2.6.17-rc6-mm1 reiser4 oopses on mount

From: Jens Axboe
Date: Thu Jun 08 2006 - 04:15:49 EST


Hi,

With the recent talks on what to merge and what not, I thought I'd try
and see how reiser4 fares in the io testing I was going to do in
2.6.17-rc6-mm1 anyways. I didn't get very far.

ml370:~ # mkfs.reiser4 /dev/cciss/c0d0p1
[...]
ml370:~ # mount /dev/cciss/c0d0p1 /data/
Killed

ml370:~ # dmesg
[...]
Unable to handle kernel NULL pointer dereference at 0000000000000013
RIP:
[<ffffffff80371a8c>] debugfs_mknod+0xc6/0x103
PGD 1181ea067 PUD 1181da067 PMD 0
Oops: 0000 [1] SMP
last sysfs file:
/devices/pci0000:00/0000:00:02.0/0000:02:00.2/0000:07:03.0/subsystem_device
CPU 3
Modules linked in: cciss
Pid: 3638, comm: mount Not tainted 2.6.17-rc6-mm1 #1
RIP: 0010:[<ffffffff80371a8c>] [<ffffffff80371a8c>]
debugfs_mknod+0xc6/0x103
RSP: 0018:ffff810118f77af8 EFLAGS: 00010202
RAX: 00000000ffffffef RBX: ffff810119d86378 RCX: 000000004487db63
RDX: 0000000039f626e8 RSI: 0000000039f626e8 RDI: ffffffff805c2e60
RBP: 00000000000041ed R08: ffff81011bfdc000 R09: 0000000000000000
R10: ffff810118f778b8 R11: ffffffff8031bbbc R12: fffffffffffffff3
R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff803080d1
FS: 00002b0f8adb46d0(0000) GS:ffff81011bfbf240(0000)
knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 0000000000000013 CR3: 0000000118f8a000 CR4: 00000000000006e0
Process mount (pid: 3638, threadinfo ffff810118f76000, task
ffff81011b719090)
Stack: 00000000000041ed ffff81011b7c7650 ffff81011be3aec0
0000000000000000
0000000000000000 ffffffff80371bb1 ffff810118846400 fffffffffffffff3
ffff810118846400 0000000000000000
Call Trace:
[<ffffffff80371bb1>] debugfs_create_file+0xe8/0x18f
[<ffffffff803081fd>] fill_super+0x12c/0x1e6
[<ffffffff803080d1>] fill_super+0x0/0x1e6
[<ffffffff802ad29f>] get_sb_bdev+0xeb/0x138
[<ffffffff802ad06b>] vfs_kern_mount+0x3f/0x9f
[<ffffffff802ad10d>] do_kern_mount+0x36/0x4d
[<ffffffff802b55cc>] do_mount+0x674/0x6e6
[<ffffffff8023c386>] invalidate_bh_lru+0x0/0x3e
[<ffffffff8026cba5>] smp_call_function+0x3c/0x47
[<ffffffff80209e8a>] get_page_from_freelist+0x221/0x3bf
[<ffffffff8020ec19>] __alloc_pages+0x71/0x2ac
[<ffffffff8024a76c>] sys_mount+0x8c/0xd6
[<ffffffff8025bbd2>] system_call+0x7e/0x83


Code: 49 83 7c 24 20 00 75 2c 83 c8 ff 48 85 db 74 24 48 89 de 4c
RIP [<ffffffff80371a8c>] debugfs_mknod+0xc6/0x103
RSP <ffff810118f77af8>
CR2: 0000000000000013

Looks like a NULL dentry was passed in to debugfs_mknod.

--
Jens Axboe

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/