Yeah that did it. (On a test box I made a copy of the zvol to not mess with production. Will fix on production shortly.) Spose have to be careful to ensure discard is on (and wonder why it's not a default on..).
Enable discard and run fstrim -av inside the VM and this discrepancy should get smaller.
Also read this: https://gist.github.com/Impact123/3dbd7e0ddaf47c5539708a9cbcaab9e3#discard
Please also share zfs list -t all -ospace,refreservation.
Looked around for an answer to this but didnt quite find (except fstrim).
I'm thinking that a VM's ext4fs ate a lot of disk, files subsequently deleted and the zvol remains large, despite being thin provisioned.
I didnt have discard on because...
This one was the winner for me. The symptom that led me here on PVE 8.4.1 was the inability to login via the root account. I was able to get a shell via SSH (putty or whatever you use) and could see the /snap/certbot and /snap/core mounts were at...