kern/43873: wscons borken

[eeh%netbsd.org@localhost]

>Number:         43873
>Category:       kern
>Synopsis:       wscons borken
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Sep 13 15:50:00 +0000 2010
>Originator:     Eduardo Horvath
>Release:        NetBSD 5.99.39
>Organization:
        
>Environment:
NetBSD 5.99.39 (GENERIC) #2: Sun Sep 12 18:18:51 PDT 2010
        
eh29855@nonplus:/net/10.0.0.101/export/home2/work/origsrc/sys/arch/sparc64/compile/GENERIC
Architecture: sparc64
Machine: sparc64
>Description:
        If you are using a serial console and have a display adaper insalled 
wscons insists on being
        the console device and panics:

Resetting ... 


Sun Ultra 2 UPA/SBus (2 X UltraSPARC 200MHz), No Keyboard
OpenBoot 3.7, 512 MB memory installed, Serial #8745945.
Ethernet address 8:0:20:85:73:d9, Host ID: 808573d9.



Rebooting with command: boot disk:d /netbsd.test                      
Boot device: /sbus/SUNW,fas@e,8800000/sd@0,0:d  File and args: /netbsd.test
NetBSD IEEE 1275 Multi-FS Bootblock
Version $NetBSD: bootblk.fth,v 1.13 2010/06/24 00:54:12 eeh Exp $
>> NetBSD/sparc64 OpenFirmware Boot, Revision 1.15
=0x858980
Loading /netbsd.test: 7644608+362816+445648 [574680+371215]=0x9acc38
Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005,
    2006, 2007, 2008, 2009, 2010
    The NetBSD Foundation, Inc.  All rights reserved.
Copyright (c) 1982, 1986, 1989, 1991, 1993
    The Regents of the University of California.  All rights reserved.

NetBSD 5.99.39 (GENERIC) #2: Sun Sep 12 18:18:51 PDT 2010
        
eh29855@nonplus:/net/10.0.0.101/export/home2/work/origsrc/sys/arch/sparc64/compile/GENERIC
total memory = 512 MB
avail memory = 489 MB
mainbus0 (root): SUNW,Ultra-2 (Sun Ultra 2 UPA/SBus): hostid 808573d9
cpu0 at mainbus0: SUNW,UltraSPARC @ 200 MHz, UPA id 0
cpu0: 16K instruction (32 b/l), 16K data (32 b/l), 1024K external (64 b/l)
cpu1 at mainbus0: SUNW,UltraSPARC @ 200 MHz, UPA id 1
cpu1: 16K instruction (32 b/l), 16K data (32 b/l), 1024K external (64 b/l)
timer0 at mainbus0 addr 0xfffc1c00 irq vectors 7f0
sbus0 at mainbus0 addr 0xfffcc000: clock = 25 MHz
audiocs0 at sbus0 slot 13 offset 0xc000000 vector 24 ipl 8: CS4231A
audio0 at audiocs0: full duplex, playback, capture
auxio0 at sbus0 slot 15 offset 0x1900000
flashprom at sbus0 slot 15 offset 0x0 not configured
fdc0 at sbus0 slot 15 offset 0x1400000 vector 29 ipl 11: no drives attached
clock0 at sbus0 slot 15 offset 0x1200000: mk48t59
zs0 at sbus0 slot 15 offset 0x1100000 vector 28 ipl 12zstty0 at zs0 channel 0 
(console i/o)
zstty1 at zs0 channel 1
zs1 at sbus0 slot 15 offset 0x1000000 vector 28 ipl 12zstty2 at zs1 channel 0
kbd0 at zstty2
zstty3 at zs1 channel 1
ms0 at zstty3
wsmouse0 at ms0 mux 0
sc at sbus0 slot 15 offset 0x1300000 not configured
SUNW,pll at sbus0 slot 15 offset 0x1304000 not configured
esp0 at sbus0 slot 14 offset 0x8800000 vector 20 ipl 3: FAS366/HME, 40MHz, SCSI 
ID 7
scsibus0 at esp0: 16 targets, 8 luns per target
hme0 at sbus0 slot 14 offset 0x8c00000 vector 21 ipl 6: Sun Happy Meal Ethernet 
(SUNW,hme)
hme0: Ethernet address 08:00:20:85:73:d9
nsphy0 at hme0 phy 1: DP83840 10/100 media interface, rev. 0
nsphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
bpp0 at sbus0 slot 14 offset 0xc800000 vector 22 ipl 2: DMA rev unknown 
(0x20000000)
cgsix0 at sbus0 slot 2 offset 0x0 vector 5 ipl 5: SUNW,501-2253, 1152 x 900, 
rev 11
cgsix0: attached to /dev/fb0
cgsix0: framebuffer size: 2 MB
wsdisplay1 at cgsix0 kbdmux 1
text_access_fault: pc=0 va=0
kernel trap 64: +fast instruction access MMU miss
Stopped in pid 0.1 (system) at  0:      undefined
db{0}> tr
wsemul_vt100_attach(2565800, 18153b8, 2565a00, 0, 0, 255b7c0) at netbsd:wsemul_v
t100_attach+0x3c
wsscreen_attach(255b7c0, 255b780, 0, 18153b8, 2565a00, 0) at netbsd:wsscreen_att
ach+0x100
wsdisplay_addscreen(baeb400, 0, 18153b8, 0, 73, 0) at netbsd:wsdisplay_addscreen
+0x9c
wsdisplay_common_attach(baeb400, 0, 1853800, 1815430, 18153e8, baea328) at netbs
d:wsdisplay_common_attach+0xd0
wsdisplay_emul_attach(bae9580, baebc00, 1c05638, 18a1cc0, 18a1c00, 16e3000) at n
etbsd:wsdisplay_emul_attach+0x54
config_attach_loc(baebc00, 1806cd8, 1, 1c05638, 0, 15069e0) at netbsd:config_att
ach_loc+0x188
cg6attach(baea000, 1815000, 0, 2, 0, 1c05720) at netbsd:cg6attach+0x290
cgsixattach(ba4a8d0, bae9580, 1c058c0, 18a1cc0, 18a1c00, 16e3000) at netbsd:cgsi
xattach+0x36c
config_attach_loc(bae9580, 18071b8, 1, 1c058c0, 0, 13c8600) at netbsd:config_att
ach_loc+0x188
sbus_attach(b783b00, ba4a8d0, 18a0c20, 18a1cc0, 18a1c00, 16e3000) at netbsd:sbus
_attach+0x450
config_attach_loc(ba4a8d0, 18071e8, 1, 1c05ab0, 0, 108b300) at netbsd:config_att
ach_loc+0x188
mainbus_attach(0, b783b00, 0, 18a1cc0, 16edc00, 108b000) at netbsd:mainbus_attac
h+0x4a8    
config_attach_loc(b783b00, 1806fa8, 1, 0, 0, 7) at netbsd:config_attach_loc+0x18
8
cpu_configure(170a000, 1275e20, 0, b749f80, 100, 800) at netbsd:cpu_configure+0x
20c
main(0, 11fd040, fffb1a90, f005cb68, fffffffff0071ae4, fffb1e80) at netbsd:main+
0x2bc
cpu_initialize(f005cb68, fffb1cf8, 112c00, 111fb8, fffb1df8, 0) at netbsd:cpu_in
itialize+0xe8

Obviously we're trying to jump through an uninitialized jump table.  If wscons 
is not the console it shouldn't be trying to do that.

>How-To-Repeat:
        Install a -current kernel on a machine with a framebuffer, set the 
input-device
        and output-device to a serial port (or just pull the keyboard) and 
watch the panic.
>Fix: