Re: port-alpha/54307 (Lots of jemalloc assertions in latest -current)

[Rin Okuyama <rokuyama.rk%gmail.com@localhost>]

The following reply was made to PR port-alpha/54307; it has been noted by GNATS.

From: Rin Okuyama <rokuyama.rk%gmail.com@localhost>
To: John Klos <john%ziaspace.com@localhost>, gnats-bugs%netbsd.org@localhost
Cc: port-alpha-maintainer%netbsd.org@localhost, gnats-admin%netbsd.org@localhost,
 netbsd-bugs%netbsd.org@localhost
Subject: Re: port-alpha/54307 (Lots of jemalloc assertions in latest -current)
Date: Wed, 14 Aug 2019 11:01:27 +0900

 For alpha, jemalloc seems to work only ifdef JEMALLOC_DEBUG.
 
 If it is defined, everything works fine as far as I can see.
 However, otherwise, /bin/sh dumps core when entering multiuser.
 
 With working libc,
 
 ds10# LD_PRELOAD=/lib/libc.so.12.213.orig sh /etc/rc
 [1]   Segmentation fault (core dumped) LD_PRELOAD=/lib/libc.so.12.213.orig sh /etc/rc
 ds10# gdb sh sh.core
 GNU gdb (GDB) 8.3
 Copyright (C) 2019 Free Software Foundation, Inc.
 License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
 This is free software: you are free to change and redistribute it.
 There is NO WARRANTY, to the extent permitted by law.
 Type "show copying" and "show warranty" for details.
 This GDB was configured as "alpha--netbsd".
 Type "show configuration" for configuration details.
 For bug reporting instructions, please see:
 <http://www.gnu.org/software/gdb/bugs/>.
 Find the GDB manual and other documentation resources online at:
      <http://www.gnu.org/software/gdb/documentation/>.
 
 For help, type "help".
 Type "apropos word" to search for commands related to "word"...
 Reading symbols from sh...
 Reading symbols from /usr/libdata/debug//bin/sh.debug...
 [New process 1]
 Core was generated by `sh'.
 Program terminated with signal SIGSEGV, Segmentation fault.
 #0  bitmap_unset (bit=0, binfo=<optimized out>,
      bitmap=0x3fffdd61b48 <free+984>)
      at /build/src/external/bsd/jemalloc/lib/../include/jemalloc/internal/bitmap.h:345
 345             *gp = g;
 (gdb) bt
 #0  bitmap_unset (bit=0, binfo=<optimized out>,
      bitmap=0x3fffdd61b48 <free+984>)
      at /build/src/external/bsd/jemalloc/lib/../include/jemalloc/internal/bitmap.h:345
 #1  arena_slab_reg_dalloc (ptr=<optimized out>,
      slab_data=0x3fffdd61b48 <free+984>, slab=0x3fffdd61b08 <free+920>)
      at /build/src/external/bsd/jemalloc/lib/../dist/src/arena.c:273
 #2  arena_dalloc_bin_locked_impl (tsdn=0x3fffdec2010, arena=0x3fffd6009c0,
      slab=0x3fffdd61b08 <free+920>, ptr=<optimized out>, junked=<optimized out>)
      at /build/src/external/bsd/jemalloc/lib/../dist/src/arena.c:1543
 #3  0x000003fffdd02ed4 in je_tcache_bin_flush_small (tsd=0x3fffdec2010,
      tcache=<optimized out>, tbin=0x3fffdec2360, binind=16, rem=<optimized out>)
      at /build/src/external/bsd/jemalloc/lib/../dist/src/tcache.c:149
 #4  0x000003fffdd61b08 in tcache_dalloc_small (slow_path=false, binind=0,
      ptr=0x3fffdb0de00, tcache=<optimized out>, tsd=<optimized out>)
      at /build/src/external/bsd/jemalloc/lib/../include/jemalloc/internal/tcache_inlines.h:178
 #5  arena_dalloc (slow_path=false, alloc_ctx=<synthetic pointer>,
      tcache=<optimized out>, ptr=0x3fffdb0de00, tsdn=<optimized out>)
      at /build/src/external/bsd/jemalloc/lib/../include/jemalloc/internal/arena_inlines_b.h:224
 #6  idalloctm (slow_path=false, is_internal=false,
      alloc_ctx=<synthetic pointer>, tcache=<optimized out>, ptr=0x3fffdb0de00,
      tsdn=<optimized out>)
      at /build/src/external/bsd/jemalloc/lib/../include/jemalloc/internal/jemalloc_internal_inlines_c.h:118
 #7  ifree (slow_path=false, tcache=<optimized out>, ptr=0x3fffdb0de00,
      tsd=0x3fffdec2010)
      at /build/src/external/bsd/jemalloc/lib/../dist/src/jemalloc.c:2255
 #8  free (ptr=0x3fffdb0de00)
      at /build/src/external/bsd/jemalloc/lib/../dist/src/jemalloc.c:2426
 #9  0x000000012001c404 in rststackmark (mark=0x1fffff358)
      at /build/src/bin/sh/memalloc.c:198
 #10 0x000000012001ba80 in cmdloop (top=<optimized out>)
      at /build/src/bin/sh/main.c:306
 #11 0x000000012000b548 in dotcmd (argc=<optimized out>, argv=<optimized out>)
      at /build/src/bin/sh/eval.c:1505
 #12 0x000000012000ad10 in evalcommand (cmd=<optimized out>,
      flgs=<optimized out>, backcmd=<optimized out>)
      at /build/src/bin/sh/eval.c:1314
 #13 0x0000000120008654 in evaltree (n=0x3fffdb80030, flags=<optimized out>)
      at /build/src/bin/sh/eval.c:357
 #14 0x000000012001bbd4 in cmdloop (top=<optimized out>)
      at /build/src/bin/sh/main.c:304
 #15 0x0000000120032650 in main (argc=<optimized out>, argv=<optimized out>)
      at /build/src/bin/sh/main.c:246
 (gdb)
 
 I have no ideas at the moment...
 
 On 2019/08/11 3:32, John Klos wrote:
 > In addition, with DIAGNOSTIC:
 > 
 > [ 2754.6460539] panic: kernel diagnostic assertion "l->l_stat == LSSTOP || l->l_stat == LSSUSPENDED" failed: file "/usr/current/src/sys/kern/kern_sleepq.c", line 128
 > [ 2754.6460539] cpu0: Begin traceback...
 > [ 2754.6460539] alpha trace requires known PC =eject=
 > [ 2754.6460539] cpu0: End traceback...
 > [ 2754.6460539] cpu1: shutting down...
 > [ 2754.6460539] dumping to dev 4,1 offset 8388607
 
 This may be a different problem. Please file another PR,
 if you could reproduce this panic.
 
 Thanks,
 rin