18a272653SPeter Holm#!/bin/sh 28a272653SPeter Holm 38a272653SPeter Holm# 48a272653SPeter Holm# Copyright (c) 2016 EMC Corp. 58a272653SPeter Holm# All rights reserved. 68a272653SPeter Holm# 78a272653SPeter Holm# Redistribution and use in source and binary forms, with or without 88a272653SPeter Holm# modification, are permitted provided that the following conditions 98a272653SPeter Holm# are met: 108a272653SPeter Holm# 1. Redistributions of source code must retain the above copyright 118a272653SPeter Holm# notice, this list of conditions and the following disclaimer. 128a272653SPeter Holm# 2. Redistributions in binary form must reproduce the above copyright 138a272653SPeter Holm# notice, this list of conditions and the following disclaimer in the 148a272653SPeter Holm# documentation and/or other materials provided with the distribution. 158a272653SPeter Holm# 168a272653SPeter Holm# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 178a272653SPeter Holm# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 188a272653SPeter Holm# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 198a272653SPeter Holm# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 208a272653SPeter Holm# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 218a272653SPeter Holm# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 228a272653SPeter Holm# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 238a272653SPeter Holm# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 248a272653SPeter Holm# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 258a272653SPeter Holm# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 268a272653SPeter Holm# SUCH DAMAGE. 278a272653SPeter Holm# 288a272653SPeter Holm 298a272653SPeter Holm# A fuzz test triggered a failed block allocation unwinding problem. 308a272653SPeter Holm 318a272653SPeter Holm# "panic: ffs_blkfree_cg: freeing free block" seen: 328a272653SPeter Holm# https://people.freebsd.org/~pho/stress/log/kostik923.txt 338a272653SPeter Holm# Fixed by r304232. 348a272653SPeter Holm 358a272653SPeter Holm[ `id -u ` -ne 0 ] && echo "Must be root!" && exit 1 368a272653SPeter Holm 378a272653SPeter Holm. ../default.cfg 388a272653SPeter Holm 398a272653SPeter Holmodir=`pwd` 408a272653SPeter Holmcd /tmp 418a272653SPeter Holmsed '1,/^EOF/d' < $odir/$0 > ftruncate2.c 428a272653SPeter Holmrm -f /tmp/ftruncate2 438a272653SPeter Holmmycc -o ftruncate2 -Wall -Wextra -O2 -g ftruncate2.c -lpthread || exit 1 448a272653SPeter Holmrm -f ftruncate2.c 458a272653SPeter Holm 468a272653SPeter Holmecho "Expect: \"/mnt: write failed, filesystem is full\"" 478a272653SPeter Holmmount | grep $mntpoint | grep -q "on $mntpoint " && umount -f $mntpoint 488a272653SPeter Holmmdconfig -l | grep -q md$mdstart && mdconfig -d -u $mdstart 498a272653SPeter Holmmdconfig -a -t swap -s 1g -u $mdstart || exit 1 50*608c97bfSPeter Holmnewfs md$mdstart > /dev/null # Non SU panics 51*608c97bfSPeter Holmmount /dev/md$mdstart $mntpoint 528a272653SPeter Holm 538a272653SPeter Holmdir=$mntpoint 548a272653SPeter Holmchmod 777 $dir 558a272653SPeter Holm 568a272653SPeter Holmcd $dir 578a272653SPeter Holmjot 500 | xargs touch 588a272653SPeter Holmjot 500 | xargs chmod 666 598a272653SPeter Holmcd $odir 608a272653SPeter Holm 618a272653SPeter Holm(cd /tmp; /tmp/ftruncate2 $dir) 628a272653SPeter Holme=$? 638a272653SPeter Holm 648a272653SPeter Holmrm -rf $dir/* 658a272653SPeter Holm 668a272653SPeter Holmwhile mount | grep -q "on $mntpoint "; do 678a272653SPeter Holm umount $mntpoint || sleep 1 688a272653SPeter Holmdone 698a272653SPeter Holmmdconfig -d -u $mdstart 708a272653SPeter Holmrm -f /tmp/ftruncate2 718a272653SPeter Holmexit $e 728a272653SPeter HolmEOF 738a272653SPeter Holm#include <sys/param.h> 748a272653SPeter Holm 758a272653SPeter Holm#include <err.h> 768a272653SPeter Holm#include <errno.h> 778a272653SPeter Holm#include <fcntl.h> 788a272653SPeter Holm#include <fts.h> 798a272653SPeter Holm#include <libutil.h> 808a272653SPeter Holm#include <pthread.h> 818a272653SPeter Holm#include <pwd.h> 828a272653SPeter Holm#include <stdint.h> 838a272653SPeter Holm#include <stdio.h> 848a272653SPeter Holm#include <stdlib.h> 858a272653SPeter Holm#include <string.h> 868a272653SPeter Holm#include <unistd.h> 878a272653SPeter Holm 888a272653SPeter Holm#define N (128 * 1024 / (int)sizeof(u_int32_t)) 898a272653SPeter Holm#define RUNTIME 180 908a272653SPeter Holm#define THREADS 2 918a272653SPeter Holm 928a272653SPeter Holmstatic int fd[900]; 938a272653SPeter Holmstatic u_int32_t r[N]; 948a272653SPeter Holmstatic char *args[2]; 958a272653SPeter Holm 968a272653SPeter Holmstatic unsigned long 978a272653SPeter Holmmakearg(void) 988a272653SPeter Holm{ 998a272653SPeter Holm unsigned long val; 1008a272653SPeter Holm 1018a272653SPeter Holm val = arc4random(); 1028a272653SPeter Holm#if defined(__LP64__) 1038a272653SPeter Holm val = (val << 32) | arc4random(); 1048a272653SPeter Holm val = val & 0x00007fffffffffffUL; 1058a272653SPeter Holm#endif 1068a272653SPeter Holm 1078a272653SPeter Holm return(val); 1088a272653SPeter Holm} 1098a272653SPeter Holm 1108a272653SPeter Holmstatic void * 1118a272653SPeter Holmtest(void *arg __unused) 1128a272653SPeter Holm{ 1138a272653SPeter Holm FTS *fts; 1148a272653SPeter Holm FTSENT *p; 1158a272653SPeter Holm int ftsoptions, i, n; 1168a272653SPeter Holm 1178a272653SPeter Holm ftsoptions = FTS_PHYSICAL; 1188a272653SPeter Holm 1198a272653SPeter Holm for (;;) { 1208a272653SPeter Holm for (i = 0; i < N; i++) 1218a272653SPeter Holm r[i] = arc4random(); 1228a272653SPeter Holm if ((fts = fts_open(args, ftsoptions, NULL)) == NULL) 1238a272653SPeter Holm err(1, "fts_open"); 1248a272653SPeter Holm 1258a272653SPeter Holm i = n = 0; 1268a272653SPeter Holm while ((p = fts_read(fts)) != NULL) { 1278a272653SPeter Holm if (fd[i] > 0) 1288a272653SPeter Holm close(fd[i]); 1298a272653SPeter Holm if ((fd[i] = open(p->fts_path, O_RDWR)) == -1) 1308a272653SPeter Holm if ((fd[i] = open(p->fts_path, O_WRONLY)) == -1) 1318a272653SPeter Holm continue; 1328a272653SPeter Holm if (ftruncate(fd[i], 0) != 0) 1338a272653SPeter Holm err(1, "ftruncate"); 1348a272653SPeter Holm i++; 1358a272653SPeter Holm i = i % nitems(fd); 1368a272653SPeter Holm } 1378a272653SPeter Holm 1388a272653SPeter Holm if (fts_close(fts) == -1) 1398a272653SPeter Holm err(1, "fts_close()"); 1408a272653SPeter Holm sleep(1); 1418a272653SPeter Holm } 1428a272653SPeter Holm return(0); 1438a272653SPeter Holm} 1448a272653SPeter Holm 1458a272653SPeter Holmstatic void * 1468a272653SPeter Holmcalls(void *arg __unused) 1478a272653SPeter Holm{ 1488a272653SPeter Holm off_t offset; 1498a272653SPeter Holm time_t start; 1508a272653SPeter Holm int fd2; 1518a272653SPeter Holm 1528a272653SPeter Holm start = time(NULL); 1538a272653SPeter Holm while ((time(NULL) - start) < RUNTIME) { 1548a272653SPeter Holm fd2 = makearg() % nitems(fd) + 3; 1558a272653SPeter Holm offset = makearg(); 1568a272653SPeter Holm if (lseek(fd2, offset - 1, SEEK_SET) != -1) { 1578a272653SPeter Holm if (write(fd2, "x", 1) != 1) 1588a272653SPeter Holm if (errno != EBADF && errno != ENOSPC && errno != E2BIG && 1598a272653SPeter Holm errno != ESTALE && errno != EFBIG) 1608a272653SPeter Holm warn("write"); 1618a272653SPeter Holm } else 1628a272653SPeter Holm if (errno != EBADF) 1638a272653SPeter Holm warn("lseek"); 1648a272653SPeter Holm if (fsync(fd2) == -1) 1658a272653SPeter Holm if (errno != EBADF) 1668a272653SPeter Holm warn("x"); 1678a272653SPeter Holm } 1688a272653SPeter Holm 1698a272653SPeter Holm return (0); 1708a272653SPeter Holm} 1718a272653SPeter Holm 1728a272653SPeter Holmint 1738a272653SPeter Holmmain(int argc, char **argv) 1748a272653SPeter Holm{ 1758a272653SPeter Holm struct passwd *pw; 1768a272653SPeter Holm pthread_t rp, cp[THREADS]; 1778a272653SPeter Holm int e, i; 1788a272653SPeter Holm 1798a272653SPeter Holm if (argc != 2) { 1808a272653SPeter Holm fprintf(stderr, "Usage: %s <dir>\n", argv[0]); 1818a272653SPeter Holm exit(1); 1828a272653SPeter Holm } 1838a272653SPeter Holm args[0] = argv[1]; 1848a272653SPeter Holm args[1] = 0; 1858a272653SPeter Holm 1868a272653SPeter Holm if ((pw = getpwnam("nobody")) == NULL) 1878a272653SPeter Holm err(1, "failed to resolve nobody"); 1888a272653SPeter Holm if (setgroups(1, &pw->pw_gid) || 1898a272653SPeter Holm setegid(pw->pw_gid) || setgid(pw->pw_gid) || 1908a272653SPeter Holm seteuid(pw->pw_uid) || setuid(pw->pw_uid)) 1918a272653SPeter Holm err(1, "Can't drop privileges to \"nobody\""); 1928a272653SPeter Holm endpwent(); 1938a272653SPeter Holm 1948a272653SPeter Holm if ((e = pthread_create(&rp, NULL, test, NULL)) != 0) 1958a272653SPeter Holm errc(1, e, "pthread_create"); 1968a272653SPeter Holm usleep(1000); 1978a272653SPeter Holm for (i = 0; i < THREADS; i++) 1988a272653SPeter Holm if ((e = pthread_create(&cp[i], NULL, calls, NULL)) != 0) 1998a272653SPeter Holm errc(1, e, "pthread_create"); 2008a272653SPeter Holm for (i = 0; i < THREADS; i++) 2018a272653SPeter Holm pthread_join(cp[i], NULL); 2028a272653SPeter Holm 2038a272653SPeter Holm return (0); 2048a272653SPeter Holm} 205