Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 15 Sep 2022 00:44:40 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 266419] mrsas corrupts memory when reading data from NVMe disk attached to PERC H755N controller
Message-ID:  <bug-266419-227@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D266419

            Bug ID: 266419
           Summary: mrsas corrupts memory when reading data from NVMe disk
                    attached to PERC H755N controller
           Product: Base System
           Version: CURRENT
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: bcran@FreeBSD.org

Created attachment 236559
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D236559&action=
=3Dedit
Dell PowerEdge R7525 FreeBSD 14-CURRENT dmesg

On my Dell PowerEdge R7525 with a PERC H755N controller with 5 attached NVMe
disks, reading from /dev/da0 causes a panic.

I'm running:
  FreeBSD 14.0-CURRENT #0 main-n257957-975407b1d8d-dirty: Wed Sep 14 17:16:=
44
MDT 2022

FreeBSD sees the controller as:
  AVAGO MegaRAID SAS FreeBSD mrsas driver version: 07.709.04.00-fbsd
  mrsas0: <BROADCOM AERO-10E2 SAS Controller> port 0x2000-0x20ff mem=20

The following command triggers the panic:

dd if=3D/dev/da0 of=3D/dev/null bs=3D1M

Sometimes it just causes various processes to segfault (e.g. fsck_msdosfs,
logger, csh), other times it causes a panic, such as "Memory modified after
free", or "_sleep: curthread not running"

I've attached the full dmesg, and will also attach the kernel dump informat=
ion
when it finishes.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-266419-227>