[Bug 2773] New: kernel panic under medium load

["Martin J. Bligh" <mbligh@aracnet.com>]

http://bugme.osdl.org/show_bug.cgi?id=2773

           Summary: kernel panic under medium load
    Kernel Version: 2.6.6 unpatched
            Status: NEW
          Severity: normal
             Owner: akpm@digeo.com
         Submitter: bug-kernel@leroutier.net


Distribution:
Gentoo x86

Hardware Environment:
P4 Celeron
0000:00:00.0 Host bridge: VIA Technologies, Inc. P4M266 Host Bridge
0000:00:01.0 PCI bridge: VIA Technologies, Inc. VT8633 [Apollo Pro266 AGP]
0000:00:05.0 Ethernet controller: D-Link System Inc RTL8139 Ethernet (rev 10)
0000:00:10.0 USB Controller: VIA Technologies, Inc. VT82xxxxx UHCI USB 1.1
Controller (rev 80)
0000:00:10.1 USB Controller: VIA Technologies, Inc. VT82xxxxx UHCI USB 1.1
Controller (rev 80)
0000:00:10.2 USB Controller: VIA Technologies, Inc. VT82xxxxx UHCI USB 1.1
Controller (rev 80)
0000:00:10.3 USB Controller: VIA Technologies, Inc. USB 2.0 (rev 82)
0000:00:11.0 ISA bridge: VIA Technologies, Inc. VT8235 ISA Bridge
0000:00:11.1 IDE interface: VIA Technologies, Inc.
VT82C586A/B/VT82C686/A/B/VT823x/A/C PIPC Bus Master IDE (rev 06)
0000:00:11.5 Multimedia audio controller: VIA Technologies, Inc.
VT8233/A/8235/8237 AC97 Audio Controller (rev 50)
0000:00:12.0 Ethernet controller: VIA Technologies, Inc. VT6102 [Rhine-II] (rev 74)
0000:01:00.0 VGA compatible controller: S3 Inc. VT8375 [ProSavage8 KM266/KL266]

Software Environment:
mldonkey 2.5.21 (the app that triggers the bug at each time)

Problem Description:

Unable to handle kernel paging request at virtual address 00004018
 printing eip:
c012c41c
*pde = 00000000
Oops: 0002 [#1]
CPU:    0
EIP:    0060:[<c012c41c>]    Not tainted
EFLAGS: 00010206   (2.6.6)
EIP is at __alloc_pages+0x5e/0x2d4
eax: 00004000   ebx: 00000000   ecx: 00000153   edx: c02ed5e4
esi: 00000001   edi: c02ed84c   ebp: c6e93d6c   esp: c6e93d38
ds: 007b   es: 007b   ss: 0068
Process mlnet (pid: 16251, threadinfo=c6e92000 task=ddd1d6b0)
Stack: c6e93d6c c015615c d261120c bfffc684 00000001 ddd1d6b0 00000010 00000000
       000000d2 00006006 00000000 00006006 00000000 c6e93e54 c012a4a8 d26112a4
       00006006 00000000 00000000 0001c26f c6e93d88 00000001 cfb344c8 00000020
Call Trace:
 [<c015615c>] inode_update_time+0x9c/0xd0
 [<c012a4a8>] generic_file_aio_write_nolock+0x2bf/0xaa6
 [<c012e785>] page_cache_readahead+0x1a2/0x1fd
 [<c012924a>] file_read_actor+0x0/0xda
 [<c01294b3>] __generic_file_aio_read+0x18f/0x1be
 [<c012924a>] file_read_actor+0x0/0xda
 [<c012ad8b>] generic_file_aio_write+0x6b/0x88
 [<c0170457>] ext3_file_write+0x3f/0xb8
 [<c01409cd>] do_sync_write+0x89/0xb4
 [<c011b0e1>] update_wall_time+0xf/0x3a
 [<c0111a05>] scheduler_tick+0x1f/0x506
 [<c0117cae>] __do_softirq+0x82/0x84
 [<c011b263>] update_process_times+0x46/0x50
 [<c011b0e1>] update_wall_time+0xf/0x3a
 [<c011b4df>] do_timer+0xdf/0xe4
 [<c0140944>] do_sync_write+0x0/0xb4
 [<c0140a99>] vfs_write+0xa1/0x10c
 [<c0140ba0>] sys_write+0x3f/0x5d
 [<c0103cf3>] syscall_call+0x7/0xb

Code: 83 78 18 63 7f 07 8b 42 08 d1 e8 29 c1 8b 02 39 c8 73 0c 8b

Steps to reproduce:

run mlnet (multi-network exe of mldonkey, a P2P app) with a load > 1MB/s (in & out)

preempt is off

would attach .config on request