>Number:         8218
>Category:       port-amiga
>Synopsis:       NetBSD/amiga ed driver causes panics
>Confidential:   yes
>Severity:       serious
>Priority:       medium
>Responsible:    port-amiga-maintainer (NetBSD/amiga Portmaster)
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Aug 17 16:05:01 1999
>Last-Modified:
>Originator:     Karl F. Schilke
>Organization:
Cynical.org -- Better than a nail through the foot!
>Release:        1.3.3
>Environment:
	
System: NetBSD coredump 1.3.3 NetBSD 1.3.3 (COREDUMP) #3: Wed Apr 21 13:04:07 PDT 1999 rat@coredump:/src/sys/arch/amiga/compile/COREDUMP amiga


>Description:
Amiga ed ethernet driver catches a trap and panics.  Although I have not yet
found the trigger, it often crashes two or three times a day.  The panic 
message is included below:

ed0: NIC memory corrupt - invalid packet length 65481
ed0: reset
trap type 16, code = 0, v = 0
pid = -1, pc = 000BB94C, ps = 2404, sfc = 1, dfc = 1
Registers:
             0        1        2        3        4        5        6        7
dreg: 00000000 FFFFFFFF 00000042 04F18000 00000000 00000042 00002400 0060E524
areg: 04F18042 00622460 0062241E 00622400 0058EA3C 0058EA3C 023B9C94 0DFFFD64

Kernel stack (023B9BE0):
3B9BE0: 000D4D8E 023B9C48 00000080 000D4D28 00000010 00000000 00000000 00000010
3B9C00: 023B9C34 000D52BE 00000010 00000000 00000000 023B9C48 00000042 04F18000
3B9C20: 00000000 00000042 00002400 0060E524 0062241E 023B9C94 0000203C 00000010
3B9C40: 00000000 00000000 00000000 FFFFFFFF 00000042 04F18000 00000000 00000042
3B9C60: 00002400 0060E524 04F18042 00622460 0062241E 00622400 0058EA3C 0058EA3C
3B9C80: 023B9C94 0DFFFD64 00000000 2404000B B94C002C 023B9CC4 000BC8D6 0062241E
3B9CA0: 04F18000 00000042 00000009 00002104 00000000 00000042 0058EA00 00622400
3B9CC0: 00000000 023B9CE8 000BBFB8 0058EA00 00622400 04F18000 00000000 00622400
3B9CE0: 0062241E 00588500 023B9D20 0004E032 0058EA3C 00000000 00000000 00000010
3B9D00: 00000014 00000000 00000000 00622400 0062242C 0058EA3C 08000000 0C602D6C
3B9D20: 023B9DA0 00057A06 0058EA3C 00622400 00594CD0 00588500 00622400 00000014
3B9D40: 0000FFFF 00000000 00000010 0000445C 00000000 00000010 00622400 005D0100
3B9D60: 0062242C 0000000C 0058EA3C 00000000 00000000 00000000 00000000 00594CD0
3B9D80: 00000014 00622400 0000FFFF 000ADDAA 0062242C 00000034 00000000 0000FFFF
3B9DA0: 023B9E1C 0005BE36 00622400 00000000 0060E524 00000000 00000000 E97360AD
3B9DC0: 00000034 00000000 00000000 00004470 00000001 005F1542 005D0100 006201AC
panic: trap
syncing disks... 1 1 done

dumping to dev 401, offset 130635
dump 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 succeeded


rebooting...

>How-To-Repeat:
Bring any important task near to completion, but don't save.  Cause network
traffic on the ethernet.  Watch the machine panic, taking the last 15 minutes
of work with it.  Curse loudly, then stomp off to get a cup of coffee while
fsck runs.

I can reliably crash the machine by attempting to transfer files from the
A3000/25 to the i486/66, both running NetBSD 1.3.3.  I can cause the crash
with NFS, FTP, scp, tftp, and flood pings.  It doesn't appear to be related
to the volume of traffic -- I've seen crashes from just a few packets.

The problem has existed since at least the initial 1.3 release.  I can supply
crash dumps, kernel messages, and access to the machine to anyone wishing to
help debug this problem.

Jason Thorpe (thorpej@netbsd.org) has been "working on it" for a year of so, 
and has more details on the problem.

>Fix:
None known.
>Audit-Trail:
>Unformatted:
no
NetBSD/amiga ed driver occasionally panics machine
critical
high
sw-bug