mirror of
https://github.com/torvalds/linux.git
synced 2026-10-07 22:37:45 -04:00
When a SD card is hot removed without umount, del_gendisk() will call bdi_unregister() without destroying/freeing it. This leaves the bdi in the bdi->dev = NULL, bdi->wb.task = NULL, bdi->bdi_list removed state. When sync(2) gets the bdi before bdi_unregister() and calls bdi_queue_work() after the unregister, trace_writeback_queue will be dereferencing the NULL bdi->dev. Fix it with a simple test for NULL. LKML-reference: http://lkml.org/lkml/2012/1/18/346 Cc: [email protected] Reported-by: Rabin Vincent <[email protected]> Tested-by: Namjae Jeon <[email protected]> Signed-off-by: Wu Fengguang <[email protected]>