[LU-12959] NULL pointer dereference in lnet_finalize

Tue, 12 Nov 2019 08:22:09 +0000

This issue was created by maloo for S Buisson <sbuisson@ddn.com>

This issue relates to the following test suite run: https://testing.whamcloud.com/test_sets/9fd7871e-04c5-11ea-8e77-52540065bddc

test_31 failed with the following error:

onyx-30vm7 crashed during sanity-sec test_31

The console logs for the crash are:

[19759.795834] BUG: unable to handle kernel NULL pointer dereference at 00000000000000ec
[19759.795938] IP: [<ffffffffc08de033>] lnet_finalize+0xd33/0xf20 [lnet]
[19759.795939] PGD 0 
[19759.795941] Oops: 0002 [#1] SMP 
[19759.795984] Modules linked in: dm_flakey osp(OE) ofd(OE) lfsck(OE) ost(OE) mgc(OE) osd_ldiskfs(OE) lquota(OE) fid(OE) fld(OE) ksocklnd(OE) ptlrpc(OE) obdclass(OE) lnet(OE) ldiskfs(OE) libcfs(OE) rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver nfs lockd grace fscache rpcrdma ib_isert iscsi_target_mod ib_iser libiscsi scsi_transport_iscsi ib_srpt target_core_mod crc_t10dif crct10dif_generic ib_srp scsi_transport_srp scsi_tgt ib_ipoib rdma_ucm ib_ucm ib_uverbs ib_umad rdma_cm ib_cm iw_cm ib_core sunrpc dm_mod iosf_mbi crc32_pclmul ghash_clmulni_intel ppdev aesni_intel lrw gf128mul glue_helper ablk_helper cryptd joydev pcspkr parport_pc virtio_balloon parport i2c_piix4 ip_tables ext4 mbcache jbd2 ata_generic pata_acpi virtio_blk ata_piix 8139too libata crct10dif_pclmul crct10dif_common crc32c_intel virtio_pci
[19759.795990]  8139cp virtio_ring serio_raw virtio mii floppy [last unloaded: dm_flakey]
[19759.795996] CPU: 0 PID: 23495 Comm: socknal_sd00_01 Kdump: loaded Tainted: G           OE  ------------   3.10.0-957.27.2.el7_lustre.x86_64 #1
[19759.795997] Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011
[19759.795998] task: ffff99877a9d2080 ti: ffff99877a850000 task.ti: ffff99877a850000
[19759.796007] RIP: 0010:[<ffffffffc08de033>]  [<ffffffffc08de033>] lnet_finalize+0xd33/0xf20 [lnet]
[19759.796012] RSP: 0018:ffff99877a853c00  EFLAGS: 00010293
[19759.796013] RAX: ffff9987782f2780 RBX: ffff99874ad91200 RCX: 0000000000000000
[19759.796014] RDX: 0000000000000000 RSI: ffffffffc08de033 RDI: ffff99877bd26600
[19759.796014] RBP: ffff99877a853c50 R08: 00000000c565cd78 R09: ffffffffb7281a99
[19759.796015] R10: 0000000000061eb8 R11: 0000000000100000 R12: 00000000ffffffea
[19759.796016] R13: 0000000000000000 R14: 0000000000000005 R15: 0000000000000000
[19759.796017] FS:  0000000000000000(0000) GS:ffff99877fc00000(0000) knlGS:0000000000000000
[19759.796018] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[19759.796019] CR2: 00000000000000ec CR3: 0000000077b68000 CR4: 00000000000606f0
[19759.796026] Call Trace:
[19759.796048]  [<ffffffffc08d9f22>] ? libcfs_nid2str_r+0xe2/0x130 [lnet]
[19759.796071]  [<ffffffffc08f0af8>] lnet_parse_local+0xc08/0xd20 [lnet]
[19759.796084]  [<ffffffffc08f160a>] lnet_parse+0x9fa/0x1260 [lnet]
[19759.796119]  [<ffffffffc0c169eb>] ? ksocknal_lib_recv_iov+0xab/0x210 [ksocklnd]
[19759.796123]  [<ffffffffc0c137b0>] ksocknal_process_receive+0x490/0xdd0 [ksocklnd]
[19759.796126]  [<ffffffffc0c0f7be>] ? ksocknal_tx_done+0x9e/0x1f0 [ksocklnd]
[19759.796130]  [<ffffffffc0c14596>] ksocknal_scheduler+0x206/0xd50 [ksocklnd]
[19759.796171]  [<ffffffffb62c3f50>] ? wake_up_atomic_t+0x30/0x30
[19759.796175]  [<ffffffffc0c14390>] ? ksocknal_recv+0x2a0/0x2a0 [ksocklnd]
[19759.796176]  [<ffffffffb62c2e81>] kthread+0xd1/0xe0
[19759.796178]  [<ffffffffb62c2db0>] ? insert_kthread_work+0x40/0x40
[19759.796205]  [<ffffffffb6977c37>] ret_from_fork_nospec_begin+0x21/0x21
[19759.796207]  [<ffffffffb62c2db0>] ? insert_kthread_work+0x40/0x40
[19759.796224] Code: 01 e9 df fe ff ff 48 85 c9 74 07 f0 ff 81 9c 00 00 00 83 40 64 01 e9 ca fe ff ff f0 ff 82 e8 00 00 00 83 40 58 01 e9 ba fe ff ff <f0> ff 82 ec 00 00 00 83 40 5c 01 e9 aa fe ff ff 41 8b 8a d4 00 
[19759.796231] RIP  [<ffffffffc08de033>] lnet_finalize+0xd33/0xf20 [lnet]
[19759.796232]  RSP <ffff99877a853c00>
[19759.796232] CR2: 00000000000000ec

VVVVVVV DO NOT REMOVE LINES BELOW, Added by Maloo for auto-association VVVVVVV
sanity-sec test_31 - onyx-30vm7 crashed during sanity-sec test_31

Whamcloud Community JIRA

[LU-12959] NULL pointer dereference in lnet_finalize