zfs crypto discuss - Apr 2008 - [Bug 949] New: ''zfs create -o encryption=on .. '' panic

http://defect.opensolaris.org/bz/show_bug.cgi?id=949

           Summary: ''zfs create -o encryption=on .. '' panic
    Classification: Development
           Product: zfs-crypto
           Version: unspecified
          Platform: Other
        OS/Version: Solaris
            Status: NEW
          Severity: blocker
          Priority: P1
         Component: other
        AssignedTo: darrenm at opensolaris.org
        ReportedBy: hua.tang at sun.com
         QAContact: hua.tang at sun.com
                CC: zfs-crypto-discuss at opensolaris.org
   Estimated Hours: 0.0


Build: izick 2008-04-01 [zfscrypto-debug]

# zpool create -o
keysource=raw,file:///export/home/zfscrypto-tests/proto/suites/security/zfs-crypto/etc/raw_key_file
tank /export/home/testfile 
outkey (868296)=686a65d7bd4f16fa3c2d88ed7f8e9cf35335373d2c5f169404c98ead7b0
zic_key (868296)
zic_keydata (868296)
create salt = 0
cry->key_data_len = 0
zc->zc_crypto.zic_keydatalen = 32
keydata=686a65d7bd4f16fa3c2d88ed7f8e9cf35335373d2c5f169404c98ead7b0
# zfs create -o encryption=on tank/fs
DEBUG: need inherit keyscope
DEBUG: crypt = 0
DEBUG: inheriting keyscope
DEBUG: keyscope = 0

panic[cpu0]/thread=2a103b7bca0: vmem_hash_delete(30000018d98, 60010884e00, 0):
bad free

000002a103b7b460 genunix:vmem_hash_delete+c8 (30000018d98, 60010884e00, 0,
30011349ef0, 30000019a30, 61810ca6f38)
  %l0-3: 0000030006f13200 00000000000000d8 000000000000001b 0000000030c3865b
  %l4-7: 000000000000003f 0000061870cb77bc 000000000000000d 0000000000000000
000002a103b7b510 genunix:vmem_xfree+1c (30000018db8, 60010884e00, 0,
30007adc298, ffffffffffffffff, 0)
  %l0-3: 0000060010883a88 0000000001893800 0000030000018d98 0000000000000006
  %l4-7: 0000000000001692 0000030000048740 000000007b312800 0000030004fd1880
000002a103b7b5c0 zfs:dsl_crypto_key_gen+2d8 (1c, 1c, 30007adc298, 60010884e00,
60010883a50, 14)
  %l0-3: 0000060010b4d480 000000007b303400 000000000000001c 000000007b312c00
  %l4-7: 0000060010a5b308 0000000000000020 0000060010af5458 0000060010cad630
000002a103b7b6b0 zfs:dmu_objset_create_sync+dc (60010caca00, 2a103ffd6f8,
30007adc298, 600102161c0, 30007cf5400, 16)
  %l0-3: 0000000000000002 0000000000000002 0000060010a5ba40 0000000000000001
  %l4-7: 000000000000053b 0000000000000000 0000000000000019 000003001b518680
000002a103b7b770 zfs:dsl_sync_task_group_sync+11c (6001009f450, 600102161c0,
7b2920c0, 600110a6390, 2, 0)
  %l0-3: 0000000000014000 000000000003c000 0000000000050000 0000000000000000
  %l4-7: 000006001009f478 0000060011068d80 000000007b292014 0000000000000000
000002a103b7b830 zfs:dsl_pool_sync+ec (60011068d80, a, 60010cad600, 7b309190,
600102161c0, 60010cad630)
  %l0-3: 0000000000000005 0000000000000000 0000060010b4d888 0000060011068eb8
  %l4-7: 000003001be5e358 0000000000000000 0000060011068f18 000000007b30b800
000002a103b7b8e0 zfs:spa_sync+200 (60010b4d480, a, 0, 7b308ff0, 60010b4d5d0,
7b309190)
  %l0-3: 0000060010b4d570 0000060011068ee8 0000060011068eb8 00000600111fa540
  %l4-7: 0000060010b4d648 0000030004ff1640 0000060011068d80 0000060010b4d600
000002a103b7b9b0 zfs:txg_sync_thread+190 (60011068d80, a, 7b2faecc, 7b30c230,
700b49b4, 2a103b7ba70)
  %l0-3: 0000060011068ea0 0000060011068e92 0000060011068e90 0000060011068e50
  %l4-7: 0000060011068e58 0000060011068e96 0000060011068e94 0000060011068e48

panic: entering debugger (continue to save dump)
Type  ''go'' to resume

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://defect.opensolaris.org/bz/show_bug.cgi?id=949





--- Comment #1 from Grace <hua.tang at sun.com>  2008-04-02 00:40:08 ---
Workarounds:

After manually signing the aes module, updating /etc/crypto/kcf.conf to inlcude
CKM_AES_CBC_PAD, CKM_AES_CCM for aes, loading the aes module, the panic goes
away.

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://defect.opensolaris.org/bz/show_bug.cgi?id=949


ajscarp at yahoo.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |CLOSED
         Resolution|                            |INVALID




--- Comment #2 from ajscarp at yahoo.com  2008-04-04 15:53:28 ---
The problem is not in the zfs code.. it''s the way opensolaris is right
now..
The signing and kcf.conf changes are part of bfu..  The aes module needing to
be loaded is because opensolaris only builds /kernel/crypto/sparcv9/aes, but
many sparc machines use /platform/sun4u-us3/kernel/crypto/sparcv9/aes, which is
taken from the opensolari closed-bin tar file, which lacks aes pad

the workaround is basically what we have to do given our gates.. built in a
full ON build, it would be fine..

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.