[Bug 283285] Kernel panic at boot on Intel Atom C3758 w/ QAT module

From: <bugzilla-noreply_at_freebsd.org>
Date: Sat, 31 May 2025 07:59:56 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=283285

Alexander Ziaee <ziaee@FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ziaee@FreeBSD.org

--- Comment #3 from Alexander Ziaee <ziaee@FreeBSD.org> ---
Reproduced on the latest current snapshot (kernel 1500043) on Atom C3558. If
kldloading qat, it loads the firmware. However, if specifying qat in
loader.conf, it panics during early boot attempting to load the firmware:

qat0: <Intel c3xxx QuickAssist> mem 0x80c00000-0x80c3ffff,0x80c40000-0x80c7ffff
at device 0.0 on pci1
qat_c3xxx_fw: could not load firmware image, error 6


Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 0c
fault virtual address   = 0x4
fault code              = supervisor read data, page not present
instruction pointer     = 0x20:0xffffffff80c5763c
stack pointer           = 0x28:0xfffffe008fad3990
frame pointer           = 0x28:0xfffffe008fad3a60
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 0 (firmware taskq)
rdi: fffff80004221c01 rsi: fffff80004221c00 rdx: fffffe008fad3d80
rcx: 000000000000001b  r8: fffff800042267f8  r9: fffff80004222000
rax: 0000000000000000 rbx: fffffe008fad3d00 rbp: fffffe008fad3a60
r10: 0000000000000000 r11: 0000000000000001 r12: fffff8000242a740
r13: 0000000000000400 r14: fffffe008fad3a7c r15: fffff8000242a740
trap number             = 12
panic: page fault
cpuid = 1
time = 3
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe008fad36c0
vpanic() at vpanic+0x136/frame 0xfffffe008fad37f0
panic() at panic+0x43/frame 0xfffffe008fad3850
trap_pfault() at trap_pfault+0x48d/frame 0xfffffe008fad38c0
calltrap() at calltrap+0x8/frame 0xfffffe008fad38c0
--- trap 0xc, rip = 0xffffffff80c5763c, rsp = 0xfffffe008fad3990, rbp =
0xfffffe008fad3a60 ---
cache_fplookup() at cache_fplookup+0x37c/frame 0xfffffe008fad3a60
namei() at namei+0x1a0/frame 0xfffffe008fad3ac0
vn_open_cred() at vn_open_cred+0x537/frame 0xfffffe008fad3c40
loadimage() at loadimage+0x1f3/frame 0xfffffe008fad3e40
taskqueue_run_locked() at taskqueue_run_locked+0x1c2/frame 0xfffffe008fad3ec0
taskqueue_thread_loop() at taskqueue_thread_loop+0xd3/frame 0xfffffe008fad3ef0
fork_exit() at fork_exit+0x82/frame 0xfffffe008fad3f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe008fad3f30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 0 tid 100047 ]
Stopped at      kdb_enter+0x33: movq    $0,0x12337b2(%rip)
db> trace
Tracing pid 0 tid 100047 td 0xfffff8000242a740
kdb_enter() at kdb_enter+0x33/frame 0xfffffe008fad37f0
panic() at panic+0x43/frame 0xfffffe008fad3850
trap_pfault() at trap_pfault+0x48d/frame 0xfffffe008fad38c0
calltrap() at calltrap+0x8/frame 0xfffffe008fad38c0
--- trap 0xc, rip = 0xffffffff80c5763c, rsp = 0xfffffe008fad3990, rbp =
0xfffffe008fad3a60 ---
cache_fplookup() at cache_fplookup+0x37c/frame 0xfffffe008fad3a60
namei() at namei+0x1a0/frame 0xfffffe008fad3ac0
vn_open_cred() at vn_open_cred+0x537/frame 0xfffffe008fad3c40
loadimage() at loadimage+0x1f3/frame 0xfffffe008fad3e40
taskqueue_run_locked() at taskqueue_run_locked+0x1c2/frame 0xfffffe008fad3ec0
taskqueue_thread_loop() at taskqueue_thread_loop+0xd3/frame 0xfffffe008fad3ef0
fork_exit() at fork_exit+0x82/frame 0xfffffe008fad3f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe008fad3f30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
db>

-- 
You are receiving this mail because:
You are the assignee for the bug.