Re: [Bugme-new] [Bug 12552] New: held lock freed in tcp

Re: [Bugme-new] [Bug 12552] New: held lock freed in tcp

[Andrew Morton]

(switched to email.  Please respond via emailed reply-to-all, not via the
bugzilla web interface).

On Tue, 27 Jan 2009 09:59:06 -0800 (PST) bugme-daemon@bugzilla.kernel.org wrote:

> http://bugzilla.kernel.org/show_bug.cgi?id=12552
> 
>            Summary: held lock freed in tcp
>            Product: Networking
>            Version: 2.5
>      KernelVersion: 2.6.29-rc2-wl-11979-gc32422d-dirty
>           Platform: All
>         OS/Version: Linux
>               Tree: Mainline
>             Status: NEW
>           Severity: normal
>           Priority: P1
>          Component: IPV4
>         AssignedTo: shemminger@linux-foundation.org
>         ReportedBy: johannes@sipsolutions.net
> 
> 
> Latest working kernel version: ?
> Earliest failing kernel version: ?
> Distribution: debian/unstable
> Hardware Environment: macbook5,1
> Software Environment:
> Problem Description:
> 
> Steps to reproduce:
> 
> Not always reproducible, I was running iperf against a peer that suddenly lost
> its link due to another bug...
> 
> [  598.850133] 
> [  598.850136] =========================
> [  598.850141] [ BUG: held lock freed! ]
> [  598.850143] -------------------------
> [  598.850147] swapper/0 is freeing memory ffff88007a389300-ffff88007a389c07,
> with a lock still held there!
> [  598.850151]  (&icsk->icsk_retransmit_timer){-+..}, at: [<ffffffff80252080>]
> run_timer_softirq+0x110/0x290
> [  598.850163] 1 lock held by swapper/0:
> [  598.850165]  #0:  (&icsk->icsk_retransmit_timer){-+..}, at:
> [<ffffffff80252080>] run_timer_softirq+0x110/0x290
> [  598.850173] 
> [  598.850174] stack backtrace:
> [  598.850178] Pid: 0, comm: swapper Not tainted
> 2.6.29-rc2-wl-11979-gc32422d-dirty #24
> [  598.850180] Call Trace:
> [  598.850183]  <IRQ>  [<ffffffff8027111f>] print_freed_lock_bug+0xbf/0xd0
> [  598.850193]  [<ffffffff80272d34>] debug_check_no_locks_freed+0x74/0xc0
> [  598.850199]  [<ffffffff802d78aa>] kmem_cache_free+0x7a/0xf0
> [  598.850206]  [<ffffffff8053a4a0>] ? tcp_write_timer+0x0/0x220
> [  598.850211]  [<ffffffff804e7206>] sk_free+0x86/0x100
> [  598.850215]  [<ffffffff8053a550>] tcp_write_timer+0xb0/0x220
> [  598.850219]  [<ffffffff8025210a>] run_timer_softirq+0x19a/0x290
> [  598.850223]  [<ffffffff80252080>] ? run_timer_softirq+0x110/0x290
> [  598.850228]  [<ffffffff8024d51d>] __do_softirq+0x9d/0x190
> [  598.850234]  [<ffffffff8020cebc>] call_softirq+0x1c/0x40
> [  598.850238]  [<ffffffff8020e1a5>] do_softirq+0x75/0xc0
> [  598.850242]  [<ffffffff8024d025>] irq_exit+0x85/0xb0
> [  598.850246]  [<ffffffff8020e441>] do_IRQ+0xa1/0x150
> [  598.850250]  [<ffffffff8020c6d3>] ret_from_intr+0x0/0xf
> 
> 

Re: [Bugme-new] [Bug 12552] New: held lock freed in tcp

[Johannes Berg]

[-- Attachment #1: Type: text/plain, Size: 980 bytes --]

On Tue, 2009-01-27 at 10:19 -0800, Andrew Morton wrote:
> (switched to email.  Please respond via emailed reply-to-all, not via the
> bugzilla web interface).
> 
> On Tue, 27 Jan 2009 09:59:06 -0800 (PST) bugme-daemon@bugzilla.kernel.org wrote:
> 
> > http://bugzilla.kernel.org/show_bug.cgi?id=12552
> > 
> >            Summary: held lock freed in tcp

> > [  598.850136] =========================
> > [  598.850141] [ BUG: held lock freed! ]
> > [  598.850143] -------------------------
> > [  598.850147] swapper/0 is freeing memory ffff88007a389300-ffff88007a389c07,
> > with a lock still held there!
> > [  598.850151]  (&icsk->icsk_retransmit_timer){-+..}, at: [<ffffffff80252080>]
> > run_timer_softirq+0x110/0x290
> > [  598.850163] 1 lock held by swapper/0:
> > [  598.850165]  #0:  (&icsk->icsk_retransmit_timer){-+..}, at:
> > [<ffffffff80252080>] run_timer_softirq+0x110/0x290

Disregard, it's my own timer debugging code gone wrong.

johannes

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 836 bytes --]