* Re: 3.17.7: list corruption(?) near epoll
@ 2014-12-30 12:10 Hillf Danton
0 siblings, 0 replies; 2+ messages in thread
From: Hillf Danton @ 2014-12-30 12:10 UTC (permalink / raw)
To: 'Alexey Dobriyan'; +Cc: linux-kernel, Andrew Morton, Hillf Danton
>
> Caught while browsing with chromium shortly after boot.
> Haven't seen something like that before.
>
Maybe the POLLFREE race still in mainline, mind trying the untested diff?
--- linux-3.16.1-org/fs/eventpoll.c Thu Aug 14 10:36:35 2014
+++ linux-3.16.1/fs/eventpoll.c Tue Dec 30 19:59:06 2014
@@ -520,7 +520,7 @@ static void ep_remove_wait_queue(struct
rcu_read_lock();
/* If it is cleared by POLLFREE, it should be rcu-safe */
whead = rcu_dereference(pwq->whead);
- if (whead)
+ if (whead && !list_empty(&pwq->wait.task_list))
remove_wait_queue(whead, &pwq->wait);
rcu_read_unlock();
}
--
> Several chromium tabs locked up, dmesg was full of
> similar messages. Box was more or less operational,
> then switched to text console with last panic message.
>
> After reboot, that's all what was left:
>
> [<ffffffff8115155d>] ep_remove+0x1d/0xb0
> [<ffffffff81152740>] SyS_epoll_ctl+0x400/0xae0
> [<ffffffff8109780b>] ? local_clock+0x1b/0x30
> [<ffffffff8104803b>] ? syscall_trace_enter+0x16b/0x180
> [<ffffffff81485009>] tracesys+0xd0/0xd5
> ---[ end trace 3fc03b0916c7ab8d ]---
> ------------[ cut here ]------------
> WARNING: CPU: 0 PID: 1384 at lib/list_debug.c:53 __list_del_entry+0x63/0xd0()
> list_del corruption, ffff8800d99a7858->next is LIST_POISON1 (dead000000100100)
> Modules linked in: usbhid uhci_hcd
> CPU: 0 PID: 1384 Comm: Chrome_IOThread Tainted: G W 3.17.7 #51
> Hardware name: Hewlett-Packard HP Compaq dc7800 Convertible
> Minitower/0AACh, BIOS 786F1 v01.28 02/26/2009
> 0000000000000009 ffff8800c6387d70 ffffffff8147f3c3 ffff8800c6387db8
> ffff8800c6387da8 ffffffff810761f3 ffff8800d99a7858 ffff8800d99a7840
> 0000000000000286 00000000000000fa fffffffffffffffe ffff8800c6387e08
> Call Trace:
> [<ffffffff8147f3c3>] dump_stack+0x4d/0x6f
> [<ffffffff810761f3>] warn_slowpath_common+0x73/0x90
> [<ffffffff81076257>] warn_slowpath_fmt+0x47/0x50
> [<ffffffff81076257>] ? warn_slowpath_fmt+0x47/0x50
> [<ffffffff81205983>] __list_del_entry+0x63/0xd0
> [<ffffffff812059fd>] list_del+0xd/0x30
> [<ffffffff810a12e1>] remove_wait_queue+0x21/0x40
> [<ffffffff8115150f>] ep_unregister_pollwait.isra.17+0x3f/0x70
> [<ffffffff8115155d>] ep_remove+0x1d/0xb0
> [<ffffffff81152740>] SyS_epoll_ctl+0x400/0xae0
> [<ffffffff8109780b>] ? local_clock+0x1b/0x30
> [<ffffffff8104803b>] ? syscall_trace_enter+0x16b/0x180
> [<ffffffff81485009>] tracesys+0xd0/0xd5
> ---[ end trace 3fc03b0916c7ab8e ]---
> ------------[ cut here ]------------
> WARNING: CPU: 0 PID: 1384 at lib/list_debug.c:56 __list_del_entry+0xc3/0xd0()
> list_del corruption, ffff8800d99a7828->prev is LIST_POISON2 (dead000000200200)
> Modules linked in: usbhid uhci_hcd
> CPU: 0 PID: 1384 Comm: Chrome_IOThread Tainted: G W 3.17.7 #51
> Hardware name: Hewlett-Packard HP Compaq dc7800 Convertible
> Minitower/0AACh, BIOS 786F1 v01.28 02/26/2009
> 0000000000000009 ffff8800c6387d98 ffffffff8147f3c3 ffff8800c6387de0
> ffff8800c6387dd0 ffffffff810761f3 ffff8800d99a7828 ffff8800d8df8a00
> ffff8800d8df8a40 00000000000000fa fffffffffffffffe ffff8800c6387e30
> Call Trace:
> --
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at http://www.tux.org/lkml/
^ permalink raw reply [flat|nested] 2+ messages in thread
* 3.17.7: list corruption(?) near epoll
@ 2014-12-30 10:16 Alexey Dobriyan
0 siblings, 0 replies; 2+ messages in thread
From: Alexey Dobriyan @ 2014-12-30 10:16 UTC (permalink / raw)
To: Linux Kernel, Andrew Morton
Caught while browsing with chromium shortly after boot.
Haven't seen something like that before.
Several chromium tabs locked up, dmesg was full of
similar messages. Box was more or less operational,
then switched to text console with last panic message.
After reboot, that's all what was left:
[<ffffffff8115155d>] ep_remove+0x1d/0xb0
[<ffffffff81152740>] SyS_epoll_ctl+0x400/0xae0
[<ffffffff8109780b>] ? local_clock+0x1b/0x30
[<ffffffff8104803b>] ? syscall_trace_enter+0x16b/0x180
[<ffffffff81485009>] tracesys+0xd0/0xd5
---[ end trace 3fc03b0916c7ab8d ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 1384 at lib/list_debug.c:53 __list_del_entry+0x63/0xd0()
list_del corruption, ffff8800d99a7858->next is LIST_POISON1 (dead000000100100)
Modules linked in: usbhid uhci_hcd
CPU: 0 PID: 1384 Comm: Chrome_IOThread Tainted: G W 3.17.7 #51
Hardware name: Hewlett-Packard HP Compaq dc7800 Convertible
Minitower/0AACh, BIOS 786F1 v01.28 02/26/2009
0000000000000009 ffff8800c6387d70 ffffffff8147f3c3 ffff8800c6387db8
ffff8800c6387da8 ffffffff810761f3 ffff8800d99a7858 ffff8800d99a7840
0000000000000286 00000000000000fa fffffffffffffffe ffff8800c6387e08
Call Trace:
[<ffffffff8147f3c3>] dump_stack+0x4d/0x6f
[<ffffffff810761f3>] warn_slowpath_common+0x73/0x90
[<ffffffff81076257>] warn_slowpath_fmt+0x47/0x50
[<ffffffff81076257>] ? warn_slowpath_fmt+0x47/0x50
[<ffffffff81205983>] __list_del_entry+0x63/0xd0
[<ffffffff812059fd>] list_del+0xd/0x30
[<ffffffff810a12e1>] remove_wait_queue+0x21/0x40
[<ffffffff8115150f>] ep_unregister_pollwait.isra.17+0x3f/0x70
[<ffffffff8115155d>] ep_remove+0x1d/0xb0
[<ffffffff81152740>] SyS_epoll_ctl+0x400/0xae0
[<ffffffff8109780b>] ? local_clock+0x1b/0x30
[<ffffffff8104803b>] ? syscall_trace_enter+0x16b/0x180
[<ffffffff81485009>] tracesys+0xd0/0xd5
---[ end trace 3fc03b0916c7ab8e ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 1384 at lib/list_debug.c:56 __list_del_entry+0xc3/0xd0()
list_del corruption, ffff8800d99a7828->prev is LIST_POISON2 (dead000000200200)
Modules linked in: usbhid uhci_hcd
CPU: 0 PID: 1384 Comm: Chrome_IOThread Tainted: G W 3.17.7 #51
Hardware name: Hewlett-Packard HP Compaq dc7800 Convertible
Minitower/0AACh, BIOS 786F1 v01.28 02/26/2009
0000000000000009 ffff8800c6387d98 ffffffff8147f3c3 ffff8800c6387de0
ffff8800c6387dd0 ffffffff810761f3 ffff8800d99a7828 ffff8800d8df8a00
ffff8800d8df8a40 00000000000000fa fffffffffffffffe ffff8800c6387e30
Call Trace:
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2014-12-30 12:10 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2014-12-30 12:10 3.17.7: list corruption(?) near epoll Hillf Danton
-- strict thread matches above, loose matches on Subject: below --
2014-12-30 10:16 Alexey Dobriyan
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
Powered by JetHome