On Fri, Nov 30, 2012 at 03:40:34AM +0000, Al Viro wrote:

The bug is real, but Pavel's patch is all wrong.  The problem is in the
argument; we should pass descriptor number, not descriptor + 1.  And fixing
that (in iterator_fd() itself) makes all callbacks work as they ought to.

PS: Pavel, the life is painful enough as it is, no need to involve BZ into
it.  Next time you need to post a patch, please do just that, especially
when it's so short, OK?

See tonight's vfs.git#for-linus; the head is at commit a77cfcb.