Project

General

Profile

Actions

Bug #5698

closed

panic in mpt_sas: vmem_hash_delete(ffffff1aa3456000, 1, 8): bad free

Added by Alexander Shvayakov over 7 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
High
Assignee:
Category:
driver - device drivers
Start date:
2015-03-09
Due date:
% Done:

100%

Estimated time:
36.00 h
Difficulty:
Medium
Tags:
needs-triage
Gerrit CR:

Description

Hi,

I had LSI SAS9205-8e with the firmware 17.00.01.00

        Adapter Selected is a LSI SAS: SAS2308_2(B0) 

        Controller Number              : 1
        Controller                     : SAS2308_2(B0) 
        PCI Address                    : 00:07:00:00
        SAS Address                    : 500605b-0-056f-c930
        NVDATA Version (Default)       : 11.00.00.08
        NVDATA Version (Persistent)    : 11.00.00.08
        Firmware Product ID            : 0x2214 (IT)
        Firmware Version               : 17.00.01.00
        NVDATA Vendor                  : LSI
        NVDATA Product ID              : SAS9205-8e
        BIOS Version                   : 07.33.00.00
        UEFI BSD Version               : 07.24.01.00
        FCODE Version                  : N/A
        Board Name                     : SAS9205-8e
        Board Assembly                 : H3-25360-04H
        Board Tracer Number            : SP24610951

I tried to update to the version 20.00.02.00 and got a kernel panic

I repeated it and got a panic again

At first I erased a flash on my HBA:

./sas2flsh -о -е 6 -с 1

and installed the new firmware

./sas2flash -o -f 9205-8e.bin -b mptsas2.rom  -c 1

The last message from the sas2flash :

http://i.imgur.com/8k165Up.png

fmdump -Vp -u 014fbc31-4173-6e4a-cb49-d7304cadd239
TIME                           UUID                                 SUNW-MSG-ID
Mar 09 2015 14:19:09.419859000 014fbc31-4173-6e4a-cb49-d7304cadd239 SUNOS-8000-KL

  TIME                 CLASS                                 ENA
  Mar 09 14:19:09.4133 ireport.os.sunos.panic.dump_available 0x0000000000000000
  Mar 09 14:17:44.8899 ireport.os.sunos.panic.dump_pending_on_device 0x0000000000000000

nvlist version: 0
        version = 0x0
        class = list.suspect
        uuid = 014fbc31-4173-6e4a-cb49-d7304cadd239
        code = SUNOS-8000-KL
        diag-time = 1425907149 413946
        de = fmd:///module/software-diagnosis
        fault-list-sz = 0x1
        fault-list = (array of embedded nvlists)
        (start fault-list[0])
        nvlist version: 0
                version = 0x0
                class = defect.sunos.kernel.panic
                certainty = 0x64
                asru = sw:///:path=/var/crash/unknown/.014fbc31-4173-6e4a-cb49-d7304cadd239
                resource = sw:///:path=/var/crash/unknown/.014fbc31-4173-6e4a-cb49-d7304cadd239
                savecore-succcess = 1
                dump-dir = /var/crash/unknown
                dump-files = vmdump.0
                os-instance-uuid = 014fbc31-4173-6e4a-cb49-d7304cadd239
                panicstr = vmem_hash_delete(ffffff1aa3456000, 1, 8): bad free
                panicstack = genunix:vmem_hash_delete+9b () | genunix:vmem_xfree+4b () | genunix:vmem_free+23 () | genunix:rmfree+6e () | mpt_sas:mptsas_pkt_destroy_extern+cf () | mpt_sas:mptsas_scsi_destroy_pkt+75 () | scsi:scsi_destroy_pkt+1a () | ses:ses_callback+c1 () | mpt_sas:mptsas_pkt_comp+2b () | mpt_sas:mptsas_doneq_empty+ae () | mpt_sas:mptsas_intr+177 () | apix:apix_dispatch_by_vector+8c () | apix:apix_dispatch_lowlevel+25 () | unix:switch_sp_and_call+13 () | apix:apix_do_interrupt+387 () | unix:cmnint+ba () | unix:i86_mwait+d () | unix:cpu_idle_mwait+109 () | unix:idle+a7 () | unix:thread_start+8 () | 
                crashtime = 1425904511
                panic-time = Mon Mar  9 13:35:11 2015 CET
        (end fault-list[0])

        fault-status = 0x1
        severity = Major
        __ttl = 0x1
        __tod = 0x54fd9dcd 0x19068a38

cat /etc/release 
  OmniOS v11 r151012

uname -v
omnios-10b9c79

MB: Supermicro X9DRE-TF+/X9DR7-TF+

The file crash.0 is attached

Kind regards,
Alexander


Files

crash.0 (578 KB) crash.0 Alexander Shvayakov, 2015-03-09 03:18 PM
mptreset.c (1.67 KB) mptreset.c Origin: https://github.com/kojack/mptsastools/blob/master/mptreset.c Marcel Telka, 2017-01-19 04:23 PM

Related issues

Related to illumos gate - Feature #5016: improve mpt_sas auto request senseClosed2014-07-17

Actions
Related to illumos gate - Bug #7813: mpt_sas does not like concurrent HBA resetsNew2017-01-27

Actions
Related to illumos gate - Bug #6182: mpt_sas panicFeedbackMarcel Telka2015-08-30

Actions
Actions

Also available in: Atom PDF