Bug 785182

Summary: DM RAID: Performing multiple suspend/resume cycles on a dm RAID device causes memory corruption
Product: Red Hat Enterprise Linux 6 Reporter: Jonathan Earl Brassow <jbrassow>
Component: kernelAssignee: Jonathan Earl Brassow <jbrassow>
Status: CLOSED DUPLICATE QA Contact: Red Hat Kernel QE team <kernel-qe>
Severity: medium Docs Contact:
Priority: high    
Version: 6.2CC: agk, mbroz, mpatocka, msnitzer, prajnoha
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-02-10 22:22:21 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 732458, 739162    
Attachments:
Description Flags
my crashlog. The kernel is 2.6.32-220.4.1.el6.x86_64 none

Description Jonathan Earl Brassow 2012-01-27 14:58:49 UTC
Steps to reproduce:
1) lvcreate --type raid1 -m 1 -L 500M -n lv vg
2) dmsetup suspend vg-lv
3) dmsetup resume vg-lv  ** KERNEL OPPS **

It may be necessary to repeat steps 2 & 3.

Comment 2 Mikuláš Patočka 2012-02-06 09:56:56 UTC
I managed to reproduce the bug. In function bitmap_daemon_work, just after the "/* skip this page unless it's marked as needing cleaning */" comment, page is a wild pointer, pointing to 0x0000006f0000006f. This should be forwarded to the developers of md subsystem, because they have best knowledge of their code.

Comment 3 Mikuláš Patočka 2012-02-06 09:58:11 UTC
Created attachment 559583 [details]
my crashlog. The kernel is 2.6.32-220.4.1.el6.x86_64

Comment 5 Jonathan Earl Brassow 2012-02-10 22:22:21 UTC
Missed this bug when creating bug 789409.  That bug has all the acks already and i've described the patch I sent upstream there.

*** This bug has been marked as a duplicate of bug 789409 ***