linux-xfs.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* null pointer dereference in xfs_dir_isempty()
@ 2018-08-24 14:06 Xu, Wen
  2018-08-26 15:58 ` Eric Sandeen
  0 siblings, 1 reply; 2+ messages in thread
From: Xu, Wen @ 2018-08-24 14:06 UTC (permalink / raw)
  To: linux-xfs@vger.kernel.org; +Cc: Darrick J. Wong, Dave Chinner

[-- Attachment #1: Type: text/plain, Size: 135 bytes --]

Hi,

I found a new bug by fuzzing in upstream kernel.

Check details at: https://bugzilla.kernel.org/show_bug.cgi?id=200925

-Wen

[-- Attachment #2: 79.log --]
[-- Type: application/octet-stream, Size: 74403 bytes --]

[  282.506272] XFS (loop0): Mounting V4 Filesystem
[  282.530067] XFS (loop0): Ending clean mount
[  319.728545] XFS (loop0): xfs_dabuf_map: bno 8388608 dir: inode 13780
[  319.729984] XFS (loop0): [00] br_startoff 8388608 br_startblock -2 br_blockcount 1 br_state 0
[  319.731716] XFS (loop0): Internal error xfs_da_do_buf(1) at line 2558 of file fs/xfs/libxfs/xfs_da_btree.c.  Caller xfs_da_read_buf+0x116/0x280
[  319.734338] CPU: 0 PID: 1410 Comm: a.out Not tainted 4.18.0+ #9
[  319.734341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Ubuntu-1.8.2-1ubuntu1 04/01/2014
[  319.734344] Call Trace:
[  319.734356]  dump_stack+0x7b/0xb5
[  319.734362]  xfs_error_report+0x73/0x80
[  319.734367]  ? xfs_da_read_buf+0x116/0x280
[  319.734372]  ? xfs_da_read_buf+0x116/0x280
[  319.734379]  xfs_dabuf_map.constprop.18+0x2de/0x650
[  319.734390]  ? is_bpf_text_address+0xe/0x20
[  319.734396]  ? xfs_da3_node_read_verify+0x230/0x230
[  319.734407]  ? unwind_get_return_address+0x36/0x50
[  319.734415]  ? kasan_check_write+0x14/0x20
[  319.734425]  ? _raw_spin_lock_irqsave+0x2a/0x60
[  319.734432]  xfs_da_read_buf+0x116/0x280
[  319.734439]  ? xfs_da3_root_split.isra.14+0x710/0x710
[  319.734446]  ? xfs_dir_lookup+0x410/0x430
[  319.734454]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.734468]  ? __lookup_slow+0x12e/0x240
[  319.734480]  ? lookup_slow+0x44/0x60
[  319.734492]  ? walk_component+0x3f9/0x6b0
[  319.734497]  ? path_lookupat+0x133/0x430
[  319.734508]  ? filename_lookup+0x13c/0x280
[  319.734516]  ? user_path_at_empty+0x36/0x40
[  319.734530]  ? do_fchmodat+0x8f/0x110
[  319.734541]  ? __x64_sys_chmod+0x37/0x40
[  319.734555]  ? do_syscall_64+0x78/0x170
[  319.734566]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.734579]  ? __mod_node_page_state+0x27/0xa0
[  319.734590]  ? kasan_check_write+0x14/0x20
[  319.734612]  ? new_slab+0x450/0x660
[  319.734633]  ? xfs_lookup+0xd3/0x210
[  319.734648]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.734658]  xfs_da3_node_read+0x20/0x150
[  319.734665]  xfs_da3_node_lookup_int+0x1ac/0x7a0
[  319.734671]  ? kasan_kmalloc+0xad/0xe0
[  319.734677]  ? xfs_da3_node_toosmall+0x5c0/0x5c0
[  319.734684]  ? memcg_kmem_put_cache+0x1b/0xa0
[  319.734689]  ? kmem_cache_alloc+0x174/0x1e0
[  319.734696]  ? kmem_zone_alloc+0x91/0x120
[  319.734702]  ? kmem_zone_alloc+0x91/0x120
[  319.734709]  xfs_dir2_node_lookup+0xc3/0x300
[  319.734715]  ? xfs_dir2_isleaf+0xcd/0x120
[  319.734721]  ? xfs_dir2_node_addname+0x1380/0x1380
[  319.734726]  ? xfs_dir2_isblock+0x170/0x170
[  319.734732]  ? xfs_ilock+0x125/0x160
[  319.734739]  xfs_dir_lookup+0x410/0x430
[  319.734746]  ? xfs_dir_canenter+0x20/0x20
[  319.734751]  ? d_set_d_op+0x30/0x100
[  319.734757]  ? __d_lookup_rcu+0x69/0x2e0
[  319.734761]  ? __d_alloc+0x275/0x450
[  319.734768]  xfs_lookup+0xd3/0x210
[  319.734775]  ? xfs_ip2xflags+0x70/0x70
[  319.734780]  ? d_alloc_parallel+0x5bf/0x8d0
[  319.734795]  xfs_vn_ci_lookup+0x162/0x1f0
[  319.734820]  ? xfs_vn_lookup+0x160/0x160
[  319.734830]  ? __d_lookup_rcu+0x2e0/0x2e0
[  319.734857]  ? lockref_put_return+0xc3/0x130
[  319.734876]  ? lockref_get_or_lock+0x150/0x150
[  319.734887]  ? __nd_alloc_stack+0xa0/0xa0
[  319.734897]  ? __d_lookup+0x49/0x250
[  319.734904]  __lookup_slow+0x12e/0x240
[  319.734909]  ? may_delete+0x2b0/0x2b0
[  319.734915]  ? __nd_alloc_stack+0xa0/0xa0
[  319.734920]  lookup_slow+0x44/0x60
[  319.734926]  walk_component+0x3f9/0x6b0
[  319.734931]  ? pick_link+0x3e0/0x3e0
[  319.734937]  ? link_path_walk+0x516/0x7b0
[  319.734943]  ? walk_component+0x6b0/0x6b0
[  319.734948]  ? path_init+0x2df/0x570
[  319.734964]  path_lookupat+0x133/0x430
[  319.734978]  ? trailing_symlink+0x3b0/0x3b0
[  319.734989]  ? xfs_trans_free_items+0x1d0/0x1d0
[  319.735006]  ? xfs_trans_add_item+0x5e/0xf0
[  319.735015]  ? xfs_trans_log_inode+0xcd/0x1b0
[  319.735022]  ? xfs_trans_commit+0x10/0x20
[  319.735028]  ? xfs_vn_update_time+0x302/0x320
[  319.735034]  filename_lookup+0x13c/0x280
[  319.735040]  ? filename_parentat+0x2b0/0x2b0
[  319.735147]  ? kasan_kmalloc+0xad/0xe0
[  319.735158]  ? kasan_check_write+0x14/0x20
[  319.735167]  ? strncpy_from_user+0xa8/0x1c0
[  319.735174]  user_path_at_empty+0x36/0x40
[  319.735180]  ? user_path_at_empty+0x36/0x40
[  319.735186]  do_fchmodat+0x8f/0x110
[  319.735200]  ? __ia32_sys_fchmod+0x40/0x40
[  319.735214]  __x64_sys_chmod+0x37/0x40
[  319.735220]  do_syscall_64+0x78/0x170
[  319.735226]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.735231] RIP: 0033:0x7f3ea36d34d9
[  319.735238] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 8f 29 2c 00 f7 d8 64 89 01 48
[  319.735250] RSP: 002b:00007ffcc5ecbfe8 EFLAGS: 00000207 ORIG_RAX: 000000000000005a
[  319.735264] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ea36d34d9
[  319.735267] RDX: 00007f3ea36d34d9 RSI: 0000000000000c00 RDI: 00007ffcc5ecc070
[  319.735271] RBP: 00007ffcc5ece110 R08: 00007ffcc5ece1f8 R09: 00007ffcc5ece1f8
[  319.735274] R10: 00007ffcc5ece1f8 R11: 0000000000000207 R12: 0000000000400530
[  319.735278] R13: 00007ffcc5ece1f0 R14: 0000000000000000 R15: 0000000000000000
[  319.735384] XFS (loop0): xfs_dabuf_map: bno 8388608 dir: inode 13780
[  319.736665] XFS (loop0): [00] br_startoff 8388608 br_startblock -2 br_blockcount 1 br_state 0
[  319.738409] XFS (loop0): Internal error xfs_da_do_buf(1) at line 2558 of file fs/xfs/libxfs/xfs_da_btree.c.  Caller xfs_da_read_buf+0x116/0x280
[  319.741077] CPU: 0 PID: 1410 Comm: a.out Not tainted 4.18.0+ #9
[  319.741080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Ubuntu-1.8.2-1ubuntu1 04/01/2014
[  319.741082] Call Trace:
[  319.741090]  dump_stack+0x7b/0xb5
[  319.741095]  xfs_error_report+0x73/0x80
[  319.741100]  ? xfs_da_read_buf+0x116/0x280
[  319.741105]  ? xfs_da_read_buf+0x116/0x280
[  319.741111]  xfs_dabuf_map.constprop.18+0x2de/0x650
[  319.741118]  ? is_bpf_text_address+0xe/0x20
[  319.741124]  ? xfs_da3_node_read_verify+0x230/0x230
[  319.741131]  ? unwind_get_return_address+0x36/0x50
[  319.741137]  ? kasan_check_write+0x14/0x20
[  319.741144]  ? _raw_spin_lock_irqsave+0x2a/0x60
[  319.741151]  xfs_da_read_buf+0x116/0x280
[  319.741157]  ? xfs_da3_root_split.isra.14+0x710/0x710
[  319.741163]  ? xfs_dir_lookup+0x410/0x430
[  319.741169]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.741174]  ? __lookup_slow+0x12e/0x240
[  319.741179]  ? lookup_slow+0x44/0x60
[  319.741184]  ? walk_component+0x3f9/0x6b0
[  319.741198]  ? path_lookupat+0x133/0x430
[  319.741209]  ? filename_lookup+0x13c/0x280
[  319.741214]  ? user_path_at_empty+0x36/0x40
[  319.741232]  ? do_sys_truncate+0x8e/0x120
[  319.741240]  ? __x64_sys_truncate+0x31/0x40
[  319.741254]  ? do_syscall_64+0x78/0x170
[  319.741268]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.741275]  ? save_stack+0xb5/0xd0
[  319.741286]  ? save_stack+0x46/0xd0
[  319.741307]  ? kasan_kmalloc+0xad/0xe0
[  319.741320]  ? __kmalloc+0x117/0x230
[  319.741336]  ? kmem_alloc+0x91/0x120
[  319.741345]  ? xfs_dir_lookup+0x144/0x430
[  319.741350]  ? xfs_lookup+0xd3/0x210
[  319.741356]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.741361]  ? __lookup_slow+0x12e/0x240
[  319.741366]  ? lookup_slow+0x44/0x60
[  319.741371]  ? walk_component+0x3f9/0x6b0
[  319.741377]  ? xfs_iext_get_extent+0x27/0x190
[  319.741382]  xfs_da3_node_read+0x20/0x150
[  319.741389]  xfs_da3_node_lookup_int+0x1ac/0x7a0
[  319.741395]  ? kasan_kmalloc+0xad/0xe0
[  319.741401]  ? xfs_da3_node_toosmall+0x5c0/0x5c0
[  319.741407]  ? memcg_kmem_put_cache+0x1b/0xa0
[  319.741412]  ? kmem_cache_alloc+0x174/0x1e0
[  319.741417]  ? kmem_zone_alloc+0x91/0x120
[  319.741423]  ? kmem_zone_alloc+0x91/0x120
[  319.741440]  xfs_dir2_node_lookup+0xc3/0x300
[  319.741452]  ? xfs_dir2_isleaf+0xcd/0x120
[  319.741468]  ? xfs_dir2_node_addname+0x1380/0x1380
[  319.741480]  ? xfs_dir2_isblock+0x170/0x170
[  319.741491]  ? xfs_ilock+0x125/0x160
[  319.741502]  xfs_dir_lookup+0x410/0x430
[  319.741514]  ? xfs_dir_canenter+0x20/0x20
[  319.741529]  ? d_set_d_op+0x30/0x100
[  319.741534]  ? __d_lookup_rcu+0x69/0x2e0
[  319.741539]  ? __d_alloc+0x275/0x450
[  319.741546]  xfs_lookup+0xd3/0x210
[  319.741552]  ? xfs_ip2xflags+0x70/0x70
[  319.741557]  ? d_alloc_parallel+0x5bf/0x8d0
[  319.741571]  ? kasan_check_read+0x11/0x20
[  319.741584]  ? read_word_at_a_time+0x17/0x20
[  319.741596]  xfs_vn_ci_lookup+0x162/0x1f0
[  319.741602]  ? xfs_vn_lookup+0x160/0x160
[  319.741607]  ? __d_lookup_rcu+0x2e0/0x2e0
[  319.741612]  ? kasan_check_write+0x14/0x20
[  319.741621]  ? lockref_get_not_dead+0xc5/0x160
[  319.741632]  ? lockref_put_or_lock+0x160/0x160
[  319.741645]  ? __d_lookup_rcu+0x69/0x2e0
[  319.741652]  ? legitimize_path.isra.28+0x61/0xa0
[  319.741657]  __lookup_slow+0x12e/0x240
[  319.741663]  ? may_delete+0x2b0/0x2b0
[  319.741679]  ? __nd_alloc_stack+0xa0/0xa0
[  319.741688]  ? unwind_dump+0x290/0x290
[  319.741694]  lookup_slow+0x44/0x60
[  319.741700]  walk_component+0x3f9/0x6b0
[  319.741708]  ? pick_link+0x3e0/0x3e0
[  319.741722]  ? link_path_walk+0x516/0x7b0
[  319.741732]  ? _raw_spin_lock_irqsave+0x2a/0x60
[  319.741738]  ? walk_component+0x6b0/0x6b0
[  319.741742]  ? path_init+0x2df/0x570
[  319.741751]  path_lookupat+0x133/0x430
[  319.741764]  ? trailing_symlink+0x3b0/0x3b0
[  319.741773]  ? xfs_trans_free_items+0x1d0/0x1d0
[  319.741779]  ? timespec64_trunc+0x5c/0x90
[  319.741785]  ? current_time+0xb3/0x110
[  319.741793]  ? timespec64_trunc+0x90/0x90
[  319.741807]  filename_lookup+0x13c/0x280
[  319.741813]  ? filename_parentat+0x2b0/0x2b0
[  319.741820]  ? kasan_kmalloc+0xad/0xe0
[  319.741828]  ? kasan_check_write+0x14/0x20
[  319.741841]  user_path_at_empty+0x36/0x40
[  319.741847]  ? user_path_at_empty+0x36/0x40
[  319.741853]  do_sys_truncate+0x8e/0x120
[  319.741862]  ? vfs_truncate+0x380/0x380
[  319.741878]  __x64_sys_truncate+0x31/0x40
[  319.741884]  do_syscall_64+0x78/0x170
[  319.741889]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.741902] RIP: 0033:0x7f3ea36d34d9
[  319.741911] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 8f 29 2c 00 f7 d8 64 89 01 48
[  319.741914] RSP: 002b:00007ffcc5ecbfe8 EFLAGS: 00000217 ORIG_RAX: 000000000000004c
[  319.741919] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ea36d34d9
[  319.741923] RDX: 00007f3ea36d34d9 RSI: 000000000000137e RDI: 00007ffcc5ecc070
[  319.741934] RBP: 00007ffcc5ece110 R08: 00007ffcc5ece1f8 R09: 00007ffcc5ece1f8
[  319.741947] R10: 00007ffcc5ece1f8 R11: 0000000000000217 R12: 0000000000400530
[  319.741950] R13: 00007ffcc5ece1f0 R14: 0000000000000000 R15: 0000000000000000
[  319.742031] XFS (loop0): xfs_dabuf_map: bno 8388608 dir: inode 13780
[  319.743330] XFS (loop0): [00] br_startoff 8388608 br_startblock -2 br_blockcount 1 br_state 0
[  319.745125] XFS (loop0): Internal error xfs_da_do_buf(1) at line 2558 of file fs/xfs/libxfs/xfs_da_btree.c.  Caller xfs_da_read_buf+0x116/0x280
[  319.747663] CPU: 0 PID: 1410 Comm: a.out Not tainted 4.18.0+ #9
[  319.747666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Ubuntu-1.8.2-1ubuntu1 04/01/2014
[  319.747667] Call Trace:
[  319.747675]  dump_stack+0x7b/0xb5
[  319.747680]  xfs_error_report+0x73/0x80
[  319.747685]  ? xfs_da_read_buf+0x116/0x280
[  319.747690]  ? xfs_da_read_buf+0x116/0x280
[  319.747697]  xfs_dabuf_map.constprop.18+0x2de/0x650
[  319.747703]  ? is_bpf_text_address+0xe/0x20
[  319.747710]  ? xfs_da3_node_read_verify+0x230/0x230
[  319.747716]  ? unwind_get_return_address+0x36/0x50
[  319.747724]  ? __save_stack_trace+0x92/0x100
[  319.747731]  xfs_da_read_buf+0x116/0x280
[  319.747738]  ? xfs_da3_root_split.isra.14+0x710/0x710
[  319.747744]  ? xfs_dir_lookup+0x410/0x430
[  319.747750]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.747755]  ? __lookup_slow+0x12e/0x240
[  319.747759]  ? lookup_slow+0x44/0x60
[  319.747764]  ? walk_component+0x3f9/0x6b0
[  319.747769]  ? path_lookupat+0x133/0x430
[  319.747775]  ? filename_lookup+0x13c/0x280
[  319.747780]  ? user_path_at_empty+0x36/0x40
[  319.747786]  ? do_fchmodat+0x8f/0x110
[  319.747791]  ? __x64_sys_chmod+0x37/0x40
[  319.747797]  ? do_syscall_64+0x78/0x170
[  319.747802]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.747806]  ? save_stack+0xb5/0xd0
[  319.747811]  ? save_stack+0x46/0xd0
[  319.747816]  ? kasan_kmalloc+0xad/0xe0
[  319.747820]  ? __kmalloc+0x117/0x230
[  319.747825]  ? kmem_alloc+0x91/0x120
[  319.747831]  ? xfs_dir_lookup+0x144/0x430
[  319.747837]  ? xfs_lookup+0xd3/0x210
[  319.747842]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.747847]  ? __lookup_slow+0x12e/0x240
[  319.747852]  ? lookup_slow+0x44/0x60
[  319.747857]  ? walk_component+0x3f9/0x6b0
[  319.747862]  ? xfs_iext_get_extent+0x27/0x190
[  319.747868]  xfs_da3_node_read+0x20/0x150
[  319.747874]  xfs_da3_node_lookup_int+0x1ac/0x7a0
[  319.747881]  ? kasan_kmalloc+0xad/0xe0
[  319.747887]  ? xfs_da3_node_toosmall+0x5c0/0x5c0
[  319.747893]  ? memcg_kmem_put_cache+0x1b/0xa0
[  319.747897]  ? kmem_cache_alloc+0x174/0x1e0
[  319.747903]  ? kmem_zone_alloc+0x91/0x120
[  319.747909]  ? kmem_zone_alloc+0x91/0x120
[  319.747915]  xfs_dir2_node_lookup+0xc3/0x300
[  319.747921]  ? xfs_dir2_isleaf+0xcd/0x120
[  319.747926]  ? xfs_dir2_node_addname+0x1380/0x1380
[  319.747932]  ? xfs_dir2_isblock+0x170/0x170
[  319.747938]  ? xfs_ilock+0x125/0x160
[  319.747945]  xfs_dir_lookup+0x410/0x430
[  319.747951]  ? xfs_dir_canenter+0x20/0x20
[  319.747955]  ? d_set_d_op+0x30/0x100
[  319.747960]  ? __d_lookup_rcu+0x69/0x2e0
[  319.747965]  ? __d_alloc+0x275/0x450
[  319.747971]  xfs_lookup+0xd3/0x210
[  319.747978]  ? xfs_ip2xflags+0x70/0x70
[  319.747983]  ? d_alloc_parallel+0x5bf/0x8d0
[  319.747988]  ? kasan_check_read+0x11/0x20
[  319.747992]  ? read_word_at_a_time+0x17/0x20
[  319.747999]  xfs_vn_ci_lookup+0x162/0x1f0
[  319.748005]  ? xfs_vn_lookup+0x160/0x160
[  319.748011]  ? __d_lookup_rcu+0x2e0/0x2e0
[  319.748016]  ? kasan_check_write+0x14/0x20
[  319.748021]  ? lockref_get_not_dead+0xc5/0x160
[  319.748027]  ? lockref_put_or_lock+0x160/0x160
[  319.748032]  ? __d_lookup_rcu+0x69/0x2e0
[  319.748038]  ? legitimize_path.isra.28+0x61/0xa0
[  319.748044]  __lookup_slow+0x12e/0x240
[  319.748050]  ? may_delete+0x2b0/0x2b0
[  319.748055]  ? __nd_alloc_stack+0xa0/0xa0
[  319.748061]  lookup_slow+0x44/0x60
[  319.748066]  walk_component+0x3f9/0x6b0
[  319.748072]  ? pick_link+0x3e0/0x3e0
[  319.748077]  ? link_path_walk+0x516/0x7b0
[  319.748083]  ? walk_component+0x6b0/0x6b0
[  319.748088]  ? path_init+0x2df/0x570
[  319.748094]  path_lookupat+0x133/0x430
[  319.748100]  ? trailing_symlink+0x3b0/0x3b0
[  319.748106]  ? xfs_trans_free_items+0x1d0/0x1d0
[  319.748112]  ? putname+0x80/0x90
[  319.748117]  ? __kasan_slab_free+0x151/0x1a0
[  319.748122]  ? putname+0x80/0x90
[  319.748127]  ? kasan_slab_free+0xe/0x10
[  319.748133]  ? kmem_cache_free+0x89/0x1e0
[  319.748139]  filename_lookup+0x13c/0x280
[  319.748145]  ? filename_parentat+0x2b0/0x2b0
[  319.748152]  ? kasan_kmalloc+0xad/0xe0
[  319.748157]  ? kasan_check_write+0x14/0x20
[  319.748163]  ? strncpy_from_user+0xa8/0x1c0
[  319.748170]  user_path_at_empty+0x36/0x40
[  319.748176]  ? user_path_at_empty+0x36/0x40
[  319.748182]  do_fchmodat+0x8f/0x110
[  319.748187]  ? do_sys_truncate+0x8e/0x120
[  319.748193]  ? __ia32_sys_fchmod+0x40/0x40
[  319.748198]  ? vfs_truncate+0x380/0x380
[  319.748206]  __x64_sys_chmod+0x37/0x40
[  319.748212]  do_syscall_64+0x78/0x170
[  319.748217]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.748221] RIP: 0033:0x7f3ea36d34d9
[  319.748227] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 8f 29 2c 00 f7 d8 64 89 01 48
[  319.748230] RSP: 002b:00007ffcc5ecbfe8 EFLAGS: 00000286 ORIG_RAX: 000000000000005a
[  319.748235] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ea36d34d9
[  319.748239] RDX: ffffffffffffff98 RSI: 0000000000000c00 RDI: 00007ffcc5ecc070
[  319.748243] RBP: 00007ffcc5ece110 R08: 00007ffcc5ece1f8 R09: 00007ffcc5ece1f8
[  319.748246] R10: 00007ffcc5ece1f8 R11: 0000000000000286 R12: 0000000000400530
[  319.748249] R13: 00007ffcc5ece1f0 R14: 0000000000000000 R15: 0000000000000000
[  319.748313] XFS (loop0): xfs_dabuf_map: bno 8388608 dir: inode 13780
[  319.749646] XFS (loop0): [00] br_startoff 8388608 br_startblock -2 br_blockcount 1 br_state 0
[  319.751354] XFS (loop0): Internal error xfs_da_do_buf(1) at line 2558 of file fs/xfs/libxfs/xfs_da_btree.c.  Caller xfs_da_read_buf+0x116/0x280
[  319.753924] CPU: 0 PID: 1410 Comm: a.out Not tainted 4.18.0+ #9
[  319.753927] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Ubuntu-1.8.2-1ubuntu1 04/01/2014
[  319.753929] Call Trace:
[  319.753937]  dump_stack+0x7b/0xb5
[  319.753942]  xfs_error_report+0x73/0x80
[  319.753948]  ? xfs_da_read_buf+0x116/0x280
[  319.753952]  ? xfs_da_read_buf+0x116/0x280
[  319.753959]  xfs_dabuf_map.constprop.18+0x2de/0x650
[  319.753966]  ? is_bpf_text_address+0xe/0x20
[  319.753972]  ? xfs_da3_node_read_verify+0x230/0x230
[  319.753979]  ? unwind_get_return_address+0x36/0x50
[  319.753984]  ? kasan_check_write+0x14/0x20
[  319.753991]  ? _raw_spin_lock_irqsave+0x2a/0x60
[  319.753998]  xfs_da_read_buf+0x116/0x280
[  319.754005]  ? xfs_da3_root_split.isra.14+0x710/0x710
[  319.754010]  ? xfs_dir_lookup+0x410/0x430
[  319.754016]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.754021]  ? __lookup_slow+0x12e/0x240
[  319.754026]  ? lookup_slow+0x44/0x60
[  319.754031]  ? walk_component+0x3f9/0x6b0
[  319.754036]  ? path_lookupat+0x133/0x430
[  319.754041]  ? filename_lookup+0x13c/0x280
[  319.754047]  ? user_path_at_empty+0x36/0x40
[  319.754052]  ? vfs_statx+0xce/0x160
[  319.754058]  ? __do_sys_newlstat+0x8c/0xe0
[  319.754064]  ? __x64_sys_newlstat+0x31/0x40
[  319.754079]  ? do_syscall_64+0x78/0x170
[  319.754090]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.754103]  ? save_stack+0xb5/0xd0
[  319.754116]  ? save_stack+0x46/0xd0
[  319.754132]  ? kasan_kmalloc+0xad/0xe0
[  319.754139]  ? __kmalloc+0x117/0x230
[  319.754154]  ? kmem_alloc+0x91/0x120
[  319.754171]  ? xfs_dir_lookup+0x144/0x430
[  319.754190]  ? xfs_lookup+0xd3/0x210
[  319.754202]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.754218]  ? __lookup_slow+0x12e/0x240
[  319.754237]  ? lookup_slow+0x44/0x60
[  319.754245]  ? walk_component+0x3f9/0x6b0
[  319.754251]  ? xfs_iext_get_extent+0x27/0x190
[  319.754256]  xfs_da3_node_read+0x20/0x150
[  319.754263]  xfs_da3_node_lookup_int+0x1ac/0x7a0
[  319.754269]  ? kasan_kmalloc+0xad/0xe0
[  319.754275]  ? xfs_da3_node_toosmall+0x5c0/0x5c0
[  319.754281]  ? memcg_kmem_put_cache+0x1b/0xa0
[  319.754285]  ? kmem_cache_alloc+0x174/0x1e0
[  319.754291]  ? kmem_zone_alloc+0x91/0x120
[  319.754297]  ? kmem_zone_alloc+0x91/0x120
[  319.754303]  xfs_dir2_node_lookup+0xc3/0x300
[  319.754309]  ? xfs_dir2_isleaf+0xcd/0x120
[  319.754324]  ? xfs_dir2_node_addname+0x1380/0x1380
[  319.754347]  ? xfs_dir2_isblock+0x170/0x170
[  319.754364]  ? xfs_ilock+0x125/0x160
[  319.754375]  xfs_dir_lookup+0x410/0x430
[  319.754384]  ? xfs_dir_canenter+0x20/0x20
[  319.754391]  ? d_set_d_op+0x30/0x100
[  319.754396]  ? __d_lookup_rcu+0x69/0x2e0
[  319.754401]  ? __d_alloc+0x275/0x450
[  319.754407]  xfs_lookup+0xd3/0x210
[  319.754414]  ? xfs_ip2xflags+0x70/0x70
[  319.754419]  ? d_alloc_parallel+0x5bf/0x8d0
[  319.754432]  ? kasan_check_read+0x11/0x20
[  319.754446]  ? read_word_at_a_time+0x17/0x20
[  319.754458]  xfs_vn_ci_lookup+0x162/0x1f0
[  319.754465]  ? xfs_vn_lookup+0x160/0x160
[  319.754470]  ? __d_lookup_rcu+0x2e0/0x2e0
[  319.754475]  ? kasan_check_write+0x14/0x20
[  319.754492]  ? lockref_get_not_dead+0xc5/0x160
[  319.754498]  ? lockref_put_or_lock+0x160/0x160
[  319.754503]  ? __d_lookup_rcu+0x69/0x2e0
[  319.754509]  ? legitimize_path.isra.28+0x61/0xa0
[  319.754526]  __lookup_slow+0x12e/0x240
[  319.754532]  ? may_delete+0x2b0/0x2b0
[  319.754537]  ? __nd_alloc_stack+0xa0/0xa0
[  319.754543]  lookup_slow+0x44/0x60
[  319.754560]  walk_component+0x3f9/0x6b0
[  319.754565]  ? pick_link+0x3e0/0x3e0
[  319.754571]  ? link_path_walk+0x516/0x7b0
[  319.754577]  ? walk_component+0x6b0/0x6b0
[  319.754593]  ? path_init+0x2df/0x570
[  319.754599]  path_lookupat+0x133/0x430
[  319.754605]  ? trailing_symlink+0x3b0/0x3b0
[  319.754614]  ? mntput_no_expire+0x3a/0x290
[  319.754628]  ? mntput+0x36/0x50
[  319.754632]  ? terminate_walk+0xd2/0x1e0
[  319.754639]  filename_lookup+0x13c/0x280
[  319.754644]  ? trailing_symlink+0x3b0/0x3b0
[  319.754656]  ? filename_parentat+0x2b0/0x2b0
[  319.754669]  ? kasan_kmalloc+0xad/0xe0
[  319.754675]  ? kasan_check_write+0x14/0x20
[  319.754681]  ? strncpy_from_user+0xa8/0x1c0
[  319.754688]  user_path_at_empty+0x36/0x40
[  319.754704]  ? user_path_at_empty+0x36/0x40
[  319.754710]  vfs_statx+0xce/0x160
[  319.754716]  ? vfs_statx_fd+0x80/0x80
[  319.754724]  ? kasan_check_write+0x14/0x20
[  319.754739]  ? strncpy_from_user+0xa8/0x1c0
[  319.754747]  __do_sys_newlstat+0x8c/0xe0
[  319.754754]  ? __ia32_sys_newstat+0x40/0x40
[  319.754759]  ? user_path_at_empty+0x36/0x40
[  319.754765]  ? user_path_at_empty+0x36/0x40
[  319.754779]  ? do_fchmodat+0x8f/0x110
[  319.754790]  ? do_sys_truncate+0x8e/0x120
[  319.754799]  ? __ia32_sys_fchmod+0x40/0x40
[  319.754805]  ? vfs_truncate+0x380/0x380
[  319.754812]  __x64_sys_newlstat+0x31/0x40
[  319.754823]  do_syscall_64+0x78/0x170
[  319.754834]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.754838] RIP: 0033:0x7f3ea36d34d9
[  319.754844] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 8f 29 2c 00 f7 d8 64 89 01 48
[  319.754847] RSP: 002b:00007ffcc5ecbfe8 EFLAGS: 00000286 ORIG_RAX: 0000000000000006
[  319.754866] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ea36d34d9
[  319.754870] RDX: ffffffffffffff98 RSI: 00007ffcc5ecc100 RDI: 00007ffcc5ecc080
[  319.754873] RBP: 00007ffcc5ece110 R08: 00007ffcc5ece1f8 R09: 00007ffcc5ece1f8
[  319.754877] R10: 00007ffcc5ece1f8 R11: 0000000000000286 R12: 0000000000400530
[  319.754880] R13: 00007ffcc5ece1f0 R14: 0000000000000000 R15: 0000000000000000
[  319.754948] XFS (loop0): xfs_dabuf_map: bno 8388608 dir: inode 13780
[  319.756257] XFS (loop0): [00] br_startoff 8388608 br_startblock -2 br_blockcount 1 br_state 0
[  319.757991] XFS (loop0): Internal error xfs_da_do_buf(1) at line 2558 of file fs/xfs/libxfs/xfs_da_btree.c.  Caller xfs_da_read_buf+0x116/0x280
[  319.760582] CPU: 0 PID: 1410 Comm: a.out Not tainted 4.18.0+ #9
[  319.760586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Ubuntu-1.8.2-1ubuntu1 04/01/2014
[  319.760587] Call Trace:
[  319.760595]  dump_stack+0x7b/0xb5
[  319.760600]  xfs_error_report+0x73/0x80
[  319.760605]  ? xfs_da_read_buf+0x116/0x280
[  319.760610]  ? xfs_da_read_buf+0x116/0x280
[  319.760617]  xfs_dabuf_map.constprop.18+0x2de/0x650
[  319.760623]  ? is_bpf_text_address+0xe/0x20
[  319.760630]  ? xfs_da3_node_read_verify+0x230/0x230
[  319.760636]  ? unwind_get_return_address+0x36/0x50
[  319.760642]  ? kasan_check_write+0x14/0x20
[  319.760649]  ? _raw_spin_lock_irqsave+0x2a/0x60
[  319.760656]  xfs_da_read_buf+0x116/0x280
[  319.760662]  ? xfs_da3_root_split.isra.14+0x710/0x710
[  319.760668]  ? xfs_dir_lookup+0x410/0x430
[  319.760674]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.760679]  ? __lookup_hash+0x91/0xb0
[  319.760684]  ? filename_create+0x131/0x2c0
[  319.760690]  ? do_symlinkat+0xbc/0x1c0
[  319.760695]  ? __x64_sys_symlink+0x36/0x40
[  319.760701]  ? do_syscall_64+0x78/0x170
[  319.760706]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.760711]  ? save_stack+0xb5/0xd0
[  319.760716]  ? save_stack+0x46/0xd0
[  319.760720]  ? kasan_kmalloc+0xad/0xe0
[  319.760724]  ? __kmalloc+0x117/0x230
[  319.760730]  ? kmem_alloc+0x91/0x120
[  319.760736]  ? xfs_dir_lookup+0x144/0x430
[  319.760741]  ? xfs_lookup+0xd3/0x210
[  319.760747]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.760752]  ? __lookup_hash+0x91/0xb0
[  319.760757]  ? filename_create+0x131/0x2c0
[  319.760762]  ? do_symlinkat+0xbc/0x1c0
[  319.760768]  ? xfs_iext_get_extent+0x27/0x190
[  319.760774]  xfs_da3_node_read+0x20/0x150
[  319.760780]  xfs_da3_node_lookup_int+0x1ac/0x7a0
[  319.760787]  ? kasan_kmalloc+0xad/0xe0
[  319.760793]  ? xfs_da3_node_toosmall+0x5c0/0x5c0
[  319.760799]  ? memcg_kmem_put_cache+0x1b/0xa0
[  319.760804]  ? kmem_cache_alloc+0x174/0x1e0
[  319.760815]  ? kmem_zone_alloc+0x91/0x120
[  319.760821]  ? kmem_zone_alloc+0x91/0x120
[  319.760827]  xfs_dir2_node_lookup+0xc3/0x300
[  319.760833]  ? xfs_dir2_isleaf+0xcd/0x120
[  319.760839]  ? xfs_dir2_node_addname+0x1380/0x1380
[  319.760844]  ? xfs_dir2_isblock+0x170/0x170
[  319.760850]  ? xfs_ilock+0x125/0x160
[  319.760857]  xfs_dir_lookup+0x410/0x430
[  319.760864]  ? xfs_dir_canenter+0x20/0x20
[  319.760871]  xfs_lookup+0xd3/0x210
[  319.760878]  ? xfs_ip2xflags+0x70/0x70
[  319.760885]  xfs_vn_ci_lookup+0x162/0x1f0
[  319.760892]  ? xfs_vn_lookup+0x160/0x160
[  319.760897]  ? kasan_kmalloc+0xad/0xe0
[  319.760903]  ? memcg_kmem_put_cache+0x55/0xa0
[  319.760908]  ? d_set_d_op+0x30/0x100
[  319.760913]  ? __d_alloc+0x275/0x450
[  319.760918]  ? kasan_check_write+0x14/0x20
[  319.760924]  ? _raw_spin_lock+0x17/0x40
[  319.760929]  ? d_alloc+0xd0/0x100
[  319.760934]  __lookup_hash+0x91/0xb0
[  319.760940]  filename_create+0x131/0x2c0
[  319.760946]  ? kern_path_mountpoint+0x40/0x40
[  319.760951]  ? kasan_check_write+0x14/0x20
[  319.760957]  ? strncpy_from_user+0xa8/0x1c0
[  319.760963]  ? getname_flags+0x110/0x2c0
[  319.760970]  do_symlinkat+0xbc/0x1c0
[  319.760975]  ? do_fchmodat+0x8f/0x110
[  319.760981]  ? __x64_sys_unlinkat+0x90/0x90
[  319.760987]  ? vfs_truncate+0x380/0x380
[  319.760994]  __x64_sys_symlink+0x36/0x40
[  319.761000]  do_syscall_64+0x78/0x170
[  319.761005]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.761009] RIP: 0033:0x7f3ea36d34d9
[  319.761015] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 8f 29 2c 00 f7 d8 64 89 01 48
[  319.761018] RSP: 002b:00007ffcc5ecbfe8 EFLAGS: 00000286 ORIG_RAX: 0000000000000058
[  319.761023] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ea36d34d9
[  319.761027] RDX: ffffffffffffff98 RSI: 00007ffcc5ecc0e0 RDI: 00007ffcc5ecc010
[  319.761031] RBP: 00007ffcc5ece110 R08: 00007ffcc5ece1f8 R09: 00007ffcc5ece1f8
[  319.761034] R10: 00007ffcc5ece1f8 R11: 0000000000000286 R12: 0000000000400530
[  319.761037] R13: 00007ffcc5ece1f0 R14: 0000000000000000 R15: 0000000000000000
[  319.761158] XFS (loop0): xfs_dabuf_map: bno 8388608 dir: inode 13780
[  319.762439] XFS (loop0): [00] br_startoff 8388608 br_startblock -2 br_blockcount 1 br_state 0
[  319.764140] XFS (loop0): Internal error xfs_da_do_buf(1) at line 2558 of file fs/xfs/libxfs/xfs_da_btree.c.  Caller xfs_da_read_buf+0x116/0x280
[  319.766728] CPU: 0 PID: 1410 Comm: a.out Not tainted 4.18.0+ #9
[  319.766731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Ubuntu-1.8.2-1ubuntu1 04/01/2014
[  319.766732] Call Trace:
[  319.766740]  dump_stack+0x7b/0xb5
[  319.766745]  xfs_error_report+0x73/0x80
[  319.766751]  ? xfs_da_read_buf+0x116/0x280
[  319.766755]  ? xfs_da_read_buf+0x116/0x280
[  319.766762]  xfs_dabuf_map.constprop.18+0x2de/0x650
[  319.766768]  ? is_bpf_text_address+0xe/0x20
[  319.766775]  ? xfs_da3_node_read_verify+0x230/0x230
[  319.766781]  ? unwind_get_return_address+0x36/0x50
[  319.766787]  ? kasan_check_write+0x14/0x20
[  319.766793]  ? _raw_spin_lock_irqsave+0x2a/0x60
[  319.766800]  xfs_da_read_buf+0x116/0x280
[  319.766807]  ? xfs_da3_root_split.isra.14+0x710/0x710
[  319.766813]  ? xfs_dir_lookup+0x410/0x430
[  319.766819]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.766824]  ? __lookup_slow+0x12e/0x240
[  319.766828]  ? lookup_slow+0x44/0x60
[  319.766833]  ? walk_component+0x3f9/0x6b0
[  319.766838]  ? path_lookupat+0x133/0x430
[  319.766844]  ? filename_lookup+0x13c/0x280
[  319.766849]  ? user_path_at_empty+0x36/0x40
[  319.766855]  ? do_readlinkat+0xe3/0x210
[  319.766861]  ? __x64_sys_readlink+0x48/0x60
[  319.766876]  ? do_syscall_64+0x78/0x170
[  319.766881]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.766898]  ? save_stack+0xb5/0xd0
[  319.766911]  ? save_stack+0x46/0xd0
[  319.766925]  ? kasan_kmalloc+0xad/0xe0
[  319.766937]  ? __kmalloc+0x117/0x230
[  319.766951]  ? kmem_alloc+0x91/0x120
[  319.766968]  ? xfs_dir_lookup+0x144/0x430
[  319.766983]  ? xfs_lookup+0xd3/0x210
[  319.767000]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.767016]  ? __lookup_slow+0x12e/0x240
[  319.767032]  ? lookup_slow+0x44/0x60
[  319.767043]  ? walk_component+0x3f9/0x6b0
[  319.767060]  ? xfs_iext_get_extent+0x27/0x190
[  319.767066]  xfs_da3_node_read+0x20/0x150
[  319.767073]  xfs_da3_node_lookup_int+0x1ac/0x7a0
[  319.767079]  ? kasan_kmalloc+0xad/0xe0
[  319.767085]  ? xfs_da3_node_toosmall+0x5c0/0x5c0
[  319.767091]  ? memcg_kmem_put_cache+0x1b/0xa0
[  319.767095]  ? kmem_cache_alloc+0x174/0x1e0
[  319.767101]  ? kmem_zone_alloc+0x91/0x120
[  319.767107]  ? kmem_zone_alloc+0x91/0x120
[  319.767113]  xfs_dir2_node_lookup+0xc3/0x300
[  319.767119]  ? xfs_dir2_isleaf+0xcd/0x120
[  319.767124]  ? xfs_dir2_node_addname+0x1380/0x1380
[  319.767130]  ? xfs_dir2_isblock+0x170/0x170
[  319.767136]  ? xfs_ilock+0x125/0x160
[  319.767143]  xfs_dir_lookup+0x410/0x430
[  319.767149]  ? xfs_dir_canenter+0x20/0x20
[  319.767153]  ? d_set_d_op+0x30/0x100
[  319.767158]  ? __d_lookup_rcu+0x69/0x2e0
[  319.767163]  ? __d_alloc+0x275/0x450
[  319.767170]  xfs_lookup+0xd3/0x210
[  319.767176]  ? xfs_ip2xflags+0x70/0x70
[  319.767181]  ? d_alloc_parallel+0x5bf/0x8d0
[  319.767186]  ? kasan_check_read+0x11/0x20
[  319.767191]  ? read_word_at_a_time+0x17/0x20
[  319.767198]  xfs_vn_ci_lookup+0x162/0x1f0
[  319.767204]  ? xfs_vn_lookup+0x160/0x160
[  319.767222]  ? __d_lookup_rcu+0x2e0/0x2e0
[  319.767238]  ? kasan_check_write+0x14/0x20
[  319.767249]  ? lockref_get_not_dead+0xc5/0x160
[  319.767268]  ? lockref_put_or_lock+0x160/0x160
[  319.767284]  ? __d_lookup_rcu+0x69/0x2e0
[  319.767306]  ? legitimize_path.isra.28+0x61/0xa0
[  319.767314]  __lookup_slow+0x12e/0x240
[  319.767332]  ? may_delete+0x2b0/0x2b0
[  319.767343]  ? __nd_alloc_stack+0xa0/0xa0
[  319.767356]  lookup_slow+0x44/0x60
[  319.767365]  walk_component+0x3f9/0x6b0
[  319.767371]  ? pick_link+0x3e0/0x3e0
[  319.767376]  ? link_path_walk+0x516/0x7b0
[  319.767382]  ? walk_component+0x6b0/0x6b0
[  319.767386]  ? path_init+0x2df/0x570
[  319.767393]  path_lookupat+0x133/0x430
[  319.767399]  ? trailing_symlink+0x3b0/0x3b0
[  319.767403]  ? putname+0x80/0x90
[  319.767422]  ? save_stack+0xb5/0xd0
[  319.767438]  ? save_stack+0x46/0xd0
[  319.767443]  ? __kasan_slab_free+0x13c/0x1a0
[  319.767448]  ? kasan_slab_free+0xe/0x10
[  319.767454]  ? kmem_cache_free+0x89/0x1e0
[  319.767459]  ? putname+0x80/0x90
[  319.767470]  ? do_symlinkat+0x10b/0x1c0
[  319.767487]  ? __x64_sys_symlink+0x36/0x40
[  319.767492]  ? do_syscall_64+0x78/0x170
[  319.767497]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.767504]  filename_lookup+0x13c/0x280
[  319.767515]  ? lockref_put_return+0xc3/0x130
[  319.767529]  ? filename_parentat+0x2b0/0x2b0
[  319.767538]  ? kasan_kmalloc+0xad/0xe0
[  319.767544]  ? kasan_check_write+0x14/0x20
[  319.767550]  ? strncpy_from_user+0xa8/0x1c0
[  319.767559]  user_path_at_empty+0x36/0x40
[  319.767573]  ? user_path_at_empty+0x36/0x40
[  319.767579]  do_readlinkat+0xe3/0x210
[  319.767586]  ? __x32_compat_sys_newfstat+0x40/0x40
[  319.767598]  ? do_symlinkat+0x10b/0x1c0
[  319.767609]  ? do_fchmodat+0x8f/0x110
[  319.767615]  ? __x64_sys_unlinkat+0x90/0x90
[  319.767620]  ? vfs_truncate+0x380/0x380
[  319.767630]  __x64_sys_readlink+0x48/0x60
[  319.767641]  do_syscall_64+0x78/0x170
[  319.767649]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.767658] RIP: 0033:0x7f3ea36d34d9
[  319.767665] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 8f 29 2c 00 f7 d8 64 89 01 48
[  319.767668] RSP: 002b:00007ffcc5ecbfe8 EFLAGS: 00000286 ORIG_RAX: 0000000000000059
[  319.767673] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ea36d34d9
[  319.767676] RDX: 0000000000002000 RSI: 00007ffcc5ecc100 RDI: 00007ffcc5ecc090
[  319.767691] RBP: 00007ffcc5ece110 R08: 00007ffcc5ece1f8 R09: 00007ffcc5ece1f8
[  319.767703] R10: 00007ffcc5ece1f8 R11: 0000000000000286 R12: 0000000000400530
[  319.767706] R13: 00007ffcc5ece1f0 R14: 0000000000000000 R15: 0000000000000000
[  319.767771] XFS (loop0): xfs_dabuf_map: bno 8388608 dir: inode 13780
[  319.769101] XFS (loop0): [00] br_startoff 8388608 br_startblock -2 br_blockcount 1 br_state 0
[  319.770806] XFS (loop0): Internal error xfs_da_do_buf(1) at line 2558 of file fs/xfs/libxfs/xfs_da_btree.c.  Caller xfs_da_read_buf+0x116/0x280
[  319.773469] CPU: 0 PID: 1410 Comm: a.out Not tainted 4.18.0+ #9
[  319.773472] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Ubuntu-1.8.2-1ubuntu1 04/01/2014
[  319.773473] Call Trace:
[  319.773481]  dump_stack+0x7b/0xb5
[  319.773486]  xfs_error_report+0x73/0x80
[  319.773492]  ? xfs_da_read_buf+0x116/0x280
[  319.773496]  ? xfs_da_read_buf+0x116/0x280
[  319.773503]  xfs_dabuf_map.constprop.18+0x2de/0x650
[  319.773510]  ? is_bpf_text_address+0xe/0x20
[  319.773516]  ? xfs_da3_node_read_verify+0x230/0x230
[  319.773522]  ? unwind_get_return_address+0x36/0x50
[  319.773528]  ? kasan_check_write+0x14/0x20
[  319.773535]  ? _raw_spin_lock_irqsave+0x2a/0x60
[  319.773542]  xfs_da_read_buf+0x116/0x280
[  319.773548]  ? xfs_da3_root_split.isra.14+0x710/0x710
[  319.773554]  ? xfs_dir_lookup+0x410/0x430
[  319.773560]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.773565]  ? __lookup_slow+0x12e/0x240
[  319.773570]  ? lookup_slow+0x44/0x60
[  319.773575]  ? walk_component+0x3f9/0x6b0
[  319.773580]  ? path_lookupat+0x133/0x430
[  319.773585]  ? filename_lookup+0x13c/0x280
[  319.773591]  ? user_path_at_empty+0x36/0x40
[  319.773606]  ? vfs_statx+0xce/0x160
[  319.773618]  ? __do_sys_newstat+0x8c/0xe0
[  319.773629]  ? __x64_sys_newstat+0x31/0x40
[  319.773646]  ? do_syscall_64+0x78/0x170
[  319.773660]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.773670]  ? save_stack+0xb5/0xd0
[  319.773689]  ? save_stack+0x46/0xd0
[  319.773702]  ? kasan_kmalloc+0xad/0xe0
[  319.773723]  ? __kmalloc+0x117/0x230
[  319.773740]  ? kmem_alloc+0x91/0x120
[  319.773745]  ? xfs_dir_lookup+0x144/0x430
[  319.773751]  ? xfs_lookup+0xd3/0x210
[  319.773757]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.773762]  ? __lookup_slow+0x12e/0x240
[  319.773766]  ? lookup_slow+0x44/0x60
[  319.773771]  ? walk_component+0x3f9/0x6b0
[  319.773777]  ? xfs_iext_get_extent+0x27/0x190
[  319.773783]  xfs_da3_node_read+0x20/0x150
[  319.773789]  xfs_da3_node_lookup_int+0x1ac/0x7a0
[  319.773795]  ? kasan_kmalloc+0xad/0xe0
[  319.773801]  ? xfs_da3_node_toosmall+0x5c0/0x5c0
[  319.773822]  ? memcg_kmem_put_cache+0x1b/0xa0
[  319.773838]  ? kmem_cache_alloc+0x174/0x1e0
[  319.773855]  ? kmem_zone_alloc+0x91/0x120
[  319.773866]  ? kmem_zone_alloc+0x91/0x120
[  319.773875]  xfs_dir2_node_lookup+0xc3/0x300
[  319.773882]  ? xfs_dir2_isleaf+0xcd/0x120
[  319.773887]  ? xfs_dir2_node_addname+0x1380/0x1380
[  319.773893]  ? xfs_dir2_isblock+0x170/0x170
[  319.773899]  ? xfs_ilock+0x125/0x160
[  319.773916]  xfs_dir_lookup+0x410/0x430
[  319.773928]  ? xfs_dir_canenter+0x20/0x20
[  319.773932]  ? d_set_d_op+0x30/0x100
[  319.773937]  ? __d_lookup_rcu+0x69/0x2e0
[  319.773942]  ? __d_alloc+0x275/0x450
[  319.773959]  xfs_lookup+0xd3/0x210
[  319.773969]  ? xfs_ip2xflags+0x70/0x70
[  319.773974]  ? d_alloc_parallel+0x5bf/0x8d0
[  319.773979]  ? kasan_check_read+0x11/0x20
[  319.773984]  ? read_word_at_a_time+0x17/0x20
[  319.773998]  xfs_vn_ci_lookup+0x162/0x1f0
[  319.774010]  ? xfs_vn_lookup+0x160/0x160
[  319.774015]  ? __d_lookup_rcu+0x2e0/0x2e0
[  319.774020]  ? kasan_check_write+0x14/0x20
[  319.774026]  ? lockref_get_not_dead+0xc5/0x160
[  319.774043]  ? lockref_put_or_lock+0x160/0x160
[  319.774051]  ? __d_lookup_rcu+0x69/0x2e0
[  319.774057]  ? legitimize_path.isra.28+0x61/0xa0
[  319.774063]  __lookup_slow+0x12e/0x240
[  319.774071]  ? may_delete+0x2b0/0x2b0
[  319.774085]  ? __nd_alloc_stack+0xa0/0xa0
[  319.774093]  lookup_slow+0x44/0x60
[  319.774099]  walk_component+0x3f9/0x6b0
[  319.774104]  ? pick_link+0x3e0/0x3e0
[  319.774110]  ? link_path_walk+0x516/0x7b0
[  319.774120]  ? walk_component+0x6b0/0x6b0
[  319.774133]  ? path_init+0x2df/0x570
[  319.774140]  path_lookupat+0x133/0x430
[  319.774146]  ? trailing_symlink+0x3b0/0x3b0
[  319.774150]  ? mntput+0x36/0x50
[  319.774166]  ? terminate_walk+0xd2/0x1e0
[  319.774172]  ? path_lookupat+0x243/0x430
[  319.774177]  ? trailing_symlink+0x3b0/0x3b0
[  319.774182]  ? putname+0x80/0x90
[  319.774193]  filename_lookup+0x13c/0x280
[  319.774204]  ? putname+0x80/0x90
[  319.774214]  ? filename_parentat+0x2b0/0x2b0
[  319.774222]  ? putname+0x80/0x90
[  319.774228]  ? kasan_kmalloc+0xad/0xe0
[  319.774234]  ? kasan_check_write+0x14/0x20
[  319.774240]  ? strncpy_from_user+0xa8/0x1c0
[  319.774254]  user_path_at_empty+0x36/0x40
[  319.774265]  ? user_path_at_empty+0x36/0x40
[  319.774274]  vfs_statx+0xce/0x160
[  319.774280]  ? vfs_statx_fd+0x80/0x80
[  319.774287]  __do_sys_newstat+0x8c/0xe0
[  319.774299]  ? cp_new_stat+0x2c0/0x2c0
[  319.774311]  ? __x32_compat_sys_newfstat+0x40/0x40
[  319.774317]  ? do_symlinkat+0x10b/0x1c0
[  319.774322]  ? do_fchmodat+0x8f/0x110
[  319.774337]  ? __x64_sys_unlinkat+0x90/0x90
[  319.774342]  ? vfs_truncate+0x380/0x380
[  319.774350]  __x64_sys_newstat+0x31/0x40
[  319.774365]  do_syscall_64+0x78/0x170
[  319.774370]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.774374] RIP: 0033:0x7f3ea36d34d9
[  319.774381] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 8f 29 2c 00 f7 d8 64 89 01 48
[  319.774384] RSP: 002b:00007ffcc5ecbfe8 EFLAGS: 00000286 ORIG_RAX: 0000000000000004
[  319.774406] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ea36d34d9
[  319.774410] RDX: ffffffffffffff98 RSI: 00007ffcc5ecc100 RDI: 00007ffcc5ecc0a0
[  319.774413] RBP: 00007ffcc5ece110 R08: 00007ffcc5ece1f8 R09: 00007ffcc5ece1f8
[  319.774416] R10: 00007ffcc5ece1f8 R11: 0000000000000286 R12: 0000000000400530
[  319.774419] R13: 00007ffcc5ece1f0 R14: 0000000000000000 R15: 0000000000000000
[  319.774978] XFS (loop0): xfs_dabuf_map: bno 8388608 dir: inode 13780
[  319.776273] XFS (loop0): [00] br_startoff 8388608 br_startblock -2 br_blockcount 1 br_state 0
[  319.778002] XFS (loop0): Internal error xfs_da_do_buf(1) at line 2558 of file fs/xfs/libxfs/xfs_da_btree.c.  Caller xfs_da_read_buf+0x116/0x280
[  319.780542] CPU: 0 PID: 1410 Comm: a.out Not tainted 4.18.0+ #9
[  319.780545] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Ubuntu-1.8.2-1ubuntu1 04/01/2014
[  319.780547] Call Trace:
[  319.780555]  dump_stack+0x7b/0xb5
[  319.780560]  xfs_error_report+0x73/0x80
[  319.780565]  ? xfs_da_read_buf+0x116/0x280
[  319.780570]  ? xfs_da_read_buf+0x116/0x280
[  319.780577]  xfs_dabuf_map.constprop.18+0x2de/0x650
[  319.780583]  ? is_bpf_text_address+0xe/0x20
[  319.780590]  ? xfs_da3_node_read_verify+0x230/0x230
[  319.780596]  ? unwind_get_return_address+0x36/0x50
[  319.780602]  ? kasan_check_write+0x14/0x20
[  319.780609]  ? _raw_spin_lock_irqsave+0x2a/0x60
[  319.780616]  xfs_da_read_buf+0x116/0x280
[  319.780623]  ? xfs_da3_root_split.isra.14+0x710/0x710
[  319.780628]  ? xfs_dir_lookup+0x410/0x430
[  319.780635]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.780640]  ? __lookup_slow+0x12e/0x240
[  319.780644]  ? lookup_slow+0x44/0x60
[  319.780649]  ? walk_component+0x3f9/0x6b0
[  319.780654]  ? path_lookupat+0x133/0x430
[  319.780660]  ? filename_lookup+0x13c/0x280
[  319.780665]  ? user_path_at_empty+0x36/0x40
[  319.780671]  ? do_faccessat+0x16e/0x390
[  319.780676]  ? __x64_sys_access+0x36/0x40
[  319.780682]  ? do_syscall_64+0x78/0x170
[  319.780687]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.780692]  ? save_stack+0xb5/0xd0
[  319.780697]  ? save_stack+0x46/0xd0
[  319.780701]  ? kasan_kmalloc+0xad/0xe0
[  319.780705]  ? __kmalloc+0x117/0x230
[  319.780711]  ? kmem_alloc+0x91/0x120
[  319.780716]  ? xfs_dir_lookup+0x144/0x430
[  319.780722]  ? xfs_lookup+0xd3/0x210
[  319.780728]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.780733]  ? __lookup_slow+0x12e/0x240
[  319.780737]  ? lookup_slow+0x44/0x60
[  319.780742]  ? walk_component+0x3f9/0x6b0
[  319.780748]  ? xfs_iext_get_extent+0x27/0x190
[  319.780754]  xfs_da3_node_read+0x20/0x150
[  319.780760]  xfs_da3_node_lookup_int+0x1ac/0x7a0
[  319.780766]  ? kasan_kmalloc+0xad/0xe0
[  319.780772]  ? xfs_da3_node_toosmall+0x5c0/0x5c0
[  319.780778]  ? memcg_kmem_put_cache+0x1b/0xa0
[  319.780783]  ? kmem_cache_alloc+0x174/0x1e0
[  319.780789]  ? kmem_zone_alloc+0x91/0x120
[  319.780795]  ? kmem_zone_alloc+0x91/0x120
[  319.780801]  xfs_dir2_node_lookup+0xc3/0x300
[  319.780813]  ? xfs_dir2_isleaf+0xcd/0x120
[  319.780819]  ? xfs_dir2_node_addname+0x1380/0x1380
[  319.780824]  ? xfs_dir2_isblock+0x170/0x170
[  319.780830]  ? xfs_ilock+0x125/0x160
[  319.780837]  xfs_dir_lookup+0x410/0x430
[  319.780844]  ? xfs_dir_canenter+0x20/0x20
[  319.780848]  ? d_set_d_op+0x30/0x100
[  319.780853]  ? __d_lookup_rcu+0x69/0x2e0
[  319.780857]  ? __d_alloc+0x275/0x450
[  319.780864]  xfs_lookup+0xd3/0x210
[  319.780871]  ? xfs_ip2xflags+0x70/0x70
[  319.780876]  ? d_alloc_parallel+0x5bf/0x8d0
[  319.780881]  ? kasan_check_read+0x11/0x20
[  319.780885]  ? read_word_at_a_time+0x17/0x20
[  319.780892]  xfs_vn_ci_lookup+0x162/0x1f0
[  319.780898]  ? xfs_vn_lookup+0x160/0x160
[  319.780903]  ? __d_lookup_rcu+0x2e0/0x2e0
[  319.780909]  ? kasan_check_write+0x14/0x20
[  319.780914]  ? lockref_get_not_dead+0xc5/0x160
[  319.780919]  ? lockref_put_or_lock+0x160/0x160
[  319.780925]  ? __d_lookup_rcu+0x69/0x2e0
[  319.780931]  ? legitimize_path.isra.28+0x61/0xa0
[  319.780937]  __lookup_slow+0x12e/0x240
[  319.780943]  ? may_delete+0x2b0/0x2b0
[  319.780948]  ? __nd_alloc_stack+0xa0/0xa0
[  319.780954]  ? unwind_dump+0x290/0x290
[  319.780960]  lookup_slow+0x44/0x60
[  319.780965]  walk_component+0x3f9/0x6b0
[  319.780971]  ? pick_link+0x3e0/0x3e0
[  319.780976]  ? link_path_walk+0x516/0x7b0
[  319.780982]  ? walk_component+0x6b0/0x6b0
[  319.780987]  ? path_init+0x2df/0x570
[  319.780993]  path_lookupat+0x133/0x430
[  319.780999]  ? trailing_symlink+0x3b0/0x3b0
[  319.781007]  ? prepare_creds+0x28/0x1a0
[  319.781012]  ? do_faccessat+0xa3/0x390
[  319.781018]  ? __x64_sys_access+0x36/0x40
[  319.781023]  ? do_syscall_64+0x78/0x170
[  319.781028]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.781037]  ? wake_bit_function+0x90/0x90
[  319.781044]  ? kasan_check_write+0x14/0x20
[  319.781050]  filename_lookup+0x13c/0x280
[  319.781056]  ? filename_parentat+0x2b0/0x2b0
[  319.781062]  ? kasan_kmalloc+0xad/0xe0
[  319.781068]  ? kasan_check_write+0x14/0x20
[  319.781075]  user_path_at_empty+0x36/0x40
[  319.781080]  ? user_path_at_empty+0x36/0x40
[  319.781086]  do_faccessat+0x16e/0x390
[  319.781093]  ? __ia32_sys_fallocate+0x60/0x60
[  319.781098]  ? vfs_truncate+0x380/0x380
[  319.781106]  __x64_sys_access+0x36/0x40
[  319.781112]  do_syscall_64+0x78/0x170
[  319.781117]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.781121] RIP: 0033:0x7f3ea36d34d9
[  319.781128] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 8f 29 2c 00 f7 d8 64 89 01 48
[  319.781130] RSP: 002b:00007ffcc5ecbfe8 EFLAGS: 00000217 ORIG_RAX: 0000000000000015
[  319.781136] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ea36d34d9
[  319.781139] RDX: 00007f3ea36d34d9 RSI: 0000000000000001 RDI: 00007ffcc5ecc0c0
[  319.781143] RBP: 00007ffcc5ece110 R08: 00007ffcc5ece1f8 R09: 00007ffcc5ece1f8
[  319.781146] R10: 00007ffcc5ece1f8 R11: 0000000000000217 R12: 0000000000400530
[  319.781150] R13: 00007ffcc5ece1f0 R14: 0000000000000000 R15: 0000000000000000
[  319.781270] XFS (loop0): xfs_dabuf_map: bno 8388608 dir: inode 13780
[  319.782545] XFS (loop0): [00] br_startoff 8388608 br_startblock -2 br_blockcount 1 br_state 0
[  319.784235] XFS (loop0): Internal error xfs_da_do_buf(1) at line 2558 of file fs/xfs/libxfs/xfs_da_btree.c.  Caller xfs_da_read_buf+0x116/0x280
[  319.786813] CPU: 0 PID: 1410 Comm: a.out Not tainted 4.18.0+ #9
[  319.786817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Ubuntu-1.8.2-1ubuntu1 04/01/2014
[  319.786818] Call Trace:
[  319.786826]  dump_stack+0x7b/0xb5
[  319.786831]  xfs_error_report+0x73/0x80
[  319.786836]  ? xfs_da_read_buf+0x116/0x280
[  319.786841]  ? xfs_da_read_buf+0x116/0x280
[  319.786848]  xfs_dabuf_map.constprop.18+0x2de/0x650
[  319.786855]  ? is_bpf_text_address+0xe/0x20
[  319.786861]  ? xfs_da3_node_read_verify+0x230/0x230
[  319.786867]  ? unwind_get_return_address+0x36/0x50
[  319.786873]  ? __save_stack_trace+0x92/0x100
[  319.786881]  xfs_da_read_buf+0x116/0x280
[  319.786887]  ? xfs_da3_root_split.isra.14+0x710/0x710
[  319.786893]  ? xfs_dir_lookup+0x410/0x430
[  319.786899]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.786904]  ? __lookup_slow+0x12e/0x240
[  319.786909]  ? lookup_slow+0x44/0x60
[  319.786914]  ? walk_component+0x3f9/0x6b0
[  319.786919]  ? path_lookupat+0x133/0x430
[  319.786924]  ? filename_lookup+0x13c/0x280
[  319.786930]  ? user_path_at_empty+0x36/0x40
[  319.786935]  ? do_sys_truncate+0x8e/0x120
[  319.786953]  ? __x64_sys_truncate+0x31/0x40
[  319.786968]  ? do_syscall_64+0x78/0x170
[  319.786973]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.786986]  ? save_stack+0xb5/0xd0
[  319.786999]  ? save_stack+0x46/0xd0
[  319.787021]  ? kasan_kmalloc+0xad/0xe0
[  319.787033]  ? __kmalloc+0x117/0x230
[  319.787045]  ? kmem_alloc+0x91/0x120
[  319.787162]  ? xfs_dir_lookup+0x144/0x430
[  319.787176]  ? xfs_lookup+0xd3/0x210
[  319.787182]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.787187]  ? __lookup_slow+0x12e/0x240
[  319.787192]  ? lookup_slow+0x44/0x60
[  319.787197]  ? walk_component+0x3f9/0x6b0
[  319.787202]  ? xfs_iext_get_extent+0x27/0x190
[  319.787208]  xfs_da3_node_read+0x20/0x150
[  319.787214]  xfs_da3_node_lookup_int+0x1ac/0x7a0
[  319.787221]  ? kasan_kmalloc+0xad/0xe0
[  319.787227]  ? xfs_da3_node_toosmall+0x5c0/0x5c0
[  319.787233]  ? memcg_kmem_put_cache+0x1b/0xa0
[  319.787243]  ? kmem_cache_alloc+0x174/0x1e0
[  319.787252]  ? kmem_zone_alloc+0x91/0x120
[  319.787274]  ? kmem_zone_alloc+0x91/0x120
[  319.787288]  xfs_dir2_node_lookup+0xc3/0x300
[  319.787299]  ? xfs_dir2_isleaf+0xcd/0x120
[  319.787310]  ? xfs_dir2_node_addname+0x1380/0x1380
[  319.787318]  ? xfs_dir2_isblock+0x170/0x170
[  319.787324]  ? xfs_ilock+0x125/0x160
[  319.787331]  xfs_dir_lookup+0x410/0x430
[  319.787338]  ? xfs_dir_canenter+0x20/0x20
[  319.787342]  ? d_set_d_op+0x30/0x100
[  319.787353]  ? __d_lookup_rcu+0x69/0x2e0
[  319.787368]  ? __d_alloc+0x275/0x450
[  319.787378]  xfs_lookup+0xd3/0x210
[  319.787385]  ? xfs_ip2xflags+0x70/0x70
[  319.787390]  ? d_alloc_parallel+0x5bf/0x8d0
[  319.787395]  ? kasan_check_read+0x11/0x20
[  319.787405]  ? read_word_at_a_time+0x17/0x20
[  319.787421]  xfs_vn_ci_lookup+0x162/0x1f0
[  319.787427]  ? xfs_vn_lookup+0x160/0x160
[  319.787432]  ? __d_lookup_rcu+0x2e0/0x2e0
[  319.787443]  ? kasan_check_write+0x14/0x20
[  319.787454]  ? lockref_get_not_dead+0xc5/0x160
[  319.787460]  ? lockref_put_or_lock+0x160/0x160
[  319.787465]  ? __d_lookup_rcu+0x69/0x2e0
[  319.787475]  ? legitimize_path.isra.28+0x61/0xa0
[  319.787489]  __lookup_slow+0x12e/0x240
[  319.787495]  ? may_delete+0x2b0/0x2b0
[  319.787500]  ? __nd_alloc_stack+0xa0/0xa0
[  319.787506]  ? unwind_dump+0x290/0x290
[  319.787522]  lookup_slow+0x44/0x60
[  319.787531]  walk_component+0x3f9/0x6b0
[  319.787536]  ? pick_link+0x3e0/0x3e0
[  319.787541]  ? link_path_walk+0x516/0x7b0
[  319.787548]  ? walk_component+0x6b0/0x6b0
[  319.787564]  ? path_init+0x2df/0x570
[  319.787570]  path_lookupat+0x133/0x430
[  319.787576]  ? trailing_symlink+0x3b0/0x3b0
[  319.787582]  ? __x64_sys_listxattr+0x48/0x50
[  319.787599]  ? do_syscall_64+0x78/0x170
[  319.787604]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.787612]  ? xfs_inode_hasattr+0x19/0x50
[  319.787628]  ? xfs_attr_list_int_ilocked+0x31/0x780
[  319.787636]  ? down_read+0x2e/0x50
[  319.787642]  ? xfs_ilock+0x125/0x160
[  319.787648]  ? xfs_iunlock+0xe5/0x150
[  319.787655]  filename_lookup+0x13c/0x280
[  319.787664]  ? filename_parentat+0x2b0/0x2b0
[  319.787680]  ? kasan_kmalloc+0xad/0xe0
[  319.787685]  ? kasan_check_write+0x14/0x20
[  319.787693]  user_path_at_empty+0x36/0x40
[  319.787698]  ? user_path_at_empty+0x36/0x40
[  319.787710]  do_sys_truncate+0x8e/0x120
[  319.787723]  ? vfs_truncate+0x380/0x380
[  319.787731]  __x64_sys_truncate+0x31/0x40
[  319.787737]  do_syscall_64+0x78/0x170
[  319.787748]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.787757] RIP: 0033:0x7f3ea36d34d9
[  319.787764] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 8f 29 2c 00 f7 d8 64 89 01 48
[  319.787767] RSP: 002b:00007ffcc5ecbfe8 EFLAGS: 00000217 ORIG_RAX: 000000000000004c
[  319.787772] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ea36d34d9
[  319.787783] RDX: 00007f3ea36d34d9 RSI: 0000000000000dd8 RDI: 00007ffcc5ecc070
[  319.787796] RBP: 00007ffcc5ece110 R08: 00007ffcc5ece1f8 R09: 00007ffcc5ece1f8
[  319.787799] R10: 00007ffcc5ece1f8 R11: 0000000000000217 R12: 0000000000400530
[  319.787802] R13: 00007ffcc5ece1f0 R14: 0000000000000000 R15: 0000000000000000
[  319.787869] XFS (loop0): xfs_dabuf_map: bno 8388608 dir: inode 13780
[  319.789184] XFS (loop0): [00] br_startoff 8388608 br_startblock -2 br_blockcount 1 br_state 0
[  319.790875] XFS (loop0): Internal error xfs_da_do_buf(1) at line 2558 of file fs/xfs/libxfs/xfs_da_btree.c.  Caller xfs_da_read_buf+0x116/0x280
[  319.793546] CPU: 0 PID: 1410 Comm: a.out Not tainted 4.18.0+ #9
[  319.793550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Ubuntu-1.8.2-1ubuntu1 04/01/2014
[  319.793551] Call Trace:
[  319.793559]  dump_stack+0x7b/0xb5
[  319.793564]  xfs_error_report+0x73/0x80
[  319.793570]  ? xfs_da_read_buf+0x116/0x280
[  319.793574]  ? xfs_da_read_buf+0x116/0x280
[  319.793581]  xfs_dabuf_map.constprop.18+0x2de/0x650
[  319.793587]  ? is_bpf_text_address+0xe/0x20
[  319.793594]  ? xfs_da3_node_read_verify+0x230/0x230
[  319.793600]  ? unwind_get_return_address+0x36/0x50
[  319.793606]  ? kasan_check_write+0x14/0x20
[  319.793612]  ? _raw_spin_lock_irqsave+0x2a/0x60
[  319.793619]  xfs_da_read_buf+0x116/0x280
[  319.793626]  ? xfs_da3_root_split.isra.14+0x710/0x710
[  319.793632]  ? xfs_dir_lookup+0x410/0x430
[  319.793638]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.793642]  ? __lookup_slow+0x12e/0x240
[  319.793647]  ? lookup_slow+0x44/0x60
[  319.793652]  ? walk_component+0x3f9/0x6b0
[  319.793657]  ? path_lookupat+0x133/0x430
[  319.793662]  ? filename_lookup+0x13c/0x280
[  319.793668]  ? user_path_at_empty+0x36/0x40
[  319.793673]  ? do_linkat+0x135/0x490
[  319.793678]  ? __x64_sys_link+0x3b/0x50
[  319.793684]  ? do_syscall_64+0x78/0x170
[  319.793698]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.793709]  ? save_stack+0xb5/0xd0
[  319.793719]  ? save_stack+0x46/0xd0
[  319.793733]  ? kasan_kmalloc+0xad/0xe0
[  319.793742]  ? __kmalloc+0x117/0x230
[  319.793759]  ? kmem_alloc+0x91/0x120
[  319.793774]  ? xfs_dir_lookup+0x144/0x430
[  319.793788]  ? xfs_lookup+0xd3/0x210
[  319.793800]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.793818]  ? __lookup_slow+0x12e/0x240
[  319.793840]  ? lookup_slow+0x44/0x60
[  319.793856]  ? walk_component+0x3f9/0x6b0
[  319.793862]  ? xfs_iext_get_extent+0x27/0x190
[  319.793868]  xfs_da3_node_read+0x20/0x150
[  319.793874]  xfs_da3_node_lookup_int+0x1ac/0x7a0
[  319.793880]  ? kasan_kmalloc+0xad/0xe0
[  319.793886]  ? xfs_da3_node_toosmall+0x5c0/0x5c0
[  319.793892]  ? memcg_kmem_put_cache+0x1b/0xa0
[  319.793897]  ? kmem_cache_alloc+0x174/0x1e0
[  319.793902]  ? kmem_zone_alloc+0x91/0x120
[  319.793908]  ? kmem_zone_alloc+0x91/0x120
[  319.793914]  xfs_dir2_node_lookup+0xc3/0x300
[  319.793920]  ? xfs_dir2_isleaf+0xcd/0x120
[  319.793932]  ? xfs_dir2_node_addname+0x1380/0x1380
[  319.793955]  ? xfs_dir2_isblock+0x170/0x170
[  319.793966]  ? xfs_ilock+0x125/0x160
[  319.793986]  xfs_dir_lookup+0x410/0x430
[  319.793995]  ? xfs_dir_canenter+0x20/0x20
[  319.793999]  ? d_set_d_op+0x30/0x100
[  319.794004]  ? __d_lookup_rcu+0x69/0x2e0
[  319.794009]  ? __d_alloc+0x275/0x450
[  319.794016]  xfs_lookup+0xd3/0x210
[  319.794025]  ? xfs_ip2xflags+0x70/0x70
[  319.794041]  ? d_alloc_parallel+0x5bf/0x8d0
[  319.794051]  ? kasan_check_read+0x11/0x20
[  319.794056]  ? read_word_at_a_time+0x17/0x20
[  319.794063]  xfs_vn_ci_lookup+0x162/0x1f0
[  319.794069]  ? xfs_vn_lookup+0x160/0x160
[  319.794085]  ? __d_lookup_rcu+0x2e0/0x2e0
[  319.794091]  ? kasan_check_write+0x14/0x20
[  319.794096]  ? lockref_get_not_dead+0xc5/0x160
[  319.794102]  ? lockref_put_or_lock+0x160/0x160
[  319.794115]  ? __d_lookup_rcu+0x69/0x2e0
[  319.794128]  ? legitimize_path.isra.28+0x61/0xa0
[  319.794133]  __lookup_slow+0x12e/0x240
[  319.794139]  ? may_delete+0x2b0/0x2b0
[  319.794147]  ? __nd_alloc_stack+0xa0/0xa0
[  319.794161]  lookup_slow+0x44/0x60
[  319.794167]  walk_component+0x3f9/0x6b0
[  319.794173]  ? pick_link+0x3e0/0x3e0
[  319.794181]  ? link_path_walk+0x516/0x7b0
[  319.794196]  ? _raw_spin_lock_irqsave+0x2a/0x60
[  319.794202]  ? walk_component+0x6b0/0x6b0
[  319.794207]  ? path_init+0x2df/0x570
[  319.794215]  path_lookupat+0x133/0x430
[  319.794228]  ? trailing_symlink+0x3b0/0x3b0
[  319.794236]  ? mntput+0x36/0x50
[  319.794241]  ? terminate_walk+0xd2/0x1e0
[  319.794247]  ? path_lookupat+0x243/0x430
[  319.794252]  ? trailing_symlink+0x3b0/0x3b0
[  319.794258]  filename_lookup+0x13c/0x280
[  319.794273]  ? filename_parentat+0x2b0/0x2b0
[  319.794283]  ? __kasan_slab_free+0x151/0x1a0
[  319.794296]  ? kasan_kmalloc+0xad/0xe0
[  319.794301]  ? kasan_check_write+0x14/0x20
[  319.794308]  user_path_at_empty+0x36/0x40
[  319.794314]  ? user_path_at_empty+0x36/0x40
[  319.794328]  do_linkat+0x135/0x490
[  319.794341]  ? __ia32_sys_symlink+0x40/0x40
[  319.794347]  ? user_path_at_empty+0x36/0x40
[  319.794352]  ? user_path_at_empty+0x36/0x40
[  319.794366]  ? do_sys_truncate+0x8e/0x120
[  319.794372]  ? vfs_truncate+0x380/0x380
[  319.794379]  __x64_sys_link+0x3b/0x50
[  319.794391]  do_syscall_64+0x78/0x170
[  319.794402]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.794406] RIP: 0033:0x7f3ea36d34d9
[  319.794412] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 8f 29 2c 00 f7 d8 64 89 01 48
[  319.794415] RSP: 002b:00007ffcc5ecbfe8 EFLAGS: 00000286 ORIG_RAX: 0000000000000056
[  319.794434] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ea36d34d9
[  319.794438] RDX: ffffffffffffff98 RSI: 00007ffcc5ecc050 RDI: 00007ffcc5ecc0e0
[  319.794441] RBP: 00007ffcc5ece110 R08: 00007ffcc5ece1f8 R09: 00007ffcc5ece1f8
[  319.794444] R10: 00007ffcc5ece1f8 R11: 0000000000000286 R12: 0000000000400530
[  319.794448] R13: 00007ffcc5ece1f0 R14: 0000000000000000 R15: 0000000000000000
[  319.794559] XFS (loop0): xfs_dabuf_map: bno 8388608 dir: inode 13780
[  319.795851] XFS (loop0): [00] br_startoff 8388608 br_startblock -2 br_blockcount 1 br_state 0
[  319.797579] XFS (loop0): Internal error xfs_da_do_buf(1) at line 2558 of file fs/xfs/libxfs/xfs_da_btree.c.  Caller xfs_da_read_buf+0x116/0x280
[  319.800114] CPU: 0 PID: 1410 Comm: a.out Not tainted 4.18.0+ #9
[  319.800118] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Ubuntu-1.8.2-1ubuntu1 04/01/2014
[  319.800119] Call Trace:
[  319.800127]  dump_stack+0x7b/0xb5
[  319.800132]  xfs_error_report+0x73/0x80
[  319.800137]  ? xfs_da_read_buf+0x116/0x280
[  319.800142]  ? xfs_da_read_buf+0x116/0x280
[  319.800149]  xfs_dabuf_map.constprop.18+0x2de/0x650
[  319.800156]  ? is_bpf_text_address+0xe/0x20
[  319.800162]  ? xfs_da3_node_read_verify+0x230/0x230
[  319.800169]  ? unwind_get_return_address+0x36/0x50
[  319.800175]  ? __save_stack_trace+0x92/0x100
[  319.800182]  xfs_da_read_buf+0x116/0x280
[  319.800189]  ? xfs_da3_root_split.isra.14+0x710/0x710
[  319.800194]  ? xfs_dir_lookup+0x410/0x430
[  319.800200]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.800205]  ? __lookup_slow+0x12e/0x240
[  319.800210]  ? lookup_slow+0x44/0x60
[  319.800215]  ? walk_component+0x3f9/0x6b0
[  319.800220]  ? path_lookupat+0x133/0x430
[  319.800225]  ? filename_lookup+0x13c/0x280
[  319.800230]  ? user_path_at_empty+0x36/0x40
[  319.800236]  ? do_fchmodat+0x8f/0x110
[  319.800242]  ? __x64_sys_chmod+0x37/0x40
[  319.800247]  ? do_syscall_64+0x78/0x170
[  319.800252]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.800257]  ? save_stack+0xb5/0xd0
[  319.800262]  ? save_stack+0x46/0xd0
[  319.800266]  ? kasan_kmalloc+0xad/0xe0
[  319.800270]  ? __kmalloc+0x117/0x230
[  319.800276]  ? kmem_alloc+0x91/0x120
[  319.800281]  ? xfs_dir_lookup+0x144/0x430
[  319.800287]  ? xfs_lookup+0xd3/0x210
[  319.800293]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.800298]  ? __lookup_slow+0x12e/0x240
[  319.800302]  ? lookup_slow+0x44/0x60
[  319.800307]  ? walk_component+0x3f9/0x6b0
[  319.800313]  ? xfs_iext_get_extent+0x27/0x190
[  319.800319]  xfs_da3_node_read+0x20/0x150
[  319.800325]  xfs_da3_node_lookup_int+0x1ac/0x7a0
[  319.800331]  ? kasan_kmalloc+0xad/0xe0
[  319.800337]  ? xfs_da3_node_toosmall+0x5c0/0x5c0
[  319.800343]  ? memcg_kmem_put_cache+0x1b/0xa0
[  319.800348]  ? kmem_cache_alloc+0x174/0x1e0
[  319.800353]  ? kmem_zone_alloc+0x91/0x120
[  319.800360]  ? kmem_zone_alloc+0x91/0x120
[  319.800365]  xfs_dir2_node_lookup+0xc3/0x300
[  319.800372]  ? xfs_dir2_isleaf+0xcd/0x120
[  319.800377]  ? xfs_dir2_node_addname+0x1380/0x1380
[  319.800382]  ? xfs_dir2_isblock+0x170/0x170
[  319.800388]  ? xfs_ilock+0x125/0x160
[  319.800395]  xfs_dir_lookup+0x410/0x430
[  319.800402]  ? xfs_dir_canenter+0x20/0x20
[  319.800406]  ? d_set_d_op+0x30/0x100
[  319.800410]  ? __d_lookup_rcu+0x69/0x2e0
[  319.800415]  ? __d_alloc+0x275/0x450
[  319.800422]  xfs_lookup+0xd3/0x210
[  319.800428]  ? xfs_ip2xflags+0x70/0x70
[  319.800433]  ? d_alloc_parallel+0x5bf/0x8d0
[  319.800438]  ? kasan_check_read+0x11/0x20
[  319.800443]  ? read_word_at_a_time+0x17/0x20
[  319.800450]  xfs_vn_ci_lookup+0x162/0x1f0
[  319.800456]  ? xfs_vn_lookup+0x160/0x160
[  319.800461]  ? __d_lookup_rcu+0x2e0/0x2e0
[  319.800466]  ? kasan_check_write+0x14/0x20
[  319.800472]  ? lockref_get_not_dead+0xc5/0x160
[  319.800477]  ? lockref_put_or_lock+0x160/0x160
[  319.800483]  ? __d_lookup_rcu+0x69/0x2e0
[  319.800489]  ? legitimize_path.isra.28+0x61/0xa0
[  319.800495]  __lookup_slow+0x12e/0x240
[  319.800500]  ? may_delete+0x2b0/0x2b0
[  319.800506]  ? __nd_alloc_stack+0xa0/0xa0
[  319.800511]  lookup_slow+0x44/0x60
[  319.800517]  walk_component+0x3f9/0x6b0
[  319.800523]  ? pick_link+0x3e0/0x3e0
[  319.800528]  ? link_path_walk+0x516/0x7b0
[  319.800534]  ? walk_component+0x6b0/0x6b0
[  319.800538]  ? path_init+0x2df/0x570
[  319.800545]  path_lookupat+0x133/0x430
[  319.800551]  ? trailing_symlink+0x3b0/0x3b0
[  319.800557]  ? __x64_sys_listxattr+0x48/0x50
[  319.800562]  ? do_syscall_64+0x78/0x170
[  319.800567]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.800574]  ? get_partial_node.isra.62+0x222/0x2b0
[  319.800579]  ? xfs_inode_hasattr+0x19/0x50
[  319.800585]  ? xfs_attr_list_int_ilocked+0x31/0x780
[  319.800590]  ? down_read+0x40/0x50
[  319.800596]  ? xfs_ilock+0x125/0x160
[  319.800602]  ? xfs_iunlock+0xe5/0x150
[  319.800609]  filename_lookup+0x13c/0x280
[  319.800615]  ? filename_parentat+0x2b0/0x2b0
[  319.800620]  ? xfs_xattr_set+0xb0/0xb0
[  319.800626]  ? kasan_kmalloc+0xad/0xe0
[  319.800631]  ? kasan_check_write+0x14/0x20
[  319.800637]  ? strncpy_from_user+0xa8/0x1c0
[  319.800644]  user_path_at_empty+0x36/0x40
[  319.800650]  ? user_path_at_empty+0x36/0x40
[  319.800656]  do_fchmodat+0x8f/0x110
[  319.800662]  ? __ia32_sys_fchmod+0x40/0x40
[  319.800670]  __x64_sys_chmod+0x37/0x40
[  319.800675]  do_syscall_64+0x78/0x170
[  319.800681]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.800685] RIP: 0033:0x7f3ea36d34d9
[  319.800691] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 8f 29 2c 00 f7 d8 64 89 01 48
[  319.800694] RSP: 002b:00007ffcc5ecbfe8 EFLAGS: 00000217 ORIG_RAX: 000000000000005a
[  319.800699] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ea36d34d9
[  319.800703] RDX: 00007f3ea36d34d9 RSI: 0000000000000c00 RDI: 00007ffcc5ecc070
[  319.800706] RBP: 00007ffcc5ece110 R08: 00007ffcc5ece1f8 R09: 00007ffcc5ece1f8
[  319.800709] R10: 00007ffcc5ece1f8 R11: 0000000000000217 R12: 0000000000400530
[  319.800712] R13: 00007ffcc5ece1f0 R14: 0000000000000000 R15: 0000000000000000
[  319.800770] XFS (loop0): xfs_dabuf_map: bno 8388608 dir: inode 13780
[  319.802088] XFS (loop0): [00] br_startoff 8388608 br_startblock -2 br_blockcount 1 br_state 0
[  319.803808] XFS (loop0): Internal error xfs_da_do_buf(1) at line 2558 of file fs/xfs/libxfs/xfs_da_btree.c.  Caller xfs_da_read_buf+0x116/0x280
[  319.806383] CPU: 0 PID: 1410 Comm: a.out Not tainted 4.18.0+ #9
[  319.806387] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Ubuntu-1.8.2-1ubuntu1 04/01/2014
[  319.806388] Call Trace:
[  319.806396]  dump_stack+0x7b/0xb5
[  319.806401]  xfs_error_report+0x73/0x80
[  319.806406]  ? xfs_da_read_buf+0x116/0x280
[  319.806411]  ? xfs_da_read_buf+0x116/0x280
[  319.806417]  xfs_dabuf_map.constprop.18+0x2de/0x650
[  319.806424]  ? is_bpf_text_address+0xe/0x20
[  319.806430]  ? xfs_da3_node_read_verify+0x230/0x230
[  319.806437]  ? unwind_get_return_address+0x36/0x50
[  319.806442]  ? kasan_check_write+0x14/0x20
[  319.806449]  ? _raw_spin_lock_irqsave+0x2a/0x60
[  319.806456]  xfs_da_read_buf+0x116/0x280
[  319.806462]  ? xfs_da3_root_split.isra.14+0x710/0x710
[  319.806468]  ? xfs_dir_lookup+0x410/0x430
[  319.806474]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.806479]  ? __lookup_hash+0x91/0xb0
[  319.806484]  ? do_unlinkat+0x23d/0x440
[  319.806490]  ? __x64_sys_unlink+0x30/0x40
[  319.806495]  ? do_syscall_64+0x78/0x170
[  319.806506]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.806520]  ? save_stack+0xb5/0xd0
[  319.806531]  ? save_stack+0x46/0xd0
[  319.806544]  ? kasan_kmalloc+0xad/0xe0
[  319.806548]  ? __kmalloc+0x117/0x230
[  319.806559]  ? kmem_alloc+0x91/0x120
[  319.806577]  ? xfs_dir_lookup+0x144/0x430
[  319.806597]  ? xfs_lookup+0xd3/0x210
[  319.806611]  ? xfs_vn_ci_lookup+0x162/0x1f0
[  319.806621]  ? __lookup_hash+0x91/0xb0
[  319.806641]  ? do_unlinkat+0x23d/0x440
[  319.806654]  ? __x64_sys_unlink+0x30/0x40
[  319.806663]  ? xfs_iext_get_extent+0x27/0x190
[  319.806669]  xfs_da3_node_read+0x20/0x150
[  319.806675]  xfs_da3_node_lookup_int+0x1ac/0x7a0
[  319.806681]  ? kasan_kmalloc+0xad/0xe0
[  319.806687]  ? xfs_da3_node_toosmall+0x5c0/0x5c0
[  319.806693]  ? memcg_kmem_put_cache+0x1b/0xa0
[  319.806698]  ? kmem_cache_alloc+0x174/0x1e0
[  319.806704]  ? kmem_zone_alloc+0x91/0x120
[  319.806710]  ? kmem_zone_alloc+0x91/0x120
[  319.806716]  xfs_dir2_node_lookup+0xc3/0x300
[  319.806722]  ? xfs_dir2_isleaf+0xcd/0x120
[  319.806742]  ? xfs_dir2_node_addname+0x1380/0x1380
[  319.806756]  ? xfs_dir2_isblock+0x170/0x170
[  319.806773]  ? xfs_ilock+0x125/0x160
[  319.806784]  xfs_dir_lookup+0x410/0x430
[  319.806794]  ? xfs_dir_canenter+0x20/0x20
[  319.806800]  ? is_bpf_text_address+0xe/0x20
[  319.806807]  xfs_lookup+0xd3/0x210
[  319.806814]  ? xfs_ip2xflags+0x70/0x70
[  319.806831]  xfs_vn_ci_lookup+0x162/0x1f0
[  319.806837]  ? xfs_vn_lookup+0x160/0x160
[  319.806842]  ? kasan_kmalloc+0xad/0xe0
[  319.806852]  ? memcg_kmem_put_cache+0x55/0xa0
[  319.806862]  ? d_set_d_op+0x30/0x100
[  319.806872]  ? __d_alloc+0x275/0x450
[  319.806878]  ? kasan_check_write+0x14/0x20
[  319.806884]  ? _raw_spin_lock+0x17/0x40
[  319.806888]  ? d_alloc+0xd0/0x100
[  319.806899]  __lookup_hash+0x91/0xb0
[  319.806914]  do_unlinkat+0x23d/0x440
[  319.806920]  ? __ia32_sys_rmdir+0x30/0x30
[  319.806926]  ? kasan_unpoison_shadow+0x36/0x50
[  319.806933]  ? kasan_kmalloc+0xad/0xe0
[  319.806948]  ? kasan_check_write+0x14/0x20
[  319.806954]  ? strncpy_from_user+0xa8/0x1c0
[  319.806960]  ? getname_flags+0x110/0x2c0
[  319.806966]  __x64_sys_unlink+0x30/0x40
[  319.806972]  do_syscall_64+0x78/0x170
[  319.806991]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.806998] RIP: 0033:0x7f3ea36d34d9
[  319.807004] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 8f 29 2c 00 f7 d8 64 89 01 48
[  319.807007] RSP: 002b:00007ffcc5ecbfe8 EFLAGS: 00000286 ORIG_RAX: 0000000000000057
[  319.807012] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ea36d34d9
[  319.807016] RDX: ffffffffffffff98 RSI: 00007f3ea36d34d9 RDI: 00007ffcc5ecc090
[  319.807027] RBP: 00007ffcc5ece110 R08: 00007ffcc5ece1f8 R09: 00007ffcc5ece1f8
[  319.807040] R10: 00007ffcc5ece1f8 R11: 0000000000000286 R12: 0000000000400530
[  319.807148] R13: 00007ffcc5ece1f0 R14: 0000000000000000 R15: 0000000000000000
[  319.807203] ==================================================================
[  319.833290] BUG: KASAN: null-ptr-deref in xfs_dir_isempty+0xac/0xd0
[  319.834544] Read of size 1 at addr 0000000000000000 by task a.out/1410

[  319.836186] CPU: 0 PID: 1410 Comm: a.out Not tainted 4.18.0+ #9
[  319.836190] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Ubuntu-1.8.2-1ubuntu1 04/01/2014
[  319.836192] Call Trace:
[  319.836200]  dump_stack+0x7b/0xb5
[  319.836207]  kasan_report+0x10c/0x390
[  319.836213]  ? xfs_dir_isempty+0xac/0xd0
[  319.836219]  __asan_load1+0x47/0x50
[  319.836225]  xfs_dir_isempty+0xac/0xd0
[  319.836231]  xfs_remove+0x45e/0x4b0
[  319.836239]  ? xfs_iunpin_wait+0x2a0/0x2a0
[  319.836248]  ? common_perm_rm.constprop.17+0x16d/0x180
[  319.836255]  xfs_vn_unlink+0xb8/0x140
[  319.836261]  ? xfs_vn_rename+0x2a0/0x2a0
[  319.836267]  ? may_delete+0x206/0x2b0
[  319.836273]  ? _cond_resched+0x1a/0x50
[  319.836279]  vfs_rmdir+0x104/0x1b0
[  319.836284]  do_rmdir+0x308/0x330
[  319.836291]  ? __ia32_sys_mkdir+0x40/0x40
[  319.836296]  ? kasan_unpoison_shadow+0x36/0x50
[  319.836301]  ? kasan_kmalloc+0xad/0xe0
[  319.836306]  ? kasan_check_write+0x14/0x20
[  319.836313]  ? strncpy_from_user+0xa8/0x1c0
[  319.836319]  ? getname_flags+0x110/0x2c0
[  319.836325]  __x64_sys_rmdir+0x24/0x30
[  319.836332]  do_syscall_64+0x78/0x170
[  319.836337]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.836341] RIP: 0033:0x7f3ea36d34d9
[  319.836348] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 8f 29 2c 00 f7 d8 64 89 01 48
[  319.836351] RSP: 002b:00007ffcc5ecbfe8 EFLAGS: 00000286 ORIG_RAX: 0000000000000054
[  319.836357] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ea36d34d9
[  319.836360] RDX: ffffffffffffff98 RSI: ffffffffffffff98 RDI: 00007ffcc5ecc030
[  319.836364] RBP: 00007ffcc5ece110 R08: 00007ffcc5ece1f8 R09: 00007ffcc5ece1f8
[  319.836368] R10: 00007ffcc5ece1f8 R11: 0000000000000286 R12: 0000000000400530
[  319.836371] R13: 00007ffcc5ece1f0 R14: 0000000000000000 R15: 0000000000000000
[  319.836375] ==================================================================
[  319.837815] Disabling lock debugging due to kernel taint
[  319.837863] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000
[  319.839445] PGD 80000001efe0a067 P4D 80000001efe0a067 PUD 1e144a067 PMD 0
[  319.840825] Oops: 0000 [#1] SMP KASAN PTI
[  319.841643] CPU: 0 PID: 1410 Comm: a.out Tainted: G    B             4.18.0+ #9
[  319.843108] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Ubuntu-1.8.2-1ubuntu1 04/01/2014
[  319.844993] RIP: 0010:xfs_dir_isempty+0xae/0xd0
[  319.845914] Code: 00 00 00 0f 45 c2 41 29 c4 49 63 d4 31 c0 4c 39 ea 7c 1d 48 8d 7b 60 e8 50 a4 cf ff 48 8b 5b 60 48 89 df e8 a4 a1 cf ff 31 c0 <80> 3b 00 0f 94 c0 5b 41 5c 41 5d 5d c3 48 8d 14 c5 00 00 00 00 81
[  319.849626] RSP: 0018:ffff8801ee837c38 EFLAGS: 00010246
[  319.850676] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  319.852111] RDX: 0000000000000000 RSI: 0000000000000297 RDI: 0000000000000297
[  319.853534] RBP: ffff8801ee837c50 R08: ffffed003ee03eab R09: ffffed003ee03eab
[  319.854953] R10: 0000000000000001 R11: ffffed003ee03eaa R12: 000000000000009c
[  319.856405] R13: 0000000000000059 R14: ffff8801f35f6600 R15: 0000000000004000
[  319.857831] FS:  00007f3ea3bb7700(0000) GS:ffff8801f7000000(0000) knlGS:0000000000000000
[  319.859457] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  319.860612] CR2: 0000000000000000 CR3: 00000001f1210000 CR4: 00000000000006f0
[  319.862036] Call Trace:
[  319.862550]  xfs_remove+0x45e/0x4b0
[  319.863283]  ? xfs_iunpin_wait+0x2a0/0x2a0
[  319.864121]  ? common_perm_rm.constprop.17+0x16d/0x180
[  319.865166]  xfs_vn_unlink+0xb8/0x140
[  319.865916]  ? xfs_vn_rename+0x2a0/0x2a0
[  319.866715]  ? may_delete+0x206/0x2b0
[  319.867475]  ? _cond_resched+0x1a/0x50
[  319.868242]  vfs_rmdir+0x104/0x1b0
[  319.868945]  do_rmdir+0x308/0x330
[  319.869632]  ? __ia32_sys_mkdir+0x40/0x40
[  319.870453]  ? kasan_unpoison_shadow+0x36/0x50
[  319.871363]  ? kasan_kmalloc+0xad/0xe0
[  319.872129]  ? kasan_check_write+0x14/0x20
[  319.872961]  ? strncpy_from_user+0xa8/0x1c0
[  319.873815]  ? getname_flags+0x110/0x2c0
[  319.874619]  __x64_sys_rmdir+0x24/0x30
[  319.875399]  do_syscall_64+0x78/0x170
[  319.876145]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  319.877158] RIP: 0033:0x7f3ea36d34d9
[  319.877892] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 8f 29 2c 00 f7 d8 64 89 01 48
[  319.881586] RSP: 002b:00007ffcc5ecbfe8 EFLAGS: 00000286 ORIG_RAX: 0000000000000054
[  319.883099] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ea36d34d9
[  319.884520] RDX: ffffffffffffff98 RSI: ffffffffffffff98 RDI: 00007ffcc5ecc030
[  319.885942] RBP: 00007ffcc5ece110 R08: 00007ffcc5ece1f8 R09: 00007ffcc5ece1f8
[  319.887376] R10: 00007ffcc5ece1f8 R11: 0000000000000286 R12: 0000000000400530
[  319.888804] R13: 00007ffcc5ece1f0 R14: 0000000000000000 R15: 0000000000000000
[  319.890232] Modules linked in: snd_hda_codec_generic snd_hda_intel snd_hda_codec snd_hwdep snd_hda_core snd_pcm snd_timer snd soundcore mac_hid i2c_piix4 ib_iser rdma_cm iw_cm ib_cm ib_core iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi autofs4 raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx raid1 raid0 multipath linear 8139too qxl drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops ttm crct10dif_pclmul crc32_pclmul aesni_intel drm aes_x86_64 crypto_simd cryptd glue_helper 8139cp mii pata_acpi floppy
[  319.899761] CR2: 0000000000000000
[  319.900487] ---[ end trace 754084f7e4b34756 ]---
[  319.901453] RIP: 0010:xfs_dir_isempty+0xae/0xd0
[  319.902377] Code: 00 00 00 0f 45 c2 41 29 c4 49 63 d4 31 c0 4c 39 ea 7c 1d 48 8d 7b 60 e8 50 a4 cf ff 48 8b 5b 60 48 89 df e8 a4 a1 cf ff 31 c0 <80> 3b 00 0f 94 c0 5b 41 5c 41 5d 5d c3 48 8d 14 c5 00 00 00 00 81
[  319.906139] RSP: 0018:ffff8801ee837c38 EFLAGS: 00010246
[  319.907277] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  319.908698] RDX: 0000000000000000 RSI: 0000000000000297 RDI: 0000000000000297
[  319.910166] RBP: ffff8801ee837c50 R08: ffffed003ee03eab R09: ffffed003ee03eab
[  319.911624] R10: 0000000000000001 R11: ffffed003ee03eaa R12: 000000000000009c
[  319.913086] R13: 0000000000000059 R14: ffff8801f35f6600 R15: 0000000000004000
[  319.914508] FS:  00007f3ea3bb7700(0000) GS:ffff8801f7000000(0000) knlGS:0000000000000000
[  319.916121] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  319.917309] CR2: 0000000000000000 CR3: 00000001f1210000 CR4: 00000000000006f0

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: null pointer dereference in xfs_dir_isempty()
  2018-08-24 14:06 null pointer dereference in xfs_dir_isempty() Xu, Wen
@ 2018-08-26 15:58 ` Eric Sandeen
  0 siblings, 0 replies; 2+ messages in thread
From: Eric Sandeen @ 2018-08-26 15:58 UTC (permalink / raw)
  To: Xu, Wen, linux-xfs@vger.kernel.org; +Cc: Darrick J. Wong, Dave Chinner



On 8/24/18 9:06 AM, Xu, Wen wrote:
> Hi,
> 
> I found a new bug by fuzzing in upstream kernel.
> 
> Check details at: https://bugzilla.kernel.org/show_bug.cgi?id=200925
> 
> -Wen
> 

I think we need a size-vs-format check in xfs_ifork_verify_data, trying
that out now.

-Eric

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2018-08-26 19:41 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2018-08-24 14:06 null pointer dereference in xfs_dir_isempty() Xu, Wen
2018-08-26 15:58 ` Eric Sandeen

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).