[Unionfs] kernel BUG at fs/unionfs/fanout.h:128!

[Olivier Blin]

Dale Dude <dale at daledude.com> writes:

> Sep 15 12:21:53 newstorage1 kernel: [ 4443.426436] ------------[ cut
> here ]------------
> Sep 15 12:21:53 newstorage1 kernel: [ 4443.426464] kernel BUG at
> fs/unionfs/fanout.h:128!

I have the same bug, and tried not to inline unionfs_lower_inode_idx
to get a more complete trace (the bug reads fanout.h:133, but it's
fanout.h:128 in the original source code).

It happens in an union of a squashfs + tmpfs, in which the system
pivot_roots.

------------[ cut here ]------------
kernel BUG at fs/unionfs/fanout.h:133!
invalid opcode: 0000 [#1]
SMP 
Modules linked in: button dock battery ac binfmt_misc dm_mirror dm_mod floppy pcspkr i2c_piix4 i2c_core pcnet32 mii sg evdev tsdev ide_generic unionfs squashfs loop isofs nls_utf8 nls_iso8859_15 nls_iso8859_14 nls_iso8859_13 nls_iso8859_9 nls_iso8859_7 nls_iso8859_6 nls_iso8859_5 nls_iso8859_4 nls_iso8859_3 nls_iso8859_2 nls_iso8859_1 usb_storage lpfc sym53c8xx aic79xx aic7xxx nsp32 tmscsim stex qla2xxx qla1280 dmx3191d dc395x atp870u aha152x a100u2w BusLogic pata_via pata_triflex pata_sl82c105 pata_sil680 pata_serverworks pata_sc1200 pata_rz1000 pata_radisys pata_platform pata_pdc202xx_old pata_optidma pata_opti pata_oldpiix pata_ns87410 pata_netcell pata_mpiix pata_marvell pata_jmicron pata_it8213 pata_it821x pata_isapnp pata_hpt3x3 pata_hpt3x2n pata_hpt37x pata_hpt366 pata_efar pata_cypress pata_cs5535 pata_cs5530 pata_cs5520 pata_cmd640 pata_cmd64x pata_atiixp pata_artop pata_amd pata_ali sx8 sata_vsc sata_via sata_uli sata_sx4 sata_svw sata_sis sata_sil24 sata_sil sata_qstor sata_promise sata_nv sata_mv sata_inic162x pdc_adma pata_pdc2027x ata_piix aic94xx ahci sd_mod trm290 triflex tc86c001 slc90e66 sc1200 rz1000 it8213 delkin_cb cs5535 cs5530 cs5520 aec62xx imm ppa qla4xxx mptspi mptsas mptfc megaraid_sas megaraid_mbox megaraid it821x ipr i2o_block hptiop DAC960 cpqarray cciss arcmsr aacraid 3w_xxxx 3w_9xxx sr_mod ide_cd uhci_hcd ohci_hcd ehci_hcd qlogicfas408 pata_sis libsas parport scsi_transport_iscsi scsi_transport_spi scsi_transport_sas scsi_transport_fc mptscsih mptbase megaraid_mm libata i2o_core scsi_mod ide_core usbcore
CPU:    0
EIP:    0060:[<d0ca7b06>]    Not tainted VLI
EFLAGS: 00010292   (2.6.22.6-desktop586-2mdv #1)
EIP is at unionfs_lower_inode_idx+0x26/0x40 [unionfs]
eax: 00000025   ebx: ce1f5e14   ecx: 00000094   edx: 00000000
esi: ffffffff   edi: ce1f5de4   ebp: ccacddb0   esp: ccacdda8
ds: 007b   es: 007b   fs: 00d8  gs: 0033  ss: 0069
Process libc (pid: 3833, ti=ccacc000 task=cf5e6550 task.ti=ccacc000)
Stack: d0cb7110 ffffffff ccacde0c d0ca7d54 00000000 ccbf969c 0000000b 00000000 
       00000000 00000000 ccb70cc4 cf4bcca4 ccacde44 ccbf963c 00000000 00000000 
       00000000 cc37a2c0 cffdfe20 cbe0b278 00000001 00000001 c045f7e0 ccacde44 
Call Trace:
 [<c01058da>] show_trace_log_lvl+0x1a/0x30
 [<c0105999>] show_stack_log_lvl+0xa9/0xd0
 [<c0105ba2>] show_registers+0x1e2/0x300
 [<c0105dc9>] die+0x109/0x240
 [<c0105f83>] do_trap+0x83/0xb0
 [<c0106338>] do_invalid_op+0x88/0xa0
 [<c03138d2>] error_code+0x72/0x80
 [<d0ca7d54>] unionfs_setattr+0x234/0x410 [unionfs]
 [<c0195cd6>] notify_change+0x2d6/0x390
 [<c0180349>] do_truncate+0x69/0x80
 [<c0189b2e>] may_open+0x1ae/0x280
 [<c018beca>] open_namei+0x7a/0x690
 [<c017fc6b>] do_filp_open+0x2b/0x50
 [<c017fcd5>] do_sys_open+0x45/0xe0
 [<c017fdac>] sys_open+0x1c/0x20
 [<c0104202>] sysenter_past_esp+0x6b/0xa9
 =======================
Code: 0b eb fe 90 90 55 89 e5 83 ec 08 85 c0 74 26 85 d2 78 08 8b 40 f8 8b 04 90 c9 c3 89 54 24 04 c7 04 24 10 71 cb d0 e8 1a 3b 48 ef <0f> 0b eb fe 8d b6 00 00 00 00 0f 0b eb fe 8d b6 00 00 00 00 8d 
EIP: [<d0ca7b06>] unionfs_lower_inode_idx+0x26/0x40 [unionfs] SS:ESP 0069:ccacdda8
Starting resolvconf: /etc/resolvconf/update.d/libc: line 120:  3833 Segmentation fault      cat "$TMPFILE" > "$DYNAMICRSLVCNFFILE"
run-parts: /etc/resolvconf/update.d/libc exited with return code 139

-- 
Olivier Blin - Mandriva