@cult @feld In fact a non-zero amount of storage servers I touched had either panic_on_io_nmi or panic_on_oops set. When you are dealing with storage it's in my opinion always better to crash early instead of r/w garbage permanently and then crash. It doesn't really matter if your cold storage ZFS pool goes offline for 5 minutes when something goes horribly wrong and a properly architected storage solution for active use also won't fall apart when one of the systems goes offline.