Volodymyr Kostyrko
2012-Mar-21 09:44 UTC
mutex problem: adding address to pf table results in uma_zallog_arg: zone "pfrktable"
Hi all. I have troubles running one server and recompiled kernel with DDB/WITNESS. I'll post some LOR's I can find. This one is highly reproducible as this happens each time sshguard adds address to the table. Mar 21 09:26:07 kohrah sshguard[5196]: Blocking 222.246.132.247:4 for >945secs: 40 danger in 4 attacks over 45 seconds (all: 80d in 2 abuses over 1079s). Mar 21 09:26:07 kohrah kernel: uma_zalloc_arg: zone "pfrktable" with the following non-sleepable locks held: Mar 21 09:26:07 kohrah kernel: exclusive sleep mutex pf task mtx (pf task mtx) r = 0 (0xffffffff81104bf0) locked @ /usr/src/sys/modules/pf/../../contrib/pf/net/pf_ioctl.c:1589 Mar 21 09:26:07 kohrah kernel: KDB: stack backtrace: Mar 21 09:26:07 kohrah kernel: db_trace_self_wrapper() at db_trace_self_wrapper+0x2b Mar 21 09:26:07 kohrah kernel: kdb_backtrace() at kdb_backtrace+0x39 Mar 21 09:26:07 kohrah kernel: witness_warn() at witness_warn+0x434 Mar 21 09:26:07 kohrah kernel: uma_zalloc_arg() at uma_zalloc_arg+0x38 Mar 21 09:26:07 kohrah kernel: pfr_create_ktable() at pfr_create_ktable+0x33 Mar 21 09:26:07 kohrah kernel: pfr_add_addrs() at pfr_add_addrs+0x10b Mar 21 09:26:07 kohrah kernel: pfioctl() at pfioctl+0x34ad Mar 21 09:26:07 kohrah kernel: devfs_ioctl_f() at devfs_ioctl_f+0xf2 Mar 21 09:26:07 kohrah kernel: kern_ioctl() at kern_ioctl+0x1aa Mar 21 09:26:07 kohrah kernel: sys_ioctl() at sys_ioctl+0x146 Mar 21 09:26:07 kohrah kernel: amd64_syscall() at amd64_syscall+0x211 Mar 21 09:26:07 kohrah kernel: Xfast_syscall() at Xfast_syscall+0xfb Mar 21 09:26:07 kohrah kernel: --- syscall (54, FreeBSD ELF64, sys_ioctl), rip = 0x800d9c82c, rsp = 0x7fffffffcd58, rbp = 0x7fffffffd1e0 --- Mar 21 09:26:07 kohrah kernel: uma_zalloc_arg: zone "pfrkentry" with the following non-sleepable locks held: Mar 21 09:26:07 kohrah kernel: exclusive sleep mutex pf task mtx (pf task mtx) r = 0 (0xffffffff81104bf0) locked @ /usr/src/sys/modules/pf/../../contrib/pf/net/pf_table.c:75 Mar 21 09:26:07 kohrah kernel: KDB: stack backtrace: Mar 21 09:26:07 kohrah kernel: db_trace_self_wrapper() at db_trace_self_wrapper+0x2b Mar 21 09:26:07 kohrah kernel: kdb_backtrace() at kdb_backtrace+0x39 Mar 21 09:26:07 kohrah kernel: witness_warn() at witness_warn+0x434 Mar 21 09:26:07 kohrah kernel: uma_zalloc_arg() at uma_zalloc_arg+0x38 Mar 21 09:26:07 kohrah kernel: pfr_add_addrs() at pfr_add_addrs+0x37c Mar 21 09:26:07 kohrah kernel: pfioctl() at pfioctl+0x34ad Mar 21 09:26:07 kohrah kernel: devfs_ioctl_f() at devfs_ioctl_f+0xf2 Mar 21 09:26:07 kohrah kernel: kern_ioctl() at kern_ioctl+0x1aa Mar 21 09:26:07 kohrah kernel: sys_ioctl() at sys_ioctl+0x146 Mar 21 09:26:07 kohrah kernel: amd64_syscall() at amd64_syscall+0x211 Mar 21 09:26:07 kohrah kernel: Xfast_syscall() at Xfast_syscall+0xfb Mar 21 09:26:07 kohrah kernel: --- syscall (54, FreeBSD ELF64, sys_ioctl), rip = 0x800d9c82c, rsp = 0x7fffffffcd58, rbp = 0x7fffffffd1e0 --- Sample config: Install security/sshguard-pf. == /etc/pf.conf table sshguard persist = == /etc/syslog.conf auth.info;authpriv.info |exec /usr/local/sbin/sshguard = Try to ssh to the box typing garbage as password, after 4 fails client address is temporarily banned and pushed to the table. -- Sphinx of black quartz judge my vow.
Volodymyr Kostyrko
2012-Mar-21 09:48 UTC
mutex problem: adding address to pf table results in uma_zallog_arg: zone "pfrktable"
Volodymyr Kostyrko wrote:> Hi all. I have troubles running one server and recompiled kernel with > DDB/WITNESS. I'll post some LOR's I can find.Sorry, forgot to describe machine: FreeBSD kohrah.xim.bz 9.0-RELEASE FreeBSD 9.0-RELEASE #0 r229375: Tue Mar 20 17:48:58 EET 2012 arcade@kohrah.xim.bz:/usr/obj/usr/src/sys/MINIMAL amd64 -- Sphinx of black quartz judge my vow.