linux-kernel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: linux-kernel@vger.kernel.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
	stable@vger.kernel.org, Yan Wang <wangyan122@huawei.com>,
	Theodore Tso <tytso@mit.edu>, Jun Piao <piaojun@huawei.com>,
	Jan Kara <jack@suse.cz>,
	stable@kernel.org
Subject: [PATCH 5.5 058/150] jbd2: fix ocfs2 corrupt when clearing block group bits
Date: Thu, 27 Feb 2020 14:36:35 +0100	[thread overview]
Message-ID: <20200227132241.652559370@linuxfoundation.org> (raw)
In-Reply-To: <20200227132232.815448360@linuxfoundation.org>

From: wangyan <wangyan122@huawei.com>

commit 8eedabfd66b68a4623beec0789eac54b8c9d0fb6 upstream.

I found a NULL pointer dereference in ocfs2_block_group_clear_bits().
The running environment:
	kernel version: 4.19
	A cluster with two nodes, 5 luns mounted on two nodes, and do some
	file operations like dd/fallocate/truncate/rm on every lun with storage
	network disconnection.

The fallocate operation on dm-23-45 caused an null pointer dereference.

The information of NULL pointer dereference as follows:
	[577992.878282] JBD2: Error -5 detected when updating journal superblock for dm-23-45.
	[577992.878290] Aborting journal on device dm-23-45.
	...
	[577992.890778] JBD2: Error -5 detected when updating journal superblock for dm-24-46.
	[577992.890908] __journal_remove_journal_head: freeing b_committed_data
	[577992.890916] (fallocate,88392,52):ocfs2_extend_trans:474 ERROR: status = -30
	[577992.890918] __journal_remove_journal_head: freeing b_committed_data
	[577992.890920] (fallocate,88392,52):ocfs2_rotate_tree_right:2500 ERROR: status = -30
	[577992.890922] __journal_remove_journal_head: freeing b_committed_data
	[577992.890924] (fallocate,88392,52):ocfs2_do_insert_extent:4382 ERROR: status = -30
	[577992.890928] (fallocate,88392,52):ocfs2_insert_extent:4842 ERROR: status = -30
	[577992.890928] __journal_remove_journal_head: freeing b_committed_data
	[577992.890930] (fallocate,88392,52):ocfs2_add_clusters_in_btree:4947 ERROR: status = -30
	[577992.890933] __journal_remove_journal_head: freeing b_committed_data
	[577992.890939] __journal_remove_journal_head: freeing b_committed_data
	[577992.890949] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000020
	[577992.890950] Mem abort info:
	[577992.890951]   ESR = 0x96000004
	[577992.890952]   Exception class = DABT (current EL), IL = 32 bits
	[577992.890952]   SET = 0, FnV = 0
	[577992.890953]   EA = 0, S1PTW = 0
	[577992.890954] Data abort info:
	[577992.890955]   ISV = 0, ISS = 0x00000004
	[577992.890956]   CM = 0, WnR = 0
	[577992.890958] user pgtable: 4k pages, 48-bit VAs, pgdp = 00000000f8da07a9
	[577992.890960] [0000000000000020] pgd=0000000000000000
	[577992.890964] Internal error: Oops: 96000004 [#1] SMP
	[577992.890965] Process fallocate (pid: 88392, stack limit = 0x00000000013db2fd)
	[577992.890968] CPU: 52 PID: 88392 Comm: fallocate Kdump: loaded Tainted: G        W  OE     4.19.36 #1
	[577992.890969] Hardware name: Huawei TaiShan 2280 V2/BC82AMDD, BIOS 0.98 08/25/2019
	[577992.890971] pstate: 60400009 (nZCv daif +PAN -UAO)
	[577992.891054] pc : _ocfs2_free_suballoc_bits+0x63c/0x968 [ocfs2]
	[577992.891082] lr : _ocfs2_free_suballoc_bits+0x618/0x968 [ocfs2]
	[577992.891084] sp : ffff0000c8e2b810
	[577992.891085] x29: ffff0000c8e2b820 x28: 0000000000000000
	[577992.891087] x27: 00000000000006f3 x26: ffffa07957b02e70
	[577992.891089] x25: ffff807c59d50000 x24: 00000000000006f2
	[577992.891091] x23: 0000000000000001 x22: ffff807bd39abc30
	[577992.891093] x21: ffff0000811d9000 x20: ffffa07535d6a000
	[577992.891097] x19: ffff000001681638 x18: ffffffffffffffff
	[577992.891098] x17: 0000000000000000 x16: ffff000080a03df0
	[577992.891100] x15: ffff0000811d9708 x14: 203d207375746174
	[577992.891101] x13: 73203a524f525245 x12: 20373439343a6565
	[577992.891103] x11: 0000000000000038 x10: 0101010101010101
	[577992.891106] x9 : ffffa07c68a85d70 x8 : 7f7f7f7f7f7f7f7f
	[577992.891109] x7 : 0000000000000000 x6 : 0000000000000080
	[577992.891110] x5 : 0000000000000000 x4 : 0000000000000002
	[577992.891112] x3 : ffff000001713390 x2 : 2ff90f88b1c22f00
	[577992.891114] x1 : ffff807bd39abc30 x0 : 0000000000000000
	[577992.891116] Call trace:
	[577992.891139]  _ocfs2_free_suballoc_bits+0x63c/0x968 [ocfs2]
	[577992.891162]  _ocfs2_free_clusters+0x100/0x290 [ocfs2]
	[577992.891185]  ocfs2_free_clusters+0x50/0x68 [ocfs2]
	[577992.891206]  ocfs2_add_clusters_in_btree+0x198/0x5e0 [ocfs2]
	[577992.891227]  ocfs2_add_inode_data+0x94/0xc8 [ocfs2]
	[577992.891248]  ocfs2_extend_allocation+0x1bc/0x7a8 [ocfs2]
	[577992.891269]  ocfs2_allocate_extents+0x14c/0x338 [ocfs2]
	[577992.891290]  __ocfs2_change_file_space+0x3f8/0x610 [ocfs2]
	[577992.891309]  ocfs2_fallocate+0xe4/0x128 [ocfs2]
	[577992.891316]  vfs_fallocate+0x11c/0x250
	[577992.891317]  ksys_fallocate+0x54/0x88
	[577992.891319]  __arm64_sys_fallocate+0x28/0x38
	[577992.891323]  el0_svc_common+0x78/0x130
	[577992.891325]  el0_svc_handler+0x38/0x78
	[577992.891327]  el0_svc+0x8/0xc

My analysis process as follows:
ocfs2_fallocate
  __ocfs2_change_file_space
    ocfs2_allocate_extents
      ocfs2_extend_allocation
        ocfs2_add_inode_data
          ocfs2_add_clusters_in_btree
            ocfs2_insert_extent
              ocfs2_do_insert_extent
                ocfs2_rotate_tree_right
                  ocfs2_extend_rotate_transaction
                    ocfs2_extend_trans
                      jbd2_journal_restart
                        jbd2__journal_restart
                          /* handle->h_transaction is NULL,
                           * is_handle_aborted(handle) is true
                           */
                          handle->h_transaction = NULL;
                          start_this_handle
                            return -EROFS;
            ocfs2_free_clusters
              _ocfs2_free_clusters
                _ocfs2_free_suballoc_bits
                  ocfs2_block_group_clear_bits
                    ocfs2_journal_access_gd
                      __ocfs2_journal_access
                        jbd2_journal_get_undo_access
                          /* I think jbd2_write_access_granted() will
                           * return true, because do_get_write_access()
                           * will return -EROFS.
                           */
                          if (jbd2_write_access_granted(...)) return 0;
                          do_get_write_access
                            /* handle->h_transaction is NULL, it will
                             * return -EROFS here, so do_get_write_access()
                             * was not called.
                             */
                            if (is_handle_aborted(handle)) return -EROFS;
                    /* bh2jh(group_bh) is NULL, caused NULL
                       pointer dereference */
                    undo_bg = (struct ocfs2_group_desc *)
                                bh2jh(group_bh)->b_committed_data;

If handle->h_transaction == NULL, then jbd2_write_access_granted()
does not really guarantee that journal_head will stay around,
not even speaking of its b_committed_data. The bh2jh(group_bh)
can be removed after ocfs2_journal_access_gd() and before call
"bh2jh(group_bh)->b_committed_data". So, we should move
is_handle_aborted() check from do_get_write_access() into
jbd2_journal_get_undo_access() and jbd2_journal_get_write_access()
before the call to jbd2_write_access_granted().

Link: https://lore.kernel.org/r/f72a623f-b3f1-381a-d91d-d22a1c83a336@huawei.com
Signed-off-by: Yan Wang <wangyan122@huawei.com>
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
Reviewed-by: Jun Piao <piaojun@huawei.com>
Reviewed-by: Jan Kara <jack@suse.cz>
Cc: stable@kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

---
 fs/jbd2/transaction.c |    8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

--- a/fs/jbd2/transaction.c
+++ b/fs/jbd2/transaction.c
@@ -936,8 +936,6 @@ do_get_write_access(handle_t *handle, st
 	char *frozen_buffer = NULL;
 	unsigned long start_lock, time_lock;
 
-	if (is_handle_aborted(handle))
-		return -EROFS;
 	journal = transaction->t_journal;
 
 	jbd_debug(5, "journal_head %p, force_copy %d\n", jh, force_copy);
@@ -1189,6 +1187,9 @@ int jbd2_journal_get_write_access(handle
 	struct journal_head *jh;
 	int rc;
 
+	if (is_handle_aborted(handle))
+		return -EROFS;
+
 	if (jbd2_write_access_granted(handle, bh, false))
 		return 0;
 
@@ -1326,6 +1327,9 @@ int jbd2_journal_get_undo_access(handle_
 	struct journal_head *jh;
 	char *committed_data = NULL;
 
+	if (is_handle_aborted(handle))
+		return -EROFS;
+
 	if (jbd2_write_access_granted(handle, bh, true))
 		return 0;
 



  parent reply	other threads:[~2020-02-27 14:15 UTC|newest]

Thread overview: 166+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2020-02-27 13:35 [PATCH 5.5 000/150] 5.5.7-stable review Greg Kroah-Hartman
2020-02-27 13:35 ` [PATCH 5.5 001/150] iommu/qcom: Fix bogus detach logic Greg Kroah-Hartman
2020-02-27 13:35 ` [PATCH 5.5 002/150] iommu/vt-d: Add attach_deferred() helper Greg Kroah-Hartman
2020-02-27 13:35 ` [PATCH 5.5 003/150] iommu/vt-d: Move deferred device attachment into helper function Greg Kroah-Hartman
2020-02-27 13:35 ` [PATCH 5.5 004/150] iommu/vt-d: Do deferred attachment in iommu_need_mapping() Greg Kroah-Hartman
2020-02-27 13:35 ` [PATCH 5.5 005/150] iommu/vt-d: Remove deferred_attach_domain() Greg Kroah-Hartman
2020-02-27 13:35 ` [PATCH 5.5 006/150] iommu/vt-d: Simplify check in identity_mapping() Greg Kroah-Hartman
2020-02-27 13:35 ` [PATCH 5.5 007/150] ALSA: hda: Use scnprintf() for printing texts for sysfs/procfs Greg Kroah-Hartman
2020-02-27 13:35 ` [PATCH 5.5 008/150] ALSA: hda/realtek - Apply quirk for MSI GP63, too Greg Kroah-Hartman
2020-02-27 13:35 ` [PATCH 5.5 009/150] ALSA: hda/realtek - Apply quirk for yet another MSI laptop Greg Kroah-Hartman
2020-02-27 13:35 ` [PATCH 5.5 010/150] ASoC: codec2codec: avoid invalid/double-free of pcm runtime Greg Kroah-Hartman
2020-02-27 13:35 ` [PATCH 5.5 011/150] ASoC: sun8i-codec: Fix setting DAI data format Greg Kroah-Hartman
2020-02-27 13:35 ` [PATCH 5.5 012/150] tpm: Revert tpm_tis_spi_mod.ko to tpm_tis_spi.ko Greg Kroah-Hartman
2020-02-27 13:35 ` [PATCH 5.5 013/150] tpm: Initialize crypto_id of allocated_banks to HASH_ALGO__LAST Greg Kroah-Hartman
2020-02-27 13:35 ` [PATCH 5.5 014/150] ecryptfs: fix a memory leak bug in parse_tag_1_packet() Greg Kroah-Hartman
2020-02-27 13:35 ` [PATCH 5.5 015/150] ecryptfs: fix a memory leak bug in ecryptfs_init_messaging() Greg Kroah-Hartman
2020-02-27 13:35 ` [PATCH 5.5 016/150] Btrfs: fix race between shrinking truncate and fiemap Greg Kroah-Hartman
2020-02-27 13:35 ` [PATCH 5.5 017/150] btrfs: dont set path->leave_spinning for truncate Greg Kroah-Hartman
2020-02-27 13:35 ` [PATCH 5.5 018/150] btrfs: handle logged extent failure properly Greg Kroah-Hartman
2020-02-27 13:35 ` [PATCH 5.5 019/150] thunderbolt: Prevent crash if non-active NVMem file is read Greg Kroah-Hartman
2020-02-27 13:35 ` [PATCH 5.5 020/150] USB: misc: iowarrior: add support for 2 OEMed devices Greg Kroah-Hartman
2020-02-27 13:35 ` [PATCH 5.5 021/150] USB: misc: iowarrior: add support for the 28 and 28L devices Greg Kroah-Hartman
2020-02-27 13:35 ` [PATCH 5.5 022/150] USB: misc: iowarrior: add support for the 100 device Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 023/150] floppy: check FDC index for errors before assigning it Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 024/150] USB: serial: ch341: fix receiver regression Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 025/150] vt: fix scrollback flushing on background consoles Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 026/150] vt: selection, handle pending signals in paste_selection Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 027/150] vt: selection, close sel_buffer race Greg Kroah-Hartman
2020-02-28  6:54   ` Jiri Slaby
2020-02-28 11:46     ` Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 028/150] vt: vt_ioctl: fix race in VT_RESIZEX Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 029/150] staging: android: ashmem: Disallow ashmem memory from being remapped Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 030/150] staging: vt6656: fix sign of rx_dbm to bb_pre_ed_rssi Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 031/150] xhci: Force Maximum Packet size for Full-speed bulk devices to valid range Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 032/150] xhci: fix runtime pm enabling for quirky Intel hosts Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 033/150] xhci: apply XHCI_PME_STUCK_QUIRK to Intel Comet Lake platforms Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 034/150] xhci: Fix memory leak when caching protocol extended capability PSI tables - take 2 Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 035/150] USB: core: add endpoint-blacklist quirk Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 036/150] USB: quirks: blacklist duplicate ep on Sound Devices USBPre2 Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 037/150] usb: uas: fix a plug & unplug racing Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 038/150] USB: Fix novation SourceControl XL after suspend Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 039/150] USB: hub: Dont record a connect-change event during reset-resume Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 040/150] USB: hub: Fix the broken detection of USB3 device in SMSC hub Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 041/150] usb: dwc2: Fix SET/CLEAR_FEATURE and GET_STATUS flows Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 042/150] usb: dwc3: gadget: Check for IOC/LST bit in TRB->ctrl fields Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 043/150] usb: dwc3: debug: fix string position formatting mixup with ret and len Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 044/150] scsi: Revert "target/core: Inline transport_lun_remove_cmd()" Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 045/150] staging: rtl8188eu: Fix potential security hole Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 046/150] staging: rtl8188eu: Fix potential overuse of kernel memory Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 047/150] staging: rtl8723bs: Fix potential security hole Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 048/150] staging: rtl8723bs: Fix potential overuse of kernel memory Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 049/150] hwmon: (acpi_power_meter) Fix lockdep splat Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 050/150] drm/panfrost: perfcnt: Reserve/use the AS attached to the perfcnt MMU context Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 051/150] powerpc/8xx: Fix clearing of bits 20-23 in ITLB miss Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 052/150] powerpc/eeh: Fix deadlock handling dead PHB Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 053/150] powerpc/tm: Fix clearing MSR[TS] in current when reclaiming on signal delivery Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 054/150] powerpc/entry: Fix an #if which should be an #ifdef in entry_32.S Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 055/150] powerpc/hugetlb: Fix 512k hugepages on 8xx with 16k page size Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 056/150] powerpc/hugetlb: Fix 8M hugepages on 8xx Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 057/150] arm64: memory: Add missing brackets to untagged_addr() macro Greg Kroah-Hartman
2020-02-27 13:36 ` Greg Kroah-Hartman [this message]
2020-02-27 13:36 ` [PATCH 5.5 059/150] x86/ima: use correct identifier for SetupMode variable Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 060/150] x86/mce/amd: Publish the bank pointer only after setup has succeeded Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 061/150] x86/mce/amd: Fix kobject lifetime Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 062/150] x86/cpu/amd: Enable the fixed Instructions Retired counter IRPERF Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 063/150] MIPS: ingenic: DTS: Fix watchdog nodes Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 064/150] serial: 8250: Check UPF_IRQ_SHARED in advance Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 065/150] tty/serial: atmel: manage shutdown in case of RS485 or ISO7816 mode Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 066/150] tty: serial: imx: setup the correct sg entry for tx dma Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 067/150] tty: serial: qcom_geni_serial: Fix RX cancel command failure Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 068/150] serdev: ttyport: restore client ops on deregistration Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 069/150] MAINTAINERS: Update drm/i915 bug filing URL Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 070/150] fsi: aspeed: add unspecified HAS_IOMEM dependency Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 071/150] ACPI: PM: s2idle: Check fixed wakeup events in acpi_s2idle_wake() Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 072/150] Revert "ipc,sem: remove uneeded sem_undo_list lock usage in exit_sem()" Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 073/150] mm/memcontrol.c: lost css_put in memcg_expand_shrinker_maps() Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 074/150] nvme-multipath: Fix memory leak with ana_log_buf Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 075/150] genirq/irqdomain: Make sure all irq domain flags are distinct Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 076/150] mm/vmscan.c: dont round up scan size for online memory cgroup Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 077/150] mm/sparsemem: pfn_to_page is not valid yet on SPARSEMEM Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 078/150] lib/stackdepot.c: fix global out-of-bounds in stack_slabs Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 079/150] mm: Avoid creating virtual address aliases in brk()/mmap()/mremap() Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 080/150] drm/amdgpu/soc15: fix xclk for raven Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 081/150] drm/amdgpu/gfx9: disable gfxoff when reading rlc clock Greg Kroah-Hartman
2020-02-27 13:36 ` [PATCH 5.5 082/150] drm/amdgpu/gfx10: " Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 083/150] drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 084/150] drm/i915: Wean off drm_pci_alloc/drm_pci_free Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 085/150] drm/i915: Update drm/i915 bug filing URL Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 086/150] sched/psi: Fix OOB write when writing 0 bytes to PSI files Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 087/150] KVM: nVMX: Dont emulate instructions in guest mode Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 088/150] KVM: x86: dont notify userspace IOAPIC on edge-triggered interrupt EOI Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 089/150] ext4: fix a data race in EXT4_I(inode)->i_disksize Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 090/150] ext4: add cond_resched() to __ext4_find_entry() Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 091/150] ext4: fix potential race between online resizing and write operations Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 092/150] ext4: fix potential race between s_group_info online resizing and access Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 093/150] ext4: fix potential race between s_flex_groups " Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 094/150] ext4: fix mount failure with quota configured as module Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 095/150] ext4: rename s_journal_flag_rwsem to s_writepages_rwsem Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 096/150] ext4: fix race between writepages and enabling EXT4_EXTENTS_FL Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 097/150] drm/i915/execlists: Always force a context reload when rewinding RING_TAIL Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 098/150] KVM: nVMX: Refactor IO bitmap checks into helper function Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 099/150] KVM: nVMX: Check IO instruction VM-exit conditions Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 100/150] KVM: nVMX: clear PIN_BASED_POSTED_INTR from nested pinbased_ctls only when apicv is globally disabled Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 101/150] KVM: nVMX: handle nested posted interrupts when apicv is disabled for L1 Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 102/150] KVM: apic: avoid calculating pending eoi from an uninitialized val Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 103/150] crypto: chacha20poly1305 - prevent integer overflow on large input Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 104/150] btrfs: destroy qgroup extent records on transaction abort Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 105/150] btrfs: fix bytes_may_use underflow in prealloc error condtition Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 106/150] btrfs: reset fs_root to NULL on error in open_ctree Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 107/150] btrfs: do not check delayed items are empty for single transaction cleanup Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 108/150] Btrfs: fix btrfs_wait_ordered_range() so that it waits for all ordered extents Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 109/150] Btrfs: fix deadlock during fast fsync when logging prealloc extents beyond eof Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 110/150] Revert "dmaengine: imx-sdma: Fix memory leak" Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 111/150] drm/i915/selftests: Add a mock i915_vma to the mock_ring Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 112/150] drm/i915/gvt: more locking for ppgtt mm LRU list Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 113/150] ice: Remove possible null dereference Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 114/150] drm/bridge: tc358767: fix poll timeouts Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 115/150] drm/i915/gem: Require per-engine reset support for non-persistent contexts Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 116/150] drm/i915/gt: Protect defer_request() from new waiters Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 117/150] drm/i915/ehl: Update port clock voltage level requirements Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 118/150] drm/msm/dpu: fix BGR565 vs RGB565 confusion Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 119/150] scsi: Revert "RDMA/isert: Fix a recently introduced regression related to logout" Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 120/150] scsi: Revert "target: iscsi: Wait for all commands to finish before freeing a session" Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 121/150] usb: gadget: composite: Fix bMaxPower for SuperSpeedPlus Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 122/150] usb: dwc2: Fix in ISOC request length checking Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 123/150] staging: rtl8723bs: fix copy of overlapping memory Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 124/150] staging: greybus: use after free in gb_audio_manager_remove_all() Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 125/150] ASoC: atmel: fix atmel_ssc_set_audio link failure Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 126/150] ASoC: fsl_sai: Fix exiting path on probing failure Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 127/150] ecryptfs: replace BUG_ON with error handling code Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 128/150] iommu/vt-d: Fix compile warning from intel-svm.h Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 129/150] crypto: rename sm3-256 to sm3 in hash_algo_name Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 130/150] genirq/proc: Reject invalid affinity masks (again) Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 131/150] bpf, offload: Replace bitwise AND by logical AND in bpf_prog_offload_info_fill Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 132/150] arm64: lse: Fix LSE atomics with LLVM Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 133/150] scripts/get_maintainer.pl: deprioritize old Fixes: addresses Greg Kroah-Hartman
2020-02-27 15:20   ` Joe Perches
2020-02-27 16:18     ` Dan Carpenter
2020-02-27 18:50       ` Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 134/150] io_uring: prevent sq_thread from spinning when it should stop Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 135/150] io_uring: fix __io_iopoll_check deadlock in io_sq_thread Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 136/150] dma-direct: relax addressability checks in dma_direct_supported Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 137/150] ALSA: rawmidi: Avoid bit fields for state flags Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 138/150] ALSA: seq: Avoid concurrent access to queue flags Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 139/150] ALSA: seq: Fix concurrent access to queue current tick/time Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 140/150] netfilter: xt_hashlimit: limit the max size of hashtable Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 141/150] rxrpc: Fix call RCU cleanup using non-bh-safe locks Greg Kroah-Hartman
2020-02-27 13:37 ` [PATCH 5.5 142/150] ata: ahci: Add shutdown to freeze hardware resources of ahci Greg Kroah-Hartman
2020-02-27 13:38 ` [PATCH 5.5 143/150] xen: Enable interrupts when calling _cond_resched() Greg Kroah-Hartman
2020-02-27 13:38 ` [PATCH 5.5 144/150] net/mlx5e: Reset RQ doorbell counter before moving RQ state from RST to RDY Greg Kroah-Hartman
2020-02-27 13:38 ` [PATCH 5.5 145/150] net/mlx5: Fix sleep while atomic in mlx5_eswitch_get_vepa Greg Kroah-Hartman
2020-02-27 13:38 ` [PATCH 5.5 146/150] net/mlx5e: Dont clear the whole vf config when switching modes Greg Kroah-Hartman
2020-02-27 13:38 ` [PATCH 5.5 147/150] net/mlx5e: Fix crash in recovery flow without devlink reporter Greg Kroah-Hartman
2020-02-27 13:38 ` [PATCH 5.5 148/150] s390/kaslr: Fix casts in get_random Greg Kroah-Hartman
2020-02-27 13:38 ` [PATCH 5.5 149/150] s390/mm: Explicitly compare PAGE_DEFAULT_KEY against zero in storage_key_init_range Greg Kroah-Hartman
2020-02-27 13:38 ` [PATCH 5.5 150/150] bpf: Selftests build error in sockmap_basic.c Greg Kroah-Hartman
2020-02-27 18:53 ` [PATCH 5.5 000/150] 5.5.7-stable review Jon Hunter
2020-02-28 13:51   ` Greg Kroah-Hartman
2020-02-27 22:35 ` Guenter Roeck
2020-02-28  3:35 ` shuah
2020-02-28 13:16   ` Greg Kroah-Hartman
2020-02-28  3:50 ` Naresh Kamboju
2020-02-28 15:12   ` Greg Kroah-Hartman
2020-02-28 12:06 ` Andre Tomt
2020-02-28 12:22   ` Greg Kroah-Hartman
2020-02-28 14:38     ` Andre Tomt

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20200227132241.652559370@linuxfoundation.org \
    --to=gregkh@linuxfoundation.org \
    --cc=jack@suse.cz \
    --cc=linux-kernel@vger.kernel.org \
    --cc=piaojun@huawei.com \
    --cc=stable@kernel.org \
    --cc=stable@vger.kernel.org \
    --cc=tytso@mit.edu \
    --cc=wangyan122@huawei.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).