bisecting cause commit starting from bdcc9f6a568275aed4cc32fd2312432d2ff1b704 building syzkaller on 098b5d530648147c744a7c2eb8b78c1307f9d3ce testing commit bdcc9f6a568275aed4cc32fd2312432d2ff1b704 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 48aa9fa11f09c25fb5e2cc3d4865740e75a46554194fd385db06b63ea44c2bc2 run #0: crashed: KASAN: use-after-free Read in __io_free_req run #1: crashed: INFO: rcu detected stall in tctx_task_work run #2: crashed: WARNING: ODEBUG bug in __io_free_req run #3: crashed: WARNING: ODEBUG bug in __io_free_req run #4: crashed: INFO: rcu detected stall in tctx_task_work run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK reproducer seems to be flaky testing release v5.14 testing commit 7d2a07b769330c34b4deabeed939325c77a7ec2f compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 188662a1d46039e68d7e80a1aac184133bb46fdd40eebe4a31907f7a00d06475 all runs: OK # git bisect start bdcc9f6a568275aed4cc32fd2312432d2ff1b704 7d2a07b769330c34b4deabeed939325c77a7ec2f Bisecting: 13044 revisions left to test after this (roughly 14 steps) [412a5feba414127a6c69452dfad454086867011f] Merge 5.15-rc6 into tty-next testing commit 412a5feba414127a6c69452dfad454086867011f compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 39c44d63e905fce923e37851996f6ee93d8fc08ea46f484c2cb70f7a12333269 all runs: OK # git bisect good 412a5feba414127a6c69452dfad454086867011f Bisecting: 6532 revisions left to test after this (roughly 13 steps) [0306023d64d510a92f6bae2c6759fd854ee5a1c3] Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/cryptodev-2.6.git testing commit 0306023d64d510a92f6bae2c6759fd854ee5a1c3 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 29aeb77b276f31963723690075b88c022e169d7c82c90fb45d642cce9077aaff all runs: OK # git bisect good 0306023d64d510a92f6bae2c6759fd854ee5a1c3 Bisecting: 3150 revisions left to test after this (roughly 12 steps) [ed3cecd2f5acb59937ddf0609e8cde33555c31dd] Merge branch 'auto-latest' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git testing commit ed3cecd2f5acb59937ddf0609e8cde33555c31dd compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: fc80d02fb691b081866741f012c3fc9365a7db1950cd2243140da5e5c58c4d5d all runs: OK # git bisect good ed3cecd2f5acb59937ddf0609e8cde33555c31dd Bisecting: 1468 revisions left to test after this (roughly 11 steps) [cc4db1356a61f79a66596f26a4ca4ae61a9b1056] Merge branch 'staging-next' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging.git testing commit cc4db1356a61f79a66596f26a4ca4ae61a9b1056 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 503f3bc9b19b2450570e091a7aab1b0a2f855733194f9fec23ebe59f3fbe8a6e all runs: OK # git bisect good cc4db1356a61f79a66596f26a4ca4ae61a9b1056 Bisecting: 726 revisions left to test after this (roughly 10 steps) [d0751176f9a416823cc888ef8dc205434267bdf3] Merge branch 'rtc-next' of git://git.kernel.org/pub/scm/linux/kernel/git/abelloni/linux.git testing commit d0751176f9a416823cc888ef8dc205434267bdf3 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 14447689735eaed3daf339427afe03616fcdbf3251b76697f9b6e361143d6bc2 all runs: OK # git bisect good d0751176f9a416823cc888ef8dc205434267bdf3 Bisecting: 363 revisions left to test after this (roughly 9 steps) [57597ec67814adf8fc98b58a63426c8c0497f5ab] checkpatch: improve EXPORT_SYMBOL test for EXPORT_SYMBOL_NS uses testing commit 57597ec67814adf8fc98b58a63426c8c0497f5ab compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 5c39886bd93d2d462048320ff91458f47c0b5ecda8dd16a083c0d9829064eeb8 all runs: OK # git bisect good 57597ec67814adf8fc98b58a63426c8c0497f5ab Bisecting: 188 revisions left to test after this (roughly 8 steps) [bf31a6a73b51413c22cd2c2007a699c5976374dc] Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/cxl/cxl.git testing commit bf31a6a73b51413c22cd2c2007a699c5976374dc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 60e5469595399bc60733aaa7b9642bfc45d700140696b805f3cf6d8e756935b9 all runs: OK # git bisect good bf31a6a73b51413c22cd2c2007a699c5976374dc Bisecting: 97 revisions left to test after this (roughly 7 steps) [7ef408b68e8eacd22cac7b4f1a4d0822578a2952] Merge branch 'for-next' of git://git.infradead.org/users/willy/pagecache.git testing commit 7ef408b68e8eacd22cac7b4f1a4d0822578a2952 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b773cf5916e29354d2923803765b449f1e3c97f3ef6c506f7a1a9e6ccb2f4833 all runs: OK # git bisect good 7ef408b68e8eacd22cac7b4f1a4d0822578a2952 Bisecting: 48 revisions left to test after this (roughly 6 steps) [31a70055d46f52618c5170f8b2cbc0b363f79716] shm: extend forced shm destroy to support objects from several IPC nses testing commit 31a70055d46f52618c5170f8b2cbc0b363f79716 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: f7de4880e49d8d449539d4be82d921f1607abe77695ff9eb1e6815f0d8660f48 all runs: OK # git bisect good 31a70055d46f52618c5170f8b2cbc0b363f79716 Bisecting: 26 revisions left to test after this (roughly 5 steps) [ad9de0fdbe8836c7a73d3d6bd001d7d24da95c71] Merge branch 'zstd-1.4.10' of https://github.com/terrelln/linux.git testing commit ad9de0fdbe8836c7a73d3d6bd001d7d24da95c71 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 4eb369c3b8c231a629a5c5c51317994bcedb2d98782ae26e58bccb91bf63654f all runs: OK # git bisect good ad9de0fdbe8836c7a73d3d6bd001d7d24da95c71 Bisecting: 13 revisions left to test after this (roughly 4 steps) [35d719bb5b562a36f8c853b791fc6c1df2372fd6] disable ntfs for now due to testing commit 35d719bb5b562a36f8c853b791fc6c1df2372fd6 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 8fcf2a41740e9398c8ef960057d4207974d39beae61603803ce282bccce46483 all runs: OK # git bisect good 35d719bb5b562a36f8c853b791fc6c1df2372fd6 Bisecting: 6 revisions left to test after this (roughly 3 steps) [8c91a3bff879ab22943b4600d581ef0996a1b6b9] mm: allow only SLUB on PREEMPT_RT testing commit 8c91a3bff879ab22943b4600d581ef0996a1b6b9 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 80823a72c4054a46a279752c3affea35e5bcba519b54268db5de82d9804e537d run #0: crashed: INFO: rcu detected stall in tctx_task_work run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 8c91a3bff879ab22943b4600d581ef0996a1b6b9 Bisecting: 3 revisions left to test after this (roughly 2 steps) [445acdb34c9016c7bd818aefa649555999e84883] lib/stackdepot: allow optional init and stack_table allocation by kvmalloc() testing commit 445acdb34c9016c7bd818aefa649555999e84883 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 4b0819f5d6e6f0d914b975b70f3ef1343ff34f792406ae3b5242a926e15a5e56 run #0: crashed: INFO: rcu detected stall in tctx_task_work run #1: crashed: WARNING: ODEBUG bug in __io_free_req run #2: crashed: INFO: rcu detected stall in tctx_task_work run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: crashed: INFO: rcu detected stall in tctx_task_work run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 445acdb34c9016c7bd818aefa649555999e84883 Bisecting: 0 revisions left to test after this (roughly 1 step) [418739d9f3d24c4f7314309547350370f4287016] Merge branch 'akpm-current/current' testing commit 418739d9f3d24c4f7314309547350370f4287016 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 1aa568ca7a01bc9e1289c2b9dae1232a18d1aaf3825d98f0320f1bfb0720a41c run #0: crashed: WARNING: ODEBUG bug in __io_free_req run #1: crashed: WARNING: ODEBUG bug in __io_free_req run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 418739d9f3d24c4f7314309547350370f4287016 Bisecting: 0 revisions left to test after this (roughly 0 steps) [a3b36fccd9f99b68c6bdd54c65c298a4cec1ecae] kernel.h: split out instruction pointer accessors testing commit a3b36fccd9f99b68c6bdd54c65c298a4cec1ecae compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: f7de4880e49d8d449539d4be82d921f1607abe77695ff9eb1e6815f0d8660f48 all runs: OK # git bisect good a3b36fccd9f99b68c6bdd54c65c298a4cec1ecae 418739d9f3d24c4f7314309547350370f4287016 is the first bad commit commit 418739d9f3d24c4f7314309547350370f4287016 Merge: 35d719bb5b56 a3b36fccd9f9 Author: Stephen Rothwell Date: Fri Oct 29 18:17:02 2021 +1100 Merge branch 'akpm-current/current' Documentation/admin-guide/blockdev/zram.rst | 8 + Documentation/admin-guide/cgroup-v1/memory.rst | 11 +- Documentation/admin-guide/kernel-parameters.txt | 14 +- Documentation/admin-guide/mm/damon/index.rst | 1 + Documentation/admin-guide/mm/damon/reclaim.rst | 235 +++++++ Documentation/admin-guide/mm/damon/start.rst | 128 ++-- Documentation/admin-guide/mm/damon/usage.rst | 109 +++- Documentation/admin-guide/mm/hugetlbpage.rst | 42 +- Documentation/admin-guide/mm/index.rst | 2 + Documentation/admin-guide/mm/memory-hotplug.rst | 143 ++++- Documentation/admin-guide/mm/pagemap.rst | 53 +- Documentation/admin-guide/mm/swap_numa.rst | 80 +++ Documentation/admin-guide/mm/zswap.rst | 152 +++++ Documentation/core-api/memory-hotplug.rst | 3 - Documentation/dev-tools/kcov.rst | 5 + Documentation/dev-tools/kfence.rst | 23 +- .../translations/zh_CN/core-api/memory-hotplug.rst | 4 - Documentation/vm/damon/design.rst | 29 +- Documentation/vm/damon/faq.rst | 5 +- Documentation/vm/damon/index.rst | 1 - Documentation/vm/index.rst | 26 +- Documentation/vm/page_owner.rst | 23 +- Documentation/vm/swap_numa.rst | 80 --- Documentation/vm/zswap.rst | 152 ----- MAINTAINERS | 23 +- Makefile | 15 + arch/Kconfig | 28 + arch/alpha/kernel/core_irongate.c | 2 +- arch/alpha/kernel/traps.c | 4 +- arch/arc/mm/init.c | 6 +- arch/arm/mach-hisi/platmcpm.c | 2 +- arch/arm/mach-rpc/ecard.c | 2 +- arch/arm/mm/init.c | 2 +- arch/arm64/Kconfig | 4 + arch/arm64/mm/kasan_init.c | 16 + arch/arm64/mm/mmu.c | 4 +- arch/ia64/mm/contig.c | 2 +- arch/ia64/mm/init.c | 2 +- arch/m68k/mm/mcfmmu.c | 3 +- arch/m68k/mm/motorola.c | 6 +- arch/microblaze/mm/pgtable.c | 3 +- arch/mips/loongson64/init.c | 4 +- arch/mips/mm/init.c | 2 +- arch/mips/sgi-ip27/ip27-memory.c | 3 +- arch/mips/sgi-ip30/ip30-setup.c | 6 +- arch/powerpc/Kconfig | 1 + arch/powerpc/configs/skiroot_defconfig | 1 - arch/powerpc/include/asm/machdep.h | 2 +- arch/powerpc/include/asm/sections.h | 13 - arch/powerpc/kernel/dt_cpu_ftrs.c | 4 +- arch/powerpc/kernel/paca.c | 8 +- arch/powerpc/kernel/setup-common.c | 2 +- arch/powerpc/kernel/setup_64.c | 4 +- arch/powerpc/kernel/smp.c | 2 +- arch/powerpc/mm/book3s64/radix_tlb.c | 4 +- arch/powerpc/mm/hugetlbpage.c | 9 +- arch/powerpc/mm/pgtable_32.c | 7 +- arch/powerpc/platforms/powernv/pci-ioda.c | 2 +- arch/powerpc/platforms/powernv/setup.c | 4 +- arch/powerpc/platforms/pseries/setup.c | 2 +- arch/powerpc/platforms/pseries/svm.c | 3 +- arch/riscv/kernel/setup.c | 4 +- arch/riscv/lib/delay.c | 4 + arch/s390/include/asm/facility.h | 4 + arch/s390/include/asm/sections.h | 12 - arch/s390/kernel/setup.c | 11 +- arch/s390/kernel/smp.c | 4 +- arch/s390/kernel/uv.c | 2 +- arch/s390/mm/init.c | 3 - arch/s390/mm/kasan_init.c | 2 +- arch/sh/boards/mach-ap325rxa/setup.c | 2 +- arch/sh/boards/mach-ecovec24/setup.c | 4 +- arch/sh/boards/mach-kfr2r09/setup.c | 2 +- arch/sh/boards/mach-migor/setup.c | 2 +- arch/sh/boards/mach-se/7724/setup.c | 4 +- arch/sparc/kernel/smp_64.c | 2 +- arch/um/kernel/mem.c | 2 +- arch/x86/Kconfig | 6 +- arch/x86/kernel/aperture_64.c | 13 +- arch/x86/kernel/setup.c | 4 +- arch/x86/kernel/setup_percpu.c | 2 +- arch/x86/kernel/unwind_orc.c | 2 +- arch/x86/mm/init.c | 2 +- arch/x86/mm/init_32.c | 45 +- arch/x86/mm/kasan_init_64.c | 4 +- arch/x86/mm/numa.c | 2 +- arch/x86/mm/numa_emulation.c | 2 +- arch/x86/xen/mmu_hvm.c | 37 +- arch/x86/xen/mmu_pv.c | 6 +- arch/x86/xen/p2m.c | 2 +- arch/x86/xen/setup.c | 6 +- drivers/base/Makefile | 2 +- drivers/base/arch_numa.c | 92 ++- drivers/base/node.c | 9 +- drivers/block/zram/zram_drv.c | 66 +- drivers/firmware/efi/memmap.c | 2 +- drivers/gpu/drm/drm_dp_mst_topology.c | 5 +- drivers/gpu/drm/drm_mm.c | 5 +- drivers/gpu/drm/i915/i915_vma.c | 5 +- drivers/gpu/drm/i915/intel_runtime_pm.c | 20 +- drivers/hwmon/occ/p9_sbe.c | 1 + drivers/macintosh/smu.c | 2 +- .../media/dvb-frontends/cxd2880/cxd2880_common.h | 1 + drivers/mmc/core/mmc_test.c | 1 - drivers/mtd/mtdcore.c | 1 + drivers/of/kexec.c | 4 +- drivers/of/of_reserved_mem.c | 5 +- drivers/rapidio/devices/rio_mport_cdev.c | 9 +- drivers/s390/char/sclp_early.c | 2 +- drivers/usb/early/xhci-dbc.c | 10 +- drivers/virtio/Kconfig | 3 +- drivers/virtio/virtio_mem.c | 301 ++++++--- drivers/xen/swiotlb-xen.c | 2 +- fs/binfmt_elf.c | 56 +- fs/buffer.c | 56 +- fs/coda/cnode.c | 13 +- fs/coda/coda_linux.c | 39 +- fs/coda/coda_linux.h | 6 +- fs/coda/dir.c | 20 +- fs/coda/file.c | 12 +- fs/coda/psdev.c | 14 +- fs/coda/upcall.c | 3 +- fs/d_path.c | 8 +- fs/exec.c | 4 +- fs/hfs/inode.c | 6 +- fs/hfsplus/catalog.c | 16 +- fs/hfsplus/dir.c | 4 +- fs/hfsplus/hfsplus_raw.h | 12 +- fs/hfsplus/inode.c | 12 +- fs/hfsplus/xattr.c | 18 +- fs/hugetlbfs/inode.c | 7 +- fs/inode.c | 46 +- fs/internal.h | 1 - fs/nilfs2/alloc.c | 2 +- fs/nilfs2/alloc.h | 2 +- fs/nilfs2/bmap.c | 2 +- fs/nilfs2/bmap.h | 2 +- fs/nilfs2/btnode.c | 2 +- fs/nilfs2/btnode.h | 2 +- fs/nilfs2/btree.c | 2 +- fs/nilfs2/btree.h | 2 +- fs/nilfs2/cpfile.c | 2 +- fs/nilfs2/cpfile.h | 2 +- fs/nilfs2/dat.c | 2 +- fs/nilfs2/dat.h | 2 +- fs/nilfs2/dir.c | 2 +- fs/nilfs2/direct.c | 2 +- fs/nilfs2/direct.h | 2 +- fs/nilfs2/file.c | 2 +- fs/nilfs2/gcinode.c | 2 +- fs/nilfs2/ifile.c | 2 +- fs/nilfs2/ifile.h | 2 +- fs/nilfs2/inode.c | 2 +- fs/nilfs2/ioctl.c | 2 +- fs/nilfs2/mdt.c | 2 +- fs/nilfs2/mdt.h | 2 +- fs/nilfs2/namei.c | 2 +- fs/nilfs2/nilfs.h | 2 +- fs/nilfs2/page.c | 2 +- fs/nilfs2/page.h | 2 +- fs/nilfs2/recovery.c | 2 +- fs/nilfs2/segbuf.c | 2 +- fs/nilfs2/segbuf.h | 2 +- fs/nilfs2/segment.c | 2 +- fs/nilfs2/segment.h | 2 +- fs/nilfs2/sufile.c | 2 +- fs/nilfs2/sufile.h | 2 +- fs/nilfs2/super.c | 2 +- fs/nilfs2/sysfs.c | 78 +-- fs/nilfs2/sysfs.h | 2 +- fs/nilfs2/the_nilfs.c | 2 +- fs/nilfs2/the_nilfs.h | 2 +- fs/ocfs2/alloc.c | 21 +- fs/ocfs2/dlm/dlmrecovery.c | 1 - fs/ocfs2/file.c | 8 +- fs/ocfs2/inode.c | 4 +- fs/ocfs2/journal.c | 26 +- fs/ocfs2/journal.h | 3 +- fs/ocfs2/namei.c | 49 +- fs/ocfs2/namei.h | 2 + fs/ocfs2/refcounttree.c | 15 +- fs/ocfs2/suballoc.c | 22 +- fs/ocfs2/super.c | 40 +- fs/ocfs2/xattr.c | 12 +- fs/ocfs2/xattr.h | 1 + fs/open.c | 16 +- fs/posix_acl.c | 3 +- fs/proc/base.c | 21 +- fs/proc/fd.c | 23 +- fs/proc/page.c | 40 +- fs/proc/task_mmu.c | 28 +- fs/proc/vmcore.c | 105 +++- fs/ramfs/inode.c | 11 +- fs/seq_file.c | 16 - fs/super.c | 3 + fs/sysv/super.c | 6 +- include/asm-generic/sections.h | 89 ++- include/kunit/test.h | 13 +- include/linux/backing-dev-defs.h | 3 + include/linux/backing-dev.h | 1 - include/linux/bottom_half.h | 1 + include/linux/cma.h | 1 + include/linux/compiler-gcc.h | 8 + include/linux/compiler_attributes.h | 10 + include/linux/compiler_types.h | 12 + include/linux/container_of.h | 40 ++ include/linux/cpuset.h | 17 + include/linux/crash_dump.h | 26 +- include/linux/damon.h | 234 ++++++- include/linux/delay.h | 2 +- include/linux/fs.h | 2 + include/linux/generic-radix-tree.h | 3 +- include/linux/gfp.h | 8 +- include/linux/highmem.h | 28 +- include/linux/hugetlb.h | 36 +- include/linux/instruction_pointer.h | 8 + include/linux/io-mapping.h | 6 - include/linux/ipc_namespace.h | 15 + include/linux/kallsyms.h | 13 +- include/linux/kasan.h | 8 + include/linux/kernel.h | 40 +- include/linux/kfence.h | 21 +- include/linux/list.h | 4 +- include/linux/llist.h | 4 +- include/linux/memblock.h | 48 +- include/linux/memcontrol.h | 9 +- include/linux/memory.h | 26 +- include/linux/memory_hotplug.h | 3 - include/linux/mempolicy.h | 10 +- include/linux/memremap.h | 6 + include/linux/migrate.h | 24 +- include/linux/migrate_mode.h | 13 + include/linux/mm.h | 57 +- include/linux/mm_types.h | 2 - include/linux/mmzone.h | 41 +- include/linux/node.h | 4 +- include/linux/page-flags.h | 25 +- include/linux/page_owner.h | 12 +- include/linux/pagemap.h | 50 ++ include/linux/percpu.h | 6 +- include/linux/plist.h | 5 +- include/linux/radix-tree.h | 4 +- include/linux/rmap.h | 8 +- include/linux/rwsem.h | 1 - include/linux/sbitmap.h | 11 +- include/linux/sched.h | 8 + include/linux/sched/mm.h | 21 + include/linux/sched/task.h | 2 +- include/linux/seq_file.h | 17 +- include/linux/shm.h | 2 +- include/linux/signal.h | 1 - include/linux/slab.h | 135 ++-- include/linux/slub_def.h | 13 +- include/linux/smp.h | 1 - include/linux/spinlock.h | 1 - include/linux/stackdepot.h | 11 +- include/linux/stacktrace.h | 1 + include/linux/string_helpers.h | 1 + include/linux/swap.h | 1 - include/linux/vmalloc.h | 24 +- include/media/media-entity.h | 3 +- include/trace/events/mmap_lock.h | 48 +- include/trace/events/vmscan.h | 38 ++ include/trace/events/writeback.h | 7 - init/initramfs.c | 2 +- init/main.c | 35 +- ipc/ipc_sysctl.c | 32 +- ipc/shm.c | 170 +++-- ipc/util.c | 6 +- kernel/cgroup/cpuset.c | 23 + kernel/cpu.c | 2 +- kernel/dma/swiotlb.c | 2 +- kernel/exit.c | 2 +- kernel/extable.c | 35 +- kernel/fork.c | 60 +- kernel/hung_task.c | 44 ++ kernel/kcov.c | 36 +- kernel/kexec_file.c | 5 + kernel/kthread.c | 21 +- kernel/locking/lockdep.c | 18 +- kernel/printk/printk.c | 4 +- kernel/resource.c | 54 +- kernel/sched/core.c | 35 +- kernel/sched/sched.h | 4 +- kernel/sched/topology.c | 1 - kernel/stacktrace.c | 30 + kernel/sysctl.c | 8 +- kernel/trace/ftrace.c | 2 +- kernel/tsacct.c | 2 +- kernel/workqueue.c | 2 +- lib/Kconfig.debug | 8 +- lib/Kconfig.kfence | 26 +- lib/bootconfig.c | 2 +- lib/cpumask.c | 2 +- lib/scatterlist.c | 11 +- lib/stackdepot.c | 118 +++- lib/test_kasan.c | 29 +- lib/test_kasan_module.c | 2 + lib/vsprintf.c | 3 +- mm/Kconfig | 18 +- mm/backing-dev.c | 72 +-- mm/cma.c | 26 +- mm/compaction.c | 10 +- mm/damon/Kconfig | 24 +- mm/damon/Makefile | 4 +- mm/damon/core.c | 446 +++++++++++-- mm/damon/dbgfs-test.h | 54 ++ mm/damon/dbgfs.c | 425 +++++++++++-- mm/damon/paddr.c | 273 ++++++++ mm/damon/prmtv-common.c | 133 ++++ mm/damon/prmtv-common.h | 20 + mm/damon/reclaim.c | 356 +++++++++++ mm/damon/vaddr.c | 167 +++-- mm/debug.c | 20 +- mm/debug_vm_pgtable.c | 7 +- mm/filemap.c | 86 +-- mm/gup.c | 5 +- mm/huge_memory.c | 2 + mm/hugetlb.c | 699 +++++++++++++++++++-- mm/hugetlb_cgroup.c | 3 - mm/internal.h | 22 + mm/kasan/common.c | 8 +- mm/kasan/generic.c | 14 +- mm/kasan/kasan.h | 2 +- mm/kasan/report.c | 17 +- mm/kasan/shadow.c | 5 + mm/kfence/core.c | 200 ++++-- mm/kfence/kfence.h | 2 + mm/kfence/kfence_test.c | 14 +- mm/khugepaged.c | 36 +- mm/list_lru.c | 58 +- mm/memblock.c | 35 +- mm/memcontrol.c | 213 +++---- mm/memory-failure.c | 139 ++-- mm/memory.c | 175 +++--- mm/memory_hotplug.c | 59 +- mm/mempolicy.c | 155 +++-- mm/memremap.c | 20 + mm/migrate.c | 61 ++ mm/mmap.c | 2 +- mm/mprotect.c | 5 +- mm/mremap.c | 86 ++- mm/nommu.c | 6 - mm/oom_kill.c | 55 +- mm/page-writeback.c | 11 +- mm/page_alloc.c | 127 ++-- mm/page_ext.c | 2 +- mm/page_isolation.c | 29 +- mm/page_owner.c | 24 +- mm/percpu.c | 8 +- mm/readahead.c | 2 +- mm/rmap.c | 22 +- mm/secretmem.c | 2 +- mm/shmem.c | 44 +- mm/slab.c | 16 - mm/slab_common.c | 8 - mm/slub.c | 109 ++-- mm/sparse-vmemmap.c | 2 +- mm/sparse.c | 2 +- mm/swap.c | 23 +- mm/swapfile.c | 6 +- mm/truncate.c | 19 +- mm/userfaultfd.c | 8 +- mm/vmalloc.c | 112 +++- mm/vmpressure.c | 2 +- mm/vmscan.c | 161 ++++- mm/vmstat.c | 76 ++- mm/workingset.c | 10 + mm/zsmalloc.c | 10 +- net/ipv4/tcp.c | 1 - net/ipv4/udp.c | 1 - net/netfilter/ipvs/ip_vs_ctl.c | 1 - net/openvswitch/meter.c | 1 - net/sctp/protocol.c | 1 - net/sysctl_net.c | 2 +- scripts/checkpatch.pl | 36 +- scripts/const_structs.checkpatch | 4 + scripts/decodecode | 2 +- scripts/spelling.txt | 16 + security/Kconfig | 14 - tools/testing/selftests/damon/debugfs_attrs.sh | 13 + tools/testing/selftests/kselftest/runner.sh | 28 +- tools/testing/selftests/memory-hotplug/config | 1 - tools/testing/selftests/proc/.gitignore | 1 + tools/testing/selftests/proc/Makefile | 2 + tools/testing/selftests/proc/proc-tid0.c | 81 +++ tools/testing/selftests/vm/.gitignore | 1 + tools/testing/selftests/vm/Makefile | 1 + tools/testing/selftests/vm/hugepage-mremap.c | 159 +++++ tools/testing/selftests/vm/ksm_tests.c | 154 ++++- tools/testing/selftests/vm/madv_populate.c | 15 +- tools/testing/selftests/vm/run_vmtests.sh | 11 + tools/testing/selftests/vm/split_huge_page_test.c | 2 +- tools/testing/selftests/vm/transhuge-stress.c | 2 +- tools/testing/selftests/vm/userfaultfd.c | 157 +++-- tools/vm/page-types.c | 38 +- tools/vm/page_owner_sort.c | 94 ++- 397 files changed, 8176 insertions(+), 3190 deletions(-) create mode 100644 Documentation/admin-guide/mm/damon/reclaim.rst create mode 100644 Documentation/admin-guide/mm/swap_numa.rst create mode 100644 Documentation/admin-guide/mm/zswap.rst delete mode 100644 Documentation/vm/swap_numa.rst delete mode 100644 Documentation/vm/zswap.rst create mode 100644 include/linux/container_of.h create mode 100644 include/linux/instruction_pointer.h create mode 100644 mm/damon/paddr.c create mode 100644 mm/damon/prmtv-common.c create mode 100644 mm/damon/prmtv-common.h create mode 100644 mm/damon/reclaim.c create mode 100644 tools/testing/selftests/proc/proc-tid0.c create mode 100644 tools/testing/selftests/vm/hugepage-mremap.c Reproducer flagged being flaky revisions tested: 17, total time: 4h30m16.803532794s (build: 1h50m57.079619762s, test: 2h37m4.661733839s) first bad commit: 418739d9f3d24c4f7314309547350370f4287016 Merge branch 'akpm-current/current' recipients (to): ["akpm@linux-foundation.org" "borntraeger@de.ibm.com" "gor@linux.ibm.com" "hca@linux.ibm.com" "jdelvare@suse.com" "linux-hwmon@vger.kernel.org" "linux-mm@kvack.org" "linux-s390@vger.kernel.org" "linux@roeck-us.net" "mhiramat@kernel.org" "sfr@canb.auug.org.au"] recipients (cc): ["agordeev@linux.ibm.com" "almasrymina@google.com" "anshuman.khandual@arm.com" "asml.silence@gmail.com" "benh@kernel.crashing.org" "bp@alien8.de" "cgroups@vger.kernel.org" "daniel.vetter@ffwll.ch" "david@redhat.com" "guro@fb.com" "hannes@cmpxchg.org" "hpa@zytor.com" "jnewsome@torproject.org" "legion@kernel.org" "linmiaohe@huawei.com" "linux-kernel@vger.kernel.org" "linuxppc-dev@lists.ozlabs.org" "mhocko@kernel.org" "mike.kravetz@oracle.com" "minchan@kernel.org" "mingo@redhat.com" "mpe@ellerman.id.au" "nathanl@linux.ibm.com" "oleg@redhat.com" "oohall@gmail.com" "osalvador@suse.de" "pasha.tatashin@soleen.com" "paulus@samba.org" "pcc@google.com" "peterz@infradead.org" "shy828301@gmail.com" "svens@linux.ibm.com" "tglx@linutronix.de" "vbabka@suse.cz" "vdavydov.dev@gmail.com" "william.kucharski@oracle.com" "willy@infradead.org" "x86@kernel.org"] crash: WARNING: ODEBUG bug in __io_free_req ------------[ cut here ]------------ ODEBUG: free active (active state 1) object type: rcu_head hint: 0x0 WARNING: CPU: 0 PID: 2948 at lib/debugobjects.c:505 debug_print_object+0x16e/0x250 lib/debugobjects.c:505 Modules linked in: CPU: 0 PID: 2948 Comm: kworker/0:5 Not tainted 5.15.0-rc7-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events io_fallback_req_func RIP: 0010:debug_print_object+0x16e/0x250 lib/debugobjects.c:505 Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd 40 a5 fb 88 4c 89 ee 48 c7 c7 40 99 fb 88 e8 f6 ec b9 04 <0f> 0b 83 05 e5 a1 fb 08 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3 RSP: 0018:ffffc90001aafac8 EFLAGS: 00010282 RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 RDX: 0000000000000001 RSI: ffffffff88fb9520 RDI: fffff52000355f4b RBP: 0000000000000001 R08: 0000000000000001 R09: ffff8880b9e33fc7 R10: ffffed10173c67f8 R11: 000000004245444f R12: ffffffff88aca4a0 R13: ffffffff88fb9f80 R14: 0000000000000000 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f0444917718 CR3: 000000001b1ed000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __debug_check_no_obj_freed lib/debugobjects.c:992 [inline] debug_check_no_obj_freed+0x301/0x420 lib/debugobjects.c:1023 slab_free_hook mm/slub.c:1698 [inline] slab_free_freelist_hook+0xeb/0x1c0 mm/slub.c:1749 slab_free mm/slub.c:3513 [inline] kmem_cache_free+0x92/0x5e0 mm/slub.c:3529 put_task_struct_many include/linux/sched/task.h:120 [inline] io_put_task fs/io_uring.c:1773 [inline] __io_free_req+0x229/0x315 fs/io_uring.c:2037 io_fallback_req_func+0xea/0x17a fs/io_uring.c:1335 process_one_work+0x87f/0x1450 kernel/workqueue.c:2298 worker_thread+0x598/0x1040 kernel/workqueue.c:2445 kthread+0x3ab/0x480 kernel/kthread.c:327 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295