Quinn Tran 6295b3ec64 scsi: qla2xxx: Synchronize the IOCB count to be in order ... commit d3affdeb40 upstream. A system hang was observed with the following call trace: BUG: kernel NULL pointer dereference, address: 0000000000000000 PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 15 PID: 86747 Comm: nvme Kdump: loaded Not tainted 6.2.0+ #1 Hardware name: Dell Inc. PowerEdge R6515/04F3CJ, BIOS 2.7.3 03/31/2022 RIP: 0010:__wake_up_common+0x55/0x190 Code: 41 f6 01 04 0f 85 b2 00 00 00 48 8b 43 08 4c 8d 40 e8 48 8d 43 08 48 89 04 24 48 89 c6\ 49 8d 40 18 48 39 c6 0f 84 e9 00 00 00 <49> 8b 40 18 89 6c 24 14 31 ed 4c 8d 60 e8 41 8b 18 f6 c3 04 75 5d RSP: 0018:ffffb05a82afbba0 EFLAGS: 00010082 RAX: 0000000000000000 RBX: ffff8f9b83a00018 RCX: 0000000000000000 RDX: 0000000000000001 RSI: ffff8f9b83a00020 RDI: ffff8f9b83a00018 RBP: 0000000000000001 R08: ffffffffffffffe8 R09: ffffb05a82afbbf8 R10: 70735f7472617473 R11: 5f30307832616c71 R12: 0000000000000001 R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 FS: 00007f815cf4c740(0000) GS:ffff8f9eeed80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 000000010633a000 CR4: 0000000000350ee0 Call Trace: <TASK> __wake_up_common_lock+0x83/0xd0 qla_nvme_ls_req+0x21b/0x2b0 [qla2xxx] __nvme_fc_send_ls_req+0x1b5/0x350 [nvme_fc] nvme_fc_xmt_disconnect_assoc+0xca/0x110 [nvme_fc] nvme_fc_delete_association+0x1bf/0x220 [nvme_fc] ? nvme_remove_namespaces+0x9f/0x140 [nvme_core] nvme_do_delete_ctrl+0x5b/0xa0 [nvme_core] nvme_sysfs_delete+0x5f/0x70 [nvme_core] kernfs_fop_write_iter+0x12b/0x1c0 vfs_write+0x2a3/0x3b0 ksys_write+0x5f/0xe0 do_syscall_64+0x5c/0x90 ? syscall_exit_work+0x103/0x130 ? syscall_exit_to_user_mode+0x12/0x30 ? do_syscall_64+0x69/0x90 ? exit_to_user_mode_loop+0xd0/0x130 ? exit_to_user_mode_prepare+0xec/0x100 ? syscall_exit_to_user_mode+0x12/0x30 ? do_syscall_64+0x69/0x90 ? syscall_exit_to_user_mode+0x12/0x30 ? do_syscall_64+0x69/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc RIP: 0033:0x7f815cd3eb97 The IOCB counts are out of order and that would block any commands from going out and subsequently hang the system. Synchronize the IOCB count to be in correct order. Fixes: 5f63a163ed ("scsi: qla2xxx: Fix exchange oversubscription for management commands") Cc: stable@vger.kernel.org Signed-off-by: Quinn Tran <qutran@marvell.com> Signed-off-by: Nilesh Javali <njavali@marvell.com> Link: https://lore.kernel.org/r/20230313043711.13500-3-njavali@marvell.com Reviewed-by: Himanshu Madhani <himanshu.madhani@oracle.com> Reviewed-by: John Meneghini <jmeneghi@redhat.com> Tested-by: Lin Li <lilin@redhat.com> Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2023-03-30 12:47:51 +02:00
..
accessibility	tty: fix possible null-ptr-defer in spk_ttyio_release	2023-01-24 07:22:46 +01:00
acpi	ACPI: video: Fix Lenovo Ideapad Z570 DMI match	2023-03-10 09:39:50 +01:00
amba
android	binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0	2023-02-25 12:06:45 +01:00
ata	ata: libata: Fix sata_down_spd_limit() when no link speed is reported	2023-02-09 11:26:37 +01:00
atm	atm: idt77252: fix kmemleak when rmmod idt77252	2023-03-30 12:47:48 +02:00
auxdisplay	auxdisplay: hd44780: Fix potential memory leak in hd44780_remove()	2023-03-11 13:57:22 +01:00
base	drivers: base: dd: fix memory leak with using debugfs_lookup()	2023-03-11 13:57:38 +01:00
bcma
block	block: sunvdc: add check for mdesc_grab() returning NULL	2023-03-22 13:31:27 +01:00
bluetooth	Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work	2023-03-30 12:47:50 +02:00
bus	bus: sunxi-rsb: Fix error handling in sunxi_rsb_init()	2023-02-09 11:26:32 +01:00
cdrom
char	tpm/eventlog: Don't abort tpm_read_log on faulty ACPI address	2023-03-17 08:48:59 +01:00
clk	clk: HI655X: select REGMAP instead of depending on it	2023-03-22 13:31:22 +01:00
clocksource	clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock()	2022-12-31 13:14:04 +01:00
comedi	comedi: adv_pci1760: Fix PWM instruction handling	2023-01-24 07:22:45 +01:00
connector
counter	counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update	2022-12-31 13:14:30 +01:00
cpufreq	cpufreq: governor: Use kobject release() method to free dbs_data	2023-02-01 08:27:29 +01:00
cpuidle	cpuidle: psci: Iterate backwards over list in psci_pd_remove()	2023-03-22 13:31:36 +01:00
crypto	crypto: qat - fix out-of-bounds read	2023-03-10 09:40:03 +01:00
cxl
dax	dax/kmem: Fix leak of memory-hotplug resources	2023-03-10 09:40:08 +01:00
dca
devfreq	PM/devfreq: governor: Add a private governor_data for governor	2023-01-12 11:58:51 +01:00
dio	drivers: dio: fix possible memory leak in dio_init()	2022-12-31 13:14:27 +01:00
dma	dmaengine: dw-axi-dmac: Do not dereference NULL structure	2023-03-10 09:39:42 +01:00
dma-buf	dma-buf: fix racing conflict of dma_heap_add()	2022-12-02 17:41:06 +01:00
edac	EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info	2023-02-01 08:27:25 +01:00
eisa
extcon	extcon: usbc-tusb320: fix kernel-doc warning	2023-02-06 07:59:01 +01:00
firewire	firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region	2023-02-09 11:26:32 +01:00
firmware	firmware: xilinx: don't make a sleepable memory allocation from an atomic context	2023-03-22 13:31:32 +01:00
fpga	fpga: stratix10-soc: Fix return value check in s10_ops_write_init()	2023-02-09 11:26:44 +01:00
fsi	WRITE is "data source", not destination...	2023-02-09 11:26:34 +01:00
gnss
gpio	gpio: vf610: connect GPIO label to dev name	2023-03-10 09:39:27 +01:00
gpu	drm/i915/gt: perform uc late init after probe error injection	2023-03-30 12:47:46 +02:00
greybus
hid	HID: uhid: Over-ride the default maximum data buffer value with our own	2023-03-22 13:31:37 +01:00
hsi	HSI: omap_ssi_core: Fix error handling in ssi_init()	2022-12-31 13:14:32 +01:00
hv	video: hyperv_fb: Avoid taking busy spinlock on panic path	2022-12-31 13:14:39 +01:00
hwmon	hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs	2023-03-30 12:47:51 +02:00
hwspinlock	hwspinlock: qcom: correct MMIO max register for newer SoCs	2022-11-16 09:58:13 +01:00
hwtracing	coresight: cti: Add PM runtime call in enable_store	2023-03-10 09:39:36 +01:00
i2c	i2c: hisi: Only use the completion interrupt to finish the transfer	2023-03-30 12:47:45 +02:00
i3c
idle
iio	iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word()	2023-03-11 13:57:35 +01:00
infiniband	IB/hfi1: Update RMT size calculation	2023-03-11 13:57:33 +01:00
input	Input: i8042 - add Clevo PCX0DX to i8042 quirk table	2023-02-09 11:26:41 +01:00
interconnect	interconnect: qcom: osm-l3: fix icc_onecell_data allocation	2023-03-30 12:47:41 +02:00
iommu	iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter	2023-03-17 08:48:58 +01:00
ipack
irqchip	genirq: Add and use an irq_data_update_affinity helper	2023-03-11 13:57:31 +01:00
isdn	mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()	2022-12-31 13:14:37 +01:00
leds	leds: led-core: Fix refcount leak in of_led_get()	2023-03-10 09:39:32 +01:00
macintosh	macintosh: windfarm: Use unsigned type for 1-bit bitfields	2023-03-17 08:49:01 +01:00
mailbox	mailbox: zynq-ipi: fix error handling while device_register() fails	2022-12-31 13:14:39 +01:00
mcb	mcb: mcb-parse: fix error handing in chameleon_parse_gdd()	2022-12-31 13:14:30 +01:00
md	dm flakey: fix a bug with 32-bit highmem systems	2023-03-10 09:40:07 +01:00
media	media: m5mols: fix off-by-one loop termination error	2023-03-22 13:31:30 +01:00
memory	memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe()	2023-02-01 08:27:03 +01:00
memstick	memstick/ms_block: Add check for alloc_ordered_workqueue	2022-12-31 13:14:17 +01:00
message
mfd	mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak	2023-03-11 13:57:32 +01:00
misc	misc: vmw_balloon: fix memory leak with using debugfs_lookup()	2023-03-11 13:57:38 +01:00
mmc	mmc: sdhci_am654: lower power-on failed message severity	2023-03-22 13:31:35 +01:00
most
mtd	ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed	2023-03-11 13:57:26 +01:00
mux
net	net: mdio: thunder: Add missing fwnode_handle_put()	2023-03-30 12:47:50 +02:00
nfc	nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition	2023-03-22 13:31:26 +01:00
ntb
nubus
nvdimm
nvme	nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV3000	2023-03-22 13:31:35 +01:00
nvmem	nvmem: core: fix return value	2023-02-22 12:57:03 +01:00
of	of: reserved_mem: Have kmemleak ignore dynamically allocated reserved mem	2023-02-22 12:57:07 +01:00
opp	OPP: fix error checking in opp_migrate_dentry()	2023-03-10 09:39:15 +01:00
parisc	genirq: Add and use an irq_data_update_affinity helper	2023-03-11 13:57:31 +01:00
parport	parport_pc: Avoid FIFO port location truncation	2022-11-26 09:24:36 +01:00
pci	PCI/DPC: Await readiness of secondary bus after reset	2023-03-22 13:31:37 +01:00
pcmcia
perf	perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init()	2022-12-31 13:13:58 +01:00
phy	phy: rockchip-typec: Fix unsigned comparison with less than zero	2023-03-11 13:57:38 +01:00
pinctrl	pinctrl: at91: use devm_kasprintf() to avoid potential leaks	2023-03-10 09:39:54 +01:00
platform	platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl	2023-03-30 12:47:50 +02:00
pnp	PNP: fix name memory leak in pnp_alloc_dev()	2022-12-31 13:14:02 +01:00
power	power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition	2023-03-30 12:47:43 +02:00
powercap	powercap: fix possible name leak in powercap_register_zone()	2023-03-10 09:39:12 +01:00
pps
ps3
ptp
pwm	pwm: stm32-lp: fix the check on arr and cmp registers update	2023-03-11 13:57:23 +01:00
rapidio	rapidio: devices: fix missing put_device in mport_cdev_open	2022-12-31 13:14:05 +01:00
ras
regulator	regulator: core: Use ktime_get_boottime() to determine how long a regulator was off	2023-03-17 08:48:52 +01:00
remoteproc	remoteproc/mtk_scp: Move clk ops outside send_lock	2023-03-10 09:40:09 +01:00
reset	reset: uniphier-glue: Fix possible null-ptr-deref	2023-02-01 08:27:04 +01:00
rpmsg	rpmsg: glink: Avoid infinite loop on intent for missing channel	2023-03-10 09:39:46 +01:00
rtc	rtc: allow rtc_read_alarm without read_alarm callback	2023-03-11 13:57:31 +01:00
s390	s390/dasd: Fix potential memleak in dasd_eckd_init()	2023-03-10 09:39:04 +01:00
sbus
scsi	scsi: qla2xxx: Synchronize the IOCB count to be in order	2023-03-30 12:47:51 +02:00
sh	genirq: Add and use an irq_data_update_affinity helper	2023-03-11 13:57:31 +01:00
siox	siox: fix possible memory leak in siox_device_add()	2022-11-26 09:24:36 +01:00
slimbus	slimbus: stream: correct presence rate frequencies	2022-11-26 09:24:44 +01:00
soc	PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe()	2023-02-01 08:27:06 +01:00
soundwire	soundwire: cadence: Drain the RX FIFO after an IO timeout	2023-03-11 13:57:39 +01:00
spi	spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one()	2023-03-10 09:39:31 +01:00
spmi
ssb
staging	staging: rtl8723bs: Fix key-store index handling	2023-03-17 08:48:59 +01:00
target	scsi: target: core: Fix warning on RT kernels	2023-02-09 11:26:39 +01:00
tc
tee	tee: optee: fix possible memory leak in optee_register_device()	2022-12-02 17:41:03 +01:00
thermal	thermal: intel: BXT_PMIC: select REGMAP instead of depending on it	2023-03-11 13:57:32 +01:00
thunderbolt	thunderbolt: Use correct function to calculate maximum USB3 link rate	2023-01-24 07:22:46 +01:00
tty	hvc/xen: prevent concurrent accesses to the shared ring	2023-03-30 12:47:48 +02:00
uio	uio: uio_dmem_genirq: Fix deadlock between irq config and handling	2022-12-31 13:14:27 +01:00
usb	usb: gadget: uvc: fix missing mutex_unlock() if kstrtou8() fails	2023-03-11 13:57:40 +01:00
vdpa	vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready	2023-03-22 13:31:24 +01:00
vfio	vfio/type1: restore locked_vm	2023-03-10 09:40:13 +01:00
vhost	vhost/net: Clear the pending messages when the backend is removed	2023-02-09 11:26:34 +01:00
video	fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks	2023-03-22 13:31:35 +01:00
virt
virtio	virtio_pci: modify ENOENT to EINVAL	2023-01-24 07:22:41 +01:00
visorbus
vlynq
vme	vme: Fix error not catched in fake_init()	2022-12-31 13:14:30 +01:00
w1	w1: fix WARNING after calling w1_process()	2023-02-01 08:27:14 +01:00
watchdog	watchdog: sbsa_wdog: Make sure the timeout programming is within the limits	2023-03-11 13:57:27 +01:00
xen	genirq: Add and use an irq_data_update_affinity helper	2023-03-11 13:57:31 +01:00
zorro
Kconfig
Makefile