On Thu, Jun 8, 2017 at 11:34 AM, Sargun Dhillon <sar...@sargun.me> wrote:
> I have a deadlock caught in the wild between two processes --
> btrfs-cleaner, and userspace process (Docker). Here, you can see both
> of the backtraces. btrfs-cleaner is trying to get a lock on
> ffff9859d360caf0, which is owned by Docker's pid. Docker on the other
> hand is trying to get a lock on ffff9859dc0f0578, which is owned by
> btrfs-cleaner's Pid.
>
> This is on vanilla 4.11.3 without much workload. The background
> workload was basically starting and stopping Docker with a medium
> sized image like ubuntu:latest with sleep 5. So, snapshot creation,
> destruction. And there's some stuff that's logging to btrfs.
>
> crash> bt -FF
> PID: 3423   TASK: ffff985ec7a16580  CPU: 2   COMMAND: "btrfs-cleaner"
>  #0 [ffffafca9d9078e8] __schedule at ffffffffbb235729
>     ffffafca9d9078f0: 0000000000000000 [ffff985eccb2e580:task_struct]
>     ffffafca9d907900: [ffff985ec7a16580:task_struct] ffff985ed949b280
>     ffffafca9d907910: ffffafca9d907978 __schedule+953
>     ffffafca9d907920: btree_get_extent 000000009de968f0
>     ffffafca9d907930: ffff985ed949b280 ffffafca9d907958
>     ffffafca9d907940: 0000000000000004 00a90842012fd9df
>     ffffafca9d907950: [ffff985ec7a16580:task_struct]
> [ffff9859d360cb50:btrfs_extent_buffer]
>     ffffafca9d907960: [ffff9859d360cb58:btrfs_extent_buffer]
> [ffff985ec7a16580:task_struct]
>     ffffafca9d907970: [ffff985ec7a16580:task_struct] ffffafca9d907990
>     ffffafca9d907980: schedule+54
>  #1 [ffffafca9d907980] schedule at ffffffffbb235c96
>     ffffafca9d907988: [ffff9859d360caf0:btrfs_extent_buffer] ffffafca9d9079f8
>     ffffafca9d907998: btrfs_tree_read_lock+204
>  #2 [ffffafca9d907998] btrfs_tree_read_lock at ffffffffc03e112c [btrfs]
>     ffffafca9d9079a0: ffff985e00000000 [ffff985ec7a16580:task_struct]
>     ffffafca9d9079b0: autoremove_wake_function
> [ffff9859d360cb60:btrfs_extent_buffer]
>     ffffafca9d9079c0: [ffff9859d360cb60:btrfs_extent_buffer] 00a90842012fd9df
>     ffffafca9d9079d0: [ffff985a6ca3c370:Acpi-State]
> [ffff9859d360caf0:btrfs_extent_buffer]
>     ffffafca9d9079e0: ffffafca9d907ac0 [ffff985e751bc000:kmalloc-8192]
>     ffffafca9d9079f0: [ffff985e751bc000:kmalloc-8192] ffffafca9d907a48
>     ffffafca9d907a00: __add_missing_keys+190
>  #3 [ffffafca9d907a00] __add_missing_keys at ffffffffc040abae [btrfs]
>     ffffafca9d907a08: 0000000000000000 ffffafca9d907a28
>     ffffafca9d907a18: free_extent_buffer+75 00a90842012fd9df
>     ffffafca9d907a28: ffffafca9d907ab0 ffffafca9d907be8
>     ffffafca9d907a38: 0000000000000000 [ffff985e78dae540:btrfs_path]
>     ffffafca9d907a48: ffffafca9d907b28 find_parent_nodes+889
>  #4 [ffffafca9d907a50] find_parent_nodes at ffffffffc040c4d9 [btrfs]
>     ffffafca9d907a58: [ffff985e751bc000:kmalloc-8192]
> [ffff9859d613cf40:kmalloc-32]
>     ffffafca9d907a68: [ffff9859d613c220:kmalloc-32] 0000000000000000
>     ffffafca9d907a78: 00000000030dc000 0000000000000000
>     ffffafca9d907a88: [ffff985e78dae540:btrfs_path] 0000000000000000
>     ffffafca9d907a98: 0000000178dae540 0000000000000000
>     ffffafca9d907aa8: 0000000000000002 ffffafca9d907ab0
>     ffffafca9d907ab8: ffffafca9d907ab0 [ffff985a6ca3c370:Acpi-State]
>     ffffafca9d907ac8: [ffff985a6ca3ce10:Acpi-State] c000985e751bc000
>     ffffafca9d907ad8: 01a900000000030d 0000000000000000
>     ffffafca9d907ae8: a900000000030dc0 0000000000000001
>     ffffafca9d907af8: 00a90842012fd9df [ffff9859d613c220:kmalloc-32]
>     ffffafca9d907b08: ffffafca9d907be8 00000000030dc000
>     ffffafca9d907b18: [ffff985e751bc000:kmalloc-8192] 0000000000000000
>     ffffafca9d907b28: ffffafca9d907b98 __btrfs_find_all_roots+169
>  #5 [ffffafca9d907b30] __btrfs_find_all_roots at ffffffffc040cb09 [btrfs]
>     ffffafca9d907b38: 0000000000000000 0000000000000000
>     ffffafca9d907b48: 0000000000000000 0000000000000000
>     ffffafca9d907b58: 0000000000000000 [ffff9859d5e63c10:kmalloc-64]
>     ffffafca9d907b68: 00a90842012fd9df [ffff985e751bc788:kmalloc-8192]
>     ffffafca9d907b78: [ffff9859d5e63140:kmalloc-64]
> [ffff985e9dfa8ee8:btrfs_transaction]
>     ffffafca9d907b88: [ffff985e9dfa8d80:btrfs_transaction] 0000000000000321
>     ffffafca9d907b98: ffffafca9d907bd0 btrfs_find_all_roots+85
>  #6 [ffffafca9d907ba0] btrfs_find_all_roots at ffffffffc040cbf5 [btrfs]
>     ffffafca9d907ba8: ffffafca9d907be8 0000000000000000
>     ffffafca9d907bb8: 0000000042b93000 [ffff985e751bc000:kmalloc-8192]
>     ffffafca9d907bc8: [ffff985e751bc000:kmalloc-8192] ffffafca9d907c18
>     ffffafca9d907bd8: btrfs_qgroup_trace_extent+302
>  #7 [ffffafca9d907bd8] btrfs_qgroup_trace_extent at ffffffffc04115ee [btrfs]
>     ffffafca9d907be0: 0000000000001000 [ffff9859d613cf40:kmalloc-32]
>     ffffafca9d907bf0: 00a90842012fd9df [ffff9859dc0f0578:btrfs_extent_buffer]
>     ffffafca9d907c00: 0000000000000ce5 0000000000002fa4
>     ffffafca9d907c10: [ffff985e751bc000:kmalloc-8192] ffffafca9d907c80
>     ffffafca9d907c20: btrfs_qgroup_trace_leaf_items+279
>  #8 [ffffafca9d907c20] btrfs_qgroup_trace_leaf_items at ffffffffc0411747 
> [btrfs]
>     ffffafca9d907c28: 0000000042b93000 [ffff985eb63d9a40:btrfs_trans_handle]
>     ffffafca9d907c38: 72ffffffc03848e8 6c00000000000003
>     ffffafca9d907c48: 0000000000000000 00a90842012fd9df
>     ffffafca9d907c58: 0000000000000011 0000000000000000
>     ffffafca9d907c68: [ffff985e751bc000:kmalloc-8192]
> [ffff9859dc0f0578:btrfs_extent_buffer]
>     ffffafca9d907c78: 0000000000000000 ffffafca9d907ce0
>     ffffafca9d907c88: btrfs_qgroup_trace_subtree+451
>  #9 [ffffafca9d907c88] btrfs_qgroup_trace_subtree at ffffffffc0411943 [btrfs]
>     ffffafca9d907c90: ff00000000000000 mark_extent_buffer_accessed+89
>     ffffafca9d907ca0: [ffff9859dc0f0578:btrfs_extent_buffer] 00a90842012fd9df
>     ffffafca9d907cb0: [ffff985eb63d9a40:btrfs_trans_handle] 0000000000000000
>     ffffafca9d907cc0: [ffff9859dc0f0578:btrfs_extent_buffer]
> [ffff985e701d1380:kmalloc-192]
>     ffffafca9d907cd0: [ffff985e751bc000:kmalloc-8192] 0000000000000000
>     ffffafca9d907ce0: ffffafca9d907d98 do_walk_down+759
> #10 [ffffafca9d907ce8] do_walk_down at ffffffffc0386627 [btrfs]
>     ffffafca9d907cf0: 0000000000004000 [ffff985e78dae380:btrfs_path]
>     ffffafca9d907d00: [ffff985ec77ff000:kmalloc-2048] 0000000000000011
>     ffffafca9d907d10: 0000000002434000 [ffff985eb63d9a40:btrfs_trans_handle]
>     ffffafca9d907d20: [ffff985e78dae384:btrfs_path]
> [ffff985e78dae388:btrfs_path]
>     ffffafca9d907d30: ffffafca9d907db4 0000000100000000
>     ffffafca9d907d40: [ffff985e9dfa8da8:btrfs_transaction] ffffafca9d907d80
>     ffffafca9d907d50: join_transaction+900 
> [ffff985eb63d9a40:btrfs_trans_handle]
>     ffffafca9d907d60: 0000000000000201 00a90842012fd9df
>     ffffafca9d907d70: [ffff985e78dae380:btrfs_path] 0000000000000001
>     ffffafca9d907d80: [ffff985e701d1380:kmalloc-192]
> [ffff985e78dae384:btrfs_path]
>     ffffafca9d907d90: [ffff985ec77ff000:kmalloc-2048] ffffafca9d907de8
>     ffffafca9d907da0: walk_down_tree+189
> #11 [ffffafca9d907da0] walk_down_tree at ffffffffc038697d [btrfs]
>     ffffafca9d907da8: [ffff985eb63d9a40:btrfs_trans_handle] 00000000701d1380
>     ffffafca9d907db8: 00a90842012fd9df [ffff985e701d1380:kmalloc-192]
>     ffffafca9d907dc8: [ffff985eb63d9a40:btrfs_trans_handle]
> [ffff985ec77ff1df:kmalloc-2048]
>     ffffafca9d907dd8: [ffff985ec77ff000:kmalloc-2048]
> [ffff985e78dae380:btrfs_path]
>     ffffafca9d907de8: ffffafca9d907e78 btrfs_drop_snapshot+996
> #12 [ffffafca9d907df0] btrfs_drop_snapshot at ffffffffc03892c4 [btrfs]
>     ffffafca9d907df8: 0000000000000000 [ffff985ec77ff104:kmalloc-2048]
>     ffffafca9d907e08: 0000000000000001 [ffff985ec77ff028:kmalloc-2048]
>     ffffafca9d907e18: [ffff985eb6d0c000:kmalloc-2048] ffff985e00000001
>     ffffafca9d907e28: [ffff985e751bc000:kmalloc-8192] __schedule+961
>     ffffafca9d907e38: [ffff985e751bc0e0:kmalloc-8192]
> [ffff985e751bc0b8:kmalloc-8192]
>     ffffafca9d907e48: 00a90842012fd9df [ffff985ec77ff3a0:kmalloc-2048]
>     ffffafca9d907e58: [ffff985e751bc8b8:kmalloc-8192]
> [ffff985e751bc000:kmalloc-8192]
>     ffffafca9d907e68: [ffff985ec77ff000:kmalloc-2048]
> [ffff985eb6d0c000:kmalloc-2048]
>     ffffafca9d907e78: ffffafca9d907ea8 btrfs_clean_one_deleted_snapshot+183
> #13 [ffffafca9d907e80] btrfs_clean_one_deleted_snapshot at
> ffffffffc03a1aa7 [btrfs]
>     ffffafca9d907e88: [ffff985ec7a16580:task_struct]
> [ffff985e751bc000:kmalloc-8192]
>     ffffafca9d907e98: [ffff985ec7a16580:task_struct]
> [ffff985e751bc6e0:kmalloc-8192]
>     ffffafca9d907ea8: ffffafca9d907ef8 cleaner_kthread+314
> #14 [ffffafca9d907eb0] cleaner_kthread at ffffffffc039894a [btrfs]
>     ffffafca9d907eb8: 00000001c7a16580 [ffff985e751bc928:kmalloc-8192]
>     ffffafca9d907ec8: 0000000000000000 [ffff987d4599df00:kmalloc-96]
>     ffffafca9d907ed8: [ffff985eac290380:kmalloc-64] ffffafca9ce2ba28
>     ffffafca9d907ee8: [ffff985eb6d0c000:kmalloc-2048]
> [ffff985ec7a16580:task_struct]
>     ffffafca9d907ef8: ffffafca9d907f40 kthread+265
> #15 [ffffafca9d907f00] kthread at ffffffffbaaa4929
>     ffffafca9d907f08: cleaner_kthread  [ffff987d4599df38:kmalloc-96]
>     ffffafca9d907f18: kthread          [ffff985eac290380:kmalloc-64]
>     ffffafca9d907f28: 0000000000000000 0000000000000000
>     ffffafca9d907f38: 0000000000000000 ffffafca9d907f50
>     ffffafca9d907f48: ret_from_fork+44
> #16 [ffffafca9d907f48] ret_from_fork at ffffffffbb23b1bc
>
> crash> bt -FF
> PID: 3651   TASK: ffff985e735fc880  CPU: 1   COMMAND: "dockerd"
>  #0 [ffffafca9cbe76e0] __schedule at ffffffffbb235729
>     ffffafca9cbe76e8: 0000000000000000 [ffff985eccb2d700:task_struct]
>     ffffafca9cbe76f8:
> [ffff985e735fc880:task_struct(1899:docker.service)] ffff985ed945b280
>     ffffafca9cbe7708: ffffafca9cbe7770 __schedule+953
>     ffffafca9cbe7718: btree_get_extent 000000009de968f0
>     ffffafca9cbe7728: ffff985ed945b280 ffffafca9cbe7750
>     ffffafca9cbe7738: 0000000000000004 bd74f794474322a9
>     ffffafca9cbe7748:
> [ffff985e735fc880:task_struct(1899:docker.service)]
> [ffff9859dc0f05d8:btrfs_extent_buffer]
>     ffffafca9cbe7758: [ffff9859dc0f05e0:btrfs_extent_buffer]
> [ffff985e735fc880:task_struct(1899:docker.service)]
>     ffffafca9cbe7768:
> [ffff985e735fc880:task_struct(1899:docker.service)] ffffafca9cbe7788
>     ffffafca9cbe7778: schedule+54
>  #1 [ffffafca9cbe7778] schedule at ffffffffbb235c96
>     ffffafca9cbe7780: [ffff9859dc0f0578:btrfs_extent_buffer] ffffafca9cbe77f0
>     ffffafca9cbe7790: btrfs_tree_read_lock+204
>  #2 [ffffafca9cbe7790] btrfs_tree_read_lock at ffffffffc03e112c [btrfs]
>     ffffafca9cbe7798: ffff985e00000000
> [ffff985e735fc880:task_struct(1899:docker.service)]
>     ffffafca9cbe77a8: autoremove_wake_function
> [ffff9859dc0f05e8:btrfs_extent_buffer]
>     ffffafca9cbe77b8: [ffff9859dc0f05e8:btrfs_extent_buffer] bd74f794474322a9
>     ffffafca9cbe77c8: [ffff9879cfe971e0:Acpi-State]
> [ffff9859dc0f0578:btrfs_extent_buffer]
>     ffffafca9cbe77d8: ffffafca9cbe78b8 [ffff985e751bc000:kmalloc-8192]
>     ffffafca9cbe77e8: [ffff985e751bc000:kmalloc-8192] ffffafca9cbe7840
>     ffffafca9cbe77f8: __add_missing_keys+190
>  #3 [ffffafca9cbe77f8] __add_missing_keys at ffffffffc040abae [btrfs]
>     ffffafca9cbe7800: 0000000000000000 ffffafca9cbe7820
>     ffffafca9cbe7810: free_extent_buffer+75 bd74f794474322a9
>     ffffafca9cbe7820: ffffafca9cbe78a8 ffffafca9cbe79d8
>     ffffafca9cbe7830: 0000000000000000 [ffff985e74e89ee0:btrfs_path]
>     ffffafca9cbe7840: ffffafca9cbe7920 find_parent_nodes+889
>  #4 [ffffafca9cbe7848] find_parent_nodes at ffffffffc040c4d9 [btrfs]
>     ffffafca9cbe7850: [ffff985e751bc000:kmalloc-8192]
> [ffff985c943a12a0:kmalloc-32]
>     ffffafca9cbe7860: [ffff985c943a1b60:kmalloc-32] 0000000000000000
>     ffffafca9cbe7870: 0000000002434000 0000000000000000
>     ffffafca9cbe7880: [ffff985e74e89ee0:btrfs_path] 0000000000000000
>     ffffafca9cbe7890: 0000000000000000 0000000000000000
>     ffffafca9cbe78a0: 0000000000000007 ffffafca9cbe78a8
>     ffffafca9cbe78b0: ffffafca9cbe78a8 [ffff9879cfe971e0:Acpi-State]
>     ffffafca9cbe78c0: [ffff9879cfe97cd0:Acpi-State] 4000ffffbac1a330
>     ffffafca9cbe78d0: 00a9000000000243 0000000000000000
>     ffffafca9cbe78e0: a900000000024340 0000000000000000
>     ffffafca9cbe78f0: bd74f794474322a9 [ffff985c943a1b60:kmalloc-32]
>     ffffafca9cbe7900: ffffafca9cbe79d8 0000000002434000
>     ffffafca9cbe7910: [ffff985e751bc000:kmalloc-8192] 0000000000000000
>     ffffafca9cbe7920: ffffafca9cbe7990 __btrfs_find_all_roots+169
>  #5 [ffffafca9cbe7928] __btrfs_find_all_roots at ffffffffc040cb09 [btrfs]
>     ffffafca9cbe7930: 0000000000000000 0000000000000000
>     ffffafca9cbe7940: 0000000000000000 0000000000000000
>     ffffafca9cbe7950: 0000000000000000 0000000000000000
>     ffffafca9cbe7960: bd74f794474322a9 [ffff985e751bc788:kmalloc-8192]
>     ffffafca9cbe7970: [ffff985e751bc000:kmalloc-8192]
> [ffff985e1e932540:kmalloc-96]
>     ffffafca9cbe7980: 0000000000000616 [ffff985e9dfa8ee8:btrfs_transaction]
>     ffffafca9cbe7990: ffffafca9cbe79c8 btrfs_find_all_roots+85
>  #6 [ffffafca9cbe7998] btrfs_find_all_roots at ffffffffc040cbf5 [btrfs]
>     ffffafca9cbe79a0: ffffafca9cbe79d8 0000000000000000
>     ffffafca9cbe79b0: 0000000002434000 [ffff985e751bc000:kmalloc-8192]
>     ffffafca9cbe79c0: [ffff9859d702fac0:kmalloc-64] ffffafca9cbe79f0
>     ffffafca9cbe79d0: btrfs_qgroup_trace_extent_post+52
>  #7 [ffffafca9cbe79d0] btrfs_qgroup_trace_extent_post at
> ffffffffc0411494 [btrfs]
>     ffffafca9cbe79d8: [ffff985c943a12a0:kmalloc-32] bd74f794474322a9
>     ffffafca9cbe79e8: [ffff985eba32a5a0:btrfs_trans_handle] ffffafca9cbe7a60
>     ffffafca9cbe79f8: btrfs_add_delayed_tree_ref+446
>  #8 [ffffafca9cbe79f8] btrfs_add_delayed_tree_ref at ffffffffc03f551e [btrfs]
>     ffffafca9cbe7a00: [ffff9859d406bd40:file_lock_cache] 0000000000000000
>     ffffafca9cbe7a10: [ffff9859d702fac0:kmalloc-64] 0000000000004000
>     ffffafca9cbe7a20: 0000000002434000 000000019cbe7a50
>     ffffafca9cbe7a30: bd74f794474322a9 [ffff9859d4799068:btrfs_extent_buffer]
>     ffffafca9cbe7a40: 0000000000000001 000000000000001b
>     ffffafca9cbe7a50: [ffff9859d360caf0:btrfs_extent_buffer]
> [ffff985e751bc000:kmalloc-8192]
>     ffffafca9cbe7a60: ffffafca9cbe7a88 btrfs_inc_extent_ref+76
>  #9 [ffffafca9cbe7a68] btrfs_inc_extent_ref at ffffffffc037ea5c [btrfs]
>     ffffafca9cbe7a70: 0000000000000000 0000000000000001
>     ffffafca9cbe7a80: 0000000000000000 ffffafca9cbe7b40
>     ffffafca9cbe7a90: __btrfs_mod_ref+338
> #10 [ffffafca9cbe7a90] __btrfs_mod_ref at ffffffffc037fb92 [btrfs]
>     ffffafca9cbe7a98: 0000000000000000 0000000000000000
>     ffffafca9cbe7aa8: btrfs_lookup_extent_info+1032 ffffafca9cbe7b70
>     ffffafca9cbe7ab8: ffffafca9cbe7b68 0000000000000002
>     ffffafca9cbe7ac8: 0000000000000000 0000000000000616
>     ffffafca9cbe7ad8: btrfs_inc_extent_ref 
> [ffff985eba32a5a0:btrfs_trans_handle]
>     ffffafca9cbe7ae8: 0000000000000000 000001069cbe7b98
>     ffffafca9cbe7af8: 01a900000000030d 0000000000000000
>     ffffafca9cbe7b08: 0000000000000003 bd74f794474322a9
>     ffffafca9cbe7b18: [ffff985eba32a5a0:btrfs_trans_handle]
> [ffff9859d4799068:btrfs_extent_buffer]
>     ffffafca9cbe7b28: [ffff985e751bc000:kmalloc-8192]
> [ffff9859d360caf0:btrfs_extent_buffer]
>     ffffafca9cbe7b38: [ffff9859cc626000:kmalloc-2048] ffffafca9cbe7b50
>     ffffafca9cbe7b48: btrfs_inc_ref+20
> #11 [ffffafca9cbe7b48] btrfs_inc_ref at ffffffffc0385674 [btrfs]
>     ffffafca9cbe7b50: ffffafca9cbe7ba8 update_ref_for_cow+220
> #12 [ffffafca9cbe7b58] update_ref_for_cow at ffffffffc03755fc [btrfs]
>     ffffafca9cbe7b60: ffffafca9cbe7be8 0000000000000002
>     ffffafca9cbe7b70: 0000000000000002 bd74f794474322a9
>     ffffafca9cbe7b80: [ffff9859cc626000:kmalloc-2048]
> [ffff9859d360caf0:btrfs_extent_buffer]
>     ffffafca9cbe7b90: [ffff985eba32a5a0:btrfs_trans_handle]
> [ffff985a0779e878:btrfs_extent_buffer]
>     ffffafca9cbe7ba0: [ffff9859d4799068:btrfs_extent_buffer] ffffafca9cbe7c30
>     ffffafca9cbe7bb0: __btrfs_cow_block+536
> #13 [ffffafca9cbe7bb0] __btrfs_cow_block at ffffffffc0375a78 [btrfs]
>     ffffafca9cbe7bb8: ffffafca9cbe7cf0 [ffff9859d360caf0:btrfs_extent_buffer]
>     ffffafca9cbe7bc8: 0000000000000000 000000009cbe7c00
>     ffffafca9cbe7bd8: [ffff985e751bc000:kmalloc-8192] 0000000000000001
>     ffffafca9cbe7be8: 00ffafca00000000 0100000000000001
>     ffffafca9cbe7bf8: 0000000000000000 bd74f794474322a9
>     ffffafca9cbe7c08: [ffff9859d360caf0:btrfs_extent_buffer]
> [ffff9859cc626000:kmalloc-2048]
>     ffffafca9cbe7c18: [ffff985a0779e878:btrfs_extent_buffer] ffffafca9cbe7cf0
>     ffffafca9cbe7c28: [ffff985eba32a5a0:btrfs_trans_handle] ffffafca9cbe7c88
>     ffffafca9cbe7c38: btrfs_cow_block+255
> #14 [ffffafca9cbe7c38] btrfs_cow_block at ffffffffc0375fbf [btrfs]
>     ffffafca9cbe7c40: 0000000000000000 0000000000000000
>     ffffafca9cbe7c50: 00000000030dc000 0000000074e89992
>     ffffafca9cbe7c60: [ffff985e74e89930:btrfs_path] 0000000000000001
>     ffffafca9cbe7c70: [ffff9859cc626000:kmalloc-2048] 0000000000000001
>     ffffafca9cbe7c80: 0000000000000002 ffffafca9cbe7d28
>     ffffafca9cbe7c90: btrfs_search_slot+520
> #15 [ffffafca9cbe7c90] btrfs_search_slot at ffffffffc0379a28 [btrfs]
>     ffffafca9cbe7c98: [ffff985e751bc788:kmalloc-8192]
> [ffff985e751bc000:kmalloc-8192]
>     ffffafca9cbe7ca8: ffff985e00000000 ffffffff00000001
>     ffffafca9cbe7cb8: 00000002004322a9 0000000000000002
>     ffffafca9cbe7cc8: ffffafca9cbe7d3f 00000001010070b8
>     ffffafca9cbe7cd8: [ffff985eba32a5a0:btrfs_trans_handle] ffffffff00000001
>     ffffafca9cbe7ce8: 0000000300000000 [ffff9859d360caf0:btrfs_extent_buffer]
>     ffffafca9cbe7cf8: bd74f794474322a9 0000000000000007
>     ffffafca9cbe7d08: [ffff985e74e89930:btrfs_path]
> [ffff985a0a3270b8:dentry(1899:docker.service)]
>     ffffafca9cbe7d18: [ffff9859cc626000:kmalloc-2048]
> [ffff985eba32a5a0:btrfs_trans_handle]
>     ffffafca9cbe7d28: ffffafca9cbe7d80 btrfs_lookup_dir_item+120
> #16 [ffffafca9cbe7d30] btrfs_lookup_dir_item at ffffffffc0393528 [btrfs]
>     ffffafca9cbe7d38: 7800000000000000 5400000000000001
>     ffffafca9cbe7d48: 000000005d1d0684 bd74f794474322a9
>     ffffafca9cbe7d58:
> [ffff985a86ebe8b0:btrfs_inode(1899:docker.service)]
> [ffff985a86eb8c90:btrfs_inode(1899:docker.service)]
>     ffffafca9cbe7d68: [ffff9859cc626000:kmalloc-2048]
> [ffff985e74e89930:btrfs_path]
>     ffffafca9cbe7d78: 0000000000000178 ffffafca9cbe7e18
>     ffffafca9cbe7d88: __btrfs_unlink_inode+170
> #17 [ffffafca9cbe7d88] __btrfs_unlink_inode at ffffffffc03a895a [btrfs]
>     ffffafca9cbe7d90: ffffffffffffffff [ffff985e751bc000:kmalloc-8192]
>     ffffafca9cbe7da0: 0000000000000201 000000000000017f
>     ffffafca9cbe7db0: [ffff985a0a3270b8:dentry(1899:docker.service)]
> 00000007c03a24fb
>     ffffafca9cbe7dc0: [ffff985eba32a5a0:btrfs_trans_handle] 0000000000014000
>     ffffafca9cbe7dd0: 0000000000140000
> [ffff985e735fc880:task_struct(1899:docker.service)]
>     ffffafca9cbe7de0: bd74f794474322a9
> [ffff985a86eb8c90:btrfs_inode(1899:docker.service)]
>     ffffafca9cbe7df0: __cpu_possible_mask 
> [ffff985eba32a5a0:btrfs_trans_handle]
>     ffffafca9cbe7e00: [ffff9859cc626000:kmalloc-2048]
> [ffff985a86eb8e70:btrfs_inode(1899:docker.service)]
>     ffffafca9cbe7e10: [ffff985eba32a5a0:btrfs_trans_handle] ffffafca9cbe7e40
>     ffffafca9cbe7e20: btrfs_unlink_inode+28
> #18 [ffffafca9cbe7e20] btrfs_unlink_inode at ffffffffc03ac49c [btrfs]
>     ffffafca9cbe7e28:
> [ffff985a86ebe8b0:btrfs_inode(1899:docker.service)]
> [ffff985a0a327080:dentry(1899:docker.service)]
>     ffffafca9cbe7e38: [ffff9859cc626000:kmalloc-2048] ffffafca9cbe7e78
>     ffffafca9cbe7e48: btrfs_unlink+132
> #19 [ffffafca9cbe7e48] btrfs_unlink at ffffffffc03ac554 [btrfs]
>     ffffafca9cbe7e50: [ffff985a0a327080:dentry(1899:docker.service)]
> [ffff985a86ebea90:btrfs_inode(1899:docker.service)]
>     ffffafca9cbe7e60:
> [ffff985a86eb8e70:btrfs_inode(1899:docker.service)] ffffafca9cbe7ee0
>     ffffafca9cbe7e70:
> [ffff985a86eb8f18:btrfs_inode(1899:docker.service)] ffffafca9cbe7eb8
>     ffffafca9cbe7e80: vfs_unlink+241
> #20 [ffffafca9cbe7e80] vfs_unlink at ffffffffbac52611
>     ffffafca9cbe7e88: apparmor_path_unlink+27 0000000000000000
>     ffffafca9cbe7e98: [ffff985ec7774000:kmalloc-4096] 0000000000000000
>     ffffafca9cbe7ea8:
> [ffff985a86eb8e70:btrfs_inode(1899:docker.service)] 00000000ffffff9c
>     ffffafca9cbe7eb8: ffffafca9cbe7f38 do_unlinkat+639
> #21 [ffffafca9cbe7ec0] do_unlinkat at ffffffffbac555df
>     ffffafca9cbe7ec8: [ffff985a0a327080:dentry(1899:docker.service)]
> 000000c42114dc80
>     ffffafca9cbe7ed8: 0000000000000000 0000000000000000
>     ffffafca9cbe7ee8: [ffff987d4131d9a0:mnt_cache]
> [ffff985a0a326900:dentry(1899:docker.service)]
>     ffffafca9cbe7ef8: 000000079476b40d [ffff985ec7774093:kmalloc-4096]
>     ffffafca9cbe7f08: bd74f794474322a9 000000c42001800c
>     ffffafca9cbe7f18: 0000000000000080 0000000000001c80
>     ffffafca9cbe7f28: 000000000000003b 0000000000000000
>     ffffafca9cbe7f38: ffffafca9cbe7f48 sys_unlinkat+27
> #22 [ffffafca9cbe7f40] sys_unlinkat at ffffffffbac5619b
>     ffffafca9cbe7f48: 000000c4223c8da0 entry_SYSCALL_64_fastpath+30
> #23 [ffffafca9cbe7f50] entry_SYSCALL_64_fastpath at ffffffffbb23af3b
>     RIP: 000000000068b674  RSP: 000000c4223c8d30  RFLAGS: 00000246
>     RAX: ffffffffffffffda  RBX: 000000000000000f  RCX: 000000000068b674
>     RDX: 0000000000000000  RSI: 000000c42114dc80  RDI: ffffffffffffff9c
>     RBP: 000000c4223c8c48   R8: 0000000000000000   R9: 0000000000000000
>     R10: 0000000000000000  R11: 0000000000000246  R12: 000000c4223c9f70
>     R13: 0000000000000b80  R14: 000000000000001f  R15: 0005555555555555
>     ORIG_RAX: 0000000000000107  CS: 0033  SS: 002b

This issue seems to be pretty easy to reproduce. The following script
can lock-up btrfs-cleaner in less than 5 minutes of time. It requires
that you have a btrfs volume with qgroups and limits setup on
/mnt/btrfs (or whatever you set ROOT to). This was tested on a 32-CPU
machine, without CONFIG_PREEMPT. Upon disabling cores, we were not
able to reproduce the issue.

#!/bin/bash -x

ROOT=/mnt/btrfs
#sudo btrfs quota enable ${ROOT}

btrfs subvolume create ${ROOT}/foo
mkdir -p ${ROOT}/snapshots
mkdir -p ${ROOT}/bar

set +x
for i in $(seq 1 15000); do
        dd if=/dev/urandom of=${ROOT}/foo/${i} bs=$((1 + RANDOM %
(4096 * 10000))) count=1 status=none
done
set -x

SUBVOLCOUNT=100
btrfs subvolume delete $ROOT/snapshots/foo*
for i in $(seq 1 $SUBVOLCOUNT); do
        btrfs subvolume snapshot ${ROOT}/foo ${ROOT}/snapshots/foo${i}
done

while true; do
        # Delete $SUBVOLCOUNT random subvolumes
        volumes_to_delete=""
        for i in $(seq 1 10); do
                vol_id=$((1 + RANDOM % $SUBVOLCOUNT))
                volumes_to_delete="${volumes_to_delete}
${ROOT}/snapshots/foo${vol_id}"
                set +x
                for i in $(seq 1 1500); do
                        dd if=/dev/urandom
of=${ROOT}/snapshots/foo${vol_id}/${i} bs=100 count=1 status=none
                done
                set -x
        done
        volumes_to_delete=$(echo $volumes_to_delete|cut -b1-)
        set +x
        for i in $(seq 500); do
                mkdir ${ROOT}/bar/${i}
        done
        btrfs subvolume delete $volumes_to_delete
        for i in $(seq 500); do
                rmdir ${ROOT}/bar/${i}
        done
        set -x
        for vol in $volumes_to_delete; do
                if [ ! -d $vol ]; then
                        btrfs subvolume snapshot ${ROOT}/foo $vol
                fi
        done
done

#####
The cleaner gets stuck in:
[<ffffffffc04af12c>] btrfs_tree_read_lock+0xcc/0x120 [btrfs]
[<ffffffffc04d8bae>] __add_missing_keys+0xbe/0x130 [btrfs]
[<ffffffffc04da4d9>] find_parent_nodes+0x379/0x900 [btrfs]
[<ffffffffc04dab09>] __btrfs_find_all_roots+0xa9/0x120 [btrfs]
[<ffffffffc04dabf5>] btrfs_find_all_roots+0x55/0x70 [btrfs]
[<ffffffffc04df5ee>] btrfs_qgroup_trace_extent+0x12e/0x170 [btrfs]
[<ffffffffc04df747>] btrfs_qgroup_trace_leaf_items+0x117/0x150 [btrfs]
[<ffffffffc04df943>] btrfs_qgroup_trace_subtree+0x1c3/0x350 [btrfs]
[<ffffffffc0454627>] do_walk_down+0x2f7/0x590 [btrfs]
[<ffffffffc045497d>] walk_down_tree+0xbd/0x100 [btrfs]
[<ffffffffc04572c4>] btrfs_drop_snapshot+0x3e4/0x8b0 [btrfs]
[<ffffffffc046faa7>] btrfs_clean_one_deleted_snapshot+0xb7/0x100 [btrfs]
[<ffffffffc046694a>] cleaner_kthread+0x13a/0x190 [btrfs]
[<ffffffff9e8a4929>] kthread+0x109/0x140
[<ffffffff9f03b1bc>] ret_from_fork+0x2c/0x40
[<ffffffffffffffff>] 0xffffffffffffffff

And the opposing process (where the actual syscall varies):
[<ffffffffc04af12c>] btrfs_tree_read_lock+0xcc/0x120 [btrfs]
[<ffffffffc04d8bae>] __add_missing_keys+0xbe/0x130 [btrfs]
[<ffffffffc04da4d9>] find_parent_nodes+0x379/0x900 [btrfs]
[<ffffffffc04dab09>] __btrfs_find_all_roots+0xa9/0x120 [btrfs]
[<ffffffffc04dabf5>] btrfs_find_all_roots+0x55/0x70 [btrfs]
[<ffffffffc04df494>] btrfs_qgroup_trace_extent_post+0x34/0x60 [btrfs]
[<ffffffffc04c351e>] btrfs_add_delayed_tree_ref+0x1be/0x1e0 [btrfs]
[<ffffffffc044ca5c>] btrfs_inc_extent_ref+0x4c/0x60 [btrfs]
[<ffffffffc044db92>] __btrfs_mod_ref+0x152/0x240 [btrfs]
[<ffffffffc0453674>] btrfs_inc_ref+0x14/0x20 [btrfs]
[<ffffffffc04435fc>] update_ref_for_cow+0xdc/0x340 [btrfs]
[<ffffffffc0443a78>] __btrfs_cow_block+0x218/0x5e0 [btrfs]
[<ffffffffc0443fbf>] btrfs_cow_block+0xff/0x1e0 [btrfs]
[<ffffffffc0447a28>] btrfs_search_slot+0x208/0x9c0 [btrfs]
[<ffffffffc047b2f1>] btrfs_truncate_inode_items+0x1a1/0x1040 [btrfs]
[<ffffffffc047c28c>] btrfs_truncate+0xfc/0x2c0 [btrfs]
[<ffffffffc047cbbd>] btrfs_setattr+0x22d/0x370 [btrfs]
[<ffffffff9ea636ab>] notify_change+0x2db/0x430
[<ffffffff9ea40ac5>] do_truncate+0x75/0xc0
[<ffffffff9ea53552>] path_openat+0x362/0x1450
[<ffffffff9ea55949>] do_filp_open+0x99/0x110
[<ffffffff9ea420e4>] do_sys_open+0x124/0x210
[<ffffffff9ea421ee>] SyS_open+0x1e/0x20
[<ffffffff9f03af3b>] entry_SYSCALL_64_fastpath+0x1e/0xad
[<ffffffffffffffff>] 0xffffffffffffffff

We have a small emergency patch that appears to help, until an actual
solution is found (if anyone else is running into this):
diff --git a/fs/btrfs/backref.c b/fs/btrfs/backref.c
index 7699e16..e0a261a8 100644
--- a/fs/btrfs/backref.c
+++ b/fs/btrfs/backref.c
@@ -1566,11 +1566,18 @@ int btrfs_find_all_roots(struct
btrfs_trans_handle *trans,
 {
        int ret;

-       if (!trans)
+       if (!trans) {
                down_read(&fs_info->commit_root_sem);
+               down_write(&fs_info->find_all_root_sem);
+       } else
+               down_read(&fs_info->find_all_root_sem);
+
        ret = __btrfs_find_all_roots(trans, fs_info, bytenr, time_seq, roots);
-       if (!trans)
+       if (!trans) {
+               up_write(&fs_info->find_all_root_sem);
                up_read(&fs_info->commit_root_sem);
+       } else
+               up_read(&fs_info->find_all_root_sem);
        return ret;
 }

diff --git a/fs/btrfs/ctree.h b/fs/btrfs/ctree.h
index c411590..9ed0735 100644
--- a/fs/btrfs/ctree.h
+++ b/fs/btrfs/ctree.h
@@ -840,6 +840,8 @@ struct btrfs_fs_info {

        struct rw_semaphore commit_root_sem;

+       struct rw_semaphore find_all_root_sem;
+
        struct rw_semaphore cleanup_work_sem;

        struct rw_semaphore subvol_sem;
diff --git a/fs/btrfs/disk-io.c b/fs/btrfs/disk-io.c
index eb1ee7b..c227895 100644
--- a/fs/btrfs/disk-io.c
+++ b/fs/btrfs/disk-io.c
@@ -2741,6 +2741,7 @@ int open_ctree(struct super_block *sb,
        mutex_init(&fs_info->volume_mutex);
        mutex_init(&fs_info->ro_block_group_mutex);
        init_rwsem(&fs_info->commit_root_sem);
+       init_rwsem(&fs_info->find_all_root_sem);
        init_rwsem(&fs_info->cleanup_work_sem);
        init_rwsem(&fs_info->subvol_sem);
        sema_init(&fs_info->uuid_tree_rescan_sem, 1);
--
To unsubscribe from this list: send the line "unsubscribe linux-btrfs" in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to