[Bug 1905521] [NEW] assert issue locates in hw/scsi/lsi53c895a.c:624: lsi_do_dma: Assertion `s->current' failed

[Gaoning Pan]

Public bug reported:

Hello,

I found an assertion failure in hw/scsi/lsi53c895a.c:624

This was found in latest version 5.2.0.


my reproduced environment is as follows:
    Host: ubuntu 18.04
    Guest: ubuntu 18.04


QEMU boot command line:
qemu-system-x86_64 -enable-kvm -boot c -m 4G -drive 
format=qcow2,file=./ubuntu.img -nic user,hostfwd=tcp:0.0.0.0:5555-:22 -display 
none -device lsi53c895a -trace lsi\*

Backtrace is as follows:
#0  0x00007f845c6eff47 in __GI_raise (sig=sig@entry=6) at 
../sysdeps/unix/sysv/linux/raise.c:51
#1  0x00007f845c6f18b1 in __GI_abort () at abort.c:79
#2  0x00007f845c6e142a in __assert_fail_base (fmt=0x7f845c868a38 "%s%s%s:%u: 
%s%sAssertion `%s' failed.\n%n", assertion=assertion@entry=0x55a1034486a0 
"s->current", file=file@entry=0x55a103448360 "../hw/scsi/lsi53c895a.c", 
line=line@entry=624, function=function@entry=0x55a10344ae60 
<__PRETTY_FUNCTION__.31674> "lsi_do_dma") at assert.c:92
#3  0x00007f845c6e14a2 in __GI___assert_fail (assertion=0x55a1034486a0 
"s->current", file=0x55a103448360 "../hw/scsi/lsi53c895a.c", line=624, 
function=0x55a10344ae60 <__PRETTY_FUNCTION__.31674> "lsi_do_dma") at 
assert.c:101
#4  0x000055a102049c65 in lsi_do_dma (s=0x62600000c100, out=1) at 
../hw/scsi/lsi53c895a.c:624
#5  0x000055a102051573 in lsi_execute_script (s=0x62600000c100) at 
../hw/scsi/lsi53c895a.c:1250
#6  0x000055a10205b05d in lsi_reg_writeb (s=0x62600000c100, offset=47, val=178 
'\262') at ../hw/scsi/lsi53c895a.c:1984
#7  0x000055a10205fef8 in lsi_io_write (opaque=0x62600000c100, addr=47, 
val=178, size=1) at ../hw/scsi/lsi53c895a.c:2146
#8  0x000055a102d1b791 in memory_region_write_accessor (mr=0x62600000cbe0, 
addr=47, value=0x7f8349dfe2f8, size=1, shift=0, mask=255, attrs=...) at 
../softmmu/memory.c:484
#9  0x000055a102d1bba8 in access_with_adjusted_size (addr=47, 
value=0x7f8349dfe2f8, size=1, access_size_min=1, access_size_max=1, 
access_fn=0x55a102d1b4de <memory_region_write_accessor>, mr=0x62600000cbe0, 
attrs=...) at ../softmmu/memory.c:545
#10 0x000055a102d261ef in memory_region_dispatch_write (mr=0x62600000cbe0, 
addr=47, data=178, op=MO_8, attrs=...) at ../softmmu/memory.c:1494
#11 0x000055a102b57c3c in flatview_write_continue (fv=0x6060000ea920, 
addr=49199, attrs=..., ptr=0x7f8449efb000, len=1, addr1=47, l=1, 
mr=0x62600000cbe0) at ../softmmu/physmem.c:2767
#12 0x000055a102b57f07 in flatview_write (fv=0x6060000ea920, addr=49199, 
attrs=..., buf=0x7f8449efb000, len=1) at ../softmmu/physmem.c:2807
#13 0x000055a102b587cb in address_space_write (as=0x55a105ebca80 
<address_space_io>, addr=49199, attrs=..., buf=0x7f8449efb000, len=1) at 
../softmmu/physmem.c:2899
#14 0x000055a102b58878 in address_space_rw (as=0x55a105ebca80 
<address_space_io>, addr=49199, attrs=..., buf=0x7f8449efb000, len=1, 
is_write=true) at ../softmmu/physmem.c:2909
#15 0x000055a102ad4d50 in kvm_handle_io (port=49199, attrs=..., 
data=0x7f8449efb000, direction=1, size=1, count=1) at 
../accel/kvm/kvm-all.c:2283
#16 0x000055a102ad6a0f in kvm_cpu_exec (cpu=0x62e000000400) at 
../accel/kvm/kvm-all.c:2529
#17 0x000055a102c26fbb in kvm_vcpu_thread_fn (arg=0x62e000000400) at 
../accel/kvm/kvm-cpus.c:49
#18 0x000055a1032c08f8 in qemu_thread_start (args=0x603000082780) at 
../util/qemu-thread-posix.c:521
#19 0x00007f845caa96db in start_thread (arg=0x7f8349dff700) at 
pthread_create.c:463
#20 0x00007f845c7d2a3f in clone () at 
../sysdeps/unix/sysv/linux/x86_64/clone.S:95


The poc is attached.

** Affects: qemu
     Importance: Undecided
     Assignee: Gaoning Pan (hades0506)
         Status: New

** Attachment added: "lsi-assert.c"
   
https://bugs.launchpad.net/bugs/1905521/+attachment/5437756/+files/lsi-assert.c

** Changed in: qemu
     Assignee: (unassigned) => Gaoning Pan (hades0506)

-- 
You received this bug notification because you are a member of qemu-
devel-ml, which is subscribed to QEMU.
https://bugs.launchpad.net/bugs/1905521

Title:
  assert issue locates in hw/scsi/lsi53c895a.c:624: lsi_do_dma:
  Assertion `s->current' failed

Status in QEMU:
  New

Bug description:
  Hello,

  I found an assertion failure in hw/scsi/lsi53c895a.c:624

  This was found in latest version 5.2.0.

  
  my reproduced environment is as follows:
      Host: ubuntu 18.04
      Guest: ubuntu 18.04


  QEMU boot command line:
  qemu-system-x86_64 -enable-kvm -boot c -m 4G -drive 
format=qcow2,file=./ubuntu.img -nic user,hostfwd=tcp:0.0.0.0:5555-:22 -display 
none -device lsi53c895a -trace lsi\*

  Backtrace is as follows:
  #0  0x00007f845c6eff47 in __GI_raise (sig=sig@entry=6) at 
../sysdeps/unix/sysv/linux/raise.c:51
  #1  0x00007f845c6f18b1 in __GI_abort () at abort.c:79
  #2  0x00007f845c6e142a in __assert_fail_base (fmt=0x7f845c868a38 "%s%s%s:%u: 
%s%sAssertion `%s' failed.\n%n", assertion=assertion@entry=0x55a1034486a0 
"s->current", file=file@entry=0x55a103448360 "../hw/scsi/lsi53c895a.c", 
line=line@entry=624, function=function@entry=0x55a10344ae60 
<__PRETTY_FUNCTION__.31674> "lsi_do_dma") at assert.c:92
  #3  0x00007f845c6e14a2 in __GI___assert_fail (assertion=0x55a1034486a0 
"s->current", file=0x55a103448360 "../hw/scsi/lsi53c895a.c", line=624, 
function=0x55a10344ae60 <__PRETTY_FUNCTION__.31674> "lsi_do_dma") at 
assert.c:101
  #4  0x000055a102049c65 in lsi_do_dma (s=0x62600000c100, out=1) at 
../hw/scsi/lsi53c895a.c:624
  #5  0x000055a102051573 in lsi_execute_script (s=0x62600000c100) at 
../hw/scsi/lsi53c895a.c:1250
  #6  0x000055a10205b05d in lsi_reg_writeb (s=0x62600000c100, offset=47, 
val=178 '\262') at ../hw/scsi/lsi53c895a.c:1984
  #7  0x000055a10205fef8 in lsi_io_write (opaque=0x62600000c100, addr=47, 
val=178, size=1) at ../hw/scsi/lsi53c895a.c:2146
  #8  0x000055a102d1b791 in memory_region_write_accessor (mr=0x62600000cbe0, 
addr=47, value=0x7f8349dfe2f8, size=1, shift=0, mask=255, attrs=...) at 
../softmmu/memory.c:484
  #9  0x000055a102d1bba8 in access_with_adjusted_size (addr=47, 
value=0x7f8349dfe2f8, size=1, access_size_min=1, access_size_max=1, 
access_fn=0x55a102d1b4de <memory_region_write_accessor>, mr=0x62600000cbe0, 
attrs=...) at ../softmmu/memory.c:545
  #10 0x000055a102d261ef in memory_region_dispatch_write (mr=0x62600000cbe0, 
addr=47, data=178, op=MO_8, attrs=...) at ../softmmu/memory.c:1494
  #11 0x000055a102b57c3c in flatview_write_continue (fv=0x6060000ea920, 
addr=49199, attrs=..., ptr=0x7f8449efb000, len=1, addr1=47, l=1, 
mr=0x62600000cbe0) at ../softmmu/physmem.c:2767
  #12 0x000055a102b57f07 in flatview_write (fv=0x6060000ea920, addr=49199, 
attrs=..., buf=0x7f8449efb000, len=1) at ../softmmu/physmem.c:2807
  #13 0x000055a102b587cb in address_space_write (as=0x55a105ebca80 
<address_space_io>, addr=49199, attrs=..., buf=0x7f8449efb000, len=1) at 
../softmmu/physmem.c:2899
  #14 0x000055a102b58878 in address_space_rw (as=0x55a105ebca80 
<address_space_io>, addr=49199, attrs=..., buf=0x7f8449efb000, len=1, 
is_write=true) at ../softmmu/physmem.c:2909
  #15 0x000055a102ad4d50 in kvm_handle_io (port=49199, attrs=..., 
data=0x7f8449efb000, direction=1, size=1, count=1) at 
../accel/kvm/kvm-all.c:2283
  #16 0x000055a102ad6a0f in kvm_cpu_exec (cpu=0x62e000000400) at 
../accel/kvm/kvm-all.c:2529
  #17 0x000055a102c26fbb in kvm_vcpu_thread_fn (arg=0x62e000000400) at 
../accel/kvm/kvm-cpus.c:49
  #18 0x000055a1032c08f8 in qemu_thread_start (args=0x603000082780) at 
../util/qemu-thread-posix.c:521
  #19 0x00007f845caa96db in start_thread (arg=0x7f8349dff700) at 
pthread_create.c:463
  #20 0x00007f845c7d2a3f in clone () at 
../sysdeps/unix/sysv/linux/x86_64/clone.S:95

  
  The poc is attached.

To manage notifications about this bug go to:
https://bugs.launchpad.net/qemu/+bug/1905521/+subscriptions