PF route-to on 7.2-RELEASE-p4

[André Luiz dos Santos]

I was getting the following panic on 7.2-RELEASE-p4 a few times a day. I
removed all "route-to" from the ruleset and it's been 24 hours without any
panics.


Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0xc
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0xc0834736
stack pointer           = 0x28:0xc3f5f974
frame pointer           = 0x28:0xc3f5f9a0
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 31 (irq23: rl0 ehci0)
trap number             = 12
panic: page fault
cpuid = 0
GEOM_MIRROR: Device floor: rebuilding provider ad2s1a stopped.
Uptime: 47m14s
Physical memory: 1002 MB


(kgdb) bt
#0  doadump () at pcpu.h:196
#1  0xc07e25f7 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:418
#2  0xc07e28c9 in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:574
#3  0xc0ae3f2c in trap_fatal (frame=0xc3f5f934, eva=12) at /usr/src/sys/i386/i386/trap.c:939
#4  0xc0ae41b0 in trap_pfault (frame=0xc3f5f934, usermode=0, eva=12) at /usr/src/sys/i386/i386/trap.c:852
#5  0xc0ae4b5c in trap (frame=0xc3f5f934) at /usr/src/sys/i386/i386/trap.c:530
#6  0xc0ac926b in calltrap () at /usr/src/sys/i386/i386/exception.s:159
#7  0xc0834736 in m_copym (m=0x0, off0=1500, len=1480, wait=1) at /usr/src/sys/kern/uipc_mbuf.c:539
#8  0xc08c6eb5 in ip_fragment (ip=0xc5568810, m_frag=0xc3f5fa44, mtu=1500, if_hwassist_flags=0, sw_csum=3073) at /usr/src/sys/netinet/ip_output.c:731
#9  0xc513e061 in pf_route (m=0xc3f5fb94, r=0xc518b33c, dir=1, oifp=0xc41d9c00, s=0x0, pd=0xc3f5faa0) at /usr/src/sys/modules/pf/../../contrib/pf/net/pf.c:6321
#10 0xc513d14f in pf_test (dir=1, ifp=0xc41d9c00, m0=0xc3f5fb94, eh=0x0, inp=0x0) at /usr/src/sys/modules/pf/../../contrib/pf/net/pf.c:7125
#11 0xc5144b69 in pf_check_in (arg=0x0, m=0xc3f5fb94, ifp=0xc41d9c00, dir=1, inp=0x0) at /usr/src/sys/modules/pf/../../contrib/pf/net/pf_ioctl.c:3647
#12 0xc088c528 in pfil_run_hooks (ph=0xc0cbf0c0, mp=0xc3f5fbf0, ifp=0xc41d9c00, dir=1, inp=0x0) at /usr/src/sys/net/pfil.c:78
#13 0xc08c5b0a in ip_input (m=0xc6c8d100) at /usr/src/sys/netinet/ip_input.c:416
#14 0xc088acc5 in netisr_dispatch (num=2, m=0xc6c8d100) at /usr/src/sys/net/netisr.c:185
#15 0xc0880c61 in ether_demux (ifp=0xc41d9c00, m=0xc6c8d100) at /usr/src/sys/net/if_ethersubr.c:834
#16 0xc0881053 in ether_input (ifp=0xc41d9c00, m=0xc6c8d100) at /usr/src/sys/net/if_ethersubr.c:692
#17 0xc09ad0d2 in rl_rxeof (sc=0xc4210000) at /usr/src/sys/pci/if_rl.c:1320
#18 0xc09ae0ea in rl_intr (arg=0xc4210000) at /usr/src/sys/pci/if_rl.c:1477
#19 0xc07c055b in ithread_loop (arg=0xc41f7410) at /usr/src/sys/kern/kern_intr.c:1088
#20 0xc07bd0a9 in fork_exit (callout=0xc07c03a0 <ithread_loop>, arg=0xc41f7410, frame=0xc3f5fd38) at /usr/src/sys/kern/kern_fork.c:810
#21 0xc0ac92e0 in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:264
(kgdb)