Date: Wed, 7 Jun 2000 13:25:41 -0700 (PDT) From: gibbs@FreeBSD.org To: freebsd-gnats-submit@FreeBSD.org Subject: kern/19106: Corruption of xl driver's TX chain during startup Message-ID: <20000607202541.6BCC537BF28@hub.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 19106
>Category: kern
>Synopsis: Corruption of xl driver's TX chain during startup
>Confidential: no
>Severity: critical
>Priority: medium
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Wed Jun 07 13:30:00 PDT 2000
>Closed-Date:
>Last-Modified:
>Originator: Justin T. Gibbs
>Release: FreeBSD 5.0-currnt as of 2000/06/07
>Organization:
>Environment:
Copyright (c) 1992-2000 The FreeBSD Project.
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California. All rights reserved.
FreeBSD 5.0-CURRENT #0: Wed Jun 7 12:46:08 MDT 2000
gibbs@caspian.plutotech.com:/usr/src/sys/compile/DELL
Timecounter "i8254" frequency 1193182 Hz
Timecounter "TSC" frequency 696409457 Hz
CPU: Pentium III/Pentium III Xeon (696.41-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0x681 Stepping = 1
Features=0x383fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CM
OV,PAT,PSE36,MMX,FXSR,XMM>
real memory = 134209536 (131064K bytes)
avail memory = 127545344 (124556K bytes)
Preloaded elf kernel "kernel.test" at 0xc0311000.
ccd0-3: Concatenated disk drivers
Pentium Pro MTRR support enabled
npx0: <math processor> on motherboard
npx0: INT 16 interface
pcib0: <Intel 82443BX (440 BX) host to PCI bridge> on motherboard
pci0: <PCI bus> on pcib0
pcib1: <Intel 82443BX (440 BX) PCI-PCI (AGP) bridge> at device 1.0 on pci0
pci1: <PCI bus> on pcib1
pci1: <NVidia Riva TNT2 graphics accelerator> at 0.0 irq 10
isab0: <Intel 82371AB PCI to ISA bridge> at device 7.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel PIIX4 ATA33 controller> at device 7.1 on pci0
atapci0: Busmastering DMA not enabled
pci0: <Intel 82371AB/EB (PIIX4) USB controller> at 7.2 irq 14
chip1: <Intel 82371AB Power management controller> port 0x850-0x85f at device 7.
3 on pci0
ahc0: <Adaptec 2940 Ultra2 SCSI adapter> port 0xe800-0xe8ff mem 0xfe001000-0xfe0
01fff irq 11 at device 14.0 on pci0
ahc0: aic7890/91 Wide Channel A, SCSI Id=7, 16/255 SCBs
pci0: <unknown card> (vendor=0x11ab, dev=0x6320) at 16.0 irq 14
xl0: <3Com 3c905B-TX Fast Etherlink XL> port 0xec00-0xec7f mem 0xfe002000-0xfe00
207f irq 14 at device 17.0 on pci0
xl0: Ethernet address: 00:b0:d0:20:77:c2
miibus0: <MII bus> on xl0
xlphy0: <3Com internal media interface> on miibus0
xlphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
pcib2: <DEC 21152 PCI-PCI bridge> at device 19.0 on pci0
pci2: <PCI bus> on pcib2
ahc1: <Adaptec aic7890/91 Ultra2 SCSI adapter> port 0xfc00-0xfcff mem 0xfafff000
-0xfaffffff irq 15 at device 10.0 on pci2
ahc1: aic7890/91 Wide Channel A, SCSI Id=7, 16/255 SCBs
ahc2: <Adaptec aic7880 Ultra SCSI adapter> port 0xf800-0xf8ff mem 0xfaffe000-0xf
affefff irq 15 at device 14.0 on pci2
ahc2: aic7880 Wide Channel A, SCSI Id=7, 16/255 SCBs
fdc0: <NEC 72065B or clone> at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0
fdc0: FIFO enabled, 8 bytes threshold
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: model IntelliMouse, device ID 3
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
sc0: <System console> on isa0
sc0: VGA <16 virtual consoles, flags=0x200>
sio0: reserved for low-level i/o
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16550A
ppc0: This ppc chipset does not support the extended I/O port range...no problem
ppc0: <Parallel port> at port 0x378-0x37b irq 7 on isa0
ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode
ppc0: FIFO with 16/16/8 bytes threshold
ppi0: <Parallel I/O> on ppbus0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
plip0: <PLIP network interface> on ppbus0
unknown0: <PNP0c01> at port 0x800-0x83f,0x850-0x85f,0x62-0x63,0x65-0x6f,0xe0-0xe
f iomem 0-0x9ffff,0x100000-0x7ffffff,0xffe00000-0xffffffff,0xf0000-0xfffff on is
a0
sio2: <16550A-compatible COM port> at port 0x3f8-0x3ff irq 4 on isa0
sio2: type 16550A
unknown: <PNP0501> can't assign resources
unknown: <PNP0401> can't assign resources
unknown: <PNP0700> can't assign resources
unknown: <PNP0f13> can't assign resources
unknown1: <PNP0a03> at port 0xcf8-0xcff on isa0
unknown2: <PNP0c02> at irq 9 on isa0
unknown: <PNP0000> can't assign resources
unknown3: <PNP0003> at iomem 0xfee00000-0xfee0ffff,0xfec00000-0xfec0ffff on isa0
unknown4: <PNP0100> at port 0x40-0x5f irq 0 on isa0
unknown: <PNP0200> can't assign resources
unknown: <PNP0303> can't assign resources
unknown5: <PNP0800> at port 0x61 on isa0
unknown6: <PNP0b00> at port 0x70-0x7f irq 8 on isa0
npxisa0: <Legacy ISA coprocessor support> at port 0xf0-0xff irq 13 on isa0
unknown7: <WSS/SB> at port 0x534-0x537,0x388-0x38b,0x220-0x22f irq 5 drq 1,0 on
isa0
unknown8: <Game> at port 0x3a0-0x3a7 on isa0
unknown9: <Ctrl> at port 0xf00-0xf07 on isa0
>Description:
Some time after the exit of xl_attach, the 9th entry in
sc->xl_cdata.xl_tx_chain gets corrupted. From GDB:
sc->xl_cdata.xl_tx_chain[9] = {xl_ptr = 0x0, xl_mbuf = 0x2020000,
xl_next = 0x0, xl_prev = 0x202, xl_phys = 0}
This causes a panic in m_freem when xl_stop() is called during
the first ioctl call that occurs during network startup.
Clearing this garbage from the debugger is enough to get the system
up and from that point on, it appears to be stable.
>How-To-Repeat:
Boot my system.
>Fix:
I'm still trying to track down the source of the corruption, but I
currently have no fix.
>Release-Note:
>Audit-Trail:
>Unformatted:
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000607202541.6BCC537BF28>