nvme-6.3: blktests nvme/003 null pointer for fc transport

[Daniel Wagner]

Hi,

Hannes added support to blktest to enable the FC transport for it. And as result
blktests is able to crash the kernel. Haven't startet to look into it yet.

 run blktests nvme/003 at 2023-01-30 12:08:28
 nvmet: adding nsid 1 to subsystem blktests-subsystem-1
 BUG: kernel NULL pointer dereference, address: 0000000000000010
 #PF: supervisor read access in kernel mode
 #PF: error_code(0x0000) - not-present page
 PGD 0 P4D 0
 Oops: 0000 [#1] PREEMPT SMP NOPTI
 CPU: 3 PID: 14200 Comm: nvme Not tainted 6.2.0-rc4+ #1 c9afca57e89c2aa3234427c2cd6cd4dd2984ae8c
 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015
 RIP: 0010:nvme_alloc_admin_tag_set+0x38/0x120 [nvme_core]
 Code: 48 89 d5 48 89 f3 49 89 fe ba 30 01 00 00 48 89 f7 31 f6 e8 9a a9 0a df 48 89 6b 38 c7 43 44 1e 00 00 00 49 8b 86 f8 00 00 00 <f6> 40 10 01 74 07 c7 43 48 01 00 00 00 41 8b 86 24 01 00 00 89 43
 RSP: 0018:ffffa9d341a07c48 EFLAGS: 00010246
 RAX: 0000000000000000 RBX: ffff902d57966090 RCX: 0000000000000000
 RDX: 0000000000000130 RSI: 0000000000000000 RDI: ffff902d579661c0
 RBP: ffffffffc0c08578 R08: 0000000000000dc0 R09: ffff902d57966090
 R10: ffffffff9f379a17 R11: 0000000000000010 R12: ffff902d579665a8
 R13: ffff902d7226a800 R14: ffff902d579665a8 R15: 00000000000001d8
 FS:  00007f50d94c1780(0000) GS:ffff902eb1400000(0000) knlGS:0000000000000000
 CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
 CR2: 0000000000000010 CR3: 00000001056d2001 CR4: 0000000000170ee0
 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
 Call Trace:
  <TASK>
  nvme_fc_init_ctrl+0x444/0x620 [nvme_fc e229b68788426766352a96e834fb25104e3bb609]
  nvme_fc_create_ctrl+0x1e9/0x250 [nvme_fc e229b68788426766352a96e834fb25104e3bb609]
  ? rcu_read_lock_sched_held+0xb/0x70
  nvmf_dev_write+0x22d/0x330 [nvme_fabrics 903efb754406e989596ad7b178f3d4a61b162a0e]
  vfs_write+0x10d/0x2f0
  ? do_sys_openat2+0x128/0x150
  ksys_write+0x6c/0xd0
  do_syscall_64+0x60/0x90
  ? do_user_addr_fault+0x3bf/0x510
  ? rcu_read_lock_sched_held+0xb/0x70
  entry_SYSCALL_64_after_hwframe+0x63/0xcd
 RIP: 0033:0x7f50d7f06af3
 Code: 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 f3 c3 0f 1f 00 41 54 55 49 89 d4 53 48 89
 RSP: 002b:00007fff10857428 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
 RAX: ffffffffffffffda RBX: 0000560c887baeb0 RCX: 00007f50d7f06af3
 RDX: 000000000000012b RSI: 0000560c887baeb0 RDI: 0000000000000003
 RBP: 0000000000000003 R08: 000000000000012b R09: 0000560c887baeb0
 R10: 00007f50d7e07468 R11: 0000000000000246 R12: 0000560c887b7970
 R13: 000000000000012b R14: 00007f50d94eb5a0 R15: 00007f50d94dd520
  </TASK>
 Modules linked in: loop nvme_fcloop nvmet_fc nvmet nvme_fc nvme_fabrics nvme_core nvme_common rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver nfs lockd grace sunrpc fscache netfs af_packet rfkill nls_iso8859_1 nls_cp437 vfat intel_rapl_msr fat intel_rapl_common snd_hda_codec_generic kvm_intel snd_hda_intel iTCO_wdt intel_pmc_bxt snd_intel_dspcfg iTCO_vendor_support snd_hda_codec kvm snd_hwdep joydev snd_hda_core irqbypass snd_pcm pcspkr snd_timer i2c_i801 lpc_ich efi_pstore i2c_smbus snd virtio_net soundcore tiny_power_button net_failover virtio_balloon failover button fuse configfs ip_tables x_tables hid_generic usbhid crct10dif_pclmul crc32_pclmul ghash_clmulni_intel aesni_intel crypto_simd cryptd serio_raw xhci_pci sr_mod xhci_pci_renesas cdrom virtio_blk xhci_hcd usbcore virtio_gpu virtio_dma_buf qemu_fw_cfg btrfs libcrc32c crc32c_intel xor zlib_deflate raid6_pq sg dm_multipath dm_mod scsi_dh_rdac scsi_dh_emc scsi_dh_alua efivarfs virtio_rng
  [last unloaded: nvme_common]
 CR2: 0000000000000010
 ---[ end trace 0000000000000000 ]---

Thanks,
Daniel