kern/56131: mount WAPBL SCSI disk causes panic

[rokuyama.rk%gmail.com@localhost]

>Number:         56131
>Category:       kern
>Synopsis:       mount WAPBL SCSI disk causes panic
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Apr 26 14:40:01 +0000 2021
>Originator:     Rin Okuyama
>Release:        9.99.82
>Organization:
Department of Physics, Meiji University
>Environment:
NetBSD  9.99.82 NetBSD 9.99.82 (Q840AV) #123: Mon Apr 26 22:10:37 JST 2021  rin@latipes:/sys/arch/mac68k/compile/Q840AV mac68k
>Description:
On my Quadra 840AV (mac68k with esp(4) driver), mount SCSI disk (WAPBL
is enabled) causes panic as follows:

| Enter pathname of shell or RETURN for /bin/sh:
| We recommend that you create a non-root account and use su(1) for root access.
| # mount /
| panic: LIST_INSERT_HEAD 0x9f401c ../../../../kern/subr_pool.c:494
| cpu0: Begin traceback...
| ?(?)
| db_panic(2053d0,31284,0,418fa8,91e5b34) at 0
| vpanic(337b6b,91e5b40,91e5b8c,23de96,337b6b) + 162
| panic(337b6b,9f401c,38266f,1ee,1020) + c
| pool_put(418fa8,9f5910,9f5920,0,9c23e0) + 2e4
| scsipi_put_xs(9f5910,6,9f59a4,91e5ccc,91e5cd0) + e8
| scsipi_execute_xs(9f5910,9c23d8,9f59a4,91e5c42,6) + 2f2
| scsipi_command(c2ad04,91e5c42,6,91e5ccc,17) + 78
| scsipi_mode_sense(c2ad04,8,8,91e5ccc,17,20,4,1770) + 4c
| sd_mode_sense(c18dc0,8,91e5ccc,13,8,20,91e5cc8) + 80
| sdioctl(?)
| bdev_ioctl(0,408,40046474,c749e0,2,c50680) + 1a2
| spec_ioctl(91e5d40,38e684,c0a1e4,40046474,c749e0) + 10a
| VOP_IOCTL(c0a1e4,40046474,c749e0,2,fffffffe) + 38
| wapbl_start(c2703c,c27000,c0a1e4,0,f02e20,7440,200,0,180e5c,180f5e) + 2fc
| ffs_wapbl_start(c27000) + 296
| ffs_mount(?)
| VFS_MOUNT(c27000,ffff9200,9b26a0,91e5efc) + 402
| do_sys_mount(c50680,319f,0,ffff9200,2010000) + 3b4
| sys___mount50(c50680,91e5f38,91e5f30,b,0) + 26
| syscall_plain(19a,c50680,91e5fb4,ffff9200,ffff91f8) + d2
| syscall(19a) + 70
| trap0() + e
| cpu0: End traceback...

This is almost reproducible when fsck is not executed before mount
(even if file system is clean). Running fsck seems to reduce probability
of panic somehow, but not 100%. This panic does not take place if WAPBL
is disabled (``log'' is discarded from fstab/command line).

Also, other mac68k machine (Quadra 800) with other variant of esp(4),
panic does not occur even if WAPBL enabled.

Full dmesg for two machines:

(Quadra Q840AV: panic)
https://dmesgd.nycbug.org/index.cgi?do=view&id=5968

(Quadra Q800: no-panic)
https://dmesgd.nycbug.org/index.cgi?do=view&id=6026
>How-To-Repeat:
Mount WAPBL enabled SCSI disk on Quadra 840AV.
>Fix:
N/A