Nigel Croxon 8fc3d7b23d raid10: cleanup memleak at raid10_make_request ... [ Upstream commit 43806c3d5b ] If raid10_read_request or raid10_write_request registers a new request and the REQ_NOWAIT flag is set, the code does not free the malloc from the mempool. unreferenced object 0xffff8884802c3200 (size 192): comm "fio", pid 9197, jiffies 4298078271 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 88 41 02 00 00 00 00 00 .........A...... 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc c1a049a2): __kmalloc+0x2bb/0x450 mempool_alloc+0x11b/0x320 raid10_make_request+0x19e/0x650 [raid10] md_handle_request+0x3b3/0x9e0 __submit_bio+0x394/0x560 __submit_bio_noacct+0x145/0x530 submit_bio_noacct_nocheck+0x682/0x830 __blkdev_direct_IO_async+0x4dc/0x6b0 blkdev_read_iter+0x1e5/0x3b0 __io_read+0x230/0x1110 io_read+0x13/0x30 io_issue_sqe+0x134/0x1180 io_submit_sqes+0x48c/0xe90 __do_sys_io_uring_enter+0x574/0x8b0 do_syscall_64+0x5c/0xe0 entry_SYSCALL_64_after_hwframe+0x76/0x7e V4: changing backing tree to see if CKI tests will pass. The patch code has not changed between any versions. Fixes: c9aa889b03 ("md: raid10 add nowait support") Signed-off-by: Nigel Croxon <ncroxon@redhat.com> Link: https://lore.kernel.org/linux-raid/c0787379-9caa-42f3-b5fc-369aed784400@redhat.com Signed-off-by: Yu Kuai <yukuai3@huawei.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2025-07-17 18:35:18 +02:00
..
bcache	bcache: fix NULL pointer in cache_set_flush()	2025-07-06 11:00:07 +02:00
persistent-data	dm array: fix cursor index when skipping across block boundaries	2025-01-17 13:36:10 +01:00
dm-audit.c
dm-audit.h
dm-bio-prison-v1.c
dm-bio-prison-v1.h
dm-bio-prison-v2.c
dm-bio-prison-v2.h
dm-bio-record.h
dm-bufio.c	dm-bufio: don't schedule in atomic context	2025-05-09 09:43:52 +02:00
dm-builtin.c
dm-cache-background-tracker.c	dm-cache: fix warnings about duplicate slab caches	2024-12-09 10:32:40 +01:00
dm-cache-background-tracker.h	dm-cache: fix warnings about duplicate slab caches	2024-12-09 10:32:40 +01:00
dm-cache-block-types.h
dm-cache-metadata.c
dm-cache-metadata.h
dm-cache-policy-internal.h
dm-cache-policy-smq.c	dm cache policy smq: ensure IO doesn't prevent cleaner policy progress	2023-07-25 11:55:50 -04:00
dm-cache-policy.c
dm-cache-policy.h
dm-cache-target.c	dm cache: prevent BUG_ON by blocking retries on failed device resumes	2025-06-04 14:42:02 +02:00
dm-clone-metadata.c	bitmap: introduce generic optimized bitmap_size()	2024-08-29 17:33:14 +02:00
dm-clone-metadata.h
dm-clone-target.c
dm-core.h	dm: limit the number of targets and parameter size area	2024-02-23 09:25:27 +01:00
dm-crypt.c	dm-crypt: track tag_offset in convert_context	2025-02-17 09:40:25 +01:00
dm-delay.c	dm-delay: fix a race between delay_presuspend and delay_bio	2023-12-03 07:33:09 +01:00
dm-dust.c
dm-ebs-target.c	dm-ebs: fix prefetch-vs-suspend race	2025-04-25 10:45:33 +02:00
dm-era-target.c
dm-exception-store.c
dm-exception-store.h
dm-flakey.c	dm-flakey: make corrupting read bios work	2025-06-19 15:28:26 +02:00
dm-ima.c
dm-ima.h
dm-init.c	dm init: Handle minors larger than 255	2024-09-12 11:11:35 +02:00
dm-integrity.c	dm-integrity: fix a warning on invalid table line	2025-05-09 09:43:52 +02:00
dm-io-rewind.c
dm-io-tracker.h
dm-io.c	dm io: Support IO priority	2024-03-26 18:20:13 -04:00
dm-ioctl.c	dm resume: don't return EINVAL when signalled	2024-08-29 17:33:13 +02:00
dm-kcopyd.c	dm io: Support IO priority	2024-03-26 18:20:13 -04:00
dm-linear.c
dm-log-userspace-base.c
dm-log-userspace-transfer.c
dm-log-userspace-transfer.h
dm-log-writes.c
dm-log.c	dm io: Support IO priority	2024-03-26 18:20:13 -04:00
dm-mpath.c
dm-mpath.h
dm-path-selector.c
dm-path-selector.h
dm-ps-historical-service-time.c
dm-ps-io-affinity.c
dm-ps-queue-length.c
dm-ps-round-robin.c
dm-ps-service-time.c
dm-raid.c	dm-raid: fix variable in journal device check	2025-07-06 11:00:13 +02:00
dm-raid1.c	dm-mirror: fix a tiny race condition	2025-06-27 11:08:49 +01:00
dm-region-hash.c
dm-rq.c	Revert "dm: requeue IO if mapping table not yet available"	2024-10-04 16:29:40 +02:00
dm-rq.h
dm-snap-persistent.c	dm io: Support IO priority	2024-03-26 18:20:13 -04:00
dm-snap-transient.c
dm-snap.c	dm snapshot: fix lockup in dm_exception_table_exit	2024-04-03 15:28:37 +02:00
dm-stats.c
dm-stats.h
dm-stripe.c
dm-switch.c
dm-sysfs.c
dm-table.c	dm: restrict dm device size to 2^63-512 bytes	2025-06-04 14:41:59 +02:00
dm-target.c
dm-thin-metadata.c
dm-thin-metadata.h
dm-thin.c	dm thin: make get_first_thin use rcu-safe list first function	2025-01-17 13:36:17 +01:00
dm-uevent.c
dm-uevent.h
dm-unstripe.c	dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow	2024-11-14 13:19:37 +01:00
dm-verity-fec.c	dm-verity: fix a memory leak if some arguments are specified multiple times	2025-06-27 11:08:49 +01:00
dm-verity-fec.h
dm-verity-loadpin.c
dm-verity-target.c	dm-verity: fix a memory leak if some arguments are specified multiple times	2025-06-27 11:08:49 +01:00
dm-verity-verify-sig.c	dm-verity: fix a memory leak if some arguments are specified multiple times	2025-06-27 11:08:49 +01:00
dm-verity-verify-sig.h
dm-verity.h	dm-verity, dm-crypt: align "struct bvec_iter" correctly	2024-03-26 18:19:12 -04:00
dm-writecache.c	dm io: Support IO priority	2024-03-26 18:20:13 -04:00
dm-zero.c
dm-zone.c
dm-zoned-metadata.c
dm-zoned-reclaim.c
dm-zoned-target.c	dm zoned: free dmz->ddev array in dmz_put_zoned_devices	2023-09-20 13:48:06 -04:00
dm-zoned.h
dm.c	dm: free table mempools if not used in __bind	2025-06-19 15:28:26 +02:00
dm.h
Kconfig	dm audit: fix Kconfig so DM_AUDIT depends on BLK_DEV_DM	2024-01-20 11:51:45 +01:00
Makefile
md-autodetect.c
md-bitmap.c	md/md-bitmap: fix GPF in bitmap_get_stats()	2025-07-17 18:35:13 +02:00
md-bitmap.h	md/md-bitmap: add 'sync_size' into struct md_bitmap_stats	2025-02-27 04:10:44 -08:00
md-cluster.c	md/md-bitmap: add 'sync_size' into struct md_bitmap_stats	2025-02-27 04:10:44 -08:00
md-cluster.h
md-faulty.c	md/md-faulty: enable io accounting	2023-07-27 00:13:30 -07:00
md-linear.c	md/md-linear: enable io accounting	2023-07-27 00:13:30 -07:00
md-linear.h
md-multipath.c	md/md-multipath: enable io accounting	2023-07-27 00:13:29 -07:00
md-multipath.h
md.c	md: fix mddev uaf while iterating all_mddevs list	2025-04-25 10:45:54 +02:00
md.h	md: use separate work_struct for md_start_sync()	2025-02-27 04:10:44 -08:00
raid1-10.c
raid1.c	md/raid1: Fix stack memory use after return in raid1_reshape	2025-07-17 18:35:18 +02:00
raid1.h	md/md-bitmap: remove the last parameter for bimtap_ops->endwrite()	2025-02-21 13:57:26 +01:00
raid5-cache.c	md/md-bitmap: move bitmap_{start, end}write to md upper layer	2025-02-21 13:57:26 +01:00
raid5-log.h
raid5-ppl.c
raid5.c	md/md-bitmap: move bitmap_{start, end}write to md upper layer	2025-02-21 13:57:26 +01:00
raid5.h	md/md-bitmap: move bitmap_{start, end}write to md upper layer	2025-02-21 13:57:26 +01:00
raid10.c	raid10: cleanup memleak at raid10_make_request	2025-07-17 18:35:18 +02:00
raid10.h	md/md-bitmap: remove the last parameter for bimtap_ops->endwrite()	2025-02-21 13:57:26 +01:00
raid0.c	md: raid0: account for split bio in iostat accounting	2023-08-17 21:11:31 -07:00
raid0.h