From owner-freebsd-pf@FreeBSD.ORG Sat Oct 22 22:45:18 2011 Return-Path: Delivered-To: freebsd-pf@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B52BB1065670 for ; Sat, 22 Oct 2011 22:45:18 +0000 (UTC) (envelope-from jmg@h2.funkthat.com) Received: from h2.funkthat.com (gate.funkthat.com [70.36.235.232]) by mx1.freebsd.org (Postfix) with ESMTP id 9520C8FC0C for ; Sat, 22 Oct 2011 22:45:18 +0000 (UTC) Received: from h2.funkthat.com (localhost [127.0.0.1]) by h2.funkthat.com (8.14.3/8.14.3) with ESMTP id p9MM6sRH073385 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Sat, 22 Oct 2011 15:06:54 -0700 (PDT) (envelope-from jmg@h2.funkthat.com) Received: (from jmg@localhost) by h2.funkthat.com (8.14.3/8.14.3/Submit) id p9MM6s8m073384 for freebsd-pf@FreeBSD.org; Sat, 22 Oct 2011 15:06:54 -0700 (PDT) (envelope-from jmg) Date: Sat, 22 Oct 2011 15:06:54 -0700 From: John-Mark Gurney To: freebsd-pf@FreeBSD.org Message-ID: <20111022220654.GD25601@funkthat.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4.2.3i X-Operating-System: FreeBSD 7.2-RELEASE i386 X-Files: The truth is out there X-URL: http://resnet.uoregon.edu/~gurney_j/ X-Resume: http://resnet.uoregon.edu/~gurney_j/resume.html X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.2.2 (h2.funkthat.com [127.0.0.1]); Sat, 22 Oct 2011 15:06:55 -0700 (PDT) Cc: Subject: panic loading/enabling pf on ARM RELENG_9 X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Oct 2011 22:45:18 -0000 I'm trying to bring up an old Gateworks GW2348 board and get a panic when I have enabled pf and try to load rules at boot... The only modifications between the AVILA config file and mine is adding the pf, pflog and pfsync devices since AVILA doesn't have them enabled by default, nor does it build the modules... So I am trying to staticly build in pf... W/o pf, it boots fine. The entire set of boot messages is as follows: +No devices on IDE controller 0 Trying NPE-B...success. Using NPE-B with PHY 0. ... waiting for BOOTP information Ethernet eth0: MAC address 00:d0:12:02:47:33 IP: 192.168.0.31/255.255.255.0, Gateway: 192.168.0.14 Default server: 192.168.0.4 RedBoot(tm) bootstrap and debug environment [ROM] Gateworks certified release, version 2.02 - built 05:22:19, Mar 3 2006 Platform: Gateworks Avila GW234X (IXP42X 533MHz) BE Copyright (C) 2000, 2001, 2002, 2003, 2004 Red Hat, Inc. Copyright (C) 2004, 2005 Gateworks Corporation RAM: 0x00000000-0x04000000, [0x000298b0-0x03fc1000] available FLASH: 0x50000000 - 0x51000000, 128 blocks of 0x00020000 bytes each. == Executing boot script in 1.000 seconds - enter ^C to abort RedBoot> load -b 0x200000 -h 192.168.0.4 kernel.avila Using default protocol (TFTP) Address offset = 0x40000000 Entry point: 0x00200100, address range: 0x00200000-0x0065c328 RedBoot> go KDB: debugger backends: ddb KDB: current backend: ddb Copyright (c) 1992-2011 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 9.0-RC1 #1 r226641: Mon Oct 10 11:13:06 PDT 2011 jmg@pcbsd-779:/usr/obj/arm.armeb/usr/src/sys/gate2 arm CPU: IXP425 533MHz rev 1 (ARMv5TE) (XScale core) DC enabled IC enabled WB enabled LABT branch prediction enabled 32KB/32B 32-way Instruction cache 32KB/32B 32-way write-back-locking Data cache real memory = 67108864 (64 MB) avail memory = 57380864 (54 MB) ixp0: on motherboard ixp0: 37fff pcib0: on ixp0 pci0: on pcib0 ixpclk0: on ixp0 ixpiic0: on ixp0 iicbb0: on ixpiic0 iicbus0: on iicbb0 master-only iic0: on iicbus0 ad74180: at addr 0x50 on iicbus0 ds1672_rtc0: at addr 0xd0 on iicbus0 ixpwdog0: on ixp0 uart0: on ixp0 uart0: console (115200,n,8,1) uart1: on ixp0 ixpqmgr0: on ixp0 npe0: on ixp0 npe0: MAC at 0xc8009000 npe0: MII at 0xc8009000 npe0: load fw image IXP425.NPE-B Func 0x2 Rev 2.1 miibus0: on npe0 ukphy0: PHY 0 on miibus0 ukphy0: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto npe0: Ethernet address: 00:d0:12:02:47:33 npe1: on ixp0 npe1: MAC at 0xc800a000 npe1: MII at 0xc8009000 npe1: load fw image IXP425.NPE-C Func 0x5 Rev 2.1 miibus1: on npe1 ukphy1: PHY 1 on miibus1 ukphy1: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto npe1: Ethernet address: 00:d0:12:12:47:33 cfi0: on ixp0 cfid0 on cfi0 ata_avila0: on ixp0 ata0: on ata_avila0 led_avila0: on ixp0 gpio_avila0: on ixp0 Timecounter "IXP4XX Timer" frequency 66666600 Hz quality 1000 Timecounters tick every 10.000 msec bootpc_init: wired to interface 'npe0' Sending DHCP Discover packet from interface npe0 (00:d0:12:02:47:33) npe0: link state changed to UP Received DHCP Offer packet on npe0 from 192.168.0.4 (accepted) (no root path) Sending DHCP Request packet from interface npe0 (00:d0:12:02:47:33) Received DHCP Ack packet on npe0 from 192.168.0.4 (accepted) (got root path) npe0 at 192.168.0.31 server 192.168.0.4 boot file kernel.avila subnet mask 255.255.255.0 router 192.168.0.14 rootfs 192.168.0.80:/home/jmg/armeb.xscale rootopts nolockd Adjusted interface npe0 RPC timeout for server 192.168.0.80 RPC timeout for server 192.168.0.80 RPC timeout for server 192.168.0.80 RPC timeout for server 192.168.0.80 RPC timeout for server 192.168.0.80 RPC timeout for server 192.168.0.80 RPC timeout for server 192.168.0.80 RPC timeout for server 192.168.0.80 RPC timeout for server 192.168.0.80 RPC timeout for server 192.168.0.80 RPC timeout for server 192.168.0.80 RPC timeout for server 192.168.0.80 RPC timeout for server 192.168.0.80 RPC timeout for server 192.168.0.80 RPC timeout for server 192.168.0.80 RPC timeout for server 192.168.0.80 RPC timeout for server 192.168.0.80 RPC timeout for server 192.168.0.80 RPC timeout for server 192.168.0.80 RPC timeout for server 192.168.0.80 hwpmc: XSCALE/4/32/0x1ff Trying to mount root from nfs: []... NFS ROOT: 192.168.0.80:/home/jmg/armeb.xscale Interface npe0 IP-Address 192.168.0.31 Broadcast 192.168.0.255 Setting hostuuid: 1d60d808-1dd2-11b2-9e5d-00d012024733. Setting hostid: 0x0181803e. Entropy harvesting: interrupts ethernet point_to_point kickstart. Starting file system checks: mount_nfs: can't update /var/db/mounttab for 192.168.0.80:/home/jmg/armeb.xscale Mounting local file systems:. Setting hostname: gate2.funkthat.com. npe1: ixpnpe_intr: status 0x60000 ifconfig: inet: bad value Starting Network: lo0 npe0 npe1. lo0: flags=8049 metric 0 mtu 16384 options=3 inet 127.0.0.1 netmask 0xff000000 npe0: flags=8843 metric 0 mtu 1500 options=80008 ether 00:d0:12:02:47:33 inet 192.168.0.31 netmask 0xffffff00 broadcast 192.168.0.255 media: Ethernet autoselect (100baseTX ) status: active npe1: flags=8843 metric 0 mtu 1500 options=80008 npe1: link state changed to DOWN ether 00:d0:12:12:47:33 media: Ethernet autoselect (none) status: no carrier Starting devd. DHCPDISCOVER on npe0 to 255.255.255.255 port 67 interval 7 DHCPOFFER from 192.168.0.4 DHCPREQUEST on npe0 to 255.255.255.255 port 67 DHCPACK from 192.168.0.4 bound to 192.168.0.31 -- renewal in 18000 seconds. Starting pflog. pflog0: promiscuous mode enabled Oct 22 15:01:00 pflogd[678]: [priv]: msg PRIV_OPEN_LOG received Enabling pfpanic: mutex pf task mtx owned at /usr/src/sys/contrib/pf/net/if_pfsync.c:3163 KDB: enter: panic [ thread pid 686 tid 100055 ] Stopped at kdb_enter+0x48: ldrb r15, [r15, r15, ror r15]! db> bt Tracing pid 686 tid 100055 td 0xc0ee3b80 kdb_enter() at kdb_enter+0xc scp=0xc03c2d90 rlv=0xc03931bc (panic+0xcc) rsp=0xc60bdbe0 rfp=0xc60bdbf4 r4=0x00000100 panic() at panic+0x10 scp=0xc0393100 rlv=0xc0383ae0 (_mtx_assert+0x134) rsp=0xc60bdc08 rfp=0xc60bdc18 _mtx_assert() at _mtx_assert+0xc scp=0xc03839b8 rlv=0xc021f2c8 (pfsync_send_plus+0xd8) rsp=0xc60bdc1c rfp=0xc60bdc40 r4=0x00000c50 pfsync_send_plus() at pfsync_send_plus+0xc scp=0xc021f1fc rlv=0xc021f41c (pfsync_clear_states+0x80) rsp=0xc60bdc44 rfp=0xc60bdc74 r10=0xc0ee3b80 r8=0xc0ee2800 r7=0x00000000 r6=0x9ce3bc1b r5=0xc0ee2878 r4=0xc60bdc44 pfsync_clear_states() at pfsync_clear_states+0xc scp=0xc021f3a8 rlv=0xc0235190 (pfioctl+0x1730) rsp=0xc60bdc78 rfp=0xc60bdd30 r6=0xc05814c8 r5=0x00000000 r4=0xc0ee2800 pfioctl() at pfioctl+0xc scp=0xc0233a6c rlv=0xc02fc224 (dev2udev+0x364) rsp=0xc60bdd34 rfp=0xc60bdd70 r10=0x00000000 r9=0xc60bdeac r8=0xc0de6c40 r7=0x00000000 r6=0xc0ee3b80 r5=0xc0ee2800 r4=0xc0cc4412 dev2udev() at dev2udev+0x27c scp=0xc02fc13c rlv=0xc03d78a0 (kern_ioctl+0x23c) rsp=0xc60bdd74 rfp=0xc60bdda4 r10=0xc0ee3b80 r9=0xc60bdeac r8=0x00000003 r7=0xc0dc5500 r6=0x00000000 r5=0xc0cc4412 r4=0xc0ee2800 kern_ioctl() at kern_ioctl+0xc scp=0xc03d7670 rlv=0xc03d7a24 (sys_ioctl+0x114) rsp=0xc60bdda8 rfp=0xc60bddd4 r10=0xc0ee3b80 r8=0xc0ee2800 r7=0xc60bde30 r6=0x00000000 r5=0x000000cc r4=0xc0cc4412 sys_ioctl() at sys_ioctl+0xc scp=0xc03d791c rlv=0xc0543fd0 (swi_handler+0x2f4) rsp=0xc60bddd8 rfp=0xc60bdea8 r10=0x00000000 r8=0xc0ee1000 r7=0xc0ee3b80 r6=0x00000004 r5=0x00000010 r4=0x00000003 swi_handler() at swi_handler+0xc scp=0xc0543ce8 rlv=0xc05355ec (swi_entry+0x40) rsp=0xc60bdeac rfp=0xbfffea10 r10=0x00000003 r9=0xbfffee7c r8=0x00000000 r7=0x00000000 r6=0x00000000 r5=0x00000003 r4=0x00000000 db> -- John-Mark Gurney Voice: +1 415 225 5579 "All that I will do, has been done, All that I have, has not."