<!-- 
RSS generated by JIRA (9.4.14#940014-sha1:734e6822bbf0d45eff9af51f82432957f73aa32c) at Sat Feb 10 01:33:28 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>Whamcloud Community JIRA</title>
    <link>https://jira.whamcloud.com</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.4.14</version>
        <build-number>940014</build-number>
        <build-date>05-12-2023</build-date>
    </build-info>


<item>
            <title>[LU-3387] Oops in osp_statfs_timer_cb</title>
                <link>https://jira.whamcloud.com/browse/LU-3387</link>
                <project id="10000" key="LU">Lustre</project>
                    <description>&lt;p&gt;Running replay-single in a loop, I hit this oops today:&lt;/p&gt;
&lt;div class=&quot;preformatted panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;preformattedContent panelContent&quot;&gt;
&lt;pre&gt;[352448.539528] Lustre: DEBUG MARKER: == replay-single test 3b: replay failed open -ENOMEM == 15:27:17 (1369337237)
[352449.238483] LustreError: 539:0:(osd_handler.c:1134:osd_ro()) *** setting lustre-MDT0000 read-only ***
[352449.238948] Turning device loop0 (0x700000) read-only
[352449.349409] Lustre: DEBUG MARKER: mds1 REPLAY BARRIER on lustre-MDT0000
[352449.367296] Lustre: DEBUG MARKER: local REPLAY BARRIER on lustre-MDT0000
[352449.530689] Lustre: *** cfs_fail_loc=114, val=0***
[352450.067118] LustreError: 27045:0:(client.c:1048:ptlrpc_import_delay_req()) @@@ IMP_CLOSED   req@ffff880081bc77f0 x1435853793530172/t0(0) o13-&amp;gt;lustre-OST0001-osc-MDT0000@0@lo:7/4 lens 224/368 e 0 to 0 dl 0 ref 1 fl Rpc:/0/ffffffff rc 0/-1
[352450.031173] BUG: unable to handle kernel paging request at ffff8800893ef9d0
[352450.031173] IP: [&amp;lt;ffffffff812872cf&amp;gt;] _raw_spin_lock+0xdf/0x180
[352450.031173] PGD 1a26063 PUD 501067 PMD 54b067 PTE 80000000893ef060
[352450.031173] Oops: 0000 [#1] SMP DEBUG_PAGEALLOC
[352450.031173] last sysfs file: /sys/devices/system/cpu/possible
[352450.031173] CPU 7 
[352450.031173] Modules linked in: lustre ofd osp lod ost mdt osd_ldiskfs fsfilt_ldiskfs ldiskfs mdd mgs lquota obdecho mgc lov osc mdc lmv fid fld ptlrpc obdclass lvfs ksocklnd lnet libcfs exportfs jbd sha512_generic sha256_generic ext4 mbcache jbd2 virtio_balloon virtio_console i2c_piix4 i2c_core virtio_net virtio_blk pata_acpi ata_generic ata_piix virtio_pci virtio_ring virtio dm_mirror dm_region_hash dm_log dm_mod nfs lockd fscache auth_rpcgss nfs_acl sunrpc be2iscsi bnx2i cnic uio ipv6 cxgb3i libcxgbi cxgb3 mdio libiscsi_tcp qla4xxx iscsi_boot_sysfs libiscsi scsi_transport_iscsi [last unloaded: libcfs]
[352450.031173] 
[352450.031173] Pid: 0, comm: swapper Not tainted 2.6.32-rhe6.4-debug #2 Bochs Bochs
[352450.031173] RIP: 0010:[&amp;lt;ffffffff812872cf&amp;gt;]  [&amp;lt;ffffffff812872cf&amp;gt;] _raw_spin_lock+0xdf/0x180
[352450.031173] RSP: 0018:ffff8800063c3d80  EFLAGS: 00010016
[352450.031173] RAX: 000000006ec735fa RBX: ffff8800893ef9d0 RCX: 000000006ec735fa
[352450.031173] RDX: 0000000000000361 RSI: 0000000000000003 RDI: 0000000000000001
[352450.031173] RBP: ffff8800063c3dc0 R08: ffff880096082608 R09: 0000000000000000
[352450.031173] R10: 0000000000000800 R11: ffffffff81d5fb40 R12: 00000000ca3244a0
[352450.031173] R13: ffff8800bac08440 R14: ffff8800bac08ae0 R15: 000000000008295c
[352450.031173] FS:  0000000000000000(0000) GS:ffff8800063c0000(0000) knlGS:0000000000000000
[352450.031173] CS:  0010 DS: 0018 ES: 0018 CR0: 000000008005003b
[352450.031173] CR2: ffff8800893ef9d0 CR3: 0000000001a25000 CR4: 00000000000006e0
[352450.031173] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[352450.031173] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[352450.031173] Process swapper (pid: 0, threadinfo ffff8800bac0a000, task ffff8800bac08440)
[352450.031173] Stack:
[352450.031173]  ffff8800063d6880 0000000100000286 ffff8800063c3db0 0000000000000282
[352450.031173] &amp;lt;d&amp;gt; ffff8800893efc48 0000000000000003 0000000000000001 0000000000000000
[352450.031173] &amp;lt;d&amp;gt; ffff8800063c3de0 ffffffff814fe204 0000000700000001 ffff8800893ef9d0
[352450.031173] Call Trace:
[352450.031173]  &amp;lt;IRQ&amp;gt; 
[352450.031173]  [&amp;lt;ffffffff814fe204&amp;gt;] _spin_lock_irqsave+0x24/0x30
[352450.031173]  [&amp;lt;ffffffff810545f2&amp;gt;] __wake_up+0x32/0x70
[352450.031173]  [&amp;lt;ffffffffa09095f0&amp;gt;] ? osp_statfs_timer_cb+0x0/0x50 [osp]
[352450.031173]  [&amp;lt;ffffffffa0df078a&amp;gt;] cfs_waitq_signal+0x1a/0x20 [libcfs]
[352450.031173]  [&amp;lt;ffffffffa090960a&amp;gt;] osp_statfs_timer_cb+0x1a/0x50 [osp]
[352450.031173]  [&amp;lt;ffffffff8107f3f2&amp;gt;] run_timer_softirq+0x192/0x330
[352450.031173]  [&amp;lt;ffffffff8102e2fd&amp;gt;] ? lapic_next_event+0x1d/0x30
[352450.031173]  [&amp;lt;ffffffff810749d1&amp;gt;] __do_softirq+0xc1/0x1e0
[352450.031173]  [&amp;lt;ffffffff8109940a&amp;gt;] ? hrtimer_interrupt+0x14a/0x270
[352450.031173]  [&amp;lt;ffffffff8100c20c&amp;gt;] call_softirq+0x1c/0x30
[352450.031173]  [&amp;lt;ffffffff8100de45&amp;gt;] do_softirq+0x65/0xa0
[352450.031173]  [&amp;lt;ffffffff810747b5&amp;gt;] irq_exit+0x85/0x90
[352450.031173]  [&amp;lt;ffffffff81504ed0&amp;gt;] smp_apic_timer_interrupt+0x70/0x9b
[352450.031173]  [&amp;lt;ffffffff8100bbd3&amp;gt;] apic_timer_interrupt+0x13/0x20
[352450.031173]  &amp;lt;EOI&amp;gt; 
[352450.031173]  [&amp;lt;ffffffff8103a86b&amp;gt;] ? native_safe_halt+0xb/0x10
[352450.031173]  [&amp;lt;ffffffff81014a0d&amp;gt;] default_idle+0x4d/0xb0
[352450.031173]  [&amp;lt;ffffffff81009a26&amp;gt;] cpu_idle+0xb6/0x110
[352450.031173]  [&amp;lt;ffffffff814f4289&amp;gt;] start_secondary+0x2ac/0x2ef
[352450.031173] Code: 85 7a 00 fa 00 00 00 c7 45 cc 01 00 00 00 4d 8d b5 a0 06 00 00 eb 0c 0f 1f 44 00 00 8b 45 cc 85 c0 75 63 45 31 ff 4d 39 fc 76 f1 &amp;lt;8b&amp;gt; 03 89 c2 c1 c0 10 39 c2 8d 90 00 00 01 00 75 04 f0 0f b1 13 
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;
&lt;p&gt;base code is 2.4.0-RC1, my code branch master-20130523&lt;/p&gt;

&lt;p&gt;Crashdump and modules are in /exports/crashdumps/192.168.10.221-2013-05-23-15\:27\:24&lt;/p&gt;</description>
                <environment></environment>
        <key id="19130">LU-3387</key>
            <summary>Oops in osp_statfs_timer_cb</summary>
                <type id="1" iconUrl="https://jira.whamcloud.com/secure/viewavatar?size=xsmall&amp;avatarId=11303&amp;avatarType=issuetype">Bug</type>
                                            <priority id="3" iconUrl="https://jira.whamcloud.com/images/icons/priorities/major.svg">Major</priority>
                        <status id="1" iconUrl="https://jira.whamcloud.com/images/icons/statuses/open.png" description="The issue is open and ready for the assignee to start work on it.">Open</status>
                    <statusCategory id="2" key="new" colorName="default"/>
                                    <resolution id="-1">Unresolved</resolution>
                                        <assignee username="wc-triage">WC Triage</assignee>
                                    <reporter username="green">Oleg Drokin</reporter>
                        <labels>
                    </labels>
                <created>Thu, 23 May 2013 23:54:52 +0000</created>
                <updated>Fri, 23 Dec 2016 05:15:28 +0000</updated>
                                            <version>Lustre 2.4.0</version>
                                                        <due></due>
                            <votes>0</votes>
                                    <watches>3</watches>
                                                                            <comments>
                            <comment id="59217" author="green" created="Thu, 23 May 2013 23:59:23 +0000"  >&lt;p&gt;A somewhat similar crash that happened in another VM a few hours later:&lt;/p&gt;

&lt;div class=&quot;preformatted panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;preformattedContent panelContent&quot;&gt;
&lt;pre&gt;[365601.849681] BUG: unable to handle kernel paging request at ffff88008494caa8
[365601.849681] IP: [&amp;lt;ffffffff812872cf&amp;gt;] _raw_spin_lock+0xdf/0x180
[365601.849681] PGD 1a26063 PUD 501067 PMD 526067 PTE 800000008494c060
[365601.849681] Oops: 0000 [#1] SMP DEBUG_PAGEALLOC
[365601.849681] last sysfs file: /sys/devices/system/cpu/possible
[365601.849681] CPU 1 
[365601.849681] Modules linked in: lustre ofd osp lod ost mdt osd_ldiskfs fsfilt_ldiskfs ldiskfs mdd mgs lquota obdecho mgc lov osc mdc lmv fid fld ptlrpc obdclass lvfs ksocklnd lnet libcfs exportfs jbd sha512_generic sha256_generic ext4 mbcache jbd2 virtio_balloon virtio_console i2c_piix4 i2c_core virtio_blk virtio_net virtio_pci virtio_ring virtio pata_acpi ata_generic ata_piix dm_mirror dm_region_hash dm_log dm_mod nfs lockd fscache auth_rpcgss nfs_acl sunrpc be2iscsi bnx2i cnic uio ipv6 cxgb3i libcxgbi cxgb3 mdio libiscsi_tcp qla4xxx iscsi_boot_sysfs libiscsi scsi_transport_iscsi [last unloaded: libcfs]
[365601.849681] 
[365601.849681] Pid: 20495, comm: osp-syn-0 Not tainted 2.6.32-rhe6.4-debug #2 Bochs Bochs
[365601.849681] RIP: 0010:[&amp;lt;ffffffff812872cf&amp;gt;]  [&amp;lt;ffffffff812872cf&amp;gt;] _raw_spin_lock+0xdf/0x180
[365601.866734] RSP: 0018:ffff8800861e1d60  EFLAGS: 00010006
[365601.866734] RAX: ffffffffac3ad717 RBX: ffff88008494caa8 RCX: 00000000ac3ad717
[365601.866734] RDX: 00000000012a7ae5 RSI: 0000000000000003 RDI: 0000000000000001
[365601.866734] RBP: ffff8800861e1da0 R08: 0000000000000000 R09: ffff880000000000
[365601.866734] R10: 2222222222222222 R11: 0000000000000000 R12: 00000000ca3244a0
[365601.866734] R13: ffff88006bcf20c0 R14: ffff88006bcf2760 R15: 000000000002fb00
[365601.866734] FS:  00007fe0073d7700(0000) GS:ffff880006240000(0000) knlGS:0000000000000000
[365601.866734] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[365601.866734] CR2: ffff88008494caa8 CR3: 0000000001a25000 CR4: 00000000000006e0
[365601.866734] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[365601.866734] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[365601.866734] Process osp-syn-0 (pid: 20495, threadinfo ffff8800861e0000, task ffff88006bcf20c0)
[365601.866734] Stack:
[365601.866734]  ffff8800898b55d8 00000001861e1e80 0000000000000002 0000000000000282
[365601.866734] &amp;lt;d&amp;gt; ffff8800861e1e80 0000000000000003 0000000000000001 0000000000000000
[365601.866734] &amp;lt;d&amp;gt; ffff8800861e1dc0 ffffffff814fe204 ffff8800861e1dc0 ffff88008494caa8
[365601.866734] Call Trace:
[365601.866734]  [&amp;lt;ffffffff814fe204&amp;gt;] _spin_lock_irqsave+0x24/0x30
[365601.866734]  [&amp;lt;ffffffff810545f2&amp;gt;] __wake_up+0x32/0x70
[365601.866734]  [&amp;lt;ffffffffa0f5278a&amp;gt;] cfs_waitq_signal+0x1a/0x20 [libcfs]
[365601.866734]  [&amp;lt;ffffffffa0850ca4&amp;gt;] osp_sync_thread+0x414/0x800 [osp]
[365601.866734]  [&amp;lt;ffffffff814fe09e&amp;gt;] ? _spin_unlock_irq+0xe/0x20
[365601.866734]  [&amp;lt;ffffffffa0850890&amp;gt;] ? osp_sync_thread+0x0/0x800 [osp]
[365601.866734]  [&amp;lt;ffffffff8100c10a&amp;gt;] child_rip+0xa/0x20
[365601.866734]  [&amp;lt;ffffffffa0850890&amp;gt;] ? osp_sync_thread+0x0/0x800 [osp]
[365601.866734]  [&amp;lt;ffffffffa0850890&amp;gt;] ? osp_sync_thread+0x0/0x800 [osp]
[365601.866734]  [&amp;lt;ffffffff8100c100&amp;gt;] ? child_rip+0x0/0x20
[365601.866734] Code: 85 7a 00 fa 00 00 00 c7 45 cc 01 00 00 00 4d 8d b5 a0 06 00 00 eb 0c 0f 1f 44 00 00 8b 45 cc 85 c0 75 63 45 31 ff 4d 39 fc 76 f1 &amp;lt;8b&amp;gt; 03 89 c2 c1 c0 10 39 c2 8d 90 00 00 01 00 75 04 f0 0f b1 13 
[365601.866734] RIP  [&amp;lt;ffffffff812872cf&amp;gt;] _raw_spin_lock+0xdf/0x180
[365601.866734]  RSP &amp;lt;ffff8800861e1d60&amp;gt;
[365601.866734] CR2: ffff88008494caa8
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;
&lt;p&gt;Crashdump is in /exports/crashdumps/192.168.10.222-2013-05-23-19\:08\:53&lt;/p&gt;</comment>
                            <comment id="60825" author="green" created="Tue, 18 Jun 2013 17:47:47 +0000"  >&lt;p&gt;another hit on current master:&lt;/p&gt;
&lt;div class=&quot;preformatted panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;preformattedContent panelContent&quot;&gt;
&lt;pre&gt;&amp;lt;4&amp;gt;[110783.415924] Lustre: DEBUG MARKER: == replay-single test 19: |X| mcreate, open, write, rename == 08:18:37 (1371298717)
&amp;lt;4&amp;gt;[110783.917909] Turning device loop0 (0x700000) read-only
&amp;lt;4&amp;gt;[110784.028980] Lustre: DEBUG MARKER: mds1 REPLAY BARRIER on lustre-MDT0000
&amp;lt;4&amp;gt;[110784.056261] Lustre: DEBUG MARKER: local REPLAY BARRIER on lustre-MDT0000
&amp;lt;1&amp;gt;[110784.612016] BUG: unable to handle kernel paging request at ffff880081e1c9d0
&amp;lt;1&amp;gt;[110784.612016] IP: [&amp;lt;ffffffff812872cf&amp;gt;] _raw_spin_lock+0xdf/0x180
&amp;lt;4&amp;gt;[110784.612016] PGD 1a26063 PUD 501067 PMD 511067 PTE 8000000081e1c060
&amp;lt;4&amp;gt;[110784.612016] Oops: 0000 [#1] SMP DEBUG_PAGEALLOC
&amp;lt;4&amp;gt;[110784.612016] last sysfs file: /sys/devices/system/cpu/possible
&amp;lt;4&amp;gt;[110784.612016] CPU 4 
&amp;lt;4&amp;gt;[110784.612016] Modules linked in: lustre ofd osp lod ost mdt osd_ldiskfs fsfilt_ldiskfs ldiskfs mdd mgs lquota lfsck obdecho mgc lov osc mdc lmv fid fld ptlrpc obdclass lvfs ksocklnd lnet libcfs exportfs jbd sha512_generic sha256_generic ext4 mbcache jbd2 virtio_balloon virtio_console i2c_piix4 i2c_core virtio_blk virtio_net pata_acpi ata_generic ata_piix virtio_pci virtio_ring virtio dm_mirror dm_region_hash dm_log dm_mod nfs lockd fscache auth_rpcgss nfs_acl sunrpc be2iscsi bnx2i cnic uio ipv6 cxgb3i libcxgbi cxgb3 mdio libiscsi_tcp qla4xxx iscsi_boot_sysfs libiscsi scsi_transport_iscsi [last unloaded: libcfs]
&amp;lt;4&amp;gt;[110784.638459] 
&amp;lt;4&amp;gt;[110784.638459] Pid: 0, comm: swapper Not tainted 2.6.32-rhe6.4-debug #2 Red Hat KVM
&amp;lt;4&amp;gt;[110784.638459] RIP: 0010:[&amp;lt;ffffffff812872cf&amp;gt;]  [&amp;lt;ffffffff812872cf&amp;gt;] _raw_spin_lock+0xdf/0x180
&amp;lt;4&amp;gt;[110784.638459] RSP: 0018:ffff880006303d80  EFLAGS: 00010012
&amp;lt;4&amp;gt;[110784.638459] RAX: ffffffffc7256127 RBX: ffff880081e1c9d0 RCX: 00000000c7256127
&amp;lt;4&amp;gt;[110784.638459] RDX: 0000000000000027 RSI: 0000000000000003 RDI: 0000000000000001
&amp;lt;4&amp;gt;[110784.638459] RBP: ffff880006303dc0 R08: ffff88000630e0e0 R09: 000064c20d34d800
&amp;lt;4&amp;gt;[110784.638459] R10: 0000000000000001 R11: 0000000000000003 R12: 00000000caa837f0
&amp;lt;4&amp;gt;[110784.638459] R13: ffff8800bb2e8080 R14: ffff8800bb2e8720 R15: 00000000000657e3
&amp;lt;4&amp;gt;[110784.638459] FS:  0000000000000000(0000) GS:ffff880006300000(0000) knlGS:0000000000000000
&amp;lt;4&amp;gt;[110784.638459] CS:  0010 DS: 0018 ES: 0018 CR0: 000000008005003b
&amp;lt;4&amp;gt;[110784.638459] CR2: ffff880081e1c9d0 CR3: 0000000001a25000 CR4: 00000000000006e0
&amp;lt;4&amp;gt;[110784.638459] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
&amp;lt;4&amp;gt;[110784.638459] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
&amp;lt;4&amp;gt;[110784.638459] Process swapper (pid: 0, threadinfo ffff8800bb2ea000, task ffff8800bb2e8080)
&amp;lt;4&amp;gt;[110784.638459] Stack:
&amp;lt;4&amp;gt;[110784.638459]  ffff8800bb2e8080 0000000106303d98 ffffffff8103a80c 0000000000000282
&amp;lt;4&amp;gt;[110784.638459] &amp;lt;d&amp;gt; ffff880081e1cc48 0000000000000003 0000000000000001 0000000000000000
&amp;lt;3&amp;gt;[110784.672878] LustreError: 137-5: lustre-MDT0000_UUID: not available for con&amp;lt;4&amp;gt;[110784.638459]  [&amp;lt;ffffffffa092b580&amp;gt;] ? osp_statfs_timer_cb+0x0/0x50 [osp]
&amp;lt;4&amp;gt;[110784.638459]  [&amp;lt;ffffffffa0e3d78a&amp;gt;] cfs_waitq_signal+0x1a/0x20 [libcfs]
&amp;lt;4&amp;gt;[110784.638459]  [&amp;lt;ffffffffa092b59a&amp;gt;] osp_statfs_timer_cb+0x1a/0x50 [osp]
&amp;lt;4&amp;gt;[110784.638459]  [&amp;lt;ffffffff8107f3f2&amp;gt;] run_timer_softirq+0x192/0x330
&amp;lt;4&amp;gt;[110784.638459]  [&amp;lt;ffffffff8102e2fd&amp;gt;] ? lapic_next_event+0x1d/0x30
&amp;lt;4&amp;gt;[110784.638459]  [&amp;lt;ffffffff810749d1&amp;gt;] __do_softirq+0xc1/0x1e0
&amp;lt;4&amp;gt;[110784.638459]  [&amp;lt;ffffffff8109940a&amp;gt;] ? hrtimer_interrupt+0x14a/0x270
&amp;lt;4&amp;gt;[110784.638459]  [&amp;lt;ffffffff8100c20c&amp;gt;] call_softirq+0x1c/0x30
&amp;lt;4&amp;gt;[110784.638459]  [&amp;lt;ffffffff8100de45&amp;gt;] do_softirq+0x65/0xa0
&amp;lt;4&amp;gt;[110784.638459]  [&amp;lt;ffffffff810747b5&amp;gt;] irq_exit+0x85/0x90
&amp;lt;4&amp;gt;[110784.638459]  [&amp;lt;ffffffff81504ed0&amp;gt;] smp_apic_timer_interrupt+0x70/0x9b
&amp;lt;4&amp;gt;[110784.638459]  [&amp;lt;ffffffff8100bbd3&amp;gt;] apic_timer_interrupt+0x13/0x20
&amp;lt;4&amp;gt;[110784.638459]  &amp;lt;EOI&amp;gt; 
&amp;lt;4&amp;gt;[110784.638459]  [&amp;lt;ffffffff8103a86b&amp;gt;] ? native_safe_halt+0xb/0x10
&amp;lt;4&amp;gt;[110784.638459]  [&amp;lt;ffffffff81014a0d&amp;gt;] default_idle+0x4d/0xb0
&amp;lt;4&amp;gt;[110784.638459]  [&amp;lt;ffffffff81009a26&amp;gt;] cpu_idle+0xb6/0x110
&amp;lt;4&amp;gt;[110784.638459]  [&amp;lt;ffffffff814f4289&amp;gt;] start_secondary+0x2ac/0x2ef
&amp;lt;4&amp;gt;[110784.638459] Code: 85 7a 00 fa 00 00 00 c7 45 cc 01 00 00 00 4d 8d b5 a0 06 00 00 eb 0c 0f 1f 44 00 00 8b 45 cc 85 c0 75 63 45 31 ff 4d 39 fc 76 f1 &amp;lt;8b&amp;gt; 03 89 c2 c1 c0 10 39 c2 8d 90 00 00 01 00 75 04 f0 0f b1 13 
&amp;lt;1&amp;gt;[110784.638459] RIP  [&amp;lt;ffffffff812872cf&amp;gt;] _raw_spin_lock+0xdf/0x180
&amp;lt;4&amp;gt;[110784.638459]  RSP &amp;lt;ffff880006303d80&amp;gt;
&amp;lt;4&amp;gt;[110784.638459] CR2: ffff880081e1c9d0
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;
&lt;p&gt;vmcore and modules are in /exports/crashdumps/192.168.10.222-2013-06-15-08\:18\:40&lt;/p&gt;</comment>
                            <comment id="150660" author="green" created="Sun, 1 May 2016 15:38:39 +0000"  >&lt;p&gt;And I just hit this once more:&lt;/p&gt;
&lt;div class=&quot;code panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;codeContent panelContent&quot;&gt;
&lt;pre class=&quot;code-java&quot;&gt;&amp;lt;1&amp;gt;[244260.988016] BUG: unable to handle kernel paging request at ffff88008081c990
&amp;lt;1&amp;gt;[244260.988016] IP: [&amp;lt;ffffffff812a08cf&amp;gt;] _raw_spin_lock+0xdf/0x180
&amp;lt;4&amp;gt;[244260.988016] PGD 1a2e063 PUD 501067 PMD 506067 PTE 800000008081c060
&amp;lt;4&amp;gt;[244260.988016] Oops: 0000 [#1] SMP DEBUG_PAGEALLOC
&amp;lt;4&amp;gt;[244260.988016] last sysfs file: /sys/devices/system/cpu/online
&amp;lt;4&amp;gt;[244260.988016] CPU 7 
&amp;lt;4&amp;gt;[244260.988016] Modules linked in: lustre ofd osp lod ost mdt mdd mgs osd_ldiskfs ldiskfs lquota lfsck obdecho mgc lov osc mdc lmv fid fld ptlrpc obdclass ksocklnd lnet libcfs zfs(P) zcommon(P) znvpair(P) zavl(P) zunicode(P) spl zlib_deflate exportfs sha512_generic sha256_generic ext4 jbd2 mbcache virtio_balloon virtio_console i2c_piix4 i2c_core virtio_blk virtio_net virtio_pci virtio_ring virtio pata_acpi ata_generic ata_piix dm_mirror dm_region_hash dm_log dm_mod nfs lockd fscache auth_rpcgss nfs_acl sunrpc be2iscsi bnx2i cnic uio cxgb3i libcxgbi ipv6 cxgb3 mdio libiscsi_tcp qla4xxx iscsi_boot_sysfs libiscsi scsi_transport_iscsi [last unloaded: libcfs]
&amp;lt;4&amp;gt;[244260.988016] 
&amp;lt;4&amp;gt;[244260.988016] Pid: 0, comm: swapper Tainted: P           -- ------------    2.6.32-rhe6.7-debug #1 Red Hat KVM
&amp;lt;4&amp;gt;[244260.988016] RIP: 0010:[&amp;lt;ffffffff812a08cf&amp;gt;]  [&amp;lt;ffffffff812a08cf&amp;gt;] _raw_spin_lock+0xdf/0x180
&amp;lt;4&amp;gt;[244260.988016] RSP: 0018:ffff8800063c3d90  EFLAGS: 00010012
&amp;lt;4&amp;gt;[244260.988016] RAX: ffffffffd7eb4dc0 RBX: ffff88008081c990 RCX: 00000000d7eb4dc0
&amp;lt;4&amp;gt;[244260.988016] RDX: 00000000041c0d28 RSI: 0000000000000003 RDI: 0000000000000001
&amp;lt;4&amp;gt;[244260.988016] RBP: ffff8800063c3dd0 R08: 0000000000000001 R09: 0000de27712f0e00
&amp;lt;4&amp;gt;[244260.988016] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000cb40a760
&amp;lt;4&amp;gt;[244260.988016] R13: ffff8800bac86480 R14: ffff8800bac86b20 R15: 000000000005b1eb
&amp;lt;4&amp;gt;[244260.988016] FS:  0000000000000000(0000) GS:ffff8800063c0000(0000) knlGS:0000000000000000
&amp;lt;4&amp;gt;[244260.988016] CS:  0010 DS: 0018 ES: 0018 CR0: 000000008005003b
&amp;lt;4&amp;gt;[244260.988016] CR2: ffff88008081c990 CR3: 0000000001a2d000 CR4: 00000000000006e0
&amp;lt;4&amp;gt;[244260.988016] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
&amp;lt;4&amp;gt;[244260.988016] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
&amp;lt;4&amp;gt;[244260.988016] &lt;span class=&quot;code-object&quot;&gt;Process&lt;/span&gt; swapper (pid: 0, threadinfo ffff8800bac88000, task ffff8800bac86480)
&amp;lt;4&amp;gt;[244260.988016] Stack:
&amp;lt;4&amp;gt;[244260.988016]  ffff8800063c3db0 0000000100000286 ffff8800063c3db0 0000000000000282
&amp;lt;4&amp;gt;[244260.988016] &amp;lt;d&amp;gt; ffff88008081cc90 0000000000000003 0000000000000001 0000000000000000
&amp;lt;4&amp;gt;[244260.988016] &amp;lt;d&amp;gt; ffff8800063c3df0 ffffffff81530c14 0000000000015c00 ffff88008081c990
&amp;lt;4&amp;gt;[244260.988016] Call Trace:
&amp;lt;4&amp;gt;[244260.988016]  &amp;lt;IRQ&amp;gt; 
&amp;lt;4&amp;gt;[244260.988016]  [&amp;lt;ffffffff81530c14&amp;gt;] _spin_lock_irqsave+0x24/0x30
&amp;lt;4&amp;gt;[244260.988016]  [&amp;lt;ffffffff8105d562&amp;gt;] __wake_up+0x32/0x70
&amp;lt;4&amp;gt;[244260.988016]  [&amp;lt;ffffffffa0ab1450&amp;gt;] ? osp_statfs_timer_cb+0x0/0x80 [osp]
&amp;lt;4&amp;gt;[244260.988016]  [&amp;lt;ffffffffa0ab1490&amp;gt;] osp_statfs_timer_cb+0x40/0x80 [osp]
&amp;lt;4&amp;gt;[244260.988016]  [&amp;lt;ffffffff81088b52&amp;gt;] run_timer_softirq+0x192/0x330
&amp;lt;4&amp;gt;[244260.988016]  [&amp;lt;ffffffff81042f1c&amp;gt;] ? kvm_clock_read+0x1c/0x20
&amp;lt;4&amp;gt;[244260.988016]  [&amp;lt;ffffffff81034eed&amp;gt;] ? lapic_next_event+0x1d/0x30
&amp;lt;4&amp;gt;[244260.988016]  [&amp;lt;ffffffff8107e4b1&amp;gt;] __do_softirq+0xc1/0x1e0
&amp;lt;4&amp;gt;[244260.988016]  [&amp;lt;ffffffff810b1e2f&amp;gt;] ? tick_program_event+0x2f/0x40
&amp;lt;4&amp;gt;[244260.988016]  [&amp;lt;ffffffff8100c3cc&amp;gt;] call_softirq+0x1c/0x30
&amp;lt;4&amp;gt;[244260.988016]  [&amp;lt;ffffffff8100fc15&amp;gt;] do_softirq+0x65/0xa0
&amp;lt;4&amp;gt;[244260.988016]  [&amp;lt;ffffffff8107e365&amp;gt;] irq_exit+0x85/0x90
&amp;lt;4&amp;gt;[244260.988016]  [&amp;lt;ffffffff815378da&amp;gt;] smp_apic_timer_interrupt+0x4a/0x60
&amp;lt;4&amp;gt;[244260.988016]  [&amp;lt;ffffffff8100bc53&amp;gt;] apic_timer_interrupt+0x13/0x20
&amp;lt;4&amp;gt;[244260.988016]  &amp;lt;EOI&amp;gt; 
&amp;lt;4&amp;gt;[244260.988016]  [&amp;lt;ffffffff81042f7b&amp;gt;] ? native_safe_halt+0xb/0x10
&amp;lt;4&amp;gt;[244260.988016]  [&amp;lt;ffffffff8101684d&amp;gt;] default_idle+0x4d/0xb0
&amp;lt;4&amp;gt;[244260.988016]  [&amp;lt;ffffffff81009a46&amp;gt;] cpu_idle+0xb6/0x110
&amp;lt;4&amp;gt;[244260.988016]  [&amp;lt;ffffffff81526085&amp;gt;] start_secondary+0x2c0/0x316
&amp;lt;4&amp;gt;[244260.988016] Code: 6f 79 00 fa 00 00 00 c7 45 cc 01 00 00 00 4d 8d b5 a0 06 00 00 eb 0c 0f 1f 44 00 00 8b 45 cc 85 c0 75 63 45 31 ff 4d 39 fc 76 f1 &amp;lt;8b&amp;gt; 03 89 c2 c1 c0 10 39 c2 8d 90 00 00 01 00 75 04 f0 0f b1 13 
&amp;lt;1&amp;gt;[244260.988016] RIP  [&amp;lt;ffffffff812a08cf&amp;gt;] _raw_spin_lock+0xdf/0x180
&amp;lt;4&amp;gt;[244260.988016]  RSP &amp;lt;ffff8800063c3d90&amp;gt;
&amp;lt;4&amp;gt;[244260.988016] CR2: ffff88008081c990
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;</comment>
                            <comment id="178924" author="green" created="Fri, 23 Dec 2016 05:15:28 +0000"  >&lt;p&gt;I finally traced this to a race between osp_statfs_timer_cb and osp_precreate_fini.&lt;/p&gt;

&lt;p&gt;osp_precreate_fini:&lt;/p&gt;
&lt;div class=&quot;code panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;codeContent panelContent&quot;&gt;
&lt;pre class=&quot;code-java&quot;&gt;        cfs_timer_disarm(&amp;amp;d-&amp;gt;opd_statfs_timer);

        &lt;span class=&quot;code-keyword&quot;&gt;if&lt;/span&gt; (d-&amp;gt;opd_pre == NULL)
                RETURN_EXIT;

        thread = &amp;amp;d-&amp;gt;opd_pre_thread;

        thread-&amp;gt;t_flags = SVC_STOPPING;
        wake_up(&amp;amp;d-&amp;gt;opd_pre_waitq);

        wait_event(thread-&amp;gt;t_ctl_waitq, thread-&amp;gt;t_flags &amp;amp; SVC_STOPPED);

        OBD_FREE_PTR(d-&amp;gt;opd_pre);
        d-&amp;gt;opd_pre = NULL;
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;

&lt;p&gt;So if we enter here while the timer cb is running, disabling it does not help, we fall through here and free the opd_pre while cb is doing something else and so&lt;/p&gt;

&lt;div class=&quot;code panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;codeContent panelContent&quot;&gt;
&lt;pre class=&quot;code-java&quot;&gt;&lt;span class=&quot;code-keyword&quot;&gt;static&lt;/span&gt; void osp_statfs_timer_cb(unsigned &lt;span class=&quot;code-object&quot;&gt;long&lt;/span&gt; _d)
{
        struct osp_device *d = (struct osp_device *) _d;

        LASSERT(d);
        &lt;span class=&quot;code-keyword&quot;&gt;if&lt;/span&gt; (d-&amp;gt;opd_pre != NULL &amp;amp;&amp;amp; osp_precreate_running(d))
                wake_up(&amp;amp;d-&amp;gt;opd_pre_waitq);
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;
&lt;p&gt;wake_up goes to access freed memory.&lt;/p&gt;

&lt;p&gt;I suspect a refcount on opd_pre is too heavy, but I don&apos;t see anything supereasy to fix this otherwise.&lt;/p&gt;</comment>
                    </comments>
                    <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                            <customfield id="customfield_10890" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10390" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|hzvrqn:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10090" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>8389</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10060" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Severity</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10022"><![CDATA[3]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                        </customfields>
    </item>
</channel>
</rss>