public inbox for linux-xfs@vger.kernel.org
 help / color / mirror / Atom feed
From: Brian Foster <bfoster@redhat.com>
To: Eryu Guan <eguan@redhat.com>
Cc: xfs@oss.sgi.com
Subject: Re: [PATCH] repair: fix wrong logic when validating node magic number
Date: Tue, 1 Sep 2015 10:04:43 -0400	[thread overview]
Message-ID: <20150901140442.GA16640@bfoster.bfoster> (raw)
In-Reply-To: <20150813071524.GI17933@dhcp-13-216.nay.redhat.com>

On Thu, Aug 13, 2015 at 03:15:24PM +0800, Eryu Guan wrote:
> On Thu, Aug 13, 2015 at 03:01:16PM +0800, Eryu Guan wrote:
> > Magic number is wrong only when != XFS_DA_NODE_MAGIC and
> > != XFS_DA3_NODE_MAGIC.
> > 
> > This is triggered by shared/002 when testing 512 block size XFS.
> > 
> >   Phase 1 - find and verify superblock...
> >   Phase 2 - using internal log
> >           - scan filesystem freespace and inode maps...
> >           - found root inode chunk
> >   Phase 3 - for each AG...
> >           - scan (but don't clear) agi unlinked lists...
> >           - process known inodes and perform inode discovery...
> >           - agno = 0
> >   bad magic number febe in block 64 (108) for directory inode 35
> >   ......
> > 
> > Fix it by changing "||" to "&&".
> > 
> > Signed-off-by: Eryu Guan <eguan@redhat.com>
> 
> With this patch applied, shared/002 still fails on 512 block size XFS,
> full xfs_repair -n output is                                                                                                                  
>                                                                                                                                               
> *** xfs_repair -n output ***                                                                                                                  
> Phase 1 - find and verify superblock...                                                                                                       
> Phase 2 - using internal log                                                                                                                  
>         - scan filesystem freespace and inode maps...                                                                                         
>         - found root inode chunk                                                                                                              
> Phase 3 - for each AG...                                                                                                                      
>         - scan (but don't clear) agi unlinked lists...                                                                                        
>         - process known inodes and perform inode discovery...                                                                                 
>         - agno = 0                                                                                                                            
> problem with attribute contents in inode 35                                                                                                   
> would clear attr fork                                                                                                                         
> bad nblocks 67 for inode 35, would reset to 0                                                                                                 
> bad anextents 5 for inode 35, would reset to 0                                                                                                
>         - agno = 1                                                                                                                            
>         - agno = 2                                                                                                                            
>         - agno = 3                                                                                                                            
>         - process newly discovered inodes...                                                                                                  
> Phase 4 - check for duplicate blocks...                                                                                                       
>         - setting up duplicate extent list...                                                                                                 
>         - check for inodes claiming duplicate blocks...                                                                                       
>         - agno = 0                                                                                                                            
>         - agno = 1                                                                                                                            
>         - agno = 2                                                                                                                            
>         - agno = 3                                                                                                                            
> No modify flag set, skipping phase 5                                                                                                          
> Phase 6 - check inode connectivity...                                                                                                         
>         - traversing filesystem ...                                                                                                           
>         - traversal finished ...                                                                                                              
>         - moving disconnected inodes to lost+found ...                                                                                        
> Phase 7 - verify link counts...                                                                                                               
> No modify flag set, skipping filesystem flush and exiting.                                                                                    
> *** end xfs_repair output
> 
> And a simplified reproducer is just adding >= 577 xattrs to file foo on
> 512 block size XFS, no dmflaky is needed.
> 
> num_xattrs=577
> for ((i = 1; i <= $num_xattrs; i++)); do
>         name="user.attr_$(printf "%04d" $i)"
>         $SETFATTR_PROG -n $name -v "val_$(printf "%04d" $i)" $SCRATCH_MNT/foo
> done
> 
> And it's easily reproduced.
> 

Thanks for the reproducer. This looks like a bug in xfs_repair. Care to
test the appended hunk?

Brian

---8<---

diff --git a/repair/attr_repair.c b/repair/attr_repair.c
index 83a07a8..b76618a 100644
--- a/repair/attr_repair.c
+++ b/repair/attr_repair.c
@@ -562,7 +562,7 @@ verify_da_path(xfs_mount_t	*mp,
 		}
 
 		newnode = (xfs_da_intnode_t *)XFS_BUF_PTR(bp);
-		btree = M_DIROPS(mp)->node_tree_p(node);
+		btree = M_DIROPS(mp)->node_tree_p(newnode);
 		M_DIROPS(mp)->node_hdr_from_disk(&nodehdr, newnode);
 
 		/*

_______________________________________________
xfs mailing list
xfs@oss.sgi.com
http://oss.sgi.com/mailman/listinfo/xfs

  parent reply	other threads:[~2015-09-01 14:04 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2015-08-13  7:01 [PATCH] repair: fix wrong logic when validating node magic number Eryu Guan
2015-08-13  7:15 ` Eryu Guan
2015-08-27  3:35   ` Zorro Lang
2015-09-01 14:04   ` Brian Foster [this message]
2015-09-02  2:19     ` Eryu Guan

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20150901140442.GA16640@bfoster.bfoster \
    --to=bfoster@redhat.com \
    --cc=eguan@redhat.com \
    --cc=xfs@oss.sgi.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox