Received: by 2002:a6b:fb09:0:0:0:0:0 with SMTP id h9csp879528iog; Fri, 24 Jun 2022 16:58:44 -0700 (PDT) X-Google-Smtp-Source: AGRyM1uTt8bljqISHENJ0gz9C7CKkij8HjKW2fy7edV7hYU3Z7lC7NvpKxF1E8KruabL+b7Kb5oV X-Received: by 2002:a05:6402:3323:b0:435:775b:aece with SMTP id e35-20020a056402332300b00435775baecemr2055457eda.210.1656115123903; Fri, 24 Jun 2022 16:58:43 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1656115123; cv=none; d=google.com; s=arc-20160816; b=i0Gk9tODtfngO1NGJlDC5KxCIHGvpv9Gh7h03lZPSicMzlLRGB+ijo/rsJY5AZfD2n DNZS74NB4TQhxvsXuLbm46IfQxcEMc9ts4+EkJ7GsyYtJj+m9nyvNTGc+w5/ur0EKDNs Igj/oCjcJuWh1Y+ydgy1pZ3vva3CyeFaIDHKiuaFFFnUpDz6JatNt2LWDzmEmQGlynua SzV+WQpVwm3dT0bhmwo7P+4ENEekyjH7bHtem9uqOVMzUWVpTGDzUCMMd9MYx8ZtPhte nO6jBv0GfJDKXEWa+I6M+krRpBiuLkvmN3oP7ee0zkZD6wdELCWww65C1uafyOW/O/Hc 0pqw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:mime-version:message-id:date:references :in-reply-to:subject:cc:to:from:dkim-signature; bh=l1owu+QJK7QDB/LMpGuaR7ZzvRgW4C27GWY2msSc/VI=; b=0KR76VIg7nkQh7OYk2R2/w8ni0ob45tZXWAcIyvjAn/QSWb4x9eI6X7rjpnaIh64VH EIRXOGk6SaN4QqwtZFQwbYie79JXKGSdYxdQEJGnimN9Q8JLpfhbsNDAXhDzl6jfV6iE g+gYxvfXOSuBKzQ6wC8qoELg65/X6sS29irnl6YD5dQP0PaRqP3aVOZW5xH0kDjX8Yy8 Wk/AWWXehX4yqCgvHY1cKyje+c1iETiWF2PKnzgvUC73L4mbK437X96BaZ1l2VXLyquN mrdJM/mXG5MEPtAkDmNf28yDS+uwYQNvsjlIWAmQjlx6dx/M+L7SDpkaFFBA4y1JOzkZ 7nkw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@ibm.com header.s=pp1 header.b=IQVcBgOf; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=ibm.com Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id gt17-20020a1709072d9100b007263ea0d796si1623937ejc.238.2022.06.24.16.58.17; Fri, 24 Jun 2022 16:58:43 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@ibm.com header.s=pp1 header.b=IQVcBgOf; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=ibm.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S231817AbiFXXv5 (ORCPT + 99 others); Fri, 24 Jun 2022 19:51:57 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:46308 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S230346AbiFXXv4 (ORCPT ); Fri, 24 Jun 2022 19:51:56 -0400 Received: from mx0a-001b2d01.pphosted.com (mx0a-001b2d01.pphosted.com [148.163.156.1]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id E1BA88BED6 for ; Fri, 24 Jun 2022 16:51:55 -0700 (PDT) Received: from pps.filterd (m0098399.ppops.net [127.0.0.1]) by mx0a-001b2d01.pphosted.com (8.17.1.5/8.17.1.5) with ESMTP id 25OMUALD015703; Fri, 24 Jun 2022 23:51:49 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ibm.com; h=from : to : cc : subject : in-reply-to : references : date : message-id : content-type : mime-version; s=pp1; bh=l1owu+QJK7QDB/LMpGuaR7ZzvRgW4C27GWY2msSc/VI=; b=IQVcBgOfMrMFTlt4lDe6P0So1sFd6MCLAfRr8CQvP2QQh1SeElXKf+DZwwPaJCLkIrKN 6mc2UrlAKsf4VLNvyIhlFxDaxCiAnd0J5XG1RyGTxzBXM3yu+qpdzsrZSNL7mnMPCHwS UyBYUZ6Ey5QpTeSdDemXMsRnkilXOUqeYnt107hhlnH/cKLd8+yLj9UV7hkdZ5mwoo9h 4NQ3zxv+/fHneCRCfeu7CraCxM3jo79t+1zdbOULB7HCLc61WC6tY4sYY1vUFT604wBg GVnHoogwIsg/QZ8r4uz9C6Qd3Kq6QIHg0VCGZy0A3ykJeUbHFZNEVumjfXmsRWFWNkg5 Lw== Received: from pps.reinject (localhost [127.0.0.1]) by mx0a-001b2d01.pphosted.com (PPS) with ESMTPS id 3gwp491hev-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 24 Jun 2022 23:51:48 +0000 Received: from m0098399.ppops.net (m0098399.ppops.net [127.0.0.1]) by pps.reinject (8.17.1.5/8.17.1.5) with ESMTP id 25ONj9Ei015840; Fri, 24 Jun 2022 23:51:48 GMT Received: from ppma02dal.us.ibm.com (a.bd.3ea9.ip4.static.sl-reverse.com [169.62.189.10]) by mx0a-001b2d01.pphosted.com (PPS) with ESMTPS id 3gwp491hej-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 24 Jun 2022 23:51:48 +0000 Received: from pps.filterd (ppma02dal.us.ibm.com [127.0.0.1]) by ppma02dal.us.ibm.com (8.16.1.2/8.16.1.2) with SMTP id 25ONa7MN015558; Fri, 24 Jun 2022 23:51:47 GMT Received: from b01cxnp22035.gho.pok.ibm.com (b01cxnp22035.gho.pok.ibm.com [9.57.198.25]) by ppma02dal.us.ibm.com with ESMTP id 3gt00a6pb2-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 24 Jun 2022 23:51:47 +0000 Received: from b01ledav005.gho.pok.ibm.com (b01ledav005.gho.pok.ibm.com [9.57.199.110]) by b01cxnp22035.gho.pok.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id 25ONpks039780770 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Fri, 24 Jun 2022 23:51:46 GMT Received: from b01ledav005.gho.pok.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id A034AAE060; Fri, 24 Jun 2022 23:51:46 +0000 (GMT) Received: from b01ledav005.gho.pok.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 6C304AE05C; Fri, 24 Jun 2022 23:51:46 +0000 (GMT) Received: from localhost (unknown [9.211.152.104]) by b01ledav005.gho.pok.ibm.com (Postfix) with ESMTP; Fri, 24 Jun 2022 23:51:46 +0000 (GMT) From: Nathan Lynch To: Liam Howlett Cc: Yury Norov , "linuxppc-dev@lists.ozlabs.org" , "linux-kernel@vger.kernel.org" Subject: Re: power9 slab-out-of-bounds in _find_First_zero_bit In-Reply-To: <20220624210400.gic4akzlwwdqkxym@revolver> References: <20220624210400.gic4akzlwwdqkxym@revolver> Date: Fri, 24 Jun 2022 18:51:45 -0500 Message-ID: <87pmixmxgu.fsf@linux.ibm.com> Content-Type: text/plain X-TM-AS-GCONF: 00 X-Proofpoint-GUID: vsW7K57hDmU6khpOyfcmUpPbqW_7lu3f X-Proofpoint-ORIG-GUID: 1nv4zAIvaBtnlZLbIKxySDWgV47WG5VP X-Proofpoint-UnRewURL: 0 URL was un-rewritten MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.205,Aquarius:18.0.883,Hydra:6.0.517,FMLib:17.11.122.1 definitions=2022-06-24_10,2022-06-24_01,2022-06-22_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 clxscore=1011 bulkscore=0 adultscore=0 spamscore=0 lowpriorityscore=0 suspectscore=0 priorityscore=1501 mlxlogscore=979 phishscore=0 malwarescore=0 impostorscore=0 mlxscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2204290000 definitions=main-2206240090 X-Spam-Status: No, score=-2.0 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_EF,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_PASS, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hi Liam, Liam Howlett writes: > > When trying v5.19-rc3 on my ppc64 VM with KASANs enabled, I get the > following on boot: > > [ 0.174621] ================================================================== > [ 0.175501] BUG: KASAN: slab-out-of-bounds in _find_first_zero_bit+0x40/0x140 > [ 0.176132] Read of size 8 at addr c00000000f7f0410 by task swapper/0/1 > [ 0.176900] > [ 0.177844] CPU: 0 PID: 1 Comm: swapper/0 Tainted: G W 5.19.0-rc3+ #8 > [ 0.179461] Call Trace: > [ 0.179907] [c0000000119677d0] [c0000000075af350] dump_stack_lvl+0x74/0xa8 (unreliable) > [ 0.181107] [c000000011967810] [c000000000632220] print_report+0x330/0x740 > [ 0.181977] [c0000000119678e0] [c000000000632980] kasan_report+0x100/0x1f0 > [ 0.182788] [c0000000119679c0] [c000000000634de4] __asan_load8+0xa4/0xe0 > [ 0.183560] [c0000000119679e0] [c0000000018b92b0] _find_first_zero_bit+0x40/0x140 > [ 0.184119] [c000000011967a20] [c0000000000c5f7c] xive_spapr_get_ipi+0xcc/0x220 > [ 0.184689] [c000000011967ad0] [c0000000000c1adc] xive_setup_cpu_ipi+0x1ec/0x420 > [ 0.185231] [c000000011967b90] [c00000000a033b3c] pSeries_smp_probe+0x44/0xd4 > [ 0.185825] [c000000011967bc0] [c00000000a01c77c] smp_prepare_cpus+0x62c/0x688 > [ 0.186359] [c000000011967cb0] [c00000000a00ea94] kernel_init_freeable+0x24c/0x520 > [ 0.186893] [c000000011967d90] [c000000000012b00] kernel_init+0x30/0x1c0 > [ 0.187395] [c000000011967e10] [c00000000000ce54] ret_from_kernel_thread+0x5c/0x64 [...] Please try "powerpc/xive/spapr: correct bitmap allocation size", posted yesterday: https://lore.kernel.org/linuxppc-dev/20220623182509.3985625-1-nathanl@linux.ibm.com/