From: Mike Snitzer <snitzer@redhat.com>
To: Ming Lei <ming.lei@redhat.com>
Cc: dm-devel@redhat.com, linux-block@vger.kernel.org
Subject: Re: limits->max_sectors is getting set to 0, why/where? [was: Re: dm: kernel oops by divide error on v4.16+]
Date: Mon, 9 Apr 2018 14:38:36 -0400 [thread overview]
Message-ID: <20180409183836.GA11256@redhat.com> (raw)
In-Reply-To: <20180409155120.GA10990@redhat.com>
On Mon, Apr 09 2018 at 11:51am -0400,
Mike Snitzer <snitzer@redhat.com> wrote:
> On Sun, Apr 08 2018 at 12:00am -0400,
> Ming Lei <ming.lei@redhat.com> wrote:
>
> > Hi,
> >
> > The following kernel oops(divide error) is triggered when running
> > xfstest(generic/347) on ext4.
> >
> > [ 442.632954] run fstests generic/347 at 2018-04-07 18:06:44
> > [ 443.839480] divide error: 0000 [#1] PREEMPT SMP PTI
> > [ 443.840201] Dumping ftrace buffer:
> > [ 443.840692] (ftrace buffer empty)
...
> > [ 443.845756] CPU: 1 PID: 29607 Comm: dmsetup Not tainted 4.16.0_f605ba97fb80_master+ #1
> > [ 443.846968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.10.2-2.fc27 04/01/2014
> > [ 443.848147] RIP: 0010:pool_io_hints+0x77/0x153 [dm_thin_pool]
...
> I was able to reproduce (in my case RIP was pool_io_hints+0x45)
>
> Which on my kernel, is:
>
> crash> dis -l pool_io_hints+0x45
> /root/snitm/git/linux/drivers/md/dm-thin.c: 2748
> 0xffffffffc0765165 <pool_io_hints+69>: div %rdi
>
> Which is drivers/md/dm-thin.c:is_factor()'s return
> !sector_div(block_size, n);
>
> SO looking at pool_io_hints() it would seem limits->max_sectors is 0 for
> this xfstests device... why would that be!?
>
> Clearly pool_io_hints() could stand to be more defensive with a
> !limits->max_sectors negative check but is it ever really valid for
> max_sectors to be 0?
>
> Pretty sure the ultimate bug is outside DM (but not seeing an obvious
> place where block core would set max_sectors to 0, all blk-settings.c
> uses min_not_zero(), etc).
I successfully ran this test against the linux-dm.git
"for-4.17/dm-changes" tag that Linus merged after the block changes:
git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm.git tags/for-4.17/dm-changes
# ./check tests/generic/347
FSTYP -- ext4
PLATFORM -- Linux/x86_64 thegoat 4.16.0-rc5.snitm
MKFS_OPTIONS -- /dev/mapper/test-xfstests_scratch
MOUNT_OPTIONS -- -o acl,user_xattr /dev/mapper/test-xfstests_scratch /scratch
generic/347 65s
Ran: generic/347
Passed all 1 tests
SO this would seem to implicate some regression in the 4.17 block layer
changes.
next prev parent reply other threads:[~2018-04-09 18:38 UTC|newest]
Thread overview: 14+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <20180408040005.GA19128@ming.t460p>
2018-04-09 15:51 ` limits->max_sectors is getting set to 0, why/where? [was: Re: dm: kernel oops by divide error on v4.16+] Mike Snitzer
2018-04-09 18:38 ` Mike Snitzer [this message]
2018-04-09 19:32 ` Jens Axboe
2018-04-09 21:26 ` Jens Axboe
2018-04-09 21:56 ` Jens Axboe
2018-04-09 22:05 ` Kees Cook
2018-04-09 22:10 ` Jens Axboe
2018-04-09 22:27 ` Ming Lei
2018-04-09 22:32 ` Jens Axboe
2018-04-09 22:38 ` Kees Cook
2018-04-09 23:01 ` Jens Axboe
2018-04-09 23:54 ` Linus Torvalds
2018-04-10 0:31 ` Jens Axboe
2018-04-09 22:11 ` Linus Torvalds
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20180409183836.GA11256@redhat.com \
--to=snitzer@redhat.com \
--cc=dm-devel@redhat.com \
--cc=linux-block@vger.kernel.org \
--cc=ming.lei@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).