From mboxrd@z Thu Jan 1 00:00:00 1970 From: bugzilla-daemon@bugzilla.kernel.org Subject: [Bug 60518] Heavy network traffic between guest and host triggers kernel oops Date: Tue, 06 Aug 2013 08:55:31 +0000 Message-ID: References: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: QUOTED-PRINTABLE To: kvm@vger.kernel.org Return-path: Received: from mail.kernel.org ([198.145.19.201]:43964 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1754400Ab3HFIzf convert rfc822-to-8bit (ORCPT ); Tue, 6 Aug 2013 04:55:35 -0400 Received: from mail.kernel.org (localhost [127.0.0.1]) by mail.kernel.org (Postfix) with ESMTP id 99423201DF for ; Tue, 6 Aug 2013 08:55:33 +0000 (UTC) Received: from bugzilla2.web.kernel.org (bugzilla2.web.kernel.org [172.20.200.52]) by mail.kernel.org (Postfix) with ESMTP id 435DA201CB for ; Tue, 6 Aug 2013 08:55:31 +0000 (UTC) In-Reply-To: Sender: kvm-owner@vger.kernel.org List-ID: https://bugzilla.kernel.org/show_bug.cgi?id=3D60518 Tim K=C3=A4ck changed: What |Removed |Added -----------------------------------------------------------------------= ----- CC| |timkack@gmail.com --- Comment #3 from Tim K=C3=A4ck --- This does unfortunately still happens in 3.10 Linux ArchSTAR 3.10.3-1-ARCH #1 SMP PREEMPT Fri Jul 26 11:26:59 CEST 20= 13 x86_64 GNU/Linux Relevant oops trace: BUG: unable to handle kernel NULL pointer dereference at (nul= l) IP: [] put_page+0x5/0x40 PGD 0=20 Oops: 0000 [#1] PREEMPT SMP=20 Modules linked in: vhost_net macvtap macvlan fuse joydev hid_apple hid= p ipt_MASQUERADE iptable_nat nf_nat_ipv4 nf_nat nf snd_timer pci_hotplug parport ptp pps_core libphy lpc_ich snd i5k_amb soundcore button processor pci_stub vboxpci(O) vboxnetflt(O) vbo..._mod= mptbase CPU: 3 PID: 4234 Comm: vhost-4233 Tainted: P O 3.10.3-1-ARCH= #1 Hardware name: Dell Inc. Precision WorkStation T7400 /0RW199, BIOS A0= 4 08/21/2008 task: ffff880427672a30 ti: ffff8803b9a22000 task.ti: ffff8803b9a22000 RIP: 0010:[] [] put_page+0x5/0x40 RSP: 0018:ffff8803b9a23c70 EFLAGS: 00010202 RAX: 0000000000000140 RBX: ffff8803996b3ec0 RCX: 0000000000000000 RDX: ffff8803b9a23fd8 RSI: ffff8803996b3ec0 RDI: 0000000000000000 RBP: ffff8803b9a23c90 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000012 R13: ffff8803a7a38700 R14: 000000000000000c R15: ffff8803a7a38700 FS: 0000000000000000(0000) GS:ffff88043fcc0000(0000) knlGS:0000000000= 000000 CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b CR2: 0000000000000000 CR3: 000000034a32f000 CR4: 00000000000427e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Stack: ffffffff813b8f38 ffff8803a7a38700 ffff8803a7a38700 ffffffffa005f1b4 ffff8803b9a23ca8 ffffffff813b8fe4 ffff8803be588800 ffff8803b9a23cd0 ffffffff813b9046 ffff8803be588800 000000000000b38a 000000000000b396 Call Trace: [] ? skb_release_data+0x88/0x110 [] ? tun_get_user+0x724/0x800 [tun] [] skb_release_all+0x24/0x30 [] kfree_skb+0x36/0xe0 [] tun_get_user+0x724/0x800 [tun] [] tun_sendmsg+0x54/0x80 [tun] [] handle_tx+0x180/0x560 [vhost_net] [] handle_tx_kick+0x15/0x20 [vhost_net] [] vhost_worker+0xf7/0x1a0 [vhost_net] [] ? vhost_work_flush+0x100/0x100 [vhost_net] [] kthread+0xc0/0xd0 [] ? kthread_create_on_node+0x120/0x120 [] ret_from_fork+0x7c/0xb0 [] ? kthread_create_on_node+0x120/0x120 Code: d0 f3 90 49 8b 0c 24 f7 c1 00 00 00 01 75 f2 83 80 44 e0 ff ff 0= 1 e9 f1 fe ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 66 66 90 ...0f 94 c0 84= =20 RIP [] put_page+0x5/0x40 RSP CR2: 0000000000000000 ---[ end trace df427221626605d8 ]--- Reproduction steps (almost 100% of the time):=20 1) set guest A to be NFS server 2) create deep folder structure with lots of tiny files and share it /s= hare 3) mount on guest B and on host 4) Copy 2 Gb file from Guest B to /share 5) At the same time do "find /share -print > /dev/null' on host --=20 You are receiving this mail because: You are watching the assignee of the bug.