Jan Kara 2b2d2b8766 mm: avoid overflows in dirty throttling logic ... [ Upstream commit 385d838df2 ] The dirty throttling logic is interspersed with assumptions that dirty limits in PAGE_SIZE units fit into 32-bit (so that various multiplications fit into 64-bits). If limits end up being larger, we will hit overflows, possible divisions by 0 etc. Fix these problems by never allowing so large dirty limits as they have dubious practical value anyway. For dirty_bytes / dirty_background_bytes interfaces we can just refuse to set so large limits. For dirty_ratio / dirty_background_ratio it isn't so simple as the dirty limit is computed from the amount of available memory which can change due to memory hotplug etc. So when converting dirty limits from ratios to numbers of pages, we just don't allow the result to exceed UINT_MAX. This is root-only triggerable problem which occurs when the operator sets dirty limits to >16 TB. Link: https://lkml.kernel.org/r/20240621144246.11148-2-jack@suse.cz Signed-off-by: Jan Kara <jack@suse.cz> Reported-by: Zach O'Keefe <zokeefe@google.com> Reviewed-By: Zach O'Keefe <zokeefe@google.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2024-08-19 05:32:07 +02:00
..
kasan	panic: Consolidate open-coded panic_on_warn checks	2023-02-06 07:49:46 +01:00
backing-dev.c	mm: bdi: initialize bdi_min_ratio when bdi is unregistered	2021-12-14 10:18:05 +01:00
balloon_compaction.c	virtio_balloon: fix deadlock on OOM	2017-11-14 23:57:38 +02:00
bootmem.c	docs/mm: bootmem: add overview documentation	2018-08-02 12:17:27 -06:00
cleancache.c	mm: use octal not symbolic permissions	2018-06-15 07:55:25 +09:00
cma_debug.c	mm/cma_debug.c: fix the break condition in cma_maxchunk_get()	2019-06-15 11:54:01 +02:00
cma.c	mm/cma.c: fail if fixed declaration can't be honored	2019-08-06 19:06:51 +02:00
cma.h
compaction.c	mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations	2024-04-13 12:50:12 +02:00
debug_page_ref.c
debug.c	mm: get rid of vmacache_flush_all() entirely	2018-09-13 15:18:04 -10:00
dmapool.c	mm: use octal not symbolic permissions	2018-06-15 07:55:25 +09:00
early_ioremap.c	mm/early_ioremap: Fix boot hang with earlyprintk=efi,keep	2017-12-11 14:54:44 +01:00
fadvise.c	vfs: implement readahead(2) using POSIX_FADV_WILLNEED	2018-08-30 20:01:32 +02:00
failslab.c	mm: use octal not symbolic permissions	2018-06-15 07:55:25 +09:00
filemap.c	mm: fs: initialize fsdata passed to write_begin/write_end interface	2022-11-25 17:40:29 +01:00
frame_vector.c	v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails	2022-12-08 11:18:32 +01:00
frontswap.c	treewide: Remove uninitialized_var() usage	2023-08-11 11:45:01 +02:00
gup_benchmark.c	mm/gup_benchmark.c: prevent integer overflow in ioctl	2019-12-01 09:17:07 +01:00
gup.c	gup: document and work around "COW can break either way" issue	2021-04-28 13:16:51 +02:00
highmem.c
hmm.c	mm/memory_hotplug: shrink zones when offlining memory	2020-01-29 16:43:27 +01:00
huge_memory.c	mm/huge_memory.c: don't discard hugepage if other processes are mapping it	2021-07-20 16:15:58 +02:00
hugetlb_cgroup.c	mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup()	2019-11-20 18:45:20 +01:00
hugetlb.c	mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages	2022-11-03 23:52:29 +09:00
hwpoison-inject.c	mm/memory_failure: Remove unused trapno from memory_failure	2018-01-23 12:17:42 -06:00
init-mm.c	mm: Allocate the mm_cpumask (mm->cpu_bitmap[]) dynamically based on nr_cpu_ids	2018-07-17 09:35:30 +02:00
internal.h	mm/thp: fix vma_address() if virtual address below file offset	2021-07-11 12:49:28 +02:00
interval_tree.c	mm/interval_tree.c: use vma_pages() helper	2018-01-31 17:18:37 -08:00
Kconfig	mm/hmm: select mmu notifier when selecting HMM	2019-06-15 11:54:00 +02:00
Kconfig.debug	mm: clarify CONFIG_PAGE_POISONING and usage	2018-08-22 10:52:44 -07:00
khugepaged.c	mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths	2023-01-18 11:29:59 +01:00
kmemleak-test.c
kmemleak.c	Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"	2022-09-15 12:17:02 +02:00
ksm.c	treewide: Remove uninitialized_var() usage	2023-08-11 11:45:01 +02:00
list_lru.c	mm: list_lru: set shrinker map bit when child nr_items is not zero	2020-12-11 13:25:02 +01:00
maccess.c	uaccess: Add non-pagefault user-space write function	2020-09-09 19:04:29 +02:00
madvise.c	mm: madvise(MADV_DODUMP): allow hugetlbfs pages	2018-10-05 16:32:05 -07:00
Makefile	vfs: implement readahead(2) using POSIX_FADV_WILLNEED	2018-08-30 20:01:32 +02:00
memblock.c	memblock: use kfree() to release kmalloced memblock regions	2022-03-02 11:38:14 +01:00
memcontrol.c	mm: memcontrol: switch to rcu protection in drain_all_stock()	2024-03-01 13:06:10 +01:00
memfd.c	memfd: fix F_SEAL_WRITE after shmem huge page allocated	2022-03-08 19:04:10 +01:00
memory_hotplug.c	mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()	2021-09-22 11:48:12 +02:00
memory-failure.c	mm/memory-failure: fix an incorrect use of tail pages	2024-04-13 12:50:09 +02:00
memory.c	x86/mm/pat: fix VM_PAT handling in COW mappings	2024-04-13 12:50:17 +02:00
mempolicy.c	treewide: Remove uninitialized_var() usage	2023-08-11 11:45:01 +02:00
mempool.c	mm/mempool.c: add missing parameter description	2018-08-22 10:52:44 -07:00
memtest.c	memtest: use {READ,WRITE}_ONCE in memory scanning	2024-04-13 12:50:07 +02:00
migrate.c	mm/migrate: set swap entry values of THP tail pages properly.	2024-04-13 12:50:09 +02:00
mincore.c	mm/mincore.c: make mincore() more conservative	2019-05-22 07:37:40 +02:00
mlock.c	mm/mlock.c: change count_mm_mlocked_page_nr return type	2019-07-10 09:53:40 +02:00
mm_init.c	mm: access zone->node via zone_to_nid() and zone_set_nid()	2018-08-22 10:52:45 -07:00
mmap.c	mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()	2022-09-20 12:26:48 +02:00
mmu_context.c
mmu_notifier.c	mm/mmu_notifier: use hlist_add_head_rcu()	2019-07-31 07:27:08 +02:00
mmzone.c
mprotect.c	mm, numa: fix bad pmd by atomically check for pmd_trans_huge when marking page tables prot_numa	2020-03-11 14:15:00 +01:00
mremap.c	mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)	2022-04-15 14:15:05 +02:00
msync.c
nobootmem.c	mm/memblock: add a name for memblock flags enumeration	2018-08-02 12:17:27 -06:00
nommu.c	x86/mm: split vmalloc_sync_all()	2020-03-25 08:06:13 +01:00
oom_kill.c	mm, oom: do not trigger out_of_memory from the #PF	2021-11-26 11:36:17 +01:00
page_alloc.c	mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations	2024-04-13 12:50:12 +02:00
page_counter.c	mm/page_counter.c: fix protection usage propagation	2020-08-21 11:05:33 +02:00
page_ext.c	mm/page_ext.c: fix an imbalance with kmemleak	2019-04-05 22:32:58 +02:00
page_idle.c	mm/page_idle.c: fix oops because end_pfn is larger than max_pfn	2019-07-03 13:14:45 +02:00
page_io.c	mm: fix unexpected zeroed page mapping with zram swap	2022-05-12 12:20:25 +02:00
page_isolation.c	mm, migrate: remove reason argument from new_page_t	2018-04-11 10:28:32 -07:00
page_owner.c	mm/page_owner: don't access uninitialized memmaps when reading /proc/pagetypeinfo	2019-10-29 09:19:58 +01:00
page_poison.c	page_poison: play nicely with KASAN	2019-04-05 22:32:59 +02:00
page_vma_mapped.c	mm/thp: another PVMW_SYNC fix in page_vma_mapped_walk()	2021-07-11 12:49:30 +02:00
page-writeback.c	mm: avoid overflows in dirty throttling logic	2024-08-19 05:32:07 +02:00
pagewalk.c	mm: pagewalk: fix termination condition in walk_pte_range()	2020-10-01 13:14:32 +02:00
percpu-internal.h
percpu-km.c	percpu: convert spin_lock_irq to spin_lock_irqsave.	2019-02-12 19:47:12 +01:00
percpu-stats.c	treewide: Use array_size() in vmalloc()	2018-06-12 16:19:22 -07:00
percpu-vm.c	percpu: allow select gfp to be passed to underlying allocators	2018-02-18 05:33:01 -08:00
percpu.c	treewide: Remove uninitialized_var() usage	2023-08-11 11:45:01 +02:00
pgtable-generic.c	mm/thp: fix __split_huge_pmd_locked() on shmem migration entry	2021-07-11 12:49:27 +02:00
process_vm_access.c	mm: docs: add blank lines to silence sphinx "Unexpected indentation" errors	2018-02-06 18:32:48 -08:00
quicklist.c
readahead.c	vfs: fix readahead(2) on block devices	2023-11-20 10:29:16 +01:00
rmap.c	mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse	2022-09-05 10:26:34 +02:00
rodata_test.c
shmem.c	shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode	2022-01-27 09:04:16 +01:00
slab_common.c	mm: slab: fix kmem_cache_create failed when sysfs node not destroyed	2021-07-28 11:13:44 +02:00
slab.c	mm/slab.c: fix an infinite loop in leaks_show()	2019-06-15 11:54:01 +02:00
slab.h	mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag	2021-11-26 11:36:23 +01:00
slob.c	slab: __GFP_ZERO is incompatible with a constructor	2018-06-07 17:34:34 -07:00
slub.c	treewide: Remove uninitialized_var() usage	2023-08-11 11:45:01 +02:00
sparse-vmemmap.c	mm/sparse: delete old sparse_init and enable new one	2018-08-17 16:20:32 -07:00
sparse.c	mm/sparse: add the missing sparse_buffer_fini() in error branch	2021-05-22 10:59:38 +02:00
swap_cgroup.c
swap_slots.c	mm, swap, get_swap_pages: use entry_size instead of cluster in parameter	2018-08-22 10:52:44 -07:00
swap_state.c	mm/swap_state: fix a data race in swapin_nr_pages	2020-10-01 13:14:47 +02:00
swap.c	treewide: Remove uninitialized_var() usage	2023-08-11 11:45:01 +02:00
swapfile.c	mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()	2023-04-20 12:04:39 +02:00
truncate.c	mm/thp: unmap_mapping_page() to fix THP truncate_cleanup_page()	2021-07-11 12:49:28 +02:00
usercopy.c	mm/usercopy: return 1 from hardened_usercopy __setup() handler	2022-04-15 14:14:59 +02:00
userfaultfd.c	userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb	2024-03-01 13:06:08 +01:00
util.c	random: move randomize_page() into mm where it belongs	2022-06-25 11:49:12 +02:00
vmacache.c	mm: get rid of vmacache_flush_all() entirely	2018-09-13 15:18:04 -10:00
vmalloc.c	mm/vmalloc.c: don't dereference possible NULL pointer in __vunmap()	2020-06-03 08:19:49 +02:00
vmpressure.c	mm/vmpressure.c: fix a signedness bug in vmpressure_register_event()	2019-10-17 13:45:19 -07:00
vmscan.c	mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations	2024-04-13 12:50:12 +02:00
vmstat.c	mm, vmstat: drop zone->lock in /proc/pagetypeinfo	2021-06-03 08:38:02 +02:00
workingset.c	mm/list_lru: introduce list_lru_shrink_walk_irq()	2018-08-17 16:20:32 -07:00
z3fold.c	z3fold: fix possible reclaim races	2018-12-01 09:37:33 +01:00
zbud.c	mm: docs: fix parameter names mismatch	2018-02-06 18:32:48 -08:00
zpool.c	mm/zpool.c: zpool_evictable: fix mismatch in parameter name and kernel-doc	2018-02-21 15:35:43 -08:00
zsmalloc.c	zsmalloc: fix races between asynchronous zspage free and page migration	2022-06-06 08:24:21 +02:00
zswap.c	zswap: re-check zswap_is_full() after do zswap_shrink()	2018-07-26 19:38:03 -07:00