On Thu, Dec 16, 2021 at 12:38 PM Vishal Verma <vverma@xxxxxxxxxxxxxxxx> wrote: > [...] > >> [ 740.106431] invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI > >> > > What's the exact command line that triggers this? I am not able to > > trigger it with > > either fio or t/io_uring. > > > > Song > I only had 1 nvme so was creating 4 partitions on it and creating a > raid10 and doing: > > mdadm -C /dev/md10 -l 10 -n 4 /dev/nvme4n1p1 /dev/nvme4n1p2 > /dev/nvme4n1p3 /dev/nvme4n1p4 > ./t/io_uring /dev/md10-d 256 -p 0 -a 0 -r 100 > > on top of commit: c14704e1cb556 (md-next branch) + "md: add support for > REQ_NOWAIT" patch > Also, applied the commit (75feae73a28) Jens pointed earlier today. > I am able to trigger the following error. I will look into it. Thanks, Song [ 1583.149004] ================================================================== [ 1583.150100] BUG: KASAN: use-after-free in raid10_end_read_request+0x91/0x310 [ 1583.151042] Read of size 8 at addr ffff888160a1c928 by task io_uring/1165 [ 1583.152016] [ 1583.152247] CPU: 0 PID: 1165 Comm: io_uring Not tainted 5.16.0-rc3+ #660 [ 1583.153159] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-2.module_el8.4.0+547+a85d02ba 04/01/2014 [ 1583.154572] Call Trace: [ 1583.155005] <IRQ> [ 1583.155338] dump_stack_lvl+0x44/0x57 [ 1583.155950] print_address_description.constprop.8.cold.17+0x12/0x339 [ 1583.156969] ? raid10_end_read_request+0x91/0x310 [ 1583.157578] ? raid10_end_read_request+0x91/0x310 [ 1583.158272] kasan_report.cold.18+0x83/0xdf [ 1583.158889] ? raid10_end_read_request+0x91/0x310 [ 1583.159554] raid10_end_read_request+0x91/0x310 [ 1583.160201] ? raid10_resize+0x270/0x270 [ 1583.160724] ? bio_uninit+0xc7/0x1e0 [ 1583.161274] blk_update_request+0x21f/0x810 [ 1583.161893] blk_mq_end_request_batch+0x11c/0xa70 [ 1583.162497] ? blk_mq_end_request+0x460/0x460 [ 1583.163204] ? nvme_complete_batch_req+0x12/0x30 [ 1583.163888] nvme_irq+0x6ad/0x6f0 [ 1583.164354] ? io_queue_count_set+0xe0/0xe0 [ 1583.164980] ? nvme_unmap_data+0x1e0/0x1e0 [ 1583.165504] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1583.166149] ? io_queue_count_set+0xe0/0xe0 [ 1583.166721] __handle_irq_event_percpu+0x79/0x440 [ 1583.167446] handle_irq_event_percpu+0x6f/0xe0 [ 1583.168101] ? __handle_irq_event_percpu+0x440/0x440 [ 1583.168734] ? lock_contended+0x6e0/0x6e0 [ 1583.169349] ? do_raw_spin_unlock+0xa2/0x130 [ 1583.169961] handle_irq_event+0x54/0x90 [ 1583.170442] handle_edge_irq+0x121/0x300 [ 1583.171012] __common_interrupt+0x7d/0x170 [ 1583.171538] common_interrupt+0xa0/0xc0 [ 1583.172103] </IRQ> [ 1583.172389] <TASK>
