← Back to team overview

kernel-packages team mailing list archive

[Bug 1037546] Re: Using asynchronous I/O can cause data corruption or a kernel oops

 

Bart Van Assche, the next step is to reverse bisect the kernel from
Lucid to 3.2 in order to identify the fix commit. Could you please do
this following https://wiki.ubuntu.com/Kernel/KernelBisection ?

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1037546

Title:
  Using asynchronous I/O can cause data corruption or a kernel oops

Status in “linux” package in Ubuntu:
  Incomplete

Bug description:
  How to reproduce:

  umount /mnt
  rm /dev/vdisk
  dd if=/dev/zero of=/dev/vdisk bs=1M count=1K
  mkfs.ext4 -F -O ^has_journal /dev/vdisk
  mount -o loop /dev/vdisk /mnt
  rm -f /mnt/test.*
  fio --verify=md5 -rw=randwrite --size=10m --bs=4k --loops=10000 --iodepth=64 --group_reporting --sync=1 --direct=1 --ioengine=libaio --directory=/mnt --name=test --thread --numjobs=16

  Result:
  - Sometimes fio complains about data corruption, e.g.
  verify: bad magic header 0, wanted acca at file /mnt/test.7.0 offset 10481664, length 0
  - Sometimes a kernel oops is triggered

  [ 2022.642479] BUG: unable to handle kernel NULL pointer dereference at 0000000000000291
  [ 2022.644043] IP: [<ffffffff811de96b>] ext4_end_io_dio+0x6b/0xc0
  [ 2022.645596] PGD 19e790067 PUD 19e0b6067 PMD 0
  [ 2022.647131] Oops: 0000 [#1] SMP
  [ 2022.648631] last sysfs file: /sys/devices/system/cpu/cpu0/cache/index0/coherency_line_size
  [ 2022.650156] CPU 0
  [ 2022.650156] Modules linked in: ib_srp scsi_tgt netconsole configfs rdma_ucm rdma_cm iw_cm ib_addr ib_ipoib ib_cm ib_sa ib_uverbs ib_umad mlx4_ib ib_mad ib_core mlx4_en snd_hda_codec_atihdmi snd_hda_codec_analog fbcon tileblit font bitblit softcursor
   vga16fb vgastate radeon ttm drm_kms_helper snd_hda_intel snd_hda_codec asus_atk0110 snd_hwdep psmouse lp snd_pcm snd_timer snd soundcore serio_raw mlx4_core drm i2c_algo_bit snd_page_alloc intel_agp parport ohci1394 usbhid hid floppy sky2 skge ieee139
  4 pata_marvell ahci
  [ 2022.650156] Pid: 4241, comm: loop0 Not tainted 2.6.32-42-server #95-Ubuntu P5Q DELUXE
  [ 2022.650156] RIP: 0010:[<ffffffff811de96b>]  [<ffffffff811de96b>] ext4_end_io_dio+0x6b/0xc0
  [ 2022.650156] RSP: 0000:ffff88019e7f3db0  EFLAGS: 00010246
  [ 2022.650156] RAX: 0000000000000001 RBX: ffff88019e00a000 RCX: 0000000000000000
  [ 2022.650156] RDX: 0000000000001000 RSI: ffff8801959fd7d8 RDI: ffff88019e00a000
  [ 2022.650156] RBP: ffff88019e7f3dc0 R08: 0000000000000000 R09: 5600000000000000
  [ 2022.650156] R10: 0000000000000000 R11: 6db6db6db6db6db7 R12: ffff8801959fd7a8
  [ 2022.650156] R13: 0000000000001000 R14: ffff8801b72c0114 R15: ffff88019e7f3e80
  [ 2022.650156] FS:  0000000000000000(0000) GS:ffff880007200000(0000) knlGS:0000000000000000
  [ 2022.650156] CS:  0010 DS: 0018 ES: 0018 CR0: 000000008005003b
  [ 2022.650156] CR2: 0000000000000291 CR3: 00000001b757f000 CR4: 00000000000406f0
  [ 2022.650156] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
  [ 2022.650156] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
  [ 2022.650156] Process loop0 (pid: 4241, threadinfo ffff88019e7f2000, task ffff8801b561dc00)
  [ 2022.650156] Stack:
  [ 2022.650156]  0000000000000000 ffff8801b5fe6800 ffff88019e7f3df0 ffffffff8117939d
  [ 2022.650156] <0> ffff88019e7f3df0 ffff8801b5fe6800 ffff8801b5fe6b24 0000000000000000
  [ 2022.650156] <0> ffff88019e7f3e30 ffffffff811797a7 0000000000000286 ffff8801b72c0158
  [ 2022.650156] Call Trace:
  [ 2022.650156]  [<ffffffff8117939d>] dio_complete+0xbd/0xe0
  [ 2022.650156]  [<ffffffff811797a7>] dio_bio_end_aio+0x77/0xd0
  [ 2022.650156]  [<ffffffff8117429d>] bio_endio+0x1d/0x40
  [ 2022.650156]  [<ffffffff8137f5e0>] loop_thread+0xe0/0x270
  [ 2022.650156]  [<ffffffff81086470>] ? autoremove_wake_function+0x0/0x40
  [ 2022.650156]  [<ffffffff8137f500>] ? loop_thread+0x0/0x270
  [ 2022.650156]  [<ffffffff810860f6>] kthread+0x96/0xa0
  [ 2022.650156]  [<ffffffff810141aa>] child_rip+0xa/0x20
  [ 2022.650156]  [<ffffffff81086060>] ? kthread+0x0/0xa0
  [ 2022.650156]  [<ffffffff810141a0>] ? child_rip+0x0/0x20
  [ 2022.650156] Code: 00 00 00 00 00 48 8b 1c 24 4c 8b 64 24 08 c9 c3 49 8b 44 24 10 49 89 74 24 20 49 8d 74 24 30 49 89 54 24 28 48 8b 80 08 01 00 00 <48> 8b 80 90 02 00 00 48 8b b8 50 03 00 00 e8 32 3a ea ff 49 8b
  [ 2022.650156] RIP  [<ffffffff811de96b>] ext4_end_io_dio+0x6b/0xc0
  [ 2022.650156]  RSP <ffff88019e7f3db0>
  [ 2022.650156] CR2: 0000000000000291
  [ 2022.651252] BUG: unable to handle kernel
  [ 2022.719317] ---[ end trace b9996e8ae6b732db ]---
  --- 
  AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.21.
  AplayDevices: Error: [Errno 2] No such file or directory
  Architecture: amd64
  ArecordDevices: Error: [Errno 2] No such file or directory
  AudioDevicesInUse: Error: command ['fuser', '-v', '/dev/snd/by-path', '/dev/snd/controlC1', '/dev/snd/hwC1D0', '/dev/snd/pcmC1D3p', '/dev/snd/controlC0', '/dev/snd/hwC0D0', '/dev/snd/pcmC0D0c', '/dev/snd/pcmC0D0p', '/dev/snd/pcmC0D1c', '/dev/snd/pcmC0D1p', '/dev/snd/timer'] failed with exit code 1:
  CRDA: Error: [Errno 2] No such file or directory
  Card0.Amixer.info: Error: [Errno 2] No such file or directory
  Card0.Amixer.values: Error: [Errno 2] No such file or directory
  Card1.Amixer.info: Error: [Errno 2] No such file or directory
  Card1.Amixer.values: Error: [Errno 2] No such file or directory
  DistroRelease: Ubuntu 10.04
  HibernationDevice: RESUME=UUID=ed6b25d1-0e71-46ec-aae4-502e9ce1cc58
  InstallationMedia: Ubuntu-Server 10.04.4 LTS "Lucid Lynx" - Release amd64 (20120214.2)
  MachineType: System manufacturer P5Q DELUXE
  Package: linux (not installed)
  ProcCmdLine: root=UUID=4c2434f2-aec2-4664-8df2-f2d2ad65b039 ro quiet
  ProcEnviron:
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  ProcVersionSignature: Ubuntu 2.6.32-42.95-server 2.6.32.59+drm33.24
  Regression: No
  RelatedPackageVersions: linux-firmware 1.34.14
  Reproducible: Yes
  RfKill:
   
  Tags: lucid  needs-upstream-testing
  Uname: Linux 2.6.32-42-server x86_64
  UserGroups:
   
  dmi.bios.date: 07/10/2009
  dmi.bios.vendor: American Megatrends Inc.
  dmi.bios.version: 2301
  dmi.board.asset.tag: To Be Filled By O.E.M.
  dmi.board.name: P5Q DELUXE
  dmi.board.vendor: ASUSTeK Computer INC.
  dmi.board.version: Rev 1.xx
  dmi.chassis.asset.tag: Asset-1234567890
  dmi.chassis.type: 3
  dmi.chassis.vendor: Chassis Manufacture
  dmi.chassis.version: Chassis Version
  dmi.modalias: dmi:bvnAmericanMegatrendsInc.:bvr2301:bd07/10/2009:svnSystemmanufacturer:pnP5QDELUXE:pvrSystemVersion:rvnASUSTeKComputerINC.:rnP5QDELUXE:rvrRev1.xx:cvnChassisManufacture:ct3:cvrChassisVersion:
  dmi.product.name: P5Q DELUXE
  dmi.product.version: System Version
  dmi.sys.vendor: System manufacturer

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1037546/+subscriptions