[Bug 542568] New: aic79xx caused kernel oops - null pointer dereference when attempting to scan bus
http://bugzilla.novell.com/show_bug.cgi?id=542568 User harbaugh@ncifcrf.gov added comment http://bugzilla.novell.com/show_bug.cgi?id=542568#c1 Summary: aic79xx caused kernel oops - null pointer dereference when attempting to scan bus Classification: openSUSE Product: openSUSE 11.2 Version: Factory Platform: x86-64 OS/Version: SuSE Other Status: NEW Severity: Critical Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: harbaugh@ncifcrf.gov QAContact: qa@suse.de Found By: --- User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.5) Gecko/2008121300 SUSE/3.0.5-1.8 Firefox/3.0.5 Had removed defunct devices and was attempting to rescan bus when kernel oops occurred. Here is the pertinent section of the console log with the stack trace: aar4u17-abcc:~ # echo "scsi remove-single-device 8 0 1 0" > /proc/scsi/scsi aar4u17-abcc:~ # echo "scsi remove-single-device 8 0 2 0" > /proc/scsi/scsi aar4u17-abcc:~ # echo "scsi remove-single-device 8 0 3 0" > /proc/scsi/scsi aar4u17-abcc:~ # echo "scsi remove-single-device 8 0 4 0" > /proc/scsi/scsi aar4u17-abcc:~ # cd /sys/class/scsi_host aar4u17-abcc:/sys/class/scsi_host # cd host8 aar4u17-abcc:/sys/class/scsi_host/host8 # echo "- - -" > scan [63186.087576] BUG: unable to handle kernel NULL pointer dereference at (null) [63186.091490] IP: [<ffffffffa01cc54e>] ahd_freeze_devq+0x2e/0x80 [aic79xx] [63186.091490] PGD 183291e067 PUD 1832514067 PMD 0 [63186.091490] Oops: 0000 [#1] SMP [63186.091490] last sysfs file: /sys/devices/pci0000:80/0000:80:0d.0/0000:82:00.0/0000:83:04.0/host8/target8:0:4/8:0:4:0/scsi_generic/sg210/dev [63186.091490] CPU 11 [63186.091490] Modules linked in: ip6t_LOG xt_limit ipt_LOG xt_tcpudp xt_pkttype iptable_nat nf_nat binfmt_misc ipmi_devintf ipmi_si ipmi_msghandler nfsd exportfs nfs lockd fscache nfs_acl auth_rpcgss sunrpc nf_conntrack_ipv6 xt_state ip6t_REJECT ipt_REJECT ip6table_raw xt_NOTRACK iptable_raw cpufreq_conservative cpufreq_userspace cpufreq_powersave iptable_filter ip6table_mangle nf_conntrack_netbios_ns nf_conntrack_ipv4 nf_conntrack nf_defrag_ipv4 powernow_k8 ip_tables ip6table_filter ip6_tables x_tables fuse loop dm_round_robin scsi_dh_rdac dm_multipath scsi_dh dm_mod myri10ge dca sr_mod cdrom cxgb3 qla2xxx aic79xx amd74xx scsi_transport_spi e1000 scsi_transport_fc amd64_edac_mod joydev serio_raw shpchp pcspkr mdio scsi_tgt floppy pci_hotplug edac_core button sg pata_amd i2c_nforce2 sata_nv edd fan ide_pci_generic ide_core ata_generic thermal processor thermal_sys mptsas mptscsih mptbase scsi_transport_sas [last unloaded: preloadtrace] [63186.091490] Pid: 0, comm: swapper Not tainted 2.6.31-rc9-7-default #1 H8QM3 [63186.091490] RIP: 0010:[<ffffffffa01cc54e>] [<ffffffffa01cc54e>] ahd_freeze_devq+0x2e/0x80 [aic79xx] [63186.091490] RSP: 0018:ffffc90001603cd8 EFLAGS: 00010046 [63186.091490] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000003 [63186.091490] RDX: 0000000000000041 RSI: 0000000000000000 RDI: ffff8810339a0000 [63186.091490] RBP: ffffc90001603d08 R08: 000000000000ff00 R09: 0000000000000000 [63186.091490] R10: 0000000000000004 R11: 0000000000000000 R12: ffff8810339a0000 [63186.091490] R13: 00000000000000e0 R14: 0000000000000000 R15: 0000000000000000 [63186.091490] FS: 00007f5b447f76f0(0000) GS:ffffc90001600000(0000) knlGS:0000000000000000 [63186.091490] CS: 0010 DS: 0018 ES: 0018 CR0: 000000008005003b [63186.091490] CR2: 0000000000000000 CR3: 00000018345ae000 CR4: 00000000000006e0 [63186.091490] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [63186.091490] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [63186.091490] Process swapper (pid: 0, threadinfo ffff880834f30000, task ffff882034d84180) [63186.091490] Stack: [63186.091490] ffffc90001603d08 ffffffffa01c626c ffffc90001603d28 5510fd249e7ebf9e [63186.091490] <0> ffff8810339a0000 0000000000000003 ffffc90001603d98 ffffffffa01d1345 [63186.091490] <0> 0000000000000000 0000000000000080 0000000000000001 0000000000000000 [63186.091490] Call Trace: [63186.091490] [<ffffffffa01d1345>] ahd_handle_nonpkt_busfree+0x285/0x640 [aic79xx] [63186.091490] [<ffffffffa01d336c>] ahd_handle_scsiint+0x1fc/0x7a0 [aic79xx] [63186.091490] [<ffffffffa01d39b8>] ahd_intr+0xa8/0x1a0 [aic79xx] [63186.091490] [<ffffffffa01d80f1>] ahd_linux_isr+0x41/0x90 [aic79xx] [63186.091490] [<ffffffff810d667c>] handle_IRQ_event+0x6c/0x1a0 [63186.091490] [<ffffffff810d9185>] handle_fasteoi_irq+0xa5/0x150 [63186.091490] [<ffffffff8100f7bc>] handle_irq+0x2c/0x50 [63186.091490] [<ffffffff8100ebd3>] do_IRQ+0x73/0x100 [63186.091490] [<ffffffff8100cfd3>] ret_from_intr+0x0/0x11 [63186.091490] [<ffffffff81038706>] native_safe_halt+0x6/0x10 [63186.091490] [<ffffffff81016542>] default_idle+0x62/0x110 [63186.091490] [<ffffffff81016669>] c1e_idle+0x79/0x150 [63186.091490] [<ffffffff8100b442>] cpu_idle+0xc2/0x110 [63186.091490] [<ffffffff8154433d>] start_secondary+0xca/0xe0 [63186.091490] Code: c9 41 b8 00 ff 00 00 ba 41 00 00 00 48 89 e5 41 54 49 89 fc 53 48 89 f3 48 83 ec 20 65 48 8b 04 25 28 00 00 00 48 89 45 e8 31 c0 <48> 8b 06 0f b6 70 13 0f b6 48 14 c7 44 24 08 00 00 00 00 c7 04 [63186.091490] RIP [<ffffffffa01cc54e>] ahd_freeze_devq+0x2e/0x80 [aic79xx] [63186.091490] RSP <ffffc90001603cd8> [63186.091490] CR2: 0000000000000000 [63186.091490] ---[ end trace d47361f0c004ebcd ]--- [63186.091490] Kernel panic - not syncing: Fatal exception in interrupt [63186.091490] Pid: 0, comm: swapper Tainted: G D 2.6.31-rc9-7-default #1 [63186.091490] Call Trace: [63186.091490] [<ffffffff81011599>] try_stack_unwind+0x189/0x1b0 [63186.091490] [<ffffffff8100ff8d>] dump_trace+0x9d/0x330 [63186.091490] [<ffffffff810110a4>] show_trace_log_lvl+0x64/0x90 [63186.091490] [<ffffffff810110f3>] show_trace+0x23/0x40 [63186.091490] [<ffffffff8154aa67>] dump_stack+0x81/0x9e [63186.091490] [<ffffffff8154ab06>] panic+0x82/0x175 [63186.091490] [<ffffffff8154f8a6>] oops_end+0x126/0x130 [63186.091490] [<ffffffff8104344b>] no_context+0x10b/0x1a0 [63186.091490] [<ffffffff8104363d>] __bad_area_nosemaphore+0x15d/0x210 [63186.091490] [<ffffffff81043711>] bad_area_nosemaphore+0x21/0x40 [63186.091490] [<ffffffff81551854>] do_page_fault+0x2d4/0x390 [63186.091490] [<ffffffff8154e935>] page_fault+0x25/0x30 [63186.091490] [<ffffffffa01cc54e>] ahd_freeze_devq+0x2e/0x80 [aic79xx] [63186.091490] [<ffffffffa01d1345>] ahd_handle_nonpkt_busfree+0x285/0x640 [aic79xx] [63186.091490] [<ffffffffa01d336c>] ahd_handle_scsiint+0x1fc/0x7a0 [aic79xx] [63186.091490] [<ffffffffa01d39b8>] ahd_intr+0xa8/0x1a0 [aic79xx] [63186.091490] [<ffffffffa01d80f1>] ahd_linux_isr+0x41/0x90 [aic79xx] [63186.091490] [<ffffffff810d667c>] handle_IRQ_event+0x6c/0x1a0 [63186.091490] [<ffffffff810d9185>] handle_fasteoi_irq+0xa5/0x150 [63186.091490] [<ffffffff8100f7bc>] handle_irq+0x2c/0x50 [63186.091490] [<ffffffff8100ebd3>] do_IRQ+0x73/0x100 [63186.091490] [<ffffffff8100cfd3>] ret_from_intr+0x0/0x11 [63186.091490] [<ffffffff81038706>] native_safe_halt+0x6/0x10 [63186.091490] [<ffffffff81016542>] default_idle+0x62/0x110 [63186.091490] [<ffffffff81016669>] c1e_idle+0x79/0x150 [63186.091490] [<ffffffff8100b442>] cpu_idle+0xc2/0x110 [63186.091490] [<ffffffff8154433d>] start_secondary+0xca/0xe0 Reproducible: Sometimes Steps to Reproduce: 1. 2. 3. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=542568 Stephan Kulow <coolo@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Basesystem |Kernel AssignedTo|bnc-team-screening@forge.pr |kernel-maintainers@forge.pr |ovo.novell.com |ovo.novell.com Flag| |SHIP_STOPPER- -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=542568 http://bugzilla.novell.com/show_bug.cgi?id=542568#c1 Jeff Mahoney <jeffm@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P2 - High CC| |hare@novell.com, | |jeffm@novell.com AssignedTo|kernel-maintainers@forge.pr |knikanth@novell.com |ovo.novell.com | --- Comment #1 from Jeff Mahoney <jeffm@novell.com> 2009-11-19 22:48:40 UTC --- 0x75ee is in ahd_freeze_devq (drivers/scsi/aic7xxx/aic79xx_core.c:8080). 8075 { 8076 int target; 8077 char channel; 8078 int lun; 8079 8080 target = SCB_GET_TARGET(ahd, scb); 8081 lun = SCB_GET_LUN(scb); 8082 channel = SCB_GET_CHANNEL(ahd, scb); 8083 8084 ahd_search_qinfifo(ahd, target, channel, lun, Looks like it's a NULL scb->hscb: 0x00000000000075ee <ahd_freeze_devq+46>: mov (%rsi),%rax 0x00000000000075f1 <ahd_freeze_devq+49>: movzbl 0x13(%rax),%esi 0x13 is hscd->scsiid. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=542568 http://bugzilla.novell.com/show_bug.cgi?id=542568#c4 --- Comment #4 from Hannes Reinecke <hare@novell.com> 2010-01-15 11:47:51 UTC --- I would guess 'scb' is NULL, too (hscb is initialized during adapter init, and won't be modified afterwards). -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=542568 http://bugzilla.novell.com/show_bug.cgi?id=542568#c5 --- Comment #5 from Hannes Reinecke <hare@novell.com> 2010-01-15 12:13:01 UTC --- Created an attachment (id=336798) --> (http://bugzilla.novell.com/attachment.cgi?id=336798) aic79xx-null-scb-in-nonpkt-busfree Check for non-NULL scbs in ahd_handle_nonpkt_busfree(). -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=542568 http://bugzilla.novell.com/show_bug.cgi?id=542568#c6 Hannes Reinecke <hare@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO Info Provider| |harbaugh@ncifcrf.gov --- Comment #6 from Hannes Reinecke <hare@novell.com> 2010-01-15 12:13:24 UTC --- That should fix it. Can you test it? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com