Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753916AbdLMViC (ORCPT ); Wed, 13 Dec 2017 16:38:02 -0500 Received: from mail-qt0-f181.google.com ([209.85.216.181]:36331 "EHLO mail-qt0-f181.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753360AbdLMVh7 (ORCPT ); Wed, 13 Dec 2017 16:37:59 -0500 X-Google-Smtp-Source: ACJfBouQKTRVFJdBroRiQOtlLLAheI4Z6qQ/i1Xw/gPnDxh9qWHzhkP3muxZ1jHmLWwDOeIPBemVFQ== Date: Wed, 13 Dec 2017 13:37:56 -0800 From: Tejun Heo To: Laura Abbott Cc: Zefan Li , linux-kernel@vger.kernel.org, regressions@leemhuis.info Subject: Re: Crash in cgroup_procs_show Message-ID: <20171213213756.GX3919388@devbig577.frc2.facebook.com> References: <39625861-99c0-1c15-08a6-49b9d678c4c2@redhat.com> <20171213152914.GN3919388@devbig577.frc2.facebook.com> <121dc065-89ba-98ab-68ff-e86f1a636b06@redhat.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <121dc065-89ba-98ab-68ff-e86f1a636b06@redhat.com> User-Agent: Mutt/1.5.21 (2010-09-15) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1015 Lines: 34 Hello, Laura. On Wed, Dec 13, 2017 at 09:10:36AM -0800, Laura Abbott wrote: > On 12/13/2017 07:29 AM, Tejun Heo wrote: > >Hello, Laura. > > > >On Tue, Dec 12, 2017 at 04:38:33PM -0800, Laura Abbott wrote: > >>Hi, > >> > >>Fedora got a bug report on 4.14.4 of a crash on > >>reboot https://bugzilla.redhat.com/show_bug.cgi?id=1525279 > >> > >> BUG: unable to handle kernel NULL pointer dereference at 0000000000000254 > >> IP: __task_pid_nr_ns+0xc7/0xf0 > > > >Any chance you can map this back to the source line with addr2line? > > > >Thanks. > > > > annotated with decode_stacktrace.sh > > > IP: __task_pid_nr_ns (/usr/src/debug/kernel-4.14.fc26/linux-4.14.4-200.fc26.x86_64/kernel/pid.c:506 /usr/src/debug/kernel-4.14.fc26/linux-4.14.4-200.fc26.x86_64/kernel/pid.c:535) Thank you very much for the trace. I *think* I found the place where the css task iterator points to a task without holding its ref allowing the task to go away before dereferenced. I'll update once I learn more. Thanks. -- tejun