ci starts bisection 2025-02-04 18:00:12.281355034 +0000 UTC m=+54.143901424 bisecting cause commit starting from 40b8e93e17bff4a4e0cc129e04f9fdf5daa5397e building syzkaller on 8f267cefd3660f9d5640ebbbd42e295a61774469 ensuring issue is reproducible on original commit 40b8e93e17bff4a4e0cc129e04f9fdf5daa5397e testing commit 40b8e93e17bff4a4e0cc129e04f9fdf5daa5397e gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: aef09152f44981a0cda1048857b863e42f89cf5fe244d16f0d0adeb62c93a962 all runs: crashed: BUG: sleeping function called from invalid context in unmap_mapping_folio representative crash: BUG: sleeping function called from invalid context in unmap_mapping_folio, types: [ATOMIC_SLEEP] check whether we can drop unnecessary instrumentation disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP], they are not needed testing commit 40b8e93e17bff4a4e0cc129e04f9fdf5daa5397e gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ca965e04f42b6c4934c709b304837699a18fa1edaba81aaf14e0e43e283f9328 all runs: crashed: BUG: sleeping function called from invalid context in unmap_mapping_folio representative crash: BUG: sleeping function called from invalid context in unmap_mapping_folio, types: [ATOMIC_SLEEP] the bug reproduces without the instrumentation disabling configs for [LOCKDEP HANG LEAK UBSAN BUG KASAN], they are not needed kconfig minimization: base=4063 full=8260 leaves diff=2113 split chunks (needed=false): <2113> split chunk #0 of len 2113 into 5 parts testing without sub-chunk 1/5 disabling configs for [HANG LEAK UBSAN BUG KASAN LOCKDEP], they are not needed testing commit 40b8e93e17bff4a4e0cc129e04f9fdf5daa5397e gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8a9faa42dc1d8bc6bc96fd530d92738906d275d6cab9b3cae1a33ab772a29ac7 all runs: OK false negative chance: 0.000 testing without sub-chunk 2/5 disabling configs for [KASAN LOCKDEP HANG LEAK UBSAN BUG], they are not needed testing commit 40b8e93e17bff4a4e0cc129e04f9fdf5daa5397e gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b5cdb2f20c10fdb2cd5a2bf1a3da82e123426ec199031636b7e080cdacbb7bdd all runs: crashed: BUG: sleeping function called from invalid context in unmap_mapping_folio representative crash: BUG: sleeping function called from invalid context in unmap_mapping_folio, types: [ATOMIC_SLEEP] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [UBSAN BUG KASAN LOCKDEP HANG LEAK], they are not needed testing commit 40b8e93e17bff4a4e0cc129e04f9fdf5daa5397e gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f96e24ff96a0bd867cb24666c278c94412b362bcce233a349d6ed552be9aaa3c all runs: crashed: BUG: sleeping function called from invalid context in unmap_mapping_folio representative crash: BUG: sleeping function called from invalid context in unmap_mapping_folio, types: [ATOMIC_SLEEP] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [KASAN LOCKDEP HANG LEAK UBSAN BUG], they are not needed testing commit 40b8e93e17bff4a4e0cc129e04f9fdf5daa5397e gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c66f3460919bf68259e83ddfdc8281ae51f41e0ca8e74608a5489b7ceeb255e1 all runs: crashed: BUG: sleeping function called from invalid context in unmap_mapping_folio representative crash: BUG: sleeping function called from invalid context in unmap_mapping_folio, types: [ATOMIC_SLEEP] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [LOCKDEP HANG LEAK UBSAN BUG KASAN], they are not needed testing commit 40b8e93e17bff4a4e0cc129e04f9fdf5daa5397e gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 00ac1471bab349b0a005e58e08aa2f9b765b7e5a3a7d879b64ce4da006c73928 all runs: crashed: BUG: sleeping function called from invalid context in unmap_mapping_folio representative crash: BUG: sleeping function called from invalid context in unmap_mapping_folio, types: [ATOMIC_SLEEP] the chunk can be dropped minimized to 423 configs; suspects: [6LOWPAN 6LOWPAN_GHC_EXT_HDR_DEST 6LOWPAN_GHC_EXT_HDR_FRAG 6LOWPAN_GHC_EXT_HDR_HOP 6LOWPAN_GHC_EXT_HDR_ROUTE 6LOWPAN_GHC_ICMPV6 6LOWPAN_GHC_UDP 6LOWPAN_NHC 6LOWPAN_NHC_DEST 6LOWPAN_NHC_FRAGMENT 6LOWPAN_NHC_HOP 6LOWPAN_NHC_IPV6 6LOWPAN_NHC_MOBILITY 6LOWPAN_NHC_ROUTING 6LOWPAN_NHC_UDP 6PACK 842_COMPRESS 842_DECOMPRESS 9P_FSCACHE 9P_FS_POSIX_ACL 9P_FS_SECURITY ACORN_PARTITION ACORN_PARTITION_ADFS ACORN_PARTITION_CUMANA ACORN_PARTITION_EESOX ACORN_PARTITION_ICS ACORN_PARTITION_POWERTEC ACORN_PARTITION_RISCIX ACPI_NFIT ACPI_NHLT ACPI_PLATFORM_PROFILE ADFS_FS AFFS_FS AFS_FS AFS_FSCACHE AF_KCM AF_RXRPC AF_RXRPC_IPV6 AIX_PARTITION AMD_SFH_HID AMIGA_PARTITION ANDROID_BINDER_IPC ANON_VMA_NAME APERTURE_HELPERS APPLE_MFI_FASTCHARGE AR5523 ARCH_ENABLE_MEMORY_HOTREMOVE ARCH_ENABLE_THP_MIGRATION ARCH_HAS_USER_SHADOW_STACK ARCH_SUPPORTS_HUGE_PFNMAP ARCH_SUPPORTS_PMD_PFNMAP ARCH_SUPPORTS_PUD_PFNMAP ARCH_WANT_PMD_MKWRITE ASM_MODVERSIONS ASUS_TF103C_DOCK ASYNC_CORE ASYNC_MEMCPY ASYNC_PQ ASYNC_RAID6_RECOV ASYNC_TX_DMA ASYNC_XOR ATARI_PARTITION ATA_GENERIC ATA_OVER_ETH ATH10K ATH10K_CE ATH10K_LEDS ATH10K_PCI ATH10K_USB ATH11K ATH6KL ATH6KL_USB ATH9K ATH9K_AHB ATH9K_BTCOEX_SUPPORT ATH9K_CHANNEL_CONTEXT ATH9K_COMMON ATH9K_COMMON_DEBUG ATH9K_COMMON_SPECTRAL ATH9K_DEBUGFS ATH9K_DYNACK ATH9K_HTC ATH9K_HTC_DEBUGFS ATH9K_HW ATH9K_PCI ATH9K_PCOEM ATH9K_RFKILL ATH_COMMON ATM ATM_BR2684 ATM_CLIP ATM_DRIVERS ATM_LANE ATM_MPOA ATM_TCP AUXILIARY_BUS AX25 AX25_DAMA_SLAVE AX88796B_PHY BAREUDP BATMAN_ADV BATMAN_ADV_BATMAN_V BATMAN_ADV_BLA BATMAN_ADV_DAT BATMAN_ADV_MCAST BATMAN_ADV_NC BCACHE BCACHEFS_DEBUG BCACHEFS_ERASURE_CODING BCACHEFS_FS BCACHEFS_POSIX_ACL BCACHEFS_QUOTA BCACHEFS_SIX_OPTIMISTIC_SPIN BCMA BCMA_HOST_PCI_POSSIBLE BEFS_FS BFQ_CGROUP_DEBUG BFQ_GROUP_IOSCHED BFS_FS BIG_KEYS BLK_CGROUP_PUNT_BIO BLK_CGROUP_RWSTAT BLK_DEV_BSGLIB BLK_DEV_INTEGRITY BLK_DEV_NBD BLK_DEV_NULL_BLK BLK_DEV_NULL_BLK_FAULT_INJECTION BLK_DEV_NVME BLK_DEV_PMEM BLK_DEV_RAM BLK_DEV_RNBD BLK_DEV_RNBD_CLIENT BLK_DEV_THROTTLING BLK_DEV_ZONED BLK_ICQ BLK_INLINE_ENCRYPTION BLK_INLINE_ENCRYPTION_FALLBACK BLK_WBT BLK_WBT_MQ BONDING BOOT_VESA_SUPPORT BPF_EVENTS BPF_JIT BPF_JIT_ALWAYS_ON BPF_JIT_DEFAULT_ON BPF_LSM BPF_PRELOAD BPF_PRELOAD_UMD BPF_STREAM_PARSER BPF_SYSCALL BPQETHER BRIDGE BRIDGE_CFM BRIDGE_EBT_802_3 BRIDGE_EBT_AMONG BRIDGE_EBT_ARP BRIDGE_EBT_ARPREPLY BRIDGE_EBT_BROUTE BRIDGE_EBT_DNAT BRIDGE_EBT_IP BRIDGE_EBT_IP6 BRIDGE_EBT_LIMIT BRIDGE_EBT_LOG BRIDGE_EBT_MARK BRIDGE_EBT_MARK_T BRIDGE_EBT_NFLOG BRIDGE_EBT_PKTTYPE BRIDGE_EBT_REDIRECT BRIDGE_EBT_SNAT BRIDGE_EBT_STP BRIDGE_EBT_T_FILTER BRIDGE_EBT_T_NAT BRIDGE_EBT_VLAN BRIDGE_IGMP_SNOOPING BRIDGE_MRP BRIDGE_NF_EBTABLES BRIDGE_NF_EBTABLES_LEGACY BRIDGE_VLAN_FILTERING BSD_DISKLABEL BSD_PROCESS_ACCT_V3 BT BTRFS_ASSERT BTRFS_FS BTRFS_FS_POSIX_ACL BTRFS_FS_REF_VERIFY BTT BT_6LOWPAN BT_ATH3K BT_BCM BT_BNEP BT_BNEP_MC_FILTER BT_BNEP_PROTO_FILTER BT_BREDR BT_HCIBCM203X BT_HCIBFUSB BT_HCIBPA10X BT_HCIBTUSB BT_HCIBTUSB_AUTOSUSPEND BT_HCIBTUSB_BCM BT_HCIBTUSB_MTK BT_HCIBTUSB_POLL_SYNC BT_HCIBTUSB_RTL BT_HCIUART BT_HCIUART_3WIRE BT_HCIUART_AG6XX BT_HCIUART_BCSP BT_HCIUART_H4 BT_HCIUART_LL BT_HCIUART_MRVL BT_HCIUART_QCA BT_HCIUART_SERDEV BT_HCIVHCI BT_INTEL BT_LE BT_LEDS BT_LE_L2CAP_ECRED BT_MRVL BT_MRVL_SDIO BT_MSFTEXT BT_MTK BT_MTKSDIO BT_MTKUART BT_QCA BT_RFCOMM BT_RFCOMM_TTY BT_RTL CACHEFILES CAIF CAIF_DEBUG CAIF_DRIVERS CAIF_NETDEV CAIF_TTY CAIF_USB CAIF_VIRTIO CAN CAN_8DEV_USB CAN_BCM CAN_CALC_BITTIMING CAN_DEV CAN_EMS_USB CAN_ESD_USB CAN_ETAS_ES58X CAN_F81604 CAN_GS_USB CAN_GW CAN_IFI_CANFD CAN_ISOTP CAN_J1939 CAN_KVASER_USB CAN_MCBA_USB CAN_NETLINK CAN_PEAK_USB CAN_RAW CAN_RX_OFFLOAD CAN_SLCAN CAN_UCAN CAN_VCAN CAN_VXCAN CARL9170 CARL9170_HWRNG CARL9170_LEDS CARL9170_WPC CEC_CORE CEPH_FS CEPH_FSCACHE CEPH_FS_POSIX_ACL CEPH_LIB CEPH_LIB_USE_DNS_RESOLVER CFG80211 CFG80211_CRDA_SUPPORT CFG80211_DEBUGFS CFG80211_DEFAULT_PS CFG80211_REQUIRE_SIGNED_REGDB CFG80211_USE_KERNEL_REGDB_KEYS CFG80211_WEXT CFS_BANDWIDTH CGROUP_BPF CHARGER_ISP1704 CHR_DEV_ST CIFS CIFS_ALLOW_INSECURE_LEGACY CIFS_DEBUG CIFS_DFS_UPCALL CIFS_FSCACHE CIFS_POSIX CIFS_SMB_DIRECT CIFS_SWN_UPCALL CIFS_UPCALL CIFS_XATTR CLOSURES CLS_U32_MARK CLS_U32_PERF CMA CMA_SIZE_SEL_MAX CMDLINE_PARTITION COMEDI COMEDI_DT9812 COMEDI_NI_USB6501 COMEDI_USBDUX COMEDI_USBDUXFAST COMEDI_USBDUXSIGMA COMEDI_USB_DRIVERS COMEDI_VMK80XX COMPAT_NETLINK_MESSAGES COUNTER CRAMFS CRAMFS_BLOCKDEV CRAMFS_MTD CRC4 CRC64 CRC64_ROCKSOFT CRC7 CRC8 CRC_ITU_T CRC_T10DIF CRC_T10DIF_ARCH CRYPTO_842 CRYPTO_ADIANTUM CRYPTO_AEGIS128 CRYPTO_AEGIS128_AESNI_SSE2 CRYPTO_AES_NI_INTEL CRYPTO_AES_TI CRYPTO_ANSI_CPRNG CRYPTO_ANUBIS CRYPTO_ARC4 CRYPTO_ARCH_HAVE_LIB_BLAKE2S CRYPTO_ARCH_HAVE_LIB_CHACHA CRYPTO_ARCH_HAVE_LIB_CURVE25519 CRYPTO_ARCH_HAVE_LIB_POLY1305 CRYPTO_ARIA CRYPTO_ARIA_AESNI_AVX_X86_64 CRYPTO_BLAKE2B CRYPTO_BLAKE2S_X86 CRYPTO_BLOWFISH CRYPTO_BLOWFISH_COMMON CRYPTO_BLOWFISH_X86_64 CRYPTO_CAMELLIA CRYPTO_CAMELLIA_AESNI_AVX2_X86_64 CRYPTO_CAMELLIA_AESNI_AVX_X86_64 CRYPTO_CAMELLIA_X86_64 CRYPTO_CAST5 CRYPTO_CAST5_AVX_X86_64 CRYPTO_CAST6 CRYPTO_CAST6_AVX_X86_64 CRYPTO_CAST_COMMON CRYPTO_CHACHA20 CRYPTO_CHACHA20POLY1305 CRYPTO_CHACHA20_X86_64 CRYPTO_CRC32 CRYPTO_CRC32C CRYPTO_CRC64_ROCKSOFT CRYPTO_CRYPTD CRYPTO_CTS CRYPTO_CURVE25519 CRYPTO_CURVE25519_X86 CRYPTO_DEFLATE CRYPTO_DES CRYPTO_DES3_EDE_X86_64 CRYPTO_DEV_CCP CRYPTO_DEV_CCP_DD CRYPTO_DEV_PADLOCK CRYPTO_DEV_PADLOCK_AES CRYPTO_DEV_PADLOCK_SHA CRYPTO_DEV_QAT CRYPTO_DEV_QAT_C3XXX CRYPTO_DEV_QAT_C3XXXVF CRYPTO_DEV_QAT_C62X CRYPTO_DEV_QAT_C62XVF CRYPTO_DEV_QAT_DH895xCC CRYPTO_DEV_QAT_DH895xCCVF CRYPTO_DEV_VIRTIO CRYPTO_DH CRYPTO_DRBG_CTR CRYPTO_DRBG_HASH CRYPTO_ECDH CRYPTO_ECRDSA CRYPTO_ENGINE CRYPTO_ESSIV CRYPTO_FCRYPT CRYPTO_GHASH_CLMUL_NI_INTEL CRYPTO_HCTR2 CRYPTO_KDF800108_CTR CRYPTO_KHAZAD CRYPTO_KPP CRYPTO_LIB_ARC4 CRYPTO_LIB_CHACHA CRYPTO_LIB_CHACHA20POLY1305 CRYPTO_LIB_CHACHA_GENERIC CRYPTO_LIB_CURVE25519 CRYPTO_LIB_CURVE25519_GENERIC CRYPTO_LIB_DES CRYPTO_LIB_POLY1305 CRYPTO_LIB_POLY1305_GENERIC CRYPTO_LRW CRYPTO_LZ4 CRYPTO_LZ4HC CRYPTO_MICHAEL_MIC CRYPTO_NHPOLY1305 CRYPTO_NHPOLY1305_AVX2 CRYPTO_NHPOLY1305_SSE2 CRYPTO_PCBC CRYPTO_PCRYPT CRYPTO_POLY1305 CRYPTO_POLY1305_X86_64 CRYPTO_POLYVAL CRYPTO_POLYVAL_CLMUL_NI CRYPTO_RMD160 CRYPTO_SEED CRYPTO_SERPENT CRYPTO_SERPENT_AVX2_X86_64 CRYPTO_SERPENT_AVX_X86_64 CRYPTO_SERPENT_SSE2_X86_64 CRYPTO_SHA1_SSSE3 CRYPTO_SHA256_SSSE3 CRYPTO_SHA512_SSSE3 CRYPTO_SIMD CRYPTO_SM3 CRYPTO_SM3_AVX_X86_64 CRYPTO_SM4 CRYPTO_SM4_AESNI_AVX2_X86_64 CRYPTO_SM4_AESNI_AVX_X86_64 CRYPTO_SM4_GENERIC CRYPTO_STREEBOG CRYPTO_TEA CRYPTO_TWOFISH CRYPTO_TWOFISH_AVX_X86_64 CRYPTO_TWOFISH_COMMON CRYPTO_TWOFISH_X86_64 CRYPTO_TWOFISH_X86_64_3WAY CRYPTO_USER CRYPTO_USER_API CRYPTO_USER_API_AEAD CRYPTO_USER_API_ENABLE_OBSOLETE CRYPTO_USER_API_HASH CRYPTO_USER_API_RNG CRYPTO_USER_API_SKCIPHER CRYPTO_WP512 CRYPTO_XCBC CRYPTO_XCTR CRYPTO_XTS CRYPTO_XXHASH CRYPTO_ZSTD CUSE CYPRESS_FIRMWARE DAMON DAMON_PADDR DAMON_RECLAIM DAMON_VADDR DAX DCA DCB DEFAULT_CODEL DEVICE_MIGRATION DEVICE_PRIVATE DEV_COREDUMP DEV_DAX DLN2_ADC DMABUF_HEAPS DMABUF_HEAPS_CMA DMABUF_HEAPS_SYSTEM DMABUF_MOVE_NOTIFY DMA_CMA DMA_ENGINE_RAID DM_AUDIT DM_BIO_PRISON DM_BUFIO DM_CACHE DM_CACHE_SMQ DM_CLONE DM_CRYPT DM_FLAKEY DM_INTEGRITY DM_MULTIPATH DM_MULTIPATH_QL DM_MULTIPATH_ST DM_PERSISTENT_DATA DM_RAID DM_SNAPSHOT DM_THIN_PROVISIONING DM_UEVENT DM_VERITY DM_VERITY_FEC DM_WRITECACHE DM_ZONED DRAGONRISE_FF DRM DRM_AUX_BRIDGE DRM_BOCHS DRM_BRIDGE DRM_BUDDY DRM_CIRRUS_QEMU DRM_CLIENT DRM_CLIENT_DEFAULT_FBDEV DRM_CLIENT_LIB DRM_CLIENT_SELECTION DRM_CLIENT_SETUP DRM_DEBUG_MM DRM_DISPLAY_DP_AUX_BUS DRM_DISPLAY_DP_HELPER DRM_DISPLAY_DSC_HELPER DRM_DISPLAY_HDCP_HELPER DRM_DISPLAY_HDMI_HELPER DRM_DISPLAY_HELPER DRM_FBDEV_EMULATION DRM_GEM_SHMEM_HELPER DRM_GM12U320 ENCRYPTED_KEYS FSCACHE FUSE_FS GPIOLIB HAMRADIO HID_DRAGONRISE IIO INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_RTRS_CLIENT IOSCHED_BFQ LIBNVDIMM MAC80211 MAC80211_DEBUGFS MAC80211_LEDS MEDIA_SUPPORT MEMORY_HOTPLUG MEMORY_HOTREMOVE MFD_DLN2 MMC MTD NET_CLS_U32 NET_SCH_DEFAULT PARTITION_ADVANCED RFKILL SERIAL_DEV_BUS TLS TLS_DEVICE TRANSPARENT_HUGEPAGE TRUSTED_KEYS USB_GADGET USB_PHY VLAN_8021Q WANT_COMPAT_NETLINK_MESSAGES WEXT_CORE WIRELESS WLAN WLAN_VENDOR_ATH X86_X32_ABI ZONE_DEVICE] disabling configs for [UBSAN BUG KASAN LOCKDEP HANG LEAK], they are not needed picked [v6.13 v6.12 v6.11 v6.9 v6.7 v6.5 v6.3 v6.1 v5.18 v5.15 v5.12 v5.9 v5.6 v5.3 v5.0 v4.19] out of 36 release tags testing release v6.13 testing commit ffd294d346d185b70e28b1a28abe367bbfe53c04 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 18c8711df52426869af302ed51c1a87ce58b8f06ec9df0a982b9f2617706fab8 all runs: OK false negative chance: 0.000 # git bisect start 40b8e93e17bff4a4e0cc129e04f9fdf5daa5397e ffd294d346d185b70e28b1a28abe367bbfe53c04 Bisecting: 5691 revisions left to test after this (roughly 13 steps) [b746043cb3250eaa1d52735bc5977c7756a9c380] Merge tag 'pinctrl-v6.14-1' of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl testing commit b746043cb3250eaa1d52735bc5977c7756a9c380 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f659cfb9d5519d6f9dc2d2739af1df82c94d04a9258faec2eda8b5aa763ef285 all runs: OK false negative chance: 0.000 # git bisect good b746043cb3250eaa1d52735bc5977c7756a9c380 Bisecting: 2841 revisions left to test after this (roughly 12 steps) [125ca745467d4f87ae58e671a4a5714e024d2908] Merge tag 'staging-6.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging testing commit 125ca745467d4f87ae58e671a4a5714e024d2908 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ee4d4b1c11d9220f35712be421d7ce03d9dbd0b0c4a81c7b97d8d1e3e6d68d90 all runs: OK false negative chance: 0.000 # git bisect good 125ca745467d4f87ae58e671a4a5714e024d2908 Bisecting: 1410 revisions left to test after this (roughly 11 steps) [cabb4685d57ed50cd197498d2ac946ad5b6272e7] Merge tag 'v6.14-rc-smb3-client-fixes-part2' of git://git.samba.org/sfrench/cifs-2.6 testing commit cabb4685d57ed50cd197498d2ac946ad5b6272e7 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 58b96edbf51a1b41b0f42c68aaf883a683c2524201653b806cd58e2184b0363d all runs: OK false negative chance: 0.000 # git bisect good cabb4685d57ed50cd197498d2ac946ad5b6272e7 Bisecting: 708 revisions left to test after this (roughly 10 steps) [b68f3ceaedd272484e25201e6169d0e7cc019b84] Merge branch 'cpufreq/arm/linux-next' of git://git.kernel.org/pub/scm/linux/kernel/git/vireshk/pm.git testing commit b68f3ceaedd272484e25201e6169d0e7cc019b84 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5f72116be384960361cf21669408ab3af39c2edfb8ad012fb724ee93bda58b59 all runs: crashed: BUG: sleeping function called from invalid context in unmap_mapping_folio representative crash: BUG: sleeping function called from invalid context in unmap_mapping_folio, types: [ATOMIC_SLEEP] # git bisect bad b68f3ceaedd272484e25201e6169d0e7cc019b84 Bisecting: 333 revisions left to test after this (roughly 9 steps) [cbc1cbaa50f1a931ee8c4b7cbf996e12426d2909] Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/geert/renesas-devel.git testing commit cbc1cbaa50f1a931ee8c4b7cbf996e12426d2909 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4a3eba12083a5b73d1d626c02f9629dc3534c31769434d180946e47bea7ab4e4 all runs: crashed: BUG: sleeping function called from invalid context in unmap_mapping_folio representative crash: BUG: sleeping function called from invalid context in unmap_mapping_folio, types: [ATOMIC_SLEEP] # git bisect bad cbc1cbaa50f1a931ee8c4b7cbf996e12426d2909 Bisecting: 181 revisions left to test after this (roughly 8 steps) [39818041294f772902b4af3635f7760be3f994d5] Merge branch 'for-linux-next-fixes' of https://gitlab.freedesktop.org/drm/i915/kernel testing commit 39818041294f772902b4af3635f7760be3f994d5 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 119d33c525c00b0daac03fee3f3e801fe6accba868fdcbad82f15f1bab5620d7 all runs: OK false negative chance: 0.000 # git bisect good 39818041294f772902b4af3635f7760be3f994d5 Bisecting: 87 revisions left to test after this (roughly 7 steps) [6fceb6348fe23708df87ccd0e7e75df415c4c14b] Merge branch 'mm-everything' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm testing commit 6fceb6348fe23708df87ccd0e7e75df415c4c14b gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ac33b8e74a88e8be513f68fd235466cc336e8d6dc547f7108246a2d4a854c783 all runs: crashed: BUG: sleeping function called from invalid context in unmap_mapping_folio representative crash: BUG: sleeping function called from invalid context in unmap_mapping_folio, types: [ATOMIC_SLEEP] # git bisect bad 6fceb6348fe23708df87ccd0e7e75df415c4c14b Bisecting: 46 revisions left to test after this (roughly 6 steps) [288608b6f0b5e767f14c60e38129dd97e4b4988d] mm: eliminate adj_start parameter from commit_merge() testing commit 288608b6f0b5e767f14c60e38129dd97e4b4988d gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c935b9a35efd4c48ddad49c50234cb4245ecb8575ac76957b6db72491cf83fce all runs: crashed: BUG: sleeping function called from invalid context in unmap_mapping_folio representative crash: BUG: sleeping function called from invalid context in unmap_mapping_folio, types: [ATOMIC_SLEEP] # git bisect bad 288608b6f0b5e767f14c60e38129dd97e4b4988d Bisecting: 23 revisions left to test after this (roughly 5 steps) [1396ce3f6a18bba53f9fe07710e8f1600d1d7b89] mm: support tlbbatch flush for a range of PTEs testing commit 1396ce3f6a18bba53f9fe07710e8f1600d1d7b89 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 79fb0eb1fde6d77d0ebe755ba31340864284a5feddf475d064add8d15030f9ae all runs: OK false negative chance: 0.000 # git bisect good 1396ce3f6a18bba53f9fe07710e8f1600d1d7b89 Bisecting: 11 revisions left to test after this (roughly 4 steps) [c3a1237a16b9434edb58dc5a31712935e5c98267] mm/mglru: check PG_dropbehind instead of PG_reclaim in lru_gen_folio_seq() testing commit c3a1237a16b9434edb58dc5a31712935e5c98267 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8802a09c418f7ae2d0f87e9cb534e6df6b1d9b1bdc7442314ecdb186041d68b9 all runs: crashed: BUG: sleeping function called from invalid context in unmap_mapping_folio representative crash: BUG: sleeping function called from invalid context in unmap_mapping_folio, types: [ATOMIC_SLEEP] # git bisect bad c3a1237a16b9434edb58dc5a31712935e5c98267 Bisecting: 5 revisions left to test after this (roughly 3 steps) [25dd342f0cc82bc38b6e9660ba3e8a26088426af] drm/i915/gem: convert __shmem_writeback() to folios testing commit 25dd342f0cc82bc38b6e9660ba3e8a26088426af gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: bb2f86160032d7130a40ce500e6e7ef91acb913cdfd33dede4c94eb1ec3dc965 all runs: OK false negative chance: 0.000 # git bisect good 25dd342f0cc82bc38b6e9660ba3e8a26088426af Bisecting: 2 revisions left to test after this (roughly 2 steps) [4e384d9c0da238e2a2c00b3a17114caf8adca0f5] mm/truncate: use folio_set_dropbehind() instead of deactivate_file_folio() testing commit 4e384d9c0da238e2a2c00b3a17114caf8adca0f5 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 764301557715a47510c33d323ee2b601473713cc9c3638244096d6a0e84ba777 all runs: OK false negative chance: 0.000 # git bisect good 4e384d9c0da238e2a2c00b3a17114caf8adca0f5 Bisecting: 0 revisions left to test after this (roughly 1 step) [1760a1b5aacbe00dec464b1bf2b10443c10377ad] mm/vmscan: use PG_dropbehind instead of PG_reclaim in shrink_folio_list() testing commit 1760a1b5aacbe00dec464b1bf2b10443c10377ad gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f6790aba54ad1e700103cfda53097058c759c223bf71bd19c80330d1d1aed22a all runs: crashed: BUG: sleeping function called from invalid context in unmap_mapping_folio representative crash: BUG: sleeping function called from invalid context in unmap_mapping_folio, types: [ATOMIC_SLEEP] # git bisect bad 1760a1b5aacbe00dec464b1bf2b10443c10377ad Bisecting: 0 revisions left to test after this (roughly 0 steps) [684e9b8d2af32b7b39f91e2055ec3e36c00d5736] mm/vmscan: use PG_dropbehind instead of PG_reclaim testing commit 684e9b8d2af32b7b39f91e2055ec3e36c00d5736 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: cc0c6d588b35b323231435534e996181e48409f7781d450d811f0e18e73acf33 all runs: OK false negative chance: 0.000 # git bisect good 684e9b8d2af32b7b39f91e2055ec3e36c00d5736 1760a1b5aacbe00dec464b1bf2b10443c10377ad is the first bad commit commit 1760a1b5aacbe00dec464b1bf2b10443c10377ad Author: Kirill A. Shutemov Date: Thu Jan 30 12:00:45 2025 +0200 mm/vmscan: use PG_dropbehind instead of PG_reclaim in shrink_folio_list() The recently introduced PG_dropbehind allows for freeing folios immediately after writeback. Unlike PG_reclaim, it does not need vmscan to be involved to get the folio freed. Instead of using folio_set_reclaim(), use folio_set_dropbehind() in shrink_folio_list(). It is safe to leave PG_dropbehind on the folio if, for some reason (bug?), the folio is not in a writeback state after ->writepage(). In these cases, the kernel had to clear PG_reclaim as it shared a page flag bit with PG_readahead. Also use PG_dropbehind instead PG_reclaim to detect I/O congestion. Link: https://lkml.kernel.org/r/20250130100050.1868208-8-kirill.shutemov@linux.intel.com Signed-off-by: Kirill A. Shutemov Acked-by: David Hildenbrand Cc: Andi Shyti Cc: Chengming Zhou Cc: Christian Brauner Cc: Christophe Leroy Cc: Dan Carpenter Cc: Dave Airlie Cc: gehao Cc: Jani Nikula Cc: Jason A. Donenfeld Cc: Jens Axboe Cc: Johannes Weiner Cc: Jonas Lahtinen Cc: Josef Bacik Cc: "Masami Hiramatsu (Google)" Cc: Mathieu Desnoyers Cc: Mattew Wilcox Cc: Miklos Szeredi Cc: Nhat Pham Cc: Oscar Salvador Cc: Ran Xiaokai Cc: Rodrigo Vivi Cc: Steven Rostedt (VMware) Cc: Tvrtko Ursulin Cc: Vlastimil Babka Cc: Yosry Ahmed Cc: Yu Zhao Signed-off-by: Andrew Morton mm/vmscan.c | 30 ++++++++---------------------- 1 file changed, 8 insertions(+), 22 deletions(-) accumulated error probability: 0.00 culprit signature: f6790aba54ad1e700103cfda53097058c759c223bf71bd19c80330d1d1aed22a parent signature: cc0c6d588b35b323231435534e996181e48409f7781d450d811f0e18e73acf33 revisions tested: 22, total time: 11h57m39.14593412s (build: 7h1m25.870415648s, test: 4h18m7.367011856s) first bad commit: 1760a1b5aacbe00dec464b1bf2b10443c10377ad mm/vmscan: use PG_dropbehind instead of PG_reclaim in shrink_folio_list() recipients (to): ["akpm@linux-foundation.org" "david@redhat.com" "kirill.shutemov@linux.intel.com"] recipients (cc): [] crash: BUG: sleeping function called from invalid context in unmap_mapping_folio BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5265, name: syz.1.154 preempt_count: 0, expected: 0 RCU nest depth: 1, expected: 0 2 locks held by syz.1.154/5265: #0: ffff88810c6ffcc8 (&disk->open_mutex){....}-{3:3}, at: bdev_open+0x73/0x360 block/bdev.c:903 #1: ffffffff83b80d58 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #1: ffffffff83b80d58 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffffff83b80d58 (rcu_read_lock){....}-{1:2}, at: blk_mq_flush_plug_list+0x687/0x900 block/blk-mq.c:2904 CPU: 0 UID: 0 PID: 5265 Comm: syz.1.154 Not tainted 6.13.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x3e/0xe0 lib/dump_stack.c:120 __might_resched+0x1a4/0x1c0 kernel/sched/core.c:8766 down_read+0x34/0x470 kernel/locking/rwsem.c:1523 i_mmap_lock_read include/linux/fs.h:565 [inline] unmap_mapping_folio+0x76/0xe0 mm/memory.c:3887 folio_unmap_invalidate+0x5d/0x270 mm/truncate.c:557 folio_end_dropbehind_write mm/filemap.c:1609 [inline] folio_end_writeback+0xe6/0x1d0 mm/filemap.c:1654 end_bio_bh_io_sync+0x23/0x40 fs/buffer.c:2766 blk_update_request+0x178/0x390 block/blk-mq.c:983 blk_mq_end_request+0x13/0x30 block/blk-mq.c:1145 nullb_complete_cmd drivers/block/null_blk/main.c:1354 [inline] null_handle_cmd drivers/block/null_blk/main.c:1405 [inline] null_queue_rq+0x2e5/0x320 drivers/block/null_blk/main.c:1645 null_queue_rqs+0x7d/0xd0 drivers/block/null_blk/main.c:1659 __blk_mq_flush_plug_list block/blk-mq.c:2825 [inline] blk_mq_flush_plug_list+0x6bf/0x900 block/blk-mq.c:2904 __blk_flush_plug+0xdf/0x130 block/blk-core.c:1214 blk_finish_plug+0x24/0x40 block/blk-core.c:1241 blkdev_writepages+0x96/0xc0 block/fops.c:460 do_writepages+0xdc/0x320 mm/page-writeback.c:2687 filemap_fdatawrite_wbc mm/filemap.c:389 [inline] __filemap_fdatawrite_range mm/filemap.c:422 [inline] filemap_write_and_wait_range+0xb0/0x150 mm/filemap.c:694 bdev_disk_changed+0x88/0x780 block/partitions/core.c:656 blkdev_get_whole+0xd2/0x120 block/bdev.c:706 bdev_open+0x189/0x360 block/bdev.c:915 bdev_file_open_by_dev+0x11c/0x140 block/bdev.c:1017 disk_scan_partitions+0x84/0xc0 block/genhd.c:374 blkdev_common_ioctl+0xb85/0xed0 block/ioctl.c:617 blkdev_ioctl+0x291/0x310 block/ioctl.c:687 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:906 [inline] __se_sys_ioctl+0x68/0xb0 fs/ioctl.c:892 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x8d/0x190 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f356d58cda9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f356e3cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f356d7a5fa0 RCX: 00007f356d58cda9 RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000004 RBP: 00007f356d60e2a0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f356d7a5fa0 R15: 00007fffc953dc98