[BUG] Bad page states

From: Eric Dumazet
Date: Fri Aug 05 2016 - 13:13:55 EST


Hi guys

I noticed following errors with current tree.

Bisected to nowhere :(

Anyone has an idea ?

git bisect start
# bad: [dd7fd3a82ce55e5772d41b1faa2439f15318a902] ACPI / hotplug / PCI: Runtime resume bridges before bus rescans
git bisect bad dd7fd3a82ce55e5772d41b1faa2439f15318a902
# good: [523d939ef98fd712632d93a5a2b588e477a7565e] Linux 4.7
git bisect good 523d939ef98fd712632d93a5a2b588e477a7565e
# good: [52e9f87ae8be96a863e44c7d8d7f482fb279dddd] mm, page_alloc: wake kswapd based on the highest eligible zone
git bisect good 52e9f87ae8be96a863e44c7d8d7f482fb279dddd
# good: [043248cd4e9603e2e8858c4e20810d8e40be7d9d] Merge tag 'armsoc-dt' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc
git bisect good 043248cd4e9603e2e8858c4e20810d8e40be7d9d
# good: [d0e62ef6ed257715a88d0e5d7cd850a1695429e2] drm/nouveau/gr/nv3x: fix instobj write offsets in gr setup
git bisect good d0e62ef6ed257715a88d0e5d7cd850a1695429e2
# good: [affe8a2abd0d7815bb2653eea2717d0e0f8ac7e3] Merge tag 'for-linus-20160801' of git://git.infradead.org/linux-mtd
git bisect good affe8a2abd0d7815bb2653eea2717d0e0f8ac7e3
# good: [f0936155f2204720655aefbc2f17c25a2c80a59e] Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
git bisect good f0936155f2204720655aefbc2f17c25a2c80a59e
# bad: [fdf1f7ff1bd7f1c6d1d5dc2b29b6b11a4f722276] Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending
git bisect bad fdf1f7ff1bd7f1c6d1d5dc2b29b6b11a4f722276
# bad: [3a303258ef40a29dd4a3ebd29dcb16afd546bd59] Merge tag 'upstream-4.8-rc1' of git://git.infradead.org/linux-ubifs
git bisect bad 3a303258ef40a29dd4a3ebd29dcb16afd546bd59
# bad: [c1ece76719205690f4b448460d9b85c130e8021b] Merge tag 'media/v4.8-5' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media
git bisect bad c1ece76719205690f4b448460d9b85c130e8021b
# good: [9049fc745300c5e2236cbfc69f5e8cadb6f1f57c] dynamic_debug: add jump label support
git bisect good 9049fc745300c5e2236cbfc69f5e8cadb6f1f57c
# good: [49aadcf1b6f4240751921dad52e86c760d70a5f1] extable.h: add stddef.h so "NULL" definition is not implicit
git bisect good 49aadcf1b6f4240751921dad52e86c760d70a5f1
# bad: [cd70c37b5a23eee7aa411205e2b4c74097f52336] [media] staging: add MEDIA_SUPPORT dependency
git bisect bad cd70c37b5a23eee7aa411205e2b4c74097f52336
# good: [9f8b333308dcb6af321526a54612cfaa7999a995] [media] vim2m: copy the other colorspace-related fields as well
git bisect good 9f8b333308dcb6af321526a54612cfaa7999a995
# good: [52e37f0a6655158c731a35b79106d3150fd3847c] [media] media: adv7180: Fix broken interrupt register access
git bisect good 52e37f0a6655158c731a35b79106d3150fd3847c
# bad: [5bbea66bf8d9ba898abbe5499f06998a993364f6] [media] vivid: don't handle CEC_MSG_SET_STREAM_PATH
git bisect bad 5bbea66bf8d9ba898abbe5499f06998a993364f6
# first bad commit: [5bbea66bf8d9ba898abbe5499f06998a993364f6] [media] vivid: don't handle CEC_MSG_SET_STREAM_PATH



[ 32.666450] BUG: Bad page state in process swapper/0 pfn:1fd945c
[ 32.672542] page:ffffea007f651700 count:0 mapcount:-511 mapping: (null) index:0x0
[ 32.680823] flags: 0x1000000000000000()
[ 32.684655] page dumped because: nonzero mapcount
[ 32.689360] Modules linked in: w1_therm wire cdc_acm ehci_pci ehci_hcd mlx4_en ib_uverbs mlx4_ib ib_core mlx4_core xt_TCPMSS ip6table_mangle ip6_tables ipv6
[ 32.689376] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.7.0-smp-DEV #240
[ 32.689378] 0000000000000000 ffff881fff803d98 ffffffff81655177 ffffea007f651700
[ 32.689379] ffffffff819eb8b0 ffff881fff803dc8 ffffffff816528ab ffff881fff803dc8
[ 32.689381] 0000000000000000 0000000000000002 0000000000000000 ffff881fff803dd8
[ 32.689382] Call Trace:
[ 32.689383] <IRQ> [<ffffffff81655177>] dump_stack+0x4d/0x63
[ 32.689390] [<ffffffff816528ab>] bad_page+0x101/0x11e
[ 32.689391] [<ffffffff8165293e>] free_pages_check_bad+0x76/0x78
[ 32.689394] [<ffffffff811a8d02>] __free_pages_ok+0x3d2/0x4a0
[ 32.689395] [<ffffffff811a9b29>] __free_pages+0x19/0x30
[ 32.689397] [<ffffffff810b8c95>] free_task+0x65/0xa0
[ 32.689399] [<ffffffff810b8d67>] __put_task_struct+0x97/0x130
[ 32.689401] [<ffffffff810be214>] delayed_put_task_struct+0x84/0x90
[ 32.689403] [<ffffffff8111457d>] rcu_process_callbacks+0x1ed/0x5b0
[ 32.689405] [<ffffffff8165fecb>] __do_softirq+0xcb/0x279
[ 32.689407] [<ffffffff810c10ba>] irq_exit+0x9a/0xb0
[ 32.689408] [<ffffffff8165fd06>] smp_apic_timer_interrupt+0x46/0x60
[ 32.689409] [<ffffffff8165e38f>] apic_timer_interrupt+0x7f/0x90
[ 32.689410] <EOI> [<ffffffff81556405>] ? cpuidle_enter_state+0xe5/0x250
[ 32.689414] [<ffffffff815563e8>] ? cpuidle_enter_state+0xc8/0x250
[ 32.689415] [<ffffffff815565a7>] cpuidle_enter+0x17/0x20
[ 32.689417] [<ffffffff810fa027>] cpu_startup_entry+0x277/0x340
[ 32.689418] [<ffffffff81657a37>] rest_init+0x77/0x80
[ 32.689421] [<ffffffff81d20034>] start_kernel+0x415/0x422
[ 32.689422] [<ffffffff81d1fa04>] ? set_init_arg+0x5a/0x5a
[ 32.689423] [<ffffffff81d1f591>] x86_64_start_reservations+0x2f/0x31
[ 32.689424] [<ffffffff81d1f684>] x86_64_start_kernel+0xf1/0xf5
...
[ 43.477693] BUG: Bad page state in process S05containers pfn:1ff02a3
[ 43.484417] page:ffffea007fc0a8c0 count:0 mapcount:-511 mapping: (null) index:0x0
[ 43.492737] flags: 0x1000000000000000()
[ 43.496602] page dumped because: nonzero mapcount
[ 43.501298] Modules linked in: w1_therm wire cdc_acm ehci_pci ehci_hcd mlx4_en ib_uverbs mlx4_ib ib_core mlx4_core xt_TCPMSS ip6table_mangle ip6_tables ipv6
[ 43.501313] CPU: 14 PID: 5488 Comm: S05containers Tainted: G B 4.7.0-smp-DEV #240
[ 43.501315] 0000000000000000 ffff881fdcbeb978 ffffffff81655177 ffffea007fc0a8c0
[ 43.501316] ffffffff819eb8b0 ffff881fdcbeb9a8 ffffffff816528ab ffffea007f5b1880
[ 43.501318] 0000000000000000 ffffea007fc0a8c0 0000000000000000 ffff881fdcbeb9b8
[ 43.501319] Call Trace:
[ 43.501326] [<ffffffff81655177>] dump_stack+0x4d/0x63
[ 43.501328] [<ffffffff816528ab>] bad_page+0x101/0x11e
[ 43.501330] [<ffffffff8165293e>] free_pages_check_bad+0x76/0x78
[ 43.501332] [<ffffffff811a82cd>] free_pcppages_bulk+0x38d/0x3a0
[ 43.501334] [<ffffffff811a9ad3>] free_hot_cold_page+0x1b3/0x1f0
[ 43.501335] [<ffffffff811a9e68>] free_hot_cold_page_list+0x48/0xb0
[ 43.501337] [<ffffffff811b1c49>] release_pages+0x279/0x380
[ 43.501340] [<ffffffff811eaafe>] free_pages_and_swap_cache+0x8e/0xb0
[ 43.501344] [<ffffffff811d313a>] tlb_flush_mmu_free+0x3a/0x60
[ 43.501346] [<ffffffff811d3fbe>] tlb_flush_mmu+0x1e/0x30
[ 43.501347] [<ffffffff811d3fe4>] tlb_finish_mmu+0x14/0x40
[ 43.501348] [<ffffffff811dd608>] exit_mmap+0xe8/0x140
[ 43.501352] [<ffffffff810b8fcd>] mmput+0x3d/0xe0
[ 43.501354] [<ffffffff8121c7f0>] flush_old_exec+0x370/0x680
[ 43.501358] [<ffffffff8126df92>] load_elf_binary+0x332/0x1780
[ 43.501359] [<ffffffff8126b07c>] ? load_misc_binary+0x6c/0x420
[ 43.501361] [<ffffffff811d2994>] ? get_user_pages_remote+0x54/0x60
[ 43.501362] [<ffffffff8121d1e2>] ? copy_strings.isra.25+0x1b2/0x370
[ 43.501363] [<ffffffff8121bee6>] search_binary_handler+0xa6/0x1f0
[ 43.501364] [<ffffffff8121dc2e>] do_execveat_common.isra.37+0x53e/0x700
[ 43.501366] [<ffffffff8121de1c>] do_execve+0x2c/0x30
[ 43.501368] [<ffffffff81226002>] ? getname+0x12/0x20
[ 43.501369] [<ffffffff8121e07e>] SyS_execve+0x2e/0x40
[ 43.501371] [<ffffffff810028a0>] do_syscall_64+0x50/0xa0
[ 43.501374] [<ffffffff8165d87c>] entry_SYSCALL64_slow_path+0x25/0x25