root@ntbhorak2:~ # kgdb -n 4 GNU gdb (GDB) 15.1 [GDB v15.1 for FreeBSD] Copyright (C) 2024 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-portbld-freebsd15.0". Type "show configuration" for configuration details. For bug reporting instructions, please see: . Find the GDB manual and other documentation resources online at: . For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/obj/usr/src/amd64.amd64/sys/GENERIC/kernel.full... Unread portion of the kernel message buffer: Fatal trap 12: page fault while in kernel mode cpuid = 15; apic id = 0f fault virtual address = 0x18 fault code = supervisor read data, page not present instruction pointer = 0x20:0xffffffff84a01284 stack pointer = 0x28:0xfffffe00e7125d40 frame pointer = 0x28:0xfffffe00e7125d40 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 0 (thread taskq) rdi: fffffe019b4d9640 rsi: fffffe019f436f00 rdx: fffffffffffffff8 rcx: fffffe019b5fc530 r8: fffffe00e7125d54 r9: fffffe019f436f00 rax: fffff805772a84b0 rbx: fffffe019b5fc530 rbp: fffffe00e7125d40 r10: 0000000100000010 r11: fffffe01b3bf9044 r12: fffffe019b4d9640 r13: fffffe01992d4000 r14: fffff805772a81c0 r15: fffffe019b4d9580 trap number = 12 panic: page fault cpuid = 15 time = 1780554290 KDB: stack backtrace: #0 0xffffffff80bd49ad at kdb_backtrace+0x5d #1 0xffffffff80b854c6 at vpanic+0x136 #2 0xffffffff80b85383 at panic+0x43 #3 0xffffffff81098fcd at trap_pfault+0x37d #4 0xffffffff8106ef58 at calltrap+0x8 #5 0xffffffff84a10dad at rtw89_ops_tx+0x10d #6 0xffffffff80e037a8 at lkpi_80211_txq_tx_one+0x7c8 #7 0xffffffff80e07483 at lkpi_80211_txq_task+0x113 #8 0xffffffff80beb4a2 at taskqueue_run_locked+0x182 #9 0xffffffff80bec672 at taskqueue_thread_loop+0xc2 #10 0xffffffff80b3bc9b at fork_exit+0x7b #11 0xffffffff8106ff7e at fork_trampoline+0xe Uptime: 1h53m52s Dumping 1384 out of 23324 MB:..2%..11%..21%..31%..41% (CTRL-C to abort) (CTRL-C to abort) (CTRL-C to abort) (CTRL-C to abort) (CTRL-C to abort) ..51% (CTRL-C to abort) (CTRL-C to abort) (CTRL-C to abort) (CTRL-C to abort) ..61% (CTRL-C to abort) (CTRL-C to abort) (CTRL-C to abort) ..71%..81%..91% (CTRL-C to abort) (CTRL-C to abort) (CTRL-C to abort) (CTRL-C to abort) (CTRL-C to abort) (CTRL-C to abort) (CTRL-C to abort) (CTRL-C to abort) Reading symbols from /boot/kernel/acpi_ibm.ko... Reading symbols from /usr/lib/debug//boot/kernel/acpi_ibm.ko.debug... Reading symbols from /boot/kernel/vmm.ko... Reading symbols from /usr/lib/debug//boot/kernel/vmm.ko.debug... Reading symbols from /boot/kernel/zfs.ko... Reading symbols from /usr/lib/debug//boot/kernel/zfs.ko.debug... Reading symbols from /boot/kernel/geom_eli.ko... Reading symbols from /usr/lib/debug//boot/kernel/geom_eli.ko.debug... Reading symbols from /boot/modules/amdgpu.ko... (No debugging symbols found in /boot/modules/amdgpu.ko) Reading symbols from /boot/modules/drm.ko... (No debugging symbols found in /boot/modules/drm.ko) Reading symbols from /boot/kernel/iic.ko... Reading symbols from /usr/lib/debug//boot/kernel/iic.ko.debug... Reading symbols from /boot/kernel/linuxkpi_video.ko... Reading symbols from /usr/lib/debug//boot/kernel/linuxkpi_video.ko.debug... Reading symbols from /boot/modules/dmabuf.ko... (No debugging symbols found in /boot/modules/dmabuf.ko) Reading symbols from /boot/kernel/lindebugfs.ko... Reading symbols from /usr/lib/debug//boot/kernel/lindebugfs.ko.debug... Reading symbols from /boot/modules/ttm.ko... (No debugging symbols found in /boot/modules/ttm.ko) Reading symbols from /boot/modules/amdgpu_green_sardine_asd_bin.ko... (No debugging symbols found in /boot/modules/amdgpu_green_sardine_asd_bin.ko) Reading symbols from /boot/modules/amdgpu_green_sardine_ta_bin.ko... (No debugging symbols found in /boot/modules/amdgpu_green_sardine_ta_bin.ko) Reading symbols from /boot/modules/amdgpu_green_sardine_dmcub_bin.ko... (No debugging symbols found in /boot/modules/amdgpu_green_sardine_dmcub_bin.ko) Reading symbols from /boot/modules/amdgpu_green_sardine_pfp_bin.ko... (No debugging symbols found in /boot/modules/amdgpu_green_sardine_pfp_bin.ko) Reading symbols from /boot/modules/amdgpu_green_sardine_me_bin.ko... (No debugging symbols found in /boot/modules/amdgpu_green_sardine_me_bin.ko) Reading symbols from /boot/modules/amdgpu_green_sardine_ce_bin.ko... (No debugging symbols found in /boot/modules/amdgpu_green_sardine_ce_bin.ko) Reading symbols from /boot/modules/amdgpu_green_sardine_rlc_bin.ko... (No debugging symbols found in /boot/modules/amdgpu_green_sardine_rlc_bin.ko) Reading symbols from /boot/modules/amdgpu_green_sardine_mec_bin.ko... (No debugging symbols found in /boot/modules/amdgpu_green_sardine_mec_bin.ko) Reading symbols from /boot/modules/amdgpu_green_sardine_sdma_bin.ko... (No debugging symbols found in /boot/modules/amdgpu_green_sardine_sdma_bin.ko) --Type for more, q to quit, c to continue without paging-- Reading symbols from /boot/modules/amdgpu_green_sardine_vcn_bin.ko... (No debugging symbols found in /boot/modules/amdgpu_green_sardine_vcn_bin.ko) Reading symbols from /boot/kernel/if_rtw89.ko... Reading symbols from /usr/lib/debug//boot/kernel/if_rtw89.ko.debug... Reading symbols from /boot/kernel/acpi_wmi.ko... Reading symbols from /usr/lib/debug//boot/kernel/acpi_wmi.ko.debug... Reading symbols from /boot/kernel/ig4.ko... Reading symbols from /usr/lib/debug//boot/kernel/ig4.ko.debug... Reading symbols from /boot/kernel/intpm.ko... Reading symbols from /usr/lib/debug//boot/kernel/intpm.ko.debug... Reading symbols from /boot/kernel/smbus.ko... Reading symbols from /usr/lib/debug//boot/kernel/smbus.ko.debug... Reading symbols from /boot/kernel/rtsx.ko... Reading symbols from /usr/lib/debug//boot/kernel/rtsx.ko.debug... Reading symbols from /boot/kernel/if_lagg.ko... Reading symbols from /usr/lib/debug//boot/kernel/if_lagg.ko.debug... Reading symbols from /boot/kernel/if_infiniband.ko... Reading symbols from /usr/lib/debug//boot/kernel/if_infiniband.ko.debug... Reading symbols from /boot/kernel/if_bridge.ko... Reading symbols from /usr/lib/debug//boot/kernel/if_bridge.ko.debug... Reading symbols from /boot/kernel/bridgestp.ko... Reading symbols from /usr/lib/debug//boot/kernel/bridgestp.ko.debug... Reading symbols from /boot/kernel/pflog.ko... Reading symbols from /usr/lib/debug//boot/kernel/pflog.ko.debug... Reading symbols from /boot/kernel/pf.ko... Reading symbols from /usr/lib/debug//boot/kernel/pf.ko.debug... Reading symbols from /boot/kernel/cuse.ko... Reading symbols from /usr/lib/debug//boot/kernel/cuse.ko.debug... Reading symbols from /boot/kernel/ng_ubt.ko... Reading symbols from /usr/lib/debug//boot/kernel/ng_ubt.ko.debug... Reading symbols from /boot/kernel/netgraph.ko... Reading symbols from /usr/lib/debug//boot/kernel/netgraph.ko.debug... Reading symbols from /boot/kernel/ng_hci.ko... Reading symbols from /usr/lib/debug//boot/kernel/ng_hci.ko.debug... Reading symbols from /boot/kernel/ng_bluetooth.ko... Reading symbols from /usr/lib/debug//boot/kernel/ng_bluetooth.ko.debug... Reading symbols from /boot/kernel/ng_l2cap.ko... Reading symbols from /usr/lib/debug//boot/kernel/ng_l2cap.ko.debug... Reading symbols from /boot/kernel/ng_btsocket.ko... Reading symbols from /usr/lib/debug//boot/kernel/ng_btsocket.ko.debug... Reading symbols from /boot/kernel/ng_socket.ko... Reading symbols from /usr/lib/debug//boot/kernel/ng_socket.ko.debug... Reading symbols from /boot/kernel/nmdm.ko... Reading symbols from /usr/lib/debug//boot/kernel/nmdm.ko.debug... Reading symbols from /boot/kernel/nlsysevent.ko... Reading symbols from /usr/lib/debug//boot/kernel/nlsysevent.ko.debug... Reading symbols from /boot/kernel/mac_ntpd.ko... Reading symbols from /usr/lib/debug//boot/kernel/mac_ntpd.ko.debug... Reading symbols from /boot/kernel/if_epair.ko... Reading symbols from /usr/lib/debug//boot/kernel/if_epair.ko.debug... Reading symbols from /boot/kernel/umodem.ko... Reading symbols from /usr/lib/debug//boot/kernel/umodem.ko.debug... Reading symbols from /boot/kernel/ucom.ko... Reading symbols from /usr/lib/debug//boot/kernel/ucom.ko.debug... __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57 57 __asm("movq %%gs:%c1,%0" : "=r" (td) (kgdb) (kgdb) bt full #0 __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57 td = #1 doadump (textdump=) at /usr/src/sys/kern/kern_shutdown.c:399 error = 0 coredump = #2 0xffffffff80b8503f in kern_reboot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:519 once = 0 #3 0xffffffff80b85557 in vpanic (fmt=0xffffffff811f9f2a "%s", ap=ap@entry=0xfffffe00e7125c00) at /usr/src/sys/kern/kern_shutdown.c:974 buf = "page fault", '\000' __pc = 0x0 __pc = 0x0 __pc = 0x0 other_cpus = {__bits = {32767, 0 }} td = 0xfffff80002471780 bootopt = newpanic = #4 0xffffffff80b85383 in panic (fmt=) at /usr/src/sys/kern/kern_shutdown.c:887 ap = {{gp_offset = 16, fp_offset = 48, overflow_arg_area = 0xfffffe00e7125c30, reg_save_area = 0xfffffe00e7125bd0}} #5 0xffffffff81098fcd in trap_fatal (frame=, eva=) at /usr/src/sys/amd64/amd64/trap.c:1028 type = handled = #6 0xffffffff81098fcd in trap_pfault (frame=0xfffffe00e7125c80, usermode=false, signo=, ucode=) __pc = 0x0 __pc = 0x0 __pc = 0x0 td = p = eva = map = ftype = rv = #7 No locals. #8 rtw89_core_tx_write (rtwdev=rtwdev@entry=0xfffffe019b4d9640, vif=0xfffffe019f436f00, sta=sta@entry=0xfffff805772a81c0, skb=skb@entry=0xfffffe019b5fc530, qsel=qsel@entry=0xfffffe00e7125d54) at /usr/src/sys/contrib/dev/rtw89/core.c:1440 rtwvif = rtwsta_link = 0xfffffffffffffff8 rtwvif_link = rtwsta = p = __p = p = __p = #9 0xffffffff84a10dad in rtw89_ops_tx (hw=0xfffffe019b4d9580, control=, skb=0xfffffe019b5fc530) at /usr/src/sys/contrib/dev/rtw89/mac80211.c:39 qsel = -1 rtwdev = 0xfffffe019b4d9640 info = 0xfffffe019b5fc570 vif = 0xfffffe019f436f00 rtwvif = 0xfffffe019f4373c0 sta = 0xfffff805772a81c0 flags = ret = #10 0xffffffff80e037a8 in lkpi_80211_txq_tx_one (lsta=lsta@entry=0xfffff805772a8000, m=) at /usr/src/sys/compat/linuxkpi/common/src/linux_80211.c:5924 skb_alloc_failures = 0 '\000' control = {sta = 0xfffff805772a81c0} ni = 0xfffffe00f25ba000 --Type for more, q to quit, c to continue without paging-- k = 0x0 keyix = wh = ic = lhw = hw = 0xfffffe019b4d9580 c = skb = 0xfffffe019b5fc530 buf = lvif = vif = hdr = tid = ac = info = 0xfffffe019b5fc570 sta = 0xfffff805772a81c0 ltxq = tailroom = #11 0xffffffff80e07483 in lkpi_80211_txq_task (ctx=0xfffff805772a8000, pending=) at /usr/src/sys/compat/linuxkpi/common/src/linux_80211.c:5977 mq = {mq_head = {stqh_first = 0x0, stqh_last = 0xfffffe00e7125e10}, mq_len = 0, mq_maxlen = 50} m = 0xfffffe019f436f00 lsta = shall_tx = #12 0xffffffff80beb4a2 in taskqueue_run_locked (queue=queue@entry=0xfffff80001477a00) at /usr/src/sys/kern/subr_taskqueue.c:517 et = {et_link = {tqe_next = 0xfffffe00e7125ef0, tqe_prev = 0x0}, et_td = 0xffffffff81271e0a, et_section = {bucket = 0}, et_old_priority = 0 '\000'} tb = {tb_running = 0xfffff805772a8020, tb_seq = 1028260, tb_canceling = false, tb_link = {le_next = 0x0, le_prev = 0xfffff80001477a10}} in_net_epoch = false pending = 1 task = #13 0xffffffff80bec672 in taskqueue_thread_loop (arg=arg@entry=0xffffffff81ffec40 ) at /usr/src/sys/kern/subr_taskqueue.c:829 tqp = tq = 0xfffff80001477a00 #14 0xffffffff80b3bc9b in fork_exit (callout=0xffffffff80bec5b0 , arg=0xffffffff81ffec40 , frame=0xfffffe00e7125f40) at /usr/src/sys/kern/kern_fork.c:1199 __pc = 0x0 __pc = 0x0 td = 0xfffff80002471780 p = 0xffffffff81b82c70 dtd = #15 No locals. (kgdb) frame 8 #8 rtw89_core_tx_write (rtwdev=rtwdev@entry=0xfffffe019b4d9640, vif=0xfffffe019f436f00, sta=sta@entry=0xfffff805772a81c0, skb=skb@entry=0xfffffe019b5fc530, qsel=qsel@entry=0xfffffe00e7125d54) at /usr/src/sys/contrib/dev/rtw89/core.c:1440 1440 rtwvif_link = rtwsta_link->rtwvif_link; (kgdb) #8 rtw89_core_tx_write (rtwdev=rtwdev@entry=0xfffffe019b4d9640, vif=0xfffffe019f436f00, sta=sta@entry=0xfffff805772a81c0, skb=skb@entry=0xfffffe019b5fc530, qsel=qsel@entry=0xfffffe00e7125d54) at /usr/src/sys/contrib/dev/rtw89/core.c:1440 1440 rtwvif_link = rtwsta_link->rtwvif_link; (kgdb) #8 rtw89_core_tx_write (rtwdev=rtwdev@entry=0xfffffe019b4d9640, vif=0xfffffe019f436f00, sta=sta@entry=0xfffff805772a81c0, skb=skb@entry=0xfffffe019b5fc530, qsel=qsel@entry=0xfffffe00e7125d54) at /usr/src/sys/contrib/dev/rtw89/core.c:1440 1440 rtwvif_link = rtwsta_link->rtwvif_link; (kgdb) list 1435 if (unlikely(!rtwsta_link)) { 1436 rtw89_err(rtwdev, "tx: find no sta designated link\n"); 1437 return -ENOLINK; 1438 } 1439 1440 rtwvif_link = rtwsta_link->rtwvif_link; 1441 } else { 1442 rtwvif_link = rtw89_get_designated_link(rtwvif); 1443 if (unlikely(!rtwvif_link)) { 1444 rtw89_err(rtwdev, "tx: find no vif designated link\n"); (kgdb) list 1425 1450 malformed linespec error: unexpected number, "1450" (kgdb) list 1425,1450 1425 int rtw89_core_tx_write(struct rtw89_dev *rtwdev, struct ieee80211_vif *vif, 1426 struct ieee80211_sta *sta, struct sk_buff *skb, int *qsel) 1427 { 1428 struct rtw89_sta *rtwsta = sta_to_rtwsta_safe(sta); 1429 struct rtw89_vif *rtwvif = vif_to_rtwvif(vif); 1430 struct rtw89_sta_link *rtwsta_link = NULL; 1431 struct rtw89_vif_link *rtwvif_link; 1432 1433 if (rtwsta) { 1434 rtwsta_link = rtw89_get_designated_link(rtwsta); 1435 if (unlikely(!rtwsta_link)) { 1436 rtw89_err(rtwdev, "tx: find no sta designated link\n"); 1437 return -ENOLINK; 1438 } 1439 1440 rtwvif_link = rtwsta_link->rtwvif_link; 1441 } else { 1442 rtwvif_link = rtw89_get_designated_link(rtwvif); 1443 if (unlikely(!rtwvif_link)) { 1444 rtw89_err(rtwdev, "tx: find no vif designated link\n"); 1445 return -ENOLINK; 1446 } 1447 } 1448 1449 return rtw89_core_tx_write_link(rtwdev, rtwvif_link, rtwsta_link, skb, qsel, NULL); 1450 } (kgdb) p rtwsta_link $1 = (struct rtw89_sta_link *) 0xfffffffffffffff8 (kgdb) p rtwsta Cannot access memory at address 0x0 (kgdb) p sta->drv_priv $2 = 0xfffff805772a8400 "" (kgdb) p (rtw89_sta)(sta->drv_priv) No symbol "rtw89_sta" in current context. (kgdb) p (struct rtw89_sta)(sta->drv_priv) Invalid cast. (kgdb) p (struct rtw89_sta*)(sta->drv_priv) $3 = (struct rtw89_sta *) 0xfffff805772a8400 (kgdb) p *(struct rtw89_sta*)(sta->drv_priv) $4 = {rtwdev = 0x0, rtwvif = 0x0, flags = {0}, disassoc = false, roc_queue = {{{next = 0x0, prev = 0x0}, list = {next = 0x0, prev = 0x0}}, qlen = 0, lock = {lock_object = {lo_name = 0x0, lo_flags = 0, lo_data = 0, lo_witness = 0x0}, mtx_lock = 0}}, ampdu_params = {{agg_num = 0, amsdu = false} }, ampdu_map = {0}, pairwise_sec_cam_map = {0, 0}, dlink_pool = {next = 0x0, prev = 0x0}, links_inst_valid_num = 0 '\000', links_inst_map = {0}, links = {0x0 }, links_inst = 0xfffff805772a8548} (kgdb)