I've spent a few days enhancing trinity's use of mmap's, trying to make it reproduce https://lkml.org/lkml/2013/12/4/499 Instead, I hit this.. related ? Oops: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC Modules linked in: tun snd_seq_dummy rfcomm fuse hidp bnep can_raw caif_socket caif phonet af_rxrpc llc2 af_key rose netrom pppoe pppox ppp_generic slhc scsi_transport_iscsi bluetooth nfnetlink can_bcm can af_802154 ipt_ULOG nfc irda crc_ccitt rds x25 atm appletalk ipx p8023 psnap p8022 llc ax25 cfg80211 rfkill xfs snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_intel snd_hda_codec snd_hwdep snd_seq snd_seq_device snd_pcm snd_page_alloc libcrc32c snd_timer e1000e snd coretemp hwmon ptp x86_pkg_temp_thermal shpchp serio_raw pps_core kvm_intel pcspkr kvm crct10dif_pclmul crc32c_intel usb_debug ghash_clmulni_intel soundcore microcode CPU: 3 PID: 11758 Comm: trinity-child3 Not tainted 3.13.0-rc2+ #23 task: ffff8800719415d0 ti: ffff8801cfa74000 task.ti: ffff8801cfa74000 RIP: 0010:[<ffffffff8118e415>] [<ffffffff8118e415>] pgtable_trans_huge_withdraw+0x55/0xc0 RSP: 0000:ffff8801cfa75ac8 EFLAGS: 00010206 RAX: 00000000060e4800 RBX: 0000000000000000 RCX: 0000000000000027 RDX: 0000000000000000 RSI: ffff880183920000 RDI: ffff880183920000 RBP: ffff8801cfa75ae8 R08: ffff880071941cd8 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: ffff880183920000 R13: ffffea0000000000 R14: 0000000000000020 R15: 0000000040000000 FS: 00007f6dd67aa740(0000) GS:ffff880244e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000020 CR3: 00000001ce03a000 CR4: 00000000001407e0 DR0: 0000000000000000 DR1: 00000000018efae0 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000f5060a Stack: ffffea0000000000 ffff8801cfa75c40 80000001a82008e7 ffff8801cfa75c40 ffff8801cfa75b20 ffffffff811b13e2 ffff8801e0a8e9f0 ffff8801aa3ab000 ffffffffffffffff 0000000040200000 ffff8801cfa75c40 ffff8801cfa75bf0 Call Trace: [<ffffffff811b13e2>] zap_huge_pmd+0x62/0x140 [<ffffffff8117ac58>] unmap_single_vma+0x678/0x830 [<ffffffff8117bea9>] unmap_vmas+0x49/0x90 [<ffffffff81184da5>] exit_mmap+0xc5/0x170 [<ffffffff8105104b>] mmput+0x6b/0x100 [<ffffffff81055a18>] do_exit+0x298/0xce0 [<ffffffff8105782c>] do_group_exit+0x4c/0xc0 [<ffffffff8106a671>] get_signal_to_deliver+0x2d1/0x930 [<ffffffff810024a8>] do_signal+0x48/0x610 [<ffffffff810a9af9>] ? get_lock_stats+0x19/0x60 [<ffffffff810aa27e>] ? put_lock_stats.isra.28+0xe/0x30 [<ffffffff810aa7de>] ? lock_release_holdtime.part.29+0xee/0x170 [<ffffffff8114f18e>] ? context_tracking_user_exit+0x4e/0x190 [<ffffffff810ad1f5>] ? trace_hardirqs_on_caller+0x115/0x1e0 [<ffffffff81002acc>] do_notify_resume+0x5c/0xa0 [<ffffffff817587c6>] retint_signal+0x46/0x90 Code: c1 e0 06 4a 8b 44 28 30 0f b7 00 38 c4 74 79 4c 89 e7 e8 af 03 eb ff 4c 89 e7 48 c1 e8 0c 48 c1 e0 06 49 8b 5c 05 20 4c 8d 73 20 <4c> 3b 73 20 74 35 e8 90 03 eb ff 4c 89 f7 48 89 c2 48 8b 43 20 RIP [<ffffffff8118e415>] pgtable_trans_huge_withdraw+0x55/0xc0 RSP <ffff8801cfa75ac8> pgtable = pmd_huge_pte(mm, pmdp); if (list_empty(&pgtable->lru)) 231: 4c 8d 73 20 lea 0x20(%rbx),%r14 235: 4c 3b 73 20 cmp 0x20(%rbx),%r14 <--- faulting instruction. 239: 74 35 je 270 <pgtable_trans_huge_withdraw+0x90> -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@xxxxxxxxx. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: <a href=mailto:"dont@xxxxxxxxx";> email@xxxxxxxxx </a>