mountd segfault on itanium2

[Garrick Staples <garrick@usc.edu>]

[-- Attachment #1: Type: text/plain, Size: 2982 bytes --]

Hi all,
   I'm having a terrible time with mountd segfaulting on two Itanium boxes.  I
can't find a specific trigger, but I can generally trigger it within a few
minutes by just calling mount/umount a few hundred times.

I'm using glibc 2.3.2 and nfs-utils 1.0.6 from RHE.

In the tests below, I have a single directory exported to 10.125.0.0/16.  Since
I know name resolution was a recent problem, I've made sure all clients are in
/etc/hosts.  I'm using NIS, but files is before dns and nis in nsswitch.conf.
I've also tested with and without nscd running.

Thanks in advance for any help.


gdb isn't showing much in a backtrace, but I can supply a core if anyone wants
it.

# gdb --core=/var/lib/nfs/core.15841
...
This GDB was configured as "ia64-redhat-linux-gnu".
Core was generated by `./mountd -F -d all'.
Program terminated with signal 11, Segmentation fault.
#0  0x20000008002c19d0 in ?? ()
(gdb) bt
#0  0x20000008002c19d0 in ?? ()
#1  0x20000008002c1950 in ?? ()
Previous frame identical to this frame (corrupt stack?)


I have a few different straces that show the segfault happening in different
places in the code:

open("/proc/fs/nfsd/filehandle", O_RDWR) = 9
fstat(9, {st_mode=S_IFREG|0600, st_size=0, ...}) = 0
mmap(NULL, 65536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x2000000800440000
write(9, "10.125.0.0/16 /export/usc-01 64 "..., 33) = 33
read(9, "\\x010000000008001102000000\n", 16384) = 27
close(9)                                = 0
munmap(0x2000000800440000, 65536)       = 0
brk(0)                                  = 0x2000000800038000
sendmsg(6, {msg_name(16)={sa_family=AF_INET, sin_port=htons(641),
sin_addr=inet_addr("10.125.1.176")},
msg_iov(1)=[{"#\246?\315\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 56}],
msg_controllen=32, msg_control=0x2000000800341dd8, , msg_flags=0}, 0) = 56
select(1024, [3 4 5 6 7], NULL, NULL, NULL) = 2 (in [5 6])
read(5, "", 0)                          = 0
--- SIGSEGV (Segmentation fault) @ 20000008002c19d0 (63742f3132353111) ---


open("/var/lib/nfs/rmtab", O_RDWR)      = 10
fstat(10, {st_mode=S_IFREG|0644, st_size=6445, ...}) = 0
mmap(NULL, 65536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x200000000037c000
lseek(10, 0, SEEK_CUR)                  = 0
read(10, "10.125.1.10:10.125.0.0/16:0x0000"..., 16384) = 6445
lseek(10, 6445, SEEK_SET)               = 6445
lseek(10, -4678, SEEK_CUR)              = 1767
write(10, "10.125.0.0/16:/export/usc-01:0x0"..., 40) = 40
fdatasync(10)                           = 0
close(10)                               = 0
munmap(0x200000000037c000, 65536)       = 0
close(8)                                = 0
gettimeofday({1083357502, 998698}, NULL) = 0
write(5, "10.125.0.0/16 0 \\x00080011020000"..., 62) = 62
--- SIGSEGV (Segmentation fault) @ 20000000002899d0 (7064752f35343639) ---

-- 
Garrick Staples, Linux/HPCC Administrator
University of Southern California

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]