On Thu, Mar 03, 2022 at 05:15:04PM +0100, Alexander Bluhm wrote:
> Hi,
>
> regress/sys/dev/softraid panics kernel on powerpc64 arm64 arm64.
This was caused by a bad commit to sys/scsi/scsiconf.c .
Backout has fixed snapshots.
> ==== detach ====
> umount /mnt/regress-softraid
> bioctl -d `bioctl softraid0 | awk '/^softraid0/{sd=$5}END{print sd}'`
> Timeout, server ot6 not responding.
>
> WARNING: Do not try this test on your laptop. It may destroy an
> existing crypto softraid.
>
> Introduced with snapshots:
> Thu Mar 3 03:33:01 CET 2022 powerpc64
> Wed Mar 2 18:21:46 MST 2022 amd64
> Wed Mar 2 13:52:46 MST 2022 arm64
>
> sd1 at scsibus2 targ 1 lun 0: <OPENBSD, SR RAID 0, 006>
> sd1: 3299MB, 512 bytes/sector, 6756480 sectors
> sd1 detached
> panic: free: size too small 64 <= 4096 / 2 (0xc0000000110dfaa8) type devbuf
> Stopped at panic+0x134: ori r0,r0,0x0
> TID PID UID PRFLAGS PFLAGS CPU COMMAND
> *324732 11372 0 0x2 0 2K bioctl
> panic+0x134
> free+0x474
> scsi_detach_link+0xa0
> sr_discipline_shutdown+0x178
> sr_bio_handler+0x180
> scsi_do_ioctl+0x108
> sdioctl+0x4e0
> spec_ioctl+0xa0
> VOP_IOCTL+0x6c
> vn_ioctl+0x94
> sys_ioctl+0x324
> syscall+0x384
> trap+0x5dc
> trapagain+0x4
> --- syscall (number 54) ---
> End of kernel: 0xbffffffffffc1e40 lr 0xfee086774b84
>
> sd2 at scsibus5 targ 1 lun 0: <OPENBSD, SR RAID 0, 006>
> sd2: 3299MB, 512 bytes/sector, 6756480 sectors
> sd2 detached
> panic: free: size too small 64 <= 4096 / 2 (0xffff800000d36aa8) type devbuf
> Stopped at db_enter+0x10: popq %rbp
> TID PID UID PRFLAGS PFLAGS CPU COMMAND
> *425671 45938 0 0x2 0 3K bioctl
> db_enter() at db_enter+0x10
> panic(ffffffff81f53a79) at panic+0xbf
> free(ffff800000d36aa8,2,40) at free+0x40d
> scsi_detach_link(ffff800000cfb300,1) at scsi_detach_link+0x7e
> sr_discipline_shutdown(ffff800000d36000,1,0) at sr_discipline_shutdown+0x13e
> sr_bio_handler(ffff80000013f000,ffff800000d36000,c2d04227,ffff800000d12c00)
> at sr_bio_handler+0x1ce
> sdioctl(d22,c2d04227,ffff800000d12c00,3,ffff8000221eafd0) at sdioctl+0x4a6
> VOP_IOCTL(fffffd8212135dd0,c2d04227,ffff800000d12c00,3,fffffd827f7e4900,ffff8000221eafd0)
> at VOP_IOCTL+0x5c
> vn_ioctl(fffffd823d638ca8,c2d04227,ffff800000d12c00,ffff8000221eafd0) at
> vn_ioctl+0x75
> sys_ioctl(ffff8000221eafd0,ffff80002236b300,ffff80002236b350) at
> sys_ioctl+0x2c4
> syscall(ffff80002236b3c0) at syscall+0x374
> Xsyscall() at Xsyscall+0x128
> end of kernel
> end trace frame: 0x7f7fffff8ae0, count: 3
>
> sd3 at scsibus5 targ 1 lun 0: <OPENBSD, SR RAID 0, 006>
> sd3: 3299MB, 512 bytes/sector, 6756480 sectors
> sd3 detached
> panic: free: size too small 64 <= 4096 / 2 (0xffffff800d112aa8) type devbuf
> Stopped at panic+0x160: cmp w21, #0x0
> TID PID UID PRFLAGS PFLAGS CPU COMMAND
> * 2077 25152 0 0x2 0 3K bioctl
> db_enter() at panic+0x15c
> panic() at free+0x408
> free() at scsi_detach_link+0x68
> scsi_detach_link() at sr_discipline_shutdown+0x11c
> sr_discipline_shutdown() at sr_bio_handler+0x184
> sr_bio_handler() at sdioctl+0x42c
> sdioctl() at VOP_IOCTL+0x4c
