Re: netbsd-11 vs. SUNW,qfe; hmeX: device timeout?

On Tue, 28 Apr 2026, John D. Baker wrote:

> (need to capture the panic message--something about freeing something
> that was already freed).

Seems only my custom kernel panics after falling back to bootparam (and
failing) and only when using hme0, hme[1-3] produce a graceful failure
like booting GENERIC with any port (0-3).

Below are dmesg (and rc in the case of local disk) excerpts showing the
behavior of the hmeN ports on the qfe card:


Boot GENERIC kernel from local disk configuring any port (0-3) on qfe card,
hme3 shown for example:

Boot device: /iommu/sbus/espdma@5,8400000/esp@5,8800000/sd@1,0  File and args: 
>> NetBSD/sparc Secondary Boot, Revision 1.15 (Sat Aug 22 21:59:19 CDT 2015)
Booting netbsd
4922444+135180 [296544+281872]=0x560504
OBP version 3, revision 2.15 (plugin rev 2)
[...]
[   1.0000000] NetBSD 11.0_RC3 (GENERIC) #12: Thu Apr  9 08:24:37 CDT 2026
[   1.0000000] 	[email protected]:/r0/build/netbsd-11/obj/sparc/sys/arch/sparc/compile/GENERIC
[   1.0000000] total memory = 65176 KB
[   1.0000000] avail memory = 58252 KB
[   1.0000000] bootpath: /iommu@0,10000000/sbus@0,10001000/espdma@5,8400000/esp@5,8800000/sd@1,0
[   1.0000000] mainbus0 (root): SUNW,SPARCstation-5: hostid xxxxxxxx
[...]
[   1.0000030] hme0 at sbus0 slot 1 offset 0x8c00000 level 4 (ipl 7): Sun Happy Meal Ethernet (SUNW,qfe)
[   1.0000030] hme0: Ethernet address xx:xx:xx:xx:xx:xx
[   1.0000030] ukphy0 at hme0 phy 1: OUI 0x0006b8, model 0x000c, rev. 1
[   1.0000030] ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
[   1.0000030] hme1 at sbus0 slot 1 offset 0x8c10000 level 4 (ipl 7): Sun Happy Meal Ethernet (SUNW,qfe)
[   1.0000030] hme1: Ethernet address xx:xx:xx:xx:xx:xx
[   1.0000030] ukphy1 at hme1 phy 1: OUI 0x0006b8, model 0x000c, rev. 1
[   1.0000030] ukphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
[   1.0000030] hme2 at sbus0 slot 1 offset 0x8c20000 level 4 (ipl 7): Sun Happy Meal Ethernet (SUNW,qfe)
[   1.0000030] hme2: Ethernet address xx:xx:xx:xx:xx:xx
[   1.0000030] ukphy2 at hme2 phy 1: OUI 0x0006b8, model 0x000c, rev. 1
[   1.0000030] ukphy2: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
[   1.0000030] hme3 at sbus0 slot 1 offset 0x8c30000 level 4 (ipl 7): Sun Happy Meal Ethernet (SUNW,qfe)
[   1.0000030] hme3: Ethernet address xx:xx:xx:xx:xx:xx
[   1.0000030] ukphy3 at hme3 phy 1: OUI 0x0006b8, model 0x000c, rev. 1
[   1.0000030] ukphy3: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
[...]
Starting network.
/etc/rc: WARNING: $hostname not set.
IPv6 mode: host
Configuring network interfaces: hme3.
Adding interface aliases:.
Waiting for duplicate address detection to finish...
Building databases: dev, utmp, utmpx.
[  56.4410615] hme3: device timeout
Starting syslogd.
[....]

$ cat /etc/ifconfig.hme3                                        
dhcp

$ ifconfig hme3
hme3: flags=0x8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        capabilities=0x3c00<TCP4CSUM_Rx,TCP4CSUM_Tx,UDP4CSUM_Rx,UDP4CSUM_Tx>
        enabled=0
        ec_capabilities=0x1<VLAN_MTU>
        ec_enabled=0
        address: xx:xx:xx:xx:xx:xx
        media: Ethernet autoselect (100baseTX full-duplex)
        status: active
        inet6 fe80::1564:4230:8972:e2a%hme3/64 flags 0 scopeid 0x5
        inet 169.254.128.126/16 broadcast 169.254.255.255 flags 0




netboot w/GENERIC kernel, any port (0-3) on qfe card,
hme0 shown for example:

ok boot /iommu/sbus/SUNW,qfe@1,8c00000 -s
Boot device: /iommu/sbus/SUNW,qfe@1,8c00000  File and args: -s        
Timeout waiting for ARP/RARP packet
14a00 
>> NetBSD/sparc Secondary Boot, Revision 1.15 (Sun Feb  1 23:09:07 UTC 2026)
Booting netbsd
Trying BOOTP protocol... ip address: <foo>, hostname: sparc-tmp, netmask: <foomask>, gateway: <bar>
root addr=<baz> path=/r0/diskless/ossian
4922444+135180 [296544+281872]=0x560504
OBP version 3, revision 2.15 (plugin rev 2)
[...]
[   1.0000000] NetBSD 11.0_RC3 (GENERIC) #12: Thu Apr  9 08:24:37 CDT 2026
[   1.0000000] 	[email protected]:/r0/build/netbsd-11/obj/sparc/sys/arch/sparc/compile/GENERIC
[   1.0000000] total memory = 65176 KB
[   1.0000000] avail memory = 58252 KB
[   1.0000000] bootpath: /iommu@0,10000000/sbus@0,10001000/SUNW,qfe@1,8c00000
[   1.0000000] mainbus0 (root): SUNW,SPARCstation-5: hostid xxxxxxxx
[...]
[   1.0000030] hme0 at sbus0 slot 1 offset 0x8c00000 level 4 (ipl 7): Sun Happy Meal Ethernet (SUNW,qfe)
[   1.0000030] hme0: Ethernet address xx:xx:xx:xx:xx:xx
[   1.0000030] ukphy0 at hme0 phy 1: OUI 0x0006b8, model 0x000c, rev. 1
[   1.0000030] ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
[   1.0000030] hme1 at sbus0 slot 1 offset 0x8c10000 level 4 (ipl 7): Sun Happy Meal Ethernet (SUNW,qfe)
[   1.0000030] hme1: Ethernet address xx:xx:xx:xx:xx:xx
[   1.0000030] ukphy1 at hme1 phy 1: OUI 0x0006b8, model 0x000c, rev. 1
[   1.0000030] ukphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
[   1.0000030] hme2 at sbus0 slot 1 offset 0x8c20000 level 4 (ipl 7): Sun Happy Meal Ethernet (SUNW,qfe)
[   1.0000030] hme2: Ethernet address xx:xx:xx:xx:xx:xx
[   1.0000030] ukphy2 at hme2 phy 1: OUI 0x0006b8, model 0x000c, rev. 1
[   1.0000030] ukphy2: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
[   1.0000030] hme3 at sbus0 slot 1 offset 0x8c30000 level 4 (ipl 7): Sun Happy Meal Ethernet (SUNW,qfe)
[   1.0000030] hme3: Ethernet address xx:xx:xx:xx:xx:xx
[   1.0000030] ukphy3 at hme3 phy 1: OUI 0x0006b8, model 0x000c, rev. 1
[   1.0000030] ukphy3: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
[...]
[   6.5685750] root on hme0
[   6.5832860] nfs_boot: trying DHCP/BOOTP
[  24.9230730] hme0: device timeout
[  25.0530840] nfs_boot: timeout...
[  30.0533310] nfs_boot: timeout...
[  34.9335855] hme0: device timeout
[  35.0535810] nfs_boot: timeout...
[  40.0538310] nfs_boot: trying RARP (and RPC/bootparam)
[  53.0544810] revarp failed, error=51
[  53.0544810] Supported file systems: mfs lfs ffs nfs umap procfs overlay null kernfs fdesc union tmpfs puffs ptyfs msdos cd9660 coda
[  53.0544810] no file system for hme0
[  53.0544810] cannot mount root, error = 79
[  53.0544810] root device (default hme0): 


netboot w/custom kernel using port 0 on qfe card (hme0):

ok boot /iommu/sbus/SUNW,qfe@1,8c00000 -s
Boot device: /iommu/sbus/SUNW,qfe@1,8c00000  File and args: -s
Timeout waiting for ARP/RARP packet
14a00 
>> NetBSD/sparc Secondary Boot, Revision 1.15 (Sun Feb  1 23:09:07 UTC 2026)
Booting netbsd
Trying BOOTP protocol... ip address: <foo>, hostname: sparc-tmp, netmask: <foomask>, gateway: <bar>
root addr=<baz> path=/r0/diskless/ossian
3845708+151252 [233632+217810]=0x43e5d0
OBP version 3, revision 2.15 (plugin rev 2)
[...]
[   1.0000000] NetBSD 11.0_RC3 (OSSIAN) #13: Thu Apr  9 08:40:16 CDT 2026
[   1.0000000] 	[email protected]:/r0/build/netbsd-11/obj/sparc/sys/arch/sparc/compile/OSSIAN
[   1.0000000] total memory = 65132 KB
[   1.0000000] avail memory = 59344 KB
[   1.0000000] bootpath: /iommu@0,10000000/sbus@0,10001000/SUNW,qfe@1,8c00000
[   1.0000000] mainbus0 (root): SUNW,SPARCstation-5: hostid xxxxxxxx
[...]
[   1.0000030] hme0 at sbus0 slot 1 offset 0x8c00000 level 4 (ipl 7): Sun Happy Meal Ethernet (SUNW,qfe)
[   1.0000030] hme0: Ethernet address xx:xx:xx:xx:xx:xx
[   1.0000030] ukphy0 at hme0 phy 1: OUI 0x0006b8, model 0x000c, rev. 1
[   1.0000030] ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
[   1.0000030] hme1 at sbus0 slot 1 offset 0x8c10000 level 4 (ipl 7): Sun Happy Meal Ethernet (SUNW,qfe)
[   1.0000030] hme1: Ethernet address xx:xx:xx:xx:xx:xx
[   1.0000030] ukphy1 at hme1 phy 1: OUI 0x0006b8, model 0x000c, rev. 1
[   1.0000030] ukphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
[   1.0000030] hme2 at sbus0 slot 1 offset 0x8c20000 level 4 (ipl 7): Sun Happy Meal Ethernet (SUNW,qfe)
[   1.0000030] hme2: Ethernet address xx:xx:xx:xx:xx:xx
[   1.0000030] ukphy2 at hme2 phy 1: OUI 0x0006b8, model 0x000c, rev. 1
[   1.0000030] ukphy2: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
[   1.0000030] hme3 at sbus0 slot 1 offset 0x8c30000 level 4 (ipl 7): Sun Happy Meal Ethernet (SUNW,qfe)
[   1.0000030] hme3: Ethernet address xx:xx:xx:xx:xx:xx
[   1.0000030] ukphy3 at hme3 phy 1: OUI 0x0006b8, model 0x000c, rev. 1
[   1.0000030] ukphy3: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
[...]
[   6.3886370] root on hme0
[   6.4015490] nfs_boot: trying DHCP/BOOTP
[  24.8731480] nfs_boot: timeout...
[  29.8733975] nfs_boot: timeout...
[  34.8736480] nfs_boot: timeout...
[  39.8738980] nfs_boot: trying RARP (and RPC/bootparam)
[  42.8740490] nfs_boot: client_addr=<foo> (RARP from <baz>)
[  60.8749480] nfs_boot: timeout...
[  65.8751975] nfs_boot: timeout...
[  70.8754855] nfs_boot: timeout...
[  75.8756980] panic: mbuf 0xf060a100 already freed
[  75.8756980] cpu0: Begin traceback...
[  75.8756980] 0x0(0xf0342090, 0xf0397358, 0xf03cf670, 0x104, 0xf03cf800, 0xf03ce800) at netbsd:panic+0x20
[  75.8756980] panic(0xf0342090, 0xf060a100, 0x0, 0xc, 0xf03d1800, 0xf00) at netbsd:m_free+0x90
[  75.8756980] m_free(0xf060a100, 0xf03973c0, 0x0, 0xf060a300, 0xf05fa380, 0xf060a000) at netbsd:m_freem+0x10
[  75.8756980] m_freem(0xf060a100, 0x186a0, 0x2, 0x5, 0xf0397448, 0xf039744c) at netbsd:nfs_bootparam+0x468
[  75.8756980] nfs_bootparam(0x3c, 0xf039f7c0, 0xf03974cc, 0xf0684bc0, 0xf063b408, 0xf060a120) at netbsd:nfs_boot_init+0x394
[  75.8756980] nfs_boot_init(0x3c, 0xf039f7c0, 0xf03a9840, 0xf03cc400, 0xf03ce800, 0xf0684bc0) at netbsd:nfs_mountroot+0x54
[  75.8756980] nfs_mountroot(0x13, 0xf0314a84, 0xffffffff, 0xf039f7c0, 0x0, 0xf0684bc0) at netbsd:vfs_mountroot+0xf4
[  75.8756980] vfs_mountroot(0xf03ae800, 0xf03a0c00, 0xf03ce800, 0xf03ae9c0, 0x13, 0xf039bf30) at netbsd:main+0x6e0
[  75.8756980] main(0xf03a7000, 0xf03aec00, 0xf03aef74, 0xf03aec00, 0xf03a4a78, 0xf03ce8b0) at netbsd:nmi_sun4m+0xb1c
[  75.8756980] cpu0: End traceback...
Stopped in pid 0.0 (system) at  netbsd:cpu_Debugger+0x4:        or              
%o7, %g0, %g1
db> 


booting custom kernel via ports 1-3 (hme[1-3]) does not panic
(hme1 shown as example):

ok boot /iommu/sbus/SUNW,qfe@1,8c10000 -s
Boot device: /iommu/sbus/SUNW,qfe@1,8c10000  File and args: -s
[...]
[   6.3886345] root on hme1
[   6.4064430] nfs_boot: trying DHCP/BOOTP
[  24.8731450] nfs_boot: timeout...
[  28.9233475] hme1: device timeout
[  29.8733955] nfs_boot: timeout...
[  34.8736445] nfs_boot: timeout...
[  38.9338565] hme1: device timeout
[  39.8738950] nfs_boot: trying RARP (and RPC/bootparam)
[  52.8745445] revarp failed, error=51
[  52.8745445] Supported file systems: ffs nfs procfs kernfs tmpfs puffs ptyfs cd9660
[  52.8745445] no file system for hme1
[  52.8745445] cannot mount root, error = 79
[  52.8745445] root device (default hme1): 


-- 
|/"\ John D. Baker, KN5UKS               NetBSD     Darwin/MacOS X
|\ / jdbaker[snail]consolidated[flyspeck]net  OpenBSD            FreeBSD
| X  No HTML/proprietary data in email.   BSD just sits there and works!
|/ \ GPGkeyID:  D703 4A7E 479F 63F8 D3F4  BD99 9572 8F23 E4AD 1645