linux-kernel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: linux-kernel@vger.kernel.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
	stable@vger.kernel.org, Eric Dumazet <edumazet@google.com>,
	syzbot <syzkaller@googlegroups.com>,
	Pablo Neira Ayuso <pablo@netfilter.org>
Subject: [PATCH 5.15 047/171] netfilter: conntrack: annotate data-races around ct->timeout
Date: Mon, 13 Dec 2021 10:29:22 +0100	[thread overview]
Message-ID: <20211213092946.663786122@linuxfoundation.org> (raw)
In-Reply-To: <20211213092945.091487407@linuxfoundation.org>

From: Eric Dumazet <edumazet@google.com>

commit 802a7dc5cf1bef06f7b290ce76d478138408d6b1 upstream.

(struct nf_conn)->timeout can be read/written locklessly,
add READ_ONCE()/WRITE_ONCE() to prevent load/store tearing.

BUG: KCSAN: data-race in __nf_conntrack_alloc / __nf_conntrack_find_get

write to 0xffff888132e78c08 of 4 bytes by task 6029 on cpu 0:
 __nf_conntrack_alloc+0x158/0x280 net/netfilter/nf_conntrack_core.c:1563
 init_conntrack+0x1da/0xb30 net/netfilter/nf_conntrack_core.c:1635
 resolve_normal_ct+0x502/0x610 net/netfilter/nf_conntrack_core.c:1746
 nf_conntrack_in+0x1c5/0x88f net/netfilter/nf_conntrack_core.c:1901
 ipv6_conntrack_local+0x19/0x20 net/netfilter/nf_conntrack_proto.c:414
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_slow+0x72/0x170 net/netfilter/core.c:619
 nf_hook include/linux/netfilter.h:262 [inline]
 NF_HOOK include/linux/netfilter.h:305 [inline]
 ip6_xmit+0xa3a/0xa60 net/ipv6/ip6_output.c:324
 inet6_csk_xmit+0x1a2/0x1e0 net/ipv6/inet6_connection_sock.c:135
 __tcp_transmit_skb+0x132a/0x1840 net/ipv4/tcp_output.c:1402
 tcp_transmit_skb net/ipv4/tcp_output.c:1420 [inline]
 tcp_write_xmit+0x1450/0x4460 net/ipv4/tcp_output.c:2680
 __tcp_push_pending_frames+0x68/0x1c0 net/ipv4/tcp_output.c:2864
 tcp_push_pending_frames include/net/tcp.h:1897 [inline]
 tcp_data_snd_check+0x62/0x2e0 net/ipv4/tcp_input.c:5452
 tcp_rcv_established+0x880/0x10e0 net/ipv4/tcp_input.c:5947
 tcp_v6_do_rcv+0x36e/0xa50 net/ipv6/tcp_ipv6.c:1521
 sk_backlog_rcv include/net/sock.h:1030 [inline]
 __release_sock+0xf2/0x270 net/core/sock.c:2768
 release_sock+0x40/0x110 net/core/sock.c:3300
 sk_stream_wait_memory+0x435/0x700 net/core/stream.c:145
 tcp_sendmsg_locked+0xb85/0x25a0 net/ipv4/tcp.c:1402
 tcp_sendmsg+0x2c/0x40 net/ipv4/tcp.c:1440
 inet6_sendmsg+0x5f/0x80 net/ipv6/af_inet6.c:644
 sock_sendmsg_nosec net/socket.c:704 [inline]
 sock_sendmsg net/socket.c:724 [inline]
 __sys_sendto+0x21e/0x2c0 net/socket.c:2036
 __do_sys_sendto net/socket.c:2048 [inline]
 __se_sys_sendto net/socket.c:2044 [inline]
 __x64_sys_sendto+0x74/0x90 net/socket.c:2044
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff888132e78c08 of 4 bytes by task 17446 on cpu 1:
 nf_ct_is_expired include/net/netfilter/nf_conntrack.h:286 [inline]
 ____nf_conntrack_find net/netfilter/nf_conntrack_core.c:776 [inline]
 __nf_conntrack_find_get+0x1c7/0xac0 net/netfilter/nf_conntrack_core.c:807
 resolve_normal_ct+0x273/0x610 net/netfilter/nf_conntrack_core.c:1734
 nf_conntrack_in+0x1c5/0x88f net/netfilter/nf_conntrack_core.c:1901
 ipv6_conntrack_local+0x19/0x20 net/netfilter/nf_conntrack_proto.c:414
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_slow+0x72/0x170 net/netfilter/core.c:619
 nf_hook include/linux/netfilter.h:262 [inline]
 NF_HOOK include/linux/netfilter.h:305 [inline]
 ip6_xmit+0xa3a/0xa60 net/ipv6/ip6_output.c:324
 inet6_csk_xmit+0x1a2/0x1e0 net/ipv6/inet6_connection_sock.c:135
 __tcp_transmit_skb+0x132a/0x1840 net/ipv4/tcp_output.c:1402
 __tcp_send_ack+0x1fd/0x300 net/ipv4/tcp_output.c:3956
 tcp_send_ack+0x23/0x30 net/ipv4/tcp_output.c:3962
 __tcp_ack_snd_check+0x2d8/0x510 net/ipv4/tcp_input.c:5478
 tcp_ack_snd_check net/ipv4/tcp_input.c:5523 [inline]
 tcp_rcv_established+0x8c2/0x10e0 net/ipv4/tcp_input.c:5948
 tcp_v6_do_rcv+0x36e/0xa50 net/ipv6/tcp_ipv6.c:1521
 sk_backlog_rcv include/net/sock.h:1030 [inline]
 __release_sock+0xf2/0x270 net/core/sock.c:2768
 release_sock+0x40/0x110 net/core/sock.c:3300
 tcp_sendpage+0x94/0xb0 net/ipv4/tcp.c:1114
 inet_sendpage+0x7f/0xc0 net/ipv4/af_inet.c:833
 rds_tcp_xmit+0x376/0x5f0 net/rds/tcp_send.c:118
 rds_send_xmit+0xbed/0x1500 net/rds/send.c:367
 rds_send_worker+0x43/0x200 net/rds/threads.c:200
 process_one_work+0x3fc/0x980 kernel/workqueue.c:2298
 worker_thread+0x616/0xa70 kernel/workqueue.c:2445
 kthread+0x2c7/0x2e0 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

value changed: 0x00027cc2 -> 0x00000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 17446 Comm: kworker/u4:5 Tainted: G        W         5.16.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: krdsd rds_send_worker

Note: I chose an arbitrary commit for the Fixes: tag,
because I do not think we need to backport this fix to very old kernels.

Fixes: e37542ba111f ("netfilter: conntrack: avoid possible false sharing")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: syzbot <syzkaller@googlegroups.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
 include/net/netfilter/nf_conntrack.h |    6 +++---
 net/netfilter/nf_conntrack_core.c    |    6 +++---
 net/netfilter/nf_conntrack_netlink.c |    2 +-
 net/netfilter/nf_flow_table_core.c   |    4 ++--
 4 files changed, 9 insertions(+), 9 deletions(-)

--- a/include/net/netfilter/nf_conntrack.h
+++ b/include/net/netfilter/nf_conntrack.h
@@ -276,14 +276,14 @@ static inline bool nf_is_loopback_packet
 /* jiffies until ct expires, 0 if already expired */
 static inline unsigned long nf_ct_expires(const struct nf_conn *ct)
 {
-	s32 timeout = ct->timeout - nfct_time_stamp;
+	s32 timeout = READ_ONCE(ct->timeout) - nfct_time_stamp;
 
 	return timeout > 0 ? timeout : 0;
 }
 
 static inline bool nf_ct_is_expired(const struct nf_conn *ct)
 {
-	return (__s32)(ct->timeout - nfct_time_stamp) <= 0;
+	return (__s32)(READ_ONCE(ct->timeout) - nfct_time_stamp) <= 0;
 }
 
 /* use after obtaining a reference count */
@@ -302,7 +302,7 @@ static inline bool nf_ct_should_gc(const
 static inline void nf_ct_offload_timeout(struct nf_conn *ct)
 {
 	if (nf_ct_expires(ct) < NF_CT_DAY / 2)
-		ct->timeout = nfct_time_stamp + NF_CT_DAY;
+		WRITE_ONCE(ct->timeout, nfct_time_stamp + NF_CT_DAY);
 }
 
 struct kernel_param;
--- a/net/netfilter/nf_conntrack_core.c
+++ b/net/netfilter/nf_conntrack_core.c
@@ -684,7 +684,7 @@ bool nf_ct_delete(struct nf_conn *ct, u3
 
 	tstamp = nf_conn_tstamp_find(ct);
 	if (tstamp) {
-		s32 timeout = ct->timeout - nfct_time_stamp;
+		s32 timeout = READ_ONCE(ct->timeout) - nfct_time_stamp;
 
 		tstamp->stop = ktime_get_real_ns();
 		if (timeout < 0)
@@ -1036,7 +1036,7 @@ static int nf_ct_resolve_clash_harder(st
 	}
 
 	/* We want the clashing entry to go away real soon: 1 second timeout. */
-	loser_ct->timeout = nfct_time_stamp + HZ;
+	WRITE_ONCE(loser_ct->timeout, nfct_time_stamp + HZ);
 
 	/* IPS_NAT_CLASH removes the entry automatically on the first
 	 * reply.  Also prevents UDP tracker from moving the entry to
@@ -1560,7 +1560,7 @@ __nf_conntrack_alloc(struct net *net,
 	/* save hash for reusing when confirming */
 	*(unsigned long *)(&ct->tuplehash[IP_CT_DIR_REPLY].hnnode.pprev) = hash;
 	ct->status = 0;
-	ct->timeout = 0;
+	WRITE_ONCE(ct->timeout, 0);
 	write_pnet(&ct->ct_net, net);
 	memset(&ct->__nfct_init_offset, 0,
 	       offsetof(struct nf_conn, proto) -
--- a/net/netfilter/nf_conntrack_netlink.c
+++ b/net/netfilter/nf_conntrack_netlink.c
@@ -1998,7 +1998,7 @@ static int ctnetlink_change_timeout(stru
 
 	if (timeout > INT_MAX)
 		timeout = INT_MAX;
-	ct->timeout = nfct_time_stamp + (u32)timeout;
+	WRITE_ONCE(ct->timeout, nfct_time_stamp + (u32)timeout);
 
 	if (test_bit(IPS_DYING_BIT, &ct->status))
 		return -ETIME;
--- a/net/netfilter/nf_flow_table_core.c
+++ b/net/netfilter/nf_flow_table_core.c
@@ -201,8 +201,8 @@ static void flow_offload_fixup_ct_timeou
 	if (timeout < 0)
 		timeout = 0;
 
-	if (nf_flow_timeout_delta(ct->timeout) > (__s32)timeout)
-		ct->timeout = nfct_time_stamp + timeout;
+	if (nf_flow_timeout_delta(READ_ONCE(ct->timeout)) > (__s32)timeout)
+		WRITE_ONCE(ct->timeout, nfct_time_stamp + timeout);
 }
 
 static void flow_offload_fixup_ct_state(struct nf_conn *ct)



  parent reply	other threads:[~2021-12-13 10:18 UTC|newest]

Thread overview: 179+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2021-12-13  9:28 [PATCH 5.15 000/171] 5.15.8-rc1 review Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 001/171] usb: gadget: uvc: fix multiple opens Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 002/171] HID: quirks: Add quirk for the Microsoft Surface 3 type-cover Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 003/171] HID: google: add eel USB id Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 004/171] HID: intel-ish-hid: ipc: only enable IRQ wakeup when requested Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 005/171] HID: add hid_is_usb() function to make it simpler for USB detection Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 006/171] HID: add USB_HID dependancy to hid-prodikeys Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 007/171] HID: add USB_HID dependancy to hid-chicony Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 008/171] HID: add USB_HID dependancy on some USB HID drivers Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 009/171] HID: bigbenff: prevent null pointer dereference Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 010/171] HID: wacom: fix problems when device is not a valid USB device Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 011/171] HID: check for valid USB device for many HID drivers Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 012/171] mtd: dataflash: Add device-tree SPI IDs Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 013/171] mmc: spi: " Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 014/171] HID: sony: fix error path in probe Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 015/171] HID: Ignore battery for Elan touchscreen on Asus UX550VE Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 016/171] platform/x86/intel: hid: add quirk to support Surface Go 3 Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 017/171] nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six 8-bit groups Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 018/171] IB/hfi1: Insure use of smp_processor_id() is preempt disabled Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 019/171] IB/hfi1: Fix early init panic Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 020/171] IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 021/171] can: kvaser_usb: get CAN clock frequency from device Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 022/171] can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct stats->{rx,tx}_errors counter Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 023/171] can: sja1000: fix use after free in ems_pcmcia_add_card() Greg Kroah-Hartman
2021-12-13  9:28 ` [PATCH 5.15 024/171] can: pch_can: pch_can_rx_normal: fix use after free Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 025/171] can: m_can: m_can_read_fifo: fix memory leak in error branch Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 026/171] can: m_can: pci: fix incorrect reference clock rate Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 027/171] can: m_can: pci: fix iomap_read_fifo() and iomap_write_fifo() Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 028/171] can: m_can: Disable and ignore ELO interrupt Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 029/171] net: dsa: mv88e6xxx: fix "dont use PHY_DETECT on internal PHYs" Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 030/171] net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 031/171] x86/sme: Explicitly map new EFI memmap table as encrypted Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 032/171] platform/x86: amd-pmc: Fix s2idle failures on certain AMD laptops Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 033/171] nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 034/171] selftests: netfilter: add a vrf+conntrack testcase Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 035/171] vrf: dont run conntrack on vrf with !dflt qdisc Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 036/171] bpf, x86: Fix "no previous prototype" warning Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 037/171] bpf, sockmap: Attach map progs to psock early for feature probes Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 038/171] bpf: Make sure bpf_disable_instrumentation() is safe vs preemption Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 039/171] bpf: Fix the off-by-two error in range markings Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 040/171] ice: ignore dropped packets during init Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 041/171] ethtool: do not perform operations on net devices being unregistered Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 042/171] bonding: make tx_rebalance_counter an atomic Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 043/171] nfp: Fix memory leak in nfp_cpp_area_cache_add() Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 044/171] seg6: fix the iif in the IPv6 socket control block Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 045/171] udp: using datalen to cap max gso segments Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 046/171] netfilter: nft_exthdr: break evaluation if setting TCP option fails Greg Kroah-Hartman
2021-12-13  9:29 ` Greg Kroah-Hartman [this message]
2021-12-13  9:29 ` [PATCH 5.15 048/171] iavf: restore MSI state on reset Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 049/171] iavf: Fix reporting when setting descriptor count Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 050/171] IB/hfi1: Correct guard on eager buffer deallocation Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 051/171] devlink: fix netns refcount leak in devlink_nl_cmd_reload() Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 052/171] net: bcm4908: Handle dma_set_coherent_mask error codes Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 053/171] net: dsa: mv88e6xxx: error handling for serdes_power functions Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 054/171] net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 055/171] net/sched: fq_pie: prevent dismantle issue Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 056/171] net: mvpp2: fix XDP rx queues registering Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 057/171] KVM: x86: Dont WARN if userspace mucks with RCX during string I/O exit Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 058/171] KVM: x86: Ignore sparse banks size for an "all CPUs", non-sparse IPI req Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 059/171] KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 060/171] timers: implement usleep_idle_range() Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 061/171] mm/damon/core: fix fake load reports due to uninterruptible sleeps Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 062/171] mm/slub: fix endianness bug for alloc/free_traces attributes Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 063/171] mm: bdi: initialize bdi_min_ratio when bdi is unregistered Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 064/171] ALSA: ctl: Fix copy of updated id with element read/write Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 065/171] ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 066/171] ALSA: hda/realtek: Fix quirk for TongFang PHxTxX1 Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 067/171] ALSA: pcm: oss: Fix negative period/buffer sizes Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 068/171] ALSA: pcm: oss: Limit the period size to 16MB Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 069/171] ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*() Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 070/171] cifs: Fix crash on unload of cifs_arc4.ko Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 071/171] scsi: qla2xxx: Format log strings only if needed Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 072/171] btrfs: clear extent buffer uptodate when we fail to write it Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 073/171] btrfs: fix re-dirty process of tree-log nodes Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 074/171] btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 075/171] btrfs: free exchange changeset on failures Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 076/171] perf intel-pt: Fix some PGE (packet generation enable/control flow packets) usage Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 077/171] perf intel-pt: Fix sync state when a PSB (synchronization) packet is found Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 078/171] perf intel-pt: Fix intel_pt_fup_event() assumptions about setting state type Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 079/171] perf intel-pt: Fix state setting when receiving overflow (OVF) packet Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 080/171] perf intel-pt: Fix next err value, walking trace Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 081/171] perf intel-pt: Fix missing instruction events with q option Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 082/171] perf intel-pt: Fix error timestamp setting on the decoder error path Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 083/171] md: fix update super 1.0 on rdev size change Greg Kroah-Hartman
2021-12-13  9:29 ` [PATCH 5.15 084/171] nfsd: fix use-after-free due to delegation race Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 085/171] nfsd: Fix nsfd startup race (again) Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 086/171] tracefs: Have new files inherit the ownership of their parent Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 087/171] selftests: KVM: avoid failures due to reserved HyperTransport region Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 088/171] hwmon: (pwm-fan) Ensure the fan going on in .probe() Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 089/171] mmc: renesas_sdhi: initialize variable properly when tuning Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 090/171] clk: qcom: regmap-mux: fix parent clock lookup Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 091/171] thermal: int340x: Fix VCoRefLow MMIO bit offset for TGL Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 092/171] drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 093/171] libata: add horkage for ASMedia 1092 Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 094/171] io_uring: ensure task_work gets run as part of cancelations Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 095/171] wait: add wake_up_pollfree() Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 096/171] binder: use wake_up_pollfree() Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 097/171] signalfd: " Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 098/171] aio: keep poll requests on waitqueue until completed Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 099/171] aio: fix use-after-free due to missing POLLFREE handling Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 100/171] tracefs: Set all files to the same group ownership as the mount option Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 101/171] i2c: mpc: Use atomic read and fix break condition Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 102/171] block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2) Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 103/171] scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc() Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 104/171] scsi: scsi_debug: Fix buffer size of REPORT ZONES command Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 105/171] ALSA: usb-audio: Reorder snd_djm_devices[] entries Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 106/171] qede: validate non LSO skb length Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 107/171] PM: runtime: Fix pm_runtime_active() kerneldoc comment Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 108/171] ASoC: rt5682: Fix crash due to out of scope stack vars Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 109/171] ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 110/171] ASoC: codecs: wsa881x: fix return values from kcontrol put Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 111/171] ASoC: codecs: wcd934x: handle channel mappping list correctly Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 112/171] ASoC: codecs: wcd934x: return correct value from mixer put Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 113/171] RDMA/hns: Do not halt commands during reset until later Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 114/171] RDMA/hns: Do not destroy QP resources in the hw resetting phase Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 115/171] hwmon: (dell-smm) Fix warning on /proc/i8k creation error Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 116/171] clk: imx: use module_platform_driver Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 117/171] clk: qcom: clk-alpha-pll: Dont reconfigure running Trion Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 118/171] i40e: Fix failed opcode appearing if handling messages from VF Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 119/171] i40e: Fix pre-set max number of queues for VF Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 120/171] mtd: rawnand: fsmc: Take instruction delay into account Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 121/171] mtd: rawnand: fsmc: Fix timing computation Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 122/171] bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 123/171] i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 124/171] Revert "PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge" Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 125/171] drm/amd/display: Fix DPIA outbox timeout after S3/S4/reset Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 126/171] perf tools: Fix SMT detection fast read path Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 127/171] Documentation/locking/locktypes: Update migrate_disable() bits Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 128/171] dt-bindings: net: Reintroduce PHY no lane swap binding Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 129/171] tools build: Remove needless libpython-version feature check that breaks test-all fast path Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 130/171] net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 131/171] net: altera: set a couple error code in probe() Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 132/171] net: fec: only clear interrupt of handling queue in fec_enet_rx_queue() Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 133/171] net, neigh: clear whole pneigh_entry at alloc time Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 134/171] net/qla3xxx: fix an error code in ql_adapter_up() Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 135/171] selftests/fib_tests: Rework fib_rp_filter_test() Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 136/171] USB: gadget: detect too-big endpoint 0 requests Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 137/171] USB: gadget: zero allocate endpoint 0 buffers Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 138/171] Revert "usb: dwc3: dwc3-qcom: Enable tx-fifo-resize property by default" Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 139/171] usb: core: config: fix validation of wMaxPacketValue entries Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 140/171] xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime suspending Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 141/171] usb: core: config: using bit mask instead of individual bits Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 142/171] xhci: avoid race between disable slot command and host runtime suspend Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 143/171] iio: gyro: adxrs290: fix data signedness Greg Kroah-Hartman
2021-12-13  9:30 ` [PATCH 5.15 144/171] iio: trigger: Fix reference counting Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 145/171] iio: trigger: stm32-timer: fix MODULE_ALIAS Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 146/171] iio: stk3310: Dont return error code in interrupt handler Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 147/171] iio: mma8452: Fix trigger reference couting Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 148/171] iio: ltr501: Dont return error code in trigger handler Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 149/171] iio: kxsd9: " Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 150/171] iio: itg3200: Call iio_trigger_notify_done() on error Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 151/171] iio: dln2-adc: Fix lockdep complaint Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 152/171] iio: dln2: Check return value of devm_iio_trigger_register() Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 153/171] iio: at91-sama5d2: Fix incorrect sign extension Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 154/171] iio: adc: stm32: fix a current leak by resetting pcsel before disabling vdda Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 155/171] iio: adc: axp20x_adc: fix charging current reporting on AXP22x Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 156/171] iio: ad7768-1: Call iio_trigger_notify_done() on error Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 157/171] iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 158/171] misc: rtsx: Avoid mangling IRQ during runtime PM Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 159/171] nvmem: eeprom: at25: fix FRAM byte_len Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 160/171] bus: mhi: pci_generic: Fix device recovery failed issue Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 161/171] bus: mhi: core: Add support for forced PM resume Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 162/171] csky: fix typo of fpu config macro Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 163/171] irqchip/aspeed-scu: Replace update_bits with write_bits Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 164/171] irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc() Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 165/171] irqchip/armada-370-xp: Fix support for Multi-MSI interrupts Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 166/171] aio: Fix incorrect usage of eventfd_signal_allowed() Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 167/171] irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 168/171] irqchip: nvic: Fix offset for Interrupt Priority Offsets Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 169/171] misc: fastrpc: fix improper packet size calculation Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 170/171] clocksource/drivers/dw_apb_timer_of: Fix probe failure Greg Kroah-Hartman
2021-12-13  9:31 ` [PATCH 5.15 171/171] bpf: Add selftests to cover packet access corner cases Greg Kroah-Hartman
2021-12-13 13:55 ` [PATCH 5.15 000/171] 5.15.8-rc1 review Fox Chen
2021-12-13 14:46 ` Jon Hunter
2021-12-13 16:42 ` Naresh Kamboju
2021-12-13 19:56 ` Guenter Roeck
2021-12-13 20:24 ` Shuah Khan
2021-12-13 22:01 ` Florian Fainelli
2021-12-13 22:46 ` Rudi Heitbaum

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20211213092946.663786122@linuxfoundation.org \
    --to=gregkh@linuxfoundation.org \
    --cc=edumazet@google.com \
    --cc=linux-kernel@vger.kernel.org \
    --cc=pablo@netfilter.org \
    --cc=stable@vger.kernel.org \
    --cc=syzkaller@googlegroups.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).