# git rev-parse -q --verify 6cd06ab12d1afdab3847e7981f301bd0404aaa5c^{commit} 6cd06ab12d1afdab3847e7981f301bd0404aaa5c already have revision, skipping fetch # git checkout -q -f -B kisskb 6cd06ab12d1afdab3847e7981f301bd0404aaa5c # git clean -qxdf # < git log -1 # commit 6cd06ab12d1afdab3847e7981f301bd0404aaa5c # Author: Linus Torvalds # Date: Wed Jul 5 09:33:31 2023 -0700 # # gup: make the stack expansion warning a bit more targeted # # I added a warning about about GUP no longer expanding the stack in # commit a425ac5365f6 ("gup: add warning if some caller would seem to want # stack expansion"), but didn't really expect anybody to hit it. # # And it's true that nobody seems to have hit a _real_ case yet, but we # certainly have a number of reports of false positives. Which not only # causes extra noise in itself, but might also end up hiding any real # cases if they do exist. # # So let's tighten up the warning condition, and replace the simplistic # # vma = find_vma(mm, start); # if (vma && (start < vma->vm_start)) { # WARN_ON_ONCE(vma->vm_flags & VM_GROWSDOWN); # # with a # # vma = gup_vma_lookup(mm, start); # # helper function which works otherwise like just "vma_lookup()", but with # some heuristics for when to warn about gup no longer causing stack # expansion. # # In particular, don't just warn for "below the stack", but warn if it's # _just_ below the stack (with "just below" arbitrarily defined as 64kB, # because why not?). And rate-limit it to at most once per hour, which # means that any false positives shouldn't completely hide subsequent # reports, but we won't be flooding the logs about it either. # # The previous code triggered when some GUP user (chromium crashpad) # accessing past the end of the previous vma, for example. That has never # expanded the stack, it just causes GUP to return early, and as such we # shouldn't be warning about it. # # This is still going trigger the randomized testers, but to mitigate the # noise from that, use "dump_stack()" instead of "WARN_ON_ONCE()" to get # the kernel call chain. We'll get the relevant information, but syzbot # shouldn't get too upset about it. # # Also, don't even bother with the GROWSUP case, which would be using # different heuristics entirely, but only happens on parisc. # # Reported-by: kernel test robot # Reported-by: John Hubbard # Reported-by: syzbot+6cf44e127903fdf9d929@syzkaller.appspotmail.com # Signed-off-by: Linus Torvalds # < /opt/cross/kisskb/korg/gcc-8.5.0-nolibc/m68k-linux/bin/m68k-linux-gcc --version # < /opt/cross/kisskb/korg/gcc-8.5.0-nolibc/m68k-linux/bin/m68k-linux-ld --version # < git log --format=%s --max-count=1 6cd06ab12d1afdab3847e7981f301bd0404aaa5c # make -s -j 160 ARCH=m68k O=/kisskb/build/linus_sun3_defconfig_m68k-gcc8 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-8.5.0-nolibc/m68k-linux/bin/m68k-linux- sun3_defconfig # < make -s -j 160 ARCH=m68k O=/kisskb/build/linus_sun3_defconfig_m68k-gcc8 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-8.5.0-nolibc/m68k-linux/bin/m68k-linux- help # make -s -j 160 ARCH=m68k O=/kisskb/build/linus_sun3_defconfig_m68k-gcc8 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-8.5.0-nolibc/m68k-linux/bin/m68k-linux- olddefconfig # make -s -j 160 ARCH=m68k O=/kisskb/build/linus_sun3_defconfig_m68k-gcc8 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-8.5.0-nolibc/m68k-linux/bin/m68k-linux- In file included from /kisskb/src/include/linux/swab.h:5, from /kisskb/src/include/uapi/linux/byteorder/big_endian.h:14, from /kisskb/src/include/linux/byteorder/big_endian.h:5, from /kisskb/src/arch/m68k/include/uapi/asm/byteorder.h:5, from /kisskb/src/include/asm-generic/bitops/le.h:6, from /kisskb/src/arch/m68k/include/asm/bitops.h:545, from /kisskb/src/include/linux/bitops.h:68, from /kisskb/src/include/linux/kernel.h:22, from /kisskb/src/drivers/net/ethernet/i825xx/sun3_82586.c:32: /kisskb/src/drivers/net/ethernet/i825xx/sun3_82586.c: In function 'sun3_82586_timeout': /kisskb/src/drivers/net/ethernet/i825xx/sun3_82586.c:990:108: warning: array subscript 1 is above array bounds of 'volatile struct transmit_cmd_struct *[1]' [-Warray-bounds] printk("%s: command-stats: %04x %04x\n",dev->name,swab16(p->xmit_cmds[0]->cmd_status),swab16(p->xmit_cmds[1]->cmd_status)); ~~~~~~~~~~~~^~~ /kisskb/src/include/uapi/linux/swab.h:107:12: note: in definition of macro '__swab16' __fswab16(x)) ^ /kisskb/src/include/linux/printk.h:455:26: note: in expansion of macro 'printk_index_wrap' #define printk(fmt, ...) printk_index_wrap(_printk, fmt, ##__VA_ARGS__) ^~~~~~~~~~~~~~~~~ /kisskb/src/drivers/net/ethernet/i825xx/sun3_82586.c:990:3: note: in expansion of macro 'printk' printk("%s: command-stats: %04x %04x\n",dev->name,swab16(p->xmit_cmds[0]->cmd_status),swab16(p->xmit_cmds[1]->cmd_status)); ^~~~~~ Completed OK # rm -rf /kisskb/build/linus_sun3_defconfig_m68k-gcc8 # Build took: 0:01:44.357326