From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from d03relay02.boulder.ibm.com (d03relay02.boulder.ibm.com [9.17.195.227]) by e32.co.us.ibm.com (8.12.11.20060308/8.13.8) with ESMTP id l3OMONIv007059 for ; Tue, 24 Apr 2007 18:24:23 -0400 Received: from d03av02.boulder.ibm.com (d03av02.boulder.ibm.com [9.17.195.168]) by d03relay02.boulder.ibm.com (8.13.8/8.13.8/NCO v8.3) with ESMTP id l3OMRGrG180180 for ; Tue, 24 Apr 2007 16:27:16 -0600 Received: from d03av02.boulder.ibm.com (loopback [127.0.0.1]) by d03av02.boulder.ibm.com (8.12.11.20060308/8.13.3) with ESMTP id l3OMRG0I014217 for ; Tue, 24 Apr 2007 16:27:16 -0600 Subject: Re: 2.6.21-rc7-mm1 on test.kernel.org From: Badari Pulavarty In-Reply-To: <20070424130601.4ab89d54.akpm@linux-foundation.org> References: <20070424130601.4ab89d54.akpm@linux-foundation.org> Content-Type: text/plain Date: Tue, 24 Apr 2007 15:27:41 -0700 Message-Id: <1177453661.1281.1.camel@dyn9047017100.beaverton.ibm.com> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Sender: owner-linux-mm@kvack.org Return-Path: To: Andrew Morton Cc: linux-mm , Andy Whitcroft , Christoph Lameter List-ID: On Tue, 2007-04-24 at 13:06 -0700, Andrew Morton wrote: > An amd64 machine is crashing badly. > > http://test.kernel.org/abat/84767/debug/console.log > > VFS: Mounted root (ext3 filesystem) readonly. > Freeing unused kernel memory: 308k freed > INIT: version 2.86 booting > Bad page state in process 'init' > page:ffff81007e492628 flags:0x0100000000000000 mapping:0000000000000000 mapcount:0 count:1 > Trying to fix it up, but a reboot is needed > Backtrace: > > Call Trace: > [] bad_page+0x74/0x10d > [] free_hot_cold_page+0x8d/0x172 > [] free_hot_page+0xb/0xd > [] free_pgd_range+0x274/0x467 > [] free_pgtables+0x80/0x8f > [] exit_mmap+0x90/0x11a > [] mmput+0x29/0x98 > Bad page state in process 'hotplug' > page:ffff81017e458bb0 flags:0x0a00000000000000 mapping:0000000000000000 mapcount:0 count:1 > Trying to fix it up, but a reboot is needed > Backtrace: > > Call Trace: > [] bad_page+0x74/0x10d > [] free_hot_cold_page+0x8d/0x172 > [] free_hot_page+0xb/0xd > [] __mmdrop+0x68/0xa8 > [] schedule_tail+0x48/0x86 > [] ret_from_fork+0xc/0x25 > > > So free_pgd_range() is freeing a refcount=1 page. Can anyone see what > might be causing this? The quicklist code impacts this area more than > anything else.. > > Naturally, I can't reproduce it (no amd64 boxen). A bisection search would > be wonderful. I am able to reproduce this on my amd64 box also, I will take a look .. but feel free to beat me to it :) Bad page state in process 'boot' page:ffff8101df9550a0 flags:0x0e00000000000000 mapping:0000000000000000 mapcount:0 count:1 Trying to fix it up, but a reboot is needed Backtrace: Call Trace: [] filemap_fault+0x1ba/0x420 [] bad_page+0x70/0x120 [] free_hot_cold_page+0x1b6/0x1d0 [] free_hot_page+0xb/0x10 [] free_pgd_range+0x4dd/0x4f0 [] free_pgtables+0xa9/0xe0 [] exit_mmap+0x96/0x130 [] mmput+0x44/0xc0 [] exit_mm+0x90/0x100 [] do_exit+0x151/0x970 [] do_group_exit+0x37/0x90 [] sys_exit_group+0x12/0x20 [] system_call+0x7e/0x83 -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@kvack.org. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: email@kvack.org