linux-kernel - Re: slab corruption in 5.3-rc3 while inserting an usb key

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <2B3F60AA-6851-46D0-A6E0-049BD54D5256@linaro.org>
Date:   Wed, 7 Aug 2019 12:13:35 +0200
From:   Paolo Valente <paolo.valente@...aro.org>
To:     Pavel Machek <pavel@....cz>
Cc:     kernel list <linux-kernel@...r.kernel.org>,
        Jens Axboe <axboe@...nel.dk>,
        linux-block <linux-block@...r.kernel.org>,
        gregkh@...uxfoundation.org, linux-usb@...r.kernel.org
Subject: Re: slab corruption in 5.3-rc3 while inserting an usb key

Hi,
I hope this has to do with the failure reported by Doug.  I'm
finalizing my fix.  I'd appreciate if you could retry with my fix
applied.

Thanks,
Paolo

> Il giorno 7 ago 2019, alle ore 12:10, Pavel Machek <pavel@....cz> ha scritto:
> 
> Hi!
> 
> Machine is thinkpad x220. BFQ related?
> 
> 	
> 
> [ 8224.904413] usb 2-1.1.4: Product: Intenso Twister Line
> [ 8224.904421] usb 2-1.1.4: Manufacturer: Alcor Tech
> [ 8224.904428] usb 2-1.1.4: SerialNumber: 12102500210755
> [ 8224.905778] usb-storage 2-1.1.4:1.0: USB Mass Storage device
> detected
> [ 8224.906519] scsi host6: usb-storage 2-1.1.4:1.0
> [ 8225.938476] scsi 6:0:0:0: Direct-Access     Intenso  Twister Line
> 8.07 PQ: 0 ANSI: 4
> [ 8225.941857] sd 6:0:0:0: Attached scsi generic sg2 type 0
> [ 8225.944342] sd 6:0:0:0: [sdc] 15257600 512-byte logical blocks:
> (7.81 GB/7.28 GiB)
> [ 8225.945541] sd 6:0:0:0: [sdc] Write Protect is off
> [ 8225.945551] sd 6:0:0:0: [sdc] Mode Sense: 23 00 00 00
> [ 8225.946669] sd 6:0:0:0: [sdc] Write cache: disabled, read cache:
> enabled, doesn't support DPO or FUA
> [ 8225.961509]  sdc: sdc1
> [ 8225.966286] sd 6:0:0:0: [sdc] Attached SCSI removable disk
> [ 8226.351785] FAT-fs (sdc1): Volume was not properly unmounted. Some
> data may be corrupt. Please run fsck.
> [ 8685.026976] perf: interrupt took too long (3142 > 3141), lowering
> kernel.perf_event_max_sample_rate to 63500
> [ 8710.270064] Slab corruption (Not tainted): bfq_queue
> start=ffff8880befb0cd8, len=512
> [ 8710.270073] Redzone: 0x9f911029d74e35b/0x9f911029d74e35b
> [ 8710.270081] Last user: (bfq_put_queue+0xb0/0xe0)
> [ 8710.270085] 1f0: 18 e5 44 93 81 88 ff ff 6b 6b 6b 6b 6b 6b 6b a5
> ..D.....kkkkkkk.
> [ 8710.270092] Prev obj: start=ffff8880befb0ac0, len=512
> [ 8710.270097] Redzone: 0xd84156c5635688c0/0xd84156c5635688c0
> [ 8710.270102] Last user: (bfq_get_queue+0x13a/0x290)
> [ 8710.270105] 000: 02 00 00 00 00 00 00 00 00 38 a6 95 81 88 ff ff
> .........8......
> [ 8710.270110] 010: 07 00 03 00 07 00 03 00 00 00 00 00 00 00 00 00
> ................
> [ 8711.077572] Slab corruption (Not tainted): bfq_queue
> start=ffff8880c20b7710, len=512
> [ 8711.077577] Redzone: 0x9f911029d74e35b/0x9f911029d74e35b
> [ 8711.077584] Last user: (bfq_put_queue+0xb0/0xe0)
> [ 8711.077586] 1f0: 6b 6b 6b 6b 6b 6b 6b 6b 00 00 00 00 00 00 00 00
> kkkkkkkk........
> [ 8711.077591] Prev obj: start=ffff8880c20b74f8, len=512
> [ 8711.077593] Redzone: 0x9f911029d74e35b/0x9f911029d74e35b
> [ 8711.077596] Last user: (bfq_put_queue+0xb0/0xe0)
> [ 8711.077598] 000: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b
> kkkkkkkkkkkkkkkk
> [ 8711.077601] 010: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b
> kkkkkkkkkkkkkkkk
> [ 8711.077604] Next obj: start=ffff8880c20b7928, len=512
> [ 8711.077606] Redzone: 0x9f911029d74e35b/0x9f911029d74e35b
> [ 8711.077609] Last user: (bfq_put_queue+0xb0/0xe0)
> [ 8711.077611] 000: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b
> kkkkkkkkkkkkkkkk
> [ 8711.077614] 010: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b
> kkkkkkkkkkkkkkkk
> [ 8764.014525] Slab corruption (Not tainted): bfq_queue
> start=ffff888049b0c108, len=512
> [ 8764.014534] Redzone: 0x9f911029d74e35b/0x9f911029d74e35b
> [ 8764.014542] Last user: (bfq_put_queue+0xb0/0xe0)
> [ 8764.014546] 1f0: 6b 6b 6b 6b 6b 6b 6b 6b 00 00 00 00 00 00 00 00
> kkkkkkkk........
> [ 8764.014553] Next obj: start=ffff888049b0c320, len=512
> [ 8764.014558] Redzone: 0xd84156c5635688c0/0xd84156c5635688c0
> [ 8764.014562] Last user: (bfq_get_queue+0x13a/0x290)
> [ 8764.014566] 000: 01 00 00 00 00 00 00 00 00 50 df 96 81 88 ff ff
> .........P......
> [ 8764.014571] 010: 04 00 02 00 04 00 02 00 00 00 00 00 00 00 00 00
> ................
> [10593.478355] perf: interrupt took too long (3936 > 3927), lowering
> kernel.perf_event_max_sample_rate to 50750
> [10745.055650] Slab corruption (Not tainted): bfq_queue
> start=ffff88818f6a9088, len=512
> [10745.055660] Redzone: 0x9f911029d74e35b/0x9f911029d74e35b
> [10745.055670] Last user: (bfq_put_queue+0xb0/0xe0)
> [10745.055675] 1f0: a0 f6 71 d4 80 88 ff ff 6b 6b 6b 6b 6b 6b 6b a5
> ..q.....kkkkkkk.
> [10745.055683] Next obj: start=ffff88818f6a92a0, len=512
> [10745.055688] Redzone: 0xd84156c5635688c0/0xd84156c5635688c0
> [10745.055693] Last user: (bfq_get_queue+0x13a/0x290)
> [10745.055698] 000: 01 00 00 00 00 00 00 00 00 38 a6 95 81 88 ff ff
> .........8......
> [10745.055704] 010: 04 00 02 00 04 00 02 00 00 00 00 00 00 00 00 00
> ................
> [12141.101100] usb 2-1.1.4: USB disconnect, device number 8
> pavel@duo:/data/l/linux-olpc$
> 
> -- 
> (english) http://www.livejournal.com/~pavelmachek
> (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html