[LU-9419] mdt_intent_layout -> lu_object_put crash

• Type: Bug
• Resolution: Unresolved
• Priority: Minor
• Severity: 3
• Assignee: WC Triage
• Reporter: Oleg Drokin

Description

Just had this crash in racer on the tip of master + a few patches from pfl branch.

[150509.265274] BUG: unable to handle kernel paging request at ffff88002b454e48
[150509.266047] IP: [<ffffffffa037e760>] lu_object_put+0x280/0x3d0 [obdclass]
[150509.267600] PGD 2e75067 PUD 2e76067 PMD bccc0067 PTE 800000002b454060
[150509.268306] Oops: 0000 [#1] SMP DEBUG_PAGEALLOC
[150509.268711] Modules linked in: lustre(OE) ofd(OE) osp(OE) lod(OE) ost(OE) mdt(OE) mdd(OE) mgs(OE) osd_ldiskfs(OE) ldiskfs(OE) lquota(OE) lfsck(OE) obdecho(OE) mgc(OE) lov(OE) osc(OE) mdc(OE) lmv(OE) fid(OE) fld(OE) ptlrpc_gss(OE) ptlrpc(OE) obdclass(OE) ksocklnd(OE) lnet(OE) libcfs(OE) loop mbcache jbd2 rpcsec_gss_krb5 syscopyarea sysfillrect sysimgblt ttm drm_kms_helper ata_generic pata_acpi drm i2c_piix4 ata_piix virtio_balloon i2c_core virtio_console virtio_blk pcspkr serio_raw libata floppy nfsd ip_tables [last unloaded: libcfs]
[150509.273560] CPU: 3 PID: 10499 Comm: mdt00_001 Tainted: G           OE  ------------   3.10.0-debug #1
[150509.274797] Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011
[150509.275353] task: ffff8800ae08c880 ti: ffff88006b498000 task.ti: ffff88006b498000
[150509.276465] RIP: 0010:[<ffffffffa037e760>]  [<ffffffffa037e760>] lu_object_put+0x280/0x3d0 [obdclass]
[150509.277558] RSP: 0018:ffff88006b49ba58  EFLAGS: 00010246
[150509.278114] RAX: 0000000000000000 RBX: ffff8800a8a100d0 RCX: 0000000000000002
[150509.279196] RDX: 0000000000000002 RSI: ffffc9000112b000 RDI: ffff88002b454e50
[150509.280361] RBP: ffff88006b49baa8 R08: 000000000000000e R09: 0000000000000e08
[150509.281105] R10: 0000000000000401 R11: 000000000000000c R12: ffff8800af2674c0
[150509.295287] R13: ffff88002b454e88 R14: ffff88002b454e38 R15: ffffc9000113b048
[150509.296360] FS:  0000000000000000(0000) GS:ffff8800bc6c0000(0000) knlGS:0000000000000000
[150509.297589] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[150509.298143] CR2: ffff88002b454e48 CR3: 0000000001c0e000 CR4: 00000000000006e0
[150509.299181] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[150509.300215] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[150509.301248] Stack:
[150509.301731]  ffffc9000113b048 ffffc9000112b000 ffffc9000112b000 ffffffff00000dfa
[150509.302817]  00000000f1f98664 ffff88008503d800 ffff88006b49bc18 0000000000001000
[150509.303880]  ffff880077b86bb8 0000000000000000 ffff88006b49bb08 ffffffffa0c28180
[150509.305001] Call Trace:
[150509.305516]  [<ffffffffa0c28180>] mdt_intent_layout+0x4a0/0xbc0 [mdt]
[150509.306142]  [<ffffffffa05a77f0>] ? lustre_swab_ldlm_policy_data+0x30/0x30 [ptlrpc]
[150509.307229]  [<ffffffffa0c2bf3e>] mdt_intent_policy+0x43e/0xbc0 [mdt]
[150509.307889]  [<ffffffffa05560ea>] ldlm_lock_enqueue+0x35a/0x940 [ptlrpc]
[150509.308537]  [<ffffffffa02434b5>] ? cfs_hash_rw_unlock+0x15/0x20 [libcfs]
[150509.309166]  [<ffffffffa057f7e3>] ldlm_handle_enqueue0+0x9e3/0x1670 [ptlrpc]
[150509.309778]  [<ffffffffa05a7870>] ? lustre_swab_ldlm_lock_desc+0x30/0x30 [ptlrpc]
[150509.310845]  [<ffffffffa0602bf2>] tgt_enqueue+0x62/0x210 [ptlrpc]
[150509.311457]  [<ffffffffa0607035>] tgt_request_handle+0x925/0x1330 [ptlrpc]
[150509.312076]  [<ffffffffa05b0a51>] ptlrpc_server_handle_request+0x231/0xac0 [ptlrpc]
[150509.313195]  [<ffffffffa05ae608>] ? ptlrpc_wait_event+0xb8/0x370 [ptlrpc]
[150509.313794]  [<ffffffffa05b47e8>] ptlrpc_main+0xa58/0x1dd0 [ptlrpc]
[150509.314402]  [<ffffffffa05b3d90>] ? ptlrpc_register_service+0xe90/0xe90 [ptlrpc]
[150509.315445]  [<ffffffff810a2eda>] kthread+0xea/0xf0
[150509.315988]  [<ffffffff810a2df0>] ? kthread_create_on_node+0x140/0x140
[150509.317667]  [<ffffffff8170fbd8>] ret_from_fork+0x58/0x90
[150509.318235]  [<ffffffff810a2df0>] ? kthread_create_on_node+0x140/0x140
[150509.318798] Code: ff 66 2e 0f 1f 84 00 00 00 00 00 48 8b 03 be 01 00 00 00 48 8b 7d c0 48 8b 40 40 ff 50 18 e9 4a fe ff ff 0f 1f 84 00 00 00 00 00 <49> 8b 46 10 a8 01 0f 84 36 fe ff ff 48 8b 7d b0 31 c9 31 d2 be 
[150509.321011] RIP  [<ffffffffa037e760>] lu_object_put+0x280/0x3d0 [obdclass]

tag in my tree: master-20170427
crashdump: /exports/crashdumps/192.168.10.220-2017-04-27-19:15:01