[Bug 297062] running "zpool import" with geom_zero loaded leads to kernel panic, 15.1-RELEASE-p1

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D297062

Alan Somers <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected],
                   |                            |[email protected]

--- Comment #1 from Alan Somers <[email protected]> ---
It's not just ZFS.  I just reproduced a panic with a similar stack trace on
16.0-CURRENT by loading gzero and simply trying to read from it with dd like
this: `sudo dd if=3D/dev/gzero of=3D/dev/null bs=3D64k count=3D4`

panic: uiomove_fromphys: uio 0xfffffe00d84d6b70 iovcnt underflow

#0  __curthread ()
    at
/usr/home/somers/src/freebsd.org/src/main/sys/amd64/include/pcpu_aux.h:57
#1  doadump (textdump=3Dtextdump@entry=3D0)
    at /usr/home/somers/src/freebsd.org/src/main/sys/kern/kern_shutdown.c:3=
99
#2  0xffffffff804c671a in db_dump (dummy=3D<optimized out>,
    dummy2=3D<optimized out>, dummy3=3D<optimized out>, dummy4=3D<optimized=
 out>)
    at /usr/home/somers/src/freebsd.org/src/main/sys/ddb/db_command.c:596
#3  0xffffffff804c65ca in db_command (last_cmdp=3D<optimized out>,
    cmd_table=3D<optimized out>, dopager=3Dtrue)
    at /usr/home/somers/src/freebsd.org/src/main/sys/ddb/db_command.c:508
#4  0xffffffff804c61ed in db_command_loop ()
    at /usr/home/somers/src/freebsd.org/src/main/sys/ddb/db_command.c:555
#5  0xffffffff804c9e20 in db_trap (type=3D<optimized out>, code=3D<optimize=
d out>)
    at /usr/home/somers/src/freebsd.org/src/main/sys/ddb/db_main.c:267
#6  0xffffffff80c63e4f in kdb_trap (type=3Dtype@entry=3D3, code=3Dcode@entr=
y=3D0,
    tf=3Dtf@entry=3D0xfffffe00d84d68a0)
    at /usr/home/somers/src/freebsd.org/src/main/sys/kern/subr_kdb.c:790
#7  0xffffffff8119a3c8 in trap (frame=3D<optimized out>)
    at /usr/home/somers/src/freebsd.org/src/main/sys/amd64/amd64/trap.c:697
#8  <signal handler called>
#9  kdb_enter (why=3D<optimized out>, msg=3D<optimized out>)
    at /usr/home/somers/src/freebsd.org/src/main/sys/kern/subr_kdb.c:556
#10 0xffffffff80c0df19 in vpanic (fmt=3D<optimized out>,
    ap=3Dap@entry=3D0xfffffe00d84d6ad0)
    at /usr/home/somers/src/freebsd.org/src/main/sys/kern/kern_shutdown.c:9=
62
#11 0xffffffff80c0dd93 in panic (
    fmt=3D0xffffffff81da3260 <cnputs_mtx> "H\324(\201\377\377\377\377")
    at /usr/home/somers/src/freebsd.org/src/main/sys/kern/kern_shutdown.c:8=
87
#12 0xffffffff8119c16e in uiomove_fromphys (ma=3D0xfffff8007442f108, offset=
=3D384,
    offset@entry=3D0, n=3D<optimized out>, n@entry=3D4096,
    uio=3Duio@entry=3D0xfffffe00d84d6b70)
    at
/usr/home/somers/src/freebsd.org/src/main/sys/amd64/amd64/uio_machdep.c:78
#13 0xffffffff82f552d0 in g_zero_fill_pages (bp=3D0xfffff8028745eb60)
    at /usr/home/somers/src/freebsd.org/src/main/sys/geom/zero/g_zero.c:107
#14 g_zero_start (bp=3D0xfffff8028745eb60)
    at /usr/home/somers/src/freebsd.org/src/main/sys/geom/zero/g_zero.c:124
#15 0xffffffff80b332df in g_io_request (bp=3D0xfffff8028745eb60,
    cp=3Dcp@entry=3D0xfffff80003ddc080)
    at /usr/home/somers/src/freebsd.org/src/main/sys/geom/geom_io.c:589
#16 0xffffffff80b2e994 in g_dev_strategy (bp=3D<optimized out>)
    at /usr/home/somers/src/freebsd.org/src/main/sys/geom/geom_dev.c:807
#17 0xffffffff80be9671 in physio (dev=3D0xfffff80074979c00,
    uio=3D0xfffffe00d84d6da0, ioflag=3D<optimized out>)
    at /usr/home/somers/src/freebsd.org/src/main/sys/kern/kern_physio.c:173
#18 0xffffffff80a7795f in devfs_read_f (fp=3D0xfffff802f1ea9640,
    uio=3D0xfffffe00d84d6da0, cred=3D<optimized out>, flags=3D0,
    td=3D0xfffff8004b7e2000)
    at
/usr/home/somers/src/freebsd.org/src/main/sys/fs/devfs/devfs_vnops.c:1463
#19 0xffffffff80c91ea0 in fo_read (active_cred=3D0x12, td=3D0xfffff8004b7e2=
000,
    fp=3D<optimized out>, uio=3D<optimized out>, flags=3D<optimized out>)
    at /usr/home/somers/src/freebsd.org/src/main/sys/sys/file.h:367
#20 dofileread (td=3Dtd@entry=3D0xfffff8004b7e2000, fd=3Dfd@entry=3D3,
    fp=3D<optimized out>, auio=3Dauio@entry=3D0xfffffe00d84d6da0,
    offset=3Doffset@entry=3D-1, flags=3Dflags@entry=3D0)
    at /usr/home/somers/src/freebsd.org/src/main/sys/kern/sys_generic.c:369
#21 0xffffffff80c91732 in kern_readv (td=3D0xfffff8004b7e2000, fd=3D3,
    auio=3D0xfffffe00d84d6da0)
    at /usr/home/somers/src/freebsd.org/src/main/sys/kern/sys_generic.c:290
#22 sys_read (td=3D0xfffff8004b7e2000, uap=3D<optimized out>)
    at /usr/home/somers/src/freebsd.org/src/main/sys/kern/sys_generic.c:206
#23 0xffffffff8119b269 in syscallenter (td=3D0xfffff8004b7e2000)
    at
/usr/home/somers/src/freebsd.org/src/main/sys/amd64/amd64/../../kern/subr_s=
yscall.c:189
#24 amd64_syscall (td=3D0xfffff8004b7e2000, traced=3D0)
    at /usr/home/somers/src/freebsd.org/src/main/sys/amd64/amd64/trap.c:1257
#25 <signal handler called>
#26 0x00001b78ca2c850a in ?? ()

--=20
You are receiving this mail because:
You are the assignee for the bug.=