Hello,
On Sun, Nov 30, 2025 at 09:56:15PM +0100, Jesper Wallin wrote:
> Hi again,
>
> On Sun, Nov 30, 2025 at 10:18:14AM +0100, Alexandr Nedvedicky wrote:
> >
> > so the crash does not seem to be related to source nodes.
> > also the rules you've shared do not seem to use the source node code.
> >
> > so it's actually caused by state which refers to dead memory left
> > behind the rule which got removed.
> >
> > this feels there is something not quite right with handling of reference
> > counter to rules.
>
> Crap, I just realized that I've modified the rules from when the crash
> happened to when I dumped the rules I sent you.
>
> When the crash happened, I also had "label bad" on the urpf-failed,
> no-route and the udp "from any to 239.255.255.0/24" rules. I also had
> "label icmp" on all the ICMP rules. Apart from that, all is the same.
>
I see. It still confirms your rules don't use source nodes at all.
so I think it must be reference to rule from state which went wrong.
once the crash will happen next time dumap also register values if
possible.
thanks and
regards
sashan