Re: kern/59767: nouveau driver crashes kernel in bus_dmamem_unmap

["Stefan Schaeckeler via gnats" <gnats-admin%NetBSD.org@localhost>]

The following reply was made to PR kern/59767; it has been noted by GNATS.

From: Stefan Schaeckeler <schaecsn%gmx.net@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: 
Subject: Re: kern/59767: nouveau driver crashes kernel in bus_dmamem_unmap
Date: Thu, 20 Nov 2025 20:43:10 -0800

 > Restarted firefox. Last active tab: youtube.com. Kernel crashes. I did n=
 ot find a kdump upon boot.
 
 > Nvidia GeForce 9500 512MB
 
 4 days later, the next kernel crash in the nouveau driver (no kdump).
 
 Activity: firefox in the background (no multimedia website), thunderbird s=
 ending out an email.
 
 
 [ 469922.104316] panic: pmap_pv_remove: page not pv-tracked: 0xd5a80000
 [ 469922.104316] cpu1: Begin traceback...
 [ 469922.104316] vpanic() at netbsd:vpanic+0x183
 [ 469922.104316] panic() at netbsd:panic+0x3c
 [ 469922.104316] pmap_pv_remove() at netbsd:pmap_pv_remove+0x74
 [ 469922.104316] ttm_bo_unmap_virtual_locked() at netbsd:ttm_bo_unmap_virt=
 ual_locked+0x3e
 [ 469922.114316] ttm_bo_handle_move_mem() at netbsd:ttm_bo_handle_move_mem=
 +0xa4
 [ 469922.114316] ttm_mem_evict_first() at netbsd:ttm_mem_evict_first+0x64d
 [ 469922.114316] ttm_bo_mem_space() at netbsd:ttm_bo_mem_space+0x21e
 [ 469922.114316] ttm_bo_validate() at netbsd:ttm_bo_validate+0xe6
 [ 469922.114316] ttm_bo_init_reserved() at netbsd:ttm_bo_init_reserved+0x3=
 23
 [ 469922.124316] ttm_bo_init() at netbsd:ttm_bo_init+0x65
 [ 469922.124316] nouveau_bo_init() at netbsd:nouveau_bo_init+0xb0
 [ 469922.124316] nouveau_gem_new() at netbsd:nouveau_gem_new+0xd6
 [ 469922.124316] nouveau_gem_ioctl_new() at netbsd:nouveau_gem_ioctl_new+0=
 x4a
 [ 469922.124316] drm_ioctl() at netbsd:drm_ioctl+0x246
 [ 469922.124316] drm_ioctl_shim() at netbsd:drm_ioctl_shim+0x25
 [ 469922.134316] sys_ioctl() at netbsd:sys_ioctl+0x56e
 [ 469922.134316] syscall() at netbsd:syscall+0x1fc
 [ 469922.134316] --- syscall (number 54) ---
 [ 469922.134316] netbsd:syscall+0x1fc:
 [ 469922.134316] cpu1: End traceback...
 
 [ 469922.134316] dumping to dev 0,1 (offset=3D29395663, size=3D1568422):
 [ 469922.134316] dump=20
 
 ~ Stefan