Bug 678589 - kernel BUG at fs/btrfs/inode.c:1537!
Summary: kernel BUG at fs/btrfs/inode.c:1537!
Keywords:
Status: CLOSED DUPLICATE of bug 698324
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: kernel
Version: 6.1
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: rc
: ---
Assignee: Josef Bacik
QA Contact: Red Hat Kernel QE team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-02-18 14:43 UTC by Lubos Kocman
Modified: 2012-06-07 14:26 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-06-07 14:26:45 UTC
Target Upstream Version:


Attachments (Terms of Use)

Description Lubos Kocman 2011-02-18 14:43:59 UTC
Description of problem:

      KERNEL: /usr/lib/debug/lib/modules/2.6.32-117.el6.x86_64/vmlinux
    DUMPFILE: /var/crash/127.0.0.1-2011-02-18-15:27:58/vmcore  [PARTIAL DUMP]
        CPUS: 2
        DATE: Fri Feb 18 15:26:53 2011
      UPTIME: 02:11:48
LOAD AVERAGE: 1.50, 1.12, 2.04
       TASKS: 330
    NODENAME: dhcp-28-248.brq.redhat.com
     RELEASE: 2.6.32-117.el6.x86_64
     VERSION: #1 SMP Tue Feb 15 16:29:34 EST 2011
     MACHINE: x86_64  (2394 Mhz)
      MEMORY: 3.9 GB
       PANIC: "kernel BUG at fs/btrfs/inode.c:1537!"
         PID: 458
     COMMAND: "btrfs-fixup-0"
        TASK: ffff8801319ba0c0  [THREAD_INFO: ffff88012fcd8000]
         CPU: 0
       STATE: TASK_RUNNING (PANIC)

crash> bt
PID: 458    TASK: ffff8801319ba0c0  CPU: 0   COMMAND: "btrfs-fixup-0"
 #0 [ffff88012fcd9a90] machine_kexec at ffffffff8103098b
 #1 [ffff88012fcd9af0] crash_kexec at ffffffff810b5e42
 #2 [ffff88012fcd9bc0] oops_end at ffffffff814dc560
 #3 [ffff88012fcd9bf0] die at ffffffff8100f2fb
 #4 [ffff88012fcd9c20] do_trap at ffffffff814dbe54
 #5 [ffff88012fcd9c80] do_invalid_op at ffffffff8100ceb5
 #6 [ffff88012fcd9d20] invalid_op at ffffffff8100bf5b
    [exception RIP: btrfs_writepage_fixup_worker+301]
    RIP: ffffffffa0190d3d  RSP: ffff88012fcd9dd0  RFLAGS: 00010246
    RAX: 0000000000000000  RBX: ffffea0001567d30  RCX: 0000000000062000
    RDX: ffff8800ba612cb8  RSI: ffff880084efa3c0  RDI: ffff880084efa428
    RBP: ffff88012fcd9e20   R8: ffff88012fcd9d1c   R9: 0000000000000051
    R10: 0000000000000000  R11: 0000000000000000  R12: 0000000000060000
    R13: ffff8800ba612d90  R14: 0000000000000000  R15: 0000000000060fff
    ORIG_RAX: ffffffffffffffff  CS: 0010  SS: 0018
 #7 [ffff88012fcd9e28] worker_loop at ffffffffa01b68b1 [btrfs]
 #8 [ffff88012fcd9ee8] kthread at ffffffff8108d976
 #9 [ffff88012fcd9f48] kernel_thread at ffffffff8100c1ca


Version-Release number of selected component (if applicable):

kernel-2.6.32-117.el6.x86_64

How reproducible:


Steps to Reproduce:
1. 
2.
3.
  
Actual results:


Expected results:


Additional info:

There was some normal IO like yum debuginfo-install rhythmbox ...
(Got btrfs root)


bash-4.1$ sudo btrfs filesystem df /
Data: total=6.84GB, used=5.95GB
System, DUP: total=8.00MB, used=4.00KB
System: total=4.00MB, used=0.00
Metadata, DUP: total=884.00MB, used=210.04MB
Metadata: total=8.00MB, used=0.00

bash-4.1$ sudo btrfs filesystem show
failed to read /dev/sr0
Label: none  uuid: 3ac0e1f4-4e3c-414d-bced-c14372590725
	Total devices 1 FS bytes used 6.16GB
	devid    1 size 9.77GB used 8.60GB path /dev/dm-0

Label: none  uuid: 0ab8b872-a236-4d28-82cf-bb6c8e6b6797
	Total devices 1 FS bytes used 755.68MB
	devid    1 size 11.72GB used 3.04GB path /dev/dm-2

Btrfs Btrfs v0.19

Comment 3 Eryu Guan 2011-04-15 09:23:55 UTC
I hit this bug by running reproducer from bug 439917 comment 5 on -122 kernel.

On -132 kernel there is no such crash, but some WARNINGs
To reproduce this WARNING, you should umount btrfs partition in each loop. It can be reproduced reliably.

------------[ cut here ]------------
WARNING: at fs/btrfs/inode.c:6712 btrfs_destroy_inode+0x320/0x340 [btrfs]() (Tainted: G           ---------------- T)
Hardware name: System x3550 M3 -[7944I21]-
Modules linked in: btrfs(T) zlib_deflate lzo_decompress lzo_compress libcrc32c autofs4 sunrpc cpufreq_ondemand acpi_cpufreq freq_table ipv6 dm_mirror dm_region_hash dm
_log sg bnx2 cdc_ether usbnet mii serio_raw i2c_i801 i2c_core iTCO_wdt iTCO_vendor_support ioatdma dca i7core_edac edac_core shpchp ext4 mbcache jbd2 sd_mod crc_t10dif
 mptsas mptscsih mptbase scsi_transport_sas pata_acpi ata_generic ata_piix dm_mod [last unloaded: microcode]
Pid: 3490, comm: umount Tainted: G           ---------------- T 2.6.32-132.el6.x86_64 #1
Call Trace:
 [<ffffffff81067157>] ? warn_slowpath_common+0x87/0xc0
 [<ffffffff810671aa>] ? warn_slowpath_null+0x1a/0x20
 [<ffffffffa0283c70>] ? btrfs_destroy_inode+0x320/0x340 [btrfs]
 [<ffffffff8118c71f>] ? destroy_inode+0x2f/0x60
 [<ffffffff8118cb77>] ? dispose_list+0xb7/0x120
 [<ffffffff8118cfaa>] ? invalidate_inodes+0xea/0x190
 [<ffffffff81174adc>] ? generic_shutdown_super+0x4c/0xe0
 [<ffffffff81174bd6>] ? kill_anon_super+0x16/0x60
 [<ffffffff81175c50>] ? deactivate_super+0x70/0x90
 [<ffffffff8119114f>] ? mntput_no_expire+0xbf/0x110
 [<ffffffff8119157b>] ? sys_umount+0x7b/0x3a0
 [<ffffffff810d1b82>] ? audit_syscall_entry+0x272/0x2a0
 [<ffffffff8100b172>] ? system_call_fastpath+0x16/0x1b
---[ end trace 1d1ebca0a842b258 ]---
------------[ cut here ]------------
WARNING: at fs/btrfs/inode.c:6713 btrfs_destroy_inode+0x2bf/0x340 [btrfs]() (Tainted: G        W  ---------------- T)
Hardware name: System x3550 M3 -[7944I21]-
Modules linked in: btrfs(T) zlib_deflate lzo_decompress lzo_compress libcrc32c autofs4 sunrpc cpufreq_ondemand acpi_cpufreq freq_table ipv6 dm_mirror dm_region_hash dm_log sg bnx2 cdc_ether usbnet mii serio_raw i2c_i801 i2c_core iTCO_wdt iTCO_vendor_support ioatdma dca i7core_edac edac_core shpchp ext4 mbcache jbd2 sd_mod crc_t10dif mptsas mptscsih mptbase scsi_transport_sas pata_acpi ata_generic ata_piix dm_mod [last unloaded: microcode]
Pid: 3490, comm: umount Tainted: G        W  ---------------- T 2.6.32-132.el6.x86_64 #1
Call Trace:
 [<ffffffff81067157>] ? warn_slowpath_common+0x87/0xc0
 [<ffffffff810671aa>] ? warn_slowpath_null+0x1a/0x20
 [<ffffffffa0283c0f>] ? btrfs_destroy_inode+0x2bf/0x340 [btrfs]
 [<ffffffff8118c71f>] ? destroy_inode+0x2f/0x60
 [<ffffffff8118cb77>] ? dispose_list+0xb7/0x120
 [<ffffffff8118cfaa>] ? invalidate_inodes+0xea/0x190
 [<ffffffff81174adc>] ? generic_shutdown_super+0x4c/0xe0
 [<ffffffff81174bd6>] ? kill_anon_super+0x16/0x60
 [<ffffffff81175c50>] ? deactivate_super+0x70/0x90
 [<ffffffff8119114f>] ? mntput_no_expire+0xbf/0x110
 [<ffffffff8119157b>] ? sys_umount+0x7b/0x3a0
 [<ffffffff810d1b82>] ? audit_syscall_entry+0x272/0x2a0
 [<ffffffff8100b172>] ? system_call_fastpath+0x16/0x1b
---[ end trace 1d1ebca0a842b259 ]---
------------[ cut here ]------------
WARNING: at fs/btrfs/extent-tree.c:3898 btrfs_free_block_groups+0x21f/0x2a0 [btrfs]() (Tainted: G        W  ---------------- T)
Hardware name: System x3550 M3 -[7944I21]-
Modules linked in: btrfs(T) zlib_deflate lzo_decompress lzo_compress libcrc32c autofs4 sunrpc cpufreq_ondemand acpi_cpufreq freq_table ipv6 dm_mirror dm_region_hash dm_log sg bnx2 cdc_ether usbnet mii serio_raw i2c_i801 i2c_core iTCO_wdt iTCO_vendor_support ioatdma dca i7core_edac edac_core shpchp ext4 mbcache jbd2 sd_mod crc_t10dif mptsas mptscsih mptbase scsi_transport_sas pata_acpi ata_generic ata_piix dm_mod [last unloaded: microcode]
Pid: 3490, comm: umount Tainted: G        W  ---------------- T 2.6.32-132.el6.x86_64 #1
Call Trace:
 [<ffffffff81067157>] ? warn_slowpath_common+0x87/0xc0
 [<ffffffff810671aa>] ? warn_slowpath_null+0x1a/0x20
 [<ffffffffa026c8ef>] ? btrfs_free_block_groups+0x21f/0x2a0 [btrfs]
 [<ffffffffa027d919>] ? close_ctree+0x169/0x3a0 [btrfs]
 [<ffffffff8118cbbc>] ? dispose_list+0xfc/0x120
 [<ffffffff8118cfb6>] ? invalidate_inodes+0xf6/0x190
 [<ffffffffa025e27d>] ? btrfs_put_super+0x1d/0x30 [btrfs]
 [<ffffffff81174aeb>] ? generic_shutdown_super+0x5b/0xe0
 [<ffffffff81174bd6>] ? kill_anon_super+0x16/0x60
 [<ffffffff81175c50>] ? deactivate_super+0x70/0x90
 [<ffffffff8119114f>] ? mntput_no_expire+0xbf/0x110
 [<ffffffff8119157b>] ? sys_umount+0x7b/0x3a0
 [<ffffffff810d1b82>] ? audit_syscall_entry+0x272/0x2a0
 [<ffffffff8100b172>] ? system_call_fastpath+0x16/0x1b
---[ end trace 1d1ebca0a842b25a ]---
------------[ cut here ]------------
WARNING: at fs/btrfs/extent-tree.c:3899 btrfs_free_block_groups+0x28d/0x2a0 [btrfs]() (Tainted: G        W  ---------------- T)
Hardware name: System x3550 M3 -[7944I21]-
Modules linked in: btrfs(T) zlib_deflate lzo_decompress lzo_compress libcrc32c autofs4 sunrpc cpufreq_ondemand acpi_cpufreq freq_table ipv6 dm_mirror dm_region_hash dm_log sg bnx2 cdc_ether usbnet mii serio_raw i2c_i801 i2c_core iTCO_wdt iTCO_vendor_support ioatdma dca i7core_edac edac_core shpchp ext4 mbcache jbd2 sd_mod crc_t10dif mptsas mptscsih mptbase scsi_transport_sas pata_acpi ata_generic ata_piix dm_mod [last unloaded: microcode]
Pid: 3490, comm: umount Tainted: G        W  ---------------- T 2.6.32-132.el6.x86_64 #1
Call Trace:
 [<ffffffff81067157>] ? warn_slowpath_common+0x87/0xc0
 [<ffffffff810671aa>] ? warn_slowpath_null+0x1a/0x20
 [<ffffffffa026c95d>] ? btrfs_free_block_groups+0x28d/0x2a0 [btrfs]
 [<ffffffffa027d919>] ? close_ctree+0x169/0x3a0 [btrfs]
 [<ffffffff8118cbbc>] ? dispose_list+0xfc/0x120
 [<ffffffff8118cfb6>] ? invalidate_inodes+0xf6/0x190
 [<ffffffffa025e27d>] ? btrfs_put_super+0x1d/0x30 [btrfs]
 [<ffffffff81174aeb>] ? generic_shutdown_super+0x5b/0xe0
 [<ffffffff81174bd6>] ? kill_anon_super+0x16/0x60
 [<ffffffff81175c50>] ? deactivate_super+0x70/0x90
 [<ffffffff8119114f>] ? mntput_no_expire+0xbf/0x110
 [<ffffffff8119157b>] ? sys_umount+0x7b/0x3a0
 [<ffffffff810d1b82>] ? audit_syscall_entry+0x272/0x2a0
 [<ffffffff8100b172>] ? system_call_fastpath+0x16/0x1b
---[ end trace 1d1ebca0a842b25b ]---
------------[ cut here ]------------
WARNING: at fs/btrfs/extent-tree.c:8372 btrfs_free_block_groups+0x1d3/0x2a0 [btrfs]() (Tainted: G        W  ---------------- T)
Hardware name: System x3550 M3 -[7944I21]-
Modules linked in: btrfs(T) zlib_deflate lzo_decompress lzo_compress libcrc32c autofs4 sunrpc cpufreq_ondemand acpi_cpufreq freq_table ipv6 dm_mirror dm_region_hash dm_log sg bnx2 cdc_ether usbnet mii serio_raw i2c_i801 i2c_core iTCO_wdt iTCO_vendor_support ioatdma dca i7core_edac edac_core shpchp ext4 mbcache jbd2 sd_mod crc_t10dif mptsas mptscsih mptbase scsi_transport_sas pata_acpi ata_generic ata_piix dm_mod [last unloaded: microcode]
Pid: 3490, comm: umount Tainted: G        W  ---------------- T 2.6.32-132.el6.x86_64 #1
Call Trace:
 [<ffffffff81067157>] ? warn_slowpath_common+0x87/0xc0
 [<ffffffff810671aa>] ? warn_slowpath_null+0x1a/0x20
 [<ffffffffa026c8a3>] ? btrfs_free_block_groups+0x1d3/0x2a0 [btrfs]
 [<ffffffffa027d919>] ? close_ctree+0x169/0x3a0 [btrfs]
 [<ffffffff8118cbbc>] ? dispose_list+0xfc/0x120
 [<ffffffff8118cfb6>] ? invalidate_inodes+0xf6/0x190
 [<ffffffffa025e27d>] ? btrfs_put_super+0x1d/0x30 [btrfs]
 [<ffffffff81174aeb>] ? generic_shutdown_super+0x5b/0xe0
 [<ffffffff81174bd6>] ? kill_anon_super+0x16/0x60
 [<ffffffff81175c50>] ? deactivate_super+0x70/0x90
 [<ffffffff8119114f>] ? mntput_no_expire+0xbf/0x110
 [<ffffffff8119157b>] ? sys_umount+0x7b/0x3a0
 [<ffffffff810d1b82>] ? audit_syscall_entry+0x272/0x2a0
 [<ffffffff8100b172>] ? system_call_fastpath+0x16/0x1b
---[ end trace 1d1ebca0a842b25c ]---
space_info has 1073480704 free, is not full
space_info total=1082130432, used=94208, pinned=0, reserved=101376, may_use=0, readonly=8454144

Comment 6 KernelOops Bot 2011-04-15 09:24:46 UTC
 with this guiltyfunc:  bug 527824 bug 528295 bug 528296 bug 528521 bug 528768 bug 530380 bug 536855 bug 536985 bug 542694 bug 562008

Comment 8 KernelOops Bot 2011-04-15 09:24:51 UTC
 with this guiltyfunc:  bug 527824 bug 528295 bug 528296 bug 528521 bug 528768 bug 530380 bug 536855 bug 536985 bug 542694 bug 562008

Comment 12 RHEL Program Management 2011-10-07 15:23:08 UTC
Since RHEL 6.2 External Beta has begun, and this bug remains
unresolved, it has been rejected as it is not proposed as
exception or blocker.

Red Hat invites you to ask your support representative to
propose this request, if appropriate and relevant, in the
next release of Red Hat Enterprise Linux.

Comment 13 Josef Bacik 2012-06-07 14:26:45 UTC

*** This bug has been marked as a duplicate of bug 698324 ***


Note You need to log in before you can comment on or make changes to this bug.