Bug 111037 - [CI][BAT] igt@i915_selftest@live_mman - dmesg-warn - BUG drm_i915_gem_object: Poison overwritten
Summary: [CI][BAT] igt@i915_selftest@live_mman - dmesg-warn - BUG drm_i915_gem_object:...
Status: RESOLVED NOTOURBUG
Alias: None
Product: DRI
Classification: Unclassified
Component: DRM/Intel (show other bugs)
Version: XOrg git
Hardware: Other All
: highest normal
Assignee: Intel GFX Bugs mailing list
QA Contact: Intel GFX Bugs mailing list
URL:
Whiteboard: ReadyForDev
Keywords:
Depends on:
Blocks:
 
Reported: 2019-07-01 13:31 UTC by Martin Peres
Modified: 2019-07-01 14:38 UTC (History)
1 user (show)

See Also:
i915 platform: BSW/CHT
i915 features: GEM/Other


Attachments

Description Martin Peres 2019-07-01 13:31:04 UTC
https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_13466/fi-bsw-n3050/igt@i915_selftest@live_mman.html

<3> [432.009581] =============================================================================
<3> [432.009774] BUG drm_i915_gem_object (Tainted: G     U           ): Poison overwritten
<3> [432.009784] -----------------------------------------------------------------------------

<4> [432.009794] Disabling lock debugging due to kernel taint
<3> [432.009800] INFO: 0x000000004e324a86-0x00000000acf08f58. First byte 0x1 instead of 0x6b
<3> [432.009934] INFO: Allocated in i915_gem_object_create_internal+0x20/0x110 [i915] age=156 cpu=1 pid=3883
<3> [432.009944] 	__slab_alloc.isra.28.constprop.34+0x3d/0x70
<3> [432.009950] 	kmem_cache_alloc+0x21c/0x280
<3> [432.010053] 	i915_gem_object_create_internal+0x20/0x110 [i915]
<3> [432.010156] 	igt_mmap_offset_exhaustion+0x106/0x6b0 [i915]
<3> [432.012519] 	__i915_subtests+0x1a4/0x1e0 [i915]
<3> [432.012649] 	__run_selftests+0x112/0x170 [i915]
<3> [432.012767] 	i915_live_selftests+0x2c/0x60 [i915]
<3> [432.012873] 	i915_pci_probe+0x83/0x1a0 [i915]
<3> [432.012883] 	pci_device_probe+0x9e/0x120
<3> [432.012891] 	really_probe+0xea/0x3c0
<3> [432.012897] 	driver_probe_device+0x10b/0x120
<3> [432.012903] 	device_driver_attach+0x4a/0x50
<3> [432.012909] 	__driver_attach+0x97/0x130
<3> [432.012915] 	bus_for_each_dev+0x74/0xc0
<3> [432.012921] 	bus_add_driver+0x13f/0x210
<3> [432.012927] 	driver_register+0x56/0xe0
<3> [432.013045] INFO: Freed in __i915_gem_free_objects+0x306/0x610 [i915] age=142 cpu=0 pid=2386
<3> [432.013053] 	kmem_cache_free+0x279/0x2e0
<3> [432.013169] 	__i915_gem_free_objects+0x306/0x610 [i915]
<3> [432.013322] 	__i915_gem_free_work+0x5a/0x90 [i915]
<3> [432.013330] 	process_one_work+0x245/0x610
<3> [432.013336] 	worker_thread+0x37/0x380
<3> [432.013343] 	kthread+0x119/0x130
<3> [432.013351] 	ret_from_fork+0x3a/0x50
<3> [432.013359] INFO: Slab 0x000000002f9bcb1e objects=19 used=0 fp=0x0000000049f9d796 flags=0x8000000000010200
<3> [432.013365] INFO: Object 0x000000009a299079 @offset=5056 fp=0x00000000905a7117

<3> [432.013373] Redzone 0000000099a48bc4: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb  ................
<3> [432.013379] Redzone 00000000575c550f: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb  ................
<3> [432.013385] Redzone 000000000865bdcf: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb  ................
<3> [432.013391] Redzone 000000006677b9c5: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb  ................
<3> [432.013397] Object 000000009a299079: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013403] Object 00000000ab7efc00: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013409] Object 00000000c712ccce: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013415] Object 0000000040b42fc7: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013421] Object 00000000e61e830d: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013427] Object 0000000042ae35ec: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013433] Object 000000005ae7aa79: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013438] Object 0000000021a017a7: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013444] Object 000000004ce980db: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013450] Object 000000004e324a86: 01 00 00 00 00 00 00 00 6b 6b 6b 6b 6b 6b 6b 6b  ........kkkkkkkk
<3> [432.013456] Object 00000000d646ab68: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013462] Object 00000000a3718be9: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013468] Object 00000000debb60cd: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013473] Object 00000000309886dd: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013479] Object 0000000021a4ea35: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013485] Object 000000002b2f09ba: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013491] Object 000000000153640f: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013497] Object 000000006236e4c9: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013503] Object 000000004b86d786: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013509] Object 000000006d19ab76: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013515] Object 00000000ec979f06: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013520] Object 00000000f31a3695: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013526] Object 0000000005a982a7: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013532] Object 0000000076ae943a: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013538] Object 00000000cafc9170: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013544] Object 000000007a5ad342: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013550] Object 00000000691ec00a: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013555] Object 00000000d2dd791a: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013561] Object 00000000d8e3f5e6: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013567] Object 000000002f6c175a: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013573] Object 000000002f9353d4: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013579] Object 0000000066c7dbf1: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013585] Object 00000000642d743e: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013591] Object 000000003abfcc0e: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013596] Object 00000000958dace5: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013602] Object 00000000cf1b29d6: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013608] Object 0000000027d9a36b: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013614] Object 00000000e997652a: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013620] Object 0000000057f452d1: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013626] Object 0000000082c4d093: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013632] Object 000000005fdfd9ca: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013637] Object 0000000016f3f332: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013643] Object 0000000019140c50: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013649] Object 000000006b2552a0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013655] Object 000000007e9c80e3: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013661] Object 00000000ff6d4999: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013667] Object 000000008916fcf1: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013673] Object 0000000046d9cf78: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013678] Object 00000000c4ddaade: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013684] Object 0000000026b3c776: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013690] Object 00000000f922646c: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013696] Object 00000000585004fa: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013702] Object 00000000ba3a5b2c: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013708] Object 000000007566b1e9: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013714] Object 0000000070f5a5bb: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013719] Object 00000000e2fe7a57: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013725] Object 00000000fb081eec: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013731] Object 0000000087ba9ce7: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013737] Object 00000000d0ef0e4c: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013743] Object 0000000074e83600: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013749] Object 000000004f28bf79: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013755] Object 000000000d38b2f3: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013760] Object 00000000ca818afe: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013766] Object 000000006a09abbe: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013772] Object 000000003d0df90f: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013778] Object 0000000065e3ff15: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013784] Object 00000000cbbd3e9d: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013790] Object 00000000f505d961: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013796] Object 000000005d3ae47a: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013801] Object 00000000d24c033d: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013807] Object 00000000c43b46db: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013813] Object 00000000a496ab88: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013819] Object 000000004e55605a: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013825] Object 000000000856416d: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013831] Object 00000000c91e87fc: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b  kkkkkkkkkkkkkkkk
<3> [432.013837] Object 0000000060809b77: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5  kkkkkkkkkkkkkkk.
<3> [432.013842] Redzone 000000009478c92a: bb bb bb bb bb bb bb bb                          ........
<3> [432.013848] Padding 0000000057c95d9e: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a  ZZZZZZZZZZZZZZZZ
<3> [432.013854] Padding 00000000f089ad85: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a  ZZZZZZZZZZZZZZZZ
<3> [432.013860] Padding 0000000077c49452: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a  ZZZZZZZZZZZZZZZZ
<3> [432.013866] Padding 0000000002fa5f78: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a  ZZZZZZZZZZZZZZZZ
<4> [432.013875] CPU: 1 PID: 3883 Comm: i915_selftest Tainted: G    BU            5.2.0-rc6-CI-Patchwork_13466+ #1
<4> [432.013878] Hardware name:  /NUC5CPYB, BIOS PYBSWCEL.86A.0058.2016.1102.1842 11/02/2016
<4> [432.013882] Call Trace:
<4> [432.013892]  dump_stack+0x67/0x9b
<4> [432.013898]  check_bytes_and_report+0xbd/0x100
<4> [432.013907]  check_object+0x237/0x280
<4> [432.013915]  __free_slab+0xaf/0x240
<4> [432.013920]  ? _raw_spin_unlock_irq+0x24/0x50
<4> [432.013928]  __kmem_cache_shutdown+0x2a9/0x3d0
<4> [432.013935]  ? lock_acquire+0xa6/0x1c0
<4> [432.013945]  shutdown_cache+0x10/0x1d0
<4> [432.013953]  kmem_cache_destroy+0x281/0x2a0
<4> [432.014077]  i915_globals_exit+0x30/0xf5 [i915]
<4> [432.014087]  __se_sys_delete_module+0x162/0x210
<4> [432.014093]  ? trace_hardirqs_off_thunk+0x1a/0x1c
<4> [432.014099]  ? do_syscall_64+0xd/0x1c0
<4> [432.014104]  do_syscall_64+0x55/0x1c0
<4> [432.014110]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
<4> [432.014115] RIP: 0033:0x7fa8a97271b7
<4> [432.014121] Code: 73 01 c3 48 8b 0d d1 8c 2c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d a1 8c 2c 00 f7 d8 64 89 01 48
<4> [432.014125] RSP: 002b:00007ffcbbd084f8 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0
<4> [432.014130] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007fa8a97271b7
<4> [432.014133] RDX: 000055def9122010 RSI: 0000000000000800 RDI: 000055def9157fd8
<4> [432.014136] RBP: 000055def9157f70 R08: 00007fa8aa05ce40 R09: 0000000000000000
<4> [432.014139] R10: 00007fa8a97a3cc0 R11: 0000000000000206 R12: 00007ffcbbd08640
<4> [432.014142] R13: 000055def91594c0 R14: 000055def74a5c1b R15: 0000000000000000
<3> [432.014158] FIX drm_i915_gem_object: Restoring 0x000000004e324a86-0x00000000acf08f58=0x6b
Comment 1 CI Bug Log 2019-07-01 13:33:16 UTC
The CI Bug Log issue associated to this bug has been updated.

### New filters associated

* BSW: igt@i915_selftest@live_mman - dmesg-warn - BUG drm_i915_gem_object: Poison overwritten
  - https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_13466/fi-bsw-n3050/igt@i915_selftest@live_mman.html
Comment 2 Chris Wilson 2019-07-01 14:25:51 UTC
If I am not mistaken, that is a stray 64b write  of 1, 144 bytes into a i915_gem_object

On my kernel that would put it around:

offsetof(drm_gem_object.vma_node)=24
offsetofend(drm_gem_object.vma_node)=208
...
offsetof(drm_gem_object.vma_node.vm_node.rb_hole_addr)=144

That doesn't seem particularly valid for a rbtree_node.parent, so either it's a completely stray write, my counting is wrong and its not 144 bytes in, or there's a massive layout difference between my kernel and CI.
Comment 3 Chris Wilson 2019-07-01 14:38:48 UTC
Plonked in

commit 3e03b51fcdedb947fdaaff36252f4daf3caf20be (HEAD -> topic/core-for-CI, drm-intel/topic/core-for-CI)
Author: Chris Wilson <chris@chris-wilson.co.uk>
Date:   Mon Jul 1 15:29:03 2019 +0100

    mm: Show slab debug as offsets from section base not hashed pointers

for better debug (i.e no unreliable counting by me) and writing this off as notourbug until we get a fresh hit.


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.