I tested the v2 patch on top of linux-next-20240703 with stress-ng --vm-segv 16 and got more than a million "Bad rss-counter state" errors plus an invalid opcode error! I'm rebooting now to test v3. Bert Karwatzki [ T1359] BUG: Bad rss-counter state mm:00000000e5421690 type:MM_ANONPAGES val:370 [...] Here are more than 10^6 (~2^20) lines of "Bad rss-counter-state" [ T1359] BUG: Bad rss-counter state mm:00000000e5421690 type:MM_SHMEMPAGES val:27 [T24203] page: refcount:542376 mapcount:542374 mapping:00000000ba179a51 index:0x0 pfn:0x29594e [T24203] memcg:ffff9bc0424b6800 [T24203] aops:shmem_aops ino:a678 [T24203] flags: 0x400000000004012d(locked|referenced|uptodate|lru|active|swapbacked|zone=2) [T24203] raw: 400000000004012d ffffd864c574a908 ffffd864c776fa48 ffff9bc1a0681040 [T24203] raw: 0000000000000000 0000000000000000 000846a8000846a5 ffff9bc0424b6800 [T24203] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [T24203] ------------[ cut here ]------------ [T24203] kernel BUG at mm/filemap.c:162! [T24203] Oops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI [T24203] CPU: 1 UID: 0 PID: 24203 Comm: stress-ng Not tainted 6.10.0-rc6-next-20240703-00016-g09a756327684 #1417 [T24203] Hardware name: Micro-Star International Co., Ltd. Alpha 15 B5EEK/MS-158L, BIOS E158LAMS.107 11/10/2021 [T24203] RIP: 0010:filemap_unaccount_folio+0xcf/0x170 [T24203] Code: 00 00 48 8b 06 a8 40 0f 84 a3 00 00 00 8b 43 50 83 c0 01 85 c0 0f 8e 66 ff ff ff 48 c7 c6 48 e4 aa bc 48 89 df e8 31 32 03 00 <0f> 0b 5b 5d 41 5c e9 71 7f 92 00 44 89 e2 be 17 00 00 00 48 89 df [T24203] RSP: 0018:ffffb1a4e01aba88 EFLAGS: 00010046 [T24203] RAX: 0000000000000039 RBX: ffffd864ca565380 RCX: 0000000000000027 [T24203] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff9bceee657780 [T24203] RBP: ffff9bc1a0681040 R08: 0000000000000000 R09: 0000000000000003 [T24203] R10: ffffb1a4e01ab940 R11: ffffffffbcc82940 R12: ffff9bc1a0681040 [T24203] R13: 0000000000000000 R14: ffff9bc1a0681048 R15: ffffd864ca565380 [T24203] FS: 00007f944cb0df40(0000) GS:ffff9bceee640000(0000) knlGS:0000000000000000 [T24203] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [T24203] CR2: 00007ffe0ec9f948 CR3: 0000000150be4000 CR4: 0000000000750ef0 [T24203] PKRU: 55555554 [T24203] Call Trace: [T24203] <TASK> [T24203] ? die+0x31/0x80 [T24203] ? do_trap+0xf1/0x100 [T24203] ? filemap_unaccount_folio+0xcf/0x170 [T24203] ? do_error_trap+0x60/0x80 [T24203] ? filemap_unaccount_folio+0xcf/0x170 [T24203] ? exc_invalid_op+0x4d/0x70 [T24203] ? filemap_unaccount_folio+0xcf/0x170 [T24203] ? asm_exc_invalid_op+0x1a/0x20 [T24203] ? filemap_unaccount_folio+0xcf/0x170 [T24203] ? filemap_unaccount_folio+0xcf/0x170 [T24203] ? __filemap_remove_folio+0x33/0x1a0 [T24203] ? xas_find+0x159/0x1c0 [T24203] ? srso_alias_return_thunk+0x5/0xfbef5 [T24203] ? find_lock_entries+0x229/0x330 [T24203] ? srso_alias_return_thunk+0x5/0xfbef5 [T24203] ? unmap_mapping_folio+0x75/0x130 [T24203] ? filemap_remove_folio+0x3c/0xa0 [T24203] ? truncate_inode_folio+0x1e/0x30 [T24203] ? shmem_undo_range+0x15c/0x6f0 [T24203] ? bio_integrity_unpin_bvec+0xf/0x60 [T24203] ? shmem_evict_inode+0x109/0x260 [T24203] ? swake_up_locked+0x50/0x50 [T24203] ? evict+0xbf/0x1c0 [T24203] ? __dentry_kill+0x6c/0x170 [T24203] ? dput+0xe6/0x1b0 [T24203] ? __fput+0x13c/0x2c0 [T24203] ? task_work_run+0x57/0x80 [T24203] ? syscall_exit_to_user_mode+0x196/0x1a0 [T24203] ? do_syscall_64+0x6b/0x170 [T24203] ? entry_SYSCALL_64_after_hwframe+0x55/0x5d [T24203] </TASK> [T24203] Modules linked in: ccm snd_seq_dummy snd_hrtimer snd_seq_midi snd_seq_midi_event snd_rawmidi snd_seq snd_seq_device rfcomm cmac bnep nls_ascii nls_cp437 vfat fat snd_ctl_led snd_hda_codec_realtek snd_hda_codec_generic snd_hda_codec_hdmi snd_hda_scodec_component btusb btrtl btintel snd_hda_intel btbcm snd_intel_dspcfg btmtk snd_hda_codec snd_soc_dmic snd_acp3x_rn uvcvideo snd_acp3x_pdm_dma bluetooth amd_atl snd_hwdep snd_soc_core videobuf2_vmalloc snd_hda_core uvc videobuf2_memops videobuf2_v4l2 snd_pcm_oss videodev snd_mixer_oss snd_pcm snd_rn_pci_acp3x snd_acp_config videobuf2_common snd_timer msi_wmi snd_soc_acpi ecdh_generic ecc mc sparse_keymap snd edac_mce_amd wmi_bmof ccp soundcore snd_pci_acp3x k10temp ac battery button hid_sensor_gyro_3d hid_sensor_als hid_sensor_magn_3d hid_sensor_accel_3d hid_sensor_prox joydev hid_sensor_trigger industrialio_triggered_buffer kfifo_buf industrialio amd_pmc hid_sensor_iio_common evdev hid_multitouch serio_raw mt7921e mt7921_common mt792x_lib mt76_connac_lib mt76 [T24203] mac80211 libarc4 cfg80211 rfkill msr fuse nvme_fabrics efi_pstore configfs efivarfs autofs4 ext4 crc32c_generic mbcache jbd2 usbhid amdgpu i2c_algo_bit drm_ttm_helper ttm xhci_pci drm_exec drm_suballoc_helper xhci_hcd amdxcp drm_buddy hid_sensor_hub usbcore gpu_sched nvme mfd_core hid_generic crc32c_intel psmouse amd_sfh i2c_piix4 drm_display_helper usb_common nvme_core r8169 crc16 i2c_hid_acpi i2c_hid hid i2c_designware_platform i2c_designware_core [T24203] ---[ end trace 0000000000000000 ]--- [T24203] RIP: 0010:filemap_unaccount_folio+0xcf/0x170 [T24203] Code: 00 00 48 8b 06 a8 40 0f 84 a3 00 00 00 8b 43 50 83 c0 01 85 c0 0f 8e 66 ff ff ff 48 c7 c6 48 e4 aa bc 48 89 df e8 31 32 03 00 <0f> 0b 5b 5d 41 5c e9 71 7f 92 00 44 89 e2 be 17 00 00 00 48 89 df [T24203] RSP: 0018:ffffb1a4e01aba88 EFLAGS: 00010046 [T24203] RAX: 0000000000000039 RBX: ffffd864ca565380 RCX: 0000000000000027 [T24203] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff9bceee657780 [T24203] RBP: ffff9bc1a0681040 R08: 0000000000000000 R09: 0000000000000003 [T24203] R10: ffffb1a4e01ab940 R11: ffffffffbcc82940 R12: ffff9bc1a0681040 [T24203] R13: 0000000000000000 R14: ffff9bc1a0681048 R15: ffffd864ca565380 [T24203] FS: 00007f944cb0df40(0000) GS:ffff9bceee640000(0000) knlGS:0000000000000000 [T24203] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [T24203] CR2: 00007ffe0ec9f948 CR3: 0000000150be4000 CR4: 0000000000750ef0 [T24203] PKRU: 55555554