[2.6.3] Ooops ext3_lookup -> d_splice_alias -> d_move

[2.6.3] Ooops ext3_lookup -> d_splice_alias -> d_move

[Florian Lohoff]

[-- Attachment #1.1: Type: text/plain, Size: 3352 bytes --]

Hi,
this happened a couple minutes ago (grepped from syslog).

Machine is a Sony Picturebook C1-MHP with an TM5800 - Root
filesystem is ext3 (The only on-disk filesystem).

Linux paradigm 2.6.3-paradigm #1 Mon Feb 23 18:23:17 CET 2004 i686 unknown
gcc used is an 2.95.4-debian-prerelease

Unable to handle kernel NULL pointer dereference at virtual address 00000007
 printing eip:
c015d2f8
*pde = 00000000
Oops: 0002 [#1]
CPU:    0
EIP:    0060:[d_move+416/536]    Not tainted
EFLAGS: 00010283
EIP is at d_move+0x1a0/0x218
eax: 00000003   ebx: c7cb0418   ecx: ccfea678   edx: cde3f620
esi: ccfea660   edi: c7cb0400   ebp: ccfea6c8   esp: cdb25e30
ds: 007b   es: 007b   ss: 0068
Process receive (pid: 4889, threadinfo=cdb24000 task=c14b8d00)
Stack: cdb24000 c7cb0428 c7d07cd4 ccfea660 c7cb0480 ccfea6c8 c7cb0468 ccfea6e0 
       ccfea678 c015cd7c c7cb0400 ccfea660 ccfea660 c7d07cd4 c139e200 ccfea660 
       cde2f620 c7cb0400 c017af35 c7d07cd4 ccfea660 fffffff4 cddca9b4 ccfea660 
Call Trace:
 [d_splice_alias+150/231] d_splice_alias+0x96/0xe7
 [ext3_lookup+135/164] ext3_lookup+0x87/0xa4
 [real_lookup+88/197] real_lookup+0x58/0xc5
 [do_lookup+69/126] do_lookup+0x45/0x7e
 [link_path_walk+587/2063] link_path_walk+0x24b/0x80f
 [path_lookup+304/308] path_lookup+0x130/0x134
 [__user_walk+40/64] __user_walk+0x28/0x40
 [vfs_stat+25/70] vfs_stat+0x19/0x46
 [dput+26/468] dput+0x1a/0x1d4
 [__fput+208/240] __fput+0xd0/0xf0
 [sys_stat64+19/45] sys_stat64+0x13/0x2d
 [fput+19/20] fput+0x13/0x14
 [filp_close+95/104] filp_close+0x5f/0x68
 [sys_close+88/123] sys_close+0x58/0x7b
 [syscall_call+7/11] syscall_call+0x7/0xb

Code: 89 48 04 89 46 18 8d 6a 20 89 69 04 89 4a 20 8b 47 64 8b 50 
 <6>note: receive[4889] exited with preempt_count 4
bad: scheduling while atomic!
Call Trace:
 [schedule+60/1248] schedule+0x3c/0x4e0
 [common_interrupt+24/32] common_interrupt+0x18/0x20
 [__cond_resched+23/27] __cond_resched+0x17/0x1b
 [unmap_vmas+324/466] unmap_vmas+0x144/0x1d2
 [exit_mmap+100/340] exit_mmap+0x64/0x154
 [mmput+95/117] mmput+0x5f/0x75
 [do_exit+398/898] do_exit+0x18e/0x382
 [do_divide_error+0/162] do_divide_error+0x0/0xa2
 [do_page_fault+830/1161] do_page_fault+0x33e/0x489
 [do_page_fault+0/1161] do_page_fault+0x0/0x489
 [schedule+1081/1248] schedule+0x439/0x4e0
 [do_ide_request+18/22] do_ide_request+0x12/0x16
 [generic_unplug_device+73/101] generic_unplug_device+0x49/0x65
 [__wait_on_buffer+170/178] __wait_on_buffer+0xaa/0xb2
 [error_code+45/56] error_code+0x2d/0x38
 [d_move+416/536] d_move+0x1a0/0x218
 [d_splice_alias+150/231] d_splice_alias+0x96/0xe7
 [ext3_lookup+135/164] ext3_lookup+0x87/0xa4
 [real_lookup+88/197] real_lookup+0x58/0xc5
 [do_lookup+69/126] do_lookup+0x45/0x7e
 [link_path_walk+587/2063] link_path_walk+0x24b/0x80f
 [path_lookup+304/308] path_lookup+0x130/0x134
 [__user_walk+40/64] __user_walk+0x28/0x40
 [vfs_stat+25/70] vfs_stat+0x19/0x46
 [dput+26/468] dput+0x1a/0x1d4
 [__fput+208/240] __fput+0xd0/0xf0
 [sys_stat64+19/45] sys_stat64+0x13/0x2d
 [fput+19/20] fput+0x13/0x14
 [filp_close+95/104] filp_close+0x5f/0x68
 [sys_close+88/123] sys_close+0x58/0x7b
 [syscall_call+7/11] syscall_call+0x7/0xb

-- 
Florian Lohoff                  flo@rfc822.org             +49-171-2280134
                        Heisenberg may have been here.

[-- Attachment #1.2: config-2.6.3.gz --]
[-- Type: application/octet-stream, Size: 7799 bytes --]

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]