linux-kernel - [ovl] e7aefd2650: kernel BUG at fs/overlayfs/dir.c:903!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date:   Fri, 04 Nov 2016 18:53:50 +0800
From:   kernel test robot <xiaolong.ye@...el.com>
To:     Miklos Szeredi <mszeredi@...hat.com>
Cc:     lkp@...org, linux-unionfs@...r.kernel.org,
        Miklos Szeredi <mszeredi@...e.cz>,
        LKML <linux-kernel@...r.kernel.org>
Subject: [ovl]  e7aefd2650: kernel BUG at fs/overlayfs/dir.c:903!


FYI, we noticed the following commit:

https://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/vfs.git overlayfs-next
commit e7aefd26508f4ae464d960c798c15fd06a6c0279 ("ovl: check lower existence of rename target")

in testcase: phoronix-test-suite
with following parameters:

	test: dbench-1.0.0


The Phoronix Test Suite is the most comprehensive testing and benchmarking platform available that provides an extensible framework for which new tests can be easily added.


on test machine: 16 threads Nehalem-EP with 5G memory

caused below changes:


+------------------------------------------------------------------+------------+------------+
|                                                                  | edca5bca9f | e7aefd2650 |
+------------------------------------------------------------------+------------+------------+
| boot_successes                                                   | 12         | 3          |
| boot_failures                                                    | 4          | 13         |
| invoked_oom-killer:gfp_mask=0x                                   | 4          | 4          |
| Mem-Info                                                         | 4          | 4          |
| Kernel_panic-not_syncing:Out_of_memory_and_no_killable_processes | 4          | 4          |
| kernel_BUG_at_fs/overlayfs/dir.c                                 | 0          | 9          |
| invalid_opcode:#[##]SMP                                          | 0          | 9          |
| RIP:ovl_rename[overlay]                                          | 0          | 9          |
| calltrace:SyS_rename                                             | 0          | 9          |
| Kernel_panic-not_syncing:Fatal_exception                         | 0          | 9          |
+------------------------------------------------------------------+------------+------------+



[   55.906147]         Started Run 2 @ 07:21:34
[   55.910355] 
[   55.938387] ------------[ cut here ]------------
[   55.943209] kernel BUG at fs/overlayfs/dir.c:903!
[   55.949545] invalid opcode: 0000 [#1] SMP
[   55.953753] Modules linked in: rpcsec_gss_krb5 nfsv4 dns_resolver nfsd auth_rpcgss ipmi_watchdog ipmi_poweroff ipmi_devintf overlay btrfs xor raid6_pq dm_mod sg sd_mod coretemp snd_pcm kvm_intel snd_timer ata_generic pata_acpi snd mptsas ppdev kvm pata_jmicron soundcore mptscsih i7core_edac ata_piix serio_raw pcspkr irqbypass crc32c_intel edac_core mptbase ipmi_si parport_pc libata scsi_transport_sas parport ipmi_msghandler shpchp acpi_cpufreq
[   55.997082] CPU: 15 PID: 1468 Comm: dbench Not tainted 4.9.0-rc3-00021-ge7aefd26 #1
[   56.005092] Hardware name: Supermicro X8DTN/X8DTN, BIOS 4.6.3 03/05/2009
[   56.012006] task: ffff88007b7a4900 task.stack: ffffc90002720000
[   56.018115] RIP: 0010:[<ffffffffa010ab78>]  [<ffffffffa010ab78>] ovl_rename+0x488/0x490 [overlay]
[   56.027376] RSP: 0018:ffffc90002723dc8  EFLAGS: 00010202
[   56.032864] RAX: 0000000000000000 RBX: ffff880108c6aa80 RCX: 0000000000000000
[   56.040173] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88011daa7680
[   56.047478] RBP: ffffc90002723e20 R08: ffff88015c3dd950 R09: ffff880108c0b680
[   56.054784] R10: ffff880162e19778 R11: ffff880108c22638 R12: ffff880162e19740
[   56.062091] R13: ffff880108c6aa80 R14: ffff88011daa7680 R15: ffff880108c22600
[   56.069406] FS:  00007f2839101700(0000) GS:ffff88017fdc0000(0000) knlGS:0000000000000000
[   56.077801] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   56.083718] CR2: 00000000020a6000 CR3: 0000000074a26000 CR4: 00000000000006e0
[   56.091028] Stack:
[   56.093211]  ffff880108c0b680 0000000000000000 0000000400000000 ffff88007ab1a000
[   56.101146]  ffffc90000003e00 0000000000000000 ffff88010edbb908 ffff88010edbb908
[   56.109094]  0000000000000000 ffff880162e19740 ffff88011daa7680 ffffc90002723e98
[   56.117029] Call Trace:
[   56.119658]  [<ffffffff81220828>] vfs_rename+0x728/0x960
[   56.125144]  [<ffffffff8121dd00>] ? trailing_symlink+0x1d0/0x240
[   56.131324]  [<ffffffff81224b8f>] SyS_rename+0x37f/0x3a0
[   56.136813]  [<ffffffff81955e37>] entry_SYSCALL_64_fastpath+0x1a/0xa9
[   56.143425] Code: 00 00 48 c7 c7 80 ef 10 a0 e8 05 59 f7 e0 e9 54 fe ff ff 48 8b 7b 30 48 8b 75 a8 89 45 cc e8 b0 f4 ff ff 8b 45 cc e9 20 ff ff ff <0f> 0b 66 0f 1f 44 00 00 66 66 66 66 90 55 48 89 e5 41 57 41 56 
[   56.166628] RIP  [<ffffffffa010ab78>] ovl_rename+0x488/0x490 [overlay]
[   56.173398]  RSP <ffffc90002723dc8>
[   56.177078] ------------[ cut here ]------------
[   56.177086] ---[ end trace 49473d4aec442190 ]---
[   56.177087] Kernel panic - not syncing: Fatal exception


To reproduce:

        git clone git://git.kernel.org/pub/scm/linux/kernel/git/wfg/lkp-tests.git
        cd lkp-tests
        bin/lkp install job.yaml  # job file is attached in this email
        bin/lkp run     job.yaml



Thanks,
Kernel Test Robot

View attachment "config-4.9.0-rc3-00021-ge7aefd26" of type "text/plain" (153603 bytes)

View attachment "job-script" of type "text/plain" (3998 bytes)

Download attachment "dmesg.xz" of type "application/octet-stream" (22184 bytes)

View attachment "job.yaml" of type "text/plain" (3276 bytes)