Subject: port-mac68k/19824: 1.6L kernel panics at first network connection
To: None <gnats-bugs@gnats.netbsd.org>
From: Hauke Fath <hauke@Espresso.Rhein-Neckar.DE>
List: netbsd-bugs
Date: 01/12/2003 21:57:28
>Number:         19824
>Category:       port-mac68k
>Synopsis:       1.6L kernel panics at first network connection
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    port-mac68k-maintainer
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Jan 12 12:59:00 PST 2003
>Closed-Date:
>Last-Modified:
>Originator:     Hauke Fath <hauke@Espresso.Rhein-Neckar.DE>
>Release:        NetBSD 1.6L
>Organization:
Einzeln auftretender Radfahrer
>Environment:
	NetBSD 1.6L (FG54) #16: Sun Jan 12 15:56:46 CET 2003
    	hauke@q700:/usr/src/sys/arch/mac68k/compile/FG54
	Apple Macintosh Quadra 700  (68040)

Architecture: m68k
Machine: mac68k

>Description:

	The machine runs an X server on the console. After the xdm
	login, the xinitrc script attempts so start a gkrellm on
	another machine via rsh and dies.


>How-To-Repeat:

	Boot Quadra 700 with new kernel, freshly built from 2003-01-12
	sources.  Start a remote gkrellm via rsh.

	The final 'sync' from ddb either locks up or panics the
	machine again.


[serial console output]

Bootstrapping NetBSD/mac68k.
Getting mapping from MMU.
Loaded at 0x0
System RAM: 71303168 bytes in 17408 pages.
     Low = 0x0, high = 0x4400000
On-board video at addr 0xf9000e00 (phys 0xf9000e00), len 0xff200.
Done.
Bootstrapping the pmap system.
Pmap bootstrapped.
Moving ROMBase from 0x40800000 to 0x980000.
Video address 0xf9000e00 -> 0xb80e00.
[ using 355620 bytes of netbsd ELF symbol table ]
Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003
    The NetBSD Foundation, Inc.  All rights reserved.
Copyright (c) 1982, 1986, 1989, 1991, 1993
    The Regents of the University of California.  All rights reserved.

NetBSD 1.6L (FG54) #16: Sun Jan 12 15:56:46 CET 2003
    hauke@q700:/usr/src/sys/arch/mac68k/compile/FG54
Apple Macintosh Quadra 700  (68040)
cpu: delay factor 1056
total memory = 69632 KB
avail memory = 60968 KB
using 896 buffers containing 3584 KB of memory
mrg: 'Mac IIci/Q700 ROMs' ROM glue, tracing off, debug off, silent traps
mrg: I/O map kludge for ROMs that use hardware addresses directly.
mainbus0 (root)
obio0 at mainbus0
esp0 at obio0 (quick): address 0x88f000: NCR53C96, 25MHz, SCSI ID 7
scsibus0 at esp0: 8 targets, 8 luns per target
adb0 at obio0
intvid0 at obio0 @ f9000e00: DAFB video subsystem, monitor sense 0
intvid0: 832 x 624, 256 color
macfb0 at intvid0
wsdisplay0 at macfb0 (kbdmux ignored)
sn0 at obio0: integrated Ethernet adapter
sn0: Ethernet address 08:00:07:8c:7d:2d
iwm0 at obio0: Apple GCR floppy disk controller
fd0 at iwm0 drive 0: (drive empty)
zsc0 at obio0 chip type 0
zsc0 channel 0: d_speed   9600 DCD clk 0 CTS clk 0
zstty0 at zsc0 channel 0 (console i/o)
zsc0 channel 1: d_speed   9600 DCD clk 0 CTS clk 0
zstty1 at zsc0 channel 1
nubus0 at mainbus0
nubus0 slot d: NB-GPIB (Vendor: National Instruments, Part: 776156) Type: 0001 0
000 0000 0000 not configured
macvid0 at nubus0 slot e: Baers color card
macvid0: 1024 x 768, monochrome
macfb1 at macvid0
wsdisplay1 at macfb1 (kbdmux ignored)
fpu0 at mainbus0 (mc68040)
adb0 (direct, II series): 2 targets
aed0 at adb0 addr 0: ADB Event device
akbd0 at adb0 addr 2: extended keyboard
wskbd0 at akbd0 (mux ignored)
ams0 at adb0 addr 3: EMP trackball <LT01> 3-button, 200 dpi
wsmouse0 at ams0 (mux ignored)
scsibus0: waiting 2 seconds for devices to settle...
sd0 at scsibus0 target 0 lun 0: <IBM, DDRS-34560, S97B> disk fixed
sd0: 4357 MB, 8387 cyl, 5 head, 212 sec, 512 bytes/sect x 8925000 sectors
sd0: sync (160.0ns offset 15), 8-bit (6.250MB/s) transfers, tagged queueing
boot device: sd0
root on sd0a dumps on sd0b
time read from PRAM: 0xba4780b5
Date and time: January 12, 2003   20:29:41
PRAM: 0x3e21d035, macos_boottime: 0x3e21d028.
init: copying out flags `-s' 3
init: copying out path `/sbin/init' 11
Enter pathname of shell or RETURN for /bin/sh:
No entry for terminal type "dumb";
using dumb terminal settings.
We recommend creating a non-root account and using su(1) for root access.
# Sun Jan 12 20:30:18 GMT 2003
swapctl: adding /dev/sd0b as swap device at priority 0
Starting file system checks:
/dev/rsd0a: file system is clean; not checking
/dev/rsd0d: file system is clean; not checking
/dev/rsd0e: file system is clean; not checking
/dev/rsd0f: file system is clean; not checking
/dev/rsd0g: file system is clean; not checking
/dev/rsd0h: file system is clean; not checking
Setting tty flags.
Setting sysctl variables:
Starting network.
Hostname: q700
NIS domainname: Waldpark
Configuring network interfaces: sn0.
add net default: gateway 172.16.7.10
Adding interface aliases:
Building databases...
Trimming log files: done.
wsconscfg: WSDISPLAYIO_ADDSCREEN: Cannot allocate memory
wsconscfg: WSDISPLAYIO_ADDSCREEN: Cannot allocate memory
wsconscfg: WSDISPLAYIO_ADDSCREEN: Cannot allocate memory
wsconscfg: WSDISPLAYIO_ADDSCREEN: Cannot allocate memory
Starting syslogd.
syslogd: /var/news/log: No such file or directory
Checking for core dump...
savecore: can't find device 0/0
Jan 12 21:30:42 q700 savecore: can't find device 0/0
Starting rpcbind.
Jan 12 21:30:43 q700 rpcbind: cannot create socket for udp6
Jan 12 21:30:43 q700 rpcbind: cannot create socket for tcp6
Mounting all filesystems...
Clearing /tmp.
Starting amd.
Jan 12 21:30:48 q700 amd[127]/info:  using configuration file /etc/amd.conf
Creating a.out runtime link editor directory cache.
Checking quotas: done.
Starting mountd.
Starting nfsd.
Starting virecover.
Starting local daemons:.
Starting lpd.
Updating motd.
Starting timed.
Starting xdm.
Starting sshd.
Starting inetd.
Starting cron.
Sun Jan 12 21:31:32 CET 2003

NetBSD/mac68k (q700) (tty00)

login: panic: Illegal instruction
Stopped in pid 314 (rcmd) at    cpu_Debugger+0x6:       unlk    a6
db> ps
 PID             PPID       PGRP        UID S   FLAGS          COMMAND    WAIT
 316              265        265        100 3  0x4084         xnodecor nanosle
>Fix:
	No idea.
>Release-Note:
>Audit-Trail:
>Unformatted:
 
 >314                1        265        100 7  0x4104             rcmd
  311                1        265        100 3  0x4184             rcmd  netcon
  308                1        265        100 3  0x4184             rcmd  netcon
  305              303        265        100 2  0x4004   xemacs-21.1.14
  303              265        265        100 3    0x84               sh    wait
  302              265        265        100 3  0x4084              rsh  select
  301              265        265        100 3  0x4084              rsh  select
  300              265        265        100 3  0x4084              rsh  select
  299              265        265        100 3  0x4084            xload  select
  298              265        265        100 3  0x4084           oclock  select
  272              265        265        100 2  0x4084         xconsole
  265              233        265        100 3  0x4084               sh    wait
  262                1        262          0 3  0x4086            getty   ttyin
  259                1        259          0 3    0x84             cron nanosle
  251                1        251          0 3    0x84            inetd  select
  233              218        233          0 3    0x84              xdm    wait
  229              218        229          0 3  0x4084 Xmac68k_elf_colo  select
  225                1        225          0 3    0x84             sshd  select
  218                1        218          0 3    0x85              xdm   pause
  211                1        211          0 3    0x84            timed  select
  187                1        187          0 3    0x84              lpd  select
  163              158        158          0 3    0x84             nfsd    nfsd
  162              158        158          0 3    0x84             nfsd    nfsd
  161              158        158          0 3    0x84             nfsd    nfsd
  160              158        158          0 3    0x84             nfsd    nfsd
  158                1        158          0 3    0x84             nfsd  select
  152                1        152          0 3    0x84           mountd  select
  134                0          0          0 3 0x20284            nfsio  nfsidl
  133                0          0          0 3 0x20284            nfsio  nfsidl
  132                0          0          0 3 0x20284            nfsio  nfsidl
  131                0          0          0 3 0x20284            nfsio  nfsidl
  128                1        128          0 3    0x84              amd  select
  104                1        104          0 3    0x84          rpcbind  select
  90                 1         90          0 2    0x84          syslogd
  6                  0          0          0 3 0x20204         aiodoned aiodone
  5                  0          0          0 3 0x20204          ioflush  syncer
  4                  0          0          0 3 0x20204           reaper  reaper
  3                  0          0          0 3 0x20204       pagedaemon pgdaemo
  2                  0          0          0 3 0x20204         scsibus0  sccomp
  1                  0          1          0 3  0x4084             init    wait
  0                 -1          0          0 3 0x20204          swapper schedul
  315              302        265        100 5  0x2000              rsh
  312              300        265        100 5  0x2000              rsh
  309              301        265        100 5  0x2000              rsh
 db> t
 cpu_Debugger(2104,2,2,a8d4c,8b97e00) + 6
 panic(154f69,100,2,2100,0) + 9e
 trap(2,0,0) + 25c
 fault(?)
 in_setpeeraddr(10d29c0,10d4e00) + c
 tcp_usrreq(10f7a88,5,0,10d4e00,0,0) + 4ec
 soaccept(10f7a88,10d4e00,0,3) + 6a
 sys_accept(8b8e7d4,8b97f44,8b97f3c,8b97fb4,0) + 290
 syscall_plain(1e,8b8e7d4,8b97fb4,5,3) + ba
 syscall(1e) + 44
 trap0() + e
 db> x /I tcp_usrreq + 4d0
 tcp_usrreq+0x4d0:       movl    a2,-(sp)
 tcp_usrreq+0x4d2:       bsrl    in_setsockaddr  [addr:0x12e48 ]
 tcp_usrreq+0x4d8:       addql   #0x8,sp
 tcp_usrreq+0x4da:       brab    <tcp_usrreq+0x502>      [addr:0x1f736 ]
 tcp_usrreq+0x4dc:       movl    d4,d2
 tcp_usrreq+0x4de:       andil   #0x700,d2
 tcp_usrreq+0x4e4:       tstl    a2
 tcp_usrreq+0x4e6:       beqb    <tcp_usrreq+0x502>      [addr:0x1f736 ]
 tcp_usrreq+0x4e8:       movl    d6,-(sp)
 tcp_usrreq+0x4ea:       movl    a2,-(sp)
 tcp_usrreq+0x4ec:       bsrl    in_setpeeraddr  [addr:0x12ea0 ]
 tcp_usrreq+0x4f2:       addql   #0x8,sp
 db> x /I in_setpeeraddr
 in_setpeeraddr: pea     (a6)
 in_setpeeraddr+0x2:     moval   sp,a6
 in_setpeeraddr+0x4:     movl    a2,-(sp)
 in_setpeeraddr+0x6:     moval   0x8(a6),a2
 in_setpeeraddr+0xa:     moval   0xc(a6),a0
 in_setpeeraddr+0xe:     movq    #0x10,d0
 in_setpeeraddr+0x10:    movl    d0,0xc(a0)
 db> show registers
 d0              0x2700  opaop_mask+0x680
 d1                0x5c  VER_41+0x1b
 d2           0x8b97dd4  neg_mask+0xb97dd4
 d3            0x154f69  mem_cdevsw+0x4b1
 d4               0x100  inex1_mask
 d5                   0
 d6                   0
 d7                   0
 a0            0x201000  _end+0x66a94
 a1                 0x1  nmn_unsup_bit
 a2             0xa8d4c  printf
 a3           0x8b8e7d4  neg_mask+0xb8e7d4
 a4           0x10f7a88  snaniop_mask+0xf3a08
 a5                   0
 a6           0x8b97db0  neg_mask+0xb97db0
 sp           0x8b97db0  neg_mask+0xb97db0
 pc             0xf5066  cpu_Debugger+0x6
 sr              0x2100  opaop_mask+0x80
 cpu_Debugger+0x6:       unlk    a6
 db> sync
 syncing disks... Stopped in pid 6 (aiodoned) at  cpu_Debugger+0x6:       unlk
  a6
 db> reboot
 rebooting...