[Bug 12686] New: kernel oops __ticket_spin_lock

[Bug 12686] New: kernel oops __ticket_spin_lock

[bugme-daemon]

http://bugzilla.kernel.org/show_bug.cgi?id=12686

           Summary: kernel oops __ticket_spin_lock
           Product: File System
           Version: 2.5
     KernelVersion: 2.6.29-rc4
          Platform: All
        OS/Version: Linux
              Tree: Mainline
            Status: NEW
          Severity: normal
          Priority: P1
         Component: ext4
        AssignedTo: fs_ext4@kernel-bugs.osdl.org
        ReportedBy: dmaciejak@fortinet.com


Latest working kernel version: NA
Earliest failing kernel version: NA
Distribution: Ubuntu
Hardware Environment: Dell Optiplex 740
Software Environment: NA

Hi,

playing around with crafted ext4 fs raised a kernel oops (see attached extract
from kern.log)

Steps to reproduce:
*gunzip the poc enclosed
*mount -t ext4 ext4.poc.img /media/here -o loop
*touch /media/here/test

Regards,

David Maciejak
Fortinet's FortiGuard Global Security Research Team


-- 
Configure bugmail: http://bugzilla.kernel.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 12686] kernel oops __ticket_spin_lock

[bugme-daemon]

http://bugzilla.kernel.org/show_bug.cgi?id=12686





------- Comment #1 from dmaciejak@fortinet.com  2009-02-11 02:55 -------
Created an attachment (id=20189)
 --> (http://bugzilla.kernel.org/attachment.cgi?id=20189&action=view)
kern.log extract


-- 
Configure bugmail: http://bugzilla.kernel.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 12686] kernel oops __ticket_spin_lock

[bugme-daemon]

http://bugzilla.kernel.org/show_bug.cgi?id=12686





------- Comment #2 from dmaciejak@fortinet.com  2009-02-11 02:55 -------
Created an attachment (id=20190)
 --> (http://bugzilla.kernel.org/attachment.cgi?id=20190&action=view)
gzip ext4 poc


-- 
Configure bugmail: http://bugzilla.kernel.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 12686] kernel oops __ticket_spin_lock

[bugzilla-daemon]

http://bugzilla.kernel.org/show_bug.cgi?id=12686


Theodore Tso <tytso@mit.edu> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
                 CC|                            |tytso@mit.edu
         Resolution|                            |UNREPRODUCIBLE
         Regression|---                         |No




--- Comment #3 from Theodore Tso <tytso@mit.edu>  2009-05-19 19:08:39 ---
I can't reproduce this on a recent kernel.  Even after removing the bogus
indirect and triple indirect block which causes modern kernels to refuse to
mount the filesystem, it still doesn't crash, even after giving all of the
ext4_claim_inode() errors caused by the very large s_first_ino value.   So it
looks like this problem is no longer an issue on 2.6.30-rc6 kernels.

-- 
Configure bugmail: http://bugzilla.kernel.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.