| 2008-04-05 20:28:01 |
Cassus |
bug |
|
|
added bug |
| 2008-05-06 08:32:21 |
Timo Aaltonen |
None: importance |
Undecided |
Critical |
|
| 2008-05-06 08:32:21 |
Timo Aaltonen |
None: status |
New |
Confirmed |
|
| 2008-06-16 21:37:39 |
Daniel J Blueman |
marked as duplicate |
|
224750 |
|
| 2008-07-21 14:41:47 |
Steve Langasek |
removed duplicate marker |
224750 |
|
|
| 2008-08-04 19:11:26 |
noopy.org |
bug |
|
|
added attachment 'foo.txt' (foo.txt) |
| 2008-09-02 20:14:55 |
Leann Ogasawara |
linux: status |
Confirmed |
Fix Released |
|
| 2008-09-02 20:14:55 |
Leann Ogasawara |
linux: statusexplanation |
I've bumped into the same bug, the trace is a bit different but the cause could be the same:
Call Trace:
[sunrpc:queue_delayed_work+0x51/0x70] queue_delayed_work+0x51/0x70
[lock_timer_base+0x27/0x60] lock_timer_base+0x27/0x60
[<f8e65195>] call_bind+0x45/0x80 [sunrpc]
[shpchp:del_timer_sync+0xe/0x20] del_timer_sync+0xe/0x20
[<f8e6c07c>] rpc_delete_timer+0x2c/0x50 [sunrpc]
[<f8e6c542>] __rpc_execute+0x62/0x280 [sunrpc]
[10295.051592] [<f8e660c2>] rpc_release_client+0x32/0x60 [sunrpc]
[<f8e6c760>] rpc_async_schedule+0x0/0x10 [sunrpc]
[run_workqueue+0xbf/0x160] run_workqueue+0xbf/0x160
[worker_thread+0x0/0xe0] worker_thread+0x0/0xe0
[worker_thread+0x84/0xe0] worker_thread+0x84/0xe0
[<c0140b70>] autoremove_wake_function+0x0/0x40
[worker_thread+0x0/0xe0] worker_thread+0x0/0xe0
[kthread+0x42/0x70] kthread+0x42/0x70
[kthread+0x0/0x70] kthread+0x0/0x70
[kernel_thread_helper+0x7/0x10] kernel_thread_helper+0x7/0x10
=======================
Code: ac 00 00 00 c7 44 24 08 04 9a e7 f8 c7 04 24 30 d1 e7 f8 89 44 24 04 e8 2f 89 2b c7 c7 44 24 20 a0 ff ff ff e9 0c fe ff ff 66 90 <0f> 0b eb fe 0f b7 b0 ac 00 00 00 8b 57 24 8b 4f 20 8b 5f 2c 8b
EIP: [<f8e74540>] rpcb_getport_async+0x290/0x430 [sunrpc] SS:ESP 0068:dfb99f00
---[ end trace d8ca4a218e8bc80c ]---
|
Hi Daniel,
I agree this is SRU worthy if patches can be isolated. I'll go ahead and open the nomination for Hardy. From your last comment it appears this should not be an issue for Intrepid so I'll tentatively mark this "Fix Released" for Intrepid. Thanks. |
|
| 2009-03-16 13:27:46 |
Stefan Bader |
linux: status |
New |
In Progress |
|
| 2009-03-16 13:27:46 |
Stefan Bader |
linux: assignee |
|
stefan-bader-canonical |
|
| 2009-03-16 13:27:46 |
Stefan Bader |
linux: importance |
Undecided |
High |
|
| 2009-03-16 13:27:46 |
Stefan Bader |
linux: statusexplanation |
|
|
|
| 2009-03-25 15:24:11 |
Stefan Bader |
linux: status |
In Progress |
Fix Committed |
|
| 2009-03-25 15:26:10 |
Stefan Bader |
description |
After viewing a film on an nfs4 share for about 20 minutes:
Apr 5 22:19:46 lena kernel: [10870.179278] ------------[ cut here ]------------
Apr 5 22:19:46 lena kernel: [10870.179287] kernel BUG at /build/buildd/linux-2.6.24/net/sunrpc/rpcb_clnt.c:322!
Apr 5 22:19:46 lena kernel: [10870.179292] invalid opcode: 0000 [#1] SMP
Apr 5 22:19:46 lena kernel: [10870.179297] Modules linked in: des_generic cbc af_packet binfmt_misc rfcomm l2cap bluetooth ppdev autofs4 ipv6 acpi_cpufreq cpufreq_userspace cpufreq_stats cpufreq_powersave cpufreq_ondemand freq_table cpufreq_conservative sbs sbshc bay dock rpcsec_gss_krb5 auth_rpcgss nfs lockd nfs_acl sunrpc iptable_filter ip_tables x_tables ipw2200 ieee80211 ieee80211_crypt sbp2 lp arc4 ecb blkcipher pcmcia snd_hda_intel snd_hwdep snd_pcm_oss snd_pcm snd_page_alloc snd_mixer_oss snd_seq_dummy nvidia(P) snd_seq_oss iwl3945 iwlwifi_mac80211 snd_seq_midi psmouse tifm_7xx1 snd_rawmidi serio_raw snd_seq_midi_event tifm_core i2c_core yenta_socket rsrc_nonstatic pcmcia_core cfg80211 snd_seq snd_timer snd_seq_device container snd video output intel_agp agpgart irda ac acer_acpi led_class button pcspkr evdev iTCO_wdt iTCO_vendor_support parport_pc parport crc_ccitt battery shpchp pci_hotplug wmi_acer soundcore ext3 jbd mbcache sg sr_mod sd_mod cdrom ata_piix pata_acpi ata_generic libata scsi_mod ohci
Apr 5 22:19:46 lena kernel: 394 ieee1394 ehci_hcd uhci_hcd usbcore tg3 thermal processor fan fbcon tileblit font bitblit softcursor fuse
Apr 5 22:19:46 lena kernel: [10870.179436]
Apr 5 22:19:46 lena kernel: [10870.179440] Pid: 3393, comm: mplayer Tainted: P (2.6.24-14-generic #1)
Apr 5 22:19:46 lena kernel: [10870.179445] EIP: 0060:[<f8e7f540>] EFLAGS: 00010206 CPU: 1
Apr 5 22:19:46 lena kernel: [10870.179483] EIP is at rpcb_getport_async+0x290/0x430 [sunrpc]
Apr 5 22:19:46 lena kernel: [10870.179487] EAX: c2a97c00 EBX: c2a97c00 ECX: c2a97c80 EDX: f8e98b40
Apr 5 22:19:46 lena kernel: [10870.179491] ESI: eb35ef00 EDI: eb35e900 EBP: c2b47000 ESP: c298fcc8
Apr 5 22:19:46 lena kernel: [10870.179495] DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068
Apr 5 22:19:46 lena kernel: [10870.179500] Process mplayer (pid: 3393, ti=c298e000 task=c29685a0 task.ti=c298e000)
Apr 5 22:19:46 lena kernel: [10870.179503] Stack: c299d448 c298fd00 00000000 c298fd00 00000000 c298fd08 c0318059 c2a97c00
Apr 5 22:19:46 lena kernel: [10870.179514] c2a97c80 00000001 f8e770a0 c2a97c80 c03180cb c2a97c00 c2b47000 c298fd80
Apr 5 22:19:46 lena kernel: [10870.179525] c2a97c80 f8e70195 f8e71cc8 c298fd14 c298fd14 00000000 00000000 c2a97c00
Apr 5 22:19:46 lena kernel: [10870.179535] Call Trace:
Apr 5 22:19:46 lena kernel: [10870.179565] [__wait_on_bit+0x59/0x70] __wait_on_bit+0x59/0x70
Apr 5 22:19:46 lena kernel: [10870.179587] [<f8e770a0>] rpc_wait_bit_interruptible+0x0/0x20 [sunrpc]
Apr 5 22:19:46 lena kernel: [10870.179633] [nfs:out_of_line_wait_on_bit+0x5b/0x70] out_of_line_wait_on_bit+0x5b/0x70
Apr 5 22:19:46 lena kernel: [10870.179656] [<f8e70195>] call_bind+0x45/0x80 [sunrpc]
Apr 5 22:19:46 lena kernel: [10870.179688] [<f8e71cc8>] call_timeout+0x18/0x120 [sunrpc]
Apr 5 22:19:46 lena kernel: [10870.179739] [<f8e77542>] __rpc_execute+0x62/0x280 [sunrpc]
Apr 5 22:19:46 lena kernel: [10870.179787] [<f8e76bf4>] rpc_set_active+0x44/0x70 [sunrpc]
Apr 5 22:19:46 lena kernel: [10870.179835] [<f8e70f38>] rpc_do_run_task+0x68/0xc0 [sunrpc]
Apr 5 22:19:46 lena kernel: [10870.179888] [<f8e7100d>] rpc_call_sync+0x1d/0x40 [sunrpc]
Apr 5 22:19:46 lena kernel: [10870.179935] [<f8f03c65>] _nfs4_proc_getattr+0x55/0x60 [nfs]
Apr 5 22:19:46 lena kernel: [10870.179994] [<f8f0515b>] nfs4_proc_getattr+0x2b/0x50 [nfs]
Apr 5 22:19:46 lena kernel: [10870.180049] [<f8ef47c2>] __nfs_revalidate_inode+0x192/0x2d0 [nfs]
Apr 5 22:19:46 lena kernel: [10870.180111] [enqueue_entity+0x5b/0x60] enqueue_entity+0x5b/0x60
Apr 5 22:19:46 lena kernel: [10870.180126] [enqueue_task_fair+0x27/0x30] enqueue_task_fair+0x27/0x30
Apr 5 22:19:46 lena kernel: [10870.180135] [enqueue_task+0x12/0x30] enqueue_task+0x12/0x30
Apr 5 22:19:46 lena kernel: [10870.180148] [nfs:__next_cpu+0x12/0x60] __next_cpu+0x12/0x20
Apr 5 22:19:46 lena kernel: [10870.180156] [find_busiest_group+0x1c4/0x780] find_busiest_group+0x1c4/0x780
Apr 5 22:19:46 lena kernel: [10870.180165] [balance_tasks+0x6a/0x100] balance_tasks+0x6a/0x100
Apr 5 22:19:46 lena kernel: [10870.180199] [<f8ef5653>] nfs_revalidate_mapping+0x43/0xb0 [nfs]
Apr 5 22:19:46 lena kernel: [10870.180247] [<f8ef31b5>] nfs_file_read+0x85/0x120 [nfs]
Apr 5 22:19:46 lena kernel: [10870.180303] [ext3:do_sync_read+0xd5/0xba0] do_sync_read+0xd5/0x120
Apr 5 22:19:46 lena kernel: [10870.180313] [nfs:schedule+0x20a/0x650] schedule+0x20a/0x600
Apr 5 22:19:46 lena kernel: [10870.180341] [<c0141b70>] autoremove_wake_function+0x0/0x40
Apr 5 22:19:46 lena kernel: [10870.180355] [do_nanosleep+0x59/0x70] do_nanosleep+0x59/0x70
Apr 5 22:19:46 lena kernel: [10870.180367] [hrtimer_nanosleep+0x5c/0xd0] hrtimer_nanosleep+0x5c/0xd0
Apr 5 22:19:46 lena kernel: [10870.180384] [hrtimer_wakeup+0x0/0x20] hrtimer_wakeup+0x0/0x20
Apr 5 22:19:46 lena kernel: [10870.180397] [<c018df30>] do_sync_read+0x0/0x120
Apr 5 22:19:46 lena kernel: [10870.180405] [vfs_read+0xb7/0x170] vfs_read+0xb7/0x170
Apr 5 22:19:46 lena kernel: [10870.180419] [sys_read+0x41/0x70] sys_read+0x41/0x70
Apr 5 22:19:46 lena kernel: [10870.180433] [sysenter_past_esp+0x6b/0xa9] sysenter_past_esp+0x6b/0xa9
Apr 5 22:19:46 lena kernel: [10870.180463] =======================
Apr 5 22:19:46 lena kernel: [10870.180465] Code: ac 00 00 00 c7 44 24 08 04 4a e8 f8 c7 04 24 30 81 e8 f8 89 44 24 04 e8 2f e9 2a c7 c7 44 24 20 a0 ff ff ff e9 0c fe ff ff 66 90 <0f> 0b eb fe 0f b7 b0 ac 00 00 00 8b 57 24 8b 4f 20 8b 5f 2c 8b
Apr 5 22:19:46 lena kernel: [10870.180521] EIP: [<f8e7f540>] rpcb_getport_async+0x290/0x430 [sunrpc] SS:ESP 0068:c298fcc8
Apr 5 22:19:46 lena kernel: [10870.180571] ---[ end trace f4581af82034a623 ]---
and the video stream stops. This bug is more-or-less reliably reproducable on my computer. |
SRU justification:
Impact: Having NFS mounted filesystems with autobinding in use there seems
to be a good chance that cloned clients might call rpcb_getport_async()
and thus trigger a Bug() statement in the code.
Fix: A cherry pick from upstream to walk to the parent client to find out
who "owns" the port. Fix was verified to be working.
Testcase: see below
---
After viewing a film on an nfs4 share for about 20 minutes:
Apr 5 22:19:46 lena kernel: [10870.179278] ------------[ cut here ]------------
Apr 5 22:19:46 lena kernel: [10870.179287] kernel BUG at /build/buildd/linux-2.6.24/net/sunrpc/rpcb_clnt.c:322!
Apr 5 22:19:46 lena kernel: [10870.179292] invalid opcode: 0000 [#1] SMP
Apr 5 22:19:46 lena kernel: [10870.179297] Modules linked in: des_generic cbc af_packet binfmt_misc rfcomm l2cap bluetooth ppdev autofs4 ipv6 acpi_cpufreq cpufreq_userspace cpufreq_stats cpufreq_powersave cpufreq_ondemand freq_table cpufreq_conservative sbs sbshc bay dock rpcsec_gss_krb5 auth_rpcgss nfs lockd nfs_acl sunrpc iptable_filter ip_tables x_tables ipw2200 ieee80211 ieee80211_crypt sbp2 lp arc4 ecb blkcipher pcmcia snd_hda_intel snd_hwdep snd_pcm_oss snd_pcm snd_page_alloc snd_mixer_oss snd_seq_dummy nvidia(P) snd_seq_oss iwl3945 iwlwifi_mac80211 snd_seq_midi psmouse tifm_7xx1 snd_rawmidi serio_raw snd_seq_midi_event tifm_core i2c_core yenta_socket rsrc_nonstatic pcmcia_core cfg80211 snd_seq snd_timer snd_seq_device container snd video output intel_agp agpgart irda ac acer_acpi led_class button pcspkr evdev iTCO_wdt iTCO_vendor_support parport_pc parport crc_ccitt battery shpchp pci_hotplug wmi_acer soundcore ext3 jbd mbcache sg sr_mod sd_mod cdrom ata_piix pata_acpi ata_generic libata scsi_mod ohci
Apr 5 22:19:46 lena kernel: 394 ieee1394 ehci_hcd uhci_hcd usbcore tg3 thermal processor fan fbcon tileblit font bitblit softcursor fuse
Apr 5 22:19:46 lena kernel: [10870.179436]
Apr 5 22:19:46 lena kernel: [10870.179440] Pid: 3393, comm: mplayer Tainted: P (2.6.24-14-generic #1)
Apr 5 22:19:46 lena kernel: [10870.179445] EIP: 0060:[<f8e7f540>] EFLAGS: 00010206 CPU: 1
Apr 5 22:19:46 lena kernel: [10870.179483] EIP is at rpcb_getport_async+0x290/0x430 [sunrpc]
Apr 5 22:19:46 lena kernel: [10870.179487] EAX: c2a97c00 EBX: c2a97c00 ECX: c2a97c80 EDX: f8e98b40
Apr 5 22:19:46 lena kernel: [10870.179491] ESI: eb35ef00 EDI: eb35e900 EBP: c2b47000 ESP: c298fcc8
Apr 5 22:19:46 lena kernel: [10870.179495] DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068
Apr 5 22:19:46 lena kernel: [10870.179500] Process mplayer (pid: 3393, ti=c298e000 task=c29685a0 task.ti=c298e000)
Apr 5 22:19:46 lena kernel: [10870.179503] Stack: c299d448 c298fd00 00000000 c298fd00 00000000 c298fd08 c0318059 c2a97c00
Apr 5 22:19:46 lena kernel: [10870.179514] c2a97c80 00000001 f8e770a0 c2a97c80 c03180cb c2a97c00 c2b47000 c298fd80
Apr 5 22:19:46 lena kernel: [10870.179525] c2a97c80 f8e70195 f8e71cc8 c298fd14 c298fd14 00000000 00000000 c2a97c00
Apr 5 22:19:46 lena kernel: [10870.179535] Call Trace:
Apr 5 22:19:46 lena kernel: [10870.179565] [__wait_on_bit+0x59/0x70] __wait_on_bit+0x59/0x70
Apr 5 22:19:46 lena kernel: [10870.179587] [<f8e770a0>] rpc_wait_bit_interruptible+0x0/0x20 [sunrpc]
Apr 5 22:19:46 lena kernel: [10870.179633] [nfs:out_of_line_wait_on_bit+0x5b/0x70] out_of_line_wait_on_bit+0x5b/0x70
Apr 5 22:19:46 lena kernel: [10870.179656] [<f8e70195>] call_bind+0x45/0x80 [sunrpc]
Apr 5 22:19:46 lena kernel: [10870.179688] [<f8e71cc8>] call_timeout+0x18/0x120 [sunrpc]
Apr 5 22:19:46 lena kernel: [10870.179739] [<f8e77542>] __rpc_execute+0x62/0x280 [sunrpc]
Apr 5 22:19:46 lena kernel: [10870.179787] [<f8e76bf4>] rpc_set_active+0x44/0x70 [sunrpc]
Apr 5 22:19:46 lena kernel: [10870.179835] [<f8e70f38>] rpc_do_run_task+0x68/0xc0 [sunrpc]
Apr 5 22:19:46 lena kernel: [10870.179888] [<f8e7100d>] rpc_call_sync+0x1d/0x40 [sunrpc]
Apr 5 22:19:46 lena kernel: [10870.179935] [<f8f03c65>] _nfs4_proc_getattr+0x55/0x60 [nfs]
Apr 5 22:19:46 lena kernel: [10870.179994] [<f8f0515b>] nfs4_proc_getattr+0x2b/0x50 [nfs]
Apr 5 22:19:46 lena kernel: [10870.180049] [<f8ef47c2>] __nfs_revalidate_inode+0x192/0x2d0 [nfs]
Apr 5 22:19:46 lena kernel: [10870.180111] [enqueue_entity+0x5b/0x60] enqueue_entity+0x5b/0x60
Apr 5 22:19:46 lena kernel: [10870.180126] [enqueue_task_fair+0x27/0x30] enqueue_task_fair+0x27/0x30
Apr 5 22:19:46 lena kernel: [10870.180135] [enqueue_task+0x12/0x30] enqueue_task+0x12/0x30
Apr 5 22:19:46 lena kernel: [10870.180148] [nfs:__next_cpu+0x12/0x60] __next_cpu+0x12/0x20
Apr 5 22:19:46 lena kernel: [10870.180156] [find_busiest_group+0x1c4/0x780] find_busiest_group+0x1c4/0x780
Apr 5 22:19:46 lena kernel: [10870.180165] [balance_tasks+0x6a/0x100] balance_tasks+0x6a/0x100
Apr 5 22:19:46 lena kernel: [10870.180199] [<f8ef5653>] nfs_revalidate_mapping+0x43/0xb0 [nfs]
Apr 5 22:19:46 lena kernel: [10870.180247] [<f8ef31b5>] nfs_file_read+0x85/0x120 [nfs]
Apr 5 22:19:46 lena kernel: [10870.180303] [ext3:do_sync_read+0xd5/0xba0] do_sync_read+0xd5/0x120
Apr 5 22:19:46 lena kernel: [10870.180313] [nfs:schedule+0x20a/0x650] schedule+0x20a/0x600
Apr 5 22:19:46 lena kernel: [10870.180341] [<c0141b70>] autoremove_wake_function+0x0/0x40
Apr 5 22:19:46 lena kernel: [10870.180355] [do_nanosleep+0x59/0x70] do_nanosleep+0x59/0x70
Apr 5 22:19:46 lena kernel: [10870.180367] [hrtimer_nanosleep+0x5c/0xd0] hrtimer_nanosleep+0x5c/0xd0
Apr 5 22:19:46 lena kernel: [10870.180384] [hrtimer_wakeup+0x0/0x20] hrtimer_wakeup+0x0/0x20
Apr 5 22:19:46 lena kernel: [10870.180397] [<c018df30>] do_sync_read+0x0/0x120
Apr 5 22:19:46 lena kernel: [10870.180405] [vfs_read+0xb7/0x170] vfs_read+0xb7/0x170
Apr 5 22:19:46 lena kernel: [10870.180419] [sys_read+0x41/0x70] sys_read+0x41/0x70
Apr 5 22:19:46 lena kernel: [10870.180433] [sysenter_past_esp+0x6b/0xa9] sysenter_past_esp+0x6b/0xa9
Apr 5 22:19:46 lena kernel: [10870.180463] =======================
Apr 5 22:19:46 lena kernel: [10870.180465] Code: ac 00 00 00 c7 44 24 08 04 4a e8 f8 c7 04 24 30 81 e8 f8 89 44 24 04 e8 2f e9 2a c7 c7 44 24 20 a0 ff ff ff e9 0c fe ff ff 66 90 <0f> 0b eb fe 0f b7 b0 ac 00 00 00 8b 57 24 8b 4f 20 8b 5f 2c 8b
Apr 5 22:19:46 lena kernel: [10870.180521] EIP: [<f8e7f540>] rpcb_getport_async+0x290/0x430 [sunrpc] SS:ESP 0068:c298fcc8
Apr 5 22:19:46 lena kernel: [10870.180571] ---[ end trace f4581af82034a623 ]---
and the video stream stops. This bug is more-or-less reliably reproducable on my computer. |
|
| 2009-03-25 15:26:41 |
Stefan Bader |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2009-05-08 15:07:17 |
Leann Ogasawara |
linux (Ubuntu Hardy): status |
Fix Committed |
Fix Released |
|
| 2009-06-03 12:39:49 |
Stefan Bader |
linux (Ubuntu Hardy): status |
Fix Released |
Fix Committed |
|
| 2009-06-05 09:54:12 |
Martin Pitt |
tags |
cft-2.6.27 |
cft-2.6.27 verification-needed |
|
| 2009-06-25 13:54:17 |
Martin Pitt |
tags |
cft-2.6.27 verification-needed |
cft-2.6.27 verification-done |
|
| 2009-07-14 21:58:11 |
Launchpad Janitor |
linux (Ubuntu Hardy): status |
Fix Committed |
Fix Released |
|
