From nobody Sat Jan 17 04:12:09 2026 X-Original-To: freebsd-current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4dtNbJ0BXqz6PL0K for ; Sat, 17 Jan 2026 04:12:12 +0000 (UTC) (envelope-from glebius@freebsd.org) Received: from smtp.freebsd.org (smtp.freebsd.org [96.47.72.83]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R12" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4dtNbH6nJHz3X5g; Sat, 17 Jan 2026 04:12:11 +0000 (UTC) (envelope-from glebius@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1768623132; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=RzbfKoU5WNnKhpnL7km48N3NhzCpQjqLvPvnzgDZ6zM=; b=m8SLmXs8pYv8kdOLsXVox6ox/Y8i9Yh0zdLUwmnyrxoxY6iNZHn6MkBc+gt4B4WyykjYgp 4pHcIMapd79cS/m86oaLzcuUpN72TnOO02U1XeNPdkklIZdkxr2VXWdLjMRpzQSBumKKZ+ G7IlAdv6CyfwMaa0Ng6LmwLmkESqkILS3koObz8+rjeyM6XHkKpu/iwhyxBq0e9bGu8Ppo A/mlU08rjVCSdWDGpJDU3tId50rDQ3aB89R7YrllT16I3FBhiUDWFxkB4I+xvrpiIjDBR9 uftdBYjkICiaWpbweD3E5FG8UODriWXL4+zlc+VPnXyUzGvjufxpFY1I4PjPlQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1768623132; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=RzbfKoU5WNnKhpnL7km48N3NhzCpQjqLvPvnzgDZ6zM=; b=SuaEpC7Ywk1eLGnLBFKH+86xS90hgTe80lzdLBFknwI0M0PaIDbfFl5XPa10cG8xrKOmjw RYWYX/Gdpe0q8HWuzEqWQdYjsg3Z4HeLG/nPvnTZHkB7sPcmVTvaVwUgjtckjSE9RJF2Rr nc7d5vtvKRK/acx+bLNL4Ocp+NEicII64KRaijCxsuhDAcegEIFgzzFRuDUP4IkCDvPp5W sDY+ie6Bp+ufUEigRDnz3GDn//D+RAIT26AJivv3LRkZgUFi0VhgP+HnQKjZd46EXVNiMy c6jApU+Z4MUwTlwUTYPVR7Dd4D22lkBBIyjWvrJcuTvtBh9vjU2db4l9qEAvTQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1768623132; a=rsa-sha256; cv=none; b=gTJCTWLybw9Xw7OYNjXIEumIzb9BXoiBJwfOvepUej87hEHTy0tqfkz2gPmDWwJV4t/Knn Lxj2KM3R29XHOY0gve4BBfc05LhAflr1EdHgq21V4ONAWMVKFE32OLndN14AEGZcI1hZMM tiIFQzBJt9Mip1wqEkS6YWQn26kYdl81yZouul9HRwG1m4vlOQiKi3qSvX7Eryh5M3K5Vs XawAcf4JGNG3tjyDcmDAnap32qwBSOoJwNBrnyK/oNLFulmVVAcentvoE/5lZniUzFqeIe POqmchK6EHGMVCqlBm3yrsjlnLawzwxDBM/XdfUg0AzUeq5uVRC0zKdJV072/Q== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from cell.glebi.us (glebi.us [162.251.186.162]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) (Authenticated sender: glebius) by smtp.freebsd.org (Postfix) with ESMTPSA id 4dtNbH29S9z1LRm; Sat, 17 Jan 2026 04:12:11 +0000 (UTC) (envelope-from glebius@freebsd.org) Date: Fri, 16 Jan 2026 20:12:09 -0800 From: Gleb Smirnoff To: "Dan Mahoney (ports)" Cc: Alastair Hogge , FreeBSD User , Ronald Klop , FreeBSD CURRENT Subject: Re: CURRENT: kernel panic in IPFW while stopping jails Message-ID: References: <6ed6434fce515fb9dab694bb649da95b@riseup.net> <39862682-0F6D-4563-A9CE-276CF61556B8@gushi.org> List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <39862682-0F6D-4563-A9CE-276CF61556B8@gushi.org> Hi, I have pushed all necessary changes to main, that properly address the panic with auto-numbered rules with the "log" keyword, that was introduced in the late December. Very sorry that it took so long! On Fri, Jan 02, 2026 at 12:57:52PM -0600, Dan Mahoney (ports) wrote: D> Glebius D> D> Confirmed, this now fixes the issue (which apparently involves auto-numbered rules and the "log" keyword). D> D> At some point, I'll make sure I have the process down to capture a core dump more easily for you. Welcome to the fun of tracking MAIN :) D> D> Thanks for all your quick work. Please do let me know then this change makes it into git. D> D> -Dan D> D> > On Jan 1, 2026, at 7:57 PM, Dan Mahoney (ports) wrote: D> > D> > Building now. Sorry for delay, I've been doing a long cross-country drive. D> > D> > -Dan D> > D> >> On Dec 31, 2025, at 12:00 PM, Gleb Smirnoff wrote: D> >> D> >> On Wed, Dec 31, 2025 at 03:06:38AM +0000, Alastair Hogge wrote: D> >> A> > I have found the problem, thanks to Alastair for a core file. D> >> A> > D> >> A> > The problem affects rules with automatic rule numbers and logging. D> >> A> > D> >> A> > The attached patch should fix the problem, but it is not a final version. D> >> A> D> >> A> Is there a special patch incantation I should be aware of? I have tried D> >> A> the patch against both 8e951583936980909d34a6104ace781541fb62b1[1], and D> >> A> 4fecc8e3fe9408621429777b1028c9afb83c3925[2], and observed the following: D> >> ... D> >> A> 3 out of 3 hunks failed while patching sys/netpfil/ipfw/ip_fw_sockopt.c D> >> D> >> The only explanation I have is that your email agent has mangled the patch. D> >> D> >> A> > Dan & Alastair, if any of you can confirm that the patch heals your setup - I D> >> A> > will appreciate. D> >> A> D> >> A> I manually patched in your work, and was able to boot a sync'd D> >> A> -CURRENT[2], with logging counters re-enabled, there has been no panics D> >> A> for ~20 minutes now. D> >> D> >> Great! The patch as is isn't final. I will find out something better after D> >> the holidays. D> >> D> >> -- D> >> Gleb Smirnoff D> > D> > D> -- Gleb Smirnoff