LVS
lvs-devel
Google
 
Web LinuxVirtualServer.org

Re: Slab corruption

To: Hans Schillstrom <hans.schillstrom@xxxxxxxxxxxx>
Subject: Re: Slab corruption
Cc: Simon Horman <horms@xxxxxxxxxxxx>, "lvs-devel@xxxxxxxxxxxxxxx" <lvs-devel@xxxxxxxxxxxxxxx>
From: Julian Anastasov <ja@xxxxxx>
Date: Mon, 11 Oct 2010 23:36:47 +0300 (EEST)

        Hello,

On Mon, 11 Oct 2010, Hans Schillstrom wrote:

        There is one atomic_dec after free but I'm not sure
if it matches the dump below. If in doubt just add
svc = NULL in ip_vs_genl_set_cmd after the call to
ip_vs_del_service.

added  svc = NULL,
but it did not make any difference :-(

        Do you see this message in debugs? Once or twice?
And with usecnt > 0?:

IP_VS_DBG_BUF(3, "Removing service %u/%s:%u usecnt=%d\n",

        Also, do you have traffic or any connections
while removing the service? What is the result when
there is no traffic?

ex.
# ipvsadm -D -f 21 -6
Slab corruption: size-512 start=ffff880001760488, len=512
Redzone: 0x9f911029d74e35b/0x9f911029d74e35b.
Last user: [<ffffffffa004aa3a>](__ip_vs_del_service+0xfa/0x108 [ip_vs])
020: 6b 6b 6b 6b 6a 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b

        Is this offset 0x24? Can you determine which
field of struct ip_vs_service is on offset 0x24? It can
be usecnt if platform is 64-bit.

Regards

--
Julian Anastasov <ja@xxxxxx>
--
To unsubscribe from this list: send the line "unsubscribe lvs-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

<Prev in Thread] Current Thread [Next in Thread>