https://bugzilla.kernel.org/show_bug.cgi?id=88631
Bug ID: 88631
Summary: unable to handle kernel paging request at __free_pages
Product: File System
Version: 2.5
Kernel Version: 3.18.0-rc5
Hardware: x86-64
OS: Linux
Tree: Mainline
Status: NEW
Severity: normal
Priority: P1
Component: XFS
Assignee: xfs-masters@xxxxxxxxxxx
Reporter: rnsastry@xxxxxxxxxxxxxxxxxx
Regression: No
While fuzzing xfs with fsfuzzer the following kernel crash occured. Upon
request mangled fs image will be provided.
[ 39.638471] loop: module loaded
[ 39.887766] SGI XFS with ACLs, security attributes, no debug enabled
[ 39.890782] XFS (loop0): Mounting V4 Filesystem
[ 39.914338] XFS (loop0): Starting recovery (logdev: internal)
[ 39.914382] XFS (loop0): log record CRC mismatch: found 0xbdc26540, expected
0xda046ed1.
[ 39.914577] ffffc90000c44000: 00 00 00 01 00 00 00 00 69 01 00 00 bf 07 a8
b4 ........i.......
[ 39.914749] ffffc90000c44010: 00 00 00 bf 69 00 00 00 4e 41 52 54 2a 00 00
00 ....i...NART*...
[ 39.914928] XFS (loop0): xlog_recover_process_ophdr: bad clientid 0x38
[ 39.914943] BUG: unable to handle kernel paging request at 000000005e7188cf
[ 39.915186] IP: [<ffffffff81178d35>] __free_pages+0x5/0x50
[ 39.915253] PGD 0
[ 39.915253] Oops: 0000 [#1] SMP
[ 39.915253] Modules linked in: xfs libcrc32c loop nf_conntrack_netbios_ns
nf_conntrack_broadcast ip6t_REJECT nf_reject_ipv6 nf_conntrack_ipv6
nf_defrag_ipv6 nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack
cfg80211 rfkill ebtable_nat ebtable_broute bridge stp llc ebtable_filter
ebtables ip6table_mangle ip6table_security ip6table_raw ip6table_filter
ip6_tables iptable_mangle iptable_security iptable_raw ppdev i2c_piix4 i2c_core
microcode pcspkr serio_raw parport_pc pvpanic parport floppy nfsd auth_rpcgss
ecryptfs nfs_acl lockd grace encrypted_keys sunrpc trusted tpm virtio_blk
virtio_pci ata_generic virtio_ring virtio e1000 pata_acpi
[ 39.915253] CPU: 0 PID: 989 Comm: mount Not tainted 3.18.0-rc5 #1
[ 39.915253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
1.7.5-20140709_153950- 04/01/2014
[ 39.915253] task: ffff88003cf94a00 ti: ffff88003765c000 task.ti:
ffff88003765c000
[ 39.915253] RIP: 0010:[<ffffffff81178d35>] [<ffffffff81178d35>]
__free_pages+0x5/0x50
[ 39.915253] RSP: 0018:ffff88003765fb00 EFLAGS: 00010202
[ 39.915253] RAX: ffff880028521940 RBX: 0000000000000001 RCX:
0000000000000003
[ 39.915253] RDX: 0000000000000000 RSI: 0000000000000000 RDI:
000000005e7188b3
[ 39.915253] RBP: ffff88003765fb28 R08: 0000000000000ff0 R09:
0000000000000001
[ 39.915253] R10: 0000000000000001 R11: ffff88003765f70e R12:
ffff880028bca180
[ 39.915253] R13: ffffffffa036407e R14: 000000000000001a R15:
ffff880028bca000
[ 39.915253] FS: 00007f9e2ae5e880(0000) GS:ffff88003fc00000(0000)
knlGS:0000000000000000
[ 39.915253] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[ 39.915253] CR2: 000000005e7188cf CR3: 000000003c5a1000 CR4:
00000000000006f0
[ 39.915253] Stack:
[ 39.915253] ffffffffa033e668 ffff88003765fb38 ffff88003c9e2c00
0000000000000002
[ 39.915253] ffff8800284bf000 ffff88003765fb38 ffffffffa036407e
ffff88003765fc48
[ 39.915253] ffffffffa0368722 ffff88003765fbc8 ffffffff810d3ea4
0000000000000001
[ 39.915253] Call Trace:
[ 39.915253] [<ffffffffa033e668>] ? xfs_buf_free+0x88/0x130 [xfs]
[ 39.915253] [<ffffffffa036407e>] xlog_put_bp+0xe/0x10 [xfs]
[ 39.915253] [<ffffffffa0368722>] xlog_do_recovery_pass+0x372/0x570 [xfs]
[ 39.915253] [<ffffffff810d3ea4>] ? vprintk_emit+0x384/0x510
[ 39.915253] [<ffffffffa0368989>] xlog_do_log_recovery+0x69/0xd0 [xfs]
[ 39.915253] [<ffffffffa0368a0a>] xlog_do_recover+0x1a/0xf0 [xfs]
[ 39.915253] [<ffffffffa036975c>] xlog_recover+0x8c/0xf0 [xfs]
[ 39.915253] [<ffffffffa035db0c>] xfs_log_mount+0x24c/0x2c0 [xfs]
[ 39.915253] [<ffffffffa035551d>] xfs_mountfs+0x44d/0x7a0 [xfs]
[ 39.915253] [<ffffffffa03588ca>] xfs_fs_fill_super+0x2ba/0x330 [xfs]
[ 39.915253] [<ffffffff811e89b4>] mount_bdev+0x194/0x1d0
[ 39.915253] [<ffffffffa0358610>] ? xfs_parseargs+0xbe0/0xbe0 [xfs]
[ 39.915253] [<ffffffffa03568e5>] xfs_fs_mount+0x15/0x20 [xfs]
[ 39.915253] [<ffffffff811e92d9>] mount_fs+0x39/0x1b0
[ 39.915253] [<ffffffff811923e5>] ? __alloc_percpu+0x15/0x20
[ 39.915253] [<ffffffff812038b7>] vfs_kern_mount+0x67/0x110
[ 39.915253] [<ffffffff812065b4>] do_mount+0x204/0xad0
[ 39.915253] [<ffffffff812071bb>] SyS_mount+0x8b/0xe0
[ 39.915253] [<ffffffff816e6b69>] system_call_fastpath+0x12/0x17
[ 39.915253] Code: 74 1c 48 8b 03 90 48 8b 7b 08 48 83 c3 10 44 89 ea 4c 89
e6 ff d0 48 8b 03 48 85 c0 75 e8 eb a9 66 0f 1f 44 00 00 0f 1f 44 00 00 <8b> 47
1c 55 48 89 e5 85 c0 74 29 3e ff 4f 1c 74 0a 5d c3 0f 1f
[ 39.915253] RIP [<ffffffff81178d35>] __free_pages+0x5/0x50
[ 39.915253] RSP <ffff88003765fb00>
[ 39.915253] CR2: 000000005e7188cf
[ 39.934763] ---[ end trace 771b409f9d94bcb7 ]---
--
You are receiving this mail because:
You are the assignee for the bug.
|