From obrien@dragon.nuxi.com  Thu Aug 27 02:05:54 1998
Received: from relay.nuxi.com (nuxi.cs.ucdavis.edu [128.120.56.38])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id CAA09789
          for <FreeBSD-gnats-submit@freebsd.org>; Thu, 27 Aug 1998 02:05:53 -0700 (PDT)
          (envelope-from obrien@dragon.nuxi.com)
Received: from dragon.nuxi.com (d96-072.orchard2.ucdavis.edu [169.237.96.72]) by relay.nuxi.com (8.8.8/8.6.12) with ESMTP id CAA11422 for <FreeBSD-gnats-submit@freebsd.org>; Thu, 27 Aug 1998 02:04:59 -0700 (PDT)
Received: (from obrien@localhost) by dragon.nuxi.com (8.8.8/8.7.3) id JAA03277; Thu, 27 Aug 1998 09:05:02 GMT
Message-Id: <199808270905.JAA03277@dragon.nuxi.com>
Date: Thu, 27 Aug 1998 09:05:02 GMT
From: "David O'Brien" <obrien@NUXI.com>
Reply-To: obrien@NUXI.com
To: FreeBSD-gnats-submit@freebsd.org
Subject: kernel panics if NFS server uses LKM vs. compiled in NFS support
X-Send-Pr-Version: 3.2

>Number:         7754
>Category:       kern
>Synopsis:       kernel panics if NFS server uses LKM vs. compiled in NFS support
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Aug 27 02:10:00 PDT 1998
>Closed-Date:    Tue Jun 27 17:42:17 PDT 2000
>Last-Modified:  Tue Jun 27 17:44:49 PDT 2000
>Originator:     David O'Brien
>Release:        FreeBSD 3.0-19980804-SNAP i386
>Organization:
The FreeBSD Project
>Environment:

	kernel compiled with "DIAGNOSTICS"

>Description:

	My NFS server panics if I use the NFS LKM vs. statically
	compiling in NFS support.  I've also tested this with a -CURRENT
	src/sys and src/lkm of 25-Aug-1998, and get the same results.

30 box is exporting /FBSD/CVS-repository
227 box is accessing it via AMD using /net/foo/FBSD/CVS-repository

30 box panics when I:

    227box# cd /net/foo/FBSD/CVS-repository ; du

Here are two ``gdb where'' outputs:

(kgdb) core-file /var/crash/vmcore.0
IdlePTD 9916416
initial pcb at 1f48c4
panicstr: zone: entry not free
panic messages:
---
panic: zone: entry not free
---
#0  boot (howto=256) at ../../kern/kern_shutdown.c:286
286                                     dumppcb.pcb_cr3 = rcr3();
(kgdb) where
#0  boot (howto=256) at ../../kern/kern_shutdown.c:286
#1  0xf0119ad3 in panic (fmt=0xf01a1982 "zone: entry not free")
    at ../../kern/kern_shutdown.c:427
#2  0xf01a1a3b in zerror (error=1) at ../../vm/vm_zone.c:442
#3  0xf013e898 in namei (ndp=0xf5622eb0) at ../../vm/vm_zone.h:91
#4  0xf01450a4 in stat (p=0xf557ef80, uap=0xf5622f94)
    at ../../kern/vfs_syscalls.c:1580
#5  0xf01b3018 in syscall (frame={tf_es = 39, tf_ds = 39, tf_edi = 0,
      tf_esi = 1, tf_ebp = -272638404, tf_isp = -178114588,
      tf_ebx = -272638384, tf_edx = 903659280, tf_ecx = 7, tf_eax = 188,
      tf_trapno = 7, tf_err = 7, tf_eip = 537344529, tf_cs = 31,
      tf_eflags = 582, tf_esp = -272639144, tf_ss = 39})
    at ../../i386/i386/trap.c:1031
#6  0x20073a11 in ?? ()
#7  0x1843 in ?? ()
#8  0x1099 in ?? ()
(kgdb)



(kgdb) core-file /var/crash/vmcore.1
IdlePTD 9916416
initial pcb at 1f48c4
panicstr: zone: entry not free
panic messages:
---
panic: zone: entry not free
---
#0  boot (howto=256) at ../../kern/kern_shutdown.c:286
286                                     dumppcb.pcb_cr3 = rcr3();
(kgdb) where
#0  boot (howto=256) at ../../kern/kern_shutdown.c:286
#1  0xf0119ad3 in panic (fmt=0xf01a1982 "zone: entry not free")
    at ../../kern/kern_shutdown.c:427
#2  0xf01a1a3b in zerror (error=1) at ../../vm/vm_zone.c:442
#3  0xf013e898 in namei (ndp=0xf56e9ef8) at ../../vm/vm_zone.h:91
#4  0xf014754d in vn_open (ndp=0xf56e9ef8, fmode=1, cmode=384)
    at ../../kern/vfs_vnops.c:125
#5  0xf0143d8b in open (p=0xf557d180, uap=0xf56e9f94)
    at ../../kern/vfs_syscalls.c:901
#6  0xf01b3018 in syscall (frame={tf_es = 39, tf_ds = 39, tf_edi = 60,
      tf_esi = 903629812, tf_ebp = -272639440, tf_isp = -177299484,
      tf_ebx = 5812, tf_edx = 15, tf_ecx = 0, tf_eax = 5, tf_trapno = 7,
      tf_err = 7, tf_eip = 537356961, tf_cs = 31, tf_eflags = 582,
      tf_esp = -272639560, tf_ss = 39}) at ../../i386/i386/trap.c:1031
#7  0x20076aa1 in ?? ()
#8  0x1c0a in ?? ()
#9  0x1096 in ?? ()
(kgdb)


vm/vm_zone.h:91 is
98 #if defined(DIAGNOSTIC)
90    if (((void **) item)[1] != (void *) ZENTRY_FREE)
91        zerror(ZONE_ERROR_NOTFREE);
92     ((void **) item)[1] = 0;

vm/vm_zone.c:442 is
442    panic(msg);                      from void zerror(int error);

kern/vfs_vnops.c:125 is
123    ndp->ni_cnd.cn_flags =
124            ((fmode & O_NOFOLLOW) ? NOFOLLOW : FOLLOW) | LOCKLEAF;
125        error = namei(ndp);
126        if (error)

kern/vfs_syscalls.c:1580 is
1578    NDINIT(&nd, LOOKUP, FOLLOW | LOCKLEAF | NOOBJ, UIO_USERSPACE,
1579        SCARG(uap, path), p);
1580    if (error = namei(&nd))
1581        return (error);



>How-To-Repeat:

	

>Fix:
	
	

>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->closed 
State-Changed-By: nrahlstr 
State-Changed-When: Tue Jun 27 17:42:17 PDT 2000 
State-Changed-Why:  
LKM's are gone and Matt has made substantial improvements  
in the NFS code. 


http://www.freebsd.org/cgi/query-pr.cgi?pr=7754 
>Unformatted:
