Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 31 Mar 2016 07:10:22 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-fs@FreeBSD.org
Subject:   [Bug 207464] Panic when destroying ZFS snapshot on boot filesystem
Message-ID:  <bug-207464-3630-EWxayecaAN@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-207464-3630@https.bugs.freebsd.org/bugzilla/>
References:  <bug-207464-3630@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D207464

--- Comment #5 from Matthias Pfaller <matthias.pfaller@familie-pfaller.de> =
---
We also get these panics (but not on the boot pool):
FreeBSD nibbler 10.2-RELEASE-p9 FreeBSD 10.2-RELEASE-p9 #0: Thu Jan 14 01:3=
2:46
UTC 2016     root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERI=
C=20
amd64

vputx: negative ref count
0xfffff8026e11e588: tag zfs, type VDIR
    usecount 0, writecount 0, refcount 0 mountedhere 0
    flags (VI_FREE)
 VI_LOCKed    lock type zfs: EXCL by thread 0xfffff80dae520000 (pid 28114, =
zfs,
tid 100862)
panic: vputx: negative ref cnt
cpuid =3D 2
KDB: stack backtrace:
#0 0xffffffff80984ef0 at kdb_backtrace+0x60
#1 0xffffffff80948aa6 at vpanic+0x126
#2 0xffffffff80948973 at panic+0x43
#3 0xffffffff809eb7d5 at vputx+0x2d5
#4 0xffffffff809e4f59 at dounmount+0x689
#5 0xffffffff81a4bdd4 at zfs_unmount_snap+0x114
#6 0xffffffff81a4efc1 at zfs_ioc_destroy_snaps+0xc1
#7 0xffffffff81a4dae0 at zfsdev_ioctl+0x5f0
#8 0xffffffff80830019 at devfs_ioctl_f+0x139
#9 0xffffffff8099cde5 at kern_ioctl+0x255
#10 0xffffffff8099cae0 at sys_ioctl+0x140
#11 0xffffffff80d4b3e7 at amd64_syscall+0x357
#12 0xffffffff80d30acb at Xfast_syscall+0xfb

#0  doadump (textdump=3D<value optimized out>) at pcpu.h:219
#1  0xffffffff80948702 in kern_reboot (howto=3D260)
    at /usr/src/sys/kern/kern_shutdown.c:451
#2  0xffffffff80948ae5 in vpanic (fmt=3D<value optimized out>,=20
    ap=3D<value optimized out>) at /usr/src/sys/kern/kern_shutdown.c:758
#3  0xffffffff80948973 in panic (fmt=3D0x0)
    at /usr/src/sys/kern/kern_shutdown.c:687
#4  0xffffffff809eb7d5 in vputx (vp=3D<value optimized out>,=20
    func=3D<value optimized out>) at /usr/src/sys/kern/vfs_subr.c:2269
#5  0xffffffff809e4f59 in dounmount (mp=3D0xfffff81bc9ada000,=20
    flags=3D<value optimized out>, td=3D<value optimized out>)
    at /usr/src/sys/kern/vfs_mount.c:1362
#6  0xffffffff81a4bdd4 in zfs_unmount_snap (snapname=3D<value optimized out=
>)
    at
/usr/src/sys/modules/zfs/../../cddl/contrib/opensolaris/uts/common/fs/zfs/z=
fs_ioctl.c:3484
#7  0xffffffff81a4efc1 in zfs_ioc_destroy_snaps (
    poolname=3D0xfffffe1025f72000 "zmnt", innvl=3D<value optimized out>,=20
    outnvl=3D0xfffff804303ca740)
    at
/usr/src/sys/modules/zfs/../../cddl/contrib/opensolaris/uts/common/fs/zfs/z=
fs_ioctl.c:3557
#8  0xffffffff81a4dae0 in zfsdev_ioctl (dev=3D<value optimized out>,=20
    zcmd=3D<value optimized out>, arg=3D<value optimized out>,=20
    flag=3D<value optimized out>, td=3D<value optimized out>)
    at
/usr/src/sys/modules/zfs/../../cddl/contrib/opensolaris/uts/common/fs/zfs/z=
fs_ioctl.c:6198
#9  0xffffffff80830019 in devfs_ioctl_f (fp=3D0xfffff81aca04a870,=20
    com=3D3222821411, data=3D0xfffffe20260458e0, cred=3D<value optimized ou=
t>,=20
    td=3D0xfffff80dae520000) at /usr/src/sys/fs/devfs/devfs_vnops.c:785
#10 0xffffffff8099cde5 in kern_ioctl (td=3D0xfffff80dae520000,=20
    fd=3D<value optimized out>, com=3D0) at file.h:320
#11 0xffffffff8099cae0 in sys_ioctl (td=3D0xfffff80dae520000,=20
    uap=3D0xfffffe2026045a40) at /usr/src/sys/kern/sys_generic.c:718
#12 0xffffffff80d4b3e7 in amd64_syscall (td=3D0xfffff80dae520000, traced=3D=
0)
    at subr_syscall.c:134
#13 0xffffffff80d30acb in Xfast_syscall ()
    at /usr/src/sys/amd64/amd64/exception.S:396
#14 0x0000000801a01fda in ?? ()

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-207464-3630-EWxayecaAN>