FS#12491 - Kernel Oops Mounting on Loop Device

Attached to Project: Arch Linux
Opened by kludge (kludge) - Thursday, 18 December 2008, 06:15 GMT
Last edited by Aaron Griffin (phrakture) - Tuesday, 20 January 2009, 18:12 GMT
Task Type Bug Report
Category Kernel
Status Closed
Assigned To No-one
Architecture i686
Severity Medium
Priority Normal
Reported Version None
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Mounting a .iso file on fs mount-point causes a kernel oops and leaves the mount process hungs in D state.

The log of the

BUG: unable to handle kernel NULL pointer dereference at 00000001
IP: [<e10c5808>] :loop:loop_thread+0x128/0x460
*pde = 00000000
Oops: 0000 [#1] PREEMPT SMP
Modules linked in: isofs zlib_inflate loop mach64 drm reiserfs ext3 jbd mbcache sha256_generic cbc irtty_sir sir_dev ppdev lp ndiswrapper pcmcia ppp_generic parport_pc nsc_ircc video output parport i2c_piix4 irda crc_ccitt i2c_core psmouse e100 snd_pcsp sr_mod uhci_hcd intel_agp serio_raw sg cdrom isp1760 yenta_socket rsrc_nonstatic usbcore agpgart eepro100 pcmcia_core shpchp pci_hotplug thermal processor fan button battery ac snd_cs46xx gameport snd_ac97_codec snd_rawmidi snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device snd_pcm_oss evdev snd_pcm snd_timer snd_page_alloc snd_mixer_oss snd soundcore ac97_bus slhc thinkpad_acpi rfkill led_class nvram mii rtc_cmos rtc_core rtc_lib jfs aes_i586 aes_generic xts gf128mul dm_crypt dm_mod crypto_blkcipher sd_mod ata_piix ata_generic libata scsi_mod dock

Pid: 5979, comm: loop0 Tainted: P (2.6.27-ARCH #1)
EIP: 0060:[<e10c5808>] EFLAGS: 00010297 CPU: 0
EIP is at loop_thread+0x128/0x460 [loop]
EAX: db561400 EBX: 00000001 ECX: d3897fb4 EDX: 00001000
ESI: d864f060 EDI: 00008000 EBP: 00000000 ESP: d3897f68
DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
Process loop0 (pid: 5979, ti=d3896000 task=d38cc400 task.ti=d3896000)
Stack: dfa7c334 dfb231e0 00000001 db56151c db5614ec db561400 d864f060 d3896000
00000000 00000000 c0317e55 c012768f 00001000 c4f04a5f 00000080 d389c000
00000003 d38cc580 d84f5bdc db561400 d38cc400 c013fbc0 d3897fc0 d3897fc0
Call Trace:
[<c0317e55>] _spin_unlock_irq+0x5/0x30
[<c012768f>] finish_task_switch+0x1f/0xb0
[<c013fbc0>] autoremove_wake_function+0x0/0x50
[<e10c56e0>] loop_thread+0x0/0x460 [loop]
[<c013f8c9>] kthread+0x39/0x70
[<c013f890>] kthread+0x0/0x70
[<c0104bb3>] kernel_thread_helper+0x7/0x14
=======================
Code: b7 41 18 39 44 24 20 0f 8d 46 03 00 00 8b 4c 24 20 8d 04 49 8d 1c 82 8d 74 26 00 8b 44 24 14 8d 4c 24 4c 8b 54 24 30 89 44 24 4c <8b> 03 89 44 24 50 8b 43 08 89 54 24 58 8b 54 24 14 c7 44 24 34
EIP: [<e10c5808>] loop_thread+0x128/0x460 [loop] SS:ESP 0068:d3897f68
---[ end trace a17cf2bd53e1abc8 ]---


Additional info:
kernel : kernel26 2.6.27.8-1
uname -a: Linux laura 2.6.27-ARCH #1 SMP PREEMPT Fri Nov 14 09:33:13 UTC 2008 i686 Pentium III
platform: ibm thinkpad a21m

Steps to reproduce:

modprobe -v loop
mount path/to/cdrom_image.iso /mnt/iso -t iso9660 -o loop=/dev/loop0
This task depends upon

Closed by  Aaron Griffin (phrakture)
Tuesday, 20 January 2009, 18:12 GMT
Reason for closing:  Upstream
Additional comments about closing:  Fixed in 2.6.28
Comment by kludge (kludge) - Thursday, 25 December 2008, 17:47 GMT
bug persists after upgrade to kernl 2.6.28.10. status?
Comment by kludge (kludge) - Thursday, 25 December 2008, 17:52 GMT
err. fat-fingered it... i mean 2.6.27.10.
Comment by kludge (kludge) - Tuesday, 20 January 2009, 05:17 GMT
apparently fixed by 2.6.28. no longer appears. wonder why?

Loading...