From nobody Mon Dec 29 20:51:03 2025 X-Original-To: freebsd-current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4dg7fg1KmKz6MKkC for ; Mon, 29 Dec 2025 20:51:07 +0000 (UTC) (envelope-from glebius@freebsd.org) Received: from smtp.freebsd.org (smtp.freebsd.org [96.47.72.83]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R12" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4dg7fg07Rsz3lR0; Mon, 29 Dec 2025 20:51:07 +0000 (UTC) (envelope-from glebius@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1767041467; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=LthHj45JhPnflizNGqUk4YyyD/vCzINb2f24sGQI0C8=; b=B6jNiJs5sd8EfOcn+KoZ1YSv3cp2zPKHhlrJtxpAuF/C0HzW0ESm8V89O6icp86JW50GTG ctocDLj/tEFEwTOuG6+XazCoB+NDF5tKXtYJXBlhBJDhI48YERmG+lsqtcmbjhvZZ8x5WR oKan6qHNYyaEEAbQSFFUnPiDK+hJDPdZ+PtDWTPs6CWMJV/UHe831sbTlzoYktArA6qPhO NcgYRCCAj8eOzu2eHz3hFe8CX3WynVeAAzzIXInQ9Tm4yjTcWeMw+eOt7STbVUo5Y9jEXH ae2Lf+ayoG514lhSbQqA4SLxxeHo2B6hA9w97BU6DijdnCSmr7YUYieKEcTT8w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1767041467; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=LthHj45JhPnflizNGqUk4YyyD/vCzINb2f24sGQI0C8=; b=Dxd7N+O4HZ6yA6cC8nLzJwVBpF1GShmT1T8pk3ob2J3KEDPGvorKsir1UpIe+vgUM+/bfE UQQ2C6AgKdmiFWQbTEdKYy4JW5M6Zobo8t66V+O0z2N7JIgdH9POjax1TGgSfp/rLNkkIL YRXyZrEyTE2XAbCDtMAnlpuxXHBRj85a7VhiHNTSOgIpDmLKQb7BrJcPwFAvjZANuullSB RQZz4bbRmuTYnPUnj5fKGr8t2MHxVgcV2HS3pLDwhvUvPnJe/lMSrqLDC2cxpPNhDoyrDF pGxKmX/B/lu4uFHc9EhgCIMMAWKPRZPLONd4opgurS/YjxjSWRgueb2MKf9ijg== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1767041467; a=rsa-sha256; cv=none; b=IogWvn0A/4EF1c71wXiAS5NZiS7xN6B93vvtr7/gfBYwN+8z9JvZNQuraPZLSIn+t7zzpS BBFjK8+zzeaS35tT4Y6bI/N1psl3z29vxtpzu3cGjkl1CLVXKwwEH+5wLH5Wbr7k3/Aks+ J6EZPXTQilzkRGqc4f6uwVO4DNhgeyplYaA6JE46IVYa8fIdWcltA//V68WdJ5i92oSRKl hkJI2TICOj6F036ISC5vRo4oc+thIdP3Z4uWuniTUiloHtYiPCCaOQf+2tw45Iv8Mvy4Wo q0Zflu+MG9fSVqXcNRkRTPEdEh+UQUsLPE7pYkZaDe1D1DIWXeUfmcZcsL372Q== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from cell.glebi.us (glebi.us [162.251.186.162]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) (Authenticated sender: glebius) by smtp.freebsd.org (Postfix) with ESMTPSA id 4dg7ff1cXNzmRm; Mon, 29 Dec 2025 20:51:06 +0000 (UTC) (envelope-from glebius@freebsd.org) Date: Mon, 29 Dec 2025 12:51:03 -0800 From: Gleb Smirnoff To: Alastair Hogge Cc: A FreeBSD User , Ronald Klop , FreeBSD CURRENT , David Wolfskill Subject: Re: CURRENT: kernel panic in IPFW while stopping jails Message-ID: References: <20251225170828.7aef61df@hermann> <902742484.3865.1766683845222@localhost> <20251225190836.6769e6d6@hermann> <20251226103308.72204662@thor.sb211.local> <291e26bfbe2b51835f7672db3a2e3593@riseup.net> List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <291e26bfbe2b51835f7672db3a2e3593@riseup.net> Alastair, thanks for running bisect. I see that you started it from a revision that already has 129e15d4994311958db59a1718d4ff42d440ce2b and it still is bad for you. This means a second problem exists in 3daae1ac1d82ecdcd855101bab5206e914b12350. I just tried to reproduce with exactly Dan's ruleset - no panic :( Maybe you can share how you reproduced during your bisection? Or maybe you can dump a core and share it? Very sorry for this breakage during the holidays. I really want to fix that ASAP, but I need more data. On Sun, Dec 28, 2025 at 11:36:05AM +0000, Alastair Hogge wrote: A> $ git bisect log A> git bisect start A> # status: waiting for both good and bad commits A> # bad: [086bedb11a853801e82234b8a1a64f0df52d9e52] tools.build: also add A> sys/_visible.h to SYSINCS A> git bisect bad 086bedb11a853801e82234b8a1a64f0df52d9e52 A> # status: waiting for good commit(s), bad commit known A> # good: [44cb1e857f048d2326bdc1a032ccd2c04d2bcdc9] tcp: improve A> credential handling in syncache A> git bisect good 44cb1e857f048d2326bdc1a032ccd2c04d2bcdc9 A> # good: [b0c7eaf83d21bbc333e247ab9e136965b3ca54ed] bhyve/slirp: Drop A> privileges before entering capability mode A> git bisect good b0c7eaf83d21bbc333e247ab9e136965b3ca54ed A> # good: [6a75e3951506c12b42428a47710d07cadcdd723e] ofed/libibverbs: A> remove strdupa() hack from config.h A> git bisect good 6a75e3951506c12b42428a47710d07cadcdd723e A> # bad: [1fad49baf390cb52f238e6c352d0bc0893c008c3] sdhci: Try to complete A> the last transaction if dumping A> git bisect bad 1fad49baf390cb52f238e6c352d0bc0893c008c3 A> # good: [9d9974457ce8c6cf9023884ab457d4712dcc237f] bhyvectl: fix build A> without BHYVE_SNAPSHOT A> git bisect good 9d9974457ce8c6cf9023884ab457d4712dcc237f A> # bad: [52395203f9ac40d321ed55d93e9887300261d3bf] MFV: Import blocklist A> 2025-12-15 (8a4b011) A> git bisect bad 52395203f9ac40d321ed55d93e9887300261d3bf A> # good: [c112ad75605ccdfcb8bbce2f57b0e7a077f057f8] options: describe A> WITH_IPFILTER_IPFS A> git bisect good c112ad75605ccdfcb8bbce2f57b0e7a077f057f8 A> # good: [8774a990ee4094f16d596d4b78e0f3239e5d0c88] bpf: modularize A> ifnet(9) part of bpf A> git bisect good 8774a990ee4094f16d596d4b78e0f3239e5d0c88 A> # bad: [1615eff94cda8619561b73186ec8098cc8b14c5c] usb: don't create A> ifnet(9) for usbus devices A> git bisect bad 1615eff94cda8619561b73186ec8098cc8b14c5c A> # good: [ddf4f9eda9c295082f17e7f26963666b72c97bb9] ipfw: create "ipfw0" A> and "ipfwlog0" bpf tapping points without ifnet(9) A> git bisect good ddf4f9eda9c295082f17e7f26963666b72c97bb9 A> # bad: [3daae1ac1d82ecdcd855101bab5206e914b12350] ipfw: create a bpf tap A> point for every log rule A> git bisect bad 3daae1ac1d82ecdcd855101bab5206e914b12350 A> # good: [1c5021f5251b231b614ad9cd175bcb4250495c12] ifconfig: print A> warning and return success on ipfw0, ipfwlog0 cloning A> git bisect good 1c5021f5251b231b614ad9cd175bcb4250495c12 A> # first bad commit: [3daae1ac1d82ecdcd855101bab5206e914b12350] ipfw: A> create a bpf tap point for every log rule A> A> https://codeberg.org/FreeBSD/freebsd-src/commit/3daae1ac1d82ecdcd855101bab5206e914b12350 A> ipfw: create a bpf tap point for every log rule A> A> Dynamically allocate bpf tap points for every rule that has "log". A> The name is "ipfw%u", where %u is substituted to the rule number. A> The default catch all "ipfw0" tap still exists for compatibility A> and it will catch packets in case if there are no bpf listeners A> on a per-rule tap. A> A> Reviewed by: ae A> Differential Revision: https://reviews.freebsd.org/D53877 -- Gleb Smirnoff