From owner-freebsd-fs@freebsd.org Thu Mar 31 07:10:22 2016 Return-Path: Delivered-To: freebsd-fs@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 71C79AE2DA7 for ; Thu, 31 Mar 2016 07:10:22 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 622DD1CB7 for ; Thu, 31 Mar 2016 07:10:22 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from bugs.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id u2V7AM1d096180 for ; Thu, 31 Mar 2016 07:10:22 GMT (envelope-from bugzilla-noreply@freebsd.org) From: bugzilla-noreply@freebsd.org To: freebsd-fs@FreeBSD.org Subject: [Bug 207464] Panic when destroying ZFS snapshot on boot filesystem Date: Thu, 31 Mar 2016 07:10:22 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 10.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Many People X-Bugzilla-Who: matthias.pfaller@familie-pfaller.de X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: freebsd-fs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-fs@freebsd.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: Filesystems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 Mar 2016 07:10:22 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D207464 --- Comment #5 from Matthias Pfaller = --- We also get these panics (but not on the boot pool): FreeBSD nibbler 10.2-RELEASE-p9 FreeBSD 10.2-RELEASE-p9 #0: Thu Jan 14 01:3= 2:46 UTC 2016 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERI= C=20 amd64 vputx: negative ref count 0xfffff8026e11e588: tag zfs, type VDIR usecount 0, writecount 0, refcount 0 mountedhere 0 flags (VI_FREE) VI_LOCKed lock type zfs: EXCL by thread 0xfffff80dae520000 (pid 28114, = zfs, tid 100862) panic: vputx: negative ref cnt cpuid =3D 2 KDB: stack backtrace: #0 0xffffffff80984ef0 at kdb_backtrace+0x60 #1 0xffffffff80948aa6 at vpanic+0x126 #2 0xffffffff80948973 at panic+0x43 #3 0xffffffff809eb7d5 at vputx+0x2d5 #4 0xffffffff809e4f59 at dounmount+0x689 #5 0xffffffff81a4bdd4 at zfs_unmount_snap+0x114 #6 0xffffffff81a4efc1 at zfs_ioc_destroy_snaps+0xc1 #7 0xffffffff81a4dae0 at zfsdev_ioctl+0x5f0 #8 0xffffffff80830019 at devfs_ioctl_f+0x139 #9 0xffffffff8099cde5 at kern_ioctl+0x255 #10 0xffffffff8099cae0 at sys_ioctl+0x140 #11 0xffffffff80d4b3e7 at amd64_syscall+0x357 #12 0xffffffff80d30acb at Xfast_syscall+0xfb #0 doadump (textdump=3D) at pcpu.h:219 #1 0xffffffff80948702 in kern_reboot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c:451 #2 0xffffffff80948ae5 in vpanic (fmt=3D,=20 ap=3D) at /usr/src/sys/kern/kern_shutdown.c:758 #3 0xffffffff80948973 in panic (fmt=3D0x0) at /usr/src/sys/kern/kern_shutdown.c:687 #4 0xffffffff809eb7d5 in vputx (vp=3D,=20 func=3D) at /usr/src/sys/kern/vfs_subr.c:2269 #5 0xffffffff809e4f59 in dounmount (mp=3D0xfffff81bc9ada000,=20 flags=3D, td=3D) at /usr/src/sys/kern/vfs_mount.c:1362 #6 0xffffffff81a4bdd4 in zfs_unmount_snap (snapname=3D) at /usr/src/sys/modules/zfs/../../cddl/contrib/opensolaris/uts/common/fs/zfs/z= fs_ioctl.c:3484 #7 0xffffffff81a4efc1 in zfs_ioc_destroy_snaps ( poolname=3D0xfffffe1025f72000 "zmnt", innvl=3D,=20 outnvl=3D0xfffff804303ca740) at /usr/src/sys/modules/zfs/../../cddl/contrib/opensolaris/uts/common/fs/zfs/z= fs_ioctl.c:3557 #8 0xffffffff81a4dae0 in zfsdev_ioctl (dev=3D,=20 zcmd=3D, arg=3D,=20 flag=3D, td=3D) at /usr/src/sys/modules/zfs/../../cddl/contrib/opensolaris/uts/common/fs/zfs/z= fs_ioctl.c:6198 #9 0xffffffff80830019 in devfs_ioctl_f (fp=3D0xfffff81aca04a870,=20 com=3D3222821411, data=3D0xfffffe20260458e0, cred=3D,=20 td=3D0xfffff80dae520000) at /usr/src/sys/fs/devfs/devfs_vnops.c:785 #10 0xffffffff8099cde5 in kern_ioctl (td=3D0xfffff80dae520000,=20 fd=3D, com=3D0) at file.h:320 #11 0xffffffff8099cae0 in sys_ioctl (td=3D0xfffff80dae520000,=20 uap=3D0xfffffe2026045a40) at /usr/src/sys/kern/sys_generic.c:718 #12 0xffffffff80d4b3e7 in amd64_syscall (td=3D0xfffff80dae520000, traced=3D= 0) at subr_syscall.c:134 #13 0xffffffff80d30acb in Xfast_syscall () at /usr/src/sys/amd64/amd64/exception.S:396 #14 0x0000000801a01fda in ?? () --=20 You are receiving this mail because: You are the assignee for the bug.=