I was able to reproduce my bug using kernel 2.6.17-rc5 with latest
unionfs snapshot (20060530-0122).
Setup : /diskless/exports is a unionfs mount (ext3, rw ; ext3, ro ;
ext, ro) that is
exported by nfs and used as an nfs root by a diskless client.
On the server : createrepo is launched on /diskless/RPMS
On the client : run some commands in a loop (like find /)
Here follows the oops on the server :
BUG: unable to handle kernel NULL pointer dereference at virtual
address 00000000
printing eip:
f8c0fa93
*pde = 00000000
Oops: 0002 [#1]
Modules linked in: unionfs i915 nfsd exportfs lockd nfs_acl parport_pc
lp parport universeII autofs4 sunrpc dm_mirror dm_multipath dm_mod
ipv6 uhci_hcd ehci_hcd shpchp i2c_i801 i2c_core e1000 ext3 jbd
CPU: 0
EIP: 0060:[<f8c0fa93>] Not tainted VLI
EFLAGS: 00010246 (2.6.17-rc5 #1)
EIP is at unionfs_open+0x393/0x1f60 [unionfs]
eax: 00000000 ebx: 00000000 ecx: 00000000 edx: f72a6000
esi: f8c16f75 edi: 0000017d ebp: 00000008 esp: f72a6cf8
ds: 007b es: 007b ss: 0068
Process nfsd (pid: 3245, threadinfo=f72a6000 task=f72a1030)
Stack: f8c18cb0 f8c16f75 0000017d 00000008 f8c1a31d eb335e08 f8c16f75 f8c18cb0
00000167 f72a6e60 f72a6e60 c027a239 00000246 f74eb440 00000246 00000000
00000000 00000000 eb335e08 00000000 00000000 f6086240 eb33adb4 f6086240
Call Trace:
<c027a239> sock_common_recvmsg+0x2d/0x43 <f8c0f700>
unionfs_open+0x0/0x1f60 [unionfs]
<c014c476> __dentry_open+0xb6/0x17d <c014c644> dentry_open+0x40/0x46
<f89795cf> get_name+0x61/0xd4 [exportfs] <f897956e>
get_name+0x0/0xd4 [exportfs]
<f8979350> find_exported_dentry+0x2a9/0x482 [exportfs] <c01137fd>
try_to_wake_up+0x9a/0xa3
<c0113f48> __wake_up_common+0x36/0x51 <c0113f8c> __wake_up+0x29/0x3c
<f8a30d9d> expkey_match+0x46/0x56 [nfsd] <f8bb5a5e>
sunrpc_cache_lookup+0x63/0xf1 [sunrpc]
<f89797ca> export_decode_fh+0x61/0x75 [exportfs] <f8a2caa8>
nfsd_acceptable+0x0/0xb8 [nfsd]
<f8979769> export_decode_fh+0x0/0x75 [exportfs] <f8a2ce35>
fh_verify+0x2d5/0x46c [nfsd]
<f8a2caa8> nfsd_acceptable+0x0/0xb8 [nfsd] <c0122dfa> groups_alloc+0x31/0x9d
<f8a344ae> nfsd3_proc_getattr+0x6f/0x9a [nfsd] <f8a35a4b>
nfs3svc_decode_fhandle+0x0/0x7b [nfsd]
<f8a2b5dd> nfsd_dispatch+0xba/0x16d [nfsd] <f8bb192b>
svc_process+0x376/0x5af [sunrpc]
<f8a2b3d0> nfsd+0x185/0x2d8 [nfsd] <f8a2b24b> nfsd+0x0/0x2d8 [nfsd]
<c01012ad> kernel_thread_helper+0x5/0xb
Code: 0f 8f 71 19 00 00 8b 81 a8 01 00 00 8b 00 40 39 c6 0f 8f fa 15
00 00 ba 63 00 00 00 b8 9f a2 c1 f8 e8 89 51 50 c7 e8 c3 2e 6c c7 <ff>
0b 0f 88 74 31 00 00 8b 54 24 58 8b 82 c0 00 00 00 ba 2b 00
EIP: [<f8c0fa93>] unionfs_open+0x393/0x1f60 [unionfs] SS:ESP 0068:f72a6cf8
_______________________________________________
unionfs mailing list
[email protected]
http://www.fsl.cs.sunysb.edu/mailman/listinfo/unionfs
