Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 117507 - [post-2.6.10 regression] slab: double free detected in cache 'vm_area_struct'
Summary: [post-2.6.10 regression] slab: double free detected in cache 'vm_area_struct'
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Core system (show other bugs)
Hardware: x86 Linux
: High major (vote)
Assignee: Gentoo Kernel Bug Wranglers and Kernel Maintainers
Whiteboard: linux-2.6.??-regression
Depends on:
Reported: 2006-01-02 16:08 UTC by Malte S. Stretz
Modified: 2007-11-06 11:27 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

dmesg output (bug117507-dmesg.txt,20.46 KB, text/plain)
2006-01-02 16:09 UTC, Malte S. Stretz
kernel config (bug117507.config,36.34 KB, text/plain)
2006-01-02 16:12 UTC, Malte S. Stretz
dmesg from vanilla-sources-2.6.15 (bug117507-dmesg-2.6.15.txt,22.94 KB, text/plain)
2006-01-21 03:14 UTC, Malte S. Stretz
it still crashes with 2.6.16-rc1 (bug117507-dmesg-2.6.16-rc1.txt,17.35 KB, text/plain)
2006-01-21 10:51 UTC, Malte S. Stretz
differences between crashing and current config (bug117507.config.diff,10.43 KB, patch)
2006-01-25 11:25 UTC, Malte S. Stretz
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Malte S. Stretz 2006-01-02 16:08:09 UTC
Since I upgraded my kernel from 2.6.10-gentoo-r4, my system tends to crash under high load.  A good way to reproduce it is compiling koffice in an emerge -uD world.  This started to happen with some version after 2.6.10 but it wasn't reproducable till now and I didn't have the chance to get my hands on the kernel ring buffer (dmesg over xinetd rocks :)

The kernel complains that it has a "double free detected in cache 'vm_area_struct'".  For some reason it seems like most the times (but not always) it starts killing apache first.

I'll attach the dmesg output and my kernel config.
Comment 1 Malte S. Stretz 2006-01-02 16:09:04 UTC
Created attachment 76024 [details]
dmesg output
Comment 2 Malte S. Stretz 2006-01-02 16:12:16 UTC
Created attachment 76026 [details]
kernel config
Comment 3 Malte S. Stretz 2006-01-02 16:27:28 UTC
Google sent me to this [1] mail from Andrew Morton:
| slab presently goes BUG if someone tries to register an already-registered
| cache.
| But this can happen if the user accidentally loads a module which is already
| statically linked into the kernel.  Nuking the kernel is rather a harsh
| reaction.
| Change it into a warning, and just fail the kmem_cache_alloc() attempt.  If
| he module is well-behaved, the modprobe will fail and all is well.

I actually compiled the 8250 module into the kernel when I upgraded and the startup scripts still try to load the module.  It seems like there should be already some patch against this problem in the current kernel and my box doesn't crash on boot, but I'll have a try without anyway...

Comment 4 Malte S. Stretz 2006-01-02 16:29:12 UTC
Hmmm... end of this monologue for today:  The init scripts still try to load 8250 but I never compiled it as a module for 2.6.14, so this can't really be the problem.
Comment 5 Daniel Drake (RETIRED) gentoo-dev 2006-01-20 15:40:29 UTC
Please test with the latest development kernel (currently 2.6.16-rc1)
Comment 6 Malte S. Stretz 2006-01-21 00:59:04 UTC
I already tested gentoo-sources-2.6.15 which shows the same behaviour. I wanted to try the vanilla kernel, too, but didn't have the time to do so till now. I'll try to check the 2.6.16 one, too, but it might take a while.
Comment 7 Malte S. Stretz 2006-01-21 03:14:11 UTC
Created attachment 77690 [details]
dmesg from vanilla-sources-2.6.15

vanilla-sources-2.6.15 crash too. I'll try 2.6.16-rc1 next.
Comment 8 Malte S. Stretz 2006-01-21 09:33:14 UTC
vanilla-sources-2.6.16-rc1 behave fine, at least when I compile KOffice which crashed all the prevoius kernels.

2.6.16-rc1 has some annoying IPv6 bug though, see
Comment 9 Malte S. Stretz 2006-01-21 10:51:15 UTC
Created attachment 77737 [details]
it still crashes with 2.6.16-rc1

I was wrong, 2.6.16-rc1 crashes, too.  This time when I was compiling php.
Comment 10 Daniel Drake (RETIRED) gentoo-dev 2006-01-25 05:50:25 UTC
I'm stumped. Please file this as an upstream bug against 2.6.16-rc1 at and post the new URL here.
Comment 11 Malte S. Stretz 2006-01-25 11:25:04 UTC
Created attachment 78093 [details, diff]
differences between crashing and current config

Hmmm... when I built that 2.6.14 kernel I actually changed some options.  Now I built a new one with almost the same options as 2.6.10 and it doesn't seem to crash.

I currently suspect either the CONFIG_HZ_1000 option (wasn't 1kHz the default in the old 2.6 without the config option?) or the CONFIG_SND_USB_AUDIO which I didn't add this time.  Especially because the dmesg ouput shows a lot of USB hickups after the crashes and I actually tend to switch off my screen, which has the USB audio included, on long compiles.  I'll try around and when I found the culprit and I am sure that its not caused by the Gentoo patchset, I'll file it upstream.
Comment 12 Malte S. Stretz 2006-01-26 04:58:16 UTC
*grmf* it still crashes with that config, it just took a bit longer.  I filed it upstream, see <>.