Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
From:   Roman Gushchin <guro@fb.com>
To:     Rik van Riel <riel@fb.com>
CC:     Christian Borntraeger <borntraeger@de.ibm.com>,
        "akpm@linux-foundation.org" <akpm@linux-foundation.org>,
        "hannes@cmpxchg.org" <hannes@cmpxchg.org>,
        Kernel Team <Kernel-team@fb.com>,
        "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
        "linux-mm@kvack.org" <linux-mm@kvack.org>,
        "longman@redhat.com" <longman@redhat.com>,
        "shakeelb@google.com" <shakeelb@google.com>,
        "vdavydov.dev@gmail.com" <vdavydov.dev@gmail.com>,
        Heiko Carstens <heiko.carstens@de.ibm.com>,
        Janosch Frank <frankja@linux.ibm.com>,
        "kvm@vger.kernel.org" <kvm@vger.kernel.org>
Subject: Re: WARNING bisected (was Re: [PATCH v7 08/10] mm: rework non-root
 kmem_cache lifecycle management)
Thread-Topic: WARNING bisected (was Re: [PATCH v7 08/10] mm: rework non-root
 kmem_cache lifecycle management)
Thread-Index: AQHVoF1eUJGIXl/jo02oA2+fhmBRU6eV2PaAgAAAgACAAB16AIAAINyAgAADcQCAABSlgA==
Date:   Thu, 21 Nov 2019 22:09:19 +0000
Message-ID: <20191121220913.GA6325@localhost.localdomain>
References: <20190611231813.3148843-9-guro@fb.com>
 <20191121111739.3054-1-borntraeger@de.ibm.com>
 <20191121165807.GA201621@localhost.localdomain>
 <c6a2696b-6e35-de7c-8387-b21285b6776f@de.ibm.com>
 <20191121184524.GA4758@localhost.localdomain>
 <30a2e4babdcb22974a0a5ae8c5e764d951eef7dc.camel@fb.com>
 <20191121205520.GA5815@localhost.localdomain>
In-Reply-To: <20191121205520.GA5815@localhost.localdomain>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-messagesentrepresentingtype: 1
x-originating-ip: [2620:10d:c090:180::af5a]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 1de592d8-e0ac-4c0b-bad8-08d76ecf74e3
x-ms-traffictypediagnostic: BN8PR15MB3458:
x-ms-exchange-transport-forked: True
x-microsoft-antispam-prvs: <BN8PR15MB3458F393495B245323790508BE4E0@BN8PR15MB3458.namprd15.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 0228DDDDD7
x-forefront-antispam-report: SFV:NSPM;SFS:(10019020)(136003)(346002)(376002)(366004)(39860400002)(396003)(189003)(199004)(6506007)(52116002)(66946007)(66446008)(33656002)(186003)(14454004)(6862004)(446003)(81156014)(4001150100001)(4326008)(386003)(81166006)(8676002)(2906002)(25786009)(8936002)(7736002)(6512007)(5660300002)(478600001)(6486002)(229853002)(86362001)(9686003)(11346002)(99286004)(1076003)(66476007)(66556008)(76176011)(6436002)(46003)(6246003)(71200400001)(64756008)(7416002)(71190400001)(54906003)(6636002)(256004)(14444005)(6116002)(316002)(305945005)(102836004);DIR:OUT;SFP:1102;SCL:1;SRVR:BN8PR15MB3458;H:BN8PR15MB2626.namprd15.prod.outlook.com;FPR:;SPF:None;LANG:en;PTR:InfoNoRecords;MX:1;A:1;
received-spf: None (protection.outlook.com: fb.com does not designate
 permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: r+b3eW3xYyllzryUvM7Me+dmwx0XwOH8hqM/j7LC5Fuki3Fc9cW5kMefFmktkKFTtuF6y9bN7/PZLYB1H1NBLu5xtTwDBCCqvtaWOlMEQMo/22E4XUDqaa3yoag0hul/nY0xa3LsvzPgNGkPOXhZj1SguM96wBErS3j08WkZa0qdYdB8vOjx7jTSd5QNL2aFd56b/RAtgnxKInCFAUPNXt59aRMt7eYSR4CT3XKpJiMRdpwiWP2cKfQO5Ecs9PqbQz/hh7jUhX54PBQG1rk3cUrtBlw14FOtCgMhYx4gkEzKrRFov7ygROsn6n5a46m0wt/yH+VcxK8CYYcZcxWNNETg521Z5bB8GdnUtv95bj8WjZmGNf46Yeoj6W9RtwYh2E+bsypKoPOk8jE+GNV4tsCXvYw8f7vSUuTRgMH8/EbCkEH/vtKrP1rW7FWLt6Pz
Content-Type: text/plain; charset="us-ascii"
Content-ID: <AA60E95E9191DE4B85FD79D491B82FDF@namprd15.prod.outlook.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 1de592d8-e0ac-4c0b-bad8-08d76ecf74e3
X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Nov 2019 22:09:19.6950
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 8ae927fe-1255-47a7-a2af-5f3a069daaa2
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: jmnQYLxTQJ3nsaDiQHU+ZZTu6l+6l2qQGANALKQxEK2Cp/EH5/fDyQpUYa5Bz8//
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN8PR15MB3458
X-OriginatorOrg: fb.com
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,18.0.572
 definitions=2019-11-21_06:2019-11-21,2019-11-21 signatures=0
X-Proofpoint-Spam-Details: rule=fb_default_notspam policy=fb_default score=0 bulkscore=0 phishscore=0
 lowpriorityscore=0 suspectscore=0 clxscore=1015 priorityscore=1501
 mlxlogscore=999 adultscore=0 spamscore=0 mlxscore=0 impostorscore=0
 malwarescore=0 classifier=spam adjust=0 reason=mlx scancount=1
 engine=8.12.0-1910280000 definitions=main-1911210185
X-FB-Internal: deliver
Sender: linux-kernel-owner@vger.kernel.org
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

On Thu, Nov 21, 2019 at 12:55:28PM -0800, Roman Gushchin wrote:
> On Thu, Nov 21, 2019 at 12:43:01PM -0800, Rik van Riel wrote:
> > On Thu, 2019-11-21 at 13:45 -0500, Roman Gushchin wrote:
> > > On Thu, Nov 21, 2019 at 05:59:54PM +0100, Christian Borntraeger
> > > wrote:
> > > >=20
> > > >=20
> > > > Yes, rmmod has to be called directly after the guest shutdown to
> > > > see the issue.
> > > > See my 2nd mail.
> > >=20
> > > I see. Do you know, which kmem_cache it is? If not, can you, please,
> > > figure it out?
> > >=20
> > > I tried to reproduce the issue, but wasn't successful so far. So I
> > > wonder
> > > what can make your case special.
> >=20
> > I do not know either, but have a guess.
> >=20
> > My guess would be that either the slab object or the
> > slab page is RCU freed, and the kmem_cache destruction
> > is called before that RCU callback has completed.
> >=20
>=20
> I've a reproducer, but it requires SLAB_TYPESAFE_BY_RCU to panic.
> The only question is if it's the same or different issues.
> As soon as I'll have a fix, I'll post it here to test.

Ah, no, the issue I've reproduced is already fixed by commit b749ecfaf6c5
("mm: memcg/slab: fix panic in __free_slab() caused by premature memcg poin=
ter release").

Christian, can you, please, confirm that you have this one in your tree?

Also, can you, please, provide you config?
And you mentioned some panics, but didn't send any dmesg messages.
Can you, please, provide them?

Thanks!