# git rev-parse -q --verify ba422731316dde1e22dcc84b83c7349dc0ce1c3c^{commit} ba422731316dde1e22dcc84b83c7349dc0ce1c3c already have revision, skipping fetch # git checkout -q -f -B kisskb ba422731316dde1e22dcc84b83c7349dc0ce1c3c # git clean -qxdf # < git log -1 # commit ba422731316dde1e22dcc84b83c7349dc0ce1c3c # Author: Sean Christopherson # Date: Wed Jan 9 16:51:17 2019 -0800 # # mm/mmu_notifier: mm/rmap.c: Fix a mmu_notifier range bug in try_to_unmap_one # # The conversion to use a structure for mmu_notifier_invalidate_range_*() # unintentionally changed the usage in try_to_unmap_one() to init the # 'struct mmu_notifier_range' with vma->vm_start instead of @address, # i.e. it invalidates the wrong address range. Revert to the correct # address range. # # Manifests as KVM use-after-free WARNINGs and subsequent "BUG: Bad page # state in process X" errors when reclaiming from a KVM guest due to KVM # removing the wrong pages from its own mappings. # # Reported-by: leozinho29_eu@hotmail.com # Reported-by: Mike Galbraith # Reported-and-tested-by: Adam Borowski # Reviewed-by: Jérôme Glisse # Reviewed-by: Pankaj gupta # Cc: Christian König # Cc: Jan Kara # Cc: Matthew Wilcox # Cc: Ross Zwisler # Cc: Dan Williams # Cc: Paolo Bonzini # Cc: Radim Krčmář # Cc: Michal Hocko # Cc: Felix Kuehling # Cc: Ralph Campbell # Cc: John Hubbard # Cc: Andrew Morton # Fixes: ac46d4f3c432 ("mm/mmu_notifier: use structure for invalidate_range_start/end calls v2") # Signed-off-by: Sean Christopherson # Signed-off-by: Linus Torvalds # < /opt/cross/kisskb/korg/gcc-8.1.0-nolibc/nds32le-linux/bin/nds32le-linux-gcc --version # < /opt/cross/kisskb/korg/gcc-8.1.0-nolibc/nds32le-linux/bin/nds32le-linux-ld --version # < git log --format=%s --max-count=1 ba422731316dde1e22dcc84b83c7349dc0ce1c3c # < make -s -j 80 ARCH=nds32 O=/kisskb/build/linus_nds32-allyesconfig_nds32le CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-8.1.0-nolibc/nds32le-linux/bin/nds32le-linux- allyesconfig # make -s -j 80 ARCH=nds32 O=/kisskb/build/linus_nds32-allyesconfig_nds32le CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-8.1.0-nolibc/nds32le-linux/bin/nds32le-linux- /kisskb/src/fs/cifs/cifssmb.c: In function '__cifs_reconnect_tcon': /kisskb/src/fs/cifs/cifssmb.c:186:1: warning: the frame size of 1320 bytes is larger than 1024 bytes [-Wframe-larger-than=] } ^ /kisskb/src/fs/cifs/smb2pdu.c: In function '__smb2_reconnect': /kisskb/src/fs/cifs/smb2pdu.c:220:1: warning: the frame size of 1320 bytes is larger than 1024 bytes [-Wframe-larger-than=] } ^ /kisskb/src/drivers/input/joystick/analog.c:172:2: warning: #warning Precise timer not defined for this architecture. [-Wcpp] #warning Precise timer not defined for this architecture. ^~~~~~~ /kisskb/src/drivers/i2c/i2c-core-base.c: In function 'i2c_generic_scl_recovery': /kisskb/src/drivers/i2c/i2c-core-base.c:235:5: warning: 'ret' may be used uninitialized in this function [-Wmaybe-uninitialized] if (ret == -EOPNOTSUPP) ^ WARNING: EXPORT symbol "copy_page" [vmlinux] version generation failed, symbol will not be versioned. WARNING: EXPORT symbol "clear_page" [vmlinux] version generation failed, symbol will not be versioned. Completed OK # rm -rf /kisskb/build/linus_nds32-allyesconfig_nds32le # Build took: 0:09:57.112028