On Sat, 12 Aug 2006 14:40:22 -0500, Steve French wrote:
ctl-c exiting fsx after a few hours with 2.6.18-rc4 got the following oops - anyone recognize it?
Although I didn't see cifs symbols on the call stack it is running on a cifs mount, but it is not
one I have seen before.
EIP is at __down+0x56/0xc5
1a: 8d 43 08 lea 0x8(%ebx),%eax <= addr of sema wait queue list_head
1d: 8b 48 04 mov 0x4(%eax),%ecx <= list->prev
20: 8d 54 24 2c lea 0x2c(%esp),%edx
24: 89 50 04 mov %edx,0x4(%eax)
27: 89 44 24 2c mov %eax,0x2c(%esp)
0: 89 11 mov %edx,(%ecx) <===== list->prev->next = new
The semaphore's wait queue head is corrupted: 'prev' is 0.
[<fa2da685>] .text.lock.file+0x87/0x9a [cifs] <=====
It came from a lock section in the cifs code. If you disassemble
.text.lock.file in cifs.o, at offset 0x87 (or shortly after) you
will see a jump back to the code that's trying to get the semaphore.