<html>
<head>
<base href="https://bugs.freedesktop.org/">
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - [CI] igt@.* - BUG kmalloc-2048 (Tainted: G U W ): Poison overwritten"
href="https://bugs.freedesktop.org/show_bug.cgi?id=106084#c7">Comment # 7</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - [CI] igt@.* - BUG kmalloc-2048 (Tainted: G U W ): Poison overwritten"
href="https://bugs.freedesktop.org/show_bug.cgi?id=106084">bug 106084</a>
from <span class="vcard"><a class="email" href="mailto:martin.peres@free.fr" title="Martin Peres <martin.peres@free.fr>"> <span class="fn">Martin Peres</span></a>
</span></b>
<pre>(In reply to Guenter Roeck from <a href="show_bug.cgi?id=106084#c5">comment #5</a>)
<span class="quote">> Same problem seen with v4.17-rc2 when inserting a USB Type-C dongle.
>
> [...]
>
> (gdb) l *xhci_free_virt_device+0x33b
> 0xffffffff8191b855 is in xhci_free_virt_device
> (/mnt/host/source/src/third_party/kernel/v4.14/drivers/usb/host/xhci-mem.c:
> 916).
> 911 if (dev->in_ctx)
> 912 xhci_free_container_ctx(xhci, dev->in_ctx);
> 913 if (dev->out_ctx)
> 914 xhci_free_container_ctx(xhci, dev->out_ctx);
> 915
> 916 if (dev->udev && dev->udev->slot_id)
> 917 dev->udev->slot_id = 0;
> 918 kfree(xhci->devs[slot_id]);
> 919 xhci->devs[slot_id] = NULL;
> 920 }
>
>
> It appears that dev->udev has been freed.</span >
Thanks for your analysis!
<span class="quote">>
> Wonder why this is filed against drm ?</span >
It is filed against DRM because it has been caught by Intel GFX CI, and I am
crawling under the failures found in there, so I first file them on DRM before
to give a chance to DRM devs to check out the bugs, and report them to the
right people. If they don't, then I do it when the storm passes and I get to
pick up some bugs and drive them to fixes.
FYI, here are all the bugs tracked by our CI system:
<a href="https://intel-gfx-ci.01.org/cibuglog/">https://intel-gfx-ci.01.org/cibuglog/</a></pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the QA Contact for the bug.</li>
<li>You are on the CC list for the bug.</li>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>