Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753411Ab2E3MWo (ORCPT ); Wed, 30 May 2012 08:22:44 -0400 Received: from mail-lb0-f174.google.com ([209.85.217.174]:62689 "EHLO mail-lb0-f174.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753130Ab2E3MWm (ORCPT ); Wed, 30 May 2012 08:22:42 -0400 Message-ID: <4FC61107.8050002@openvz.org> Date: Wed, 30 May 2012 16:22:31 +0400 From: Konstantin Khlebnikov User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:10.0.4) Gecko/20120517 Firefox/10.0.4 Iceape/2.7.4 MIME-Version: 1.0 To: Martin Mokrejs CC: Andrew Morton , Oleg Nesterov , LKML , "markus@trippelsdorf.de" , "hughd@google.com" , "kamezawa.hiroyu@jp.fujitsu.com" , Michal Hocko , "linux-mm@kvack.org" Subject: Re: 3.4-rc7: BUG: Bad rss-counter state mm:ffff88040b56f800 idx:1 val:-59 References: <4FBC1618.5010408@fold.natur.cuni.cz> <20120522162835.c193c8e0.akpm@linux-foundation.org> <20120522162946.2afcdb50.akpm@linux-foundation.org> <20120523172146.GA27598@redhat.com> <4FC52F17.20709@openvz.org> <20120529132658.14ab9ba3.akpm@linux-foundation.org> <4FC546B1.8050508@fold.natur.cuni.cz> <4FC606E7.4090701@openvz.org> <4FC60BBC.203@fold.natur.cuni.cz> In-Reply-To: <4FC60BBC.203@fold.natur.cuni.cz> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 2704 Lines: 81 Martin Mokrejs wrote: > > > Konstantin Khlebnikov wrote: >> Martin Mokrejs wrote: >>> Andrew Morton wrote: >>>> On Wed, 30 May 2012 00:18:31 +0400 >>>> Konstantin Khlebnikov wrote: >>>> >>>>> Oleg Nesterov wrote: >>>>>> On 05/22, Andrew Morton wrote: >>>>>>> >>>>>>> Also, I have a note here that Oleg was unhappy with the patch. Oleg >>>>>>> happiness is important. Has he cheered up yet? >>>>>> >>>>>> Well, yes, I do not really like this patch ;) Because I think there is >>>>>> a more simple/straightforward fix, see below. In my opinion it also >>>>>> makes the original code simpler. >>>>>> >>>>>> But. Obviously this is subjective, I can't prove my patch is "better", >>>>>> and I didn't try to test it. >>>>>> >>>>>> So I won't argue with Konstantin who dislikes my patch, although I >>>>>> would like to know the reason. >>>>> >>>>> I don't remember why I dislike your patch. >>>>> For now I can only say ACK ) >>>> >>>> We'll need a changelogged signed-off patch, please Oleg. And some evidence >>>> that it was tested would be nice ;) >>> >>> I will reboot in few hours, finally after few days ... I am running this first >>> patch. I will try to test the second/alternative patch more quickly. Sorry for >>> the delay. >>> >> >> easiest way trigger this bug: >> >> #define _GNU_SOURCE >> #include >> #include >> #include >> #include >> >> static inline int sys_clone(unsigned long flags, void *stack, int *ptid, int *ctid) >> { >> return syscall(SYS_clone, flags, stack, ptid, ctid); >> } >> >> int main(int argc, char **argv) >> { >> void *page; >> >> page = mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0); >> sys_clone(CLONE_VFORK | CLONE_VM | CLONE_CHILD_CLEARTID, NULL, NULL, page); >> } >> > > I am getting segfaults with this. > > (gdb) where > #0 0x0000000000000000 in ?? () > #1 0x00007f430f70a7e0 in __elf_set___libc_subfreeres_element_free_mem__ () from /lib64/libc.so.6 > #2 0x00007f430f70a7e8 in __elf_set___libc_atexit_element__IO_cleanup__ () from /lib64/libc.so.6 > #3 0x0000000000000001 in ?? () > #4 0x0000000000000000 in ?? () > (gdb) > > What number should I give it as an argument? ;-) there is no arguments. yeah it corrupts stack. I'm too lazy to write it properly =) but on non-patched kernel it also triggers this bug: [206732.025131] BUG: Bad rss-counter state mm:ffff88000d8a6c80 idx:1 val:-1 -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/