Re: kern/42093: rump rename race testcase crashes

[Nicolas Joly <njoly%pasteur.fr@localhost>]

On Sat, Sep 19, 2009 at 09:20:01AM +0000, Nicolas Joly wrote:
> 
> I currently do see 2 different symptoms when running it:

I just found a third one when run with MALLOC_OPTIONS=J ...

> 1) 
> njoly@lanfeust [rump/ffs]> ./ffs_rename 
> panic: rumpuser fatal failure 11 (Resource deadlock avoided)
[...]
> 2)
> njoly@lanfeust [rump/ffs]> ./ffs_rename
> zsh: segmentation fault (core dumped)  ./ffs_rename

3)
njoly@lanfeust [rump/ffs]> MALLOC_OPTIONS=J ./ffs_rename
zsh: segmentation fault (core dumped)  MALLOC_OPTIONS=J ./ffs_rename
njoly@petaure [rump/ffs]> gdb ffs_rename ffs_rename.core
GNU gdb 6.5
[...]
Core was generated by `ffs_rename'.
Program terminated with signal 11, Segmentation fault.
#0  0x00007f7ffdc17499 in wapbl_ufs_rename (v=<value optimized out>)
    at 
/local/src/NetBSD/src/sys/rump/fs/lib/libffs/../../../../ufs/ufs/ufs_wapbl.c:405
405             DIP_ASSIGN(ip, nlink, ip->i_nlink);
(gdb) bt
#0  0x00007f7ffdc17499 in wapbl_ufs_rename (v=<value optimized out>)
    at 
/local/src/NetBSD/src/sys/rump/fs/lib/libffs/../../../../ufs/ufs/ufs_wapbl.c:405
#1  0x00007f7ffdc14403 in ufs_rename (v=<value optimized out>)
    at 
/local/src/NetBSD/src/sys/rump/fs/lib/libffs/../../../../ufs/ufs/ufs_vnops.c:976
#2  0x00007f7ffd5390d4 in VOP_RENAME (fdvp=0x7f7ffc6ad400, fvp=0x7f7ffb7ff904, 
    fcnp=<value optimized out>, tdvp=0x0, tvp=0x7f7ffb2000a8, 
    tcnp=0x7f7ffb20f070)
    at /local/src/NetBSD/src/lib/librump/../../sys/rump/../kern/vnode_if.c:998
#3  0x00007f7ffda25ef6 in do_sys_rename (from=<value optimized out>, 
    to=0x4011ba "/mnt/rename2.test", seg=UIO_USERSPACE, retain=0)
    at 
/local/src/NetBSD/src/lib/librumpvfs/../../sys/rump/../kern/vfs_syscalls.c:3395
#4  0x00007f7ffd552af4 in rump_sys_rename (from=<value optimized out>, 
    to=<value optimized out>)
    at 
/local/src/NetBSD/src/lib/librump/../../sys/rump/librump/rumpkern/rump_syscalls.c:878
#5  0x0000000000400e86 in func2 (arg=0x0) 

(gdb) p ip
$7 = (struct inode *) 0x7f7ffb216100
(gdb) p ip->i_ump
$8 = (struct ufsmount *) 0x5a5a5a5a5a5a5a5a
(gdb) p ip->i_ump->um_fstype
Cannot access memory at address 0x5a5a5a5a5a5a5a72

-- 
Nicolas Joly

Biological Software and Databanks.
Institut Pasteur, Paris.