7.0R panic in nfs_readdirrpc()

[Hiroki Sato]

Almost the same panic occurred on sparc64, too.  Memory alignment
issue?

----
Tracing pid 14377 tid 100097 td 0xfffff800019aa340
panic() at panic+0x204
trap() at trap+0x4cc
-- memory address not aligned sfar=0xfffff80001229c47 sfsr=0x40029 %o7=0xc045e8d4 --
nfs_readdirplusrpc() at nfs_readdirplusrpc+0x640
nfs_doio() at nfs_doio+0x358
nfs_bioread() at nfs_bioread+0xa78
nfs_readdir() at nfs_readdir+0x19c
VOP_READDIR_APV() at VOP_READDIR_APV+0x58
getdirentries() at getdirentries+0x264
syscall() at syscall+0x314
-- syscall (196, FreeBSD ELF64, getdirentries) %o7=0x41117120 --
userland() at 0x41140a68
user trace: trap %o7=0x41117120
----

Hiroki Sato <hrs at freebsd.org> wrote
  in <20080725.142554.124338824.hrs at allbsd.org>:

hr> This panic seems reproducible when NFS over TCP is used (RELENG_7_0 on
hr> HP rx1600, btw):
hr>
hr> ----
hr> fatal kernel trap (cpu 0):
hr>
hr>     trap vector = 0x1e (Unaligned Reference)
hr>     cr.iip      = 0xe000000004814a60
hr>     cr.ipsr     = 0x1210080a6010 (mfl,ic,i,dt,dfh,rt,cpl=0,it,ri=1,bn)
hr>     cr.isr      = 0xa0400000000 (code=0,vector=0,r,ei=1,ed)
hr>     cr.ifa      = 0xe00000000e745335
hr>     curthread   = 0xe0000000119366c0
hr>         pid = 13638, comm = cvs
hr>
hr> [thread pid 13638 tid 100134 ]
hr> Stopped at      nfs_readdirrpc+0xd11:   [M1] (p17) ld4 r49=[r8],0x4
hr> db> bt
hr> Tracing pid 13638 tid 100134 td 0xe0000000119366c0
hr> nfs_readdirrpc(0xe0000000279db228, 0xa00000001b2d3178, 0xe00000001078fd00, 0xd, 0x10) at nfs_readdirrpc+0xd11
hr> nfs_doio(0xe000000011596f80, 0xa00000000f5eb4a0, 0xe00000001078fd00, 0xe0000000119366c0) at nfs_doio+0x670
hr> nfs_bioread(0xe000000011596f80, 0xa00000001b2d3378, 0x0, 0xe00000001078fd00) at nfs_bioread+0x10a0
hr> nfs_readdir(0xa00000001b2d33c8, 0xe000000011596f80, 0xa00000001b2d3390) at nfs_readdir+0x290
hr> VOP_READDIR_APV(0xe000000004b16120, 0xa00000001b2d33c8, 0xe0000000119366c0, 0xe000000004637390, 0x13ac) at VOP_READDIR_APV+0x1c0
hr> getdirentries(0xe0000000119366c0, 0xa00000001b2d34e8, 0x0, 0xe000000011596f80) at getdirentries+0x410
hr> syscall(0xa00000001b2d3400, 0xc4, 0x2000, 0xe0000000119366c0, 0xe00000001130ed38, 0xe000000004af3140, 0xc4, 0xa00000001b2d34e8) at syscall+0x410
hr> epc_syscall_return() at epc_syscall_return
hr> db>
hr> ----

--
| Hiroki SATO
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-sparc64/attachments/20080725/a13efad9/attachment.pgp