Description of problem: on an NFS share: Version-Release number of selected component (if applicable): kernel 3.14.17-100.fc19.x86_64 worked in kernel 3.14.13-100.fc19.x86_64 How reproducible: Steps to Reproduce: 1. update to kernel 3.14.17-100.fc19.x86_64 2. execure code that calls listxattr on an NFSV3 share 3.process gets killed Actual results: [ddholstad@a-lnx002 bin]$ ./lsattr.py Killed Expected results: [ddholstad@a-lnx002 bin]$ ./lsattr.py ['system.posix_acl_access', 'system.posix_acl_default'] Additional info: ***************************************************************** working: ***************************************************************** open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 4 fstat(4, {st_mode=S_IFREG|0644, st_size=221787, ...}) = 0 mmap(NULL, 221787, PROT_READ, MAP_PRIVATE, 4, 0) = 0x7f76a38bd000 close(4) = 0 open("/lib64/libattr.so.1", O_RDONLY|O_CLOEXEC) = 4 read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320\23@\3242\0\0\0"..., 832) = 832 fstat(4, {st_mode=S_IFREG|0755, st_size=22160, ...}) = 0 mmap(0x32d4400000, 2113904, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x32d4400000 mprotect(0x32d4404000, 2093056, PROT_NONE) = 0 mmap(0x32d4603000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x3000) = 0x32d4603000 close(4) = 0 mprotect(0x32d4603000, 4096, PROT_READ) = 0 mprotect(0x7f76a3af7000, 4096, PROT_READ) = 0 munmap(0x7f76a38bd000, 221787) = 0 close(3) = 0 listxattr("/space/ddholstad/bin/fixview.sh", NULL, 0) = 49 listxattr("/space/ddholstad/bin/fixview.sh", "system.posix_acl_access\0system.p"..., 49) = 49 fstat(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 6), ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f76aa160000 write(1, "['system.posix_acl_access', 'sys"..., 56['system.posix_acl_access', 'system.posix_acl_default'] ) = 56 rt_sigaction(SIGINT, {SIG_DFL, [], SA_RESTORER, 0x32bf60ef90}, {0x3e2370cfd0, [], SA_RESTORER, 0x32bf60ef90}, 8) = 0 exit_group(0) = ? +++ exited with 0 +++ ***************************************************************** Failing: ***************************************************************** open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 4 fstat(4, {st_mode=S_IFREG|0644, st_size=218686, ...}) = 0 mmap(NULL, 218686, PROT_READ, MAP_PRIVATE, 4, 0) = 0x7f62c91c5000 close(4) = 0 open("/lib64/libattr.so.1", O_RDONLY|O_CLOEXEC) = 4 read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320\23`\341<\0\0\0"..., 832) = 832 fstat(4, {st_mode=S_IFREG|0755, st_size=22160, ...}) = 0 mmap(0x3ce1600000, 2113904, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x3ce1600000 mprotect(0x3ce1604000, 2093056, PROT_NONE) = 0 mmap(0x3ce1803000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x3000) = 0x3ce1803000 close(4) = 0 mprotect(0x3ce1803000, 4096, PROT_READ) = 0 mprotect(0x7f62c93fe000, 4096, PROT_READ) = 0 munmap(0x7f62c91c5000, 218686) = 0 close(3) = 0 listxattr("/space/ddholstad/bin/fixview.sh", <unfinished ...> +++ killed by SIGKILL +++ Killed ***************************************************************** dmesg error on failing server: ***************************************************************** [869845.512206] CPU: 2 PID: 12013 Comm: lsattr.py Tainted: G D I 3.14.17-100.fc19.x86_64 #1 [869845.517338] Hardware name: HP ProLiant DL380 G6, BIOS P62 05/05/2011 [869845.522562] task: ffff880002427200 ti: ffff88018381a000 task.ti: ffff88018381a000 [869845.527856] RIP: 0010:[<ffffffffa03a749b>] [<ffffffffa03a749b>] nfs3_list_one_acl+0x2b/0x80 [nfsv3] [869845.533083] RSP: 0018:ffff88018381be68 EFLAGS: 00010282 [869845.538243] RAX: ffffffffffffffa1 RBX: ffff88018381bea0 RCX: 0000000000000000 [869845.543326] RDX: 000000000000000a RSI: 0000000000008000 RDI: ffff88018381be08 [869845.548419] RBP: ffff88018381be90 R08: 0000000000000000 R09: ffff88018381bea0 [869845.553404] R10: ffffffff811f52a2 R11: ffffea0004327400 R12: 0000000000000000 [869845.558222] R13: ffffffffa03a8c5f R14: 0000000000000000 R15: 0000000000000000 [869845.562965] FS: 00007fb9abff2740(0000) GS:ffff88040fc20000(0000) knlGS:0000000000000000 [869845.567698] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [869845.572514] CR2: ffffffffffffffa1 CR3: 000000042829a000 CR4: 00000000000007e0 [869845.577176] Stack: [869845.581821] ffff8804240cb5c0 0000000000000000 0000000000000000 0000000000000000 [869845.586455] 0000000000000000 ffff88018381bec8 ffffffffa03a7a91 0000000000000000 [869845.591119] 00000000fc564e45 ffff8806f883b2c0 0000000000000000 0000000000000000 [869845.595712] Call Trace: [869845.600362] [<ffffffffa03a7a91>] nfs3_listxattr+0x51/0xa8 [nfsv3] [869845.605023] [<ffffffff8120e442>] vfs_listxattr+0x42/0x70 [869845.609638] [<ffffffff8120e74d>] listxattr+0x10d/0x120 [869845.614264] [<ffffffff8120f43e>] SyS_listxattr+0x5e/0xb0 [869845.618804] [<ffffffff817004e9>] system_call_fastpath+0x16/0x1b [869845.623334] Code: 66 66 66 66 90 55 48 89 e5 41 57 49 89 cf 41 56 4d 8b 31 41 55 49 89 d5 41 54 4d 89 c4 53 4c 89 cb e8 ea 09 ea e0 48 85 c0 74 32 <f0> ff 08 74 40 4c 89 ef e8 f8 4c fb e0 48 03 03 4d 85 e4 48 8d [869845.632971] RIP [<ffffffffa03a749b>] nfs3_list_one_acl+0x2b/0x80 [nfsv3] [869845.637647] RSP <ffff88018381be68> [869845.642341] CR2: ffffffffffffffa1 [869845.646971] ---[ end trace d3d07834276e0b47 ]---
Source code for test program: $ cat lsattr.py #!/usr/bin/python import xattr print xattr.listxattr("/space/ddholstad/bin/fixview.sh")
*** This bug has been marked as a duplicate of bug 1132786 ***