Bug 1066146

Summary: [abrt] kernel BUG at mm/slub.c:3338!
Product: [Fedora] Fedora Reporter: Sam Tygier <samtygier>
Component: kernelAssignee: fedora-kernel-btrfs
Status: CLOSED INSUFFICIENT_DATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 20CC: gansalmon, itamar, jonathan, kernel-maint, madhu.chinakonda
Target Milestone: ---Flags: jforbes: needinfo?
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/a69b297926604690342c0bdc6c6873a3eb4294e2
Whiteboard: abrt_hash:04fa57c8275aff9399dc3c9adf52f5db23b77a35
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-06-23 14:49:50 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: dmesg none

Description Sam Tygier 2014-02-17 20:17:27 UTC 
Description of problem:
I disconnected a usb HD while a scrub was happening on its mounted BTRFS partition.

Additional info:
reporter:       libreport-2.1.12
kernel BUG at mm/slub.c:3338!
invalid opcode: 0000 [#1] SMP 
Modules linked in: usb_storage fuse ip6t_rpfilter ip6t_REJECT xt_conntrack ebtable_nat ebtable_broute bridge stp llc ebtable_filter ebtables ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_security iptable_raw bnep snd_hda_codec_hdmi snd_hda_codec_realtek iTCO_wdt iTCO_vendor_support vfat fat arc4 x86_pkg_temp_thermal coretemp kvm_intel kvm microcode uvcvideo videobuf2_vmalloc videobuf2_memops joydev iwldvm videobuf2_core snd_usb_audio videodev snd_hda_intel serio_raw mac80211 media snd_hda_codec snd_usbmidi_lib i2c_i801 snd_hwdep snd_rawmidi snd_seq btusb bluetooth snd_seq_device snd_pcm iwlwifi cfg80211 sdhci_pci sdhci mmc_core lpc_ich mfd_core snd_page_alloc snd_timer e1000e shpchp ptp pps_core mei_me mei thinkpad_acpi snd wmi soundcore rfkill tpm_tis tpm tpm_bios binfmt_misc dm_crypt btrfs libcrc32c xor raid6_pq crct10dif_pclmul crc32_pclmul i915 crc32c_intel ghash_clmulni_intel i2c_algo_bit drm_kms_helper drm i2c_core video
CPU: 1 PID: 2677 Comm: btrfs Not tainted 3.12.10-300.fc20.x86_64 #1
Hardware name: LENOVO 2324CTO/2324CTO, BIOS G2ET96WW (2.56 ) 08/27/2013
task: ffff8800a8702100 ti: ffff88028dff8000 task.ti: ffff88028dff8000
RIP: 0010:[<ffffffff8119454b>]  [<ffffffff8119454b>] kfree+0x12b/0x130
RSP: 0018:ffff88028dff9900  EFLAGS: 00010246
RAX: 005ff00000000000 RBX: ffff88028dff9950 RCX: dead000000200200
RDX: 000077ff80000000 RSI: 0000000000000000 RDI: ffff88028dff9950
RBP: ffff88028dff9918 R08: ffff88028dff9960 R09: 0000000041c00000
R10: ffffea000a37fe40 R11: ffff88003f760874 R12: ffff88003f760870
R13: ffffffffa01b3019 R14: 00000000fffffffb R15: ffff88028dff9960
FS:  00007fc1221ab700(0000) GS:ffff88031e240000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f57b078efc8 CR3: 000000028cc0a000 CR4: 00000000001407e0
Stack:
 0000005701dab000 ffff88003f760870 ffff8800ce813000 ffff88028dff99c0
 ffffffffa01b3019 0000005701db0000 ffff8800a4854a40 0000005701daffff
 0000000000000520 ffff88003f760870 0000000000000004 ffff8802521d8ea0
Call Trace:
 [<ffffffffa01b3019>] btrfs_lookup_csums_range+0x269/0x450 [btrfs]
 [<ffffffffa02114e7>] scrub_stripe+0x8a7/0x1130 [btrfs]
 [<ffffffffa0211e7b>] scrub_chunk.isra.12+0x10b/0x130 [btrfs]
 [<ffffffffa0212100>] scrub_enumerate_chunks+0x260/0x540 [btrfs]
 [<ffffffff8108bc00>] ? abort_exclusive_wait+0x50/0xa0
 [<ffffffffa021385b>] btrfs_scrub_dev+0x19b/0x520 [btrfs]
 [<ffffffffa01f17c5>] btrfs_ioctl+0x1205/0x27b0 [btrfs]
 [<ffffffff8116c1e2>] ? handle_mm_fault+0x3c2/0x1110
 [<ffffffff8167258c>] ? __do_page_fault+0x20c/0x540
 [<ffffffff811c100d>] do_vfs_ioctl+0x2dd/0x4b0
 [<ffffffff811c1261>] SyS_ioctl+0x81/0xa0
 [<ffffffff816728ce>] ? do_page_fault+0xe/0x10
 [<ffffffff81676ea9>] system_call_fastpath+0x16/0x1b
Code: b1 49 f7 02 00 c0 00 00 74 21 49 8b 02 31 f6 f6 c4 40 74 04 41 8b 72 68 4c 89 d7 e8 00 5e fb ff eb 90 4d 8b 52 30 e9 37 ff ff ff <0f> 0b 0f 1f 00 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41 55 49 
RIP  [<ffffffff8119454b>] kfree+0x12b/0x130
 RSP <ffff88028dff9900>
Comment 1 Sam Tygier 2014-02-17 20:17:33 UTC 
Created attachment 864277 [details]
File: dmesg
Comment 2 Justin M. Forbes 2014-02-24 13:56:18 UTC 
*********** MASS BUG UPDATE **************

We apologize for the inconvenience.  There is a large number of bugs to go through and several of them have gone stale.  Due to this, we are doing a mass bug update across all of the Fedora 20 kernel bugs.

Fedora 20 has now been rebased to 3.13.4-200.fc20.  Please test this kernel update and let us know if you issue has been resolved or if it is still present with the newer kernel.

If you experience different issues, please open a new bug report for those.
Comment 3 Sam Tygier 2014-02-24 14:12:46 UTC 
I can reproduce in 3.13.3-201.fc20.x86_64, 3.13.4 has not arrived yet for me.

[104058.684590] kernel BUG at mm/slub.c:3365!
[104058.684612] invalid opcode: 0000 [#1] SMP 
[104058.684637] Modules linked in: ccm usb_storage fuse ip6t_rpfilter ip6t_REJECT xt_conntrack ebtable_nat ebtable_broute bridge stp llc ebtable_filter ebtables ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_security iptable_raw bnep iTCO_wdt iTCO_vendor_support vfat snd_hda_codec_hdmi fat snd_hda_codec_realtek arc4 x86_pkg_temp_thermal coretemp kvm_intel kvm iwldvm mac80211 uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_core microcode videodev media i2c_i801 serio_raw iwlwifi snd_usb_audio snd_hda_intel snd_hda_codec snd_usbmidi_lib btusb snd_rawmidi snd_hwdep bluetooth snd_seq snd_seq_device lpc_ich mfd_core snd_pcm
[104058.684901]  joydev sdhci_pci sdhci thinkpad_acpi snd_page_alloc cfg80211 snd_timer mmc_core shpchp e1000e mei_me ptp mei pps_core snd wmi soundcore rfkill tpm_tis tpm binfmt_misc dm_crypt btrfs libcrc32c xor raid6_pq crct10dif_pclmul crc32_pclmul i915 crc32c_intel ghash_clmulni_intel i2c_algo_bit drm_kms_helper drm i2c_core video
[104058.685012] CPU: 1 PID: 11514 Comm: btrfs Not tainted 3.13.3-201.fc20.x86_64 #1
[104058.685032] Hardware name: LENOVO 2324CTO/2324CTO, BIOS G2ET96WW (2.56 ) 08/27/2013
[104058.685053] task: ffff8800c2e28000 ti: ffff8800bfa94000 task.ti: ffff8800bfa94000
[104058.685073] RIP: 0010:[<ffffffff8119d31b>]  [<ffffffff8119d31b>] kfree+0x12b/0x130
[104058.685100] RSP: 0018:ffff8800bfa95910  EFLAGS: 00010246
[104058.685115] RAX: 003ffff800000000 RBX: ffff8800bfa95960 RCX: dead000000200200
[104058.685134] RDX: 000077ff80000000 RSI: 0000000000000000 RDI: ffff8800bfa95960
[104058.685156] RBP: ffff8800bfa95928 R08: ffff8800bfa95970 R09: 0000000041c00000
[104058.685175] R10: ffffea0002fea540 R11: ffff88030c6e17e4 R12: ffff88030c6e17e0
[104058.685194] R13: ffffffffa01ca429 R14: 00000000fffffffb R15: ffff8800bfa95970
[104058.685215] FS:  00007f351fb0b700(0000) GS:ffff88031e240000(0000) knlGS:0000000000000000
[104058.685236] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[104058.685251] CR2: 00007f526e25f8b4 CR3: 00000000115af000 CR4: 00000000001407e0
[104058.685269] Stack:
[104058.685276]  0000000041cd2000 ffff88030c6e17e0 ffff8801e27b7000 ffff8800bfa959d0
[104058.685299]  ffffffffa01ca429 0000000041ce0000 ffff880290fb8a40 0000000041cdffff
[104058.685322]  00000000000003a4 ffff88030c6e17e0 0000000000000004 ffff88001882b000
[104058.685345] Call Trace:
[104058.685365]  [<ffffffffa01ca429>] btrfs_lookup_csums_range+0x269/0x450 [btrfs]
[104058.685393]  [<ffffffffa0228027>] scrub_stripe+0x887/0x1110 [btrfs]
[104058.685418]  [<ffffffffa01d04c6>] ? btrfs_buffer_uptodate+0x56/0x80 [btrfs]
[104058.685444]  [<ffffffffa02289bb>] scrub_chunk.isra.11+0x10b/0x130 [btrfs]
[104058.685469]  [<ffffffffa0228c34>] scrub_enumerate_chunks+0x254/0x510 [btrfs]
[104058.685491]  [<ffffffff810ae900>] ? abort_exclusive_wait+0x10/0xb0
[104058.685514]  [<ffffffffa022a28c>] btrfs_scrub_dev+0x19c/0x4f0 [btrfs]
[104058.685538]  [<ffffffffa0208a10>] btrfs_ioctl+0x1510/0x25d0 [btrfs]
[104058.685557]  [<ffffffff8169125c>] ? __do_page_fault+0x1dc/0x540
[104058.685574]  [<ffffffff811cb738>] do_vfs_ioctl+0x2d8/0x4a0
[104058.685589]  [<ffffffff811cb981>] SyS_ioctl+0x81/0xa0
[104058.685604]  [<ffffffff816915ce>] ? do_page_fault+0xe/0x10
[104058.685620]  [<ffffffff81695b29>] system_call_fastpath+0x16/0x1b
[104058.685635] Code: b1 49 f7 02 00 c0 00 00 74 21 49 8b 02 31 f6 f6 c4 40 74 04 41 8b 72 68 4c 89 d7 e8 00 58 fb ff eb 90 4d 8b 52 30 e9 37 ff ff ff <0f> 0b 0f 1f 00 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41 55 49 
[104058.685758] RIP  [<ffffffff8119d31b>] kfree+0x12b/0x130
[104058.685774]  RSP <ffff8800bfa95910>
Comment 4 Justin M. Forbes 2014-05-21 19:38:53 UTC 
*********** MASS BUG UPDATE **************

We apologize for the inconvenience.  There is a large number of bugs to go through and several of them have gone stale.  Due to this, we are doing a mass bug update across all of the Fedora 20 kernel bugs.

Fedora 20 has now been rebased to 3.14.4-200.fc20.  Please test this kernel update (or newer) and let us know if you issue has been resolved or if it is still present with the newer kernel.

If you experience different issues, please open a new bug report for those.
Comment 5 Justin M. Forbes 2014-06-23 14:49:50 UTC 
*********** MASS BUG UPDATE **************
This bug is being closed with INSUFFICIENT_DATA as there has not been a response in 4 weeks. If you are still experiencing this issue, please reopen and attach the relevant data from the latest kernel you are running and any data that might have been requested previously.