tux3: crash upon writing data with bs=1M

[Dongsu Park]

Hi OGAWA,

On 10.01.2013 04:32, OGAWA Hirofumi wrote:
> Now, this issue was fixed, not fully though. (To fix fully, we have to
> change core and have to implement allocation policy)
> 
> Current limitation is 4G blocks, because log size of block allocation is
> u32. This limitation should not be trigger usually. To trigger this
> limitation, need to have more than 512GB memory even if 512B blocksize.
> 
> Anyway, the limitation of current temp-atomic-commit branch should be
> much less than before.
> 
> Tested by
> 
> 	$ dd if=/dev/zero of=file bs=1M count=1024

I tested with the most recent commit 57d9ca67.
It looks like ok, until I started testing with fio.

# fio --name=tux3test --filename=/mnt/tux3/tfile1 --size=2G --bs=1G \
--rw=rw --ioengine=sync

The kernel crashes with the following log:

[   65.262978] tux3_fill_super: s_blocksize 4096
[  185.839006] balloc: couldn't balloc: blocks 71224
[  185.839111] ------------[ cut here ]------------
[  185.840252] kernel BUG at /home/dpark/Dev/tux3/user/kernel/buffer_writeback.c:67!
[  185.842146] invalid opcode: 0000 [#1] SMP 
[  185.843619] Modules linked in:
tux3(O) nfsv3 autofs4 nfsd nfs_acl auth_rpcgss nfs fscache lockd sunrpc
loop kvm_amd kvm tpm_tis tpm tpm_bios microcode psmouse serio_raw evdev
parport_pc parport i2c_piix4 i2c_core processor button thermal_sys ext3
jbd mbcache dm_mod raid10 raid456 async_raid6_recov async_pq raid6_pq
async_xor xor async_memcpy async_tx raid1 raid0 multipath linear md_mod
sg sr_mod cdrom virtio_blk virtio_net ata_generic virtio_pci virtio_ring
virtio ata_piix libata scsi_mod
[  185.848961] CPU 0 [  185.848961] Pid: 1286, comm: tux3/vdb Tainted: G
         O 3.6.0-guest+ #3 Bochs Bochs
[  185.848961] RIP: 0010:[<ffffffffa03e3475>]  [<ffffffffa03e3475>] flush_list+0x265/0x270 [tux3]
[  185.848961] RSP: 0018:ffff880111da7be0  EFLAGS: 00010212
[  185.848961] RAX: 00000000ffffffe4 RBX: 0000000000100000 RCX: 00000000000182f4
[  185.848961] RDX: ffff880109799428 RSI: ffff880109a48500 RDI: ffffea0004269200
[  185.848961] RBP: ffff880111da7be8 R08: 0000000000015920 R09: ffff88011b002700
[  185.848961] R10: ffffffffa03eb204 R11: 0000000000000001 R12: ffff880111da7be8
[  185.848961] R13: ffff8801097994a8 R14: 0000000000013fa5 R15: 0000000000000001
[  185.848961] FS:  00007f451a442700(0000) GS:ffff88011fc00000(0000) knlGS:00 00000000000000
[  185.848961] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[  185.848961] CR2: ffffffffff600400 CR3: 000000011ab2f000 CR4: 00000000000006f0
[  185.848961] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  185.848961] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  185.848961] Process tux3/vdb (pid: 1286, threadinfo ffff880111da6000, task ffff8801093b7860)
[  185.848961] Stack:
[  185.848961]  ffff880109799428 ffff880113134320 ffff8801008c0ba8 0000000000012976
[  185.848961]  ffff880111da7d00 ffff8801097995f0 0000000000001000 0000000000000000
[  185.848961]  ffff880111da7e20 ffffffffa03ebaea ffff880111da7cec ffff880111da7cc0
[  185.848961] Call Trace:
[  185.848961]  [<ffffffffa03ebaea>] ? tux3_write_begin+0x3a/0x570 [tux3]
[  185.848961]  [<ffffffffa03e9380>] ? blockget+0xd0/0xd0 [tux3]
[  185.848961]  [<ffffffffa03f3b73>] ? tux3_flush_inode+0x323/0x3e0 [tux3]
[  185.848961]  [<ffffffffa03f3cc4>] ? tux3_flush_inodes+0x94/0xb0 [tux3]
[  185.848961]  [<ffffffffa03e55c2>] ? flush_delta_work+0x152/0x610 [tux3]
[  185.848961]  [<ffffffffa03e5470>] ? setup_sb+0x30/0x30 [tux3]
[  185.848961]  [<ffffffffa03e5470>] ? setup_sb+0x30/0x30 [tux3]
[  185.848961]  [<ffffffff810609b6>] ? kthread+0xc6/0xd0
[  185.848961]  [<ffffffff814fcec4>] ? kernel_thread_helper+0x4/0x10
[  185.848961]  [<ffffffff810608f0>] ? kthread_freezable_should_stop+0x60/0x60
[  185.848961]  [<ffffffff814fcec0>] ? gs_change+0x13/0x13
[  185.848961] Code: c0 5b 5d 41 5c 41 5d 41 5e c3 48 89 ca 48 c7 c6 70 5b 3f
  a0 48 c7 c7 ad 98 3f a0 31 c0 e8 b0 e3 10 e1 e9 ec fe ff ff 0f 0b eb
  fe <0f> 0b eb fe 0f 0b eb fe 0f 1f 00 8b 4f 18 4c 8d 47 08 85 c9 74 
 [  185.848961] RIP [<ffffffffa03e3475>] flush_list+0x265/0x270 [tux3]
 [  185.848961]  RSP <ffff880111da7be0>
 [  185.871743] ---[ end trace b928440b7ef5ab6e ]---


Regards,
Dongsu

> 
> Thanks.
> -- 
> OGAWA Hirofumi <hirofumi at mail.parknet.co.jp>