Bug 65621

Summary: BUG bio-0 (Not tainted): Poison overwritten
Product: Memory Management Reporter: Mikhail (mikhail.v.gavrilov)
Component: Slab AllocatorAssignee: Andrew Morton (akpm)
Status: RESOLVED DUPLICATE    
Severity: normal CC: alan
Priority: P1    
Hardware: All   
OS: Linux   
Kernel Version: 3.12 Subsystem:
Regression: No Bisected commit-id:
Attachments: dmesg output

Description Mikhail 2013-11-24 16:57:05 UTC
Created attachment 115791 [details]
dmesg output

$ uname -a
Linux localhost.localdomain 3.12.0-2.fc21.x86_64+debug #1 SMP Sat Nov 9 21:12:03 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux


[28969.527047] =============================================================================
[28969.527050] BUG bio-0 (Not tainted): Poison overwritten
[28969.527051] -----------------------------------------------------------------------------

[28969.527052] Disabling lock debugging due to kernel taint
[28969.527054] INFO: 0xffff8801037cd071-0xffff8801037cd071. First byte 0xeb instead of 0x6b
[28969.527057] INFO: Allocated in mempool_alloc_slab+0x15/0x20 age=7704 cpu=3 pid=9558
[28969.527060] 	__slab_alloc+0x3eb/0x4fe
[28969.527062] 	kmem_cache_alloc+0x294/0x340
[28969.527063] 	mempool_alloc_slab+0x15/0x20
[28969.527064] 	mempool_alloc+0x5c/0x150
[28969.527067] 	bio_alloc_bioset+0x196/0x2a0
[28969.527068] 	mpage_alloc+0x2f/0x90
[28969.527070] 	do_mpage_readpage+0x2f8/0x680
[28969.527071] 	mpage_readpages+0xdb/0x130
[28969.527074] 	ext4_readpages+0x3a/0x50
[28969.527075] 	__do_page_cache_readahead+0x2d2/0x370
[28969.527076] 	force_page_cache_readahead+0x79/0xc0
[28969.527078] 	SyS_fadvise64_64+0x1b3/0x250
[28969.527079] 	SyS_fadvise64+0xe/0x10
[28969.527081] 	system_call_fastpath+0x16/0x1b
[28969.527082] INFO: Freed in mempool_free_slab+0x17/0x20 age=7621 cpu=7 pid=0
[28969.527084] 	__slab_free+0x3a/0x382
[28969.527085] 	kmem_cache_free+0x356/0x370
[28969.527086] 	mempool_free_slab+0x17/0x20
[28969.527087] 	mempool_free+0x49/0x90
[28969.527089] 	bio_put+0x7d/0xa0
[28969.527090] 	mpage_end_io+0x8d/0xb0
[28969.527091] 	bio_endio+0x1d/0x30
[28969.527093] 	blk_update_request+0xc2/0x610
[28969.527094] 	blk_update_bidi_request+0x1c/0x80
[28969.527095] 	blk_end_bidi_request+0x1f/0x60
[28969.527096] 	blk_end_request+0x10/0x20
[28969.527099] 	scsi_io_completion+0xf1/0x640
[28969.527100] 	scsi_finish_command+0xb0/0x110
[28969.527101] 	scsi_softirq_done+0x12f/0x160
[28969.527103] 	blk_done_softirq+0x90/0xb0
[28969.527105] 	__do_softirq+0x107/0x410
[28969.527106] INFO: Slab 0xffffea00040df300 objects=28 used=28 fp=0x          (null) flags=0x5ff00000004080
[28969.527107] INFO: Object 0xffff8801037ccfc0 @offset=4032 fp=0xffff8801037cf3c0

[28969.527108] Bytes b4 ffff8801037ccfb0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a  ZZZZZZZZZZZZZZZZ
[28969.527109] Object ffff8801037ccfc0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
[28969.527110] Object ffff8801037ccfd0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
[28969.527111] Object ffff8801037ccfe0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
[28969.527112] Object ffff8801037ccff0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
[28969.527113] Object ffff8801037cd000: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
[28969.527114] Object ffff8801037cd010: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
[28969.527115] Object ffff8801037cd020: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
[28969.527115] Object ffff8801037cd030: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
[28969.527116] Object ffff8801037cd040: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
[28969.527117] Object ffff8801037cd050: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
[28969.527118] Object ffff8801037cd060: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
[28969.527119] Object ffff8801037cd070: 6b eb 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5  k.kkkkkkkkkkkkk.
[28969.527120] Redzone ffff8801037cd080: bb bb bb bb bb bb bb bb                          ........
[28969.527121] Padding ffff8801037cd1c0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a  ZZZZZZZZZZZZZZZZ
[28969.527122] Padding ffff8801037cd1d0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a  ZZZZZZZZZZZZZZZZ
[28969.527122] Padding ffff8801037cd1e0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a  ZZZZZZZZZZZZZZZZ
[28969.527123] Padding ffff8801037cd1f0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a  ZZZZZZZZZZZZZZZZ
[28969.527125] CPU: 6 PID: 9558 Comm: transmission-gt Tainted: G    B        3.12.0-2.fc21.x86_64+debug #1
[28969.527126] Hardware name: Gigabyte Technology Co., Ltd. Z87M-D3H/Z87M-D3H, BIOS F8 08/03/2013
[28969.527127]  ffff8801037ccfc0 ffff8807d47e1958 ffffffff81742e92 ffff880813909b00
[28969.527130]  ffff8807d47e1998 ffffffff811d368d 0000000000000040 ffff880100000001
[28969.527132]  ffff8801037cd072 ffff880813909b00 000000000000006b ffff8801037ccfc0
[28969.527134] Call Trace:
[28969.527137]  [<ffffffff81742e92>] dump_stack+0x54/0x74
[28969.527139]  [<ffffffff811d368d>] print_trailer+0x14d/0x200
[28969.527140]  [<ffffffff811d387f>] check_bytes_and_report+0xcf/0x110
[28969.527142]  [<ffffffff811d46f7>] check_object+0x1d7/0x250
[28969.527144]  [<ffffffff8117fd05>] ? mempool_alloc_slab+0x15/0x20
[28969.527146]  [<ffffffff81740613>] alloc_debug_processing+0x76/0x118
[28969.527148]  [<ffffffff8174124e>] __slab_alloc+0x3eb/0x4fe
[28969.527151]  [<ffffffff81021b45>] ? native_sched_clock+0x15/0x80
[28969.527153]  [<ffffffff8117fd05>] ? mempool_alloc_slab+0x15/0x20
[28969.527156]  [<ffffffff810eebdd>] ? trace_hardirqs_off+0xd/0x10
[28969.527159]  [<ffffffff810b954f>] ? local_clock+0x5f/0x70
[28969.527161]  [<ffffffff811d6244>] kmem_cache_alloc+0x294/0x340
[28969.527162]  [<ffffffff8117fd05>] ? mempool_alloc_slab+0x15/0x20
[28969.527164]  [<ffffffff8117fd05>] mempool_alloc_slab+0x15/0x20
[28969.527166]  [<ffffffff8117fe3c>] mempool_alloc+0x5c/0x150
[28969.527168]  [<ffffffff8128c567>] ? ext4_map_blocks+0x267/0x530
[28969.527169]  [<ffffffff81233016>] bio_alloc_bioset+0x196/0x2a0
[28969.527171]  [<ffffffff8123a41f>] mpage_alloc+0x2f/0x90
[28969.527173]  [<ffffffff8123af98>] do_mpage_readpage+0x2f8/0x680
[28969.527175]  [<ffffffff8117ccd9>] ? add_to_page_cache_locked+0xf9/0x270
[28969.527177]  [<ffffffff8123b3fb>] mpage_readpages+0xdb/0x130
[28969.527179]  [<ffffffff8128c9e0>] ? _ext4_get_block+0x1b0/0x1b0
[28969.527181]  [<ffffffff8128c9e0>] ? _ext4_get_block+0x1b0/0x1b0
[28969.527183]  [<ffffffff811ca7e9>] ? alloc_pages_current+0xa9/0x170
[28969.527185]  [<ffffffff8128984a>] ext4_readpages+0x3a/0x50
[28969.527187]  [<ffffffff8118ad62>] __do_page_cache_readahead+0x2d2/0x370
[28969.527188]  [<ffffffff8118abb7>] ? __do_page_cache_readahead+0x127/0x370
[28969.527190]  [<ffffffff8118af39>] force_page_cache_readahead+0x79/0xc0
[28969.527192]  [<ffffffff81181883>] SyS_fadvise64_64+0x1b3/0x250
[28969.527194]  [<ffffffff8138330b>] ? trace_hardirqs_on_thunk+0x3a/0x3f
[28969.527196]  [<ffffffff8118192e>] SyS_fadvise64+0xe/0x10
[28969.527197]  [<ffffffff81756229>] system_call_fastpath+0x16/0x1b
[28969.527198] FIX bio-0: Restoring 0xffff8801037cd071-0xffff8801037cd071=0x6b

[28969.527199] FIX bio-0: Marking all objects used
Comment 1 Alan 2013-11-26 21:36:09 UTC
Is this repeatable
Had the box been suspended and resumed
Can you attach an lsmod of the system
Comment 2 Mikhail 2013-11-27 04:26:41 UTC
# lsmod
Module                  Size  Used by
rfcomm                 69451  12 
nls_utf8               12557  1 
vfat                   17411  1 
fat                    65126  1 vfat
isofs                  39803  1 
fuse                   86956  2 
nf_conntrack_netbios_ns    12665  0 
nf_conntrack_broadcast    12642  1 nf_conntrack_netbios_ns
ipt_MASQUERADE         12880  1 
ip6t_REJECT            12939  2 
xt_conntrack           12760  42 
cfg80211              547930  0 
ebtable_nat            12807  0 
ebtable_broute         12731  0 
bridge                131053  1 ebtable_broute
stp                    12946  1 bridge
llc                    14196  2 stp,bridge
ebtable_filter         12827  0 
ebtables               30833  3 ebtable_broute,ebtable_nat,ebtable_filter
ip6table_nat           13015  1 
nf_conntrack_ipv6      18821  24 
nf_defrag_ipv6        100125  1 nf_conntrack_ipv6
nf_nat_ipv6            13213  1 ip6table_nat
ip6table_mangle        12700  1 
ip6table_security      12710  1 
ip6table_raw           12683  1 
ip6table_filter        12815  1 
ip6_tables             26808  5 ip6table_filter,ip6table_mangle,ip6table_security,ip6table_nat,ip6table_raw
iptable_nat            13011  1 
nf_conntrack_ipv4      14847  20 
nf_defrag_ipv4         12702  1 nf_conntrack_ipv4
nf_nat_ipv4            13199  1 iptable_nat
nf_nat                 25079  5 ipt_MASQUERADE,nf_nat_ipv4,nf_nat_ipv6,ip6table_nat,iptable_nat
nf_conntrack          110849  11 nf_conntrack_netbios_ns,ipt_MASQUERADE,nf_nat,nf_nat_ipv4,nf_nat_ipv6,xt_conntrack,ip6table_nat,nf_conntrack_broadcast,iptable_nat,nf_conntrack_ipv4,nf_conntrack_ipv6
iptable_mangle         12695  1 
iptable_security       12705  1 
iptable_raw            12678  1 
bnep                   24065  2 
iTCO_wdt               13516  0 
iTCO_vendor_support    13419  1 iTCO_wdt
ppdev                  17635  0 
joydev                 17560  0 
x86_pkg_temp_thermal    14270  0 
coretemp               13507  0 
cdc_ncm                19725  0 
kvm_intel             143110  0 
option                 42504  0 
usbnet                 42155  1 cdc_ncm
kvm                   467097  1 kvm_intel
usb_wwan               19688  1 option
crct10dif_pclmul       14250  0 
crc32_pclmul           13113  0 
btusb                  28350  0 
crc32c_intel           22079  0 
bluetooth             406882  32 bnep,btusb,rfcomm
ghash_clmulni_intel    13259  0 
rfkill                 22195  5 cfg80211,bluetooth
microcode              44007  0 
snd_hda_codec_realtek    56143  1 
snd_hda_codec_hdmi     41142  1 
snd_hda_intel          48357  7 
snd_hda_codec         183936  3 snd_hda_codec_realtek,snd_hda_codec_hdmi,snd_hda_intel
snd_hwdep              17650  1 snd_hda_codec
serio_raw              13413  0 
snd_seq                61084  0 
snd_seq_device         14136  1 snd_seq
snd_pcm                98154  3 snd_hda_codec_hdmi,snd_hda_codec,snd_hda_intel
r8169                  71749  0 
mii                    13527  2 r8169,usbnet
snd_page_alloc         18268  2 snd_pcm,snd_hda_intel
snd_timer              28806  2 snd_pcm,snd_seq
lpc_ich                21080  0 
snd                    79517  23 snd_hda_codec_realtek,snd_hwdep,snd_timer,snd_hda_codec_hdmi,snd_pcm,snd_seq,snd_hda_codec,snd_hda_intel,snd_seq_device
mei_me                 18421  0 
i2c_i801               18135  0 
mfd_core               13182  1 lpc_ich
soundcore              14491  1 snd
mei                    77086  1 mei_me
shpchp                 37284  0 
parport_pc             28048  0 
parport                40605  2 ppdev,parport_pc
binfmt_misc            17431  1 
nfsd                  335866  1 
auth_rpcgss            67416  1 nfsd
nfs_acl                12741  1 nfsd
lockd                  98136  1 nfsd
sunrpc                310773  5 nfsd,auth_rpcgss,lockd,nfs_acl
hid_logitech_dj        18652  0 
usb_storage            56862  2 
i915                  720821  7 
i2c_algo_bit           13257  1 i915
drm_kms_helper         50359  1 i915
drm                   288416  6 i915,drm_kms_helper
i2c_core               38380  5 drm,i915,i2c_i801,drm_kms_helper,i2c_algo_bit
video                  19299  1 i915
Comment 3 Alan 2013-12-18 14:38:28 UTC

*** This bug has been marked as a duplicate of bug 64521 ***