Red Hat Enteprise Linux 7 でリストが破損したため alloc_huge_page 関数内の region_chg 関数でシステムがクラッシュする

Issue

• リストが破損しているため、システムがクラッシュします。

------------[ cut here ]------------
WARNING: at lib/list_debug.c:62 __list_del_entry+0x82/0xd0()
list_del corruption. next->prev should be ffff881d2a35a160, but was ffff883f237befa0
[...]
CPU:13 PID:114773 Comm: java Not tainted 3.10.0-229.el7.x86_64 #1
[...]
Call Trace:
 [<ffffffff81603f36>] dump_stack+0x19/0x1b
 [<ffffffff8106e28b>] warn_slowpath_common+0x6b/0xb0
 [<ffffffff8106e32c>] warn_slowpath_fmt+0x5c/0x80
 [<ffffffff812ed4f2>] __list_del_entry+0x82/0xd0
 [<ffffffff812ed54d>] list_del+0xd/0x30
 [<ffffffff8119a18e>] region_add+0x9e/0xe0
 [<ffffffff8119b7dc>] alloc_huge_page+0x28c/0x490
 [<ffffffff8119dc04>] hugetlb_fault+0x404/0x910
 [<ffffffff81609259>] ? schedule+0x29/0x70
 [<ffffffff81182d68>] handle_mm_fault+0xbb8/0xd60
 [<ffffffff812e2974>] ? call_rwsem_down_read_failed+0x14/0x30
 [<ffffffff8160f1e6>] __do_page_fault+0x156/0x520
 [<ffffffff810d4f12>] ? do_futex+0x172/0x5b0
 [<ffffffff810b1c4c>] ? update_curr+0xcc/0x150
 [<ffffffff810ad726>] ?__dequeue_entity+0x26/0x40
 [<ffffffff81012609>] ?__switch_to+0x179/0x4a0
 [<ffffffff8160f5ca>] do_page_fault+0x1a/0x70
 [<ffffffff8160b808>] page_fault+0x28/

• region_chg() でシステムがクラッシュします。

BUG: unable to handle kernel NULL pointer dereference at 0000000000000008
IP:[<ffffffff8119a2a7>] region_chg+0xd7/0x100
PGD 1c32a0f067 PUD 1badd74067 PMD 0 
Oops:0000 [#1] SMP 
[...]
CPU:11 PID:114768 Comm: java Tainted:G        W   --------------   3.10.0-229.el7.x86_64 #1
[...]
Call Trace:
 [<ffffffff8119a336>] vma_needs_reservation+0x66/0xb0
 [<ffffffff8119de8f>] hugetlb_fault+0x68f/0x910
 [<ffffffff81182d68>] handle_mm_fault+0xbb8/0xd60
 [<ffffffff812e2974>] ? call_rwsem_down_read_failed+0x14/0x30
 [<ffffffff8160f1e6>] __do_page_fault+0x156/0x520
 [<ffffffff810d4f12>] ? do_futex+0x172/0x5b0
 [<ffffffff810b1c4c>] ? update_curr+0xcc/0x150
 [<ffffffff810ad726>] ?__dequeue_entity+0x26/0x40
 [<ffffffff81012609>] ?__switch_to+0x179/0x4a0
 [<ffffffff8160f5ca>] do_page_fault+0x1a/0x70
 [<ffffffff8160b808>] page_fault+0x28/0x30