https://bugzilla.novell.com/show_bug.cgi?id=680073 https://bugzilla.novell.com/show_bug.cgi?id=680073#c0 Summary: kernel bug: reiserfs EIP is at shrink_dcache_for_umount_subtree Classification: openSUSE Product: openSUSE 11.4 Version: Final Platform: i586 OS/Version: openSUSE 11.3 Status: NEW Severity: Normal Priority: P5 - None Component: Kernel AssignedTo: kernel-maintainers@forge.provo.novell.com ReportedBy: external.martin.konold@de.bosch.com QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.2; de-DE; rv:1.9.1.10) Gecko/20100504 Firefox/3.5.10 by Peacy While performing a new installation with OpenSUSE 11.4 DVD release (btw 11.4 is still missing from the OS selection in this Bugzilla wizard) on a HP Z400 workstation with a previously damaged reiserfs partition I get the follwing error: [ 74.278186] EDD information not available. [ 74.855799] REISERFS (device sda2): found reiserfs format "3.6" with standard journal [ 74.855809] REISERFS (device sda2): using ordered data mode [ 74.855811] reiserfs: using flush barriers [ 74.861775] REISERFS (device sda2): journal params: device sda2, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 74.861916] REISERFS (device sda2): checking transaction log (sda2) [ 74.908725] REISERFS (device sda2): Using r5 hash to sort names [ 75.038521] REISERFS (device sda3): found reiserfs format "3.6" with standard journal [ 75.038534] REISERFS (device sda3): using ordered data mode [ 75.038536] reiserfs: using flush barriers [ 75.045230] REISERFS (device sda3): journal params: device sda3, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 75.045387] REISERFS (device sda3): checking transaction log (sda3) [ 75.379076] REISERFS (device sda3): Using r5 hash to sort names [ 75.422596] BUG: unable to handle kernel NULL pointer dereference at 00000004 [ 75.422607] IP: [<c031fe99>] shrink_dcache_for_umount_subtree+0xf9/0x1b0 [ 75.422617] *pde = 00000000 [ 75.422623] Oops: 0002 [#1] SMP [ 75.422628] last sysfs file: /sys/devices/pci0000:00/0000:00:1f.2/host0/target0:0:0/0:0:0:0/block/sda/dev [ 75.422635] Modules linked in: reiserfs dm_mod multipath raid10 raid456 async_raid6_recov async_pq raid6_pq async_xor xor async_memcpy async_tx raid1 raid0 parport_pc parport nls_utf8 usb_storage arc4 ecb acpi_cpufreq mperf fan thermal nfs nfs_acl lockd fscache auth_rpcgss sunrpc nls_iso8859_1 nls_cp437 af_packet st usbhid hid sr_mod sg cdrom uhci_hcd ahci libahci rtc_cmos rtc_core libata tg3 button ehci_hcd usbcore processor rtc_lib thermal_sys hwmon squashfs loop [last unloaded: parport] [ 75.422675] [ 75.422681] Pid: 4221, comm: umount Not tainted 2.6.37.1-1.2-default #1 Hewlett-Packard HP Z400 Workstation/0B4Ch [ 75.422689] EIP: 0060:[<c031fe99>] EFLAGS: 00010246 CPU: 6 [ 75.422695] EIP is at shrink_dcache_for_umount_subtree+0xf9/0x1b0 [ 75.422701] EAX: c031e350 EBX: f67f9c6c ECX: f67f9c98 EDX: 00000000 [ 75.422706] ESI: 00000000 EDI: f67f9ca8 EBP: f0ce2000 ESP: f0ce3edc [ 75.422712] DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068 [ 75.422717] Process umount (pid: 4221, ti=f0ce2000 task=f0c9e530 task.ti=f0ce2000) [ 75.422723] Stack: [ 75.422727] f67f9c6c 00000000 f8a6ea40 f0ce2000 c031e822 f67f9c6c f67f9c74 f6c85e00 [ 75.422735] f67f9c6c f8a6ea40 f0ce2000 f8a6cbd9 f6c85e00 f6c85e70 f8a57944 f0ce3f40 [ 75.422743] f5d3b400 c03216d6 f5d3b3f8 c032196e f6c85e58 f6c85e70 f0ce3f40 c0322920 [ 75.422751] Call Trace: [ 75.422766] [<f8a6cbd9>] reiserfs_xattr_shutdown+0x59/0x80 [reiserfs] [ 75.422810] [<f8a57944>] reiserfs_put_super+0x14/0x130 [reiserfs] [ 75.422830] [<c030f1d7>] generic_shutdown_super+0x57/0xd0 [ 75.422837] [<c030f272>] kill_block_super+0x22/0x40 [ 75.422844] [<c030f6c5>] deactivate_locked_super+0x35/0x50 [ 75.422852] [<c03262c1>] sys_umount+0x61/0xc0 [ 75.422859] [<c0326337>] sys_oldumount+0x17/0x20 [ 75.422867] [<c05fc265>] syscall_call+0x7/0xb [ 75.422875] [<b77e926d>] 0xb77e926d [ 75.422880] Code: e8 0d e9 ff ff 85 f6 74 77 8b 5e 3c 8d 46 3c 39 c3 75 e1 89 f3 8b 03 85 c0 75 73 8b 73 1c 39 de 74 68 f0 ff 0e 8b 53 34 8b 43 38 <89> 42 04 89 10 8b 53 10 c7 43 34 00 01 10 00 c7 43 38 00 02 20 [ 75.422908] EIP: [<c031fe99>] shrink_dcache_for_umount_subtree+0xf9/0x1b0 SS:ESP 0068:f0ce3edc [ 75.422916] CR2: 0000000000000004 [ 75.422921] ---[ end trace cb1d9af19b0474a1 ]--- [ 75.422927] ------------[ cut here ]------------ [ 75.422933] WARNING: at /usr/src/packages/BUILD/kernel-default-2.6.37.1/linux-2.6.37/kernel/exit.c:910 do_exit+0x2a4/0x360() [ 75.422940] Hardware name: HP Z400 Workstation [ 75.422944] Modules linked in: reiserfs dm_mod multipath raid10 raid456 async_raid6_recov async_pq raid6_pq async_xor xor async_memcpy async_tx raid1 raid0 parport_pc parport nls_utf8 usb_storage arc4 ecb acpi_cpufreq mperf fan thermal nfs nfs_acl lockd fscache auth_rpcgss sunrpc nls_iso8859_1 nls_cp437 af_packet st usbhid hid sr_mod sg cdrom uhci_hcd ahci libahci rtc_cmos rtc_core libata tg3 button ehci_hcd usbcore processor rtc_lib thermal_sys hwmon squashfs loop [last unloaded: parport] [ 75.422983] Pid: 4221, comm: umount Tainted: G D 2.6.37.1-1.2-default #1 [ 75.422988] Call Trace: [ 75.422996] [<c02060e3>] try_stack_unwind+0x173/0x190 [ 75.423004] [<c0204e8f>] dump_trace+0x3f/0xe0 [ 75.423011] [<c020614b>] show_trace_log_lvl+0x4b/0x60 [ 75.423017] [<c0206178>] show_trace+0x18/0x20 [ 75.423024] [<c05f9945>] dump_stack+0x6d/0x72 [ 75.423032] [<c0243998>] warn_slowpath_common+0x78/0xb0 [ 75.423040] [<c02439eb>] warn_slowpath_null+0x1b/0x20 [ 75.423046] [<c0247794>] do_exit+0x2a4/0x360 [ 75.423053] [<c05fd3b7>] oops_end+0x87/0xc0 [ 75.423061] [<c0226072>] no_context+0xc2/0x150 [ 75.423069] [<c02262eb>] bad_area+0x3b/0x50 [ 75.423076] [<c05ff50b>] do_page_fault+0x3db/0x430 [ 75.423084] [<c05fc8fa>] error_code+0x5a/0x60 [ 75.423092] [<c031fe99>] shrink_dcache_for_umount_subtree+0xf9/0x1b0 [ 75.423103] [<f8a6cbd9>] reiserfs_xattr_shutdown+0x59/0x80 [reiserfs] [ 75.423142] [<f8a57944>] reiserfs_put_super+0x14/0x130 [reiserfs] [ 75.423161] [<c030f1d7>] generic_shutdown_super+0x57/0xd0 [ 75.423168] [<c030f272>] kill_block_super+0x22/0x40 [ 75.423175] [<c030f6c5>] deactivate_locked_super+0x35/0x50 [ 75.423182] [<c03262c1>] sys_umount+0x61/0xc0 [ 75.423188] [<c0326337>] sys_oldumount+0x17/0x20 [ 75.423195] [<c05fc265>] syscall_call+0x7/0xb [ 75.423203] [<b77e926d>] 0xb77e926d [ 75.423208] ---[ end trace cb1d9af19b0474a2 ]--- [ 75.537152] REISERFS (device sda4): found reiserfs format "3.6" with standard journal [ 75.537181] REISERFS (device sda4): using ordered data mode [ 75.537191] reiserfs: using flush barriers I then cleaned the hdd using dd and tried a second install. This time it went well and I am currently compiling the kernel in an endless loop (since 2 days). I guess that this error can be exploited using external media like USB drive. Yours, -- martin Reproducible: Didn't try Steps to Reproduce: 1. 2. 3. The drive family used shows regulariy problem with OpenSUSE 11.3 but not with 11.0 nor 11.4. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.