Bug 211525
| Summary: | kernel dm: mempool_resize BUG() during multiple snapshot removals | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 5 | Reporter: | Corey Marthaler <cmarthal> | ||||
| Component: | kernel | Assignee: | Milan Broz <mbroz> | ||||
| Status: | CLOSED ERRATA | QA Contact: | |||||
| Severity: | high | Docs Contact: | |||||
| Priority: | medium | ||||||
| Version: | 5.0 | CC: | agk, chris, dwysocha, pvrabec | ||||
| Target Milestone: | --- | ||||||
| Target Release: | --- | ||||||
| Hardware: | All | ||||||
| OS: | Linux | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | RHBA-2007-0959 | Doc Type: | Bug Fix | ||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2007-11-07 19:14:00 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
|
Description
Corey Marthaler
2006-10-19 20:25:29 UTC
This request was evaluated by Red Hat Product Management for inclusion in a Red Hat Enterprise Linux maintenance release. Product Management has requested further review of this request by Red Hat Engineering, for potential inclusion in a Red Hat Enterprise Linux Update release for currently deployed products. This request is not yet committed for inclusion in an Update release. Reproducible on RHEL5, kernel 2.6.18-8.1.1.el5, new DM-IO patches solve it.
kernel BUG at mm/mempool.c:121!
invalid opcode: 0000 [#1]
SMP
last sysfs file: /block/ram0/dev
Modules linked in: autofs4 hidp nfs lockd fscache nfs_acl rfcomm l2cap bluetooth
sunrpc ipv6 video sbs i2c_ec button battery asus_acpi ac lp sg floppy pcspkr
i2c_piix4 pcnet32 i2c_core mii ide_cd cdrom parport_pc parport serio_raw
dm_snapshot dm_zero dm_mirror dm_mod mptspi mptscsih mptbase scsi_transport_spi
sd_mod scsi_mod ext3 jbd ehci_hcd ohci_hcd uhci_hcd
CPU: 0
EIP: 0060:[<c045272c>] Not tainted VLI
EFLAGS: 00010282 (2.6.18-8.1.1.el5 #1)
EIP is at mempool_resize+0x14/0x158
eax: cf9f6cc0 ebx: ffffff70 ecx: 000000d0 edx: ffffff70
esi: c7136ec0 edi: d0c31080 ebp: cf9f6cc0 esp: c8dd4d90
ds: 007b es: 007b ss: 0068
Process lvremove (pid: 3315, ti=c8dd4000 task=c9e2f550 task.ti=c8dd4000)
Stack: 000000d0 ffffff70 c040492e ffffff70 c7136ec0 d0c31080 00000000 d08faa45
c7023940 d08fac9b c0432297 00000000 c9e2f550 c0434e65 00000286 c9bd0600
c7136ec0 d0c31080 d08e4998 c93c7180 d0c31080 00000000 d08f7aca c93c7c80
Call Trace:
[<c040492e>] common_interrupt+0x1a/0x20
[<d08faa45>] resize_pool+0x37/0xa5 [dm_mod]
[<d08fac9b>] kcopyd_client_destroy+0x6a/0x9f [dm_mod]
[<c0432297>] flush_cpu_workqueue+0x7c/0x87
[<c0434e65>] autoremove_wake_function+0x0/0x2d
[<d08e4998>] snapshot_dtr+0x5a/0xa0 [dm_snapshot]
[<d08f7aca>] dm_table_put+0x4a/0xa7 [dm_mod]
[<d08f6a80>] dm_put+0x7f/0x130 [dm_mod]
[<d08f9e41>] dev_remove+0x82/0x90 [dm_mod]
[<d08fa374>] ctl_ioctl+0x1f3/0x238 [dm_mod]
[<d08f9dbf>] dev_remove+0x0/0x90 [dm_mod]
[<c0479cf3>] do_ioctl+0x47/0x5d
[<c0479f53>] vfs_ioctl+0x24a/0x25c
[<c0479fad>] sys_ioctl+0x48/0x5f
[<c0403eff>] syscall_call+0x7/0xb
=======================
Code: c4 0c 89 d8 5b 5e 5f 5d c3 6a ff ff 74 24 08 e8 38 ff ff ff 5a 59 c3 55 89
c5 57 56 53 83 ec 0c 85 d2 89 54 24 04 89 0c 24 7f 08 <0f> 0b 79 00 0d ff 61 c0
89 e8 e8 c5 9c 1a 00 89 44 24 08 8b 44
EIP: [<c045272c>] mempool_resize+0x14/0x158 SS:ESP 0068:c8dd4d90
<0>Kernel panic - not syncing: Fatal exception
Simple core of test script to reproduce this:
DEV=/dev/sdb1
DEV1=/dev/sdc1
VG=vg_test
LV=lv_test
NUM=50
pvcreate -ff $DEV $DEV1
vgcreate $VG $DEV $DEV1
lvcreate -L 100M -n $LV $VG
i=1
while [ $i -le $NUM ] ; do
lvcreate -s -L 4M -n $LV$i /dev/"$VG"/"$LV"
let i=i+1
done
echo "--ENTER to continue--"; read;
i=1
while [ $i -le $NUM ] ; do
lvremove -f /dev/"$VG"/"$LV"$i
let i=i+1
done
lvremove -f /dev/"$VG"/"$LV"
vgchange -a n $VG
vgremove $VG
pvremove $DEV $DEV1
in 2.6.18-18.el5 Fix verified in 2.6.18-18.el5. moving to MODIFIED to satisfy errata tool Created attachment 160932 [details]
reproducer script
I reproduced the bug and verified the fix with the attach script. It is a
modified version of the original testcase which uses loopback files and does
not require extra disks.
*** Bug 258561 has been marked as a duplicate of this bug. *** An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on the solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHBA-2007-0959.html |