134ddc02 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/06/25 07:37 upstream a92b7d26c743 79782afc .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/06/22 06:08 upstream 2214170caabb 79782afc .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/06/18 08:59 upstream 1b29d271614a f3921d4d .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2023/06/16 06:36 upstream b6dad5178cea f3921d4d .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream kernel BUG in btrfs_free_tree_block
2022/10/19 13:58 upstream 493ffd6605b2 b31320fc .config console log report info [disk image] [vmlinux] ci2-upstream-fs kernel BUG in btrfs_free_tree_block
2023/08/24 23:05 upstream b5cc3833f13a 6f19564f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in btrfs_free_tree_block
2023/08/10 07:35 upstream cacc6e22932f a1790533 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 kernel BUG in btrfs_free_tree_block
2023/09/14 02:39 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci fe4469582053 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in btrfs_free_tree_block
2023/08/24 09:34 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 35e2132122ba 4d7ae7ab .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in btrfs_free_tree_block
2023/08/02 20:12 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 2642b8a18760 39a91c18 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in btrfs_free_tree_block
2023/07/09 08:29 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci e40939bbfc68 668cb1fa .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in btrfs_free_tree_block
2023/06/30 22:52 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci e40939bbfc68 01298212 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 kernel BUG in btrfs_free_tree_block
* Struck through repros no longer work on HEAD.