From: Alex Chiang <achiang@hp.com>
To: Christoph Lameter <cl@linux-foundation.org>
Cc: Lee Schermerhorn <Lee.Schermerhorn@hp.com>,
penberg@cs.helsinki.fi, linux-ia64@vger.kernel.org,
linux-mm@kvack.org
Subject: Re: SLUB ia64 linux-next crash bisected to 756dee75
Date: Tue, 19 Jan 2010 20:02:28 +0000 [thread overview]
Message-ID: <20100119200228.GE11010@ldl.fc.hp.com> (raw)
In-Reply-To: <alpine.DEB.2.00.1001191252370.25101@router.home>
* Christoph Lameter <cl@linux-foundation.org>:
> On Fri, 15 Jan 2010, Christoph Lameter wrote:
>
> > An allocated kmem_cache structure is definitely not in the range of the
> > kmalloc_caches array. This is basically checking if s is pointing to the
> > static kmalloc array.
>
> Check was wrong.. Sigh...
>
> ---
> mm/slub.c | 3 ++-
> 1 file changed, 2 insertions(+), 1 deletion(-)
>
> Index: linux-2.6/mm/slub.c
> =================================> --- linux-2.6.orig/mm/slub.c 2010-01-19 12:50:20.000000000 -0600
> +++ linux-2.6/mm/slub.c 2010-01-19 12:51:30.000000000 -0600
> @@ -2148,7 +2148,8 @@ static int init_kmem_cache_nodes(struct
> int node;
> int local_node;
>
> - if (slab_state >= UP)
> + if (slab_state >= UP && (s < kmalloc_caches ||
> + s > kmalloc_caches + KMALLOC_CACHES))
> local_node = page_to_nid(virt_to_page(s));
> else
> local_node = 0;
Well, making progress (maybe?).
Now we're hitting a BUG_ON().
Interestingly, the machine now boots all the way to a login
prompt, whereas previously, it would simply hang.
/ac
kernel BUG at mm/slub.c:2839!
modprobe[6015]: bugcheck! 0 [1]
Modules linked in: sr_mod(+) button container(+) usbhid ohci_hcd ehci_hcd usbcore fan thermal processor thermal_sys
Pid: 6015, CPU 0, comm: modprobe
psr : 00001010085a6010 ifs : 8000000000000289 ip : [<a0000001001ae800>] Not tainted (2.6.33-rc3-next-20100111-dirty)
ip is at kfree+0xe0/0x260
unat: 0000000000000000 pfs : 0000000000000289 rsc : 0000000000000003
rnat: e0000786165b1720 bsps: aa99aaa6aa595999 pr : aa99aaa6aa565959
ldrs: 0000000000000000 ccv : 00000000000000c2 fpsr: 0009804c8a70433f
csd : 0000000000000000 ssd : 0000000000000000
b0 : a0000001001ae800 b6 : a0000001005e4360 b7 : a00000010046de40
f6 : 1003e0000000cb95d6936 f7 : 1003e0000000000000190
f8 : 1003e0000000cb95d67a6 f9 : 1003e0000000000000001
f10 : 100079cfffffffc583503 f11 : 1003e0000000000000000
r1 : a0000001014480f0 r2 : 00000000000017ec r3 : 000000000000fffe
r8 : 0000000000000021 r9 : 000000000000ffff r10 : ffffffffffff41ef
r11 : 0000000000000000 r12 : e0000786165bfdf0 r13 : e0000786165b0000
r14 : 00000000000017ec r15 : 0000000000004000 r16 : a00000010119c62c
r17 : a000000101265d70 r18 : 0000000000000000 r19 : a0000001005e4360
r20 : a0000001018edb38 r21 : 000000000000bdf3 r22 : 00000000000fffff
r23 : 0000000000100000 r24 : a000000102a3ddc8 r25 : a000000100a0dca8
r26 : a00000010046de40 r27 : a000000102a3ddc8 r28 : a000000102a3dec0
r29 : a000000100a0dc98 r30 : a00000010046dd80 r31 : a000000102a3ddc0
Call Trace:
[<a000000100016950>] show_stack+0x50/0xa0
spà000786165bf9c0 bspà000786165b1368
[<a0000001000171c0>] show_regs+0x820/0x860
spà000786165bfb90 bspà000786165b1310
[<a00000010003bc40>] die+0x1a0/0x300
spà000786165bfb90 bspà000786165b12d0
[<a00000010003bdf0>] die_if_kernel+0x50/0x80
spà000786165bfb90 bspà000786165b12a0
[<a00000010003d460>] ia64_bad_break+0x220/0x440
spà000786165bfb90 bspà000786165b1278
[<a00000010000c8a0>] ia64_native_leave_kernel+0x0/0x270
spà000786165bfc20 bspà000786165b1278
[<a0000001001ae800>] kfree+0xe0/0x260
spà000786165bfdf0 bspà000786165b1230
[<a000000207ce1df0>] sr_probe+0xad0/0xf20 [sr_mod]
spà000786165bfdf0 bspà000786165b11c8
[<a00000010048ab40>] driver_probe_device+0x180/0x300
spà000786165bfe20 bspà000786165b1190
[<a00000010048ada0>] __driver_attach+0xe0/0x140
spà000786165bfe20 bspà000786165b1160
[<a0000001004897a0>] bus_for_each_dev+0xa0/0x140
spà000786165bfe20 bspà000786165b1128
[<a00000010048a760>] driver_attach+0x40/0x60
spà000786165bfe30 bspà000786165b1108
[<a0000001004885c0>] bus_add_driver+0x180/0x520
spà000786165bfe30 bspà000786165b10c0
[<a00000010048b560>] driver_register+0x260/0x400
spà000786165bfe30 bspà000786165b1078
[<a0000001004df540>] scsi_register_driver+0x40/0x60
spà000786165bfe30 bspà000786165b1058
[<a000000207d10070>] init_sr+0x70/0x140 [sr_mod]
spà000786165bfe30 bspà000786165b1038
[<a00000010000a960>] do_one_initcall+0xe0/0x360
spà000786165bfe30 bspà000786165b0ff0
[<a000000100106040>] sys_init_module+0x1e0/0x4c0
spà000786165bfe30 bspà000786165b0f78
[<a00000010000c700>] ia64_ret_from_syscall+0x0/0x20
spà000786165bfe30 bspà000786165b0f78
[<a000000000010720>] __kernel_syscall_via_break+0x0/0x20
spà000786165c0000 bspà000786165b0f78
Disabling lock debugging due to kernel taint
WARNING: multiple messages have this Message-ID (diff)
From: Alex Chiang <achiang@hp.com>
To: Christoph Lameter <cl@linux-foundation.org>
Cc: Lee Schermerhorn <Lee.Schermerhorn@hp.com>,
penberg@cs.helsinki.fi, linux-ia64@vger.kernel.org,
linux-mm@kvack.org
Subject: Re: SLUB ia64 linux-next crash bisected to 756dee75
Date: Tue, 19 Jan 2010 13:02:28 -0700 [thread overview]
Message-ID: <20100119200228.GE11010@ldl.fc.hp.com> (raw)
In-Reply-To: <alpine.DEB.2.00.1001191252370.25101@router.home>
* Christoph Lameter <cl@linux-foundation.org>:
> On Fri, 15 Jan 2010, Christoph Lameter wrote:
>
> > An allocated kmem_cache structure is definitely not in the range of the
> > kmalloc_caches array. This is basically checking if s is pointing to the
> > static kmalloc array.
>
> Check was wrong.. Sigh...
>
> ---
> mm/slub.c | 3 ++-
> 1 file changed, 2 insertions(+), 1 deletion(-)
>
> Index: linux-2.6/mm/slub.c
> ===================================================================
> --- linux-2.6.orig/mm/slub.c 2010-01-19 12:50:20.000000000 -0600
> +++ linux-2.6/mm/slub.c 2010-01-19 12:51:30.000000000 -0600
> @@ -2148,7 +2148,8 @@ static int init_kmem_cache_nodes(struct
> int node;
> int local_node;
>
> - if (slab_state >= UP)
> + if (slab_state >= UP && (s < kmalloc_caches ||
> + s > kmalloc_caches + KMALLOC_CACHES))
> local_node = page_to_nid(virt_to_page(s));
> else
> local_node = 0;
Well, making progress (maybe?).
Now we're hitting a BUG_ON().
Interestingly, the machine now boots all the way to a login
prompt, whereas previously, it would simply hang.
/ac
kernel BUG at mm/slub.c:2839!
modprobe[6015]: bugcheck! 0 [1]
Modules linked in: sr_mod(+) button container(+) usbhid ohci_hcd ehci_hcd usbcore fan thermal processor thermal_sys
Pid: 6015, CPU 0, comm: modprobe
psr : 00001010085a6010 ifs : 8000000000000289 ip : [<a0000001001ae800>] Not tainted (2.6.33-rc3-next-20100111-dirty)
ip is at kfree+0xe0/0x260
unat: 0000000000000000 pfs : 0000000000000289 rsc : 0000000000000003
rnat: e0000786165b1720 bsps: aa99aaa6aa595999 pr : aa99aaa6aa565959
ldrs: 0000000000000000 ccv : 00000000000000c2 fpsr: 0009804c8a70433f
csd : 0000000000000000 ssd : 0000000000000000
b0 : a0000001001ae800 b6 : a0000001005e4360 b7 : a00000010046de40
f6 : 1003e0000000cb95d6936 f7 : 1003e0000000000000190
f8 : 1003e0000000cb95d67a6 f9 : 1003e0000000000000001
f10 : 100079cfffffffc583503 f11 : 1003e0000000000000000
r1 : a0000001014480f0 r2 : 00000000000017ec r3 : 000000000000fffe
r8 : 0000000000000021 r9 : 000000000000ffff r10 : ffffffffffff41ef
r11 : 0000000000000000 r12 : e0000786165bfdf0 r13 : e0000786165b0000
r14 : 00000000000017ec r15 : 0000000000004000 r16 : a00000010119c62c
r17 : a000000101265d70 r18 : 0000000000000000 r19 : a0000001005e4360
r20 : a0000001018edb38 r21 : 000000000000bdf3 r22 : 00000000000fffff
r23 : 0000000000100000 r24 : a000000102a3ddc8 r25 : a000000100a0dca8
r26 : a00000010046de40 r27 : a000000102a3ddc8 r28 : a000000102a3dec0
r29 : a000000100a0dc98 r30 : a00000010046dd80 r31 : a000000102a3ddc0
Call Trace:
[<a000000100016950>] show_stack+0x50/0xa0
sp=e0000786165bf9c0 bsp=e0000786165b1368
[<a0000001000171c0>] show_regs+0x820/0x860
sp=e0000786165bfb90 bsp=e0000786165b1310
[<a00000010003bc40>] die+0x1a0/0x300
sp=e0000786165bfb90 bsp=e0000786165b12d0
[<a00000010003bdf0>] die_if_kernel+0x50/0x80
sp=e0000786165bfb90 bsp=e0000786165b12a0
[<a00000010003d460>] ia64_bad_break+0x220/0x440
sp=e0000786165bfb90 bsp=e0000786165b1278
[<a00000010000c8a0>] ia64_native_leave_kernel+0x0/0x270
sp=e0000786165bfc20 bsp=e0000786165b1278
[<a0000001001ae800>] kfree+0xe0/0x260
sp=e0000786165bfdf0 bsp=e0000786165b1230
[<a000000207ce1df0>] sr_probe+0xad0/0xf20 [sr_mod]
sp=e0000786165bfdf0 bsp=e0000786165b11c8
[<a00000010048ab40>] driver_probe_device+0x180/0x300
sp=e0000786165bfe20 bsp=e0000786165b1190
[<a00000010048ada0>] __driver_attach+0xe0/0x140
sp=e0000786165bfe20 bsp=e0000786165b1160
[<a0000001004897a0>] bus_for_each_dev+0xa0/0x140
sp=e0000786165bfe20 bsp=e0000786165b1128
[<a00000010048a760>] driver_attach+0x40/0x60
sp=e0000786165bfe30 bsp=e0000786165b1108
[<a0000001004885c0>] bus_add_driver+0x180/0x520
sp=e0000786165bfe30 bsp=e0000786165b10c0
[<a00000010048b560>] driver_register+0x260/0x400
sp=e0000786165bfe30 bsp=e0000786165b1078
[<a0000001004df540>] scsi_register_driver+0x40/0x60
sp=e0000786165bfe30 bsp=e0000786165b1058
[<a000000207d10070>] init_sr+0x70/0x140 [sr_mod]
sp=e0000786165bfe30 bsp=e0000786165b1038
[<a00000010000a960>] do_one_initcall+0xe0/0x360
sp=e0000786165bfe30 bsp=e0000786165b0ff0
[<a000000100106040>] sys_init_module+0x1e0/0x4c0
sp=e0000786165bfe30 bsp=e0000786165b0f78
[<a00000010000c700>] ia64_ret_from_syscall+0x0/0x20
sp=e0000786165bfe30 bsp=e0000786165b0f78
[<a000000000010720>] __kernel_syscall_via_break+0x0/0x20
sp=e0000786165c0000 bsp=e0000786165b0f78
Disabling lock debugging due to kernel taint
--
To unsubscribe, send a message with 'unsubscribe linux-mm' in
the body to majordomo@kvack.org. For more info on Linux MM,
see: http://www.linux-mm.org/ .
Don't email: <a href=mailto:"dont@kvack.org"> email@kvack.org </a>
next prev parent reply other threads:[~2010-01-19 20:02 UTC|newest]
Thread overview: 59+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-01-13 0:29 SLUB ia64 linux-next crash bisected to 756dee75 Alex Chiang
2010-01-13 14:59 ` Christoph Lameter
2010-01-13 14:59 ` Christoph Lameter
2010-01-14 0:53 ` Alex Chiang
2010-01-14 0:53 ` Alex Chiang
2010-01-14 15:01 ` Christoph Lameter
2010-01-14 15:01 ` Christoph Lameter
2010-01-14 18:01 ` Alex Chiang
2010-01-14 18:01 ` Alex Chiang
2010-01-14 15:18 ` Christoph Lameter
2010-01-14 15:18 ` Christoph Lameter
2010-01-14 18:22 ` Alex Chiang
2010-01-14 18:22 ` Alex Chiang
2010-01-14 19:17 ` Pekka Enberg
2010-01-14 19:17 ` Pekka Enberg
2010-01-14 20:32 ` Alex Chiang
2010-01-14 20:32 ` Alex Chiang
2010-01-14 20:58 ` Christoph Lameter
2010-01-14 20:58 ` Christoph Lameter
2010-01-14 21:29 ` Alex Chiang
2010-01-14 21:29 ` Alex Chiang
2010-01-14 21:31 ` Pekka Enberg
2010-01-14 21:31 ` Pekka Enberg
2010-01-14 21:59 ` Christoph Lameter
2010-01-14 21:59 ` Christoph Lameter
2010-01-14 22:01 ` Christoph Lameter
2010-01-14 22:01 ` Christoph Lameter
2010-01-15 20:07 ` Christoph Lameter
2010-01-15 20:07 ` Christoph Lameter
2010-01-15 20:35 ` Lee Schermerhorn
2010-01-15 20:35 ` Lee Schermerhorn
2010-01-15 23:32 ` Christoph Lameter
2010-01-15 23:32 ` Christoph Lameter
2010-01-19 18:53 ` Christoph Lameter
2010-01-19 18:53 ` Christoph Lameter
2010-01-19 20:02 ` Alex Chiang [this message]
2010-01-19 20:02 ` Alex Chiang
2010-01-19 20:29 ` Christoph Lameter
2010-01-19 20:29 ` Christoph Lameter
2010-01-19 21:29 ` Alex Chiang
2010-01-19 21:29 ` Alex Chiang
2010-01-19 21:50 ` Christoph Lameter
2010-01-19 21:50 ` Christoph Lameter
2010-01-20 22:46 ` Alex Chiang
2010-01-20 22:46 ` Alex Chiang
2010-01-21 21:47 ` Alex Chiang
2010-01-21 21:47 ` Alex Chiang
2010-01-21 22:45 ` Christoph Lameter
2010-01-21 22:45 ` Christoph Lameter
2010-01-21 23:05 ` Alex Chiang
2010-01-21 23:05 ` Alex Chiang
2010-01-21 23:43 ` Christoph Lameter
2010-01-21 23:43 ` Christoph Lameter
2010-01-22 0:15 ` Alex Chiang
2010-01-22 0:15 ` Alex Chiang
2010-01-22 14:43 ` Christoph Lameter
2010-01-22 14:43 ` Christoph Lameter
2010-01-22 16:37 ` Pekka Enberg
2010-01-22 16:37 ` Pekka Enberg
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20100119200228.GE11010@ldl.fc.hp.com \
--to=achiang@hp.com \
--cc=Lee.Schermerhorn@hp.com \
--cc=cl@linux-foundation.org \
--cc=linux-ia64@vger.kernel.org \
--cc=linux-mm@kvack.org \
--cc=penberg@cs.helsinki.fi \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.