[Bug 229007] [zfs] kernel crashes on remove disk

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=229007

--- Comment #5 from Allan Jude <allanjude at FreeBSD.org> ---
I crashed differently.

Fatal trap 9: general protection fault while in kernel mode
cpuid = 3; apic id = 03
instruction pointer     = 0x20:0xffffffff827ccc3f
stack pointer           = 0x28:0xfffffe002d962390
frame pointer           = 0x28:0xfffffe002d962390
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 0 (zio_write_issue_1)


#10 0xffffffff827ccc3f in vdev_queue_offset_compare (x1=0xfffff800843ea830,
x2=0xdeadc0dedeadbe8e) at
/usr/src/sys/cddl/contrib/opensolaris/uts/common/fs/zfs/vdev_queue.c:320
        z1 = 0xfffff800843ea830
        z2 = 0xdeadc0dedeadbe8e
        cmp = <optimized out>
#11 0xffffffff826fc174 in avl_find (tree=0xfffff80005f28740,
value=0xfffff800843ea830, where=<optimized out>) at
/usr/src/sys/cddl/contrib/opensolaris/common/avl/avl.c:268
        node = 0xfffff80003d98a80
        off = 592
        prev = 0xdeadc0dedeadc0de
        diff = <optimized out>
#12 avl_add (tree=0xfffff80005f28740, new_node=0xfffff800843ea830) at
/usr/src/sys/cddl/contrib/opensolaris/common/avl/avl.c:644
        where = <optimized out>
#13 0xffffffff827cdbbc in vdev_queue_pending_add (vq=0xfffff80005f285b8,
zio=<optimized out>) at
/usr/src/sys/cddl/contrib/opensolaris/uts/common/fs/zfs/vdev_queue.c:472
        spa = <optimized out>
        __right = <optimized out>
        __left = <optimized out>


and

Fatal trap 9: general protection fault while in kernel mode
cpuid = 1; apic id = 01
instruction pointer     = 0x20:0xffffffff826fbd1f
stack pointer           = 0x28:0xfffffe002d8e09d8
frame pointer           = 0x28:0xfffffe002d8e0a10
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 0 (zio_write_intr_3)


#10 0xffffffff826fbd1f in avl_rotation (tree=0xfffff8000d01f740,
node=0xfffff80003d8b668, balance=<optimized out>) at
/usr/src/sys/cddl/contrib/opensolaris/common/avl/avl.c:379
        right = 0
        left = <optimized out>
        left_heavy = <optimized out>
        right_heavy = <optimized out>
        parent = 0xdeadc0dedeadc0d8
        child = 0xfffff80003dd9250
        which_child = 1
        child_bal = -1
        gchild = <optimized out>
        gleft = <optimized out>
        gright = <optimized out>
        cright = 0x0
#11 0xffffffff826fc3e3 in avl_remove (tree=0xfffff8000d01f740,
data=0xfffff80006fd4830) at
/usr/src/sys/cddl/contrib/opensolaris/common/avl/avl.c:818
        off = <optimized out>
        delete = <optimized out>
        left = <optimized out>
        right = <optimized out>
        node = 0xdeadc0dedeadc0d8
        parent = 0xfffff80003d8b668
        which_child = <optimized out>
        old_balance = <optimized out>
        new_balance = 0
        tmp = <optimized out>
#12 0xffffffff827cdd42 in vdev_queue_pending_remove (vq=0xfffff8000d01f5b8,
zio=0xfffff80006fd4830) at
/usr/src/sys/cddl/contrib/opensolaris/uts/common/fs/zfs/vdev_queue.c:490
        spa = <optimized out>
        __right = <optimized out>
        __left = <optimized out>
#13 vdev_queue_io_done (zio=0xfffff80006fd4830) at
/usr/src/sys/cddl/contrib/opensolaris/uts/common/fs/zfs/vdev_queue.c:937
        vq = 0xfffff8000d01f5b8
        nio = <optimized out>
#14 0xffffffff827fe7f1 in zio_vdev_io_done (zio=0xfffff80006fd4830) at
/usr/src/sys/cddl/contrib/opensolaris/uts/common/fs/zfs/zio.c:3366
        vd = 0xfffff8000d01f000
        unexpected_error = <error reading variable unexpected_error (Cannot
access memory at address 0x0)>
        ops = <optimized out>
#15 0xffffffff827f903c in zio_execute (zio=<optimized out>) at
/usr/src/sys/cddl/contrib/opensolaris/uts/common/fs/zfs/zio.c:1784
        pipeline = <optimized out>
        stage = <optimized out>

-- 
You are receiving this mail because:
You are the assignee for the bug.