Re: [bug report] rdma_rxe: WARNING: inconsistent lock state, inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage

[Yi Zhang <yi.zhang@redhat.com>]

On Sun, Apr 10, 2022 at 7:57 AM Yanjun Zhu <yanjun.zhu@linux.dev> wrote:
>
>
>
> 在 2022/4/9 22:00, Yanjun Zhu 写道:
> >
> > 在 2022/4/9 20:13, Yanjun Zhu 写道:
> >> 在 2022/4/9 13:33, Yi Zhang 写道:
> >>> Hi Yanjun
> >>>
> >>> Pls check the full log below:
> >>
> >> Hi,
> >>
> >> With rping, I can also reproduce this problem.
> >> And with the following diff, all the warnings and dead lock will
> >> disappear.
> >>
> >> But sometimes the kernel will crash after long time running. I am
> >> working on it.
> >
> > Hi，
> >
> > It took me a lot of time to dump the logs of crash.
> >
> > "
> >
> > [  104.760448] infiniband rxe0: set active
> > [  104.760482] infiniband rxe0: added eno8303
> > [  197.190679] BUG: kernel NULL pointer dereference, address:
> > 000000000000011c
> > [  197.190749] #PF: supervisor read access in kernel mode
> > [  197.190785] #PF: error_code(0x0000) - not-present page
> > [  197.190821] PGD 0
> > [  197.190842] Oops: 0000 [#1] PREEMPT SMP NOPTI
> > [  197.190877] CPU: 32 PID: 0 Comm: swapper/32 Kdump: loaded Tainted: G
> > S                5.18.0348.7.1.el8.309 #11
> > [  197.190942] Hardware name: Dell Inc. PowerEdge R750/06V45N, BIOS
> > 1.2.4 05/28/2021
> > [  197.190987] RIP: 0010:rxe_mr_copy.part.8+0x2f/0x180 [rdma_rxe]
> > [  197.191047] Code: 41 57 41 56 49 89 d6 41 55 41 54 49 89 f4 55 89 cd
> > 53 48 83 ec 20 44 89 04 24 65 48 8b 04 25 28 00 00 00 48 89 44 24 18 31
> > c0 <83> bf 1c 01 00 00 04 0f 84 00 01 00 00 48 83 bf 40 01 00 00 00 48
> >
> > "
> >
> > It seems that the crash is related with "Kernel NULL pointer deference".
>
> To this crash, I made the following change
>
>
> diff --git a/drivers/infiniband/sw/rxe/rxe_mr.c
> b/drivers/infiniband/sw/rxe/rxe_mr.c
> index 60a31b718774..d075fe683ca3 100644
> --- a/drivers/infiniband/sw/rxe/rxe_mr.c
> +++ b/drivers/infiniband/sw/rxe/rxe_mr.c
> @@ -360,6 +360,10 @@ int rxe_mr_copy(struct rxe_mr *mr, u64 iova, void
> *addr, int length,
>          if (length == 0)
>                  return 0;
>
> +       if (mr == NULL) {
> +               return 0;
> +       }
>          if (mr->type == IB_MR_TYPE_DMA) {
>                  u8 *src, *dest;
>
> With this changes, I run the rping tests for about 10 hours. The crash
> does not occur again. Without this change, the crash normally occurs
> about 10 minutes rping running.
>
> So it seems related with mr allocation.

Hi Yanjun

Confirmed the issue was fixed with the change, thanks.

>
> Please make tests with this change. And let me know the test result.
>
> Thanks a lot.
> Zhu Yanjun
>
> >
> > It seems a new bug.
> >
> > I am working on it.
> >
> > Zhu Yanjun
> >
> >>
> >> Please make tests and let me know the test result. Thanks a lot.
> >>
> >> diff --git a/drivers/infiniband/sw/rxe/rxe_pool.c
> >> b/drivers/infiniband/sw/rxe/rxe_pool.c
> >> index 87066d04ed18..8af428a15672 100644
> >> --- a/drivers/infiniband/sw/rxe/rxe_pool.c
> >> +++ b/drivers/infiniband/sw/rxe/rxe_pool.c
> >> @@ -121,6 +121,7 @@ void *rxe_alloc(struct rxe_pool *pool)
> >>         struct rxe_pool_elem *elem;
> >>         void *obj;
> >>         int err;
> >> +       unsigned long flags;
> >>
> >>         if (WARN_ON(!(pool->flags & RXE_POOL_ALLOC)))
> >>                 return NULL;
> >> @@ -138,8 +139,10 @@ void *rxe_alloc(struct rxe_pool *pool)
> >>         elem->obj = obj;
> >>         kref_init(&elem->ref_cnt);
> >>
> >> -       err = xa_alloc_cyclic(&pool->xa, &elem->index, elem, pool->limit,
> >> -                             &pool->next, GFP_KERNEL);
> >> +       xa_lock_irqsave(&pool->xa, flags);
> >> +       err = __xa_alloc_cyclic(&pool->xa, &elem->index, elem,
> >> pool->limit,
> >> +                               &pool->next, GFP_KERNEL);
> >> +       xa_unlock_irqrestore(&pool->xa, flags);
> >>         if (err)
> >>                 goto err_free;
> >>
> >> @@ -155,6 +158,7 @@ void *rxe_alloc(struct rxe_pool *pool)
> >>  int __rxe_add_to_pool(struct rxe_pool *pool, struct rxe_pool_elem *elem)
> >>  {
> >>         int err;
> >> +       unsigned long flags;
> >>
> >>         if (WARN_ON(pool->flags & RXE_POOL_ALLOC))
> >>                 return -EINVAL;
> >> @@ -166,8 +170,10 @@ int __rxe_add_to_pool(struct rxe_pool *pool,
> >> struct rxe_pool_elem *elem)
> >>         elem->obj = (u8 *)elem - pool->elem_offset;
> >>         kref_init(&elem->ref_cnt);
> >>
> >> -       err = xa_alloc_cyclic(&pool->xa, &elem->index, elem, pool->limit,
> >> -                             &pool->next, GFP_KERNEL);
> >> +       xa_lock_irqsave(&pool->xa, flags);
> >> +       err = __xa_alloc_cyclic(&pool->xa, &elem->index, elem,
> >> pool->limit,
> >> +                               &pool->next, GFP_KERNEL);
> >> +       xa_unlock_irqrestore(&pool->xa, flags);
> >>         if (err)
> >>                 goto err_cnt;
> >>
> >> @@ -200,8 +206,11 @@ static void rxe_elem_release(struct kref *kref)
> >>  {
> >>         struct rxe_pool_elem *elem = container_of(kref, typeof(*elem),
> >> ref_cnt);
> >>         struct rxe_pool *pool = elem->pool;
> >> +       unsigned long flags;
> >>
> >> -       xa_erase(&pool->xa, elem->index);
> >> +       xa_lock_irqsave(&pool->xa, flags);
> >> +       __xa_erase(&pool->xa, elem->index);
> >> +       xa_unlock_irqrestore(&pool->xa, flags);
> >>
> >>         if (pool->cleanup)
> >>                 pool->cleanup(elem);
> >>
> >> Zhu Yanjun
> >>
> >>>
> >>> [  154.195111] run blktests srp/001 at 2022-04-09 01:24:07
> >>> [  154.884071] null_blk: module loaded
> >>> [  155.147385] device-mapper: multipath service-time: version 0.3.0
> >>> loaded
> >>> [  155.150041] device-mapper: table: 253:3: multipath: error getting
> >>> device (-EBUSY)
> >>> [  155.157596] device-mapper: ioctl: error adding target to table
> >>> [  155.249783] rdma_rxe: loaded
> >>> [  155.317915] infiniband eno1_rxe: set active
> >>> [  155.317934] infiniband eno1_rxe: added eno1
> >>> [  155.359282] eno2 speed is unknown, defaulting to 1000
> >>> [  155.364471] eno2 speed is unknown, defaulting to 1000
> >>> [  155.369831] eno2 speed is unknown, defaulting to 1000
> >>> [  155.408213] infiniband eno2_rxe: set down
> >>> [  155.408220] infiniband eno2_rxe: added eno2
> >>> [  155.408707] eno2 speed is unknown, defaulting to 1000
> >>> [  155.434214] eno2 speed is unknown, defaulting to 1000
> >>> [  155.450731] eno3 speed is unknown, defaulting to 1000
> >>> [  155.455862] eno3 speed is unknown, defaulting to 1000
> >>> [  155.461208] eno3 speed is unknown, defaulting to 1000
> >>> [  155.499441] infiniband eno3_rxe: set down
> >>> [  155.499448] infiniband eno3_rxe: added eno3
> >>> [  155.499689] eno3 speed is unknown, defaulting to 1000
> >>> [  155.525458] eno2 speed is unknown, defaulting to 1000
> >>> [  155.530772] eno3 speed is unknown, defaulting to 1000
> >>> [  155.547309] eno4 speed is unknown, defaulting to 1000
> >>> [  155.552440] eno4 speed is unknown, defaulting to 1000
> >>> [  155.557788] eno4 speed is unknown, defaulting to 1000
> >>> [  155.596054] infiniband eno4_rxe: set down
> >>> [  155.596061] infiniband eno4_rxe: added eno4
> >>> [  155.596613] eno4 speed is unknown, defaulting to 1000
> >>> [  155.712777] scsi_debug:sdebug_add_store: dif_storep 524288 bytes @
> >>> ffffc9000112c000
> >>> [  155.715031] scsi_debug:sdebug_driver_probe: scsi_debug: trim
> >>> poll_queues to 0. poll_q/nr_hw = (0/1)
> >>> [  155.724090] scsi_debug:sdebug_driver_probe: host protection DIF3 DIX3
> >>> [  155.724098] scsi host15: scsi_debug: version 0191 [20210520]
> >>>                   dev_size_mb=32, opts=0x0, submit_queues=1,
> >>> statistics=0
> >>> [  155.727128] scsi 15:0:0:0: Direct-Access     Linux scsi_debug
> >>>     0191 PQ: 0 ANSI: 7
> >>> [  155.729894] sd 15:0:0:0: Attached scsi generic sg1 type 0
> >>> [  155.730139] sd 15:0:0:0: Power-on or device reset occurred
> >>> [  155.735821] sd 15:0:0:0: [sdb] Enabling DIF Type 3 protection
> >>> [  155.736235] sd 15:0:0:0: [sdb] 65536 512-byte logical blocks: (33.6
> >>> MB/32.0 MiB)
> >>> [  155.736294] sd 15:0:0:0: [sdb] Write Protect is off
> >>> [  155.736310] sd 15:0:0:0: [sdb] Mode Sense: 73 00 10 08
> >>> [  155.736405] sd 15:0:0:0: [sdb] Write cache: enabled, read cache:
> >>> enabled, supports DPO and FUA
> >>> [  155.736610] sd 15:0:0:0: [sdb] Optimal transfer size 524288 bytes
> >>> [  155.749700] sd 15:0:0:0: [sdb] Enabling DIX T10-DIF-TYPE3-CRC
> >>> protection
> >>> [  155.749715] sd 15:0:0:0: [sdb] DIF application tag size 6
> >>> [  155.750455] sd 15:0:0:0: [sdb] Attached SCSI disk
> >>> [  156.559521] eno2 speed is unknown, defaulting to 1000
> >>> [  156.664761] eno3 speed is unknown, defaulting to 1000
> >>> [  156.770702] eno4 speed is unknown, defaulting to 1000
> >>> [  156.927509] Rounding down aligned max_sectors from 4294967295 to
> >>> 4294967288
> >>> [  156.996061] ib_srpt:srpt_add_one: ib_srpt device = 00000000b38bff2d
> >>> [  156.996162] ib_srpt:srpt_use_srq: ib_srpt srpt_use_srq(eno1_rxe):
> >>> use_srq = 0; ret = 0
> >>> [  156.996168] ib_srpt:srpt_add_one: ib_srpt Target login info:
> >>> id_ext=f2d4e2fffee6e1e0,ioc_guid=f2d4e2fffee6e1e0,pkey=ffff,service_id=f2d4e2fffee6e1e0
> >>>
> >>> [  156.996450] ib_srpt:srpt_add_one: ib_srpt added eno1_rxe.
> >>> [  156.996460] ib_srpt:srpt_add_one: ib_srpt device = 000000000c435da2
> >>> [  156.996492] ib_srpt:srpt_use_srq: ib_srpt srpt_use_srq(eno2_rxe):
> >>> use_srq = 0; ret = 0
> >>> [  156.996497] ib_srpt:srpt_add_one: ib_srpt Target login info:
> >>> id_ext=f2d4e2fffee6e1e0,ioc_guid=f2d4e2fffee6e1e0,pkey=ffff,service_id=f2d4e2fffee6e1e0
> >>>
> >>> [  156.996508] eno2 speed is unknown, defaulting to 1000
> >>> [  157.001651] ib_srpt:srpt_add_one: ib_srpt added eno2_rxe.
> >>> [  157.001659] ib_srpt:srpt_add_one: ib_srpt device = 00000000a61769b4
> >>> [  157.001699] ib_srpt:srpt_use_srq: ib_srpt srpt_use_srq(eno3_rxe):
> >>> use_srq = 0; ret = 0
> >>> [  157.001703] ib_srpt:srpt_add_one: ib_srpt Target login info:
> >>> id_ext=f2d4e2fffee6e1e0,ioc_guid=f2d4e2fffee6e1e0,pkey=ffff,service_id=f2d4e2fffee6e1e0
> >>>
> >>> [  157.001714] eno3 speed is unknown, defaulting to 1000
> >>> [  157.006815] ib_srpt:srpt_add_one: ib_srpt added eno3_rxe.
> >>> [  157.006823] ib_srpt:srpt_add_one: ib_srpt device = 000000008f72349b
> >>> [  157.006856] ib_srpt:srpt_use_srq: ib_srpt srpt_use_srq(eno4_rxe):
> >>> use_srq = 0; ret = 0
> >>> [  157.006860] ib_srpt:srpt_add_one: ib_srpt Target login info:
> >>> id_ext=f2d4e2fffee6e1e0,ioc_guid=f2d4e2fffee6e1e0,pkey=ffff,service_id=f2d4e2fffee6e1e0
> >>>
> >>> [  157.006871] eno4 speed is unknown, defaulting to 1000
> >>> [  157.011971] ib_srpt:srpt_add_one: ib_srpt added eno4_rxe.
> >>> [  157.476167] Rounding down aligned max_sectors from 255 to 248
> >>> [  157.546137] Rounding down aligned max_sectors from 255 to 248
> >>> [  157.616022] Rounding down aligned max_sectors from 4294967295 to
> >>> 4294967288
> >>> [  160.335819] ib_srp:srp_add_one: ib_srp: srp_add_one:
> >>> 18446744073709551615 / 4096 = 4503599627370495 <> 512
> >>> [  160.335830] ib_srp:srp_add_one: ib_srp: eno1_rxe: mr_page_shift =
> >>> 12, device->max_mr_size = 0xffffffffffffffff,
> >>> device->max_fast_reg_page_list_len = 512, max_pages_per_mr = 512,
> >>> mr_max_size = 0x200000
> >>> [  160.336229] ib_srp:srp_add_one: ib_srp: srp_add_one:
> >>> 18446744073709551615 / 4096 = 4503599627370495 <> 512
> >>> [  160.336235] ib_srp:srp_add_one: ib_srp: eno2_rxe: mr_page_shift =
> >>> 12, device->max_mr_size = 0xffffffffffffffff,
> >>> device->max_fast_reg_page_list_len = 512, max_pages_per_mr = 512,
> >>> mr_max_size = 0x200000
> >>> [  160.336757] ib_srp:srp_add_one: ib_srp: srp_add_one:
> >>> 18446744073709551615 / 4096 = 4503599627370495 <> 512
> >>> [  160.336763] ib_srp:srp_add_one: ib_srp: eno3_rxe: mr_page_shift =
> >>> 12, device->max_mr_size = 0xffffffffffffffff,
> >>> device->max_fast_reg_page_list_len = 512, max_pages_per_mr = 512,
> >>> mr_max_size = 0x200000
> >>> [  160.337006] ib_srp:srp_add_one: ib_srp: srp_add_one:
> >>> 18446744073709551615 / 4096 = 4503599627370495 <> 512
> >>> [  160.337011] ib_srp:srp_add_one: ib_srp: eno4_rxe: mr_page_shift =
> >>> 12, device->max_mr_size = 0xffffffffffffffff,
> >>> device->max_fast_reg_page_list_len = 512, max_pages_per_mr = 512,
> >>> mr_max_size = 0x200000
> >>> [  160.489879] ib_srp:srp_parse_in: ib_srp: 10.16.221.116 ->
> >>> 10.16.221.116:0
> >>> [  160.489910] ib_srp:srp_parse_in: ib_srp: 10.16.221.116:5555 ->
> >>> 10.16.221.116:5555
> >>> [  160.489971] ib_srp:add_target_store: ib_srp: max_sectors = 1024;
> >>> max_pages_per_mr = 512; mr_page_size = 4096; max_sectors_per_mr =
> >>> 4096; mr_per_cmd = 2
> >>> [  160.489978] ib_srp:srp_max_it_iu_len: ib_srp: max_iu_len = 8260
> >>> [  160.499158] ------------[ cut here ]------------
> >>> [  160.503831] WARNING: CPU: 25 PID: 1907 at kernel/softirq.c:363
> >>> __local_bh_enable_ip+0xc7/0x110
> >>> [  160.512450] Modules linked in: ib_srp scsi_transport_srp
> >>> target_core_user uio target_core_pscsi target_core_file ib_srpt
> >>> target_core_iblock target_core_mod rdma_cm iw_cm ib_cm ib_umad
> >>> scsi_debug rdma_rxe ib_uverbs dm_service_time ip6_udp_tunnel
> >>> udp_tunnel null_blk dm_multipath ib_core rpcsec_gss_krb5 auth_rpcgss
> >>> nfsv4 dns_resolver nfs lockd grace fscache netfs rfkill sunrpc vfat
> >>> fat kmem intel_rapl_msr intel_rapl_common isst_if_common iTCO_wdt
> >>> iTCO_vendor_support mgag200 skx_edac i2c_algo_bit x86_pkg_temp_thermal
> >>> drm_shmem_helper intel_powerclamp drm_kms_helper coretemp syscopyarea
> >>> sysfillrect sysimgblt fb_sys_fops kvm_intel kvm irqbypass
> >>> crct10dif_pclmul crc32_pclmul ghash_clmulni_intel rapl intel_cstate
> >>> drm device_dax intel_uncore mei_me wmi_bmof pcspkr i2c_i801 mei
> >>> lpc_ich i2c_smbus intel_pch_thermal nd_pmem ipmi_ssif nd_btt dax_pmem
> >>> acpi_power_meter xfs libcrc32c sd_mod t10_pi crc64_rocksoft crc64 sg
> >>> ahci libahci nfit crc32c_intel libata megaraid_sas tg3 wmi libnvdimm
> >>> dm_mirror
> >>> [  160.512669]  dm_region_hash dm_log dm_mod ipmi_si ipmi_devintf
> >>> ipmi_msghandler
> >>> [  160.606678] CPU: 25 PID: 1907 Comm: check Tainted: G S I
> >>>    5.18.0-rc1.yanjun.v1+ #2
> >>> [  160.615293] Hardware name: Dell Inc. PowerEdge R640/06NR82, BIOS
> >>> 2.11.2 004/21/2021
> >>> [  160.622944] RIP: 0010:__local_bh_enable_ip+0xc7/0x110
> >>> [  160.627996] Code: 00 e8 5d 83 08 00 e8 78 7a 3b 00 fb 65 8b 05 d0
> >>> 93 e1 61 85 c0 75 05 0f 1f 44 00 00 5b 5d c3 65 8b 05 29 a0 e1 61 85
> >>> c0 75 9d <0f> 0b eb 99 e8 00 79 3b 00 eb 9a 48 89 ef e8 86 0a 16 00 eb
> >>> a3 48
> >>> [  160.646744] RSP: 0018:ffff88810a9ef3f0 EFLAGS: 00010046
> >>> [  160.651978] RAX: 0000000000000000 RBX: 0000000000000200 RCX:
> >>> 0000000000000000
> >>> [  160.659110] RDX: 0000000000000000 RSI: 0000000000000200 RDI:
> >>> ffffffffa228d58c
> >>> [  160.666243] RBP: ffffffffc241cd72 R08: ffffed103a3de28b R09:
> >>> ffffed103a3de28b
> >>> [  160.673375] R10: ffff8881d1ef1453 R11: ffffed103a3de28a R12:
> >>> ffff8881d1ef1450
> >>> [  160.680508] R13: ffff8881d1ef143c R14: ffff8882a4823850 R15:
> >>> ffff8881d1ef14b0
> >>> [  160.687638] FS:  00007fbae6b89740(0000) GS:ffff888e2fc00000(0000)
> >>> knlGS:0000000000000000
> >>> [  160.695725] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> >>> [  160.701470] CR2: 00005558050bac08 CR3: 00000001e1a5a002 CR4:
> >>> 00000000007706e0
> >>> [  160.708602] DR0: 0000000000000000 DR1: 0000000000000000 DR2:
> >>> 0000000000000000
> >>> [  160.715734] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7:
> >>> 0000000000000400
> >>> [  160.722867] PKRU: 55555554
> >>> [  160.725581] Call Trace:
> >>> [  160.728033]  <TASK>
> >>> [  160.730141]  __rxe_add_to_pool+0x1ce/0x260 [rdma_rxe]
> >>> [  160.735209]  rxe_create_ah+0xe2/0x330 [rdma_rxe]
> >>> [  160.739849]  _rdma_create_ah+0x391/0x490 [ib_core]
> >>> [  160.744678]  ? __ib_create_cq+0x260/0x260 [ib_core]
> >>> [  160.749577]  ? rcu_read_lock_bh_held+0xc0/0xc0
> >>> [  160.754040]  rdma_create_ah+0x185/0x250 [ib_core]
> >>> [  160.758769]  ? _rdma_create_ah+0x490/0x490 [ib_core]
> >>> [  160.763772]  cm_alloc_msg+0x15f/0x510 [ib_cm]
> >>> [  160.768147]  cm_alloc_priv_msg+0x4c/0xb0 [ib_cm]
> >>> [  160.772781]  ib_send_cm_req+0x816/0x1000 [ib_cm]
> >>> [  160.777413]  ? ib_send_cm_rej+0x80/0x80 [ib_cm]
> >>> [  160.781974]  ? lock_is_held_type+0xd9/0x130
> >>> [  160.786179]  ? rcu_read_lock_bh_held+0xc0/0xc0
> >>> [  160.790633]  ? _raw_spin_unlock+0x29/0x40
> >>> [  160.794661]  rdma_connect_locked+0x795/0x1940 [rdma_cm]
> >>> [  160.799899]  ? rdma_create_qp+0x6d0/0x6d0 [rdma_cm]
> >>> [  160.804795]  ? lock_release+0x42f/0xc90
> >>> [  160.808637]  ? rdma_connect+0x20/0x40 [rdma_cm]
> >>> [  160.813188]  ? mutex_lock_io_nested+0x1460/0x1460
> >>> [  160.817898]  ? rcu_read_lock_sched_held+0xaf/0xe0
> >>> [  160.822610]  ? __kasan_slab_alloc+0x2f/0x90
> >>> [  160.826830]  rdma_connect+0x2b/0x40 [rdma_cm]
> >>> [  160.831201]  srp_send_req+0x9ed/0x1660 [ib_srp]
> >>> [  160.835746]  ? module_assert_mutex_or_preempt+0x41/0x70
> >>> [  160.840974]  ? __module_address.part.54+0x25/0x380
> >>> [  160.845769]  ? srp_qp_event+0x60/0x60 [ib_srp]
> >>> [  160.850225]  ? is_module_address+0x41/0x60
> >>> [  160.854331]  ? static_obj+0x97/0xc0
> >>> [  160.857832]  ? lockdep_init_map_type+0x2f8/0x7f0
> >>> [  160.862471]  srp_connect_ch+0xe3/0x1f0 [ib_srp]
> >>> [  160.867018]  add_target_store+0x1196/0x28e0 [ib_srp]
> >>> [  160.871993]  ? __lock_acquire+0xc24/0x34a0
> >>> [  160.876124]  ? srp_create_ch_ib+0x13e0/0x13e0 [ib_srp]
> >>> [  160.881267]  ? lock_acquire+0x1e2/0x5a0
> >>> [  160.885116]  ? rcu_read_unlock+0x50/0x50
> >>> [  160.889052]  ? lock_is_held_type+0xd9/0x130
> >>> [  160.893258]  ? kernfs_fop_write_iter+0x2d0/0x490
> >>> [  160.897885]  kernfs_fop_write_iter+0x2d0/0x490
> >>> [  160.902340]  new_sync_write+0x33a/0x550
> >>> [  160.906192]  ? new_sync_read+0x540/0x540
> >>> [  160.910140]  ? lock_is_held_type+0xd9/0x130
> >>> [  160.914338]  ? rcu_read_lock_held+0xc0/0xc0
> >>> [  160.918541]  vfs_write+0x617/0x910
> >>> [  160.921960]  ksys_write+0xf1/0x1c0
> >>> [  160.925369]  ? __ia32_sys_read+0xb0/0xb0
> >>> [  160.929299]  ? syscall_trace_enter.isra.15+0x175/0x250
> >>> [  160.934455]  do_syscall_64+0x37/0x80
> >>> [  160.938040]  entry_SYSCALL_64_after_hwframe+0x44/0xae
> >>> [  160.943099] RIP: 0033:0x7fbae5d205c8
> >>> [  160.946685] Code: 89 02 48 c7 c0 ff ff ff ff eb b3 0f 1f 80 00 00
> >>> 00 00 f3 0f 1e fa 48 8d 05 d5 3f 2a 00 8b 00 85 c0 75 17 b8 01 00 00
> >>> 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 41 54 49 89
> >>> d4 55
> >>> [  160.965430] RSP: 002b:00007ffd98335b28 EFLAGS: 00000246 ORIG_RAX:
> >>> 0000000000000001
> >>> [  160.972996] RAX: ffffffffffffffda RBX: 0000000000000081 RCX:
> >>> 00007fbae5d205c8
> >>> [  160.980130] RDX: 0000000000000081 RSI: 000055580502ca20 RDI:
> >>> 0000000000000001
> >>> [  160.987262] RBP: 000055580502ca20 R08: 000000000000000a R09:
> >>> 00007fbae5d80820
> >>> [  160.994395] R10: 000000000000000a R11: 0000000000000246 R12:
> >>> 00007fbae5fc06e0
> >>> [  161.001525] R13: 0000000000000081 R14: 00007fbae5fbb880 R15:
> >>> 0000000000000081
> >>> [  161.008685]  </TASK>
> >>> [  161.010876] irq event stamp: 298919
> >>> [  161.014368] hardirqs last  enabled at (298917):
> >>> [<ffffffffa0370be0>] _raw_read_unlock_irqrestore+0x30/0x50
> >>> [  161.024014] hardirqs last disabled at (298918):
> >>> [<ffffffffa0370219>] _raw_spin_lock_irqsave+0x69/0x90
> >>> [  161.033228] softirqs last  enabled at (297844):
> >>> [<ffffffffa060064a>] __do_softirq+0x64a/0xa4c
> >>> [  161.041748] softirqs last disabled at (298919):
> >>> [<ffffffffc241cce8>] __rxe_add_to_pool+0x138/0x260 [rdma_rxe]
> >>> [  161.051660] ---[ end trace 0000000000000000 ]---
> >>>
> >>> [  161.058297] ================================
> >>> [  161.062572] WARNING: inconsistent lock state
> >>> [  161.066844] 5.18.0-rc1.yanjun.v1+ #2 Tainted: G S      W I
> >>> [  161.072850] --------------------------------
> >>> [  161.077122] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
> >>> [  161.083129] ksoftirqd/25/163 [HC0[0]:SC1[1]:HE0:SE0] takes:
> >>> [  161.088699] ffff8881d1ef1468 (&xa->xa_lock#15){+.?.}-{2:2}, at:
> >>> rxe_pool_get_index+0x72/0x1d0 [rdma_rxe]
> >>> [  161.098182] {SOFTIRQ-ON-W} state was registered at:
> >>> [  161.103061]   lock_acquire+0x1d2/0x5a0
> >>> [  161.106811]   _raw_spin_lock+0x33/0x80
> >>> [  161.110565]   rxe_alloc+0x1be/0x290 [rdma_rxe]
> >>> [  161.115011]   rxe_get_dma_mr+0x3a/0x80 [rdma_rxe]
> >>> [  161.119716]   __ib_alloc_pd+0x1a0/0x550 [ib_core]
> >>> [  161.124448]   ib_mad_init_device+0x2d9/0xd20 [ib_core]
> >>> [  161.129613]   add_client_context+0x2fa/0x450 [ib_core]
> >>> [  161.134769]   enable_device_and_get+0x1b7/0x350 [ib_core]
> >>> [  161.140186]   ib_register_device+0x757/0xaf0 [ib_core]
> >>> [  161.145343]   rxe_register_device+0x2eb/0x390 [rdma_rxe]
> >>> [  161.150656]   rxe_net_add+0x83/0xc0 [rdma_rxe]
> >>> [  161.155102]   rxe_newlink+0x76/0x90 [rdma_rxe]
> >>> [  161.159547]   nldev_newlink+0x245/0x3e0 [ib_core]
> >>> [  161.164279]   rdma_nl_rcv_msg+0x2d4/0x790 [ib_core]
> >>> [  161.169176]   rdma_nl_rcv+0x1ca/0x3f0 [ib_core]
> >>> [  161.173726]   netlink_unicast+0x43b/0x640
> >>> [  161.177737]   netlink_sendmsg+0x7eb/0xc40
> >>> [  161.181749]   sock_sendmsg+0xe0/0x110
> >>> [  161.185416]   __sys_sendto+0x1d7/0x2b0
> >>> [  161.189170]   __x64_sys_sendto+0xdd/0x1b0
> >>> [  161.193182]   do_syscall_64+0x37/0x80
> >>> [  161.196846]   entry_SYSCALL_64_after_hwframe+0x44/0xae
> >>> [  161.201986] irq event stamp: 21493
> >>> [  161.205391] hardirqs last  enabled at (21492): [<ffffffff9e215de8>]
> >>> __local_bh_enable_ip+0xa8/0x110
> >>> [  161.214431] hardirqs last disabled at (21493): [<ffffffffa0370219>]
> >>> _raw_spin_lock_irqsave+0x69/0x90
> >>> [  161.223558] softirqs last  enabled at (21482): [<ffffffffa060064a>]
> >>> __do_softirq+0x64a/0xa4c
> >>> [  161.231991] softirqs last disabled at (21487): [<ffffffff9e2159f2>]
> >>> run_ksoftirqd+0x32/0x60
> >>> [  161.240334]
> >>>                 other info that might help us debug this:
> >>> [  161.246860]  Possible unsafe locking scenario:
> >>>
> >>> [  161.252780]        CPU0
> >>> [  161.255232]        ----
> >>> [  161.257685]   lock(&xa->xa_lock#15);
> >>> [  161.261265]   <Interrupt>
> >>> [  161.263889]     lock(&xa->xa_lock#15);
> >>> [  161.267644]
> >>>                  *** DEADLOCK ***
> >>>
> >>> [  161.273561] no locks held by ksoftirqd/25/163.
> >>> [  161.278009]
> >>>                 stack backtrace:
> >>> [  161.282368] CPU: 25 PID: 163 Comm: ksoftirqd/25 Tainted: G S      W
> >>> I       5.18.0-rc1.yanjun.v1+ #2
> >>> [  161.291493] Hardware name: Dell Inc. PowerEdge R640/06NR82, BIOS
> >>> 2.11.2 004/21/2021
> >>> [  161.299146] Call Trace:
> >>> [  161.301597]  <TASK>
> >>> [  161.303705]  dump_stack_lvl+0x44/0x57
> >>> [  161.307370]  mark_lock.part.52.cold.79+0x3c/0x46
> >>> [  161.311992]  ? lock_chain_count+0x20/0x20
> >>> [  161.316003]  ? rxe_do_task+0x26/0x230 [rdma_rxe]
> >>> [  161.320628]  ? orc_find.part.4+0x310/0x310
> >>> [  161.324731]  ? __module_text_address.part.55+0x13/0x140
> >>> [  161.329954]  ? rxe_do_task+0x26/0x230 [rdma_rxe]
> >>> [  161.334573]  ? rxe_do_task+0x26/0x230 [rdma_rxe]
> >>> [  161.339192]  ? is_module_text_address+0x41/0x60
> >>> [  161.343726]  ? rxe_do_task+0x26/0x230 [rdma_rxe]
> >>> [  161.348345]  ? kernel_text_address+0x13/0xd0
> >>> [  161.352616]  ? create_prof_cpu_mask+0x20/0x20
> >>> [  161.356979]  ? sched_clock_cpu+0x15/0x200
> >>> [  161.360991]  __lock_acquire+0x1565/0x34a0
> >>> [  161.365003]  ? rcu_read_lock_sched_held+0xaf/0xe0
> >>> [  161.369709]  ? rcu_read_lock_bh_held+0xc0/0xc0
> >>> [  161.374153]  lock_acquire+0x1d2/0x5a0
> >>> [  161.377820]  ? rxe_pool_get_index+0x72/0x1d0 [rdma_rxe]
> >>> [  161.383055]  ? rcu_read_unlock+0x50/0x50
> >>> [  161.386981]  ? mark_lock.part.52+0xa3d/0x1c00
> >>> [  161.391338]  ? _raw_spin_lock_irqsave+0x69/0x90
> >>> [  161.395873]  _raw_spin_lock_irqsave+0x42/0x90
> >>> [  161.400230]  ? rxe_pool_get_index+0x72/0x1d0 [rdma_rxe]
> >>> [  161.405456]  rxe_pool_get_index+0x72/0x1d0 [rdma_rxe]
> >>> [  161.410509]  ? __rxe_add_to_pool+0x260/0x260 [rdma_rxe]
> >>> [  161.415735]  ? __rxe_get+0xc1/0x140 [rdma_rxe]
> >>> [  161.420183]  rxe_get_av+0x168/0x2a0 [rdma_rxe]
> >>> [  161.424635]  ? lockdep_lock+0xcb/0x1c0
> >>> [  161.428387]  rxe_requester+0x75b/0x4a90 [rdma_rxe]
> >>> [  161.433182]  ? rxe_do_task+0xe2/0x230 [rdma_rxe]
> >>> [  161.437809]  ? sched_clock_cpu+0x15/0x200
> >>> [  161.441819]  ? find_held_lock+0x3a/0x1c0
> >>> [  161.445746]  ? rnr_nak_timer+0x80/0x80 [rdma_rxe]
> >>> [  161.450453]  ? lock_release+0x42f/0xc90
> >>> [  161.454293]  ? lock_downgrade+0x6b0/0x6b0
> >>> [  161.458304]  ? lock_acquired+0x262/0xb10
> >>> [  161.462233]  ? __local_bh_enable_ip+0xa8/0x110
> >>> [  161.466677]  ? rnr_nak_timer+0x80/0x80 [rdma_rxe]
> >>> [  161.471389]  rxe_do_task+0x134/0x230 [rdma_rxe]
> >>> [  161.475925]  tasklet_action_common.isra.12+0x1f7/0x2d0
> >>> [  161.481064]  __do_softirq+0x1ea/0xa4c
> >>> [  161.484730]  ? tasklet_kill+0x1c0/0x1c0
> >>> [  161.488567]  run_ksoftirqd+0x32/0x60
> >>> [  161.492146]  smpboot_thread_fn+0x503/0x860
> >>> [  161.496245]  ? sort_range+0x20/0x20
> >>> [  161.499736]  kthread+0x29b/0x340
> >>> [  161.502970]  ? kthread_complete_and_exit+0x20/0x20
> >>> [  161.507763]  ret_from_fork+0x1f/0x30
> >>> [  161.511346]  </TASK>
> >>>
> >>>
> >>> On Sat, Apr 9, 2022 at 11:27 AM Yanjun Zhu <yanjun.zhu@linux.dev> wrote:
> >>>>
> >>>> 在 2022/4/8 17:10, Yi Zhang 写道:
> >>>>> On Fri, Apr 8, 2022 at 1:09 PM Yanjun Zhu <yanjun.zhu@linux.dev>
> >>>>> wrote:
> >>>>>>
> >>>>>>
> >>>>>> Hi, all
> >>>>>>
> >>>>>> In 5.18-rc1, this commit "[PATCH for-next] RDMA/rxe: Revert
> >>>>>> changes from
> >>>>>> irqsave to bh locks" does not exist.
> >>>>>>
> >>>>>> The link is
> >>>>>> https://patchwork.kernel.org/project/linux-rdma/patch/20220215194448.44369-1-rpearsonhpe@gmail.com/
> >>>>>>
> >>>>>>
> >>>>> Hi Yanjun
> >>>>> I tried rdma/for-next which already included this commit, and this
> >>>>> issue still can be reproduced.
> >>>>
> >>>> Hi, Yi
> >>>>
> >>>> I delved into the source code. And I found the followings:
> >>>>
> >>>> xa_lock first is acquired in this:
> >>>>
> >>>> [  296.655588] {SOFTIRQ-ON-W} state was registered at:
> >>>>
> >>>> [  296.660467]   lock_acquire+0x1d2/0x5a0
> >>>> [  296.664221]   _raw_spin_lock+0x33/0x80
> >>>> [  296.667972]   __rxe_add_to_pool+0x183/0x230 [rdma_rxe]
> >>>> [  296.673112]   __ib_alloc_pd+0xf9/0x550 [ib_core]
> >>>> [  296.677758]   ib_mad_init_device+0x2d9/0xd20 [ib_core]
> >>>> [  296.682924]   add_client_context+0x2fa/0x450 [ib_core]
> >>>> [  296.688088]   enable_device_and_get+0x1b7/0x350 [ib_core]
> >>>> [  296.693503]   ib_register_device+0x757/0xaf0 [ib_core]
> >>>> [  296.698660]   rxe_register_device+0x2eb/0x390 [rdma_rxe]
> >>>> [  296.703973]   rxe_net_add+0x83/0xc0 [rdma_rxe]
> >>>> [  296.708421]   rxe_newlink+0x76/0x90 [rdma_rxe]
> >>>> [  296.712865]   nldev_newlink+0x245/0x3e0 [ib_core]
> >>>> [  296.717597]   rdma_nl_rcv_msg+0x2d4/0x790 [ib_core]
> >>>> [  296.722492]   rdma_nl_rcv+0x1ca/0x3f0 [ib_core]
> >>>> [  296.727042]   netlink_unicast+0x43b/0x640
> >>>> [  296.731056]   netlink_sendmsg+0x7eb/0xc40
> >>>> [  296.735069]   sock_sendmsg+0xe0/0x110
> >>>> [  296.738734]   __sys_sendto+0x1d7/0x2b0
> >>>> [  296.742486]   __x64_sys_sendto+0xdd/0x1b0
> >>>> [  296.746500]   do_syscall_64+0x37/0x80
> >>>> [  296.750166]   entry_SYSCALL_64_after_hwframe+0x44/0xae
> >>>> [  296.755304] irq event stamp: 25305
> >>>> [  296.758710] hardirqs last  enabled at (25304): [<ffffffff89815de8>]
> >>>> __local_bh_enable_ip+0xa8/0x110
> >>>> [  296.767750] hardirqs last disabled at (25305): [<ffffffff8b970219>]
> >>>> _raw_spin_lock_irqsave+0x69/0x90
> >>>> [  296.776875] softirqs last  enabled at (25294): [<ffffffff8bc0064a>]
> >>>> __do_softirq+0x64a/0xa4c
> >>>> [  296.785307] softirqs last disabled at (25299): [<ffffffff898159f2>]
> >>>> run_ksoftirqd+0x32/0x60
> >>>> [  296.793654]
> >>>>
> >>>> xa_lock then is acquired in this:
> >>>> {IN-SOFTIRQ-W}:
> >>>>
> >>>> stack backtrace:
> >>>> [  296.835686] CPU: 30 PID: 188 Comm: ksoftirqd/30 Tainted: G S
> >>>> I       5.18.0-rc1 #1
> >>>> [  296.843859] Hardware name: Dell Inc. PowerEdge R640/06NR82, BIOS
> >>>> 2.11.2 004/21/2021
> >>>> [  296.851509] Call Trace:
> >>>> [  296.853964]  <TASK>
> >>>> [  296.856070]  dump_stack_lvl+0x44/0x57
> >>>> [  296.859734]  mark_lock.part.52.cold.79+0x3c/0x46
> >>>> [  296.913364]  __lock_acquire+0x1565/0x34a0
> >>>> [  296.926529]  lock_acquire+0x1d2/0x5a0
> >>>> [  296.948247]  _raw_spin_lock_irqsave+0x42/0x90
> >>>> [  296.957830]  rxe_pool_get_index+0x72/0x1d0 [rdma_rxe]
> >>>> [  296.972554]  rxe_get_av+0x168/0x2a0 [rdma_rxe]
> >>>> [  296.980761]  rxe_requester+0x75b/0x4a90 [rdma_rxe]
> >>>> [  297.023764]  rxe_do_task+0x134/0x230 [rdma_rxe]
> >>>> [  297.028297]  tasklet_action_common.isra.12+0x1f7/0x2d0
> >>>> [  297.033435]  __do_softirq+0x1ea/0xa4c
> >>>> [  297.040941]  run_ksoftirqd+0x32/0x60
> >>>> [  297.044518]  smpboot_thread_fn+0x503/0x860
> >>>> [  297.052110]  kthread+0x29b/0x340
> >>>> [  297.060137]  ret_from_fork+0x1f/0x30
> >>>> [  297.063720]  </TASK>
> >>>>
> >>>>   From the above, in the function __rxe_add_to_pool, xa_lock is
> >>>> acquired.
> >>>> Then the function __rxe_add_to_pool is interrupted by softirq. The
> >>>> function rxe_pool_get_index will also acquire xa_lock.
> >>>>
> >>>> Finally, the dead lock appears.
> >>>>
> >>>> [  296.806097]        CPU0
> >>>> [  296.808550]        ----
> >>>> [  296.811003]   lock(&xa->xa_lock#15);  <----- __rxe_add_to_pool
> >>>> [  296.814583]   <Interrupt>
> >>>> [  296.817209]     lock(&xa->xa_lock#15); <---- rxe_pool_get_index
> >>>> [  296.820961]
> >>>>                   *** DEADLOCK ***
> >>>>
> >>>> I disable softirq in the function __rxe_add_to_pool. Please make tests
> >>>> with the following.
> >>>> Please let me know the test results. Thanks a lot.
> >>>>
> >>>> diff --git a/drivers/infiniband/sw/rxe/rxe_pool.c
> >>>> b/drivers/infiniband/sw/rxe/rxe_pool.c
> >>>> index 87066d04ed18..9a8f83787d61 100644
> >>>> --- a/drivers/infiniband/sw/rxe/rxe_pool.c
> >>>> +++ b/drivers/infiniband/sw/rxe/rxe_pool.c
> >>>> @@ -166,10 +166,14 @@ int __rxe_add_to_pool(struct rxe_pool *pool,
> >>>> struct rxe_pool_elem *elem)
> >>>>           elem->obj = (u8 *)elem - pool->elem_offset;
> >>>>           kref_init(&elem->ref_cnt);
> >>>>
> >>>> +       local_bh_disable();
> >>>>           err = xa_alloc_cyclic(&pool->xa, &elem->index, elem,
> >>>> pool->limit,
> >>>>                                 &pool->next, GFP_KERNEL);
> >>>> -       if (err)
> >>>> +       if (err) {
> >>>> +               local_bh_enable();
> >>>>                   goto err_cnt;
> >>>> +       }
> >>>> +       local_bh_enable();
> >>>>
> >>>>           return 0;
> >>>>
> >>>> Zhu Yanjun
> >>>>
> >>>>>
> >>>>>> Please apply this commit and make tests again.
> >>>>>> Please let me know the test result.
> >>>>>>
> >>>>>> Best Regards,
> >>>>>>
> >>>>>> Zhu Yanjun
> >>>>>>
> >>>>>> 在 2022/4/6 11:08, Yi Zhang 写道:
> >>>>>>> Hello
> >>>>>>>
> >>>>>>> Below WARNING triggered during blktests srp/ tests with 5.18.0-rc1
> >>>>>>> debug kernel, pls help check it, let me know if you need any info
> >>>>>>> for
> >>>>>>> it, thanks.
> >>>>>>>
> >>>>>>> [  290.308984] run blktests srp/001 at 2022-04-05 23:01:02
> >>>>>>> [  290.999913] null_blk: module loaded
> >>>>>>> [  291.260285] device-mapper: multipath service-time: version
> >>>>>>> 0.3.0 loaded
> >>>>>>> [  291.262990] device-mapper: table: 253:3: multipath: error getting
> >>>>>>> device (-EBUSY)
> >>>>>>> [  291.270535] device-mapper: ioctl: error adding target to table
> >>>>>>> [  291.362284] rdma_rxe: loaded
> >>>>>>> [  291.428444] infiniband eno1_rxe: set active
> >>>>>>> [  291.428462] infiniband eno1_rxe: added eno1
> >>>>>>> [  291.467142] eno2 speed is unknown, defaulting to 1000
> >>>>>>> [  291.472327] eno2 speed is unknown, defaulting to 1000
> >>>>>>> [  291.477680] eno2 speed is unknown, defaulting to 1000
> >>>>>>> [  291.516123] infiniband eno2_rxe: set down
> >>>>>>> [  291.516130] infiniband eno2_rxe: added eno2
> >>>>>>> [  291.516649] eno2 speed is unknown, defaulting to 1000
> >>>>>>> [  291.542551] eno2 speed is unknown, defaulting to 1000
> >>>>>>> [  291.558995] eno3 speed is unknown, defaulting to 1000
> >>>>>>> [  291.564127] eno3 speed is unknown, defaulting to 1000
> >>>>>>> [  291.569462] eno3 speed is unknown, defaulting to 1000
> >>>>>>> [  291.607876] infiniband eno3_rxe: set down
> >>>>>>> [  291.607883] infiniband eno3_rxe: added eno3
> >>>>>>> [  291.608430] eno3 speed is unknown, defaulting to 1000
> >>>>>>> [  291.632891] eno2 speed is unknown, defaulting to 1000
> >>>>>>> [  291.638180] eno3 speed is unknown, defaulting to 1000
> >>>>>>> [  291.655089] eno4 speed is unknown, defaulting to 1000
> >>>>>>> [  291.660213] eno4 speed is unknown, defaulting to 1000
> >>>>>>> [  291.665569] eno4 speed is unknown, defaulting to 1000
> >>>>>>> [  291.703975] infiniband eno4_rxe: set down
> >>>>>>> [  291.703982] infiniband eno4_rxe: added eno4
> >>>>>>> [  291.704642] eno4 speed is unknown, defaulting to 1000
> >>>>>>> [  291.822650] scsi_debug:sdebug_add_store: dif_storep 524288
> >>>>>>> bytes @
> >>>>>>> ffffc90001801000
> >>>>>>> [  291.825441] scsi_debug:sdebug_driver_probe: scsi_debug: trim
> >>>>>>> poll_queues to 0. poll_q/nr_hw = (0/1)
> >>>>>>> [  291.834505] scsi_debug:sdebug_driver_probe: host protection
> >>>>>>> DIF3 DIX3
> >>>>>>> [  291.834513] scsi host15: scsi_debug: version 0191 [20210520]
> >>>>>>>                     dev_size_mb=32, opts=0x0, submit_queues=1,
> >>>>>>> statistics=0
> >>>>>>> [  291.837267] scsi 15:0:0:0: Direct-Access     Linux scsi_debug
> >>>>>>>       0191 PQ: 0 ANSI: 7
> >>>>>>> [  291.839793] sd 15:0:0:0: Power-on or device reset occurred
> >>>>>>> [  291.840110] sd 15:0:0:0: Attached scsi generic sg1 type 0
> >>>>>>> [  291.845521] sd 15:0:0:0: [sdb] Enabling DIF Type 3 protection
> >>>>>>> [  291.845878] sd 15:0:0:0: [sdb] 65536 512-byte logical blocks:
> >>>>>>> (33.6
> >>>>>>> MB/32.0 MiB)
> >>>>>>> [  291.845939] sd 15:0:0:0: [sdb] Write Protect is off
> >>>>>>> [  291.845954] sd 15:0:0:0: [sdb] Mode Sense: 73 00 10 08
> >>>>>>> [  291.846049] sd 15:0:0:0: [sdb] Write cache: enabled, read cache:
> >>>>>>> enabled, supports DPO and FUA
> >>>>>>> [  291.846254] sd 15:0:0:0: [sdb] Optimal transfer size 524288 bytes
> >>>>>>> [  291.859380] sd 15:0:0:0: [sdb] Enabling DIX T10-DIF-TYPE3-CRC
> >>>>>>> protection
> >>>>>>> [  291.859398] sd 15:0:0:0: [sdb] DIF application tag size 6
> >>>>>>> [  291.860158] sd 15:0:0:0: [sdb] Attached SCSI disk
> >>>>>>> [  292.666414] eno2 speed is unknown, defaulting to 1000
> >>>>>>> [  292.771984] eno3 speed is unknown, defaulting to 1000
> >>>>>>> [  292.876762] eno4 speed is unknown, defaulting to 1000
> >>>>>>> [  293.033291] Rounding down aligned max_sectors from 4294967295
> >>>>>>> to 4294967288
> >>>>>>> [  293.102261] ib_srpt:srpt_add_one: ib_srpt device =
> >>>>>>> 0000000047a39f45
> >>>>>>> [  293.102363] ib_srpt:srpt_use_srq: ib_srpt srpt_use_srq(eno1_rxe):
> >>>>>>> use_srq = 0; ret = 0
> >>>>>>> [  293.102369] ib_srpt:srpt_add_one: ib_srpt Target login info:
> >>>>>>> id_ext=f2d4e2fffee6e1e0,ioc_guid=f2d4e2fffee6e1e0,pkey=ffff,service_id=f2d4e2fffee6e1e0
> >>>>>>>
> >>>>>>> [  293.102680] ib_srpt:srpt_add_one: ib_srpt added eno1_rxe.
> >>>>>>> [  293.102692] ib_srpt:srpt_add_one: ib_srpt device =
> >>>>>>> 00000000b2dfcbe9
> >>>>>>> [  293.102725] ib_srpt:srpt_use_srq: ib_srpt srpt_use_srq(eno2_rxe):
> >>>>>>> use_srq = 0; ret = 0
> >>>>>>> [  293.102730] ib_srpt:srpt_add_one: ib_srpt Target login info:
> >>>>>>> id_ext=f2d4e2fffee6e1e0,ioc_guid=f2d4e2fffee6e1e0,pkey=ffff,service_id=f2d4e2fffee6e1e0
> >>>>>>>
> >>>>>>> [  293.102741] eno2 speed is unknown, defaulting to 1000
> >>>>>>> [  293.107884] ib_srpt:srpt_add_one: ib_srpt added eno2_rxe.
> >>>>>>> [  293.107893] ib_srpt:srpt_add_one: ib_srpt device =
> >>>>>>> 0000000061e03247
> >>>>>>> [  293.107922] ib_srpt:srpt_use_srq: ib_srpt srpt_use_srq(eno3_rxe):
> >>>>>>> use_srq = 0; ret = 0
> >>>>>>> [  293.107926] ib_srpt:srpt_add_one: ib_srpt Target login info:
> >>>>>>> id_ext=f2d4e2fffee6e1e0,ioc_guid=f2d4e2fffee6e1e0,pkey=ffff,service_id=f2d4e2fffee6e1e0
> >>>>>>>
> >>>>>>> [  293.107936] eno3 speed is unknown, defaulting to 1000
> >>>>>>> [  293.113038] ib_srpt:srpt_add_one: ib_srpt added eno3_rxe.
> >>>>>>> [  293.113046] ib_srpt:srpt_add_one: ib_srpt device =
> >>>>>>> 00000000c0e3d43d
> >>>>>>> [  293.113081] ib_srpt:srpt_use_srq: ib_srpt srpt_use_srq(eno4_rxe):
> >>>>>>> use_srq = 0; ret = 0
> >>>>>>> [  293.113085] ib_srpt:srpt_add_one: ib_srpt Target login info:
> >>>>>>> id_ext=f2d4e2fffee6e1e0,ioc_guid=f2d4e2fffee6e1e0,pkey=ffff,service_id=f2d4e2fffee6e1e0
> >>>>>>>
> >>>>>>> [  293.113096] eno4 speed is unknown, defaulting to 1000
> >>>>>>> [  293.118198] ib_srpt:srpt_add_one: ib_srpt added eno4_rxe.
> >>>>>>> [  293.584001] Rounding down aligned max_sectors from 255 to 248
> >>>>>>> [  293.654030] Rounding down aligned max_sectors from 255 to 248
> >>>>>>> [  293.724363] Rounding down aligned max_sectors from 4294967295
> >>>>>>> to 4294967288
> >>>>>>> [  296.450772] ib_srp:srp_add_one: ib_srp: srp_add_one:
> >>>>>>> 18446744073709551615 / 4096 = 4503599627370495 <> 512
> >>>>>>> [  296.450783] ib_srp:srp_add_one: ib_srp: eno1_rxe: mr_page_shift =
> >>>>>>> 12, device->max_mr_size = 0xffffffffffffffff,
> >>>>>>> device->max_fast_reg_page_list_len = 512, max_pages_per_mr = 512,
> >>>>>>> mr_max_size = 0x200000
> >>>>>>> [  296.451222] ib_srp:srp_add_one: ib_srp: srp_add_one:
> >>>>>>> 18446744073709551615 / 4096 = 4503599627370495 <> 512
> >>>>>>> [  296.451229] ib_srp:srp_add_one: ib_srp: eno2_rxe: mr_page_shift =
> >>>>>>> 12, device->max_mr_size = 0xffffffffffffffff,
> >>>>>>> device->max_fast_reg_page_list_len = 512, max_pages_per_mr = 512,
> >>>>>>> mr_max_size = 0x200000
> >>>>>>> [  296.451517] ib_srp:srp_add_one: ib_srp: srp_add_one:
> >>>>>>> 18446744073709551615 / 4096 = 4503599627370495 <> 512
> >>>>>>> [  296.451523] ib_srp:srp_add_one: ib_srp: eno3_rxe: mr_page_shift =
> >>>>>>> 12, device->max_mr_size = 0xffffffffffffffff,
> >>>>>>> device->max_fast_reg_page_list_len = 512, max_pages_per_mr = 512,
> >>>>>>> mr_max_size = 0x200000
> >>>>>>> [  296.451769] ib_srp:srp_add_one: ib_srp: srp_add_one:
> >>>>>>> 18446744073709551615 / 4096 = 4503599627370495 <> 512
> >>>>>>> [  296.451774] ib_srp:srp_add_one: ib_srp: eno4_rxe: mr_page_shift =
> >>>>>>> 12, device->max_mr_size = 0xffffffffffffffff,
> >>>>>>> device->max_fast_reg_page_list_len = 512, max_pages_per_mr = 512,
> >>>>>>> mr_max_size = 0x200000
> >>>>>>> [  296.605925] ib_srp:srp_parse_in: ib_srp: 10.16.221.116 ->
> >>>>>>> 10.16.221.116:0
> >>>>>>> [  296.605956] ib_srp:srp_parse_in: ib_srp: 10.16.221.116:5555 ->
> >>>>>>> 10.16.221.116:5555
> >>>>>>> [  296.606014] ib_srp:add_target_store: ib_srp: max_sectors = 1024;
> >>>>>>> max_pages_per_mr = 512; mr_page_size = 4096; max_sectors_per_mr =
> >>>>>>> 4096; mr_per_cmd = 2
> >>>>>>> [  296.606021] ib_srp:srp_max_it_iu_len: ib_srp: max_iu_len = 8260
> >>>>>>>
> >>>>>>> [  296.616660] ================================
> >>>>>>> [  296.620931] WARNING: inconsistent lock state
> >>>>>>> [  296.625207] 5.18.0-rc1 #1 Tainted: G S        I
> >>>>>>> [  296.630259] --------------------------------
> >>>>>>> [  296.634531] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
> >>>>>>> [  296.640535] ksoftirqd/30/188 [HC0[0]:SC1[1]:HE0:SE0] takes:
> >>>>>>> [  296.646106] ffff888151491468 (&xa->xa_lock#15){+.?.}-{2:2}, at:
> >>>>>>> rxe_pool_get_index+0x72/0x1d0 [rdma_rxe]
> >>>>>>> [  296.655588] {SOFTIRQ-ON-W} state was registered at:
> >>>>>>> [  296.660467]   lock_acquire+0x1d2/0x5a0
> >>>>>>> [  296.664221]   _raw_spin_lock+0x33/0x80
> >>>>>>> [  296.667972]   __rxe_add_to_pool+0x183/0x230 [rdma_rxe]
> >>>>>>> [  296.673112]   __ib_alloc_pd+0xf9/0x550 [ib_core]
> >>>>>>> [  296.677758]   ib_mad_init_device+0x2d9/0xd20 [ib_core]
> >>>>>>> [  296.682924]   add_client_context+0x2fa/0x450 [ib_core]
> >>>>>>> [  296.688088]   enable_device_and_get+0x1b7/0x350 [ib_core]
> >>>>>>> [  296.693503]   ib_register_device+0x757/0xaf0 [ib_core]
> >>>>>>> [  296.698660]   rxe_register_device+0x2eb/0x390 [rdma_rxe]
> >>>>>>> [  296.703973]   rxe_net_add+0x83/0xc0 [rdma_rxe]
> >>>>>>> [  296.708421]   rxe_newlink+0x76/0x90 [rdma_rxe]
> >>>>>>> [  296.712865]   nldev_newlink+0x245/0x3e0 [ib_core]
> >>>>>>> [  296.717597]   rdma_nl_rcv_msg+0x2d4/0x790 [ib_core]
> >>>>>>> [  296.722492]   rdma_nl_rcv+0x1ca/0x3f0 [ib_core]
> >>>>>>> [  296.727042]   netlink_unicast+0x43b/0x640
> >>>>>>> [  296.731056]   netlink_sendmsg+0x7eb/0xc40
> >>>>>>> [  296.735069]   sock_sendmsg+0xe0/0x110
> >>>>>>> [  296.738734]   __sys_sendto+0x1d7/0x2b0
> >>>>>>> [  296.742486]   __x64_sys_sendto+0xdd/0x1b0
> >>>>>>> [  296.746500]   do_syscall_64+0x37/0x80
> >>>>>>> [  296.750166] entry_SYSCALL_64_after_hwframe+0x44/0xae
> >>>>>>> [  296.755304] irq event stamp: 25305
> >>>>>>> [  296.758710] hardirqs last  enabled at (25304):
> >>>>>>> [<ffffffff89815de8>]
> >>>>>>> __local_bh_enable_ip+0xa8/0x110
> >>>>>>> [  296.767750] hardirqs last disabled at (25305):
> >>>>>>> [<ffffffff8b970219>]
> >>>>>>> _raw_spin_lock_irqsave+0x69/0x90
> >>>>>>> [  296.776875] softirqs last  enabled at (25294):
> >>>>>>> [<ffffffff8bc0064a>]
> >>>>>>> __do_softirq+0x64a/0xa4c
> >>>>>>> [  296.785307] softirqs last disabled at (25299):
> >>>>>>> [<ffffffff898159f2>]
> >>>>>>> run_ksoftirqd+0x32/0x60
> >>>>>>> [  296.793654]
> >>>>>>>                   other info that might help us debug this:
> >>>>>>> [  296.800177]  Possible unsafe locking scenario:
> >>>>>>>
> >>>>>>> [  296.806097]        CPU0
> >>>>>>> [  296.808550]        ----
> >>>>>>> [  296.811003]   lock(&xa->xa_lock#15);
> >>>>>>> [  296.814583]   <Interrupt>
> >>>>>>> [  296.817209]     lock(&xa->xa_lock#15);
> >>>>>>> [  296.820961]
> >>>>>>>                    *** DEADLOCK ***
> >>>>>>>
> >>>>>>> [  296.826880] no locks held by ksoftirqd/30/188.
> >>>>>>> [  296.831326]
> >>>>>>>                   stack backtrace:
> >>>>>>> [  296.835686] CPU: 30 PID: 188 Comm: ksoftirqd/30 Tainted: G S
> >>>>>>> I       5.18.0-rc1 #1
> >>>>>>> [  296.843859] Hardware name: Dell Inc. PowerEdge R640/06NR82, BIOS
> >>>>>>> 2.11.2 004/21/2021
> >>>>>>> [  296.851509] Call Trace:
> >>>>>>> [  296.853964]  <TASK>
> >>>>>>> [  296.856070]  dump_stack_lvl+0x44/0x57
> >>>>>>> [  296.859734]  mark_lock.part.52.cold.79+0x3c/0x46
> >>>>>>> [  296.864355]  ? lock_chain_count+0x20/0x20
> >>>>>>> [  296.868367]  ? rxe_do_task+0x26/0x230 [rdma_rxe]
> >>>>>>> [  296.872994]  ? orc_find.part.4+0x310/0x310
> >>>>>>> [  296.877096]  ? __module_text_address.part.55+0x13/0x140
> >>>>>>> [  296.882326]  ? rxe_do_task+0x26/0x230 [rdma_rxe]
> >>>>>>> [  296.886947]  ? rxe_do_task+0x26/0x230 [rdma_rxe]
> >>>>>>> [  296.891566]  ? is_module_text_address+0x41/0x60
> >>>>>>> [  296.896098]  ? rxe_do_task+0x26/0x230 [rdma_rxe]
> >>>>>>> [  296.900718]  ? kernel_text_address+0x13/0xd0
> >>>>>>> [  296.904991]  ? create_prof_cpu_mask+0x20/0x20
> >>>>>>> [  296.909351]  ? sched_clock_cpu+0x15/0x200
> >>>>>>> [  296.913364]  __lock_acquire+0x1565/0x34a0
> >>>>>>> [  296.917377]  ? rcu_read_lock_sched_held+0xaf/0xe0
> >>>>>>> [  296.922079]  ? rcu_read_lock_bh_held+0xc0/0xc0
> >>>>>>> [  296.926529]  lock_acquire+0x1d2/0x5a0
> >>>>>>> [  296.930193]  ? rxe_pool_get_index+0x72/0x1d0 [rdma_rxe]
> >>>>>>> [  296.935429]  ? rcu_read_unlock+0x50/0x50
> >>>>>>> [  296.939353]  ? mark_lock.part.52+0xa3d/0x1c00
> >>>>>>> [  296.943712]  ? _raw_spin_lock_irqsave+0x69/0x90
> >>>>>>> [  296.948247]  _raw_spin_lock_irqsave+0x42/0x90
> >>>>>>> [  296.952603]  ? rxe_pool_get_index+0x72/0x1d0 [rdma_rxe]
> >>>>>>> [  296.957830]  rxe_pool_get_index+0x72/0x1d0 [rdma_rxe]
> >>>>>>> [  296.962882]  ? __rxe_add_to_pool+0x230/0x230 [rdma_rxe]
> >>>>>>> [  296.968108]  ? __rxe_get+0xc1/0x140 [rdma_rxe]
> >>>>>>> [  296.972554]  rxe_get_av+0x168/0x2a0 [rdma_rxe]
> >>>>>>> [  296.977007]  ? lockdep_lock+0xcb/0x1c0
> >>>>>>> [  296.980761]  rxe_requester+0x75b/0x4a90 [rdma_rxe]
> >>>>>>> [  296.985557]  ? rxe_do_task+0xe2/0x230 [rdma_rxe]
> >>>>>>> [  296.990183]  ? sched_clock_cpu+0x15/0x200
> >>>>>>> [  296.994193]  ? find_held_lock+0x3a/0x1c0
> >>>>>>> [  296.998119]  ? rnr_nak_timer+0x80/0x80 [rdma_rxe]
> >>>>>>> [  297.002826]  ? lock_release+0x42f/0xc90
> >>>>>>> [  297.006664]  ? lock_downgrade+0x6b0/0x6b0
> >>>>>>> [  297.010676]  ? lock_acquired+0x262/0xb10
> >>>>>>> [  297.014605]  ? __local_bh_enable_ip+0xa8/0x110
> >>>>>>> [  297.019051]  ? rnr_nak_timer+0x80/0x80 [rdma_rxe]
> >>>>>>> [  297.023764]  rxe_do_task+0x134/0x230 [rdma_rxe]
> >>>>>>> [  297.028297] tasklet_action_common.isra.12+0x1f7/0x2d0
> >>>>>>> [  297.033435]  __do_softirq+0x1ea/0xa4c
> >>>>>>> [  297.037100]  ? tasklet_kill+0x1c0/0x1c0
> >>>>>>> [  297.040941]  run_ksoftirqd+0x32/0x60
> >>>>>>> [  297.044518]  smpboot_thread_fn+0x503/0x860
> >>>>>>> [  297.048618]  ? sort_range+0x20/0x20
> >>>>>>> [  297.052110]  kthread+0x29b/0x340
> >>>>>>> [  297.055342]  ? kthread_complete_and_exit+0x20/0x20
> >>>>>>> [  297.060137]  ret_from_fork+0x1f/0x30
> >>>>>>> [  297.063720]  </TASK>
> >>>>>>>
> >>>>>>
> >>>>>
> >>>>>
> >>>>
> >>>
> >>>
> >>
>


-- 
Best Regards,
  Yi Zhang