From nobody Sun Dec 28 11:36:05 2025 X-Original-To: freebsd-current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4dfHNn60Z4z6LfrK for ; Sun, 28 Dec 2025 11:36:09 +0000 (UTC) (envelope-from agh@riseup.net) Received: from mx1.riseup.net (mx1.riseup.net [198.252.153.129]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "mx1.riseup.net", Issuer "R12" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4dfHNm4sqTz3p25 for ; Sun, 28 Dec 2025 11:36:08 +0000 (UTC) (envelope-from agh@riseup.net) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=riseup.net header.s=squak header.b="q44bbX/h"; dmarc=pass (policy=none) header.from=riseup.net; spf=pass (mx1.freebsd.org: domain of agh@riseup.net designates 198.252.153.129 as permitted sender) smtp.mailfrom=agh@riseup.net Received: from fews04-sea.riseup.net (fews04-sea-pn.riseup.net [10.0.1.154]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx1.riseup.net (Postfix) with ESMTPS id 4dfHNk5sdFzDq9p; Sun, 28 Dec 2025 11:36:06 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=riseup.net; s=squak; t=1766921767; bh=cxtE/DC+0APSHNhm+znuFHElBv8CQ6brRxCJsQCIr9Q=; h=Date:From:To:Cc:Subject:In-Reply-To:References:From; b=q44bbX/h+UaZbHY1L/orKsxWnJlzhvatiQJBPi2RZ5IKAkJ9VY6FuqBZX2p/GRR/P rwbXwlTA0KvlNELYQSCzdVskZEnpoxkgod8uXpE13qkoEscOSLnNHVl6uwUgEhdOdb qOcgwPxi8ayjhyUYofDIdhw4aKK1FjD6PUbSB/3I= X-Riseup-User-ID: 35A01C610718552CDC4FCDE596BFE83574190FF31540287C5535B3AEA7F32297 Received: from [127.0.0.1] (localhost [127.0.0.1]) by fews04-sea.riseup.net (Postfix) with ESMTPSA id 4dfHNk0d0vz5w8p; Sun, 28 Dec 2025 11:36:05 +0000 (UTC) List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@FreeBSD.org MIME-Version: 1.0 Date: Sun, 28 Dec 2025 11:36:05 +0000 From: Alastair Hogge To: A FreeBSD User Cc: Ronald Klop , FreeBSD CURRENT , David Wolfskill Subject: Re: CURRENT: kernel panic in IPFW while stopping jails In-Reply-To: <20251226103308.72204662@thor.sb211.local> References: <20251225170828.7aef61df@hermann> <902742484.3865.1766683845222@localhost> <20251225190836.6769e6d6@hermann> <20251226103308.72204662@thor.sb211.local> Message-ID: <291e26bfbe2b51835f7672db3a2e3593@riseup.net> Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Spamd-Bar: ---- X-Spamd-Result: default: False [-4.06 / 15.00]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_SHORT(-0.96)[-0.963]; DMARC_POLICY_ALLOW(-0.50)[riseup.net,none]; R_SPF_ALLOW(-0.20)[+a:mx1.riseup.net]; R_DKIM_ALLOW(-0.20)[riseup.net:s=squak]; RWL_MAILSPIKE_GOOD(-0.10)[198.252.153.129:from]; MIME_GOOD(-0.10)[text/plain]; ARC_NA(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[198.252.153.129:from]; MISSING_XM_UA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; MIME_TRACE(0.00)[0:+]; DWL_DNSWL_NONE(0.00)[riseup.net:dkim]; RCVD_TLS_ALL(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RECEIVED_HELO_LOCALHOST(0.00)[]; TO_DN_ALL(0.00)[]; MLMMJ_DEST(0.00)[freebsd-current@freebsd.org]; DKIM_TRACE(0.00)[riseup.net:+] X-Rspamd-Queue-Id: 4dfHNm4sqTz3p25 On 2025-12-26 17:32, A FreeBSD User wrote: > Am Tage des Herren Thu, 25 Dec 2025 19:08:36 +0100 > FreeBSD User schrieb: > >> On Thu, 25 Dec 2025 18:30:45 +0100 (CET) >> Ronald Klop wrote: >> >> > Do you use bpf or tap in your ipfw rules? >> > A panic with that was mentioned on the 20th. And fixed in the mean time of I >> > remember correctly. https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291854 >> > Regards,Ronald >> >> Indeed, all boxes in question do have a tap0 at least defined -but in only one >> case used. >> >> Kind regards, >> >> oh >> >> >> > >> > Van: FreeBSD User >> > Datum: 25 december 2025 17:09 >> > Aan: FreeBSD CURRENT >> > Onderwerp: CURRENT: kernel panic in IPFW while stopping jails >> > >> > > >> > > >> > > Hello, >> > > >> > > on recent CURRENT ipfw (in my case compiled into kernel) either restarting >> > > "ipfw" via "service ipfw restart" or restarting jails using also ipfw on a >> > > host also using ipfw (jail-hoster also ipfw compiled into kernel) causes a >> > > fatal kernel crash. >> > > >> > > This issue is present since last week an wreak havok to several boxes with >> > > OS installed on UFS/FFS SSDs. In one case I have only pictures/screenshots >> > > made via smartphone - while crashing, kernel debugger input pops up on >> > > console, but I'm able to typein something within the first seconds and this >> > > is mostly "reboot" but gets stuck with "re" in most cases. "bt" freezes >> > > system immediately. >> > > >> > > At least I can reproduce this misbehaviour on all recent CURRENT were IPFW >> > > is compiled into kernel. Anybody else havong this trouble? >> > > >> > > Kind regards, >> > > >> > > Oliver >> > > >> > > Merry Christmas to everyone. >> > > >> > > -- >> > > >> > > A FreeBSD user >> > > >> > > >> > > >> > > >> > > >> >> > > tap0 disabled/deleted. Same issue on every box. $ git bisect log git bisect start # status: waiting for both good and bad commits # bad: [086bedb11a853801e82234b8a1a64f0df52d9e52] tools.build: also add sys/_visible.h to SYSINCS git bisect bad 086bedb11a853801e82234b8a1a64f0df52d9e52 # status: waiting for good commit(s), bad commit known # good: [44cb1e857f048d2326bdc1a032ccd2c04d2bcdc9] tcp: improve credential handling in syncache git bisect good 44cb1e857f048d2326bdc1a032ccd2c04d2bcdc9 # good: [b0c7eaf83d21bbc333e247ab9e136965b3ca54ed] bhyve/slirp: Drop privileges before entering capability mode git bisect good b0c7eaf83d21bbc333e247ab9e136965b3ca54ed # good: [6a75e3951506c12b42428a47710d07cadcdd723e] ofed/libibverbs: remove strdupa() hack from config.h git bisect good 6a75e3951506c12b42428a47710d07cadcdd723e # bad: [1fad49baf390cb52f238e6c352d0bc0893c008c3] sdhci: Try to complete the last transaction if dumping git bisect bad 1fad49baf390cb52f238e6c352d0bc0893c008c3 # good: [9d9974457ce8c6cf9023884ab457d4712dcc237f] bhyvectl: fix build without BHYVE_SNAPSHOT git bisect good 9d9974457ce8c6cf9023884ab457d4712dcc237f # bad: [52395203f9ac40d321ed55d93e9887300261d3bf] MFV: Import blocklist 2025-12-15 (8a4b011) git bisect bad 52395203f9ac40d321ed55d93e9887300261d3bf # good: [c112ad75605ccdfcb8bbce2f57b0e7a077f057f8] options: describe WITH_IPFILTER_IPFS git bisect good c112ad75605ccdfcb8bbce2f57b0e7a077f057f8 # good: [8774a990ee4094f16d596d4b78e0f3239e5d0c88] bpf: modularize ifnet(9) part of bpf git bisect good 8774a990ee4094f16d596d4b78e0f3239e5d0c88 # bad: [1615eff94cda8619561b73186ec8098cc8b14c5c] usb: don't create ifnet(9) for usbus devices git bisect bad 1615eff94cda8619561b73186ec8098cc8b14c5c # good: [ddf4f9eda9c295082f17e7f26963666b72c97bb9] ipfw: create "ipfw0" and "ipfwlog0" bpf tapping points without ifnet(9) git bisect good ddf4f9eda9c295082f17e7f26963666b72c97bb9 # bad: [3daae1ac1d82ecdcd855101bab5206e914b12350] ipfw: create a bpf tap point for every log rule git bisect bad 3daae1ac1d82ecdcd855101bab5206e914b12350 # good: [1c5021f5251b231b614ad9cd175bcb4250495c12] ifconfig: print warning and return success on ipfw0, ipfwlog0 cloning git bisect good 1c5021f5251b231b614ad9cd175bcb4250495c12 # first bad commit: [3daae1ac1d82ecdcd855101bab5206e914b12350] ipfw: create a bpf tap point for every log rule https://codeberg.org/FreeBSD/freebsd-src/commit/3daae1ac1d82ecdcd855101bab5206e914b12350 ipfw: create a bpf tap point for every log rule Dynamically allocate bpf tap points for every rule that has "log". The name is "ipfw%u", where %u is substituted to the rule number. The default catch all "ipfw0" tap still exists for compatibility and it will catch packets in case if there are no bpf listeners on a per-rule tap. Reviewed by: ae Differential Revision: https://reviews.freebsd.org/D53877