From owner-freebsd-current@FreeBSD.ORG Thu Jan 19 21:24:01 2006 Return-Path: X-Original-To: freebsd-current@freebsd.org Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EC52D16A41F; Thu, 19 Jan 2006 21:24:01 +0000 (GMT) (envelope-from kris@obsecurity.org) Received: from elvis.mu.org (elvis.mu.org [192.203.228.196]) by mx1.FreeBSD.org (Postfix) with ESMTP id 96CBD43D45; Thu, 19 Jan 2006 21:24:01 +0000 (GMT) (envelope-from kris@obsecurity.org) Received: from obsecurity.dyndns.org (elvis.mu.org [192.203.228.196]) by elvis.mu.org (Postfix) with ESMTP id 5D5711A3C30; Thu, 19 Jan 2006 13:24:01 -0800 (PST) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id BDE575154A; Thu, 19 Jan 2006 16:23:57 -0500 (EST) Date: Thu, 19 Jan 2006 16:23:57 -0500 From: Kris Kennaway To: Alan Cox Message-ID: <20060119212357.GA97268@xor.obsecurity.org> References: <20060118070549.GA617@xor.obsecurity.org> <43CEEBD4.3060604@FreeBSD.org> <200601190802.31914.jhb@freebsd.org> <200601191114.27075.jhb@freebsd.org> <20060119203833.GC7599@cs.rice.edu> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="J2SCkAp4GZ/dPZZf" Content-Disposition: inline In-Reply-To: <20060119203833.GC7599@cs.rice.edu> User-Agent: Mutt/1.4.2.1i Cc: alc@freebsd.org, freebsd-current@freebsd.org, Suleiman Souhlal , Kris Kennaway Subject: Re: System call munmap returning with the following locks held: Giant X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Jan 2006 21:24:02 -0000 --J2SCkAp4GZ/dPZZf Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Jan 19, 2006 at 02:38:33PM -0600, Alan Cox wrote: > On Thu, Jan 19, 2006 at 11:14:24AM -0500, John Baldwin wrote: > [snip] > >=20 > > Are you really sure the object's type can change or does the caller of= =20 > > vm_object_deallocate() hold some sort of reference or what not that pre= vents=20 > > the type from changing? > >=20 >=20 > My recollection is that the object does not change type until all of > the references have been drained and it is about to be freed by > vm_object_terminate(). At the point where the type check is being > performed, the caller should hold a reference on the object. Thus, > the type should not be changing. >=20 > That said, an unexpected type change still strikes me as the most > plausible cause. >=20 > Is there a test that easily reproduces this problem? Racing mmap/munmap on NFS with umount -f. I'll send you the code I'm using (from ups@) separately. Kris --J2SCkAp4GZ/dPZZf Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (FreeBSD) iD8DBQFD0ANsWry0BWjoQKURAoJbAJ4xEOcYApEkfHp9wsCcBXfFqO9kMACfZ4LU TvBjH/8KY8mli0shRwX96ww= =kG2G -----END PGP SIGNATURE----- --J2SCkAp4GZ/dPZZf--