From owner-freebsd-bugs Wed Jun 7 13:30:14 2000 Delivered-To: freebsd-bugs@freebsd.org Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21]) by hub.freebsd.org (Postfix) with ESMTP id 2006837BC7B for ; Wed, 7 Jun 2000 13:30:01 -0700 (PDT) (envelope-from gnats@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.9.3/8.9.2) id NAA44523; Wed, 7 Jun 2000 13:30:00 -0700 (PDT) (envelope-from gnats@FreeBSD.org) Received: by hub.freebsd.org (Postfix, from userid 32767) id 6BCC537BF28; Wed, 7 Jun 2000 13:25:41 -0700 (PDT) Message-Id: <20000607202541.6BCC537BF28@hub.freebsd.org> Date: Wed, 7 Jun 2000 13:25:41 -0700 (PDT) From: gibbs@FreeBSD.org To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-1.0 Subject: kern/19106: Corruption of xl driver's TX chain during startup Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org >Number: 19106 >Category: kern >Synopsis: Corruption of xl driver's TX chain during startup >Confidential: no >Severity: critical >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Wed Jun 07 13:30:00 PDT 2000 >Closed-Date: >Last-Modified: >Originator: Justin T. Gibbs >Release: FreeBSD 5.0-currnt as of 2000/06/07 >Organization: >Environment: Copyright (c) 1992-2000 The FreeBSD Project. Copyright (c) 1982, 1986, 1989, 1991, 1993 The Regents of the University of California. All rights reserved. FreeBSD 5.0-CURRENT #0: Wed Jun 7 12:46:08 MDT 2000 gibbs@caspian.plutotech.com:/usr/src/sys/compile/DELL Timecounter "i8254" frequency 1193182 Hz Timecounter "TSC" frequency 696409457 Hz CPU: Pentium III/Pentium III Xeon (696.41-MHz 686-class CPU) Origin = "GenuineIntel" Id = 0x681 Stepping = 1 Features=0x383fbff real memory = 134209536 (131064K bytes) avail memory = 127545344 (124556K bytes) Preloaded elf kernel "kernel.test" at 0xc0311000. ccd0-3: Concatenated disk drivers Pentium Pro MTRR support enabled npx0: on motherboard npx0: INT 16 interface pcib0: on motherboard pci0: on pcib0 pcib1: at device 1.0 on pci0 pci1: on pcib1 pci1: at 0.0 irq 10 isab0: at device 7.0 on pci0 isa0: on isab0 atapci0: at device 7.1 on pci0 atapci0: Busmastering DMA not enabled pci0: at 7.2 irq 14 chip1: port 0x850-0x85f at device 7. 3 on pci0 ahc0: port 0xe800-0xe8ff mem 0xfe001000-0xfe0 01fff irq 11 at device 14.0 on pci0 ahc0: aic7890/91 Wide Channel A, SCSI Id=7, 16/255 SCBs pci0: (vendor=0x11ab, dev=0x6320) at 16.0 irq 14 xl0: <3Com 3c905B-TX Fast Etherlink XL> port 0xec00-0xec7f mem 0xfe002000-0xfe00 207f irq 14 at device 17.0 on pci0 xl0: Ethernet address: 00:b0:d0:20:77:c2 miibus0: on xl0 xlphy0: <3Com internal media interface> on miibus0 xlphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto pcib2: at device 19.0 on pci0 pci2: on pcib2 ahc1: port 0xfc00-0xfcff mem 0xfafff000 -0xfaffffff irq 15 at device 10.0 on pci2 ahc1: aic7890/91 Wide Channel A, SCSI Id=7, 16/255 SCBs ahc2: port 0xf800-0xf8ff mem 0xfaffe000-0xf affefff irq 15 at device 14.0 on pci2 ahc2: aic7880 Wide Channel A, SCSI Id=7, 16/255 SCBs fdc0: at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0 fdc0: FIFO enabled, 8 bytes threshold fd0: <1440-KB 3.5" drive> on fdc0 drive 0 atkbdc0: at port 0x60,0x64 on isa0 atkbd0: irq 1 on atkbdc0 psm0: irq 12 on atkbdc0 psm0: model IntelliMouse, device ID 3 vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 sc0: on isa0 sc0: VGA <16 virtual consoles, flags=0x200> sio0: reserved for low-level i/o sio1 at port 0x2f8-0x2ff irq 3 on isa0 sio1: type 16550A ppc0: This ppc chipset does not support the extended I/O port range...no problem ppc0: at port 0x378-0x37b irq 7 on isa0 ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode ppc0: FIFO with 16/16/8 bytes threshold ppi0: on ppbus0 lpt0: on ppbus0 lpt0: Interrupt-driven port plip0: on ppbus0 unknown0: at port 0x800-0x83f,0x850-0x85f,0x62-0x63,0x65-0x6f,0xe0-0xe f iomem 0-0x9ffff,0x100000-0x7ffffff,0xffe00000-0xffffffff,0xf0000-0xfffff on is a0 sio2: <16550A-compatible COM port> at port 0x3f8-0x3ff irq 4 on isa0 sio2: type 16550A unknown: can't assign resources unknown: can't assign resources unknown: can't assign resources unknown: can't assign resources unknown1: at port 0xcf8-0xcff on isa0 unknown2: at irq 9 on isa0 unknown: can't assign resources unknown3: at iomem 0xfee00000-0xfee0ffff,0xfec00000-0xfec0ffff on isa0 unknown4: at port 0x40-0x5f irq 0 on isa0 unknown: can't assign resources unknown: can't assign resources unknown5: at port 0x61 on isa0 unknown6: at port 0x70-0x7f irq 8 on isa0 npxisa0: at port 0xf0-0xff irq 13 on isa0 unknown7: at port 0x534-0x537,0x388-0x38b,0x220-0x22f irq 5 drq 1,0 on isa0 unknown8: at port 0x3a0-0x3a7 on isa0 unknown9: at port 0xf00-0xf07 on isa0 >Description: Some time after the exit of xl_attach, the 9th entry in sc->xl_cdata.xl_tx_chain gets corrupted. From GDB: sc->xl_cdata.xl_tx_chain[9] = {xl_ptr = 0x0, xl_mbuf = 0x2020000, xl_next = 0x0, xl_prev = 0x202, xl_phys = 0} This causes a panic in m_freem when xl_stop() is called during the first ioctl call that occurs during network startup. Clearing this garbage from the debugger is enough to get the system up and from that point on, it appears to be stable. >How-To-Repeat: Boot my system. >Fix: I'm still trying to track down the source of the corruption, but I currently have no fix. >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message