maintainer-feedback requested: [Bug 291124] nvidia-kmod-340 instapanic on 16.0-CURRENT

Bugzilla Automation <bugzilla@FreeBSD.org> has asked freebsd-x11 (Nobody)
<x11@FreeBSD.org> for maintainer-feedback:
Bug 291124: nvidia-kmod-340 instapanic on 16.0-CURRENT
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291124



--- Description ---
%uname -a
FreeBSD zipper.catspoiler.org 16.0-CURRENT FreeBSD 16.0-CURRENT #12
main-n281982-c0a38339fec3: Tue Nov 18 02:17:06 PST 2025    
dl@zipper.catspoiler.org:/usr/obj/usr/src/amd64.amd64/sys/GENERIC amd64

%pkg info -ao | grep nvidia
nvidia-driver-340-340.108_5    x11/nvidia-driver-340
nvidia-kmod-340-340.108.1600004 x11/nvidia-kmod-340

The system was upgraded a couple days ago, with all ports rebuilt and
re-installed.

It panics during X11 startup, very shortly after I run startx.

Kernel messages when the kmod is loaded:
Nov 20 18:51:45 zipper kernel: nvidia0: <GeForce 210> on vgapci0
Nov 20 18:51:45 zipper kernel: vgapci0: child nvidia0 requested pci_enable_io
Nov 20 18:51:45 zipper syslogd: last message repeated 1 times

/var/log/Xorg.0.log:
X.Org X Server 1.21.1.18
X Protocol Version 11, Revision 0
[232091.436] Current Operating System: FreeBSD zipper.catspoiler.org
16.0-CURRENT FreeBSD 16.0-CURRENT #12 main-n281982-c0a38339fec3: Tue Nov 18 02:
17:06 PST 2025	  
dl@zipper.catspoiler.org:/usr/obj/usr/src/amd64.amd64/sys/GENERIC amd64
[232091.436]
[232091.436] Current version of pixman: 0.46.2
[232091.436]	Before reporting problems, check http://wiki.x.org
	to make sure that you have the latest version.
[232091.436] Markers: (--) probed, (**) from config file, (==) default setting,
	(++) from command line, (!!) notice, (II) informational,
	(WW) warning, (EE) error, (NI) not implemented, (??) unknown.
[232091.436] (==) Log file: "/var/log/Xorg.0.log", Time: Thu Nov 20 18:54:37
2025
[232091.437] (==) Using config directory: "/usr/local/etc/X11/xorg.conf.d"
[232091.437] (==) Using system config directory
"/usr/local/share/X11/xorg.conf.d"

Unread portion of the kernel message buffer:
panic: vm_fault_lookup: fault on nofault entry, addr: 0xfffffe0497546000
cpuid = 12
time = 1763693678
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe02c176b5b0
vpanic() at vpanic+0x136/frame 0xfffffe02c176b6e0
panic() at panic+0x43/frame 0xfffffe02c176b740
vm_fault() at vm_fault+0x1ae9/frame 0xfffffe02c176b8c0
vm_fault_trap() at vm_fault_trap+0x65/frame 0xfffffe02c176b900
trap_pfault() at trap_pfault+0x26a/frame 0xfffffe02c176b970
calltrap() at calltrap+0x8/frame 0xfffffe02c176b970
--- trap 0xc, rip = 0xffffffff83ada25b, rsp = 0xfffffe02c176ba40, rbp =
0xfffffe0246832f98 ---
_nv000224rm() at _nv000224rm+0x4b/frame 0xfffffe0246832f98
kernload() at 0xc1d00001/frame 0xfffffe01c7fb5000
KDB: enter: panic

Reading symbols from /boot/modules/nvidia.ko...
(No debugging symbols found in /boot/modules/nvidia.ko)
__curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57
57		__asm("movq %%gs:%c1,%0" : "=r" (td)
(kgdb) bt
#0  __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57
#1  doadump (textdump=textdump@entry=0) at
/usr/src/sys/kern/kern_shutdown.c:399
#2  0xffffffff804acbba in db_dump (dummy=<optimized out>, dummy2=<optimized
out>, dummy3=<optimized out>, dummy4=<optimized out>)
    at /usr/src/sys/ddb/db_command.c:596
#3  0xffffffff804ac9ad in db_command (last_cmdp=<optimized out>,
cmd_table=<optimized out>, dopager=true) at /usr/src/sys/ddb/db_command.c:508
#4  0xffffffff804ac66d in db_command_loop () at
/usr/src/sys/ddb/db_command.c:555
#5  0xffffffff804b0066 in db_trap (type=<optimized out>, code=<optimized out>)
at /usr/src/sys/ddb/db_main.c:267
#6  0xffffffff80be613f in kdb_trap (type=type@entry=3, code=code@entry=0,
tf=tf@entry=0xfffffe02c176b4f0) at /usr/src/sys/kern/subr_kdb.c:790
#7  0xffffffff810ec57e in trap (frame=<optimized out>) at
/usr/src/sys/amd64/amd64/trap.c:614
#8  <signal handler called>
#9  kdb_enter (why=<optimized out>, msg=<optimized out>) at
/usr/src/sys/kern/subr_kdb.c:556
#10 0xffffffff80b9685b in vpanic (fmt=0xffffffff8120df65 "%s: fault on nofault
entry, addr: %#lx", ap=ap@entry=0xfffffe02c176b720)
    at /usr/src/sys/kern/kern_shutdown.c:962
#11 0xffffffff80b966c3 in panic (fmt=0xffffffff81d9fa70 <cnputs_mtx>
"\221=\035\201\377\377\377\377") at /usr/src/sys/kern/kern_shutdown.c:887
#12 0xffffffff80f65d79 in vm_fault_lookup (fs=<optimized out>) at
/usr/src/sys/vm/vm_fault.c:935
#13 vm_fault (map=map@entry=0xffffffff81ef3420 <kernel_map_store>,
vaddr=18446741894405054464, fault_type=1 '\001', fault_flags=<optimized out>, 
    m_hold=m_hold@entry=0x0) at /usr/src/sys/vm/vm_fault.c:1682
#14 0xffffffff80f64135 in vm_fault_trap (map=0xffffffff81ef3420
<kernel_map_store>, vaddr=vaddr@entry=18446741894405054464, 
    fault_type=<optimized out>, fault_flags=fault_flags@entry=0, signo=0x0,
ucode=0x0) at /usr/src/sys/vm/vm_fault.c:735
#15 0xffffffff810ece5a in trap_pfault (frame=0xfffffe02c176b980,
usermode=false, signo=<optimized out>, ucode=<optimized out>)
    at /usr/src/sys/amd64/amd64/trap.c:847
#16 <signal handler called>
--Type <RET> for more, q to quit, c to continue without paging--
#17 0xffffffff83ada25b in _nv000224rm () from /boot/modules/nvidia.ko
#18 0xfffff80004926200 in ?? ()
#19 0x0000000000000000 in ?? ()
(kgdb)