[Bug 290177] PF - panicking after upgrade to 15.0-STABLE

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 13 Oct 2025 11:31:09 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290177

--- Comment #2 from Marek Zarychta <zarychtam@plan-b.pwste.edu.pl> ---
(In reply to Kristof Provost from comment #1)
I can share pf.conf, but not publicly. During the middle of the week, I will be
able to insert a USB flash drive into this machine to collect crash dumps.

>I've had a first look on the assumption that https://cgit.freebsd.org/src/commit/?id=b93394a38bc41f8afceaf0c03ed5d8b8b5a9aefb
>is the trigger for the panic. Unfortunately I don't really see how.

It was also my initial thought, but I have not reverted this commit. Moreover,
I am running this code on several machines, but so far only one of them has had
issues. It's challenging to determine how it's triggered, as this host is
running numerous different network services, but I suspect Squid or OpenVPN
clients from crowded networks with data loss are triggering this (I might be
completely wrong, though).

Instead of reverting the suspicious commit, I have commented "scrub in" rule,
and I am monitoring the machine - no panics in the recent 14 hours, but the
first panic, beginning yesterday's series, was more than 24h after upgrade to
15.0-STABLE.

-- 
You are receiving this mail because:
You are the assignee for the bug.