OPNsense (FreeBSD) freezes at "igb0 attach_pre" with Intel I350 PCI passthrough on Proxmox / Ryzen AM5

[Ekko]

Hi,

I’m trying to run OPNsense as a VM on Proxmox with full PCI passthrough of an Intel I350-T4 (8086:1521). The VM consistently hard-freezes during boot at:

igb0: attach_pre capping queues at 8 (Picture Below)

Environment:

• Proxmox VE (kernel 6.17.x)
• AMD Ryzen 7 7800X (AM5 platform)
• OPNsense installer + latest release tested
• Intel I350-T4 quad NIC
• Machine types tested: q35 and i440fx
• BIOS: OVMF
• CPU type: x86-64-v2-AES

Passthrough status:

• All 4 functions passed individually: hostpci0: 01:00.0 hostpci1: 01:00.1 hostpci2: 01:00.2 hostpci3: 01:00.3
• vfio-pci is correctly bound on the host
• IOMMU enabled (amd_iommu=on iommu=pt)
• Each function is in its own IOMMU group
• ROM-Bar disabled
• x-no-flr tested
• MSI/MSI-X disabled via loader tunables (no change)

If I remove the NIC passthrough completely, OPNsense boots normally to login so the freeze is 100% triggered by igb init.

Things already tried:

• q35 vs i440fx
• PCIe on/off
• multifunction mapping
• disabling MSI/MSI-X
• different CPU types
• different queue settings

Has anyone successfully passed through an I350 to OPNsense/FreeBSD

If you need an additional Informations, let me know

Thanks.

VM:

bios: ovmf
boot: order=virtio0
cores: 4
cpu: x86-64-v2-AES
efidisk0: local-lvm:vm-155-disk-0,efitype=4m,size=4M
# Tried it with pcie=1 and rombar =1 and 1/0 and 0/1...
hostpci0: 0000:01:00.0,pcie=0,rombar=0
hostpci1: 0000:01:00.1,pcie=0,rombar=0
hostpci2: 0000:01:00.2,pcie=0,rombar=0
hostpci3: 0000:01:00.3,pcie=0,rombar=0
ide2: none,media=cdrom
machine: q35
memory: 8192
meta: creation-qemu=10.1.2,ctime=1771359162
name: opnsense
#net0: virtio=BC:24:11:7B:9D:E0,bridge=vmbr0
numa: 0
ostype: other
scsihw: virtio-scsi-single
smbios1: uuid=aa2d09e6-a131-4922-ad8d-40c9a9b3a127
sockets: 1
virtio0: local-lvm:vm-155-disk-1,iothread=1,size=60G
vmgenid: 27379197-8179-4612-ba14-4952bb3f0524

 

[uzumo]

If you want to allow all ports, wouldn't it be better to use the All Function setting?

I don't know if it will improve things, though...

#hostpci0: 0000:01:00.0,pcie=0,rombar=0
#hostpci1: 0000:01:00.1,pcie=0,rombar=0
#hostpci2: 0000:01:00.2,pcie=0,rombar=0
#hostpci3: 0000:01:00.3,pcie=0,rombar=0
hostpci0: 0000:01:00,pcie=0,rombar=0

 

[Ekko]

If you want to allow all ports, wouldn't it be better to use the All Function setting?

I don't know if it will improve things, though...

#hostpci0: 0000:01:00.0,pcie=0,rombar=0
#hostpci1: 0000:01:00.1,pcie=0,rombar=0
#hostpci2: 0000:01:00.2,pcie=0,rombar=0
#hostpci3: 0000:01:00.3,pcie=0,rombar=0
hostpci0: 0000:01:00,pcie=0,rombar=0

Sadly also doesnt improve it. Same still error