tree b02cbcbc876acdeb045aed46433e5a0f83254f12
parent 0b84d89c30eefd3318d039e5660f03ffb2ecb24c
author Kalesh Singh <kaleshsingh@google.com> 1706227827 -0800
committer Kalesh Singh <kaleshsingh@google.com> 1706811213 +0000

ANDROID: mm: Fix VMA ref count after fast-mremap

Since the cmpxchg() to unlock the VMA (reset ref count from -1), is
enclosed in VM_BUG_ON_VMA() it gets compiled out in non-debug builds
(CONFIG_DEBUG_VM=n). This means that any VMA that underwent a fast-remap
will have it's refcount stuck at -1, making it not be eligible for
future speculative faults, and preventing freeing of the VMA.

Bug: 323371343
Bug: 322411509
Change-Id: If5bf61c7d94268700f2c4f096d946201b68abdb8
Signed-off-by: Kalesh Singh <kaleshsingh@google.com>