2010-03-18 12:39:41

by jing zhang

[permalink] [raw]
Subject: [PATCH] ext4: memory leakage in ext4_discard_preallocations

From: Jing Zhang <[email protected]>

Date: Thu Mar 18 20:33:44 2010

When unexpected errors occur, there is memory leakage, and more.

Cc: Theodore Ts'o <[email protected]>
Cc: Andreas Dilger <[email protected]>
Cc: Dave Kleikamp <[email protected]>
Signed-off-by: Jing Zhang <[email protected]>

---

--- linux-2.6.32/fs/ext4/mballoc.c 2009-12-03 11:51:22.000000000 +0800
+++ zj/mballoc.c 2010-03-18 20:41:32.000000000 +0800
@@ -3717,6 +3717,7 @@ void ext4_discard_preallocations(struct
struct list_head list;
struct ext4_buddy e4b;
int err;
+ int occurs = 0;

if (!S_ISREG(inode->i_mode)) {
/*BUG_ON(!list_empty(&ei->i_prealloc_list));*/
@@ -3781,6 +3782,7 @@ repeat:
}
spin_unlock(&ei->i_prealloc_lock);

+best_efforts:
list_for_each_entry_safe(pa, tmp, &list, u.pa_tmp_list) {
BUG_ON(pa->pa_type != MB_INODE_PA);
ext4_get_group_no_and_offset(sb, pa->pa_pstart, &group, NULL);
@@ -3811,6 +3813,12 @@ repeat:
list_del(&pa->u.pa_tmp_list);
call_rcu(&(pa)->u.pa_rcu, ext4_mb_pa_callback);
}
+ if (! list_empty(&list)) {
+ if (occurs++ < 2)
+ goto best_efforts;
+ else
+ BUG();
+ }
if (ac)
kmem_cache_free(ext4_ac_cachep, ac);
}


2010-03-18 17:46:54

by Theodore Ts'o

[permalink] [raw]
Subject: Re: [PATCH] ext4: memory leakage in ext4_discard_preallocations

> ext4_get_group_no_and_offset(sb, pa->pa_pstart, &group, NULL);
> @@ -3811,6 +3813,12 @@ repeat:
> list_del(&pa->u.pa_tmp_list);
> call_rcu(&(pa)->u.pa_rcu, ext4_mb_pa_callback);
> }
> + if (! list_empty(&list)) {
> + if (occurs++ < 2)
> + goto best_efforts;
> + else
> + BUG();
> + }
> if (ac)
> kmem_cache_free(ext4_ac_cachep, ac);
> }

Hmm, I'm not sure that BUG() is appropriate here. If there is an
I/O error reading the block bitmap, #1, retrying isn't going to help,
and #2, bringing down the entire system just because of an I/O error
in reading the block bitmap doesn't seem right.

Right now, if there is a problem, we just end up leaving the
preallocated list on the inode. Does that cause problems later on
down the line which you have observed?

- Ted



2010-03-19 14:17:40

by jing zhang

[permalink] [raw]
Subject: Re: [PATCH] ext4: memory leakage in ext4_discard_preallocations

>> ext4_get_group_no_and_offset(sb, pa->pa_pstart, &group, NULL);
>> @@ -3811,6 +3813,12 @@ repeat:
>> list_del(&pa->u.pa_tmp_list);
>> call_rcu(&(pa)->u.pa_rcu, ext4_mb_pa_callback);
>> }
>> + if (! list_empty(&list)) {
>> + if (occurs++ < 2)
>> + goto best_efforts;
>> + else
>> + BUG();
>> + }
>> if (ac)
>> kmem_cache_free(ext4_ac_cachep, ac);
>> }
>
> Hmm, I'm not sure that BUG() is appropriate here. If there is an
> I/O error reading the block bitmap, #1, retrying isn't going to help,
> and #2, bringing down the entire system just because of an I/O error
> in reading the block bitmap doesn't seem right.

But disk hardware error is not rare,

> Right now, if there is a problem, we just end up leaving the
> preallocated list on the inode. Does that cause problems later on
> down the line which you have observed?
>
> - Ted

and is there still chance to call the
call_rcu(&(pa)->u.pa_rcu, ext4_mb_pa_callback);
function again later on? (I am not sure yet the chance does exist.)

If no chance, how about the kmem_cache subsystem then?
After reboot, the file system is still reliable, or just with a few lost blocks?

Thus it is necessary, at least for me, to make sure whether the chance exists.
- zj

2010-03-19 17:27:48

by Andreas Dilger

[permalink] [raw]
Subject: Re: [PATCH] ext4: memory leakage in ext4_discard_preallocations

On 2010-03-19, at 08:17, jing zhang wrote:
>>> ext4_get_group_no_and_offset(sb, pa->pa_pstart, &group, NULL);
>>> @@ -3811,6 +3813,12 @@ repeat:
>>> list_del(&pa->u.pa_tmp_list);
>>> call_rcu(&(pa)->u.pa_rcu, ext4_mb_pa_callback);
>>> }
>>> + if (! list_empty(&list)) {
>>> + if (occurs++ < 2)
>>> + goto best_efforts;
>>> + else
>>> + BUG();
>>> + }
>>> if (ac)
>>> kmem_cache_free(ext4_ac_cachep, ac);
>>> }
>>
>> Hmm, I'm not sure that BUG() is appropriate here. If there is an
>> I/O error reading the block bitmap, #1, retrying isn't going to help,
>> and #2, bringing down the entire system just because of an I/O error
>> in reading the block bitmap doesn't seem right.
>
> But disk hardware error is not rare,

Exactly, which is the reason why it should not cause the system to
hang. The filesystem should handle such errors gracefully if this is
possible, return an error to the application, and/or marking the
filesystem in error so that it will be checked on next boot, or similar.

>> Right now, if there is a problem, we just end up leaving the
>> preallocated list on the inode. Does that cause problems later on
>> down the line which you have observed?
>>
>> - Ted
>
> and is there still chance to call the
> call_rcu(&(pa)->u.pa_rcu, ext4_mb_pa_callback);
> function again later on? (I am not sure yet the chance does exist.)
>
> If no chance, how about the kmem_cache subsystem then?
> After reboot, the file system is still reliable, or just with a few
> lost blocks?
>
> Thus it is necessary, at least for me, to make sure whether the
> chance exists.
> - zj
> --
> To unsubscribe from this list: send the line "unsubscribe linux-
> ext4" in
> the body of a message to [email protected]
> More majordomo info at http://vger.kernel.org/majordomo-info.html


Cheers, Andreas
--
Andreas Dilger
Sr. Staff Engineer, Lustre Group
Sun Microsystems of Canada, Inc.


2010-03-20 14:05:15

by jing zhang

[permalink] [raw]
Subject: Re: [PATCH] ext4: memory leakage in ext4_discard_preallocations

2010/3/20, Andreas Dilger <[email protected]>:
> On 2010-03-19, at 08:17, jing zhang wrote:
>>>> ext4_get_group_no_and_offset(sb, pa->pa_pstart, &group, NULL);
>>>> @@ -3811,6 +3813,12 @@ repeat:
>>>> list_del(&pa->u.pa_tmp_list);
>>>> call_rcu(&(pa)->u.pa_rcu, ext4_mb_pa_callback);
>>>> }
>>>> + if (! list_empty(&list)) {
>>>> + if (occurs++ < 2)
>>>> + goto best_efforts;
>>>> + else
>>>> + BUG();
>>>> + }
>>>> if (ac)
>>>> kmem_cache_free(ext4_ac_cachep, ac);
>>>> }
>>>
>>> Hmm, I'm not sure that BUG() is appropriate here. If there is an
>>> I/O error reading the block bitmap, #1, retrying isn't going to help,
>>> and #2, bringing down the entire system just because of an I/O error
>>> in reading the block bitmap doesn't seem right.
>>
>> But disk hardware error is not rare,
>
> Exactly, which is the reason why it should not cause the system to
> hang. The filesystem should handle such errors gracefully if this is
> possible, return an error to the application, and/or marking the
> filesystem in error so that it will be checked on next boot, or similar.
>
>>> Right now, if there is a problem, we just end up leaving the
>>> preallocated list on the inode. Does that cause problems later on
>>> down the line which you have observed?
>>>
>>> - Ted
>>
>> and is there still chance to call the
>> call_rcu(&(pa)->u.pa_rcu, ext4_mb_pa_callback);
>> function again later on? (I am not sure yet the chance does exist.)
>>
>> If no chance, how about the kmem_cache subsystem then?
>> After reboot, the file system is still reliable, or just with a few
>> lost blocks?
>>
>> Thus it is necessary, at least for me, to make sure whether the
>> chance exists.
>> - zj
>> --
>> To unsubscribe from this list: send the line "unsubscribe linux-
>> ext4" in
>> the body of a message to [email protected]
>> More majordomo info at http://vger.kernel.org/majordomo-info.html
>
>
> Cheers, Andreas
> --
> Andreas Dilger
> Sr. Staff Engineer, Lustre Group
> Sun Microsystems of Canada, Inc.

Evening,

Thanks Andreas and Ted for your good explanations to deal error in
gentle way, and I got it that the chance may exist since the pa is not
deleted from its group_list yet.

And it also seems that there is work deserved.
- zj

---

--- linux-2.6.32/fs/ext4/mballoc.c 2009-12-03 11:51:22.000000000 +0800
+++ fs/mballoc.c 2010-03-20 21:40:04.000000000 +0800
@@ -3788,14 +3788,14 @@ repeat:
err = ext4_mb_load_buddy(sb, group, &e4b);
if (err) {
ext4_error(sb, __func__, "Error in loading buddy "
- "information for %u", group);
+ "information for group %u inode %lu", group, inode->i_ino);
continue;
}

bitmap_bh = ext4_read_block_bitmap(sb, group);
if (bitmap_bh == NULL) {
ext4_error(sb, __func__, "Error in reading block "
- "bitmap for %u", group);
+ "bitmap for group %u inode %lu", group, inode->i_ino);
ext4_mb_release_desc(&e4b);
continue;
}
@@ -3811,6 +3811,14 @@ repeat:
list_del(&pa->u.pa_tmp_list);
call_rcu(&(pa)->u.pa_rcu, ext4_mb_pa_callback);
}
+ if (! list_empty(&list)) {
+ /*
+ * we have to do something for the check in
+ * the function, ext4_mb_discard_group_preallocations()
+ */
+ list_for_each_entry(pa, &list, u.pa_tmp_list)
+ pa->pa_deleted = 0;
+ }
if (ac)
kmem_cache_free(ext4_ac_cachep, ac);
}

2010-03-26 08:37:36

by Aneesh Kumar K.V

[permalink] [raw]
Subject: Re: [PATCH] ext4: memory leakage in ext4_discard_preallocations

On Sat, 20 Mar 2010 22:05:13 +0800, jing zhang <[email protected]> wrote:
>
> Evening,
>
> Thanks Andreas and Ted for your good explanations to deal error in
> gentle way, and I got it that the chance may exist since the pa is not
> deleted from its group_list yet.
>
> And it also seems that there is work deserved.
> - zj
>
> ---
>
> --- linux-2.6.32/fs/ext4/mballoc.c 2009-12-03 11:51:22.000000000 +0800
> +++ fs/mballoc.c 2010-03-20 21:40:04.000000000 +0800
> @@ -3788,14 +3788,14 @@ repeat:
> err = ext4_mb_load_buddy(sb, group, &e4b);
> if (err) {
> ext4_error(sb, __func__, "Error in loading buddy "
> - "information for %u", group);
> + "information for group %u inode %lu", group, inode->i_ino);
> continue;
> }
>
> bitmap_bh = ext4_read_block_bitmap(sb, group);
> if (bitmap_bh == NULL) {
> ext4_error(sb, __func__, "Error in reading block "
> - "bitmap for %u", group);
> + "bitmap for group %u inode %lu", group, inode->i_ino);
> ext4_mb_release_desc(&e4b);
> continue;
> }
> @@ -3811,6 +3811,14 @@ repeat:
> list_del(&pa->u.pa_tmp_list);
> call_rcu(&(pa)->u.pa_rcu, ext4_mb_pa_callback);
> }
> + if (! list_empty(&list)) {
> + /*
> + * we have to do something for the check in
> + * the function, ext4_mb_discard_group_preallocations()
> + */
> + list_for_each_entry(pa, &list, u.pa_tmp_list)
> + pa->pa_deleted = 0;
> + }
> if (ac)
> kmem_cache_free(ext4_ac_cachep, ac);
> }

Can you add a comment saying if we fail to load buddy or read block
bitmap we skip freeing the prealloc space. So mark it undeleted. The
prealloc space is still removed from the inode but it is linked to the
group prealloc list via (pa_group_list)


-aneesh

2010-03-26 14:12:09

by jing zhang

[permalink] [raw]
Subject: Re: [PATCH] ext4: memory leakage in ext4_discard_preallocations

2010/3/26, Aneesh Kumar K. V <[email protected]>:
> On Sat, 20 Mar 2010 22:05:13 +0800, jing zhang <[email protected]> wrote:
>>
>> Evening,
>>
>> Thanks Andreas and Ted for your good explanations to deal error in
>> gentle way, and I got it that the chance may exist since the pa is not
>> deleted from its group_list yet.
>>
>> And it also seems that there is work deserved.
>> - zj
>>
>> ---
>>
>> --- linux-2.6.32/fs/ext4/mballoc.c 2009-12-03 11:51:22.000000000 +0800
>> +++ fs/mballoc.c 2010-03-20 21:40:04.000000000 +0800
>> @@ -3788,14 +3788,14 @@ repeat:
>> err = ext4_mb_load_buddy(sb, group, &e4b);
>> if (err) {
>> ext4_error(sb, __func__, "Error in loading buddy "
>> - "information for %u", group);
>> + "information for group %u inode %lu", group, inode->i_ino);
>> continue;
>> }
>>
>> bitmap_bh = ext4_read_block_bitmap(sb, group);
>> if (bitmap_bh == NULL) {
>> ext4_error(sb, __func__, "Error in reading block "
>> - "bitmap for %u", group);
>> + "bitmap for group %u inode %lu", group, inode->i_ino);
>> ext4_mb_release_desc(&e4b);
>> continue;
>> }
>> @@ -3811,6 +3811,14 @@ repeat:
>> list_del(&pa->u.pa_tmp_list);
>> call_rcu(&(pa)->u.pa_rcu, ext4_mb_pa_callback);
>> }
>> + if (! list_empty(&list)) {
>> + /*
>> + * we have to do something for the check in
>> + * the function, ext4_mb_discard_group_preallocations()
>> + */
>> + list_for_each_entry(pa, &list, u.pa_tmp_list)
>> + pa->pa_deleted = 0;
>> + }
>> if (ac)
>> kmem_cache_free(ext4_ac_cachep, ac);
>> }
>
> Can you add a comment saying if we fail to load buddy or read block
> bitmap we skip freeing the prealloc space. So mark it undeleted. The
> prealloc space is still removed from the inode but it is linked to the
> group prealloc list via (pa_group_list)
>
>
> -aneesh
>

/*
* here the tricky is to mark PAs undeleted,
* since they are still on their pa_group_list.
*/

That is it, Aneesh.

I am still waiting for comments, if any, from Ted, since I am not sure
the tricky is safe enough. And I am able not to deliver better patch
tonight :(

- zj