madvise_lock() does nothing for MADV_HWPOSION and MADV_SOFT_OFFLINE behavior, but madvise_unlock() does mmap_lock unlocking regardless of the behavior. Commit 948a0a9ea070 ("mm/madvise: split out mmap locking operations for madvise()") in mm-unstable, which introduced the wrong function didn't cause a real problem because do_madvise() was not calling madvise_unlock() for the behavior. Later, commit f19c9d7b57cf ("mm/madvise: split out madvise() behavior execution") in mm-unstable made do_madvise() to call madvise_unlock() even for the two behaviors. As a result, the kernel tries to unlock unlocked mmap_lock. Fix the issue by handling the two behaviors in madvise_unlock(). For the two behaviors, do nothing but just return. Also remove an unnecessary blank line in madvise_lock(). Technically speaking this patch fixes commit f19c9d7b57cf ("mm/madvise: split out madvise() behavior execution"). But since the broken commit is not in the mainline yet, squashing this fix into commit 948a0a9ea070 ("mm/madvise: split out mmap locking operations for madvise()") would make more sense, so adding Fixes: tag with it. Fixes: 948a0a9ea070 ("mm/madvise: split out mmap locking operations for madvise()") # mm-unstable Reported-by: "Lai, Yi" <yi1.lai@xxxxxxxxxxxxxxx> Closes: https://lore.kernel.org/Z6rgiVp7221r4JZ5@ly-workstation Signed-off-by: SeongJae Park <sj@xxxxxxxxxx> --- mm/madvise.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/mm/madvise.c b/mm/madvise.c index b5ef8e03d8b0..b8969457f3ef 100644 --- a/mm/madvise.c +++ b/mm/madvise.c @@ -1577,7 +1577,6 @@ int madvise_set_anon_name(struct mm_struct *mm, unsigned long start, static int madvise_lock(struct mm_struct *mm, int behavior) { - #ifdef CONFIG_MEMORY_FAILURE if (behavior == MADV_HWPOISON || behavior == MADV_SOFT_OFFLINE) return 0; @@ -1595,6 +1594,11 @@ static int madvise_lock(struct mm_struct *mm, int behavior) static void madvise_unlock(struct mm_struct *mm, int behavior) { +#ifdef CONFIG_MEMORY_FAILURE + if (behavior == MADV_HWPOISON || behavior == MADV_SOFT_OFFLINE) + return; +#endif + if (madvise_need_mmap_write(behavior)) mmap_write_unlock(mm); else base-commit: 8bf30f9d23eb5040d37e6e712789cee8e71e1577 -- 2.39.5