| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <54071500.40907@oracle.com> Date: Wed, 03 Sep 2014 09:17:52 -0400 From: Sasha Levin <sasha.levin@...cle.com> To: Ingo Molnar <mingo@...nel.org>, Peter Zijlstra <peterz@...radead.org> CC: LKML <linux-kernel@...r.kernel.org>, Dave Jones <davej@...hat.com> Subject: sched: memory corruption and NULL ptr deref Hi all, While fuzzing with trinity inside a KVM tools guest running the latest -next kernel, I've stumbled on the following spew: ============================================================================= [ 653.192192] BUG kmalloc-512 (Not tainted): Padding overwritten. 0xffff8804ed0efff8-0xffff8804ed0effff [ 653.192329] ----------------------------------------------------------------------------- [ 653.192329] [ 653.192329] Disabling lock debugging due to kernel taint [ 653.192329] INFO: Slab 0xffffea0013b43a00 objects=39 used=36 fp=0xffff8804ed0e9068 flags=0xafffff80004081 [ 653.200219] FAULT_INJECTION: forcing a failure [ 653.192329] CPU: 6 PID: 18 Comm: rcuop/6 Tainted: G B 3.17.0-rc3-next-20140901-sasha-00030-g662fbc2 #1098 [ 653.192329] ffff880277409040 ffff88027306fad8 ffffffff984f1b2d ffffea0013b43a00 [ 653.211262] ffff88027306fbb0 ffffffff9530a994 0000000000000028 ffff88027306fbc0 [ 653.212176] ffff88027306fb70 646461509c0b00f0 7265766f20676e69 2e6e657474697277 [ 653.212176] Call Trace: [ 653.212176] dump_stack (lib/dump_stack.c:52) [ 653.212176] slab_err (mm/slub.c:661) [ 653.212176] slab_pad_check (mm/slub.c:485 mm/slub.c:790) [ 653.212176] check_slab (mm/slub.c:872) [ 653.212176] free_debug_processing (mm/slub.c:1060) [ 653.212176] ? __this_cpu_preempt_check (lib/smp_processor_id.c:63) [ 653.212176] ? free_fair_sched_group (kernel/sched/fair.c:7745) [ 653.212176] __slab_free (mm/slub.c:2526 (discriminator 1)) [ 653.228808] ? __debug_check_no_obj_freed (lib/debugobjects.c:713) [ 653.228808] ? __this_cpu_preempt_check (lib/smp_processor_id.c:63) [ 653.228808] kfree (mm/slub.c:2672 mm/slub.c:3351) [ 653.228808] ? free_fair_sched_group (kernel/sched/fair.c:7745) [ 653.228808] free_fair_sched_group (kernel/sched/fair.c:7745) [ 653.228808] ? free_sched_group (kernel/sched/core.c:7294) [ 653.228808] free_sched_group (kernel/sched/core.c:7250) [ 653.228808] free_sched_group_rcu (kernel/sched/core.c:7297) [ 653.228808] rcu_nocb_kthread (include/linux/rcupdate.h:365 kernel/rcu/rcu.h:119 kernel/rcu/tree_plugin.h:2424) [ 653.228808] ? rcu_nocb_kthread (kernel/rcu/rcu.h:84 kernel/rcu/tree_plugin.h:2422) [ 653.228808] ? preempt_count_sub (kernel/sched/core.c:2626) [ 653.228808] ? __wait_on_bit_lock (kernel/sched/wait.c:291) [ 653.228808] ? rcu_barrier (kernel/rcu/tree_plugin.h:2382) [ 653.228808] kthread (kernel/kthread.c:207) [ 653.228808] ? debug_smp_processor_id (lib/smp_processor_id.c:57) [ 653.228808] ? flush_kthread_work (kernel/kthread.c:176) [ 653.228808] ret_from_fork (arch/x86/kernel/entry_64.S:348) [ 653.228808] ? flush_kthread_work (kernel/kthread.c:176) [ 653.260746] Padding ffff8804ed0efff8: 00 00 00 00 00 00 00 00 ........ [ 653.260746] FIX kmalloc-512: Restoring 0xffff8804ed0efff8-0xffff8804ed0effff=0x5a [ 653.260746] [ 653.260746] ============================================================================= [ 653.260746] BUG kmalloc-512 (Tainted: G B ): Wrong object count. Counter is 36 but counted were 38 [ 653.260746] ----------------------------------------------------------------------------- [ 653.260746] [ 653.260746] INFO: Slab 0xffffea0013b43a00 objects=39 used=36 fp=0xffff8804ed0e9068 flags=0xafffff80004081 [ 653.273966] CPU: 6 PID: 18 Comm: rcuop/6 Tainted: G B 3.17.0-rc3-next-20140901-sasha-00030-g662fbc2 #1098 [ 653.273966] ffff880277409040 ffff88027306fb00 ffffffff984f1b2d ffffea0013b43a00 [ 653.273966] ffff88027306fbd8 ffffffff9530a994 2020202000000028 ffff88027306fbe8 [ 653.273966] ffff88027306fb98 6e6f7257ed0effff 7463656a626f2067 202e746e756f6320 [ 653.273966] Call Trace: [ 653.273966] dump_stack (lib/dump_stack.c:52) [ 653.273966] slab_err (mm/slub.c:661) [ 653.273966] on_freelist (mm/slub.c:922) [ 653.273966] free_debug_processing (mm/slub.c:1068) [ 653.273966] ? __this_cpu_preempt_check (lib/smp_processor_id.c:63) [ 653.273966] ? free_fair_sched_group (kernel/sched/fair.c:7745) [ 653.273966] __slab_free (mm/slub.c:2526 (discriminator 1)) [ 653.273966] ? __debug_check_no_obj_freed (lib/debugobjects.c:713) [ 653.273966] ? __this_cpu_preempt_check (lib/smp_processor_id.c:63) [ 653.273966] kfree (mm/slub.c:2672 mm/slub.c:3351) [ 653.273966] ? free_fair_sched_group (kernel/sched/fair.c:7745) [ 653.273966] free_fair_sched_group (kernel/sched/fair.c:7745) [ 653.273966] ? free_sched_group (kernel/sched/core.c:7294) [ 653.273966] free_sched_group (kernel/sched/core.c:7250) [ 653.273966] free_sched_group_rcu (kernel/sched/core.c:7297) [ 653.273966] rcu_nocb_kthread (include/linux/rcupdate.h:365 kernel/rcu/rcu.h:119 kernel/rcu/tree_plugin.h:2424) [ 653.273966] ? rcu_nocb_kthread (kernel/rcu/rcu.h:84 kernel/rcu/tree_plugin.h:2422) [ 653.273966] ? preempt_count_sub (kernel/sched/core.c:2626) [ 653.273966] ? __wait_on_bit_lock (kernel/sched/wait.c:291) [ 653.273966] ? rcu_barrier (kernel/rcu/tree_plugin.h:2382) [ 653.273966] kthread (kernel/kthread.c:207) [ 653.273966] ? debug_smp_processor_id (lib/smp_processor_id.c:57) [ 653.273966] ? flush_kthread_work (kernel/kthread.c:176) [ 653.273966] ret_from_fork (arch/x86/kernel/entry_64.S:348) [ 653.273966] ? flush_kthread_work (kernel/kthread.c:176) [ 653.273966] FIX kmalloc-512: Object count adjusted. [ 653.273966] ============================================================================= [ 653.273966] BUG kmalloc-512 (Tainted: G B ): Redzone overwritten [ 653.273966] ----------------------------------------------------------------------------- [ 653.273966] [ 653.273966] INFO: 0xffff8804ed0ed750-0xffff8804ed0ed757. First byte 0x0 instead of 0xcc [ 653.273966] INFO: Slab 0xffffea0013b43a00 objects=39 used=38 fp=0xffff8804ed0e9068 flags=0xafffff80004081 [ 653.273966] INFO: Object 0xffff8804ed0ed550 @offset=21840 fp=0x (null) [ 653.273966] [ 653.273966] Bytes b4 ffff8804ed0ed540: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed550: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed560: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed570: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed590: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed5a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed5b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed5c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed5d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed5e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed5f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed610: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed620: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed630: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed640: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed650: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed660: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed670: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.426241] FAULT_INJECTION: forcing a failure [ 653.273966] Object ffff8804ed0ed690: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed6a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed6b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed6c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed6d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed6e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed6f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed710: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed720: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed730: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Object ffff8804ed0ed740: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.273966] Redzone ffff8804ed0ed750: 00 00 00 00 00 00 00 00 ........ [ 653.273966] Padding ffff8804ed0ed890: 00 00 00 00 00 00 00 00 ........ [ 653.273966] CPU: 6 PID: 18 Comm: rcuop/6 Tainted: G B 3.17.0-rc3-next-20140901-sasha-00030-g662fbc2 #1098 [ 653.273966] ffff8804ed0ed550 ffff88027306fb50 ffffffff984f1b2d ffff880277409040 [ 653.273966] ffff88027306fb90 ffffffff9530995b 0000000000000008 ffff880400000001 [ 653.273966] ffff8804ed0ed758 ffff880277409040 00000000000000cc ffff8804ed0ed550 [ 653.273966] Call Trace: [ 653.273966] dump_stack (lib/dump_stack.c:52) [ 653.273966] print_trailer (mm/slub.c:640) [ 653.273966] check_bytes_and_report (mm/slub.c:679 mm/slub.c:703) [ 653.273966] check_object (mm/slub.c:803) [ 653.273966] free_debug_processing (mm/slub.c:1073) [ 653.273966] ? __this_cpu_preempt_check (lib/smp_processor_id.c:63) [ 653.273966] ? free_fair_sched_group (kernel/sched/fair.c:7745) [ 653.273966] __slab_free (mm/slub.c:2526 (discriminator 1)) [ 653.273966] ? __debug_check_no_obj_freed (lib/debugobjects.c:713) [ 653.273966] ? __this_cpu_preempt_check (lib/smp_processor_id.c:63) [ 653.273966] kfree (mm/slub.c:2672 mm/slub.c:3351) [ 653.273966] ? free_fair_sched_group (kernel/sched/fair.c:7745) [ 653.273966] free_fair_sched_group (kernel/sched/fair.c:7745) [ 653.273966] ? free_sched_group (kernel/sched/core.c:7294) [ 653.273966] free_sched_group (kernel/sched/core.c:7250) [ 653.273966] free_sched_group_rcu (kernel/sched/core.c:7297) [ 653.273966] rcu_nocb_kthread (include/linux/rcupdate.h:365 kernel/rcu/rcu.h:119 kernel/rcu/tree_plugin.h:2424) [ 653.273966] ? rcu_nocb_kthread (kernel/rcu/rcu.h:84 kernel/rcu/tree_plugin.h:2422) [ 653.273966] ? preempt_count_sub (kernel/sched/core.c:2626) [ 653.273966] ? __wait_on_bit_lock (kernel/sched/wait.c:291) [ 653.273966] ? rcu_barrier (kernel/rcu/tree_plugin.h:2382) [ 653.273966] kthread (kernel/kthread.c:207) [ 653.273966] ? debug_smp_processor_id (lib/smp_processor_id.c:57) [ 653.273966] ? flush_kthread_work (kernel/kthread.c:176) [ 653.273966] ret_from_fork (arch/x86/kernel/entry_64.S:348) [ 653.273966] ? flush_kthread_work (kernel/kthread.c:176) [ 653.273966] FIX kmalloc-512: Restoring 0xffff8804ed0ed750-0xffff8804ed0ed757=0xcc [ 653.273966] [ 653.567845] ============================================================================= [ 653.570343] BUG kmalloc-512 (Tainted: G B ): Redzone overwritten [ 653.572234] ----------------------------------------------------------------------------- [ 653.572234] [ 653.574850] INFO: 0xffff8804ed0ed408-0xffff8804ed0ed40f. First byte 0x0 instead of 0xcc [ 653.577096] INFO: Slab 0xffffea0013b43a00 objects=39 used=37 fp=0xffff8804ed0ed550 flags=0xafffff80004081 [ 653.577792] INFO: Object 0xffff8804ed0ed208 @offset=21000 fp=0x (null) [ 653.577792] [ 653.577792] Bytes b4 ffff8804ed0ed1f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed208: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed218: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed228: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed238: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed248: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed258: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed268: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed278: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed288: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed298: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed2a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed2b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed2c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed2d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed2e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed2f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed308: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.609658] FAULT_INJECTION: forcing a failure [ 653.577792] Object ffff8804ed0ed318: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed328: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed338: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed348: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed358: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed368: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed378: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed388: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed398: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed3a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed3b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed3c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed3d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed3e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Object ffff8804ed0ed3f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.577792] Redzone ffff8804ed0ed408: 00 00 00 00 00 00 00 00 ........ [ 653.577792] Padding ffff8804ed0ed548: 00 00 00 00 00 00 00 00 ........ [ 653.577792] CPU: 6 PID: 18 Comm: rcuop/6 Tainted: G B 3.17.0-rc3-next-20140901-sasha-00030-g662fbc2 #1098 [ 653.577792] ffff8804ed0ed208 ffff88027306fb50 ffffffff984f1b2d ffff880277409040 [ 653.577792] ffff88027306fb90 ffffffff9530995b 0000000000000008 ffff880400000001 [ 653.577792] ffff8804ed0ed410 ffff880277409040 00000000000000cc ffff8804ed0ed208 [ 653.577792] Call Trace: [ 653.577792] dump_stack (lib/dump_stack.c:52) [ 653.577792] print_trailer (mm/slub.c:640) [ 653.577792] check_bytes_and_report (mm/slub.c:679 mm/slub.c:703) [ 653.577792] check_object (mm/slub.c:803) [ 653.577792] free_debug_processing (mm/slub.c:1073) [ 653.577792] ? free_fair_sched_group (include/linux/cpumask.h:108 (discriminator 1) include/linux/cpumask.h:181 (discriminator 1) kernel/sched/fair.c:7742 (discriminator 1)) [ 653.577792] __slab_free (mm/slub.c:2526 (discriminator 1)) [ 653.577792] ? __debug_check_no_obj_freed (lib/debugobjects.c:713) [ 653.577792] ? __this_cpu_preempt_check (lib/smp_processor_id.c:63) [ 653.577792] kfree (mm/slub.c:2672 mm/slub.c:3351) [ 653.577792] ? free_fair_sched_group (include/linux/cpumask.h:108 (discriminator 1) include/linux/cpumask.h:181 (discriminator 1) kernel/sched/fair.c:7742 (discriminator 1)) [ 653.577792] free_fair_sched_group (include/linux/cpumask.h:108 (discriminator 1) include/linux/cpumask.h:181 (discriminator 1) kernel/sched/fair.c:7742 (discriminator 1)) [ 653.577792] ? free_sched_group (kernel/sched/core.c:7294) [ 653.577792] free_sched_group (kernel/sched/core.c:7250) [ 653.577792] free_sched_group_rcu (kernel/sched/core.c:7297) [ 653.577792] rcu_nocb_kthread (include/linux/rcupdate.h:365 kernel/rcu/rcu.h:119 kernel/rcu/tree_plugin.h:2424) [ 653.577792] ? rcu_nocb_kthread (kernel/rcu/rcu.h:84 kernel/rcu/tree_plugin.h:2422) [ 653.577792] ? preempt_count_sub (kernel/sched/core.c:2626) [ 653.577792] ? __wait_on_bit_lock (kernel/sched/wait.c:291) [ 653.577792] ? rcu_barrier (kernel/rcu/tree_plugin.h:2382) [ 653.577792] kthread (kernel/kthread.c:207) [ 653.577792] ? debug_smp_processor_id (lib/smp_processor_id.c:57) [ 653.577792] ? flush_kthread_work (kernel/kthread.c:176) [ 653.577792] ret_from_fork (arch/x86/kernel/entry_64.S:348) [ 653.577792] ? flush_kthread_work (kernel/kthread.c:176) [ 653.577792] FIX kmalloc-512: Restoring 0xffff8804ed0ed408-0xffff8804ed0ed40f=0xcc [ 653.577792] [ 653.680093] ============================================================================= [ 653.680625] FAULT_INJECTION: forcing a failure [ 653.681262] FAULT_INJECTION: forcing a failure [ 653.682783] BUG kmalloc-512 (Tainted: G B ): Redzone overwritten [ 653.683825] ----------------------------------------------------------------------------- [ 653.683825] [ 653.685258] INFO: 0xffff8804ed0eaff0-0xffff8804ed0eaff7. First byte 0x0 instead of 0xcc [ 653.686358] FAULT_INJECTION: forcing a failure [ 653.687220] INFO: Slab 0xffffea0013b43a00 objects=39 used=36 fp=0xffff8804ed0ed208 flags=0xafffff80004081 [ 653.688669] INFO: Object 0xffff8804ed0eadf0 @offset=11760 fp=0x (null) [ 653.688669] [ 653.690019] Bytes b4 ffff8804ed0eade0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eadf0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eae00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eae10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eae20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eae30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eae40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eae50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eae60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eae70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eae80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eae90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eaea0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eaeb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eaec0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eaed0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eaee0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eaef0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eaf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eaf10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eaf20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eaf30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eaf40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eaf50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eaf60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eaf70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.725733] FAULT_INJECTION: forcing a failure [ 653.690019] Object ffff8804ed0eaf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eaf90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eafa0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eafb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eafc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eafd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Object ffff8804ed0eafe0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.690019] Redzone ffff8804ed0eaff0: 00 00 00 00 00 00 00 00 ........ [ 653.690019] Padding ffff8804ed0eb130: 00 00 00 00 00 00 00 00 ........ [ 653.690019] CPU: 6 PID: 18 Comm: rcuop/6 Tainted: G B 3.17.0-rc3-next-20140901-sasha-00030-g662fbc2 #1098 [ 653.690019] ffff8804ed0eadf0 ffff88027306fb50 ffffffff984f1b2d ffff880277409040 [ 653.690019] ffff88027306fb90 ffffffff9530995b 0000000000000008 ffff880400000001 [ 653.690019] ffff8804ed0eaff8 ffff880277409040 00000000000000cc ffff8804ed0eadf0 [ 653.690019] Call Trace: [ 653.690019] dump_stack (lib/dump_stack.c:52) [ 653.690019] print_trailer (mm/slub.c:640) [ 653.690019] check_bytes_and_report (mm/slub.c:679 mm/slub.c:703) [ 653.690019] check_object (mm/slub.c:803) [ 653.690019] free_debug_processing (mm/slub.c:1073) [ 653.690019] ? free_fair_sched_group (kernel/sched/fair.c:7745) [ 653.690019] __slab_free (mm/slub.c:2526 (discriminator 1)) [ 653.690019] ? __debug_check_no_obj_freed (lib/debugobjects.c:713) [ 653.690019] ? __this_cpu_preempt_check (lib/smp_processor_id.c:63) [ 653.690019] kfree (mm/slub.c:2672 mm/slub.c:3351) [ 653.690019] ? free_fair_sched_group (kernel/sched/fair.c:7745) [ 653.690019] free_fair_sched_group (kernel/sched/fair.c:7745) [ 653.690019] ? free_sched_group (kernel/sched/core.c:7294) [ 653.690019] free_sched_group (kernel/sched/core.c:7250) [ 653.690019] free_sched_group_rcu (kernel/sched/core.c:7297) [ 653.690019] rcu_nocb_kthread (include/linux/rcupdate.h:365 kernel/rcu/rcu.h:119 kernel/rcu/tree_plugin.h:2424) [ 653.690019] ? rcu_nocb_kthread (kernel/rcu/rcu.h:84 kernel/rcu/tree_plugin.h:2422) [ 653.690019] ? preempt_count_sub (kernel/sched/core.c:2626) [ 653.690019] ? __wait_on_bit_lock (kernel/sched/wait.c:291) [ 653.690019] ? rcu_barrier (kernel/rcu/tree_plugin.h:2382) [ 653.690019] kthread (kernel/kthread.c:207) [ 653.690019] ? debug_smp_processor_id (lib/smp_processor_id.c:57) [ 653.690019] ? flush_kthread_work (kernel/kthread.c:176) [ 653.690019] ret_from_fork (arch/x86/kernel/entry_64.S:348) [ 653.690019] ? flush_kthread_work (kernel/kthread.c:176) [ 653.690019] FIX kmalloc-512: Restoring 0xffff8804ed0eaff0-0xffff8804ed0eaff7=0xcc [ 653.690019] [ 653.770588] ============================================================================= [ 653.771867] BUG kmalloc-512 (Tainted: G B ): Redzone overwritten [ 653.772320] FAULT_INJECTION: forcing a failure [ 653.773636] ----------------------------------------------------------------------------- [ 653.773636] [ 653.775190] INFO: 0xffff8804ed0ed0c0-0xffff8804ed0ed0c7. First byte 0x0 instead of 0xcc [ 653.776438] INFO: Slab 0xffffea0013b43a00 objects=39 used=35 fp=0xffff8804ed0eadf0 flags=0xafffff80004081 [ 653.777978] INFO: Object 0xffff8804ed0ecec0 @offset=20160 fp=0x (null) [ 653.777978] [ 653.779366] Bytes b4 ffff8804ed0eceb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ecec0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0eced0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ecee0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ecef0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ecf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ecf10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ecf20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ecf30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ecf40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ecf50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ecf60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ecf70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ecf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ecf90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.800762] FAULT_INJECTION: forcing a failure [ 653.780542] Object ffff8804ed0ecfa0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ecfb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ecfc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ecfd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ecfe0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ecff0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ed000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ed010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ed020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ed030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ed040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ed050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ed060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ed070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ed080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ed090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ed0a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Object ffff8804ed0ed0b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.780542] Redzone ffff8804ed0ed0c0: 00 00 00 00 00 00 00 00 ........ [ 653.780542] Padding ffff8804ed0ed200: 00 00 00 00 00 00 00 00 ........ [ 653.780542] CPU: 6 PID: 18 Comm: rcuop/6 Tainted: G B 3.17.0-rc3-next-20140901-sasha-00030-g662fbc2 #1098 [ 653.780542] ffff8804ed0ecec0 ffff88027306fb50 ffffffff984f1b2d ffff880277409040 [ 653.780542] ffff88027306fb90[ 653.834525] FAULT_INJECTION: forcing a failure [ 653.780542] ffffffff9530995b 0000000000000008 ffff880400000001 [ 653.780542] ffff8804ed0ed0c8 ffff880277409040 00000000000000cc ffff8804ed0ecec0 [ 653.780542] Call Trace: [ 653.780542] dump_stack (lib/dump_stack.c:52) [ 653.780542] print_trailer (mm/slub.c:640) [ 653.780542] check_bytes_and_report (mm/slub.c:679 mm/slub.c:703) [ 653.780542] check_object (mm/slub.c:803) [ 653.780542] free_debug_processing (mm/slub.c:1073) [ 653.780542] ? free_fair_sched_group (include/linux/cpumask.h:108 (discriminator 1) include/linux/cpumask.h:181 (discriminator 1) kernel/sched/fair.c:7742 (discriminator 1)) [ 653.780542] __slab_free (mm/slub.c:2526 (discriminator 1)) [ 653.780542] ? __debug_check_no_obj_freed (lib/debugobjects.c:713) [ 653.780542] ? __this_cpu_preempt_check (lib/smp_processor_id.c:63) [ 653.780542] kfree (mm/slub.c:2672 mm/slub.c:3351) [ 653.780542] ? free_fair_sched_group (include/linux/cpumask.h:108 (discriminator 1) include/linux/cpumask.h:181 (discriminator 1) kernel/sched/fair.c:7742 (discriminator 1)) [ 653.780542] free_fair_sched_group (include/linux/cpumask.h:108 (discriminator 1) include/linux/cpumask.h:181 (discriminator 1) kernel/sched/fair.c:7742 (discriminator 1)) [ 653.780542] ? free_sched_group (kernel/sched/core.c:7294) [ 653.780542] free_sched_group (kernel/sched/core.c:7250) [ 653.780542] free_sched_group_rcu (kernel/sched/core.c:7297) [ 653.780542] rcu_nocb_kthread (include/linux/rcupdate.h:365 kernel/rcu/rcu.h:119 kernel/rcu/tree_plugin.h:2424) [ 653.780542] ? rcu_nocb_kthread (kernel/rcu/rcu.h:84 kernel/rcu/tree_plugin.h:2422) [ 653.780542] ? preempt_count_sub (kernel/sched/core.c:2626) [ 653.780542] ? __wait_on_bit_lock (kernel/sched/wait.c:291) [ 653.780542] ? rcu_barrier (kernel/rcu/tree_plugin.h:2382) [ 653.780542] kthread (kernel/kthread.c:207) [ 653.780542] ? debug_smp_processor_id (lib/smp_processor_id.c:57) [ 653.780542] ? flush_kthread_work (kernel/kthread.c:176) [ 653.780542] ret_from_fork (arch/x86/kernel/entry_64.S:348) [ 653.860976] FAULT_INJECTION: forcing a failure [ 653.780542] ? flush_kthread_work (kernel/kthread.c:176) [ 653.780542] FIX kmalloc-512: Restoring 0xffff8804ed0ed0c0-0xffff8804ed0ed0c7=0xcc [ 653.780542] [ 653.864256] ============================================================================= [ 653.865450] BUG kmalloc-512 (Tainted: G B ): Redzone overwritten [ 653.866523] ----------------------------------------------------------------------------- [ 653.866523] [ 653.867941] INFO: 0xffff8804ed0eb338-0xffff8804ed0eb33f. First byte 0x0 instead of 0xcc [ 653.869142] INFO: Slab 0xffffea0013b43a00 objects=39 used=34 fp=0xffff8804ed0ecec0 flags=0xafffff80004081 [ 653.870681] INFO: Object 0xffff8804ed0eb138 @offset=12600 fp=0x (null) [ 653.870681] [ 653.872011] Bytes b4 ffff8804ed0eb128: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.873406] Object ffff8804ed0eb138: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874047] FAULT_INJECTION: forcing a failure [ 653.874151] Object ffff8804ed0eb148: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb158: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb168: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb178: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb188: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb198: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb1a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb1b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb1c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb1d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.886015] FAULT_INJECTION: forcing a failure [ 653.874151] Object ffff8804ed0eb1e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.888314] trinity-main[14595]: segfault at 18 ip 00007fa5edd947fb sp 00007fff25f43bc0 error 4 in libc-2.13.so[7fa5edce8000+182000] [ 653.874151] Object ffff8804ed0eb1f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.891178] FAULT_INJECTION: forcing a failure [ 653.874151] Object ffff8804ed0eb208: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb218: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb228: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb238: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb248: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb258: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb268: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb278: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb288: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb298: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb2a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb2b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.908839] FAULT_INJECTION: forcing a failure [ 653.874151] Object ffff8804ed0eb2c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb2d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb2e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb2f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb308: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb318: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Object ffff8804ed0eb328: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.874151] Redzone ffff8804ed0eb338: 00 00 00 00 00 00 00 00 ........ [ 653.874151] Padding ffff8804ed0eb478: 00 00 00 00 00 00 00 00 ........ [ 653.874151] CPU: 6 PID: 18 Comm: rcuop/6 Tainted: G B 3.17.0-rc3-next-20140901-sasha-00030-g662fbc2 #1098 [ 653.874151] ffff8804ed0eb138 ffff88027306fb50 ffffffff984f1b2d ffff880277409040 [ 653.874151] ffff88027306fb90 ffffffff9530995b 0000000000000008 ffff880400000001 [ 653.874151] ffff8804ed0eb340 ffff880277409040 00000000000000cc ffff8804ed0eb138 [ 653.874151] Call Trace: [ 653.874151] dump_stack (lib/dump_stack.c:52) [ 653.874151] print_trailer (mm/slub.c:640) [ 653.874151] check_bytes_and_report (mm/slub.c:679 mm/slub.c:703) [ 653.874151] check_object (mm/slub.c:803) [ 653.874151] free_debug_processing (mm/slub.c:1073) [ 653.874151] ? free_fair_sched_group (kernel/sched/fair.c:7745) [ 653.929759] FAULT_INJECTION: forcing a failure [ 653.874151] __slab_free (mm/slub.c:2526 (discriminator 1)) [ 653.874151] ? __debug_check_no_obj_freed (lib/debugobjects.c:713) [ 653.874151] ? __this_cpu_preempt_check (lib/smp_processor_id.c:63) [ 653.874151] kfree (mm/slub.c:2672 mm/slub.c:3351) [ 653.874151] ? free_fair_sched_group (kernel/sched/fair.c:7745) [ 653.874151] free_fair_sched_group (kernel/sched/fair.c:7745) [ 653.874151] ? free_sched_group (kernel/sched/core.c:7294) [ 653.874151] free_sched_group (kernel/sched/core.c:7250) [ 653.874151] free_sched_group_rcu (kernel/sched/core.c:7297) [ 653.874151] rcu_nocb_kthread (include/linux/rcupdate.h:365 kernel/rcu/rcu.h:119 kernel/rcu/tree_plugin.h:2424) [ 653.874151] ? rcu_nocb_kthread (kernel/rcu/rcu.h:84 kernel/rcu/tree_plugin.h:2422) [ 653.874151] ? preempt_count_sub (kernel/sched/core.c:2626) [ 653.874151] ? __wait_on_bit_lock (kernel/sched/wait.c:291) [ 653.874151] ? rcu_barrier (kernel/rcu/tree_plugin.h:2382) [ 653.874151] kthread (kernel/kthread.c:207) [ 653.874151] ? debug_smp_processor_id (lib/smp_processor_id.c:57) [ 653.874151] ? flush_kthread_work (kernel/kthread.c:176) [ 653.874151] ret_from_fork (arch/x86/kernel/entry_64.S:348) [ 653.874151] ? flush_kthread_work (kernel/kthread.c:176) [ 653.874151] FIX kmalloc-512: Restoring 0xffff8804ed0eb338-0xffff8804ed0eb33f=0xcc [ 653.874151] [ 653.950130] ============================================================================= [ 653.951416] BUG kmalloc-512 (Tainted: G B ): Redzone overwritten [ 653.952507] ----------------------------------------------------------------------------- [ 653.952507] [ 653.954090] INFO: 0xffff8804ed0ecd78-0xffff8804ed0ecd7f. First byte 0x0 instead of 0xcc [ 653.955331] INFO: Slab 0xffffea0013b43a00 objects=39 used=33 fp=0xffff8804ed0eb138 flags=0xafffff80004081 [ 653.956025] FAULT_INJECTION: forcing a failure [ 653.957507] INFO: Object 0xffff8804ed0ecb78 @offset=19320 fp=0x (null) [ 653.957507] [ 653.958931] Bytes b4 ffff8804ed0ecb68: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecb78: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecb88: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecb98: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecba8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecbb8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecbc8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecbd8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecbe8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecbf8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecc08: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecc18: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecc28: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecc38: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecc48: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecc58: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.980830] FAULT_INJECTION: forcing a failure [ 653.960084] Object ffff8804ed0ecc68: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecc78: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecc88: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecc98: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecca8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0eccb8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0eccc8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0eccd8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.993397] FAULT_INJECTION: forcing a failure [ 653.960084] Object ffff8804ed0ecce8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0eccf8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecd08: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecd18: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecd28: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecd38: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecd48: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Object ffff8804ed0ecd58: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.005412] FAULT_INJECTION: forcing a failure [ 653.960084] Object ffff8804ed0ecd68: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 653.960084] Redzone ffff8804ed0ecd78: 00 00 00 00 00 00 00 00 ........ [ 654.009191] FAULT_INJECTION: forcing a failure [ 653.960084] Padding ffff8804ed0eceb8: 00 00 00 00 00 00 00 00 ........ [ 653.960084] CPU: 6 PID: 18 Comm: rcuop/6 Tainted: G B 3.17.0-rc3-next-20140901-sasha-00030-g662fbc2 #1098 [ 653.960084] ffff8804ed0ecb78 ffff88027306fb50 ffffffff984f1b2d ffff880277409040 [ 653.960084] ffff88027306fb90 ffffffff9530995b 0000000000000008 ffff880400000001 [ 653.960084] ffff8804ed0ecd80 ffff880277409040 00000000000000cc ffff8804ed0ecb78 [ 653.960084] Call Trace: [ 653.960084] dump_stack (lib/dump_stack.c:52) [ 653.960084] print_trailer (mm/slub.c:640) [ 653.960084] check_bytes_and_report (mm/slub.c:679 mm/slub.c:703) [ 654.019785] FAULT_INJECTION: forcing a failure [ 653.960084] check_object (mm/slub.c:803) [ 653.960084] free_debug_processing (mm/slub.c:1073) [ 653.960084] ? free_fair_sched_group (include/linux/cpumask.h:108 (discriminator 1) include/linux/cpumask.h:181 (discriminator 1) kernel/sched/fair.c:7742 (discriminator 1)) [ 653.960084] __slab_free (mm/slub.c:2526 (discriminator 1)) [ 653.960084] ? __debug_check_no_obj_freed (lib/debugobjects.c:713) [ 653.960084] ? __this_cpu_preempt_check (lib/smp_processor_id.c:63) [ 653.960084] kfree (mm/slub.c:2672 mm/slub.c:3351) [ 653.960084] ? free_fair_sched_group (include/linux/cpumask.h:108 (discriminator 1) include/linux/cpumask.h:181 (discriminator 1) kernel/sched/fair.c:7742 (discriminator 1)) [ 653.960084] free_fair_sched_group (include/linux/cpumask.h:108 (discriminator 1) include/linux/cpumask.h:181 (discriminator 1) kernel/sched/fair.c:7742 (discriminator 1)) [ 653.960084] ? free_sched_group (kernel/sched/core.c:7294) [ 654.030356] FAULT_INJECTION: forcing a failure [ 653.960084] free_sched_group (kernel/sched/core.c:7250) [ 653.960084] free_sched_group_rcu (kernel/sched/core.c:7297) [ 653.960084] rcu_nocb_kthread (include/linux/rcupdate.h:365 kernel/rcu/rcu.h:119 kernel/rcu/tree_plugin.h:2424) [ 653.960084] ? rcu_nocb_kthread (kernel/rcu/rcu.h:84 kernel/rcu/tree_plugin.h:2422) [ 653.960084] ? preempt_count_sub (kernel/sched/core.c:2626) [ 653.960084] ? __wait_on_bit_lock (kernel/sched/wait.c:291) [ 653.960084] ? rcu_barrier (kernel/rcu/tree_plugin.h:2382) [ 653.960084] kthread (kernel/kthread.c:207) [ 653.960084] ? debug_smp_processor_id (lib/smp_processor_id.c:57) [ 653.960084] ? flush_kthread_work (kernel/kthread.c:176) [ 653.960084] ret_from_fork (arch/x86/kernel/entry_64.S:348) [ 653.960084] ? flush_kthread_work (kernel/kthread.c:176) [ 653.960084] FIX kmalloc-512: Restoring 0xffff8804ed0ecd78-0xffff8804ed0ecd7f=0xcc [ 653.960084] [ 654.043010] FAULT_INJECTION: forcing a failure [ 654.044791] ============================================================================= [ 654.046064] BUG kmalloc-512 (Tainted: G B ): Redzone overwritten [ 654.047136] ----------------------------------------------------------------------------- [ 654.047136] [ 654.048558] INFO: 0xffff8804ed0eb680-0xffff8804ed0eb687. First byte 0x0 instead of 0xcc [ 654.049785] INFO: Slab 0xffffea0013b43a00 objects=39 used=32 fp=0xffff8804ed0ecb78 flags=0xafffff80004081 [ 654.051410] INFO: Object 0xffff8804ed0eb480 @offset=13440 fp=0x (null) [ 654.051410] [ 654.052780] Bytes b4 ffff8804ed0eb470: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054310] Object ffff8804ed0eb480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054696] FAULT_INJECTION: forcing a failure [ 654.054708] Object ffff8804ed0eb490: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb4a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb4b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb4c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb4d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb4e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb4f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb510: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb520: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.070190] FAULT_INJECTION: forcing a failure [ 654.054708] Object ffff8804ed0eb530: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb540: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb550: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb560: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb570: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb590: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb5a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb5b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb5c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb5d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb5e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.087269] FAULT_INJECTION: forcing a failure [ 654.054708] Object ffff8804ed0eb5f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb610: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb620: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb630: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb640: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb650: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb660: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Object ffff8804ed0eb670: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.054708] Redzone ffff8804ed0eb680: 00 00 00 00 00 00 00 00 ........ [ 654.054708] Padding ffff8804ed0eb7c0: 00 00 00 00 00 00 00 00 ........ [ 654.054708] CPU: 6 PID: 18 Comm: rcuop/6 Tainted: G B 3.17.0-rc3-next-20140901-sasha-00030-g662fbc2 #1098 [ 654.106654] FAULT_INJECTION: forcing a failure [ 654.054708] ffff8804ed0eb480 ffff88027306fb50 ffffffff984f1b2d ffff880277409040 [ 654.054708] ffff88027306fb90 ffffffff9530995b 0000000000000008 ffff880400000001 [ 654.054708] ffff8804ed0eb688 ffff880277409040 00000000000000cc ffff8804ed0eb480 [ 654.054708] Call Trace: [ 654.054708] dump_stack (lib/dump_stack.c:52) [ 654.054708] print_trailer (mm/slub.c:640) [ 654.054708] check_bytes_and_report (mm/slub.c:679 mm/slub.c:703) [ 654.054708] check_object (mm/slub.c:803) [ 654.054708] free_debug_processing (mm/slub.c:1073) [ 654.054708] ? free_fair_sched_group (kernel/sched/fair.c:7745) [ 654.054708] __slab_free (mm/slub.c:2526 (discriminator 1)) [ 654.054708] ? __debug_check_no_obj_freed (lib/debugobjects.c:713) [ 654.054708] ? __this_cpu_preempt_check (lib/smp_processor_id.c:63) [ 654.120019] FAULT_INJECTION: forcing a failure [ 654.054708] kfree (mm/slub.c:2672 mm/slub.c:3351) [ 654.054708] ? free_fair_sched_group (kernel/sched/fair.c:7745) [ 654.054708] free_fair_sched_group (kernel/sched/fair.c:7745) [ 654.054708] ? free_sched_group (kernel/sched/core.c:7294) [ 654.054708] free_sched_group (kernel/sched/core.c:7250) [ 654.054708] free_sched_group_rcu (kernel/sched/core.c:7297) [ 654.054708] rcu_nocb_kthread (include/linux/rcupdate.h:365 kernel/rcu/rcu.h:119 kernel/rcu/tree_plugin.h:2424) [ 654.054708] ? rcu_nocb_kthread (kernel/rcu/rcu.h:84 kernel/rcu/tree_plugin.h:2422) [ 654.054708] ? preempt_count_sub (kernel/sched/core.c:2626) [ 654.054708] ? __wait_on_bit_lock (kernel/sched/wait.c:291) [ 654.054708] ? rcu_barrier (kernel/rcu/tree_plugin.h:2382) [ 654.054708] kthread (kernel/kthread.c:207) [ 654.054708] ? debug_smp_processor_id (lib/smp_processor_id.c:57) [ 654.054708] ? flush_kthread_work (kernel/kthread.c:176) [ 654.054708] ret_from_fork (arch/x86/kernel/entry_64.S:348) [ 654.133720] FAULT_INJECTION: forcing a failure [ 654.054708] ? flush_kthread_work (kernel/kthread.c:176) [ 654.054708] FIX kmalloc-512: Restoring 0xffff8804ed0eb680-0xffff8804ed0eb687=0xcc [ 654.054708] [ 654.137332] ============================================================================= [ 654.138592] BUG kmalloc-512 (Tainted: G B ): Redzone overwritten [ 654.139622] ----------------------------------------------------------------------------- [ 654.139622] [ 654.141066] INFO: 0xffff8804ed0eca30-0xffff8804ed0eca37. First byte 0x0 instead of 0xcc [ 654.142325] INFO: Slab 0xffffea0013b43a00 objects=39 used=31 fp=0xffff8804ed0eb480 flags=0xafffff80004081 [ 654.143779] INFO: Object 0xffff8804ed0ec830 @offset=18480 fp=0x (null) [ 654.143779] [ 654.145091] Bytes b4 ffff8804ed0ec820: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.146655] Object ffff8804ed0ec830: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147145] FAULT_INJECTION: forcing a failure [ 654.147304] Object ffff8804ed0ec840: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec850: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec860: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec870: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec890: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec8a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec8b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec8c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec8d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec8e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.163678] FAULT_INJECTION: forcing a failure [ 654.147304] Object ffff8804ed0ec8f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec910: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec920: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec930: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec940: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec950: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec960: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec970: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec990: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec9a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec9b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.182909] FAULT_INJECTION: forcing a failure [ 654.147304] Object ffff8804ed0ec9c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec9d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec9e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0ec9f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0eca00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0eca10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Object ffff8804ed0eca20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.147304] Redzone ffff8804ed0eca30: 00 00 00 00 00 00 00 00 ........ [ 654.147304] Padding ffff8804ed0ecb70: 00 00 00 00 00 00 00 00 ........ [ 654.147304] CPU: 6 PID: 18 Comm: rcuop/6 Tainted: G B 3.17.0-rc3-next-20140901-sasha-00030-g662fbc2 #1098 [ 654.147304] ffff8804ed0ec830 ffff88027306fb50 ffffffff984f1b2d ffff880277409040 [ 654.147304] ffff88027306fb90 ffffffff9530995b 0000000000000008 ffff880400000001 [ 654.147304] ffff8804ed0eca38 ffff880277409040 00000000000000cc ffff8804ed0ec830 [ 654.147304] Call Trace: [ 654.147304] dump_stack (lib/dump_stack.c:52) [ 654.147304] print_trailer (mm/slub.c:640) [ 654.147304] check_bytes_and_report (mm/slub.c:679 mm/slub.c:703) [ 654.147304] check_object (mm/slub.c:803) [ 654.147304] free_debug_processing (mm/slub.c:1073) [ 654.147304] ? free_fair_sched_group (include/linux/cpumask.h:108 (discriminator 1) include/linux/cpumask.h:181 (discriminator 1) kernel/sched/fair.c:7742 (discriminator 1)) [ 654.147304] __slab_free (mm/slub.c:2526 (discriminator 1)) [ 654.147304] ? __debug_check_no_obj_freed (lib/debugobjects.c:713) [ 654.210739] FAULT_INJECTION: forcing a failure [ 654.147304] ? __this_cpu_preempt_check (lib/smp_processor_id.c:63) [ 654.147304] kfree (mm/slub.c:2672 mm/slub.c:3351) [ 654.147304] ? free_fair_sched_group (include/linux/cpumask.h:108 (discriminator 1) include/linux/cpumask.h:181 (discriminator 1) kernel/sched/fair.c:7742 (discriminator 1)) [ 654.147304] free_fair_sched_group (include/linux/cpumask.h:108 (discriminator 1) include/linux/cpumask.h:181 (discriminator 1) kernel/sched/fair.c:7742 (discriminator 1)) [ 654.147304] ? free_sched_group (kernel/sched/core.c:7294) [ 654.147304] free_sched_group (kernel/sched/core.c:7250) [ 654.147304] free_sched_group_rcu (kernel/sched/core.c:7297) [ 654.147304] rcu_nocb_kthread (include/linux/rcupdate.h:365 kernel/rcu/rcu.h:119 kernel/rcu/tree_plugin.h:2424) [ 654.147304] ? rcu_nocb_kthread (kernel/rcu/rcu.h:84 kernel/rcu/tree_plugin.h:2422) [ 654.147304] ? preempt_count_sub (kernel/sched/core.c:2626) [ 654.147304] ? __wait_on_bit_lock (kernel/sched/wait.c:291) [ 654.147304] ? rcu_barrier (kernel/rcu/tree_plugin.h:2382) [ 654.147304] kthread (kernel/kthread.c:207) [ 654.147304] ? debug_smp_processor_id (lib/smp_processor_id.c:57) [ 654.147304] ? flush_kthread_work (kernel/kthread.c:176) [ 654.147304] ret_from_fork (arch/x86/kernel/entry_64.S:348) [ 654.147304] ? flush_kthread_work (kernel/kthread.c:176) [ 654.147304] FIX kmalloc-512: Restoring 0xffff8804ed0eca30-0xffff8804ed0eca37=0xcc [ 654.147304] [ 654.229284] ============================================================================= [ 654.230613] BUG kmalloc-512 (Tainted: G B ): Redzone overwritten [ 654.231688] ----------------------------------------------------------------------------- [ 654.231688] [ 654.233196] INFO: 0xffff8804ed0eb9c8-0xffff8804ed0eb9cf. First byte 0x0 instead of 0xcc [ 654.234453] INFO: Slab 0xffffea0013b43a00 objects=39 used=30 fp=0xffff8804ed0ec830 flags=0xafffff80004081 [ 654.235905] INFO: Object 0xffff8804ed0eb7c8 @offset=14280 fp=0x (null) [ 654.235905] [ 654.237258] Bytes b4 ffff8804ed0eb7b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.238256] FAULT_INJECTION: forcing a failure [ 654.239162] Object ffff8804ed0eb7c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb7d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb7e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb7f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb808: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb818: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb828: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb838: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb848: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb858: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb868: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.253990] FAULT_INJECTION: forcing a failure [ 654.239162] Object ffff8804ed0eb878: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb888: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb898: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb8a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb8b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb8c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.263898] FAULT_INJECTION: forcing a failure [ 654.239162] Object ffff8804ed0eb8d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb8e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb8f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb908: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb918: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb928: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.273108] FAULT_INJECTION: forcing a failure [ 654.239162] Object ffff8804ed0eb938: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb948: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb958: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb968: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb978: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.281308] FAULT_INJECTION: forcing a failure [ 654.239162] Object ffff8804ed0eb988: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb998: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb9a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Object ffff8804ed0eb9b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.239162] Redzone ffff8804ed0eb9c8: 00 00 00 00 00 00 00 00 ........ [ 654.239162] Padding ffff8804ed0ebb08: 00 00 00 00 00 00 00 00 ........ [ 654.239162] CPU: 6 PID: 18 Comm: rcuop/6 Tainted: G B 3.17.0-rc3-next-20140901-sasha-00030-g662fbc2 #1098 [ 654.239162] ffff8804ed0eb7c8 ffff88027306fb50 ffffffff984f1b2d ffff880277409040 [ 654.239162] ffff88027306fb90 ffffffff9530995b 0000000000000008 ffff880400000001 [ 654.239162] ffff8804ed0eb9d0[ 654.295652] FAULT_INJECTION: forcing a failure [ 654.239162] ffff880277409040 00000000000000cc ffff8804ed0eb7c8 [ 654.239162] Call Trace: [ 654.239162] dump_stack (lib/dump_stack.c:52) [ 654.239162] print_trailer (mm/slub.c:640) [ 654.239162] check_bytes_and_report (mm/slub.c:679 mm/slub.c:703) [ 654.239162] check_object (mm/slub.c:803) [ 654.239162] free_debug_processing (mm/slub.c:1073) [ 654.239162] ? free_fair_sched_group (kernel/sched/fair.c:7745) [ 654.239162] __slab_free (mm/slub.c:2526 (discriminator 1)) [ 654.239162] ? __debug_check_no_obj_freed (lib/debugobjects.c:713) [ 654.239162] ? __this_cpu_preempt_check (lib/smp_processor_id.c:63) [ 654.239162] kfree (mm/slub.c:2672 mm/slub.c:3351) [ 654.239162] ? free_fair_sched_group (kernel/sched/fair.c:7745) [ 654.307198] FAULT_INJECTION: forcing a failure [ 654.239162] free_fair_sched_group (kernel/sched/fair.c:7745) [ 654.239162] ? free_sched_group (kernel/sched/core.c:7294) [ 654.239162] free_sched_group (kernel/sched/core.c:7250) [ 654.239162] free_sched_group_rcu (kernel/sched/core.c:7297) [ 654.239162] rcu_nocb_kthread (include/linux/rcupdate.h:365 kernel/rcu/rcu.h:119 kernel/rcu/tree_plugin.h:2424) [ 654.239162] ? rcu_nocb_kthread (kernel/rcu/rcu.h:84 kernel/rcu/tree_plugin.h:2422) [ 654.239162] ? preempt_count_sub (kernel/sched/core.c:2626) [ 654.239162] ? __wait_on_bit_lock (kernel/sched/wait.c:291) [ 654.239162] ? rcu_barrier (kernel/rcu/tree_plugin.h:2382) [ 654.239162] kthread (kernel/kthread.c:207) [ 654.239162] ? debug_smp_processor_id (lib/smp_processor_id.c:57) [ 654.239162] ? flush_kthread_work (kernel/kthread.c:176) [ 654.239162] ret_from_fork (arch/x86/kernel/entry_64.S:348) [ 654.239162] ? flush_kthread_work (kernel/kthread.c:176) [ 654.239162] FIX kmalloc-512: Restoring 0xffff8804ed0eb9c8-0xffff8804ed0eb9cf=0xcc [ 654.239162] [ 654.322864] ============================================================================= [ 654.324136] BUG kmalloc-512 (Tainted: G B ): Redzone overwritten [ 654.325216] ----------------------------------------------------------------------------- [ 654.325216] [ 654.326786] INFO: 0xffff8804ed0ec6e8-0xffff8804ed0ec6ef. First byte 0x0 instead of 0xcc [ 654.328031] INFO: Slab 0xffffea0013b43a00 objects=39 used=29 fp=0xffff8804ed0eb7c8 flags=0xafffff80004081 [ 654.329520] INFO: Object 0xffff8804ed0ec4e8 @offset=17640 fp=0x (null) [ 654.329520] [ 654.330008] FAULT_INJECTION: forcing a failure [ 654.331592] Bytes b4 ffff8804ed0ec4d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec4e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec4f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec508: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec518: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec528: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec538: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec548: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec558: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec568: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec578: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec588: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec598: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec5a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec5b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec5c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec5d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.355353] FAULT_INJECTION: forcing a failure [ 654.332835] Object ffff8804ed0ec5e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec5f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec608: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec618: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec628: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec638: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec648: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec658: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec668: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec678: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec688: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec698: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec6a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec6b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec6c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.332835] Object ffff8804ed0ec6d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.379290] FAULT_INJECTION: forcing a failure [ 654.332835] Redzone ffff8804ed0ec6e8: 00 00 00 00 00 00 00 00 ........ [ 654.332835] Padding ffff8804ed0ec828: 00 00 00 00 00 00 00 00 ........ [ 654.332835] CPU: 6 PID: 18 Comm: rcuop/6 Tainted: G B 3.17.0-rc3-next-20140901-sasha-00030-g662fbc2 #1098 [ 654.332835] ffff8804ed0ec4e8 ffff88027306fb50 ffffffff984f1b2d ffff880277409040 [ 654.332835] ffff88027306fb90 ffffffff9530995b 0000000000000008 ffff880400000001 [ 654.332835] ffff8804ed0ec6f0 ffff880277409040 00000000000000cc ffff8804ed0ec4e8 [ 654.332835] Call Trace: [ 654.332835] dump_stack (lib/dump_stack.c:52) [ 654.332835] print_trailer (mm/slub.c:640) [ 654.332835] check_bytes_and_report (mm/slub.c:679 mm/slub.c:703) [ 654.332835] check_object (mm/slub.c:803) [ 654.332835] free_debug_processing (mm/slub.c:1073) [ 654.332835] ? free_fair_sched_group (include/linux/cpumask.h:108 (discriminator 1) include/linux/cpumask.h:181 (discriminator 1) kernel/sched/fair.c:7742 (discriminator 1)) [ 654.332835] __slab_free (mm/slub.c:2526 (discriminator 1)) [ 654.332835] ? __debug_check_no_obj_freed (lib/debugobjects.c:713) [ 654.332835] ? __this_cpu_preempt_check (lib/smp_processor_id.c:63) [ 654.332835] kfree (mm/slub.c:2672 mm/slub.c:3351) [ 654.332835] ? free_fair_sched_group (include/linux/cpumask.h:108 (discriminator 1) include/linux/cpumask.h:181 (discriminator 1) kernel/sched/fair.c:7742 (discriminator 1)) [ 654.332835] free_fair_sched_group (include/linux/cpumask.h:108 (discriminator 1) include/linux/cpumask.h:181 (discriminator 1) kernel/sched/fair.c:7742 (discriminator 1)) [ 654.332835] ? free_sched_group (kernel/sched/core.c:7294) [ 654.332835] free_sched_group (kernel/sched/core.c:7250) [ 654.332835] free_sched_group_rcu (kernel/sched/core.c:7297) [ 654.332835] rcu_nocb_kthread (include/linux/rcupdate.h:365 kernel/rcu/rcu.h:119 kernel/rcu/tree_plugin.h:2424) [ 654.332835] ? rcu_nocb_kthread (kernel/rcu/rcu.h:84 kernel/rcu/tree_plugin.h:2422) [ 654.332835] ? preempt_count_sub (kernel/sched/core.c:2626) [ 654.332835] ? __wait_on_bit_lock (kernel/sched/wait.c:291) [ 654.332835] ? rcu_barrier (kernel/rcu/tree_plugin.h:2382) [ 654.332835] kthread (kernel/kthread.c:207) [ 654.332835] ? debug_smp_processor_id (lib/smp_processor_id.c:57) [ 654.332835] ? flush_kthread_work (kernel/kthread.c:176) [ 654.332835] ret_from_fork (arch/x86/kernel/entry_64.S:348) [ 654.332835] ? flush_kthread_work (kernel/kthread.c:176) [ 654.332835] FIX kmalloc-512: Restoring 0xffff8804ed0ec6e8-0xffff8804ed0ec6ef=0xcc [ 654.332835] [ 654.414933] ============================================================================= [ 654.416208] BUG kmalloc-512 (Tainted: G B ): Redzone overwritten [ 654.416962] FAULT_INJECTION: forcing a failure [ 654.417935] ----------------------------------------------------------------------------- [ 654.417935] [ 654.418734] INFO: 0xffff8804ed0ebd10-0xffff8804ed0ebd17. First byte 0x0 instead of 0xcc [ 654.419395] INFO: Slab 0xffffea0013b43a00 objects=39 used=28 fp=0xffff8804ed0ec4e8 flags=0xafffff80004081 [ 654.420159] INFO: Object 0xffff8804ed0ebb10 @offset=15120 fp=0x (null) [ 654.420159] [ 654.420878] Bytes b4 ffff8804ed0ebb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.421657] Object ffff8804ed0ebb10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.423123] Object ffff8804ed0ebb20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424555] Object ffff8804ed0ebb30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebb40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebb50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebb60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebb70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebb90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.434474] FAULT_INJECTION: forcing a failure [ 654.424829] Object ffff8804ed0ebba0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebbb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebbc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.439687] FAULT_INJECTION: forcing a failure [ 654.424829] Object ffff8804ed0ebbd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebbe0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebbf0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebc10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebc20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebc30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.450534] FAULT_INJECTION: forcing a failure [ 654.424829] Object ffff8804ed0ebc40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebc50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebc60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebc70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebc90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebca0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebcb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebcc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebcd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebce0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebcf0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Object ffff8804ed0ebd00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.424829] Redzone ffff8804ed0ebd10: 00 00 00 00 00 00 00 00 ........ [ 654.424829] Padding ffff8804ed0ebe50: 00 00 00 00 00 00 00 00 ........ [ 654.424829] CPU: 6 PID: 18 Comm: rcuop/6 Tainted: G B 3.17.0-rc3-next-20140901-sasha-00030-g662fbc2 #1098 [ 654.424829] ffff8804ed0ebb10[ 654.474307] FAULT_INJECTION: forcing a failure [ 654.424829] ffff88027306fb50 ffffffff984f1b2d ffff880277409040 [ 654.424829] ffff88027306fb90 ffffffff9530995b 0000000000000008 ffff880400000001 [ 654.424829] ffff8804ed0ebd18 ffff880277409040 00000000000000cc ffff8804ed0ebb10 [ 654.424829] Call Trace: [ 654.424829] dump_stack (lib/dump_stack.c:52) [ 654.424829] print_trailer (mm/slub.c:640) [ 654.424829] check_bytes_and_report (mm/slub.c:679 mm/slub.c:703) [ 654.424829] check_object (mm/slub.c:803) [ 654.424829] free_debug_processing (mm/slub.c:1073) [ 654.424829] ? free_fair_sched_group (kernel/sched/fair.c:7745) [ 654.424829] __slab_free (mm/slub.c:2526 (discriminator 1)) [ 654.424829] ? __debug_check_no_obj_freed (lib/debugobjects.c:713) [ 654.424829] ? __this_cpu_preempt_check (lib/smp_processor_id.c:63) [ 654.424829] kfree (mm/slub.c:2672 mm/slub.c:3351) [ 654.424829] ? free_fair_sched_group (kernel/sched/fair.c:7745) [ 654.424829] free_fair_sched_group (kernel/sched/fair.c:7745) [ 654.424829] ? free_sched_group (kernel/sched/core.c:7294) [ 654.424829] free_sched_group (kernel/sched/core.c:7250) [ 654.424829] free_sched_group_rcu (kernel/sched/core.c:7297) [ 654.424829] rcu_nocb_kthread (include/linux/rcupdate.h:365 kernel/rcu/rcu.h:119 kernel/rcu/tree_plugin.h:2424) [ 654.424829] ? rcu_nocb_kthread (kernel/rcu/rcu.h:84 kernel/rcu/tree_plugin.h:2422) [ 654.424829] ? preempt_count_sub (kernel/sched/core.c:2626) [ 654.496156] FAULT_INJECTION: forcing a failure [ 654.424829] ? __wait_on_bit_lock (kernel/sched/wait.c:291) [ 654.424829] ? rcu_barrier (kernel/rcu/tree_plugin.h:2382) [ 654.424829] kthread (kernel/kthread.c:207) [ 654.424829] ? debug_smp_processor_id (lib/smp_processor_id.c:57) [ 654.424829] ? flush_kthread_work (kernel/kthread.c:176) [ 654.424829] ret_from_fork (arch/x86/kernel/entry_64.S:348) [ 654.424829] ? flush_kthread_work (kernel/kthread.c:176) [ 654.424829] FIX kmalloc-512: Restoring 0xffff8804ed0ebd10-0xffff8804ed0ebd17=0xcc [ 654.424829] [ 654.504749] ============================================================================= [ 654.506101] BUG kmalloc-512 (Tainted: G B ): Redzone overwritten [ 654.507181] ----------------------------------------------------------------------------- [ 654.507181] [ 654.508641] INFO: 0xffff8804ed0ec3a0-0xffff8804ed0ec3a7. First byte 0x0 instead of 0xcc [ 654.508662] FAULT_INJECTION: forcing a failure [ 654.510577] INFO: Slab 0xffffea0013b43a00 objects=39 used=27 fp=0xffff8804ed0ebb10 flags=0xafffff80004081 [ 654.512025] INFO: Object 0xffff8804ed0ec1a0 @offset=16800 fp=0x (null) [ 654.512025] [ 654.513347] Bytes b4 ffff8804ed0ec190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec1a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec1b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec1c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec1d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec1e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec1f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.524917] FAULT_INJECTION: forcing a failure [ 654.514717] Object ffff8804ed0ec210: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec220: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec230: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec240: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec250: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec260: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec270: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec290: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec2a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec2b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec2c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec2d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.542615] FAULT_INJECTION: forcing a failure [ 654.514717] Object ffff8804ed0ec2e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec2f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec310: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec320: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec330: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec340: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec350: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec360: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec370: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.555155] FAULT_INJECTION: forcing a failure [ 654.514717] Object ffff8804ed0ec380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Object ffff8804ed0ec390: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 654.514717] Redzone ffff8804ed0ec3a0: 00 00 00 00 00 00 00 00 ........ [ 654.514717] Padding ffff8804ed0ec4e0: 00 00 00 00 00 00 00 00 ........ [ 654.514717] CPU: 6 PID: 18 Comm: rcuop/6 Tainted: G B 3.17.0-rc3-next-20140901-sasha-00030-g662fbc2 #1098 [ 654.514717] ffff8804ed0ec1a0 ffff88027306fb50 ffffffff984f1b2d ffff880277409040 [ 654.514717] ffff88027306fb90 ffffffff9530995b 0000000000000008 ffff880400000001 [ 654.514717] ffff8804ed0ec3a8 ffff880277409040 00000000000000cc ffff8804ed0ec1a0 [ 654.514717] Call Trace: [ 654.514717] dump_stack (lib/dump_stack.c:52) [ 654.514717] print_trailer (mm/slub.c:640) [ 654.569247] FAULT_INJECTION: forcing a failure [ 654.514717] check_bytes_and_report (mm/slub.c:679 mm/slub.c:703) [ 654.514717] check_object (mm/slub.c:803) [ 654.514717] free_debug_processing (mm/slub.c:1073) [ 654.514717] ? free_fair_sched_group (include/linux/cpumask.h:108 (discriminator 1) include/linux/cpumask.h:181 (discriminator 1) kernel/sched/fair.c:7742 (discriminator 1)) [ 654.514717] __slab_free (mm/slub.c:2526 (discriminator 1)) [ 654.514717] ? __debug_check_no_obj_freed (lib/debugobjects.c:713) [ 654.514717] ? __this_cpu_preempt_check (lib/smp_processor_id.c:63) [ 654.514717] kfree (mm/slub.c:2672 mm/slub.c:3351) [ 654.514717] ? free_fair_sched_group (include/linux/cpumask.h:108 (discriminator 1) include/linux/cpumask.h:181 (discriminator 1) kernel/sched/fair.c:7742 (discriminator 1)) [ 654.514717] free_fair_sched_group (include/linux/cpumask.h:108 (discriminator 1) include/linux/cpumask.h:181 (discriminator 1) kernel/sched/fair.c:7742 (discriminator 1)) [ 654.514717] ? free_sched_group (kernel/sched/core.c:7294) [ 654.514717] free_sched_group (kernel/sched/core.c:7250) [ 654.514717] free_sched_group_rcu (kernel/sched/core.c:7297) [ 654.581722] FAULT_INJECTION: forcing a failure [ 654.514717] rcu_nocb_kthread (include/linux/rcupdate.h:365 kernel/rcu/rcu.h:119 kernel/rcu/tree_plugin.h:2424) [ 654.514717] ? rcu_nocb_kthread (kernel/rcu/rcu.h:84 kernel/rcu/tree_plugin.h:2422) [ 654.514717] ? preempt_count_sub (kernel/sched/core.c:2626) [ 654.514717] ? __wait_on_bit_lock (kernel/sched/wait.c:291) [ 654.514717] ? rcu_barrier (kernel/rcu/tree_plugin.h:2382) [ 654.514717] kthread (kernel/kthread.c:207) [ 654.514717] ? debug_smp_processor_id (lib/smp_processor_id.c:57) [ 654.514717] ? flush_kthread_work (kernel/kthread.c:176) [ 654.514717] ret_from_fork (arch/x86/kernel/entry_64.S:348) [ 654.514717] ? flush_kthread_work (kernel/kthread.c:176) [ 654.514717] FIX kmalloc-512: Restoring 0xffff8804ed0ec3a0-0xffff8804ed0ec3a7=0xcc [ 654.514717] [ 654.593547] FAULT_INJECTION: forcing a failure [ 654.618910] FAULT_INJECTION: forcing a failure [ 654.628117] FAULT_INJECTION: forcing a failure [ 654.638188] FAULT_INJECTION: forcing a failure [ 654.655649] FAULT_INJECTION: forcing a failure [ 654.672559] FAULT_INJECTION: forcing a failure [ 654.952575] FAULT_INJECTION: forcing a failure [ 655.026534] FAULT_INJECTION: forcing a failure [watchdog] kernel became tainted! (32/0) Last seed was 24782485 [ 655.376531] FAULT_INJECTION: forcing a failure [ 655.446808] FAULT_INJECTION: forcing a failure [ 655.522027] FAULT_INJECTION: forcing a failure [ 655.541068] trinity-main[14590]: segfault at 18 ip 00007fa5edd5f09c sp 00007fff25f439f0 error 4 in libc-2.13.so[7fa5edce8000+182000] [ 655.745328] FAULT_INJECTION: forcing a failure [ 655.779211] FAULT_INJECTION: forcing a failure [ 655.792406] BUG: unable to handle kernel NULL pointer dereference at 00000000000000d0 [ 655.794455] IP: effective_load.isra.28 (kernel/sched/fair.c:4207) [ 655.796133] PGD 1ef42c067 PUD 1ef42d067 PMD 0 [ 655.797423] Oops: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC [ 655.799266] Dumping ftrace buffer: [ 655.800038] (ftrace buffer empty) [ 655.800038] Modules linked in: [ 655.800038] CPU: 13 PID: 9140 Comm: trinity-c241 Tainted: G B 3.17.0-rc3-next-20140901-sasha-00030-g662fbc2 #1098 [ 655.800038] task: ffff8801ef578000 ti: ffff8801ef574000 task.ti: ffff8801ef574000 [ 655.800038] RIP: effective_load.isra.28 (kernel/sched/fair.c:4207) [ 655.800038] RSP: 0000:ffff8801ef577c08 EFLAGS: 00010082 [ 655.800038] RAX: 0000000000000000 RBX: ffff8804c54d37b0 RCX: 0000000000000000 [ 655.800038] RDX: 0000000000000002 RSI: ffffffff9b972f40 RDI: ffff88074b15f478 [ 655.800038] RBP: ffff8801ef577c10 R08: 0000000000000400 R09: ffff8804ed1a1068 [ 655.800038] R10: 0000000000000002 R11: 0000000000000000 R12: 00000000001e2dc0 [ 655.800038] R13: 0000000000000002 R14: 0000000000000028 R15: 0000000000000000 [ 655.800038] FS: 00007fa5ee263700(0000) GS:ffff8804ca200000(0000) knlGS:0000000000000000 [ 655.800038] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b [ 655.800038] CR2: 00000000000000d0 CR3: 00000001ef42b000 CR4: 00000000000006a0 [ 655.800038] Stack: [ 655.800038] ffff8804c54d37b0 ffff8801ef577cb8 ffffffff951b1458 ffffffff951b1242 [ 655.800038] ffff88094a228000 0000000000000400 00000002ef577c88 0000000000018480 [ 655.800038] 00000000003b9200 ffffffff00000000 0000000000000448 ffff880200000000 [ 655.832780] Call Trace: [ 655.832780] select_task_rq_fair (kernel/sched/fair.c:4342 kernel/sched/fair.c:4548) [ 655.832780] ? select_task_rq_fair (include/linux/rcupdate.h:840 kernel/sched/fair.c:4529) [ 655.832780] ? new_sync_read (fs/read_write.c:467) [ 655.832780] try_to_wake_up (include/linux/cpumask.h:108 kernel/sched/core.c:1414 kernel/sched/core.c:1692) [ 655.832780] ? new_sync_read (fs/read_write.c:467) [ 655.832780] wake_up_process (kernel/sched/core.c:1760 (discriminator 3)) [ 655.832780] __mutex_unlock_slowpath (kernel/locking/mutex.c:745 include/linux/jump_label.h:114 ./arch/x86/include/asm/spinlock.h:149 kernel/locking/mutex.c:748 kernel/locking/mutex.c:759) [ 655.832780] mutex_unlock (kernel/locking/mutex.c:423) [ 655.832780] generic_file_write_iter (mm/filemap.c:2658) [ 655.832780] do_iter_readv_writev (fs/read_write.c:668) [ 655.832780] do_readv_writev (fs/read_write.c:836) [ 655.832780] ? __generic_file_write_iter (mm/filemap.c:2649) [ 655.832780] ? put_lock_stats.isra.13 (./arch/x86/include/asm/preempt.h:98 kernel/locking/lockdep.c:254) [ 655.832780] ? __generic_file_write_iter (mm/filemap.c:2649) [ 655.832780] vfs_writev (fs/read_write.c:881) [ 655.832780] SyS_writev (fs/read_write.c:914 fs/read_write.c:905) [ 655.832780] tracesys (arch/x86/kernel/entry_64.S:542) [ 655.832780] Code: 83 e8 00 00 00 31 d2 48 f7 f7 48 83 f8 01 49 0f 46 c2 49 2b 01 45 31 c0 4d 8b 89 48 01 00 00 4d 85 c9 74 3c 4d 8b 99 58 01 00 00 <49> 8b 9b d0 00 00 00 49 8b 33 48 8b bb f0 00 00 00 49 2b bb 90 All code ======== 0: 83 e8 00 sub $0x0,%eax 3: 00 00 add %al,(%rax) 5: 31 d2 xor %edx,%edx 7: 48 f7 f7 div %rdi a: 48 83 f8 01 cmp $0x1,%rax e: 49 0f 46 c2 cmovbe %r10,%rax 12: 49 2b 01 sub (%r9),%rax 15: 45 31 c0 xor %r8d,%r8d 18: 4d 8b 89 48 01 00 00 mov 0x148(%r9),%r9 1f: 4d 85 c9 test %r9,%r9 22: 74 3c je 0x60 24: 4d 8b 99 58 01 00 00 mov 0x158(%r9),%r11 2b:* 49 8b 9b d0 00 00 00 mov 0xd0(%r11),%rbx <-- trapping instruction 32: 49 8b 33 mov (%r11),%rsi 35: 48 8b bb f0 00 00 00 mov 0xf0(%rbx),%rdi 3c: 49 rex.WB 3d: 2b .byte 0x2b 3e: bb .byte 0xbb 3f: 90 nop ... Code starting with the faulting instruction =========================================== 0: 49 8b 9b d0 00 00 00 mov 0xd0(%r11),%rbx 7: 49 8b 33 mov (%r11),%rsi a: 48 8b bb f0 00 00 00 mov 0xf0(%rbx),%rdi 11: 49 rex.WB 12: 2b .byte 0x2b 13: bb .byte 0xbb 14: 90 nop ... [ 655.832780] RIP effective_load.isra.28 (kernel/sched/fair.c:4207) [ 655.832780] RSP <ffff8801ef577c08> [ 655.832780] CR2: 00000000000000d0 Thanks, Sasha -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists