[Bug 207464] Panic when destroying ZFS snapshot

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207464

David Siebörger <drs-freebsd at sieborger.nom.za> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |drs-freebsd at sieborger.nom.z
                   |                            |a

--- Comment #31 from David Siebörger <drs-freebsd at sieborger.nom.za> ---
This bug still affects 10.3-RELEASE and it's being triggered on a number of our
machines during backups.  Any chance of merging the fix to that branch in an
errata notification?

FreeBSD XXXXXX 10.3-RELEASE-p11 FreeBSD 10.3-RELEASE-p11 #0: Mon Oct 24
18:49:24 UTC 2016    
root at amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC  amd64

panic: vputx: negative ref cnt

GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "amd64-marcel-freebsd"...

Unread portion of the kernel message buffer:
panic: vputx: negative ref cnt
cpuid = 3
KDB: stack backtrace:
#0 0xffffffff8098e3e0 at kdb_backtrace+0x60
#1 0xffffffff809510b6 at vpanic+0x126
#2 0xffffffff80950f83 at panic+0x43
#3 0xffffffff809f78e5 at vputx+0x2d5
#4 0xffffffff809f1139 at dounmount+0x689
#5 0xffffffff81a6dfe4 at zfs_unmount_snap+0x114
#6 0xffffffff81a71301 at zfs_ioc_destroy_snaps+0xc1
#7 0xffffffff81a6fd64 at zfsdev_ioctl+0x664
#8 0xffffffff80835dc9 at devfs_ioctl_f+0x139
#9 0xffffffff809a8c85 at kern_ioctl+0x255
#10 0xffffffff809a8980 at sys_ioctl+0x140
#11 0xffffffff80d5695f at amd64_syscall+0x40f
#12 0xffffffff80d3bbbb at Xfast_syscall+0xfb
Uptime: 7m17s
Dumping 419 out of 3995 MB:..4%..12%..23%..31%..42%..54%..61%..73%..81%..92%

Reading symbols from /boot/kernel/zfs.ko.symbols...done.
Loaded symbols for /boot/kernel/zfs.ko.symbols
Reading symbols from /boot/kernel/opensolaris.ko.symbols...done.
Loaded symbols for /boot/kernel/opensolaris.ko.symbols
Reading symbols from /boot/kernel/ums.ko.symbols...done.
Loaded symbols for /boot/kernel/ums.ko.symbols
Reading symbols from /boot/kernel/pflog.ko.symbols...done.
Loaded symbols for /boot/kernel/pflog.ko.symbols
Reading symbols from /boot/kernel/pf.ko.symbols...done.
Loaded symbols for /boot/kernel/pf.ko.symbols
#0  doadump (textdump=<value optimized out>) at pcpu.h:219
219     pcpu.h: No such file or directory.
        in pcpu.h
(kgdb) #0  doadump (textdump=<value optimized out>) at pcpu.h:219
#1  0xffffffff80950d12 in kern_reboot (howto=260)
    at /usr/src/sys/kern/kern_shutdown.c:486
#2  0xffffffff809510f5 in vpanic (fmt=<value optimized out>,
    ap=<value optimized out>) at /usr/src/sys/kern/kern_shutdown.c:889
#3  0xffffffff80950f83 in panic (fmt=0x0)
    at /usr/src/sys/kern/kern_shutdown.c:818
#4  0xffffffff809f78e5 in vputx (vp=<value optimized out>,
    func=<value optimized out>) at /usr/src/sys/kern/vfs_subr.c:2348
#5  0xffffffff809f1139 in dounmount (mp=0xfffff800052da660,
    flags=<value optimized out>, td=<value optimized out>)
    at /usr/src/sys/kern/vfs_mount.c:1359
#6  0xffffffff81a6dfe4 in zfs_unmount_snap (snapname=<value optimized out>)
    at
/usr/src/sys/modules/zfs/../../cddl/contrib/opensolaris/uts/common/fs/zfs/zfs_ioctl.c:3485
#7  0xffffffff81a71301 in zfs_ioc_destroy_snaps (
    poolname=0xfffffe003b89b000 "hippo", innvl=<value optimized out>,
    outnvl=0xfffff80092925060)
    at
/usr/src/sys/modules/zfs/../../cddl/contrib/opensolaris/uts/common/fs/zfs/zfs_ioctl.c:3558
#8  0xffffffff81a6fd64 in zfsdev_ioctl (dev=<value optimized out>,
    zcmd=<value optimized out>, arg=<value optimized out>,
    flag=<value optimized out>, td=<value optimized out>)
    at
/usr/src/sys/modules/zfs/../../cddl/contrib/opensolaris/uts/common/fs/zfs/zfs_ioctl.c:6278
#9  0xffffffff80835dc9 in devfs_ioctl_f (fp=0xfffff8001c036230,
    com=3222821411, data=0xfffffe011b427a20, cred=<value optimized out>,
    td=0xfffff80005b3a960) at /usr/src/sys/fs/devfs/devfs_vnops.c:786
#10 0xffffffff809a8c85 in kern_ioctl (td=0xfffff80005b3a960,
    fd=<value optimized out>, com=0) at file.h:321
#11 0xffffffff809a8980 in sys_ioctl (td=0xfffff80005b3a960,
    uap=0xfffffe011b427b80) at /usr/src/sys/kern/sys_generic.c:718
#12 0xffffffff80d5695f in amd64_syscall (td=0xfffff80005b3a960, traced=0)
    at subr_syscall.c:141
#13 0xffffffff80d3bbbb in Xfast_syscall ()
    at /usr/src/sys/amd64/amd64/exception.S:396
#14 0x0000000801a05f3a in ?? ()
Previous frame inner to this frame (corrupt stack?)
Current language:  auto; currently minimal
(kgdb)

-- 
You are receiving this mail because:
You are on the CC list for the bug.