[Bug 297268] graphics/nvidia-drm-kmod-580: kernel panic (page fault) in drm_open on /dev/dri/renderD128 access

[email protected] Tue, 04 Aug 2026 10:43:43 +0000
Newsgroups gmane.os.freebsd.devel.x11
Message-ID <[email protected]/bugzilla/>
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D297268

            Bug ID: 297268
           Summary: graphics/nvidia-drm-kmod-580: kernel panic (page
                    fault) in drm_open on /dev/dri/renderD128 access
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: [email protected]
          Reporter: [email protected]
             Flags: maintainer-feedback?([email protected])

`vainfo` is enough to trigger a panic.

Same with drm-66 and drm-61.

% pkg info -a | grep nvidia
linux-nvidia-libs-580-580.173.02 NVIDIA graphics libraries and programs (Li=
nux)
nvidia-driver-580-580.173.02   NVIDIA graphics driver userland
nvidia-drm-latest-kmod-580-580.173.02.1600019_1 NVIDIA DRM Kernel Module
nvidia-kmod-580-580.173.02.1600019 NVIDIA graphics driver kernel module

% uname -aK
FreeBSD 16.0-CURRENT main-n287941-d3a0bf0a79ef GENERIC-NODEBUG amd64 1600019

kgdb (see attachment for detail):

(kgdb) bt
#0  __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57
#1  doadump (textdump=3Dtextdump@entry=3D0) at
/usr/src/sys/kern/kern_shutdown.c:399
#2  0xffffffff804bfd8a in db_dump (dummy=3D<optimized out>, dummy2=3D<optim=
ized
out>, dummy3=3D<optimized out>, dummy4=3D<optimized out>) at
/usr/src/sys/ddb/db_command.c:596
#3  0xffffffff804bfc3a in db_command (last_cmdp=3D<optimized out>,
cmd_table=3D<optimized out>, dopager=3Dtrue) at /usr/src/sys/ddb/db_command=
.c:508
#4  0xffffffff804bf85d in db_command_loop () at
/usr/src/sys/ddb/db_command.c:555
#5  0xffffffff804c33c0 in db_trap (type=3D<optimized out>, code=3D<optimize=
d out>)
at /usr/src/sys/ddb/db_main.c:267
#6  0xffffffff80c5f0f5 in kdb_trap (type=3Dtype@entry=3D3, code=3Dcode@entr=
y=3D0,
tf=3Dtf@entry=3D0xfffffe03a8cf1570) at /usr/src/sys/kern/subr_kdb.c:790
#7  0xffffffff8115cdf1 in trap (frame=3D<optimized out>) at
/usr/src/sys/amd64/amd64/trap.c:702
#8  <signal handler called>
#9  kdb_enter (why=3D<optimized out>, msg=3D<optimized out>) at
/usr/src/sys/kern/subr_kdb.c:556
#10 0xffffffff80c0ae89 in vpanic (fmt=3D<optimized out>,
ap=3Dap@entry=3D0xfffffe03a8cf17a0) at /usr/src/sys/kern/kern_shutdown.c:962
#11 0xffffffff80c0ad03 in panic (fmt=3D0xffffffff81aa6be0 <vt_conswindow+16>
"\350\0312\201\377\377\377\377") at /usr/src/sys/kern/kern_shutdown.c:887
#12 0xffffffff8115d4d8 in trap_fatal (frame=3D<optimized out>, eva=3D<optim=
ized
out>) at /usr/src/sys/amd64/amd64/trap.c:1031
#13 0xffffffff8115d4d8 in trap_pfault (frame=3D0xfffffe03a8cf1830,
usermode=3Dfalse, signo=3D<optimized out>, ucode=3D<optimized out>)
#14 <signal handler called>
#15 0xffffffff8399ef86 in drm_open_helper () from /boot/modules/drm.ko
#16 0xffffffff8399f185 in drm_open () from /boot/modules/drm.ko
#17 0xffffffff839937fd in drm_stub_open () from /boot/modules/drm.ko
#18 0xffffffff80eabe21 in linux_dev_fdopen (dev=3D<optimized out>,
fflags=3D<optimized out>, td=3D0xfffff81bffc46d80, file=3D0xfffff805563ac78=
0) at
/usr/src/sys/compat/linuxkpi/common/src/linux_compat.c:774
#19 0xffffffff80a710b4 in devfs_open (ap=3D0xfffffe03a8cf1a70) at
/usr/src/sys/fs/devfs/devfs_vnops.c:1322
#20 0xffffffff81231869 in VOP_OPEN_APV (vop=3D0xffffffff81aab5a0 <devfs_spe=
cops>,
a=3Da@entry=3D0xfffffe03a8cf1a70) at vnode_if.c:411
#21 0xffffffff80d29220 in VOP_OPEN (vp=3D0xfffff81ac28de1b8, mode=3D3,
cred=3D0xfffff81a631d3900, td=3D<optimized out>, fp=3D<optimized out>) at
./vnode_if.h:256
#22 vn_open_vnode (vp=3D0xfffff81ac28de1b8, fmode=3Dfmode@entry=3D3,
cred=3Dcred@entry=3D0xfffff81a631d3900, td=3Dtd@entry=3D0xfffff805563ac780,
fp=3D<optimized out>) at /usr/src/sys/kern/vfs_vnops.c:495
#23 0xffffffff80d28b05 in vn_open_cred (ndp=3Dndp@entry=3D0xfffffe03a8cf1cc=
8,
flagp=3Dflagp@entry=3D0xfffffe03a8cf1ca4, cmode=3Dcmode@entry=3D0,
vn_open_flags=3Dvn_open_flags@entry=3D16, cred=3D0xfffff81a631d3900,
fp=3D0xfffff8155448de60) at /usr/src/sys/kern/vfs_vnops.c:378
#24 0xffffffff80d1d549 in openatfp (td=3D0xfffff805563ac780, dirfd=3D<optim=
ized
out>, path=3D<optimized out>, pathseg=3Dpathseg@entry=3DUIO_USERSPACE, flag=
s=3D3,
mode=3D<optimized out>, fpp=3D0x0) at /usr/src/sys/kern/vfs_syscalls.c:1266
#25 0xffffffff80d1d24d in kern_openat (dirfd=3D0, path=3D0x0,
pathseg=3DUIO_USERSPACE, flags=3D0, mode=3D-373463024, td=3D<optimized out>=
) at
/usr/src/sys/kern/vfs_syscalls.c:1354
#26 sys_openat (td=3D<optimized out>, uap=3D<optimized out>) at
/usr/src/sys/kern/vfs_syscalls.c:1158
#27 0xffffffff8115e01e in syscallenter (td=3D0xfffff805563ac780) at
/usr/src/sys/amd64/amd64/../../kern/subr_syscall.c:165
#28 amd64_syscall (td=3D0xfffff805563ac780, traced=3D0) at
/usr/src/sys/amd64/amd64/trap.c:1278
#29 <signal handler called>
#30 0x000000082bc5f42a in ?? ()
Backtrace stopped: Cannot access memory at address 0x820ccdb08


% kldstat | grep -E 'drm|nvi'
12    1 0xffffffff8395e000    15a10 nvidia-drm.ko
13    1 0xffffffff83974000    9e420 drm.ko
18    2 0xffffffff83c00000  6075420 nvidia.ko
20    1 0xffffffff83a5e000   1662f8 nvidia-modeset.ko

--=20
You are receiving this mail because:
You are the assignee for the bug.=