mm/mmap: Fix unmapped_area_topdown with align_offset

align_offset should be aligned to align_mask.. apparently.

Signed-off-by: Liam R. Howlett <Liam.Howlett@Oracle.com>

diff --git a/mm/mmap.c b/mm/mmap.c
index 00938d556e83908cab89a1f05c8dfb2b369e6e5c..23191dc600126649fd60611220ac98a588656ea5 100644 (file)
--- a/mm/mmap.c
+++ b/mm/mmap.c
@@ -2265,8 +2265,8 @@ static unsigned long unmapped_area_topdown(struct vm_unmapped_area_info *info)
                return -ENOMEM;
 
        rcu_read_unlock();
-       gap = (mas.index + info->align_mask - info->align_offset) &
-               (~info->align_mask);
+       gap = (mas.index + info->align_mask) & ~info->align_mask;
+       gap -= info->align_offset & info->align_mask;
        /*
         * Adjust search limits by the desired length.
         * See implementation comment at top of unmapped_area().