crash 8.0.0++ Copyright (C) 2002-2021 Red Hat, Inc. Copyright (C) 2004, 2005, 2006, 2010 IBM Corporation Copyright (C) 1999-2006 Hewlett-Packard Co Copyright (C) 2005, 2006, 2011, 2012 Fujitsu Limited Copyright (C) 2006, 2007 VA Linux Systems Japan K.K. Copyright (C) 2005, 2011, 2020-2021 NEC Corporation Copyright (C) 1999, 2002, 2007 Silicon Graphics, Inc. Copyright (C) 1999, 2000, 2001, 2002 Mission Critical Linux, Inc. Copyright (C) 2015, 2021 VMware, Inc. This program is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Enter "help copying" to see the conditions. This program has absolutely no warranty. Enter "help warranty" for details. NOTE: stdin: not a tty GNU gdb (GDB) 10.2 Copyright (C) 2021 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-pc-linux-gnu". Type "show configuration" for configuration details. Find the GDB manual and other documentation resources online at: . For help, type "help". Type "apropos word" to search for commands related to "word"... please wait... (gathering kmem slab cache data) please wait... (gathering module symbol data) please wait... (gathering task table data) please wait... (determining panic task) KERNEL: /tmp/crash-anaysis.LpbC9/vmlinux [TAINTED] DUMPFILE: /exports/testreports/66489/testresults/sanity-special1-zfs-rocky8.10_x86_64-rocky8.10_x86_64/oleg148-client-vmcore [PARTIAL DUMP] CPUS: 4 DATE: Wed Jul 22 00:51:09 EDT 2026 UPTIME: 00:06:38 LOAD AVERAGE: 1.10, 0.85, 0.43 TASKS: 175 NODENAME: oleg148-client.virtnet RELEASE: 4.18.0rh8.10-debug VERSION: #2 SMP Mon Jul 14 01:24:22 EDT 2025 MACHINE: x86_64 (2399 Mhz) MEMORY: 4.1 GB PANIC: "general protection fault: 0000 [#1] SMP DEBUG_PAGEALLOC" PID: 11868 COMMAND: "mount.lustre" TASK: ffff9787c614a7c0 [THREAD_INFO: ffff9787c614a7c0] CPU: 1 STATE: TASK_RUNNING (PANIC) Setting scroll off while initializing PyKdump /usr/local/crash/mpykdump.so: shared object loaded ./lustre.so: shared object loaded mod: cannot find or load object file for sha512_generic module mod: cannot find or load object file for sha512_ssse3 module mod: cannot find or load object file for dm_mod module mod: cannot find or load object file for dm_log module mod: cannot find or load object file for dm_region_hash module mod: cannot find or load object file for dm_mirror module mod: cannot find or load object file for libata module mod: cannot find or load object file for serio_raw module mod: cannot find or load object file for ata_generic module mod: cannot find or load object file for crc32_pclmul module mod: cannot find or load object file for pcspkr module mod: cannot find or load object file for intel_rapl_msr module mod: cannot find or load object file for crc32c_intel module mod: cannot find or load object file for dns_resolver module mod: cannot find or load object file for ata_piix module mod: cannot find or load object file for ghash_clmulni_intel module mod: cannot find or load object file for crct10dif_pclmul module mod: cannot find or load object file for squashfs module mod: cannot find or load object file for i2c_piix4 module mod: cannot find or load object file for intel_rapl_common module mod: cannot find or load object file for sb_edac module mod: cannot find or load object file for rapl module mod: cannot find or load object file for nfsv4 module mod: cannot find or load object file for auth_rpcgss module mod: cannot find or load object file for rpcsec_gss_krb5 module MODULE NAME BASE SIZE OBJECT FILE ffffffffc06c4940 libcfs ffffffffc06a4000 233472 /tmp/crash-anaysis.LpbC9/modules/libcfs.ko ffffffffc07edf80 lnet ffffffffc0714000 1482752 /tmp/crash-anaysis.LpbC9/modules/lnet.ko ffffffffc08a8900 ksocklnd ffffffffc087f000 270336 /tmp/crash-anaysis.LpbC9/modules/ksocklnd.ko ffffffffc0a020c0 obdclass ffffffffc08c2000 4366336 /tmp/crash-anaysis.LpbC9/modules/obdclass.ko ffffffffc0f77c00 ptlrpc ffffffffc0ced000 4169728 /tmp/crash-anaysis.LpbC9/modules/ptlrpc.ko ffffffffc1136880 ptlrpc_gss ffffffffc10e8000 524288 /tmp/crash-anaysis.LpbC9/modules/ptlrpc_gss.ko ffffffffc117bc80 fld ffffffffc1169000 126976 /tmp/crash-anaysis.LpbC9/modules/fld.ko ffffffffc119bac0 fid ffffffffc1189000 126976 /tmp/crash-anaysis.LpbC9/modules/fid.ko ffffffffc11bb740 ec ffffffffc11a9000 81920 /tmp/crash-anaysis.LpbC9/modules/ec.ko ffffffffc11fb040 lmv ffffffffc11be000 372736 /tmp/crash-anaysis.LpbC9/modules/lmv.ko ffffffffc128fd40 osc ffffffffc121a000 716800 /tmp/crash-anaysis.LpbC9/modules/osc.ko ffffffffc1321780 lov ffffffffc12ca000 548864 /tmp/crash-anaysis.LpbC9/modules/lov.ko ffffffffc139bb80 mdc ffffffffc1351000 466944 /tmp/crash-anaysis.LpbC9/modules/mdc.ko ffffffffc13e0000 mgc ffffffffc13c4000 184320 /tmp/crash-anaysis.LpbC9/modules/mgc.ko ffffffffc14135c0 obdecho ffffffffc13f2000 225280 /tmp/crash-anaysis.LpbC9/modules/obdecho.ko ffffffffc14e40c0 lfsck ffffffffc142a000 1077248 /tmp/crash-anaysis.LpbC9/modules/lfsck.ko ffffffffc15b2300 lquota ffffffffc1532000 790528 /tmp/crash-anaysis.LpbC9/modules/lquota.ko ffffffffc1657400 mgs ffffffffc15f4000 626688 /tmp/crash-anaysis.LpbC9/modules/mgs.ko ffffffffc1709080 mdd ffffffffc168e000 745472 /tmp/crash-anaysis.LpbC9/modules/mdd.ko ffffffffc1853640 mdt ffffffffc1745000 1650688 /tmp/crash-anaysis.LpbC9/modules/mdt.ko ffffffffc1980f80 lod ffffffffc18d9000 1032192 /tmp/crash-anaysis.LpbC9/modules/lod.ko ffffffffc1a38600 ofd ffffffffc19d6000 606208 /tmp/crash-anaysis.LpbC9/modules/ofd.ko ffffffffc1ac6dc0 osp ffffffffc1a6b000 569344 /tmp/crash-anaysis.LpbC9/modules/osp.ko ffffffffc1c2a380 lustre ffffffffc1af7000 1904640 /tmp/crash-anaysis.LpbC9/modules/lustre.ko lustre_walk_cpus(0, 5, 1) cmd p (*cfs_trace_data[0])[0].tcd.tcd_cur_pages // p (*cfs_trace_data[0])[0].tcd.tcd_pages.next lustre_walk_trace_pages(0, 5, 0xffff9787c3931548) lustre_walk_cpus(0, 5, 2) cmd p (*cfs_trace_data[0])[0].tcd.tcd_cur_daemon_pages // p (*cfs_trace_data[0])[0].tcd.tcd_daemon_pages.next lustre: Dumped 185 debug pages from type 0 - CPU 0 lustre_walk_cpus(1, 5, 1) cmd p (*cfs_trace_data[0])[1].tcd.tcd_cur_pages // p (*cfs_trace_data[0])[1].tcd.tcd_pages.next lustre_walk_trace_pages(1, 5, 0xffff9787c2eaf5c8) lustre_walk_cpus(1, 5, 2) cmd p (*cfs_trace_data[0])[1].tcd.tcd_cur_daemon_pages // p (*cfs_trace_data[0])[1].tcd.tcd_daemon_pages.next lustre: Dumped 255 debug pages from type 0 - CPU 1 lustre_walk_cpus(2, 5, 1) cmd p (*cfs_trace_data[0])[2].tcd.tcd_cur_pages // p (*cfs_trace_data[0])[2].tcd.tcd_pages.next lustre_walk_trace_pages(2, 5, 0xffff9787c79b2b08) lustre_walk_cpus(2, 5, 2) cmd p (*cfs_trace_data[0])[2].tcd.tcd_cur_daemon_pages // p (*cfs_trace_data[0])[2].tcd.tcd_daemon_pages.next lustre: Dumped 229 debug pages from type 0 - CPU 2 lustre_walk_cpus(3, 5, 1) cmd p (*cfs_trace_data[0])[3].tcd.tcd_cur_pages // p (*cfs_trace_data[0])[3].tcd.tcd_pages.next lustre_walk_trace_pages(3, 5, 0xffff9787c639f468) lustre_walk_cpus(3, 5, 2) cmd p (*cfs_trace_data[0])[3].tcd.tcd_cur_daemon_pages // p (*cfs_trace_data[0])[3].tcd.tcd_daemon_pages.next lustre: Dumped 274 debug pages from type 0 - CPU 3 lustre_walk_cpus(0, 5, 1) cmd p (*cfs_trace_data[1])[0].tcd.tcd_cur_pages // p (*cfs_trace_data[1])[0].tcd.tcd_pages.next lustre_walk_cpus(0, 5, 2) cmd p (*cfs_trace_data[1])[0].tcd.tcd_cur_daemon_pages // p (*cfs_trace_data[1])[0].tcd.tcd_daemon_pages.next lustre: Dumped 0 debug pages from type 1 - CPU 0 lustre_walk_cpus(1, 5, 1) cmd p (*cfs_trace_data[1])[1].tcd.tcd_cur_pages // p (*cfs_trace_data[1])[1].tcd.tcd_pages.next lustre_walk_trace_pages(1, 5, 0xffff9787c330b148) lustre_walk_cpus(1, 5, 2) cmd p (*cfs_trace_data[1])[1].tcd.tcd_cur_daemon_pages // p (*cfs_trace_data[1])[1].tcd.tcd_daemon_pages.next lustre: Dumped 1 debug pages from type 1 - CPU 1 lustre_walk_cpus(2, 5, 1) cmd p (*cfs_trace_data[1])[2].tcd.tcd_cur_pages // p (*cfs_trace_data[1])[2].tcd.tcd_pages.next lustre_walk_trace_pages(2, 5, 0xffff9787d29dbba8) lustre_walk_cpus(2, 5, 2) cmd p (*cfs_trace_data[1])[2].tcd.tcd_cur_daemon_pages // p (*cfs_trace_data[1])[2].tcd.tcd_daemon_pages.next lustre: Dumped 1 debug pages from type 1 - CPU 2 lustre_walk_cpus(3, 5, 1) cmd p (*cfs_trace_data[1])[3].tcd.tcd_cur_pages // p (*cfs_trace_data[1])[3].tcd.tcd_pages.next lustre_walk_trace_pages(3, 5, 0xffff9787c639f508) lustre_walk_cpus(3, 5, 2) cmd p (*cfs_trace_data[1])[3].tcd.tcd_cur_daemon_pages // p (*cfs_trace_data[1])[3].tcd.tcd_daemon_pages.next lustre: Dumped 1 debug pages from type 1 - CPU 3 lustre_walk_cpus(0, 5, 1) cmd p (*cfs_trace_data[2])[0].tcd.tcd_cur_pages // p (*cfs_trace_data[2])[0].tcd.tcd_pages.next lustre_walk_cpus(0, 5, 2) cmd p (*cfs_trace_data[2])[0].tcd.tcd_cur_daemon_pages // p (*cfs_trace_data[2])[0].tcd.tcd_daemon_pages.next lustre: Dumped 0 debug pages from type 2 - CPU 0 lustre_walk_cpus(1, 5, 1) cmd p (*cfs_trace_data[2])[1].tcd.tcd_cur_pages // p (*cfs_trace_data[2])[1].tcd.tcd_pages.next lustre_walk_cpus(1, 5, 2) cmd p (*cfs_trace_data[2])[1].tcd.tcd_cur_daemon_pages // p (*cfs_trace_data[2])[1].tcd.tcd_daemon_pages.next lustre: Dumped 0 debug pages from type 2 - CPU 1 lustre_walk_cpus(2, 5, 1) cmd p (*cfs_trace_data[2])[2].tcd.tcd_cur_pages // p (*cfs_trace_data[2])[2].tcd.tcd_pages.next lustre_walk_cpus(2, 5, 2) cmd p (*cfs_trace_data[2])[2].tcd.tcd_cur_daemon_pages // p (*cfs_trace_data[2])[2].tcd.tcd_daemon_pages.next lustre: Dumped 0 debug pages from type 2 - CPU 2 lustre_walk_cpus(3, 5, 1) cmd p (*cfs_trace_data[2])[3].tcd.tcd_cur_pages // p (*cfs_trace_data[2])[3].tcd.tcd_pages.next lustre_walk_cpus(3, 5, 2) cmd p (*cfs_trace_data[2])[3].tcd.tcd_cur_daemon_pages // p (*cfs_trace_data[2])[3].tcd.tcd_daemon_pages.next lustre: Dumped 0 debug pages from type 2 - CPU 3 lustre: Dumped 946 total debug pages from 4 CPUs to /tmp/crash-anaysis.LpbC9/lustre.bin kmem: osc_session_kmem: slab: fffff42f44214380 invalid freepointer: e21888474b214582