Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1756660AbYHNHM7 (ORCPT ); Thu, 14 Aug 2008 03:12:59 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1752277AbYHNHMs (ORCPT ); Thu, 14 Aug 2008 03:12:48 -0400 Received: from queueout03-winn.ispmail.ntl.com ([81.103.221.33]:45195 "EHLO queueout03-winn.ispmail.ntl.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752337AbYHNHMr (ORCPT ); Thu, 14 Aug 2008 03:12:47 -0400 X-Greylist: delayed 595 seconds by postgrey-1.27 at vger.kernel.org; Thu, 14 Aug 2008 03:12:47 EDT From: Ian Campbell To: linux-kernel@vger.kernel.org Cc: Jeremy Fitzhardinge , Kel Modderman , Hugh Dickins Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-H+6V7Hu0m7Q5+0N9Np6i" Date: Thu, 14 Aug 2008 08:02:42 +0100 Message-Id: <1218697362.26014.9.camel@localhost.localdomain> Mime-Version: 1.0 X-Mailer: Evolution 2.22.3.1 X-SA-Exim-Connect-IP: 192.168.1.5 X-SA-Exim-Mail-From: ijc@hellion.org.uk Subject: kernel BUG at lib/radix-tree.c:473! X-SA-Exim-Version: 4.2.1 (built Tue, 09 Jan 2007 17:23:22 +0000) X-SA-Exim-Scanned: Yes (on hopkins.hellion.org.uk) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 5123 Lines: 123 --=-H+6V7Hu0m7Q5+0N9Np6i Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Jeremy first noticed this http://marc.info/?l=3Dlinux-kernel&m=3D121783008503477&w=3D2 [ 3.132333] ------------[ cut here ]------------ [ 3.132343] kernel BUG at /home/ijc/development/kernel/2.6.git/lib/radix= -tree.c:473! [ 3.132348] invalid opcode: 0000 [#1] SMP=20 [ 3.132352] Modules linked in: [ 3.132356]=20 [ 3.132363] Pid: 580, comm: debconf Tainted: G W (2.6.26 #27) [ 3.132368] EIP: 0061:[] EFLAGS: 00010002 CPU: 0 [ 3.132375] EIP is at radix_tree_tag_set+0x1d/0x9f [ 3.132379] EAX: c203af30 EBX: c261b8c0 ECX: 00000000 EDX: 00000001 [ 3.132383] ESI: 00000000 EDI: 00000001 EBP: c7977ce8 ESP: c7977cc8 [ 3.132387] DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0069 [ 3.132392] Process debconf (pid: 580, ti=3Dc7976000 task=3Dc538a240 tas= k.ti=3Dc7976000) [ 3.132396] Stack: fffede22 00000000 00000001 c203af30 c203af2c c261b8c0= c203af2c 00000001=20 [ 3.132406] c7977cfc c01a1570 c261b8c0 c203af2c c2563000 c7977d0c= c01a1a24 c261b8c0=20 [ 3.132416] 00000001 c7977d1c c01682fc c261b8c0 00000001 c7977d2c= c0169185 c261b8c0=20 [ 3.132425] Call Trace: [ 3.132428] [] ? __set_page_dirty+0xdf/0x11f [ 3.132434] [] ? __set_page_dirty_buffers+0x68/0x6c [ 3.132441] [] ? set_page_dirty+0x34/0x94 [ 3.132446] [] ? set_page_dirty_balance+0xe/0x3c [ 3.132452] [] ? __do_fault+0x35d/0x37e [ 3.132458] [] ? handle_mm_fault+0x45d/0x9c9 [ 3.132463] [] ? __d_lookup+0xb7/0xeb [ 3.132469] [] ? kfree+0x81/0x88 [ 3.132474] [] ? _spin_unlock_irqrestore+0x19/0x1f [ 3.132481] [] ? _spin_unlock_irqrestore+0x19/0x1f [ 3.132487] [] ? do_page_fault+0x3be/0x8d0 [ 3.132493] [] ? fb_ioctl+0x1a2/0x2de [ 3.132499] [] ? pvclock_clocksource_read+0x48/0xa3 [ 3.132506] [] ? _spin_unlock_irqrestore+0x19/0x1f [ 3.132512] [] ? hrtimer_start+0x12a/0x144 [ 3.132519] [] ? xen_mc_flush+0x123/0x160 [ 3.132525] [] ? xen_mc_flush+0x13a/0x160 [ 3.136027] [] ? xen_leave_lazy+0x12/0x14 [ 3.136027] [] ? __switch_to+0xec/0x126 [ 3.136027] [] ? finish_task_switch+0x32/0xa5 [ 3.136027] [] ? schedule+0x6cc/0x735 [ 3.136027] [] ? vfs_ioctl+0x57/0x69 [ 3.136027] [] ? sys_ioctl+0x50/0x5a [ 3.136027] [] ? do_page_fault+0x0/0x8d0 [ 3.136027] [] ? error_code+0x72/0x78 [ 3.136027] =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D [ 3.136027] Code: b4 89 42 04 83 c4 50 89 d8 5b 5e 5f 5d c3 55 89 e5 57 = 56 53 83 ec 14 89 45 ec 89 55 e8 89 4d e4 8b 30 3b 14 b5 88 52 3a c0 76 04 = <0f> 0b eb fe 8b 45 ec 8b 4d e4 8b 58 08 6b c6 06 c1 e1 03=20 [ 3.136027] EIP: [] radix_tree_tag_set+0x1d/0x9f SS:ESP 0069:c= 7977cc8 [ 3.136027] ---[ end trace 991579adcab01bbf ]--- I've bisected it down to: commit 14fcc23fdc78e9d32372553ccf21758a9bd56fa1 Author: Hugh Dickins Date: Mon Jul 28 15:46:19 2008 -0700 tmpfs: fix kernel BUG in shmem_delete_inode =20 SuSE's insserve initscript ordering program hits kernel BUG at mm/shmem= .c:814 on 2.6.26. It's using posix_fadvise on directories, and the shmem_read= page method added in 2.6.23 is letting POSIX_FADV_WILLNEED allocate useless = pages to a tmpfs directory, incrementing i_blocks count but never decrementin= g it. =20 Fix this by assigning shmem_aops (pointing to readpage and writepage an= d set_page_dirty) only when it's needed, on a regular file or a long syml= ink. =20 Many thanks to Kel for outstanding bugreport and steps to reproduce it. =20 Reported-by: Kel Modderman Tested-by: Kel Modderman Signed-off-by: Hugh Dickins Cc: [2.6.25.x, 2.6.26.x] Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds Reverting this patch from current Linus tree (b635acec48bcaa9183fcbf4e3955616b0d4119b5) causes the problem to go away. I haven't yet seen the link between the backtrace and this changeset though. Ian. --=20 Ian Campbell Preserve wildlife -- pickle a squirrel today! --=-H+6V7Hu0m7Q5+0N9Np6i Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEABECAAYFAkij2JIACgkQM0+0qS9rzVl8xQCfc5qFWL7eZmqccLQBxdP1aRxe pwwAnjMYT0kZgcFui/hhJgwUXcNCOMLb =YlY0 -----END PGP SIGNATURE----- --=-H+6V7Hu0m7Q5+0N9Np6i-- -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/