>Number:         4210
>Category:       kern
>Synopsis:       Additional information for kern/4172
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    kern-bug-people (Kernel Bug People)
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Oct  2 19:05:02 1997
>Last-Modified:
>Originator:     Brad Spencer
>Organization:
	at home
>Release:        1.2B going to 1.2G
>Environment:
	
System: NetBSD anduin.eldar.org 1.2B NetBSD 1.2B (ANDUIN) #13: Sat Dec 14 11:00:39 EST 1996 brad@anduin.eldar.org:/usr/src/sys/arch/i386/compile/ANDUIN i386

the above going to 1.2G

>Description:

I get a panic in the BT driver on NetBSD/i386, as mentioned in
kern/4172.

The panic:

panic: bha_init_ccb: can't create DMA maps


Here is my config file:

#	$NetBSD: GENERIC,v 1.99 1997/09/12 05:22:55 mycroft Exp $
#
#	GENERIC -- everything that's currently supported
#

include "arch/i386/conf/std.i386"

options 	I386_CPU	# CPU classes; at least one is REQUIRED
options 	I486_CPU
options 	I586_CPU
options 	I686_CPU
#options 	MATH_EMULATE	# floating point emulation
options 	VM86		# Virtual 8086 emulation

# Some BIOSes don't get the size of extended memory right.  If you
# have a broken BIOS, uncomment the following and set the value
# properly for your system.
#options 	BIOSEXTMEM=...	# size of extended memory

#options 	DUMMY_NOPS	# speed hack; recommended
options 	XSERVER,UCONSOLE
options 	INSECURE	# insecure; allow /dev/mem writing for X

maxusers	64		# estimated number of users
options 	RTC_OFFSET=0	# hardware clock is this many mins. west of GMT
options 	NTP		# NTP phase/frequency locked loop

options 	DDB		# in-kernel debugger
#options 	KGDB		# remote debugger
#options 	"KGDB_DEVNAME=\"com\"",KGDBADDR=0x3f8,KGDBRATE=9600
#makeoptions	DEBUG="-g"	# compile full symbol table
options 	DIAGNOSTIC	# internal consistency checks
options 	KTRACE		# system call tracing via ktrace(1)
options 	KMEMSTATS	# kernel memory statistics (vmstat -m)

options 	SYSVMSG		# System V-like message queues
options 	SYSVSEM		# System V-like semaphores
options 	SYSVSHM		# System V-like memory sharing
#options 	SHMMAXPGS=1024	# 1024 pages is the default

options 	COMPAT_NOMID	# compatibility with 386BSD, BSDI, NetBSD 0.8,
options 	COMPAT_09	# NetBSD 0.9,
options 	COMPAT_10	# NetBSD 1.0,
options 	COMPAT_11	# NetBSD 1.1,
options 	COMPAT_12	# NetBSD 1.2,
options 	COMPAT_43	# and 4.3BSD
options 	TCP_COMPAT_42	# TCP bug compatibility with 4.2BSD

options 	COMPAT_SVR4	# binary compatibility with SVR4
options 	COMPAT_IBCS2	# binary compatibility with SCO and ISC
options 	COMPAT_LINUX	# binary compatibility with Linux
options 	COMPAT_FREEBSD	# binary compatibility with FreeBSD

options 	EXEC_ELF32	# 32-bit ELF executables (SVR4, Linux)

options 	USER_LDT	# user-settable LDT; used by WINE
options 	LKM		# loadable kernel modules

file-system 	FFS		# UFS
#file-system 	EXT2FS		# second extended file system (linux)
#file-system 	LFS		# log-structured file system
#file-system 	MFS		# memory file system
file-system 	NFS		# Network File System client
#file-system 	CD9660		# ISO 9660 + Rock Ridge file system
#file-system 	MSDOSFS		# MS-DOS file system
#file-system 	FDESC		# /dev/fd
#file-system 	KERNFS		# /kern
#file-system 	NULLFS		# loopback file system
#file-system 	PORTAL		# portal filesystem (still experimental)
#file-system 	PROCFS		# /proc
#file-system 	UMAPFS		# NULLFS + uid and gid remapping
file-system 	UNION		# union file system

options 	QUOTA		# UFS quotas
options 	NFSSERVER	# Network File System server
options 	FIFO		# FIFOs; RECOMMENDED
#options 	EXT2FS_SYSTEM_FLAGS # makes ext2fs file flags (append and
				# immutable) behave as system flags.

options 	GATEWAY		# packet forwarding
options 	INET		# IP + ICMP + TCP + UDP
#options 	MROUTING	# IP multicast routing
#options 	NS		# XNS
#options 	NSIP		# XNS tunneling over IP
#options 	ISO,TPIP	# OSI
#options 	EON		# OSI tunneling over IP
#options 	CCITT,LLC,HDLC	# X.25
#options 	PFIL_HOOKS	# pfil(9) packet filter hooks

config		netbsd	root on ? type ? dumps on sd2b
#options 	"CONSDEVNAME=\"com\"",CONADDR=0x3f8,CONSPEED=9600

options 	EISAVERBOSE	# verbose EISA device messages
options 	PCIVERBOSE	# verbose PCI device messages
options 	SCSIVERBOSE	# verbose SCSI error messages

mainbus0 at root

pci0	at mainbus0 bus ?
#eisa0	at mainbus0

ppb*	at pci? dev ? function ?	# PCI-PCI bridges
pci*	at ppb? bus ?
pchb*	at pci? dev ? function ?	# PCI-Host bridges
pci*	at pchb?
pcib*	at pci? dev ? function ?	# PCI-ISA bridges

isa*	at pcib?			# ISA on PCI-ISA bridge
isa*	at mainbus0			# all other ISA
#isapnp0	at isa?				# ISA Plug-and-Play

#apm0	at mainbus0			# Advanced power management

npx0	at isa? port 0xf0 irq 13	# math coprocessor

#pc0	at isa? port 0x60 irq 1		# generic PC console device
vt0	at isa? port 0x60 irq 1

#options 	COM_HAYESP		# adds Hayes ESP serial board support
com0	at isa? port 0x3f8 irq 3	# standard PC serial ports
com1	at isa? port 0x2f8 irq 4
com2	at isa? port 0x3e8 irq 10
#com3	at isa? port 0x2e8 irq 9
#ast0	at isa? port 0x1a0 irq 5	# AST 4-port serial cards
#com*	at ast? slave ?
#boca0	at isa? port 0x100 irq 5	# BOCA 8-port serial cards
#com*	at boca? slave ?
#rtfps0	at isa? port 0x1230 irq 10	# RT 4-port serial cards
#com*	at rtfps? slave ?
#cy0	at isa? iomem 0xd4000 irq 12	# Cyclades serial cards
#cy*	at pci? dev ? function ?	# Cyclades serial cards

lpt0	at isa? port 0x378		# standard PC parallel ports
lpt1	at isa? port 0x278
lpt2	at isa? port 0x3bc

#lms0	at isa? port 0x23c irq 5	# Logitech bus mouse
#lms1	at isa? port 0x238 irq 5
#mms0	at isa? port 0x23c irq 5	# Microsoft InPort mouse
#mms1	at isa? port 0x238 irq 5
#pms0	at pckbd? irq 12		# PS/2 auxiliary port mouse

#aha0	at isa? port 0x330 irq ? drq ?	# Adaptec 154[02] SCSI controllers
#aha1	at isa? port 0x334 irq ? drq ?	# Adaptec 154[02] SCSI controllers
#scsibus* at aha?
#ahb*	at eisa? slot ?			# Adaptec 174[024] SCSI controllers
#scsibus* at ahb?
#ahc0	at isa? port ? irq ?		# Adaptec 284x SCSI controllers
#ahc*	at eisa? slot ?			# Adaptec 274x, aic7770 SCSI controllers
#ahc*	at pci? dev ? function ?	# Adaptec [23]94x, aic78x0 SCSI controllers
#scsibus* at ahc?
#aic0	at isa? port 0x340 irq 11	# Adaptec 152[02] SCSI controllers
#scsibus* at aic?
bha0	at isa? port 0x330 irq ? drq ?	# BusLogic [57]4X SCSI controllers
bha1	at isa? port 0x334 irq ? drq ?	# BusLogic [57]4X SCSI controllers
#bha*	at eisa? slot ?
#bha*	at pci? dev ? function ?
scsibus* at bha?
#ncr*	at pci? dev ? function ?	# NCR 538XX SCSI controllers
#scsibus* at ncr?
#sea0	at isa? iomem 0xc8000 irq 5
#scsibus* at sea?
#uha0	at isa? port 0x330 irq ? drq ?	# UltraStor [13]4f SCSI controllers
#uha1	at isa? port 0x334 irq ? drq ?	# UltraStor [13]4f SCSI controllers
#uha*	at eisa? slot ?			# UltraStor 24f SCSI controllers
#scsibus* at uha?
#wds0	at isa? port 0x350 irq 15 drq 6	# WD7000 and TMC-7000 controllers
#wds1	at isa? port 0x358 irq 11 drq 5
#scsibus* at wds?
#isp*	at pci? dev ? function ?	# Qlogic ISP 10x0 SCSI controllers
#scsibus* at isp?

sd*	at scsibus? target ? lun ?	# SCSI disk drives
st*	at scsibus? target ? lun ?	# SCSI tape drives
cd*	at scsibus? target ? lun ?	# SCSI CD-ROM drives
ch*	at scsibus? target ? lun ?	# SCSI autochangers
ss*	at scsibus? target ? lun ?	# SCSI scanners
uk*	at scsibus? target ? lun ?	# SCSI unknown

#fdc0	at isa? port 0x3f0 irq 6 drq 2	# standard PC floppy controllers
#fdc1	at isa? port 0x370 irq ? drq ?
#fd*	at fdc? drive ?
#fd0	at fdc? drive ?

#mcd0	at isa? port 0x300 irq 10	# Mitsumi CD-ROM drives

#wdc0	at isa? port 0x1f0 irq 14	# ST506, ESDI, and IDE controllers
#wdc1	at isa? port 0x170 irq 15
#wd*	at wdc? drive ?
#atapibus* at wdc?
#cd* at atapibus? drive ?

# note: the wt driver conflicts unpleasantly with ed devices at the
# same I/O address. The probe reprograms their eeproms. Don't
# uncomment it unless you are actually using it.
#wt0	at isa? port 0x300 irq 5 drq 1	# Archive and Wangtek QIC tape drives

#ed0	at isa? port 0x280 iomem 0xd0000 irq 9	# WD/SMC, 3C503, and NE[12]000
#ed1	at isa? port 0x250 iomem 0xd8000 irq 9	#   ethernet cards
#ed2	at isa? port 0x300 iomem 0xcc000 irq 10
#eg0	at isa? ...				# 3C505 ethernet cards
#el0	at isa? port 0x300 irq 9		# 3C501 ethernet cards
#ep0	at isa? port ? irq ?			# 3C509 ethernet cards
#ep*	at isapnp?
#ie0	at isa? port 0x360 iomem 0xd0000 irq 7	# StarLAN and 3C507
#ie1	at isa? port 0x300 irq 10		# EtherExpress
#le0	at isa? port 0x320 irq 10 drq 7		# IsoLan, NE2100, and DEPCA
#lc0	at isa? port ? iomem ? irq ?		# DEC EtherWORKS III (LEMAC)
#ep*	at eisa? slot ?				# 3C579 ethernet cards
#fea*	at eisa? slot ?				# DEC DEFEA FDDI cards
#le*	at pci? dev ? function ?		# PCnet-PCI based ethernet cards
de*	at pci? dev ? function ?		# DC21X4X-based ethernet cards
#ep*	at pci? dev ? function ?		# 3C59x/3C90x ethernet cards
#fpa*	at pci? dev ? function ?		# DEC DEFPA FDDI cards
#fxp*	at pci? dev ? function ?		# Intel EEPRO 10/100B
#fe0	at isa? port 0x2a0 irq ?		# AT1700

#pss0	at isa? port 0x220 irq 7 drq 6  	# Personal Sound System
#sp0	at pss0 port 0x530 irq 10 drq 0		# 	sound port driver
#audio*	at sp0

#sb0	at isa? port 0x220 irq 7 drq 1 drq2 5	# SoundBlaster
#sb*	at isapnp?
#audio*	at sb?
#wss0	at isa? port 0x530 irq 10 drq 0	drq2 1	# Windows Sound System
#audio*	at wss0
#pas0	at isa? port 0x220 irq 7 drq 1		# ProAudio Spectrum
#audio*	at pas0
#gus0	at isa? port 0x220 irq 7 drq 1 drq2 6	# Gravis Ultra Sound
#audio*	at gus0
#spkr0	at pckbd? port 0x61

# Joystick driver. Probe is a little strange; add only if you have one.
#joy0	at isa? port 0x201
#joy*	at isapnp?

# Planetconnect Satellite receiver driver.
#satlink0 at isa? port 0x300 drq 1

include	"arch/i386/conf/GENERIC.local"

pseudo-device	loop	1		# network loopback
pseudo-device	bpfilter 8		# packet filter
pseudo-device	sl	4		# CSLIP
pseudo-device	ppp	4		# PPP
pseudo-device	tun	4		# network tunneling over tty
#pseudo-device	ipfilter		# IP filter

pseudo-device	pty	80		# pseudo-terminals
pseudo-device	tb	1		# tablet line discipline
pseudo-device	vnd	4		# paging to files
pseudo-device	ccd	4		# concatenated disk devices


>How-To-Repeat:

Here is the program of death which can trigger this for me:

#include <stdio.h>

main()
{
	char *c;
	int n=0;

	while (c=(char *)malloc(8192)) {
		*c=123;
		n++;
		fprintf(stderr,"%d ",n);
		usleep(500);
	}
	sleep(2000);
}



>Fix:
	
>Audit-Trail:
>Unformatted: