[Bug 297549] panic: zfs zfs_btree_remove_idx / bt_shift_leaf
Date: Sat, 15 Aug 2026 11:55:36 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297549
Bug ID: 297549
Summary: panic: zfs zfs_btree_remove_idx / bt_shift_leaf
Product: Base System
Version: 15.1-RELEASE
Hardware: amd64
OS: Any
Status: New
Severity: Affects Only Me
Priority: ---
Component: kern
Assignee: bugs@FreeBSD.org
Reporter: freebsd.68fba@nospam.spacesurfer.com
Under load (chromium poudriere build) my system panics in zfs. I recently
upgraded from 15.0 to 15.1 and am currently running 15.1-RELEASE-p2. The
machine in question would have no issues with heavy builds in the past.
/var/log/messages reports:
Aug 15 12:12:23 kato kernel: [55936] Fatal trap 9: general protection fault
while in kernel mode
Aug 15 12:12:23 kato kernel: [55936] cpuid = 0; apic id = 00
Aug 15 12:12:23 kato kernel: [55936] instruction pointer =
0x20:0xffffffff810949cf
Aug 15 12:12:23 kato kernel: [55936] stack pointer =
0:0xfffffe00fa4d2970
Aug 15 12:12:23 kato kernel: [55936] frame pointer =
0:0xfffffe00fa4d2970
Aug 15 12:12:23 kato kernel: [55936] code segment = base 0x0,
limit 0xfffff, type 0x1b
Aug 15 12:12:23 kato kernel: [55936] = DPL 0, pres 1, long
1, def32 0, gran 1
Aug 15 12:12:23 kato kernel: [55936] processor eflags = interrupt enabled,
resume, IOPL = 0
Aug 15 12:12:23 kato kernel: [55936] current process = 0
(z_wr_iss_1)
Aug 15 12:12:23 kato kernel: [55936] rdi: fffff8000fade3a0 rsi:
fffff8000fade398 rdx: 00000000000001c8
Aug 15 12:12:23 kato kernel: [55936] rcx: 0000000000000028 r8:
0000000000000008 r9: 000000000000002f
Aug 15 12:12:23 kato kernel: [55936] rax: fffff8000fade268 rbx:
fffff80003c37468 rbp: fffffe00fa4d2970
Aug 15 12:12:23 kato kernel: [55936] r10: 0000000000000000 r11:
00000000002ba780 r12: 00000000000000fe
Aug 15 12:12:23 kato kernel: [55936] r13: 0000000000000039 r14:
0000000000000008 r15: fffff8000fade000
Aug 15 12:12:23 kato kernel: [55936] trap number = 9
Aug 15 12:12:23 kato kernel: [55936] panic: general protection fault
Aug 15 12:12:23 kato kernel: [55936] cpuid = 0
Aug 15 12:12:23 kato kernel: [55936] time = 1786792118
Aug 15 12:12:23 kato kernel: [55936] KDB: stack backtrace:
Aug 15 12:12:23 kato kernel: [55936] #0 0xffffffff80bd69cd at
kdb_backtrace+0x5d
Aug 15 12:12:23 kato kernel: [55936] #1 0xffffffff80b87526 at vpanic+0x136
Aug 15 12:12:23 kato kernel: [55936] #2 0xffffffff80b873e3 at panic+0x43
Aug 15 12:12:23 kato kernel: [55936] #3 0xffffffff81098b88 at trap_fatal+0x68
Aug 15 12:12:23 kato kernel: [55936] #4 0xffffffff8106f4b8 at calltrap+0x8
Aug 15 12:12:23 kato kernel: [55936] #5 0xffffffff82653183 at
zfs_btree_remove_idx+0x1c3
Aug 15 12:12:23 kato kernel: [55936] #6 0xffffffff82653ce6 at
zfs_btree_remove+0x36
Aug 15 12:12:23 kato kernel: [55936] #7 0xffffffff826d946e at
zfs_range_tree_remove_impl+0x31e
Aug 15 12:12:23 kato kernel: [55936] #8 0xffffffff826d098c at
metaslab_alloc_dva_range+0xf9c
Aug 15 12:12:23 kato kernel: [55936] #9 0xffffffff826d1f93 at
metaslab_alloc_range+0x123
Aug 15 12:12:23 kato kernel: [55936] #10 0xffffffff826d1e5b at
metaslab_alloc+0x4b
Aug 15 12:12:23 kato kernel: [55936] #11 0xffffffff827de626 at
zio_dva_allocate+0xe6
Aug 15 12:12:23 kato kernel: [55936] #12 0xffffffff827d9bc8 at zio_execute+0x38
Aug 15 12:12:23 kato kernel: [55936] #13 0xffffffff80bed4c2 at
taskqueue_run_locked+0x182
Aug 15 12:12:23 kato kernel: [55936] #14 0xffffffff80bee692 at
taskqueue_thread_loop+0xc2
Aug 15 12:12:23 kato kernel: [55936] #15 0xffffffff80b3d97b at fork_exit+0x7b
Aug 15 12:12:23 kato kernel: [55936] #16 0xffffffff810704de at
fork_trampoline+0xe
Aug 15 12:12:23 kato kernel: [55936] Uptime: 15h32m16s
kgdb ba reports:
(kgdb) ba
#0 __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57
#1 doadump (textdump=<optimized out>) at /usr/src/sys/kern/kern_shutdown.c:399
#2 0xffffffff80b870a9 in kern_reboot (howto=260) at
/usr/src/sys/kern/kern_shutdown.c:519
#3 0xffffffff80b875b7 in vpanic (fmt=0xffffffff811f9a2f "%s",
ap=ap@entry=0xfffffe00fa4d2860) at /usr/src/sys/kern/kern_shutdown.c:974
#4 0xffffffff80b873e3 in panic (fmt=<unavailable>) at
/usr/src/sys/kern/kern_shutdown.c:887
#5 0xffffffff81098b88 in trap_fatal (frame=0xfffffe00fa4d28b0, eva=<optimized
out>) at /usr/src/sys/amd64/amd64/trap.c:1028
#6 <signal handler called>
#7 memmove_erms () at /usr/src/sys/amd64/amd64/support.S:537
#8 0xffffffff82653183 in bmov (src=0xfffff8000fade398,
src@entry=0xfffffe00fa4d29c8, dest=0xfffff8000fade3a0,
dest@entry=0xfffff80003c37468, size=456) at
/usr/src/sys/contrib/openzfs/module/zfs/btree.c:72
#9 bt_shift_leaf (tree=0xfffff80003c37468, node=0xfffff8000fade000, idx=0,
count=57, off=1, dir=BSD_RIGHT) at
/usr/src/sys/contrib/openzfs/module/zfs/btree.c:492
#10 bt_shrink_leaf (tree=0xfffff80003c37468, leaf=0xfffff8000fade000, idx=57,
n=1) at /usr/src/sys/contrib/openzfs/module/zfs/btree.c:543
#11 zfs_btree_remove_idx (tree=tree@entry=0xfffff80003c37468,
where=where@entry=0xfffffe00fa4d29f8) at
/usr/src/sys/contrib/openzfs/module/zfs/btree.c:1713
#12 0xffffffff82653ce6 in zfs_btree_remove (tree=0xfffff80003c37468,
value=<optimized out>) at /usr/src/sys/contrib/openzfs/module/zfs/btree.c:1868
#13 0xffffffff826d946e in zfs_range_tree_remove_impl (rt=0xfffff80003c1f000,
start=start@entry=1145589727232, size=size@entry=4096, do_fill=do_fill@entry=0)
at /usr/src/sys/contrib/openzfs/module/zfs/range_tree.c:549
#14 0xffffffff826d9149 in zfs_range_tree_remove (arg=0xfffff8000fade3a0,
start=18446735277879583640, start@entry=1145589727232, size=456,
size@entry=4096) at /usr/src/sys/contrib/openzfs/module/zfs/range_tree.c:602
#15 0xffffffff826d098c in metaslab_block_alloc (msp=0xfffff80003c37000,
size=4096, max_size=4096, actual_size=0xfffffe00fa4d2b78, txg=<optimized out>)
at /usr/src/sys/contrib/openzfs/module/zfs/metaslab.c:4877
#16 metaslab_group_alloc (mg=0xfffff80001676400, asize=<optimized out>,
max_asize=4096, dva=0xfffff801f2237630, d=0, allocator=0,
actual_asize=0xfffffe00fa4d2b78, zal=<optimized out>, txg=<optimized out>,
try_hard=<optimized out>) at
/usr/src/sys/contrib/openzfs/module/zfs/metaslab.c:5230
#17 metaslab_alloc_dva_range (spa=spa@entry=0xfffffe010333b000,
mc=mc@entry=0xfffff8000316a400, psize=psize@entry=4096, max_psize=4096,
dva=dva@entry=0xfffff801f2237630, d=d@entry=0, hintdva=0x0, txg=4933190,
flags=8, zal=<optimized out>, allocator=0, actual_psize=0x0)
at /usr/src/sys/contrib/openzfs/module/zfs/metaslab.c:5445
#18 0xffffffff826d1f93 in metaslab_alloc_range
(spa=spa@entry=0xfffffe010333b000, mc=mc@entry=0xfffff8000316a400, psize=4096,
max_psize=4096, bp=0xfffff801f2237630, ndvas=3, txg=4933190, hintbp=0x0,
flags=8, zal=<optimized out>, allocator=0, tag=0xfffffe02e35f4200,
actual_psize=0x0)
at /usr/src/sys/contrib/openzfs/module/zfs/metaslab.c:6029
#19 0xffffffff826d1e5b in metaslab_alloc (spa=0xfffff8000fade3a0,
spa@entry=0xfffffe010333b000, mc=0xfffff8000fade398,
mc@entry=0xfffff8000316a400, psize=456, bp=0x8, ndvas=263053928, txg=<optimized
out>, hintbp=0x0, flags=8, zal=0xfffffe02e35f44a0, allocator=0,
tag=0xfffffe02e35f4200)
at /usr/src/sys/contrib/openzfs/module/zfs/metaslab.c:5996
#20 0xffffffff827de626 in zio_dva_allocate (zio=0xfffffe02e35f4200) at
/usr/src/sys/contrib/openzfs/module/zfs/zio.c:4348
#21 0xffffffff827d9bc8 in __zio_execute (zio=<optimized out>) at
/usr/src/sys/contrib/openzfs/module/zfs/zio.c:2485
#22 zio_execute (zio=<optimized out>) at
/usr/src/sys/contrib/openzfs/module/zfs/zio.c:2396
#23 0xffffffff80bed4c2 in taskqueue_run_locked
(queue=queue@entry=0xfffff80003173300) at
/usr/src/sys/kern/subr_taskqueue.c:517
#24 0xffffffff80bee692 in taskqueue_thread_loop
(arg=arg@entry=0xfffff80001891b90) at /usr/src/sys/kern/subr_taskqueue.c:829
#25 0xffffffff80b3d97b in fork_exit (callout=0xffffffff80bee5d0
<taskqueue_thread_loop>, arg=0xfffff80001891b90, frame=0xfffffe00fa4d2f40) at
/usr/src/sys/kern/kern_fork.c:1200
#26 <signal handler called>
#27 0x4d820ff7394d0000 in ?? ()
--
You are receiving this mail because:
You are the assignee for the bug.