panics when using reply-to

[Joe Nall]

I built a new machine on 12/22/02 from a -current snapshot and updated it
from source checked out on 12/22 and then 12/23. The goal was to use the new
reply-to functionality to simultaneously connect to a cable modem (default route)
and dsl (static IP with mail/web) with packets going out the correct interface.

Here are two tracebacks and a dmesg. Kernel is GENERIC + makeoptions DEBUG=-ggdb
I'm confused that the pf_test arguments in the traceback don't match my memory
of the ddb screen - which had ffffffff for the last argument (m0) of the second
call to pf_test in all cases.

I took the reply-to out of pf.conf and disabled the cable modem and the box is fine.

(gdb) where
#0 0x1000 in ?? ()
#1 0xd02f899c in boot (howto=2308) at /usr/src/sys/arch/i386/compile/GENERIC/../../../../arch/i386/i386/ machdep.c:1665
#2 0xd019c673 in db_boot_crash_cmd (addr=-803680277, haddr=0, count=-1, modif=0xe28c627c "")
at /usr/src/sys/arch/i386/compile/GENERIC/../../../../ddb/db_command.c:600
#3 0xd019c1b4 in db_command (last_cmdp=0xd04eb558, cmd_table=0xd04eb398)
at /usr/src/sys/arch/i386/compile/GENERIC/../../../../ddb/db_command.c:257
#4 0xd019c4b3 in db_command_loop () at /usr/src/sys/arch/i386/compile/GENERIC/../../../../ddb/db_command.c:503
#5 0xd019f6ae in db_trap (type=6, code=0) at /usr/src/sys/arch/i386/compile/GENERIC/../../../../ddb/db_trap.c:85
#6 0xd02f37cd in kdb_trap (type=6, code=0, regs=0xe28c640c)
at /usr/src/sys/arch/i386/compile/GENERIC/../../../../arch/i386/i386/ db_interface.c:117
#7 0xd0301988 in trap (frame={tf_es = 16, tf_ds = 16, tf_edi = 2586064, tf_esi = 2, tf_ebp = -494115700,
tf_ebx = -504936432, tf_edx = -494115716, tf_ecx = -793169776, tf_eax = 48, tf_trapno = 6, tf_err = 0,
tf_eip = -803680277, tf_cs = 80, tf_eflags = 65606, tf_esp = -504936432, tf_ss = 2, tf_vm86_es = -494114988,
tf_vm86_ds = -803664357, tf_vm86_fs = -494265536, tf_vm86_gs = 20})
at /usr/src/sys/arch/i386/compile/GENERIC/../../../../arch/i386/i386/ trap.c:257
#8 0xd0100dc5 in alltraps ()
#9 0xd018dbca in pf_test (dir=2, ifp=0x2775d0, m0=0xe28c6754)
at /usr/src/sys/arch/i386/compile/GENERIC/../../../../net/pf.c:4236
#10 0xd018cfaa in pf_route (m=0xe28c6a70, r=0xe28ba96c, dir=2, oifp=0xd0a65440, s=0xd0b93090)
at /usr/src/sys/arch/i386/compile/GENERIC/../../../../net/pf.c:3854
#11 0xd018dbca in pf_test (dir=2, ifp=0xd0a65440, m0=0xe28c6a70)
at /usr/src/sys/arch/i386/compile/GENERIC/../../../../net/pf.c:4236
#12 0xd023cb77 in ip_output (m0=0xd0b6c000)
at /usr/src/sys/arch/i386/compile/GENERIC/../../../../netinet/ ip_output.c:673
#13 0xd02439ed in tcp_output (tp=0xd0b9a15c)
at /usr/src/sys/arch/i386/compile/GENERIC/../../../../netinet/ tcp_output.c:1110
#14 0xd0241713 in tcp_input (m=0xd0b6c000)
at /usr/src/sys/arch/i386/compile/GENERIC/../../../../netinet/ tcp_input.c:2264
#15 0xd023a823 in ipv4_input (m=0xd0b6c000)
at /usr/src/sys/arch/i386/compile/GENERIC/../../../../netinet/ ip_input.c:685
#16 0xd023a125 in ipintr () at /usr/src/sys/arch/i386/compile/GENERIC/../../../../netinet/ ip_input.c:284
#17 0xd0101de8 in Xsoftnet ()
(gdb)
----------------------------
(gdb) where
#0 0x1000 in ?? ()
#1 0xd02f89d8 in boot (howto=2308) at /usr/src/sys/arch/i386/compile/GENERIC/../../../../arch/i386/i386/ machdep.c:1665
#2 0xd019c6af in db_boot_crash_cmd (addr=-803680277, haddr=0, count=-1, modif=0xe28b42e0 "")
at /usr/src/sys/arch/i386/compile/GENERIC/../../../../ddb/db_command.c:600
#3 0xd019c1f0 in db_command (last_cmdp=0xd04eb558, cmd_table=0xd04eb398)
at /usr/src/sys/arch/i386/compile/GENERIC/../../../../ddb/db_command.c:257
#4 0xd019c4ef in db_command_loop () at /usr/src/sys/arch/i386/compile/GENERIC/../../../../ddb/db_command.c:503
#5 0xd019f6ea in db_trap (type=6, code=0) at /usr/src/sys/arch/i386/compile/GENERIC/../../../../ddb/db_trap.c:85
#6 0xd02f3809 in kdb_trap (type=6, code=0, regs=0xe28b4470)
at /usr/src/sys/arch/i386/compile/GENERIC/../../../../arch/i386/i386/ db_interface.c:117
#7 0xd03019c4 in trap (frame={tf_es = 16, tf_ds = 16, tf_edi = 4, tf_esi = 2, tf_ebp = -494189328,
tf_ebx = -793366460, tf_edx = -494124548, tf_ecx = -793313280, tf_eax = 84, tf_trapno = 6, tf_err = 0,
tf_eip = -803680277, tf_cs = 8, tf_eflags = 65606, tf_esp = -793366460, tf_ss = 2, tf_vm86_es = -494188616,
tf_vm86_ds = 0, tf_vm86_fs = 0, tf_vm86_gs = 20})
at /usr/src/sys/arch/i386/compile/GENERIC/../../../../arch/i386/i386/ trap.c:257
#8 0xd0100dc5 in alltraps ()
#9 0xd018dbca in pf_test (dir=2, ifp=0x4, m0=0xe28b47b8)
at /usr/src/sys/arch/i386/compile/GENERIC/../../../../net/pf.c:4236
#10 0xd018cfaa in pf_route (m=0xe28b4ad4, r=0xe28c41fc, dir=2, oifp=0xd0a6c034, s=0xd0b70000)
at /usr/src/sys/arch/i386/compile/GENERIC/../../../../net/pf.c:3854
#11 0xd018dbca in pf_test (dir=2, ifp=0xd0a6c034, m0=0xe28b4ad4)
at /usr/src/sys/arch/i386/compile/GENERIC/../../../../net/pf.c:4236
#12 0xd023cbb3 in ip_output (m0=0xd0b63000)
at /usr/src/sys/arch/i386/compile/GENERIC/../../../../netinet/ ip_output.c:673
#13 0xd02396cf in icmp_send (m=0xd0b63000, opts=0x0)
at /usr/src/sys/arch/i386/compile/GENERIC/../../../../netinet/ip_icmp.c:794
#14 0xd023965b in icmp_reflect (m=0xd0b63000)
at /usr/src/sys/arch/i386/compile/GENERIC/../../../../netinet/ip_icmp.c:758
#15 0xd02392e0 in icmp_input (m=0xd0b63000) at /usr/src/sys/arch/i386/compile/GENERIC/../../../../netinet/ip_icmp.c:540
#16 0xd023a85f in ipv4_input (m=0xd0b63000)
at /usr/src/sys/arch/i386/compile/GENERIC/../../../../netinet/ ip_input.c:685
#17 0xd023a161 in ipintr () at /usr/src/sys/arch/i386/compile/GENERIC/../../../../netinet/ ip_input.c:284
#18 0xd0101de8 in Xsoftnet ()
(gdb)
-----
) #1: Mon Dec 23 10:37:06 CST 2002
joe@...:/sys/arch/i386/compile/GENERIC
cpu0: AMD Duron ("AuthenticAMD" 686-class) 867 MHz
cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SYS,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,F XSR
real mem = 251162624 (245276K)
avail mem = 227078144 (221756K)
using 3091 buffers containing 12660736 bytes (12364K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(bb) BIOS, date 12/18/01, BIOS32 rev. 0 @ 0xf0a20
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
pcibios0 at bios0: rev. 2.1 @ 0xf0000/0x1242
pcibios0: PCI IRQ Routing Table rev. 1.0 @ 0xf11d0/112 (5 entries)
pcibios0: PCI Interrupt Router at 000:07:0 ("VIA VT82C586 PCI-ISA" rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc0000/0xc000
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "VIA VT8363 Host" rev 0x81
ppb0 at pci0 dev 1 function 0 "VIA VT8363 PCI-AGP" rev 0x00
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 vendor "S3", unknown product 0x8a26 rev 0x03
wsdisplay0 at vga1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
pcib0 at pci0 dev 7 function 0 "VIA VT82C686 PCI-ISA" rev 0x40
pciide0 at pci0 dev 7 function 1 "VIA VT82C571 IDE" rev 0x06: ATA100, channel 0 configured to compatibility, channel 1 configured to compatibility
wd0 at pciide0 channel 0 drive 0: <WDC WD300BB-00AUA1>
wd0: 16-sector PIO, LBA, 28629MB, 16383 cyl, 16 head, 63 sec, 58633344 sectors
atapiscsi0 at pciide0 channel 0 drive 1
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: <ASUS, CD-S520/A, 1.7L> SCSI0 5/cdrom removable
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
cd0(pciide0:0:1): using PIO mode 4, Ultra-DMA mode 2
pciide0: channel 1 disabled (no drives)
uhci0 at pci0 dev 7 function 2 "VIA VT83C572 USB" rev 0x1a: irq 9
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: vendor 0x0000 UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1 at pci0 dev 7 function 3 "VIA VT83C572 USB" rev 0x1a: irq 9
usb1 at uhci1: USB revision 1.0
uhub1 at usb1
uhub1: vendor 0x0000 UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
"VIA VT82C686 SMBus" rev 0x40 at pci0 dev 7 function 4 not configured
auvia0 at pci0 dev 7 function 5 "VIA VT82C686 AC97 Audio" rev 0x50: irq 5
ac97: codec id 0x414c4710 (Avance Logic ALC200)
ac97: codec features headphone, 18 bit DAC, 18 bit ADC, Realtek 3D
audio0 at auvia0
dc0 at pci0 dev 13 function 0 "Lite-On PNIC" rev 0x20: irq 11 address 00:a0:cc:53:6c:db
bmtphy0 at dc0 phy 1: BCM5201 10/100 media interface, rev. 2
rl0 at pci0 dev 14 function 0 "Realtek 8139" rev 0x10: irq 10 address 00:e0:7d:74:22:c2
rlphy0 at rl0 phy 0: RTL internal phy
rl1 at pci0 dev 18 function 0 "Realtek 8139" rev 0x10: irq 10 address 00:e0:18:65:a4:b5
rlphy1 at rl1 phy 0: RTL internal phy
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pmsi0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pmsi0 mux 0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: <PC speaker>
sysbeep0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
biomask 4240 netmask 4e40 ttymask 5ec2
pctr: user-level cycle counter enabled
mtrr: Pentium Pro MTRR support
dkcsum: wd0 matched BIOS disk 80
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302
uhub0: port error, restarting port 1
uhub0: port error, giving up port 1
uhub0: port error, restarting port 2
uhub0: port error, giving up port 2
uhub1: port error, restarting port 1
uhub1: port error, giving up port 1
uhub1: port error, restarting port 2
uhub1: port error, giving up port 2
uvm_fault(0xe287c27c, 0x1010000, 0, 1) -> e
OpenBSD 3.2-current (GENERIC) #1: Mon Dec 23 10:37:06 CST 2002
[EMAIL PROTECTED]:/sys/arch/i386/compile/GENERIC
cpu0: AMD Duron ("AuthenticAMD" 686-class) 867 MHz
cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SYS,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,F XSR
real mem = 251162624 (245276K)
avail mem = 227078144 (221756K)
using 3091 buffers containing 12660736 bytes (12364K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(bb) BIOS, date 12/18/01, BIOS32 rev. 0 @ 0xf0a20
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
pcibios0 at bios0: rev. 2.1 @ 0xf0000/0x1242
pcibios0: PCI IRQ Routing Table rev. 1.0 @ 0xf11d0/112 (5 entries)
pcibios0: PCI Interrupt Router at 000:07:0 ("VIA VT82C586 PCI-ISA" rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc0000/0xc000
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "VIA VT8363 Host" rev 0x81
ppb0 at pci0 dev 1 function 0 "VIA VT8363 PCI-AGP" rev 0x00
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 vendor "S3", unknown product 0x8a26 rev 0x03
wsdisplay0 at vga1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
pcib0 at pci0 dev 7 function 0 "VIA VT82C686 PCI-ISA" rev 0x40
pciide0 at pci0 dev 7 function 1 "VIA VT82C571 IDE" rev 0x06: ATA100, channel 0 configured to compatibility, channel 1 configured to compatibility
wd0 at pciide0 channel 0 drive 0: <WDC WD300BB-00AUA1>
wd0: 16-sector PIO, LBA, 28629MB, 16383 cyl, 16 head, 63 sec, 58633344 sectors
atapiscsi0 at pciide0 channel 0 drive 1
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: <ASUS, CD-S520/A, 1.7L> SCSI0 5/cdrom removable
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
cd0(pciide0:0:1): using PIO mode 4, Ultra-DMA mode 2
pciide0: channel 1 disabled (no drives)
uhci0 at pci0 dev 7 function 2 "VIA VT83C572 USB" rev 0x1a: irq 9
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: vendor 0x0000 UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1 at pci0 dev 7 function 3 "VIA VT83C572 USB" rev 0x1a: irq 9
usb1 at uhci1: USB revision 1.0
uhub1 at usb1
uhub1: vendor 0x0000 UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
"VIA VT82C686 SMBus" rev 0x40 at pci0 dev 7 function 4 not configured
auvia0 at pci0 dev 7 function 5 "VIA VT82C686 AC97 Audio" rev 0x50: irq 5
ac97: codec id 0x414c4710 (Avance Logic ALC200)
ac97: codec features headphone, 18 bit DAC, 18 bit ADC, Realtek 3D
audio0 at auvia0
dc0 at pci0 dev 13 function 0 "Lite-On PNIC" rev 0x20: irq 11 address 00:a0:cc:53:6c:db
bmtphy0 at dc0 phy 1: BCM5201 10/100 media interface, rev. 2
rl0 at pci0 dev 14 function 0 "Realtek 8139" rev 0x10: irq 10 address 00:e0:7d:74:22:c2
rlphy0 at rl0 phy 0: RTL internal phy
rl1 at pci0 dev 18 function 0 "Realtek 8139" rev 0x10: irq 10 address 00:e0:18:65:a4:b5
rlphy1 at rl1 phy 0: RTL internal phy
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pmsi0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pmsi0 mux 0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: <PC speaker>
sysbeep0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
biomask 4240 netmask 4e40 ttymask 5ec2
pctr: user-level cycle counter enabled
mtrr: Pentium Pro MTRR support
dkcsum: wd0 matched BIOS disk 80
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302
WARNING: / was not properly unmounted
uhub0: port error, restarting port 1
uhub0: port error, giving up port 1
uhub0: port error, restarting port 2
uhub0: port error, giving up port 2
uhub1: port error, restarting port 1
uhub1: port error, giving up port 1
uhub1: port error, restarting port 2
uhub1: port error, giving up port 2