November 2023 - Linux-stable-mirror

[tip: x86/urgent] x86/shstk: Delay signal entry SSP write until after user accesses

by tip-bot2 for Rick Edgecombe

The following commit has been merged into the x86/urgent branch of tip: Commit-ID: 31255e072b2e91f97645d792d25b2db744186dd1 Gitweb: https://git.kernel.org/tip/31255e072b2e91f97645d792d25b2db744186dd1 Author: Rick Edgecombe <rick.p.edgecombe(a)intel.com> AuthorDate: Tue, 07 Nov 2023 10:22:51 -08:00 Committer: Dave Hansen <dave.hansen(a)linux.intel.com> CommitterDate: Wed, 08 Nov 2023 08:55:37 -08:00 x86/shstk: Delay signal entry SSP write until after user accesses When a signal is being delivered, the kernel needs to make accesses to userspace. These accesses could encounter an access error, in which case the signal delivery itself will trigger a segfault. Usually this would result in the kernel killing the process. But in the case of a SEGV signal handler being configured, the failure of the first signal delivery will result in *another* signal getting delivered. The second signal may succeed if another thread has resolved the issue that triggered the segfault (i.e. a well timed mprotect()/mmap()), or the second signal is being delivered to another stack (i.e. an alt stack). On x86, in the non-shadow stack case, all the accesses to userspace are done before changes to the registers (in pt_regs). The operation is aborted when an access error occurs, so although there may be writes done for the first signal, control flow changes for the signal (regs->ip, regs->sp, etc) are not committed until all the accesses have already completed successfully. This means that the second signal will be delivered as if it happened at the time of the first signal. It will effectively replace the first aborted signal, overwriting the half-written frame of the aborted signal. So on sigreturn from the second signal, control flow will resume happily from the point of control flow where the original signal was delivered. The problem is, when shadow stack is active, the shadow stack SSP register/MSR is updated *before* some of the userspace accesses. This means if the earlier accesses succeed and the later ones fail, the second signal will not be delivered at the same spot on the shadow stack as the first one. So on sigreturn from the second signal, the SSP will be pointing to the wrong location on the shadow stack (off by a frame). Pengfei privately reported that while using a shadow stack enabled glibc, the “signal06” test in the LTP test-suite hung. It turns out it is testing the above described double signal scenario. When this test was compiled with shadow stack, the first signal pushed a shadow stack sigframe, then the second pushed another. When the second signal was handled, the SSP was at the first shadow stack signal frame instead of the original location. The test then got stuck as the #CP from the twice incremented SSP was incorrect and generated segfaults in a loop. Fix this by adjusting the SSP register only after any userspace accesses, such that there can be no failures after the SSP is adjusted. Do this by moving the shadow stack sigframe push logic to happen after all other userspace accesses. Note, sigreturn (as opposed to the signal delivery dealt with in this patch) has ordering behavior that could lead to similar failures. The ordering issues there extend beyond shadow stack to include the alt stack restoration. Fixing that would require cross-arch changes, and the ordering today does not cause any known test or apps breakages. So leave it as is, for now. [ dhansen: minor changelog/subject tweak ] Fixes: 05e36022c054 ("x86/shstk: Handle signals for shadow stack") Reported-by: Pengfei Xu <pengfei.xu(a)intel.com> Signed-off-by: Rick Edgecombe <rick.p.edgecombe(a)intel.com> Signed-off-by: Dave Hansen <dave.hansen(a)linux.intel.com> Tested-by: Pengfei Xu <pengfei.xu(a)intel.com> Cc:stable@vger.kernel.org Link: https://lore.kernel.org/all/20231107182251.91276-1-rick.p.edgecombe%40intel… Link: https://github.com/linux-test-project/ltp/blob/master/testcases/kernel/sysc… --- arch/x86/kernel/signal_64.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/arch/x86/kernel/signal_64.c b/arch/x86/kernel/signal_64.c index cacf2ed..23d8aaf 100644 --- a/arch/x86/kernel/signal_64.c +++ b/arch/x86/kernel/signal_64.c @@ -175,9 +175,6 @@ int x64_setup_rt_frame(struct ksignal *ksig, struct pt_regs *regs) frame = get_sigframe(ksig, regs, sizeof(struct rt_sigframe), &fp); uc_flags = frame_uc_flags(regs); - if (setup_signal_shadow_stack(ksig)) - return -EFAULT; - if (!user_access_begin(frame, sizeof(*frame))) return -EFAULT; @@ -198,6 +195,9 @@ int x64_setup_rt_frame(struct ksignal *ksig, struct pt_regs *regs) return -EFAULT; } + if (setup_signal_shadow_stack(ksig)) + return -EFAULT; + /* Set up registers for signal handler */ regs->di = ksig->sig; /* In case the signal handler was declared without prototypes */

1 year, 1 month

1
0
0 0

[PATCH v2] mm: Fix for negative counter: nr_file_hugepages

by Stefan Roesch

While qualifiying the 6.4 release, the following warning was detected in messages: vmstat_refresh: nr_file_hugepages -15664 The warning is caused by the incorrect updating of the NR_FILE_THPS counter in the function split_huge_page_to_list. The if case is checking for folio_test_swapbacked, but the else case is missing the check for folio_test_pmd_mappable. The other functions that manipulate the counter like __filemap_add_folio and filemap_unaccount_folio have the corresponding check. I have a test case, which reproduces the problem. It can be found here: https://github.com/sroeschus/testcase/blob/main/vmstat_refresh/madv.c The test case reproduces on an XFS filesystem. Running the same test case on a BTRFS filesystem does not reproduce the problem. AFAIK version 6.1 until 6.6 are affected by this problem. Signed-off-by: Stefan Roesch <shr(a)devkernel.io> Co-debugged-by: Johannes Weiner <hannes(a)cmpxchg.org> Acked-by: Johannes Weiner <hannes(a)cmpxchg.org> --- mm/huge_memory.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mm/huge_memory.c b/mm/huge_memory.c index 064fbd90822b4..9dbd5ef5a3902 100644 --- a/mm/huge_memory.c +++ b/mm/huge_memory.c @@ -2740,7 +2740,7 @@ int split_huge_page_to_list(struct page *page, struct list_head *list) if (folio_test_swapbacked(folio)) { __lruvec_stat_mod_folio(folio, NR_SHMEM_THPS, -nr); - } else { + } else if (folio_test_pmd_mappable(folio)) { __lruvec_stat_mod_folio(folio, NR_FILE_THPS, -nr); filemap_nr_thps_dec(mapping); base-commit: ffc253263a1375a65fa6c9f62a893e9767fbebfa -- 2.39.3

1 year, 1 month

4
6
0 0

[PATCH v4] acpi/processor: sanitize _OSC/_PDC capabilities for Xen dom0

by Jason Andryuk

From: Roger Pau Monne <roger.pau(a)citrix.com> The Processor capability bits notify ACPI of the OS capabilities, and so ACPI can adjust the return of other Processor methods taking the OS capabilities into account. When Linux is running as a Xen dom0, the hypervisor is the entity in charge of processor power management, and hence Xen needs to make sure the capabilities reported by _OSC/_PDC match the capabilities of the driver in Xen. Introduce a small helper to sanitize the buffer when running as Xen dom0. When Xen supports HWP, this serves as the equivalent of commit a21211672c9a ("ACPI / processor: Request native thermal interrupt handling via _OSC") to avoid SMM crashes. Xen will set bit ACPI_PROC_CAP_COLLAB_PROC_PERF (bit 12) in the capability bits and the _OSC/_PDC call will apply it. [ jandryuk: Mention Xen HWP's need. Support _OSC & _PDC ] Signed-off-by: Roger Pau Monné <roger.pau(a)citrix.com> Cc: stable(a)vger.kernel.org Signed-off-by: Jason Andryuk <jandryuk(a)gmail.com> --- v4: Use xen_santize_proc_cap_bits() name - Michal Rephrase comment - Michal v3: Move xen_sanitize_pdc() call to arch_acpi_set_proc_cap_bits() to cover _OSC and _PDC. drivers/xen/pcpu.c is CONFIG_DOM0 && CONFIG_X86 v2: Move local variables in acpi_processor_eval_pdc() to reuse in both conditions. --- arch/x86/include/asm/acpi.h | 14 ++++++++++++++ arch/x86/include/asm/xen/hypervisor.h | 9 +++++++++ drivers/xen/pcpu.c | 21 +++++++++++++++++++++ 3 files changed, 44 insertions(+) diff --git a/arch/x86/include/asm/acpi.h b/arch/x86/include/asm/acpi.h index c8a7fc23f63c..f896eed4516c 100644 --- a/arch/x86/include/asm/acpi.h +++ b/arch/x86/include/asm/acpi.h @@ -16,6 +16,9 @@ #include <asm/x86_init.h> #include <asm/cpufeature.h> #include <asm/irq_vectors.h> +#include <asm/xen/hypervisor.h> + +#include <xen/xen.h> #ifdef CONFIG_ACPI_APEI # include <asm/pgtable_types.h> @@ -127,6 +130,17 @@ static inline void arch_acpi_set_proc_cap_bits(u32 *cap) if (!cpu_has(c, X86_FEATURE_MWAIT) || boot_option_idle_override == IDLE_NOMWAIT) *cap &= ~(ACPI_PROC_CAP_C_C1_FFH | ACPI_PROC_CAP_C_C2C3_FFH); + + if (xen_initial_domain()) { + /* + * When Linux is running as Xen dom0, the hypervisor is the + * entity in charge of the processor power management, and so + * Xen needs to check the OS capabilities reported in the + * processor capabilities buffer matches what the hypervisor + * driver supports. + */ + xen_sanitize_proc_cap_bits(cap); + } } static inline bool acpi_has_cpu_in_madt(void) diff --git a/arch/x86/include/asm/xen/hypervisor.h b/arch/x86/include/asm/xen/hypervisor.h index 7048dfacc04b..a9088250770f 100644 --- a/arch/x86/include/asm/xen/hypervisor.h +++ b/arch/x86/include/asm/xen/hypervisor.h @@ -100,4 +100,13 @@ static inline void leave_lazy(enum xen_lazy_mode mode) enum xen_lazy_mode xen_get_lazy_mode(void); +#if defined(CONFIG_XEN_DOM0) && defined(CONFIG_ACPI) +void xen_sanitize_proc_cap_bits(uint32_t *buf); +#else +static inline void xen_sanitize_proc_cap_bits(uint32_t *buf) +{ + BUG(); +} +#endif + #endif /* _ASM_X86_XEN_HYPERVISOR_H */ diff --git a/drivers/xen/pcpu.c b/drivers/xen/pcpu.c index b3e3d1bb37f3..7000701dff8f 100644 --- a/drivers/xen/pcpu.c +++ b/drivers/xen/pcpu.c @@ -47,6 +47,9 @@ #include <asm/xen/hypervisor.h> #include <asm/xen/hypercall.h> +#ifdef CONFIG_ACPI +#include <acpi/processor.h> +#endif /* * @cpu_id: Xen physical cpu logic number @@ -400,4 +403,22 @@ bool __init xen_processor_present(uint32_t acpi_id) return online; } + +void xen_sanitize_proc_cap_bits(uint32_t *cap) +{ + struct xen_platform_op op = { + .cmd = XENPF_set_processor_pminfo, + .u.set_pminfo.id = -1, + .u.set_pminfo.type = XEN_PM_PDC, + }; + u32 buf[3] = { ACPI_PDC_REVISION_ID, 1, *cap }; + int ret; + + set_xen_guest_handle(op.u.set_pminfo.pdc, buf); + ret = HYPERVISOR_platform_op(&op); + if (ret) + pr_err("sanitize of _PDC buffer bits from Xen failed: %d\n", + ret); + *cap = buf[2]; +} #endif -- 2.41.0

1 year, 1 month

4
3
0 0

[PATCH 5.4 000/131] 5.4.258-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.4.258 release. There are 131 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 11 Oct 2023 13:00:55 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.258-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.4.258-rc1 Arnd Bergmann <arnd(a)arndb.de> ima: rework CONFIG_IMA dependency block Trond Myklebust <trond.myklebust(a)hammerspace.com> NFS: Fix a race in __nfs_list_for_each_server() John David Anglin <dave(a)parisc-linux.org> parisc: Restore __ldcw_align for PA-RISC 2.0 processors Shay Drory <shayd(a)nvidia.com> RDMA/mlx5: Fix NULL string error Bernard Metzler <bmt(a)zurich.ibm.com> RDMA/siw: Fix connection failure handling Konstantin Meskhidze <konstantin.meskhidze(a)huawei.com> RDMA/uverbs: Fix typo of sizeof argument Leon Romanovsky <leonro(a)nvidia.com> RDMA/cma: Fix truncation compilation warning in make_cma_ports Duje Mihanović <duje.mihanovic(a)skole.hr> gpio: pxa: disable pinctrl calls for MMP_GPIO Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org> gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> IB/mlx4: Fix the size of a buffer in add_port_entries() Leon Romanovsky <leonro(a)nvidia.com> RDMA/core: Require admin capabilities to set system parameters Ivan Babrou <ivan(a)cloudflare.com> cpupower: add Makefile dependencies for install targets Xin Long <lucien.xin(a)gmail.com> sctp: update hb timer immediately after users change hb_interval Xin Long <lucien.xin(a)gmail.com> sctp: update transport state when processing a dupcook packet Neal Cardwell <ncardwell(a)google.com> tcp: fix delayed ACKs for MSS boundary condition Neal Cardwell <ncardwell(a)google.com> tcp: fix quick-ack counting to count actual ACKs of new data Ben Wolsieffer <ben.wolsieffer(a)hefring.com> net: stmmac: dwmac-stm32: fix resume on STM32 MCU Xin Long <lucien.xin(a)gmail.com> netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp Jeremy Cline <jeremy(a)jcline.org> net: nfc: llcp: Add lock when modifying device list Shigeru Yoshida <syoshida(a)redhat.com> net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg Fabio Estevam <festevam(a)denx.de> net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent David Howells <dhowells(a)redhat.com> ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() Eric Dumazet <edumazet(a)google.com> net: fix possible store tearing in neigh_periodic_work() Mauricio Faria de Oliveira <mfo(a)canonical.com> modpost: add missing else to the "of" check Trond Myklebust <trond.myklebust(a)hammerspace.com> NFSv4: Fix a nfs4_state_manager() race Trond Myklebust <trond.myklebust(a)hammerspace.com> NFS: Add a helper nfs_client_for_each_server() Chuck Lever <chuck.lever(a)oracle.com> NFS4: Trace state recovery operation Junxiao Bi <junxiao.bi(a)oracle.com> scsi: target: core: Fix deadlock due to recursive locking Oleksandr Tymoshenko <ovt(a)google.com> ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig Richard Fitzgerald <rf(a)opensource.cirrus.com> regmap: rbtree: Fix wrong register marked as in-cache when creating new node Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling Alexandra Diupina <adiupina(a)astralinux.ru> drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close() Pin-yen Lin <treapking(a)chromium.org> wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet Arnd Bergmann <arnd(a)arndb.de> wifi: iwlwifi: dbg_ini: fix structure packing Zhihao Cheng <chengzhihao1(a)huawei.com> ubi: Refuse attaching if mtd's erasesize is 0 Jordan Rife <jrife(a)google.com> net: prevent rewrite of msg_name in sock_sendmsg() Qu Wenruo <wqu(a)suse.com> btrfs: reject unknown mount options early Jordan Rife <jrife(a)google.com> net: replace calls to sock->ops->connect() with kernel_connect() Gustavo A. R. Silva <gustavoars(a)kernel.org> wifi: mwifiex: Fix tlv_buf_left calculation Gustavo A. R. Silva <gustavoars(a)kernel.org> qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info Dinghao Liu <dinghao.liu(a)zju.edu.cn> scsi: zfcp: Fix a double put in zfcp_port_enqueue() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Revert "PCI: qcom: Disable write access to read only registers for IP v2.3.3" Ilya Dryomov <idryomov(a)gmail.com> rbd: take header_rwsem in rbd_dev_refresh() only when updating Ilya Dryomov <idryomov(a)gmail.com> rbd: decouple parent info read-in from updating rbd_dev Ilya Dryomov <idryomov(a)gmail.com> rbd: decouple header read-in from updating rbd_dev->header Ilya Dryomov <idryomov(a)gmail.com> rbd: move rbd_dev_refresh() definition Greg Ungerer <gerg(a)kernel.org> fs: binfmt_elf_efpic: fix personality for ELF-FDPIC Matthias Schiffer <mschiffer(a)universe-factory.net> ata: libata-sata: increase PMP SRST timeout to 10s Damien Le Moal <dlemoal(a)kernel.org> ata: libata-core: Do not register PM operations for SAS ports Damien Le Moal <dlemoal(a)kernel.org> ata: libata-core: Fix port and device removal Damien Le Moal <dlemoal(a)kernel.org> ata: libata-core: Fix ata_port_request_pm() locking Mika Westerberg <mika.westerberg(a)linux.intel.com> net: thunderbolt: Fix TCPv6 GSO checksum calculation Josef Bacik <josef(a)toxicpanda.com> btrfs: properly report 0 avail for very full file systems Steven Rostedt (Google) <rostedt(a)goodmis.org> ring-buffer: Update "shortest_full" in polling Heiner Kallweit <hkallweit1(a)gmail.com> i2c: i801: unregister tco_pdev in i801_probe() error path Niklas Cassel <niklas.cassel(a)wdc.com> ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES Kailang Yang <kailang(a)realtek.com> ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q Pan Bian <bianpan2016(a)163.com> nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> serial: 8250_port: Check IRQ data before use Vishal Goel <vishal.goel(a)samsung.com> Smack:- Use overlay inode label in smack_inode_copy_up() Roberto Sassu <roberto.sassu(a)huawei.com> smack: Retrieve transmuting information in smack_inode_getsecurity() Roberto Sassu <roberto.sassu(a)huawei.com> smack: Record transmuting in smk_transmuted Stefan Assmann <sassmann(a)kpanic.de> i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc Stefan Assmann <sassmann(a)kpanic.de> i40e: always propagate error value in i40e_set_vsi_promisc() Stefan Assmann <sassmann(a)kpanic.de> i40e: improve locking of mac_filter_hash Mika Westerberg <mika.westerberg(a)linux.intel.com> watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running Mika Westerberg <mika.westerberg(a)linux.intel.com> watchdog: iTCO_wdt: No need to stop the timer in probe Pratyush Yadav <ptyadav(a)amazon.de> nvme-pci: do not set the NUMA node of device if it has none Thomas Zimmermann <tzimmermann(a)suse.de> fbdev/sh7760fb: Depend on FB=y Johnathan Mantey <johnathanx.mantey(a)intel.com> ncsi: Propagate carrier gain/loss events to the NCSI controller Benjamin Gray <bgray(a)linux.ibm.com> powerpc/watchpoints: Annotate atomic context in more places Stanislav Fomichev <sdf(a)google.com> bpf: Clarify error expectations from bpf_clone_redirect Han Xu <han.xu(a)nxp.com> spi: nxp-fspi: reset the FLSHxCR1 registers Niklas Cassel <niklas.cassel(a)wdc.com> ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset() Zheng Yejian <zhengyejian1(a)huawei.com> ring-buffer: Avoid softlockup in ring_buffer_resize() Zheng Yejian <zhengyejian1(a)huawei.com> selftests/ftrace: Correctly enable event in instance-event.tc Helge Deller <deller(a)gmx.de> parisc: irq: Make irq_stack_union static to avoid sparse warning Helge Deller <deller(a)gmx.de> parisc: drivers: Fix sparse warning Helge Deller <deller(a)gmx.de> parisc: iosapic.c: Fix sparse warnings Helge Deller <deller(a)gmx.de> parisc: sba: Fix compile warning wrt list of SBA devices Wenhua Lin <Wenhua.Lin(a)unisoc.com> gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip Max Filippov <jcmvbkbc(a)gmail.com> xtensa: boot/lib: fix function prototypes Randy Dunlap <rdunlap(a)infradead.org> xtensa: boot: don't add include-dirs Randy Dunlap <rdunlap(a)infradead.org> xtensa: iss/network: make functions static Max Filippov <jcmvbkbc(a)gmail.com> xtensa: add default definition for XCHAL_HAVE_DIV32 Tony Lindgren <tony(a)atomide.com> bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up Tony Lindgren <tony(a)atomide.com> ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot Timo Alho <talho(a)nvidia.com> clk: tegra: fix error return case for recalc_rate Christoph Hellwig <hch(a)lst.de> MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled Niklas Cassel <niklas.cassel(a)wdc.com> ata: libata: disallow dev-initiated LPM transitions to unsupported states Hamza Mahfooz <hamza.mahfooz(a)amd.com> drm/amd/display: prevent potential division by zero errors Anthony Koo <Anthony.Koo(a)amd.com> drm/amd/display: Fix LFC multiplier changing erratically Amanda Liu <amanda.liu(a)amd.com> drm/amd/display: Reinstate LFC optimization Ahmad Fatoum <a.fatoum(a)pengutronix.de> clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz Anson Huang <Anson.Huang(a)nxp.com> clk: imx: pll14xx: Add new frequency entries for pll1443x table YueHaibing <yuehaibing(a)huawei.com> clk: imx: clk-pll14xx: Make two variables static Quinn Tran <qutran(a)marvell.com> scsi: qla2xxx: Fix deletion race condition Himanshu Madhani <hmadhani(a)marvell.com> scsi: qla2xxx: Fix update_fcport for current_topology Werner Sembach <wse(a)tuxedocomputers.com> Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN Xiaoke Wang <xkernel.wang(a)foxmail.com> i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP Artem Chernyshev <artem.chernyshev(a)red-soft.ru> net: rds: Fix possible NULL-pointer dereference Ziyang Xuan <william.xuanziyang(a)huawei.com> team: fix null-ptr-deref when team device type is changed Eric Dumazet <edumazet(a)google.com> net: bridge: use DEV_STATS_INC() Jie Wang <wangjie125(a)huawei.com> net: hns3: add 5ms delay before clear firmware reset irq source Eric Dumazet <edumazet(a)google.com> dccp: fix dccp_v4_err()/dccp_v6_err() again Kajol Jain <kjain(a)linux.ibm.com> powerpc/perf/hv-24x7: Update domain value check Kyle Zeng <zengyhkyle(a)gmail.com> ipv4: fix null-deref in ipv4_link_failure Ivan Vecera <ivecera(a)redhat.com> i40e: Fix VF VLAN offloading when port VLAN is configured Karen Sornek <karen.sornek(a)intel.com> i40e: Fix warning message and call stack during rmmod i40e driver Aleksandr Loktionov <aleksandr.loktionov(a)intel.com> i40e: Remove scheduling while atomic possibility Sylwia Wnuczko <sylwia.wnuczko(a)intel.com> i40e: Fix for persistent lldp support Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: imx-audmix: Fix return error with devm_clk_get() Sabrina Dubroca <sd(a)queasysnail.net> selftests: tls: swap the TX and RX sockets in some tests Kees Cook <keescook(a)chromium.org> selftests/tls: Add {} to avoid static checker warning Toke Høiland-Jørgensen <toke(a)redhat.com> bpf: Avoid deadlock when using queue and stack maps from NMI Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: disallow element removal on anonymous sets Jerome Brunet <jbrunet(a)baylibre.com> ASoC: meson: spdifin: start hw on dai probe Jan Kara <jack(a)suse.cz> ext4: do not let fstrim block system suspend Jan Kara <jack(a)suse.cz> ext4: move setting of trimmed bit into ext4_try_to_trim_range() Kemeng Shi <shikemeng(a)huaweicloud.com> ext4: replace the traditional ternary conditional operator with with max()/min() Dmitry Monakhov <dmtrmonakhov(a)yandex-team.ru> ext4: mark group as trimmed only if it was fully scanned Lukas Czerner <lczerner(a)redhat.com> ext4: change s_last_trim_minblks type to unsigned long Lukas Bulwahn <lukas.bulwahn(a)gmail.com> ext4: scope ret locally in ext4_try_to_trim_range() Wang Jianchao <wangjianchao(a)kuaishou.com> ext4: add new helper interface ext4_try_to_trim_range() Wang Jianchao <wangjianchao(a)kuaishou.com> ext4: remove the 'group' parameter of ext4_trim_extent Szuying Chen <chensiying21(a)gmail.com> ata: libahci: clear pending interrupt status Steven Rostedt (Google) <rostedt(a)goodmis.org> tracing: Increase trace array ref count on enable and filter files Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: Mark the cred for revalidation if the server rejects it Trond Myklebust <trond.myklebust(a)hammerspace.com> NFS/pNFS: Report EINVAL errors from connect() to the server ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/omap4-droid4-xt894.dts | 4 +- arch/mips/alchemy/devboards/db1000.c | 4 + arch/mips/alchemy/devboards/db1200.c | 6 + arch/mips/alchemy/devboards/db1300.c | 4 + arch/parisc/include/asm/ldcw.h | 36 +- arch/parisc/include/asm/ropes.h | 3 + arch/parisc/include/asm/spinlock_types.h | 5 - arch/parisc/kernel/drivers.c | 2 +- arch/parisc/kernel/irq.c | 2 +- arch/powerpc/kernel/hw_breakpoint.c | 9 + arch/powerpc/perf/hv-24x7.c | 2 +- arch/xtensa/boot/Makefile | 3 +- arch/xtensa/boot/lib/zmem.c | 5 +- arch/xtensa/include/asm/core.h | 4 + arch/xtensa/platforms/iss/network.c | 4 +- drivers/ata/ahci.c | 9 + drivers/ata/libahci.c | 35 +- drivers/ata/libata-core.c | 60 ++- drivers/ata/libata-eh.c | 13 +- drivers/ata/libata-scsi.c | 2 +- drivers/ata/libata-transport.c | 9 +- drivers/ata/libata.h | 2 + drivers/base/regmap/regcache-rbtree.c | 3 +- drivers/block/rbd.c | 420 +++++++++++---------- drivers/bus/ti-sysc.c | 22 +- drivers/char/agp/parisc-agp.c | 2 - drivers/clk/imx/clk-pll14xx.c | 8 +- drivers/clk/tegra/clk-bpmp.c | 2 +- drivers/gpio/gpio-aspeed.c | 2 +- drivers/gpio/gpio-pmic-eic-sprd.c | 1 + drivers/gpio/gpio-pxa.c | 1 + drivers/gpio/gpio-tb10x.c | 6 +- .../drm/amd/display/modules/freesync/freesync.c | 69 +++- .../gpu/drm/amd/display/modules/inc/mod_freesync.h | 1 + drivers/i2c/busses/i2c-i801.c | 1 + drivers/i2c/muxes/i2c-demux-pinctrl.c | 4 + drivers/infiniband/core/cma_configfs.c | 2 +- drivers/infiniband/core/nldev.c | 1 + drivers/infiniband/core/uverbs_main.c | 2 +- drivers/infiniband/hw/mlx4/sysfs.c | 2 +- drivers/infiniband/hw/mlx5/main.c | 2 +- drivers/infiniband/sw/siw/siw_cm.c | 16 +- drivers/input/serio/i8042-x86ia64io.h | 7 + drivers/mtd/ubi/build.c | 7 + drivers/net/dsa/mv88e6xxx/chip.c | 6 +- drivers/net/dsa/mv88e6xxx/global1.c | 31 -- drivers/net/dsa/mv88e6xxx/global1.h | 1 - drivers/net/dsa/mv88e6xxx/global2.c | 2 +- drivers/net/dsa/mv88e6xxx/global2.h | 1 + .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 5 + drivers/net/ethernet/intel/i40e/i40e_dcb.c | 4 +- drivers/net/ethernet/intel/i40e/i40e_dcb.h | 3 + drivers/net/ethernet/intel/i40e/i40e_nvm.c | 61 +-- drivers/net/ethernet/intel/i40e/i40e_prototype.h | 10 +- drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 319 +++++++++------- drivers/net/ethernet/qlogic/qed/qed_ll2.h | 2 +- drivers/net/ethernet/stmicro/stmmac/dwmac-stm32.c | 7 +- drivers/net/team/team.c | 10 +- drivers/net/thunderbolt.c | 3 +- drivers/net/usb/smsc75xx.c | 4 +- drivers/net/wan/fsl_ucc_hdlc.c | 12 +- drivers/net/wireless/intel/iwlwifi/fw/error-dump.h | 6 +- .../net/wireless/marvell/mwifiex/11n_rxreorder.c | 4 +- drivers/net/wireless/marvell/mwifiex/sta_rx.c | 16 +- .../net/wireless/mediatek/mt76/mt76x02_eeprom.c | 7 - drivers/net/wireless/mediatek/mt76/mt76x2/eeprom.c | 13 +- drivers/nvme/host/pci.c | 2 - drivers/parisc/iosapic.c | 4 +- drivers/parisc/iosapic_private.h | 4 +- drivers/pci/controller/dwc/pcie-qcom.c | 2 - drivers/s390/scsi/zfcp_aux.c | 9 +- drivers/scsi/qla2xxx/qla_init.c | 21 +- drivers/scsi/qla2xxx/qla_target.c | 12 +- drivers/spi/spi-nxp-fspi.c | 7 + drivers/target/target_core_device.c | 11 +- drivers/tty/serial/8250/8250_port.c | 5 +- drivers/video/fbdev/Kconfig | 2 +- drivers/watchdog/iTCO_wdt.c | 26 +- fs/binfmt_elf_fdpic.c | 5 +- fs/btrfs/super.c | 6 +- fs/ext4/ext4.h | 2 +- fs/ext4/mballoc.c | 138 ++++--- fs/nfs/flexfilelayout/flexfilelayout.c | 1 + fs/nfs/internal.h | 4 +- fs/nfs/nfs4state.c | 10 + fs/nfs/nfs4trace.h | 93 +++++ fs/nfs/super.c | 35 ++ fs/nilfs2/gcinode.c | 6 +- include/linux/if_team.h | 2 + include/linux/libata.h | 6 +- include/linux/netfilter/nf_conntrack_sctp.h | 1 + include/net/tcp.h | 6 +- include/uapi/linux/bpf.h | 4 +- kernel/bpf/queue_stack_maps.c | 21 +- kernel/trace/ring_buffer.c | 5 + kernel/trace/trace.c | 27 ++ kernel/trace/trace.h | 2 + kernel/trace/trace_events.c | 6 +- net/bridge/br_forward.c | 4 +- net/bridge/br_input.c | 4 +- net/core/neighbour.c | 4 +- net/dccp/ipv4.c | 9 +- net/dccp/ipv6.c | 9 +- net/ipv4/route.c | 4 +- net/ipv4/tcp_input.c | 13 + net/ipv4/tcp_output.c | 7 +- net/l2tp/l2tp_ip6.c | 2 +- net/ncsi/ncsi-aen.c | 5 + net/netfilter/ipset/ip_set_core.c | 12 +- net/netfilter/ipvs/ip_vs_sync.c | 4 +- net/netfilter/nf_conntrack_proto_sctp.c | 43 ++- net/netfilter/nf_tables_api.c | 9 +- net/nfc/llcp_core.c | 2 + net/rds/rdma_transport.c | 8 +- net/rds/tcp_connect.c | 2 +- net/sctp/associola.c | 3 +- net/sctp/socket.c | 1 + net/socket.c | 29 +- net/sunrpc/clnt.c | 1 + scripts/mod/file2alias.c | 2 +- security/integrity/ima/Kconfig | 20 +- security/smack/smack.h | 1 + security/smack/smack_lsm.c | 65 +++- sound/pci/hda/hda_intel.c | 1 + sound/soc/fsl/imx-audmix.c | 2 +- sound/soc/meson/axg-spdifin.c | 49 +-- tools/include/uapi/linux/bpf.h | 4 +- tools/power/cpupower/Makefile | 8 +- tools/power/cpupower/bench/Makefile | 2 +- .../ftrace/test.d/instances/instance-event.tc | 2 +- tools/testing/selftests/net/tls.c | 11 +- 132 files changed, 1389 insertions(+), 773 deletions(-)

1 year, 1 month

9
142
0 0

Linux 5.15.138

by Greg Kroah-Hartman

I'm announcing the release of the 5.15.138 kernel. All users of the 5.15 kernel series must upgrade. The updated 5.15.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.15.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/powerpc/kernel/head_fsl_booke.S | 2 arch/powerpc/kernel/setup-common.c | 2 arch/powerpc/mm/mem.c | 1 arch/sparc/lib/checksum_32.S | 2 arch/x86/include/asm/i8259.h | 2 arch/x86/include/asm/setup.h | 46 +- arch/x86/kernel/acpi/boot.c | 3 arch/x86/kernel/i8259.c | 38 + arch/x86/kernel/setup.c | 5 arch/x86/kernel/vmlinux.lds.S | 2 drivers/base/driver.c | 69 +++ drivers/base/platform.c | 28 - drivers/clk/clk.c | 21 - drivers/dma/ste_dma40.c | 1 drivers/firmware/imx/imx-dsp.c | 2 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 1 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 19 drivers/gpu/drm/amd/amdgpu/vi.c | 2 drivers/gpu/drm/drm_dp_mst_topology.c | 6 drivers/gpu/drm/i915/i915_pmu.c | 9 drivers/gpu/drm/ttm/ttm_device.c | 8 drivers/i2c/busses/i2c-aspeed.c | 3 drivers/i2c/busses/i2c-stm32f7.c | 9 drivers/i2c/muxes/i2c-demux-pinctrl.c | 2 drivers/i2c/muxes/i2c-mux-gpmux.c | 2 drivers/i2c/muxes/i2c-mux-pinctrl.c | 2 drivers/iio/adc/exynos_adc.c | 24 - drivers/iio/adc/xilinx-xadc-core.c | 39 -- drivers/iio/adc/xilinx-xadc.h | 2 drivers/iio/afe/iio-rescale.c | 162 ++++++-- drivers/input/mouse/synaptics.c | 1 drivers/input/rmi4/rmi_smbus.c | 50 +- drivers/irqchip/irq-riscv-intc.c | 10 drivers/irqchip/irq-stm32-exti.c | 1 drivers/mcb/mcb-lpc.c | 35 + drivers/mcb/mcb-parse.c | 15 drivers/misc/fastrpc.c | 10 drivers/misc/pci_endpoint_test.c | 4 drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 2 drivers/net/ethernet/google/gve/gve_rx_dqo.c | 2 drivers/net/ethernet/intel/i40e/i40e.h | 2 drivers/net/ethernet/intel/i40e/i40e_txrx.c | 2 drivers/net/ethernet/intel/igb/igb_ethtool.c | 6 drivers/net/ethernet/intel/igc/igc_ethtool.c | 35 + drivers/net/ethernet/realtek/r8169_main.c | 6 drivers/net/ethernet/toshiba/ps3_gelic_wireless.c | 2 drivers/net/gtp.c | 5 drivers/net/ieee802154/adf7242.c | 5 drivers/net/usb/r8152.c | 18 drivers/net/usb/smsc95xx.c | 4 drivers/nvmem/imx-ocotp.c | 6 drivers/pci/quirks.c | 8 drivers/pinctrl/qcom/pinctrl-lpass-lpi.c | 17 drivers/platform/mellanox/mlxbf-tmfifo.c | 21 - drivers/rpmsg/qcom_glink_native.c | 2 drivers/rpmsg/rpmsg_core.c | 37 + drivers/rpmsg/rpmsg_internal.h | 5 drivers/rpmsg/rpmsg_ns.c | 4 drivers/scsi/mpt3sas/mpt3sas_scsih.c | 4 drivers/spi/spi-npcm-fiu.c | 5 drivers/tty/n_gsm.c | 2 drivers/tty/serial/8250/8250_pci.c | 327 ++++++++++++++++ drivers/usb/gadget/legacy/raw_gadget.c | 26 - drivers/usb/storage/unusual_cypress.h | 2 drivers/usb/typec/tcpm/tcpm.c | 3 drivers/vhost/vhost.c | 4 drivers/video/fbdev/aty/atyfb_base.c | 4 drivers/video/fbdev/uvesafb.c | 2 drivers/virtio/virtio_balloon.c | 6 drivers/virtio/virtio_mmio.c | 19 fs/ext4/mballoc.c | 51 +- fs/ext4/mballoc.h | 14 fs/nfsd/vfs.c | 12 fs/ntfs3/attrib.c | 6 fs/ntfs3/attrlist.c | 15 fs/ntfs3/bitmap.c | 3 fs/ntfs3/dir.c | 6 fs/ntfs3/frecord.c | 8 fs/ntfs3/fslog.c | 6 fs/ntfs3/fsntfs.c | 13 fs/ntfs3/super.c | 2 include/linux/device/driver.h | 2 include/linux/iio/afe/rescale.h | 36 + include/linux/kasan.h | 6 include/linux/pci_ids.h | 1 include/linux/platform_device.h | 6 include/linux/rpmsg.h | 14 include/net/tcp.h | 2 include/uapi/linux/can/isotp.h | 25 - include/uapi/linux/gtp.h | 2 kernel/events/core.c | 3 kernel/trace/trace_kprobe.c | 4 mm/kasan/report.c | 4 mm/migrate.c | 14 mm/page_alloc.c | 2 net/can/isotp.c | 426 ++++++++++++++-------- net/core/neighbour.c | 67 +-- net/ipv4/tcp.c | 19 net/ipv4/tcp_input.c | 9 net/mptcp/protocol.c | 12 net/netfilter/nfnetlink_log.c | 2 net/sched/cls_u32.c | 2 net/vmw_vsock/virtio_transport.c | 215 +++++++---- sound/hda/intel-dsp-config.c | 6 sound/soc/codecs/rt5645.c | 2 sound/soc/codecs/wcd938x.c | 52 ++ sound/soc/generic/simple-card.c | 6 tools/objtool/check.c | 2 109 files changed, 1641 insertions(+), 671 deletions(-) Al Viro (2): nfsd: lock_rename() needs both directories to live on the same fs sparc32: fix a braino in fault handling in csum_and_copy_..._user() Alain Volmat (1): i2c: stm32f7: Fix PEC handling in case of SMBUS transfers Alessandro Carminati (1): clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name Alexandru Matei (1): vsock/virtio: initialize the_virtio_vsock before using VQs Andrey Konovalov (1): usb: raw-gadget: properly handle interrupted requests Anup Patel (1): irqchip/riscv-intc: Mark all INTC nodes as initialized Arnd Bergmann (1): fbdev: atyfb: only use ioremap_uc() on i386 and ia64 Baokun Li (3): ext4: add two helper functions extent_logical_end() and pa_logical_end() ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow ext4: avoid overlapping preallocations due to overflow Ben Wolsieffer (1): irqchip/stm32-exti: add missing DT IRQ flag translation Bjorn Andersson (1): rpmsg: glink: Release driver_override Cameron Williams (9): tty: 8250: Remove UC-257 and UC-431 tty: 8250: Add support for additional Brainboxes UC cards tty: 8250: Add support for Brainboxes UP cards tty: 8250: Add support for Intashield IS-100 tty: 8250: Fix port count of PX-257 tty: 8250: Fix up PX-803/PX-857 tty: 8250: Add support for additional Brainboxes PX cards tty: 8250: Add support for Intashield IX cards tty: 8250: Add Brainboxes Oxford Semiconductor-based quirks Christophe JAILLET (1): net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show() Christophe Leroy (1): powerpc/85xx: Fix math emulation exception Daniel Starke (1): tty: n_gsm: fix race condition in status line change on dead connections Dmitry Torokhov (1): Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport Douglas Anderson (6): r8152: Increase USB control msg timeout to 5000ms as per spec r8152: Run the unload routine if we have errors during probe r8152: Cancel hw_phy_work if we have an error in probe r8152: Release firmware if we have an error in probe r8152: Check for unplug in rtl_phy_patch_request() r8152: Check for unplug in r8153b_ups_en() / r8153c_ups_en() Ekansh Gupta (1): misc: fastrpc: Clean buffers on remote invocation failures Eric Auger (1): vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE Eric Dumazet (3): tcp: remove dead code from tcp_sendmsg_locked() tcp: cleanup tcp_remove_empty_skb() use neighbour: fix various data-races Florian Westphal (1): netfilter: nfnetlink_log: silence bogus compiler warning Fred Chen (1): tcp: fix wrong RTO timeout when received SACK reneging Gabriel Marcano (1): fs/ntfs3: Fix directory element type detection Gavin Shan (1): virtio_balloon: Fix endless deflation and inflation on arm64 Greg Kroah-Hartman (1): Linux 5.15.138 Gregory Price (1): mm/migrate: fix do_pages_move for compat pointers Gustavo A. R. Silva (1): net: sched: cls_u32: Fix allocation size in u32_init() Haibo Li (1): kasan: print the original fault addr when access invalid shadow Hangyu Hua (1): rpmsg: Fix possible refcount leak in rpmsg_register_device_override() Hao Ge (1): firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels() Herve Codina (3): i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() Ivan Vecera (2): i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR Jian Zhang (1): i2c: aspeed: Fix i2c bus hang in slave read Jimmy Hu (1): usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() Johan Hovold (2): ASoC: codecs: wcd938x: fix resource leaks on bind errors ASoC: codecs: wcd938x: fix runtime PM imbalance on remove John Sperbeck (1): objtool/x86: add missing embedded_insn check Jorge Maidana (1): fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit() Josh Poimboeuf (2): x86/mm: Simplify RESERVE_BRK() x86/mm: Fix RESERVE_BRK() for older binutils Juergen Gross (1): x86: Fix .brk attribute in linker script Karolina Stolarek (1): drm/ttm: Reorder sys manager cleanup step Kemeng Shi (1): mm/page_alloc: correct start page when guard page debug is enabled Konstantin Komarov (5): fs/ntfs3: Add ckeck in ni_update_parent() fs/ntfs3: Write immediately updated ntfs state fs/ntfs3: Use kvmalloc instead of kmalloc(... __GFP_NOWARN) fs/ntfs3: Fix possible NULL-ptr-deref in ni_readpage_cmpr() fs/ntfs3: Fix NULL pointer dereference on error in attr_allocate_frame() Krzysztof Kozlowski (5): pinctrl: qcom: lpass-lpi: fix concurrent register updates driver: platform: Add helper for safer setting of driver_override rpmsg: Constify local variable in field store macro rpmsg: Fix kfree() of static memory on setting driver_override rpmsg: Fix calling device_lock() on non-initialized device Kuninori Morimoto (1): ASoC: simple-card: fixup asoc_simple_probe() error handling Kunwu Chan (1): treewide: Spelling fix in comment Liam Beguin (3): iio: afe: rescale: reorder includes iio: afe: rescale: expose scale processing function iio: afe: rescale: add offset support LihaSika (1): usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility Liming Sun (1): platform/mellanox: mlxbf-tmfifo: Fix a warning message Linus Walleij (1): iio: afe: rescale: Accept only offset channels Lukasz Majczak (1): drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() Marek Szyprowski (1): iio: exynos-adc: request second interupt only when touchscreen mode is used Mario Limonciello (2): drm/amd: Move helper for dynamic speed switch check out of smu13 drm/amd: Disable ASPM for VI w/ all Intel systems Mark Hasemeyer (1): ALSA: hda: intel-dsp-config: Fix JSL Chromebook quirk detection Mateusz Palczewski (1): igb: Fix potential memory leak in igb_add_ethtool_nfc_entry Maximilian Heyne (1): virtio-mmio: fix memory leak of vm_dev Michael Ellerman (1): powerpc/mm: Fix boot crash with FLATMEM Mirsad Goran Todorovac (3): r8169: fix the KCSAN reported data-race in rtl_tx() while reading tp->cur_tx r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1 r8169: fix the KCSAN reported data race in rtl_rx while reading desc->opts1 Oliver Hartkopp (7): can: isotp: set max PDU size to 64 kByte can: isotp: isotp_bind(): return -EINVAL on incorrect CAN ID formatting can: isotp: check CAN address family in isotp_bind() can: isotp: handle wait_event_interruptible() return values can: isotp: add local echo tx processing and tx without FC can: isotp: isotp_bind(): do not validate unused address information can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior Pablo Neira Ayuso (2): gtp: uapi: fix GTPA_MAX gtp: fix fragmentation needed check with gso Paolo Abeni (1): mptcp: more conservative check for zero probes Peng Fan (3): nvmem: imx: correct nregs for i.MX6ULL nvmem: imx: correct nregs for i.MX6SLL nvmem: imx: correct nregs for i.MX6UL Peter Zijlstra (1): perf/core: Fix potential NULL deref Robert Hancock (2): iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature thresholds iio: adc: xilinx-xadc: Correct temperature offset/scale for UltraScale Rodríguez Barbarin, José Javier (2): mcb: Return actual parsed size when reading chameleon table mcb-lpc: Reallocate memory region to avoid memory overlapping Sasha Neftin (1): igc: Fix ambiguity in the ethtool advertising Shailend Chand (1): gve: Fix GFP flags when allocing pages Shigeru Yoshida (1): net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg Shuming Fan (1): ASoC: rt5650: fix the wrong result of key button Siddharth Vadapalli (1): misc: pci_endpoint_test: Add deviceID for J721S2 PCIe EP device support Stefano Garzarella (2): vsock/virtio: factor our the code to initialize and delete VQs vsock/virtio: add support for device suspend/resume Su Hui (2): fs/ntfs3: Avoid possible memory leak net: chelsio: cxgb4: add an error code check in t4_load_phy_fw Thomas Gleixner (1): x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility Tomas Henzl (1): scsi: mpt3sas: Fix in error path Umesh Nerlige Ramappa (1): drm/i915/pmu: Check if pmu is closed before stopping event Vicki Pfau (1): PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device William A. Kennington III (1): spi: npcm-fiu: Fix UMA reads when dummy.nbytes == 0 Yujie Liu (1): tracing/kprobes: Fix the description of variable length arguments Zhang Shurong (1): dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe

1 year, 1 month

1
1
0 0

Linux 5.10.200

by Greg Kroah-Hartman

I'm announcing the release of the 5.10.200 kernel. All users of the 5.10 kernel series must upgrade. The updated 5.10.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.10.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/powerpc/kernel/setup-common.c | 2 arch/powerpc/mm/mem.c | 1 arch/sparc/lib/checksum_32.S | 2 arch/x86/include/asm/i8259.h | 2 arch/x86/include/asm/setup.h | 46 - arch/x86/kernel/acpi/boot.c | 3 arch/x86/kernel/i8259.c | 38 arch/x86/kernel/setup.c | 5 arch/x86/kernel/vmlinux.lds.S | 2 drivers/base/driver.c | 69 + drivers/base/platform.c | 28 drivers/clk/clk.c | 21 drivers/dma/ste_dma40.c | 1 drivers/gpu/drm/drm_dp_mst_topology.c | 6 drivers/i2c/busses/i2c-aspeed.c | 3 drivers/i2c/busses/i2c-stm32f7.c | 9 drivers/i2c/muxes/i2c-demux-pinctrl.c | 2 drivers/i2c/muxes/i2c-mux-gpmux.c | 2 drivers/i2c/muxes/i2c-mux-pinctrl.c | 2 drivers/iio/adc/exynos_adc.c | 24 drivers/iio/adc/xilinx-xadc-core.c | 179 +--- drivers/input/mouse/synaptics.c | 1 drivers/input/rmi4/rmi_smbus.c | 50 - drivers/irqchip/irq-stm32-exti.c | 1 drivers/mcb/mcb-lpc.c | 35 drivers/mcb/mcb-parse.c | 15 drivers/misc/fastrpc.c | 10 drivers/mmc/host/renesas_sdhi_core.c | 3 drivers/mmc/host/tmio_mmc.h | 2 drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 2 drivers/net/ethernet/intel/i40e/i40e_txrx.c | 2 drivers/net/ethernet/intel/igb/igb_ethtool.c | 6 drivers/net/ethernet/intel/igc/igc_ethtool.c | 35 drivers/net/ethernet/realtek/r8169_main.c | 4 drivers/net/ethernet/toshiba/ps3_gelic_wireless.c | 2 drivers/net/gtp.c | 5 drivers/net/ieee802154/adf7242.c | 5 drivers/net/usb/r8152.c | 11 drivers/net/usb/smsc95xx.c | 4 drivers/nvmem/imx-ocotp.c | 6 drivers/pci/quirks.c | 8 drivers/platform/mellanox/mlxbf-tmfifo.c | 21 drivers/rpmsg/qcom_glink_native.c | 2 drivers/rpmsg/rpmsg_core.c | 37 drivers/rpmsg/rpmsg_internal.h | 5 drivers/scsi/mpt3sas/mpt3sas_scsih.c | 4 drivers/spi/spi-npcm-fiu.c | 5 drivers/tty/serial/8250/8250_pci.c | 122 ++ drivers/usb/gadget/legacy/raw_gadget.c | 26 drivers/usb/storage/unusual_cypress.h | 2 drivers/video/fbdev/aty/atyfb_base.c | 4 drivers/video/fbdev/uvesafb.c | 2 drivers/virtio/virtio_balloon.c | 6 drivers/virtio/virtio_mmio.c | 19 fs/cifs/smbdirect.c | 14 fs/ext4/mballoc.c | 51 - fs/ext4/mballoc.h | 14 fs/f2fs/gc.c | 3 include/linux/device/driver.h | 2 include/linux/kasan.h | 6 include/linux/pci_ids.h | 1 include/linux/platform_device.h | 6 include/linux/rpmsg.h | 14 include/uapi/linux/can/isotp.h | 25 include/uapi/linux/gtp.h | 2 kernel/events/core.c | 3 kernel/trace/trace_kprobe.c | 4 lib/kobject.c | 12 mm/kasan/report.c | 4 mm/page_alloc.c | 2 net/can/isotp.c | 434 ++++++---- net/core/neighbour.c | 67 - net/ipv4/tcp_input.c | 9 net/netfilter/nfnetlink_log.c | 2 net/sched/cls_u32.c | 2 sound/hda/intel-dsp-config.c | 6 sound/soc/codecs/rt5645.c | 2 tools/objtool/check.c | 2 tools/testing/selftests/ftrace/test.d/kprobe/kprobe_non_uniq_symbol.tc | 13 80 files changed, 1046 insertions(+), 565 deletions(-) Al Viro (1): sparc32: fix a braino in fault handling in csum_and_copy_..._user() Alain Volmat (1): i2c: stm32f7: Fix PEC handling in case of SMBUS transfers Alessandro Carminati (1): clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name Andrey Konovalov (1): usb: raw-gadget: properly handle interrupted requests Arnd Bergmann (1): fbdev: atyfb: only use ioremap_uc() on i386 and ia64 Baokun Li (3): ext4: add two helper functions extent_logical_end() and pa_logical_end() ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow ext4: avoid overlapping preallocations due to overflow Bartosz Golaszewski (3): iio: adc: xilinx: use helper variable for &pdev->dev iio: adc: xilinx: use devm_krealloc() instead of kfree() + kcalloc() iio: adc: xilinx: use more devres helpers and remove remove() Ben Wolsieffer (1): irqchip/stm32-exti: add missing DT IRQ flag translation Bjorn Andersson (1): rpmsg: glink: Release driver_override Cameron Williams (4): tty: 8250: Remove UC-257 and UC-431 tty: 8250: Add support for additional Brainboxes UC cards tty: 8250: Add support for Brainboxes UP cards tty: 8250: Add support for Intashield IS-100 Chao Yu (1): f2fs: fix to do sanity check on inode type during garbage collection Christophe JAILLET (1): net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show() Dmitry Torokhov (1): Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport Douglas Anderson (4): r8152: Increase USB control msg timeout to 5000ms as per spec r8152: Run the unload routine if we have errors during probe r8152: Cancel hw_phy_work if we have an error in probe r8152: Release firmware if we have an error in probe Ekansh Gupta (1): misc: fastrpc: Clean buffers on remote invocation failures Eric Dumazet (1): neighbour: fix various data-races Florian Westphal (1): netfilter: nfnetlink_log: silence bogus compiler warning Francis Laniel (1): selftests/ftrace: Add new test case which checks non unique symbol Fred Chen (1): tcp: fix wrong RTO timeout when received SACK reneging Gavin Shan (1): virtio_balloon: Fix endless deflation and inflation on arm64 Greg Kroah-Hartman (1): Linux 5.10.200 Gustavo A. R. Silva (1): net: sched: cls_u32: Fix allocation size in u32_init() Haibo Li (1): kasan: print the original fault addr when access invalid shadow Hangyu Hua (1): rpmsg: Fix possible refcount leak in rpmsg_register_device_override() Herve Codina (3): i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() Ivan Vecera (1): i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR Jian Zhang (1): i2c: aspeed: Fix i2c bus hang in slave read John Sperbeck (1): objtool/x86: add missing embedded_insn check Jorge Maidana (1): fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit() Josh Poimboeuf (2): x86/mm: Simplify RESERVE_BRK() x86/mm: Fix RESERVE_BRK() for older binutils Juergen Gross (1): x86: Fix .brk attribute in linker script Kemeng Shi (1): mm/page_alloc: correct start page when guard page debug is enabled Krzysztof Kozlowski (4): driver: platform: Add helper for safer setting of driver_override rpmsg: Constify local variable in field store macro rpmsg: Fix kfree() of static memory on setting driver_override rpmsg: Fix calling device_lock() on non-initialized device Kunwu Chan (1): treewide: Spelling fix in comment LihaSika (1): usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility Liming Sun (1): platform/mellanox: mlxbf-tmfifo: Fix a warning message Lukas Magel (1): can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior Lukasz Majczak (1): drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() Marek Szyprowski (1): iio: exynos-adc: request second interupt only when touchscreen mode is used Mark Hasemeyer (1): ALSA: hda: intel-dsp-config: Fix JSL Chromebook quirk detection Mateusz Palczewski (1): igb: Fix potential memory leak in igb_add_ethtool_nfc_entry Maximilian Heyne (1): virtio-mmio: fix memory leak of vm_dev Michael Ellerman (1): powerpc/mm: Fix boot crash with FLATMEM Mirsad Goran Todorovac (2): r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1 r8169: fix the KCSAN reported data race in rtl_rx while reading desc->opts1 Oliver Hartkopp (6): can: isotp: set max PDU size to 64 kByte can: isotp: isotp_bind(): return -EINVAL on incorrect CAN ID formatting can: isotp: check CAN address family in isotp_bind() can: isotp: handle wait_event_interruptible() return values can: isotp: add local echo tx processing and tx without FC can: isotp: isotp_bind(): do not validate unused address information Pablo Neira Ayuso (2): gtp: uapi: fix GTPA_MAX gtp: fix fragmentation needed check with gso Patrick Menschel (3): can: isotp: change error format from decimal to symbolic error names can: isotp: add symbolic error message to isotp_module_init() can: isotp: Add error message if txqueuelen is too small Peng Fan (3): nvmem: imx: correct nregs for i.MX6ULL nvmem: imx: correct nregs for i.MX6SLL nvmem: imx: correct nregs for i.MX6UL Peter Zijlstra (1): perf/core: Fix potential NULL deref Robert Hancock (1): iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature thresholds Rodríguez Barbarin, José Javier (2): mcb: Return actual parsed size when reading chameleon table mcb-lpc: Reallocate memory region to avoid memory overlapping Sasha Neftin (1): igc: Fix ambiguity in the ethtool advertising Shigeru Yoshida (1): net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg Shuming Fan (1): ASoC: rt5650: fix the wrong result of key button Steve French (1): smbdirect: missing rc checks while waiting for rdma events Su Hui (1): net: chelsio: cxgb4: add an error code check in t4_load_phy_fw Thomas Gleixner (1): x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility Tomas Henzl (1): scsi: mpt3sas: Fix in error path Vicki Pfau (1): PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device Wang Hai (1): kobject: Fix slab-out-of-bounds in fill_kobj_path() William A. Kennington III (1): spi: npcm-fiu: Fix UMA reads when dummy.nbytes == 0 Wolfram Sang (1): mmc: renesas_sdhi: use custom mask for TMIO_MASK_ALL Yujie Liu (1): tracing/kprobes: Fix the description of variable length arguments Zhang Shurong (1): dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe

1 year, 1 month

1
1
0 0

[PATCH] s390/vfio-ap: fix sysfs status attribute for AP queue devices

by Tony Krowiak

The 'status' attribute for AP queue devices bound to the vfio_ap device driver displays incorrect status when the mediated device is attached to a guest, but the queue device is not passed through. In the current implementation, the status displayed is 'in_use' which is not correct; it should be 'assigned'. This can happen if one of the queue devices associated with a given adapter is not bound to the vfio_ap device driver. For example: Queues listed in /sys/bus/ap/drivers/vfio_ap: 14.0005 14.0006 14.000d 16.0006 16.000d Queues listed in /sys/devices/vfio_ap/matrix/$UUID/matrix 14.0005 14.0006 14.000d 16.0005 16.0006 16.000d Queues listed in /sys/devices/vfio_ap/matrix/$UUID/guest_matrix 14.0005 14.0006 14.000d The reason no queues for adapter 0x16 are listed in the guest_matrix is because queue 16.0005 is not bound to the vfio_ap device driver, so no queue associated with the adapter is passed through to the guest; therefore, each queue device for adapter 0x16 should display 'assigned' instead of 'in_use', because those queues are not in use by a guest, but only assigned to the mediated device. Let's check the AP configuration for the guest to determine whether a queue device is passed through before displaying a status of 'in_use'. Signed-off-by: Tony Krowiak <akrowiak(a)linux.ibm.com> Fixes: f139862b92cf ("s390/vfio-ap: add status attribute to AP queue device's sysfs dir") Cc: stable(a)vger.kernel.org --- drivers/s390/crypto/vfio_ap_ops.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/drivers/s390/crypto/vfio_ap_ops.c b/drivers/s390/crypto/vfio_ap_ops.c index 4db538a55192..871c14a6921f 100644 --- a/drivers/s390/crypto/vfio_ap_ops.c +++ b/drivers/s390/crypto/vfio_ap_ops.c @@ -1976,6 +1976,7 @@ static ssize_t status_show(struct device *dev, { ssize_t nchars = 0; struct vfio_ap_queue *q; + unsigned long apid, apqi; struct ap_matrix_mdev *matrix_mdev; struct ap_device *apdev = to_ap_dev(dev); @@ -1984,7 +1985,11 @@ static ssize_t status_show(struct device *dev, matrix_mdev = vfio_ap_mdev_for_queue(q); if (matrix_mdev) { - if (matrix_mdev->kvm) + apid = AP_QID_CARD(q->apqn); + apqi = AP_QID_QUEUE(q->apqn); + if (matrix_mdev->kvm && + test_bit_inv(apid, matrix_mdev->shadow_apcb.apm) && + test_bit_inv(apqi, matrix_mdev->shadow_apcb.aqm)) nchars = scnprintf(buf, PAGE_SIZE, "%s\n", AP_QUEUE_IN_USE); else -- 2.41.0

1 year, 1 month

3
4
0 0

[PATCH 5.15 000/125] 5.15.138-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.15.138 release. There are 125 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 09 Nov 2023 20:22:58 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.138-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.15.138-rc2 Mark Hasemeyer <markhas(a)chromium.org> ALSA: hda: intel-dsp-config: Fix JSL Chromebook quirk detection Siddharth Vadapalli <s-vadapalli(a)ti.com> misc: pci_endpoint_test: Add deviceID for J721S2 PCIe EP device support Cameron Williams <cang1(a)live.co.uk> tty: 8250: Add Brainboxes Oxford Semiconductor-based quirks Cameron Williams <cang1(a)live.co.uk> tty: 8250: Add support for Intashield IX cards Cameron Williams <cang1(a)live.co.uk> tty: 8250: Add support for additional Brainboxes PX cards Cameron Williams <cang1(a)live.co.uk> tty: 8250: Fix up PX-803/PX-857 Cameron Williams <cang1(a)live.co.uk> tty: 8250: Fix port count of PX-257 Cameron Williams <cang1(a)live.co.uk> tty: 8250: Add support for Intashield IS-100 Cameron Williams <cang1(a)live.co.uk> tty: 8250: Add support for Brainboxes UP cards Cameron Williams <cang1(a)live.co.uk> tty: 8250: Add support for additional Brainboxes UC cards Cameron Williams <cang1(a)live.co.uk> tty: 8250: Remove UC-257 and UC-431 Daniel Starke <daniel.starke(a)siemens.com> tty: n_gsm: fix race condition in status line change on dead connections Andrey Konovalov <andreyknvl(a)gmail.com> usb: raw-gadget: properly handle interrupted requests Jimmy Hu <hhhuuu(a)google.com> usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() LihaSika <lihasika(a)gmail.com> usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility Vicki Pfau <vi(a)endrift.com> PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Disable ASPM for VI w/ all Intel systems Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Move helper for dynamic speed switch check out of smu13 Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: isotp_bind(): do not validate unused address information Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: add local echo tx processing and tx without FC Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: handle wait_event_interruptible() return values Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: check CAN address family in isotp_bind() Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: isotp_bind(): return -EINVAL on incorrect CAN ID formatting Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: set max PDU size to 64 kByte Michael Ellerman <mpe(a)ellerman.id.au> powerpc/mm: Fix boot crash with FLATMEM Douglas Anderson <dianders(a)chromium.org> r8152: Check for unplug in r8153b_ups_en() / r8153c_ups_en() Douglas Anderson <dianders(a)chromium.org> r8152: Check for unplug in rtl_phy_patch_request() Su Hui <suhui(a)nfschina.com> net: chelsio: cxgb4: add an error code check in t4_load_phy_fw Liming Sun <limings(a)nvidia.com> platform/mellanox: mlxbf-tmfifo: Fix a warning message Tomas Henzl <thenzl(a)redhat.com> scsi: mpt3sas: Fix in error path Jorge Maidana <jorgem.linux(a)gmail.com> fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit() Karolina Stolarek <karolina.stolarek(a)intel.com> drm/ttm: Reorder sys manager cleanup step Shuming Fan <shumingf(a)realtek.com> ASoC: rt5650: fix the wrong result of key button Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_log: silence bogus compiler warning William A. Kennington III <william(a)wkennington.com> spi: npcm-fiu: Fix UMA reads when dummy.nbytes == 0 Su Hui <suhui(a)nfschina.com> fs/ntfs3: Avoid possible memory leak Gabriel Marcano <gabemarcano(a)yahoo.com> fs/ntfs3: Fix directory element type detection Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: Fix NULL pointer dereference on error in attr_allocate_frame() Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: Fix possible NULL-ptr-deref in ni_readpage_cmpr() Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: Use kvmalloc instead of kmalloc(... __GFP_NOWARN) Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: Write immediately updated ntfs state Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: Add ckeck in ni_update_parent() Arnd Bergmann <arnd(a)arndb.de> fbdev: atyfb: only use ioremap_uc() on i386 and ia64 Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport Christophe Leroy <christophe.leroy(a)csgroup.eu> powerpc/85xx: Fix math emulation exception Zhang Shurong <zhang_shurong(a)foxmail.com> dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe Ben Wolsieffer <ben.wolsieffer(a)hefring.com> irqchip/stm32-exti: add missing DT IRQ flag translation Anup Patel <apatel(a)ventanamicro.com> irqchip/riscv-intc: Mark all INTC nodes as initialized Gustavo A. R. Silva <gustavoars(a)kernel.org> net: sched: cls_u32: Fix allocation size in u32_init() Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: simple-card: fixup asoc_simple_probe() error handling Juergen Gross <jgross(a)suse.com> x86: Fix .brk attribute in linker script Hangyu Hua <hbh25y(a)gmail.com> rpmsg: Fix possible refcount leak in rpmsg_register_device_override() Bjorn Andersson <quic_bjorande(a)quicinc.com> rpmsg: glink: Release driver_override Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> rpmsg: Fix calling device_lock() on non-initialized device Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> rpmsg: Fix kfree() of static memory on setting driver_override Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> rpmsg: Constify local variable in field store macro Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> driver: platform: Add helper for safer setting of driver_override John Sperbeck <jsperbeck(a)google.com> objtool/x86: add missing embedded_insn check Baokun Li <libaokun1(a)huawei.com> ext4: avoid overlapping preallocations due to overflow Baokun Li <libaokun1(a)huawei.com> ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow Baokun Li <libaokun1(a)huawei.com> ext4: add two helper functions extent_logical_end() and pa_logical_end() Josh Poimboeuf <jpoimboe(a)kernel.org> x86/mm: Fix RESERVE_BRK() for older binutils Josh Poimboeuf <jpoimboe(a)redhat.com> x86/mm: Simplify RESERVE_BRK() Thomas Gleixner <tglx(a)linutronix.de> x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility Shailend Chand <shailend(a)google.com> gve: Fix GFP flags when allocing pages Linus Walleij <linus.walleij(a)linaro.org> iio: afe: rescale: Accept only offset channels Liam Beguin <liambeguin(a)gmail.com> iio: afe: rescale: add offset support Liam Beguin <liambeguin(a)gmail.com> iio: afe: rescale: expose scale processing function Liam Beguin <liambeguin(a)gmail.com> iio: afe: rescale: reorder includes Alessandro Carminati <alessandro.carminati(a)gmail.com> clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name Al Viro <viro(a)zeniv.linux.org.uk> sparc32: fix a braino in fault handling in csum_and_copy_..._user() Peter Zijlstra <peterz(a)infradead.org> perf/core: Fix potential NULL deref Peng Fan <peng.fan(a)nxp.com> nvmem: imx: correct nregs for i.MX6UL Peng Fan <peng.fan(a)nxp.com> nvmem: imx: correct nregs for i.MX6SLL Peng Fan <peng.fan(a)nxp.com> nvmem: imx: correct nregs for i.MX6ULL Ekansh Gupta <quic_ekangupt(a)quicinc.com> misc: fastrpc: Clean buffers on remote invocation failures Yujie Liu <yujie.liu(a)intel.com> tracing/kprobes: Fix the description of variable length arguments Jian Zhang <zhangjian.3032(a)bytedance.com> i2c: aspeed: Fix i2c bus hang in slave read Alain Volmat <alain.volmat(a)foss.st.com> i2c: stm32f7: Fix PEC handling in case of SMBUS transfers Herve Codina <herve.codina(a)bootlin.com> i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() Herve Codina <herve.codina(a)bootlin.com> i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() Herve Codina <herve.codina(a)bootlin.com> i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() Robert Hancock <robert.hancock(a)calian.com> iio: adc: xilinx-xadc: Correct temperature offset/scale for UltraScale Robert Hancock <robert.hancock(a)calian.com> iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature thresholds Marek Szyprowski <m.szyprowski(a)samsung.com> iio: exynos-adc: request second interupt only when touchscreen mode is used Haibo Li <haibo.li(a)mediatek.com> kasan: print the original fault addr when access invalid shadow Ivan Vecera <ivecera(a)redhat.com> i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR Pablo Neira Ayuso <pablo(a)netfilter.org> gtp: fix fragmentation needed check with gso Pablo Neira Ayuso <pablo(a)netfilter.org> gtp: uapi: fix GTPA_MAX Fred Chen <fred.chenchen03(a)gmail.com> tcp: fix wrong RTO timeout when received SACK reneging Douglas Anderson <dianders(a)chromium.org> r8152: Release firmware if we have an error in probe Douglas Anderson <dianders(a)chromium.org> r8152: Cancel hw_phy_work if we have an error in probe Douglas Anderson <dianders(a)chromium.org> r8152: Run the unload routine if we have errors during probe Douglas Anderson <dianders(a)chromium.org> r8152: Increase USB control msg timeout to 5000ms as per spec Shigeru Yoshida <syoshida(a)redhat.com> net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show() Sasha Neftin <sasha.neftin(a)intel.com> igc: Fix ambiguity in the ethtool advertising Eric Dumazet <edumazet(a)google.com> neighbour: fix various data-races Mateusz Palczewski <mateusz.palczewski(a)intel.com> igb: Fix potential memory leak in igb_add_ethtool_nfc_entry Kunwu Chan <chentao(a)kylinos.cn> treewide: Spelling fix in comment Ivan Vecera <ivecera(a)redhat.com> i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value Mirsad Goran Todorovac <mirsad.todorovac(a)alu.unizg.hr> r8169: fix the KCSAN reported data race in rtl_rx while reading desc->opts1 Mirsad Goran Todorovac <mirsad.todorovac(a)alu.unizg.hr> r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1 Mirsad Goran Todorovac <mirsad.todorovac(a)alu.unizg.hr> r8169: fix the KCSAN reported data-race in rtl_tx() while reading tp->cur_tx Hao Ge <gehao(a)kylinos.cn> firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels() Lukasz Majczak <lma(a)semihalf.com> drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() Alexandru Matei <alexandru.matei(a)uipath.com> vsock/virtio: initialize the_virtio_vsock before using VQs Stefano Garzarella <sgarzare(a)redhat.com> vsock/virtio: add support for device suspend/resume Stefano Garzarella <sgarzare(a)redhat.com> vsock/virtio: factor our the code to initialize and delete VQs Umesh Nerlige Ramappa <umesh.nerlige.ramappa(a)intel.com> drm/i915/pmu: Check if pmu is closed before stopping event Al Viro <viro(a)zeniv.linux.org.uk> nfsd: lock_rename() needs both directories to live on the same fs Gregory Price <gourry.memverge(a)gmail.com> mm/migrate: fix do_pages_move for compat pointers Kemeng Shi <shikemeng(a)huaweicloud.com> mm/page_alloc: correct start page when guard page debug is enabled Eric Auger <eric.auger(a)redhat.com> vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE Maximilian Heyne <mheyne(a)amazon.de> virtio-mmio: fix memory leak of vm_dev Gavin Shan <gshan(a)redhat.com> virtio_balloon: Fix endless deflation and inflation on arm64 Rodríguez Barbarin, José Javier <JoseJavier.Rodriguez(a)duagon.com> mcb-lpc: Reallocate memory region to avoid memory overlapping Rodríguez Barbarin, José Javier <JoseJavier.Rodriguez(a)duagon.com> mcb: Return actual parsed size when reading chameleon table Paolo Abeni <pabeni(a)redhat.com> mptcp: more conservative check for zero probes Eric Dumazet <edumazet(a)google.com> tcp: cleanup tcp_remove_empty_skb() use Eric Dumazet <edumazet(a)google.com> tcp: remove dead code from tcp_sendmsg_locked() Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> pinctrl: qcom: lpass-lpi: fix concurrent register updates Johan Hovold <johan+linaro(a)kernel.org> ASoC: codecs: wcd938x: fix runtime PM imbalance on remove Johan Hovold <johan+linaro(a)kernel.org> ASoC: codecs: wcd938x: fix resource leaks on bind errors ------------- Diffstat: Makefile | 4 +- arch/powerpc/kernel/head_fsl_booke.S | 2 +- arch/powerpc/kernel/setup-common.c | 2 + arch/powerpc/mm/mem.c | 1 - arch/sparc/lib/checksum_32.S | 2 +- arch/x86/include/asm/i8259.h | 2 + arch/x86/include/asm/setup.h | 46 ++- arch/x86/kernel/acpi/boot.c | 3 + arch/x86/kernel/i8259.c | 38 +- arch/x86/kernel/setup.c | 5 - arch/x86/kernel/vmlinux.lds.S | 2 +- drivers/base/driver.c | 69 ++++ drivers/base/platform.c | 28 +- drivers/clk/clk.c | 21 +- drivers/dma/ste_dma40.c | 1 + drivers/firmware/imx/imx-dsp.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 19 + drivers/gpu/drm/amd/amdgpu/vi.c | 2 +- drivers/gpu/drm/drm_dp_mst_topology.c | 6 +- drivers/gpu/drm/i915/i915_pmu.c | 9 + drivers/gpu/drm/ttm/ttm_device.c | 8 +- drivers/i2c/busses/i2c-aspeed.c | 3 +- drivers/i2c/busses/i2c-stm32f7.c | 9 +- drivers/i2c/muxes/i2c-demux-pinctrl.c | 2 +- drivers/i2c/muxes/i2c-mux-gpmux.c | 2 +- drivers/i2c/muxes/i2c-mux-pinctrl.c | 2 +- drivers/iio/adc/exynos_adc.c | 24 +- drivers/iio/adc/xilinx-xadc-core.c | 39 +- drivers/iio/adc/xilinx-xadc.h | 2 + drivers/iio/afe/iio-rescale.c | 162 ++++++-- drivers/input/mouse/synaptics.c | 1 + drivers/input/rmi4/rmi_smbus.c | 50 +-- drivers/irqchip/irq-riscv-intc.c | 10 +- drivers/irqchip/irq-stm32-exti.c | 1 + drivers/mcb/mcb-lpc.c | 35 +- drivers/mcb/mcb-parse.c | 15 +- drivers/misc/fastrpc.c | 10 +- drivers/misc/pci_endpoint_test.c | 4 + drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 2 + drivers/net/ethernet/google/gve/gve_rx_dqo.c | 2 +- drivers/net/ethernet/intel/i40e/i40e.h | 2 +- drivers/net/ethernet/intel/i40e/i40e_txrx.c | 2 +- drivers/net/ethernet/intel/igb/igb_ethtool.c | 6 +- drivers/net/ethernet/intel/igc/igc_ethtool.c | 35 +- drivers/net/ethernet/realtek/r8169_main.c | 6 +- drivers/net/ethernet/toshiba/ps3_gelic_wireless.c | 2 +- drivers/net/gtp.c | 5 +- drivers/net/ieee802154/adf7242.c | 5 +- drivers/net/usb/r8152.c | 18 +- drivers/net/usb/smsc95xx.c | 4 +- drivers/nvmem/imx-ocotp.c | 6 +- drivers/pci/quirks.c | 8 +- drivers/pinctrl/qcom/pinctrl-lpass-lpi.c | 17 +- drivers/platform/mellanox/mlxbf-tmfifo.c | 21 +- drivers/rpmsg/qcom_glink_native.c | 2 + drivers/rpmsg/rpmsg_core.c | 37 +- drivers/rpmsg/rpmsg_internal.h | 5 +- drivers/rpmsg/rpmsg_ns.c | 4 +- drivers/scsi/mpt3sas/mpt3sas_scsih.c | 4 +- drivers/spi/spi-npcm-fiu.c | 5 +- drivers/tty/n_gsm.c | 2 + drivers/tty/serial/8250/8250_pci.c | 327 +++++++++++++++- drivers/usb/gadget/legacy/raw_gadget.c | 26 +- drivers/usb/storage/unusual_cypress.h | 2 +- drivers/usb/typec/tcpm/tcpm.c | 3 + drivers/vhost/vhost.c | 4 +- drivers/video/fbdev/aty/atyfb_base.c | 4 + drivers/video/fbdev/uvesafb.c | 2 +- drivers/virtio/virtio_balloon.c | 6 +- drivers/virtio/virtio_mmio.c | 19 +- fs/ext4/mballoc.c | 51 ++- fs/ext4/mballoc.h | 14 + fs/nfsd/vfs.c | 12 +- fs/ntfs3/attrib.c | 6 +- fs/ntfs3/attrlist.c | 15 +- fs/ntfs3/bitmap.c | 3 +- fs/ntfs3/dir.c | 6 +- fs/ntfs3/frecord.c | 8 +- fs/ntfs3/fslog.c | 6 +- fs/ntfs3/fsntfs.c | 13 +- fs/ntfs3/super.c | 2 +- include/linux/device/driver.h | 2 + include/linux/iio/afe/rescale.h | 36 ++ include/linux/kasan.h | 6 +- include/linux/pci_ids.h | 1 + include/linux/platform_device.h | 6 +- include/linux/rpmsg.h | 14 +- include/net/tcp.h | 2 +- include/uapi/linux/can/isotp.h | 25 +- include/uapi/linux/gtp.h | 2 +- kernel/events/core.c | 3 +- kernel/trace/trace_kprobe.c | 4 +- mm/kasan/report.c | 4 +- mm/migrate.c | 14 +- mm/page_alloc.c | 2 +- net/can/isotp.c | 438 ++++++++++++++-------- net/core/neighbour.c | 67 ++-- net/ipv4/tcp.c | 19 +- net/ipv4/tcp_input.c | 9 +- net/mptcp/protocol.c | 12 +- net/netfilter/nfnetlink_log.c | 2 +- net/sched/cls_u32.c | 2 +- net/vmw_vsock/virtio_transport.c | 215 +++++++---- sound/hda/intel-dsp-config.c | 6 + sound/soc/codecs/rt5645.c | 2 + sound/soc/codecs/wcd938x.c | 52 ++- sound/soc/generic/simple-card.c | 6 +- tools/objtool/check.c | 2 +- 109 files changed, 1648 insertions(+), 678 deletions(-)

1 year, 1 month

7
6
0 0

[PATCH 5.10 00/91] 5.10.200-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.10.200 release. There are 91 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 09 Nov 2023 20:24:28 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.200-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.10.200-rc2 Mark Hasemeyer <markhas(a)chromium.org> ALSA: hda: intel-dsp-config: Fix JSL Chromebook quirk detection Cameron Williams <cang1(a)live.co.uk> tty: 8250: Add support for Intashield IS-100 Cameron Williams <cang1(a)live.co.uk> tty: 8250: Add support for Brainboxes UP cards Cameron Williams <cang1(a)live.co.uk> tty: 8250: Add support for additional Brainboxes UC cards Cameron Williams <cang1(a)live.co.uk> tty: 8250: Remove UC-257 and UC-431 Andrey Konovalov <andreyknvl(a)gmail.com> usb: raw-gadget: properly handle interrupted requests LihaSika <lihasika(a)gmail.com> usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility Vicki Pfau <vi(a)endrift.com> PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device Lukas Magel <lukas.magel(a)posteo.net> can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: isotp_bind(): do not validate unused address information Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: add local echo tx processing and tx without FC Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: handle wait_event_interruptible() return values Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: check CAN address family in isotp_bind() Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: isotp_bind(): return -EINVAL on incorrect CAN ID formatting Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: set max PDU size to 64 kByte Patrick Menschel <menschel.p(a)posteo.de> can: isotp: Add error message if txqueuelen is too small Patrick Menschel <menschel.p(a)posteo.de> can: isotp: add symbolic error message to isotp_module_init() Patrick Menschel <menschel.p(a)posteo.de> can: isotp: change error format from decimal to symbolic error names Michael Ellerman <mpe(a)ellerman.id.au> powerpc/mm: Fix boot crash with FLATMEM Su Hui <suhui(a)nfschina.com> net: chelsio: cxgb4: add an error code check in t4_load_phy_fw Liming Sun <limings(a)nvidia.com> platform/mellanox: mlxbf-tmfifo: Fix a warning message Tomas Henzl <thenzl(a)redhat.com> scsi: mpt3sas: Fix in error path Jorge Maidana <jorgem.linux(a)gmail.com> fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit() Shuming Fan <shumingf(a)realtek.com> ASoC: rt5650: fix the wrong result of key button Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_log: silence bogus compiler warning William A. Kennington III <william(a)wkennington.com> spi: npcm-fiu: Fix UMA reads when dummy.nbytes == 0 Arnd Bergmann <arnd(a)arndb.de> fbdev: atyfb: only use ioremap_uc() on i386 and ia64 Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport Zhang Shurong <zhang_shurong(a)foxmail.com> dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe Ben Wolsieffer <ben.wolsieffer(a)hefring.com> irqchip/stm32-exti: add missing DT IRQ flag translation Gustavo A. R. Silva <gustavoars(a)kernel.org> net: sched: cls_u32: Fix allocation size in u32_init() Juergen Gross <jgross(a)suse.com> x86: Fix .brk attribute in linker script Hangyu Hua <hbh25y(a)gmail.com> rpmsg: Fix possible refcount leak in rpmsg_register_device_override() Bjorn Andersson <quic_bjorande(a)quicinc.com> rpmsg: glink: Release driver_override Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> rpmsg: Fix calling device_lock() on non-initialized device Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> rpmsg: Fix kfree() of static memory on setting driver_override Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> rpmsg: Constify local variable in field store macro Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> driver: platform: Add helper for safer setting of driver_override John Sperbeck <jsperbeck(a)google.com> objtool/x86: add missing embedded_insn check Baokun Li <libaokun1(a)huawei.com> ext4: avoid overlapping preallocations due to overflow Baokun Li <libaokun1(a)huawei.com> ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow Baokun Li <libaokun1(a)huawei.com> ext4: add two helper functions extent_logical_end() and pa_logical_end() Josh Poimboeuf <jpoimboe(a)kernel.org> x86/mm: Fix RESERVE_BRK() for older binutils Josh Poimboeuf <jpoimboe(a)redhat.com> x86/mm: Simplify RESERVE_BRK() Chao Yu <chao(a)kernel.org> f2fs: fix to do sanity check on inode type during garbage collection Steve French <stfrench(a)microsoft.com> smbdirect: missing rc checks while waiting for rdma events Wang Hai <wanghai38(a)huawei.com> kobject: Fix slab-out-of-bounds in fill_kobj_path() Thomas Gleixner <tglx(a)linutronix.de> x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility Robert Hancock <robert.hancock(a)calian.com> iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature thresholds Bartosz Golaszewski <bgolaszewski(a)baylibre.com> iio: adc: xilinx: use more devres helpers and remove remove() Bartosz Golaszewski <bgolaszewski(a)baylibre.com> iio: adc: xilinx: use devm_krealloc() instead of kfree() + kcalloc() Bartosz Golaszewski <bgolaszewski(a)baylibre.com> iio: adc: xilinx: use helper variable for &pdev->dev Alessandro Carminati <alessandro.carminati(a)gmail.com> clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name Al Viro <viro(a)zeniv.linux.org.uk> sparc32: fix a braino in fault handling in csum_and_copy_..._user() Peter Zijlstra <peterz(a)infradead.org> perf/core: Fix potential NULL deref Peng Fan <peng.fan(a)nxp.com> nvmem: imx: correct nregs for i.MX6UL Peng Fan <peng.fan(a)nxp.com> nvmem: imx: correct nregs for i.MX6SLL Peng Fan <peng.fan(a)nxp.com> nvmem: imx: correct nregs for i.MX6ULL Ekansh Gupta <quic_ekangupt(a)quicinc.com> misc: fastrpc: Clean buffers on remote invocation failures Yujie Liu <yujie.liu(a)intel.com> tracing/kprobes: Fix the description of variable length arguments Jian Zhang <zhangjian.3032(a)bytedance.com> i2c: aspeed: Fix i2c bus hang in slave read Alain Volmat <alain.volmat(a)foss.st.com> i2c: stm32f7: Fix PEC handling in case of SMBUS transfers Herve Codina <herve.codina(a)bootlin.com> i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() Herve Codina <herve.codina(a)bootlin.com> i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() Herve Codina <herve.codina(a)bootlin.com> i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() Marek Szyprowski <m.szyprowski(a)samsung.com> iio: exynos-adc: request second interupt only when touchscreen mode is used Haibo Li <haibo.li(a)mediatek.com> kasan: print the original fault addr when access invalid shadow Ivan Vecera <ivecera(a)redhat.com> i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR Pablo Neira Ayuso <pablo(a)netfilter.org> gtp: fix fragmentation needed check with gso Pablo Neira Ayuso <pablo(a)netfilter.org> gtp: uapi: fix GTPA_MAX Fred Chen <fred.chenchen03(a)gmail.com> tcp: fix wrong RTO timeout when received SACK reneging Douglas Anderson <dianders(a)chromium.org> r8152: Release firmware if we have an error in probe Douglas Anderson <dianders(a)chromium.org> r8152: Cancel hw_phy_work if we have an error in probe Douglas Anderson <dianders(a)chromium.org> r8152: Run the unload routine if we have errors during probe Douglas Anderson <dianders(a)chromium.org> r8152: Increase USB control msg timeout to 5000ms as per spec Shigeru Yoshida <syoshida(a)redhat.com> net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show() Sasha Neftin <sasha.neftin(a)intel.com> igc: Fix ambiguity in the ethtool advertising Eric Dumazet <edumazet(a)google.com> neighbour: fix various data-races Mateusz Palczewski <mateusz.palczewski(a)intel.com> igb: Fix potential memory leak in igb_add_ethtool_nfc_entry Kunwu Chan <chentao(a)kylinos.cn> treewide: Spelling fix in comment Mirsad Goran Todorovac <mirsad.todorovac(a)alu.unizg.hr> r8169: fix the KCSAN reported data race in rtl_rx while reading desc->opts1 Mirsad Goran Todorovac <mirsad.todorovac(a)alu.unizg.hr> r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1 Lukasz Majczak <lma(a)semihalf.com> drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() Wolfram Sang <wsa+renesas(a)sang-engineering.com> mmc: renesas_sdhi: use custom mask for TMIO_MASK_ALL Kemeng Shi <shikemeng(a)huaweicloud.com> mm/page_alloc: correct start page when guard page debug is enabled Maximilian Heyne <mheyne(a)amazon.de> virtio-mmio: fix memory leak of vm_dev Gavin Shan <gshan(a)redhat.com> virtio_balloon: Fix endless deflation and inflation on arm64 Rodríguez Barbarin, José Javier <JoseJavier.Rodriguez(a)duagon.com> mcb-lpc: Reallocate memory region to avoid memory overlapping Rodríguez Barbarin, José Javier <JoseJavier.Rodriguez(a)duagon.com> mcb: Return actual parsed size when reading chameleon table Francis Laniel <flaniel(a)linux.microsoft.com> selftests/ftrace: Add new test case which checks non unique symbol ------------- Diffstat: Makefile | 4 +- arch/powerpc/kernel/setup-common.c | 2 + arch/powerpc/mm/mem.c | 1 - arch/sparc/lib/checksum_32.S | 2 +- arch/x86/include/asm/i8259.h | 2 + arch/x86/include/asm/setup.h | 46 +-- arch/x86/kernel/acpi/boot.c | 3 + arch/x86/kernel/i8259.c | 38 +- arch/x86/kernel/setup.c | 5 - arch/x86/kernel/vmlinux.lds.S | 2 +- drivers/base/driver.c | 69 ++++ drivers/base/platform.c | 28 +- drivers/clk/clk.c | 21 +- drivers/dma/ste_dma40.c | 1 + drivers/gpu/drm/drm_dp_mst_topology.c | 6 +- drivers/i2c/busses/i2c-aspeed.c | 3 +- drivers/i2c/busses/i2c-stm32f7.c | 9 +- drivers/i2c/muxes/i2c-demux-pinctrl.c | 2 +- drivers/i2c/muxes/i2c-mux-gpmux.c | 2 +- drivers/i2c/muxes/i2c-mux-pinctrl.c | 2 +- drivers/iio/adc/exynos_adc.c | 24 +- drivers/iio/adc/xilinx-xadc-core.c | 179 ++++----- drivers/input/mouse/synaptics.c | 1 + drivers/input/rmi4/rmi_smbus.c | 50 ++- drivers/irqchip/irq-stm32-exti.c | 1 + drivers/mcb/mcb-lpc.c | 35 +- drivers/mcb/mcb-parse.c | 15 +- drivers/misc/fastrpc.c | 10 +- drivers/mmc/host/renesas_sdhi_core.c | 3 +- drivers/mmc/host/tmio_mmc.h | 2 +- drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 2 + drivers/net/ethernet/intel/i40e/i40e_txrx.c | 2 +- drivers/net/ethernet/intel/igb/igb_ethtool.c | 6 +- drivers/net/ethernet/intel/igc/igc_ethtool.c | 35 +- drivers/net/ethernet/realtek/r8169_main.c | 4 +- drivers/net/ethernet/toshiba/ps3_gelic_wireless.c | 2 +- drivers/net/gtp.c | 5 +- drivers/net/ieee802154/adf7242.c | 5 +- drivers/net/usb/r8152.c | 11 +- drivers/net/usb/smsc95xx.c | 4 +- drivers/nvmem/imx-ocotp.c | 6 +- drivers/pci/quirks.c | 8 +- drivers/platform/mellanox/mlxbf-tmfifo.c | 21 +- drivers/rpmsg/qcom_glink_native.c | 2 + drivers/rpmsg/rpmsg_core.c | 37 +- drivers/rpmsg/rpmsg_internal.h | 5 +- drivers/scsi/mpt3sas/mpt3sas_scsih.c | 4 +- drivers/spi/spi-npcm-fiu.c | 5 +- drivers/tty/serial/8250/8250_pci.c | 122 +++++- drivers/usb/gadget/legacy/raw_gadget.c | 26 +- drivers/usb/storage/unusual_cypress.h | 2 +- drivers/video/fbdev/aty/atyfb_base.c | 4 + drivers/video/fbdev/uvesafb.c | 2 +- drivers/virtio/virtio_balloon.c | 6 +- drivers/virtio/virtio_mmio.c | 19 +- fs/cifs/smbdirect.c | 14 +- fs/ext4/mballoc.c | 51 +-- fs/ext4/mballoc.h | 14 + fs/f2fs/gc.c | 3 +- include/linux/device/driver.h | 2 + include/linux/kasan.h | 6 +- include/linux/pci_ids.h | 1 + include/linux/platform_device.h | 6 +- include/linux/rpmsg.h | 14 +- include/uapi/linux/can/isotp.h | 25 +- include/uapi/linux/gtp.h | 2 +- kernel/events/core.c | 3 +- kernel/trace/trace_kprobe.c | 4 +- lib/kobject.c | 12 +- mm/kasan/report.c | 4 +- mm/page_alloc.c | 2 +- net/can/isotp.c | 446 +++++++++++++-------- net/core/neighbour.c | 67 ++-- net/ipv4/tcp_input.c | 9 +- net/netfilter/nfnetlink_log.c | 2 +- net/sched/cls_u32.c | 2 +- sound/hda/intel-dsp-config.c | 6 + sound/soc/codecs/rt5645.c | 2 + tools/objtool/check.c | 2 +- .../ftrace/test.d/kprobe/kprobe_non_uniq_symbol.tc | 13 + 80 files changed, 1053 insertions(+), 572 deletions(-)

1 year, 1 month

6
5
0 0

stable/linux-4.19.y baseline: 123 runs, 7 regressions (v4.19.298)

by kernelci.org bot

stable/linux-4.19.y baseline: 123 runs, 7 regressions (v4.19.298) Regressions Summary ------------------- platform | arch | lab | compiler | defconfig | regressions ------------------------+-------+--------------+----------+---------------------+------------ beaglebone-black | arm | lab-broonie | gcc-10 | omap2plus_defconfig | 1 beaglebone-black | arm | lab-cip | gcc-10 | omap2plus_defconfig | 1 meson-gxl-s905d-p230 | arm64 | lab-baylibre | gcc-10 | defconfig | 1 meson-gxm-q200 | arm64 | lab-baylibre | gcc-10 | defconfig | 1 sun50i-a64-bananapi-m64 | arm64 | lab-clabbe | gcc-10 | defconfig | 1 sun50i-a64-pine64-plus | arm64 | lab-baylibre | gcc-10 | defconfig | 1 sun50i-a64-pine64-plus | arm64 | lab-broonie | gcc-10 | defconfig | 1 Details: https://kernelci.org/test/job/stable/branch/linux-4.19.y/kernel/v4.19.298/p… Test: baseline Tree: stable Branch: linux-4.19.y Describe: v4.19.298 URL: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git SHA: aa8663e85da65e4b92ac82208059c173cb42c3bd Test Regressions ---------------- platform | arch | lab | compiler | defconfig | regressions ------------------------+-------+--------------+----------+---------------------+------------ beaglebone-black | arm | lab-broonie | gcc-10 | omap2plus_defconfig | 1 Details: https://kernelci.org/test/plan/id/654b68bc1f8293d26befcf02 Results: 41 PASS, 10 FAIL, 1 SKIP Full config: omap2plus_defconfig Compiler: gcc-10 (arm-linux-gnueabihf-gcc (Debian 10.2.1-6) 10.2.1 20210110) Plain log: https://storage.kernelci.org//stable/linux-4.19.y/v4.19.298/arm/omap2plus_d… HTML log: https://storage.kernelci.org//stable/linux-4.19.y/v4.19.298/arm/omap2plus_d… Rootfs: http://storage.kernelci.org/images/rootfs/buildroot/buildroot-baseline/2023… * baseline.bootrr.deferred-probe-empty: https://kernelci.org/test/case/id/654b68bc1f8293d26befcf38 new failure (last pass: v4.19.296) 2023-11-08T10:53:11.611055 + set +x<8>[ 17.633632] <LAVA_SIGNAL_ENDRUN 0_dmesg 225911_1.5.2.4.1> 2023-11-08T10:53:11.611372 2023-11-08T10:53:11.721847 / # # 2023-11-08T10:53:11.823841 export SHELL=/bin/sh 2023-11-08T10:53:11.824346 # 2023-11-08T10:53:11.925654 / # export SHELL=/bin/sh. /lava-225911/environment 2023-11-08T10:53:11.926263 2023-11-08T10:53:12.027953 / # . /lava-225911/environment/lava-225911/bin/lava-test-runner /lava-225911/1 2023-11-08T10:53:12.028824 2023-11-08T10:53:12.033438 / # /lava-225911/bin/lava-test-runner /lava-225911/1 ... (12 line(s) more) platform | arch | lab | compiler | defconfig | regressions ------------------------+-------+--------------+----------+---------------------+------------ beaglebone-black | arm | lab-cip | gcc-10 | omap2plus_defconfig | 1 Details: https://kernelci.org/test/plan/id/654b68b9ca167c2d34efcefd Results: 41 PASS, 10 FAIL, 1 SKIP Full config: omap2plus_defconfig Compiler: gcc-10 (arm-linux-gnueabihf-gcc (Debian 10.2.1-6) 10.2.1 20210110) Plain log: https://storage.kernelci.org//stable/linux-4.19.y/v4.19.298/arm/omap2plus_d… HTML log: https://storage.kernelci.org//stable/linux-4.19.y/v4.19.298/arm/omap2plus_d… Rootfs: http://storage.kernelci.org/images/rootfs/buildroot/buildroot-baseline/2023… * baseline.bootrr.deferred-probe-empty: https://kernelci.org/test/case/id/654b68b9ca167c2d34efcf26 new failure (last pass: v4.19.296) 2023-11-08T10:53:05.652906 + set +x<8>[ 10.583490] <LAVA_SIGNAL_ENDRUN 0_dmesg 1034998_1.5.2.4.1> 2023-11-08T10:53:05.653335 2023-11-08T10:53:05.767374 / # # 2023-11-08T10:53:05.869475 export SHELL=/bin/sh 2023-11-08T10:53:05.870123 # 2023-11-08T10:53:05.971440 / # export SHELL=/bin/sh. /lava-1034998/environment 2023-11-08T10:53:05.972096 2023-11-08T10:53:06.073399 / # . /lava-1034998/environment/lava-1034998/bin/lava-test-runner /lava-1034998/1 2023-11-08T10:53:06.074481 2023-11-08T10:53:06.081378 / # /lava-1034998/bin/lava-test-runner /lava-1034998/1 ... (12 line(s) more) platform | arch | lab | compiler | defconfig | regressions ------------------------+-------+--------------+----------+---------------------+------------ meson-gxl-s905d-p230 | arm64 | lab-baylibre | gcc-10 | defconfig | 1 Details: https://kernelci.org/test/plan/id/654b685f802936aa97efcef4 Results: 5 PASS, 1 FAIL, 1 SKIP Full config: defconfig Compiler: gcc-10 (aarch64-linux-gnu-gcc (Debian 10.2.1-6) 10.2.1 20210110) Plain log: https://storage.kernelci.org//stable/linux-4.19.y/v4.19.298/arm64/defconfig… HTML log: https://storage.kernelci.org//stable/linux-4.19.y/v4.19.298/arm64/defconfig… Rootfs: http://storage.kernelci.org/images/rootfs/buildroot/buildroot-baseline/2023… * baseline.bootrr.deferred-probe-empty: https://kernelci.org/test/case/id/654b685f802936aa97efcefd new failure (last pass: v4.19.297) 2023-11-08T10:51:55.809523 + set +x<8>[ 68.460772] <LAVA_SIGNAL_ENDRUN 0_dmesg 3827259_1.5.2.4.1> 2023-11-08T10:51:55.809693 2023-11-08T10:51:55.914901 / # # 2023-11-08T10:51:56.017216 export SHELL=/bin/sh 2023-11-08T10:51:56.017566 # 2023-11-08T10:51:56.017711 / # <4>[ 68.590924] ------------[ cut here ]------------ 2023-11-08T10:51:56.017818 <4>[ 68.590995] WARNING: CPU: 0 PID: 0 at drivers/mmc/host/meson-gx-mmc.c:1040 meson_mmc_irq+0x1c8/0x1dc 2023-11-08T10:51:56.017933 <4>[ 68.599484] Modules linked in: ipv6 dwmac_generic realtek meson_gxl meson_dw_hdmi dw_hdmi meson_rng meson_drm drm_kms_helper crc32_ce crct10dif_ce rng_core meson_ir drm rc_core dwmac_meson8b stmmac_platform stmmac pwm_meson meson_gxbb_wdt drm_panel_orientation_quirks adc_keys nvmem_meson_efuse input_polldev 2023-11-08T10:51:56.018043 <4>[ 68.626743] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 4.19.298 #1 2023-11-08T10:51:56.018142 <4>[ 68.634415] Hardware name: Amlogic Meson GXL (S905D) P230 Development Board (DT) ... (239 line(s) more) platform | arch | lab | compiler | defconfig | regressions ------------------------+-------+--------------+----------+---------------------+------------ meson-gxm-q200 | arm64 | lab-baylibre | gcc-10 | defconfig | 1 Details: https://kernelci.org/test/plan/id/654b680dfee4ff488eefcf1e Results: 5 PASS, 1 FAIL, 1 SKIP Full config: defconfig Compiler: gcc-10 (aarch64-linux-gnu-gcc (Debian 10.2.1-6) 10.2.1 20210110) Plain log: https://storage.kernelci.org//stable/linux-4.19.y/v4.19.298/arm64/defconfig… HTML log: https://storage.kernelci.org//stable/linux-4.19.y/v4.19.298/arm64/defconfig… Rootfs: http://storage.kernelci.org/images/rootfs/buildroot/buildroot-baseline/2023… * baseline.dmesg.emerg: https://kernelci.org/test/case/id/654b680dfee4ff488eefcf21 new failure (last pass: v4.19.288) 1 lines 2023-11-08T10:50:29.382229 <4>[ 49.606920] WARNING: CPU: 0 PID: 0 at drivers/mmc/host/meson-gx-mmc.c:1040 meson_mmc_irq+0x1c8/0x1dc 2023-11-08T10:50:29.422411 <4>[ 49.615392] Modules linked in: ipv6 realtek meson_gxl dwmac_generic meson_dw_hdmi meson_drm dw_hdmi drm_kms_helper drm meson_gxbb_wdt meson_ir crc32_ce dwmac_meson8b stmmac_platform adc_keys meson_rng input_polldev rc_core rng_core crct10dif_ce pwm_meson stmmac drm_panel_orientation_quirks nvmem_meson_efuse 2023-11-08T10:50:29.423836 <4>[ 49.642651] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 4.19.298 #1 2023-11-08T10:50:29.424473 <4>[ 49.650323] Hardware name: Amlogic Meson GXM (S912) Q200 Development Board (DT) 2023-11-08T10:50:29.424773 <4>[ 49.657828] pstate: 60000085 (nZCv daIf -PAN -UAO) 2023-11-08T10:50:29.425285 <4>[ 49.662830] pc : meson_mmc_irq+0x1c8/0x1dc 2023-11-08T10:50:29.425575 <4>[ 49.667142] lr : meson_mmc_irq+0x1c8/0x1dc 2023-11-08T10:50:29.425844 <4>[ 49.671453] sp : ffff000008003cc0 2023-11-08T10:50:29.464936 <4>[ 49.674989] x29: ffff000008003cc0 x28: 0000000000000080 2023-11-08T10:50:29.465715 <4>[ 49.680509] x27: 0000000000000001 x26: ffff000008ee7e88 ... (35 line(s) more) platform | arch | lab | compiler | defconfig | regressions ------------------------+-------+--------------+----------+---------------------+------------ sun50i-a64-bananapi-m64 | arm64 | lab-clabbe | gcc-10 | defconfig | 1 Details: https://kernelci.org/test/plan/id/654b67b9c7c551cab8efcf5f Results: 7 PASS, 11 FAIL, 1 SKIP Full config: defconfig Compiler: gcc-10 (aarch64-linux-gnu-gcc (Debian 10.2.1-6) 10.2.1 20210110) Plain log: https://storage.kernelci.org//stable/linux-4.19.y/v4.19.298/arm64/defconfig… HTML log: https://storage.kernelci.org//stable/linux-4.19.y/v4.19.298/arm64/defconfig… Rootfs: http://storage.kernelci.org/images/rootfs/buildroot/buildroot-baseline/2023… * baseline.bootrr.deferred-probe-empty: https://kernelci.org/test/case/id/654b67b9c7c551cab8efcf74 failing since 293 days (last pass: v4.19.268, first fail: v4.19.270) 2023-11-08T10:49:04.104119 + set +x 2023-11-08T10:49:04.106122 <8>[ 17.151504] <LAVA_SIGNAL_ENDRUN 0_dmesg 443196_1.5.2.4.1> 2023-11-08T10:49:04.213137 / # # 2023-11-08T10:49:04.314901 export SHELL=/bin/sh 2023-11-08T10:49:04.315525 # 2023-11-08T10:49:04.416593 / # export SHELL=/bin/sh. /lava-443196/environment 2023-11-08T10:49:04.417211 2023-11-08T10:49:04.417501 / # <3>[ 17.369743] brcmfmac: brcmf_sdio_htclk: HT Avail timeout (1000000): clkctl 0x50 2023-11-08T10:49:04.518524 . /lava-443196/environment/lava-443196/bin/lava-test-runner /lava-443196/1 2023-11-08T10:49:04.519958 ... (13 line(s) more) platform | arch | lab | compiler | defconfig | regressions ------------------------+-------+--------------+----------+---------------------+------------ sun50i-a64-pine64-plus | arm64 | lab-baylibre | gcc-10 | defconfig | 1 Details: https://kernelci.org/test/plan/id/654b6902e1eb52bc6eefcefb Results: 23 PASS, 16 FAIL, 1 SKIP Full config: defconfig Compiler: gcc-10 (aarch64-linux-gnu-gcc (Debian 10.2.1-6) 10.2.1 20210110) Plain log: https://storage.kernelci.org//stable/linux-4.19.y/v4.19.298/arm64/defconfig… HTML log: https://storage.kernelci.org//stable/linux-4.19.y/v4.19.298/arm64/defconfig… Rootfs: http://storage.kernelci.org/images/rootfs/buildroot/buildroot-baseline/2023… * baseline.bootrr.deferred-probe-empty: https://kernelci.org/test/case/id/654b6902e1eb52bc6eefcf15 failing since 275 days (last pass: v4.19.268, first fail: v4.19.272) 2023-11-08T10:53:29.618277 <8>[ 15.950879] <LAVA_SIGNAL_ENDRUN 0_dmesg 3827250_1.5.2.4.1> 2023-11-08T10:53:29.727512 / # # 2023-11-08T10:53:29.830914 export SHELL=/bin/sh 2023-11-08T10:53:29.832128 # 2023-11-08T10:53:29.934108 / # export SHELL=/bin/sh. /lava-3827250/environment 2023-11-08T10:53:29.935299 2023-11-08T10:53:30.037293 / # . /lava-3827250/environment/lava-3827250/bin/lava-test-runner /lava-3827250/1 2023-11-08T10:53:30.038958 2023-11-08T10:53:30.043873 / # /lava-3827250/bin/lava-test-runner /lava-3827250/1 2023-11-08T10:53:30.087582 + export 'TESTRUN_ID=1_bootrr' ... (11 line(s) more) platform | arch | lab | compiler | defconfig | regressions ------------------------+-------+--------------+----------+---------------------+------------ sun50i-a64-pine64-plus | arm64 | lab-broonie | gcc-10 | defconfig | 1 Details: https://kernelci.org/test/plan/id/654b67dfd67c14dfb1efcf17 Results: 23 PASS, 16 FAIL, 1 SKIP Full config: defconfig Compiler: gcc-10 (aarch64-linux-gnu-gcc (Debian 10.2.1-6) 10.2.1 20210110) Plain log: https://storage.kernelci.org//stable/linux-4.19.y/v4.19.298/arm64/defconfig… HTML log: https://storage.kernelci.org//stable/linux-4.19.y/v4.19.298/arm64/defconfig… Rootfs: http://storage.kernelci.org/images/rootfs/buildroot/buildroot-baseline/2023… * baseline.bootrr.deferred-probe-empty: https://kernelci.org/test/case/id/654b67dfd67c14dfb1efcf40 failing since 275 days (last pass: v4.19.268, first fail: v4.19.272) 2023-11-08T10:49:25.222159 <8>[ 15.955116] <LAVA_SIGNAL_ENDRUN 0_dmesg 225900_1.5.2.4.1> 2023-11-08T10:49:25.327743 / # # 2023-11-08T10:49:25.429722 export SHELL=/bin/sh 2023-11-08T10:49:25.430297 # 2023-11-08T10:49:25.531943 / # export SHELL=/bin/sh. /lava-225900/environment 2023-11-08T10:49:25.532475 2023-11-08T10:49:25.634111 / # . /lava-225900/environment/lava-225900/bin/lava-test-runner /lava-225900/1 2023-11-08T10:49:25.634825 2023-11-08T10:49:25.638933 / # /lava-225900/bin/lava-test-runner /lava-225900/1 2023-11-08T10:49:25.670355 + export 'TESTRUN_ID=1_bootrr' ... (11 line(s) more)

1 year, 1 month

1
0
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror November 2023