[LU-2077] Null pointer dereference in ofd_health_check+0x28

• Type: Bug
• Resolution: Fixed
• Priority: Major
• Labels: topsequoia
• Severity: 3
• Assignee: WC Triage
• Reporter: Prakash Surya (Inactive)

Description

I'm certain this was fixed previously on the Orion branch in ORI-450.

BUG: unable to handle kernel NULL pointer dereference at 0000000000000010
IP: [<ffffffffa072f3f7>] lu_context_key_get+0x17/0x60 [obdclass]
PGD 10049b7067 PUD ff6b17067 PMD 0 
Oops: 0000 [#1] SMP 
last sysfs file: /sys/devices/system/cpu/cpu15/cache/index2/shared_cpu_map
CPU 9 
Modules linked in: ofd(U) ost(U) mgc(U) osd_zfs(U) lquota(U) lustre(U) lov(U) osc(U) mdc(U) fid(U) fld(U) ptlrpc(U) obdclass(U) lvfs(U) zfs(P)(U) zcommon(P)(U) znvpair(P)(U) dm_round_robin zavl(P)(U) scsi_dh_rdac zunicode(P)(U) spl(U) zlib_deflate sg sd_mod crc_t10dif acpi_cpufreq freq_table mperf ib_srp scsi_transport_srp scsi_tgt ksocklnd(U) ko2iblnd(U) lnet(U) sha512_generic sha256_generic libcfs(U) ib_ipoib rdma_ucm ib_ucm ib_uverbs ib_umad rdma_cm ib_cm iw_cm ib_addr ib_sa mlx4_ib ib_mad ib_core dm_mirror dm_region_hash dm_log dm_multipath dm_mod vhost_net macvtap macvlan tun kvm wmi sb_edac edac_core i2c_i801 i2c_core ahci iTCO_wdt iTCO_vendor_support ioatdma ipv6 nfs lockd fscache nfs_acl auth_rpcgss sunrpc igb dca mlx4_en mlx4_core [last unloaded: obdfilter]

Pid: 9929, comm: grep Tainted: P           ----------------   2.6.32-220.23.1.1chaos.ch5.x86_64 #1 appro gb812x-cn/S2600JF
RIP: 0010:[<ffffffffa072f3f7>]  [<ffffffffa072f3f7>] lu_context_key_get+0x17/0x60 [obdclass]
RSP: 0018:ffff881004481db8  EFLAGS: 00010246
RAX: 0000000000000013 RBX: 0000000000000003 RCX: 0000000000000000
RDX: ffff88082aeb6a40 RSI: ffffffffa0a18040 RDI: 0000000000000000
RBP: ffff881004481db8 R08: ffff881004481e64 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: ffff8807f9418000 R14: ffff88102518f500 R15: ffff88102518f500
FS:  00002aaaab289f60(0000) GS:ffff88085c420000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000010 CR3: 00000010042ac000 CR4: 00000000000406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process grep (pid: 9929, threadinfo ffff881004480000, task ffff88102518f500)
Stack:
 ffff881004481de8 ffffffffa09fb338 0000000000000002 0000000000000003
<0> ffff8807f941c138 0000000000000000 ffff881004481e38 ffffffffa06d38e7
<0> 0000100004481e28 ffff8810040b4000 ffff881004481f48 ffff881004481f48
Call Trace:
 [<ffffffffa09fb338>] ofd_health_check+0x28/0x300 [ofd]
 [<ffffffffa06d38e7>] obd_proc_read_health+0x297/0x3b0 [obdclass]
 [<ffffffffa06f6673>] lprocfs_fops_read+0xf3/0x1f0 [obdclass]
 [<ffffffff811dc9fe>] proc_reg_read+0x7e/0xc0
 [<ffffffff811782d5>] vfs_read+0xb5/0x1a0
 [<ffffffff81178411>] sys_read+0x51/0x90
 [<ffffffff8100b0f2>] system_call_fastpath+0x16/0x1b
Code: 00 00 00 04 00 e8 5a 1b c0 ff 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 0f 1f 44 00 00 48 63 46 20 48 3b 34 c5 00 f6 7b a0 75 0a <48> 8b 57 10 48 8b 04 c2 c9 c3 48 c7 c7 40 2d 79 a0 48 c7 c2 a0 
RIP  [<ffffffffa072f3f7>] lu_context_key_get+0x17/0x60 [obdclass]
 RSP <ffff881004481db8>
CR2: 0000000000000010