Kernel Panic

[Troy Telford]

I've reproduced this bug on two systems (same make/model)

I can reproduce this kernel panic by doing the following (from a fresh kubuntu install)

1.) Home directories are NFS-mounted (SSO with kerberos & LDAP)

$ apt-get build-dep zeroc-ice
$ apt-get source zeroc-ice
$ cd zeroc-ice-3.4.2
$ dpkg-buildpackage

very shortly after running dpkg-buildpackage (somewhere between the patches being applied to the source and compilation begins (I'm not seeing the typical output of ./configure) the system crashes with a kernel panic.

I hooked up a serial cable & dumped the console to it, so I could catch the crash, and the output is below.

Additional: I installed http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.6.3-quantal/linux-image-3.6.3-030603-generic_3.6.3-030603.201210211349_amd64.deb (and its headers). The 3.6.3 kernel runs without issues, and I've been unable to reproduce the crash. So it seems likely that the problem is with the 3.5.0-19-generic kernel package.

[ 231.156055] kernel tried to execute NX-protected page - exploit attempt? (uid: 0)
[ 231.160048] VFS: Close: file count is 0
[ 231.160398] BUG: unable to handle kernel paging request at ffffe8ffffc802a8
[ 231.160398] IP: [<ffffe8ffffc802a8>] 0xffffe8ffffc802a7
[ 231.160398] PGD 13555f067 PUD 136077067 PMD 1354f4067 PTE 8000000134268163
[ 231.160398] Oops: 0011 [#1] SMP
[ 231.160398] CPU 1
[ 231.160398] Modules linked in:[ 231.160398] ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ipv4 nf_conntrack nf_defrag_ipv4 ip_tables x_tables bridge stp llc autofs4 parport_pc ppdev rfcomm bnep bluetooth nfsd binfmt_misc nfs lockd fscache auth_rpcgss nfs_acl sunrpc coretemp kvm_intel kvm snd_hda_codec_realtek snd_hda_intel snd_hda_codec snd_hwdep snd_pcm snd_seq_midi snd_rawmidi snd_seq_midi_event snd_seq snd_timer snd_seq_device snd mac_hid lpc_ich psmouse serio_raw microcode soundcore lp snd_page_alloc parport hid_generic usbhid hid vesafb sky2

[ 231.160398] Pid: 10, comm: ksoftirqd/1 Not tainted 3.5.0-19-generic #30-Ubuntu LENOVO 7307A1U/To be filled by O.E.M.
[ 231.160398] RIP: 0010:[<ffffe8ffffc802a8>] [<ffffe8ffffc802a8>] 0xffffe8ffffc802a7
[ 231.160398] RSP: 0018:ffff880139b73d88 EFLAGS: 00010296
[ 231.160398] RAX: ffff880136247701 RBX: ffff88013fc8ed40 RCX: 000000000000c0ed
[ 231.160398] RDX: ffff880136118800 RSI: ffffe8ffffc802a8 RDI: ffff880136118800
[ 231.160398] RBP: ffff880139b73df0 R08: 0000000000016710 R09: ffff88013fc96710
[ 231.160398] R10: ffffffff8107cf97 R11: ffffffff8113d8b1 R12: 000000000000000a
[ 231.160398] R13: 0000000000000000 R14: 0000000000000001 R15: ffffe8ffffc802a8
[ 231.160398] FS: 0000000000000000(0000) GS:ffff88013fc80000(0000) knlGS:0000000000000000
[ 231.160398] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[ 231.160398] CR2: ffffe8ffffc802a8 CR3: 0000000136275000 CR4: 00000000000407e0
[ 231.160398] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 231.160398] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 231.160398] Process ksoftirqd/1 (pid: 10, threadinfo ffff880139b72000, task ffff880139b6ae00)
[ 231.160398] Stack:
[ 231.160398] ffffffff810e7682 ffff88013fc939c0 ffff880134313dd8 ffff88013fc8ed70
[ 231.160398] ffffffff81c385c0 ffff880139b6ae00 ffff880139b73fd8 ffff880139b73df0
[ 231.160398] 0000000000000001 ffffffff81c040c8 0000000000000009 0000000000000009
[ 231.160398] Call Trace:
[ 231.160398] [<ffffffff810e7682>] ? __rcu_process_callbacks+0x1a2/0x440
[ 231.160398] [<ffffffff810e794f>] rcu_process_callbacks+0x2f/0xc0
[ 231.160398] [<ffffffff8105a796>] __do_softirq+0xb6/0x1d0
[ 231.160398] [<ffffffff8105a987>] run_ksoftirqd+0xd7/0x190
[ 231.160398] [<ffffffff8105a8b0>] ? __do_softirq+0x1d0/0x1d0
[ 231.160398] [<ffffffff81075f03>] kthread+0x93/0xa0
[ 231.160398] [<ffffffff8168c624>] kernel_thread_helper+0x4/0x10
[ 231.160398] [<ffffffff81075e70>] ? kthread_freezable_should_stop+0x70/0x70
[ 231.160398] [<ffffffff8168c620>] ? gs_change+0x13/0x13
[ 231.160398] Code: 00 00 00 80 02 c8 ff ff e8 ff ff 80 02 c8 ff ff e8 ff ff 00 00 00 00 0e 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 00 00 40 00 80 <00> 88 11 36 01 88 ff ff 00 88 11 36 01 88 ff ff 00 00 40 00 00
[ 231.160398] RIP [<ffffe8ffffc802a8>] 0xffffe8ffffc802a7
[ 231.160398] RSP <ffff880139b73d88>
[ 231.160398] CR2: ffffe8ffffc802a8
[ 231.160398] ---[ end trace 8d2c795c79c46654 ]---
[ 231.160398] Kernel panic - not syncing: Fatal exception in interrupt

ProblemType: Bug
DistroRelease: Ubuntu 12.10
Package: xorg 1:7.7+1ubuntu4
Uname: Linux 3.6.3-030603-generic x86_64
NonfreeKernelModules: nvidia
ApportVersion: 2.6.1-0ubuntu6
Architecture: amd64
Date: Sun Dec 2 20:44:11 2012
InstallationDate: Installed on 2012-11-28 (4 days ago)
InstallationMedia: Kubuntu 12.10 "Quantal Quetzal" - Release amd64 (20121017.1)
MarkForUpload: True
SourcePackage: xorg
Symptom: display
UpgradeStatus: No upgrade log present (probably fresh install)

[Brad Figg (brad-figg)]

This bug is missing log files that will aid in diagnosing the problem. From a terminal window please run:

apport-collect 1085783

and then change the status of the bug to 'Confirmed'.

If, due to the nature of the issue you have encountered, you are unable to run this command, please add a comment stating that fact and change the bug status to 'Confirmed'.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

[Joseph Salisbury (jsalisbury)]

Can you test the latest upstream 3.5 stable kernel[0] to see if the issue has been fixed already?

Thanks in advance!

[0] http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.5.7.1-quantal/

[Troy Telford (ttelford)]

I am currently unable to reproduce the bug with the kernel cited (3.5.7.1-quantal).

The usual things I could to to trigger a kernel panic have no effect. Looks promising...

I'll collect the rest of the requested data as I get a chance; I'm heads-down on a project right now.

[Troy Telford (ttelford)]

I'm unable to run apport-collect; the system just crashes before it finishes.

As noted, I have no issues when using kernels in the kernel-ppa/mainline/v3.5.7 line.

I'll add that I can add additional systems which seem to be affected to the list:

- My Dell 6950's (AMD CPU's) appear to crash for the same reasons.
- An additional model of Lenovo desktop.

Unfortunately, the systems which crash need to be in production use, and as switching to the newer kernel fixes the issue for me, until there's a definitive fix for this bug, I won't be able to do much more to debug the issue for a while.

[Xprogrammer (programmer-x)]

It happening consistently with NFSv4 on VMWare Host Ubuntu 12.04 LTS guest system. I've three 12.04 systems and 1 of them is NFS server and 2 of them are NFS clients, mounts directory from server. I build my source on 12.04 NFS server and run from 2 NFS clients. On few times build and run seems to be fine. All of sudden, the client machines goes to kernel panic. I've moved to samba server for last one week, everything is fine. It could be due to NFSv4.

[Brad Figg (brad-figg)]

This bug is missing log files that will aid in diagnosing the problem. From a terminal window please run:

apport-collect 1085783

and then change the status of the bug to 'Confirmed'.

If, due to the nature of the issue you have encountered, you are unable to run this command, please add a comment stating that fact and change the bug status to 'Confirmed'.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

[Troy Telford (ttelford)]

I'm afraid I no longer have access to the systems in question, and even when I did, updating to the latest Ubuntu fixed it.