[openib-general] Kernel Oops in user-mad, mad

[Jack Morgenstein]

We received the following kernel Oops while running regression
(see console picture attached).

This looks like a possible race condition between handling umad send completions
and ib_unregister_mad_agent.

The Oops is at the list_del line of dequeue_send (user_mad.c: 186)
Note that ib_unregister_mad_agent invokes unregister_mad_agent->cancel_mads -> agent send handler.

Is there a possibility that there is a double deletion from a list somewhere?

Jack
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mad_oops.jpg
Type: image/jpeg
Size: 450236 bytes
Desc: not available
URL: <http://lists.openfabrics.org/pipermail/general/attachments/20061001/d8026396/attachment.jpg>