ci2 starts bisection 2025-05-24 21:42:50.267381405 +0000 UTC m=+65323.353870292 bisecting fixing commit since 27895588a299b91ba1cc5c9a3995e25c1ae205ae building syzkaller on e28266709dd2a1d1452d4a5bbf271700e10335c6 ensuring issue is reproducible on original commit 27895588a299b91ba1cc5c9a3995e25c1ae205ae testing commit 27895588a299b91ba1cc5c9a3995e25c1ae205ae gcc compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6 kernel signature: 635f7a8e55497abcb59efb97681d96b0ea835913859d6fc6583666fc2e57153f all runs: crashed: kernel BUG in do_swap_page representative crash: kernel BUG in do_swap_page, types: [BUG] check whether we can drop unnecessary instrumentation disabling configs for [UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit 27895588a299b91ba1cc5c9a3995e25c1ae205ae gcc compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6 kernel signature: da45803181b38ebf75218b7cf59729e0a62849e38e30bab32dbd9f5d7dfbc42d all runs: crashed: kernel BUG in do_swap_page representative crash: kernel BUG in do_swap_page, types: [BUG] the bug reproduces without the instrumentation disabling configs for [UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed kconfig minimization: base=5186 full=6549 leaves diff=266 split chunks (needed=false): <266> split chunk #0 of len 266 into 5 parts testing without sub-chunk 1/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 27895588a299b91ba1cc5c9a3995e25c1ae205ae gcc compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6 kernel signature: 7832681d69fca5691b579db221bcf144e25477e5cde9806d114d2659905f9d02 all runs: crashed: kernel BUG in do_swap_page representative crash: kernel BUG in do_swap_page, types: [BUG] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit 27895588a299b91ba1cc5c9a3995e25c1ae205ae gcc compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6 kernel signature: 8db2344db327ea935d194afa5e3a794913d2488e10b1ece675cfe38c78544855 all runs: crashed: kernel BUG in do_swap_page representative crash: kernel BUG in do_swap_page, types: [BUG] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed testing commit 27895588a299b91ba1cc5c9a3995e25c1ae205ae gcc compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6 kernel signature: 8a20d3106e7d914ef19f7a9ffdcbf727559d21e0f4e4f3b4f366b0c3bae57e90 all runs: crashed: kernel BUG in do_swap_page representative crash: kernel BUG in do_swap_page, types: [BUG] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 27895588a299b91ba1cc5c9a3995e25c1ae205ae gcc compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6 kernel signature: ca82918a1ff50c0b8d99331d463a9c8c96f265d502ac1b10d8e94515208f0180 all runs: crashed: kernel BUG in do_swap_page representative crash: kernel BUG in do_swap_page, types: [BUG] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit 27895588a299b91ba1cc5c9a3995e25c1ae205ae gcc compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6 failed building 27895588a299b91ba1cc5c9a3995e25c1ae205ae: ld.lld: error: undefined symbol: wext_proc_init ld.lld: error: undefined symbol: wext_proc_exit ld.lld: error: undefined symbol: wext_handle_ioctl ld.lld: error: undefined symbol: compat_wext_handle_ioctl minimized to 50 configs; suspects: [HID_ZEROPLUS USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM V4L2_ASYNC V4L2_FWNODE VIDEO_CAMERA_SENSOR WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_PURELIFI WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_SILABS WLAN_VENDOR_ZYDAS X86_X32_ABI ZEROPLUS_FF] disabling configs for [LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG], they are not needed testing current HEAD 3c6d0251e1fb722e884184d964421fe6f0586534 testing commit 3c6d0251e1fb722e884184d964421fe6f0586534 gcc compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6 kernel signature: 78079b4bb5c923f2db5f16764c3b4db3a9d33255b43b835ae80672f2c8820e1f all runs: OK false negative chance: 0.000 # git bisect start 3c6d0251e1fb722e884184d964421fe6f0586534 27895588a299b91ba1cc5c9a3995e25c1ae205ae Bisecting: 720 revisions left to test after this (roughly 10 steps) [1489b2dd2360ef39d261907704e616ab8d3783a7] mptcp: reset when MPTCP opts are dropped after join determine whether the revision contains the guilty commit checking the merge base 0cbb5f65e52f3e66410a7fe0edf75e1b2bf41e80 no existing result, test the revision testing commit 0cbb5f65e52f3e66410a7fe0edf75e1b2bf41e80 gcc compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6 kernel signature: 64e4ece68a196af198c8160a6623a913dfae1ae3b8c5d3ca1fb5ac75c6ca1a9d all runs: OK false negative chance: 0.000 the bug was not introduced yet; pretend that kernel crashed # git bisect good 1489b2dd2360ef39d261907704e616ab8d3783a7 Bisecting: 360 revisions left to test after this (roughly 9 steps) [72520ca5f9270edbce474c9e53a401ca1485ea10] PM: sleep: Fix handling devices with direct_complete set on errors determine whether the revision contains the guilty commit checking the merge base 0cbb5f65e52f3e66410a7fe0edf75e1b2bf41e80 the bug was not introduced yet; pretend that kernel crashed # git bisect good 72520ca5f9270edbce474c9e53a401ca1485ea10 Bisecting: 180 revisions left to test after this (roughly 8 steps) [c07ec83be7c0c4eabcbf1b6e5497fafa06b398ea] ext4: don't over-report free space or inodes in statvfs determine whether the revision contains the guilty commit checking the merge base 0cbb5f65e52f3e66410a7fe0edf75e1b2bf41e80 the bug was not introduced yet; pretend that kernel crashed # git bisect good c07ec83be7c0c4eabcbf1b6e5497fafa06b398ea Bisecting: 90 revisions left to test after this (roughly 7 steps) [e6079359f782442bedd29f2a19e3ffbba8f012b4] Merge f9d0a1372761 ("lib/buildid: Handle memfd_secret() files in build_id_parse()") into android14-6.1-lts determine whether the revision contains the guilty commit revision 27895588a299b91ba1cc5c9a3995e25c1ae205ae crashed and is reachable testing commit e6079359f782442bedd29f2a19e3ffbba8f012b4 gcc compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6 kernel signature: f59b9e17ece405a7529f8ffb6450fda35df479b176504ed0ad8b7c02f3aae78a all runs: crashed: kernel BUG in do_swap_page representative crash: kernel BUG in do_swap_page, types: [BUG] # git bisect good e6079359f782442bedd29f2a19e3ffbba8f012b4 Bisecting: 43 revisions left to test after this (roughly 6 steps) [a4fc1bef05011a82d092806b03e9c113b2c55eaa] Merge tag 'android14-6.1.134_r00' into android14-6.1 determine whether the revision contains the guilty commit revision 27895588a299b91ba1cc5c9a3995e25c1ae205ae crashed and is reachable testing commit a4fc1bef05011a82d092806b03e9c113b2c55eaa gcc compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6 kernel signature: 471fdfc1198d9f24a91d8dbc2ba1ea2da4c8cd70a4a8bfac86b8d0fb08d7b412 all runs: OK false negative chance: 0.000 # git bisect bad a4fc1bef05011a82d092806b03e9c113b2c55eaa Bisecting: 23 revisions left to test after this (roughly 5 steps) [642656a3679169a2157ea569389d8af27e4d3511] ANDROID: GKI: Honor add symbols to symbol list determine whether the revision contains the guilty commit revision 27895588a299b91ba1cc5c9a3995e25c1ae205ae crashed and is reachable testing commit 642656a3679169a2157ea569389d8af27e4d3511 gcc compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6 kernel signature: 2c38475fcf6f628117b7fdc1e02cad2edd737dbae470b8c73f4b5c1e6c1aa2b9 all runs: crashed: kernel BUG in do_swap_page representative crash: kernel BUG in do_swap_page, types: [BUG] # git bisect good 642656a3679169a2157ea569389d8af27e4d3511 Bisecting: 15 revisions left to test after this (roughly 4 steps) [420102835862f49ec15c545594278dc5d2712f42] Linux 6.1.134 determine whether the revision contains the guilty commit checking the merge base 0cbb5f65e52f3e66410a7fe0edf75e1b2bf41e80 the bug was not introduced yet; pretend that kernel crashed # git bisect good 420102835862f49ec15c545594278dc5d2712f42 Bisecting: 7 revisions left to test after this (roughly 3 steps) [522ff9a1db53f4b631121132dd493db57dfa3a5c] Merge 6.1.134 into android14-6.1-lts determine whether the revision contains the guilty commit revision 27895588a299b91ba1cc5c9a3995e25c1ae205ae crashed and is reachable testing commit 522ff9a1db53f4b631121132dd493db57dfa3a5c gcc compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6 kernel signature: 45291ccac2cc5d53b5718ac54843f2322bcc38de718323e6aa01071d431b0acc all runs: crashed: kernel BUG in do_swap_page representative crash: kernel BUG in do_swap_page, types: [BUG] # git bisect good 522ff9a1db53f4b631121132dd493db57dfa3a5c Bisecting: 3 revisions left to test after this (roughly 2 steps) [f26d229ec8372e6907591e0c7eaf8bc2f71683bd] ANDROID: Repurpose a reserved slot in ipv6_devconf for backports determine whether the revision contains the guilty commit revision 642656a3679169a2157ea569389d8af27e4d3511 crashed and is reachable testing commit f26d229ec8372e6907591e0c7eaf8bc2f71683bd gcc compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6 kernel signature: 86111a55e57a6c74e254bbe1158d83b38348140ab89393bcf9152315e37f708c all runs: OK false negative chance: 0.000 # git bisect bad f26d229ec8372e6907591e0c7eaf8bc2f71683bd Bisecting: 1 revision left to test after this (roughly 1 step) [d8a28dde36068f94dee7c2ee7e92d556661d4eca] BACKPORT: mm/rmap: move SetPageAnonExclusive() out of page_move_anon_rmap() determine whether the revision contains the guilty commit revision 642656a3679169a2157ea569389d8af27e4d3511 crashed and is reachable testing commit d8a28dde36068f94dee7c2ee7e92d556661d4eca gcc compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6 kernel signature: 89aafea6ac313646b19d2c61a5039c69efca59de44def63cac29b9551da1e22d all runs: OK false negative chance: 0.000 # git bisect bad d8a28dde36068f94dee7c2ee7e92d556661d4eca Bisecting: 0 revisions left to test after this (roughly 0 steps) [6a8cf1324d0012351aa64156b4ab607be4a7314d] ANDROID: GKI: Update symbol list for bcmstb determine whether the revision contains the guilty commit revision 642656a3679169a2157ea569389d8af27e4d3511 crashed and is reachable testing commit 6a8cf1324d0012351aa64156b4ab607be4a7314d gcc compiler: Debian clang version 20.1.6 (++20250514063057+1e4d39e07757-1~exp1~20250514183223.118), Debian LLD 20.1.6 kernel signature: 38788e3dabc1e51d1182d308cf106e784ec20fe7e47e5c343ddd788db85bf791 all runs: crashed: kernel BUG in do_swap_page representative crash: kernel BUG in do_swap_page, types: [BUG] # git bisect good 6a8cf1324d0012351aa64156b4ab607be4a7314d d8a28dde36068f94dee7c2ee7e92d556661d4eca is the first bad commit commit d8a28dde36068f94dee7c2ee7e92d556661d4eca Author: David Hildenbrand Date: Mon Oct 2 16:29:47 2023 +0200 BACKPORT: mm/rmap: move SetPageAnonExclusive() out of page_move_anon_rmap() Patch series "mm/rmap: convert page_move_anon_rmap() to folio_move_anon_rmap()". Convert page_move_anon_rmap() to folio_move_anon_rmap(), letting the callers handle PageAnonExclusive. I'm including cleanup patch #3 because it fits into the picture and can be done cleaner by the conversion. This patch (of 3): Let's move it into the caller: there is a difference between whether an anon folio can only be mapped by one process (e.g., into one VMA), and whether it is truly exclusive (e.g., no references -- including GUP -- from other processes). Further, for large folios the page might not actually be pointing at the head page of the folio, so it better be handled in the caller. This is a preparation for converting page_move_anon_rmap() to consume a folio. Link: https://lkml.kernel.org/r/20231002142949.235104-1-david@redhat.com Link: https://lkml.kernel.org/r/20231002142949.235104-2-david@redhat.com Signed-off-by: David Hildenbrand Reviewed-by: Suren Baghdasaryan Reviewed-by: Vishal Moola (Oracle) Cc: Mike Kravetz Cc: Muchun Song Cc: Matthew Wilcox Signed-off-by: Andrew Morton Conflicts: 1. mm/hugetlb.c [Due to page_mapcount() instead of folio_mapcount() and folio_test_anon() instead of PageAnon()] (cherry picked from commit 5ca432896a4ce6d69fffc3298b24c0dd9bdb871f) Bug: 413428616 Bug: 313807618 Change-Id: Ibd29fec4d2a521d5ffc0782effd855cde9687a78 Signed-off-by: Suren Baghdasaryan Signed-off-by: Lokesh Gidra mm/huge_memory.c | 1 + mm/hugetlb.c | 4 +++- mm/memory.c | 1 + mm/rmap.c | 1 - 4 files changed, 5 insertions(+), 2 deletions(-) accumulated error probability: 0.00 culprit signature: 89aafea6ac313646b19d2c61a5039c69efca59de44def63cac29b9551da1e22d parent signature: 38788e3dabc1e51d1182d308cf106e784ec20fe7e47e5c343ddd788db85bf791 revisions tested: 15, total time: 4h28m28.718294072s (build: 2h20m29.329823803s, test: 1h59m44.96857591s) first good commit: d8a28dde36068f94dee7c2ee7e92d556661d4eca BACKPORT: mm/rmap: move SetPageAnonExclusive() out of page_move_anon_rmap() recipients (to): ["akpm@linux-foundation.org" "david@redhat.com" "lokeshgidra@google.com" "surenb@google.com" "vishal.moola@gmail.com"] recipients (cc): []