[Bug 282507] ipfw: vnet_destroy causes exclusive rw IPFW UH lock (IPFW UH lock) r = 0 (0xfffffe0140b796d0) locked

From: <bugzilla-noreply_at_freebsd.org>
Date: Sun, 03 Nov 2024 04:57:41 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=282507

            Bug ID: 282507
           Summary: ipfw: vnet_destroy causes exclusive rw IPFW UH lock
                    (IPFW UH lock) r = 0 (0xfffffe0140b796d0) locked
           Product: Base System
           Version: 15.0-CURRENT
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: ipfw@FreeBSD.org
          Reporter: lexi.freebsd@le-fay.org

host: FreeBSD 15.0-CURRENT #0 lf/main-n269075-b835cc934f8: Wed Oct 30 15:34:15
GMT 2024, src ~22429a464a5f4f6bb5a056aae1353985db83b721

a VNET jail on this host runs ipfw to provide NAT64.

shutting down the jail (service jail stop nat64) reliably produces this witness
error:

calling _callout_stop_safe with the following non-sleepable locks held:
exclusive rw IPFW UH lock (IPFW UH lock) r = 0 (0xfffffe0140b796d0) locked @
/data/build/src/freebsd/lf/main/sys/netpfil/ipfw/nat64/nat64lsn_control.c:933
stack backtrace:
#0 0xffffffff8052783c at witness_debugger+0x6c
#1 0xffffffff80528a33 at witness_warn+0x403
#2 0xffffffff804d1ef3 at _callout_stop_safe+0x73
#3 0xffffffff81d7de50 at nat64lsn_destroy_instance+0x70
#4 0xffffffff81d7fce3 at destroy_config_cb+0x63
#5 0xffffffff81da286b at ipfw_objhash_foreach_type+0x7b
#6 0xffffffff81d7fc36 at nat64lsn_uninit+0xa6
#7 0xffffffff81d77171 at vnet_ipfw_nat64_uninit+0x51
#8 0xffffffff805f8154 at vnet_destroy+0x154
#9 0xffffffff804786a0 at prison_deref+0x980
#10 0xffffffff80479733 at sys_jail_remove+0x113
#11 0xffffffff8079e798 at amd64_syscall+0x158
#12 0xffffffff8077123b at fast_syscall_common+0xf8

-- 
You are receiving this mail because:
You are the assignee for the bug.