From owner-freebsd-stable@freebsd.org Fri Apr 7 12:03:51 2017 Return-Path: Delivered-To: freebsd-stable@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2D8DCD2F3FB for ; Fri, 7 Apr 2017 12:03:51 +0000 (UTC) (envelope-from pblok@bsd4all.org) Received: from smtpq2.tb.mail.iss.as9143.net (smtpq2.tb.mail.iss.as9143.net [212.54.42.165]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id D1C079A7 for ; Fri, 7 Apr 2017 12:03:50 +0000 (UTC) (envelope-from pblok@bsd4all.org) Received: from [212.54.42.134] (helo=smtp10.tb.mail.iss.as9143.net) by smtpq2.tb.mail.iss.as9143.net with esmtp (Exim 4.86_2) (envelope-from ) id 1cwSG0-0005lX-4g for freebsd-stable@freebsd.org; Fri, 07 Apr 2017 13:40:48 +0200 Received: from 5ed15678.cm-7-2b.dynamic.ziggo.nl ([94.209.86.120] helo=wan0.bsd4all.org) by smtp10.tb.mail.iss.as9143.net with esmtp (Exim 4.86_2) (envelope-from ) id 1cwSG0-0008Vl-0t for freebsd-stable@freebsd.org; Fri, 07 Apr 2017 13:40:48 +0200 Received: from newnas (localhost [127.0.0.1]) by wan0.bsd4all.org (Postfix) with ESMTP id CB01C719E for ; Fri, 7 Apr 2017 13:40:47 +0200 (CEST) X-Virus-Scanned: amavisd-new at bsd4all.org Received: from wan0.bsd4all.org ([127.0.0.1]) by newnas (newnas.bsd4all.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dEafFsJvdOEC for ; Fri, 7 Apr 2017 13:40:47 +0200 (CEST) Received: from [192.168.1.64] (mm [192.168.1.64]) by wan0.bsd4all.org (Postfix) with ESMTPSA id 19B3B7193 for ; Fri, 7 Apr 2017 13:40:47 +0200 (CEST) From: Peter Blok Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Subject: panic in pfcioctl Message-Id: <86468517-69FF-4398-8FA9-0D7045CDD32B@bsd4all.org> Date: Fri, 7 Apr 2017 13:40:46 +0200 To: freebsd-stable@freebsd.org X-Mailer: Apple Mail (2.3273) X-SourceIP: 94.209.86.120 X-Ziggo-spambar: / X-Ziggo-spamscore: 0.0 X-Ziggo-spamreport: CMAE Analysis: v=2.2 cv=Yup/f8QX c=1 sm=1 tr=0 a=IkzOOneQUJP1+bAPekPvBg==:17 a=AzvcPWV-tVgA:10 a=VZgy4sajuSPyX5v6hS8A:9 a=gAzRF1EebyQqZOAd:21 a=7KVw9ZI5iXHqQYMN:21 a=QEXdDO2ut3YA:10 a=516TZ-q17AJPlmKMHRMA:9 a=E-tUg0QQAIHu88kl:21 a=_W_S_7VecoQA:10 none X-Ziggo-Spam-Status: No X-Spam-Status: No X-Spam-Flag: No Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Apr 2017 12:03:51 -0000 Hi, I=E2=80=99m running 11-STABLE rev 316522. I recently had a panic while doing a pfctl -f /etc/pf.conf The panic happens on LIST_REMOVE in keg_fetch_slab static uma_slab_t keg_fetch_slab(uma_keg_t keg, uma_zone_t zone, int flags) { uma_slab_t slab; int reserve; mtx_assert(&keg->uk_lock, MA_OWNED); slab =3D NULL; reserve =3D 0; if ((flags & M_USE_RESERVE) =3D=3D 0) reserve =3D keg->uk_reserve; for (;;) { /* * Find a slab with some space. Prefer slabs that are = partially * used over those that are totally full. This helps to = reduce * fragmentation. */ if (keg->uk_free > reserve) { if (!LIST_EMPTY(&keg->uk_part_slab)) { slab =3D LIST_FIRST(&keg->uk_part_slab); } else { slab =3D LIST_FIRST(&keg->uk_free_slab); LIST_REMOVE(slab, us_link); LIST_INSERT_HEAD(&keg->uk_part_slab, = slab, us_link); } MPASS(slab->us_keg =3D=3D keg); return (slab); } KDB: stack backtrace: #0 0xffffffff805df0e7 at kdb_backtrace+0x67 #1 0xffffffff8059d176 at vpanic+0x186 #2 0xffffffff8059cfe3 at panic+0x43 #3 0xffffffff808ebaa2 at trap_fatal+0x322 #4 0xffffffff808ebaf9 at trap_pfault+0x49 #5 0xffffffff808eb336 at trap+0x286 #6 0xffffffff808d1441 at calltrap+0x8 #7 0xffffffff808a871e at zone_fetch_slab+0x6e #8 0xffffffff808a87cd at zone_import+0x4d #9 0xffffffff808a4fc9 at uma_zalloc_arg+0x529 #10 0xffffffff80803214 at pfr_ina_define+0x584 #11 0xffffffff807f0734 at pfioctl+0x3364 #12 0xffffffff80469288 at devfs_ioctl_f+0x128 #13 0xffffffff805fa925 at kern_ioctl+0x255 #14 0xffffffff805fa65f at sys_ioctl+0x16f #15 0xffffffff808ec604 at amd64_syscall+0x6c4 #16 0xffffffff808d172b at Xfast_syscall+0xfb The panic is not reproducible. So far the 1st time I stop a jail I get (numbers vary) kernel: Freed UMA keg (pf table entries) was not empty (32 items). Lost = -57 pages of memory. Any tips on how to debug/avoid this? Peter=