April 2022 - Linux-stable-mirror

[PATCH v2] gcc-plugins: latent_entropy: use /dev/urandom

by Jason A. Donenfeld

While the latent entropy plugin mostly doesn't derive entropy from get_random_const() for measuring the call graph, when __latent_entropy is applied to a constant, then it's initialized statically to output from get_random_const(). In that case, this data is derived from a 64-bit seed, which means a buffer of 512 bits doesn't really have that amount of compile-time entropy. This patch fixes that shortcoming by just buffering chunks of /dev/urandom output and doling it out as requested. At the same time, it's important that we don't break the use of -frandom-seed, for people who want the runtime benefits of the latent entropy plugin, while still having compile-time determinism. In that case, we detect whether gcc's set_random_seed() has been called by making a call to get_random_seed(noinit=true) in the plugin init function, which is called after set_random_seed() is called but before anything that calls get_random_seed(noinit=false), and seeing if it's zero or not. If it's not zero, we're in deterministic mode, and so we just generate numbers with a basic xorshift prng. Fixes: 38addce8b600 ("gcc-plugins: Add latent_entropy plugin") Cc: stable(a)vger.kernel.org Cc: PaX Team <pageexec(a)freemail.hu> Signed-off-by: Jason A. Donenfeld <Jason(a)zx2c4.com> --- Changes v1->v2: - Pipacs pointed out that using /dev/urandom unconditionally would break the use of -frandom-seed, so now we check for that and keep with something deterministic in that case. I'm not super familiar with this plugin or its conventions, so pointers would be most welcome if something here looks amiss. The decision to buffer 2k at a time is pretty arbitrary too; I haven't measured usage. scripts/gcc-plugins/latent_entropy_plugin.c | 48 +++++++++++++-------- 1 file changed, 30 insertions(+), 18 deletions(-) diff --git a/scripts/gcc-plugins/latent_entropy_plugin.c b/scripts/gcc-plugins/latent_entropy_plugin.c index 589454bce930..042442013ae1 100644 --- a/scripts/gcc-plugins/latent_entropy_plugin.c +++ b/scripts/gcc-plugins/latent_entropy_plugin.c @@ -82,29 +82,37 @@ __visible int plugin_is_GPL_compatible; static GTY(()) tree latent_entropy_decl; static struct plugin_info latent_entropy_plugin_info = { - .version = "201606141920vanilla", + .version = "202203311920vanilla", .help = "disable\tturn off latent entropy instrumentation\n", }; -static unsigned HOST_WIDE_INT seed; -/* - * get_random_seed() (this is a GCC function) generates the seed. - * This is a simple random generator without any cryptographic security because - * the entropy doesn't come from here. - */ +static unsigned HOST_WIDE_INT deterministic_seed; +static unsigned HOST_WIDE_INT rnd_buf[256]; +static size_t rnd_idx = ARRAY_SIZE(rnd_buf); +static int urandom_fd = -1; + static unsigned HOST_WIDE_INT get_random_const(void) { - unsigned int i; - unsigned HOST_WIDE_INT ret = 0; - - for (i = 0; i < 8 * sizeof(ret); i++) { - ret = (ret << 1) | (seed & 1); - seed >>= 1; - if (ret & 1) - seed ^= 0xD800000000000000ULL; + if (deterministic_seed) { + unsigned HOST_WIDE_INT w = deterministic_seed; + w ^= w << 13; + w ^= w >> 7; + w ^= w << 17; + deterministic_seed = w; + return deterministic_seed; } - return ret; + if (urandom_fd < 0) { + urandom_fd = open("/dev/urandom", O_RDONLY); + if (urandom_fd < 0) + abort(); + } + if (rnd_idx >= ARRAY_SIZE(rnd_buf)) { + if (read(urandom_fd, rnd_buf, sizeof(rnd_buf)) != sizeof(rnd_buf)) + abort(); + rnd_idx = 0; + } + return rnd_buf[rnd_idx++]; } static tree tree_get_random_const(tree type) @@ -537,8 +545,6 @@ static void latent_entropy_start_unit(void *gcc_data __unused, tree type, id; int quals; - seed = get_random_seed(false); - if (in_lto_p) return; @@ -573,6 +579,12 @@ __visible int plugin_init(struct plugin_name_args *plugin_info, const struct plugin_argument * const argv = plugin_info->argv; int i; + /* + * Call get_random_seed() with noinit=true, so that this returns + * 0 in the case where no seed has been passed via -frandom-seed. + */ + deterministic_seed = get_random_seed(true); + static const struct ggc_root_tab gt_ggc_r_gt_latent_entropy[] = { { .base = &latent_entropy_decl, -- 2.35.1

2 years, 9 months

2
10
0 0

[PATCH 5.15 000/277] 5.15.34-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.15.34 release. There are 277 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 14 Apr 2022 06:28:59 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.34-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.15.34-rc1 Kefeng Wang <wangkefeng.wang(a)huawei.com> powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit Christophe Leroy <christophe.leroy(a)csgroup.eu> static_call: Don't make __static_call_return0 static Waiman Long <longman(a)redhat.com> mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning Andre Przywara <andre.przywara(a)arm.com> irqchip/gic, gic-v3: Prevent GSI to SGI translations Christophe Leroy <christophe.leroy(a)csgroup.eu> powerpc/64: Fix build failure with allyesconfig in book3s_64_entry.S Marc Zyngier <maz(a)kernel.org> irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling Peter Zijlstra <peterz(a)infradead.org> x86,static_call: Fix __static_call_return0 for i386 Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> sched: Teach the forced-newidle balancer about CPU affinity limitation. Vincent Mailhol <mailhol.vincent(a)wanadoo.fr> x86/bug: Prevent shadowing in __WARN_FLAGS Andrea Parri (Microsoft) <parri.andrea(a)gmail.com> Drivers: hv: vmbus: Replace smp_store_mb() with virt_store_mb() Peter Xu <peterx(a)redhat.com> mm: don't skip swap entry even if zap_details specified Tejun Heo <tj(a)kernel.org> selftests: cgroup: Test open-time cgroup namespace usage for migration checks Tejun Heo <tj(a)kernel.org> selftests: cgroup: Test open-time credential usage for migration checks Tejun Heo <tj(a)kernel.org> selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644 Kees Cook <keescook(a)chromium.org> ubsan: remove CONFIG_UBSAN_OBJECT_SIZE dann frazier <dann.frazier(a)canonical.com> Revert "net/mlx5: Accept devlink user input after driver initialization complete" Paolo Bonzini <pbonzini(a)redhat.com> KVM: avoid NULL pointer dereference in kvm_dirty_ring_push Vinod Koul <vkoul(a)kernel.org> dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" Arnaldo Carvalho de Melo <acme(a)redhat.com> tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts Arnaldo Carvalho de Melo <acme(a)redhat.com> tools build: Filter out options and warnings not supported by clang Arnaldo Carvalho de Melo <acme(a)redhat.com> perf python: Fix probing for some clang command line options Arnaldo Carvalho de Melo <acme(a)redhat.com> perf build: Don't use -ffat-lto-objects in the python feature test when building with clang-13 Jens Axboe <axboe(a)kernel.dk> Revert "nbd: fix possible overflow on 'first_minor' in nbd_dev_add()" Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: Don't call connect() more than once on a TCP socket Dan Carpenter <dan.carpenter(a)oracle.com> rtc: mc146818-lib: fix signedness bug in mc146818_get_time() Jakub Sitnicki <jakub(a)cloudflare.com> selftests/bpf: Fix u8 narrow load checks for bpf_sk_lookup remote_port Jakub Sitnicki <jakub(a)cloudflare.com> bpf: Make remote_port field in struct bpf_sk_lookup 16-bit wide Jakub Kicinski <kuba(a)kernel.org> Revert "selftests: net: Add tls config dependency for tls selftests" Dust Li <dust.li(a)linux.alibaba.com> net/smc: send directly on setting TCP_NODELAY Suravee Suthikulpanit <suravee.suthikulpanit(a)amd.com> KVM: SVM: Allow AVIC support on system w/ physical APIC ID > 255 Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: don't use BACO for reset in S3 Lee Jones <lee.jones(a)linaro.org> drm/amdkfd: Create file descriptor after client is added to smi_clients list Karol Herbst <kherbst(a)redhat.com> drm/nouveau/pmu: Add missing callbacks for Tegra devices Emily Deng <Emily.Deng(a)amd.com> drm/amdgpu/vcn: Fix the register setting for vcn1 Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/smu10: fix SoC/fclk units in auto mode Benjamin Marty <info(a)benjaminmarty.ch> drm/amdgpu/display: change pipe policy for DCN 2.1 Daniel Mack <daniel(a)zonque.org> drm/panel: ili9341: fix optional regulator handling Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: Prevent immediate close+reconnect Shirish S <shirish.s(a)amd.com> amd/display: set backlight only if required Thomas Zimmermann <tzimmermann(a)suse.de> fbdev: Fix unregistering of framebuffers without device Marc Zyngier <maz(a)kernel.org> irqchip/gic-v3: Fix GICR_CTLR.RWP polling Namhyung Kim <namhyung(a)kernel.org> perf/core: Inherit event_caps Xiaomeng Tong <xiam0nd.tong(a)gmail.com> perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator Christian Lamparter <chunkeey(a)gmail.com> ata: sata_dwc_460ex: Fix crash due to OOB write Kan Liang <kan.liang(a)linux.intel.com> perf/x86/intel: Don't extend the pseudo-encoding to GP counters Dave Hansen <dave.hansen(a)linux.intel.com> x86/mm/tlb: Revert retpoline avoidance approach Reto Buerki <reet(a)codelabs.ch> x86/msi: Fix msi message data shadow struct Shreeya Patel <shreeya.patel(a)collabora.com> gpio: Restrict usage of GPIO chip irq members before initialization Douglas Miller <doug.miller(a)cornelisnetworks.com> RDMA/hfi1: Fix use-after-free bug for mm struct Guo Ren <guoren(a)linux.alibaba.com> arm64: patch_text: Fixup last cpu should be master Vinod Koul <vkoul(a)kernel.org> spi: core: add dma_map_dev for __spi_unmap_msg() Kaiwen Hu <kevinhu(a)synology.com> btrfs: prevent subvol with swapfile from being deleted Ethan Lien <ethanlien(a)synology.com> btrfs: fix qgroup reserve overflow the qgroup limit Kan Liang <kan.liang(a)linux.intel.com> perf/x86/intel: Update the FRONTEND MSR mask on Sapphire Rapids Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com> x86/speculation: Restore speculation related MSRs during S3 resume Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com> x86/pm: Save the MSR validity status at context setup Jens Axboe <axboe(a)kernel.dk> io_uring: fix race between timeout flush and removal Eugene Syromiatnikov <esyr(a)redhat.com> io_uring: implement compat handling for IORING_REGISTER_IOWQ_AFF Jens Axboe <axboe(a)kernel.dk> io_uring: defer splice/tee file validity check until command issue Jens Axboe <axboe(a)kernel.dk> io_uring: don't check req->file in io_fsync_prep() Miaohe Lin <linmiaohe(a)huawei.com> mm/mempolicy: fix mpol_new leak in shared_policy_replace Paolo Bonzini <pbonzini(a)redhat.com> mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) Max Filippov <jcmvbkbc(a)gmail.com> highmem: fix checks in __kmap_local_sched_{in,out} Guo Xuenan <guoxuenan(a)huawei.com> lz4: fix LZ4_decompress_safe_partial read out of bound Michael Wu <michael(a)allwinnertech.com> mmc: core: Fixup support for writeback-cache for eMMC and SD Wolfram Sang <wsa+renesas(a)sang-engineering.com> mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete Yann Gautier <yann.gautier(a)foss.st.com> mmc: mmci: stm32: correctly check all elements of sg list Christian Löhle <CLoehle(a)hyperstone.com> mmc: block: Check for errors after write on SPI Pali Rohár <pali(a)kernel.org> Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" Adrian Hunter <adrian.hunter(a)intel.com> scsi: ufs: ufs-pci: Add support for Intel MTL Damien Le Moal <damien.lemoal(a)opensource.wdc.com> scsi: mpt3sas: Fix use after free in _scsih_expander_node_remove() Chanho Park <chanho61.park(a)samsung.com> arm64: Add part number for Arm Cortex-A78AE Denis Nikitin <denik(a)chromium.org> perf session: Remap buf if there is no space for event Adrian Hunter <adrian.hunter(a)intel.com> perf tools: Fix perf's libperf_print callback James Clark <james.clark(a)arm.com> perf: arm-spe: Fix perf report --mem-mode Tony Lindgren <tony(a)atomide.com> iommu/omap: Fix regression in probe for NULL pointer dereference Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: svc_tcp_sendmsg() should handle errors from xdr_alloc_bvec() Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: Handle low memory situations in call_status() Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: Handle ENOMEM in call_transmit_status() Pavel Begunkov <asml.silence(a)gmail.com> io_uring: don't touch scm_fp_list after queueing skb Pavel Begunkov <asml.silence(a)gmail.com> io_uring: nospec index for tags on files update Xiaomeng Tong <xiam0nd.tong(a)gmail.com> scsi: ufs: ufshpb: Fix a NULL check on list iterator Lv Yunlong <lyl2019(a)mail.ustc.edu.cn> drbd: Fix five use after free bugs in get_initial_state Maxim Mikityanskiy <maximmi(a)nvidia.com> bpf: Support dual-stack sockets in bpf_tcp_check_syncookie Kamal Dasu <kdasu.kdev(a)gmail.com> spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op() Jamie Bainbridge <jamie.bainbridge(a)gmail.com> qede: confirm skb is allocated before using Michael Walle <michael(a)walle.cc> net: phy: mscc-miim: reject clause 45 register accesses Taehee Yoo <ap420073(a)gmail.com> net: sfc: fix using uninitialized xdp tx_queue Eric Dumazet <edumazet(a)google.com> rxrpc: fix a race in rxrpc_exit_net() Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: fix leak of nested actions Andrew Lunn <andrew(a)lunn.ch> net: ethernet: mv643xx: Fix over zealous checking of_get_mac_address() Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: don't send internal clone attribute to the userspace. Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> ice: xsk: fix VSI state check in ice_xsk_wakeup() Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> ice: synchronize_rcu() when terminating rings David Ahern <dsahern(a)kernel.org> ipv6: Fix stats accounting in ip6_pkt_drop Anatolii Gerasymenko <anatolii.gerasymenko(a)intel.com> ice: Do not skip not enabled queues in ice_vc_dis_qs_msg Anatolii Gerasymenko <anatolii.gerasymenko(a)intel.com> ice: Set txq_teid to ICE_INVAL_TEID on ring creation Miaoqian Lin <linmq006(a)gmail.com> dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe Jamie Bainbridge <jamie.bainbridge(a)gmail.com> sctp: count singleton chunks in assoc user stats Niels Dossche <dossche.niels(a)gmail.com> IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition Mark Zhang <markzhang(a)nvidia.com> IB/cm: Cancel mad on the DREQ event when the state is MRA_REP_RCVD Aharon Landau <aharonl(a)nvidia.com> RDMA/mlx5: Add a missing update of cache->last_add Aharon Landau <aharonl(a)nvidia.com> RDMA/mlx5: Don't remove cache MRs when a delay is needed Martin Habets <habetsm.xilinx(a)gmail.com> sfc: Do not free an empty page_ring Ray Jui <ray.jui(a)broadcom.com> bnxt_en: Prevent XDP redirect from running when stopping TX queue Andy Gospodarek <gospo(a)broadcom.com> bnxt_en: reserve space inside receive page for skb_shared_info Pavan Chebbi <pavan.chebbi(a)broadcom.com> bnxt_en: Synchronize tx when xdp redirects happen on same ring Phil Auld <pauld(a)redhat.com> arch/arm64: Fix topology initialization for core scheduling Axel Lin <axel.lin(a)ingics.com> regulator: atc260x: Fix missing active_discharge_on setting Axel Lin <axel.lin(a)ingics.com> regulator: rtq2134: Fix missing active_discharge_on setting Liu Ying <victor.liu(a)nxp.com> drm/imx: dw_hdmi-imx: Fix bailout in error cases of probe José Expósito <jose.exposito89(a)gmail.com> drm/imx: Fix memory leak in imx_pd_connector_get_modes Jiasheng Jiang <jiasheng(a)iscas.ac.cn> drm/imx: imx-ldb: Check for null pointer after calling kmemdup Chen-Yu Tsai <wens(a)csie.org> net: stmmac: Fix unset max_speed difference between DT and non-DT platforms Nikolay Aleksandrov <razor(a)blackwall.org> net: ipv4: fix route with nexthop object delete warning Matt Johnston <matt(a)codeconstruct.com.au> mctp: Fix check for dev_hard_header() result Ivan Vecera <ivecera(a)redhat.com> ice: Clear default forwarding VSI during VSI release Jean-Philippe Brucker <jean-philippe(a)linaro.org> skbuff: fix coalescing for page_pool fragment recycling Eyal Birger <eyal.birger(a)gmail.com> vrf: fix packet sniffing for traffic originating from ip tunnels Ziyang Xuan <william.xuanziyang(a)huawei.com> net/tls: fix slab-out-of-bounds bug in decrypt_internal Taehee Yoo <ap420073(a)gmail.com> net: sfc: add missing xdp queue reinitialization Jason Wang <jasowang(a)redhat.com> vdpa: mlx5: prevent cvq work from hogging CPU Eli Cohen <elic(a)nvidia.com> vdpa/mlx5: Propagate link status from device to vdpa driver Eli Cohen <elic(a)nvidia.com> vdpa/mlx5: Rename control VQ workqueue to vdpa wq Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() John Garry <john.garry(a)huawei.com> scsi: core: Fix sbitmap depth in scsi_realloc_sdev_budget_map() Kevin Groeneveld <kgroeneveld(a)lenbrook.com> scsi: sr: Fix typo in CDROM(CLOSETRAY|EJECT) handling ChenXiaoSong <chenxiaosong2(a)huawei.com> NFSv4: fix open failure with O_ACCMODE flag ChenXiaoSong <chenxiaosong2(a)huawei.com> Revert "NFSv4: Handle the special Linux file open access mode" Guilherme G. Piccoli <gpiccoli(a)igalia.com> Drivers: hv: vmbus: Fix potential crash on module unload Dan Carpenter <dan.carpenter(a)oracle.com> drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() Mateusz Jończyk <mat.jonczyk(a)o2.pl> rtc: mc146818-lib: fix RTC presence check Mateusz Jończyk <mat.jonczyk(a)o2.pl> rtc: Check return value from mc146818_get_time() Mateusz Jończyk <mat.jonczyk(a)o2.pl> rtc: mc146818-lib: change return values of mc146818_get_time() Mauricio Faria de Oliveira <mfo(a)canonical.com> mm: fix race between MADV_FREE reclaim and blkdev direct IO read John David Anglin <dave.anglin(a)bell.net> parisc: Fix patch code locking and flushing Helge Deller <deller(a)gmx.de> parisc: Fix CPU affinity for Lasi, WAX and Dino chips Naresh Kamboju <naresh.kamboju(a)linaro.org> selftests: net: Add tls config dependency for tls selftests Trond Myklebust <trond.myklebust(a)hammerspace.com> NFS: Avoid writeback threads getting stuck in mempool_alloc() Trond Myklebust <trond.myklebust(a)hammerspace.com> NFS: nfsiod should not block forever in mempool_alloc() Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: Fix socket waits for write buffer space Haimin Zhang <tcs_kernel(a)tencent.com> jfs: prevent NULL deref in diFree Randy Dunlap <rdunlap(a)infradead.org> virtio_console: eliminate anonymous module_init & module_exit Jiri Slaby <jirislaby(a)kernel.org> serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() Nathan Chancellor <nathan(a)kernel.org> x86/Kconfig: Do not allow CONFIG_X86_X32_ABI=y with llvm-objcopy Peter Zijlstra <peterz(a)infradead.org> x86: Annotate call_on_stack() NeilBrown <neilb(a)suse.de> NFS: swap-out must always use STABLE writes. NeilBrown <neilb(a)suse.de> NFS: swap IO handling is slightly different for O_DIRECT IO NeilBrown <neilb(a)suse.de> SUNRPC: remove scheduling boost for "SWAPPER" tasks. NeilBrown <neilb(a)suse.de> SUNRPC/xprt: async tasks mustn't block waiting for memory NeilBrown <neilb(a)suse.de> SUNRPC/call_alloc: async tasks mustn't block waiting for memory Maxime Ripard <maxime(a)cerno.tech> clk: Enforce that disjoints limits are invalid Tony Lindgren <tony(a)atomide.com> clk: ti: Preserve node in ti_dt_clocks_register() Dongli Zhang <dongli.zhang(a)oracle.com> xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 Ohad Sharabi <osharabi(a)habana.ai> habanalabs: fix possible memory leak in MMU DR fini Trond Myklebust <trond.myklebust(a)hammerspace.com> NFSv4: Protect the state recovery thread against direct reclaim Xin Xiong <xiongx18(a)fudan.edu.cn> NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify() Lucas Denefle <lucas.denefle(a)converge.io> w1: w1_therm: fixes w1_seq for ds28ea00 sensors Xiaoke Wang <xkernel.wang(a)foxmail.com> staging: wfx: fix an error handling in wfx_init_common() Viresh Kumar <viresh.kumar(a)linaro.org> opp: Expose of-node's name in debugfs Pierre Gondois <Pierre.Gondois(a)arm.com> cpufreq: CPPC: Fix performance/frequency conversion Sascha Hauer <s.hauer(a)pengutronix.de> clk: rockchip: drop CLK_SET_RATE_PARENT from dclk_vop* on rk3568 Amjad Ouled-Ameur <aouledameur(a)baylibre.com> phy: amlogic: meson8b-usb2: fix shared reset control use Amjad Ouled-Ameur <aouledameur(a)baylibre.com> phy: amlogic: meson8b-usb2: Use dev_err_probe() Amjad Ouled-Ameur <aouledameur(a)baylibre.com> phy: amlogic: phy-meson-gxl-usb2: fix shared reset controller use Stefan Wahren <stefan.wahren(a)i2se.com> staging: vchiq_core: handle NULL result of find_service_by_handle Stefan Wahren <stefan.wahren(a)i2se.com> staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances Adam Wujek <dev_public(a)wujek.eu> clk: si5341: fix reported clk_rate when output divider is 2 Qinghua Jin <qhjin.dev(a)gmail.com> minix: fix bug when opening a file with O_DIRECT Randy Dunlap <rdunlap(a)infradead.org> init/main.c: return 1 from handled __setup() functions Feng Tang <feng.tang(a)intel.com> lib/Kconfig.debug: add ARCH dependency for FUNCTION_ALIGN option Xiubo Li <xiubli(a)redhat.com> ceph: fix memory leak in ceph_readdir when note_last_dentry returns error Xiubo Li <xiubli(a)redhat.com> ceph: fix inode reference leakage in ceph_get_snapdir() Wang Yufen <wangyufen(a)huawei.com> netlabel: fix out-of-bounds memory accesses Florian Westphal <fw(a)strlen.de> netfilter: conntrack: revisit gc autotuning Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: Fix use after free in hci_send_acl Krzysztof Kozlowski <krzysztof.kozlowski(a)canonical.com> MIPS: ingenic: correct unit node address Max Filippov <jcmvbkbc(a)gmail.com> xtensa: fix DTC warning unit_address_format Deren Wu <deren.wu(a)mediatek.com> mt76: fix monitor mode crash with sdio driver H. Nikolaus Schaller <hns(a)goldelico.com> usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm Michael Walle <michael(a)walle.cc> net: sfp: add 2500base-X quirk for Lantech SFP module Gal Pressman <gal(a)nvidia.com> net/mlx5e: Remove overzealous validations in netlink EEPROM query Jakub Kicinski <kuba(a)kernel.org> net: limit altnames to 64k total Jakub Kicinski <kuba(a)kernel.org> net: account alternate interface name memory Michael T. Kloos <michael(a)michaelkloos.com> riscv: Fixed misaligned memory access. Fixed pointer comparison. Vincent Mailhol <mailhol.vincent(a)wanadoo.fr> can: etas_es58x: es58x_fd_rx_event_msg(): initialize rx_event_msg before calling es58x_check_msg_len() Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: set default value for N_As to 50 micro seconds Jianglei Nie <niejianglei2021(a)163.com> scsi: libfc: Fix use after free in fc_exch_abts_resp() Hangyu Hua <hbh25y(a)gmail.com> powerpc/secvar: fix refcount leak in format_show() Michael Ellerman <mpe(a)ellerman.id.au> powerpc/64e: Tie PPC_BOOK3E_64 to PPC_FSL_BOOK3E Michael Ellerman <mpe(a)ellerman.id.au> powerpc/code-patching: Pre-map patch area Alexander Lobakin <alobakin(a)pm.me> MIPS: fix fortify panic when copying asm exception handlers Li Chen <lchen(a)ambarella.com> PCI: endpoint: Fix misused goto label Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Eliminate unintended link toggle during FW reset Minghao Chi (CGEL ZTE) <chi.minghao(a)zte.com.cn> Bluetooth: use memset avoid memory leaks Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: Fix not checking for valid hdev on bt_dev_{info,warn,err,dbg} Harold Huang <baymaxhuang(a)gmail.com> tuntap: add sanity checks about msg_controllen in sendmsg Sven Eckelmann <sven(a)narfation.org> macvtap: advertise link netns via netlink Hangyu Hua <hbh25y(a)gmail.com> mips: ralink: fix a refcount leak in ill_acc_of_setup() Dust Li <dust.li(a)linux.alibaba.com> net/smc: correct settings of RMB window update limit Xiang Chen <chenxiang66(a)hisilicon.com> scsi: hisi_sas: Limit users changing debugfs BIST count value Qi Liu <liuqi115(a)huawei.com> scsi: hisi_sas: Free irq vectors in order for v3 HW Randy Dunlap <rdunlap(a)infradead.org> scsi: aha152x: Fix aha152x_setup() __setup handler return value Yang Li <yang.lee(a)linux.alibaba.com> mt76: mt7615: Fix assigning negative values to unsigned variable Nicholas Piggin <npiggin(a)gmail.com> powerpc/64s/hash: Make hash faults work in NMI context Johan Almbladh <johan.almbladh(a)anyfinetworks.com> mt76: mt7915: fix injected MPDU transmission to not use HW A-MSDU Damien Le Moal <damien.lemoal(a)opensource.wdc.com> scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req() Damien Le Moal <damien.lemoal(a)opensource.wdc.com> scsi: pm8001: Fix tag leaks on error Damien Le Moal <damien.lemoal(a)opensource.wdc.com> scsi: pm8001: Fix task leak in pm8001_send_abort_all() Damien Le Moal <damien.lemoal(a)opensource.wdc.com> scsi: pm8001: Fix pm8001_mpi_task_abort_resp() Damien Le Moal <damien.lemoal(a)opensource.wdc.com> scsi: pm8001: Fix pm80xx_pci_mem_copy() interface Alex Williamson <alex.williamson(a)redhat.com> vfio/pci: Stub vfio_pci_vga_rw when !CONFIG_VFIO_PCI_VGA Alex Deucher <alexander.deucher(a)amd.com> drm/amdkfd: make CRAT table missing message informational only Mike Snitzer <snitzer(a)redhat.com> dm: requeue IO if mapping table not yet available Jordy Zomer <jordy(a)jordyzomer.github.io> dm ioctl: prevent potential spectre v1 gadget Ido Schimmel <idosch(a)nvidia.com> ipv4: Invalidate neighbour for broadcast address upon address addition Daniel Thompson <daniel.thompson(a)linaro.org> drm/msm/dsi: Remove spurious IRQF_ONESHOT flag Miri Korenblit <miriam.rachel.korenblit(a)intel.com> iwlwifi: mvm: move only to an enabled channel Ilan Peer <ilan.peer(a)intel.com> iwlwifi: mvm: Correctly set fragmented EBS Hans de Goede <hdegoede(a)redhat.com> usb: dwc3: pci: Set the swnode from inside dwc3_pci_quirks() Maxim Mikityanskiy <maximmi(a)nvidia.com> net/mlx5e: Disable TX queues before registering the netdev Hans de Goede <hdegoede(a)redhat.com> power: supply: axp288-charger: Set Vhold to 4.4V Christophe Leroy <christophe.leroy(a)csgroup.eu> powerpc/set_memory: Avoid spinlock recursion in change_page_attr() Sreekanth Reddy <sreekanth.reddy(a)broadcom.com> scsi: mpi3mr: Fix memory leaks Sreekanth Reddy <sreekanth.reddy(a)broadcom.com> scsi: mpi3mr: Fix reporting of actual data transfer size Manivannan Sadhasivam <mani(a)kernel.org> PCI: pciehp: Add Qualcomm quirk for Command Completed erratum Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH. Hou Zhiqiang <Zhiqiang.Hou(a)nxp.com> PCI: endpoint: Fix alignment fault error in copy tests Neal Liu <neal_liu(a)aspeedtech.com> usb: ehci: add pci device support for Aspeed platforms Zhou Guanghui <zhouguanghui1(a)huawei.com> iommu/arm-smmu-v3: fix event handling soft lockup Pali Rohár <pali(a)kernel.org> PCI: aardvark: Fix support for MSI interrupts Mahesh Rajashekhara <mahesh.rajashekhara(a)microchip.com> scsi: smartpqi: Fix kdump issue when controller is locked up Rajneesh Bhardwaj <rajneesh.bhardwaj(a)amd.com> drm/amdgpu: Fix recursive locking warning Sourabh Jain <sourabhjain(a)linux.ibm.com> powerpc: Set crashkernel offset to mid of RMA region Eric Dumazet <edumazet(a)google.com> net: initialize init_net earlier Eric Dumazet <edumazet(a)google.com> ipv6: make mc_forwarding atomic Yonghong Song <yhs(a)fb.com> libbpf: Fix build issue with llvm-readelf Avraham Stern <avraham.stern(a)intel.com> cfg80211: don't add non transmitted BSS to 6GHz scanned channels Lorenzo Bianconi <lorenzo(a)kernel.org> mt76: dma: initialize skip_unmap in mt76_dma_rx_fill Ben Greear <greearb(a)candelatech.com> mt76: mt7921: fix crash when startup fails. Evgeny Boger <boger(a)wirenboard.com> power: supply: axp20x_battery: properly report current when discharging Yongzhi Liu <lyz_cs(a)pku.edu.cn> drm/v3d: fix missing unlock Yang Guang <yang.guang5(a)zte.com.cn> scsi: bfa: Replace snprintf() with sysfs_emit() Yang Guang <yang.guang5(a)zte.com.cn> scsi: mvsas: Replace snprintf() with sysfs_emit() Jakub Sitnicki <jakub(a)cloudflare.com> bpf: Make dst_port field in struct bpf_sock 16-bit wide Yongzhi Liu <lyz_cs(a)pku.edu.cn> drm/bridge: Add missing pm_runtime_put_sync Tony Lu <tonylu(a)linux.alibaba.com> net/smc: Send directly when TCP_CORK is cleared Kalle Valo <quic_kvalo(a)quicinc.com> ath11k: mhi: use mhi_sync_power_up() Kalle Valo <quic_kvalo(a)quicinc.com> ath11k: pci: fix crash on suspend if board file is not found Venkateswara Naralasetty <quic_vnaralas(a)quicinc.com> ath11k: fix kernel panic during unload/load ath11k modules Maxim Kiselev <bigunclemax(a)gmail.com> powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 Philip Yang <Philip.Yang(a)amd.com> drm/amdkfd: Don't take process mutex for svm ioctls Yang Guang <yang.guang5(a)zte.com.cn> ptp: replace snprintf with sysfs_emit Pawel Laszczak <pawell(a)cadence.com> usb: cdnsp: fix cdnsp_decode_trb function to properly handle ret value Wayne Chang <waynec(a)nvidia.com> usb: gadget: tegra-xudc: Fix control endpoint's definitions Wayne Chang <waynec(a)nvidia.com> usb: gadget: tegra-xudc: Do not program SPARAM Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> drm/amd/display: Use PSR version selected during set_psr_caps Yongzhi Liu <lyz_cs(a)pku.edu.cn> drm/amd/display: Fix memory leak Xin Xiong <xiongx18(a)fudan.edu.cn> drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj Dale Zhao <dale.zhao(a)amd.com> drm/amd/display: Add signal type check when verify stream backends same Zekun Shen <bruceshenzk(a)gmail.com> ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 Anisse Astier <anisse(a)astier.eu> drm: Add orientation quirk for GPD Win Max Hou Wenlong <houwenlong.hwl(a)antgroup.com> KVM: x86/emulator: Emulate RDPID only if it is enabled in guest Like Xu <likexu(a)tencent.com> KVM: x86/pmu: Fix and isolate TSX-specific performance event logic Jim Mattson <jmattson(a)google.com> KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs Peter Gonda <pgonda(a)google.com> KVM: SVM: Fix kvm_cache_regs.h inclusions for is_guest_mode() Jim Mattson <jmattson(a)google.com> KVM: x86/pmu: Use different raw event masks for AMD and Intel Marco Elver <elver(a)google.com> kfence: limit currently covered allocations when pool nearly full Marco Elver <elver(a)google.com> kfence: move saving stack trace of allocations into __kfence_alloc() Marco Elver <elver(a)google.com> kfence: count unexpectedly skipped allocations Zhang Wensheng <zhangwensheng5(a)huawei.com> nbd: fix possible overflow on 'first_minor' in nbd_dev_add() Ye Bin <yebin10(a)huawei.com> nbd: Fix hungtask when nbd_config_put Ye Bin <yebin10(a)huawei.com> nbd: Fix incorrect error handle when first_minor is illegal in nbd_dev_add Luis Chamberlain <mcgrof(a)kernel.org> nbd: add error handling support for add_disk() Jiasheng Jiang <jiasheng(a)iscas.ac.cn> rtc: wm8350: Handle error for wm8350_register_irq Benjamin Beichler <benjamin.beichler(a)uni-rostock.de> um: fix and optimize xor select template for CONFIG64 and timetravel mode Johannes Berg <johannes.berg(a)intel.com> lib/logic_iomem: correct fallback config references ------------- Diffstat: Makefile | 4 +- arch/alpha/kernel/rtc.c | 7 +- arch/arm64/include/asm/cputype.h | 2 + arch/arm64/kernel/patching.c | 4 +- arch/arm64/kernel/proton-pack.c | 1 + arch/arm64/kernel/smp.c | 2 +- arch/mips/boot/dts/ingenic/jz4780.dtsi | 2 +- arch/mips/include/asm/setup.h | 2 +- arch/mips/kernel/traps.c | 22 +- arch/mips/ralink/ill_acc.c | 1 + arch/parisc/kernel/patch.c | 25 +- arch/powerpc/boot/dts/fsl/t104xrdb.dtsi | 4 +- arch/powerpc/include/asm/interrupt.h | 2 +- arch/powerpc/include/asm/page.h | 6 +- arch/powerpc/kernel/rtas.c | 6 + arch/powerpc/kernel/secvar-sysfs.c | 9 +- arch/powerpc/kexec/core.c | 15 +- arch/powerpc/kvm/book3s_64_entry.S | 10 +- arch/powerpc/lib/code-patching.c | 14 + arch/powerpc/mm/book3s64/hash_utils.c | 54 +- arch/powerpc/mm/pageattr.c | 32 +- arch/powerpc/perf/callchain.h | 9 +- arch/powerpc/perf/callchain_64.c | 27 - arch/powerpc/platforms/Kconfig.cputype | 3 +- arch/riscv/lib/memmove.S | 368 +++++++++++--- arch/um/include/asm/xor.h | 4 +- arch/x86/Kconfig | 5 + arch/x86/events/intel/core.c | 8 +- arch/x86/include/asm/bug.h | 4 +- arch/x86/include/asm/irq_stack.h | 3 +- arch/x86/include/asm/kvm_host.h | 1 + arch/x86/include/asm/msi.h | 19 +- arch/x86/include/asm/perf_event.h | 5 + arch/x86/kernel/hpet.c | 8 +- arch/x86/kernel/static_call.c | 5 +- arch/x86/kvm/emulate.c | 4 +- arch/x86/kvm/kvm_emulate.h | 1 + arch/x86/kvm/pmu.c | 18 +- arch/x86/kvm/svm/avic.c | 7 +- arch/x86/kvm/svm/pmu.c | 9 +- arch/x86/kvm/svm/svm.h | 4 +- arch/x86/kvm/svm/svm_onhyperv.c | 1 - arch/x86/kvm/vmx/pmu_intel.c | 14 +- arch/x86/kvm/x86.c | 6 + arch/x86/mm/tlb.c | 37 +- arch/x86/power/cpu.c | 21 +- arch/x86/xen/smp_hvm.c | 6 + arch/x86/xen/time.c | 24 +- arch/xtensa/boot/dts/xtfpga-flash-128m.dtsi | 8 +- arch/xtensa/boot/dts/xtfpga-flash-16m.dtsi | 8 +- arch/xtensa/boot/dts/xtfpga-flash-4m.dtsi | 4 +- drivers/ata/sata_dwc_460ex.c | 6 +- drivers/base/power/trace.c | 6 +- drivers/block/drbd/drbd_int.h | 8 +- drivers/block/drbd/drbd_nl.c | 41 +- drivers/block/drbd/drbd_state.c | 18 +- drivers/block/drbd/drbd_state_change.h | 8 +- drivers/block/nbd.c | 40 +- drivers/char/virtio_console.c | 8 +- drivers/clk/clk-si5341.c | 16 +- drivers/clk/clk.c | 24 + drivers/clk/rockchip/clk-rk3568.c | 6 +- drivers/clk/ti/clk.c | 13 +- drivers/cpufreq/cppc_cpufreq.c | 43 +- drivers/dma/sh/shdma-base.c | 4 +- drivers/gpio/gpiolib.c | 19 + drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_gfx.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 3 +- drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c | 4 +- drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 4 - drivers/gpu/drm/amd/amdkfd/kfd_crat.c | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_smi_events.c | 24 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 7 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h | 6 + .../drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 80 ++- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_psr.c | 6 +- drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 3 + .../gpu/drm/amd/display/dc/dcn21/dcn21_resource.c | 2 +- drivers/gpu/drm/amd/pm/amdgpu_dpm.c | 11 + .../gpu/drm/amd/pm/powerplay/hwmgr/smu10_hwmgr.c | 8 +- drivers/gpu/drm/bridge/nwl-dsi.c | 18 +- drivers/gpu/drm/drm_panel_orientation_quirks.c | 6 + drivers/gpu/drm/imx/dw_hdmi-imx.c | 8 +- drivers/gpu/drm/imx/imx-ldb.c | 2 + drivers/gpu/drm/imx/parallel-display.c | 4 +- drivers/gpu/drm/msm/dsi/dsi_host.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/pmu/gm20b.c | 1 + drivers/gpu/drm/nouveau/nvkm/subdev/pmu/gp102.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/pmu/gp10b.c | 1 + drivers/gpu/drm/nouveau/nvkm/subdev/pmu/priv.h | 1 + drivers/gpu/drm/panel/panel-ilitek-ili9341.c | 4 +- drivers/gpu/drm/v3d/v3d_gem.c | 6 +- drivers/hv/channel_mgmt.c | 6 +- drivers/hv/vmbus_drv.c | 9 +- drivers/infiniband/core/cm.c | 3 +- drivers/infiniband/hw/hfi1/mmu_rb.c | 6 + drivers/infiniband/hw/mlx5/mr.c | 5 +- drivers/infiniband/sw/rdmavt/qp.c | 6 +- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 1 + drivers/iommu/omap-iommu.c | 2 +- drivers/irqchip/irq-gic-v3-its.c | 28 +- drivers/irqchip/irq-gic-v3.c | 14 +- drivers/irqchip/irq-gic.c | 6 + drivers/md/dm-ioctl.c | 2 + drivers/md/dm-rq.c | 7 +- drivers/md/dm.c | 11 +- drivers/misc/habanalabs/common/mmu/mmu_v1.c | 2 +- drivers/mmc/core/block.c | 46 +- drivers/mmc/host/mmci_stm32_sdmmc.c | 6 +- drivers/mmc/host/renesas_sdhi_core.c | 4 +- drivers/mmc/host/sdhci-xenon.c | 10 - drivers/net/can/usb/etas_es58x/es58x_fd.c | 3 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 7 + drivers/net/ethernet/broadcom/bnxt/bnxt.h | 5 +- drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 4 +- drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 14 +- drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.h | 2 + drivers/net/ethernet/freescale/dpaa2/dpaa2-ptp.c | 4 +- drivers/net/ethernet/intel/ice/ice.h | 2 +- drivers/net/ethernet/intel/ice/ice_lib.c | 3 + drivers/net/ethernet/intel/ice/ice_main.c | 4 +- drivers/net/ethernet/intel/ice/ice_virtchnl_pf.c | 4 +- drivers/net/ethernet/intel/ice/ice_xsk.c | 6 +- drivers/net/ethernet/marvell/mv643xx_eth.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 12 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 1 + drivers/net/ethernet/mellanox/mlx5/core/main.c | 2 - drivers/net/ethernet/mellanox/mlx5/core/port.c | 23 - .../ethernet/mellanox/mlx5/core/sf/dev/driver.c | 2 - drivers/net/ethernet/qlogic/qede/qede_fp.c | 3 + drivers/net/ethernet/sfc/efx_channels.c | 148 +++--- drivers/net/ethernet/sfc/rx_common.c | 3 + drivers/net/ethernet/sfc/tx.c | 3 + drivers/net/ethernet/sfc/tx_common.c | 2 + .../net/ethernet/stmicro/stmmac/stmmac_platform.c | 3 +- drivers/net/macvtap.c | 6 + drivers/net/mdio/mdio-mscc-miim.c | 6 + drivers/net/phy/sfp-bus.c | 6 + drivers/net/tap.c | 3 +- drivers/net/tun.c | 3 +- drivers/net/vrf.c | 15 +- drivers/net/wireless/ath/ath11k/ahb.c | 2 + drivers/net/wireless/ath/ath11k/mhi.c | 2 +- drivers/net/wireless/ath/ath11k/pci.c | 10 + drivers/net/wireless/ath/ath5k/eeprom.c | 3 + drivers/net/wireless/intel/iwlwifi/mvm/phy-ctxt.c | 31 +- drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 5 +- drivers/net/wireless/mediatek/mt76/dma.c | 1 + drivers/net/wireless/mediatek/mt76/mt76.h | 2 +- drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 2 +- drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 1 + drivers/net/wireless/mediatek/mt76/mt7921/main.c | 1 + drivers/opp/debugfs.c | 5 + drivers/opp/opp.h | 1 + drivers/parisc/dino.c | 41 +- drivers/parisc/gsc.c | 31 ++ drivers/parisc/gsc.h | 1 + drivers/parisc/lasi.c | 7 +- drivers/parisc/wax.c | 7 +- drivers/pci/controller/pci-aardvark.c | 16 +- drivers/pci/endpoint/functions/pci-epf-test.c | 14 +- drivers/pci/hotplug/pciehp_hpc.c | 2 + drivers/perf/qcom_l2_pmu.c | 6 +- drivers/phy/amlogic/phy-meson-gxl-usb2.c | 5 +- drivers/phy/amlogic/phy-meson8b-usb2.c | 9 +- drivers/power/supply/axp20x_battery.c | 13 +- drivers/power/supply/axp288_charger.c | 14 +- drivers/ptp/ptp_sysfs.c | 4 +- drivers/regulator/atc260x-regulator.c | 1 + drivers/regulator/rtq2134-regulator.c | 1 + drivers/rtc/rtc-cmos.c | 19 +- drivers/rtc/rtc-mc146818-lib.c | 42 +- drivers/rtc/rtc-wm8350.c | 11 +- drivers/scsi/aha152x.c | 6 +- drivers/scsi/bfa/bfad_attr.c | 26 +- drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 68 ++- drivers/scsi/libfc/fc_exch.c | 1 + drivers/scsi/mpi3mr/mpi3mr_fw.c | 2 +- drivers/scsi/mpi3mr/mpi3mr_os.c | 2 + drivers/scsi/mpt3sas/mpt3sas_scsih.c | 5 +- drivers/scsi/mvsas/mv_init.c | 4 +- drivers/scsi/pm8001/pm8001_hwi.c | 27 +- drivers/scsi/pm8001/pm8001_sas.c | 2 +- drivers/scsi/pm8001/pm80xx_hwi.c | 17 +- drivers/scsi/scsi_scan.c | 5 + drivers/scsi/smartpqi/smartpqi_init.c | 39 +- drivers/scsi/sr.c | 2 +- drivers/scsi/ufs/ufshcd-pci.c | 17 + drivers/scsi/ufs/ufshpb.c | 11 +- drivers/scsi/zorro7xx.c | 2 + drivers/spi/spi-bcm-qspi.c | 4 +- drivers/spi/spi.c | 4 + .../vc04_services/interface/vchiq_arm/vchiq_arm.c | 3 + .../vc04_services/interface/vchiq_arm/vchiq_core.c | 6 + drivers/staging/wfx/main.c | 7 +- drivers/tty/serial/samsung_tty.c | 5 +- drivers/usb/cdns3/cdnsp-debug.h | 305 ++++++------ drivers/usb/dwc3/dwc3-omap.c | 2 +- drivers/usb/dwc3/dwc3-pci.c | 11 +- drivers/usb/gadget/udc/tegra-xudc.c | 20 +- drivers/usb/host/ehci-pci.c | 9 + drivers/vdpa/mlx5/core/mlx5_vdpa.h | 2 +- drivers/vdpa/mlx5/net/mlx5_vnet.c | 121 ++++- drivers/vfio/pci/vfio_pci_rdwr.c | 2 + drivers/vhost/net.c | 1 + drivers/video/fbdev/core/fbmem.c | 9 +- drivers/w1/slaves/w1_therm.c | 8 +- fs/btrfs/extent_io.h | 2 +- fs/btrfs/inode.c | 22 + fs/ceph/dir.c | 11 +- fs/ceph/inode.c | 10 +- fs/io_uring.c | 79 +-- fs/jfs/inode.c | 3 +- fs/minix/inode.c | 3 +- fs/nfs/dir.c | 10 - fs/nfs/direct.c | 48 +- fs/nfs/file.c | 4 +- fs/nfs/inode.c | 1 - fs/nfs/internal.h | 17 + fs/nfs/nfs42proc.c | 9 +- fs/nfs/nfs4file.c | 6 +- fs/nfs/nfs4state.c | 12 + fs/nfs/pagelist.c | 10 +- fs/nfs/pnfs_nfs.c | 8 +- fs/nfs/write.c | 34 +- include/linux/gpio/driver.h | 9 + include/linux/ipv6.h | 2 +- include/linux/mc146818rtc.h | 3 +- include/linux/mmzone.h | 11 +- include/linux/nfs_fs.h | 10 +- include/linux/static_call.h | 5 +- include/linux/sunrpc/xprtsock.h | 1 + include/linux/vfio_pci_core.h | 9 + include/net/arp.h | 1 + include/net/bluetooth/bluetooth.h | 14 +- include/net/net_namespace.h | 6 + include/uapi/linux/bpf.h | 6 +- include/uapi/linux/can/isotp.h | 28 +- init/main.c | 8 +- kernel/Makefile | 3 +- kernel/events/core.c | 3 + kernel/sched/core.c | 2 +- kernel/static_call.c | 542 +------------------- kernel/static_call_inline.c | 543 +++++++++++++++++++++ lib/Kconfig.debug | 3 +- lib/Kconfig.ubsan | 13 - lib/logic_iomem.c | 8 +- lib/lz4/lz4_decompress.c | 8 +- lib/test_ubsan.c | 22 - mm/highmem.c | 4 +- mm/kfence/core.c | 156 +++++- mm/kfence/kfence.h | 2 + mm/memory.c | 25 +- mm/mempolicy.c | 1 + mm/mremap.c | 3 + mm/rmap.c | 25 +- net/batman-adv/multicast.c | 2 +- net/bluetooth/hci_event.c | 3 +- net/bluetooth/l2cap_core.c | 1 + net/bpf/test_run.c | 4 +- net/can/isotp.c | 12 +- net/core/dev.c | 3 +- net/core/filter.c | 30 +- net/core/net_namespace.c | 17 +- net/core/rtnetlink.c | 13 +- net/core/skbuff.c | 15 +- net/ipv4/arp.c | 9 +- net/ipv4/fib_frontend.c | 5 +- net/ipv4/fib_semantics.c | 7 +- net/ipv4/inet_hashtables.c | 53 +- net/ipv6/addrconf.c | 4 +- net/ipv6/inet6_hashtables.c | 5 +- net/ipv6/ip6_input.c | 2 +- net/ipv6/ip6mr.c | 8 +- net/ipv6/route.c | 2 +- net/mctp/route.c | 2 +- net/netfilter/nf_conntrack_core.c | 85 +++- net/netlabel/netlabel_kapi.c | 2 + net/openvswitch/actions.c | 2 +- net/openvswitch/flow_netlink.c | 99 +++- net/rxrpc/net_ns.c | 2 +- net/sctp/outqueue.c | 6 +- net/smc/af_smc.c | 8 +- net/smc/smc_core.c | 2 +- net/smc/smc_tx.c | 25 +- net/smc/smc_tx.h | 1 + net/sunrpc/clnt.c | 7 + net/sunrpc/sched.c | 11 +- net/sunrpc/svcsock.c | 4 +- net/sunrpc/xprt.c | 19 +- net/sunrpc/xprtrdma/transport.c | 6 +- net/sunrpc/xprtsock.c | 73 ++- net/tls/tls_sw.c | 2 +- net/wireless/scan.c | 9 +- scripts/Makefile.ubsan | 1 - tools/build/feature/Makefile | 9 +- tools/lib/bpf/Makefile | 4 +- tools/perf/Makefile.config | 6 + tools/perf/arch/arm64/util/arm-spe.c | 6 + tools/perf/perf.c | 2 +- tools/perf/util/session.c | 15 +- tools/perf/util/setup.py | 8 +- tools/testing/selftests/bpf/progs/test_sk_lookup.c | 3 +- tools/testing/selftests/cgroup/cgroup_util.c | 2 +- tools/testing/selftests/cgroup/test_core.c | 165 +++++++ virt/kvm/kvm_main.c | 2 +- 307 files changed, 3548 insertions(+), 1883 deletions(-)

2 years, 9 months

5
287
0 0

[PATCH v2] USB: storage: karma: fix rio_karma_init return

by Lin Ma

The function rio_karam_init() should return -ENOMEM instead of value 0 (USB_STOR_TRANSPORT_GOOD) when allocation fails. Simlarlly, it should return -EIO when rio_karma_send_command() fails. Cc: stable(a)vger.kernel.org Fixes: dfe0d3ba20e8 ("USB Storage: add rio karma eject support") Signed-off-by: Lin Ma <linma(a)zju.edu.cn> --- drivers/usb/storage/karma.c | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/drivers/usb/storage/karma.c b/drivers/usb/storage/karma.c index 05cec81dcd3f..38ddfedef629 100644 --- a/drivers/usb/storage/karma.c +++ b/drivers/usb/storage/karma.c @@ -174,24 +174,25 @@ static void rio_karma_destructor(void *extra) static int rio_karma_init(struct us_data *us) { - int ret = 0; struct karma_data *data = kzalloc(sizeof(struct karma_data), GFP_NOIO); if (!data) - goto out; + return -ENOMEM; data->recv = kmalloc(RIO_RECV_LEN, GFP_NOIO); if (!data->recv) { kfree(data); - goto out; + return -ENOMEM; } us->extra = data; us->extra_destructor = rio_karma_destructor; - ret = rio_karma_send_command(RIO_ENTER_STORAGE, us); - data->in_storage = (ret == 0); -out: - return ret; + if (rio_karma_send_command(RIO_ENTER_STORAGE, us)) + return -EIO; + + data->in_storage = 1; + + return 0; } static struct scsi_host_template karma_host_template; -- 2.35.1

2 years, 9 months

2
4
0 0

[PATCH v4] USB: storage: karma: fix rio_karma_init return

by Lin Ma

The function rio_karam_init() should return -ENOMEM instead of value 0 (USB_STOR_TRANSPORT_GOOD) when allocation fails. Similarly, it should return -EIO when rio_karma_send_command() fails. Cc: stable(a)vger.kernel.org Fixes: dfe0d3ba20e8 ("USB Storage: add rio karma eject support") Signed-off-by: Lin Ma <linma(a)zju.edu.cn> Acked-by: Alan Stern <stern(a)rowland.harvard.edu> --- V3 -> V4: fix spelling mistake: Simlarly -> Similarly V2 -> V3: add Acked-by: Alan Stern <stern(a)rowland.harvard.edu> V1 -> V2: add Cc: stable(a)vger.kernel.org V0 -> V1: use -ENOMEM rather than USB_STOR_TRANSPORT_ERROR; take care of rio_karma_send_command() too drivers/usb/storage/karma.c | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/drivers/usb/storage/karma.c b/drivers/usb/storage/karma.c index 05cec81dcd3f..38ddfedef629 100644 --- a/drivers/usb/storage/karma.c +++ b/drivers/usb/storage/karma.c @@ -174,24 +174,25 @@ static void rio_karma_destructor(void *extra) static int rio_karma_init(struct us_data *us) { - int ret = 0; struct karma_data *data = kzalloc(sizeof(struct karma_data), GFP_NOIO); if (!data) - goto out; + return -ENOMEM; data->recv = kmalloc(RIO_RECV_LEN, GFP_NOIO); if (!data->recv) { kfree(data); - goto out; + return -ENOMEM; } us->extra = data; us->extra_destructor = rio_karma_destructor; - ret = rio_karma_send_command(RIO_ENTER_STORAGE, us); - data->in_storage = (ret == 0); -out: - return ret; + if (rio_karma_send_command(RIO_ENTER_STORAGE, us)) + return -EIO; + + data->in_storage = 1; + + return 0; } static struct scsi_host_template karma_host_template; -- 2.35.1

2 years, 9 months

1
0
0 0

[PATCH v3] USB: storage: karma: fix rio_karma_init return

by Lin Ma

The function rio_karam_init() should return -ENOMEM instead of value 0 (USB_STOR_TRANSPORT_GOOD) when allocation fails. Simlarlly, it should return -EIO when rio_karma_send_command() fails. Cc: stable(a)vger.kernel.org Fixes: dfe0d3ba20e8 ("USB Storage: add rio karma eject support") Signed-off-by: Lin Ma <linma(a)zju.edu.cn> Acked-by: Alan Stern <stern(a)rowland.harvard.edu> --- drivers/usb/storage/karma.c | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/drivers/usb/storage/karma.c b/drivers/usb/storage/karma.c index 05cec81dcd3f..38ddfedef629 100644 --- a/drivers/usb/storage/karma.c +++ b/drivers/usb/storage/karma.c @@ -174,24 +174,25 @@ static void rio_karma_destructor(void *extra) static int rio_karma_init(struct us_data *us) { - int ret = 0; struct karma_data *data = kzalloc(sizeof(struct karma_data), GFP_NOIO); if (!data) - goto out; + return -ENOMEM; data->recv = kmalloc(RIO_RECV_LEN, GFP_NOIO); if (!data->recv) { kfree(data); - goto out; + return -ENOMEM; } us->extra = data; us->extra_destructor = rio_karma_destructor; - ret = rio_karma_send_command(RIO_ENTER_STORAGE, us); - data->in_storage = (ret == 0); -out: - return ret; + if (rio_karma_send_command(RIO_ENTER_STORAGE, us)) + return -EIO; + + data->in_storage = 1; + + return 0; } static struct scsi_host_template karma_host_template; -- 2.35.1

2 years, 9 months

2
1
0 0

stable-rc/linux-5.16.y baseline: 134 runs, 1 regressions (v5.16.19-286-g4a83e2cd9b74)

by kernelci.org bot

stable-rc/linux-5.16.y baseline: 134 runs, 1 regressions (v5.16.19-286-g4a83e2cd9b74) Regressions Summary ------------------- platform | arch | lab | compiler | defconfig | regressions -----------------+-------+---------------+----------+----------------------------+------------ rk3399-gru-kevin | arm64 | lab-collabora | gcc-10 | defconfig+arm64-chromebook | 1 Details: https://kernelci.org/test/job/stable-rc/branch/linux-5.16.y/kernel/v5.16.19… Test: baseline Tree: stable-rc Branch: linux-5.16.y Describe: v5.16.19-286-g4a83e2cd9b74 URL: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git SHA: 4a83e2cd9b7444a50219f4be214a3d4d143e1945 Test Regressions ---------------- platform | arch | lab | compiler | defconfig | regressions -----------------+-------+---------------+----------+----------------------------+------------ rk3399-gru-kevin | arm64 | lab-collabora | gcc-10 | defconfig+arm64-chromebook | 1 Details: https://kernelci.org/test/plan/id/625542a91aeb644a96ae0681 Results: 88 PASS, 4 FAIL, 0 SKIP Full config: defconfig+arm64-chromebook Compiler: gcc-10 (aarch64-linux-gnu-gcc (Debian 10.2.1-6) 10.2.1 20210110) Plain log: https://storage.kernelci.org//stable-rc/linux-5.16.y/v5.16.19-286-g4a83e2cd… HTML log: https://storage.kernelci.org//stable-rc/linux-5.16.y/v5.16.19-286-g4a83e2cd… Rootfs: http://storage.kernelci.org/images/rootfs/buildroot/buildroot-baseline/2022… * baseline.bootrr.rockchip-i2s1-probed: https://kernelci.org/test/case/id/625542a91aeb644a96ae06a3 failing since 36 days (last pass: v5.16.12, first fail: v5.16.12-166-g373826da847f) 2022-04-12T09:13:03.109011 /lava-6071831/1/../bin/lava-test-case 2022-04-12T09:13:03.122496 <8>[ 33.456516] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=rockchip-i2s1-probed RESULT=fail>

2 years, 9 months

1
0
0 0

[PATCH v2 3/3] btrfs: return correct error number for __extent_writepage_io()

by Qu Wenruo

[BUG] If we hit an error from submit_extent_page() inside __extent_writepage_io(), we could still return 0 to the caller, and even trigger the warning in btrfs_page_assert_not_dirty(). [CAUSE] In __extent_writepage_io(), if we hit an error from submit_extent_page(), we will just clean up the range and continue. This is completely fine for regular PAGE_SIZE == sectorsize, as we can only hit one sector in one page, thus after the error we're ensured to exit and @ret will be saved. But for subpage case, we may have other dirty subpage range in the page, and in the next loop, we may succeeded submitting the next range. In that case, @ret will be overwritten, and we return 0 to the caller, while we have hit some error. [FIX] Introduce @has_error and @saved_ret to record the first error we hit, so we will never forget what error we hit. CC: stable(a)vger.kernel.org # 5.15+ Signed-off-by: Qu Wenruo <wqu(a)suse.com> --- fs/btrfs/extent_io.c | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/fs/btrfs/extent_io.c b/fs/btrfs/extent_io.c index 990d8475ba31..df4e78ff3b18 100644 --- a/fs/btrfs/extent_io.c +++ b/fs/btrfs/extent_io.c @@ -3955,10 +3955,12 @@ static noinline_for_stack int __extent_writepage_io(struct btrfs_inode *inode, u64 extent_offset; u64 block_start; struct extent_map *em; + int saved_ret = 0; int ret = 0; int nr = 0; u32 opf = REQ_OP_WRITE; const unsigned int write_flags = wbc_to_write_flags(wbc); + bool has_error = false; bool compressed; ret = btrfs_writepage_cow_fixup(page); @@ -4008,6 +4010,9 @@ static noinline_for_stack int __extent_writepage_io(struct btrfs_inode *inode, if (IS_ERR(em)) { btrfs_page_set_error(fs_info, page, cur, end - cur + 1); ret = PTR_ERR_OR_ZERO(em); + has_error = true; + if (!saved_ret) + saved_ret = ret; break; } @@ -4071,6 +4076,10 @@ static noinline_for_stack int __extent_writepage_io(struct btrfs_inode *inode, end_bio_extent_writepage, 0, 0, false); if (ret) { + has_error = true; + if (!saved_ret) + saved_ret = ret; + btrfs_page_set_error(fs_info, page, cur, iosize); if (PageWriteback(page)) btrfs_page_clear_writeback(fs_info, page, cur, @@ -4084,8 +4093,10 @@ static noinline_for_stack int __extent_writepage_io(struct btrfs_inode *inode, * If we finish without problem, we should not only clear page dirty, * but also empty subpage dirty bits */ - if (!ret) + if (!has_error) btrfs_page_assert_not_dirty(fs_info, page); + else + ret = saved_ret; *nr_ret = nr; return ret; } -- 2.35.1

2 years, 9 months

1
0
0 0

[PATCH v2 2/3] btrfs: fix the error handling for submit_extent_page() for btrfs_do_readpage()

by Qu Wenruo

[BUG] Test case generic/475 have a very high chance (almost 100%) to hit a fs hang, where a data page will never be unlocked and hang all later operations. [CAUSE] In btrfs_do_readpage(), if we hit an error from submit_extent_page() we will try to do the cleanup for our current io range, and exit. This works fine for PAGE_SIZE == sectorsize cases, but not for subpage. For subpage btrfs_do_readpage() will lock the full page first, which can contain several different sectors and extents: btrfs_do_readpage() |- begin_page_read() | |- btrfs_subpage_start_reader(); | Now the page will hage PAGE_SIZE / sectorsize reader pending, | and the page is locked. | |- end_page_read() for different branches | This function will reduce subpage readers, and when readers | reach 0, it will unlock the page. But when submit_extent_page() failed, we only cleanup the current io range, while the remaining io range will never be cleaned up, and the page remains locked forever. [FIX] Update the error handling of submit_extent_page() to cleanup all the remaining subpage range before exiting the loop. Please note that, now submit_extent_page() can only fail due to sanity check in alloc_new_bio(). Thus regular IO errors are impossible to trigger the error path. CC: stable(a)vger.kernel.org # 5.15+ Signed-off-by: Qu Wenruo <wqu(a)suse.com> --- fs/btrfs/extent_io.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/fs/btrfs/extent_io.c b/fs/btrfs/extent_io.c index 163aa6dee987..990d8475ba31 100644 --- a/fs/btrfs/extent_io.c +++ b/fs/btrfs/extent_io.c @@ -3774,8 +3774,12 @@ int btrfs_do_readpage(struct page *page, struct extent_map **em_cached, this_bio_flag, force_bio_submit); if (ret) { - unlock_extent(tree, cur, cur + iosize - 1); - end_page_read(page, false, cur, iosize); + /* + * We have to unlock the remaining range, or the page + * will never be unlocked. + */ + unlock_extent(tree, cur, end); + end_page_read(page, false, cur, end + 1 - cur); goto out; } cur = cur + iosize; -- 2.35.1

2 years, 9 months

1
0
0 0

stable-rc/queue/5.10 baseline: 132 runs, 1 regressions (v5.10.110-171-g3f868052db86)

by kernelci.org bot

stable-rc/queue/5.10 baseline: 132 runs, 1 regressions (v5.10.110-171-g3f868052db86) Regressions Summary ------------------- platform | arch | lab | compiler | defconfig | regressions -----------------+-------+---------------+----------+----------------------------+------------ rk3399-gru-kevin | arm64 | lab-collabora | gcc-10 | defconfig+arm64-chromebook | 1 Details: https://kernelci.org/test/job/stable-rc/branch/queue%2F5.10/kernel/v5.10.11… Test: baseline Tree: stable-rc Branch: queue/5.10 Describe: v5.10.110-171-g3f868052db86 URL: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git SHA: 3f868052db86f68d42741cfd3e018b7fe74d7b9d Test Regressions ---------------- platform | arch | lab | compiler | defconfig | regressions -----------------+-------+---------------+----------+----------------------------+------------ rk3399-gru-kevin | arm64 | lab-collabora | gcc-10 | defconfig+arm64-chromebook | 1 Details: https://kernelci.org/test/plan/id/62553ccc7de0d15b35ae0695 Results: 90 PASS, 2 FAIL, 0 SKIP Full config: defconfig+arm64-chromebook Compiler: gcc-10 (aarch64-linux-gnu-gcc (Debian 10.2.1-6) 10.2.1 20210110) Plain log: https://storage.kernelci.org//stable-rc/queue-5.10/v5.10.110-171-g3f868052d… HTML log: https://storage.kernelci.org//stable-rc/queue-5.10/v5.10.110-171-g3f868052d… Rootfs: http://storage.kernelci.org/images/rootfs/buildroot/buildroot-baseline/2022… * baseline.bootrr.rockchip-i2s1-probed: https://kernelci.org/test/case/id/62553ccd7de0d15b35ae06b7 failing since 35 days (last pass: v5.10.103-56-ge5a40f18f4ce, first fail: v5.10.103-105-gf074cce6ae0d) 2022-04-12T08:47:59.466361 /lava-6071388/1/../bin/lava-test-case 2022-04-12T08:47:59.477285 <8>[ 34.277193] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=rockchip-i2s1-probed RESULT=fail>

2 years, 9 months

1
0
0 0

Re: [PATCH 5.17 000/343] 5.17.3-rc1 review

by Ronald Warsow

hallo Greg 5.17.3-rc1 compiles, boots and runs on my x86_64 (Intel i5-11400, Fedora 36 Beta) Thanks Tested-by: Ronald Warsow <rwarsow(a)gmx.de> Ronald

2 years, 9 months

1
0
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror April 2022