[Bug 297549] panic: zfs zfs_btree_remove_idx / bt_shift_leaf

[email protected]
Newsgroups gmane.os.freebsd.bugs
Message-ID <[email protected]/bugzilla/>
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297549

            Bug ID: 297549
           Summary: panic: zfs zfs_btree_remove_idx / bt_shift_leaf
           Product: Base System
           Version: 15.1-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: [email protected]
          Reporter: [email protected]

Under load (chromium poudriere build) my system panics in zfs. I recently
upgraded from 15.0 to 15.1 and am currently running 15.1-RELEASE-p2. The
machine in question would have no issues with heavy builds in the past.

/var/log/messages reports:

Aug 15 12:12:23 kato kernel: [55936] Fatal trap 9: general protection fault
while in kernel mode
Aug 15 12:12:23 kato kernel: [55936] cpuid = 0; apic id = 00
Aug 15 12:12:23 kato kernel: [55936] instruction pointer        =
0x20:0xffffffff810949cf
Aug 15 12:12:23 kato kernel: [55936] stack pointer              =
0:0xfffffe00fa4d2970
Aug 15 12:12:23 kato kernel: [55936] frame pointer              =
0:0xfffffe00fa4d2970
Aug 15 12:12:23 kato kernel: [55936] code segment               = base 0x0,
limit 0xfffff, type 0x1b
Aug 15 12:12:23 kato kernel: [55936]                    = DPL 0, pres 1, long
1, def32 0, gran 1
Aug 15 12:12:23 kato kernel: [55936] processor eflags   = interrupt enabled,
resume, IOPL = 0
Aug 15 12:12:23 kato kernel: [55936] current process            = 0
(z_wr_iss_1)
Aug 15 12:12:23 kato kernel: [55936] rdi: fffff8000fade3a0 rsi:
fffff8000fade398 rdx: 00000000000001c8
Aug 15 12:12:23 kato kernel: [55936] rcx: 0000000000000028  r8:
0000000000000008  r9: 000000000000002f
Aug 15 12:12:23 kato kernel: [55936] rax: fffff8000fade268 rbx:
fffff80003c37468 rbp: fffffe00fa4d2970
Aug 15 12:12:23 kato kernel: [55936] r10: 0000000000000000 r11:
00000000002ba780 r12: 00000000000000fe
Aug 15 12:12:23 kato kernel: [55936] r13: 0000000000000039 r14:
0000000000000008 r15: fffff8000fade000
Aug 15 12:12:23 kato kernel: [55936] trap number                = 9
Aug 15 12:12:23 kato kernel: [55936] panic: general protection fault
Aug 15 12:12:23 kato kernel: [55936] cpuid = 0
Aug 15 12:12:23 kato kernel: [55936] time = 1786792118
Aug 15 12:12:23 kato kernel: [55936] KDB: stack backtrace:
Aug 15 12:12:23 kato kernel: [55936] #0 0xffffffff80bd69cd at
kdb_backtrace+0x5d
Aug 15 12:12:23 kato kernel: [55936] #1 0xffffffff80b87526 at vpanic+0x136
Aug 15 12:12:23 kato kernel: [55936] #2 0xffffffff80b873e3 at panic+0x43
Aug 15 12:12:23 kato kernel: [55936] #3 0xffffffff81098b88 at trap_fatal+0x68
Aug 15 12:12:23 kato kernel: [55936] #4 0xffffffff8106f4b8 at calltrap+0x8
Aug 15 12:12:23 kato kernel: [55936] #5 0xffffffff82653183 at
zfs_btree_remove_idx+0x1c3
Aug 15 12:12:23 kato kernel: [55936] #6 0xffffffff82653ce6 at
zfs_btree_remove+0x36
Aug 15 12:12:23 kato kernel: [55936] #7 0xffffffff826d946e at
zfs_range_tree_remove_impl+0x31e
Aug 15 12:12:23 kato kernel: [55936] #8 0xffffffff826d098c at
metaslab_alloc_dva_range+0xf9c
Aug 15 12:12:23 kato kernel: [55936] #9 0xffffffff826d1f93 at
metaslab_alloc_range+0x123
Aug 15 12:12:23 kato kernel: [55936] #10 0xffffffff826d1e5b at
metaslab_alloc+0x4b
Aug 15 12:12:23 kato kernel: [55936] #11 0xffffffff827de626 at
zio_dva_allocate+0xe6
Aug 15 12:12:23 kato kernel: [55936] #12 0xffffffff827d9bc8 at zio_execute+0x38
Aug 15 12:12:23 kato kernel: [55936] #13 0xffffffff80bed4c2 at
taskqueue_run_locked+0x182
Aug 15 12:12:23 kato kernel: [55936] #14 0xffffffff80bee692 at
taskqueue_thread_loop+0xc2
Aug 15 12:12:23 kato kernel: [55936] #15 0xffffffff80b3d97b at fork_exit+0x7b
Aug 15 12:12:23 kato kernel: [55936] #16 0xffffffff810704de at
fork_trampoline+0xe
Aug 15 12:12:23 kato kernel: [55936] Uptime: 15h32m16s

kgdb ba reports:
(kgdb) ba
#0  __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57
#1  doadump (textdump=<optimized out>) at /usr/src/sys/kern/kern_shutdown.c:399
#2  0xffffffff80b870a9 in kern_reboot (howto=260) at
/usr/src/sys/kern/kern_shutdown.c:519
#3  0xffffffff80b875b7 in vpanic (fmt=0xffffffff811f9a2f "%s",
ap=ap@entry=0xfffffe00fa4d2860) at /usr/src/sys/kern/kern_shutdown.c:974
#4  0xffffffff80b873e3 in panic (fmt=<unavailable>) at
/usr/src/sys/kern/kern_shutdown.c:887
#5  0xffffffff81098b88 in trap_fatal (frame=0xfffffe00fa4d28b0, eva=<optimized
out>) at /usr/src/sys/amd64/amd64/trap.c:1028
#6  <signal handler called>
#7  memmove_erms () at /usr/src/sys/amd64/amd64/support.S:537
#8  0xffffffff82653183 in bmov (src=0xfffff8000fade398,
src@entry=0xfffffe00fa4d29c8, dest=0xfffff8000fade3a0,
dest@entry=0xfffff80003c37468, size=456) at
/usr/src/sys/contrib/openzfs/module/zfs/btree.c:72
#9  bt_shift_leaf (tree=0xfffff80003c37468, node=0xfffff8000fade000, idx=0,
count=57, off=1, dir=BSD_RIGHT) at
/usr/src/sys/contrib/openzfs/module/zfs/btree.c:492
#10 bt_shrink_leaf (tree=0xfffff80003c37468, leaf=0xfffff8000fade000, idx=57,
n=1) at /usr/src/sys/contrib/openzfs/module/zfs/btree.c:543
#11 zfs_btree_remove_idx (tree=tree@entry=0xfffff80003c37468,
where=where@entry=0xfffffe00fa4d29f8) at
/usr/src/sys/contrib/openzfs/module/zfs/btree.c:1713
#12 0xffffffff82653ce6 in zfs_btree_remove (tree=0xfffff80003c37468,
value=<optimized out>) at /usr/src/sys/contrib/openzfs/module/zfs/btree.c:1868
#13 0xffffffff826d946e in zfs_range_tree_remove_impl (rt=0xfffff80003c1f000,
start=start@entry=1145589727232, size=size@entry=4096, do_fill=do_fill@entry=0)
at /usr/src/sys/contrib/openzfs/module/zfs/range_tree.c:549
#14 0xffffffff826d9149 in zfs_range_tree_remove (arg=0xfffff8000fade3a0,
start=18446735277879583640, start@entry=1145589727232, size=456,
size@entry=4096) at /usr/src/sys/contrib/openzfs/module/zfs/range_tree.c:602
#15 0xffffffff826d098c in metaslab_block_alloc (msp=0xfffff80003c37000,
size=4096, max_size=4096, actual_size=0xfffffe00fa4d2b78, txg=<optimized out>)
at /usr/src/sys/contrib/openzfs/module/zfs/metaslab.c:4877
#16 metaslab_group_alloc (mg=0xfffff80001676400, asize=<optimized out>,
max_asize=4096, dva=0xfffff801f2237630, d=0, allocator=0,
actual_asize=0xfffffe00fa4d2b78, zal=<optimized out>, txg=<optimized out>,
try_hard=<optimized out>) at
/usr/src/sys/contrib/openzfs/module/zfs/metaslab.c:5230
#17 metaslab_alloc_dva_range (spa=spa@entry=0xfffffe010333b000,
mc=mc@entry=0xfffff8000316a400, psize=psize@entry=4096, max_psize=4096,
dva=dva@entry=0xfffff801f2237630, d=d@entry=0, hintdva=0x0, txg=4933190,
flags=8, zal=<optimized out>, allocator=0, actual_psize=0x0)
    at /usr/src/sys/contrib/openzfs/module/zfs/metaslab.c:5445
#18 0xffffffff826d1f93 in metaslab_alloc_range
(spa=spa@entry=0xfffffe010333b000, mc=mc@entry=0xfffff8000316a400, psize=4096,
max_psize=4096, bp=0xfffff801f2237630, ndvas=3, txg=4933190, hintbp=0x0,
flags=8, zal=<optimized out>, allocator=0, tag=0xfffffe02e35f4200,
actual_psize=0x0)
    at /usr/src/sys/contrib/openzfs/module/zfs/metaslab.c:6029
#19 0xffffffff826d1e5b in metaslab_alloc (spa=0xfffff8000fade3a0,
spa@entry=0xfffffe010333b000, mc=0xfffff8000fade398,
mc@entry=0xfffff8000316a400, psize=456, bp=0x8, ndvas=263053928, txg=<optimized
out>, hintbp=0x0, flags=8, zal=0xfffffe02e35f44a0, allocator=0,
tag=0xfffffe02e35f4200)
    at /usr/src/sys/contrib/openzfs/module/zfs/metaslab.c:5996
#20 0xffffffff827de626 in zio_dva_allocate (zio=0xfffffe02e35f4200) at
/usr/src/sys/contrib/openzfs/module/zfs/zio.c:4348
#21 0xffffffff827d9bc8 in __zio_execute (zio=<optimized out>) at
/usr/src/sys/contrib/openzfs/module/zfs/zio.c:2485
#22 zio_execute (zio=<optimized out>) at
/usr/src/sys/contrib/openzfs/module/zfs/zio.c:2396
#23 0xffffffff80bed4c2 in taskqueue_run_locked
(queue=queue@entry=0xfffff80003173300) at
/usr/src/sys/kern/subr_taskqueue.c:517
#24 0xffffffff80bee692 in taskqueue_thread_loop
(arg=arg@entry=0xfffff80001891b90) at /usr/src/sys/kern/subr_taskqueue.c:829
#25 0xffffffff80b3d97b in fork_exit (callout=0xffffffff80bee5d0
<taskqueue_thread_loop>, arg=0xfffff80001891b90, frame=0xfffffe00fa4d2f40) at
/usr/src/sys/kern/kern_fork.c:1200
#26 <signal handler called>
#27 0x4d820ff7394d0000 in ?? ()

-- 
You are receiving this mail because:
You are the assignee for the bug.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.