Oops in NFS code

[Matt Holgate]

Binary package hint: linux-image-2.6.17-10-generic

I saw the following kernel oops while playing mp3s streamed over NFS (from a server running Debian Sarge) in rhythmbox.

I think (but I'm not sure) that this has been reported upstream here:

<http://www.ussg.iu.edu/hypermail/linux/kernel/0609.1/2335.html>

I've seen this happen twice now with slightly different callstacks (both oops are below).

[17181493.928000] BUG: unable to handle kernel NULL pointer dereference at virtual address 00000000
[17181493.928000] printing eip:
[17181493.928000] c01150e0
[17181493.928000] *pde = 00000000
[17181493.928000] Oops: 0000 [#1]
[17181493.928000] Modules linked in: snd_rtctimer nfs lockd sunrpc binfmt_misc rfcomm hidp l2cap bluetooth autofs4 cpufreq_userspace cpufreq_stats freq_table
 cpufreq_powersave cpufreq_ondemand cpufreq_conservative video tc1100_wmi sbs sony_acpi pcc_acpi i2c_ec hotkey dev_acpi button battery container ac asus_acpi
 af_packet xfs nls_iso8859_1 nls_cp437 vfat fat nls_utf8 ntfs dm_mod md_mod radeon drm sr_mod sbp2 lp snd_via82xx snd_ac97_codec snd_ac97_bus snd_mpu401_uart
 snd_seq_dummy snd_seq_oss quickcam tsdev snd_seq_midi snd_rawmidi snd_seq_midi_event snd_seq saa7134_alsa snd_pcm_oss snd_mixer_oss snd_pcm snd_page_alloc s
aa7134 ipv6 analog bcm43xx video_buf compat_ioctl32 v4l2_common v4l1_compat ir_kbd_i2c snd_timer snd_seq_device snd via_agp agpgart i2c_viapro shpchp pci_hot
plug rtc serio_raw gameport psmouse ieee80211softmac ir_common floppy parport_pc parport pcspkr evdev 8139cp 8139too mii soundcore i2c_core ieee80211 ieee802
11_crypt videodev usbhid ext3 jbd ehci_hcd ohci1394 ieee1394 uhci_hcd usbcore ide_generic ide_cd cdrom ide_disk via82cxxx generic sata_via libata scsi_mod th
ermal processor fan fbcon tileblit font bitblit softcursor vesafb capability commoncap
[17181493.928000] CPU: 0
[17181493.928000] EIP: 0060:[<c01150e0>] Not tainted VLI
[17181493.928000] EFLAGS: 00010202 (2.6.17-10-386 #2)
[17181493.928000] EIP is at kmap_atomic+0x10/0x70
[17181493.928000] eax: d1b42000 ebx: 00000000 ecx: 00000003 edx: 00000003
[17181493.928000] esi: 000006dc edi: 00000924 ebp: d0141948 esp: d1b43d78
[17181493.928000] ds: 007b es: 007b ss: 0068
[17181493.928000] Process rhythmbox (pid: 7325, threadinfo=d1b42000 task=cf136ad0)
[17181493.928000] Stack: 0000036e e128b4f8 00000c92 d3c923c0 00001000 d0141948 e128c3d2 00000004
[17181493.928000] 000201d2 c0358358 00000202 00000003 00000000 00000001 c0358358 cf136ad0
[17181493.928000] 000201d2 00000000 00000000 d01419e8 d2961520 00000000 d01419e4 d0141830
[17181493.928000] Call Trace:
[17181493.928000] <e128b4f8> nfs_readpage_truncate_uninitialised_page+0xe8/0x130 [nfs] <e128c3d2> nfs_readpage+0x232/0x4b0 [nfs]
[17181493.928000] <c013c80e> do_generic_mapping_read+0x4ae/0x540 <c013d21d> __generic_file_aio_read+0xfd/0x230
[17181493.928000] <c013bb30> file_read_actor+0x0/0xf0 <e08ec469> usb_submit_urb+0x199/0x200 [usbcore]
[17181493.928000] <c013d395> generic_file_aio_read+0x45/0x60 <c01581e4> do_sync_read+0xc4/0x100
[17181493.928000] <c012a640> autoremove_wake_function+0x0/0x50 <c01619fe> sys_fstat64+0x1e/0x30
[17181493.928000] <c0158c9c> vfs_read+0xbc/0x180 <c0158120> do_sync_read+0x0/0x100
[17181493.928000] <c0159101> sys_read+0x41/0x70 <c0102dbb> sysenter_past_esp+0x54/0x79
[17181493.928000] Code: c1 e0 05 03 05 40 3d 45 c0 c3 0f 0b 98 00 12 de 2d c0 eb d4 8d b4 26 00 00 00 00 53 89 c3 b8 00 e0 ff ff 89 d1 21 e0 83 40 14 01 <8b>
 03 c1 e8 1e 8b 14 85 04 cb 3c c0 8b 82 10 01 00 00 05 6c 03
[17181493.928000] EIP: [<c01150e0>] kmap_atomic+0x10/0x70 SS:ESP 0068:d1b43d78
[17181493.928000] <6>note: rhythmbox[7325] exited with preempt_count 1

Oct 19 08:39:30 localhost kernel: [17181631.204000] BUG: unable to handle kernel NULL pointer dereference at virtual address 00000000
Oct 19 08:39:31 localhost kernel: [17181631.204000] printing eip:
Oct 19 08:39:31 localhost kernel: [17181631.204000] c01150e0
Oct 19 08:39:31 localhost kernel: [17181631.204000] *pde = 00000000
Oct 19 08:39:31 localhost kernel: [17181631.204000] Oops: 0000 [#1]
Oct 19 08:39:31 localhost kernel: [17181631.204000] Modules linked in: vmnet vmmon ppdev nfs lockd sunrpc binfmt_misc rfcomm hidp l2cap bluetooth autofs4 cpu
freq_userspace cpufreq_stats freq_table cpufreq_powersave cpufreq_ondemand cpufreq_conservative video tc1100_wmi sbs sony_acpi pcc_acpi i2c_ec hotkey dev_acp
i button battery container ac asus_acpi af_packet xfs nls_iso8859_1 nls_cp437 vfat fat nls_utf8 ntfs dm_mod md_mod radeon drm sr_mod sbp2 lp saa7134_alsa snd
_via82xx snd_ac97_codec snd_ac97_bus snd_mpu401_uart snd_pcm_oss snd_mixer_oss ipv6 tsdev snd_pcm snd_page_alloc snd_seq_dummy snd_seq_oss bcm43xx snd_seq_mi
di snd_rawmidi snd_seq_midi_event saa7134 ieee80211softmac video_buf compat_ioctl32 v4l2_common v4l1_compat ir_kbd_i2c snd_seq snd_timer snd_seq_device quick
cam 8139cp 8139too mii ir_common ieee80211 ieee80211_crypt evdev i2c_viapro psmouse i2c_core shpchp pci_hotplug parport_pc parport snd floppy videodev usbhid
 rtc serio_raw via_agp agpgart soundcore pcspkr analog gameport ext3 jbd ehci_hcd ohci1
Oct 19 08:39:31 localhost kernel: 94 ieee1394 uhci_hcd usbcore ide_generic ide_cd cdrom ide_disk via82cxxx generic sata_via libata scsi_mod thermal processor
 fan fbcon tileblit font bitblit softcursor vesafb capability commoncap
Oct 19 08:39:31 localhost kernel: [17181631.204000] CPU: 0
Oct 19 08:39:31 localhost kernel: [17181631.204000] EIP: 0060:[kmap_atomic+16/112] Tainted: P VLI
Oct 19 08:39:31 localhost kernel: [17181631.204000] EFLAGS: 00010202 (2.6.17-10-386 #2)
Oct 19 08:39:31 localhost kernel: [17181631.204000] EIP is at kmap_atomic+0x10/0x70
Oct 19 08:39:31 localhost kernel: [17181631.204000] eax: d9110000 ebx: 00000000 ecx: 00000003 edx: 00000003
Oct 19 08:39:31 localhost kernel: [17181631.204000] esi: 00001000 edi: 00000000 ebp: dcafc26c esp: d9111d78
Oct 19 08:39:31 localhost kernel: [17181631.204000] ds: 007b es: 007b ss: 0068
Oct 19 08:39:31 localhost kernel: [17181631.204000] Process rhythmbox (pid: 6084, threadinfo=d9110000 task=c0891070)
Oct 19 08:39:31 localhost kernel: [17181631.204000] Stack: 00000800 e128b4f8 00000800 ce0303c0 00001000 dcafc26c e128c3d2 00000004
Oct 19 08:39:31 localhost kernel: [17181631.204000] 000201d2 c0358358 00000202 00000000 00000000 00000001 c0358358 c0891070
Oct 19 08:39:31 localhost kernel: [17181631.204000] 000201d2 00000000 00000000 dcafc30c d0c58e60 00000000 dcafc308 dcafc154
Oct 19 08:39:31 localhost kernel: [17181631.204000] Call Trace:
Oct 19 08:39:31 localhost kernel: [17181631.204000] <e128b4f8> nfs_readpage_truncate_uninitialised_page+0xe8/0x130 [nfs] <e128c3d2> nfs_readpage+0x232/0x4b
0 [nfs]
Oct 19 08:39:31 localhost kernel: [17181631.204000] <c013c80e> do_generic_mapping_read+0x4ae/0x540 <c013d21d> __generic_file_aio_read+0xfd/0x230
Oct 19 08:39:31 localhost kernel: [17181631.204000] <c013bb30> file_read_actor+0x0/0xf0 <c013d395> generic_file_aio_read+0x45/0x60
Oct 19 08:39:31 localhost kernel: [17181631.204000] <c01581e4> do_sync_read+0xc4/0x100 <c012a640> autoremove_wake_function+0x0/0x50
Oct 19 08:39:31 localhost kernel: [17181631.204000] <c0158c9c> vfs_read+0xbc/0x180 <c0158120> do_sync_read+0x0/0x100
Oct 19 08:39:31 localhost kernel: [17181631.204000] <c0159101> sys_read+0x41/0x70 <c0102dbb> sysenter_past_esp+0x54/0x79
Oct 19 08:39:31 localhost kernel: [17181631.204000] Code: c1 e0 05 03 05 40 3d 45 c0 c3 0f 0b 98 00 12 de 2d c0 eb d4 8d b4 26 00 00 00 00 53 89 c3 b8 00 e0
ff ff 89 d1 21 e0 83 40 14 01 <8b> 03 c1 e8 1e 8b 14 85 04 cb 3c c0 8b 82 10 01 00 00 05 6c 03
Oct 19 08:39:31 localhost kernel: [17181631.204000] EIP: [kmap_atomic+16/112] kmap_atomic+0x10/0x70 SS:ESP 0068:d9111d78

[Surfraz Ahmed (surfraz)]

I've seen this on a brand new edgy installation with the /home drive mounted over nfs using nfs-user-server on kernels 2.6.17-10-386, 2.6.17-10-server and 2.6.17-10-generic.

Whenever load is put on nfs by starting e.g. openoffice and firefox, then after a few seconds I see the kernel messages below and one or more of the programs accessing the home drive freeze up.

Can't use the kernel-nfs as it causes other problems with gnome panels freezing!!

I haven't found a fix yet. Dapper workstations on the same network work without problems.

For information here is my kernel messages:-

Nov 11 20:16:33 os-i03 kernel: [42949573.900000] BUG: unable to handle kernel NULL pointer dereference at virtual address 00000000
Nov 11 20:16:33 os-i03 kernel: [42949573.900000] printing eip:
Nov 11 20:16:33 os-i03 kernel: [42949573.900000] c0119a92
Nov 11 20:16:33 os-i03 kernel: [42949573.900000] *pde = 07acb001
Nov 11 20:16:33 os-i03 kernel: [42949573.900000] Oops: 0000 [#1]
Nov 11 20:16:33 os-i03 kernel: [42949573.900000] SMP
Nov 11 20:16:33 os-i03 kernel: [42949573.900000] Modules linked in: binfmt_misc rfcomm l2cap bluetooth mga drm speedstep_lib cpufreq_userspace cpufreq_stats freq_table cpufreq_powersave cpufreq_ondemand cpufreq_conservative video tc1100_wmi sbs sony_acpi pcc_acpi i2c_ec i2c_core hotkey dev_acpi button battery container ac asus_acpi ipv6 nfs lockd sunrpc af_packet lp snd_intel8x0 snd_ac97_codec snd_ac97_bus snd_pcm_oss sg snd_pcm e100 snd_mixer_oss snd_seq_dummy snd_seq_oss matrox_w1 wire snd_seq_midi snd_rawmidi snd_seq_midi_event mii tsdev snd_seq snd_timer snd_seq_device serio_raw snd soundcore snd_page_alloc intel_agp agpgart hw_random shpchp pci_hotplug psmouse evdev parport_pc parport floppy pcspkr ext3 jbd sd_mod uhci_hcd usbcore ide_generic aic7xxx scsi_transport_spi scsi_mod ide_cd cdrom piix generic thermal processor fan fbcon tileblit font bitblit softcursor vesafb capability commoncap
Nov 11 20:16:33 os-i03 kernel: [42949573.900000] CPU: 0
Nov 11 20:16:33 os-i03 kernel: [42949573.900000] EIP: 0060:[kmap_atomic+34/224] Not tainted VLI
Nov 11 20:16:33 os-i03 kernel: [42949573.900000] EFLAGS: 00210202 (2.6.17-10-server #2)
Nov 11 20:16:33 os-i03 kernel: [42949573.900000] EIP is at kmap_atomic+0x22/0xe0
Nov 11 20:16:33 os-i03 kernel: [42949573.900000] eax: 00000000 ebx: 00000000 ecx: cd5da000 edx: 00000003
Nov 11 20:16:33 os-i03 kernel: [42949573.900000] esi: 00000003 edi: 0000036e ebp: cf765ba4 esp: cd5dbd6c
Nov 11 20:16:33 os-i03 kernel: [42949573.900000] ds: 007b es: 007b ss: 0068
Nov 11 20:16:33 os-i03 kernel: [42949573.900000] Process firefox-bin (pid: 5071, threadinfo=cd5da000 task=d25b7560)
Nov 11 20:16:33 os-i03 kernel: [42949573.900000] Stack: 00000003 cf765b4c 00000649 00000c92 0000036e cf765ba4 e0bafc78 000009b7
Nov 11 20:16:33 os-i03 kernel: [42949573.900000] c064bc80 00001000 cf765ba4 e0bb0c12 00000004 00200206 00200286 00200096
Nov 11 20:16:33 os-i03 kernel: [42949573.900000] 00200082 cf765c50 00000000 c01e12f0 00000001 c01e1b8a 00000000 00000000
Nov 11 20:16:33 os-i03 kernel: [42949573.900000] Call Trace:
Nov 11 20:16:33 os-i03 kernel: [42949573.900000] <e0bafc78> nfs_...

[Launchpad Janitor (janitor)]

The 18 month support period for Edgy Eft 6.10 has reached its end of life. As a result, we are closing the linux-source-2.6.17 Edgy Eft kernel task. However, development has already began for the upcoming Intrepid Ibex 8.10 release. It would be helpful if you could test the upcoming release and verify if this is still an issue - http://www.ubuntu.com/testing . If the issue still exists, please update this report by changing the Status of the "linux" task from "Incomplete" to "New". We appreciate your patience and understanding as we make this transition. Thanks!