* [4.14-rc7] task struct corruption after fork
@ 2017-10-30 14:11 Dave Jones
2017-10-30 18:59 ` Linus Torvalds
0 siblings, 1 reply; 3+ messages in thread
From: Dave Jones @ 2017-10-30 14:11 UTC (permalink / raw)
To: Linus Torvalds; +Cc: Linux Kernel
Something scary for halloween. Only saw this once so far.
[10737.049397] =============================================================================
[10737.052151] BUG task_struct (Not tainted): Padding overwritten. 0xffff880458befef8-0xffff880458beffcf
[10737.055172] -----------------------------------------------------------------------------
[10737.061267] Disabling lock debugging due to kernel taint
[10737.064384] INFO: Slab 0xffffea001162fa00 objects=4 used=4 fp=0x (null) flags=0x2ffc00000008100
[10737.067771] CPU: 2 PID: 26357 Comm: trinity-c13 Tainted: G B 4.14.0-rc7-think+ #1
[10737.074807] Call Trace:
[10737.078329] dump_stack+0xbc/0x145
[10737.081919] ? dma_virt_map_sg+0xfb/0xfb
[10737.085566] ? lock_release+0x890/0x890
[10737.089264] slab_err+0xad/0xd0
[10737.092997] ? memchr_inv+0x160/0x180
[10737.096769] slab_pad_check.part.43+0xfa/0x160
[10737.100681] ? copy_process.part.42+0x101c/0x29e0
[10737.104600] check_slab+0xa6/0xd0
[10737.108563] alloc_debug_processing+0x85/0x1b0
[10737.112612] ___slab_alloc+0x525/0x5d0
[10737.116672] ? __lock_is_held+0x2e/0xd0
[10737.120810] ? copy_process.part.42+0x101c/0x29e0
[10737.125019] ? ___might_sleep.part.69+0x118/0x320
[10737.129267] ? copy_process.part.42+0x101c/0x29e0
[10737.133556] ? __slab_alloc+0x3e/0x80
[10737.137803] __slab_alloc+0x3e/0x80
[10737.142100] kmem_cache_alloc_node+0xbd/0x360
[10737.146464] ? copy_process.part.42+0x101c/0x29e0
[10737.150932] copy_process.part.42+0x101c/0x29e0
[10737.155473] ? jbd2_buffer_abort_trigger+0x50/0x50
[10737.160040] ? __might_sleep+0x58/0xe0
[10737.164670] ? __cleanup_sighand+0x30/0x30
[10737.169308] ? mark_lock+0x16f/0x9b0
[10737.174016] ? balance_dirty_pages_ratelimited+0x744/0x10d0
[10737.178868] ? print_irqtrace_events+0x110/0x110
[10737.183779] ? mark_lock+0x16f/0x9b0
[10737.188731] ? print_irqtrace_events+0x110/0x110
[10737.193696] ? block_write_end+0x150/0x150
[10737.198745] ? match_held_lock+0xa6/0x410
[10737.203887] ? save_trace+0x1c0/0x1c0
[10737.209040] ? native_sched_clock+0xf9/0x1a0
[10737.214255] ? cyc2ns_read_end+0x10/0x10
[10737.219500] ? ext4_da_write_end+0x301/0x690
[10737.224771] ? sched_clock_cpu+0x14/0xf0
[10737.230077] ? __lock_acquire+0x6b3/0x2050
[10737.235438] ? sched_clock_cpu+0x14/0xf0
[10737.240833] ? debug_check_no_locks_freed+0x1a0/0x1a0
[10737.246272] ? debug_check_no_locks_freed+0x1a0/0x1a0
[10737.251754] ? lock_downgrade+0x310/0x310
[10737.257255] ? __lock_page_killable+0x100/0x100
[10737.262801] ? __mnt_drop_write_file+0x26/0x40
[10737.268432] ? current_time+0x70/0x70
[10737.274106] ? fsnotify+0xe99/0x1020
[10737.279744] ? up_write+0x97/0xe0
[10737.285470] ? match_held_lock+0x93/0x410
[10737.291287] ? save_trace+0x1c0/0x1c0
[10737.297097] ? __fsnotify_update_child_dentry_flags.part.2+0x160/0x160
[10737.303127] ? native_sched_clock+0xf9/0x1a0
[10737.309193] ? cyc2ns_read_end+0x10/0x10
[10737.315280] ? ext4_file_mmap+0xb0/0xb0
[10737.321446] ? match_held_lock+0x93/0x410
[10737.327627] ? sched_clock_cpu+0x14/0xf0
[10737.333831] ? save_trace+0x1c0/0x1c0
[10737.340108] ? native_sched_clock+0xf9/0x1a0
[10737.346408] ? cyc2ns_read_end+0x10/0x10
[10737.352788] _do_fork+0x1c4/0xa30
[10737.359190] ? fork_idle+0x120/0x120
[10737.365607] ? lock_downgrade+0x310/0x310
[10737.371992] ? native_sched_clock+0xf9/0x1a0
[10737.378485] ? cyc2ns_read_end+0x10/0x10
[10737.385060] ? syscall_trace_enter+0x2a6/0x670
[10737.391669] ? exit_to_usermode_loop+0x180/0x180
[10737.398368] ? __lock_is_held+0x2e/0xd0
[10737.405116] ? rcu_read_lock_sched_held+0x90/0xa0
[10737.411917] ? __context_tracking_exit.part.4+0x223/0x290
[10737.418798] ? context_tracking_recursion_enter+0x50/0x50
[10737.425758] ? __task_pid_nr_ns+0x1c4/0x300
[10737.432746] ? free_pidmap.isra.0+0x40/0x40
[10737.439743] ? SyS_read+0x140/0x140
[10737.446788] ? mark_held_locks+0x1b/0xa0
[10737.453883] ? do_syscall_64+0xae/0x400
[10737.461040] ? ptregs_sys_rt_sigreturn+0x10/0x10
[10737.468260] do_syscall_64+0x182/0x400
[10737.475508] ? syscall_return_slowpath+0x270/0x270
[10737.482801] ? rcu_read_lock_sched_held+0x90/0xa0
[10737.490156] ? __context_tracking_exit.part.4+0x223/0x290
[10737.497608] ? mark_held_locks+0x1b/0xa0
[10737.505087] ? return_from_SYSCALL_64+0x2d/0x7a
[10737.512662] ? trace_hardirqs_on_caller+0x17a/0x250
[10737.520339] ? trace_hardirqs_on_thunk+0x1a/0x1c
[10737.527991] entry_SYSCALL64_slow_path+0x25/0x25
[10737.535684] RIP: 0033:0x7f8917f3837b
[10737.543411] RSP: 002b:00007ffdca212e00 EFLAGS: 00000246
[10737.551299] ORIG_RAX: 0000000000000038
[10737.559237] RAX: ffffffffffffffda RBX: 00007ffdca212e00 RCX: 00007f8917f3837b
[10737.567378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[10737.575550] RBP: 00007ffdca212e50 R08: 00007f891863a700 R09: 00007ffdca3ef080
[10737.583786] R10: 00007f891863a9d0 R11: 0000000000000246 R12: 0000000000000000
[10737.592129] R13: 0000000000000020 R14: 0000000000000000 R15: 0000000000000000
[10737.600521] Padding ffff880458bef3d0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.609157] Padding ffff880458bef3e0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.617611] Padding ffff880458bef3f0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.625996] Padding ffff880458bef400: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.634210] Padding ffff880458bef410: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.642347] Padding ffff880458bef420: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.650478] Padding ffff880458bef430: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.658491] Padding ffff880458bef440: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.666253] Padding ffff880458bef450: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.673857] Padding ffff880458bef460: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.681274] Padding ffff880458bef470: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.688639] Padding ffff880458bef480: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.695817] Padding ffff880458bef490: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.702876] Padding ffff880458bef4a0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.709815] Padding ffff880458bef4b0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.716632] Padding ffff880458bef4c0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.723412] Padding ffff880458bef4d0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.730125] Padding ffff880458bef4e0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.736800] Padding ffff880458bef4f0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.743468] Padding ffff880458bef500: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.750060] Padding ffff880458bef510: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.756622] Padding ffff880458bef520: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.763062] Padding ffff880458bef530: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.769451] Padding ffff880458bef540: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.775767] Padding ffff880458bef550: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.782003] Padding ffff880458bef560: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.788254] Padding ffff880458bef570: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.794389] Padding ffff880458bef580: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.800523] Padding ffff880458bef590: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.806573] Padding ffff880458bef5a0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.812537] Padding ffff880458bef5b0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.818485] Padding ffff880458bef5c0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.824358] Padding ffff880458bef5d0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.830104] Padding ffff880458bef5e0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.835827] Padding ffff880458bef5f0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.841458] Padding ffff880458bef600: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.847007] Padding ffff880458bef610: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.852553] Padding ffff880458bef620: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.858000] Padding ffff880458bef630: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.863391] Padding ffff880458bef640: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.868671] Padding ffff880458bef650: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.873887] Padding ffff880458bef660: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.879020] Padding ffff880458bef670: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.884165] Padding ffff880458bef680: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.889218] Padding ffff880458bef690: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.894205] Padding ffff880458bef6a0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.899142] Padding ffff880458bef6b0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.904016] Padding ffff880458bef6c0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.908859] Padding ffff880458bef6d0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.913589] Padding ffff880458bef6e0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.918329] Padding ffff880458bef6f0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.923007] Padding ffff880458bef700: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.927616] Padding ffff880458bef710: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.932230] Padding ffff880458bef720: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.936768] Padding ffff880458bef730: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.941245] Padding ffff880458bef740: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.945623] Padding ffff880458bef750: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.949959] Padding ffff880458bef760: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.954248] Padding ffff880458bef770: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.958501] Padding ffff880458bef780: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.962697] Padding ffff880458bef790: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.966862] Padding ffff880458bef7a0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.970915] Padding ffff880458bef7b0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.974850] Padding ffff880458bef7c0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.978716] Padding ffff880458bef7d0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.982551] Padding ffff880458bef7e0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.986339] Padding ffff880458bef7f0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.990056] Padding ffff880458bef800: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.993744] Padding ffff880458bef810: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10737.997353] Padding ffff880458bef820: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.000962] Padding ffff880458bef830: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.004499] Padding ffff880458bef840: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.007986] Padding ffff880458bef850: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.011405] Padding ffff880458bef860: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.014768] Padding ffff880458bef870: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.018094] Padding ffff880458bef880: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.021363] Padding ffff880458bef890: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.024561] Padding ffff880458bef8a0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.027694] Padding ffff880458bef8b0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.030730] Padding ffff880458bef8c0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.033700] Padding ffff880458bef8d0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.036591] Padding ffff880458bef8e0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.039400] Padding ffff880458bef8f0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.042138] Padding ffff880458bef900: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.044875] Padding ffff880458bef910: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.047539] Padding ffff880458bef920: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.050125] Padding ffff880458bef930: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.052662] Padding ffff880458bef940: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.055122] Padding ffff880458bef950: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.057500] Padding ffff880458bef960: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.059829] Padding ffff880458bef970: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.062030] Padding ffff880458bef980: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.064189] Padding ffff880458bef990: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.066259] Padding ffff880458bef9a0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.068252] Padding ffff880458bef9b0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.070197] Padding ffff880458bef9c0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.072113] Padding ffff880458bef9d0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.073936] Padding ffff880458bef9e0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.075706] Padding ffff880458bef9f0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.077368] Padding ffff880458befa00: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.078905] Padding ffff880458befa10: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.080377] Padding ffff880458befa20: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.081741] Padding ffff880458befa30: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.083026] Padding ffff880458befa40: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.084297] Padding ffff880458befa50: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.085370] Padding ffff880458befa60: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.086450] Padding ffff880458befa70: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.087547] Padding ffff880458befa80: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.088613] Padding ffff880458befa90: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.089682] Padding ffff880458befaa0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.090749] Padding ffff880458befab0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.091834] Padding ffff880458befac0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.092903] Padding ffff880458befad0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.093967] Padding ffff880458befae0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.095030] Padding ffff880458befaf0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.096120] Padding ffff880458befb00: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.097236] Padding ffff880458befb10: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.098300] Padding ffff880458befb20: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.099383] Padding ffff880458befb30: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.100448] Padding ffff880458befb40: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.101514] Padding ffff880458befb50: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.102582] Padding ffff880458befb60: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.103675] Padding ffff880458befb70: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.104742] Padding ffff880458befb80: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.105804] Padding ffff880458befb90: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.106859] Padding ffff880458befba0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.107938] Padding ffff880458befbb0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.108999] Padding ffff880458befbc0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.110062] Padding ffff880458befbd0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.111130] Padding ffff880458befbe0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.112223] Padding ffff880458befbf0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.113296] Padding ffff880458befc00: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.114356] Padding ffff880458befc10: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.115431] Padding ffff880458befc20: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.116484] Padding ffff880458befc30: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.117548] Padding ffff880458befc40: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.118617] Padding ffff880458befc50: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.119710] Padding ffff880458befc60: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.120773] Padding ffff880458befc70: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.121839] Padding ffff880458befc80: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.122902] Padding ffff880458befc90: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.123988] Padding ffff880458befca0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.125052] Padding ffff880458befcb0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.126121] Padding ffff880458befcc0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.127199] Padding ffff880458befcd0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.128280] Padding ffff880458befce0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.129352] Padding ffff880458befcf0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.130427] Padding ffff880458befd00: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.131518] Padding ffff880458befd10: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.132584] Padding ffff880458befd20: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.133649] Padding ffff880458befd30: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.134697] Padding ffff880458befd40: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.135766] Padding ffff880458befd50: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.136812] Padding ffff880458befd60: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.137857] Padding ffff880458befd70: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.138909] Padding ffff880458befd80: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.139977] Padding ffff880458befd90: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.141029] Padding ffff880458befda0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.142080] Padding ffff880458befdb0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.143139] Padding ffff880458befdc0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.144214] Padding ffff880458befdd0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.145271] Padding ffff880458befde0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.146320] Padding ffff880458befdf0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.147388] Padding ffff880458befe00: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.148437] Padding ffff880458befe10: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.149486] Padding ffff880458befe20: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.150535] Padding ffff880458befe30: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.151606] Padding ffff880458befe40: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.152655] Padding ffff880458befe50: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.153708] Padding ffff880458befe60: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.154753] Padding ffff880458befe70: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.155827] Padding ffff880458befe80: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.156880] Padding ffff880458befe90: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.157930] Padding ffff880458befea0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.158973] Padding ffff880458befeb0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.160046] Padding ffff880458befec0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.161085] Padding ffff880458befed0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.162127] Padding ffff880458befee0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.163174] Padding ffff880458befef0: 5a 5a 5a 5a 5a 5a 5a 5a 1e 2d 17 81 ff ff ff ff ZZZZZZZZ.-......
[10738.164297] Padding ffff880458beff00: ec da 26 84 ff ff ff ff 01 e0 17 8b 00 ed ff ff ..&.............
[10738.165476] Padding ffff880458beff10: e2 37 17 81 ff ff ff ff e0 db 26 84 ff ff ff ff .7........&.....
[10738.166692] Padding ffff880458beff20: 08 00 bf 58 04 88 ff ff 00 0d 59 84 ff ff ff ff ...X......Y.....
[10738.167985] Padding ffff880458beff30: 05 00 00 00 00 00 00 00 00 2d 17 81 ff ff ff ff .........-......
[10738.169300] Padding ffff880458beff40: 01 00 00 00 00 00 00 00 ed df 17 8b 00 f1 ff 1f ................
[10738.170651] Padding ffff880458beff50: f0 00 bf 58 04 88 ff ff f9 df 17 8b 00 ed ff ff ...X............
[10738.172076] Padding ffff880458beff60: 00 00 00 00 00 fc ff df b3 8a b5 41 00 00 00 00 ...........A....
[10738.173540] Padding ffff880458beff70: a8 49 a3 82 ff ff ff ff 40 35 17 81 ff ff ff ff .I......@5......
[10738.175095] Padding ffff880458beff80: 5a 5a 5a 5a 5a 5a 5a 5a 80 f0 50 84 ff ff ff ff ZZZZZZZZ..P.....
[10738.176722] Padding ffff880458beff90: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.178385] Padding ffff880458beffa0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.180082] Padding ffff880458beffb0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
[10738.181758] Padding ffff880458beffc0: 5a 5a 5a 5a 5a 5a 5a 5a 80 0a 59 84 ff ff ff ff ZZZZZZZZ..Y.....
[10738.183501] FIX task_struct: Restoring 0xffff880458bef3d0-0xffff880458beffcf=0x5a
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [4.14-rc7] task struct corruption after fork
2017-10-30 14:11 [4.14-rc7] task struct corruption after fork Dave Jones
@ 2017-10-30 18:59 ` Linus Torvalds
2017-10-30 20:35 ` Dave Jones
0 siblings, 1 reply; 3+ messages in thread
From: Linus Torvalds @ 2017-10-30 18:59 UTC (permalink / raw)
To: Dave Jones, Andy Lutomirski, Ingo Molnar; +Cc: Linux Kernel Mailing List
On Mon, Oct 30, 2017 at 7:11 AM, Dave Jones <davej@codemonkey.org.uk> wrote:
> Something scary for halloween. Only saw this once so far.
Scary indeed.
I don't see any pattern. It's 18 quad-words with one unwritten entry
before the last one.
And most of them look like kernel pointers, but not all. The quad-words are:
ffffffff81172d1e
ffffffff8426daec
ffffed008b17e001
ffffffff811737e2
ffffffff8426dbe0
ffff880458bf0008
ffffffff84590d00
5
ffffffff81172d00
1
1ffff1008b17dfed
ffff880458bf00f0
ffffed008b17dff9
dffffc0000000000
41b58ab3
ffffffff82a349a8
ffffffff81173540
.. unwritten entry ..
ffffffff8450f080
and it's at the end of the page, but not *quite* at the end of the page.
It smells almost like a "struct pt_regs *". The unwritten entry would
be "cs", and sp/ss would be missing, but the flags value isn't a sane
flags value either. Maybe I miscounted. Something like this:
ffffffff81172d1e r15
ffffffff8426daec r14
ffffed008b17e001 r13
ffffffff811737e2 r12
ffffffff8426dbe0 rbp
ffff880458bf0008 rbx
ffffffff84590d00 r11
5 r10
ffffffff81172d00 r9
1 r8
1ffff1008b17dfed rax
ffff880458bf00f0 rcx
ffffed008b17dff9 rdx
dffffc0000000000 rsi
41b58ab3 rdi
ffffffff82a349a8 orig_eax
ffffffff81173540 rip
5a5a5a5a5a5a5a5a
ffffffff8450f080 flags
and that location would *almost* make sense in that it's the end of
the same page that contained a "struct task_struct".
Are you running with VMAP_STACK? Is there perhaps some stale code that
ends up doing the old "stack pointer is in the same allocation as task
struct"?
Adding Andy and Ingo to the cc in case they see something.
If you have the kernel symbols for that image, can you look up if any
of those addresses look like any static kernel symbol addresses? Those
things that have the pattern ffffffff8xxxxxxx might be symbol
addresses and give us a clue about where the values came from.
Linus
> [10737.049397] =============================================================================
> [10737.052151] BUG task_struct (Not tainted): Padding overwritten. 0xffff880458befef8-0xffff880458beffcf
> [10737.055172] -----------------------------------------------------------------------------
> [10737.061267] Disabling lock debugging due to kernel taint
> [10737.064384] INFO: Slab 0xffffea001162fa00 objects=4 used=4 fp=0x (null) flags=0x2ffc00000008100
> [10737.067771] CPU: 2 PID: 26357 Comm: trinity-c13 Tainted: G B 4.14.0-rc7-think+ #1
> [10737.074807] Call Trace:
> [10737.089264] slab_err+0xad/0xd0
> [10737.096769] slab_pad_check.part.43+0xfa/0x160
> [10737.104600] check_slab+0xa6/0xd0
> [10737.108563] alloc_debug_processing+0x85/0x1b0
> [10737.112612] ___slab_alloc+0x525/0x5d0
> [10737.137803] __slab_alloc+0x3e/0x80
> [10737.142100] kmem_cache_alloc_node+0xbd/0x360
> [10737.150932] copy_process.part.42+0x101c/0x29e0
> [10737.352788] _do_fork+0x1c4/0xa30
> [10737.468260] do_syscall_64+0x182/0x400
> [10737.527991] entry_SYSCALL64_slow_path+0x25/0x25
> [10737.600521] Padding ffff880458bef3d0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
> .... snip snip ...
> [10738.162127] Padding ffff880458befee0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
> [10738.163174] Padding ffff880458befef0: 5a 5a 5a 5a 5a 5a 5a 5a 1e 2d 17 81 ff ff ff ff ZZZZZZZZ.-......
> [10738.164297] Padding ffff880458beff00: ec da 26 84 ff ff ff ff 01 e0 17 8b 00 ed ff ff ..&.............
> [10738.165476] Padding ffff880458beff10: e2 37 17 81 ff ff ff ff e0 db 26 84 ff ff ff ff .7........&.....
> [10738.166692] Padding ffff880458beff20: 08 00 bf 58 04 88 ff ff 00 0d 59 84 ff ff ff ff ...X......Y.....
> [10738.167985] Padding ffff880458beff30: 05 00 00 00 00 00 00 00 00 2d 17 81 ff ff ff ff .........-......
> [10738.169300] Padding ffff880458beff40: 01 00 00 00 00 00 00 00 ed df 17 8b 00 f1 ff 1f ................
> [10738.170651] Padding ffff880458beff50: f0 00 bf 58 04 88 ff ff f9 df 17 8b 00 ed ff ff ...X............
> [10738.172076] Padding ffff880458beff60: 00 00 00 00 00 fc ff df b3 8a b5 41 00 00 00 00 ...........A....
> [10738.173540] Padding ffff880458beff70: a8 49 a3 82 ff ff ff ff 40 35 17 81 ff ff ff ff .I......@5......
> [10738.175095] Padding ffff880458beff80: 5a 5a 5a 5a 5a 5a 5a 5a 80 f0 50 84 ff ff ff ff ZZZZZZZZ..P.....
> [10738.176722] Padding ffff880458beff90: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
> [10738.178385] Padding ffff880458beffa0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
> [10738.180082] Padding ffff880458beffb0: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
> [10738.181758] Padding ffff880458beffc0: 5a 5a 5a 5a 5a 5a 5a 5a 80 0a 59 84 ff ff ff ff ZZZZZZZZ..Y.....
> [10738.183501] FIX task_struct: Restoring 0xffff880458bef3d0-0xffff880458beffcf=0x5a
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [4.14-rc7] task struct corruption after fork
2017-10-30 18:59 ` Linus Torvalds
@ 2017-10-30 20:35 ` Dave Jones
0 siblings, 0 replies; 3+ messages in thread
From: Dave Jones @ 2017-10-30 20:35 UTC (permalink / raw)
To: Linus Torvalds; +Cc: Andy Lutomirski, Ingo Molnar, Linux Kernel Mailing List
On Mon, Oct 30, 2017 at 11:59:30AM -0700, Linus Torvalds wrote:
> and that location would *almost* make sense in that it's the end of
> the same page that contained a "struct task_struct".
>
> Are you running with VMAP_STACK? Is there perhaps some stale code that
> ends up doing the old "stack pointer is in the same allocation as task
> struct"?
yeah, it's enabled.
> If you have the kernel symbols for that image, can you look up if any
> of those addresses look like any static kernel symbol addresses? Those
> things that have the pattern ffffffff8xxxxxxx might be symbol
> addresses and give us a clue about where the values came from.
it got clobbered by another build, but I managed to rebuild it from the
older config. Modulo modules that were loaded, things should be the same.
> ffffffff81172d1e r15
ffffffff81172d00 t usage_match
ffffffff81172d30 t HARDIRQ_verbose
> ffffffff8426daec r14
ffffffff841cee60 b lock_classes
ffffffff844eed00 B nr_lock_classes
> ffffed008b17e001 r13
> ffffffff811737e2 r12
ffffffff81173540 t __bfs
ffffffff81173970 t check_noncircular
> ffffffff8426dbe0 rbp
ffffffff841cee60 b lock_classes
ffffffff844eed00 B nr_lock_classes
> ffff880458bf0008 rbx
> ffffffff84590d00 r11
ffffffff841cee60 b lock_classes
ffffffff844eed00 B nr_lock_classes
> 5 r10
> ffffffff81172d00 r9
ffffffff81172d00 t usage_match
> 1 r8
> 1ffff1008b17dfed rax
> ffff880458bf00f0 rcx
> ffffed008b17dff9 rdx
> dffffc0000000000 rsi
> 41b58ab3 rdi
> ffffffff82a349a8 orig_eax
ffffffff828a7f40 R inat_primary_table
ffffffff82a42840 r POLY
> ffffffff81173540 rip
ffffffff81173540 t __bfs
> 5a5a5a5a5a5a5a5a
> ffffffff8450f080 flags
ffffffff844eed40 b list_entries
ffffffff846eed60 B nr_list_entries
So a bunch of lockdep stuff, and not much else afaics.
Dave
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2017-10-30 20:35 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2017-10-30 14:11 [4.14-rc7] task struct corruption after fork Dave Jones
2017-10-30 18:59 ` Linus Torvalds
2017-10-30 20:35 ` Dave Jones
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).