[Bug 266419] mrsas corrupts memory when reading data from NVMe disk attached to PERC H755N controller

From: <bugzilla-noreply_at_freebsd.org>
Date: Thu, 15 Sep 2022 00:44:40 UTC 
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=266419

            Bug ID: 266419
           Summary: mrsas corrupts memory when reading data from NVMe disk
                    attached to PERC H755N controller
           Product: Base System
           Version: CURRENT
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: bcran@FreeBSD.org

Created attachment 236559
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=236559&action=edit
Dell PowerEdge R7525 FreeBSD 14-CURRENT dmesg

On my Dell PowerEdge R7525 with a PERC H755N controller with 5 attached NVMe
disks, reading from /dev/da0 causes a panic.

I'm running:
  FreeBSD 14.0-CURRENT #0 main-n257957-975407b1d8d-dirty: Wed Sep 14 17:16:44
MDT 2022

FreeBSD sees the controller as:
  AVAGO MegaRAID SAS FreeBSD mrsas driver version: 07.709.04.00-fbsd
  mrsas0: <BROADCOM AERO-10E2 SAS Controller> port 0x2000-0x20ff mem 

The following command triggers the panic:

dd if=/dev/da0 of=/dev/null bs=1M

Sometimes it just causes various processes to segfault (e.g. fsck_msdosfs,
logger, csh), other times it causes a panic, such as "Memory modified after
free", or "_sleep: curthread not running"

I've attached the full dmesg, and will also attach the kernel dump information
when it finishes.

-- 
You are receiving this mail because:
You are the assignee for the bug.