lkml.org 
[lkml]   [2004]   [Aug]   [26]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
Subject2.6.9-rc1: kernel BUG at mm/slab.c:1828 (sunrpc)
I get this running X and some gnome applications for a while (~10sec).
After the bug, keyboard stays locked, mouse (usb) works, and I can
finish the session. It brings me to a blank console:

kernel: <6>SysRq : Emergency Sync
kernel: Emergency Sync complete
gconfd (raa-3333): Received signal 1, shutting down cleanly
gconfd (raa-3333): Exiting
init: open(/dev/console): Input/output error

Ctrl-Alt-Del worked, though:

init: Switching to runlevel: 6

It is reproducable with latest bk as of Aug 26 20:00 CET.
The system is ht/smt P4 with preempt, Gentoo (no hotplug and udev).

There is a suspect:
struct auth_domain *auth_unix_lookup(struct in_addr addr)
...
key.m_class = "nfsd";
key.m_addr = addr;

And ip_map_put contains a "kfree(im->m_class)".
I wasn't able to reproduce the bug after removing the kfree.
The strdups to m_class will leak now, I suppose.


This is how the bug looks like:

kfree_debugcheck: out of range ptr f8a2de00h.
------------[ cut here ]------------
kernel BUG at mm/slab.c:1828!
invalid operand: 0000 [#1]
PREEMPT SMP
Modules linked in: md5 ipv6 nfsd exportfs lockd sunrpc e100 rtc reiserfs snd_intel8x0 snd_ac97_code
c snd_pcm snd_timer snd_page_alloc snd_mpu401_uart snd_rawmidi snd_seq_device snd soundcore sd_mod usb_storage usbhid uhci_hcd us
bcore
CPU: 0
EIP: 0060:[kfree_debugcheck+101/111] Not tainted VLI
EIP: 0060:[<c0149cf8>] Not tainted VLI
EFLAGS: 00010086 (2.6.9-rc1)
EIP is at kfree_debugcheck+0x65/0x6f
eax: 00000031 ebx: 00038a2d ecx: c02e3d20 edx: c02e3d20
esi: f8a2de00 edi: f8a2de00 ebp: f7cb4ef4 esp: f7cb4ee4
ds: 007b es: 007b ss: 0068
Process events/0 (pid: 6, threadinfo=f7cb4000 task=f7ced8b0)
Stack: c02baa74 f8a2de00 f8a2de00 00000001 f7cb4f0c c014abab 00000286 f7d50a9c
00000001 f7cb4000 f7cb4f18 f8a43dd1 f7d50a9c f7cb4f30 f8a469ff f8a54dc0
00000005 f7cb6d74 f8a54f44 f7cb4f3c f8a46b99 f7cb4000 f7cb4fc8 c01323d9
Call Trace:
[show_stack+122/144] show_stack+0x7a/0x90
[<c0105fc1>] show_stack+0x7a/0x90
[show_registers+338/438] show_registers+0x152/0x1b6
[<c0106144>] show_registers+0x152/0x1b6
[die+236/473] die+0xec/0x1d9
[<c0106323>] die+0xec/0x1d9
[do_invalid_op+152/154] do_invalid_op+0x98/0x9a
[<c0106709>] do_invalid_op+0x98/0x9a
[error_code+45/56] error_code+0x2d/0x38
[<c0105c8d>] error_code+0x2d/0x38
[kfree+33/145] kfree+0x21/0x91
[<c014abab>] kfree+0x21/0x91
[pg0+946167249/1069613056] ip_map_put+0x39/0x56 [sunrpc]
[<f8a43dd1>] ip_map_put+0x39/0x56 [sunrpc]
[pg0+946178559/1069613056] cache_clean+0x1c0/0x34c [sunrpc]
[<f8a469ff>] cache_clean+0x1c0/0x34c [sunrpc]
[pg0+946178969/1069613056] do_cache_clean+0xe/0x45 [sunrpc]
[<f8a46b99>] do_cache_clean+0xe/0x45 [sunrpc]
[worker_thread+446/796] worker_thread+0x1be/0x31c
[<c01323d9>] worker_thread+0x1be/0x31c
[kthread+159/164] kthread+0x9f/0xa4
[<c0136dc4>] kthread+0x9f/0xa4
[kernel_thread_helper+5/11] kernel_thread_helper+0x5/0xb
[<c010327d>] kernel_thread_helper+0x5/0xb
Code: c3 89 74 24 04 c7 04 24 50 aa 2b c0 e8 6a 78 fd ff 0f 0b 29 07 de 9f 2b c0 eb dc 89 44 24 04
c7 04 24 74 aa 2b c0 e8 50 78 fd ff <0f> 0b 24 07 de 9f 2b c0 eb b0 55 89 e5 57 56 89 c6 53 83 ec 18


The config, a bootlog, an alt-sysrq-t of another bug, cpuinfo and lspci:
http://home.arcor.de/fork0/bug/

--
Alex Riesen
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 14:05    [W:0.107 / U:0.088 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site