From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id BA55E36403B for ; Thu, 30 Jul 2026 19:33:47 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1785440028; cv=none; b=ak4W+HolG18ZJxs9rsS+YBn3CAUVVi9mhjaGjXFM8OCCEbeAZKwQpKXt15fYZiRQrmlz34PnstaqHbB3283GyhEztkcTI2OSdjM535a415sJ2M0gTpKmCk/d4/Mm0GuuUpUPlMWEOJM5o+LkVPi7ancvFueXTdhBP+VB0VZAiOc= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1785440028; c=relaxed/simple; bh=yFzBj1UJ2wkIWXeDpEO3vu4OB6LHV9kSBYK7TmXvobA=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=l/Xyjp1h64Dge7wqfo5zTJ+FHdG1iQrJS3vsoYzpNtMA7jfIllUMYnLdQrCNCtgUD2sn/mckCPqdXmF0Dm3NOD7BRAzQowjnFv7J3Ei1pWjfwQdKuCHz2NijZ/Cfx25APPrT+125tNS3q9Fr4gsE5NC7Sr3Flw8fDbrSBKdyu8I= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=iGtf2ttu; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="iGtf2ttu" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 4111B1F000E9; Thu, 30 Jul 2026 19:33:47 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1785440027; bh=joufjy/apGCVE+4nEKl82cCBExTx7DXE8UP2G1JaeWU=; h=Date:From:To:Cc:Subject:References:In-Reply-To; b=iGtf2ttuPpdBnquWx8cuYyeKcaXnIxqb/gCGc2XsMwrDOAA8rpAKOCZHfebBZH6ah XF/4Co7xzm0Ius+ddZnZy08xn0zBVP2MeChEkll651ksu5RWJI8MJdACCVxxZufcxK ZXiFpRP/J8bikVOBMjh4f0FEoiv6efwJYMTf0Ohww/7eaSqZgSqeyI9IbYn0R6K8iB Y9zRrtVhnuIn3fx8LYiWCxp0W92R8znT3tm6nypDj2LizfdN6ZqRPbRmbxS71VXIRp uITiBZyCQwoTOe+XTP778y7kJLuqaNwjL8MEJ94lhOqk72iT2B18kh2NT7/YIBPy9l 1eGPzIzULzN5g== Date: Thu, 30 Jul 2026 13:33:45 -0600 From: Keith Busch To: Greg Kroah-Hartman Cc: Christoph Hellwig , Hari Mishal , Jens Axboe , Sagi Grimberg , Hannes Reinecke , Kanchan Joshi , Nitesh Shetty , linux-nvme@lists.infradead.org, linux-kernel@vger.kernel.org Subject: Re: [PATCH 2/2] nvme: drop WARN_ON_ONCE on write_stream bounds check Message-ID: References: <2026072849-uproar-aqua-07c3@gregkh> <20260728051838.GA20593@lst.de> <2026072834-buffoon-entwine-ed16@gregkh> <20260730114123.GB25956@lst.de> <2026073003-primp-granular-c176@gregkh> <20260730133726.GA2983@lst.de> <2026073049-improper-paparazzi-6be7@gregkh> <2026073054-visiting-plural-7eb0@gregkh> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <2026073054-visiting-plural-7eb0@gregkh> On Thu, Jul 30, 2026 at 05:02:32PM +0200, Greg Kroah-Hartman wrote: > On Thu, Jul 30, 2026 at 08:27:07AM -0600, Keith Busch wrote: > > On Thu, Jul 30, 2026 at 04:04:03PM +0200, Greg Kroah-Hartman wrote: > > > It's only the systems that have panic-on-warn enabled that need to worry > > > about user-triggered calls to that macro, and those systems know what > > > they are getting themselves into, including the huge number of CVE fixes > > > they then need to be responsible for backporting :) > > > > This is a bit of a rug pull. We've long held the pattern that WARN is an > > appropriate macro for conditions that should never happen, but don't > > leave the system in an unrecoverable or compromised state. For > > unrecoverable conditions, use BUG. It has been a valuable tool for > > debugging and bug reporting. > > Sure, that's fine, just don't have such a path that a user can trigger, > and all is good. syzbot has been dealing with this for years, it's not > a rug-pull at all. I think we're all on board that the kernel and drivers should fix their existing WARN's in user triggerable paths to something that doesn't raise that alarm. It's just that WARN in general can now mean "panic", and that's concerning with how we're supposed to use it.