* Sunil Mushran (Sunil.Mushran at oracle.com) wrote:> Eric Sesterhenn wrote: >> i do some regular filesystem fuzzing, based on a modified version >> of lmhs fsfuzzer. I try to test current -git at least once a week. >> Most modifications are adding of new filesystems or mounting >> them with different options, but i also added some new tests like invoking >> iozone, fsx or fsstress if available >> >> I currently test vfat, udf, msdos, swap, iso9660, ext2, >> ext3, ext4, hfs, hfsplus, gfs2, ntfs, minix, qnx4, affs and bfs > > Please can you add ocfs2 to the mix. To make it easy, you > can format with "mkfs.ocfs2 -M local" to mark the volume > for local mount only and thus not deal with any cluster config.here is a first one: [ 146.790010] (4230,0):ocfs2_read_locked_inode:475 ERROR: bug expression: !!(fe->i_flags & cpu_to_le32(OCFS2_SYSTEM_FL)) !!!(args->fi_flags & OCFS2_FI_FLAG_SYSFILE) [ 146.790282] (4230,0):ocfs2_read_locked_inode:475 ERROR: Inode 9: system file state is ambigous [ 146.790584] ------------[ cut here ]------------ [ 146.790717] kernel BUG at fs/ocfs2/inode.c:475! [ 146.790848] invalid opcode: 0000 [#1] PREEMPT DEBUG_PAGEALLOC [ 146.791224] Modules linked in: [ 146.791381] [ 146.791381] Pid: 4230, comm: mount.ocfs2 Not tainted (2.6.26-rc4 #44) [ 146.791381] EIP: 0060:[<c039bb9f>] EFLAGS: 00010282 CPU: 0 [ 146.791381] EIP is at ocfs2_iget+0x6bf/0xc90 [ 146.791381] EAX: 00000065 EBX: 000001db ECX: 00000001 EDX: 00000001 [ 146.791381] ESI: 00000000 EDI: 00000000 EBP: cbf83db4 ESP: cbf83d54 [ 146.791381] DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 0068 [ 146.791381] Process mount.ocfs2 (pid: 4230, ti=cbf83000 task=cbf8af70 task.ti=cbf83000) [ 146.791381] Stack: c081be00 00001086 00000000 c06f978f 000001db 00000009 00000000 c08dcddc [ 146.791381] c038be6b 000000d0 ccae339e cbf83d88 00000000 cbf83db4 c038be76 00000009 [ 146.791381] 00000000 00000009 00000001 00000000 cc33ea28 00000000 cbe14180 c7879800 [ 146.791381] Call Trace: [ 146.791381] [<c038be6b>] ? ocfs2_new_dlm_debug+0x1b/0x100 [ 146.791381] [<c038be76>] ? ocfs2_new_dlm_debug+0x26/0x100 [ 146.791381] [<c03c556a>] ? ocfs2_fill_super+0x1f2a/0x2910 [ 146.791381] [<c018281f>] ? get_sb_bdev+0xef/0x120 [ 146.791381] [<c019758d>] ? alloc_vfsmnt+0xdd/0x120 [ 146.791381] [<c019758d>] ? alloc_vfsmnt+0xdd/0x120 [ 146.791381] [<c03bf742>] ? ocfs2_get_sb+0x22/0x30 [ 146.791381] [<c03c3640>] ? ocfs2_fill_super+0x0/0x2910 [ 146.791381] [<c018236a>] ? vfs_kern_mount+0x3a/0x90 [ 146.791381] [<c0182419>] ? do_kern_mount+0x39/0xd0 [ 146.791381] [<c01987c5>] ? do_new_mount+0x65/0x90 [ 146.791381] [<c019894a>] ? do_mount+0x15a/0x1b0 [ 146.791381] [<c017bab5>] ? kmem_cache_alloc+0x95/0xc0 [ 146.791381] [<c015fcab>] ? __get_free_pages+0x1b/0x30 [ 146.791381] [<c0196658>] ? copy_mount_options+0x38/0x140 [ 146.791381] [<c0188dc7>] ? getname+0xa7/0xc0 [ 146.791381] [<c0198a0f>] ? sys_mount+0x6f/0xb0 [ 146.791381] [<c0103d7d>] ? sysenter_past_esp+0x6a/0xb1 [ 146.791381] ======================[ 146.791381] Code: 09 8b c0 31 d2 89 d1 83 e0 01 09 c1 74 1d f6 05 6a 09 8b c0 80 75 14 a1 6c 09 8b c0 31 d2 89 d3 83 e0 01 09 c3 0f 84 56 04 00 00 <0f> 0b eb fe 89 f0 e8 36 96 df ff 81 fb 00 fe ff ff 0f 84 cc fb [ 146.791381] EIP: [<c039bb9f>] ocfs2_iget+0x6bf/0xc90 SS:ESP 0068:cbf83d54 [ 146.806059] ---[ end trace 48ff23e66ef1f905 ]--- Image can be found at http://cccmz.de/~snakebyte/ocfs2.3.img.bz2 (server is a bit flaky at the moment due to dns issues, just try again if you get the united domains site) Greetings, Eric
* Eric Sesterhenn (snakebyte at gmx.de) wrote:> * Sunil Mushran (Sunil.Mushran at oracle.com) wrote: > > Eric Sesterhenn wrote: > >> i do some regular filesystem fuzzing, based on a modified version > >> of lmhs fsfuzzer. I try to test current -git at least once a week. > >> Most modifications are adding of new filesystems or mounting > >> them with different options, but i also added some new tests like invoking > >> iozone, fsx or fsstress if available > >> > >> I currently test vfat, udf, msdos, swap, iso9660, ext2, > >> ext3, ext4, hfs, hfsplus, gfs2, ntfs, minix, qnx4, affs and bfs > > > > Please can you add ocfs2 to the mix. To make it easy, you > > can format with "mkfs.ocfs2 -M local" to mark the volume > > for local mount only and thus not deal with any cluster config. > > here is a first one:...> Image can be found at http://cccmz.de/~snakebyte/ocfs2.3.img.bz2 > (server is a bit flaky at the moment due to dns > issues, just try again if you get the united domains site)[ 253.538562] (4238,0):ocfs2_populate_inode:277 ERROR: ip_blkno 10 !i_blkno 34314! [ 253.538861] ------------[ cut here ]------------ [ 253.538995] kernel BUG at fs/ocfs2/inode.c:484! [ 253.539125] invalid opcode: 0000 [#1] PREEMPT DEBUG_PAGEALLOC [ 253.539356] Modules linked in: [ 253.539356] [ 253.539356] Pid: 4238, comm: mount.ocfs2 Not tainted (2.6.26-rc4 #44) [ 253.539356] EIP: 0060:[<c039bf71>] EFLAGS: 00010206 CPU: 0 [ 253.539356] EIP is at ocfs2_iget+0xa91/0xc90 [ 253.539356] EAX: 00008600 EBX: 00000000 ECX: 00008600 EDX: 0000860a [ 253.539356] ESI: cbfc0a78 EDI: cbbcb120 EBP: cbb1fdb4 ESP: cbb1fd54 [ 253.539356] DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 0068 [ 253.539356] Process mount.ocfs2 (pid: 4238, ti=cbb1f000 task=cbb89fa0 task.ti=cbb1f000) [ 253.539356] Stack: 00000001 cbb1fda4 00000000 00000000 cbb1fd88 00000296 c038be6b c08dcddc [ 253.539356] c038be6b 000000d0 cf306d3e cbb1fd88 00000000 cbb1fdb4 c038be76 0000000a [ 253.539356] 00000000 0000000a 00000001 00000000 cbddb208 00000000 cbbcb120 c9f1f800 [ 253.539356] Call Trace: [ 253.539356] [<c038be6b>] ? ocfs2_new_dlm_debug+0x1b/0x100 [ 253.539356] [<c038be6b>] ? ocfs2_new_dlm_debug+0x1b/0x100 [ 253.539356] [<c038be76>] ? ocfs2_new_dlm_debug+0x26/0x100 [ 253.539356] [<c03c5594>] ? ocfs2_fill_super+0x1f54/0x2910 [ 253.539356] [<c018281f>] ? get_sb_bdev+0xef/0x120 [ 253.539356] [<c019758d>] ? alloc_vfsmnt+0xdd/0x120 [ 253.539356] [<c019758d>] ? alloc_vfsmnt+0xdd/0x120 [ 253.539356] [<c03bf742>] ? ocfs2_get_sb+0x22/0x30 [ 253.539356] [<c03c3640>] ? ocfs2_fill_super+0x0/0x2910 [ 253.539356] [<c018236a>] ? vfs_kern_mount+0x3a/0x90 [ 253.539356] [<c0182419>] ? do_kern_mount+0x39/0xd0 [ 253.539356] [<c01987c5>] ? do_new_mount+0x65/0x90 [ 253.539356] [<c019894a>] ? do_mount+0x15a/0x1b0 [ 253.539356] [<c017bab5>] ? kmem_cache_alloc+0x95/0xc0 [ 253.539356] [<c015fcab>] ? __get_free_pages+0x1b/0x30 [ 253.539356] [<c0196658>] ? copy_mount_options+0x38/0x140 [ 253.539356] [<c0188dc7>] ? getname+0xa7/0xc0 [ 253.539356] [<c0198a0f>] ? sys_mount+0x6f/0xb0 [ 253.539356] [<c0103d7d>] ? sysenter_past_esp+0x6a/0xb1 [ 253.539356] ======================[ 253.539356] Code: 89 da 89 f0 e8 61 ec ff ff 85 c0 0f 88 e6 f7 ff ff 8b 55 e0 8b 4b 54 8b 45 dc 31 d1 8b 53 50 31 db 31 d0 09 c1 0f 84 d1 f7 ff ff <0f> 0b eb fe 8b 83 b8 00 00 00 89 c2 0f b6 c8 c1 ea 0c 25 00 ff [ 253.539356] EIP: [<c039bf71>] ocfs2_iget+0xa91/0xc90 SS:ESP 0068:cbb1fd54 [ 253.554755] ---[ end trace 8befff9d4b19c14a ]--- Image can be found here: http://www.cccmz.de/~snakebyte/ocfs2.4.img.bz2 Greetings, Eric
Eric, Thanks. I've filed few bugzillas for tracking them. I'll need to think about this. http://oss.oracle.com/bugzilla/show_bug.cgi?id=970 http://oss.oracle.com/bugzilla/show_bug.cgi?id=971 Eric Sesterhenn wrote:> * Sunil Mushran (Sunil.Mushran at oracle.com) wrote: > >> Eric Sesterhenn wrote: >> >>> i do some regular filesystem fuzzing, based on a modified version >>> of lmhs fsfuzzer. I try to test current -git at least once a week. >>> Most modifications are adding of new filesystems or mounting >>> them with different options, but i also added some new tests like invoking >>> iozone, fsx or fsstress if available >>> >>> I currently test vfat, udf, msdos, swap, iso9660, ext2, >>> ext3, ext4, hfs, hfsplus, gfs2, ntfs, minix, qnx4, affs and bfs >>> >> Please can you add ocfs2 to the mix. To make it easy, you >> can format with "mkfs.ocfs2 -M local" to mark the volume >> for local mount only and thus not deal with any cluster config. >> > > here is a first one: > > [ 146.790010] (4230,0):ocfs2_read_locked_inode:475 ERROR: bug > expression: !!(fe->i_flags & cpu_to_le32(OCFS2_SYSTEM_FL)) !> !!(args->fi_flags & OCFS2_FI_FLAG_SYSFILE) > [ 146.790282] (4230,0):ocfs2_read_locked_inode:475 ERROR: Inode 9: system file state is ambigous > [ 146.790584] ------------[ cut here ]------------ > [ 146.790717] kernel BUG at fs/ocfs2/inode.c:475! > [ 146.790848] invalid opcode: 0000 [#1] PREEMPT DEBUG_PAGEALLOC > [ 146.791224] Modules linked in: > [ 146.791381] > [ 146.791381] Pid: 4230, comm: mount.ocfs2 Not tainted (2.6.26-rc4 #44) > [ 146.791381] EIP: 0060:[<c039bb9f>] EFLAGS: 00010282 CPU: 0 > [ 146.791381] EIP is at ocfs2_iget+0x6bf/0xc90 > [ 146.791381] EAX: 00000065 EBX: 000001db ECX: 00000001 EDX: 00000001 > [ 146.791381] ESI: 00000000 EDI: 00000000 EBP: cbf83db4 ESP: cbf83d54 > [ 146.791381] DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 0068 > [ 146.791381] Process mount.ocfs2 (pid: 4230, ti=cbf83000 task=cbf8af70 task.ti=cbf83000) > [ 146.791381] Stack: c081be00 00001086 00000000 c06f978f 000001db 00000009 00000000 c08dcddc > [ 146.791381] c038be6b 000000d0 ccae339e cbf83d88 00000000 cbf83db4 c038be76 00000009 > [ 146.791381] 00000000 00000009 00000001 00000000 cc33ea28 00000000 cbe14180 c7879800 > [ 146.791381] Call Trace: > [ 146.791381] [<c038be6b>] ? ocfs2_new_dlm_debug+0x1b/0x100 > [ 146.791381] [<c038be76>] ? ocfs2_new_dlm_debug+0x26/0x100 > [ 146.791381] [<c03c556a>] ? ocfs2_fill_super+0x1f2a/0x2910 > [ 146.791381] [<c018281f>] ? get_sb_bdev+0xef/0x120 > [ 146.791381] [<c019758d>] ? alloc_vfsmnt+0xdd/0x120 > [ 146.791381] [<c019758d>] ? alloc_vfsmnt+0xdd/0x120 > [ 146.791381] [<c03bf742>] ? ocfs2_get_sb+0x22/0x30 > [ 146.791381] [<c03c3640>] ? ocfs2_fill_super+0x0/0x2910 > [ 146.791381] [<c018236a>] ? vfs_kern_mount+0x3a/0x90 > [ 146.791381] [<c0182419>] ? do_kern_mount+0x39/0xd0 > [ 146.791381] [<c01987c5>] ? do_new_mount+0x65/0x90 > [ 146.791381] [<c019894a>] ? do_mount+0x15a/0x1b0 > [ 146.791381] [<c017bab5>] ? kmem_cache_alloc+0x95/0xc0 > [ 146.791381] [<c015fcab>] ? __get_free_pages+0x1b/0x30 > [ 146.791381] [<c0196658>] ? copy_mount_options+0x38/0x140 > [ 146.791381] [<c0188dc7>] ? getname+0xa7/0xc0 > [ 146.791381] [<c0198a0f>] ? sys_mount+0x6f/0xb0 > [ 146.791381] [<c0103d7d>] ? sysenter_past_esp+0x6a/0xb1 > [ 146.791381] ======================> [ 146.791381] Code: 09 8b c0 31 d2 89 d1 83 e0 01 09 c1 74 1d f6 05 6a > 09 8b c0 80 75 14 a1 6c 09 8b c0 31 d2 89 d3 83 e0 01 09 c3 0f 84 56 04 > 00 00 <0f> 0b eb fe 89 f0 e8 36 96 df ff 81 fb 00 fe ff ff 0f 84 cc fb > [ 146.791381] EIP: [<c039bb9f>] ocfs2_iget+0x6bf/0xc90 SS:ESP 0068:cbf83d54 > [ 146.806059] ---[ end trace 48ff23e66ef1f905 ]--- > > Image can be found at http://cccmz.de/~snakebyte/ocfs2.3.img.bz2 > (server is a bit flaky at the moment due to dns > issues, just try again if you get the united domains site) > > Greetings, Eric >