Created attachment 162382 [details] core dump System gets in panic while regular routing tasks, such as nat. Repeating by bittorrent traffic passing throug every time on loads above 70 mbit/s. The behavour of the 10.2 system on another machine was the same. Both systems network interfaces are bge aggregated by lacp lagg. Error dump in attachment.
Can you also add your pf rules? At first glance this looks like it's probably a PF problem.
(In reply to Kristof Provost from comment #1) These rules works fine on freebsd 9.3.
I'm not suggesting your rules are wrong (the panic should never happen, no matter what the rules are), but knowing what they are is useful during debugging.
(In reply to Kristof Provost from comment #3) I wont posting my rules. By the way, i have this problem on 2 different systems with different pf rulesets. rules are simple - pass, block, nat - nothing extra ordinary. The common thing is hardware - bge interfaces in lagg. (ProLiant DL360p Gen8)
(In reply to ikv from comment #4) You can censor the IP addresses, if you like, but knowing what type of scrub options you've got, and if you're using anything like route-to, dup-to, ... is quite useful.
Are you running with 'scrub fragment crop' or 'scrub fragment drop-ovl' by any chance? If so, can you confirm that the problem goes away if you switch to 'scrub fragment reassemble'? The crop/drop-ovl code has been removed in CURRENT, and I suspect it's the cause of your panics.
(In reply to Kristof Provost from comment #6) indeed i use crop. Can't test right at this time since i rolled back to 9.3, but i'll test it soon and reply results.
(In reply to Kristof Provost from comment #6) You were right, i replaced "corp" by "reassemble" - now it works fine. Thanks a lot!
To submitter: so can this PR be closed now?
(In reply to Mark Linimon from comment #9) I think need kernel fixes to prevent such problems in future.
To be clear: this panic will not happen on CURRENT, because the code (scrub crop/drop-ovl) in which it occurs has been removed. Right now I don't plan to investigate this problem any further.
'scrub fragment crop' has been removed, this panic cannot recur.