ext4 mb_group_prealloc 符号翻转导致 bugon 问题

OLK-5.10问题：

复现用例：
mkfs.ext4 -F /dev/$disk
mount /dev/$disk /tmp/test
echo 2147483650 > /sys/fs/ext4/$disk/mb_group_prealloc
echo test > /tmp/test/file && sync

现场：
------------[ cut here ]------------
kernel BUG at fs/ext4/mballoc.c:1981!
Internal error: Oops - BUG: 00000000f2000800 [#1] SMP
CPU: 4 PID: 762 Comm: corosync Not tainted 5.10.0 #4
Hardware name: linux,dummy-virt (DT)
pstate: 80000005 (Nzcv daif -PAN -UAO -TCO BTYPE=--)
pc : mb_mark_used+0xa58/0xcbc fs/ext4/mballoc.c:1981
lr : mb_mark_used+0xa58/0xcbc fs/ext4/mballoc.c:1981
sp : ffffa000993e6c40
x29: ffffa000993e6c40 x28: ffffa000993e6d30
x27: 1ffff4001327ce44 x26: 00000000ffffffff
x25: 00000000ffffffff x24: 0000000000000001
x23: 0000000000003ff3 x22: 0000000000003ff3
x21: dfffa00000000000 x20: ffffa000993e7200
x19: 0000000000000000 x18: 0000000000000000
x17: 0000000000000000 x16: ffffa000883dee20
x15: 0000000000000000 x14: ffffa00088b2b2b8
x13: ffffa00088e0fa84 x12: ffff80001e38e889
x11: 1fffe0001e38e888 x10: ffff80001e38e888
x9 : ffffa00088e83de8 x8 : ffff0000f1c74443
x7 : 0000000000000001 x6 : ffff80001e38e888
x5 : ffff0000f1d93d80 x4 : 0000000000000000
x3 : ffffa00088e83e38 x2 : 0000000000000000
x1 : ffff0000f1d93d80 x0 : 0000000000000000
Call trace:
 mb_mark_used+0xa58/0xcbc fs/ext4/mballoc.c:1981
 ext4_mb_use_best_found+0x22c/0xa60 fs/ext4/mballoc.c:2017
 ext4_mb_check_limits+0x3cc/0x45c fs/ext4/mballoc.c:2089
 ext4_mb_measure_extent.constprop.0+0x310/0x530 fs/ext4/mballoc.c:2161
 ext4_mb_complex_scan_group+0x1b4/0x4f4 fs/ext4/mballoc.c:2367
 ext4_mb_regular_allocator+0x9d0/0x1c44 fs/ext4/mballoc.c:2765
 ext4_mb_new_blocks+0xbf4/0x16a0 fs/ext4/mballoc.c:5750
 ext4_ext_map_blocks+0x1300/0x1cc0 fs/ext4/extents.c:4347
 ext4_map_blocks+0x568/0x13d4 fs/ext4/inode.c:699
 mpage_map_one_extent+0x178/0x590 fs/ext4/inode.c:2461
 mpage_map_and_submit_extent+0x188/0x970 fs/ext4/inode.c:2514
 ext4_writepages+0x1038/0x17c0 fs/ext4/inode.c:2892
 do_writepages+0xe4/0x260 mm/page-writeback.c:2373
 __filemap_fdatawrite_range+0x304/0x400 mm/filemap.c:415
 __filemap_fdatawrite mm/filemap.c:423 [inline]
 filemap_flush+0x34/0x4c mm/filemap.c:450
 ext4_alloc_da_blocks+0x14c/0x194 fs/ext4/inode.c:3271
 ext4_release_file+0x274/0x320 fs/ext4/file.c:142
 __fput+0x224/0x95c fs/file_table.c:291
 ____fput+0x28/0x40 fs/file_table.c:321
 task_work_run+0x204/0x3c0 kernel/task_work.c:187
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 do_notify_resume+0x3f4/0x440 arch/arm64/kernel/signal.c:728
 work_pending+0xc/0xa4
Code: a8d37bfd d50323bf d65f03c0 97da71b6 (d4210000)
kernel fault(0x1) notification starting on CPU 4
kernel fault(0x1) notification finished on CPU 4
Modules linked in:
---[ end trace db6f22b4feccd786 ]---
**二、缺陷分析结构反馈**
影响性分析说明：

缺陷严重等级:(Critical/High/Moderate/Low)

缺陷根因说明:

受影响版本排查(受影响/不受影响):
openEuler-20.03-LTS-SP4
openEuler-22.03-LTS-SP3
openEuler-22.03-LTS-SP4
openEuler-24.03-LTS
openEuler-24.03-LTS-SP1

修复是否涉及abi变化(是/否):
openEuler-20.03-LTS-SP4
openEuler-22.03-LTS-SP3
openEuler-22.03-LTS-SP4
openEuler-24.03-LTS
openEuler-24.03-LTS-SP1

GVP openEuler/kernel

内容风险标识

评论 (3)

GVPopenEuler/kernel

内容风险标识