kern/105229: panic in sync_fsync

[Yoichi NAKAYAMA]

>Number:         105229
>Category:       kern
>Synopsis:       panic in sync_fsync
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Nov 06 23:50:19 GMT 2006
>Closed-Date:
>Last-Modified:
>Originator:     Yoichi NAKAYAMA
>Release:        current  (Nov 4 2006)
>Organization:
FreeBSD.org
>Environment:
FreeBSD suigei 7.0-CURRENT FreeBSD 7.0-CURRENT #0: Sun Nov  5 02:05:09 JST 2006     root at suigei:/usr/obj/usr/src/sys/GENERIC  i386

>Description:
My machine with Intel CoreDuo processor panic after few days run:
  CPU: Genuine Intel(R) CPU           T2300  @ 1.66GHz (1666.68-MHz 686-class CPU)
    Origin = "GenuineIntel"  Id = 0x6e8  Stepping = 8
    Features=0xbfe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,C
  MOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
    Features2=0xc1a9<SSE3,MON,VMX,EST,TM2,XTPR,<b15>>
    AMD Features=0x100000<NX>
    Cores per package: 2
  real memory  = 1065025536 (1015 MB)
  avail memory = 1028730880 (981 MB)

Trace obtained from /var/crash/vmcore.? follows:

(kgdb) bt
#0  doadump () at pcpu.h:166
#1  0xc06b07d8 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:410
#2  0xc06b0aed in panic (fmt=0xc08f04f3 "from debugger")
    at /usr/src/sys/kern/kern_shutdown.c:566
#3  0xc0476116 in db_panic (addr=-1066602469, have_addr=0, count=-1,
    modif=0xe3c27a14 "") at /usr/src/sys/ddb/db_command.c:433
#4  0xc04760af in db_command (last_cmdp=0xc0a05204, cmd_table=0x0)
    at /usr/src/sys/ddb/db_command.c:401
#5  0xc047616a in db_command_loop () at /usr/src/sys/ddb/db_command.c:453
#6  0xc0477db5 in db_trap (type=3, code=0) at /usr/src/sys/ddb/db_main.c:221
#7  0xc06cf2f4 in kdb_trap (type=3, code=0, tf=0xe3c27ba4)
    at /usr/src/sys/kern/subr_kdb.c:502
#8  0xc08a83a4 in trap (frame=
      {tf_fs = 8, tf_es = -473825240, tf_ds = -1066598360, tf_edi = -1064110166, tf_esi = 1, tf_ebp = -473793564, tf_isp = -473793584, tf_ebx = -473793520, tf_edx = 0, tf_ecx = 2, tf_eax = 18, tf_trapno = 3, tf_err = 0, tf_eip = -1066602469, tf_cs = 32, tf_eflags = 662, tf_esp = -473793532, tf_ss = -1066726753})
    at /usr/src/sys/i386/i386/trap.c:622
#9  0xc089317a in calltrap () at /usr/src/sys/i386/i386/exception.s:138
#10 0x00000008 in ?? ()
#11 0xe3c20028 in ?? ()
#12 0xc06d0028 in msgbuf_getchar (mbp=0xe3c27c10)
    at /usr/src/sys/kern/subr_msgbuf.c:145
---Type <return> to continue, or q <return> to quit---
#13 0xc06b0a9f in panic (fmt=0xc092f7aa "mtx_lock() of spin mutex %s @ %s:%d")
    at /usr/src/sys/kern/kern_shutdown.c:550
#14 0xc06a7dac in _mtx_lock_flags (m=0xc6549ba8, opts=0,
    file=0xc093ac72 "/usr/src/sys/kern/vfs_subr.c", line=2858)
    at /usr/src/sys/kern/kern_mutex.c:281
#15 0xc07112d9 in vfs_msync (mp=0xc3c75a50, flags=2)
    at /usr/src/sys/kern/vfs_subr.c:2858
#16 0xc0711a85 in sync_fsync (ap=0x0) at /usr/src/sys/kern/vfs_subr.c:3092
#17 0xc08b9ede in VOP_FSYNC_APV (vop=0x0, a=0xe3c27cb4) at vnode_if.c:1007
#18 0xc070f6b8 in sync_vnode (bo=0xc3d475c8, td=0xc3924a80) at vnode_if.h:537
#19 0xc070f935 in sched_sync () at /usr/src/sys/kern/vfs_subr.c:1690
#20 0xc069b2a4 in fork_exit (callout=0xc070f740 <sched_sync>, arg=0x0,
    frame=0xe3c27d38) at /usr/src/sys/kern/kern_fork.c:830
#21 0xc08931dc in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:199
(kgdb) 

>How-To-Repeat:
Boot the machine and keep it running.
>Fix:

>Release-Note:
>Audit-Trail:
>Unformatted: