Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S933030AbaAaUL4 (ORCPT ); Fri, 31 Jan 2014 15:11:56 -0500 Received: from mail-ve0-f172.google.com ([209.85.128.172]:34195 "EHLO mail-ve0-f172.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S932325AbaAaULw (ORCPT ); Fri, 31 Jan 2014 15:11:52 -0500 MIME-Version: 1.0 Date: Fri, 31 Jan 2014 22:11:51 +0200 Message-ID: Subject: BUG ip_dst_cache (Not tainted): Poison overwritten From: Tommi Rantala To: netdev@vger.kernel.org Cc: Dave Jones , trinity@vger.kernel.org, LKML Content-Type: text/plain; charset=ISO-8859-1 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hello, Hit this while fuzzing v3.13-9218-g0e47c96 with trinity in a qemu virtual machine. Tommi [ 6329.061605] ============================================================================= [ 6329.062014] BUG ip_dst_cache (Not tainted): Poison overwritten [ 6329.062014] ----------------------------------------------------------------------------- [ 6329.062014] Disabling lock debugging due to kernel taint [ 6329.062014] INFO: 0xffff8800b4809940-0xffff8800b4809940. First byte 0x6a instead of 0x6b [ 6329.062014] INFO: Allocated in dst_alloc+0x46/0x180 age=33 cpu=0 pid=6108 [ 6329.062014] __slab_alloc+0x4f8/0x58c [ 6329.062014] kmem_cache_alloc+0x94/0x290 [ 6329.062014] dst_alloc+0x46/0x180 [ 6329.062014] rt_dst_alloc+0x47/0x50 [ 6329.062014] __ip_route_output_key+0x882/0xa80 [ 6329.062014] ip_route_output_flow+0x22/0x60 [ 6329.062014] igmpv3_newpack+0xe2/0x210 [ 6329.062014] add_grhead.isra.17+0x37/0xa0 [ 6329.062014] add_grec+0x3b2/0x470 [ 6329.062014] igmp_ifc_timer_expire+0x28e/0x400 [ 6329.062014] call_timer_fn+0x146/0x320 [ 6329.062014] run_timer_softirq+0x2d4/0x360 [ 6329.062014] __do_softirq+0x217/0x4a0 [ 6329.062014] irq_exit+0x45/0xb0 [ 6329.062014] smp_apic_timer_interrupt+0x3f/0x50 [ 6329.062014] apic_timer_interrupt+0x72/0x80 [ 6329.062014] INFO: Freed in dst_destroy+0x8a/0xe0 age=33 cpu=0 pid=6108 [ 6329.062014] __slab_free+0x32/0x380 [ 6329.062014] kmem_cache_free+0x186/0x2c0 [ 6329.062014] dst_destroy+0x8a/0xe0 [ 6329.062014] dst_release+0x53/0x70 [ 6329.062014] ip_tunnel_xmit+0x50e/0xfb0 [ 6329.062014] ipip_tunnel_xmit+0x41/0x60 [ 6329.062014] dev_hard_start_xmit+0x3ed/0x950 [ 6329.062014] __dev_queue_xmit+0x621/0x890 [ 6329.062014] dev_queue_xmit+0xb/0x10 [ 6329.062014] neigh_direct_output+0xc/0x10 [ 6329.062014] ip_finish_output2+0x494/0x5d0 [ 6329.062014] ip_finish_output+0x238/0x2d0 [ 6329.062014] ip_output+0x9f/0x110 [ 6329.062014] ip_local_out+0x6e/0xa0 [ 6329.062014] igmpv3_sendpack+0x43/0x50 [ 6329.062014] igmp_ifc_timer_expire+0x395/0x400 [ 6329.062014] INFO: Slab 0xffffea0002d20200 objects=14 used=14 fp=0x (null) flags=0x100000000004080 [ 6329.062014] INFO: Object 0xffff8800b48098c0 @offset=6336 fp=0xffff8800b4809680 [ 6329.062014] Bytes b4 ffff8800b48098b0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 6329.062014] Object ffff8800b48098c0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6329.062014] Object ffff8800b48098d0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6329.062014] Object ffff8800b48098e0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6329.062014] Object ffff8800b48098f0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6329.062014] Object ffff8800b4809900: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6329.062014] Object ffff8800b4809910: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6329.062014] Object ffff8800b4809920: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6329.062014] Object ffff8800b4809930: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6329.062014] Object ffff8800b4809940: 6a 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b jkkkkkkkkkkkkkkk [ 6329.062014] Object ffff8800b4809950: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6329.062014] Object ffff8800b4809960: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6329.062014] Object ffff8800b4809970: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 kkkkkkkkkkkkkkk. [ 6329.062014] Redzone ffff8800b4809980: bb bb bb bb bb bb bb bb ........ [ 6329.062014] Padding ffff8800b4809ac0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 6329.062014] Padding ffff8800b4809ad0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 6329.062014] Padding ffff8800b4809ae0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 6329.062014] Padding ffff8800b4809af0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 6329.062014] CPU: 0 PID: 6108 Comm: trinity-main Tainted: G B 3.13.0+ #1 [ 6329.062014] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 6329.062014] ffff8800b48098c0 ffff8800ab253b38 ffffffff82366c34 ffff8800baacd8c0 [ 6329.062014] ffff8800ab253b68 ffffffff81262e41 ffff8800b4809941 ffff8800baacd8c0 [ 6329.062014] 000000000000006b ffff8800b48098c0 ffff8800ab253bb0 ffffffff81263284 [ 6329.062014] Call Trace: [ 6329.062014] [] dump_stack+0x4d/0x66 [ 6329.062014] [] print_trailer+0x131/0x140 [ 6329.062014] [] check_bytes_and_report+0xc4/0x120 [ 6329.062014] [] check_object+0x11e/0x240 [ 6329.062014] [] ? dst_alloc+0x46/0x180 [ 6329.062014] [] alloc_debug_processing+0x62/0x104 [ 6329.062014] [] __slab_alloc+0x4f8/0x58c [ 6329.062014] [] ? sched_clock_cpu+0xb8/0xe0 [ 6329.062014] [] ? kvm_clock_read+0x27/0x40 [ 6329.062014] [] ? sched_clock+0x9/0x10 [ 6329.062014] [] ? dst_alloc+0x46/0x180 [ 6329.062014] [] ? sched_clock_cpu+0xb8/0xe0 [ 6329.062014] [] ? fib_table_lookup+0x535/0x570 [ 6329.062014] [] ? local_clock+0x1a/0x40 [ 6329.062014] [] ? lock_release_holdtime+0x28/0x180 [ 6329.062014] [] kmem_cache_alloc+0x94/0x290 [ 6329.062014] [] ? dst_alloc+0x46/0x180 [ 6329.062014] [] ? fib_table_lookup+0x54d/0x570 [ 6329.062014] [] dst_alloc+0x46/0x180 [ 6329.062014] [] ? __lock_is_held+0x52/0x80 [ 6329.062014] [] rt_dst_alloc+0x47/0x50 [ 6329.062014] [] __ip_route_output_key+0x882/0xa80 [ 6329.062014] [] ? ip_route_input_noref+0x1060/0x1060 [ 6329.062014] [] ip_route_output_flow+0x22/0x60 [ 6329.062014] [] ip4_datagram_release_cb+0x266/0x390 [ 6329.062014] [] ? ip4_datagram_release_cb+0xc4/0x390 [ 6329.062014] [] release_sock+0x184/0x220 [ 6329.062014] [] sock_setsockopt+0xa58/0xa80 [ 6329.062014] [] ? selinux_socket_setsockopt+0x46/0x60 [ 6329.062014] [] SyS_setsockopt+0x77/0xe0 [ 6329.062014] [] system_call_fastpath+0x16/0x1b [ 6329.062014] FIX ip_dst_cache: Restoring 0xffff8800b4809940-0xffff8800b4809940=0x6b [ 6329.062014] FIX ip_dst_cache: Marking all objects used [ 6342.045208] ============================================================================= [ 6342.046024] BUG ip_dst_cache (Tainted: G B ): Poison overwritten [ 6342.046024] ----------------------------------------------------------------------------- [ 6342.046024] INFO: 0xffff8800541b9dc0-0xffff8800541b9dc0. First byte 0x6a instead of 0x6b [ 6342.046024] INFO: Allocated in dst_alloc+0x46/0x180 age=12273 cpu=0 pid=8801 [ 6342.046024] __slab_alloc+0x4f8/0x58c [ 6342.046024] kmem_cache_alloc+0x94/0x290 [ 6342.046024] dst_alloc+0x46/0x180 [ 6342.046024] rt_dst_alloc+0x47/0x50 [ 6342.046024] __ip_route_output_key+0x882/0xa80 [ 6342.046024] ip_route_output_flow+0x22/0x60 [ 6342.046024] igmpv3_newpack+0xe2/0x210 [ 6342.046024] add_grhead.isra.17+0x37/0xa0 [ 6342.046024] add_grec+0x3b2/0x470 [ 6342.046024] igmp_ifc_timer_expire+0x28e/0x400 [ 6342.046024] call_timer_fn+0x146/0x320 [ 6342.046024] run_timer_softirq+0x2d4/0x360 [ 6342.046024] __do_softirq+0x217/0x4a0 [ 6342.046024] irq_exit+0x45/0xb0 [ 6342.046024] smp_apic_timer_interrupt+0x3f/0x50 [ 6342.046024] apic_timer_interrupt+0x72/0x80 [ 6342.046024] INFO: Freed in dst_destroy+0x8a/0xe0 age=12273 cpu=0 pid=8801 [ 6342.046024] __slab_free+0x32/0x380 [ 6342.046024] kmem_cache_free+0x186/0x2c0 [ 6342.046024] dst_destroy+0x8a/0xe0 [ 6342.046024] dst_release+0x53/0x70 [ 6342.046024] ip_tunnel_xmit+0x50e/0xfb0 [ 6342.046024] ipip_tunnel_xmit+0x41/0x60 [ 6342.046024] dev_hard_start_xmit+0x3ed/0x950 [ 6342.046024] __dev_queue_xmit+0x621/0x890 [ 6342.046024] dev_queue_xmit+0xb/0x10 [ 6342.046024] neigh_direct_output+0xc/0x10 [ 6342.046024] ip_finish_output2+0x494/0x5d0 [ 6342.046024] ip_finish_output+0x238/0x2d0 [ 6342.046024] ip_output+0x9f/0x110 [ 6342.046024] ip_local_out+0x6e/0xa0 [ 6342.046024] igmpv3_sendpack+0x43/0x50 [ 6342.046024] igmp_ifc_timer_expire+0x395/0x400 [ 6342.046024] INFO: Slab 0xffffea0001506e00 objects=14 used=14 fp=0x (null) flags=0x100000000004080 [ 6342.046024] INFO: Object 0xffff8800541b9d40 @offset=7488 fp=0xffff8800541b8240 [ 6342.046024] Bytes b4 ffff8800541b9d30: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 6342.046024] Object ffff8800541b9d40: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6342.046024] Object ffff8800541b9d50: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6342.046024] Object ffff8800541b9d60: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6342.046024] Object ffff8800541b9d70: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6342.046024] Object ffff8800541b9d80: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6342.046024] Object ffff8800541b9d90: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6342.046024] Object ffff8800541b9da0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6342.046024] Object ffff8800541b9db0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6342.046024] Object ffff8800541b9dc0: 6a 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b jkkkkkkkkkkkkkkk [ 6342.046024] Object ffff8800541b9dd0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6342.046024] Object ffff8800541b9de0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6342.046024] Object ffff8800541b9df0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 kkkkkkkkkkkkkkk. [ 6342.046024] Redzone ffff8800541b9e00: bb bb bb bb bb bb bb bb ........ [ 6342.046024] Padding ffff8800541b9f40: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 6342.046024] Padding ffff8800541b9f50: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 6342.046024] Padding ffff8800541b9f60: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 6342.046024] Padding ffff8800541b9f70: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 6342.046024] CPU: 0 PID: 2715 Comm: dhcpcd Tainted: G B 3.13.0+ #1 [ 6342.046024] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 6342.046024] ffff8800541b9d40 ffff8800b66f78a8 ffffffff82366c34 ffff8800baacd8c0 [ 6342.046024] ffff8800b66f78d8 ffffffff81262e41 ffff8800541b9dc1 ffff8800baacd8c0 [ 6342.046024] 000000000000006b ffff8800541b9d40 ffff8800b66f7920 ffffffff81263284 [ 6342.046024] Call Trace: [ 6342.046024] [] dump_stack+0x4d/0x66 [ 6342.046024] [] print_trailer+0x131/0x140 [ 6342.046024] [] check_bytes_and_report+0xc4/0x120 [ 6342.046024] [] check_object+0x11e/0x240 [ 6342.046024] [] ? dst_alloc+0x46/0x180 [ 6342.046024] [] alloc_debug_processing+0x62/0x104 [ 6342.046024] [] __slab_alloc+0x4f8/0x58c [ 6342.046024] [] ? __alloc_skb+0x88/0x250 [ 6342.046024] [] ? save_stack_trace+0x26/0x50 [ 6342.046024] [] ? dst_alloc+0x46/0x180 [ 6342.046024] [] ? trace_hardirqs_on_caller+0x16/0x220 [ 6342.046024] [] ? trace_hardirqs_on+0xd/0x10 [ 6342.046024] [] kmem_cache_alloc+0x94/0x290 [ 6342.046024] [] ? dst_alloc+0x46/0x180 [ 6342.046024] [] dst_alloc+0x46/0x180 [ 6342.046024] [] rt_dst_alloc+0x47/0x50 [ 6342.046024] [] __ip_route_output_key+0x882/0xa80 [ 6342.046024] [] ? ip_route_input_noref+0x1060/0x1060 [ 6342.046024] [] ? __alloc_skb+0x88/0x250 [ 6342.046024] [] ip_route_output_flow+0x22/0x60 [ 6342.046024] [] vti_tunnel_xmit+0x9f/0x450 [ 6342.046024] [] dev_hard_start_xmit+0x3ed/0x950 [ 6342.046024] [] ? dev_hard_start_xmit+0x950/0x950 [ 6342.046024] [] __dev_queue_xmit+0x621/0x890 [ 6342.046024] [] ? dev_hard_start_xmit+0x950/0x950 [ 6342.046024] [] dev_queue_xmit+0xb/0x10 [ 6342.046024] [] packet_sendmsg+0x559/0x5e0 [ 6342.046024] [] sock_sendmsg+0x97/0xd0 [ 6342.046024] [] ? might_fault+0x55/0xb0 [ 6342.046024] [] ? might_fault+0x9e/0xb0 [ 6342.046024] [] ? might_fault+0x55/0xb0 [ 6342.046024] [] SYSC_sendto+0x11c/0x160 [ 6342.046024] [] SyS_sendto+0x9/0x10 [ 6342.046024] [] system_call_fastpath+0x16/0x1b [ 6342.046024] FIX ip_dst_cache: Restoring 0xffff8800541b9dc0-0xffff8800541b9dc0=0x6b [ 6342.046024] FIX ip_dst_cache: Marking all objects used [ 6344.988076] ============================================================================= [ 6344.989020] BUG ip_dst_cache (Tainted: G B ): Poison overwritten [ 6344.989020] ----------------------------------------------------------------------------- [ 6344.989020] INFO: 0xffff8800a3bc8080-0xffff8800a3bc8080. First byte 0x6a instead of 0x6b [ 6344.989020] INFO: Allocated in dst_alloc+0x46/0x180 age=705 cpu=0 pid=6108 [ 6344.989020] __slab_alloc+0x4f8/0x58c [ 6344.989020] kmem_cache_alloc+0x94/0x290 [ 6344.989020] dst_alloc+0x46/0x180 [ 6344.989020] rt_dst_alloc+0x47/0x50 [ 6344.989020] __ip_route_output_key+0x882/0xa80 [ 6344.989020] ip_route_output_flow+0x22/0x60 [ 6344.989020] igmpv3_newpack+0xe2/0x210 [ 6344.989020] add_grhead.isra.17+0x37/0xa0 [ 6344.989020] add_grec+0x3b2/0x470 [ 6344.989020] igmp_ifc_timer_expire+0x11a/0x400 [ 6344.989020] call_timer_fn+0x146/0x320 [ 6344.989020] run_timer_softirq+0x2d4/0x360 [ 6344.989020] __do_softirq+0x217/0x4a0 [ 6344.989020] irq_exit+0x45/0xb0 [ 6344.989020] smp_apic_timer_interrupt+0x3f/0x50 [ 6344.989020] apic_timer_interrupt+0x72/0x80 [ 6344.989020] INFO: Freed in dst_destroy+0x8a/0xe0 age=705 cpu=0 pid=6108 [ 6344.989020] __slab_free+0x32/0x380 [ 6344.989020] kmem_cache_free+0x186/0x2c0 [ 6344.989020] dst_destroy+0x8a/0xe0 [ 6344.989020] dst_release+0x53/0x70 [ 6344.989020] ip_tunnel_xmit+0x50e/0xfb0 [ 6344.989020] ipip_tunnel_xmit+0x41/0x60 [ 6344.989020] dev_hard_start_xmit+0x3ed/0x950 [ 6344.989020] __dev_queue_xmit+0x621/0x890 [ 6344.989020] dev_queue_xmit+0xb/0x10 [ 6344.989020] neigh_direct_output+0xc/0x10 [ 6344.989020] ip_finish_output2+0x494/0x5d0 [ 6344.989020] ip_finish_output+0x238/0x2d0 [ 6344.989020] ip_output+0x9f/0x110 [ 6344.989020] ip_local_out+0x6e/0xa0 [ 6344.989020] igmpv3_sendpack+0x43/0x50 [ 6344.989020] igmp_ifc_timer_expire+0x395/0x400 [ 6344.989020] INFO: Slab 0xffffea00028ef200 objects=14 used=14 fp=0x (null) flags=0x100000000004080 [ 6344.989020] INFO: Object 0xffff8800a3bc8000 @offset=0 fp=0xffff8800a3bc8240 [ 6344.989020] Object ffff8800a3bc8000: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6344.989020] Object ffff8800a3bc8010: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6344.989020] Object ffff8800a3bc8020: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6344.989020] Object ffff8800a3bc8030: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6344.989020] Object ffff8800a3bc8040: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6344.989020] Object ffff8800a3bc8050: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6344.989020] Object ffff8800a3bc8060: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6344.989020] Object ffff8800a3bc8070: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6344.989020] Object ffff8800a3bc8080: 6a 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b jkkkkkkkkkkkkkkk [ 6344.989020] Object ffff8800a3bc8090: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6344.989020] Object ffff8800a3bc80a0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6344.989020] Object ffff8800a3bc80b0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 kkkkkkkkkkkkkkk. [ 6344.989020] Redzone ffff8800a3bc80c0: bb bb bb bb bb bb bb bb ........ [ 6344.989020] Padding ffff8800a3bc8200: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 6344.989020] Padding ffff8800a3bc8210: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 6344.989020] Padding ffff8800a3bc8220: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 6344.989020] Padding ffff8800a3bc8230: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 6344.989020] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 3.13.0+ #1 [ 6344.989020] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 6344.989020] ffff8800a3bc8000 ffff8800bf6039b8 ffffffff82366c34 ffff8800baacd8c0 [ 6344.989020] ffff8800bf6039e8 ffffffff81262e41 ffff8800a3bc8081 ffff8800baacd8c0 [ 6344.989020] 000000000000006b ffff8800a3bc8000 ffff8800bf603a30 ffffffff81263284 [ 6344.989020] Call Trace: [ 6344.989020] [] dump_stack+0x4d/0x66 [ 6344.989020] [] print_trailer+0x131/0x140 [ 6344.989020] [] check_bytes_and_report+0xc4/0x120 [ 6344.989020] [] check_object+0x11e/0x240 [ 6344.989020] [] ? dst_alloc+0x46/0x180 [ 6344.989020] [] alloc_debug_processing+0x62/0x104 [ 6344.989020] [] __slab_alloc+0x4f8/0x58c [ 6344.989020] [] ? trace_hardirqs_on_caller+0x16/0x220 [ 6344.989020] [] ? trace_hardirqs_on+0xd/0x10 [ 6344.989020] [] ? dst_alloc+0x46/0x180 [ 6344.989020] [] ? trace_hardirqs_on+0xd/0x10 [ 6344.989020] [] ? __alloc_skb+0x88/0x250 [ 6344.989020] [] kmem_cache_alloc+0x94/0x290 [ 6344.989020] [] ? devinet_ioctl+0x740/0x740 [ 6344.989020] [] ? dst_alloc+0x46/0x180 [ 6344.989020] [] dst_alloc+0x46/0x180 [ 6344.989020] [] rt_dst_alloc+0x47/0x50 [ 6344.989020] [] __ip_route_output_key+0x882/0xa80 [ 6344.989020] [] ? ip_route_input_noref+0x1060/0x1060 [ 6344.989020] [] ip_route_output_flow+0x22/0x60 [ 6344.989020] [] igmpv3_newpack+0xe2/0x210 [ 6344.989020] [] add_grhead.isra.17+0x37/0xa0 [ 6344.989020] [] add_grec+0x3b2/0x470 [ 6344.989020] [] ? igmp_ifc_timer_expire+0x90/0x400 [ 6344.989020] [] igmp_ifc_timer_expire+0x11a/0x400 [ 6344.989020] [] ? igmp_mc_get_next.isra.15+0x250/0x250 [ 6344.989020] [] ? igmp_mc_get_next.isra.15+0x250/0x250 [ 6344.989020] [] call_timer_fn+0x146/0x320 [ 6344.989020] [] ? ftrace_raw_event_timer_start+0x180/0x180 [ 6344.989020] [] ? igmp_mc_get_next.isra.15+0x250/0x250 [ 6344.989020] [] run_timer_softirq+0x2d4/0x360 [ 6344.989020] [] __do_softirq+0x217/0x4a0 [ 6344.989020] [] irq_exit+0x45/0xb0 [ 6344.989020] [] smp_apic_timer_interrupt+0x3f/0x50 [ 6344.989020] [] apic_timer_interrupt+0x72/0x80 [ 6344.989020] [] ? default_idle+0xed/0x270 [ 6344.989020] [] ? trace_hardirqs_on+0xd/0x10 [ 6344.989020] [] ? native_safe_halt+0x6/0x10 [ 6344.989020] [] default_idle+0xf2/0x270 [ 6344.989020] [] arch_cpu_idle+0x13/0x30 [ 6344.989020] [] cpu_startup_entry+0x2e7/0x400 [ 6344.989020] [] rest_init+0x138/0x140 [ 6344.989020] [] ? csum_partial_copy_generic+0x170/0x170 [ 6344.989020] [] start_kernel+0x40b/0x418 [ 6344.989020] [] ? repair_env_string+0x5e/0x5e [ 6344.989020] [] ? early_idt_handlers+0x117/0x120 [ 6344.989020] [] x86_64_start_reservations+0x2a/0x2c [ 6344.989020] [] x86_64_start_kernel+0x146/0x155 [ 6344.989020] FIX ip_dst_cache: Restoring 0xffff8800a3bc8080-0xffff8800a3bc8080=0x6b [ 6344.989020] FIX ip_dst_cache: Marking all objects used [ 6346.340084] ============================================================================= [ 6346.341017] BUG ip_dst_cache (Tainted: G B ): Poison overwritten [ 6346.341017] ----------------------------------------------------------------------------- [ 6346.341017] INFO: 0xffff8800ab252080-0xffff8800ab252080. First byte 0x6a instead of 0x6b [ 6346.341017] INFO: Allocated in dst_alloc+0x46/0x180 age=1352 cpu=0 pid=0 [ 6346.341017] __slab_alloc+0x4f8/0x58c [ 6346.341017] kmem_cache_alloc+0x94/0x290 [ 6346.341017] dst_alloc+0x46/0x180 [ 6346.341017] rt_dst_alloc+0x47/0x50 [ 6346.341017] __ip_route_output_key+0x882/0xa80 [ 6346.341017] ip_route_output_flow+0x22/0x60 [ 6346.341017] igmpv3_newpack+0xe2/0x210 [ 6346.341017] add_grhead.isra.17+0x37/0xa0 [ 6346.341017] add_grec+0x3b2/0x470 [ 6346.341017] igmp_ifc_timer_expire+0x11a/0x400 [ 6346.341017] call_timer_fn+0x146/0x320 [ 6346.341017] run_timer_softirq+0x2d4/0x360 [ 6346.341017] __do_softirq+0x217/0x4a0 [ 6346.341017] irq_exit+0x45/0xb0 [ 6346.341017] smp_apic_timer_interrupt+0x3f/0x50 [ 6346.341017] apic_timer_interrupt+0x72/0x80 [ 6346.341017] INFO: Freed in dst_destroy+0x8a/0xe0 age=1184 cpu=0 pid=0 [ 6346.341017] __slab_free+0x32/0x380 [ 6346.341017] kmem_cache_free+0x186/0x2c0 [ 6346.341017] dst_destroy+0x8a/0xe0 [ 6346.341017] dst_release+0x53/0x70 [ 6346.341017] ip_tunnel_xmit+0x50e/0xfb0 [ 6346.341017] ipip_tunnel_xmit+0x41/0x60 [ 6346.341017] dev_hard_start_xmit+0x3ed/0x950 [ 6346.341017] __dev_queue_xmit+0x621/0x890 [ 6346.341017] dev_queue_xmit+0xb/0x10 [ 6346.341017] neigh_direct_output+0xc/0x10 [ 6346.341017] ip_finish_output2+0x494/0x5d0 [ 6346.341017] ip_finish_output+0x238/0x2d0 [ 6346.341017] ip_output+0x9f/0x110 [ 6346.341017] ip_local_out+0x6e/0xa0 [ 6346.341017] igmpv3_sendpack+0x43/0x50 [ 6346.341017] igmp_ifc_timer_expire+0x395/0x400 [ 6346.341017] INFO: Slab 0xffffea0002ac9480 objects=14 used=14 fp=0x (null) flags=0x100000000004080 [ 6346.341017] INFO: Object 0xffff8800ab252000 @offset=0 fp=0xffff8800ab253d40 [ 6346.341017] Object ffff8800ab252000: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6346.341017] Object ffff8800ab252010: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6346.341017] Object ffff8800ab252020: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6346.341017] Object ffff8800ab252030: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6346.341017] Object ffff8800ab252040: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6346.341017] Object ffff8800ab252050: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6346.341017] Object ffff8800ab252060: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6346.341017] Object ffff8800ab252070: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6346.341017] Object ffff8800ab252080: 6a 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b jkkkkkkkkkkkkkkk [ 6346.341017] Object ffff8800ab252090: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6346.341017] Object ffff8800ab2520a0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 6346.341017] Object ffff8800ab2520b0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 kkkkkkkkkkkkkkk. [ 6346.341017] Redzone ffff8800ab2520c0: bb bb bb bb bb bb bb bb ........ [ 6346.341017] Padding ffff8800ab252200: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 6346.341017] Padding ffff8800ab252210: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 6346.341017] Padding ffff8800ab252220: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 6346.341017] Padding ffff8800ab252230: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 6346.341017] CPU: 0 PID: 2715 Comm: dhcpcd Tainted: G B 3.13.0+ #1 [ 6346.341017] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 6346.341017] ffff8800ab252000 ffff8800b66f77e8 ffffffff82366c34 ffff8800baacd8c0 [ 6346.341017] ffff8800b66f7818 ffffffff81262e41 ffff8800ab252081 ffff8800baacd8c0 [ 6346.341017] 000000000000006b ffff8800ab252000 ffff8800b66f7860 ffffffff81263284 [ 6346.341017] Call Trace: [ 6346.341017] [] dump_stack+0x4d/0x66 [ 6346.341017] [] print_trailer+0x131/0x140 [ 6346.341017] [] check_bytes_and_report+0xc4/0x120 [ 6346.341017] [] check_object+0x11e/0x240 [ 6346.341017] [] ? dst_alloc+0x46/0x180 [ 6346.341017] [] alloc_debug_processing+0x62/0x104 [ 6346.341017] [] __slab_alloc+0x4f8/0x58c [ 6346.341017] [] ? deactivate_slab+0x279/0x550 [ 6346.341017] [] ? dst_alloc+0x46/0x180 [ 6346.341017] [] ? check_leaf.isra.6+0x84/0x2d0 [ 6346.341017] [] kmem_cache_alloc+0x94/0x290 [ 6346.341017] [] ? dst_alloc+0x46/0x180 [ 6346.341017] [] ? fib_table_lookup+0x54d/0x570 [ 6346.341017] [] dst_alloc+0x46/0x180 [ 6346.341017] [] rt_dst_alloc+0x47/0x50 [ 6346.341017] [] __ip_route_output_key+0x882/0xa80 [ 6346.341017] [] ? ip_route_input_noref+0x1060/0x1060 [ 6346.341017] [] ip_route_output_flow+0x22/0x60 [ 6346.341017] [] ip_tunnel_xmit+0x4b8/0xfb0 [ 6346.341017] [] ? ip_tunnel_xmit+0x302/0xfb0 [ 6346.341017] [] __gre_xmit+0x73/0x90 [ 6346.341017] [] ipgre_xmit+0x172/0x1a0 [ 6346.341017] [] dev_hard_start_xmit+0x3ed/0x950 [ 6346.341017] [] ? dev_hard_start_xmit+0x950/0x950 [ 6346.341017] [] ? gre_tap_xmit+0xd0/0xd0 [ 6346.341017] [] __dev_queue_xmit+0x621/0x890 [ 6346.341017] [] ? dev_hard_start_xmit+0x950/0x950 [ 6346.341017] [] ? gre_tap_xmit+0xd0/0xd0 [ 6346.341017] [] dev_queue_xmit+0xb/0x10 [ 6346.341017] [] packet_sendmsg+0x559/0x5e0 [ 6346.341017] [] sock_sendmsg+0x97/0xd0 [ 6346.341017] [] ? might_fault+0x55/0xb0 [ 6346.341017] [] ? might_fault+0x9e/0xb0 [ 6346.341017] [] ? might_fault+0x55/0xb0 [ 6346.341017] [] SYSC_sendto+0x11c/0x160 [ 6346.341017] [] SyS_sendto+0x9/0x10 [ 6346.341017] [] system_call_fastpath+0x16/0x1b [ 6346.341017] FIX ip_dst_cache: Restoring 0xffff8800ab252080-0xffff8800ab252080=0x6b [ 6346.341017] FIX ip_dst_cache: Marking all objects used [19618.459429] sock: sock_set_timeout: `trinity-main' (pid 30849) tries to set negative timeout -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/