10.0 install CD fails in qemu with memory > 256 Mb

Hello!

I was trying to add multiprocessor support  to mac99 machine in qemu [0]

During this effort I tried to boot netbsd 10.0 install cd  but
initially it failed:

/dev/shm/qemu-9.0.0/build/qemu-system-ppc -m 1024 -M mac99,via=3Dpmu
-smp 1  -cdrom ~/ISO/NetBSD-10.0-macppc.iso -bios
/dev/shm/openbios-qemu.elf -boot d -prom-env
'boot-device=3Dcd:,ofwboot.xcf /netbsd.macppc' -nographic

=3D=3D=3D=3D=3D=3D=3D=3D

>> 0x00770361  02 00 60 10 00 00 00 00 80 00 00 00 00 00 00 00  ..`........=
.....
>> 0x00770371  00 08 00 00 __ __ __ __ __ __ __ __ __ __ __ __  ....
[   1.0000000] Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003=
,
[   1.0000000]     2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 20=
13,
[   1.0000000]     2014, 2015, 2016, 2017, 2018, 2019, 2020, 2021, 2022, 20=
23,
[   1.0000000]     2024
[   1.0000000]     The NetBSD Foundation, Inc.  All rights reserved.
[   1.0000000] Copyright (c) 1982, 1986, 1989, 1991, 1993
[   1.0000000]     The Regents of the University of California.  All
rights reserved.

[   1.0000000] NetBSD 10.0 (INSTALL) #0: Thu Mar 28 08:33:33 UTC 2024
[   1.0000000]
[email protected]:/usr/src/sys/arch/macppc/compile/INSTALL
[   1.0000000] total memory =3D 1024 MB
[   1.0000000] oea_startup: failed to allocate DEAD ZONE: error=3D12
[   1.0000000] avail memory =3D 978 MB
>> finddevice("/openprom") =3D [   1.0000000] trap: kernel read DSI trap @ =
0x3fc5a7a0 by 0xfff0bf24 (DSISR 0x40000000, err=3D14), lr 0xfff0bf20
[   1.0000000] panic: trap
[   1.0000000] trap: pid 0.0 (system): kernel ALI trap @ 0x32 by
0x117680 (DSISR 0x40000140)
[   1.0000000] Skipping crash dump on recursive panic
[   1.0000000] panic: trap
[   1.0000000] rebooting

[   1.0000000] trap: kernel read DSI trap @ 0x3fee2000 by 0x39ef80
(DSISR 0x40000000, err=3D14), lr 0x104fb4
[   1.0000000] Skipping crash dump on recursive panic
[   1.0000000] panic: trap
[   1.0000000] rebooting

{repeats a lot}

=3D=3D=3D=3D=3D

but reducing memory to 256 mb (or booting with default 128) gives me a
shell even with my hacked qemu!

 /dev/shm/qemu-9.0.0/build/qemu-system-ppc -m 256  -M mac99,via=3Dpmu
-smp 1  -cdrom ~/ISO/NetBSD-10.0-macppc.iso -boot d -prom-env
'boot-device=3Dcd:,ofwboot.xcf /netbsd.macppc -c ' -nographic  -bios
/dev/shm/openbios-qemu.elf

>> peer(0xfff62ea4) =3D 0xfff6bc94
>> getprop(0xfff6bc94, "name", 0x00770361, 32) =3D 6
>> 0x00770361  75 6e 69 2d 6e 00 __ __ __ __ __ __ __ __ __ __  uni-n.
>> getprop(0xfff6bc94, "reg", 0x00770361, 16) =3D 8
>> 0x00770361  f8 00 00 00 01 00 00 00 __ __ __ __ __ __ __ __  =D1=88.....=
..
>> peer(0xfff6bc94) =3D 0x00000000
[   1.0000000] vmmask 7f000000 schedmask 7f000000 highmask 7f000000
[   1.0396488] WARNING: system needs entropy for security; see entropy(7)
[   1.0396488] uhub0 at usb0: NetBSD (0x0000) OHCI root hub (0x0000),
class 9/0, rev 1.00/1.00, addr 1
[   2.6498367] uhidev0 at uhub0 port 1 configuration 1 interface 0
[   2.6498367] uhidev0: QEMU (0x0627) QEMU USB Keyboard (0x0001), rev
2.00/0.00, addr 2, iclass 3/1
[   2.6598192] ukbd0 at uhidev0
[   2.6598192] wskbd0 at ukbd0 mux 1
[   3.7499202] uhidev1 at uhub0 port 2 configuration 1 interface 0
[   3.7499202] uhidev1: QEMU (0x0627) QEMU USB Mouse (0x0001), rev
2.00/0.00, addr 3, iclass 3/1
[   3.7600592] uhid at uhidev1 not configured
[   4.0499559] atapibus0 at atabus1: 2 targets
[   4.0499559] cd0 at atapibus0 drive 0: <QEMU DVD-ROM, QM00003, 2.5+>
cdrom removable
[   4.0599474] WARNING: 2 errors while detecting hardware; check system log=
.
[   4.0599474] boot device: <unknown>
[   4.0700591] root on md0a dumps on md0b
[   4.0799569] root file system type: ffs
[   4.0799569] kern.module.path=3D/stand/macppc/10.0/modules
erase ^H, werase ^W, kill ^U, intr ^C, status ^T
Terminal type? [vt100] [   6.2302144] entropy: best effort

Erase is backspace.
(I)nstall, (S)hell or (H)alt ? s
# dmesg
[   1.0000000] Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003=
,
[   1.0000000]     2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 20=
13,
[   1.0000000]     2014, 2015, 2016, 2017, 2018, 2019, 2020, 2021, 2022, 20=
23,
[   1.0000000]     2024
[   1.0000000]     The NetBSD Foundation, Inc.  All rights reserved.
[   1.0000000] Copyright (c) 1982, 1986, 1989, 1991, 1993
[   1.0000000]     The Regents of the University of California.  All
rights reserved.

[   1.0000000] NetBSD 10.0 (INSTALL) #0: Thu Mar 28 08:33:33 UTC 2024
[   1.0000000]
[email protected]:/usr/src/sys/arch/macppc/compile/INSTALL
[   1.0000000] total memory =3D 256 MB
[   1.0000000] avail memory =3D 231 MB
[   1.0000000] timecounter: Timecounters tick every 10.000 msec
[   1.0000000] Kernelized RAIDframe activated
[   1.0000000] found openpic PIC at 80040000
[   1.0000000] OpenPIC Version 1.2: Supports 1 CPUs and 64 interrupt source=
s.
[   1.0000000] bootpath:
[   1.0000000] mainbus0 (root)
[   1.0000000] cpu0 at mainbus0: 7400 (Revision 2.9), ID 0 (primary)
[   1.0000000] cpu0: HID0 0x809400a4<EMCP,DOZE,DPM,EIEC,SGE,BTIC,BHT>,
powersave: 1
[   1.0000000] cpu0: 0.00 MHz L2 cache present but not enabled
[   1.0000000] uninorth0 at mainbus0
[   1.0000000] pci0 at uninorth0 bus 0
[   1.0000000] pci0: i/o space, memory space enabled
[   1.0000000] pchb0 at pci0 dev 11 function 0
[   1.0000000] pchb0: vendor 106b product 001f (rev. 0x00)
[   1.0000000] obio0 at pci0 dev 12 function 0: addr 0x80000000
[   1.0000000] obio0: enabling KeyLargo internal modem
[   1.0000000] pmu0 at obio0 offset 0x16000 irq 47:  rev. 1
[   1.0000000] pmu0: initializing RTC
[   1.0000000] pmu0: power-mgt not configured
[   1.0000000] zsc0 at obio0 irq 37,36
[   1.0000000] zstty0 at zsc0 channel 0 (console i/o)
[   1.0000000] zstty1 at zsc0 channel 1
[   1.0000000] wdc0 at obio0 offset 0x20000 irq 13, level triggered:
DMA transfer
[   1.0000000] atabus0 at wdc0 channel 0
[   1.0000000] wdc1 at obio0 offset 0x21000 irq 14, level triggered:
DMA transfer
[   1.0000000] atabus1 at wdc1 channel 0
[   1.0000000] ohci0 at pci0 dev 13 function 0: vendor 106b product
003f (rev. 0x00)
[   1.0000000] ohci0: interrupting at irq 28
[   1.0000000] ohci0: OHCI version 1.0
[   1.0000000] usb0 at ohci0: USB revision 1.0
[   1.0000000] genfb0 at pci0 dev 14 function 0: vendor 1234 product
1111 (rev. 0x02)
[   1.0000000] gem0 at pci0 dev 15 function 0: vendor 106b product
0021 (rev. 0x01)
[   1.0000000] gem0: interrupting at irq 30
[   1.0000000] gem0: autoconfiguration error: cannot reset receiver
[   1.0000000] gem0: autoconfiguration error: cannot reset transmitter
[   1.0000000] bmtphy0 at gem0 phy 0: BCM5201 10/100 media interface, rev. =
0
[   1.0000000] bmtphy0: 100baseTX-FDX, auto
[   1.0000000] gem0: Ethernet address 52:54:00:12:34:56, 20KB RX fifo,
9KB TX fifo
[   1.0000000] vmmask 7f000000 schedmask 7f000000 highmask 7f000000
[   1.0000000] timecounter: Timecounter "mftb" frequency 25000000 Hz qualit=
y 100
[   1.0023133] timecounter: Timecounter "clockinterrupt" frequency 100
Hz quality 0
[   1.0396488] WARNING: system needs entropy for security; see entropy(7)
[   1.0396488] uhub0 at usb0: NetBSD (0x0000) OHCI root hub (0x0000),
class 9/0, rev 1.00/1.00, addr 1
[   1.0496548] uhub0: 3 ports with 3 removable, self powered
[   2.6498367] uhidev0 at uhub0 port 1 configuration 1 interface 0
[   2.6498367] uhidev0: QEMU (0x0627) QEMU USB Keyboard (0x0001), rev
2.00/0.00, addr 2, iclass 3/1
[   2.6598192] ukbd0 at uhidev0
[   2.6598192] wskbd0 at ukbd0 mux 1
[   3.7499202] uhidev1 at uhub0 port 2 configuration 1 interface 0
[   3.7499202] uhidev1: QEMU (0x0627) QEMU USB Mouse (0x0001), rev
2.00/0.00, addr 3, iclass 3/1
[   3.7600592] uhid at uhidev1 not configured
[   4.0499559] atapibus0 at atabus1: 2 targets
[   4.0499559] cd0 at atapibus0 drive 0: <QEMU DVD-ROM, QM00003, 2.5+>
cdrom removable
[   4.0599474] cd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA
mode 5 (Ultra/100)
[   4.0599474] cd0(wdc1:0:0): using PIO mode 4, DMA mode 2 (using DMA)
[   4.0599474] WARNING: 2 errors while detecting hardware; check system log=
.
[   4.0599474] boot device: <unknown>
[   4.0599474] md0: internal 2880 KB image area
[   4.0700591] root on md0a dumps on md0b
[   4.0799569] root file system type: ffs
[   4.0799569] kern.module.path=3D/stand/macppc/10.0/modules
[   4.0899618] WARNING: clock gained 52 days
[   6.2302144] entropy: best effort
# QEMU: Terminated

So, i wonder why cpu0  speed seen as 0 mhz ?
And why  NetBSD 10.0  fails with mem > 256 mb? Does it work on real G4
machines with such mem > 256Mb ?

[0] - https://lists.nongnu.org/archive/html/qemu-ppc/2024-05/msg00527.html