# git rev-parse -q --verify ba422731316dde1e22dcc84b83c7349dc0ce1c3c^{commit} ba422731316dde1e22dcc84b83c7349dc0ce1c3c already have revision, skipping fetch # git checkout -q -f -B kisskb ba422731316dde1e22dcc84b83c7349dc0ce1c3c # git clean -qxdf # < git log -1 # commit ba422731316dde1e22dcc84b83c7349dc0ce1c3c # Author: Sean Christopherson # Date: Wed Jan 9 16:51:17 2019 -0800 # # mm/mmu_notifier: mm/rmap.c: Fix a mmu_notifier range bug in try_to_unmap_one # # The conversion to use a structure for mmu_notifier_invalidate_range_*() # unintentionally changed the usage in try_to_unmap_one() to init the # 'struct mmu_notifier_range' with vma->vm_start instead of @address, # i.e. it invalidates the wrong address range. Revert to the correct # address range. # # Manifests as KVM use-after-free WARNINGs and subsequent "BUG: Bad page # state in process X" errors when reclaiming from a KVM guest due to KVM # removing the wrong pages from its own mappings. # # Reported-by: leozinho29_eu@hotmail.com # Reported-by: Mike Galbraith # Reported-and-tested-by: Adam Borowski # Reviewed-by: Jérôme Glisse # Reviewed-by: Pankaj gupta # Cc: Christian König # Cc: Jan Kara # Cc: Matthew Wilcox # Cc: Ross Zwisler # Cc: Dan Williams # Cc: Paolo Bonzini # Cc: Radim Krčmář # Cc: Michal Hocko # Cc: Felix Kuehling # Cc: Ralph Campbell # Cc: John Hubbard # Cc: Andrew Morton # Fixes: ac46d4f3c432 ("mm/mmu_notifier: use structure for invalidate_range_start/end calls v2") # Signed-off-by: Sean Christopherson # Signed-off-by: Linus Torvalds # < /opt/cross/kisskb/gcc-4.6.3-nolibc/i386-linux/bin/i386-linux-gcc --version # < /opt/cross/kisskb/gcc-4.6.3-nolibc/i386-linux/bin/i386-linux-ld --version # < git log --format=%s --max-count=1 ba422731316dde1e22dcc84b83c7349dc0ce1c3c # < make -s -j 120 ARCH=i386 O=/kisskb/build/linus-rand_i386-randconfig_i386 CROSS_COMPILE=/opt/cross/kisskb/gcc-4.6.3-nolibc/i386-linux/bin/i386-linux- randconfig KCONFIG_SEED=0xE02E7498 # Added to kconfig CONFIG_STANDALONE=y # Added to kconfig CONFIG_PREVENT_FIRMWARE_BUILD=y # yes \n | make -s -j 120 ARCH=i386 O=/kisskb/build/linus-rand_i386-randconfig_i386 CROSS_COMPILE=/opt/cross/kisskb/gcc-4.6.3-nolibc/i386-linux/bin/i386-linux- oldconfig yes: standard output: Broken pipe # make -s -j 120 ARCH=i386 O=/kisskb/build/linus-rand_i386-randconfig_i386 CROSS_COMPILE=/opt/cross/kisskb/gcc-4.6.3-nolibc/i386-linux/bin/i386-linux- /kisskb/src/kernel/cgroup/cgroup-v1.c: In function 'cgroup1_mount': /kisskb/src/kernel/cgroup/cgroup-v1.c:1263:20: warning: 'root' may be used uninitialized in this function [-Wuninitialized] /kisskb/src/kernel/printk/printk.c: In function 'devkmsg_sysctl_set_loglvl': /kisskb/src/kernel/printk/printk.c:186:16: warning: 'old' may be used uninitialized in this function [-Wuninitialized] /kisskb/src/arch/x86/kernel/apic/io_apic.c: In function 'mp_map_pin_to_irq': /kisskb/src/arch/x86/kernel/apic/io_apic.c:1034:6: warning: 'irq' may be used uninitialized in this function [-Wuninitialized] /kisskb/src/kernel/trace/trace_dynevent.c: In function 'create_dyn_event': /kisskb/src/kernel/trace/trace_dynevent.c:89:5: warning: 'ret' may be used uninitialized in this function [-Wuninitialized] /kisskb/src/fs/afs/dynroot.c: In function 'afs_lookup_atcell': /kisskb/src/fs/afs/dynroot.c:126:6: warning: 'len' may be used uninitialized in this function [-Wuninitialized] /kisskb/src/drivers/base/regmap/regmap.c: In function '_regmap_raw_write': /kisskb/src/drivers/base/regmap/regmap.c:1855:6: warning: 'ret' may be used uninitialized in this function [-Wuninitialized] /kisskb/src/drivers/base/regmap/regmap.c: In function 'regmap_raw_read': /kisskb/src/drivers/base/regmap/regmap.c:2594:6: warning: 'ret' may be used uninitialized in this function [-Wuninitialized] /kisskb/src/arch/x86/kernel/e820.c: In function 'e820__setup_pci_gap': /kisskb/src/arch/x86/kernel/e820.c:652:2: warning: 'gapstart' may be used uninitialized in this function [-Wuninitialized] /kisskb/src/arch/x86/kernel/hw_breakpoint.c: In function 'hw_breakpoint_arch_parse': /kisskb/src/arch/x86/kernel/hw_breakpoint.c:366:18: warning: 'align' may be used uninitialized in this function [-Wuninitialized] /kisskb/src/fs/f2fs/file.c: In function 'f2fs_precache_extents': /kisskb/src/fs/f2fs/file.c:2937:6: warning: 'err' may be used uninitialized in this function [-Wuninitialized] /kisskb/src/net/ipv6/ip6_output.c: In function '__ip6_append_data.isra.50': /kisskb/src/include/linux/skbuff.h:1338:6: warning: 'extra_uref' may be used uninitialized in this function [-Wuninitialized] /kisskb/src/net/ipv6/ip6_output.c:1270:14: note: 'extra_uref' was declared here /kisskb/src/net/bridge/br_netlink.c: In function 'br_process_vlan_info.isra.26': /kisskb/src/net/bridge/br_netlink.c:591:10: warning: 'err' may be used uninitialized in this function [-Wuninitialized] /kisskb/src/fs/udf/unicode.c: In function 'udf_name_conv_char': /kisskb/src/fs/udf/unicode.c:132:8: warning: 'c' may be used uninitialized in this function [-Wuninitialized] /kisskb/src/lib/raid6/recov_avx512.c:387:2: warning: #warning "your version of binutils lacks AVX512 support" [-Wcpp] /kisskb/src/net/ipv4/ip_output.c: In function '__ip_append_data.isra.51': /kisskb/src/include/linux/skbuff.h:1338:6: warning: 'extra_uref' may be used uninitialized in this function [-Wuninitialized] /kisskb/src/net/ipv4/ip_output.c:885:14: note: 'extra_uref' was declared here /kisskb/src/net/ncsi/ncsi-manage.c: In function 'set_one_vid': /kisskb/src/net/ncsi/ncsi-manage.c:676:19: warning: 'vid' may be used uninitialized in this function [-Wuninitialized] /kisskb/src/drivers/i2c/i2c-core-base.c: In function 'i2c_generic_scl_recovery': /kisskb/src/drivers/i2c/i2c-core-base.c:235:5: warning: 'ret' may be used uninitialized in this function [-Wuninitialized] /kisskb/src/drivers/mfd/arizona-core.c: In function 'arizona_dev_init': /kisskb/src/drivers/mfd/arizona-core.c:1422:6: warning: 'n_subdevs' may be used uninitialized in this function [-Wuninitialized] /kisskb/src/fs/btrfs/ref-verify.c: In function 'process_extent_item.isra.3': /kisskb/src/fs/btrfs/ref-verify.c:503:2: warning: 'ret' may be used uninitialized in this function [-Wuninitialized] /kisskb/src/fs/btrfs/ref-verify.c: In function 'process_leaf.isra.4': /kisskb/src/fs/btrfs/ref-verify.c:555:2: warning: 'ret' may be used uninitialized in this function [-Wuninitialized] /kisskb/src/drivers/net/tun.c: In function 'tun_get_user': /kisskb/src/drivers/net/tun.c:1843:30: warning: 'copylen' may be used uninitialized in this function [-Wuninitialized] /kisskb/src/drivers/net/tun.c:1533:34: warning: 'linear' may be used uninitialized in this function [-Wuninitialized] /kisskb/src/drivers/net/tun.c:1753:46: note: 'linear' was declared here /kisskb/src/drivers/staging/media/ipu3/ipu3-v4l2.c: In function 'imgu_fmt': /kisskb/src/drivers/staging/media/ipu3/ipu3-v4l2.c:750:1: warning: the frame size of 1032 bytes is larger than 1024 bytes [-Wframe-larger-than=] /kisskb/src/drivers/staging/media/ipu3/ipu3-css.c: In function 'ipu3_css_fmt_try': /kisskb/src/drivers/staging/media/ipu3/ipu3-css.c:1863:1: warning: the frame size of 1152 bytes is larger than 1024 bytes [-Wframe-larger-than=] Completed OK # rm -rf /kisskb/build/linus-rand_i386-randconfig_i386 # Build took: 0:01:13.332615