From: Sasha Levin <sasha.levin@oracle.com>
To: Vlastimil Babka <vbabka@suse.cz>,
Andrew Morton <akpm@linux-foundation.org>
Cc: joern@logfs.org, mgorman@suse.de,
Michel Lespinasse <walken@google.com>,
riel@redhat.com, LKML <linux-kernel@vger.kernel.org>,
"linux-mm@kvack.org" <linux-mm@kvack.org>
Subject: Re: kernel BUG in munlock_vma_pages_range
Date: Wed, 11 Dec 2013 22:16:29 -0500 [thread overview]
Message-ID: <52A92A8D.20603@oracle.com> (raw)
In-Reply-To: <52A8EE38.2060004@suse.cz>
On 12/11/2013 05:59 PM, Vlastimil Babka wrote:
> On 12/09/2013 09:26 PM, Sasha Levin wrote:
>> On 12/09/2013 12:12 PM, Vlastimil Babka wrote:
>>> On 12/09/2013 06:05 PM, Sasha Levin wrote:
>>>> On 12/09/2013 04:34 AM, Vlastimil Babka wrote:
>>>>> Hello, I will look at it, thanks.
>>>>> Do you have specific reproduction instructions?
>>>>
>>>> Not really, the fuzzer hit it once and I've been unable to trigger it again. Looking at
>>>> the piece of code involved it might have had something to do with hugetlbfs, so I'll crank
>>>> up testing on that part.
>>>
>>> Thanks. Do you have trinity log and the .config file? I'm currently unable to even boot linux-next
>>> with my config/setup due to a GPF.
>>> Looking at code I wouldn't expect that it could encounter a tail page, without first encountering a
>>> head page and skipping the whole huge page. At least in THP case, as TLB pages should be split when
>>> a vma is split. As for hugetlbfs, it should be skipped for mlock/munlock operations completely. One
>>> of these assumptions is probably failing here...
>>
>> If it helps, I've added a dump_page() in case we hit a tail page there and got:
>>
>> [ 980.172299] page:ffffea003e5e8040 count:0 mapcount:1 mapping: (null) index:0
>> x0
>> [ 980.173412] page flags: 0x2fffff80008000(tail)
>>
>> I can also add anything else in there to get other debug output if you think of something else useful.
>
> Please try the following. Thanks in advance.
[ 428.499889] page:ffffea003e5c0040 count:0 mapcount:4 mapping: (null) index:0x0
[ 428.499889] page flags: 0x2fffff80008000(tail)
[ 428.499889] start=140117131923456 pfn=16347137 orig_start=140117130543104 page_increm
=1 vm_start=140117130543104 vm_end=140117134688256 vm_flags=135266419
[ 428.499889] first_page pfn=16347136
[ 428.499889] page:ffffea003e5c0000 count:204 mapcount:44 mapping:ffff880fb5c466c1 inde
x:0x7f6f8fe00
[ 428.499889] page flags: 0x2fffff80084068(uptodate|lru|active|head|swapbacked)
[ 428.499889] pc:ffff880fcfb70000 pc->flags:2 pc->mem_cgroup:ffffc90006034000
[ 428.374171] 0000000000000000
[ 428.374171] 0000000000000000 0000000000000000 0000000000000000 0000000000000000
[ 428.374171] Call Trace:
[ 428.374171] [<ffffffff81283df9>] exit_mmap+0x59/0x170
[ 428.374171] [<ffffffff812b72d0>] ? __khugepaged_exit+0xe0/0x150
[ 428.374171] [<ffffffff812af89b>] ? kmem_cache_free+0x26b/0x370
[ 428.374171] [<ffffffff812b72d0>] ? __khugepaged_exit+0xe0/0x150
[ 428.374171] [<ffffffff8112e440>] mmput+0x70/0xe0
[ 428.374171] [<ffffffff8113246d>] exit_mm+0x18d/0x1a0
[ 428.374171] [<ffffffff811df625>] ? acct_collect+0x175/0x1b0
[ 428.374171] [<ffffffff811348df>] do_exit+0x26f/0x520
[ 428.374171] [<ffffffff81134c39>] do_group_exit+0xa9/0xe0
[ 428.374171] [<ffffffff81149d72>] get_signal_to_deliver+0x4e2/0x570
[ 428.374171] [<ffffffff8106cc3b>] do_signal+0x4b/0x120
[ 428.374171] [<ffffffff81176346>] ? vtime_account_user+0x96/0xb0
[ 428.374171] [<ffffffff843b0475>] ? _raw_spin_unlock+0x35/0x60
[ 428.374171] [<ffffffff81176346>] ? vtime_account_user+0x96/0xb0
[ 428.374171] [<ffffffff81249a58>] ? context_tracking_user_exit+0xb8/0x1d0
[ 428.374171] [<ffffffff8119376d>] ? trace_hardirqs_on+0xd/0x10
[ 428.374171] [<ffffffff8106cf9a>] do_notify_resume+0x5a/0xe0
[ 428.374171] [<ffffffff843b9d22>] int_signal+0x12/0x17
[ 428.374171] Code: 46 85 31 c0 e8 f9 60 12 03 48 8b 5b 30 48 c7 c7 b0 92 46 85 4a 8d 34 33 31 c0
48 c1 fe 06 e8 df 60 12 03 48 89 df e8 97 e1 fc ff <0f> 0b 0f 1f 44 00 00 eb fe 66 0f 1f 44 00 00 48
8b 03 66 85 c0
[ 428.374171] RIP [<ffffffff81282829>] munlock_vma_pages_range+0x109/0x240
[ 428.374171] RSP <ffff880f928edb38>
Thanks,
Sasha
--
To unsubscribe, send a message with 'unsubscribe linux-mm' in
the body to majordomo@kvack.org. For more info on Linux MM,
see: http://www.linux-mm.org/ .
Don't email: <a href=mailto:"dont@kvack.org"> email@kvack.org </a>
next prev parent reply other threads:[~2013-12-12 3:24 UTC|newest]
Thread overview: 35+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-12-08 1:52 kernel BUG in munlock_vma_pages_range Sasha Levin
2013-12-09 9:34 ` Vlastimil Babka
2013-12-09 17:05 ` Sasha Levin
2013-12-09 17:12 ` Vlastimil Babka
2013-12-09 17:15 ` Sasha Levin
2013-12-09 20:26 ` Sasha Levin
2013-12-11 22:59 ` Vlastimil Babka
2013-12-12 3:16 ` Sasha Levin [this message]
2013-12-12 5:03 ` Bob Liu
2013-12-12 12:41 ` Vlastimil Babka
2013-12-12 21:05 ` Sasha Levin
2013-12-13 8:49 ` Bob Liu
2013-12-13 9:08 ` Vlastimil Babka
2013-12-15 19:49 ` Sasha Levin
2013-12-16 10:14 ` [PATCH 0/3] Fix bugs in munlock Vlastimil Babka
2013-12-16 10:14 ` [PATCH 1/3] mm: munlock: fix a bug where THP tail page is encountered Vlastimil Babka
2013-12-17 1:26 ` Bob Liu
2013-12-17 13:00 ` Vlastimil Babka
2013-12-18 0:48 ` Bob Liu
2014-03-14 23:55 ` Sasha Levin
2014-03-15 3:06 ` Sasha Levin
2014-03-17 12:38 ` Vlastimil Babka
2014-03-17 21:08 ` Sasha Levin
2014-03-17 22:20 ` Vlastimil Babka
2014-03-17 22:58 ` Sasha Levin
2014-03-17 23:30 ` Vlastimil Babka
2014-03-18 10:41 ` Vlastimil Babka
2013-12-16 10:14 ` [PATCH 2/3] mm: munlock: fix deadlock in __munlock_pagevec() Vlastimil Babka
2013-12-17 0:31 ` Andrew Morton
2013-12-17 13:08 ` Vlastimil Babka
2013-12-16 10:14 ` [RFC PATCH 3/3] mm: munlock: fix potential race with THP page split Vlastimil Babka
2014-03-21 1:53 ` kernel BUG in munlock_vma_pages_range Sasha Levin
2014-03-21 9:02 ` Vlastimil Babka
2013-12-09 21:16 ` Jiri Kosina
2013-12-11 15:55 ` Sasha Levin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=52A92A8D.20603@oracle.com \
--to=sasha.levin@oracle.com \
--cc=akpm@linux-foundation.org \
--cc=joern@logfs.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-mm@kvack.org \
--cc=mgorman@suse.de \
--cc=riel@redhat.com \
--cc=vbabka@suse.cz \
--cc=walken@google.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).