← Back to team overview

ecryptfs-devel team mailing list archive

Re: [BUG] OOPs from chmod process - with fsfuzz ecryptfs

 

Nageswara R Sastry wrote:
> Hi,
> 
> While working with fsfuzz ecryptfs got the following Kernel panic with
> oops.
> 
> Kernel Version(s): 2.6.31-rc1 and 2.6.30
> Architecture : s390
> 
> /var/log/messages
> 
> root: ./run_test ecryptfs 43
> kernel: attempt to access beyond end of device
> kernel: loop1: rw=0, want=46399816, limit=8192
> kernel: kjournald starting.  Commit interval 5 seconds
> kernel: EXT3 FS on loop1, internal journal
> kernel: EXT3-fs: recovery complete.
> kernel: EXT3-fs: mounted filesystem with writeback data mode.
> kernel: EXT3-fs error (device loop1): htree_dirblock_to_tree: bad entry
> in directory #2: inode out of bounds - offset=64, inode=2382364685,
> rec_len=16, name_len=7
> kernel: attempt to access beyond end of device
> kernel: loop1: rw=0, want=44044720, limit=8192
> kernel: attempt to access beyond end of device
> kernel: loop1: rw=0, want=44044720, limit=8192
> kernel: ecryptfs_read_lower: octets_read = [-5]; expected [4096]
> kernel: ecryptfs_decrypt_page: Error attempting to read lower page; rc =
> [-22]
> kernel: ecryptfs_readpage: Error decrypting page; rc = [-22]
> kernel: attempt to access beyond end of device
> kernel: loop1: rw=0, want=44044720, limit=8192
> kernel: ecryptfs_read_lower: octets_read = [-5]; expected [4096]
> kernel: ecryptfs_decrypt_page: Error attempting to read lower page; rc =
> [-22]
> kernel: ecryptfs_readpage: Error decrypting page; rc = [-22]
> kernel: attempt to access beyond end of device
> kernel: loop1: rw=0, want=44044720, limit=8192
> kernel: ecryptfs_read_lower: octets_read = [-5]; expected [4096]
> kernel: ecryptfs_decrypt_page: Error attempting to read lower page; rc =
> [-22]
> kernel: ecryptfs_readpage: Error decrypting page; rc = [-22]
> kernel: EXT3-fs error (device loop1): ext3_readdir: bad entry in
> directory #11: directory entry across blocks - offset=0, inode=0,
> rec_len=2248, name_len=0
> kernel: EXT3-fs error (device loop1): htree_dirblock_to_tree: bad entry
> in directory #2: inode out of bounds - offset=64, inode=2382364685,
> rec_len=16, name_len=7
> kernel: EXT3-fs error (device loop1): ext3_add_entry: bad entry in
> directory #2: inode out of bounds - offset=64, inode=2382364685,
> rec_len=16, name_len=7
> kernel: ecryptfs_do_create: Failure to create dentry in lower fs; rc = [-5]
> kernel: ecryptfs_create: Failed to create file inlower filesystem
> kernel: EXT3-fs error (device loop1): ext3_add_entry: bad entry in
> directory #2: inode out of bounds - offset=64, inode=2382364685,
> rec_len=16, name_len=7
> kernel: EXT3-fs error (device loop1): ext3_new_block: block(4136) >=
> blocks count(2048) - block_group = 0, es == 000000002c623400
> kernel: attempt to access beyond end of device
> kernel: loop1: rw=1, want=46399816, limit=8192
> kernel: Aborting journal on device loop1.
> kernel: journal commit I/O error
> kernel: ext3_abort called.
> kernel: EXT3-fs error (device loop1): ext3_journal_start_sb: Detected
> aborted journal
> kernel: Remounting filesystem read-only
> kernel: Error opening lower persistent file for lower_dentry
> [0x000000003ee4cb00] and lower_mnt [0x0000000035cc9a00]; rc = [-30]
> kernel: ecryptfs_lookup_and_interpose_lower: Error attempting to
> initialize the persistent file for the dentry with name [COPYING]; rc =
> [1044638464]
> kernel: Unable to handle kernel pointer dereference at virtual kernel
> address 0000800000000000
> kernel: Oops: 0038 [#1] SMP
> kernel: Modules linked in: cbc md5 aes_s390 aes_generic ecb ecryptfs
> loop qeth_l3 autofs4 lockd sunrpc iptable_filter ip_tables ip6t_REJECT
> xt_tcpudp ip6table_filter ip6_tables x_tables ipv6 qeth_l2 qeth qdio
> vmur ccwgroup dm_round_robin dm_multipath scsi_dh sd_mod scsi_mod
> multipath dm_snapshot dm_zero dm_mirror dm_region_hash dm_log dm_mod
> dasd_fba_mod dasd_eckd_mod dasd_mod ext3 jbd
> kernel: CPU: 2 Not tainted 2.6.31-rc1 #2
> kernel: Process chmod (pid: 4375, task: 000000003fbc5770, ksp:
> 000000003203f920)
> kernel: Krnl PSW : 0704200180000000 00000000000fe7f2 (prepend+0x42/0x58)
> kernel:            R:0 T:1 IO:1 EX:1 Key:0 M:1 W:0 P:0 AS:0 CC:2 PM:0 EA:3
> kernel: Krnl GPRS: 0000000000000001 000000002b237009 000000003203fb38
> 000000003203fb2c
> kernel:            0000800000000000 0000000000000001 000000003fbc5770
> 0000000000000516
> kernel:            000000003203fb88 0000000000000000 000000002b237009
> 0000000000000001
> kernel:            000080000000001d 0000000000000001 00000000000fe934
> 000000003203fa88
> kernel: Krnl Code: 00000000000fe7e6: b90400a1          lgr     %r10,%r1
> kernel:            00000000000fe7ea: b90400b0          lgr     %r11,%r0
> kernel:            00000000000fe7ee: a7480000          lhi     %r4,0
> kernel:           >00000000000fe7f2: a8ac0000          mvcle   %r10,%r12,0
> kernel:            00000000000fe7f6: a714fffe          brc     1,fe7f2
> kernel:            00000000000fe7fa: b9140024          lgfr    %r2,%r4
> kernel:            00000000000fe7fe: ebadf0680004      lmg
> %r10,%r13,104(%r15)
> kernel:            00000000000fe804: 07fe              bcr     15,%r14
> kernel: Call Trace:
> kernel: ([<0000000000000000>] 0x0)
> kernel:  [<00000000000fffce>] d_path+0xde/0x110
> kernel:  [<0000000000082908>] audit_log_d_path+0xf4/0x134
> kernel:  [<0000000000185148>] avc_audit+0x1bc/0x714
> kernel:  [<000000000018570e>] avc_has_perm+0x6e/0x80
> kernel:  [<0000000000186c66>] inode_has_perm+0x72/0x88
> kernel:  [<000000000018d092>] selinux_inode_getattr+0x5a/0x68
> kernel:  [<00000000000ef466>] vfs_getattr+0x3a/0x8c
> kernel:  [<00000000000ef52e>] vfs_fstatat+0x76/0x94
> kernel:  [<00000000000ef65a>] SyS_newstat+0x2e/0x54
> kernel:  [<00000000000268ba>] sysc_tracego+0xe/0x14
> kernel:  [<000000498d9a090a>] 0x498d9a090a
> kernel: Last Breaking-Event-Address:
> kernel:  [<00000000000fe814>] prepend_name+0xc/0x14
> kernel:
> kernel: ---[ end trace 8442ab90b32829e6 ]---
> 
> 
> Regards
> R.Nageswara Sastry
> 

Thanks again, Nageswara!  You can follow the progress at
https://bugs.launchpad.net/ecryptfs/+bug/394138

Tyler

Attachment: signature.asc
Description: OpenPGP digital signature