[openib-general] Kernel oops: NULL ptr dereference in ib_umem_get

[Arlin Davis]

Here is a new oops from my overnight run....

Apr 19 12:14:57 iclust-19 kernel: idr_remove called for id=0 which is 
not allocated.
Apr 19 12:14:57 iclust-19 kernel:
Apr 19 12:14:57 iclust-19 kernel: Call 
Trace:<ffffffff80241884>{idr_remove+244} 
<ffffffff8037f0fe>{ib_uverbs_event_release+126}
Apr 19 12:14:57 iclust-19 kernel:        
<ffffffff8037f886>{ib_uverbs_close+566} <ffffffff8017baa2>{__fput+98}
Apr 19 12:14:57 iclust-19 kernel:        
<ffffffff8016a66d>{remove_vm_struct+125} <ffffffff8016bbd6>{do_munmap+918}
Apr 19 12:14:57 iclust-19 kernel:        
<ffffffff8042d991>{__down_read+49} <ffffffff8016c3fd>{sys_munmap+77}
Apr 19 12:14:57 iclust-19 kernel:        <ffffffff8010e30a>{system_call+126}
Apr 19 12:14:57 iclust-19 kernel: Unable to handle kernel NULL pointer 
dereference at 0000000000000010 RIP:
Apr 19 12:14:57 iclust-19 kernel: <ffffffff8036da30>{ib_dealloc_pd+0}
Apr 19 12:14:57 iclust-19 kernel: PGD 2feee067 PUD 312c7067 PMD 0
Apr 19 12:14:57 iclust-19 kernel: Oops: 0000 [1] SMP
Apr 19 12:14:57 iclust-19 kernel: CPU 0
Apr 19 12:14:57 iclust-19 kernel: Modules linked in:
Apr 19 12:14:57 iclust-19 kernel: Pid: 19391, comm: putfence1 Not 
tainted 2.6.11
Apr 19 12:14:57 iclust-19 kernel: RIP: 0010:[<ffffffff8036da30>] 
<ffffffff8036da30>{ib_dealloc_pd+0}
Apr 19 12:14:57 iclust-19 kernel: RSP: 0018:ffff81002f66fe40  EFLAGS: 
00010296
Apr 19 12:14:57 iclust-19 kernel: RAX: 0000000000000000 RBX: 
0000000000000000 RCX: 0000000000040000
Apr 19 12:14:57 iclust-19 kernel: RDX: 00000000ffffff01 RSI: 
ffff8100325bb400 RDI: 0000000000000000
Apr 19 12:14:57 iclust-19 kernel: RBP: ffff8100311fe900 R08: 
00000000fffffff8 R09: 0000000000000002
Apr 19 12:14:57 iclust-19 kernel: R10: 00000000ffffffff R11: 
0000000000000000 R12: ffff8100311fe910
Apr 19 12:14:57 iclust-19 kernel: R13: ffff81003a3e7d78 R14: 
ffff81003a3e7880 R15: ffff81003a3e7d88
Apr 19 12:14:57 iclust-19 kernel: FS:  00002aaaaae55f40(0000) 
GS:ffffffff805fe400(0000) knlGS:0000000000000000
Apr 19 12:14:57 iclust-19 kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 
000000008005003b
Apr 19 12:14:57 iclust-19 kernel: CR2: 0000000000000010 CR3: 
0000000031e8f000 CR4: 00000000000006e0
Apr 19 12:14:57 iclust-19 kernel: Process putfence1 (pid: 19391, 
threadinfo ffff81002f66e000, task ffff81002fbd54a0)
Apr 19 12:14:57 iclust-19 kernel: Stack: ffffffff8037f88e 
ffff81003a3e7d80 ffff81003227a2c0 ffff810037ff6440
Apr 19 12:14:57 iclust-19 kernel:        ffff81003d864108 
ffff81003f289870 00002aaaab4d2000 ffff810032eb6e00
Apr 19 12:14:57 iclust-19 kernel:        ffffffff8017baa2 00002aaaab4d2000
Apr 19 12:14:57 iclust-19 kernel: Call 
Trace:<ffffffff8037f88e>{ib_uverbs_close+574} <ffffffff8017baa2>{__fput+98}
Apr 19 12:14:57 iclust-19 kernel:        
<ffffffff8016a66d>{remove_vm_struct+125} <ffffffff8016bbd6>{do_munmap+918}
Apr 19 12:14:57 iclust-19 kernel:        
<ffffffff8042d991>{__down_read+49} <ffffffff8016c3fd>{sys_munmap+77}
Apr 19 12:14:57 iclust-19 kernel:        <ffffffff8010e30a>{system_call+126}
Apr 19 12:14:57 iclust-19 kernel:
Apr 19 12:14:57 iclust-19 kernel: Code: 8b 47 10 85 c0 75 0d 48 8b 07 4c 
8b 98 18 01 00 00 41 ff e3
Apr 19 12:14:57 iclust-19 kernel: RIP 
<ffffffff8036da30>{ib_dealloc_pd+0} RSP <ffff81002f66fe40>
Apr 19 12:14:57 iclust-19 kernel: CR2: 0000000000000010