dasharo/linux
0
0
Fork 0
mirror of https://github.com/Dasharo/linux.git synced 2026-03-06 15:25:10 -08:00
Code Issues Packages Projects Releases Wiki Activity
Files
8fe9ed44dc29fba0786b7e956d2e87179e407582
linux/mm
History
Hao Zhang 8fe9ed44dc mm/page_alloc: fix uninitialized variable 
The variable "compact_result" is not initialized in function
__alloc_pages_slowpath().  It causes should_compact_retry() to use an
uninitialized value.

Initialize variable "compact_result" with the value COMPACT_SKIPPED.

BUG: KMSAN: uninit-value in __alloc_pages_slowpath+0xee8/0x16c0 mm/page_alloc.c:4416
 __alloc_pages_slowpath+0xee8/0x16c0 mm/page_alloc.c:4416
 __alloc_frozen_pages_noprof+0xa4c/0xe00 mm/page_alloc.c:4752
 alloc_pages_mpol+0x4cd/0x890 mm/mempolicy.c:2270
 alloc_frozen_pages_noprof mm/mempolicy.c:2341 [inline]
 alloc_pages_noprof mm/mempolicy.c:2361 [inline]
 folio_alloc_noprof+0x1dc/0x350 mm/mempolicy.c:2371
 filemap_alloc_folio_noprof+0xa6/0x440 mm/filemap.c:1019
 __filemap_get_folio+0xb9a/0x1840 mm/filemap.c:1970
 grow_dev_folio fs/buffer.c:1039 [inline]
 grow_buffers fs/buffer.c:1105 [inline]
 __getblk_slow fs/buffer.c:1131 [inline]
 bdev_getblk+0x2c9/0xab0 fs/buffer.c:1431
 getblk_unmovable include/linux/buffer_head.h:369 [inline]
 ext4_getblk+0x3b7/0xe50 fs/ext4/inode.c:864
 ext4_bread_batch+0x9f/0x7d0 fs/ext4/inode.c:933
 __ext4_find_entry+0x1ebb/0x36c0 fs/ext4/namei.c:1627
 ext4_lookup_entry fs/ext4/namei.c:1729 [inline]
 ext4_lookup+0x189/0xb40 fs/ext4/namei.c:1797
 __lookup_slow+0x538/0x710 fs/namei.c:1793
 lookup_slow+0x6a/0xd0 fs/namei.c:1810
 walk_component fs/namei.c:2114 [inline]
 link_path_walk+0xf29/0x1420 fs/namei.c:2479
 path_openat+0x30f/0x6250 fs/namei.c:3985
 do_filp_open+0x268/0x600 fs/namei.c:4016
 do_sys_openat2+0x1bf/0x2f0 fs/open.c:1428
 do_sys_open fs/open.c:1443 [inline]
 __do_sys_openat fs/open.c:1459 [inline]
 __se_sys_openat fs/open.c:1454 [inline]
 __x64_sys_openat+0x2a1/0x310 fs/open.c:1454
 x64_sys_call+0x36f5/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:258
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Local variable compact_result created at:
 __alloc_pages_slowpath+0x66/0x16c0 mm/page_alloc.c:4218
 __alloc_frozen_pages_noprof+0xa4c/0xe00 mm/page_alloc.c:4752

Link: https://lkml.kernel.org/r/tencent_ED1032321D6510B145CDBA8CBA0093178E09@qq.com
Reported-by: syzbot+0cfd5e38e96a5596f2b6@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=0cfd5e38e96a5596f2b6
Signed-off-by: Hao Zhang <zhanghao1@kylinos.cn>
Reviewed-by: Vlastimil Babka <vbabka@suse.cz>
Cc: Michal Hocko <mhocko@kernel.org>
Cc: Mel Gorman <mgorman@techsingularity.net>
Cc: <stable@vger.kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
2025-03-05 21:36:20 -08:00
..
damon
mm/damon/core: use str_high_low() helper in damos_wmark_wait_us()
2025-01-25 20:22:46 -08:00
kasan
kasan: don't call find_vm_area() in a PREEMPT_RT kernel
2025-02-17 22:40:04 -08:00
kfence
kfence: skip __GFP_THISNODE allocations on NUMA systems
2025-02-01 03:53:26 -08:00
kmsan
dma: kmsan: export kmsan_handle_dma() for modules
2025-03-05 21:36:14 -08:00
backing-dev.c
…
balloon_compaction.c
…
bootmem_info.c
bootmem: stop using page->index
2024-11-07 14:38:07 -08:00
cma_debug.c
…
cma_sysfs.c
…
cma.c
cma: enforce non-zero pageblock_order during cma_init_reserved_mem()
2024-11-14 22:49:19 -08:00
cma.h
mm: change type of cma_area_count to unsigned int
2025-01-13 22:40:35 -08:00
compaction.c
NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback
2025-03-05 21:36:15 -08:00
debug_page_alloc.c
…
debug_page_ref.c
…
debug_vm_pgtable.c
mm/debug_vm_pgtable: Use pxdp_get() for accessing page table entries
2024-09-17 01:07:01 -07:00
debug.c
mm/debug: introduce VM_WARN_ON_VMG() to dump VMA merge state
2025-01-25 20:22:23 -08:00
dmapool_test.c
…
dmapool.c
…
early_ioremap.c
mm/early_ioremap: add null pointer checks to prevent NULL-pointer dereference
2025-01-13 22:40:59 -08:00
execmem.c
alloc_tag: populate memory for module tags as needed
2024-11-07 14:25:16 -08:00
fadvise.c
fdget(), trivial conversions
2024-11-03 01:28:06 -05:00
fail_page_alloc.c
fault-inject: improve build for CONFIG_FAULT_INJECTION=n
2024-09-01 20:43:33 -07:00
failslab.c
fault-inject: improve build for CONFIG_FAULT_INJECTION=n
2024-09-01 20:43:33 -07:00
filemap.c
Merge tag 'mm-stable-2025-01-26-14-59' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2025-01-26 18:36:23 -08:00
folio-compat.c
mm/writeback: add folio_mark_dirty_lock()
2024-11-05 11:14:32 +01:00
gup_test.c
…
gup_test.h
…
gup.c
mm: gup: fix infinite loop within __get_longterm_locked
2025-02-01 03:53:27 -08:00
highmem.c
…
hmm.c
…
huge_memory.c
mm/huge_memory: convert has_hwpoisoned into a pure folio flag
2025-01-25 20:22:41 -08:00
hugetlb_cgroup.c
mm/hugetlb-cgroup: convert hugetlb_cgroup_css_offline() to work on folios
2025-01-25 20:22:42 -08:00
hugetlb_vmemmap.c
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
hugetlb_vmemmap.h
…
hugetlb.c
mm/hugetlb: wait for hugetlb folios to be freed
2025-03-05 21:36:14 -08:00
hwpoison-inject.c
…
init-mm.c
mm: convert mm_lock_seq to a proper seqcount
2025-01-13 22:40:50 -08:00
internal.h
mm: memory-failure: update ttu flag inside unmap_poisoned_folio
2025-03-05 21:36:13 -08:00
interval_tree.c
…
io-mapping.c
…
ioremap.c
…
Kconfig
mm: add build-time option for hotplug memory default online type
2025-01-25 20:22:21 -08:00
Kconfig.debug
slub: Introduce CONFIG_SLUB_RCU_DEBUG
2024-08-27 14:12:51 +02:00
khugepaged.c
Merge tag 'mm-stable-2025-01-26-14-59' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2025-01-26 18:36:23 -08:00
kmemleak.c
mm: kmemleak: fix upper boundary check for physical address objects
2025-02-01 03:53:25 -08:00
ksm.c
ksm: add ksm involvement information for each process
2025-01-25 20:22:40 -08:00
list_lru.c
mm/list_lru: fix false warning of negative counter
2024-12-30 17:59:10 -08:00
maccess.c
kasan: migrate copy_user_test to kunit
2024-11-11 00:26:44 -08:00
madvise.c
mm,madvise,hugetlb: check for 0-length range after end address adjustment
2025-02-17 22:40:01 -08:00
Makefile
mm: pgtable: reclaim empty PTE page in madvise(MADV_DONTNEED)
2025-01-13 22:40:48 -08:00
mapping_dirty_helpers.c
…
memblock.c
mm/memblock: add memblock_alloc_or_panic interface
2025-01-25 20:22:38 -08:00
memcontrol-v1.c
mm: remove the non-useful else after a break in a if statement
2025-01-13 22:40:40 -08:00
memcontrol-v1.h
mm: memcg: declare do_memsw_account inline
2024-12-05 19:54:46 -08:00
memcontrol.c
memcg: avoid dead loop when setting memory.max
2025-02-17 22:40:03 -08:00
memfd.c
mm/memfd: use strncpy_from_user() to read memfd name
2025-01-25 20:22:40 -08:00
memory_hotplug.c
hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio
2025-03-05 21:36:13 -08:00
memory-failure.c
mm: memory-failure: update ttu flag inside unmap_poisoned_folio
2025-03-05 21:36:13 -08:00
memory-tiers.c
memory tiers: use default_dram_perf_ref_source in log message
2024-09-26 14:01:44 -07:00
memory.c
mm: fix finish_fault() handling for large folios
2025-03-05 21:36:18 -08:00
mempolicy.c
mm/hugetlb: rename isolate_hugetlb() to folio_isolate_hugetlb()
2025-01-25 20:22:41 -08:00
mempool.c
…
memremap.c
…
memtest.c
…
migrate_device.c
mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()
2025-02-17 22:40:02 -08:00
migrate.c
mm: separate move/undo parts from migrate_pages_batch()
2025-01-25 20:22:45 -08:00
mincore.c
…
mlock.c
mm/mlock: set the correct prev on failure
2024-11-07 14:14:58 -08:00
mm_init.c
mm/memmap: prevent double scanning of memmap by kmemleak
2025-01-25 20:22:30 -08:00
mm_slot.h
…
mmap_lock.c
mm: mmap_lock: optimize mmap_lock tracepoints
2025-01-13 22:40:34 -08:00
mmap.c
mm: make mmap_region() internal
2025-01-25 20:22:38 -08:00
mmu_gather.c
mm: pgtable: move __tlb_remove_table_one() in x86 to generic file
2025-01-25 20:22:23 -08:00
mmu_notifier.c
mm: move internal core VMA manipulation functions to own file
2024-09-01 20:25:54 -07:00
mmzone.c
mm: improve code consistency with zonelist_* helper functions
2024-09-01 20:25:55 -07:00
mprotect.c
mm: add PTE_MARKER_GUARD PTE marker
2024-11-11 00:26:44 -08:00
mremap.c
mm: clear uffd-wp PTE/PMD state on mremap()
2025-01-12 19:03:37 -08:00
mseal.c
mseal: remove can_do_mseal()
2025-01-13 22:40:51 -08:00
msync.c
…
nommu.c
fsnotify: generate pre-content permission event on page fault
2024-12-11 17:28:41 +01:00
numa_emulation.c
mm/fake-numa: allow later numa node hotplug
2025-01-25 20:22:29 -08:00
numa_memblks.c
mm/fake-numa: allow later numa node hotplug
2025-01-25 20:22:29 -08:00
numa.c
mm/memblock: add memblock_alloc_or_panic interface
2025-01-25 20:22:38 -08:00
oom_kill.c
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
page_alloc.c
mm/page_alloc: fix uninitialized variable
2025-03-05 21:36:20 -08:00
page_counter.c
kernel/cgroup: Add "dmem" memory accounting cgroup
2025-01-06 17:24:38 +01:00
page_ext.c
mm: don't account memmap per-node
2024-08-15 22:16:14 -07:00
page_frag_cache.c
mm/page_alloc: export free_frozen_pages() instead of free_unref_page()
2025-01-13 22:40:31 -08:00
page_idle.c
mm/page_idle: constify 'struct bin_attribute'
2025-01-25 20:22:19 -08:00
page_io.c
mm, swap: clean up device availability check
2025-01-25 20:22:36 -08:00
page_isolation.c
mm/hugetlb: wait for hugetlb folios to be freed
2025-03-05 21:36:14 -08:00
page_owner.c
…
page_poison.c
…
page_reporting.c
…
page_reporting.h
…
page_table_check.c
…
page_vma_mapped.c
mm: mass constification of folio/page pointers
2024-11-07 14:38:07 -08:00
page-writeback.c
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
pagewalk.c
mm: pagewalk: add the ability to install PTEs
2024-11-11 00:26:44 -08:00
percpu-internal.h
…
percpu-km.c
…
percpu-stats.c
…
percpu-vm.c
…
percpu.c
mm/memblock: add memblock_alloc_or_panic interface
2025-01-25 20:22:38 -08:00
pgalloc-track.h
…
pgtable-generic.c
mm: add RCU annotation to pte_offset_map(_lock)
2024-12-18 19:04:43 -08:00
process_vm_access.c
mm: refactor mm_access() to not return NULL
2024-11-05 16:56:23 -08:00
pt_reclaim.c
mm: pgtable: reclaim empty PTE page in madvise(MADV_DONTNEED)
2025-01-13 22:40:48 -08:00
ptdump.c
…
readahead.c
Merge tag 'mm-stable-2025-01-26-14-59' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2025-01-26 18:36:23 -08:00
rmap.c
mm: mass constification of folio/page pointers
2024-11-07 14:38:07 -08:00
rodata_test.c
mm/rodata_test: verify test data is unchanged, rather than non-zero
2025-01-13 22:40:38 -08:00
secretmem.c
add a string-to-qstr constructor
2025-01-27 19:25:45 -05:00
shmem_quota.c
shmem_quota: build the object file conditionally to the config option
2024-09-01 20:25:45 -07:00
shmem.c
mm: shmem: remove unnecessary warning in shmem_writepage()
2025-03-05 21:36:18 -08:00
show_mem.c
mm/show_mem: use str_yes_no() helper in show_free_areas()
2024-11-07 14:38:08 -08:00
shrinker_debug.c
saner replacement for debugfs_rename()
2025-01-15 13:14:37 +01:00
shrinker.c
mm: shrinker: avoid memleak in alloc_shrinker_info
2024-10-31 20:27:04 -07:00
shuffle.c
…
shuffle.h
…
slab_common.c
Merge tag 'mm-stable-2025-01-26-14-59' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2025-01-26 18:36:23 -08:00
slab.h
mm/slab: fix kernel-doc func param names
2025-01-13 10:22:04 +01:00
slub.c
Merge tag 'driver-core-6.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core
2025-01-28 12:25:12 -08:00
sparse-vmemmap.c
mm/memmap: prevent double scanning of memmap by kmemleak
2025-01-25 20:22:30 -08:00
sparse.c
mm/memblock: add memblock_alloc_or_panic interface
2025-01-25 20:22:38 -08:00
swap_cgroup.c
mm/swap_cgroup: decouple swap cgroup recording and clearing
2025-01-25 20:22:19 -08:00
swap_slots.c
mm, swap_slots: remove slot cache for freeing path
2025-01-25 20:22:37 -08:00
swap_state.c
mm: remove unnecessary calls to lru_add_drain
2025-01-25 20:22:21 -08:00
swap.c
mm/filemap: add read support for RWF_DONTCACHE
2025-01-25 20:22:43 -08:00
swap.h
mm: fix swap_read_folio_zeromap() for large folios with partial zeromap
2024-09-17 01:07:01 -07:00
swapfile.c
mm, swap: avoid BUG_ON in relocate_cluster()
2025-03-05 21:36:15 -08:00
truncate.c
mm/truncate: add folio_unmap_invalidate() helper
2025-01-25 20:22:43 -08:00
usercopy.c
…
userfaultfd.c
userfaultfd: fix PTE unmapping stack-allocated PTE copies
2025-03-05 21:36:18 -08:00
util.c
mm: add comments to do_mmap(), mmap_region() and vm_mmap()
2025-01-13 22:40:59 -08:00
vma_internal.h
mm/vma: move brk() internals to mm/vma.c
2025-01-13 22:40:42 -08:00
vma.c
mm: abort vma_modify() on merge out of memory failure
2025-03-05 21:36:14 -08:00
vma.h
mm: make mmap_region() internal
2025-01-25 20:22:38 -08:00
vmalloc.c
mm: don't skip arch_sync_kernel_mappings() in error paths
2025-03-05 21:36:18 -08:00
vmpressure.c
…
vmscan.c
mm/vmscan: accumulate nr_demoted for accurate demotion statistics
2025-02-01 03:53:24 -08:00
vmstat.c
vmstat: disable vmstat_work on vmstat_cpu_down_prep()
2025-01-12 19:03:38 -08:00
workingset.c
mm/mglru: rework workingset protection
2025-01-25 20:22:39 -08:00
z3fold.c
mm/z3fold: add __percpu annotation to *unbuddied pointer in struct z3fold_pool
2024-09-01 20:25:56 -07:00
zbud.c
…
zpdesc.h
mm/zsmalloc: introduce __zpdesc_clear/set_zsmalloc()
2025-01-25 20:22:35 -08:00
zpool.c
…
zsmalloc.c
mm/zsmalloc: add __maybe_unused attribute for is_first_zpdesc()
2025-02-01 03:53:23 -08:00
zswap.c
mm: zswap: use ATOMIC_LONG_INIT to initialize zswap_stored_pages
2025-03-05 21:36:17 -08:00