Hi, On 2020/3/17 6:33, Richard Weinberger wrote: > On Thu, Mar 5, 2020 at 10:15 AM Hou Tao <houtao1@xxxxxxxxxx> wrote: >> The actual situation of the problem is the LEB is GCed, freed and then >> reused as journal head, and finally ubifs_tnc_locate() reads >> an invalid node. And it can be reproduced by the following steps: >> * create 128 empty files >> * overwrite 8 files in backgroup repeatedly to trigger GC >> * drop inode cache and stat these 128 empty files repeatedly > > So far I failed to reproduce. Do you have a script? > Or even better, a xfstest? > You can increase the probability by adding an extra delay (e.g. msleep(1)) between the unlock of tnc_mutex and the call of ubifs_get_wbuf(). And I will try to writ xfstest for the problem. Regards, Tao ______________________________________________________ Linux MTD discussion mailing list http://lists.infradead.org/mailman/listinfo/linux-mtd/