From nobody Fri Apr 11 21:29:36 2025 X-Original-To: bugs@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4ZZ8w10c3Mz5shyx for ; Fri, 11 Apr 2025 21:29:37 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R10" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4ZZ8w06rSqz41Wx for ; Fri, 11 Apr 2025 21:29:36 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1744406977; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=iEAW3zrElL7GDyen5+pzLc1Xdv5qpO35N841mcKsk24=; b=LrcdcEnUz5bnVeaOdaycXupEyfUz3DctcVv3HkQwYG/9FJcRBGN8Tdo3zdj+Djrukq3DQH ycgLUdf2+ECIClcHm56FhB5nv+m0JISdgBsTLZArFPbQYgkqioZS1W8sGoMM3p2ONYJc9K 6GJqPxJgKUyew3u/W8+o+NnVE+scB0WIrUlJMhYW4BmqDMSjRLZkDT2r99QCG1eMY466kw mCk8n6xeG1T0VNl8VLQoUdhSo7Kfi1X3i0slYVAl8aHe/5gFGbfIv1XObhrml7mum2CEga aPXCehme1zg+mLlWE2KpxFEt2eJNGJVtI0wSrxEdAjtMXb/GoBGxtF7WPZT8pw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1744406977; a=rsa-sha256; cv=none; b=VPFhzTMiK3CIHXNWUo6RRWThr44TmtNxYohrhgJzvtTghLxfPhErIDWtmEfAuSGiN13n1C LnWJAkJ5rx7aPMxLKvoCNdbsuzgdEEpRp5yz3zlb29l9ZhbEntUtdinFzTvd2rqrCCko/E srGZbkDxWp812OCzohO5EjCF32D9NrDR3ViXkjFQCO6HtKPLxZSiB/mJ3UalfYeD0B9qIG IF0+MGCOC8yYoTC5saBJQofDJKjT02vRJbs1q0P5TwgQV0KxUmNpRG4vTdeS1Uap+iUWDM Xb3U7xzinOH2wcDcMErJld90K1DoRx0TV77fpw8w+V1yMhZ9I7W8u9jbeVkPAQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1744406977; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=iEAW3zrElL7GDyen5+pzLc1Xdv5qpO35N841mcKsk24=; b=XzEK27JLcbn5nwp/j0VAx2DgC9YDDsnJcz0VU1KtqiOTgSjnckMh/X1UNqljcs+WTnNOl8 t9yjDvC2ZGkeYcz6qnRWm5W2ZxfzFn83rcYN7rfDeDJ8aIz6MQnEjNN9GH9yeKmjdVSK0O 5oOlNG3VDDL0Z90q3XCxegDqU2oR4t/RiqHkHluiCtibQRQF2MlIRu2+qbmyxU8w2Z9XG0 DOkpIBjvv+BsFBQmAtit2IG1n/Dc4UH+mbQSEgqoEJQ5W9vwDzGFB/Tjuhtw9keacauBYL s9UBxPb2+SMNp0HAz1T/JiPkfK3T33ENjLxKj4/YKxmMDt03cD9uGQsE3/eteQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4ZZ8w06Crczpy7 for ; Fri, 11 Apr 2025 21:29:36 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 53BLTaug045629 for ; Fri, 11 Apr 2025 21:29:36 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 53BLTaHP045628 for bugs@FreeBSD.org; Fri, 11 Apr 2025 21:29:36 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 286045] [iicbus] panic page fault on start by devd in L635: sc->intr_handler(sc->intr_ctx, sc->intr_buf, actual); Date: Fri, 11 Apr 2025 21:29:36 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 15.0-CURRENT X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: dch@freebsd.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter Message-ID: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Bug reports List-Archive: https://lists.freebsd.org/archives/freebsd-bugs List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-bugs@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D286045 Bug ID: 286045 Summary: [iicbus] panic page fault on start by devd in L635: sc->intr_handler(sc->intr_ctx, sc->intr_buf, actual); Product: Base System Version: 15.0-CURRENT Hardware: amd64 OS: Any Status: New Severity: Affects Only Me Priority: --- Component: kern Assignee: bugs@FreeBSD.org Reporter: dch@freebsd.org Started after March stabilisation week, 100% reproducible. Dump header from device: /dev/gpt/swap0 Architecture: amd64 Architecture Version: 2 Dump Length: 819712000 Blocksize: 512 Compression: none Dumptime: 2025-04-10 07:00:54 +0000 Hostname: akai.skunkwerks.at Magic: FreeBSD Kernel Dump Version String: FreeBSD 15.0-CURRENT #0 main-n276338-98ea3178e54d: Wed Ap= r 9 15:34:34 UTC 2025 root@picard:/usr/obj/usr/src/amd64.amd64/sys/GENERIC Panic String: page fault Dump Parity: 4113817190 Bounds: 0 Dump Status: good ## dmesg Starting devd. iwmbtfw: iwmbt_fw_read: open: /usr/local/share/iwmbt-firmware/ibt-12-16.sfi= : No such file or directory iwmbtfw: main: Firmware download failed! Autoloading module: ng_ubt Autoloading module: iichid iichid0: at addr 0x2c irq 51 on iicbu= s1 hidbus0: on iichid0 Fatal trap 12: page fault while in kernel mode cpuid =3D 1; apic id =3D 02 fault virtual address =3D 0x0 fault code =3D supervisor read instruction, page not present instruction pointer =3D 0x20:0x0 stack pointer =3D 0x28:0xfffffe00d89c7e38 frame pointer =3D 0x28:0xfffffe00d89c7e60 code segment =3D base 0x0, limit 0xfffff, type 0x1b =3D DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags =3D interrupt enabled, resume, IOPL =3D 0 current process =3D 12 (irq51: iichid0) rdi: 0000000000000000 rsi: fffff800432a8080 rdx: 000000000000003e rcx: 0000000000000700 r8: 0000000000000000 r9: 0000000000000100 rax: 0000000000000001 rbx: fffff800015a2400 rbp: fffffe00d89c7e60 r10: 0000000000000000 r11: 000000000000003e r12: fffff80001462200 r13: fffff80039803580 r14: fffff800019b5d00 r15: fffff8000d436000 trap number =3D 12 panic: page fault cpuid =3D 1 time =3D 1744268454 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe00d89c7= b60 vpanic() at vpanic+0x136/frame 0xfffffe00d89c7c90 panic() at panic+0x43/frame 0xfffffe00d89c7cf0 trap_pfault() at trap_pfault+0x48e/frame 0xfffffe00d89c7d60 calltrap() at calltrap+0x8/frame 0xfffffe00d89c7d60 --- trap 0xc, rip =3D 0, rsp =3D 0xfffffe00d89c7e38, rbp =3D 0xfffffe00d89c= 7e60 --- ??() at 0/frame 0xfffffe00d89c7e60 ithread_loop() at ithread_loop+0x266/frame 0xfffffe00d89c7ef0 fork_exit() at fork_exit+0x82/frame 0xfffffe00d89c7f30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe00d89c7f30 --- trap 0xc, rip =3D 0x4b7fe22a61a, rsp =3D 0x4b813c6cf48, rbp =3D 0x4b813= c6cf60 --- KDB: enter: panic ## backtrace Reading symbols from /boot/kernel/iichid.ko... Reading symbols from /usr/lib/debug//boot/kernel/iichid.ko.debug... __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57 (kgdb) #0 __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57 #1 doadump (textdump=3Dtextdump@entry=3D0) at /usr/src/sys/kern/kern_shutdown.c:404 #2 0xffffffff804a44fa in db_dump (dummy=3D, dummy2=3D, dummy3=3D, dummy4=3D) at /usr/src/sys/ddb/db_command.c:596 #3 0xffffffff804a42ed in db_command (last_cmdp=3D, cmd_table=3D, dopager=3Dtrue) at /usr/src/sys/ddb/db_command.c:508 #4 0xffffffff804a3fad in db_command_loop () at /usr/src/sys/ddb/db_command.c:555 #5 0xffffffff804a7986 in db_trap (type=3D, code=3D) at /usr/src/sys/ddb/db_main.c:267 #6 0xffffffff80ba89ef in kdb_trap (type=3Dtype@entry=3D3, code=3Dcode@entr= y=3D0, tf=3Dtf@entry=3D0xfffffe00d89c7aa0) at /usr/src/sys/kern/subr_kdb.c:790 #7 0xffffffff8109656c in trap (frame=3D) at /usr/src/sys/amd64/amd64/trap.c:617 #8 #9 kdb_enter (why=3D, msg=3D) at /usr/src/sys/kern/subr_kdb.c:556 #10 0xffffffff80b5880b in vpanic (fmt=3D0xffffffff8120b2c1 "%s", ap=3Dap@entry=3D0xfffffe00d89c7cd0) at /usr/src/sys/kern/kern_shutdown.= c:967 #11 0xffffffff80b58673 in panic ( fmt=3D0xffffffff81b9c3a0 "\306o\027\201\377\377\377\377") at /usr/src/sys/kern/kern_shutdown.c:892 #12 0xffffffff8109706e in trap_fatal (frame=3D, eva=3D) at /usr/src/sys/amd64/amd64/trap.c:974 #13 0xffffffff8109706e in trap_pfault (frame=3D0xfffffe00d89c7d70, usermode=3Dfalse, signo=3D, ucode=3D) #14 #15 0x0000000000000000 in ?? () #16 0xffffffff83ae2812 in iichid_intr (context=3D0xfffff800015a2400) at /usr/src/sys/dev/iicbus/iichid.c:635 #17 0xffffffff80b0e896 in intr_event_execute_handlers (ie=3D0xfffff80001462= 200, p=3D) at /usr/src/sys/kern/kern_intr.c:1191 #18 ithread_execute_handlers (ie=3D0xfffff80001462200, p=3D) at /usr/src/sys/kern/kern_intr.c:1204 #19 ithread_loop (arg=3Darg@entry=3D0xfffff800015857c0) at /usr/src/sys/kern/kern_intr.c:1297 #20 0xffffffff80b0ac12 in fork_exit ( callout=3D0xffffffff80b0e630 , arg=3D0xfffff800015857c0, frame=3D0xfffffe00d89c7f40) at /usr/src/sys/kern/kern_fork.c:1152 #21 #22 0x000004b7fe22a61a in ?? () Backtrace stopped: Cannot access memory at address 0x4b813c6cf48 (kgdb) THREAD_SLEEPING_OK(); error =3D iichid_cmd_read(sc, sc->intr_buf, sc->intr_bufsize, &actu= al); THREAD_NO_SLEEPING(); if (error =3D=3D 0) { if (sc->power_on) { if (actual !=3D 0) L#635 sc->intr_handler(sc->intr_ctx, sc->intr_buf, actual); else DPRINTF(sc, "no data received\n"); } } else DPRINTF(sc, "read error occurred: %d\n", error); iicbus_release_bus(parent, sc->dev); } --=20 You are receiving this mail because: You are the assignee for the bug.=