<html lang="en" data-color-mode="auto" data-light-theme="light" data-dark-theme="dark" data-a11y-animated-images="system" data-a11y-link-underlines="true"><head><style>pre,code,address {
margin: 0px;
}
h1,h2,h3,h4,h5,h6 {
margin-top: 0.2em;
margin-bottom: 0.2em;
}
ol,ul {
margin-top: 0em;
margin-bottom: 0em;
}
blockquote {
margin-top: 0em;
margin-bottom: 0em;
}
</style></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><pre>On Mon, 2024-09-23 at 23:33 +0100, David Howells wrote:</pre><pre>> Eduard Zingerman <eddyz87@gmail.com> wrote:</pre><pre>> </pre><pre>> > - null-ptr-deref is triggered by access to page->pcp_list.next</pre><pre>> > when list_del() is called from page_alloc.c:__rmqueue_pcplist(),</pre><pre>> </pre><pre>> Can you tell me what the upstream commit ID of your kernel is? (before any</pre><pre>> patches are stacked on it)</pre><pre><br></pre><pre>I used bpf-next tree, but could be reproduced with [1] as well,</pre><pre>commit ID [2]. Decoded dmesg for this commit ID in [3].</pre><pre><br></pre><pre>[1] git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git</pre><pre>[2] abf2050f51fd ("Merge tag 'media/v6.12-1' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media")</pre><pre>[3] https://gist.github.com/eddyz87/af39e04069c6ca30e66c3032c0384b8e</pre><pre><br></pre><pre>> If you can modify your kernel, can you find the following in fs/netfs/:</pre><pre>> </pre><pre>> buffered_read.c:127: new = kmalloc(sizeof(*new), GFP_NOFS);</pre><pre>> buffered_read.c:353: folioq = kmalloc(sizeof(*folioq), GFP_KERNEL);</pre><pre>> buffered_read.c:458: folioq = kmalloc(sizeof(*folioq), GFP_KERNEL);</pre><pre>> misc.c:25: tail = kmalloc(sizeof(*tail), GFP_NOFS);</pre><pre>> </pre><pre>> and change the kmalloc to kzalloc?</pre><pre><br></pre><pre>No changes in behaviour.</pre><pre><br></pre></body></html>