Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754155Ab0FXHPP (ORCPT ); Thu, 24 Jun 2010 03:15:15 -0400 Received: from fg-out-1718.google.com ([72.14.220.159]:63014 "EHLO fg-out-1718.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752726Ab0FXHPM (ORCPT ); Thu, 24 Jun 2010 03:15:12 -0400 DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:x-enigmail-version:content-type :content-transfer-encoding; b=bKpaGlIyLfvblp+xNzQ7BEqblQzw/Ktnn0bYhyLzJ2GXKtWZnYsxi06DWyUPfIHxZd xx0L8hbejrd7gLTiwsrlbN50jRsqW49vABzwXKHhKIWrx9Jrff0AmKr8wK4lp7T7uhnW sWf2LvkdCPtl/6e5Q2wvUxOHCsrfBm4oFQbDM= Message-ID: <4C2305F9.5010306@gmail.com> Date: Thu, 24 Jun 2010 09:15:05 +0200 From: Tejun Heo User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.9.1.10) Gecko/20100512 Thunderbird/3.0.5 MIME-Version: 1.0 To: Xiaotian Feng CC: Miles Lane , LKML , Alexander Viro , Greg Kroah-Hartman , Andrew Morton , Cliff Wickman Subject: Re: 2.6.35-rc3 -- kernel BUG at mm/vmalloc.c:216! - invalid opcode: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC References:

In-Reply-To: X-Enigmail-Version: 1.0.1 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 2527 Lines: 54 Hello, On 06/24/2010 07:22 AM, Xiaotian Feng wrote: > I can reproduce it with the same ... > >> [ 1046.984453] kernel BUG at mm/vmalloc.c:216! >> [ 1046.984463] invalid opcode: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC >> [ 1046.984484] last sysfs file: /sys/devices/system/cpu/cpu1/crash_notes >> [ 1046.984495] Modules linked in: aes_i586 aes_generic binfmt_misc >> ipv6 snd_hda_codec_realtek arc4 snd_hda_intel ecb snd_hda_codec ath9k >> snd_hwdep snd_pcm_oss ath9k_common snd_mixer_oss ath9k_hw snd_pcm >> snd_seq_dummy ath snd_seq_oss snd_seq_midi snd_rawmidi mac80211 >> snd_seq_midi_event snd_seq snd_timer cfg80211 snd_seq_device rtc_cmos >> snd rtc_core rtc_lib snd_page_alloc rng_core led_class processor >> battery ac sg uhci_hcd ehci_hcd sd_mod usbcore thermal >> [ 1046.984668] >> [ 1046.984680] Pid: 15038, comm: head Not tainted 2.6.35-rc3 #1 1000HE/1000HE >> [ 1046.984691] EIP: 0060:[] EFLAGS: 00010246 CPU: 0 >> [ 1046.984705] EIP is at vmalloc_to_page+0x16/0xd1 >> [ 1046.984714] EAX: 00000000 EBX: c1527000 ECX: c6e0b2a8 EDX: f7ffe000 >> [ 1046.984725] ESI: c6e0b2a8 EDI: c133234c EBP: d6645f20 ESP: d6645f18 >> [ 1046.984736] DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068 >> [ 1046.984748] Process head (pid: 15038, ti=d6645000 task=ca6c6900 >> task.ti=d6645000) >> [ 1046.984757] Stack: >> [ 1046.984764] d6644000 c6e0341c d6645f28 c10a3423 d6645f34 c1204bf8 >> c1204bdc d6645f44 >> [ 1046.984800] <0> c1201ebc c93ea400 f70a12c0 d6645f70 c10e594f >> c112b2df 00002000 bfa194ec >> [ 1046.984840] <0> 00000000 c93ea414 c133234c e07cd600 bfa194ec >> c10e58c1 d6645f8c c10a6223 >> [ 1046.984883] Call Trace: >> [ 1046.984902] [] ? per_cpu_ptr_to_phys+0x5b/0x74 >> [ 1046.984920] [] ? show_crash_notes+0x1c/0x30 It's probably the same bug Cliff Wickman reported. per_cpu_ptr_to_phys() was using wrong first chunk match logic which ends up passing wrong addresses to vmalloc_to_page(). I have the following fix patch queued in percpu#for-linus branch and was waiting for Linus to come back. http://git.kernel.org/?p=linux/kernel/git/tj/percpu.git;a=commitdiff_plain;h=9983b6f0cf8263e51bcf4c8a9dc0c1ef175b3c60;hp=a92d3ff9e5dbd958d8008a3e7a573e988e370ca3 Can you please verify the above patch fixes the problem? Thanks. -- tejun -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/