Accesspoint Panic

Today an Accesspoint crashed when I wanted to connect on the serial line.


In case you have never seen an IOS backtrace, here we go:

Mar  1 00:17:11.209: %SYS-3-MGDTIMER: Uninitialized timer, timer stop, timer = 94D444.
-Process= "TCP Timer", ipl= 4, pid= 36
-Traceback= 10A038 10B244 175A6C 175AC4 175CA0 176054 124DDC
========= Dump bp = 94D27C ======================
94D17C:   94D188 FF00001A   9C0000   94D194 FF00001A   9D0000   94D1A0 FF00001A
94D19C:   9E0000   94D1AC FF00001A   9F0000   94D1B8 FF00001A   A00000   94D1C4
94D1BC: FF00001A   A10000   94D1D0 FF00001A   A20000   94D1DC FF00001A   A30000
94D1DC:   94D1E8 FF00001A   A40000   94D1F4 FF00001A   A50000   94D200 FF00001A
94D1FC:   A60000   94D20C FF00001A   A70000   94D218 FF00001A   A80000   94D224
94D21C: FF00001A   A90000   94D230 FF00001A   AA0000   94D23C FF00001A   AB0000
94D23C:   94D248 FF00001A   AC0000   94D254 FF00001A   AD0000   94D260 FF00001A
94D25C:   AE0000   803ACC FF00001A   AF0000        0        0        0 FD0110DF
94D27C: AB1234CD       2F   8EE188   57F064   1137E0   94D338   94AB54 8000004A
94D29C:        1        0   8EE40C DEADFEED   94D304   94D304   8DC830   8DC6BC
94D2BC:   94D2AC   6F16F4      1B4    90000        1        0   5FC784   11206C
94D2DC:   69F898        0        0        0        0        0        0        0
94D2FC:        0        0        0        0   94D2F4   94D2AC        0   73CF7C
94D31C:        0        0        0  FFFFFFF  FFFFFFF        0 FD0110E0 AB1234CD
94D33C:        0        0   57A3C8   100FC0   950B40   94D290     1BF0        0
94D35C:  D0D0D0D DEADBEEF  D0D0D0D  D0D0D0D  D0D0D0D   8DC8DC   6F6104  D0D0D0D
========= Dump bp->next = 94D338 ======================
94D238:   AB0000   94D248 FF00001A   AC0000   94D254 FF00001A   AD0000   94D260
94D258: FF00001A   AE0000   803ACC FF00001A   AF0000        0        0        0
94D278: FD0110DF AB1234CD       2F   8EE188   57F064   1137E0   94D338   94AB54
94D298: 8000004A        1        0   8EE40C DEADFEED   94D304   94D304   8DC830
94D2B8:   8DC6BC   94D2AC   6F16F4      1B4    90000        1        0   5FC784
94D2D8:   11206C   69F898        0        0        0        0        0        0
94D2F8:        0        0        0        0        0   94D2F4   94D2AC        0
94D318:   73CF7C        0        0        0  FFFFFFF  FFFFFFF        0 FD0110E0
94D338: AB1234CD        0        0   57A3C8   100FC0   950B40   94D290     1BF0
94D358:        0  D0D0D0D DEADBEEF  D0D0D0D  D0D0D0D  D0D0D0D   8DC8DC   6F6104
94D378:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D
94D398:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D
94D3B8:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D
94D3D8:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D
94D3F8:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D
94D418:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D
========== Dump bp->previous = 94AB54 =====================
94AA54:        0        0        0        0        0        0        0        0
94AA74:        0        0        0        0        0        0        0        0
94AA94:        0        0        0        0        0        0        0        0
94AAB4:        0        0        0        0        0        0        0        0
94AAD4:        0        0        0        0        0        0        0        0
94AAF4:        0        0        0        0        0        0        0        0
94AB14:        0        0        0        0        0        0        0        0
94AB34:        0        0 FD0110DF AB1234CD       29   8DF234   7E6E98   2172EC
94AB54:   94D27C   948B28 8000138A        1    FB190        0   8030CC   7E6E5C
94AB74:        0   7E6E5C      200      26B    C000C      1CC        0        0
94AB94:        0        C    30000   6F5D58 466C6173 68667320 53656374 6F720000
94ABB4:   94B568   94D26C   94B568   94B574   94B580   94B58C   94B598   94B5A4
94ABD4:   94B5B0   94B5BC   94B5C8   94B5D4   94B5E0   94B5EC   94B5F8   94B604
94ABF4:   94B610   94B61C   94B628   94B634   94B640   94B64C   94B658   94B664
94AC14:   94B670   94B67C   94B688   94B694   94B6A0   94B6AC   94B6B8   94B6C4
94AC34:   94B6D0   94B6DC   94B6E8   94B6F4   94B700   94B70C   94B718   94B724
============================================
%Software-forced reload
Unexpected exception to CPUvector 2000, PC = 12102C
-Traceback= 12102C 105818 106508 107E60 1080A8 124DDC
Nested exception_rom_monitor call (2 times)
Unexpected exception to CPUvector 2000, PC = 12102C
-Traceback= 12102C 105818 106508 107E60 1080A8 124DDC
Exception (8192)! Debug Exception (Could be NULL pointer dereference)
SRR0 = 0x00112534  SRR1 = 0x00029210  SRR2 = 0x0020E338  SRR3 = 0x00021010
ESR = 0x00000000  DEAR = 0x00000000  TSR = 0x84000000  DBSR = 0x10000000
CPU Register Context:
Vector = 0x00002000  PC = 0x0012102C  MSR = 0x00029210  CR = 0x30000005
LR = 0x00120FCC  CTR = 0x0004F460  XER = 0xC0000000
R0 = 0x00120FCC  R1 = 0x007A9850  R2 = 0x00000000  R3 = 0x00725D90
R4 = 0xFFFFFFFE  R5 = 0x00000000  R6 = 0x007A9828  R7 = 0x00000000
R8 = 0x00000001  R9 = 0x00000000  R10 = 0x00000000  R11 = 0x00725D28
R12 = 0x00000017  R13 = 0x10000002  R14 = 0x00000000  R15 = 0x00000000
R16 = 0x00000000  R17 = 0x00000000  R18 = 0x00000000  R19 = 0x00000000
R20 = 0x00000000  R21 = 0x00000000  R22 = 0x00000000  R23 = 0x00000000
R24 = 0x00000000  R25 = 0xAB1234CD  R26 = 0x00989057  R27 = 0x0057A8E0
R28 = 0x006F6E00  R29 = 0x0094D2A4  R30 = 0x00000000  R31 = 0x00000000
Stack trace:
PC = 0x0012102C, SP = 0x007A9850
Frame 00: SP = 0x007A9860    PC = 0x00120FCC
Frame 01: SP = 0x007A9880    PC = 0x00105818
Frame 02: SP = 0x007A98B0    PC = 0x00106508
Frame 03: SP = 0x007A98C8    PC = 0x00107E60
Frame 04: SP = 0x007A98E0    PC = 0x001080A8
Frame 05: SP = 0x00000000    PC = 0x00124DDC
Cisco Internetwork Operating System Software
IOS (tm) C1200 Software (C1200-K9W7-M), Version 12.2(13)JA1, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
TAC Support: http://www.cisco.com/tac
Copyright (c) 1986-2003 by cisco Systems, Inc.
Compiled Fri 14-Nov-03 15:09 by kellmill

No, I don’t know why a TCP process crashed when I connected via the console, at that time the Accesspoint was not even connected to the network.
And it looks like this is reproducable. Luckily there is a new version, so I will upgrade.

BTW, in February, for downlading the Accesspoint firmware or the Release Notes for the Accesspointfirmare, I only had to fill out a form, that I am not a terrorist and I will not use it against the United States. It looks like a terrorist abused this form by entering a fake name, because now a CCO account is required.