July 2020 - Linux-stable-mirror

[PATCH 1/2] btrfs: reloc: fix reloc root leak and NULL pointer dereference

by Qu Wenruo

commit 51415b6c1b117e223bc083e30af675cb5c5498f3 upstream. [BUG] When balance is canceled, there is a pretty high chance that unmounting the fs can lead to lead the NULL pointer dereference: BTRFS warning (device dm-3): page private not zero on page 223158272 ... BTRFS warning (device dm-3): page private not zero on page 223162368 BTRFS error (device dm-3): leaked root 18446744073709551608-304 refcount 1 BUG: kernel NULL pointer dereference, address: 0000000000000168 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 2 PID: 5793 Comm: umount Tainted: G O 5.7.0-rc5-custom+ #53 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 RIP: 0010:__lock_acquire+0x5dc/0x24c0 Call Trace: lock_acquire+0xab/0x390 _raw_spin_lock+0x39/0x80 btrfs_release_extent_buffer_pages+0xd7/0x200 [btrfs] release_extent_buffer+0xb2/0x170 [btrfs] free_extent_buffer+0x66/0xb0 [btrfs] btrfs_put_root+0x8e/0x130 [btrfs] btrfs_check_leaked_roots.cold+0x5/0x5d [btrfs] btrfs_free_fs_info+0xe5/0x120 [btrfs] btrfs_kill_super+0x1f/0x30 [btrfs] deactivate_locked_super+0x3b/0x80 deactivate_super+0x3e/0x50 cleanup_mnt+0x109/0x160 __cleanup_mnt+0x12/0x20 task_work_run+0x67/0xa0 exit_to_usermode_loop+0xc5/0xd0 syscall_return_slowpath+0x205/0x360 do_syscall_64+0x6e/0xb0 entry_SYSCALL_64_after_hwframe+0x49/0xb3 RIP: 0033:0x7fd028ef740b [CAUSE] When balance is canceled, all reloc roots are marked as orphan, and orphan reloc roots are going to be cleaned up. However for orphan reloc roots and merged reloc roots, their lifespan are quite different: Merged reloc roots | Orphan reloc roots by cancel -------------------------------------------------------------------- create_reloc_root() | create_reloc_root() |- refs == 1 | |- refs == 1 | btrfs_grab_root(reloc_root); | btrfs_grab_root(reloc_root); |- refs == 2 | |- refs == 2 | root->reloc_root = reloc_root; | root->reloc_root = reloc_root; >>> No difference so far <<< | prepare_to_merge() | prepare_to_merge() |- btrfs_set_root_refs(item, 1);| |- if (!err) (err == -EINTR) | merge_reloc_roots() | merge_reloc_roots() |- merge_reloc_root() | |- Doing nothing to put reloc root |- insert_dirty_subvol() | |- refs == 2 |- __del_reloc_root() | |- btrfs_put_root() | |- refs == 1 | >>> Now orphan reloc roots still have refs 2 <<< | clean_dirty_subvols() | clean_dirty_subvols() |- btrfs_drop_snapshot() | |- btrfS_drop_snapshot() |- reloc_root get freed | |- reloc_root still has refs 2 | related ebs get freed, but | reloc_root still recorded in | allocated_roots btrfs_check_leaked_roots() | btrfs_check_leaked_roots() |- No leaked roots | |- Leaked reloc_roots detected | |- btrfs_put_root() | |- free_extent_buffer(root->node); | |- eb already freed, caused NULL | pointer dereference [FIX] The fix is to clear fs_root->reloc_root and put it at merge_reloc_roots() time, so that we won't leak reloc roots. Fixes: d2311e698578 ("btrfs: relocation: Delay reloc tree deletion after merge_reloc_roots") CC: stable(a)vger.kernel.org # 5.4.x Tested-by: Johannes Thumshirn <johannes.thumshirn(a)wdc.com> Signed-off-by: Qu Wenruo <wqu(a)suse.com> [Manually solve the conflicts due to no btrfs root refs rework] Signed-off-by: David Sterba <dsterba(a)suse.com> --- fs/btrfs/relocation.c | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/fs/btrfs/relocation.c b/fs/btrfs/relocation.c index e890f09e2073..3f8c706d75ee 100644 --- a/fs/btrfs/relocation.c +++ b/fs/btrfs/relocation.c @@ -2525,12 +2525,10 @@ void merge_reloc_roots(struct reloc_control *rc) reloc_root = list_entry(reloc_roots.next, struct btrfs_root, root_list); + root = read_fs_root(fs_info, reloc_root->root_key.offset); if (btrfs_root_refs(&reloc_root->root_item) > 0) { - root = read_fs_root(fs_info, - reloc_root->root_key.offset); BUG_ON(IS_ERR(root)); BUG_ON(root->reloc_root != reloc_root); - ret = merge_reloc_root(rc, root); if (ret) { if (list_empty(&reloc_root->root_list)) @@ -2539,6 +2537,11 @@ void merge_reloc_roots(struct reloc_control *rc) goto out; } } else { + if (!IS_ERR(root)) { + if (root->reloc_root == reloc_root) + root->reloc_root = NULL; + } + list_del_init(&reloc_root->root_list); /* Don't forget to queue this reloc root for cleanup */ list_add_tail(&reloc_root->reloc_dirty_list, -- 2.27.0

5 years, 1 month

1
1
0 0

stable-rc/linux-5.4.y build: 200 builds: 1 failed, 199 passed, 1 error, 109 warnings (v5.4.53)

by kernelci.org bot

stable-rc/linux-5.4.y build: 200 builds: 1 failed, 199 passed, 1 error, 109 warnings (v5.4.53) Full Build Summary: https://kernelci.org/build/stable-rc/branch/linux-5.4.y/kernel/v5.4.53/ Tree: stable-rc Branch: linux-5.4.y Git Describe: v5.4.53 Git Commit: d811d29517d1ea05bc159579231652d3ca1c2a01 Git URL: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git Built: 7 unique architectures Build Failure Detected: mips: ip27_defconfig: (gcc-8) FAIL Errors and Warnings Detected: arc: allnoconfig (gcc-8): 1 warning axs103_defconfig (gcc-8): 2 warnings axs103_smp_defconfig (gcc-8): 2 warnings haps_hs_defconfig (gcc-8): 2 warnings haps_hs_smp_defconfig (gcc-8): 2 warnings hsdk_defconfig (gcc-8): 2 warnings nsim_hs_defconfig (gcc-8): 2 warnings nsim_hs_smp_defconfig (gcc-8): 2 warnings nsimosci_hs_defconfig (gcc-8): 2 warnings nsimosci_hs_smp_defconfig (gcc-8): 2 warnings tinyconfig (gcc-8): 1 warning vdk_hs38_defconfig (gcc-8): 1 warning vdk_hs38_smp_defconfig (gcc-8): 1 warning arm64: defconfig (gcc-8): 14 warnings arm: am200epdkit_defconfig (gcc-8): 1 warning assabet_defconfig (gcc-8): 1 warning at91_dt_defconfig (gcc-8): 1 warning axm55xx_defconfig (gcc-8): 1 warning cm_x2xx_defconfig (gcc-8): 1 warning cm_x300_defconfig (gcc-8): 1 warning cns3420vb_defconfig (gcc-8): 1 warning colibri_pxa270_defconfig (gcc-8): 1 warning colibri_pxa300_defconfig (gcc-8): 1 warning collie_defconfig (gcc-8): 1 warning davinci_all_defconfig (gcc-8): 1 warning dove_defconfig (gcc-8): 1 warning em_x270_defconfig (gcc-8): 1 warning ep93xx_defconfig (gcc-8): 1 warning eseries_pxa_defconfig (gcc-8): 1 warning exynos_defconfig (gcc-8): 1 warning ezx_defconfig (gcc-8): 1 warning h3600_defconfig (gcc-8): 1 warning h5000_defconfig (gcc-8): 1 warning imote2_defconfig (gcc-8): 1 warning imx_v4_v5_defconfig (gcc-8): 1 warning imx_v6_v7_defconfig (gcc-8): 1 warning integrator_defconfig (gcc-8): 1 warning ixp4xx_defconfig (gcc-8): 1 warning keystone_defconfig (gcc-8): 1 warning lpc32xx_defconfig (gcc-8): 1 warning magician_defconfig (gcc-8): 1 warning milbeaut_m10v_defconfig (gcc-8): 1 warning mini2440_defconfig (gcc-8): 1 warning mmp2_defconfig (gcc-8): 1 warning multi_v5_defconfig (gcc-8): 1 warning multi_v7_defconfig (gcc-8): 1 warning mv78xx0_defconfig (gcc-8): 1 warning mvebu_v5_defconfig (gcc-8): 1 warning mvebu_v7_defconfig (gcc-8): 1 warning mxs_defconfig (gcc-8): 1 warning neponset_defconfig (gcc-8): 1 warning nhk8815_defconfig (gcc-8): 1 warning omap1_defconfig (gcc-8): 1 warning omap2plus_defconfig (gcc-8): 1 warning orion5x_defconfig (gcc-8): 1 warning oxnas_v6_defconfig (gcc-8): 1 warning palmz72_defconfig (gcc-8): 1 warning pcm027_defconfig (gcc-8): 1 warning prima2_defconfig (gcc-8): 1 warning pxa168_defconfig (gcc-8): 1 warning pxa3xx_defconfig (gcc-8): 1 warning pxa910_defconfig (gcc-8): 1 warning qcom_defconfig (gcc-8): 1 warning realview_defconfig (gcc-8): 1 warning s3c6400_defconfig (gcc-8): 1 warning s5pv210_defconfig (gcc-8): 1 warning sama5_defconfig (gcc-8): 1 warning shannon_defconfig (gcc-8): 1 warning spear13xx_defconfig (gcc-8): 1 warning sunxi_defconfig (gcc-8): 1 warning tango4_defconfig (gcc-8): 1 warning tegra_defconfig (gcc-8): 1 warning trizeps4_defconfig (gcc-8): 1 warning u300_defconfig (gcc-8): 1 warning u8500_defconfig (gcc-8): 1 warning versatile_defconfig (gcc-8): 1 warning vexpress_defconfig (gcc-8): 1 warning viper_defconfig (gcc-8): 1 warning xcep_defconfig (gcc-8): 1 warning zeus_defconfig (gcc-8): 1 warning i386: mips: ip27_defconfig (gcc-8): 1 error riscv: rv32_defconfig (gcc-8): 6 warnings x86_64: tinyconfig (gcc-8): 1 warning Errors summary: 1 /scratch/linux/arch/mips/pci/pci-xtalk-bridge.c:287:9: error: ‘struct bridge_irq_chip_data’ has no member named ‘nnasid’; did you mean ‘nasid’? Warnings summary: 61 WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL 24 <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] 5 /scratch/linux/drivers/video/fbdev/sa1100fb.c:975:21: warning: ‘sa1100fb_min_dma_period’ defined but not used [-Wunused-function] 2 <stdin>:830:2: warning: #warning syscall fstat64 not implemented [-Wcpp] 2 <stdin>:1127:2: warning: #warning syscall fstatat64 not implemented [-Wcpp] 2 /scratch/linux/arch/arm64/include/asm/memory.h:239:15: warning: cast from pointer to integer of different size [-Wpointer-to-int-cast] 2 /scratch/linux/arch/arm64/boot/dts/exynos/exynos5433.dtsi:254.3-29: Warning (reg_format): /gpu@14ac0000:reg: property has invalid length (8 bytes) (#address-cells == 2, #size-cells == 2) 1 arch/arm64/boot/dts/exynos/exynos7-espresso.dtb: Warning (spi_bus_reg): Failed prerequisite 'reg_format' 1 arch/arm64/boot/dts/exynos/exynos7-espresso.dtb: Warning (pci_device_bus_num): Failed prerequisite 'reg_format' 1 arch/arm64/boot/dts/exynos/exynos7-espresso.dtb: Warning (i2c_bus_reg): Failed prerequisite 'reg_format' 1 arch/arm64/boot/dts/exynos/exynos5433-tm2e.dtb: Warning (spi_bus_reg): Failed prerequisite 'reg_format' 1 arch/arm64/boot/dts/exynos/exynos5433-tm2e.dtb: Warning (pci_device_bus_num): Failed prerequisite 'reg_format' 1 arch/arm64/boot/dts/exynos/exynos5433-tm2e.dtb: Warning (i2c_bus_reg): Failed prerequisite 'reg_format' 1 arch/arm64/boot/dts/exynos/exynos5433-tm2.dtb: Warning (spi_bus_reg): Failed prerequisite 'reg_format' 1 arch/arm64/boot/dts/exynos/exynos5433-tm2.dtb: Warning (pci_device_bus_num): Failed prerequisite 'reg_format' 1 arch/arm64/boot/dts/exynos/exynos5433-tm2.dtb: Warning (i2c_bus_reg): Failed prerequisite 'reg_format' 1 /scratch/linux/arch/arm64/boot/dts/exynos/exynos7.dtsi:83.3-29: Warning (reg_format): /gpu@14ac0000:reg: property has invalid length (8 bytes) (#address-cells == 2, #size-cells == 2) 1 .config:1156:warning: override: UNWINDER_GUESS changes choice state Section mismatches summary: 1 WARNING: vmlinux.o(.text.unlikely+0x3548): Section mismatch in reference from the function pmax_setup_memory_region() to the function .init.text:add_memory_region() 1 WARNING: vmlinux.o(.text.unlikely+0x31cc): Section mismatch in reference from the function pmax_setup_memory_region() to the function .init.text:add_memory_region() ================================================================================ Detailed per-defconfig build reports: -------------------------------------------------------------------------------- 32r2el_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- allnoconfig (arm64, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- allnoconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- allnoconfig (x86_64, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- allnoconfig (riscv, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- allnoconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- allnoconfig (arc, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] -------------------------------------------------------------------------------- allnoconfig (i386, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- am200epdkit_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- ar7_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- aspeed_g4_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- aspeed_g5_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- assabet_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: /scratch/linux/drivers/video/fbdev/sa1100fb.c:975:21: warning: ‘sa1100fb_min_dma_period’ defined but not used [-Wunused-function] -------------------------------------------------------------------------------- at91_dt_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- ath25_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- ath79_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- axm55xx_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- axs103_defconfig (arc, gcc-8) — PASS, 0 errors, 2 warnings, 0 section mismatches Warnings: <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] -------------------------------------------------------------------------------- axs103_smp_defconfig (arc, gcc-8) — PASS, 0 errors, 2 warnings, 0 section mismatches Warnings: <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] -------------------------------------------------------------------------------- badge4_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- bcm2835_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- bcm47xx_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- bcm63xx_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- bigsur_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- bmips_be_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- bmips_stb_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- capcella_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- cavium_octeon_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- cerfcube_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- ci20_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- clps711x_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- cm_x2xx_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- cm_x300_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- cns3420vb_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- cobalt_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- colibri_pxa270_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- colibri_pxa300_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- collie_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: /scratch/linux/drivers/video/fbdev/sa1100fb.c:975:21: warning: ‘sa1100fb_min_dma_period’ defined but not used [-Wunused-function] -------------------------------------------------------------------------------- corgi_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- davinci_all_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- db1xxx_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- decstation_64_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- decstation_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches Section mismatches: WARNING: vmlinux.o(.text.unlikely+0x3548): Section mismatch in reference from the function pmax_setup_memory_region() to the function .init.text:add_memory_region() -------------------------------------------------------------------------------- decstation_r4k_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches Section mismatches: WARNING: vmlinux.o(.text.unlikely+0x31cc): Section mismatch in reference from the function pmax_setup_memory_region() to the function .init.text:add_memory_region() -------------------------------------------------------------------------------- defconfig (arm64, gcc-8) — PASS, 0 errors, 14 warnings, 0 section mismatches Warnings: /scratch/linux/arch/arm64/include/asm/memory.h:239:15: warning: cast from pointer to integer of different size [-Wpointer-to-int-cast] /scratch/linux/arch/arm64/include/asm/memory.h:239:15: warning: cast from pointer to integer of different size [-Wpointer-to-int-cast] /scratch/linux/arch/arm64/boot/dts/exynos/exynos5433.dtsi:254.3-29: Warning (reg_format): /gpu@14ac0000:reg: property has invalid length (8 bytes) (#address-cells == 2, #size-cells == 2) arch/arm64/boot/dts/exynos/exynos5433-tm2.dtb: Warning (pci_device_bus_num): Failed prerequisite 'reg_format' arch/arm64/boot/dts/exynos/exynos5433-tm2.dtb: Warning (i2c_bus_reg): Failed prerequisite 'reg_format' arch/arm64/boot/dts/exynos/exynos5433-tm2.dtb: Warning (spi_bus_reg): Failed prerequisite 'reg_format' /scratch/linux/arch/arm64/boot/dts/exynos/exynos5433.dtsi:254.3-29: Warning (reg_format): /gpu@14ac0000:reg: property has invalid length (8 bytes) (#address-cells == 2, #size-cells == 2) arch/arm64/boot/dts/exynos/exynos5433-tm2e.dtb: Warning (pci_device_bus_num): Failed prerequisite 'reg_format' arch/arm64/boot/dts/exynos/exynos5433-tm2e.dtb: Warning (i2c_bus_reg): Failed prerequisite 'reg_format' arch/arm64/boot/dts/exynos/exynos5433-tm2e.dtb: Warning (spi_bus_reg): Failed prerequisite 'reg_format' /scratch/linux/arch/arm64/boot/dts/exynos/exynos7.dtsi:83.3-29: Warning (reg_format): /gpu@14ac0000:reg: property has invalid length (8 bytes) (#address-cells == 2, #size-cells == 2) arch/arm64/boot/dts/exynos/exynos7-espresso.dtb: Warning (pci_device_bus_num): Failed prerequisite 'reg_format' arch/arm64/boot/dts/exynos/exynos7-espresso.dtb: Warning (i2c_bus_reg): Failed prerequisite 'reg_format' arch/arm64/boot/dts/exynos/exynos7-espresso.dtb: Warning (spi_bus_reg): Failed prerequisite 'reg_format' -------------------------------------------------------------------------------- defconfig (riscv, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- dove_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- e55_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- ebsa110_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- efm32_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- em_x270_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- ep93xx_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- eseries_pxa_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- exynos_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- ezx_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- footbridge_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- fuloong2e_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- gcw0_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- gemini_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- gpr_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- h3600_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: /scratch/linux/drivers/video/fbdev/sa1100fb.c:975:21: warning: ‘sa1100fb_min_dma_period’ defined but not used [-Wunused-function] -------------------------------------------------------------------------------- h5000_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- hackkit_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- haps_hs_defconfig (arc, gcc-8) — PASS, 0 errors, 2 warnings, 0 section mismatches Warnings: <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] -------------------------------------------------------------------------------- haps_hs_smp_defconfig (arc, gcc-8) — PASS, 0 errors, 2 warnings, 0 section mismatches Warnings: <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] -------------------------------------------------------------------------------- hisi_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- hsdk_defconfig (arc, gcc-8) — PASS, 0 errors, 2 warnings, 0 section mismatches Warnings: <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] -------------------------------------------------------------------------------- i386_defconfig (i386, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- imote2_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- imx_v4_v5_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- imx_v6_v7_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- integrator_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- iop32x_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- ip22_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- ip27_defconfig (mips, gcc-8) — FAIL, 1 error, 0 warnings, 0 section mismatches Errors: /scratch/linux/arch/mips/pci/pci-xtalk-bridge.c:287:9: error: ‘struct bridge_irq_chip_data’ has no member named ‘nnasid’; did you mean ‘nasid’? -------------------------------------------------------------------------------- ip28_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- ip32_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- ixp4xx_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- jazz_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- jmr3927_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- jornada720_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- keystone_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- lart_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- lasat_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- lemote2f_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- loongson1b_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- loongson1c_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- loongson3_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- lpc18xx_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- lpc32xx_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- lpd270_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- lubbock_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- magician_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- mainstone_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- malta_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- malta_kvm_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- malta_kvm_guest_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- malta_qemu_32r6_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- maltaaprp_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- maltasmvp_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- maltasmvp_eva_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- maltaup_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- maltaup_xpa_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- markeins_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- milbeaut_m10v_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- mini2440_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- mips_paravirt_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- mmp2_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- moxart_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- mpc30x_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- mps2_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- msp71xx_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- mtx1_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- multi_v4t_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- multi_v5_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- multi_v7_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- mv78xx0_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- mvebu_v5_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- mvebu_v7_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- mxs_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- neponset_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: /scratch/linux/drivers/video/fbdev/sa1100fb.c:975:21: warning: ‘sa1100fb_min_dma_period’ defined but not used [-Wunused-function] -------------------------------------------------------------------------------- netwinder_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- nhk8815_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- nlm_xlp_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- nlm_xlr_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- nsim_hs_defconfig (arc, gcc-8) — PASS, 0 errors, 2 warnings, 0 section mismatches Warnings: <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] -------------------------------------------------------------------------------- nsim_hs_smp_defconfig (arc, gcc-8) — PASS, 0 errors, 2 warnings, 0 section mismatches Warnings: <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] -------------------------------------------------------------------------------- nsimosci_hs_defconfig (arc, gcc-8) — PASS, 0 errors, 2 warnings, 0 section mismatches Warnings: <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] -------------------------------------------------------------------------------- nsimosci_hs_smp_defconfig (arc, gcc-8) — PASS, 0 errors, 2 warnings, 0 section mismatches Warnings: <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] -------------------------------------------------------------------------------- omap1_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- omap2plus_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- omega2p_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- orion5x_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- oxnas_v6_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- palmz72_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- pcm027_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- pic32mzda_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- pistachio_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- pleb_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- pnx8335_stb225_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- prima2_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- pxa168_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- pxa255-idp_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- pxa3xx_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- pxa910_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- pxa_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- qcom_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- qi_lb60_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- rb532_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- rbtx49xx_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- realview_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- rm200_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- rpc_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- rt305x_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- rv32_defconfig (riscv, gcc-8) — PASS, 0 errors, 6 warnings, 0 section mismatches Warnings: <stdin>:830:2: warning: #warning syscall fstat64 not implemented [-Wcpp] <stdin>:1127:2: warning: #warning syscall fstatat64 not implemented [-Wcpp] <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] <stdin>:830:2: warning: #warning syscall fstat64 not implemented [-Wcpp] <stdin>:1127:2: warning: #warning syscall fstatat64 not implemented [-Wcpp] <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] -------------------------------------------------------------------------------- s3c2410_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- s3c6400_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- s5pv210_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- sama5_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- sb1250_swarm_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- shannon_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: /scratch/linux/drivers/video/fbdev/sa1100fb.c:975:21: warning: ‘sa1100fb_min_dma_period’ defined but not used [-Wunused-function] -------------------------------------------------------------------------------- shmobile_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- simpad_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- socfpga_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- spear13xx_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- spear3xx_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- spear6xx_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- spitz_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- stm32_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- sunxi_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- tango4_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- tb0219_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- tb0226_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- tb0287_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- tct_hammer_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- tegra_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- tinyconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- tinyconfig (arm64, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- tinyconfig (arc, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] -------------------------------------------------------------------------------- tinyconfig (riscv, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- tinyconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- tinyconfig (i386, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- tinyconfig (x86_64, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: .config:1156:warning: override: UNWINDER_GUESS changes choice state -------------------------------------------------------------------------------- trizeps4_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- u300_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- u8500_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- vdk_hs38_defconfig (arc, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] -------------------------------------------------------------------------------- vdk_hs38_smp_defconfig (arc, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: <stdin>:1511:2: warning: #warning syscall clone3 not implemented [-Wcpp] -------------------------------------------------------------------------------- versatile_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- vexpress_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- vf610m4_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- viper_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- vocore2_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- vt8500_v6_v7_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- workpad_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- x86_64_defconfig (x86_64, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- xcep_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- xway_defconfig (mips, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches -------------------------------------------------------------------------------- zeus_defconfig (arm, gcc-8) — PASS, 0 errors, 1 warning, 0 section mismatches Warnings: WARNING: "return_address" [vmlinux] is a static EXPORT_SYMBOL_GPL -------------------------------------------------------------------------------- zx_defconfig (arm, gcc-8) — PASS, 0 errors, 0 warnings, 0 section mismatches --- For more info write to <info(a)kernelci.org>

5 years, 1 month

1
0
0 0

+ mm-page_alloc-fix-memalloc_nocma_save-restore-apis.patch added to -mm tree

by Andrew Morton

The patch titled Subject: mm/page_alloc: fix memalloc_nocma_{save/restore} APIs has been added to the -mm tree. Its filename is mm-page_alloc-fix-memalloc_nocma_save-restore-apis.patch This patch should soon appear at http://ozlabs.org/~akpm/mmots/broken-out/mm-page_alloc-fix-memalloc_nocma_s… and later at http://ozlabs.org/~akpm/mmotm/broken-out/mm-page_alloc-fix-memalloc_nocma_s… Before you just go and hit "reply", please: a) Consider who else should be cc'ed b) Prefer to cc a suitable mailing list as well c) Ideally: find the original patch on the mailing list and do a reply-to-all to that, adding suitable additional cc's *** Remember to use Documentation/process/submit-checklist.rst when testing your code *** The -mm tree is included into linux-next and is updated there every 3-4 working days ------------------------------------------------------ From: js1304(a)gmail.com Subject: mm/page_alloc: fix memalloc_nocma_{save/restore} APIs Currently, memalloc_nocma_{save/restore} API that prevents CMA area in page allocation is implemented by using current_gfp_context(). However, there are two problems of this implementation. First, this doesn't work for allocation fastpath. In the fastpath, original gfp_mask is used since current_gfp_context() is introduced in order to control reclaim and it is on slowpath. So, CMA area can be allocated through the allocation fastpath even if memalloc_nocma_{save/restore} APIs are used. Currently, there is just one user for these APIs and it has a fallback method to prevent actual problem. Second, clearing __GFP_MOVABLE in current_gfp_context() has a side effect to exclude the memory on the ZONE_MOVABLE for allocation target. To fix these problems, this patch changes the implementation to exclude CMA area in page allocation. Main point of this change is using the alloc_flags. alloc_flags is mainly used to control allocation so it fits for excluding CMA area in allocation. Link: http://lkml.kernel.org/r/1595468942-29687-1-git-send-email-iamjoonsoo.kim@l… Fixes: d7fefcc8de91 (mm/cma: add PF flag to force non cma alloc) Signed-off-by: Joonsoo Kim <iamjoonsoo.kim(a)lge.com> Reviewed-by: Vlastimil Babka <vbabka(a)suse.cz> Cc: Christoph Hellwig <hch(a)infradead.org> Cc: Roman Gushchin <guro(a)fb.com> Cc: Mike Kravetz <mike.kravetz(a)oracle.com> Cc: Naoya Horiguchi <n-horiguchi(a)ah.jp.nec.com> Cc: Michal Hocko <mhocko(a)suse.com> Cc: "Aneesh Kumar K . V" <aneesh.kumar(a)linux.ibm.com> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> --- include/linux/sched/mm.h | 8 +------- mm/page_alloc.c | 31 +++++++++++++++++++++---------- 2 files changed, 22 insertions(+), 17 deletions(-) --- a/include/linux/sched/mm.h~mm-page_alloc-fix-memalloc_nocma_save-restore-apis +++ a/include/linux/sched/mm.h @@ -177,12 +177,10 @@ static inline bool in_vfork(struct task_ * Applies per-task gfp context to the given allocation flags. * PF_MEMALLOC_NOIO implies GFP_NOIO * PF_MEMALLOC_NOFS implies GFP_NOFS - * PF_MEMALLOC_NOCMA implies no allocation from CMA region. */ static inline gfp_t current_gfp_context(gfp_t flags) { - if (unlikely(current->flags & - (PF_MEMALLOC_NOIO | PF_MEMALLOC_NOFS | PF_MEMALLOC_NOCMA))) { + if (unlikely(current->flags & (PF_MEMALLOC_NOIO | PF_MEMALLOC_NOFS))) { /* * NOIO implies both NOIO and NOFS and it is a weaker context * so always make sure it makes precedence @@ -191,10 +189,6 @@ static inline gfp_t current_gfp_context( flags &= ~(__GFP_IO | __GFP_FS); else if (current->flags & PF_MEMALLOC_NOFS) flags &= ~__GFP_FS; -#ifdef CONFIG_CMA - if (current->flags & PF_MEMALLOC_NOCMA) - flags &= ~__GFP_MOVABLE; -#endif } return flags; } --- a/mm/page_alloc.c~mm-page_alloc-fix-memalloc_nocma_save-restore-apis +++ a/mm/page_alloc.c @@ -2790,7 +2790,7 @@ __rmqueue(struct zone *zone, unsigned in * allocating from CMA when over half of the zone's free memory * is in the CMA area. */ - if (migratetype == MIGRATE_MOVABLE && + if (alloc_flags & ALLOC_CMA && zone_page_state(zone, NR_FREE_CMA_PAGES) > zone_page_state(zone, NR_FREE_PAGES) / 2) { page = __rmqueue_cma_fallback(zone, order); @@ -2801,7 +2801,7 @@ __rmqueue(struct zone *zone, unsigned in retry: page = __rmqueue_smallest(zone, order, migratetype); if (unlikely(!page)) { - if (migratetype == MIGRATE_MOVABLE) + if (alloc_flags & ALLOC_CMA) page = __rmqueue_cma_fallback(zone, order); if (!page && __rmqueue_fallback(zone, order, migratetype, @@ -3671,6 +3671,20 @@ alloc_flags_nofragment(struct zone *zone return alloc_flags; } +static inline unsigned int current_alloc_flags(gfp_t gfp_mask, + unsigned int alloc_flags) +{ +#ifdef CONFIG_CMA + unsigned int pflags = current->flags; + + if (!(pflags & PF_MEMALLOC_NOCMA) && + gfp_migratetype(gfp_mask) == MIGRATE_MOVABLE) + alloc_flags |= ALLOC_CMA; + +#endif + return alloc_flags; +} + /* * get_page_from_freelist goes through the zonelist trying to allocate * a page. @@ -4316,10 +4330,8 @@ gfp_to_alloc_flags(gfp_t gfp_mask) } else if (unlikely(rt_task(current)) && !in_interrupt()) alloc_flags |= ALLOC_HARDER; -#ifdef CONFIG_CMA - if (gfp_migratetype(gfp_mask) == MIGRATE_MOVABLE) - alloc_flags |= ALLOC_CMA; -#endif + alloc_flags = current_alloc_flags(gfp_mask, alloc_flags); + return alloc_flags; } @@ -4620,7 +4632,7 @@ retry: reserve_flags = __gfp_pfmemalloc_flags(gfp_mask); if (reserve_flags) - alloc_flags = reserve_flags; + alloc_flags = current_alloc_flags(gfp_mask, reserve_flags); /* * Reset the nodemask and zonelist iterators if memory policies can be @@ -4697,7 +4709,7 @@ retry: /* Avoid allocations with no watermarks from looping endlessly */ if (tsk_is_oom_victim(current) && - (alloc_flags == ALLOC_OOM || + (alloc_flags & ALLOC_OOM || (gfp_mask & __GFP_NOMEMALLOC))) goto nopage; @@ -4785,8 +4797,7 @@ static inline bool prepare_alloc_pages(g if (should_fail_alloc_page(gfp_mask, order)) return false; - if (IS_ENABLED(CONFIG_CMA) && ac->migratetype == MIGRATE_MOVABLE) - *alloc_flags |= ALLOC_CMA; + *alloc_flags = current_alloc_flags(gfp_mask, *alloc_flags); return true; } _ Patches currently in -mm which might be from iamjoonsoo.kim(a)lge.com are mm-page_alloc-fix-memalloc_nocma_save-restore-apis.patch mm-vmscan-make-active-inactive-ratio-as-1-1-for-anon-lru.patch mm-vmscan-protect-the-workingset-on-anonymous-lru.patch mm-workingset-prepare-the-workingset-detection-infrastructure-for-anon-lru.patch mm-swapcache-support-to-handle-the-shadow-entries.patch mm-swap-implement-workingset-detection-for-anonymous-lru.patch mm-vmscan-restore-active-inactive-ratio-for-anonymous-lru.patch mm-page_isolation-prefer-the-node-of-the-source-page.patch mm-migrate-move-migration-helper-from-h-to-c.patch mm-hugetlb-unify-migration-callbacks.patch mm-migrate-clear-__gfp_reclaim-to-make-the-migration-callback-consistent-with-regular-thp-allocations.patch mm-migrate-make-a-standard-migration-target-allocation-function.patch mm-mempolicy-use-a-standard-migration-target-allocation-callback.patch mm-page_alloc-remove-a-wrapper-for-alloc_migration_target.patch mm-memory-failure-remove-a-wrapper-for-alloc_migration_target.patch mm-memory_hotplug-remove-a-wrapper-for-alloc_migration_target.patch

5 years, 1 month

1
0
0 0

[PATCH 1/2] tracepoint: mark __tracepoint_string's __used

by Nick Desaulniers

__tracepoint_string's have their string data stored in .rodata, and an address to that data stored in the "__tracepoint_str" section. Functions that refer to those strings refer to the symbol of the address. Compiler optimization can replace those address references with references directly to the string data. If the address doesn't appear to have other uses, then it appears dead to the compiler and is removed. This can break the /tracing/printk_formats sysfs node which iterates the addresses stored in the "__tracepoint_str" section. Like other strings stored in custom sections in this header, mark these __used to inform the compiler that there are other non-obvious users of the address, so they should still be emitted. Cc: stable(a)vger.kernel.org Reported-by: Tim Murray <timmurray(a)google.com> Reported-by: Simon MacMullen <simonmacm(a)google.com> Suggested-by: Greg Hackmann <ghackmann(a)google.com> Signed-off-by: Nick Desaulniers <ndesaulniers(a)google.com> --- We observe this in Clang; it seems that GCC doesn't do the "cleanup" of the dead address. Specifically, the Clang passes "Interprocedural Sparse Conditional Constant Propagation" (IPSCCP) and GlobalOpt both try to removed the address if no other uses exist after inlining the reference directly to the string data. We don't want to change the linkage of these variables, but we kind of want optimization behavior to treat these function static strings as if they had `extern` linkage, at least by not removing the address of the string data from the custom section. include/linux/tracepoint.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/include/linux/tracepoint.h b/include/linux/tracepoint.h index a1fecf311621..3a5b717d92e8 100644 --- a/include/linux/tracepoint.h +++ b/include/linux/tracepoint.h @@ -361,7 +361,7 @@ static inline struct tracepoint *tracepoint_ptr_deref(tracepoint_ptr_t *p) static const char *___tp_str __tracepoint_string = str; \ ___tp_str; \ }) -#define __tracepoint_string __attribute__((section("__tracepoint_str"))) +#define __tracepoint_string __attribute__((section("__tracepoint_str"), used)) #else /* * tracepoint_string() is used to save the string address for userspace -- 2.28.0.rc0.105.gf9edc3c819-goog

5 years, 1 month

1
0
0 0

[PATCH] PCI/ATS: PASID and PRI are only enumerated in PF devices.

by Ashok Raj

PASID and PRI capabilities are only enumerated in PF devices. VF devices do not enumerate these capabilites. IOMMU drivers also need to enumerate them before enabling features in the IOMMU. Extending the same support as PASID feature discovery (pci_pasid_features) for PRI. Signed-off-by: Ashok Raj <ashok.raj(a)intel.com> To: Bjorn Helgaas <bhelgaas(a)google.com> To: Joerg Roedel <joro(a)8bytes.com> To: Lu Baolu <baolu.lu(a)intel.com> Cc: stable(a)vger.kernel.org Cc: linux-pci(a)vger.kernel.org Cc: linux-kernel(a)vger.kernel.org Cc: Ashok Raj <ashok.raj(a)intel.com> Cc: iommu(a)lists.linux-foundation.org --- drivers/iommu/intel/iommu.c | 2 +- drivers/pci/ats.c | 14 ++++++++++++++ include/linux/pci-ats.h | 1 + 3 files changed, 16 insertions(+), 1 deletion(-) diff --git a/drivers/iommu/intel/iommu.c b/drivers/iommu/intel/iommu.c index d759e7234e98..276452f5e6a7 100644 --- a/drivers/iommu/intel/iommu.c +++ b/drivers/iommu/intel/iommu.c @@ -2560,7 +2560,7 @@ static struct dmar_domain *dmar_insert_one_dev_info(struct intel_iommu *iommu, } if (info->ats_supported && ecap_prs(iommu->ecap) && - pci_find_ext_capability(pdev, PCI_EXT_CAP_ID_PRI)) + pci_pri_supported(pdev)) info->pri_supported = 1; } } diff --git a/drivers/pci/ats.c b/drivers/pci/ats.c index b761c1f72f67..ffb4de8c5a77 100644 --- a/drivers/pci/ats.c +++ b/drivers/pci/ats.c @@ -461,6 +461,20 @@ int pci_pasid_features(struct pci_dev *pdev) } EXPORT_SYMBOL_GPL(pci_pasid_features); +/** + * pci_pri_supported - Check if PRI is supported. + * @pdev: PCI device structure + * + * Returns false when no PRI capability is present. + * Returns true if PRI feature is supported and enabled + */ +bool pci_pri_supported(struct pci_dev *pdev) +{ + /* VFs share the PF PRI configuration */ + return !!(pci_physfn(pdev)->pri_cap); +} +EXPORT_SYMBOL_GPL(pci_pri_supported); + #define PASID_NUMBER_SHIFT 8 #define PASID_NUMBER_MASK (0x1f << PASID_NUMBER_SHIFT) /** diff --git a/include/linux/pci-ats.h b/include/linux/pci-ats.h index f75c307f346d..073d57292445 100644 --- a/include/linux/pci-ats.h +++ b/include/linux/pci-ats.h @@ -28,6 +28,7 @@ int pci_enable_pri(struct pci_dev *pdev, u32 reqs); void pci_disable_pri(struct pci_dev *pdev); int pci_reset_pri(struct pci_dev *pdev); int pci_prg_resp_pasid_required(struct pci_dev *pdev); +bool pci_pri_supported(struct pci_dev *pdev); #endif /* CONFIG_PCI_PRI */ #ifdef CONFIG_PCI_PASID -- 2.7.4

5 years, 1 month

4
5
0 0

[PATCH] btrfs: fix messages after changing compression level by remount

by David Sterba

Reported by Forza on IRC that remounting with compression options does not reflect the change in level, or at least it does not appear to do so according to the messages: mount -o compress=zstd:1 /dev/sda /mnt mount -o remount,compress=zstd:15 /mnt does not print the change to the level to syslog: [ 41.366060] BTRFS info (device vda): use zstd compression, level 1 [ 41.368254] BTRFS info (device vda): disk space caching is enabled [ 41.390429] BTRFS info (device vda): disk space caching is enabled What really happens is that the message is lost but the level is actualy changed. There's another weird output, if compression is reset to 'no': [ 45.413776] BTRFS info (device vda): use no compression, level 4 To fix that, save the previous compression level and print the message in that case too and use separate message for 'no' compression. CC: stable(a)vger.kernel.org # 4.19+ Signed-off-by: David Sterba <dsterba(a)suse.com> --- fs/btrfs/super.c | 14 +++++++++----- 1 file changed, 9 insertions(+), 5 deletions(-) diff --git a/fs/btrfs/super.c b/fs/btrfs/super.c index 5a9dc31d95c9..aa73422b0678 100644 --- a/fs/btrfs/super.c +++ b/fs/btrfs/super.c @@ -517,6 +517,7 @@ int btrfs_parse_options(struct btrfs_fs_info *info, char *options, char *compress_type; bool compress_force = false; enum btrfs_compression_type saved_compress_type; + int saved_compress_level; bool saved_compress_force; int no_compress = 0; @@ -598,6 +599,7 @@ int btrfs_parse_options(struct btrfs_fs_info *info, char *options, info->compress_type : BTRFS_COMPRESS_NONE; saved_compress_force = btrfs_test_opt(info, FORCE_COMPRESS); + saved_compress_level = info->compress_level; if (token == Opt_compress || token == Opt_compress_force || strncmp(args[0].from, "zlib", 4) == 0) { @@ -642,6 +644,8 @@ int btrfs_parse_options(struct btrfs_fs_info *info, char *options, no_compress = 0; } else if (strncmp(args[0].from, "no", 2) == 0) { compress_type = "no"; + info->compress_level = 0; + info->compress_type = 0; btrfs_clear_opt(info->mount_opt, COMPRESS); btrfs_clear_opt(info->mount_opt, FORCE_COMPRESS); compress_force = false; @@ -662,11 +666,11 @@ int btrfs_parse_options(struct btrfs_fs_info *info, char *options, */ btrfs_clear_opt(info->mount_opt, FORCE_COMPRESS); } - if ((btrfs_test_opt(info, COMPRESS) && - (info->compress_type != saved_compress_type || - compress_force != saved_compress_force)) || - (!btrfs_test_opt(info, COMPRESS) && - no_compress == 1)) { + if (no_compress == 1) { + btrfs_info(info, "use no compression"); + } else if ((info->compress_type != saved_compress_type) || + (compress_force != saved_compress_force) || + (info->compress_level != saved_compress_level)) { btrfs_info(info, "%s %s compression, level %d", (compress_force) ? "force" : "use", compress_type, info->compress_level); -- 2.25.0

5 years, 1 month

1
0
0 0

[PATCH for v5.4.y] dmabuf: use spinlock to access dmabuf->name

by Sumit Semwal

From: Charan Teja Kalla <charante(a)codeaurora.org> [commit 6348dd291e3653534a9e28e6917569bc9967b35b upstream] There exists a sleep-while-atomic bug while accessing the dmabuf->name under mutex in the dmabuffs_dname(). This is caused from the SELinux permissions checks on a process where it tries to validate the inherited files from fork() by traversing them through iterate_fd() (which traverse files under spin_lock) and call match_file(security/selinux/hooks.c) where the permission checks happen. This audit information is logged using dump_common_audit_data() where it calls d_path() to get the file path name. If the file check happen on the dmabuf's fd, then it ends up in ->dmabuffs_dname() and use mutex to access dmabuf->name. The flow will be like below: flush_unauthorized_files() iterate_fd() spin_lock() --> Start of the atomic section. match_file() file_has_perm() avc_has_perm() avc_audit() slow_avc_audit() common_lsm_audit() dump_common_audit_data() audit_log_d_path() d_path() dmabuffs_dname() mutex_lock()--> Sleep while atomic. Call trace captured (on 4.19 kernels) is below: ___might_sleep+0x204/0x208 __might_sleep+0x50/0x88 __mutex_lock_common+0x5c/0x1068 __mutex_lock_common+0x5c/0x1068 mutex_lock_nested+0x40/0x50 dmabuffs_dname+0xa0/0x170 d_path+0x84/0x290 audit_log_d_path+0x74/0x130 common_lsm_audit+0x334/0x6e8 slow_avc_audit+0xb8/0xf8 avc_has_perm+0x154/0x218 file_has_perm+0x70/0x180 match_file+0x60/0x78 iterate_fd+0x128/0x168 selinux_bprm_committing_creds+0x178/0x248 security_bprm_committing_creds+0x30/0x48 install_exec_creds+0x1c/0x68 load_elf_binary+0x3a4/0x14e0 search_binary_handler+0xb0/0x1e0 So, use spinlock to access dmabuf->name to avoid sleep-while-atomic. Cc: <stable(a)vger.kernel.org> [5.3+] Signed-off-by: Charan Teja Kalla <charante(a)codeaurora.org> Reviewed-by: Michael J. Ruhl <michael.j.ruhl(a)intel.com> Acked-by: Christian König <christian.koenig(a)amd.com> [sumits: added comment to spinlock_t definition to avoid warning] Signed-off-by: Sumit Semwal <sumit.semwal(a)linaro.org> Link: https://patchwork.freedesktop.org/patch/msgid/a83e7f0d-4e54-9848-4b58-e1acd… [sumits: reworked for 5.4.y] Signed-off-by: Sumit Semwal <sumit.semwal(a)linaro.org> --- drivers/dma-buf/dma-buf.c | 11 +++++++---- include/linux/dma-buf.h | 1 + 2 files changed, 8 insertions(+), 4 deletions(-) diff --git a/drivers/dma-buf/dma-buf.c b/drivers/dma-buf/dma-buf.c index cf65a47310c3..eba7e3fe769c 100644 --- a/drivers/dma-buf/dma-buf.c +++ b/drivers/dma-buf/dma-buf.c @@ -45,10 +45,10 @@ static char *dmabuffs_dname(struct dentry *dentry, char *buffer, int buflen) size_t ret = 0; dmabuf = dentry->d_fsdata; - mutex_lock(&dmabuf->lock); + spin_lock(&dmabuf->name_lock); if (dmabuf->name) ret = strlcpy(name, dmabuf->name, DMA_BUF_NAME_LEN); - mutex_unlock(&dmabuf->lock); + spin_unlock(&dmabuf->name_lock); return dynamic_dname(dentry, buffer, buflen, "/%s:%s", dentry->d_name.name, ret > 0 ? name : ""); @@ -338,8 +338,10 @@ static long dma_buf_set_name(struct dma_buf *dmabuf, const char __user *buf) kfree(name); goto out_unlock; } + spin_lock(&dmabuf->name_lock); kfree(dmabuf->name); dmabuf->name = name; + spin_unlock(&dmabuf->name_lock); out_unlock: mutex_unlock(&dmabuf->lock); @@ -402,10 +404,10 @@ static void dma_buf_show_fdinfo(struct seq_file *m, struct file *file) /* Don't count the temporary reference taken inside procfs seq_show */ seq_printf(m, "count:\t%ld\n", file_count(dmabuf->file) - 1); seq_printf(m, "exp_name:\t%s\n", dmabuf->exp_name); - mutex_lock(&dmabuf->lock); + spin_lock(&dmabuf->name_lock); if (dmabuf->name) seq_printf(m, "name:\t%s\n", dmabuf->name); - mutex_unlock(&dmabuf->lock); + spin_unlock(&dmabuf->name_lock); } static const struct file_operations dma_buf_fops = { @@ -537,6 +539,7 @@ struct dma_buf *dma_buf_export(const struct dma_buf_export_info *exp_info) dmabuf->size = exp_info->size; dmabuf->exp_name = exp_info->exp_name; dmabuf->owner = exp_info->owner; + spin_lock_init(&dmabuf->name_lock); init_waitqueue_head(&dmabuf->poll); dmabuf->cb_excl.poll = dmabuf->cb_shared.poll = &dmabuf->poll; dmabuf->cb_excl.active = dmabuf->cb_shared.active = 0; diff --git a/include/linux/dma-buf.h b/include/linux/dma-buf.h index ec212cb27fdc..12eac4293af6 100644 --- a/include/linux/dma-buf.h +++ b/include/linux/dma-buf.h @@ -303,6 +303,7 @@ struct dma_buf { void *vmap_ptr; const char *exp_name; const char *name; + spinlock_t name_lock; /* spinlock to protect name access */ struct module *owner; struct list_head list_node; void *priv; -- 2.27.0

5 years, 1 month

1
0
0 0

[PATCH 5.7 000/243] 5.7.10-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.7.10 release. There are 243 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 22 Jul 2020 19:14:36 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.7.10-rc2… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.7.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.7.10-rc2 Umesh Nerlige Ramappa <umesh.nerlige.ramappa(a)intel.com> drm/i915/perf: Use GTT when saving/restoring engine GPR Lorenz Bauer <lmb(a)cloudflare.com> bpf: sockmap: Require attach_bpf_fd when detaching a program Lorenz Bauer <lmb(a)cloudflare.com> bpf: sockmap: Check value of unused args to BPF_PROG_ATTACH Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> gpio: pca953x: disable regmap locking for automatic address incrementing Colin Xu <colin.xu(a)intel.com> drm/i915/gvt: Fix two CFL MMIO handling caused by regression. Arjun Roy <arjunroy(a)google.com> mm/memory.c: properly pte_offset_map_lock/unlock in vm_insert_pages() Lu Baolu <baolu.lu(a)linux.intel.com> iommu/vt-d: Make Intel SVM code 64-bit only Shannon Nelson <snelson(a)pensando.io> ionic: export features for vlans to use Shannon Nelson <snelson(a)pensando.io> ionic: no link check while resetting queues Lingling Xu <ling_ling.xu(a)unisoc.com> spi: sprd: switch the sequence of setting WDG_LOAD_LOW and _HIGH David Howells <dhowells(a)redhat.com> rxrpc: Fix trace string Ilya Dryomov <idryomov(a)gmail.com> libceph: don't omit recovery_deletes in target_copy() Chris Wilson <chris(a)chris-wilson.co.uk> drm/i915/gt: Only swap to a random sibling once upon creation Chris Wilson <chris(a)chris-wilson.co.uk> drm/i915/gt: Ignore irq enabling on the virtual engines Maarten Lankhorst <maarten.lankhorst(a)linux.intel.com> drm/i915: Move cec_notifier to intel_hdmi_connector_unregister, v2. Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/display: create fake mst encoders ahead of time (v4) hersen wu <hersenxs.wu(a)amd.com> drm/amd/display: OLED panel backlight adjust not work with external display connected Josip Pavic <Josip.Pavic(a)amd.com> drm/amd/display: handle failed allocation during stream construction Xiaojie Yuan <xiaojie.yuan(a)amd.com> drm/amdgpu/sdma5: fix wptr overwritten in ->get_wptr() chen gong <curry.gong(a)amd.com> drm/amdgpu/powerplay: Modify SMC message name for setting power profile mode Roland Scheidegger <sroland(a)vmware.com> drm/vmwgfx: fix update of display surface when resolution changes Thomas Gleixner <tglx(a)linutronix.de> genirq/affinity: Handle affinity setting on inactive interrupts correctly Andy Lutomirski <luto(a)kernel.org> x86/ioperm: Fix io bitmap invalidation on Xen PV Vincent Guittot <vincent.guittot(a)linaro.org> sched/fair: handle case of task_h_load() returning 0 Mathieu Desnoyers <mathieu.desnoyers(a)efficios.com> sched: Fix unreliable rseq cpu_id for new tasks Will Deacon <will(a)kernel.org> arm64: compat: Ensure upper 32 bits of x0 are zero on syscall return Will Deacon <will(a)kernel.org> arm64: ptrace: Consistently use pseudo-singlestep exceptions Will Deacon <will(a)kernel.org> arm64: ptrace: Override SPSR.SS when single-stepping is enabled Dinh Nguyen <dinh.nguyen(a)intel.com> arm64: dts: stratix10: increase QSPI reg address in nand dts file Dinh Nguyen <dinguyen(a)kernel.org> arm64: dts: stratix10: add status to qspi dts node Dinh Nguyen <dinguyen(a)kernel.org> arm64: dts: agilex: add status to qspi dts node Tim Harvey <tharvey(a)gateworks.com> ARM: dts: imx6qdl-gw551x: fix audio SSI Alex Hung <alex.hung(a)canonical.com> thermal: int3403_thermal: Downgrade error message Charan Teja Kalla <charante(a)codeaurora.org> dmabuf: use spinlock to access dmabuf->name Michał Mirosław <mirq-linux(a)rere.qmqm.pl> misc: atmel-ssc: lock with mutex instead of spinlock Robin Gong <yibin.gong(a)nxp.com> dmaengine: fsl-edma-common: correct DSIZE_32BYTE Krzysztof Kozlowski <krzk(a)kernel.org> dmaengine: mcf-edma: Fix NULL pointer exception in mcf_edma_tx_handler Krzysztof Kozlowski <krzk(a)kernel.org> dmaengine: fsl-edma: Fix NULL pointer exception in fsl_edma_tx_handler Walter Lozano <walter.lozano(a)collabora.com> opp: Increase parsed_static_opps in _of_add_opp_table_v1() Alexander Shishkin <alexander.shishkin(a)linux.intel.com> intel_th: Fix a NULL dereference when hub driver is not loaded Alexander Shishkin <alexander.shishkin(a)linux.intel.com> intel_th: pci: Add Emmitsburg PCH support Alexander Shishkin <alexander.shishkin(a)linux.intel.com> intel_th: pci: Add Tiger Lake PCH-H support Alexander Shishkin <alexander.shishkin(a)linux.intel.com> intel_th: pci: Add Jasper Lake CPU support Satheesh Rajendran <sathnaga(a)linux.vnet.ibm.com> powerpc/pseries/svm: Fix incorrect check for shared_lppaca_size Aneesh Kumar K.V <aneesh.kumar(a)linux.ibm.com> powerpc/book3s64/pkeys: Fix pkey_access_permitted() for execute disable pkey Maciej S. Szmigiero <mail(a)maciej.szmigiero.name> hwmon: (drivetemp) Avoid SCT usage on Toshiba DT01ACA family drives Vishwas M <vishwas.reddy.vr(a)gmail.com> hwmon: (emc2103) fix unable to change fan pwm1_enable attribute Andreas Schwab <schwab(a)suse.de> riscv: use 16KB kernel stack on 64-bit Frederic Weisbecker <frederic(a)kernel.org> timer: Fix wheel index calculation on last level Frederic Weisbecker <frederic(a)kernel.org> timer: Prevent base->clk from moving backward Chandrakanth Patil <chandrakanth.patil(a)broadcom.com> scsi: megaraid_sas: Remove undefined ENABLE_IRQ_POLL macro Esben Haabendal <esben(a)geanix.com> uio_pdrv_genirq: fix use without device tree and no interrupt Esben Haabendal <esben(a)geanix.com> uio_pdrv_genirq: Remove warning when irq is not specified Mike Leach <mike.leach(a)linaro.org> coresight: etmv4: Fix CPU power management setup in probe() function Dave Wang <dave.wang(a)emc.com.tw> Input: elan_i2c - add more hardware ID for Lenovo laptops David Pedersen <limero1337(a)gmail.com> Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Revert "Input: elants_i2c - report resolution information for touch major" Alexander Usyskin <alexander.usyskin(a)intel.com> mei: bus: don't clean driver pointer Wade Mealing <wmealing(a)redhat.com> Revert "zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()" Chirantan Ekbote <chirantan(a)chromium.org> fuse: Fix parameter for FS_IOC_{GET,SET}FLAGS Miklos Szeredi <mszeredi(a)redhat.com> fuse: use ->reconfigure() instead of ->remount_fs() Miklos Szeredi <mszeredi(a)redhat.com> fuse: ignore 'data' argument of mount(..., MS_REMOUNT) Amir Goldstein <amir73il(a)gmail.com> ovl: fix unneeded call to ovl_change_flags() Amir Goldstein <amir73il(a)gmail.com> ovl: relax WARN_ON() when decoding lower directory file handle youngjun <her0gyugyu(a)gmail.com> ovl: inode reference leak in ovl_is_inuse true case. Amir Goldstein <amir73il(a)gmail.com> ovl: fix regression with re-formatted lower squashfs Johan Hovold <johan(a)kernel.org> serial: core: fix sysrq overhead regression Johan Hovold <johan(a)kernel.org> Revert "serial: core: Refactor uart_unlock_and_check_sysrq()" Chuhong Yuan <hslester96(a)gmail.com> serial: mxs-auart: add missed iounmap() in probe failure and remove Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> serial: sh-sci: Initialize spinlock for uart console Alexander Lobakin <alobakin(a)pm.me> virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial Christophe Leroy <christophe.leroy(a)csgroup.eu> tty: serial: cpm_uart: Fix behaviour for non existing GPIOs Jan Kiszka <jan.kiszka(a)siemens.com> Revert "tty: xilinx_uartps: Fix missing id assignment to the console" Hans de Goede <hdegoede(a)redhat.com> virt: vbox: Fix guest capabilities mask check Hans de Goede <hdegoede(a)redhat.com> virt: vbox: Fix VBGL_IOCTL_VMMDEV_REQUEST_BIG and _LOG req numbers to match upstream AceLan Kao <acelan.kao(a)canonical.com> USB: serial: option: add Quectel EG95 LTE modem Jörgen Storvist <jorgen.storvist(a)gmail.com> USB: serial: option: add GosunCn GM500 series Igor Moura <imphilippini(a)gmail.com> USB: serial: ch341: add new Product ID for CH340 James Hilliard <james.hilliard1(a)gmail.com> USB: serial: cypress_m8: enable Simply Automated UPB PIM Johan Hovold <johan(a)kernel.org> USB: serial: iuu_phoenix: fix memory corruption Zhang Qiang <qiang.zhang(a)windriver.com> usb: gadget: function: fix missing spinlock in f_uac1_legacy Peter Chen <peter.chen(a)nxp.com> usb: chipidea: core: add wakeup support for extcon Minas Harutyunyan <Minas.Harutyunyan(a)synopsys.com> usb: dwc2: Fix shutdown callback in platform Tom Rix <trix(a)redhat.com> USB: c67x00: fix use after free in c67x00_giveback_urb Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Fix path indices used in USB3 tunnel discovery Kailang Yang <kailang(a)realtek.com> ALSA: hda/realtek - Enable Speaker for ASUS UX563 Kailang Yang <kailang(a)realtek.com> ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534 Jian-Hong Pan <jian-hong(a)endlessm.com> ALSA: hda/realtek: Enable headset mic of Acer TravelMate B311R-31 with ALC256 Armas Spann <zappel(a)retarded.farm> ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G14(G401) series with ALC289 Kailang Yang <kailang(a)realtek.com> ALSA: hda/realtek - change to suitable link model for ASUS platform Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Fix race against the error recovery URB submission Takashi Iwai <tiwai(a)suse.de> ALSA: line6: Sync the pending work cancel at disconnection Takashi Iwai <tiwai(a)suse.de> ALSA: line6: Perform sanity check for each URB creation James Hilliard <james.hilliard1(a)gmail.com> HID: quirks: Ignore Simply Automated UPB PIM Sebastian Parschauer <s.parschauer(a)gmx.de> HID: quirks: Always poll Obins Anne Pro 2 keyboard Dmitry Torokhov <dmitry.torokhov(a)gmail.com> HID: magicmouse: do not set up autorepeat Maciej S. Szmigiero <mail(a)maciej.szmigiero.name> HID: logitech-hidpp: avoid repeated "multiplier = " log messages Saravana Kannan <saravanak(a)google.com> slimbus: core: Fix mismatch in of_node_get/put Taniya Das <tdas(a)codeaurora.org> clk: qcom: gcc: Add support for a new frequency for SC7180 Vinod Koul <vkoul(a)kernel.org> clk: qcom: gcc: Add missing UFS clocks for SM8150 Vinod Koul <vkoul(a)kernel.org> clk: qcom: gcc: Add GPU and NPU clocks for SM8150 Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: rawnand: oxnas: Release all devices in the _remove() path Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: rawnand: oxnas: Unregister all devices on error Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: rawnand: oxnas: Keep track of registered devices Álvaro Fernández Rojas <noltari(a)gmail.com> mtd: rawnand: brcmnand: fix CS0 layout Álvaro Fernández Rojas <noltari(a)gmail.com> mtd: rawnand: brcmnand: correctly verify erased pages Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: rawnand: timings: Fix default tR_max and tCCS_min timings Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: rawnand: marvell: Fix probe error path Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: rawnand: marvell: Use nand_cleanup() when the device is not yet registered Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: rawnand: marvell: Fix the condition on a return code Sergei Shtylyov <sergei.shtylyov(a)cogentembedded.com> mtd: spi-nor: spansion: fix writes on S25FS512S Mantas Pucka <mantas(a)8devices.com> mtd: spi-nor: winbond: Fix 4-byte opcode support for w25q256 Jeffrey Hugo <jeffrey.l.hugo(a)gmail.com> clk: qcom: Add missing msm8998 ufs_unipro_core_clk_src Aharon Landau <aharonl(a)mellanox.com> RDMA/mlx5: Verify that QP is created with RQ or SQ Maulik Shah <mkshah(a)codeaurora.org> soc: qcom: rpmh-rsc: Allow using free WAKE TCS for active request Raju P.L.S.S.S.N <rplsssn(a)codeaurora.org> soc: qcom: rpmh-rsc: Clear active mode configuration for wake TCS Maulik Shah <mkshah(a)codeaurora.org> soc: qcom: rpmh: Invalidate SLEEP and WAKE TCSes before flushing new data Maulik Shah <mkshah(a)codeaurora.org> soc: qcom: rpmh: Update dirty flag only when data changes Jin Yao <yao.jin(a)linux.intel.com> perf stat: Zero all the 'ena' and 'run' array slot stats for interval mode Bjorn Helgaas <bhelgaas(a)google.com> PCI/PM: Call .bridge_d3() hook only if non-NULL Zhu Yanjun <yanjunz(a)mellanox.com> RDMA/rxe: Set default vendor ID Tomer Tayar <ttayar(a)habana.ai> habanalabs: Align protection bits configuration of all TPCs John Johansen <john.johansen(a)canonical.com> apparmor: ensure that dfa state tables have entries Peter Ujfalusi <peter.ujfalusi(a)ti.com> dmaengine: ti: k3-udma: Disable memcopy via MCU NAVSS on am654 Srinivas Kandagatla <srinivas.kandagatla(a)linaro.org> soc: qcom: socinfo: add missing soc_id sysfs entry Sean Wang <sean.wang(a)mediatek.com> arm: dts: mt7623: add phy-mode property for gmac2 Kevin Buettner <kevinb(a)redhat.com> copy_xstate_to_kernel: Fix typo which caused GDB regression Douglas Anderson <dianders(a)chromium.org> regmap: debugfs: Don't sleep while atomic for fast_io regmaps Anthony Iliopoulos <ailiop(a)suse.com> nvme: explicitly update mpath disk capacity on revalidation Wei Yongjun <weiyongjun1(a)huawei.com> keys: asymmetric: fix error return code in software_key_query() Krzysztof Kozlowski <krzk(a)kernel.org> arm64: dts: spcfpga: Align GIC, NAND and UART nodenames with dtschema Krzysztof Kozlowski <krzk(a)kernel.org> ARM: dts: socfpga: Align L2 cache-controller nodename with dtschema Colin Ian King <colin.king(a)canonical.com> xprtrdma: fix incorrect header size calculations Enric Balletbo i Serra <enric.balletbo(a)collabora.com> Revert "thermal: mediatek: fix register index error" dillon min <dillon.minfei(a)gmail.com> ARM: dts: Fix dcan driver probe failed on am437x platform Vasily Averin <vvs(a)virtuozzo.com> fuse: don't ignore errors from fuse_writepages_fill() Anna Schumaker <Anna.Schumaker(a)Netapp.com> NFS: Fix interrupted slots by sending a solo SEQUENCE operation Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Fix handling of connect errors Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Fix return code from rpcrdma_xprt_connect() Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Fix recursion into rpcrdma_xprt_disconnect() Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Fix double-free in rpcrdma_ep_create() Eddie James <eajames(a)linux.ibm.com> clk: AST2600: Add mux for EMMC clock Nathan Chancellor <natechancellor(a)gmail.com> clk: mvebu: ARMADA_AP_CPU_CLK needs to select ARMADA_AP_CP_HELPER Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> serial: core: Initialise spin lock before use in uart_configure_port() Dan Carpenter <dan.carpenter(a)oracle.com> staging: comedi: verify array index is correct before using it Michał Mirosław <mirq-linux(a)rere.qmqm.pl> usb: gadget: udc: atmel: fix uninitialized read in debug printk Marc Kleine-Budde <mkl(a)pengutronix.de> spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock rate Peter Ujfalusi <peter.ujfalusi(a)ti.com> dmaengine: dmatest: stop completed threads when running without set channel Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> dmaengine: dw: Initialize channel before each transfer Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> iio: adc: ad7780: Fix a resource handling path in 'ad7780_probe()' Tony Lindgren <tony(a)atomide.com> bus: ti-sysc: Do not disable on suspend for no-idle Tony Lindgren <tony(a)atomide.com> bus: ti-sysc: Fix sleeping function called from invalid context for RTC quirk Tony Lindgren <tony(a)atomide.com> bus: ti-sysc: Fix wakeirq sleeping function called from invalid context Dave Jiang <dave.jiang(a)intel.com> dmaengine: idxd: fix misc interrupt handler thread unmasking Dave Jiang <dave.jiang(a)intel.com> dmaengine: idxd: cleanup workqueue config after disabling Neil Armstrong <narmstrong(a)baylibre.com> arm64: dts: meson-gxl-s805x: reduce initial Mali450 core frequency Jerome Brunet <jbrunet(a)baylibre.com> arm64: dts: meson: add missing gxl rng clock Colin Ian King <colin.king(a)canonical.com> phy: sun4i-usb: fix dereference of pointer phy0 before it is null checked Tiezhu Yang <yangtiezhu(a)loongson.cn> phy: rockchip: Fix return value of inno_dsidphy_probe() Yoshihiro Shimoda <yoshihiro.shimoda.uh(a)renesas.com> dmaengine: sh: usb-dmac: set tx_result parameters Peter Ujfalusi <peter.ujfalusi(a)ti.com> dmaengine: ti: k3-udma: Fix delayed_work usage for tx drain workaround Nikhil Rao <nikhil.rao(a)intel.com> dmaengine: idxd: fix cdev locking for open and release Pierre-Louis Bossart <pierre-louis.bossart(a)linux.intel.com> soundwire: intel: fix memory leak with devm_kasprintf Peter Ujfalusi <peter.ujfalusi(a)ti.com> dmaengine: ti: k3-udma: Use correct node to read "ti,udma-atype" Syed Nayyar Waris <syednwaris(a)gmail.com> counter: 104-quad-8: Add lock guards - filter clock prescaler Syed Nayyar Waris <syednwaris(a)gmail.com> counter: 104-quad-8: Add lock guards - differential encoder Jonathan Cameron <Jonathan.Cameron(a)huawei.com> iio:health:afe4404 Fix timestamp alignment and prevent data leak. Stephan Gerhold <stephan(a)gerhold.net> Input: mms114 - add extra compatible for mms345l Pavel Begunkov <asml.silence(a)gmail.com> io_uring: fix recvmsg memory leak with buffer selection Krzysztof Kozlowski <krzk(a)kernel.org> spi: spi-fsl-dspi: Fix lockup if device is shutdown during SPI transfer Colin Ian King <colin.king(a)canonical.com> scsi: qla2xxx: make 1-bit bit-fields unsigned int Sascha Hauer <s.hauer(a)pengutronix.de> net: ethernet: mvneta: Add back interface mode validation Sascha Hauer <s.hauer(a)pengutronix.de> net: ethernet: mvneta: Do not error out in non serdes modes Dan Carpenter <dan.carpenter(a)oracle.com> xen/xenbus: Fix a double free in xenbus_map_ring_pv() Florian Fainelli <f.fainelli(a)gmail.com> arm64: Add missing sentinel to erratum_1463225 Jonathan Cameron <Jonathan.Cameron(a)huawei.com> iio:health:afe4403 Fix timestamp alignment and prevent data leak. Jonathan Cameron <Jonathan.Cameron(a)huawei.com> iio:pressure:ms5611 Fix buffer element alignment Jonathan Cameron <Jonathan.Cameron(a)huawei.com> iio:humidity:hts221 Fix alignment and data leak issues Navid Emamdoost <navid.emamdoost(a)gmail.com> iio: pressure: zpa2326: handle pm_runtime_get_sync failure Chuhong Yuan <hslester96(a)gmail.com> iio: mma8452: Add missed iio_device_unregister() call in mma8452_probe() Matt Ranostay <matt.ranostay(a)konsulko.com> iio: core: add missing IIO_MOD_H2/ETHANOL string identifiers Dinghao Liu <dinghao.liu(a)zju.edu.cn> iio: magnetometer: ak8974: Fix runtime PM imbalance on error Jonathan Cameron <Jonathan.Cameron(a)huawei.com> iio:humidity:hdc100x Fix alignment and data leak issues Jonathan Cameron <Jonathan.Cameron(a)huawei.com> iio:magnetometer:ak8974: Fix alignment and data leak issues Ard Biesheuvel <ardb(a)kernel.org> arm64/alternatives: don't patch up internal branches Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> i2c: eg20t: Load module automatically if ID matches Sai Prakash Ranjan <saiprakash.ranjan(a)codeaurora.org> arm64: Add KRYO4XX silver CPU cores to erratum list 1530923 and 1024718 Sai Prakash Ranjan <saiprakash.ranjan(a)codeaurora.org> arm64: Add KRYO4XX gold CPU cores to erratum list 1463225 and 1418040 Sai Prakash Ranjan <saiprakash.ranjan(a)codeaurora.org> arm64: Add MIDR value for KRYO4XX gold CPU cores Bob Peterson <rpeterso(a)redhat.com> gfs2: The freeze glock should never be frozen Bob Peterson <rpeterso(a)redhat.com> gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE Bob Peterson <rpeterso(a)redhat.com> gfs2: read-only mounts should grab the sd_freeze_gl glock Bob Peterson <rpeterso(a)redhat.com> gfs2: freeze should work on read-only mounts Bob Peterson <rpeterso(a)redhat.com> gfs2: eliminate GIF_ORDERED in favor of list_empty Juergen Gross <jgross(a)suse.com> xen/xenbus: let xenbus_map_ring_valloc() return errno values only Juergen Gross <jgross(a)suse.com> xen/xenbus: avoid large structs and arrays on the stack Vasily Averin <vvs(a)virtuozzo.com> tpm_tis: extra chip->ops check on error path in tpm_tis_core_init Ard Biesheuvel <ardb(a)kernel.org> arm64/alternatives: use subsections for replacement sequences Ronnie Sahlberg <lsahlber(a)redhat.com> cifs: prevent truncation from long to int in wait_for_free_credits Masahiro Yamada <masahiroy(a)kernel.org> dt-bindings: fix error in 'make clean' after 'make dt_binding_check' Kangmin Park <l4stpr0gr4m(a)gmail.com> dt-bindings: mailbox: zynqmp_ipi: fix unit address Masahiro Yamada <yamada.masahiro(a)socionext.com> dt-bindings: bus: uniphier-system-bus: fix warning in example Angelo Dureghello <angelo.dureghello(a)timesys.com> m68k: mm: fix node memblock init Mike Rapoport <rppt(a)linux.ibm.com> m68k: nommu: register start of the memory with memblock Hou Tao <houtao1(a)huawei.com> blk-mq-debugfs: update blk_queue_flag_name[] accordingly for new flags Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> ACPI: DPTF: Add battery participant for TigerLake Anson Huang <Anson.Huang(a)nxp.com> thermal/drivers: imx: Fix missing of_node_put() at probe time Petteri Aimonen <jpa(a)git.mail.kapsi.fi> x86/fpu: Reset MXCSR to default in kernel_fpu_begin() Navid Emamdoost <navid.emamdoost(a)gmail.com> drm/exynos: fix ref count leak in mic_pre_enable Marek Szyprowski <m.szyprowski(a)samsung.com> drm/exynos: Properly propagate return value in drm_iommu_attach_device() Krishna Manikandan <mkrishn(a)codeaurora.org> drm/msm/dpu: allow initialization of encoder locks during encoder init Bernard Zhao <bernard(a)vivo.com> drm/msm: fix potential memleak in error branch Taehee Yoo <ap420073(a)gmail.com> hsr: fix interface leak in error path of hsr_dev_finalize() Taehee Yoo <ap420073(a)gmail.com> net: rmnet: do not allow to add multiple bridge interfaces Paolo Abeni <pabeni(a)redhat.com> mptcp: fix DSS map generation on fin retransmission Michal Kubecek <mkubecek(a)suse.cz> ethtool: fix genlmsg_put() failure handling in ethnl_default_dumpit() Miaohe Lin <linmiaohe(a)huawei.com> net: ipv4: Fix wrong type conversion from hint to rt in ip_route_use_hint() Cong Wang <xiyou.wangcong(a)gmail.com> genetlink: get rid of family->attrbuf Willem de Bruijn <willemb(a)google.com> ip: Fix SO_MARK in RST, ACK and ICMP packets Alex Elder <elder(a)linaro.org> net: ipa: introduce ipa_cmd_tag_process() Alex Elder <elder(a)linaro.org> net: ipa: always check for stopped channel Cong Wang <xiyou.wangcong(a)gmail.com> cgroup: Fix sock_cgroup_data on big-endian. Cong Wang <xiyou.wangcong(a)gmail.com> cgroup: fix cgroup_sk_alloc() for sk_clone_lock() Eric Dumazet <edumazet(a)google.com> tcp: md5: allow changing MD5 keys in all socket states Eric Dumazet <edumazet(a)google.com> tcp: md5: refine tcp_md5_do_add()/tcp_md5_hash_key() barriers Toke Høiland-Jørgensen <toke(a)redhat.com> vlan: consolidate VLAN parsing code and limit max parsing depth Eric Dumazet <edumazet(a)google.com> tcp: md5: do not send silly options in SYNCOOKIES Eric Dumazet <edumazet(a)google.com> tcp: md5: add missing memory barriers in tcp_md5_do_add()/tcp_md5_hash_key() Christoph Paasch <cpaasch(a)apple.com> tcp: make sure listeners don't initialize congestion-control state Eric Dumazet <edumazet(a)google.com> tcp: fix SO_RCVLOWAT possible hangs under high mem pressure Toke Høiland-Jørgensen <toke(a)redhat.com> sched: consistently handle layer3 header accesses in the presence of VLANs AceLan Kao <acelan.kao(a)canonical.com> net: usb: qmi_wwan: add support for Quectel EG95 LTE modem Cong Wang <xiyou.wangcong(a)gmail.com> net_sched: fix a memory leak in atm_tc_init() Carl Huang <cjhuang(a)codeaurora.org> net: qrtr: free flow in __qrtr_node_release Codrin Ciubotariu <codrin.ciubotariu(a)microchip.com> net: dsa: microchip: set the correct number of ports Martin Varghese <martin.varghese(a)nokia.com> net: Added pointer check for dst->ops->neigh_lookup in dst_neigh_lookup_skb Eric Dumazet <edumazet(a)google.com> llc: make sure applications use ARPHRD_ETHER Xin Long <lucien.xin(a)gmail.com> l2tp: remove skb_dst_set() from l2tp_xmit_skb() David Ahern <dsahern(a)kernel.org> ipv6: Fix use of anycast address with loopback David Ahern <dsahern(a)kernel.org> ipv6: fib6_select_path can not use out path for nexthop objects Sabrina Dubroca <sd(a)queasysnail.net> ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg Sean Tranchetti <stranche(a)codeaurora.org> genetlink: remove genl_bind Linus Lüssing <linus.luessing(a)c0d3.blue> bridge: mcast: Fix MLD2 Report IPv6 payload length check ------------- Diffstat: Documentation/arm64/silicon-errata.rst | 8 + Documentation/devicetree/bindings/Makefile | 5 + .../bus/socionext,uniphier-system-bus.yaml | 4 +- .../bindings/mailbox/xlnx,zynqmp-ipi-mailbox.txt | 2 +- Makefile | 4 +- arch/arm/boot/dts/am437x-l4.dtsi | 14 +- arch/arm/boot/dts/imx6qdl-gw551x.dtsi | 2 +- arch/arm/boot/dts/mt7623n-rfb-emmc.dts | 1 + arch/arm/boot/dts/socfpga.dtsi | 2 +- arch/arm/boot/dts/socfpga_arria10.dtsi | 2 +- arch/arm64/boot/dts/altera/socfpga_stratix10.dtsi | 8 +- .../boot/dts/altera/socfpga_stratix10_socdk.dts | 1 + .../dts/altera/socfpga_stratix10_socdk_nand.dts | 7 +- .../dts/amlogic/meson-gxl-s805x-libretech-ac.dts | 2 +- .../boot/dts/amlogic/meson-gxl-s805x-p241.dts | 2 +- arch/arm64/boot/dts/amlogic/meson-gxl-s805x.dtsi | 24 +++ arch/arm64/boot/dts/amlogic/meson-gxl.dtsi | 5 + arch/arm64/boot/dts/intel/socfpga_agilex_socdk.dts | 1 + arch/arm64/include/asm/alternative.h | 16 +- arch/arm64/include/asm/cputype.h | 2 + arch/arm64/include/asm/debug-monitors.h | 2 + arch/arm64/include/asm/syscall.h | 12 +- arch/arm64/include/asm/thread_info.h | 1 + arch/arm64/kernel/alternative.c | 16 +- arch/arm64/kernel/cpu_errata.c | 22 ++- arch/arm64/kernel/cpufeature.c | 2 + arch/arm64/kernel/debug-monitors.c | 20 ++- arch/arm64/kernel/ptrace.c | 29 +++- arch/arm64/kernel/signal.c | 11 +- arch/arm64/kernel/syscall.c | 5 +- arch/arm64/kernel/vmlinux.lds.S | 3 - arch/m68k/kernel/setup_no.c | 3 +- arch/m68k/mm/mcfmmu.c | 2 +- arch/powerpc/kernel/paca.c | 2 +- arch/powerpc/mm/book3s64/pkeys.c | 12 +- arch/riscv/include/asm/thread_info.h | 4 + arch/x86/include/asm/fpu/internal.h | 5 + arch/x86/include/asm/io_bitmap.h | 16 ++ arch/x86/include/asm/paravirt.h | 5 + arch/x86/include/asm/paravirt_types.h | 1 + arch/x86/kernel/apic/vector.c | 22 +-- arch/x86/kernel/fpu/core.c | 6 + arch/x86/kernel/fpu/xstate.c | 2 +- arch/x86/kernel/paravirt.c | 3 +- arch/x86/kernel/process.c | 18 +-- arch/x86/xen/enlighten_pv.c | 12 ++ block/blk-mq-debugfs.c | 3 + crypto/asymmetric_keys/public_key.c | 1 + drivers/acpi/dptf/dptf_power.c | 1 + drivers/base/regmap/regmap-debugfs.c | 52 ++++--- drivers/block/zram/zram_drv.c | 3 +- drivers/bus/ti-sysc.c | 23 +-- drivers/char/tpm/tpm_tis_core.c | 2 +- drivers/char/virtio_console.c | 3 +- drivers/clk/clk-ast2600.c | 49 +++++- drivers/clk/mvebu/Kconfig | 1 + drivers/clk/qcom/gcc-msm8998.c | 27 ++++ drivers/clk/qcom/gcc-sc7180.c | 73 ++++----- drivers/clk/qcom/gcc-sm8150.c | 148 ++++++++++++++++++ drivers/counter/104-quad-8.c | 22 ++- drivers/dma-buf/dma-buf.c | 11 +- drivers/dma/dmatest.c | 2 + drivers/dma/dw/core.c | 12 -- drivers/dma/fsl-edma-common.h | 2 +- drivers/dma/fsl-edma.c | 7 + drivers/dma/idxd/cdev.c | 19 ++- drivers/dma/idxd/device.c | 25 +++ drivers/dma/idxd/idxd.h | 1 + drivers/dma/idxd/irq.c | 3 +- drivers/dma/idxd/sysfs.c | 5 + drivers/dma/mcf-edma.c | 7 + drivers/dma/sh/usb-dmac.c | 2 + drivers/dma/ti/k3-udma.c | 8 +- drivers/gpio/gpio-pca953x.c | 1 + drivers/gpu/drm/amd/amdgpu/sdma_v5_0.c | 26 +--- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 14 ++ drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h | 11 +- .../amd/display/amdgpu_dm/amdgpu_dm_mst_types.c | 53 ++++--- .../amd/display/amdgpu_dm/amdgpu_dm_mst_types.h | 3 + drivers/gpu/drm/amd/display/dc/core/dc_stream.c | 19 ++- drivers/gpu/drm/amd/powerplay/renoir_ppt.c | 2 +- drivers/gpu/drm/exynos/exynos_drm_dma.c | 4 +- drivers/gpu/drm/exynos/exynos_drm_mic.c | 4 +- drivers/gpu/drm/i915/display/intel_hdmi.c | 10 +- drivers/gpu/drm/i915/gt/intel_lrc.c | 19 +-- drivers/gpu/drm/i915/gvt/handlers.c | 4 +- drivers/gpu/drm/i915/i915_perf.c | 1 + drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.c | 4 +- drivers/gpu/drm/msm/msm_submitqueue.c | 4 +- drivers/gpu/drm/vmwgfx/vmwgfx_stdu.c | 8 +- drivers/hid/hid-ids.h | 3 + drivers/hid/hid-logitech-hidpp.c | 2 +- drivers/hid/hid-magicmouse.c | 6 + drivers/hid/hid-quirks.c | 2 + drivers/hwmon/drivetemp.c | 43 ++++++ drivers/hwmon/emc2103.c | 2 +- drivers/hwtracing/coresight/coresight-etm4x.c | 82 ++++++---- drivers/hwtracing/intel_th/core.c | 21 ++- drivers/hwtracing/intel_th/pci.c | 15 ++ drivers/hwtracing/intel_th/sth.c | 4 +- drivers/i2c/busses/i2c-eg20t.c | 1 + drivers/iio/accel/mma8452.c | 5 +- drivers/iio/adc/ad7780.c | 2 +- drivers/iio/health/afe4403.c | 13 +- drivers/iio/health/afe4404.c | 8 +- drivers/iio/humidity/hdc100x.c | 10 +- drivers/iio/humidity/hts221.h | 7 +- drivers/iio/humidity/hts221_buffer.c | 9 +- drivers/iio/industrialio-core.c | 2 + drivers/iio/magnetometer/ak8974.c | 29 ++-- drivers/iio/pressure/ms5611_core.c | 11 +- drivers/iio/pressure/zpa2326.c | 4 +- drivers/infiniband/hw/mlx5/qp.c | 2 + drivers/infiniband/sw/rxe/rxe.c | 1 + drivers/infiniband/sw/rxe/rxe_param.h | 3 + drivers/input/serio/i8042-x86ia64io.h | 7 + drivers/input/touchscreen/elants_i2c.c | 1 - drivers/input/touchscreen/mms114.c | 17 +- drivers/iommu/Kconfig | 2 +- drivers/misc/atmel-ssc.c | 24 +-- drivers/misc/habanalabs/goya/goya_security.c | 99 +++++++++++- drivers/misc/mei/bus.c | 3 +- drivers/mtd/nand/raw/brcmnand/brcmnand.c | 24 +-- drivers/mtd/nand/raw/marvell_nand.c | 27 ++-- drivers/mtd/nand/raw/nand_timings.c | 5 +- drivers/mtd/nand/raw/oxnas_nand.c | 24 ++- drivers/mtd/spi-nor/sfdp.c | 4 - drivers/mtd/spi-nor/sfdp.h | 6 + drivers/mtd/spi-nor/spansion.c | 25 ++- drivers/mtd/spi-nor/winbond.c | 29 +++- drivers/net/dsa/microchip/ksz8795.c | 3 + drivers/net/dsa/microchip/ksz9477.c | 3 + drivers/net/ethernet/marvell/mvneta.c | 24 ++- drivers/net/ethernet/pensando/ionic/ionic_lif.c | 4 +- drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c | 5 + drivers/net/ipa/gsi.c | 13 +- drivers/net/ipa/ipa_cmd.c | 15 ++ drivers/net/ipa/ipa_cmd.h | 8 + drivers/net/ipa/ipa_endpoint.c | 2 + drivers/net/usb/qmi_wwan.c | 1 + drivers/nvme/host/core.c | 1 + drivers/nvme/host/nvme.h | 13 ++ drivers/opp/of.c | 4 + drivers/pci/pci.c | 4 +- drivers/phy/allwinner/phy-sun4i-usb.c | 5 +- drivers/phy/rockchip/phy-rockchip-inno-dsidphy.c | 4 +- drivers/scsi/megaraid/megaraid_sas_fusion.c | 2 - drivers/scsi/qla2xxx/qla_def.h | 4 +- drivers/slimbus/core.c | 1 + drivers/soc/qcom/rpmh-rsc.c | 98 ++++++++---- drivers/soc/qcom/rpmh.c | 56 ++++--- drivers/soc/qcom/socinfo.c | 2 + drivers/soundwire/intel.c | 5 +- drivers/spi/spi-fsl-dspi.c | 15 +- drivers/spi/spi-sprd-adi.c | 2 +- drivers/spi/spi-sun6i.c | 14 +- drivers/staging/comedi/drivers/addi_apci_1500.c | 10 +- drivers/thermal/imx_thermal.c | 7 +- .../intel/int340x_thermal/int3403_thermal.c | 2 +- drivers/thermal/mtk_thermal.c | 6 +- drivers/thunderbolt/tunnel.c | 12 +- drivers/tty/serial/cpm_uart/cpm_uart_core.c | 9 +- drivers/tty/serial/mxs-auart.c | 12 +- drivers/tty/serial/serial_core.c | 112 ++------------ drivers/tty/serial/sh-sci.c | 3 + drivers/tty/serial/xilinx_uartps.c | 1 - drivers/uio/uio_pdrv_genirq.c | 4 +- drivers/usb/c67x00/c67x00-sched.c | 2 +- drivers/usb/chipidea/core.c | 24 +++ drivers/usb/dwc2/platform.c | 3 +- drivers/usb/gadget/function/f_uac1_legacy.c | 2 + drivers/usb/gadget/udc/atmel_usba_udc.c | 2 +- drivers/usb/serial/ch341.c | 1 + drivers/usb/serial/cypress_m8.c | 2 + drivers/usb/serial/cypress_m8.h | 3 + drivers/usb/serial/iuu_phoenix.c | 8 +- drivers/usb/serial/option.c | 6 + drivers/virt/vboxguest/vboxguest_core.c | 6 +- drivers/virt/vboxguest/vboxguest_core.h | 15 ++ drivers/virt/vboxguest/vboxguest_linux.c | 3 +- drivers/virt/vboxguest/vmmdev.h | 2 + drivers/xen/xenbus/xenbus_client.c | 171 ++++++++++----------- fs/cifs/transport.c | 2 +- fs/fuse/file.c | 14 +- fs/fuse/inode.c | 15 +- fs/gfs2/glops.c | 10 +- fs/gfs2/incore.h | 1 - fs/gfs2/log.c | 15 +- fs/gfs2/log.h | 4 +- fs/gfs2/main.c | 1 + fs/gfs2/ops_fstype.c | 13 +- fs/gfs2/recovery.c | 4 +- fs/gfs2/super.c | 20 +-- fs/io_uring.c | 10 +- fs/nfs/nfs4proc.c | 20 ++- fs/overlayfs/export.c | 2 +- fs/overlayfs/file.c | 10 +- fs/overlayfs/super.c | 23 ++- include/dt-bindings/clock/qcom,gcc-msm8998.h | 1 + include/linux/blkdev.h | 1 + include/linux/bpf.h | 13 +- include/linux/cgroup-defs.h | 8 +- include/linux/cgroup.h | 4 +- include/linux/dma-buf.h | 1 + include/linux/if_vlan.h | 29 +++- include/linux/input/elan-i2c-ids.h | 7 + include/linux/serial_core.h | 102 +++++++++++- include/linux/skmsg.h | 13 ++ include/net/dst.h | 10 +- include/net/genetlink.h | 10 -- include/net/inet_ecn.h | 25 ++- include/net/pkt_sched.h | 11 -- include/trace/events/rxrpc.h | 2 +- include/uapi/linux/vboxguest.h | 4 +- kernel/bpf/syscall.c | 2 +- kernel/cgroup/cgroup.c | 31 ++-- kernel/irq/manage.c | 37 ++++- kernel/sched/core.c | 2 + kernel/sched/fair.c | 15 +- kernel/time/timer.c | 21 ++- mm/memory.c | 21 +-- net/bridge/br_multicast.c | 2 +- net/ceph/osd_client.c | 1 + net/core/filter.c | 10 +- net/core/sock.c | 2 +- net/core/sock_map.c | 53 ++++++- net/ethtool/netlink.c | 27 ++-- net/hsr/hsr_device.c | 11 +- net/ipv4/icmp.c | 4 +- net/ipv4/ip_output.c | 2 +- net/ipv4/ping.c | 3 + net/ipv4/route.c | 2 +- net/ipv4/tcp.c | 15 +- net/ipv4/tcp_cong.c | 2 +- net/ipv4/tcp_input.c | 2 + net/ipv4/tcp_ipv4.c | 15 +- net/ipv4/tcp_output.c | 8 +- net/ipv6/icmp.c | 4 +- net/ipv6/route.c | 7 +- net/l2tp/l2tp_core.c | 5 +- net/llc/af_llc.c | 10 +- net/mptcp/options.c | 6 +- net/netlink/genetlink.c | 97 ++---------- net/qrtr/qrtr.c | 4 +- net/sched/act_connmark.c | 9 +- net/sched/act_csum.c | 2 +- net/sched/act_ct.c | 9 +- net/sched/act_ctinfo.c | 9 +- net/sched/act_mpls.c | 2 +- net/sched/act_skbedit.c | 2 +- net/sched/cls_api.c | 2 +- net/sched/cls_flow.c | 8 +- net/sched/cls_flower.c | 2 +- net/sched/em_ipset.c | 2 +- net/sched/em_ipt.c | 2 +- net/sched/em_meta.c | 2 +- net/sched/sch_atm.c | 8 +- net/sched/sch_cake.c | 4 +- net/sched/sch_dsmark.c | 6 +- net/sched/sch_teql.c | 2 +- net/sunrpc/xprtrdma/rpc_rdma.c | 4 +- net/sunrpc/xprtrdma/transport.c | 5 + net/sunrpc/xprtrdma/verbs.c | 35 ++--- security/apparmor/match.c | 5 + sound/pci/hda/patch_realtek.c | 27 +++- sound/usb/line6/capture.c | 2 + sound/usb/line6/driver.c | 2 +- sound/usb/line6/playback.c | 2 + sound/usb/midi.c | 17 +- tools/perf/util/stat.c | 6 +- tools/testing/selftests/net/fib_nexthops.sh | 13 ++ 271 files changed, 2281 insertions(+), 1101 deletions(-)

5 years, 1 month

5
9
0 0

patch "fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins." added to tty-linus

by gregkh＠linuxfoundation.org

This is a note to let you know that I've just added the patch titled fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins. to my tty git tree which can be found at git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty.git in the tty-linus branch. The patch will show up in the next release of the linux-next tree (usually sometime within the next 24 hours during the week.) The patch will hopefully also be merged in Linus's tree for the next -rc kernel release. If you have any questions about this process, please let me know. >From 033724d6864245a11f8e04c066002e6ad22b3fd0 Mon Sep 17 00:00:00 2001 From: Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> Date: Wed, 15 Jul 2020 10:51:02 +0900 Subject: fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins. syzbot is reporting general protection fault in bitfill_aligned() [1] caused by integer underflow in bit_clear_margins(). The cause of this problem is when and how do_vc_resize() updates vc->vc_{cols,rows}. If vc_do_resize() fails (e.g. kzalloc() fails) when var.xres or var.yres is going to shrink, vc->vc_{cols,rows} will not be updated. This allows bit_clear_margins() to see info->var.xres < (vc->vc_cols * cw) or info->var.yres < (vc->vc_rows * ch). Unexpectedly large rw or bh will try to overrun the __iomem region and causes general protection fault. Also, vc_resize(vc, 0, 0) does not set vc->vc_{cols,rows} = 0 due to new_cols = (cols ? cols : vc->vc_cols); new_rows = (lines ? lines : vc->vc_rows); exception. Since cols and lines are calculated as cols = FBCON_SWAP(ops->rotate, info->var.xres, info->var.yres); rows = FBCON_SWAP(ops->rotate, info->var.yres, info->var.xres); cols /= vc->vc_font.width; rows /= vc->vc_font.height; vc_resize(vc, cols, rows); in fbcon_modechanged(), var.xres < vc->vc_font.width makes cols = 0 and var.yres < vc->vc_font.height makes rows = 0. This means that const int fd = open("/dev/fb0", O_ACCMODE); struct fb_var_screeninfo var = { }; ioctl(fd, FBIOGET_VSCREENINFO, &var); var.xres = var.yres = 1; ioctl(fd, FBIOPUT_VSCREENINFO, &var); easily reproduces integer underflow bug explained above. Of course, callers of vc_resize() are not handling vc_do_resize() failure is bad. But we can't avoid vc_resize(vc, 0, 0) which returns 0. Therefore, as a band-aid workaround, this patch checks integer underflow in "struct fbcon_ops"->clear_margins call, assuming that vc->vc_cols * vc->vc_font.width and vc->vc_rows * vc->vc_font.heigh do not cause integer overflow. [1] https://syzkaller.appspot.com/bug?id=a565882df74fa76f10d3a6fec4be31098dbb37… Reported-and-tested-by: syzbot <syzbot+e5fd3e65515b48c02a30(a)syzkaller.appspotmail.com> Signed-off-by: Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> Acked-by: Daniel Vetter <daniel.vetter(a)ffwll.ch> Cc: stable <stable(a)vger.kernel.org> Link: https://lore.kernel.org/r/20200715015102.3814-1-penguin-kernel@I-love.SAKUR… Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> --- drivers/video/fbdev/core/bitblit.c | 4 ++-- drivers/video/fbdev/core/fbcon_ccw.c | 4 ++-- drivers/video/fbdev/core/fbcon_cw.c | 4 ++-- drivers/video/fbdev/core/fbcon_ud.c | 4 ++-- 4 files changed, 8 insertions(+), 8 deletions(-) diff --git a/drivers/video/fbdev/core/bitblit.c b/drivers/video/fbdev/core/bitblit.c index ca935c09a261..35ebeeccde4d 100644 --- a/drivers/video/fbdev/core/bitblit.c +++ b/drivers/video/fbdev/core/bitblit.c @@ -216,7 +216,7 @@ static void bit_clear_margins(struct vc_data *vc, struct fb_info *info, region.color = color; region.rop = ROP_COPY; - if (rw && !bottom_only) { + if ((int) rw > 0 && !bottom_only) { region.dx = info->var.xoffset + rs; region.dy = 0; region.width = rw; @@ -224,7 +224,7 @@ static void bit_clear_margins(struct vc_data *vc, struct fb_info *info, info->fbops->fb_fillrect(info, &region); } - if (bh) { + if ((int) bh > 0) { region.dx = info->var.xoffset; region.dy = info->var.yoffset + bs; region.width = rs; diff --git a/drivers/video/fbdev/core/fbcon_ccw.c b/drivers/video/fbdev/core/fbcon_ccw.c index dfa9a8aa4509..78f3a5621478 100644 --- a/drivers/video/fbdev/core/fbcon_ccw.c +++ b/drivers/video/fbdev/core/fbcon_ccw.c @@ -201,7 +201,7 @@ static void ccw_clear_margins(struct vc_data *vc, struct fb_info *info, region.color = color; region.rop = ROP_COPY; - if (rw && !bottom_only) { + if ((int) rw > 0 && !bottom_only) { region.dx = 0; region.dy = info->var.yoffset; region.height = rw; @@ -209,7 +209,7 @@ static void ccw_clear_margins(struct vc_data *vc, struct fb_info *info, info->fbops->fb_fillrect(info, &region); } - if (bh) { + if ((int) bh > 0) { region.dx = info->var.xoffset + bs; region.dy = 0; region.height = info->var.yres_virtual; diff --git a/drivers/video/fbdev/core/fbcon_cw.c b/drivers/video/fbdev/core/fbcon_cw.c index ce08251bfd38..fd098ff17574 100644 --- a/drivers/video/fbdev/core/fbcon_cw.c +++ b/drivers/video/fbdev/core/fbcon_cw.c @@ -184,7 +184,7 @@ static void cw_clear_margins(struct vc_data *vc, struct fb_info *info, region.color = color; region.rop = ROP_COPY; - if (rw && !bottom_only) { + if ((int) rw > 0 && !bottom_only) { region.dx = 0; region.dy = info->var.yoffset + rs; region.height = rw; @@ -192,7 +192,7 @@ static void cw_clear_margins(struct vc_data *vc, struct fb_info *info, info->fbops->fb_fillrect(info, &region); } - if (bh) { + if ((int) bh > 0) { region.dx = info->var.xoffset; region.dy = info->var.yoffset; region.height = info->var.yres; diff --git a/drivers/video/fbdev/core/fbcon_ud.c b/drivers/video/fbdev/core/fbcon_ud.c index 1936afc78fec..e165a3fad29a 100644 --- a/drivers/video/fbdev/core/fbcon_ud.c +++ b/drivers/video/fbdev/core/fbcon_ud.c @@ -231,7 +231,7 @@ static void ud_clear_margins(struct vc_data *vc, struct fb_info *info, region.color = color; region.rop = ROP_COPY; - if (rw && !bottom_only) { + if ((int) rw > 0 && !bottom_only) { region.dy = 0; region.dx = info->var.xoffset; region.width = rw; @@ -239,7 +239,7 @@ static void ud_clear_margins(struct vc_data *vc, struct fb_info *info, info->fbops->fb_fillrect(info, &region); } - if (bh) { + if ((int) bh > 0) { region.dy = info->var.yoffset; region.dx = info->var.xoffset; region.height = bh; -- 2.27.0

5 years, 1 month

1
0
0 0

[RFC for-5.8] usb: dwc2: Cleanup debugfs when usb_add_gadget_udc() fails

by Martin Blumenstingl

Call dwc2_debugfs_exit() when usb_add_gadget_udc() has failed. This ensure that the debugfs entries created by dwc2_debugfs_init() are cleaned up in the error path. Fixes: 207324a321a866 ("usb: dwc2: Postponed gadget registration to the udc class driver") Signed-off-by: Martin Blumenstingl <martin.blumenstingl(a)googlemail.com> --- This patch is compile-tested only. I found this while trying to understand the latest changes to dwc2/platform.c. drivers/usb/dwc2/platform.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/drivers/usb/dwc2/platform.c b/drivers/usb/dwc2/platform.c index c347d93eae64..02b6da7e21d7 100644 --- a/drivers/usb/dwc2/platform.c +++ b/drivers/usb/dwc2/platform.c @@ -582,12 +582,14 @@ static int dwc2_driver_probe(struct platform_device *dev) retval = usb_add_gadget_udc(hsotg->dev, &hsotg->gadget); if (retval) { dwc2_hsotg_remove(hsotg); - goto error_init; + goto error_debugfs; } } #endif /* CONFIG_USB_DWC2_PERIPHERAL || CONFIG_USB_DWC2_DUAL_ROLE */ return 0; +error_debugfs: + dwc2_debugfs_exit(hsotg); error_init: if (hsotg->params.activate_stm_id_vb_detection) regulator_disable(hsotg->usb33d); -- 2.27.0

5 years, 1 month

3
3
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror July 2020