From: "F. Poncin" <cr27587@chello.be>
To: Stefan Richter <stefanr@s5r6.in-berlin.de>
Cc: linux-scsi@vger.kernel.org, Dave Jones <davej@redhat.com>,
linux-usb-devel@lists.sourceforge.net, akpm@osdl.org
Subject: Re: USB/SCSI slab corruption.
Date: Fri, 13 Jan 2006 10:39:09 +0100 [thread overview]
Message-ID: <43C7753D.8030404@chello.be> (raw)
In-Reply-To: <43C6F31C.5090909@s5r6.in-berlin.de>
Stefan Richter wrote:
> Dave Jones wrote:
>
>> A nasty 2.6.15 report from one of our Fedora users.
>>
>> Dave
>>
>> > then when it got to map my USB drive: > SCSI device sdb:
>> 321672960 512-byte hdwr sectors (164697 MB) > slab error in
>> cache_free_debugcheck(): cache `sgpool-8': double free, or > memory
>> outside object was overwritten > [<c0153593>]
>> cache_free_debugcheck+0x1ab/0x22f [<c014d3c2>] >
>> mempool_free+0x3a/0x73 > [<c01540e2>] kmem_cache_free+0x2a/0x69
>> [<c014d3c2>] > mempool_free+0x3a/0x73 > [<f8862c8b>]
>> scsi_io_completion+0x207/0x4d2 [scsi_mod] [<f885dcad>] >
>> scsi_finish_command+0x82/0xd0 [scsi_mod] > [<f885db8e>]
>> scsi_softirq+0xc0/0x137 [scsi_mod] [<c012a152>] >
>> __do_softirq+0x72/0xdc > [<c01063d3>] do_softirq+0x4b/0x4f >
>> =======================
>
> [...]
>
> This looks very similar to this report about an SBP-2 HDD under
> 2.6.14-rc4: http://marc.theaimsgroup.com/?t=112931959700002
As discussed with Andrew Morton yesterday, this seems to be fixed on my
side (latest kernel)
extract from dmesg:
ieee1394: Node added: ID:BUS[0-00:1023] GUID[000bc20300011c51]
ieee1394: Host added: ID:BUS[0-01:1023] GUID[0000d10080967536]
scsi2 : SBP-2 IEEE-1394
ieee1394: sbp2: Logged into SBP-2 device
ieee1394: Node 0-00:1023: Max speed [S400] - Max payload [2048]
Vendor: Initio Model: ST3400832A Rev: 4.07
Type: Direct-Access ANSI SCSI revision: 00
SCSI device sdc: 781422768 512-byte hdwr sectors (400088 MB)
sdc: Write Protect is off
sdc: Mode Sense: 00 13 00 00
sdc: got wrong page
sdc: assuming drive cache: write through
SCSI device sdc: 781422768 512-byte hdwr sectors (400088 MB)
sdc: Write Protect is off
sdc: Mode Sense: 00 13 00 00
sdc: got wrong page
sdc: assuming drive cache: write through
sdc: sdc1
sd 2:0:0:0: Attached scsi disk sdc
"F. Poncin" <cr27587@chello.be> wrote:
> Hello,
> I found this in several recent boot logs.
>
> Summary: slab error in cache_free_debugcheck(): cache `sgpool-8':
> double free, or memory outside object was overwritten
> Kernel version: 2.6.14-rc4-g9149ccfa
> Steps to reproduce: on boot
> Hardware: Dell 8300 + External USB disk enclosures
>
> I'm not subscribed to the list. Please Cc:
> Additional info / test on request.
>
> extract from dmesg:
>
> scsi2 : SCSI emulation for IEEE-1394 SBP-2 Devices
> ieee1394: sbp2: Logged into SBP-2 device
> ieee1394: Node 0-00:1023: Max speed [S400] - Max payload [2048]
> Vendor: Initio Model: ST3400832A Rev: 4.07
> Type: Direct-Access ANSI SCSI revision: 00
> SCSI device sdc: 781422768 512-byte hdwr sectors (400088 MB)
> slab error in cache_free_debugcheck(): cache `sgpool-8': double free,
> or memory outside object was overwritten
> [<c014a43b>] cache_free_debugcheck+0x15e/0x215
> [<c0144c73>] mempool_free+0x6c/0x73
> [<c014ae71>] kmem_cache_free+0x25/0x59
> [<c0144c73>] mempool_free+0x6c/0x73
> [<f8891d92>] scsi_io_completion+0x1fd/0x4ac [scsi_mod]
> [<f8826d3f>] sd_rw_intr+0x155/0x30e [sd_mod]
> [<c0148e2b>] poison_obj+0x1c/0x38
> [<c032ca6e>] _spin_lock+0x1c/0x75
> [<f888cc33>] scsi_finish_command+0x82/0xb5 [scsi_mod]
> [<c032ca6e>] _spin_lock+0x1c/0x75
> [<f888cb0a>] scsi_softirq+0xc0/0x141 [scsi_mod]
> [<c01252e1>] tasklet_action+0x59/0xbe
> [<c0124f79>] __do_softirq+0x69/0xd5
> [<c0104ceb>] do_softirq+0x57/0x5b
> =======================
> [<c01250c0>] irq_exit+0x42/0x44
> [<c0104bbc>] do_IRQ+0x5c/0x8e
> [<c032b277>] schedule+0x627/0xcd8
> [<c01036a6>] common_interrupt+0x1a/0x20
> [<c0100e91>] mwait_idle+0x25/0x4a
> [<c023d243>] acpi_processor_idle+0x0/0x29e
> [<c023d344>] acpi_processor_idle+0x101/0x29e
> [<c023d243>] acpi_processor_idle+0x0/0x29e
> [<c0100ceb>] cpu_idle+0x45/0x7d
> [<c03f088a>] start_kernel+0x18c/0x1cb
> [<c03f030b>] unknown_bootoption+0x0/0x1b0
> c233b7a8: redzone 1: 0x170fc2a5, redzone 2: 0xc0144b47.
> sdc: asking for cache data failed
> sdc: assuming drive cache: write through
> SCSI device sdc: 781422768 512-byte hdwr sectors (400088 MB)
> slab error in cache_free_debugcheck(): cache `sgpool-8': double free,
> or memory outside object was overwritten
> [<c014a43b>] cache_free_debugcheck+0x15e/0x215
> [<c0144c73>] mempool_free+0x6c/0x73
> [<c014ae71>] kmem_cache_free+0x25/0x59
> [<c0144c73>] mempool_free+0x6c/0x73
> [<f8891d92>] scsi_io_completion+0x1fd/0x4ac [scsi_mod]
> [<f8826d3f>] sd_rw_intr+0x155/0x30e [sd_mod]
> [<c0148e2b>] poison_obj+0x1c/0x38
> [<c032ca6e>] _spin_lock+0x1c/0x75
> [<f888cc33>] scsi_finish_command+0x82/0xb5 [scsi_mod]
> [<c032ca6e>] _spin_lock+0x1c/0x75
> [<f888cb0a>] scsi_softirq+0xc0/0x141 [scsi_mod]
> [<c01252e1>] tasklet_action+0x59/0xbe
> [<c0124f79>] __do_softirq+0x69/0xd5
> [<c0104ceb>] do_softirq+0x57/0x5b
> =======================
> [<c01250c0>] irq_exit+0x42/0x44
> [<c0104bbc>] do_IRQ+0x5c/0x8e
> [<c01036a6>] common_interrupt+0x1a/0x20
> [<c0100e91>] mwait_idle+0x25/0x4a
> [<c023d243>] acpi_processor_idle+0x0/0x29e
> [<c023d344>] acpi_processor_idle+0x101/0x29e
> [<c023d243>] acpi_processor_idle+0x0/0x29e
> [<c0100ceb>] cpu_idle+0x45/0x7d
> [<c03f088a>] start_kernel+0x18c/0x1cb
> [<c03f030b>] unknown_bootoption+0x0/0x1b0
> c233b7a8: redzone 1: 0x170fc2a5, redzone 2: 0xc0144b47.
> sdc: asking for cache data failed
> sdc: assuming drive cache: write through
> sdc:<6>FDC 0 is a post-1991 82077
>
>
> --
> Frédéric Poncin
-
To unsubscribe from this list: send the line "unsubscribe linux-scsi" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
next prev parent reply other threads:[~2006-01-13 9:39 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-01-12 23:36 USB/SCSI slab corruption Dave Jones
2006-01-13 0:23 ` Stefan Richter
2006-01-13 9:39 ` F. Poncin [this message]
2006-01-13 1:30 ` James Bottomley
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=43C7753D.8030404@chello.be \
--to=cr27587@chello.be \
--cc=akpm@osdl.org \
--cc=davej@redhat.com \
--cc=linux-scsi@vger.kernel.org \
--cc=linux-usb-devel@lists.sourceforge.net \
--cc=stefanr@s5r6.in-berlin.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.