Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1380584 > unrolled thread

3.5.0: BUG: Bad page state in process Compositor pfn:16834f

Started byFrederik Himpe <fhimpe@telenet.be>
First post2016-04-16 20:40 +0200
Last post2016-04-23 19:20 +0200
Articles 3 — 2 participants

Back to article view | Back to linux.kernel

Contents

  3.5.0: BUG: Bad page state in process Compositor  pfn:16834f Frederik Himpe <fhimpe@telenet.be> - 2016-04-16 20:40 +0200
    Re: 3.5.0: BUG: Bad page state in process Compositor  pfn:16834f Michal Hocko <mhocko@kernel.org> - 2016-04-16 22:30 +0200
      Re: 3.5.0: BUG: Bad page state in process Compositor  pfn:16834f Frederik Himpe <fhimpe@telenet.be> - 2016-04-23 19:20 +0200

#1380584 — 3.5.0: BUG: Bad page state in process Compositor pfn:16834f

FromFrederik Himpe <fhimpe@telenet.be>
Date2016-04-16 20:40 +0200
Subject3.5.0: BUG: Bad page state in process Compositor pfn:16834f
Message-ID<roDip-7Yf-5@gated-at.bofh.it>
With Linux 3.5.0 I suddenly had Firefox which suddenly seemed
to get stuck, and then I tried to kill it. I also noticed that
the ps aux command was hanging. Then I found this in my kernel
logs: 


Apr 16 20:21:53 piranha kernel: [27926.414148] BUG: Bad page state in process Compositor  pfn:16834f
Apr 16 20:21:53 piranha kernel: [27926.414153] page:ffffea0005a0d3c0 count:0 mapcount:0 mapping:          (null) index:0x0
Apr 16 20:21:53 piranha kernel: [27926.414155] flags: 0x1ffff8000000000()
Apr 16 20:21:53 piranha kernel: [27926.414156] page dumped because: page still charged to cgroup
Apr 16 20:21:53 piranha kernel: [27926.414157] page->mem_cgroup:4000000000000000
Apr 16 20:21:53 piranha kernel: [27926.414158] Modules linked in: nls_utf8 ufs qnx4 hfsplus hfs minix ntfs vfat msdos fat jfs xfs libcrc32c crc32c_generic fuse xt_CHECKSUM iptable_mangle ipt_MASQUERADE nf_nat_masquerade_ipv4 iptable_nat nf_nat_ipv4 nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack ipt_REJECT nf_reject_ipv4 xt_tcpudp tun bridge stp llc ebtable_filter ebtables ip6table_filter ip6_tables iptable_filter ip_tables x_tables cpufreq_userspace cpufreq_stats cpufreq_powersave cpufreq_conservative intel_rapl x86_pkg_temp_thermal intel_powerclamp kvm_intel kvm irqbypass crct10dif_pclmul crc32_pclmul ghash_clmulni_intel ext4 crc16 mbcache jbd2 sha256_ssse3 sha256_generic hmac drbg ansi_cprng iTCO_wdt iTCO_vendor_support i915 snd_hda_codec_hdmi aesni_intel aes_x86_64 lrw gf128mul snd_hda_codec_realtek glue_helper ablk_helper snd_hda_codec_generic cryptd snd_hda_intel amdkfd snd_hda_codec serio_raw snd_hda_core snd_hwdep snd_pcm radeon snd_timer ttm lpc_ich pcspkr drm_kms_helper joydev snd evdev i2c_i801 mfd_core drm soundcore i2c_algo_bit ie31200_edac mei_me mei edac_core shpchp battery 8250_fintek nuvoton_cir rc_core intel_smartconnect sg tpm_tis video tpm button processor nct6775 hwmon_vid coretemp parport_pc ppdev lp parport autofs4 btrfs xor raid6_pq dm_mod uas usb_storage sd_mod hid_generic hid_logitech_hidpp hid_logitech_dj sr_mod cdrom usbhid hid crc32c_intel psmouse ahci libahci libata xhci_pci ehci_pci xhci_hcd scsi_mod ehci_hcd r8169 mii usbcore usb_common fjes
Apr 16 20:21:53 piranha kernel: [27926.414222] CPU: 3 PID: 8733 Comm: Compositor Not tainted 4.5.0+ #1
Apr 16 20:21:53 piranha kernel: [27926.414223] Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./H77 Pro4/MVP, BIOS P1.70 08/07/2013
Apr 16 20:21:53 piranha kernel: [27926.414225]  0000000000000286 00000000b59d1e10 ffffffff813012d5 ffffea0005a0d3c0
Apr 16 20:21:53 piranha kernel: [27926.414227]  ffffffff818221c7 ffffffff81170416 ffffea0005a0d400 0000000000000000
Apr 16 20:21:53 piranha kernel: [27926.414228]  ffff8800a65f7b28 ffffffff811742ac ffff88042f5e96c0 0000000000000246
Apr 16 20:21:53 piranha kernel: [27926.414230] Call Trace:
Apr 16 20:21:53 piranha kernel: [27926.414235]  [<ffffffff813012d5>] ? dump_stack+0x5c/0x77
Apr 16 20:21:53 piranha kernel: [27926.414238]  [<ffffffff81170416>] ? bad_page.part.68+0xa6/0xf0
Apr 16 20:21:53 piranha kernel: [27926.414241]  [<ffffffff811742ac>] ? get_page_from_freelist+0x55c/0x9e0
Apr 16 20:21:53 piranha kernel: [27926.414243]  [<ffffffff815a740f>] ? __schedule+0x2ef/0x950
Apr 16 20:21:53 piranha kernel: [27926.414245]  [<ffffffff811749c7>] ? __alloc_pages_nodemask+0x1a7/0xc70
Apr 16 20:21:53 piranha kernel: [27926.414249]  [<ffffffff8131d689>] ? list_del+0x9/0x30
Apr 16 20:21:53 piranha kernel: [27926.414251]  [<ffffffff810b8170>] ? remove_wait_queue+0x20/0x30
Apr 16 20:21:53 piranha kernel: [27926.414255]  [<ffffffff811fcb55>] ? poll_freewait+0x45/0xa0
Apr 16 20:21:53 piranha kernel: [27926.414257]  [<ffffffff8149a1ee>] ? __kmalloc_reserve.isra.33+0x2e/0x80
Apr 16 20:21:53 piranha kernel: [27926.414260]  [<ffffffff811c0b04>] ? alloc_pages_current+0x84/0x110
Apr 16 20:21:53 piranha kernel: [27926.414263]  [<ffffffff8149c058>] ? alloc_skb_with_frags+0xd8/0x1d0
Apr 16 20:21:53 piranha kernel: [27926.414264]  [<ffffffff81497d74>] ? sock_alloc_send_pskb+0x1e4/0x210
Apr 16 20:21:53 piranha kernel: [27926.414266]  [<ffffffff814a1c6e>] ? skb_copy_datagram_from_iter+0xce/0x1f0
Apr 16 20:21:53 piranha kernel: [27926.414269]  [<ffffffff81550680>] ? unix_stream_sendmsg+0x280/0x3f0
Apr 16 20:21:53 piranha kernel: [27926.414271]  [<ffffffff81493390>] ? sock_sendmsg+0x30/0x40
Apr 16 20:21:53 piranha kernel: [27926.414273]  [<ffffffff81493427>] ? sock_write_iter+0x87/0x100
Apr 16 20:21:53 piranha kernel: [27926.414275]  [<ffffffff811e7f63>] ? do_iter_readv_writev+0x73/0xb0
Apr 16 20:21:53 piranha kernel: [27926.414277]  [<ffffffff811e8cdf>] ? do_readv_writev+0x18f/0x230
Apr 16 20:21:53 piranha kernel: [27926.414280]  [<ffffffff811e9d46>] ? SyS_writev+0x56/0xe0
Apr 16 20:21:53 piranha kernel: [27926.414282]  [<ffffffff815ab832>] ? entry_SYSCALL_64_fastpath+0x16/0x71
Apr 16 20:21:53 piranha kernel: [27926.414284] Disabling lock debugging due to kernel taint
Apr 16 20:22:18 piranha kernel: [27951.741468] general protection fault: 0000 [#1] SMP 
Apr 16 20:22:18 piranha kernel: [27951.742993] Modules linked in: nls_utf8 ufs qnx4 hfsplus hfs minix ntfs vfat msdos fat jfs xfs libcrc32c crc32c_generic fuse xt_CHECKSUM iptable_mangle ipt_MASQUERADE nf_nat_masquerade_ipv4 iptable_nat nf_nat_ipv4 nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack ipt_REJECT nf_reject_ipv4 xt_tcpudp tun bridge stp llc ebtable_filter ebtables ip6table_filter ip6_tables iptable_filter ip_tables x_tables cpufreq_userspace cpufreq_stats cpufreq_powersave cpufreq_conservative intel_rapl x86_pkg_temp_thermal intel_powerclamp kvm_intel kvm irqbypass crct10dif_pclmul crc32_pclmul ghash_clmulni_intel ext4 crc16 mbcache jbd2 sha256_ssse3 sha256_generic hmac drbg ansi_cprng iTCO_wdt iTCO_vendor_support i915 snd_hda_codec_hdmi aesni_intel aes_x86_64 lrw gf128mul snd_hda_codec_realtek glue_helper ablk_helper snd_hda_codec_generic cryptd snd_hda_intel amdkfd snd_hda_codec serio_raw snd_hda_core snd_hwdep snd_pcm radeon snd_timer ttm lpc_ich pcspkr drm_kms_helper joydev snd evdev i2c_i801 mfd_core drm soundcore i2c_algo_bit ie31200_edac mei_me mei edac_core shpchp battery 8250_fintek nuvoton_cir rc_core intel_smartconnect sg tpm_tis video tpm button processor nct6775 hwmon_vid coretemp parport_pc ppdev lp parport autofs4 btrfs xor raid6_pq dm_mod uas usb_storage sd_mod hid_generic hid_logitech_hidpp hid_logitech_dj sr_mod cdrom usbhid hid crc32c_intel psmouse ahci libahci libata xhci_pci ehci_pci xhci_hcd scsi_mod ehci_hcd r8169 mii usbcore usb_common fjes
Apr 16 20:22:18 piranha kernel: [27951.754599] CPU: 3 PID: 8687 Comm: firefox.real Tainted: G    B           4.5.0+ #1
Apr 16 20:22:18 piranha kernel: [27951.756278] Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./H77 Pro4/MVP, BIOS P1.70 08/07/2013
Apr 16 20:22:18 piranha kernel: [27951.757973] task: ffff8803ef17c2c0 ti: ffff880406700000 task.ti: ffff880406700000
Apr 16 20:22:18 piranha kernel: [27951.759674] RIP: 0010:[<ffffffff811ab0d4>]  [<ffffffff811ab0d4>] anon_vma_clone+0xd4/0x1b0
Apr 16 20:22:18 piranha kernel: [27951.761384] RSP: 0018:ffff880406703e18  EFLAGS: 00010282
Apr 16 20:22:18 piranha kernel: [27951.763487] RAX: bfff8803e928c938 RBX: ffff8803e928c938 RCX: ffff8802475ece20
Apr 16 20:22:18 piranha kernel: [27951.765171] RDX: ffffffff81196cf0 RSI: ffff8803e928c978 RDI: ffff8802475ece20
Apr 16 20:22:18 piranha kernel: [27951.766847] RBP: ffff8803e928c938 R08: ffff88008d79b800 R09: 00000007f3b888f4
Apr 16 20:22:18 piranha kernel: [27951.768516] R10: 00000007f3b888d0 R11: ffff88041a70c6c0 R12: ffff88008d79b868
Apr 16 20:22:18 piranha kernel: [27951.770166] R13: ffff880216e5b520 R14: ffff88008d79b878 R15: ffff88041a70c6c0
Apr 16 20:22:18 piranha kernel: [27951.771800] FS:  00007f3ba24a9740(0000) GS:ffff88042f380000(0000) knlGS:0000000000000000
Apr 16 20:22:18 piranha kernel: [27951.773439] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Apr 16 20:22:18 piranha kernel: [27951.775070] CR2: 00007f3b80760e2e CR3: 00000003a1a81000 CR4: 00000000001406e0
Apr 16 20:22:18 piranha kernel: [27951.776697] Stack:
Apr 16 20:22:18 piranha kernel: [27951.778310]  ffff88008d79b800 0000000000000286 ffff880216e5b520 ffff88008d79b800
Apr 16 20:22:18 piranha kernel: [27951.779954]  00007f3b888f5000 0000000000000000 0000000000000001 ffff880406703f10
Apr 16 20:22:18 piranha kernel: [27951.781569]  ffffffff811a45bf 0000000008100073 00007f3b888f5000 ffff88008d79b800
Apr 16 20:22:18 piranha kernel: [27951.783178] Call Trace:
Apr 16 20:22:18 piranha kernel: [27951.784761]  [<ffffffff811a45bf>] ? __split_vma.isra.34+0xbf/0x1d0
Apr 16 20:22:18 piranha kernel: [27951.786337]  [<ffffffff811a7ee6>] ? mprotect_fixup+0x1d6/0x270
Apr 16 20:22:18 piranha kernel: [27951.788141]  [<ffffffff811a80f7>] ? SyS_mprotect+0x177/0x260
Apr 16 20:22:18 piranha kernel: [27951.789779]  [<ffffffff815ab832>] ? entry_SYSCALL_64_fastpath+0x16/0x71
Apr 16 20:22:18 piranha kernel: [27951.791409] Code: 00 00 74 89 83 7d 34 01 77 83 49 89 ad 88 00 00 00 49 8b 44 24 18 49 39 c6 4c 8d 60 f0 75 80 49 8b 85 88 00 00 00 48 85 c0 74 04 <83> 40 34 01 48 85 db 74 09 48 8d 7b 08 e8 ba 1a f1 ff 31 c0 48 
Apr 16 20:22:18 piranha kernel: [27951.793148] RIP  [<ffffffff811ab0d4>] anon_vma_clone+0xd4/0x1b0
Apr 16 20:22:18 piranha kernel: [27951.794798]  RSP <ffff880406703e18>
Apr 16 20:22:18 piranha kernel: [27951.803311] ---[ end trace e8db1a483245f5d8 ]---

[toc] | [next] | [standalone]

#1380612

FromMichal Hocko <mhocko@kernel.org>
Date2016-04-16 22:30 +0200
Message-ID<roF0R-Ro-1@gated-at.bofh.it>
In reply to#1380584
On Sat 16-04-16 18:37:53, Frederik Himpe wrote:
> With Linux 3.5.0 I suddenly had Firefox which suddenly seemed
> to get stuck, and then I tried to kill it. I also noticed that
> the ps aux command was hanging. Then I found this in my kernel
> logs: 
> 
> 
> Apr 16 20:21:53 piranha kernel: [27926.414148] BUG: Bad page state in process Compositor  pfn:16834f
> Apr 16 20:21:53 piranha kernel: [27926.414153] page:ffffea0005a0d3c0 count:0 mapcount:0 mapping:          (null) index:0x0
> Apr 16 20:21:53 piranha kernel: [27926.414155] flags: 0x1ffff8000000000()

Flags look weird

> Apr 16 20:21:53 piranha kernel: [27926.414156] page dumped because: page still charged to cgroup
> Apr 16 20:21:53 piranha kernel: [27926.414157] page->mem_cgroup:4000000000000000

And we think that the page is still charged because page->mem_cgroup !=
NULL. The value is not a pointer though. It seems like somebody is
corrupting the struct page. Hard to tell who that might be though from
the available information. This will be nasty to track down I am afraid.
How reproducible is it?

-- 
Michal Hocko
SUSE Labs

[toc] | [prev] | [next] | [standalone]

#1385690

FromFrederik Himpe <fhimpe@telenet.be>
Date2016-04-23 19:20 +0200
Message-ID<rr9nQ-6Ka-25@gated-at.bofh.it>
In reply to#1380612
On za, 2016-04-16 at 16:29 -0400, Michal Hocko wrote:
> On Sat 16-04-16 18:37:53, Frederik Himpe wrote:
> > 
> > 
> > Apr 16 20:21:53 piranha kernel: [27926.414148] BUG: Bad page state
> > in process Compositor  pfn:16834f
> > Apr 16 20:21:53 piranha kernel: [27926.414153]
> > page:ffffea0005a0d3c0 count:0 mapcount:0 mapping:          (null)
> > index:0x0
> > Apr 16 20:21:53 piranha kernel: [27926.414155] flags:
> > 0x1ffff8000000000()
> Flags look weird
> 
> > 
> > Apr 16 20:21:53 piranha kernel: [27926.414156] page dumped because:
> > page still charged to cgroup
> > Apr 16 20:21:53 piranha kernel: [27926.414157] page-
> > >mem_cgroup:4000000000000000
> And we think that the page is still charged because page->mem_cgroup
> !=
> NULL. The value is not a pointer though. It seems like somebody is
> corrupting the struct page. Hard to tell who that might be though
> from
> the available information. This will be nasty to track down I am
> afraid.
> How reproducible is it?

I do not know how to reproduce this. I upgraded to 4.5.1, and with this
kernel however I experienced already multiple hard freezes. I suspect
they are the same problem, but there is nothing in the kernel logs. So
4.5 series is definitely unstable on this system.

-- 
Frederik Himpe <fhimpe@telenet.be>

[toc] | [prev] | [standalone]

Back to top | Article view | linux.kernel

csiph-web