Subject: port-i386/3337: Misc fatal kernel faults.
To: None <gnats-bugs@gnats.netbsd.org>
From: None <jarle@runit.sintef.no>
List: netbsd-bugs
Date: 03/16/1997 22:49:21
>Number:         3337
>Category:       port-i386
>Synopsis:       Misc fatal kernel faults.
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    gnats-admin (GNATS administrator)
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Mar 16 14:05:02 1997
>Last-Modified:
>Originator:     Jarle Greipsland
>Organization:
SINTEF/RUNIT
>Release:        1997-03-07
>Environment:
	
System: NetBSD natteravn.runit.sintef.no 1.2C NetBSD 1.2C (NATTERAVN) #0: Sat Mar 8 19:58:51 MET 1997 jarle@natteravn.runit.sintef.no:/usr/src/sys/arch/i386/compile/NATTERAVN i386


>Description:
We've recently set up a new system with NetBSD-1.2.  Unfortunately it has
taken up the habit of crashing every now and then.  One of these crashes
left us a saved image, and dmesg'ing this image provided us with the
following messages:

Crash #1: NetBSD-1.2 kernel tweaked to run with 128MB memory.
fatal page fault in supervisor mode
trap type 6 code 0 eip f811168e cs 8 eflags 10206 cr2 d88855c0 cpl e000d25a
panic: trap
syncing disks... fatal page fault in supervisor mode
trap type 6 code 3 eip f81276b7 cs 8 eflags 10282 cr2 1edd0 cpl 0
panic: trap

The active processes at the time were a few xterms with shells, the usual
set of system processes, named ver. 8.1-t3b with a few named-xfers going,
and a copy of OpenV*NetBackup bpbkar (backup client program) running in
IBCS2 emulation mode.

Now, this crash tricked us into trying crashme in order to see if we were
able to reproduce the crash.  Well, we were not able to do that.  Instead
we ran into a series of other crashes.

Crash #2:  Freshly rebooted system, one user logged in on the console
running 'crashme +2000 666 100 1:00:00':

fatal invalid TSS fault in user mode
trap type 271 code 0 eip 18000 cs 23 eflags 214202 cr2 18000 cpl 0
panic: trap
syncing disks... 4 4 done

Crash #3: Freshly rebooted system, one user logged in on the console
running 'crashme +2000 666 100 1:00:00':

kernel: type 271 trap, code = 0
stopped at     0x18000:     iret

We've so far reproduced Crash #3 on a system with 64MB of memory running
NetBSD-current as of 1997-03-07.

I've still got the kernel crash dumps for #1 and #2 around, so I can dig up
more information if anyone is interested.  Be warned though that they're
128MB each so I'm not inclined to keeping them forever ....

>How-To-Repeat:

Run crashme version 2.4.  On my system it took less than 30 seconds to
crash the system.

>Fix:

Unknown.
>Audit-Trail:
>Unformatted: