From: Jochen Hein <jochen@jochen.org>
To: linux-kernel <linux-kernel@vger.kernel.org>
Subject: [2.5.66] slab corruption
Date: Wed, 26 Mar 2003 20:11:32 +0100 [thread overview]
Message-ID: <871y0uhriz.fsf@echidna.jochen.org> (raw)
This is when shutting down. I have the two patches from Jack Simmons
for the illegal context and the broken cursor applied and nothing
else.
uhci-hcd 00:07.2: remove, state 3
usb usb1: USB disconnect, address 1
Slab corruption: start=c5e0b21c, expend=c5e0b2db, problemat=c5e0b224
Last user: [<c0166732>](load_elf_binary+0x86e/0xb0c)
Data: ********00 **************************************************************************************************************************************************************************************A5
Next: 71 F0 2C .32 67 16 C0 A5 C2 0F 17 E0 5F 3B C0 48 E2 E0 C5 34 E9 D2 C3 00 00 00 00 00 00 00 00
slab error in check_poison_obj(): cache `size-192': object was modified after freeing
Call Trace:
[<c01308dd>] __slab_error+0x21/0x28
[<c0130ccc>] check_poison_obj+0x174/0x180
[<c0131f8a>] kmalloc+0xc6/0x174
[<c0165fd5>] load_elf_binary+0x111/0xb0c
[<c0165fd5>] load_elf_binary+0x111/0xb0c
[<c012ea2f>] buffered_rmqueue+0xff/0x110
[<c012eace>] __alloc_pages+0x8e/0x274
[<c014c9ad>] search_binary_handler+0xcd/0x260
[<c0165ec4>] load_elf_binary+0x0/0xb0c
[<c014cca8>] do_execve+0x168/0x1f0
[<c0107873>] sys_execve+0x2f/0x68
[<c0108d4b>] syscall_call+0x7/0xb
uhci-hcd 00:07.2: USB bus 1 deregistered
uhci-hcd 00:07.2: dangling refs (1) to bus 1!
Unable to handle kernel paging request at virtual address 6b6b6b6f
printing eip:
c011ef6f
*pde = 00000000
Oops: 0002 [#1]
CPU: 0
EIP: 0060:[<c011ef6f>] Not tainted
EFLAGS: 00010012
EIP is at run_timer_softirq+0xd7/0x138
eax: 6b6b6b6b ebx: c2f64000 ecx: c5e24254 edx: 6b6b6b6b
esi: c03775c0 edi: 6b6b6b6b ebp: c2f65f84 esp: c2f65f70
ds: 007b es: 007b ss: 0068
Process rmmod (pid: 1391, threadinfo=c2f64000 task=c36aa140)
Stack: 00000011 c0412868 ffffffdd 00000150 6b6b6b6b c2f65fa0 c011b981 c0412868
c2f64000 c2f64000 c03eba00 00000046 c2f65fbc c010a360 400114ac 080486e0
400116d8 c037650c 00000000 bffff838 c0108eb8 400114ac 0804aa70 00000007
Call Trace:
[<c011b981>] do_softirq+0x51/0xb0
[<c010a360>] <1>Unable to handle kernel paging request at virtual address c6c0e000
printing eip:
c0261229
*pde = 05ea4067
*pte = 00000000
Oops: 0000 [#2]
CPU: 0
EIP: 0060:[<c0261229>] Not tainted
EFLAGS: 00010012
EIP is at bitfill32+0x99/0x1e0
eax: c6c0e000 ebx: c6c0e000 ecx: 00000000 edx: 00002000
esi: 00000000 edi: 00002000 ebp: c2f65af0 esp: c2f65ac0
ds: 007b es: 007b ss: 0068
Process rmmod (pid: 1391, threadinfo=c2f64000 task=c36aa140)
Stack: c6c0e000 c034f5a0 00000092 c6c0e000 c034f5a0 00000092 00000000 c0261190
00000000 c6c0e000 00000000 ffffffff c2f65b44 c0261bd0 c6c0e000 00000000
00000000 00002000 00000000 00000400 00000800 00000010 00000010 00000008
Call Trace:
[<c0261190>] bitfill32+0x0/0x1e0
[<c0261bd0>] cfb_fillrect+0x180/0x290
[<c02608e9>] neofb_fillrect+0x29/0x30
[<c0259376>] accel_clear+0x7a/0x84
[<c025a130>] fbcon_clear+0x114/0x120
[<c025b224>] fbcon_scroll+0x754/0x994
[<c021efa5>] scrup+0x71/0x108
[<c02204cf>] lf+0x33/0x64
[<c0222da4>] vt_console_print+0x198/0x2c4
[<c0118b37>] __call_console_drivers+0x3b/0x50
[<c0118b9c>] _call_console_drivers+0x50/0x58
[<c0118c5c>] call_console_drivers+0xb8/0xe8
[<c0118ef7>] release_console_sem+0x5b/0xd0
[<c0118e1f>] printk+0x127/0x158
[<c012ae5a>] __print_symbol+0x106/0x11c
[<c010a360>] do_IRQ+0x114/0x130
[<c010a360>] do_IRQ+0x114/0x130
[<c010910c>] show_trace+0x6c/0x8c
[<c010a360>] do_IRQ+0x114/0x130
[<c01091b8>] show_stack+0x68/0x74
[<c01092d3>] show_registers+0xfb/0x164
[<c0109424>] die+0x60/0x84
[<c011400c>] do_page_fault+0x2dc/0x40e
[<c0113d30>] do_page_fault+0x0/0x40e
[<c013b7d7>] pte_chain_alloc+0x1b/0x84
[<c0137884>] do_no_page+0x2b0/0x2bc
[<c01379bb>] handle_mm_fault+0x6b/0x120
[<c0126564>] rcu_check_callbacks+0x54/0x58
[<c0114fcb>] scheduler_tick+0x63/0x2e4
[<c011ee70>] update_process_times+0x2c/0x38
[<c0108ef5>] error_code+0x2d/0x38
[<c011ef6f>] run_timer_softirq+0xd7/0x138
[<c011b981>] do_softirq+0x51/0xb0
[<c010a360>] do_IRQ+0x114/0x130
[<c0108eb8>] common_interrupt+0x18/0x20
Code: 8b 10 89 f0 31 d0 23 45 fc 31 d0 8b 55 f4 89 02 8b 4d 0c 83
<0>Kernel panic: Aiee, killing interrupt handler!
In interrupt handler - not syncing
--
#include <~/.signature>: permission denied
next reply other threads:[~2003-03-26 19:40 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-03-26 19:11 Jochen Hein [this message]
2003-03-26 21:30 ` [2.5.66] slab corruption Andrew Morton
2003-03-27 18:38 ` Greg KH
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=871y0uhriz.fsf@echidna.jochen.org \
--to=jochen@jochen.org \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.