2.6.39-rc6, nouveau: unload trips on freed memory (SLUB poison)

2011-05-05 Thread Bruno Prémont
With 2.6.39-rc6 I'm hitting the following (relevant part from objdump of drm_mm.o at bottom). Some part of node passed to drm_mm_remove_node() is being use after free and hits SLUB poison. Bruno [ 328.447498] drm: unregistered panic notifier [ 328.447648] [drm] nouveau :02:00.0: 0xAFD8: Pa

2.6.39-rc6, nouveau: unload trips on freed memory (SLUB poison)

2011-05-05 Thread Bruno Prémont
With 2.6.39-rc6 I'm hitting the following (relevant part from objdump of drm_mm.o at bottom). Some part of node passed to drm_mm_remove_node() is being use after free and hits SLUB poison. Bruno [ 328.447498] drm: unregistered panic notifier [ 328.447648] [drm] nouveau :02:00.0: 0xAFD8: Pa

2.6.39-rc6, nouveau: unload trips on freed memory (SLUB poison)

2011-05-05 Thread Bruno Prémont
With 2.6.39-rc6 I'm hitting the following (relevant part from objdump of drm_mm.o at bottom). Some part of node passed to drm_mm_remove_node() is being use after free and hits SLUB poison. Bruno [ 328.447498] drm: unregistered panic notifier [ 328.447648] [drm] nouveau :02:00.0: 0xAFD8: Pa

2.6.39-rc6, nouveau: unload trips on freed memory (SLUB poison)

2011-05-05 Thread Bruno Prémont
With 2.6.39-rc6 I'm hitting the following (relevant part from objdump of drm_mm.o at bottom). Some part of node passed to drm_mm_remove_node() is being use after free and hits SLUB poison. Bruno [ 328.447498] drm: unregistered panic notifier [ 328.447648] [drm] nouveau :02:00.0: 0xAFD8: Pa

2.6.39-rc6, nouveau: unload trips on freed memory (SLUB poison)

2011-05-05 Thread Bruno Prémont
With 2.6.39-rc6 I'm hitting the following (relevant part from objdump of drm_mm.o at bottom). Some part of node passed to drm_mm_remove_node() is being use after free and hits SLUB poison. Bruno [ 328.447498] drm: unregistered panic notifier [ 328.447648] [drm] nouveau :02:00.0: 0xAFD8: Pa

2.6.39-rc6, nouveau: unload trips on freed memory (SLUB poison)

2011-05-05 Thread Bruno Prémont
With 2.6.39-rc6 I'm hitting the following (relevant part from objdump of drm_mm.o at bottom). Some part of node passed to drm_mm_remove_node() is being use after free and hits SLUB poison. Bruno [ 328.447498] drm: unregistered panic notifier [ 328.447648] [drm] nouveau :02:00.0: 0xAFD8: Pa

Re: 2.6.39-rc6, nouveau: unload trips on freed memory (SLUB poison)

2011-05-07 Thread Bruno Prémont
On Thu, 05 May 2011 Bruno Prémont wrote: > With 2.6.39-rc6 I'm hitting the following (relevant part from objdump of > drm_mm.o at bottom). > Some part of node passed to drm_mm_remove_node() is being use after free > and hits SLUB poison. > > Bruno > > > [ 328.447498] drm: unregistered panic no

Re: 2.6.39-rc6, nouveau: unload trips on freed memory (SLUB poison)

2011-05-07 Thread Bruno Prémont
On Thu, 05 May 2011 Bruno Prémont wrote: > With 2.6.39-rc6 I'm hitting the following (relevant part from objdump of > drm_mm.o at bottom). > Some part of node passed to drm_mm_remove_node() is being use after free > and hits SLUB poison. > > Bruno > > > [ 328.447498] drm: unregistered panic no

Re: 2.6.39-rc6, nouveau: unload trips on freed memory (SLUB poison)

2011-05-07 Thread Bruno Prémont
On Thu, 05 May 2011 Bruno Prémont wrote: > With 2.6.39-rc6 I'm hitting the following (relevant part from objdump of > drm_mm.o at bottom). > Some part of node passed to drm_mm_remove_node() is being use after free > and hits SLUB poison. > > Bruno > > > [ 328.447498] drm: unregistered panic no

Re: 2.6.39-rc6, nouveau: unload trips on freed memory (SLUB poison)

2011-05-07 Thread Bruno Prémont
On Thu, 05 May 2011 Bruno Prémont wrote: > With 2.6.39-rc6 I'm hitting the following (relevant part from objdump of > drm_mm.o at bottom). > Some part of node passed to drm_mm_remove_node() is being use after free > and hits SLUB poison. > > Bruno > > > [ 328.447498] drm: unregistered panic no

Re: 2.6.39-rc6, nouveau: unload trips on freed memory (SLUB poison)

2011-05-07 Thread Bruno Prémont
On Thu, 05 May 2011 Bruno Prémont wrote: > With 2.6.39-rc6 I'm hitting the following (relevant part from objdump of > drm_mm.o at bottom). > Some part of node passed to drm_mm_remove_node() is being use after free > and hits SLUB poison. > > Bruno > > > [ 328.447498] drm: unregistered panic no

Re: 2.6.39-rc6, nouveau: unload trips on freed memory (SLUB poison)

2011-05-07 Thread Bruno Prémont
On Thu, 05 May 2011 Bruno Prémont wrote: > With 2.6.39-rc6 I'm hitting the following (relevant part from objdump of > drm_mm.o at bottom). > Some part of node passed to drm_mm_remove_node() is being use after free > and hits SLUB poison. > > Bruno > > > [ 328.447498] drm: unregistered panic no