From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752073AbZHTFIT (ORCPT ); Thu, 20 Aug 2009 01:08:19 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1751313AbZHTFIS (ORCPT ); Thu, 20 Aug 2009 01:08:18 -0400 Received: from mail-bw0-f219.google.com ([209.85.218.219]:37745 "EHLO mail-bw0-f219.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751300AbZHTFIR convert rfc822-to-8bit (ORCPT ); Thu, 20 Aug 2009 01:08:17 -0400 DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type :content-transfer-encoding; b=rIOVVTvUFDqogzqEKcw+eEy489lf1pQhoMVqyygWOwx70dYFaNJp1F9eDDgvrDE77W pL58xAJSmgur5EkAJojssIXPyu/Q247fMbkprEYutQA9rL7OaRqqpm6B+OX1836GsvJm 9hft8khGGdye85IA8Rc0zMHAYy3kD91oyWfOA= MIME-Version: 1.0 In-Reply-To: <20090820015624.GE524@hash.localnet> References: <20090820015624.GE524@hash.localnet> Date: Thu, 20 Aug 2009 08:08:16 +0300 X-Google-Sender-Auth: 6686792af48a18c8 Message-ID: <84144f020908192208x453ebbd4gecf52eb47903653d@mail.gmail.com> Subject: Re: 2.6.32-rc6 BUG at mm/slab.c:2869! From: Pekka Enberg To: Bob Copeland Cc: linux-kernel@vger.kernel.org, Andrew Morton , linux-ext4@vger.kernel.org, Vegard Nossum Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8BIT Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hi Bob, On Thu, Aug 20, 2009 at 4:56 AM, Bob Copeland wrote: > Sorry I don't have a lot to go on here, but thought I'd report it anyway. > I was just starting firefox and got the following two stack traces in > succession.  The kernel is based on 894ef820b10d77e2d6d717342fc408bdd9825139. > > Some kind of memory/filesystem corruption? Someone is stomping on SLAB internal data structures. Ext4 appears in both stack traces so I guess we should CC linux-ext4. How easy is it to reproduce this bug? One option is to try kmemcheck to see if it catches the problem (see Documentation/kmemcheck.txt for details). > [ 8904.113230] ------------[ cut here ]------------ > [ 8902.989751] kernel BUG at mm/slab.c:2869! > [ 8902.989755] invalid opcode: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC > [ 8902.989762] last sysfs file: /sys/class/rfkill/rfkill0/state > [ 8902.989765] Modules linked in: fuse af_packet ipt_REJECT xt_tcpudp nf_conntrack_ipv4 nf_defrag_ipv4 xt_state iptable_filter ip_tables x_tables acpi_cpufreq binfmt_misc dm_mirror dm_region_hash dm_log dm_multipath dm_mod kvm_intel kvm uinput arc4 ecb ath5k mac80211 i915 appletouch hid_apple usbhid snd_hda_codec_idt ath drm ohci1394 snd_hda_intel cfg80211 snd_hda_codec i2c_algo_bit ieee1394 snd_pcm video processor rfkill ehci_hcd sky2 snd_timer snd snd_page_alloc backlight uhci_hcd joydev sg ac battery thermal button output applesmc sr_mod cdrom input_polldev evdev unix [last unloaded: scsi_wait_scan] > [ 8902.989844] > [ 8902.989849] Pid: 253, comm: kswapd0 Not tainted (2.6.31-rc6 #179) MacBook1,1 > [ 8902.989852] EIP: 0060:[] EFLAGS: 00010002 CPU: 0 > [ 8902.989860] EIP is at cache_free_debugcheck+0x1a9/0x28a > [ 8902.989863] EAX: 009d4e2e EBX: 8ee08ec0 ECX: 31286ea0 EDX: 009d4e2e > [ 8902.989867] ESI: d84156c5 EDI: f7034440 EBP: f590fcb0 ESP: f590fc80 > [ 8902.989870]  DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068 > [ 8902.989874] Process kswapd0 (pid: 253, ti=f590e000 task=f72b0418 task.ti=f590e000) > [ 8902.989877] Stack: > [ 8902.989879]  f590fc88 c104aac4 00002184 c008f000 c10b8f69 f4205880 009d4e2e c008fd60 > [ 8902.989890] <0> c008fd68 f706af30 f7034440 e77e4ea0 f590fccc c1099911 c008fd68 00000296 > [ 8902.989901] <0> c008fd68 00000001 e77e4ea0 f590fcd8 c10b8f69 c008fd68 f590fcf4 c10b92f3 > [ 8902.989914] Call Trace: > [ 8902.989920]  [] ? trace_hardirqs_off+0xb/0xd > [ 8902.989926]  [] ? free_buffer_head+0x21/0x62 > [ 8902.989931]  [] ? kmem_cache_free+0x4c/0xdf > [ 8902.989936]  [] ? free_buffer_head+0x21/0x62 > [ 8902.989941]  [] ? try_to_free_buffers+0x7f/0x8f > [ 8902.989947]  [] ? jbd2_journal_try_to_free_buffers+0x137/0x13f > [ 8902.989953]  [] ? ext4_releasepage+0x54/0x62 > [ 8902.989959]  [] ? try_to_release_page+0x35/0x44 > [ 8902.989965]  [] ? shrink_page_list+0x4b5/0x657 > [ 8902.989971]  [] ? put_lock_stats+0xd/0x21 > [ 8902.989976]  [] ? trace_hardirqs_on+0xb/0xd > [ 8902.989982]  [] ? _spin_unlock_irq+0x32/0x47 > [ 8902.989987]  [] ? shrink_list+0x24d/0x514 > [ 8902.989993]  [] ? sched_clock+0x48/0x8d > [ 8902.990000]  [] ? sched_clock+0x48/0x8d > [ 8902.990004]  [] ? get_lock_stats+0x11/0x38 > [ 8902.990009]  [] ? put_lock_stats+0xd/0x21 > [ 8902.990014]  [] ? shrink_zone+0x211/0x2aa > [ 8902.990020]  [] ? kswapd+0x3e2/0x587 > [ 8902.990021]  [] ? isolate_pages_global+0x0/0x18b > [ 8902.990021]  [] ? autoremove_wake_function+0x0/0x34 > [ 8902.990021]  [] ? kswapd+0x0/0x587 > [ 8902.990021]  [] ? kthread+0x70/0x75 > [ 8902.990021]  [] ? kthread+0x0/0x75 > [ 8902.990021]  [] ? kernel_thread_helper+0x7/0x10 > [ 8902.990021] Code: 0d 8b 47 2c 8b 55 e0 8b 4d ec 89 54 01 fc 8b 4d dc 8b 59 0c 8b 4d ec 29 d9 89 c8 f7 67 30 3b 57 38 89 45 e4 89 d0 89 55 e8 72 04 <0f> 0b eb fe 8b 4f 2c 0f af ca 8d 14 0b 39 55 ec 74 04 0f 0b eb > [ 8902.990021] EIP: [] cache_free_debugcheck+0x1a9/0x28a SS:ESP 0068:f590fc80 > [ 8902.990021] ---[ end trace 73f44c391fc78b0a ]--- > [ 8904.113230] ------------[ cut here ]------------ > [ 8904.113250] WARNING: at lib/list_debug.c:51 list_del+0x41/0x60() > [ 8904.113256] Hardware name: MacBook1,1 > [ 8904.113262] list_del corruption. next->prev should be c03c0000, but was 8ed88ec8 > [ 8904.113267] Modules linked in: fuse af_packet ipt_REJECT xt_tcpudp nf_conntrack_ipv4 nf_defrag_ipv4 xt_state iptable_filter ip_tables x_tables acpi_cpufreq binfmt_misc dm_mirror dm_region_hash dm_log dm_multipath dm_mod kvm_intel kvm uinput arc4 ecb ath5k mac80211 i915 appletouch hid_apple usbhid snd_hda_codec_idt ath drm ohci1394 snd_hda_intel cfg80211 snd_hda_codec i2c_algo_bit ieee1394 snd_pcm video processor rfkill ehci_hcd sky2 snd_timer snd snd_page_alloc backlight uhci_hcd joydev sg ac battery thermal button output applesmc sr_mod cdrom input_polldev evdev unix [last unloaded: scsi_wait_scan] > [ 8904.113422] Pid: 6452, comm: firefox Tainted: G      D    2.6.31-rc6 #179 > [ 8904.113425] Call Trace: > [ 8904.113433]  [] warn_slowpath_common+0x6a/0x81 > [ 8904.113438]  [] ? list_del+0x41/0x60 > [ 8904.113443]  [] warn_slowpath_fmt+0x29/0x2c > [ 8904.113447]  [] list_del+0x41/0x60 > [ 8904.113453]  [] free_block+0x7d/0x15a > [ 8904.113457]  [] ? cache_flusharray+0x45/0xf2 > [ 8904.113462]  [] cache_flusharray+0x96/0xf2 > [ 8904.113467]  [] kmem_cache_free+0x6e/0xdf > [ 8904.113473]  [] free_buffer_head+0x21/0x62 > [ 8904.113477]  [] try_to_free_buffers+0x7f/0x8f > [ 8904.113483]  [] jbd2_journal_try_to_free_buffers+0x137/0x13f > [ 8904.113490]  [] bdev_try_to_free_page+0x4c/0x5a > [ 8904.113495]  [] ? bdev_try_to_free_page+0x0/0x5a > [ 8904.113500]  [] blkdev_releasepage+0x2b/0x36 > [ 8904.113506]  [] try_to_release_page+0x35/0x44 > [ 8904.113512]  [] shrink_page_list+0x4b5/0x657 > [ 8904.113518]  [] ? trace_hardirqs_on+0xb/0xd > [ 8904.113524]  [] ? _spin_unlock_irq+0x32/0x47 > [ 8904.113529]  [] shrink_list+0x24d/0x514 > [ 8904.113535]  [] ? lock_timer_base+0x26/0x45 > [ 8904.113540]  [] ? get_dirty_limits+0x21/0x28a > [ 8904.113562]  [] ? mmu_shrink+0x1c/0xf4 [kvm] > [ 8904.113566]  [] ? print_lock_contention_bug+0x11/0xb2 > [ 8904.113573]  [] shrink_zone+0x211/0x2aa > [ 8904.113578]  [] try_to_free_pages+0x1d1/0x2b2 > [ 8904.113583]  [] ? isolate_pages_global+0x0/0x18b > [ 8904.113589]  [] __alloc_pages_nodemask+0x2d5/0x457 > [ 8904.113594]  [] __do_page_cache_readahead+0x10c/0x1c7 > [ 8904.113599]  [] ra_submit+0x1c/0x21 > [ 8904.113604]  [] filemap_fault+0x1c5/0x39e > [ 8904.113609]  [] __do_fault+0x40/0x363 > [ 8904.113614]  [] ? do_page_fault+0x1da/0x313 > [ 8904.113620]  [] handle_mm_fault+0x228/0x4ea > [ 8904.113625]  [] ? do_page_fault+0x1da/0x313 > [ 8904.113630]  [] do_page_fault+0x304/0x313 > [ 8904.113635]  [] ? do_page_fault+0x0/0x313 > [ 8904.113639]  [] error_code+0x6b/0x70 > [ 8904.113644]  [] ? do_page_fault+0x0/0x313 > [ 8904.113648] ---[ end trace 73f44c391fc78b0b ]--- > > -- > To unsubscribe from this list: send the line "unsubscribe linux-kernel" in > the body of a message to majordomo@vger.kernel.org > More majordomo info at  http://vger.kernel.org/majordomo-info.html > Please read the FAQ at  http://www.tux.org/lkml/ >