[Bug 227784] zfs: Fatal trap 9: general protection fault while in kernel mode on shutdown

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=227784

--- Comment #7 from Eitan Adler <eadler at FreeBSD.org> ---
Unfortunately I no longer have this specific crash, but I do have two crashes
that look similar on shutdown.

----
CrashB("shutdown"):

#11 _rw_wlock_cookie (c=0xdeadc0dedeadc286, file=0xffffffff81286e05
"/usr/src/sys/net/if.c", line=3646) at /usr/src/sys/kern/kern_rwlock.c:279
        rw = 0xdeadc0dedeadc26e
        v = <optimized out>
        tid = <optimized out>
#12 0xffffffff80c6e48b in if_delmulti_ifma (ifma=0xfffff8001f2cfb00) at
/usr/src/sys/net/if.c:3646
        ifp = 0xdeadc0dedeadc0de
        lastref = <optimized out>
#13 0xffffffff80daf699 in in6m_release (inm=<optimized out>) at
/usr/src/sys/netinet6/in6_mcast.c:545
        ifma = 0xfffff8001f2cfb00
        ifp = <optimized out>
        saved_vnet = 0x0
#14 in6m_release_task (arg=<optimized out>) at
/usr/src/sys/netinet6/in6_mcast.c:617
        inm = <optimized out>
        in6m_free_tmp = {
          slh_first = 0xfffff800071bfc00
        }
        tinm = 0x0
#15 0xffffffff80bb0c99 in gtaskqueue_run_locked (queue=0xfffff80003752b00) at
/usr/src/sys/kern/subr_gtaskqueue.c:332
        tb_first = <optimized out>
        gtask = 0xffffffff81f9d6d8 <free_gtask>
        tb = <optimized out>
#16 0xffffffff80bb0a18 in gtaskqueue_thread_loop (arg=<optimized out>) at
/usr/src/sys/kern/subr_gtaskqueue.c:507
        tqp = <optimized out>
        tq = 0xfffff80003752b00
#17 0xffffffff80b2d074 in fork_exit (callout=0xffffffff80bb0990
<gtaskqueue_thread_loop>, arg=0xfffffe00bbcc6008, frame=0xfffffe00004b9ac0)
    at /usr/src/sys/kern/kern_fork.c:1039
        td = 0xfffff8000387a000
        p = 0xffffffff81feeaa0 <proc0>
        dtd = <optimized out>
#18 <signal handler called>
-------

CrashC("shutdown-crash-3") crashes gdb so no further debugging information.
This is fro the minidump

(kgdb) #0  __curthread () at ./machine/pcpu.h:231
#1  doadump (textdump=1) at /usr/src/sys/kern/kern_shutdown.c:366
#2  0xffffffff80432eac in db_fncall_generic (addr=<optimized out>,
    rv=<optimized out>, nargs=<optimized out>, args=<optimized out>)
    at /usr/src/sys/ddb/db_command.c:609
#3  db_fncall (dummy1=<optimized out>, dummy2=<optimized out>,
    dummy3=<optimized out>, dummy4=<optimized out>)
    at /usr/src/sys/ddb/db_command.c:657
#4  0xffffffff804329dd in db_command (last_cmdp=<optimized out>,
    cmd_table=<optimized out>, dopager=<optimized out>)
    at /usr/src/sys/ddb/db_command.c:481
#5  0xffffffff80432774 in db_command_loop ()
    at /usr/src/sys/ddb/db_command.c:534
#6  0xffffffff8043595f in db_trap (type=<optimized out>, code=<optimized out>)
    at /usr/src/sys/ddb/db_main.c:250
#7  0xffffffff80b9c8b3 in kdb_trap (type=9, code=0, tf=<optimized out>)
    at /usr/src/sys/kern/subr_kdb.c:697
#8  0xffffffff81010a8f in trap_fatal (frame=0xfffffe00bdb58890,
    eva=<optimized out>) at /usr/src/sys/amd64/amd64/trap.c:872
#9  0xffffffff8101006d in trap (frame=0xfffffe00bdb58890)
    at /usr/src/sys/amd64/amd64/trap.c:205
#10 <signal handler called>
#11 _sx_xlock (sx=0xdeadc0dedeadd47e, opts=0,
    file=0xffffffff827445a7
"/usr/src/sys/cddl/contrib/opensolaris/uts/common/fs/zfs/refcount.c", line=162)
at /usr/src/sys/kern/kern_sx.c:320
#12 0xffffffff826772da in refcount_remove_many (rc=0xdeadc0dedeadd47e,
    number=1, holder=0xfffff80045e39400)
    at /usr/src/sys/cddl/contrib/opensolaris/uts/common/fs/zfs/refcount.c:162
#13 0xffffffff8264bd7c in dsl_dir_evict_async (dbu=0xfffff80045e39400)
    at /usr/src/sys/cddl/contrib/opensolaris/uts/common/fs/zfs/dsl_dir.c:158
#14 0xffffffff80baf95c in taskqueue_run_locked (queue=0xfffff80035845300)
    at /usr/src/sys/kern/subr_taskqueue.c:465
#15 0xffffffff80bb0728 in taskqueue_thread_loop (arg=<optimized out>)
    at /usr/src/sys/kern/subr_taskqueue.c:757
#16 0xffffffff80b17f04 in fork_exit (
    callout=0xffffffff80bb06a0 <taskqueue_thread_loop>,
    arg=0xfffff8000511d0b0, frame=0xfffffe00bdb58ac0)
    at /usr/src/sys/kern/kern_fork.c:1039
#17 <signal handler called>

-- 
You are receiving this mail because:
You are the assignee for the bug.