[Bug 297145] page fault: __nv_drm_handle_flip_event -> linux_wake_up -> autoremove_wake_function

[email protected] Wed, 29 Jul 2026 16:28:42 +0000
Newsgroups gmane.os.freebsd.devel.emulation
Message-ID <[email protected]/bugzilla/>
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D297145

--- Comment #3 from Pouria Mousavizadeh Tehrani <[email protected]> ---
(In reply to Mark Johnston from comment #2)

I got the coredump:
should be /usr/src/sys/compat/linuxkpi/common/src/linux_schedule.c:123


#11 0xffffffff80bfe6c3 in panic (fmt=3D0x8600 <error: Cannot access memory =
at
address 0x8600>) at /usr/src/sys/kern/kern_shutdown.c:887
#12 0xffffffff8114f4d8 in trap_fatal (frame=3D<optimized out>, eva=3D<optim=
ized
out>) at /usr/src/sys/amd64/amd64/trap.c:1031
#13 0xffffffff8114f4d8 in trap_pfault (frame=3D0xfffffe022e420c00,
usermode=3Dfalse, signo=3D<optimized out>, ucode=3D<optimized out>)
#14 <signal handler called>
#15 atomic_read (v=3D0x28) at
/usr/src/sys/compat/linuxkpi/common/include/asm/atomic.h:90
#16 wake_up_task (task=3D0x0, state=3D3) at
/usr/src/sys/compat/linuxkpi/common/src/linux_schedule.c:123
#17 autoremove_wake_function (wq=3D0xfffffe024fc568e8, state=3D3, flags=3D<=
optimized
out>, key=3D<optimized out>) at
/usr/src/sys/compat/linuxkpi/common/src/linux_schedule.c:191
#18 0xffffffff80eb2daa in linux_wake_up (wqh=3D0xfffff80029a3b940, state=3D=
3, nr=3D0,
locked=3Dfalse) at /usr/src/sys/compat/linuxkpi/common/src/linux_schedule.c=
:285
#19 0xffffffff83b59f42 in __nv_drm_handle_flip_event () from
/boot/modules/nvidia-drm.ko
#20 0xffffffff83b519f0 in nv_drm_event_callback () from
/boot/modules/nvidia-drm.ko
#21 0xffffffff83f22113 in nvKmsKapiHandleEventQueueChange () from
/boot/modules/nvidia-modeset.ko

(kgdb) select 16
(kgdb) info args
task =3D 0x0
state =3D 3
(kgdb) select 17
(kgdb) info args
wq =3D 0xfffffe024fc568e8
state =3D 3
flags =3D <optimized out>
key =3D <optimized out>
(kgdb) info locals
task =3D 0x0
ret =3D <optimized out>
(kgdb) p *wq
$1 =3D {flags =3D 0, private =3D 0x0, func =3D 0xffffffff80eb2880
<autoremove_wake_function>, {task_list =3D {next =3D 0xfffff80029a3b960, pr=
ev =3D
0xfffff80029a3b960}, entry =3D {next =3D 0xfffff80029a3b960, prev =3D
0xfffff80029a3b960}}}
(kgdb) select 18
(kgdb) info args
wqh =3D 0xfffff80029a3b940
state =3D 3
nr =3D 0
locked =3D false
(kgdb) info locals
pos =3D <optimized out>
next =3D <optimized out>
(kgdb) p *wqh
$2 =3D {lock =3D {lock_object =3D {lo_name =3D 0xffffffff83b6064b "wqhead",=
 lo_flags =3D
553713664, lo_data =3D 0, lo_witness =3D 0x0}, mtx_lock =3D 184467352785667=
89120},
{task_list =3D {next =3D 0xfffffe024fc56900, prev =3D 0xfffffe024fc56900}, =
head =3D
{next =3D 0xfffffe024fc56900, prev =3D 0xfffffe024fc56900}}}

--=20
You are receiving this mail because:
You are the assignee for the bug.=