Hello, i am running 2.6.7 (vanilla) on x86_64, 
the bug is at the end of the mail.
I am attaching the .config file of my kernel.
The bugs were triggered pressing <tab> to 
activate the bash completion, but i did not find 
a way to reproduce it (yet).
I can't say if those are 2 different bug or the same bug.
Please excuse me if this bug is not directly 
reiserfs-related.

-- 
Best Regards
Maurizio Monge

"..the triumph of evil is for good men to do nothing." (Edmond Burke)



----------- [cut here ] --------- [please bite here ] ---------
Kernel BUG at prints:362
invalid operand: 0000 [1] PREEMPT
CPU 0
Modules linked in: ipt_multiport iptable_filter ip_tables sbp2 ieee1394 aes 
dm_crypt dm_mod sd_mod usbcore ide_cd cdrom sk98lin
Pid: 3683, comm: pdflush Not tainted 2.6.7
RIP: 0010:[<ffffffff801b8d83>] <ffffffff801b8d83>{reiserfs_panic+211}
RSP: 0000:0000010003ab1a98  EFLAGS: 00010212
RAX: 0000000000000044 RBX: ffffffff802e7377 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000010003ab18d8 RDI: 000001001ec187f0
RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: ffffffff8014d7b0 R12: 000001001fb7ca08
R13: 000001001fb7c800 R14: 0000000000000001 R15: 0000000000000001
FS:  0000002a958bf4c0(0000) GS:ffffffff803f3e00(0000) knlGS:0000000000000000
CS:  0010 DS: 0018 ES: 0018 CR0: 000000008005003b
CR2: 0000002a95914000 CR3: 0000000000101000 CR4: 00000000000006e0
Process pdflush (pid: 3683, threadinfo 0000010003ab0000, task 
000001001977a000)
Stack: 0000003000000010 0000010003ab1b88 0000010003ab1ab8 000001001fb7c800
       ffffffff803d0000 0000010003ab1b38 0000000000000000 0000000000000000
       0000000000000000 0000000000000000
Call Trace:<ffffffff8016aa10>{bh_wake_function+0} 
<ffffffff8016aa10>{bh_wake_function+0}
       <ffffffff801c3e64>{_update_journal_header_block+276}
       <ffffffff801c4981>{flush_journal_list+1057} 
<ffffffff801c4e06>{flush_used_journal_lists+742}
       <ffffffff801e1e93>{radix_tree_node_alloc+19} 
<ffffffff801e20e3>{radix_tree_insert+307}
       <ffffffff8014ac5a>{find_get_page+26} 
<ffffffff8016b301>{__find_get_block_slow+65}
       <ffffffff8016bdcd>{__find_get_block+493} 
<ffffffff8016e1e1>{__getblk_slow+177}
       <ffffffff801c84b2>{do_journal_end+3410} 
<ffffffff80143340>{keventd_create_kthread+0}
       <ffffffff801b59ae>{reiserfs_write_super+94} 
<ffffffff8016fc5f>{sync_supers+159}
       <ffffffff8014ff85>{wb_kupdate+53} <ffffffff80150cdf>{pdflush+399}
       <ffffffff8014ff50>{wb_kupdate+0} 
<ffffffff80143340>{keventd_create_kthread+0}
       <ffffffff80150b50>{pdflush+0} <ffffffff801432fd>{kthread+205}
       <ffffffff8010ed77>{child_rip+8} 
<ffffffff80143340>{keventd_create_kthread+0}
       <ffffffff80143230>{kthread+0} <ffffffff8010ed6f>{child_rip+0}


Code: 0f 0b d5 77 2e 80 ff ff ff ff 6a 01 4d 85 ed 48 c7 c2 80 25
RIP <ffffffff801b8d83>{reiserfs_panic+211} RSP <0000010003ab1a98>
 <3>scsi0 (0:0): rejecting I/O to dead device
Buffer I/O error on device dm-0, logical block 2469
lost page write due to I/O error on dm-0
Buffer I/O error on device dm-0, logical block 2470
lost page write due to I/O error on dm-0
REISERFS: panic (device dm-0): journal-601, buffer write failed





----------- [cut here ] --------- [please bite here ] ---------
Kernel BUG at prints:362
invalid operand: 0000 [2] PREEMPT
CPU 0
Modules linked in: ipt_multiport iptable_filter ip_tables sbp2 ieee1394 aes 
dm_crypt dm_mod sd_mod usbcore ide_cd cdrom sk98lin
Pid: 138, comm: reiserfs/0 Not tainted 2.6.7
RIP: 0010:[<ffffffff801b8d83>] <ffffffff801b8d83>{reiserfs_panic+211}
RSP: 0000:000001001f8e9d28  EFLAGS: 00010212
RAX: 0000000000000044 RBX: ffffffff802e7377 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 000001001f8e9b68 RDI: 000001001ec187f0
RBP: 00000100030d5c50 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: ffffffff8014d7b0 R12: 000001001fb7ca08
R13: 000001001fb7c800 R14: 0000000000000f02 R15: 0000000000000001
FS:  0000002a958bf4c0(0000) GS:ffffffff803f3e00(0000) knlGS:0000000000000000
CS:  0010 DS: 0018 ES: 0018 CR0: 000000008005003b
CR2: 0000002a958ce000 CR3: 0000000000101000 CR4: 00000000000006e0
Process reiserfs/0 (pid: 138, threadinfo 000001001f8e8000, task 
000001001fb667f0)
Stack: 0000003000000010 000001001f8e9e18 000001001f8e9d48 000001001fb796e8
       ffffffff803d0160 000001000063e9e0 000001000063e9e0 000001001f8e9de8
       0000000000000003 0000000000000000
Call Trace:<ffffffff8016ac06>{__wait_on_buffer+182} 
<ffffffff8016aa10>{bh_wake_function+0}
       <ffffffff8016aa10>{bh_wake_function+0} 
<ffffffff801c433b>{flush_comffffffff801c7292>{flush_async_commits+98}
       <ffffffff8013f93d>{worker_thread+541} 
<ffffffff8012c170>{default_wake_function+0}
       <ffffffff802cc6de>{thread_return+41} 
<ffffffff8012c170>{default_wake_function+0}
       <ffffffff80143340>{keventd_create_kthread+0} 
<ffffffff8013f720>{worker_thread+0}
       <ffffffff80143340>{keventd_create_kthread+0} 
<ffffffff801432fd>{kthread+205}
       <ffffffff8010ed77>{child_rip+8} 
<ffffffff80143340>{keventd_create_kthread+0}
       <ffffffff80143230>{kthread+0} <ffffffff8010ed6f>{child_rip+0}


Code: 0f 0b d5 77 2e 80 ff ff ff ff 6a 01 4d 85 ed 48 c7 c2 80 25
RIP <ffffffff801b8d83>{reiserfs_panic+211} RSP <000001001f8e9d28>
 <7>PCI: Setting latency timer of device 0000:00:11.5 to 64
codec_read: codec 0 is not valid [0xfe0000]
codec_read: codec 0 is not valid [0xfe0000]
codec_read: codec 0 is not valid [0xfe0000]
codec_read: codec 0 is not valid [0xfe0000]
scsi0 (0:0): rejecting I/O to dead device
ReiserFS: dm-0: warning: zam-7001: io error in reiserfs_find_entry
scsi0 (0:0): rejecting I/O to dead device
ReiserFS: dm-0: warning: zam-7001: io error in reiserfs_find_entry
scsi0 (0:0): rejecting I/O to dead device
scsi0 (0:0): rejecting I/O to dead device