hfsplus Kernel module crashes

[David Leder]

After some weeks of a mounted USB mass storage device, the hfsplus Kernel module crashes, leaving the file system half-mounted, but not unmountable, as there were processes in the mounted directory tree.

I don't know if the root cause was a bug in updatedb, but a kernel module should never crash on userland process investigation.

I don't think the file system was perfectly clear:
[1700207.162684] hfs: inconsistency in B*Tree (1,0,1,0,2620)

But the crash is quite a few times later:

Here's the stack trace:

[1785597.415062] Modules linked in: nls_utf8 btrfs zlib_deflate libcrc32c ufs qnx4 hfsplus hfs minix ntfs vfat msdos fat jfs xfs reiserfs usb_storage uas bnep rfcomm bluetooth pci_stub vboxpci vboxnetadp vboxnetflt vboxdrv parport_pc ppdev binfmt_misc joydev snd_hda_codec_realtek snd_hda_intel snd_hda_codec snd_hwdep snd_pcm radeon snd_seq_midi snd_rawmidi snd_seq_midi_event snd_seq snd_timer snd_seq_device snd ttm soundcore snd_page_alloc drm_kms_helper drm video dcdbas i2c_algo_bit mei(C) psmouse serio_raw lp parport usbhid hid e1000e ahci libahci
[1785597.415257]
[1785597.415263] Pid: 21313, comm: updatedb.mlocat Tainted: G C 3.0.0-17-generic #30-Ubuntu Dell Inc. OptiPlex 790/0HY9JP
[1785597.415297] RIP: 0010:[<ffffffff812f5af0>] [<ffffffff812f5af0>] memcpy+0x10/0x120
[1785597.415322] RSP: 0018:ffff8800c6a8f7a0 EFLAGS: 00010202
[1785597.415337] RAX: ffff8800c6a8f826 RBX: ffff8800c6a8f826 RCX: 0000000000000002
[1785597.415357] RDX: 0000000000000002 RSI: db73880000000639 RDI: ffff8800c6a8f826
[1785597.415376] RBP: ffff8800c6a8f808 R08: 0000000000000011 R09: 6db6db6db6db6db7
[1785597.415395] R10: ffff880000000000 R11: 0000000000000003 R12: 0000000000000002
[1785597.415414] R13: 0000000000000002 R14: 0000000000000002 R15: ffff880030ef9540
[1785597.415434] FS: 00007fc0f3366720(0000) GS:ffff88012dc60000(0000) knlGS:0000000000000000
[1785597.415455] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[1785597.415471] CR2: 00007fc0f3362000 CR3: 000000007dc65000 CR4: 00000000000426e0
[1785597.415490] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[1785597.415510] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[1785597.415529] Process updatedb.mlocat (pid: 21313, threadinfo ffff8800c6a8e000, task ffff880002ce4560)
[1785597.415553] Stack:
[1785597.415559] ffffffffa06e3941 ffff8800c6a8f818 ffff880000000000 6db6db6db6db6db7
[1785597.415583] 0000160000000000 0000000000000011 0000000000000000 000000000000000b
[1785597.415607] ffff880030ef9540 ffff880030ef9540 ffff8800c6a8f970 00000000000000e3
[1785597.415637] Call Trace:
[1785597.415652] [<ffffffffa06e3941>] ? hfsplus_bnode_read+0xb1/0x140 [hfsplus]
[1785597.415672] [<ffffffffa06e39ed>] hfsplus_bnode_read_u16+0x1d/0x30 [hfsplus]
[1785597.415692] [<ffffffffa06e56e7>] hfsplus_brec_keylen+0x67/0x90 [hfsplus]
[1785597.415712] [<ffffffffa06e601b>] __hplusfs_brec_find+0x6b/0x170 [hfsplus]
[1785597.415732] [<ffffffffa06e61fe>] hfsplus_brec_find+0xde/0x150 [hfsplus]
[1785597.415751] [<ffffffffa06e6297>] hfsplus_brec_read+0x27/0x70 [hfsplus]
[1785597.415770] [<ffffffffa06e2c65>] hfsplus_lookup+0x185/0x2c0 [hfsplus]
[1785597.415790] [<ffffffff81153e9f>] ? kmem_cache_free+0x2f/0x120
[1785597.415807] [<ffffffff81246906>] ? jbd2_journal_stop+0x1b6/0x2a0
[1785597.416769] [<ffffffff81199364>] ? block_write_end+0x44/0x80
[1785597.417940] [<ffffffff81222858>] ? __ext4_journal_stop+0x78/0xa0
[1785597.418989] [<ffffffff8120b729>] ? ext4_da_write_end+0x109/0x310
[1785597.419918] [<ffffffff81246906>] ? jbd2_journal_stop+0x1b6/0x2a0
[1785597.420844] [<ffffffffa07c901a>] ? char2uni+0x1a/0x50 [nls_utf8]
[1785597.421765] [<ffffffff81153e4d>] ? kmem_cache_alloc+0x11d/0x140
[1785597.422681] [<ffffffff8117d897>] ? d_alloc+0x27/0x1d0
[1785597.423584] [<ffffffff81172f05>] d_alloc_and_lookup+0x45/0x90
[1785597.424644] [<ffffffff811808f5>] ? d_lookup+0x35/0x60
[1785597.425888] [<ffffffff81175184>] do_lookup+0x224/0x2c0
[1785597.426969] [<ffffffff81176fbc>] path_lookupat+0x11c/0x700
[1785597.427861] [<ffffffff8110c636>] ? generic_file_aio_write+0x96/0xe0
[1785597.428752] [<ffffffff812f6217>] ? __strncpy_from_user+0x27/0x60
[1785597.429643] [<ffffffff811775d1>] do_path_lookup+0x31/0xc0
[1785597.430531] [<ffffffff81177ef9>] user_path_at_empty+0x59/0xa0
[1785597.431432] [<ffffffff812b8974>] ? apparmor_inode_getattr+0x54/0x60
[1785597.432381] [<ffffffff815f2e8e>] ? _raw_spin_lock+0xe/0x20
[1785597.433282] [<ffffffff8116cdc8>] ? cp_new_stat+0xf8/0x110
[1785597.434185] [<ffffffff81177f51>] user_path_at+0x11/0x20
[1785597.435093] [<ffffffff8116cff4>] vfs_fstatat+0x44/0x70
[1785597.435990] [<ffffffff8116d03e>] vfs_lstat+0x1e/0x20
[1785597.436874] [<ffffffff8116d1da>] sys_newlstat+0x1a/0x40
[1785597.437854] [<ffffffff815fb342>] system_call_fastpath+0x16/0x1b
[1785597.438826] Code: 43 4e 48 83 c4 08 5b 5d c3 66 90 e8 fb fd ff ff eb e6 90 90 90 90 90 90 90 90 90 48 89 f8 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 <f3> a4 c3 20 48 83 ea 20 4c 8b 06 4c 8b 4e 08 4c 8b 56 10 4c 8b
[1785597.440740] RIP [<ffffffff812f5af0>] memcpy+0x10/0x120
[1785597.441663] RSP <ffff8800c6a8f7a0>
[1785597.481628] ---[ end trace bb844955408b4d84 ]---

My system:
root@kathy:~# uname -a
Linux kathy 3.0.0-17-generic #30-Ubuntu SMP Thu Mar 8 20:45:39 UTC 2012 x86_64 x86_64 x86_64 GNU/Linux

[Brad Figg (brad-figg)]

This bug is missing log files that will aid in diagnosing the problem. From a terminal window please run:

apport-collect 1027887

and then change the status of the bug to 'Confirmed'.

If, due to the nature of the issue you have encountered, you are unable to run this command, please add a comment stating that fact and change the bug status to 'Confirmed'.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

[David Leder (david-leder+ubuntulaunchpad)]

added syslog

[Luis Henriques (henrix)]

Hi David,

Is this bug easily reproducible? Also, could you please try to upgrade your kernel and check whether the issue still occurs? The kernel your using ( 3.0.0-17.30) is not the most recent one and a few fixes to the hfsplus have been pushed already.

Thanks.

[Launchpad Janitor (janitor)]

[Expired for linux (Ubuntu) because there has been no activity for 60 days.]