https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_13466/fi-bsw-n3050/igt@i915_selftest@live_mman.html <3> [432.009581] ============================================================================= <3> [432.009774] BUG drm_i915_gem_object (Tainted: G U ): Poison overwritten <3> [432.009784] ----------------------------------------------------------------------------- <4> [432.009794] Disabling lock debugging due to kernel taint <3> [432.009800] INFO: 0x000000004e324a86-0x00000000acf08f58. First byte 0x1 instead of 0x6b <3> [432.009934] INFO: Allocated in i915_gem_object_create_internal+0x20/0x110 [i915] age=156 cpu=1 pid=3883 <3> [432.009944] __slab_alloc.isra.28.constprop.34+0x3d/0x70 <3> [432.009950] kmem_cache_alloc+0x21c/0x280 <3> [432.010053] i915_gem_object_create_internal+0x20/0x110 [i915] <3> [432.010156] igt_mmap_offset_exhaustion+0x106/0x6b0 [i915] <3> [432.012519] __i915_subtests+0x1a4/0x1e0 [i915] <3> [432.012649] __run_selftests+0x112/0x170 [i915] <3> [432.012767] i915_live_selftests+0x2c/0x60 [i915] <3> [432.012873] i915_pci_probe+0x83/0x1a0 [i915] <3> [432.012883] pci_device_probe+0x9e/0x120 <3> [432.012891] really_probe+0xea/0x3c0 <3> [432.012897] driver_probe_device+0x10b/0x120 <3> [432.012903] device_driver_attach+0x4a/0x50 <3> [432.012909] __driver_attach+0x97/0x130 <3> [432.012915] bus_for_each_dev+0x74/0xc0 <3> [432.012921] bus_add_driver+0x13f/0x210 <3> [432.012927] driver_register+0x56/0xe0 <3> [432.013045] INFO: Freed in __i915_gem_free_objects+0x306/0x610 [i915] age=142 cpu=0 pid=2386 <3> [432.013053] kmem_cache_free+0x279/0x2e0 <3> [432.013169] __i915_gem_free_objects+0x306/0x610 [i915] <3> [432.013322] __i915_gem_free_work+0x5a/0x90 [i915] <3> [432.013330] process_one_work+0x245/0x610 <3> [432.013336] worker_thread+0x37/0x380 <3> [432.013343] kthread+0x119/0x130 <3> [432.013351] ret_from_fork+0x3a/0x50 <3> [432.013359] INFO: Slab 0x000000002f9bcb1e objects=19 used=0 fp=0x0000000049f9d796 flags=0x8000000000010200 <3> [432.013365] INFO: Object 0x000000009a299079 @offset=5056 fp=0x00000000905a7117 <3> [432.013373] Redzone 0000000099a48bc4: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ <3> [432.013379] Redzone 00000000575c550f: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ <3> [432.013385] Redzone 000000000865bdcf: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ <3> [432.013391] Redzone 000000006677b9c5: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ <3> [432.013397] Object 000000009a299079: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013403] Object 00000000ab7efc00: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013409] Object 00000000c712ccce: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013415] Object 0000000040b42fc7: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013421] Object 00000000e61e830d: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013427] Object 0000000042ae35ec: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013433] Object 000000005ae7aa79: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013438] Object 0000000021a017a7: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013444] Object 000000004ce980db: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013450] Object 000000004e324a86: 01 00 00 00 00 00 00 00 6b 6b 6b 6b 6b 6b 6b 6b ........kkkkkkkk <3> [432.013456] Object 00000000d646ab68: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013462] Object 00000000a3718be9: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013468] Object 00000000debb60cd: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013473] Object 00000000309886dd: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013479] Object 0000000021a4ea35: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013485] Object 000000002b2f09ba: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013491] Object 000000000153640f: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013497] Object 000000006236e4c9: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013503] Object 000000004b86d786: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013509] Object 000000006d19ab76: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013515] Object 00000000ec979f06: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013520] Object 00000000f31a3695: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013526] Object 0000000005a982a7: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013532] Object 0000000076ae943a: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013538] Object 00000000cafc9170: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013544] Object 000000007a5ad342: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013550] Object 00000000691ec00a: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013555] Object 00000000d2dd791a: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013561] Object 00000000d8e3f5e6: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013567] Object 000000002f6c175a: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013573] Object 000000002f9353d4: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013579] Object 0000000066c7dbf1: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013585] Object 00000000642d743e: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013591] Object 000000003abfcc0e: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013596] Object 00000000958dace5: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013602] Object 00000000cf1b29d6: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013608] Object 0000000027d9a36b: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013614] Object 00000000e997652a: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013620] Object 0000000057f452d1: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013626] Object 0000000082c4d093: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013632] Object 000000005fdfd9ca: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013637] Object 0000000016f3f332: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013643] Object 0000000019140c50: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013649] Object 000000006b2552a0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013655] Object 000000007e9c80e3: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013661] Object 00000000ff6d4999: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013667] Object 000000008916fcf1: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013673] Object 0000000046d9cf78: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013678] Object 00000000c4ddaade: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013684] Object 0000000026b3c776: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013690] Object 00000000f922646c: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013696] Object 00000000585004fa: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013702] Object 00000000ba3a5b2c: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013708] Object 000000007566b1e9: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013714] Object 0000000070f5a5bb: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013719] Object 00000000e2fe7a57: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013725] Object 00000000fb081eec: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013731] Object 0000000087ba9ce7: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013737] Object 00000000d0ef0e4c: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013743] Object 0000000074e83600: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013749] Object 000000004f28bf79: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013755] Object 000000000d38b2f3: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013760] Object 00000000ca818afe: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013766] Object 000000006a09abbe: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013772] Object 000000003d0df90f: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013778] Object 0000000065e3ff15: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013784] Object 00000000cbbd3e9d: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013790] Object 00000000f505d961: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013796] Object 000000005d3ae47a: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013801] Object 00000000d24c033d: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013807] Object 00000000c43b46db: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013813] Object 00000000a496ab88: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013819] Object 000000004e55605a: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013825] Object 000000000856416d: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013831] Object 00000000c91e87fc: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk <3> [432.013837] Object 0000000060809b77: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 kkkkkkkkkkkkkkk. <3> [432.013842] Redzone 000000009478c92a: bb bb bb bb bb bb bb bb ........ <3> [432.013848] Padding 0000000057c95d9e: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ <3> [432.013854] Padding 00000000f089ad85: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ <3> [432.013860] Padding 0000000077c49452: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ <3> [432.013866] Padding 0000000002fa5f78: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ <4> [432.013875] CPU: 1 PID: 3883 Comm: i915_selftest Tainted: G BU 5.2.0-rc6-CI-Patchwork_13466+ #1 <4> [432.013878] Hardware name: /NUC5CPYB, BIOS PYBSWCEL.86A.0058.2016.1102.1842 11/02/2016 <4> [432.013882] Call Trace: <4> [432.013892] dump_stack+0x67/0x9b <4> [432.013898] check_bytes_and_report+0xbd/0x100 <4> [432.013907] check_object+0x237/0x280 <4> [432.013915] __free_slab+0xaf/0x240 <4> [432.013920] ? _raw_spin_unlock_irq+0x24/0x50 <4> [432.013928] __kmem_cache_shutdown+0x2a9/0x3d0 <4> [432.013935] ? lock_acquire+0xa6/0x1c0 <4> [432.013945] shutdown_cache+0x10/0x1d0 <4> [432.013953] kmem_cache_destroy+0x281/0x2a0 <4> [432.014077] i915_globals_exit+0x30/0xf5 [i915] <4> [432.014087] __se_sys_delete_module+0x162/0x210 <4> [432.014093] ? trace_hardirqs_off_thunk+0x1a/0x1c <4> [432.014099] ? do_syscall_64+0xd/0x1c0 <4> [432.014104] do_syscall_64+0x55/0x1c0 <4> [432.014110] entry_SYSCALL_64_after_hwframe+0x49/0xbe <4> [432.014115] RIP: 0033:0x7fa8a97271b7 <4> [432.014121] Code: 73 01 c3 48 8b 0d d1 8c 2c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d a1 8c 2c 00 f7 d8 64 89 01 48 <4> [432.014125] RSP: 002b:00007ffcbbd084f8 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0 <4> [432.014130] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007fa8a97271b7 <4> [432.014133] RDX: 000055def9122010 RSI: 0000000000000800 RDI: 000055def9157fd8 <4> [432.014136] RBP: 000055def9157f70 R08: 00007fa8aa05ce40 R09: 0000000000000000 <4> [432.014139] R10: 00007fa8a97a3cc0 R11: 0000000000000206 R12: 00007ffcbbd08640 <4> [432.014142] R13: 000055def91594c0 R14: 000055def74a5c1b R15: 0000000000000000 <3> [432.014158] FIX drm_i915_gem_object: Restoring 0x000000004e324a86-0x00000000acf08f58=0x6b
The CI Bug Log issue associated to this bug has been updated. ### New filters associated * BSW: igt@i915_selftest@live_mman - dmesg-warn - BUG drm_i915_gem_object: Poison overwritten - https://intel-gfx-ci.01.org/tree/drm-tip/Patchwork_13466/fi-bsw-n3050/igt@i915_selftest@live_mman.html
If I am not mistaken, that is a stray 64b write of 1, 144 bytes into a i915_gem_object On my kernel that would put it around: offsetof(drm_gem_object.vma_node)=24 offsetofend(drm_gem_object.vma_node)=208 ... offsetof(drm_gem_object.vma_node.vm_node.rb_hole_addr)=144 That doesn't seem particularly valid for a rbtree_node.parent, so either it's a completely stray write, my counting is wrong and its not 144 bytes in, or there's a massive layout difference between my kernel and CI.
Plonked in commit 3e03b51fcdedb947fdaaff36252f4daf3caf20be (HEAD -> topic/core-for-CI, drm-intel/topic/core-for-CI) Author: Chris Wilson <chris@chris-wilson.co.uk> Date: Mon Jul 1 15:29:03 2019 +0100 mm: Show slab debug as offsets from section base not hashed pointers for better debug (i.e no unreliable counting by me) and writing this off as notourbug until we get a fresh hit.
Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.