Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S934369AbXFFB4R (ORCPT ); Tue, 5 Jun 2007 21:56:17 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1750837AbXFFB4F (ORCPT ); Tue, 5 Jun 2007 21:56:05 -0400 Received: from wr-out-0506.google.com ([64.233.184.224]:7320 "EHLO wr-out-0506.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1761428AbXFFB4D convert rfc822-to-8bit (ORCPT ); Tue, 5 Jun 2007 21:56:03 -0400 DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:mime-version:content-type:content-transfer-encoding:content-disposition; b=krBAPYdGMN8u5i9eOoe0lhpHmHweV6LND1Ft5OCnqSTuSCyS7z0kskj61fyTIlUk54svkG6iyCoOwFqWlICUCrZjUQTMzhpkOgTUxWguwzEUDto7wq/35hlflz4sGUyjwDUntmro+jZxD6nsWp98g9iYkAThMBkE+tiTozYnIlA= Message-ID: Date: Wed, 6 Jun 2007 01:56:01 +0000 From: "young dave" To: "clameter@sgi.com" Subject: [BUG] 2.6.22-rc3-mm1 remove bluetooth usb adapter caused kmalloc bug Cc: "Andrew Morton" , "Linux Kernel Mailing List" MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8BIT Content-Disposition: inline Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 3045 Lines: 76 Hi, when I remove the usb bluetooth adapter , the kernel reporting bug: /* this two line is printk message I printed in net/bluetooth/hci_core.c */ #before free dev: c3758430 #after free dev ============================================================================= BUG kmalloc-1024: Poison overwritten ----------------------------------------------------------------------------- INFO: 0xc3758440-0xc3758440. First byte 0x6a instead of 0x6b INFO: Allocated in hci_alloc_dev+0x1f/0x80 [bluetooth] age=6094 cpu=0 pid=9586 INFO: Freed in device_release+0x82/0x90 age=0 cpu=0 pid=7 INFO: Slab 0xc106eb00 used=6 fp=0xc3758430 flags=0x400020c3 INFO: Object 0xc3758430 @offset=1072 fp=0xc375b240 Bytes b4 0xc3758420: 00 00 00 00 b9 ea 09 00 5a 5a 5a 5a 5a 5a 5a 5a ....??..ZZZZZZZZ Object 0xc3758430: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk Object 0xc3758440: 6a 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b jkkkkkkkkkkkkkkk Object 0xc3758450: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk Object 0xc3758460: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk Object 0xc3758470: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk Object 0xc3758480: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk Object 0xc3758490: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk Object 0xc37584a0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk Redzone 0xc3758830: bb bb bb bb ???? Padding 0xc3758858: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ [] check_bytes_and_report+0xaa/0xe0 [] check_object+0x198/0x1e0 [] alloc_debug_processing+0x9c/0x130 [] __slab_alloc+0x10a/0x220 [] pskb_expand_head+0x4a/0x140 [] __kmalloc+0x72/0x80 [] pskb_expand_head+0x4a/0x140 [] pskb_expand_head+0x4a/0x140 [] alloc_debug_processing+0xc6/0x130 [] netlink_broadcast+0x68/0x370 [] kobject_uevent_env+0x32d/0x4e0 [] kobject_uevent_env+0x414/0x4e0 [] d_kill+0x3f/0x60 [] dput+0x1a/0xf0 [] device_del+0x1ac/0x2e0 [] usb_disable_device+0x78/0xf0 [] usb_disconnect+0x93/0xf0 [] hub_port_connect_change+0x2f2/0x3b0 [] hub_events+0x212/0x420 [] autoremove_wake_function+0x0/0x50 [] hub_thread+0x25/0x110 [] autoremove_wake_function+0x0/0x50 [] autoremove_wake_function+0x0/0x50 [] hub_thread+0x0/0x110 [] kthread+0x59/0xa0 [] kthread+0x0/0xa0 [] kernel_thread_helper+0x7/0x14 ======================= FIX kmalloc-1024: Restoring 0xc3758440-0xc3758440=0x6b FIX kmalloc-1024: Marking all objects used - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/