Re: Common [00/16] Sl[auo]b: Common code rework V8

[Christoph Lameter <cl@linux.com>]

[-- Attachment #1: Type: TEXT/PLAIN, Size: 377 bytes --]

On Thu, 2 Aug 2012, Glauber Costa wrote:

> After applying v8, and proceeding with cache deletion + later insertion
> as I've previously laid down, I can still see the bug I mentioned here.
>
> I am attaching the backtrace I've got with SLUB_DEBUG_ON. My first guess
> based on it would be a double free somewhere.

This looks like you are passing an invalid pointer to kfree.

[-- Attachment #2: Type: TEXT/PLAIN, Size: 2533 bytes --]

containers2 login: [   28.399559] general protection fault: 0000 [#1] SMP 

[   28.400532] CPU 0 

[   28.400532] Modules linked in:

[   28.400532] 

[   28.400532] Pid: 1143, comm: mkdir Not tainted 3.5.0-rc1+ #387 Bochs Bochs

[   28.400532] RIP: 0010:[<ffffffff8112fed3>]  [<ffffffff8112fed3>] virt_to_head_page+0x1e/0x2c

[   28.400532] RSP: 0018:ffff8800378a1db8  EFLAGS: 00010203

[   28.400532] RAX: 01ad998dadadad80 RBX: 6b6b6b6b6b6b6b6b RCX: ffff88003f388730

[   28.400532] RDX: ffffea0000000000 RSI: ffff88003f388708 RDI: 6b6b6b6b6b6b6b6b

[   28.400532] RBP: ffff8800378a1db8 R08: dead000000200200 R09: 2b508c806051e290

[   28.400532] R10: 0000000000000020 R11: ffff88003ea13b68 R12: ffff880037a8db38

[   28.400532] R13: ffffffff81110fef R14: ffff880037a50fd8 R15: 0000000000000000

[   28.400532] FS:  00007fe7352057c0(0000) GS:ffff88003ea00000(0000) knlGS:0000000000000000

[   28.400532] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b

[   28.400532] CR2: 00007f5004de9000 CR3: 000000003b6db000 CR4: 00000000000006f0

[   28.400532] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000

[   28.400532] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400

[   28.400532] Process mkdir (pid: 1143, threadinfo ffff8800378a0000, task ffff88003f388000)

[   28.400532] Stack:

[   28.400532]  ffff8800378a1de8 ffffffff81132b59 ffff880037a8dad0 ffff880037a8db38

[   28.400532]  0000000000000004 ffff880037a50fd8 ffff8800378a1e08 ffffffff81110fef

[   28.400532]  ffffc90000861000 ffffc90000184000 ffff8800378a1e28 ffffffff8113ee33

[   28.400532] Call Trace:

[   28.400532]  [<ffffffff81132b59>] kfree+0x4c/0xfb

[   28.400532]  [<ffffffff81110fef>] kmem_cache_destroy+0x53/0xa7

[   28.400532]  [<ffffffff8113ee33>] mybug+0x4a/0xa3

[   28.400532]  [<ffffffff814fa71c>] mem_cgroup_create+0x2db/0x423

[   28.400532]  [<ffffffff810a6f8e>] cgroup_mkdir+0xd1/0x37c

[   28.400532]  [<ffffffff8114df09>] vfs_mkdir+0x7e/0xcd

[   28.400532]  [<ffffffff8114f848>] sys_mkdirat+0x6f/0xae

[   28.400532]  [<ffffffff8114f8a0>] sys_mkdir+0x19/0x1b

[   28.400532]  [<ffffffff81523369>] system_call_fastpath+0x16/0x1b

[   28.400532] Code: f9 03 48 89 e5 48 83 e1 f8 f3 aa 5d c3 55 48 89 e5 e8 1e 78 f0 ff 48 c1 e8 0c 48 ba 00 00 00 00 00 ea ff ff 48 c1 e0 06 48 01 d0 <48> 8b 10 80 e6 80 74 04 48 8b 40 30 5d c3 55 48 89 e5 53 50 66 

[   28.400532] RIP  [<ffffffff8112fed3>] virt_to_head_page+0x1e/0x2c

[   28.400532]  RSP <ffff8800378a1db8>

[   28.440928] ---[ end trace 75e62f10600e2a23 ]---