From: Randy Dunlap <randy.dunlap@oracle.com>
To: "Vladimir V. Saveliev" <vs@namesys.com>
Cc: reiserfs-devel@vger.kernel.org, lkml <linux-kernel@vger.kernel.org>
Subject: Re: 2.6.22-rc4-git5 reiserfs: null ptr deref.
Date: Wed, 13 Jun 2007 16:57:52 -0700 [thread overview]
Message-ID: <46708480.9050403@oracle.com> (raw)
In-Reply-To: <46708E98.9070904@namesys.com>
Vladimir V. Saveliev wrote:
> Hello
>
> Randy Dunlap wrote:
>> while running fsx-linux on x86_64 system:
>>
> thanks, I will take a look.
>
> Is it reproducible? If yes, would you please try on some earlier kernel?
I haven't seen it in my almost-daily testing runs, but I'll try others
anyway.
>> [ 2213.064351] ReiserFS: sdb1: found reiserfs format "3.6" with standard journal
>> [ 2213.071516] ReiserFS: sdb1: using journaled data mode
>> [ 2213.083124] ReiserFS: sdb1: journal params: device sdb1, size 8192, journal first block 34, max trans len 512, max batch 450, max commit age 30, max trans age 30
>> [ 2213.098843] ReiserFS: sdb1: checking transaction log (sdb1)
>> [ 2213.362156] ReiserFS: sdb1: Using r5 hash to sort names
>> [ 2228.264867] Unable to handle kernel NULL pointer dereference at 0000000000000000 RIP:
>> [ 2228.270363] [<ffffffff88026e8d>] :reiserfs:do_journal_end+0x5de/0xced
>> [ 2228.279370] PGD 114991067 PUD 105050067 PMD 0
>> [ 2228.283865] Oops: 0000 [1] SMP
>> [ 2228.287044] CPU 0
>> [ 2228.289078] Modules linked in: reiserfs loop
>> [ 2228.293401] Pid: 5280, comm: fsx-linux Not tainted 2.6.22-rc4-git5 #1
>> [ 2228.299834] RIP: 0010:[<ffffffff88026e8d>] [<ffffffff88026e8d>] :reiserfs:do_journal_end+0x5de/0xced
>> [ 2228.309076] RSP: 0018:ffff810106c6da48 EFLAGS: 00010286
>> [ 2228.314385] RAX: 0000000000000000 RBX: ffffc200102cdf10 RCX: ffff81011c861800
>> [ 2228.321512] RDX: 0000000000000020 RSI: 0000000000000000 RDI: ffffc20010292220
>> [ 2228.328639] RBP: ffff810106c6db18 R08: 0000000000000002 R09: 0000000000000000
>> [ 2228.335767] R10: ffffc200102cdf10 R11: 0000000000000048 R12: ffffc200102cbc78
>> [ 2228.342895] R13: ffffc200102cdf10 R14: ffffc20010282000 R15: ffff81011e5fe800
>> [ 2228.350024] FS: 00002b02d6aa7ae0(0000) GS:ffffffff80721000(0000) knlGS:0000000000000000
>> [ 2228.358102] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
>> [ 2228.363844] CR2: 0000000000000000 CR3: 000000010b6ea000 CR4: 00000000000006e0
>> [ 2228.370972] Process fsx-linux (pid: 5280, threadinfo ffff810106c6c000, task ffff81011db7c040)
>> [ 2228.379483] Stack: ffff8101143ae200 00000000000a9c2c ffff810106c6da68 ffffffff00000001
>> [ 2228.387565] ffff810106c6db38 0000000000000020 ffff81011c861800 ffff81011c5fd000
>> [ 2228.395039] ffff81010dc7c2d0 0000000000000001 0000000000000000 ffff810114b383c0
>> [ 2228.402313] Call Trace:
>> [ 2228.404963] [<ffffffff80247f8b>] autoremove_wake_function+0x0/0x38
>> [ 2228.411236] [<ffffffff88027568>] :reiserfs:do_journal_end+0xcb9/0xced
>> [ 2228.417766] [<ffffffff88027951>] :reiserfs:do_journal_begin_r+0x260/0x335
>> [ 2228.424643] [<ffffffff88027ade>] :reiserfs:journal_begin+0xb8/0xf6
>> [ 2228.430913] [<ffffffff88022581>] :reiserfs:reiserfs_do_truncate+0x418/0x4be
>> [ 2228.437961] [<ffffffff8800f2e4>] :reiserfs:reiserfs_truncate_file+0x1a4/0x2b6
>> [ 2228.445183] [<ffffffff88012a42>] :reiserfs:reiserfs_vfs_truncate_file+0xe/0x10
>> [ 2228.452492] [<ffffffff802773b3>] vmtruncate+0xaf/0xd0
>> [ 2228.457632] [<ffffffff8029c66c>] inode_setattr+0x2b/0x125
>> [ 2228.463120] [<ffffffff88012136>] :reiserfs:reiserfs_setattr+0x191/0x1bf
>> [ 2228.469818] [<ffffffff80552279>] __down_write_nested+0x3d/0xa1
>> [ 2228.475730] [<ffffffff8029c88f>] notify_change+0x129/0x23a
>> [ 2228.481300] [<ffffffff80288289>] do_truncate+0x63/0x81
>> [ 2228.486521] [<ffffffff80288391>] sys_ftruncate+0xea/0x107
>> [ 2228.492003] [<ffffffff8020948e>] system_call+0x7e/0x83
>> [ 2228.497223]
>> [ 2228.498721]
>> [ 2228.498722] Code: 8b 00 66 85 c0 0f 89 97 01 00 00 4c 89 ff 44 89 85 48 ff ff
>> [ 2228.507806] RIP [<ffffffff88026e8d>] :reiserfs:do_journal_end+0x5de/0xced
>> [ 2228.514700] RSP <ffff810106c6da48>
>> [ 2228.518190] CR2: 0000000000000000
>> [ 2228.521841] Kernel panic - not syncing: Fatal exception
>> [ 2228.527080] Rebooting in 30 seconds..
--
~Randy
*** Remember to use Documentation/SubmitChecklist when testing your code ***
next prev parent reply other threads:[~2007-06-13 23:57 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-06-13 23:09 2.6.22-rc4-git5 reiserfs: null ptr deref Randy Dunlap
2007-06-14 0:40 ` Vladimir V. Saveliev
2007-06-13 23:57 ` Randy Dunlap [this message]
2007-06-14 5:09 ` Randy Dunlap
2007-06-15 11:29 ` Vladimir V. Saveliev
2007-06-15 18:41 ` Randy Dunlap
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=46708480.9050403@oracle.com \
--to=randy.dunlap@oracle.com \
--cc=linux-kernel@vger.kernel.org \
--cc=reiserfs-devel@vger.kernel.org \
--cc=vs@namesys.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.