From: Nathan Lynch <nathanl@linux.ibm.com>
To: Liam Howlett <liam.howlett@oracle.com>
Cc: Yury Norov <yury.norov@gmail.com>,
"linuxppc-dev@lists.ozlabs.org" <linuxppc-dev@lists.ozlabs.org>,
"linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>
Subject: Re: power9 slab-out-of-bounds in _find_First_zero_bit
Date: Fri, 24 Jun 2022 18:51:45 -0500 [thread overview]
Message-ID: <87pmixmxgu.fsf@linux.ibm.com> (raw)
In-Reply-To: <20220624210400.gic4akzlwwdqkxym@revolver>
Hi Liam,
Liam Howlett <liam.howlett@oracle.com> writes:
>
> When trying v5.19-rc3 on my ppc64 VM with KASANs enabled, I get the
> following on boot:
>
> [ 0.174621] ==================================================================
> [ 0.175501] BUG: KASAN: slab-out-of-bounds in _find_first_zero_bit+0x40/0x140
> [ 0.176132] Read of size 8 at addr c00000000f7f0410 by task swapper/0/1
> [ 0.176900]
> [ 0.177844] CPU: 0 PID: 1 Comm: swapper/0 Tainted: G W 5.19.0-rc3+ #8
> [ 0.179461] Call Trace:
> [ 0.179907] [c0000000119677d0] [c0000000075af350] dump_stack_lvl+0x74/0xa8 (unreliable)
> [ 0.181107] [c000000011967810] [c000000000632220] print_report+0x330/0x740
> [ 0.181977] [c0000000119678e0] [c000000000632980] kasan_report+0x100/0x1f0
> [ 0.182788] [c0000000119679c0] [c000000000634de4] __asan_load8+0xa4/0xe0
> [ 0.183560] [c0000000119679e0] [c0000000018b92b0] _find_first_zero_bit+0x40/0x140
> [ 0.184119] [c000000011967a20] [c0000000000c5f7c] xive_spapr_get_ipi+0xcc/0x220
> [ 0.184689] [c000000011967ad0] [c0000000000c1adc] xive_setup_cpu_ipi+0x1ec/0x420
> [ 0.185231] [c000000011967b90] [c00000000a033b3c] pSeries_smp_probe+0x44/0xd4
> [ 0.185825] [c000000011967bc0] [c00000000a01c77c] smp_prepare_cpus+0x62c/0x688
> [ 0.186359] [c000000011967cb0] [c00000000a00ea94] kernel_init_freeable+0x24c/0x520
> [ 0.186893] [c000000011967d90] [c000000000012b00] kernel_init+0x30/0x1c0
> [ 0.187395] [c000000011967e10] [c00000000000ce54] ret_from_kernel_thread+0x5c/0x64
[...]
Please try "powerpc/xive/spapr: correct bitmap allocation size", posted yesterday:
https://lore.kernel.org/linuxppc-dev/20220623182509.3985625-1-nathanl@linux.ibm.com/
next prev parent reply other threads:[~2022-06-24 23:51 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-06-24 21:04 power9 slab-out-of-bounds in _find_First_zero_bit Liam Howlett
2022-06-24 23:51 ` Nathan Lynch [this message]
2022-06-25 1:49 ` Liam Howlett
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87pmixmxgu.fsf@linux.ibm.com \
--to=nathanl@linux.ibm.com \
--cc=liam.howlett@oracle.com \
--cc=linux-kernel@vger.kernel.org \
--cc=linuxppc-dev@lists.ozlabs.org \
--cc=yury.norov@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).