[c-nsp] "debug ip routing" crashed 3750E

[Antonio Soares]

I have it:

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
CSCei59309 Bug Details 
Crash in iprouting_set_ndb_last_rdb()  

Symptoms
A Cisco platform can crash after enabling "debug ip routing".
This was observed on switch 3750E running IOS release 12.2(37)SE.

Conditions
The problem does happen consistently, each time customer execute the command.

Workaround
Don`t use command "debug ip routing"

Further Problem Description
the crash do not show any exception nor log message however the following line 
can be observed in show context 
Signal = 5, Vector = 0x1100

and the following line can be observed in show version
System returned to ROM by bus error at PC 0x..., address 0x0 
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Unbelievable !


Regards,
 
Antonio Soares, CCIE #18473 (R&S/SP)
amsoares at netcabo.pt

-----Original Message-----
From: Antonio Soares [mailto:amsoares at netcabo.pt] 
Sent: quinta-feira, 4 de Março de 2010 16:18
To: 'cisco-nsp at puck.nether.net'
Subject: "debug ip routing" crashed 3750E

Group,

Well, today i was troubleshooting a routing problem and i enabled "debug ip routing" as i do many times. But this time i got a very
unpleasant surprise:

++++++++++
XXX uptime is 1 minute
System returned to ROM by bus error at PC 0x29CA3C, address 0x0
System image file is "flash:c3750e-universal-mz.122-35.SE5/c3750e-universal-mz.122-35.SE5.bin"
++++++++++

I was connected via telnet. I issued the "terminal monitor" to see what was going on and i just saw my telnet connection going down
:( I didn't see a single flaping route !

I already have a TAC case for this but i would to share this information and also get some comments from the group.

The process related with this must be EIGRP:

(...)
---- Partial decode of process block ----

Pid 249: Process "IP-EIGRP(0): PDM ^D7'XIP-EIGRP(0)"
stack 0x4A272E4  savedsp 0x2A66D4C 
Flags: analyze prefers_new process_arg_valid 
Status     0x00000000 Orig_ra   0x00000000 Routine    0x00000000 Signal 0
Caller_pc  0x00000000 Callee_pc 0x00000000 Dbg_events 0x00000000 State  0
Totmalloc  3837470844   Totfree   3185315280   Totgetbuf  2268    
Totretbuf  0          Edisms    0x0        Eparm 0x0       
Elapsed    0x2F85F52  Ncalls    0x1EF89E84 Ngiveups 0x3AA39   
Priority_q 3          Ticks_5s  0          Cpu_5sec   0        Cpu_1min 172
Cpu_5min   176        Stacksize 0x2328     Lowstack 0x2328    
Ttyptr     0x2A45C80  Mem_holding 0x67E10    Thrash_count 0
Wakeup_reasons      0x0FFFFFFF  Default_wakeup_reasons 0x0FFFFFFF
Direct_wakeup_major 0x00000000  Direct_wakeup_minor 0x00000000

Regs R14-R31, CR, PC, MSR at last suspend; R3 from proc creation:
     R3 : 00000000  R14: 00B7040C  R15: 00000000  R16: 00000000  R17: 00000000 
     R18: 00000000  R19: 00000000  R20: 00000000  R21: 04A7C068  R22: 0480D678 
     R23: 04A7A2FC  R24: 04A7A144  R25: 00000013  R26: 00000000  R27: 00000000 
     R28: 04E49F90  R29: 03C756E4  R30: 00000000  R31: 00000000  CR : 33000059 
(...)



Thanks.

Regards,
 
Antonio Soares, CCIE #18473 (R&S/SP)
amsoares at netcabo.pt