Hi Linus, Small rc update for some recently found bugs Thanks, Jason The following changes since commit 6eaae198076080886b9e7d57f4ae06fa782f90ef: Linux 6.5-rc3 (2023-07-23 15:24:10 -0700) are available in the Git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/jgg/iommufd.git tags/for-linus-iommufd for you to fetch changes up to b7c822fa6b7701b17e139f1c562fc24135880ed4: iommufd: Set end correctly when doing batch carry (2023-07-27 11:27:20 -0300) ---------------------------------------------------------------- iommufd for 6.5 rc Two user triggerable problems: - Syzkaller found a way to trigger a WARN_ON and leak memory by racing destroy with other actions - There is still a bug in the "batch carry" stuff that gets invoked for complex cases with accesses and unmapping of huge pages. The test suite found this (triggers rarely) ---------------------------------------------------------------- Jason Gunthorpe (2): iommufd: IOMMUFD_DESTROY should not increase the refcount iommufd: Set end correctly when doing batch carry drivers/iommu/iommufd/device.c | 12 ++--- drivers/iommu/iommufd/iommufd_private.h | 15 ++++++- drivers/iommu/iommufd/main.c | 78 +++++++++++++++++++++++++-------- drivers/iommu/iommufd/pages.c | 2 +- 4 files changed, 76 insertions(+), 31 deletions(-)
Attachment:
signature.asc
Description: PGP signature