Date: Mon, 3 May 1999 18:56:32 +0200 (CEST) From: Blaz Zupan <blaz@gold.amis.net> To: freebsd-isdn@freebsd.org Subject: Crashes possibly caused by i4b Message-ID: <Pine.BSF.4.10.9905031845350.2607-100000@gold.amis.net>
next in thread | raw e-mail | index | archive | help
Ever since I started to use 3.0-CURRENT, then 3.1 and now 4.0-CURRENT, I experience occasional crashes when I connect to the net. The machine was running just fine when I was using 2.2.8 and i4b 0.63. It was really hard to find out what was causing the problem, as no crash dump was generated and nothing was logged, the machine just plain rebooted or stopped responding. Today I was finally able to track down the possible culprit, and it seems the problem is in i4b. I'm using a callback setup. When I call my provider, he refuses the call and calls me back. Unfortunatelly the server (a Lucent Portmaster 3) seems to have a bug and sometimes calls me back _twice_. A couple of seconds after the second call arrives, the machine either reboots or stops responding. I was able to find this out by switching to the virtual console on which isdnd was running. After this halt, I was able to break into the kernel debugger, which switched me to the first console, on which I read the following: i4b-L2-i4b_i_frame_queued_up: V(S) == ((V(A) + k) & 127)! i4b-L2-i4b_i_frame_queued_up: state = ST_MULTIFR i4b-L2-i4b_print_l2var: unit0 V(R)=5, V(S)=4, V(A)=3, ACKP=0, PBSY=0, OBSY=0 i4b-L3-i4b_decode_q931: cannot find calldescriptor for cr = 0x1, crflag = 0x0, msg = 0x4d, frame = 0x4d When breaking into the debugger, I got this as well: Fatal double fault: eip = 0xc013ff74 esp = 0xc4a33000 ebp = 0xc4a33008 Doing a backtrace did not reveal anything relevat, that's why I simply typed "panic" which produced a kernel core dump that I have saved, together with a copy of the kernel. If anybody thinks he might be able to debug this with the data provided, I can put the kernel and crash dump up for FTP. Here is what I get when I start gdb on the crash dump: /var/crash> gdb --kernel kernel.7 vmcore.7 GDB is free software and you are welcome to distribute copies of it under certain conditions; type "show copying" to see the conditions. There is absolutely no warranty for GDB; type "show warranty" for details. GDB 4.16 (i386-unknown-freebsd), Copyright 1996 Free Software Foundation, Inc...(no debugging symbols found)... IdlePTD 2924544 initial pcb at 2529a0 panicstr: from debugger panic messages: --- panic: double fault panic: from debugger dumping to dev 20401, offset 278528 dump 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 --- #0 0xc01583ec in boot () (kgdb) bt #0 0xc01583ec in boot () #1 0xc0158625 in panic () #2 0xc0126f75 in db_panic () #3 0xc0126f15 in db_command () #4 0xc0126fda in db_command_loop () #5 0xc012911b in db_trap () #6 0xc01d1118 in kdb_trap () #7 0xc01dc180 in trap () #8 0xc01d135b in Debugger () #9 0xc015861c in panic () #10 0xc01dc7d7 in dblfault_handler () I guess not too usefull, but then again, I really don't know much about kernel debugging :) The machine is a Pentium 200MMX, 64MB RAM, Adaptec 2940U controller, onboard sound card and 4.0-CURRENT as of yesterday. Here is my dmesg output: Copyright (c) 1992-1999 The FreeBSD Project. Copyright (c) 1982, 1986, 1989, 1991, 1993 The Regents of the University of California. All rights reserved. FreeBSD 4.0-CURRENT #7: Sun May 2 15:08:49 CEST 1999 blaz@gold.amis.net:/usr/home/blaz/FreeBSD/src/sys/compile/GOLD Timecounter "i8254" frequency 1193182 Hz CPU: Pentium/P55C (232.88-MHz 586-class CPU) Origin = "GenuineIntel" Id = 0x543 Stepping=3 Features=0x8001bf<FPU,VME,DE,PSE,TSC,MSR,MCE,CX8,MMX> real memory = 67108864 (65536K bytes) config> pnp 1 0 os enable config> pnp 1 0 port0 0x220 port1 0x530 port2 0x388 port3 0x370 config> pnp 1 0 irq0 5 drq0 1 drq1 0 config> pnp 2 0 os enable config> pnp 2 0 port0 0x280 irq0 10 avail memory = 62427136 (60964K bytes) Preloaded elf kernel "kernel" at 0xc02b8000. Preloaded userconfig_script "/boot/kernel.conf" at 0xc02b809c. Probing for PnP devices: CSN 1 Vendor ID: YMH0030 [0x3000a865] Serial 0x80860001 Comp ID: PNPb02f [0x2fb0d041] mss_attach <Yamaha SA3>1 at 0x530 irq 5 dma 1:0 flags 0x10 setting up yamaha registers set yamaha master volume to max pcm1 (CS423x/Yamaha/AD1816 <Yamaha SA3> sn 0x80860001) at 0x530-0x537 irq 5 drq 1 flags 0x10 on isa CSN 2 Vendor ID: CPX1501 [0x0115180e] Serial 0x48ed418e Comp ID: PNP80d6 [0xd680d041] ed1: address 00:80:48:ed:41:8e, type NE2000 (16 bit) ed1 (edpnp <NE2000> sn 0x48ed418e) at 0x280-0x29f irq 10 on isa npx0: <math processor> on motherboard npx0: INT 16 interface apm0: <APM BIOS> on motherboard apm: found APM BIOS version 1.2 pcib0: <PCI host bus adapter> on motherboard pci0: <PCI bus> on pcib0 chip0: <Intel 82439TX System Controller (MTXC)> at device 0.0 on pci0 isab0: <Intel 82371AB PCI to ISA bridge> at device 7.0 on pci0 chip1: <Intel 82371AB Power management controller> at device 7.3 on pci0 ahc0: <Adaptec 2940 Ultra SCSI adapter> at device 14.0 on pci0 ahc0: aic7880 Single Channel A, SCSI Id=7, 16/255 SCBs ahc0: interrupting at irq 14 isa0: <ISA bus> on motherboard fdc0: interrupting at irq 6 fdc0: <NEC 72065B or clone> at port 0x3f0-0x3f7 irq 6 drq 2 on isa0 fdc0: FIFO enabled, 8 bytes threshold fd0: <1440-KB 3.5" drive> at fdc0 drive 0 atkbdc0: <keyboard controller (i8042)> at port 0x60 on isa0 atkbd0: <AT Keyboard> on atkbdc0 atkbd0: interrupting at irq 1 vga0: <Generic ISA VGA> on isa0 sc0: <System console> on isa0 sc0: VGA color <16 virtual consoles, flags=0x0> sio0 at port 0x3f8-0x3ff irq 4 on isa0 sio0: type 16550A sio0: interrupting at irq 4 sio1 at port 0x2f8-0x2ff irq 3 on isa0 sio1: type 16550A sio1: interrupting at irq 3 isic0 at port 0xd80 irq 15 flags 0x3 on isa0 isic0: Teles S0/16.3 isic0: ISAC 2085 Version A1/A2 or 2086/2186 Version 1.1 (IOM-2) (Addr=0x960) isic0: HSCX 82525 or 21525 Version 2.1 (AddrA=0x160, AddrB=0x560) isic0: interrupting at irq 15 ppc0 at port 0x378-0x37f irq 7 on isa0 ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode ppc0: FIFO with 16/16/8 bytes threshold lpt0: <generic printer> on ppbus 0 lpt0: Interrupt-driven port ppc0: interrupting at irq 7 Intel Pentium detected, installing workaround for F00F bug i4b: ISDN call control device attached i4bisppp: 4 ISDN SyncPPP device(s) attached i4bctl: ISDN system control port attached i4bipr: 4 IP over raw HDLC ISDN device(s) attached i4btel: 2 ISDN telephony interface device(s) attached i4brbch: 4 raw B channel access device(s) attached i4btrc: 4 ISDN trace device(s) attached Waiting 2 seconds for SCSI devices to settle changing root device to da0s1a da1 at ahc0 bus 0 target 1 lun 0 da1: <NEC D3847 0307> Fixed Direct Access SCSI-2 device da1: 10.000MB/s transfers (10.000MHz, offset 15) da1: 1547MB (3170160 512 byte sectors: 255H 63S/T 197C) cd0 at ahc0 bus 0 target 3 lun 0 cd0: <TEAC CD-ROM CD-532S 3.0A> Removable CD-ROM SCSI-2 device cd0: 10.000MB/s transfers (10.000MHz, offset 15) cd0: Attempt to query device size failed: NOT READY, Medium not present da0 at ahc0 bus 0 target 0 lun 0 da0: <IBM DORS-32160 WA6A> Fixed Direct Access SCSI-2 device da0: 10.000MB/s transfers (10.000MHz, offset 15), Tagged Queueing Enabled da0: 2063MB (4226725 512 byte sectors: 255H 63S/T 263C) WARNING: / was not properly dismounted ffs_mountfs: superblock updated for soft updates ffs_mountfs: superblock updated for soft updates ffs_mountfs: superblock updated for soft updates sio1: 1 more silo overflow (total 1) sio1: 1 more silo overflow (total 2) i4b: unit 0, assigned TEI = 96 = 0x60 Any help will be appreciated. Blaz Zupan, blaz@amis.net, http://www.herbie.amis.net Medinet d.o.o., Linhartova 21, 2000 Maribor, Slovenia To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isdn" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.10.9905031845350.2607-100000>