syzbot


kernel BUG in add_to_swap

Status: upstream: reported on 2023/12/27 22:40
Reported-by: syzbot+f9bb47b6c9114628ff82@syzkaller.appspotmail.com
First crash: 131d, last: 48d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG in add_to_swap mm 6 78d 139d 0/26 upstream: reported on 2023/12/19 13:09
linux-6.1 kernel BUG in add_to_swap 2 61d 117d 0/3 upstream: reported on 2024/01/10 22:06

Sample crash report:
raw: 0000000000020001 0000000000000000 00000002ffffffff ffff00017d940000
page dumped because: VM_BUG_ON_PAGE(!PageUptodate(page))
------------[ cut here ]------------
kernel BUG at mm/swap_state.c:190!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 15718 Comm: syz-executor.3 Not tainted 5.15.152-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : add_to_swap+0x22c/0x24c mm/swap_state.c:190
lr : add_to_swap+0x22c/0x24c mm/swap_state.c:190
sp : ffff80001d906050
x29: ffff80001d906050 x28: 0000000000000000 x27: ffff80001d906600
x26: fffffc000556ec08 x25: dead000000000100 x24: 1fffff8000aadd81
x23: dfff800000000000 x22: 0000000000000000 x21: 05ffc00000480809
x20: 05ffc00000480809 x19: fffffc000556ec00 x18: 1fffe0003690298e
x17: 1fffe0003690298e x16: ffff80001197c3d4 x15: ffff8000149aec00
x14: 1ffff0000292206a x13: dfff800000000000 x12: 0000000000040000
x11: 000000000003ffff x10: ffff80001d979000 x9 : 01b1b45cb40f9e00
x8 : 01b1b45cb40f9e00 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff80000a9623a0
x2 : ffff0001b4814d10 x1 : 0000000100000000 x0 : 0000000000000038
Call trace:
 add_to_swap+0x22c/0x24c mm/swap_state.c:190
 shrink_page_list+0x354c/0x63f4 mm/vmscan.c:1566
 shrink_inactive_list mm/vmscan.c:2216 [inline]
 shrink_list mm/vmscan.c:2443 [inline]
 shrink_lruvec+0x1550/0x2ae4 mm/vmscan.c:2762
 shrink_node_memcgs mm/vmscan.c:2949 [inline]
 shrink_node+0xdbc/0x21b4 mm/vmscan.c:3072
 shrink_zones mm/vmscan.c:3275 [inline]
 do_try_to_free_pages+0x538/0x126c mm/vmscan.c:3330
 try_to_free_mem_cgroup_pages+0x3a4/0xbb4 mm/vmscan.c:3644
 try_charge_memcg+0x3f8/0x128c mm/memcontrol.c:2651
 try_charge mm/memcontrol.c:2776 [inline]
 charge_memcg+0xac/0x220 mm/memcontrol.c:6742
 __mem_cgroup_charge+0x38/0xa8 mm/memcontrol.c:6778
 mem_cgroup_charge include/linux/memcontrol.h:700 [inline]
 __add_to_page_cache_locked+0x968/0xe68 mm/filemap.c:892
 add_to_page_cache_lru+0x1bc/0x4f0 mm/filemap.c:984
 page_cache_ra_unbounded+0x354/0x654 mm/readahead.c:222
 do_page_cache_ra mm/readahead.c:269 [inline]
 ondemand_readahead+0x62c/0xd0c mm/readahead.c:552
 page_cache_sync_ra+0x130/0x180 mm/readahead.c:580
 page_cache_sync_readahead include/linux/pagemap.h:833 [inline]
 filemap_get_pages mm/filemap.c:2551 [inline]
 filemap_read+0x52c/0x1bd8 mm/filemap.c:2634
 generic_file_read_iter+0xa0/0x3c4 mm/filemap.c:2794
 blkdev_read_iter+0x134/0x184 block/fops.c:560
 do_iter_readv_writev+0x420/0x5f8
 do_iter_read+0x1c4/0x67c fs/read_write.c:790
 vfs_readv fs/read_write.c:910 [inline]
 do_preadv+0x1e4/0x324 fs/read_write.c:1002
 __do_sys_preadv fs/read_write.c:1052 [inline]
 __se_sys_preadv fs/read_write.c:1047 [inline]
 __arm64_sys_preadv+0xa0/0xb8 fs/read_write.c:1047
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
Code: b0049801 910f0021 aa1303e0 97fd4e68 (d4210000) 
---[ end trace bd0ab22a86feb9ac ]---

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/03/20 00:37 linux-5.15.y b95c01af2113 e104824c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in add_to_swap
2024/02/16 20:51 linux-5.15.y 6139f2a02fe0 578f7538 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in add_to_swap
2023/12/27 22:40 linux-5.15.y d93fa2c78854 fb427a07 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 kernel BUG in add_to_swap
* Struck through repros no longer work on HEAD.