From owner-freebsd-pf@freebsd.org  Sun Feb 11 10:26:17 2018
Return-Path: <owner-freebsd-pf@freebsd.org>
Delivered-To: freebsd-pf@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id B6E87F099F4
 for <freebsd-pf@mailman.ysv.freebsd.org>; Sun, 11 Feb 2018 10:26:17 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: from mxrelay.ysv.freebsd.org (mxrelay.ysv.freebsd.org
 [IPv6:2001:1900:2254:206a::19:3])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "mxrelay.ysv.freebsd.org",
 Issuer "Let's Encrypt Authority X3" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 553F1711AC
 for <freebsd-pf@FreeBSD.org>; Sun, 11 Feb 2018 10:26:17 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: from kenobi.freebsd.org (kenobi.freebsd.org
 [IPv6:2001:1900:2254:206a::16:76])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mxrelay.ysv.freebsd.org (Postfix) with ESMTPS id 9B36C40FE
 for <freebsd-pf@FreeBSD.org>; Sun, 11 Feb 2018 10:26:16 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: from kenobi.freebsd.org ([127.0.1.118])
 by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id w1BAQGmZ056461
 for <freebsd-pf@FreeBSD.org>; Sun, 11 Feb 2018 10:26:16 GMT
 (envelope-from bugzilla-noreply@freebsd.org)
Received: (from www@localhost)
 by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id w1BAQGuk056460
 for freebsd-pf@FreeBSD.org; Sun, 11 Feb 2018 10:26:16 GMT
 (envelope-from bugzilla-noreply@freebsd.org)
X-Authentication-Warning: kenobi.freebsd.org: www set sender to
 bugzilla-noreply@freebsd.org using -f
From: bugzilla-noreply@freebsd.org
To: freebsd-pf@FreeBSD.org
Subject: [Bug 209475] pf didn't check if enough free RAM for
 net.pf.states_hashsize
Date: Sun, 11 Feb 2018 10:26:15 +0000
X-Bugzilla-Reason: AssignedTo
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: Base System
X-Bugzilla-Component: kern
X-Bugzilla-Version: 10.3-RELEASE
X-Bugzilla-Keywords: 
X-Bugzilla-Severity: Affects Only Me
X-Bugzilla-Who: kp@freebsd.org
X-Bugzilla-Status: New
X-Bugzilla-Resolution: 
X-Bugzilla-Priority: ---
X-Bugzilla-Assigned-To: freebsd-pf@FreeBSD.org
X-Bugzilla-Flags: 
X-Bugzilla-Changed-Fields: 
Message-ID: <bug-209475-17777-dgQlEkcmga@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-209475-17777@https.bugs.freebsd.org/bugzilla/>
References: <bug-209475-17777@https.bugs.freebsd.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.25
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
 \(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf/>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 11 Feb 2018 10:26:17 -0000

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D209475

--- Comment #27 from Kristof Provost <kp@freebsd.org> ---
(In reply to fehmi noyan isi from comment #26)
Yes, your analysis looks to be correct. I'd go for the second option: try to
allocate both keyhash and idhash with the requested size. If either one fai=
ls
free both and re-try with the default size.

I don't think the sizes of the structs are relevant here. We allocate
'pf_hashsize' elements of both, but we don't care how much memory each
allocation takes, just that we know how many there are.

--=20
You are receiving this mail because:
You are the assignee for the bug.=

From owner-freebsd-pf@freebsd.org  Tue Feb 13 11:54:05 2018
Return-Path: <owner-freebsd-pf@freebsd.org>
Delivered-To: freebsd-pf@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id BAD65F1A572
 for <freebsd-pf@mailman.ysv.freebsd.org>; Tue, 13 Feb 2018 11:54:05 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: from mxrelay.ysv.freebsd.org (mxrelay.ysv.freebsd.org
 [IPv6:2001:1900:2254:206a::19:3])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "mxrelay.ysv.freebsd.org",
 Issuer "Let's Encrypt Authority X3" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 5396173E0F
 for <freebsd-pf@FreeBSD.org>; Tue, 13 Feb 2018 11:54:05 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: from kenobi.freebsd.org (kenobi.freebsd.org
 [IPv6:2001:1900:2254:206a::16:76])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mxrelay.ysv.freebsd.org (Postfix) with ESMTPS id 969B925FCB
 for <freebsd-pf@FreeBSD.org>; Tue, 13 Feb 2018 11:54:04 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: from kenobi.freebsd.org ([127.0.1.118])
 by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id w1DBs4xE073677
 for <freebsd-pf@FreeBSD.org>; Tue, 13 Feb 2018 11:54:04 GMT
 (envelope-from bugzilla-noreply@freebsd.org)
Received: (from www@localhost)
 by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id w1DBs4QO073676
 for freebsd-pf@FreeBSD.org; Tue, 13 Feb 2018 11:54:04 GMT
 (envelope-from bugzilla-noreply@freebsd.org)
X-Authentication-Warning: kenobi.freebsd.org: www set sender to
 bugzilla-noreply@freebsd.org using -f
From: bugzilla-noreply@freebsd.org
To: freebsd-pf@FreeBSD.org
Subject: [Bug 209475] pf didn't check if enough free RAM for
 net.pf.states_hashsize
Date: Tue, 13 Feb 2018 11:54:04 +0000
X-Bugzilla-Reason: AssignedTo
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: Base System
X-Bugzilla-Component: kern
X-Bugzilla-Version: 10.3-RELEASE
X-Bugzilla-Keywords: 
X-Bugzilla-Severity: Affects Only Me
X-Bugzilla-Who: fnoyanisi@yahoo.com
X-Bugzilla-Status: New
X-Bugzilla-Resolution: 
X-Bugzilla-Priority: ---
X-Bugzilla-Assigned-To: freebsd-pf@FreeBSD.org
X-Bugzilla-Flags: 
X-Bugzilla-Changed-Fields: attachments.isobsolete attachments.created
Message-ID: <bug-209475-17777-VkZ4SR0ZFR@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-209475-17777@https.bugs.freebsd.org/bugzilla/>
References: <bug-209475-17777@https.bugs.freebsd.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.25
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
 \(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf/>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 13 Feb 2018 11:54:06 -0000

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D209475

fehmi noyan isi <fnoyanisi@yahoo.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #190429|0                           |1
        is obsolete|                            |

--- Comment #28 from fehmi noyan isi <fnoyanisi@yahoo.com> ---
Created attachment 190574
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D190574&action=
=3Dedit
patch with mallocarray(9), printf(9) and a single fallback block

Attached is the latest patch with a single fallback block which is executed
depending on the return values from mallcoarray(... | M_NOWAIT) calls. The =
code
sets the value of respective variable that is passed to mallocarray(9) rath=
er
than directly using PH_HASHSIZ in the mallocarray(9) call.

I tried the patch on a 512MB VM running FreeBSD-12.0CURRENT and verified th=
at
PF initialisation went okay. A log message indicating the memory allocation
issue is present in /var/log/messages (and in the console).

root@test-vm:~ # uname -a

FreeBSD test-vm 12.0-CURRENT FreeBSD 12.0-CURRENT #13: Wed Feb 14 13:28:52 =
NZDT
2018     root@test-vm:/usr/obj/usr/src/amd64.amd64/sys/GENERIC  amd64
root@test-vm:~ # cat /boot/loader.conf
net.pf.states_hashsize=3D"2147483648"
root@test-vm:~ # sysctl hw.realmem
hw.realmem: 536805376
root@test-vm:~ # kldstat
Id Refs Address            Size     Name
 1    1 0xffffffff80200000 20bf2d0  kernel
root@test-vm:~ # service pf onestart
Enabling pf.
root@test-vm:~ # kldstat
Id Refs Address            Size     Name
 1    3 0xffffffff80200000 20bf2d0  kernel
 2    1 0xffffffff82419000 33590    pf.ko
root@test-vm:~ # grep pf_initialize /var/log/messages
Feb 14 13:40:20 test-vm kernel: pf_initialize : Not enough memory for
85899345920 bytes.

--=20
You are receiving this mail because:
You are the assignee for the bug.=

From owner-freebsd-pf@freebsd.org  Tue Feb 13 12:04:01 2018
Return-Path: <owner-freebsd-pf@freebsd.org>
Delivered-To: freebsd-pf@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id AFE53F1BC24
 for <freebsd-pf@mailman.ysv.freebsd.org>; Tue, 13 Feb 2018 12:04:01 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: from mxrelay.ysv.freebsd.org (mxrelay.ysv.freebsd.org
 [IPv6:2001:1900:2254:206a::19:3])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "mxrelay.ysv.freebsd.org",
 Issuer "Let's Encrypt Authority X3" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 465DF749E7
 for <freebsd-pf@FreeBSD.org>; Tue, 13 Feb 2018 12:04:01 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: from kenobi.freebsd.org (kenobi.freebsd.org
 [IPv6:2001:1900:2254:206a::16:76])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mxrelay.ysv.freebsd.org (Postfix) with ESMTPS id 78D3B26139
 for <freebsd-pf@FreeBSD.org>; Tue, 13 Feb 2018 12:04:00 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: from kenobi.freebsd.org ([127.0.1.118])
 by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id w1DC40PK042039
 for <freebsd-pf@FreeBSD.org>; Tue, 13 Feb 2018 12:04:00 GMT
 (envelope-from bugzilla-noreply@freebsd.org)
Received: (from www@localhost)
 by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id w1DC40A4042022
 for freebsd-pf@FreeBSD.org; Tue, 13 Feb 2018 12:04:00 GMT
 (envelope-from bugzilla-noreply@freebsd.org)
X-Authentication-Warning: kenobi.freebsd.org: www set sender to
 bugzilla-noreply@freebsd.org using -f
From: bugzilla-noreply@freebsd.org
To: freebsd-pf@FreeBSD.org
Subject: [Bug 209475] pf didn't check if enough free RAM for
 net.pf.states_hashsize
Date: Tue, 13 Feb 2018 12:03:59 +0000
X-Bugzilla-Reason: AssignedTo
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: Base System
X-Bugzilla-Component: kern
X-Bugzilla-Version: 10.3-RELEASE
X-Bugzilla-Keywords: 
X-Bugzilla-Severity: Affects Only Me
X-Bugzilla-Who: kp@freebsd.org
X-Bugzilla-Status: New
X-Bugzilla-Resolution: 
X-Bugzilla-Priority: ---
X-Bugzilla-Assigned-To: freebsd-pf@FreeBSD.org
X-Bugzilla-Flags: 
X-Bugzilla-Changed-Fields: 
Message-ID: <bug-209475-17777-5sC9uyM4e7@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-209475-17777@https.bugs.freebsd.org/bugzilla/>
References: <bug-209475-17777@https.bugs.freebsd.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.25
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
 \(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf/>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 13 Feb 2018 12:04:01 -0000

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D209475

--- Comment #29 from Kristof Provost <kp@freebsd.org> ---
(In reply to fehmi noyan isi from comment #28)
It's possible that one of the V_pf_keyhash or V_pf_idhash allocations
succeeded, but not the other. That means you may have to free one of them.

(Note that free(NULL, M_PFHASH) is safe.)

It may be easier to discuss the patch if you post it on
http://reviews.freebsd.org.

--=20
You are receiving this mail because:
You are the assignee for the bug.=

From owner-freebsd-pf@freebsd.org  Wed Feb 14 01:43:48 2018
Return-Path: <owner-freebsd-pf@freebsd.org>
Delivered-To: freebsd-pf@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3B473F15864
 for <freebsd-pf@mailman.ysv.freebsd.org>; Wed, 14 Feb 2018 01:43:48 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: from mxrelay.ysv.freebsd.org (mxrelay.ysv.freebsd.org
 [IPv6:2001:1900:2254:206a::19:3])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "mxrelay.ysv.freebsd.org",
 Issuer "Let's Encrypt Authority X3" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id CDA8F7D642
 for <freebsd-pf@FreeBSD.org>; Wed, 14 Feb 2018 01:43:47 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: from kenobi.freebsd.org (kenobi.freebsd.org
 [IPv6:2001:1900:2254:206a::16:76])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mxrelay.ysv.freebsd.org (Postfix) with ESMTPS id 23F8558B4
 for <freebsd-pf@FreeBSD.org>; Wed, 14 Feb 2018 01:43:47 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: from kenobi.freebsd.org ([127.0.1.118])
 by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id w1E1hlVg029511
 for <freebsd-pf@FreeBSD.org>; Wed, 14 Feb 2018 01:43:47 GMT
 (envelope-from bugzilla-noreply@freebsd.org)
Received: (from www@localhost)
 by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id w1E1hlCP029510
 for freebsd-pf@FreeBSD.org; Wed, 14 Feb 2018 01:43:47 GMT
 (envelope-from bugzilla-noreply@freebsd.org)
X-Authentication-Warning: kenobi.freebsd.org: www set sender to
 bugzilla-noreply@freebsd.org using -f
From: bugzilla-noreply@freebsd.org
To: freebsd-pf@FreeBSD.org
Subject: [Bug 209475] pf didn't check if enough free RAM for
 net.pf.states_hashsize
Date: Wed, 14 Feb 2018 01:43:47 +0000
X-Bugzilla-Reason: AssignedTo
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: Base System
X-Bugzilla-Component: kern
X-Bugzilla-Version: 10.3-RELEASE
X-Bugzilla-Keywords: 
X-Bugzilla-Severity: Affects Only Me
X-Bugzilla-Who: fnoyanisi@yahoo.com
X-Bugzilla-Status: New
X-Bugzilla-Resolution: 
X-Bugzilla-Priority: ---
X-Bugzilla-Assigned-To: freebsd-pf@FreeBSD.org
X-Bugzilla-Flags: 
X-Bugzilla-Changed-Fields: 
Message-ID: <bug-209475-17777-gTPbKd3GO9@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-209475-17777@https.bugs.freebsd.org/bugzilla/>
References: <bug-209475-17777@https.bugs.freebsd.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.25
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
 \(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf/>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Feb 2018 01:43:48 -0000

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D209475

--- Comment #30 from fehmi noyan isi <fnoyanisi@yahoo.com> ---
(In reply to Kristof Provost from comment #29)

Calling free(9) before reallocating the memory was a no brainer. Thanks!

Below is the diff
https://reviews.freebsd.org/D14367

--=20
You are receiving this mail because:
You are the assignee for the bug.=

From owner-freebsd-pf@freebsd.org  Wed Feb 14 12:47:08 2018
Return-Path: <owner-freebsd-pf@freebsd.org>
Delivered-To: freebsd-pf@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 16CA2F1F83F
 for <freebsd-pf@mailman.ysv.freebsd.org>; Wed, 14 Feb 2018 12:47:08 +0000 (UTC)
 (envelope-from Joe@stream-technologies.com)
Received: from EUR01-VE1-obe.outbound.protection.outlook.com
 (mail-ve1eur01on0066.outbound.protection.outlook.com [104.47.1.66])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits))
 (Client CN "mail.protection.outlook.com",
 Issuer "Microsoft IT TLS CA 4" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 319BA75659
 for <freebsd-pf@freebsd.org>; Wed, 14 Feb 2018 12:47:06 +0000 (UTC)
 (envelope-from Joe@stream-technologies.com)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=streamtechnologiesuk.onmicrosoft.com;
 s=selector1-streamtechnologies-com01e;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
 bh=h8ayCqsKVtP7w+jFGo8FDyCrYnL9qWRd6dAC+CDf3k8=;
 b=esLH1GTKvRxuu6c3RKDfrH1OaMulnZlq9CCBx2L9g/F3A0qy2XNP0V0+OJfOPS9qNIeJV0ATg5UbIce/BXJCu6q09YYDOKwgsdJWzHnZlBxfetQmejgh4OSfca/BKsmaI/zgZVN5R0O+5ppzyzAujmkOvtVbwNRnRYLdc1yAkiQ=
Authentication-Results: spf=none (sender IP is )
 smtp.mailfrom=Joe@stream-technologies.com; 
Received: from [192.168.6.128] (212.250.79.109) by
 AM4PR07MB3411.eurprd07.prod.outlook.com (2603:10a6:205:a::32) with Microsoft
 SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.20.506.7; Wed, 14 Feb 2018 12:47:04 +0000
To: freebsd-pf@freebsd.org
From: Joe Jones <joe@stream-technologies.com>
Subject: Kernel Panic
Message-ID: <5A842FC6.7020806@stream-technologies.com>
Date: Wed, 14 Feb 2018 12:47:02 +0000
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101
 Thunderbird/38.5.1
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Originating-IP: [212.250.79.109]
X-ClientProxiedBy: LNXP265CA0066.GBRP265.PROD.OUTLOOK.COM
 (2603:10a6:600:5d::30) To AM4PR07MB3411.eurprd07.prod.outlook.com
 (2603:10a6:205:a::32)
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: f0aea2c7-b0a7-419f-050f-08d573a90cce
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0;
 RULEID:(7020095)(4652020)(5600026)(4604075)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603307)(7153060)(7193020);
 SRVR:AM4PR07MB3411; 
X-Microsoft-Exchange-Diagnostics: 1; AM4PR07MB3411;
 3:BtHpk/TFC/uuTZs+84z3yCFP9w7tUBEaKfmSCPL9Ez9dXJ48s2FuKryR3z11FlxVhDR4LdGFI63udnJE9pnG3gGlwhNZv+0EGxyved6ndcFHLc1/bwGA9uD163A7zBlaxWdZjmWBM9c9i+gM5l1JbSc7TL0wrsB8pVhDZY8g6MXqqJkJsHBo46tyjYPWvaIWG1vODlLQ1nz8pNe0tDHO98ipTLmNJz53ReI4yI+BdIxyZ8i8zLtaDZ0Raj+yWcOX;
 25:HiW4yeYi1u0NxslxZHCRhwz8G+VlZ2TF4FEWtaJIifc/JcE8ARGsrShZQTXRisCKiORwm9ca4BjuCPimNBcn/v0bxQ+iAI3Szc0B8oJr1zds/i1PlLmAjGv861OLQkqt1P1n1/P3H8BRgWNNoY/2sC8yo6W0aY1dafwCJE5oX6Jwq69S2lM/lsn055zB/32aBjPtk0y5tq5BD8Wdm5BZdVTsTlEtvju1vSxOZYYDaAnBeH6pWVHc/Q+5osRYKcCYMwksS3kVfNAYpTNYz9Kf1U3lRZm2HIqyixTM4ukuKkXPrpqnJomSfKNeHdSCspSM8i9inPo35+pCsMbnfqiAoA==;
 31:dKUNemtaqYUxukpoRykrDeEIfFIPirQ+MsRlvYOd3sOFGYkLKeop5oqQvKzf2YlV6+eOKfGnFqK1GmvKZzEbZvxXSHWrwV3XOBsfiTmjAMlG4G3lE0KgeExCg6OX+KkX7YNrU+7ne0LXOROKZCeTQvNghaP2JE3dEr6q5scmYw/YtJ1XqKY2bDrJw2wtnnyUnjdonUljSR9jWIPewI6aSnAwNWfds0+HMvjNaj+ufCI=
X-MS-TrafficTypeDiagnostic: AM4PR07MB3411:
X-Microsoft-Exchange-Diagnostics: 1; AM4PR07MB3411;
 20:781rHomiC88a9p66xgG5+KvwDt/3Ddav4nstd994hyDpOHWzewVYM8yj0rw7fkdoFqlFzyZdcK2HuXi8z/Re+Q8vlNL6ml92uRoLx1kobhgpVeTp8jGDqrFlyq1ounBsWiP2nLGhOTgxR13DPRKkc4t1KzrHcH0diL198Tj9wQk=;
 4:zoWEJkRvDXZ4Pz5KQmxBLaoOoz45oVB1FwFDQyUlpY7CrYlvneqn+mZbP5GZNXiyTTzAljy6Qr/XbS+ZjBKbRYYHDJ1Gzn8KT8APcQPFn+pTa21sz8VXAyraRsB25IsJ2vZbUPGYA9eEjxzQqw964Wtg3xnV7VNK+oW45MwUx2kLUBGly9SojZBuXuYOuJx6ZTt4jg6o3xi2jf9jdlYZ35eYK1831O6271NPu3v3bZG+ehI/W25BTrA5LiYOOSe6Gwo7RFc+Yqt4iatDHTqKUQ==
X-Microsoft-Antispam-PRVS: <AM4PR07MB3411821FBF0B06F734BC6F24E4F50@AM4PR07MB3411.eurprd07.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0;
 RULEID:(6040501)(2401047)(8121501046)(5005006)(3231101)(2400082)(944501161)(10201501046)(3002001)(93006095)(93001095)(6041288)(20161123564045)(20161123562045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(6072148)(201708071742011);
 SRVR:AM4PR07MB3411; BCL:0; PCL:0; RULEID:; SRVR:AM4PR07MB3411; 
X-Forefront-PRVS: 0583A86C08
X-Forefront-Antispam-Report: SFV:NSPM;
 SFS:(10009020)(6049001)(376002)(346002)(39380400002)(39840400004)(366004)(396003)(199004)(189003)(33656002)(6486002)(65806001)(47776003)(65956001)(72206003)(66066001)(221733001)(53936002)(3480700004)(478600001)(64126003)(230700001)(2361001)(8936002)(81166006)(117156002)(81156014)(50466002)(25786009)(186003)(77096007)(26005)(2351001)(8676002)(106356001)(65816011)(59450400001)(86362001)(386003)(5660300001)(105586002)(575784001)(16526019)(87266011)(83506002)(16576012)(80792005)(58126008)(97736004)(316002)(305945005)(7736002)(68736007)(2906002)(36756003)(52116002)(59896002)(23676004)(2486003)(67846002)(80316001)(52146003)(6916009)(7116003)(3846002)(6116002)(2004002);
 DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR07MB3411; H:[192.168.6.128]; FPR:;
 SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; 
Received-SPF: None (protection.outlook.com: stream-technologies.com does not
 designate permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtBTTRQUjA3TUIzNDExOzIzOnp3SFNiN1M2Tlo2QTJMUU8yS2hubFk4enJB?=
 =?utf-8?B?WnZ4S1NPY2w1dFJWMDdic0lncTg3Sy9WYUViMVFHcmtwb0ZRVjI1cGVpZ3NY?=
 =?utf-8?B?cDRQT2xUaHdjaDlMWllSK2tPUXVIbnE3K3lKbkRTTnVGYys1cUdBYytpVllD?=
 =?utf-8?B?elJ5RnBkSE9DSnpOb0VBeU5LNVkxbUNZclMrTWJHOVJRUUgrdmVKOXQwUWM1?=
 =?utf-8?B?QTVnMU0yZW1hRXBPUnp5ZzA2YTg5WEJ2SmpVb2g2WDVNY2ZXMytkbkdkd1VQ?=
 =?utf-8?B?eXprRUwxZUlNNHphdnFUUU5GUHM0TXhuOHgzeDVhbE5XeVlCcmRNeUc4UG1X?=
 =?utf-8?B?S1JkRnNpbCs4OE1SaHMxSERUQlBYemw4YVhXZ0dKTlJVSzRjWmlmR1I4TWlu?=
 =?utf-8?B?Nm9pNXI1b2NocU5lUlZzblhzTCttbmlySDFSdU5LaTR0d2lGSkZVb2NHbytG?=
 =?utf-8?B?WW1TeFd6QzBoSlp5VXdwaFFXSFRmOVdnS1EyeGJQSy9QelpEcW82UDhpbmFK?=
 =?utf-8?B?eFQwSXJPWGdET0IrNEd0aDdtZHdlRklpaGhmTnoyRE4vamN3bzd1N21OeFQ2?=
 =?utf-8?B?UklQWmErMXgxQ2FBbzBsWmZIYm5FQkJwSmU0am1lOGMzMTJmNDJRd0JTWGdQ?=
 =?utf-8?B?YXZWdk5RVzBwVkxua1puOER4ZjQyWnRLMms5NDBMRmQ2RVJwdlBKYVZ6SW5I?=
 =?utf-8?B?YnNaODRGUWhvYXNEenl5RDdXSkxaY3pDcjRYQmtCVVN6VSsvSXNoVzRrcUJN?=
 =?utf-8?B?Z3FnWXVXUXFLdzRRenNJbUhoR2JQUGMrdEtXL1NWd2VLZXJJRnRyQjFiY041?=
 =?utf-8?B?ZVhmZ2p3Y3JGdVU4Tk9JMmF2Um90MmRkcnJCS0phNHJqV3REdTdoQXY4MUxZ?=
 =?utf-8?B?T2dMdWZYM0Q0cjZZTXM0SHpQaFB2UXlTSnNPbjFQalc3SDJnZ05tRnlvNXoz?=
 =?utf-8?B?VElkVi9QRWVvOHh1MmpuUWgyemtWUkdYTjVodUJMY3JEZjFJWWRYNG05M2NF?=
 =?utf-8?B?N2ZHRlU5VHZFcXZkK3BNeGY0azVkWVNKOFlYdSt1R3R0UDY4d1ErK2FHc1NX?=
 =?utf-8?B?ckdwOUJHR3FKSkZ3eno1N2VhY0p3THpaYW13a1NVbVRhZm41OFlock14K0Vo?=
 =?utf-8?B?bGlxL3NDK3RpRmhzbDdjU0pnR0xYWThublJ6MmhQL3p4elZrbjdsWUlWckZM?=
 =?utf-8?B?S205UXlDV0VKeEd1NjVHYXVpcWxnblNMR3VDK2pxOGxWNVc5emtVaDk1Nkto?=
 =?utf-8?B?K25HSDFhVitZRkdZQUY2Y3dJVWpEMWUzZFhzbEdUYlQ3RnJvbklwTEp1a2NX?=
 =?utf-8?B?aTNQMVBLQWEyVnFvTktOeWQwRzl3eU1JMXVpby9HRk1HNWlPUTZNL1dibXQx?=
 =?utf-8?B?K3RKMGZkNTQxVWsxaE9zQUZVb3lLVVp0NVFxMExOMVl3dmlybHlNT054NGky?=
 =?utf-8?B?YzZkSFllMktFQ0g2a2FaWWZrNHpkOHhJWjFJV3cvaUlMTDZzYm5tZkVMbFov?=
 =?utf-8?B?WUdZOVBVeHZVMDAyNWkyMDhBbEFOZDM4VGQxY244dURXRk8xWE10SjZiN1NE?=
 =?utf-8?B?UjBEek1LdXBDdkE0NXY4UkxjcWZzY25zem82YWc1djU3OVhTVkFybnZnNzhI?=
 =?utf-8?B?NlFoNGE1ckovM2hpS1lpTy9Ya042dGdtbEFSL0licVNpVzNTV1R0dmI2OFZK?=
 =?utf-8?B?K0hWUG1TSUNrTUlwTUJRUHY5QUJBWENGanBGaVA5WFV2Q1k1WEFpZXJTZlZH?=
 =?utf-8?B?Zm9ZbHE3enVYdGIrcTE4Y2hYZWlBbDRHVmR2cERmdzJkYi9pNEMvT0kweU9m?=
 =?utf-8?B?Z2NDdXNOL2xTVTg3a3UxVzNDVUNSRG1maWplWk5MUFN1MmV2ZXNWYW4wS2E5?=
 =?utf-8?B?blhXZmZuU3AwckxOdnIyL3M1RkRBRTRqeHhISUV5aFZ0VHVQcXN6TGtJNmsz?=
 =?utf-8?B?Vmw3SjlraERiLzlqKzhnamFIcHpVdDlvVS9VRk9kWkpXTUFMTVl2d3JtK2pp?=
 =?utf-8?B?Z2RTZnVnM0N2WDFmV2o0dGdiS2Z6UnZ2QXk3TVNiNUJHMzFaUVFaWFVYOVBF?=
 =?utf-8?Q?mBpo=3D?=
X-Microsoft-Exchange-Diagnostics: 1; AM4PR07MB3411;
 6:xhxyBheXvqbPy1eyjfQJ/3RNNkTl8mbFyladzkn+hsusV905oly2nm6sMbP+CJJABB+Tks0I53ZcGSxWUqPgi9huEKrSu8WPbiX17WhdQIA73irLSy7bOmTMeTPq8q67xdMBKDP5E0G3DMFsUbj0NXenyRRIGg/gIaUL8mZaaf1i3TAPfT2c1yP/+m9IFlOgkauIcoUXO1002gXKPbcaPFnMoJSPGxClNmaElufU6dVCORaNgGhEOj5zGU5+f2MihFCHP3dB05Lr7J19Rl3EN+yJ8vis0fpPlTW10gMGi0de6fyfjh3jnx860zTfRWkNtd6TcIiQ9Tyr7VeaquX76VYEqoyyNdLv4/6257rool4=;
 5:TkRFLf8R5LIPeaG58+0nqx4A2FHNLQWLaecI6XPMdmfgIGZJMpCF8kdduoGqZYI9vmSxkFTVypQkutd+mvnm0y5yQIxIVgQZHWbhcZuxCXACM5i++xdatNjeEDS7Qjjf/roUbSUBlfnoXmtnLZFSMbj8SPf0eIHgo5+iFrIyZlI=;
 24:mmp6cXV+hWw0p2zUJDgjf8Gc9NozLwJqpHB08up5deWp9RAXvMimXKSC5o8ulvcw3JVDl+GkI8AkC0cuiMCrskyxx7rMuldN1aYkzU9AFd4=;
 7:yVC8BO14lt4Es6n6ENyOhKqI0KY+csQf2GqkkfuCSVPlsBIhQIL6zOvoMyhNB+6z32QMesfGYIxGntgZV3UuoY90mXpoZIAgspel7FnnxNkZo9GQIMGDtwHJGkjNlSvSdRQah1joAlhKJceJ/n9KyhBzspYmE3HVlHIDrzu05WCxn3vL07Xjw0Q2nBmb57/1Wx+1xbQhSXp12W5eXQbCdpQ6ULsTqAovSq/m4Lg6WLs23KjS746mS7yCGnYWssd2
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-OriginatorOrg: stream-technologies.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Feb 2018 12:47:04.3558 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: f0aea2c7-b0a7-419f-050f-08d573a90cce
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 720fa073-5781-43bf-bc14-7bef2603ed21
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR07MB3411
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.25
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
 \(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf/>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Feb 2018 12:47:08 -0000

Hi,

we are running test traffic through our system, after between 1 and 12 
hours we get a kernel panic, always in the pfr_pool_get function in 
/usr/src/sys/netpfil/pf/pf_table.c line 2140. After a bit of 
investigation I confirmed that ke2 is set to null on line 2122.

We have tried a kernel compiled from /base/releng/11.1 and the 
equivalent branch of pfsense and get the same thing.

The network card is a 4 port Intel I350 (igb). The test uses 2 of the 4 
ports, msix with 2 queues per port.

net.link.ifqmaxlen="2048"
hw.igb.rx_process_limit="-1"
hw.igb.num_queues="2"

Next I'm going to start stripping parts out of our setup to try and get 
to a system that is stable under the test load.

Can anyone shed any light on what is happening here.

Thanks
Joe Jones

GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain 
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "amd64-marcel-freebsd"...

Unread portion of the kernel message buffer:
current process        = 12 (irq272: igb1:que 1)
trap number        = 12
panic: page fault
cpuid = 3
KDB: stack backtrace:
#0 0xffffffff80aadb97 at kdb_backtrace+0x67
#1 0xffffffff80a6bbf6 at vpanic+0x186
#2 0xffffffff80a6ba63 at panic+0x43
#3 0xffffffff80ee0832 at trap_fatal+0x322
#4 0xffffffff80ee0889 at trap_pfault+0x49
#5 0xffffffff80ee00c6 at trap+0x286
#6 0xffffffff80ec4d41 at calltrap+0x8
#7 0xffffffff824c65df at pf_map_addr+0x58f
#8 0xffffffff824c6a11 at pf_get_translation+0x1e1
#9 0xffffffff824bade1 at pf_test_rule+0x241
#10 0xffffffff824b78bb at pf_test+0x174b
#11 0xffffffff824c961d at pf_check_out+0x1d
#12 0xffffffff80b71f4b at pfil_run_hooks+0x7b
#13 0xffffffff80bcdb71 at ip_tryforward+0x1f1
#14 0xffffffff80bcfb88 at ip_input+0x368
#15 0xffffffff80b71140 at netisr_dispatch_src+0xa0
#16 0xffffffff80b5ac0d at ether_demux+0x16d
#17 0xffffffff80b5b89b at ether_nh_input+0x31b
Uptime: 4h17m34s
Dumping 2778 out of 65374 
MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91%

Reading symbols from /boot/kernel/zfs.ko...Reading symbols from 
/usr/lib/debug//boot/kernel/zfs.ko.debug...done.
done.
Loaded symbols for /boot/kernel/zfs.ko
Reading symbols from /boot/kernel/opensolaris.ko...Reading symbols from 
/usr/lib/debug//boot/kernel/opensolaris.ko.debug...done.
done.
Loaded symbols for /boot/kernel/opensolaris.ko
Reading symbols from /boot/kernel/carp.ko...Reading symbols from 
/usr/lib/debug//boot/kernel/carp.ko.debug...done.
done.
Loaded symbols for /boot/kernel/carp.ko
Reading symbols from /boot/kernel/pfsync.ko...Reading symbols from 
/usr/lib/debug//boot/kernel/pfsync.ko.debug...done.
done.
Loaded symbols for /boot/kernel/pfsync.ko
Reading symbols from /boot/kernel/pf.ko...Reading symbols from 
/usr/lib/debug//boot/kernel/pf.ko.debug...done.
done.
Loaded symbols for /boot/kernel/pf.ko
Reading symbols from /boot/modules/mellynat.ko...done.
Loaded symbols for /boot/modules/mellynat.ko
Reading symbols from /boot/modules/mellycount.ko...done.
Loaded symbols for /boot/modules/mellycount.ko
Reading symbols from /boot/kernel/pflog.ko...Reading symbols from 
/usr/lib/debug//boot/kernel/pflog.ko.debug...done.
done.
Loaded symbols for /boot/kernel/pflog.ko
Reading symbols from /boot/kernel/uhid.ko...Reading symbols from 
/usr/lib/debug//boot/kernel/uhid.ko.debug...done.
done.
Loaded symbols for /boot/kernel/uhid.ko
#0  doadump (textdump=<value optimized out>) at pcpu.h:222
222    pcpu.h: No such file or directory.
     in pcpu.h
(kgdb) backtrace
#0  doadump (textdump=<value optimized out>) at pcpu.h:222
#1  0xffffffff80a6b771 in kern_reboot (howto=260) at 
/usr/src/sys/kern/kern_shutdown.c:366
#2  0xffffffff80a6bc30 in vpanic (fmt=<value optimized out>, ap=<value 
optimized out>) at /usr/src/sys/kern/kern_shutdown.c:759
#3  0xffffffff80a6ba63 in panic (fmt=<value optimized out>) at 
/usr/src/sys/kern/kern_shutdown.c:690
#4  0xffffffff80ee0832 in trap_fatal (frame=0xfffffe000031ac40, eva=153) 
at /usr/src/sys/amd64/amd64/trap.c:801
#5  0xffffffff80ee0889 in trap_pfault (frame=0xfffffe000031ac40, 
usermode=0) at pcpu.h:222
#6  0xffffffff80ee00c6 in trap (frame=0xfffffe000031ac40) at 
/usr/src/sys/amd64/amd64/trap.c:421
#7  0xffffffff80ec4d41 in calltrap () at 
/usr/src/sys/amd64/amd64/exception.S:236
#8  0xffffffff824dba80 in pfr_pool_get (kt=0xfffff80010e17000, 
pidx=<value optimized out>, counter=0xfffff8000e925298, af=<value 
optimized out>) at /usr/src/sys/netpfil/pf/pf_table.c:2141
#9  0xffffffff824c65df in pf_map_addr (af=<value optimized out>, 
r=<value optimized out>, saddr=<value optimized out>, naddr=<value 
optimized out>, init_addr=<value optimized out>, sn=<value optimized 
out>) at uma.h:363
#10 0xffffffff824c6a11 in pf_get_translation (pd=<value optimized out>, 
m=<value optimized out>, off=<value optimized out>, direction=<value 
optimized out>, kif=<value optimized out>, sn=0xfffffe000031b248, 
skp=<value optimized out>,
     nkp=<value optimized out>, saddr=<value optimized out>, 
daddr=<value optimized out>, sport=<value optimized out>, dport=<value 
optimized out>) at /usr/src/sys/netpfil/pf/pf_lb.c:223
#11 0xffffffff824bade1 in pf_test_rule () at 
/usr/src/sys/netpfil/pf/pf.c:3310
#12 0xffffffff824b78bb in pf_test (dir=<value optimized out>, ifp=<value 
optimized out>, m0=<value optimized out>, inp=<value optimized out>) at 
/usr/src/sys/netpfil/pf/pf.c:6280
#13 0xffffffff824c961d in pf_check_out (arg=<value optimized out>, 
m=0xfffffe000031b6a0, ifp=<value optimized out>, dir=<value optimized 
out>, inp=<value optimized out>) at /usr/src/sys/netpfil/pf/pf_ioctl.c:3627
#14 0xffffffff80b71f4b in pfil_run_hooks (ph=0xffffffff81dca688, 
mp=0xfffffe000031b700, ifp=0xfffff8000e7fe000, dir=2, inp=0x0) at 
/usr/src/sys/net/pfil.c:109
#15 0xffffffff80bcdb71 in ip_tryforward (m=0xfffff805f1da2800) at 
/usr/src/sys/netinet/ip_fastfwd.c:306
#16 0xffffffff80bcfb88 in ip_input (m=0xfffff805f1da2800) at 
/usr/src/sys/netinet/ip_input.c:573
#17 0xffffffff80b71140 in netisr_dispatch_src (proto=1, source=<value 
optimized out>, m=<value optimized out>) at /usr/src/sys/net/netisr.c:1120
#18 0xffffffff80b5ac0d in ether_demux (ifp=0xfffff8000e2f8800, m=<value 
optimized out>) at /usr/src/sys/net/if_ethersubr.c:860
#19 0xffffffff80b5b89b in ether_nh_input (m=<value optimized out>) at 
/usr/src/sys/net/if_ethersubr.c:641
#20 0xffffffff80b71140 in netisr_dispatch_src (proto=5, source=<value 
optimized out>, m=<value optimized out>) at /usr/src/sys/net/netisr.c:1120
#21 0xffffffff80b5aea6 in ether_input (ifp=<value optimized out>, m=0x0) 
at /usr/src/sys/net/if_ethersubr.c:764
#22 0xffffffff80541558 in igb_rxeof (count=-29544262) at 
/usr/src/sys/dev/e1000/if_igb.c:4957
#23 0xffffffff8054091f in igb_msix_que (arg=0xfffff8000e6b2c68) at 
/usr/src/sys/dev/e1000/if_igb.c:1612
#24 0xffffffff80a3223c in intr_event_execute_handlers (p=<value 
optimized out>, ie=0xfffff8000e6b2e00) at /usr/src/sys/kern/kern_intr.c:1262
#25 0xffffffff80a32526 in ithread_loop (arg=0xfffff8000e7881c0) at 
/usr/src/sys/kern/kern_intr.c:1275
#26 0xffffffff80a2f895 in fork_exit (callout=0xffffffff80a32450 
<ithread_loop>, arg=0xfffff8000e7881c0, frame=0xfffffe000031bac0) at 
/usr/src/sys/kern/kern_fork.c:1042
#27 0xffffffff80ec527e in fork_trampoline () at 
/usr/src/sys/amd64/amd64/exception.S:611
#28 0x0000000000000000 in ?? ()
Current language:  auto; currently minimal


From owner-freebsd-pf@freebsd.org  Wed Feb 14 13:09:42 2018
Return-Path: <owner-freebsd-pf@freebsd.org>
Delivered-To: freebsd-pf@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 38E90F212DF
 for <freebsd-pf@mailman.ysv.freebsd.org>; Wed, 14 Feb 2018 13:09:42 +0000 (UTC)
 (envelope-from srs0=odhb=fi=sigsegv.be=kristof@codepro.be)
Received: from venus.codepro.be (venus.codepro.be [IPv6:2a01:4f8:162:1127::2])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256
 bits))
 (Client CN "*.codepro.be", Issuer "Gandi Standard SSL CA 2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id C73C97647A
 for <freebsd-pf@freebsd.org>; Wed, 14 Feb 2018 13:09:41 +0000 (UTC)
 (envelope-from srs0=odhb=fi=sigsegv.be=kristof@codepro.be)
Received: from [172.20.10.2] (unknown [120.22.103.117])
 (Authenticated sender: kp)
 by venus.codepro.be (Postfix) with ESMTPSA id 6206855647;
 Wed, 14 Feb 2018 14:09:37 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sigsegv.be; s=mail;
 t=1518613779; bh=LAfAsTuRJpSyOTo5p03LxQ6fzyuVGDoAFH4fnHUb9H0=;
 h=From:To:Cc:Subject:Date:In-Reply-To:References;
 b=sDnpIYyFPGYpM+e+At1ff92T8GCZjdh4s/bHe8IkbGNtlAJy1ISyVyi9KgeY55fUi
 mFMLI2bFBjgZCJCCz6GLwbpMiJn1wdM+4cQu4K7fngwVYeIrxUgNYtGAJUa4yn7+Ap
 g0ll8I28wacRyiFask3n4dLQeDUonFL4Mylf1/w4=
From: "Kristof Provost" <kristof@sigsegv.be>
To: "Joe Jones" <joe@stream-technologies.com>
Cc: freebsd-pf@freebsd.org
Subject: Re: Kernel Panic
Date: Thu, 15 Feb 2018 00:09:30 +1100
X-Mailer: MailMate (2.0BETAr6103)
Message-ID: <FCB6BE6F-5346-42EC-ACB2-9CD99A1A16F0@sigsegv.be>
In-Reply-To: <5A842FC6.7020806@stream-technologies.com>
References: <5A842FC6.7020806@stream-technologies.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.25
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
 \(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf/>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
 <mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Feb 2018 13:09:42 -0000

On 14 Feb 2018, at 23:47, Joe Jones wrote:
> Hi,
>
> we are running test traffic through our system, after between 1 and 12 
> hours we get a kernel panic, always in the pfr_pool_get function in 
> /usr/src/sys/netpfil/pf/pf_table.c line 2140. After a bit of 
> investigation I confirmed that ke2 is set to null on line 2122.
>
It’d probably be interesting to know what the contents of uaddr/addr 
is here.
 From a very quick look at the code there’s supposed to be a route 
lookup there, and I’d expect there to always be a result. The code 
certainly expects it, because that looks to be what causes the panic.

Regards,
Kristof