From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1756867AbYEIKbV (ORCPT ); Fri, 9 May 2008 06:31:21 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1753591AbYEIKbI (ORCPT ); Fri, 9 May 2008 06:31:08 -0400 Received: from bay0-omc1-s31.bay0.hotmail.com ([65.54.246.103]:9561 "EHLO bay0-omc1-s31.bay0.hotmail.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752715AbYEIKbH (ORCPT ); Fri, 9 May 2008 06:31:07 -0400 Message-ID: X-Originating-IP: [85.32.103.134] X-Originating-Email: [pupilla@hotmail.com] From: "Marco Berizzi" To: "Herbert Xu" Cc: , References: <20080509102509.GA11710@gondor.apana.org.au> Subject: Re: 2.6.25 crash: EIP: [] xfrm_output_resume+0x64/0x100 ss:esp 0068:c03a1e5c Date: Fri, 9 May 2008 12:28:39 +0200 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1123 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1123 X-OriginalArrivalTime: 09 May 2008 10:31:06.0576 (UTC) FILETIME=[C9FD7500:01C8B1BF] Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Herbert Xu wrote: > On Fri, May 09, 2008 at 11:50:00AM +0200, Marco Berizzi wrote: > > > > I have rebooted the two boxes with slub_debug. > > This is the output taken with network console. > > Herbert does it help you? > > > > BUG: unable to handle kernel paging request at 6b6b6b9f > > Unfortunately this just confirms that your skb has been freed > prematurely because 6b is the poison value. > > However, it doesn't point us at the offender. :-(( > Although I wonder if there might be something in netfilter that's > freeing it since that's the only thing that could've run on your > machine between the previous access and the crash. I'll take > another look. Let me know if the only solution is git bisect. The bug is spotted when sch_sfq/_htb and cls_fw are loaded.