Comment 9 for bug 238118

Description: Ubuntu 8.04
Release: 8.04

Affected kernel flavors: 2.6.24-19-xen version 3.2.1-rc1-pre (buildd@buildd) (gcc version 4.2.3 (Ubuntu 4.2.3-2ubuntu7)) Fri Apr 11 01:12:53 UTC 2008

Bug remains after patch of Xen kernel!

I installed the kernel from bug #218126 (Ihttp://www.il.is.s.u-tokyo.ac.jp/~hiranotaka/), but experienced crashes of the aic7xxx module. Therefore, I recompiled 2.6.24-19 xen with the above patch. Even little I/O (like starting aptsh) causes the hard lockup. With the original 2.6.24-19-server kernel (without patch) I was not able to provoke the bug. With the Xen kernel it is 100% reproducible. I attached a full console dump from the boot to the crash.

The system is a 2.8 GHz Xeon (single CPU with hyper-threading, 32bit), 512 MB RAM.

Help fixing this bug is highly appreciated.

Timm

root@xenserver2:~# aptsh
Generating and mapping caches...
[ 141.861949] PCI-DMA: Out of SW-IOMMU space for 65536 bytes at device 0000:03:04.0
[ 141.862176] ------------[ cut here ]------------
[ 141.862309] kernel BUG at /home/essigke/linux-2.6.24/debian/build/custom-source-xen/drivers/scsi/aic7xxx/aic79xx_osm.c:1490!
[ 141.862464] invalid opcode: 0000 [#1] SMP
[ 141.862795] Modules linked in: 8021q bridge ipv6 iptable_filter ip_tables x_tables lp loop container serio_raw 8250_pnp button pata_acpi sworks_agp i2c_piix4 evdev 8250 seri
al_core agpgart parport_pc parport i2c_core psmouse pcspkr ext3 jbd mbcache ohci_hcd usbcore sr_mod cdrom sd_mod osst st ch sg pata_serverworks floppy mptfc mptscsih mptbase sc
si_transport_fc scsi_tgt e1000 aic79xx ata_generic tg3 ssb libata aic7xxx scsi_transport_spi scsi_mod dm_mirror dm_snapshot dm_mod thermal processor fan fuse
[ 141.869315]
[ 141.869438] Pid: 51, comm: kblockd/0 Not tainted (2.6.24-19-xen #1)
[ 141.869568] EIP: 0061:[<de9f7951>] EFLAGS: 00010082 CPU: 0
[ 141.869739] EIP is at ahd_linux_queue+0x661/0x670 [aic79xx]
[ 141.869871] EAX: fffffff4 EBX: dbb6dee6 ECX: dd6b4080 EDX: 00000002
[ 141.870003] ESI: dd48acbe EDI: dd73704a EBP: dd56e000 ESP: dbb6de90
[ 141.870134] DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0069
[ 141.870263] Process kblockd/0 (pid: 51, ti=dbb6c000 task=dbb5e270 task.ti=dbb6c000)
[ 141.870398] Stack: dd613bfc dd48ac80 01635dfb 00000000 0003f000 c0208a9d c045f020 0e325bf9
[ 141.871479] 00000021 0e325bf9 dd488ca8 dd48ac80 dd56e000 dade0e48 c0130a67 de8cb6a0
[ 141.872557] dd49f4c0 c049ce80 fffffff4 00000001 00000000 07200000 dd48ac80 00000000
[ 141.873629] Call Trace:
[ 141.873903] [<c0208a9d>] cfq_dispatch_requests+0x6d/0x2f0
[ 141.874151] [<c0130a67>] lock_timer_base+0x27/0x60
[ 141.874389] [<de8cb6a0>] scsi_times_out+0x0/0x80 [scsi_mod]
[ 141.874650] [<de8c7da7>] scsi_dispatch_cmd+0x147/0x280 [scsi_mod]
[ 141.874904] [<de8ce1ac>] scsi_request_fn+0x1fc/0x3e0 [scsi_mod]
[ 141.875155] [<c0138780>] worker_thread+0x0/0xe0
[ 141.875397] [<c0200405>] __generic_unplug_device+0x25/0x30
[ 141.875639] [<c0201265>] generic_unplug_device+0x15/0x50
[ 141.875880] [<c02023a2>] blk_unplug_work+0x42/0xa0
[ 141.876132] [<c0202360>] blk_unplug_work+0x0/0xa0
[ 141.876367] [<c0137c83>] run_workqueue+0x93/0x160
[ 141.876608] [<c0138780>] worker_thread+0x0/0xe0
[ 141.876844] [<c0138804>] worker_thread+0x84/0xe0
[ 141.877080] [<c013bb90>] autoremove_wake_function+0x0/0x40
[ 141.877323] [<c0138780>] worker_thread+0x0/0xe0
[ 141.877558] [<c013b8d2>] kthread+0x42/0x70
[ 141.877796] [<c013b890>] kthread+0x0/0x70
[ 141.878055] [<c0105bb7>] kernel_thread_helper+0x7/0x10
[ 141.878295] =======================
[ 141.878421] Code: ff f6 40 1c 20 0f 84 f2 fe ff ff 80 4f 12 22 c7 40 5c 00 00 00 00 e9 1e fb ff ff 89 54 24 04 c7 04 24 b0 3a a0 de e8 1f ea 72 e1 <0f> 0b eb fe 8d 74 26 00
8d bc 27 00 00 00 00 83 ec 20 89 74 24
[ 141.886713] EIP: [<de9f7951>] ahd_linux_queue+0x661/0x670 [aic79xx] SS:ESP 0069:dbb6de90
[ 141.887159] ---[ end trace 5db331e4a19b0f04 ]---