From nobody Fri Dec 12 18:31:43 2025 X-Original-To: virtualization@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4dSdMg58gRz6K4vR for ; Fri, 12 Dec 2025 18:31:43 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R12" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4dSdMg4gXJz3JvB for ; Fri, 12 Dec 2025 18:31:43 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1765564303; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=h6+Buh3Jx4ua/AoU0MTW9TvlM6zYmLpPCnQQzqmmHpU=; b=Y0iMbixQECM37PjinAwd7FD0VrKLTBqkoUZLxTp2plQVCaQwnbXUtSNJofKenZTdiy+tZU QB0oxxMRJoRGRmsap3P5Ji96WLrCzI72MOOpnMEwkP7Ogqx97ohYPnSnfdyyt6kIujHFLb 04Oba1KFQEuAYUDtjxUa905buLhlQJ1taKmGOXVLu7o6gu8BAhkUJJNoq/0Dwl78cewW8t GFq3W1F/bJr2daIYsuhJjCCF1oc4eRIAucB8wIxY7KR9b9u9q+ivPqmE5K25cAk4mLsMfx ZQoZA403VwTdF8pvQxTuqoVtM9Oro2sx+pLjJ20raUKPLKJbiP6jx7q8n/Mcew== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1765564303; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=h6+Buh3Jx4ua/AoU0MTW9TvlM6zYmLpPCnQQzqmmHpU=; b=fF59WfpTCzOoaa+A6nPOxuWAstg6Gn5N+MhpDNAqnRHmAr+w4RESACF9cfVcSKoGNGCw2y c8lnHnc92oi7QxKbuYX9b72wq4sJbunx77e9S5V8LUAESgncDO+zsA90rC7Sn8g7iMghlM oZrqR/2MT5BtKG6v06UX3Vh5kMFfO+WtpqDyDZBnw0+NWUyyLUn8/K9wEPJo1rySh8ohND FIz0YlL7ets5CM1SeBms/4iFQ95k6ahwPKNtxZbzAqeu2vgYbo3OwxDTSdmKA56Y33kob2 pMEiYFPpd/f4kwv77tpS0Tq0TFxiNDs6TNPlQwlMN/OCfded76eqsXwsXc5+UA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1765564303; a=rsa-sha256; cv=none; b=yxk+NFJVrdPUADZyTvvuOnsSvfxt0n6lmmUYph6mnKyBWlfrb5T2pOiyeDitNgkMgGJcHC ni3JzCy8VOvoh+xuXrD53kufeJVPKOJaOzbkV0KJwhYSLcmDK/1x0KBsjlRqCCabf7LkEV ZFlFVDRT52YvR8iH9slRNt/APTvRKLxirVviUAgCPpW7OT/O+3IJWPQeeu0wWxYfJEcJf6 x8RkkgVDnnCNVqLi8rCxmK6/IfBJiO2q8SMVMDp/6BiOtsWoSUG+16BQ/3SLXubjQpExXW FeC07YqPSp19Z3Yk+L4i60UVZxrGuzLJ/h6R1TNvekPwmBRcUERnDxPttRIfSg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4dSdMg4HPWzCZx for ; Fri, 12 Dec 2025 18:31:43 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 5BCIVhOw050545 for ; Fri, 12 Dec 2025 18:31:43 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 5BCIVhVZ050544 for virtualization@FreeBSD.org; Fri, 12 Dec 2025 18:31:43 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: virtualization@FreeBSD.org Subject: [Bug 291616] bhyve: crashes with slirp open networking Date: Fri, 12 Dec 2025 18:31:43 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: bhyve X-Bugzilla-Version: CURRENT X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: novel@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: virtualization@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter Message-ID: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Discussion List-Archive: https://lists.freebsd.org/archives/freebsd-virtualization List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-virtualization@freebsd.org Sender: owner-freebsd-virtualization@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D291616 Bug ID: 291616 Summary: bhyve: crashes with slirp open networking Product: Base System Version: CURRENT Hardware: amd64 OS: Any Status: New Severity: Affects Only Me Priority: --- Component: bhyve Assignee: virtualization@FreeBSD.org Reporter: novel@FreeBSD.org Steps to reproduce: 1. Run a guest. I use Ubuntu Linux for testing: bhyve -c 2 -m 4096 -S -A -I -u -H -P -s 0:0,hostbridge -l bootrom,/usr/local/share/uefi-firmware/BHYVE_UEFI.fd -s 1:0,lpc -s 7:0,virtio-blk,/data/img/u buntu2510.img -l com1,stdio -s 8:0,virtio-net,slirp,mac=3D94:06:31:1a:a6:f7= ,open=20 ubuntu2510=20 2. Generate traffic from the guest. I use the following command: while wget https://download.freebsd.org/releases/ISO-IMAGES/15.0/FreeBSD-15.0-RELEASE-= arm64-aarch64-dvd1.iso -O /dev/null; do : ; done bhyve crashes with: thr_kill () at thr_kill.S:4 4 RSYSCALL(thr_kill) /dev/null=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20= =20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20= =20=20=20=20=20=20=20=20=20=20 68%[=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D> ] 2.63G --.-KB/s eta= 3m 13s=20 (gdb) bt #0 thr_kill () at thr_kill.S:4 #1 0x000000080114c934 in __raise (s=3Ds@entry=3D6) at /usr/home/novel/code/freebsd-src/lib/libc/gen/raise.c:48 #2 0x00000008011fe7a9 in abort () at /usr/home/novel/code/freebsd-src/lib/libc/stdlib/abort.c:61 #3 0x000000080112f521 in __assert (func=3D, file=3D, line=3Dline@entry=3D113, failedexpr=3D) at /usr/home/novel/code/freebsd-src/lib/libc/gen/assert.c:47 #4 0x0000000001024f2e in slirp_cb_send_packet (buf=3D, len= =3D1514, param=3D) at /usr/home/novel/code/freebsd-src/usr.sbin/bhyve/slirp/slirp-helper.c:113 #5 0x000000080141ad02 in ?? () from /usr/local/lib/libslirp.so.0 #6 0x0000000801412f7d in ?? () from /usr/local/lib/libslirp.so.0 #7 0x0000000801416366 in ?? () from /usr/local/lib/libslirp.so.0 #8 0x0000000801421197 in ?? () from /usr/local/lib/libslirp.so.0 #9 0x000000080141a718 in slirp_pollfds_poll () from /usr/local/lib/libslirp.so.0 #10 0x0000000001024c73 in slirp_pollfd_loop (priv=3D0x7fffffffe7b0) at /usr/home/novel/code/freebsd-src/usr.sbin/bhyve/slirp/slirp-helper.c:263 #11 main (argc=3D, argv=3D) at /usr/home/novel/code/freebsd-src/usr.sbin/bhyve/slirp/slirp-helper.c:566 (gdb) fr 4 #4 0x0000000001024f2e in slirp_cb_send_packet (buf=3D, len= =3D1514, param=3D) at /usr/home/novel/code/freebsd-src/usr.sbin/bhyve/slirp/slirp-helper.c:113 113 assert((size_t)n =3D=3D len); (gdb) p n $1 =3D 0 (gdb) Host system is: FreeBSD tulp 16.0-CURRENT FreeBSD 16.0-CURRENT #1 main-n282364-69e041521a80: Fri Dec 5 16:24:19 CET 2025=20=20=20=20 novel@tulp:/usr/obj/usr/home/novel/code/freebsd-src/amd64.amd64/sys/TULP am= d64 --=20 You are receiving this mail because: You are the assignee for the bug.=