System crash in memcpy() coming out of iscsi_tcp_recv_skb() while using Oracle AFD

Solution Unverified - Updated -

Issue

  • System crash in memcpy() coming out of iscsi_tcp_recv_skb() while using Oracle AFD:
[ 4751.805088] general protection fault: 0000 [#1] SMP 
....
CPU: 19 PID: 108160 Comm: ssh Kdump: loaded Tainted: P           OE  ------------   3.10.0-1160.71.1.el7.x86_64 #1
Hardware name: Dell Inc. PowerEdge R640/0W23H8, BIOS 1.4.9 06/29/2018
task: ffff9034c2260000 ti: ffff902e58e38000 task.ti: ffff902e58e38000
RIP: 0010:[<ffffffffb8b978e6>]  [<ffffffffb8b978e6>] memcpy+0x6/0x110
RSP: 0000:ffff9065fd843838  EFLAGS: 00010202
....
Call Trace:
<IRQ> 
[<ffffffffc038e674>] ? iscsi_tcp_recv_skb+0x1f4/0x400 [libiscsi_tcp]
[<ffffffffc016ad60>] ? iscsi_sw_tcp_write_space+0xb0/0xb0 [iscsi_tcp]
[<ffffffffc016adc0>] iscsi_sw_tcp_recv+0x60/0x100 [iscsi_tcp]
[<ffffffffb8eb2f0b>] tcp_read_sock+0xab/0x1f0
[<ffffffffc016b3cf>] iscsi_sw_tcp_data_ready+0x5f/0x110 [iscsi_tcp]
[<ffffffffb8ec6df6>] ? tcp_send_delayed_ack+0x106/0x130
[<ffffffffb8ec01d7>] tcp_rcv_established+0x447/0x7a0
[<ffffffffb8ecb04a>] tcp_v4_do_rcv+0x10a/0x350
[<ffffffffb8ecc89c>] tcp_v4_rcv+0x7dc/0x9e0
[<ffffffffb8ec01d7>] ? tcp_rcv_established+0x447/0x7a0
[<ffffffffb8ea4a8d>] ip_local_deliver_finish+0xbd/0x200
[<ffffffffb8ea4d80>] ip_local_deliver+0x60/0xe0
[<ffffffffb8ecc072>] ? tcp_v4_early_demux+0x112/0x160
[<ffffffffb8ea46f0>] ip_rcv_finish+0x90/0x370
[<ffffffffb8ea50c0>] ip_rcv+0x2c0/0x420
[<ffffffffc05fce98>] ? bond_handle_frame+0x78/0x290 [bonding]
[<ffffffffb8e59819>] __netif_receive_skb_core+0x729/0xa10
  • Also, a warning may be present from bio_advance():
WARNING: CPU: 23 PID: 0 at fs/bio.c:897 bio_advance+0xbe/0xd0
bio idx 249 >= vcnt 249
....
CPU: 23 PID: 0 Comm: swapper/23 Kdump: loaded Tainted: P           OE  ------------   3.10.0-1160.71.1.el7.x86_64 #1
Hardware name: Dell Inc. PowerEdge R640/0W23H8, BIOS 1.4.9 06/29/2018
Call Trace:
<IRQ>  [<ffffffffb8f865c9>] dump_stack+0x19/0x1b
[<ffffffffb889b408>] __warn+0xd8/0x100
[<ffffffffb889b48f>] warn_slowpath_fmt+0x5f/0x80
[<ffffffffb88dae75>] ? wake_up_process+0x15/0x20
[<ffffffffb8a8bc9e>] bio_advance+0xbe/0xd0
[<ffffffffb8b56107>] blk_update_request+0x77/0x370
[<ffffffffb8cee014>] scsi_end_request+0x34/0x1e0
[<ffffffffb8cee388>] scsi_io_completion+0x168/0x720
[<ffffffffb8ce367c>] scsi_finish_command+0xdc/0x140
[<ffffffffb8ced8d0>] scsi_softirq_done+0x130/0x160
[<ffffffffb8b5db56>] blk_done_softirq+0x96/0xc0
[<ffffffffb88a4d85>] __do_softirq+0xf5/0x280
[<ffffffffb8f9d4ec>] call_softirq+0x1c/0x30
[<ffffffffb882f715>] do_softirq+0x65/0xa0
[<ffffffffb88a5105>] irq_exit+0x105/0x110
[<ffffffffb88599f9>] smp_call_function_single_interrupt+0x39/0x40
[<ffffffffb8f9c26a>] call_function_single_interrupt+0x16a/0x170
<EOI>  [<ffffffffb8dc8be7>] ? cpuidle_enter_state+0x57/0xd0
[<ffffffffb8dc8d3e>] cpuidle_idle_call+0xde/0x230
[<ffffffffb8837c8e>] arch_cpu_idle+0xe/0xc0
[<ffffffffb890194a>] cpu_startup_entry+0x14a/0x1e0
[<ffffffffb885a857>] start_secondary+0x1f7/0x270
[<ffffffffb88000d5>] start_cpu+0x5/0x14
....

Environment

  • Red Hat Enterprise Linux 7
  • Oracle AFD

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content