Nigel Croxon 2941155d9a raid10: cleanup memleak at raid10_make_request ... [ Upstream commit 43806c3d5b ] If raid10_read_request or raid10_write_request registers a new request and the REQ_NOWAIT flag is set, the code does not free the malloc from the mempool. unreferenced object 0xffff8884802c3200 (size 192): comm "fio", pid 9197, jiffies 4298078271 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 88 41 02 00 00 00 00 00 .........A...... 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc c1a049a2): __kmalloc+0x2bb/0x450 mempool_alloc+0x11b/0x320 raid10_make_request+0x19e/0x650 [raid10] md_handle_request+0x3b3/0x9e0 __submit_bio+0x394/0x560 __submit_bio_noacct+0x145/0x530 submit_bio_noacct_nocheck+0x682/0x830 __blkdev_direct_IO_async+0x4dc/0x6b0 blkdev_read_iter+0x1e5/0x3b0 __io_read+0x230/0x1110 io_read+0x13/0x30 io_issue_sqe+0x134/0x1180 io_submit_sqes+0x48c/0xe90 __do_sys_io_uring_enter+0x574/0x8b0 do_syscall_64+0x5c/0xe0 entry_SYSCALL_64_after_hwframe+0x76/0x7e V4: changing backing tree to see if CKI tests will pass. The patch code has not changed between any versions. Fixes: c9aa889b03 ("md: raid10 add nowait support") Signed-off-by: Nigel Croxon <ncroxon@redhat.com> Link: https://lore.kernel.org/linux-raid/c0787379-9caa-42f3-b5fc-369aed784400@redhat.com Signed-off-by: Yu Kuai <yukuai3@huawei.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2025-07-17 18:37:16 +02:00
..
bcache	bcache: fix NULL pointer in cache_set_flush()	2025-07-06 11:01:34 +02:00
dm-vdo	dm vdo indexer: don't read request structure after enqueuing	2025-07-06 11:01:32 +02:00
persistent-data	dm array: fix cursor index when skipping across block boundaries	2025-01-17 13:40:34 +01:00
dm-audit.c
dm-audit.h
dm-bio-prison-v1.c
dm-bio-prison-v1.h
dm-bio-prison-v2.c
dm-bio-prison-v2.h
dm-bio-record.h
dm-bufio.c	dm-bufio: don't schedule in atomic context	2025-05-09 09:50:33 +02:00
dm-builtin.c
dm-cache-background-tracker.c	dm-cache: fix warnings about duplicate slab caches	2024-11-11 17:04:39 +01:00
dm-cache-background-tracker.h	dm-cache: fix warnings about duplicate slab caches	2024-11-11 17:04:39 +01:00
dm-cache-block-types.h
dm-cache-metadata.c	dm: Constify struct dm_block_validator	2024-07-19 12:08:15 +02:00
dm-cache-metadata.h
dm-cache-policy-internal.h
dm-cache-policy-smq.c
dm-cache-policy.c
dm-cache-policy.h
dm-cache-target.c	dm cache: prevent BUG_ON by blocking retries on failed device resumes	2025-05-29 11:02:28 +02:00
dm-clone-metadata.c	dm: Make use of __assign_bit() API	2024-09-02 16:53:53 +02:00
dm-clone-metadata.h
dm-clone-target.c	dm: stop using blk_limits_io_{min,opt}	2024-07-10 13:10:06 +02:00
dm-core.h	dm: fix dm_blk_report_zones	2025-06-19 15:32:05 +02:00
dm-crypt.c	dm-crypt: track tag_offset in convert_context	2025-02-17 10:05:19 +01:00
dm-delay.c
dm-dust.c
dm-ebs-target.c	dm-ebs: fix prefetch-vs-suspend race	2025-04-20 10:15:53 +02:00
dm-era-target.c	dm: Constify struct dm_block_validator	2024-07-19 12:08:15 +02:00
dm-exception-store.c
dm-exception-store.h
dm-flakey.c	dm-flakey: make corrupting read bios work	2025-06-19 15:32:05 +02:00
dm-ima.c
dm-ima.h
dm-init.c	dm init: Handle minors larger than 255	2024-07-02 20:53:41 +02:00
dm-integrity.c	dm-integrity: fix a warning on invalid table line	2025-05-09 09:50:33 +02:00
dm-io-rewind.c
dm-io-tracker.h
dm-io.c	dm io: remove code duplication between sync_io and aysnc_io	2024-07-02 12:00:43 +02:00
dm-ioctl.c	dm resume: don't return EINVAL when signalled	2024-08-13 13:51:34 +02:00
dm-kcopyd.c
dm-linear.c	dm: optimize flushes	2024-06-26 11:32:39 -04:00
dm-log-userspace-base.c
dm-log-userspace-transfer.c
dm-log-userspace-transfer.h
dm-log-writes.c
dm-log.c
dm-mpath.c	dm mpath: don't call dm_get_device in multipath_message	2024-07-10 13:10:06 +02:00
dm-mpath.h
dm-path-selector.c
dm-path-selector.h
dm-ps-historical-service-time.c
dm-ps-io-affinity.c
dm-ps-queue-length.c
dm-ps-round-robin.c
dm-ps-service-time.c
dm-raid.c	dm-raid: fix variable in journal device check	2025-07-06 11:01:43 +02:00
dm-raid1.c	dm-mirror: fix a tiny race condition	2025-06-27 11:11:23 +01:00
dm-region-hash.c
dm-rq.c	Revert "dm: requeue IO if mapping table not yet available"	2024-09-15 21:02:54 +02:00
dm-rq.h
dm-snap-persistent.c
dm-snap-transient.c
dm-snap.c
dm-stats.c
dm-stats.h
dm-stripe.c	dm: stop using blk_limits_io_{min,opt}	2024-07-10 13:10:06 +02:00
dm-switch.c
dm-sysfs.c
dm-table.c	dm: lock limits when reading them	2025-06-27 11:11:23 +01:00
dm-target.c
dm-thin-metadata.c	dm: Constify struct dm_block_validator	2024-07-19 12:08:15 +02:00
dm-thin-metadata.h
dm-thin.c	dm thin: make get_first_thin use rcu-safe list first function	2025-01-17 13:40:45 +01:00
dm-uevent.c
dm-uevent.h
dm-unstripe.c	dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow	2024-11-04 17:34:56 +01:00
dm-verity-fec.c	dm-verity: fix a memory leak if some arguments are specified multiple times	2025-06-27 11:11:23 +01:00
dm-verity-fec.h	dm-verity: always "map" the data blocks	2024-07-03 21:41:11 +02:00
dm-verity-loadpin.c
dm-verity-target.c	dm-verity: fix a memory leak if some arguments are specified multiple times	2025-06-27 11:11:23 +01:00
dm-verity-verify-sig.c	dm-verity: fix a memory leak if some arguments are specified multiple times	2025-06-27 11:11:23 +01:00
dm-verity-verify-sig.h
dm-verity.h	dm-verity: don't crash if panic_on_corruption is not selected	2024-11-04 17:39:23 +01:00
dm-writecache.c
dm-zero.c
dm-zone.c	dm: fix dm_blk_report_zones	2025-06-19 15:32:05 +02:00
dm-zoned-metadata.c
dm-zoned-reclaim.c	dm: Fix dm-zoned-reclaim zone write pointer alignment	2024-12-19 18:13:00 +01:00
dm-zoned-target.c	dm: stop using blk_limits_io_{min,opt}	2024-07-10 13:10:06 +02:00
dm-zoned.h
dm.c	dm: free table mempools if not used in __bind	2025-06-19 15:32:04 +02:00
dm.h	dm: Remove unused declaration and empty definition "dm_zone_map_bio"	2024-08-21 13:12:12 +02:00
Kconfig	md: reintroduce md-linear	2025-02-17 10:05:04 +01:00
Makefile	md: reintroduce md-linear	2025-02-17 10:05:04 +01:00
md-autodetect.c	md: reintroduce md-linear	2025-02-17 10:05:04 +01:00
md-bitmap.c	md/md-bitmap: fix GPF in bitmap_get_stats()	2025-07-17 18:37:09 +02:00
md-bitmap.h	md/md-bitmap: remove the last parameter for bimtap_ops->endwrite()	2025-02-08 09:58:11 +01:00
md-cluster.c	md/md-bitmap: make in memory structure internal	2024-08-27 12:43:16 -07:00
md-cluster.h	md-cluster: fix no recovery job when adding/re-adding a disk	2024-07-12 01:30:18 +00:00
md-linear.c	md: Fix linear_set_limits()	2025-02-17 10:05:47 +01:00
md.c	md: fix mddev uaf while iterating all_mddevs list	2025-04-25 10:48:04 +02:00
md.h	md/md-bitmap: move bitmap_{start, end}write to md upper layer	2025-02-08 09:58:12 +01:00
raid1-10.c	md/md-bitmap: merge md_bitmap_enabled() into bitmap_operations	2024-08-27 12:43:16 -07:00
raid1.c	md/raid1: Fix stack memory use after return in raid1_reshape	2025-07-17 18:37:16 +02:00
raid1.h	md/md-bitmap: remove the last parameter for bimtap_ops->endwrite()	2025-02-08 09:58:11 +01:00
raid5-cache.c	md/md-bitmap: move bitmap_{start, end}write to md upper layer	2025-02-08 09:58:12 +01:00
raid5-log.h
raid5-ppl.c
raid5.c	md/md-bitmap: move bitmap_{start, end}write to md upper layer	2025-02-08 09:58:12 +01:00
raid5.h	md/md-bitmap: move bitmap_{start, end}write to md upper layer	2025-02-08 09:58:12 +01:00
raid10.c	raid10: cleanup memleak at raid10_make_request	2025-07-17 18:37:16 +02:00
raid10.h	md/md-bitmap: remove the last parameter for bimtap_ops->endwrite()	2025-02-08 09:58:11 +01:00
raid0.c	md/raid*: Fix the set_queue_limits implementations	2025-02-27 04:30:19 -08:00
raid0.h