From: Andrew Morton <akpm@linux-foundation.org>
To: linux-mm@kvack.org
Cc: bugzilla-daemon@bugzilla.kernel.org,
Matthew Wilcox <willy@infradead.org>,
peter@rimuhosting.com
Subject: Re: [Bug 198497] New: handle_mm_fault / xen_pmd_val / radix_tree_lookup_slot Null pointer
Date: Thu, 18 Jan 2018 13:55:18 -0800 [thread overview]
Message-ID: <20180118135518.639141f0b0ea8bb047ab6306@linux-foundation.org> (raw)
In-Reply-To: <bug-198497-27@https.bugzilla.kernel.org/>
(switched to email. Please respond via emailed reply-to-all, not via the
bugzilla web interface).
On Thu, 18 Jan 2018 01:21:56 +0000 bugzilla-daemon@bugzilla.kernel.org wrote:
> https://bugzilla.kernel.org/show_bug.cgi?id=198497
>
> Bug ID: 198497
> Summary: handle_mm_fault / xen_pmd_val / radix_tree_lookup_slot
> Null pointer
> Product: Memory Management
> Version: 2.5
> Kernel Version: Linux app1.vpsgate.com
> 4.14.13-rh10-20180115190010.xenU.i386 #1 SMP Mon Jan
> 15 19:04:55 UTC 2018 i686 GNU/Linux
> Hardware: Intel
> OS: Linux
> Tree: Mainline
> Status: NEW
> Severity: high
> Priority: P1
> Component: Page Allocator
> Assignee: akpm@linux-foundation.org
> Reporter: peter@rimuhosting.com
> Regression: No
Does this look familiar to anyone?
> On a Xen VM running as pvh
>
> [ 3.499843] Adding 131068k swap on /dev/xvda9. Priority:-2 extents:1
> across:131068k SSFS
> [ 3.547312] EXT4-fs (xvda1): re-mounted. Opts: (null)
> [ 3.988606] EXT4-fs (xvda1): re-mounted. Opts: errors=remount-ro
> [ 24.647744] BUG: unable to handle kernel NULL pointer dereference at
> 00000008
> [ 24.647801] IP: __radix_tree_lookup+0x14/0xa0
> [ 24.647811] *pdpt = 00000000253d6027 *pde = 0000000000000000
> [ 24.647828] Oops: 0000 [#1] SMP
> [ 24.647842] CPU: 5 PID: 3600 Comm: java Not tainted
> 4.14.13-rh10-20180115190010.xenU.i386 #1
> [ 24.647855] task: e52518c0 task.stack: e4e7a000
> [ 24.647866] EIP: __radix_tree_lookup+0x14/0xa0
> [ 24.647876] EFLAGS: 00010286 CPU: 5
> [ 24.647884] EAX: 00000004 EBX: 00000007 ECX: 00000000 EDX: 00000000
> [ 24.647895] ESI: 00000000 EDI: 00000000 EBP: e4e7bdb8 ESP: e4e7bda0
> [ 24.647904] DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0069
> [ 24.647917] CR0: 80050033 CR2: 00000008 CR3: 25360000 CR4: 00002660
> [ 24.647930] Call Trace:
> [ 24.647942] radix_tree_lookup_slot+0x13/0x30
> [ 24.647955] find_get_entry+0x1d/0x120
> [ 24.647963] pagecache_get_page+0x1f/0x230
> [ 24.647975] lookup_swap_cache+0x42/0x140
> [ 24.647983] swap_readahead_detect+0x66/0x2e0
> [ 24.647993] do_swap_page+0x1fa/0x860
> [ 24.648010] ? __raw_callee_save___pv_queued_spin_unlock+0x9/0x10
> [ 24.648026] ? xen_pmd_val+0x10/0x20
> [ 24.648035] handle_mm_fault+0x6f8/0x1020
> [ 24.648046] __do_page_fault+0x18a/0x450
> [ 24.648055] ? vmalloc_sync_all+0x250/0x250
> [ 24.648063] do_page_fault+0x21/0x30
> [ 24.648074] common_exception+0x45/0x4a
> [ 24.648082] EIP: 0xb76d873e
> [ 24.648088] EFLAGS: 00010206 CPU: 5
> [ 24.648096] EAX: 76a10000 EBX: 76a1cd14 ECX: 00000006 EDX: 00000006
> [ 24.648105] ESI: 00000040 EDI: b796c380 EBP: 77881008 ESP: 77880ff8
> [ 24.648115] DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
> [ 24.648124] Code: ff ff ff 00 47 03 e9 69 ff ff ff 8b 45 08 89 06 e9 1f ff
> ff ff 66 90 55 89 e5 57 89 d7 56 53 83 ec 0c 89 45 ec 89 4d e8 8b 45 ec <8b> 58
> 04 89 d8 83 e0 03 48 89 5d f0 75 64 89 d8 83 e0 fe 0f b6
> [ 24.648195] EIP: __radix_tree_lookup+0x14/0xa0 SS:ESP: 0069:e4e7bda0
> [ 24.648205] CR2: 0000000000000008
> [ 24.648273] ---[ end trace ed356e59f215ce07 ]---
> [ 28.890326] BUG: unable to handle kernel NULL pointer dereference at
> 00000008
> [ 28.890372] IP: __radix_tree_lookup+0x14/0xa0
> [ 28.890382] *pdpt = 0000000025488027 *pde = 0000000000000000
> [ 28.890396] Oops: 0000 [#2] SMP
> [ 28.890408] CPU: 7 PID: 3542 Comm: java Tainted: G D
> 4.14.13-rh10-20180115190010.xenU.i386 #1
> [ 28.890423] task: e8691080 task.stack: e52a6000
> [ 28.890433] EIP: __radix_tree_lookup+0x14/0xa0
> [ 28.890442] EFLAGS: 00010286 CPU: 7
> [ 28.890449] EAX: 00000004 EBX: 00000007 ECX: 00000000 EDX: 00000000
> [ 28.890459] ESI: 00000000 EDI: 00000000 EBP: e52a7db8 ESP: e52a7da0
> [ 28.890469] DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0069
> [ 28.890484] CR0: 80050033 CR2: 00000008 CR3: 25161000 CR4: 00002660
> [ 28.890498] Call Trace:
> [ 28.890510] radix_tree_lookup_slot+0x13/0x30
> [ 28.890522] find_get_entry+0x1d/0x120
> [ 28.890531] pagecache_get_page+0x1f/0x230
> [ 28.890541] lookup_swap_cache+0x42/0x140
> [ 28.890550] swap_readahead_detect+0x66/0x2e0
> [ 28.890559] do_swap_page+0x1fa/0x860
> [ 28.890573] ? __raw_callee_save___pv_queued_spin_unlock+0x9/0x10
> [ 28.890588] ? xen_pmd_val+0x10/0x20
> [ 28.890597] handle_mm_fault+0x6f8/0x1020
> [ 28.890607] __do_page_fault+0x18a/0x450
> [ 28.890616] ? vmalloc_sync_all+0x250/0x250
> [ 28.890681] do_page_fault+0x21/0x30
> [ 28.890707] common_exception+0x45/0x4a
> [ 28.890715] EIP: 0xb779774f
> [ 28.890722] EFLAGS: 00010202 CPU: 7
> [ 28.890730] EAX: 00000000 EBX: 66dd9d6c ECX: 02000000 EDX: 00000001
> [ 28.890740] ESI: 02000000 EDI: 00000000 EBP: 674fe068 ESP: 674fe058
> [ 28.890751] DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 007b
> [ 28.890759] Code: ff ff ff 00 47 03 e9 69 ff ff ff 8b 45 08 89 06 e9 1f ff
> ff ff 66 90 55 89 e5 57 89 d7 56 53 83 ec 0c 89 45 ec 89 4d e8 8b 45 ec <8b> 58
> 04 89 d8 83 e0 03 48 89 5d f0 75 64 89 d8 83 e0 fe 0f b6
> [ 28.890830] EIP: __radix_tree_lookup+0x14/0xa0 SS:ESP: 0069:e52a7da0
> [ 28.890841] CR2: 0000000000000008
> [ 28.890886] ---[ end trace ed356e59f215ce08 ]---
>
> # java -version
> java version "1.7.0_51"
> Java(TM) SE Runtime Environment (build 1.7.0_51-b13)
> Java HotSpot(TM) Server VM (build 24.51-b03, mixed mode)
>
> ~# free -m
> total used free shared buffers cached
> Mem: 5418 572 4846 0 25 245
> -/+ buffers/cache: 301 5117
> Swap: 127 0 127
>
> # uptime
> 01:21:08 up 2:02, 3 users, load average: 13.47, 13.65, 13.63
>
> --
> You are receiving this mail because:
> You are the assignee for the bug.
--
To unsubscribe, send a message with 'unsubscribe linux-mm' in
the body to majordomo@kvack.org. For more info on Linux MM,
see: http://www.linux-mm.org/ .
Don't email: <a href=mailto:"dont@kvack.org"> email@kvack.org </a>
next parent reply other threads:[~2018-01-18 21:55 UTC|newest]
Thread overview: 16+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <bug-198497-27@https.bugzilla.kernel.org/>
2018-01-18 21:55 ` Andrew Morton [this message]
2018-01-18 22:18 ` Laura Abbott
2018-01-19 3:04 ` Matthew Wilcox
2018-01-19 3:14 ` xen
2018-01-19 13:21 ` Matthew Wilcox
2018-01-19 17:30 ` Laura Abbott
2018-01-26 6:54 ` xen
2018-01-26 19:40 ` Matthew Wilcox
2018-01-29 22:26 ` xen
2018-01-31 10:54 ` Matthew Wilcox
2018-01-31 23:02 ` Tetsuo Handa
2018-02-01 9:48 ` Matthew Wilcox
2018-02-09 14:47 ` Matthew Wilcox
2018-04-12 17:12 ` Andrew Morton
2018-04-12 17:28 ` Matthew Wilcox
2018-01-19 13:33 ` Matthew Wilcox
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20180118135518.639141f0b0ea8bb047ab6306@linux-foundation.org \
--to=akpm@linux-foundation.org \
--cc=bugzilla-daemon@bugzilla.kernel.org \
--cc=linux-mm@kvack.org \
--cc=peter@rimuhosting.com \
--cc=willy@infradead.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox