From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753735AbbLETv1 (ORCPT ); Sat, 5 Dec 2015 14:51:27 -0500 Received: from mout.gmx.net ([212.227.17.20]:57027 "EHLO mout.gmx.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753300AbbLETvQ (ORCPT ); Sat, 5 Dec 2015 14:51:16 -0500 To: kvm@vger.kernel.org, pageexec@freemail.hu Cc: Linux Kernel From: =?UTF-8?Q?Toralf_F=c3=b6rster?= Subject: PAX: size overflow detected in function __vhost_add_used_n drivers/vhost/vhost.c:1517 X-Enigmail-Draft-Status: N1110 Message-ID: <56634031.5030208@gmx.de> Date: Sat, 5 Dec 2015 20:51:13 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K0:cwz1aBzzq8bxLCoRysNnY9ncdJ0Cwf948TYd0yjw/pS3oA+QaNF UjtPKJzE8v6fmm8NIGr95/szOg5vPwQXdBUVWRMtYtKFxkO+jNa2O6h1NkQI+kzYIzP6SCV eSC6A+2nHBOPFpcRvNGU0CaB9MiH/pzYHOR1hruYqTHVxiqg1Ie4ESeRPoeMru9O8qBLcQ/ 8DQ8reP6lIpp51l+GDtkw== X-UI-Out-Filterresults: notjunk:1;V01:K0:++Pz0ILOEnI=:5M4aTrcrXN99lLZW9Qa09J Hfjo4C1RNgDk2xuiCSUiI5Mdgid197Ze8nL287JDSJN6LRG2krXRaOKXdSJwv9HLDbVDgVV8l KI1XWIrCfymkO9DG/YDkAd4PRgQRcA2SRgG9249s1kqb00bPj793FgsPwb4G65vtpFhGqrWpv 2MXAmxR/JiddtUU/z6MMEACqEaMFE7zQCE5MEe8DxgHMDgrk4K/BXhezJpgTJg0n9eWZjB8MX +lCUA5C4bRUw79vzo/855mB346Li0AOZGbtR9gMt1x/Lc2RsLwY1gNzSNMl1TPeRTQBja/qaN mM5iCezuLKBSNumj9OJb0nU/GzCcFBdLXKSGf/q6aQ1HyFMA9Va1AIE1jCHkY34xoc39MLQpA tjJk2YLmsbBoZyWxT3n6hTmJ6nqV5UIo6qZD3bdZEy47Nm6vgHinZZsoiZBjhg6MhQiF8wUR4 MwuxrSNRexTQyI+qzv0gkrV1hqqm4T4+2tL4/kldqX9wEDSJ7DQ2FafEyhAvUBJNCYu4u2OIN 3jTfAqVhacLqI3PLNqSmJ+UOVyrYO9QvT4PO2d+Jr4mHBQ57N2NfDbf/AXoSiqKqfufN7Wesp NcRFIdb3qLGrkdziQtqvuJIHPWt30PoqBp7ViwGgAkcdHQkB9pbYyV1ZPqYczhavZAPhsx/WK 3LuRqAERRA+E/C1b/7s66ftfyUjq6O19r+cl4nzZfXTpl2TsDaGe2oqFn9ReyCDLbgQHWVwvy q3z4+XN/DMNXylLF09Zos6UnQWNlDpXrzEsrHU2a7ghsH45ECXOpmY3a0Jx5b55bNLpYkT99D hKTljeS Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org run into the following at a 64bit hardened stable Gentoo Linux while running the following command at the host (probably just the ssh login was it yet) : $ cd ~/devel/linux/; git archive --prefix linux-4.4.x/ v4.4-rc3 | (ssh root@n22kvm "cd /usr/src/; sudo tar -xf-") Dec 5 20:39:26 t44 kernel: PAX: size overflow detected in function __vhost_add_used_n drivers/vhost/vhost.c:1517 cicus.491_193 max, count: 7, decl: last_used_idx; num: 0; context: vhost_virtqueue; Dec 5 20:39:26 t44 kernel: CPU: 2 PID: 3708 Comm: vhost-3706 Tainted: G W 4.2.6-hardened-r7 #2 Dec 5 20:39:26 t44 kernel: Hardware name: LENOVO 20AQCTO1WW/20AQCTO1WW, BIOS GJET83WW (2.33 ) 03/09/2015 Dec 5 20:39:26 t44 kernel: ffffffffc096fe5a 0000000000000000 ffffffffc096fddc ffffc9000043bb78 Dec 5 20:39:26 t44 kernel: ffffffff815ef500 ffff88033e30eec8 ffffffffc096fe5a ffffc9000043bba8 Dec 5 20:39:26 t44 kernel: ffffffff811ae28b 000000000000fffb ffff880326d300a0 0000000000000005 Dec 5 20:39:26 t44 kernel: Call Trace: Dec 5 20:39:26 t44 kernel: [] ? __param_str_max_mem_regions+0x9a/0xae8 [vhost] Dec 5 20:39:26 t44 kernel: [] ? __param_str_max_mem_regions+0x1c/0xae8 [vhost] Dec 5 20:39:26 t44 kernel: [] dump_stack+0x45/0x5d Dec 5 20:39:26 t44 kernel: [] ? __param_str_max_mem_regions+0x9a/0xae8 [vhost] Dec 5 20:39:26 t44 kernel: [] report_size_overflow+0x3b/0x50 Dec 5 20:39:26 t44 kernel: [] __vhost_add_used_n+0x1db/0x1e0 [vhost] Dec 5 20:39:26 t44 kernel: [] ? copy_user_enhanced_fast_string+0x16/0x20 Dec 5 20:39:26 t44 kernel: [] vhost_add_used_n+0x92/0x1b0 [vhost] Dec 5 20:39:26 t44 kernel: [] vhost_add_used_and_signal_n+0x2a/0x50 [vhost] Dec 5 20:39:26 t44 kernel: [] handle_rx+0x63b/0x910 [vhost_net] Dec 5 20:39:26 t44 kernel: [] handle_rx_net+0x1d/0x30 [vhost_net] Dec 5 20:39:26 t44 kernel: [] vhost_worker+0xf8/0x1a0 [vhost] Dec 5 20:39:26 t44 kernel: [] ? vhost_log_write+0xa0/0xa0 [vhost] Dec 5 20:39:26 t44 kernel: [] kthread+0xf7/0x110 Dec 5 20:39:26 t44 kernel: [] ? kthread_create_on_node+0x1b0/0x1b0 Dec 5 20:39:26 t44 kernel: [] ret_from_fork+0x3e/0x70 Dec 5 20:39:26 t44 kernel: [] ? kthread_create_on_node+0x1b0/0x1b0 -- Toralf, pgp: C4EACDDE 0076E94E