| Summary: | poison overwritten in radeon drm | ||
|---|---|---|---|
| Product: | DRI | Reporter: | Marc Dietrich <marvin24> |
| Component: | DRM/Radeon | Assignee: | Default DRI bug account <dri-devel> |
| Status: | RESOLVED WONTFIX | QA Contact: | |
| Severity: | normal | ||
| Priority: | medium | ||
| Version: | DRI git | ||
| Hardware: | Other | ||
| OS: | All | ||
| Whiteboard: | |||
| i915 platform: | i915 features: | ||
I saw the following issue that may be related (Ubuntu 9.10 Karmic 64bit 2.6.31-18-generic #55) using radeon KMS. Graphics card: RV516 [Radeon X1300/X1550 Series]. Symptoms was very choppy UI and that all swap space was consumed over approx 10 minutes. This happened just after system boot. Compiz and flashy effects are enabled. Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980058] ------------[ cut here ]------------ Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980068] WARNING: at /build/buildd/linux-2.6.31/lib/kref.c:43 kref_get+0x2d/0x30() Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980070] Hardware name: OptiPlex 745 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980072] Modules linked in: binfmt_misc vboxnetflt vboxnetadp vboxdrv kvm_intel kvm snd_hda_codec_analog snd_hda_intel snd_hda_codec snd_hwdep snd_pcm_oss snd_mixer_oss snd_pcm snd_seq_dummy snd_seq_oss ppdev iptable_filter snd_seq_midi ip_tables x_tables gspca_zc3xx gspca_main videodev v4l1_compat v4l2_compat_ioctl32 pl2303 usbserial snd_rawmidi snd_seq_midi_event psmouse serio_raw parport_pc dell_wmi dcdbas lp parport snd_seq snd_timer snd_seq_device snd soundcore snd_page_alloc usbhid dm_raid45 xor fbcon tileblit font bitblit softcursor radeon ttm drm i2c_algo_bit floppy tg3 intel_agp Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980114] Pid: 10, comm: events/1 Not tainted 2.6.31-18-generic #55-Ubuntu Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980116] Call Trace: Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980121] [<ffffffff8105e828>] warn_slowpath_common+0x78/0xb0 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980125] [<ffffffff8105e86f>] warn_slowpath_null+0xf/0x20 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980127] [<ffffffff81279bed>] kref_get+0x2d/0x30 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980135] [<ffffffffa007fdf4>] ttm_bo_delayed_delete+0x94/0x180 [ttm] Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980141] [<ffffffffa007fee0>] ? ttm_bo_delayed_workqueue+0x0/0x40 [ttm] Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980146] [<ffffffffa007fefa>] ttm_bo_delayed_workqueue+0x1a/0x40 [ttm] Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980150] [<ffffffff81073865>] run_workqueue+0x95/0x170 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980153] [<ffffffff810739e4>] worker_thread+0xa4/0x120 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980156] [<ffffffff81078b90>] ? autoremove_wake_function+0x0/0x40 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980159] [<ffffffff81073940>] ? worker_thread+0x0/0x120 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980162] [<ffffffff810787a6>] kthread+0xa6/0xb0 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980165] [<ffffffff8101312a>] child_rip+0xa/0x20 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980168] [<ffffffff81078700>] ? kthread+0x0/0xb0 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980170] [<ffffffff81013120>] ? child_rip+0x0/0x20 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980172] ---[ end trace c31a867b7006f62a ]--- Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980238] CPU 0 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980240] Modules linked in: binfmt_misc vboxnetflt vboxnetadp vboxdrv kvm_intel kvm snd_hda_codec_analog snd_hda_intel snd_hda_codec snd_hwdep snd_pcm_oss snd_mixer_oss snd_pcm snd_seq_dummy snd_seq_oss ppdev iptable_filter snd_seq_midi ip_tables x_tables gspca_zc3xx gspca_main videodev v4l1_compat v4l2_compat_ioctl32 pl2303 usbserial snd_rawmidi snd_seq_midi_event psmouse serio_raw parport_pc dell_wmi dcdbas lp parport snd_seq snd_timer snd_seq_device snd soundcore snd_page_alloc usbhid dm_raid45 xor fbcon tileblit font bitblit softcursor radeon ttm drm i2c_algo_bit floppy tg3 intel_agp Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980275] Pid: 9, comm: events/0 Tainted: G W 2.6.31-18-generic #55-Ubuntu OptiPlex 745 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980277] RIP: 0010:[<ffffffff81114b3c>] [<ffffffff81114b3c>] kfree+0x12c/0x140 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980283] RSP: 0018:ffff880137a91d10 EFLAGS: 00010246 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980285] RAX: 0100000000000000 RBX: ffffffffa00b35d3 RCX: ffff8800aed00128 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980287] RDX: 0000000000576cb8 RSI: ffffea000263f908 RDI: ffff8800aed97e00 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980289] RBP: ffff880137a91d30 R08: 0000000000000000 R09: 0000000000000000 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980291] R10: 0000000000000594 R11: 0000000000000000 R12: ffff8800aed97e00 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980293] R13: ffff8800aed97e3c R14: ffff8800aed97e3c R15: ffff880134c3f7a8 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980295] FS: 0000000000000000(0000) GS:ffff880028022000(0000) knlGS:0000000000000000 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980297] CS: 0010 DS: 0018 ES: 0018 CR0: 000000008005003b Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980299] CR2: 00007f7b37a18000 CR3: 000000011fd3f000 CR4: 00000000000026f0 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980301] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980303] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980306] Process events/0 (pid: 9, threadinfo ffff880137a90000, task ffff880137a85ac0) Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980309] ffff880134c3f4a0 ffff8800aed97e00 ffff880134c3f330 ffff8800aed97e3c Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980312] <0> ffff880137a91d50 ffffffffa00b35d3 ffff880137a91da0 ffff8800aed97e00 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980316] <0> ffff880137a91d80 ffffffffa007ec6a ffff88011ec2c410 ffff8800aed97e3c Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980339] [<ffffffffa00b35d3>] radeon_ttm_object_object_destroy+0x43/0x50 [radeon] Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980346] [<ffffffffa007ec6a>] ttm_bo_release_list+0x8a/0xe0 [ttm] Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980351] [<ffffffffa007ebe0>] ? ttm_bo_release_list+0x0/0xe0 [ttm] Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980354] [<ffffffff81279b87>] kref_put+0x37/0x70 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980359] [<ffffffffa007fe27>] ttm_bo_delayed_delete+0xc7/0x180 [ttm] Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980364] [<ffffffffa007fee0>] ? ttm_bo_delayed_workqueue+0x0/0x40 [ttm] Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980369] [<ffffffffa007fefa>] ttm_bo_delayed_workqueue+0x1a/0x40 [ttm] Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980373] [<ffffffff81073865>] run_workqueue+0x95/0x170 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980375] [<ffffffff810739e4>] worker_thread+0xa4/0x120 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980378] [<ffffffff81078b90>] ? autoremove_wake_function+0x0/0x40 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980381] [<ffffffff81073940>] ? worker_thread+0x0/0x120 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980384] [<ffffffff810787a6>] kthread+0xa6/0xb0 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980387] [<ffffffff8101312a>] child_rip+0xa/0x20 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980390] [<ffffffff81078700>] ? kthread+0x0/0xb0 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980392] [<ffffffff81013120>] ? child_rip+0x0/0x20 Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980428] RSP <ffff880137a91d10> Jan 27 08:18:07 nsh-ubuntu kernel: [ 263.980430] ---[ end trace c31a867b7006f62b ]--- can't reproduce it anymore. |
Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.
got this while playing a 3d games with 2.6.32-rc7 + drm-linus / kms enabled on rs780 + current mesa/drm ... [ 1518.194702] ============================================================================= [ 1518.194708] BUG kmalloc-512: Poison overwritten [ 1518.194709] ----------------------------------------------------------------------------- [ 1518.194711] [ 1518.194713] INFO: 0xffff88001aa02a50-0xffff88001aa02a57. First byte 0xd8 instead of 0x6b [ 1518.194734] INFO: Allocated in radeon_object_create+0x6c/0x240 [radeon] age=10 cpu=1 pid=5650 [ 1518.194744] INFO: Freed in radeon_ttm_object_object_destroy+0x43/0x50 [radeon] age=5 cpu=0 pid=5650 [ 1518.194747] INFO: Slab 0xffffea00005d3070 objects=14 used=3 fp=0xffff88001aa02920 flags=0x40000000000040c3 [ 1518.194749] INFO: Object 0xffff88001aa02920 @offset=2336 fp=0xffff88001aa03da8 [ 1518.194750] [ 1518.194752] Bytes b4 0xffff88001aa02910: 87 7b 03 00 01 00 00 00 5a 5a 5a 5a 5a 5a 5a 5a .{......ZZZZZZZZ [ 1518.194759] Object 0xffff88001aa02920: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194766] Object 0xffff88001aa02930: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194772] Object 0xffff88001aa02940: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194779] Object 0xffff88001aa02950: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194785] Object 0xffff88001aa02960: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194791] Object 0xffff88001aa02970: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194798] Object 0xffff88001aa02980: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194805] Object 0xffff88001aa02990: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194811] Object 0xffff88001aa029a0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194818] Object 0xffff88001aa029b0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194824] Object 0xffff88001aa029c0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194831] Object 0xffff88001aa029d0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194837] Object 0xffff88001aa029e0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194843] Object 0xffff88001aa029f0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194850] Object 0xffff88001aa02a00: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194856] Object 0xffff88001aa02a10: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194863] Object 0xffff88001aa02a20: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194869] Object 0xffff88001aa02a30: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194876] Object 0xffff88001aa02a40: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194882] Object 0xffff88001aa02a50: d8 de 45 1c 00 88 ff ff 6b 6b 6b 6b 6b 6b 6b 6b ��E...��kkkkkkkk [ 1518.194889] Object 0xffff88001aa02a60: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194895] Object 0xffff88001aa02a70: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194902] Object 0xffff88001aa02a80: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194908] Object 0xffff88001aa02a90: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194915] Object 0xffff88001aa02aa0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194921] Object 0xffff88001aa02ab0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194928] Object 0xffff88001aa02ac0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194934] Object 0xffff88001aa02ad0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194941] Object 0xffff88001aa02ae0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194947] Object 0xffff88001aa02af0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194954] Object 0xffff88001aa02b00: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1518.194960] Object 0xffff88001aa02b10: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 kkkkkkkkkkkkkkk� [ 1518.194967] Redzone 0xffff88001aa02b20: bb bb bb bb bb bb bb bb �������� [ 1518.194973] Padding 0xffff88001aa02b60: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ [ 1518.194981] Pid: 1143, comm: Xorg Not tainted 2.6.32-rc7 #1 [ 1518.194983] Call Trace: [ 1518.194989] [<ffffffff8110decd>] print_trailer+0xfd/0x160 [ 1518.194992] [<ffffffff8110e360>] check_bytes_and_report+0xf0/0x120 [ 1518.194995] [<ffffffff8110fcf6>] check_object+0x206/0x250 [ 1518.194998] [<ffffffff8111108c>] __slab_alloc+0x55c/0x6f0 [ 1518.195009] [<ffffffffa009d537>] ? T.474+0x17/0x40 [radeon] [ 1518.195012] [<ffffffff811121be>] __kmalloc+0x1ee/0x200 [ 1518.195022] [<ffffffffa009d537>] T.474+0x17/0x40 [radeon] [ 1518.195032] [<ffffffffa009d5f1>] radeon_cs_parser_relocs+0x91/0x250 [radeon] [ 1518.195042] [<ffffffffa009dbb2>] radeon_cs_ioctl+0xa2/0x1e0 [radeon] [ 1518.195054] [<ffffffffa000bafe>] drm_ioctl+0x16e/0x380 [drm] [ 1518.195058] [<ffffffff81077870>] ? autoremove_wake_function+0x0/0x40 [ 1518.195068] [<ffffffffa009db10>] ? radeon_cs_ioctl+0x0/0x1e0 [radeon] [ 1518.195072] [<ffffffff8112faec>] vfs_ioctl+0x7c/0xa0 [ 1518.195074] [<ffffffff8112ffb2>] do_vfs_ioctl+0x82/0x590 [ 1518.195077] [<ffffffff8111e5e7>] ? vfs_read+0x127/0x190 [ 1518.195079] [<ffffffff81130539>] sys_ioctl+0x79/0x90 [ 1518.195083] [<ffffffff8100be2b>] system_call_fastpath+0x16/0x1b [ 1518.195086] FIX kmalloc-512: Restoring 0xffff88001aa02a50-0xffff88001aa02a57=0x6b [ 1518.195087] [ 1518.195088] FIX kmalloc-512: Marking all objects used [ 1520.497799] ============================================================================= [ 1520.497805] BUG kmalloc-512: Poison overwritten [ 1520.497806] ----------------------------------------------------------------------------- [ 1520.497807] [ 1520.497810] INFO: 0xffff88001c45dee0-0xffff88001c45dee7. First byte 0x0 instead of 0x6b [ 1520.497830] INFO: Allocated in radeon_object_create+0x6c/0x240 [radeon] age=94 cpu=0 pid=1143 [ 1520.497840] INFO: Freed in radeon_ttm_object_object_destroy+0x43/0x50 [radeon] age=93 cpu=0 pid=1143 [ 1520.497843] INFO: Slab 0xffffea000062f420 objects=14 used=10 fp=0xffff88001c45dda8 flags=0x40000000000040c3 [ 1520.497845] INFO: Object 0xffff88001c45dda8 @offset=7592 fp=0xffff88001c45c920 [ 1520.497846] [ 1520.497848] Bytes b4 0xffff88001c45dd98: d4 a5 04 00 01 00 00 00 5a 5a 5a 5a 5a 5a 5a 5a ԥ......ZZZZZZZZ [ 1520.497856] Object 0xffff88001c45dda8: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.497862] Object 0xffff88001c45ddb8: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.497869] Object 0xffff88001c45ddc8: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.497875] Object 0xffff88001c45ddd8: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.497882] Object 0xffff88001c45dde8: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.497888] Object 0xffff88001c45ddf8: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.497895] Object 0xffff88001c45de08: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.497901] Object 0xffff88001c45de18: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.497908] Object 0xffff88001c45de28: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.497914] Object 0xffff88001c45de38: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.497921] Object 0xffff88001c45de48: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.497927] Object 0xffff88001c45de58: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.497933] Object 0xffff88001c45de68: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.497940] Object 0xffff88001c45de78: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.497946] Object 0xffff88001c45de88: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.497953] Object 0xffff88001c45de98: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.497959] Object 0xffff88001c45dea8: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.497965] Object 0xffff88001c45deb8: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.497972] Object 0xffff88001c45dec8: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.497978] Object 0xffff88001c45ded8: 6b 6b 6b 6b 6b 6b 6b 6b 00 d8 45 1c 00 88 ff ff kkkkkkkk.�E...�� [ 1520.497985] Object 0xffff88001c45dee8: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.497991] Object 0xffff88001c45def8: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.497998] Object 0xffff88001c45df08: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.498004] Object 0xffff88001c45df18: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.498011] Object 0xffff88001c45df28: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.498017] Object 0xffff88001c45df38: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.498024] Object 0xffff88001c45df48: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.498030] Object 0xffff88001c45df58: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.498037] Object 0xffff88001c45df68: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.498043] Object 0xffff88001c45df78: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.498049] Object 0xffff88001c45df88: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 1520.498056] Object 0xffff88001c45df98: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 kkkkkkkkkkkkkkk� [ 1520.498062] Redzone 0xffff88001c45dfa8: bb bb bb bb bb bb bb bb �������� [ 1520.498069] Padding 0xffff88001c45dfe8: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ [ 1520.498076] Pid: 1143, comm: Xorg Not tainted 2.6.32-rc7 #1 [ 1520.498078] Call Trace: [ 1520.498084] [<ffffffff8110decd>] print_trailer+0xfd/0x160 [ 1520.498088] [<ffffffff8110e360>] check_bytes_and_report+0xf0/0x120 [ 1520.498091] [<ffffffff8110fcf6>] check_object+0x206/0x250 [ 1520.498093] [<ffffffff8111108c>] __slab_alloc+0x55c/0x6f0 [ 1520.498104] [<ffffffffa009d537>] ? T.474+0x17/0x40 [radeon] [ 1520.498107] [<ffffffff811121be>] __kmalloc+0x1ee/0x200 [ 1520.498117] [<ffffffffa009d537>] T.474+0x17/0x40 [radeon] [ 1520.498127] [<ffffffffa009d5f1>] radeon_cs_parser_relocs+0x91/0x250 [radeon] [ 1520.498137] [<ffffffffa009dbb2>] radeon_cs_ioctl+0xa2/0x1e0 [radeon] [ 1520.498149] [<ffffffffa000bafe>] drm_ioctl+0x16e/0x380 [drm] [ 1520.498160] [<ffffffffa009db10>] ? radeon_cs_ioctl+0x0/0x1e0 [radeon] [ 1520.498163] [<ffffffff810f82f0>] ? __do_fault+0x50/0x470 [ 1520.498166] [<ffffffff8112faec>] vfs_ioctl+0x7c/0xa0 [ 1520.498168] [<ffffffff8112ffb2>] do_vfs_ioctl+0x82/0x590 [ 1520.498171] [<ffffffff8121eb69>] ? __up_read+0x99/0xc0 [ 1520.498175] [<ffffffff8107bae9>] ? up_read+0x9/0x10 [ 1520.498177] [<ffffffff81130539>] sys_ioctl+0x79/0x90 [ 1520.498181] [<ffffffff8100be2b>] system_call_fastpath+0x16/0x1b [ 1520.498183] FIX kmalloc-512: Restoring 0xffff88001c45dee0-0xffff88001c45dee7=0x6b [ 1520.498184] [ 1520.498186] FIX kmalloc-512: Marking all objects used