Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 27 Aug 2024 13:38:32 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 281035] agp driver kernel panic on 14.1 - agp_close(): page fault while in kernel mode
Message-ID:  <bug-281035-227-OBtbNeahZi@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-281035-227@https.bugs.freebsd.org/bugzilla/>
References:  <bug-281035-227@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D281035

Franco Fichtner <franco@opnsense.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |franco@opnsense.org

--- Comment #1 from Franco Fichtner <franco@opnsense.org> ---
Got a vmcore from a user:

(kgdb) bt
#0  __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57
#1  doadump (textdump=3Dtextdump@entry=3D0) at
/usr/src/sys/kern/kern_shutdown.c:405
#2  0xffffffff8049c2ea in db_dump (dummy=3D<optimized out>, dummy2=3D<optim=
ized
out>, dummy3=3D<optimized out>, dummy4=3D<optimized out>) at
/usr/src/sys/ddb/db_command.c:591
#3  0xffffffff8049c0ed in db_command (last_cmdp=3D<optimized out>,
cmd_table=3D<optimized out>, dopager=3Dfalse) at /usr/src/sys/ddb/db_comman=
d.c:504
#4  0xffffffff8049c236 in db_command_script
(command=3Dcommand@entry=3D0xffffffff81bbf6d3 <db_recursion_data+3> "dump")=
 at
/usr/src/sys/ddb/db_command.c:569
#5  0xffffffff804a14a8 in db_script_exec (scriptname=3D<optimized out>,
warnifnotfound=3Dwarnifnotfound@entry=3D0) at /usr/src/sys/ddb/db_script.c:=
302
#6  0xffffffff804a13b5 in db_script_kdbenter (eventname=3D<optimized out>) =
at
/usr/src/sys/ddb/db_script.c:325
#7  0xffffffff8049f471 in db_trap (type=3D<optimized out>, code=3D<optimize=
d out>)
at /usr/src/sys/ddb/db_main.c:267
#8  0xffffffff80c09108 in kdb_trap (type=3Dtype@entry=3D3, code=3Dcode@entr=
y=3D0,
tf=3Dtf@entry=3D0xfffffe00895e0730) at /usr/src/sys/kern/subr_kdb.c:790
#9  0xffffffff810df419 in trap (frame=3D0xfffffe00895e0730) at
/usr/src/sys/amd64/amd64/trap.c:608
#10 <signal handler called>
#11 kdb_enter (why=3D<optimized out>, msg=3D<optimized out>) at
/usr/src/sys/kern/subr_kdb.c:556
#12 0xffffffff80bb8ad2 in vpanic (fmt=3D0xffffffff8126b7cf "%s",
ap=3Dap@entry=3D0xfffffe00895e0960) at /usr/src/sys/kern/kern_shutdown.c:955
#13 0xffffffff80bb8b83 in panic (fmt=3D0xffffffff81d82c18 <cnputs_mtx+24> "=
") at
/usr/src/sys/kern/kern_shutdown.c:891
#14 0xffffffff810dfeab in trap_fatal (frame=3D0xfffffe00895e0a40, eva=3D0) =
at
/usr/src/sys/amd64/amd64/trap.c:952
#15 0xffffffff810dff07 in trap_pfault (frame=3D<optimized out>,
usermode=3D<optimized out>, signo=3D<optimized out>, ucode=3D<optimized out=
>) at
/usr/src/sys/amd64/amd64/trap.c:760
#16 <signal handler called>
#17 0xffffffff804d8477 in AGP_UNBIND_MEMORY (dev=3D0xfffff800045d3000,
handle=3D0xfffff800045d2600) at ./agp_if.h:156
#18 agp_close (kdev=3D<optimized out>, fflag=3D<optimized out>, devtype=3D<=
optimized
out>, td=3D<optimized out>) at /usr/src/sys/dev/agp/agp.c:840
#19 0xffffffff80b4426f in giant_close (dev=3D0xfffff800045e7800, fflag=3D13=
1077,
devtype=3D8192, td=3D0xfffff80042b6d740) at /usr/src/sys/kern/kern_conf.c:3=
89
#20 0xffffffff80a25191 in devfs_close (ap=3D0xfffffe00895e0c00) at
/usr/src/sys/fs/devfs/devfs_vnops.c:769
#21 0xffffffff811bcc3f in VOP_CLOSE_APV (vop=3D0xffffffff81ab2888
<devfs_specops>, a=3Da@entry=3D0xfffffe00895e0c00) at vnode_if.c:496
#22 0xffffffff80ccbde0 in VOP_CLOSE (vp=3D0xfffff800425e3540, fflag=3D5,
cred=3D0xfffff80085d7b500, td=3D0xfffff80042b6d740) at ./vnode_if.h:247
#23 vn_close1 (vp=3Dvp@entry=3D0xfffff800425e3540, flags=3D5,
file_cred=3D0xfffff80085d7b500, td=3D0xfffff80042b6d740, keep_ref=3Dfalse) =
at
/usr/src/sys/kern/vfs_vnops.c:543
#24 0xffffffff80cca1cd in vn_closefile (fp=3D0xfffff80018ba7a00,
td=3D0xfffff80004892900) at /usr/src/sys/kern/vfs_vnops.c:1849
#25 0xffffffff80a25bfa in devfs_close_f (fp=3D0xfffff800045d3000, td=3D0x20=
005) at
/usr/src/sys/fs/devfs/devfs_vnops.c:788
#26 0xffffffff80b5038b in fo_close (fp=3D0xfffff80018ba7a00, td=3D0x20005) =
at
/usr/src/sys/sys/file.h:392
#27 _fdrop (fp=3Dfp@entry=3D0xfffff80018ba7a00, td=3D0x20005,
td@entry=3D0xfffff80042b6d740) at /usr/src/sys/kern/kern_descrip.c:3668
#28 0xffffffff80b53e53 in closef (fp=3Dfp@entry=3D0xfffff80018ba7a00,
td=3Dtd@entry=3D0xfffff80042b6d740) at /usr/src/sys/kern/kern_descrip.c:2841
#29 0xffffffff80b57f91 in closefp_impl (fdp=3D0xfffffe008977d860, fd=3D9,
fp=3D0xfffff80018ba7a00, td=3D0xfffff80042b6d740, audit=3Dtrue) at
/usr/src/sys/kern/kern_descrip.c:1317
#30 0xffffffff810e0880 in syscallenter (td=3D0xfffff80042b6d740) at
/usr/src/sys/amd64/amd64/../../kern/subr_syscall.c:188
#31 amd64_syscall (td=3D0xfffff80042b6d740, traced=3D0) at
/usr/src/sys/amd64/amd64/trap.c:1194
#32 <signal handler called>
#33 0x000028a511a672ba in ?? ()
Backtrace stopped: Cannot access memory at address 0x28a517915d88

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-281035-227-OBtbNeahZi>