PAX: size overflow detected in function ext4_mark_iloc_dirty

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

PAX: size overflow detected in function ext4_mark_iloc_dirty

Postby saironiq » Wed Nov 25, 2015 3:38 am

Hi,

After updating to 4.2.6.201511211841-1 on Arch Linux I'm getting ext4 filesystem freezes when transmission-daemon calls fallocate:

Code: Select all
Nov 25 07:40:07 wardrobe systemd[1]: Started Transmission BitTorrent Daemon.
-- Subject: Unit transmission.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit transmission.service has finished starting up.
--
-- The start-up result is done.
Nov 25 07:40:08 wardrobe transmission-daemon[986]: [2015-11-25 07:40:08.782 CET] UDP Failed to set receive buffer: requested 4194304, got 425984 (tr-udp.c:78)
Nov 25 07:40:08 wardrobe transmission-daemon[986]: [2015-11-25 07:40:08.782 CET] UDP Failed to set send buffer: requested 1048576, got 425984 (tr-udp.c:89)
Nov 25 07:42:06 wardrobe kernel: PAX: size overflow detected in function ext4_mark_iloc_dirty fs/ext4/inode.c:4441 cicus.939_397 max, count: 219, decl: i_size_lo; num: 0; context: ext4_inode;
Nov 25 07:42:06 wardrobe kernel: CPU: 1 PID: 987 Comm: transmission-da Not tainted 4.2.6.201511211841-1-grsec #1
Nov 25 07:42:06 wardrobe kernel: Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./Q1900DC-ITX, BIOS P1.20 07/08/2014
Nov 25 07:42:06 wardrobe kernel:  ffffffff8ba04847 07acac31f91a3349 0000000000000000 ffffffffc03ba24b
Nov 25 07:42:06 wardrobe kernel:  ffffc90003c03b78 ffffffff8b5d49e8 000000000000009e ffffffffc03ba43a
Nov 25 07:42:06 wardrobe kernel:  ffffc90003c03ba8 ffffffff8b1a6e54 ffffc90003c03c68 ffff8800b14f7a90
Nov 25 07:42:06 wardrobe kernel: Call Trace:
Nov 25 07:42:06 wardrobe kernel:  [<ffffffffc03ba24b>] ? ext4_exit_fs+0x3e35/0x2916a [ext4]
Nov 25 07:42:06 wardrobe kernel:  [<ffffffff8b5d49e8>] dump_stack+0x4c/0x7f
Nov 25 07:42:06 wardrobe kernel:  [<ffffffffc03ba43a>] ? ext4_exit_fs+0x4024/0x2916a [ext4]
Nov 25 07:42:06 wardrobe kernel:  [<ffffffff8b1a6e54>] report_size_overflow+0x34/0x40
Nov 25 07:42:06 wardrobe kernel:  [<ffffffffc036be65>] ext4_mark_iloc_dirty+0x7f5/0x890 [ext4]
Nov 25 07:42:06 wardrobe kernel:  [<ffffffffc0397274>] ? __ext4_journal_get_write_access+0x34/0x80 [ext4]
Nov 25 07:42:06 wardrobe kernel:  [<ffffffffc036c024>] ext4_mark_inode_dirty+0x74/0x290 [ext4]
Nov 25 07:42:06 wardrobe kernel:  [<ffffffffc038c08a>] ext4_alloc_file_blocks.isra.10+0x31a/0x5e0 [ext4]
Nov 25 07:42:06 wardrobe kernel:  [<ffffffffc0395a6b>] ext4_fallocate+0x15b/0xce0 [ext4]
Nov 25 07:42:06 wardrobe kernel:  [<ffffffff8b1a26f5>] ? __sb_start_write+0x55/0x110
Nov 25 07:42:06 wardrobe kernel:  [<ffffffff8b19c067>] vfs_fallocate+0x147/0x250
Nov 25 07:42:06 wardrobe kernel:  [<ffffffff8b1c282d>] ? __fget_light+0x2d/0x70
Nov 25 07:42:06 wardrobe kernel:  [<ffffffff8b19d118>] SyS_fallocate+0x48/0x80
Nov 25 07:42:06 wardrobe kernel:  [<ffffffff8b5dabf0>] entry_SYSCALL_64_fastpath+0x12/0x8a
Nov 25 07:42:06 wardrobe kernel: note: transmission-da[987] exited with preempt_count 1
Nov 25 07:42:06 wardrobe systemd[1]: transmission.service: Main process exited, code=killed, status=9/KILL
Nov 25 07:42:06 wardrobe systemd[1]: transmission.service: Unit entered failed state.
Nov 25 07:42:06 wardrobe systemd[1]: transmission.service: Failed with result 'signal'.
Nov 25 07:44:58 wardrobe kernel: INFO: task jbd2/sdb1-8:502 blocked for more than 120 seconds.
Nov 25 07:44:58 wardrobe kernel:       Not tainted 4.2.6.201511211841-1-grsec #1
Nov 25 07:44:58 wardrobe kernel: "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
Nov 25 07:44:58 wardrobe kernel: jbd2/sdb1-8     D ffff88013fc0fc00     0   502      2 0x00000000
Nov 25 07:44:58 wardrobe kernel:  ffffc90000a5bc78 0000000000000046 ffffc90000a5bc18 ffffc90000a5bdb0
Nov 25 07:44:58 wardrobe kernel:  ffff8800b47a5918 ffff8800b47a5918 ffffffff8ba04980 ffff88013a44e900
Nov 25 07:44:58 wardrobe kernel:  0000000000000000 0000000000000246 ffffc90000a5bd98 96ce7299524505ac
Nov 25 07:44:58 wardrobe kernel: Call Trace:
Nov 25 07:44:58 wardrobe kernel:  [<ffffffff8b5d6859>] schedule+0x39/0x90
Nov 25 07:44:58 wardrobe kernel:  [<ffffffffc033e449>] jbd2_journal_commit_transaction+0x229/0x1700 [jbd2]
Nov 25 07:44:58 wardrobe kernel:  [<ffffffff8b09dcd3>] ? dequeue_task_fair+0x363/0x740
Nov 25 07:44:58 wardrobe kernel:  [<ffffffff8b04cfd0>] ? native_load_tls+0x40/0x50
Nov 25 07:44:58 wardrobe kernel:  [<ffffffff8b002577>] ? __switch_to+0x2a7/0x4c0
Nov 25 07:44:58 wardrobe kernel:  [<ffffffff8b0aa4f0>] ? wake_up_bit+0x40/0x40
Nov 25 07:44:58 wardrobe kernel:  [<ffffffff8b0cb187>] ? try_to_del_timer_sync+0x57/0x90
Nov 25 07:44:58 wardrobe kernel:  [<ffffffffc0342bb5>] kjournald2+0xc5/0x250 [jbd2]
Nov 25 07:44:58 wardrobe kernel:  [<ffffffff8b0aa4f0>] ? wake_up_bit+0x40/0x40
Nov 25 07:44:58 wardrobe kernel:  [<ffffffffc0342af0>] ? commit_timeout+0x30/0x30 [jbd2]
Nov 25 07:44:58 wardrobe kernel:  [<ffffffff8b088890>] kthread+0xe0/0x100
Nov 25 07:44:58 wardrobe kernel:  [<ffffffff8b0887b0>] ? kthread_worker_fn+0x160/0x160
Nov 25 07:44:58 wardrobe kernel:  [<ffffffff8b5db00e>] ret_from_fork+0x3e/0x70
Nov 25 07:44:58 wardrobe kernel:  [<ffffffff8b0887b0>] ? kthread_worker_fn+0x160/0x160


Code: Select all
Linux wardrobe 4.2.6.201511211841-1-grsec #1 SMP PREEMPT Tue Nov 24 04:26:24 EST 2015 x86_64 GNU/Linux


Thank you for taking security seriously, I really love your work! <3
saironiq
 
Posts: 6
Joined: Wed Nov 25, 2015 3:21 am

Re: PAX: size overflow detected in function ext4_mark_iloc_d

Postby ephox » Wed Nov 25, 2015 7:47 pm

Thanks for the report, it will be fixed in the next grsec patch.
ephox
 
Posts: 134
Joined: Tue Mar 20, 2012 4:36 pm

Re: PAX: size overflow detected in function ext4_mark_iloc_d

Postby saironiq » Fri Dec 04, 2015 1:36 pm

Confirming it's working now, thank you!
saironiq
 
Posts: 6
Joined: Wed Nov 25, 2015 3:21 am


Return to grsecurity support