zdb crash with core dump #17713
Description
System information
| Type | Version/Name |
|---|---|
| Distribution Name | FreeBSD |
| Distribution Version | 14.3 |
| Kernel Version | 14.3-RELEASE |
| Architecture | x86_64 |
| OpenZFS Version | zfs-2.3.4-1 |
Describe the problem you're observing
zdb core dumps when running zdb -ddddd
Describe how to reproduce the problem
Run zdb -ddddd on a pool
Include any warning/errors/backtraces from the system logs
This crash occurs on 2.2.7 as well except the failed to hold dataset error doesn't show up on that version.
root@xdev 00:10:10 /data/src/zfs_frag # zdb -ddddd data >data2.txt
failed to hold dataset 'data/src': Input/output error
dmu_object_next() = 97
Registers:
RAX: 0x00000008204fa6f0 RDX: 0x00000008204fa380 RCX: 0x0000000000000000
RBX: 0x0000000000000002 RSI: 0x0000000000010007 RDI: 0x00000008204f9750
RBP: 0x00000008204f9ef0 RSP: 0x00000008204f9690 R8: 0x0000000000413310
R9: 0x0000000000000000 R10: 0x0000000000000061 R11: 0x0000000027610294
R12: 0x00000008204f9ac0 R13: 0x00000008204f96c8 R14: 0x00000008204f9750
R15: 0x0000000000000000 RIP: 0x0000000823f00d76
Call trace:
[0x0000000823f00d76] libspl_backtrace+0x36 (in /usr/local/lib/libzpool.so.6.0.0 +0x300d76)
[0x0000000000413327] ??? (in /usr/local/sbin/zdb +0x13327)
[0x00000008270a54a0] ??? (in /lib/libthr.so.3 +0x194a0)
[0x00000008270a4a6b] ??? (in /lib/libthr.so.3 +0x18a6b)
[0x00000008205402d3] ???
[0x000000082763001a] ??? (in /lib/libc.so.7 +0x13801a)
[0x00000008275a8a64] ??? (in /lib/libc.so.7 +0xb0a64)
[0x000000082765ca59] ??? (in /lib/libc.so.7 +0x164a59)
[0x000000000041faaa] ??? (in /usr/local/sbin/zdb +0x1faaa)
[0x000000000041fb8d] ??? (in /usr/local/sbin/zdb +0x1fb8d)
[0x0000000823cd5632] dmu_objset_find_impl+0xe2 (in /usr/local/lib/libzpool.so.6.0.0 +0xd5632)
[0x0000000823cdad99] dmu_objset_find+0x49 (in /usr/local/lib/libzpool.so.6.0.0 +0xdad99)
[0x0000000000420a72] ??? (in /usr/local/sbin/zdb +0x20a72)
[0x000000000040b5e7] main+0x2527 (in /usr/local/sbin/zdb +0xb5e7)
[0x000000082757ce34] ??? (in /lib/libc.so.7 +0x84e34)
[0x000000000040c514] _start+0x24 (in /usr/local/sbin/zdb +0xc514)
Abort trap (core dumped)
root@xdev 01:57:17 /data/src/zfs_frag # gdb /usr/local/sbin/zdb ./zdb.core
GNU gdb (GDB) 15.1 [GDB v15.1 for FreeBSD]
Copyright (C) 2024 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Type "show copying" and "show warranty" for details.
This GDB was configured as "x86_64-portbld-freebsd14.2".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<https://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/local/sbin/zdb...
[New LWP 299589]
[New LWP 648372]
[New LWP 648373]
[New LWP 648374]
[New LWP 648375]
[New LWP 648376]
[New LWP 648377]
[New LWP 648378]
[New LWP 648379]
[New LWP 648380]
[New LWP 648381]
[New LWP 648382]
[New LWP 648383]
[New LWP 648384]
[New LWP 648385]
[New LWP 648386]
[New LWP 648387]
[New LWP 648388]
[New LWP 648389]
[New LWP 648390]
[New LWP 648391]
[New LWP 648392]
[New LWP 648393]
[New LWP 648394]
[New LWP 648395]
[New LWP 648396]
[New LWP 648397]
[New LWP 648398]
[New LWP 648399]
[New LWP 648400]
[New LWP 648401]
[New LWP 648402]
[New LWP 648403]
[New LWP 648404]
--Type <RET> for more, q to quit, c to continue without paging--
[New LWP 648405]
[New LWP 648406]
[New LWP 648407]
[New LWP 648408]
[New LWP 648409]
[New LWP 648410]
[New LWP 648411]
[New LWP 648412]
[New LWP 648413]
[New LWP 648414]
[New LWP 648415]
[New LWP 648416]
[New LWP 648417]
[New LWP 648418]
[New LWP 648419]
[New LWP 648420]
[New LWP 648421]
[New LWP 648422]
[New LWP 648423]
[New LWP 648424]
[New LWP 648425]
[New LWP 648426]
[New LWP 648427]
[New LWP 648428]
[New LWP 648429]
[New LWP 648430]
[New LWP 648431]
[New LWP 648432]
[New LWP 648433]
[New LWP 648434]
[New LWP 648435]
[New LWP 648436]
[New LWP 648437]
[New LWP 648438]
[New LWP 648439]
[New LWP 648440]
[New LWP 648441]
[New LWP 648442]
[New LWP 648443]
[New LWP 648444]
[New LWP 648445]
[New LWP 648446]
[New LWP 648447]
[New LWP 648448]
[New LWP 648449]
[New LWP 648450]
[New LWP 648451]
[New LWP 648452]
[New LWP 648453]
[New LWP 648454]
--Type <RET> for more, q to quit, c to continue without paging--
[New LWP 648455]
[New LWP 648456]
[New LWP 648457]
[New LWP 648458]
[New LWP 648459]
[New LWP 648460]
[New LWP 648461]
[New LWP 648462]
[New LWP 648463]
[New LWP 648464]
[New LWP 648465]
[New LWP 648466]
[New LWP 648467]
[New LWP 648468]
[New LWP 648469]
[New LWP 648470]
[New LWP 648471]
[New LWP 648472]
[New LWP 648473]
[New LWP 648474]
[New LWP 648475]
[New LWP 648476]
[New LWP 648477]
[New LWP 648478]
[New LWP 648479]
[New LWP 648480]
[New LWP 648481]
[New LWP 648482]
[New LWP 648483]
[New LWP 648484]
[New LWP 648485]
[New LWP 648486]
[New LWP 648487]
[New LWP 648488]
[New LWP 648489]
[New LWP 648490]
[New LWP 648491]
[New LWP 648492]
[New LWP 648493]
[New LWP 648494]
[New LWP 648495]
[New LWP 648496]
[New LWP 648497]
[New LWP 648498]
[New LWP 648499]
[New LWP 648500]
[New LWP 648501]
[New LWP 648502]
[New LWP 648503]
[New LWP 648504]
--Type <RET> for more, q to quit, c to continue without paging--
[New LWP 648505]
[New LWP 648506]
[New LWP 648507]
[New LWP 648508]
[New LWP 648509]
[New LWP 648510]
[New LWP 648511]
[New LWP 648512]
[New LWP 648513]
[New LWP 648514]
[New LWP 648515]
[New LWP 648516]
[New LWP 648517]
[New LWP 648518]
[New LWP 648519]
[New LWP 648520]
[New LWP 648521]
[New LWP 648522]
[New LWP 648523]
[New LWP 648524]
[New LWP 648525]
[New LWP 648526]
[New LWP 648527]
[New LWP 648528]
[New LWP 648529]
[New LWP 648530]
[New LWP 648531]
[New LWP 648532]
[New LWP 648533]
[New LWP 648534]
[New LWP 648535]
[New LWP 648536]
[New LWP 648537]
[New LWP 648576]
[New LWP 648577]
[New LWP 648578]
[New LWP 648579]
[New LWP 648580]
[New LWP 648581]
[New LWP 648582]
[New LWP 648583]
[New LWP 648584]
[New LWP 648585]
[New LWP 648586]
[New LWP 648587]
[New LWP 648588]
[New LWP 648589]
[New LWP 648590]
[New LWP 648591]
[New LWP 648592]
--Type <RET> for more, q to quit, c to continue without paging--
[New LWP 648593]
[New LWP 648594]
[New LWP 648595]
[New LWP 648596]
[New LWP 648597]
[New LWP 648598]
[New LWP 648599]
[New LWP 648600]
[New LWP 648601]
Core was generated by `zdb -ddddd data'.
Program terminated with signal SIGABRT, Aborted.
Sent by thr_kill() from pid 81866 and user 0.
#0 thr_kill () at thr_kill.S:4
warning: 4 thr_kill.S: No such file or directory
[Current thread is 1 (LWP 299589)]
(gdb) bt
#0 thr_kill () at thr_kill.S:4
#1 0x00000008275a8a64 in __raise (s=s@entry=6) at /usr/src/lib/libc/gen/raise.c:50
#2 0x000000082765ca59 in abort () at /usr/src/lib/libc/stdlib/abort.c:64
#3 0x000000000041faaa in dump_objset (os=<optimized out>) at cmd/zdb/zdb.c:4326
#4 0x000000000041fb8d in dump_one_objset (dsname=dsname@entry=0x1559fd0d6000 "data", arg=arg@entry=0x0) at cmd/zdb/zdb.c:5570
#5 0x0000000823cd5632 in dmu_objset_find_impl (spa=0x1559fd0d6000, name=name@entry=0x1559fd0d6000 "data", func=func@entry=0x41fab0 <dump_one_objset>, arg=arg@entry=0x0,
flags=flags@entry=3) at module/zfs/dmu_objset.c:3071
#6 0x0000000823cdad99 in dmu_objset_find (name=0x1559fd0d6000 "data", func=func@entry=0x41fab0 <dump_one_objset>, arg=arg@entry=0x0, flags=flags@entry=3)
at module/zfs/dmu_objset.c:3087
#7 0x0000000000420a72 in dump_zpool (spa=0x1559fd0d6000) at cmd/zdb/zdb.c:8494
#8 0x000000000040b5e7 in main (argc=<optimized out>, argv=0x8204fc428) at cmd/zdb/zdb.c:9876
(gdb)