Subject: port-i386/8204: i386 kernel crashes when rmt is used
To: None <gnats-bugs@gnats.netbsd.org>
From: None <leo@marco.de>
List: netbsd-bugs
Date: 08/13/1999 15:29:52
>Number:         8204
>Category:       port-i386
>Synopsis:       i386 kernel crashes when rmt is used
>Confidential:   yes
>Severity:       serious
>Priority:       high
>Responsible:    port-i386-maintainer (NetBSD/i386 Portmaster)
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Aug 13 14:05:01 1999
>Last-Modified:
>Originator:     Matthias Pfaller
>Organization:
Matthias Pfaller                            Software Entwicklung
marco Systemanalyse und Entwicklung GmbH    Tel   +49 8131 5161-41
Hans-Böckler-Str. 2, D 85221 Dachau         Fax   +49 8131 5161-66
http://www.marco.de/                        Email leo@dachau.marco.de
>Release:        19990813
>Environment:
	
System: NetBSD styx 1.4J NetBSD 1.4J (STYX) #4: Fri Aug 13 21:27:20 CEST 1999     root@styx:/usr/src/sys/arch/i386/compile/STYX i386

>Description:
	I'm using my i486 box as an I/O server for my Shark. When I try to
	do a remote dump to the tape on my i486 box it will die after
	some time. Kernel config of my i486 box:

		include "arch/i386/conf/std.i386"

		options 	I486_CPU
		options 	DUMMY_NOPS

		options 	XSERVER,UCONSOLE
		options 	INSECURE	# insecure; allow /dev/mem writing for X
		options 	DDB		# in-kernel debugger
		options 	DDB_HISTORY_SIZE=100	# enable history editing in DDB

		maxusers	4		# estimated number of users

		options 	LKM		# loadable kernel modules
		options 	KTRACE		# system call tracing, a la ktrace(1)

		options 	SYSVMSG 	# System V-like message queues
		options 	SYSVSEM 	# System V-like semaphores
		options 	SYSVSHM 	# System V-like memory sharing

		#options	COMPAT_NOMID	# compatibility with 386BSD, BSDI, NetBSD 0.8,
		#options	COMPAT_09	# NetBSD 0.9,
		#options	COMPAT_10	# NetBSD 1.0,
		#options	COMPAT_11	# NetBSD 1.1,
		options 	COMPAT_12	# NetBSD 1.2,
		options 	COMPAT_13	# NetBSD 1.3,
		options 	COMPAT_14	# NetBSD 1.4
		options 	COMPAT_43	# and 4.3BSD

		options 	NFSSERVER	# Network File System server

		file-system	FFS		# UFS
		file-system	NFS		# Network File System client
		file-system	FDESC		# /dev/fd
		file-system	CD9660		# ISO 9660 + Rock Ridge file system
		file-system	NULLFS		# loopback file system

		options 	INET		# IP + ICMP + TCP + UDP

		config		netbsd	root on wd0a type ffs

		mainbus0 at root

		isa0	at mainbus0

		npx0	at isa? port 0xf0 irq 13	# math coprocessor

		pckbc0	at isa? 			# PC keyboard controller
		pckbd*	at pckbc?			# PC keyboard
		wskbd*	at pckbd? console ?

		pms*	at pckbc?			# PS/2 mouse for wsmouse
		wsmouse* at pms?

		vga0	at isa?
		wsdisplay* at vga? console ?

		pcppi0	at isa?
		sysbeep* at pcppi?
		spkr*	at pcppi?

		com0	at isa? port 0x3f8 irq 4	# standard PC serial ports
		com1	at isa? port 0x2f8 irq 3

		lpt0	at isa? port 0x378 irq 7	# standard PC parallel ports

		wdc0	at isa? port 0x1f0 irq 14	# ST506, ESDI, and IDE controllers
		wd0	at wdc? drive 0
		atapibus0 at wdc?
		cd0 at atapibus? drive 1

		aha0	at isa? port 0x330 irq ? drq ?	# Adaptec 154[02] SCSI
		scsibus* at aha?
		sd*	at scsibus? target ? lun ?	# SCSI disk drives
		st*	at scsibus? target ? lun ?	# SCSI tape drives

		fdc0	at isa? port 0x3f0 irq 6 drq 2	# standard PC floppy controllers
		fd0	at fdc? drive ?

		we0	at isa? port 0x280 iomem 0xd0000 iosiz 0x4000 irq 9 flags 4

		pseudo-device	loop	1		# network loopback
		pseudo-device	bpfilter 4		# packet filter
		pseudo-device	pty	64		# pseudo-terminals
		pseudo-device	wsmux	2		# mouse & keyboard multiplexor pseudo-devices

	Kernel startup messages:
		Aug 13 22:34:27 styx /netbsd: NetBSD 1.4J (STYX) #4: Fri Aug 13 21:27:20 CEST 1999
		Aug 13 22:34:27 styx /netbsd:	  root@styx:/usr/src/sys/arch/i386/compile/STYX
		Aug 13 22:34:27 styx /netbsd: cpu0: Intel 486DX (486-class)
		Aug 13 22:34:27 styx /netbsd: total memory = 15872 KB
		Aug 13 22:34:27 styx /netbsd: avail memory = 13252 KB
		Aug 13 22:34:27 styx /netbsd: using 224 buffers containing 896 KB of memory
		Aug 13 22:34:27 styx /netbsd: mainbus0 (root)
		Aug 13 22:34:27 styx /netbsd: isa0 at mainbus0
		Aug 13 22:34:27 styx /netbsd: aha0 at isa0 port 0x330-0x333 irq 11 drq 5
		Aug 13 22:34:28 styx /netbsd: aha0: model AHA-1542C, firmware 0.1
		Aug 13 22:34:28 styx /netbsd: aha0: unlocking mailbox interface
		Aug 13 22:34:28 styx /netbsd: aha0: async, parity
		Aug 13 22:34:28 styx /netbsd: scsibus0 at aha0: 8 targets, 8 luns per target
		Aug 13 22:34:28 styx /netbsd: st0 at scsibus0 targ 6 lun 0: <ARCHIVE, Python 28388-XXX, 5.72> SCSI2 1/sequential removable
		Aug 13 22:34:28 styx /netbsd: st0: density code 0x13, 512-byte blocks, write-enabled
		Aug 13 22:34:28 styx /netbsd: com0 at isa0 port 0x3f8-0x3ff irq 4: ns16550a, working fifo
		Aug 13 22:34:28 styx /netbsd: com1 at isa0 port 0x2f8-0x2ff irq 3: ns16550a, working fifo
		Aug 13 22:34:28 styx /netbsd: wdc0 at isa0 port 0x1f0-0x1f7 irq 14
		Aug 13 22:34:28 styx /netbsd: atapibus0 at wdc0 channel 0
		Aug 13 22:34:28 styx /netbsd: cd0 at atapibus0 drive 1: <FX600S, , P01> type 5 cdrom removable
		Aug 13 22:34:28 styx /netbsd: cd0: drive supports PIO mode 3, DMA mode 1
		Aug 13 22:34:28 styx /netbsd: wd0 at wdc0 channel 0 drive 0: <QUANTUM LPS540A>
		Aug 13 22:34:28 styx /netbsd: wd0: drive supports 8-sector pio transfers, lba addressing
		Aug 13 22:34:28 styx /netbsd: wd0: 516MB, 1120 cyl, 16 head, 59 sec, 512 bytes/sect x 1057280 sectors
		Aug 13 22:34:28 styx /netbsd: wd0: drive supports PIO mode 3, DMA mode 1
		Aug 13 22:34:28 styx /netbsd: vga0 at isa0 port 0x3b0-0x3df iomem 0xa0000-0xbffff
		Aug 13 22:34:28 styx /netbsd: wsdisplay0 at vga0: console (80x25, dumb emulation)
		Aug 13 22:34:28 styx /netbsd: lpt0 at isa0 port 0x378-0x37b irq 7
		Aug 13 22:34:28 styx /netbsd: we0 at isa0 port 0x280-0x29f iomem 0xd0000-0xd3fff irq 9
		Aug 13 22:34:29 styx /netbsd: we0: WD8003E Ethernet (16-bit)
		Aug 13 22:34:29 styx /netbsd: we0: Ethernet address 00:80:48:86:ac:5d
		Aug 13 22:34:29 styx /netbsd: pckbc0 at isa0 port 0x60-0x64
		Aug 13 22:34:29 styx /netbsd: pckbd0 at pckbc0 (kbd slot)
		Aug 13 22:34:29 styx /netbsd: pckbc0: using irq 1 for kbd slot
		Aug 13 22:34:29 styx /netbsd: wskbd0 at pckbd0: console keyboard, using wsdisplay0
		Aug 13 22:34:29 styx /netbsd: pcppi0 at isa0 port 0x61
		Aug 13 22:34:29 styx /netbsd: spkr0 at pcppi0
		Aug 13 22:34:29 styx /netbsd: sysbeep0 at pcppi0
		Aug 13 22:34:29 styx /netbsd: npx0 at isa0 port 0xf0-0xff: using exception 16
		Aug 13 22:34:29 styx /netbsd: fdc0 at isa0 port 0x3f0-0x3f7 irq 6 drq 2
		Aug 13 22:34:29 styx /netbsd: fd0 at fdc0 drive 0: 1.44MB, 80 cyl, 2 head, 18 sec
		Aug 13 22:34:29 styx /netbsd: biomask 4840 netmask 4a40 ttymask 4ac2
		Aug 13 22:34:29 styx /netbsd: boot device: wd0
		Aug 13 22:34:29 styx /netbsd: root on wd0a dumps on wd0b

	ddb backtrace (typed in by hand):
		--- trap (number 6) ---
		(null)(f02f5400,2304,f2034002,5ea,f02f5434) at 0x86488000
		_dp8390_get(f02f5400,2304,5ea,f02f5400,2300) at dp8390_get+0x1ef
		_dp8390_read(f02f5400,2304,5ea,f02f5400,f2179008) at _dp8390_read+0x1d
		_dp8390_rint(f02f5400) at _dp8390_rint+0x19b
		_we_recv_int(f02f5400,f02f6d20,f219008,f219008,f0163259) at _we_recv_int+0x7a
		_dp8390_intr(f02f5400) at _dp8390_intr+0x316
		_Xintr9() at _Xintr9+0x0
		--- interrupt ---
		_idle(f033c568,0,c0000000,100,f2178e54 at _idle+0xd
		bpendtsleep(f033c568,118,f0139f00,0,f2178e9c) at bpendtsleep
		_sbwait(f033c568,f2178f88,15d80,f20eb990,0) at _sbwait+0x31
		_soreceive(f033c524,0,f2178ef4,0,0) at _soreceive+0x2af
		_soo_read(f20eb990,f20eb9ac,f2178ef4,f02f9800,1) at _soo_read+0x1d
		_dofileread(f2179008,0,f20eb990,c280,15d80) at _dofileread+0x93
		_sys_read(f2179008,f2178f88,f2178f80,8280,0) at _sys_read+0x4e
		_syscall() at _syscall+0x13d
		-- syscall (number 3) ---
>How-To-Repeat:
	I can repeat this by doing a rdump of my /usr partition.
>Fix:
>Audit-Trail:
>Unformatted: