[ofa-general] oops in cxgb3:t3_l2t_get

[Roland Dreier]

Hi guys,

With a fairly recent vanilla Linus tree (git head is 551e4fb2), I get
the following oops when I run a program that creates a loopback
connection with the RDMA CM over an iw_cxgb3 device.  It seems to be
totally reproducible.

I can give more info tomorrow, I just figured I'd send this out now in
case it's obvious what the problem is...


 BUG: unable to handle kernel paging request at 00007efebbb8ad5f
 IP: [<ffffffff8821968b>] :cxgb3:t3_l2t_get+0x9e/0x314
 PGD 0
 Oops: 0000 [1] SMP
 CPU 0
 Modules linked in: rdma_ucm rdma_cm ib_cm iw_cm ib_sa ib_mad ib_addr ib_uv]
 Pid: 3482, comm: order Not tainted 2.6.24 #6
 RIP: 0010:[<ffffffff8821968b>]  [<ffffffff8821968b>] :cxgb3:t3_l2t_get+0x94
 RSP: 0018:ffff81007ecb1c48  EFLAGS: 00010202
 RAX: 00007efebbb8ad3f RBX: ffff81007e806e00 RCX: 000000006476a5c4
 RDX: ffff810144488000 RSI: 000000006da48cd2 RDI: 000000003a5e9ba6
 RBP: ffff8101c3280000 R08: 0000000042843f96 R09: ffffc20000d631c0
 R10: 0000000000000000 R11: 0000000000000002 R12: ffff81007e806c00
 R13: 000000000000051f R14: 0000000000000001 R15: 0000000000000000
 FS:  00007fcc6f3f66e0(0000) GS:ffffffff8052e000(0000) knlGS:000000000000000
 CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
 CR2: 00007efebbb8ad5f CR3: 000000014418e000 CR4: 00000000000006e0
 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
 Process order (pid: 3482, threadinfo ffff81007ecb0000, task ffff81007e4e16)
 Stack:  0000000000000000 0000000000000000 a89ca99c00000006 ffff81007e806e00
  ffff81007e8a0000 ffff81007ecb1d18 ffff8101c403f000 ffff81007ecb1d18
  00007fff77400cd8 ffffffff8822c3e8 ffff81007e806e00 0000000000000000
 Call Trace:
  [<ffffffff8822c3e8>] ? :iw_cxgb3:iwch_connect+0x162/0x40e
  [<ffffffff8809273c>] ? :iw_cm:iw_cm_connect+0xd1/0x144
  [<ffffffff880a43c5>] ? :rdma_cm:rdma_connect+0x3a6/0x3ed
  [<ffffffff880abff6>] ? :rdma_ucm:ucma_connect+0x6d/0x89
  [<ffffffff880ab33c>] ? :rdma_ucm:ucma_write+0x73/0x91
  [<ffffffff8027c365>] ? vfs_write+0xad/0x136
  [<ffffffff8027c89a>] ? sys_write+0x45/0x6e
  [<ffffffff8020be3b>] ? system_call_after_swapgs+0x7b/0x80


 Code: c1 ee 03 31 c6 89 f0 29 f7 29 f1 c1 e0 0a 31 f8 29 c1 41 89 c5 8b 45
 RIP  [<ffffffff8821968b>] :cxgb3:t3_l2t_get+0x9e/0x314
  RSP <ffff81007ecb1c48>
 CR2: 00007efebbb8ad5f
 ---[ end trace dae655a0e2ac8f4c ]---