lkml.org 
[lkml]   [2006]   [Jan]   [14]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
Patch in this message
/
Date
From
SubjectRe: Regression in Autofs, 2.6.15-git
"P. Christeas" <p_christ@hol.gr> wrote:
>
> On Saturday 14 January 2006 1:54 pm, Andrew Morton wrote:
> > "P. Christeas" <p_christ@hol.gr> wrote:
> > > On Saturday 14 January 2006 1:34 pm, you wrote:
> > > > Thanks for working that out.
> > > >
> > > > It works for me. Are you able to capture the oops output?
> > >
> > > Works in what sense? Are you able to reproduce the oops?
> >
> > No, I am not. I did `cd /net/<host>/usr/src' and things worked OK.
> >
> > > It is quite difficult to reproduce the oops, since it makes the whole
> > > system freeze (the fs part is oopsed, and then all processes depend on
> > > it). Hence I've called it "hard" . It may be captured with a serial
> > > console, I 'll give it a try..
> >
> > OK, thanks. Also if you're in the console a digital photo of the screen
> > works nicely.
>
> Here it is.

Great, thanks.

> (how do I load the symbols into gdb, so that I can see the source listing?
> With vmlinux on i386 it doesn't work.)

umm, I think this'll work:

Set CONFIG_DEBUG_INFO=y, rebuild, reboot

Look in /proc/modules, see autofs4's starting address

Calculate <offset>=<EIP>-<autofs4's starting address>

gdb /lib/modules/$(uname -r)/kernel/fs/autofs4/autofs4.ko

(gdb) l *<offset>

Still, we can work out what happened:

> Unable to handle kernel NULL pointer dereference at virtual address 00000030
> printing eip:
> *pde = 00000000
> Oops: 0000 [#1]
> PREEMPT SMP
> Modules linked in: nfs autofs4 cpufreq_ondemand cpufreq_userspace cpufreq_powersave p4_clockmod speedstep_lib freq_table nfsd exportfs lockd sunrpc irtty_sir sir_dev irda crc_ccitt rfcomm l2cap bluetooth snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device snd_pcm_oss snd_mixer_oss snd_atiixp snd_ac97_codec snd_ac97_bus snd_pcm snd_timer snd_page_alloc i2c_isa 8139too eth1394 sd_mod ohci1394 ieee1394 loop cx88_blackbird cx8802 tda9887 tuner cx8800 cx88xx i2c_algo_bit video_buf ir_common tveeprom i2c_core btcx_risc usb_storage scsi_mod usbhid ehci_hcd ohci_hcd usbcore video container button battery
> CPU: 1
> EIP: 0060:[<c0162875>] Not tainted VLI
> EFLAGS: 00210202 (2.6.15xrg-gf33dc619)
> EIP is at touch_atime+0x43/0x9f
> eax: 40000000 ebx: db67435c ecx: d8942a00 edx: 00000004
> esi: d3aba6c0 edi: d7e942b0 ebp: 00000004 esp: d3cede50
> ds: 007b es: 007b ss: 0068
> Process konqueror (pid: 4751, threadinfo=d3cec000 task=dfda6a90)
> Stack: <0>00000001 00000001 d362fd50 d3aba6c0 e1b0e727 00000004 d362fd50 00000000
> d3aba6c0 d362fd50 00000000 e1b0edd7 00000004 d362fd50 00000002 d371b8bc
> d362fd50 d362fd50 c1627d40 e1b0e909 d362fd50 d3cedea8 db67435c 00000004
> Call Trace:
> [<e1b0e727>] autofs4_update_usage+0x2c/0x4b [autofs4]
> [<e1b0edd7>] autofs4_revalidate+0x10d/0x121 [autofs4]
> [<e1b0e909>] autofs4_dir_open+0xb7/0x19b [autofs4]
> [<c0158627>] permission+0x7f/0x8c
> [<c0158647>] vfs_permission+0x13/0x17
> [<c0159da5>] may_open+0x53/0x1a1
> [<e1b0e852>] autofs4_dir_open+0x0/0x19b [autofs4]
> [<c014c7cf>] __dentry_open+0xe7/0x1e5
> [<c014c98c>] nameidata_to_filp+0x1f/0x31
> [<c014c8fd>] filp_open+0x30/0x38
> [<c014cb69>] do_sys_open+0x3c/0xaf
> [<c01027cf>] sysenter_past_esp+0x54/0x75
> Code: a8 01 75 7e f6 83 78 01 00 00 02 75 75 f6 c4 04 75 70 f6 c4 08 74 10 0f b7 43 28 25 00 f0 00 00 3d 00 40 00 00 74 5b 85 d2 74 1b <8b> 42 2c a8 08 75 50 a8 10 74 10 0f b7 43 28 25 00 f0 00 00 3d
> <6>note: konqueror[4751] exited with preempt_count 1
>

We test incoming arg `mnt' for NULL so we can ignore that.

You oopsed accessing 0x00000030, and offsetof(super_block, s_flags) is
0x30. So autofs4 has passed in a dentry which has a NULL
dentry->d_inode->i_sb and the new code didn't expect that.


A temp workaround would be something like this:

diff -puN fs/inode.c~a fs/inode.c
--- devel/fs/inode.c~a 2006-01-14 05:16:16.000000000 -0800
+++ devel-akpm/fs/inode.c 2006-01-14 05:17:00.000000000 -0800
@@ -1194,8 +1194,9 @@ void touch_atime(struct vfsmount *mnt, s
return;

if ((inode->i_flags & S_NOATIME) ||
- (inode->i_sb->s_flags & MS_NOATIME) ||
- ((inode->i_sb->s_flags & MS_NODIRATIME) && S_ISDIR(inode->i_mode)))
+ (inode->i_sb && (inode->i_sb->s_flags & MS_NOATIME)) ||
+ ((inode->i_sb && (inode->i_sb->s_flags & MS_NODIRATIME)) &&
+ S_ISDIR(inode->i_mode)))
return;

/*
_
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2006-01-14 14:20    [W:0.092 / U:0.064 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site