linux-mm.kvack.org archive mirror
 help / color / mirror / Atom feed
From: Bert Karwatzki <spasswolf@web.de>
To: "Liam R . Howlett" <Liam.Howlett@oracle.com>
Cc: Bert Karwatzki <spasswolf@web.de>,
	Andrew Morton <akpm@linux-foundation.org>,
	linux-mm@kvack.org
Subject: Re: [PATCH v2 00/15] Avoid MAP_FIXED gap exposure
Date: Thu,  4 Jul 2024 23:07:30 +0200	[thread overview]
Message-ID: <20240704210732.595060-1-spasswolf@web.de> (raw)
In-Reply-To: 2czayx4kdyb7sc2je55l6mlkf5fj7z72n5xqkkbkqfhkdu375z@odsbkqhqpne5

I tested the v2 patch on top of linux-next-20240703 with stress-ng --vm-segv 16 and
got more than a million "Bad rss-counter state" errors plus an invalid opcode error!
I'm rebooting now to test v3.

Bert Karwatzki


[ T1359] BUG: Bad rss-counter state mm:00000000e5421690 type:MM_ANONPAGES val:370
[...] Here are more than 10^6 (~2^20) lines of "Bad rss-counter-state"
[ T1359] BUG: Bad rss-counter state mm:00000000e5421690 type:MM_SHMEMPAGES val:27
[T24203] page: refcount:542376 mapcount:542374 mapping:00000000ba179a51 index:0x0 pfn:0x29594e
[T24203] memcg:ffff9bc0424b6800
[T24203] aops:shmem_aops ino:a678
[T24203] flags: 0x400000000004012d(locked|referenced|uptodate|lru|active|swapbacked|zone=2)
[T24203] raw: 400000000004012d ffffd864c574a908 ffffd864c776fa48 ffff9bc1a0681040
[T24203] raw: 0000000000000000 0000000000000000 000846a8000846a5 ffff9bc0424b6800
[T24203] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio))
[T24203] ------------[ cut here ]------------
[T24203] kernel BUG at mm/filemap.c:162!
[T24203] Oops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI
[T24203] CPU: 1 UID: 0 PID: 24203 Comm: stress-ng Not tainted 6.10.0-rc6-next-20240703-00016-g09a756327684 #1417
[T24203] Hardware name: Micro-Star International Co., Ltd. Alpha 15 B5EEK/MS-158L, BIOS E158LAMS.107 11/10/2021
[T24203] RIP: 0010:filemap_unaccount_folio+0xcf/0x170
[T24203] Code: 00 00 48 8b 06 a8 40 0f 84 a3 00 00 00 8b 43 50 83 c0 01 85 c0 0f 8e 66 ff ff ff 48 c7 c6 48 e4 aa bc 48 89 df e8 31 32 03 00 <0f> 0b 5b 5d 41 5c e9 71 7f 92 00 44 89 e2 be 17 00 00 00 48 89 df
[T24203] RSP: 0018:ffffb1a4e01aba88 EFLAGS: 00010046
[T24203] RAX: 0000000000000039 RBX: ffffd864ca565380 RCX: 0000000000000027
[T24203] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff9bceee657780
[T24203] RBP: ffff9bc1a0681040 R08: 0000000000000000 R09: 0000000000000003
[T24203] R10: ffffb1a4e01ab940 R11: ffffffffbcc82940 R12: ffff9bc1a0681040
[T24203] R13: 0000000000000000 R14: ffff9bc1a0681048 R15: ffffd864ca565380
[T24203] FS:  00007f944cb0df40(0000) GS:ffff9bceee640000(0000) knlGS:0000000000000000
[T24203] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[T24203] CR2: 00007ffe0ec9f948 CR3: 0000000150be4000 CR4: 0000000000750ef0
[T24203] PKRU: 55555554
[T24203] Call Trace:
[T24203]  <TASK>
[T24203]  ? die+0x31/0x80
[T24203]  ? do_trap+0xf1/0x100
[T24203]  ? filemap_unaccount_folio+0xcf/0x170
[T24203]  ? do_error_trap+0x60/0x80
[T24203]  ? filemap_unaccount_folio+0xcf/0x170
[T24203]  ? exc_invalid_op+0x4d/0x70
[T24203]  ? filemap_unaccount_folio+0xcf/0x170
[T24203]  ? asm_exc_invalid_op+0x1a/0x20
[T24203]  ? filemap_unaccount_folio+0xcf/0x170
[T24203]  ? filemap_unaccount_folio+0xcf/0x170
[T24203]  ? __filemap_remove_folio+0x33/0x1a0
[T24203]  ? xas_find+0x159/0x1c0
[T24203]  ? srso_alias_return_thunk+0x5/0xfbef5
[T24203]  ? find_lock_entries+0x229/0x330
[T24203]  ? srso_alias_return_thunk+0x5/0xfbef5
[T24203]  ? unmap_mapping_folio+0x75/0x130
[T24203]  ? filemap_remove_folio+0x3c/0xa0
[T24203]  ? truncate_inode_folio+0x1e/0x30
[T24203]  ? shmem_undo_range+0x15c/0x6f0
[T24203]  ? bio_integrity_unpin_bvec+0xf/0x60
[T24203]  ? shmem_evict_inode+0x109/0x260
[T24203]  ? swake_up_locked+0x50/0x50
[T24203]  ? evict+0xbf/0x1c0
[T24203]  ? __dentry_kill+0x6c/0x170
[T24203]  ? dput+0xe6/0x1b0
[T24203]  ? __fput+0x13c/0x2c0
[T24203]  ? task_work_run+0x57/0x80
[T24203]  ? syscall_exit_to_user_mode+0x196/0x1a0
[T24203]  ? do_syscall_64+0x6b/0x170
[T24203]  ? entry_SYSCALL_64_after_hwframe+0x55/0x5d
[T24203]  </TASK>
[T24203] Modules linked in: ccm snd_seq_dummy snd_hrtimer snd_seq_midi snd_seq_midi_event snd_rawmidi snd_seq snd_seq_device rfcomm cmac bnep nls_ascii nls_cp437 vfat fat snd_ctl_led snd_hda_codec_realtek snd_hda_codec_generic snd_hda_codec_hdmi snd_hda_scodec_component btusb btrtl btintel snd_hda_intel btbcm snd_intel_dspcfg btmtk snd_hda_codec snd_soc_dmic snd_acp3x_rn uvcvideo snd_acp3x_pdm_dma bluetooth amd_atl snd_hwdep snd_soc_core videobuf2_vmalloc snd_hda_core uvc videobuf2_memops videobuf2_v4l2 snd_pcm_oss videodev snd_mixer_oss snd_pcm snd_rn_pci_acp3x snd_acp_config videobuf2_common snd_timer msi_wmi snd_soc_acpi ecdh_generic ecc mc sparse_keymap snd edac_mce_amd wmi_bmof ccp soundcore snd_pci_acp3x k10temp ac battery button hid_sensor_gyro_3d hid_sensor_als hid_sensor_magn_3d hid_sensor_accel_3d hid_sensor_prox joydev hid_sensor_trigger industrialio_triggered_buffer kfifo_buf industrialio amd_pmc hid_sensor_iio_common evdev hid_multitouch serio_raw mt7921e mt7921_common mt792x_lib mt76_connac_lib mt76
[T24203]  mac80211 libarc4 cfg80211 rfkill msr fuse nvme_fabrics efi_pstore configfs efivarfs autofs4 ext4 crc32c_generic mbcache jbd2 usbhid amdgpu i2c_algo_bit drm_ttm_helper ttm xhci_pci drm_exec drm_suballoc_helper xhci_hcd amdxcp drm_buddy hid_sensor_hub usbcore gpu_sched nvme mfd_core hid_generic crc32c_intel psmouse amd_sfh i2c_piix4 drm_display_helper usb_common nvme_core r8169 crc16 i2c_hid_acpi i2c_hid hid i2c_designware_platform i2c_designware_core
[T24203] ---[ end trace 0000000000000000 ]---
[T24203] RIP: 0010:filemap_unaccount_folio+0xcf/0x170
[T24203] Code: 00 00 48 8b 06 a8 40 0f 84 a3 00 00 00 8b 43 50 83 c0 01 85 c0 0f 8e 66 ff ff ff 48 c7 c6 48 e4 aa bc 48 89 df e8 31 32 03 00 <0f> 0b 5b 5d 41 5c e9 71 7f 92 00 44 89 e2 be 17 00 00 00 48 89 df
[T24203] RSP: 0018:ffffb1a4e01aba88 EFLAGS: 00010046
[T24203] RAX: 0000000000000039 RBX: ffffd864ca565380 RCX: 0000000000000027
[T24203] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff9bceee657780
[T24203] RBP: ffff9bc1a0681040 R08: 0000000000000000 R09: 0000000000000003
[T24203] R10: ffffb1a4e01ab940 R11: ffffffffbcc82940 R12: ffff9bc1a0681040
[T24203] R13: 0000000000000000 R14: ffff9bc1a0681048 R15: ffffd864ca565380
[T24203] FS:  00007f944cb0df40(0000) GS:ffff9bceee640000(0000) knlGS:0000000000000000
[T24203] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[T24203] CR2: 00007ffe0ec9f948 CR3: 0000000150be4000 CR4: 0000000000750ef0
[T24203] PKRU: 55555554



             reply	other threads:[~2024-07-04 21:07 UTC|newest]

Thread overview: 13+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2024-07-04 21:07 Bert Karwatzki [this message]
  -- strict thread matches above, loose matches on Subject: below --
2024-07-04 21:50 Bert Karwatzki
2024-07-04 21:15 Bert Karwatzki
2024-07-03 14:30 Bert Karwatzki
2024-07-04 18:31 ` Liam R. Howlett
2024-07-03 10:13 Bert Karwatzki
2024-07-03 13:53 ` Liam R. Howlett
2024-06-27  9:31 Bert Karwatzki
2024-06-25 19:11 Liam R. Howlett
2024-06-26 20:58 ` Andrew Morton
2024-06-27  1:15   ` Liam R. Howlett
2024-06-27  1:28     ` Andrew Morton
2024-06-27 13:31       ` Liam R. Howlett

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20240704210732.595060-1-spasswolf@web.de \
    --to=spasswolf@web.de \
    --cc=Liam.Howlett@oracle.com \
    --cc=akpm@linux-foundation.org \
    --cc=linux-mm@kvack.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox