From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <linux-kernel-owner@vger.kernel.org>
Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand
        id S1754608AbdC1HWN (ORCPT <rfc822;w@1wt.eu>);
        Tue, 28 Mar 2017 03:22:13 -0400
Received: from szxga01-in.huawei.com ([45.249.212.187]:4800 "EHLO
        dggrg01-dlp.huawei.com" rhost-flags-OK-FAIL-OK-FAIL)
        by vger.kernel.org with ESMTP id S1754313AbdC1HWM (ORCPT
        <rfc822;linux-kernel@vger.kernel.org>);
        Tue, 28 Mar 2017 03:22:12 -0400
From: Yisheng Xie <xieyisheng1@huawei.com>
Subject: [RFC]mm/zsmalloc,: trigger BUG_ON in function zs_map_object.
To: <minchan@kernel.org>, <ngupta@vflare.org>,
        <sergey.senozhatsky.work@gmail.com>
CC: <linux-mm@kvack.org>,
        Linux Kernel Mailing List <linux-kernel@vger.kernel.org>,
        Xishi Qiu <qiuxishi@huawei.com>, Hanjun Guo <guohanjun@huawei.com>
Message-ID: <e8aa282e-ad53-bfb8-2b01-33d2779f247a@huawei.com>
Date: Tue, 28 Mar 2017 15:20:22 +0800
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101
 Thunderbird/45.1.0
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
X-Originating-IP: [10.177.29.40]
X-CFilter-Loop: Reflected
X-Mirapoint-Virus-RAPID-Raw: score=unknown(0),
        refid=str=0001.0A020205.58DA0ED2.0084,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0,
        ip=0.0.0.0,
        so=2014-11-16 11:51:01,
        dmn=2013-03-21 17:37:32
X-Mirapoint-Loop-Id: c708e4a6873542a908c95c27ca915580
Sender: linux-kernel-owner@vger.kernel.org
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

Hi, all,

We had backport the no-lru migration to linux-4.1, meanwhile change the
ZS_MAX_ZSPAGE_ORDER to 3. Then we met a BUG_ON(!page[1]).

It rarely happen, and presently, what I get is:
[6823.316528s]obj=a160701f, obj_idx=15, class{size:2176,objs_per_zspage:15,pages_per_zspage:8}
[...]
[6823.316619s]BUG: failure at /home/ethan/kernel/linux-4.1/mm/zsmalloc.c:1458/zs_map_object()! ----> BUG_ON(!page[1])

It seems that we have allocated an object from a ZS_FULL group?
(Actually， I do not get the inuse number of this zspage, which I am trying to.)
And presently, I can not find why it happened. Any idea about it?

Any comment is more than welcome!

Thanks
Yisheng Xie