[Bug 266409] 13.1-RELEASE amd64 crashes in: sa_handle_destroy at zfs/sa.c:1368 > zfs_znode_dmu_fini at zfs/zfs_znode.c:390

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 19 Sep 2022 11:08:08 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=266409

--- Comment #14 from Miroslav Lachman <000.fbsd@quip.cz> ---
(In reply to Miroslav Lachman from comment #13)
I have a bt from single user panic:

Fatal trap 12: page fault while in kernel mode
cpuid = 2; apic id = 04
fault virtual address   = 0xc3
fault code              = supervisor read data, page not present
instruction pointer     = 0x20:0xffffffff821d7dd0
stack pointer           = 0x28:0xfffffe00f7640350
frame pointer           = 0x28:0xfffffe00f7640410
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 74 (find)
trap number             = 12
panic: page fault
cpuid = 2
time = 1663591376
KDB: stack backtrace:
#0 0xffffffff80c69465 at kdb_backtrace+0x65
#1 0xffffffff80c1bb1f at vpanic+0x17f
#2 0xffffffff80c1b993 at panic+0x43
#3 0xffffffff810afdf5 at trap_fatal+0x385
#4 0xffffffff810afe4f at trap_pfault+0x4f
#5 0xffffffff81087528 at calltrap+0x8
#6 0xffffffff8224b7bf at sa_handle_destroy+0x8f
#7 0xffffffff821a87aa at zfs_zinactive+0xca
#8 0xffffffff821a2458 at zfs_freebsd_reclaim+0x38
#9 0xffffffff8117e09f at VOP_RECLAIM_APV+0x1f
#10 0xffffffff80cf8c72 at vgonel+0x342
#11 0xffffffff80cf4d47 at vnlru_free_impl+0x2f7
#12 0xffffffff80cffc38 at vn_alloc_hard+0xc8
#13 0xffffffff80cf5423 at getnewvnode_reserve+0x93
#14 0xffffffff821a78a2 at zfs_zget+0x22
#15 0xffffffff8219284b at zfs_dirent_lookup+0x16b
#16 0xffffffff8219291a at zfs_dirlook+0x7a
#17 0xffffffff821a4a10 at zfs_lookup+0x3d0
Uptime: 10m33s
Dumping 1729 out of 12189 MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91%

__curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55
55              __asm("movq %%gs:%P1,%0" : "=r" (td) : "n" (offsetof(struct
pcpu,
(kgdb) #0  __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55
#1  doadump (textdump=<optimized out>)
    at /usr/src/sys/kern/kern_shutdown.c:399
#2  0xffffffff80c1b71c in kern_reboot (howto=260)
    at /usr/src/sys/kern/kern_shutdown.c:487
#3  0xffffffff80c1bb8e in vpanic (fmt=0xffffffff811b4fb9 "%s", 
    ap=<optimized out>) at /usr/src/sys/kern/kern_shutdown.c:920
#4  0xffffffff80c1b993 in panic (fmt=<unavailable>)
    at /usr/src/sys/kern/kern_shutdown.c:844
#5  0xffffffff810afdf5 in trap_fatal (frame=0xfffffe00f7640290, eva=195)
    at /usr/src/sys/amd64/amd64/trap.c:944
#6  0xffffffff810afe4f in trap_pfault (frame=0xfffffe00f7640290, 
    usermode=false, signo=<optimized out>, ucode=<optimized out>)
    at /usr/src/sys/amd64/amd64/trap.c:763
#7  <signal handler called>
#8  dbuf_evict_user (db=0xfffff800263b4128)
    at /usr/src/sys/contrib/openzfs/module/zfs/dbuf.c:569
#9  dbuf_rele_and_unlock (db=0xfffff800263b4128, tag=<optimized out>, 
    evicting=0) at /usr/src/sys/contrib/openzfs/module/zfs/dbuf.c:3712
#10 0xffffffff821da0bb in dbuf_rele (db=<optimized out>, tag=<optimized out>, 
    tag@entry=0x0) at /usr/src/sys/contrib/openzfs/module/zfs/dbuf.c:3662
#11 0xffffffff8224b7bf in sa_handle_destroy (hdl=0xfffff8004f980900)
    at /usr/src/sys/contrib/openzfs/module/zfs/sa.c:1379
#12 0xffffffff821a87aa in zfs_znode_dmu_fini (zp=0xfffff80035b90760)
    at /usr/src/sys/contrib/openzfs/module/os/freebsd/zfs/zfs_znode.c:390
#13 zfs_zinactive (zp=zp@entry=0xfffff80035b90760)
    at /usr/src/sys/contrib/openzfs/module/os/freebsd/zfs/zfs_znode.c:1267
#14 0xffffffff821a2458 in zfs_freebsd_reclaim (ap=<optimized out>)
    at /usr/src/sys/contrib/openzfs/module/os/freebsd/zfs/zfs_vnops_os.c:5188
#15 0xffffffff8117e09f in VOP_RECLAIM_APV (
    vop=0xffffffff8245f340 <zfs_vnodeops>, a=a@entry=0xfffffe00f76404e0)
    at vnode_if.c:2180
#16 0xffffffff80cf8c72 in VOP_RECLAIM (vp=0xfffff80058e705b8)
    at ./vnode_if.h:1087
#17 vgonel (vp=vp@entry=0xfffff80058e705b8)
    at /usr/src/sys/kern/vfs_subr.c:4144
#18 0xffffffff80cf4d47 in vtryrecycle (vp=0xfffff80058e705b8)
    at /usr/src/sys/kern/vfs_subr.c:1694
#19 vnlru_free_impl (count=count@entry=1, mnt_op=mnt_op@entry=0x0, 
    mvp=0xfffff80003be3400) at /usr/src/sys/kern/vfs_subr.c:1331
#20 0xffffffff80cffc38 in vnlru_free_locked (count=1)
    at /usr/src/sys/kern/vfs_subr.c:1344
#21 vn_alloc_hard (mp=mp@entry=0x0) at /usr/src/sys/kern/vfs_subr.c:1745
#22 0xffffffff80cf5423 in vn_alloc (mp=0x0)
    at /usr/src/sys/amd64/include/atomic.h:416
#23 getnewvnode_reserve () at /usr/src/sys/kern/vfs_subr.c:1887
#24 0xffffffff821a78a2 in zfs_zget (zfsvfs=zfsvfs@entry=0xfffff8001cdee000, 
    obj_num=257193, zpp=zpp@entry=0xfffffe00f76406f0)
    at /usr/src/sys/contrib/openzfs/module/os/freebsd/zfs/zfs_znode.c:942
#25 0xffffffff8219284b in zfs_dirent_lookup (
    dzp=dzp@entry=0xfffff80058c6b938, 
    name=0xfffffe00f7640860 "patch-src_init.c", 
    zpp=zpp@entry=0xfffffe00f7640740, flag=flag@entry=2)
    at /usr/src/sys/contrib/openzfs/module/os/freebsd/zfs/zfs_dir.c:191
#26 0xffffffff8219291a in zfs_dirlook (dzp=dzp@entry=0xfffff80058c6b938, 
    name=0x0, name@entry=0xfffffe00f7640860 "patch-src_init.c", 
    zpp=zpp@entry=0xfffffe00f76407e0)
    at /usr/src/sys/contrib/openzfs/module/os/freebsd/zfs/zfs_dir.c:247
#27 0xffffffff821a4a10 in zfs_lookup (dvp=<optimized out>, 
    nm=nm@entry=0xfffffe00f7640860 "patch-src_init.c", vpp=<optimized out>, 
    cnp=cnp@entry=0xfffffe00f7640c58, nameiop=0, cr=<optimized out>, flags=0, 
    cached=1)
    at /usr/src/sys/contrib/openzfs/module/os/freebsd/zfs/zfs_vnops_os.c:929
#28 0xffffffff821a011b in zfs_freebsd_lookup (ap=0xfffffe00f7640990, cached=1)
    at /usr/src/sys/contrib/openzfs/module/os/freebsd/zfs/zfs_vnops_os.c:4593
#29 zfs_freebsd_cachedlookup (ap=0xfffffe00f7640990)
    at /usr/src/sys/contrib/openzfs/module/os/freebsd/zfs/zfs_vnops_os.c:4601
#30 0xffffffff80cdc4ad in VOP_CACHEDLOOKUP (dvp=0xfffff80058dd83d0, 
    vpp=0xfffffe00f7640a10, cnp=0xfffffe00f7640c58) at ./vnode_if.h:99
#31 vfs_cache_lookup (ap=<optimized out>)
    at /usr/src/sys/kern/vfs_cache.c:3069
#32 0xffffffff80ce0cb0 in VOP_LOOKUP (dvp=dvp@entry=0xfffff80058dd83d0, 
    vpp=0x0, vpp@entry=0xfffffe00f7640a10, cnp=0x0, 
    cnp@entry=0xfffffe00f7640c58) at ./vnode_if.h:65
#33 0xffffffff80ce06e3 in cache_fplookup_noentry (
    fpl=fpl@entry=0xfffffe00f7640a88) at /usr/src/sys/kern/vfs_cache.c:4928
#34 0xffffffff80cddf66 in cache_fplookup_next (fpl=0xfffffe00f7640a88)
    at /usr/src/sys/kern/vfs_cache.c:5284
#35 cache_fplookup_impl (dvp=<optimized out>, fpl=0xfffffe00f7640a88)
    at /usr/src/sys/kern/vfs_cache.c:5932
#36 cache_fplookup (ndp=ndp@entry=0xfffffe00f7640bd8, 
    status=status@entry=0xfffffe00f7640b84, 
    pwdp=pwdp@entry=0xfffffe00f7640b88) at /usr/src/sys/kern/vfs_cache.c:6104
#37 0xffffffff80ce8cba in namei (ndp=ndp@entry=0xfffffe00f7640bd8)
    at /usr/src/sys/kern/vfs_lookup.c:570
#38 0xffffffff80d06953 in kern_statat (td=0xfffffe00f75fc560, 
    flag=<optimized out>, fd=-100, path=0xfffffe00f75fc560 "\300`\264\026", 
    pathseg=pathseg@entry=UIO_USERSPACE, sbp=sbp@entry=0xfffffe00f7640d18, 
    hook=0x0) at /usr/src/sys/kern/vfs_syscalls.c:2441
#39 0xffffffff80d0704f in sys_fstatat (td=0x0, uap=0xfffffe00f75fc948)
    at /usr/src/sys/kern/vfs_syscalls.c:2418
#40 0xffffffff810b06ec in syscallenter (td=0xfffffe00f75fc560)
    at /usr/src/sys/amd64/amd64/../../kern/subr_syscall.c:189
#41 amd64_syscall (td=0xfffffe00f75fc560, traced=0)
    at /usr/src/sys/amd64/amd64/trap.c:1185
#42 <signal handler called>
#43 0x00000008011ad39a in ?? ()
Backtrace stopped: Cannot access memory at address 0x7fffffffe628
(kgdb)

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.