On Sun, Aug 20, 2023 at 12:23:49PM +0200, Stefan Fritsch wrote:
> Am 13.08.23 um 17:38 schrieb Tobias Heider:
> > On Sun, Aug 13, 2023 at 08:33:54AM -0400, Andrew Cagney wrote:
> > > > Hi Andrew,
> > > >
> > > > can you share the qemu cmd you are using in your tests?
> > > > I'd like to see if I can reproduce this.
> > >
> > > Here's pretty much everything. Thanks for looking at it.
> >
> > Thank you, I managed to reproduce your crash.
> > I am not yet sure what the exact problem is but you could try using
> > install73.img > instead of install73.iso. It looks like only the iso
> > triggers the bug
> for me.
>
> -cdrom makes qemu add an ATA cdrom drive. This issue has nothing to do with
> the virtio scsi issue / fix from May.
>
> The "wdc_atapi_start" here
>
> >> --:-- ETAwdc_atapi_start: not ready, st = 50
>
> also points to the problem being related to ATA.
>
That matches what I'm seeing. I can reliably reproduce the crash here.
My debug prints show that xfer->chp seems to be garbage:
wdcstart: xfer: 0xfffffd8016abeea8 xfer->chp: 0xffff80000007f710
wdc_free_xfer: TAILQ_REMOVE(0xfffffd8016abeea8)
wdcstart: xfer: 0xfffffd8016abeea8 xfer->chp: 0xffff80000007f710
wdc_free_xfer: TAILQ_REMOVE(0xfffffd8016abeea8)
wdcstart: xfer: 0xfffffd8016abeea8 xfer->chp: 0x75d4af0594eaf807
in:
887 /* adjust chp, in case we have a shared queue */
888 chp = xfer->chp;
889
890 if ((chp->ch_flags & WDCF_ACTIVE) != 0 ) {
I haven't had time yet to bisect if and find out when and why that happens.
trace:
wdcstart(ffff80000007f710) at wdcstart+0x38 [/usr/src/sys/dev/ic/wdc .c:890]
wdc_atapi_the_machine(ffff80000007f710,fffffd8016abeea8,2) at wdc_atapi_the_mac
hine+0x14a [/usr/src/sys/dev/atapiscsi/atapiscsi.c:640]
wdc_atapi_intr(ffff80000007f710,fffffd8016abeea8,1) at wdc_atapi_intr+0x47
[/usr/src/sys/dev/atapiscsi/atapiscsi.c:550]
wdcintr(ffff80000007f710) at wdcintr+0xae [/usr/g/src/sys/dev/ic/wdc.c :969]
intr_handler(ffff80000aface68,ffff80000006a100) at intr_handler+0x26
[/usr/src/sys/arch/amd64/amd64/intr.c:537]
Xintr_ioapic_edge15_untramp() at Xintr_ioapic_edge15_untramp+0x18f Xspllower()
at Xspllower+0x10
uvm_fault_upper(ffff80000afad0d8,ffff80000afad110,ffff80000afacfd0,0) at uvm_fa
ult_upper+0x1b6 [/usr/src/sys/uvm/uvm_fault.c:1102]
uvm_fault(fffffd801785ee60,29fd78000,0,2) at uvm_fault+0xb4
[/usr/src/sys/uvm/uvm_fault.c:0]
upageflttrap(ffff80000afad230,29fd78da8) at upageflttrap+0x4d
[/usr/src/sys/arch/amd64/amd64/trap.c:189]
usertrap(ffff80000afad230) at usertrap+0xbd
[/usr/src/sys/arch/amd64/amd64/trap.c:436]
