panic in /sbin/fdisk

[HAMAJIMA Katsuomi/濱嶋克臣<hamajima@nagoya.ydc.co.jp>]

濱嶋です。

L-Routerにハードディスクを接続して使っていますが、/etc/dailyが走ると必
ずpanicするので調べたら、/sbin/fdiskを実行すると確実にpanicすることが
分かりました。

# /sbin/fdisk
trap: address error (store) in kernel mode
status=0xf803, cause=0x14, epc=0x8013ce9c, vaddr=0xc3770a12
curproc == NULL ksp=0xc410da60
Stopped at      0x8013ce9c:     sw      v0,0(s1)
db> t
8013ce54+48 (8019ac80,b00001f0,0,c3770a12) ra 8013a484 sz 40
8013a144+340 (8019ac80,b00001f0,0,c3770a12) ra 80043774 sz 48
80043648+12c (8019ac80,b00001f0,0,c3770a12) ra 80147b78 sz 32
80147b24+54 (8019ac80,b00001f0,0,c3770a12) ra 801405c8 sz 40
801405a0+28 (8019ac80,b00001f0,0,c3770a12) ra 80152ab8 sz 24
80152a74+44 (8019ac80,b00001f0,0,c3770a12) ra 80153bd0 sz 32
80153b48+88 (8019ac80,b00001f0,0,c3770a12) ra 80151348 sz 40
80151284+c4 (8019ac80,b00001f0,0,c3770a12) ra 8013b714 sz 48
8013b648+cc (8019ac80,b00001f0,0,c3770a12) ra 80126bac sz 40
mips3_KernIntr+84 (c410c000,0,5b88,80181898) ra 8000116c sz 128
cpu_switch+64 (c410c000,0,5b88,80181898) ra 800c67ac sz 24
800c65e0+1cc (c410c000,0,5b88,80181898) ra 800c5fd8 sz 48
800c5e2c+1ac (c410c000,0,5b88,80181898) ra 800bef04 sz 48
800becf0+214 (801371c0,0,5b88,80181898) ra 801378e4 sz 72
8013788c+58 (801371c0,0,5b88,80181898) ra 800ff948 sz 40
800ff8b0+98 (801371c0,0,5b88,80181898) ra 800a6d44 sz 80
800a6cf0+54 (801371c0,0,5b88,80181898) ra 800fb074 sz 24
800fb034+40 (80a10990,c410de78,0,c0006f00) ra 800fa660 sz 48
800fa5b4+ac (80a10990,c410de78,0,c0006f00) ra 800d4038 sz 40
800d3f7c+bc (80a10990,c410de78,0,10000a12) ra 800d3f54 sz 96
800d3ed0+84 (80a10990,c410de78,0,10000a12) ra 8012bd00 sz 56
8012bb30+1d0 (80a10990,c410de78,0,10000a12) ra 801269fc sz 80
mips3_SystemCall+b0 (80a10990,c410de78,0,10000a12) ra 30113a10 sz 0
PC 0x30113a10: not in kernel space
0+30113a10 (80a10990,c410de78,0,10000a12) ra 0 sz 0
User-level: curproc NULL

上の方のアドレスをnmでみてみると
__bs_rm_4+48 (8019ac80,b00001f0,0,c3770a12) ra 8013a484 sz 40
wdc_ata_bio_intr+340 (8019ac80,b00001f0,0,c3770a12) ra 80043774 sz 48
wdcintr+12c (8019ac80,b00001f0,0,c3770a12) ra 80147b78 sz 32
pciide_pci_intr+54 (8019ac80,b00001f0,0,c3770a12) ra 801405c8 sz 40
config_connected_call+28 (8019ac80,b00001f0,0,c3770a12) ra 80152ab8 sz 24
hpcin_intr+44 (8019ac80,b00001f0,0,c3770a12) ra 80153bd0 sz 32
vrgiu_intr+88 (8019ac80,b00001f0,0,c3770a12) ra 80151348 sz 40
vrip_intr+c4 (8019ac80,b00001f0,0,c3770a12) ra 8013b714 sz 48
cpu_intr+cc (8019ac80,b00001f0,0,c3770a12) ra 80126bac sz 40
でした。

dev/ata/ata_wdc.cのwdc_ata_bio_intr()の引数struct wdc_xfer *xferが0な
のが直接的原因のような気がするのですが、ここから先は何を調べたらよいの
か分からずに行き詰まりました。何を調べたら良いのか教えて下さい。