mm/mremap.c: fix extent calculation

When `next < old_addr`, `next - old_addr` arithmetic underflows causing
`extent` to be incorrect.

Make `extent` the smaller of `next - old_addr` or `old_end - old_addr`.

Link: https://lkml.kernel.org/r/[e-mail]
Fixes: c49dd34018026 ("mm: speedup mremap on 1GB or larger regions")
Signed-off-by: Kalesh Singh <[e-mail]>
Reported-by: Guenter Roeck <[e-mail]>
Tested-by: Guenter Roeck <[e-mail]>
Cc: Suren Baghdasaryan <[e-mail]>
Cc: Minchan Kim <[e-mail]>
Cc: Lokesh Gidra <[e-mail]>
Cc: Helge Deller <[e-mail]>
Cc: Kalesh Singh <[e-mail]>
Cc: "Kirill A. Shutemov" <[e-mail]>
Signed-off-by: Andrew Morton <[e-mail]>
Signed-off-by: Linus Torvalds <[e-mail]>

mm/mremap.c

···
 
 	next = (old_addr + size) & mask;
 	/* even if next overflowed, extent below will be ok */
-	extent = (next > old_end) ? old_end - old_addr : next - old_addr;
+	extent = next - old_addr;
+	if (extent > old_end - old_addr)
+		extent = old_end - old_addr;
 	next = (new_addr + size) & mask;
 	if (extent > next - new_addr)
 		extent = next - new_addr;