[Bug 265795] panic: vm_page_dequeue_deferred: page has unexpected queue state

From: <bugzilla-noreply_at_freebsd.org>
Date: Sun, 06 Apr 2025 20:54:03 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=265795

--- Comment #7 from John F. Carr <jfc@mit.edu> ---
I had the first crash of this type in a long time this weekend, apparently
during an rm process cleanup up after a poudriere build.  The server is now
running 14.2-STABLE.

#4  0xffff000000454ba4 in panic (
    fmt=0xffff000000b53000 <M_DUMPER_uninit_sys_uninit+24> "\300=\265")
    at /usr/src/sys/kern/kern_shutdown.c:891
#5  0xffff000000796db0 in vm_page_dequeue_deferred (m=0xffff0000008e0941)
    at /usr/src/sys/vm/vm_page.c:3795
#6  0xffff00000079aa08 in vm_page_free_prep (m=m@entry=0xffffa09ef59d3740)
    at /usr/src/sys/vm/vm_page.c:3933
#7  0xffff000000791a30 in vm_page_free_toq (m=m@entry=0xffffa09ef59d3740)
    at /usr/src/sys/vm/vm_page.c:3975
#8  0xffff000000791a18 in vm_page_free (m=0xffff000000b53000
<M_DUMPER_uninit_sys_uninit+24>, 
    m@entry=0xffffa09ef59d3740) at /usr/src/sys/vm/vm_page.c:1333
#9  0xffff00000078cea8 in vm_object_page_remove (object=0xffffa08b72e10000,
start=0, end=0, 
    options=1) at /usr/src/sys/vm/vm_object.c:2158
#10 0xffff00000053a260 in bufobj_invalbuf (bo=0xffffa00cbc978620, flags=1, 
    slpflag=slpflag@entry=-1501613008, slptimeo=slptimeo@entry=-1501613008)
    at /usr/src/sys/kern/vfs_subr.c:2372
#11 0xffff00000053dbb4 in vinvalbuf (vp=<optimized out>, flags=<optimized out>, 
    slpflag=<optimized out>, slptimeo=<optimized out>) at
/usr/src/sys/kern/vfs_subr.c:2403
#12 0xffff00000053dbb4 in vgonel (vp=vp@entry=0xffffa00cbc978540)
--Type <RET> for more, q to quit, c to continue without paging--
#13 0xffff00000053e3d0 in vrecyclel (vp=0xffffa00cbc978540) at
/usr/src/sys/kern/vfs_subr.c:4225
#14 vrecycle (vp=vp@entry=0xffffa00cbc978540) at
/usr/src/sys/kern/vfs_subr.c:4206
#15 0xffff0000012af57c in zfs_inactive (vp=0xffffa00cbc978540, ct=0x0,
cr=<optimized out>)
    at /usr/src/sys/contrib/openzfs/module/os/freebsd/zfs/zfs_vnops_os.c:3731
#16 zfs_freebsd_inactive (ap=<optimized out>)
    at /usr/src/sys/contrib/openzfs/module/os/freebsd/zfs/zfs_vnops_os.c:4950
#17 0xffff00000053ce5c in VOP_INACTIVE (vp=0xffffa00cbc978540) at
./vnode_if.h:1033
#18 vinactivef (vp=0xffffa00cbc978540) at /usr/src/sys/kern/vfs_subr.c:4032
#19 0xffff00000053cdf0 in vinactive (vp=0xffff000000b53000
<M_DUMPER_uninit_sys_uninit+24>, 
    vp@entry=0xffffa00cbc978540) at /usr/src/sys/kern/vfs_subr.c:4055
#20 0xffff00000053c7b8 in vput_final (vp=0xffffa00cbc978540, func=<optimized
out>, 
    func@entry=VPUT) at /usr/src/sys/kern/vfs_subr.c:3577
#21 0xffff00000053c8dc in vput (vp=0xffff000000b53000
<M_DUMPER_uninit_sys_uninit+24>)
    at /usr/src/sys/kern/vfs_subr.c:3634
#22 0xffff000000549b10 in kern_funlinkat (td=<optimized out>, dfd=-100, 
    path=0xa68934057b78 <error: Cannot access memory at address
0xa68934057b78>, 
    fd=<optimized out>, pathseg=UIO_USERSPACE, pathseg@entry=(unknown:
0xa67f37f0), 
    flag=flag@entry=-1501612048, oldinum=0, oldinum@entry=18446462610116130800)
    at /usr/src/sys/kern/vfs_syscalls.c:2010
#23 0xffff000000549848 in sys_unlink (td=0xffff000000b53000
<M_DUMPER_uninit_sys_uninit+24>, 
    uap=<optimized out>) at /usr/src/sys/kern/vfs_syscalls.c:1880
#24 0xffff00028d6a7d00 in filemon_wrapper_unlink (
    td=0xffff000000b53000 <M_DUMPER_uninit_sys_uninit+24>,
uap=0xffff000358da26c0)
    at /usr/src/sys/dev/filemon/filemon_wrapper.c:347
--Type <RET> for more, q to quit, c to continue without paging--
#25 0xffff0000007e15f4 in syscallenter (td=0xffff000358da22c0)
    at /usr/src/sys/arm64/arm64/../../kern/subr_syscall.c:193
#26 svc_handler (td=0xffff000358da22c0, frame=<optimized out>)
    at /usr/src/sys/arm64/arm64/trap.c:198
#27 do_el0_sync (td=0xffff000358da22c0, frame=<optimized out>)
    at /usr/src/sys/arm64/arm64/trap.c:645


# ps -lx -M vmcore.2
UID   PID  PPID  C PRI NI   VSZ  RSS MWCHAN   STAT TT     TIME COMMAND
  0     0     0 20 -16  0     0    0 swapin   DLs   -  0:00.00 [kernel]
  0     1     0 29  68  0 11652 1268 wait     DLs   -  0:00.00 [init]
  0     2     0  0 -60  0     0    0 -        WL    -  0:00.00 [clock]
  0     3     0  0 -16  0     0    0 crypto_w DL    -  0:00.00 [crypto]
  0     4     0 24 -16  0     0    0 -        DL    -  0:00.00 [cam]
  0     5     0  0 -60  0     0    0 -        DL    -  0:00.00 [busdma]
  0     6     0  2  20  0     0    0 t->zthr_ DL    -  0:00.00 [zfskern]
  0     7     0 12 -16  0     0    0 -        DL    -  0:00.00 [rand_harvestq]
  0     8     0 23 -16  0     0    0 psleep   DL    -  0:00.00 [pagedaemon]
  0     9     0  0 -16  0     0    0 psleep   DL    -  0:00.00 [vmdaemon]
  0    10     0  0 -16  0     0    0 audit_wo DL    -  0:00.00 [audit]
  0    11     0  0 187  0     0    0 -        RL    -  0:00.00 [idle]
  0    12     0  0 -60  0     0    0 -        WL    -  0:00.00 [intr]
  0    13     0  1  21  0     0    0 -        DL    -  0:00.00 [geom]
  0    14     0  0 -16  0     0    0 seqstate DL    -  0:00.00 [sequencer 00]
  0    15     0  0 -60  0     0    0 -        DL    -  0:00.00 [usb]
  0    16     0 31 -16  0     0    0 -        RL    -  0:00.00 [bufdaemon]
  0    17     0  6  21  0     0    0 vlruwt   DL    -  0:00.00 [vnlru]
  0    18     0 25  16  0     0    0 syncer   DL    -  0:00.00 [syncer]
  0  2117     1 19  20  0 13212 2592 select   Ds    -  0:00.00 [dhclient]
  0  2120     1 29   4  0 13212 2672 select   Ds    -  0:00.00 [dhclient]
  0  2270     1 27  68  0 13164 2320 select   Ds    -  0:00.00 [moused]
  0  2283     1 27  20  0 14504 4024 select   Ds    -  0:00.00 [devd]
  0  2486     1 31  20  0 12784 2704 select   Ds    -  0:00.00 [syslogd]
  0  2615     1 23  32  0 22056 9132 select   Ds    -  0:00.00 [sshd]
  0  2620     1 11  20  0 12960 2484 nanslp   Ds    -  0:00.00 [cron]
  0  2635     1 15  68  0 12756 2208 ttyin    Ds+   -  0:00.00 [getty]
  0  2636     1 12  68  0 12756 2212 ttyin    Ds+   -  0:00.00 [getty]
  0  2637     1 14  68  0 12756 2204 ttyin    Ds+   -  0:00.00 [getty]
  0  2638     1 22  68  0 12756 2212 ttyin    Ds+   -  0:00.00 [getty]
  0  2639     1  6  68  0 12756 2204 ttyin    Ds+   -  0:00.00 [getty]
  0  2640     1 28  68  0 12756 2208 ttyin    Ds+   -  0:00.00 [getty]
  0  2641     1 25  68  0 12756 2204 ttyin    Ds+   -  0:00.00 [getty]
  0  2642     1 23  68  0 12756 2208 ttyin    Ds+   -  0:00.00 [getty]
  0  2643     1 10  68  0 12756 2196 ttyin    Ds+   -  0:00.00 [getty]
  0  2657  2615 23  21  0 22612 9928 select   Ds    -  0:00.00 [sshd-session]
  0  2706  2660 26  20  0 13260 2820 wait     D     -  0:00.00 [su]
  0  2707  2706 20  28  0 13492 3168 wait     D     -  0:00.00 [sh]
  0 77612 84958 15  68 10 12832 3240 wait     DN    -  0:00.00 [make]
  0 77657 77612  4  68 10 12832 3236 wait     DN    -  0:00.00 [make]
  0 77679 77657 11 100 10 12628 2444 -        RN    -  0:00.00 [rm]
  0 79346  2707  2  36 10 15408 3968 select   DN+   -  0:00.00 [sh]
  0 79717 79346  4  68 10 15408 4192 nanslp   DN+   -  0:00.00 [sh]
  0 84958 79346 14  68 10 15408 4088 wait     DN    -  0:00.00 [sh]
  0 88003 79346  4  42 10 15408 4052 piperd   DN+   -  0:00.00 [sh]

-- 
You are receiving this mail because:
You are the assignee for the bug.