bugzilla-daemon at defect.opensolaris.org
2008-Apr-07 21:50 UTC
[Bug 1016] New: zfs destroy on clear text can cause panic
http://defect.opensolaris.org/bz/show_bug.cgi?id=1016
Summary: zfs destroy on clear text can cause panic
Classification: Development
Product: zfs-crypto
Version: unspecified
Platform: Other
OS/Version: Solaris
Status: NEW
Severity: major
Priority: P2
Component: other
AssignedTo: darrenm at opensolaris.org
ReportedBy: ajscarp at yahoo.com
QAContact: hua.tang at sun.com
CC: zfs-crypto-discuss at opensolaris.org
Estimated Hours: 0.0
I''ve had this twice happen to me on a test machine that was recently
bfu''ed
with good bits.. Since I haven''t done many ''zfs
destroy'' calls, i usually axe
the pool, i dunno when this showed up..
below was encrypted pool with a clear text dataset being destroyed..
bash-3.2# zpool create -f -o keysource=passphrase,file:///home/izick/key3 tank
c0t0d0s6
bash-3.2# zfs create tank/enc
bash-3.2# zfs destroy tank/enc
panic[cpu1]/thread=3000a1c50a0: BAD TRAP: type=34 rp=2a1005735f0
addr=deadbeefdeadbf07 mmu_fsr=0
zfs: alignment error:
addr=0xdeadbeefdeadbf07
pid=102953, pc=0x7b31a5d4, sp=0x2a100572e91, tstate=0x4480001601, context=0x1
g1-g7: 3000bf1fa38, 3000bf1fa20, 18, 3, 3, 1, 3000a1c50a0
000002a100573310 unix:die+a4 (34, 2a1005735f0, deadbeefdeadbf07, 0, 180e000, 1)
%l0-3: 0000000000000000 0000030001f75d80 00000000003c1cbb 00000000003c1cba
%l4-7: 000003000008e040 0000000000000000 00000000010ffc00 000002a1005733d0
000002a1005733f0 unix:trap+748 (2a1005735f0, deadbeefdeadbf07, 80000900000034,
10000, 800009, 0)
%l0-3: 0000000000010028 000003000a1c50a0 000000000003aef3 0000000000000000
%l4-7: 00000000010ffc58 000003000bc144f0 0000030011cb2458 0000000000000034
000002a100573540 unix:ktl0+48 (30012086500, 3000a1c50a0, 300000490b0, 200, 200,
deadbeefdeadbeef)
%l0-3: 0000000000000002 0000000000001400 0000004480001601 00000000010220a8
%l4-7: 00000000000020da 0000030000049100 0000000000000000 000002a1005735f0
000002a100573690 zfs:dsl_dataset_destroy+29c (30012086500, 60010974018,
2a100573748, 7b31ac00, 7b31ac00, 0)
%l0-3: 0000060010075e00 000006001006db38 000000007b373c00 000000007b316c00
%l4-7: 000000007b316c00 000000007b31ac00 000000007b31ac00 0000060010075e00
000002a100573760 zfs:dmu_objset_destroy+4c (0, 0, 0, 0, 30044ed0000,
30012086500)
%l0-3: 00000000ff0b6000 0000000000000000 0000030044ed0008 0000000000000000
%l4-7: 0000000000000063 000003000686e100 0000000000000000 000000000138a844
000002a100573820 zfs:zfsdev_ioctl+1c4 (7b35ff48, 700b9b18, ffbfec88, 1000,
3000f065888, 30044ed0000)
%l0-3: 0000000000000258 00000000700b9b20 00000000700b9800 000000000000004b
%l4-7: 0000000000000019 0000000000000064 0000000000000002 00000000700b9b28
000002a1005738d0 genunix:fop_ioctl+58 (600106055c0, 5a19, ffbfec88, 100003, 0,
2a100573adc)
%l0-3: 00000000000000c0 00000000013eb56c 00000600100576c0 0000000000000001
%l4-7: 0000000000000000 00000000018d8c00 0000000000000001 0000030044ea6000
000002a100573990 genunix:ioctl+16c (3, 5a19, ffbfec88, 0, 30021d915e0, 0)
%l0-3: 0000000000000003 0000000000000003 0000000000000001 0000000000000000
%l4-7: 00000000186196db 000000000135bc00 0000000000000000 000000000000
--
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
bugzilla-daemon at defect.opensolaris.org
2008-Apr-08 13:03 UTC
[Bug 1016] zfs destroy on clear text can cause panic
http://defect.opensolaris.org/bz/show_bug.cgi?id=1016
Darren J Moffat <darrenm at opensolaris.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |INCOMPLETE
--- Comment #1 from Darren J Moffat <darrenm at opensolaris.org>
2008-04-08 06:03:31 ---
Slightly different stack trace but I managed to reproduce this by doing:
while true ; do
zfs create tank/clear
cp hamlet.txt /tank/clear
sync
zfs destroy tank/clear
done
panic[cpu2]/thread=ffffff001fcabc80: assertion failed:
spa_version(dp->dp_spa)
< 9ULL || used == ds->ds_phys->ds_unique_bytes, file:
../../common/fs/zfs/dsl_dataset.c, line: 1493
ffffff001fcab8b0 genunix:assfail+7e ()
ffffff001fcaba40 zfs:dsl_dataset_destroy_sync+a9c ()
ffffff001fcaba90 zfs:dsl_sync_task_group_sync+fc ()
ffffff001fcabb00 zfs:dsl_pool_sync+fc ()
ffffff001fcabbb0 zfs:spa_sync+21a ()
ffffff001fcabc60 zfs:txg_sync_thread+2b0 ()
ffffff001fcabc70 unix:thread_start+8 ()
It must have been the second part of the || that failed so for some reason used
wasn''t equal the ds_unique_bytes.
Interestingly this has been seen, and supposedly fixed, before see bugster bug#
6448999. However that fix doesn''t seem to be relevant to us since I
had no
clones or snapshots involved in reproducing this problem.
I''m running the same stress test on sparc using vanilla snv_84 just to
be sure
this isn''t a generic ZFS bug.
--
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
bugzilla-daemon at defect.opensolaris.org
2008-May-07 09:37 UTC
[Bug 1016] zfs destroy on clear text can cause panic
http://defect.opensolaris.org/bz/show_bug.cgi?id=1016
Darren J Moffat <darrenm at opensolaris.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |Grace
--- Comment #2 from Darren J Moffat <darrenm at opensolaris.org>
2008-05-07 02:37:49 ---
*** Bug 1831 has been marked as a duplicate of this bug. ***
--
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
bugzilla-daemon at defect.opensolaris.org
2008-May-08 07:10 UTC
[Bug 1016] zfs destroy on clear text can cause panic
http://defect.opensolaris.org/bz/show_bug.cgi?id=1016 --- Comment #3 from Grace <hua.tang at sun.com> 2008-05-08 00:10:54 --- tests/functional/cli_root/zfs_send/zfs_send_002_pos caused panic due to this bug. -- Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
bugzilla-daemon at defect.opensolaris.org
2008-May-14 02:15 UTC
[Bug 1016] zfs destroy on clear text can cause panic
http://defect.opensolaris.org/bz/show_bug.cgi?id=1016 --- Comment #4 from Grace <hua.tang at sun.com> 2008-05-13 19:15:56 --- On SPARC with the latest build 2008-05-09 tests/functional/bootfs/bootfs_002_neg passed. tests/functional/cli_root/zfs_send/zfs_send_002_pos passed. -- Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
bugzilla-daemon at defect.opensolaris.org
2008-May-14 03:22 UTC
[Bug 1016] zfs destroy on clear text can cause panic
http://defect.opensolaris.org/bz/show_bug.cgi?id=1016 --- Comment #5 from Grace <hua.tang at sun.com> 2008-05-13 20:22:34 --- On SPARC with the latest build 2008-05-09. tests/functional/cli_root/zfs_create/zfs_create_002_pos caused panic in execution mode: sparc-f64. -- Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
bugzilla-daemon at defect.opensolaris.org
2008-May-23 15:44 UTC
[Bug 1016] zfs destroy on clear text can cause panic
http://defect.opensolaris.org/bz/show_bug.cgi?id=1016
Darren J Moffat <darrenm at opensolaris.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Blocks| |1928
--
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
bugzilla-daemon at defect.opensolaris.org
2008-May-28 06:35 UTC
[Bug 1016] zfs destroy on clear text can cause panic
http://defect.opensolaris.org/bz/show_bug.cgi?id=1016 --- Comment #6 from Grace <hua.tang at sun.com> 2008-05-27 23:35:32 --- build: 2008-05-27 tests/functional/cli_root/zfs_send/zfs_send_001_pos caused panic. panic[cpu40]/thread=2a1004d7ca0: assertion failed: used =ds->ds_phys->ds_unique_bytes (0x0 == 0x400), file: ../../common/fs/zfs/dsl_dataset.c, line: 1547 000002a1004d7470 genunix:assfail3+98 (7aa8cfb8, 0, 7aa8c428, 400, 7aa8c318, 60b) %l0-3: 00000000f4eef4ee 00000000f4eef400 0000000000000000 00000000018db000 %l4-7: 0000000000000000 0000000001885800 000000000136c400 0000000000000000 000002a1004d7530 zfs:dsl_dataset_destroy_sync+960 (300bca97000, 2a1004d76f8, 7aa22c00, 300d0f98e40, 7aa8cc00, 7aa8c800) %l0-3: 00000300bca97030 00000300d0fbf830 00000300dab178c0 000003021cb04920 %l4-7: 000000000000001b 0000000000000000 0000000000000019 000000007aa8cc00 000002a1004d7710 zfs:dsl_sync_task_group_sync+11c (300c6408bc0, 300d0f98e40, 7aa2332c, 300c7d926a0, 3, 0) %l0-3: 0000000000000000 0000000000000000 0000000000000000 0000000000000000 %l4-7: 00000300c6408be8 00000300dab178c0 000000007aa1f0fc 0000000000000000 000002a1004d77d0 zfs:dsl_pool_sync+ec (300dab178c0, 33, 300d0fbf800, 7aa8f2d0, 300d0f98e40, 300d0fbf830) %l0-3: 0000000000000005 0000000000000000 0000030295fb4608 00000300dab17a48 %l4-7: 000003021cb04920 0000000000000000 00000300dab17aa8 0000000001298c00 000002a1004d7880 zfs:spa_sync+208 (30295fb4200, 33, 0, 7aa8f130, 30295fb4350, 7aa8f2d0) %l0-3: 0000030295fb42f0 00000300dab17a78 00000300dab17a48 00000300d3520700 %l4-7: 0000030295fb43c8 000003011acdf300 00000300dab178c0 0000030295fb4380 000002a1004d7950 zfs:txg_sync_thread+248 (300dab178c0, 33, 7aa80c5b, 1168ec, 300dab179d8, bb8) %l0-3: 00000300dab17a20 00000300dab17a26 00000300dab17a24 000000000190feb0 %l4-7: 00000000702a4a64 0000000000000033 0000000000000003 000000007aa92730 panic: entering debugger (continue to save dump) Debugging requested; hardware watchdog suspended. Test machine: t5220-sfb-10 -- Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
bugzilla-daemon at defect.opensolaris.org
2008-Jun-09 09:08 UTC
[Bug 1016] zfs destroy on clear text can cause panic
http://defect.opensolaris.org/bz/show_bug.cgi?id=1016 --- Comment #7 from Darren J Moffat <darrenm at opensolaris.org> 2008-06-09 02:08:47 --- *** Bug 2175 has been marked as a duplicate of this bug. *** -- Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
bugzilla-daemon at defect.opensolaris.org
2008-Jun-12 02:25 UTC
[Bug 1016] zfs destroy on clear text can cause panic
http://defect.opensolaris.org/bz/show_bug.cgi?id=1016 --- Comment #8 from Grace <hua.tang at sun.com> 2008-06-11 19:24:59 --- cleanup in tests/functional/zvol/zvol_ENOSPC panics with the same stack trace. -- Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
bugzilla-daemon at defect.opensolaris.org
2008-Jun-23 14:48 UTC
[Bug 1016] zfs destroy on clear text can cause panic
http://defect.opensolaris.org/bz/show_bug.cgi?id=1016
chris.kirby at sun.com changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |chris.kirby at sun.com
--- Comment #9 from chris.kirby at sun.com 2008-06-23 07:48:22 ---
(In reply to comment #1)> Slightly different stack trace but I managed to reproduce this by doing:
>
> while true ; do
> zfs create tank/clear
> cp hamlet.txt /tank/clear
> sync
> zfs destroy tank/clear
> done
I ran this test for ~72 hours on ON bits, but I didn''t see any
failures.
--
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
bugzilla-daemon at defect.opensolaris.org
2008-Jun-26 17:00 UTC
[Bug 1016] zfs destroy on clear text can cause panic
http://defect.opensolaris.org/bz/show_bug.cgi?id=1016
Darren J Moffat <darrenm at opensolaris.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Alias| |BUGSTER:6719684
Status|INCOMPLETE |CLOSED
Resolution| |TRACKEDINBUGSTER
--- Comment #10 from Darren J Moffat <darrenm at opensolaris.org>
2008-06-26 10:00:50 ---
BUGSTER:6719684
--
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
bugzilla-daemon at defect.opensolaris.org
2008-Sep-22 06:09 UTC
[Bug 1016] zfs destroy on clear text can cause panic
http://defect.opensolaris.org/bz/show_bug.cgi?id=1016
David Comay <David.Comay at Sun.COM> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status Whiteboard| |BugsterCR=6719684
CC| |David.Comay at Sun.COM
--
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.