Rebase to OpenSolaris b103, in the process we are removing any code which did not...
[zfs.git] / zfs / lib / libzpool / spa.c
index f59db06..fb1b96f 100644 (file)
@@ -24,8 +24,6 @@
  * Use is subject to license terms.
  */
 
-#pragma ident  "@(#)spa.c      1.51    08/04/09 SMI"
-
 /*
  * This file contains all the routines used when modifying on-disk SPA state.
  * This includes opening, importing, destroying, exporting a pool, and syncing a
 #include "zfs_prop.h"
 #include "zfs_comutil.h"
 
-int zio_taskq_threads = 8;
+int zio_taskq_threads[ZIO_TYPES][ZIO_TASKQ_TYPES] = {
+       /*      ISSUE   INTR                                    */
+       {       1,      1       },      /* ZIO_TYPE_NULL        */
+       {       1,      8       },      /* ZIO_TYPE_READ        */
+       {       8,      1       },      /* ZIO_TYPE_WRITE       */
+       {       1,      1       },      /* ZIO_TYPE_FREE        */
+       {       1,      1       },      /* ZIO_TYPE_CLAIM       */
+       {       1,      1       },      /* ZIO_TYPE_IOCTL       */
+};
 
 static void spa_sync_props(void *arg1, void *arg2, cred_t *cr, dmu_tx_t *tx);
+static boolean_t spa_has_active_shared_spare(spa_t *spa);
 
 /*
  * ==========================================================================
@@ -107,13 +114,14 @@ spa_prop_get_config(spa_t *spa, nvlist_t **nvp)
        uint64_t used = spa_get_alloc(spa);
        uint64_t cap, version;
        zprop_source_t src = ZPROP_SRC_NONE;
-       char *cachefile;
-       size_t len;
+       spa_config_dirent_t *dp;
+
+       ASSERT(MUTEX_HELD(&spa->spa_props_lock));
 
        /*
         * readonly properties
         */
-       spa_prop_add_list(*nvp, ZPOOL_PROP_NAME, spa->spa_name, 0, src);
+       spa_prop_add_list(*nvp, ZPOOL_PROP_NAME, spa_name(spa), 0, src);
        spa_prop_add_list(*nvp, ZPOOL_PROP_SIZE, NULL, size, src);
        spa_prop_add_list(*nvp, ZPOOL_PROP_USED, NULL, used, src);
        spa_prop_add_list(*nvp, ZPOOL_PROP_AVAILABLE, NULL, size - used, src);
@@ -139,19 +147,13 @@ spa_prop_get_config(spa_t *spa, nvlist_t **nvp)
                spa_prop_add_list(*nvp, ZPOOL_PROP_ALTROOT, spa->spa_root,
                    0, ZPROP_SRC_LOCAL);
 
-       if (spa->spa_config_dir != NULL) {
-               if (strcmp(spa->spa_config_dir, "none") == 0) {
+       if ((dp = list_head(&spa->spa_config_list)) != NULL) {
+               if (dp->scd_path == NULL) {
                        spa_prop_add_list(*nvp, ZPOOL_PROP_CACHEFILE,
-                           spa->spa_config_dir, 0, ZPROP_SRC_LOCAL);
-               } else {
-                       len = strlen(spa->spa_config_dir) +
-                           strlen(spa->spa_config_file) + 2;
-                       cachefile = kmem_alloc(len, KM_SLEEP);
-                       (void) snprintf(cachefile, len, "%s/%s",
-                           spa->spa_config_dir, spa->spa_config_file);
+                           "none", 0, ZPROP_SRC_LOCAL);
+               } else if (strcmp(dp->scd_path, spa_config_path) != 0) {
                        spa_prop_add_list(*nvp, ZPOOL_PROP_CACHEFILE,
-                           cachefile, 0, ZPROP_SRC_LOCAL);
-                       kmem_free(cachefile, len);
+                           dp->scd_path, 0, ZPROP_SRC_LOCAL);
                }
        }
 }
@@ -169,12 +171,13 @@ spa_prop_get(spa_t *spa, nvlist_t **nvp)
 
        VERIFY(nvlist_alloc(nvp, NV_UNIQUE_NAME, KM_SLEEP) == 0);
 
+       mutex_enter(&spa->spa_props_lock);
+
        /*
         * Get properties from the spa config.
         */
        spa_prop_get_config(spa, nvp);
 
-       mutex_enter(&spa->spa_props_lock);
        /* If no pool property object, no more prop to get. */
        if (spa->spa_pool_props_object == 0) {
                mutex_exit(&spa->spa_props_lock);
@@ -208,9 +211,8 @@ spa_prop_get(spa_t *spa, nvlist_t **nvp)
 
                                dp = spa_get_dsl(spa);
                                rw_enter(&dp->dp_config_rwlock, RW_READER);
-                               if (err = dsl_dataset_open_obj(dp,
-                                   za.za_first_integer, NULL, DS_MODE_NONE,
-                                   FTAG, &ds)) {
+                               if (err = dsl_dataset_hold_obj(dp,
+                                   za.za_first_integer, FTAG, &ds)) {
                                        rw_exit(&dp->dp_config_rwlock);
                                        break;
                                }
@@ -219,7 +221,7 @@ spa_prop_get(spa_t *spa, nvlist_t **nvp)
                                    MAXNAMELEN + strlen(MOS_DIR_NAME) + 1,
                                    KM_SLEEP);
                                dsl_dataset_name(ds, strval);
-                               dsl_dataset_close(ds, DS_MODE_NONE, FTAG);
+                               dsl_dataset_rele(ds, FTAG);
                                rw_exit(&dp->dp_config_rwlock);
                        } else {
                                strval = NULL;
@@ -279,8 +281,6 @@ spa_prop_validate(spa_t *spa, nvlist_t *props)
                zpool_prop_t prop;
                char *propname, *strval;
                uint64_t intval;
-               vdev_t *rvdev;
-               char *vdev_type;
                objset_t *os;
                char *slash;
 
@@ -299,6 +299,7 @@ spa_prop_validate(spa_t *spa, nvlist_t *props)
 
                case ZPOOL_PROP_DELEGATION:
                case ZPOOL_PROP_AUTOREPLACE:
+               case ZPOOL_PROP_LISTSNAPS:
                        error = nvpair_value_uint64(elem, &intval);
                        if (!error && intval > 1)
                                error = EINVAL;
@@ -311,15 +312,9 @@ spa_prop_validate(spa_t *spa, nvlist_t *props)
                        }
 
                        /*
-                        * A bootable filesystem can not be on a RAIDZ pool
-                        * nor a striped pool with more than 1 device.
+                        * Make sure the vdev config is bootable
                         */
-                       rvdev = spa->spa_root_vdev;
-                       vdev_type =
-                           rvdev->vdev_child[0]->vdev_ops->vdev_op_type;
-                       if (rvdev->vdev_children > 1 ||
-                           strcmp(vdev_type, VDEV_TYPE_RAIDZ) == 0 ||
-                           strcmp(vdev_type, VDEV_TYPE_MISSING) == 0) {
+                       if (!vdev_is_bootable(spa->spa_root_vdev)) {
                                error = ENOTSUP;
                                break;
                        }
@@ -329,6 +324,8 @@ spa_prop_validate(spa_t *spa, nvlist_t *props)
                        error = nvpair_value_string(elem, &strval);
 
                        if (!error) {
+                               uint64_t compress;
+
                                if (strval == NULL || strval[0] == '\0') {
                                        objnum = zpool_prop_default_numeric(
                                            ZPOOL_PROP_BOOTFS);
@@ -336,12 +333,22 @@ spa_prop_validate(spa_t *spa, nvlist_t *props)
                                }
 
                                if (error = dmu_objset_open(strval, DMU_OST_ZFS,
-                                   DS_MODE_STANDARD | DS_MODE_READONLY, &os))
+                                   DS_MODE_USER | DS_MODE_READONLY, &os))
                                        break;
-                               objnum = dmu_objset_id(os);
+
+                               /* We don't support gzip bootable datasets */
+                               if ((error = dsl_prop_get_integer(strval,
+                                   zfs_prop_to_name(ZFS_PROP_COMPRESSION),
+                                   &compress, NULL)) == 0 &&
+                                   !BOOTFS_COMPRESS_VALID(compress)) {
+                                       error = ENOTSUP;
+                               } else {
+                                       objnum = dmu_objset_id(os);
+                               }
                                dmu_objset_close(os);
                        }
                        break;
+
                case ZPOOL_PROP_FAILUREMODE:
                        error = nvpair_value_uint64(elem, &intval);
                        if (!error && (intval < ZIO_FAILURE_MODE_WAIT ||
@@ -358,7 +365,7 @@ spa_prop_validate(spa_t *spa, nvlist_t *props)
                         * into thinking we encountered a property validation
                         * error.
                         */
-                       if (!error && spa_state(spa) == POOL_STATE_IO_FAILURE) {
+                       if (!error && spa_suspended(spa)) {
                                spa->spa_failmode = intval;
                                error = EIO;
                        }
@@ -481,8 +488,6 @@ spa_get_errlists(spa_t *spa, avl_tree_t *last, avl_tree_t *scrub)
 static void
 spa_activate(spa_t *spa)
 {
-       int t;
-
        ASSERT(spa->spa_state == POOL_STATE_UNINITIALIZED);
 
        spa->spa_state = POOL_STATE_ACTIVE;
@@ -490,19 +495,18 @@ spa_activate(spa_t *spa)
        spa->spa_normal_class = metaslab_class_create();
        spa->spa_log_class = metaslab_class_create();
 
-       for (t = 0; t < ZIO_TYPES; t++) {
-               spa->spa_zio_issue_taskq[t] = taskq_create("spa_zio_issue",
-                   zio_taskq_threads, maxclsyspri, 50, INT_MAX,
-                   TASKQ_PREPOPULATE);
-               spa->spa_zio_intr_taskq[t] = taskq_create("spa_zio_intr",
-                   zio_taskq_threads, maxclsyspri, 50, INT_MAX,
-                   TASKQ_PREPOPULATE);
+       for (int t = 0; t < ZIO_TYPES; t++) {
+               for (int q = 0; q < ZIO_TASKQ_TYPES; q++) {
+                       spa->spa_zio_taskq[t][q] = taskq_create("spa_zio",
+                           zio_taskq_threads[t][q], maxclsyspri, 50,
+                           INT_MAX, TASKQ_PREPOPULATE);
+               }
        }
 
-       list_create(&spa->spa_dirty_list, sizeof (vdev_t),
-           offsetof(vdev_t, vdev_dirty_node));
-       list_create(&spa->spa_zio_list, sizeof (zio_t),
-           offsetof(zio_t, zio_link_node));
+       list_create(&spa->spa_config_dirty_list, sizeof (vdev_t),
+           offsetof(vdev_t, vdev_config_dirty_node));
+       list_create(&spa->spa_state_dirty_list, sizeof (vdev_t),
+           offsetof(vdev_t, vdev_state_dirty_node));
 
        txg_list_create(&spa->spa_vdev_txg_list,
            offsetof(struct vdev, vdev_txg_node));
@@ -521,8 +525,6 @@ spa_activate(spa_t *spa)
 static void
 spa_deactivate(spa_t *spa)
 {
-       int t;
-
        ASSERT(spa->spa_sync_on == B_FALSE);
        ASSERT(spa->spa_dsl_pool == NULL);
        ASSERT(spa->spa_root_vdev == NULL);
@@ -531,14 +533,14 @@ spa_deactivate(spa_t *spa)
 
        txg_list_destroy(&spa->spa_vdev_txg_list);
 
-       list_destroy(&spa->spa_dirty_list);
-       list_destroy(&spa->spa_zio_list);
+       list_destroy(&spa->spa_config_dirty_list);
+       list_destroy(&spa->spa_state_dirty_list);
 
-       for (t = 0; t < ZIO_TYPES; t++) {
-               taskq_destroy(spa->spa_zio_issue_taskq[t]);
-               taskq_destroy(spa->spa_zio_intr_taskq[t]);
-               spa->spa_zio_issue_taskq[t] = NULL;
-               spa->spa_zio_intr_taskq[t] = NULL;
+       for (int t = 0; t < ZIO_TYPES; t++) {
+               for (int q = 0; q < ZIO_TASKQ_TYPES; q++) {
+                       taskq_destroy(spa->spa_zio_taskq[t][q]);
+                       spa->spa_zio_taskq[t][q] = NULL;
+               }
        }
 
        metaslab_class_destroy(spa->spa_normal_class);
@@ -579,8 +581,13 @@ spa_config_parse(spa_t *spa, vdev_t **vdp, nvlist_t *nv, vdev_t *parent,
        if ((*vdp)->vdev_ops->vdev_op_leaf)
                return (0);
 
-       if (nvlist_lookup_nvlist_array(nv, ZPOOL_CONFIG_CHILDREN,
-           &child, &children) != 0) {
+       error = nvlist_lookup_nvlist_array(nv, ZPOOL_CONFIG_CHILDREN,
+           &child, &children);
+
+       if (error == ENOENT)
+               return (0);
+
+       if (error) {
                vdev_free(*vdp);
                *vdp = NULL;
                return (EINVAL);
@@ -609,6 +616,8 @@ spa_unload(spa_t *spa)
 {
        int i;
 
+       ASSERT(MUTEX_HELD(&spa_namespace_lock));
+
        /*
         * Stop async tasks.
         */
@@ -623,10 +632,12 @@ spa_unload(spa_t *spa)
        }
 
        /*
-        * Wait for any outstanding prefetch I/O to complete.
+        * Wait for any outstanding async I/O to complete.
         */
-       spa_config_enter(spa, RW_WRITER, FTAG);
-       spa_config_exit(spa, FTAG);
+       mutex_enter(&spa->spa_async_root_lock);
+       while (spa->spa_async_root_count != 0)
+               cv_wait(&spa->spa_async_root_cv, &spa->spa_async_root_lock);
+       mutex_exit(&spa->spa_async_root_lock);
 
        /*
         * Drop and purge level 2 cache
@@ -659,6 +670,7 @@ spa_unload(spa_t *spa)
                nvlist_free(spa->spa_spares.sav_config);
                spa->spa_spares.sav_config = NULL;
        }
+       spa->spa_spares.sav_count = 0;
 
        for (i = 0; i < spa->spa_l2cache.sav_count; i++)
                vdev_free(spa->spa_l2cache.sav_vdevs[i]);
@@ -671,6 +683,7 @@ spa_unload(spa_t *spa)
                nvlist_free(spa->spa_l2cache.sav_config);
                spa->spa_l2cache.sav_config = NULL;
        }
+       spa->spa_l2cache.sav_count = 0;
 
        spa->spa_async_suspended = 0;
 }
@@ -689,6 +702,8 @@ spa_load_spares(spa_t *spa)
        int i;
        vdev_t *vd, *tvd;
 
+       ASSERT(spa_config_held(spa, SCL_ALL, RW_WRITER) == SCL_ALL);
+
        /*
         * First, close and free any existing spare vdevs.
         */
@@ -696,8 +711,8 @@ spa_load_spares(spa_t *spa)
                vd = spa->spa_spares.sav_vdevs[i];
 
                /* Undo the call to spa_activate() below */
-               if ((tvd = spa_lookup_by_guid(spa, vd->vdev_guid)) != NULL &&
-                   tvd->vdev_isspare)
+               if ((tvd = spa_lookup_by_guid(spa, vd->vdev_guid,
+                   B_FALSE)) != NULL && tvd->vdev_isspare)
                        spa_spare_remove(tvd);
                vdev_close(vd);
                vdev_free(vd);
@@ -737,7 +752,8 @@ spa_load_spares(spa_t *spa)
 
                spa->spa_spares.sav_vdevs[i] = vd;
 
-               if ((tvd = spa_lookup_by_guid(spa, vd->vdev_guid)) != NULL) {
+               if ((tvd = spa_lookup_by_guid(spa, vd->vdev_guid,
+                   B_FALSE)) != NULL) {
                        if (!tvd->vdev_isspare)
                                spa_spare_add(tvd);
 
@@ -758,10 +774,11 @@ spa_load_spares(spa_t *spa)
                                spa_spare_activate(tvd);
                }
 
+               vd->vdev_top = vd;
+
                if (vdev_open(vd) != 0)
                        continue;
 
-               vd->vdev_top = vd;
                if (vdev_validate_aux(vd) == 0)
                        spa_spare_add(vd);
        }
@@ -799,10 +816,12 @@ spa_load_l2cache(spa_t *spa)
        nvlist_t **l2cache;
        uint_t nl2cache;
        int i, j, oldnvdevs;
-       uint64_t guid;
+       uint64_t guid, size;
        vdev_t *vd, **oldvdevs, **newvdevs;
        spa_aux_vdev_t *sav = &spa->spa_l2cache;
 
+       ASSERT(spa_config_held(spa, SCL_ALL, RW_WRITER) == SCL_ALL);
+
        if (sav->sav_config != NULL) {
                VERIFY(nvlist_lookup_nvlist_array(sav->sav_config,
                    ZPOOL_CONFIG_L2CACHE, &l2cache, &nl2cache) == 0);
@@ -851,22 +870,21 @@ spa_load_l2cache(spa_t *spa)
                         */
                        spa_l2cache_add(vd);
 
+                       vd->vdev_top = vd;
+                       vd->vdev_aux = sav;
+
+                       spa_l2cache_activate(vd);
+
                        if (vdev_open(vd) != 0)
                                continue;
 
-                       vd->vdev_top = vd;
                        (void) vdev_validate_aux(vd);
 
                        if (!vdev_is_dead(vd)) {
-                               uint64_t size;
                                size = vdev_get_rsize(vd);
-                               ASSERT3U(size, >, 0);
-                               if (spa_mode & FWRITE) {
-                                       l2arc_add_vdev(spa, vd,
-                                           VDEV_LABEL_START_SIZE,
-                                           size - VDEV_LABEL_START_SIZE);
-                               }
-                               spa_l2cache_activate(vd);
+                               l2arc_add_vdev(spa, vd,
+                                   VDEV_LABEL_START_SIZE,
+                                   size - VDEV_LABEL_START_SIZE);
                        }
                }
        }
@@ -879,9 +897,10 @@ spa_load_l2cache(spa_t *spa)
 
                vd = oldvdevs[i];
                if (vd != NULL) {
-                       if (spa_mode & FWRITE &&
+                       if ((spa_mode & FWRITE) &&
                            spa_l2cache_exists(vd->vdev_guid, &pool) &&
-                           pool != 0ULL) {
+                           pool != 0ULL &&
+                           l2arc_vdev_present(vd)) {
                                l2arc_remove_vdev(vd);
                        }
                        (void) vdev_close(vd);
@@ -959,6 +978,32 @@ spa_check_removed(vdev_t *vd)
 }
 
 /*
+ * Check for missing log devices
+ */
+int
+spa_check_logs(spa_t *spa)
+{
+       switch (spa->spa_log_state) {
+       case SPA_LOG_MISSING:
+               /* need to recheck in case slog has been restored */
+       case SPA_LOG_UNKNOWN:
+               if (dmu_objset_find(spa->spa_name, zil_check_log_chain, NULL,
+                   DS_FIND_CHILDREN)) {
+                       spa->spa_log_state = SPA_LOG_MISSING;
+                       return (1);
+               }
+               break;
+
+       case SPA_LOG_CLEAR:
+               (void) dmu_objset_find(spa->spa_name, zil_clear_log_chain, NULL,
+                   DS_FIND_CHILDREN);
+               break;
+       }
+       spa->spa_log_state = SPA_LOG_GOOD;
+       return (0);
+}
+
+/*
  * Load an existing storage pool, using the pool's builtin spa_config as a
  * source of configuration information.
  */
@@ -972,8 +1017,10 @@ spa_load(spa_t *spa, nvlist_t *config, spa_load_state_t state, int mosconfig)
        uint64_t config_cache_txg = spa->spa_config_txg;
        uint64_t pool_guid;
        uint64_t version;
-       zio_t *zio;
        uint64_t autoreplace = 0;
+       char *ereport = FM_EREPORT_ZFS_POOL;
+
+       ASSERT(MUTEX_HELD(&spa_namespace_lock));
 
        spa->spa_load_state = state;
 
@@ -1006,10 +1053,10 @@ spa_load(spa_t *spa, nvlist_t *config, spa_load_state_t state, int mosconfig)
         * value that will be returned by spa_version() since parsing the
         * configuration requires knowing the version number.
         */
-       spa_config_enter(spa, RW_WRITER, FTAG);
+       spa_config_enter(spa, SCL_ALL, FTAG, RW_WRITER);
        spa->spa_ubsync.ub_version = version;
        error = spa_config_parse(spa, &rvd, nvroot, NULL, 0, VDEV_ALLOC_LOAD);
-       spa_config_exit(spa, FTAG);
+       spa_config_exit(spa, SCL_ALL, FTAG);
 
        if (error != 0)
                goto out;
@@ -1020,18 +1067,19 @@ spa_load(spa_t *spa, nvlist_t *config, spa_load_state_t state, int mosconfig)
        /*
         * Try to open all vdevs, loading each label in the process.
         */
+       spa_config_enter(spa, SCL_ALL, FTAG, RW_WRITER);
        error = vdev_open(rvd);
+       spa_config_exit(spa, SCL_ALL, FTAG);
        if (error != 0)
                goto out;
 
        /*
         * Validate the labels for all leaf vdevs.  We need to grab the config
-        * lock because all label I/O is done with the ZIO_FLAG_CONFIG_HELD
-        * flag.
+        * lock because all label I/O is done with ZIO_FLAG_CONFIG_WRITER.
         */
-       spa_config_enter(spa, RW_READER, FTAG);
+       spa_config_enter(spa, SCL_ALL, FTAG, RW_WRITER);
        error = vdev_validate(rvd);
-       spa_config_exit(spa, FTAG);
+       spa_config_exit(spa, SCL_ALL, FTAG);
 
        if (error != 0)
                goto out;
@@ -1044,12 +1092,7 @@ spa_load(spa_t *spa, nvlist_t *config, spa_load_state_t state, int mosconfig)
        /*
         * Find the best uberblock.
         */
-       bzero(ub, sizeof (uberblock_t));
-
-       zio = zio_root(spa, NULL, NULL,
-           ZIO_FLAG_CANFAIL | ZIO_FLAG_SPECULATIVE);
-       vdev_uberblock_load(zio, rvd, ub);
-       error = zio_wait(zio);
+       vdev_uberblock_load(NULL, rvd, ub);
 
        /*
         * If we weren't able to find a single valid uberblock, return failure.
@@ -1116,8 +1159,8 @@ spa_load(spa_t *spa, nvlist_t *config, spa_load_state_t state, int mosconfig)
                        goto out;
                }
 
-               if (nvlist_lookup_uint64(newconfig, ZPOOL_CONFIG_HOSTID,
-                   &hostid) == 0) {
+               if (!spa_is_root(spa) && nvlist_lookup_uint64(newconfig,
+                   ZPOOL_CONFIG_HOSTID, &hostid) == 0) {
                        char *hostname;
                        unsigned long myhostid = 0;
 
@@ -1129,9 +1172,9 @@ spa_load(spa_t *spa, nvlist_t *config, spa_load_state_t state, int mosconfig)
                            (unsigned long)hostid != myhostid) {
                                cmn_err(CE_WARN, "pool '%s' could not be "
                                    "loaded as it was last accessed by "
-                                   "another system (host: %s hostid: 0x%lx).  "
+                                   "another system (host: %s hostid: 0x%lx). "
                                    "See: http://www.sun.com/msg/ZFS-8000-EY",
-                                   spa->spa_name, hostname,
+                                   spa_name(spa), hostname,
                                    (unsigned long)hostid);
                                error = EBADF;
                                goto out;
@@ -1229,9 +1272,9 @@ spa_load(spa_t *spa, nvlist_t *config, spa_load_state_t state, int mosconfig)
                        goto out;
                }
 
-               spa_config_enter(spa, RW_WRITER, FTAG);
+               spa_config_enter(spa, SCL_ALL, FTAG, RW_WRITER);
                spa_load_spares(spa);
-               spa_config_exit(spa, FTAG);
+               spa_config_exit(spa, SCL_ALL, FTAG);
        }
 
        /*
@@ -1257,11 +1300,20 @@ spa_load(spa_t *spa, nvlist_t *config, spa_load_state_t state, int mosconfig)
                        goto out;
                }
 
-               spa_config_enter(spa, RW_WRITER, FTAG);
+               spa_config_enter(spa, SCL_ALL, FTAG, RW_WRITER);
                spa_load_l2cache(spa);
-               spa_config_exit(spa, FTAG);
+               spa_config_exit(spa, SCL_ALL, FTAG);
+       }
+
+       if (spa_check_logs(spa)) {
+               vdev_set_state(rvd, B_TRUE, VDEV_STATE_CANT_OPEN,
+                   VDEV_AUX_BAD_LOG);
+               error = ENXIO;
+               ereport = FM_EREPORT_ZFS_LOG_REPLAY;
+               goto out;
        }
 
+
        spa->spa_delegation = zpool_prop_default_numeric(ZPOOL_PROP_DELEGATION);
 
        error = zap_lookup(spa->spa_meta_objset, DMU_POOL_DIRECTORY_OBJECT,
@@ -1311,9 +1363,9 @@ spa_load(spa_t *spa, nvlist_t *config, spa_load_state_t state, int mosconfig)
        /*
         * Propagate the leaf DTLs we just loaded all the way up the tree.
         */
-       spa_config_enter(spa, RW_WRITER, FTAG);
+       spa_config_enter(spa, SCL_ALL, FTAG, RW_WRITER);
        vdev_dtl_reassess(rvd, 0, 0, B_FALSE);
-       spa_config_exit(spa, FTAG);
+       spa_config_exit(spa, SCL_ALL, FTAG);
 
        /*
         * Check the state of the root vdev.  If it can't be opened, it
@@ -1335,7 +1387,7 @@ spa_load(spa_t *spa, nvlist_t *config, spa_load_state_t state, int mosconfig)
                 */
                tx = dmu_tx_create_assigned(spa_get_dsl(spa),
                    spa_first_txg(spa));
-               (void) dmu_objset_find(spa->spa_name,
+               (void) dmu_objset_find(spa_name(spa),
                    zil_claim, tx, DS_FIND_CHILDREN);
                dmu_tx_commit(tx);
 
@@ -1369,8 +1421,9 @@ spa_load(spa_t *spa, nvlist_t *config, spa_load_state_t state, int mosconfig)
 
        error = 0;
 out:
+       spa->spa_minref = refcount_count(&spa->spa_refcount);
        if (error && error != EBADF)
-               zfs_ereport_post(FM_EREPORT_ZFS_POOL, spa, NULL, NULL, 0, 0);
+               zfs_ereport_post(ereport, spa, NULL, NULL, 0, 0);
        spa->spa_load_state = SPA_LOAD_NONE;
        spa->spa_ena = 0;
 
@@ -1394,7 +1447,6 @@ spa_open_common(const char *pool, spa_t **spapp, void *tag, nvlist_t **config)
 {
        spa_t *spa;
        int error;
-       int loaded = B_FALSE;
        int locked = B_FALSE;
 
        *spapp = NULL;
@@ -1429,11 +1481,10 @@ spa_open_common(const char *pool, spa_t **spapp, void *tag, nvlist_t **config)
                         * this is the case, the config cache is out of sync and
                         * we should remove the pool from the namespace.
                         */
-                       zfs_post_ok(spa, NULL);
                        spa_unload(spa);
                        spa_deactivate(spa);
+                       spa_config_sync(spa, B_TRUE, B_TRUE);
                        spa_remove(spa);
-                       spa_config_sync();
                        if (locked)
                                mutex_exit(&spa_namespace_lock);
                        return (ENOENT);
@@ -1445,12 +1496,9 @@ spa_open_common(const char *pool, spa_t **spapp, void *tag, nvlist_t **config)
                         * information: the state of each vdev after the
                         * attempted vdev_open().  Return this to the user.
                         */
-                       if (config != NULL && spa->spa_root_vdev != NULL) {
-                               spa_config_enter(spa, RW_READER, FTAG);
+                       if (config != NULL && spa->spa_root_vdev != NULL)
                                *config = spa_config_generate(spa, NULL, -1ULL,
                                    B_TRUE);
-                               spa_config_exit(spa, FTAG);
-                       }
                        spa_unload(spa);
                        spa_deactivate(spa);
                        spa->spa_last_open_failed = B_TRUE;
@@ -1459,31 +1507,19 @@ spa_open_common(const char *pool, spa_t **spapp, void *tag, nvlist_t **config)
                        *spapp = NULL;
                        return (error);
                } else {
-                       zfs_post_ok(spa, NULL);
                        spa->spa_last_open_failed = B_FALSE;
                }
-
-               loaded = B_TRUE;
        }
 
        spa_open_ref(spa, tag);
 
-       /*
-        * If we just loaded the pool, resilver anything that's out of date.
-        */
-       if (loaded && (spa_mode & FWRITE))
-               VERIFY(spa_scrub(spa, POOL_SCRUB_RESILVER, B_TRUE) == 0);
-
        if (locked)
                mutex_exit(&spa_namespace_lock);
 
        *spapp = spa;
 
-       if (config != NULL) {
-               spa_config_enter(spa, RW_READER, FTAG);
+       if (config != NULL)
                *config = spa_config_generate(spa, NULL, -1ULL, B_TRUE);
-               spa_config_exit(spa, FTAG);
-       }
 
        return (0);
 }
@@ -1557,7 +1593,8 @@ spa_add_spares(spa_t *spa, nvlist_t *config)
                for (i = 0; i < nspares; i++) {
                        VERIFY(nvlist_lookup_uint64(spares[i],
                            ZPOOL_CONFIG_GUID, &guid) == 0);
-                       if (spa_spare_exists(guid, &pool) && pool != 0ULL) {
+                       if (spa_spare_exists(guid, &pool, NULL) &&
+                           pool != 0ULL) {
                                VERIFY(nvlist_lookup_uint64_array(
                                    spares[i], ZPOOL_CONFIG_STATS,
                                    (uint64_t **)&vs, &vsc) == 0);
@@ -1585,7 +1622,7 @@ spa_add_l2cache(spa_t *spa, nvlist_t *config)
        if (spa->spa_l2cache.sav_count == 0)
                return;
 
-       spa_config_enter(spa, RW_READER, FTAG);
+       spa_config_enter(spa, SCL_CONFIG, FTAG, RW_READER);
 
        VERIFY(nvlist_lookup_nvlist(config,
            ZPOOL_CONFIG_VDEV_TREE, &nvroot) == 0);
@@ -1621,7 +1658,7 @@ spa_add_l2cache(spa_t *spa, nvlist_t *config)
                }
        }
 
-       spa_config_exit(spa, FTAG);
+       spa_config_exit(spa, SCL_CONFIG, FTAG);
 }
 
 int
@@ -1637,6 +1674,10 @@ spa_get_stats(const char *name, nvlist_t **config, char *altroot, size_t buflen)
                VERIFY(nvlist_add_uint64(*config, ZPOOL_CONFIG_ERRCOUNT,
                    spa_get_errlog_size(spa)) == 0);
 
+               if (spa_suspended(spa))
+                       VERIFY(nvlist_add_uint64(*config,
+                           ZPOOL_CONFIG_SUSPENDED, spa->spa_failmode) == 0);
+
                spa_add_spares(spa, *config);
                spa_add_l2cache(spa, *config);
        }
@@ -1682,6 +1723,8 @@ spa_validate_aux_devs(spa_t *spa, nvlist_t *nvroot, uint64_t crtxg, int mode,
        vdev_t *vd;
        int error;
 
+       ASSERT(spa_config_held(spa, SCL_ALL, RW_WRITER) == SCL_ALL);
+
        /*
         * It's acceptable to have no devs specified.
         */
@@ -1717,14 +1760,16 @@ spa_validate_aux_devs(spa_t *spa, nvlist_t *nvroot, uint64_t crtxg, int mode,
                }
 
                /*
-                * The L2ARC currently only supports disk devices.
+                * The L2ARC currently only supports disk devices in
+                * kernel context.  For user-level testing, we allow it.
                 */
+#ifdef _KERNEL
                if ((strcmp(config, ZPOOL_CONFIG_L2CACHE) == 0) &&
                    strcmp(vd->vdev_ops->vdev_op_type, VDEV_TYPE_DISK) != 0) {
                        error = ENOTBLK;
                        goto out;
                }
-
+#endif
                vd->vdev_top = vd;
 
                if ((error = vdev_open(vd)) == 0 &&
@@ -1753,6 +1798,8 @@ spa_validate_aux(spa_t *spa, nvlist_t *nvroot, uint64_t crtxg, int mode)
 {
        int error;
 
+       ASSERT(spa_config_held(spa, SCL_ALL, RW_WRITER) == SCL_ALL);
+
        if ((error = spa_validate_aux_devs(spa, nvroot, crtxg, mode,
            &spa->spa_spares, ZPOOL_CONFIG_SPARES, SPA_VERSION_SPARES,
            VDEV_LABEL_SPARE)) != 0) {
@@ -1826,8 +1873,9 @@ spa_l2cache_drop(spa_t *spa)
                vd = sav->sav_vdevs[i];
                ASSERT(vd != NULL);
 
-               if (spa_mode & FWRITE &&
-                   spa_l2cache_exists(vd->vdev_guid, &pool) && pool != 0ULL) {
+               if ((spa_mode & FWRITE) &&
+                   spa_l2cache_exists(vd->vdev_guid, &pool) && pool != 0ULL &&
+                   l2arc_vdev_present(vd)) {
                        l2arc_remove_vdev(vd);
                }
                if (vd->vdev_isl2cache)
@@ -1842,7 +1890,7 @@ spa_l2cache_drop(spa_t *spa)
  */
 int
 spa_create(const char *pool, nvlist_t *nvroot, nvlist_t *props,
-    const char *history_str)
+    const char *history_str, nvlist_t *zplprops)
 {
        spa_t *spa;
        char *altroot = NULL;
@@ -1878,6 +1926,7 @@ spa_create(const char *pool, nvlist_t *nvroot, nvlist_t *props,
                spa_unload(spa);
                spa_deactivate(spa);
                spa_remove(spa);
+               mutex_exit(&spa_namespace_lock);
                return (error);
        }
 
@@ -1891,7 +1940,7 @@ spa_create(const char *pool, nvlist_t *nvroot, nvlist_t *props,
        /*
         * Create the root vdev.
         */
-       spa_config_enter(spa, RW_WRITER, FTAG);
+       spa_config_enter(spa, SCL_ALL, FTAG, RW_WRITER);
 
        error = spa_config_parse(spa, &rvd, nvroot, NULL, 0, VDEV_ALLOC_ADD);
 
@@ -1910,7 +1959,7 @@ spa_create(const char *pool, nvlist_t *nvroot, nvlist_t *props,
                vdev_config_dirty(rvd);
        }
 
-       spa_config_exit(spa, FTAG);
+       spa_config_exit(spa, SCL_ALL, FTAG);
 
        if (error != 0) {
                spa_unload(spa);
@@ -1929,9 +1978,9 @@ spa_create(const char *pool, nvlist_t *nvroot, nvlist_t *props,
                    KM_SLEEP) == 0);
                VERIFY(nvlist_add_nvlist_array(spa->spa_spares.sav_config,
                    ZPOOL_CONFIG_SPARES, spares, nspares) == 0);
-               spa_config_enter(spa, RW_WRITER, FTAG);
+               spa_config_enter(spa, SCL_ALL, FTAG, RW_WRITER);
                spa_load_spares(spa);
-               spa_config_exit(spa, FTAG);
+               spa_config_exit(spa, SCL_ALL, FTAG);
                spa->spa_spares.sav_sync = B_TRUE;
        }
 
@@ -1944,13 +1993,13 @@ spa_create(const char *pool, nvlist_t *nvroot, nvlist_t *props,
                    NV_UNIQUE_NAME, KM_SLEEP) == 0);
                VERIFY(nvlist_add_nvlist_array(spa->spa_l2cache.sav_config,
                    ZPOOL_CONFIG_L2CACHE, l2cache, nl2cache) == 0);
-               spa_config_enter(spa, RW_WRITER, FTAG);
+               spa_config_enter(spa, SCL_ALL, FTAG, RW_WRITER);
                spa_load_l2cache(spa);
-               spa_config_exit(spa, FTAG);
+               spa_config_exit(spa, SCL_ALL, FTAG);
                spa->spa_l2cache.sav_sync = B_TRUE;
        }
 
-       spa->spa_dsl_pool = dp = dsl_pool_create(spa, txg);
+       spa->spa_dsl_pool = dp = dsl_pool_create(spa, zplprops, txg);
        spa->spa_meta_objset = dp->dp_meta_objset;
 
        tx = dmu_tx_create_assigned(dp, txg);
@@ -1959,7 +2008,7 @@ spa_create(const char *pool, nvlist_t *nvroot, nvlist_t *props,
         * Create the pool config object.
         */
        spa->spa_config_object = dmu_object_alloc(spa->spa_meta_objset,
-           DMU_OT_PACKED_NVLIST, 1 << 14,
+           DMU_OT_PACKED_NVLIST, SPA_CONFIG_BLOCKSIZE,
            DMU_OT_PACKED_NVLIST_SIZE, sizeof (uint64_t), tx);
 
        if (zap_add(spa->spa_meta_objset,
@@ -2020,13 +2069,15 @@ spa_create(const char *pool, nvlist_t *nvroot, nvlist_t *props,
         */
        txg_wait_synced(spa->spa_dsl_pool, txg);
 
-       spa_config_sync();
+       spa_config_sync(spa, B_FALSE, B_TRUE);
 
        if (version >= SPA_VERSION_ZPOOL_HISTORY && history_str != NULL)
                (void) spa_history_log(spa, history_str, LOG_CMD_POOL_CREATE);
 
        mutex_exit(&spa_namespace_lock);
 
+       spa->spa_minref = refcount_count(&spa->spa_refcount);
+
        return (0);
 }
 
@@ -2036,23 +2087,32 @@ spa_create(const char *pool, nvlist_t *nvroot, nvlist_t *props,
  */
 static int
 spa_import_common(const char *pool, nvlist_t *config, nvlist_t *props,
-    boolean_t isroot)
+    boolean_t isroot, boolean_t allowfaulted)
 {
        spa_t *spa;
        char *altroot = NULL;
-       int error;
+       int error, loaderr;
        nvlist_t *nvroot;
        nvlist_t **spares, **l2cache;
        uint_t nspares, nl2cache;
-       int mosconfig = isroot? B_FALSE : B_TRUE;
 
        /*
         * If a pool with this name exists, return failure.
         */
        mutex_enter(&spa_namespace_lock);
-       if (spa_lookup(pool) != NULL) {
-               mutex_exit(&spa_namespace_lock);
-               return (EEXIST);
+       if ((spa = spa_lookup(pool)) != NULL) {
+               if (isroot) {
+                       /*
+                        * Remove the existing root pool from the
+                        * namespace so that we can replace it with
+                        * the correct config we just read in.
+                        */
+                       ASSERT(spa->spa_state == POOL_STATE_UNINITIALIZED);
+                       spa_remove(spa);
+               } else {
+                       mutex_exit(&spa_namespace_lock);
+                       return (EEXIST);
+               }
        }
 
        /*
@@ -2063,14 +2123,19 @@ spa_import_common(const char *pool, nvlist_t *config, nvlist_t *props,
        spa = spa_add(pool, altroot);
        spa_activate(spa);
 
+       if (allowfaulted)
+               spa->spa_import_faulted = B_TRUE;
+       spa->spa_is_root = isroot;
+
        /*
         * Pass off the heavy lifting to spa_load().
-        * Pass TRUE for mosconfig because the user-supplied config
-        * is actually the one to trust when doing an import.
+        * Pass TRUE for mosconfig (unless this is a root pool) because
+        * the user-supplied config is actually the one to trust when
+        * doing an import.
         */
-       error = spa_load(spa, config, SPA_LOAD_IMPORT, mosconfig);
+       loaderr = error = spa_load(spa, config, SPA_LOAD_IMPORT, !isroot);
 
-       spa_config_enter(spa, RW_WRITER, FTAG);
+       spa_config_enter(spa, SCL_ALL, FTAG, RW_WRITER);
        /*
         * Toss any existing sparelist, as it doesn't have any validity anymore,
         * and conflicts with spa_has_spare().
@@ -2093,12 +2158,28 @@ spa_import_common(const char *pool, nvlist_t *config, nvlist_t *props,
        if (error == 0)
                error = spa_validate_aux(spa, nvroot, -1ULL,
                    VDEV_ALLOC_L2CACHE);
-       spa_config_exit(spa, FTAG);
+       spa_config_exit(spa, SCL_ALL, FTAG);
 
        if (error != 0 || (props && (error = spa_prop_set(spa, props)))) {
-               spa_unload(spa);
-               spa_deactivate(spa);
-               spa_remove(spa);
+               if (loaderr != 0 && loaderr != EINVAL && allowfaulted) {
+                       /*
+                        * If we failed to load the pool, but 'allowfaulted' is
+                        * set, then manually set the config as if the config
+                        * passed in was specified in the cache file.
+                        */
+                       error = 0;
+                       spa->spa_import_faulted = B_FALSE;
+                       if (spa->spa_config == NULL)
+                               spa->spa_config = spa_config_generate(spa,
+                                   NULL, -1ULL, B_TRUE);
+                       spa_unload(spa);
+                       spa_deactivate(spa);
+                       spa_config_sync(spa, B_FALSE, B_TRUE);
+               } else {
+                       spa_unload(spa);
+                       spa_deactivate(spa);
+                       spa_remove(spa);
+               }
                mutex_exit(&spa_namespace_lock);
                return (error);
        }
@@ -2117,9 +2198,9 @@ spa_import_common(const char *pool, nvlist_t *config, nvlist_t *props,
                            NV_UNIQUE_NAME, KM_SLEEP) == 0);
                VERIFY(nvlist_add_nvlist_array(spa->spa_spares.sav_config,
                    ZPOOL_CONFIG_SPARES, spares, nspares) == 0);
-               spa_config_enter(spa, RW_WRITER, FTAG);
+               spa_config_enter(spa, SCL_ALL, FTAG, RW_WRITER);
                spa_load_spares(spa);
-               spa_config_exit(spa, FTAG);
+               spa_config_exit(spa, SCL_ALL, FTAG);
                spa->spa_spares.sav_sync = B_TRUE;
        }
        if (nvlist_lookup_nvlist_array(nvroot, ZPOOL_CONFIG_L2CACHE,
@@ -2132,24 +2213,20 @@ spa_import_common(const char *pool, nvlist_t *config, nvlist_t *props,
                            NV_UNIQUE_NAME, KM_SLEEP) == 0);
                VERIFY(nvlist_add_nvlist_array(spa->spa_l2cache.sav_config,
                    ZPOOL_CONFIG_L2CACHE, l2cache, nl2cache) == 0);
-               spa_config_enter(spa, RW_WRITER, FTAG);
+               spa_config_enter(spa, SCL_ALL, FTAG, RW_WRITER);
                spa_load_l2cache(spa);
-               spa_config_exit(spa, FTAG);
+               spa_config_exit(spa, SCL_ALL, FTAG);
                spa->spa_l2cache.sav_sync = B_TRUE;
        }
 
-       /*
-        * Update the config cache to include the newly-imported pool.
-        */
-       if (spa_mode & FWRITE)
+       if (spa_mode & FWRITE) {
+               /*
+                * Update the config cache to include the newly-imported pool.
+                */
                spa_config_update_common(spa, SPA_CONFIG_UPDATE_POOL, isroot);
+       }
 
-       /*
-        * Resilver anything that's out of date.
-        */
-       if (!isroot && (spa_mode & FWRITE))
-               VERIFY(spa_scrub(spa, POOL_SCRUB_RESILVER, B_TRUE) == 0);
-
+       spa->spa_import_faulted = B_FALSE;
        mutex_exit(&spa_namespace_lock);
 
        return (0);
@@ -2197,27 +2274,27 @@ spa_build_rootpool_config(nvlist_t *config)
  * Get the root pool information from the root disk, then import the root pool
  * during the system boot up time.
  */
-extern nvlist_t *vdev_disk_read_rootlabel(char *);
+extern int vdev_disk_read_rootlabel(char *, char *, nvlist_t **);
 
-void
-spa_check_rootconf(char *devpath, char **bestdev, nvlist_t **bestconf,
+int
+spa_check_rootconf(char *devpath, char *devid, nvlist_t **bestconf,
     uint64_t *besttxg)
 {
        nvlist_t *config;
        uint64_t txg;
+       int error;
 
-       if ((config = vdev_disk_read_rootlabel(devpath)) == NULL)
-               return;
+       if (error = vdev_disk_read_rootlabel(devpath, devid, &config))
+               return (error);
 
        VERIFY(nvlist_lookup_uint64(config, ZPOOL_CONFIG_POOL_TXG, &txg) == 0);
 
-       if (txg > *besttxg) {
-               *besttxg = txg;
-               if (*bestconf != NULL)
-                       nvlist_free(*bestconf);
+       if (bestconf != NULL)
                *bestconf = config;
-               *bestdev = devpath;
-       }
+       else
+               nvlist_free(config);
+       *besttxg = txg;
+       return (0);
 }
 
 boolean_t
@@ -2227,20 +2304,99 @@ spa_rootdev_validate(nvlist_t *nv)
 
        if (nvlist_lookup_uint64(nv, ZPOOL_CONFIG_OFFLINE, &ival) == 0 ||
            nvlist_lookup_uint64(nv, ZPOOL_CONFIG_FAULTED, &ival) == 0 ||
-           nvlist_lookup_uint64(nv, ZPOOL_CONFIG_DEGRADED, &ival) == 0 ||
            nvlist_lookup_uint64(nv, ZPOOL_CONFIG_REMOVED, &ival) == 0)
                return (B_FALSE);
 
        return (B_TRUE);
 }
 
+
+/*
+ * Given the boot device's physical path or devid, check if the device
+ * is in a valid state.  If so, return the configuration from the vdev
+ * label.
+ */
+int
+spa_get_rootconf(char *devpath, char *devid, nvlist_t **bestconf)
+{
+       nvlist_t *conf = NULL;
+       uint64_t txg = 0;
+       nvlist_t *nvtop, **child;
+       char *type;
+       char *bootpath = NULL;
+       uint_t children, c;
+       char *tmp;
+       int error;
+
+       if (devpath && ((tmp = strchr(devpath, ' ')) != NULL))
+               *tmp = '\0';
+       if (error = spa_check_rootconf(devpath, devid, &conf, &txg)) {
+               cmn_err(CE_NOTE, "error reading device label");
+               return (error);
+       }
+       if (txg == 0) {
+               cmn_err(CE_NOTE, "this device is detached");
+               nvlist_free(conf);
+               return (EINVAL);
+       }
+
+       VERIFY(nvlist_lookup_nvlist(conf, ZPOOL_CONFIG_VDEV_TREE,
+           &nvtop) == 0);
+       VERIFY(nvlist_lookup_string(nvtop, ZPOOL_CONFIG_TYPE, &type) == 0);
+
+       if (strcmp(type, VDEV_TYPE_DISK) == 0) {
+               if (spa_rootdev_validate(nvtop)) {
+                       goto out;
+               } else {
+                       nvlist_free(conf);
+                       return (EINVAL);
+               }
+       }
+
+       ASSERT(strcmp(type, VDEV_TYPE_MIRROR) == 0);
+
+       VERIFY(nvlist_lookup_nvlist_array(nvtop, ZPOOL_CONFIG_CHILDREN,
+           &child, &children) == 0);
+
+       /*
+        * Go thru vdevs in the mirror to see if the given device
+        * has the most recent txg. Only the device with the most
+        * recent txg has valid information and should be booted.
+        */
+       for (c = 0; c < children; c++) {
+               char *cdevid, *cpath;
+               uint64_t tmptxg;
+
+               if (nvlist_lookup_string(child[c], ZPOOL_CONFIG_PHYS_PATH,
+                   &cpath) != 0)
+                       return (EINVAL);
+               if (nvlist_lookup_string(child[c], ZPOOL_CONFIG_DEVID,
+                   &cdevid) != 0)
+                       return (EINVAL);
+               if ((spa_check_rootconf(cpath, cdevid, NULL,
+                   &tmptxg) == 0) && (tmptxg > txg)) {
+                       txg = tmptxg;
+                       VERIFY(nvlist_lookup_string(child[c],
+                           ZPOOL_CONFIG_PATH, &bootpath) == 0);
+               }
+       }
+
+       /* Does the best device match the one we've booted from? */
+       if (bootpath) {
+               cmn_err(CE_NOTE, "try booting from '%s'", bootpath);
+               return (EINVAL);
+       }
+out:
+       *bestconf = conf;
+       return (0);
+}
+
 /*
  * Import a root pool.
  *
- * For x86. devpath_list will consist the physpath name of the vdev in a single
- * disk root pool or a list of physnames for the vdevs in a mirrored rootpool.
- * e.g.
- *     "/pci@1f,0/ide@d/disk@0,0:a /pci@1f,o/ide@d/disk@2,0:a"
+ * For x86. devpath_list will consist of devid and/or physpath name of
+ * the vdev (e.g. "id1,sd@SSEAGATE..." or "/pci@1f,0/ide@d/disk@0,0:a").
+ * The GRUB "findroot" command will return the vdev we should boot.
  *
  * For Sparc, devpath_list consists the physpath name of the booting device
  * no matter the rootpool is a single device pool or a mirrored pool.
@@ -2248,10 +2404,9 @@ spa_rootdev_validate(nvlist_t *nv)
  *     "/pci@1f,0/ide@d/disk@0,0:a"
  */
 int
-spa_import_rootpool(char *devpath_list)
+spa_import_rootpool(char *devpath, char *devid)
 {
        nvlist_t *conf = NULL;
-       char *dev = NULL;
        char *pname;
        int error;
 
@@ -2259,7 +2414,7 @@ spa_import_rootpool(char *devpath_list)
         * Get the vdev pathname and configuation from the most
         * recently updated vdev (highest txg).
         */
-       if (error = spa_get_rootconf(devpath_list, &dev, &conf))
+       if (error = spa_get_rootconf(devpath, devid, &conf))
                goto msg_out;
 
        /*
@@ -2269,20 +2424,25 @@ spa_import_rootpool(char *devpath_list)
 
        VERIFY(nvlist_lookup_string(conf, ZPOOL_CONFIG_POOL_NAME, &pname) == 0);
 
-       error = spa_import_common(pname, conf, NULL, TRUE);
-       if (error == EEXIST)
-               error = 0;
+       /*
+        * We specify 'allowfaulted' for this to be treated like spa_open()
+        * instead of spa_import().  This prevents us from marking vdevs as
+        * persistently unavailable, and generates FMA ereports as if it were a
+        * pool open, not import.
+        */
+       error = spa_import_common(pname, conf, NULL, B_TRUE, B_TRUE);
+       ASSERT(error != EEXIST);
 
        nvlist_free(conf);
        return (error);
 
 msg_out:
-       cmn_err(CE_NOTE, "\n\n"
+       cmn_err(CE_NOTE, "\n"
            "  ***************************************************  \n"
            "  *  This device is not bootable!                   *  \n"
            "  *  It is either offlined or detached or faulted.  *  \n"
            "  *  Please try to boot from a different device.    *  \n"
-           "  ***************************************************  \n\n");
+           "  ***************************************************  ");
 
        return (error);
 }
@@ -2294,9 +2454,16 @@ msg_out:
 int
 spa_import(const char *pool, nvlist_t *config, nvlist_t *props)
 {
-       return (spa_import_common(pool, config, props, FALSE));
+       return (spa_import_common(pool, config, props, B_FALSE, B_FALSE));
 }
 
+int
+spa_import_faulted(const char *pool, nvlist_t *config, nvlist_t *props)
+{
+       return (spa_import_common(pool, config, props, B_FALSE, B_TRUE));
+}
+
+
 /*
  * This (illegal) pool name is used when temporarily importing a spa_t in order
  * to get the vdev stats associated with the imported devices.
@@ -2335,9 +2502,7 @@ spa_tryimport(nvlist_t *tryconfig)
         * If 'tryconfig' was at least parsable, return the current config.
         */
        if (spa->spa_root_vdev != NULL) {
-               spa_config_enter(spa, RW_READER, FTAG);
                config = spa_config_generate(spa, NULL, -1ULL, B_TRUE);
-               spa_config_exit(spa, FTAG);
                VERIFY(nvlist_add_string(config, ZPOOL_CONFIG_POOL_NAME,
                    poolname) == 0);
                VERIFY(nvlist_add_uint64(config, ZPOOL_CONFIG_POOL_STATE,
@@ -2357,7 +2522,7 @@ spa_tryimport(nvlist_t *tryconfig)
                         * We have to play games with the name since the
                         * pool was opened as TRYIMPORT_NAME.
                         */
-                       if (dsl_dsobj_to_dsname(spa->spa_name,
+                       if (dsl_dsobj_to_dsname(spa_name(spa),
                            spa->spa_bootfs, tmpname) == 0) {
                                char *cp;
                                char *dsname = kmem_alloc(MAXPATHLEN, KM_SLEEP);
@@ -2401,7 +2566,8 @@ spa_tryimport(nvlist_t *tryconfig)
  * configuration from the cache afterwards.
  */
 static int
-spa_export_common(char *pool, int new_state, nvlist_t **oldconfig)
+spa_export_common(char *pool, int new_state, nvlist_t **oldconfig,
+    boolean_t force)
 {
        spa_t *spa;
 
@@ -2436,7 +2602,6 @@ spa_export_common(char *pool, int new_state, nvlist_t **oldconfig)
                 * Objsets may be open only because they're dirty, so we
                 * have to force it to sync before checking spa_refcnt.
                 */
-               spa_scrub_suspend(spa);
                txg_wait_synced(spa->spa_dsl_pool, 0);
 
                /*
@@ -2447,14 +2612,23 @@ spa_export_common(char *pool, int new_state, nvlist_t **oldconfig)
                if (!spa_refcount_zero(spa) ||
                    (spa->spa_inject_ref != 0 &&
                    new_state != POOL_STATE_UNINITIALIZED)) {
-                       spa_scrub_resume(spa);
                        spa_async_resume(spa);
                        mutex_exit(&spa_namespace_lock);
                        return (EBUSY);
                }
 
-               spa_scrub_resume(spa);
-               VERIFY(spa_scrub(spa, POOL_SCRUB_NONE, B_TRUE) == 0);
+               /*
+                * A pool cannot be exported if it has an active shared spare.
+                * This is to prevent other pools stealing the active spare
+                * from an exported pool. At user's own will, such pool can
+                * be forcedly exported.
+                */
+               if (!force && new_state == POOL_STATE_EXPORTED &&
+                   spa_has_active_shared_spare(spa)) {
+                       spa_async_resume(spa);
+                       mutex_exit(&spa_namespace_lock);
+                       return (EXDEV);
+               }
 
                /*
                 * We want this to be reflected on every label,
@@ -2462,11 +2636,11 @@ spa_export_common(char *pool, int new_state, nvlist_t **oldconfig)
                 * final sync that pushes these changes out.
                 */
                if (new_state != POOL_STATE_UNINITIALIZED) {
-                       spa_config_enter(spa, RW_WRITER, FTAG);
+                       spa_config_enter(spa, SCL_ALL, FTAG, RW_WRITER);
                        spa->spa_state = new_state;
                        spa->spa_final_txg = spa_last_synced_txg(spa) + 1;
                        vdev_config_dirty(spa->spa_root_vdev);
-                       spa_config_exit(spa, FTAG);
+                       spa_config_exit(spa, SCL_ALL, FTAG);
                }
        }
 
@@ -2481,10 +2655,8 @@ spa_export_common(char *pool, int new_state, nvlist_t **oldconfig)
                VERIFY(nvlist_dup(spa->spa_config, oldconfig, 0) == 0);
 
        if (new_state != POOL_STATE_UNINITIALIZED) {
-               spa_config_check(spa->spa_config_dir,
-                   spa->spa_config_file);
+               spa_config_sync(spa, B_TRUE, B_TRUE);
                spa_remove(spa);
-               spa_config_sync();
        }
        mutex_exit(&spa_namespace_lock);
 
@@ -2497,16 +2669,16 @@ spa_export_common(char *pool, int new_state, nvlist_t **oldconfig)
 int
 spa_destroy(char *pool)
 {
-       return (spa_export_common(pool, POOL_STATE_DESTROYED, NULL));
+       return (spa_export_common(pool, POOL_STATE_DESTROYED, NULL, B_FALSE));
 }
 
 /*
  * Export a storage pool.
  */
 int
-spa_export(char *pool, nvlist_t **oldconfig)
+spa_export(char *pool, nvlist_t **oldconfig, boolean_t force)
 {
-       return (spa_export_common(pool, POOL_STATE_EXPORTED, oldconfig));
+       return (spa_export_common(pool, POOL_STATE_EXPORTED, oldconfig, force));
 }
 
 /*
@@ -2516,10 +2688,10 @@ spa_export(char *pool, nvlist_t **oldconfig)
 int
 spa_reset(char *pool)
 {
-       return (spa_export_common(pool, POOL_STATE_UNINITIALIZED, NULL));
+       return (spa_export_common(pool, POOL_STATE_UNINITIALIZED, NULL,
+           B_FALSE));
 }
 
-
 /*
  * ==========================================================================
  * Device manipulation
@@ -2545,7 +2717,7 @@ spa_vdev_add(spa_t *spa, nvlist_t *nvroot)
            VDEV_ALLOC_ADD)) != 0)
                return (spa_vdev_exit(spa, NULL, txg, error));
 
-       spa->spa_pending_vdev = vd;
+       spa->spa_pending_vdev = vd;     /* spa_vdev_exit() will clear this */
 
        if (nvlist_lookup_nvlist_array(nvroot, ZPOOL_CONFIG_SPARES, &spares,
            &nspares) != 0)
@@ -2555,28 +2727,19 @@ spa_vdev_add(spa_t *spa, nvlist_t *nvroot)
            &nl2cache) != 0)
                nl2cache = 0;
 
-       if (vd->vdev_children == 0 && nspares == 0 && nl2cache == 0) {
-               spa->spa_pending_vdev = NULL;
+       if (vd->vdev_children == 0 && nspares == 0 && nl2cache == 0)
                return (spa_vdev_exit(spa, vd, txg, EINVAL));
-       }
 
-       if (vd->vdev_children != 0) {
-               if ((error = vdev_create(vd, txg, B_FALSE)) != 0) {
-                       spa->spa_pending_vdev = NULL;
-                       return (spa_vdev_exit(spa, vd, txg, error));
-               }
-       }
+       if (vd->vdev_children != 0 &&
+           (error = vdev_create(vd, txg, B_FALSE)) != 0)
+               return (spa_vdev_exit(spa, vd, txg, error));
 
        /*
         * We must validate the spares and l2cache devices after checking the
         * children.  Otherwise, vdev_inuse() will blindly overwrite the spare.
         */
-       if ((error = spa_validate_aux(spa, nvroot, txg, VDEV_ALLOC_ADD)) != 0) {
-               spa->spa_pending_vdev = NULL;
+       if ((error = spa_validate_aux(spa, nvroot, txg, VDEV_ALLOC_ADD)) != 0)
                return (spa_vdev_exit(spa, vd, txg, error));
-       }
-
-       spa->spa_pending_vdev = NULL;
 
        /*
         * Transfer each new top-level vdev from vd to rvd.
@@ -2642,15 +2805,17 @@ int
 spa_vdev_attach(spa_t *spa, uint64_t guid, nvlist_t *nvroot, int replacing)
 {
        uint64_t txg, open_txg;
-       int error;
        vdev_t *rvd = spa->spa_root_vdev;
        vdev_t *oldvd, *newvd, *newrootvd, *pvd, *tvd;
        vdev_ops_t *pvops;
-       int is_log;
+       dmu_tx_t *tx;
+       char *oldvdpath, *newvdpath;
+       int newvd_isspare;
+       int error;
 
        txg = spa_vdev_enter(spa);
 
-       oldvd = vdev_lookup_by_guid(rvd, guid);
+       oldvd = spa_lookup_by_guid(spa, guid, B_FALSE);
 
        if (oldvd == NULL)
                return (spa_vdev_exit(spa, NULL, txg, ENODEV));
@@ -2678,8 +2843,7 @@ spa_vdev_attach(spa_t *spa, uint64_t guid, nvlist_t *nvroot, int replacing)
        /*
         * Spares can't replace logs
         */
-       is_log = oldvd->vdev_islog;
-       if (is_log && newvd->vdev_isspare)
+       if (oldvd->vdev_top->vdev_islog && newvd->vdev_isspare)
                return (spa_vdev_exit(spa, newrootvd, txg, ENOTSUP));
 
        if (!replacing) {
@@ -2795,6 +2959,9 @@ spa_vdev_attach(spa_t *spa, uint64_t guid, nvlist_t *nvroot, int replacing)
 
        if (newvd->vdev_isspare)
                spa_spare_activate(newvd);
+       oldvdpath = spa_strdup(oldvd->vdev_path);
+       newvdpath = spa_strdup(newvd->vdev_path);
+       newvd_isspare = newvd->vdev_isspare;
 
        /*
         * Mark newvd's DTL dirty in this txg.
@@ -2803,13 +2970,25 @@ spa_vdev_attach(spa_t *spa, uint64_t guid, nvlist_t *nvroot, int replacing)
 
        (void) spa_vdev_exit(spa, newrootvd, open_txg, 0);
 
+       tx = dmu_tx_create_dd(spa_get_dsl(spa)->dp_mos_dir);
+       if (dmu_tx_assign(tx, TXG_WAIT) == 0) {
+               spa_history_internal_log(LOG_POOL_VDEV_ATTACH, spa, tx,
+                   CRED(),  "%s vdev=%s %s vdev=%s",
+                   replacing && newvd_isspare ? "spare in" :
+                   replacing ? "replace" : "attach", newvdpath,
+                   replacing ? "for" : "to", oldvdpath);
+               dmu_tx_commit(tx);
+       } else {
+               dmu_tx_abort(tx);
+       }
+
+       spa_strfree(oldvdpath);
+       spa_strfree(newvdpath);
+
        /*
-        * Kick off a resilver to update newvd.  We need to grab the namespace
-        * lock because spa_scrub() needs to post a sysevent with the pool name.
+        * Kick off a resilver to update newvd.
         */
-       mutex_enter(&spa_namespace_lock);
-       VERIFY(spa_scrub(spa, POOL_SCRUB_RESILVER, B_TRUE) == 0);
-       mutex_exit(&spa_namespace_lock);
+       VERIFY3U(spa_scrub(spa, POOL_SCRUB_RESILVER), ==, 0);
 
        return (0);
 }
@@ -2828,10 +3007,11 @@ spa_vdev_detach(spa_t *spa, uint64_t guid, int replace_done)
        vdev_t *vd, *pvd, *cvd, *tvd;
        boolean_t unspare = B_FALSE;
        uint64_t unspare_guid;
+       size_t len;
 
        txg = spa_vdev_enter(spa);
 
-       vd = vdev_lookup_by_guid(rvd, guid);
+       vd = spa_lookup_by_guid(spa, guid, B_FALSE);
 
        if (vd == NULL)
                return (spa_vdev_exit(spa, NULL, txg, ENODEV));
@@ -2895,15 +3075,28 @@ spa_vdev_detach(spa_t *spa, uint64_t guid, int replace_done)
                        break;
        }
 
-       /*
-        * If we are a replacing or spare vdev, then we can always detach the
-        * latter child, as that is how one cancels the operation.
-        */
-       if ((pvd->vdev_ops == &vdev_mirror_ops || vd->vdev_id != 1) &&
-           c == pvd->vdev_children)
+       if (c == pvd->vdev_children)
                return (spa_vdev_exit(spa, NULL, txg, EBUSY));
 
        /*
+        * If we are detaching the second disk from a replacing vdev, then
+        * check to see if we changed the original vdev's path to have "/old"
+        * at the end in spa_vdev_attach().  If so, undo that change now.
+        */
+       if (pvd->vdev_ops == &vdev_replacing_ops && vd->vdev_id == 1 &&
+           pvd->vdev_child[0]->vdev_path != NULL &&
+           pvd->vdev_child[1]->vdev_path != NULL) {
+               ASSERT(pvd->vdev_child[1] == vd);
+               cvd = pvd->vdev_child[0];
+               len = strlen(vd->vdev_path);
+               if (strncmp(cvd->vdev_path, vd->vdev_path, len) == 0 &&
+                   strcmp(cvd->vdev_path + len, "/old") == 0) {
+                       spa_strfree(cvd->vdev_path);
+                       cvd->vdev_path = spa_strdup(vd->vdev_path);
+               }
+       }
+
+       /*
         * If we are detaching the original disk from a spare, then it implies
         * that the spare should become a real disk, and be removed from the
         * active spare list for the pool.
@@ -3000,8 +3193,11 @@ spa_vdev_detach(spa_t *spa, uint64_t guid, int replace_done)
                while ((spa = spa_next(spa)) != NULL) {
                        if (spa->spa_state != POOL_STATE_ACTIVE)
                                continue;
-
+                       spa_open_ref(spa, FTAG);
+                       mutex_exit(&spa_namespace_lock);
                        (void) spa_vdev_remove(spa, unspare_guid, B_TRUE);
+                       mutex_enter(&spa_namespace_lock);
+                       spa_close(spa, FTAG);
                }
                mutex_exit(&spa_namespace_lock);
        }
@@ -3009,121 +3205,45 @@ spa_vdev_detach(spa_t *spa, uint64_t guid, int replace_done)
        return (error);
 }
 
-/*
- * Remove a spares vdev from the nvlist config.
- */
-static int
-spa_remove_spares(spa_aux_vdev_t *sav, uint64_t guid, boolean_t unspare,
-    nvlist_t **spares, int nspares, vdev_t *vd)
+static nvlist_t *
+spa_nvlist_lookup_by_guid(nvlist_t **nvpp, int count, uint64_t target_guid)
 {
-       nvlist_t *nv, **newspares;
-       int i, j;
+       for (int i = 0; i < count; i++) {
+               uint64_t guid;
 
-       nv = NULL;
-       for (i = 0; i < nspares; i++) {
-               uint64_t theguid;
-
-               VERIFY(nvlist_lookup_uint64(spares[i],
-                   ZPOOL_CONFIG_GUID, &theguid) == 0);
-               if (theguid == guid) {
-                       nv = spares[i];
-                       break;
-               }
-       }
-
-       /*
-        * Only remove the hot spare if it's not currently in use in this pool.
-        */
-       if (nv == NULL && vd == NULL)
-               return (ENOENT);
-
-       if (nv == NULL && vd != NULL)
-               return (ENOTSUP);
-
-       if (!unspare && nv != NULL && vd != NULL)
-               return (EBUSY);
+               VERIFY(nvlist_lookup_uint64(nvpp[i], ZPOOL_CONFIG_GUID,
+                   &guid) == 0);
 
-       if (nspares == 1) {
-               newspares = NULL;
-       } else {
-               newspares = kmem_alloc((nspares - 1) * sizeof (void *),
-                   KM_SLEEP);
-               for (i = 0, j = 0; i < nspares; i++) {
-                       if (spares[i] != nv)
-                               VERIFY(nvlist_dup(spares[i],
-                                   &newspares[j++], KM_SLEEP) == 0);
-               }
+               if (guid == target_guid)
+                       return (nvpp[i]);
        }
 
-       VERIFY(nvlist_remove(sav->sav_config, ZPOOL_CONFIG_SPARES,
-           DATA_TYPE_NVLIST_ARRAY) == 0);
-       VERIFY(nvlist_add_nvlist_array(sav->sav_config,
-           ZPOOL_CONFIG_SPARES, newspares, nspares - 1) == 0);
-       for (i = 0; i < nspares - 1; i++)
-               nvlist_free(newspares[i]);
-       kmem_free(newspares, (nspares - 1) * sizeof (void *));
-
-       return (0);
+       return (NULL);
 }
 
-/*
- * Remove an l2cache vdev from the nvlist config.
- */
-static int
-spa_remove_l2cache(spa_aux_vdev_t *sav, uint64_t guid, nvlist_t **l2cache,
-    int nl2cache, vdev_t *vd)
+static void
+spa_vdev_remove_aux(nvlist_t *config, char *name, nvlist_t **dev, int count,
+       nvlist_t *dev_to_remove)
 {
-       nvlist_t *nv, **newl2cache;
-       int i, j;
-
-       nv = NULL;
-       for (i = 0; i < nl2cache; i++) {
-               uint64_t theguid;
+       nvlist_t **newdev = NULL;
 
-               VERIFY(nvlist_lookup_uint64(l2cache[i],
-                   ZPOOL_CONFIG_GUID, &theguid) == 0);
-               if (theguid == guid) {
-                       nv = l2cache[i];
-                       break;
-               }
-       }
+       if (count > 1)
+               newdev = kmem_alloc((count - 1) * sizeof (void *), KM_SLEEP);
 
-       if (vd == NULL) {
-               for (i = 0; i < nl2cache; i++) {
-                       if (sav->sav_vdevs[i]->vdev_guid == guid) {
-                               vd = sav->sav_vdevs[i];
-                               break;
-                       }
-               }
+       for (int i = 0, j = 0; i < count; i++) {
+               if (dev[i] == dev_to_remove)
+                       continue;
+               VERIFY(nvlist_dup(dev[i], &newdev[j++], KM_SLEEP) == 0);
        }
 
-       if (nv == NULL && vd == NULL)
-               return (ENOENT);
-
-       if (nv == NULL && vd != NULL)
-               return (ENOTSUP);
-
-       if (nl2cache == 1) {
-               newl2cache = NULL;
-       } else {
-               newl2cache = kmem_alloc((nl2cache - 1) * sizeof (void *),
-                   KM_SLEEP);
-               for (i = 0, j = 0; i < nl2cache; i++) {
-                       if (l2cache[i] != nv)
-                               VERIFY(nvlist_dup(l2cache[i],
-                                   &newl2cache[j++], KM_SLEEP) == 0);
-               }
-       }
+       VERIFY(nvlist_remove(config, name, DATA_TYPE_NVLIST_ARRAY) == 0);
+       VERIFY(nvlist_add_nvlist_array(config, name, newdev, count - 1) == 0);
 
-       VERIFY(nvlist_remove(sav->sav_config, ZPOOL_CONFIG_L2CACHE,
-           DATA_TYPE_NVLIST_ARRAY) == 0);
-       VERIFY(nvlist_add_nvlist_array(sav->sav_config,
-           ZPOOL_CONFIG_L2CACHE, newl2cache, nl2cache - 1) == 0);
-       for (i = 0; i < nl2cache - 1; i++)
-               nvlist_free(newl2cache[i]);
-       kmem_free(newl2cache, (nl2cache - 1) * sizeof (void *));
+       for (int i = 0; i < count - 1; i++)
+               nvlist_free(newdev[i]);
 
-       return (0);
+       if (count > 1)
+               kmem_free(newdev, (count - 1) * sizeof (void *));
 }
 
 /*
@@ -3134,40 +3254,55 @@ int
 spa_vdev_remove(spa_t *spa, uint64_t guid, boolean_t unspare)
 {
        vdev_t *vd;
-       nvlist_t **spares, **l2cache;
+       nvlist_t **spares, **l2cache, *nv;
        uint_t nspares, nl2cache;
+       uint64_t txg;
        int error = 0;
 
-       spa_config_enter(spa, RW_WRITER, FTAG);
+       txg = spa_vdev_enter(spa);
 
-       vd = spa_lookup_by_guid(spa, guid);
+       vd = spa_lookup_by_guid(spa, guid, B_FALSE);
 
        if (spa->spa_spares.sav_vdevs != NULL &&
-           spa_spare_exists(guid, NULL) &&
            nvlist_lookup_nvlist_array(spa->spa_spares.sav_config,
-           ZPOOL_CONFIG_SPARES, &spares, &nspares) == 0) {
-               if ((error = spa_remove_spares(&spa->spa_spares, guid, unspare,
-                   spares, nspares, vd)) != 0)
-                       goto out;
-               spa_load_spares(spa);
-               spa->spa_spares.sav_sync = B_TRUE;
-               goto out;
-       }
-
-       if (spa->spa_l2cache.sav_vdevs != NULL &&
-           spa_l2cache_exists(guid, NULL) &&
+           ZPOOL_CONFIG_SPARES, &spares, &nspares) == 0 &&
+           (nv = spa_nvlist_lookup_by_guid(spares, nspares, guid)) != NULL) {
+               /*
+                * Only remove the hot spare if it's not currently in use
+                * in this pool.
+                */
+               if (vd == NULL || unspare) {
+                       spa_vdev_remove_aux(spa->spa_spares.sav_config,
+                           ZPOOL_CONFIG_SPARES, spares, nspares, nv);
+                       spa_load_spares(spa);
+                       spa->spa_spares.sav_sync = B_TRUE;
+               } else {
+                       error = EBUSY;
+               }
+       } else if (spa->spa_l2cache.sav_vdevs != NULL &&
            nvlist_lookup_nvlist_array(spa->spa_l2cache.sav_config,
-           ZPOOL_CONFIG_L2CACHE, &l2cache, &nl2cache) == 0) {
-               if ((error = spa_remove_l2cache(&spa->spa_l2cache, guid,
-                   l2cache, nl2cache, vd)) != 0)
-                       goto out;
+           ZPOOL_CONFIG_L2CACHE, &l2cache, &nl2cache) == 0 &&
+           (nv = spa_nvlist_lookup_by_guid(l2cache, nl2cache, guid)) != NULL) {
+               /*
+                * Cache devices can always be removed.
+                */
+               spa_vdev_remove_aux(spa->spa_l2cache.sav_config,
+                   ZPOOL_CONFIG_L2CACHE, l2cache, nl2cache, nv);
                spa_load_l2cache(spa);
                spa->spa_l2cache.sav_sync = B_TRUE;
+       } else if (vd != NULL) {
+               /*
+                * Normal vdevs cannot be removed (yet).
+                */
+               error = ENOTSUP;
+       } else {
+               /*
+                * There is no vdev of any kind with the specified guid.
+                */
+               error = ENOENT;
        }
 
-out:
-       spa_config_exit(spa, FTAG);
-       return (error);
+       return (spa_vdev_exit(spa, NULL, txg, error));
 }
 
 /*
@@ -3231,7 +3366,7 @@ spa_vdev_resilver_done(spa_t *spa)
        uint64_t guid;
        uint64_t pguid = 0;
 
-       spa_config_enter(spa, RW_READER, FTAG);
+       spa_config_enter(spa, SCL_CONFIG, FTAG, RW_READER);
 
        while ((vd = spa_vdev_resilver_done_hunt(spa->spa_root_vdev)) != NULL) {
                guid = vd->vdev_guid;
@@ -3247,15 +3382,15 @@ spa_vdev_resilver_done(spa_t *spa)
                        ASSERT(pvd->vdev_parent->vdev_children == 2);
                        pguid = pvd->vdev_parent->vdev_child[1]->vdev_guid;
                }
-               spa_config_exit(spa, FTAG);
+               spa_config_exit(spa, SCL_CONFIG, FTAG);
                if (spa_vdev_detach(spa, guid, B_TRUE) != 0)
                        return;
                if (pguid != 0 && spa_vdev_detach(spa, pguid, B_TRUE) != 0)
                        return;
-               spa_config_enter(spa, RW_READER, FTAG);
+               spa_config_enter(spa, SCL_CONFIG, FTAG, RW_READER);
        }
 
-       spa_config_exit(spa, FTAG);
+       spa_config_exit(spa, SCL_CONFIG, FTAG);
 }
 
 /*
@@ -3265,21 +3400,19 @@ spa_vdev_resilver_done(spa_t *spa)
 int
 spa_vdev_setpath(spa_t *spa, uint64_t guid, const char *newpath)
 {
-       vdev_t *rvd, *vd;
+       vdev_t *vd;
        uint64_t txg;
 
-       rvd = spa->spa_root_vdev;
-
        txg = spa_vdev_enter(spa);
 
-       if ((vd = vdev_lookup_by_guid(rvd, guid)) == NULL) {
+       if ((vd = spa_lookup_by_guid(spa, guid, B_TRUE)) == NULL) {
                /*
-                * Determine if this is a reference to a hot spare or l2cache
-                * device.  If it is, update the path as stored in their
-                * device list.
+                * Determine if this is a reference to a hot spare device.  If
+                * it is, update the path manually as there is no associated
+                * vdev_t that can be synced to disk.
                 */
-               nvlist_t **spares, **l2cache;
-               uint_t i, nspares, nl2cache;
+               nvlist_t **spares;
+               uint_t i, nspares;
 
                if (spa->spa_spares.sav_config != NULL) {
                        VERIFY(nvlist_lookup_nvlist_array(
@@ -3300,25 +3433,6 @@ spa_vdev_setpath(spa_t *spa, uint64_t guid, const char *newpath)
                        }
                }
 
-               if (spa->spa_l2cache.sav_config != NULL) {
-                       VERIFY(nvlist_lookup_nvlist_array(
-                           spa->spa_l2cache.sav_config, ZPOOL_CONFIG_L2CACHE,
-                           &l2cache, &nl2cache) == 0);
-                       for (i = 0; i < nl2cache; i++) {
-                               uint64_t theguid;
-                               VERIFY(nvlist_lookup_uint64(l2cache[i],
-                                   ZPOOL_CONFIG_GUID, &theguid) == 0);
-                               if (theguid == guid) {
-                                       VERIFY(nvlist_add_string(l2cache[i],
-                                           ZPOOL_CONFIG_PATH, newpath) == 0);
-                                       spa_load_l2cache(spa);
-                                       spa->spa_l2cache.sav_sync = B_TRUE;
-                                       return (spa_vdev_exit(spa, NULL, txg,
-                                           0));
-                               }
-                       }
-               }
-
                return (spa_vdev_exit(spa, NULL, txg, ENOENT));
        }
 
@@ -3339,404 +3453,36 @@ spa_vdev_setpath(spa_t *spa, uint64_t guid, const char *newpath)
  * ==========================================================================
  */
 
-static void
-spa_scrub_io_done(zio_t *zio)
-{
-       spa_t *spa = zio->io_spa;
-
-       arc_data_buf_free(zio->io_data, zio->io_size);
-
-       mutex_enter(&spa->spa_scrub_lock);
-       if (zio->io_error && !(zio->io_flags & ZIO_FLAG_SPECULATIVE)) {
-               vdev_t *vd = zio->io_vd ? zio->io_vd : spa->spa_root_vdev;
-               spa->spa_scrub_errors++;
-               mutex_enter(&vd->vdev_stat_lock);
-               vd->vdev_stat.vs_scrub_errors++;
-               mutex_exit(&vd->vdev_stat_lock);
-       }
-
-       if (--spa->spa_scrub_inflight < spa->spa_scrub_maxinflight)
-               cv_broadcast(&spa->spa_scrub_io_cv);
-
-       ASSERT(spa->spa_scrub_inflight >= 0);
-
-       mutex_exit(&spa->spa_scrub_lock);
-}
-
-static void
-spa_scrub_io_start(spa_t *spa, blkptr_t *bp, int priority, int flags,
-    zbookmark_t *zb)
-{
-       size_t size = BP_GET_LSIZE(bp);
-       void *data;
-
-       mutex_enter(&spa->spa_scrub_lock);
-       /*
-        * Do not give too much work to vdev(s).
-        */
-       while (spa->spa_scrub_inflight >= spa->spa_scrub_maxinflight) {
-               cv_wait(&spa->spa_scrub_io_cv, &spa->spa_scrub_lock);
-       }
-       spa->spa_scrub_inflight++;
-       mutex_exit(&spa->spa_scrub_lock);
-
-       data = arc_data_buf_alloc(size);
-
-       if (zb->zb_level == -1 && BP_GET_TYPE(bp) != DMU_OT_OBJSET)
-               flags |= ZIO_FLAG_SPECULATIVE;  /* intent log block */
-
-       flags |= ZIO_FLAG_SCRUB_THREAD | ZIO_FLAG_CANFAIL;
-
-       zio_nowait(zio_read(NULL, spa, bp, data, size,
-           spa_scrub_io_done, NULL, priority, flags, zb));
-}
-
-/* ARGSUSED */
-static int
-spa_scrub_cb(traverse_blk_cache_t *bc, spa_t *spa, void *a)
-{
-       blkptr_t *bp = &bc->bc_blkptr;
-       vdev_t *vd = spa->spa_root_vdev;
-       dva_t *dva = bp->blk_dva;
-       int needs_resilver = B_FALSE;
-       int d;
-
-       if (bc->bc_errno) {
-               /*
-                * We can't scrub this block, but we can continue to scrub
-                * the rest of the pool.  Note the error and move along.
-                */
-               mutex_enter(&spa->spa_scrub_lock);
-               spa->spa_scrub_errors++;
-               mutex_exit(&spa->spa_scrub_lock);
-
-               mutex_enter(&vd->vdev_stat_lock);
-               vd->vdev_stat.vs_scrub_errors++;
-               mutex_exit(&vd->vdev_stat_lock);
-
-               return (ERESTART);
-       }
-
-       ASSERT(bp->blk_birth < spa->spa_scrub_maxtxg);
-
-       for (d = 0; d < BP_GET_NDVAS(bp); d++) {
-               vd = vdev_lookup_top(spa, DVA_GET_VDEV(&dva[d]));
-
-               ASSERT(vd != NULL);
-
-               /*
-                * Keep track of how much data we've examined so that
-                * zpool(1M) status can make useful progress reports.
-                */
-               mutex_enter(&vd->vdev_stat_lock);
-               vd->vdev_stat.vs_scrub_examined += DVA_GET_ASIZE(&dva[d]);
-               mutex_exit(&vd->vdev_stat_lock);
-
-               if (spa->spa_scrub_type == POOL_SCRUB_RESILVER) {
-                       if (DVA_GET_GANG(&dva[d])) {
-                               /*
-                                * Gang members may be spread across multiple
-                                * vdevs, so the best we can do is look at the
-                                * pool-wide DTL.
-                                * XXX -- it would be better to change our
-                                * allocation policy to ensure that this can't
-                                * happen.
-                                */
-                               vd = spa->spa_root_vdev;
-                       }
-                       if (vdev_dtl_contains(&vd->vdev_dtl_map,
-                           bp->blk_birth, 1))
-                               needs_resilver = B_TRUE;
-               }
-       }
-
-       if (spa->spa_scrub_type == POOL_SCRUB_EVERYTHING)
-               spa_scrub_io_start(spa, bp, ZIO_PRIORITY_SCRUB,
-                   ZIO_FLAG_SCRUB, &bc->bc_bookmark);
-       else if (needs_resilver)
-               spa_scrub_io_start(spa, bp, ZIO_PRIORITY_RESILVER,
-                   ZIO_FLAG_RESILVER, &bc->bc_bookmark);
-
-       return (0);
-}
-
-static void
-spa_scrub_thread(spa_t *spa)
-{
-       callb_cpr_t cprinfo;
-       traverse_handle_t *th = spa->spa_scrub_th;
-       vdev_t *rvd = spa->spa_root_vdev;
-       pool_scrub_type_t scrub_type = spa->spa_scrub_type;
-       int error = 0;
-       boolean_t complete;
-
-       CALLB_CPR_INIT(&cprinfo, &spa->spa_scrub_lock, callb_generic_cpr, FTAG);
-
-       /*
-        * If we're restarting due to a snapshot create/delete,
-        * wait for that to complete.
-        */
-       txg_wait_synced(spa_get_dsl(spa), 0);
-
-       dprintf("start %s mintxg=%llu maxtxg=%llu\n",
-           scrub_type == POOL_SCRUB_RESILVER ? "resilver" : "scrub",
-           spa->spa_scrub_mintxg, spa->spa_scrub_maxtxg);
-
-       spa_config_enter(spa, RW_WRITER, FTAG);
-       vdev_reopen(rvd);               /* purge all vdev caches */
-       vdev_config_dirty(rvd);         /* rewrite all disk labels */
-       vdev_scrub_stat_update(rvd, scrub_type, B_FALSE);
-       spa_config_exit(spa, FTAG);
-
-       mutex_enter(&spa->spa_scrub_lock);
-       spa->spa_scrub_errors = 0;
-       spa->spa_scrub_active = 1;
-       ASSERT(spa->spa_scrub_inflight == 0);
-
-       while (!spa->spa_scrub_stop) {
-               CALLB_CPR_SAFE_BEGIN(&cprinfo);
-               while (spa->spa_scrub_suspended) {
-                       spa->spa_scrub_active = 0;
-                       cv_broadcast(&spa->spa_scrub_cv);
-                       cv_wait(&spa->spa_scrub_cv, &spa->spa_scrub_lock);
-                       spa->spa_scrub_active = 1;
-               }
-               CALLB_CPR_SAFE_END(&cprinfo, &spa->spa_scrub_lock);
-
-               if (spa->spa_scrub_restart_txg != 0)
-                       break;
-
-               mutex_exit(&spa->spa_scrub_lock);
-               error = traverse_more(th);
-               mutex_enter(&spa->spa_scrub_lock);
-               if (error != EAGAIN)
-                       break;
-       }
-
-       while (spa->spa_scrub_inflight)
-               cv_wait(&spa->spa_scrub_io_cv, &spa->spa_scrub_lock);
-
-       spa->spa_scrub_active = 0;
-       cv_broadcast(&spa->spa_scrub_cv);
-
-       mutex_exit(&spa->spa_scrub_lock);
-
-       spa_config_enter(spa, RW_WRITER, FTAG);
-
-       mutex_enter(&spa->spa_scrub_lock);
-
-       /*
-        * Note: we check spa_scrub_restart_txg under both spa_scrub_lock
-        * AND the spa config lock to synchronize with any config changes
-        * that revise the DTLs under spa_vdev_enter() / spa_vdev_exit().
-        */
-       if (spa->spa_scrub_restart_txg != 0)
-               error = ERESTART;
-
-       if (spa->spa_scrub_stop)
-               error = EINTR;
-
-       /*
-        * Even if there were uncorrectable errors, we consider the scrub
-        * completed.  The downside is that if there is a transient error during
-        * a resilver, we won't resilver the data properly to the target.  But
-        * if the damage is permanent (more likely) we will resilver forever,
-        * which isn't really acceptable.  Since there is enough information for
-        * the user to know what has failed and why, this seems like a more
-        * tractable approach.
-        */
-       complete = (error == 0);
-
-       dprintf("end %s to maxtxg=%llu %s, traverse=%d, %llu errors, stop=%u\n",
-           scrub_type == POOL_SCRUB_RESILVER ? "resilver" : "scrub",
-           spa->spa_scrub_maxtxg, complete ? "done" : "FAILED",
-           error, spa->spa_scrub_errors, spa->spa_scrub_stop);
-
-       mutex_exit(&spa->spa_scrub_lock);
-
-       /*
-        * If the scrub/resilver completed, update all DTLs to reflect this.
-        * Whether it succeeded or not, vacate all temporary scrub DTLs.
-        */
-       vdev_dtl_reassess(rvd, spa_last_synced_txg(spa) + 1,
-           complete ? spa->spa_scrub_maxtxg : 0, B_TRUE);
-       vdev_scrub_stat_update(rvd, POOL_SCRUB_NONE, complete);
-       spa_errlog_rotate(spa);
-
-       if (scrub_type == POOL_SCRUB_RESILVER && complete)
-               spa_event_notify(spa, NULL, ESC_ZFS_RESILVER_FINISH);
-
-       spa_config_exit(spa, FTAG);
-
-       mutex_enter(&spa->spa_scrub_lock);
-
-       /*
-        * We may have finished replacing a device.
-        * Let the async thread assess this and handle the detach.
-        */
-       spa_async_request(spa, SPA_ASYNC_RESILVER_DONE);
-
-       /*
-        * If we were told to restart, our final act is to start a new scrub.
-        */
-       if (error == ERESTART)
-               spa_async_request(spa, scrub_type == POOL_SCRUB_RESILVER ?
-                   SPA_ASYNC_RESILVER : SPA_ASYNC_SCRUB);
-
-       spa->spa_scrub_type = POOL_SCRUB_NONE;
-       spa->spa_scrub_active = 0;
-       spa->spa_scrub_thread = NULL;
-       cv_broadcast(&spa->spa_scrub_cv);
-       CALLB_CPR_EXIT(&cprinfo);       /* drops &spa->spa_scrub_lock */
-       thread_exit();
-}
-
-void
-spa_scrub_suspend(spa_t *spa)
-{
-       mutex_enter(&spa->spa_scrub_lock);
-       spa->spa_scrub_suspended++;
-       while (spa->spa_scrub_active) {
-               cv_broadcast(&spa->spa_scrub_cv);
-               cv_wait(&spa->spa_scrub_cv, &spa->spa_scrub_lock);
-       }
-       while (spa->spa_scrub_inflight)
-               cv_wait(&spa->spa_scrub_io_cv, &spa->spa_scrub_lock);
-       mutex_exit(&spa->spa_scrub_lock);
-}
-
-void
-spa_scrub_resume(spa_t *spa)
-{
-       mutex_enter(&spa->spa_scrub_lock);
-       ASSERT(spa->spa_scrub_suspended != 0);
-       if (--spa->spa_scrub_suspended == 0)
-               cv_broadcast(&spa->spa_scrub_cv);
-       mutex_exit(&spa->spa_scrub_lock);
-}
-
-void
-spa_scrub_restart(spa_t *spa, uint64_t txg)
-{
-       /*
-        * Something happened (e.g. snapshot create/delete) that means
-        * we must restart any in-progress scrubs.  The itinerary will
-        * fix this properly.
-        */
-       mutex_enter(&spa->spa_scrub_lock);
-       spa->spa_scrub_restart_txg = txg;
-       mutex_exit(&spa->spa_scrub_lock);
-}
-
 int
-spa_scrub(spa_t *spa, pool_scrub_type_t type, boolean_t force)
+spa_scrub(spa_t *spa, pool_scrub_type_t type)
 {
-       space_seg_t *ss;
-       uint64_t mintxg, maxtxg;
-       vdev_t *rvd = spa->spa_root_vdev;
-
-       ASSERT(MUTEX_HELD(&spa_namespace_lock));
-       ASSERT(!spa_config_held(spa, RW_WRITER));
+       ASSERT(spa_config_held(spa, SCL_ALL, RW_WRITER) == 0);
 
        if ((uint_t)type >= POOL_SCRUB_TYPES)
                return (ENOTSUP);
 
-       mutex_enter(&spa->spa_scrub_lock);
-
-       /*
-        * If there's a scrub or resilver already in progress, stop it.
-        */
-       while (spa->spa_scrub_thread != NULL) {
-               /*
-                * Don't stop a resilver unless forced.
-                */
-               if (spa->spa_scrub_type == POOL_SCRUB_RESILVER && !force) {
-                       mutex_exit(&spa->spa_scrub_lock);
-                       return (EBUSY);
-               }
-               spa->spa_scrub_stop = 1;
-               cv_broadcast(&spa->spa_scrub_cv);
-               cv_wait(&spa->spa_scrub_cv, &spa->spa_scrub_lock);
-       }
-
        /*
-        * Terminate the previous traverse.
+        * If a resilver was requested, but there is no DTL on a
+        * writeable leaf device, we have nothing to do.
         */
-       if (spa->spa_scrub_th != NULL) {
-               traverse_fini(spa->spa_scrub_th);
-               spa->spa_scrub_th = NULL;
-       }
-
-       if (rvd == NULL) {
-               ASSERT(spa->spa_scrub_stop == 0);
-               ASSERT(spa->spa_scrub_type == type);
-               ASSERT(spa->spa_scrub_restart_txg == 0);
-               mutex_exit(&spa->spa_scrub_lock);
+       if (type == POOL_SCRUB_RESILVER &&
+           !vdev_resilver_needed(spa->spa_root_vdev, NULL, NULL)) {
+               spa_async_request(spa, SPA_ASYNC_RESILVER_DONE);
                return (0);
        }
 
-       mintxg = TXG_INITIAL - 1;
-       maxtxg = spa_last_synced_txg(spa) + 1;
-
-       mutex_enter(&rvd->vdev_dtl_lock);
+       if (type == POOL_SCRUB_EVERYTHING &&
+           spa->spa_dsl_pool->dp_scrub_func != SCRUB_FUNC_NONE &&
+           spa->spa_dsl_pool->dp_scrub_isresilver)
+               return (EBUSY);
 
-       if (rvd->vdev_dtl_map.sm_space == 0) {
-               /*
-                * The pool-wide DTL is empty.
-                * If this is a resilver, there's nothing to do except
-                * check whether any in-progress replacements have completed.
-                */
-               if (type == POOL_SCRUB_RESILVER) {
-                       type = POOL_SCRUB_NONE;
-                       spa_async_request(spa, SPA_ASYNC_RESILVER_DONE);
-               }
+       if (type == POOL_SCRUB_EVERYTHING || type == POOL_SCRUB_RESILVER) {
+               return (dsl_pool_scrub_clean(spa->spa_dsl_pool));
+       } else if (type == POOL_SCRUB_NONE) {
+               return (dsl_pool_scrub_cancel(spa->spa_dsl_pool));
        } else {
-               /*
-                * The pool-wide DTL is non-empty.
-                * If this is a normal scrub, upgrade to a resilver instead.
-                */
-               if (type == POOL_SCRUB_EVERYTHING)
-                       type = POOL_SCRUB_RESILVER;
-       }
-
-       if (type == POOL_SCRUB_RESILVER) {
-               /*
-                * Determine the resilvering boundaries.
-                *
-                * Note: (mintxg, maxtxg) is an open interval,
-                * i.e. mintxg and maxtxg themselves are not included.
-                *
-                * Note: for maxtxg, we MIN with spa_last_synced_txg(spa) + 1
-                * so we don't claim to resilver a txg that's still changing.
-                */
-               ss = avl_first(&rvd->vdev_dtl_map.sm_root);
-               mintxg = ss->ss_start - 1;
-               ss = avl_last(&rvd->vdev_dtl_map.sm_root);
-               maxtxg = MIN(ss->ss_end, maxtxg);
-
-               spa_event_notify(spa, NULL, ESC_ZFS_RESILVER_START);
-       }
-
-       mutex_exit(&rvd->vdev_dtl_lock);
-
-       spa->spa_scrub_stop = 0;
-       spa->spa_scrub_type = type;
-       spa->spa_scrub_restart_txg = 0;
-
-       if (type != POOL_SCRUB_NONE) {
-               spa->spa_scrub_mintxg = mintxg;
-               spa->spa_scrub_maxtxg = maxtxg;
-               spa->spa_scrub_th = traverse_init(spa, spa_scrub_cb, NULL,
-                   ADVANCE_PRE | ADVANCE_PRUNE | ADVANCE_ZIL,
-                   ZIO_FLAG_CANFAIL);
-               traverse_add_pool(spa->spa_scrub_th, mintxg, maxtxg);
-               spa->spa_scrub_thread = thread_create(NULL, 0,
-                   spa_scrub_thread, spa, 0, &p0, TS_RUN, minclsyspri);
+               return (EINVAL);
        }
-
-       mutex_exit(&spa->spa_scrub_lock);
-
-       return (0);
 }
 
 /*
@@ -3748,27 +3494,33 @@ spa_scrub(spa_t *spa, pool_scrub_type_t type, boolean_t force)
 static void
 spa_async_remove(spa_t *spa, vdev_t *vd)
 {
-       vdev_t *tvd;
-       int c;
+       if (vd->vdev_remove_wanted) {
+               vd->vdev_remove_wanted = 0;
+               vdev_set_state(vd, B_FALSE, VDEV_STATE_REMOVED, VDEV_AUX_NONE);
+               vdev_clear(spa, vd);
+               vdev_state_dirty(vd->vdev_top);
+       }
 
-       for (c = 0; c < vd->vdev_children; c++) {
-               tvd = vd->vdev_child[c];
-               if (tvd->vdev_remove_wanted) {
-                       tvd->vdev_remove_wanted = 0;
-                       vdev_set_state(tvd, B_FALSE, VDEV_STATE_REMOVED,
-                           VDEV_AUX_NONE);
-                       vdev_clear(spa, tvd, B_TRUE);
-                       vdev_config_dirty(tvd->vdev_top);
-               }
-               spa_async_remove(spa, tvd);
+       for (int c = 0; c < vd->vdev_children; c++)
+               spa_async_remove(spa, vd->vdev_child[c]);
+}
+
+static void
+spa_async_probe(spa_t *spa, vdev_t *vd)
+{
+       if (vd->vdev_probe_wanted) {
+               vd->vdev_probe_wanted = 0;
+               vdev_reopen(vd);        /* vdev_open() does the actual probe */
        }
+
+       for (int c = 0; c < vd->vdev_children; c++)
+               spa_async_probe(spa, vd->vdev_child[c]);
 }
 
 static void
 spa_async_thread(spa_t *spa)
 {
        int tasks;
-       uint64_t txg;
 
        ASSERT(spa->spa_sync_on);
 
@@ -3788,45 +3540,37 @@ spa_async_thread(spa_t *spa)
 
        /*
         * See if any devices need to be marked REMOVED.
-        *
-        * XXX - We avoid doing this when we are in
-        * I/O failure state since spa_vdev_enter() grabs
-        * the namespace lock and would not be able to obtain
-        * the writer config lock.
         */
-       if (tasks & SPA_ASYNC_REMOVE &&
-           spa_state(spa) != POOL_STATE_IO_FAILURE) {
-               txg = spa_vdev_enter(spa);
+       if (tasks & SPA_ASYNC_REMOVE) {
+               spa_vdev_state_enter(spa);
                spa_async_remove(spa, spa->spa_root_vdev);
-               (void) spa_vdev_exit(spa, NULL, txg, 0);
+               for (int i = 0; i < spa->spa_l2cache.sav_count; i++)
+                       spa_async_remove(spa, spa->spa_l2cache.sav_vdevs[i]);
+               for (int i = 0; i < spa->spa_spares.sav_count; i++)
+                       spa_async_remove(spa, spa->spa_spares.sav_vdevs[i]);
+               (void) spa_vdev_state_exit(spa, NULL, 0);
        }
 
        /*
-        * If any devices are done replacing, detach them.
+        * See if any devices need to be probed.
         */
-       if (tasks & SPA_ASYNC_RESILVER_DONE)
-               spa_vdev_resilver_done(spa);
+       if (tasks & SPA_ASYNC_PROBE) {
+               spa_vdev_state_enter(spa);
+               spa_async_probe(spa, spa->spa_root_vdev);
+               (void) spa_vdev_state_exit(spa, NULL, 0);
+       }
 
        /*
-        * Kick off a scrub.  When starting a RESILVER scrub (or an EVERYTHING
-        * scrub which can become a resilver), we need to hold
-        * spa_namespace_lock() because the sysevent we post via
-        * spa_event_notify() needs to get the name of the pool.
+        * If any devices are done replacing, detach them.
         */
-       if (tasks & SPA_ASYNC_SCRUB) {
-               mutex_enter(&spa_namespace_lock);
-               VERIFY(spa_scrub(spa, POOL_SCRUB_EVERYTHING, B_TRUE) == 0);
-               mutex_exit(&spa_namespace_lock);
-       }
+       if (tasks & SPA_ASYNC_RESILVER_DONE)
+               spa_vdev_resilver_done(spa);
 
        /*
         * Kick off a resilver.
         */
-       if (tasks & SPA_ASYNC_RESILVER) {
-               mutex_enter(&spa_namespace_lock);
-               VERIFY(spa_scrub(spa, POOL_SCRUB_RESILVER, B_TRUE) == 0);
-               mutex_exit(&spa_namespace_lock);
-       }
+       if (tasks & SPA_ASYNC_RESILVER)
+               VERIFY(spa_scrub(spa, POOL_SCRUB_RESILVER) == 0);
 
        /*
         * Let the world know that we're done.
@@ -3894,10 +3638,13 @@ spa_sync_deferred_frees(spa_t *spa, uint64_t txg)
        int error;
        uint8_t c = 1;
 
-       zio = zio_root(spa, NULL, NULL, ZIO_FLAG_CONFIG_HELD);
+       zio = zio_root(spa, NULL, NULL, ZIO_FLAG_CANFAIL);
 
-       while (bplist_iterate(bpl, &itor, &blk) == 0)
-               zio_nowait(zio_free(zio, spa, txg, &blk, NULL, NULL));
+       while (bplist_iterate(bpl, &itor, &blk) == 0) {
+               ASSERT(blk.blk_birth < txg);
+               zio_nowait(zio_free(zio, spa, txg, &blk, NULL, NULL,
+                   ZIO_FLAG_MUSTSUCCEED));
+       }
 
        error = zio_wait(zio);
        ASSERT3U(error, ==, 0);
@@ -3917,19 +3664,27 @@ static void
 spa_sync_nvlist(spa_t *spa, uint64_t obj, nvlist_t *nv, dmu_tx_t *tx)
 {
        char *packed = NULL;
+       size_t bufsize;
        size_t nvsize = 0;
        dmu_buf_t *db;
 
        VERIFY(nvlist_size(nv, &nvsize, NV_ENCODE_XDR) == 0);
 
-       packed = kmem_alloc(nvsize, KM_SLEEP);
+       /*
+        * Write full (SPA_CONFIG_BLOCKSIZE) blocks of configuration
+        * information.  This avoids the dbuf_will_dirty() path and
+        * saves us a pre-read to get data we don't actually care about.
+        */
+       bufsize = P2ROUNDUP(nvsize, SPA_CONFIG_BLOCKSIZE);
+       packed = kmem_alloc(bufsize, KM_SLEEP);
 
        VERIFY(nvlist_pack(nv, &packed, &nvsize, NV_ENCODE_XDR,
            KM_SLEEP) == 0);
+       bzero(packed + nvsize, bufsize - nvsize);
 
-       dmu_write(spa->spa_meta_objset, obj, 0, nvsize, packed, tx);
+       dmu_write(spa->spa_meta_objset, obj, 0, bufsize, packed, tx);
 
-       kmem_free(packed, nvsize);
+       kmem_free(packed, bufsize);
 
        VERIFY(0 == dmu_bonus_hold(spa->spa_meta_objset, obj, FTAG, &db));
        dmu_buf_will_dirty(db, tx);
@@ -3988,10 +3743,15 @@ spa_sync_config_object(spa_t *spa, dmu_tx_t *tx)
 {
        nvlist_t *config;
 
-       if (list_is_empty(&spa->spa_dirty_list))
+       if (list_is_empty(&spa->spa_config_dirty_list))
                return;
 
-       config = spa_config_generate(spa, NULL, dmu_tx_get_txg(tx), B_FALSE);
+       spa_config_enter(spa, SCL_STATE, FTAG, RW_READER);
+
+       config = spa_config_generate(spa, spa->spa_root_vdev,
+           dmu_tx_get_txg(tx), B_FALSE);
+
+       spa_config_exit(spa, SCL_STATE, FTAG);
 
        if (spa->spa_config_syncing)
                nvlist_free(spa->spa_config_syncing);
@@ -4011,10 +3771,13 @@ spa_sync_props(void *arg1, void *arg2, cred_t *cr, dmu_tx_t *tx)
        nvlist_t *nvp = arg2;
        nvpair_t *elem;
        uint64_t intval;
-       char *strval, *slash;
+       char *strval;
        zpool_prop_t prop;
        const char *propname;
        zprop_type_t proptype;
+       spa_config_dirent_t *dp;
+
+       mutex_enter(&spa->spa_props_lock);
 
        elem = NULL;
        while ((elem = nvlist_next_nvpair(nvp, elem))) {
@@ -4050,47 +3813,23 @@ spa_sync_props(void *arg1, void *arg2, cred_t *cr, dmu_tx_t *tx)
                         * udpated.
                         */
                        VERIFY(nvpair_value_string(elem, &strval) == 0);
-                       if (spa->spa_config_dir)
-                               spa_strfree(spa->spa_config_dir);
-                       if (spa->spa_config_file)
-                               spa_strfree(spa->spa_config_file);
-
-                       if (strval[0] == '\0') {
-                               spa->spa_config_dir = NULL;
-                               spa->spa_config_file = NULL;
-                       } else if (strcmp(strval, "none") == 0) {
-                               spa->spa_config_dir = spa_strdup(strval);
-                               spa->spa_config_file = NULL;
-                       } else {
-                               /*
-                                * If the cachefile is in the root directory,
-                                * we will end up with an empty string for
-                                * spa_config_dir.  This value is only ever
-                                * used when concatenated with '/', so an empty
-                                * string still behaves correctly and keeps the
-                                * rest of the code simple.
-                                */
-                               slash = strrchr(strval, '/');
-                               ASSERT(slash != NULL);
-                               *slash = '\0';
-                               if (strcmp(strval, spa_config_dir) == 0 &&
-                                   strcmp(slash + 1, ZPOOL_CACHE_FILE) == 0) {
-                                       spa->spa_config_dir = NULL;
-                                       spa->spa_config_file = NULL;
-                               } else {
-                                       spa->spa_config_dir =
-                                           spa_strdup(strval);
-                                       spa->spa_config_file =
-                                           spa_strdup(slash + 1);
-                               }
-                       }
+
+                       dp = kmem_alloc(sizeof (spa_config_dirent_t), KM_SLEEP);
+
+                       if (strval[0] == '\0')
+                               dp->scd_path = spa_strdup(spa_config_path);
+                       else if (strcmp(strval, "none") == 0)
+                               dp->scd_path = NULL;
+                       else
+                               dp->scd_path = spa_strdup(strval);
+
+                       list_insert_head(&spa->spa_config_list, dp);
                        spa_async_request(spa, SPA_ASYNC_CONFIG_UPDATE);
                        break;
                default:
                        /*
                         * Set pool property values in the poolprops mos object.
                         */
-                       mutex_enter(&spa->spa_props_lock);
                        if (spa->spa_pool_props_object == 0) {
                                objset_t *mos = spa->spa_meta_objset;
 
@@ -4103,7 +3842,6 @@ spa_sync_props(void *arg1, void *arg2, cred_t *cr, dmu_tx_t *tx)
                                    8, 1, &spa->spa_pool_props_object, tx)
                                    == 0);
                        }
-                       mutex_exit(&spa->spa_props_lock);
 
                        /* normalize the property name */
                        propname = zpool_prop_to_name(prop);
@@ -4151,9 +3889,11 @@ spa_sync_props(void *arg1, void *arg2, cred_t *cr, dmu_tx_t *tx)
                    tx->tx_txg != TXG_INITIAL) {
                        spa_history_internal_log(LOG_POOL_PROPSET,
                            spa, tx, cr, "%s %lld %s",
-                           nvpair_name(elem), intval, spa->spa_name);
+                           nvpair_name(elem), intval, spa_name(spa));
                }
        }
+
+       mutex_exit(&spa->spa_props_lock);
 }
 
 /*
@@ -4168,19 +3908,29 @@ spa_sync(spa_t *spa, uint64_t txg)
        bplist_t *bpl = &spa->spa_sync_bplist;
        vdev_t *rvd = spa->spa_root_vdev;
        vdev_t *vd;
-       vdev_t *svd[SPA_DVAS_PER_BP];
-       int svdcount = 0;
        dmu_tx_t *tx;
        int dirty_vdevs;
+       int error;
 
        /*
         * Lock out configuration changes.
         */
-       spa_config_enter(spa, RW_READER, FTAG);
+       spa_config_enter(spa, SCL_CONFIG, FTAG, RW_READER);
 
        spa->spa_syncing_txg = txg;
        spa->spa_sync_pass = 0;
 
+       /*
+        * If there are any pending vdev state changes, convert them
+        * into config changes that go out with this transaction group.
+        */
+       spa_config_enter(spa, SCL_STATE, FTAG, RW_READER);
+       while ((vd = list_head(&spa->spa_state_dirty_list)) != NULL) {
+               vdev_state_clean(vd);
+               vdev_config_dirty(vd);
+       }
+       spa_config_exit(spa, SCL_STATE, FTAG);
+
        VERIFY(0 == bplist_open(bpl, mos, spa->spa_sync_bplist_obj));
 
        tx = dmu_tx_create_assigned(dp, txg);
@@ -4206,6 +3956,19 @@ spa_sync(spa_t *spa, uint64_t txg)
                }
        }
 
+       if (spa->spa_ubsync.ub_version < SPA_VERSION_ORIGIN &&
+           spa->spa_uberblock.ub_version >= SPA_VERSION_ORIGIN) {
+               dsl_pool_create_origin(dp, tx);
+
+               /* Keeping the origin open increases spa_minref */
+               spa->spa_minref += 3;
+       }
+
+       if (spa->spa_ubsync.ub_version < SPA_VERSION_NEXT_CLONES &&
+           spa->spa_uberblock.ub_version >= SPA_VERSION_NEXT_CLONES) {
+               dsl_pool_upgrade_clones(dp, tx);
+       }
+
        /*
         * If anything has changed in this txg, push the deferred frees
         * from the previous txg.  If not, leave them alone so that we
@@ -4249,34 +4012,50 @@ spa_sync(spa_t *spa, uint64_t txg)
         *
         * If there are no dirty vdevs, we sync the uberblock to a few
         * random top-level vdevs that are known to be visible in the
-        * config cache (see spa_vdev_add() for details).  If there *are*
-        * dirty vdevs -- or if the sync to our random subset fails --
-        * then sync the uberblock to all vdevs.
+        * config cache (see spa_vdev_add() for a complete description).
+        * If there *are* dirty vdevs, sync the uberblock to all vdevs.
         */
-       if (list_is_empty(&spa->spa_dirty_list)) {
-               int children = rvd->vdev_children;
-               int c0 = spa_get_random(children);
-               int c;
-
-               for (c = 0; c < children; c++) {
-                       vd = rvd->vdev_child[(c0 + c) % children];
-                       if (vd->vdev_ms_array == 0 || vd->vdev_islog)
-                               continue;
-                       svd[svdcount++] = vd;
-                       if (svdcount == SPA_DVAS_PER_BP)
-                               break;
+       for (;;) {
+               /*
+                * We hold SCL_STATE to prevent vdev open/close/etc.
+                * while we're attempting to write the vdev labels.
+                */
+               spa_config_enter(spa, SCL_STATE, FTAG, RW_READER);
+
+               if (list_is_empty(&spa->spa_config_dirty_list)) {
+                       vdev_t *svd[SPA_DVAS_PER_BP];
+                       int svdcount = 0;
+                       int children = rvd->vdev_children;
+                       int c0 = spa_get_random(children);
+                       int c;
+
+                       for (c = 0; c < children; c++) {
+                               vd = rvd->vdev_child[(c0 + c) % children];
+                               if (vd->vdev_ms_array == 0 || vd->vdev_islog)
+                                       continue;
+                               svd[svdcount++] = vd;
+                               if (svdcount == SPA_DVAS_PER_BP)
+                                       break;
+                       }
+                       error = vdev_config_sync(svd, svdcount, txg);
+               } else {
+                       error = vdev_config_sync(rvd->vdev_child,
+                           rvd->vdev_children, txg);
                }
-       }
-       if (svdcount == 0 || vdev_config_sync(svd, svdcount, txg) != 0)
-               VERIFY3U(vdev_config_sync(rvd->vdev_child,
-                   rvd->vdev_children, txg), ==, 0);
 
+               spa_config_exit(spa, SCL_STATE, FTAG);
+
+               if (error == 0)
+                       break;
+               zio_suspend(spa, NULL);
+               zio_resume_wait(spa);
+       }
        dmu_tx_commit(tx);
 
        /*
         * Clear the dirty config list.
         */
-       while ((vd = list_head(&spa->spa_dirty_list)) != NULL)
+       while ((vd = list_head(&spa->spa_config_dirty_list)) != NULL)
                vdev_config_clean(vd);
 
        /*
@@ -4289,20 +4068,7 @@ spa_sync(spa_t *spa, uint64_t txg)
                spa->spa_config_syncing = NULL;
        }
 
-       /*
-        * Make a stable copy of the fully synced uberblock.
-        * We use this as the root for pool traversals.
-        */
-       spa->spa_traverse_wanted = 1;   /* tells traverse_more() to stop */
-
-       spa_scrub_suspend(spa);         /* stop scrubbing and finish I/Os */
-
-       rw_enter(&spa->spa_traverse_lock, RW_WRITER);
-       spa->spa_traverse_wanted = 0;
        spa->spa_ubsync = spa->spa_uberblock;
-       rw_exit(&spa->spa_traverse_lock);
-
-       spa_scrub_resume(spa);          /* resume scrub with new ubsync */
 
        /*
         * Clean up the ZIL records for the synced txg.
@@ -4324,7 +4090,7 @@ spa_sync(spa_t *spa, uint64_t txg)
        ASSERT(txg_list_empty(&spa->spa_vdev_txg_list, txg));
        ASSERT(bpl->bpl_queue == NULL);
 
-       spa_config_exit(spa, FTAG);
+       spa_config_exit(spa, SCL_CONFIG, FTAG);
 
        /*
         * If any async tasks have been requested, kick them off.
@@ -4343,7 +4109,7 @@ spa_sync_allpools(void)
        spa_t *spa = NULL;
        mutex_enter(&spa_namespace_lock);
        while ((spa = spa_next(spa)) != NULL) {
-               if (spa_state(spa) != POOL_STATE_ACTIVE)
+               if (spa_state(spa) != POOL_STATE_ACTIVE || spa_suspended(spa))
                        continue;
                spa_open_ref(spa, FTAG);
                mutex_exit(&spa_namespace_lock);
@@ -4383,7 +4149,6 @@ spa_evict_all(void)
                mutex_exit(&spa_namespace_lock);
                spa_async_suspend(spa);
                mutex_enter(&spa_namespace_lock);
-               VERIFY(spa_scrub(spa, POOL_SCRUB_NONE, B_TRUE) == 0);
                spa_close(spa, FTAG);
 
                if (spa->spa_state != POOL_STATE_UNINITIALIZED) {
@@ -4396,15 +4161,29 @@ spa_evict_all(void)
 }
 
 vdev_t *
-spa_lookup_by_guid(spa_t *spa, uint64_t guid)
+spa_lookup_by_guid(spa_t *spa, uint64_t guid, boolean_t l2cache)
 {
-       return (vdev_lookup_by_guid(spa->spa_root_vdev, guid));
+       vdev_t *vd;
+       int i;
+
+       if ((vd = vdev_lookup_by_guid(spa->spa_root_vdev, guid)) != NULL)
+               return (vd);
+
+       if (l2cache) {
+               for (i = 0; i < spa->spa_l2cache.sav_count; i++) {
+                       vd = spa->spa_l2cache.sav_vdevs[i];
+                       if (vd->vdev_guid == guid)
+                               return (vd);
+               }
+       }
+
+       return (NULL);
 }
 
 void
 spa_upgrade(spa_t *spa, uint64_t version)
 {
-       spa_config_enter(spa, RW_WRITER, FTAG);
+       spa_config_enter(spa, SCL_ALL, FTAG, RW_WRITER);
 
        /*
         * This should only be called for a non-faulted pool, and since a
@@ -4417,7 +4196,7 @@ spa_upgrade(spa_t *spa, uint64_t version)
        spa->spa_uberblock.ub_version = version;
        vdev_config_dirty(spa->spa_root_vdev);
 
-       spa_config_exit(spa, FTAG);
+       spa_config_exit(spa, SCL_ALL, FTAG);
 
        txg_wait_synced(spa_get_dsl(spa), 0);
 }
@@ -4443,6 +4222,27 @@ spa_has_spare(spa_t *spa, uint64_t guid)
 }
 
 /*
+ * Check if a pool has an active shared spare device.
+ * Note: reference count of an active spare is 2, as a spare and as a replace
+ */
+static boolean_t
+spa_has_active_shared_spare(spa_t *spa)
+{
+       int i, refcnt;
+       uint64_t pool;
+       spa_aux_vdev_t *sav = &spa->spa_spares;
+
+       for (i = 0; i < sav->sav_count; i++) {
+               if (spa_spare_exists(sav->sav_vdevs[i]->vdev_guid, &pool,
+                   &refcnt) && pool != 0ULL && pool == spa_guid(spa) &&
+                   refcnt > 2)
+                       return (B_TRUE);
+       }
+
+       return (B_FALSE);
+}
+
+/*
  * Post a sysevent corresponding to the given event.  The 'name' must be one of
  * the event definitions in sys/sysevent/eventdefs.h.  The payload will be
  * filled in from the spa and (optionally) the vdev.  This doesn't do anything