So thanks to upstream, we got a patch (I am duplicating this here). It was in a completely different corner. Instead of a race condition, the incorrect number of commands provided seems to have a hidden bad effect within the rpc code (I have not looked but from the patch description, some memory allocations are done for each command). The code put 2 as the number of commands, but the array had four entries and command index 0 and 2 being not used. The UMNT command has the index number 3, so when accessing internal arrays with that index the code accesses memory outside of the allocated range.
I am currently compiling stock Lucid kernels with just this patch applied. I will upload them as soon as those are ready to the same location I put the other debug kernels. ** Patch added: "Patch to pass the right number of client commands" https://bugs.launchpad.net/ubuntu/+source/linux/+bug/683938/+attachment/1760614/+files/0001-NFS-Fix-panic-after-nfs_umount.patch ** Also affects: linux (Ubuntu Lucid) Importance: Undecided Status: New ** Also affects: linux (Ubuntu Maverick) Importance: Undecided Status: New ** Changed in: linux (Ubuntu Lucid) Importance: Undecided => High ** Changed in: linux (Ubuntu Lucid) Status: New => In Progress ** Changed in: linux (Ubuntu Lucid) Assignee: (unassigned) => Stefan Bader (stefan-bader-canonical) ** Changed in: linux (Ubuntu Maverick) Importance: Undecided => High ** Changed in: linux (Ubuntu Maverick) Status: New => Triaged ** Changed in: linux (Ubuntu Maverick) Assignee: (unassigned) => Stefan Bader (stefan-bader-canonical) ** Tags added: lucid maverick natty patch ** Tags removed: glucid kernel-series-unknown -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/683938 Title: kernel crash on symlink chased from NFS to failing automount -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
