https://github.com/torvalds/linux/commit/89a3c9f5b9f0bcaa9aea3e8b2a616fcaea9aad78
SUNRPC: Properly set the @Subbuf parameter of xdr_buf_subsegment()

When I apply that patch to 5.4.0-40-generic the original bug disappears,
however I sometimes still get:

[Mo Jul 13 20:22:53 2020] BUG: unable to handle page fault for address: 
ffff98fd15cd0000
[Mo Jul 13 20:22:53 2020] #PF: supervisor write access in kernel mode
[Mo Jul 13 20:22:53 2020] #PF: error_code(0x0003) - permissions violation
[Mo Jul 13 20:22:53 2020] PGD 214c01067 P4D 214c01067 PUD 214c05067 PMD 
455d94063 PTE 8000000455cd0061
[Mo Jul 13 20:22:53 2020] Oops: 0003 [#1] SMP PTI
[Mo Jul 13 20:22:53 2020] CPU: 0 PID: 1428 Comm: update-desktop- Tainted: G     
      OE     5.4.0-40-generic #44
[Mo Jul 13 20:22:53 2020] Hardware name: XXXXXXXXXXX
[Mo Jul 13 20:22:53 2020] RIP: 0010:memcpy_erms+0x6/0x10
[Mo Jul 13 20:22:53 2020] Code: ff 90 90 90 eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 
c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 
<f3> a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 
20 72 7e 40 38 fe
[Mo Jul 13 20:22:53 2020] RSP: 0018:ffffb4f780bdb610 EFLAGS: 00010286
[Mo Jul 13 20:22:53 2020] RAX: ffff98fd15ccffc4 RBX: ffffb4f780bdba08 RCX: 
0000000000000004
[Mo Jul 13 20:22:53 2020] RDX: 0000000000000040 RSI: ffff98fd132eb064 RDI: 
ffff98fd15cd0000
[Mo Jul 13 20:22:53 2020] RBP: ffffb4f780bdb640 R08: 0000000000000000 R09: 
000000000000015b
[Mo Jul 13 20:22:53 2020] R10: ffffb4f780bdb5e0 R11: ffff98fd10f14850 R12: 
0000000000000028
[Mo Jul 13 20:22:53 2020] R13: 0000000000000040 R14: ffff98fd188be280 R15: 
0000000000000040
[Mo Jul 13 20:22:53 2020] FS:  00007fea854dcb80(0000) GS:ffff98fd1da00000(0000) 
knlGS:0000000000000000
[Mo Jul 13 20:22:53 2020] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[Mo Jul 13 20:22:53 2020] CR2: ffff98fd15cd0000 CR3: 00000004532e0003 CR4: 
00000000003606f0
[Mo Jul 13 20:22:53 2020] Call Trace:
[Mo Jul 13 20:22:53 2020]  ? _copy_from_pages+0x6f/0xa0 [sunrpc]
[Mo Jul 13 20:22:53 2020]  xdr_shrink_pagelen+0x83/0xb0 [sunrpc]
[Mo Jul 13 20:22:53 2020]  xdr_align_pages+0x8e/0x1c0 [sunrpc]
[Mo Jul 13 20:22:53 2020]  xdr_read_pages+0x18/0x80 [sunrpc]
[Mo Jul 13 20:22:53 2020]  nfs4_xdr_dec_readlink+0xea/0x140 [nfsv4]
[Mo Jul 13 20:22:53 2020]  rpcauth_unwrap_resp_decode+0x27/0x30 [sunrpc]
[Mo Jul 13 20:22:53 2020]  gss_unwrap_resp+0x358/0x5a0 [auth_rpcgss]
[Mo Jul 13 20:22:53 2020]  ? call_bind_status+0x290/0x290 [sunrpc]
[Mo Jul 13 20:22:53 2020]  rpcauth_unwrap_resp+0x24/0x30 [sunrpc]
[Mo Jul 13 20:22:53 2020]  call_decode+0x158/0x1d0 [sunrpc]
[Mo Jul 13 20:22:53 2020]  __rpc_execute+0x8c/0x3a0 [sunrpc]
[Mo Jul 13 20:22:53 2020]  rpc_execute+0xa0/0xb0 [sunrpc]
[Mo Jul 13 20:22:53 2020]  rpc_run_task+0x120/0x150 [sunrpc]
[Mo Jul 13 20:22:53 2020]  nfs4_call_sync_custom+0x10/0x30 [nfsv4]
[Mo Jul 13 20:22:53 2020]  nfs4_call_sync_sequence+0x65/0x80 [nfsv4]
[Mo Jul 13 20:22:53 2020]  _nfs4_proc_readlink+0xa3/0xc0 [nfsv4]
[Mo Jul 13 20:22:53 2020]  nfs4_proc_readlink+0x6e/0x100 [nfsv4]
[Mo Jul 13 20:22:53 2020]  nfs_symlink_filler+0x33/0x70 [nfs]
[Mo Jul 13 20:22:53 2020]  do_read_cache_page+0x2f6/0x830
[Mo Jul 13 20:22:53 2020]  ? nfs_get_link+0x120/0x120 [nfs]
[Mo Jul 13 20:22:53 2020]  ? xas_load+0xd/0x80
[Mo Jul 13 20:22:53 2020]  ? find_get_entry+0x5e/0x170
[Mo Jul 13 20:22:53 2020]  ? nfs4_do_check_delegation+0x1d/0x40 [nfsv4]
[Mo Jul 13 20:22:53 2020]  ? nfs4_have_delegation+0x13/0x20 [nfsv4]
[Mo Jul 13 20:22:53 2020]  ? nfs_check_cache_invalid+0x38/0xa0 [nfs]
[Mo Jul 13 20:22:53 2020]  read_cache_page+0x12/0x20
[Mo Jul 13 20:22:53 2020]  nfs_get_link+0x47/0x120 [nfs]
[Mo Jul 13 20:22:53 2020]  trailing_symlink+0x21d/0x280
[Mo Jul 13 20:22:53 2020]  ? nfs_destroy_readpagecache+0x20/0x20 [nfs]
[Mo Jul 13 20:22:53 2020]  path_lookupat.isra.0+0x8c/0x230
[Mo Jul 13 20:22:53 2020]  ? rpc_free_task+0x64/0x70 [sunrpc]
[Mo Jul 13 20:22:53 2020]  ? rpc_do_put_task+0x6a/0x70 [sunrpc]
[Mo Jul 13 20:22:53 2020]  filename_lookup+0xae/0x170
[Mo Jul 13 20:22:53 2020]  ? strncpy_from_user+0x4c/0x150
[Mo Jul 13 20:22:53 2020]  user_path_at_empty+0x3a/0x50
[Mo Jul 13 20:22:53 2020]  vfs_statx+0x7d/0xe0
[Mo Jul 13 20:22:53 2020]  __do_sys_newstat+0x3e/0x80
[Mo Jul 13 20:22:53 2020]  ? _cond_resched+0x19/0x30
[Mo Jul 13 20:22:53 2020]  ? exit_to_usermode_loop+0xea/0x160
[Mo Jul 13 20:22:53 2020]  __x64_sys_newstat+0x16/0x20
[Mo Jul 13 20:22:53 2020]  do_syscall_64+0x57/0x190
[Mo Jul 13 20:22:53 2020]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[Mo Jul 13 20:22:53 2020] RIP: 0033:0x7fea8568449a

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1886277

Title:
  Regression on NFS: unable to handle page fault in mempool_alloc_slab

Status in linux package in Ubuntu:
  Confirmed

Bug description:
  On kernel 5.4.0-40-generic in focal I'm getting errors like this on
  several machines with different hardware in the first hour after boot:

  Jul 04 16:58:32 hostname kernel: BUG: unable to handle page fault for 
address: ffff9083e222e632
  Jul 04 16:58:32 hostname kernel: #PF: supervisor read access in kernel mode
  Jul 04 16:58:32 hostname kernel: #PF: error_code(0x0000) - not-present page
  Jul 04 16:58:32 hostname kernel: PGD 3ac205067 P4D 3ac205067 PUD 0
  Jul 04 16:58:32 hostname kernel: Oops: 0000 [#1] SMP NOPTI
  Jul 04 16:58:32 hostname kernel: CPU: 4 PID: 289 Comm: kworker/u16:4 Tainted: 
G           OE     5.4.0-40-generic #44-Ubuntu
  Jul 04 16:58:32 hostname kernel: Hardware name: LENOVO 20N2CTO1WW/20N2CTO1WW, 
BIOS N2IET88W (1.66 ) 04/22/2020
  Jul 04 16:58:32 hostname kernel: Workqueue: rpciod rpc_async_schedule [sunrpc]
  Jul 04 16:58:32 hostname kernel: RIP: 0010:kmem_cache_alloc+0x7e/0x230
  Jul 04 16:58:32 hostname kernel: Code: 99 01 00 00 4d 8b 07 65 49 8b 50 08 65 
4c 03 05 40 9d 56 44 4d 8b 20 4d 85 e4 0f 84 85 01 00 00 41 8b 47 20 49 8b 3f 
4c 01 e0 <48> 8b 18 48 89 c1 49 33 9f 70 01 00 00 4c 89 e0 48 0f c9 48 31 cb
  Jul 04 16:58:32 hostname kernel: RSP: 0018:ffffbc38c046fcc8 EFLAGS: 00010282
  Jul 04 16:58:32 hostname kernel: RAX: ffff9083e222e632 RBX: 0000000000000000 
RCX: 0000000000000002
  Jul 04 16:58:32 hostname kernel: RDX: 0000000000000009 RSI: 0000000000092800 
RDI: 0000000000031fb0
  Jul 04 16:58:32 hostname kernel: RBP: ffffbc38c046fcf8 R08: ffff90836c331fb0 
R09: ffffffffc1436a94
  Jul 04 16:58:32 hostname kernel: R10: ffff908368178d2c R11: 0000000000000018 
R12: ffff9083e222e632
  Jul 04 16:58:32 hostname kernel: R13: 0000000000092800 R14: ffff908367ca6140 
R15: ffff908367ca6140
  Jul 04 16:58:32 hostname kernel: FS:  0000000000000000(0000) 
GS:ffff90836c300000(0000) knlGS:0000000000000000
  Jul 04 16:58:32 hostname kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 
0000000080050033
  Jul 04 16:58:32 hostname kernel: CR2: ffff9083e222e632 CR3: 00000003ab80a003 
CR4: 00000000003606e0
  Jul 04 16:58:32 hostname kernel: Call Trace:
  Jul 04 16:58:32 hostname kernel:  ? mempool_alloc_slab+0x17/0x20
  Jul 04 16:58:32 hostname kernel:  mempool_alloc_slab+0x17/0x20
  Jul 04 16:58:32 hostname kernel:  mempool_alloc+0x64/0x180
  Jul 04 16:58:32 hostname kernel:  rpc_malloc+0xa1/0xb0 [sunrpc]
  Jul 04 16:58:32 hostname kernel:  call_allocate+0xd1/0x1b0 [sunrpc]
  Jul 04 16:58:32 hostname kernel:  ? call_refreshresult+0x100/0x100 [sunrpc]
  Jul 04 16:58:32 hostname kernel:  __rpc_execute+0x8c/0x3a0 [sunrpc]
  Jul 04 16:58:32 hostname kernel:  rpc_async_schedule+0x30/0x50 [sunrpc]
  Jul 04 16:58:32 hostname kernel:  process_one_work+0x1eb/0x3b0
  Jul 04 16:58:32 hostname kernel:  worker_thread+0x4d/0x400
  Jul 04 16:58:32 hostname kernel:  kthread+0x104/0x140
  Jul 04 16:58:32 hostname kernel:  ? process_one_work+0x3b0/0x3b0
  Jul 04 16:58:32 hostname kernel:  ? kthread_park+0x90/0x90
  Jul 04 16:58:32 hostname kernel:  ret_from_fork+0x35/0x40
  Jul 04 16:58:32 hostname kernel: Modules linked in: rfcomm rpcsec_gss_krb5 
auth_rpcgss nfsv4 nfs lockd grace fscache vboxnetadp(OE) vboxnetflt(OE) 
vboxdrv(OE) msr ccm cmac algif_hash algif_skcipher af_alg aufs bnep overlay 
nls_iso8859_1 mei_hdcp intel_rapl_msr snd_s>
  Jul 04 16:58:32 hostname kernel:  nvram ledtrig_audio mei_me cfg80211 mei 
processor_thermal_device snd_seq ucsi_acpi typec_ucsi intel_rapl_common 
intel_soc_dts_iosf snd_seq_device typec intel_pch_thermal snd_timer snd 
int3403_thermal soundcore int340x_thermal_zone i>
  Jul 04 16:58:32 hostname kernel:  pinctrl_cannonlake video pinctrl_intel
  Jul 04 16:58:32 hostname kernel: CR2: ffff9083e222e632
  Jul 04 16:58:32 hostname kernel: ---[ end trace cbbaed921eb439ce ]---
  Jul 04 16:58:32 hostname kernel: RIP: 0010:kmem_cache_alloc+0x7e/0x230
  Jul 04 16:58:32 hostname kernel: Code: 99 01 00 00 4d 8b 07 65 49 8b 50 08 65 
4c 03 05 40 9d 56 44 4d 8b 20 4d 85 e4 0f 84 85 01 00 00 41 8b 47 20 49 8b 3f 
4c 01 e0 <48> 8b 18 48 89 c1 49 33 9f 70 01 00 00 4c 89 e0 48 0f c9 48 31 cb
  Jul 04 16:58:32 hostname kernel: RSP: 0018:ffffbc38c046fcc8 EFLAGS: 00010282
  Jul 04 16:58:32 hostname kernel: RAX: ffff9083e222e632 RBX: 0000000000000000 
RCX: 0000000000000002
  Jul 04 16:58:32 hostname kernel: RDX: 0000000000000009 RSI: 0000000000092800 
RDI: 0000000000031fb0
  Jul 04 16:58:32 hostname kernel: RBP: ffffbc38c046fcf8 R08: ffff90836c331fb0 
R09: ffffffffc1436a94
  Jul 04 16:58:32 hostname kernel: R10: ffff908368178d2c R11: 0000000000000018 
R12: ffff9083e222e632
  Jul 04 16:58:32 hostname kernel: R13: 0000000000092800 R14: ffff908367ca6140 
R15: ffff908367ca6140
  Jul 04 16:58:32 hostname kernel: FS:  0000000000000000(0000) 
GS:ffff90836c300000(0000) knlGS:0000000000000000
  Jul 04 16:58:32 hostname kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 
0000000080050033
  Jul 04 16:58:32 hostname kernel: CR2: ffff9083e222e632 CR3: 00000003ab80a003 
CR4: 00000000003606e0

  When booting 5.4.0-39-generic the problem does not occur.
  --- 
  ProblemType: Bug
  ApportVersion: 2.20.11-0ubuntu27.3
  Architecture: amd64
  AudioDevicesInUse:
   USER        PID ACCESS COMMAND
   /dev/snd/controlC0:  lsysadmin   2042 F.... pulseaudio
  CasperMD5CheckResult: skip
  DistroRelease: Ubuntu 20.04
  HibernationDevice: RESUME=UUID=9d3714bb-8799-42f9-a51d-790f87b0a7fc
  MachineType: LENOVO 20N2CTO1WW
  Package: linux (not installed)
  ProcFB: 0 i915drmfb
  ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-5.4.0-40-generic 
root=/dev/mapper/vgmagiko-root ro quiet splash vt.handoff=7
  ProcVersionSignature: Ubuntu 5.4.0-40.44-generic 5.4.44
  PulseList: Error: command ['pacmd', 'list'] failed with exit code 1: No 
PulseAudio daemon running, or not running as session daemon.
  RelatedPackageVersions:
   linux-restricted-modules-5.4.0-40-generic N/A
   linux-backports-modules-5.4.0-40-generic  N/A
   linux-firmware                            1.187.1
  Tags:  focal
  Uname: Linux 5.4.0-40-generic x86_64
  UpgradeStatus: No upgrade log present (probably fresh install)
  UserGroups: N/A
  _MarkForUpload: True
  dmi.bios.date: 04/22/2020
  dmi.bios.vendor: LENOVO
  dmi.bios.version: N2IET88W (1.66 )
  dmi.board.asset.tag: Not Available
  dmi.board.name: 20N2CTO1WW
  dmi.board.vendor: LENOVO
  dmi.board.version: SDK0J40709 WIN
  dmi.chassis.asset.tag: No Asset Information
  dmi.chassis.type: 10
  dmi.chassis.vendor: LENOVO
  dmi.chassis.version: None
  dmi.modalias: 
dmi:bvnLENOVO:bvrN2IET88W(1.66):bd04/22/2020:svnLENOVO:pn20N2CTO1WW:pvrThinkPadT490:rvnLENOVO:rn20N2CTO1WW:rvrSDK0J40709WIN:cvnLENOVO:ct10:cvrNone:
  dmi.product.family: ThinkPad T490
  dmi.product.name: 20N2CTO1WW
  dmi.product.sku: LENOVO_MT_20N2_BU_Think_FM_ThinkPad T490
  dmi.product.version: ThinkPad T490
  dmi.sys.vendor: LENOVO

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1886277/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to