[BUG]LTS 5.10 regression NULL pointer deref in nvme_ioctl

[Jinpu Wang]

On Thu, Jun 9, 2022 at 2:32 AM Chaitanya Kulkarni <chaitanyak at nvidia.com> wrote:
>
> On 6/8/22 01:02, Jinpu Wang wrote:
> > Hi folks on nvme list,
> >
> > We hitt the following crash when run "nvme list" on kernel 5.10.115:
> >
> >      /build/ionos-linux-pOGXys/ionos-linux-5.10.42/arch/x86/kernel/dumpstack.c:
> > 359
> >
> >   #4 [ffffa80c7a5c7d10] no_context at ffffffffa7062467
> >
> >      /build/ionos-linux-pOGXys/ionos-linux-5.10.42/arch/x86/mm/fault.c: 754
> >
> >   #5 [ffffa80c7a5c7d78] exc_page_fault at ffffffffa77c919e
> >
> >      /build/ionos-linux-pOGXys/ionos-linux-5.10.42/arch/x86/mm/fault.c: 1327
> >
> >   #6 [ffffa80c7a5c7dd0] asm_exc_page_fault at ffffffffa7800a6e
> >
> >      /build/ionos-linux-pOGXys/ionos-linux-5.10.42/./arch/x86/include/asm/idtentry.h:
> > 571
> >
> >   #7 [ffffa80c7a5c7e58] nvme_ioctl at ffffffffc10c1038 [nvme_core]
> >
> >      /build/ionos-linux-pOGXys/ionos-linux-5.10.42/drivers/nvme/host/nvme.h: 609
> >
> >   #8 [ffffa80c7a5c7ec0] blkdev_ioctl at ffffffffa73f6bc5
> >
> >      /build/ionos-linux-pOGXys/ionos-linux-5.10.42/block/ioctl.c: 237
> >
> >   #9 [ffffa80c7a5c7f08] block_ioctl at ffffffffa72c3329
> >
> >      /build/ionos-linux-pOGXys/ionos-linux-5.10.42/fs/block_dev.c: 1893
> >
> > #10 [ffffa80c7a5c7f10] __x64_sys_ioctl at ffffffffa7292fe4
> >
> >      /build/ionos-linux-pOGXys/ionos-linux-5.10.42/fs/ioctl.c: 49
> >
> >
> >
> > 607 static inline void nvme_get_ctrl(struct nvme_ctrl *ctrl)
> >
> > 608 {
> >
> > 609         get_device(ctrl->device);
> >
> > 610 }
> > The same commands works on kernel 5.4.
> >
> > kernel 5.10 panic while processing nvme2 which is  a bit different.
> >
>
> Did you try if it works on the latest kernel ?
I just tried with 5.15.32, it works there, so it's just a regression
already fixed later.
>
> -ck
>
>