>Number:         32583
>Category:       port-mac68k
>Synopsis:       mac68k netbsd-2 panics during rcp(1)
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    port-mac68k-maintainer
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Jan 20 21:05:00 +0000 2006
>Originator:     Hauke Fath
>Release:        NetBSD 2.1_STABLE
>Organization:
Falling Raindrops
>Environment:
	
	
System: NetBSD mirth 2.1_STABLE NetBSD 2.1_STABLE (NCRSCSI030) #0: Sun Jan 15 21:14:57 CET 2006  hauke@q700:/usr/src/sys/arch/mac68k/compile/NCRSCSI030 mac68k
Architecture: m68k
Machine: mac68k
>Description:

A Macintosh IIsi with Nubus adapter and Nubus Ethernet card panics
when I attempt to rcp a file from another machine. The panic is most
likely during the first rcp attempt; if that succeeds, the machine
tends to stay up.

Kernel config:

#	$NetBSD: GENERICSBC,v 1.27.2.3 2004/07/15 20:21:52 he Exp $
#
# GENERICSBC

include	"arch/mac68k/conf/std.mac68k"

options 	INCLUDE_CONFIG_FILE	# embed config file in kernel binary

#ident 		"GENERICSBC-$Revision: 1.27.2.3 $"

maxusers	16		# estimated number of users

# CPU support.  At least one is REQUIRED.
options 	M68040
options 	M68030
options 	M68020		# Note:  must have 68851 PMMU

# CPU-related options.
options 	FPSP
options 	FPU_EMULATE

# Standard system options

options 	INSECURE	# disable kernel security levels

options 	RTC_OFFSET=0	# hardware clock is this many mins. west of GMT

options 	KTRACE		# system call tracing via ktrace(1)

options 	SYSVMSG		# System V-like message queues
options 	SYSVSEM		# System V-like semaphores
#options 	SEMMNI=10	# number of semaphore identifiers
#options 	SEMMNS=60	# number of semaphores in system
#options 	SEMUME=10	# max number of undo entries per process
#options 	SEMMNU=30	# number of undo structures in system
options 	SYSVSHM		# System V-like memory sharing
#options 	SHMMAXPGS=1024	# 1024 pages is the default
options 	P1003_1B_SEMAPHORE # p1003.1b semaphore support

options 	LKM		# loadable kernel modules

options 	USERCONF	# userconf(4) support
#options	PIPE_SOCKETPAIR	# smaller, but slower pipe(2)
options 	SYSCTL_INCLUDE_DESCR	# Include sysctl descriptions in kernel

# Diagnostic/debugging support options
options 	DIAGNOSTIC	# cheap kernel consistency checks
options 	DEBUG		# expensive debugging checks/support
options		SBC_DEBUG	# mac68k/dev/sbc.c

options 	KMEMSTATS	# kernel memory statistics (vmstat -m)
options 	DDB			# in-kernel debugger
#options 	DDB_HISTORY_SIZE=100	# enable history editing in DDB
#options 	KGDB			# remote debugger
#options 	KGDB_DEV=0xc01		# kgdb device number (dev_t)
#options 	KGDB_DEVRATE=38400	# baud rate
#makeoptions	DEBUG="-g"	# compile full symbol table

# Compatibility options
options 	COMPAT_14	# NetBSD 1.4,
options 	COMPAT_15	# NetBSD 1.5,
options 	COMPAT_16	# NetBSD 1.6,
options 	COMPAT_43	# and 4.3BSD

# The following is needed to run pre-NetBSD 1.6 binaries under ELF.
options 	COMPAT_AOUT_M68K # compatibility with NetBSD/m68k a.out
options 	EXEC_AOUT	# support for exec'ing a.out

# File systems
file-system 	FFS		# UFS
file-system 	MFS		# memory file system
file-system 	NFS		# Network File System client
file-system 	FDESC		# /dev/fd
file-system 	KERNFS		# /kern
file-system 	NULLFS		# loopback file system
file-system 	PROCFS		# /proc
file-system 	UNION		# union file system

# File system options
options 	SOFTDEP		# FFS soft updates support.
#options 	NFSSERVER	# Network File System server

# Networking options
#options 	GATEWAY		# packet forwarding
options 	INET		# IP + ICMP + TCP + UDP

# These options enable verbose messages for several subsystems.
# Warning, these may compile large string tables into the kernel!
options 	SCSIVERBOSE	# human readable SCSI error messages

# wscons options
options 	WSEMUL_VT100		# VT100 / VT220 emulation
options 	WSDISPLAY_COMPAT_ITEFONT # use ite font (6x10)

# rcons options; note that 1-bit and 8-bit displays are supported by default.
options 	RCONS_2BPP		# Support for 2-bit display
options 	RCONS_4BPP		# Support for 4-bit display
options 	RCONS_16BPP		# Support for 16-bit display

# Mac-specific options
options 	GRF_COMPAT	# Include grf compatibility code
#options 	MRG_ADB		# Use ROM-based ADB driver
options 	ZS_CONSOLE_ABORT

options 	NFS_BOOT_DHCP

# Kernel root file system and dump configuration.
config		netbsd	root on ? type ?

#
# Device configuration
#

mainbus0 at root

fpu0 at mainbus?			# Floating-Point Coprocessor support


# Basic Bus Support

# On-board I/O bus support
obio0 at mainbus?

# NuBus support
nubus0 at mainbus?


# Console Devices

# Apple Desktop Bus interface
adb0	at obio?
aed*	at adb?				# ADB event device
akbd*	at adb?				# ADB keyboard
ams*	at adb?				# ADB mouse

# Basic frame buffer support
intvid0	at obio?			# Internal video hardware
macvid*	at nubus?			# NuBus video card

# Device-independent frame buffer interface
macfb*	at intvid?
macfb*	at macvid?

# Workstation Console devices
wsdisplay* at macfb? console ?
wskbd*	at akbd? console ?
wsmouse* at ams?


# Serial Devices

# On-board serial interface
zsc0	at obio?
zstty*	at zsc? channel ?


# SCSI Controllers and Devices

# SCSI controllers
# XXX - use only one of ncrscsi or sbc
ncrscsi0 at obio?			# SCSI NCR 5380
#sbc0	at obio? flags 0x1		# MI SCSI NCR 5380
esp0	at obio?			# SCSI NCR 53C9x
esp1	at obio?			# SCSI NCR 53C9x

# SCSI bus support
scsibus* at scsi?

# SCSI devices
sd*	at scsibus? target ? lun ?	# SCSI disk drives
uk*	at scsibus? target ? lun ?	# SCSI unknown


# Network Interfaces

# On-board Ethernet controllers
sn*	at obio?			# SONIC-based (DP83932, DP83916)
#mc*	at obio?			# MACE-based

# NuBus Ethernet controllers
ae*	at nubus?			# DP8390-based
sn*	at nubus?			# SONIC-based (DP83932, DP83916)
#sm*	at nubus?			# SMC 91cxx-based
#netdock*	at nubus?		# Asante NetDock, Newer Ether MicroDock

#nsphy*	at mii? phy ?
#ukphy*	at mii? phy ?

# Audio Devices

# On-board audio hardware
#asc0	at obio?			# ASC/EASC audio

# Pseudo-Devices

# disk/mass storage pseudo-devices
pseudo-device	md		1	# memory disk device (ramdisk)
pseudo-device	vnd		4	# disk-like interface to files

# network pseudo-devices
pseudo-device	bpfilter	12	# Berkeley packet filter
pseudo-device	loop			# network loopback

# miscellaneous pseudo-devices
pseudo-device	grf		2	# grf emulation for wscons
pseudo-device	ite		1	# ite emulation for wscons
pseudo-device	pty			# pseudo-terminals
pseudo-device	clockctl		# user control of clock subsystem

# random number generator pseudo-device
pseudo-device	rnd			# /dev/random and in-kernel generator


Bootlog:

Bootstrapping NetBSD/mac68k.
Getting mapping from MMU.
Loaded at 0x4000000
System RAM: 17498112 bytes in 4272 pages.
     Low = 0x50000, high = 0x100000
     Low = 0x4000000, high = 0x55000000
On-board video at addr 0xfee08000 (phys 0x0), len 0x50000.
Done.
Bootstrapping the pmap system.
Pmap bootstrapped.
Moving ROMBase from 0x40800000 to 0x9f6000.
Video address 0xfee08000 -> 0xbf6000.
Loaded initial symtab at 0x19dad0, strtab at 0x1da91c, # entries 14959
Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005
    The NetBSD Foundation, Inc.  All rights reserved.
Copyright (c) 1982, 1986, 1989, 1991, 1993
    The Regents of the University of California.  All rights reserved.

NetBSD 2.1_STABLE (NCRSCSI030) #0: Sun Jan 15 21:14:57 CET 2006
	hauke@q700:/usr/src/sys/arch/mac68k/compile/NCRSCSI030
Apple Macintosh IIsi  (68030)
cpu: delay factor 266
total memory = 16384 KB
avail memory = 13604 KB
mrg: 'Mac IIsi class ROMs' ROM glue, tracing off, debug off, silent traps
mrg: I/O map kludge for ROMs that use hardware addresses directly.
mainbus0 (root)
obio0 at mainbus0
adb0 at obio0
intvid0 at obio0 @ 0: RBV video subsystem, Macintosh II display
intvid0: 640 x 480, monochrome
macfb0 at intvid0
wsdisplay0 at macfb0 (kbdmux ignored)
ncrscsi0 at obio0
scsibus0 at ncrscsi0 channel 0: 8 targets, 8 luns per target
zsc0 at obio0 chip type 0 
zsc0 channel 0: d_speed   9600 DCD clk 0 CTS clk 0
zstty0 at zsc0 channel 0 (console i/o)
zsc0 channel 1: d_speed   9600 DCD clk 0 CTS clk 0
zstty1 at zsc0 channel 1
nubus0 at mainbus0
ae0 at nubus0 slot 9: Ethernet A-Series, 64KB memory
ae0: Ethernet address 00:40:10:02:0e:59
fpu0 at mainbus0 (mc68882)
adb0 (direct, IIsi series): 2 targets
aed0 at adb0 addr 0: ADB Event device
akbd0 at adb0 addr 2: extended keyboard
wskbd0 at akbd0 (mux ignored)
ams0 at adb0 addr 3: EMP trackball <LT01> 3-button, 200 dpi
wsmouse0 at ams0 (mux ignored)
scsibus0: waiting 2 seconds for devices to settle...
sd0 at scsibus0 target 0 lun 0: <CONNER, CP30540 545MB3.5, B0BC> disk fixed
sd0: 520 MB, 2242 cyl, 6 head, 79 sec, 512 bytes/sect x 1065912 sectors
sd1 at scsibus0 target 2 lun 0: <QUANTUM, FIREBALL_TM1280S, 300X> disk fixed
sd1: 1222 MB, 6810 cyl, 2 head, 183 sec, 512 bytes/sect x 2503872 sectors
boot device: sd1
root on sd1a dumps on sd1b
mountroot: trying nfs...
mountroot: trying ffs...
time read from PRAM: 0xbff70735
Date and time: January 20, 2006   21:31:33
PRAM: 0x43d156b5, macos_boottime: 0x43d156a6.
root file system type: ffs
init: copying out path `/sbin/init' 11
Fri Jan 20 21:31:39 CET 2006


Crashlog:

[hauke@mirth] ~ > rcp pizza:/u2/NetBSD/port-mac68k-9679/netbsd.ncrscsi .
trap type 0, code = 0x72d, v = 0x29e0000
kernel program counter = 0x110ad6
kernel: Bus error trap
pid = 398, lid = 1, pc = 00110AD6, ps = 2208, sfc = 1, dfc = 1
Registers:
             0        1        2        3        4        5        6        7
dreg: FFFE861D 00000000 00000000 029B0C3C 0047003B 00000001 00000002 000005DC
areg: 029E0002 042A3C5E 00000000 0046A670 0047D800 0046A600 042A3C24 FFFFBF10

Kernel stack (042A3B38):
2A3B38: 0011668E 042A3BB8 00000080 00000000 029B0C3C 0047003B 00000001 00000002
2A3B58: 000005DC 00000000 0046A670 0047D800 0046A600 00000001 0010FC32 00000001
2A3B78: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
2A3B98: 00000000 00000000 0011000A 042A3C24 00003090 00000000 0000072D 029E0000
2A3BB8: FFFE861D 00000000 00000000 029B0C3C 0047003B 00000001 00000002 000005DC
2A3BD8: 029E0002 042A3C5E 00000000 0046A670 0047D800 0046A600 042A3C24 FFFFBF10
2A3BF8: 00000000 22080011 0AD6A008 06EE072D 538066FA 029E0000 029E0000 00000000
2A3C18: 30C10000 00000001 00000C3C 042A3C64 000FCF98 00000000 0047DB34 00000C3C
2A3C38: 00000000 00000000 00000003 00002100 0047D840 00000000 0047D800 0046A600
2A3C58: 0047D840 00000000 0047D800 042A3C88 000208EE 0047D800 0046A600 00000C00
2A3C78: 00000000 0000003B 0046A636 0046A600 042A3CC8 000C657E 0047D840 FFFFFFBF
2A3C98: 00000001 004E32B8 00000400 004E32BC 004E32BC 0046A644 0046A600 0047D840
2A3CB8: 08002018 767E0000 00000014 00000019 042A3D3C 00014E78 0047D840 0046A600
2A3CD8: 004E32BC 004E418C 00000010 00000001 00000005 00000000 0000832C 00000002
2A3CF8: 0046A658 005074F0 001239D4 0000002D 00000040 00000100 00000000 00000000
2A3D18: 00000000 00000014 00000000 0000832C 00000005 00000000 005074F0 00000028
panic: Bus error
Stopped in pid 398.1 (rcmd) at  netbsd:cpu_Debugger+0x6:        unlk    a6
db> t
cpu_Debugger(2204,0,42a3bb8,42a3ba4,1166ae) + 6
panic(14b83d,0,29b0c3c,47003b,1) + f8
trap(0,72d,29e0000) + 25c
mac68k_bssr2(0,47db34,c3c,0,0) + 20
ae_write_mbuf(47d800,46a600) + 6c
dp8390_start(47d840) + 82
ether_output(47d840,46a600,4e32bc,4e418c,10) + 28c
ip_output(46a600,0,4e32b8,400,0,4e2960) + 3c6
tcp_output(5074f0,4e29a4,46a000,2000,8327) + 768
tcp_usrreq(4e2960,9,46a000,0,0,41ea664) + 2ac
sosend(4e2960,0,42a3eb8,46a0000,0) + 2b6
so_write(41207e0,4120808,42a3eb8,4d8200,1) + 1e
dofilewrite(41ea664,3,41207e0,ffffbf6c,5) + 7a
sys_write(40ea700,42a3f44,42a3f3c) + 60
syscall_plain(4,40ea700,42a3fb4,40b7a9c,3) + 82
syscall(4) + 4e
trap0() + e
db>

>How-To-Repeat:

	Set up a networked Macintosh IIsi with a recent netbsd-2
	build, try to rcp file over the network.

>Fix:
	None known.

>Unformatted: