[Bug 208140] panic: page fault in pf

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=208140

            Bug ID: 208140
           Summary: panic: page fault in pf
           Product: Base System
           Version: 10.2-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: rkondakov at ya.ru
                CC: freebsd-amd64 at FreeBSD.org
                CC: freebsd-amd64 at FreeBSD.org

Created attachment 168388
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=168388&action=edit
Core.txt

May be like bug #203976 but I use "scrub in all fragment reassemble"
I use kgdb

(kgdb) whatis pd
type = struct pf_pdesc
(kgdb) p pd
$3 = {lookup = {done = 0, uid = 0, gid = 0}, tot_len = 70, hdr = {
    tcp = 0xfffffe00003e8638, udp = 0xfffffe00003e8638,
    icmp = 0xfffffe00003e8638, icmp6 = 0xfffffe00003e8638,
    any = 0xfffffe00003e8638}, nat_rule = 0x0, src = 0xfffff8024ac3c01c,
  dst = 0xfffff8024ac3c020, sport = 0x0, dport = 0x0, pf_mtag = 0x0,
  p_len = 0, ip_sum = 0xfffff8024ac3c01a, proto_sum = 0x0, flags = 2,
  af = 2 '\002', proto = 17 '\021', tos = 0 '\0', dir = 1 '\001',
  sidx = 0 '\0', didx = 1 '\001'}
(kgdb) p pd->hdr
$4 = {tcp = 0xfffffe00003e8638, udp = 0xfffffe00003e8638,
  icmp = 0xfffffe00003e8638, icmp6 = 0xfffffe00003e8638,
  any = 0xfffffe00003e8638}
(kgdb) p pd->hdr->udp
$5 = (struct udphdr *) 0xfffffe00003e8638
(kgdb) p *(pd->hdr->udp)
$6 = {uh_sport = 20480, uh_dport = 13568, uh_ulen = 12800, uh_sum = 0}

dst = 371862716 (188.44.42.22)
src = 1832175963 (91.201.52.109)
uh_sport = 20480 = 80
uh_dport = 13568 = 53


pf-nat for this ip:
binat on ng0 inet from 10.3.128.3 to any -> 188.44.42.22

pf-rules:
scrub in all fragment reassemble
pass in on vlan2 route-to (ng0 192.168.1.1) inet from <local> to ! <local> no
state
pass out on ng0 fastroute all flags S/SA keep state
block drop out log on ng0 from <private> to any
block drop in on ng0 all
pass in on ng0 from any to <local> flags S/SA keep state

ng0-ng1:
+ show ng0:
  Name: ng0             Type: iface           ID: 00000002   Num hooks: 1
  Local hook      Peer name       Peer type    Peer ID         Peer hook
  ----------      ---------       ---------    -------         ---------
  inet            ng1             iface        00000004        inet
+ show ng1:
  Name: ng1             Type: iface           ID: 00000004   Num hooks: 1
  Local hook      Peer name       Peer type    Peer ID         Peer hook
  ----------      ---------       ---------    -------         ---------
  inet            ng0             iface        00000002        inet

it is 'pipe' for do NAT for two providers

netstat -rn | grep 188.44.42.22:
188.44.42.22       ng1                UHS         ng1

Local <-> ng0 <->NAT <-> ng1 <-> prov1/prov2

-- 
You are receiving this mail because:
You are on the CC list for the bug.