October 2023 - Linux-stable-mirror

[PATCH v2] can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)

by Oleksij Rempel

Lock jsk->sk to prevent UAF when setsockopt(..., SO_J1939_FILTER, ...) modifies jsk->filters while receiving packets. Following trace was seen on affected system: ================================================================== BUG: KASAN: slab-use-after-free in j1939_sk_recv_match_one+0x1af/0x2d0 [can_j1939] Read of size 4 at addr ffff888012144014 by task j1939/350 CPU: 0 PID: 350 Comm: j1939 Tainted: G W OE 6.5.0-rc5 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014 Call Trace: print_report+0xd3/0x620 ? kasan_complete_mode_report_info+0x7d/0x200 ? j1939_sk_recv_match_one+0x1af/0x2d0 [can_j1939] kasan_report+0xc2/0x100 ? j1939_sk_recv_match_one+0x1af/0x2d0 [can_j1939] __asan_load4+0x84/0xb0 j1939_sk_recv_match_one+0x1af/0x2d0 [can_j1939] j1939_sk_recv+0x20b/0x320 [can_j1939] ? __kasan_check_write+0x18/0x20 ? __pfx_j1939_sk_recv+0x10/0x10 [can_j1939] ? j1939_simple_recv+0x69/0x280 [can_j1939] ? j1939_ac_recv+0x5e/0x310 [can_j1939] j1939_can_recv+0x43f/0x580 [can_j1939] ? __pfx_j1939_can_recv+0x10/0x10 [can_j1939] ? raw_rcv+0x42/0x3c0 [can_raw] ? __pfx_j1939_can_recv+0x10/0x10 [can_j1939] can_rcv_filter+0x11f/0x350 [can] can_receive+0x12f/0x190 [can] ? __pfx_can_rcv+0x10/0x10 [can] can_rcv+0xdd/0x130 [can] ? __pfx_can_rcv+0x10/0x10 [can] __netif_receive_skb_one_core+0x13d/0x150 ? __pfx___netif_receive_skb_one_core+0x10/0x10 ? __kasan_check_write+0x18/0x20 ? _raw_spin_lock_irq+0x8c/0xe0 __netif_receive_skb+0x23/0xb0 process_backlog+0x107/0x260 __napi_poll+0x69/0x310 net_rx_action+0x2a1/0x580 ? __pfx_net_rx_action+0x10/0x10 ? __pfx__raw_spin_lock+0x10/0x10 ? handle_irq_event+0x7d/0xa0 __do_softirq+0xf3/0x3f8 do_softirq+0x53/0x80 </IRQ> <TASK> __local_bh_enable_ip+0x6e/0x70 netif_rx+0x16b/0x180 can_send+0x32b/0x520 [can] ? __pfx_can_send+0x10/0x10 [can] ? __check_object_size+0x299/0x410 raw_sendmsg+0x572/0x6d0 [can_raw] ? __pfx_raw_sendmsg+0x10/0x10 [can_raw] ? apparmor_socket_sendmsg+0x2f/0x40 ? __pfx_raw_sendmsg+0x10/0x10 [can_raw] sock_sendmsg+0xef/0x100 sock_write_iter+0x162/0x220 ? __pfx_sock_write_iter+0x10/0x10 ? __rtnl_unlock+0x47/0x80 ? security_file_permission+0x54/0x320 vfs_write+0x6ba/0x750 ? __pfx_vfs_write+0x10/0x10 ? __fget_light+0x1ca/0x1f0 ? __rcu_read_unlock+0x5b/0x280 ksys_write+0x143/0x170 ? __pfx_ksys_write+0x10/0x10 ? __kasan_check_read+0x15/0x20 ? fpregs_assert_state_consistent+0x62/0x70 __x64_sys_write+0x47/0x60 do_syscall_64+0x60/0x90 ? do_syscall_64+0x6d/0x90 ? irqentry_exit+0x3f/0x50 ? exc_page_fault+0x79/0xf0 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 Allocated by task 348: kasan_save_stack+0x2a/0x50 kasan_set_track+0x29/0x40 kasan_save_alloc_info+0x1f/0x30 __kasan_kmalloc+0xb5/0xc0 __kmalloc_node_track_caller+0x67/0x160 j1939_sk_setsockopt+0x284/0x450 [can_j1939] __sys_setsockopt+0x15c/0x2f0 __x64_sys_setsockopt+0x6b/0x80 do_syscall_64+0x60/0x90 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 Freed by task 349: kasan_save_stack+0x2a/0x50 kasan_set_track+0x29/0x40 kasan_save_free_info+0x2f/0x50 __kasan_slab_free+0x12e/0x1c0 __kmem_cache_free+0x1b9/0x380 kfree+0x7a/0x120 j1939_sk_setsockopt+0x3b2/0x450 [can_j1939] __sys_setsockopt+0x15c/0x2f0 __x64_sys_setsockopt+0x6b/0x80 do_syscall_64+0x60/0x90 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 Fixes: 9d71dd0c70099 ("can: add support of SAE J1939 protocol") Reported-by: Sili Luo <rootlab(a)huawei.com> Suggested-by: Sili Luo <rootlab(a)huawei.com> Acked-by: Oleksij Rempel <o.rempel(a)pengutronix.de> Cc: stable(a)vger.kernel.org Signed-off-by: Oleksij Rempel <o.rempel(a)pengutronix.de> --- changes v2: - spin_lock_bh() instead of lock_sock() net/can/j1939/j1939-priv.h | 1 + net/can/j1939/socket.c | 22 ++++++++++++++++++---- 2 files changed, 19 insertions(+), 4 deletions(-) diff --git a/net/can/j1939/j1939-priv.h b/net/can/j1939/j1939-priv.h index 16af1a7f80f6..c4d098362155 100644 --- a/net/can/j1939/j1939-priv.h +++ b/net/can/j1939/j1939-priv.h @@ -301,6 +301,7 @@ struct j1939_sock { int ifindex; struct j1939_addr addr; + spinlock_t filters_lock; struct j1939_filter *filters; int nfilters; pgn_t pgn_rx_filter; diff --git a/net/can/j1939/socket.c b/net/can/j1939/socket.c index 14c431663233..641d37671c19 100644 --- a/net/can/j1939/socket.c +++ b/net/can/j1939/socket.c @@ -262,12 +262,17 @@ static bool j1939_sk_match_dst(struct j1939_sock *jsk, static bool j1939_sk_match_filter(struct j1939_sock *jsk, const struct j1939_sk_buff_cb *skcb) { - const struct j1939_filter *f = jsk->filters; - int nfilter = jsk->nfilters; + const struct j1939_filter *f; + int nfilter; + + spin_lock_bh(&jsk->filters_lock); + + f = jsk->filters; + nfilter = jsk->nfilters; if (!nfilter) /* receive all when no filters are assigned */ - return true; + goto filter_match_found; for (; nfilter; ++f, --nfilter) { if ((skcb->addr.pgn & f->pgn_mask) != f->pgn) @@ -276,9 +281,15 @@ static bool j1939_sk_match_filter(struct j1939_sock *jsk, continue; if ((skcb->addr.src_name & f->name_mask) != f->name) continue; - return true; + goto filter_match_found; } + + spin_unlock_bh(&jsk->filters_lock); return false; + +filter_match_found: + spin_unlock_bh(&jsk->filters_lock); + return true; } static bool j1939_sk_recv_match_one(struct j1939_sock *jsk, @@ -401,6 +412,7 @@ static int j1939_sk_init(struct sock *sk) atomic_set(&jsk->skb_pending, 0); spin_lock_init(&jsk->sk_session_queue_lock); INIT_LIST_HEAD(&jsk->sk_session_queue); + spin_lock_init(&jsk->filters_lock); /* j1939_sk_sock_destruct() depends on SOCK_RCU_FREE flag */ sock_set_flag(sk, SOCK_RCU_FREE); @@ -703,9 +715,11 @@ static int j1939_sk_setsockopt(struct socket *sock, int level, int optname, } lock_sock(&jsk->sk); + spin_lock_bh(&jsk->filters_lock); ofilters = jsk->filters; jsk->filters = filters; jsk->nfilters = count; + spin_unlock_bh(&jsk->filters_lock); release_sock(&jsk->sk); kfree(ofilters); return 0; -- 2.39.2

1 year, 3 months

1
0
0 0

[PATCH v2] sched/core: Fix RQCF_ACT_SKIP leak

by Hao Jia

Igor Raits and Bagas Sanjaya report a RQCF_ACT_SKIP leak warning. Link: https://lore.kernel.org/all/a5dd536d-041a-2ce9-f4b7-64d8d85c86dc@gmail.com This warning may be triggered in the following situations: CPU0 CPU1 __schedule() *rq->clock_update_flags <<= 1;* unregister_fair_sched_group() pick_next_task_fair+0x4a/0x410 destroy_cfs_bandwidth() newidle_balance+0x115/0x3e0 for_each_possible_cpu(i) *i=0* rq_unpin_lock(this_rq, rf) __cfsb_csd_unthrottle() raw_spin_rq_unlock(this_rq) rq_lock(*CPU0_rq*, &rf) rq_clock_start_loop_update() rq->clock_update_flags & RQCF_ACT_SKIP <-- raw_spin_rq_lock(this_rq) The purpose of RQCF_ACT_SKIP is to skip the update rq clock, but the update is very early in __schedule(), but we clear RQCF_*_SKIP very late, causing it to span that gap above and triggering this warning. In __schedule() we can clear the RQCF_*_SKIP flag immediately after update_rq_clock() to avoid this RQCF_ACT_SKIP leak warning. And set rq->clock_update_flags to RQCF_UPDATED to avoid rq->clock_update_flags < RQCF_ACT_SKIP warning that may be triggered later. Fixes: ebb83d84e49b ("sched/core: Avoid multiple calling update_rq_clock() in __cfsb_csd_unthrottle()") Cc: stable(a)vger.kernel.org Reported-by: Igor Raits <igor.raits(a)gmail.com> Reported-by: Bagas Sanjaya <bagasdotme(a)gmail.com> Closes: https://lore.kernel.org/all/20230913082424.73252-1-jiahao.os@bytedance.com Suggested-by: Peter Zijlstra (Intel) <peterz(a)infradead.org> Signed-off-by: Hao Jia <jiahao.os(a)bytedance.com> --- kernel/sched/core.c | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/kernel/sched/core.c b/kernel/sched/core.c index 802551e0009b..afb8d213155b 100644 --- a/kernel/sched/core.c +++ b/kernel/sched/core.c @@ -5374,8 +5374,6 @@ context_switch(struct rq *rq, struct task_struct *prev, /* switch_mm_cid() requires the memory barriers above. */ switch_mm_cid(rq, prev, next); - rq->clock_update_flags &= ~(RQCF_ACT_SKIP|RQCF_REQ_SKIP); - prepare_lock_switch(rq, next, rf); /* Here we just switch the register state and the stack. */ @@ -6615,6 +6613,7 @@ static void __sched notrace __schedule(unsigned int sched_mode) /* Promote REQ to ACT */ rq->clock_update_flags <<= 1; update_rq_clock(rq); + rq->clock_update_flags = RQCF_UPDATED; switch_count = &prev->nivcsw; @@ -6694,8 +6693,6 @@ static void __sched notrace __schedule(unsigned int sched_mode) /* Also unlocks the rq: */ rq = context_switch(rq, prev, next, &rf); } else { - rq->clock_update_flags &= ~(RQCF_ACT_SKIP|RQCF_REQ_SKIP); - rq_unpin_lock(rq, &rf); __balance_callbacks(rq); raw_spin_rq_unlock_irq(rq); -- 2.39.2

1 year, 3 months

2
1
0 0

[PATCH v6 2/2] selftests/ftrace: Add new test case which checks non unique symbol

by Francis Laniel

If name_show() is non unique, this test will try to install a kprobe on this function which should fail returning EADDRNOTAVAIL. On kernel where name_show() is not unique, this test is skipped. Cc: stable(a)vger.kernel.org Signed-off-by: Francis Laniel <flaniel(a)linux.microsoft.com> --- .../ftrace/test.d/kprobe/kprobe_non_uniq_symbol.tc | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 tools/testing/selftests/ftrace/test.d/kprobe/kprobe_non_uniq_symbol.tc diff --git a/tools/testing/selftests/ftrace/test.d/kprobe/kprobe_non_uniq_symbol.tc b/tools/testing/selftests/ftrace/test.d/kprobe/kprobe_non_uniq_symbol.tc new file mode 100644 index 000000000000..bc9514428dba --- /dev/null +++ b/tools/testing/selftests/ftrace/test.d/kprobe/kprobe_non_uniq_symbol.tc @@ -0,0 +1,13 @@ +#!/bin/sh +# SPDX-License-Identifier: GPL-2.0 +# description: Test failure of registering kprobe on non unique symbol +# requires: kprobe_events + +SYMBOL='name_show' + +# We skip this test on kernel where SYMBOL is unique or does not exist. +if [ "$(grep -c -E "[[:alnum:]]+ t ${SYMBOL}" /proc/kallsyms)" -le '1' ]; then + exit_unsupported +fi + +! echo "p:test_non_unique ${SYMBOL}" > kprobe_events -- 2.34.1

1 year, 3 months

1
0
0 0

[PATCH v6 1/2] tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols

by Francis Laniel

When a kprobe is attached to a function that's name is not unique (is static and shares the name with other functions in the kernel), the kprobe is attached to the first function it finds. This is a bug as the function that it is attaching to is not necessarily the one that the user wants to attach to. Instead of blindly picking a function to attach to what is ambiguous, error with EADDRNOTAVAIL to let the user know that this function is not unique, and that the user must use another unique function with an address offset to get to the function they want to attach to. Cc: stable(a)vger.kernel.org Fixes: 413d37d1eb69 ("tracing: Add kprobe-based event tracer") Suggested-by: Masami Hiramatsu <mhiramat(a)kernel.org> Signed-off-by: Francis Laniel <flaniel(a)linux.microsoft.com> Link: https://lore.kernel.org/lkml/20230819101105.b0c104ae4494a7d1f2eea742@kernel… --- kernel/trace/trace_kprobe.c | 63 +++++++++++++++++++++++++++++++++++++ kernel/trace/trace_probe.h | 1 + 2 files changed, 64 insertions(+) diff --git a/kernel/trace/trace_kprobe.c b/kernel/trace/trace_kprobe.c index 3d7a180a8427..a8fef6ab0872 100644 --- a/kernel/trace/trace_kprobe.c +++ b/kernel/trace/trace_kprobe.c @@ -705,6 +705,25 @@ static struct notifier_block trace_kprobe_module_nb = { .priority = 1 /* Invoked after kprobe module callback */ }; +static int count_symbols(void *data, unsigned long unused) +{ + unsigned int *count = data; + + (*count)++; + + return 0; +} + +static unsigned int number_of_same_symbols(char *func_name) +{ + unsigned int count; + + count = 0; + kallsyms_on_each_match_symbol(count_symbols, func_name, &count); + + return count; +} + static int __trace_kprobe_create(int argc, const char *argv[]) { /* @@ -836,6 +855,31 @@ static int __trace_kprobe_create(int argc, const char *argv[]) } } + if (symbol && !strchr(symbol, ':')) { + unsigned int count; + + count = number_of_same_symbols(symbol); + if (count > 1) { + /* + * Users should use ADDR to remove the ambiguity of + * using KSYM only. + */ + trace_probe_log_err(0, NON_UNIQ_SYMBOL); + ret = -EADDRNOTAVAIL; + + goto error; + } else if (count == 0) { + /* + * We can return ENOENT earlier than when register the + * kprobe. + */ + trace_probe_log_err(0, BAD_PROBE_ADDR); + ret = -ENOENT; + + goto error; + } + } + trace_probe_log_set_index(0); if (event) { ret = traceprobe_parse_event_name(&event, &group, gbuf, @@ -1695,6 +1739,7 @@ static int unregister_kprobe_event(struct trace_kprobe *tk) } #ifdef CONFIG_PERF_EVENTS + /* create a trace_kprobe, but don't add it to global lists */ struct trace_event_call * create_local_trace_kprobe(char *func, void *addr, unsigned long offs, @@ -1705,6 +1750,24 @@ create_local_trace_kprobe(char *func, void *addr, unsigned long offs, int ret; char *event; + if (func) { + unsigned int count; + + count = number_of_same_symbols(func); + if (count > 1) + /* + * Users should use addr to remove the ambiguity of + * using func only. + */ + return ERR_PTR(-EADDRNOTAVAIL); + else if (count == 0) + /* + * We can return ENOENT earlier than when register the + * kprobe. + */ + return ERR_PTR(-ENOENT); + } + /* * local trace_kprobes are not added to dyn_event, so they are never * searched in find_trace_kprobe(). Therefore, there is no concern of diff --git a/kernel/trace/trace_probe.h b/kernel/trace/trace_probe.h index 02b432ae7513..850d9ecb6765 100644 --- a/kernel/trace/trace_probe.h +++ b/kernel/trace/trace_probe.h @@ -450,6 +450,7 @@ extern int traceprobe_define_arg_fields(struct trace_event_call *event_call, C(BAD_MAXACT, "Invalid maxactive number"), \ C(MAXACT_TOO_BIG, "Maxactive is too big"), \ C(BAD_PROBE_ADDR, "Invalid probed address or symbol"), \ + C(NON_UNIQ_SYMBOL, "The symbol is not unique"), \ C(BAD_RETPROBE, "Retprobe address must be an function entry"), \ C(NO_TRACEPOINT, "Tracepoint is not found"), \ C(BAD_ADDR_SUFFIX, "Invalid probed address suffix"), \ -- 2.34.1

1 year, 3 months

1
0
0 0

[PATCH v5 0/2] Return EADDRNOTAVAIL when func matches several symbols during kprobe creation

by Francis Laniel

Hi. In the kernel source code, it exists different functions which share the same name but which have, of course, different addresses as they can be defined in different modules: # Kernel was compiled with CONFIG_NTFS_FS and CONFIG_NTFS3_FS as built-in. root@vm-amd64:~# grep ntfs_file_write_iter /proc/kallsyms ffffffff814ce3c0 t __pfx_ntfs_file_write_iter ffffffff814ce3d0 t ntfs_file_write_iter ffffffff814fc8a0 t __pfx_ntfs_file_write_iter ffffffff814fc8b0 t ntfs_file_write_iter This can be source of troubles when you create a PMU kprobe for such a function, as it will only install one for the first address (e.g. 0xffffffff814ce3d0 in the above). This could lead to some troubles were BPF based tools does not report any event because the second function is not called: root@vm-amd64:/mnt# mount | grep /mnt /foo.img on /mnt type ntfs3 (rw,relatime,uid=0,gid=0,iocharset=utf8) # ig is a tool which installs a PMU kprobe on ntfs_file_write_iter(). root@vm-amd64:/mnt# ig trace fsslower -m 0 -f ntfs3 --host &> /tmp/foo & [1] 207 root@vm-amd64:/mnt# dd if=./foo of=./bar count=3 3+0 records in 3+0 records out 1536 bytes (1.5 kB, 1.5 KiB) copied, 0.00543323 s, 283 kB/s root@vm-amd64:/mnt# fg ig trace fsslower -m 0 -f ntfs3 --host &> /tmp/foo ^Croot@vm-amd64:/mnt# more /tmp/foo RUNTIME.CONTAINERNAME RUNTIME.CONTAIN… PID COMM T BYTES OFFSET LAT FILE 214 dd R 512 0 766 foo 214 dd R 512 512 9 foo 214 dd As you can see in the above, only read events are reported and no write because the kprobe is installed for the old ntfs_file_write_iter() and not the ntfs3 one. The same behavior occurs with sysfs kprobe: root@vm-amd64:/# echo 'p:probe/ntfs_file_write_iter ntfs_file_write_iter' > /sys/kernel/tracing/kprobe_events root@vm-amd64:/# cat /sys/kernel/tracing/kprobe_events p:probe/ntfs_file_write_iter ntfs_file_write_iter root@vm-amd64:/# mount | grep /mnt /foo.img on /mnt type ntfs3 (rw,relatime,uid=0,gid=0,iocharset=utf8) root@vm-amd64:/# perf record -e probe:ntfs_file_write_iter & [1] 210 root@vm-amd64:/# cd /mnt/ root@vm-amd64:/mnt# dd if=./foo of=./bar count=3 3+0 records in 3+0 records out 1536 bytes (1.5 kB, 1.5 KiB) copied, 0.00234793 s, 654 kB/s root@vm-amd64:/mnt# cd - / root@vm-amd64:/# fg perf record -e probe:ntfs_file_write_iter ^C[ perf record: Woken up 1 times to write data ] [ perf record: Captured and wrote 0.056 MB perf.data ] root@vm-amd64:/# perf report Error: The perf.data data has no samples! # To display the perf.data header info, please use --header/--header-only optio> # In this contribution, I modified the functions creating sysfs and PMU kprobes to test if the function name given as argument matches several symbols. In this case, these functions return EADDRNOTAVAIL to indicate the user to use addr and offs to remove this ambiguity. So, when the above BPF tool is run, the following error message is printed: root@vm-amd64:~# ig trace fsslower -m 0 -f ntfs3 --host &> /tmp/foo & [1] 228 root@vm-amd64:~# more /tmp/foo RUNTIME.CONTAINERNAME RUNTIME.CONTAIN… PID COMM T BYTES OFFSET LAT FILE Error: running gadget: running gadget: installing tracer: attaching kprobe: crea ting perf_kprobe PMU (arch-specific fallback for "ntfs_file_write_iter"): token ntfs_file_write_iter: opening perf event: cannot assign requested address And the same with sysfs kprobe: root@vm-amd64:/# echo 'p:probe/ntfs_file_write_iter ntfs_file_write_iter' > /sys/kernel/tracing/kprobe_events -bash: echo: write error: Cannot assign requested address Note that, this does not influence perf as it installs kprobes as offset on _text: root@vm-amd64:/# perf probe --add ntfs_file_write_iter Added new events: probe:ntfs_file_write_iter (on ntfs_file_write_iter) probe:ntfs_file_write_iter (on ntfs_file_write_iter) ... root@vm-amd64:/# cat /sys/kernel/tracing/kprobe_events p:probe/ntfs_file_write_iter _text+5039088 p:probe/ntfs_file_write_iter _text+5228752 Note that, this contribution is the conclusion of a previous RFC which intended to install a PMU kprobe for all matching symbols [1, 2]. If you see any way to improve this contribution, particularly if you have an idea to add tests or documentation for this behavior, please share your feedback. Changes since: v1: * Use EADDRNOTAVAIL instead of adding a new error code. * Correct also this behavior for sysfs kprobe. v2: * Count the number of symbols corresponding to function name and return EADDRNOTAVAIL if higher than 1. * Return ENOENT if above count is 0, as it would be returned later by while registering the kprobe. v3: * Check symbol does not contain ':' before testing its uniqueness. * Add a selftest to check this is not possible to install a kprobe for a non unique symbol. v5: * No changes, just add linux-stable as recipient. Francis Laniel (2): tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols selftests/ftrace: Add new test case which checks non unique symbol kernel/trace/trace_kprobe.c | 63 +++++++++++++++++++ kernel/trace/trace_probe.h | 1 + .../test.d/kprobe/kprobe_non_uniq_symbol.tc | 13 ++++ 3 files changed, 77 insertions(+) create mode 100644 tools/testing/selftests/ftrace/test.d/kprobe/kprobe_non_uniq_symbol.tc Best regards and thank you in advance. --- [1]: https://lore.kernel.org/lkml/20230816163517.112518-1-flaniel@linux.microsof… [2]: https://lore.kernel.org/lkml/20230819101105.b0c104ae4494a7d1f2eea742@kernel… -- 2.34.1

1 year, 3 months

5
11
0 0

Re: usb: dwc3: some USB devices not working after 6.4.8

by Bagas Sanjaya

On Sun, Sep 03, 2023 at 09:19:13PM +0900, Kenta Sato wrote: > Hi, > > I am using the FriendlyElec NanoPi R4S board. > When I update the kernel from 6.4.7 to 6.4.11, 6.4.13, and 6.5.1, it > doesn't recognize some USB devices. > > The board has two USB 3.0 ports. I connected 1) BUFFALO USB Flash Disk > (high-speed) and 2) NETGEAR A6210 (SuperSpeed) to each port. > 1) is often not recognized. On the other hand, 2) was working while I > was testing. > Regardless of whether a USB device is connected, I could see the below > message on dmesg: > > [ 0.740993] phy phy-ff7c0000.phy.8: phy poweron failed --> -110 > [ 0.741585] dwc3 fe800000.usb: error -ETIMEDOUT: failed to initialize core > [ 0.742334] dwc3: probe of fe800000.usb failed with error -110 > [ 0.751635] rockchip-usb2phy ff770000.syscon:usb2phy@e460: > Requested PHY is disabled > > Is there any idea on this? > > The cause seems to be related to this commit. I tried reverting this > change and the issue seemed to be solved. > > >From 317d6e4c12b46bde61248ea4ab5e19f68cbd1c57 Mon Sep 17 00:00:00 2001 > From: Jisheng Zhang <jszhang(a)kernel.org> > Date: Wed, 28 Jun 2023 00:20:18 +0800 > Subject: usb: dwc3: don't reset device side if dwc3 was configured as > host-only > > commit e835c0a4e23c38531dcee5ef77e8d1cf462658c7 upstream. > > Commit c4a5153e87fd ("usb: dwc3: core: Power-off core/PHYs on > system_suspend in host mode") replaces check for HOST only dr_mode with > current_dr_role. But during booting, the current_dr_role isn't > initialized, thus the device side reset is always issued even if dwc3 > was configured as host-only. What's more, on some platforms with host > only dwc3, aways issuing device side reset by accessing device register > block can cause kernel panic. > > Fixes: c4a5153e87fd ("usb: dwc3: core: Power-off core/PHYs on > system_suspend in host mode") > Cc: stable <stable(a)kernel.org> > Signed-off-by: Jisheng Zhang <jszhang(a)kernel.org> > Acked-by: Thinh Nguyen <Thinh.Nguyen(a)synopsys.com> > Link: https://lore.kernel.org/r/20230627162018.739-1-jszhang@kernel.org > Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> > --- > drivers/usb/dwc3/core.c | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > > https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=… > Thanks for the regression report. I'm adding it to regzbot: #regzbot ^introduced: e835c0a4e23c38 #regzbot title: some USB devices unrecognized caused by not resetting dwc3 device if it is host-only -- An old man doll... just what I always wanted! - Clara

1 year, 3 months

5
6
0 0

Linux 6.5.8

by Greg Kroah-Hartman

I'm announcing the release of the 6.5.8 kernel. All users of the 6.5 kernel series must upgrade. The updated 6.5.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.5.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/devicetree/bindings/interrupt-controller/renesas,rzg2l-irqc.yaml | 5 Documentation/devicetree/bindings/media/nxp,imx7-csi.yaml | 1 Documentation/filesystems/overlayfs.rst | 12 Makefile | 2 arch/arm64/boot/dts/mediatek/mt7622.dtsi | 2 arch/arm64/boot/dts/mediatek/mt7986a.dtsi | 2 arch/arm64/boot/dts/mediatek/mt8195-demo.dts | 39 ++- arch/arm64/boot/dts/mediatek/mt8195.dtsi | 1 arch/arm64/boot/dts/qcom/sm8150.dtsi | 2 arch/arm64/include/asm/acpi.h | 20 + arch/powerpc/include/asm/nohash/32/pte-8xx.h | 7 arch/powerpc/include/asm/nohash/64/pgtable.h | 2 arch/powerpc/include/asm/nohash/pgtable.h | 2 arch/powerpc/kernel/entry_32.S | 8 arch/powerpc/platforms/pseries/hvCall.S | 4 arch/riscv/Makefile | 1 arch/riscv/include/asm/kprobes.h | 11 arch/riscv/include/asm/uprobes.h | 13 - arch/riscv/kernel/irq.c | 4 arch/riscv/kernel/signal.c | 7 arch/riscv/kernel/traps.c | 28 +- arch/riscv/net/bpf_jit_comp64.c | 18 - arch/s390/net/bpf_jit_comp.c | 25 + arch/x86/events/utils.c | 5 arch/x86/include/asm/msr-index.h | 9 arch/x86/include/asm/smp.h | 2 arch/x86/kernel/alternative.c | 13 + arch/x86/kernel/cpu/amd.c | 8 arch/x86/kernel/smp.c | 39 --- arch/x86/kernel/smpboot.c | 27 -- block/fops.c | 21 + drivers/acpi/ec.c | 11 drivers/acpi/processor_idle.c | 3 drivers/acpi/resource.c | 26 +- drivers/android/binder.c | 2 drivers/ata/libata-core.c | 90 +++++++ drivers/ata/libata-eh.c | 54 ++++ drivers/ata/libata-scsi.c | 16 - drivers/ata/libata.h | 2 drivers/ata/pata_parport/pata_parport.c | 10 drivers/counter/counter-chrdev.c | 4 drivers/counter/microchip-tcb-capture.c | 2 drivers/dma-buf/dma-fence-unwrap.c | 13 - drivers/dma-buf/sync_file.c | 9 drivers/dma/idxd/device.c | 5 drivers/dma/mediatek/mtk-uart-apdma.c | 3 drivers/dma/stm32-dma.c | 11 drivers/dma/stm32-mdma.c | 33 +- drivers/gpu/drm/amd/amdgpu/amdgpu_fru_eeprom.c | 1 drivers/gpu/drm/amd/amdgpu/amdgpu_object.h | 2 drivers/gpu/drm/amd/display/dc/clk_mgr/dcn20/dcn20_clk_mgr.c | 4 drivers/gpu/drm/amd/display/dc/clk_mgr/dcn32/dcn32_clk_mgr.c | 4 drivers/gpu/drm/amd/display/dc/core/dc.c | 3 drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 35 ++ drivers/gpu/drm/amd/display/dc/inc/resource.h | 106 ++++++++ drivers/gpu/drm/drm_atomic_helper.c | 17 + drivers/gpu/drm/drm_gem.c | 6 drivers/gpu/drm/i915/i915_gem.c | 9 drivers/gpu/drm/msm/disp/dpu1/dpu_plane.c | 27 +- drivers/gpu/drm/msm/dp/dp_ctrl.c | 13 - drivers/gpu/drm/msm/dp/dp_link.c | 4 drivers/gpu/drm/msm/dsi/dsi_host.c | 19 + drivers/gpu/drm/panel/panel-boe-tv101wum-nl6.c | 4 drivers/gpu/drm/scheduler/sched_main.c | 2 drivers/gpu/drm/tiny/simpledrm.c | 2 drivers/gpu/drm/vmwgfx/vmwgfx_bo.c | 7 drivers/gpu/drm/vmwgfx/vmwgfx_bo.h | 17 - drivers/gpu/drm/vmwgfx/vmwgfx_cotable.c | 6 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 4 drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 12 drivers/gpu/drm/vmwgfx/vmwgfx_gem.c | 18 + drivers/gpu/drm/vmwgfx/vmwgfx_kms.c | 6 drivers/gpu/drm/vmwgfx/vmwgfx_overlay.c | 2 drivers/gpu/drm/vmwgfx/vmwgfx_resource.c | 12 drivers/gpu/drm/vmwgfx/vmwgfx_shader.c | 4 drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 31 -- drivers/hid/hid-logitech-hidpp.c | 3 drivers/hwtracing/coresight/coresight-tmc-etr.c | 24 + drivers/iio/adc/ad7192.c | 29 +- drivers/iio/adc/imx8qxp-adc.c | 4 drivers/iio/addac/Kconfig | 2 drivers/iio/common/cros_ec_sensors/cros_ec_sensors_core.c | 6 drivers/iio/dac/ad3552r.c | 4 drivers/iio/frequency/admv1013.c | 4 drivers/iio/imu/bno055/Kconfig | 2 drivers/iio/pressure/bmp280-core.c | 2 drivers/iio/pressure/dps310.c | 8 drivers/iio/pressure/ms5611_core.c | 2 drivers/infiniband/hw/cxgb4/cm.c | 3 drivers/input/joystick/xpad.c | 4 drivers/input/misc/powermate.c | 1 drivers/input/mouse/elantech.c | 1 drivers/input/mouse/synaptics.c | 1 drivers/input/serio/i8042-acpipnpio.h | 8 drivers/input/touchscreen/goodix.c | 19 + drivers/irqchip/irq-renesas-rzg2l.c | 2 drivers/mcb/mcb-core.c | 10 drivers/mcb/mcb-parse.c | 2 drivers/md/dm-crypt.c | 3 drivers/media/v4l2-core/v4l2-subdev.c | 7 drivers/net/can/Kconfig | 2 drivers/net/can/sja1000/sja1000.c | 8 drivers/net/dsa/qca/qca8k-8xxx.c | 15 + drivers/net/ethernet/intel/ixgbe/ixgbe_sriov.c | 5 drivers/net/ethernet/marvell/octeontx2/nic/cn10k_macsec.c | 13 - drivers/net/ethernet/marvell/octeontx2/nic/otx2_common.c | 1 drivers/net/ethernet/mellanox/mlx5/core/en_accel/macsec.c | 4 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 3 drivers/net/ethernet/mellanox/mlxsw/spectrum_nve_vxlan.c | 4 drivers/net/ethernet/netronome/nfp/flower/cmsg.c | 10 drivers/net/ethernet/netronome/nfp/flower/conntrack.c | 19 + drivers/net/ethernet/netronome/nfp/flower/main.h | 2 drivers/net/ethernet/netronome/nfp/flower/metadata.c | 2 drivers/net/ethernet/netronome/nfp/flower/offload.c | 24 + drivers/net/ethernet/netronome/nfp/flower/qos_conf.c | 20 + drivers/net/ethernet/renesas/ravb_main.c | 6 drivers/net/ethernet/renesas/rswitch.c | 12 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 30 -- drivers/net/ieee802154/ca8210.c | 17 - drivers/net/macsec.c | 2 drivers/net/phy/mscc/mscc_macsec.c | 6 drivers/net/usb/dm9601.c | 7 drivers/net/xen-netback/interface.c | 4 drivers/perf/arm-cmn.c | 2 drivers/phy/freescale/phy-fsl-lynx-28g.c | 27 +- drivers/pinctrl/core.c | 16 - drivers/pinctrl/nuvoton/pinctrl-wpcm450.c | 6 drivers/pinctrl/renesas/Kconfig | 1 drivers/pinctrl/starfive/pinctrl-starfive-jh7110.c | 2 drivers/platform/x86/hp/hp-wmi.c | 8 drivers/platform/x86/think-lmi.c | 24 + drivers/power/supply/qcom_battmgr.c | 8 drivers/s390/net/Kconfig | 2 drivers/scsi/scsi_scan.c | 11 drivers/tee/amdtee/core.c | 10 drivers/thunderbolt/icm.c | 40 +-- drivers/thunderbolt/switch.c | 7 drivers/thunderbolt/tmu.c | 2 drivers/thunderbolt/xdomain.c | 58 +++- drivers/tty/serial/8250/8250_omap.c | 25 - drivers/tty/serial/serial_core.c | 15 - drivers/ufs/core/ufshcd.c | 2 drivers/usb/cdns3/cdnsp-gadget.c | 3 drivers/usb/cdns3/core.h | 3 drivers/usb/core/hub.c | 25 + drivers/usb/core/hub.h | 2 drivers/usb/dwc3/core.c | 39 +++ drivers/usb/gadget/function/f_ncm.c | 26 +- drivers/usb/gadget/udc/udc-xilinx.c | 20 - drivers/usb/host/xhci-hub.c | 19 - drivers/usb/host/xhci-mem.c | 4 drivers/usb/host/xhci-ring.c | 16 - drivers/usb/host/xhci.h | 2 drivers/usb/misc/onboard_usb_hub.c | 1 drivers/usb/misc/onboard_usb_hub.h | 1 drivers/usb/musb/musb_debugfs.c | 2 drivers/usb/musb/musb_host.c | 9 drivers/usb/typec/altmodes/displayport.c | 5 drivers/usb/typec/tcpm/qcom/qcom_pmic_typec_pdphy.c | 12 drivers/usb/typec/ucsi/psy.c | 9 drivers/usb/typec/ucsi/ucsi.c | 2 fs/ceph/file.c | 2 fs/ceph/inode.c | 4 fs/file.c | 3 fs/fs_context.c | 46 +++ fs/ioctl.c | 10 fs/kernel_read_file.c | 12 fs/namei.c | 3 fs/open.c | 4 fs/overlayfs/ovl_entry.h | 10 fs/overlayfs/params.c | 126 ++++------ fs/overlayfs/super.c | 18 - fs/quota/dquot.c | 66 +++-- fs/smb/server/vfs_cache.c | 4 include/linux/acpi.h | 9 include/linux/dma-fence.h | 19 + include/linux/fs_context.h | 2 include/linux/libata.h | 6 include/linux/mcb.h | 1 include/linux/quota.h | 4 include/linux/quotaops.h | 2 include/net/macsec.h | 1 include/uapi/linux/if_packet.h | 6 kernel/bpf/verifier.c | 6 kernel/cgroup/cgroup-v1.c | 5 kernel/workqueue.c | 8 net/can/isotp.c | 19 - net/ceph/messenger.c | 4 net/core/dev.c | 8 net/devlink/health.c | 30 +- net/ipv4/tcp_output.c | 1 net/mctp/route.c | 22 + net/netfilter/ipvs/ip_vs_sync.c | 4 net/nfc/llcp_core.c | 30 -- net/nfc/nci/core.c | 5 net/packet/af_packet.c | 7 net/rds/tcp_connect.c | 2 net/rds/tcp_listen.c | 2 net/smc/Kconfig | 1 net/smc/smc_stats.h | 14 - net/socket.c | 6 net/xdp/xsk_queue.c | 10 security/keys/trusted-keys/trusted_core.c | 13 - sound/pci/hda/cs35l41_hda.c | 115 ++++++--- sound/pci/hda/patch_realtek.c | 89 ++++++- sound/soc/amd/yc/acp6x-mach.c | 7 sound/soc/codecs/hdmi-codec.c | 5 sound/soc/fsl/fsl_sai.c | 9 sound/soc/generic/simple-card-utils.c | 3 sound/soc/intel/boards/sof_es8336.c | 10 sound/soc/intel/boards/sof_sdw.c | 10 sound/soc/intel/common/soc-acpi-intel-adl-match.c | 12 sound/soc/intel/common/soc-acpi-intel-mtl-match.c | 25 + sound/soc/sof/amd/pci-rmb.c | 1 sound/usb/mixer.c | 7 sound/usb/quirks.c | 8 216 files changed, 1870 insertions(+), 830 deletions(-) Abhinav Kumar (3): drm/msm/dsi: skip the wait for video mode done if not applicable drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow drm/msm/dpu: fail dpu_plane_atomic_check() based on mdp clk limits Alexander Zangerl (1): iio: pressure: ms5611: ms5611_prom_is_valid false negative bug Alisa-Dariana Roman (1): iio: adc: ad7192: Correct reference voltage Amelie Delaunay (5): dmaengine: stm32-mdma: abort resume if no ongoing transfer dmaengine: stm32-dma: fix stm32_dma_prep_slave_sg in case of MDMA chaining dmaengine: stm32-dma: fix residue in case of MDMA chaining dmaengine: stm32-mdma: use Link Address Register to compute residue dmaengine: stm32-mdma: set in_flight_bytes in case CRQA flag is set Amir Goldstein (5): ovl: temporarily disable appending lowedirs fs: factor out vfs_parse_monolithic_sep() helper ovl: fix regression in parsing of mount options with escaped comma ovl: make use of ->layers safe in rcu pathwalk ovl: fix regression in showing lowerdir mount option Andrew Kanner (1): xdp: Fix zero-size allocation warning in xskq_create() Andy Chiu (1): riscv: signal: fix sigaltstack frame size checking Antoniu Miclaus (2): iio: admv1013: add mixer_vgate corner cases iio: addac: Kconfig: update ad74413r selections Armin Wolf (1): platform/x86: think-lmi: Fix reference leak Artem Chernyshev (1): RDMA/cxgb4: Check skb value for failure to allocate Athira Rajeev (1): powerpc/pseries: Fix STK_PARAM access in the hcall tracing code Balamurugan C (2): ASoC: Intel: soc-acpi: Add entry for HDMI_In capture support in MTL match table ASoC: Intel: soc-acpi: Add entry for sof_es8336 in MTL match table. Biju Das (1): irqchip: renesas-rzg2l: Fix logic to clear TINT interrupt source Björn Töpel (3): riscv, bpf: Sign-extend return values riscv, bpf: Track both a0 (RISC-V ABI) and a5 (BPF) return values riscv: Only consider swbp/ss handlers for correct privileged mode Borislav Petkov (AMD) (1): x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs Carlos Llamas (1): binder: fix memory leaks of spam and pending work Christian König (2): drm/amdgpu: add missing NULL check dma-buf: add dma_fence_timestamp helper Christophe Leroy (2): powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() Christos Skevis (1): ALSA: usb-audio: Fix microphone sound on Nexigo webcam. Damien Le Moal (2): scsi: Do not rescan devices with a suspended queue ata: libata-scsi: Disable scsi device manage_system_start_stop Dan Carpenter (4): drm/msm/dsi: fix irq_of_parse_and_map() error checking mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type ixgbe: fix crash with empty VF macvlan list ceph: fix type promotion bug on 32bit systems Daniel Miess (1): drm/amd/display: Don't set dpms_off for seamless boot David Vernet (1): bpf: Fix verifier log for async callback return values Dharma Balasubiramani (1): counter: microchip-tcb-capture: Fix the use of internal GCLK logic Dinghao Liu (1): ieee802154: ca8210: Fix a potential UAF in ca8210_probe Dmitry Baryshkov (1): arm64: dts: qcom: sm8150: extend the size of the PDC resource Dmitry Torokhov (1): pinctrl: avoid unsafe code pattern in find_pinctrl() Duoming Zhou (1): dmaengine: mediatek: Fix deadlock caused by synchronize_irq() Eric Dumazet (2): net: refine debug info in skb_checksum_help() net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() Eugen Hristev (1): arm64: dts: mediatek: fix t-phy unit name Fabian Vogt (1): ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx Fabio Estevam (1): media: dt-bindings: imx7-csi: Make power-domains not required for imx8mq Fabrice Gasnier (1): counter: chrdev: fix getting array extensions Gerd Bayer (1): net/smc: Fix dependency of SMC on ISM Greg Kroah-Hartman (1): Linux 6.5.8 Hal Feng (1): pinctrl: starfive: jh7110: Fix failure to set irq after CONFIG_PM is enabled Hans de Goede (6): HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect media: subdev: Don't report V4L2_SUBDEV_CAP_STREAMS when the streams API is disabled ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA ACPI: resource: Add TongFang GM6BGEQ, GM6BG5Q and GM6BG0Q to irq1_edge_low_force_override[] ACPI: EC: Add quirk for the HP Pavilion Gaming 15-dk1xxx Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case Heikki Krogerus (1): usb: typec: ucsi: Fix missing link removal Herbert Xu (1): dm crypt: Fix reqsize in crypt_iv_eboiv_gen Hui Liu (1): usb: typec: qcom: Update the logic of regulator enable and disable Ilya Leoshkevich (2): s390/bpf: Fix clobbering the caller's backchain in the trampoline s390/bpf: Fix unwinding past the trampoline Ioana Ciornei (1): phy: lynx-28g: cancel the CDR check work item on the remove path JP Kobryn (1): perf/x86/lbr: Filter vsyscall addresses Jakub Kicinski (1): net: tcp: fix crashes trying to free half-baked MTU probes Jan Kara (1): quota: Fix slow quotaoff Javier Carrasco (3): net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read Input: powermate - fix use-after-free in powermate_config_complete usb: misc: onboard_hub: add support for Microchip USB2412 USB 2.0 hub Jeffery Miller (1): Input: psmouse - fix fast_reconnect function for PS/2 mode Jeremy Cline (1): nfc: nci: assert requested protocol is valid Jeremy Kerr (1): mctp: perform route lookups under a RCU read-side lock Jiexun Wang (1): RISC-V: Fix wrong use of CONFIG_HAVE_SOFTIRQ_ON_OWN_STACK Jing Zhang (1): perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7 Joey Gouly (1): drm/tiny: correctly print `struct resource *` on error Johan Hovold (1): power: supply: qcom_battmgr: fix enable request endianness John Watts (1): can: sun4i_can: Only show Kconfig if ARCH_SUNXI is set Jonathan Cameron (1): iio: imu: bno055: Fix missing Kconfig dependencies Jordan Rife (2): net: prevent address rewrite in kernel_bind() libceph: use kernel_connect() Jorge Sanjuan Garcia (1): mcb: remove is_added flag from mcb_device struct Kailang Yang (4): ALSA: hda/realtek: Change model for Intel RVP board ALSA: hda/realtek - ALC287 I2S speaker platform support ALSA: hda/realtek - ALC287 merge RTK codec with CS CS35L41 AMP ALSA: hda/realtek - Fixed two speaker platform Kirill A. Shutemov (1): x86/alternatives: Disable KASAN in apply_alternatives() Konstantin Meskhidze (1): drm/vmwgfx: fix typo of sizeof argument Krishna Kurapati (1): usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call Kuninori Morimoto (1): ASoC: simple-card-utils: fixup simple_util_startup() error handling Kuniyuki Iwashima (1): af_packet: Fix fortified memcpy() without flex array. Kuogee Hsieh (1): drm/msm/dp: do not reinitialize phy unless retry during link training Lad Prabhakar (1): dt-bindings: interrupt-controller: renesas,rzg2l-irqc: Update description for '#interrupt-cells' property Lakshmi Yadlapati (1): iio: pressure: dps310: Adjust Timeout Settings Linu Cherian (1): coresight: Fix run time warnings while reusing ETR buffer Linus Torvalds (1): Revert "x86/smp: Put CPUs into INIT on shutdown if possible" Luben Tuikov (1): drm/amdgpu: Fix a memory leak Lukas Magel (1): can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior Lukas Wunner (3): xhci: Clear EHB bit only at end of interrupt handler xhci: Preserve RsvdP bits in ERSTBA register correctly serial: Reduce spinlocked portion of uart_rs485_config() Macpaul Lin (2): arm64: dts: mediatek: mt8195-demo: fix the memory size to 8GB arm64: dts: mediatek: mt8195-demo: update and reorder reserved memory regions Marcelo Schmitt (1): iio: dac: ad3552r: Correct device IDs Marek Behún (2): net: dsa: qca8k: fix regmap bulk read/write methods on big endian systems net: dsa: qca8k: fix potential MDIO bus conflict when accessing internal PHYs via management frames Mario Limonciello (1): usb: typec: ucsi: Use GET_CAPABILITY attributes data to set power supply scope Mathias Krause (1): drm/i915: Register engines early to avoid type confusion Mathias Nyman (1): xhci: track port suspend state correctly in unsuccessful resume cases Matthew Wilcox (Oracle) (2): drm: Do not overrun array in drm_gem_get_pages() fs: Fix kernel-doc warnings Matthias Berndt (1): Input: xpad - add PXN V900 support Matthias Reichl (1): ASoC: hdmi-codec: Fix broken channel map reporting Max Nguyen (1): Input: xpad - add HyperX Clutch Gladiate Support Michael Ellerman (1): powerpc/47x: Fix 47x syscall return crash Michal Koutný (1): cgroup: Remove duplicates in cgroup v1 tasks file Mika Westerberg (4): thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding thunderbolt: Correct TMU mode initialization from hardware thunderbolt: Restart XDomain discovery handshake after failure Mikhail Kobuk (1): pinctrl: nuvoton: wpcm450: fix out of bounds write Miquel Raynal (1): can: sja1000: Always restart the Tx queue after an overrun Moshe Shemesh (1): devlink: Hold devlink lock on health reporter dump get Namjae Jeon (1): ksmbd: not allow to open file if delelete on close bit is set Nils Hoppmann (1): net/smc: Fix pos miscalculation in statistics Nícolas F. R. A. Prado (1): arm64: dts: mediatek: mt8195: Set DSU PMU status to fail Ondrej Zary (2): ata: pata_parport: fix pata_parport_devchk ata: pata_parport: implement set_devctl Oza Pawandeep (1): cpuidle, ACPI: Evaluate LPI arch_flags for broadcast timer Pawel Laszczak (1): usb: cdnsp: Fixes issue with dequeuing not queued requests Peter Wang (1): scsi: ufs: core: Correct clear TM error log Phil Elwell (1): iio: pressure: bmp280: Fix NULL pointer exception Philipp Rossak (1): iio: adc: imx8qxp: Fix address for command buffer registers Pierre-Louis Bossart (2): ASoC: Intel: soc-acpi: fix Dell SKU 0B34 ASoC: Intel: sof_sdw: add support for SKU 0B14 Piyush Mehta (1): usb: gadget: udc-xilinx: replace memcpy with memcpy_toio Prashanth K (1): usb: typec: ucsi: Clear EVENT_PENDING bit if ucsi_send_command fails RD Babiera (1): usb: typec: altmodes/displayport: Signal hpd low when exiting mode Radu Pirea (NXP OSS) (4): octeontx2-pf: mcs: update PN only when update_pn is true net: macsec: indicate next pn update when offloading net: phy: mscc: macsec: reject PN update requests net/mlx5e: macsec: use update_pn flag instead of PN comparation Ralph Siemsen (1): pinctrl: renesas: rzn1: Enable missing PINMUX Ratheesh Kannoth (1): octeontx2-pf: Fix page pool frag allocation warning Remi Pommarel (1): net: stmmac: remove unneeded stmmac_poll_controller Rex Zhang (1): dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq Ricardo Cañuelo (1): usb: hub: Guard against accesses to uninitialized BOS descriptors Rijo Thomas (1): tee: amdtee: fix use-after-free vulnerability in amdtee_close_session Roger Pau Monne (1): xen-netback: use default TX queue size for vifs Ruihai Zhou (1): drm/panel: boe-tv101wum-nl6: Completely pull GPW to VGL before TP term Samson Tam (1): drm/amd/display: apply edge-case DISPCLK WDIVIDER changes to master OTG pipes only Sarthak Kukreti (1): block: Don't invalidate pagecache for invalid falloc modes Sebastian Reichel (1): power: supply: qcom_battmgr: fix battery_id type Shengjiu Wang (1): ASoC: fsl_sai: Don't disable bitclock for i.MX8MP Simon Ser (1): drm/atomic-helper: relax unregistered connector check Song Shuai (1): riscv: Remove duplicate objcopy flag Stefan Binding (1): ALSA: hda: cs35l41: Cleanup and fix double free in firmware request Stephen Boyd (1): drm/msm/dp: Add newlines to debug printks Sumit Garg (1): KEYS: trusted: Remove redundant static calls usage SungHwan Jung (1): ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED Sven Frotscher (1): ASoC: amd: yc: Fix non-functional mic on Lenovo 82YM Szilard Fabian (1): Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table Thinh Nguyen (1): usb: dwc3: Soft reset phy on probe for host Tony Lindgren (2): serial: 8250_omap: Fix errors with no_console_suspend serial: core: Fix checks for tx runtime PM state Tzung-Bi Shih (1): iio: cros_ec: fix an use-after-free in cros_ec_sensors_push_data() Uwe Kleine-König (1): platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section mismatch warning Vijendar Mukunda (1): ASoC: SOF: amd: fix for firmware reload failure after playback Vladimir Oltean (2): phy: lynx-28g: lock PHY while performing CDR lock workaround phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers Waiman Long (1): workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() Wenjing Liu (1): drm/amd/display: implement pipe type definition and adding accessors Wesley Cheng (1): usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer WhaleChang (1): ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset Will Mortensen (1): net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp Xiaolei Wang (1): usb: cdns3: Modify the return value of cdns_set_active () to void when CONFIG_PM_SLEEP is disabled Xingxing Luo (2): usb: musb: Get the musb_qh poniter after musb_giveback usb: musb: Modify the "HWVers" register address Xiubo Li (1): ceph: fix incorrect revoked caps assert in ceph_fill_file_size() Yanguo Li (1): nfp: flower: avoid rmmod nfp crash issues Yoshihiro Shimoda (4): ravb: Fix up dma_free_coherent() call in ravb_remove() ravb: Fix use-after-free issue in ravb_tx_timeout_work() rswitch: Fix renesas_eth_sw_remove() implementation rswitch: Fix imbalance phy_power_off() calling Zack Rusin (1): drm/vmwgfx: Keep a gem reference to user bos in surfaces

1 year, 3 months

1
1
0 0

Linux 6.1.59

by Greg Kroah-Hartman

I'm announcing the release of the 6.1.59 kernel. All users of the 6.1 kernel series must upgrade. The updated 6.1.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.1.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/devicetree/bindings/interrupt-controller/renesas,rzg2l-irqc.yaml | 5 Documentation/networking/ip-sysctl.rst | 15 + Makefile | 2 arch/arm64/boot/dts/mediatek/mt8195-demo.dts | 39 +++- arch/arm64/boot/dts/mediatek/mt8195.dtsi | 1 arch/arm64/boot/dts/qcom/sm8150.dtsi | 2 arch/powerpc/include/asm/nohash/32/pte-8xx.h | 7 arch/powerpc/include/asm/nohash/64/pgtable.h | 2 arch/powerpc/include/asm/nohash/pgtable.h | 2 arch/powerpc/kernel/entry_32.S | 8 arch/riscv/net/bpf_jit_comp64.c | 33 +-- arch/x86/events/utils.c | 5 arch/x86/include/asm/msr-index.h | 9 - arch/x86/kernel/alternative.c | 13 + arch/x86/kernel/cpu/amd.c | 8 drivers/acpi/ec.c | 11 + drivers/acpi/resource.c | 7 drivers/ata/libata-core.c | 90 ++++++++++ drivers/ata/libata-eh.c | 54 +++++- drivers/ata/libata-scsi.c | 16 - drivers/ata/libata.h | 2 drivers/counter/counter-chrdev.c | 4 drivers/counter/microchip-tcb-capture.c | 2 drivers/dma-buf/dma-fence-unwrap.c | 13 - drivers/dma-buf/sync_file.c | 9 - drivers/dma/idxd/device.c | 5 drivers/dma/mediatek/mtk-uart-apdma.c | 3 drivers/dma/stm32-dma.c | 11 - drivers/dma/stm32-mdma.c | 33 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_object.h | 2 drivers/gpu/drm/amd/display/dc/core/dc.c | 3 drivers/gpu/drm/drm_atomic_helper.c | 17 + drivers/gpu/drm/i915/gt/gen8_engine_cs.c | 11 + drivers/gpu/drm/msm/disp/dpu1/dpu_plane.c | 12 - drivers/gpu/drm/msm/dp/dp_ctrl.c | 13 - drivers/gpu/drm/msm/dp/dp_link.c | 2 drivers/gpu/drm/msm/dsi/dsi_host.c | 19 +- drivers/gpu/drm/scheduler/sched_main.c | 2 drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 2 drivers/hid/hid-logitech-hidpp.c | 3 drivers/iio/adc/imx8qxp-adc.c | 4 drivers/iio/addac/Kconfig | 2 drivers/iio/dac/ad3552r.c | 4 drivers/iio/frequency/admv1013.c | 4 drivers/iio/imu/bno055/Kconfig | 2 drivers/iio/pressure/bmp280-core.c | 2 drivers/iio/pressure/dps310.c | 8 drivers/iio/pressure/ms5611_core.c | 2 drivers/infiniband/hw/cxgb4/cm.c | 3 drivers/input/joystick/xpad.c | 2 drivers/input/misc/powermate.c | 1 drivers/input/mouse/elantech.c | 1 drivers/input/mouse/synaptics.c | 1 drivers/input/serio/i8042-acpipnpio.h | 8 drivers/input/touchscreen/goodix.c | 19 ++ drivers/irqchip/irq-renesas-rzg2l.c | 2 drivers/mcb/mcb-core.c | 10 - drivers/mcb/mcb-parse.c | 2 drivers/net/can/Kconfig | 2 drivers/net/dsa/qca/qca8k-8xxx.c | 11 + drivers/net/ethernet/intel/ixgbe/ixgbe_sriov.c | 5 drivers/net/ethernet/mellanox/mlx5/core/en_accel/macsec.c | 4 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 3 drivers/net/ethernet/mellanox/mlxsw/spectrum_nve_vxlan.c | 4 drivers/net/ethernet/microsoft/mana/mana_en.c | 18 +- drivers/net/ethernet/netronome/nfp/flower/cmsg.c | 10 - drivers/net/ethernet/netronome/nfp/flower/conntrack.c | 19 +- drivers/net/ethernet/netronome/nfp/flower/main.h | 2 drivers/net/ethernet/netronome/nfp/flower/metadata.c | 2 drivers/net/ethernet/netronome/nfp/flower/offload.c | 24 ++ drivers/net/ethernet/netronome/nfp/flower/qos_conf.c | 20 +- drivers/net/ethernet/renesas/ravb_main.c | 6 drivers/net/ieee802154/ca8210.c | 17 - drivers/net/macsec.c | 2 drivers/net/phy/mscc/mscc_macsec.c | 6 drivers/net/usb/dm9601.c | 7 drivers/net/xen-netback/interface.c | 4 drivers/perf/arm-cmn.c | 2 drivers/phy/freescale/phy-fsl-lynx-28g.c | 27 ++- drivers/pinctrl/core.c | 16 + drivers/pinctrl/nuvoton/pinctrl-wpcm450.c | 6 drivers/pinctrl/renesas/Kconfig | 1 drivers/platform/x86/hp/hp-wmi.c | 8 drivers/platform/x86/think-lmi.c | 24 ++ drivers/scsi/scsi_scan.c | 11 - drivers/tee/amdtee/core.c | 10 - drivers/thunderbolt/icm.c | 40 ++-- drivers/thunderbolt/switch.c | 7 drivers/thunderbolt/xdomain.c | 58 ++++-- drivers/ufs/core/ufshcd.c | 2 drivers/usb/cdns3/cdnsp-gadget.c | 3 drivers/usb/cdns3/core.h | 3 drivers/usb/core/hub.c | 25 ++ drivers/usb/core/hub.h | 2 drivers/usb/dwc3/core.c | 39 ++++ drivers/usb/gadget/function/f_ncm.c | 26 ++ drivers/usb/gadget/udc/udc-xilinx.c | 20 +- drivers/usb/host/xhci-ring.c | 4 drivers/usb/musb/musb_debugfs.c | 2 drivers/usb/musb/musb_host.c | 9 - drivers/usb/typec/altmodes/displayport.c | 5 drivers/usb/typec/ucsi/psy.c | 9 + drivers/usb/typec/ucsi/ucsi.c | 1 fs/ceph/file.c | 2 fs/ceph/inode.c | 4 fs/quota/dquot.c | 66 ++++--- fs/smb/server/vfs_cache.c | 4 include/linux/dma-fence.h | 19 ++ include/linux/libata.h | 7 include/linux/mcb.h | 1 include/linux/quota.h | 4 include/linux/quotaops.h | 2 include/net/macsec.h | 1 include/net/netns/ipv4.h | 1 kernel/bpf/verifier.c | 6 kernel/cgroup/cgroup-v1.c | 5 kernel/workqueue.c | 8 net/can/isotp.c | 19 -- net/ceph/messenger.c | 4 net/core/dev.c | 8 net/ipv4/sysctl_net_ipv4.c | 9 + net/ipv4/tcp_ipv4.c | 2 net/ipv4/tcp_output.c | 60 +++++- net/mctp/route.c | 22 +- net/mptcp/protocol.c | 28 +-- net/mptcp/protocol.h | 35 +-- net/mptcp/subflow.c | 10 - net/netfilter/ipvs/ip_vs_sync.c | 4 net/nfc/llcp_core.c | 30 +-- net/nfc/nci/core.c | 5 net/rds/tcp_connect.c | 2 net/rds/tcp_listen.c | 2 net/smc/smc_stats.h | 14 + net/socket.c | 6 security/keys/trusted-keys/trusted_core.c | 13 - sound/pci/hda/patch_realtek.c | 89 ++++++++- sound/soc/amd/yc/acp6x-mach.c | 7 sound/soc/codecs/sta32x.c | 39 ++-- sound/soc/codecs/sta350.c | 63 +++---- sound/soc/codecs/tas5086.c | 2 sound/soc/fsl/fsl_sai.c | 41 +++- sound/soc/fsl/fsl_sai.h | 2 sound/soc/fsl/fsl_ssi.c | 2 sound/soc/fsl/imx-card.c | 2 sound/soc/generic/simple-card-utils.c | 3 sound/soc/intel/boards/sof_es8336.c | 10 + sound/soc/intel/boards/sof_sdw.c | 10 + sound/soc/intel/common/soc-acpi-intel-mtl-match.c | 25 ++ sound/soc/sh/rcar/ssi.c | 4 sound/soc/sof/amd/pci-rmb.c | 1 sound/usb/mixer.c | 7 sound/usb/quirks.c | 8 152 files changed, 1301 insertions(+), 517 deletions(-) Abhinav Kumar (2): drm/msm/dsi: skip the wait for video mode done if not applicable drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow Alexander Zangerl (1): iio: pressure: ms5611: ms5611_prom_is_valid false negative bug Amelie Delaunay (5): dmaengine: stm32-mdma: abort resume if no ongoing transfer dmaengine: stm32-dma: fix stm32_dma_prep_slave_sg in case of MDMA chaining dmaengine: stm32-dma: fix residue in case of MDMA chaining dmaengine: stm32-mdma: use Link Address Register to compute residue dmaengine: stm32-mdma: set in_flight_bytes in case CRQA flag is set Antoniu Miclaus (2): iio: admv1013: add mixer_vgate corner cases iio: addac: Kconfig: update ad74413r selections Armin Wolf (1): platform/x86: think-lmi: Fix reference leak Artem Chernyshev (1): RDMA/cxgb4: Check skb value for failure to allocate Balamurugan C (2): ASoC: Intel: soc-acpi: Add entry for HDMI_In capture support in MTL match table ASoC: Intel: soc-acpi: Add entry for sof_es8336 in MTL match table. Biju Das (1): irqchip: renesas-rzg2l: Fix logic to clear TINT interrupt source Björn Töpel (1): riscv, bpf: Sign-extend return values Borislav Petkov (AMD) (1): x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs Christian König (2): drm/amdgpu: add missing NULL check dma-buf: add dma_fence_timestamp helper Christophe Leroy (2): powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() Christos Skevis (1): ALSA: usb-audio: Fix microphone sound on Nexigo webcam. Damien Le Moal (2): scsi: Do not rescan devices with a suspended queue ata: libata-scsi: Disable scsi device manage_system_start_stop Dan Carpenter (4): drm/msm/dsi: fix irq_of_parse_and_map() error checking mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type ixgbe: fix crash with empty VF macvlan list ceph: fix type promotion bug on 32bit systems Daniel Miess (1): drm/amd/display: Don't set dpms_off for seamless boot David Vernet (1): bpf: Fix verifier log for async callback return values Dharma Balasubiramani (1): counter: microchip-tcb-capture: Fix the use of internal GCLK logic Dinghao Liu (1): ieee802154: ca8210: Fix a potential UAF in ca8210_probe Dmitry Baryshkov (1): arm64: dts: qcom: sm8150: extend the size of the PDC resource Dmitry Torokhov (1): pinctrl: avoid unsafe code pattern in find_pinctrl() Duoming Zhou (1): dmaengine: mediatek: Fix deadlock caused by synchronize_irq() Eric Dumazet (2): net: refine debug info in skb_checksum_help() net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() Fabian Vogt (1): ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx Fabrice Gasnier (1): counter: chrdev: fix getting array extensions Greg Kroah-Hartman (1): Linux 6.1.59 Haiyang Zhang (1): net: mana: Fix TX CQE error handling Hans de Goede (4): HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA ACPI: EC: Add quirk for the HP Pavilion Gaming 15-dk1xxx Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case Ioana Ciornei (1): phy: lynx-28g: cancel the CDR check work item on the remove path JP Kobryn (1): perf/x86/lbr: Filter vsyscall addresses Jan Kara (1): quota: Fix slow quotaoff Javier Carrasco (2): net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read Input: powermate - fix use-after-free in powermate_config_complete Jeffery Miller (1): Input: psmouse - fix fast_reconnect function for PS/2 mode Jeremy Cline (1): nfc: nci: assert requested protocol is valid Jeremy Kerr (1): mctp: perform route lookups under a RCU read-side lock Jing Zhang (1): perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7 John Watts (1): can: sun4i_can: Only show Kconfig if ARCH_SUNXI is set Jonathan Cameron (1): iio: imu: bno055: Fix missing Kconfig dependencies Jordan Rife (2): net: prevent address rewrite in kernel_bind() libceph: use kernel_connect() Jorge Sanjuan Garcia (1): mcb: remove is_added flag from mcb_device struct Kailang Yang (4): ALSA: hda/realtek: Change model for Intel RVP board ALSA: hda/realtek - ALC287 I2S speaker platform support ALSA: hda/realtek - ALC287 merge RTK codec with CS CS35L41 AMP ALSA: hda/realtek - Fixed two speaker platform Kirill A. Shutemov (1): x86/alternatives: Disable KASAN in apply_alternatives() Konstantin Meskhidze (1): drm/vmwgfx: fix typo of sizeof argument Krishna Kurapati (1): usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call Kuninori Morimoto (1): ASoC: simple-card-utils: fixup simple_util_startup() error handling Kuogee Hsieh (1): drm/msm/dp: do not reinitialize phy unless retry during link training Lad Prabhakar (1): dt-bindings: interrupt-controller: renesas,rzg2l-irqc: Update description for '#interrupt-cells' property Lakshmi Yadlapati (1): iio: pressure: dps310: Adjust Timeout Settings Lukas Magel (1): can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior Macpaul Lin (2): arm64: dts: mediatek: mt8195-demo: fix the memory size to 8GB arm64: dts: mediatek: mt8195-demo: update and reorder reserved memory regions Marcelo Schmitt (1): iio: dac: ad3552r: Correct device IDs Marek Behún (1): net: dsa: qca8k: fix potential MDIO bus conflict when accessing internal PHYs via management frames Mario Limonciello (1): usb: typec: ucsi: Use GET_CAPABILITY attributes data to set power supply scope Matthias Berndt (1): Input: xpad - add PXN V900 support Michael Ellerman (1): powerpc/47x: Fix 47x syscall return crash Michal Koutný (1): cgroup: Remove duplicates in cgroup v1 tasks file Mika Westerberg (3): thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding thunderbolt: Restart XDomain discovery handshake after failure Mikhail Kobuk (1): pinctrl: nuvoton: wpcm450: fix out of bounds write Namjae Jeon (1): ksmbd: not allow to open file if delelete on close bit is set Nils Hoppmann (1): net/smc: Fix pos miscalculation in statistics Nirmoy Das (1): drm/i915: Don't set PIPE_CONTROL_FLUSH_L3 for aux inval Nícolas F. R. A. Prado (1): arm64: dts: mediatek: mt8195: Set DSU PMU status to fail Paolo Abeni (1): mptcp: fix delegated action races Pawel Laszczak (1): usb: cdnsp: Fixes issue with dequeuing not queued requests Peter Wang (1): scsi: ufs: core: Correct clear TM error log Phil Elwell (1): iio: pressure: bmp280: Fix NULL pointer exception Philipp Rossak (1): iio: adc: imx8qxp: Fix address for command buffer registers Pierre-Louis Bossart (1): ASoC: Intel: sof_sdw: add support for SKU 0B14 Piyush Mehta (1): usb: gadget: udc-xilinx: replace memcpy with memcpy_toio Prashanth K (1): usb: typec: ucsi: Clear EVENT_PENDING bit if ucsi_send_command fails Pu Lehui (1): riscv, bpf: Factor out emit_call for kernel and bpf context RD Babiera (1): usb: typec: altmodes/displayport: Signal hpd low when exiting mode Radu Pirea (NXP OSS) (3): net: macsec: indicate next pn update when offloading net: phy: mscc: macsec: reject PN update requests net/mlx5e: macsec: use update_pn flag instead of PN comparation Ralph Siemsen (1): pinctrl: renesas: rzn1: Enable missing PINMUX Rex Zhang (1): dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq Ricardo Cañuelo (1): usb: hub: Guard against accesses to uninitialized BOS descriptors Rijo Thomas (1): tee: amdtee: fix use-after-free vulnerability in amdtee_close_session Rob Herring (1): ASoC: Use of_property_read_bool() for boolean properties Roger Pau Monne (1): xen-netback: use default TX queue size for vifs Shengjiu Wang (2): ASoC: fsl_sai: MCLK bind with TX/RX enable bit ASoC: fsl_sai: Don't disable bitclock for i.MX8MP Simon Ser (1): drm/atomic-helper: relax unregistered connector check Stephen Boyd (1): drm/msm/dp: Add newlines to debug printks Sumit Garg (1): KEYS: trusted: Remove redundant static calls usage SungHwan Jung (1): ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED Sven Frotscher (1): ASoC: amd: yc: Fix non-functional mic on Lenovo 82YM Szilard Fabian (1): Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table Thinh Nguyen (1): usb: dwc3: Soft reset phy on probe for host Uwe Kleine-König (1): platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section mismatch warning Vijendar Mukunda (1): ASoC: SOF: amd: fix for firmware reload failure after playback Vladimir Oltean (2): phy: lynx-28g: lock PHY while performing CDR lock workaround phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers Waiman Long (1): workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() Wesley Cheng (1): usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer WhaleChang (1): ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset Will Mortensen (1): net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp Xiaolei Wang (1): usb: cdns3: Modify the return value of cdns_set_active () to void when CONFIG_PM_SLEEP is disabled Xingxing Luo (2): usb: musb: Get the musb_qh poniter after musb_giveback usb: musb: Modify the "HWVers" register address Xiubo Li (1): ceph: fix incorrect revoked caps assert in ceph_fill_file_size() Yanguo Li (1): nfp: flower: avoid rmmod nfp crash issues Yoshihiro Shimoda (2): ravb: Fix up dma_free_coherent() call in ravb_remove() ravb: Fix use-after-free issue in ravb_tx_timeout_work() mfreemon(a)cloudflare.com (1): tcp: enforce receive buffer memory limits by allowing the tcp window to shrink

1 year, 3 months

1
1
0 0

Linux 5.15.136

by Greg Kroah-Hartman

I'm announcing the release of the 5.15.136 kernel. All users of the 5.15 kernel series must upgrade. The updated 5.15.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.15.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/admin-guide/kernel-parameters.txt | 10 Documentation/networking/ip-sysctl.rst | 8 Documentation/security/keys/trusted-encrypted.rst | 20 Makefile | 2 arch/arm64/include/asm/cpufeature.h | 3 arch/arm64/include/asm/exception.h | 13 arch/arm64/include/asm/spectre.h | 2 arch/arm64/include/asm/system_misc.h | 2 arch/arm64/include/asm/traps.h | 19 arch/arm64/kernel/armv8_deprecated.c | 572 +++++++-------- arch/arm64/kernel/cpufeature.c | 23 arch/arm64/kernel/entry-common.c | 36 arch/arm64/kernel/proton-pack.c | 26 arch/arm64/kernel/traps.c | 125 +-- arch/powerpc/include/asm/nohash/32/pte-8xx.h | 7 arch/powerpc/include/asm/nohash/64/pgtable.h | 2 arch/powerpc/include/asm/nohash/pgtable.h | 2 arch/riscv/net/bpf_jit_comp64.c | 33 arch/x86/include/asm/msr-index.h | 9 arch/x86/kernel/alternative.c | 13 arch/x86/kernel/cpu/amd.c | 8 drivers/acpi/resource.c | 7 drivers/counter/microchip-tcb-capture.c | 2 drivers/dma/idxd/device.c | 5 drivers/dma/mediatek/mtk-uart-apdma.c | 3 drivers/dma/stm32-mdma.c | 4 drivers/gpu/drm/amd/amdgpu/amdgpu_object.h | 2 drivers/gpu/drm/amd/display/dc/core/dc.c | 3 drivers/gpu/drm/msm/disp/dpu1/dpu_plane.c | 12 drivers/gpu/drm/msm/dp/dp_ctrl.c | 13 drivers/gpu/drm/msm/dsi/dsi_host.c | 19 drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 2 drivers/hid/hid-logitech-hidpp.c | 3 drivers/iio/pressure/bmp280-core.c | 2 drivers/iio/pressure/dps310.c | 8 drivers/iio/pressure/ms5611_core.c | 2 drivers/infiniband/hw/cxgb4/cm.c | 3 drivers/infiniband/ulp/srp/ib_srp.c | 22 drivers/input/joystick/xpad.c | 2 drivers/input/misc/powermate.c | 1 drivers/input/mouse/elantech.c | 1 drivers/input/mouse/synaptics.c | 1 drivers/input/serio/i8042-acpipnpio.h | 8 drivers/input/touchscreen/goodix.c | 19 drivers/iommu/intel/iommu.c | 16 drivers/mcb/mcb-core.c | 10 drivers/mcb/mcb-parse.c | 2 drivers/media/platform/mtk-jpeg/mtk_jpeg_core.c | 1 drivers/net/ethernet/amazon/ena/ena_netdev.c | 4 drivers/net/ethernet/brocade/bna/bnad.c | 3 drivers/net/ethernet/cortina/gemini.c | 4 drivers/net/ethernet/intel/ixgbe/ixgbe_sriov.c | 5 drivers/net/ethernet/marvell/skge.c | 3 drivers/net/ethernet/marvell/sky2.c | 3 drivers/net/ethernet/mediatek/mtk_star_emac.c | 3 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 3 drivers/net/ethernet/mellanox/mlxsw/spectrum_nve_vxlan.c | 4 drivers/net/ethernet/nvidia/forcedeth.c | 6 drivers/net/ethernet/renesas/ravb_main.c | 6 drivers/net/ethernet/ti/davinci_emac.c | 3 drivers/net/ethernet/ti/netcp_core.c | 5 drivers/net/ieee802154/ca8210.c | 17 drivers/net/macsec.c | 2 drivers/net/phy/mscc/mscc_macsec.c | 6 drivers/net/usb/dm9601.c | 7 drivers/net/xen-netback/interface.c | 7 drivers/of/overlay.c | 2 drivers/perf/arm-cmn.c | 2 drivers/pinctrl/core.c | 16 drivers/pinctrl/renesas/Kconfig | 1 drivers/platform/x86/hp/hp-wmi.c | 8 drivers/platform/x86/think-lmi.c | 24 drivers/scsi/scsi_error.c | 17 drivers/scsi/scsi_lib.c | 15 drivers/scsi/scsi_priv.h | 1 drivers/tee/amdtee/core.c | 10 drivers/thunderbolt/icm.c | 40 - drivers/thunderbolt/switch.c | 7 drivers/usb/cdns3/cdnsp-gadget.c | 3 drivers/usb/cdns3/core.h | 3 drivers/usb/core/hub.c | 25 drivers/usb/core/hub.h | 2 drivers/usb/dwc3/core.c | 39 - drivers/usb/gadget/function/f_ncm.c | 26 drivers/usb/gadget/udc/udc-xilinx.c | 20 drivers/usb/host/xhci-ring.c | 4 drivers/usb/host/xhci.c | 35 drivers/usb/musb/musb_debugfs.c | 2 drivers/usb/musb/musb_host.c | 9 fs/ceph/file.c | 2 fs/ceph/inode.c | 4 fs/quota/dquot.c | 66 + include/keys/trusted-type.h | 2 include/linux/intel-iommu.h | 2 include/linux/ipv6.h | 1 include/linux/mcb.h | 1 include/linux/quota.h | 4 include/linux/quotaops.h | 2 include/net/macsec.h | 1 include/scsi/scsi_cmnd.h | 9 include/uapi/linux/ipv6.h | 3 kernel/bpf/verifier.c | 6 kernel/cgroup/cgroup-v1.c | 5 kernel/sched/core.c | 2 kernel/sched/idle.c | 1 kernel/workqueue.c | 8 lib/test_meminit.c | 2 net/ceph/messenger.c | 4 net/ipv6/addrconf.c | 13 net/ipv6/ndisc.c | 13 net/netfilter/ipvs/ip_vs_sync.c | 4 net/nfc/llcp_core.c | 30 net/nfc/nci/core.c | 5 net/rds/tcp_connect.c | 2 net/rds/tcp_listen.c | 2 net/smc/smc_stats.h | 14 net/socket.c | 6 security/keys/trusted-keys/trusted_core.c | 48 + sound/usb/quirks.c | 6 119 files changed, 1024 insertions(+), 754 deletions(-) Abhinav Kumar (2): drm/msm/dsi: skip the wait for video mode done if not applicable drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow Ahmad Fatoum (1): KEYS: trusted: allow use of kernel RNG for key material Alexander Zangerl (1): iio: pressure: ms5611: ms5611_prom_is_valid false negative bug Amelie Delaunay (1): dmaengine: stm32-mdma: abort resume if no ongoing transfer Armin Wolf (1): platform/x86: think-lmi: Fix reference leak Artem Chernyshev (1): RDMA/cxgb4: Check skb value for failure to allocate Bart Van Assche (4): scsi: core: Use a structure member to track the SCSI command submitter scsi: core: Rename scsi_mq_done() into scsi_done() and export it scsi: ib_srp: Call scsi_done() directly RDMA/srp: Do not call scsi_done() from srp_abort() Björn Töpel (1): riscv, bpf: Sign-extend return values Borislav Petkov (AMD) (1): x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs Christian König (1): drm/amdgpu: add missing NULL check Christophe Leroy (2): powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() Dan Carpenter (4): drm/msm/dsi: fix irq_of_parse_and_map() error checking mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type ixgbe: fix crash with empty VF macvlan list ceph: fix type promotion bug on 32bit systems Daniel Miess (1): drm/amd/display: Don't set dpms_off for seamless boot David Vernet (1): bpf: Fix verifier log for async callback return values Dharma Balasubiramani (1): counter: microchip-tcb-capture: Fix the use of internal GCLK logic Dinghao Liu (1): ieee802154: ca8210: Fix a potential UAF in ca8210_probe Dmitry Torokhov (1): pinctrl: avoid unsafe code pattern in find_pinctrl() Duoming Zhou (1): dmaengine: mediatek: Fix deadlock caused by synchronize_irq() Eric Dumazet (1): net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() Geert Uytterhoeven (1): of: overlay: Reorder struct fragment fields kerneldoc Greg Kroah-Hartman (3): lib/test_meminit: fix off-by-one error in test_pages() Revert "kernel/sched: Modify initial boot task idle setup" Linux 5.15.136 Hans de Goede (3): HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case Hongyu Xie (1): xhci: Keep interrupt disabled in initialization until host is running. Jakub Kicinski (2): eth: remove copies of the NAPI_POLL_WEIGHT define eth: remove remaining copies of the NAPI_POLL_WEIGHT define Jan Kara (1): quota: Fix slow quotaoff Javier Carrasco (2): net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read Input: powermate - fix use-after-free in powermate_config_complete Jeffery Miller (1): Input: psmouse - fix fast_reconnect function for PS/2 mode Jeremy Cline (1): nfc: nci: assert requested protocol is valid Jing Zhang (1): perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7 Jordan Rife (2): net: prevent address rewrite in kernel_bind() libceph: use kernel_connect() Jorge Sanjuan Garcia (1): mcb: remove is_added flag from mcb_device struct Kirill A. Shutemov (1): x86/alternatives: Disable KASAN in apply_alternatives() Konstantin Meskhidze (1): drm/vmwgfx: fix typo of sizeof argument Krishna Kurapati (1): usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call Kuogee Hsieh (1): drm/msm/dp: do not reinitialize phy unless retry during link training Lakshmi Yadlapati (1): iio: pressure: dps310: Adjust Timeout Settings Mark Rutland (14): arm64: report EL1 UNDEFs better arm64: die(): pass 'err' as long arm64: consistently pass ESR_ELx to die() arm64: rework FPAC exception handling arm64: rework BTI exception handling arm64: allow kprobes on EL0 handlers arm64: split EL0/EL1 UNDEF handlers arm64: factor out EL1 SSBS emulation hook arm64: factor insn read out of call_undef_hook() arm64: rework EL0 MRS emulation arm64: armv8_deprecated: fold ops into insn_emulation arm64: armv8_deprecated move emulation functions arm64: armv8_deprecated: move aarch32 helper earlier arm64: armv8_deprecated: rework deprected instruction handling Matthias Berndt (1): Input: xpad - add PXN V900 support Michal Koutný (1): cgroup: Remove duplicates in cgroup v1 tasks file Mika Westerberg (2): thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding Nils Hoppmann (1): net/smc: Fix pos miscalculation in statistics Patrick Rohr (3): net: add sysctl accept_ra_min_rtr_lft net: change accept_ra_min_rtr_lft to affect all RA lifetimes net: release reference to inet6_dev pointer Pawel Laszczak (1): usb: cdnsp: Fixes issue with dequeuing not queued requests Phil Elwell (1): iio: pressure: bmp280: Fix NULL pointer exception Piyush Mehta (1): usb: gadget: udc-xilinx: replace memcpy with memcpy_toio Pu Lehui (1): riscv, bpf: Factor out emit_call for kernel and bpf context Radu Pirea (NXP OSS) (2): net: macsec: indicate next pn update when offloading net: phy: mscc: macsec: reject PN update requests Ralph Siemsen (1): pinctrl: renesas: rzn1: Enable missing PINMUX Ren Zhijie (1): arm64: armv8_deprecated: fix unused-function error Rex Zhang (1): dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq Ricardo Cañuelo (1): usb: hub: Guard against accesses to uninitialized BOS descriptors Rijo Thomas (1): tee: amdtee: fix use-after-free vulnerability in amdtee_close_session Roger Pau Monne (1): xen-netback: use default TX queue size for vifs Sumit Garg (1): KEYS: trusted: Remove redundant static calls usage Szilard Fabian (1): Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table Thinh Nguyen (1): usb: dwc3: Soft reset phy on probe for host Uwe Kleine-König (1): platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section mismatch warning Waiman Long (1): workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() Wesley Cheng (1): usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer WhaleChang (1): ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset Will Mortensen (1): net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp Xiaolei Wang (1): usb: cdns3: Modify the return value of cdns_set_active () to void when CONFIG_PM_SLEEP is disabled Xingxing Luo (2): usb: musb: Get the musb_qh poniter after musb_giveback usb: musb: Modify the "HWVers" register address Xiubo Li (1): ceph: fix incorrect revoked caps assert in ceph_fill_file_size() Yoshihiro Shimoda (2): ravb: Fix up dma_free_coherent() call in ravb_remove() ravb: Fix use-after-free issue in ravb_tx_timeout_work() Zhang Rui (1): iommu/vt-d: Avoid memory allocation in iommu_suspend() Zheng Wang (1): media: mtk-jpeg: Fix use after free bug due to uncanceled work

1 year, 3 months

1
1
0 0

[PATCH] lib/Kconfig.debug: disable FRAME_WARN for kasan and kcsan

by Hamza Mahfooz

With every release of LLVM, both of these sanitizers eat up more and more of the stack. So, set FRAME_WARN to 0 if either of them is enabled for a given build. Cc: stable(a)vger.kernel.org Signed-off-by: Hamza Mahfooz <hamza.mahfooz(a)amd.com> --- lib/Kconfig.debug | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/lib/Kconfig.debug b/lib/Kconfig.debug index 39d1d93164bd..15ad742729ca 100644 --- a/lib/Kconfig.debug +++ b/lib/Kconfig.debug @@ -429,11 +429,10 @@ endif # DEBUG_INFO config FRAME_WARN int "Warn for stack frames larger than" range 0 8192 - default 0 if KMSAN + default 0 if KASAN || KCSAN || KMSAN default 2048 if GCC_PLUGIN_LATENT_ENTROPY default 2048 if PARISC default 1536 if (!64BIT && XTENSA) - default 1280 if KASAN && !64BIT default 1024 if !64BIT default 2048 if 64BIT help -- 2.42.0

1 year, 3 months

5
8
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror October 2023