From owner-freebsd-bugs@freebsd.org Wed Apr 21 07:58:07 2021 Return-Path: Delivered-To: freebsd-bugs@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id BCDAF5FB249 for ; Wed, 21 Apr 2021 07:58:07 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mailman.nyi.freebsd.org (unknown [127.0.1.3]) by mx1.freebsd.org (Postfix) with ESMTP id 4FQCbM4nv7z4mDy for ; Wed, 21 Apr 2021 07:58:07 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: by mailman.nyi.freebsd.org (Postfix) id A49685FB48E; Wed, 21 Apr 2021 07:58:07 +0000 (UTC) Delivered-To: bugs@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id A46335FB248 for ; Wed, 21 Apr 2021 07:58:07 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4FQCbM45Yqz4ly6 for ; Wed, 21 Apr 2021 07:58:07 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 7FA4622813 for ; Wed, 21 Apr 2021 07:58:07 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 13L7w7d4010429 for ; Wed, 21 Apr 2021 07:58:07 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 13L7w7KY010428 for bugs@FreeBSD.org; Wed, 21 Apr 2021 07:58:07 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 255295] firewallcrashing kernel (reboot) after update from 12.1 (looks like ipfw causes the crash) Date: Wed, 21 Apr 2021 07:58:07 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 13.0-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: michael@meiszl.de X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter Message-ID: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Apr 2021 07:58:07 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D255295 Bug ID: 255295 Summary: firewallcrashing kernel (reboot) after update from 12.1 (looks like ipfw causes the crash) Product: Base System Version: 13.0-STABLE Hardware: amd64 OS: Any Status: New Severity: Affects Only Me Priority: --- Component: kern Assignee: bugs@FreeBSD.org Reporter: michael@meiszl.de first of all, this system is up and running since fbsd 7 or so, the hardware changed a bit over the years, but is really solid as a rock (so far). Currently its an Ryzen 3400G with some Intel IX? (double 10Gbit/s card) and= one or more Realtec 1Gb card.=20 Main usage is ROUTER (but also conatains Apache / Mysql / Wordpress and so = on). My first naive approach to update last week ended very shortly in the 2nd r= un of "freebsd-update install" with a last message "ipfw: pullup failed" and a lost connection. Redoing the same stuff from the console also gave that err= or and locked me out completely. The Reset Key was no help either, the filesys= tem was crashed, no login possible anymore besides single User Mode. So I reinstalled 12.1 from USB Drive, fetched the Backup via LAN and revert= ed to the state before the update (and was quite annoyed, this really was the = 1st time FBSD did not love me anymore) I was angry for a week but this mornig I decided to give it a 2nd chance, beeing more prepared for troubles. So I disabled all rc services, rebooted, installed directly from the consol= e. Yeah! all passes went through! I was delighted! Although there was an error message about a missing "srand0FBSD_1_6" in a shared lib, I made it savely through all stages, including updates to the apps. Then I became bold and reactived all rc.services and rebooted... looked good, but not for long :-( After some seconds in multiuser there was an instant reboot again! -( And yeah, each time the system only managed to keep up for some seconds, th= en it rebooted. I went into single user (this worked) and began to disable the services one= by one, starting with ipfw And guess what? this did the trick! The crashes begin with the first incoming packet that the firewall has to filter! (Disabling the firewall is NO OPTION here, this is the main router, it runs= VPN and V6 Tunnels!) So what can I do now? (I have saved the crash dumps, but dont know what to = do with them) If you need some files from the crash dir, drop me a note. --=20 You are receiving this mail because: You are the assignee for the bug.=