Bug 1167614

Created attachment 961041 [details]
bsod - DRIVER_IRQL_NOT_LESS_OR_EQUAL

Created attachment 961043 [details]
bsod - BAD_POOL_HEADER

Created attachment 961045 [details]
bsod - KMODE_EXCEPTION_NOT_HANDED

not found this bug on intel host now, and met the others bsod in comment 3 and comment 4, not sure whether it's a same issue.

Hit a similar problem IRQL_NOT_LESS_OR_EQUAL （netkvm.sys） when the first reboot during the installation of Win8.1 x86_64.

Should I report a new bug about this?

Package info:
qemu-kvm-1.5.3-81.el7.x86_64
kernel-3.10.0-205.el7.x86_64
virtio-win-prewhql-0.1-94
seabios-1.7.5-6.el7.x86_64

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000009, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
	bit 0 : value 0 = read operation, 1 = write operation
	bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff8037fda389b, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS:  0000000000000009 

CURRENT_IRQL:  2

FAULTING_IP: 
hal!HalPutScatterGatherListV3+1b
fffff803`7fda389b 488b5708        mov     rdx,qword ptr [rdi+8]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  dwm.exe

LAST_CONTROL_TRANSFER:  from fffff8037f76e7e9 to fffff8037f762ca0

SYMBOL_ON_RAW_STACK:  1

STACK_ADDR_RAW_STACK_SYMBOL: fffff80381f7d768

STACK_COMMAND:  dds FFFFF80381F7D768-0x20 ; kb

STACK_TEXT:  
fffff803`81f7d748  00000001
fffff803`81f7d74c  00000000
fffff803`81f7d750  01e87488
fffff803`81f7d754  ffffe000
fffff803`81f7d758  00000001
fffff803`81f7d75c  00000000
fffff803`81f7d760  0377bd44
fffff803`81f7d764  fffff800
fffff803`81f7d768  00000001
fffff803`81f7d76c  00000000
fffff803`81f7d770  00000000
fffff803`81f7d774  00000000
fffff803`81f7d778  7f76d03a
fffff803`81f7d77c  fffff803
fffff803`81f7d780  00000000
fffff803`81f7d784  00000000
fffff803`81f7d788  00c06bc0
fffff803`81f7d78c  ffffe000
fffff803`81f7d790  00e08100
fffff803`81f7d794  ffffe000
fffff803`81f7d798  81f7d780
fffff803`81f7d79c  fffff803
fffff803`81f7d7a0  00000000
fffff803`81f7d7a4  00000000
fffff803`81f7d7a8  01000000
fffff803`81f7d7ac  00001f80
fffff803`81f7d7b0  fffffffc
fffff803`81f7d7b4  00000000
fffff803`81f7d7b8  00c06bc0
fffff803`81f7d7bc  ffffe000
fffff803`81f7d7c0  0078f6c0
fffff803`81f7d7c4  ffffe000


FOLLOWUP_IP: 
netkvm+dd44
fffff800`0377bd44 4053            push    rbx

SYMBOL_NAME:  netkvm+dd44

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: netkvm

IMAGE_NAME:  netkvm.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  546c576e

FAILURE_BUCKET_ID:  X64_0xA_netkvm+dd44

BUCKET_ID:  X64_0xA_netkvm+dd44

Followup: MachineOwner
---------

Host info:
Architecture:          x86_64
CPU op-mode(s):        32-bit, 64-bit
Byte Order:            Little Endian
CPU(s):                4
On-line CPU(s) list:   0-3
Thread(s) per core:    1
Core(s) per socket:    4
Socket(s):             1
NUMA node(s):          1
Vendor ID:             GenuineIntel
CPU family:            6
Model:                 60
Model name:            Intel(R) Xeon(R) CPU E3-1225 v3 @ 3.20GHz
Stepping:              3
CPU MHz:               3574.500
BogoMIPS:              6385.60
Virtualization:        VT-x
L1d cache:             32K
L1i cache:             32K
L2 cache:              256K
L3 cache:              8192K
NUMA node0 CPU(s):     0-3

Created attachment 961548 [details]
screenshot IRQL_NOT_LESS_OR_EQUAL

(In reply to Chengyou Liu from comment #7)
> Hit a similar problem IRQL_NOT_LESS_OR_EQUAL （netkvm.sys） when the first
> reboot during the installation of Win8.1 x86_64.
> 


100% reproducible when auto install with virtio-scsi.
One of the attached is the XML file for auto install.
CML:
/bin/qemu-kvm \
    -S  \
    -name 'virt-tests-vm1'  \
    -sandbox off  \
    -M pc  \
    -nodefaults  \
    -vga qxl  \
    -global qxl-vga.vram_size=33554432 \
    -device intel-hda,bus=pci.0,addr=03 \
    -device hda-duplex  \
    -chardev socket,id=qmp_id_qmpmonitor1,path=/tmp/monitor-qmpmonitor1-20141124-183656-dBm5yFlW,server,nowait \
    -mon chardev=qmp_id_qmpmonitor1,mode=control  \
    -chardev socket,id=serial_id_serial0,path=/tmp/serial-serial0-20141124-183656-dBm5yFlW,server,nowait \
    -device isa-serial,chardev=serial_id_serial0 \
    -device virtio-serial-pci,id=virtio_serial_pci0,bus=pci.0,addr=04  \
    -chardev socket,id=devvs,path=/tmp/virtio_port-vs-20141124-183656-dBm5yFlW,server,nowait \
    -device virtserialport,chardev=devvs,name=vs,id=vs,bus=virtio_serial_pci0.0  \
    -chardev socket,id=seabioslog_id_20141124-183656-dBm5yFlW,path=/tmp/seabios-20141124-183656-dBm5yFlW,server,nowait \
    -device isa-debugcon,chardev=seabioslog_id_20141124-183656-dBm5yFlW,iobase=0x402 \
    -device nec-usb-xhci,id=usb1,bus=pci.0,addr=05 \
    -device virtio-scsi-pci,id=virtio_scsi_pci0,bus=pci.0,addr=06 \
    -drive id=drive_image1,if=none,cache=none,snapshot=off,aio=threads,file=/home/downwin8.qcow2 \
    -device scsi-hd,id=image1,drive=drive_image1 \
    -device virtio-net-pci,mac=9a:5c:5d:5e:5f:60,id=idhfW31x,vectors=4,netdev=idySlvJv,bus=pci.0,addr=07  \
    -netdev tap,id=idySlvJv,vhost=on  \
    -m 8192  \
    -smp 2,maxcpus=2,cores=1,threads=1,sockets=2  \
    -cpu 'SandyBridge',+sep,+kvm_pv_unhalt,hv_relaxed,hv_spinlocks=0x1fff,hv_vapic,hv_time \
    -drive id=drive_cd1,if=none,snapshot=off,aio=threads,media=cdrom,file=/home/autotest-devel/client/tests/virt/shared/data/isos/ISO/Win8.1/en_windows_8_1_enterprise_x64_dvd_2971902.iso \
    -device ide-cd,id=cd1,drive=drive_cd1,bus=ide.0,unit=0 \
    -drive id=drive_winutils,if=none,snapshot=off,aio=threads,media=cdrom,file=/home/autotest-devel/client/tests/virt/shared/data/isos/windows/winutils.iso \
    -device ide-cd,id=winutils,drive=drive_winutils,bus=ide.0,unit=1 \
    -drive id=drive_unattended,if=none,snapshot=off,aio=threads,media=cdrom,file=/home/autotest-devel/client/tests/virt/shared/data/images/win8.1-64/autoinstall.iso \
    -device ide-cd,id=unattended,drive=drive_unattended,bus=ide.1,unit=0 \
    -device usb-tablet,id=usb-tablet1,bus=usb1.0,port=1  \
    -spice port=3000,password=123456 \
    -rtc base=localtime,clock=host,driftfix=slew  \
    -boot order=cdn,once=d,menu=off \
    -enable-kvm \
-monitor stdio

Created attachment 961551 [details]
autoinstall xml

(In reply to Chengyou Liu from comment #9)
> (In reply to Chengyou Liu from comment #7)
> > Hit a similar problem IRQL_NOT_LESS_OR_EQUAL （netkvm.sys） when the first
> > reboot during the installation of Win8.1 x86_64.
> > 
> 
> 
> 100% reproducible when auto install with virtio-scsi.

Didn't hit this with qemu-kvm-1.5.3-81.el7.x86_64 and kernel-3.10.0-201.el7.x86_64.

But hit with qemu-kvm-1.5.3-81.el7.x86_64 and kernel-3.10.0-202.el7.x86_64.

The bug is fixed in commit b07fe167f53e03628c18772ec51b1d5dccce948c

with build94,reboot guest 30+ times,hit 'DRIVER_IRQL_NOT_LESS_OR_EQUAL' once,hit 'KMODE_EXCEPTION_NOT_HANDED' once;
with build102,reboot guest 30+ times,guest works fine,no bsod

change status to verified according to comment#14

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2015-2513.html