Hi Sagi, Majd encountered same sometime back and reported [1]. He has the fix should be posting the fix soon. Majd/Leon? Parav [1] https://www.spinics.net/lists/linux-rdma/msg49857.html > -----Original Message----- > From: linux-rdma-owner@xxxxxxxxxxxxxxx [mailto:linux-rdma- > owner@xxxxxxxxxxxxxxx] On Behalf Of Sagi Grimberg > Sent: Sunday, May 21, 2017 9:00 AM > To: linux-rdma@xxxxxxxxxxxxxxx > Subject: rdma_cm NULL deref in 4.11.0+ > > Just stepped on it, > > Simple nvmf connect triggers it, is this known? > Also, rping client segfaults so librdmacm seems to be broken. > > -- > [ 16.809498] BUG: unable to handle kernel NULL pointer dereference at > 0000000000000008 > [ 16.812570] IP: __radix_tree_lookup+0xe/0xf0 > [ 16.814172] PGD 0 > [ 16.814174] P4D 0 > > [ 16.815052] Oops: 0000 [#1] SMP > [ 16.815401] Modules linked in: nvme_loop nvme_fabrics nvme_core > nvmet_rdma nvmet rdma_cm iw_cm null_blk mlx5_ib iscsi_target_mod > ib_srpt ib_cm ib_core tcm_loop tcm_fc libfc tcm_qla2xxx qla2xxx > scsi_transport_fc usb_f_tcm tcm_usb_gadget libcomposite udc_core > vhost_scsi vhost target_core_file target_core_iblock target_core_pscsi > target_core_mod configfs kvm_intel kvm irqbypass ppdev crct10dif_pclmul > crc32_pclmul ghash_clmulni_intel pcbc aesni_intel aes_x86_64 crypto_simd > glue_helper cryptd input_leds joydev serio_raw i2c_piix4 parport_pc parport > mac_hid sunrpc autofs4 8139too cirrus ttm drm_kms_helper mlx5_core > syscopyarea ptp sysfillrect psmouse sysimgblt fb_sys_fops pps_core drm > floppy 8139cp mii pata_acpi > [ 16.821972] CPU: 0 PID: 3 Comm: kworker/0:0 Not tainted 4.11.0+ #158 > [ 16.822656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), > BIOS Ubuntu-1.8.2-1ubuntu1 04/01/2014 > [ 16.823630] Workqueue: ib_cm cm_work_handler [ib_cm] > [ 16.824144] task: ffff8e013d9810c0 task.stack: ffff9afc801a4000 > [ 16.824754] RIP: 0010:__radix_tree_lookup+0xe/0xf0 > [ 16.825248] RSP: 0018:ffff9afc801a7b48 EFLAGS: 00010246 > [ 16.825791] RAX: ffff8e0135d70f80 RBX: ffff8e0137130a00 RCX: > 0000000000000000 > [ 16.826497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: > 0000000000000000 > [ 16.827209] RBP: ffff9afc801a7b50 R08: ffff9afc801a7a48 R09: > ffff8e0139b35030 > [ 16.827916] R10: 0000000000000000 R11: 0000000000000040 R12: > ffff8e0137130a88 > [ 16.828631] R13: ffff8e0137130a88 R14: ffff8e0135786200 R15: > ffff8e0137130c00 > [ 16.829317] FS: 0000000000000000(0000) GS:ffff8e013fc00000(0000) > knlGS:0000000000000000 > [ 16.830084] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 > [ 16.830629] CR2: 0000000000000008 CR3: 000000000fe09000 CR4: > 00000000003406f0 > [ 16.831278] Call Trace: > [ 16.831511] radix_tree_lookup+0xd/0x10 > [ 16.831865] cma_ps_find+0x59/0x70 [rdma_cm] > [ 16.832287] cma_id_from_event+0xe8/0x5a0 [rdma_cm] > [ 16.832734] cma_req_handler+0x49/0x970 [rdma_cm] > [ 16.833166] ? cma_req_handler+0x49/0x970 [rdma_cm] > [ 16.833612] cm_process_work+0x25/0x120 [ib_cm] > [ 16.834026] ? cm_process_work+0x25/0x120 [ib_cm] > [ 16.834455] ? cm_get_bth_pkey.isra.36+0x3a/0xa0 [ib_cm] > [ 16.834938] cm_req_handler+0xad2/0xd30 [ib_cm] > [ 16.835356] cm_work_handler+0x196/0x16fa [ib_cm] > [ 16.835785] ? cm_work_handler+0x196/0x16fa [ib_cm] > [ 16.836263] process_one_work+0x156/0x3f0 > [ 16.836631] worker_thread+0x4b/0x410 > [ 16.836969] kthread+0x109/0x140 > [ 16.837268] ? process_one_work+0x3f0/0x3f0 > [ 16.837650] ? kthread_create_on_node+0x40/0x40 > [ 16.838070] ret_from_fork+0x2c/0x40 > [ 16.838399] Code: ff 45 00 7e 03 e9 64 ff ff ff 4c 89 23 e9 0e ff ff > ff 90 66 2e 0f 1f 84 00 00 00 00 00 55 49 89 ca 41 bb 40 00 00 00 48 89 > e5 53 <4c> 8b 47 08 4c 89 c0 83 e0 03 48 83 f8 01 0f 85 a9 00 00 00 4c > -- > -- > To unsubscribe from this list: send the line "unsubscribe linux-rdma" in the > body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at > http://vger.kernel.org/majordomo-info.html ��.n��������+%������w��{.n�����{���fk��ܨ}���Ơz�j:+v�����w����ޙ��&�)ߡ�a����z�ޗ���ݢj��w�f
