Btrfs devel - Mar 2011 - v2.6.38-6555-ga44f99c: null pointer dereference on -ENOSPC

The partition is a physical ~5GB --mixed lzo compressed partition.

I run large compiles there. During one of those kernel OOpsed
(It seems to be reproducible). At the time of OOps and after reboot ''du
-hs''
reports 2.5GBs free. Before compiation ''du -hs'' reported
3.4GBs free.

kernel version: v2.6.38-6555-ga44f99c (a bit outdated linus''s master
branch)

OOps snippet:

[ 9148.292851] BUG: unable to handle kernel NULL pointer dereference at
0000000000000030
[ 9148.292889] IP: [<ffffffffa02341e7>] btrfs_print_leaf+0x27/0x890
[btrfs]
[ 9148.292931] PGD 6360f067 PUD 6360e067 PMD 0 
[ 9148.292948] Oops: 0000 [#1] PREEMPT SMP 
[ 9148.292961] last sysfs file:
/sys/devices/pci0000:00/0000:00:05.0/sound/card0/uevent
[ 9148.292975] CPU 0 
[ 9148.292979] Modules linked in: bridge stp llc btrfs zlib_deflate
lzo_decompress lzo_compress crc32c libcrc32c tun kvm_am
d kvm fuse nouveau ttm drm_kms_helper forcedeth 8139cp 8139too drm i2c_algo_bit
i2c_core cfbcopyarea cfbimgblt cfbfillrect
[ 9148.293064] 
[ 9148.293070] Pid: 1555, comm: btrfs-endio-wri Not tainted 2.6.38+ #1 To Be
Filled By O.E.M. To Be Filled By O.E.M./ALiveN
F6G-VSTA
[ 9148.293094] RIP: 0010:[<ffffffffa02341e7>]  [<ffffffffa02341e7>]
btrfs_print_leaf+0x27/0x890 [btrfs]
[ 9148.293117] RSP: 0018:ffff88006e99d9e0  EFLAGS: 00010283
[ 9148.293125] RAX: 00000000ffffffe4 RBX: 0000000000000000 RCX: 0000000000000000
[ 9148.293136] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[ 9148.293148] RBP: ffff88006e99da60 R08: ffffffffffffffff R09: 00000000c0000000
[ 9148.293158] R10: ffffffffffffffe4 R11: 0000000000000000 R12: 0000000000000002
[ 9148.293170] R13: ffff880076312000 R14: 0000000000000000 R15: 0000000000000000
[ 9148.293182] FS:  00007fc9c27ad700(0000) GS:ffff88007bc00000(0000)
knlGS:00000000f760f6c0
[ 9148.293195] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[ 9148.293204] CR2: 0000000000000030 CR3: 000000006c783000 CR4: 00000000000006f0
[ 9148.293215] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 9148.293226] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 9148.293238] Process btrfs-endio-wri (pid: 1555, threadinfo ffff88006e99c000,
task ffff88006e992c00)
[ 9148.293251] Stack:
[ 9148.293255]  00000000b6889000 ffffffffa0263ed4 ffff880076312000
ffff88006e99dab8
[ 9148.293275]  ffff88006e99dac0 ffff88006d9292d0 00000000b6889000
00000000001000a8
[ 9148.293292]  ffff88006e99da00 ffffffff810d264f ffff88003054e600
ffff88006d9292d0
[ 9148.293309] Call Trace:
[ 9148.293338]  [<ffffffffa0263ed4>] ?
map_private_extent_buffer+0xe4/0x1d0 [btrfs]
[ 9148.293356]  [<ffffffff810d264f>] ? kmem_cache_alloc+0x7f/0x90
[ 9148.293374]  [<ffffffffa022c8e5>] __btrfs_free_extent+0x645/0x700
[btrfs]
[ 9148.293393]  [<ffffffffa0263fce>] ? unmap_extent_buffer+0xe/0x40
[btrfs]
[ 9148.293409]  [<ffffffff8103b2f1>] ? get_parent_ip+0x11/0x50
[ 9148.293425]  [<ffffffffa022fe61>] run_clustered_refs+0x381/0x860
[btrfs]
[ 9148.293430]  [<ffffffffa0263ed4>] ?
map_private_extent_buffer+0xe4/0x1d0 [btrfs]
[ 9148.293430]  [<ffffffffa027eb00>] ? btrfs_find_ref_cluster+0x90/0x180
[btrfs]
[ 9148.293430]  [<ffffffffa0230400>] btrfs_run_delayed_refs+0xc0/0x210
[btrfs]
[ 9148.293430]  [<ffffffffa0240518>] __btrfs_end_transaction+0x68/0x220
[btrfs]
[ 9148.293430]  [<ffffffffa0240710>] btrfs_end_transaction+0x10/0x20
[btrfs]
[ 9148.293430]  [<ffffffffa0245f6c>] btrfs_finish_ordered_io+0x28c/0x330
[btrfs]
[ 9148.293430]  [<ffffffff8109bcfb>] ? mempool_free+0x4b/0xa0
[ 9148.293430]  [<ffffffffa0246025>] btrfs_writepage_end_io_hook+0x15/0x20
[btrfs]
[ 9148.293430]  [<ffffffffa027d22d>] end_compressed_bio_write+0x7d/0xf0
[btrfs]
[ 9148.293430]  [<ffffffff8110ed28>] bio_endio+0x18/0x30
[ 9148.293430]  [<ffffffffa0239fcc>] end_workqueue_fn+0xec/0x120 [btrfs]
[ 9148.293430]  [<ffffffffa026c2cc>] worker_loop+0xac/0x510 [btrfs]
[ 9148.293430]  [<ffffffffa026c220>] ? worker_loop+0x0/0x510 [btrfs]
[ 9148.293430]  [<ffffffff8105bd56>] kthread+0x96/0xa0
[ 9148.293430]  [<ffffffff81575054>] kernel_thread_helper+0x4/0x10
[ 9148.293430]  [<ffffffff8105bcc0>] ? kthread+0x0/0xa0
[ 9148.293430]  [<ffffffff81575050>] ? kernel_thread_helper+0x0/0x10
[ 9148.293430] Code: 00 00 00 00 55 48 89 e5 48 83 c4 80 4c 89 6d e8 49 89 fd bf
01 00 00 00 48 89 5d d8 4c 89 65 e0 48 89
f3 4c 89 75 f0 4c 89 7d f8 <4c> 8b 66 30 e8 10 72 e0 e0 48 b8 00 00 00 00
00 16 00 00 49 01
[ 9148.293430] RIP  [<ffffffffa02341e7>] btrfs_print_leaf+0x27/0x890
[btrfs]
[ 9148.293430]  RSP <ffff88006e99d9e0>
[ 9148.293430] CR2: 0000000000000030
[ 9148.298484] ---[ end trace 5b3f62fdb89bc634 ]---

Full dmesg is attached

-- 

  Sergei

On Tue, 29 Mar 2011 10:32:24 +0300
Sergei Trofimovich <slyich@gmail.com> wrote:
> The partition is a physical ~5GB --mixed lzo compressed partition.
> 
> I run large compiles there. During one of those kernel OOpsed
> (It seems to be reproducible). At the time of OOps and after reboot
''du -hs''
> reports 2.5GBs free. Before compiation ''du -hs'' reported
3.4GBs free.
> 
> kernel version: v2.6.38-6555-ga44f99c (a bit outdated linus''s
master branch)
This time vanilla 2.6.38. The same type/size of partition, but another box.
Compiled another large project on the FS. df reports 3GB free, btrfs fi df
reports:
    System: total=4.00MB, used=4.00KB
    Data: total=2.66GB, used=1.40GB

[106764.528674] ------------[ cut here ]------------
[106764.528736] kernel BUG at fs/btrfs/extent-tree.c:5452!
[106764.528788] invalid opcode: 0000 [#1] PREEMPT SMP 
[106764.528849] last sysfs file:
/sys/devices/virtual/backlight/acpi_video0/uevent
[106764.528919] CPU 0 
[106764.528942] Modules linked in: sco bnep btusb rfcomm l2cap bluetooth ext2
btrfs zlib_deflate crc32c libcrc32c loop kvm_intel kvm fuse acpi_cpufreq mperf
scsi_wait_scan usb_storage tun snd_hda_codec_analog sdhci_pci pcmcia iwlagn
sdhci yenta_socket pcmcia_rsrc mmc_core sg snd_hda_intel pcmcia_core
snd_hda_codec iwlcore i915 mac80211 cfg80211 rfkill drm_kms_helper sr_mod drm
e1000e i2c_algo_bit cdrom processor thermal battery fan container snd_hwdep
button ac
[106764.529010] 
[106764.529010] Pid: 1642, comm: btrfs-endio-wri Not tainted 2.6.38 #102
Hewlett-Packard HP Compaq 2510p Notebook PC/30C9
[106764.529010] RIP: 0010:[<ffffffffa040d886>]  [<ffffffffa040d886>]
alloc_reserved_file_extent+0xa2/0x1f3 [btrfs]
[106764.529010] RSP: 0000:ffff8800786cbab0  EFLAGS: 00010286
[106764.529010] RAX: 00000000ffffffe4 RBX: ffff880076b5b750 RCX:
ffff8800786cb940
[106764.529010] RDX: ffff8800786cb940 RSI: ffff880076b5b750 RDI:
0000000000000000
[106764.529010] RBP: ffff8800786cbb40 R08: 0000000000000000 R09:
ffffffffffffffff
[106764.529010] R10: 0000000000000001 R11: ffff8800786cbbe0 R12:
ffff8800786cbbe0
[106764.529010] R13: 00000000000000b2 R14: 0000000000000000 R15:
ffff8800763775c0
[106764.529010] FS:  0000000000000000(0000) GS:ffff88007e400000(0000)
knlGS:0000000000000000
[106764.529010] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[106764.529010] CR2: 0000000000432065 CR3: 0000000074f12000 CR4:
00000000000006f0
[106764.529010] DR0: 0000000000000000 DR1: 0000000000000000 DR2:
0000000000000000
[106764.529010] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7:
0000000000000400
[106764.529010] Process btrfs-endio-wri (pid: 1642, threadinfo ffff8800786ca000,
task ffff880078638000)
[106764.529010] Stack:
[106764.529010]  ffff8800786cbae0 ffff8800780f0000 ffff88000000001d
00000000000c4a88
[106764.529010]  0000000000000000 0000000000000005 ffff8800748be800
ffffffff8102fd80
[106764.529010]  ffff8800786cbb10 ffffffff8102fd80 ffff8800786cbb20
0000003500000001
[106764.529010] Call Trace:
[106764.529010]  [<ffffffff8102fd80>] ? get_parent_ip+0x11/0x41
[106764.529010]  [<ffffffff8102fd80>] ? get_parent_ip+0x11/0x41
[106764.529010]  [<ffffffffa0413663>] run_clustered_refs+0x650/0x767
[btrfs]
[106764.529010]  [<ffffffffa04382b5>] ?
map_private_extent_buffer+0xf0/0x149 [btrfs]
[106764.529010]  [<ffffffffa0413846>] btrfs_run_delayed_refs+0xcc/0x1d1
[btrfs]
[106764.529010]  [<ffffffff810308bc>] ? sub_preempt_count+0x92/0xa5
[106764.529010]  [<ffffffffa041e02c>] __btrfs_end_transaction+0x67/0x1ed
[btrfs]
[106764.529010]  [<ffffffffa041e1e6>] btrfs_end_transaction+0x10/0x12
[btrfs]
[106764.529010]  [<ffffffffa04297a6>] btrfs_finish_ordered_io+0x2ac/0x2cf
[btrfs]
[106764.529010]  [<ffffffff81093204>] ? mempool_free_slab+0x12/0x14
[106764.529010]  [<ffffffffa04297de>]
btrfs_writepage_end_io_hook+0x15/0x17 [btrfs]
[106764.529010]  [<ffffffffa045257a>] end_compressed_bio_write+0x6c/0xcc
[btrfs]
[106764.529010]  [<ffffffff810f37b0>] bio_endio+0x28/0x2a
[106764.529010]  [<ffffffffa041a365>] end_workqueue_fn+0x10c/0x11b [btrfs]
[106764.529010]  [<ffffffffa0443b34>] worker_loop+0x19a/0x4e9 [btrfs]
[106764.529010]  [<ffffffffa044399a>] ? worker_loop+0x0/0x4e9 [btrfs]
[106764.529010]  [<ffffffff8104d6e6>] kthread+0x7d/0x85
[106764.529010]  [<ffffffff81002dd4>] kernel_thread_helper+0x4/0x10
[106764.529010]  [<ffffffff8104d669>] ? kthread+0x0/0x85
[106764.529010]  [<ffffffff81002dd0>] ? kernel_thread_helper+0x0/0x10
[106764.529010] Code: 88 00 00 00 08 83 c2 18 48 8b 71 20 41 b9 01 00 00 00 89
55 cc 4c 8d 45 cc 4c 89 e1 48 89 c2 4c 89 ff e8 fb a6 ff ff 85 c0 74 04
<0f> 0b eb fe 48 8b 03 48 89 45 b8 48 89 c7 48 63 73 40 48 6b f6
[106764.529010] RIP  [<ffffffffa040d886>]
alloc_reserved_file_extent+0xa2/0x1f3 [btrfs]
[106764.529010]  RSP <ffff8800786cbab0>
[106764.590182] ---[ end trace afeb166ab43211d0 ]---

-- 

  Sergei

On Sun, 3 Apr 2011 00:10:28 +0300
Sergei Trofimovich <slyich@gmail.com> wrote:
> > The partition is a physical ~5GB --mixed lzo compressed partition.
I used wrong patch for btrfs-progs to support --mixed, so please treat
it as OOps on horribly corrupted FS.

-- 

  Sergei