lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:	Tue, 07 Sep 2010 09:54:11 -0500
From:	Eric Sandeen <sandeen@...hat.com>
To:	Justin Mattock <justinmattock@...il.com>
CC:	linux-ext4@...r.kernel.org,
	Linux Kernel Mailing List <linux-kernel@...r.kernel.org>
Subject: Re: BUG ext4_inode_cache: Padding overwritten. 0xffff88000008fe00-0xffff88000008fe32

Justin Mattock wrote:
> Im not sure if theres already assigned to this or not...  but noticed
> this in dmesg..
> only thing I remember was building glibc, and looking into an issue
> with it, suspended a few times and such..

hm so ext4's inode cache got overwritten, indicative of memory corruption
but hard to know how it happened; it's not necessarily (maybe even likely)
an ext4 bug... not quite sure how to track it down though.


Also the M taint indicates:

  5: 'M' if any processor has reported a Machine Check Exception,
     ' ' if no Machine Check Exceptions have occurred.

so something may have gone wrong before this.

-Eric

> [13299.426905] =============================================================================
> [13299.426913] BUG ext4_inode_cache: Padding overwritten.
> 0xffff88000008fe00-0xffff88000008fe32
> [13299.426919] -----------------------------------------------------------------------------
> [13299.426922]
> [13299.426928] INFO: Slab 0xffffea0000001ea0 objects=13 used=11
> fp=0xffff88000008d798 flags=0x4081
> [13299.426936] Pid: 17044, comm: rm Tainted: G   M
> 2.6.36-rc3-00001-gb0425ef #2
> [13299.426942] Call Trace:
> [13299.426955]  [<ffffffff810e3a5c>] slab_err+0x89/0x95
> [13299.426966]  [<ffffffff8109c5fe>] ? call_rcu_sched+0x10/0x12
> [13299.426974]  [<ffffffff8109c609>] ? call_rcu+0x9/0xb
> [13299.426982]  [<ffffffff810e48b9>] slab_pad_check.part.46+0xc0/0xf7
> [13299.426991]  [<ffffffff8114c1b9>] ? ext4_destroy_inode+0x96/0x9d
> [13299.426999]  [<ffffffff810e4984>] check_slab+0x94/0x9a
> [13299.427008]  [<ffffffff813e5c38>] __slab_free+0x15e/0x342
> [13299.427008]  [<ffffffff810e4f34>] kmem_cache_free+0x96/0xed
> [13299.427008]  [<ffffffff8114c1b9>] ext4_destroy_inode+0x96/0x9d
> [13299.427008]  [<ffffffff81114fd9>] ? __fsnotify_inode_delete+0x9/0xb
> [13299.427008]  [<ffffffff810fd046>] ? __destroy_inode+0x27/0x76
> [13299.427008]  [<ffffffff810fd4fb>] destroy_inode+0x2a/0x3f
> [13299.427008]  [<ffffffff810fd948>] iput+0x223/0x228
> [13299.427008]  [<ffffffff810f4bcb>] do_unlinkat+0x118/0x16b
> [13299.427008]  [<ffffffff810ee3ad>] ? sys_newfstatat+0x25/0x2e
> [13299.427008]  [<ffffffff81094841>] ? audit_syscall_entry+0x1d1/0x1fd
> [13299.427008]  [<ffffffff810f641e>] sys_unlinkat+0x24/0x26
> [13299.427008]  [<ffffffff81027602>] system_call_fastpath+0x16/0x1b
> [13299.427008]  Padding 0xffff88000008fb8b:  00 ad 4e ad de ff ff ff
> ff 00 00 00 00 ff ff ff .­N­Þÿÿÿÿ....ÿÿÿ
> [13299.427008]  Padding 0xffff88000008fb9b:  ff ff ff ff ff a0 fb 08
> 00 00 88 ff ff a0 fb 08 ÿÿÿÿÿ.û....ÿÿ.û.
> [13299.427008]  Padding 0xffff88000008fbab:  00 00 88 ff ff 00 00 00
> 00 00 00 00 00 b8 fb 08 ...ÿÿ........¸û.
> [13299.427008]  Padding 0xffff88000008fbbb:  00 00 88 ff ff b8 fb 08
> 00 00 88 ff ff 00 00 00 ...ÿÿ¸û....ÿÿ...
> [13299.427008]  Padding 0xffff88000008fbcb:  00 00 00 00 00 25 53 d9
> 92 00 00 00 00 00 00 00 .....%SÙ........
> [13299.427008]  Padding 0xffff88000008fbdb:  00 00 00 00 00 00 00 00
> 00 00 00 00 00 d9 59 bb .............ÙY»
> [13299.427008]  Padding 0xffff88000008fbeb:  00 01 00 00 00 00 00 00
> 00 00 00 00 00 10 1a b7 ...............·
> [13299.427008]  Padding 0xffff88000008fbfb:  2e 00 88 ff ff ff ff ff
> ff ff ff ff ff ff ff ff ...ÿÿÿÿÿÿÿÿÿÿÿÿÿ
> [13299.427008]  Padding 0xffff88000008fc0b:  ff ff ff ff ff 00 00 00
> 00 00 00 00 00 00 00 00 ÿÿÿÿÿ...........
> [13299.427008]  Padding 0xffff88000008fc1b:  00 00 00 00 00 00 00 00
> 00 00 00 00 00 00 01 10 ................
> [13299.427008]  Padding 0xffff88000008fc2b:  00 00 00 ad de 00 02 20
> 00 00 00 ad de 80 f9 08 ...­Þ......­Þ.ù.
> [13299.427008]  Padding 0xffff88000008fc3b:  00 00 88 ff ff 00 00 00
> 00 5a 5a 5a 5a b8 b6 28 ...ÿÿ....ZZZZ¸¶(
> [13299.427008]  Padding 0xffff88000008fc4b:  00 00 00 00 00 00 00 00
> 00 01 00 00 00 02 00 00 ................
> [13299.427008]  Padding 0xffff88000008fc5b:  00 00 00 00 00 a2 99 81
> 4c 00 00 00 00 13 41 21 .....¢..L.....A!
> [13299.427008]  Padding 0xffff88000008fc6b:  37 00 00 00 00 70 fc 08
> 00 00 88 ff ff 70 fc 08 7....pü....ÿÿpü.
> [13299.427008]  Padding 0xffff88000008fc7b:  00 00 88 ff ff 01 01 00
> 00 ad 4e ad de ff ff ff ...ÿÿ....­N­Þÿÿÿ
> [13299.427008]  Padding 0xffff88000008fc8b:  ff 5a 5a 5a 5a ff ff ff
> ff ff ff ff ff ff ff ff ÿZZZZÿÿÿÿÿÿÿÿÿÿÿ
> [13299.427008]  Padding 0xffff88000008fc9b:  ff 00 00 00 00 00 00 00
> 00 00 00 00 00 00 00 5a ÿ..............Z
> [13299.427008]  Padding 0xffff88000008fcab:  5a 5a 5a 5a 5a 00 00 00
> 00 00 00 00 00 00 00 00 ZZZZZ...........
> [13299.427008]  Padding 0xffff88000008fcbb:  00 1c 00 5a 5a 0e 0e 00
> 00 ad 4e ad de ff ff ff ...ZZ....­N­Þÿÿÿ
> [13299.427008]  Padding 0xffff88000008fccb:  ff 5a 5a 5a 5a ff ff ff
> ff ff ff ff ff d8 fc 08 ÿZZZZÿÿÿÿÿÿÿÿØü.
> [13299.427008]  Padding 0xffff88000008fcdb:  00 00 88 ff ff d8 fc 08
> 00 00 88 ff ff 00 00 00 ...ÿÿØü....ÿÿ...
> [13299.427008]  Padding 0xffff88000008fceb:  00 ad 4e ad de ff ff ff
> ff 5a 5a 5a 5a ff ff ff .­N­ÞÿÿÿÿZZZZÿÿÿ
> [13299.427008]  Padding 0xffff88000008fcfb:  ff ff ff ff ff 00 00 00
> 00 00 00 00 00 bb 59 03 ÿÿÿÿÿ........»Y.
> [13299.427008]  Padding 0xffff88000008fd0b:  00 bb 59 03 00 cc cc cc
> cc cc cc cc cc e8 f3 08 .»Y..ÌÌÌÌÌÌÌÌèó.
> [13299.427008]  Padding 0xffff88000008fd1b:  00 00 88 ff ff 9f 60 14
> 81 ff ff ff ff 01 00 00 ...ÿÿ.`..ÿÿÿÿ...
> [13299.427008]  Padding 0xffff88000008fd2b:  00 c0 28 00 00 a5 58 bb
> 00 01 00 00 00 b9 c1 14 .À(..¥X».....¹Á.
> [13299.427008]  Padding 0xffff88000008fd3b:  81 ff ff ff ff 01 00 00
> 00 0f 1c 00 00 b0 7a ba .ÿÿÿÿ........°zº
> [13299.427008]  Padding 0xffff88000008fd4b:  00 01 00 00 00 5a 5a 5a
> 5a 5a 5a 5a 5a 5a 5a 5a .....ZZZZZZZZZZZ
> [13299.427008]  Padding 0xffff88000008fd5b:  5a 5a 5a 5a 5a 5a 5a 5a
> 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
> [13299.427008]  Padding 0xffff88000008fd6b:  5a 5a 5a 5a 5a 5a 5a 5a
> 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
> [13299.427008]  Padding 0xffff88000008fd7b:  5a 5a 5a 5a 5a 5a 5a 5a
> 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
> [13299.427008]  Padding 0xffff88000008fd8b:  5a 5a 5a 5a 5a 5a 5a 5a
> 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
> [13299.427008]  Padding 0xffff88000008fd9b:  5a 5a 5a 5a 5a 5a 5a 5a
> 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
> [13299.427008]  Padding 0xffff88000008fdab:  5a 5a 5a 5a 5a 5a 5a 5a
> 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
> [13299.427008]  Padding 0xffff88000008fdbb:  5a 5a 5a 5a 5a 5a 5a 5a
> 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
> [13299.427008]  Padding 0xffff88000008fdcb:  5a 5a 5a 5a 5a 5a 5a 5a
> 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
> [13299.427008]  Padding 0xffff88000008fddb:  5a 5a 5a 5a 5a 5a 5a 5a
> 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
> [13299.427008]  Padding 0xffff88000008fdeb:  5a 5a 5a 5a 5a 5a 5a 5a
> 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
> [13299.427008]  Padding 0xffff88000008fdfb:  5a 5a 5a 5a 5a 00 5a 5a
> 5a 10 20 0f 3f 00 80 00 ZZZZZ.ZZZ...?...
> [13299.427008]  Padding 0xffff88000008fe0b:  00 c7 60 ed 3f 3f 00 10
> df ed 3f ff 07 10 c0 ed .Ç`í??..ßí?ÿ..Àí
> [13299.427008]  Padding 0xffff88000008fe1b:  3f fa 33 c9 33 d2 b8 3c
> fe 08 00 0f 01 c8 b8 31 ?ú3É3Ò¸<þ....ȸ1
> [13299.427008]  Padding 0xffff88000008fe2b:  00 00 00 0f 01 c9 eb e9
>                       .....Éëé
> [13299.427008] FIX ext4_inode_cache: Restoring
> 0xffff88000008fb8b-0xffff88000008fe32=0x5a
> [13299.427008]
> [13369.168442] general protection fault: 0000 [#1] SMP
> [13369.168448] last sysfs file: /sys/devices/platform/applesmc.768/light
> [13369.168451] CPU 0
> [13369.168453] Modules linked in: xfrm4_mode_transport xcbc rmd160
> sha512_generic sco bnep xt_tcpudp ipt_LOG iptable_nat nf_nat xt_state
> nf_conntrack_ftp nf_conntrack_ipv4 nf_conntrack nf_defrag_ipv4
> iptable_filter ip_tables x_tables snd_hda_codec_idt ath9k
> firewire_ohci firewire_core ath9k_common evdev ath9k_hw ohci1394
> joydev button thermal battery sky2 ac ath snd_hda_intel snd_hda_codec
> snd_hwdep snd_pcm snd_timer snd soundcore snd_page_alloc i2c_i801
> video aes_x86_64 lzo lzo_compress tun kvm_intel ipcomp xfrm_ipcomp
> crypto_null sha256_generic cbc des_generic cast5 blowfish serpent
> camellia twofish_generic twofish_x86_64 twofish_common ctr ah4 esp4
> authenc raw1394 ieee1394 uhci_hcd ehci_hcd hci_uart rfcomm btusb hidp
> l2cap bluetooth coretemp acpi_cpufreq processor mperf appletouch
> applesmc
> [13369.168522]
> [13369.168526] Pid: 21876, comm: objdump Tainted: G   M
> 2.6.36-rc3-00001-gb0425ef #2 Mac-F42187C8/MacBookPro2,2
> [13369.168529] RIP: 0010:[<ffffffff811a19ad>]  [<ffffffff811a19ad>]
> selinux_dentry_open+0x27/0x91
> [13369.168540] RSP: 0018:ffff88000dcb7c98  EFLAGS: 00010292
> [13369.168543] RAX: 5a5a5a5a5a5a5a5a RBX: ffff88000008f980 RCX: ffff880001800000
> [13369.168545] RDX: ffff880001800000 RSI: ffff88000ddf6800 RDI: ffff880030d6f500
> [13369.168548] RBP: ffff88000dcb7cb8 R08: 0000000000000000 R09: ffff88001aa70360
> [13369.168551] R10: ffff880030f25c6c R11: ffff88000191c000 R12: ffff880030d6f500
> [13369.168553] R13: ffff88001e6b79a0 R14: ffff88000ddf6800 R15: ffff88000008f980
> [13369.168557] FS:  00002ab84b7ebb20(0000) GS:ffff880001800000(0000)
> knlGS:0000000000000000
> [13369.168560] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [13369.168562] CR2: 00002ab84b52b300 CR3: 00000000276ed000 CR4: 00000000000006f0
> [13369.168565] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> [13369.168568] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
> [13369.168571] Process objdump (pid: 21876, threadinfo
> ffff88000dcb6000, task ffff88001e799ec0)
> [13369.168573] Stack:
> [13369.168575]  ffff880030d6f500 ffff88003ecf08c0 ffff88001aa70360
> 0000000000000000
> [13369.168579] <0> ffff88000dcb7cd8 ffffffff8119afc9 ffff880030d6f500
> ffff880030d6f500
> [13369.168584] <0> ffff88000dcb7d48 ffffffff810e8ebc ffff88000dcb7d18
> ffffffff810f2f78
> [13369.168589] Call Trace:
> [13369.168595]  [<ffffffff8119afc9>] security_dentry_open+0x19/0x4c
> [13369.168601]  [<ffffffff810e8ebc>] __dentry_open+0x159/0x2be
> [13369.168607]  [<ffffffff810f2f78>] ? generic_permission+0x17/0xa4
> [13369.168611]  [<ffffffff810e9e96>] nameidata_to_filp+0x3a/0x4b
> [13369.168616]  [<ffffffff810f58cb>] do_last+0x504/0x691
> [13369.168620]  [<ffffffff810f5c48>] do_filp_open+0x1f0/0x621
> [13369.168625]  [<ffffffff810ff29f>] ? alloc_fd+0x102/0x114
> [13369.168629]  [<ffffffff810e9f02>] do_sys_open+0x5b/0xf7
> [13369.168633]  [<ffffffff810e9fb9>] sys_open+0x1b/0x1d
> [13369.168639]  [<ffffffff81027602>] system_call_fastpath+0x16/0x1b
> [13369.168642] Code: ff ff c9 c3 55 48 89 e5 41 56 49 89 f6 41 55 41
> 54 49 89 fc 53 48 8b 47 18 4c 8b af c0 00 00 00 48 8b 58 28 48 8b 83
> 78 02 00 00 <8b> 40 1c 41 89 45 08 e8 a1 af ff ff 41 89 45 0c 41 8b 44
> 24 54
> [13369.168681] RIP  [<ffffffff811a19ad>] selinux_dentry_open+0x27/0x91
> [13369.168685]  RSP <ffff88000dcb7c98>
> [13369.168688] ---[ end trace a79a28a58d538d97 ]---
> 
> as for performance issues,would of never know about this if I hadnt
> looked in dmesg.
> 
> 

--
To unsubscribe from this list: send the line "unsubscribe linux-ext4" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Powered by blists - more mailing lists