On Mon, 2008-11-24 at 18:43 +0100, Thomas Gleixner wrote: > > scsi0 : LSI SAS based MegaRAID driver > > Driver 'sd' needs updating - please use bus_type methods > > scsi 0:0:0:0: Direct-Access ATA SAMSUNG HE160HJ 0-24 PQ: 0 ANSI: 5 > > ------------[ cut here ]------------ > > WARNING: at lib/debugobjects.c:215 debug_print_object+0x4f/0x57() > > ODEBUG: free active object type: timer_list > > That's the cause for your boot crash. The scsi/blk code is freeing a > page which contains an active timer, so the timer code references gone > memory. You triggered it because DEBUG_PAGEALLOC unmaps the page when > it's freed. > > James, or other scsi experts please. > > > Modules linked in: > > Pid: 580, comm: scsi_scan_0 Tainted: G W 2.6.28-rc5-next-20081119 #9 > > Call Trace: > > [<ffffffff80236b28>] warn_slowpath+0xae/0xd5 > > [<ffffffff8037f9e8>] ? debug_check_no_obj_freed+0x75/0x1c8 > > [<ffffffff8037f8b1>] debug_print_object+0x4f/0x57 > > [<ffffffff8037fa0f>] debug_check_no_obj_freed+0x9c/0x1c8 > > [<ffffffff8029c7b2>] kmem_cache_free+0x64/0xc0 > > [<ffffffff8036a6e0>] ? blk_release_queue+0x61/0x66 > > [<ffffffff8036a6e0>] blk_release_queue+0x61/0x66 > > [<ffffffff803760f2>] kobject_release+0x52/0x68 > > [<ffffffff803760a0>] ? kobject_release+0x0/0x68 > > [<ffffffff80376ec5>] kref_put+0x43/0x4f > > [<ffffffff80375ffa>] kobject_put+0x47/0x4b > > [<ffffffff80368c53>] blk_cleanup_queue+0x57/0x5c > > [<ffffffff803f8729>] scsi_free_queue+0x9/0xb > > [<ffffffff803fd3c7>] scsi_device_dev_release_usercontext+0xdc/0x127 > > [<ffffffff803fd2eb>] ? scsi_device_dev_release_usercontext+0x0/0x127 > > [<ffffffff802472a8>] execute_in_process_context+0x2a/0x70 > > [<ffffffff803fd2e9>] scsi_device_dev_release+0x17/0x19 > > [<ffffffff803e03e0>] device_release+0x43/0x68 > > [<ffffffff803760f2>] kobject_release+0x52/0x68 > > [<ffffffff803760a0>] ? kobject_release+0x0/0x68 > > [<ffffffff80376ec5>] kref_put+0x43/0x4f > > [<ffffffff80375ffa>] kobject_put+0x47/0x4b > > [<ffffffff803dfd36>] put_device+0x15/0x17 > > [<ffffffff803fa772>] scsi_destroy_sdev+0x48/0x4c > > [<ffffffff803fba05>] scsi_probe_and_add_lun+0xb5d/0xb81 > > [<ffffffff803faaba>] ? scsi_alloc_target+0x22b/0x267 > > [<ffffffff803fbcb0>] __scsi_scan_target+0x9d/0x598 > > [<ffffffff8025767c>] ? trace_hardirqs_on_caller+0x1f/0x153 > > [<ffffffff804e39a9>] ? __mutex_lock_common+0x371/0x3be > > [<ffffffff803fc2d9>] ? scsi_scan_host_selected+0xb6/0x133 > > [<ffffffff8025767c>] ? trace_hardirqs_on_caller+0x1f/0x153 > > [<ffffffff803fc2d9>] ? scsi_scan_host_selected+0xb6/0x133 > > [<ffffffff803fc1fd>] scsi_scan_channel+0x52/0x78 > > [<ffffffff803fc314>] scsi_scan_host_selected+0xf1/0x133 > > [<ffffffff803fc3c6>] ? do_scan_async+0x0/0x127 > > [<ffffffff803fc3c1>] do_scsi_scan_host+0x6b/0x70 > > [<ffffffff803fc3c6>] ? do_scan_async+0x0/0x127 > > [<ffffffff803fc3dd>] do_scan_async+0x17/0x127 > > [<ffffffff803fc3c6>] ? do_scan_async+0x0/0x127 > > [<ffffffff80249d5d>] kthread+0x49/0x76 > > [<ffffffff8020c899>] child_rip+0xa/0x11 > > [<ffffffff8020bd88>] ? restore_args+0x0/0x30 > > [<ffffffff80249d14>] ? kthread+0x0/0x76 > > [<ffffffff8020c88f>] ? child_rip+0x0/0x11 > > ---[ end trace 4eaa2a86a8e2da22 ]--- Well, not sure. Most likely candidate is the new block timer code. What seems to be happening is that the queue is being released with either an outstanding request (refcounting problem) or ticking timer with no work (block timer problem). The way scanning works is that we create a request queue for each device we probe and then delete it again if nothing appears after the bus settle time. The argument against this is that it should show up on every scanned bus. However, these are getting rarer; I was just about to write that I hadn't seen it when I remembered that all my SCSI testing systems are currently running hotplug reporting busses (i.e. don't do scanning). However, fortunately, I've also booted voyager recently which does use parallel SCSI and doesn't see this either, so it could also be megaraid_sas specific. Could you turn on SCSI logging so we can see the sequences. Probably since this is boot time, just enable all logging: echo 0xffffffff > /sys/module/scsi_mod/parameters/scsi_logging_level (kernel must be compiled with CONFIG_SCSI_LOGGING=y James -- To unsubscribe from this list: send the line "unsubscribe linux-next" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
