From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751873AbaIHEU5 (ORCPT ); Mon, 8 Sep 2014 00:20:57 -0400 Received: from mail.kernel.org ([198.145.19.201]:52630 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750845AbaIHEU4 (ORCPT ); Mon, 8 Sep 2014 00:20:56 -0400 Date: Sun, 7 Sep 2014 21:20:56 -0700 From: Jaegeuk Kim To: Tommi Rantala Cc: linux-f2fs-devel@lists.sourceforge.net, Changman Lee , LKML , trinity@vger.kernel.org, Dave Jones Subject: Re: f2fs get_dnode_of_data oops Message-ID: <20140908042056.GA13863@jaegeuk-mac02.hsd1.ca.comcast.net> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hi, Thank you for the report. Could you share a little bit more information about the file accessing f2fs_llseek? E.g., file size, file offset, file allocation information, or dump of that file. Thanks, On Sun, Sep 07, 2014 at 10:20:44PM +0300, Tommi Rantala wrote: > 2014-09-07 22:14 GMT+03:00 Tommi Rantala : > > Hello, > > > > Hit this oops while fuzzing v3.17-rc3-176-g2b12164 with Trinity. > > > > Tommi > > > > > > BUG: unable to handle kernel paging request at ffff8804338717a8 > > IP: [] get_dnode_of_data+0x3a9/0x440 > > PGD 4594067 PUD 0 > > Oops: 0000 [#1] SMP DEBUG_PAGEALLOC > > CPU: 0 PID: 4719 Comm: trinity-c3 Not tainted 3.17.0-rc3+ #33 > > Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 > > task: ffff880015630000 ti: ffff88000724c000 task.ti: ffff88000724c000 > > RIP: 0010:[] [] > > get_dnode_of_data+0x3a9/0x440 > > RSP: 0018:ffff88000724fe08 EFLAGS: 00010246 > > RAX: ffff880033874000 RBX: 00000000000000f8 RCX: 00000000fffff590 > > RDX: ffff880033874168 RSI: ffff88000724fd98 RDI: ffff88000724fef0 > > RBP: ffff88000724feb8 R08: 0000000000000000 R09: 0000000000000000 > > R10: 0000000000000001 R11: ffffffff83b33f90 R12: fffffffffffff590 > > R13: 0000000000000000 R14: ffffea0000ce1d00 R15: ffff8800209f8000 > > FS: 00007f2bd22dc700(0000) GS:ffff88003fa00000(0000) knlGS:0000000000000000 > > CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b > > CR2: ffff8804338717a8 CR3: 00000000346c0000 CR4: 00000000000006f0 > > DR0: 000000000185d000 DR1: 000000000185d000 DR2: 0000000000000000 > > DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 00000000000b0602 > > Stack: > > ffff88000724fef0 ffff88000724fe30 ffff880036c18000 0000000000000004 > > ffff8800209f80f0 00000002fffff590 ffffffff81189f1d ffff8800fffff590 > > 0000000000000246 ffffffff00000000 ffffffff81189ce0 ffffffff000000f8 > > Call Trace: > > [] ? trace_hardirqs_on+0xd/0x10 > > [] ? mark_held_locks+0x90/0xa0 > > [] ? trace_hardirqs_on_caller+0x185/0x220 > > [] f2fs_llseek+0xf7/0x420 > > [] SyS_lseek+0x65/0xa0 > > [] system_call_fastpath+0x16/0x1b > > Code: ba 00 00 00 00 00 88 ff ff 48 c1 f8 06 48 c1 e0 0c 48 01 d0 8b > > 98 ec 0f 00 00 39 98 e8 0f 00 00 48 8d 90 68 01 00 00 48 0f 45 d0 <8b> > > 04 8a 89 47 24 31 c0 eb 75 41 bc e4 ff ff ff 4d 85 f6 74 19 > > RIP [] get_dnode_of_data+0x3a9/0x440 > > RSP > > CR2: ffff8804338717a8 > > ---[ end trace bed7b35d1c48e9c3 ]--- > > If it helps, here is the location of the crash: > > (gdb) list *0xffffffff81779039 > 0xffffffff81779039 is in get_dnode_of_data (fs/f2fs/f2fs.h:950). > 945 { > 946 struct f2fs_node *raw_node; > 947 __le32 *addr_array; > 948 raw_node = F2FS_NODE(node_page); > 949 addr_array = blkaddr_in_node(raw_node); > 950 return le32_to_cpu(addr_array[offset]); > 951 } > 952 > 953 static inline int f2fs_test_bit(unsigned int nr, char *addr) > 954 { > (gdb) > > Tommi