NULL pointer dereference in skein_incremental

[Sevan Janiyan]

Ubuntu 22.10 riscv64 image on lichee rv board with 3 HDDs attached, 2 in a mirrored zpool, 1 standalone zpool, rsync copying data from single pool to mirrored pool. Source pool was using skein. Destination was using the default.

[Tue Nov 15 15:04:51 2022]
Unable to handle kernel paging request at virtual address 000000242eadd000
Oops [#1]
Modules linked in: tls binfmt_misc 8723ds(OE) cfg80211 zfs(POE) pwrseq_simple sunxi_cir rc_core zunicode(POE) snd_soc_hdmi_codec zzstd(OE) ses enclosure scsi_transport_sas sunxi phy_generic zlua(OE) sunxi_cedrus(C) v4l2_mem2mem videobuf2_dma_contig videobuf2_memops videobuf2_v4l2 videobuf2_common zcommon(POE) snd_soc_simple_card sun20i_codec snd_soc_simple_card_utils snd_soc_dmic znvpair(POE) zavl(POE) videodev snd_soc_core icp(POE) leds_sun50i_r329 mc led_class_multicolor spl(OE) snd_compress ac97_bus snd_pcm_dmaengine snd_pcm leds_gpio snd_timer snd soundcore nls_iso8859_1 uio_pdrv_genirq uio ramoops pstore_blk pstore_zone reed_solomon efi_pstore dm_multipath scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip_tables x_tables autofs4 efivarfs raid10 raid456 libcrc32c async_raid6_recov async_memcpy async_pq async_xor xor async_tx raid6_pq raid1 raid0 multipath linear dw_hdmi_i2s_audio dw_hdmi_cec sun4i_drm sun8i_drm_hdmi sun4i_frontend dw_hdmi sun8i_mixer sun4i_tcon drm_cma_helper
 display_connector drm_kms_helper backlight syscopyarea sysfillrect sun8i_tcon_top sysimgblt fb_sys_fops
CPU: 0 PID: 777 Comm: z_rd_int Tainted: P C OE 5.17.0-1003-allwinner #3-Ubuntu
Hardware name: Sipeed Lichee RV Dock (DT)
epc : byte_copy_reverse+0x4/0x14
 ra : Skein_512_Update+0x90/0xe4 [icp]
epc : ffffffff80534132 ra : ffffffff02503e1e sp : ffffffd80cc9f8a0
 gp : ffffffff81e93b80 tp : ffffffd80f455780 t0 : 0000000000000000
 t1 : 3000000000000000 t2 : ea28a7119a000000 s0 : ffffffd80cc9f8e0
 s1 : 0000000000000001 a0 : ffffffd80cc9f9f8 a1 : 000004242eadd000
 a2 : 0000000000000001 a3 : 23e812363499f829 a4 : 000004242eadd001
 a5 : 0000000000000040 a6 : 46e2bd9e783d5c24 a7 : 17594a7f4b319ae4
 s2 : ffffffd80cc9f998 s3 : 000004242eadd000 s4 : 0000000000000040
 s5 : 0000000000000000 s6 : ffffffff038d5d0c s7 : ffffffd80cc9f998
 s8 : 0000000000000000 s9 : ffffffd830553058 s10: 000000000000000c
 s11: ffffffff038d5d40 t3 : ffffffd80cc9f9f8 t4 : ffffffd80cc9f9f9
 t5 : 00f62a80b5f937f2 t6 : 00000002d8ce4be7
status: 0000000200000120 badaddr: 000000242eadd000 cause: 000000000000000d
[<ffffffff038d5d36>] skein_incremental+0x2a/0x34 [zfs]
[<ffffffff03849e1e>] abd_iterate_func+0xdc/0x19a [zfs]
[<ffffffff038d5d9c>] abd_checksum_skein_native+0x5c/0x8e [zfs]
[<ffffffff03957bd8>] zio_checksum_error_impl+0xd6/0x508 [zfs]
[<ffffffff0395806c>] zio_checksum_error+0x62/0xb6 [zfs]
[<ffffffff03950fca>] zio_checksum_verify+0x3c/0x140 [zfs]
[<ffffffff0394f4bc>] zio_execute+0xd8/0x192 [zfs]
[<ffffffff02408b98>] taskq_thread+0x272/0x41c [spl]
[<ffffffff8004a87e>] kthread+0xc6/0xdc
[<ffffffff80003b94>] ret_from_exception+0x0/0xc
---[ end trace 0000000000000000 ]---