port-i386/57863: Executing halt command in xterm causes panic

[mal%matrixmotor.se@localhost]

>Number:         57863
>Category:       port-i386
>Synopsis:       Executing halt command in xterm causes panic
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    port-i386-maintainer
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Jan 17 16:15:00 +0000 2024
>Originator:     Martin Lindgren
>Release:        NetBSD 10.0_RC2 (GENERIC)
>Organization:
Matrix Motor
>Environment:
NetBSD nbsd.lan 10.0_RC2 NetBSD 10.0_RC2 (GENERIC) #0: Mon Jan  1 14:04:52 UTC 2024  mkrepro%mkrepro.NetBSD.org@localhost:/usr/src/sys/arch/i386/compile/GENERIC i386
>Description:
Machine: Dell Inspiron 1150

Trying to shutdown from xterm causes panic and reboot.
(Release 9.3 working great on this machine)

Traceback log:
[   128.804043] uvm_fault(0xc157f960, 0, 1) -> 0xe
[   128.804043] fatal page fault in supervisor mode
[   128.804043] trap type 6 code 0 eip 0xc0c47b88 cs 0x8 eflags 0x13282 cr2 0x10 ilevel 0 esp 0xd962eee8
[   128.804043] curlwp 0xc24ae600 pid 0 lid 31 lowest kstack 0xd962d2c0
[   128.804043] panic: trap
[   128.804043] cpu0: Begin traceback...
[   128.811844] vpanic(c1186ce0,d962edc0,d962ee7c,c012fed8,c1186ce0,d962ee88,d962ee88,1f,d962d2c0,13282) at netbsd:vpanic+0x196
[   128.811844] panic(c1186ce0,d962ee88,d962ee88,1f,d962d2c0,13282,10,0,d962eee8,c157f960) at netbsd:panic+0x18
[   128.821808] trap() at netbsd:trap+0xd51
[   128.821808] --- trap (number 6) ---
[   128.831804] uvm_vm_page_to_phys(0,c2217004,c3be2900,d962eefc,0,c3be2900,d962eefc,c06cd118,0,c3be29b0) at netbsd:uvm_vm_page_to_phys+0x6
[   128.831804] pmap_page_remove(0,c3be29b0,c3be2900,d962ef48,c06cd604,c3be2900,1,0,c0c5dbef,0) at netbsd:pmap_page_remove+0x13
[   128.841806] i915_gem_object_release_mmap_offset(c3be2900,1,0,c0c5dbef,0,0,c2219878,0,c3be29b0,c3be29ac) at netbsd:i915_gem_object_release_mmap_offset+0x3b
[   128.841806] __i915_gem_free_objects(c2218a1c,c2493880,0,0,100,c24ae600,c249389c,d962ef78,c2493884,c249389c) at netbsd:__i915_gem_free_objects+0x80
[   128.851804] linux_workqueue_thread(c2493880,1849000,1854000,0,c01005a8,0,0,0,0,0) at netbsd:linux_workqueue_thread+0xe6
[   128.851804] cpu0: End traceback...

[   128.851804] dumping to dev 0,1 offset 1215


crash log:
System panicked: trap
Backtrace from time of crash is available.
crash> bt
_KERNEL_OPT_MEMORY_RBFLAGS(104,0,c24ae600,c11f18f8,c1186ce0,d962eda4,c0cbc868,10
4,0,0) at 0
kern_reboot(104,0,0,0,c1583d20,6,c24ae600,d962edb4,c0cbc921,c1186ce0) at sys_reb
oot
vpanic(c1186ce0,d962edc0,d962ee7c,c012fed8,c1186ce0,d962ee88,d962ee88,1f,d962d2c
0,13282) at vpanic+0x1a6
panic(c1186ce0,d962ee88,d962ee88,1f,d962d2c0,13282,10,0,d962eee8,c157f960) at vp
rintf
trap() at trap_tss
--- trap (number 6) ---
uvm_vm_page_to_phys(0,c2217004,c3be2900,d962eefc,0,c3be2900,d962eefc,c06cd118,0,
c3be29b0) at uvm_vm_page_to_phys+0x6
pmap_page_remove(0,c3be29b0,c3be2900,d962ef48,c06cd604,c3be2900,1,0,c0c5dbef,0) 
at pmap_page_remove+0x13
i915_gem_object_release_mmap_offset(c3be2900,1,0,c0c5dbef,0,0,c2219878,0,c3be29b
0,c3be29ac) at i915_gem_object_release_mmap_offset+0x3b
__i915_gem_free_objects(c2218a1c,c2493880,0,0,100,c24ae600,c249389c,d962ef78,c24
93884,c249389c) at __i915_gem_free_objects+0x80
linux_workqueue_thread(c2493880,1849000,1854000,0,c01005a8,0,0,0,0,0) at linux_w
orkqueue_thread+0xe6
crash> 

gdb log:
(gdb) target kvm netbsd.0.core
0xc012d6ed in cpu_reboot ()
(gdb) bt
#0  0xc012d6ed in cpu_reboot ()
#1  0xc0c85ca7 in kern_reboot ()
#2  0xc0cbc868 in vpanic ()
#3  0xc0cbc921 in panic ()
#4  0xc012fed8 in trap ()
#5  0xc012529b in alltraps ()
#6  0xd962ee88 in end ()
#7  0xc0b20010 in drm_mode_dirtyfb_ioctl ()
#8  0xc049813a in pmap_page_remove ()
#9  0xc06cd118 in i915_gem_object_release_mmap_offset ()
#10 0xc06cd604 in __i915_gem_free_objects ()
#11 0xc0aef545 in linux_workqueue_thread ()
#12 0xc0102011 in lwp_trampoline ()
(gdb)

>How-To-Repeat:
Execute halt command in xterm or Quit in ctwm menu.
>Fix: