[Bug 281035] agp driver kernel panic on 14.1 - agp_close(): page fault while in kernel mode

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=281035

Franco Fichtner <franco@opnsense.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |franco@opnsense.org

--- Comment #1 from Franco Fichtner <franco@opnsense.org> ---
Got a vmcore from a user:

(kgdb) bt
#0  __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57
#1  doadump (textdump=textdump@entry=0) at
/usr/src/sys/kern/kern_shutdown.c:405
#2  0xffffffff8049c2ea in db_dump (dummy=<optimized out>, dummy2=<optimized
out>, dummy3=<optimized out>, dummy4=<optimized out>) at
/usr/src/sys/ddb/db_command.c:591
#3  0xffffffff8049c0ed in db_command (last_cmdp=<optimized out>,
cmd_table=<optimized out>, dopager=false) at /usr/src/sys/ddb/db_command.c:504
#4  0xffffffff8049c236 in db_command_script
(command=command@entry=0xffffffff81bbf6d3 <db_recursion_data+3> "dump") at
/usr/src/sys/ddb/db_command.c:569
#5  0xffffffff804a14a8 in db_script_exec (scriptname=<optimized out>,
warnifnotfound=warnifnotfound@entry=0) at /usr/src/sys/ddb/db_script.c:302
#6  0xffffffff804a13b5 in db_script_kdbenter (eventname=<optimized out>) at
/usr/src/sys/ddb/db_script.c:325
#7  0xffffffff8049f471 in db_trap (type=<optimized out>, code=<optimized out>)
at /usr/src/sys/ddb/db_main.c:267
#8  0xffffffff80c09108 in kdb_trap (type=type@entry=3, code=code@entry=0,
tf=tf@entry=0xfffffe00895e0730) at /usr/src/sys/kern/subr_kdb.c:790
#9  0xffffffff810df419 in trap (frame=0xfffffe00895e0730) at
/usr/src/sys/amd64/amd64/trap.c:608
#10 <signal handler called>
#11 kdb_enter (why=<optimized out>, msg=<optimized out>) at
/usr/src/sys/kern/subr_kdb.c:556
#12 0xffffffff80bb8ad2 in vpanic (fmt=0xffffffff8126b7cf "%s",
ap=ap@entry=0xfffffe00895e0960) at /usr/src/sys/kern/kern_shutdown.c:955
#13 0xffffffff80bb8b83 in panic (fmt=0xffffffff81d82c18 <cnputs_mtx+24> "") at
/usr/src/sys/kern/kern_shutdown.c:891
#14 0xffffffff810dfeab in trap_fatal (frame=0xfffffe00895e0a40, eva=0) at
/usr/src/sys/amd64/amd64/trap.c:952
#15 0xffffffff810dff07 in trap_pfault (frame=<optimized out>,
usermode=<optimized out>, signo=<optimized out>, ucode=<optimized out>) at
/usr/src/sys/amd64/amd64/trap.c:760
#16 <signal handler called>
#17 0xffffffff804d8477 in AGP_UNBIND_MEMORY (dev=0xfffff800045d3000,
handle=0xfffff800045d2600) at ./agp_if.h:156
#18 agp_close (kdev=<optimized out>, fflag=<optimized out>, devtype=<optimized
out>, td=<optimized out>) at /usr/src/sys/dev/agp/agp.c:840
#19 0xffffffff80b4426f in giant_close (dev=0xfffff800045e7800, fflag=131077,
devtype=8192, td=0xfffff80042b6d740) at /usr/src/sys/kern/kern_conf.c:389
#20 0xffffffff80a25191 in devfs_close (ap=0xfffffe00895e0c00) at
/usr/src/sys/fs/devfs/devfs_vnops.c:769
#21 0xffffffff811bcc3f in VOP_CLOSE_APV (vop=0xffffffff81ab2888
<devfs_specops>, a=a@entry=0xfffffe00895e0c00) at vnode_if.c:496
#22 0xffffffff80ccbde0 in VOP_CLOSE (vp=0xfffff800425e3540, fflag=5,
cred=0xfffff80085d7b500, td=0xfffff80042b6d740) at ./vnode_if.h:247
#23 vn_close1 (vp=vp@entry=0xfffff800425e3540, flags=5,
file_cred=0xfffff80085d7b500, td=0xfffff80042b6d740, keep_ref=false) at
/usr/src/sys/kern/vfs_vnops.c:543
#24 0xffffffff80cca1cd in vn_closefile (fp=0xfffff80018ba7a00,
td=0xfffff80004892900) at /usr/src/sys/kern/vfs_vnops.c:1849
#25 0xffffffff80a25bfa in devfs_close_f (fp=0xfffff800045d3000, td=0x20005) at
/usr/src/sys/fs/devfs/devfs_vnops.c:788
#26 0xffffffff80b5038b in fo_close (fp=0xfffff80018ba7a00, td=0x20005) at
/usr/src/sys/sys/file.h:392
#27 _fdrop (fp=fp@entry=0xfffff80018ba7a00, td=0x20005,
td@entry=0xfffff80042b6d740) at /usr/src/sys/kern/kern_descrip.c:3668
#28 0xffffffff80b53e53 in closef (fp=fp@entry=0xfffff80018ba7a00,
td=td@entry=0xfffff80042b6d740) at /usr/src/sys/kern/kern_descrip.c:2841
#29 0xffffffff80b57f91 in closefp_impl (fdp=0xfffffe008977d860, fd=9,
fp=0xfffff80018ba7a00, td=0xfffff80042b6d740, audit=true) at
/usr/src/sys/kern/kern_descrip.c:1317
#30 0xffffffff810e0880 in syscallenter (td=0xfffff80042b6d740) at
/usr/src/sys/amd64/amd64/../../kern/subr_syscall.c:188
#31 amd64_syscall (td=0xfffff80042b6d740, traced=0) at
/usr/src/sys/amd64/amd64/trap.c:1194
#32 <signal handler called>
#33 0x000028a511a672ba in ?? ()
Backtrace stopped: Cannot access memory at address 0x28a517915d88

-- 
You are receiving this mail because:
You are the assignee for the bug.