Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 13 May 2024 19:17:26 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 278958] zfs panic: page fault in sync_dnodes_task
Message-ID:  <bug-278958-227@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D278958

            Bug ID: 278958
           Summary: zfs panic: page fault in sync_dnodes_task
           Product: Base System
           Version: 14.0-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: nunziotocci2000@gmail.com

Created attachment 250626
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D250626&action=
=3Dedit
core.txt

Fatal trap 12: page fault while in kernel mode
cpuid =3D 29; apic id =3D 1d
fault virtual address   =3D 0x0
fault code              =3D supervisor write data, page not present
instruction pointer     =3D 0x20:0xffffffff820975a1
stack pointer           =3D 0x28:0xfffffe022b901de0
frame pointer           =3D 0x28:0xfffffe022b901de0
code segment            =3D base 0x0, limit 0xfffff, type 0x1b
                        =3D DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        =3D interrupt enabled, resume, IOPL =3D 0
current process         =3D 6 (dp_sync_taskq_17)
rdi: fffff8000234cf60 rsi: fffff800022f8328 rdx: 0000000000000000
rcx: 0000000000000000  r8: 0000000000000000  r9: fffffe027bbf1a00
rax: 00000000000000e8 rbx: 0000000000000270 rbp: fffffe022b901de0
r10: 0000000000000000 r11: 0000000098ff24fe r12: fffff800022f8328
r13: 0000000000000000 r14: fffff8000234cf40 r15: fffff80aa5726c00
trap number             =3D 12
panic: page fault
cpuid =3D 29
time =3D 1715524597
KDB: stack backtrace:
#0 0xffffffff80b9009d at kdb_backtrace+0x5d
#1 0xffffffff80b431a2 at vpanic+0x132
#2 0xffffffff80b43063 at panic+0x43
#3 0xffffffff8100c85c at trap_fatal+0x40c
#4 0xffffffff8100c8af at trap_pfault+0x4f
#5 0xffffffff80fe3ac8 at calltrap+0x8
#6 0xffffffff82105083 at sync_dnodes_task+0x63
#7 0xffffffff8209addf at taskq_run+0x1f
#8 0xffffffff80ba5992 at taskqueue_run_locked+0x182
#9 0xffffffff80ba6c22 at taskqueue_thread_loop+0xc2
#10 0xffffffff80afdb7f at fork_exit+0x7f
#11 0xffffffff80fe4b2e at fork_trampoline+0xe
Uptime: 4d20h39m45s



kgdb backtrace:

#0  __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57
#1  doadump (textdump=3D<optimized out>) at /usr/src/sys/kern/kern_shutdown=
.c:405
#2  0xffffffff80b42d37 in kern_reboot (howto=3D260)
    at /usr/src/sys/kern/kern_shutdown.c:526
#3  0xffffffff80b4320f in vpanic (fmt=3D0xffffffff81136b3b "%s",
    ap=3Dap@entry=3D0xfffffe022b901c30) at /usr/src/sys/kern/kern_shutdown.=
c:970
#4  0xffffffff80b43063 in panic (fmt=3D<unavailable>)
    at /usr/src/sys/kern/kern_shutdown.c:894
#5  0xffffffff8100c85c in trap_fatal (frame=3D0xfffffe022b901d20, eva=3D0)
    at /usr/src/sys/amd64/amd64/trap.c:952
#6  0xffffffff8100c8af in trap_pfault (frame=3D0xfffffe022b901d20,
    usermode=3Dfalse, signo=3D<optimized out>, ucode=3D<optimized out>)
    at /usr/src/sys/amd64/amd64/trap.c:760
#7  <signal handler called>
#8  0xffffffff820975a1 in list_remove (list=3D0xfffff8000234cf60,
    object=3Dobject@entry=3D0xfffff800022f8328)
    at /usr/src/sys/contrib/openzfs/module/os/freebsd/spl/list.c:127
#9  0xffffffff8216158e in multilist_sublist_remove (
    mls=3Dmls@entry=3D0xfffff8000234cf40, obj=3Dobj@entry=3D0xfffff800022f8=
328)
    at /usr/src/sys/contrib/openzfs/module/zfs/multilist.c:363
#10 0xffffffff82105083 in dmu_objset_sync_dnodes (list=3D0xfffff8000234cf40,
    tx=3D0xfffff80aa5726c00)
    at /usr/src/sys/contrib/openzfs/module/zfs/dmu_objset.c:1557
#11 sync_dnodes_task (arg=3D0xfffff8083ac22e60)
    at /usr/src/sys/contrib/openzfs/module/zfs/dmu_objset.c:1638
#12 0xffffffff8209addf in taskq_run (arg=3D0xfffff8005728f900,
    pending=3D<optimized out>)
    at /usr/src/sys/contrib/openzfs/module/os/freebsd/spl/spl_taskq.c:320
#13 0xffffffff80ba5992 in taskqueue_run_locked (
    queue=3Dqueue@entry=3D0xfffff80002356300)
    at /usr/src/sys/kern/subr_taskqueue.c:512
#14 0xffffffff80ba6c22 in taskqueue_thread_loop (
    arg=3Darg@entry=3D0xfffff80003a91620) at /usr/src/sys/kern/subr_taskque=
ue.c:824
#15 0xffffffff80afdb7f in fork_exit (
    callout=3D0xffffffff80ba6b60 <taskqueue_thread_loop>,
    arg=3D0xfffff80003a91620, frame=3D0xfffffe022b901f40)
    at /usr/src/sys/kern/kern_fork.c:1160
#16 <signal handler called>

See attached for core.txt

This seems to happen intermittently while running a backup, which is perfor=
med
by a remote computer running `zfs send` through SSH.

If there's anything else you'd like to see please let me know. I have a full
vmcore as well if needed (11GB). I am also able to run kgdb to inspect said
vmcore.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-278958-227>