From: Sasha Levin <sasha.levin@oracle.com>
To: Stefan Priebe <s.priebe@profihost.ag>
Cc: "Kirill A. Shutemov" <kirill@shutemov.name>,
"linux-mm@kvack.org" <linux-mm@kvack.org>,
Hugh Dickins <hughd@google.com>,
Konstantin Khlebnikov <koct9i@gmail.com>
Subject: Re: kernel 3.18.10: THP refcounting bug
Date: Wed, 01 Apr 2015 16:13:16 -0400 [thread overview]
Message-ID: <551C515C.5050807@oracle.com> (raw)
In-Reply-To: <551C39EE.90504@profihost.ag>
linux-mm@ was incorrect in the original mail so this ended up getting around
just between us.
Below is Stefan's response to my question about the 'B' taint flag.
On 04/01/2015 02:33 PM, Stefan Priebe wrote:
>
> Am 01.04.2015 um 17:46 schrieb Sasha Levin:
>> On 04/01/2015 07:50 AM, Stefan Priebe - Profihost AG wrote:
>>> Hi,
>>>
>>> while using 3.18.9 i got several times the following stack trace:
>>>
>>> kernel BUG at mm/filemap.c:203!
>>> invalid opcode: 0000 [#1] SMP
>>> Modules linked in: dm_mod netconsole usbhid sd_mod sg ata_generic
>>> virtio_net virtio_scsi uhci_hcd ehci_hcd usbcore virtio_pci usb_common
>>> virtio_ring ata_piix virtio floppy
>>> CPU: 3 PID: 1 Comm: busybox Tainted: G B 3.18.9 #1
>>
>> Looking at the taint flags, was there anything else before this that
>> could set the 'B' flag?
>
> oh i'm sorry you're correct before that one i see (happens on shutdown):
>
> BUG: Bad page map in process udevd pte:ba4a2025 pmd:ba275067
> page:ffffea0002e92880 count:1 mapcount:-1 mapping:ffff8800bba8c4c8 index:0x10
> flags: 0x1fffff8000007c(referenced|uptodate|dirty|lru|active)
> page dumped because: bad pte
> addr:0000000000410000 vm_flags:00000875 anon_vma: (null) mapping:ffff8800bba8c4c8 index:10
> vma->vm_ops->fault: filemap_fault+0x0/0x480
> vma->vm_file->f_op->mmap: generic_file_mmap+0x0/0x60
> CPU: 7 PID: 105 Comm: udevd Not tainted 3.18.9+14-ph #1
> Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.7.5.1-0-g8936dbb-20141113_115728-nilsson.home.kraxel.org 04/01/201
> 4
> ffff880136ca58c0 ffff8800b9c8bc58 ffffffff815f0732 00000000072b072b
> 0000000000410000 ffff8800b9c8bca8 ffffffff8115b5b6 00000000ba4a2025
> 0000000000000010 ffff8800b9c8bca8 0000000000424000 ffff8800ba275080
> Call Trace:
> [<ffffffff815f0732>] dump_stack+0x46/0x58
> [<ffffffff8115b5b6>] print_bad_pte+0x196/0x240
> [<ffffffff8115d3c9>] unmap_single_vma+0x729/0x7f0
> [<ffffffff8115d801>] unmap_vmas+0x51/0xa0
> [<ffffffff811666c5>] exit_mmap+0xc5/0x170
> [<ffffffff810713c5>] mmput+0x55/0x100
> [<ffffffff8107631d>] do_exit+0x25d/0xa30
> [<ffffffff8116552f>] ? do_munmap+0x30f/0x3b0
> [<ffffffff81076b7f>] do_group_exit+0x3f/0xa0
> [<ffffffff81076bf7>] SyS_exit_group+0x17/0x20
> [<ffffffff815f6592>] system_call_fastpath+0x12/0x17
> Disabling lock debugging due to kernel taint
> BUG: Bad page state in process udevd pfn:ba4a2
> page:ffffea0002e92880 count:0 mapcount:-1 mapping:ffff8800bba8c4c8 index:0x10
> flags: 0x1fffff8000001c(referenced|uptodate|dirty)
> page dumped because: non-NULL mapping
> Modules linked in: dm_mod netconsole usbhid sd_mod sg ata_generic virtio_net virtio_scsi uhci_hcd ehci_hcd usbcore virtio_pci usb_co
> mmon virtio_ring ata_piix virtio floppy
> CPU: 7 PID: 105 Comm: udevd Tainted: G B 3.18.9+14-ph #1
> Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.7.5.1-0-g8936dbb-20141113_115728-nilsson.home.kraxel.org 04/01/201
> 4
> ffffffff81805618 ffff8800b9c8bba8 ffffffff815f0732 0000000007700770
> ffffea0002e92880 ffff8800b9c8bbd8 ffffffff815eb801 0000000000000000
> ffffea0002e92880 0000000000000000 000fffff80000000 ffff8800b9c8bc28
> Call Trace:
> [<ffffffff815f0732>] dump_stack+0x46/0x58
> [<ffffffff815eb801>] bad_page+0xf7/0x115
> [<ffffffff81137c22>] free_pages_prepare+0x152/0x180
> [<ffffffff8113a130>] free_hot_cold_page+0x40/0x160
> [<ffffffff8113a29e>] free_hot_cold_page_list+0x4e/0xa0
> [<ffffffff8113fcd3>] release_pages+0x1f3/0x280
> [<ffffffff8117142d>] free_pages_and_swap_cache+0x8d/0xa0
> [<ffffffff8115b6c4>] tlb_flush_mmu_free+0x34/0x60
> [<ffffffff8115bbe4>] tlb_flush_mmu+0x24/0x30
> [<ffffffff8115bc04>] tlb_finish_mmu+0x14/0x40
> [<ffffffff811666f4>] exit_mmap+0xf4/0x170
> [<ffffffff810713c5>] mmput+0x55/0x100
> [<ffffffff8107631d>] do_exit+0x25d/0xa30
> [<ffffffff8116552f>] ? do_munmap+0x30f/0x3b0
> [<ffffffff81076b7f>] do_group_exit+0x3f/0xa0
> [<ffffffff81076bf7>] SyS_exit_group+0x17/0x20
> [<ffffffff815f6592>] system_call_fastpath+0x12/0x17
> ------------[ cut here ]------------
>
>
> Stefan
>
>>
>>
>> Thanks,
>> Sasha
>>
--
To unsubscribe, send a message with 'unsubscribe linux-mm' in
the body to majordomo@kvack.org. For more info on Linux MM,
see: http://www.linux-mm.org/ .
Don't email: <a href=mailto:"dont@kvack.org"> email@kvack.org </a>
prev parent reply other threads:[~2015-04-01 20:13 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <551BBE1A.4040404@profihost.ag>
[not found] ` <20150401113122.GA17153@node.dhcp.inet.fi>
2015-04-01 11:53 ` kernel 3.18.10: THP refcounting bug Stefan Priebe - Profihost AG
2015-04-01 13:41 ` Kirill A. Shutemov
2015-04-01 20:09 ` Hugh Dickins
2015-04-01 20:10 ` Konstantin Khlebnikov
[not found] ` <551BDB8F.4070707@profihost.ag>
[not found] ` <551C12CC.3000803@oracle.com>
[not found] ` <551C39EE.90504@profihost.ag>
2015-04-01 20:13 ` Sasha Levin [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=551C515C.5050807@oracle.com \
--to=sasha.levin@oracle.com \
--cc=hughd@google.com \
--cc=kirill@shutemov.name \
--cc=koct9i@gmail.com \
--cc=linux-mm@kvack.org \
--cc=s.priebe@profihost.ag \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.