From owner-freebsd-hackers@FreeBSD.ORG  Wed Dec 10 15:28:55 2008
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: hackers@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id A9FFF1065676;
	Wed, 10 Dec 2008 15:28:55 +0000 (UTC)
	(envelope-from danny@cs.huji.ac.il)
Received: from kabab.cs.huji.ac.il (kabab.cs.huji.ac.il [132.65.16.84])
	by mx1.freebsd.org (Postfix) with ESMTP id 6821A8FC19;
	Wed, 10 Dec 2008 15:28:55 +0000 (UTC)
	(envelope-from danny@cs.huji.ac.il)
Received: from pampa.cs.huji.ac.il ([132.65.80.32])
	by kabab.cs.huji.ac.il with esmtp
	id 1LAQze-0005kh-92; Wed, 10 Dec 2008 17:28:54 +0200
X-Mailer: exmh version 2.7.2 01/07/2005 with nmh-1.2
To: stable@FreeBSD.org
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Date: Wed, 10 Dec 2008 17:28:54 +0200
From: Danny Braniss <danny@cs.huji.ac.il>
Message-ID: <E1LAQze-0005kh-92@kabab.cs.huji.ac.il>
Cc: hackers@FreeBSD.org
Subject: zfs panics 
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>, 
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 10 Dec 2008 15:28:55 -0000

hi,
	from a solaris or linux client, doing a ls(1) of a nfs exported zfs file,
for example: ls /net/zfs-server/h/.zfs/snapshot,
panics the server. The server is running latest 7.1-prerelease.
	when client is freebsd, it mostly works, but in a few cases
the server just goes into comma.
btw, the server is running vanilla zfs, no tunning, and the server is 
64bit with 8gb of memory and quad core (dell-pe2950)

Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x168
fault code              = supervisor write data, page not present
instruction pointer     = 0x8:0xffffffff804a9175
stack pointer           = 0x10:0xffffffffb71fc550
frame pointer           = 0x10:0xffffffffb71fc560
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 802 (nfsd)
[thread pid 802 tid 100185 ]
Stopped at      _mtx_lock_flags+0x15:   lock cmpxchgq   %rsi,0x50(%rdi)
db> tr
Tracing pid 802 tid 100185 td 0xffffff0004d576e0
_mtx_lock_flags() at _mtx_lock_flags+0x15
vput() at vput+0x45
nfsrv_readdirplus() at nfsrv_readdirplus+0x83e
nfssvc() at nfssvc+0x400
syscall() at syscall+0x1bb
Xfast_syscall() at Xfast_syscall+0xab
--- syscall (155, FreeBSD ELF64, nfssvc), rip = 0x8006885cc, rsp = 
0x7fffffffea2