Bug 192654

Summary:	net-fs/nfs-utils-1.0.12 - nfsd crash/hang
Product:	Gentoo Linux	Reporter:	Simon Gao <gao>
Component:	[OLD] Server	Assignee:	Gentoo Linux bug wranglers <bug-wranglers>
Status:	RESOLVED TEST-REQUEST
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Simon Gao 2007-09-16 05:37:13 UTC

nfsd crash or hang with following error:


Unable to handle kernel paging request at ffff8800e05d53c2 RIP:
 [<ffffffff802c1cd3>] leaf_copy_items_entirely+0x15f/0x1fb
PGD de7067 PUD 13eb067 PMD 14ee067 PTE 80100000e05d5065
Oops: 0003 [1] SMP
CPU 0
Modules linked in: nfsd exportfs lockd sunrpc ipv6 quota_v2 arcmsr tg3 ohci_hcd
Pid: 5519, comm: nfsd Not tainted 2.6.18-xen-r40 #4
RIP: e030:[<ffffffff802c1cd3>]  [<ffffffff802c1cd3>] leaf_copy_items_entirely+0x15f/0x1fb
RSP: e02b:ffff8800e07c95a0  EFLAGS: 00010286
RAX: 0000000000000800 RBX: 000000000000ff94 RCX: fffffffffffea3d2
RDX: ffff8800e171a370 RSI: ffff8800e1b99c2e RDI: ffff8800e05d53c2
RBP: ffff8800e05cef94 R08: ffff8800e05cef94 R09: 0000000000000000
R10: 0000000000000000 R11: ffff8800e0766000 R12: 00000000000006c0
R13: 0000000000000794 R14: 000000000000004e R15: ffff8800e05bf000
FS:  00002b360f39d6d0(0000) GS:ffffffff80598000(0000) knlGS:0000000000000000
CS:  e033 DS: 0000 ES: 0000
Process nfsd (pid: 5519, threadinfo ffff8800e07c8000, task ffff8800dff47180)
Stack:  0000000000000048 ffff8800e171a4f0 ffff8800e07c9640 ffff8800e05bf750
 f96c8800e07c9640 ffff8800e171a370 0000004ee171a370 0000000000000048
 0000000000000000 ffff8800e171a4f0 ffff8800e07c9640 0000000000000048
Call Trace:
 [<ffffffff802c3815>] leaf_move_items+0x21f/0x321
 [<ffffffff802c398f>] leaf_shift_left+0x30/0x95
 [<ffffffff802af00d>] do_balance+0x755/0x2734
 [<ffffffff802256f0>] __wake_up+0x38/0x4f
 [<ffffffff8023db01>] wake_up_bit+0x11/0x22
 [<ffffffff802c8e8d>] reiserfs_prepare_for_journal+0x53/0x5a
 [<ffffffff802bccab>] fix_nodes+0x501/0x7c6
 [<ffffffff802c7dfd>] reiserfs_insert_item+0x1c7/0x2c2
 [<ffffffff802797da>] inode_get_bytes+0x10/0x31
 [<ffffffff802b7269>] reiserfs_new_inode+0x437/0x83e
 [<ffffffff80311c71>] __up_write+0x1d/0x110
 [<ffffffff802b1f02>] reiserfs_create+0xb8/0x186
 [<ffffffff8027e076>] vfs_create+0xb6/0xe4
 [<ffffffff880a369e>] :nfsd:nfsd_create_v3+0x2fb/0x544
 [<ffffffff880a8de7>] :nfsd:nfsd3_proc_create+0x12f/0x140
 [<ffffffff8809e0e2>] :nfsd:nfsd_dispatch+0xd2/0x198
 [<ffffffff8806e3c4>] :sunrpc:svc_process+0x40f/0x6ba
 [<ffffffff8047634d>] __down_read+0x12/0xec
 [<ffffffff8809e418>] :nfsd:nfsd+0x0/0x33c
 [<ffffffff8809e5d2>] :nfsd:nfsd+0x1ba/0x33c
 [<ffffffff8020a84c>] child_rip+0xa/0x12
 [<ffffffff8809e418>] :nfsd:nfsd+0x0/0x33c
 [<ffffffff8809e418>] :nfsd:nfsd+0x0/0x33c
 [<ffffffff8020a842>] child_rip+0x0/0x12



Code: f3 a4 8b 44 24 34 03 04 24 66 41 89 47 02 66 41 29 dd 44 89
RIP  [<ffffffff802c1cd3>] leaf_copy_items_entirely+0x15f/0x1fb
 RSP <ffff8800e07c95a0>
CR2: ffff8800e05d53c2
 BUG: warning at kernel/exit.c:854/do_exit()

Call Trace:
 [<ffffffff8022dc8d>] do_exit+0x48/0x8c3
 [<ffffffff80217512>] do_page_fault+0x11a6/0x121d
 [<ffffffff802256f0>] __wake_up+0x38/0x4f
 [<ffffffff8023db01>] wake_up_bit+0x11/0x22
 [<ffffffff802739d7>] ll_rw_block+0x93/0xac
 [<ffffffff8020a54f>] error_exit+0x0/0x71
 [<ffffffff802c1cd3>] leaf_copy_items_entirely+0x15f/0x1fb
 [<ffffffff802c3815>] leaf_move_items+0x21f/0x321
 [<ffffffff802c398f>] leaf_shift_left+0x30/0x95
 [<ffffffff802af00d>] do_balance+0x755/0x2734
 [<ffffffff802256f0>] __wake_up+0x38/0x4f
 [<ffffffff8023db01>] wake_up_bit+0x11/0x22
 [<ffffffff802c8e8d>] reiserfs_prepare_for_journal+0x53/0x5a
 [<ffffffff802bccab>] fix_nodes+0x501/0x7c6
 [<ffffffff802c7dfd>] reiserfs_insert_item+0x1c7/0x2c2
 [<ffffffff802797da>] inode_get_bytes+0x10/0x31
 [<ffffffff802b7269>] reiserfs_new_inode+0x437/0x83e
 [<ffffffff80311c71>] __up_write+0x1d/0x110
 [<ffffffff802b1f02>] reiserfs_create+0xb8/0x186
 [<ffffffff8027e076>] vfs_create+0xb6/0xe4
 [<ffffffff880a369e>] :nfsd:nfsd_create_v3+0x2fb/0x544
 [<ffffffff880a8de7>] :nfsd:nfsd3_proc_create+0x12f/0x140
 [<ffffffff8809e0e2>] :nfsd:nfsd_dispatch+0xd2/0x198
 [<ffffffff8806e3c4>] :sunrpc:svc_process+0x40f/0x6ba
 [<ffffffff8047634d>] __down_read+0x12/0xec
 [<ffffffff8809e418>] :nfsd:nfsd+0x0/0x33c
 [<ffffffff8809e5d2>] :nfsd:nfsd+0x1ba/0x33c
 [<ffffffff8020a84c>] child_rip+0xa/0x12
 [<ffffffff8809e418>] :nfsd:nfsd+0x0/0x33c
 [<ffffffff8809e418>] :nfsd:nfsd+0x0/0x33c
 [<ffffffff8020a842>] child_rip+0x0/0x12

runscript.sh[5802] general protection rip:441bb1 rsp:7fff5c2e4180 error:0



Reproducible: Always

Steps to Reproduce:
1. Install kernel-2.6.18-xen
2. Install nfs-utils 1.0.12
3. configure /etc/exports

Actual Results:  
Under a certain load, nfsd hangs and enter into "D" state.



Expected Results:  
Should not crash or hang even under heavy load.

Comment 1 Jakub Moc (RETIRED) gentoo-dev

2007-09-16 06:39:51 UTC

Did you try with newer kernel?

Comment 2 Simon Gao 2007-09-17 21:56:30 UTC

(In reply to comment #1)
> Did you try with newer kernel?
> 

Yes, It crash with 2.6.22-gentoo-r5, 2.6.21-gentoo-r4.

Maybe this is a hardware related problem. I will work on that first and will run more tests.

Simon