> @@ -5527,7 +5527,7 @@ static void uncharge_list(struct list_head *page_list) > next = page->lru.next; > > VM_BUG_ON_PAGE(PageLRU(page), page); > - VM_BUG_ON_PAGE(page_count(page), page); > + VM_BUG_ON_PAGE(!PageHWPoison(page) && page_count(page), page); > > if (!page->mem_cgroup) > continue; > diff --git a/mm/memory-failure.c b/mm/memory-failure.c > index 8a6bd3a9eb1e..4497d9619bb4 100644 > --- a/mm/memory-failure.c > +++ b/mm/memory-failure.c > @@ -541,6 +541,13 @@ static int delete_from_lru_cache(struct page *p) > */ > ClearPageActive(p); > ClearPageUnevictable(p); > + > + /* > + * Poisoned page might never drop its ref count to 0 so we have to > + * uncharge it manually from its memcg. > + */ > + mem_cgroup_uncharge(p); > + Yep, that is the right fix https://lkml.org/lkml/2017/4/26/133 Reviewed-by: Balbir Singh <bsingharora@xxxxxxxxx> -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@xxxxxxxxx. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: <a href=mailto:"dont@xxxxxxxxx"> email@xxxxxxxxx </a>