K 10 svn:author V 7 glebius K 8 svn:date V 27 2019-01-31T17:52:48.303736Z K 7 svn:log V 322 In zone_alloc_bucket() max argument was calculated based on uz_count. Then bucket_alloc() also selects bucket size based on uz_count. However, since zone lock is dropped, uz_count may reduce. In this case max may be greater than ub_entries and that would yield into writing beyond end of the allocation. Reported by: pho END