Archive-only list for patches
 help / color / mirror / Atom feed
From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: stable@vger.kernel.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
	patches@lists.linux.dev, Alexander Aring <aahringo@redhat.com>,
	David Teigland <teigland@redhat.com>,
	Sasha Levin <sashal@kernel.org>
Subject: [PATCH 6.1 036/143] fs: dlm: fix use after free in midcomms commit
Date: Wed, 15 Mar 2023 13:12:02 +0100	[thread overview]
Message-ID: <20230315115741.609833030@linuxfoundation.org> (raw)
In-Reply-To: <20230315115740.429574234@linuxfoundation.org>

From: Alexander Aring <aahringo@redhat.com>

[ Upstream commit 724b6bab0d75f1dc01fdfbf7fe8d4217a5cb90ba ]

While working on processing dlm message in softirq context I experienced
the following KASAN use-after-free warning:

[  151.760477] ==================================================================
[  151.761803] BUG: KASAN: use-after-free in dlm_midcomms_commit_mhandle+0x19d/0x4b0
[  151.763414] Read of size 4 at addr ffff88811a980c60 by task lock_torture/1347

[  151.765284] CPU: 7 PID: 1347 Comm: lock_torture Not tainted 6.1.0-rc4+ #2828
[  151.766778] Hardware name: Red Hat KVM/RHEL-AV, BIOS 1.16.0-3.module+el8.7.0+16134+e5908aa2 04/01/2014
[  151.768726] Call Trace:
[  151.769277]  <TASK>
[  151.769748]  dump_stack_lvl+0x5b/0x86
[  151.770556]  print_report+0x180/0x4c8
[  151.771378]  ? kasan_complete_mode_report_info+0x7c/0x1e0
[  151.772241]  ? dlm_midcomms_commit_mhandle+0x19d/0x4b0
[  151.773069]  kasan_report+0x93/0x1a0
[  151.773668]  ? dlm_midcomms_commit_mhandle+0x19d/0x4b0
[  151.774514]  __asan_load4+0x7e/0xa0
[  151.775089]  dlm_midcomms_commit_mhandle+0x19d/0x4b0
[  151.775890]  ? create_message.isra.29.constprop.64+0x57/0xc0
[  151.776770]  send_common+0x19f/0x1b0
[  151.777342]  ? remove_from_waiters+0x60/0x60
[  151.778017]  ? lock_downgrade+0x410/0x410
[  151.778648]  ? __this_cpu_preempt_check+0x13/0x20
[  151.779421]  ? rcu_lockdep_current_cpu_online+0x88/0xc0
[  151.780292]  _convert_lock+0x46/0x150
[  151.780893]  convert_lock+0x7b/0xc0
[  151.781459]  dlm_lock+0x3ac/0x580
[  151.781993]  ? 0xffffffffc0540000
[  151.782522]  ? torture_stop+0x120/0x120 [dlm_locktorture]
[  151.783379]  ? dlm_scan_rsbs+0xa70/0xa70
[  151.784003]  ? preempt_count_sub+0xd6/0x130
[  151.784661]  ? is_module_address+0x47/0x70
[  151.785309]  ? torture_stop+0x120/0x120 [dlm_locktorture]
[  151.786166]  ? 0xffffffffc0540000
[  151.786693]  ? lockdep_init_map_type+0xc3/0x360
[  151.787414]  ? 0xffffffffc0540000
[  151.787947]  torture_dlm_lock_sync.isra.3+0xe9/0x150 [dlm_locktorture]
[  151.789004]  ? torture_stop+0x120/0x120 [dlm_locktorture]
[  151.789858]  ? 0xffffffffc0540000
[  151.790392]  ? lock_torture_cleanup+0x20/0x20 [dlm_locktorture]
[  151.791347]  ? delay_tsc+0x94/0xc0
[  151.791898]  torture_ex_iter+0xc3/0xea [dlm_locktorture]
[  151.792735]  ? torture_start+0x30/0x30 [dlm_locktorture]
[  151.793606]  lock_torture+0x177/0x270 [dlm_locktorture]
[  151.794448]  ? torture_dlm_lock_sync.isra.3+0x150/0x150 [dlm_locktorture]
[  151.795539]  ? lock_torture_stats+0x80/0x80 [dlm_locktorture]
[  151.796476]  ? do_raw_spin_lock+0x11e/0x1e0
[  151.797152]  ? mark_held_locks+0x34/0xb0
[  151.797784]  ? _raw_spin_unlock_irqrestore+0x30/0x70
[  151.798581]  ? __kthread_parkme+0x79/0x110
[  151.799246]  ? trace_preempt_on+0x2a/0xf0
[  151.799902]  ? __kthread_parkme+0x79/0x110
[  151.800579]  ? preempt_count_sub+0xd6/0x130
[  151.801271]  ? __kasan_check_read+0x11/0x20
[  151.801963]  ? __kthread_parkme+0xec/0x110
[  151.802630]  ? lock_torture_stats+0x80/0x80 [dlm_locktorture]
[  151.803569]  kthread+0x192/0x1d0
[  151.804104]  ? kthread_complete_and_exit+0x30/0x30
[  151.804881]  ret_from_fork+0x1f/0x30
[  151.805480]  </TASK>

[  151.806111] Allocated by task 1347:
[  151.806681]  kasan_save_stack+0x26/0x50
[  151.807308]  kasan_set_track+0x25/0x30
[  151.807920]  kasan_save_alloc_info+0x1e/0x30
[  151.808609]  __kasan_slab_alloc+0x63/0x80
[  151.809263]  kmem_cache_alloc+0x1ad/0x830
[  151.809916]  dlm_allocate_mhandle+0x17/0x20
[  151.810590]  dlm_midcomms_get_mhandle+0x96/0x260
[  151.811344]  _create_message+0x95/0x180
[  151.811994]  create_message.isra.29.constprop.64+0x57/0xc0
[  151.812880]  send_common+0x129/0x1b0
[  151.813467]  _convert_lock+0x46/0x150
[  151.814074]  convert_lock+0x7b/0xc0
[  151.814648]  dlm_lock+0x3ac/0x580
[  151.815199]  torture_dlm_lock_sync.isra.3+0xe9/0x150 [dlm_locktorture]
[  151.816258]  torture_ex_iter+0xc3/0xea [dlm_locktorture]
[  151.817129]  lock_torture+0x177/0x270 [dlm_locktorture]
[  151.817986]  kthread+0x192/0x1d0
[  151.818518]  ret_from_fork+0x1f/0x30

[  151.819369] Freed by task 1336:
[  151.819890]  kasan_save_stack+0x26/0x50
[  151.820514]  kasan_set_track+0x25/0x30
[  151.821128]  kasan_save_free_info+0x2e/0x50
[  151.821812]  __kasan_slab_free+0x107/0x1a0
[  151.822483]  kmem_cache_free+0x204/0x5e0
[  151.823152]  dlm_free_mhandle+0x18/0x20
[  151.823781]  dlm_mhandle_release+0x2e/0x40
[  151.824454]  rcu_core+0x583/0x1330
[  151.825047]  rcu_core_si+0xe/0x20
[  151.825594]  __do_softirq+0xf4/0x5c2

[  151.826450] Last potentially related work creation:
[  151.827238]  kasan_save_stack+0x26/0x50
[  151.827870]  __kasan_record_aux_stack+0xa2/0xc0
[  151.828609]  kasan_record_aux_stack_noalloc+0xb/0x20
[  151.829415]  call_rcu+0x4c/0x760
[  151.829954]  dlm_mhandle_delete+0x97/0xb0
[  151.830718]  dlm_process_incoming_buffer+0x2fc/0xb30
[  151.831524]  process_dlm_messages+0x16e/0x470
[  151.832245]  process_one_work+0x505/0xa10
[  151.832905]  worker_thread+0x67/0x650
[  151.833507]  kthread+0x192/0x1d0
[  151.834046]  ret_from_fork+0x1f/0x30

[  151.834900] The buggy address belongs to the object at ffff88811a980c30
                which belongs to the cache dlm_mhandle of size 88
[  151.836894] The buggy address is located 48 bytes inside of
                88-byte region [ffff88811a980c30, ffff88811a980c88)

[  151.839007] The buggy address belongs to the physical page:
[  151.839904] page:0000000076cf5d62 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11a980
[  151.841378] flags: 0x8000000000000200(slab|zone=2)
[  151.842141] raw: 8000000000000200 0000000000000000 dead000000000122 ffff8881089b43c0
[  151.843401] raw: 0000000000000000 0000000000220022 00000001ffffffff 0000000000000000
[  151.844640] page dumped because: kasan: bad access detected

[  151.845822] Memory state around the buggy address:
[  151.846602]  ffff88811a980b00: fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb fb
[  151.847761]  ffff88811a980b80: fb fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb
[  151.848921] >ffff88811a980c00: fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb fb
[  151.850076]                                                        ^
[  151.851085]  ffff88811a980c80: fb fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb
[  151.852269]  ffff88811a980d00: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb fc
[  151.853428] ==================================================================
[  151.855618] Disabling lock debugging due to kernel taint

It is accessing a mhandle in dlm_midcomms_commit_mhandle() and the mhandle
was freed by a call_rcu() call in dlm_process_incoming_buffer(),
dlm_mhandle_delete(). It looks like it was freed because an ack of
this message was received. There is a short race between committing the
dlm message to be transmitted and getting an ack back. If the ack is
faster than returning from dlm_midcomms_commit_msg_3_2(), then we run
into a use-after free because we still need to reference the mhandle when
calling srcu_read_unlock().

To avoid that, we don't allow that mhandle to be freed between
dlm_midcomms_commit_msg_3_2() and srcu_read_unlock() by using rcu read
lock. We can do that because mhandle is protected by rcu handling.

Cc: stable@vger.kernel.org
Fixes: 489d8e559c65 ("fs: dlm: add reliable connection if reconnect")
Signed-off-by: Alexander Aring <aahringo@redhat.com>
Signed-off-by: David Teigland <teigland@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
 fs/dlm/midcomms.c | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/fs/dlm/midcomms.c b/fs/dlm/midcomms.c
index 8d11f104a97eb..0477493706edb 100644
--- a/fs/dlm/midcomms.c
+++ b/fs/dlm/midcomms.c
@@ -1185,8 +1185,15 @@ void dlm_midcomms_commit_mhandle(struct dlm_mhandle *mh,
 		dlm_free_mhandle(mh);
 		break;
 	case DLM_VERSION_3_2:
+		/* held rcu read lock here, because we sending the
+		 * dlm message out, when we do that we could receive
+		 * an ack back which releases the mhandle and we
+		 * get a use after free.
+		 */
+		rcu_read_lock();
 		dlm_midcomms_commit_msg_3_2(mh, name, namelen);
 		srcu_read_unlock(&nodes_srcu, mh->idx);
+		rcu_read_unlock();
 		break;
 	default:
 		srcu_read_unlock(&nodes_srcu, mh->idx);
-- 
2.39.2




  parent reply	other threads:[~2023-03-15 12:32 UTC|newest]

Thread overview: 151+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2023-03-15 12:11 [PATCH 6.1 000/143] 6.1.20-rc1 review Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 001/143] fs: prevent out-of-bounds array speculation when closing a file descriptor Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 002/143] btrfs: fix unnecessary increment of read error stat on write error Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 003/143] btrfs: fix percent calculation for bg reclaim message Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 004/143] io_uring/uring_cmd: ensure that device supports IOPOLL Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 005/143] erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 006/143] perf inject: Fix --buildid-all not to eat up MMAP2 Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 007/143] fork: allow CLONE_NEWTIME in clone3 flags Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 008/143] RISC-V: Stop emitting attributes Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 009/143] x86/CPU/AMD: Disable XSAVES on AMD family 0x17 Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 010/143] drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc15 Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 011/143] drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc21 Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 012/143] drm/amdgpu: fix error checking in amdgpu_read_mm_registers for nv Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 013/143] drm/display: Dont block HDR_OUTPUT_METADATA on unknown EOTF Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 014/143] drm/connector: print max_requested_bpc in state debugfs Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 015/143] staging: rtl8723bs: Fix key-store index handling Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 016/143] staging: rtl8723bs: Pass correct parameters to cfg80211_get_bss() Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 017/143] ext4: fix cgroup writeback accounting with fs-layer encryption Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 018/143] ext4: fix RENAME_WHITEOUT handling for inline directories Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 019/143] ext4: fix another off-by-one fsmap error on 1k block filesystems Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 020/143] ext4: move where set the MAY_INLINE_DATA flag is set Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 021/143] ext4: fix WARNING in ext4_update_inline_data Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 022/143] ext4: zero i_disksize when initializing the bootloader inode Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 023/143] HID: core: Provide new max_buffer_size attribute to over-ride the default Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 024/143] HID: uhid: Over-ride the default maximum data buffer value with our own Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 025/143] nfc: change order inside nfc_se_io error path Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 026/143] KVM: VMX: Reset eVMCS controls in VP assist page during hardware disabling Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 027/143] KVM: VMX: Dont bother disabling eVMCS static key on module exit Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 028/143] KVM: x86: Move guts of kvm_arch_init() to standalone helper Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 029/143] KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 030/143] fs: dlm: fix log of lowcomms vs midcomms Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 031/143] fs: dlm: add midcomms init/start functions Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 032/143] fs: dlm: start midcomms before scand Greg Kroah-Hartman
2023-03-15 12:11 ` [PATCH 6.1 033/143] fs: dlm: remove send repeat remove handling Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 034/143] fs: dlm: use packet in dlm_mhandle Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 035/143] fd: dlm: trace send/recv of dlm message and rcom Greg Kroah-Hartman
2023-03-15 12:12 ` Greg Kroah-Hartman [this message]
2023-03-15 12:12 ` [PATCH 6.1 037/143] fs: dlm: use WARN_ON_ONCE() instead of WARN_ON() Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 038/143] fs: dlm: be sure to call dlm_send_queue_flush() Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 039/143] fs: dlm: fix race setting stop tx flag Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 040/143] udf: Fix off-by-one error when discarding preallocation Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 041/143] bus: mhi: ep: Power up/down MHI stack during MHI RESET Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 042/143] bus: mhi: ep: Change state_lock to mutex Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 043/143] powerpc/boot: Dont always pass -mcpu=powerpc when building 32-bit uImage Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 044/143] Input: exc3000 - properly stop timer on shutdown Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 045/143] ipmi:ssif: Remove rtc_us_timer Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 046/143] ipmi:ssif: Increase the message retry time Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 047/143] ipmi:ssif: Add a timer between request retries Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 048/143] spi: intel: Check number of chip selects after reading the descriptor Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 049/143] drm/i915: Introduce intel_panel_init_alloc() Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 050/143] drm/i915: Do panel VBT init early if the VBT declares an explicit panel type Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 051/143] drm/i915: Populate encoder->devdata for DSI on icl+ Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 052/143] block: Revert "block: Do not reread partition table on exclusively open device" Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 053/143] block: fix scan partition for exclusively open device again Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 054/143] riscv: Add header include guards to insn.h Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 055/143] scsi: core: Remove the /proc/scsi/${proc_name} directory earlier Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 056/143] ext4: Fix possible corruption when moving a directory Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 057/143] cifs: improve checking of DFS links over STATUS_OBJECT_NAME_INVALID Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 058/143] drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 059/143] drm/msm: Fix potential invalid ptr free Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 060/143] drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 061/143] drm/msm/a5xx: fix highest bank bit for a530 Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 062/143] drm/msm/a5xx: fix the emptyness check in the preempt code Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 063/143] drm/msm/a5xx: fix context faults during ring switch Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 064/143] bgmac: fix *initial* chip reset to support BCM5358 Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 065/143] nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 066/143] powerpc: dts: t1040rdb: fix compatible string for Rev A boards Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 067/143] tls: rx: fix return value for async crypto Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 068/143] drm/msm/dpu: disable features unsupported by QCM2290 Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 069/143] ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping() Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 070/143] net: lan966x: Fix port police support using tc-matchall Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 071/143] selftests: nft_nat: ensuring the listening side is up before starting the client Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 072/143] netfilter: nft_last: copy content when cloning expression Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 073/143] netfilter: nft_quota: " Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 074/143] net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 075/143] net: use indirect calls helpers for sk_exit_memory_pressure() Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 076/143] perf stat: Fix counting when initial delay configured Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 077/143] net: lan78xx: fix accessing the LAN7800s internal phy specific registers from the MAC driver Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 078/143] net: caif: Fix use-after-free in cfusbl_device_notify() Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 079/143] ice: copy last block omitted in ice_get_module_eeprom() Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 080/143] bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 081/143] drm/msm/dpu: fix len of sc7180 ctl blocks Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 082/143] drm/msm/dpu: drop DPU_DIM_LAYER from MIXER_MSM8998_MASK Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 083/143] drm/msm/dpu: fix clocks settings for msm8998 SSPP blocks Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 084/143] drm/msm/dpu: clear DSPP reservations in rm release Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 085/143] net: stmmac: add to set device wake up flag when stmmac init phy Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 086/143] net: phylib: get rid of unnecessary locking Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 087/143] bnxt_en: Avoid order-5 memory allocation for TPA data Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 088/143] netfilter: ctnetlink: revert to dumping mark regardless of event type Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 089/143] netfilter: tproxy: fix deadlock due to missing BH disable Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 090/143] m68k: mm: Move initrd phys_to_virt handling after paging_init() Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 091/143] btrfs: fix extent map logging bit not cleared for split maps after dropping range Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 092/143] bpf, test_run: fix &xdp_frame misplacement for LIVE_FRAMES Greg Kroah-Hartman
2023-03-15 12:12 ` [PATCH 6.1 093/143] btf: fix resolving BTF_KIND_VAR after ARRAY, STRUCT, UNION, PTR Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 094/143] net: phy: smsc: fix link up detection in forced irq mode Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 095/143] net: ethernet: mtk_eth_soc: fix RX data corruption issue Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 096/143] net: tls: fix device-offloaded sendpage straddling records Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 097/143] scsi: megaraid_sas: Update max supported LD IDs to 240 Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 098/143] scsi: sd: Fix wrong zone_write_granularity value during revalidate Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 099/143] netfilter: conntrack: adopt safer max chain length Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 100/143] platform: mellanox: select REGMAP instead of depending on it Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 101/143] platform: x86: MLX_PLATFORM: " Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 102/143] block: fix wrong mode for blkdev_put() from disk_scan_partitions() Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 103/143] NFSD: Protect against filesystem freezing Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 104/143] ice: Fix DSCP PFC TLV creation Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 105/143] ethernet: ice: avoid gcc-9 integer overflow warning Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 106/143] net/smc: fix fallback failed while sendmsg with fastopen Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 107/143] octeontx2-af: Unlock contexts in the queue context cache in case of fault detection Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 108/143] SUNRPC: Fix a server shutdown leak Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 109/143] net: dsa: mt7530: permit port 5 to work without port 6 on MT7621 SoC Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 110/143] af_unix: fix struct pid leaks in OOB support Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 111/143] erofs: Revert "erofs: fix kvcalloc() misuse with __GFP_NOFAIL" Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 112/143] riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 113/143] RISC-V: Dont check text_mutex during stop_machine Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 114/143] drm/amdgpu: fix return value check in kfd Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 115/143] ext4: Fix deadlock during directory rename Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 116/143] drm/amdgpu/soc21: dont expose AV1 if VCN0 is harvested Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 117/143] drm/amdgpu/soc21: Add video cap query support for VCN_4_0_4 Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 118/143] adreno: Shutdown the GPU properly Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 119/143] drm/msm/adreno: fix runtime PM imbalance at unbind Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 120/143] watch_queue: fix IOC_WATCH_QUEUE_SET_SIZE alloc error paths Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 121/143] tpm/eventlog: Dont abort tpm_read_log on faulty ACPI address Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 122/143] clk: qcom: mmcc-apq8084: remove spdm clocks Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 123/143] MIPS: Fix a compilation issue Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 124/143] powerpc: Check !irq instead of irq == NO_IRQ and remove NO_IRQ Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 125/143] powerpc/64: Dont recurse irq replay Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 126/143] powerpc/iommu: fix memory leak with using debugfs_lookup() Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 127/143] clk: renesas: rcar-gen3: Disable R-Car H3 ES1.* Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 128/143] powerpc/bpf/32: Only set a stack frame when necessary Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 129/143] powerpc/64: Fix task_cpu in early boot when booting non-zero cpuid Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 130/143] powerpc/64: Move paca allocation to early_setup() Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 131/143] powerpc/kcsan: Exclude udelay to prevent recursive instrumentation Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 132/143] alpha: fix R_ALPHA_LITERAL reloc for large modules Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 133/143] macintosh: windfarm: Use unsigned type for 1-bit bitfields Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 134/143] PCI: Add SolidRun vendor ID Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 135/143] PCI: Avoid FLR for SolidRun SNET DPU rev 1 Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 136/143] scripts: handle BrokenPipeError for python scripts Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 137/143] media: ov5640: Fix analogue gain control Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 138/143] media: rc: gpio-ir-recv: add remove function Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 139/143] drm/amd/display: Allow subvp on vactive pipes that are 2560x1440@60 Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 140/143] drm/amd/display: adjust MALL size available for DCN32 and DCN321 Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 141/143] filelocks: use mount idmapping for setlease permission check Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 142/143] Revert "bpf, test_run: fix &xdp_frame misplacement for LIVE_FRAMES" Greg Kroah-Hartman
2023-03-15 12:13 ` [PATCH 6.1 143/143] UML: define RUNTIME_DISCARD_EXIT Greg Kroah-Hartman
2023-03-15 13:58 ` [PATCH 6.1 000/143] 6.1.20-rc1 review Chris Paterson
2023-03-15 15:21 ` Daniel Díaz
2023-03-16  8:02   ` Greg Kroah-Hartman
2023-03-15 17:55 ` Conor Dooley
2023-03-15 21:51 ` Florian Fainelli
2023-03-15 23:55 ` Shuah Khan
2023-03-16  3:30 ` Bagas Sanjaya

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20230315115741.609833030@linuxfoundation.org \
    --to=gregkh@linuxfoundation.org \
    --cc=aahringo@redhat.com \
    --cc=patches@lists.linux.dev \
    --cc=sashal@kernel.org \
    --cc=stable@vger.kernel.org \
    --cc=teigland@redhat.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox