Attachment 316776 Details for Bug 462150 – lockdep warning and memory corruption detected during reproducer run

lockdep warning and memory corruption detected during reproducer run

mount-unmount-test-corruption.txt (text/plain), 11.62 KB, created by Jeff Layton on 2008-09-15 19:41:44 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jeff Layton

Created: 2008-09-15 19:41:44 UTC

Size: 11.62 KB

patch

obsolete

>------------[ cut here ]------------
>WARNING: at kernel/lockdep.c:2609 __lock_acquire+0xb33/0xc01() (Not tainted)
>Modules linked in: cifs nls_utf8 autofs4 sunrpc ipv6 xfs loop dm_multipath 8139cp floppy 8139too pcspkr mii i2c_piix4 i2c_core dm_snapshot dm_zero dm_mirror dm_log dm_mod ata_piix pata_acpi ata_generic ext3 jbd mbcache [last unloaded: cifs]
>Pid: 15806, comm: mount.cifs Not tainted 2.6.27-0.323.rc6.fc10.x86_64 #1
>
>Call Trace:
> [<ffffffff8104583e>] warn_on_slowpath+0x65/0x9a
> [<ffffffff810133d8>] ? dump_trace+0x24f/0x25e
> [<ffffffff81067b48>] ? trace_hardirqs_on+0xd/0xf
> [<ffffffff8101b5d6>] ? save_stack_trace+0x2f/0x4d
> [<ffffffff810669a3>] ? save_trace+0x3f/0x95
> [<ffffffff8106588d>] ? graph_unlock+0x5e/0x6a
> [<ffffffff810678dd>] ? mark_lock+0x38d/0x3a2
> [<ffffffff81068de1>] __lock_acquire+0xb33/0xc01
> [<ffffffff81066b05>] ? trace_hardirqs_off_caller+0x21/0xa4
> [<ffffffff81068f3c>] lock_acquire+0x8d/0xba
> [<ffffffff81322aba>] ? __down_common+0x98/0xcf
> [<ffffffff81323e17>] _spin_lock_irq+0x44/0x74
> [<ffffffff81322aba>] ? __down_common+0x98/0xcf
> [<ffffffff81323b16>] ? _spin_unlock_irq+0x30/0x3c
> [<ffffffff81322aba>] __down_common+0x98/0xcf
> [<ffffffff81322b64>] __down+0x1d/0x1f
> [<ffffffff8105e3bf>] down+0x2d/0x3e
> [<ffffffffa0312075>] CIFSSMBTDis+0x4c/0x11a [cifs]
> [<ffffffffa03175f9>] cifs_umount+0x70/0x1bc [cifs]
> [<ffffffffa030c86a>] cifs_get_sb+0x1f8/0x26f [cifs]
> [<ffffffff810d4911>] vfs_kern_mount+0xa2/0x131
> [<ffffffff810d4a07>] do_kern_mount+0x4c/0xe7
> [<ffffffff810ea782>] do_new_mount+0x64/0x97
> [<ffffffff810eb587>] do_mount+0x20c/0x23b
> [<ffffffff810e96fa>] ? copy_mount_options+0xd4/0x138
> [<ffffffff8117020d>] ? _raw_spin_lock+0x68/0x116
> [<ffffffff810eb644>] sys_mount+0x8e/0xd6
> [<ffffffff813236ce>] ? trace_hardirqs_on_thunk+0x3a/0x3f
> [<ffffffff8101138a>] system_call_fastpath+0x16/0x1b
>
>---[ end trace b5a6af91c3d7906c ]---
>general protection fault: 0000 [1] SMP DEBUG_PAGEALLOC
>CPU 0 
>Modules linked in: cifs nls_utf8 autofs4 sunrpc ipv6 xfs loop dm_multipath 8139cp floppy 8139too pcspkr mii i2c_piix4 i2c_core dm_snapshot dm_zero dm_mirror dm_log dm_mod ata_piix pata_acpi ata_generic ext3 jbd mbcache [last unloaded: cifs]
>Pid: 15806, comm: mount.cifs Tainted: G        W 2.6.27-0.323.rc6.fc10.x86_64 #1
>RIP: 0010:[<ffffffff811706c4>]  [<ffffffff811706c4>] list_del+0xc/0x85
>RSP: 0018:ffff880003489c38  EFLAGS: 00010092
>RAX: ffff880015c554e8 RBX: 6b6b6b6b6b6b6b6b RCX: ffff88000c018730
>RDX: ffffffff8105e275 RSI: ffff880015c554c0 RDI: 6b6b6b6b6b6b6b6b
>RBP: ffff880003489c48 R08: 0000000000000002 R09: 0000000000000001
>R10: ffffffff81ab2370 R11: 0000000000100100 R12: 0000000000000296
>R13: ffff880015c554a8 R14: 00000000000010ce R15: ffff88001df03000
>FS:  00007f1757a216f0(0000) GS:ffffffff816aaa00(0000) knlGS:0000000000000000
>CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
>CR2: 00007f1759194000 CR3: 000000000350c000 CR4: 00000000000006e0
>DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
>DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
>Process mount.cifs (pid: 15806, threadinfo ffff880003488000, task ffff88000c018000)
>Stack:  ffff880003489c68 6b6b6b6b6b6b6b6b ffff880003489c68 ffffffff81322a0e
> 00000000fffffff0 ffff880015c554a8 ffff880003489c88 ffffffff8105e28f
> ffff880015c55488 00000000fffffff0 ffff880003489cc8 ffffffffa0312093
>Call Trace:
> [<ffffffff81322a0e>] __up+0x1a/0x2e
> [<ffffffff8105e28f>] up+0x2e/0x3e
> [<ffffffffa0312093>] CIFSSMBTDis+0x6a/0x11a [cifs]
> [<ffffffffa03175f9>] cifs_umount+0x70/0x1bc [cifs]
> [<ffffffffa030c86a>] cifs_get_sb+0x1f8/0x26f [cifs]
> [<ffffffff810d4911>] vfs_kern_mount+0xa2/0x131
> [<ffffffff810d4a07>] do_kern_mount+0x4c/0xe7
> [<ffffffff810ea782>] do_new_mount+0x64/0x97
> [<ffffffff810eb587>] do_mount+0x20c/0x23b
> [<ffffffff810e96fa>] ? copy_mount_options+0xd4/0x138
> [<ffffffff8117020d>] ? _raw_spin_lock+0x68/0x116
> [<ffffffff810eb644>] sys_mount+0x8e/0xd6
> [<ffffffff813236ce>] ? trace_hardirqs_on_thunk+0x3a/0x3f
> [<ffffffff8101138a>] system_call_fastpath+0x16/0x1b
>
>
>Code: 48 8d 53 18 49 8d 7c 24 18 e8 96 00 00 00 4c 89 ef e8 85 fe ff ff 59 5b 41 5c 41 5d c9 c3 90 55 48 89 e5 53 48 89 fb 48 83 ec 08 <48> 8b 47 08 48 8b 00 48 39 f8 74 20 49 89 c0 48 89 f9 48 c7 c2 
>RIP  [<ffffffff811706c4>] list_del+0xc/0x85
> RSP <ffff880003489c38>
>---[ end trace b5a6af91c3d7906c ]---
>=============================================================================
>BUG kmalloc-512 (Tainted: G      D W): Poison overwritten
>-----------------------------------------------------------------------------
>
>INFO: 0xffff880015c554a8-0xffff880015c55568. First byte 0x6c instead of 0x6b
>INFO: Allocated in tconInfoAlloc+0x1f/0xd3 [cifs] age=413 cpu=0 pid=15801
>INFO: Freed in tconInfoFree+0x6a/0x6e [cifs] age=48 cpu=0 pid=15807
>INFO: Slab 0xffffe20000829f80 objects=14 used=6 fp=0xffff880015c55488 flags=0x200000000020c3
>INFO: Object 0xffff880015c55488 @offset=5256 fp=0xffff880015c55240
>
>Bytes b4 0xffff880015c55478:  cd 30 49 04 01 00 00 00 5a 5a 5a 5a 5a 5a 5a 5a ï¿½0I.....ZZZZZZZZ
>  Object 0xffff880015c55488:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c55498:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c554a8:  6c 6b 6d 6b 6b 6b 6b 6b 00 00 00 00 6b 6b 6b 6b lkmkkkkk....kkkk
>  Object 0xffff880015c554b8:  00 80 01 0c 00 88 ff ff 6b 6b 6b 6b 6b 6b 6b 6b ......ï¿½ï¿½kkkkkkkk
>  Object 0xffff880015c554c8:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c554d8:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c554e8:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c554f8:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c55508:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c55518:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c55528:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c55538:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c55548:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c55558:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c55568:  6a 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b jkkkkkkkkkkkkkkk
>  Object 0xffff880015c55578:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c55588:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c55598:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c555a8:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c555b8:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c555c8:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c555d8:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c555e8:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c555f8:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c55608:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c55618:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c55628:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c55638:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c55648:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c55658:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c55668:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
>  Object 0xffff880015c55678:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 kkkkkkkkkkkkkkkï¿½
> Redzone 0xffff880015c55688:  bb bb bb bb bb bb bb bb                         ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½        
> Padding 0xffff880015c556c8:  5a 5a 5a 5a 5a 5a 5a 5a                         ZZZZZZZZ        
>Pid: 10805, comm: sshd Tainted: G      D W 2.6.27-0.323.rc6.fc10.x86_64 #1
>
>Call Trace:
> <IRQ>  [<ffffffff810c9ca4>] print_trailer+0x140/0x149
> [<ffffffff810ca30d>] check_bytes_and_report+0xb7/0xf7
> [<ffffffff810ca41e>] check_object+0xd1/0x1b4
> [<ffffffff810cc32a>] __slab_alloc+0x33b/0x3ee
> [<ffffffff81297f54>] ? dev_alloc_skb+0x1b/0x31
> [<ffffffff810cd1b6>] __kmalloc_node_track_caller+0xa4/0x108
> [<ffffffff81297f54>] ? dev_alloc_skb+0x1b/0x31
> [<ffffffff8129757b>] __alloc_skb+0x74/0x13a
> [<ffffffff81297f54>] dev_alloc_skb+0x1b/0x31
> [<ffffffffa0160a03>] rtl8139_poll+0x23c/0x3e9 [8139too]
> [<ffffffff8129b289>] net_rx_action+0x103/0x24d
> [<ffffffff8129b1fc>] ? net_rx_action+0x76/0x24d
> [<ffffffff8104aca9>] __do_softirq+0x83/0x10e
> [<ffffffff81012dcc>] call_softirq+0x1c/0x28
> [<ffffffff810140a5>] do_softirq+0x52/0xb5
> [<ffffffff8104a851>] irq_exit+0x53/0xa2
> [<ffffffff8102265d>] smp_apic_timer_interrupt+0x97/0xb0
> [<ffffffff810125d8>] apic_timer_interrupt+0x88/0x90
> <EOI>  [<ffffffff81323b16>] ? _spin_unlock_irq+0x30/0x3c
> [<ffffffff81323b16>] ? _spin_unlock_irq+0x30/0x3c
> [<ffffffff81067b48>] ? trace_hardirqs_on+0xd/0xf
> [<ffffffff81323b1e>] ? _spin_unlock_irq+0x38/0x3c
> [<ffffffff81323b16>] ? _spin_unlock_irq+0x30/0x3c
> [<ffffffff81041fb7>] ? finish_task_switch+0x5f/0xf3
> [<ffffffff81041f58>] ? finish_task_switch+0x0/0xf3
> [<ffffffff81321a46>] ? thread_return+0x3d/0xcb
> [<ffffffff81066b95>] ? trace_hardirqs_off+0xd/0xf
> [<ffffffff81017e79>] ? native_sched_clock+0x8e/0xa8
> [<ffffffff81017d16>] ? sched_clock+0x9/0xc
> [<ffffffff8106607d>] ? lock_release_holdtime+0x2c/0x111
> [<ffffffff81067b48>] ? trace_hardirqs_on+0xd/0xf
> [<ffffffff81067b17>] ? trace_hardirqs_on_caller+0x10f/0x133
> [<ffffffff81321e30>] ? schedule_timeout+0x27/0xcb
> [<ffffffff811d4810>] ? tty_ldisc_deref+0x6e/0x73
> [<ffffffff811ce958>] ? tty_poll+0x6e/0x7f
> [<ffffffff810341cb>] ? need_resched+0x1e/0x28
> [<ffffffff810dfae5>] ? do_select+0x4e3/0x543
> [<ffffffff810df602>] ? do_select+0x0/0x543
> [<ffffffff810e017d>] ? __pollwait+0x0/0xe7
> [<ffffffff8103dd1f>] ? default_wake_function+0x0/0xf
> [<ffffffff8103dd1f>] ? default_wake_function+0x0/0xf
> [<ffffffff8103dd1f>] ? default_wake_function+0x0/0xf
> [<ffffffff8103dd1f>] ? default_wake_function+0x0/0xf
> [<ffffffff8104ab45>] ? _local_bh_enable_ip+0xda/0xe7
> [<ffffffff8104ab60>] ? local_bh_enable_ip+0xe/0x10
> [<ffffffff81066b05>] ? trace_hardirqs_off_caller+0x21/0xa4
> [<ffffffff81067572>] ? mark_lock+0x22/0x3a2
> [<ffffffff810685a6>] ? __lock_acquire+0x2f8/0xc01
> [<ffffffff81066b05>] ? trace_hardirqs_off_caller+0x21/0xa4
> [<ffffffff81066b95>] ? trace_hardirqs_off+0xd/0xf
> [<ffffffff81017e79>] ? native_sched_clock+0x8e/0xa8
> [<ffffffff81017d16>] ? sched_clock+0x9/0xc
> [<ffffffff8106607d>] ? lock_release_holdtime+0x2c/0x111
> [<ffffffff810dfd03>] ? core_sys_select+0x1be/0x25a
> [<ffffffff810dfb8b>] ? core_sys_select+0x46/0x25a
> [<ffffffff81066b05>] ? trace_hardirqs_off_caller+0x21/0xa4
> [<ffffffff81066b95>] ? trace_hardirqs_off+0xd/0xf
> [<ffffffff81017e79>] ? native_sched_clock+0x8e/0xa8
> [<ffffffff81017d16>] ? sched_clock+0x9/0xc
> [<ffffffff8106607d>] ? lock_release_holdtime+0x2c/0x111
> [<ffffffff811701a0>] ? _raw_spin_unlock+0x8e/0x93
> [<ffffffff810e00db>] ? sys_select+0xbd/0x15f
> [<ffffffff813236ce>] ? trace_hardirqs_on_thunk+0x3a/0x3f
> [<ffffffff8111316f>] ? dnotify_parent+0x2d/0x78
> [<ffffffff8101138a>] ? system_call_fastpath+0x16/0x1b
>
>FIX kmalloc-512: Restoring 0xffff880015c554a8-0xffff880015c55568=0x6b
>
>FIX kmalloc-512: Marking all objects used
>SELinux: initialized (dev cifs, type cifs), uses genfs_contexts
> CIFS VFS: cifs_read_super: get root inode failed
>

Actions: View

Attachments on bug 462150: 316764 | 316776 | 316932 | 319417 | 319418 | 319419 | 319420 | 320000 | 320011 | 320186