[Bug 276341] zfs panic: VERIFY3(rc->rc_count == number) failed

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=276341

--- Comment #10 from John Kennedy <warlock@phouka.net> ---
I just had this happen again, during system shutdown:  15.0-CURRENT #26
main-n268150-8ecb7494250.

[via kgdb]
...
Unread portion of the kernel message buffer:
<118>Stopping devd.
<118>Waiting for PIDS: 757.
<118>Writing entropy file: .
<118>Writing early boot entropy file: .
<118>.
<118>Terminated
<118>Feb 10 04:55:50 bsd15 syslogd: exiting on signal 15
Waiting (max 60 seconds) for system process `vnlru' to stop... done
Waiting (max 60 seconds) for system process `syncer' to stop... 
Syncing disks, vnodes remaining... 0 0 0 0 0 0 0 0 done
All buffers synced.
Uptime: 9h56m17s
GEOM_ELI: Device vtbd0p4.eli destroyed.
GEOM_ELI: Detached vtbd0p4.eli on last close.
panic: VERIFY3(rc->rc_count == number) failed (29696 == 0)

cpuid = 0
time = 1707569759
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe00c737eaf0
vpanic() at vpanic+0x135/frame 0xfffffe00c737ec20
spl_panic() at spl_panic+0x3a/frame 0xfffffe00c737ec80
zfs_refcount_destroy_many() at zfs_refcount_destroy_many+0xd1/frame
0xfffffe00c737ecb0
arc_fini() at arc_fini+0x281/frame 0xfffffe00c737ece0
dmu_fini() at dmu_fini+0x9/frame 0xfffffe00c737ecf0
spa_fini() at spa_fini+0x36/frame 0xfffffe00c737ed30
zfs_kmod_fini() at zfs_kmod_fini+0x7a/frame 0xfffffe00c737ed60
zfs_shutdown() at zfs_shutdown+0x2b/frame 0xfffffe00c737ed70
kern_reboot() at kern_reboot+0x4f3/frame 0xfffffe00c737edb0
sys_reboot() at sys_reboot+0x3a9/frame 0xfffffe00c737ee00
amd64_syscall() at amd64_syscall+0x153/frame 0xfffffe00c737ef30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00c737ef30
--- syscall (55, FreeBSD ELF64, reboot), rip = 0x28d86a, rsp = 0x820f08bf8, rbp
= 0x820f08ce0 ---
KDB: enter: panic
Uptime: 9h56m17s
Dumping 3585 out of 16340 MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91%

...

(kgdb) bt
#0  __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57
#1  doadump (textdump=textdump@entry=1) at
/usr/src/sys/kern/kern_shutdown.c:403
#2  0xffffffff80b52da0 in kern_reboot (howto=260) at
/usr/src/sys/kern/kern_shutdown.c:521
#3  0xffffffff80b532a2 in vpanic (fmt=0xffffffff8225ea82 "VERIFY3(rc->rc_count
== number) failed (%llu == %llu)\n", ap=ap@entry=0xfffffe00c737ec60)
    at /usr/src/sys/kern/kern_shutdown.c:973
#4  0xffffffff81fbc92a in spl_panic (file=<optimized out>, func=<optimized
out>, line=<unavailable>, fmt=<unavailable>)
    at /usr/src/sys/contrib/openzfs/module/os/freebsd/spl/spl_misc.c:100
#5  0xffffffff820b2681 in zfs_refcount_destroy_many (rc=<optimized out>,
number=<unavailable>)
    at /usr/src/sys/contrib/openzfs/module/zfs/refcount.c:98
#6  0xffffffff820b269c in zfs_refcount_destroy (rc=<unavailable>) at
/usr/src/sys/contrib/openzfs/module/zfs/refcount.c:112
#7  0xffffffff8200d561 in arc_state_fini () at
/usr/src/sys/contrib/openzfs/module/zfs/arc.c:7421
#8  arc_fini () at /usr/src/sys/contrib/openzfs/module/zfs/arc.c:7753
#9  0xffffffff8203b449 in dmu_fini () at
/usr/src/sys/contrib/openzfs/module/zfs/dmu.c:2549
#10 0xffffffff820db0b6 in spa_fini () at
/usr/src/sys/contrib/openzfs/module/zfs/spa_misc.c:2549
#11 0xffffffff8219985a in zfs_kmod_fini () at
/usr/src/sys/contrib/openzfs/module/zfs/zfs_ioctl.c:7933
#12 0xffffffff81fc32eb in zfs__fini () at
/usr/src/sys/contrib/openzfs/module/os/freebsd/zfs/kmod_core.c:284
#13 zfs_shutdown (arg=<optimized out>, howto=<optimized out>) at
/usr/src/sys/contrib/openzfs/module/os/freebsd/zfs/kmod_core.c:297
#14 0xffffffff80b52d13 in kern_reboot (howto=16392) at
/usr/src/sys/kern/kern_shutdown.c:517
#15 0xffffffff80b527c9 in sys_reboot (td=0xfffff80001a39000,
uap=0xfffff80001a39400) at /usr/src/sys/kern/kern_shutdown.c:312
#16 0xffffffff81059473 in syscallenter (td=0xfffff80001a39000) at
/usr/src/sys/amd64/amd64/../../kern/subr_syscall.c:186
#17 amd64_syscall (td=0xfffff80001a39000, traced=0) at
/usr/src/sys/amd64/amd64/trap.c:1192
#18 <signal handler called>
#19 0x000000000028d86a in ?? ()
Backtrace stopped: Cannot access memory at address 0x820f08bf8

-- 
You are receiving this mail because:
You are the assignee for the bug.