kernel BUG on network mounts (GVFS/SSH and AutoFS/NFS)

[Baptiste Coudurier]

Binary package hint: linux-image-2.6.38-7-generic

[32974.362693] BUG: Dentry ffff8801069fb180{i=7658c,n=/} still in use (1) [unmount of autofs autofs]
[32974.362710] ------------[ cut here ]------------
[32974.362726] kernel BUG at /build/buildd/linux-2.6.38/fs/dcache.c:943!
[32974.362735] invalid opcode: 0000 [#1] SMP
[32974.362745] last sysfs file: /sys/devices/virtual/bdi/0:27/uevent
[32974.362754] CPU 5
[32974.362758] Modules linked in: nfs lockd fscache nfs_acl auth_rpcgss sunrpc md4 nls_utf8 cifs autofs4 binfmt_misc vboxnetadp vboxnetflt vboxdrv parport_pc ppdev snd_hda_codec_realtek snd_hda_intel snd_hda_codec snd_hwdep snd_pcm snd_seq_midi snd_rawmidi snd_seq_midi_event psmouse snd_seq snd_timer nouveau snd_seq_device snd ttm drm_kms_helper i7core_edac serio_raw soundcore snd_page_alloc drm edac_core i2c_algo_bit video it87 hwmon_vid coretemp lp parport dm_raid45 usbhid firewire_ohci hid firewire_core r8169 crc_itu_t xor
[32974.362863]
[32974.362867] Pid: 4100, comm: automount Not tainted 2.6.38-7-generic #38-Ubuntu Gigabyte Technology Co., Ltd. EX58-UD3R/EX58-UD3R
[32974.362880] RIP: 0010:[<ffffffff81178685>] [<ffffffff81178685>] shrink_dcache_for_umount_subtree+0x285/0x290
[32974.362893] RSP: 0018:ffff8801ef7efde8 EFLAGS: 00010296
[32974.362898] RAX: 000000000000006b RBX: ffff8801069fb1dc RCX: 00000000000000d1
[32974.362904] RDX: 0000000000000000 RSI: 0000000000000086 RDI: 0000000000000246
[32974.362911] RBP: ffff8801ef7efe28 R08: 0000000000000033 R09: 0000000000012146
[32974.362916] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8801069fb1dc
[32974.362922] R13: ffff8801069fb180 R14: ffff8801069fb220 R15: 00007f9e57d5ff10
[32974.362928] FS: 00007f9e531a9700(0000) GS:ffff8800cfd40000(0000) knlGS:0000000000000000
[32974.362934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[32974.362939] CR2: 00007f9e531a3ab8 CR3: 00000001f93bb000 CR4: 00000000000006e0
[32974.362945] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[32974.362950] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[32974.362956] Process automount (pid: 4100, threadinfo ffff8801ef7ee000, task ffff8801afba16c0)
[32974.362962] Stack:
[32974.362965] ffff8801ef448258 ffffffff81175e96 0000000000000000 ffff8801ef448000
[32974.362975] ffff8801069fb1dc ffff8801069fb180 00007f9e57d5ff10 00007f9e57d5ff10
[32974.362985] ffff8801ef7efe58 ffffffff8117afd1 ffff8801ef7efe48 ffff8801ef448000
[32974.362995] Call Trace:
[32974.363000] [<ffffffff81175e96>] ? pollwake+0x56/0x60
[32974.363005] [<ffffffff8117afd1>] shrink_dcache_for_umount+0x51/0x90
[32974.363012] [<ffffffff8116597c>] generic_shutdown_super+0x2c/0x100
[32974.363018] [<ffffffff81165ae6>] kill_anon_super+0x16/0x60
[32974.363024] [<ffffffff81165b57>] kill_litter_super+0x27/0x30
[32974.363030] [<ffffffffa03514d8>] autofs4_kill_sb+0x48/0x60 [autofs4]
[32974.363037] [<ffffffff81165f55>] deactivate_locked_super+0x45/0x70
[32974.363043] [<ffffffff81166baa>] deactivate_super+0x4a/0x70
[32974.363050] [<ffffffff81181f84>] mntput_no_expire+0xa4/0xf0
[32974.363057] [<ffffffff81183010>] sys_umount+0x60/0xd0
[32974.363063] [<ffffffff8100c002>] system_call_fastpath+0x16/0x1b
[32974.363068] Code: 8b 40 28 4c 8b 08 49 8b 45 30 48 85 c0 74 07 48 8b 90 a8 00 00 00 48 89 34 24 48 c7 c7 48 67 7e 81 4c 89 ee 31 c0 e8 5e 60 44 00 <0f> 0b 0f 0b 0f 1f 80 00 00 00 00 55 48 89 e5 48 83 ec 20 48 89
[32974.363154] RIP [<ffffffff81178685>] shrink_dcache_for_umount_subtree+0x285/0x290
[32974.363162] RSP <ffff8801ef7efde8>
[32974.367300] ---[ end trace 3c05d6982d808d0c ]---

2.6.38-7-generic #38-Ubuntu SMP Tue Mar 22 13:41:53 UTC 2011 x86_64 x86_64 x86_64 GNU/Linux

[Hartmut Manz (hartmut-manz)]

I have hit the same bug with the latest ubuntu kernel 2.6.38.8.

Switching on debuglebel in autofs gives the following information in the syslog file:

Apr 15 15:30:35 ebi automount[945]: umount_multi: path /net/ds-1 incl 1
Apr 15 15:30:35 ebi automount[945]: umount_multi_triggers: umount offset /net/ds-1/QAdev
Apr 15 15:30:35 ebi automount[945]: umounted offset mount /net/ds-1/QAdev
Apr 15 15:30:35 ebi automount[945]: umount_multi_triggers: umount offset /net/ds-1/QAmaint
Apr 15 15:30:35 ebi automount[945]: umounted offset mount /net/ds-1/QAmaint
Apr 15 15:30:35 ebi automount[945]: umount_multi_triggers: umount offset /net/ds-1/QAsource
Apr 15 15:30:35 ebi automount[945]: umounted offset mount /net/ds-1/QAsource
Apr 15 15:30:35 ebi automount[945]: umount_multi_triggers: umount offset /net/ds-1/doc
Apr 15 15:30:35 ebi kernel: [ 8091.088951] BUG: Dentry ffff8800c19cac00{i=5fee,n=/} still in use (3) [unmount of autofs autofs]
Apr 15 15:30:35 ebi kernel: [ 8091.088967] ------------[ cut here ]------------
Apr 15 15:30:35 ebi kernel: [ 8091.091735] kernel BUG at /build/buildd/linux-2.6.38/fs/dcache.c:947!
Apr 15 15:30:35 ebi kernel: [ 8091.093200] invalid opcode: 0000 [#1] SMP
Apr 15 15:30:35 ebi kernel: [ 8091.094687] last sysfs file: /sys/devices/virtual/bdi/0:43/uevent
Apr 15 15:30:35 ebi kernel: [ 8091.096199] CPU 2
Apr 15 15:30:35 ebi kernel: [ 8091.096212] Modules linked in: microcode parport_pc ppdev nfsd exportfs nfs lockd fscache nfs_acl auth_rpcgss autofs4 sunrpc snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_intel snd_hda_codec snd_hwdep snd_pcm snd_seq_midi i915 snd_rawmidi snd_seq_midi_event snd_seq joydev drm_kms_helper snd_timer snd_seq_device shpchp xhci_hcd snd psmouse serio_raw soundcore snd_page_alloc drm i2c_algo_bit video lp parport hid_cherry usbhid hid e1000e ahci libahci
Apr 15 15:30:35 ebi kernel: [ 8091.102795]
Apr 15 15:30:35 ebi kernel: [ 8091.104468] Pid: 14266, comm: automount Not tainted 2.6.38-8-generic #42-Ubuntu /DH67BL
Apr 15 15:30:35 ebi kernel: [ 8091.106216] RIP: 0010:[<ffffffff81179945>] [<ffffffff81179945>] shrink_dcache_for_umount_subtree+0x285/0x290
Apr 15 15:30:35 ebi kernel: [ 8091.108002] RSP: 0018:ffff88010dbcfde8 EFLAGS: 00010296
Apr 15 15:30:35 ebi kernel: [ 8091.109785] RAX: 000000000000006a RBX: ffff8800c19cac5c RCX: 000000000000009f
Apr 15 15:30:35 ebi kernel: [ 8091.111606] RDX: 0000000000000000 RSI: 0000000000000086 RDI: 0000000000000246
Apr 15 15:30:35 ebi kernel: [ 8091.113432] RBP: ffff88010dbcfe28 R08: 0000000000000033 R09: 000000000000ce7f
Apr 15 15:30:35 ebi kernel: [ 8091.115273] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8800c19cac5c
Apr 15 15:30:35 ebi kernel: [ 8091.117131] R13: ffff8800c19cac00 R14: ffff8800c19caca0 R15: 00007f8db90b09b0
Apr 15 15:30:35 ebi kernel: [ 8091.119004] FS: 00007f8db8864700(0000) GS:ffff88001fd00000(0000) knlGS:0000000000000000
Apr 15 15:30:35 ebi kernel: [ 8091.120907] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Apr 15 15:30:35 ebi kernel: [ 8091.122833] CR2: 00007f8db88a77a0 CR3: 00000001029ba000 CR4: 00000000000406e0
Apr 15 15:30:35 ebi kernel: [ 8091.124790] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000...

[Steffen Rusitschka (rusi)]

Also

kernel BUG at /build/buildd/linux-2.6.38/fs/dcache.c:947!

on

Linux fortis 2.6.38-8-generic #42-Ubuntu SMP Mon Apr 11 03:31:24 UTC 2011 x86_64 x86_64 x86_64 GNU/Linux

with automounted SSH (gvfs) and autofs NFS4 (not gvfs) mounts - yes, happens on both... I currently have no way to reliably mount remote folders.

[Russell Phillips (ignissport)]

Jumping on board...

[ 31.655659] svc: failed to register lockdv1 RPC service (errno 97).
[34464.384638] svc: failed to register lockdv1 RPC service (errno 97).
[34814.840760] svc: failed to register lockdv1 RPC service (errno 97).
[35340.367124] BUG: Dentry ffff88003a3220c0{i=54443,n=/} still in use (1) [unmount of autofs autofs]
[35340.367151] ------------[ cut here ]------------
[35340.367191] kernel BUG at /build/buildd/linux-2.6.38/fs/dcache.c:947!
[35340.367230] invalid opcode: 0000 [#1] SMP
[35340.367262] last sysfs file: /sys/devices/system/cpu/cpu1/cache/index2/shared_cpu_map
[35340.367308] CPU 1
[35340.367323] Modules linked in: nfs lockd fscache nfs_acl auth_rpcgss sunrpc binfmt_misc parport_pc ppdev autofs4 snd_emu10k1_synth snd_emux_synth snd_seq_virmidi snd_seq_midi_emul snd_emu10k1 snd_ac97_codec ac97_bus snd_pcm snd_page_alloc snd_util_mem snd_hwdep snd_seq_midi snd_rawmidi i915 snd_seq_midi_event snd_seq snd_timer snd_seq_device drm_kms_helper drm snd emu10k1_gp gameport i2c_algo_bit soundcore video lp parport raid10 raid456 async_pq async_xor xor async_memcpy async_raid6_recov usbhid hid firewire_ohci firewire_core r8169 crc_itu_t floppy raid6_pq async_tx raid1 raid0 multipath linear
[35340.367792]
[35340.367804] Pid: 3387, comm: automount Not tainted 2.6.38-8-generic #42-Ubuntu Gigabyte Technology Co., Ltd. EG41M-S2H/EG41M-S2H
[35340.367884] RIP: 0010:[<ffffffff81179945>] [<ffffffff81179945>] shrink_dcache_for_umount_subtree+0x285/0x290
[35340.367949] RSP: 0018:ffff880021489de8 EFLAGS: 00010296
[35340.367981] RAX: 000000000000006b RBX: ffff88003a32211c RCX: 000000000000009f
[35340.368023] RDX: 0000000000000000 RSI: 0000000000000086 RDI: 0000000000000246
[35340.368065] RBP: ffff880021489e28 R08: 0000000000000033 R09: 000000000000afca
[35340.368106] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88003a32211c
[35340.368148] R13: ffff88003a3220c0 R14: ffff88003a322160 R15: 00007fcc05885f30
[35340.368190] FS: 00007fcc01481700(0000) GS:ffff88007da80000(0000) knlGS:0000000000000000
[35340.368238] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[35340.368272] CR2: 00007fcc0147aa08 CR3: 0000000065003000 CR4: 00000000000406e0
[35340.368313] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[35340.368355] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[35340.368397] Process automount (pid: 3387, threadinfo ffff880021488000, task ffff8800538a96e0)
[35340.368446] Stack:
[35340.370450] ffff8800599cde58 ffffffff81177156 0000000000000000 ffff8800599cdc00
[35340.372563] ffff88003a32211c ffff88003a3220c0 00007fcc05889380 00007fcc05885f30
[35340.374614] ffff880021489e58 ffffffff8117c2a1 ffff880021489e48 ffff8800599cdc00
[35340.376664] Call Trace:
[35340.377052] [<ffffffff81177156>] ? pollwake+0x56/0x60
[35340.377052] [<ffffffff8117c2a1>] shrink_dcache_for_umount+0x51/0x90
[35340.377052] [<ffffffff81166bfc>] generic_shutdown_super+0x2c/0x100
[35340.377052] [<ffffffff81166d66>] kill_anon_super+0x16/0x60
[35340.377052] [<ffffffff81166dd7>] kill_litter_super+0x27/0x30
[35340.377052] [<ffffffffa02204d8>] autofs4_kill_sb+0x48/0x60 [autofs4]
[35340.377052] [<ffffffff811671d5>] deactivate_l...

[AleksanderAdamowski (aadamowski)]

Same here, occurred on Kubuntu Natty when automount tried to umount a nfs4 share that uses Kerberos authentication.

The trace:

BUG: Dentry ffff8800a0c530c0{i=2,n=} still in use (1) [unmount of nfs4 0:18]
------------[ cut here ]------------
kernel BUG at /build/buildd/linux-2.6.38/fs/dcache.c:947!
invalid opcode: 0000 [#1] SMP
last sysfs file: /sys/devices/LNXSYSTM:00/device:00/PNP0C0A:00/power_supply/BAT0/voltage_now
CPU 3
Modules linked in: des_generic cryptd aes_x86_64 aes_generic nf_conntrack_ipv4 nf_defrag_ipv4 xt_state nf_conntrack iptable_filter ip_tables x_tables binfmt_misc vboxnetadp vboxnetflt vboxdrv parport_pc dm_crypt ppdev autofs4 snd_hda_codec_hdmi rpcsec_gss_krb5 snd_hda_codec_realtek nfsd exportfs nfs snd_hda_intel snd_hda_codec lockd fscache snd_hwdep snd_pcm nfs_acl snd_seq_midi snd_rawmidi snd_seq_midi_event uvcvideo auth_rpcgss snd_seq videodev arc4 ath9k mac80211 v4l2_compat_ioctl32 snd_timer snd_seq_device ath9k_common ath9k_hw sunrpc snd joydev ath psmouse lp soundcore cfg80211 sony_laptop serio_raw snd_page_alloc parport radeon hid_a4tech usbhid hid ttm ahci sky2 drm_kms_helper sdhci_pci drm libahci sdhci i2c_algo_bit video

Pid: 12448, comm: umount.nfs4 Not tainted 2.6.38-8-generic #42-Ubuntu Sony Corporation VPCEB1M1E/VAIO
RIP: 0010:[<ffffffff81179945>] [<ffffffff81179945>] shrink_dcache_for_umount_subtree+0x285/0x290
RSP: 0018:ffff880052f59d78 EFLAGS: 00010292
RAX: 0000000000000062 RBX: ffff8800a0c530c0 RCX: 000000000003ffff
RDX: 0000000000000000 RSI: 0000000000000082 RDI: 0000000000000246
RBP: ffff880052f59db8 R08: 0000000000000033 R09: 000000000001125a
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8800a0c5311c
R13: ffff8800a0c530c0 R14: ffff88006f4d2be0 R15: ffff8800a0e557dc
FS: 00007f4153fd6720(0000) GS:ffff8800decc0000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4153b380d0 CR3: 00000000a52af000 CR4: 00000000000006e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process umount.nfs4 (pid: 12448, threadinfo ffff880052f58000, task ffff88001bbadb80)
Stack:
 ffff8800294c4a58 ffff88011780d2a8 0000000000000000 ffff8800294c4800
 ffff8800a0c531dc ffff8800a0c53180 ffff880048071780 0000000000000000
 ffff880052f59de8 ffffffff8117c2b9 ffffffff8105f640 ffff8800294c4800
Call Trace:
 [<ffffffff8117c2b9>] shrink_dcache_for_umount+0x69/0x90
 [<ffffffff8105f640>] ? default_wake_function+0x0/0x20
 [<ffffffff81166bfc>] generic_shutdown_super+0x2c/0x100
 [<ffffffff81166d66>] kill_anon_super+0x16/0x60
 [<ffffffffa04982e9>] nfs4_kill_super+0x39/0x90 [nfs]
 [<ffffffff811671d5>] deactivate_locked_super+0x45/0x70
 [<ffffffff81167e5a>] deactivate_super+0x4a/0x70
 [<ffffffff81183254>] mntput_no_expire+0xa4/0xf0
 [<ffffffff811832bf>] mntput+0x1f/0x30
 [<ffffffff81183b72>] release_mounts+0x72/0x90
 [<ffffffff81184162>] do_umount+0xd2/0x1f0
 [<ffffffff81184343>] sys_umount+0xc3/0xd0
 [<ffffffff8100c002>] system_call_fastpath+0x16/0x1b
Code: 8b 40 28 4c 8b 08 49 8b 45 30 48 85 c0 74 07 48 8b 90 a8 00 00 00 48 89 34 24 48 c7 c7 50 6c 7e 81 4c 89 ee 31 c0 e8 94 66 44 00 <0f> 0b 0f 0b 0f 1f 80 00 00 00 ...

[AleksanderAdamowski (aadamowski)]

Attaching full trace

[Claus Koch (clauskoch)]

Same here with automount/NFS4 : dying on dcache.c:947 function: shrink_dcache_for_subtree. C.

[Daniel Ginsburg (daniel-ginsburg)]

I am also seeing this bug on Ubuntu 11.04:

May 17 11:03:57 vuka kernel: [349751.630119] BUG: Dentry ffff880198c0d0c0{i=b5ab,n=/} still in use (1) [unmount of autofs autofs]
May 17 11:03:57 vuka kernel: [349751.630138] ------------[ cut here ]------------
May 17 11:03:57 vuka kernel: [349751.630141] kernel BUG at /build/buildd/linux-2.6.38/fs/dcache.c:947!
May 17 11:03:57 vuka kernel: [349751.630144] invalid opcode: 0000 [#1] SMP
May 17 11:03:57 vuka kernel: [349751.630147] last sysfs file: /sys/devices/pci0000:00/0000:00:1f.2/host0/target0:0:0/0:0:0:0/block/sda/uevent
May 17 11:03:57 vuka kernel: [349751.630150] CPU 1
May 17 11:03:57 vuka kernel: [349751.630151] Modules linked in: binfmt_misc parport_pc ppdev autofs4 dm_crypt vesafb rfcomm sco bnep l2cap nfsd exportfs nfs lockd fscache nfs_acl auth_rpcgss sunrpc nvidia(P) arc4 snd_hda_codec_realtek snd_hda_intel snd_hda_codec snd_hwdep snd_pcm btusb snd_seq_midi snd_rawmidi snd_seq_midi_event snd_seq snd_timer snd_seq_device bluetooth ath9k uvcvideo snd videodev v4l2_compat_ioctl32 mac80211 ath9k_common serio_raw ath9k_hw ath sony_laptop cfg80211 soundcore snd_page_alloc joydev nw_fermi lp parport dm_raid45 xor usbhid hid video firewire_ohci firewire_core e1000e crc_itu_t sdhci_pci sdhci
May 17 11:03:57 vuka kernel: [349751.630197]
May 17 11:03:57 vuka kernel: [349751.630200] Pid: 26247, comm: automount Tainted: P 2.6.38-8-generic #42-Ubuntu Sony Corporation VPCL116FX/VAIO
May 17 11:03:57 vuka kernel: [349751.630206] RIP: 0010:[<ffffffff81179945>] [<ffffffff81179945>] shrink_dcache_for_umount_subtree+0x285/0x290
May 17 11:03:57 vuka kernel: [349751.630215] RSP: 0018:ffff880189447de8 EFLAGS: 00010296
May 17 11:03:57 vuka kernel: [349751.630217] RAX: 000000000000006b RBX: ffff880198c0d11c RCX: 000000000003ffff
May 17 11:03:57 vuka kernel: [349751.630220] RDX: 0000000000000000 RSI: 0000000000000086 RDI: 0000000000000246
May 17 11:03:57 vuka kernel: [349751.630222] RBP: ffff880189447e28 R08: 0000000000000033 R09: 000000000000fa75
May 17 11:03:57 vuka kernel: [349751.630224] R10: 0000000000000000 R11: 0000000000000001 R12: ffff880198c0d11c
May 17 11:03:57 vuka kernel: [349751.630227] R13: ffff880198c0d0c0 R14: ffff880198c0d160 R15: 00007f882a3a7c50
May 17 11:03:57 vuka kernel: [349751.630230] FS: 00007f8826d26700(0000) GS:ffff8800bfc80000(0000) knlGS:0000000000000000
May 17 11:03:57 vuka kernel: [349751.630233] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
May 17 11:03:57 vuka kernel: [349751.630235] CR2: 00007f88291255cc CR3: 00000001994ad000 CR4: 00000000000406e0
May 17 11:03:57 vuka kernel: [349751.630238] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
May 17 11:03:57 vuka kernel: [349751.630240] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
May 17 11:03:57 vuka kernel: [349751.630243] Process automount (pid: 26247, threadinfo ffff880189446000, task ffff880199505b80)
May 17 11:03:57 vuka kernel: [349751.630245] Stack:
May 17 11:03:57 vuka kernel: [349751.630246] ffff880174205a58 ffffffff81177156 0000000000000000 ffff880174205800
May 17 11:03:57 vuka kernel: [349751.630251] ffff880198c0d11c ffff880198c0d0c0 00007f882a3a8060 00007f88...

[molostoff (molostoff)]

Is there (https://bugs.launchpad.net/ubuntu/+source/linux/+bug/781792) the same thing?