| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Mon, 30 Dec 2019 08:54:43 +0800
From: kernel test robot <rong.a.chen@...el.com>
To: yu kuai <yukuai3@...wei.com>
Cc: darrick.wong@...cle.com, bfoster@...hat.com, dchinner@...hat.com,
sandeen@...deen.net, cmaiolino@...hat.com, hch@....de,
linux-xfs@...r.kernel.org, linux-kernel@...r.kernel.org,
yukuai3@...wei.com, yi.zhang@...wei.com, zhengbin13@...wei.com,
houtao1@...wei.com, lkp@...ts.01.org
Subject: [xfs] 37e4cf4b7a: Assertion_failed
FYI, we noticed the following commit (built with gcc-7):
commit: 37e4cf4b7af77e33a78786488973daec43c3e70b ("[PATCH V2] xfs: fix stale data exposure problem when punch hole, collapse range or zero range across a delalloc extent")
url: https://github.com/0day-ci/linux/commits/yu-kuai/xfs-fix-stale-data-exposure-problem-when-punch-hole-collapse-range-or-zero-range-across-a-delalloc-extent/20191228-113941
base: https://git.kernel.org/cgit/fs/xfs/xfs-linux.git for-next
in testcase: xfstests
with following parameters:
disk: 4HDD
fs: xfs
test: generic-group22
test-description: xfstests is a regression test suite for xfs and other files ystems.
test-url: git://git.kernel.org/pub/scm/fs/xfs/xfstests-dev.git
on test machine: qemu-system-x86_64 -enable-kvm -cpu SandyBridge -smp 2 -m 8G
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+--------------------------------------------------+------------+------------+
| | 5084bf6b20 | 37e4cf4b7a |
+--------------------------------------------------+------------+------------+
| boot_successes | 12 | 0 |
| boot_failures | 2 | 6 |
| WARNING:at_fs/iomap/direct-io.c:#iomap_dio_actor | 2 | |
| RIP:iomap_dio_actor | 2 | |
| Assertion_failed | 0 | 6 |
| kernel_BUG_at_fs/xfs/xfs_message.c | 0 | 6 |
| invalid_opcode:#[##] | 0 | 6 |
| RIP:assfail[xfs] | 0 | 6 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 6 |
+--------------------------------------------------+------------+------------+
If you fix the issue, kindly add following tag
Reported-by: kernel test robot <rong.a.chen@...el.com>
[ 86.953886]
[ 86.979401] run fstests generic/439 at 2019-12-29 10:44:00
[ 87.792542] XFS (vdd): Mounting V5 Filesystem
[ 87.801124] XFS (vdd): Ending clean mount
[ 87.804814] xfs filesystem being mounted at /fs/scratch supports timestamps until 2038 (0x7fffffff)
[ 87.815418] XFS: Assertion failed: copied > 0, file: fs/xfs/libxfs/xfs_inode_fork.c, line: 576
[ 87.817076] ------------[ cut here ]------------
[ 87.818201] kernel BUG at fs/xfs/xfs_message.c:110!
[ 87.819480] invalid opcode: 0000 [#1] SMP PTI
[ 87.820445] CPU: 1 PID: 11793 Comm: xfs_io Not tainted 5.5.0-rc1-00010-g37e4cf4b7af77 #2
[ 87.822155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 87.824389] RIP: 0010:assfail+0x26/0x30 [xfs]
[ 87.825814] Code: c3 0f 1f 00 66 66 66 66 90 41 89 c8 48 89 d1 48 89 f2 48 c7 c6 b0 3c 56 c0 e8 66 f9 ff ff 80 3d 0b c0 0d 00 00 75 03 0f 0b c3 <0f> 0b 0f 1f 84 00 00 00 00 00 66 66 66 66 90 48 63 f6 6a 01 49 89
[ 87.830959] RSP: 0018:ffffae89467a3b88 EFLAGS: 00010202
[ 87.832042] RAX: 0000000000000000 RBX: ffff92f01a3de048 RCX: 0000000000000000
[ 87.833318] RDX: 00000000ffffffc0 RSI: 000000000000000a RDI: ffffffffc0556050
[ 87.834672] RBP: 000ffffffffe0000 R08: 0000000000000000 R09: 0000000000000000
[ 87.835980] R10: 0000000000000000 R11: f000000000000000 R12: ffff92f03c91cd50
[ 87.837191] R13: ffff92f01a3de000 R14: 0000000000000000 R15: ffff92f01502f9c0
[ 87.838510] FS: 00007feeaaf6a700(0000) GS:ffff92f07fd00000(0000) knlGS:0000000000000000
[ 87.840122] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 87.841265] CR2: 00007feeaa793ff8 CR3: 00000001c94ce000 CR4: 00000000000406e0
[ 87.842549] Call Trace:
[ 87.843431] xfs_iextents_copy+0x20e/0x270 [xfs]
[ 87.844507] xfs_inode_item_format_data_fork+0x1a0/0x510 [xfs]
[ 87.845739] ? __kmalloc+0x5d/0x270
[ 87.846664] ? kmem_alloc+0x7b/0x140 [xfs]
[ 87.847644] xfs_inode_item_format+0x2ba/0x490 [xfs]
[ 87.848736] ? xfs_log_commit_cil+0x249/0x7f0 [xfs]
[ 87.849844] ? xfs_inode_item_format_attr_fork+0x4c0/0x4c0 [xfs]
[ 87.851057] xfs_log_commit_cil+0x249/0x7f0 [xfs]
[ 87.852087] ? xfs_bmap_split_extent+0xaf/0xc0 [xfs]
[ 87.853196] __xfs_trans_commit+0xaf/0x380 [xfs]
[ 87.854363] xfs_bmap_split_extent+0xaf/0xc0 [xfs]
[ 87.855516] try_split_da_extent+0xde/0x120 [xfs]
[ 87.856645] xfs_file_fallocate+0x17c/0x490 [xfs]
[ 87.857753] ? __inode_security_revalidate+0x73/0x90
[ 87.858873] ? selinux_file_permission+0x12b/0x140
[ 87.860374] vfs_fallocate+0x13f/0x270
[ 87.861426] ksys_fallocate+0x3c/0x70
[ 87.862403] __x64_sys_fallocate+0x1a/0x20
[ 87.863345] do_syscall_64+0x5b/0x1f0
[ 87.864404] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 87.865447] RIP: 0033:0x7feeaa875460
[ 87.866426] Code: f5 55 53 49 89 cc 48 89 d5 89 fb 48 83 ec 18 e8 b6 50 01 00 49 63 f5 41 89 c0 48 63 fb 4d 89 e2 48 89 ea b8 1d 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 1b 44 89 c7 89 44 24 0c e8 ec 50 01 00 8b 44
[ 87.869206] RSP: 002b:00007ffe927041f0 EFLAGS: 00000293 ORIG_RAX: 000000000000011d
[ 87.870573] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007feeaa875460
[ 87.871818] RDX: 000000000000f000 RSI: 0000000000000003 RDI: 0000000000000004
[ 87.873057] RBP: 000000000000f000 R08: 0000000000000000 R09: 000000000000004b
[ 87.874332] R10: 0000000000016800 R11: 0000000000000293 R12: 0000000000016800
[ 87.875520] R13: 0000000000000003 R14: 000055f9c7b3de10 R15: 000055f9c7b3d400
[ 87.876702] Modules linked in: xfs libcrc32c dm_mod bochs_drm drm_vram_helper intel_rapl_msr drm_ttm_helper sr_mod intel_rapl_common cdrom ttm sg crct10dif_pclmul crc32_pclmul crc32c_intel ata_generic pata_acpi ghash_clmulni_intel drm_kms_helper ppdev syscopyarea sysfillrect sysimgblt fb_sys_fops drm aesni_intel crypto_simd snd_pcm ata_piix cryptd glue_helper snd_timer snd joydev floppy soundcore serio_raw pcspkr libata parport_pc parport i2c_piix4 ip_tables
[ 87.882768] ---[ end trace aba902d906828d68 ]---
[ 87.883868] RIP: 0010:assfail+0x26/0x30 [xfs]
[ 87.884868] Code: c3 0f 1f 00 66 66 66 66 90 41 89 c8 48 89 d1 48 89 f2 48 c7 c6 b0 3c 56 c0 e8 66 f9 ff ff 80 3d 0b c0 0d 00 00 75 03 0f 0b c3 <0f> 0b 0f 1f 84 00 00 00 00 00 66 66 66 66 90 48 63 f6 6a 01 49 89
[ 87.889212] RSP: 0018:ffffae89467a3b88 EFLAGS: 00010202
[ 87.890791] RAX: 0000000000000000 RBX: ffff92f01a3de048 RCX: 0000000000000000
[ 87.892772] RDX: 00000000ffffffc0 RSI: 000000000000000a RDI: ffffffffc0556050
[ 87.894745] RBP: 000ffffffffe0000 R08: 0000000000000000 R09: 0000000000000000
[ 87.896730] R10: 0000000000000000 R11: f000000000000000 R12: ffff92f03c91cd50
[ 87.898863] R13: ffff92f01a3de000 R14: 0000000000000000 R15: ffff92f01502f9c0
[ 87.900778] FS: 00007feeaaf6a700(0000) GS:ffff92f07fd00000(0000) knlGS:0000000000000000
[ 87.902976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 87.904563] CR2: 00007feeaa793ff8 CR3: 00000001c94ce000 CR4: 00000000000406e0
[ 87.906599] Kernel panic - not syncing: Fatal exception
[ 87.908732] Kernel Offset: 0xe400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
Elapsed time: 120
qemu-img create -f qcow2 disk-vm-snb-d4cffdcee6f1-0 256G
To reproduce:
# build kernel
cd linux
cp config-5.5.0-rc1-00010-g37e4cf4b7af77 .config
make HOSTCC=gcc-7 CC=gcc-7 ARCH=x86_64 olddefconfig prepare modules_prepare bzImage modules
make HOSTCC=gcc-7 CC=gcc-7 ARCH=x86_64 INSTALL_MOD_PATH=<mod-install-dir> modules_install
cd <mod-install-dir>
find lib/ | cpio -o -H newc --quiet | gzip > modules.cgz
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> -m modules.cgz job-script # job-script is attached in this email
Thanks,
Rong Chen
View attachment "config-5.5.0-rc1-00010-g37e4cf4b7af77" of type "text/plain" (202451 bytes)
View attachment "job-script" of type "text/plain" (5495 bytes)
Download attachment "dmesg.xz" of type "application/x-xz" (17708 bytes)
Powered by blists - more mailing lists