On Thu 18-07-24 20:18:02, Barry Song wrote: > So the purpose is making sure the semantics - NOFAIL means no failure > and we don't need to check ret. If we can't really succeed, it should throw > a BUG to stop any potential exploits. This would require to panic consistently on failure in all allocator path that can bail out. E.g. page allocator on GFP_NOWAIT|GFP_NOFAIL req. not sure how many more. -- Michal Hocko SUSE Labs