From nobody Tue Oct 19 01:01:31 2021 X-Original-To: freebsd-stable@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id A1B71180C266 for ; Tue, 19 Oct 2021 01:01:35 +0000 (UTC) (envelope-from lev@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [96.47.72.83]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HYFnC10xYz4TB3 for ; Tue, 19 Oct 2021 01:01:35 +0000 (UTC) (envelope-from lev@FreeBSD.org) Received: from onlyone.not-for.work (onlyone.not-for.work [148.251.9.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) (Authenticated sender: lev/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id 9A4A827240 for ; Tue, 19 Oct 2021 01:01:34 +0000 (UTC) (envelope-from lev@FreeBSD.org) Received: from [192.168.134.16] (unknown [94.19.243.255]) (Authenticated sender: lev@serebryakov.spb.ru) by onlyone.not-for.work (Postfix) with ESMTPSA id 54FA816 for ; Tue, 19 Oct 2021 04:01:32 +0300 (MSK) Message-ID: Date: Tue, 19 Oct 2021 04:01:31 +0300 List-Id: Production branch of FreeBSD source code List-Archive: https://lists.freebsd.org/archives/freebsd-stable List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-stable@freebsd.org X-BeenThere: freebsd-stable@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.2.0 Content-Language: en-US From: Lev Serebryakov To: freebsd-stable Reply-To: lev@FreeBSD.org Subject: Does audit work on stable/12? Audit-related panic on latest stable/12 Organization: FreeBSD Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-ThisMailContainsUnwantedMimeParts: N I've upgraded one of my servers from 11.4 to latest stable/12. This server is unique in me fleet because it has audit (and auditd) enabled. First of all, right after (source-based, buildworld & Ko) upgrade dmesg becomes flooded with: BSM conversion requested for unknown event 43224 BSM conversion requested for unknown event 43225 BSM conversion requested for unknown event 43234 BSM conversion requested for unknown event 43238 And after several minutes of work I've got panic: Sleeping thread (tid 101199, pid 51147) owns a non-sleepable lock BSM conversion requested for unknown event 43224 KDB: stack backtrace of thread 101199: #0 0xffffffff804d0f34 at mi_switch+0xd4 BSM conversion requested for unknown event 43224 BSM conversion requested for unknown event 43224 #1 0xffffffff8051ca2c at sleepq_wait+0x2c #2 0xffffffff80467d62 at _cv_wait+0xf2 #3 0xffffffff80719573 at audit_commit+0x243 #4 0xffffffff80719866 at audit_syscall_exit+0x26 #5 0xffffffff804d7f8a at kern_thr_exit+0x14a #6 0xffffffff804d7e37 at sys_thr_exit+0x67 #7 0xffffffff807a1557 at amd64_syscall+0x387 #8 0xffffffff8077a7ae at fast_syscall_common+0xf8 panic: sleeping thread cpuid = 6 time = 1634604615 KDB: stack backtrace: #0 0xffffffff8050e925 at kdb_backtrace+0x65 #1 0xffffffff804c5bcb at vpanic+0x17b #2 0xffffffff804c5a43 at panic+0x43 #3 0xffffffff80523702 at propagate_priority+0x282 #4 0xffffffff805242cc at turnstile_wait+0x30c #5 0xffffffff804abd29 at __mtx_lock_sleep+0x199 #6 0xffffffff804d7ec2 at kern_thr_exit+0x82 #7 0xffffffff804d7e37 at sys_thr_exit+0x67 #8 0xffffffff807a1557 at amd64_syscall+0x387 #9 0xffffffff8077a7ae at fast_syscall_common+0xf8 Now, I've turned off auditd and server looks Ok (at least, it is stable for 30 minutes). But I need audit on this server. Is it known problem? Is it configuration problem? -- // Lev Serebryakov