Date:	Thu, 13 Jun 2013 18:25:49 +0800
From:	Fengguang Wu <fengguang.wu@...el.com>
To:	fengguang.wu@...el.com, Mel Gorman <mgorman@...e.de>
Cc:	linux-kernel@...r.kernel.org, linux-mm@...ck.org
Subject: [iput] BUG: Bad page state in process rm pfn:0b0ce

Greetings,

I got the below dmesg in linux-next and the first bad commit is

commit eeb9bfc39ed70ee5c389d6c9be555588e1284e62
Author: Mel Gorman <mgorman@...e.de>
Date:   Thu Jun 6 10:40:03 2013 +1000

    mm: remove lru parameter from __lru_cache_add and lru_cache_add_lru
    
    Similar to __pagevec_lru_add, this patch removes the LRU parameter from
    __lru_cache_add and lru_cache_add_lru as the caller does not control the
    exact LRU the page gets added to.  lru_cache_add_lru gets renamed to
    lru_cache_add the name is silly without the lru parameter.  With the
    parameter removed, it is required that the caller indicate if they want
    the page added to the active or inactive list by setting or clearing
    PageActive respectively.
    
    [akpm@...ux-foundation.org: Suggested the patch]
    Signed-off-by: Mel Gorman <mgorman@...e.de>
    Cc: Jan Kara <jack@...e.cz>
    Cc: Rik van Riel <riel@...hat.com>
    Acked-by: Johannes Weiner <hannes@...xchg.org>
    Cc: Alexey Lyahkov <alexey.lyashkov@...il.com>
    Cc: Andrew Perepechko <anserper@...ru>
    Cc: Robin Dong <sanbai@...bao.com>
    Cc: Theodore Tso <tytso@....edu>
    Cc: Hugh Dickins <hughd@...gle.com>
    Cc: Rik van Riel <riel@...hat.com>
    Cc: Bernd Schubert <bernd.schubert@...tmail.fm>
    Cc: David Howells <dhowells@...hat.com>
    Cc: Trond Myklebust <Trond.Myklebust@...app.com>
    Signed-off-by: Andrew Morton <akpm@...ux-foundation.org>

This shows up reliably in every boot:

[   70.190744] Out of memory: Kill process 197 (trinity-child1) score 52 or sacrifice child
[   70.192202] Killed process 197 (trinity-child1) total-vm:21528kB, anon-rss:7672kB, file-rss:524kB
 * Asking all remaining processes to terminate...       
killall5[225]: mount returned non-zero exit status
killall5[225]: /proc not mounted, failed to mount.

mount: proc has wrong device number or fs type proc not supported
killall5[233]: mount returned non-zero exit status
killall5[233]: /proc not mounted, failed to mount.
 * All processes ended within 1 seconds....       
/etc/rc6.d/S40umountfs: line 20: /proc/mounts: No such file or directory
cat: /proc/1/maps: No such file or directory
cat: /proc/1/maps: No such file or directory
cat: /proc/1/maps: No such file or directory
cat: /proc/1/maps: No such file or directory
cat: /proc/1/maps: No such file or directory
cat: /proc/1/maps: No such file or directory
umount: /var/run: not mounted
[   84.212960] BUG: Bad page state in process rm  pfn:0b0c9
[   84.214682] page:ffff88000d646240 count:0 mapcount:0 mapping:          (null) index:0x0
[   84.216883] page flags: 0x20000000004c(referenced|uptodate|active)
[   84.218697] CPU: 1 PID: 283 Comm: rm Not tainted 3.10.0-rc4-04361-geeb9bfc #49
[   84.220729]  ffff88000d646240 ffff88000d179bb8 ffffffff82562956 ffff88000d179bd8
[   84.223242]  ffffffff811333f1 000020000000004c ffff88000d646240 ffff88000d179c28
[   84.225387]  ffffffff811346a4 ffff880000270000 0000000000000000 0000000000000006
[   84.227294] Call Trace:
[   84.227867]  [<ffffffff82562956>] dump_stack+0x27/0x30
[   84.229045]  [<ffffffff811333f1>] bad_page+0x130/0x158
[   84.230261]  [<ffffffff811346a4>] free_pages_prepare+0x8b/0x1e3
[   84.231765]  [<ffffffff8113542a>] free_hot_cold_page+0x28/0x1cf
[   84.233171]  [<ffffffff82585830>] ? _raw_spin_unlock_irqrestore+0x6b/0xc6
[   84.234822]  [<ffffffff81135b59>] free_hot_cold_page_list+0x30/0x5a
[   84.236311]  [<ffffffff8113a4ed>] release_pages+0x251/0x267
[   84.237653]  [<ffffffff8112a88d>] ? delete_from_page_cache+0x48/0x9e
[   84.239142]  [<ffffffff8113ad93>] __pagevec_release+0x2b/0x3d
[   84.240473]  [<ffffffff8113b45a>] truncate_inode_pages_range+0x1b0/0x7ce
[   84.242032]  [<ffffffff810e76ab>] ? put_lock_stats.isra.20+0x1c/0x53
[   84.243480]  [<ffffffff810e77f5>] ? lock_release_holdtime+0x113/0x11f
[   84.244935]  [<ffffffff8113ba8c>] truncate_inode_pages+0x14/0x1d
[   84.246337]  [<ffffffff8119b3ef>] evict+0x11f/0x232
[   84.247501]  [<ffffffff8119c527>] iput+0x1a5/0x218
[   84.248607]  [<ffffffff8118f015>] do_unlinkat+0x19b/0x25a
[   84.249828]  [<ffffffff810ea993>] ? trace_hardirqs_on_caller+0x210/0x2ce
[   84.251382]  [<ffffffff8144372e>] ? trace_hardirqs_on_thunk+0x3a/0x3f
[   84.252879]  [<ffffffff8118f10d>] SyS_unlinkat+0x39/0x4c
[   84.254174]  [<ffffffff825874d6>] system_call_fastpath+0x1a/0x1f
[   84.255596] Disabling lock debugging due to kernel taint


git bisect start 1f6587114a689a5d7fdfb0d4abc818117e3182a5 v3.9 --
git bisect good 9992ba72327fa0d8bdc9fb624e80f5cce338a711  # 11:22     30+  Merge tag 'sound-3.10' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound
git bisect good 165b199f615ff5cbbd2a241526673d8643bedc30  # 11:38     30+  Merge remote-tracking branch 'asoc/topic/sn95031' into asoc-next
git bisect good a9ee2e0f380766c3edaa0c00513a2a3771472322  # 11:52     30+  Merge remote-tracking branch 'watchdog/master'
git bisect good bfc5068e4692d31dc4d17b1e290ca67fe6c331e8  # 12:15     30+  Merge remote-tracking branch 'mailbox/dbx500-prcmu-mailbox'
git bisect good 66cb7925f318acb04983ffc13faed70edacf7709  # 12:39     30+  Merge remote-tracking branch 'samsung/for-next'
git bisect  bad 1051b6d30fb5ad5fe0db180edccf86c2bc9f04a6  # 12:46      0-  mm/tile: prepare for removing num_physpages and simplify mem_init()
git bisect good 351c52b20c1545f39e578dc38ecde2c5068c2dc6  # 12:57     30+  drivers/scsi/dmx3191d.c: convert to module_pci_driver
git bisect good 35f49632f32139ddf803dcb35173898e8fb2f8d8  # 13:20     30+  vmcore-allow-user-process-to-remap-elf-note-segment-buffer-fix
git bisect  bad 47856ff3aa81669131eaae77bfdc11d74de82d68  # 13:30      0-  mm: report available pages as "MemTotal" for each NUMA node
git bisect  bad e923a66867a8b39da16382f81547193046d2fc6f  # 13:37      0-  mm/hugetlb: remove hugetlb_prefault
git bisect  bad eeb9bfc39ed70ee5c389d6c9be555588e1284e62  # 13:44      0-  mm: remove lru parameter from __lru_cache_add and lru_cache_add_lru
git bisect good 0436c4fab7d0f5441fe7307f52801a573ba61f4a  # 13:53     30+  memcg: update TODO list in Documentation
git bisect good f8d52137ba38f8a2770dea83a25a642efa2d0beb  # 14:03     30+  mm: pagevec: defer deciding which LRU to add a page to until pagevec drain time
git bisect good ebf2ee3010dedb4177eee18e01be00b5a7b0bc24  # 14:14     30+  mm: remove lru parameter from __pagevec_lru_add and remove parts of pagevec API
git bisect good ebf2ee3010dedb4177eee18e01be00b5a7b0bc24  # 14:37     90+  mm: remove lru parameter from __pagevec_lru_add and remove parts of pagevec API
git bisect  bad 5e81a2f5e9ffa505e6ad649a9b1b1b7e03b61b96  # 14:37      0-  INFO: suspicious RCU usage.
git bisect good ca47554a03c18011f31a5566878d072793c049ab  # 15:06     90+  Revert "mm: remove lru parameter from __lru_cache_add and lru_cache_add_lru"
git bisect good 26e04462c8b78d079d3231396ec72d58a14f114b  # 15:45     90+  Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
git bisect  bad c04efed734409f5a44715b54a6ca1b54b0ccf215  # 15:53      0-  Add linux-next specific files for 20130607

Thanks,
Fengguang

View attachment "dmesg-kvm-kbuild-29587-20130612221718-3.10.0-rc4-04726-g5e81a2f-17" of type "text/plain" (88849 bytes)

View attachment "bisect-5e81a2f5e9ffa505e6ad649a9b1b1b7e03b61b96-x86_64-randconfig-a07-0612-BUG:-Bad-page-state-in-process-37783.log" of type "text/plain" (20851 bytes)

View attachment ".config-bisect" of type "text/plain" (94425 bytes)

Powered by blists - more mailing lists