reiserfs bug

reiserfs bug

[Sönke Ruempler]

[-- Attachment #1: Type: text/plain, Size: 10543 bytes --]

kernel oops while writing through sbp2 to ieee1394 ide reiserfs-formated
device

i am NOT on the list, pls CC me!

trace:

kernel BUG at prints.c:334!
invalid operand: 0000
CPU:    0
EIP:    0010:[<c0174d69>]    Not tainted
Using defaults from ksymoops -t elf32-i386 -a i386
EFLAGS: 00010282
eax: 00000024   ebx: c0259c00   ecx: cf51a000   edx: cf51bf64
esi: cc7f6c00   edi: ce2cb6c0   ebp: 00000003   esp: c12f1ea0
ds: 0018   es: 0018   ss: 0018
Process kupdated (pid: 7, stackpage=c12f1000)
Stack: c024e755 c02e0120 c0259c00 c12f1ec4 d0923830 00000000 c017f13d
cc7f6c00
       c0259c00 00000000 00000014 ce2cb6c0 d093aaf4 c0131268 c023fa4d
cb66a000
       d0923000 00000013 00000010 00000004 c0182b4b cc7f6c00 d0923830
00000001
Call Trace:    [<c017f13d>] [<c0131268>] [<c023fa4d>] [<c0182b4b>]
[<c0181d40>]
  [<c0181d4e>] [<c01725d5>] [<c0133eee>] [<c01334bc>] [<c013374c>]
[<c0105000>]
  [<c0105000>] [<c0106ff6>] [<c0133670>]
Code: 0f 0b 4e 01 e2 0f 25 c0 85 f6 68 20 01 2e c0 74 0d 0f b7 46

>>EIP; c0174d69 <reiserfs_panic+29/60>   <=====
Trace; c017f13d <flush_commit_list+2bd/3b0>
Trace; c0131268 <getblk+18/40>
Trace; c023fa4d <_mmx_memcpy+4d/150>
Trace; c0182b4b <do_journal_end+7eb/af0>
Trace; c0181d40 <flush_old_commits+130/160>
Trace; c0181d4e <flush_old_commits+13e/160>
Trace; c01725d5 <reiserfs_write_super+15/20>
Trace; c0133eee <sync_supers+be/e0>
Trace; c01334bc <sync_old_buffers+c/40>
Trace; c013374c <kupdate+dc/100>
Trace; c0105000 <_stext+0/0>
Trace; c0105000 <_stext+0/0>
Trace; c0106ff6 <kernel_thread+26/30>
Trace; c0133670 <kupdate+0/100>
Code;  c0174d69 <reiserfs_panic+29/60>
00000000 <_EIP>:
Code;  c0174d69 <reiserfs_panic+29/60>   <=====
   0:   0f 0b                     ud2a      <=====
Code;  c0174d6b <reiserfs_panic+2b/60>
   2:   4e                        dec    %esi
Code;  c0174d6c <reiserfs_panic+2c/60>
   3:   01 e2                     add    %esp,%edx
Code;  c0174d6e <reiserfs_panic+2e/60>
   5:   0f 25                     (bad)
Code;  c0174d70 <reiserfs_panic+30/60>
   7:   c0 85 f6 68 20 01 2e      rolb   $0x2e,0x12068f6(%ebp)
Code;  c0174d77 <reiserfs_panic+37/60>
   e:   c0                        (bad)
Code;  c0174d78 <reiserfs_panic+38/60>
   f:   74 0d                     je     1e <_EIP+0x1e> c0174d87
<reiserfs_panic+47/60>
Code;  c0174d7a <reiserfs_panic+3a/60>
  11:   0f b7 46 00               movzwl 0x0(%esi),%eax


If some fields are empty or look unusual you may have an old version.
Compare to the current minimal requirements in Documentation/Changes.

Linux blah 2.4.19 #1 Die Aug 13 10:01:16 CEST 2002 i686 unknown

Gnu C                  2.96
Gnu make               3.79.1
binutils               2.11.90.0.8
util-linux             2.11f
mount                  2.11g
modutils               2.4.6
e2fsprogs              1.23
reiserfsprogs          3.x.0j
isdn4k-utils           3.1pre1
Linux C Library        2.2.4
Dynamic linker (ldd)   2.2.4
Procps                 2.0.7
Net-tools              1.60
Console-tools          0.3.3
Sh-utils               2.0.11
Modules Loaded         sbp2 smbfs nls_iso8859-1 isofs lp


Linux version 2.4.19 (root@blah) (gcc version 2.96 20000731 (Red Hat Linux
7.1 2.96-98)) #1 Die Aug 13 10:01:16 CEST 2002


cpuinfo:
processor : 0
vendor_id : AuthenticAMD
cpu family : 6
model : 3
model name : AMD Duron(tm) Processor
stepping : 1
cpu MHz : 706.989
cache size : 64 KB
fdiv_bug : no
hlt_bug : no
f00f_bug : no
coma_bug : no
fpu : yes
fpu_exception : yes
cpuid level : 1
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 sep mtrr pge mca cmov pat pse36
mmx fxsr syscall mmxext 3dnowext 3dnow
bogomips : 1409.02


modules:
sbp2                   15904   1
smbfs                  32144   1 (autoclean)
nls_iso8859-1           2832   0 (autoclean)
isofs                  17296   0 (autoclean)
lp                      5968   0 (autoclean)


ipports:
0000-001f : dma1
0020-003f : pic1
0040-005f : timer
0060-006f : keyboard
0070-007f : rtc
0080-008f : dma page reg
00a0-00bf : pic2
00c0-00df : dma2
00f0-00ff : fpu
0140-015f : aha152x
0170-0177 : ide1
01f0-01f7 : ide0
02f8-02ff : serial(auto)
0376-0376 : ide1
0378-037a : parport0
03c0-03df : vga+
03f6-03f6 : ide0
03f8-03ff : serial(auto)
0cf8-0cff : PCI conf1
b000-bfff : PCI Bus #01
d800-d803 : Advanced Micro Devices [AMD] AMD-751 [Irongate] System
Controller
da00-da1f : AVM Audiovisuelles MKTG & Computer System GmbH B1 ISDN
  da00-da1e : b1pci-da00
dc00-dc3f : AVM Audiovisuelles MKTG & Computer System GmbH B1 ISDN
de00-deff : Macronix, Inc. [MXIC] MX987x5
  de00-deff : tulip
f000-f00f : Advanced Micro Devices [AMD] AMD-756 [Viper] IDE
  f000-f007 : ide0
  f008-f00f : ide1


iomem:
00000000-0009fbff : System RAM
0009fc00-0009ffff : reserved
000a0000-000bffff : Video RAM area
000c0000-000c7fff : Video ROM
000f0000-000fffff : System ROM
00100000-0ffeffff : System RAM
  00100000-0024371c : Kernel code
  0024371d-002978bf : Kernel data
0fff0000-0fff7fff : ACPI Tables
0fff8000-0fffffff : ACPI Non-volatile Storage
e6c00000-e6cfffff : PCI Bus #01
e8000000-ebffffff : Advanced Micro Devices [AMD] AMD-751 [Irongate] System
Controller
eedff000-eedfffff : Advanced Micro Devices [AMD] AMD-751 [Irongate] System
Controller
eee00000-eeefffff : PCI Bus #01
ef7e8000-ef7ebfff : Texas Instruments TSB12LV26 IEEE-1394 Controller (Link)
ef7ee000-ef7eefff : Advanced Micro Devices [AMD] AMD-756 [Viper] USB
ef7ef000-ef7ef7ff : Texas Instruments TSB12LV26 IEEE-1394 Controller (Link)
  ef7ef000-ef7ef7ff : ohci1394
ef7efec0-ef7efeff : AVM Audiovisuelles MKTG & Computer System GmbH B1 ISDN
ef7eff00-ef7effff : Macronix, Inc. [MXIC] MX987x5
  ef7eff00-ef7effff : tulip
ef800000-efffffff : S3 Inc. 86c764/765 [Trio32/64/64V+]
ffff0000-ffffffff : reserved


lspci -vvv:
00:00.0 Host bridge: Advanced Micro Devices [AMD] AMD-751 [Irongate] System
Controller (rev 25)
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR+ FastB2B-
Status: Cap+ 66Mhz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort-
<MAbort+ >SERR- <PERR-
Latency: 120
Region 0: Memory at e8000000 (32-bit, prefetchable) [size=64M]
Region 1: Memory at eedff000 (32-bit, prefetchable) [size=4K]
Region 2: I/O ports at d800 [disabled] [size=4]
Capabilities: [a0] AGP version 1.0
Status: RQ=15 SBA+ 64bit- FW- Rate=x1,x2
Command: RQ=0 SBA- AGP+ 64bit- FW- Rate=x1

00:01.0 PCI bridge: Advanced Micro Devices [AMD] AMD-751 [Irongate] AGP
Bridge (rev 01) (prog-if 00 [Normal decode])
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR+ FastB2B-
Status: Cap- 66Mhz+ UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort-
<MAbort- >SERR- <PERR-
Latency: 120
Bus: primary=00, secondary=01, subordinate=01, sec-latency=32
I/O behind bridge: 0000b000-0000bfff
Memory behind bridge: eee00000-eeefffff
Prefetchable memory behind bridge: e6c00000-e6cfffff
BridgeCtl: Parity- SERR+ NoISA+ VGA- MAbort- >Reset- FastB2B-

00:07.0 ISA bridge: Advanced Micro Devices [AMD] AMD-756 [Viper] ISA (rev
01)
Control: I/O+ Mem+ BusMaster+ SpecCycle+ MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B-
Status: Cap- 66Mhz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort-
<MAbort- >SERR- <PERR-
Latency: 0

00:07.1 IDE interface: Advanced Micro Devices [AMD] AMD-756 [Viper] IDE (rev
07) (prog-if 8a [Master SecP PriP])
Control: I/O+ Mem- BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B-
Status: Cap- 66Mhz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort-
<MAbort- >SERR- <PERR-
Latency: 32
Region 4: I/O ports at f000 [size=16]

00:07.3 Bridge: Advanced Micro Devices [AMD] AMD-756 [Viper] ACPI (rev 03)
Control: I/O- Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B-
Status: Cap- 66Mhz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort-
<MAbort- >SERR- <PERR-

00:07.4 USB Controller: Advanced Micro Devices [AMD] AMD-756 [Viper] USB
(rev 06) (prog-if 10 [OHCI])
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV+ VGASnoop- ParErr-
Stepping- SERR+ FastB2B-
Status: Cap- 66Mhz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort-
<MAbort- >SERR- <PERR-
Latency: 16 (20000ns max), cache line size 08
Interrupt: pin D routed to IRQ 12
Region 0: Memory at ef7ee000 (32-bit, non-prefetchable) [size=4K]

00:08.0 Network controller: AVM Audiovisuelles MKTG & Computer System GmbH
B1 ISDN (rev 01)
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR+ FastB2B-
Status: Cap- 66Mhz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort-
<MAbort- >SERR- <PERR-
Latency: 64 (500ns min, 500ns max)
Interrupt: pin A routed to IRQ 5
Region 0: Memory at ef7efec0 (32-bit, non-prefetchable) [size=64]
Region 1: I/O ports at dc00 [size=64]
Region 2: I/O ports at da00 [size=32]

00:09.0 FireWire (IEEE 1394): Texas Instruments: Unknown device 8020
(prog-if 10 [OHCI])
Subsystem: Texas Instruments: Unknown device 8010
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV+ VGASnoop- ParErr-
Stepping- SERR+ FastB2B-
Status: Cap+ 66Mhz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort-
<MAbort- >SERR- <PERR-
Latency: 64 (750ns min, 1000ns max), cache line size 08
Interrupt: pin A routed to IRQ 9
Region 0: Memory at ef7ef000 (32-bit, non-prefetchable) [size=2K]
Region 1: Memory at ef7e8000 (32-bit, non-prefetchable) [size=16K]
Capabilities: [44] Power Management version 1
Flags: PMEClk- DSI- D1- D2+ AuxCurrent=0mA PME(D0-,D1-,D2+,D3hot+,D3cold-)
Status: D0 PME-Enable- DSel=0 DScale=0 PME-

00:0a.0 Ethernet controller: Macronix, Inc. [MXIC] MX987x5 (rev 20)
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping+ SERR+ FastB2B-
Status: Cap+ 66Mhz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort-
<MAbort- >SERR- <PERR-
Latency: 64 (2000ns min, 14000ns max), cache line size 08
Interrupt: pin A routed to IRQ 10
Region 0: I/O ports at de00 [size=256]
Region 1: Memory at ef7eff00 (32-bit, non-prefetchable) [size=256]
Expansion ROM at ef7d0000 [disabled] [size=64K]
Capabilities: [44] Power Management version 1
Flags: PMEClk- DSI- D1+ D2- AuxCurrent=0mA PME(D0-,D1+,D2-,D3hot-,D3cold+)
Status: D0 PME-Enable- DSel=0 DScale=0 PME-

00:0b.0 VGA compatible controller: S3 Inc. 86c764/765 [Trio32/64/64V+]
(prog-if 00 [VGA])
Control: I/O+ Mem+ BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B-
Status: Cap- 66Mhz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort-
<MAbort- >SERR- <PERR-
Interrupt: pin A routed to IRQ 12
Region 0: Memory at ef800000 (32-bit, non-prefetchable) [size=8M]
Expansion ROM at ef7f0000 [disabled] [size=64K]


have fun!

[-- Attachment #2: smime.p7s --]
[-- Type: application/x-pkcs7-signature, Size: 2436 bytes --]

Re: reiserfs bug

[Oleg Drokin]

Hello!

On Thu, Nov 28, 2002 at 09:28:47AM +0100, S?nke Ruempler wrote:
> kernel oops while writing through sbp2 to ieee1394 ide reiserfs-formated
> device
> i am NOT on the list, pls CC me!
> trace:
> kernel BUG at prints.c:334!

There should be another message in your logs prior to above,
can you please tell us what was that message?

Thank you.

Bye,
    Oleg

Re: reiserfs bug

[Sonke Ruempler]

> There should be another message in your logs prior to above,
> can you please tell us what was that message?

Nov 28 09:00:12 blah kernel: reiserfs: checking transaction log (device
08:01) ...
Nov 28 09:00:15 blah kernel: reiserfs: replayed 19 transactions in 3 seconds
Nov 28 09:00:15 blah kernel: Using r5 hash to sort names
Nov 28 09:00:15 blah kernel: ReiserFS version 3.6.25
Nov 28 09:00:51 blah kernel: smb_proc_readdir_long:
name=\topconcepts.net\www\pub\doc\_php_manual_ger\www.php.net\SEARC~-N.PHP\*
, result=-2, rcls=1, err=2
Nov 28 09:00:51 blah kernel: smb_proc_readdir_long:
name=\topconcepts.net\www\pub\doc\_php_manual_ger\www.php.net\SOURC~W#.PHP\*
, result=-2, rcls=1, err=2
Nov 28 09:05:15 blah kernel: SCSI disk error : host 2 channel 0 id 1 lun 0
return code = 10000
Nov 28 09:05:15 blah kernel:  I/O error: dev 08:11, sector 283064
Nov 28 09:05:15 blah kernel: SCSI disk error : host 2 channel 0 id 1 lun 0
return code = 10000
Nov 28 09:05:15 blah kernel:  I/O error: dev 08:11, sector 283064
Nov 28 09:05:15 blah kernel: zam-7001: io error in reiserfs_find_entry
Nov 28 09:05:15 blah kernel: SCSI disk error : host 2 channel 0 id 1 lun 0
return code = 10000
Nov 28 09:05:15 blah kernel:  I/O error: dev 08:11, sector 283064
Nov 28 09:05:15 blah kernel: vs-13050: reiserfs_update_sd: i/o failure
occurred trying to update [2 58464 0x0 SD] stat dataSCSI disk error : host 2
channel 0 id 1 lun 0 return code = 10000
Nov 28 09:05:15 blah kernel:  I/O error: dev 08:11, sector 283064
Nov 28 09:05:20 blah kernel: vs-13050: reiserfs_update_sd: i/o failure
occurred trying to update [2 58464 0x0 SD] stat dataSCSI disk error : host 2
channel 0 id 1 lun 0 return code = 10000
Nov 28 09:05:20 blah kernel:  I/O error: dev 08:11, sector 11496
Nov 28 09:05:20 blah kernel: SCSI disk error : host 2 channel 0 id 1 lun 0
return code = 10000
Nov 28 09:05:20 blah kernel:  I/O error: dev 08:11, sector 11504
Nov 28 09:05:20 blah kernel: journal-601, buffer write failed
Nov 28 09:05:20 blah kernel: kernel BUG at prints.c:334!
Nov 28 09:05:20 blah kernel: invalid operand: 0000
Nov 28 09:05:20 blah kernel: CPU:    0

[...]

If you need more logs, just mail me.

Re: reiserfs bug

[Oleg Drokin]

Hello!

On Thu, Nov 28, 2002 at 09:50:55AM +0100, Sonke Ruempler wrote:
> > There should be another message in your logs prior to above,
> > can you please tell us what was that message?
> Nov 28 09:05:15 blah kernel:  I/O error: dev 08:11, sector 283064
> Nov 28 09:05:15 blah kernel: zam-7001: io error in reiserfs_find_entry
> Nov 28 09:05:15 blah kernel:  I/O error: dev 08:11, sector 283064
> Nov 28 09:05:15 blah kernel: vs-13050: reiserfs_update_sd: i/o failure
> occurred trying to update [2 58464 0x0 SD] stat dataSCSI disk error : host 2
> channel 0 id 1 lun 0 return code = 10000
> Nov 28 09:05:15 blah kernel:  I/O error: dev 08:11, sector 283064
> Nov 28 09:05:20 blah kernel: vs-13050: reiserfs_update_sd: i/o failure
> occurred trying to update [2 58464 0x0 SD] stat dataSCSI disk error : host 2
> channel 0 id 1 lun 0 return code = 10000
> Nov 28 09:05:20 blah kernel:  I/O error: dev 08:11, sector 11496
> Nov 28 09:05:20 blah kernel: SCSI disk error : host 2 channel 0 id 1 lun 0
> return code = 10000
> Nov 28 09:05:20 blah kernel:  I/O error: dev 08:11, sector 11504
> Nov 28 09:05:20 blah kernel: journal-601, buffer write failed

Sorry, but you seems to have faulty hardware (bad harddrive or something).
Reiserfs cannot tolerate bad blocks in journal area right now.
I'd suggest you to make a backup of your device and then to replace bad
harddrive.

Bye,
    Oleg

Re: reiserfs bug

[Sonke Ruempler]

> Sorry, but you seems to have faulty hardware (bad harddrive or something).
> Reiserfs cannot tolerate bad blocks in journal area right now.
> I'd suggest you to make a backup of your device and then to replace bad
> harddrive.

umm, that are originally freecom 20gig ide hdds in a firewire-case, i
replaced the hdds with 120gig maxtor hdds and they worked for 2 weeks until
today.

maybe the firewire<->ide converter is corrupted?

Re: reiserfs bug

[Oleg Drokin]

Hello!

On Thu, Nov 28, 2002 at 10:04:10AM +0100, Sonke Ruempler wrote:
> > Sorry, but you seems to have faulty hardware (bad harddrive or something).
> > Reiserfs cannot tolerate bad blocks in journal area right now.
> > I'd suggest you to make a backup of your device and then to replace bad
> > harddrive.
> umm, that are originally freecom 20gig ide hdds in a firewire-case, i
> replaced the hdds with 120gig maxtor hdds and they worked for 2 weeks until
> today.
> maybe the firewire<->ide converter is corrupted?

I do not know. Your log indicates that your scsi subsystem encountered errors.
But I do not know actual source of errors. May be if you enable more verbose
scsi errors reporting it will give you some clue. (like what command
failed, what was the error code and this kind of stuff).

Bye,
    Oleg

Re: reiserfs bug

[Sonke Ruempler]

> I do not know. Your log indicates that your scsi subsystem encountered
errors.
> But I do not know actual source of errors. May be if you enable more
verbose
> scsi errors reporting it will give you some clue. (like what command
> failed, what was the error code and this kind of stuff).

ok i will do so and mail you, if the problem comes again!

Re: reiserfs bug

[Henning P. Schmiedehausen]

Oleg Drokin <green@namesys.com> writes:

>Sorry, but you seems to have faulty hardware (bad harddrive or something).
>Reiserfs cannot tolerate bad blocks in journal area right now.
>I'd suggest you to make a backup of your device and then to replace bad
>harddrive.

You still shouldn't panic the kernel in this case. IMHO.

	Regards
		Henning

-- 
Dipl.-Inf. (Univ.) Henning P. Schmiedehausen       -- Geschaeftsfuehrer
INTERMETA - Gesellschaft fuer Mehrwertdienste mbH     hps@intermeta.de

Am Schwabachgrund 22  Fon.: 09131 / 50654-0   info@intermeta.de
D-91054 Buckenhof     Fax.: 09131 / 50654-20   

Re: reiserfs bug

[Oleg Drokin]

Hello!

On Thu, Nov 28, 2002 at 09:13:43AM +0000, Henning P. Schmiedehausen wrote:
> >Sorry, but you seems to have faulty hardware (bad harddrive or something).
> >Reiserfs cannot tolerate bad blocks in journal area right now.
> >I'd suggest you to make a backup of your device and then to replace bad
> >harddrive.
> You still shouldn't panic the kernel in this case. IMHO.

Sure, panicking the kernel in case of a write error is not very nice thing to
do.
Jeff Mahoney (of SuSE) is working on improving this situation. He even
released a preview patch some time ago (on 7th May).

Bye,
    Oleg

reiserfs bug

[Pablo Barbáchano]

Hi, Im having a segfault when trying to rm -rf a directory in my hard
disk. If I run fsck.reiserfs on that partition it tells me to
--rebuild-tree. I wont yet, because I cant make a backup and, well, Im
scared of losing my data ;)

Ah, kernel is a 2.6.10, and Im running debian unstable on an
athlon... hope it helps!

I attach the kernel output:
---------------------------------------------------

ReiserFS: sda4: found reiserfs format "3.6" with standard journal
ReiserFS: sda4: using ordered data mode
ReiserFS: sda4: journal params: device sda4, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30
ReiserFS: sda4: checking transaction log (sda4)
ReiserFS: sda4: replayed 3 transactions in 5 seconds
ReiserFS: sda4: Using r5 hash to sort names
ReiserFS: sda4: warning: vs-2180: finish_unfinished: iget failed for [245831 247149 0x0 SD]
agpgart: Found an AGP 3.5 compliant device at 0000:00:00.0.
agpgart: XFree86 passes broken AGP3 flags (1f00080f). Fixed.
agpgart: Putting AGP V3 device at 0000:00:00.0 into 8x mode
agpgart: Putting AGP V3 device at 0000:01:00.0 into 8x mode
ReiserFS: warning: is_tree_node: node level 54786 does not match to the expected one 1
ReiserFS: sda4: warning: vs-5150: search_by_key: invalid format found in block 2037090. Fsck?
ReiserFS: sda4: warning: vs-13070: reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [257451 257464 0x0 SD]
ReiserFS: warning: is_tree_node: node level 54786 does not match to the expected one 1
ReiserFS: sda4: warning: vs-5150: search_by_key: invalid format found in block 2037090. Fsck?
ReiserFS: sda4: warning: vs-13070: reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [257451 257465 0x0 SD]
ReiserFS: warning: is_tree_node: node level 54786 does not match to the expected one 1
ReiserFS: sda4: warning: vs-5150: search_by_key: invalid format found in block 2037090. Fsck?
ReiserFS: sda4: warning: vs-5657: reiserfs_do_truncate: i/o failure occurred trying to truncate [257451 257463 0xfffffffffffffff DIRECT]
ReiserFS: sda4: warning: clm-2100: nesting info a different FS
ReiserFS: sda4: warning: clm-2100: nesting info a different FS
------------[ cut here ]------------
kernel BUG at fs/reiserfs/journal.c:2825!
invalid operand: 0000 [#1]
PREEMPT 
Modules linked in: ppp_deflate zlib_deflate bsd_comp thermal fan button processor ac battery ppp_async crc_ccitt ipv6 ehci_hcd sn9c102 videod
ev uhci_hcd usbcore sd_mod sata_via libata scsi_mod pci_hotplug analog parport_pc parport pcspkr reiserfs dm_mod capability commoncap it87 ee
prom i2c_sensor i2c_isa nvidia rtc ppp_generic slhc ide_cd cdrom tsdev evdev psmouse mousedev i2c_viapro i2c_core snd_pcm_oss snd_mixer_oss s
nd_via82xx snd_ac97_codec snd_pcm snd_timer snd_page_alloc gameport snd_mpu401_uart snd_rawmidi snd_seq_device snd soundcore via_agp agpgart 
sk98lin af_packet ext2 ext3 jbd mbcache ide_generic via82cxxx trm290 triflex slc90e66 sis5513 siimage serverworks sc1200 rz1000 piix pdc202xx
_old opti621 ns87415 hpt366 ide_disk hpt34x generic cy82c693 cs5530 cs5520 cmd64x atiixp amd74xx alim15x3 aec62xx pdc202xx_new ide_core unix 
fbcon font bitblit vesafb cfbcopyarea cfbimgblt cfbfillrect
CPU:    0
EIP:    0060:[<e0bd518e>]    Tainted: P      VLI
EFLAGS: 00010246   (2.6.10-1-686) 
EIP is at journal_begin+0xee/0x100 [reiserfs]
eax: 00000000   ebx: d9c9c000   ecx: d9c9df00   edx: d9c9df00
esi: d9c9deb0   edi: d8882800   ebp: d9c9deb0   esp: d9c9de74
ds: 007b   es: 007b   ss: 0068
Process rm (pid: 6562, threadinfo=d9c9c000 task=da778020)
Stack: ffffffff 00000000 00000000 00000000 00000012 d6b8cd6c 00000000 e0bc1bfa 
       d9c9deb0 d8882800 00000012 00000000 00000000 000002c5 00000000 00000000 
       00000000 00000000 00000000 e0c83000 00000000 d8882800 d6b8cd6c d9c9df70 
Call Trace:
 [<e0bc1bfa>] remove_save_link+0x3a/0x110 [reiserfs]
 [<e0bd54ba>] journal_end+0xaa/0x100 [reiserfs]
 [<e0bb4515>] reiserfs_delete_inode+0xe5/0x110 [reiserfs]
 [<c016395d>] permission+0x6d/0x80
 [<e0bb4430>] reiserfs_delete_inode+0x0/0x110 [reiserfs]
 [<c0171095>] generic_delete_inode+0xa5/0x170
 [<c0171343>] iput+0x63/0x90
 [<c0166933>] sys_unlink+0xd3/0x130
 [<c0156091>] sys_write+0x51/0x80
 [<c01030df>] syscall_call+0x7/0xb
Code: 24 08 89 54 24 04 89 34 24 e8 1f a5 5e df 83 7e 04 01 7e 04 31 c0 eb bd 89 3c 24 b8 c0 d8 bd e0 89 44 24 04 e8 04 fb fe ff eb e9 <0f> 0b 09 0b 6a ed bd e0 eb c0 90 8d b4 26 00 00 00 00 55 57 56 

Re: reiserfs bug

[Pablo Barbáchano]

On Sun, Jan 23, 2005 at 12:26:38AM +0100, Pablo Barbáchano wrote:
> Hi, Im having a segfault when trying to rm -rf a directory in my hard
> disk. If I run fsck.reiserfs on that partition it tells me to
> --rebuild-tree. I wont yet, because I cant make a backup and, well, Im
> scared of losing my data ;)
> 
> Ah, kernel is a 2.6.10, and Im running debian unstable on an
> athlon... hope it helps!
> 

Actually, it happens with the 2.4.27 from knoppix 3.7, and without the
nvidia module (i tried it "just in case")

> I attach the kernel output:
> ---------------------------------------------------
> 
> ReiserFS: sda4: found reiserfs format "3.6" with standard journal
> ReiserFS: sda4: using ordered data mode
> ReiserFS: sda4: journal params: device sda4, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30
> ReiserFS: sda4: checking transaction log (sda4)
> ReiserFS: sda4: replayed 3 transactions in 5 seconds
> ReiserFS: sda4: Using r5 hash to sort names
> ReiserFS: sda4: warning: vs-2180: finish_unfinished: iget failed for [245831 247149 0x0 SD]
> agpgart: Found an AGP 3.5 compliant device at 0000:00:00.0.
> agpgart: XFree86 passes broken AGP3 flags (1f00080f). Fixed.
> agpgart: Putting AGP V3 device at 0000:00:00.0 into 8x mode
> agpgart: Putting AGP V3 device at 0000:01:00.0 into 8x mode
> ReiserFS: warning: is_tree_node: node level 54786 does not match to the expected one 1
> ReiserFS: sda4: warning: vs-5150: search_by_key: invalid format found in block 2037090. Fsck?
> ReiserFS: sda4: warning: vs-13070: reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [257451 257464 0x0 SD]
> ReiserFS: warning: is_tree_node: node level 54786 does not match to the expected one 1
> ReiserFS: sda4: warning: vs-5150: search_by_key: invalid format found in block 2037090. Fsck?
> ReiserFS: sda4: warning: vs-13070: reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [257451 257465 0x0 SD]
> ReiserFS: warning: is_tree_node: node level 54786 does not match to the expected one 1
> ReiserFS: sda4: warning: vs-5150: search_by_key: invalid format found in block 2037090. Fsck?
> ReiserFS: sda4: warning: vs-5657: reiserfs_do_truncate: i/o failure occurred trying to truncate [257451 257463 0xfffffffffffffff DIRECT]
> ReiserFS: sda4: warning: clm-2100: nesting info a different FS
> ReiserFS: sda4: warning: clm-2100: nesting info a different FS
> ------------[ cut here ]------------
> kernel BUG at fs/reiserfs/journal.c:2825!
> invalid operand: 0000 [#1]
> PREEMPT 
> Modules linked in: ppp_deflate zlib_deflate bsd_comp thermal fan button processor ac battery ppp_async crc_ccitt ipv6 ehci_hcd sn9c102 videod
> ev uhci_hcd usbcore sd_mod sata_via libata scsi_mod pci_hotplug analog parport_pc parport pcspkr reiserfs dm_mod capability commoncap it87 ee
> prom i2c_sensor i2c_isa nvidia rtc ppp_generic slhc ide_cd cdrom tsdev evdev psmouse mousedev i2c_viapro i2c_core snd_pcm_oss snd_mixer_oss s
> nd_via82xx snd_ac97_codec snd_pcm snd_timer snd_page_alloc gameport snd_mpu401_uart snd_rawmidi snd_seq_device snd soundcore via_agp agpgart 
> sk98lin af_packet ext2 ext3 jbd mbcache ide_generic via82cxxx trm290 triflex slc90e66 sis5513 siimage serverworks sc1200 rz1000 piix pdc202xx
> _old opti621 ns87415 hpt366 ide_disk hpt34x generic cy82c693 cs5530 cs5520 cmd64x atiixp amd74xx alim15x3 aec62xx pdc202xx_new ide_core unix 
> fbcon font bitblit vesafb cfbcopyarea cfbimgblt cfbfillrect
> CPU:    0
> EIP:    0060:[<e0bd518e>]    Tainted: P      VLI
> EFLAGS: 00010246   (2.6.10-1-686) 
> EIP is at journal_begin+0xee/0x100 [reiserfs]
> eax: 00000000   ebx: d9c9c000   ecx: d9c9df00   edx: d9c9df00
> esi: d9c9deb0   edi: d8882800   ebp: d9c9deb0   esp: d9c9de74
> ds: 007b   es: 007b   ss: 0068
> Process rm (pid: 6562, threadinfo=d9c9c000 task=da778020)
> Stack: ffffffff 00000000 00000000 00000000 00000012 d6b8cd6c 00000000 e0bc1bfa 
>        d9c9deb0 d8882800 00000012 00000000 00000000 000002c5 00000000 00000000 
>        00000000 00000000 00000000 e0c83000 00000000 d8882800 d6b8cd6c d9c9df70 
> Call Trace:
>  [<e0bc1bfa>] remove_save_link+0x3a/0x110 [reiserfs]
>  [<e0bd54ba>] journal_end+0xaa/0x100 [reiserfs]
>  [<e0bb4515>] reiserfs_delete_inode+0xe5/0x110 [reiserfs]
>  [<c016395d>] permission+0x6d/0x80
>  [<e0bb4430>] reiserfs_delete_inode+0x0/0x110 [reiserfs]
>  [<c0171095>] generic_delete_inode+0xa5/0x170
>  [<c0171343>] iput+0x63/0x90
>  [<c0166933>] sys_unlink+0xd3/0x130
>  [<c0156091>] sys_write+0x51/0x80
>  [<c01030df>] syscall_call+0x7/0xb
> Code: 24 08 89 54 24 04 89 34 24 e8 1f a5 5e df 83 7e 04 01 7e 04 31 c0 eb bd 89 3c 24 b8 c0 d8 bd e0 89 44 24 04 e8 04 fb fe ff eb e9 <0f> 0b 09 0b 6a ed bd e0 eb c0 90 8d b4 26 00 00 00 00 55 57 56 
> -
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at  http://www.tux.org/lkml/

reiserfs bug

[Hongwei Li]

Hi:
My machine am running linux-2.4.25, it crash in the
reiser_panic.
I looked at the oops and find out the followings:
check_leaf_block_head pass the 0 as "sb" value, and
cause reiser_panic crash.
Any fix for this?

static void check_leaf_block_head (struct buffer_head
* bh)
{
  struct block_head * blkh;
  int nr;

  blkh = B_BLK_HEAD (bh);
  nr = blkh_nr_item(blkh);
  if ( nr > (bh->b_size - BLKH_SIZE) / IH_SIZE)
    reiserfs_panic (0, "vs-6010:
check_leaf_block_head: invalid item number %z", bh);
  if ( blkh_free_space(blkh) > 
      bh->b_size - BLKH_SIZE - IH_SIZE * nr )
    reiserfs_panic (0, "vs-6020:
check_leaf_block_head: invalid free space %z", bh);
    
}

void reiserfs_panic (struct super_block * sb, const
char * fmt, ...)
{
  show_reiserfs_locks() ;
  do_reiserfs_warning(fmt);
  printk ( KERN_EMERG "%s (device %s)\n", error_buf,
bdevname(sb->s_dev));
  BUG ();

  /* this is not actually called, but makes
reiserfs_panic() "noreturn" */
  panic ("REISERFS: panic (device %s): %s\n",
	 sb ? kdevname(sb->s_dev) : "sb == 0", error_buf);
}

Li Hongwei


	
		
__________________________________
Do you Yahoo!?
New and Improved Yahoo! Mail - 100MB free storage!
http://promotions.yahoo.com/new_mail 

Re: reiserfs bug

[Oleg Drokin]

Hello!

Hongwei Li <hwli98@yahoo.com> wrote:
HL> My machine am running linux-2.4.25, it crash in the
HL> reiser_panic.
HL> I looked at the oops and find out the followings:
HL> check_leaf_block_head pass the 0 as "sb" value, and
HL> cause reiser_panic crash.
HL> Any fix for this?

Well, reiserfs_panic is supposed to crash with BUG().
And the reason for the reiserfs_panic call seems to be on-disk corruption
in your case.

HL>     reiserfs_panic (0, "vs-6020:
HL> check_leaf_block_head: invalid free space %z", bh);

This is fine.

HL> void reiserfs_panic (struct super_block * sb, const
HL> char * fmt, ...)
HL> {
HL>   show_reiserfs_locks() ;
HL>   do_reiserfs_warning(fmt);
HL>   printk ( KERN_EMERG "%s (device %s)\n", error_buf,
HL> bdevname(sb->s_dev));

This line looks this way in current bk tree:
  panic ("REISERFS: panic (device %s): %s\n",
         sb ? kdevname(sb->s_dev) : "sb == 0", error_buf);
And I think it was like this for some significant time already.
bk diffs output suggest that this change was in there since Feb 4th, 2002.

Are you using vanilla tree?
I seem to remember that bdevname was used early in 2.5.

Bye,
    Oleg

Re: reiserfs bug

[Vladimir Saveliev]

Hello

On Thu, 2004-07-01 at 10:09, Hongwei Li wrote:
> Hi:
> My machine am running linux-2.4.25, it crash in the
> reiser_panic.
> I looked at the oops and find out the followings:
> check_leaf_block_head pass the 0 as "sb" value, and
> cause reiser_panic crash.
> Any fix for this?
> 

Reiserfs found metadata corruption. It is supposed to not crash but
return i/o error, 

but you should reiserfsck your filesystem.

We have to improve reiserfs data corruption handling.

> static void check_leaf_block_head (struct buffer_head
> * bh)
> {
>   struct block_head * blkh;
>   int nr;
> 
>   blkh = B_BLK_HEAD (bh);
>   nr = blkh_nr_item(blkh);
>   if ( nr > (bh->b_size - BLKH_SIZE) / IH_SIZE)
>     reiserfs_panic (0, "vs-6010:
> check_leaf_block_head: invalid item number %z", bh);
>   if ( blkh_free_space(blkh) > 
>       bh->b_size - BLKH_SIZE - IH_SIZE * nr )
>     reiserfs_panic (0, "vs-6020:
> check_leaf_block_head: invalid free space %z", bh);
>     
> }
> 
> void reiserfs_panic (struct super_block * sb, const
> char * fmt, ...)
> {
>   show_reiserfs_locks() ;
>   do_reiserfs_warning(fmt);
>   printk ( KERN_EMERG "%s (device %s)\n", error_buf,
> bdevname(sb->s_dev));
>   BUG ();
> 
>   /* this is not actually called, but makes
> reiserfs_panic() "noreturn" */
>   panic ("REISERFS: panic (device %s): %s\n",
> 	 sb ? kdevname(sb->s_dev) : "sb == 0", error_buf);
> }
> 
> Li Hongwei
> 
> 
> 	
> 		
> __________________________________
> Do you Yahoo!?
> New and Improved Yahoo! Mail - 100MB free storage!
> http://promotions.yahoo.com/new_mail
> -
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at  http://www.tux.org/lkml/
> 

ReiserFS Bug

[Aleksander Adamowski]

This is a follow-up to my report from 2001-09-01 ("Bug in ReiserFS").
I updraded to 2.4.10.
After the incident my /home filesystem was unusable, users with their 
homedirs there couldn't login (login freezed).
I've got this in /var/log/messages (timestamps stripped):


Unable to handle kernel NULL pointer dereference at virtual address 
00000008
  printing eip:
c01717be
*pde = 00000000
Oops: 0000
CPU:    0
EIP:    0010:[leaf_copy_boundary_item+786/1796]
EFLAGS: 00010246
eax: 00001000   ebx: 00000017   ecx: c0e011e0   edx: 00000000
esi: 00003a70   edi: c3e80018   ebp: c1f95228   esp: c41817f8
ds: 0018   es: 0018   ss: 0018
Process gftp-gtk (pid: 9724, stackpage=c4181000)
Stack: c3e80018 00001000 00000011 00000017 ffffffff c0e011e0 00000000 
00000001
        c02a15c0 c016b82a c1f7a094 00000017 c0e01a80 c0172399 c41818a4 
c0e011e0
        00000001 ffffffff c41818a4 c4181894 ffffffff 00000011 c01725e0 
c41818a4
Call Trace: [get_num_ver+330/864] [leaf_copy_items+153/244] 
[leaf_move_items+68/132] [leaf_shift_right+27/68] [balance_leaf+3666/9696]
    [schedule+564/880] [__wait_on_buffer+128/140] [bread+74/104] 
[clear_all_dirty_bits+17/24] [do_balance+142/256] 
[reiserfs_insert_item+158/240]
    [indirect2direct+474/572] [maybe_indirect_to_direct+470/484] 
[reiserfs_cut_from_item+208/1104] [reiserfs_do_truncate+796/1068] 
[reiserfs_truncate_file+170/348] [reiserfs_file_release+801/844]
    [fput+76/224] [filp_close+92/100] [sys_close+67/84] 
[system_call+51/64]

Code: 8b 42 08 ff d0 83 c4 08 85 c0 75 07 31 c0 e9 d4 03 00 00 66