lkml.org 
[lkml]   [2012]   [May]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    Date
    SubjectRe: [PATCH] Re: [RFC PATCH] namespaces: fix leak on fork() failure
    Mike Galbraith <efault@gmx.de> writes:

    > On Thu, 2012-05-03 at 05:12 +0200, Mike Galbraith wrote:
    >> On Tue, 2012-05-01 at 13:42 -0700, Andrew Morton wrote:
    >> > On Tue, 01 May 2012 13:35:03 -0700
    >> > ebiederm@xmission.com (Eric W. Biederman) wrote:
    >> >
    >> > >
    >> > > Andrew can you please pick up this patch?
    >> >
    >> > Sure. I assume it's fixing a post-3.4 regression? No -stable backport
    >> > needed?
    >>
    >> Dunno what all should go to stable, but anyone using vsftpd will
    >> appreciate something going. Large leakage was initially reported
    >> against 3.1. That was bisected to..
    >> 423e0ab0 VFS : mount lock scalability for internal mounts
    >>
    >> Subsequent fixes which did not go to stable were applied..
    >> 905ad269 procfs: fix a vfsmount longterm reference leak
    >> 6f686574 ... and the same kind of leak for mqueue
    >> ..but leakage persists even with fork failure hole plugged.
    >
    >> Whatever goes to stable, what fixes this little bugger should go too.
    >
    > Finally have a decent trace, patch to fix the problem below.
    >
    > marge:~ # grep 0xffff8801fad5dff0 /trace3
    > vsftpd-18277 [003] .... 1779.012239: proc_set_super: get_pid_ns: 0xffff8801fad5dff0 count:1->2
    > vsftpd-18277 [003] .... 1779.012253: create_pid_namespace: create_pid_namespace: 0xffff8801fad5dff0
    > vsftpd-18277 [003] .... 1779.012258: alloc_pid: get_pid_ns: 0xffff8801fad5dff0 count:2->3
    > vsftpd-18277 [003] .... 1779.012278: proc_kill_sb: put_pid_ns: 0xffff8801fad5dff0 count:3->2
    > ksoftirqd/3-16 [003] ..s. 1779.012731: delayed_put_pid: put_pid_ns: 0xffff8801fad5dff0 count:2->1
    > vsftpd-18277 [003] .... 1779.015614: destroy_pid_namespace: destroy_pid_namespace: 0xffff8801fad5dff0
    > vsftpd-18277 [003] .... 1779.015614: free_nsproxy: put_pid_ns: 0xffff8801fad5dff0 count:1->0
    > vsftpd-18277 [003] .... 1779.249871: proc_set_super: get_pid_ns: 0xffff8801fad5dff0 count:1->2
    > vsftpd-18277 [003] .... 1779.249884: create_pid_namespace: create_pid_namespace: 0xffff8801fad5dff0
    > vsftpd-18277 [003] .... 1779.249888: alloc_pid: get_pid_ns: 0xffff8801fad5dff0 count:2->3
    > vsftpd-18351 [003] .... 1779.256337: switch_task_namespaces: exiting: 0xffff8801fad5dff0 count:3
    > vsftpd-18351 [003] .... 1779.266243: free_nsproxy: put_pid_ns: 0xffff8801fad5dff0 count:3->2
    > <insert>
    > ps-18381 [000] .... 1779.298798: proc_fill_cache <-proc_pid_readdir
    > ps-18381 [000] .... 1779.298802: proc_pid_instantiate <-proc_fill_cache
    > ps-18381 [000] .... 1779.298802: proc_pid_make_inode <-proc_pid_instantiate
    > ps-18381 [000] .... 1779.298802: proc_alloc_inode <-alloc_inode
    > ps-18381 [000] .... 1779.298807: get_task_pid <-proc_pid_make_inode
    > ps-18381 [000] .... 1779.298807: get_pid <-get_task_pid
    > </insert> ditto for other pid references added post task exit
    > ps-18381 [000] .... 1779.298807: get_pid: pid: 0xffff8802031a2fc0 namespace: 0xffff8801fad5dff0 pid count:1->2 pid_ns count:2
    > ps-18381 [001] .... 1779.327593: get_pid: pid: 0xffff8802031a2fc0 namespace: 0xffff8801fad5dff0 pid count:2->3 pid_ns count:2
    > ps-18381 [001] .... 1779.327653: get_pid: pid: 0xffff8802031a2fc0 namespace: 0xffff8801fad5dff0 pid count:3->4 pid_ns count:2
    > ps-18381 [001] .... 1779.327716: get_pid: pid: 0xffff8802031a2fc0 namespace: 0xffff8801fad5dff0 pid count:4->5 pid_ns count:2
    > ps-18381 [001] .... 1779.327804: get_pid: pid: 0xffff8802031a2fc0 namespace: 0xffff8801fad5dff0 pid count:5->6 pid_ns count:2
    > ps-18381 [001] .... 1779.327817: get_pid: pid: 0xffff8802031a2fc0 namespace: 0xffff8801fad5dff0 pid count:6->7 pid_ns count:2
    > ps-18381 [001] .... 1779.327818: put_pid: pid: 0xffff8802031a2fc0 namespace: 0xffff8801fad5dff0 pid count:7->6 pid_ns count:2
    > vsftpd-18277 [003] .... 1779.358887: put_pid: pid: 0xffff8802031a2fc0 namespace: 0xffff8801fad5dff0 pid count:6->5 pid_ns count:2
    > vsftpd-18277 [003] .... 1779.358889: put_pid: pid: 0xffff8802031a2fc0 namespace: 0xffff8801fad5dff0 pid count:5->4 pid_ns count:2
    > vsftpd-18277 [003] .... 1779.358891: put_pid: pid: 0xffff8802031a2fc0 namespace: 0xffff8801fad5dff0 pid count:4->3 pid_ns count:2
    > vsftpd-18277 [003] .... 1779.358894: put_pid: pid: 0xffff8802031a2fc0 namespace: 0xffff8801fad5dff0 pid count:3->2 pid_ns count:2
    > vsftpd-18277 [003] .... 1779.358897: put_pid: pid: 0xffff8802031a2fc0 namespace: 0xffff8801fad5dff0 pid count:2->1 pid_ns count:2
    > vsftpd-18277 [003] .... 1779.358918: proc_kill_sb: put_pid_ns: 0xffff8801fad5dff0 count:2->1
    > ps-18386 [001] .... 1779.370210: get_pid: pid: 0xffff8802031a2fc0 namespace: 0xffff8801fad5dff0 pid count:1->2 pid_ns count:1
    > ps-18386 [001] .... 1779.370240: get_pid: pid: 0xffff8802031a2fc0 namespace: 0xffff8801fad5dff0 pid count:2->3 pid_ns count:1
    > ps-18386 [001] .... 1779.370300: get_pid: pid: 0xffff8802031a2fc0 namespace: 0xffff8801fad5dff0 pid count:3->4 pid_ns count:1
    > ps-18386 [001] .... 1779.370361: get_pid: pid: 0xffff8802031a2fc0 namespace: 0xffff8801fad5dff0 pid count:4->5 pid_ns count:1
    > ps-18386 [001] .... 1779.370454: get_pid: pid: 0xffff8802031a2fc0 namespace: 0xffff8801fad5dff0 pid count:5->6 pid_ns count:1
    > ps-18386 [001] .... 1779.370467: get_pid: pid: 0xffff8802031a2fc0 namespace: 0xffff8801fad5dff0 pid count:6->7 pid_ns count:1
    > ps-18386 [001] .... 1779.370468: put_pid: pid: 0xffff8802031a2fc0 namespace: 0xffff8801fad5dff0 pid count:7->6 pid_ns count:1
    > ksoftirqd/3-16 [003] ..s. 1779.390717: delayed_put_pid: pid: 0xffff8802031a2fc0 LEAKED namespace: 0xffff8801fad5dff0
    >
    > Ok, that seems reasonable.
    >
    > Create > 27k "leaked" namespaces, watch many thousands go away over
    > time.. but many hundred persist and persist and persist.
    >
    > Hm. echo 3 > /proc/sys/vm/drop_caches.. *poof gone*

    Good to hear. I am sad to hear that proc_flush_task isn't doing a
    better job but at least memory pressure will now free everything up as
    it is supposed to.

    > Grr. I wonder who is doing the pinning when I don't monitor, but..
    >
    > <patch>
    > kick kick kick... it's dead Jim.
    > </patch>

    Are you saying all known bugs are fixed? Thanks for digging into this
    by the way. A fresh set of eyeballs is always nice.

    Eric


    \
     
     \ /
      Last update: 2012-05-04 10:21    [W:0.033 / U:59.908 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site