【OLK-5.10】去掉resize_inode后，执行resize2fs，触发空指针解引用导致panic

【标题描述】【OLK-5.10】 去掉resize_inode后，执行resize2fs，触发空指针解引用导致panic
【环境信息】
硬件信息：
NA
软件信息：
OLK5.10
【问题复现步骤】
1、格式化磁盘
2、挂载磁盘
3、修改属性
4、执行扩容
出现概率(是否必现，概率性错误)必现
【预期结果】
系统正常
【实际结果】
系统panic
【附件信息】
[root@testvm ~]# tune2fs -l /dev/sdb
tune2fs 1.44.4 (18-Aug-2018)
Filesystem volume name: <none>
Last mounted on: <not available>
Filesystem UUID: 87d6f577-aaa8-4b80-9ecd-69e3ff214c2d
Filesystem magic number: 0xEF53
Filesystem revision #: 1 (dynamic)
Filesystem features: has_journal ext_attr resize_inode dir_index filetype needs_recovery extent 64bit flex_bg sparse_super large_file huge_file dir_nlink extra_isize metadata_csum
Filesystem flags: signed_directory_hash
Default mount options: user_xattr acl
Filesystem state: clean
Errors behavior: Continue
Filesystem OS type: Linux
Inode count: 655360
Block count: 2621440
Reserved block count: 107476
Free blocks: 2570961
Free inodes: 655349
First block: 0
Block size: 4096
Fragment size: 4096
Group descriptor size: 64
Reserved GDT blocks: 126
Blocks per group: 32768
Fragments per group: 32768
Inodes per group: 8192
Inode blocks per group: 512
Flex block group size: 16
Filesystem created: Mon May 23 22:58:53 2022
Last mount time: Mon May 23 22:59:05 2022
Last write time: Mon May 23 22:59:05 2022
Mount count: 1
Maximum mount count: -1
Last checked: Mon May 23 22:58:53 2022
Check interval: 0 (<none>)
Lifetime writes: 533 kB
Reserved blocks uid: 0 (user root)
Reserved blocks gid: 0 (group root)
First inode: 11
Inode size: 256
Required extra isize: 32
Desired extra isize: 32
Journal inode: 8
Default directory hash: half_md4
Directory Hash Seed: 0df22ad9-0449-40e6-a20b-3ce3b99b8c38
Journal backup: inode blocks
Checksum type: crc32c
Checksum: 0x37fc540a
[root@testvm ~]# tune2fs -O ^resize_inode /dev/sdb
tune2fs 1.44.4 (18-Aug-2018)

Please run e2fsck -f on the filesystem.

[root@testvm ~]# resize2fs /dev/sdb 2G
resize2fs 1.44.4 (18-Aug-2018)
Filesystem at /dev/sdb is mounted on /mnt; on-line resizing required
resize2fs: On-line shrinking not supported
[root@testvm ~]# resize2fs /dev/sdb 20G
resize2fs 1.44.4 (18-Aug-2018)
Filesystem at /dev/sdb is mounted on /mnt; on-line resizing required
old_desc_blocks = 2, new_desc_blocks = 3
触发系统panic

串口日志：
[14110.649538] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN
[14110.651664] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[14110.653209] CPU: 3 PID: 1722 Comm: resize2fs Not tainted 5.10.0-12594-ge39e10f0deef #21
[14110.654765] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.1-0-ga5cab58e9a3f-prebuilt.qemu.org 04/01/2014
[14110.657322] RIP: 0010:ext4_flex_group_add+0xcc9/0x46e0 [ext4]
[14110.658459] Code: 2b e1 48 8b 44 24 48 48 83 05 12 30 27 00 01 48 83 05 ca 28 27 00 01 48 8d 78 28 48 83 05 c6 28 27 00 01 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 ac 35 00 00 48 8b 44 24 48 48 83 05 b0 28 27 00
[14110.662018] RSP: 0018:ffff88802aea76d0 EFLAGS: 00010206
[14110.663118] RAX: 0000000000000005 RBX: 0000000000000051 RCX: ffffffffa0329493
[14110.664622] RDX: 0000000000000000 RSI: ffffffffa03294a1 RDI: 0000000000000028
[14110.666080] RBP: dffffc0000000000 R08: ffff88802cb35540 R09: 000000000086d4cb
[14110.667456] R10: ffff888023bc68f7 R11: ffffed1004778d1e R12: 0000000000000002
[14110.668820] R13: 0000000000000000 R14: 000000000000007e R15: 0000000000000001
[14110.670197] FS: 00007fc03bc19bc0(0000) GS:ffff888107f80000(0000) knlGS:0000000000000000
[14110.671708] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[14110.672818] CR2: 000000000166c618 CR3: 000000002b0ed006 CR4: 0000000000370ee0
[14110.674204] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[14110.675559] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[14110.676934] Call Trace:
[14110.677514] ? _raw_spin_lock_irqsave+0xa8/0x130
[14110.678477] ? _raw_read_unlock_irqrestore+0x50/0x50
[14110.679601] ? kasan_slab_alloc+0x15/0x20
[14110.680569] ? add_new_gdb+0x10d0/0x10d0 [ext4]
[14110.681650] ? kasan_unpoison_shadow+0x38/0x60
[14110.682585] ? __kasan_kmalloc.constprop.0+0x10a/0x120
[14110.683713] ? ext4_bg_has_super+0x46d/0x670 [ext4]
[14110.684694] ? __sanitizer_cov_trace_const_cmp4+0x22/0x30
[14110.685913] ? ext4_get_group_number+0x201/0x2b0 [ext4]
[14110.687053] ? ext4_get_group_no_and_offset+0x290/0x290 [ext4]
[14110.688283] ? ext4_bg_num_gdb+0x3d8/0x500 [ext4]
[14110.689337] ? ext4_bg_has_super+0x46d/0x670 [ext4]
[14110.690413] ext4_resize_fs+0x21c2/0x43b0 [ext4]
[14110.691466] ? ext4_group_extend+0x6a0/0x6a0 [ext4]
[14110.692705] ? stack_trace_save+0x92/0xc0
[14110.693614] ? __sanitizer_cov_trace_const_cmp4+0x22/0x30
[14110.694693] ? cap_capable+0x357/0x410
[14110.695598] ? __sanitizer_cov_trace_const_cmp8+0x24/0x30
[14110.696719] ? __mnt_want_write+0x209/0x330
[14110.697557] ? __mnt_want_write_file+0x1e2/0x250
[14110.698564] __ext4_ioctl+0x2a3d/0x66b0 [ext4]
[14110.699467] ? asm_common_interrupt+0x1e/0x40
[14110.700410] ? ext4_reset_inode_seed+0x6b0/0x6b0 [ext4]
[14110.701459] ? call_rcu+0x7b9/0x1600
[14110.702195] ? __remove_object+0x160/0x160
[14110.703035] ? may_open_dev+0x150/0x150
[14110.703810] ? do_nocb_bypass_wakeup_timer+0xb0/0xb0
[14110.704800] ? __kasan_check_write+0x20/0x30
[14110.705647] ? _raw_spin_lock_irqsave+0xa8/0x130
[14110.706581] ? _raw_read_unlock_irqrestore+0x50/0x50
[14110.707578] ? _raw_read_unlock_irqrestore+0x50/0x50
[14110.708569] ? __kasan_slab_free+0x14b/0x220
[14110.709427] ? __sanitizer_cov_trace_switch+0x8b/0xf0
[14110.710434] ? __sanitizer_cov_trace_const_cmp2+0x24/0x30
[14110.711506] ? do_vfs_ioctl+0x25c/0x16c0
[14110.712310] ? ioctl_file_clone+0x200/0x200
[14110.713212] ? putname+0x159/0x1c0
[14110.713968] ? do_sys_openat2+0x5bb/0xae0
[14110.714785] ? generic_file_open+0xe0/0xe0
[14110.715641] ? put_cred_rcu+0x2a9/0x420
[14110.716545] ? __put_cred+0x17b/0x260
[14110.717327] ? __sanitizer_cov_trace_const_cmp4+0x22/0x30
[14110.718453] ? ext4_fc_start_update+0x35f/0x410 [ext4]
[14110.719536] ext4_ioctl+0x63/0xc0 [ext4]
[14110.720394] ? __ext4_ioctl+0x66b0/0x66b0 [ext4]
[14110.721344] vfs_ioctl+0xa0/0x130
[14110.722033] __se_sys_ioctl+0xe8/0x110
[14110.722789] __x64_sys_ioctl+0x94/0xe0
[14110.723548] ? syscall_exit_to_user_mode+0x5b/0x330
[14110.724501] do_syscall_64+0x45/0x70
[14110.725226] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[14110.726209] RIP: 0033:0x7fc03b2d2577
[14110.727076] Code: b3 66 90 48 8b 05 11 89 2c 00 64 c7 00 26 00 00 00 48 c7 c0 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 88 2c 00 f7 d8 64 89 01 48
[14110.730584] RSP: 002b:00007fff9f35b118 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[14110.732062] RAX: ffffffffffffffda RBX: 000000000165f060 RCX: 00007fc03b2d2577
[14110.733429] RDX: 00007fff9f35b240 RSI: 0000000040086610 RDI: 0000000000000004
[14110.734824] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000
[14110.736295] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000001662500
[14110.737783] R13: 00007fff9f35b240 R14: 000000000165f000 R15: 0000000000000000
[14110.739179] Modules linked in: ext4 mbcache jbd2 [last unloaded: jbd2]
[14110.740719] ---[ end trace 62945edc20f9492f ]---
[14110.741798] RIP: 0010:ext4_flex_group_add+0xcc9/0x46e0 [ext4]
[14110.742989] Code: 2b e1 48 8b 44 24 48 48 83 05 12 30 27 00 01 48 83 05 ca 28 27 00 01 48 8d 78 28 48 83 05 c6 28 27 00 01 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 ac 35 00 00 48 8b 44 24 48 48 83 05 b0 28 27 00
[14110.746416] RSP: 0018:ffff88802aea76d0 EFLAGS: 00010206
[14110.747495] RAX: 0000000000000005 RBX: 0000000000000051 RCX: ffffffffa0329493
[14110.748976] RDX: 0000000000000000 RSI: ffffffffa03294a1 RDI: 0000000000000028
[14110.750374] RBP: dffffc0000000000 R08: ffff88802cb35540 R09: 000000000086d4cb
[14110.751741] R10: ffff888023bc68f7 R11: ffffed1004778d1e R12: 0000000000000002
[14110.753195] R13: 0000000000000000 R14: 000000000000007e R15: 0000000000000001
[14110.754585] FS: 00007fc03bc19bc0(0000) GS:ffff888107f80000(0000) knlGS:0000000000000000
[14110.756248] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[14110.757415] CR2: 000000000166c618 CR3: 000000002b0ed006 CR4: 0000000000370ee0
[14110.758846] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[14110.760563] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[14110.762124] Kernel panic - not syncing: Fatal exception
[14110.763300] Kernel Offset: disabled
[14110.763965] ---[ end Kernel panic - not syncing: Fatal exception ]---

GVP openEuler/kernel

内容风险标识

评论 (1)

GVPopenEuler/kernel

内容风险标识