From: Christian Lamparter <chunkeey@web.de>
To: Artur Skawina <art.08.09@gmail.com>
Cc: Johannes Berg <johannes@sipsolutions.net>,
Larry Finger <Larry.Finger@lwfinger.net>,
linux-wireless@vger.kernel.org
Subject: Re: wireless-testing, p54 and sinus 154 data no longer works
Date: Fri, 16 Jan 2009 23:52:31 +0100 [thread overview]
Message-ID: <200901162352.32037.chunkeey@web.de> (raw)
In-Reply-To: <497105D1.5040906@gmail.com>
On Friday 16 January 2009 23:10:25 Artur Skawina wrote:
> Christian Lamparter wrote:
> > On Friday 16 January 2009 10:13:07 Johannes Berg wrote:
> >> On Thu, 2009-01-15 at 21:18 -0600, Larry Finger wrote:
> >>
> >>>>> Object 0xddec18d0: >69< 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b =
6b 6b 6b ikkkkkkkkkkkkkkk
> >>> I too have seen real single bit changes - in my case 6b went to 6=
a,
> >>> and my memory is fine. I wouldn't necessarily blame your hardware=
=2E
> >> 6b to 6a is often the result of a refcounting bug that happens to =
unref
> >> a value _after_ it has been freed. But that doesn't explain 6b to =
69,
> >> unless you happen to have _two_ refcounting bugs. Not that I neces=
sarily
> >> think that memory is bad
> > Well, this idiotic debug patch (kref-kernel-debug-patch) could shed=
some light into
> > the problem who's using a freed skb.=20
>=20
> didn't trigger anything here, just the usual:
>=20
> BUG kmalloc-4096: Poison overwritten
> ---------------------------------------------------------------------=
--------
>=20
> INFO: 0xdc8161b0-0xdc8161b0. First byte 0x6a instead of 0x6b
> INFO: Allocated in dev_alloc_skb+0x19/0x30 age=3D1762 cpu=3D0 pid=3D3=
530
> INFO: Freed in __kfree_skb+0xf/0x90 age=3D613 cpu=3D0 pid=3D3527
> INFO: Slab 0xc1390200 objects=3D7 used=3D5 fp=3D0xdc816120 flags=3D0x=
400020c2
> INFO: Object 0xdc816120 @offset=3D24864 fp=3D0xdc8140c0
>=20
> but no other warnings...
but the refcount-test-module.c works on your system?
It should produce something like:
[ 608.177429] RefTest =
=20
[ 608.179753] RefTest - Static =
=20
[ 608.182861] released ffff8800b767dec8 =
=20
[ 608.186760] RefTest - Watermark test =
=20
[ 608.190563] ------------[ cut here ]------------ =
=20
[ 608.195412] WARNING: at lib/kref.c:67 kref_put+0x56/0x72() =
=20
[ 608.201139] Hardware name: System Product Name =
=20
[ 608.205813] Modules linked in: refcount(+) [...] [last unloaded: ref=
count] =
=20
[ 608.288005] Pid: 8793, comm: insmod Tainted: P W 2.6.29-rc1-=
wl #5 =20
[ 608.295036] Call Trace: =
=20
[ 608.297719] [<ffffffff80233389>] warn_slowpath+0xd8/0x112 =
=20
[ 608.304057] [<ffffffff80233edd>] vprintk+0x28a/0x2b6 =
=20
[ 608.309546] [<ffffffffa0089000>] reftst_release+0x0/0x14 [refcount]=
=20
[ 608.316241] [<ffffffffa00a5000>] reftst_init+0x0/0xd5 [refcount] =
=20
[ 608.322572] [<ffffffffa00a5000>] reftst_init+0x0/0xd5 [refcount] =
=20
[ 608.328904] [<ffffffffa0089000>] reftst_release+0x0/0x14 [refcount]=
=20
[ 608.335497] [<ffffffffa00a5000>] reftst_init+0x0/0xd5 [refcount] =
=20
[ 608.341833] [<ffffffff803b853a>] kref_put+0x56/0x72 =
=20
[ 608.347034] [<ffffffffa00a5082>] reftst_init+0x82/0xd5 [refcount] =
=20
[ 608.353461] [<ffffffff80209051>] _stext+0x51/0x120 =
=20
[ 608.358576] [<ffffffff803ba5b2>] __up_read+0x13/0x8d =
=20
[ 608.363862] [<ffffffff8024823d>] __blocking_notifier_call_chain+0x5=
1/0x5f =20
[ 608.370980] [<ffffffff80256080>] sys_init_module+0xa0/0x1ba =
=20
[ 608.376878] [<ffffffff8020b41b>] system_call_fastpath+0x16/0x1b =
=20
[ 608.383116] ---[ end trace e0829545e9e114bf ]--- =
=20
[ 608.388194] RefTest - slXb poison test =
=20
[ 608.392223] ------------[ cut here ]------------ =
=20
[ 608.397066] WARNING: at lib/kref.c:67 kref_put+0x56/0x72() =
=20
[ 608.402783] Hardware name: System Product Name =
=20
[ 608.407454] Modules linked in: refcount(+) [...] ehci_hcd [last unlo=
aded: refcount] =
=20
[ 608.488299] Pid: 8793, comm: insmod Tainted: P W 2.6.29-rc1-=
wl #5 =20
[ 608.495325] Call Trace: =
=20
[ 608.498015] [<ffffffff80233389>] warn_slowpath+0xd8/0x112 =
=20
[ 608.503735] [<ffffffff80233edd>] vprintk+0x28a/0x2b6 =
=20
[ 608.509023] [<ffffffff80595798>] thread_return+0x3d/0xc2 =
=20
[ 608.514670] [<ffffffffa0089000>] reftst_release+0x0/0x14 [refcount]=
=20
[ 608.521268] [<ffffffffa00a5000>] reftst_init+0x0/0xd5 [refcount] =
=20
[ 608.527601] [<ffffffffa00a50bd>] reftst_init+0xbd/0xd5 [refcount] =
=20
[ 608.534025] [<ffffffff8029147a>] check_object+0x156/0x205 =
=20
[ 608.539751] [<ffffffff80291c89>] __slab_free+0x271/0x2a8 =
=20
[ 608.545384] [<ffffffffa0089000>] reftst_release+0x0/0x14 [refcount]=
=20
[ 608.551980] [<ffffffffa00a5000>] reftst_init+0x0/0xd5 [refcount] =
=20
[ 608.558315] [<ffffffff803b853a>] kref_put+0x56/0x72 =
=20
[ 608.563513] [<ffffffffa00a5000>] reftst_init+0x0/0xd5 [refcount] =
=20
[ 608.569849] [<ffffffffa00a50cc>] reftst_init+0xcc/0xd5 [refcount] =
=20
[ 608.576274] [<ffffffff80209051>] _stext+0x51/0x120 =
=20
[ 608.581384] [<ffffffff803ba5b2>] __up_read+0x13/0x8d =
=20
[ 608.586671] [<ffffffff8024823d>] __blocking_notifier_call_chain+0x5=
1/0x5f =20
[ 608.593789] [<ffffffff80256080>] sys_init_module+0xa0/0x1ba =
=20
[ 608.599685] [<ffffffff8020b41b>] system_call_fastpath+0x16/0x1b =
=20
[ 608.605923] ---[ end trace e0829545e9e114c0 ]---
[[[some delay - until the object is alloced by someone else]]]
=
=20
[ 613.331424] =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =
=20
[ 613.335408] BUG kmalloc-96: Poison overwritten =
=20
[ 613.335408] --------------------------------------------------------=
--------------------- =20
[ 613.335408] =
=20
[ 613.335408] INFO: 0xffff8800be0aa950-0xffff8800be0aa950. First byte =
0x6a instead of 0x6b =20
[ 613.335408] INFO: Allocated in 0xffffffffa00a5093 age=3D1243 cpu=3D0=
pid=3D8793 =
=20
[ 613.335408] INFO: Freed in 0xffffffffa00a50bd age=3D1244 cpu=3D0 pid=
=3D8793 =
=20
[ 613.335408] INFO: Slab 0xffffe20002992530 objects=3D24 used=3D23 fp=3D=
0xffff8800be0aa930 flags=3D0x40000000000000c3 =
=20
[ 613.335408] INFO: Object 0xffff8800be0aa930 @offset=3D2352 fp=3D0x(n=
ull) =
=20
[ 613.335408]
[ 613.335408] Bytes b4 0xffff8800be0aa920: ec ca 00 00 01 00 00 00 5a=
5a 5a 5a 5a 5a 5a 5a =EF=BF=BD=EF=BF=BD......ZZZZZZZZ
[ 613.335408] Object 0xffff8800be0aa930: 6b 6b 6b 6b 6b 6b 6b 6b 6b=
6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
[ 613.335408] Object 0xffff8800be0aa940: 6b 6b 6b 6b 6b 6b 6b 6b 6b=
6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
[ 613.335408] Object 0xffff8800be0aa950: 6a 6b 6b 6b 6b 6b 6b 6b 6b=
6b 6b 6b 6b 6b 6b 6b jkkkkkkkkkkkkkkk
[ 613.335408] Object 0xffff8800be0aa960: 6b 6b 6b 6b 6b 6b 6b 6b 6b=
6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
[ 613.335408] Object 0xffff8800be0aa970: 6b 6b 6b 6b 6b 6b 6b 6b 6b=
6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
[ 613.335408] Object 0xffff8800be0aa980: 6b 6b 6b 6b 6b 6b 6b 6b 6b=
6b 6b 6b 6b 6b 6b a5 kkkkkkkkkkkkkkk=EF=BF=BD
[ 613.335408] Redzone 0xffff8800be0aa990: bb bb bb bb bb bb bb bb =
=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=
=BD=EF=BF=BD=EF=BF=BD
[ 613.473011] Padding 0xffff8800be0aa9d0: 5a 5a 5a 5a 5a 5a 5a 5a =
ZZZZZZZZ
[ 613.473011] Pid: 1671, comm: kcryptd Tainted: P W 2.6.29-rc1=
-wl #5
[ 613.473011] Call Trace:
[ 613.473011] [<ffffffff802912e8>] check_bytes_and_report+0xb5/0xf1 [=
no sign of refcount test in this backtrace here]
[ 613.473011] [<ffffffff8022a2d7>] update_curr+0x4a/0xcd
[ 613.473011] [<ffffffff802913ec>] check_object+0xc8/0x205
[ 613.473011] [<ffffffff80292af2>] __slab_alloc+0x3cb/0x4ba
[ 613.473011] [<ffffffff804c4b9c>] r1bio_pool_alloc+0x24/0x3d
[ 613.473011] [<ffffffff804c4b9c>] r1bio_pool_alloc+0x24/0x3d
[ 613.473011] [<ffffffff80293381>] __kmalloc+0x98/0xc1
[...]
[ 613.473011] FIX kmalloc-96: Restoring 0xffff8800be0aa950-0xffff8800b=
e0aa950=3D0x6b
[ 613.473011]
[ 613.473011] FIX kmalloc-96: Marking all objects used
--
To unsubscribe from this list: send the line "unsubscribe linux-wireles=
s" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
next prev parent reply other threads:[~2009-01-16 22:52 UTC|newest]
Thread overview: 47+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-12-15 17:49 wireless-testing, p54 and sinus 154 data no longer works Artur Skawina
2008-12-15 18:41 ` Larry Finger
2008-12-15 19:43 ` Christian Lamparter
2008-12-15 20:20 ` Artur Skawina
2008-12-15 23:03 ` Artur Skawina
2008-12-15 23:24 ` Christian Lamparter
[not found] ` <49477A2A.7030406@gmail.com>
[not found] ` <200812161415.09365.chunkeey@web.de>
2008-12-16 13:49 ` Artur Skawina
2008-12-16 14:10 ` Christian Lamparter
2009-01-12 17:09 ` Artur Skawina
2009-01-13 13:49 ` Christian Lamparter
2009-01-13 16:45 ` Artur Skawina
2009-01-13 18:06 ` Christian Lamparter
2009-01-13 19:02 ` Artur Skawina
2009-01-13 21:39 ` Artur Skawina
2009-01-13 22:31 ` Artur Skawina
2009-01-15 17:55 ` Artur Skawina
2009-01-15 18:53 ` Christian Lamparter
2009-01-15 19:12 ` Artur Skawina
2009-01-15 19:42 ` Christian Lamparter
2009-01-15 20:06 ` Artur Skawina
2009-01-15 22:41 ` Christian Lamparter
2009-01-15 23:59 ` Artur Skawina
2009-01-16 3:18 ` Larry Finger
2009-01-16 3:31 ` Artur Skawina
2009-01-16 9:13 ` Johannes Berg
2009-01-16 20:38 ` Christian Lamparter
2009-01-16 22:10 ` Artur Skawina
2009-01-16 22:52 ` Christian Lamparter [this message]
2009-01-16 23:46 ` Artur Skawina
2009-01-18 23:27 ` Artur Skawina
2009-01-19 0:26 ` Christian Lamparter
2009-01-19 1:17 ` Artur Skawina
2009-01-19 18:15 ` Artur Skawina
2009-01-19 18:48 ` Christian Lamparter
2009-01-19 21:53 ` Artur Skawina
2009-01-19 22:38 ` Christian Lamparter
2009-01-19 22:54 ` Artur Skawina
2009-01-19 23:17 ` Artur Skawina
2009-01-19 23:32 ` Christian Lamparter
2009-01-20 20:18 ` Artur Skawina
2009-01-20 20:50 ` Christian Lamparter
2009-01-20 21:18 ` Artur Skawina
2009-01-19 18:52 ` Artur Skawina
2009-01-15 20:07 ` [PATCH] p54: set_tim must be atomic Artur Skawina
2009-01-15 18:56 ` wireless-testing, p54 and sinus 154 data no longer works Artur Skawina
2009-01-13 22:47 ` Christian Lamparter
2009-01-13 19:59 ` Larry Finger
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200901162352.32037.chunkeey@web.de \
--to=chunkeey@web.de \
--cc=Larry.Finger@lwfinger.net \
--cc=art.08.09@gmail.com \
--cc=johannes@sipsolutions.net \
--cc=linux-wireless@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).