>Number:         29166
>Category:       kern
>Synopsis:       2.0: uvm fault in fr_*
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Jan 31 02:27:00 +0000 2005
>Originator:     hubert@feyrer.de
>Release:        NetBSD 2.0
>Organization:
Hubert Feyrer <hubertf@channel.regensburg.org>
>Environment:
System: NetBSD vulab.fh-regensburg.de 2.0 NetBSD 2.0 (GENERIC) #10: Sun Oct 3 01:59:02 CEST 2004 feyrer@vulab.fh-regensburg.de:/disk4/cvs/src-2.0/sys/arch/i386/compile/obj.i386/GENERIC i386
Architecture: i386
Machine: i386
>Description:
	After enabling ipf & ipnat on a machine doing pkgsrc bulk builds
	and some other job (httpd, postgres), I start getting panics (ten
	finger dump):

		uvm_fault
		kernel: page fault trap, code=0

		db> bt
		fr_coalexce
		frpr_ipv6hdr
		fr_makefrip
		fr_checkicmp6matchingstate
		fr_stlookup
		fr_checkstate
		fr_check
		fr_check_wrapper
		pfil_run_hooks
		ip6_input
		ip6intr
		DDB lost frame for netbsd:Xsoftnet
		Xsoftnet
		--- interrupt ---
		0x292:
		db>

	/etc/ipf.conf has:
		pass out from any to any keep state
		pass in from any to any keep state

	/etc/ipnat.conf has:
		map wm0 10.0.0.0/24 -> 0/32 proxy port ftp ftp/tcp
		map wm0 10.0.0.0/24 -> 0/32 portmap tcp/udp 40000:60000
		map wm0 10.0.0.0/24 -> 0/32

	/etc/rc.conf has:
		...
		ipfilter=yes
		ipnat=yes  
		...

	There's no /etc/ipf6.conf or so.


>How-To-Repeat:
	Run pkgsrc bulk builds, apache, postgres and enable the above firewall
	config. See it panic out of the blue sky.

>Fix:
	Yes, on the netbsd-2 branch please.