On Wed, Jul 21, 2010 at 02:06:11PM +0200, Brad du Plessis wrote: > I've managed to reproduce this now in netbsd-5 too (source is about > 3 months old, not sure if there have been any changes since): > > re0: discarding oversize frame (len=9041) > re0: discarding oversize frame (len=16158) > panic: kernel diagnostic assertion "pcg->pcg_avail == 0" failed: > file "../../../../kern_subr_pool.c", line 2580 > > > As I think I've said before, the actual crash point is different > every time but the panic is always preceded by the discarding > oversize frame. Sometimes the len in the oversize frame message > is len=-1.
is it possible that the re device is writting past its buffer (via DMA) and overwriting random memory ? -- Manuel Bouyer <bou...@antioche.eu.org> NetBSD: 26 ans d'experience feront toujours la difference --