Bug 179644 - [panic] worklist_remove: 0xfffffe001b6f6000 pagedep(0x0) not on list
Summary: [panic] worklist_remove: 0xfffffe001b6f6000 pagedep(0x0) not on list
Status: Open
Alias: None
Product: Base System
Classification: Unclassified
Component: kern (show other bugs)
Version: Unspecified
Hardware: Any Any
: Normal Affects Only Me
Assignee: freebsd-bugs (Nobody)
URL:
Keywords: crash
Depends on:
Blocks:
 
Reported: 2013-06-17 20:50 UTC by Rene Ladan
Modified: 2022-10-17 12:19 UTC (History)
1 user (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Rene Ladan freebsd_committer freebsd_triage 2013-06-17 20:50:00 UTC
Portions of core.txt.7 (full txt available):

Unread portion of the kernel message buffer:
panic: worklist_remove: 0xfffffe001b6f6000 pagedep(0x0) not on list
cpuid = 1
KDB: stack backtrace:
#0 0xffffffff809208d6 at kdb_backtrace+0x66
#1 0xffffffff808ea8ee at panic+0x1ce
#2 0xffffffff80b05c9c at worklist_remove+0x6c
#3 0xffffffff80b0a86f at handle_workitem_freeblocks+0x6f
#4 0xffffffff80b0951b at process_worklist_item+0x38b
#5 0xffffffff80b0d236 at softdep_process_worklist+0x96
#6 0xffffffff80b0f847 at softdep_flush+0x197
#7 0xffffffff808bba1f at fork_exit+0x11f
#8 0xffffffff80bc36be at fork_trampoline+0xe
Uptime: 6h56m37s
Dumping 817 out of 4058 MB:..2%..12%..22%..32%..42%..51%..61%..71%..81%..91%Attempt to write outside dump device boundaries.
offset(119185326592), mediaoffset(114890392576), length(36864), mediasize(4294967296).

Dump map grown while dumping. Retrying...
Dumping 817 out of 4058 MB:

(kgdb) #0  doadump (textdump=Variable "textdump" is not available.
) at pcpu.h:224
#1  0xffffffff808ea3d1 in kern_reboot (howto=260)
    at /usr/src/sys/kern/kern_shutdown.c:448
#2  0xffffffff808ea8c7 in panic (fmt=0x1 <Address 0x1 out of bounds>)
    at /usr/src/sys/kern/kern_shutdown.c:636
#3  0xffffffff80b05c9c in worklist_remove (item=Variable "item" is not available.)
    at /usr/src/sys/ufs/ffs/ffs_softdep.c:1055
#4  0xffffffff80b0a86f in handle_workitem_freeblocks (
    freeblks=0xfffffe00a92dab80, flags=512)
    at /usr/src/sys/ufs/ffs/ffs_softdep.c:7464
#5  0xffffffff80b0951b in process_worklist_item (mp=0xfffffe001b5e0c60, 
    target=10, flags=512) at /usr/src/sys/ufs/ffs/ffs_softdep.c:1733
#6  0xffffffff80b0d236 in softdep_process_worklist (mp=0xfffffe001b5e0c60, 
    full=0) at /usr/src/sys/ufs/ffs/ffs_softdep.c:1517
#7  0xffffffff80b0f847 in softdep_flush ()
    at /usr/src/sys/ufs/ffs/ffs_softdep.c:1373
#8  0xffffffff808bba1f in fork_exit (
    callout=0xffffffff80b0f6b0 <softdep_flush>, arg=0x0, 
    frame=0xffffff8119fa3c00) at /usr/src/sys/kern/kern_fork.c:992
#9  0xffffffff80bc36be in fork_trampoline ()
    at /usr/src/sys/amd64/amd64/exception.S:602
#10 0x0000000000000000 in ?? ()
#11 0x0000000000000000 in ?? ()
#12 0x0000000000000001 in ?? ()
#13 0x0000000000000000 in ?? ()
#14 0x0000000000000000 in ?? ()
#15 0x0000000000000000 in ?? ()
#16 0x0000000000000000 in ?? ()
#17 0x0000000000000000 in ?? ()
#18 0x0000000000000000 in ?? ()
#19 0x0000000000000000 in ?? ()
#20 0x0000000000000000 in ?? ()
#21 0x0000000000000000 in ?? ()
#22 0x0000000000000000 in ?? ()
#23 0x0000000000000000 in ?? ()
#24 0x0000000000000000 in ?? ()
#25 0x0000000000000000 in ?? ()
#26 0x0000000000000000 in ?? ()
#27 0x0000000000000000 in ?? ()
#28 0x0000000000000000 in ?? ()
#29 0x0000000000000000 in ?? ()
#30 0x0000000000000000 in ?? ()
#31 0x0000000000000000 in ?? ()
#32 0x0000000000000000 in ?? ()
#33 0x0000000000000000 in ?? ()
#34 0xffffffff81241000 in tdq_cpu ()
#35 0xffffffff81241000 in tdq_cpu ()
#36 0xfffffe001b4188e0 in ?? ()
#37 0x0000000000000000 in ?? ()
#38 0xffffff8119fa38d0 in ?? ()
#39 0xffffff8119fa3878 in ?? ()
#40 0xfffffe00039008e0 in ?? ()
#41 0xffffffff8091355e in sched_switch (td=0xffffffff81222920, newtd=0x0, 
    flags=Variable "flags" is not available.
) at /usr/src/sys/kern/sched_ule.c:1921
Previous frame inner to this frame (corrupt stack?)
(kgdb)

How-To-Repeat: Unsure, some "big" disk activity like "poudriere bulk -j 91amd64" might
trigger it, more likely when running X.
Comment 1 alexmontoanelli 2016-09-21 01:43:49 UTC
I had this one too, here my dumps

http://pastebin.com/NRaycr5F

This is a CGNAT server, working with ipnat.

Around 45k nat sessions.
Comment 2 Eitan Adler freebsd_committer freebsd_triage 2018-05-21 00:00:06 UTC
For bugs matching the following conditions:
- Status == In Progress
- Assignee == "bugs@FreeBSD.org"
- Last Modified Year <= 2017

Do
- Set Status to "Open"
Comment 3 Graham Perrin freebsd_committer freebsd_triage 2022-10-17 12:19:24 UTC
Keyword: 

    crash

– in lieu of summary line prefix: 

    [panic]

* bulk change for the keyword
* summary lines may be edited manually (not in bulk). 

Keyword descriptions and search interface: 

    <https://bugs.freebsd.org/bugzilla/describekeywords.cgi>