[Bug 185633] [pf] scrubbing bug in transparent mode bug with bigger than MTU UDP packet

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=185633

--- Comment #1 from olivier at cochard.me ---
Reproducing this problem on 10.1-RELEASE-p4 have a bigger impact: System crash.

[root at bridge-firewall]~# [zone: mbuf] kern.ipc.nmbufs limit reached

Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x1d
fault code              = supervisor read data, page not present
instruction pointer     = 0x20:0xffffffff81814f07
stack pointer           = 0x28:0xfffffe00003f2810
frame pointer           = 0x28:0xfffffe00003f2890
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 0 (vtnet0 rxq 0)
trap number             = 12
panic: page fault
cpuid = 0
KDB: stack backtrace:
#0 0xffffffff807d6e30 at kdb_backtrace+0x60
#1 0xffffffff8079f735 at panic+0x155
#2 0xffffffff80b263bf at trap_fatal+0x38f
#3 0xffffffff80b266d8 at trap_pfault+0x308
#4 0xffffffff80b25d3a at trap+0x47a
#5 0xffffffff80b0bdf2 at calltrap+0x8
#6 0xffffffff818154b5 at bridge_forward+0x2d5
#7 0xffffffff81813c55 at bridge_input+0x555
#8 0xffffffff8085ac35 at ether_nh_input+0x2a5
#9 0xffffffff80862732 at netisr_dispatch_src+0x62
#10 0xffffffff80bf85a3 at vtnet_rxq_eof+0x793
#11 0xffffffff80bf888a at vtnet_rxq_tq_intr+0x5a
#12 0xffffffff807e52a5 at taskqueue_run_locked+0xe5
#13 0xffffffff807e5d38 at taskqueue_thread_loop+0xa8
#14 0xffffffff807732ca at fork_exit+0x9a
#15 0xffffffff80b0c32e at fork_trampoline+0xe
Uptime: 6m17s
Consoles: userboot

-- 
You are receiving this mail because:
You are the assignee for the bug.