Re: [BUG] raw over raid5: BUG at drivers/block/ll_rw_blk.c:1967

From: Neil Brown (neilb@cse.unsw.edu.au)
Date: Tue Nov 05 2002 - 18:43:55 EST


On Tuesday October 15, neilb@cse.unsw.edu.au wrote:
> On Monday October 14, lkml@dm.cobite.com wrote:
> >
> > Hi everyone,
> >
> > I haven't been able to run raw over raid5 since 2.5.30 or so, but every
> > time I'm about to report it, a new kernel comes out and the problem
> > changes completely :-( Now I'm finally going to start getting out the info
> > it the hopes someone can fix it. The oops was triggered by attempting to
> > read from /dev/raw/raw1 (bound to /dev/md0) using dd. System info
> > follows oops:
> >
> > ------------[ cut here ]------------
> > kernel BUG at drivers/block/ll_rw_blk.c:1967!
> > invalid operand: 0000
> >
>
> You are not alone in reporting this BUG...
>
> I blame the Scsi/bio layer.
> Jens Axboe blames raid5.
> :-)
>

Just for the record, Jens was right. :-)
Here is the patch which will be winging it's way to Linus shortly.

NeilBrown
-----------------------------
Fix bug in raid5

When analysing a stripe in handle_stripe we set bits
 R5_Wantread or R5_Wantwrite
to indicate if a read or write is needed. We don't actually schedule the
IO immediately as this is done under a spinlock (sh->lock) and
generic_make_request can block. Instead we check these bits after
the lock has been lifted and then schedule the IO.

But once the lock has been lifted we aren't safe against multiple
access, and it is possible that the IO will be scheduled never, or twice.

So, we use test_and_clear to check and potentially schedule the IO.

This wasn't a problem in 2.4 because the equivalent information was
stored on the stack instead of in the stripe.

We also make sure bi_io_vec[0] has correct values as a previous
call to generic_make_request may have changed them.

 ----------- Diffstat output ------------
 ./drivers/md/raid5.c | 92 +++++++++++++++++++++++++++------------------------
 1 file changed, 51 insertions(+), 43 deletions(-)

--- ./drivers/md/raid5.c 2002/11/05 23:31:25 1.1
+++ ./drivers/md/raid5.c 2002/11/05 23:39:15 1.2
@@ -851,8 +851,6 @@ static void handle_stripe(struct stripe_
         for (i=disks; i--; ) {
                 mdk_rdev_t *rdev;
                 dev = &sh->dev[i];
- clear_bit(R5_Wantread, &dev->flags);
- clear_bit(R5_Wantwrite, &dev->flags);
                 clear_bit(R5_Insync, &dev->flags);
                 clear_bit(R5_Syncio, &dev->flags);
 
@@ -1160,48 +1158,56 @@ static void handle_stripe(struct stripe_
                 bi->bi_size = 0;
                 bi->bi_end_io(bi, bytes, 0);
         }
- for (i=disks; i-- ;)
- if (sh->dev[i].flags & ((1<<R5_Wantwrite)|(1<<R5_Wantread))) {
- struct bio *bi = &sh->dev[i].req;
- mdk_rdev_t *rdev ;
-
- bi->bi_rw = 0;
- if (test_bit(R5_Wantread, &sh->dev[i].flags))
- bi->bi_end_io = raid5_end_read_request;
- else {
- bi->bi_end_io = raid5_end_write_request;
- bi->bi_rw = 1;
- }
-
- spin_lock_irq(&conf->device_lock);
- rdev = conf->disks[i].rdev;
- if (rdev && rdev->faulty)
- rdev = NULL;
- if (rdev)
- atomic_inc(&rdev->nr_pending);
- spin_unlock_irq(&conf->device_lock);
-
- if (rdev) {
- if (test_bit(R5_Syncio, &sh->dev[i].flags))
- md_sync_acct(rdev, STRIPE_SECTORS);
-
- bi->bi_bdev = rdev->bdev;
- PRINTK("for %llu schedule op %ld on disc %d\n", (unsigned long long)sh->sector, bi->bi_rw, i);
- atomic_inc(&sh->count);
- bi->bi_sector = sh->sector;
- bi->bi_flags = 1 << BIO_UPTODATE;
- bi->bi_vcnt = 1;
- bi->bi_idx = 0;
- bi->bi_io_vec = &sh->dev[i].vec;
- bi->bi_size = STRIPE_SIZE;
- bi->bi_next = NULL;
- generic_make_request(bi);
- } else {
- PRINTK("skip op %ld on disc %d for sector %llu\n", bi->bi_rw, i, (unsigned long long)sh->sector);
- clear_bit(R5_LOCKED, &dev->flags);
- set_bit(STRIPE_HANDLE, &sh->state);
- }
+ for (i=disks; i-- ;) {
+ int rw;
+ struct bio *bi;
+ mdk_rdev_t *rdev;
+ if (test_and_clear_bit(R5_Wantwrite, &sh->dev[i].flags))
+ rw = 1;
+ else if (test_and_clear_bit(R5_Wantread, &sh->dev[i].flags))
+ rw = 0;
+ else
+ continue;
+
+ bi = &sh->dev[i].req;
+
+ bi->bi_rw = rw;
+ if (rw)
+ bi->bi_end_io = raid5_end_write_request;
+ else
+ bi->bi_end_io = raid5_end_read_request;
+
+ spin_lock_irq(&conf->device_lock);
+ rdev = conf->disks[i].rdev;
+ if (rdev && rdev->faulty)
+ rdev = NULL;
+ if (rdev)
+ atomic_inc(&rdev->nr_pending);
+ spin_unlock_irq(&conf->device_lock);
+
+ if (rdev) {
+ if (test_bit(R5_Syncio, &sh->dev[i].flags))
+ md_sync_acct(rdev, STRIPE_SECTORS);
+
+ bi->bi_bdev = rdev->bdev;
+ PRINTK("for %llu schedule op %ld on disc %d\n", (unsigned long long)sh->sector, bi->bi_rw, i);
+ atomic_inc(&sh->count);
+ bi->bi_sector = sh->sector;
+ bi->bi_flags = 1 << BIO_UPTODATE;
+ bi->bi_vcnt = 1;
+ bi->bi_idx = 0;
+ bi->bi_io_vec = &sh->dev[i].vec;
+ bi->bi_io_vec[0].bv_len = STRIPE_SIZE;
+ bi->bi_io_vec[0].bv_offset = 0;
+ bi->bi_size = STRIPE_SIZE;
+ bi->bi_next = NULL;
+ generic_make_request(bi);
+ } else {
+ PRINTK("skip op %ld on disc %d for sector %llu\n", bi->bi_rw, i, (unsigned long long)sh->sector);
+ clear_bit(R5_LOCKED, &dev->flags);
+ set_bit(STRIPE_HANDLE, &sh->state);
                 }
+ }
 }
 
 static inline void raid5_activate_delayed(raid5_conf_t *conf)
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Thu Nov 07 2002 - 22:00:40 EST