Created attachment 162667 [details]
I can reliably trigger a panic with with the attached pf.conf on 10.2-RELASE-p6 with the attached pf.conf. This configuration worked well with 9.3-RELEASE.
Created attachment 162668 [details]
This is the same problem as #203976
It'll go away if you change this:
> scrub in on $int_if no-df fragment crop
> scrub in on $int_if no-df fragment reassemble
It's fixed in CURRENT because we got rid of the 'crop' function (it just transparently maps to reassemble there).
(In reply to Kristof Provost from comment #2)
Thanks for the tip Kristof. I made the change a couple of hours ago and everything seems fine since.
A bit off-topic, but I actually experienced occasional NFS server hangs back when I ran 9.3. I'm wondering if the fragment crop-ovl option was to blame.