New: NULL pointer deref in sync_inodes_sb

https://bugzilla.kernel.org/show_bug.cgi?id=40832

Summary: NULL pointer deref in sync_inodes_sb
Product: IO/Storage
Version: 2.5
Platform: All
OS/Version: Linux
Tree: Mainline
Status: NEW
Severity: high
Priority: P1
Component: Block Layer
AssignedTo: [email protected]
ReportedBy: [email protected]
Regression: No

Created an attachment (id=68322)
--> (https://bugzilla.kernel.org/attachment.cgi?id=68322)
photograph of Oops on console

I have gotten a number of these since installing this 2.6.38-10-generic kernel and even though I have a serial console connected to this machine, for some reason these are not making it out of the console. Below is a transcription from a photograph (attached) of the console. Please excuse any typos.

BUG: unable to handle kernel NULL pointer dereference at 0000002f
IP: [<c1148665>] sync_inodes_sb+0xb5/0x140
*pde - 0587d067 *pte = 00000000
Oops: 0000 [#1] SMP
last sysfs file: /sys/devices/virtual/block/dm-10/dm/name
Modules linked in: ivtv cx2341x lirc_dev nfs fscache nfsd lockd nfs_acl

auth_rpcgss sunrpc exportfs autofs4 snd_usb_audio snd_hwdep snd_usbmidi_lib tuner_simple tuner_types snd_pcm wm8775 snd_seq_midi tda9887 tda8290 xc5000 snd_rawmidi tea5767 snd_seq_midi_event au8522 tuner snd_seq i915 snd_timer cx25840 au0828 snd_seq_device drm_kms_helper dvb_core drm videobuf_vmalloc videobuf_core tveeprom v4l2_common snd ppdev shpchp videodev i2c_algo_bit soundcore snd_page_alloc dcdbas parport_pc video parport pcspkr hwmon_vid b44 r8169 ssb sata_sil floppy [last unloaded: cx2341x ]

Pid 30176, comm: mount Not tainted 2.6.38-10-generic #46-Ubuntu Dell Computer Coporation Dimension 2400
EIP: 0060:[<c1148665>] EFLAGS: 00010246 CPU: 0
EIP is at sync_inodes_sb+0xb5/0x140
EAX: 00800000 EBX: c002fd8c ECX: 00000000 EDX: c002fddc
ESI: ffffffff EDI: f0c0cc70 EBP: c58a1ef8 ESP: c58a1eb8
DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
Process mount (pid: 30176, it=c58a0000 task-c0013f20 task.ti=c58a0000

Stack:
 f0c0cc00 c7c61f14 7fffffff f0c0cc00 00000001 00000000 c58a1ed0 c58a1ed0
 c58a1edc 00000000 00000202 c58a1ee4 c58a1ee4 f0c0cc00 00000001 c116b7d0
 c58a1f0c c114c7ff f0c0cc00 fffffff3 00000000 c58a1f18 c114c869 f0c0cc00
Call Trace:
 [<c116b7d0>] ? dquot_quota_sync+0x0/0x2d0
 [<c114c7ff>] __sync_filesystem+0x7f/0x90
 [<c114c869>] sync_filesystem+0x39/0x50
 [<c112a046>] do_remount_sb+0x56/0x110
 [<c11405f8>] do_remount+0xb8/0x100
 [<c1142aec>] do_mount+0x16c/0x1e0
 [<c1142ecb>] sys_mount+0x6b/0xa0
 [<c150a194>] syscall_call+0x7/0xb
Code: 70 c7 45 c4 00 00 00 00 83 eb 50 eb 04 90 8d 58 b0 8b 43 50 0f 18 00 90

8d 53 50 39 fa 74 4f f6 43 30 38 75 e9 8b b3 c4 00 00 00 <8b> 56 30 85 d2 74 dc 89 d8 e8 3d 5f ff ff b8 40 49 90 c1 e8 a3
EIP: [<c1148665>] sync_inodes_sb+0xb5/0x140 SS:ESP 0068:c58a1eb8
CR2: 000000000000002f

Any ideas what's going wrong here?