search for: mapcount

...m uname -a: Linux lh10 2.6.9-78.0.13.ELsmp #1 SMP Wed Jan 14 15:55:36 EST 2009 x86_64 x86_64 x86_64 GNU/Linux Mar 22 22:02:59 lh10 kernel: Bad page state at free_hot_cold_page (in process 'star', page 00000102382b1ec8) Mar 22 22:02:59 lh10 kernel: flags:0x0100000c mapping:00000102146a4240 mapcount:2 count:0 Mar 22 22:02:59 lh10 kernel: Backtrace: Mar 22 22:02:59 lh10 kernel: Mar 22 22:02:59 lh10 kernel: Call Trace:<ffffffff8015f0cf>{bad_page+112} <ffffffff8015f7b1>{free_hot_cold_page+130} Mar 22 22:02:59 lh10 kernel: <ffffffffa00d17b8>{:st:sgl_unmap_user_pages+67}...

On Thu, Jun 16, 2016 at 02:22:09PM +0900, Sergey Senozhatsky wrote: > On (06/16/16 13:47), Minchan Kim wrote: > [..] > > > this is what I'm getting with the [zsmalloc: keep first object offset in struct page] > > > applied: "count:0 mapcount:-127". which may be not related to zsmalloc at this point. > > > > > > kernel: BUG: Bad page state in process khugepaged pfn:101db8 > > > kernel: page:ffffea0004076e00 count:0 mapcount:-127 mapping: (null) index:0x1 > > > > Hm, it seems double...

On Thu, Jun 16, 2016 at 02:22:09PM +0900, Sergey Senozhatsky wrote: > On (06/16/16 13:47), Minchan Kim wrote: > [..] > > > this is what I'm getting with the [zsmalloc: keep first object offset in struct page] > > > applied: "count:0 mapcount:-127". which may be not related to zsmalloc at this point. > > > > > > kernel: BUG: Bad page state in process khugepaged pfn:101db8 > > > kernel: page:ffffea0004076e00 count:0 mapcount:-127 mapping: (null) index:0x1 > > > > Hm, it seems double...

...ndition here I think. > > > > I guess root cause is caused by get_first_obj_offset. > > sounds reasonable. > > > Please test with it. > > > this is what I'm getting with the [zsmalloc: keep first object offset in struct page] > applied: "count:0 mapcount:-127". which may be not related to zsmalloc at this point. > > kernel: BUG: Bad page state in process khugepaged pfn:101db8 > kernel: page:ffffea0004076e00 count:0 mapcount:-127 mapping: (null) index:0x1 Hm, it seems double free. It doen't happen if you disable zram?...

...ndition here I think. > > > > I guess root cause is caused by get_first_obj_offset. > > sounds reasonable. > > > Please test with it. > > > this is what I'm getting with the [zsmalloc: keep first object offset in struct page] > applied: "count:0 mapcount:-127". which may be not related to zsmalloc at this point. > > kernel: BUG: Bad page state in process khugepaged pfn:101db8 > kernel: page:ffffea0004076e00 count:0 mapcount:-127 mapping: (null) index:0x1 Hm, it seems double free. It doen't happen if you disable zram?...

These mappings are in fact special and require special handling in privcmd, which already exists. Failure to mark the PTE as special on arm64 causes all sorts of bad PTE fun. x86 already gets this correct. Signed-off-by: Ian Campbell <ian.campbell@citrix.com> Cc: Stefano Stabellini <stefano.stabellini@eu.citrix.com> Cc: xen-devel@lists.xenproject.org --- arch/arm/xen/enlighten.c |

On Thu, Jun 16, 2016 at 05:42:11PM +0900, Sergey Senozhatsky wrote: > On (06/16/16 15:47), Minchan Kim wrote: > > > [..] > > > > > this is what I'm getting with the [zsmalloc: keep first object offset in struct page] > > > > > applied: "count:0 mapcount:-127". which may be not related to zsmalloc at this point. > > > > > > > > > > kernel: BUG: Bad page state in process khugepaged pfn:101db8 > > > > > kernel: page:ffffea0004076e00 count:0 mapcount:-127 mapping: (null) index:0x1 > >...

On Thu, Jun 16, 2016 at 05:42:11PM +0900, Sergey Senozhatsky wrote: > On (06/16/16 15:47), Minchan Kim wrote: > > > [..] > > > > > this is what I'm getting with the [zsmalloc: keep first object offset in struct page] > > > > > applied: "count:0 mapcount:-127". which may be not related to zsmalloc at this point. > > > > > > > > > > kernel: BUG: Bad page state in process khugepaged pfn:101db8 > > > > > kernel: page:ffffea0004076e00 count:0 mapcount:-127 mapping: (null) index:0x1 > >...

On Thu, Jun 16, 2016 at 11:48:27AM +0900, Sergey Senozhatsky wrote: > Hi, > > On (06/16/16 08:12), Minchan Kim wrote: > > > [ 315.146533] kasan: CONFIG_KASAN_INLINE enabled > > > [ 315.146538] kasan: GPF could be caused by NULL-ptr deref or user memory access > > > [ 315.146546] general protection fault: 0000 [#1] PREEMPT SMP KASAN > > > [

On Thu, Jun 16, 2016 at 11:48:27AM +0900, Sergey Senozhatsky wrote: > Hi, > > On (06/16/16 08:12), Minchan Kim wrote: > > > [ 315.146533] kasan: CONFIG_KASAN_INLINE enabled > > > [ 315.146538] kasan: GPF could be caused by NULL-ptr deref or user memory access > > > [ 315.146546] general protection fault: 0000 [#1] PREEMPT SMP KASAN > > > [

...error in terminal: Message from syslogd@TheVoid at Sun May 7 02:40:26 2006 ... TheVoid kernel: Bad page state at free_hot_cold_page (in process 'GoogleEarth.exe', page c125be60) Message from syslogd@TheVoid at Sun May 7 02:40:26 2006 ... TheVoid kernel: flags:0x80000400 mapping:00000000 mapcount:0 count:0 Message from syslogd@TheVoid at Sun May 7 02:40:26 2006 ... TheVoid kernel: Backtrace: Message from syslogd@TheVoid at Sun May 7 02:40:26 2006 ... TheVoid kernel: Trying to fix it up, but a reboot is needed Message from syslogd@TheVoid at Sun May 7 02:40:26 2006 ... TheVoid kernel:...

On (06/16/16 13:47), Minchan Kim wrote: [..] > > this is what I'm getting with the [zsmalloc: keep first object offset in struct page] > > applied: "count:0 mapcount:-127". which may be not related to zsmalloc at this point. > > > > kernel: BUG: Bad page state in process khugepaged pfn:101db8 > > kernel: page:ffffea0004076e00 count:0 mapcount:-127 mapping: (null) index:0x1 > > Hm, it seems double free. > > It doen...

...hutdown mls'' the dom0 also goes down that i thought it might be related, I will see if not running gkrellmd in domU''s will help with this Message from syslogd@michiganlivestock.com at Fri Nov 11 17:25:02 2005 ... michiganlivestock.com kernel: flags:0x00000000 mapping:00000000 mapcount:0 count:0 Message from syslogd@michiganlivestock.com at Fri Nov 11 17:25:02 2005 ... michiganlivestock.com kernel: Bad page state at free_hot_cold_page (in process ''gkrellmd'', page c13431e0) Message from syslogd@michiganlivestock.com at Fri Nov 11 17:25:02 2005 ... michiganlives...

...sure, I can. will it help, tho? we have a race condition here I think. > > I guess root cause is caused by get_first_obj_offset. sounds reasonable. > Please test with it. this is what I'm getting with the [zsmalloc: keep first object offset in struct page] applied: "count:0 mapcount:-127". which may be not related to zsmalloc at this point. kernel: BUG: Bad page state in process khugepaged pfn:101db8 kernel: page:ffffea0004076e00 count:0 mapcount:-127 mapping: (null) index:0x1 kernel: flags: 0x8000000000000000() kernel: page dumped because: nonzero mapcount ker...

...s is an unsolved problem. So i have installed the kernel-2.6.9-39.EL from testing repo, but the box diedi with another error: Jul 2 16:40:40 lvs2 kernel: Bad page state at free_hot_cold_page (in process 'smtp', page c10a2140) Jul 2 16:40:40 lvs2 kernel: flags:0x20000014 mapping:00000000 mapcount:256 count:0 Jul 2 16:40:40 lvs2 kernel: Backtrace: Jul 2 16:40:40 lvs2 kernel: [<c014eaad>] bad_page+0x58/0x89 Jul 2 16:40:40 lvs2 kernel: [<c014f2e1>] free_hot_cold_page+0x5f/0xc8 Jul 2 16:40:40 lvs2 kernel: [<c0159b6a>] zap_pte_range+0x1d9/0x226 Jul 2 16:40:40 lvs2 kerne...

...ble. The way it stands > it's just very odd. There might be ways to make that better. I haven't really been looking too hard at making that special handling go away. > We'll need some reliable way to identify these folios that need care. > guest_memfd will be using folio->mapcount for now, so for now we couldn't > set a page type like hugetlb does. If hugetlb can set lru.next at a certain point, then guestmemfd could set a page type at a similar point, no? > > Also how does this translate to Matthew's memdesc world? In a memdesc world, pages no longer hav...

- introduce local variables (shortcuts for frequently used <dom>->grant_table) - adjust first parameter of mapcount() - drop lock acquisition from gnttab_get_version() - remove hard tabs and adjust formatting Signed-off-by: Jan Beulich <jbeulich@suse.com> Tested-by: Andrew Thomas <andrew.thomas@oracle.com> --- a/xen/common/grant_table.c +++ b/xen/common/grant_table.c @@ -444,18 +444,17 @@ static in...

...is being copied to a new page and data could be lost. The function __split_huge_pmd() checks for a PMD migration entry before calling __split_huge_pmd_locked() leading one to think that __split_huge_pmd_locked() can handle splitting a migrating PMD. However, the code always increments the page->_mapcount and adjusts the memory control group accounting assuming the page is mapped. Also, if the PMD entry is a migration PMD entry, the call to is_huge_zero_pmd(*pmd) is incorrect because it calls pmd_pfn(pmd) instead of migration_entry_to_pfn(pmd_to_swp_entry(pmd)). Fix these problems by checking for a...

On (06/16/16 15:47), Minchan Kim wrote: > > [..] > > > > this is what I'm getting with the [zsmalloc: keep first object offset in struct page] > > > > applied: "count:0 mapcount:-127". which may be not related to zsmalloc at this point. > > > > > > > > kernel: BUG: Bad page state in process khugepaged pfn:101db8 > > > > kernel: page:ffffea0004076e00 count:0 mapcount:-127 mapping: (null) index:0x1 > > > > >...

...yslogd@database at Wed Dec 14 18:55:05 2005 ... database kernel: [27073.874149] Bad page state at prep_new_page (in process ''postmaster'', page c1326ca0) Message from syslogd@database at Wed Dec 14 18:55:05 2005 ... database kernel: [27073.874165] flags:0x00000068 mapping:cd26914c mapcount:0 count:2 Message from syslogd@database at Wed Dec 14 18:55:05 2005 ... database kernel: [27073.874169] Backtrace: Message from syslogd@database at Wed Dec 14 18:55:05 2005 ... database kernel: [27073.874366] Trying to fix it up, but a reboot is needed == And the instance was no longer running....