Bug#298797: kernel-image-2.6.8-2-686: Kernel hangs with PREEMPT bug in cache_alloc_refill
Package: kernel-image-2.6.8-2-686
Version: 2.6.8-13
Severity: important
This morning I found my machine hung in a bad state: no new process
could be created. According to kernel logs, the first affected process
was the 'find' for updatedb. Machine was up for 6 days, light load
(used as X workstation). I recently installed sarge; before that I was
running 2.4 on woody with months of uptime, so hardware problems seem
unlikely to me.
Kernel log:
kernel: c013ea24
kernel: PREEMPT
kernel: Modules linked in: snd_sbawe snd_opl3_lib snd_sb16_dsp snd_pcm_oss snd_mixer_oss snd_pcm snd_page_alloc snd_timer snd_sb16_csp snd_sb_common snd_hwdep snd_mpu401_uart snd_rawmidi snd_seq_device snd tuner bttv video_buf i2c_algo_bit v4l2_common btcx_risc i2c_core videodev soundcore mousedev psmouse ide_cd cdrom usbcore parport_pc lp parport ipv6 tulip ne2k_pci 8390 nls_iso8859_1 nls_cp437 vfat fat dm_mod capability commoncap genrtc ext3 jbd mbcache ide_generic piix ide_disk ide_core sd_mod ata_piix libata scsi_mod unix font vesafb cfbcopyarea cfbimgblt cfbfillrect
kernel: CPU: 0
kernel: EIP: 0060:[cache_alloc_refill+228/544] Not tainted
kernel: EFLAGS: 00010016 (2.6.8-2-686)
kernel: EIP is at cache_alloc_refill+0xe4/0x220
kernel: eax: 14000008 ebx: cff450c0 ecx: c0ec7000 edx: cf9e396c
kernel: esi: 00000018 edi: cf9e3960 ebp: cff450d0 esp: c9277d70
kernel: ds: 007b es: 007b ss: 0068
kernel: Process find (pid: 5050, threadinfo=c9276000 task=cce677b0)
kernel: Stack: 00000000 c8ea93bc 00000001 ce93a018 cf9e396c cf9e3974 00000296 d0915470
kernel: 0003ec73 cffd3c00 c013ed4e cf9e3960 00000050 c9276000 d0915489 cf9e3960
kernel: 00000050 c016e55d cffd3c00 00000001 c9276000 cffd3c00 0003ec73 c125ac34
kernel: Call Trace:
kernel: [__crc_sb_min_blocksize+645294/3938492] ext3_alloc_inode+0x0/0x50 [ext3]
kernel: [kmem_cache_alloc+62/64] kmem_cache_alloc+0x3e/0x40
kernel: [__crc_sb_min_blocksize+645319/3938492] ext3_alloc_inode+0x19/0x50 [ext3]
kernel: [alloc_inode+29/400] alloc_inode+0x1d/0x190
kernel: [get_new_inode_fast+35/256] get_new_inode_fast+0x23/0x100
kernel: [iget_locked+165/208] iget_locked+0xa5/0xd0
kernel: [__crc_sb_min_blocksize+631369/3938492] ext3_lookup+0x6b/0xd0 [ext3]
kernel: [real_lookup+213/256] real_lookup+0xd5/0x100
kernel: [do_lookup+150/176] do_lookup+0x96/0xb0
kernel: [link_path_walk+1747/3488] link_path_walk+0x6d3/0xda0
kernel: [in_group_p+66/128] in_group_p+0x42/0x80
kernel: [path_lookup+124/320] path_lookup+0x7c/0x140
kernel: [__user_walk+73/96] __user_walk+0x49/0x60
kernel: [vfs_lstat+28/96] vfs_lstat+0x1c/0x60
kernel: [sys_lstat64+27/64] sys_lstat64+0x1b/0x40
kernel: [syscall_call+7/11] syscall_call+0x7/0xb
kernel: Code: 89 50 04 89 02 66 83 79 14 ff c7 01 00 01 10 00 c7 41 04 00
kernel: <6>note: find[5050] exited with preempt_count 1
kernel: [schedule+1221/1232] schedule+0x4c5/0x4d0
kernel: [unmap_page_range+83/128] unmap_page_range+0x53/0x80
kernel: [unmap_vmas+438/464] unmap_vmas+0x1b6/0x1d0
kernel: [exit_mmap+133/368] exit_mmap+0x85/0x170
kernel: [mmput+101/144] mmput+0x65/0x90
kernel: [do_exit+348/1056] do_exit+0x15c/0x420
kernel: [do_page_fault+0/1389] do_page_fault+0x0/0x56d
kernel: [die+249/256] die+0xf9/0x100
kernel: [do_page_fault+478/1389] do_page_fault+0x1de/0x56d
kernel: [__find_get_block+123/272] __find_get_block+0x7b/0x110
kernel: [__getblk+55/112] __getblk+0x37/0x70
kernel: [__crc_sb_min_blocksize+613132/3938492] ext3_getblk+0xae/0x290 [ext3]
kernel: [do_page_fault+0/1389] do_page_fault+0x0/0x56d
kernel: [error_code+45/56] error_code+0x2d/0x38
kernel: [remove_exclusive_swap_page+43/304] remove_exclusive_swap_page+0x2b/0x130
kernel: [cache_alloc_refill+228/544] cache_alloc_refill+0xe4/0x220
kernel: [__crc_sb_min_blocksize+645294/3938492] ext3_alloc_inode+0x0/0x50 [ext3]
kernel: [kmem_cache_alloc+62/64] kmem_cache_alloc+0x3e/0x40
kernel: [__crc_sb_min_blocksize+645319/3938492] ext3_alloc_inode+0x19/0x50 [ext3]
kernel: [alloc_inode+29/400] alloc_inode+0x1d/0x190
kernel: [get_new_inode_fast+35/256] get_new_inode_fast+0x23/0x100
kernel: [iget_locked+165/208] iget_locked+0xa5/0xd0
kernel: [__crc_sb_min_blocksize+631369/3938492] ext3_lookup+0x6b/0xd0 [ext3]
kernel: [real_lookup+213/256] real_lookup+0xd5/0x100
kernel: [do_lookup+150/176] do_lookup+0x96/0xb0
kernel: [link_path_walk+1747/3488] link_path_walk+0x6d3/0xda0
kernel: [in_group_p+66/128] in_group_p+0x42/0x80
kernel: [path_lookup+124/320] path_lookup+0x7c/0x140
kernel: [__user_walk+73/96] __user_walk+0x49/0x60
kernel: [vfs_lstat+28/96] vfs_lstat+0x1c/0x60
kernel: [sys_lstat64+27/64] sys_lstat64+0x1b/0x40
kernel: [syscall_call+7/11] syscall_call+0x7/0xb
(then several process crashed similarly)
In case that's useful, hardware description:
The host is a PII 350 with 256M of RAM, and usually has a lot of free
memory.
0000:00:00.0 Host bridge: Intel Corp. 440BX/ZX/DX - 82443BX/ZX/DX Host bridge (rev 02)
0000:00:01.0 PCI bridge: Intel Corp. 440BX/ZX/DX - 82443BX/ZX/DX AGP bridge (rev 02)
0000:00:04.0 ISA bridge: Intel Corp. 82371AB/EB/MB PIIX4 ISA (rev 02)
0000:00:04.1 IDE interface: Intel Corp. 82371AB/EB/MB PIIX4 IDE (rev 01)
0000:00:04.2 USB Controller: Intel Corp. 82371AB/EB/MB PIIX4 USB (rev 01)
0000:00:04.3 Bridge: Intel Corp. 82371AB/EB/MB PIIX4 ACPI (rev 02)
0000:00:0a.0 Multimedia video controller: Brooktree Corporation Bt848 Video Capture (rev 12)
0000:00:0b.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL-8029(AS)
0000:00:0c.0 Ethernet controller: Digital Equipment Corporation DECchip 21140 [FasterNet] (rev 12)
0000:01:00.0 VGA compatible controller: Matrox Graphics, Inc. MGA G200 AGP (rev 01)
+ ISA sound card (SoundBlaster AWE32)
Thanks for your time!
-- System Information:
Debian Release: 3.1
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-686
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Versions of packages kernel-image-2.6.8-2-686 depends on:
ii coreutils [fileutils] 5.2.1-2 The GNU core utilities
ii fileutils 5.2.1-2 The GNU file management utilities
ii initrd-tools 0.1.77 tools to create initrd image for p
ii module-init-tools 3.2-pre1-2 tools for managing Linux kernel mo
-- no debconf information
Reply to: