(gdb) bt #0 doadump (textdump=1) at pcpu.h:224 #1 0xffffffff8047b084 in kern_reboot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:449 #2 0xffffffff8047a74c in panic (fmt=Variable "fmt" is not available. ) at /usr/src/sys/kern/kern_shutdown.c:642 #3 0xffffffff8065a230 in trap_fatal (frame=0x9, eva=0) at /usr/src/sys/amd64/amd64/trap.c:843 #4 0xffffffff8065abb6 in trap (frame=0xffffff81b6b996e0) at /usr/src/sys/amd64/amd64/trap.c:597 #5 0xffffffff806437e3 in calltrap () at /usr/src/sys/amd64/amd64/exception.S:228 #6 0xffffffff81c1f413 in i915_read32 (dev_priv=0xffffff8007b42000, reg=Variable "reg" is not available. ) at /usr/src/sys/modules/drm/i915/../../../dev/drm/i915_drv.c:767 #7 0xffffffff81c4defe in intel_wait_ring_buffer (ring=0xffffff8007b42070, n=131064) at /usr/src/sys/modules/drm/i915/../../../dev/drm/intel_ringbuffer.c:1209 #8 0xffffffff81c4f036 in intel_cleanup_ring_buffer (ring=0xffffff8007b42000) at /usr/src/sys/modules/drm/i915/../../../dev/drm/intel_ringbuffer.c:1129 #9 0xffffffff81c22593 in i915_gem_cleanup_ringbuffer (dev=Variable "dev" is not available. ) at /usr/src/sys/modules/drm/i915/../../../dev/drm/i915_gem.c:770 #10 0xffffffff81c1e35d in i915_driver_unload_int (dev=0xfffffe00147e4000, locked=true) at /usr/src/sys/modules/drm/i915/../../../dev/drm/i915_dma.c:1297 #11 0xffffffff81c1e464 in i915_driver_unload (dev=Variable "dev" is not available. ) at /usr/src/sys/modules/drm/i915/../../../dev/drm/i915_dma.c:1337 #12 0xffffffff81c87a14 in drm_detach (kdev=Variable "kdev" is not available. ) at /usr/src/sys/modules/drm/drm/../../../dev/drm/drm_drv.c:633 #13 0xffffffff804ac8b9 in device_detach (dev=0xfffffe0002ef4a00) at device_if.h:214 #14 0xffffffff804acb7c in devclass_driver_deleted (busclass=0xfffffe0002de6b00, dc=0xfffffe0002ef3500, driver=0xffffffff81c69260) at /usr/src/sys/kern/subr_bus.c:1130 #15 0xffffffff804acc93 in devclass_delete_driver (busclass=0xfffffe0002de6b00, driver=0xffffffff81c69260) at /usr/src/sys/kern/subr_bus.c:1200 #16 0xffffffff804acdc4 in driver_module_handler (mod=0xfffffe0014f1d780, what=1, arg=Variable "arg" is not available. ) at /usr/src/sys/kern/subr_bus.c:4475 #17 0xffffffff80466a6a in module_unload (mod=0xfffffe0014f1d780) at /usr/src/sys/kern/kern_module.c:265 #18 0xffffffff8045bf38 in linker_file_unload (file=0xfffffe0014922a00, flags=0) at /usr/src/sys/kern/kern_linker.c:639 #19 0xffffffff8045cb4b in kern_kldunload (td=0xfffffe0014098000, fileid=Variable "fileid" is not available. ) at /usr/src/sys/kern/kern_linker.c:1107 #20 0xffffffff8045cc24 in sys_kldunloadf (td=0xffffff8007b42000, uap=0x2034) at /usr/src/sys/kern/kern_linker.c:1142 #21 0xffffffff80659788 in amd64_syscall (td=0xfffffe0014098000, traced=0) at subr_syscall.c:135 #22 0xffffffff80643ac7 in Xfast_syscall () at /usr/src/sys/amd64/amd64/exception.S:387 #23 0x00000008008a73ac in ?? () Previous frame inner to this frame (corrupt stack?) (gdb) fr 6 #6 0xffffffff81c1f413 in i915_read32 (dev_priv=0xffffff8007b42000, reg=Variable "reg" is not available. ) at /usr/src/sys/modules/drm/i915/../../../dev/drm/i915_drv.c:767 767 __i915_read(32, 32) (gdb) disassemble Dump of assembler code for function i915_read32: 0xffffffff81c1f375 : push %rbp 0xffffffff81c1f376 : mov %rsp,%rbp 0xffffffff81c1f379 : push %r13 0xffffffff81c1f37b : push %r12 0xffffffff81c1f37d : push %rbx 0xffffffff81c1f37e : sub $0x8,%rsp 0xffffffff81c1f382 : mov %rdi,%rbx 0xffffffff81c1f385 : mov %esi,%r12d 0xffffffff81c1f388 : mov 0x1840(%rdi),%rax 0xffffffff81c1f38f : cmpb $0x5,(%rax) 0xffffffff81c1f392 : jbe 0xffffffff81c1f408 0xffffffff81c1f394 : cmp $0x3ffff,%esi 0xffffffff81c1f39a : ja 0xffffffff81c1f408 0xffffffff81c1f39c : cmp $0xa18c,%esi 0xffffffff81c1f3a2 : je 0xffffffff81c1f408 0xffffffff81c1f3a4 : lea 0x48(%rdi),%r13 0xffffffff81c1f3a8 : mov $0x2ff,%ecx 0xffffffff81c1f3ad : mov $0xffffffff81c60d28,%rdx 0xffffffff81c1f3b4 : mov $0x0,%esi 0xffffffff81c1f3b9 : mov %r13,%rdi 0xffffffff81c1f3bc : callq 0xffffffff80468980 <_mtx_lock_flags> 0xffffffff81c1f3c1 : cmpl $0x0,0x44(%rbx) 0xffffffff81c1f3c5 : jne 0xffffffff81c1f418 0xffffffff81c1f3c7 : mov %rbx,%rdi 0xffffffff81c1f3ca : callq *0x9a0(%rbx) 0xffffffff81c1f3d0 : mov %r12d,%eax 0xffffffff81c1f3d3 : mov 0x38(%rbx),%rdx 0xffffffff81c1f3d7 : add 0x28(%rdx),%rax 0xffffffff81c1f3db : mov (%rax),%r12d 0xffffffff81c1f3de : cmpl $0x0,0x44(%rbx) 0xffffffff81c1f3e2 : jne 0xffffffff81c1f3ed 0xffffffff81c1f3e4 : mov %rbx,%rdi 0xffffffff81c1f3e7 : callq *0x9a8(%rbx) 0xffffffff81c1f3ed : mov $0x2ff,%ecx 0xffffffff81c1f3f2 : mov $0xffffffff81c60d28,%rdx 0xffffffff81c1f3f9 : mov $0x0,%esi 0xffffffff81c1f3fe : mov %r13,%rdi 0xffffffff81c1f401 : callq 0xffffffff80468131 <_mtx_unlock_flags> 0xffffffff81c1f406 : jmp 0xffffffff81c1f428 0xffffffff81c1f408 : mov %r12d,%eax 0xffffffff81c1f40b : mov 0x38(%rbx),%rdx 0xffffffff81c1f40f : add 0x28(%rdx),%rax 0xffffffff81c1f413 : mov (%rax),%r12d 0xffffffff81c1f416 : jmp 0xffffffff81c1f428 0xffffffff81c1f418 : mov %r12d,%eax 0xffffffff81c1f41b : mov 0x38(%rbx),%rdx 0xffffffff81c1f41f : add 0x28(%rdx),%rax 0xffffffff81c1f423 : mov (%rax),%r12d 0xffffffff81c1f426 : jmp 0xffffffff81c1f3ed 0xffffffff81c1f428 : mov %r12d,%eax 0xffffffff81c1f42b : add $0x8,%rsp 0xffffffff81c1f42f : pop %rbx 0xffffffff81c1f430 : pop %r12 0xffffffff81c1f432 : pop %r13 0xffffffff81c1f434 : pop %rbp 0xffffffff81c1f435 : retq End of assembler dump. (gdb) i reg rax 0xdeadc0dedeade112 -2401050962867396334 rbx 0xffffff8007b42000 -549626568704 rcx 0xffffffff81c5f376 -2117733514 rdx 0xfffffe009c050e00 -2196405678592 rsi 0x2034 8244 rdi 0xffffff8007b42000 -549626568704 rbp 0xffffff81b6b997c0 0xffffff81b6b997c0 rsp 0xffffff81b6b997a0 0xffffff81b6b997a0 r8 0xffffffff81c5f431 -2117733327 r9 0x0 0 r10 0xa67 2663 r11 0xffffffff809c3160 -2137247392 r12 0x2034 8244 r13 0xffffff8007b42000 -549626568704 r14 0xffffff8007b437e4 -549626562588 r15 0x1fff8 131064 rip 0xffffffff81c1f413 0xffffffff81c1f413 eflags 0x10296 66198 cs 0x20 32 ss 0x28 40 ds 0x0 0 es 0x0 0 fs 0x0 0 gs 0x0 0 ===================================================================================== Fatal trap 12: page fault while in kernel mode cpuid = 1; apic id = 01 fault virtual address = 0xffffff80078ef840 fault code = supervisor read data, page not present instruction pointer = 0x20:0xffffffff81046ae4 stack pointer = 0x28:0xffffff81b7b228f0 frame pointer = 0x28:0xffffff81b7b22900 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 1310 (kldunload) trap number = 12 panic: page fault cpuid = 1 curthread: 0xfffffe0073184470 stack: 0xffffff81b7b1f000 - 0xffffff81b7b23000 stack pointer: 0xffffff81b7b22530 KDB: stack backtrace: db_trace_self_wrapper() at 0xffffffff802b99d5 = db_trace_self_wrapper+0x2a kdb_backtrace() at 0xffffffff804b909e = kdb_backtrace+0x32 panic() at 0xffffffff80483674 = panic+0x266 trap_fatal() at 0xffffffff806624b8 = trap_fatal+0x397 trap_pfault() at 0xffffffff8066280f = trap_pfault+0x339 trap() at 0xffffffff80662ccd = trap+0x496 calltrap() at 0xffffffff8064c3f3 = calltrap+0x8 (gdb) bt #0 doadump (textdump=1) at pcpu.h:224 #1 0xffffffff804832ae in kern_reboot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:449 #2 0xffffffff804836be in panic (fmt=Variable "fmt" is not available. ) at /usr/src/sys/kern/kern_shutdown.c:642 #3 0xffffffff806624b8 in trap_fatal (frame=0xc, eva=18446744071569698441) at /usr/src/sys/amd64/amd64/trap.c:843 #4 0xffffffff8066280f in trap_pfault (frame=0xffffff81b7b22840, usermode=0) at /usr/src/sys/amd64/amd64/trap.c:759 #5 0xffffffff80662ccd in trap (frame=0xffffff81b7b22840) at /usr/src/sys/amd64/amd64/trap.c:454 #6 0xffffffff8064c3f3 in calltrap () at /usr/src/sys/amd64/amd64/exception.S:228 #7 0xffffffff81046ae4 in intel_iic_reset (dev=Variable "dev" is not available. ) at /usr/src/sys/modules/drm/i915/../../../dev/drm/intel_iic.c:127 #8 0xffffffff81046b2d in intel_iicbus_reset (idev=Variable "idev" is not available. ) at /usr/src/sys/modules/drm/i915/../../../dev/drm/intel_iic.c:143 #9 0xffffffff81075c31 in iicbus_detach (dev=0xfffffe0073015c00) at iicbus_if.h:117 #10 0xffffffff804b2c99 in device_detach (dev=0xfffffe0073015c00) at device_if.h:214 #11 0xffffffff804b3e31 in devclass_driver_deleted (busclass=0xfffffe00129fc100, dc=0xfffffe0012f1b300, driver=0xffffffff81075f40) at /usr/src/sys/kern/subr_bus.c:1130 #12 0xffffffff804b3f42 in devclass_delete_driver (busclass=0xfffffe00129fc100, driver=0xffffffff81075f40) at /usr/src/sys/kern/subr_bus.c:1200 #13 0xffffffff804b403a in driver_module_handler (mod=0xfffffe0012f07480, what=1, arg=Variable "arg" is not available. ) at /usr/src/sys/kern/subr_bus.c:4475 #14 0xffffffff8046f0e4 in module_unload (mod=0xfffffe0012f07480) at /usr/src/sys/kern/kern_module.c:265 #15 0xffffffff80465d9c in linker_file_unload (file=0xfffffe0012863400, flags=0) at /usr/src/sys/kern/kern_linker.c:639 #16 0xffffffff80467de2 in kern_kldunload (td=0xfffffe0073184470, fileid=Variable "fileid" is not available. ) at /usr/src/sys/kern/kern_linker.c:1107 #17 0xffffffff80467f4a in sys_kldunloadf (td=0xffffff80078ee000, uap=0x3) at /usr/src/sys/kern/kern_linker.c:1142 #18 0xffffffff806619e9 in amd64_syscall (td=0xfffffe0073184470, traced=0) at subr_syscall.c:135 #19 0xffffffff8064c6d7 in Xfast_syscall () at /usr/src/sys/amd64/amd64/exception.S:387 #20 0x00000008008a73ac in ?? () Previous frame inner to this frame (corrupt stack?) (gdb) fr 7 #7 0xffffffff81046ae4 in intel_iic_reset (dev=Variable "dev" is not available. ) at /usr/src/sys/modules/drm/i915/../../../dev/drm/intel_iic.c:127 127 dev_priv = dev->dev_private; (gdb) p dev Variable "dev" is not available. (gdb) p dev_priv $1 = (struct drm_i915_private *) 0xffffff80078ee000 (gdb) disassemble Dump of assembler code for function intel_iic_reset: 0xffffffff81046ad9 : push %rbp 0xffffffff81046ada : mov %rsp,%rbp 0xffffffff81046add : mov 0x380(%rdi),%rdi 0xffffffff81046ae4 : mov 0x1840(%rdi),%rdx 0xffffffff81046aeb : movzbl (%rdx),%eax 0xffffffff81046aee : sub $0x5,%al 0xffffffff81046af0 : cmp $0x1,%al 0xffffffff81046af2 : jbe 0xffffffff81046afa 0xffffffff81046af4 : testb $0x4,0x2(%rdx) 0xffffffff81046af8 : je 0xffffffff81046b0b 0xffffffff81046afa : mov $0x0,%edx 0xffffffff81046aff : mov $0xc5100,%esi 0xffffffff81046b04 : callq 0xffffffff8101f626 0xffffffff81046b09 : jmp 0xffffffff81046b1a 0xffffffff81046b0b : mov $0x0,%edx 0xffffffff81046b10 : mov $0x5100,%esi 0xffffffff81046b15 : callq 0xffffffff8101f626 0xffffffff81046b1a : pop %rbp 0xffffffff81046b1b : retq End of assembler dump. (gdb) i reg rax 0xfffffe0012ff5440 -2198704532416 rbx 0xfffffe0073015c00 -2197093786624 rcx 0x0 0 rdx 0x0 0 rsi 0x3 3 rdi 0xffffff80078ee000 -549629009920 rbp 0xffffff81b7b22900 0xffffff81b7b22900 rsp 0xffffff81b7b22900 0xffffff81b7b22900 r8 0xfffffe00129fb280 -2198710799744 r9 0xffffffff80a2f580 -2136803968 r10 0x1 1 r11 0xfffffe0012f07480 -2198705507200 r12 0xfffffe0073015d00 -2197093786368 r13 0xfffffe0012ff54c0 -2198704532288 r14 0xfffffe0012f1b300 -2198705425664 r15 0xfffffe00129fc100 -2198710796032 rip 0xffffffff81046ae4 0xffffffff81046ae4 eflags 0x10246 66118 cs 0x20 32 ss 0x28 40 ds 0x0 0 es 0x0 0 fs 0x0 0 gs 0x0 0 (gdb) list 122 void 123 intel_iic_reset(struct drm_device *dev) 124 { 125 struct drm_i915_private *dev_priv; 126 127 dev_priv = dev->dev_private; 128 if (HAS_PCH_SPLIT(dev)) 129 I915_WRITE(PCH_GMBUS0, 0); 130 else 131 I915_WRITE(GMBUS0, 0);