[LU-4094] general protection fault at lu_global_key_fini+0x170

• Type: Bug
• Resolution: Cannot Reproduce
• Priority: Critical
• Severity: 3
• Assignee: WC Triage
• Reporter: Jinshan Xiong (Inactive)

Description

This can be hit by running racer rarely with the following stack trace:

<4>general protection fault: 0000 [#1] SMP
<4>last sysfs file: /sys/devices/system/cpu/possible
<4>CPU 1
<4>Modules linked in: lustre(U) ofd(U) osp(U) lod(U) ost(U) mdt(U) osd_ldiskfs(U) fsfilt_ldiskfs(U) ldiskfs(U) mdd(U) mgs(U) lquota(U) lfsck(U) obdecho(U) mgc(U) lov(U) osc(U) mdc(U) lmv(U) fid(U) fld(U) ptlrpc(U) obdclass(U) lvfs(U) ksocklnd(U) lnet(U) libcfs(U) jbd2 sha512_generic sha256_generic crc32c_intel nfsd exportfs nfs lockd fscache auth_rpcgss nfs_acl sunrpc cpufreq_ondemand acpi_cpufreq freq_table mperf ib_ipoib rdma_ucm ib_ucm ib_uverbs ib_umad rdma_cm ib_cm iw_cm ib_addr ipv6 mlx4_ib ib_sa ib_mad ib_core mlx4_en mlx4_core e1000e microcode serio_raw sg i2c_i801 i2c_core iTCO_wdt iTCO_vendor_support ioatdma dca i7core_edac edac_core shpchp ext3 jbd mbcache sd_mod crc_t10dif pata_acpi ata_generic ata_piix dm_mirror dm_region_hash dm_log dm_mod [last unloaded: libcfs]
<4>
<4>Pid: 17129, comm: jbd2/loop0-8 Not tainted 2.6.32-358.18.1.el6_lustre.ga0a1066.x86_64 #1 Supermicro X8DTT-H/X8DTT-H
<4>RIP: 0010:[<ffffffffa090cbd0>]  [<ffffffffa090cbd0>] lu_global_key_fini+0x170/0x1e0 [obdclass]
<4>RSP: 0018:ffff8807c2e13c20  EFLAGS: 00010202
<4>RAX: 0000000000000000 RBX: 5a5a5a5a5a5a5a5a RCX: ffff88082eb5dd40
<4>RDX: 0000000000000200 RSI: 0000000000000000 RDI: 5a5a5a5a5a5a5a5a
<4>RBP: ffff8807c2e13c30 R08: 0000000000000002 R09: ffff8807910bb200
<4>R10: ffff8807910bb200 R11: ffff88072d648c00 R12: ffff880787b89ac8
<4>R13: 0000000000000000 R14: ffff880787b89b40 R15: ffff880787b89b40
<4>FS:  0000000000000000(0000) GS:ffff880045620000(0000) knlGS:0000000000000000
<4>CS:  0010 DS: 0018 ES: 0018 CR0: 000000008005003b
<4>CR2: 00000034b0a64490 CR3: 000000072eac6000 CR4: 00000000000007e0
<4>DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
<4>DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
<4>Process jbd2/loop0-8 (pid: 17129, threadinfo ffff8807c2e12000, task ffff8807a9e3d540)
<4>Stack:
<4> ffff8807c2e13c80 ffffffffa096e0e0 ffff8807c2e13c60 ffffffffa090d4cc
<4><d> 0000000000000028 ffff880787b89ac8 0000000000000001 ffff8807b00ee000
<4><d> ffff8807c2e13c80 ffffffffa090d5ff ffff880787b89ac8 ffff880787b89ac8
<4>Call Trace:
<4> [<ffffffffa090d4cc>] key_fini+0x5c/0x160 [obdclass]
<4> [<ffffffffa090d5ff>] keys_fini+0x2f/0x130 [obdclass]
<4> [<ffffffffa090d72f>] lu_context_fini+0x2f/0xc0 [obdclass]
<4> [<ffffffffa0c621e2>] osd_trans_commit_cb+0xe2/0x2b0 [osd_ldiskfs]
<4> [<ffffffffa0c1732a>] ldiskfs_journal_commit_callback+0x8a/0xc0 [ldiskfs]
<4> [<ffffffffa0aee8ef>] jbd2_journal_commit_transaction+0x116f/0x15a0 [jbd2]
<4> [<ffffffff810096f0>] ? __switch_to+0xd0/0x320
<4> [<ffffffff81081b5b>] ? try_to_del_timer_sync+0x7b/0xe0
<4> [<ffffffffa0af4308>] kjournald2+0xb8/0x220 [jbd2]
<4> [<ffffffff81096da0>] ? autoremove_wake_function+0x0/0x40
<4> [<ffffffffa0af4250>] ? kjournald2+0x0/0x220 [jbd2]
<4> [<ffffffff81096a36>] kthread+0x96/0xa0
<4> [<ffffffff8100c0ca>] child_rip+0xa/0x20
<4> [<ffffffff810969a0>] ? kthread+0x0/0xa0
<4> [<ffffffff8100c0c0>] ? child_rip+0x0/0x20
<4>Code: 89 df ba 00 02 00 00 0f 84 f9 fe ff ff 48 8d 7b 01 c6 03 5a 66 ba ff 01 40 f6 c7 02 0f 84 ee fe ff ff 66 0f 1f 84 00 00 00 00 00 <66> c7 07 5a 5a 48 83 c7 02 83 ea 02 40 f6 c7 04 0f 84 d9 fe ff
<1>RIP  [<ffffffffa090cbd0>] lu_global_key_fini+0x170/0x1e0 [obdclass]
<4> RSP <ffff8807c2e13c20>