November 2023 - Linux-stable-mirror

[PATCH v1] usb: typec: class: fix typec_altmode_put_partner to put plugs

by RD Babiera

When releasing an Alt Mode, typec_altmode_release called by a plug device will not release the plug Alt Mode, meaning that a port will hold a reference to a plug Alt Mode even if the port partner is unregistered. As a result, typec_altmode_get_plug() can return an old plug altmode. Currently, typec_altmode_put_partner does not raise issues when unregistering a partner altmode. Looking at the current implementation: > static void typec_altmode_put_partner(struct altmode *altmode) > { > struct altmode *partner = altmode->partner; When called by the partner Alt Mode, then partner evaluates to the port's Alt Mode. When called by the plug Alt Mode, this also evaluates to the port's Alt Mode. > struct typec_altmode *adev; > > if (!partner) > return; > > adev = &partner->adev; This always evaluates to the port's typec_altmode > if (is_typec_plug(adev->dev.parent)) { > struct typec_plug *plug = to_typec_plug(adev->dev.parent); > > partner->plug[plug->index] = NULL; If the routine is called to put the plug's Alt mode and altmode refers to the plug, then adev referring to the port can never be a typec_plug. If altmode refers to the port, adev will always refer to the port partner, which runs the block below. > } else { > partner->partner = NULL; > } > put_device(&adev->dev); > } When calling typec_altmode_set_partner, a registration always calls get_device() on the port partner or the plug being registered, therefore typec_altmode_put_partner should put_device() the same device. By changing adev to altmode->adev, we make sure to put the correct device and properly unregister plugs. The reason port partners are always properly unregistered is because even when adev refers to the port, the port partner gets nullified in the else block. The port device currently gets put(). Fixes: 8a37d87d72f0 ("usb: typec: Bus type for alternate modes") Cc: stable(a)vger.kernel.org Signed-off-by: RD Babiera <rdbabiera(a)google.com> --- drivers/usb/typec/class.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/usb/typec/class.c b/drivers/usb/typec/class.c index 2e0451bd336e..803be1943445 100644 --- a/drivers/usb/typec/class.c +++ b/drivers/usb/typec/class.c @@ -267,7 +267,7 @@ static void typec_altmode_put_partner(struct altmode *altmode) if (!partner) return; - adev = &partner->adev; + adev = &altmode->adev; if (is_typec_plug(adev->dev.parent)) { struct typec_plug *plug = to_typec_plug(adev->dev.parent); base-commit: b85ea95d086471afb4ad062012a4d73cd328fa86 -- 2.43.0.rc1.413.gea7ed67945-goog

5 months

3
4
0 0

scsi regression that after months is still not addressed and now bothering 6.1.y users, too

by Thorsten Leemhuis

* @SCSI maintainers: could you please look into below please? * @Stable team: you might want to take a look as well and consider a revert in 6.1.y (yes, I know, those are normally avoided, but here it might make sense). Hi everyone! TLDR: I noticed a regression (Adaptec 71605z with aacraid sometimes hangs for a while) that was reported months ago already but is still not fixed. Not only that, it apparently more and more users run into this recently, as the culprit was recently integrated into 6.1.y; I wonder if it would be best to revert it there, unless a fix for mainline comes into reach soon. Details: Quite a few machines with Adaptec controllers seems to hang for a few tens of seconds to a few minutes before things start to work normally again for a while: https://bugzilla.kernel.org/show_bug.cgi?id=217599 That problem is apparently caused by 9dc704dcc09eae ("scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity") [v6.4-rc7]. That commit despite a warning of mine to Sasha recently made it into 6.1.53 -- and that way apparently recently reached more users recently, as quite a few joined that ticket. The culprit is authored by Sagar Biradar who unless I missed something never replied even once to the ticket or earlier mails about it. Lore has no messages from him since early June. Hannes Reinecke at least tried to fix it a few weeks ago (many thx), but that didn't work out (see the ticket for details). Since then things look stalled again, which is, ehh, unfortunate when it comes to regressions. Ciao, Thorsten (wearing his 'the Linux kernel's regression tracker' hat) -- Everything you wanna know about Linux kernel regression tracking: https://linux-regtracking.leemhuis.info/about/#tldr If I did something stupid, please tell me, as explained on that page.

5 months

7
11
0 0

[PATCH] SELinux: Check correct permissions for FS_IOC32_*

by Alfred Piccioni

Some ioctl commands do not require ioctl permission, but are routed to other permissions such as FILE_GETATTR or FILE_SETATTR. This routing is done by comparing the ioctl cmd to a set of 64-bit flags (FS_IOC_*). However, if a 32-bit process is running on a 64-bit kernel, it emmits 32-bit flags (FS_IOC32_*) for certain ioctl operations. These flags are being checked erroneoulsy, which leads to these ioctl operations being routed to the ioctl permission, rather than the correct file permissions. Two possible solutions exist: - Trim parameter "cmd" to a u16 so that only the last two bytes are checked in the case statement. - Explicitily add the FS_IOC32_* codes to the case statement. Solution 2 was chosen because it is a minimal explicit change. Solution 1 is a more elegant change, but is less explicit, as the switch statement appears to only check the FS_IOC_* codes upon first reading. Fixes: 0b24dcb7f2f7 ("Revert "selinux: simplify ioctl checking"") Signed-off-by: Alfred Piccioni <alpic(a)google.com> --- security/selinux/hooks.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c index d06e350fedee..bba83f437a1d 100644 --- a/security/selinux/hooks.c +++ b/security/selinux/hooks.c @@ -3644,11 +3644,15 @@ static int selinux_file_ioctl(struct file *file, unsigned int cmd, case FIGETBSZ: case FS_IOC_GETFLAGS: case FS_IOC_GETVERSION: + case FS_IOC32_GETFLAGS: + case FS_IOC32_GETVERSION: error = file_has_perm(cred, file, FILE__GETATTR); break; case FS_IOC_SETFLAGS: case FS_IOC_SETVERSION: + case FS_IOC32_SETFLAGS: + case FS_IOC32_SETVERSION: error = file_has_perm(cred, file, FILE__SETATTR); break; base-commit: 50a510a78287c15cee644f345ef8bac8977986a7 -- 2.42.0.283.g2d96d420d3-goog

5 months, 1 week

8
29
0 0

[PATCH] drm/vmwgfx: Keep a gem reference to user bos in surfaces

by Zack Rusin

From: Zack Rusin <zackr(a)vmware.com> Surfaces can be backed (i.e. stored in) memory objects (mob's) which are created and managed by the userspace as GEM buffers. Surfaces grab only a ttm reference which means that the gem object can be deleted underneath us, especially in cases where prime buffer export is used. Make sure that all userspace surfaces which are backed by gem objects hold a gem reference to make sure they're not deleted before vmw surfaces are done with them, which fixes: ------------[ cut here ]------------ refcount_t: underflow; use-after-free. WARNING: CPU: 2 PID: 2632 at lib/refcount.c:28 refcount_warn_saturate+0xfb/0x150 Modules linked in: overlay vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock snd_ens1371 snd_ac97_codec ac97_bus snd_pcm gameport> CPU: 2 PID: 2632 Comm: vmw_ref_count Not tainted 6.5.0-rc2-vmwgfx #1 Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020 RIP: 0010:refcount_warn_saturate+0xfb/0x150 Code: eb 9e 0f b6 1d 8b 5b a6 01 80 fb 01 0f 87 ba e4 80 00 83 e3 01 75 89 48 c7 c7 c0 3c f9 a3 c6 05 6f 5b a6 01 01 e8 15 81 98 ff <0f> 0b e9 6f ff ff ff 0f b> RSP: 0018:ffffbdc34344bba0 EFLAGS: 00010286 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000027 RDX: ffff960475ea1548 RSI: 0000000000000001 RDI: ffff960475ea1540 RBP: ffffbdc34344bba8 R08: 0000000000000003 R09: 65646e75203a745f R10: ffffffffa5b32b20 R11: 72657466612d6573 R12: ffff96037d6a6400 R13: ffff9603484805b0 R14: 000000000000000b R15: ffff9603bed06060 FS: 00007f5fd8520c40(0000) GS:ffff960475e80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5fda755000 CR3: 000000010d012005 CR4: 00000000003706e0 Call Trace: <TASK> ? show_regs+0x6e/0x80 ? refcount_warn_saturate+0xfb/0x150 ? __warn+0x91/0x150 ? refcount_warn_saturate+0xfb/0x150 ? report_bug+0x19d/0x1b0 ? handle_bug+0x46/0x80 ? exc_invalid_op+0x1d/0x80 ? asm_exc_invalid_op+0x1f/0x30 ? refcount_warn_saturate+0xfb/0x150 drm_gem_object_handle_put_unlocked+0xba/0x110 [drm] drm_gem_object_release_handle+0x6e/0x80 [drm] drm_gem_handle_delete+0x6a/0xc0 [drm] ? __pfx_vmw_bo_unref_ioctl+0x10/0x10 [vmwgfx] vmw_bo_unref_ioctl+0x33/0x40 [vmwgfx] drm_ioctl_kernel+0xbc/0x160 [drm] drm_ioctl+0x2d2/0x580 [drm] ? __pfx_vmw_bo_unref_ioctl+0x10/0x10 [vmwgfx] ? do_vmi_munmap+0xee/0x180 vmw_generic_ioctl+0xbd/0x180 [vmwgfx] vmw_unlocked_ioctl+0x19/0x20 [vmwgfx] __x64_sys_ioctl+0x99/0xd0 do_syscall_64+0x5d/0x90 ? syscall_exit_to_user_mode+0x2a/0x50 ? do_syscall_64+0x6d/0x90 ? handle_mm_fault+0x16e/0x2f0 ? exit_to_user_mode_prepare+0x34/0x170 ? irqentry_exit_to_user_mode+0xd/0x20 ? irqentry_exit+0x3f/0x50 ? exc_page_fault+0x8e/0x190 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 RIP: 0033:0x7f5fda51aaff Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <41> 89 c0 3d 00 f0 ff ff 7> RSP: 002b:00007ffd536a4d30 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007ffd536a4de0 RCX: 00007f5fda51aaff RDX: 00007ffd536a4de0 RSI: 0000000040086442 RDI: 0000000000000003 RBP: 0000000040086442 R08: 000055fa603ada50 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffd536a51b8 R13: 0000000000000003 R14: 000055fa5ebb4c80 R15: 00007f5fda90f040 </TASK> ---[ end trace 0000000000000000 ]--- A lot of the analyis on the bug was done by Murray McAllister and Ian Forbes. Reported-by: Murray McAllister <murray.mcallister(a)gmail.com> Cc: Ian Forbes <iforbes(a)vmware.com> Signed-off-by: Zack Rusin <zackr(a)vmware.com> Fixes: a950b989ea29 ("drm/vmwgfx: Do not drop the reference to the handle too soon") Cc: <stable(a)vger.kernel.org> # v6.2+ --- drivers/gpu/drm/vmwgfx/vmwgfx_bo.c | 7 +++--- drivers/gpu/drm/vmwgfx/vmwgfx_bo.h | 17 +++++++++---- drivers/gpu/drm/vmwgfx/vmwgfx_cotable.c | 6 ++--- drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 4 +++ drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 10 +++++--- drivers/gpu/drm/vmwgfx/vmwgfx_gem.c | 18 +++++++++++--- drivers/gpu/drm/vmwgfx/vmwgfx_kms.c | 6 ++--- drivers/gpu/drm/vmwgfx/vmwgfx_overlay.c | 2 +- drivers/gpu/drm/vmwgfx/vmwgfx_resource.c | 12 ++++----- drivers/gpu/drm/vmwgfx/vmwgfx_shader.c | 4 +-- drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 31 +++++++++--------------- 11 files changed, 68 insertions(+), 49 deletions(-) diff --git a/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c b/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c index c43853597776..2bfac3aad7b7 100644 --- a/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c +++ b/drivers/gpu/drm/vmwgfx/vmwgfx_bo.c @@ -34,6 +34,8 @@ static void vmw_bo_release(struct vmw_bo *vbo) { + WARN_ON(vbo->tbo.base.funcs && + kref_read(&vbo->tbo.base.refcount) != 0); vmw_bo_unmap(vbo); drm_gem_object_release(&vbo->tbo.base); } @@ -497,7 +499,7 @@ static int vmw_user_bo_synccpu_release(struct drm_file *filp, if (!(flags & drm_vmw_synccpu_allow_cs)) { atomic_dec(&vmw_bo->cpu_writers); } - vmw_user_bo_unref(vmw_bo); + vmw_user_bo_unref(&vmw_bo); } return ret; @@ -539,7 +541,7 @@ int vmw_user_bo_synccpu_ioctl(struct drm_device *dev, void *data, return ret; ret = vmw_user_bo_synccpu_grab(vbo, arg->flags); - vmw_user_bo_unref(vbo); + vmw_user_bo_unref(&vbo); if (unlikely(ret != 0)) { if (ret == -ERESTARTSYS || ret == -EBUSY) return -EBUSY; @@ -612,7 +614,6 @@ int vmw_user_bo_lookup(struct drm_file *filp, } *out = to_vmw_bo(gobj); - ttm_bo_get(&(*out)->tbo); return 0; } diff --git a/drivers/gpu/drm/vmwgfx/vmwgfx_bo.h b/drivers/gpu/drm/vmwgfx/vmwgfx_bo.h index 1d433fceed3d..0d496dc9c6af 100644 --- a/drivers/gpu/drm/vmwgfx/vmwgfx_bo.h +++ b/drivers/gpu/drm/vmwgfx/vmwgfx_bo.h @@ -195,12 +195,19 @@ static inline struct vmw_bo *vmw_bo_reference(struct vmw_bo *buf) return buf; } -static inline void vmw_user_bo_unref(struct vmw_bo *vbo) +static inline struct vmw_bo *vmw_user_bo_ref(struct vmw_bo *vbo) { - if (vbo) { - ttm_bo_put(&vbo->tbo); - drm_gem_object_put(&vbo->tbo.base); - } + drm_gem_object_get(&vbo->tbo.base); + return vbo; +} + +static inline void vmw_user_bo_unref(struct vmw_bo **buf) +{ + struct vmw_bo *tmp_buf = *buf; + + *buf = NULL; + if (tmp_buf) + drm_gem_object_put(&tmp_buf->tbo.base); } static inline struct vmw_bo *to_vmw_bo(struct drm_gem_object *gobj) diff --git a/drivers/gpu/drm/vmwgfx/vmwgfx_cotable.c b/drivers/gpu/drm/vmwgfx/vmwgfx_cotable.c index c0b24d1cacbf..a7c07692262b 100644 --- a/drivers/gpu/drm/vmwgfx/vmwgfx_cotable.c +++ b/drivers/gpu/drm/vmwgfx/vmwgfx_cotable.c @@ -432,7 +432,7 @@ static int vmw_cotable_resize(struct vmw_resource *res, size_t new_size) * for the new COTable. Initially pin the buffer object to make sure * we can use tryreserve without failure. */ - ret = vmw_bo_create(dev_priv, &bo_params, &buf); + ret = vmw_gem_object_create(dev_priv, &bo_params, &buf); if (ret) { DRM_ERROR("Failed initializing new cotable MOB.\n"); goto out_done; @@ -502,7 +502,7 @@ static int vmw_cotable_resize(struct vmw_resource *res, size_t new_size) vmw_resource_mob_attach(res); /* Let go of the old mob. */ - vmw_bo_unreference(&old_buf); + vmw_user_bo_unref(&old_buf); res->id = vcotbl->type; ret = dma_resv_reserve_fences(bo->base.resv, 1); @@ -521,7 +521,7 @@ static int vmw_cotable_resize(struct vmw_resource *res, size_t new_size) out_wait: ttm_bo_unpin(bo); ttm_bo_unreserve(bo); - vmw_bo_unreference(&buf); + vmw_user_bo_unref(&buf); out_done: MKS_STAT_TIME_POP(MKSSTAT_KERN_COTABLE_RESIZE); diff --git a/drivers/gpu/drm/vmwgfx/vmwgfx_drv.h b/drivers/gpu/drm/vmwgfx/vmwgfx_drv.h index 58bfdf203eca..3cd5090dedfc 100644 --- a/drivers/gpu/drm/vmwgfx/vmwgfx_drv.h +++ b/drivers/gpu/drm/vmwgfx/vmwgfx_drv.h @@ -853,6 +853,10 @@ static inline bool vmw_resource_mob_attached(const struct vmw_resource *res) /** * GEM related functionality - vmwgfx_gem.c */ +struct vmw_bo_params; +int vmw_gem_object_create(struct vmw_private *vmw, + struct vmw_bo_params *params, + struct vmw_bo **p_vbo); extern int vmw_gem_object_create_with_handle(struct vmw_private *dev_priv, struct drm_file *filp, uint32_t size, diff --git a/drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c b/drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c index 98e0723ca6f5..06b06350f61f 100644 --- a/drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c +++ b/drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c @@ -1151,7 +1151,7 @@ static int vmw_translate_mob_ptr(struct vmw_private *dev_priv, SVGAMobId *id, struct vmw_bo **vmw_bo_p) { - struct vmw_bo *vmw_bo; + struct vmw_bo *vmw_bo, *tmp_bo; uint32_t handle = *id; struct vmw_relocation *reloc; int ret; @@ -1164,7 +1164,8 @@ static int vmw_translate_mob_ptr(struct vmw_private *dev_priv, } vmw_bo_placement_set(vmw_bo, VMW_BO_DOMAIN_MOB, VMW_BO_DOMAIN_MOB); ret = vmw_validation_add_bo(sw_context->ctx, vmw_bo); - vmw_user_bo_unref(vmw_bo); + tmp_bo = vmw_bo; + vmw_user_bo_unref(&tmp_bo); if (unlikely(ret != 0)) return ret; @@ -1206,7 +1207,7 @@ static int vmw_translate_guest_ptr(struct vmw_private *dev_priv, SVGAGuestPtr *ptr, struct vmw_bo **vmw_bo_p) { - struct vmw_bo *vmw_bo; + struct vmw_bo *vmw_bo, *tmp_bo; uint32_t handle = ptr->gmrId; struct vmw_relocation *reloc; int ret; @@ -1220,7 +1221,8 @@ static int vmw_translate_guest_ptr(struct vmw_private *dev_priv, vmw_bo_placement_set(vmw_bo, VMW_BO_DOMAIN_GMR | VMW_BO_DOMAIN_VRAM, VMW_BO_DOMAIN_GMR | VMW_BO_DOMAIN_VRAM); ret = vmw_validation_add_bo(sw_context->ctx, vmw_bo); - vmw_user_bo_unref(vmw_bo); + tmp_bo = vmw_bo; + vmw_user_bo_unref(&tmp_bo); if (unlikely(ret != 0)) return ret; diff --git a/drivers/gpu/drm/vmwgfx/vmwgfx_gem.c b/drivers/gpu/drm/vmwgfx/vmwgfx_gem.c index c0da89e16e6f..8b1eb0061610 100644 --- a/drivers/gpu/drm/vmwgfx/vmwgfx_gem.c +++ b/drivers/gpu/drm/vmwgfx/vmwgfx_gem.c @@ -111,6 +111,20 @@ static const struct drm_gem_object_funcs vmw_gem_object_funcs = { .vm_ops = &vmw_vm_ops, }; +int vmw_gem_object_create(struct vmw_private *vmw, + struct vmw_bo_params *params, + struct vmw_bo **p_vbo) +{ + int ret = vmw_bo_create(vmw, params, p_vbo); + + if (ret != 0) + goto out_no_bo; + + (*p_vbo)->tbo.base.funcs = &vmw_gem_object_funcs; +out_no_bo: + return ret; +} + int vmw_gem_object_create_with_handle(struct vmw_private *dev_priv, struct drm_file *filp, uint32_t size, @@ -126,12 +140,10 @@ int vmw_gem_object_create_with_handle(struct vmw_private *dev_priv, .pin = false }; - ret = vmw_bo_create(dev_priv, &params, p_vbo); + ret = vmw_gem_object_create(dev_priv, &params, p_vbo); if (ret != 0) goto out_no_bo; - (*p_vbo)->tbo.base.funcs = &vmw_gem_object_funcs; - ret = drm_gem_handle_create(filp, &(*p_vbo)->tbo.base, handle); out_no_bo: return ret; diff --git a/drivers/gpu/drm/vmwgfx/vmwgfx_kms.c b/drivers/gpu/drm/vmwgfx/vmwgfx_kms.c index 1489ad73c103..818b7f109f53 100644 --- a/drivers/gpu/drm/vmwgfx/vmwgfx_kms.c +++ b/drivers/gpu/drm/vmwgfx/vmwgfx_kms.c @@ -1471,8 +1471,8 @@ static int vmw_create_bo_proxy(struct drm_device *dev, /* Reserve and switch the backing mob. */ mutex_lock(&res->dev_priv->cmdbuf_mutex); (void) vmw_resource_reserve(res, false, true); - vmw_bo_unreference(&res->guest_memory_bo); - res->guest_memory_bo = vmw_bo_reference(bo_mob); + vmw_user_bo_unref(&res->guest_memory_bo); + res->guest_memory_bo = vmw_user_bo_ref(bo_mob); res->guest_memory_offset = 0; vmw_resource_unreserve(res, false, false, false, NULL, 0); mutex_unlock(&res->dev_priv->cmdbuf_mutex); @@ -1666,7 +1666,7 @@ static struct drm_framebuffer *vmw_kms_fb_create(struct drm_device *dev, err_out: /* vmw_user_lookup_handle takes one ref so does new_fb */ if (bo) - vmw_user_bo_unref(bo); + vmw_user_bo_unref(&bo); if (surface) vmw_surface_unreference(&surface); diff --git a/drivers/gpu/drm/vmwgfx/vmwgfx_overlay.c b/drivers/gpu/drm/vmwgfx/vmwgfx_overlay.c index fb85f244c3d0..c45b4724e414 100644 --- a/drivers/gpu/drm/vmwgfx/vmwgfx_overlay.c +++ b/drivers/gpu/drm/vmwgfx/vmwgfx_overlay.c @@ -451,7 +451,7 @@ int vmw_overlay_ioctl(struct drm_device *dev, void *data, ret = vmw_overlay_update_stream(dev_priv, buf, arg, true); - vmw_user_bo_unref(buf); + vmw_user_bo_unref(&buf); out_unlock: mutex_unlock(&overlay->mutex); diff --git a/drivers/gpu/drm/vmwgfx/vmwgfx_resource.c b/drivers/gpu/drm/vmwgfx/vmwgfx_resource.c index 71eeabf001c8..ca300c7427d2 100644 --- a/drivers/gpu/drm/vmwgfx/vmwgfx_resource.c +++ b/drivers/gpu/drm/vmwgfx/vmwgfx_resource.c @@ -141,7 +141,7 @@ static void vmw_resource_release(struct kref *kref) if (res->coherent) vmw_bo_dirty_release(res->guest_memory_bo); ttm_bo_unreserve(bo); - vmw_bo_unreference(&res->guest_memory_bo); + vmw_user_bo_unref(&res->guest_memory_bo); } if (likely(res->hw_destroy != NULL)) { @@ -338,7 +338,7 @@ static int vmw_resource_buf_alloc(struct vmw_resource *res, return 0; } - ret = vmw_bo_create(res->dev_priv, &bo_params, &gbo); + ret = vmw_gem_object_create(res->dev_priv, &bo_params, &gbo); if (unlikely(ret != 0)) goto out_no_bo; @@ -457,11 +457,11 @@ void vmw_resource_unreserve(struct vmw_resource *res, vmw_resource_mob_detach(res); if (res->coherent) vmw_bo_dirty_release(res->guest_memory_bo); - vmw_bo_unreference(&res->guest_memory_bo); + vmw_user_bo_unref(&res->guest_memory_bo); } if (new_guest_memory_bo) { - res->guest_memory_bo = vmw_bo_reference(new_guest_memory_bo); + res->guest_memory_bo = vmw_user_bo_ref(new_guest_memory_bo); /* * The validation code should already have added a @@ -551,7 +551,7 @@ vmw_resource_check_buffer(struct ww_acquire_ctx *ticket, ttm_bo_put(val_buf->bo); val_buf->bo = NULL; if (guest_memory_dirty) - vmw_bo_unreference(&res->guest_memory_bo); + vmw_user_bo_unref(&res->guest_memory_bo); return ret; } @@ -727,7 +727,7 @@ int vmw_resource_validate(struct vmw_resource *res, bool intr, goto out_no_validate; else if (!res->func->needs_guest_memory && res->guest_memory_bo) { WARN_ON_ONCE(vmw_resource_mob_attached(res)); - vmw_bo_unreference(&res->guest_memory_bo); + vmw_user_bo_unref(&res->guest_memory_bo); } return 0; diff --git a/drivers/gpu/drm/vmwgfx/vmwgfx_shader.c b/drivers/gpu/drm/vmwgfx/vmwgfx_shader.c index 1e81ff2422cf..a01ca3226d0a 100644 --- a/drivers/gpu/drm/vmwgfx/vmwgfx_shader.c +++ b/drivers/gpu/drm/vmwgfx/vmwgfx_shader.c @@ -180,7 +180,7 @@ static int vmw_gb_shader_init(struct vmw_private *dev_priv, res->guest_memory_size = size; if (byte_code) { - res->guest_memory_bo = vmw_bo_reference(byte_code); + res->guest_memory_bo = vmw_user_bo_ref(byte_code); res->guest_memory_offset = offset; } shader->size = size; @@ -809,7 +809,7 @@ static int vmw_shader_define(struct drm_device *dev, struct drm_file *file_priv, shader_type, num_input_sig, num_output_sig, tfile, shader_handle); out_bad_arg: - vmw_user_bo_unref(buffer); + vmw_user_bo_unref(&buffer); return ret; } diff --git a/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c b/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c index 5db403ee8261..3829be282ff0 100644 --- a/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c +++ b/drivers/gpu/drm/vmwgfx/vmwgfx_surface.c @@ -686,9 +686,6 @@ static void vmw_user_surface_base_release(struct ttm_base_object **p_base) container_of(base, struct vmw_user_surface, prime.base); struct vmw_resource *res = &user_srf->srf.res; - if (res->guest_memory_bo) - drm_gem_object_put(&res->guest_memory_bo->tbo.base); - *p_base = NULL; vmw_resource_unreference(&res); } @@ -855,23 +852,21 @@ int vmw_surface_define_ioctl(struct drm_device *dev, void *data, * expect a backup buffer to be present. */ if (dev_priv->has_mob && req->shareable) { - uint32_t backup_handle; - - ret = vmw_gem_object_create_with_handle(dev_priv, - file_priv, - res->guest_memory_size, - &backup_handle, - &res->guest_memory_bo); + struct vmw_bo_params params = { + .domain = VMW_BO_DOMAIN_SYS, + .busy_domain = VMW_BO_DOMAIN_SYS, + .bo_type = ttm_bo_type_device, + .size = res->guest_memory_size, + .pin = false + }; + + ret = vmw_gem_object_create(dev_priv, + &params, + &res->guest_memory_bo); if (unlikely(ret != 0)) { vmw_resource_unreference(&res); goto out_unlock; } - vmw_bo_reference(res->guest_memory_bo); - /* - * We don't expose the handle to the userspace and surface - * already holds a gem reference - */ - drm_gem_handle_delete(file_priv, backup_handle); } tmp = vmw_resource_reference(&srf->res); @@ -1512,7 +1507,7 @@ vmw_gb_surface_define_internal(struct drm_device *dev, if (ret == 0) { if (res->guest_memory_bo->tbo.base.size < res->guest_memory_size) { VMW_DEBUG_USER("Surface backup buffer too small.\n"); - vmw_bo_unreference(&res->guest_memory_bo); + vmw_user_bo_unref(&res->guest_memory_bo); ret = -EINVAL; goto out_unlock; } else { @@ -1526,8 +1521,6 @@ vmw_gb_surface_define_internal(struct drm_device *dev, res->guest_memory_size, &backup_handle, &res->guest_memory_bo); - if (ret == 0) - vmw_bo_reference(res->guest_memory_bo); } if (unlikely(ret != 0)) { -- 2.39.2

5 months, 1 week

4
3
0 0

[PATCH 6.6 000/530] 6.6.3-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.6.3 release. There are 530 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 26 Nov 2023 17:19:17 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.3-rc1.… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.6.3-rc1 Lewis Huang <lewis.huang(a)amd.com> drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox Paul Hsieh <paul.hsieh(a)amd.com> drm/amd/display: Clear dpcd_sink_ext_caps if not set Tianci Yin <tianci.yin(a)amd.com> drm/amd/display: Enable fast plane updates on DCN3.2 and above Mario Limonciello <mario.limonciello(a)amd.com> drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer() Fangzhi Zuo <jerry.zuo(a)amd.com> drm/amd/display: Fix DSC not Enabled on Direct MST Sink Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> drm/amd/display: Guard against invalid RPTR/WPTR being set Felix Kuehling <Felix.Kuehling(a)amd.com> drm/amdgpu: Fix possible null pointer dereference Christian König <christian.koenig(a)amd.com> drm/amdgpu: lower CS errors to debug severity Christian König <christian.koenig(a)amd.com> drm/amdgpu: fix error handling in amdgpu_bo_list_get() Christian König <christian.koenig(a)amd.com> drm/amdgpu: fix error handling in amdgpu_vm_init Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: don't use ATRM for external devices Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: add a retry for IP discovery init Tim Huang <Tim.Huang(a)amd.com> drm/amdgpu: fix GRBM read timeout when do mes_self_test Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: don't use pci_is_thunderbolt_attached() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/smu13: drop compute workload workaround Ma Jun <Jun.Ma2(a)amd.com> drm/amd/pm: Fix error of MACO flag setting code Nirmoy Das <nirmoy.das(a)intel.com> drm/i915: Flush WC GGTT only on required platforms Kunwu Chan <chentao(a)kylinos.cn> drm/i915: Fix potential spectre vulnerability Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915: Bump GLK CDCLK frequency when driving multiple pipes Chaitanya Kumar Borah <chaitanya.kumar.borah(a)intel.com> drm/i915/mtl: Support HBR3 rate with C10 phy and eDP in MTL Gabe Teeger <gabe.teeger(a)amd.com> drm/amd/display: Add Null check for DPP resource Josh Poimboeuf <jpoimboe(a)kernel.org> x86/srso: Move retbleed IBPB check into existing 'has_microcode' code block Jani Nikula <jani.nikula(a)intel.com> drm: bridge: it66121: ->get_edid callback must not return err pointers Bas Nieuwenhuizen <bas(a)basnieuwenhuizen.nl> drm/amd/pm: Handle non-terminated overdrive commands. Brian Foster <bfoster(a)redhat.com> ext4: fix racy may inline data check in dio write Jan Kara <jack(a)suse.cz> ext4: properly sync file size update after O_SYNC direct IO Kemeng Shi <shikemeng(a)huaweicloud.com> ext4: add missed brelse in update_backups Kemeng Shi <shikemeng(a)huaweicloud.com> ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks Zhang Yi <yi.zhang(a)huawei.com> ext4: correct the start block of counting reserved clusters Kemeng Shi <shikemeng(a)huaweicloud.com> ext4: correct return value of ext4_convert_meta_bg Ojaswin Mujoo <ojaswin(a)linux.ibm.com> ext4: mark buffer new if it is unwritten to avoid stale data exposure Kemeng Shi <shikemeng(a)huaweicloud.com> ext4: correct offset of gdb backup in non meta_bg group to update_backups Max Kellermann <max.kellermann(a)ionos.com> ext4: apply umask if ACL support is disabled Zhang Yi <yi.zhang(a)huawei.com> ext4: make sure allocate pending entry not fail Wang Jianjian <wangjianjian0(a)foxmail.com> ext4: no need to generate from free list in mballoc Baokun Li <libaokun1(a)huawei.com> ext4: fix race between writepages and remount Heiner Kallweit <hkallweit1(a)gmail.com> Revert "net: r8169: Disable multicast filter for RTL8168H and RTL8107E" Jiri Kosina <jkosina(a)suse.cz> Revert "HID: logitech-dj: Add support for a new lightspeed receiver iteration" Andrey Konovalov <andrey.konovalov(a)linaro.org> media: qcom: camss: Fix csid-gen2 for test pattern generator Bryan O'Donoghue <bryan.odonoghue(a)linaro.org> media: qcom: camss: Fix invalid clock enable bit disjunction Bryan O'Donoghue <bryan.odonoghue(a)linaro.org> media: qcom: camss: Fix set CSI2_RX_CFG1_VC_MODE when VC is greater than 3 Bryan O'Donoghue <bryan.odonoghue(a)linaro.org> media: qcom: camss: Fix missing vfe_lite clocks check Bryan O'Donoghue <bryan.odonoghue(a)linaro.org> media: qcom: camss: Fix VFE-480 vfe_disable_output() Bryan O'Donoghue <bryan.odonoghue(a)linaro.org> media: qcom: camss: Fix VFE-17x vfe_disable_output() Bryan O'Donoghue <bryan.odonoghue(a)linaro.org> media: qcom: camss: Fix vfe_get() error jump Bryan O'Donoghue <bryan.odonoghue(a)linaro.org> media: qcom: camss: Fix pm_domain_on sequence in probe Victor Shih <victor.shih(a)genesyslogic.com.tw> mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of AER ChunHao Lin <hau(a)realtek.com> r8169: add handling DASH when DASH is disabled ChunHao Lin <hau(a)realtek.com> r8169: fix network lost after resume on DASH systems Paolo Abeni <pabeni(a)redhat.com> selftests: mptcp: fix fastclose with csum failure Paolo Abeni <pabeni(a)redhat.com> mptcp: fix setsockopt(IP_TOS) subflow locking Geliang Tang <geliang.tang(a)suse.com> mptcp: add validity check for sending RM_ADDR Paolo Abeni <pabeni(a)redhat.com> mptcp: deal with large GSO size Roman Gushchin <roman.gushchin(a)linux.dev> mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors Stefan Roesch <shr(a)devkernel.io> mm: fix for negative counter: nr_file_hugepages Victor Shih <victor.shih(a)genesyslogic.com.tw> mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM L1.2 Nam Cao <namcaov(a)gmail.com> riscv: kprobes: allow writing to x0 Song Shuai <suagrfillet(a)gmail.com> riscv: correct pt_level name via pgtable_l5/4_enabled Song Shuai <suagrfillet(a)gmail.com> riscv: mm: Update the comment of CONFIG_PAGE_OFFSET Nam Cao <namcaov(a)gmail.com> riscv: put interrupt entries into .irqentry.text Minda Chen <minda.chen(a)starfivetech.com> riscv: Using TOOLCHAIN_HAS_ZIHINTPAUSE marco replace zihintpause Petr Tesarik <petr.tesarik1(a)huawei-partners.com> swiotlb: fix out-of-bounds TLB allocations with CONFIG_SWIOTLB_DYNAMIC Petr Tesarik <petrtesarik(a)huaweicloud.com> swiotlb: do not free decrypted pages if dynamic Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing: fprobe-event: Fix to check tracepoint event and return Nathan Chancellor <nathan(a)kernel.org> LoongArch: Mark __percpu functions as always inline Chuck Lever <chuck.lever(a)oracle.com> NFSD: Update nfsd_cache_append() to use xdr_stream Mahmoud Adam <mngyadam(a)amazon.com> nfsd: fix file memleak on client_opens_release Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: don't use blocking calls from tasklets Mikulas Patocka <mpatocka(a)redhat.com> dm-bufio: fix no-sleep mode Jani Nikula <jani.nikula(a)intel.com> drm/mediatek/dp: fix memory leak on ->get_edid callback error path Jani Nikula <jani.nikula(a)intel.com> drm/mediatek/dp: fix memory leak on ->get_edid callback audio detection Sakari Ailus <sakari.ailus(a)linux.intel.com> media: ccs: Correctly initialise try compose rectangle Vikash Garodia <quic_vgarodia(a)quicinc.com> media: venus: hfi: add checks to handle capabilities from firmware Vikash Garodia <quic_vgarodia(a)quicinc.com> media: venus: hfi: fix the check to handle session buffer requirement Vikash Garodia <quic_vgarodia(a)quicinc.com> media: venus: hfi_parser: Add check to keep the number of codecs within range Sean Young <sean(a)mess.org> media: sharp: fix sharp encoding Sean Young <sean(a)mess.org> media: lirc: drop trailing space from scancode transmit Jaegeuk Kim <jaegeuk(a)kernel.org> f2fs: split initial and dynamic conditions for extent_cache Su Hui <suhui(a)nfschina.com> f2fs: avoid format-overflow warning Jaegeuk Kim <jaegeuk(a)kernel.org> f2fs: set the default compress_level on ioctl Jaegeuk Kim <jaegeuk(a)kernel.org> f2fs: do not return EFSCORRUPTED, but try to run online repair Heiner Kallweit <hkallweit1(a)gmail.com> i2c: i801: fix potential race in i801_block_transaction_byte_by_byte Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: don't withdraw if init_threads() got interrupted Klaus Kudielka <klaus.kudielka(a)gmail.com> net: phylink: initialize carrier state at creation Alexander Sverdlin <alexander.sverdlin(a)siemens.com> net: dsa: lan9303: consequently nested-lock physical MDIO Andrew Lunn <andrew(a)lunn.ch> net: ethtool: Fix documentation of ethtool_sprintf() Harald Freudenberger <freude(a)linux.ibm.com> s390/ap: fix AP bus crash on early config change callback invocation Tam Nguyen <tamnguyenchi(a)os.amperecomputing.com> i2c: designware: Disable TX_EMPTY irq while waiting for block length byte Darren Hart <darren(a)os.amperecomputing.com> sbsa_gwdt: Calculate timeout with 64-bit math Ondrej Mosnacek <omosnace(a)redhat.com> lsm: fix default return value for inode_getsecctx Ondrej Mosnacek <omosnace(a)redhat.com> lsm: fix default return value for vm_enough_memory Robert Marko <robert.marko(a)sartura.hr> Revert "i2c: pxa: move to generic GPIO recovery" Johnathan Mantey <johnathanx.mantey(a)intel.com> Revert ncsi: Propagate carrier gain/loss events to the NCSI controller Stefan Binding <sbinding(a)opensource.cirrus.com> ALSA: hda/realtek: Add quirks for HP Laptops Matus Malych <matus(a)malych.org> ALSA: hda/realtek: Enable Mute LED on HP 255 G10 Chandradeep Dey <codesigning(a)chandradeepdey.com> ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC Kailang Yang <kailang(a)realtek.com> ALSA: hda/realtek - Add Dell ALC295 to pin fall back table Eymen Yigit <eymenyg01(a)gmail.com> ALSA: hda/realtek: Enable Mute LED on HP 255 G8 Takashi Iwai <tiwai(a)suse.de> ALSA: info: Fix potential deadlock at disconnection Naohiro Aota <naohiro.aota(a)wdc.com> btrfs: zoned: wait for data BG to be finished on direct IO allocation Dave Chinner <dchinner(a)redhat.com> xfs: recovery should not clear di_flushiter unconditionally David Howells <dhowells(a)redhat.com> cifs: Fix encryption of cleared, but unset rq_iter data buffers Shyam Prasad N <sprasad(a)microsoft.com> cifs: do not pass cifs_sb when trying to add channels Shyam Prasad N <sprasad(a)microsoft.com> cifs: do not reset chan_max if multichannel is not supported at mount Shyam Prasad N <sprasad(a)microsoft.com> cifs: force interface update before a fresh session setup Shyam Prasad N <sprasad(a)microsoft.com> cifs: reconnect helper should set reconnect for the right channel Paulo Alcantara <pc(a)manguebit.com> smb: client: fix mount when dns_resolver key is not available Paulo Alcantara <pc(a)manguebit.com> smb: client: fix potential deadlock when releasing mids Paulo Alcantara <pc(a)manguebit.com> smb: client: fix use-after-free in smb2_query_info_compound() Paulo Alcantara <pc(a)manguebit.com> smb: client: fix use-after-free bug in cifs_debug_data_proc_show() Steve French <stfrench(a)microsoft.com> smb3: fix caching of ctime on setxattr Steve French <stfrench(a)microsoft.com> smb3: allow dumping session and tcon id to improve stats analysis and debugging Steve French <stfrench(a)microsoft.com> smb3: fix touch -h of symlink Steve French <stfrench(a)microsoft.com> smb3: fix creating FIFOs when mounting with "sfu" mount option Basavaraj Natikar <Basavaraj.Natikar(a)amd.com> xhci: Enable RPM on controllers that support low-power states Helge Deller <deller(a)gmx.de> parisc: fix mmap_base calculation when stack grows upwards Helge Deller <deller(a)gmx.de> parisc/power: Fix power soft-off when running on qemu Helge Deller <deller(a)gmx.de> parisc/pgtable: Do not drop upper 5 address bits of physical address Helge Deller <deller(a)gmx.de> parisc: Prevent booting 64-bit kernels on PA1.x machines Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> selftests/resctrl: Extend signal handler coverage to unmount on receiving signal Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> selftests/resctrl: Make benchmark command const and build it with pointers Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> selftests/resctrl: Simplify span lifetime Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> selftests/resctrl: Remove bw_report and bm_type from main() Joel Fernandes (Google) <joel(a)joelfernandes.org> rcutorture: Fix stuttering races and other issues Paul E. McKenney <paulmck(a)kernel.org> torture: Make torture_hrtimeout_ns() take an hrtimer mode parameter Muhammad Ahmed <ahmed.ahmed(a)amd.com> drm/amd/display: enable dsc_clk even if dsc_pg disabled Guan Wentao <guanwentao(a)uniontech.com> Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE Masum Reza <masumrezarock100(a)gmail.com> Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables John Johansen <john.johansen(a)canonical.com> apparmor: Fix regression in mount mediation John Johansen <john.johansen(a)canonical.com> apparmor: pass cred through to audit info. John Johansen <john.johansen(a)canonical.com> apparmor: rename audit_data->label to audit_data->subj_label John Johansen <john.johansen(a)canonical.com> apparmor: combine common_audit_data and apparmor_audit_data Gaosheng Cui <cuigaosheng1(a)huawei.com> apparmor: Fix kernel-doc warnings in apparmor/policy.c Gaosheng Cui <cuigaosheng1(a)huawei.com> apparmor: Fix kernel-doc warnings in apparmor/resource.c Gaosheng Cui <cuigaosheng1(a)huawei.com> apparmor: Fix kernel-doc warnings in apparmor/lib.c Gaosheng Cui <cuigaosheng1(a)huawei.com> apparmor: Fix kernel-doc warnings in apparmor/audit.c Dan Williams <dan.j.williams(a)intel.com> cxl/port: Fix delete_endpoint() vs parent unregistration race Jim Harris <jim.harris(a)samsung.com> cxl/region: Fix x1 root-decoder granularity calculations Frank Li <Frank.Li(a)nxp.com> i3c: master: svc: fix random hot join failure since timeout error Frank Li <Frank.Li(a)nxp.com> i3c: master: svc: fix SDA keep low when polling IBIWON timeout happen Frank Li <Frank.Li(a)nxp.com> i3c: master: svc: fix check wrong status register in irq handler Frank Li <Frank.Li(a)nxp.com> i3c: master: svc: fix ibi may not return mandatory data byte Frank Li <Frank.Li(a)nxp.com> i3c: master: svc: fix wrong data return when IBI happen during start frame Frank Li <Frank.Li(a)nxp.com> i3c: master: svc: fix race condition in ibi work thread Joshua Yeong <joshua.yeong(a)starfivetech.com> i3c: master: cdns: Fix reading status register Jim Harris <jim.harris(a)samsung.com> cxl/region: Do not try to cleanup after cxl_region_setup_targets() fails Linus Walleij <linus.walleij(a)linaro.org> mtd: cfi_cmdset_0001: Byte swap OTP info Florent Revest <revest(a)chromium.org> mm: make PR_MDWE_REFUSE_EXEC_GAIN an unsigned long Zi Yan <ziy(a)nvidia.com> mm/memory_hotplug: use pfn math in place of direct struct page manipulation Zi Yan <ziy(a)nvidia.com> mm/hugetlb: use nth_page() in place of direct struct page manipulation Zi Yan <ziy(a)nvidia.com> mm/cma: use nth_page() in place of direct struct page manipulation Heiko Carstens <hca(a)linux.ibm.com> s390/cmma: fix handling of swapper_pg_dir and invalid_pg_dir Heiko Carstens <hca(a)linux.ibm.com> s390/cmma: fix detection of DAT pages Heiko Carstens <hca(a)linux.ibm.com> s390/cmma: fix initial kernel address space page table walk Heiko Carstens <hca(a)linux.ibm.com> s390/mm: add missing arch_set_page_dat() call to gmap allocations Heiko Carstens <hca(a)linux.ibm.com> s390/mm: add missing arch_set_page_dat() call to vmem_crst_alloc() Alain Volmat <alain.volmat(a)foss.st.com> dmaengine: stm32-mdma: correct desc prep when channel running Gaurav Batra <gbatra(a)linux.vnet.ibm.com> powerpc/pseries/iommu: enable_ddw incorrectly returns direct mapping for SR-IOV device Sanjuán García, Jorge <Jorge.SanjuanGarcia(a)duagon.com> mcb: fix error handling for different scenarios when parsing Saravana Kannan <saravanak(a)google.com> driver core: Release all resources during unbind before updating device links Steven Rostedt (Google) <rostedt(a)goodmis.org> tracing: Have the user copy of synthetic event address use correct context Tiezhu Yang <yangtiezhu(a)loongson.cn> selftests/clone3: Fix broken test under !CONFIG_TIME_NS Benjamin Bara <benjamin.bara(a)skidata.com> i2c: core: Run atomic i2c xfer when !preemptible Zi Yan <ziy(a)nvidia.com> mips: use nth_page() in place of direct struct page manipulation Zi Yan <ziy(a)nvidia.com> fs: use nth_page() in place of direct struct page manipulation Ben Wolsieffer <ben.wolsieffer(a)hefring.com> scripts/gdb/vmalloc: disable on no-MMU Benjamin Bara <benjamin.bara(a)skidata.com> kernel/reboot: emergency_restart: Set correct system_state Eric Biggers <ebiggers(a)google.com> quota: explicitly forbid quota files from being encrypted Zhihao Cheng <chengzhihao1(a)huawei.com> jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> ASoC: codecs: wsa-macro: fix uninitialized stack variables with name prefix Jamie Lentin <jm(a)lentin.co.uk> hid: lenovo: Resend all settings on reset_resume for compact keyboards Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> selftests/resctrl: Reduce failures due to outliers in MBA/MBM tests Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> selftests/resctrl: Fix feature checks Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> selftests/resctrl: Refactor feature check to use resource and feature name Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> selftests/resctrl: Move _GNU_SOURCE define into Makefile Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> selftests/resctrl: Remove duplicate feature check from CMT test Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> selftests/resctrl: Fix uninitialized .sa_flags Srinivas Kandagatla <srinivas.kandagatla(a)linaro.org> ASoC: codecs: wsa883x: make use of new mute_unmute_on_trigger flag Srinivas Kandagatla <srinivas.kandagatla(a)linaro.org> ASoC: soc-dai: add flag to mute and unmute stream during trigger Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: split async and sync catchall in two functions Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: remove catchall element in GC sync path Mimi Zohar <zohar(a)linux.ibm.com> ima: detect changes to the backing overlay file Amir Goldstein <amir73il(a)gmail.com> ima: annotate iint mutex to avoid lockdep false positive warnings Johan Hovold <johan+linaro(a)kernel.org> mfd: qcom-spmi-pmic: Fix revid implementation Johan Hovold <johan+linaro(a)kernel.org> mfd: qcom-spmi-pmic: Fix reference leaks in revid helper Christian Marangi <ansuelsmth(a)gmail.com> leds: trigger: netdev: Move size check in set_device_name Vignesh Viswanathan <quic_viswanat(a)quicinc.com> arm64: dts: qcom: ipq6018: Fix tcsr_mutex register size Vignesh Viswanathan <quic_viswanat(a)quicinc.com> arm64: dts: qcom: ipq9574: Fix hwlock index for SMEM Vasily Khoruzhick <anarsoul(a)gmail.com> ACPI: FPDT: properly handle invalid FPDT subtables Kathiravan Thirumoorthy <quic_kathirav(a)quicinc.com> firmware: qcom_scm: use 64-bit calling convention only when client is 64-bit Vignesh Viswanathan <quic_viswanat(a)quicinc.com> arm64: dts: qcom: ipq8074: Fix hwlock index for SMEM Vignesh Viswanathan <quic_viswanat(a)quicinc.com> arm64: dts: qcom: ipq5332: Fix hwlock index for SMEM David Arcari <darcari(a)redhat.com> thermal: intel: powerclamp: fix mismatch in get function for max_idle Josef Bacik <josef(a)toxicpanda.com> btrfs: don't arbitrarily slow down delalloc if we're committing Catalin Marinas <catalin.marinas(a)arm.com> rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects Brian Geffon <bgeffon(a)google.com> PM: hibernate: Clean up sync_read handling in snapshot_write_next() Brian Geffon <bgeffon(a)google.com> PM: hibernate: Use __get_safe_page() rather than touching the list Biju Das <biju.das.jz(a)bp.renesas.com> dt-bindings: timer: renesas,rz-mtu3: Fix overflow/underflow interrupt names Vignesh Viswanathan <quic_viswanat(a)quicinc.com> arm64: dts: qcom: ipq6018: Fix hwlock index for SMEM Joel Fernandes (Google) <joel(a)joelfernandes.org> rcu/tree: Defer setting of jiffies during stall reset Chuck Lever <chuck.lever(a)oracle.com> svcrdma: Drop connection after an RDMA Read error Ajay Singh <ajay.kathat(a)microchip.com> wifi: wilc1000: use vmm_table as array in wilc struct Lukas Wunner <lukas(a)wunner.de> PCI: Lengthen reset delay for VideoPropulsion Torrent QN16e card Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> PCI: exynos: Don't discard .remove() callback Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> PCI: kirin: Don't discard .remove() callback Heiner Kallweit <hkallweit1(a)gmail.com> PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common() Manivannan Sadhasivam <mani(a)kernel.org> PCI: qcom-ep: Add dedicated callback for writing to DBI2 registers Bean Huo <beanhuo(a)micron.com> mmc: Add quirk MMC_QUIRK_BROKEN_CACHE_FLUSH for Micron eMMC Q2J54A Nitin Yadav <n-yadav(a)ti.com> mmc: sdhci_am654: fix start loop index for TAP value parsing Dan Carpenter <dan.carpenter(a)linaro.org> mmc: vub300: fix an error code Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix slab out of bounds write in smb_inherit_dacl() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: handle malformed smb1 message Marios Makassikis <mmakassikis(a)freebox.fr> ksmbd: fix recursive locking in vfs helpers Kathiravan Thirumoorthy <quic_kathirav(a)quicinc.com> clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks Kathiravan Thirumoorthy <quic_kathirav(a)quicinc.com> clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks Michal Suchanek <msuchanek(a)suse.de> integrity: powerpc: Do not select CA_MACHINE_KEYRING Gustavo A. R. Silva <gustavoars(a)kernel.org> clk: visconti: Fix undefined behavior bug in struct visconti_pll_provider Gustavo A. R. Silva <gustavoars(a)kernel.org> clk: socfpga: Fix undefined behavior bug in struct stratix10_clock_data Ville Syrjälä <ville.syrjala(a)linux.intel.com> powercap: intel_rapl: Downgrade BIOS locked limits pr_warn() to pr_debug() Christian Marangi <ansuelsmth(a)gmail.com> cpufreq: stats: Fix buffer overflow detection in trans_stats() Helge Deller <deller(a)gmx.de> parisc/power: Add power soft-off when running on qemu Helge Deller <deller(a)gmx.de> parisc/pdc: Add width field to struct pdc_model Helge Deller <deller(a)gmx.de> parisc/agp: Use 64-bit LE values in SBA IOMMU PDIR table Pengfei Li <pengfei.li_1(a)nxp.com> pmdomain: imx: Make imx pgc power domain also set the fwnode Maria Yu <quic_aiquny(a)quicinc.com> arm64: module: Fix PLT counting when CONFIG_RANDOMIZE_BASE=n Nathan Chancellor <nathan(a)kernel.org> arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer Tomeu Vizoso <tomeu(a)tomeuvizoso.net> pmdomain: amlogic: Fix mask for the second NNA mem PD domain Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> PCI: keystone: Don't discard .probe() callback Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> PCI: keystone: Don't discard .remove() callback Jarkko Sakkinen <jarkko(a)kernel.org> KEYS: trusted: Rollback init_trusted() consistently Sumit Garg <sumit.garg(a)linaro.org> KEYS: trusted: tee: Refactor register SHM usage Maíra Canal <mcanal(a)igalia.com> pmdomain: bcm: bcm2835-power: check if the ASB register is equal to enable Hao Jia <jiahao.os(a)bytedance.com> sched/core: Fix RQCF_ACT_SKIP leak Herve Codina <herve.codina(a)bootlin.com> genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware Rong Chen <rong.chen(a)amlogic.com> mmc: meson-gx: Remove setting of CMD_CFG_ERROR Johan Hovold <johan+linaro(a)kernel.org> wifi: ath12k: fix dfs-radar and temperature event locking Johan Hovold <johan+linaro(a)kernel.org> wifi: ath12k: fix htt mlo-offset event locking Johan Hovold <johan+linaro(a)kernel.org> wifi: ath11k: fix gtk offload status event locking Johan Hovold <johan+linaro(a)kernel.org> wifi: ath11k: fix htt pktlog locking Johan Hovold <johan+linaro(a)kernel.org> wifi: ath11k: fix dfs radar event locking Johan Hovold <johan+linaro(a)kernel.org> wifi: ath11k: fix temperature event locking Mark Brown <broonie(a)kernel.org> regmap: Ensure range selector registers are updated after cache sync Werner Sembach <wse(a)tuxedocomputers.com> ACPI: resource: Do IRQ override on TongFang GMxXGxx John David Anglin <dave(a)parisc-linux.org> parisc: Add nop instructions after TLB inserts SeongJae Park <sj(a)kernel.org> mm/damon/sysfs: check error from damon_sysfs_update_target() Hyeongtak Ji <hyeongtak.ji(a)sk.com> mm/damon/core.c: avoid unintentional filtering out of schemes SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-schemes: handle tried regions sysfs directory allocation failure SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-schemes: handle tried region directory allocation failure SeongJae Park <sj(a)kernel.org> mm/damon/core: avoid divide-by-zero during monitoring results update SeongJae Park <sj(a)kernel.org> mm/damon: implement a function for max nr_accesses safe calculation SeongJae Park <sj(a)kernel.org> mm/damon/ops-common: avoid divide-by-zero during region hotness calculation SeongJae Park <sj(a)kernel.org> mm/damon/lru_sort: avoid divide-by-zero in hot threshold calculation Mikulas Patocka <mpatocka(a)redhat.com> dm crypt: account large pages in cc->n_allocated_pages Helge Deller <deller(a)gmx.de> fbdev: stifb: Make the STI next font pointer a 32-bit signed offset Koichiro Den <den(a)valinux.co.jp> iommufd: Fix missing update of domains_itree after splitting iopt_area Krister Johansen <kjlx(a)templeofstupid.com> watchdog: move softlockup_panic back to early_param SeongJae Park <sj(a)kernel.org> mm/damon/sysfs: update monitoring target regions for online input commit SeongJae Park <sj(a)kernel.org> mm/damon/sysfs: remove requested targets when online-commit inputs Lukas Wunner <lukas(a)wunner.de> PCI/sysfs: Protect driver's D3cold preference from user space David Woodhouse <dwmw(a)amazon.co.uk> hvc/xen: fix event channel handling for secondary consoles David Woodhouse <dwmw(a)amazon.co.uk> hvc/xen: fix error path in xen_hvc_init() to always register frontend driver David Woodhouse <dwmw(a)amazon.co.uk> hvc/xen: fix console unplug Roger Pau Monne <roger.pau(a)citrix.com> acpi/processor: sanitize _OSC/_PDC capabilities for Xen dom0 Pavel Krasavin <pkrasavin(a)imaqliq.com> tty: serial: meson: fix hard LOCKUP on crtscts mode Muhammad Usama Anjum <usama.anjum(a)collabora.com> tty/sysrq: replace smp_processor_id() with get_cpu() Krister Johansen <kjlx(a)templeofstupid.com> proc: sysctl: prevent aliased sysctls from getting passed to init Paul Moore <paul(a)paul-moore.com> audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() Paul Moore <paul(a)paul-moore.com> audit: don't take task_lock() in audit_exe_compare() code path Johannes Weiner <hannes(a)cmpxchg.org> sched: psi: fix unprivileged polling against cgroups Victor Shih <victor.shih(a)genesyslogic.com.tw> mmc: sdhci-pci-gli: GL9755: Mask the replay timer timeout of AER Haitao Shan <hshan(a)google.com> KVM: x86: Fix lapic timer interrupt lost after loading a snapshot. Tao Su <tao1.su(a)linux.intel.com> KVM: x86: Clear bit12 of ICR after APIC-write VM-exit Maciej S. Szmigiero <maciej.szmigiero(a)oracle.com> KVM: x86: Ignore MSR_AMD64_TW_CFG access Nicolas Saenz Julienne <nsaenz(a)amazon.com> KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space Pu Wen <puwen(a)hygon.cn> x86/cpu/hygon: Fix the CPU topology evaluation for real Koichiro Den <den(a)valinux.co.jp> x86/apic/msi: Fix misconfigured non-maskable MSI quirk Mario Limonciello <mario.limonciello(a)amd.com> x86/PCI: Avoid PME from D3hot/D3cold for AMD Rembrandt and Phoenix USB4 Roxana Nicolescu <roxana.nicolescu(a)canonical.com> crypto: x86/sha - load modules based on CPU features Rick Edgecombe <rick.p.edgecombe(a)intel.com> x86/shstk: Delay signal entry SSP write until after user accesses Peter Wang <peter.wang(a)mediatek.com> scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISR Quinn Tran <qutran(a)marvell.com> scsi: qla2xxx: Fix system crash due to bad pointer access Manivannan Sadhasivam <mani(a)kernel.org> scsi: ufs: qcom: Update PHY settings only when scaling to higher gears Chandrakanth patil <chandrakanth.patil(a)broadcom.com> scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpt3sas: Fix loop logic Shung-Hsi Yu <shung-hsi.yu(a)suse.com> bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END Hao Sun <sunhao.th(a)gmail.com> bpf: Fix check_stack_write_fixed_off() to correctly spill imm Mark Hasemeyer <markhas(a)chromium.org> spi: Fix null dereference on suspend Kees Cook <keescook(a)chromium.org> randstruct: Fix gcc-plugin performance mode to stay in group Nicholas Piggin <npiggin(a)gmail.com> powerpc/perf: Fix disabling BHRB and instruction sampling Adrian Hunter <adrian.hunter(a)intel.com> perf intel-pt: Fix async branch flags Vikash Garodia <quic_vgarodia(a)quicinc.com> media: venus: hfi: add checks to perform sanity on queue pointers Alexandre Ghiti <alexghiti(a)rivosinc.com> drivers: perf: Check find_first_bit() return value Ilkka Koskinen <ilkka(a)os.amperecomputing.com> perf: arm_cspmu: Reject events meant for other PMUs Harshit Mogalapalli <harshit.m.mogalapalli(a)oracle.com> i915/perf: Fix NULL deref bugs with drm_dbg() calls Peter Zijlstra <peterz(a)infradead.org> perf/core: Fix cpuctx refcounting Ekaterina Esina <eesina(a)astralinux.ru> cifs: fix check of rc in function generate_smb3signingkey Anastasia Belova <abelova(a)astralinux.ru> cifs: spnego: add ';' in HOST_KEY_LEN Naomi Chu <naomi.chu(a)mediatek.com> scsi: ufs: core: Expand MCQ queue slot to DeviceQueueDepth + 1 Chen Yu <yu.c.chen(a)intel.com> tools/power/turbostat: Enable the C-state Pre-wake printing Zhang Rui <rui.zhang(a)intel.com> tools/power/turbostat: Fix a knl bug Vlad Buslov <vladbu(a)nvidia.com> macvlan: Don't propagate promisc change to lower dev in passthru Xin Long <lucien.xin(a)gmail.com> net: sched: do not offload flows with a helper in act_ct Rahul Rameshbabu <rrameshbabu(a)nvidia.com> net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors Rahul Rameshbabu <rrameshbabu(a)nvidia.com> net/mlx5e: Check return value of snprintf writing to fw_version buffer Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5e: Reduce the size of icosq_str Rahul Rameshbabu <rrameshbabu(a)nvidia.com> net/mlx5: Increase size of irq name buffer Rahul Rameshbabu <rrameshbabu(a)nvidia.com> net/mlx5e: Update doorbell for port timestamping CQ before the software counter Rahul Rameshbabu <rrameshbabu(a)nvidia.com> net/mlx5e: Track xmit submission to PTP WQ after populating metadata map Rahul Rameshbabu <rrameshbabu(a)nvidia.com> net/mlx5e: Avoid referencing skb after free-ing in drop path of mlx5e_sq_xmit_wqe Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Don't modify the peer sent-to-vport rules for IPSec offload Vlad Buslov <vladbu(a)nvidia.com> net/mlx5e: Fix pedit endianness Gavin Li <gavinl(a)nvidia.com> net/mlx5e: fix double free of encap_header in update funcs Dust Li <dust.li(a)linux.alibaba.com> net/mlx5e: fix double free of encap_header Rahul Rameshbabu <rrameshbabu(a)nvidia.com> net/mlx5: Decouple PHC .adjtime and .adjphase implementations Maher Sanalla <msanalla(a)nvidia.com> net/mlx5: Free used cpus mask when an IRQ is released Itamar Gozlan <igozlan(a)nvidia.com> Revert "net/mlx5: DR, Supporting inline WQE when possible" Jens Axboe <axboe(a)kernel.dk> io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval Ziwei Xiao <ziweixiao(a)google.com> gve: Fixes for napi_poll when budget is 0 Shannon Nelson <shannon.nelson(a)amd.com> pds_core: fix up some format-truncation complaints Shannon Nelson <shannon.nelson(a)amd.com> pds_core: use correct index to mask irq Baruch Siach <baruch(a)tkos.co.il> net: stmmac: avoid rx queue overrun Baruch Siach <baruch(a)tkos.co.il> net: stmmac: fix rx budget limit check Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: bogus ENOENT when destroying element which does not exist Dan Carpenter <dan.carpenter(a)linaro.org> netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() Linkui Xiao <xiaolinkui(a)kylinos.cn> netfilter: nf_conntrack_bridge: initialize err to 0 Eric Dumazet <edumazet(a)google.com> af_unix: fix use-after-free in unix_stream_read_actor() Linus Walleij <linus.walleij(a)linaro.org> net: ethernet: cortina: Fix MTU max setting Linus Walleij <linus.walleij(a)linaro.org> net: ethernet: cortina: Handle large frames Linus Walleij <linus.walleij(a)linaro.org> net: ethernet: cortina: Fix max RX frame define Eric Dumazet <edumazet(a)google.com> bonding: stop the device in bond_setup_by_slave() Eric Dumazet <edumazet(a)google.com> ptp: annotate data-race around q->head and q->tail Christoph Hellwig <hch(a)infradead.org> blk-mq: make sure active queue usage is held for bio_integrity_prep() Juergen Gross <jgross(a)suse.com> xen/events: fix delayed eoi list handling Willem de Bruijn <willemb(a)google.com> ppp: limit MRU to 64K Sven Auhagen <sven.auhagen(a)voleatech.de> net: mvneta: fix calls to page_pool_get_stats Shigeru Yoshida <syoshida(a)redhat.com> tipc: Fix kernel-infoleak due to uninitialized TLV value Jijie Shao <shaojijie(a)huawei.com> net: hns3: fix VF wrong speed and duplex issue Jijie Shao <shaojijie(a)huawei.com> net: hns3: fix VF reset fail issue Yonglong Liu <liuyonglong(a)huawei.com> net: hns3: fix variable may not initialized problem in hns3_init_mac_addr() Yonglong Liu <liuyonglong(a)huawei.com> net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs Jian Shen <shenjian15(a)huawei.com> net: hns3: fix incorrect capability bit display for copper port Yonglong Liu <liuyonglong(a)huawei.com> net: hns3: add barrier in vf mailbox reply process Jian Shen <shenjian15(a)huawei.com> net: hns3: fix add VLAN fail issue Juergen Gross <jgross(a)suse.com> xen/events: avoid using info_for_irq() in xen_send_IPI_one() Jan Kiszka <jan.kiszka(a)siemens.com> net: ti: icssg-prueth: Fix error cleanup on failing pruss_request_mem_region Jan Kiszka <jan.kiszka(a)siemens.com> net: ti: icssg-prueth: Add missing icss_iep_put to error path Shigeru Yoshida <syoshida(a)redhat.com> tty: Fix uninit-value access in ppp_sync_receive() Eric Dumazet <edumazet(a)google.com> ipvlan: add ipvlan_route_v6_outbound() helper Stanislav Fomichev <sdf(a)google.com> net: set SOCK_RCU_FREE before inserting socket into hashtable Andrii Nakryiko <andrii(a)kernel.org> bpf: fix control-flow graph checking in privileged mode Andrii Nakryiko <andrii(a)kernel.org> bpf: fix precision backtracking instruction iteration Andrii Nakryiko <andrii(a)kernel.org> bpf: handle ldimm64 properly in check_cfg() Kees Cook <keescook(a)chromium.org> gcc-plugins: randstruct: Only warn about true flexible arrays Dan Carpenter <dan.carpenter(a)linaro.org> vhost-vdpa: fix use after free in vhost_vdpa_probe() Stefano Garzarella <sgarzare(a)redhat.com> vdpa_sim_blk: allocate the buffer zeroed Christoph Hellwig <hch(a)lst.de> riscv: split cache ops out of dma-noncoherent.c Nirmoy Das <nirmoy.das(a)intel.com> drm/i915/tc: Fix -Wformat-truncation in intel_tc_port_init Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: Silence "suspicious RCU usage in gfs2_permission" warning Nam Cao <namcaov(a)gmail.com> riscv: provide riscv-specific is_trap_insn() Andrew Jones <ajones(a)ventanamicro.com> RISC-V: hwprobe: Fix vDSO SIGSEGV felix <fuzhen5(a)huawei.com> SUNRPC: Fix RPC client cleaned up the freed pipefs dentries Olga Kornievskaia <kolga(a)netapp.com> NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO Dan Carpenter <dan.carpenter(a)linaro.org> SUNRPC: Add an IS_ERR() check back to where it was Olga Kornievskaia <kolga(a)netapp.com> NFSv4.1: fix handling NFS4ERR_DELAY when testing for session trunking Arnd Bergmann <arnd(a)arndb.de> drm/i915/mtl: avoid stringop-overflow warning Yi Yang <yiyang13(a)huawei.com> mtd: rawnand: meson: check return value of devm_kasprintf() Yi Yang <yiyang13(a)huawei.com> mtd: rawnand: intel: check return value of devm_kasprintf() Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: ECONNRESET might require a rebind Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> dt-bindings: serial: fix regex pattern for matching serial node children Jinghao Jia <jinghao(a)linux.ibm.com> samples/bpf: syscall_tp_user: Fix array out-of-bound access Jinghao Jia <jinghao(a)linux.ibm.com> samples/bpf: syscall_tp_user: Rename num_progs into nr_tests Finn Thain <fthain(a)linux-m68k.org> sched/core: Optimize in_task() and in_interrupt() a bit Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: iwlwifi: Use FW rate for non-data frames Yi Yang <yiyang13(a)huawei.com> mtd: rawnand: tegra: add missing check for platform_get_irq() Dan Carpenter <dan.carpenter(a)linaro.org> pwm: Fix double shift bug Vitaly Prosyak <vitaly.prosyak(a)amd.com> drm/amdgpu: fix software pci_unplug on some chips Alex Spataru <alex_spataru(a)outlook.com> ALSA: hda/realtek: Add quirk for ASUS UX7602ZM Zongmin Zhou <zhouzongmin(a)kylinos.cn> drm/qxl: prevent memory leak Tony Lindgren <tony(a)atomide.com> ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings Philipp Stanner <pstanner(a)redhat.com> i2c: dev: copy userspace array safely Deepak Gupta <debug(a)rivosinc.com> riscv: VMAP_STACK overflow detection thread-safe Douglas Anderson <dianders(a)chromium.org> kgdb: Flush console before entering kgdb on panic Juntong Deng <juntong.deng(a)outlook.com> gfs2: Fix slab-use-after-free in gfs2_qd_dealloc Wayne Lin <wayne.lin(a)amd.com> drm/amd/display: Avoid NULL dereference of timing generator Takashi Iwai <tiwai(a)suse.de> media: imon: fix access to invalid resource for the second interface Sakari Ailus <sakari.ailus(a)linux.intel.com> media: ccs: Fix driver quirk struct documentation Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> media: cobalt: Use FIELD_GET() to extract Link Width Al Viro <viro(a)zeniv.linux.org.uk> gfs2: fix an oops in gfs2_permission Bob Peterson <rpeterso(a)redhat.com> gfs2: ignore negated quota changes Hans Verkuil <hverkuil-cisco(a)xs4all.nl> media: ipu-bridge: increase sensor_name size Hans Verkuil <hverkuil-cisco(a)xs4all.nl> media: vivid: avoid integer overflow Rajeshwar R Shinde <coolrrsh(a)gmail.com> media: gspca: cpia1: shift-out-of-bounds in set_flicker Billy Tsai <billy_tsai(a)aspeedtech.com> i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data. zhenwei pi <pizhenwei(a)bytedance.com> virtio-blk: fix implicit overflow on virtio_max_dma_size Axel Lin <axel.lin(a)ingics.com> i2c: sun6i-p2wi: Prevent potential division by zero Wolfram Sang <wsa+renesas(a)sang-engineering.com> i2c: fix memleak in i2c_new_client_device() Jarkko Nikula <jarkko.nikula(a)linux.intel.com> i2c: i801: Add support for Intel Birch Stream SoC Jarkko Nikula <jarkko.nikula(a)linux.intel.com> i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler Dominique Martinet <asmadeus(a)codewreck.org> 9p: v9fs_listxattr: fix %s null argument warning Marco Elver <elver(a)google.com> 9p/trans_fd: Annotate data-racy writes to file::f_flags Hardik Gajjar <hgajjar(a)de.adit-jv.com> usb: gadget: f_ncm: Always set current gadget in ncm_bind() Wesley Cheng <quic_wcheng(a)quicinc.com> usb: host: xhci: Avoid XHCI resume delay if SSUSB device is not present Zhiguo Niu <zhiguo.niu(a)unisoc.com> f2fs: fix error handling of __get_node_page Zhiguo Niu <zhiguo.niu(a)unisoc.com> f2fs: fix error path of __f2fs_build_free_nids Pierre-Louis Bossart <pierre-louis.bossart(a)linux.intel.com> soundwire: dmi-quirks: update HP Omen match Neil Armstrong <neil.armstrong(a)linaro.org> usb: ucsi: glink: use the connector orientation GPIO to provide switch events Stanley Chang <stanley_chang(a)realtek.com> usb: dwc3: core: configure TX/RX threshold for DWC3_IP Konrad Dybcio <konrad.dybcio(a)linaro.org> phy: qualcomm: phy-qcom-eusb2-repeater: Zero out untouched tuning regs Konrad Dybcio <konrad.dybcio(a)linaro.org> phy: qualcomm: phy-qcom-eusb2-repeater: Use regmap_fields Konrad Dybcio <konrad.dybcio(a)linaro.org> dt-bindings: phy: qcom,snps-eusb2-repeater: Add magic tuning overrides Yi Yang <yiyang13(a)huawei.com> tty: vcc: Add check for kstrdup() in vcc_probe() Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Apply USB 3.x bandwidth quirk only in software connection manager Zhang Shurong <zhang_shurong(a)foxmail.com> iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() Jarkko Nikula <jarkko.nikula(a)linux.intel.com> mfd: intel-lpss: Add Intel Lunar Lake-M PCI IDs Yuezhang Mo <Yuezhang.Mo(a)sony.com> exfat: support handle zero-size directory Jiri Kosina <jkosina(a)suse.cz> HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W Longfang Liu <liulongfang(a)huawei.com> crypto: hisilicon/qm - prevent soft lockup in receive loop Hans de Goede <hdegoede(a)redhat.com> ASoC: Intel: soc-acpi-cht: Add Lenovo Yoga Tab 3 Pro YT3-X90 quirk Bjorn Helgaas <bhelgaas(a)google.com> PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk Yoshihiro Shimoda <yoshihiro.shimoda.uh(a)renesas.com> misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller Yoshihiro Shimoda <yoshihiro.shimoda.uh(a)renesas.com> PCI: dwc: Add missing PCI_EXP_LNKCAP_MLW handling Yoshihiro Shimoda <yoshihiro.shimoda.uh(a)renesas.com> PCI: dwc: Add dw_pcie_link_set_max_link_width() Bartosz Pawlowski <bartosz.pawlowski(a)intel.com> PCI: Disable ATS for specific Intel IPU E2000 devices Bartosz Pawlowski <bartosz.pawlowski(a)intel.com> PCI: Extract ATS disabling to a helper function Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Use FIELD_GET() to extract Link Width Wenchao Hao <haowenchao2(a)huawei.com> scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Do error check on own line to split long "if" conditions Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> atm: iphase: Do PCI error checks on own line Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: mvebu: Use FIELD_PREP() with Link Width Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields Linus Walleij <linus.walleij(a)linaro.org> gpiolib: of: Add quirk for mt2701-cs42448 ASoC sound Cezary Rojewski <cezary.rojewski(a)intel.com> ALSA: hda: Fix possible null-ptr-deref when assigning a stream Vincent Whitchurch <vincent.whitchurch(a)axis.com> ARM: 9320/1: fix stack depot IRQ stack filter Mikhail Khvainitski <me(a)khvoinitsky.org> HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround Manas Ghandat <ghandatmanas(a)gmail.com> jfs: fix array-index-out-of-bounds in diAlloc Manas Ghandat <ghandatmanas(a)gmail.com> jfs: fix array-index-out-of-bounds in dbFindLeaf Juntong Deng <juntong.deng(a)outlook.com> fs/jfs: Add validity check for db_maxag and db_agpref Juntong Deng <juntong.deng(a)outlook.com> fs/jfs: Add check for negative db_l2nbperpage Tyrel Datwyler <tyreld(a)linux.ibm.com> scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool Yihang Li <liyihang9(a)huawei.com> scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> RDMA/hfi1: Use FIELD_GET() to extract Link Width Rander Wang <rander.wang(a)intel.com> ASoC: SOF: ipc4: handle EXCEPTION_CAUGHT notification from firmware Geoffrey D. Bennett <g(a)b4.vu> ALSA: scarlett2: Move USB IDs out from device_info struct Lu Jialin <lujialin4(a)huawei.com> crypto: pcrypt - Fix hungtask for PADATA_RESET Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Use PCI SSID as the firmware UID Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: Intel: sof_sdw: Copy PCI SSID to struct snd_soc_card Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: SOF: Pass PCI SSID to machine driver Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: soc-card: Add storage for PCI SSID Trevor Wu <trevor.wu(a)mediatek.com> ASoC: mediatek: mt8188-mt6359: support dynamic pinctrl zhujun2 <zhujun2(a)cmss.chinamobile.com> selftests/efivarfs: create-read: fix a resource leak Laurentiu Tudor <laurentiu.tudor(a)nxp.com> arm64: dts: ls208xa: use a pseudo-bus to constrain usb dma size John Clark <inindev(a)gmail.com> arm64: dts: rockchip: Add NanoPC T6 PCIe e-key support Lu Hongfei <luhongfei(a)vivo.com> soc: qcom: pmic: Fix resource leaks in a device_for_each_child_node() loop Lin.Cao <lincao12(a)amd.com> drm/amd: check num of link levels when update pcie param Samson Tam <samson.tam(a)amd.com> drm/amd/display: fix num_ways overflow error Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Disable PP_PCIE_DPM_MASK when dynamic speed switching not supported Qu Huang <qu.huang(a)linux.dev> drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL Jesse Zhang <jesse.zhang(a)amd.com> drm/amdkfd: Fix shift out-of-bounds issue Ondrej Jirman <megi(a)xff.cz> drm/panel: st7703: Pick different reset sequence Ma Ke <make_ruc2021(a)163.com> drm/amdgpu/vkms: fix a possible null pointer dereference Ma Ke <make_ruc2021(a)163.com> drm/radeon: fix a possible null pointer dereference Ma Ke <make_ruc2021(a)163.com> drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference Ma Ke <make_ruc2021(a)163.com> drm/panel: fix a possible null pointer dereference Stanley.Yang <Stanley.Yang(a)amd.com> drm/amdgpu: Fix potential null pointer derefernce Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 Jani Nikula <jani.nikula(a)intel.com> drm/msm/dp: skip validity check for DP CTS EDID checksum Philipp Stanner <pstanner(a)redhat.com> drm: vmwgfx_surface.c: copy user-array safely Philipp Stanner <pstanner(a)redhat.com> drm_lease.c: copy user-array safely Philipp Stanner <pstanner(a)redhat.com> kernel: watch_queue: copy user-array safely Philipp Stanner <pstanner(a)redhat.com> kernel: kexec: copy user-array safely Philipp Stanner <pstanner(a)redhat.com> string.h: add array-wrappers for (v)memdup_user() Wenjing Liu <wenjing.liu(a)amd.com> drm/amd/display: use full update for clip size increase of large plane source Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Update `update_pcie_parameters` functions to use uint8_t arguments Tao Zhou <tao.zhou1(a)amd.com> drm/amdgpu: update retry times for psp vmbx wait Xiaogang Chen <xiaogang.chen(a)amd.com> drm/amdkfd: Fix a race condition of vram buffer unref in svm code David (Ming Qiang) Wu <David.Wu3(a)amd.com> drm/amdgpu: not to save bo in the case of RAS err_event_athub Yu Kuai <yukuai3(a)huawei.com> md: don't rely on 'mddev->pers' to be set in mddev_suspend() Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/edid: Fixup h/vsync_end instead of h/vtotal Wenjing Liu <wenjing.liu(a)amd.com> drm/amd/display: add seamless pipe topology transition check Alvin Lee <alvin.lee2(a)amd.com> drm/amd/display: Don't lock phantom pipe on disabling Alvin Lee <Alvin.Lee2(a)amd.com> drm/amd/display: Blank phantom OTG before enabling baozhu.liu <lucas.liu(a)siengine.com> drm/komeda: drop all currently held locks if deadlock happens Harish Kasiviswanathan <Harish.Kasiviswanathan(a)amd.com> drm/amdkfd: ratelimited SQ interrupt messages Sui Jingfeng <suijingfeng(a)loongson.cn> drm/gma500: Fix call trace when psb_gem_mm_init() fails Olli Asikainen <olli.asikainen(a)gmail.com> platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e Herve Codina <herve.codina(a)bootlin.com> of: address: Fix address translation when address-size is greater than 2 Tzung-Bi Shih <tzungbi(a)kernel.org> platform/chrome: kunit: initialize lock for fake ec_dev Hans de Goede <hdegoede(a)redhat.com> gpiolib: acpi: Add a ignore interrupt quirk for Peaq C1010 Gerhard Engleder <gerhard(a)engleder-embedded.com> tsnep: Fix tsnep_request_irq() format-overflow warning Jonathan Denose <jdenose(a)chromium.org> ACPI: EC: Add quirk for HP 250 G7 Notebook PC ZhengHan Wang <wzhmmmmm(a)gmail.com> Bluetooth: Fix double free in hci_conn_cleanup youwan Wang <wangyouwan(a)126.com> Bluetooth: btusb: Add date->evt_skb is NULL check Gregory Greenman <gregory.greenman(a)intel.com> wifi: iwlwifi: mvm: fix size check for fw_link_id Andrii Nakryiko <andrii(a)kernel.org> bpf: Ensure proper register state printing for cond jumps Arseniy Krasnov <avkrasnov(a)salutedevices.com> vsock: read from socket's error queue Raju Lakkaraju <Raju.Lakkaraju(a)microchip.com> net: sfp: add quirk for FS's 2.5G copper SFP Douglas Anderson <dianders(a)chromium.org> wifi: ath10k: Don't touch the CE interrupt registers after power up Ma Ke <make_ruc2021(a)163.com> wifi: ath12k: mhi: fix potential memory leak in ath12k_mhi_register() Eric Dumazet <edumazet(a)google.com> net: annotate data-races around sk->sk_dst_pending_confirm Eric Dumazet <edumazet(a)google.com> net: annotate data-races around sk->sk_tx_queue_mapping Dmitry Antipov <dmantipov(a)yandex.ru> wifi: mt76: fix clang-specific fortify warnings Ingo Rohloff <lundril(a)gmx.de> wifi: mt76: mt7921e: Support MT7992 IP in Xiaomi Redmibook 15 Pro (2023) Christian Marangi <ansuelsmth(a)gmail.com> net: sfp: add quirk for Fiberstone GPON-ONU-34-20BI Shiju Jose <shiju.jose(a)huawei.com> ACPI: APEI: Fix AER info corruption when error status data has multiple sections Baochen Qiang <quic_bqiang(a)quicinc.com> wifi: ath12k: fix possible out-of-bound write in ath12k_wmi_ext_hal_reg_caps() Dmitry Antipov <dmantipov(a)yandex.ru> wifi: ath10k: fix clang-specific fortify warning Baochen Qiang <quic_bqiang(a)quicinc.com> wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats() Dmitry Antipov <dmantipov(a)yandex.ru> wifi: ath9k: fix clang-specific fortify warnings Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Detect IP == ksym.end as part of BPF program Sieng-Piaw Liew <liew.s.piaw(a)gmail.com> atl1c: Work around the DMA RX overflow issue Ping-Ke Shih <pkshih(a)realtek.com> wifi: mac80211: don't return unset power in ieee80211_get_tx_power() Dmitry Antipov <dmantipov(a)yandex.ru> wifi: mac80211_hwsim: fix clang-specific fortify warning Harshitha Prem <quic_hprem(a)quicinc.com> wifi: ath12k: Ignore fragments from uninitialized peer in dp Dmitry Antipov <dmantipov(a)yandex.ru> wifi: plfxlc: fix clang-specific fortify warning Mike Rapoport (IBM) <rppt(a)kernel.org> x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size Frederic Weisbecker <frederic(a)kernel.org> workqueue: Provide one lock class key per work_on_cpu() callsite Ran Xiaokai <ran.xiaokai(a)zte.com.cn> cpu/hotplug: Don't offline the last non-isolated CPU Rik van Riel <riel(a)surriel.com> smp,csd: Throw an error if a CSD lock is stuck for too long Frederic Weisbecker <frederic(a)kernel.org> srcu: Only accelerate on enqueue time Ronald Wahl <ronald.wahl(a)raritan.com> clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware Jacky Bai <ping.bai(a)nxp.com> clocksource/drivers/timer-imx-gpt: Fix potential memory leak Ricardo Cañuelo <ricardo.canuelo(a)collabora.com> selftests/lkdtm: Disable CONFIG_UBSAN_TRAP in test config Denis Arefev <arefev(a)swemel.ru> srcu: Fix srcu_struct node grpmask overflow on 64-bit systems Zhen Lei <thunder.leizhen(a)huawei.com> rcu: Dump memory object info if callback function is invalid Shuai Xue <xueshuai(a)linux.alibaba.com> perf/core: Bail out early if the request AUX area is out of bound Josh Poimboeuf <jpoimboe(a)kernel.org> x86/retpoline: Make sure there are no unconverted return thunks due to KCSAN Kent Overstreet <kent.overstreet(a)gmail.com> lib/generic-radix-tree.c: Don't overflow in peek() Filipe Manana <fdmanana(a)suse.com> btrfs: abort transaction on generation mismatch when marking eb as dirty John Stultz <jstultz(a)google.com> locking/ww_mutex/test: Fix potential workqueue corruption ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 7 + .../bindings/phy/qcom,snps-eusb2-repeater.yaml | 21 +++ .../devicetree/bindings/serial/serial.yaml | 2 +- .../devicetree/bindings/timer/renesas,rz-mtu3.yaml | 38 ++-- Documentation/i2c/busses/i2c-i801.rst | 1 + Makefile | 4 +- arch/arm/include/asm/exception.h | 4 - arch/arm64/Kconfig | 2 + arch/arm64/boot/dts/freescale/fsl-ls208xa.dtsi | 46 +++-- arch/arm64/boot/dts/qcom/ipq5332.dtsi | 2 +- arch/arm64/boot/dts/qcom/ipq6018.dtsi | 4 +- arch/arm64/boot/dts/qcom/ipq8074.dtsi | 2 +- arch/arm64/boot/dts/qcom/ipq9574.dtsi | 2 +- arch/arm64/boot/dts/rockchip/rk3588-nanopc-t6.dts | 28 +++ arch/arm64/kernel/module-plts.c | 6 - arch/loongarch/include/asm/percpu.h | 10 +- arch/mips/mm/cache.c | 2 +- arch/parisc/Kconfig | 6 +- arch/parisc/include/asm/elf.h | 10 +- arch/parisc/include/asm/processor.h | 2 + arch/parisc/include/uapi/asm/pdc.h | 1 + arch/parisc/kernel/entry.S | 88 +++++---- arch/parisc/kernel/head.S | 5 +- arch/parisc/kernel/sys_parisc.c | 2 +- arch/powerpc/perf/core-book3s.c | 5 +- arch/powerpc/platforms/pseries/iommu.c | 8 +- arch/riscv/include/asm/asm-prototypes.h | 1 - arch/riscv/include/asm/asm.h | 22 +++ arch/riscv/include/asm/hwprobe.h | 5 + arch/riscv/include/asm/page.h | 4 +- arch/riscv/include/asm/thread_info.h | 3 - arch/riscv/include/asm/vdso/processor.h | 2 +- arch/riscv/kernel/asm-offsets.c | 1 + arch/riscv/kernel/entry.S | 72 ++------ arch/riscv/kernel/probes/simulate-insn.c | 2 +- arch/riscv/kernel/probes/uprobes.c | 6 + arch/riscv/kernel/traps.c | 36 +--- arch/riscv/kernel/vdso/hwprobe.c | 2 +- arch/riscv/mm/Makefile | 1 + arch/riscv/mm/cache-ops.c | 17 ++ arch/riscv/mm/dma-noncoherent.c | 15 -- arch/riscv/mm/ptdump.c | 3 + arch/s390/mm/gmap.c | 24 ++- arch/s390/mm/page-states.c | 25 ++- arch/s390/mm/pgalloc.c | 1 + arch/s390/mm/vmem.c | 8 +- arch/x86/crypto/sha1_ssse3_glue.c | 12 ++ arch/x86/crypto/sha256_ssse3_glue.c | 12 ++ arch/x86/include/asm/acpi.h | 14 ++ arch/x86/include/asm/kvm-x86-ops.h | 1 + arch/x86/include/asm/kvm_host.h | 1 + arch/x86/include/asm/msr-index.h | 1 + arch/x86/include/asm/numa.h | 7 - arch/x86/include/asm/xen/hypervisor.h | 9 + arch/x86/kernel/apic/msi.c | 8 +- arch/x86/kernel/cpu/bugs.c | 4 +- arch/x86/kernel/cpu/hygon.c | 8 +- arch/x86/kernel/signal_64.c | 6 +- arch/x86/kvm/hyperv.c | 10 +- arch/x86/kvm/lapic.c | 30 ++-- arch/x86/kvm/vmx/vmx.c | 4 +- arch/x86/kvm/x86.c | 2 + arch/x86/mm/numa.c | 7 - arch/x86/pci/fixup.c | 59 ++++++ block/blk-mq.c | 75 ++++---- crypto/pcrypt.c | 4 + drivers/acpi/acpi_fpdt.c | 45 ++++- drivers/acpi/apei/ghes.c | 23 ++- drivers/acpi/ec.c | 10 ++ drivers/acpi/resource.c | 12 ++ drivers/atm/iphase.c | 20 ++- drivers/base/dd.c | 2 +- drivers/base/regmap/regcache.c | 30 ++++ drivers/block/virtio_blk.c | 4 +- drivers/bluetooth/btusb.c | 7 + drivers/char/agp/parisc-agp.c | 16 +- drivers/clk/qcom/gcc-ipq6018.c | 6 - drivers/clk/qcom/gcc-ipq8074.c | 6 - drivers/clk/socfpga/stratix10-clk.h | 4 +- drivers/clk/visconti/pll.h | 4 +- drivers/clocksource/timer-atmel-tcb.c | 1 + drivers/clocksource/timer-imx-gpt.c | 18 +- drivers/cpufreq/cpufreq_stats.c | 14 +- drivers/crypto/hisilicon/qm.c | 2 + drivers/cxl/core/port.c | 34 ++-- drivers/cxl/core/region.c | 23 ++- drivers/dma/stm32-mdma.c | 4 +- drivers/firmware/qcom_scm.c | 7 + drivers/gpio/gpiolib-acpi.c | 20 +++ drivers/gpio/gpiolib-of.c | 4 + drivers/gpu/drm/amd/amdgpu/amdgpu_bios.c | 5 + drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 6 + drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 13 +- drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 23 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_mes.c | 16 ++ drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c | 9 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.c | 7 + drivers/gpu/drm/amd/amdgpu/amdgpu_vkms.c | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 35 ++-- drivers/gpu/drm/amd/amdgpu/nbio_v2_3.c | 5 +- drivers/gpu/drm/amd/amdgpu/psp_v13_0.c | 5 +- drivers/gpu/drm/amd/amdkfd/kfd_int_process_v10.c | 6 +- drivers/gpu/drm/amd/amdkfd/kfd_int_process_v11.c | 6 +- drivers/gpu/drm/amd/amdkfd/kfd_int_process_v9.c | 6 +- drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 13 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 24 +-- .../amd/display/amdgpu_dm/amdgpu_dm_mst_types.c | 29 ++- drivers/gpu/drm/amd/display/dc/core/dc.c | 78 +++----- drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 2 +- drivers/gpu/drm/amd/display/dc/core/dc_stream.c | 4 +- drivers/gpu/drm/amd/display/dc/dc.h | 5 + drivers/gpu/drm/amd/display/dc/dc_types.h | 1 + .../drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 3 +- drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 10 +- drivers/gpu/drm/amd/display/dc/dcn32/dcn32_hwseq.c | 108 ++++++++++- drivers/gpu/drm/amd/display/dc/dcn32/dcn32_hwseq.h | 9 + drivers/gpu/drm/amd/display/dc/dcn32/dcn32_init.c | 2 + drivers/gpu/drm/amd/display/dc/inc/hw_sequencer.h | 8 + .../gpu/drm/amd/display/dc/link/link_detection.c | 3 + drivers/gpu/drm/amd/display/dmub/dmub_srv.h | 22 ++- drivers/gpu/drm/amd/display/dmub/src/dmub_srv.c | 50 ++++-- drivers/gpu/drm/amd/include/pptable.h | 4 +- drivers/gpu/drm/amd/pm/amdgpu_pm.c | 8 +- .../gpu/drm/amd/pm/powerplay/hwmgr/pptable_v1_0.h | 16 +- .../gpu/drm/amd/pm/powerplay/hwmgr/smu7_hwmgr.c | 4 +- drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 2 +- drivers/gpu/drm/amd/pm/swsmu/inc/amdgpu_smu.h | 2 +- drivers/gpu/drm/amd/pm/swsmu/inc/smu_v13_0.h | 4 +- drivers/gpu/drm/amd/pm/swsmu/smu11/navi10_ppt.c | 4 +- .../drm/amd/pm/swsmu/smu11/sienna_cichlid_ppt.c | 10 +- drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c | 9 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 40 +---- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 9 +- .../drm/arm/display/komeda/komeda_pipeline_state.c | 9 +- drivers/gpu/drm/bridge/ite-it66121.c | 4 +- drivers/gpu/drm/drm_edid.c | 18 +- drivers/gpu/drm/drm_lease.c | 4 +- drivers/gpu/drm/gma500/psb_drv.h | 1 + drivers/gpu/drm/gma500/psb_irq.c | 5 + drivers/gpu/drm/i915/display/intel_cdclk.c | 12 ++ drivers/gpu/drm/i915/display/intel_dp.c | 2 +- drivers/gpu/drm/i915/display/intel_tc.c | 11 +- drivers/gpu/drm/i915/gem/i915_gem_context.c | 1 + drivers/gpu/drm/i915/gt/intel_ggtt.c | 35 ++-- drivers/gpu/drm/i915/gt/intel_rc6.c | 16 +- drivers/gpu/drm/i915/i915_perf.c | 15 +- drivers/gpu/drm/mediatek/mtk_dp.c | 6 +- drivers/gpu/drm/msm/dp/dp_panel.c | 21 +-- drivers/gpu/drm/panel/panel-arm-versatile.c | 2 + drivers/gpu/drm/panel/panel-sitronix-st7703.c | 25 +-- drivers/gpu/drm/panel/panel-tpo-tpg110.c | 2 + drivers/gpu/drm/qxl/qxl_display.c | 3 + drivers/gpu/drm/radeon/radeon_connectors.c | 2 + drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 4 +- drivers/hid/hid-ids.h | 2 +- drivers/hid/hid-lenovo.c | 118 ++++++++---- drivers/hid/hid-logitech-dj.c | 11 +- drivers/hid/hid-quirks.c | 1 + drivers/i2c/busses/Kconfig | 1 + drivers/i2c/busses/i2c-designware-master.c | 19 +- drivers/i2c/busses/i2c-i801.c | 22 +-- drivers/i2c/busses/i2c-pxa.c | 76 +++++++- drivers/i2c/busses/i2c-sun6i-p2wi.c | 5 + drivers/i2c/i2c-core-base.c | 13 +- drivers/i2c/i2c-core.h | 2 +- drivers/i2c/i2c-dev.c | 4 +- drivers/i3c/master/i3c-master-cdns.c | 6 +- drivers/i3c/master/mipi-i3c-hci/dat_v1.c | 29 +-- drivers/i3c/master/mipi-i3c-hci/dma.c | 2 +- drivers/i3c/master/svc-i3c-master.c | 54 +++++- drivers/iio/adc/stm32-adc-core.c | 9 +- drivers/infiniband/hw/hfi1/pcie.c | 9 +- drivers/iommu/iommufd/io_pagetable.c | 10 ++ drivers/leds/trigger/ledtrig-netdev.c | 6 +- drivers/mcb/mcb-core.c | 1 + drivers/mcb/mcb-parse.c | 2 +- drivers/md/dm-bufio.c | 87 ++++++--- drivers/md/dm-crypt.c | 15 +- drivers/md/dm-verity-fec.c | 4 +- drivers/md/dm-verity-target.c | 23 +-- drivers/md/dm-verity.h | 2 +- drivers/md/md.c | 2 +- drivers/media/i2c/ccs/ccs-core.c | 2 +- drivers/media/i2c/ccs/ccs-quirk.h | 4 +- drivers/media/pci/cobalt/cobalt-driver.c | 11 +- .../media/platform/qcom/camss/camss-csid-gen2.c | 11 +- .../platform/qcom/camss/camss-csiphy-3ph-1-0.c | 2 +- drivers/media/platform/qcom/camss/camss-vfe-170.c | 22 +-- drivers/media/platform/qcom/camss/camss-vfe-480.c | 22 +-- drivers/media/platform/qcom/camss/camss-vfe.c | 5 +- drivers/media/platform/qcom/camss/camss.c | 12 +- drivers/media/platform/qcom/venus/hfi_msgs.c | 2 +- drivers/media/platform/qcom/venus/hfi_parser.c | 15 ++ drivers/media/platform/qcom/venus/hfi_venus.c | 10 ++ drivers/media/rc/imon.c | 6 + drivers/media/rc/ir-sharp-decoder.c | 8 +- drivers/media/rc/lirc_dev.c | 6 +- drivers/media/test-drivers/vivid/vivid-rds-gen.c | 2 +- drivers/media/usb/gspca/cpia1.c | 3 + drivers/mfd/intel-lpss-pci.c | 13 ++ drivers/mfd/qcom-spmi-pmic.c | 101 ++++++++--- drivers/misc/pci_endpoint_test.c | 4 + drivers/mmc/core/block.c | 4 +- drivers/mmc/core/card.h | 4 + drivers/mmc/core/mmc.c | 8 +- drivers/mmc/core/quirks.h | 7 +- drivers/mmc/host/meson-gx-mmc.c | 1 - drivers/mmc/host/sdhci-pci-gli.c | 30 ++++ drivers/mmc/host/sdhci_am654.c | 2 +- drivers/mmc/host/vub300.c | 1 + drivers/mtd/chips/cfi_cmdset_0001.c | 20 ++- drivers/mtd/nand/raw/intel-nand-controller.c | 10 ++ drivers/mtd/nand/raw/meson_nand.c | 3 + drivers/mtd/nand/raw/tegra_nand.c | 4 + drivers/net/bonding/bond_main.c | 6 + drivers/net/dsa/lan9303_mdio.c | 4 +- drivers/net/ethernet/amd/pds_core/adminq.c | 2 +- drivers/net/ethernet/amd/pds_core/core.h | 2 +- drivers/net/ethernet/amd/pds_core/dev.c | 8 +- drivers/net/ethernet/amd/pds_core/devlink.c | 2 +- drivers/net/ethernet/atheros/atl1c/atl1c.h | 3 - drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 67 ++----- drivers/net/ethernet/cortina/gemini.c | 45 +++-- drivers/net/ethernet/cortina/gemini.h | 4 +- drivers/net/ethernet/engleder/tsnep.h | 2 +- drivers/net/ethernet/engleder/tsnep_main.c | 12 +- drivers/net/ethernet/google/gve/gve_main.c | 8 +- drivers/net/ethernet/google/gve/gve_rx.c | 4 - drivers/net/ethernet/google/gve/gve_tx.c | 4 - drivers/net/ethernet/hisilicon/hns3/hns3_debugfs.c | 9 +- drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 2 +- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 33 +++- .../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 25 ++- .../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.h | 1 + .../ethernet/hisilicon/hns3/hns3vf/hclgevf_mbx.c | 7 + drivers/net/ethernet/marvell/mvneta.c | 28 ++- drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c | 20 ++- .../ethernet/mellanox/mlx5/core/en/reporter_rx.c | 4 +- .../net/ethernet/mellanox/mlx5/core/en/tc_tun.c | 30 ++-- .../net/ethernet/mellanox/mlx5/core/en_ethtool.c | 13 +- drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 12 +- drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 60 ++++--- drivers/net/ethernet/mellanox/mlx5/core/en_tx.c | 4 +- drivers/net/ethernet/mellanox/mlx5/core/eq.c | 25 ++- .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 3 +- .../net/ethernet/mellanox/mlx5/core/irq_affinity.c | 42 ----- .../net/ethernet/mellanox/mlx5/core/lib/clock.c | 7 +- drivers/net/ethernet/mellanox/mlx5/core/pci_irq.c | 6 +- drivers/net/ethernet/mellanox/mlx5/core/pci_irq.h | 3 + .../ethernet/mellanox/mlx5/core/steering/dr_send.c | 115 ++---------- drivers/net/ethernet/realtek/r8169_main.c | 46 +++-- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 3 +- drivers/net/ethernet/ti/icssg/icssg_prueth.c | 15 +- drivers/net/ipvlan/ipvlan_core.c | 41 +++-- drivers/net/macvlan.c | 2 +- drivers/net/phy/phylink.c | 1 + drivers/net/phy/sfp.c | 8 + drivers/net/ppp/ppp_synctty.c | 6 +- drivers/net/wireless/ath/ath10k/debug.c | 2 +- drivers/net/wireless/ath/ath10k/snoc.c | 18 +- drivers/net/wireless/ath/ath11k/dp_rx.c | 8 +- drivers/net/wireless/ath/ath11k/wmi.c | 19 +- drivers/net/wireless/ath/ath12k/dp.c | 1 + drivers/net/wireless/ath/ath12k/dp_rx.c | 33 +++- drivers/net/wireless/ath/ath12k/mhi.c | 11 +- drivers/net/wireless/ath/ath12k/peer.h | 3 + drivers/net/wireless/ath/ath12k/wmi.c | 17 +- drivers/net/wireless/ath/ath9k/debug.c | 2 +- drivers/net/wireless/ath/ath9k/htc_drv_debug.c | 2 +- drivers/net/wireless/intel/iwlwifi/mvm/link.c | 4 +- drivers/net/wireless/intel/iwlwifi/mvm/tx.c | 14 +- drivers/net/wireless/mediatek/mt76/mt7915/main.c | 2 +- drivers/net/wireless/mediatek/mt76/mt7921/pci.c | 2 + drivers/net/wireless/mediatek/mt76/mt792x_core.c | 2 +- drivers/net/wireless/mediatek/mt76/mt7996/main.c | 2 +- drivers/net/wireless/microchip/wilc1000/wlan.c | 2 +- drivers/net/wireless/purelifi/plfxlc/mac.c | 2 +- drivers/net/wireless/virtual/mac80211_hwsim.c | 2 +- drivers/of/address.c | 30 +++- drivers/parisc/power.c | 16 +- drivers/pci/controller/dwc/pci-exynos.c | 4 +- drivers/pci/controller/dwc/pci-keystone.c | 8 +- drivers/pci/controller/dwc/pcie-designware.c | 93 +++++----- drivers/pci/controller/dwc/pcie-kirin.c | 4 +- drivers/pci/controller/dwc/pcie-qcom-ep.c | 17 ++ drivers/pci/controller/dwc/pcie-tegra194.c | 9 +- drivers/pci/controller/pci-mvebu.c | 2 +- drivers/pci/pci-acpi.c | 2 +- drivers/pci/pci-sysfs.c | 10 +- drivers/pci/pci.c | 22 +-- drivers/pci/pcie/aer.c | 10 ++ drivers/pci/pcie/aspm.c | 2 + drivers/pci/probe.c | 6 +- drivers/pci/quirks.c | 53 ++++-- drivers/perf/arm_cspmu/arm_cspmu.c | 3 + drivers/perf/riscv_pmu_sbi.c | 5 + drivers/phy/qualcomm/phy-qcom-eusb2-repeater.c | 131 ++++++++++---- drivers/platform/chrome/cros_ec_proto_test.c | 1 + drivers/platform/x86/thinkpad_acpi.c | 1 + drivers/pmdomain/amlogic/meson-ee-pwrc.c | 2 +- drivers/pmdomain/bcm/bcm2835-power.c | 2 +- drivers/pmdomain/imx/gpc.c | 1 + drivers/powercap/intel_rapl_common.c | 2 +- drivers/ptp/ptp_chardev.c | 3 +- drivers/ptp/ptp_clock.c | 5 +- drivers/ptp/ptp_private.h | 8 +- drivers/ptp/ptp_sysfs.c | 3 +- drivers/s390/crypto/ap_bus.c | 4 + drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 13 +- drivers/scsi/ibmvscsi/ibmvfc.c | 124 ++++++++++++- drivers/scsi/libfc/fc_lport.c | 6 + drivers/scsi/megaraid/megaraid_sas_base.c | 4 +- drivers/scsi/mpt3sas/mpt3sas_base.c | 4 +- drivers/scsi/qla2xxx/qla_os.c | 12 +- drivers/soc/qcom/pmic_glink_altmode.c | 30 +++- drivers/soundwire/dmi-quirks.c | 2 +- drivers/spi/spi.c | 56 ++++-- drivers/thermal/intel/intel_powerclamp.c | 2 +- drivers/thunderbolt/quirks.c | 3 + drivers/tty/hvc/hvc_xen.c | 39 ++-- drivers/tty/serial/meson_uart.c | 14 +- drivers/tty/sysrq.c | 3 +- drivers/tty/vcc.c | 16 +- drivers/ufs/core/ufs-mcq.c | 5 +- drivers/ufs/core/ufshcd.c | 3 +- drivers/ufs/host/ufs-qcom.c | 9 +- drivers/usb/dwc3/core.c | 160 +++++++++++++---- drivers/usb/dwc3/core.h | 13 ++ drivers/usb/gadget/function/f_ncm.c | 27 ++- drivers/usb/host/xhci-pci.c | 4 +- drivers/usb/host/xhci.c | 12 +- drivers/usb/typec/ucsi/ucsi_glink.c | 54 +++++- drivers/vdpa/vdpa_sim/vdpa_sim_blk.c | 4 +- drivers/vhost/vdpa.c | 1 - drivers/watchdog/sbsa_gwdt.c | 4 +- drivers/xen/events/events_base.c | 16 +- drivers/xen/pcpu.c | 22 +++ fs/9p/xattr.c | 5 +- fs/btrfs/block-group.c | 4 +- fs/btrfs/ctree.c | 109 +++++------ fs/btrfs/ctree.h | 11 +- fs/btrfs/delalloc-space.c | 3 - fs/btrfs/delayed-inode.c | 2 +- fs/btrfs/dev-replace.c | 2 +- fs/btrfs/dir-item.c | 8 +- fs/btrfs/disk-io.c | 13 +- fs/btrfs/disk-io.h | 3 +- fs/btrfs/extent-tree.c | 36 ++-- fs/btrfs/file-item.c | 17 +- fs/btrfs/file.c | 34 ++-- fs/btrfs/free-space-cache.c | 6 +- fs/btrfs/free-space-tree.c | 17 +- fs/btrfs/inode-item.c | 16 +- fs/btrfs/inode.c | 17 +- fs/btrfs/ioctl.c | 4 +- fs/btrfs/qgroup.c | 14 +- fs/btrfs/relocation.c | 10 +- fs/btrfs/root-tree.c | 4 +- fs/btrfs/tests/extent-buffer-tests.c | 6 +- fs/btrfs/tests/inode-tests.c | 12 +- fs/btrfs/tree-log.c | 12 +- fs/btrfs/uuid-tree.c | 6 +- fs/btrfs/volumes.c | 10 +- fs/btrfs/xattr.c | 8 +- fs/exfat/namei.c | 29 ++- fs/ext4/acl.h | 5 + fs/ext4/ext4.h | 3 +- fs/ext4/extents_status.c | 127 +++++++++---- fs/ext4/file.c | 169 ++++++++--------- fs/ext4/inode.c | 14 +- fs/ext4/mballoc.c | 39 +--- fs/ext4/resize.c | 23 ++- fs/ext4/super.c | 14 ++ fs/f2fs/compress.c | 2 +- fs/f2fs/extent_cache.c | 53 +++--- fs/f2fs/file.c | 9 + fs/f2fs/node.c | 18 +- fs/f2fs/xattr.c | 20 ++- fs/gfs2/inode.c | 14 +- fs/gfs2/ops_fstype.c | 4 +- fs/gfs2/quota.c | 11 ++ fs/gfs2/super.c | 12 +- fs/hugetlbfs/inode.c | 4 +- fs/jbd2/recovery.c | 8 + fs/jfs/jfs_dmap.c | 23 ++- fs/jfs/jfs_imap.c | 5 +- fs/nfs/nfs4proc.c | 12 +- fs/nfsd/nfs4state.c | 2 +- fs/nfsd/nfscache.c | 23 +-- fs/overlayfs/super.c | 2 +- fs/proc/proc_sysctl.c | 8 +- fs/quota/dquot.c | 14 ++ fs/smb/client/cached_dir.c | 84 +++++---- fs/smb/client/cifs_debug.c | 6 + fs/smb/client/cifs_ioctl.h | 6 + fs/smb/client/cifs_spnego.c | 4 +- fs/smb/client/cifsfs.c | 1 + fs/smb/client/cifsglob.h | 12 +- fs/smb/client/cifspdu.h | 2 +- fs/smb/client/cifsproto.h | 9 +- fs/smb/client/connect.c | 17 +- fs/smb/client/dfs.c | 18 +- fs/smb/client/fs_context.h | 1 + fs/smb/client/inode.c | 4 + fs/smb/client/ioctl.c | 25 +++ fs/smb/client/namespace.c | 17 +- fs/smb/client/sess.c | 13 +- fs/smb/client/smb2misc.c | 2 +- fs/smb/client/smb2ops.c | 8 +- fs/smb/client/smb2transport.c | 5 +- fs/smb/client/transport.c | 11 +- fs/smb/client/xattr.c | 5 +- fs/smb/server/smb_common.c | 11 ++ fs/smb/server/smbacl.c | 29 ++- fs/smb/server/vfs.c | 23 +-- fs/xfs/xfs_inode_item_recover.c | 32 ++-- include/acpi/ghes.h | 4 + include/linux/bpf.h | 8 +- include/linux/damon.h | 7 + include/linux/ethtool.h | 4 +- include/linux/f2fs_fs.h | 1 + include/linux/generic-radix-tree.h | 7 + include/linux/irq.h | 26 +-- include/linux/lsm_hook_defs.h | 4 +- include/linux/mmc/card.h | 2 + include/linux/msi.h | 6 - include/linux/pci_ids.h | 2 + include/linux/perf_event.h | 13 +- include/linux/preempt.h | 15 +- include/linux/pwm.h | 4 +- include/linux/socket.h | 1 + include/linux/spi/spi.h | 1 + include/linux/string.h | 40 +++++ include/linux/sunrpc/clnt.h | 1 + include/linux/sysctl.h | 6 + include/linux/torture.h | 3 +- include/linux/workqueue.h | 46 ++++- include/media/ipu-bridge.h | 2 +- include/net/netfilter/nf_tables.h | 4 +- include/net/sock.h | 26 ++- include/net/tc_act/tc_ct.h | 9 + include/sound/soc-acpi.h | 7 + include/sound/soc-card.h | 37 ++++ include/sound/soc-dai.h | 1 + include/sound/soc.h | 11 ++ include/sound/sof.h | 8 + include/uapi/linux/prctl.h | 2 +- include/uapi/linux/vm_sockets.h | 17 ++ include/video/sticore.h | 2 +- init/Makefile | 1 + init/main.c | 4 + io_uring/fdinfo.c | 9 +- io_uring/sqpoll.c | 12 +- kernel/audit_watch.c | 9 +- kernel/bpf/core.c | 6 +- kernel/bpf/verifier.c | 83 ++++++--- kernel/cgroup/cgroup.c | 12 -- kernel/cpu.c | 11 +- kernel/debug/debug_core.c | 3 + kernel/dma/swiotlb.c | 28 +-- kernel/events/core.c | 17 ++ kernel/events/ring_buffer.c | 6 + kernel/irq/debugfs.c | 1 - kernel/irq/generic-chip.c | 25 ++- kernel/irq/msi.c | 12 +- kernel/kexec.c | 2 +- kernel/locking/test-ww_mutex.c | 20 ++- kernel/padata.c | 2 +- kernel/power/snapshot.c | 16 +- kernel/rcu/rcu.h | 7 + kernel/rcu/srcutiny.c | 1 + kernel/rcu/srcutree.c | 11 +- kernel/rcu/tasks.h | 1 + kernel/rcu/tiny.c | 1 + kernel/rcu/tree.c | 22 +++ kernel/rcu/tree.h | 4 + kernel/rcu/tree_stall.h | 20 ++- kernel/reboot.c | 1 + kernel/sched/core.c | 5 +- kernel/smp.c | 13 +- kernel/torture.c | 58 ++---- kernel/trace/trace_events_synth.c | 2 +- kernel/trace/trace_fprobe.c | 9 +- kernel/watch_queue.c | 2 +- kernel/watchdog.c | 7 + kernel/workqueue.c | 20 ++- lib/generic-radix-tree.c | 17 +- mm/cma.c | 2 +- mm/damon/core.c | 12 +- mm/damon/lru_sort.c | 4 +- mm/damon/ops-common.c | 5 +- mm/damon/sysfs-schemes.c | 5 + mm/damon/sysfs.c | 89 +++++---- mm/huge_memory.c | 16 +- mm/hugetlb.c | 2 +- mm/memcontrol.c | 3 +- mm/memory_hotplug.c | 2 +- mm/util.c | 10 ++ net/9p/client.c | 2 +- net/9p/trans_fd.c | 13 +- net/bluetooth/hci_conn.c | 6 +- net/bluetooth/hci_sysfs.c | 23 +-- net/bridge/netfilter/nf_conntrack_bridge.c | 2 +- net/core/sock.c | 2 +- net/ipv4/inet_hashtables.c | 2 +- net/ipv4/tcp_output.c | 2 +- net/mac80211/cfg.c | 4 + net/mptcp/pm_netlink.c | 5 +- net/mptcp/protocol.c | 4 + net/mptcp/sockopt.c | 3 + net/ncsi/ncsi-aen.c | 5 - net/netfilter/nf_tables_api.c | 58 ++++-- net/netfilter/nft_byteorder.c | 5 +- net/netfilter/nft_meta.c | 2 +- net/sched/act_ct.c | 3 + net/sunrpc/clnt.c | 7 +- net/sunrpc/rpcb_clnt.c | 4 + net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 3 +- net/tipc/netlink_compat.c | 1 + net/unix/af_unix.c | 9 +- net/vmw_vsock/af_vsock.c | 6 + samples/bpf/syscall_tp_user.c | 45 +++-- scripts/Makefile.vmlinux | 1 + scripts/gcc-plugins/randomize_layout_plugin.c | 21 +-- scripts/gdb/linux/constants.py.in | 1 + scripts/gdb/linux/vmalloc.py | 8 +- security/apparmor/apparmorfs.c | 11 +- security/apparmor/audit.c | 71 ++++---- security/apparmor/capability.c | 29 +-- security/apparmor/domain.c | 97 ++++++---- security/apparmor/file.c | 199 +++++++++++++-------- security/apparmor/include/audit.h | 37 ++-- security/apparmor/include/capability.h | 3 +- security/apparmor/include/file.h | 17 +- security/apparmor/include/ipc.h | 4 +- security/apparmor/include/mount.h | 26 ++- security/apparmor/include/net.h | 19 +- security/apparmor/include/perms.h | 4 +- security/apparmor/include/policy.h | 9 +- security/apparmor/include/resource.h | 3 +- security/apparmor/include/task.h | 3 +- security/apparmor/ipc.c | 49 ++--- security/apparmor/lib.c | 50 +++--- security/apparmor/lsm.c | 113 ++++++++---- security/apparmor/mount.c | 166 ++++++++++------- security/apparmor/net.c | 61 ++++--- security/apparmor/policy.c | 73 ++++---- security/apparmor/policy_unpack.c | 29 +-- security/apparmor/resource.c | 54 +++--- security/apparmor/task.c | 58 +++--- security/integrity/Kconfig | 2 - security/integrity/iint.c | 48 +++-- security/integrity/ima/ima_api.c | 5 + security/integrity/ima/ima_main.c | 16 +- security/integrity/integrity.h | 2 + security/keys/trusted-keys/trusted_core.c | 20 +-- security/keys/trusted-keys/trusted_tee.c | 64 +++---- sound/core/info.c | 21 ++- sound/hda/hdac_stream.c | 6 +- sound/pci/hda/patch_realtek.c | 26 ++- sound/soc/codecs/cs35l56.c | 11 ++ sound/soc/codecs/lpass-wsa-macro.c | 3 + sound/soc/codecs/wsa883x.c | 7 +- sound/soc/intel/boards/sof_sdw.c | 6 + sound/soc/intel/common/soc-acpi-intel-cht-match.c | 43 +++++ sound/soc/mediatek/mt8188/mt8188-mt6359.c | 21 +++ sound/soc/soc-dai.c | 7 + sound/soc/soc-pcm.c | 12 +- sound/soc/sof/ipc4.c | 3 + sound/soc/sof/sof-audio.c | 7 + sound/soc/sof/sof-pci-dev.c | 8 + sound/soc/ti/omap-mcbsp.c | 6 +- sound/usb/mixer_scarlett_gen2.c | 63 +++---- tools/include/uapi/linux/prctl.h | 2 +- tools/perf/util/intel-pt.c | 2 + tools/power/x86/turbostat/turbostat.c | 3 +- tools/testing/cxl/test/cxl.c | 2 +- .../testing/selftests/bpf/progs/verifier_loops1.c | 9 +- tools/testing/selftests/bpf/verifier/calls.c | 6 +- tools/testing/selftests/bpf/verifier/ld_imm64.c | 8 +- tools/testing/selftests/clone3/clone3.c | 7 +- tools/testing/selftests/efivarfs/create-read.c | 2 + tools/testing/selftests/lkdtm/config | 1 - tools/testing/selftests/lkdtm/tests.txt | 2 +- tools/testing/selftests/net/mptcp/mptcp_join.sh | 2 +- tools/testing/selftests/resctrl/Makefile | 2 +- tools/testing/selftests/resctrl/cache.c | 5 +- tools/testing/selftests/resctrl/cat_test.c | 21 +-- tools/testing/selftests/resctrl/cmt_test.c | 37 ++-- tools/testing/selftests/resctrl/mba_test.c | 6 +- tools/testing/selftests/resctrl/mbm_test.c | 9 +- tools/testing/selftests/resctrl/resctrl.h | 23 ++- tools/testing/selftests/resctrl/resctrl_tests.c | 132 ++++++++------ tools/testing/selftests/resctrl/resctrl_val.c | 36 ++-- tools/testing/selftests/resctrl/resctrlfs.c | 69 +++---- 597 files changed, 6080 insertions(+), 3382 deletions(-)

5 months, 1 week

12
549
0 0

[PATCH] ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on action required events

by Shuai Xue

There are two major types of uncorrected error (UC) : - Action Required: The error is detected and the processor already consumes the memory. OS requires to take action (for example, offline failure page/kill failure thread) to recover this uncorrectable error. - Action Optional: The error is detected out of processor execution context. Some data in the memory are corrupted. But the data have not been consumed. OS is optional to take action to recover this uncorrectable error. For X86 platforms, we can easily distinguish between these two types based on the MCA Bank. While for arm64 platform, the memory failure flags for all UCs which severity are GHES_SEV_RECOVERABLE are set as 0, a.k.a, Action Optional now. If UC is detected by a background scrubber, it is obviously an Action Optional error. For other errors, we should conservatively regard them as Action Required. cper_sec_mem_err::error_type identifies the type of error that occurred if CPER_MEM_VALID_ERROR_TYPE is set. So, set memory failure flags as 0 for Scrub Uncorrected Error (type 14). Otherwise, set memory failure flags as MF_ACTION_REQUIRED. Signed-off-by: Shuai Xue <xueshuai(a)linux.alibaba.com> --- drivers/acpi/apei/ghes.c | 10 ++++++++-- include/linux/cper.h | 3 +++ 2 files changed, 11 insertions(+), 2 deletions(-) diff --git a/drivers/acpi/apei/ghes.c b/drivers/acpi/apei/ghes.c index 80ad530583c9..6c03059cbfc6 100644 --- a/drivers/acpi/apei/ghes.c +++ b/drivers/acpi/apei/ghes.c @@ -474,8 +474,14 @@ static bool ghes_handle_memory_failure(struct acpi_hest_generic_data *gdata, if (sec_sev == GHES_SEV_CORRECTED && (gdata->flags & CPER_SEC_ERROR_THRESHOLD_EXCEEDED)) flags = MF_SOFT_OFFLINE; - if (sev == GHES_SEV_RECOVERABLE && sec_sev == GHES_SEV_RECOVERABLE) - flags = 0; + if (sev == GHES_SEV_RECOVERABLE && sec_sev == GHES_SEV_RECOVERABLE) { + if (mem_err->validation_bits & CPER_MEM_VALID_ERROR_TYPE) + flags = mem_err->error_type == CPER_MEM_SCRUB_UC ? + 0 : + MF_ACTION_REQUIRED; + else + flags = MF_ACTION_REQUIRED; + } if (flags != -1) return ghes_do_memory_failure(mem_err->physical_addr, flags); diff --git a/include/linux/cper.h b/include/linux/cper.h index eacb7dd7b3af..b77ab7636614 100644 --- a/include/linux/cper.h +++ b/include/linux/cper.h @@ -235,6 +235,9 @@ enum { #define CPER_MEM_VALID_BANK_ADDRESS 0x100000 #define CPER_MEM_VALID_CHIP_ID 0x200000 +#define CPER_MEM_SCRUB_CE 13 +#define CPER_MEM_SCRUB_UC 14 + #define CPER_MEM_EXT_ROW_MASK 0x3 #define CPER_MEM_EXT_ROW_SHIFT 16 -- 2.20.1.9.gb50a0d7

5 months, 1 week

9
45
0 0

[RFT 1/2] RISC-V: handle missing "no-map" properties for OpenSBI's PMP protected regions

by Conor Dooley

Add an erratum for versions [v0.8 to v1.3) of OpenSBI which fail to add the "no-map" property to the reserved memory nodes for the regions it has protected using PMPs. Our existing fix sweeping hibernation under the carpet by marking it NONPORTABLE is insufficient as there are other ways to generate accesses to these reserved memory regions, as Petr discovered [1] while testing crash kernels & kdump. Intercede during the boot process when the afflicted versions of OpenSBI are present & set the "no-map" property in all "mmode_resv" nodes before the kernel does its reserved memory region initialisation. Reported-by: Song Shuai <suagrfillet(a)gmail.com> Link: https://lore.kernel.org/all/CAAYs2=gQvkhTeioMmqRDVGjdtNF_vhB+vm_1dHJxPNi75Y… Reported-by: JeeHeng Sia <jeeheng.sia(a)starfivetech.com> Link: https://groups.google.com/a/groups.riscv.org/g/sw-dev/c/ITXwaKfA6z8 Reported-by: Petr Tesarik <petrtesarik(a)huaweicloud.com> Closes: https://lore.kernel.org/linux-riscv/76ff0f51-d6c1-580d-f943-061e93073306@hu… [1] CC: stable(a)vger.kernel.org Signed-off-by: Conor Dooley <conor.dooley(a)microchip.com> --- arch/riscv/include/asm/sbi.h | 5 +++++ arch/riscv/kernel/sbi.c | 42 +++++++++++++++++++++++++++++++++++- arch/riscv/mm/init.c | 3 +++ 3 files changed, 49 insertions(+), 1 deletion(-) diff --git a/arch/riscv/include/asm/sbi.h b/arch/riscv/include/asm/sbi.h index 5b4a1bf5f439..5360f3476278 100644 --- a/arch/riscv/include/asm/sbi.h +++ b/arch/riscv/include/asm/sbi.h @@ -252,6 +252,9 @@ enum sbi_pmu_ctr_type { #define SBI_ERR_ALREADY_STARTED -7 #define SBI_ERR_ALREADY_STOPPED -8 +/* SBI implementation IDs */ +#define SBI_IMP_OPENSBI 1 + extern unsigned long sbi_spec_version; struct sbiret { long error; @@ -259,6 +262,8 @@ struct sbiret { }; void sbi_init(void); +void sbi_apply_reserved_mem_erratum(void *dtb_va); + struct sbiret sbi_ecall(int ext, int fid, unsigned long arg0, unsigned long arg1, unsigned long arg2, unsigned long arg3, unsigned long arg4, diff --git a/arch/riscv/kernel/sbi.c b/arch/riscv/kernel/sbi.c index c672c8ba9a2a..aeb27263fa53 100644 --- a/arch/riscv/kernel/sbi.c +++ b/arch/riscv/kernel/sbi.c @@ -5,8 +5,10 @@ * Copyright (c) 2020 Western Digital Corporation or its affiliates. */ +#include <linux/acpi.h> #include <linux/bits.h> #include <linux/init.h> +#include <linux/libfdt.h> #include <linux/pm.h> #include <linux/reboot.h> #include <asm/sbi.h> @@ -583,6 +585,40 @@ long sbi_get_mimpid(void) } EXPORT_SYMBOL_GPL(sbi_get_mimpid); +static long sbi_firmware_id; +static long sbi_firmware_version; + +/* + * For devicetrees patched by OpenSBI a "mmode_resv" node is added to cover + * the region OpenSBI has protected by means of a PMP. Some versions of OpenSBI, + * [v0.8 to v1.3), omitted the "no-map" property, but this trips up hibernation + * among other things. + */ +void __init sbi_apply_reserved_mem_erratum(void *dtb_pa) +{ + int child, reserved_mem; + + if (sbi_firmware_id != SBI_IMP_OPENSBI) + return; + + if (!acpi_disabled) + return; + + if (sbi_firmware_version >= 0x10003 || sbi_firmware_version < 0x8) + return; + + reserved_mem = fdt_path_offset((void *)dtb_pa, "/reserved-memory"); + if (reserved_mem < 0) + return; + + fdt_for_each_subnode(child, (void *)dtb_pa, reserved_mem) { + const char *name = fdt_get_name((void *)dtb_pa, child, NULL); + + if (!strncmp(name, "mmode_resv", 10)) + fdt_setprop((void *)dtb_pa, child, "no-map", NULL, 0); + } +}; + void __init sbi_init(void) { int ret; @@ -596,8 +632,12 @@ void __init sbi_init(void) sbi_major_version(), sbi_minor_version()); if (!sbi_spec_is_0_1()) { + sbi_firmware_id = sbi_get_firmware_id(); + sbi_firmware_version = sbi_get_firmware_version(); + pr_info("SBI implementation ID=0x%lx Version=0x%lx\n", - sbi_get_firmware_id(), sbi_get_firmware_version()); + sbi_firmware_id, sbi_firmware_version); + if (sbi_probe_extension(SBI_EXT_TIME)) { __sbi_set_timer = __sbi_set_timer_v02; pr_info("SBI TIME extension detected\n"); diff --git a/arch/riscv/mm/init.c b/arch/riscv/mm/init.c index 70fb31960b63..cb16bfdeacdb 100644 --- a/arch/riscv/mm/init.c +++ b/arch/riscv/mm/init.c @@ -29,6 +29,7 @@ #include <asm/tlbflush.h> #include <asm/sections.h> #include <asm/soc.h> +#include <asm/sbi.h> #include <asm/io.h> #include <asm/ptdump.h> #include <asm/numa.h> @@ -253,6 +254,8 @@ static void __init setup_bootmem(void) * in the device tree, otherwise the allocation could end up in a * reserved region. */ + + sbi_apply_reserved_mem_erratum(dtb_early_va); early_init_fdt_scan_reserved_mem(); /* -- 2.40.1

5 months, 2 weeks

8
19
0 0

FAILED: patch "[PATCH] powerpc/ftrace: Create a dummy stackframe to fix stack unwind" failed to apply to 5.15-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 5.15-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.15.y git checkout FETCH_HEAD git cherry-pick -x 41a506ef71eb38d94fe133f565c87c3e06ccc072 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2023080733-wife-elope-de1b@gregkh' --subject-prefix 'PATCH 5.15.y' HEAD^.. Possible dependencies: 41a506ef71eb ("powerpc/ftrace: Create a dummy stackframe to fix stack unwind") a5f04d1f2724 ("powerpc/ftrace: Regroup PPC64 specific operations in ftrace_mprofile.S") 228216716cb5 ("powerpc/ftrace: Refactor ftrace_{regs_}caller") 9bdb2eec3dde ("powerpc/ftrace: Don't use lmw/stmw in ftrace_regs_caller()") 76b372814b08 ("powerpc/ftrace: Style cleanup in ftrace_mprofile.S") fc75f8733798 ("powerpc/ftrace: Have arch_ftrace_get_regs() return NULL unless FL_SAVE_REGS is set") 34d8dac807f0 ("powerpc/ftrace: Also save r1 in ftrace_caller()") 4ee83a2cfbc4 ("powerpc/ftrace: Remove ftrace_32.S") 41315494beed ("powerpc/ftrace: Prepare ftrace_64_mprofile.S for reuse by PPC32") 830213786c49 ("powerpc/ftrace: directly call of function graph tracer by ftrace caller") 0c81ed5ed438 ("powerpc/ftrace: Refactor ftrace_{en/dis}able_ftrace_graph_caller") 40b035efe288 ("powerpc/ftrace: Implement CONFIG_DYNAMIC_FTRACE_WITH_ARGS") c75388a8ceff ("powerpc/ftrace: Prepare PPC64's ftrace_caller() for CONFIG_DYNAMIC_FTRACE_WITH_ARGS") d95bf254be5f ("powerpc/ftrace: Prepare PPC32's ftrace_caller() for CONFIG_DYNAMIC_FTRACE_WITH_ARGS") 7bdb478c1d15 ("powerpc/ftrace: Simplify PPC32's return_to_handler()") 7875bc9b07cd ("powerpc/ftrace: Don't save again LR in ftrace_regs_caller() on PPC32") c545b9f040f3 ("powerpc/inst: Define ppc_inst_t") aebd1fb45c62 ("powerpc: flexible GPR range save/restore macros") 7dfbfb87c243 ("powerpc/ftrace: Activate HAVE_DYNAMIC_FTRACE_WITH_REGS on PPC32") c93d4f6ecf4b ("powerpc/ftrace: Add module_trampoline_target() for PPC32") thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 41a506ef71eb38d94fe133f565c87c3e06ccc072 Mon Sep 17 00:00:00 2001 From: Naveen N Rao <naveen(a)kernel.org> Date: Wed, 21 Jun 2023 10:43:49 +0530 Subject: [PATCH] powerpc/ftrace: Create a dummy stackframe to fix stack unwind With ppc64 -mprofile-kernel and ppc32 -pg, profiling instructions to call into ftrace are emitted right at function entry. The instruction sequence used is minimal to reduce overhead. Crucially, a stackframe is not created for the function being traced. This breaks stack unwinding since the function being traced does not have a stackframe for itself. As such, it never shows up in the backtrace: /sys/kernel/debug/tracing # echo 1 > /proc/sys/kernel/stack_tracer_enabled /sys/kernel/debug/tracing # cat stack_trace Depth Size Location (17 entries) ----- ---- -------- 0) 4144 32 ftrace_call+0x4/0x44 1) 4112 432 get_page_from_freelist+0x26c/0x1ad0 2) 3680 496 __alloc_pages+0x290/0x1280 3) 3184 336 __folio_alloc+0x34/0x90 4) 2848 176 vma_alloc_folio+0xd8/0x540 5) 2672 272 __handle_mm_fault+0x700/0x1cc0 6) 2400 208 handle_mm_fault+0xf0/0x3f0 7) 2192 80 ___do_page_fault+0x3e4/0xbe0 8) 2112 160 do_page_fault+0x30/0xc0 9) 1952 256 data_access_common_virt+0x210/0x220 10) 1696 400 0xc00000000f16b100 11) 1296 384 load_elf_binary+0x804/0x1b80 12) 912 208 bprm_execve+0x2d8/0x7e0 13) 704 64 do_execveat_common+0x1d0/0x2f0 14) 640 160 sys_execve+0x54/0x70 15) 480 64 system_call_exception+0x138/0x350 16) 416 416 system_call_common+0x160/0x2c4 Fix this by having ftrace create a dummy stackframe for the function being traced. With this, backtraces now capture the function being traced: /sys/kernel/debug/tracing # cat stack_trace Depth Size Location (17 entries) ----- ---- -------- 0) 3888 32 _raw_spin_trylock+0x8/0x70 1) 3856 576 get_page_from_freelist+0x26c/0x1ad0 2) 3280 64 __alloc_pages+0x290/0x1280 3) 3216 336 __folio_alloc+0x34/0x90 4) 2880 176 vma_alloc_folio+0xd8/0x540 5) 2704 416 __handle_mm_fault+0x700/0x1cc0 6) 2288 96 handle_mm_fault+0xf0/0x3f0 7) 2192 48 ___do_page_fault+0x3e4/0xbe0 8) 2144 192 do_page_fault+0x30/0xc0 9) 1952 608 data_access_common_virt+0x210/0x220 10) 1344 16 0xc0000000334bbb50 11) 1328 416 load_elf_binary+0x804/0x1b80 12) 912 64 bprm_execve+0x2d8/0x7e0 13) 848 176 do_execveat_common+0x1d0/0x2f0 14) 672 192 sys_execve+0x54/0x70 15) 480 64 system_call_exception+0x138/0x350 16) 416 416 system_call_common+0x160/0x2c4 This results in two additional stores in the ftrace entry code, but produces reliable backtraces. Fixes: 153086644fd1 ("powerpc/ftrace: Add support for -mprofile-kernel ftrace ABI") Cc: stable(a)vger.kernel.org Signed-off-by: Naveen N Rao <naveen(a)kernel.org> Signed-off-by: Michael Ellerman <mpe(a)ellerman.id.au> Link: https://msgid.link/20230621051349.759567-1-naveen@kernel.org diff --git a/arch/powerpc/kernel/trace/ftrace_mprofile.S b/arch/powerpc/kernel/trace/ftrace_mprofile.S index ffb1db386849..1f7d86de1538 100644 --- a/arch/powerpc/kernel/trace/ftrace_mprofile.S +++ b/arch/powerpc/kernel/trace/ftrace_mprofile.S @@ -33,6 +33,9 @@ * and then arrange for the ftrace function to be called. */ .macro ftrace_regs_entry allregs + /* Create a minimal stack frame for representing B */ + PPC_STLU r1, -STACK_FRAME_MIN_SIZE(r1) + /* Create our stack frame + pt_regs */ PPC_STLU r1,-SWITCH_FRAME_SIZE(r1) @@ -42,7 +45,7 @@ #ifdef CONFIG_PPC64 /* Save the original return address in A's stack frame */ - std r0, LRSAVE+SWITCH_FRAME_SIZE(r1) + std r0, LRSAVE+SWITCH_FRAME_SIZE+STACK_FRAME_MIN_SIZE(r1) /* Ok to continue? */ lbz r3, PACA_FTRACE_ENABLED(r13) cmpdi r3, 0 @@ -77,6 +80,8 @@ mflr r7 /* Save it as pt_regs->nip */ PPC_STL r7, _NIP(r1) + /* Also save it in B's stackframe header for proper unwind */ + PPC_STL r7, LRSAVE+SWITCH_FRAME_SIZE(r1) /* Save the read LR in pt_regs->link */ PPC_STL r0, _LINK(r1) @@ -142,7 +147,7 @@ #endif /* Pop our stack frame */ - addi r1, r1, SWITCH_FRAME_SIZE + addi r1, r1, SWITCH_FRAME_SIZE+STACK_FRAME_MIN_SIZE #ifdef CONFIG_LIVEPATCH_64 /* Based on the cmpd above, if the NIP was altered handle livepatch */

5 months, 2 weeks

3
3
0 0

FAILED: patch "[PATCH] powerpc/ftrace: Create a dummy stackframe to fix stack unwind" failed to apply to 5.10-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 5.10-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.10.y git checkout FETCH_HEAD git cherry-pick -x 41a506ef71eb38d94fe133f565c87c3e06ccc072 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2023080735-masculine-twister-ba16@gregkh' --subject-prefix 'PATCH 5.10.y' HEAD^.. Possible dependencies: 41a506ef71eb ("powerpc/ftrace: Create a dummy stackframe to fix stack unwind") a5f04d1f2724 ("powerpc/ftrace: Regroup PPC64 specific operations in ftrace_mprofile.S") 228216716cb5 ("powerpc/ftrace: Refactor ftrace_{regs_}caller") 9bdb2eec3dde ("powerpc/ftrace: Don't use lmw/stmw in ftrace_regs_caller()") 76b372814b08 ("powerpc/ftrace: Style cleanup in ftrace_mprofile.S") fc75f8733798 ("powerpc/ftrace: Have arch_ftrace_get_regs() return NULL unless FL_SAVE_REGS is set") 34d8dac807f0 ("powerpc/ftrace: Also save r1 in ftrace_caller()") 4ee83a2cfbc4 ("powerpc/ftrace: Remove ftrace_32.S") 41315494beed ("powerpc/ftrace: Prepare ftrace_64_mprofile.S for reuse by PPC32") 830213786c49 ("powerpc/ftrace: directly call of function graph tracer by ftrace caller") 0c81ed5ed438 ("powerpc/ftrace: Refactor ftrace_{en/dis}able_ftrace_graph_caller") 40b035efe288 ("powerpc/ftrace: Implement CONFIG_DYNAMIC_FTRACE_WITH_ARGS") c75388a8ceff ("powerpc/ftrace: Prepare PPC64's ftrace_caller() for CONFIG_DYNAMIC_FTRACE_WITH_ARGS") d95bf254be5f ("powerpc/ftrace: Prepare PPC32's ftrace_caller() for CONFIG_DYNAMIC_FTRACE_WITH_ARGS") 7bdb478c1d15 ("powerpc/ftrace: Simplify PPC32's return_to_handler()") 7875bc9b07cd ("powerpc/ftrace: Don't save again LR in ftrace_regs_caller() on PPC32") c545b9f040f3 ("powerpc/inst: Define ppc_inst_t") aebd1fb45c62 ("powerpc: flexible GPR range save/restore macros") 7dfbfb87c243 ("powerpc/ftrace: Activate HAVE_DYNAMIC_FTRACE_WITH_REGS on PPC32") c93d4f6ecf4b ("powerpc/ftrace: Add module_trampoline_target() for PPC32") thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 41a506ef71eb38d94fe133f565c87c3e06ccc072 Mon Sep 17 00:00:00 2001 From: Naveen N Rao <naveen(a)kernel.org> Date: Wed, 21 Jun 2023 10:43:49 +0530 Subject: [PATCH] powerpc/ftrace: Create a dummy stackframe to fix stack unwind With ppc64 -mprofile-kernel and ppc32 -pg, profiling instructions to call into ftrace are emitted right at function entry. The instruction sequence used is minimal to reduce overhead. Crucially, a stackframe is not created for the function being traced. This breaks stack unwinding since the function being traced does not have a stackframe for itself. As such, it never shows up in the backtrace: /sys/kernel/debug/tracing # echo 1 > /proc/sys/kernel/stack_tracer_enabled /sys/kernel/debug/tracing # cat stack_trace Depth Size Location (17 entries) ----- ---- -------- 0) 4144 32 ftrace_call+0x4/0x44 1) 4112 432 get_page_from_freelist+0x26c/0x1ad0 2) 3680 496 __alloc_pages+0x290/0x1280 3) 3184 336 __folio_alloc+0x34/0x90 4) 2848 176 vma_alloc_folio+0xd8/0x540 5) 2672 272 __handle_mm_fault+0x700/0x1cc0 6) 2400 208 handle_mm_fault+0xf0/0x3f0 7) 2192 80 ___do_page_fault+0x3e4/0xbe0 8) 2112 160 do_page_fault+0x30/0xc0 9) 1952 256 data_access_common_virt+0x210/0x220 10) 1696 400 0xc00000000f16b100 11) 1296 384 load_elf_binary+0x804/0x1b80 12) 912 208 bprm_execve+0x2d8/0x7e0 13) 704 64 do_execveat_common+0x1d0/0x2f0 14) 640 160 sys_execve+0x54/0x70 15) 480 64 system_call_exception+0x138/0x350 16) 416 416 system_call_common+0x160/0x2c4 Fix this by having ftrace create a dummy stackframe for the function being traced. With this, backtraces now capture the function being traced: /sys/kernel/debug/tracing # cat stack_trace Depth Size Location (17 entries) ----- ---- -------- 0) 3888 32 _raw_spin_trylock+0x8/0x70 1) 3856 576 get_page_from_freelist+0x26c/0x1ad0 2) 3280 64 __alloc_pages+0x290/0x1280 3) 3216 336 __folio_alloc+0x34/0x90 4) 2880 176 vma_alloc_folio+0xd8/0x540 5) 2704 416 __handle_mm_fault+0x700/0x1cc0 6) 2288 96 handle_mm_fault+0xf0/0x3f0 7) 2192 48 ___do_page_fault+0x3e4/0xbe0 8) 2144 192 do_page_fault+0x30/0xc0 9) 1952 608 data_access_common_virt+0x210/0x220 10) 1344 16 0xc0000000334bbb50 11) 1328 416 load_elf_binary+0x804/0x1b80 12) 912 64 bprm_execve+0x2d8/0x7e0 13) 848 176 do_execveat_common+0x1d0/0x2f0 14) 672 192 sys_execve+0x54/0x70 15) 480 64 system_call_exception+0x138/0x350 16) 416 416 system_call_common+0x160/0x2c4 This results in two additional stores in the ftrace entry code, but produces reliable backtraces. Fixes: 153086644fd1 ("powerpc/ftrace: Add support for -mprofile-kernel ftrace ABI") Cc: stable(a)vger.kernel.org Signed-off-by: Naveen N Rao <naveen(a)kernel.org> Signed-off-by: Michael Ellerman <mpe(a)ellerman.id.au> Link: https://msgid.link/20230621051349.759567-1-naveen@kernel.org diff --git a/arch/powerpc/kernel/trace/ftrace_mprofile.S b/arch/powerpc/kernel/trace/ftrace_mprofile.S index ffb1db386849..1f7d86de1538 100644 --- a/arch/powerpc/kernel/trace/ftrace_mprofile.S +++ b/arch/powerpc/kernel/trace/ftrace_mprofile.S @@ -33,6 +33,9 @@ * and then arrange for the ftrace function to be called. */ .macro ftrace_regs_entry allregs + /* Create a minimal stack frame for representing B */ + PPC_STLU r1, -STACK_FRAME_MIN_SIZE(r1) + /* Create our stack frame + pt_regs */ PPC_STLU r1,-SWITCH_FRAME_SIZE(r1) @@ -42,7 +45,7 @@ #ifdef CONFIG_PPC64 /* Save the original return address in A's stack frame */ - std r0, LRSAVE+SWITCH_FRAME_SIZE(r1) + std r0, LRSAVE+SWITCH_FRAME_SIZE+STACK_FRAME_MIN_SIZE(r1) /* Ok to continue? */ lbz r3, PACA_FTRACE_ENABLED(r13) cmpdi r3, 0 @@ -77,6 +80,8 @@ mflr r7 /* Save it as pt_regs->nip */ PPC_STL r7, _NIP(r1) + /* Also save it in B's stackframe header for proper unwind */ + PPC_STL r7, LRSAVE+SWITCH_FRAME_SIZE(r1) /* Save the read LR in pt_regs->link */ PPC_STL r0, _LINK(r1) @@ -142,7 +147,7 @@ #endif /* Pop our stack frame */ - addi r1, r1, SWITCH_FRAME_SIZE + addi r1, r1, SWITCH_FRAME_SIZE+STACK_FRAME_MIN_SIZE #ifdef CONFIG_LIVEPATCH_64 /* Based on the cmpd above, if the NIP was altered handle livepatch */

5 months, 2 weeks

2
2
0 0

FAILED: patch "[PATCH] powerpc/ftrace: Create a dummy stackframe to fix stack unwind" failed to apply to 5.4-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 5.4-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.4.y git checkout FETCH_HEAD git cherry-pick -x 41a506ef71eb38d94fe133f565c87c3e06ccc072 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2023080737-guileless-magazine-d8dc@gregkh' --subject-prefix 'PATCH 5.4.y' HEAD^.. Possible dependencies: 41a506ef71eb ("powerpc/ftrace: Create a dummy stackframe to fix stack unwind") a5f04d1f2724 ("powerpc/ftrace: Regroup PPC64 specific operations in ftrace_mprofile.S") 228216716cb5 ("powerpc/ftrace: Refactor ftrace_{regs_}caller") 9bdb2eec3dde ("powerpc/ftrace: Don't use lmw/stmw in ftrace_regs_caller()") 76b372814b08 ("powerpc/ftrace: Style cleanup in ftrace_mprofile.S") fc75f8733798 ("powerpc/ftrace: Have arch_ftrace_get_regs() return NULL unless FL_SAVE_REGS is set") 34d8dac807f0 ("powerpc/ftrace: Also save r1 in ftrace_caller()") 4ee83a2cfbc4 ("powerpc/ftrace: Remove ftrace_32.S") 41315494beed ("powerpc/ftrace: Prepare ftrace_64_mprofile.S for reuse by PPC32") 830213786c49 ("powerpc/ftrace: directly call of function graph tracer by ftrace caller") 0c81ed5ed438 ("powerpc/ftrace: Refactor ftrace_{en/dis}able_ftrace_graph_caller") 40b035efe288 ("powerpc/ftrace: Implement CONFIG_DYNAMIC_FTRACE_WITH_ARGS") c75388a8ceff ("powerpc/ftrace: Prepare PPC64's ftrace_caller() for CONFIG_DYNAMIC_FTRACE_WITH_ARGS") d95bf254be5f ("powerpc/ftrace: Prepare PPC32's ftrace_caller() for CONFIG_DYNAMIC_FTRACE_WITH_ARGS") 7bdb478c1d15 ("powerpc/ftrace: Simplify PPC32's return_to_handler()") 7875bc9b07cd ("powerpc/ftrace: Don't save again LR in ftrace_regs_caller() on PPC32") c545b9f040f3 ("powerpc/inst: Define ppc_inst_t") aebd1fb45c62 ("powerpc: flexible GPR range save/restore macros") 7dfbfb87c243 ("powerpc/ftrace: Activate HAVE_DYNAMIC_FTRACE_WITH_REGS on PPC32") c93d4f6ecf4b ("powerpc/ftrace: Add module_trampoline_target() for PPC32") thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 41a506ef71eb38d94fe133f565c87c3e06ccc072 Mon Sep 17 00:00:00 2001 From: Naveen N Rao <naveen(a)kernel.org> Date: Wed, 21 Jun 2023 10:43:49 +0530 Subject: [PATCH] powerpc/ftrace: Create a dummy stackframe to fix stack unwind With ppc64 -mprofile-kernel and ppc32 -pg, profiling instructions to call into ftrace are emitted right at function entry. The instruction sequence used is minimal to reduce overhead. Crucially, a stackframe is not created for the function being traced. This breaks stack unwinding since the function being traced does not have a stackframe for itself. As such, it never shows up in the backtrace: /sys/kernel/debug/tracing # echo 1 > /proc/sys/kernel/stack_tracer_enabled /sys/kernel/debug/tracing # cat stack_trace Depth Size Location (17 entries) ----- ---- -------- 0) 4144 32 ftrace_call+0x4/0x44 1) 4112 432 get_page_from_freelist+0x26c/0x1ad0 2) 3680 496 __alloc_pages+0x290/0x1280 3) 3184 336 __folio_alloc+0x34/0x90 4) 2848 176 vma_alloc_folio+0xd8/0x540 5) 2672 272 __handle_mm_fault+0x700/0x1cc0 6) 2400 208 handle_mm_fault+0xf0/0x3f0 7) 2192 80 ___do_page_fault+0x3e4/0xbe0 8) 2112 160 do_page_fault+0x30/0xc0 9) 1952 256 data_access_common_virt+0x210/0x220 10) 1696 400 0xc00000000f16b100 11) 1296 384 load_elf_binary+0x804/0x1b80 12) 912 208 bprm_execve+0x2d8/0x7e0 13) 704 64 do_execveat_common+0x1d0/0x2f0 14) 640 160 sys_execve+0x54/0x70 15) 480 64 system_call_exception+0x138/0x350 16) 416 416 system_call_common+0x160/0x2c4 Fix this by having ftrace create a dummy stackframe for the function being traced. With this, backtraces now capture the function being traced: /sys/kernel/debug/tracing # cat stack_trace Depth Size Location (17 entries) ----- ---- -------- 0) 3888 32 _raw_spin_trylock+0x8/0x70 1) 3856 576 get_page_from_freelist+0x26c/0x1ad0 2) 3280 64 __alloc_pages+0x290/0x1280 3) 3216 336 __folio_alloc+0x34/0x90 4) 2880 176 vma_alloc_folio+0xd8/0x540 5) 2704 416 __handle_mm_fault+0x700/0x1cc0 6) 2288 96 handle_mm_fault+0xf0/0x3f0 7) 2192 48 ___do_page_fault+0x3e4/0xbe0 8) 2144 192 do_page_fault+0x30/0xc0 9) 1952 608 data_access_common_virt+0x210/0x220 10) 1344 16 0xc0000000334bbb50 11) 1328 416 load_elf_binary+0x804/0x1b80 12) 912 64 bprm_execve+0x2d8/0x7e0 13) 848 176 do_execveat_common+0x1d0/0x2f0 14) 672 192 sys_execve+0x54/0x70 15) 480 64 system_call_exception+0x138/0x350 16) 416 416 system_call_common+0x160/0x2c4 This results in two additional stores in the ftrace entry code, but produces reliable backtraces. Fixes: 153086644fd1 ("powerpc/ftrace: Add support for -mprofile-kernel ftrace ABI") Cc: stable(a)vger.kernel.org Signed-off-by: Naveen N Rao <naveen(a)kernel.org> Signed-off-by: Michael Ellerman <mpe(a)ellerman.id.au> Link: https://msgid.link/20230621051349.759567-1-naveen@kernel.org diff --git a/arch/powerpc/kernel/trace/ftrace_mprofile.S b/arch/powerpc/kernel/trace/ftrace_mprofile.S index ffb1db386849..1f7d86de1538 100644 --- a/arch/powerpc/kernel/trace/ftrace_mprofile.S +++ b/arch/powerpc/kernel/trace/ftrace_mprofile.S @@ -33,6 +33,9 @@ * and then arrange for the ftrace function to be called. */ .macro ftrace_regs_entry allregs + /* Create a minimal stack frame for representing B */ + PPC_STLU r1, -STACK_FRAME_MIN_SIZE(r1) + /* Create our stack frame + pt_regs */ PPC_STLU r1,-SWITCH_FRAME_SIZE(r1) @@ -42,7 +45,7 @@ #ifdef CONFIG_PPC64 /* Save the original return address in A's stack frame */ - std r0, LRSAVE+SWITCH_FRAME_SIZE(r1) + std r0, LRSAVE+SWITCH_FRAME_SIZE+STACK_FRAME_MIN_SIZE(r1) /* Ok to continue? */ lbz r3, PACA_FTRACE_ENABLED(r13) cmpdi r3, 0 @@ -77,6 +80,8 @@ mflr r7 /* Save it as pt_regs->nip */ PPC_STL r7, _NIP(r1) + /* Also save it in B's stackframe header for proper unwind */ + PPC_STL r7, LRSAVE+SWITCH_FRAME_SIZE(r1) /* Save the read LR in pt_regs->link */ PPC_STL r0, _LINK(r1) @@ -142,7 +147,7 @@ #endif /* Pop our stack frame */ - addi r1, r1, SWITCH_FRAME_SIZE + addi r1, r1, SWITCH_FRAME_SIZE+STACK_FRAME_MIN_SIZE #ifdef CONFIG_LIVEPATCH_64 /* Based on the cmpd above, if the NIP was altered handle livepatch */

5 months, 2 weeks

2
2
0 0

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror November 2023