[Bug 268832] panics in check_uidgid() for outgoing packets

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=268832

            Bug ID: 268832
           Summary: panics in check_uidgid() for outgoing packets
           Product: Base System
           Version: 13.1-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: nikita@druba.su

Created attachment 239348
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=239348&action=edit
kgdb -n last; bt

Hi!
Several days ago I was update of my FreeBSD from 12.3 to 13.1 and got the next
trouble:
After boot fully updated OS(with packages), the OS freeze without any comments.
I didn't have a chance to get some information about error or safely power off
the system. It was fully freezed. 
OS was binary updated by freebsd-update. Freezing also repeated after switching
to 13.1-RELENG kernel, builded from sources. 
After some time of troubleshooting and help from colleagues, got some idea
about the reasons of this error.
Presumably, it was some component of ipfw. In attachments is ipfw show output,
There a few lines at the beginning of rules is a counts, automatically added by
cbsdd. In FreeBSD 12.3 they worked without errors, but after upgrade led to the
described problem. When I disabling this cbsdd function, OS working well and
dont try to freeze. 
To be more specific, I will describe the well-reproducing event, where I get an
freezing. After compiling kernel with debug options I got a possibility to saw
a reason of freeze. With debug kernel system stopped freezing, showed me kernel
panic message and rebooted OS. In attachments I will rest backtrace of this
event. 
Sequencing: 
Booting updated OS (without jails and any VMs, only primitive service apps), 
starting jail with a postgres (its can stable work a long time)
starting jail with a zabbix-server (that start to interact with a postgres
jail)
after 10-60 seconds after launch of zabbix jail I get kernel panic.

I can easily repeat sequencing and get panic again to collect more information,
if it needed.

-- 
You are receiving this mail because:
You are the assignee for the bug.