From owner-freebsd-bugs@FreeBSD.ORG Sat Jun 29 19:10:00 2013 Return-Path: Delivered-To: freebsd-bugs@smarthost.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id BBDC115C for ; Sat, 29 Jun 2013 19:10:00 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:1900:2254:206c::16:87]) by mx1.freebsd.org (Postfix) with ESMTP id 9DF181107 for ; Sat, 29 Jun 2013 19:10:00 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.7/8.14.7) with ESMTP id r5TJA0qo013553 for ; Sat, 29 Jun 2013 19:10:00 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.7/8.14.7/Submit) id r5TJA0vX013552; Sat, 29 Jun 2013 19:10:00 GMT (envelope-from gnats) Resent-Date: Sat, 29 Jun 2013 19:10:00 GMT Resent-Message-Id: <201306291910.r5TJA0vX013552@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Peter Zehm Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id CF69312D for ; Sat, 29 Jun 2013 19:06:58 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from oldred.freebsd.org (oldred.freebsd.org [8.8.178.121]) by mx1.freebsd.org (Postfix) with ESMTP id C197B10F6 for ; Sat, 29 Jun 2013 19:06:58 +0000 (UTC) Received: from oldred.freebsd.org ([127.0.1.6]) by oldred.freebsd.org (8.14.5/8.14.7) with ESMTP id r5TJ6v8J026141 for ; Sat, 29 Jun 2013 19:06:57 GMT (envelope-from nobody@oldred.freebsd.org) Received: (from nobody@localhost) by oldred.freebsd.org (8.14.5/8.14.5/Submit) id r5TJ6v2J026082; Sat, 29 Jun 2013 19:06:57 GMT (envelope-from nobody) Message-Id: <201306291906.r5TJ6v2J026082@oldred.freebsd.org> Date: Sat, 29 Jun 2013 19:06:57 GMT From: Peter Zehm To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Subject: kern/180098: [rm_rlock][mac_portacl][panic] recursed on non-recursive rmlock mac_policy_rm X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 29 Jun 2013 19:10:00 -0000 >Number: 180098 >Category: kern >Synopsis: [rm_rlock][mac_portacl][panic] recursed on non-recursive rmlock mac_policy_rm >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sat Jun 29 19:10:00 UTC 2013 >Closed-Date: >Last-Modified: >Originator: Peter Zehm >Release: 10.0-CURRENT r252372 >Organization: >Environment: FreeBSD BlackSun.crush-net.local 10.0-CURRENT FreeBSD 10.0-CURRENT #13 r252372M: Sun Jun 30 01:39:32 JST 2013 root@BlackSun.crush-net.local:/usr/obj/usr/src/sys/GENERIC amd64 >Description: After updating from r251822 to today's r252372 my system panics on boot during the starting of services. With disabling the loading of 'mac_portacl' in the loader promt the system starts up without problems. The problem can then be triggered manually by loading the module 'mac_portacl' and restarting a network related service of choice. (devd, cron does not trigger) Wen triggering the panic by restarting sshd I get the following: ------ panic. rm_lock: recursed on non-recursive rmlock mac_policy_rm @ /usr/src/sys/security/mac/mac_framework.c:198 cpuid = 3 KBD: enter: panic [ thread pid 2178 tid 100814 ] Stopped ad kbd_enter+0x3e: movq $0,kdb_why db> ------- I created a dump and put the bt on http://pastebin.com/pfBZtcdy In my /etc/sysctl.conf I have the following lines regarding mac_portacl: .. security.mac.portacl.port_high=1023 net.inet.ip.portrange.reservedlow=0 net.inet.ip.portrange.reservedhigh=0 security.mac.portacl.suser_exempt=1 security.mac.portacl.rules=uid:53:udp:53,uid:53:tcp:53 .. >From the commit log, for me r252209 looks like it could have something to do with this. I don't know if other MAC-modules are affected, too. >How-To-Repeat: boot with module 'mac_portacl' enabled or kldload mac_portacl && /etc/rc.d/syslogd restart (restarting any network related service is ok) >Fix: >Release-Note: >Audit-Trail: >Unformatted: