[GK208] iowrite goes out of bounds on channel close
Submitted by Ilia Mirkin @imirkin
Assigned to Nouveau Project
Description
Created attachment 119019
kernel splat
Not sure if the intel warn plays into things, since it happened from an interrupt. But it was interrupting a different process. Looks like the buffer already got unmapped somehow, or we're writing too far into it.
This is with a 4.3-rcN-ish nouveau module (despite the main kernel being 4.0).
Happened when running piglit in parallel (8 threads).
Attachment 119019, "kernel splat":
file_92560.txt