From owner-freebsd-fs@freebsd.org Thu Jan 5 13:10:44 2017 Return-Path: Delivered-To: freebsd-fs@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 99DB4CA08C7 for ; Thu, 5 Jan 2017 13:10:44 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 801001102 for ; Thu, 5 Jan 2017 13:10:44 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from bugs.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id v05DAfjt036840 for ; Thu, 5 Jan 2017 13:10:44 GMT (envelope-from bugzilla-noreply@freebsd.org) From: bugzilla-noreply@freebsd.org To: freebsd-fs@FreeBSD.org Subject: [Bug 207464] Panic when destroying ZFS snapshot Date: Thu, 05 Jan 2017 13:10:41 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 10.2-STABLE X-Bugzilla-Keywords: crash X-Bugzilla-Severity: Affects Many People X-Bugzilla-Who: drs-freebsd@sieborger.nom.za X-Bugzilla-Status: Closed X-Bugzilla-Resolution: FIXED X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: avg@FreeBSD.org X-Bugzilla-Flags: mfc-stable9+ mfc-stable10+ X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-fs@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Filesystems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Jan 2017 13:10:44 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D207464 David Sieb=C3=B6rger changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |drs-freebsd@sieborger.nom.z | |a --- Comment #31 from David Sieb=C3=B6rger --- This bug still affects 10.3-RELEASE and it's being triggered on a number of= our machines during backups. Any chance of merging the fix to that branch in an errata notification? FreeBSD XXXXXX 10.3-RELEASE-p11 FreeBSD 10.3-RELEASE-p11 #0: Mon Oct 24 18:49:24 UTC 2016=20=20=20=20 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64 panic: vputx: negative ref cnt GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain condition= s. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "amd64-marcel-freebsd"... Unread portion of the kernel message buffer: panic: vputx: negative ref cnt cpuid =3D 3 KDB: stack backtrace: #0 0xffffffff8098e3e0 at kdb_backtrace+0x60 #1 0xffffffff809510b6 at vpanic+0x126 #2 0xffffffff80950f83 at panic+0x43 #3 0xffffffff809f78e5 at vputx+0x2d5 #4 0xffffffff809f1139 at dounmount+0x689 #5 0xffffffff81a6dfe4 at zfs_unmount_snap+0x114 #6 0xffffffff81a71301 at zfs_ioc_destroy_snaps+0xc1 #7 0xffffffff81a6fd64 at zfsdev_ioctl+0x664 #8 0xffffffff80835dc9 at devfs_ioctl_f+0x139 #9 0xffffffff809a8c85 at kern_ioctl+0x255 #10 0xffffffff809a8980 at sys_ioctl+0x140 #11 0xffffffff80d5695f at amd64_syscall+0x40f #12 0xffffffff80d3bbbb at Xfast_syscall+0xfb Uptime: 7m17s Dumping 419 out of 3995 MB:..4%..12%..23%..31%..42%..54%..61%..73%..81%..92% Reading symbols from /boot/kernel/zfs.ko.symbols...done. Loaded symbols for /boot/kernel/zfs.ko.symbols Reading symbols from /boot/kernel/opensolaris.ko.symbols...done. Loaded symbols for /boot/kernel/opensolaris.ko.symbols Reading symbols from /boot/kernel/ums.ko.symbols...done. Loaded symbols for /boot/kernel/ums.ko.symbols Reading symbols from /boot/kernel/pflog.ko.symbols...done. Loaded symbols for /boot/kernel/pflog.ko.symbols Reading symbols from /boot/kernel/pf.ko.symbols...done. Loaded symbols for /boot/kernel/pf.ko.symbols #0 doadump (textdump=3D) at pcpu.h:219 219 pcpu.h: No such file or directory. in pcpu.h (kgdb) #0 doadump (textdump=3D) at pcpu.h:219 #1 0xffffffff80950d12 in kern_reboot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c:486 #2 0xffffffff809510f5 in vpanic (fmt=3D, ap=3D) at /usr/src/sys/kern/kern_shutdown.c:889 #3 0xffffffff80950f83 in panic (fmt=3D0x0) at /usr/src/sys/kern/kern_shutdown.c:818 #4 0xffffffff809f78e5 in vputx (vp=3D, func=3D) at /usr/src/sys/kern/vfs_subr.c:2348 #5 0xffffffff809f1139 in dounmount (mp=3D0xfffff800052da660, flags=3D, td=3D) at /usr/src/sys/kern/vfs_mount.c:1359 #6 0xffffffff81a6dfe4 in zfs_unmount_snap (snapname=3D) at /usr/src/sys/modules/zfs/../../cddl/contrib/opensolaris/uts/common/fs/zfs/z= fs_ioctl.c:3485 #7 0xffffffff81a71301 in zfs_ioc_destroy_snaps ( poolname=3D0xfffffe003b89b000 "hippo", innvl=3D, outnvl=3D0xfffff80092925060) at /usr/src/sys/modules/zfs/../../cddl/contrib/opensolaris/uts/common/fs/zfs/z= fs_ioctl.c:3558 #8 0xffffffff81a6fd64 in zfsdev_ioctl (dev=3D, zcmd=3D, arg=3D, flag=3D, td=3D) at /usr/src/sys/modules/zfs/../../cddl/contrib/opensolaris/uts/common/fs/zfs/z= fs_ioctl.c:6278 #9 0xffffffff80835dc9 in devfs_ioctl_f (fp=3D0xfffff8001c036230, com=3D3222821411, data=3D0xfffffe011b427a20, cred=3D, td=3D0xfffff80005b3a960) at /usr/src/sys/fs/devfs/devfs_vnops.c:786 #10 0xffffffff809a8c85 in kern_ioctl (td=3D0xfffff80005b3a960, fd=3D, com=3D0) at file.h:321 #11 0xffffffff809a8980 in sys_ioctl (td=3D0xfffff80005b3a960, uap=3D0xfffffe011b427b80) at /usr/src/sys/kern/sys_generic.c:718 #12 0xffffffff80d5695f in amd64_syscall (td=3D0xfffff80005b3a960, traced=3D= 0) at subr_syscall.c:141 #13 0xffffffff80d3bbbb in Xfast_syscall () at /usr/src/sys/amd64/amd64/exception.S:396 #14 0x0000000801a05f3a in ?? () Previous frame inner to this frame (corrupt stack?) Current language: auto; currently minimal (kgdb) --=20 You are receiving this mail because: You are on the CC list for the bug.=