Received-SPF: pass (google.com: domain of linux-kernel+bounces-214896-linux.lists.archive=gmail.com@vger.kernel.org designates 139.178.88.99 as permitted sender) client-ip=139.178.88.99;
Date: Fri, 14 Jun 2024 08:31:08 -0400
From: "Liam R. Howlett" <Liam.Howlett@oracle.com>
To: Jiri Olsa <olsajiri@gmail.com>
Cc: Bert Karwatzki <spasswolf@web.de>, linux-mm@kvack.org,
        linux-kernel@vger.kernel.org,
        Andrew Morton <akpm@linux-foundation.org>, linux-next@vger.kernel.org
Subject: Re: commit 1c29a32ce65f4cd0f1c causes Bad rss-counter state and
 firefox-esr crash in linux-next-20240613
Message-ID: <xtp3sep2enh3navci7hrfgobnoki5iqffwdusqmusmqfyxvmbl@x6rkw4qlc2em>
Mail-Followup-To: "Liam R. Howlett" <Liam.Howlett@oracle.com>, 
	Jiri Olsa <olsajiri@gmail.com>, Bert Karwatzki <spasswolf@web.de>, linux-mm@kvack.org, 
	linux-kernel@vger.kernel.org, Andrew Morton <akpm@linux-foundation.org>, 
	linux-next@vger.kernel.org
References: <f4ea65e28ac47e6acb13f401f46a414a2f50f7bf.camel@web.de>
 <Zmv3O8W-OqUqkPwS@krava>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <Zmv3O8W-OqUqkPwS@krava>
User-Agent: NeoMutt/20231103
Precedence: bulk
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 
	=?us-ascii?Q?eo/H0LZY0bNIlL9QfFYlVEGgCNPNZnEPc2wnD+qUNOiuxZHtaGZmKiR2rfOe?=
 =?us-ascii?Q?RxkvD6rvvNU94/azfEj/TUtigVwUNcP2NKObblVMKOm4uP2K4e2uWMEmxTc3?=
 =?us-ascii?Q?omOfBdhw3/r/oaaVwdN3gO+QLuVh+GZ6yXesOqkPPiZbyeVI6sleHBFg4um/?=
 =?us-ascii?Q?pVp1ZNiBvJheL/M9u8RNkPnq+4vPkJbXrDQvkJcpa3Yw22vYClD2V9zNVKCk?=
 =?us-ascii?Q?QR9QYYez0nyR4C7spURu7BLALlLtaLtO4xp2tQXkRS37KiPH3VYyUSuWfwNM?=
 =?us-ascii?Q?85k9KAW6P7SIuG5VYrQm2S+Se44brDTO1LIrPa1R2MnwrJDm9rz/UgIVdckx?=
 =?us-ascii?Q?d21SEYdRgh7AgB67E5T4BFxAu+fRjXc1VFgSKqCFrSxIcg87nz8K/9lPiD6K?=
 =?us-ascii?Q?tgQxe/cSvUxGxrIl8XAYqzgrel3cl3lb/wciKalKp1jKoQQsIQqKf40f/pbZ?=
 =?us-ascii?Q?eLbPgKV07Fw4U5syeZm2OzoybDB58K67YDPdQpQ6lZw0uD6GOwbgTocBEa2r?=
 =?us-ascii?Q?iOLR+auKc7d5LagbwjU1+gtmrbQkVMumHy+PatB/V/fBil5ACoCqBzcF3BVx?=
 =?us-ascii?Q?yXKlvhalW7be3jBKlQGPiNxummQKmva1S5Hx4FK4oDorn95su5AXfOJX5uOg?=
 =?us-ascii?Q?RW8PEI7eZsq7JcI6Ijnw/o1dqJotLCgVdBOhhvO4oUclDZciSQ//D5LsLRk0?=
 =?us-ascii?Q?F+G2ZSj/aGVysLXvx3tWVYlkFHCBn7pfw0xLVsZ9TacwbmWkw5uUtqJLKEPr?=
 =?us-ascii?Q?FittNQbDln+uYx5QTk38P8l/m8tSl+VwmMrjI3rP6+1UyIeeq+vaSDuzUnH9?=
 =?us-ascii?Q?CpHd2EH+3bB1NWTMvrsM+objspsF9TaoajIGGXhThU9PnR2C5O7ZJi+me4Wy?=
 =?us-ascii?Q?f/80tbOi7kVKVJI3WeSKwsj1KoAQlHaLeE1Cks8o3qPIuFSPxYkLHwBVyeBZ?=
 =?us-ascii?Q?1bsOzQKXKfKPcNZvhRj0hKKNdfXMbe0hKe+selPgFtlJ+zj6jt3h2cuEPcKU?=
 =?us-ascii?Q?vpc+HqyjatnOtI2s7L6/Rgah5SICchqMHJxarg7C6cdqoSK+gxBZhZ0vmU9Z?=
 =?us-ascii?Q?ZsNmFoA0IvZftpoaSS3d9cencgbrifum0iwpt1YybtKbM553Cz5yQnYIAh6/?=
 =?us-ascii?Q?0WLNpta24XQXub2NMPOQczXf7wEmDsLCaXQ0FHfQi89OOqvxd4q3WgYQFNsx?=
 =?us-ascii?Q?ImwUNljPoQTLew2Ll39Cpou/xC+pRiAuWn0TWRu+I5yy2yhCB1672tZ3XpdK?=
 =?us-ascii?Q?brdi7VxBVnIUmHfKwv3F5nMbeGUsiZEBRdr5YUDwmQ9eC/s21UMZ4iB+slLL?=
 =?us-ascii?Q?ZmuWHo9//zAkNFmQ5mtfXBn/Xvlt0pRd7+v3qikPhyid8ssuZPTy+D3A+wu/?=
 =?us-ascii?Q?g+VHJrpJ1phXK1zbTxP3HJGMztYbiig8dMH4w7Kngrk7iWjiRKL0QyXV4ZT+?=
 =?us-ascii?Q?ut31fhsVwTSd9uNKmZxtgYHlPJTw8ODCAdBf7N0aoeg+4a3M0q242cWO2R7i?=
 =?us-ascii?Q?PRI0ouZjwgBGFwdYpy5+soLP5Ich1cTNJVthDmCcquIUyBuJLxwN91UCD7AE?=
 =?us-ascii?Q?UYfgq/01MCRon34LXk6UIAPIJyFfgM8CSZzpkrEE1TtdhAh8exG1o0KpK/wB?=
 =?us-ascii?Q?NQ=3D=3D?=
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: 
	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
X-OriginatorOrg: oracle.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 281e93e7-f133-4433-09f3-08dc8c6ddf8b
X-MS-Exchange-CrossTenant-AuthSource: DS0PR10MB7933.namprd10.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Jun 2024 12:31:11.0496
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: 93jm6Q4G+pKJmMG/zeO46Y1ZD3kEyJk/RBCl9RXGT39tUuVeMyxzZcnAVHyb9KIq1+6zrhdpk40i9CrQJ8fZ5g==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLAPR10MB5044
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.293,Aquarius:18.0.1039,Hydra:6.0.680,FMLib:17.12.28.16
 definitions=2024-06-14_09,2024-06-14_03,2024-05-17_01
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 mlxlogscore=999
 bulkscore=0 malwarescore=0 spamscore=0 phishscore=0 mlxscore=0
 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1
 engine=8.12.0-2405010000 definitions=main-2406140085
X-Proofpoint-GUID: sfSisnql1xggwokv9o87kMdY6laWKbdA
X-Proofpoint-ORIG-GUID: sfSisnql1xggwokv9o87kMdY6laWKbdA

* Jiri Olsa <olsajiri@gmail.com> [240614 03:54]:
> On Fri, Jun 14, 2024 at 01:40:54AM +0200, Bert Karwatzki wrote:
> > Since linux-next-20240613 firefox-esr crashes after several minutes of browsing
> > giving the following error messages in dmesg:
> > [ T2343] BUG: Bad rss-counter state mm:00000000babe0c39 type:MM_ANONPAGES val:86
> > [ T4063] show_signal_msg: 16 callbacks suppressed
> > [ T4063] Isolated Web Co[4063]: segfault at 396d1686c000 ip 0000396d1686c000 sp
> > 00007ffd767b30a8 error 14 likely on CPU 7 (core 3, socket 0)
> > [ T4063] Code: Unable to access opcode bytes at 0x396d1686bfd6.
> > [ T4211] BUG: Bad rss-counter state mm:00000000cd9fc541 type:MM_ANONPAGES
> > val:817
> > [ T3798] BUG: Bad rss-counter state mm:00000000432d87c2 type:MM_ANONPAGES
> > val:181
> > [ T5548] BUG: Bad rss-counter state mm:00000000034aa27a type:MM_ANONPAGES
> > val:242
> > [ T3823] BUG: Bad rss-counter state mm:0000000099734197 type:MM_ANONPAGES
> > val:137
> > [    T1] BUG: Bad rss-counter state mm:000000005e5e2f2f type:MM_ANONPAGES val:28
> > 
> > (these are the error messages of several crashes and the error seems to affect
> > other processes, too (T1))
> > 
> > The crash can be provoked to appear in ~1min by opening large numbers of tabs in
> > firefox-esr (by holding pressing ctrl+t for some time). With this I bisected the
> > error to commit "1c29a32ce65f mm/mmap: use split munmap calls for MAP_FIXED" and
> > reverting this commit in linux-next-20240613 fixes the issue for me.
> 
> +1, bpf selftests are failing for me because mmap fails with:
>   mmap(0x7f9361bc9000, 4096, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED, 4, 0) = -1 EBUSY (Device or resource busy)
> 
> did not get to the cause, but reverting the 1c29a32ce65f fixes it for me
> 

Thanks for the information, this sounds like a much easier way to
recreate the issue.

Regards,
Liam