{"action":"closed","issue":{"url":"https://api.github.com/repos/zfsonlinux/zfs/issues/3195","labels_url":"https://api.github.com/repos/zfsonlinux/zfs/issues/3195/labels{/name}","comments_url":"https://api.github.com/repos/zfsonlinux/zfs/issues/3195/comments","events_url":"https://api.github.com/repos/zfsonlinux/zfs/issues/3195/events","html_url":"https://github.com/zfsonlinux/zfs/issues/3195","id":62548657,"number":3195,"title":"VERIFY3(zap->zap_u.zap_fat.zap_phys->zap_magic == 0x2F52AB2ABULL) failed (0 == 12703150763)","user":{"login":"nedbass","id":320381,"avatar_url":"https://avatars.githubusercontent.com/u/320381?v=3","gravatar_id":"","url":"https://api.github.com/users/nedbass","html_url":"https://github.com/nedbass","followers_url":"https://api.github.com/users/nedbass/followers","following_url":"https://api.github.com/users/nedbass/following{/other_user}","gists_url":"https://api.github.com/users/nedbass/gists{/gist_id}","starred_url":"https://api.github.com/users/nedbass/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nedbass/subscriptions","organizations_url":"https://api.github.com/users/nedbass/orgs","repos_url":"https://api.github.com/users/nedbass/repos","events_url":"https://api.github.com/users/nedbass/events{/privacy}","received_events_url":"https://api.github.com/users/nedbass/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/zfsonlinux/zfs/labels/Bug%20-%20Major","name":"Bug - Major","color":"e11d21"},{"url":"https://api.github.com/repos/zfsonlinux/zfs/labels/Difficulty%20-%20Hard","name":"Difficulty - Hard","color":"207de5"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-03-18T00:25:09Z","updated_at":"2015-03-25T21:53:44Z","closed_at":"2015-03-25T21:53:44Z","body":"I can reliably hit this assertion on master (as of commit e023409) running the zfsstress test from http://github.com/nedbass/zfsstress.  I disabled the script that randomly changes the `recordsize` property and still hit it.  Afterwards the directory containing the file being opened is corrupt.  The directory zap contains entries for objects that don't exist.  i.e., an `ls -l` listing will contain entries  like this:\r\n\r\n```\r\n-????????? ? ?    ?          ?            ? _)t?0lxva{gjCFyqYG#~cbaw__PFi\r\n```\r\n\r\nStack trace:\r\n\r\n```\r\nZFS: Loaded module v0.6.3-238_ge023409 (DEBUG mode), ZFS pool version 5000, ZFS filesystem version 5\r\nSPL: using hostid 0x00000000\r\n vdb: vdb1 vdb9\r\nVERIFY3(zap->zap_u.zap_fat.zap_phys->zap_magic == 0x2F52AB2ABULL) failed (0 == 12703150763)\r\nPANIC at zap.c:580:zap_deref_leaf()\r\nShowing stack for process 12063\r\nPid: 12063, comm: dd Not tainted 2.6.32-431.23.3.1chaos.ch5.2.x86_64 #1\r\nCall Trace:\r\n [<ffffffffa03ce8ad>] ? spl_dumpstack+0x3d/0x40 [spl]\r\n [<ffffffffa03ceaa2>] ? spl_panic+0xc2/0xe0 [spl]\r\n [<ffffffffa04ca295>] ? dbuf_read+0x4b5/0xfd0 [zfs]\r\n [<ffffffffa04dc636>] ? dmu_buf_hold_noread+0x166/0x240 [zfs]\r\n [<ffffffff81142909>] ? zone_statistics+0x99/0xc0\r\n [<ffffffff8152cf91>] ? mutex_lock+0x31/0x60\r\n [<ffffffffa0573ba6>] ? zap_deref_leaf+0x76/0x170 [zfs]\r\n [<ffffffffa057414a>] ? fzap_lookup+0x5a/0x1f0 [zfs]\r\n [<ffffffffa057ba11>] ? zap_lookup_norm+0x111/0x210 [zfs]\r\n [<ffffffffa057bba3>] ? zap_lookup+0x33/0x40 [zfs]\r\n [<ffffffffa0589920>] ? zfs_dirent_lock+0x500/0x880 [zfs]\r\n [<ffffffff8152cf91>] ? mutex_lock+0x31/0x60\r\n [<ffffffffa05aa03f>] ? zfs_create+0x16f/0x8d0 [zfs]\r\n [<ffffffff811a549a>] ? dput+0x9a/0x160\r\n [<ffffffffa03c6fbd>] ? spl_kmem_zalloc+0xcd/0x220 [spl]\r\n [<ffffffffa05cf80c>] ? zpl_create+0x9c/0x1d0 [zfs]\r\n [<ffffffff81197373>] ? generic_permission+0x23/0xb0\r\n [<ffffffff81199586>] ? vfs_create+0xe6/0x110\r\n [<ffffffff8119d5ce>] ? do_filp_open+0xa8e/0xd20\r\n [<ffffffff81291add>] ? strncpy_from_user+0x5d/0xa0\r\n [<ffffffff811a9b52>] ? alloc_fd+0x92/0x160\r\n [<ffffffff81186c89>] ? do_sys_open+0x69/0x140\r\n [<ffffffff81186da0>] ? sys_open+0x20/0x30\r\n [<ffffffff8100b0b2>] ? system_call_fastpath+0x16/0x1b\r\n```"}}