New: kmalloc Redzone overwritten in usb_get_device_descriptor

https://bugzilla.kernel.org/show_bug.cgi?id=220042

            Bug ID: 220042
           Summary: kmalloc Redzone overwritten in
                    usb_get_device_descriptor
           Product: Drivers
           Version: 2.5
          Hardware: ARM
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P3
         Component: USB
          Assignee: [email protected]
          Reporter: [email protected]
        Regression: No

Created attachment 308005
--> https://bugzilla.kernel.org/attachment.cgi?id=308005&action=edit
kernel config

Hi.

Asus Tinkerboard S (RK3288, armv7).
I get this error while booting, and every time I connect an USB device:

[   23.437577] [  T282]
=============================================================================
[   23.447578] [  T282] BUG kmalloc-64 (Tainted: G        W         ): kmalloc
Redzone overwritten
[   23.457246] [  T282]
-----------------------------------------------------------------------------
[   23.469617] [  T282] 0xc5818c52-0xc5818c53 @offset=3154. First byte 0x44
instead of 0xcc
[   23.478587] [  T282] FIX kmalloc-64: Restoring kmalloc Redzone
0xc5818c52-0xc5818c53=0xcc
[   23.487655] [  T282] Allocated in usb_get_device_descriptor+0x90/0x1a0
age=1713 cpu=2 pid=27
[   23.497031] [  T282]  usb_get_device_descriptor+0x90/0x1a0
[   23.503086] [  T282]  hub_port_init+0x15bc/0x26e8
[   23.508268] [  T282]  hub_port_connect+0xacc/0x2438
[   23.513642] [  T282]  hub_port_connect_change+0x218/0x500
[   23.519599] [  T282]  port_event+0xaa0/0xddc
[   23.524292] [  T282]  hub_event+0x458/0x9b0
[   23.528883] [  T282]  process_one_work+0x8a8/0x10b0
[   23.534258] [  T282]  worker_thread+0x784/0x10a0
[   23.539338] [  T282]  kthread+0x2e0/0x344
[   23.543738] [  T282]  ret_from_fork+0x14/0x28

I did a git bisect and this is the result:

# first bad commit: [fb5eda0dfe2256b468fc4e95207a4df88457274f] mm/kasan: Don't
store metadata inside kmalloc object when slub_debug_orig_size is on

I also saw a redzone error in usb hid driver, but I didn't get to bisect that one yet - kernel build is really slow on this SBC. I'm going to open a separate bug report for that when it's ready.

I'm attaching kernel config and complete error from dmesg. Thanks.

You may reply to this email to add a comment.

You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.kernel.org/show_bug.cgi?id=220042

--- Comment #1 from Marius Dinu ([email protected]) --- Created attachment 308006
--> https://bugzilla.kernel.org/attachment.cgi?id=308006&action=edit
dmesg

You may reply to this email to add a comment.

You are receiving this mail because:
You are watching the assignee of the bug.