From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: linux-kernel@vger.kernel.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
stable@vger.kernel.org,
syzbot+582e66e5edf36a22c7b0@syzkaller.appspotmail.com,
Nikolay Borisov <nborisov@suse.com>,
Anand Jain <anand.jain@oracle.com>,
Johannes Thumshirn <johannes.thumshirn@wdc.com>,
David Sterba <dsterba@suse.com>
Subject: [PATCH 5.9 011/152] btrfs: dont access possibly stale fs_info data for printing duplicate device
Date: Tue, 1 Dec 2020 09:52:06 +0100 [thread overview]
Message-ID: <20201201084713.329401921@linuxfoundation.org> (raw)
In-Reply-To: <20201201084711.707195422@linuxfoundation.org>
From: Johannes Thumshirn <johannes.thumshirn@wdc.com>
commit 0697d9a610998b8bdee6b2390836cb2391d8fd1a upstream.
Syzbot reported a possible use-after-free when printing a duplicate device
warning device_list_add().
At this point it can happen that a btrfs_device::fs_info is not correctly
setup yet, so we're accessing stale data, when printing the warning
message using the btrfs_printk() wrappers.
==================================================================
BUG: KASAN: use-after-free in btrfs_printk+0x3eb/0x435 fs/btrfs/super.c:245
Read of size 8 at addr ffff8880878e06a8 by task syz-executor225/7068
CPU: 1 PID: 7068 Comm: syz-executor225 Not tainted 5.9.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1d6/0x29e lib/dump_stack.c:118
print_address_description+0x66/0x620 mm/kasan/report.c:383
__kasan_report mm/kasan/report.c:513 [inline]
kasan_report+0x132/0x1d0 mm/kasan/report.c:530
btrfs_printk+0x3eb/0x435 fs/btrfs/super.c:245
device_list_add+0x1a88/0x1d60 fs/btrfs/volumes.c:943
btrfs_scan_one_device+0x196/0x490 fs/btrfs/volumes.c:1359
btrfs_mount_root+0x48f/0xb60 fs/btrfs/super.c:1634
legacy_get_tree+0xea/0x180 fs/fs_context.c:592
vfs_get_tree+0x88/0x270 fs/super.c:1547
fc_mount fs/namespace.c:978 [inline]
vfs_kern_mount+0xc9/0x160 fs/namespace.c:1008
btrfs_mount+0x33c/0xae0 fs/btrfs/super.c:1732
legacy_get_tree+0xea/0x180 fs/fs_context.c:592
vfs_get_tree+0x88/0x270 fs/super.c:1547
do_new_mount fs/namespace.c:2875 [inline]
path_mount+0x179d/0x29e0 fs/namespace.c:3192
do_mount fs/namespace.c:3205 [inline]
__do_sys_mount fs/namespace.c:3413 [inline]
__se_sys_mount+0x126/0x180 fs/namespace.c:3390
do_syscall_64+0x31/0x70 arch/x86/entry/common.c:46
entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x44840a
RSP: 002b:00007ffedfffd608 EFLAGS: 00000293 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffedfffd670 RCX: 000000000044840a
RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffedfffd630
RBP: 00007ffedfffd630 R08: 00007ffedfffd670 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000001a
R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003
Allocated by task 6945:
kasan_save_stack mm/kasan/common.c:48 [inline]
kasan_set_track mm/kasan/common.c:56 [inline]
__kasan_kmalloc+0x100/0x130 mm/kasan/common.c:461
kmalloc_node include/linux/slab.h:577 [inline]
kvmalloc_node+0x81/0x110 mm/util.c:574
kvmalloc include/linux/mm.h:757 [inline]
kvzalloc include/linux/mm.h:765 [inline]
btrfs_mount_root+0xd0/0xb60 fs/btrfs/super.c:1613
legacy_get_tree+0xea/0x180 fs/fs_context.c:592
vfs_get_tree+0x88/0x270 fs/super.c:1547
fc_mount fs/namespace.c:978 [inline]
vfs_kern_mount+0xc9/0x160 fs/namespace.c:1008
btrfs_mount+0x33c/0xae0 fs/btrfs/super.c:1732
legacy_get_tree+0xea/0x180 fs/fs_context.c:592
vfs_get_tree+0x88/0x270 fs/super.c:1547
do_new_mount fs/namespace.c:2875 [inline]
path_mount+0x179d/0x29e0 fs/namespace.c:3192
do_mount fs/namespace.c:3205 [inline]
__do_sys_mount fs/namespace.c:3413 [inline]
__se_sys_mount+0x126/0x180 fs/namespace.c:3390
do_syscall_64+0x31/0x70 arch/x86/entry/common.c:46
entry_SYSCALL_64_after_hwframe+0x44/0xa9
Freed by task 6945:
kasan_save_stack mm/kasan/common.c:48 [inline]
kasan_set_track+0x3d/0x70 mm/kasan/common.c:56
kasan_set_free_info+0x17/0x30 mm/kasan/generic.c:355
__kasan_slab_free+0xdd/0x110 mm/kasan/common.c:422
__cache_free mm/slab.c:3418 [inline]
kfree+0x113/0x200 mm/slab.c:3756
deactivate_locked_super+0xa7/0xf0 fs/super.c:335
btrfs_mount_root+0x72b/0xb60 fs/btrfs/super.c:1678
legacy_get_tree+0xea/0x180 fs/fs_context.c:592
vfs_get_tree+0x88/0x270 fs/super.c:1547
fc_mount fs/namespace.c:978 [inline]
vfs_kern_mount+0xc9/0x160 fs/namespace.c:1008
btrfs_mount+0x33c/0xae0 fs/btrfs/super.c:1732
legacy_get_tree+0xea/0x180 fs/fs_context.c:592
vfs_get_tree+0x88/0x270 fs/super.c:1547
do_new_mount fs/namespace.c:2875 [inline]
path_mount+0x179d/0x29e0 fs/namespace.c:3192
do_mount fs/namespace.c:3205 [inline]
__do_sys_mount fs/namespace.c:3413 [inline]
__se_sys_mount+0x126/0x180 fs/namespace.c:3390
do_syscall_64+0x31/0x70 arch/x86/entry/common.c:46
entry_SYSCALL_64_after_hwframe+0x44/0xa9
The buggy address belongs to the object at ffff8880878e0000
which belongs to the cache kmalloc-16k of size 16384
The buggy address is located 1704 bytes inside of
16384-byte region [ffff8880878e0000, ffff8880878e4000)
The buggy address belongs to the page:
page:0000000060704f30 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x878e0
head:0000000060704f30 order:3 compound_mapcount:0 compound_pincount:0
flags: 0xfffe0000010200(slab|head)
raw: 00fffe0000010200 ffffea00028e9a08 ffffea00021e3608 ffff8880aa440b00
raw: 0000000000000000 ffff8880878e0000 0000000100000001 0000000000000000
page dumped because: kasan: bad access detected
Memory state around the buggy address:
ffff8880878e0580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
ffff8880878e0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff8880878e0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
^
ffff8880878e0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
ffff8880878e0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================
The syzkaller reproducer for this use-after-free crafts a filesystem image
and loop mounts it twice in a loop. The mount will fail as the crafted
image has an invalid chunk tree. When this happens btrfs_mount_root() will
call deactivate_locked_super(), which then cleans up fs_info and
fs_info::sb. If a second thread now adds the same block-device to the
filesystem, it will get detected as a duplicate device and
device_list_add() will reject the duplicate and print a warning. But as
the fs_info pointer passed in is non-NULL this will result in a
use-after-free.
Instead of printing possibly uninitialized or already freed memory in
btrfs_printk(), explicitly pass in a NULL fs_info so the printing of the
device name will be skipped altogether.
There was a slightly different approach discussed in
https://lore.kernel.org/linux-btrfs/20200114060920.4527-1-anand.jain@oracle.com/t/#u
Link: https://lore.kernel.org/linux-btrfs/000000000000c9e14b05afcc41ba@google.com
Reported-by: syzbot+582e66e5edf36a22c7b0@syzkaller.appspotmail.com
CC: stable@vger.kernel.org # 4.19+
Reviewed-by: Nikolay Borisov <nborisov@suse.com>
Reviewed-by: Anand Jain <anand.jain@oracle.com>
Signed-off-by: Johannes Thumshirn <johannes.thumshirn@wdc.com>
Reviewed-by: David Sterba <dsterba@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
fs/btrfs/volumes.c | 8 +++++++-
1 file changed, 7 insertions(+), 1 deletion(-)
--- a/fs/btrfs/volumes.c
+++ b/fs/btrfs/volumes.c
@@ -941,7 +941,13 @@ static noinline struct btrfs_device *dev
if (device->bdev != path_bdev) {
bdput(path_bdev);
mutex_unlock(&fs_devices->device_list_mutex);
- btrfs_warn_in_rcu(device->fs_info,
+ /*
+ * device->fs_info may not be reliable here, so
+ * pass in a NULL instead. This avoids a
+ * possible use-after-free when the fs_info and
+ * fs_info->sb are already torn down.
+ */
+ btrfs_warn_in_rcu(NULL,
"duplicate device %s devid %llu generation %llu scanned by %s (%d)",
path, devid, found_transid,
current->comm,
next prev parent reply other threads:[~2020-12-01 9:22 UTC|newest]
Thread overview: 158+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-12-01 8:51 [PATCH 5.9 000/152] 5.9.12-rc1 review Greg Kroah-Hartman
2020-12-01 8:51 ` [PATCH 5.9 001/152] io_uring: get an active ref_node from files_data Greg Kroah-Hartman
2020-12-01 8:51 ` [PATCH 5.9 002/152] io_uring: order refnode recycling Greg Kroah-Hartman
2020-12-01 8:51 ` [PATCH 5.9 003/152] spi: bcm-qspi: Fix use-after-free on unbind Greg Kroah-Hartman
2020-12-01 8:51 ` [PATCH 5.9 004/152] spi: bcm2835: " Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 005/152] ipv4: use IS_ENABLED instead of ifdef Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 006/152] IB/hfi1: Ensure correct mm is used at all times Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 007/152] RDMA/i40iw: Address an mmap handler exploit in i40iw Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 008/152] btrfs: fix missing delalloc new bit for new delalloc ranges Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 009/152] btrfs: tree-checker: add missing return after error in root_item Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 010/152] btrfs: tree-checker: add missing returns after data_ref alignment checks Greg Kroah-Hartman
2020-12-01 8:52 ` Greg Kroah-Hartman [this message]
2020-12-01 8:52 ` [PATCH 5.9 012/152] btrfs: fix lockdep splat when reading qgroup config on mount Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 013/152] rtc: pcf2127: fix a bug when not specify interrupts property Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 014/152] s390: fix fpu restore in entry.S Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 015/152] mm: fix VM_BUG_ON(PageTail) and BUG_ON(PageWriteback) Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 016/152] smb3: Call cifs reconnect from demultiplex thread Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 017/152] smb3: Avoid Mid pending list corruption Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 018/152] smb3: Handle error case during offload read path Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 019/152] cifs: fix a memleak with modefromsid Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 020/152] powerpc/64s: Fix KVM system reset handling when CONFIG_PPC_PSERIES=y Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 021/152] powerpc/64s/exception: KVM Fix for host DSI being taken in HPT guest MMU context Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 022/152] KVM: PPC: Book3S HV: XIVE: Fix possible oops when accessing ESB page Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 023/152] KVM: arm64: vgic-v3: Drop the reporting of GICR_TYPER.Last for userspace Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 024/152] KVM: x86: handle !lapic_in_kernel case in kvm_cpu_*_extint Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 025/152] KVM: x86: Fix split-irqchip vs interrupt injection window request Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 026/152] iommu/vt-d: Dont read VCCAP register unless it exists Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 027/152] firmware: xilinx: Use hash-table for api feature check Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 028/152] drm/amdgpu: fix SI UVD firmware validate resume fail Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 029/152] io_uring: fix ITER_BVEC check Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 030/152] trace: fix potenial dangerous pointer Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 031/152] arm64: tegra: Correct the UART for Jetson Xavier NX Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 032/152] arm64: tegra: Fix USB_VBUS_EN0 regulator on Jetson TX1 Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 033/152] arm64: pgtable: Fix pte_accessible() Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 034/152] arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect() Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 035/152] drm/amdgpu: fix a page fault Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 036/152] drm/amdgpu: update golden setting for sienna_cichlid Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 037/152] drm/amd/amdgpu: fix null pointer in runtime pm Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 038/152] drm/amd/display: Avoid HDCP initialization in devices without output Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 039/152] HID: uclogic: Add ID for Trust Flex Design Tablet Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 040/152] HID: ite: Replace ABS_MISC 120/121 events with touchpad on/off keypresses Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 041/152] HID: cypress: Support Varmilo Keyboards media hotkeys Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 042/152] HID: add support for Sega Saturn Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 043/152] Input: i8042 - allow insmod to succeed on devices without an i8042 controller Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 044/152] HID: hid-sensor-hub: Fix issue with devices with no report ID Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 045/152] staging: ralink-gdma: fix kconfig dependency bug for DMA_RALINK Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 046/152] HID: add HID_QUIRK_INCREMENT_USAGE_ON_DUPLICATE for Gamevice devices Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 047/152] dmaengine: xilinx_dma: use readl_poll_timeout_atomic variant Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 048/152] x86/xen: dont unbind uninitialized lock_kicker_irq Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 049/152] kunit: fix display of failed expectations for strings Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 050/152] HID: logitech-hidpp: Add HIDPP_CONSUMER_VENDOR_KEYS quirk for the Dinovo Edge Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 051/152] HID: Add Logitech Dinovo Edge battery quirk Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 052/152] proc: dont allow async path resolution of /proc/self components Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 053/152] nvme: free sq/cq dbbuf pointers when dbbuf set fails Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 054/152] io_uring: handle -EOPNOTSUPP on path resolution Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 055/152] net: stmmac: dwmac_lib: enlarge dma reset timeout Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 056/152] vdpasim: fix "mac_pton" undefined error Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 057/152] vhost: add helper to check if a vq has been setup Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 058/152] vhost scsi: alloc cmds per vq instead of session Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 059/152] vhost scsi: fix cmd completion race Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 060/152] cpuidle: tegra: Annotate tegra_pm_set_cpu_in_lp2() with RCU_NONIDLE Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 061/152] dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 062/152] scsi: libiscsi: Fix NOP race condition Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 063/152] scsi: target: iscsi: Fix cmd abort fabric stop race Greg Kroah-Hartman
2020-12-01 8:52 ` [PATCH 5.9 064/152] lockdep: Put graph lock/unlock under lock_recursion protection Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 065/152] perf/x86: fix sysfs type mismatches Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 066/152] xtensa: uaccess: Add missing __user to strncpy_from_user() prototype Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 067/152] x86/dumpstack: Do not try to access user space code of other tasks Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 068/152] net: dsa: mv88e6xxx: Wait for EEPROM done after HW reset Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 069/152] bus: ti-sysc: Fix reset status check for modules with quirks Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 070/152] bus: ti-sysc: Fix bogus resetdone warning on enable for cpsw Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 071/152] ARM: OMAP2+: Manage MPU state properly for omap_enter_idle_coupled() Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 072/152] phy: tegra: xusb: Fix dangling pointer on probe failure Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 073/152] iwlwifi: mvm: use the HOT_SPOT_CMD to cancel an AUX ROC Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 074/152] iwlwifi: mvm: properly cancel a session protection for P2P Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 075/152] iwlwifi: mvm: write queue_sync_state only for sync Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 076/152] KVM: s390: pv: Mark mm as protected after the set secure parameters and improve cleanup Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 077/152] KVM: s390: remove diag318 reset code Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 078/152] btrfs: qgroup: dont commit transaction when we already hold the handle Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 079/152] batman-adv: set .owner to THIS_MODULE Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 080/152] usb: cdns3: gadget: fix some endian issues Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 081/152] usb: cdns3: gadget: calculate TD_SIZE based on TD Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 082/152] phy: qualcomm: usb: Fix SuperSpeed PHY OF dependency Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 083/152] phy: qualcomm: Fix 28 nm Hi-Speed USB " Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 084/152] arch: pgtable: define MAX_POSSIBLE_PHYSMEM_BITS where needed Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 085/152] bus: ti-sysc: suppress err msg for timers used as clockevent/source Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 086/152] ARM: dts: dra76x: m_can: fix order of clocks Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 087/152] scsi: ufs: Fix race between shutdown and runtime resume flow Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 088/152] bnxt_en: fix error return code in bnxt_init_one() Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 089/152] bnxt_en: fix error return code in bnxt_init_board() Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 090/152] video: hyperv_fb: Fix the cache type when mapping the VRAM Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 091/152] bnxt_en: Release PCI regions when DMA mask setup fails during probe Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 092/152] block/keyslot-manager: prevent crash when num_slots=1 Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 093/152] cxgb4: fix the panic caused by non smac rewrite Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 094/152] dpaa2-eth: select XGMAC_MDIO for MDIO bus support Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 095/152] s390/qeth: make af_iucv TX notification call more robust Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 096/152] s390/qeth: fix af_iucv notification race Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 097/152] s390/qeth: fix tear down of async TX buffers Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 098/152] drm/mediatek: dsi: Modify horizontal front/back porch byte formula Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 099/152] bonding: wait for sysfs kobject destruction before freeing struct slave Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 100/152] ibmvnic: fix call_netdevice_notifiers in do_reset Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 101/152] ibmvnic: notify peers when failover and migration happen Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 102/152] powerpc/64s: Fix allnoconfig build since uaccess flush Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 103/152] iommu: Check return of __iommu_attach_device() Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 104/152] IB/mthca: fix return value of error branch in mthca_init_cq() Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 105/152] i40e: Fix removing driver while bare-metal VFs pass traffic Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 106/152] firmware: xilinx: Fix SD DLL node reset issue Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 107/152] spi: imx: fix the unbalanced spi runtime pm management Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 108/152] io_uring: fix shift-out-of-bounds when round up cq size Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 109/152] aquantia: Remove the build_skb path Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 110/152] nfc: s3fwrn5: use signed integer for parsing GPIO numbers Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 111/152] net: ena: handle bad request id in ena_netdev Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 112/152] net: ena: set initial DMA width to avoid intel iommu issue Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 113/152] net: ena: fix packets addresses for rx_offset feature Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 114/152] ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 115/152] ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 116/152] ibmvnic: enhance resetting status check during module exit Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 117/152] optee: add writeback to valid memory type Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 118/152] x86/tboot: Dont disable swiotlb when iommu is forced on Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 119/152] arm64: tegra: Wrong AON HSP reg property size Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 120/152] efi/efivars: Set generic ops before loading SSDT Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 121/152] efivarfs: revert "fix memory leak in efivarfs_create()" Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 122/152] efi: EFI_EARLYCON should depend on EFI Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 123/152] riscv: Explicitly specify the build id style in vDSO Makefile again Greg Kroah-Hartman
2020-12-01 8:53 ` [PATCH 5.9 124/152] RISC-V: Add missing jump label initialization Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 125/152] RISC-V: fix barrier() use in <vdso/processor.h> Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 126/152] net: stmmac: fix incorrect merge of patch upstream Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 127/152] enetc: Let the hardware auto-advance the taprio base-time of 0 Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 128/152] ptp: clockmatrix: bug fix for idtcm_strverscmp Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 129/152] drm/nouveau: fix relocations applying logic and a double-free Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 130/152] can: gs_usb: fix endianess problem with candleLight firmware Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 131/152] platform/x86: thinkpad_acpi: Send tablet mode switch at wakeup time Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 132/152] platform/x86: toshiba_acpi: Fix the wrong variable assignment Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 133/152] RDMA/hns: Fix wrong field of SRQ number the device supports Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 134/152] RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 135/152] RDMA/hns: Bugfix for memory window mtpt configuration Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 136/152] can: m_can: m_can_open(): remove IRQF_TRIGGER_FALLING from request_threaded_irq()s flags Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 137/152] can: m_can: fix nominal bitiming tseg2 min for version >= 3.1 Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 138/152] perf record: Synthesize cgroup events only if needed Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 139/152] perf stat: Use proper cpu for shadow stats Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 140/152] perf probe: Fix to die_entrypc() returns error correctly Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 141/152] spi: bcm2835aux: Restore err assignment in bcm2835aux_spi_probe Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 142/152] USB: core: Change %pK for __user pointers to %px Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 143/152] usb: gadget: f_midi: Fix memleak in f_midi_alloc Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 144/152] USB: core: Fix regression in Hercules audio card Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 145/152] USB: quirks: Add USB_QUIRK_DISCONNECT_SUSPEND quirk for Lenovo A630Z TIO built-in usb-audio card Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 146/152] usb: gadget: Fix memleak in gadgetfs_fill_super Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 147/152] irqchip/exiu: Fix the index of fwspec for IRQ type Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 148/152] x86/mce: Do not overwrite no_way_out if mce_end() fails Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 149/152] x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 150/152] x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 151/152] x86/resctrl: Add necessary kernfs_put() " Greg Kroah-Hartman
2020-12-01 8:54 ` [PATCH 5.9 152/152] drm/amdgpu: add rlc iram and dram firmware support Greg Kroah-Hartman
2020-12-01 18:21 ` [PATCH 5.9 000/152] 5.9.12-rc1 review Jeffrin Jose T
2020-12-01 21:40 ` Guenter Roeck
2020-12-02 4:50 ` Naresh Kamboju
2020-12-02 16:57 ` Shuah Khan
2020-12-02 17:46 ` Greg Kroah-Hartman
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20201201084713.329401921@linuxfoundation.org \
--to=gregkh@linuxfoundation.org \
--cc=anand.jain@oracle.com \
--cc=dsterba@suse.com \
--cc=johannes.thumshirn@wdc.com \
--cc=linux-kernel@vger.kernel.org \
--cc=nborisov@suse.com \
--cc=stable@vger.kernel.org \
--cc=syzbot+582e66e5edf36a22c7b0@syzkaller.appspotmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).