[lkml]   [2018]   [Apr]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: usercopy whitelist woe in scsi_sense_cache
Hi, Kees, Paolo et al.

10.04.2018 08:53, Kees Cook wrote:
> Unfortunately I only had a single hang with no dumps. I haven't been
> able to reproduce it since. :(

For your convenience I've prepared a VM that contains a reproducer.

It consists of 3 disk images (sda.img is for the system, it is
Arch-based, sdb/sdc.img are for RAID). They are available (in a
compressed form) to download here [1].

RAID is built as RAID10 with far2 layout, on top of it there is a LUKS
container (can be opened either with keyfile under the /root or using
"qwerty" password). There's one LVM PV, one VG and one volume on top of
LUKS containing XFS. RAID is automatically assembled during the boot, so
you don't have to worry about it.

I run the VM like this:

$ qemu-system-x86_64 -display gtk,gl=on -machine q35,accel=kvm -cpu
host,+vmx -enable-kvm -netdev user,id=user.0 -device
virtio-net,netdev=user.0 -usb -device nec-usb-xhci,id=xhci -device
usb-tablet,bus=xhci.0 -serial stdio -smp 4 -m 512 -hda sda.img -hdb
sdb.img -hdc sdc.img

The system is accessible via both VGA and serial console. The user is
"root", the password is "qwerty".

Under the /root folder there is a reproducer script ( It
does trivial things like enabling sysrq, opening LUKS device, mounting a
volume, running a background I/O (this is an important part, actually,
since I wasn't able to trigger the issue without the background I/O)
and, finally, running the smartctl in a loop. If you are lucky, within a
minute or two you'll get the first warning followed shortly by
subsequent bugs and I/O stall (htop is pre-installed for your
convenience too).

Notable changes in this VM comparing to generic defaults:

1) blk-mq is enabled via kernel cmdline (scsi_mod.use_blk_mq=1 is in
2) BFQ is set via udev (check /etc/udev/rules.d/10-io-scheduler.rules

Again, I wasn't able to reproduce the usercopy warning/bug and I/O hang
without all these components being involved.

Hope you enjoy it.

P.S. I haven't tested Linus' master branch yet. For now, this VM runs
v4.16 kernel.



 \ /
  Last update: 2018-04-10 19:17    [W:0.155 / U:0.688 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site