From owner-freebsd-bugs@freebsd.org Wed Jul 12 20:07:20 2017 Return-Path: Delivered-To: freebsd-bugs@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 170DADA26F0 for ; Wed, 12 Jul 2017 20:07:20 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 0532275E9D for ; Wed, 12 Jul 2017 20:07:20 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from bugs.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id v6CK7Jt8068783 for ; Wed, 12 Jul 2017 20:07:19 GMT (envelope-from bugzilla-noreply@freebsd.org) From: bugzilla-noreply@freebsd.org To: freebsd-bugs@FreeBSD.org Subject: [Bug 220691] ZFS instantly panics on boot from degraded volume or after a drive failure Date: Wed, 12 Jul 2017 20:07:20 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: CURRENT X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Many People X-Bugzilla-Who: peter@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: freebsd-bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter Message-ID: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Jul 2017 20:07:20 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D220691 Bug ID: 220691 Summary: ZFS instantly panics on boot from degraded volume or after a drive failure Product: Base System Version: CURRENT Hardware: Any OS: Any Status: New Severity: Affects Many People Priority: --- Component: kern Assignee: freebsd-bugs@FreeBSD.org Reporter: peter@FreeBSD.org r320065: Sun Jun 18 04:22:09 UTC 2017 - works r320900: Wed Jul 12 03:00:15 UTC 2017 - panics Sample of boot failure: <118>Setting hostname: tiny.nyi.freebsd.org. <118>Setting up harvesting: [UMA], [FS_ATIME],SWI,INTERRUPT,NET_NG,NET_ETHER,NET_TUN,MOUSE,KEYBOARD,D <118>Feeding entropy: . Fatal trap 12: page fault while in kernel mode cpuid =3D 1; apic id =3D 01 fault virtual address =3D 0x28 Fatal trap 12: page fault while in kernel mode cpuid =3D 3; apic id =3D 07 fault virtual address =3D 0x28 Fatal trap 12: page fault while in kernel mode cpuid =3D 2; apic id =3D 06 apic id =3D 00 fault virtual address =3D 0x28 =3D DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags =3D interrupt enabled, resume, fault virtual addres= s=20=20=20=20=20=20 =3D 0x28 fault code =3D supervisor read data, page not present instruction pointer =3D 0x20:0xffffffff803aab56 stack pointer =3D 0x28:0xfffffe0239fa3a90 fault code =3D supervisor read data, page not present IOPL =3D 0 current process =3D 0 (zio_write_intr_0) frame pointer =3D 0x28:0xfffffe0239fa3aa0 db> where=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20= =20 Tracing pid 0 tid 100471 td 0xfffff80005452000 vdev_geom_io_done() at vdev_geom_io_done+0x36/frame 0xfffffe0239f9eaa0 zio_vdev_io_done() at zio_vdev_io_done+0x176/frame 0xfffffe0239f9ead0 zio_execute() at zio_execute+0xac/frame 0xfffffe0239f9eb20 taskqueue_run_locked() at taskqueue_run_locked+0x127/frame 0xfffffe0239f9eb= 80 taskqueue_thread_loop() at taskqueue_thread_loop+0xc8/frame 0xfffffe0239f9e= bb0 fork_exit() at fork_exit+0x85/frame 0xfffffe0239f9ebf0 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0239f9ebf0 --- trap 0, rip =3D 0, rsp =3D 0, rbp =3D 0 --- Sample of panic when a volume degrades: root@nope.ysv.freebsd.org:/home/peter # zpool offline zroot mfid5p3 Fatal trap 12: page fault while in kernel mode cpuid =3D 4; apic id =3D 04 Fatal trap 12: page fault while in kernel mode fault virtual address =3D 0x28 Fatal trap 12: page fault while in kernel mode Fatal trap 12: page fault while in kernel mode Fatal trap 12: page fault while in kernel mode cpuid =3D 7; apic id =3D 07 cpuid =3D 1; apic id =3D 01 fault virtual address =3D 0x28 fault code =3D supervisor read data, page not present cpuid =3D 3; cpuid =3D 5; apic id =3D 03 Fatal trap 12: page fault while in kernel mode apic id =3D 05 fault virtual address =3D 0x28 fault virtual address =3D 0x28 fault code =3D supervisor read data, page not present instruction pointer =3D 0x20:0xffffffff803aab56 stack pointer =3D 0x28:0xfffffe085fb3aa90 instruction pointer =3D 0x20:0xffffffff803aab56 fault code =3D supervisor read data, page not present cpuid =3D 6; fault virtual address =3D 0x28 Fatal trap 12: page fault while in kernel mode fault code =3D supervisor read data, page not present instruction pointer =3D 0x20:0xffffffff803aab56 stack pointer =3D 0x28:0xfffffe085fb3fa90 frame pointer =3D 0x28:0xfffffe085fb3aaa0 fault code =3D supervisor read data, page not present cpuid =3D 2; apic id =3D 02 apic id =3D 06 instruction pointer =3D 0x20:0xffffffff803aab56 fault virtual address =3D 0x28 fault code =3D supervisor read data, page not present stack pointer =3D 0x28:0xfffffe085fb30a90 instruction pointer =3D 0x20:0xffffffff803aab56 stack pointer =3D 0x28:0xfffffe085fb35a90 frame pointer =3D 0x28:0xfffffe085fb3faa0 code segment =3D base 0x0, limit 0xfffff, type 0x1b stack pointer =3D 0x28:0xfffffe085fb44a90 frame pointer =3D 0x28:0xfffffe085fb44aa0 code segment =3D base 0x0, limit 0xfffff, type 0x1b =3D DPL 0, pres 1, long 1, def32 0, gran 1 fault virtual address =3D 0x28 =3D DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags =3D interrupt enabled, instruction pointer = =3D 0x20:6 frame pointer =3D 0x28:0xfffffe085fb30aa0 code segment =3D base 0x0, limit 0xfffff, type 0x1b code segment =3D base 0x0, limit 0xfffff, type 0x1b frame pointer =3D 0x28:0xfffffe085fb35aa0 code segment =3D base 0x0, limit 0xfffff, type 0x1b resume, IOPL =3D 0 stack pointer =3D 0x28:0xfffffe085fb26a90 =3D DPL 0, pres 1, long 1, def32 0, gran 1 =3D DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags =3D fault code =3D supervisor read data,= page not frame pointer =3D 0x28:0xfffffe085fb26aa0 instruction pointer =3D 0x20:0xffffffff803aab56 processor eflags =3D interrupt enabled, code segment = =3D base b =3D DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags =3D interrupt enabled, resume, IOPL =3D 0 current process =3D 0 (zio_write_intr_2) [ thread pid 0 tid 100500 ] Stopped at vdev_geom_io_done+0x36: movq 0x28(%rbx),%rsi db> where Tracing pid 0 tid 100500 td 0xfffff8000aae6000 vdev_geom_io_done() at vdev_geom_io_done+0x36/frame 0xfffffe085fb30aa0 zio_vdev_io_done() at zio_vdev_io_done+0x176/frame 0xfffffe085fb30ad0 zio_execute() at zio_execute+0xac/frame 0xfffffe085fb30b20 taskqueue_run_locked() at taskqueue_run_locked+0x127/frame 0xfffffe085fb30b= 80 taskqueue_thread_loop() at taskqueue_thread_loop+0xc8/frame 0xfffffe085fb30= bb0 fork_exit() at fork_exit+0x85/frame 0xfffffe085fb30bf0 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe085fb30bf0 --- trap 0, rip =3D 0, rsp =3D 0, rbp =3D 0 --- db>=20 All cores trapped concurrently. zio in the vdev_geom_io_done() function is null. --=20 You are receiving this mail because: You are the assignee for the bug.=