[Bug 255295] firewallcrashing kernel (reboot) after update from 12.1 (looks like ipfw causes the crash)

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=255295

            Bug ID: 255295
           Summary: firewallcrashing kernel (reboot) after update from
                    12.1 (looks like ipfw causes the crash)
           Product: Base System
           Version: 13.0-STABLE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs at FreeBSD.org
          Reporter: michael at meiszl.de

first of all, this system is up and running since fbsd 7 or so, the hardware
changed a bit over the years, but is really solid as a rock (so far).
Currently its an Ryzen 3400G with some Intel IX? (double 10Gbit/s card) and one
or more Realtec 1Gb card. 
Main usage is ROUTER (but also conatains Apache / Mysql / Wordpress and so on).

My first naive approach to update last week ended very shortly in the 2nd run
of "freebsd-update install" with a last message "ipfw: pullup failed" and a
lost connection. Redoing the same stuff from the console also gave that error
and locked me out completely. The Reset Key was no help either, the filesystem
was crashed, no login possible anymore besides single User Mode.
So I reinstalled 12.1 from USB Drive, fetched the Backup via LAN and reverted
to the state before the update (and was quite annoyed, this really was the 1st
time FBSD did not love me anymore)

I was angry for a week but this mornig I decided to give it a 2nd chance,
beeing more prepared for troubles.

So I disabled all rc services, rebooted, installed directly from the console.
Yeah! all passes went through! I was delighted! Although there was an error
message about a missing "srand0FBSD_1_6" in a shared lib, I made it savely
through all stages, including updates to the apps.
Then I became bold and reactived all rc.services and rebooted...

looked good, but not for long :-(
After some seconds in multiuser there was an instant reboot again! -(
And yeah, each time the system only managed to keep up for some seconds, then
it rebooted.
I went into single user (this worked) and began to disable the services one by
one, starting with ipfw
And guess what? this did the trick!
The crashes begin with the first incoming packet that the firewall has to
filter!
(Disabling the firewall is NO OPTION here, this is the main router, it runs VPN
and V6 Tunnels!)

So what can I do now? (I have saved the crash dumps, but dont know what to do
with them)
If you need some files from the crash dir, drop me a note.

-- 
You are receiving this mail because:
You are the assignee for the bug.