i386/73484: Kernel panic when doing `ls` from the client side (running Solaris 8) on an NFS exported ntfs file system in 4.10

[Alex Feinberg]

>Number:         73484
>Category:       i386
>Synopsis:       Kernel panic when doing `ls` from the client side (running Solaris 8) on an NFS exported ntfs file system in 4.10
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-i386
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Nov 03 17:50:27 GMT 2004
>Closed-Date:
>Last-Modified:
>Originator:     Alex Feinberg
>Release:        4.10-STABLE
>Organization:
>Environment:
orion# uname -a
FreeBSD orion.intranet 4.10-STABLE FreeBSD 4.10-STABLE #0: Wed Nov  3 00:31:48 PST 2004     alex at orion.intranet:/usr/src/sys/compile/ORION  i386
>Description:
Nov  3 09:36:24 orion /kernel: 
Nov  3 09:36:24 orion /kernel: 
Nov  3 09:36:24 orion /kernel: Fatal trap 12: page fault while in kernel mode
Nov  3 09:36:24 orion /kernel: fault virtual address    = 0x4
Nov  3 09:36:24 orion /kernel: fault code               = supervisor read, page 
not present
Nov  3 09:36:24 orion /kernel: instruction pointer      = 0x8:0xc0249e5f
Nov  3 09:36:24 orion /kernel: stack pointer            = 0x10:0xe419db08
Nov  3 09:36:24 orion /kernel: frame pointer            = 0x10:0xe419db1c
Nov  3 09:36:24 orion /kernel: code segment             = base 0x0, limit 0xffff
f, type 0x1b
Nov  3 09:36:24 orion /kernel: = DPL 0, pres 1, def32 1, gran 1
Nov  3 09:36:24 orion /kernel: processor eflags = interrupt enabled, resume, IOP
L = 0
Nov  3 09:36:24 orion /kernel: current process          = 90 (nfsd)
Nov  3 09:36:24 orion /kernel: interrupt mask           = none
Nov  3 09:36:24 orion /kernel: trap number              = 12
Nov  3 09:36:24 orion /kernel: panic: page fault
Nov  3 09:36:24 orion /kernel: 
Nov  3 09:36:24 orion /kernel: syncing disks... 

>How-To-Repeat:
Export a file system (haven't had time to test whether this is NTFS specific, as both FFS, NTFS and FAT file systems are exported) from a FreeBSD 4.10 machine (freshly after a build world) to a Solaris 8 machine (SunOS blackhole 5.8 Generic_108528-23 sun4m sparc SUNW,SPARCstation-20). Attempt to do ls on the directory -- kernel panic occurs. The kernel panic repeated itself next time, so I had to do a forceful unmount on the Solaris side.
>Fix:
      
>Release-Note:
>Audit-Trail:
>Unformatted: