Subject: [PATCH] treewide: const qualify ctl_tables where applicable From: Joel Granados To: =?utf-8?q?Thomas_Wei=C3=9Fschuh?= , Kees Cook , Luis Chamberlain Cc: linux-arm-kernel@lists.infradead.org, linux-kernel@vger.kernel.org, linuxppc-dev@lists.ozlabs.org, linux-riscv@lists.infradead.org, linux-s390@vger.kernel.org, linux-crypto@vger.kernel.org, openipmi-developer@lists.sourceforge.net, intel-gfx@lists.freedesktop.org, dri-devel@lists.freedesktop.org, intel-xe@lists.freedesktop.org, linux-hyperv@vger.kernel.org, linux-rdma@vger.kernel.org, linux-raid@vger.kernel.org, linux-scsi@vger.kernel.org, linux-serial@vger.kernel.org, xen-devel@lists.xenproject.org, linux-aio@kvack.org, linux-fsdevel@vger.kernel.org, netfs@lists.linux.dev, codalist@coda.cs.cmu.edu, linux-mm@kvack.org, linux-nfs@vger.kernel.org, ocfs2-devel@lists.linux.dev, fsverity@lists.linux.dev, linux-xfs@vger.kernel.org, io-uring@vger.kernel.org, bpf@vger.kernel.org, kexec@lists.infradead.org, linux-trace-kernel@vger.kernel.org, linux-hardening@vger.kernel.org, apparmor@lists.ubuntu.com, linux-security-module@vger.kernel.org, keyrings@vger.kernel.org, Joel Granados Date: Thu, 09 Jan 2025 14:16:39 +0100 . Subject: [PATCH v2] treewide: const qualify ctl_tables where applicable From: Joel Granados To: =?utf-8?q?Thomas_Wei=C3=9Fschuh?= , Kees Cook , Luis Chamberlain Cc: linux-arm-kernel@lists.infradead.org, linux-kernel@vger.kernel.org, linuxppc-dev@lists.ozlabs.org, linux-riscv@lists.infradead.org, linux-s390@vger.kernel.org, linux-crypto@vger.kernel.org, openipmi-developer@lists.sourceforge.net, intel-gfx@lists.freedesktop.org, dri-devel@lists.freedesktop.org, intel-xe@lists.freedesktop.org, linux-hyperv@vger.kernel.org, linux-rdma@vger.kernel.org, linux-raid@vger.kernel.org, linux-scsi@vger.kernel.org, linux-serial@vger.kernel.org, xen-devel@lists.xenproject.org, linux-aio@kvack.org, linux-fsdevel@vger.kernel.org, netfs@lists.linux.dev, codalist@coda.cs.cmu.edu, linux-mm@kvack.org, linux-nfs@vger.kernel.org, ocfs2-devel@lists.linux.dev, fsverity@lists.linux.dev, linux-xfs@vger.kernel.org, io-uring@vger.kernel.org, bpf@vger.kernel.org, kexec@lists.infradead.org, linux-trace-kernel@vger.kernel.org, linux-hardening@vger.kernel.org, apparmor@lists.ubuntu.com, linux-security-module@vger.kernel.org, keyrings@vger.kernel.org, Song Liu , "Steven Rostedt (Google)" , "Martin K. Petersen" , "Darrick J. Wong" , Jani Nikula , Corey Minyard , Joel Granados Date: Fri, 10 Jan 2025 15:16:08 +0100 . Subject: [PATCH RFC v6 00/16] fuse: fuse-over-io-uring From: Bernd Schubert To: Miklos Szeredi Cc: Jens Axboe , Pavel Begunkov , linux-fsdevel@vger.kernel.org, io-uring@vger.kernel.org, Joanne Koong , Josef Bacik , Amir Goldstein , Ming Lei , David Wei , bernd@bsbernd.com, Bernd Schubert Date: Fri, 22 Nov 2024 00:43:16 +0100 . Subject: [syzbot] [io-uring?] WARNING in io_pin_pages From: syzbot To: asml.silence@gmail.com, axboe@kernel.dk, io-uring@vger.kernel.org, linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Date: Fri, 22 Nov 2024 02:51:30 -0800 . Subject: [PATCHSET for-next 0/6] task work cleanups From: Jens Axboe To: io-uring@vger.kernel.org Date: Fri, 22 Nov 2024 09:12:38 -0700 . Subject: [PATCH v2 0/9] Clean up alloc_cache allocations From: Gabriel Krisman Bertazi To: axboe@kernel.dk, asml.silence@gmail.com Cc: io-uring@vger.kernel.org, Gabriel Krisman Bertazi Date: Fri, 22 Nov 2024 16:15:32 -0500 . Subject: [PATCH v2 00/18] kernel allocated regions and convert memmap to regions From: Pavel Begunkov To: io-uring@vger.kernel.org Cc: asml.silence@gmail.com Date: Sun, 24 Nov 2024 21:12:17 +0000 . Subject: [PATCH 1/1] io_uring: fix corner case forgetting to vunmap From: Pavel Begunkov To: io-uring@vger.kernel.org Cc: asml.silence@gmail.com Date: Mon, 25 Nov 2024 23:10:31 +0000 . Subject: [PATCH 1/1] io_uring: sanitise nr_pages for SQ/CQ From: Pavel Begunkov To: io-uring@vger.kernel.org Cc: asml.silence@gmail.com, syzbot+2159cbb522b02847c053@syzkaller.appspotmail.com Date: Mon, 25 Nov 2024 23:22:24 +0000 . Subject: [PATCH 1/1] io_uring: check for overflows in io_pin_pages From: Pavel Begunkov To: io-uring@vger.kernel.org Cc: asml.silence@gmail.com, syzbot+2159cbb522b02847c053@syzkaller.appspotmail.com Date: Tue, 26 Nov 2024 00:34:18 +0000 . Subject: re: [PATCH -next] io_uring: add support for fchmod From: lizetao To: Jens Axboe Date: Tue, 26 Nov 2024 15:07:51 +0000 . Subject: [PATCH RFC v7 00/16] fuse: fuse-over-io-uring From: Bernd Schubert To: Miklos Szeredi Cc: Jens Axboe , Pavel Begunkov , linux-fsdevel@vger.kernel.org, io-uring@vger.kernel.org, Joanne Koong , Josef Bacik , Amir Goldstein , Ming Lei , David Wei , bernd@bsbernd.com, Bernd Schubert Date: Wed, 27 Nov 2024 14:40:17 +0100 . Subject: bcachefs: suspicious mm pointer in struct dio_write From: Jann Horn To: Kent Overstreet , linux-bcachefs@vger.kernel.org Cc: kernel list , Jens Axboe , Pavel Begunkov , io-uring Date: Wed, 27 Nov 2024 17:57:03 +0100 . Subject: [PATCH v3 00/18] kernel allocated regions and convert memmap to regions From: Pavel Begunkov To: io-uring@vger.kernel.org Cc: asml.silence@gmail.com Date: Fri, 29 Nov 2024 13:34:21 +0000 . Subject: [PATCH] io_uring/tctx: work around xa_store() allocation error issue From: Jens Axboe To: io-uring Date: Fri, 29 Nov 2024 07:24:48 -0700 . Subject: [GIT PULL] Final io_uring changes for 6.13-rc1 From: Jens Axboe To: Linus Torvalds Cc: io-uring Date: Fri, 29 Nov 2024 09:27:36 -0700 Hi Linus, Various fixes and changes for io_uring that should go into the 6.13 merge window. This pull request contains: - Remove a leftover struct from when the cqwait registered waiting was transitioned to regions. - Fix for an issue introduced in this merge window, where nop->fd might be used uninitialized. Ensure it's always set. - Add capping of the task_work run in local task_work mode, to prevent bursty and long chains from adding too much latency. - Work around xa_store() leaving ->head non-NULL if it encounters an allocation error during storing. Just a debug trigger, and can go away once xa_store() behaves in a more expected way for this condition. Not a major thing as it basically requires fault injection to trigger it. - Fix a few mapping corner cases - Fix KCSAN complaint on reading the table size post unlock. Again not a "real" issue, but it's easy to silence by just keeping the reading inside the lock that protects it. Please pull! The following changes since commit a652958888fb1ada3e4f6b548576c2d2c1b60d66: io_uring/region: fix error codes after failed vmap (2024-11-17 09:01:35 -0700) are available in the Git repository at: git://git.kernel.dk/linux.git tags/io_uring-6.13-20242901 for you to fetch changes up to 7eb75ce7527129d7f1fee6951566af409a37a1c4: io_uring/tctx: work around xa_store() allocation error issue (2024-11-29 07:20:28 -0700) ---------------------------------------------------------------- io_uring-6.13-20242901 ---------------------------------------------------------------- Dan Carpenter (1): io_uring/region: return negative -E2BIG in io_create_region() David Wei (2): io_uring: add io_local_work_pending() io_uring: limit local tw done Jens Axboe (3): io_uring/nop: ensure nop->fd is always initialized io_uring: fix task_work cap overshooting io_uring/tctx: work around xa_store() allocation error issue Pavel Begunkov (4): io_uring: remove io_uring_cqwait_reg_arg io_uring: protect register tracing io_uring: check for overflows in io_pin_pages io_uring: fix corner case forgetting to vunmap include/linux/io_uring_types.h | 1 + include/uapi/linux/io_uring.h | 14 -------- io_uring/io_uring.c | 75 ++++++++++++++++++++++++++++-------------- io_uring/io_uring.h | 9 +++-- io_uring/memmap.c | 13 ++++++-- io_uring/nop.c | 6 +++- io_uring/register.c | 3 +- io_uring/tctx.c | 13 +++++++- 8 files changed, 87 insertions(+), 47 deletions(-) -- Jens Axboe . Subject: [PATCH] exec: Make sure task->comm is always NUL-terminated From: Kees Cook To: Eric Biederman Cc: Kees Cook , Linus Torvalds , Alexander Viro , Christian Brauner , Jan Kara , linux-mm@kvack.org, linux-fsdevel@vger.kernel.org, Ingo Molnar , Peter Zijlstra , Juri Lelli , Vincent Guittot , Dietmar Eggemann , Steven Rostedt , Ben Segall , Mel Gorman , Valentin Schneider , Jens Axboe , Pavel Begunkov , Andrew Morton , Chen Yu , Shuah Khan , =?UTF-8?q?Micka=C3=ABl=20Sala=C3=BCn?= , linux-kernel@vger.kernel.org, io-uring@vger.kernel.org, linux-hardening@vger.kernel.org Date: Fri, 29 Nov 2024 20:49:14 -0800 . Subject: [PATCH liburing v1] configure: Increase the length of print result format From: Haiyue Wang To: io-uring@vger.kernel.org Cc: Haiyue Wang Date: Mon, 2 Dec 2024 01:12:44 +0800 . Subject: [PATCH] io_uring: Change res2 parameter type in io_uring_cmd_done From: Bernd Schubert To: Jens Axboe , Pavel Begunkov , Kanchan Joshi Cc: io-uring@vger.kernel.org, Bernd Schubert , stable@vger.kernel.org Date: Mon, 02 Dec 2024 15:22:17 +0100 . Subject: [PATCH v2] io_uring: Change res2 parameter type in io_uring_cmd_done From: Bernd Schubert To: Jens Axboe , Pavel Begunkov , Kanchan Joshi Cc: io-uring@vger.kernel.org, stable@vger.kernel.org, Li Zetao , Bernd Schubert Date: Tue, 03 Dec 2024 11:31:05 +0100 . Subject: [PATCH 0/3][RFC] virtio-blk: add io_uring passthrough support for virtio-blk From: Ferry Meng To: "Michael S . Tsirkin" , Jason Wang , linux-block@vger.kernel.org, Jens Axboe , virtualization@lists.linux.dev Cc: linux-kernel@vger.kernel.org, io-uring@vger.kernel.org, Joseph Qi , Jeffle Xu , Ferry Meng Date: Tue, 3 Dec 2024 20:14:21 +0800 . Subject: CONFIG_IO_URING can be enabled although it is not visible From: lizetao To: Jens Axboe , "masahiroy@kernel.org" Date: Tue, 3 Dec 2024 13:04:27 +0000 . Subject: [syzbot] [io-uring?] KASAN: null-ptr-deref Write in sys_io_uring_register From: syzbot To: asml.silence@gmail.com, axboe@kernel.dk, io-uring@vger.kernel.org, linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Date: Wed, 04 Dec 2024 05:56:24 -0800 . Subject: [PATCH][next] io_uring/kbuf: fix unintentional sign extension on shift of reg.bgid From: Colin Ian King To: Jens Axboe , Pavel Begunkov , io-uring@vger.kernel.org Cc: kernel-janitors@vger.kernel.org, linux-kernel@vger.kernel.org Date: Wed, 4 Dec 2024 15:39:23 +0000 . Subject: [PATCH] io_uring: expose read/write attribute capability From: Anuj Gupta To: axboe@kernel.dk, asml.silence@gmail.com, anuj1072538@gmail.com Cc: io-uring@vger.kernel.org, vishak.g@samsung.com, Anuj Gupta Date: Thu, 5 Dec 2024 11:51:09 +0530 . Subject: [PATCH for-next] io_uring: clean up io_prep_rw_setup() From: David Wei To: io-uring@vger.kernel.org Cc: David Wei , Jens Axboe , Pavel Begunkov Date: Fri, 6 Dec 2024 16:41:44 -0800 . Subject: [GIT PULL] io_uring fix for 6.13-rc2 From: Jens Axboe To: Linus Torvalds Cc: io-uring Date: Sat, 7 Dec 2024 08:11:03 -0700 Hi Linus, Just a single fix for a parameter type which affects 32-bit. Please pull! The following changes since commit cdd30ebb1b9f36159d66f088b61aee264e649d7a: module: Convert symbol namespace to string literal (2024-12-02 11:34:44 -0800) are available in the Git repository at: git://git.kernel.dk/linux.git tags/io_uring-6.13-20241207 for you to fetch changes up to a07d2d7930c75e6bf88683b376d09ab1f3fed2aa: io_uring: Change res2 parameter type in io_uring_cmd_done (2024-12-03 06:33:13 -0700) ---------------------------------------------------------------- io_uring-6.13-20241207 ---------------------------------------------------------------- Bernd Schubert (1): io_uring: Change res2 parameter type in io_uring_cmd_done include/linux/io_uring/cmd.h | 4 ++-- io_uring/uring_cmd.c | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) -- Jens Axboe . Subject: [PATCH v2 1/1] io_uring: prevent reg-wait speculations From: Pavel Begunkov To: io-uring@vger.kernel.org Cc: asml.silence@gmail.com, jannh@google.com Date: Sun, 8 Dec 2024 21:43:22 +0000 . Subject: [PATCH 1/1] io_uring: don't vmap single page regions From: Pavel Begunkov To: io-uring@vger.kernel.org Cc: asml.silence@gmail.com Date: Sun, 8 Dec 2024 21:46:01 +0000 . Subject: possible deadlock in __wake_up_common_lock From: chase xd To: Jens Axboe , Pavel Begunkov , io-uring@vger.kernel.org, linux-kernel@vger.kernel.org Date: Mon, 9 Dec 2024 13:03:35 +0100 . Subject: [PATCH v8 00/16] fuse: fuse-over-io-uring From: Bernd Schubert To: Miklos Szeredi Cc: Jens Axboe , Pavel Begunkov , linux-fsdevel@vger.kernel.org, io-uring@vger.kernel.org, Joanne Koong , Josef Bacik , Amir Goldstein , Ming Lei , David Wei , bernd@bsbernd.com, Bernd Schubert Date: Mon, 09 Dec 2024 15:56:22 +0100 . Subject: [PATCH RFC 0/9] Launching processes with io_uring From: Gabriel Krisman Bertazi To: axboe@kernel.dk, asml.silence@gmail.com Cc: io-uring@vger.kernel.org, josh@joshtriplett.org, Gabriel Krisman Bertazi Date: Mon, 9 Dec 2024 18:43:02 -0500 . Subject: [PATCH RFC liburing 0/2] IORING_OP_CLONE/EXEC support and tests From: Gabriel Krisman Bertazi To: axboe@kernel.dk, asml.silence@gmail.com Cc: io-uring@vger.kernel.org, josh@joshtriplett.org, Gabriel Krisman Bertazi Date: Mon, 9 Dec 2024 18:44:19 -0500 . Subject: [io-uring] general protection fault in io_register_clone_buffers From: chase xd To: Jens Axboe , Pavel Begunkov , io-uring@vger.kernel.org, linux-kernel@vger.kernel.org Date: Thu, 12 Dec 2024 11:06:38 +0100 . Subject: [io-uring] use-after-free in io_cqring_wait From: chase xd To: Jens Axboe , Pavel Begunkov , io-uring@vger.kernel.org, linux-kernel@vger.kernel.org Date: Thu, 12 Dec 2024 11:08:55 +0100 . Subject: [syzbot] [io-uring?] KCSAN: data-race in io_recv / io_wq_free_work From: syzbot To: asml.silence@gmail.com, axboe@kernel.dk, io-uring@vger.kernel.org, linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Date: Fri, 13 Dec 2024 03:11:23 -0800 . Subject: [PATCH] btrfs: check if task has died in btrfs_uring_read_finished() From: Mark Harmstone To: , Date: Fri, 13 Dec 2024 12:46:15 +0000 . Subject: WARNING in get_pat_info From: chase xd To: Jens Axboe , Pavel Begunkov , io-uring@vger.kernel.org, linux-kernel@vger.kernel.org Date: Fri, 13 Dec 2024 18:35:59 +0100 . Subject: [PATCH v2 1/3] io_uring/cmd: rename struct uring_cache to io_uring_cmd_data From: Mark Harmstone To: , Date: Fri, 13 Dec 2024 18:44:28 +0000 . Subject: [GIT PULL] io_uring fix for 6.13-rc3 From: Jens Axboe To: Linus Torvalds Cc: io-uring Date: Fri, 13 Dec 2024 13:46:12 -0700 Hi Linus, Just a single fix for a regression introduced in the 6.13 merge window. Please pull! The following changes since commit a07d2d7930c75e6bf88683b376d09ab1f3fed2aa: io_uring: Change res2 parameter type in io_uring_cmd_done (2024-12-03 06:33:13 -0700) are available in the Git repository at: git://git.kernel.dk/linux.git tags/io_uring-6.13-20241213 for you to fetch changes up to 99d6af6e8a22b792e1845b186f943cd10bb4b7b0: io_uring/rsrc: don't put/free empty buffers (2024-12-12 08:01:52 -0700) ---------------------------------------------------------------- io_uring-6.13-20241213 ---------------------------------------------------------------- Jens Axboe (1): io_uring/rsrc: don't put/free empty buffers io_uring/rsrc.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) -- Jens Axboe . Subject: [PATCH RESEND v2 0/9] Clean up alloc_cache allocations From: Gabriel Krisman Bertazi To: axboe@kernel.dk, asml.silence@gmail.com Cc: io-uring@vger.kernel.org, Gabriel Krisman Bertazi Date: Mon, 16 Dec 2024 15:46:06 -0500 . Subject: [PATCH] io_uring/rw: don't mask in f_iocb_flags From: Jens Axboe To: io-uring Cc: Kanchan Joshi , Anuj Gupta Date: Tue, 17 Dec 2024 08:05:29 -0700 . Subject: [PATCH] io_uring: make ctx->timeout_lock a raw spinlock From: Jens Axboe To: io-uring Date: Tue, 17 Dec 2024 08:57:05 -0700 . Subject: [PATCH v3 1/4] io_uring/cmd: rename struct uring_cache to io_uring_cmd_data From: Mark Harmstone To: , Date: Tue, 17 Dec 2024 18:01:59 +0000 . Subject: [PATCH] io_uring/rw: use NULL for rw->free_iovec assigment From: Jens Axboe To: io-uring Cc: Gabriel Krisman Bertazi Date: Tue, 17 Dec 2024 12:45:34 -0700 . Subject: [PATCH v1 0/3] virtio-blk: add io_uring passthrough support. From: Ferry Meng To: "Michael S . Tsirkin" , Jason Wang , linux-block@vger.kernel.org, Jens Axboe , virtualization@lists.linux.dev Cc: linux-kernel@vger.kernel.org, io-uring@vger.kernel.org, Stefan Hajnoczi , Christoph Hellwig , Joseph Qi , Jeffle Xu , Ferry Meng Date: Wed, 18 Dec 2024 17:24:32 +0800 . Subject: [PATCH] io_uring: Fix registered ring file refcount leak From: Jann Horn To: Jens Axboe , Pavel Begunkov Cc: io-uring@vger.kernel.org, linux-kernel@vger.kernel.org, stable@vger.kernel.org, Jann Horn Date: Wed, 18 Dec 2024 17:56:25 +0100 . Subject: [PATCH] io_uring/register: limit ring resizing to DEFER_TASKRUN From: Jens Axboe To: io-uring Date: Thu, 19 Dec 2024 09:35:36 -0700 . Subject: [PATCH 1/1] io_uring: check if iowq is kileed before queuing From: Pavel Begunkov To: io-uring@vger.kernel.org Cc: asml.silence@gmail.com, Will Date: Thu, 19 Dec 2024 19:52:58 +0000 . Subject: [PATCH] lsm,io_uring: add LSM hooks for io_uring_setup() From: Hamza Mahfooz To: linux-security-module@vger.kernel.org, io-uring@vger.kernel.org Cc: Hamza Mahfooz , Paul Moore , Jens Axboe , James Morris , "Serge E. Hallyn" , Pavel Begunkov , Stephen Smalley , Ondrej Mosnacek , =?UTF-8?q?Thi=C3=A9baud=20Weksteen?= , Masahiro Yamada , =?UTF-8?q?Bram=20Bonn=C3=A9?= , linux-kernel@vger.kernel.org, selinux@vger.kernel.org Date: Thu, 19 Dec 2024 15:41:41 -0500 . Subject: [PATCH 1/2] lsm: add LSM hooks for io_uring_setup() From: Hamza Mahfooz To: linux-security-module@vger.kernel.org, io-uring@vger.kernel.org Cc: Hamza Mahfooz , Paul Moore , James Morris , "Serge E. Hallyn" , Jens Axboe , Pavel Begunkov , Stephen Smalley , Ondrej Mosnacek , =?UTF-8?q?Bram=20Bonn=C3=A9?= , =?UTF-8?q?Thi=C3=A9baud=20Weksteen?= , Masahiro Yamada , linux-kernel@vger.kernel.org, selinux@vger.kernel.org Date: Thu, 19 Dec 2024 16:16:06 -0500 . Subject: [GIT PULL] io_uring fixes for 6.13-rc4 From: Jens Axboe To: Linus Torvalds Cc: io-uring Date: Fri, 20 Dec 2024 09:24:27 -0700 Hi Linus, Fixes for io_uring that should go into the 6.13-rc4 kernel release. This pull request contains: - Fix for a file ref leak for registered ring fds - Turn the ->timeout_lock into a raw spinlock, as it nests under the io-wq lock which is a raw spinlock as it's called from the scheduler side - Limit ring resizing to DEFER_TASKRUN for now. We will broaden this in the future, but for now, ensure that it's only feasible on rings with a single user - Add sanity check for io-wq enqueuing Please pull! The following changes since commit 99d6af6e8a22b792e1845b186f943cd10bb4b7b0: io_uring/rsrc: don't put/free empty buffers (2024-12-12 08:01:52 -0700) are available in the Git repository at: git://git.kernel.dk/linux.git tags/io_uring-6.13-20241220 for you to fetch changes up to dbd2ca9367eb19bc5e269b8c58b0b1514ada9156: io_uring: check if iowq is killed before queuing (2024-12-19 13:31:53 -0700) ---------------------------------------------------------------- io_uring-6.13-20241220 ---------------------------------------------------------------- Jann Horn (1): io_uring: Fix registered ring file refcount leak Jens Axboe (2): io_uring: make ctx->timeout_lock a raw spinlock io_uring/register: limit ring resizing to DEFER_TASKRUN Pavel Begunkov (1): io_uring: check if iowq is killed before queuing include/linux/io_uring.h | 4 +--- include/linux/io_uring_types.h | 2 +- io_uring/io_uring.c | 17 +++++++++++------ io_uring/register.c | 3 +++ io_uring/timeout.c | 40 ++++++++++++++++++++-------------------- 5 files changed, 36 insertions(+), 30 deletions(-) -- Jens Axboe . Subject: [syzbot] [io-uring?] WARNING in __io_submit_flush_completions From: syzbot To: asml.silence@gmail.com, axboe@kernel.dk, io-uring@vger.kernel.org, linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Date: Fri, 20 Dec 2024 10:15:36 -0800 . Subject: [syzbot] [fs?] [mm?] [io-uring?] INFO: task hung in hugetlbfs_zero_partial_page From: syzbot To: akpm@linux-foundation.org, asml.silence@gmail.com, axboe@kernel.dk, hughd@google.com, io-uring@vger.kernel.org, linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org, mike.kravetz@oracle.com, muchun.song@linux.dev, syzkaller-bugs@googlegroups.com Date: Sat, 21 Dec 2024 04:48:21 -0800 . Subject: [syzbot] [io-uring?] BUG: unable to handle kernel NULL pointer dereference in percpu_ref_put_many From: syzbot To: asml.silence@gmail.com, axboe@kernel.dk, io-uring@vger.kernel.org, linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Date: Mon, 23 Dec 2024 11:52:27 -0800 . Subject: [syzbot] Monthly io-uring report (Dec 2024) From: syzbot To: asml.silence@gmail.com, axboe@kernel.dk, io-uring@vger.kernel.org, linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Date: Thu, 26 Dec 2024 01:01:29 -0800 . Subject: [PATCH 1/1] io_uring/sqpoll: fix sqpoll error handling races From: Pavel Begunkov To: io-uring@vger.kernel.org Cc: asml.silence@gmail.com, Kun Hu Date: Thu, 26 Dec 2024 16:49:23 +0000 . Subject: [linux-next:master] [io_uring/rw] 8cf0c45999: fio.read_bw_MBps 51.1% regression From: kernel test robot To: Gabriel Krisman Bertazi Date: Fri, 27 Dec 2024 11:13:49 +0800 . Subject: [PATCH] io_uring/rw: always clear ->bytes_done on io_async_rw setup From: Jens Axboe To: io-uring Cc: Gabriel Krisman Bertazi Date: Fri, 27 Dec 2024 09:53:43 -0700 . Subject: [GIT PULL] io_uring fix for 6.13-rc5 From: Jens Axboe To: Linus Torvalds Cc: io-uring Date: Sat, 28 Dec 2024 09:30:51 -0700 Hi Linus, Just a single fix for a theoretical issue with SQPOLL setup. Please pull! The following changes since commit dbd2ca9367eb19bc5e269b8c58b0b1514ada9156: io_uring: check if iowq is killed before queuing (2024-12-19 13:31:53 -0700) are available in the Git repository at: git://git.kernel.dk/linux.git tags/io_uring-6.13-20241228 for you to fetch changes up to e33ac68e5e21ec1292490dfe061e75c0dbdd3bd4: io_uring/sqpoll: fix sqpoll error handling races (2024-12-26 10:02:40 -0700) ---------------------------------------------------------------- io_uring-6.13-20241228 ---------------------------------------------------------------- Pavel Begunkov (1): io_uring/sqpoll: fix sqpoll error handling races io_uring/sqpoll.c | 6 ++++++ 1 file changed, 6 insertions(+) -- Jens Axboe . Subject: [PATCH 1/1] io_uring/rw: fix downgraded mshot read From: Pavel Begunkov To: io-uring@vger.kernel.org Cc: asml.silence@gmail.com, chase xd Date: Sat, 28 Dec 2024 17:36:39 +0000 . Subject: [PATCH v2 1/1] io_uring/rw: fix downgraded mshot read From: Pavel Begunkov To: io-uring@vger.kernel.org Cc: asml.silence@gmail.com, chase xd Date: Sat, 28 Dec 2024 17:44:52 +0000 . Subject: [syzbot] [fs?] [io-uring?] WARNING: locking bug in eventfd_signal_mask From: syzbot To: asml.silence@gmail.com, axboe@kernel.dk, bigeasy@linutronix.de, brauner@kernel.org, clrkwllms@kernel.org, io-uring@vger.kernel.org, jack@suse.cz, linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, linux-rt-devel@lists.linux.dev, rostedt@goodmis.org, syzkaller-bugs@googlegroups.com, viro@zeniv.linux.org.uk Date: Sun, 29 Dec 2024 01:01:20 -0800 . Subject: [RFC 0/4] pre-mapped rw attributes From: Pavel Begunkov To: io-uring@vger.kernel.org Cc: asml.silence@gmail.com, Anuj Gupta , Kanchan Joshi Date: Mon, 30 Dec 2024 13:30:20 +0000 . Subject: [PATCH] io_uring/timeout: flush timeouts outside of the timeout lock From: Jens Axboe To: io-uring Date: Mon, 30 Dec 2024 14:22:59 -0700 . Subject: [PATCH for-next] io_uring: ensure io_queue_deferred() is out-of-line From: Jens Axboe To: io-uring Date: Mon, 30 Dec 2024 17:36:55 -0700 . Subject: [syzbot] [io-uring?] KMSAN: uninit-value in io_recv From: syzbot To: asml.silence@gmail.com, axboe@kernel.dk, io-uring@vger.kernel.org, linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Date: Thu, 02 Jan 2025 12:59:24 -0800 . Subject: [PATCH] io_uring/net: always initialize kmsg->msg.msg_inq upfront From: Jens Axboe To: io-uring Date: Thu, 2 Jan 2025 17:52:59 -0700 . Subject: [PATCH v4 0/4] btrfs: fix reading from userspace in btrfs_uring_encoded_read() From: Mark Harmstone To: , Date: Fri, 3 Jan 2025 15:02:22 +0000 . Subject: [PATCH] io_uring/rsrc: simplify the bvec iter's count calculation From: Bui Quang Minh To: linux-kernel@vger.kernel.org Cc: Bui Quang Minh , Jens Axboe , Pavel Begunkov , io-uring@vger.kernel.org Date: Fri, 3 Jan 2025 22:04:11 +0700 . Subject: [PATCH] io_uring/kbuf: use pre-committed buffer address for non-pollable file From: Jens Axboe To: io-uring Date: Fri, 3 Jan 2025 09:41:30 -0700 . Subject: [GIT PULL] io_uring fixes for 6.13-rc6 From: Jens Axboe To: Linus Torvalds Cc: io-uring Date: Fri, 3 Jan 2025 13:03:32 -0700 Hi Linus, A few fixes that should go into the 6.13-rc6 release, either fixing regressions in this cycle, or headed to stable. This pull request contains: - Fix an issue with the read multishot support and posting of CQEs from io-wq context. - Fix a regression introduced in this cycle, where making the timeout lock a raw one uncovered another locking dependency. As a result, move the timeout flushing outside of the timeout lock, punting them to a local list first. - Fix use of an uninitialized variable in io_async_msghdr. Doesn't really matter functionally, but silences a valid KMSAN complaint that it's not always initialized. - Fix use of incrementally provided buffers for read on non-pollable files, where the buffer always gets committed upfront. Unfortunately the buffer address isn't resolved first, so the read ends up using the updated rather than the current value. Please pull! The following changes since commit e33ac68e5e21ec1292490dfe061e75c0dbdd3bd4: io_uring/sqpoll: fix sqpoll error handling races (2024-12-26 10:02:40 -0700) are available in the Git repository at: git://git.kernel.dk/linux.git tags/io_uring-6.13-20250103 for you to fetch changes up to ed123c948d06688d10f3b10a7bce1d6fbfd1ed07: io_uring/kbuf: use pre-committed buffer address for non-pollable file (2025-01-03 09:38:37 -0700) ---------------------------------------------------------------- io_uring-6.13-20250103 ---------------------------------------------------------------- Jens Axboe (3): io_uring/timeout: flush timeouts outside of the timeout lock io_uring/net: always initialize kmsg->msg.msg_inq upfront io_uring/kbuf: use pre-committed buffer address for non-pollable file Pavel Begunkov (1): io_uring/rw: fix downgraded mshot read io_uring/kbuf.c | 4 +++- io_uring/net.c | 1 + io_uring/rw.c | 2 ++ io_uring/timeout.c | 45 +++++++++++++++++++++++++++++++-------------- 4 files changed, 37 insertions(+), 15 deletions(-) -- Jens Axboe . Subject: [PATCH 1/1] io_uring/timeout: fix multishot updates From: Pavel Begunkov To: io-uring@vger.kernel.org Cc: asml.silence@gmail.com, Christian Mazakas Date: Sat, 4 Jan 2025 18:29:02 +0000 . Subject: Bug? CQE.res = -EAGAIN with nvme multipath driver From: "Haeuptle, Michael" To: "io-uring@vger.kernel.org" Date: Mon, 6 Jan 2025 20:03:55 +0000 . Subject: [PATCH v9 00/17] fuse: fuse-over-io-uring From: Bernd Schubert To: Miklos Szeredi Cc: Jens Axboe , Pavel Begunkov , linux-fsdevel@vger.kernel.org, io-uring@vger.kernel.org, Joanne Koong , Josef Bacik , Amir Goldstein , Ming Lei , David Wei , bernd@bsbernd.com, Bernd Schubert Date: Tue, 07 Jan 2025 01:25:05 +0100 . Subject: [PATCH 1/1] io_uring: silence false positive warnings From: Pavel Begunkov To: io-uring@vger.kernel.org Cc: asml.silence@gmail.com, syzbot+1bcb75613069ad4957fc@syzkaller.appspotmail.com Date: Tue, 7 Jan 2025 14:11:32 +0000 . Subject: [PATCH 1/1] io_uring/rw: reissue only from the same task From: Pavel Begunkov To: io-uring@vger.kernel.org Cc: asml.silence@gmail.com Date: Tue, 7 Jan 2025 14:11:56 +0000 . Subject: [PATCH] io_uring/sqpoll: annotate data race for access in debug check From: Bui Quang Minh To: linux-kernel@vger.kernel.org Cc: Bui Quang Minh , Jens Axboe , Pavel Begunkov , io-uring@vger.kernel.org, syzbot+5988142e8a69a67b1418@syzkaller.appspotmail.com Date: Wed, 8 Jan 2025 22:10:51 +0700 . Subject: [PATCH] io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period From: Jens Axboe To: io-uring Date: Wed, 8 Jan 2025 16:42:20 -0700 . Subject: [PATCH for-next] io_uring/eventfd: replace out-of-line signaling with a workqueue From: Jens Axboe To: io-uring Date: Thu, 9 Jan 2025 07:50:22 -0700 . Subject: [PATCHSET for-next 0/3] Fix read/write -EAGAIN failure cases From: Jens Axboe To: io-uring@vger.kernel.org Date: Thu, 9 Jan 2025 11:15:38 -0700 . Subject: [PATCH 1/1] io_uring: sqpoll: zero sqd->thread on tctx errors From: Pavel Begunkov To: io-uring@vger.kernel.org Cc: asml.silence@gmail.com, syzbot+3d92cfcfa84070b0a470@syzkaller.appspotmail.com Date: Fri, 10 Jan 2025 14:31:23 +0000 . Subject: [PATCH v2] btrfs: add io_uring interface for encoded writes From: Mark Harmstone To: , Date: Fri, 10 Jan 2025 17:23:52 +0000 . Subject: [PATCH 1/1] io_uring: don't touch sqd->thread off tw add From: Pavel Begunkov To: io-uring@vger.kernel.org Cc: asml.silence@gmail.com, lizetao , Bui Quang Minh Date: Fri, 10 Jan 2025 20:36:45 +0000 . Subject: futex+io_uring: futex_q::task can maybe be dangling (but is not actually accessed, so it's fine) From: Jann Horn To: Thomas Gleixner , Ingo Molnar , Peter Zijlstra , Darren Hart , Davidlohr Bueso , =?UTF-8?Q?Andr=C3=A9_Almeida?= , kernel list , Jens Axboe , Pavel Begunkov , io-uring Date: Fri, 10 Jan 2025 23:26:42 +0100 . Subject: [RFC PATCH] mm/madvise: remove redundant mmap_lock operations from process_madvise() From: SeongJae Park To: Cc: SeongJae Park , Andrew Morton , Jens Axboe , Pavel Begunkov , damon@lists.linux.dev, io-uring@vger.kernel.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org Date: Fri, 10 Jan 2025 16:46:18 -0800 . Subject: [PATCH] io_uring: annotate sqd->thread access with data race in cancel path From: Bui Quang Minh To: linux-kernel@vger.kernel.org Cc: Bui Quang Minh , Jens Axboe , Pavel Begunkov , io-uring@vger.kernel.org, syzbot+3c750be01dab672c513d@syzkaller.appspotmail.com, Li Zetao Date: Sat, 11 Jan 2025 17:59:19 +0700 . Subject: KASAN reported an error while executing accept-reust.t testcase From: lizetao To: io-uring Date: Sat, 11 Jan 2025 14:07:32 +0000 . Subject: [GIT PULL] io_uring fixes for 6.13-rc7 From: Jens Axboe To: Linus Torvalds Cc: io-uring Date: Sat, 11 Jan 2025 09:19:00 -0700 Hi Linus, A set of minor fixes that should go into this release. This pull request contains: - Fix for multishot timeout updates only using the updated value for the first invocation, not subsequent ones. - Silence a false positive lockdep warning - Fix the eventfd signaling and putting RCU logic - Fix fault injected SQPOLL setup not clearing the task pointer in the error path - Fix local task_work looking at the SQPOLL thread rather than just signaling the safe variant. Again one of those theoretical issues, which should be closed up none the less. Please pull! The following changes since commit ed123c948d06688d10f3b10a7bce1d6fbfd1ed07: io_uring/kbuf: use pre-committed buffer address for non-pollable file (2025-01-03 09:38:37 -0700) are available in the Git repository at: git://git.kernel.dk/linux.git tags/io_uring-6.13-20250111 for you to fetch changes up to bd2703b42decebdcddf76e277ba76b4c4a142d73: io_uring: don't touch sqd->thread off tw add (2025-01-10 14:00:25 -0700) ---------------------------------------------------------------- io_uring-6.13-20250111 ---------------------------------------------------------------- Jens Axboe (1): io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period Pavel Begunkov (4): io_uring/timeout: fix multishot updates io_uring: silence false positive warnings io_uring/sqpoll: zero sqd->thread on tctx errors io_uring: don't touch sqd->thread off tw add io_uring/eventfd.c | 16 +++++++--------- io_uring/io_uring.c | 5 +---- io_uring/io_uring.h | 7 ++++--- io_uring/sqpoll.c | 6 +++++- io_uring/timeout.c | 4 +++- 5 files changed, 20 insertions(+), 18 deletions(-) -- Jens Axboe . Subject: [PATCH] io_uring: simplify the SQPOLL thread check when cancelling requests From: Bui Quang Minh To: linux-kernel@vger.kernel.org Cc: Bui Quang Minh , Jens Axboe , Pavel Begunkov , io-uring@vger.kernel.org, syzbot+3c750be01dab672c513d@syzkaller.appspotmail.com, Li Zetao Date: Sun, 12 Jan 2025 21:33:58 +0700 . Subject: [PATCH liburing] examples/io_uring-test: Fix memory leak From: Marcel Holtmann To: io-uring@vger.kernel.org Date: Sun, 12 Jan 2025 19:08:30 +0100 . Subject: [PATCH v2] io_uring: simplify the SQPOLL thread check when cancelling requests From: Bui Quang Minh To: linux-kernel@vger.kernel.org Cc: Bui Quang Minh , Jens Axboe , Pavel Begunkov , io-uring@vger.kernel.org, syzbot+3c750be01dab672c513d@syzkaller.appspotmail.com, Li Zetao Date: Mon, 13 Jan 2025 23:03:31 +0700 . Subject: [PATCH] io_uring/io-wq: Fix a small time window for reading work->flags From: lizetao To: Jens Axboe , Pavel Begunkov Date: Tue, 14 Jan 2025 02:06:50 +0000 . Subject: io_uring: memory accounting quirk with IORING_REGISTER_CLONE_BUFFERS From: Jann Horn To: Jens Axboe , Pavel Begunkov , io-uring , kernel list Date: Tue, 14 Jan 2025 18:16:39 +0100 . Subject: [PATCH] io_uring/rsrc: require cloned buffers to share accounting contexts From: Jann Horn To: Jens Axboe , Pavel Begunkov , io-uring@vger.kernel.org Cc: linux-kernel@vger.kernel.org, stable@vger.kernel.org, Jann Horn Date: Tue, 14 Jan 2025 18:49:00 +0100 . Subject: [PATCH] io_uring/rsrc: fixup io_clone_buffers() error handling From: Jens Axboe To: io-uring Date: Tue, 14 Jan 2025 10:59:27 -0700 . Subject: [PATCH] io_uring: Factor out a function to parse restrictions From: Josh Triplett To: Jens Axboe , Pavel Begunkov Cc: io-uring@vger.kernel.org Date: Wed, 15 Jan 2025 11:14:33 +0200 . Subject: [PATCH] test/defer: fix deadlock when io_uring_submit fail From: lizetao To: Jens Axboe , Pavel Begunkov Date: Wed, 15 Jan 2025 13:10:06 +0000 . Subject: [PATCH] io_uring/rsrc: remove unused parameter ctx for io_rsrc_node_alloc() From: Sidong Yang To: io-uring Cc: Sidong Yang Date: Wed, 15 Jan 2025 14:20:31 +0000 . Subject: [PATCH 1/1] io_uring: reuse io_should_terminate_tw() for cmds From: Pavel Begunkov To: io-uring@vger.kernel.org Cc: asml.silence@gmail.com Date: Wed, 15 Jan 2025 15:40:48 +0000 . Subject: [PATCHSET 0/3] Ring resizing fixes From: Jens Axboe To: io-uring@vger.kernel.org Cc: jannh@google.com Date: Wed, 15 Jan 2025 09:06:00 -0700 . Subject: [PATCH] io_uring/rsrc: Simplify buffer cloning by locking both rings From: Jann Horn To: Jens Axboe , Pavel Begunkov Cc: io-uring@vger.kernel.org, linux-kernel@vger.kernel.org, Jann Horn Date: Wed, 15 Jan 2025 17:25:35 +0100 . Subject: [PATCH v2] io_uring/rsrc: Simplify buffer cloning by locking both rings From: Jann Horn To: Jens Axboe , Pavel Begunkov Cc: io-uring@vger.kernel.org, linux-kernel@vger.kernel.org, Jann Horn Date: Wed, 15 Jan 2025 21:26:03 +0100 . Subject: [PATCH 1/1] io_uring: clean up io_uring_register_get_file() From: Pavel Begunkov To: io-uring@vger.kernel.org Cc: asml.silence@gmail.com Date: Thu, 16 Jan 2025 02:53:26 +0000 . Subject: [GIT PULL] io_uring fixes for 6.13-final From: Jens Axboe To: Linus Torvalds Cc: io-uring Date: Thu, 16 Jan 2025 17:06:47 -0700 Hi Linus, One fix for the error handling in buffer cloning, and one fix for the ring resizing. Two minor followups for the latter as well. Both of these issues only affect 6.13, so not marked for stable. Please pull! The following changes since commit bd2703b42decebdcddf76e277ba76b4c4a142d73: io_uring: don't touch sqd->thread off tw add (2025-01-10 14:00:25 -0700) are available in the Git repository at: git://git.kernel.dk/linux.git tags/io_uring-6.13-20250116 for you to fetch changes up to 6f7a644eb7db10f9993039bab7740f7982d4edf4: io_uring/register: cache old SQ/CQ head reading for copies (2025-01-15 08:39:15 -0700) ---------------------------------------------------------------- io_uring-6.13-20250116 ---------------------------------------------------------------- Jens Axboe (4): io_uring/rsrc: fixup io_clone_buffers() error handling io_uring/register: use stable SQ/CQ ring data during resize io_uring/register: document io_register_resize_rings() shared mem usage io_uring/register: cache old SQ/CQ head reading for copies io_uring/register.c | 52 +++++++++++++++++++++++++++++++--------------------- io_uring/rsrc.c | 10 +--------- 2 files changed, 32 insertions(+), 30 deletions(-) -- Jens Axboe . Subject: [RFC][PATCH] fix io_uring_show_fdinfo() misuse of ->d_iname From: Al Viro To: linux-fsdevel@vger.kernel.org Cc: Jens Axboe , Pavel Begunkov , io-uring@vger.kernel.org, Linus Torvalds Date: Sat, 18 Jan 2025 02:57:17 +0000 . Subject: [GIT PULL] io_uring updates for 6.14-rc1 From: Jens Axboe To: Linus Torvalds Cc: io-uring Date: Sun, 19 Jan 2025 08:05:26 -0700 Hi Linus, Here are the io_uring updates for 6.14. Not a lot in terms of features this time around, mostly just cleanups and code consolidation. In detail, this pull request contains: - Support for PI meta data read/write via io_uring, with NVMe and SCSI covered. - Cleanup the per-op structure caching, making it consistent across various command types. - Consolidate the various user mapped features into a concept called regions, making the various users of that consistent. - Various cleanups and fixes. Note that this will throw a merge conflict, as there's a conflict between a fix that went into mainline after 6.13-rc4. The io_uring/register.c one is trivial, the io_uring/uring_cmd.c requires a small addition. Here's my resolution, while merging it into my for-next branch: commit 3761b21b00320fc676aa8f5df8c9158046372b73 Merge: 65a64ecb3357 bab4b2cca027 Author: Jens Axboe Date: Wed Jan 15 08:52:03 2025 -0700 Merge branch 'for-6.14/io_uring' into for-next * for-6.14/io_uring: (55 commits) io_uring: reuse io_should_terminate_tw() for cmds io_uring: Factor out a function to parse restrictions io_uring/rsrc: require cloned buffers to share accounting contexts io_uring: simplify the SQPOLL thread check when cancelling requests io_uring: expose read/write attribute capability io_uring/rw: don't gate retry on completion context io_uring/rw: handle -EAGAIN retry at IO completion time io_uring/rw: use io_rw_recycle() from cleanup path io_uring/rsrc: simplify the bvec iter count calculation io_uring: ensure io_queue_deferred() is out-of-line io_uring/rw: always clear ->bytes_done on io_async_rw setup io_uring/rw: use NULL for rw->free_iovec assigment io_uring/rw: don't mask in f_iocb_flags io_uring/msg_ring: Drop custom destructor io_uring: Move old async data allocation helper to header io_uring/rw: Allocate async data through helper io_uring/net: Allocate msghdr async data through helper io_uring/uring_cmd: Allocate async data through generic helper io_uring/poll: Allocate apoll with generic alloc_cache helper io_uring/futex: Allocate ifd with generic alloc_cache helper ... Signed-off-by: Jens Axboe diff --cc io_uring/register.c index 371aec87e078,4d507a0390e8..6efbeee734a9 --- a/io_uring/register.c +++ b/io_uring/register.c @@@ -403,11 -396,11 +396,11 @@@ static void io_register_free_rings(stru static int io_register_resize_rings(struct io_ring_ctx *ctx, void __user *arg) { + struct io_uring_region_desc rd; struct io_ring_ctx_rings o = { }, n = { }, *to_free = NULL; size_t size, sq_array_offset; + unsigned i, tail, old_head; struct io_uring_params p; - void *ptr; - unsigned i, tail; int ret; /* for single issuer, must be owner resizing */ @@@ -441,29 -434,26 +434,34 @@@ if (size == SIZE_MAX) return -EOVERFLOW; - if (!(p.flags & IORING_SETUP_NO_MMAP)) - n.rings = io_pages_map(&n.ring_pages, &n.n_ring_pages, size); - else - n.rings = __io_uaddr_map(&n.ring_pages, &n.n_ring_pages, - p.cq_off.user_addr, size); - if (IS_ERR(n.rings)) - return PTR_ERR(n.rings); + memset(&rd, 0, sizeof(rd)); + rd.size = PAGE_ALIGN(size); + if (p.flags & IORING_SETUP_NO_MMAP) { + rd.user_addr = p.cq_off.user_addr; + rd.flags |= IORING_MEM_REGION_TYPE_USER; + } + ret = io_create_region_mmap_safe(ctx, &n.ring_region, &rd, IORING_OFF_CQ_RING); + if (ret) { + io_register_free_rings(ctx, &p, &n); + return ret; + } + n.rings = io_region_get_ptr(&n.ring_region); - n.rings->sq_ring_mask = p.sq_entries - 1; - n.rings->cq_ring_mask = p.cq_entries - 1; - n.rings->sq_ring_entries = p.sq_entries; - n.rings->cq_ring_entries = p.cq_entries; + /* + * At this point n.rings is shared with userspace, just like o.rings + * is as well. While we don't expect userspace to modify it while + * a resize is in progress, and it's most likely that userspace will + * shoot itself in the foot if it does, we can't always assume good + * intent... Use read/write once helpers from here on to indicate the + * shared nature of it. + */ + WRITE_ONCE(n.rings->sq_ring_mask, p.sq_entries - 1); + WRITE_ONCE(n.rings->cq_ring_mask, p.cq_entries - 1); + WRITE_ONCE(n.rings->sq_ring_entries, p.sq_entries); + WRITE_ONCE(n.rings->cq_ring_entries, p.cq_entries); if (copy_to_user(arg, &p, sizeof(p))) { - io_register_free_rings(&p, &n); + io_register_free_rings(ctx, &p, &n); return -EFAULT; } @@@ -516,14 -508,12 +516,13 @@@ * Now copy SQ and CQ entries, if any. If either of the destination * rings can't hold what is already there, then fail the operation. */ - n.sq_sqes = ptr; - tail = READ_ONCE(o.rings->sq.tail); + tail = o.rings->sq.tail; - if (tail - o.rings->sq.head > p.sq_entries) + old_head = READ_ONCE(o.rings->sq.head); + if (tail - old_head > p.sq_entries) goto overflow; - for (i = o.rings->sq.head; i < tail; i++) { + for (i = old_head; i < tail; i++) { unsigned src_head = i & (ctx->sq_entries - 1); - unsigned dst_head = i & n.rings->sq_ring_mask; + unsigned dst_head = i & (p.sq_entries - 1); n.sq_sqes[dst_head] = o.sq_sqes[src_head]; } diff --cc io_uring/uring_cmd.c index ce7726a04883,d235043db21e..7fb7c0a08996 --- a/io_uring/uring_cmd.c +++ b/io_uring/uring_cmd.c @@@ -188,14 -163,14 +168,22 @@@ void io_uring_cmd_done(struct io_uring_ } EXPORT_SYMBOL_GPL(io_uring_cmd_done); ++static void io_uring_cmd_init_once(void *obj) ++{ ++ struct io_uring_cmd_data *data = obj; ++ ++ data->op_data = NULL; ++} ++ static int io_uring_cmd_prep_setup(struct io_kiocb *req, const struct io_uring_sqe *sqe) { struct io_uring_cmd *ioucmd = io_kiocb_to_cmd(req, struct io_uring_cmd); - struct uring_cache *cache; + struct io_uring_cmd_data *cache; - cache = io_uring_async_get(req); - if (unlikely(!cache)) - cache = io_uring_alloc_async_data(&req->ctx->uring_cache, req, NULL); ++ cache = io_uring_alloc_async_data(&req->ctx->uring_cache, req, ++ io_uring_cmd_init_once); + if (!cache) return -ENOMEM; if (!(req->flags & REQ_F_FORCE_ASYNC)) { Please pull! The following changes since commit 4bbf9020becbfd8fc2c3da790855b7042fad455b: Linux 6.13-rc4 (2024-12-22 13:22:21 -0800) are available in the Git repository at: git://git.kernel.dk/linux.git tags/for-6.14/io_uring-20250119 for you to fetch changes up to 561e3a0c40dc7e3ab7b0b3647a2b89eca16215d9: io_uring/fdinfo: fix io_uring_show_fdinfo() misuse of ->d_iname (2025-01-19 07:28:37 -0700) ---------------------------------------------------------------- for-6.14/io_uring-20250119 ---------------------------------------------------------------- Al Viro (1): io_uring/fdinfo: fix io_uring_show_fdinfo() misuse of ->d_iname Anuj Gupta (8): block: define set of integrity flags to be inherited by cloned bip block: modify bio_integrity_map_user to accept iov_iter as argument fs, iov_iter: define meta io descriptor fs: introduce IOCB_HAS_METADATA for metadata io_uring: introduce attributes for read/write and PI support block: introduce BIP_CHECK_GUARD/REFTAG/APPTAG bip_flags scsi: add support for user-meta interface io_uring: expose read/write attribute capability Bui Quang Minh (2): io_uring/rsrc: simplify the bvec iter count calculation io_uring: simplify the SQPOLL thread check when cancelling requests Christoph Hellwig (1): block: copy back bounce buffer to user-space correctly in case of split Colin Ian King (1): io_uring/kbuf: fix unintentional sign extension on shift of reg.bgid David Wei (1): io_uring: clean up io_prep_rw_setup() Gabriel Krisman Bertazi (9): io_uring: Fold allocation into alloc_cache helper io_uring: Add generic helper to allocate async data io_uring/futex: Allocate ifd with generic alloc_cache helper io_uring/poll: Allocate apoll with generic alloc_cache helper io_uring/uring_cmd: Allocate async data through generic helper io_uring/net: Allocate msghdr async data through helper io_uring/rw: Allocate async data through helper io_uring: Move old async data allocation helper to header io_uring/msg_ring: Drop custom destructor Jann Horn (1): io_uring/rsrc: require cloned buffers to share accounting contexts Jens Axboe (8): block: make bio_integrity_map_user() static inline io_uring/rw: don't mask in f_iocb_flags io_uring/rw: use NULL for rw->free_iovec assigment io_uring/rw: always clear ->bytes_done on io_async_rw setup io_uring: ensure io_queue_deferred() is out-of-line io_uring/rw: use io_rw_recycle() from cleanup path io_uring/rw: handle -EAGAIN retry at IO completion time io_uring/rw: don't gate retry on completion context Josh Triplett (1): io_uring: Factor out a function to parse restrictions Kanchan Joshi (2): nvme: add support for passing on the application tag block: add support to pass user meta buffer Pavel Begunkov (21): io_uring: rename ->resize_lock io_uring/rsrc: export io_check_coalesce_buffer io_uring/memmap: flag vmap'ed regions io_uring/memmap: flag regions with user pages io_uring/memmap: account memory before pinning io_uring/memmap: reuse io_free_region for failure path io_uring/memmap: optimise single folio regions io_uring/memmap: helper for pinning region pages io_uring/memmap: add IO_REGION_F_SINGLE_REF io_uring/memmap: implement kernel allocated regions io_uring/memmap: implement mmap for regions io_uring: pass ctx to io_register_free_rings io_uring: use region api for SQ io_uring: use region api for CQ io_uring/kbuf: use mmap_lock to sync with mmap io_uring/kbuf: remove pbuf ring refcounting io_uring/kbuf: use region api for pbuf rings io_uring/memmap: unify io_uring mmap'ing code io_uring: don't vmap single page regions io_uring: prevent reg-wait speculations io_uring: reuse io_should_terminate_tw() for cmds block/bio-integrity.c | 84 +++++++-- block/blk-integrity.c | 10 +- block/fops.c | 45 +++-- drivers/nvme/host/core.c | 21 ++- drivers/scsi/sd.c | 4 +- include/linux/bio-integrity.h | 25 ++- include/linux/fs.h | 1 + include/linux/io_uring_types.h | 26 +-- include/linux/uio.h | 9 + include/uapi/linux/fs.h | 9 + include/uapi/linux/io_uring.h | 17 ++ io_uring/alloc_cache.h | 13 ++ io_uring/fdinfo.c | 9 +- io_uring/futex.c | 13 +- io_uring/io_uring.c | 136 +++++++-------- io_uring/io_uring.h | 23 +++ io_uring/kbuf.c | 226 ++++++++----------------- io_uring/kbuf.h | 20 +-- io_uring/memmap.c | 375 ++++++++++++++++++++--------------------- io_uring/memmap.h | 23 ++- io_uring/msg_ring.c | 7 - io_uring/msg_ring.h | 1 - io_uring/net.c | 35 ++-- io_uring/poll.c | 13 +- io_uring/register.c | 155 +++++++++-------- io_uring/rsrc.c | 40 +++-- io_uring/rsrc.h | 4 + io_uring/rw.c | 212 +++++++++++++---------- io_uring/rw.h | 14 +- io_uring/timeout.c | 5 +- io_uring/uring_cmd.c | 22 +-- io_uring/waitid.c | 4 +- 32 files changed, 833 insertions(+), 768 deletions(-) -- Jens Axboe . Subject: [PATCH v10 00/17] fuse: fuse-over-io-uring From: Bernd Schubert To: Miklos Szeredi Cc: Jens Axboe , Pavel Begunkov , linux-fsdevel@vger.kernel.org, io-uring@vger.kernel.org, Joanne Koong , Josef Bacik , Amir Goldstein , Ming Lei , David Wei , bernd@bsbernd.com, Luis Henriques , Bernd Schubert Date: Mon, 20 Jan 2025 02:28:53 +0100 . Subject: [PATCH] io_uring/rsrc: Move lockdep assert from io_free_rsrc_node() to caller From: Jann Horn To: Jens Axboe , Pavel Begunkov Cc: io-uring@vger.kernel.org, linux-kernel@vger.kernel.org, Jann Horn Date: Mon, 20 Jan 2025 17:21:57 +0100 . Subject: [PATCH] io_uring: change 'unsigned' to 'unsigned int' From: Ethan Carter Edwards To: Jens Axboe Cc: Pavel Begunkov , Greg Kroah-Hartman , io-uring@vger.kernel.org, linux-kernel@vger.kernel.org Date: Mon, 20 Jan 2025 12:52:13 -0500 . Subject: [PATCH] io_uring/uring_cmd: add missing READ_ONCE() on shared memory read From: Jann Horn To: Jens Axboe , Pavel Begunkov Cc: io-uring@vger.kernel.org, linux-kernel@vger.kernel.org, Jann Horn Date: Tue, 21 Jan 2025 17:09:59 +0100 . Subject: io_msg_remote_post() sets up dangling pointer (but it is never accessed)? From: Jann Horn To: Jens Axboe Cc: io-uring , kernel list Date: Wed, 22 Jan 2025 00:41:24 +0100 . Subject: [PATCH] io_uring/msg_ring: don't leave potentially dangling ->tctx pointer From: Jens Axboe To: io-uring Cc: Jann Horn Date: Wed, 22 Jan 2025 17:06:30 -0700 . Subject: [PATCH] io_uring/uring_cmd: use cached cmd_op in io_uring_cmd_sock() From: Jens Axboe To: io-uring Cc: Jann Horn Date: Wed, 22 Jan 2025 17:32:26 -0700 . Subject: [PATCH] io-uring: futex: cache io_futex_data than kfree From: Sidong Yang To: io-uring Cc: Sidong Yang Date: Thu, 23 Jan 2025 10:50:06 +0000 . Subject: [PATCHSET 0/2] Cleanup alloc cache init_once handling From: Jens Axboe To: io-uring@vger.kernel.org Cc: krisman@suse.de Date: Thu, 23 Jan 2025 07:21:10 -0700 . Subject: [PATCH v11 00/18] fuse: fuse-over-io-uring From: Bernd Schubert To: Miklos Szeredi Cc: Jens Axboe , Pavel Begunkov , linux-fsdevel@vger.kernel.org, io-uring@vger.kernel.org, Joanne Koong , Josef Bacik , Amir Goldstein , Ming Lei , David Wei , bernd@bsbernd.com, Luis Henriques , Dan Carpenter , Bernd Schubert , Miklos Szeredi Date: Thu, 23 Jan 2025 15:50:59 +0100 . Subject: [PATCHSET v2 0/3] Cleanup alloc cache init_once handling From: Jens Axboe To: io-uring@vger.kernel.org Cc: krisman@suse.de Date: Thu, 23 Jan 2025 11:45:24 -0700 . Subject: [PATCH v2] io_uring/futex: Factor out common free logic into io_free_ifd() From: Sidong Yang To: io-uring , Jens Axboe Cc: Sidong Yang Date: Fri, 24 Jan 2025 15:43:36 +0000 . Subject: [PATCH stable-6.1 1/1] io_uring: fix waiters missing wake ups From: Pavel Begunkov To: io-uring@vger.kernel.org, stable@vger.kernel.org Cc: asml.silence@gmail.com, Xan Charbonnet , Salvatore Bonaccorso Date: Fri, 24 Jan 2025 18:53:57 +0000 . Subject: [PATCH] io_uring/register: use atomic_read/write for sq_flags migration From: Jens Axboe To: io-uring Date: Fri, 24 Jan 2025 14:34:58 -0700 . Subject: [PATCH v3] io_uring/futex: Factor out common free logic into io_free_ifd() From: Sidong Yang To: io-uring , Jens Axboe , lizetao Cc: Sidong Yang Date: Sat, 25 Jan 2025 15:56:07 +0000 . Subject: [PATCH v4] io_uring/futex: Factor out common free logic into io_free_ifd() From: Sidong Yang To: io-uring , Jens Axboe , lizetao Cc: Sidong Yang Date: Sat, 25 Jan 2025 23:28:26 +0000 . Subject: [PATCH v3 1/2] io_uring: refactor io_uring_allowed() From: Hamza Mahfooz To: linux-kernel@vger.kernel.org Cc: Hamza Mahfooz , Jens Axboe , Paul Moore , James Morris , "Serge E. Hallyn" , Pavel Begunkov , Stephen Smalley , Ondrej Mosnacek , =?UTF-8?q?Thi=C3=A9baud=20Weksteen?= , =?UTF-8?q?Christian=20G=C3=B6ttsche?= , =?UTF-8?q?Bram=20Bonn=C3=A9?= , Masahiro Yamada , linux-security-module@vger.kernel.org, io-uring@vger.kernel.org, selinux@vger.kernel.org Date: Mon, 27 Jan 2025 10:57:17 -0500 . Subject: [PATCH 1/1] io_uring: fix multishots with selected buffers From: Pavel Begunkov To: io-uring@vger.kernel.org Cc: Jens Axboe , Muhammad Ramdhan , Bing-Jhong Billy Jheng , Jacob Soo , Pavel Begunkov Date: Tue, 28 Jan 2025 00:55:24 +0000 . Subject: [PATCH 0/8] Various io_uring micro-optimizations (reducing lock contention) From: Max Kellermann To: axboe@kernel.dk, asml.silence@gmail.com, io-uring@vger.kernel.org, linux-kernel@vger.kernel.org Cc: Max Kellermann Date: Tue, 28 Jan 2025 14:39:19 +0100 . Subject: [PATCH 0/8] alloc cache and iovec assorted cleanups From: Pavel Begunkov To: io-uring@vger.kernel.org Cc: asml.silence@gmail.com Date: Tue, 28 Jan 2025 20:56:08 +0000 . Subject: [PATCH] io_uring/net: don't retry connect operation on EPOLLERR From: Jens Axboe To: io-uring Date: Thu, 30 Jan 2025 08:44:19 -0700 .