From owner-freebsd-stable@freebsd.org Thu Sep 6 18:52:41 2018 Return-Path: Delivered-To: freebsd-stable@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DD8AFFDA650 for ; Thu, 6 Sep 2018 18:52:40 +0000 (UTC) (envelope-from cyschow@shaw.ca) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id 5CCF4856D3 for ; Thu, 6 Sep 2018 18:52:40 +0000 (UTC) (envelope-from cyschow@shaw.ca) Received: by mailman.ysv.freebsd.org (Postfix) id 21905FDA64F; Thu, 6 Sep 2018 18:52:40 +0000 (UTC) Delivered-To: stable@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id F3BB2FDA64E for ; Thu, 6 Sep 2018 18:52:39 +0000 (UTC) (envelope-from cyschow@shaw.ca) Received: from smtp-out-no.shaw.ca (smtp-out-no.shaw.ca [64.59.134.9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "Client", Issuer "CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 87B11856D1 for ; Thu, 6 Sep 2018 18:52:39 +0000 (UTC) (envelope-from cyschow@shaw.ca) Received: from mail.intranet.peyto.ca ([24.64.227.31]) by shaw.ca with ESMTP id xzOOfcs3lWppDxzOPfKI16; Thu, 06 Sep 2018 12:52:37 -0600 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=shaw.ca; s=s20180605; t=1536259957; bh=dtGXo5LgglmCXUnWTbLPZHrsOW8JqjrHMuzvZFnZiws=; h=From:To:Subject:Date; b=PH7l+IaPfjmg+5o4QQBlrwd+jtjH8rPOobhi2JyDqO2ELOIzywWv3QBReGlDI1GDI 7qQAqZG24PrG4dK786JXLWZLJyJXVH0epLLT7qrHnOh+rjHM5ZdwijfBWpFOOyjE/U wu58t1ZKufAdmdehByhp8TeZ7tTtbad/ItIk/XQf0s5CclVfq/c5aHkYXnF5vS10Du bN4b/BiXydRRjrK4apTEJ2MdoiIM05GfKAEXAve0U+GExxui4IR3qsFg0K8JWfdsfp ezz0Nv/qATJtjriutw8h3cug7/IsoZCDzYgdUsO24MXyljK2e7zVj2Zf1jy8nKmEed yFrPtXawtsYtw== X-Authority-Analysis: v=2.3 cv=YIcrNiOx c=1 sm=1 tr=0 a=EzZWVta4pqxsgR2mpKnCwA==:117 a=EzZWVta4pqxsgR2mpKnCwA==:17 a=IkcTkHD0fZMA:10 a=O76VCmqbo-wA:10 a=x7bEGLp0ZPQA:10 a=JBFolyDoGHsA:10 a=SAGSzlj6AAAA:8 a=yieyz2hxvMmFrtCWJb4A:9 a=vtndIjM45Ykx8ail:21 a=idfRHI3P8v0mFB_8:21 a=QEXdDO2ut3YA:10 a=obsNnxbpM5_HcROTUlqU:22 a=Bl1bqend9reKY-4Nh7dc:22 a=HH7FIXwXL_sUf1zzYxQd:22 Received: from [192.168.4.6] (unknown [192.168.4.6]) by mail.intranet.peyto.ca (Postfix) with ESMTPSA id B2EBD132520 for ; Thu, 6 Sep 2018 12:49:52 -0600 (MDT) From: Samuel Chow To: stable@freebsd.org Subject: Kernel crash while deleting vimage jail Message-ID: Date: Thu, 6 Sep 2018 12:49:50 -0600 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US X-Peyto-MailScanner-Information: Please contact the ISP for more information X-Peyto-MailScanner-ID: B2EBD132520.A2FA8 X-Peyto-MailScanner: Found to be clean X-Peyto-MailScanner-SpamCheck: not spam, SpamAssassin (not cached, score=-1, required 6, autolearn=disabled, ALL_TRUSTED -1.00) X-Peyto-MailScanner-From: cyschow@shaw.ca X-Spam-Status: No X-CMAE-Envelope: MS4wfC8NCA7PhYsrtar1sFFLC+AS+wvfYEcn/ocbHYRPQrtOsNizakyxTYt+hnOySbvUYjdHkBkPzK6Qshb7uCbKwO6cRGol+vxmQZMRBrrK5ybRsTyVcsHf vFPhVsu1H5VgqIaKKc1eHMdJnVorqHk50QLRbiJ3zCW5HxDkAZ6XkGWG X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Sep 2018 18:52:41 -0000 I would like to report a kernel crash while tearing down a VIMAGE-based jail.This can be reproduced consistently. Thanks. --- Fatal trap 12: page fault while in kernel mode cpuid = 4; apic id = 08 fault virtual address   = 0xa8 fault code              = supervisor read data, page not present instruction pointer     = 0x20:0xffffffff80dfddd4 stack pointer           = 0x28:0xfffffe08606b5960 frame pointer           = 0x28:0xfffffe08606b59b0 code segment            = base 0x0, limit 0xfffff, type 0x1b                         = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags        = interrupt enabled, resume, IOPL = 0 current process         = 3788 (jail) trap number             = 12 panic: page fault cpuid = 4 KDB: stack backtrace: #0 0xffffffff80b416b7 at kdb_backtrace+0x67 #1 0xffffffff80afa697 at vpanic+0x177 #2 0xffffffff80afa513 at panic+0x43 #3 0xffffffff80f9314f at trap_fatal+0x35f #4 0xffffffff80f931a9 at trap_pfault+0x49 #5 0xffffffff80f92984 at trap+0x2d4 #6 0xffffffff80f7272c at calltrap+0x8 #7 0xffffffff80dfee16 at uma_zdestroy+0x36 #8 0xffffffff80cfdb92 at tcp_destroy+0x132 #9 0xffffffff80c15b8c at vnet_destroy+0x13c #10 0xffffffff80ac52f0 at prison_deref+0x2b0 #11 0xffffffff80ac6bc4 at sys_jail_remove+0x364 #12 0xffffffff80f941d8 at amd64_syscall+0xa38 #13 0xffffffff80f7300d at fast_syscall_common+0x101 Uptime: 3m53s --- (kgdb) list *0xffffffff80dfddd4 0xffffffff80dfddd4 is in zone_dtor (uma_int.h:331). 326     static inline uma_keg_t 327     zone_first_keg(uma_zone_t zone) 328     { 329             uma_klink_t klink; 330 331             klink = LIST_FIRST(&zone->uz_kegs); 332             return (klink != NULL) ? klink->kl_keg : NULL; 333     } 334 335     #undef UMA_ALIGN Current language:  auto; currently minimal --- (kgdb) backtrace #0  doadump (textdump=) at pcpu.h:230 #1  0xffffffff80afa2ab in kern_reboot (howto=260)     at /usr/src/sys/kern/kern_shutdown.c:383 #2  0xffffffff80afa6d1 in vpanic (fmt=,     ap=) at /usr/src/sys/kern/kern_shutdown.c:776 #3  0xffffffff80afa513 in panic (fmt=)     at /usr/src/sys/kern/kern_shutdown.c:707 #4  0xffffffff80f9314f in trap_fatal (frame=0xfffffe08606b58a0, eva=168)     at /usr/src/sys/amd64/amd64/trap.c:877 #5  0xffffffff80f931a9 in trap_pfault (frame=0xfffffe08606b58a0, usermode=0)     at pcpu.h:230 #6  0xffffffff80f92984 in trap (frame=0xfffffe08606b58a0)     at /usr/src/sys/amd64/amd64/trap.c:415 #7  0xffffffff80f7272c in calltrap ()     at /usr/src/sys/amd64/amd64/exception.S:231 #8  0xffffffff80dfddd4 in zone_dtor (arg=0x0, size=1664, udata=0x0)     at /usr/src/sys/vm/uma_core.c:1691 #9  0xffffffff80dfee16 in uma_zdestroy (zone=0x0)     at /usr/src/sys/vm/uma_core.c:2920 #10 0xffffffff80cfdb92 in tcp_destroy (unused=)     at /usr/src/sys/netinet/tcp_subr.c:749 #11 0xffffffff80c15b8c in vnet_destroy (vnet=0xfffff800273612c0)     at /usr/src/sys/net/vnet.c:596 #12 0xffffffff80ac52f0 in prison_deref (pr=0xffffffff81a331d0, flags=23)     at /usr/src/sys/kern/kern_jail.c:2647 #13 0xffffffff80ac6bc4 in sys_jail_remove (td=,     uap=) at /usr/src/sys/kern/kern_jail.c:2270 #14 0xffffffff80f941d8 in amd64_syscall (td=0xfffff80058f54620, traced=0)     at subr_syscall.c:132 #15 0xffffffff80f7300d in fast_syscall_common ()     at /usr/src/sys/amd64/amd64/exception.S:494 #16 0x0000000800ea2a4a in ?? () --- sm5018a> uname -a FreeBSD sm5018a.intranet.peyto.ca 11.2-STABLE FreeBSD 11.2-STABLE #0 r337832: We d Aug 15 17:19:31 MDT 2018 samuelc@sm5018a.intranet.peyto.ca:/usr/obj/usr/sr c/sys/SERVERS11  amd64 --- sm5018a> cat SERVERS11 include         GENERIC ident           SERVERS options         ROUTETABLES=16 options         VIMAGE options         TCP_RFC7413