>Number:         33466
>Category:       port-xen
>Synopsis:       enabling ipf on netbsd domU xennet0 panics kernel
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    port-xen-maintainer
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu May 11 14:00:01 +0000 2006
>Originator:     Dick Davies
>Release:        NetBSD 3.99.18 (netbsd-daily build)
>Organization:
>Environment:
NetBSD 3.99.18 (XEN3_U) #0: Thu May  4 07:32:43 UTC 2006
        builds@b3.netbsd.org:/home/builds/ab/HEAD/i386/200605040000Z-obj/home/builds/ab/HEAD/src/sys/arch/i386/compile/XEN3_U

>Description:

I can enable ipfilter in my domU and it appears to load the rules correctly, but the domain panics on subsequent reboots.

I can't ssh to the netbsd domain from domU even when ipf isn't enabled (though I can get to it from remote machines). 

Not sure if that's relevant?


Here's a dmesg, panic and backtrace:

---------------------------------------------------
planb:~/ $ sudo xm create -c /etc/xen/auto/netbsd3
Using config file "/etc/xen/auto/netbsd3".
Started domain netbsd3
Loaded initial symtab at 0xc049222c, strtab at 0xc04c14c0, # entries 11997
Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006
    The NetBSD Foundation, Inc.  All rights reserved.
Copyright (c) 1982, 1986, 1989, 1991, 1993
    The Regents of the University of California.  All rights reserved.

NetBSD 3.99.18 (XEN3_U) #0: Thu May  4 07:32:43 UTC 2006
        builds@b3.netbsd.org:/home/builds/ab/HEAD/i386/200605040000Z-obj/home/builds/ab/HEAD/src/sys/arch/i386/compile/XEN3_U
total memory = 128 MB
avail memory = 121 MB
mainbus0 (root)
cpu0 at mainbus0: (uniprocessor)
cpu0: Intel Pentium 4 (686-class), 2793.18 MHz, id 0xf29
cpu0: features bfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR>
cpu0: features bfebfbff<PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX>
cpu0: features bfebfbff<FXSR,SSE,SSE2,SS,HTT,TM,SBF>
cpu0: I-cache 12K uOp cache 8-way, D-cache 8 KB 64B/line 4-way
cpu0: L2 cache 512 KB 64B/line 8-way
cpu0: ITLB 4K/4M: 64 entries
cpu0: DTLB 4K/4M: 64 entries
cpu0: 16 page colors
hypervisor0 at mainbus0
debug virtual interrupt using event channel 3
xenbus0 at hypervisor0: Xen Virtual Bus Interface
xenbus0: using event channel 1
xencons0 at hypervisor0: Xen Virtual Console Driver
xencons0: console major 143, unit 0
xencons0: using event channel 2
npx0 at hypervisor0: using exception 16
Xen clock: using event channel 4
crypto: assign driver 0, flags 2
crypto: driver 0 registers alg 1 flags 0 maxoplen 0
crypto: driver 0 registers alg 2 flags 0 maxoplen 0
crypto: driver 0 registers alg 3 flags 0 maxoplen 0
crypto: driver 0 registers alg 4 flags 0 maxoplen 0
crypto: driver 0 registers alg 5 flags 0 maxoplen 0
crypto: driver 0 registers alg 17 flags 0 maxoplen 0
crypto: driver 0 registers alg 6 flags 0 maxoplen 0
crypto: driver 0 registers alg 7 flags 0 maxoplen 0
crypto: driver 0 registers alg 15 flags 0 maxoplen 0
crypto: driver 0 registers alg 8 flags 0 maxoplen 0
crypto: driver 0 registers alg 16 flags 0 maxoplen 0
crypto: driver 0 registers alg 9 flags 0 maxoplen 0
crypto: driver 0 registers alg 10 flags 0 maxoplen 0
crypto: driver 0 registers alg 13 flags 0 maxoplen 0
crypto: driver 0 registers alg 14 flags 0 maxoplen 0
crypto: driver 0 registers alg 11 flags 0 maxoplen 0
crypto: driver 0 registers alg 18 flags 0 maxoplen 0
raidattach: Asked for 8 units
Kernelized RAIDframe activated
xbd0 at xenbus0 id 3: Xen Virtual Block Device Interface
xbd0: using event channel 5
xennet0 at xenbus0 id 0: Xen Virtual Network Interface
xennet0: MAC address 00:16:3e:f4:59:ff
xennet0: using event channel 6
xbd0: 12288 MB, 512 bytes/sect x 25165824 sectors
Searching for RAID components...
backend_changed backend
boot device: xbd0
root on xbd0a dumps on xbd0b
mountroot: trying lfs...
mountroot: trying ffs...
root file system type: ffs
readclock: 1147350009 (1147350055)
init: copying out path `/sbin/init' 11
Thu May 11 12:20:10 GMT 2006
swapctl: adding /dev/xbd0b as swap device at priority 0
Checking for botched superblock upgrades: done.
Starting file system checks:
/dev/rxbd0a: 2437 files, 23051 used, 473180 free (236 frags, 59118 blocks, 0.0% fragmentation)
/dev/rxbd0a: MARKING FILE SYSTEM CLEAN
/dev/rxbd0e: file system is clean; not checking
/dev/rxbd0f: INCORRECT BLOCK COUNT I=11 (4 should be 0) (CORRECTED)
/dev/rxbd0f: UNREF FILE  I=7  OWNER=root MODE=100664
/dev/rxbd0f: SIZE=0 MTIME=May 11 12:20 2006  (CLEARED)
/dev/rxbd0f: UNREF FILE  I=8  OWNER=root MODE=100664
/dev/rxbd0f: SIZE=0 MTIME=May 11 12:20 2006  (CLEARED)
/dev/rxbd0f: UNREF FILE  I=9  OWNER=root MODE=100644
/dev/rxbd0f: SIZE=0 MTIME=May 11 12:20 2006  (CLEARED)
/dev/rxbd0f: UNREF FILE I=11  OWNER=root MODE=100644
/dev/rxbd0f: SIZE=0 MTIME=May 11 12:20 2006  (CLEARED)
/dev/rxbd0f: FREE BLK COUNT(S) WRONG IN SUPERBLK (SALVAGED)
/dev/rxbd0f: SUMMARY INFORMATION BAD (SALVAGED)
/dev/rxbd0f: BLK(S) MISSING IN BIT MAPS (SALVAGED)
/dev/rxbd0f: 650 files, 1481 used, 1006582 free (94 frags, 125811 blocks, 0.0% fragmentation)
/dev/rxbd0f: MARKING FILE SYSTEM CLEAN
/dev/rxbd0g: file system is clean; not checking
Setting tty flags.
Enabling ipfilter.
Setting sysctl variables:
Starting network.
Hostname: planb-netbsd.insrv.cf.ac.uk
IPv6 mode: host
Configuring network interfaces: xennet0panic: kernel diagnostic assertion "(flags & M_COPYBACK0_EXTEND) != 0" failed: file "/home/builds/ab/HEAD/src/sys/kern/uipc_mbuf.c", line 1329
Stopped in pid 174.1 (ifconfig) at      netbsd:cpu_Debugger+0x4:        popl    %
ebp
db> bt
cpu_Debugger(c040d615,cabdfc10,c048d7e0,c0866f50,c07d5e00) at netbsd:cpu_Debugge
r+0x4
panic(c043eda0,c03fd6bb,c0433b60,c0433ac0,531) at netbsd:panic+0x12c
__assert(c03fd6bb,c0433ac0,531,c0433b60,c03512cb) at netbsd:__assert+0x2e
m_copyback0(cabdfcf4,0,3b9ac946,0,6) at netbsd:m_copyback0+0x24c
m_makewritable(cabdfcf4,0,3b9aca00,1,4) at netbsd:m_makewritable+0x43
fr_check_wrapper(0,cabdfcf4,c086e038,1,c086fed4) at netbsd:fr_check_wrapper+0x2c

pfil_run_hooks(c046fda0,cabdfd6c,c086e038,1,1) at netbsd:pfil_run_hooks+0x98
ip_input(c07c0700,0,0,0,c0100840) at netbsd:ip_input+0x175
ipintr(cabd0011,c0160031,c0860011,11,0) at netbsd:ipintr+0xbc
DDB lost frame for netbsd:Xsoftnet+0x49, trying 0xcabdfd8c
Xsoftnet() at netbsd:Xsoftnet+0x49
--- interrupt ---
Bad frame pointer: 0xc051f000
0x207:
db> 
---------------------------------------------------

domain0 details and the domain config file :

---------------------------------------------------

planb:~/ $ uname -a
Linux planb 2.6.16-xen #1 SMP Thu Apr 13 18:46:07 BST 2006 i686 GNU/Linux
planb:~/ $ cat /etc/xen/auto/netbsd3
# xenU
kernel = "/boot/netbsd-XEN3_U.gz"
memory = 128
name = "netbsd3"
# since linux has no /dev/wd0a, you need to give it as hex (or mknod)
disk = ['phy:ubuntu/netbsd3-domu,0x3,w']

dhcp = "dhcp"
vif = ['mac=00:16:3e:F4:59:ff']


---------------------------------------------------
>How-To-Repeat:
Try enabling ipf on xennet0
>Fix: