|
From: Carsten A. <car...@ae...> - 2018-07-20 05:29:39
|
Hi On 07/19/18 20:05, Bart Van Assche wrote: > Unfortunately I have not yet found a way to reproduce what you ran into. > But I think that r7428 should fix this new complaint. Can you verify this? Yes, but no it complains about Jul 20 05:25:38 fc1 kernel: usercopy: Kernel memory exposure attempt detected from SLUB object 'isert_cmnd' (offset 208, size 48)! (full log at the bottom) It seems we are slowly grinding through the various bits and pieces affected by the stricter usercopy "mode". *sigh* I really wish I could do more to help than simply svn up/clean-up/rerun Cheers Carsten Jul 20 05:25:38 fc1 kernel: [6437]: iscsi-scst: isert_cm_evt_handler:1707:isert_cm_evt:CONNECT_REQUEST(4) status:0 portal:00000000ae1efd14 cm_id:00000000b9246b38 Jul 20 05:25:38 fc1 kernel: [6437]: iscsi-scst: isert_device_create:1116:iser created device:00000000ecdd41e6 Jul 20 05:25:38 fc1 kernel: [6437]: iscsi-scst: isert_conn_qp_create:1252:iser created cm_id:00000000b9246b38 qp:0x20A Jul 20 05:25:38 fc1 kernel: [6437]: iscsi-scst: isert_cm_conn_req_handler:1528:iser accepted connection cm_id:00000000b9246b38 192.168.110.40->192.168.110.1 Jul 20 05:25:38 fc1 kernel: [6437]: iscsi-scst: isert_handle_wc:479:iser rx pdu before conn established, pdu saved Jul 20 05:25:38 fc1 kernel: [6669]: iscsi-scst: isert_cm_evt_handler:1707:isert_cm_evt:ESTABLISHED(9) status:0 portal:00000000ae1efd14 cm_id:00000000b9246b38 Jul 20 05:25:38 fc1 kernel: [6669]: iscsi-scst: isert_cm_connect_handler:1602:iser push saved rx pdu Jul 20 05:25:38 fc1 iscsi-scstd[28956]: iSER Connect to 192.168.110.1:3260 Jul 20 05:25:38 fc1 kernel: usercopy: Kernel memory exposure attempt detected from SLUB object 'isert_cmnd' (offset 208, size 48)! Jul 20 05:25:38 fc1 kernel: ------------[ cut here ]------------ Jul 20 05:25:38 fc1 kernel: kernel BUG at /build/linux-Sci2oS/linux-4.16.16/mm/usercopy.c:100! Jul 20 05:25:38 fc1 kernel: invalid opcode: 0000 [#1] SMP PTI Jul 20 05:25:38 fc1 kernel: Modules linked in: scst_vdisk(O) isert_scst(O) iscsi_scst(O) scst(O) ib_umad ib_ipoib mlx4_ib mlx4_core rdma_cm iw_cm ib_cm ib_core dlm configfs iptable_nat nf_nat_ipv4 iptable_filter xt_state ipt_REJECT nf_reject_ipv4 ipt_MASQUERADE nf_nat_masquerade_ipv4 nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_conntrack crc32c_generic xt_tcpudp binfmt_misc intel_rapl sb_edac x86_pkg_temp_thermal intel_powerclamp coretemp iTCO_wdt iTCO_vendor_support kvm_intel kvm irqbypass crct10dif_pclmul crc32_pclmul ghash_clmulni_intel intel_cstate ast intel_uncore ttm intel_rapl_perf drm_kms_helper pcspkr drm joydev lpc_ich mei_me mei ioatdma zfs(PO) zunicode(PO) zavl(PO) icp(PO) ipmi_poweroff ipmi_watchdog zcommon(PO) znvpair(PO) spl(O) sg evdev shpchp wmi acpi_power_meter acpi_pad button ipmi_si ipmi_devintf Jul 20 05:25:38 fc1 kernel: ipmi_msghandler psmouse ip_tables x_tables autofs4 xfs raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid0 multipath linear raid1 hid_generic usbhid hid md_mod ses enclosure sd_mod crc32c_intel ahci aesni_intel libahci mpt3sas aes_x86_64 xhci_pci crypto_simd ehci_pci xhci_hcd ehci_hcd cryptd glue_helper raid_class i2c_i801 libata scsi_transport_sas usbcore igb devlink usb_common nvme i2c_algo_bit dca scsi_mod nvme_core [last unloaded: mlx4_core] Jul 20 05:25:38 fc1 kernel: CPU: 1 PID: 28956 Comm: iscsi-scstd Tainted: P O 4.16.0-0.bpo.2-amd64 #1 Debian 4.16.16-2~bpo9+1 Jul 20 05:25:38 fc1 kernel: Hardware name: Supermicro Super Server/X10SRH-CF, BIOS 2.0b 04/14/2017 Jul 20 05:25:38 fc1 kernel: RIP: 0010:usercopy_abort+0x69/0x80 Jul 20 05:25:38 fc1 kernel: RSP: 0018:ffffad5a0d85fe18 EFLAGS: 00010286 Jul 20 05:25:38 fc1 kernel: RAX: 0000000000000066 RBX: 0000000000000030 RCX: 0000000000000000 Jul 20 05:25:38 fc1 kernel: RDX: 0000000000000000 RSI: ffff9391ff256738 RDI: ffff9391ff256738 Jul 20 05:25:38 fc1 kernel: RBP: 0000000000000030 R08: 0000000000000000 R09: 0000000000000b22 Jul 20 05:25:38 fc1 kernel: R10: ffffffffbde772a0 R11: ffff9391eb2f97b0 R12: 0000000000000001 Jul 20 05:25:38 fc1 kernel: R13: ffff9391d1094100 R14: ffff9391dc375100 R15: 0000000000000000 Jul 20 05:25:38 fc1 kernel: FS: 00007f1137558700(0000) GS:ffff9391ff240000(0000) knlGS:0000000000000000 Jul 20 05:25:38 fc1 kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Jul 20 05:25:38 fc1 kernel: CR2: 00007f113704b000 CR3: 0000002fa1ec6002 CR4: 00000000003606e0 Jul 20 05:25:38 fc1 kernel: DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 Jul 20 05:25:38 fc1 kernel: DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Jul 20 05:25:38 fc1 kernel: Call Trace: Jul 20 05:25:38 fc1 kernel: __check_heap_object+0xee/0x120 Jul 20 05:25:38 fc1 kernel: __check_object_size+0xb8/0x1a0 Jul 20 05:25:38 fc1 kernel: isert_read+0x80/0x2d0 [isert_scst] Jul 20 05:25:38 fc1 kernel: vfs_read+0x91/0x130 Jul 20 05:25:38 fc1 kernel: SyS_read+0x52/0xc0 Jul 20 05:25:38 fc1 kernel: ? SyS_fcntl+0x78/0xa0 Jul 20 05:25:38 fc1 kernel: do_syscall_64+0x6c/0x130 Jul 20 05:25:38 fc1 kernel: entry_SYSCALL_64_after_hwframe+0x3d/0xa2 Jul 20 05:25:38 fc1 kernel: RIP: 0033:0x7f113707e6d0 Jul 20 05:25:38 fc1 kernel: RSP: 002b:00007ffe3dbe1508 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 Jul 20 05:25:38 fc1 kernel: RAX: ffffffffffffffda RBX: 00005579cc801600 RCX: 00007f113707e6d0 Jul 20 05:25:38 fc1 kernel: RDX: 0000000000000030 RSI: 00005579cd5451a8 RDI: 0000000000000003 Jul 20 05:25:38 fc1 kernel: RBP: 00005579cc800ba0 R08: 00007f113733cf58 R09: 0000000000000001 Jul 20 05:25:38 fc1 kernel: R10: 0000000000004000 R11: 0000000000000246 R12: 00005579cd545070 Jul 20 05:25:38 fc1 kernel: R13: 00007f1137558698 R14: 000000000000000e R15: 00005579cd5451a8 Jul 20 05:25:38 fc1 kernel: Code: 0f 44 d0 53 48 c7 c0 89 d1 e3 bd 51 48 c7 c6 dd c6 e2 bd 41 53 48 89 f9 48 0f 45 f0 4c 89 d2 48 c7 c7 70 d2 e3 bd e8 21 18 ea ff <0f> 0b 49 c7 c1 a5 d2 e4 bd 4d 89 cb 4d 89 c8 eb a5 66 0f 1f 44 Jul 20 05:25:38 fc1 kernel: RIP: usercopy_abort+0x69/0x80 RSP: ffffad5a0d85fe18 Jul 20 05:25:38 fc1 kernel: ---[ end trace 1feaadf4fa11fff7 ]--- Jul 20 05:25:38 fc1 kernel: [28956]: iscsi-scst: iscsi_release:1199:Releasing allocated resources Jul 20 05:25:38 fc1 kernel: [6437]: iscsi-scst: isert_cm_evt_handler:1707:isert_cm_evt:DISCONNECTED(10) status:0 portal:00000000ae1efd14 cm_id:00000000b9246b38 Jul 20 05:25:38 fc1 kernel: [28956]: target_del_all:349:Deleting all targets Jul 20 05:25:38 fc1 kernel: [28956]: iscsi-scst: isert_portal_release:1912:iser portal cm_id:000000007db776fd releasing Jul 20 05:25:38 fc1 kernel: [28956]: iscsi-scst: isert_portal_release:1931:done releasing portal 00000000ae1efd14 Jul 20 05:25:38 fc1 kernel: [28956]: iscsi-scst: isert_portal_release:1912:iser portal cm_id:00000000e31141bb releasing Jul 20 05:25:38 fc1 kernel: [28956]: iscsi-scst: isert_portal_release:1931:done releasing portal 00000000ad1ad926 Jul 20 05:25:40 fc1 kernel: [6669]: iscsi-scst: isert_cm_evt_handler:1707:isert_cm_evt:TIMEWAIT_EXIT(15) status:0 portal:00000000ae1efd14 cm_id:00000000b9246b38 |