View Issue Details

IDProjectCategoryView StatusLast Update
0006198CentOS-6kernelpublic2013-01-16 18:57
Status newResolutionopen 
Product Version6.3 
Target VersionFixed in Version 
Summary0006198: btrfs subvolume deletion causes kernel crash
DescriptionSystem crashes when attempting to delete btrfs subvolume.
Steps To Reproduce1) Install CentOS release 6.3 x86_64, keep 1 partition unused
(here /dev/vda2, -- KVM virt.machine
installed from CentOS-6.3-x86_64-minimal.iso,
but it's also reproducible on bare metal)

2) get updates, install btrfs
   # yum update
   # yum install btrfs-progs


3) Make btrfs, create subvolumes
   # mkfs.btrfs /dev/vda2
   # mkdir /btrfs
   # mount /dev/vda2 /btrfs
   # cd /btrfs
   # btrfs subvolume create /btrfs/s1
   # btrfs subvolume snapshot s1 s2

4) delete s2 subvolume
   # btrfs subvolume delete s2
-> crash (see Additional Information)
Additional Informationkernel BUG at fs/btrfs/root-tree.c:346!
invalid opcode: 0000 [#1] SMP
last sysfs file: /sys/devices/pci0000:00/0000:00:06.0/virtio2/block/vda/dev
Modules linked in: bnx2fc fcoe libfcoe 8021q libfc garp stp scsi_transport_fc llc scsi_tgt sunrpc ipt_REJECT nf_conntrack_ipv4 nf_defrag_ipv4 iptable_filter ip_tables ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 xt_state nf_conntrack ip6table_filter ip6_tables btrfs(T) zlib_deflate lzo_decompress lzo_compress libcrc32c virtio_balloon virtio_console snd_hda_intel snd_hda_codec snd_hwdep snd_seq snd_seq_device snd_pcm snd_timer snd soundcore snd_page_alloc i2c_piix4 i2c_core sg ext3 jbd mbcache virtio_blk virtio_net sr_mod cdrom virtio_pci virtio_ring virtio pata_acpi ata_generic ata_piix dm_mirror dm_region_hash dm_log dm_mod be2iscsi bnx2i cnic uio ipv6 cxgb4i cxgb4 cxgb3i libcxgbi cxgb3 mdio libiscsi_tcp qla4xxx iscsi_boot_sysfs libiscsi scsi_transport_iscsi [last unloaded: scsi_wait_scan]

Pid: 875, comm: btrfs-cleaner Tainted: G --------------- T 2.6.32-279.19.1.el6.x86_64 #1 Red Hat KVM
RIP: 0010:[<ffffffffa03fc4c0>] [<ffffffffa03fc4c0>] btrfs_del_root+0xc0/0xe0 [btrfs]
RSP: 0018:ffff88003d9e9d40 EFLAGS: 00010202
RAX: 0000000000000001 RBX: ffff88003ebe3880 RCX: 0000000000000a38
RDX: 0000000000000004 RSI: ffff8800377eb000 RDI: ffff880035c47d60
RBP: ffff88003d9e9d70 R08: ffff88003d9e9cf8 R09: 0000000000000000
R10: 000000000000000b R11: 0000000000000090 R12: ffff88003730f000
R13: ffff88003ebf34e0 R14: ffff880035c47d60 R15: ffff88003ebf34e0
FS: 0000000000000000(0000) GS:ffff880002300000(0000) knlGS:0000000000000000
CS: 0010 DS: 0018 ES: 0018 CR0: 000000008005003b
CR2: 00000000006dbf98 CR3: 0000000037771000 CR4: 00000000000006e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process btrfs-cleaner (pid: 875, threadinfo ffff88003d9e8000, task ffff88003d01f500)
 ffff88003d9e9d70 ffff88003745a917 ffff88003745a917 ffff88003ebe3910
<d> ffff880037023d40 ffff88003745a800 ffff88003d9e9e00 ffffffffa03fb20d
<d> 0000000000016680 ffff88003745a828 ffff88003745a904 0000000000000000
Call Trace:
 [<ffffffffa03fb20d>] btrfs_drop_snapshot+0x39d/0x5a0 [btrfs]
 [<ffffffffa040568c>] btrfs_clean_old_snapshots+0x10c/0x150 [btrfs]
 [<ffffffffa0400de0>] cleaner_kthread+0x160/0x190 [btrfs]
 [<ffffffffa0400c80>] ? cleaner_kthread+0x0/0x190 [btrfs]
 [<ffffffff81090626>] kthread+0x96/0xa0
 [<ffffffff8100c0ca>] child_rip+0xa/0x20
 [<ffffffff81090590>] ? kthread+0x0/0xa0
 [<ffffffff8100c0c0>] ? child_rip+0x0/0x20
Code: 89 ef e8 14 f9 fe ff 48 89 df 89 45 d8 e8 29 8a fe ff 8b 45 d8 48 8b 5d e0 4c 8b 65 e8 4c 8b 6d f0 4c 8b 75 f8 c9 c3 0f 0b eb fe <0f> 0b eb fe 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 eb f4 66 66 66
RIP [<ffffffffa03fc4c0>] btrfs_del_root+0xc0/0xe0 [btrfs]
 RSP <ffff88003d9e9d40>
---[ end trace 38c735fe391248c3 ]---
Kernel panic - not syncing: Fatal exception
Pid: 875, comm: btrfs-cleaner Tainted: G D --------------- T 2.6.32-279.19.1.el6.x86_64 #1
Call Trace:
 [<ffffffff814e9541>] ? panic+0xa0/0x168
 [<ffffffff814ed6d4>] ? oops_end+0xe4/0x100
 [<ffffffff8100f19b>] ? die+0x5b/0x90
 [<ffffffff814ecfa4>] ? do_trap+0xc4/0x160
 [<ffffffff8100cdb5>] ? do_invalid_op+0x95/0xb0
 [<ffffffffa03fc4c0>] ? btrfs_del_root+0xc0/0xe0 [btrfs]
 [<ffffffffa0426ae0>] ? map_extent_buffer+0xb0/0xc0 [btrfs]
 [<ffffffff8100be5b>] ? invalid_op+0x1b/0x20
 [<ffffffffa03fc4c0>] ? btrfs_del_root+0xc0/0xe0 [btrfs]
 [<ffffffffa03fb20d>] ? btrfs_drop_snapshot+0x39d/0x5a0 [btrfs]
 [<ffffffffa040568c>] ? btrfs_clean_old_snapshots+0x10c/0x150 [btrfs]
 [<ffffffffa0400de0>] ? cleaner_kthread+0x160/0x190 [btrfs]
 [<ffffffffa0400c80>] ? cleaner_kthread+0x0/0x190 [btrfs]
 [<ffffffff81090626>] ? kthread+0x96/0xa0
 [<ffffffff8100c0ca>] ? child_rip+0xa/0x20
 [<ffffffff81090590>] ? kthread+0x0/0xa0
 [<ffffffff8100c0c0>] ? child_rip+0x0/0x20
TagsNo tags attached.


There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2013-01-16 18:57 jirkat New Issue