linux-mm.kvack.org archive mirror
 help / color / mirror / Atom feed
* Bad page state freeing hugepages
@ 2017-06-15  0:56 Levin, Alexander (Sasha Levin)
  2017-06-22 10:22 ` Tetsuo Handa
  0 siblings, 1 reply; 4+ messages in thread
From: Levin, Alexander (Sasha Levin) @ 2017-06-15  0:56 UTC (permalink / raw)
  To: hughd, mhocko, kirill.shutemov; +Cc: linux-mm, linux-kernel

Hi all,

I've started seeing the following traces while fuzzing on the latest
-next kernel:

BUG: Bad page state in process syz-executor1  pfn:1ac01
page:ffffea00006b0040 count:0 mapcount:1 mapping:dead000000000000 index:0x20001 compound_mapcount: 1
flags: 0xfffe0000000000()
raw: 00fffe0000000000 dead000000000000 0000000000000000 00000000ffffffff
raw: ffffea00006b0001 0000000900000003 0000000000000000 0000000000000000
page dumped because: nonzero compound_mapcount
Modules linked in:
CPU: 1 PID: 25025 Comm: syz-executor1 Not tainted 4.12.0-rc5-next-20170614+ #119
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.1-1ubuntu1 04/01/2014
Call Trace:
 __dump_stack lib/dump_stack.c:16 [inline]
 dump_stack+0x11d/0x1e5 lib/dump_stack.c:52
 bad_page+0x232/0x2c0 mm/page_alloc.c:565
 free_tail_pages_check mm/page_alloc.c:974 [inline]
 free_pages_prepare mm/page_alloc.c:1030 [inline]
 __free_pages_ok+0x10be/0x1900 mm/page_alloc.c:1247
 free_compound_page+0x5e/0x70 mm/page_alloc.c:589
 free_transhuge_page+0x2d2/0x440 mm/huge_memory.c:2553
 __put_compound_page+0x87/0xb0 mm/swap.c:95
 __put_page+0xc3/0x410 mm/swap.c:111
 put_page include/linux/mm.h:814 [inline]
 get_futex_key+0xf86/0x1ce0 kernel/futex.c:702
 futex_wait_setup+0xd2/0x3f0 kernel/futex.c:2453
 futex_wait+0x32d/0xa20 kernel/futex.c:2516
 do_futex+0x106a/0x20c0 kernel/futex.c:3393
 SYSC_futex kernel/futex.c:3453 [inline]
 SyS_futex+0x299/0x3e0 kernel/futex.c:3421
 do_syscall_64+0x267/0x740 arch/x86/entry/common.c:284
 entry_SYSCALL64_slow_path+0x25/0x25
RIP: 0033:0x451429
RSP: 002b:00007f03ba95bc08 EFLAGS: 00000216 ORIG_RAX: 00000000000000ca
RAX: ffffffffffffffda RBX: 00000000201ff000 RCX: 0000000000451429
RDX: 0000000100000000 RSI: 0000000000000000 RDI: 00000000201ff000
RBP: 0000000000718000 R08: 0000000020f67ffc R09: 0000000000000001
R10: 00000000207d3000 R11: 0000000000000216 R12: 00000000ffffffff
R13: 0000000000000000 R14: 000000000000007a R15: 00007f03ba95c700
Disabling lock debugging due to kernel taint
page:ffffea00006b0000 count:0 mapcount:0 mapping:          (null) index:0x20000 compound_mapcount: 1
flags: 0xfffe0000048008(uptodate|head|swapbacked)
raw: 00fffe0000048008 0000000000000000 0000000000020000 00000000ffffffff
raw: ffffea00006b0020 ffffea00006b0020 0000000000000000 0000000000000000
page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0)
------------[ cut here ]------------
kernel BUG at ./include/linux/mm.h:466!
invalid opcode: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 2 PID: 25054 Comm: syz-executor1 Tainted: G    B           4.12.0-rc5-next-20170614+ #119
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.1-1ubuntu1 04/01/2014
task: ffff880038dec040 task.stack: ffff88003d668000
RIP: 0010:put_page_testzero include/linux/mm.h:466 [inline]
RIP: 0010:release_pages+0xb9c/0x1270 mm/swap.c:764
RSP: 0018:ffff88003d66f030 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffffffff816bf7ad RSI: ffffc90002a03000 RDI: ffffed0007acddf7
RBP: ffff88003d66f528 R08: 0000000000000000 R09: ffff880038dec040
R10: dffffc0000000000 R11: ffffffffb34e73fe R12: 1ffff10007acde20
R13: ffffea00006b0000 R14: ffff88003d66f500 R15: dffffc0000000000
FS:  00007f03ba8f9700(0000) GS:ffff88006d600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000002000a000 CR3: 0000000034cd2000 CR4: 00000000000406e0
Call Trace:
 free_pages_and_swap_cache+0x2c0/0x420 mm/swap_state.c:291
 tlb_flush_mmu_free+0xb4/0x160 mm/memory.c:262
 tlb_flush_mmu mm/memory.c:271 [inline]
 tlb_finish_mmu+0x23/0xa0 mm/memory.c:282
 unmap_region+0x364/0x500 mm/mmap.c:2467
 do_munmap+0x59a/0x1090 mm/mmap.c:2669
 mmap_region+0x5b1/0x15b0 mm/mmap.c:1616
 do_mmap+0x70b/0xe60 mm/mmap.c:1453
 do_mmap_pgoff include/linux/mm.h:2135 [inline]
 vm_mmap_pgoff+0x1f1/0x290 mm/util.c:309
 SYSC_mmap_pgoff mm/mmap.c:1503 [inline]
 SyS_mmap_pgoff+0x243/0x600 mm/mmap.c:1461
 SYSC_mmap arch/x86/kernel/sys_x86_64.c:98 [inline]
 SyS_mmap+0x16/0x20 arch/x86/kernel/sys_x86_64.c:89
 do_syscall_64+0x267/0x740 arch/x86/entry/common.c:284
 entry_SYSCALL64_slow_path+0x25/0x25
RIP: 0033:0x451429
RSP: 002b:00007f03ba8f8c08 EFLAGS: 00000216 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000451429
RDX: 0000000000000003 RSI: 0000000000f63000 RDI: 0000000020000000
RBP: 00000000007181f8 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000000032 R11: 0000000000000216 R12: 00000000ffffffff
R13: 0000000000f63000 R14: 0000000000000377 R15: 00007f03ba8f9700
Code: 40 fb ff ff 48 8d bb 80 4e 00 00 31 db e8 ed 19 2b 04 e9 64 ff ff ff e8 33 16 e3 ff 48 c7 c6 80 7a cc b7 4c 89 ef e8 04 00 09 00 <0f> 0b e8 1d 16 e3 ff 4d 8d 6c 24 ff e9 08 f7 ff ff e8 0e 16 e3 
RIP: put_page_testzero include/linux/mm.h:466 [inline] RSP: ffff88003d66f030
RIP: release_pages+0xb9c/0x1270 mm/swap.c:764 RSP: ffff88003d66f030
---[ end trace 005231fe0842ac18 ]---
Kernel panic - not syncing: Fatal exception

BUG: Bad page state in process syz-fuzzer  pfn:1f601
page:ffffea00007d8040 count:0 mapcount:1 mapping:dead000000000000 index:0x7fa463e01 compound_mapcount: 1
flags: 0xfffe0000000000()
raw: 00fffe0000000000 dead000000000000 0000000000000000 00000000ffffffff
raw: ffffea00007d8001 0000000900000003 0000000000000000 0000000000000000
page dumped because: nonzero compound_mapcount
Modules linked in:
CPU: 2 PID: 6331 Comm: syz-fuzzer Not tainted 4.12.0-rc5-next-20170614+ #119
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.1-1ubuntu1 04/01/2014
Call Trace:
 __dump_stack lib/dump_stack.c:16 [inline]
 dump_stack+0x11d/0x1e5 lib/dump_stack.c:52
 bad_page+0x232/0x2c0 mm/page_alloc.c:565
 free_tail_pages_check mm/page_alloc.c:974 [inline]
 free_pages_prepare mm/page_alloc.c:1030 [inline]
 __free_pages_ok+0x10be/0x1900 mm/page_alloc.c:1247
 free_compound_page+0x5e/0x70 mm/page_alloc.c:589
 free_transhuge_page+0x2d2/0x440 mm/huge_memory.c:2553
 __put_compound_page+0x87/0xb0 mm/swap.c:95
 __put_page+0xc3/0x410 mm/swap.c:111
 put_page include/linux/mm.h:814 [inline]
 get_futex_key+0xf86/0x1ce0 kernel/futex.c:702
 futex_wake+0x1a5/0x6a0 kernel/futex.c:1512
 do_futex+0x102e/0x20c0 kernel/futex.c:3397
 SYSC_futex kernel/futex.c:3453 [inline]
 SyS_futex+0x299/0x3e0 kernel/futex.c:3421
 mm_release+0x3fb/0x560 kernel/fork.c:1143
 exit_mm kernel/exit.c:511 [inline]
 do_exit+0x480/0x1bb0 kernel/exit.c:863
 do_group_exit+0x151/0x410 kernel/exit.c:978
 get_signal+0x84e/0x18b0 kernel/signal.c:2323
 do_signal+0x98/0x1eb0 arch/x86/kernel/signal.c:808
 exit_to_usermode_loop+0x187/0x220 arch/x86/entry/common.c:157
 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:263 [inline]
 do_syscall_64+0x50b/0x740 arch/x86/entry/common.c:289
 entry_SYSCALL64_slow_path+0x25/0x25
RIP: 0033:0x488964
RSP: 002b:000000c4268115e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: fffffffffffffe00 RBX: 0000000000000000 RCX: 0000000000488964
RDX: 000000000001ffdf RSI: 000000c4268b4021 RDI: 000000000000000e
RBP: 000000c426811630 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00000000ffffffee R14: 000000c42a7a17a0 R15: 0000000000000000
Disabling lock debugging due to kernel taint
page:ffffea00007d8000 count:0 mapcount:-1 mapping:          (null) index:0x7fa463e00 compound_mapcount: 0
flags: 0x85760000048008(uptodate|head|swapbacked)
raw: 0085760000048008 0000000000000000 00000007fa463e00 00000000fffffffe
raw: ffffea00007d8020 ffffea00007d8020 0000000000000000 0000000000000000
page dumped because: VM_BUG_ON_PAGE(page_mapcount(page) < 0)
------------[ cut here ]------------
kernel BUG at mm/huge_memory.c:1640!
invalid opcode: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 6378 Comm: syz-fuzzer Tainted: G    B           4.12.0-rc5-next-20170614+ #119
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.1-1ubuntu1 04/01/2014
task: ffff8800629a0040 task.stack: ffff88006a5b8000
RIP: 0010:zap_huge_pmd+0x96c/0xbd0 mm/huge_memory.c:1640
RSP: 0018:ffff88006a5bea60 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffea00007d8000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffed000d4b7d3d
RBP: ffff88006a5bebc0 R08: 0000000000000000 R09: ffff8800629a0040
R10: dffffc0000000000 R11: ffffffffa229bba3 R12: ffff88006a5bf100
R13: 1ffff1000d4b7d4f R14: ffff880068b158f8 R15: ffffea00007d8020
FS:  00007fa4569f6700(0000) GS:ffff88003ec00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020003fd8 CR3: 000000004a028000 CR4: 00000000000406e0
Call Trace:
 zap_pmd_range mm/memory.c:1304 [inline]
 zap_pud_range mm/memory.c:1346 [inline]
 zap_p4d_range mm/memory.c:1367 [inline]
 unmap_page_range+0x152f/0x1db0 mm/memory.c:1388
 unmap_single_vma+0x15f/0x2d0 mm/memory.c:1433
 unmap_vmas+0xf1/0x1b0 mm/memory.c:1463
 exit_mmap+0x211/0x450 mm/mmap.c:2963
 __mmput kernel/fork.c:903 [inline]
 mmput+0x22f/0x6e0 kernel/fork.c:925
 exit_mm kernel/exit.c:556 [inline]
 do_exit+0x9a0/0x1bb0 kernel/exit.c:863
 do_group_exit+0x151/0x410 kernel/exit.c:978
 get_signal+0x84e/0x18b0 kernel/signal.c:2323
 do_signal+0x98/0x1eb0 arch/x86/kernel/signal.c:808
 exit_to_usermode_loop+0x187/0x220 arch/x86/entry/common.c:157
 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:263 [inline]
 do_syscall_64+0x50b/0x740 arch/x86/entry/common.c:289
 entry_SYSCALL64_slow_path+0x25/0x25
RIP: 0033:0x45c723
RSP: 002b:000000c420025ea0 EFLAGS: 00000202 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffdfc RBX: 000000003b7615ec RCX: 000000000045c723
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000e5d9d8
RBP: 000000c420025ee8 R08: 0000000000000000 R09: 0000000000000000
R10: 000000c420025ed8 R11: 0000000000000202 R12: 0000004df9784cc4
R13: 0000004df9784cc4 R14: 000000c42bd91d40 R15: 0000000000000000
Code: ff e8 89 e1 c9 ff 48 c7 c6 80 5d ae a6 48 89 df e8 5a cb ef ff 0f 0b e8 73 e1 c9 ff 48 c7 c6 c0 5d ae a6 48 89 df e8 44 cb ef ff <0f> 0b e8 5d e1 c9 ff 48 c7 c6 20 5e ae a6 48 89 df e8 2e cb ef 
RIP: zap_huge_pmd+0x96c/0xbd0 mm/huge_memory.c:1640 RSP: ffff88006a5bea60
---[ end trace c0196962ea14530a ]---
Kernel panic - not syncing: Fatal exception


BUG: Bad page state in process syz-executor0  pfn:4e801
page:ffffea00013a0040 count:0 mapcount:1 mapping:dead000000000000 index:0x20401 compound_mapcount: 1
flags: 0x4fffe0000000000()
raw: 04fffe0000000000 dead000000000000 0000000000000000 00000000ffffffff
raw: ffffea00013a0001 0000000900000003 0000000000000000 0000000000000000
page dumped because: nonzero compound_mapcount
Modules linked in:
CPU: 3 PID: 14685 Comm: syz-executor0 Not tainted 4.12.0-rc5-next-20170614+ #119
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.1-1ubuntu1 04/01/2014
Call Trace:
 __dump_stack lib/dump_stack.c:16 [inline]
 dump_stack+0x11d/0x1e5 lib/dump_stack.c:52
 bad_page+0x232/0x2c0 mm/page_alloc.c:565
 free_tail_pages_check mm/page_alloc.c:974 [inline]
 free_pages_prepare mm/page_alloc.c:1030 [inline]
 __free_pages_ok+0x10be/0x1900 mm/page_alloc.c:1247
 free_compound_page+0x5e/0x70 mm/page_alloc.c:589
 free_transhuge_page+0x2d2/0x440 mm/huge_memory.c:2553
 __put_compound_page+0x87/0xb0 mm/swap.c:95
 __put_page+0xc3/0x410 mm/swap.c:111
 put_page include/linux/mm.h:814 [inline]
 do_direct_IO fs/direct-io.c:981 [inline]
 do_blockdev_direct_IO+0x836b/0xd5a0 fs/direct-io.c:1257
 __blockdev_direct_IO+0x9d/0xd0 fs/direct-io.c:1343
 ext4_direct_IO_write fs/ext4/inode.c:3646 [inline]
 ext4_direct_IO+0xbd6/0x1c50 fs/ext4/inode.c:3768
 generic_file_direct_write+0x199/0x340 mm/filemap.c:2737
 __generic_file_write_iter+0x224/0x600 mm/filemap.c:2910
 ext4_file_write_iter+0x2b0/0x1140 fs/ext4/file.c:242
 call_write_iter include/linux/fs.h:1735 [inline]
 new_sync_write fs/read_write.c:497 [inline]
 __vfs_write+0x679/0x9a0 fs/read_write.c:510
 vfs_write+0x18f/0x510 fs/read_write.c:558
 SYSC_write fs/read_write.c:605 [inline]
 SyS_write+0xfa/0x240 fs/read_write.c:597
 do_syscall_64+0x267/0x740 arch/x86/entry/common.c:284
 entry_SYSCALL64_slow_path+0x25/0x25
RIP: 0033:0x451429
RSP: 002b:00007fc5506c9c08 EFLAGS: 00000216 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000451429
RDX: 0000000000001000 RSI: 00000000205ff000 RDI: 0000000000000005
RBP: 0000000000718000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000216 R12: 00000000ffffffff
R13: 00000000205ff000 R14: 00000000000005ce R15: 00007fc5506ca700
page:ffffea00013a0000 count:0 mapcount:0 mapping:ffff8800661a6289 index:0x20400 compound_mapcount: 0
flags: 0x4fffe0000048008(uptodate|head|swapbacked)
raw: 04fffe0000048008 ffff8800661a6289 0000000000020400 00000000ffffffff
Disabling lock debugging due to kernel taint
list_add corruption. prev->next should be next (ffff88007ffdcf20), but was           (null). (prev=ffffea00013a0088).
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:28!
invalid opcode: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 3 PID: 14707 Comm: syz-executor6 Tainted: G    B           4.12.0-rc5-next-20170614+ #119
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.1-1ubuntu1 04/01/2014
task: ffff88005fde0040 task.stack: ffff88005fe80000
RIP: 0010:__list_add_valid.cold.0+0x23/0x25 lib/list_debug.c:26
RSP: 0018:ffff88005fe86cb0 EFLAGS: 00010082
RAX: 0000000000000075 RBX: ffff88007ffdcf20 RCX: 00000000000008d8
RDX: 0000000000000000 RSI: ffffc90003909000 RDI: 0000000000000000
RBP: ffff88005fe86cc8 R08: 0000000000000000 R09: ffff88005fde0040
R10: ffffea00013a0088 R11: ffffffffa6c9bba3 R12: ffffea00013c0088
R13: ffff88007ffd8000 R14: ffff88007ffdced8 R15: ffffea00013c0000
FS:  00007faab4f70700(0000) GS:ffff88006d600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000209e2000 CR3: 0000000061087000 CR4: 00000000000406e0
Call Trace:
 __list_add include/linux/list.h:59 [inline]
 list_add_tail include/linux/list.h:92 [inline]
 deferred_split_huge_page+0x2d1/0x590 mm/huge_memory.c:2566
 page_remove_anon_compound_rmap mm/rmap.c:1229 [inline]
 page_remove_rmap+0x377/0xcd0 mm/rmap.c:1246
 zap_huge_pmd+0x305/0xbd0 mm/huge_memory.c:1639
 zap_pmd_range mm/memory.c:1304 [inline]
 zap_pud_range mm/memory.c:1346 [inline]
 zap_p4d_range mm/memory.c:1367 [inline]
 unmap_page_range+0x152f/0x1db0 mm/memory.c:1388
 unmap_single_vma+0x15f/0x2d0 mm/memory.c:1433
 unmap_vmas+0xf1/0x1b0 mm/memory.c:1463
 unmap_region+0x2c1/0x500 mm/mmap.c:2464
 do_munmap+0x59a/0x1090 mm/mmap.c:2669
 mmap_region+0x5b1/0x15b0 mm/mmap.c:1616
 do_mmap+0x70b/0xe60 mm/mmap.c:1453
 do_mmap_pgoff include/linux/mm.h:2135 [inline]
 vm_mmap_pgoff+0x1f1/0x290 mm/util.c:309
 SYSC_mmap_pgoff mm/mmap.c:1503 [inline]
 SyS_mmap_pgoff+0x243/0x600 mm/mmap.c:1461
 SYSC_mmap arch/x86/kernel/sys_x86_64.c:98 [inline]
 SyS_mmap+0x16/0x20 arch/x86/kernel/sys_x86_64.c:89
 do_syscall_64+0x267/0x740 arch/x86/entry/common.c:284
 entry_SYSCALL64_slow_path+0x25/0x25
RIP: 0033:0x451429
RSP: 002b:00007faab4f6fc08 EFLAGS: 00000216 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000451429
RDX: 0000000000000003 RSI: 00000000009e1000 RDI: 0000000020000000
RBP: 0000000000718000 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000000032 R11: 0000000000000216 R12: 00000000ffffffff
R13: 00000000009e1000 R14: 0000000000000377 R15: 00007faab4f70700
Code: fe 5b 41 5c 41 5d 5d c3 48 89 d9 48 c7 c7 60 84 67 ab e8 b8 68 97 fe 0f 0b 48 89 f1 48 c7 c7 20 85 67 ab 48 89 de e8 a4 68 97 fe <0f> 0b 48 c7 c7 c0 86 67 ab e8 96 68 97 fe 0f 0b 4c 89 e2 48 c7 
RIP: __list_add_valid.cold.0+0x23/0x25 lib/list_debug.c:26 RSP: ffff88005fe86cb0
---[ end trace f869bcffb9c578bb ]---
Kernel panic - not syncing: Fatal exception

-- 

Thanks,
Sasha
--
To unsubscribe, send a message with 'unsubscribe linux-mm' in
the body to majordomo@kvack.org.  For more info on Linux MM,
see: http://www.linux-mm.org/ .
Don't email: <a href=mailto:"dont@kvack.org"> email@kvack.org </a>

^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: Bad page state freeing hugepages
  2017-06-15  0:56 Bad page state freeing hugepages Levin, Alexander (Sasha Levin)
@ 2017-06-22 10:22 ` Tetsuo Handa
  2017-06-22 16:53   ` Kirill A. Shutemov
  2017-06-27 16:42   ` Kirill A. Shutemov
  0 siblings, 2 replies; 4+ messages in thread
From: Tetsuo Handa @ 2017-06-22 10:22 UTC (permalink / raw)
  To: linux-mm
  Cc: Levin, Alexander (Sasha Levin),
	hughd, mhocko, kirill.shutemov, linux-kernel

FYI, I'm hitting this problem by doing just boot or shutdown sequence,
and this problem is remaining as of next-20170622.

localhost login: [   37.010894] BUG: Bad page state in process gdbus  pfn:11f001
[   37.015328] page:ffffc0ce447c0040 count:0 mapcount:1 mapping:dead000000000000 index:0x7fab97e01 compound_mapcount: 1
[   37.022580] flags: 0x2fffff80000000()
[   37.025584] raw: 002fffff80000000 dead000000000000 0000000000000000 00000000ffffffff
[   37.030924] raw: ffffc0ce447c0001 0000000900000003 0000000000000000 0000000000000000
[   37.035356] page dumped because: nonzero compound_mapcount
[   37.037590] Modules linked in: nf_conntrack_netbios_ns nf_conntrack_broadcast ip6t_rpfilter ipt_REJECT nf_reject_ipv4 ip6t_REJECT nf_reject_ipv6 xt_conntrack ip_set nfnetlink ebtable_nat ebtable_broute bridge stp llc ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_raw iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_raw ebtable_filter ebtables ip6table_filter ip6_tables iptable_filter coretemp ppdev vmw_balloon pcspkr sg parport_pc vmw_vmci i2c_piix4 parport shpchp ip_tables xfs libcrc32c sr_mod cdrom ata_generic sd_mod pata_acpi vmwgfx mptspi serio_raw drm_kms_helper syscopyarea sysfillrect scsi_transport_spi sysimgblt fb_sys_fops ttm ahci libahci mptscsih e1000 ata_piix drm i2c_core libata mptbase
[   37.066948] CPU: 1 PID: 618 Comm: gdbus Not tainted 4.12.0-rc6-next-20170620 #105
[   37.070248] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/31/2013
[   37.075194] Call Trace:
[   37.076470]  dump_stack+0x86/0xcf
[   37.078031]  bad_page+0xc1/0x120
[   37.079400]  __free_pages_ok+0x40c/0x5f0
[   37.080979]  free_compound_page+0x1b/0x20
[   37.082581]  free_transhuge_page+0xa4/0xb0
[   37.084486]  ? get_futex_key+0x122/0x730
[   37.086065]  __put_compound_page+0x30/0x50
[   37.087710]  __put_page+0x22/0x40
[   37.089020]  get_futex_key+0x2fa/0x730
[   37.090524]  futex_wake+0x6a/0x170
[   37.092052]  do_futex+0x2a8/0x560
[   37.093521]  ? sched_clock+0x9/0x10
[   37.095007]  ? __might_fault+0x3e/0x90
[   37.097070]  SyS_futex+0x83/0x190
[   37.098577]  mm_release+0x113/0x160
[   37.100046]  do_exit+0x150/0xda0
[   37.101406]  ? get_signal+0x3a4/0x910
[   37.103298]  do_group_exit+0x50/0xd0
[   37.104733]  get_signal+0x2e4/0x910
[   37.106114]  ? trace_hardirqs_on+0xd/0x10
[   37.107833]  do_signal+0x37/0x6b0
[   37.109167]  ? trace_hardirqs_on_caller+0xf5/0x190
[   37.111277]  ? __audit_syscall_exit+0x220/0x2c0
[   37.113271]  ? rcu_read_lock_sched_held+0x4a/0x80
[   37.115305]  ? kfree+0x284/0x2e0
[   37.116614]  ? __audit_syscall_exit+0x220/0x2c0
[   37.118438]  exit_to_usermode_loop+0x69/0xa0
[   37.120508]  do_syscall_64+0x167/0x1c0
[   37.122405]  entry_SYSCALL64_slow_path+0x25/0x25
[   37.124438] RIP: 0033:0x7fab9e5eae2d
[   37.126457] RSP: 002b:00007fab97ffed20 EFLAGS: 00000293 ORIG_RAX: 0000000000000007
[   37.130273] RAX: fffffffffffffdfc RBX: 0000556a49e04540 RCX: 00007fab9e5eae2d
[   37.133741] RDX: 00000000ffffffff RSI: 0000000000000002 RDI: 00007fab900010c0
[   37.137124] RBP: 0000000000000002 R08: 0000000000000002 R09: 0000000000000000
[   37.140547] R10: 0000000000000001 R11: 0000000000000293 R12: 00007fab900010c0
[   37.143980] R13: 00000000ffffffff R14: 00007fab9ed318b0 R15: 0000000000000002
[   37.147453] Disabling lock debugging due to kernel taint
[   37.150240] page:ffffc0ce447c0000 count:0 mapcount:-1 mapping:          (null) index:0x7fab97e00 compound_mapcount: 0
[   37.156008] flags: 0x2fffff80048008(uptodate|head|swapbacked)
[   37.158928] raw: 002fffff80048008 0000000000000000 00000007fab97e00 00000000fffffffe
[   37.163068] raw: ffffc0ce447c0020 ffffc0ce447c0020 0000000000000000 0000000000000000
[   37.167455] page dumped because: VM_BUG_ON_PAGE(page_mapcount(page) < 0)
[   37.171391] ------------[ cut here ]------------
[   37.174013] kernel BUG at mm/huge_memory.c:1646!
[   37.176439] invalid opcode: 0000 [#1] SMP DEBUG_PAGEALLOC
[   37.179034] Modules linked in: nf_conntrack_netbios_ns nf_conntrack_broadcast ip6t_rpfilter ipt_REJECT nf_reject_ipv4 ip6t_REJECT nf_reject_ipv6 xt_conntrack ip_set nfnetlink ebtable_nat ebtable_broute bridge stp llc ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_raw iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_raw ebtable_filter ebtables ip6table_filter ip6_tables iptable_filter coretemp ppdev vmw_balloon pcspkr sg parport_pc vmw_vmci i2c_piix4 parport shpchp ip_tables xfs libcrc32c sr_mod cdrom ata_generic sd_mod pata_acpi vmwgfx mptspi serio_raw drm_kms_helper syscopyarea sysfillrect scsi_transport_spi sysimgblt fb_sys_fops ttm ahci libahci mptscsih e1000 ata_piix drm i2c_core libata mptbase
[   37.211562] CPU: 2 PID: 618 Comm: gdbus Tainted: G    B           4.12.0-rc6-next-20170620 #105
[   37.215856] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/31/2013
[   37.220759] task: ffff8d10eded4a40 task.stack: ffff9ab782264000
[   37.223678] RIP: 0010:zap_huge_pmd+0x28c/0x2a0
[   37.226100] RSP: 0018:ffff9ab782267a30 EFLAGS: 00010246
[   37.228761] RAX: 000000000000003c RBX: ffffc0ce447c0000 RCX: 0000000000000000
[   37.232238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8d10f33ce368
[   37.235620] RBP: ffff9ab782267a60 R08: 0000000000000000 R09: 0000000000000001
[   37.239378] R10: ffff9ab782267968 R11: 0000000000000000 R12: ffff8d10ecb934a0
[   37.242843] R13: ffff8d10eb9d75f8 R14: ffff9ab782267bd8 R15: 00003fffffe00000
[   37.246524] FS:  00007fab97fff700(0000) GS:ffff8d10f3200000(0000) knlGS:0000000000000000
[   37.250734] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   37.253589] CR2: 00007fd4a29f7000 CR3: 000000012db6b000 CR4: 00000000001406e0
[   37.257211] Call Trace:
[   37.258811]  unmap_page_range+0x8d7/0x970
[   37.261008]  unmap_single_vma+0x59/0xe0
[   37.263238]  ? __slab_free+0xa4/0x280
[   37.265304]  unmap_vmas+0x37/0x50
[   37.267229]  exit_mmap+0x97/0x150
[   37.269150]  mmput+0x71/0x160
[   37.270956]  do_exit+0x2cf/0xda0
[   37.273155]  ? get_signal+0x3a4/0x910
[   37.275229]  do_group_exit+0x50/0xd0
[   37.277311]  get_signal+0x2e4/0x910
[   37.279304]  ? trace_hardirqs_on+0xd/0x10
[   37.281541]  do_signal+0x37/0x6b0
[   37.283506]  ? trace_hardirqs_on_caller+0xf5/0x190
[   37.286058]  ? __audit_syscall_exit+0x220/0x2c0
[   37.288678]  ? rcu_read_lock_sched_held+0x4a/0x80
[   37.291116]  ? kfree+0x284/0x2e0
[   37.292993]  ? __audit_syscall_exit+0x220/0x2c0
[   37.295396]  exit_to_usermode_loop+0x69/0xa0
[   37.297784]  do_syscall_64+0x167/0x1c0
[   37.299854]  entry_SYSCALL64_slow_path+0x25/0x25
[   37.302298] RIP: 0033:0x7fab9e5eae2d
[   37.304499] RSP: 002b:00007fab97ffed20 EFLAGS: 00000293 ORIG_RAX: 0000000000000007
[   37.308313] RAX: fffffffffffffdfc RBX: 0000556a49e04540 RCX: 00007fab9e5eae2d
[   37.311755] RDX: 00000000ffffffff RSI: 0000000000000002 RDI: 00007fab900010c0
[   37.315123] RBP: 0000000000000002 R08: 0000000000000002 R09: 0000000000000000
[   37.318786] R10: 0000000000000001 R11: 0000000000000293 R12: 00007fab900010c0
[   37.322110] R13: 00000000ffffffff R14: 00007fab9ed318b0 R15: 0000000000000002
[   37.325448] Code: 00 00 00 fe ff ff e9 cd fe ff ff 48 c7 c6 a0 14 c4 90 48 89 df e8 65 2f fb ff 0f 0b 48 c7 c6 60 53 c4 90 48 89 df e8 54 2f fb ff <0f> 0b 48 c7 c6 98 05 c4 90 48 89 df e8 43 2f fb ff 0f 0b 90 0f
[   37.334298] RIP: zap_huge_pmd+0x28c/0x2a0 RSP: ffff9ab782267a30
[   37.337276] ---[ end trace 35bcf1187115bba1 ]---
[   37.339693] Fixing recursive fault but reboot is needed!
[   37.342383] BUG: scheduling while atomic: gdbus/618/0x00000002
[   37.346255] INFO: lockdep is turned off.
[   37.348380] Modules linked in: nf_conntrack_netbios_ns nf_conntrack_broadcast ip6t_rpfilter ipt_REJECT nf_reject_ipv4 ip6t_REJECT nf_reject_ipv6 xt_conntrack ip_set nfnetlink ebtable_nat ebtable_broute bridge stp llc ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_raw iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_raw ebtable_filter ebtables ip6table_filter ip6_tables iptable_filter coretemp ppdev vmw_balloon pcspkr sg parport_pc vmw_vmci i2c_piix4 parport shpchp ip_tables xfs libcrc32c sr_mod cdrom ata_generic sd_mod pata_acpi vmwgfx mptspi serio_raw drm_kms_helper syscopyarea sysfillrect scsi_transport_spi sysimgblt fb_sys_fops ttm ahci libahci mptscsih e1000 ata_piix drm i2c_core libata mptbase
[   37.380628] CPU: 2 PID: 618 Comm: gdbus Tainted: G    B D         4.12.0-rc6-next-20170620 #105
[   37.385197] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/31/2013
[   37.389953] Call Trace:
[   37.391518]  dump_stack+0x86/0xcf
[   37.393557]  __schedule_bug+0x65/0x90
[   37.396119]  __schedule+0x79b/0x990
[   37.398128]  ? vprintk_func+0x27/0x60
[   37.400139]  schedule+0x3d/0x90
[   37.401956]  do_exit+0xa57/0xda0
[   37.404127]  rewind_stack_do_exit+0x17/0x20
[   37.406368] RIP: 0033:0x7fab9e5eae2d
[   37.408375] RSP: 002b:00007fab97ffed20 EFLAGS: 00000293 ORIG_RAX: 0000000000000007
[   37.411956] RAX: fffffffffffffdfc RBX: 0000556a49e04540 RCX: 00007fab9e5eae2d
[   37.415603] RDX: 00000000ffffffff RSI: 0000000000000002 RDI: 00007fab900010c0
[   37.419076] RBP: 0000000000000002 R08: 0000000000000002 R09: 0000000000000000
[   37.422621] R10: 0000000000000001 R11: 0000000000000293 R12: 00007fab900010c0
[   37.426042] R13: 00000000ffffffff R14: 00007fab9ed318b0 R15: 0000000000000002



[  OK  ] Stopped firewalld - dynamic firewall daemon.
[  113.764020] BUG: Bad page state in process runaway-killer-  pfn:121801
         Stopping D-Bus System Message Bus...
[  113.769256] page:ffffc0ce44860040 count:0 mapcount:1 mapping:dead000000000000 index:0x7f0004c01 compound_mapcount: 1
[  113.769260] flags: 0x2fffff80000000()
[  113.769264] raw: 002fffff80000000 dead000000000000 0000000000000000 00000000ffffffff
[  113.769266] raw: ffffc0ce44860001 0000000900000003 0000000000000000 0000000000000000
[  113.769267] page dumped because: nonzero compound_mapcount
[  113.769267] Modules linked in: ip_set nfnetlink bridge stp llc coretemp ppdev vmw_balloon pcspkr sg parport_pc vmw_vmci i2c_piix4 parport shpchp xfs libcrc32c sr_mod cdrom ata_generic sd_mod pata_acpi vmwgfx mptspi serio_raw drm_kms_helper syscopyarea sysfillrect scsi_transport_spi sysimgblt fb_sys_fops ttm ahci libahci mptscsih e1000 ata_piix drm i2c_core libata mptbase [last unloaded: ip_tables]
[  113.769316] CPU: 3 PID: 584 Comm: runaway-killer- Tainted: G    B D W       4.12.0-rc6-next-20170620 #105
[  113.769318] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/31/2013
[  113.769319] Call Trace:
[  113.769326]  dump_stack+0x86/0xcf
[  113.769331]  bad_page+0xc1/0x120
[  113.769335]  __free_pages_ok+0x40c/0x5f0
[  113.769340]  free_compound_page+0x1b/0x20
[  113.769343]  free_transhuge_page+0xa4/0xb0
[  113.769348]  ? get_futex_key+0x122/0x730
[  113.769351]  __put_compound_page+0x30/0x50
[  113.769353]  __put_page+0x22/0x40
[  113.769356]  get_futex_key+0x2fa/0x730
[  113.769362]  futex_wake+0x6a/0x170
[  113.769365]  ? trace_hardirqs_on+0xd/0x10
[  113.769371]  do_futex+0x2a8/0x560
[  113.769373]  ? lock_acquire+0xfb/0x200
[  113.769378]  ? __might_fault+0x3e/0x90
[  113.769385]  SyS_futex+0x83/0x190
[  113.769394]  mm_release+0x113/0x160
[  113.769398]  do_exit+0x150/0xda0
[  113.769402]  ? get_signal+0xc7/0x910
[  113.769406]  do_group_exit+0x50/0xd0
[  113.769411]  get_signal+0x2e4/0x910
[  113.769420]  do_signal+0x37/0x6b0
[  113.769424]  ? trace_hardirqs_on_caller+0xf5/0x190
[  113.769426]  ? trace_hardirqs_on+0xd/0x10
[  113.769431]  ? getnstimeofday64+0xe/0x20
[  113.769433]  ? kfree+0x1fc/0x2e0
[  113.769438]  ? __audit_syscall_exit+0x220/0x2c0
[  113.769443]  exit_to_usermode_loop+0x69/0xa0
[  113.769446]  do_syscall_64+0x167/0x1c0
[  113.769451]  entry_SYSCALL64_slow_path+0x25/0x25
[  113.769454] RIP: 0033:0x7f000a807e2d
[  113.769455] RSP: 002b:00007f0004dfed10 EFLAGS: 00000293 ORIG_RAX: 0000000000000007
[  113.769458] RAX: fffffffffffffdfc RBX: 00007efff40008c0 RCX: 00007f000a807e2d
[  113.769459] RDX: 00000000ffffffff RSI: 0000000000000001 RDI: 00007efff4001220
[  113.769461] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[  113.769462] R10: 0000000000000001 R11: 0000000000000293 R12: 00007efff4001220
[  113.769463] R13: 00000000ffffffff R14: 00007f000b55f8b0 R15: 0000000000000001
[  113.769591] page:ffffc0ce44860000 count:0 mapcount:-1 mapping:          (null) index:0x7f0004c00 compound_mapcount: 0
[  113.769595] flags: 0x2fffff80048008(uptodate|head|swapbacked)
[  113.769598] raw: 002fffff80048008 0000000000000000 00000007f0004c00 00000000fffffffe
[  113.769599] raw: ffffc0ce44860020 ffffc0ce44860020 0000000000000000 0000000000000000
[  113.769600] page dumped because: VM_BUG_ON_PAGE(page_mapcount(page) < 0)
[  113.769614] ------------[ cut here ]------------
[  113.769615] kernel BUG at mm/huge_memory.c:1646!
[  113.769618] invalid opcode: 0000 [#2] SMP DEBUG_PAGEALLOC
[  113.769620] Modules linked in: ip_set nfnetlink bridge stp llc coretemp ppdev vmw_balloon pcspkr sg parport_pc vmw_vmci i2c_piix4 parport shpchp xfs libcrc32c sr_mod cdrom ata_generic sd_mod pata_acpi vmwgfx mptspi serio_raw drm_kms_helper syscopyarea sysfillrect scsi_transport_spi sysimgblt fb_sys_fops ttm ahci libahci mptscsih e1000 ata_piix drm i2c_core libata mptbase [last unloaded: ip_tables]
[  113.769658] CPU: 3 PID: 584 Comm: runaway-killer- Tainted: G    B D W       4.12.0-rc6-next-20170620 #105
[  113.769659] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/31/2013
[  113.769660] task: ffff8d10e5ec4a40 task.stack: ffff9ab783864000
[  113.769663] RIP: 0010:zap_huge_pmd+0x28c/0x2a0
[  113.769665] RSP: 0018:ffff9ab783867a30 EFLAGS: 00010246
[  113.769667] RAX: 000000000000003c RBX: ffffc0ce44860000 RCX: 0000000000000000
[  113.769668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000292
[  113.769669] RBP: ffff9ab783867a60 R08: 0000000000000000 R09: 0000000000000001
[  113.769670] R10: ffff9ab783867968 R11: 0000000000000000 R12: ffff8d10ec3d4cc8
[  113.769671] R13: ffff8d10e96aa130 R14: ffff9ab783867bd8 R15: 00003fffffe00000
[  113.769673] FS:  0000000000000000(0000) GS:ffff8d10f3400000(0000) knlGS:0000000000000000
[  113.769674] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  113.769676] CR2: 00007fcaf3489298 CR3: 000000012dbde000 CR4: 00000000001406e0
[  113.769718] Call Trace:
[  113.769724]  unmap_page_range+0x8d7/0x970
[  113.769735]  unmap_single_vma+0x59/0xe0
[  113.769738]  ? __slab_free+0xa4/0x280
[  113.769742]  unmap_vmas+0x37/0x50
[  113.769746]  exit_mmap+0x97/0x150
[  113.769756]  mmput+0x71/0x160
[  113.769760]  do_exit+0x2cf/0xda0
[  113.769764]  ? get_signal+0xc7/0x910
[  113.769769]  do_group_exit+0x50/0xd0
[  113.769773]  get_signal+0x2e4/0x910
[  113.769781]  do_signal+0x37/0x6b0
[  113.769785]  ? trace_hardirqs_on_caller+0xf5/0x190
[  113.769787]  ? trace_hardirqs_on+0xd/0x10
[  113.769792]  ? getnstimeofday64+0xe/0x20
[  113.769794]  ? kfree+0x1fc/0x2e0
[  113.769799]  ? __audit_syscall_exit+0x220/0x2c0
[  113.769805]  exit_to_usermode_loop+0x69/0xa0
[  113.769809]  do_syscall_64+0x167/0x1c0
[  113.769813]  entry_SYSCALL64_slow_path+0x25/0x25
[  113.769815] RIP: 0033:0x7f000a807e2d
[  113.769816] RSP: 002b:00007f0004dfed10 EFLAGS: 00000293 ORIG_RAX: 0000000000000007
[  113.769818] RAX: fffffffffffffdfc RBX: 00007efff40008c0 RCX: 00007f000a807e2d
[  113.769819] RDX: 00000000ffffffff RSI: 0000000000000001 RDI: 00007efff4001220
[  113.769820] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[  113.769821] R10: 0000000000000001 R11: 0000000000000293 R12: 00007efff4001220
[  113.769822] R13: 00000000ffffffff R14: 00007f000b55f8b0 R15: 0000000000000001
[  113.769829] Code: 00 00 00 fe ff ff e9 cd fe ff ff 48 c7 c6 a0 14 c4 90 48 89 df e8 65 2f fb ff 0f 0b 48 c7 c6 60 53 c4 90 48 89 df e8 54 2f fb ff <0f> 0b 48 c7 c6 98 05 c4 90 48 89 df e8 43 2f fb ff 0f 0b 90 0f
[  113.769877] RIP: zap_huge_pmd+0x28c/0x2a0 RSP: ffff9ab783867a30
[  113.769880] ---[ end trace 35bcf1187115bba2 ]---
[  113.769882] Fixing recursive fault but reboot is needed!
[  113.769883] BUG: scheduling while atomic: runaway-killer-/584/0x00000002
[  113.769884] INFO: lockdep is turned off.
[  113.769885] Modules linked in: ip_set nfnetlink bridge stp llc coretemp ppdev vmw_balloon pcspkr sg parport_pc vmw_vmci i2c_piix4 parport shpchp xfs libcrc32c sr_mod cdrom ata_generic sd_mod pata_acpi vmwgfx mptspi serio_raw drm_kms_helper syscopyarea sysfillrect scsi_transport_spi sysimgblt fb_sys_fops ttm ahci libahci mptscsih e1000 ata_piix drm i2c_core libata mptbase [last unloaded: ip_tables]
[  113.769916] CPU: 3 PID: 584 Comm: runaway-killer- Tainted: G    B D W       4.12.0-rc6-next-20170620 #105
[  113.769918] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/31/2013
[  113.769918] Call Trace:
[  113.769922]  dump_stack+0x86/0xcf
[  113.769926]  __schedule_bug+0x65/0x90
[  113.769929]  __schedule+0x79b/0x990
[  113.769932]  ? vprintk_func+0x27/0x60
[  113.769938]  schedule+0x3d/0x90
[  113.769942]  do_exit+0xa57/0xda0
[  113.769948]  rewind_stack_do_exit+0x17/0x20
[  113.769949] RIP: 0033:0x7f000a807e2d
[  113.769950] RSP: 002b:00007f0004dfed10 EFLAGS: 00000293 ORIG_RAX: 0000000000000007
[  113.769952] RAX: fffffffffffffdfc RBX: 00007efff40008c0 RCX: 00007f000a807e2d
[  113.769953] RDX: 00000000ffffffff RSI: 0000000000000001 RDI: 00007efff4001220
[  113.769954] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[  113.769955] R10: 0000000000000001 R11: 0000000000000293 R12: 00007efff4001220
[  113.769956] R13: 00000000ffffffff R14: 00007f000b55f8b0 R15: 0000000000000001
         Stopping Authorization Manager...

^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: Bad page state freeing hugepages
  2017-06-22 10:22 ` Tetsuo Handa
@ 2017-06-22 16:53   ` Kirill A. Shutemov
  2017-06-27 16:42   ` Kirill A. Shutemov
  1 sibling, 0 replies; 4+ messages in thread
From: Kirill A. Shutemov @ 2017-06-22 16:53 UTC (permalink / raw)
  To: Tetsuo Handa, Huang Ying, Stephen Rothwell
  Cc: linux-mm, Levin, Alexander (Sasha Levin),
	hughd, mhocko, kirill.shutemov, linux-kernel

On Thu, Jun 22, 2017 at 07:22:09PM +0900, Tetsuo Handa wrote:
> FYI, I'm hitting this problem by doing just boot or shutdown sequence,
> and this problem is remaining as of next-20170622.

Ying, Stephen.

I've tried to bisected it quickly. It points to the merge commit
6adcaf20a8a6, which is strange. Both parents are fine.

My best guess is that it's related to THP-swap patchset. I don't have time
today to look deeper. Ying?

> 
> localhost login: [   37.010894] BUG: Bad page state in process gdbus  pfn:11f001
> [   37.015328] page:ffffc0ce447c0040 count:0 mapcount:1 mapping:dead000000000000 index:0x7fab97e01 compound_mapcount: 1
> [   37.022580] flags: 0x2fffff80000000()
> [   37.025584] raw: 002fffff80000000 dead000000000000 0000000000000000 00000000ffffffff
> [   37.030924] raw: ffffc0ce447c0001 0000000900000003 0000000000000000 0000000000000000
> [   37.035356] page dumped because: nonzero compound_mapcount
> [   37.037590] Modules linked in: nf_conntrack_netbios_ns nf_conntrack_broadcast ip6t_rpfilter ipt_REJECT nf_reject_ipv4 ip6t_REJECT nf_reject_ipv6 xt_conntrack ip_set nfnetlink ebtable_nat ebtable_broute bridge stp llc ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_raw iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_raw ebtable_filter ebtables ip6table_filter ip6_tables iptable_filter coretemp ppdev vmw_balloon pcspkr sg parport_pc vmw_vmci i2c_piix4 parport shpchp ip_tables xfs libcrc32c sr_mod cdrom ata_generic sd_mod pata_acpi vmwgfx mptspi serio_raw drm_kms_helper syscopyarea sysfillrect scsi_transport_spi sysimgblt fb_sys_fops ttm ahci libahci mptscsih e1000 ata_piix drm i2c_core libata mptbase
> [   37.066948] CPU: 1 PID: 618 Comm: gdbus Not tainted 4.12.0-rc6-next-20170620 #105
> [   37.070248] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/31/2013
> [   37.075194] Call Trace:
> [   37.076470]  dump_stack+0x86/0xcf
> [   37.078031]  bad_page+0xc1/0x120
> [   37.079400]  __free_pages_ok+0x40c/0x5f0
> [   37.080979]  free_compound_page+0x1b/0x20
> [   37.082581]  free_transhuge_page+0xa4/0xb0
> [   37.084486]  ? get_futex_key+0x122/0x730
> [   37.086065]  __put_compound_page+0x30/0x50
> [   37.087710]  __put_page+0x22/0x40
> [   37.089020]  get_futex_key+0x2fa/0x730
> [   37.090524]  futex_wake+0x6a/0x170
> [   37.092052]  do_futex+0x2a8/0x560
> [   37.093521]  ? sched_clock+0x9/0x10
> [   37.095007]  ? __might_fault+0x3e/0x90
> [   37.097070]  SyS_futex+0x83/0x190
> [   37.098577]  mm_release+0x113/0x160
> [   37.100046]  do_exit+0x150/0xda0
> [   37.101406]  ? get_signal+0x3a4/0x910
> [   37.103298]  do_group_exit+0x50/0xd0
> [   37.104733]  get_signal+0x2e4/0x910
> [   37.106114]  ? trace_hardirqs_on+0xd/0x10
> [   37.107833]  do_signal+0x37/0x6b0
> [   37.109167]  ? trace_hardirqs_on_caller+0xf5/0x190
> [   37.111277]  ? __audit_syscall_exit+0x220/0x2c0
> [   37.113271]  ? rcu_read_lock_sched_held+0x4a/0x80
> [   37.115305]  ? kfree+0x284/0x2e0
> [   37.116614]  ? __audit_syscall_exit+0x220/0x2c0
> [   37.118438]  exit_to_usermode_loop+0x69/0xa0
> [   37.120508]  do_syscall_64+0x167/0x1c0
> [   37.122405]  entry_SYSCALL64_slow_path+0x25/0x25
> [   37.124438] RIP: 0033:0x7fab9e5eae2d
> [   37.126457] RSP: 002b:00007fab97ffed20 EFLAGS: 00000293 ORIG_RAX: 0000000000000007
> [   37.130273] RAX: fffffffffffffdfc RBX: 0000556a49e04540 RCX: 00007fab9e5eae2d
> [   37.133741] RDX: 00000000ffffffff RSI: 0000000000000002 RDI: 00007fab900010c0
> [   37.137124] RBP: 0000000000000002 R08: 0000000000000002 R09: 0000000000000000
> [   37.140547] R10: 0000000000000001 R11: 0000000000000293 R12: 00007fab900010c0
> [   37.143980] R13: 00000000ffffffff R14: 00007fab9ed318b0 R15: 0000000000000002
> [   37.147453] Disabling lock debugging due to kernel taint
> [   37.150240] page:ffffc0ce447c0000 count:0 mapcount:-1 mapping:          (null) index:0x7fab97e00 compound_mapcount: 0
> [   37.156008] flags: 0x2fffff80048008(uptodate|head|swapbacked)
> [   37.158928] raw: 002fffff80048008 0000000000000000 00000007fab97e00 00000000fffffffe
> [   37.163068] raw: ffffc0ce447c0020 ffffc0ce447c0020 0000000000000000 0000000000000000
> [   37.167455] page dumped because: VM_BUG_ON_PAGE(page_mapcount(page) < 0)
> [   37.171391] ------------[ cut here ]------------
> [   37.174013] kernel BUG at mm/huge_memory.c:1646!
> [   37.176439] invalid opcode: 0000 [#1] SMP DEBUG_PAGEALLOC
> [   37.179034] Modules linked in: nf_conntrack_netbios_ns nf_conntrack_broadcast ip6t_rpfilter ipt_REJECT nf_reject_ipv4 ip6t_REJECT nf_reject_ipv6 xt_conntrack ip_set nfnetlink ebtable_nat ebtable_broute bridge stp llc ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_raw iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_raw ebtable_filter ebtables ip6table_filter ip6_tables iptable_filter coretemp ppdev vmw_balloon pcspkr sg parport_pc vmw_vmci i2c_piix4 parport shpchp ip_tables xfs libcrc32c sr_mod cdrom ata_generic sd_mod pata_acpi vmwgfx mptspi serio_raw drm_kms_helper syscopyarea sysfillrect scsi_transport_spi sysimgblt fb_sys_fops ttm ahci libahci mptscsih e1000 ata_piix drm i2c_core libata mptbase
> [   37.211562] CPU: 2 PID: 618 Comm: gdbus Tainted: G    B           4.12.0-rc6-next-20170620 #105
> [   37.215856] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/31/2013
> [   37.220759] task: ffff8d10eded4a40 task.stack: ffff9ab782264000
> [   37.223678] RIP: 0010:zap_huge_pmd+0x28c/0x2a0
> [   37.226100] RSP: 0018:ffff9ab782267a30 EFLAGS: 00010246
> [   37.228761] RAX: 000000000000003c RBX: ffffc0ce447c0000 RCX: 0000000000000000
> [   37.232238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8d10f33ce368
> [   37.235620] RBP: ffff9ab782267a60 R08: 0000000000000000 R09: 0000000000000001
> [   37.239378] R10: ffff9ab782267968 R11: 0000000000000000 R12: ffff8d10ecb934a0
> [   37.242843] R13: ffff8d10eb9d75f8 R14: ffff9ab782267bd8 R15: 00003fffffe00000
> [   37.246524] FS:  00007fab97fff700(0000) GS:ffff8d10f3200000(0000) knlGS:0000000000000000
> [   37.250734] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [   37.253589] CR2: 00007fd4a29f7000 CR3: 000000012db6b000 CR4: 00000000001406e0
> [   37.257211] Call Trace:
> [   37.258811]  unmap_page_range+0x8d7/0x970
> [   37.261008]  unmap_single_vma+0x59/0xe0
> [   37.263238]  ? __slab_free+0xa4/0x280
> [   37.265304]  unmap_vmas+0x37/0x50
> [   37.267229]  exit_mmap+0x97/0x150
> [   37.269150]  mmput+0x71/0x160
> [   37.270956]  do_exit+0x2cf/0xda0
> [   37.273155]  ? get_signal+0x3a4/0x910
> [   37.275229]  do_group_exit+0x50/0xd0
> [   37.277311]  get_signal+0x2e4/0x910
> [   37.279304]  ? trace_hardirqs_on+0xd/0x10
> [   37.281541]  do_signal+0x37/0x6b0
> [   37.283506]  ? trace_hardirqs_on_caller+0xf5/0x190
> [   37.286058]  ? __audit_syscall_exit+0x220/0x2c0
> [   37.288678]  ? rcu_read_lock_sched_held+0x4a/0x80
> [   37.291116]  ? kfree+0x284/0x2e0
> [   37.292993]  ? __audit_syscall_exit+0x220/0x2c0
> [   37.295396]  exit_to_usermode_loop+0x69/0xa0
> [   37.297784]  do_syscall_64+0x167/0x1c0
> [   37.299854]  entry_SYSCALL64_slow_path+0x25/0x25
> [   37.302298] RIP: 0033:0x7fab9e5eae2d
> [   37.304499] RSP: 002b:00007fab97ffed20 EFLAGS: 00000293 ORIG_RAX: 0000000000000007
> [   37.308313] RAX: fffffffffffffdfc RBX: 0000556a49e04540 RCX: 00007fab9e5eae2d
> [   37.311755] RDX: 00000000ffffffff RSI: 0000000000000002 RDI: 00007fab900010c0
> [   37.315123] RBP: 0000000000000002 R08: 0000000000000002 R09: 0000000000000000
> [   37.318786] R10: 0000000000000001 R11: 0000000000000293 R12: 00007fab900010c0
> [   37.322110] R13: 00000000ffffffff R14: 00007fab9ed318b0 R15: 0000000000000002
> [   37.325448] Code: 00 00 00 fe ff ff e9 cd fe ff ff 48 c7 c6 a0 14 c4 90 48 89 df e8 65 2f fb ff 0f 0b 48 c7 c6 60 53 c4 90 48 89 df e8 54 2f fb ff <0f> 0b 48 c7 c6 98 05 c4 90 48 89 df e8 43 2f fb ff 0f 0b 90 0f
> [   37.334298] RIP: zap_huge_pmd+0x28c/0x2a0 RSP: ffff9ab782267a30
> [   37.337276] ---[ end trace 35bcf1187115bba1 ]---
> [   37.339693] Fixing recursive fault but reboot is needed!
> [   37.342383] BUG: scheduling while atomic: gdbus/618/0x00000002
> [   37.346255] INFO: lockdep is turned off.
> [   37.348380] Modules linked in: nf_conntrack_netbios_ns nf_conntrack_broadcast ip6t_rpfilter ipt_REJECT nf_reject_ipv4 ip6t_REJECT nf_reject_ipv6 xt_conntrack ip_set nfnetlink ebtable_nat ebtable_broute bridge stp llc ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_raw iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_raw ebtable_filter ebtables ip6table_filter ip6_tables iptable_filter coretemp ppdev vmw_balloon pcspkr sg parport_pc vmw_vmci i2c_piix4 parport shpchp ip_tables xfs libcrc32c sr_mod cdrom ata_generic sd_mod pata_acpi vmwgfx mptspi serio_raw drm_kms_helper syscopyarea sysfillrect scsi_transport_spi sysimgblt fb_sys_fops ttm ahci libahci mptscsih e1000 ata_piix drm i2c_core libata mptbase
> [   37.380628] CPU: 2 PID: 618 Comm: gdbus Tainted: G    B D         4.12.0-rc6-next-20170620 #105
> [   37.385197] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/31/2013
> [   37.389953] Call Trace:
> [   37.391518]  dump_stack+0x86/0xcf
> [   37.393557]  __schedule_bug+0x65/0x90
> [   37.396119]  __schedule+0x79b/0x990
> [   37.398128]  ? vprintk_func+0x27/0x60
> [   37.400139]  schedule+0x3d/0x90
> [   37.401956]  do_exit+0xa57/0xda0
> [   37.404127]  rewind_stack_do_exit+0x17/0x20
> [   37.406368] RIP: 0033:0x7fab9e5eae2d
> [   37.408375] RSP: 002b:00007fab97ffed20 EFLAGS: 00000293 ORIG_RAX: 0000000000000007
> [   37.411956] RAX: fffffffffffffdfc RBX: 0000556a49e04540 RCX: 00007fab9e5eae2d
> [   37.415603] RDX: 00000000ffffffff RSI: 0000000000000002 RDI: 00007fab900010c0
> [   37.419076] RBP: 0000000000000002 R08: 0000000000000002 R09: 0000000000000000
> [   37.422621] R10: 0000000000000001 R11: 0000000000000293 R12: 00007fab900010c0
> [   37.426042] R13: 00000000ffffffff R14: 00007fab9ed318b0 R15: 0000000000000002
> 
> 
> 
> [  OK  ] Stopped firewalld - dynamic firewall daemon.
> [  113.764020] BUG: Bad page state in process runaway-killer-  pfn:121801
>          Stopping D-Bus System Message Bus...
> [  113.769256] page:ffffc0ce44860040 count:0 mapcount:1 mapping:dead000000000000 index:0x7f0004c01 compound_mapcount: 1
> [  113.769260] flags: 0x2fffff80000000()
> [  113.769264] raw: 002fffff80000000 dead000000000000 0000000000000000 00000000ffffffff
> [  113.769266] raw: ffffc0ce44860001 0000000900000003 0000000000000000 0000000000000000
> [  113.769267] page dumped because: nonzero compound_mapcount
> [  113.769267] Modules linked in: ip_set nfnetlink bridge stp llc coretemp ppdev vmw_balloon pcspkr sg parport_pc vmw_vmci i2c_piix4 parport shpchp xfs libcrc32c sr_mod cdrom ata_generic sd_mod pata_acpi vmwgfx mptspi serio_raw drm_kms_helper syscopyarea sysfillrect scsi_transport_spi sysimgblt fb_sys_fops ttm ahci libahci mptscsih e1000 ata_piix drm i2c_core libata mptbase [last unloaded: ip_tables]
> [  113.769316] CPU: 3 PID: 584 Comm: runaway-killer- Tainted: G    B D W       4.12.0-rc6-next-20170620 #105
> [  113.769318] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/31/2013
> [  113.769319] Call Trace:
> [  113.769326]  dump_stack+0x86/0xcf
> [  113.769331]  bad_page+0xc1/0x120
> [  113.769335]  __free_pages_ok+0x40c/0x5f0
> [  113.769340]  free_compound_page+0x1b/0x20
> [  113.769343]  free_transhuge_page+0xa4/0xb0
> [  113.769348]  ? get_futex_key+0x122/0x730
> [  113.769351]  __put_compound_page+0x30/0x50
> [  113.769353]  __put_page+0x22/0x40
> [  113.769356]  get_futex_key+0x2fa/0x730
> [  113.769362]  futex_wake+0x6a/0x170
> [  113.769365]  ? trace_hardirqs_on+0xd/0x10
> [  113.769371]  do_futex+0x2a8/0x560
> [  113.769373]  ? lock_acquire+0xfb/0x200
> [  113.769378]  ? __might_fault+0x3e/0x90
> [  113.769385]  SyS_futex+0x83/0x190
> [  113.769394]  mm_release+0x113/0x160
> [  113.769398]  do_exit+0x150/0xda0
> [  113.769402]  ? get_signal+0xc7/0x910
> [  113.769406]  do_group_exit+0x50/0xd0
> [  113.769411]  get_signal+0x2e4/0x910
> [  113.769420]  do_signal+0x37/0x6b0
> [  113.769424]  ? trace_hardirqs_on_caller+0xf5/0x190
> [  113.769426]  ? trace_hardirqs_on+0xd/0x10
> [  113.769431]  ? getnstimeofday64+0xe/0x20
> [  113.769433]  ? kfree+0x1fc/0x2e0
> [  113.769438]  ? __audit_syscall_exit+0x220/0x2c0
> [  113.769443]  exit_to_usermode_loop+0x69/0xa0
> [  113.769446]  do_syscall_64+0x167/0x1c0
> [  113.769451]  entry_SYSCALL64_slow_path+0x25/0x25
> [  113.769454] RIP: 0033:0x7f000a807e2d
> [  113.769455] RSP: 002b:00007f0004dfed10 EFLAGS: 00000293 ORIG_RAX: 0000000000000007
> [  113.769458] RAX: fffffffffffffdfc RBX: 00007efff40008c0 RCX: 00007f000a807e2d
> [  113.769459] RDX: 00000000ffffffff RSI: 0000000000000001 RDI: 00007efff4001220
> [  113.769461] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
> [  113.769462] R10: 0000000000000001 R11: 0000000000000293 R12: 00007efff4001220
> [  113.769463] R13: 00000000ffffffff R14: 00007f000b55f8b0 R15: 0000000000000001
> [  113.769591] page:ffffc0ce44860000 count:0 mapcount:-1 mapping:          (null) index:0x7f0004c00 compound_mapcount: 0
> [  113.769595] flags: 0x2fffff80048008(uptodate|head|swapbacked)
> [  113.769598] raw: 002fffff80048008 0000000000000000 00000007f0004c00 00000000fffffffe
> [  113.769599] raw: ffffc0ce44860020 ffffc0ce44860020 0000000000000000 0000000000000000
> [  113.769600] page dumped because: VM_BUG_ON_PAGE(page_mapcount(page) < 0)
> [  113.769614] ------------[ cut here ]------------
> [  113.769615] kernel BUG at mm/huge_memory.c:1646!
> [  113.769618] invalid opcode: 0000 [#2] SMP DEBUG_PAGEALLOC
> [  113.769620] Modules linked in: ip_set nfnetlink bridge stp llc coretemp ppdev vmw_balloon pcspkr sg parport_pc vmw_vmci i2c_piix4 parport shpchp xfs libcrc32c sr_mod cdrom ata_generic sd_mod pata_acpi vmwgfx mptspi serio_raw drm_kms_helper syscopyarea sysfillrect scsi_transport_spi sysimgblt fb_sys_fops ttm ahci libahci mptscsih e1000 ata_piix drm i2c_core libata mptbase [last unloaded: ip_tables]
> [  113.769658] CPU: 3 PID: 584 Comm: runaway-killer- Tainted: G    B D W       4.12.0-rc6-next-20170620 #105
> [  113.769659] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/31/2013
> [  113.769660] task: ffff8d10e5ec4a40 task.stack: ffff9ab783864000
> [  113.769663] RIP: 0010:zap_huge_pmd+0x28c/0x2a0
> [  113.769665] RSP: 0018:ffff9ab783867a30 EFLAGS: 00010246
> [  113.769667] RAX: 000000000000003c RBX: ffffc0ce44860000 RCX: 0000000000000000
> [  113.769668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000292
> [  113.769669] RBP: ffff9ab783867a60 R08: 0000000000000000 R09: 0000000000000001
> [  113.769670] R10: ffff9ab783867968 R11: 0000000000000000 R12: ffff8d10ec3d4cc8
> [  113.769671] R13: ffff8d10e96aa130 R14: ffff9ab783867bd8 R15: 00003fffffe00000
> [  113.769673] FS:  0000000000000000(0000) GS:ffff8d10f3400000(0000) knlGS:0000000000000000
> [  113.769674] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [  113.769676] CR2: 00007fcaf3489298 CR3: 000000012dbde000 CR4: 00000000001406e0
> [  113.769718] Call Trace:
> [  113.769724]  unmap_page_range+0x8d7/0x970
> [  113.769735]  unmap_single_vma+0x59/0xe0
> [  113.769738]  ? __slab_free+0xa4/0x280
> [  113.769742]  unmap_vmas+0x37/0x50
> [  113.769746]  exit_mmap+0x97/0x150
> [  113.769756]  mmput+0x71/0x160
> [  113.769760]  do_exit+0x2cf/0xda0
> [  113.769764]  ? get_signal+0xc7/0x910
> [  113.769769]  do_group_exit+0x50/0xd0
> [  113.769773]  get_signal+0x2e4/0x910
> [  113.769781]  do_signal+0x37/0x6b0
> [  113.769785]  ? trace_hardirqs_on_caller+0xf5/0x190
> [  113.769787]  ? trace_hardirqs_on+0xd/0x10
> [  113.769792]  ? getnstimeofday64+0xe/0x20
> [  113.769794]  ? kfree+0x1fc/0x2e0
> [  113.769799]  ? __audit_syscall_exit+0x220/0x2c0
> [  113.769805]  exit_to_usermode_loop+0x69/0xa0
> [  113.769809]  do_syscall_64+0x167/0x1c0
> [  113.769813]  entry_SYSCALL64_slow_path+0x25/0x25
> [  113.769815] RIP: 0033:0x7f000a807e2d
> [  113.769816] RSP: 002b:00007f0004dfed10 EFLAGS: 00000293 ORIG_RAX: 0000000000000007
> [  113.769818] RAX: fffffffffffffdfc RBX: 00007efff40008c0 RCX: 00007f000a807e2d
> [  113.769819] RDX: 00000000ffffffff RSI: 0000000000000001 RDI: 00007efff4001220
> [  113.769820] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
> [  113.769821] R10: 0000000000000001 R11: 0000000000000293 R12: 00007efff4001220
> [  113.769822] R13: 00000000ffffffff R14: 00007f000b55f8b0 R15: 0000000000000001
> [  113.769829] Code: 00 00 00 fe ff ff e9 cd fe ff ff 48 c7 c6 a0 14 c4 90 48 89 df e8 65 2f fb ff 0f 0b 48 c7 c6 60 53 c4 90 48 89 df e8 54 2f fb ff <0f> 0b 48 c7 c6 98 05 c4 90 48 89 df e8 43 2f fb ff 0f 0b 90 0f
> [  113.769877] RIP: zap_huge_pmd+0x28c/0x2a0 RSP: ffff9ab783867a30
> [  113.769880] ---[ end trace 35bcf1187115bba2 ]---
> [  113.769882] Fixing recursive fault but reboot is needed!
> [  113.769883] BUG: scheduling while atomic: runaway-killer-/584/0x00000002
> [  113.769884] INFO: lockdep is turned off.
> [  113.769885] Modules linked in: ip_set nfnetlink bridge stp llc coretemp ppdev vmw_balloon pcspkr sg parport_pc vmw_vmci i2c_piix4 parport shpchp xfs libcrc32c sr_mod cdrom ata_generic sd_mod pata_acpi vmwgfx mptspi serio_raw drm_kms_helper syscopyarea sysfillrect scsi_transport_spi sysimgblt fb_sys_fops ttm ahci libahci mptscsih e1000 ata_piix drm i2c_core libata mptbase [last unloaded: ip_tables]
> [  113.769916] CPU: 3 PID: 584 Comm: runaway-killer- Tainted: G    B D W       4.12.0-rc6-next-20170620 #105
> [  113.769918] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 07/31/2013
> [  113.769918] Call Trace:
> [  113.769922]  dump_stack+0x86/0xcf
> [  113.769926]  __schedule_bug+0x65/0x90
> [  113.769929]  __schedule+0x79b/0x990
> [  113.769932]  ? vprintk_func+0x27/0x60
> [  113.769938]  schedule+0x3d/0x90
> [  113.769942]  do_exit+0xa57/0xda0
> [  113.769948]  rewind_stack_do_exit+0x17/0x20
> [  113.769949] RIP: 0033:0x7f000a807e2d
> [  113.769950] RSP: 002b:00007f0004dfed10 EFLAGS: 00000293 ORIG_RAX: 0000000000000007
> [  113.769952] RAX: fffffffffffffdfc RBX: 00007efff40008c0 RCX: 00007f000a807e2d
> [  113.769953] RDX: 00000000ffffffff RSI: 0000000000000001 RDI: 00007efff4001220
> [  113.769954] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
> [  113.769955] R10: 0000000000000001 R11: 0000000000000293 R12: 00007efff4001220
> [  113.769956] R13: 00000000ffffffff R14: 00007f000b55f8b0 R15: 0000000000000001
>          Stopping Authorization Manager...
> 

-- 
 Kirill A. Shutemov

--
To unsubscribe, send a message with 'unsubscribe linux-mm' in
the body to majordomo@kvack.org.  For more info on Linux MM,
see: http://www.linux-mm.org/ .
Don't email: <a href=mailto:"dont@kvack.org"> email@kvack.org </a>

^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: Bad page state freeing hugepages
  2017-06-22 10:22 ` Tetsuo Handa
  2017-06-22 16:53   ` Kirill A. Shutemov
@ 2017-06-27 16:42   ` Kirill A. Shutemov
  1 sibling, 0 replies; 4+ messages in thread
From: Kirill A. Shutemov @ 2017-06-27 16:42 UTC (permalink / raw)
  To: Tetsuo Handa
  Cc: linux-mm, Levin, Alexander (Sasha Levin),
	hughd, mhocko, kirill.shutemov, linux-kernel

On Thu, Jun 22, 2017 at 07:22:09PM +0900, Tetsuo Handa wrote:
> FYI, I'm hitting this problem by doing just boot or shutdown sequence,
> and this problem is remaining as of next-20170622.

This should help:

http://lkml.kernel.org/r/20170627163734.6js4jkwkwlz6xwir@black.fi.intel.com

-- 
 Kirill A. Shutemov

--
To unsubscribe, send a message with 'unsubscribe linux-mm' in
the body to majordomo@kvack.org.  For more info on Linux MM,
see: http://www.linux-mm.org/ .
Don't email: <a href=mailto:"dont@kvack.org"> email@kvack.org </a>

^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2017-06-27 16:42 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2017-06-15  0:56 Bad page state freeing hugepages Levin, Alexander (Sasha Levin)
2017-06-22 10:22 ` Tetsuo Handa
2017-06-22 16:53   ` Kirill A. Shutemov
2017-06-27 16:42   ` Kirill A. Shutemov

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).