>Number:         8571
>Category:       kern
>Synopsis:       recent SCSI changes result in a panic on at least NetBSD/amiga
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    kern-bug-people (Kernel Bug People)
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Oct  6 11:35:01 1999
>Last-Modified:
>Originator:     Thorsten Frueauf
>Organization:
private
	
>Release:        NetBSD-current from 05.10.1999
>Environment:
	
NetBSD 1.4K (CYBERDYNE) #1: Sun Oct  3 19:24:32 MEST 1999
    milano@di-frueauf:/usr/src/sys/arch/amiga/compile/CYBERDYNE
Amiga 3000 (68060 rev.1 CPU/MMU/FPU)
total memory = 49152 KB
avail memory = 44360 KB
using 320 buffers containing 2560 KB of memory
memory segment 0 at 08000000 size 02000000
memory segment 1 at 07000000 size 01000000
memory segment 2 at 00000000 size 00200000
mainbus0 (root)
clock0 at mainbus0: CIA B system hz 100 hardware hz 709379
Calibrating delay loop... 21/1024 us
a34kbbc0 at mainbus0
ser0 at mainbus0: input fifo 512 output fifo 32
par0 at mainbus0
kbd0 at mainbus0: CIA A type Amiga
ms0 at mainbus0
ms1 at mainbus0
fdc0 at mainbus0: dmabuf pa 0x1f7fd8: dmabuf ka 0x4bf3fd8
fd0 at fdc0 unit 0: 3.5hd 80 cyl, 2 head, 22 sec [18 sec], 512 bytes/sec
fd1 at fdc0 unit 1: 3.5dd 80 cyl, 2 head, 11 sec [9 sec], 512 bytes/sec
ahsc0 at mainbus0
scsibus0 at ahsc0: 8 targets, 8 luns per target
sd0 at scsibus0 targ 0 lun 0: <QUANTUM, LPS540S, 5900> SCSI2 0/direct fixed
sd0: 516 MB, 2740 cyl, 4 head, 96 sec, 512 bytes/sect x 1057616 sectors
sd1 at scsibus0 targ 1 lun 0: <QUANTUM, LP105S 910109405, 3.1> SCSI2 0/direct fixed
sd1: 100 MB, 1219 cyl, 4 head, 42 sec, 512 bytes/sect x 205561 sectors
ahsc0: target 3 now synchronous, period=208ns, offset=12.
sd2 at scsibus0 targ 3 lun 0: <IBM, DORS-32160, S82C> SCSI2 0/direct fixed
sd2: 2063 MB, 6703 cyl, 5 head, 126 sec, 512 bytes/sect x 4226725 sectors
ahsc0: target 6 now synchronous, period=208ns, offset=12.
sd3 at scsibus0 targ 6 lun 0: <CONNER, CFP1080S, 4649> SCSI2 0/direct fixed
sd3: 1030 MB, 3658 cyl, 6 head, 96 sec, 512 bytes/sect x 2110812 sectors
aucc0 at mainbus0
audio0 at aucc0: half duplex
zbus0 at mainbus0: i/o size 0x00200000
cbiisc at zbus0: pa 0xea0000 man/pro 8512/25 not configured
grfcl0 at zbus0 pa 0x200000 man/pro 2167/11
grf3 at grfcl0: width 1024 height 600 colors 16
ite3 at grf3: rows 75 cols 128 repeat at (30/100)s next at (10/100)s has keyboard
grfcl: 2MB Picasso II (with CL-GD5426) being used
grfcl1 at zbus0 pa 0xe90000 man/pro 2167/12
ite at grfcl1:  not configured
bah0 at zbus0 pa 0xec0000 man/pro 514/9: link addr 0xa1(161)
le0 at zbus0 pa 0xed0000 man/pro 2167/201: address 00:60:30:00:06:7f
le0: 16 receive buffers, 4 transmit buffers
4 views configured
root on sd2a dumps on sd2b
root file system type: ffs

The testkernel had DEBUG, DIAGNOSTIC and ddb support enabled.

>Description:
	
If I boot a current build kernel on my Amiga 3000 I get:

[note: this is typed by hand, so errors are likely, I did not
 write down the whole kernel stack, if you really need it, I will
 of course.]

scsibus0: waiting 2 seconds for devices to settle...
trap: bad kernel access at 4 pc e9396
trap type 8, code = 1050200, v = 4
pid = 0, pc = 000E9396, ps = 2300, sfc = 1, dfc = 1
Registers:
             0        1        2        3        4        5        6        7
dreg: 00000000 00000080 00000000 00000000 00000000 00000000 0023A000 00000000
areg: 00000000 04C50000 00204800 04C50000 04C50043 00204800 00151D84 0DFFFFFC

Kernel stack (00151C14):
151C14: 001015C2 00151D28 00000080 0010155C 00000008 01050200 00000004 00000000
151C34: ...
...
151Df4: ...
panic: MMU fault
Stopped in swapper at   0xc797a:        unlk    a6
db> trace
?(8,8,1050200,134df4,151c34) st c797a
?(101404,0,151cd0,101a0e,8) at 2890e
?(8,1050200,4,151d28,1016fa,4,e9396) at 1015e0
?(8,1050200,4,151d28,134df4) at 101a0a
?(8,1050200,4) at 1020be
?(204800,0,0,0,1c4) at 2050
?(204800,23a000) at e6990
?(204800,0,fffffffe,7,0) at e479c
?(23a000) at e4628
?(23a000) at d80e8
?(20bc00,151e9e,6,0,0) at dae24
?(20bc00,1c4,0,0,7) at d7e18
?(215e00,0,0) at dbdde
?(0,ffffffff,ffffffff,20df20,151f64) at db3e6
?(215e00,e74000,132340,0,134df4) at db150
?(132340,0,dfffffc,151fa8,15082) at 24e3c
?(0,4,ad303,dfffffc,0) at 242e8
?(151fb4) at 1507c
?() at 2630
db>


I do not know how to get the real function names out of netbsd.gdb.
If you need to know, please give me a detailed description on how
to gain them with above numbers.

>How-To-Repeat:
	
Boot a current kernel on an Amiga 3000 with internal scsi controler.

>Fix:
	
no idea.
>Audit-Trail:
>Unformatted:
recent SCSI changes result in a panic on at least NetBSD/amiga