> Leaving untouched.
>
> On 04/21/2008 11:18 PM, Jiri Slaby wrote:
>> On 04/21/2008 10:39 PM, David Miller wrote:
>>> From: Linus Torvalds <torvalds@linux-foundation.org>
>>> Date: Mon, 21 Apr 2008 09:54:07 -0700 (PDT)
>>>
>>>> What I find interesting is that at least for me, I have the SLAB
>>>> bucket size for nf_conntrack_expect being 208 bytes. And the
>>>> *biggest* merge by far after 2.6.25 so far has been networking (and
>>>> conntrack in particular)
>>>>
>>>> Is that a smoking gun? Not necessarily. But it *is* intriguing. But
>>>> there are other possible clashes (the 192-byte bucket has several
>>>> different suspects, and not all of them are in networking).1
>>>
>>> I think you might be onto something here.
>>>
>>> The "mask" member of struct nf_conntrack_expect could be reasonably
>>> all 1's like the value reported in the crash that begins this
>>> thread.
>>>
>>> Do we know the offset within the object at which this all 1's
>>> value is found?
>>>
>>> My rough calculations show that on 32-bit that expect->mask member is
>>> at offset 56 and on 64-bit it should be at offset 72. Does that
>>> match up to the offset of the filp or whatever bit being corrupted?
>>
>> dentry.d_name.name is 56 on 64-bit (my memcmp crashes)
>> dentry.d_hash.next is 24 (crashed at least 3 times here, rafael's one)
>> dentry.d_op is 136 (crash below)
>
> file.f_mapping is 176 (the another one from -rc8-mm2)
>
> the one at:
>
http://www.opensubscriber.com/message/linux-kernel@vger.kernel.org/9008289.html
>
>
> Having slub_debug enabled, tomorrow will be results, I guess...
