From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: linux-kernel@vger.kernel.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
stable@vger.kernel.org,
syzbot+582e66e5edf36a22c7b0@syzkaller.appspotmail.com,
Nikolay Borisov <nborisov@suse.com>,
Anand Jain <anand.jain@oracle.com>,
Johannes Thumshirn <johannes.thumshirn@wdc.com>,
David Sterba <dsterba@suse.com>
Subject: [PATCH 5.9 011/152] btrfs: dont access possibly stale fs_info data for printing duplicate device
Date: Tue, 1 Dec 2020 09:52:06 +0100 [thread overview]
Message-ID: <20201201084713.329401921@linuxfoundation.org> (raw)
In-Reply-To: <20201201084711.707195422@linuxfoundation.org>
From: Johannes Thumshirn <johannes.thumshirn@wdc.com>
commit 0697d9a610998b8bdee6b2390836cb2391d8fd1a upstream.
Syzbot reported a possible use-after-free when printing a duplicate device
warning device_list_add().
At this point it can happen that a btrfs_device::fs_info is not correctly
setup yet, so we're accessing stale data, when printing the warning
message using the btrfs_printk() wrappers.
==================================================================
BUG: KASAN: use-after-free in btrfs_printk+0x3eb/0x435 fs/btrfs/super.c:245
Read of size 8 at addr ffff8880878e06a8 by task syz-executor225/7068
CPU: 1 PID: 7068 Comm: syz-executor225 Not tainted 5.9.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1d6/0x29e lib/dump_stack.c:118
print_address_description+0x66/0x620 mm/kasan/report.c:383
__kasan_report mm/kasan/report.c:513 [inline]
kasan_report+0x132/0x1d0 mm/kasan/report.c:530
btrfs_printk+0x3eb/0x435 fs/btrfs/super.c:245
device_list_add+0x1a88/0x1d60 fs/btrfs/volumes.c:943
btrfs_scan_one_device+0x196/0x490 fs/btrfs/volumes.c:1359
btrfs_mount_root+0x48f/0xb60 fs/btrfs/super.c:1634
legacy_get_tree+0xea/0x180 fs/fs_context.c:592
vfs_get_tree+0x88/0x270 fs/super.c:1547
fc_mount fs/namespace.c:978 [inline]
vfs_kern_mount+0xc9/0x160 fs/namespace.c:1008
btrfs_mount+0x33c/0xae0 fs/btrfs/super.c:1732
legacy_get_tree+0xea/0x180 fs/fs_context.c:592
vfs_get_tree+0x88/0x270 fs/super.c:1547
do_new_mount fs/namespace.c:2875 [inline]
path_mount+0x179d/0x29e0 fs/namespace.c:3192
do_mount fs/namespace.c:3205 [inline]
__do_sys_mount fs/namespace.c:3413 [inline]
__se_sys_mount+0x126/0x180 fs/namespace.c:3390
do_syscall_64+0x31/0x70 arch/x86/entry/common.c:46
entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x44840a
RSP: 002b:00007ffedfffd608 EFLAGS: 00000293 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffedfffd670 RCX: 000000000044840a
RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffedfffd630
RBP: 00007ffedfffd630 R08: 00007ffedfffd670 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000001a
R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003
Allocated by task 6945:
kasan_save_stack mm/kasan/common.c:48 [inline]
kasan_set_track mm/kasan/common.c:56 [inline]
__kasan_kmalloc+0x100/0x130 mm/kasan/common.c:461
kmalloc_node include/linux/slab.h:577 [inline]
kvmalloc_node+0x81/0x110 mm/util.c:574
kvmalloc include/linux/mm.h:757 [inline]
kvzalloc include/linux/mm.h:765 [inline]
btrfs_mount_root+0xd0/0xb60 fs/btrfs/super.c:1613
legacy_get_tree+0xea/0x180 fs/fs_context.c:592
vfs_get_tree+0x88/0x270 fs/super.c:1547
fc_mount fs/namespace.c:978 [inline]
vfs_kern_mount+0xc9/0x160 fs/namespace.c:1008
btrfs_mount+0x33c/0xae0 fs/btrfs/super.c:1732
legacy_get_tree+0xea/0x180 fs/fs_context.c:592
vfs_get_tree+0x88/0x270 fs/super.c:1547
do_new_mount fs/namespace.c:2875 [inline]
path_mount+0x179d/0x29e0 fs/namespace.c:3192
do_mount fs/namespace.c:3205 [inline]
__do_sys_mount fs/namespace.c:3413 [inline]
__se_sys_mount+0x126/0x180 fs/namespace.c:3390
do_syscall_64+0x31/0x70 arch/x86/entry/common.c:46
entry_SYSCALL_64_after_hwframe+0x44/0xa9
Freed by task 6945:
kasan_save_stack mm/kasan/common.c:48 [inline]
kasan_set_track+0x3d/0x70 mm/kasan/common.c:56
kasan_set_free_info+0x17/0x30 mm/kasan/generic.c:355
__kasan_slab_free+0xdd/0x110 mm/kasan/common.c:422
__cache_free mm/slab.c:3418 [inline]
kfree+0x113/0x200 mm/slab.c:3756
deactivate_locked_super+0xa7/0xf0 fs/super.c:335
btrfs_mount_root+0x72b/0xb60 fs/btrfs/super.c:1678
legacy_get_tree+0xea/0x180 fs/fs_context.c:592
vfs_get_tree+0x88/0x270 fs/super.c:1547
fc_mount fs/namespace.c:978 [inline]
vfs_kern_mount+0xc9/0x160 fs/namespace.c:1008
btrfs_mount+0x33c/0xae0 fs/btrfs/super.c:1732
legacy_get_tree+0xea/0x180 fs/fs_context.c:592
vfs_get_tree+0x88/0x270 fs/super.c:1547
do_new_mount fs/namespace.c:2875 [inline]
path_mount+0x179d/0x29e0 fs/namespace.c:3192
do_mount fs/namespace.c:3205 [inline]
__do_sys_mount fs/namespace.c:3413 [inline]
__se_sys_mount+0x126/0x180 fs/namespace.c:3390
do_syscall_64+0x31/0x70 arch/x86/entry/common.c:46
entry_SYSCALL_64_after_hwframe+0x44/0xa9
The buggy address belongs to the object at ffff8880878e0000
which belongs to the cache kmalloc-16k of size 16384
The buggy address is located 1704 bytes inside of
16384-byte region [ffff8880878e0000, ffff8880878e4000)
The buggy address belongs to the page:
page:0000000060704f30 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x878e0
head:0000000060704f30 order:3 compound_mapcount:0 compound_pincount:0
flags: 0xfffe0000010200(slab|head)
raw: 00fffe0000010200 ffffea00028e9a08 ffffea00021e3608 ffff8880aa440b00
raw: 0000000000000000 ffff8880878e0000 0000000100000001 0000000000000000
page dumped because: kasan: bad access detected
Memory state around the buggy address:
ffff8880878e0580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
ffff8880878e0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff8880878e0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
^
ffff8880878e0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
ffff8880878e0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================
The syzkaller reproducer for this use-after-free crafts a filesystem image
and loop mounts it twice in a loop. The mount will fail as the crafted
image has an invalid chunk tree. When this happens btrfs_mount_root() will
call deactivate_locked_super(), which then cleans up fs_info and
fs_info::sb. If a second thread now adds the same block-device to the
filesystem, it will get detected as a duplicate device and
device_list_add() will reject the duplicate and print a warning. But as
the fs_info pointer passed in is non-NULL this will result in a
use-after-free.
Instead of printing possibly uninitialized or already freed memory in
btrfs_printk(), explicitly pass in a NULL fs_info so the printing of the
device name will be skipped altogether.
There was a slightly different approach discussed in
https://lore.kernel.org/linux-btrfs/20200114060920.4527-1-anand.jain@oracle.com/t/#u
Link: https://lore.kernel.org/linux-btrfs/000000000000c9e14b05afcc41ba@google.com
Reported-by: syzbot+582e66e5edf36a22c7b0@syzkaller.appspotmail.com
CC: stable@vger.kernel.org # 4.19+
Reviewed-by: Nikolay Borisov <nborisov@suse.com>
Reviewed-by: Anand Jain <anand.jain@oracle.com>
Signed-off-by: Johannes Thumshirn <johannes.thumshirn@wdc.com>
Reviewed-by: David Sterba <dsterba@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
fs/btrfs/volumes.c | 8 +++++++-
1 file changed, 7 insertions(+), 1 deletion(-)
--- a/fs/btrfs/volumes.c
+++ b/fs/btrfs/volumes.c
@@ -941,7 +941,13 @@ static noinline struct btrfs_device *dev
if (device->bdev != path_bdev) {
bdput(path_bdev);
mutex_unlock(&fs_devices->device_list_mutex);
- btrfs_warn_in_rcu(device->fs_info,
+ /*
+ * device->fs_info may not be reliable here, so
+ * pass in a NULL instead. This avoids a
+ * possible use-after-free when the fs_info and
+ * fs_info->sb are already torn down.
+ */
+ btrfs_warn_in_rcu(NULL,
"duplicate device %s devid %llu generation %llu scanned by %s (%d)",
path, devid, found_transid,
current->comm,
next prev parent reply other threads:[~2020-12-01 9:22 UTC|newest]
Thread overview: 161+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-12-01 8:51 [PATCH 5.9 000/152] 5.9.12-rc1 review Greg Kroah-Hartman
2020-12-01 8:51 ` [PATCH 5.9 001/152] io_uring: get an active ref_node from files_data Greg Kroah-Hartman
2020-12-01 8:51 ` [PATCH 5.9 002/152] io_uring: order refnode recycling Greg Kroah-Hartman
2020-12-01 8:51 ` [PATCH 5.9 003/152] spi: bcm-qspi: Fix use-after-free on unbind Greg Kroah-Hartman
2020-12-01 8:51 ` [PATCH 5.9 004/152] spi: bcm2835: " Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 005/152] ipv4: use IS_ENABLED instead of ifdef Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 006/152] IB/hfi1: Ensure correct mm is used at all times Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 007/152] RDMA/i40iw: Address an mmap handler exploit in i40iw Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 008/152] btrfs: fix missing delalloc new bit for new delalloc ranges Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 009/152] btrfs: tree-checker: add missing return after error in root_item Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 010/152] btrfs: tree-checker: add missing returns after data_ref alignment checks Greg Kroah-Hartman
2020-12-01 8:52 ` Greg Kroah-Hartman [this message]
2020-12-01 8:52 ` [PATCH 5.9 012/152] btrfs: fix lockdep splat when reading qgroup config on mount Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 013/152] rtc: pcf2127: fix a bug when not specify interrupts property Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 014/152] s390: fix fpu restore in entry.S Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 015/152] mm: fix VM_BUG_ON(PageTail) and BUG_ON(PageWriteback) Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 016/152] smb3: Call cifs reconnect from demultiplex thread Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 017/152] smb3: Avoid Mid pending list corruption Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 018/152] smb3: Handle error case during offload read path Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 019/152] cifs: fix a memleak with modefromsid Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 020/152] powerpc/64s: Fix KVM system reset handling when CONFIG_PPC_PSERIES=y Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 021/152] powerpc/64s/exception: KVM Fix for host DSI being taken in HPT guest MMU context Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 022/152] KVM: PPC: Book3S HV: XIVE: Fix possible oops when accessing ESB page Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 023/152] KVM: arm64: vgic-v3: Drop the reporting of GICR_TYPER.Last for userspace Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 024/152] KVM: x86: handle !lapic_in_kernel case in kvm_cpu_*_extint Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 025/152] KVM: x86: Fix split-irqchip vs interrupt injection window request Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 026/152] iommu/vt-d: Dont read VCCAP register unless it exists Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 027/152] firmware: xilinx: Use hash-table for api feature check Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 028/152] drm/amdgpu: fix SI UVD firmware validate resume fail Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 029/152] io_uring: fix ITER_BVEC check Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 030/152] trace: fix potenial dangerous pointer Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 031/152] arm64: tegra: Correct the UART for Jetson Xavier NX Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 032/152] arm64: tegra: Fix USB_VBUS_EN0 regulator on Jetson TX1 Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 033/152] arm64: pgtable: Fix pte_accessible() Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 034/152] arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect() Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 035/152] drm/amdgpu: fix a page fault Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 036/152] drm/amdgpu: update golden setting for sienna_cichlid Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 037/152] drm/amd/amdgpu: fix null pointer in runtime pm Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 038/152] drm/amd/display: Avoid HDCP initialization in devices without output Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 039/152] HID: uclogic: Add ID for Trust Flex Design Tablet Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 040/152] HID: ite: Replace ABS_MISC 120/121 events with touchpad on/off keypresses Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 041/152] HID: cypress: Support Varmilo Keyboards media hotkeys Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 042/152] HID: add support for Sega Saturn Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 043/152] Input: i8042 - allow insmod to succeed on devices without an i8042 controller Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 044/152] HID: hid-sensor-hub: Fix issue with devices with no report ID Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 045/152] staging: ralink-gdma: fix kconfig dependency bug for DMA_RALINK Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 046/152] HID: add HID_QUIRK_INCREMENT_USAGE_ON_DUPLICATE for Gamevice devices Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 047/152] dmaengine: xilinx_dma: use readl_poll_timeout_atomic variant Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 048/152] x86/xen: dont unbind uninitialized lock_kicker_irq Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 049/152] kunit: fix display of failed expectations for strings Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 050/152] HID: logitech-hidpp: Add HIDPP_CONSUMER_VENDOR_KEYS quirk for the Dinovo Edge Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 051/152] HID: Add Logitech Dinovo Edge battery quirk Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 052/152] proc: dont allow async path resolution of /proc/self components Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 053/152] nvme: free sq/cq dbbuf pointers when dbbuf set fails Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 054/152] io_uring: handle -EOPNOTSUPP on path resolution Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 055/152] net: stmmac: dwmac_lib: enlarge dma reset timeout Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 056/152] vdpasim: fix "mac_pton" undefined error Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 057/152] vhost: add helper to check if a vq has been setup Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 058/152] vhost scsi: alloc cmds per vq instead of session Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 059/152] vhost scsi: fix cmd completion race Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 060/152] cpuidle: tegra: Annotate tegra_pm_set_cpu_in_lp2() with RCU_NONIDLE Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 061/152] dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 062/152] scsi: libiscsi: Fix NOP race condition Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 063/152] scsi: target: iscsi: Fix cmd abort fabric stop race Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 064/152] lockdep: Put graph lock/unlock under lock_recursion protection Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 065/152] perf/x86: fix sysfs type mismatches Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 066/152] xtensa: uaccess: Add missing __user to strncpy_from_user() prototype Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 067/152] x86/dumpstack: Do not try to access user space code of other tasks Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 068/152] net: dsa: mv88e6xxx: Wait for EEPROM done after HW reset Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 069/152] bus: ti-sysc: Fix reset status check for modules with quirks Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 070/152] bus: ti-sysc: Fix bogus resetdone warning on enable for cpsw Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 071/152] ARM: OMAP2+: Manage MPU state properly for omap_enter_idle_coupled() Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 072/152] phy: tegra: xusb: Fix dangling pointer on probe failure Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 073/152] iwlwifi: mvm: use the HOT_SPOT_CMD to cancel an AUX ROC Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 074/152] iwlwifi: mvm: properly cancel a session protection for P2P Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 075/152] iwlwifi: mvm: write queue_sync_state only for sync Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 076/152] KVM: s390: pv: Mark mm as protected after the set secure parameters and improve cleanup Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 077/152] KVM: s390: remove diag318 reset code Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 078/152] btrfs: qgroup: dont commit transaction when we already hold the handle Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 079/152] batman-adv: set .owner to THIS_MODULE Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 080/152] usb: cdns3: gadget: fix some endian issues Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 081/152] usb: cdns3: gadget: calculate TD_SIZE based on TD Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 082/152] phy: qualcomm: usb: Fix SuperSpeed PHY OF dependency Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 083/152] phy: qualcomm: Fix 28 nm Hi-Speed USB " Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 084/152] arch: pgtable: define MAX_POSSIBLE_PHYSMEM_BITS where needed Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 085/152] bus: ti-sysc: suppress err msg for timers used as clockevent/source Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 086/152] ARM: dts: dra76x: m_can: fix order of clocks Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 087/152] scsi: ufs: Fix race between shutdown and runtime resume flow Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 088/152] bnxt_en: fix error return code in bnxt_init_one() Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 089/152] bnxt_en: fix error return code in bnxt_init_board() Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 090/152] video: hyperv_fb: Fix the cache type when mapping the VRAM Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 091/152] bnxt_en: Release PCI regions when DMA mask setup fails during probe Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 092/152] block/keyslot-manager: prevent crash when num_slots=1 Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 093/152] cxgb4: fix the panic caused by non smac rewrite Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 094/152] dpaa2-eth: select XGMAC_MDIO for MDIO bus support Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 095/152] s390/qeth: make af_iucv TX notification call more robust Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 096/152] s390/qeth: fix af_iucv notification race Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 097/152] s390/qeth: fix tear down of async TX buffers Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 098/152] drm/mediatek: dsi: Modify horizontal front/back porch byte formula Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 099/152] bonding: wait for sysfs kobject destruction before freeing struct slave Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 100/152] ibmvnic: fix call_netdevice_notifiers in do_reset Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 101/152] ibmvnic: notify peers when failover and migration happen Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 102/152] powerpc/64s: Fix allnoconfig build since uaccess flush Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 103/152] iommu: Check return of __iommu_attach_device() Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 104/152] IB/mthca: fix return value of error branch in mthca_init_cq() Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 105/152] i40e: Fix removing driver while bare-metal VFs pass traffic Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 106/152] firmware: xilinx: Fix SD DLL node reset issue Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 107/152] spi: imx: fix the unbalanced spi runtime pm management Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 108/152] io_uring: fix shift-out-of-bounds when round up cq size Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 109/152] aquantia: Remove the build_skb path Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 110/152] nfc: s3fwrn5: use signed integer for parsing GPIO numbers Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 111/152] net: ena: handle bad request id in ena_netdev Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 112/152] net: ena: set initial DMA width to avoid intel iommu issue Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 113/152] net: ena: fix packets addresses for rx_offset feature Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 114/152] ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 115/152] ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 116/152] ibmvnic: enhance resetting status check during module exit Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 117/152] optee: add writeback to valid memory type Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 118/152] x86/tboot: Dont disable swiotlb when iommu is forced on Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 119/152] arm64: tegra: Wrong AON HSP reg property size Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 120/152] efi/efivars: Set generic ops before loading SSDT Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 121/152] efivarfs: revert "fix memory leak in efivarfs_create()" Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 122/152] efi: EFI_EARLYCON should depend on EFI Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 123/152] riscv: Explicitly specify the build id style in vDSO Makefile again Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 124/152] RISC-V: Add missing jump label initialization Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 125/152] RISC-V: fix barrier() use in <vdso/processor.h> Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 126/152] net: stmmac: fix incorrect merge of patch upstream Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 127/152] enetc: Let the hardware auto-advance the taprio base-time of 0 Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 128/152] ptp: clockmatrix: bug fix for idtcm_strverscmp Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 129/152] drm/nouveau: fix relocations applying logic and a double-free Greg Kroah-Hartman
2020-12-01 8:54 ` Greg Kroah-Hartman
2020-12-01 8:54 ` Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 130/152] can: gs_usb: fix endianess problem with candleLight firmware Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 131/152] platform/x86: thinkpad_acpi: Send tablet mode switch at wakeup time Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 132/152] platform/x86: toshiba_acpi: Fix the wrong variable assignment Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 133/152] RDMA/hns: Fix wrong field of SRQ number the device supports Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 134/152] RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 135/152] RDMA/hns: Bugfix for memory window mtpt configuration Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 136/152] can: m_can: m_can_open(): remove IRQF_TRIGGER_FALLING from request_threaded_irq()s flags Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 137/152] can: m_can: fix nominal bitiming tseg2 min for version >= 3.1 Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 138/152] perf record: Synthesize cgroup events only if needed Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 139/152] perf stat: Use proper cpu for shadow stats Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 140/152] perf probe: Fix to die_entrypc() returns error correctly Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 141/152] spi: bcm2835aux: Restore err assignment in bcm2835aux_spi_probe Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 142/152] USB: core: Change %pK for __user pointers to %px Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 143/152] usb: gadget: f_midi: Fix memleak in f_midi_alloc Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 144/152] USB: core: Fix regression in Hercules audio card Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 145/152] USB: quirks: Add USB_QUIRK_DISCONNECT_SUSPEND quirk for Lenovo A630Z TIO built-in usb-audio card Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 146/152] usb: gadget: Fix memleak in gadgetfs_fill_super Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 147/152] irqchip/exiu: Fix the index of fwspec for IRQ type Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 148/152] x86/mce: Do not overwrite no_way_out if mce_end() fails Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 149/152] x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 150/152] x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 151/152] x86/resctrl: Add necessary kernfs_put() " Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 152/152] drm/amdgpu: add rlc iram and dram firmware support Greg Kroah-Hartman
2020-12-01 13:39 ` [PATCH 5.9 000/152] 5.9.12-rc1 review Jon Hunter
2020-12-01 18:21 ` Jeffrin Jose T
2020-12-01 21:40 ` Guenter Roeck
2020-12-02 4:50 ` Naresh Kamboju
2020-12-02 16:57 ` Shuah Khan
2020-12-02 17:46 ` Greg Kroah-Hartman
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20201201084713.329401921@linuxfoundation.org \
--to=gregkh@linuxfoundation.org \
--cc=anand.jain@oracle.com \
--cc=dsterba@suse.com \
--cc=johannes.thumshirn@wdc.com \
--cc=linux-kernel@vger.kernel.org \
--cc=nborisov@suse.com \
--cc=stable@vger.kernel.org \
--cc=syzbot+582e66e5edf36a22c7b0@syzkaller.appspotmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.