panic loading/enabling pf on ARM RELENG_9

John-Mark Gurney jmg at
Sat Oct 22 22:45:18 UTC 2011

I'm trying to bring up an old Gateworks GW2348 board and get a
panic when I have enabled pf and try to load rules at boot...

The only modifications between the AVILA config file and mine is
adding the pf, pflog and pfsync devices since AVILA doesn't have
them enabled by default, nor does it build the modules...  So I am
trying to staticly build in pf...

W/o pf, it boots fine.

The entire set of boot messages is as follows:
+No devices on IDE controller 0

Trying NPE-B...success. Using NPE-B with PHY 0.
... waiting for BOOTP information
Ethernet eth0: MAC address 00:d0:12:02:47:33
IP:, Gateway:
Default server:

RedBoot(tm) bootstrap and debug environment [ROM]
Gateworks certified release, version 2.02 - built 05:22:19, Mar  3 2006

Platform: Gateworks Avila GW234X (IXP42X 533MHz) BE
Copyright (C) 2000, 2001, 2002, 2003, 2004 Red Hat, Inc.
Copyright (C) 2004, 2005 Gateworks Corporation

RAM: 0x00000000-0x04000000, [0x000298b0-0x03fc1000] available
FLASH: 0x50000000 - 0x51000000, 128 blocks of 0x00020000 bytes each.
== Executing boot script in 1.000 seconds - enter ^C to abort
RedBoot> load -b 0x200000 -h kernel.avila
Using default protocol (TFTP)
Address offset = 0x40000000
Entry point: 0x00200100, address range: 0x00200000-0x0065c328
RedBoot> go
KDB: debugger backends: ddb
KDB: current backend: ddb
Copyright (c) 1992-2011 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 9.0-RC1 #1 r226641: Mon Oct 10 11:13:06 PDT 2011
    jmg at pcbsd-779:/usr/obj/arm.armeb/usr/src/sys/gate2 arm
CPU: IXP425 533MHz rev 1 (ARMv5TE) (XScale core)
  DC enabled IC enabled WB enabled LABT branch prediction enabled
  32KB/32B 32-way Instruction cache
  32KB/32B 32-way write-back-locking Data cache
real memory  = 67108864 (64 MB)
avail memory = 57380864 (54 MB)
ixp0: <Intel IXP4XX> on motherboard
pcib0: <IXP4XX PCI Bus> on ixp0
pci0: <PCI bus> on pcib0
ixpclk0: <IXP4XX Timer> on ixp0
ixpiic0: <IXP4XX GPIO-Based I2C Interface> on ixp0
iicbb0: <I2C bit-banging driver> on ixpiic0
iicbus0: <Philips I2C bus> on iicbb0 master-only
iic0: <I2C generic I/O> on iicbus0
ad74180: <Analog Devices AD7418 ADC> at addr 0x50 on iicbus0
ds1672_rtc0: <Dallas Semiconductor DS1672 RTC> at addr 0xd0 on iicbus0
ixpwdog0: <IXP4XX Watchdog Timer> on ixp0
uart0: <Non-standard ns8250 class UART with FIFOs> on ixp0
uart0: console (115200,n,8,1)
uart1: <Non-standard ns8250 class UART with FIFOs> on ixp0
ixpqmgr0: <IXP4XX Q-Manager> on ixp0
npe0: <IXP NPE-B> on ixp0
npe0: MAC at 0xc8009000
npe0: MII at 0xc8009000
npe0: load fw image IXP425.NPE-B Func 0x2 Rev 2.1
miibus0: <MII bus> on npe0
ukphy0: <Generic IEEE 802.3u media interface> PHY 0 on miibus0
ukphy0:  none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
npe0: Ethernet address: 00:d0:12:02:47:33
npe1: <IXP NPE-C> on ixp0
npe1: MAC at 0xc800a000
npe1: MII at 0xc8009000
npe1: load fw image IXP425.NPE-C Func 0x5 Rev 2.1
miibus1: <MII bus> on npe1
ukphy1: <Generic IEEE 802.3u media interface> PHY 1 on miibus1
ukphy1:  none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
npe1: Ethernet address: 00:d0:12:12:47:33
cfi0: <Intel/Sharp - 16MB> on ixp0
cfid0 on cfi0
ata_avila0: <Gateworks Avila IDE/CF Controller> on ixp0
ata0: <ATA channel 0> on ata_avila0
led_avila0: <Gateworks Avila Front Panel LED> on ixp0
gpio_avila0: <Gateworks Avila GPIO driver> on ixp0
Timecounter "IXP4XX Timer" frequency 66666600 Hz quality 1000
Timecounters tick every 10.000 msec
bootpc_init: wired to interface 'npe0'
Sending DHCP Discover packet from interface npe0 (00:d0:12:02:47:33)
npe0: link state changed to UP
Received DHCP Offer packet on npe0 from (accepted) (no root path)
Sending DHCP Request packet from interface npe0 (00:d0:12:02:47:33)
Received DHCP Ack packet on npe0 from (accepted) (got root path)
npe0 at server boot file kernel.avila
subnet mask router rootfs rootopts nolockd
Adjusted interface npe0
RPC timeout for server
RPC timeout for server
RPC timeout for server
RPC timeout for server
RPC timeout for server
RPC timeout for server
RPC timeout for server
RPC timeout for server
RPC timeout for server
RPC timeout for server
RPC timeout for server
RPC timeout for server
RPC timeout for server
RPC timeout for server
RPC timeout for server
RPC timeout for server
RPC timeout for server
RPC timeout for server
RPC timeout for server
RPC timeout for server
Trying to mount root from nfs: []...
Interface npe0 IP-Address Broadcast
Setting hostuuid: 1d60d808-1dd2-11b2-9e5d-00d012024733.
Setting hostid: 0x0181803e.
Entropy harvesting: interrupts ethernet point_to_point kickstart.
Starting file system checks:
mount_nfs: can't update /var/db/mounttab for
Mounting local file systems:.
Setting hostname:
npe1: ixpnpe_intr: status 0x60000
ifconfig: inet: bad value
Starting Network: lo0 npe0 npe1.
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
        inet netmask 0xff000000
npe0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        ether 00:d0:12:02:47:33
        inet netmask 0xffffff00 broadcast
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
npe1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
npe1: link state changed to DOWN
        ether 00:d0:12:12:47:33
        media: Ethernet autoselect (none)
        status: no carrier
Starting devd.
DHCPDISCOVER on npe0 to port 67 interval 7
DHCPREQUEST on npe0 to port 67
bound to -- renewal in 18000 seconds.
Starting pflog.
pflog0: promiscuous mode enabled
Oct 22 15:01:00 pflogd[678]: [priv]: msg PRIV_OPEN_LOG received
Enabling pfpanic: mutex pf task mtx owned at /usr/src/sys/contrib/pf/net/if_pfsync.c:3163
KDB: enter: panic
[ thread pid 686 tid 100055 ]
Stopped at      kdb_enter+0x48: ldrb    r15, [r15, r15, ror r15]!
db> bt
Tracing pid 686 tid 100055 td 0xc0ee3b80
kdb_enter() at kdb_enter+0xc
scp=0xc03c2d90 rlv=0xc03931bc (panic+0xcc)
        rsp=0xc60bdbe0 rfp=0xc60bdbf4
panic() at panic+0x10
scp=0xc0393100 rlv=0xc0383ae0 (_mtx_assert+0x134)
        rsp=0xc60bdc08 rfp=0xc60bdc18
_mtx_assert() at _mtx_assert+0xc
scp=0xc03839b8 rlv=0xc021f2c8 (pfsync_send_plus+0xd8)
        rsp=0xc60bdc1c rfp=0xc60bdc40
pfsync_send_plus() at pfsync_send_plus+0xc
scp=0xc021f1fc rlv=0xc021f41c (pfsync_clear_states+0x80)
        rsp=0xc60bdc44 rfp=0xc60bdc74
        r10=0xc0ee3b80 r8=0xc0ee2800
        r7=0x00000000 r6=0x9ce3bc1b r5=0xc0ee2878 r4=0xc60bdc44
pfsync_clear_states() at pfsync_clear_states+0xc
scp=0xc021f3a8 rlv=0xc0235190 (pfioctl+0x1730)
        rsp=0xc60bdc78 rfp=0xc60bdd30
        r6=0xc05814c8 r5=0x00000000
pfioctl() at pfioctl+0xc
scp=0xc0233a6c rlv=0xc02fc224 (dev2udev+0x364)
        rsp=0xc60bdd34 rfp=0xc60bdd70
        r10=0x00000000 r9=0xc60bdeac
        r8=0xc0de6c40 r7=0x00000000 r6=0xc0ee3b80 r5=0xc0ee2800
dev2udev() at dev2udev+0x27c
scp=0xc02fc13c rlv=0xc03d78a0 (kern_ioctl+0x23c)
        rsp=0xc60bdd74 rfp=0xc60bdda4
        r10=0xc0ee3b80 r9=0xc60bdeac
        r8=0x00000003 r7=0xc0dc5500 r6=0x00000000 r5=0xc0cc4412
kern_ioctl() at kern_ioctl+0xc
scp=0xc03d7670 rlv=0xc03d7a24 (sys_ioctl+0x114)
        rsp=0xc60bdda8 rfp=0xc60bddd4
        r10=0xc0ee3b80 r8=0xc0ee2800
        r7=0xc60bde30 r6=0x00000000 r5=0x000000cc r4=0xc0cc4412
sys_ioctl() at sys_ioctl+0xc
scp=0xc03d791c rlv=0xc0543fd0 (swi_handler+0x2f4)
        rsp=0xc60bddd8 rfp=0xc60bdea8
        r10=0x00000000 r8=0xc0ee1000
        r7=0xc0ee3b80 r6=0x00000004 r5=0x00000010 r4=0x00000003
swi_handler() at swi_handler+0xc
scp=0xc0543ce8 rlv=0xc05355ec (swi_entry+0x40)
        rsp=0xc60bdeac rfp=0xbfffea10
        r10=0x00000003 r9=0xbfffee7c
        r8=0x00000000 r7=0x00000000 r6=0x00000000 r5=0x00000003
  John-Mark Gurney				Voice: +1 415 225 5579

     "All that I will do, has been done, All that I have, has not."

More information about the freebsd-pf mailing list