BSOD on unmount

[copyliu]

System information

Type	Version/Name
Distribution Name	Win11 24H2 26100.2894
Distribution Version
Kernel Version
Architecture	x86_64
OpenZFS Version	zfswin-2.3.0rc5

Describe the problem you're observing

BSOD on unmount when dataset is using

Describe how to reproduce the problem

1. zpool create pool1
2. open the disk letter in explorer
3. zfs unmount pool1

Include any warning/errors/backtraces from the system logs

BUGCHECK_CODE:  3b

BUGCHECK_P1: 80000003

BUGCHECK_P2: fffff800576e1180

BUGCHECK_P3: fffffb8e250adb20

BUGCHECK_P4: 0

FILE_IN_CAB:  021125-29203-01.dmp

ADDITIONAL_DEBUG_TEXT:  
You can run '.symfix; .reload' to try to fix the symbol path and load symbols.

WRONG_SYMBOLS_TIMESTAMP: 62ec3ba4

WRONG_SYMBOLS_SIZE: 144f000

FAULTING_MODULE: fffff800a3a00000 nt

FAULTING_THREAD:  ffffce82ab9c50c0

CONTEXT:  fffffb8e250adb20 -- (.cxr 0xfffffb8e250adb20)
rax=0000000000000000 rbx=ffffce82b501cc60 rcx=82f960bd96060000
rdx=0000000000000000 rsi=ffffce82c9f21a50 rdi=ffffce82b456d3c0
rip=fffff800576e1180 rsp=fffffb8e250ae570 rbp=fffffb8e250af650
 r8=fffff80057c58930  r9=7efefeff2c41442c r10=0000000000000000
r11=8101010101010100 r12=0000000000000002 r13=ffffce82c9f21a50
r14=0000000000000000 r15=0000000000000001
iopl=0         nv up ei ng nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00040282
OpenZFS!spl_panic+0x70:
fffff800`576e1180 cc              int     3
Resetting default scope

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

STACK_TEXT:  
fffffb8e`250ae570 fffff800`577320ef     : ffffce82`e510f9a8 fffff800`577a2178 fffff800`57f3c740 fffff800`577082ed : OpenZFS!spl_panic+0x70 [C:\src\openzfs\module\os\windows\spl\spl-err.c @ 84] 
fffffb8e`250ae5d0 fffff800`57733eb6     : ffffce82`b501cc60 00000000`00000000 00000000`00000000 00000000`00000000 : OpenZFS!spl_assert+0x3f [C:\src\openzfs\include\os\windows\spl\sys\debug.h @ 172] 
fffffb8e`250ae620 fffff800`57a5ec1b     : fffff800`57cdd30a fffff800`57cdcc5c ffffce82`e2e9f612 ffffce82`e2e9f5e0 : OpenZFS!avl_destroy+0xa6 [C:\src\openzfs\module\avl\avl.c @ 899] 
fffffb8e`250ae660 fffff800`57a6163e     : ffffce82`e510d980 00000000`00000002 00000000`00000000 00000001`00000000 : OpenZFS!zfsvfs_free+0x12b [C:\src\openzfs\module\os\windows\zfs\zfs_vfsops.c @ 925] 
fffffb8e`250ae6c0 fffff800`57a611b8     : fffffb8e`250af650 00000000`00000001 00000000`00000002 ffffce82`c9f21a50 : OpenZFS!zfs_freevfs+0x6e [C:\src\openzfs\module\os\windows\zfs\zfs_vfsops.c @ 2094] 
fffffb8e`250ae700 fffff800`57a89543     : ffffce82`af587ed0 fffffb8e`00000000 ffffce82`c9f21a00 ffffce82`c9f21a01 : OpenZFS!zfs_vfs_unmount+0x398 [C:\src\openzfs\module\os\windows\zfs\zfs_vfsops.c @ 1711] 
fffffb8e`250ae890 fffff800`57a27df5     : ffffce82`e4a35abe ffffce82`e4a35ab8 fffff800`57c60757 00000006`e3f67000 : OpenZFS!zfs_windows_unmount+0x843 [C:\src\openzfs\module\os\windows\zfs\zfs_vnops_windows_mount.c @ 1906] 
fffffb8e`250af1a0 fffff800`577189d5     : 00000000`00000002 00000000`00000000 00000000`00000000 00000000`00000000 : OpenZFS!zfs_ioc_unmount+0x55 [C:\src\openzfs\module\os\windows\zfs\zfs_ioctl_os.c @ 928] 
fffffb8e`250af1e0 fffff800`57a27c3a     : 00000000`00000000 ffffce82`e001b068 00000000`00000011 ffffce82`e1958820 : OpenZFS!zfsdev_ioctl_common+0x835 [C:\src\openzfs\module\zfs\zfs_ioctl.c @ 8117] 
fffffb8e`250af2c0 fffff800`57a3fbf7     : ffffce82`b501cc60 ffffce82`e1958820 00000000`0000008c fffff800`57a4f1de : OpenZFS!zfsdev_ioctl+0x2aa [C:\src\openzfs\module\os\windows\zfs\zfs_ioctl_os.c @ 878] 
fffffb8e`250af3a0 fffff800`57a3ef4b     : ffffce82`b501cc60 00000000`00000000 deadbeef`deadbeef ffffce82`ab9c50c0 : OpenZFS!ioctlDispatcher+0x2b7 [C:\src\openzfs\module\os\windows\zfs\zfs_vnops_windows.c @ 6991] 
fffffb8e`250af470 fffff800`a3cf7a0e     : fffff800`57cd8bcf fffff800`00002214 fffff800`57cdbc80 7fffce82`d06233d0 : OpenZFS!dispatcher+0x21b [C:\src\openzfs\module\os\windows\zfs\zfs_vnops_windows.c @ 8057] 
fffffb8e`250af5a0 fffff800`57cd8bcf     : fffff800`00002214 fffff800`57cdbc80 7fffce82`d06233d0 ffffce82`e1869488 : nt+0x2f7a0e
fffffb8e`250af5a8 fffff800`00002214     : fffff800`57cdbc80 7fffce82`d06233d0 ffffce82`e1869488 00000017`ab9c5940 : OpenZFS!`string'+0x25
fffffb8e`250af5b0 fffff800`57cdbc80     : 7fffce82`d06233d0 ffffce82`e1869488 00000017`ab9c5940 ffffce82`b456d3c0 : 0xfffff800`00002214
fffffb8e`250af5b8 7fffce82`d06233d0     : ffffce82`e1869488 00000017`ab9c5940 ffffce82`b456d3c0 fffff800`a4285588 : OpenZFS!`string'
fffffb8e`250af5c0 ffffce82`e1869488     : 00000017`ab9c5940 ffffce82`b456d3c0 fffff800`a4285588 ffffce82`c9f21a50 : 0x7fffce82`d06233d0
fffffb8e`250af5c8 00000017`ab9c5940     : ffffce82`b456d3c0 fffff800`a4285588 ffffce82`c9f21a50 fffffb8e`250af650 : 0xffffce82`e1869488
fffffb8e`250af5d0 ffffce82`b456d3c0     : fffff800`a4285588 ffffce82`c9f21a50 fffffb8e`250af650 ffffce82`b501cc60 : 0x00000017`ab9c5940
fffffb8e`250af5d8 fffff800`a4285588     : ffffce82`c9f21a50 fffffb8e`250af650 ffffce82`b501cc60 00000001`00000053 : 0xffffce82`b456d3c0
fffffb8e`250af5e0 ffffce82`c9f21a50     : fffffb8e`250af650 ffffce82`b501cc60 00000001`00000053 fffff800`57cd8baa : nt+0x885588
fffffb8e`250af5e8 fffffb8e`250af650     : ffffce82`b501cc60 00000001`00000053 fffff800`57cd8baa fffff800`57cdbc80 : 0xffffce82`c9f21a50
fffffb8e`250af5f0 ffffce82`b501cc60     : 00000001`00000053 fffff800`57cd8baa fffff800`57cdbc80 00000000`00000000 : 0xfffffb8e`250af650
fffffb8e`250af5f8 00000001`00000053     : fffff800`57cd8baa fffff800`57cdbc80 00000000`00000000 ffffce82`b501cc60 : 0xffffce82`b501cc60
fffffb8e`250af600 fffff800`57cd8baa     : fffff800`57cdbc80 00000000`00000000 ffffce82`b501cc60 ffffce82`c9f21a50 : 0x00000001`00000053
fffffb8e`250af608 fffff800`57cdbc80     : 00000000`00000000 ffffce82`b501cc60 ffffce82`c9f21a50 00000000`00000000 : OpenZFS!`string'
fffffb8e`250af610 00000000`00000000     : ffffce82`b501cc60 ffffce82`c9f21a50 00000000`00000000 ffffce82`b501cc60 : OpenZFS!`string'


FAULTING_SOURCE_LINE:  C:\src\openzfs\module\os\windows\spl\spl-err.c

FAULTING_SOURCE_FILE:  C:\src\openzfs\module\os\windows\spl\spl-err.c

FAULTING_SOURCE_LINE_NUMBER:  84

STACK_COMMAND:  .cxr 0xfffffb8e250adb20 ; kb

EXCEPTION_CODE_STR:  62EC3BA4

EXCEPTION_STR:  WRONG_SYMBOLS

PROCESS_NAME:  ntoskrnl.wrong.symbols.exe

IMAGE_NAME:  ntoskrnl.wrong.symbols.exe

MODULE_NAME: nt_wrong_symbols

SYMBOL_NAME:  nt_wrong_symbols!62EC3BA4144F000

FAILURE_BUCKET_ID:  WRONG_SYMBOLS_X64_26100.1.amd64fre.ge_release.240331-1435_TIMESTAMP_220804-213532_62EC3BA4_nt_wrong_symbols!62EC3BA4144F000

OS_VERSION:  10.0.26100.1

BUILDLAB_STR:  ge_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {c738eb1b-29a2-e90c-e0f5-25be10454884}

Followup:     MachineOwner
---------

021125-29203-01.dmp

BUGCHECK_CODE:  3b

BUGCHECK_P1: 80000003

BUGCHECK_P2: fffff8005a5e1180

BUGCHECK_P3: ffff850167dfe700

BUGCHECK_P4: 0

FILE_IN_CAB:  021125-30421-01.dmp

ADDITIONAL_DEBUG_TEXT:  
You can run '.symfix; .reload' to try to fix the symbol path and load symbols.

WRONG_SYMBOLS_TIMESTAMP: 62ec3ba4

WRONG_SYMBOLS_SIZE: 144f000

FAULTING_MODULE: fffff800c3e00000 nt

FAULTING_THREAD:  ffffa10210961040

CONTEXT:  ffff850167dfe700 -- (.cxr 0xffff850167dfe700)
rax=0000000000000000 rbx=ffffa10208b38250 rcx=029675156c0d0000
rdx=0000000000000000 rsi=ffffa10208b382b8 rdi=ffffa101e5e24ac0
rip=fffff8005a5e1180 rsp=ffff850167dff150 rbp=ffffa10208d36010
 r8=fffff8005ab58930  r9=7efefeff2c41442c r10=0000000000000000
r11=8101010101010100 r12=0000000000000000 r13=0000000010000004
r14=ffffa101e502c710 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00040286
OpenZFS!spl_panic+0x70:
fffff800`5a5e1180 cc              int     3
Resetting default scope

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

STACK_TEXT:  
ffff8501`67dff150 fffff800`5a92d99f     : ffffa101`f6d00e9c ffffa101`f6d00e48 0000003d`deadbeef 00000001`00000056 : OpenZFS!spl_panic+0x70 [C:\src\openzfs\module\os\windows\spl\spl-err.c @ 84] 
ffff8501`67dff1b0 fffff800`5a938726     : 00000000`00000014 ffffa101`f7e22440 00000000`000000a5 fffff800`5a94f1de : OpenZFS!spl_assert+0x3f [C:\src\openzfs\include\os\windows\spl\sys\debug.h @ 172] 
ffff8501`67dff200 fffff800`5a9438ee     : 00000000`00000000 ffffa102`08b382b8 ffffa102`08b38250 ff00f800`5a5fb859 : OpenZFS!notify_change_directory+0x176 [C:\src\openzfs\module\os\windows\zfs\zfs_vnops_windows.c @ 4625] 
ffff8501`67dff2d0 fffff800`5a93f08f     : ffffa102`08b38250 fffff800`c402f1b8 ffff8501`67dff5f9 00000000`00000000 : OpenZFS!fsDispatcher+0xf7e [C:\src\openzfs\module\os\windows\zfs\zfs_vnops_windows.c @ 7913] 
ffff8501`67dff450 fffff800`c40f7a0e     : ffffa102`10809090 ffffa102`08d36010 00000000`00000008 00000000`00000000 : OpenZFS!dispatcher+0x35f [C:\src\openzfs\module\os\windows\zfs\zfs_vnops_windows.c @ 8067] 
ffff8501`67dff580 ffffa102`10809090     : ffffa102`08d36010 00000000`00000008 00000000`00000000 00000000`0000003f : nt+0x2f7a0e
ffff8501`67dff588 ffffa102`08d36010     : 00000000`00000008 00000000`00000000 00000000`0000003f ffffa102`08d36320 : 0xffffa102`10809090
ffff8501`67dff590 00000000`00000008     : 00000000`00000000 00000000`0000003f ffffa102`08d36320 ffffa102`08b38250 : 0xffffa102`08d36010
ffff8501`67dff598 00000000`00000000     : 00000000`0000003f ffffa102`08d36320 ffffa102`08b38250 fffff800`55aa6afc : 0x8


FAULTING_SOURCE_LINE:  C:\src\openzfs\module\os\windows\spl\spl-err.c

FAULTING_SOURCE_FILE:  C:\src\openzfs\module\os\windows\spl\spl-err.c

FAULTING_SOURCE_LINE_NUMBER:  84

STACK_COMMAND:  .cxr 0xffff850167dfe700 ; kb

EXCEPTION_CODE_STR:  62EC3BA4

EXCEPTION_STR:  WRONG_SYMBOLS

PROCESS_NAME:  ntoskrnl.wrong.symbols.exe

IMAGE_NAME:  ntoskrnl.wrong.symbols.exe

MODULE_NAME: nt_wrong_symbols

SYMBOL_NAME:  nt_wrong_symbols!62EC3BA4144F000

FAILURE_BUCKET_ID:  WRONG_SYMBOLS_X64_26100.1.amd64fre.ge_release.240331-1435_TIMESTAMP_220804-213532_62EC3BA4_nt_wrong_symbols!62EC3BA4144F000

OS_VERSION:  10.0.26100.1

BUILDLAB_STR:  ge_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {c738eb1b-29a2-e90c-e0f5-25be10454884}

Followup:     MachineOwner
---------

021125-30421-01.dmp

[lundman]

 : OpenZFS!avl_destroy+0xa6 [C:\src\openzfs\module\avl\avl.c @ 899] 
 : OpenZFS!zfsvfs_free+0x12b [C:\src\openzfs\module\os\windows\zfs\zfs_vfsops.c @ 925] 

Basically, unmount freeing the AVL tree of z_all_znodes, but it isn't empty, so we panic. Probably should ask Explorer to quit, then return EBUSY if things are still open.

[copyliu]

the second memory dump seems not a unmount related, it's a random BSOD on my system