On Tue, Mar 23, 2021 at 11:17:41PM +0100, Frank Scheiner wrote: > 028abd9222df0cf5855dab5014a5ebaf06f90565 > > ...is broken on my T1000. > > As I don't know how big attachments can be on this list, I put the logs > on pastebin. > > A log for 028abd9222df is here: > > https://pastebin.com/ApPYsMcu
Just do confirm: in this tree line 304 in mm/slub.c is this BUG_ON: BUG_ON(object == fp); /* naive detection of double free or corruption */ which would mean we have a double free. In that case it would be interesting which call to kfree this is, which could be done by calling gdb on vmlinux and then typing; l *(sys_mount+0x114/0x1e0) Not that a double free caused by this conversion makes any sense to me..