Subject: port-mac68k/9679: Using scsi/libscsi lets mac68k sbc driver dump core
To: None <gnats-bugs@gnats.netbsd.org>
From: None <hauke@Espresso.Rhein-Neckar.DE>
List: netbsd-bugs
Date: 03/27/2000 15:02:28
>Number: 9679
>Category: port-mac68k
>Synopsis: Using scsi/libscsi lets mac68k sbc driver dump core
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: port-mac68k-maintainer (NetBSD/mac68k Portmaster)
>State: open
>Class: sw-bug
>Submitter-Id: net
>Arrival-Date: Sun Mar 26 14:42:00 2000
>Last-Modified:
>Originator: Hauke Fath <hauke@Espresso.Rhein-Neckar.DE>
>Organization:
Einzeln auftretender Radfahrer
>Release: NetBSD 1.4V
>Environment:
NetBSD 1.4V (CHUCK) #5: Thu Mar 23 00:27:26 CET 2000
hauke@q700.hf.org:/usr/src/sys/arch/mac68k/compile/CHUCK
Apple Macintosh IIcx (68030)
>Description:
I have ported the FreeBSD /sbin/scsi tool to NetBSD that sits on top
of their libscsi (we have that as a package, and the man page even
references scsi(8) =8> ). There wasn't much to do, and it works just fine
on sparc (esp driver), on mac68k/esp and on mac68k/ncrscsi (although that
has other problems with the DEC disk in question).
The mac68k/sbc driver, on the other hand, locks up hard in multiuser --
I cannot even drop into the kernel debugger. In single user, I get a panic.
-----------------------------------------------------------------------
# $Id: CHUCK,v 1.1 2000/03/19 22:00:01 hauke Exp hauke $
#
# Kernel definition for Macintosh IIcx (IIsi?)
#
# derived from $NetBSD: GENERIC,v 1.98 2000/02/29 06:32:25 simonb Exp $
include "arch/mac68k/conf/std.mac68k"
#ident "GENERIC-$Revision: 1.1 $"
maxusers 16 # estimated number of users
makeoptions COPTS="-pipe -m68030"
makeoptions DEBUG="-g" # compile full symbol table
# CPU support. At least one is REQUIRED.
options M68030
# Standard system options
options RTC_OFFSET=0 # hardware clock is this many mins. west of GMT
options NTP # NTP phase/frequency locked loop
options KTRACE # system call tracing via ktrace(1)
options SYSVMSG # System V-like message queues
options SYSVSEM # System V-like semaphores
options SYSVSHM # System V-like memory sharing
#options SHMMAXPGS=1024 # 1024 pages is the default
# Diagnostic/debugging support options
options DIAGNOSTIC # cheap kernel consistency checks
options DEBUG # expensive debugging checks/support
options KMEMSTATS # kernel memory statistics (vmstat -m)
options DDB # in-kernel debugger
options DDB_HISTORY_SIZE=200 # enable history editing in DDB
# Compatibility options
options COMPAT_13 # NetBSD 1.3,
options COMPAT_14 # NetBSD 1.4,
options COMPAT_43 # and 4.3BSD
# File systems
file-system FFS # UFS
file-system MFS # memory file system
file-system NFS # Network File System client
file-system KERNFS # /kern
file-system PROCFS # /proc
# File system options
options QUOTA # UFS quotas
#options SOFTDEP # FFS soft updates support.
#options NFSSERVER # Network File System server
# Pull in config fragments for kernel crypto. This is required for
# options IPSEC etc. to work. If you want to run with IPSEC, uncomment
# one of these, based on whether you use crypto-us or crypto-intl, and
# adjust the prefixes as necessary.
#prefix ../crypto-intl/sys
#cinclude "conf/files.crypto-intl"
#prefix
# Networking options
#options GATEWAY # packet forwarding
options INET # IP + ICMP + TCP + UDP
# These options enable verbose messages for several subsystems.
# Warning, these may compile large string tables into the kernel!
options SCSIVERBOSE # human readable SCSI error messages
# wscons options
options WSEMUL_VT100 # VT100 / VT220 emulation
options WSDISPLAY_COMPAT_ITEFONT # use ite font (6x10)
# rcons options; note that 1-bit and 8-bit displays are supported by default.
options RCONS_2BPP # Support for 2-bit display
options RCONS_4BPP # Support for 4-bit display
# Mac-specific options
options GRF_COMPAT # Include grf compatibility code
#options MRG_ADB # Use ROM-based ADB driver
options NFS_BOOT_BOOTP
# Kernel root file system and dump configuration.
config netbsd root on ? type ffs
#
# Device configuration
#
mainbus0 at root
fpu0 at mainbus? # Floating-Point Coprocessor support
# Basic Bus Support
# On-board I/O bus support
obio0 at mainbus?
# NuBus support
nubus0 at mainbus?
# Console Devices
# Apple Desktop Bus interface
adb0 at obio?
aed* at adb? # ADB event device
akbd* at adb? # ADB keyboard
ams* at adb? # ADB mouse
# Basic frame buffer support
intvid0 at obio? # Internal video hardware
macvid* at nubus? # NuBus video card
# Device-independent frame buffer interface
macfb* at intvid?
macfb* at macvid?
# Workstation Console devices
wsdisplay0 at macfb? console ?
wskbd0 at akbd? console ?
wsmouse0 at ams?
# Serial Devices
# On-board serial interface
zsc0 at obio?
zstty* at zsc? channel ?
# SCSI Controllers and Devices
options SCSIDEBUG
options SBC_DEBUG
# SCSI Controllers and Devices
# SBC_PDMA 0x01 /* Use PDMA for polled transfers */
# SBC_INTR 0x02 /* Allow SCSI IRQ/DRQ interrupts */
# SBC_RESELECT 0x04 /* Allow disconnect/reselect */
sbc0 at obio? flags 0x1 # MI SCSI NCR 5380
# Not with DEC DSP3107LS
#ncrscsi0 at obio? # SCSI NCR 5380
# SCSI bus support
scsibus* at scsi?
# SCSI devices
sd* at scsibus? target ? lun ? # SCSI disk drives
# Miscellaneous mass storage devices
# IWM floppy disk controller
iwm0 at obio? # Sony driver (800K GCR)
fd* at iwm? drive ?
# Network Interfaces
# NuBus Ethernet controllers
ae* at nubus? # DP8390-based
# Audio Devices
# On-board audio hardware
asc0 at obio? # ASC/EASC audio
# Pseudo-Devices
# network pseudo-devices
pseudo-device bpfilter 12 # Berkeley packet filter
pseudo-device loop # network loopback
# miscellaneous pseudo-devices
pseudo-device grf 2 # grf emulation for wscons
pseudo-device ite 1 # ite emulation for wscons
pseudo-device pty 64 # pseudo-terminals
pseudo-device rnd # /dev/random and in-kernel generator
-----------------------------------------------------------------------
>How-To-Repeat:
Install the devel/libscsi package, get scsi from
<http://www.tangro.de/~hf/macbsd/scsi.tar.gz>
Boot to single user, mount partitions read-only,
try to read a mode page
# mount -r -a
# df
Filesystem 1K-blocks Used Avail Capacity Mounted on
/dev/sd0a 29330 18096 9767 64% /
mfs:14 9647 1 9163 0% /tmp
/dev/sd0e 204263 13724 180325 7% /var
/dev/sd0g 297871 89069 193908 31% /usr
/dev/sd0f 93505 13927 74902 15% /home
/dev/sd0h 251136 36000 202579 15% /local
# whereis scsi
/usr/local/sbin/scsi
# scsi -f /dev/rsd1c -m8 -P3 -v
sd1(sbc0:2:0): sdopen: dev=0xd0a (unit 1 (of 4), partition 2)
sd1(sbc0:2:0): scsi_scsipi_cmd
sd1(sbc0:2:0): scsipi_get_xs
sd1(sbc0:2:0): calling pool_get
sd1(sbc0:2:0): returning
scsipi_exec_cmd: xs(0x3ec000): xs_control(0x000001c0)xs_status(0x00000000)sc_lin
k(0x3dd480)retr(0x4)timo(0x2710)cmd(0x3ec068)len(0x6)data(0x0)len(0x0)res(0x0)er
r(0x0)bp(0x0)sd1(sbc0:2:0): command: 0x0,0x0,0x0,0x0,0x0,0x0-[0 bytes]
sd1(sbc0:2:0): scsipi_done
sd1(sbc0:2:0): command: 0x0,0x0,0x0,0x0,0x0,0x0-[0 bytes]
sd1(sbc0:2:0): back in cmd()
sd1(sbc0:2:0): sc_err1,err = 0x0
sd1(sbc0:2:0): scsipi_free_xs
sd1(sbc0:2:0): calling private start()
sd1(sbc0:2:0): sdstart sd1(sbc0:2:0): scsi_scsipi_cmd
sd1(sbc0:2:0): scsipi_get_xs
sd1(sbc0:2:0): calling pool_get
sd1(sbc0:2:0): returning
scsipi_exec_cmd: xs(0x3ec000): xs_control(0x000001a0)xs_status(0x00000000)sc_lin
k(0x3dd480)retr(0x4)timo(0xea60)cmd(0x3ec068)len(0x6)data(0x0)len(0x0)res(0x0)er
r(0x0)bp(0x0)sd1(sbc0:2:0): command: 0x1b,0x0,0x0,0x0,0x1,0x0-[0 bytes]
sd1(sbc0:2:0): scsipi_done
sd1(sbc0:2:0): command: 0x1b,0x0,0x0,0x0,0x1,0x0-[0 bytes]
sd1(sbc0:2:0): back in cmd()
sd1(sbc0:2:0): sc_err1,err = 0x0
sd1(sbc0:2:0): scsipi_free_xs
sd1(sbc0:2:0): calling private start()
sd1(sbc0:2:0): sdstart sd1(sbc0:2:0): scsi_scsipi_cmd
sd1(sbc0:2:0): scsipi_get_xs
sd1(sbc0:2:0): calling pool_get
sd1(sbc0:2:0): returning
scsipi_exec_cmd: xs(0x3ec000): xs_control(0x00000180)xs_status(0x00000000)sc_lin
k(0x3dd480)retr(0x4)timo(0x1388)cmd(0x3ec068)len(0x6)data(0x0)len(0x0)res(0x0)er
r(0x0)bp(0x0)sd1(sbc0:2:0): command: 0x1e,0x0,0x0,0x0,0x1,0x0-[0 bytes]
sd1(sbc0:2:0): scsipi_done
sd1(sbc0:2:0): command: 0x1e,0x0,0x0,0x0,0x1,0x0-[0 bytes]
sd1(sbc0:2:0): back in cmd()
sd1(sbc0:2:0): sc_err1,err = 0x1
code 0x70 valid 0x0 seg 0x0 key 0x5 ili 0x0 eom 0x0 fmark 0x0
info: 0x0 0x0 0x0 0x0 followed by 10 extra bytes
extra: 0x0 0x0 0x0 0x0 0x20 0x0 0x0 0x0 0x0 0x0
sd1(sbc0:2:0): calling private err_handler()
sd1(sbc0:2:0): scsipi_interpret_sense returned 0
sd1(sbc0:2:0): scsipi_free_xs
sd1(sbc0:2:0): calling private start()
sd1(sbc0:2:0): sdstart sd1(sbc0:2:0): scsi_scsipi_cmd
sd1(sbc0:2:0): scsipi_get_xs
sd1(sbc0:2:0): calling pool_get
sd1(sbc0:2:0): returning
scsipi_exec_cmd: xs(0x3ec000): xs_control(0x00000820)xs_status(0x00000000)sc_lin
k(0x3dd480)retr(0x4)timo(0x1770)cmd(0x3ec068)len(0x6)data(0x71cd30)len(0x2c)res(
0x2c)err(0x0)bp(0x0)sd1(sbc0:2:0): command: 0x1a,0x0,0x4,0x0,0x20,0x0-[44 bytes]
------------------------------
000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
016: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
032: 00 00 00 00 00 00 00 00 00 00 00 00
------------------------------
sd1(sbc0:2:0): scsipi_done
sd1(sbc0:2:0): command: 0x1a,0x0,0x4,0x0,0x20,0x0-[44 bytes]
------------------------------
000: 1f 00 00 08 00 07 50 76 00 00 02 00 04 12 00 07
016: 1a 04 00 07 1a 00 07 1a 00 00 00 00 00 00 00 00
032: 00 00 00 00 00 00 00 00 00 00 00 00
------------------------------
sd1(sbc0:2:0): back in cmd()
sd1(sbc0:2:0): sc_err1,err = 0x0
sd1(sbc0:2:0): scsipi_free_xs
sd1(sbc0:2:0): calling private start()
sd1(sbc0:2:0): sdstart sd1(sbc0:2:0): 1818 cyls, 4 heads, 7 precomp, 7 red_write
, 0 land_zone
sd1(sbc0:2:0): scsi_scsipi_cmd
sd1(sbc0:2:0): scsipi_get_xs
sd1(sbc0:2:0): calling pool_get
sd1(sbc0:2:0): returning
scsipi_exec_cmd: xs(0x3ec000): xs_control(0x00000800)xs_status(0x00000000)sc_lin
k(0x3dd480)retr(0x4)timo(0x4e20)cmd(0x3ec068)len(0xa)data(0x71cd00)len(0x8)res(0
x8)err(0x0)bp(0x0)sd1(sbc0:2:0): command: 0x25,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0
x0-[8 bytes]
------------------------------
000: 00 11 70 2c 00 00 07 1a
------------------------------
sd1(sbc0:2:0): scsipi_done
sd1(sbc0:2:0): command: 0x25,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0-[8 bytes]
------------------------------
000: 00 07 50 75 00 00 02 00
------------------------------
sd1(sbc0:2:0): back in cmd()
sd1(sbc0:2:0): sc_err1,err = 0x0
sd1(sbc0:2:0): scsipi_free_xs
sd1(sbc0:2:0): calling private start()
sd1(sbc0:2:0): sdstart sd1(sbc0:2:0): Params loaded sd1(sbc0:2:0): sdstrategy sd
1(sbc0:2:0): 512 bytes @ blk 0
sd1(sbc0:2:0): sdstart sd1(sbc0:2:0): scsi_scsipi_cmd
sd1(sbc0:2:0): scsipi_get_xs
sd1(sbc0:2:0): calling pool_get
sd1(sbc0:2:0): returning
scsipi_exec_cmd: xs(0x3ec000): xs_control(0x00000809)xs_status(0x00000000)sc_lin
k(0x3dd480)retr(0x4)timo(0xea60)cmd(0x3ec068)len(0x6)data(0x1400000)len(0x200)re
s(0x200)err(0x0)bp(0x6e9ad4)sd1(sbc0:2:0): command: 0x8,0x0,0x0,0x0,0x1,0x0-[512
bytes]
------------------------------
000: 50 4d 00 00 00 00 00 07 00 00 00 01 00 00 00 3f
016: 41 70 70 6c 65 00 00 00 00 00 00 00 00 00 00 00
032: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
048: 41 70 70 6c 65 5f 70 61 72 74 69 74 69 6f 6e 5f
------------------------------
sd1(sbc0:2:0): scsipi_done
sd1(sbc0:2:0): command: 0x8,0x0,0x0,0x0,0x1,0x0-[512 bytes]
------------------------------
000: 45 52 02 00 00 07 50 76 00 01 00 01 00 00 00 00
016: 00 01 00 00 00 40 00 13 00 01 00 00 00 00 00 00
032: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
048: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
------------------------------
sd1(sbc0:2:0): sc_err1,err = 0x0
sd1(sbc0:2:0): scsipi_free_xs
sd1(sbc0:2:0): calling private start()
sd1(sbc0:2:0): sdstart sd1(sbc0:2:0): sdstrategy sd1(sbc0:2:0): 16384 bytes @ bl
k 1
sd1(sbc0:2:0): sdstart sd1(sbc0:2:0): scsi_scsipi_cmd
sd1(sbc0:2:0): scsipi_get_xs
sd1(sbc0:2:0): calling pool_get
sd1(sbc0:2:0): returning
scsipi_exec_cmd: xs(0x3ec000): xs_control(0x00000809)xs_status(0x00000000)sc_lin
k(0x3dd480)retr(0x4)timo(0xea60)cmd(0x3ec068)len(0x6)data(0x1760000)len(0x4000)r
es(0x4000)err(0x0)bp(0x6eb4fc)sd1(sbc0:2:0): command: 0x8,0x0,0x0,0x1,0x20,0x0-[
16384 bytes]
------------------------------
000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
016: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
032: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
048: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
------------------------------
sd1(sbc0:2:0): scsipi_done
sd1(sbc0:2:0): command: 0x8,0x0,0x0,0x1,0x20,0x0-[16384 bytes]
------------------------------
000: 50 4d 00 00 00 00 00 07 00 00 00 01 00 00 00 3f
016: 41 70 70 6c 65 00 00 00 00 00 00 00 00 00 00 00
032: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
048: 41 70 70 6c 65 5f 70 61 72 74 69 74 69 6f 6e 5f
------------------------------
sd1(sbc0:2:0): sc_err1,err = 0x0
sd1(sbc0:2:0): scsipi_free_xs
sd1(sbc0:2:0): calling private start()
sd1(sbc0:2:0): sdstart sd1(sbc0:2:0): Disklabel loaded sd1(sbc0:2:0): open compl
ete
sd1(sbc0:2:0): sdioctl 0xc05e5101 sd1(sbc0:2:0): scsipi_do_ioctl(0xc05e5101)
sd1(sbc0:2:0): user_strategy
sd1(sbc0:2:0): scsi_scsipi_cmd
sd1(sbc0:2:0): scsipi_get_xs
sd1(sbc0:2:0): calling pool_get
sd1(sbc0:2:0): returning
scsipi_exec_cmd: xs(0x3ec000): xs_control(0x00000818)xs_status(0x00000000)sc_lin
k(0x3dd480)retr(0x0)timo(0x7d0)cmd(0x3ec068)len(0x6)data(0x2000c18)len(0xff)res(
0xff)err(0x0)bp(0x3f3808)sd1(sbc0:2:0): command: 0x1a,0x0,0xc8,0x0,0xff,0x0-[255
bytes]
------------------------------
000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
016: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
032: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
048: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
------------------------------
trap type 0, code = 0x75d, v = 0x8c9003
kernel program counter = 0x119ef4
kernel: Bus error trap
pid = 22, pc = 00119EF4, ps = 2200, sfc = 1, dfc = 1
Registers:
0 1 2 3 4 5 6 7
dreg: 00000000 00000000 0000007F 00002214 00000000 00000009 00000001 00000000
areg: 02000C1C 008C9000 008D3020 003F3808 0071CEAC 0005827E 0071CB40 FFFFCB70
Kernel stack (0071CA20):
71CA20: 0012EE50 0071CA7C 00000080 0000007F 00002214 008D3020 00002204 00002204
71CA40: 0071CA6C 001113A0 006EA500 00000000 00000000 00000000 00000000 00002204
71CA60: 00000000 006F3640 0071CB40 00003086 00000000 0000075D 008C9003 00000000
71CA80: 00000000 0000007F 00002214 00000000 00000009 00000001 00000000 02000C1C
71CAA0: 008C9000 008D3020 003F3808 0071CEAC 0005827E 0071CB40 FFFFCB70 00000000
71CAC0: 22000011 9EF4B008 1EEE075D 58AE0014 008C9003 02000C1C 02000C1C 20912091
71CAE0: 00119EFA 00119EF8 00119EF6 00000000 58AEFF04 000FF481 02000C1C 008C7002
71CB00: 00000048 00000048 20200000 0071CB38 00000000 00000818 0071CB14 00000001
71CB20: 00000078 00119DD8 00002214 00002214 000000FF 008D5000 008C9000 003E2800
71CB40: 0071CB70 00008374 003E2800 00000001 000000FF 02000C1C 00000007 003DD480
71CB60: 00000000 00000001 003EC000 003E28F6 0071CB9C 00008738 003E2800 00000001
71CB80: 00001E00 003DD480 002DC5AE 00000001 00000000 003EC000 003E28F6 0071CBCC
71CBA0: 00006FD8 003E2800 FFFFFFFF 003E28F6 003DD480 00000078 00000000 00000000
71CBC0: 00000002 003EC000 003E28F6 0071CC00 000067BA 003E2800 00000008 003F38AC
71CBE0: 000065DC 00002004 00000818 00000000 00000000 00002004 003E28F6 003E2800
71CC00: 0071CC28 001114D2 003EC000 00000000 003F38AC 003DD480 00000006 02000C18
panic: Bus error
Stopped in scsi at _cpu_Debugger+0x6: unlk a6
db> t
_cpu_Debugger(71ca2c,100,71ca68,12ee7e,12e97d) + 6
_panic(12e97d) + 56
_trap(0,75d,8c9003) + 2b6
_sbc_pdma_in(3e2800,1,ff,2000c1c) + 11c
_ncr5380_data_xfer(3e2800,1) + 20c
_ncr5380_machine(3e2800) + 182
_ncr5380_sched(3e2800) + 40e
_ncr5380_scsi_cmd(3ec000) + 1da
_scsipi_execute_xs(3ec000) + 90
_scsi_scsipi_cmd(3dd480,3f38b4,6,2000c18,ff,0,7d0,3f3808,818) + 14a
_scsistrategy(3f3808) + 188
_physio(11249c,3f3808,d0a,100000,1c04c,3f3884) + 2fa
_scsipi_do_ioctl(3dd480,d0a,c05e5101,71ceac,3,6f3640) + 1d2
_sdioctl(d0a,c05e5101,71ceac,3,6f3640) + 552
_spec_ioctl(71cdc0) + 8c
_VOP_IOCTL(7100d0,c05e5101,71ceac,3,3ddf00,6f3640) + 5a
_vn_ioctl(70c060,c05e5101,71ceac,6f3640) + d4
_sys_ioctl(6f3640,71cf6c,71cf64) + 338
_syscall(36) + 1b4
_trap0() + e
db> ps
PID PPID PGRP UID S FLAGS COMMAND WAIT
>Fix:
None.
>Audit-Trail:
>Unformatted:
>22 5 22 0 2 0x4006 scsi
14 1 14 0 3 0x84 mount_mfs mfsidl
5 1 5 0 3 0x4086 sh wait
4 0 0 0 3 0x20204 ioflush syncer
3 0 0 0 3 0x20204 reaper reaper
2 0 0 0 3 0x20204 pagedaemon daemon_
1 0 1 0 3 0x4084 init wait
0 -1 0 0 3 0x20204 swapper schedul
db> x /i _sbc_pdma_in + 100
_sbc_pdma_in+0x100: beqb <_sbc_pdma_in+0x106> [addr:0x119ede ]
_sbc_pdma_in+0x102: braw <_sbc_pdma_in+0x2fe> [addr:0x11a0d6 ]
_sbc_pdma_in+0x106: moval a6@(0x14),a0
_sbc_pdma_in+0x10a: moval a6@(-0x8),a1
_sbc_pdma_in+0x10e: movl a1@,a0@
_sbc_pdma_in+0x110: addql #0x4,a6@(0x14)
_sbc_pdma_in+0x114: moval a6@(0x14),a0
_sbc_pdma_in+0x118: moval a6@(-0x8),a1
_sbc_pdma_in+0x11c: movl a1@,a0@
_sbc_pdma_in+0x11e: addql #0x4,a6@(0x14)
_sbc_pdma_in+0x122: moval a6@(0x14),a0
_sbc_pdma_in+0x126: moval a6@(-0x8),a1
_sbc_pdma_in+0x12a: movl a1@,a0@
_sbc_pdma_in+0x12c: addql #0x4,a6@(0x14)
_sbc_pdma_in+0x130: moval a6@(0x14),a0
db> c
syncing disks... done
NetBSD/mac68k does not trust itself to update the RTC on shutdown.
dumping to dev 4,1 offset 142120
dump sbc0: polled request aborting 2/0
sbc0: no REQ while aborting, reset
sbc0: reset SCSI bus for TID=2 LUN=0
sd1(sbc0:2:0): scsipi_done
sd1(sbc0:2:0): command: 0x1a,0x0,0xc8,0x0,0xff,0x0-[255 bytes]
------------------------------
000: 17 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00
016: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
032: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
048: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
------------------------------
sd1(sbc0:2:0): calling user done()
sd1(sbc0:2:0): user-done
sd1(sbc0:2:0): timeout
sd1(sbc0:2:0): returned from user done()
sd1(sbc0:2:0): scsipi_free_xs
sd1(sbc0:2:0): calling private start()
sd1(sbc0:2:0): sdstart sd1(sbc0:2:0): returning to adapter
1 2 3 4 5 6 7 succeeded
rebooting...
-- I can provide the coredump as well as the kernel image, but -current
mac68k gdb fails miserably on kcore.
(available in <http://www.tangro.de/~hf/macbsd/> )
Note the kernel was built without optimization.