[dm-devel] oops s dm-integrity (fwd)

[Mikulas Patocka]

On Thu, 31 Mar 2022, Mike Snitzer wrote:

> Not seen it, looks like Milan is running cryotsetup 'make check' in a
> KVM guest on a 5.17-rc7 kernel.
> 
> I tested dm-5.18 like crazy with cryptsetup's testsuite.  It was based
> on 5.17-rc2 (and a ton of block changes).
> 
> Have you been able to reproduce on final 5.17 (or even same kernel as Milan)?

I've tried cryptsetup "make check" on the current 5.18 (with slab 
debugging enabled) and got these stacktraces. There's clearly some memory 
corruption going on. I'll continue to investigate it.

Mikulas

[13668.733488] Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015
[13668.735277] Call trace:
[13668.735951]  dump_backtrace.part.0+0xb8/0xcc
[13668.737085]  show_stack+0x14/0x30
[13668.737973]  dump_stack_lvl+0x64/0x7c
[13668.738978]  dump_stack+0x14/0x2c
[13668.739868]  print_trailer+0x14c/0x15c
[13668.740811]  check_bytes_and_report+0xf4/0x140
[13668.741903]  check_object+0x1a4/0x274
[13668.742815]  free_debug_processing+0x188/0x38c
[13668.743904]  __slab_free+0x27c/0x434
[13668.744788]  kfree+0x23c/0x27c
[13668.745554]  kvfree+0x34/0x40
[13668.746355]  dm_integrity_dtr+0x88/0x35c [dm_integrity]
[13668.747795]  dm_table_destroy+0x54/0x11c [dm_mod]
[13668.749130]  __dm_destroy+0x154/0x29c [dm_mod]
[13668.750383]  dm_destroy+0x10/0x20 [dm_mod]
[13668.751553]  dev_remove+0xf4/0x150 [dm_mod]
[13668.752733]  ctl_ioctl+0x244/0x660 [dm_mod]
[13668.753897]  dm_ctl_ioctl+0xc/0x20 [dm_mod]
[13668.755060]  __arm64_sys_ioctl+0xac/0xd0
[13668.756156]  el0_svc_common.constprop.0+0x5c/0x134
[13668.757449]  do_el0_svc+0x1c/0x2c
[13668.758340]  el0_svc+0x14/0x50
[13668.759187]  el0t_64_sync_handler+0x9c/0x120
[13668.760356]  el0t_64_sync+0x148/0x14c

[13639.738726] Call trace:
[13639.741794]  __switch_to+0xe8/0x140
[13639.744081]  dstopt_offload+0xba560/0x10c330
[13639.746941]  print_trailer+0xd0/0x15c
[13639.750017]  check_bytes_and_report+0xf4/0x140
[13639.752944]  check_object+0x1a4/0x274
[13639.756056]  free_debug_processing+0x188/0x38c
[13639.758998]  __slab_free+0x27c/0x434
[13639.762141]  kfree+0x23c/0x27c
[13639.765058]  kvfree+0x34/0x40
[13639.767840]  dm_integrity_dtr+0x88/0x35c [dm_integrity]
[13639.770597]  dm_table_destroy+0x54/0x11c [dm_mod]
[13639.773937]  __dm_destroy+0x154/0x29c [dm_mod]
[13639.777147]  dm_destroy+0x10/0x20 [dm_mod]
[13639.780271]  dev_remove+0xf4/0x150 [dm_mod]
[13639.783318]  ctl_ioctl+0x244/0x660 [dm_mod]
[13639.786384]  dm_ctl_ioctl+0xc/0x20 [dm_mod]
[13639.789452]  __arm64_sys_ioctl+0xac/0xd0
[13639.792516]  el0_svc_common.constprop.0+0x5c/0x134
[13639.795510]  do_el0_svc+0x1c/0x2c
[13639.798741]  el0_svc+0x14/0x50
[13639.801591]  el0t_64_sync_handler+0x9c/0x120
[13639.804378]  el0t_64_sync+0x148/0x14c

[13618.686535] =============================================================================
[13618.687921] BUG kmalloc-128k (Not tainted): Right Redzone overwritten
[13618.688984] -----------------------------------------------------------------------------
[13618.688984] 
[13618.690531] 0xfffffc00ccec0000-0xfffffc00ccec0007 @offset=262144. First byte 0x26 instead of 0xcc
[13618.691980] Allocated in 0xf3e51e7b9f122643 age=86 cpu=3 pid=23374
[13618.693031]  0xfffffe00a470735c
[13618.693581]  __kmalloc+0x280/0x290
[13618.694162]  kvmalloc_node+0x54/0xd0
[13618.694780]  dm_integrity_ctr+0xfcc/0x14cc [dm_integrity]
[13618.695731]  dm_table_add_target+0x11c/0x30c [dm_mod]
[13618.696815]  table_load+0x11c/0x354 [dm_mod]
[13618.697726]  ctl_ioctl+0x244/0x660 [dm_mod]
[13618.698619]  dm_ctl_ioctl+0xc/0x20 [dm_mod]
[13618.699485]  __arm64_sys_ioctl+0xac/0xd0
[13618.700279]  el0_svc_common.constprop.0+0x5c/0x134
[13618.701259]  do_el0_svc+0x1c/0x2c
[13618.701943]  el0_svc+0x14/0x50
[13618.702561]  el0t_64_sync_handler+0x9c/0x120
[13618.703411]  el0t_64_sync+0x148/0x14c
[13618.704149] Freed in kvfree+0x34/0x40 age=99 cpu=2 pid=23359
[13618.705316]  kfree+0x23c/0x27c
[13618.705954]  kvfree+0x34/0x40
[13618.706567]  dm_integrity_dtr+0x88/0x35c [dm_integrity]
[13618.707606]  dm_table_destroy+0x54/0x11c [dm_mod]
[13618.708627]  __dm_destroy+0x154/0x29c [dm_mod]
[13618.709596]  dm_destroy+0x10/0x20 [dm_mod]
[13618.710458]  dev_remove+0xf4/0x150 [dm_mod]
[13618.711343]  ctl_ioctl+0x244/0x660 [dm_mod]
[13618.712227]  dm_ctl_ioctl+0xc/0x20 [dm_mod]
[13618.713097]  __arm64_sys_ioctl+0xac/0xd0
[13618.713916]  el0_svc_common.constprop.0+0x5c/0x134
[13618.714884]  do_el0_svc+0x1c/0x2c
[13618.715572]  el0_svc+0x14/0x50