Umount reiserfs partition caused crash on 2.6.18-rc3-mm2

[Lei CL Cheng]

Hi,

I installed latest mm kernel 2.6.18-rc3-mm2 on ppc64 with RHEL4-U3.
And I made a reiserfs partition by mkfs command in this kernel.
But when I tried to umount this reiserfs partition, the kernel
crashed and xmon will be entered.

the steps:
 1. mkfs -t reiserfs -f --format 3.6 /dev/sdb
 2. mount /dev/sdb /mnt/tmp
 3. umount /mnt/tmp

Additional information:
./mkreiserfs -V
mkreiserfs 3.6.19 (2003 www.namesys.com)

The error message printed by xmon is like:
---------------------------------------------
  BUG: Dentry c0000000718178a0{i=3,n=.reiserfs_priv} still in use (1)
    [unmount
  of reiserfs sdb]
  kernel BUG in shrink_dcache_for_umount_subtree at fs/dcache.c:611!
  cpu 0x3: Vector: 700 (Program Check) at [c0000001667ef690]
    pc: c0000000000e06cc: .shrink_dcache_for_umount_subtree+0x214/0x364
    lr: c0000000000e06c8: .shrink_dcache_for_umount_subtree+0x210/0x364
    sp: c0000001667ef910
    msr: 8000000000029032
    current = 0xc00000007180b040
    paca    = 0xc000000000567800
    pid   = 5220, comm = umount
  kernel BUG in shrink_dcache_for_umount_subtree at fs/dcache.c:611!
  enter ? for help

  2:mon> t
  [c0000001667ef9a0] c0000000000e086c .shrink_dcache_for_umount+0x50/0x78
  [c0000001667efa20] c0000000000c9c74 .generic_shutdown_super+0x40/0x230
  [c0000001667efab0] c0000000000cb07c .kill_block_super+0x30/0x60
  [c0000001667efb40] c0000000000c9be0 .deactivate_super+0x8c/0xe0
  [c0000001667efbd0] c0000000000e69e8 .mntput_no_expire+0x84/0xcc
  [c0000001667efc60] c0000000000d36c4 .path_release_on_umount+0x30/0x48
  [c0000001667efcf0] c0000000000e75dc .sys_umount+0x264/0x294
  [c0000001667efe30] c00000000000861c syscall_exit+0x0/0x40
  --- Exception: c01 (System Call) at 000000000ff31f84
  SP (ffca1750) is in userspace

  2:mon> r
  R00 = c0000000000e06c8   R16 = 00000000ffffffff
  R01 = c0000001667ef910   R17 = 0000000010020000
  R02 = c000000000748448   R18 = 0000000000000000
  R03 = 0000000000000061   R19 = 00000000ffca1df8
  R04 = 8000000000001032   R20 = 0000000000000000
  R05 = 0000000000000000   R21 = 0000000000000000
  R06 = 8000000000b10393   R22 = 00000000100c0000
  R07 = 0000000000000000   R23 = 0000000000000000
  R08 = 0000000000000001   R24 = 0000000000000000
  R09 = c000000000594660   R25 = 0000000000000000
  R10 = c00000016763bbd8   R26 = c0000001667efdf0
  R11 = c000000000594660   R27 = 0000000000000000
  R12 = 0000000000004000   R28 = c000000169e0f800
  R13 = c000000000567800   R29 = c000000071817980
  R14 = 00000000ffca18d0   R30 = c0000000005bd348
  R15 = 0000000010020000   R31 = c0000000718178a0
  pc  = c0000000000e06cc .shrink_dcache_for_umount_subtree+0x214/0x364
  lr  = c0000000000e06c8 .shrink_dcache_for_umount_subtree+0x210/0x364
  msr = 8000000000029032   cr  = 24004424
  ctr = 8000000000132d10   xer = 000000000000000f   trap =  700

  2:mon> S
  msr  = 8000000000001032  sprg0= 0000000000000000
  pvr  = 00000000003a0201  sprg1= c000000000567600
  dec  = 00000000ad4830a1  sprg2= c000000000567600
  sp   = c00000016691ad50  sprg3= c000000000567600
  toc  = c000000000748448  dar  = c000000071794010

  -Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ozlabs.org/pipermail/linuxppc-dev/attachments/20060808/96310a10/attachment.htm>