Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 31 May 2026 16:52:24 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 295752] rtw89: page fault in linuxkpi_ieee80211_next_txq ac=2
Message-ID:  <bug-295752-227@https.bugs.freebsd.org/bugzilla/>

index | next in thread | raw e-mail

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295752

            Bug ID: 295752
           Summary: rtw89: page fault in linuxkpi_ieee80211_next_txq ac=2
           Product: Base System
           Version: 15.0-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: todd.c.smith@gmail.com

Since installing on May 28th my FreeBSD 15.0-RELEASE-p9 system has crashes and
reboots multiple times. Each time I have been using either the Zen or Firefox
browser. Claude helped me suggest what I should include and suggested
submitting this to bugzilla. While there are other rtw89 bugs submitted, Im not
technical enough to know if these are the same. My apologies if these are a
duplicate. Im new to FreeBSD and love it so far with the exception of the
freezing and rebooting occasionally. Hopefully this helps. If you need any
other information that may help fix this please let me know. 

(kgdb) bt
#0  __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57
#1  doadump (textdump=<optimized out>) at /usr/src/sys/kern/kern_shutdown.c:399
#2  0xffffffff80b71089 in kern_reboot (howto=260) at
/usr/src/sys/kern/kern_shutdown.c:519
#3  0xffffffff80b71597 in vpanic (fmt=0xffffffff811d1305 "%s",
ap=ap@entry=0xfffffe0138f70ba0) at /usr/src/sys/kern/kern_shutdown.c:974
#4  0xffffffff80b713c3 in panic (fmt=<unavailable>) at
/usr/src/sys/kern/kern_shutdown.c:887
#5  0xffffffff81079f99 in trap_fatal (frame=<optimized out>, eva=<optimized
out>) at /usr/src/sys/amd64/amd64/trap.c:969
#6  0xffffffff81079f99 in trap_pfault (frame=0xfffffe0138f70c20,
usermode=false, signo=<optimized out>, ucode=<optimized out>)
#7  <signal handler called>
#8  0xffffffff80de7393 in linuxkpi_ieee80211_next_txq
(hw=hw@entry=0xfffffe017d2504c0, ac=ac@entry=2 '\002') at
/usr/src/sys/compat/linuxkpi/common/src/linux_80211.c:8654
#9  0xffffffff8420636a in ieee80211_next_txq (hw=0xfffffe017d2504c0, ac=2
'\002') at /usr/src/sys/compat/linuxkpi/common/include/net/mac80211.h:1425
#10 rtw89_core_txq_schedule (rtwdev=0xfffffe017d250580, ac=2 '\002',
reinvoke=<optimized out>) at /usr/src/sys/contrib/dev/rtw89/core.c:3341
#11 rtw89_core_txq_work (w=<optimized out>) at
/usr/src/sys/contrib/dev/rtw89/core.c:3387
#12 0xffffffff80e07df4 in linux_work_fn (context=0xfffffe017d250ff8,
pending=<optimized out>) at
/usr/src/sys/compat/linuxkpi/common/src/linux_work.c:308
#13 0xffffffff80bd4d82 in taskqueue_run_locked
(queue=queue@entry=0xfffff800230ebb00) at
/usr/src/sys/kern/subr_taskqueue.c:517
#14 0xffffffff80bd5f52 in taskqueue_thread_loop
(arg=arg@entry=0xfffff800061aa800) at /usr/src/sys/kern/subr_taskqueue.c:829
#15 0xffffffff80b2782b in fork_exit (callout=0xffffffff80bd5e90
<taskqueue_thread_loop>, arg=0xfffff800061aa800, frame=0xfffffe0138f70f40)
    at /usr/src/sys/kern/kern_fork.c:1153
#16 <signal handler called>

(kgdb) frame 0
#0  __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57
57      in /usr/src/sys/amd64/include/pcpu_aux.h

gdb output:

GNU gdb (GDB) 15.1 [GDB v15.1 for FreeBSD]
Copyright (C) 2024 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>;
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Type "show copying" and "show warranty" for details.
This GDB was configured as "x86_64-portbld-freebsd15.0".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<https://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
    <http://www.gnu.org/software/gdb/documentation/>.

For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /boot/kernel/kernel...
Reading symbols from /usr/lib/debug//boot/kernel/kernel.debug...

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
cpuid = 4; apic id = 04
fault virtual address   = 0x0
fault code              = supervisor write data, page not present
instruction pointer     = 0x20:0xffffffff80de7393
stack pointer           = 0x28:0xfffffe0138f70ce0
frame pointer           = 0x28:0xfffffe0138f70cf0
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 0 (rtw89_tx_wq_9)
rdi: fffffe017d2504c0 rsi: 0000000000000000 rdx: 0000000000000000
rcx: fffff80001551e00  r8: 00000000000000e7  r9: ffffffff843d7890
rax: 0000000000000000 rbx: fffffe017d250240 rbp: fffffe0138f70cf0
r10: 0000000000000001 r11: 0000000000002af8 r12: fffff800061f79c0
r13: fffffe017d250580 r14: 0000000000000002 r15: 0000000000000000
trap number             = 12
panic: page fault
cpuid = 4
time = 1780241734
KDB: stack backtrace:
#0 0xffffffff80bbe18d at kdb_backtrace+0x5d
#1 0xffffffff80b71506 at vpanic+0x136
#2 0xffffffff80b713c3 at panic+0x43
#3 0xffffffff81079f99 at trap_pfault+0x3c9
#4 0xffffffff81050018 at calltrap+0x8
#5 0xffffffff8420636a at rtw89_core_txq_work+0xaa
#6 0xffffffff80e07df4 at linux_work_fn+0xe4
#7 0xffffffff80bd4d82 at taskqueue_run_locked+0x182
#8 0xffffffff80bd5f52 at taskqueue_thread_loop+0xc2
#9 0xffffffff80b2782b at fork_exit+0x7b
#10 0xffffffff8105103e at fork_trampoline+0xe
Uptime: 49m16s
Dumping 1047 out of 15140 MB:..2%..11%..22%..31%..42%..51%..62%..71%..81%..91%

Reading symbols from /boot/kernel/zfs.ko...
Reading symbols from /usr/lib/debug//boot/kernel/zfs.ko.debug...
Reading symbols from /boot/modules/amdgpu.ko...
(No debugging symbols found in /boot/modules/amdgpu.ko)
Reading symbols from /boot/modules/drm.ko...
(No debugging symbols found in /boot/modules/drm.ko)
Reading symbols from /boot/kernel/iic.ko...
Reading symbols from /usr/lib/debug//boot/kernel/iic.ko.debug...
Reading symbols from /boot/kernel/linuxkpi_video.ko...
Reading symbols from /usr/lib/debug//boot/kernel/linuxkpi_video.ko.debug...
Reading symbols from /boot/modules/dmabuf.ko...
(No debugging symbols found in /boot/modules/dmabuf.ko)
Reading symbols from /boot/kernel/lindebugfs.ko...
Reading symbols from /usr/lib/debug//boot/kernel/lindebugfs.ko.debug...
Reading symbols from /boot/modules/ttm.ko...
(No debugging symbols found in /boot/modules/ttm.ko)
Reading symbols from /boot/modules/amdgpu_green_sardine_asd_bin.ko...
(No debugging symbols found in /boot/modules/amdgpu_green_sardine_asd_bin.ko)
Reading symbols from /boot/modules/amdgpu_green_sardine_ta_bin.ko...
(No debugging symbols found in /boot/modules/amdgpu_green_sardine_ta_bin.ko)
Reading symbols from /boot/modules/amdgpu_green_sardine_dmcub_bin.ko...
(No debugging symbols found in /boot/modules/amdgpu_green_sardine_dmcub_bin.ko)
Reading symbols from /boot/modules/amdgpu_green_sardine_pfp_bin.ko...
(No debugging symbols found in /boot/modules/amdgpu_green_sardine_pfp_bin.ko)
Reading symbols from /boot/modules/amdgpu_green_sardine_me_bin.ko...
(No debugging symbols found in /boot/modules/amdgpu_green_sardine_me_bin.ko)
Reading symbols from /boot/modules/amdgpu_green_sardine_ce_bin.ko...
(No debugging symbols found in /boot/modules/amdgpu_green_sardine_ce_bin.ko)
Reading symbols from /boot/modules/amdgpu_green_sardine_rlc_bin.ko...
(No debugging symbols found in /boot/modules/amdgpu_green_sardine_rlc_bin.ko)
Reading symbols from /boot/modules/amdgpu_green_sardine_mec_bin.ko...
(No debugging symbols found in /boot/modules/amdgpu_green_sardine_mec_bin.ko)
Reading symbols from /boot/modules/amdgpu_green_sardine_sdma_bin.ko...
(No debugging symbols found in /boot/modules/amdgpu_green_sardine_sdma_bin.ko)
Reading symbols from /boot/modules/amdgpu_green_sardine_vcn_bin.ko...
(No debugging symbols found in /boot/modules/amdgpu_green_sardine_vcn_bin.ko)
Reading symbols from /boot/kernel/acpi_wmi.ko...
Reading symbols from /usr/lib/debug//boot/kernel/acpi_wmi.ko.debug...
Reading symbols from /boot/kernel/if_rtw89.ko...
Reading symbols from /usr/lib/debug//boot/kernel/if_rtw89.ko.debug...
Reading symbols from /boot/kernel/ig4.ko...
Reading symbols from /usr/lib/debug//boot/kernel/ig4.ko.debug...
Reading symbols from /boot/kernel/intpm.ko...
Reading symbols from /usr/lib/debug//boot/kernel/intpm.ko.debug...
Reading symbols from /boot/kernel/smbus.ko...
Reading symbols from /usr/lib/debug//boot/kernel/smbus.ko.debug...
Reading symbols from /usr/lib/debug//boot/kernel/smbus.ko.debug...
Reading symbols from /boot/kernel/ng_ubt.ko...
Reading symbols from /usr/lib/debug//boot/kernel/ng_ubt.ko.debug...
Reading symbols from /boot/kernel/netgraph.ko...
Reading symbols from /usr/lib/debug//boot/kernel/netgraph.ko.debug...
Reading symbols from /boot/kernel/ng_hci.ko...
Reading symbols from /usr/lib/debug//boot/kernel/ng_hci.ko.debug...
Reading symbols from /boot/kernel/ng_bluetooth.ko...
Reading symbols from /usr/lib/debug//boot/kernel/ng_bluetooth.ko.debug...
Reading symbols from /boot/kernel/iichid.ko...
Reading symbols from /usr/lib/debug//boot/kernel/iichid.ko.debug...
Reading symbols from /boot/kernel/hms.ko...
Reading symbols from /usr/lib/debug//boot/kernel/hms.ko.debug...
Reading symbols from /boot/kernel/hidmap.ko...
Reading symbols from /usr/lib/debug//boot/kernel/hidmap.ko.debug...
Reading symbols from /boot/kernel/hmt.ko...
Reading symbols from /usr/lib/debug//boot/kernel/hmt.ko.debug...
Reading symbols from /boot/kernel/hconf.ko...
Reading symbols from /usr/lib/debug//boot/kernel/hconf.ko.debug...
Reading symbols from /boot/kernel/mac_ntpd.ko...
Reading symbols from /usr/lib/debug//boot/kernel/mac_ntpd.ko.debug...
Reading symbols from /boot/kernel/linux.ko...
Reading symbols from /usr/lib/debug//boot/kernel/linux.ko.debug...
Reading symbols from /boot/kernel/mqueuefs.ko...
Reading symbols from /usr/lib/debug//boot/kernel/mqueuefs.ko.debug...
Reading symbols from /boot/kernel/linux_common.ko...
Reading symbols from /usr/lib/debug//boot/kernel/linux_common.ko.debug...
Reading symbols from /boot/kernel/linux64.ko...
Reading symbols from /usr/lib/debug//boot/kernel/linux64.ko.debug...
Reading symbols from /boot/kernel/pty.ko...
Reading symbols from /usr/lib/debug//boot/kernel/pty.ko.debug...
Reading symbols from /boot/kernel/fdescfs.ko...
Reading symbols from /usr/lib/debug//boot/kernel/fdescfs.ko.debug...
Reading symbols from /boot/kernel/linprocfs.ko...
Reading symbols from /usr/lib/debug//boot/kernel/linprocfs.ko.debug...
Reading symbols from /boot/kernel/linsysfs.ko...
Reading symbols from /usr/lib/debug//boot/kernel/linsysfs.ko.debug...
__curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57

I have the core files if you need them as well. 

Thanks
Todd

-- 
You are receiving this mail because:
You are the assignee for the bug.

home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-295752-227>