Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 22 Nov 2016 11:51:55 +0000 (UTC)
From:      Andriy Gapon <avg@FreeBSD.org>
To:        src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-vendor@freebsd.org
Subject:   svn commit: r308990 - vendor-sys/illumos/dist/uts/common/fs/zfs
Message-ID:  <201611221151.uAMBpt3s013969@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: avg
Date: Tue Nov 22 11:51:55 2016
New Revision: 308990
URL: https://svnweb.freebsd.org/changeset/base/308990

Log:
  7181 race between zfs_mount and zfs_ioc_rollback
  
  illumos/illumos-gate@90f2c094b3822f4825f21cef2c2faf7d03b55139
  https://github.com/illumos/illumos-gate/commit/90f2c094b3822f4825f21cef2c2faf7d03b55139
  
  https://www.illumos.org/issues/7181
    zfsvfs_setup() is called in both zfs_mount and zfs_resume_fs paths.
    dmu_objset_set_user(zfsvfs->z_os, zfsvfs) is called early in zfsvfs_setup()
    before the setup is actually completed,
    thus an under-constructed zfsvfs becomes visible.
    Additionally, there is nothing to serialize the two call paths. As a result two
    threads can step on each other's toes.
    assertion failed: zilog->zl_clean_taskq == NULL, file:
    ../../common/fs/zfs/zil.c, line: 1772
  
    > $c
    vpanic()
    0xfffffffffbdf6928()
    zil_open+0x45(ffffff1bbc5dd000, fffffffff7993880)
    zfsvfs_setup+0x84(ffffffb378d77000, 0)
    zfs_resume_fs+0x132(ffffffb378d77000, ffffffb37ddcf000)
    zfs_ioc_rollback+0x96(ffffffb37ddcf000, ffffff01dcdc4cd0, ffffff01aa091000)
    zfsdev_ioctl+0x215(10a00000000, 5a19, 80465f8, 100003, ffffff01ab318368,
    ffffff0004b59e58)
    cdev_ioctl+0x39(10a00000000, 5a19, 80465f8, 100003, ffffff01ab318368,
    ffffff0004b59e58)
    spec_ioctl+0x60(ffffff0197737700, 5a19, 80465f8, 100003,
    ffffff01ab318368, ffffff0004b59e58)
    fop_ioctl+0x55(ffffff0197737700, 5a19, 80465f8, 100003,
    ffffff01ab318368, ffffff0004b59e58)
    ioctl+0x9b(7, 5a19, 80465f8)
    sys_syscall32+0x1f7()
  
    > ffffff1bbc5dd000::print objset_t os_zil
    os_zil = 0xffffff1c053cf7c0
    > 0xffffff1c053cf7c0::print zilog_t zl_clean_taskq
  
  Reviewed by: Matthew Ahrens <mahrens@delphix.com>
  Approved by: Gordon Ross <gordon.w.ross@gmail.com>
  Author: Andriy Gapon <andriy.gapon@clusterhq.com>

Modified:
  vendor-sys/illumos/dist/uts/common/fs/zfs/zfs_vfsops.c

Modified: vendor-sys/illumos/dist/uts/common/fs/zfs/zfs_vfsops.c
==============================================================================
--- vendor-sys/illumos/dist/uts/common/fs/zfs/zfs_vfsops.c	Tue Nov 22 11:50:52 2016	(r308989)
+++ vendor-sys/illumos/dist/uts/common/fs/zfs/zfs_vfsops.c	Tue Nov 22 11:51:55 2016	(r308990)
@@ -1019,13 +1019,6 @@ zfsvfs_setup(zfsvfs_t *zfsvfs, boolean_t
 	if (error)
 		return (error);
 
-	/*
-	 * Set the objset user_ptr to track its zfsvfs.
-	 */
-	mutex_enter(&zfsvfs->z_os->os_user_ptr_lock);
-	dmu_objset_set_user(zfsvfs->z_os, zfsvfs);
-	mutex_exit(&zfsvfs->z_os->os_user_ptr_lock);
-
 	zfsvfs->z_log = zil_open(zfsvfs->z_os, zfs_get_data);
 
 	/*
@@ -1086,6 +1079,13 @@ zfsvfs_setup(zfsvfs_t *zfsvfs, boolean_t
 		zfsvfs->z_vfs->vfs_flag |= readonly; /* restore readonly bit */
 	}
 
+	/*
+	 * Set the objset user_ptr to track its zfsvfs.
+	 */
+	mutex_enter(&zfsvfs->z_os->os_user_ptr_lock);
+	dmu_objset_set_user(zfsvfs->z_os, zfsvfs);
+	mutex_exit(&zfsvfs->z_os->os_user_ptr_lock);
+
 	return (0);
 }
 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201611221151.uAMBpt3s013969>