Uploaded image for project: 'Lustre'
  1. Lustre
  2. LU-19356

UBSAN: array-index-out-of-bounds in lnet_ping_target_update()

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Medium
    • None
    • None
    • None
    • 3
    • 9223372036854775807

    Description

      https://testing.whamcloud.com/test_sets/a74c6eb4-b216-4034-a8f7-d5ceb2bb659f

      in sanity-lnet test 270: Test NID metadata:

      [16859.339955] Lustre: DEBUG MARKER: /usr/sbin/lnetctl lnet configure
      [16859.354419] LNet: Added LNI 10.240.42.236@tcp [8/256/0/180]
      [16859.355215] LNet: *** cfs_fail_loc=e003, val=100***
      [16859.356015] ------------[ cut here ]------------
      [16859.356689] UBSAN: array-index-out-of-bounds in /var/lib/jenkins/workspace/lustre-reviews/arch/x86_64/build_type/client/distro/ubuntu2404/ib_stack/inkernel/BUILD/lustre-2.16.58_23_gd6c1607/debian/tmp/modules-deb/usr_src/modules/lustre/lnet/lnet/api-ni.c:2153:22
      [16859.359277] index 0 is out of range for type 'lnet_nid_md_entry [*]'
      [16859.360117] CPU: 1 PID: 911222 Comm: lnetctl Kdump: loaded Tainted: G        W  OE      6.8.0-62-generic #65-Ubuntu
      [16859.361357] Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011
      [16859.362134] Call Trace:
      [16859.362548]  <TASK>
      [16859.362918]  dump_stack_lvl+0x76/0xa0
      [16859.363490]  dump_stack+0x10/0x20
      [16859.363986]  __ubsan_handle_out_of_bounds+0xc6/0x110
      [16859.364675]  lnet_ping_target_update+0x3bb/0x9e0 [lnet]
      [16859.365405]  lnet_add_net_common+0x29b/0x4f0 [lnet]
      [16859.366093]  lnet_dyn_add_ni+0x19b/0x260 [lnet]
      [16859.366757]  lnet_genl_parse_local_ni+0x190/0x1ca0 [lnet]
      [16859.367491]  ? libcfs_str2net_internal+0xac/0x180 [lnet]
      [16859.368230]  lnet_net_cmd+0x5b8/0xa70 [lnet]
      [16859.368861]  genl_family_rcv_msg_doit+0xfa/0x160
      [16859.369507]  genl_family_rcv_msg+0x184/0x250
      [16859.370105]  ? __pfx_lnet_net_cmd+0x10/0x10 [lnet]
      [16859.370792]  genl_rcv_msg+0x4c/0xb0
      [16859.371301]  ? __pfx_genl_rcv_msg+0x10/0x10
      [16859.371879]  netlink_rcv_skb+0x5d/0x110
      [16859.372420]  genl_rcv+0x28/0x50
      [16859.372898]  netlink_unicast+0x24d/0x390
      [16859.373443]  netlink_sendmsg+0x214/0x470
      [16859.374002]  ____sys_sendmsg+0x38e/0x3f0
      [16859.374565]  ___sys_sendmsg+0x9a/0xf0
      [16859.375096]  __sys_sendmsg+0x89/0xf0
      [16859.375616]  __x64_sys_sendmsg+0x1d/0x30
      [16859.376163]  x64_sys_call+0x91e/0x25a0
      [16859.376728]  do_syscall_64+0x7f/0x180
      [16859.377278]  ? do_read_fault+0x112/0x200
      [16859.377859]  ? do_fault+0xf0/0x260
      [16859.378355]  ? handle_pte_fault+0x114/0x1d0
      [16859.378933]  ? __handle_mm_fault+0x654/0x800
      [16859.379529]  ? __count_memcg_events+0x6b/0x120
      [16859.380154]  ? count_memcg_events.constprop.0+0x2a/0x50
      [16859.380839]  ? handle_mm_fault+0xad/0x380
      [16859.381400]  ? do_user_addr_fault+0x334/0x670
      [16859.382021]  ? irqentry_exit_to_user_mode+0x7b/0x260
      [16859.382693]  ? irqentry_exit+0x43/0x50
      [16859.383223]  ? exc_page_fault+0x94/0x1b0
      [16859.383778]  entry_SYSCALL_64_after_hwframe+0x78/0x80
      [16859.384460] RIP: 0033:0x70f631f2c004
      [16859.385002] Code: 15 19 6e 0d 00 f7 d8 64 89 02 b8 ff ff ff ff eb bf 0f 1f 44 00 00 f3 0f 1e fa 80 3d 45 f0 0d 00 00 74 13 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 4c c3 0f 1f 00 55 48 89 e5 48 83 ec 20 89 55
      [16859.387094] RSP: 002b:00007ffc088370f8 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
      [16859.388039] RAX: ffffffffffffffda RBX: 00005c2927256430 RCX: 000070f631f2c004
      [16859.388919] RDX: 0000000000000000 RSI: 00007ffc08837130 RDI: 0000000000000003
      [16859.389798] RBP: 00007ffc08837120 R08: 000000000000ffff R09: 0000000000000007
      [16859.390681] R10: 000070f632153110 R11: 0000000000000202 R12: 00005c2927284460
      [16859.391562] R13: 00005c2927256340 R14: 00007ffc08837130 R15: 00005c2927283b50
      [16859.392442]  </TASK>
      [16859.392846] ---[ end trace ]---
      

      Attachments

        Issue Links

          Activity

            People

              wc-triage WC Triage
              tappro Mikhail Pershin
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: