From owner-svn-src-user@freebsd.org Tue Jul 21 13:25:58 2015
Return-Path: <owner-svn-src-user@freebsd.org>
Delivered-To: svn-src-user@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
[IPv6:2001:1900:2254:206a::19:1])
by mailman.ysv.freebsd.org (Postfix) with ESMTP id 224C79A7F39
for <svn-src-user@mailman.ysv.freebsd.org>;
Tue, 21 Jul 2015 13:25:58 +0000 (UTC) (envelope-from pho@FreeBSD.org)
Received: from repo.freebsd.org (repo.freebsd.org
[IPv6:2001:1900:2254:2068::e6a:0])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(Client did not present a certificate)
by mx1.freebsd.org (Postfix) with ESMTPS id 12BB31D57;
Tue, 21 Jul 2015 13:25:58 +0000 (UTC) (envelope-from pho@FreeBSD.org)
Received: from repo.freebsd.org ([127.0.1.70])
by repo.freebsd.org (8.14.9/8.14.9) with ESMTP id t6LDPvfH065456;
Tue, 21 Jul 2015 13:25:57 GMT (envelope-from pho@FreeBSD.org)
Received: (from pho@localhost)
by repo.freebsd.org (8.14.9/8.14.9/Submit) id t6LDPvOb065454;
Tue, 21 Jul 2015 13:25:57 GMT (envelope-from pho@FreeBSD.org)
Message-Id: <201507211325.t6LDPvOb065454@repo.freebsd.org>
X-Authentication-Warning: repo.freebsd.org: pho set sender to pho@FreeBSD.org
using -f
From: Peter Holm <pho@FreeBSD.org>
Date: Tue, 21 Jul 2015 13:25:57 +0000 (UTC)
To: src-committers@freebsd.org, svn-src-user@freebsd.org
Subject: svn commit: r285747 - user/pho/stress2/misc
X-SVN-Group: user
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-BeenThere: svn-src-user@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: "SVN commit messages for the experimental " user"
src tree" <svn-src-user.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/svn-src-user>,
<mailto:svn-src-user-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/svn-src-user/>
List-Post: <mailto:svn-src-user@freebsd.org>
List-Help: <mailto:svn-src-user-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/svn-src-user>,
<mailto:svn-src-user-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 21 Jul 2015 13:25:58 -0000
Author: pho
Date: Tue Jul 21 13:25:56 2015
New Revision: 285747
URL: https://svnweb.freebsd.org/changeset/base/285747
Log:
Added finding to test scenario, marked it as no run.
Sponsored by: EMC / Isilon storage division
Modified:
user/pho/stress2/misc/all.sh
user/pho/stress2/misc/suj3.sh
Modified: user/pho/stress2/misc/all.sh
==============================================================================
--- user/pho/stress2/misc/all.sh Tue Jul 21 12:53:47 2015 (r285746)
+++ user/pho/stress2/misc/all.sh Tue Jul 21 13:25:56 2015 (r285747)
@@ -39,6 +39,9 @@
# panic: 43 vncache entries remaining 20111220
# backingstore3.sh
# g_vfs_done():md6a[WRITE(offset=...)]error = 28 20111230
+# core5.sh May slow down if vnode cache is full 20150714
+# crossmp4.sh Known nullfs issue 20150523
+# crossmp6.sh Known lockd issue 20150625
# dfull.sh umount stuck in "mount drain" 20111227
# ext2fs.sh Deadlock 20120510
# ext2fs2.sh panic 20140716
@@ -49,11 +52,19 @@
# gjournal.sh kmem_malloc(131072): kmem_map too small 20120626
# gjournal2.sh
# gjournal3.sh panic: Journal overflow 20130729
+# lockf5.sh Page fault 20150622
+# md2.sh panic: ufs_dirbad: /mnt: bad dir ino ...: mangled entry 20150227
+# maxproc.sh WiP 20150329
# memguard.sh Waiting for fix commit
# memguard2.sh Waiting for fix commit
# memguard3.sh Waiting for fix commit
+# mkfifo.sh Page fault in softdep_count_dependencies+0x27 seen 20150524
# mmap18.sh panic: vm_fault_copy_entry: main object missing page 20141015
-# mmap21.sh panic: vm_reserv_populate: reserv is already promoted 20141122
+# mmap21.sh rangelock issue? 20150326
+# mmap23.sh Waiting commit
+# mmap24.sh Waiting commit
+# mmap25.sh Waiting commit
+# mmap26.sh Waiting commit
# msdos5.sh Panic: Freeing unused sector ... 20141118
# newfs.sh Memory modified after free. ... used by inodedep 20111217
# newfs2.sh umount stuck in ufs 20111226
@@ -76,13 +87,14 @@
# snap6.sh panic: softdep_deallocate_dependencies: unrecovered ... 20130630
# snap8.sh panic: softdep_deallocate_dependencies: unrecovered ... 20120630
# snap9.sh panic: softdep_deallocate_dependencies: unrecovered ... 20150217
+# suj3.sh panic: Memory modified after free 20150721
# suj9.sh page fault in softdep_count_dependencies+0x27 20141116
# suj11.sh panic: ufsdirhash_newblk: bad offset 20120118
# suj13.sh general protection fault in bufdaemon 20141130
# suj18.sh panic: Bad tailq NEXT(0xc1e2a6088->tqh_last_s) != NULL 20120213
# suj30.sh panic: flush_pagedep_deps: MKDIR_PARENT 20121020
# suj34.sh Various hangs and panics 20131210
-# trim4.sh Page fault in softdep_count_dependencies+0x27 20140608
+# trim4.sh Page fault in softdep_count_dependencies+0x27 20140608
# umountf3.sh KDB: enter: watchdog timeout 20111217
# umountf7.sh panic: handle_written_inodeblock: live inodedep ... 20131129
# unionfs.sh insmntque: non-locked vp: xx is not exclusive locked... 20130909
@@ -95,7 +107,8 @@
# newfs3.sh OK, but runs for a very long time
# mmap10.sh OK, but runs for a long time
# mmap11.sh OK, but runs for a very long time
-# mmap15.sh Rung for a very long time
+# mmap15.sh Runs for a very long time
+# mmap22.sh Runs for a very long time
# statfs.sh Not very interesting
# syscall.sh OK, but runs for a very long time
# syscall2.sh OK, but runs for a very long time
@@ -206,9 +219,10 @@ while true; do
start=`date '+%s'`
./$i 2>&1 | tee $alloutput
grep -qw FAIL $alloutput &&
- echo "`date '+%Y%m%d %T'` $i" >> $allfaillog
+ echo "`date '+%Y%m%d %T'` $i" >> $allfaillog &&
+ logger "stress2 test $i failed"
rm -f $alloutput
- [ $((`date '+%s'` - $start)) -gt 1830 ] &&
+ [ $((`date '+%s'` - $start)) -gt 1900 ] &&
printf "*** Excessive run time: %s %d min\r\n" $i, \
$(((`date '+%s'` - $start) / 60))> /dev/console
done
Modified: user/pho/stress2/misc/suj3.sh
==============================================================================
--- user/pho/stress2/misc/suj3.sh Tue Jul 21 12:53:47 2015 (r285746)
+++ user/pho/stress2/misc/suj3.sh Tue Jul 21 13:25:56 2015 (r285747)
@@ -32,6 +32,9 @@
# Sector size > 512 test.
+# "panic: Memory modified after free ..." seen.
+# https://people.freebsd.org/~pho/stress/log/suj3-2.txt
+
. ../default.cfg
mount | grep $mntpoint | grep -q /dev/md && umount -f $mntpoint
From owner-svn-src-user@freebsd.org Sat Jul 25 19:30:28 2015
Return-Path: <owner-svn-src-user@freebsd.org>
Delivered-To: svn-src-user@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
[IPv6:2001:1900:2254:206a::19:1])
by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6655D9AA36A
for <svn-src-user@mailman.ysv.freebsd.org>;
Sat, 25 Jul 2015 19:30:28 +0000 (UTC) (envelope-from pho@FreeBSD.org)
Received: from repo.freebsd.org (repo.freebsd.org
[IPv6:2001:1900:2254:2068::e6a:0])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(Client did not present a certificate)
by mx1.freebsd.org (Postfix) with ESMTPS id 557D3E5B;
Sat, 25 Jul 2015 19:30:28 +0000 (UTC) (envelope-from pho@FreeBSD.org)
Received: from repo.freebsd.org ([127.0.1.70])
by repo.freebsd.org (8.14.9/8.14.9) with ESMTP id t6PJUScm095786;
Sat, 25 Jul 2015 19:30:28 GMT (envelope-from pho@FreeBSD.org)
Received: (from pho@localhost)
by repo.freebsd.org (8.14.9/8.14.9/Submit) id t6PJURVY095781;
Sat, 25 Jul 2015 19:30:27 GMT (envelope-from pho@FreeBSD.org)
Message-Id: <201507251930.t6PJURVY095781@repo.freebsd.org>
X-Authentication-Warning: repo.freebsd.org: pho set sender to pho@FreeBSD.org
using -f
From: Peter Holm <pho@FreeBSD.org>
Date: Sat, 25 Jul 2015 19:30:27 +0000 (UTC)
To: src-committers@freebsd.org, svn-src-user@freebsd.org
Subject: svn commit: r285880 - user/pho/stress2/misc
X-SVN-Group: user
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-BeenThere: svn-src-user@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: "SVN commit messages for the experimental " user"
src tree" <svn-src-user.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/svn-src-user>,
<mailto:svn-src-user-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/svn-src-user/>
List-Post: <mailto:svn-src-user@freebsd.org>
List-Help: <mailto:svn-src-user-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/svn-src-user>,
<mailto:svn-src-user-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 25 Jul 2015 19:30:28 -0000
Author: pho
Date: Sat Jul 25 19:30:26 2015
New Revision: 285880
URL: https://svnweb.freebsd.org/changeset/base/285880
Log:
Added regression tests for r285878.
Sponsored by: EMC / Isilon storage division
Added:
user/pho/stress2/misc/mmap23.sh (contents, props changed)
user/pho/stress2/misc/mmap24.sh (contents, props changed)
user/pho/stress2/misc/mmap25.sh (contents, props changed)
user/pho/stress2/misc/mmap26.sh (contents, props changed)
Added: user/pho/stress2/misc/mmap23.sh
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ user/pho/stress2/misc/mmap23.sh Sat Jul 25 19:30:26 2015 (r285880)
@@ -0,0 +1,111 @@
+#!/bin/sh
+
+#
+# Copyright (c) 2015 EMC Corp.
+# All rights reserved.
+#
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions
+# are met:
+# 1. Redistributions of source code must retain the above copyright
+# notice, this list of conditions and the following disclaimer.
+# 2. Redistributions in binary form must reproduce the above copyright
+# notice, this list of conditions and the following disclaimer in the
+# documentation and/or other materials provided with the distribution.
+#
+# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+# SUCH DAMAGE.
+#
+# $FreeBSD$
+#
+
+# "panic: vm_object_unwire: missing page" seen.
+# https://people.freebsd.org/~pho/stress/log/mmap23.txt
+# Test scenario by kib@.
+# Fixed by r285878.
+
+. ../default.cfg
+
+dir=/tmp
+odir=`pwd`
+cd $dir
+sed '1,/^EOF/d' < $odir/$0 > $dir/mmap23.c
+mycc -o mmap23 -Wall -Wextra mmap23.c || exit 1
+rm -f mmap23.c
+cd $odir
+
+cp /tmp/mmap23 /tmp/mmap23.inputfile
+daemon sh -c '(cd ../testcases/swap; ./swap -t 1m -i 2)' > \
+ /dev/null 2>&1
+
+/tmp/mmap23 /tmp/mmap23.inputfile &
+sleep .2
+dd if=/dev/zero of=/tmp/mmap23.inputfile bs=1k count=1 2>&1 | \
+ egrep -v "records|transferred"
+
+while ps auxww | grep -v grep | grep -qw swap; do
+ killall -9 swap 2>/dev/null
+done
+
+rm -f /tmp/mmap23 /tmp/mmap23.inputfile
+exit
+
+EOF
+#include <sys/fcntl.h>
+#include <sys/mman.h>
+#include <sys/param.h>
+#include <sys/stat.h>
+#include <sys/types.h>
+#include <sys/wait.h>
+
+#include <err.h>
+#include <errno.h>
+#include <stdlib.h>
+#include <unistd.h>
+
+const char *file;
+
+void
+test(void)
+{
+ struct stat st;
+ char *p;
+ size_t len;
+ int error, fd;
+
+ if ((fd = open(file, O_RDWR)) == -1)
+ err(1, "open %s", file);
+ if ((error = fstat(fd, &st)) == -1)
+ err(1, "stat(%s)", file);
+ len = round_page(st.st_size);
+ if ((p = mmap(NULL, len, PROT_READ | PROT_WRITE, MAP_SHARED, fd, 0)) == MAP_FAILED)
+ err(1, "mmap");
+ p[arc4random() % len] = 1;
+ if ((error = mlock(p, len)) == -1)
+ err(1, "mlock");
+ sleep(2);
+ if (munmap(p, len) == -1)
+ err(1, "unmap()");
+ close(fd);
+}
+
+int
+main(int argc, char *argv[])
+{
+ if (argc != 2)
+ errx(1, "Usage: %s <file>", argv[0]);
+ file = argv[1];
+
+ test();
+
+ return (0);
+}
Added: user/pho/stress2/misc/mmap24.sh
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ user/pho/stress2/misc/mmap24.sh Sat Jul 25 19:30:26 2015 (r285880)
@@ -0,0 +1,100 @@
+#!/bin/sh
+
+#
+# Copyright (c) 2015 EMC Corp.
+# All rights reserved.
+#
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions
+# are met:
+# 1. Redistributions of source code must retain the above copyright
+# notice, this list of conditions and the following disclaimer.
+# 2. Redistributions in binary form must reproduce the above copyright
+# notice, this list of conditions and the following disclaimer in the
+# documentation and/or other materials provided with the distribution.
+#
+# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+# SUCH DAMAGE.
+#
+# $FreeBSD$
+#
+
+# "panic: vm_page_unwire: page 0xc36cafbc's wire count is zero" seen.
+# https://people.freebsd.org/~pho/stress/log/mmap24.txt
+# Test scenario by trasz@.
+# Fixed by r285878.
+
+[ `id -u ` -ne 0 ] && echo "Must be root!" && exit 1
+
+. ../default.cfg
+
+dir=/tmp
+odir=`pwd`
+cd $dir
+sed '1,/^EOF/d' < $odir/$0 > $dir/mmap24.c
+mycc -o mmap24 -Wall -Wextra mmap24.c || exit 1
+rm -f mmap24.c
+cd $odir
+
+[ -c /dev/md$mdstart ] && mdconfig -d -u $mdstart
+mdconfig -a -t swap -s 1g -u $mdstart || exit 1
+bsdlabel -w md$mdstart auto
+newfs $newfs_flags md${mdstart}$part > /dev/null
+mount /dev/md${mdstart}$part $mntpoint
+chmod 777 $mntpoint
+
+cp /tmp/mmap24 $mntpoint
+(cd $mntpoint; ./mmap24) &
+sleep .2
+umount -f $mntpoint
+
+kill $!
+wait
+
+while mount | grep "on $mntpoint " | grep -q /dev/md; do
+ umount $mntpoint || sleep 1
+done
+
+rm -f /tmp/mmap24
+exit
+
+EOF
+#include <sys/fcntl.h>
+#include <sys/mman.h>
+#include <sys/param.h>
+#include <sys/stat.h>
+#include <sys/types.h>
+#include <sys/wait.h>
+
+#include <err.h>
+#include <errno.h>
+#include <stdlib.h>
+#include <unistd.h>
+
+#include <sys/mman.h>
+#include <err.h>
+#include <stdio.h>
+#include <unistd.h>
+
+int
+main(void)
+{
+ int error;
+
+ error = mlockall(MCL_CURRENT | MCL_FUTURE);
+ if (error != 0)
+ err(1, "mlockall");
+
+ for (;;) {
+ sleep(1);
+ }
+}
Added: user/pho/stress2/misc/mmap25.sh
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ user/pho/stress2/misc/mmap25.sh Sat Jul 25 19:30:26 2015 (r285880)
@@ -0,0 +1,122 @@
+#!/bin/sh
+
+#
+# Copyright (c) 2015 EMC Corp.
+# All rights reserved.
+#
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions
+# are met:
+# 1. Redistributions of source code must retain the above copyright
+# notice, this list of conditions and the following disclaimer.
+# 2. Redistributions in binary form must reproduce the above copyright
+# notice, this list of conditions and the following disclaimer in the
+# documentation and/or other materials provided with the distribution.
+#
+# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+# SUCH DAMAGE.
+#
+# $FreeBSD$
+#
+
+# "panic: vm_page_unwire: page 0xc36cce48's wire count is zero" seen.
+# Fixed by r285878.
+
+# Test scenario by kib@:
+# 1. We mapped and mlocked the file.
+# 2. The file is truncated
+# 3. The file is extended again to cover the whole mapped area.
+# 4. The program accesses the mapping past the point of truncation.
+
+. ../default.cfg
+
+dir=/tmp
+odir=`pwd`
+cd $dir
+sed '1,/^EOF/d' < $odir/$0 > $dir/mmap25.c
+mycc -o mmap25 -Wall -Wextra mmap25.c || exit 1
+rm -f mmap25.c
+cd $odir
+
+cp /tmp/mmap25 /tmp/mmap25.inputfile
+daemon sh -c '(cd ../testcases/swap; ./swap -t 1m -i 2)' > \
+ /dev/null 2>&1
+sleep 1
+
+/tmp/mmap25 /tmp/mmap25.inputfile
+
+while ps auxww | grep -v grep | grep -qw swap; do
+ killall -9 swap 2>/dev/null
+done
+rm -f /tmp/mmap25 /tmp/mmap25.inputfile mmap25.core
+exit
+
+EOF
+#include <sys/fcntl.h>
+#include <sys/mman.h>
+#include <sys/param.h>
+#include <sys/stat.h>
+#include <sys/types.h>
+#include <sys/wait.h>
+
+#include <err.h>
+#include <errno.h>
+#include <stdlib.h>
+#include <unistd.h>
+
+const char *file;
+volatile char c;
+
+void
+test(void)
+{
+ struct stat st;
+ char *p;
+ size_t len;
+ off_t pos;
+ int error, fd;
+
+ if ((fd = open(file, O_RDWR)) == -1)
+ err(1, "open %s", file);
+ if ((error = fstat(fd, &st)) == -1)
+ err(1, "stat(%s)", file);
+ len = round_page(st.st_size);
+ pos = len - getpagesize();
+ if ((p = mmap(NULL, len, PROT_READ | PROT_WRITE, MAP_SHARED, fd, 0))
+ == MAP_FAILED)
+ err(1, "mmap");
+ if ((error = mlock(p, len)) == -1)
+ err(1, "mlock");
+
+ if (ftruncate(fd, pos) == -1)
+ err(1, "ftruncate 1");
+ if (ftruncate(fd, len) == -1)
+ err(1, "ftruncate 2");
+
+ c = p[pos]; /* Program received signal SIGSEGV, Segmentation fault. */
+
+ if (munmap(p, len) == -1)
+ err(1, "unmap()");
+ close(fd);
+}
+
+int
+main(int argc, char *argv[])
+{
+ if (argc != 2)
+ errx(1, "Usage: %s <file>", argv[0]);
+ file = argv[1];
+
+ test();
+
+ return (0);
+}
Added: user/pho/stress2/misc/mmap26.sh
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ user/pho/stress2/misc/mmap26.sh Sat Jul 25 19:30:26 2015 (r285880)
@@ -0,0 +1,126 @@
+#!/bin/sh
+
+#
+# Copyright (c) 2015 EMC Corp.
+# All rights reserved.
+#
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions
+# are met:
+# 1. Redistributions of source code must retain the above copyright
+# notice, this list of conditions and the following disclaimer.
+# 2. Redistributions in binary form must reproduce the above copyright
+# notice, this list of conditions and the following disclaimer in the
+# documentation and/or other materials provided with the distribution.
+#
+# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+# SUCH DAMAGE.
+#
+# $FreeBSD$
+#
+
+# "panic: vm_page_unwire: page 0xc36cce48's wire count is zero" seen.
+# https://people.freebsd.org/~pho/stress/log/kostik820.txt
+# Fixed by r285878.
+
+# Variation of mmap25.sh:
+# Access one byte past the end of the file, which is not wrong, but
+# out of specified behaviour.
+
+. ../default.cfg
+
+dir=/tmp
+odir=`pwd`
+cd $dir
+sed '1,/^EOF/d' < $odir/$0 > $dir/mmap26.c
+mycc -o mmap26 -Wall -Wextra mmap26.c || exit 1
+rm -f mmap26.c
+cd $odir
+
+cp /tmp/mmap26 /tmp/mmap26.inputfile
+daemon sh -c '(cd ../testcases/swap; ./swap -t 1m -i 2)' > \
+ /dev/null 2>&1
+sleep 1
+
+(cd /tmp; /tmp/mmap26 /tmp/mmap26.inputfile)
+
+while ps auxww | grep -v grep | grep -qw swap; do
+ killall -9 swap 2>/dev/null
+done
+rm -f /tmp/mmap26 /tmp/mmap26.inputfile /tmp/mmap26.core
+exit
+
+EOF
+#include <sys/fcntl.h>
+#include <sys/mman.h>
+#include <sys/param.h>
+#include <sys/stat.h>
+#include <sys/types.h>
+#include <sys/wait.h>
+
+#include <err.h>
+#include <errno.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <unistd.h>
+
+const char *file;
+volatile char c;
+
+void
+test(void)
+{
+ struct stat st;
+ char *p;
+ size_t len;
+ int error, fd;
+
+ if ((fd = open(file, O_RDWR)) == -1)
+ err(1, "open %s", file);
+ if ((error = fstat(fd, &st)) == -1)
+ err(1, "stat(%s)", file);
+ len = round_page(st.st_size);
+ if ((p = mmap(NULL, len, PROT_READ | PROT_WRITE, MAP_SHARED, fd, 0))
+ == MAP_FAILED)
+ err(1, "mmap");
+ if ((error = mlock(p, len)) == -1)
+ err(1, "mlock");
+
+ if (ftruncate(fd, (off_t)0) == -1)
+ err(1, "ftruncate 1");
+ if (ftruncate(fd, len) == -1)
+ err(1, "ftruncate 2");
+
+ p[len - 1] = 1;
+
+ /* one byte past EOF */
+ if (round_page(p + len) == round_page(p + len - 1)) {
+ fprintf(stderr, "Expect: Segmentation fault (core dumped)\n");
+ c = p[len];
+ }
+
+ if (munmap(p, len) == -1)
+ err(1, "unmap()");
+ close(fd);
+}
+
+int
+main(int argc, char *argv[])
+{
+ if (argc != 2)
+ errx(1, "Usage: %s <file>", argv[0]);
+ file = argv[1];
+
+ test();
+
+ return (0);
+}