kern/45031: Running ATF tests twice in a row causes panic

[gson%gson.org@localhost (Andreas Gustafsson)]

>Number:         45031
>Category:       kern
>Synopsis:       Running ATF tests twice in a row causes panic
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Jun 09 05:55:00 +0000 2011
>Originator:     Andreas Gustafsson
>Release:        NetBSD-current, source date 2011.06.07.05.46.00
>Organization:
>Environment:
System: NetBSD
Architecture: i386
Machine: i386
>Description:

Running the following sequence of commands panics NetBSD-current, at
least on i386:

  cd /usr/tests
  atf-run|atf-report
  atf-run|atf-report

This has been the case at least since late April (tested under qemu)
and is still the case as of CVS date 2011.06.07.05.46.00 (tested on a
physical i386 machine).

Here is a backtrace from late April:

  fs/tmpfs/t_vnode_leak (124/402): 1 test cases
      main: uvm_fault(0xc6fa11a8, 0, 1) -> 0xe
  fatal page fault in supervisor mode
  trap type 6 code 0 eip c7c24382 cs 8 eflags 296 cr2 20 ilevel 0
  kernel: supervisor trap page fault, code=0
  Stopped in pid 13821.1 (mkdir) at       puffs:puffs_vnop_reclaim+0x12:  movl  
  0x20(%eax),%edi
  db{0}> t
  puffs_vnop_reclaim(c71b69ec,6979600,0,1,0,201b,c0c81148,c7268214,0,1000001) 
at puffs:puffs_vnop_reclaim+0x12
  VOP_RECLAIM(c7268214,0,c71b6a2c,c094d91a,c7b8a560,0,c7b8a560,0,3e16c0,0) at 
netbsd:VOP_RECLAIM+0x57
  vclean(c7268214,8,1737,1000,8,0,c71b6a7c,c094cbc9,c7268214,c0d48458) at 
netbsd:vclean+0x1d3
  getcleanvnode(c7979600,0,c71b6abc,0,0,0,c71b6abc,c7720966,19,c73fec38) at 
netbsd:getcleanvnode+0xfe
  getnewvnode(19,c73fec38,c6f9fd00,c71b6aac,c7979600,2,3,c6fa8000,c7979600,2) 
at netbsd:getnewvnode+0x125
  
tmpfs_alloc_vp(c73fec38,c7c101a4,c71b6c3c,0,c71b6a06,c6faec00,c6faec00,0,c726af50,c726af50)
 at tmpfs:tmpfs_alloc_vp+0x76
  
tmpfs_alloc_file(c7c0b4c8,c71b6c3c,c71b6ba4,c71b6c50,0,c7b8a560,0,c71b6c2c,c71b6c50,c6faec00)
 at tmpfs:tmpfs_alloc_file+0x102
  
tmpfs_mkdir(c71b6b60,c71b6b7c,c09410b1,c71b6b60,c786d96c,0,c7b8a560,c0c80fec,c7c0b4c8,c71b6c3c)
 at tmpfs:tmpfs_mkdir+0x20
  
VOP_MKDIR(c7c0b4c8,c71b6c3c,c71b6c50,c71b6ba4,c71b6c50,c71b6c30,c71b6bb0,c71b6bb0,2,1ed)
 at netbsd:VOP_MKDIR+0x69
  
do_sys_mkdir(bfbffece,1ed,0,c087ba06,c7b8a560,bbb02000,c71b6ccc,c084f821,c7b8a560,c71b6cf8)
 at netbsd:do_sys_mkdir+0x162
  
sys_mkdir(c7b8a560,c71b6cf8,c71b6d20,c084f4ca,c7b8a560,c0101000,106,c71b6ce0,c0705725,0)
 at netbsd:sys_mkdir+0x1d05725,0) at netbsd:sys_mkdir+0x1d
  
sy_call(c0d03fe0,c7b8a560,c71b6cf8,c71b6d20,c060600e,0,c7b8a560,c71b6d00,c0606005,bfbffece)
 at netbsd:sy_call+0x26
  syscall(c71b6d48,b3,ab,1f,1f,2,0,bfbfedb8,bfbfee18,1ed) at 
netbsd:syscall+0x180
  db{0}> 

>How-To-Repeat:

See above.

>Fix: