Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 20 Feb 2026 18:14:24 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 293301] Kernel panic on tty switch
Message-ID:  <bug-293301-227-NUnmRYuq6W@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-293301-227@https.bugs.freebsd.org/bugzilla/>

index | next in thread | previous in thread | raw e-mail

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293301

--- Comment #7 from Artem Bunichev <tembun@bk.ru> ---
(In reply to John Baldwin from comment #6)

Here's the kgdb backtrace (/usr/src as of stable/15
578fa3779a606c3b9d8d763b5c13a3873f6459e3, with Kyle's patch applied):

GNU gdb (GDB) 15.1 [GDB v15.1 for FreeBSD]
Copyright (C) 2024 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>;
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Type "show copying" and "show warranty" for details.
This GDB was configured as "x86_64-portbld-freebsd15.0".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<https://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
    <http://www.gnu.org/software/gdb/documentation/>.

For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/obj/usr/src/amd64.amd64/sys/PIT-DBG/kernel.full...

Unread portion of the kernel message buffer:
panic: sleepq_add: td 0xfffff80002622000 to sleep on wchan 0xfffff800079cde18
with sleeping prohibited
cpuid = 0
time = 1771609919
KDB: stack backtrace:
db_trace_self_wrapper() at 0xffffffff803d11fb =
db_trace_self_wrapper+0x2b/frame 0xfffffe00d1d48ad0
vpanic() at 0xffffffff80620fb6 = vpanic+0x136/frame 0xfffffe00d1d48c00
panic() at 0xffffffff80620e73 = panic+0x43/frame 0xfffffe00d1d48c60
sleepq_add() at 0xffffffff80681238 = sleepq_add+0x338/frame 0xfffffe00d1d48cb0
_sleep() at 0xffffffff8062c5ae = _sleep+0x19e/frame 0xfffffe00d1d48d20
taskqueue_drain() at 0xffffffff80688199 = taskqueue_drain+0xe9/frame
0xfffffe00d1d48d60
vt_window_switch() at 0xffffffff805040d5 = vt_window_switch+0x135/frame
0xfffffe00d1d48da0
vt_proc_window_switch() at 0xffffffff8050487b =
vt_proc_window_switch+0x11b/frame 0xfffffe00d1d48dd0
vt_kbdevent() at 0xffffffff80507dc9 = vt_kbdevent+0x329/frame
0xfffffe00d1d48e30
atkbd_intr() at 0xffffffff808ed32f = atkbd_intr+0xef/frame 0xfffffe00d1d48e60
ithread_loop() at 0xffffffff805e1816 = ithread_loop+0x256/frame
0xfffffe00d1d48ef0
fork_exit() at 0xffffffff805ddf52 = fork_exit+0x82/frame 0xfffffe00d1d48f30
fork_trampoline() at 0xffffffff80935f5e = fork_trampoline+0xe/frame
0xfffffe00d1d48f30
--- trap 0xf366f031, rip = 0x5de6817ce9000258, rsp = 0xe64ef62d07a2df1d, rbp =
0xc9e2f87626c95b6e ---
KDB: enter: panic

Reading symbols from /boot/kernel/cuse.ko...
Reading symbols from /usr/lib/debug//boot/kernel/cuse.ko.debug...
Reading symbols from /boot/modules/i915kms.ko...
(No debugging symbols found in /boot/modules/i915kms.ko)
Reading symbols from /boot/modules/drm.ko...
(No debugging symbols found in /boot/modules/drm.ko)
Reading symbols from /boot/kernel/linuxkpi_video.ko...
Reading symbols from /usr/lib/debug//boot/kernel/linuxkpi_video.ko.debug...
Reading symbols from /boot/modules/dmabuf.ko...
(No debugging symbols found in /boot/modules/dmabuf.ko)
Reading symbols from /boot/kernel/lindebugfs.ko...
Reading symbols from /usr/lib/debug//boot/kernel/lindebugfs.ko.debug...
Reading symbols from /boot/modules/ttm.ko...
(No debugging symbols found in /boot/modules/ttm.ko)
Reading symbols from /boot/kernel/if_iwn.ko...
Reading symbols from /usr/lib/debug//boot/kernel/if_iwn.ko.debug...
Reading symbols from /boot/kernel/wlan.ko...
Reading symbols from /usr/lib/debug//boot/kernel/wlan.ko.debug...
__curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57
57              __asm("movq %%gs:%c1,%0" : "=r" (td)
[?2004h(kgdb) bt
[?2004l
#0  __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57
#1  doadump (textdump=textdump@entry=0) at
/usr/src/sys/kern/kern_shutdown.c:399
#2  0xffffffff803cde9a in db_dump (dummy=<optimized out>, dummy2=<optimized
out>, dummy3=<optimized out>, dummy4=<optimized out>) at
/usr/src/sys/ddb/db_command.c:596
#3  0xffffffff803cdd52 in db_command (last_cmdp=<optimized out>,
cmd_table=<optimized out>, dopager=true) at /usr/src/sys/ddb/db_command.c:508
#4  0xffffffff803cd99d in db_command_loop () at
/usr/src/sys/ddb/db_command.c:555
#5  0xffffffff803d1346 in db_trap (type=<optimized out>, code=<optimized out>)
at /usr/src/sys/ddb/db_main.c:267
#6  0xffffffff8066ef83 in kdb_trap (type=type@entry=3, code=code@entry=0,
tf=tf@entry=0xfffffe00d1d48a10) at /usr/src/sys/kern/subr_kdb.c:790
#7  0xffffffff8095fa3e in trap (frame=<optimized out>) at
/usr/src/sys/amd64/amd64/trap.c:614
#8  <signal handler called>
#9  kdb_enter (why=<optimized out>, msg=<optimized out>) at
/usr/src/sys/kern/subr_kdb.c:556
#10 0xffffffff8062100b in vpanic (fmt=0xffffffff80a43130 "%s: td %p to sleep on
wchan %p with sleeping prohibited", ap=ap@entry=0xfffffe00d1d48c40) at
/usr/src/sys/kern/kern_shutdown.c:962
#11 0xffffffff80620e73 in panic (fmt=0xffffffff8108d7f8 <cnputs_mtx+24> "") at
/usr/src/sys/kern/kern_shutdown.c:887
#12 0xffffffff80681238 in sleepq_add (wchan=wchan@entry=0xfffff800079cde18,
lock=0xfffff8000153c940, wmesg=wmesg@entry=0xffffffff80a2bd8a "tq_drain",
flags=0, flags@entry=36, queue=queue@entry=0)
    at /usr/src/sys/kern/subr_sleepqueue.c:326
#13 0xffffffff8062c5ae in _sleep (ident=ident@entry=0xfffff800079cde18,
lock=0xfffffe00d1d48990, lock@entry=0xfffff8000153c940,
priority=priority@entry=0, wmesg=0xffffffff80a2bd8a "tq_drain",
sbt=sbt@entry=0, pr=pr@entry=0, 
    flags=256) at /usr/src/sys/kern/kern_synch.c:206
#14 0xffffffff80688199 in TQ_SLEEP (tq=0xfffff8000153c900,
p=0xfffff800079cde18, wm=<optimized out>) at
/usr/src/sys/kern/subr_taskqueue.c:123
#15 taskqueue_drain (queue=0xfffff8000153c900, task=0xfffff800079cde18) at
/usr/src/sys/kern/subr_taskqueue.c:619
#16 0xffffffff805040d5 in vt_window_switch (vw=vw@entry=0xfffff8000739ce00) at
/usr/src/sys/dev/vt/vt_core.c:626
#17 0xffffffff8050487b in vt_late_window_switch (vw=0xfffff8000739ce00) at
/usr/src/sys/dev/vt/vt_core.c:474
#18 vt_proc_window_switch (vw=0xfffff8000739ce00) at
/usr/src/sys/dev/vt/vt_core.c:559
#19 0xffffffff80507dc9 in vt_processkey (kbd=0xffffffff81132648 <default_kbd>,
vd=0xffffffff80e47838 <vt_consdev>, c=12) at /usr/src/sys/dev/vt/vt_core.c:919
#20 vt_kbdevent (kbd=0xffffffff81132648 <default_kbd>, event=<optimized out>,
arg=0xffffffff80e47838 <vt_consdev>) at /usr/src/sys/dev/vt/vt_core.c:1033
#21 0xffffffff808ed32f in atkbd_intr (kbd=0xffffffff81132648 <default_kbd>,
arg=<optimized out>) at /usr/src/sys/dev/atkbdc/atkbd.c:565
#22 0xffffffff805e1816 in intr_event_execute_handlers (ie=0xfffff80001064f00,
p=<optimized out>) at /usr/src/sys/kern/kern_intr.c:1191
#23 ithread_execute_handlers (ie=0xfffff80001064f00, p=<optimized out>) at
/usr/src/sys/kern/kern_intr.c:1204
#24 ithread_loop (arg=arg@entry=0xfffff800070e8580) at
/usr/src/sys/kern/kern_intr.c:1297
#25 0xffffffff805ddf52 in fork_exit (callout=0xffffffff805e15c0 <ithread_loop>,
arg=0xfffff800070e8580, frame=0xfffffe00d1d48f40) at
/usr/src/sys/kern/kern_fork.c:1194
#26 <signal handler called>
#27 0x5de6817ce9000258 in ?? ()
Backtrace stopped: Cannot access memory at address 0xe64ef62d07a2df1d
[?2004h(kgdb) quit
[?2004l

-- 
You are receiving this mail because:
You are the assignee for the bug.

home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-293301-227-NUnmRYuq6W>