bin/40762: rump_ffs crash

[apb%cequrux.com@localhost]

>Number:         40762
>Category:       bin
>Synopsis:       rump_ffs crash
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Feb 26 17:40:00 +0000 2009
>Originator:     Alan Barrett
>Release:        NetBSD 5.99.7
>Organization:
Not much
>Environment:
System: NetBSD 5.99.7 i386
>Description:
rump_ffs may crash with

    panic: kernel diagnostic assertion "rua->rua_bp == NULL" failed:
                file .../rumpblk.c line 186.

>How-To-Repeat:
I had an FFS file system mounted with "rump_ffs -o log
/dev/rcgd2a /mnt", and I was using rsync to copy many files.

I believe that the file system was clean prior to this operation.  At
least, the file system's recent history befoer this event includes being
fscked, mounted with mount_ffs -o log, used, and unmounted gracefully.

In the middle of the operation, rump_ffs crashed.

I managed to extract the panic message from the core dump.  gdb
shows the following backtrace:

    #0  0xbbac0987 in _lwp_kill () from /usr/lib/libc.so.12
    #1  0xbbac093c in raise () from /usr/lib/libc.so.12
    #2  0xbbac01d6 in abort () from /usr/lib/libc.so.12
    #3  0xbbb17454 in rumpuser_panic () from /usr/lib/librumpuser.so.0
    #4  0xbbb6095c in rumpns_cpu_reboot () from /usr/lib/librump.so.0
    #5  0xbbb4b8e6 in rumpns_panic () from /usr/lib/librump.so.0
    #6  0xbbb3f6bf in __kernassert () from /usr/lib/librump.so.0
    #7  0xbbb9a7d3 in rumpfs_init () from /usr/lib/librumpvfs.so.0
    #8  0xbbb50362 in rumpns_bdev_strategy () from /usr/lib/librump.so.0
    #9  0xbbb85289 in rumpns_spec_strategy () from /usr/lib/librumpvfs.so.0
    #10 0xbbb48630 in rumpns_VOP_STRATEGY () from /usr/lib/librump.so.0
    #11 0xbbbba6e8 in rumpns_ufs_strategy () from /usr/lib/librumpfs_ufs.so.0
    #12 0xbbb4865b in rumpns_VOP_STRATEGY () from /usr/lib/librump.so.0
    #13 0xbbba30e9 in rumpns_bwrite () from /usr/lib/librumpvfs.so.0
    #14 0xbbba319e in rumpns_vn_bwrite () from /usr/lib/librumpvfs.so.0
    #15 0xbbb495a3 in rumpns_VOP_BWRITE () from /usr/lib/librump.so.0
    #16 0xbbba0da6 in rumpns_bawrite () from /usr/lib/librumpvfs.so.0
    #17 0xbbb8bfec in rumpns_wapbl_flush () from /usr/lib/librumpvfs.so.0
    #18 0xbbbd31a6 in rumpns_ffs_sync () from /usr/lib/librumpfs_ffs.so.0
    #19 0xbbb9340c in rumpns_VFS_SYNC () from /usr/lib/librumpvfs.so.0
    #20 0xbbb9b04e in rump_vfs_sync () from /usr/lib/librumpvfs.so.0
    #21 0xbbbb47a2 in p2k_fs_sync () from /usr/lib/libp2k.so.1
    #22 0xbbb0c384 in puffs_dispatch_create () from /usr/lib/libpuffs.so.1
    #23 0xbbb0d295 in puffs__ml_dispatch () from /usr/lib/libpuffs.so.1

>Fix:
        Unknown