syzbot


invalid opcode in __traceiter_mm_lru_insertion

Status: upstream: reported C repro on 2025/08/07 22:15
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+f11516161bde4f69656a@syzkaller.appspotmail.com
First crash: 20d, last: 6d21h
Bug presence (2)
Date Name Commit Repro Result
2025/08/11 lts (merge base) f2198ea7eb3e C [report] invalid opcode in __traceiter_mm_lru_insertion
2025/08/11 upstream (ToT) 8f5ae30d69d7 C [report] invalid opcode in __traceiter_mm_lru_insertion

Sample crash report:
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
CFI failure at __traceiter_mm_lru_insertion+0x75/0xc0 include/trace/events/pagemap.h:28 (target: tp_stub_func+0x0/0x10; expected type: 0x1afd09c9)
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 299 Comm: syz-executor254 Not tainted 6.1.145-syzkaller-00002-gc750dc582629 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
RIP: 0010:__traceiter_mm_lru_insertion+0x75/0xc0 include/trace/events/pagemap.h:28
Code: 49 8d 7e 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 1e ce 16 00 49 8b 7f 08 48 89 de 41 ba 37 f6 02 e5 45 03 55 fc 74 02 <0f> 0b 41 ff d5 49 83 c6 18 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74
RSP: 0018:ffffc90000e878d8 EFLAGS: 00010093

RAX: 1ffff1102224c423 RBX: ffffea0004914dc0 RCX: ffff88810ea23cc0
RDX: 0000000000000000 RSI: ffffea0004914dc0 RDI: ffffc900000ed000
RBP: ffffc90000e87900 R08: dffffc0000000000 R09: fffffbfff0ee45d6
R10: 000000008a435d43 R11: 1ffffffff0ee45d5 R12: dffffc0000000000
R13: ffffffff81711ed0 R14: ffff888111262110 R15: ffff888111262110
FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f82d2dec1f0 CR3: 00000001224b9000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 trace_mm_lru_insertion include/trace/events/pagemap.h:28 [inline]
 lru_add_fn+0x616/0x660 mm/swap.c:221
 folio_batch_move_lru+0x282/0x470 mm/swap.c:238
 lru_add_drain_cpu+0xf8/0x4b0 mm/swap.c:661
 lru_add_drain+0x3d/0xc0 mm/swap.c:765
 exit_mmap+0x20d/0xb60 mm/mmap.c:3360
 __mmput+0x93/0x320 kernel/fork.c:1299
 mmput+0x4b/0x150 kernel/fork.c:1322
 exit_mm kernel/exit.c:568 [inline]
 do_exit+0x981/0x2650 kernel/exit.c:873
 do_group_exit+0x210/0x2d0 kernel/exit.c:1028
 __do_sys_exit_group kernel/exit.c:1039 [inline]
 __se_sys_exit_group kernel/exit.c:1037 [inline]
 __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1037
 x64_sys_call+0x7b4/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f82d2d77ba9
Code: Unable to access opcode bytes at 0x7f82d2d77b7f.
RSP: 002b:00007ffdab10efe8 EFLAGS: 00000246
 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f82d2d77ba9
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 00007f82d2deb370 R08: ffffffffffffffb8 R09: 0000000000000140
R10: 0000000000000001 R11: 0000000000000246 R12: 00007f82d2deb370
R13: 0000000000000000 R14: 00007f82d2debde0 R15: 00007f82d2d411a0
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__traceiter_mm_lru_insertion+0x75/0xc0 include/trace/events/pagemap.h:28
Code: 49 8d 7e 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 1e ce 16 00 49 8b 7f 08 48 89 de 41 ba 37 f6 02 e5 45 03 55 fc 74 02 <0f> 0b 41 ff d5 49 83 c6 18 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74
RSP: 0018:ffffc90000e878d8 EFLAGS: 00010093
RAX: 1ffff1102224c423 RBX: ffffea0004914dc0 RCX: ffff88810ea23cc0
RDX: 0000000000000000 RSI: ffffea0004914dc0 RDI: ffffc900000ed000
RBP: ffffc90000e87900 R08: dffffc0000000000 R09: fffffbfff0ee45d6
R10: 000000008a435d43 R11: 1ffffffff0ee45d5 R12: dffffc0000000000
R13: ffffffff81711ed0 R14: ffff888111262110 R15: ffff888111262110
FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f82d2dec1f0 CR3: 00000001224b9000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/08/07 22:06 android14-6.1 c750dc582629 04cffc22 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf invalid opcode in __traceiter_mm_lru_insertion
2025/08/21 17:18 android14-6.1 26fad7be44e2 3e79b825 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf invalid opcode in __traceiter_mm_lru_insertion
2025/08/07 19:51 android14-6.1 c750dc582629 04cffc22 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-1-perf invalid opcode in __traceiter_mm_lru_insertion
* Struck through repros no longer work on HEAD.