July 2021 - Linux-stable-mirror

[PATCH v3] KVM: x86: accept userspace interrupt only if no event is injected

by Paolo Bonzini

Once an exception has been injected, any side effects related to the exception (such as setting CR2 or DR6) have been taked place. Therefore, once KVM sets the VM-entry interruption information field or the AMD EVENTINJ field, the next VM-entry must deliver that exception. Pending interrupts are processed after injected exceptions, so in theory it would not be a problem to use KVM_INTERRUPT when an injected exception is present. However, DOSEMU is using run->ready_for_interrupt_injection to detect interrupt windows and then using KVM_SET_SREGS/KVM_SET_REGS to inject the interrupt manually. For this to work, the interrupt window must be delayed after the completion of the previous event injection. Cc: stable(a)vger.kernel.org Reported-by: Stas Sergeev <stsp2(a)yandex.ru> Tested-by: Stas Sergeev <stsp2(a)yandex.ru> Fixes: 71cc849b7093 ("KVM: x86: Fix split-irqchip vs interrupt injection window request") Signed-off-by: Paolo Bonzini <pbonzini(a)redhat.com> --- arch/x86/kvm/x86.c | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/arch/x86/kvm/x86.c b/arch/x86/kvm/x86.c index 4116567f3d44..e5d5c5ed7dd4 100644 --- a/arch/x86/kvm/x86.c +++ b/arch/x86/kvm/x86.c @@ -4358,8 +4358,17 @@ static int kvm_cpu_accept_dm_intr(struct kvm_vcpu *vcpu) static int kvm_vcpu_ready_for_interrupt_injection(struct kvm_vcpu *vcpu) { - return kvm_arch_interrupt_allowed(vcpu) && - kvm_cpu_accept_dm_intr(vcpu); + /* + * Do not cause an interrupt window exit if an exception + * is pending or an event needs reinjection; userspace + * might want to inject the interrupt manually using KVM_SET_REGS + * or KVM_SET_SREGS. For that to work, we must be at an + * instruction boundary and with no events half-injected. + */ + return (kvm_arch_interrupt_allowed(vcpu) && + kvm_cpu_accept_dm_intr(vcpu) && + !kvm_event_needs_reinjection(vcpu) && + !vcpu->arch.exception.pending); } static int kvm_vcpu_ioctl_interrupt(struct kvm_vcpu *vcpu, -- 2.27.0

2 years, 8 months

3
2
0 0

[PATCH] powerpc/xive: Do not skip CPU-less nodes when creating the IPIs

by Cédric Le Goater

On PowerVM, CPU-less nodes can be populated with hot-plugged CPUs at runtime. Today, the IPI is not created for such nodes, and hot-plugged CPUs use a bogus IPI, which leads to soft lockups. We could create the node IPI on demand but it is a bit complex because this code would be called under bringup_up() and some IRQ locking is being done. The simplest solution is to create the IPIs for all nodes at startup. Fixes: 7dcc37b3eff9 ("powerpc/xive: Map one IPI interrupt per node") Cc: stable(a)vger.kernel.org # v5.13 Reported-by: Geetika Moolchandani <Geetika.Moolchandani1(a)ibm.com> Cc: Srikar Dronamraju <srikar(a)linux.vnet.ibm.com> Signed-off-by: Cédric Le Goater <clg(a)kaod.org> --- This patch breaks old versions of irqbalance (<= v1.4). Possible nodes are collected from /sys/devices/system/node/ but CPU-less nodes are not listed there. When interrupts are scanned, the link representing the node structure is NULL and segfault occurs. Version 1.7 seems immune. --- arch/powerpc/sysdev/xive/common.c | 4 ---- 1 file changed, 4 deletions(-) diff --git a/arch/powerpc/sysdev/xive/common.c b/arch/powerpc/sysdev/xive/common.c index f3b16ed48b05..5d2c58dba57e 100644 --- a/arch/powerpc/sysdev/xive/common.c +++ b/arch/powerpc/sysdev/xive/common.c @@ -1143,10 +1143,6 @@ static int __init xive_request_ipi(void) struct xive_ipi_desc *xid = &xive_ipis[node]; struct xive_ipi_alloc_info info = { node }; - /* Skip nodes without CPUs */ - if (cpumask_empty(cpumask_of_node(node))) - continue; - /* * Map one IPI interrupt per node for all cpus of that node. * Since the HW interrupt number doesn't have any meaning, -- 2.31.1

2 years, 8 months

4
6
0 0

[PATCH] drm/i915/gvt: Fix cached atomics setting for Windows VM

by Zhenyu Wang

We've seen recent regression with host and windows VM running simultaneously that cause gpu hang or even crash. Finally bisect to 58586680ffad ("drm/i915: Disable atomics in L3 for gen9"), which seems cached atomics behavior difference caused regression issue. This trys to add new scratch register handler and add those in mmio save/restore list for context switch. No gpu hang produced with this one. Cc: stable(a)vger.kernel.org # 5.12+ Cc: "Xu, Terrence" <terrence.xu(a)intel.com> Fixes: 58586680ffad ("drm/i915: Disable atomics in L3 for gen9") Signed-off-by: Zhenyu Wang <zhenyuw(a)linux.intel.com> --- drivers/gpu/drm/i915/gvt/handlers.c | 1 + drivers/gpu/drm/i915/gvt/mmio_context.c | 2 ++ 2 files changed, 3 insertions(+) diff --git a/drivers/gpu/drm/i915/gvt/handlers.c b/drivers/gpu/drm/i915/gvt/handlers.c index 98eb48c24c46..345b4be5ebad 100644 --- a/drivers/gpu/drm/i915/gvt/handlers.c +++ b/drivers/gpu/drm/i915/gvt/handlers.c @@ -3134,6 +3134,7 @@ static int init_bdw_mmio_info(struct intel_gvt *gvt) MMIO_DFH(_MMIO(0xb100), D_BDW, F_CMD_ACCESS, NULL, NULL); MMIO_DFH(_MMIO(0xb10c), D_BDW, F_CMD_ACCESS, NULL, NULL); MMIO_D(_MMIO(0xb110), D_BDW); + MMIO_D(GEN9_SCRATCH_LNCF1, D_BDW_PLUS); MMIO_F(_MMIO(0x24d0), 48, F_CMD_ACCESS | F_CMD_WRITE_PATCH, 0, 0, D_BDW_PLUS, NULL, force_nonpriv_write); diff --git a/drivers/gpu/drm/i915/gvt/mmio_context.c b/drivers/gpu/drm/i915/gvt/mmio_context.c index b8ac80765461..f776c470914d 100644 --- a/drivers/gpu/drm/i915/gvt/mmio_context.c +++ b/drivers/gpu/drm/i915/gvt/mmio_context.c @@ -105,6 +105,8 @@ static struct engine_mmio gen9_engine_mmio_list[] __cacheline_aligned = { {RCS0, COMMON_SLICE_CHICKEN2, 0xffff, true}, /* 0x7014 */ {RCS0, GEN9_CS_DEBUG_MODE1, 0xffff, false}, /* 0x20ec */ {RCS0, GEN8_L3SQCREG4, 0, false}, /* 0xb118 */ + {RCS0, GEN9_SCRATCH1, 0, false}, /* 0xb11c */ + {RCS0, GEN9_SCRATCH_LNCF1, 0, false}, /* 0xb008 */ {RCS0, GEN7_HALF_SLICE_CHICKEN1, 0xffff, true}, /* 0xe100 */ {RCS0, HALF_SLICE_CHICKEN2, 0xffff, true}, /* 0xe180 */ {RCS0, HALF_SLICE_CHICKEN3, 0xffff, true}, /* 0xe184 */ -- 2.32.0.rc2

2 years, 8 months

4
4
0 0

[PATCH v2] clk: qcom: gdsc: Ensure regulator init state matches GDSC state

by Bjorn Andersson

As GDSCs are registered and found to be already enabled gdsc_init() ensures that 1) the kernel state matches the hardware state, and 2) votable GDSCs are properly enabled from this master as well. But as the (optional) supply regulator is enabled deep into gdsc_toggle_logic(), which is only executed for votable GDSCs the kernel's state of the regulator might not match the hardware. The regulator might be automatically turned off if no other users are present or the next call to gdsc_disable() would cause an unbalanced regulator_disable(). But as the votable case deals with an already enabled GDSC, most of gdsc_enable() and gdsc_toggle_logic() can be skipped. Reducing it to just clearing the SW_COLLAPSE_MASK and enabling hardware control allow us to simply call regulator_enable() in both cases. The enablement of hardware control seems to be an independent property from the GDSC being enabled, so this is moved outside that conditional segment. Lastly, as the propagation of ALWAY_ON to GENPD_FLAG_ALWAYS_ON needs to happen regardless of the initial state this is grouped together with the other sc->pd updates at the end of the function. Cc: stable(a)vger.kernel.org Fixes: 37416e554961 ("clk: qcom: gdsc: Handle GDSC regulator supplies") Signed-off-by: Bjorn Andersson <bjorn.andersson(a)linaro.org> --- Changes since v1: - Refactored into if (on) else if (ALWAYS_ON) style - Extracted relevant parts of gdsc_enable() to call under VOTABLE - Turn on hwctrl if requested for non-votable gdscs drivers/clk/qcom/gdsc.c | 54 +++++++++++++++++++++++++++-------------- 1 file changed, 36 insertions(+), 18 deletions(-) diff --git a/drivers/clk/qcom/gdsc.c b/drivers/clk/qcom/gdsc.c index 51ed640e527b..4ece326ea233 100644 --- a/drivers/clk/qcom/gdsc.c +++ b/drivers/clk/qcom/gdsc.c @@ -357,27 +357,43 @@ static int gdsc_init(struct gdsc *sc) if (on < 0) return on; - /* - * Votable GDSCs can be ON due to Vote from other masters. - * If a Votable GDSC is ON, make sure we have a Vote. - */ - if ((sc->flags & VOTABLE) && on) - gdsc_enable(&sc->pd); + if (on) { + /* The regulator must be on, sync the kernel state */ + if (sc->rsupply) { + ret = regulator_enable(sc->rsupply); + if (ret < 0) + return ret; + } - /* - * Make sure the retain bit is set if the GDSC is already on, otherwise - * we end up turning off the GDSC and destroying all the register - * contents that we thought we were saving. - */ - if ((sc->flags & RETAIN_FF_ENABLE) && on) - gdsc_retain_ff_on(sc); + /* + * Votable GDSCs can be ON due to Vote from other masters. + * If a Votable GDSC is ON, make sure we have a Vote. + */ + if (sc->flags & VOTABLE) { + ret = regmap_update_bits(sc->regmap, sc->gdscr, + SW_COLLAPSE_MASK, val); + if (ret) + return ret; + } + + /* Turn on HW trigger mode if supported */ + if (sc->flags & HW_CTRL) { + ret = gdsc_hwctrl(sc, true); + if (ret < 0) + return ret; + } - /* If ALWAYS_ON GDSCs are not ON, turn them ON */ - if (sc->flags & ALWAYS_ON) { - if (!on) - gdsc_enable(&sc->pd); + /* + * Make sure the retain bit is set if the GDSC is already on, + * otherwise we end up turning off the GDSC and destroying all + * the register contents that we thought we were saving. + */ + if (sc->flags & RETAIN_FF_ENABLE) + gdsc_retain_ff_on(sc); + } else if (sc->flags & ALWAYS_ON) { + /* If ALWAYS_ON GDSCs are not ON, turn them ON */ + gdsc_enable(&sc->pd); on = true; - sc->pd.flags |= GENPD_FLAG_ALWAYS_ON; } if (on || (sc->pwrsts & PWRSTS_RET)) @@ -385,6 +401,8 @@ static int gdsc_init(struct gdsc *sc) else gdsc_clear_mem_on(sc); + if (sc->flags & ALWAYS_ON) + sc->pd.flags |= GENPD_FLAG_ALWAYS_ON; if (!sc->pd.power_off) sc->pd.power_off = gdsc_disable; if (!sc->pd.power_on) -- 2.29.2

2 years, 8 months

2
2
0 0

[PATCH 1/1] clk: imx6q: fix uart earlycon unwork

by Dong Aisheng

The earlycon depends on the bootloader setup UART clocks being retained. There're actually two uart clocks (ipg, per) on MX6QDL, but the 'Fixes' commit change to register only one which means another clock may be disabled during booting phase and result in the earlycon unwork. Cc: stable(a)vger.kernel.org # v5.10+ Fixes: 379c9a24cc23 ("clk: imx: Fix reparenting of UARTs not associated with stdout") Signed-off-by: Dong Aisheng <aisheng.dong(a)nxp.com> --- drivers/clk/imx/clk-imx6q.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/clk/imx/clk-imx6q.c b/drivers/clk/imx/clk-imx6q.c index 496900de0b0b..de36f58d551c 100644 --- a/drivers/clk/imx/clk-imx6q.c +++ b/drivers/clk/imx/clk-imx6q.c @@ -974,6 +974,6 @@ static void __init imx6q_clocks_init(struct device_node *ccm_node) hws[IMX6QDL_CLK_PLL3_USB_OTG]->clk); } - imx_register_uart_clocks(1); + imx_register_uart_clocks(2); } CLK_OF_DECLARE(imx6q, "fsl,imx6q-ccm", imx6q_clocks_init); -- 2.25.1

2 years, 8 months

3
4
0 0

[PATCH AUTOSEL 5.10 01/17] regulator: rtmv20: Fix wrong mask for strobe-polarity-high

by Sasha Levin

From: ChiYuan Huang <cy_huang(a)richtek.com> [ Upstream commit 2b6a761be079f9fa8abf3157b5679a6f38885db4 ] Fix wrong mask for strobe-polarity-high. Signed-off-by: ChiYuan Huang <cy_huang(a)richtek.com> In-reply-to: <CAFRkauB=0KwrJW19nJTTagdHhBR=V2R8YFWG3R3oVXt=rBRsqw(a)mail.gmail.com> Reviewed-by: Axel Lin <axel.lin(a)ingics.com> Link: https://lore.kernel.org/r/1624723112-26653-1-git-send-email-u0084500@gmail.… Signed-off-by: Mark Brown <broonie(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- drivers/regulator/rtmv20-regulator.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/regulator/rtmv20-regulator.c b/drivers/regulator/rtmv20-regulator.c index 4bca64de0f67..2ee334174e2b 100644 --- a/drivers/regulator/rtmv20-regulator.c +++ b/drivers/regulator/rtmv20-regulator.c @@ -37,7 +37,7 @@ #define RTMV20_WIDTH2_MASK GENMASK(7, 0) #define RTMV20_LBPLVL_MASK GENMASK(3, 0) #define RTMV20_LBPEN_MASK BIT(7) -#define RTMV20_STROBEPOL_MASK BIT(1) +#define RTMV20_STROBEPOL_MASK BIT(0) #define RTMV20_VSYNPOL_MASK BIT(1) #define RTMV20_FSINEN_MASK BIT(7) #define RTMV20_ESEN_MASK BIT(6) -- 2.30.2

2 years, 8 months

2
17
0 0

[PATCH] cpufreq: schedutil: Use kobject release() method to free sugov_tunables

by Kevin Hao

The struct sugov_tunables is protected by the kobject, so we can't free it directly. Otherwise we would get a call trace like this: ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x30 WARNING: CPU: 3 PID: 720 at lib/debugobjects.c:505 debug_print_object+0xb8/0x100 Modules linked in: CPU: 3 PID: 720 Comm: a.sh Tainted: G W 5.14.0-rc1-next-20210715-yocto-standard+ #507 Hardware name: Marvell OcteonTX CN96XX board (DT) pstate: 40400009 (nZcv daif +PAN -UAO -TCO BTYPE=--) pc : debug_print_object+0xb8/0x100 lr : debug_print_object+0xb8/0x100 sp : ffff80001ecaf910 x29: ffff80001ecaf910 x28: ffff00011b10b8d0 x27: ffff800011043d80 x26: ffff00011a8f0000 x25: ffff800013cb3ff0 x24: 0000000000000000 x23: ffff80001142aa68 x22: ffff800011043d80 x21: ffff00010de46f20 x20: ffff800013c0c520 x19: ffff800011d8f5b0 x18: 0000000000000010 x17: 6e6968207473696c x16: 5f72656d6974203a x15: 6570797420746365 x14: 6a626f2029302065 x13: 303378302f307830 x12: 2b6e665f72656d69 x11: ffff8000124b1560 x10: ffff800012331520 x9 : ffff8000100ca6b0 x8 : 000000000017ffe8 x7 : c0000000fffeffff x6 : 0000000000000001 x5 : ffff800011d8c000 x4 : ffff800011d8c740 x3 : 0000000000000000 x2 : ffff0001108301c0 x1 : ab3c90eedf9c0f00 x0 : 0000000000000000 Call trace: debug_print_object+0xb8/0x100 __debug_check_no_obj_freed+0x1c0/0x230 debug_check_no_obj_freed+0x20/0x88 slab_free_freelist_hook+0x154/0x1c8 kfree+0x114/0x5d0 sugov_exit+0xbc/0xc0 cpufreq_exit_governor+0x44/0x90 cpufreq_set_policy+0x268/0x4a8 store_scaling_governor+0xe0/0x128 store+0xc0/0xf0 sysfs_kf_write+0x54/0x80 kernfs_fop_write_iter+0x128/0x1c0 new_sync_write+0xf0/0x190 vfs_write+0x2d4/0x478 ksys_write+0x74/0x100 __arm64_sys_write+0x24/0x30 invoke_syscall.constprop.0+0x54/0xe0 do_el0_svc+0x64/0x158 el0_svc+0x2c/0xb0 el0t_64_sync_handler+0xb0/0xb8 el0t_64_sync+0x198/0x19c irq event stamp: 5518 hardirqs last enabled at (5517): [<ffff8000100cbd7c>] console_unlock+0x554/0x6c8 hardirqs last disabled at (5518): [<ffff800010fc0638>] el1_dbg+0x28/0xa0 softirqs last enabled at (5504): [<ffff8000100106e0>] __do_softirq+0x4d0/0x6c0 softirqs last disabled at (5483): [<ffff800010049548>] irq_exit+0x1b0/0x1b8 So add a release() method for sugov_tunables_ktype to release the sugov_tunables safely. Fixes: 9bdcb44e391d ("cpufreq: schedutil: New governor based on scheduler utilization data") Cc: stable(a)vger.kernel.org Signed-off-by: Kevin Hao <haokexin(a)gmail.com> --- kernel/sched/cpufreq_schedutil.c | 23 ++++++++++++----------- 1 file changed, 12 insertions(+), 11 deletions(-) diff --git a/kernel/sched/cpufreq_schedutil.c b/kernel/sched/cpufreq_schedutil.c index 57124614363d..ac171496da4b 100644 --- a/kernel/sched/cpufreq_schedutil.c +++ b/kernel/sched/cpufreq_schedutil.c @@ -537,9 +537,17 @@ static struct attribute *sugov_attrs[] = { }; ATTRIBUTE_GROUPS(sugov); +static void sugov_tunables_free(struct kobject *kobj) +{ + struct gov_attr_set *attr_set = container_of(kobj, struct gov_attr_set, kobj); + + kfree(to_sugov_tunables(attr_set)); +} + static struct kobj_type sugov_tunables_ktype = { .default_groups = sugov_groups, .sysfs_ops = &governor_sysfs_ops, + .release = &sugov_tunables_free, }; /********************** cpufreq governor interface *********************/ @@ -639,14 +647,6 @@ static struct sugov_tunables *sugov_tunables_alloc(struct sugov_policy *sg_polic return tunables; } -static void sugov_tunables_free(struct sugov_tunables *tunables) -{ - if (!have_governor_per_policy()) - global_tunables = NULL; - - kfree(tunables); -} - static int sugov_init(struct cpufreq_policy *policy) { struct sugov_policy *sg_policy; @@ -707,7 +707,8 @@ static int sugov_init(struct cpufreq_policy *policy) fail: kobject_put(&tunables->attr_set.kobj); policy->governor_data = NULL; - sugov_tunables_free(tunables); + if (!have_governor_per_policy()) + global_tunables = NULL; stop_kthread: sugov_kthread_stop(sg_policy); @@ -733,8 +734,8 @@ static void sugov_exit(struct cpufreq_policy *policy) count = gov_attr_set_put(&tunables->attr_set, &sg_policy->tunables_hook); policy->governor_data = NULL; - if (!count) - sugov_tunables_free(tunables); + if (!count && !have_governor_per_policy()) + global_tunables = NULL; mutex_unlock(&global_tunables_lock); -- 2.31.1

2 years, 8 months

2
2
0 0

[PATCH AUTOSEL 4.19 1/6] regulator: rt5033: Fix n_voltages settings for BUCK and LDO

by Sasha Levin

From: Axel Lin <axel.lin(a)ingics.com> [ Upstream commit 6549c46af8551b346bcc0b9043f93848319acd5c ] For linear regulators, the n_voltages should be (max - min) / step + 1. Buck voltage from 1v to 3V, per step 100mV, and vout mask is 0x1f. If value is from 20 to 31, the voltage will all be fixed to 3V. And LDO also, just vout range is different from 1.2v to 3v, step is the same. If value is from 18 to 31, the voltage will also be fixed to 3v. Signed-off-by: Axel Lin <axel.lin(a)ingics.com> Reviewed-by: ChiYuan Huang <cy_huang(a)richtek.com> Link: https://lore.kernel.org/r/20210627080418.1718127-1-axel.lin@ingics.com Signed-off-by: Mark Brown <broonie(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- include/linux/mfd/rt5033-private.h | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/include/linux/mfd/rt5033-private.h b/include/linux/mfd/rt5033-private.h index 1b63fc2f42d1..52d53d134f72 100644 --- a/include/linux/mfd/rt5033-private.h +++ b/include/linux/mfd/rt5033-private.h @@ -203,13 +203,13 @@ enum rt5033_reg { #define RT5033_REGULATOR_BUCK_VOLTAGE_MIN 1000000U #define RT5033_REGULATOR_BUCK_VOLTAGE_MAX 3000000U #define RT5033_REGULATOR_BUCK_VOLTAGE_STEP 100000U -#define RT5033_REGULATOR_BUCK_VOLTAGE_STEP_NUM 32 +#define RT5033_REGULATOR_BUCK_VOLTAGE_STEP_NUM 21 /* RT5033 regulator LDO output voltage uV */ #define RT5033_REGULATOR_LDO_VOLTAGE_MIN 1200000U #define RT5033_REGULATOR_LDO_VOLTAGE_MAX 3000000U #define RT5033_REGULATOR_LDO_VOLTAGE_STEP 100000U -#define RT5033_REGULATOR_LDO_VOLTAGE_STEP_NUM 32 +#define RT5033_REGULATOR_LDO_VOLTAGE_STEP_NUM 19 /* RT5033 regulator SAFE LDO output voltage uV */ #define RT5033_REGULATOR_SAFE_LDO_VOLTAGE 4900000U -- 2.30.2

2 years, 8 months

2
7
0 0

[PATCH 5.13 000/223] 5.13.6-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.13.6 release. There are 223 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 28 Jul 2021 15:38:12 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.13.6-rc1… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.13.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.13.6-rc1 Íñigo Huguet <ihuguet(a)redhat.com> sfc: ensure correct number of XDP queues Yoshitaka Ikeda <ikeda(a)nskint.co.jp> spi: spi-cadence-quadspi: Fix division by zero warning - try2 Colin Xu <colin.xu(a)intel.com> drm/i915/gvt: Clear d3_entered on elsp cmd submission. Riccardo Mancini <rickyman7(a)gmail.com> perf inject: Close inject.output on exit Mark Rutland <mark.rutland(a)arm.com> arm64: entry: fix KCOV suppression Robert Richter <rrichter(a)amd.com> Documentation: Fix intiramfs script name Stefan Wahren <stefan.wahren(a)i2se.com> ARM: multi_v7_defconfig: Make NOP_USB_XCEIV driver built-in Paul Blakey <paulb(a)nvidia.com> skbuff: Release nfct refcount on napi stolen or re-used skbs Matthieu Baerts <matthieu.baerts(a)tessares.net> mptcp: fix 'masking a bool' warning Mahesh Bandewar <maheshb(a)google.com> bonding: fix build issue Yoshitaka Ikeda <ikeda(a)nskint.co.jp> spi: spi-cadence-quadspi: Revert "Fix division by zero warning" Likun Gao <Likun.Gao(a)amd.com> drm/amdgpu: update golden setting for sienna_cichlid Xiaojian Du <Xiaojian.Du(a)amd.com> drm/amdgpu: update the golden setting for vangogh Tao Zhou <tao.zhou1(a)amd.com> drm/amdgpu: update gc golden setting for dimgrey_cavefish Charles Baylis <cb-kernel(a)fishzet.co.uk> drm: Return -ENOTTY for non-drm ioctls Jason Ekstrand <jason(a)jlekstrand.net> Revert "drm/i915: Propagate errors on awaiting already signaled fences" Adrian Hunter <adrian.hunter(a)intel.com> driver core: Prevent warning when removing a device link from unregistered consumer Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> nds32: fix up stack guard gap Jérôme Glisse <jglisse(a)redhat.com> misc: eeprom: at24: Always append device id even if label property is set. Ilya Dryomov <idryomov(a)gmail.com> rbd: always kick acquire on "acquired" and "released" notifications Ilya Dryomov <idryomov(a)gmail.com> rbd: don't hold lock_rwsem while running_list is being drained Mike Kravetz <mike.kravetz(a)oracle.com> hugetlbfs: fix mount mode command line processing Qi Zheng <zhengqi.arch(a)bytedance.com> mm: fix the deadlock in finish_fault() Mike Rapoport <rppt(a)kernel.org> memblock: make for_each_mem_range() traverse MEMBLOCK_HOTPLUG regions Sergei Trofimovich <slyfox(a)gentoo.org> mm: page_alloc: fix page_poison=1 / INIT_ON_ALLOC_DEFAULT_ON interaction Christoph Hellwig <hch(a)lst.de> mm: call flush_dcache_page() in memcpy_to_page() and memzero_page() Alexander Potapenko <glider(a)google.com> kfence: skip all GFP_ZONEMASK allocations Alexander Potapenko <glider(a)google.com> kfence: move the size check to the beginning of __kfence_alloc() Peter Collingbourne <pcc(a)google.com> userfaultfd: do not untag user pointers Jens Axboe <axboe(a)kernel.dk> io_uring: fix early fdput() of file Pavel Begunkov <asml.silence(a)gmail.com> io_uring: remove double poll entry on arm failure Pavel Begunkov <asml.silence(a)gmail.com> io_uring: explicitly count entries for poll reqs Peter Collingbourne <pcc(a)google.com> selftest: use mmap instead of posix_memalign to allocate memory Frederic Weisbecker <frederic(a)kernel.org> posix-cpu-timers: Fix rearm racing against process tick Loic Poulain <loic.poulain(a)linaro.org> bus: mhi: pci_generic: Fix inbound IPCR channel Bhaumik Bhatt <bbhatt(a)codeaurora.org> bus: mhi: core: Validate channel ID when processing command completions Bhaumik Bhatt <bbhatt(a)codeaurora.org> bus: mhi: pci_generic: Apply no-op for wake using sideband wake boolean Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> driver core: auxiliary bus: Fix memory leak when driver_register() fail Markus Boehme <markubo(a)amazon.com> ixgbe: Fix packet corruption due to missing DMA sync Gustavo A. R. Silva <gustavoars(a)kernel.org> media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() Filipe Manana <fdmanana(a)suse.com> btrfs: fix lock inversion problem when doing qgroup extent tracing Filipe Manana <fdmanana(a)suse.com> btrfs: fix unpersisted i_size on fsync after expanding truncate Anand Jain <anand.jain(a)oracle.com> btrfs: check for missing device in btrfs_trim_fs Steven Rostedt (VMware) <rostedt(a)goodmis.org> tracing: Synthetic event field_pos is an index not a boolean Haoran Luo <www(a)aegistudio.net> tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. Steven Rostedt (VMware) <rostedt(a)goodmis.org> tracing/histogram: Rename "cpu" to "common_cpu" Steven Rostedt (VMware) <rostedt(a)goodmis.org> tracepoints: Update static_call before tp_funcs when adding a tracepoint Marc Zyngier <maz(a)kernel.org> firmware/efi: Tell memblock about EFI iomem reservations Amelie Delaunay <amelie.delaunay(a)foss.st.com> usb: typec: stusb160x: Don't block probing of consumer of "connector" nodes Amelie Delaunay <amelie.delaunay(a)foss.st.com> usb: typec: stusb160x: register role switch before interrupt registration Martin Kepplinger <martink(a)posteo.de> usb: typec: tipd: Don't block probing of consumer of "connector" nodes Minas Harutyunyan <Minas.Harutyunyan(a)synopsys.com> usb: dwc2: gadget: Fix sending zero length packet in DDMA mode. Minas Harutyunyan <Minas.Harutyunyan(a)synopsys.com> usb: dwc2: gadget: Fix GOUTNAK flow for Slave mode. Marek Szyprowski <m.szyprowski(a)samsung.com> usb: dwc2: Skip clock gating on Samsung SoCs Zhang Qilong <zhangqilong3(a)huawei.com> usb: gadget: Fix Unbalanced pm_runtime_enable in tegra_xudc_probe John Keeping <john(a)metanate.com> USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick Ian Ray <ian.ray(a)ge.com> USB: serial: cp210x: fix comments for GE CS1000 Marco De Marco <marco.demarco(a)posteo.net> USB: serial: option: add support for u-blox LARA-R6 family Yoshihiro Shimoda <yoshihiro.shimoda.uh(a)renesas.com> usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop() Mark Tomlinson <mark.tomlinson(a)alliedtelesis.co.nz> usb: max-3421: Prevent corruption of freed memory Julian Sikorski <belegdol(a)gmail.com> USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS Mathias Nyman <mathias.nyman(a)linux.intel.com> usb: hub: Fix link power management max exit latency (MEL) calculations Mathias Nyman <mathias.nyman(a)linux.intel.com> usb: hub: Disable USB 3 device initiated lpm if exit latency is too high Nicholas Piggin <npiggin(a)gmail.com> KVM: PPC: Book3S HV Nested: Sanitise H_ENTER_NESTED TM state Nicholas Piggin <npiggin(a)gmail.com> KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow David Jeffery <djeffery(a)redhat.com> usb: ehci: Prevent missed ehci interrupts with edge-triggered MSI Mathias Nyman <mathias.nyman(a)linux.intel.com> xhci: Fix lost USB 2 remote wake Greg Thelen <gthelen(a)google.com> usb: xhci: avoid renesas_usb_fw.mem when it's unusable Moritz Fischer <mdf(a)kernel.org> Revert "usb: renesas-xhci: Fix handling of unknown ROM state" Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Fix mmap capability check Alan Young <consult.awy(a)gmail.com> ALSA: pcm: Call substream ack() method upon compat mmap commit Takashi Iwai <tiwai(a)suse.de> ALSA: hdmi: Expose all pins on MSI MS-7C94 board Hui Wang <hui.wang(a)canonical.com> ALSA: hda/realtek: Fix pop noise and 2 Front Mic issues on a machine Takashi Iwai <tiwai(a)suse.de> ALSA: sb: Fix potential ABBA deadlock in CSP driver Alexander Tsoy <alexander(a)tsoy.me> ALSA: usb-audio: Add registration quirk for JBL Quantum headsets Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Add missing proc text entry for BESPOKEN type Alexander Egorenkov <egorenar(a)linux.ibm.com> s390/boot: fix use of expolines in the DMA code Vasily Gorbik <gor(a)linux.ibm.com> s390/ftrace: fix ftrace_update_ftrace_func implementation Stephen Boyd <swboyd(a)chromium.org> mmc: core: Don't allocate IDA for OF aliases Olivier Langlois <olivier(a)trillion01.com> io_uring: Fix race condition when sqp thread goes to sleep Linus Torvalds <torvalds(a)linux-foundation.org> ACPI: fix NULL pointer dereference Marcelo Henrique Cerri <marcelo.cerri(a)canonical.com> proc: Avoid mixing integer types in mem_rw() Ronnie Sahlberg <lsahlber(a)redhat.com> cifs: fix fallocate when trying to allocate a hole. Ronnie Sahlberg <lsahlber(a)redhat.com> cifs: only write 64kb at a time when fallocating a small region of a file Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: seed the buffer pool after allocating the swp Maxime Ripard <maxime(a)cerno.tech> drm/panel: raspberrypi-touchscreen: Prevent double-free Yajun Deng <yajun.deng(a)linux.dev> net: sched: cls_api: Fix the the wrong parameter Heinrich Schuchardt <xypron.glpk(a)gmx.de> RISC-V: load initrd wherever it fits into memory Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dsa: sja1105: make VID 4095 a bridge VLAN too Wei Wang <weiwan(a)google.com> tcp: disable TFO blackhole logic by default Bin Meng <bmeng.cn(a)gmail.com> riscv: Fix 32-bit RISC-V boot failure Sukadev Bhattiprolu <sukadev(a)linux.ibm.com> ibmvnic: Remove the proper scrq flush Vadim Fedorenko <vfedorenko(a)novek.ru> udp: check encap socket in __udp_lib_err Xin Long <lucien.xin(a)gmail.com> sctp: update active_key for asoc when old key is being replaced Christoph Hellwig <hch(a)lst.de> nvme: set the PRACT bit when using Write Zeroes with T10 PI Sayanta Pattanayak <sayanta.pattanayak(a)arm.com> r8169: Avoid duplicate sysfs entry creation error David Howells <dhowells(a)redhat.com> afs: Fix setting of writeback_index Tom Rix <trix(a)redhat.com> afs: check function return David Howells <dhowells(a)redhat.com> afs: Fix tracepoint string placement with built-in AFS Vincent Palatin <vpalatin(a)chromium.org> Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem" Zhihao Cheng <chengzhihao1(a)huawei.com> nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING Jason Ekstrand <jason(a)jlekstrand.net> drm/ttm: Force re-init if ttm_global_init() fails David Disseldorp <ddiss(a)suse.de> scsi: target: Fix NULL dereference on XCOPY completion Chris Packham <chris.packham(a)alliedtelesis.co.nz> i2c: mpc: Poll for MCF Luis Henriques <lhenriques(a)suse.de> ceph: don't WARN if we're still opening a session to an MDS Paolo Abeni <pabeni(a)redhat.com> ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions Peilin Ye <peilin.ye(a)bytedance.com> net/sched: act_skbmod: Skip non-Ethernet packets Yang Yingliang <yangyingliang(a)huawei.com> io_uring: fix memleak in io_init_wq_offload() Alexandru Tachici <alexandru.tachici(a)analog.com> spi: spi-bcm2835: Fix deadlock Jian Shen <shenjian15(a)huawei.com> net: hns3: fix rx VLAN offload state inconsistent issue Chengwen Feng <fengchengwen(a)huawei.com> net: hns3: fix possible mismatches resp of mailbox Pierre-Louis Bossart <pierre-louis.bossart(a)linux.intel.com> ALSA: hda: intel-dsp-cfg: add missing ElkhartLake PCI ID Eric Dumazet <edumazet(a)google.com> net/tcp_fastopen: fix data races around tfo_active_disable_stamp Randy Dunlap <rdunlap(a)infradead.org> net: hisilicon: rename CACHE_LINE_MASK to avoid redefinition Somnath Kotur <somnath.kotur(a)broadcom.com> bnxt_en: Check abort error state in bnxt_half_open_nic() Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Validate vlan protocol ID on RX packets Somnath Kotur <somnath.kotur(a)broadcom.com> bnxt_en: fix error path of FW reset Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Add missing check for BNXT_STATE_ABORT_ERR in bnxt_fw_rset_task() Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Refresh RoCE capabilities in bnxt_ulp_probe() Kalesh AP <kalesh-anakkur.purayil(a)broadcom.com> bnxt_en: don't disable an already disabled PCI device Andy Shevchenko <andy.shevchenko(a)gmail.com> ACPI: utils: Fix reference counting in for_each_acpi_dev_match() Andy Shevchenko <andy.shevchenko(a)gmail.com> efi/dev-path-parser: Switch to use for_each_acpi_dev_match() Robert Richter <rrichter(a)amd.com> ACPI: Kconfig: Fix table override from built-in initrd Marek Vasut <marex(a)denx.de> spi: cadence: Correct initialisation of runtime PM again Dmitry Bogdanov <d.bogdanov(a)yadro.com> scsi: target: Fix protect handling in WRITE SAME(32) Mike Christie <michael.christie(a)oracle.com> scsi: iscsi: Fix iface sysfs attr detection Nguyen Dinh Phi <phind.uet(a)gmail.com> netrom: Decrease sock refcount when sock timers expire Xin Long <lucien.xin(a)gmail.com> sctp: trim optlen when it's a huge value in sctp_setsockopt Pavel Skripkin <paskripkin(a)gmail.com> net: sched: fix memory leak in tcindex_partial_destroy_work Nicholas Piggin <npiggin(a)gmail.com> KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak Nicholas Piggin <npiggin(a)gmail.com> KVM: PPC: Book3S: Fix CONFIG_TRANSACTIONAL_MEM=n crash Yajun Deng <yajun.deng(a)linux.dev> net: decnet: Fix sleeping inside in af_decnet Michal Suchanek <msuchanek(a)suse.de> efi/tpm: Differentiate missing and invalid final event log table. Vijendar Mukunda <vijendar.mukunda(a)amd.com> ASoC: soc-pcm: add a flag to reverse the stop sequence Roman Skakun <Roman_Skakun(a)epam.com> dma-mapping: handle vmalloc addresses in dma_common_{mmap,get_sgtable} Dongliang Mu <mudongliangabcd(a)gmail.com> usb: hso: fix error handling code of hso_create_net_device Yoshitaka Ikeda <ikeda(a)nskint.co.jp> spi: spi-cadence-quadspi: Fix division by zero warning Ziyang Xuan <william.xuanziyang(a)huawei.com> net: fix uninit-value in caif_seqpkt_sendmsg Tobias Klauser <tklauser(a)distanz.ch> bpftool: Check malloc return value in mount_bpffs_for_pin Jakub Sitnicki <jakub(a)cloudflare.com> bpf, sockmap, udp: sk_prot needs inuse_idx set for proc stats John Fastabend <john.fastabend(a)gmail.com> bpf, sockmap, tcp: sk_prot needs inuse_idx set for proc stats John Fastabend <john.fastabend(a)gmail.com> bpf, sockmap: Fix potential memory leak on unlikely error case Colin Ian King <colin.king(a)canonical.com> s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1] Colin Ian King <colin.king(a)canonical.com> liquidio: Fix unintentional sign extension issue on left shift of u16 Geert Uytterhoeven <geert+renesas(a)glider.be> net: dsa: mv88e6xxx: NET_DSA_MV88E6XXX_PTP should depend on NET_DSA_MV88E6XXX Maxime Ripard <maxime(a)cerno.tech> drm/vc4: hdmi: Drop devm interrupt handler for CEC interrupts Nicolas Saenz Julienne <nsaenzju(a)redhat.com> timers: Fix get_next_timer_interrupt() with no timers pending Sathya Prakash M R <sathya.prakash.m.r(a)intel.com> ASoC: SOF: Intel: Update ADL descriptor to use ACPI power states Xuan Zhuo <xuanzhuo(a)linux.alibaba.com> xdp, net: Fix use-after-free in bpf_xdp_link_release Daniel Borkmann <daniel(a)iogearbox.net> bpf: Fix tail_call_reachable rejection for interpreter when jit failed Xuan Zhuo <xuanzhuo(a)linux.alibaba.com> bpf, test: fix NULL pointer dereference on invalid expected_attach_type Maxim Schwalm <maxim.schwalm(a)gmail.com> ASoC: rt5631: Fix regcache sync errors on resume Peter Hess <peter.hess(a)ph-home.de> spi: mediatek: fix fifo rx mode Axel Lin <axel.lin(a)ingics.com> regulator: hi6421: Fix getting wrong drvdata Axel Lin <axel.lin(a)ingics.com> regulator: hi6421: Use correct variable type for regmap api val argument Alain Volmat <alain.volmat(a)foss.st.com> spi: stm32: fixes pm_runtime calls in probe/remove Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: wm_adsp: Correct wm_coeff_tlv_get handling Lecopzer Chen <lecopzer.chen(a)mediatek.com> Kbuild: lto: fix module versionings mismatch in GNU make 3.X Yang Jihong <yangjihong1(a)huawei.com> perf sched: Fix record failure when CONFIG_SCHEDSTATS is not set Riccardo Mancini <rickyman7(a)gmail.com> perf data: Close all files in close_dir() Riccardo Mancini <rickyman7(a)gmail.com> perf probe-file: Delete namelist in del_events() on the error path Riccardo Mancini <rickyman7(a)gmail.com> perf lzma: Close lzma stream on exit Riccardo Mancini <rickyman7(a)gmail.com> perf script: Fix memory 'threads' and 'cpus' leaks on exit Riccardo Mancini <rickyman7(a)gmail.com> perf script: Release zstd data Riccardo Mancini <rickyman7(a)gmail.com> perf report: Free generated help strings for sort option Riccardo Mancini <rickyman7(a)gmail.com> perf env: Fix memory leak of cpu_pmu_caps Riccardo Mancini <rickyman7(a)gmail.com> perf test maps__merge_in: Fix memory leak of maps Riccardo Mancini <rickyman7(a)gmail.com> perf dso: Fix memory leak in dso__new_map() Riccardo Mancini <rickyman7(a)gmail.com> perf test event_update: Fix memory leak of unit Riccardo Mancini <rickyman7(a)gmail.com> perf test event_update: Fix memory leak of evlist Riccardo Mancini <rickyman7(a)gmail.com> perf test session_topology: Delete session->evlist Riccardo Mancini <rickyman7(a)gmail.com> perf env: Fix sibling_dies memory leak Riccardo Mancini <rickyman7(a)gmail.com> perf probe: Fix dso->nsinfo refcounting Riccardo Mancini <rickyman7(a)gmail.com> perf map: Fix dso->nsinfo refcounting Riccardo Mancini <rickyman7(a)gmail.com> perf inject: Fix dso->nsinfo refcounting Sudeep Holla <sudeep.holla(a)arm.com> firmware: arm_scmi: Ensure drivers provide a probe function Zev Weiss <zev(a)bewilderbeest.net> ARM: dts: aspeed: Update e3c246d4i vuart properties Mark Rutland <mark.rutland(a)arm.com> arm64: mte: fix restoration of GCR_EL1 from suspend Sean Christopherson <seanjc(a)google.com> KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities Sean Christopherson <seanjc(a)google.com> KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails Like Xu <like.xu.linux(a)gmail.com> KVM: x86/pmu: Clear anythread deprecated bit when 0xa leaf is unsupported on the SVM Íñigo Huguet <ihuguet(a)redhat.com> sfc: fix lack of XDP TX queues - error XDP TX failed (-22) Vladimir Oltean <vladimir.oltean(a)nxp.com> net: ocelot: fix switchdev objects synced for wrong netdev with LAG offload Casey Chen <cachen(a)purestorage.com> nvme-pci: do not call nvme_dev_remove_admin from nvme_remove Marek Behún <kabel(a)kernel.org> net: phy: marvell10g: fix differentiation of 88X3310 from 88X3340 Paolo Abeni <pabeni(a)redhat.com> mptcp: properly account bulk freed memory Paolo Abeni <pabeni(a)redhat.com> mptcp: refine mptcp_cleanup_rbuf Paolo Abeni <pabeni(a)redhat.com> mptcp: use fast lock for subflows when possible Jianguo Wu <wujianguo(a)chinatelecom.cn> selftests: mptcp: fix case multiple subflows limited by server Jianguo Wu <wujianguo(a)chinatelecom.cn> mptcp: avoid processing packet if a subflow reset Geliang Tang <geliangtang(a)gmail.com> mptcp: add sk parameter for mptcp_get_options Jianguo Wu <wujianguo(a)chinatelecom.cn> mptcp: fix syncookie process if mptcp can not_accept new subflow Jianguo Wu <wujianguo(a)chinatelecom.cn> mptcp: remove redundant req destruct in subflow_check_req() Jianguo Wu <wujianguo(a)chinatelecom.cn> mptcp: fix warning in __skb_flow_dissect() when do syn cookie for subflow join Zack Rusin <zackr(a)vmware.com> drm/vmwgfx: Fix a bad merge in otable batch takedown Shahjada Abul Husain <shahjada(a)chelsio.com> cxgb4: fix IRQ free race during driver unload Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> pwm: sprd: Ensure configuring period and duty_cycle isn't wrongly skipped Hangbin Liu <liuhangbin(a)gmail.com> selftests: icmp_redirect: IPv6 PMTU info should be cleared after redirect Hangbin Liu <liuhangbin(a)gmail.com> selftests: icmp_redirect: remove from checking for IPv6 route get YueHaibing <yuehaibing(a)huawei.com> stmmac: platform: Fix signedness bug in stmmac_probe_config_dt() Nicolas Dichtel <nicolas.dichtel(a)6wind.com> ipv6: fix 'disable_policy' for fwd packets Taehee Yoo <ap420073(a)gmail.com> bonding: fix incorrect return value of bond_ipsec_offload_ok() Taehee Yoo <ap420073(a)gmail.com> bonding: fix suspicious RCU usage in bond_ipsec_offload_ok() Taehee Yoo <ap420073(a)gmail.com> bonding: Add struct bond_ipesc to manage SA Taehee Yoo <ap420073(a)gmail.com> bonding: disallow setting nested bonding + ipsec offload Taehee Yoo <ap420073(a)gmail.com> bonding: fix suspicious RCU usage in bond_ipsec_del_sa() Taehee Yoo <ap420073(a)gmail.com> ixgbevf: use xso.real_dev instead of xso.dev in callback functions of struct xfrmdev_ops Taehee Yoo <ap420073(a)gmail.com> bonding: fix null dereference in bond_ipsec_add_sa() Taehee Yoo <ap420073(a)gmail.com> bonding: fix suspicious RCU usage in bond_ipsec_add_sa() Wang Hai <wanghai38(a)huawei.com> bpf, samples: Fix xdpsock with '-M' parameter missing unload process Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> gve: Fix an error handling path in 'gve_probe()' Mohammad Athari Bin Ismail <mohammad.athari.ismail(a)intel.com> net: stmmac: Terminate FPE workqueue in suspend Jedrzej Jagielski <jedrzej.jagielski(a)intel.com> igb: Fix position of assignment to *ring Aleksandr Loktionov <aleksandr.loktionov(a)intel.com> igb: Check if num of q_vectors is smaller than max before array access Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> iavf: Fix an error handling path in 'iavf_probe()' Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> e1000e: Fix an error handling path in 'e1000_probe()' Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> fm10k: Fix an error handling path in 'fm10k_probe()' Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> igb: Fix an error handling path in 'igb_probe()' Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> igc: Fix an error handling path in 'igc_probe()' Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> ixgbe: Fix an error handling path in 'ixgbe_probe()' Tom Rix <trix(a)redhat.com> igc: change default return of igc_read_phy_reg() Vinicius Costa Gomes <vinicius.gomes(a)intel.com> igb: Fix use-after-free error during reset Vinicius Costa Gomes <vinicius.gomes(a)intel.com> igc: Fix use-after-free error during reset ------------- Diffstat: Documentation/arm64/tagged-address-abi.rst | 26 ++- .../early-userspace/early_userspace_support.rst | 8 +- .../filesystems/ramfs-rootfs-initramfs.rst | 2 +- Documentation/networking/ip-sysctl.rst | 2 +- Documentation/trace/histogram.rst | 2 +- Makefile | 4 +- arch/arm/boot/dts/aspeed-bmc-asrock-e3c246d4i.dts | 4 +- arch/arm/configs/multi_v7_defconfig | 2 +- arch/arm64/kernel/Makefile | 2 +- arch/arm64/kernel/mte.c | 15 +- arch/nds32/mm/mmap.c | 2 +- arch/powerpc/kvm/book3s_hv.c | 2 + arch/powerpc/kvm/book3s_hv_nested.c | 20 +++ arch/powerpc/kvm/book3s_rtas.c | 25 ++- arch/powerpc/kvm/powerpc.c | 4 +- arch/riscv/include/asm/efi.h | 4 +- arch/riscv/mm/init.c | 4 +- arch/s390/boot/text_dma.S | 19 +-- arch/s390/include/asm/ftrace.h | 1 + arch/s390/kernel/ftrace.c | 2 + arch/s390/kernel/mcount.S | 4 +- arch/s390/net/bpf_jit_comp.c | 2 +- arch/x86/kvm/cpuid.c | 3 +- arch/x86/kvm/svm/sev.c | 14 +- drivers/acpi/Kconfig | 2 +- drivers/acpi/utils.c | 7 +- drivers/base/auxiliary.c | 8 +- drivers/base/core.c | 6 +- drivers/block/rbd.c | 32 ++-- drivers/bus/mhi/core/main.c | 17 +- drivers/bus/mhi/pci_generic.c | 45 ++++- drivers/firmware/arm_scmi/bus.c | 3 + drivers/firmware/efi/dev-path-parser.c | 46 ++---- drivers/firmware/efi/efi.c | 13 +- drivers/firmware/efi/tpm.c | 8 +- drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 3 + drivers/gpu/drm/drm_ioctl.c | 3 + drivers/gpu/drm/i915/gvt/handlers.c | 15 ++ drivers/gpu/drm/i915/i915_request.c | 8 +- .../gpu/drm/panel/panel-raspberrypi-touchscreen.c | 1 - drivers/gpu/drm/ttm/ttm_device.c | 2 + drivers/gpu/drm/vc4/vc4_hdmi.c | 49 ++++-- drivers/gpu/drm/vmwgfx/vmwgfx_mob.c | 1 - drivers/i2c/busses/i2c-mpc.c | 4 +- drivers/media/pci/intel/ipu3/cio2-bridge.c | 6 +- drivers/media/pci/ngene/ngene-core.c | 2 +- drivers/media/pci/ngene/ngene.h | 14 +- drivers/misc/eeprom/at24.c | 17 +- drivers/mmc/core/host.c | 20 +-- drivers/net/bonding/bond_main.c | 183 +++++++++++++++++---- drivers/net/dsa/mv88e6xxx/Kconfig | 2 +- drivers/net/dsa/sja1105/sja1105_main.c | 6 + drivers/net/ethernet/broadcom/bnxt/bnxt.c | 63 +++++-- drivers/net/ethernet/broadcom/bnxt/bnxt_ulp.c | 9 +- .../ethernet/cavium/liquidio/cn23xx_pf_device.c | 2 +- drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 18 +- drivers/net/ethernet/chelsio/cxgb4/cxgb4_uld.c | 3 + .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 16 +- drivers/net/ethernet/google/gve/gve_main.c | 5 +- drivers/net/ethernet/hisilicon/hip04_eth.c | 6 +- drivers/net/ethernet/hisilicon/hns3/hclge_mbx.h | 6 +- .../net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c | 1 + .../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 10 ++ drivers/net/ethernet/ibm/ibmvnic.c | 2 +- drivers/net/ethernet/intel/e1000e/netdev.c | 1 + drivers/net/ethernet/intel/fm10k/fm10k_pci.c | 1 + drivers/net/ethernet/intel/iavf/iavf_main.c | 1 + drivers/net/ethernet/intel/igb/igb_main.c | 15 +- drivers/net/ethernet/intel/igc/igc.h | 2 +- drivers/net/ethernet/intel/igc/igc_main.c | 3 + drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 4 +- drivers/net/ethernet/intel/ixgbevf/ipsec.c | 20 ++- drivers/net/ethernet/mscc/ocelot_net.c | 9 +- drivers/net/ethernet/realtek/r8169_main.c | 3 +- drivers/net/ethernet/sfc/efx_channels.c | 18 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 1 + .../net/ethernet/stmicro/stmmac/stmmac_platform.c | 8 +- drivers/net/phy/marvell10g.c | 40 ++++- drivers/net/usb/hso.c | 33 ++-- drivers/nvme/host/core.c | 5 +- drivers/nvme/host/pci.c | 5 +- drivers/pwm/pwm-sprd.c | 11 +- drivers/regulator/hi6421-regulator.c | 30 ++-- drivers/scsi/scsi_transport_iscsi.c | 90 ++++------ drivers/spi/spi-bcm2835.c | 12 +- drivers/spi/spi-cadence-quadspi.c | 3 + drivers/spi/spi-cadence.c | 14 +- drivers/spi/spi-mt65xx.c | 16 +- drivers/spi/spi-stm32.c | 9 +- drivers/target/target_core_sbc.c | 35 ++-- drivers/target/target_core_transport.c | 2 +- drivers/usb/core/hub.c | 120 ++++++++++---- drivers/usb/core/quirks.c | 4 - drivers/usb/dwc2/core.h | 4 + drivers/usb/dwc2/core_intr.c | 3 +- drivers/usb/dwc2/gadget.c | 31 +++- drivers/usb/dwc2/hcd.c | 6 +- drivers/usb/dwc2/params.c | 1 + drivers/usb/gadget/udc/tegra-xudc.c | 1 + drivers/usb/host/ehci-hcd.c | 18 +- drivers/usb/host/max3421-hcd.c | 44 ++--- drivers/usb/host/xhci-hub.c | 3 +- drivers/usb/host/xhci-pci-renesas.c | 16 +- drivers/usb/host/xhci-pci.c | 7 + drivers/usb/renesas_usbhs/fifo.c | 7 + drivers/usb/serial/cp210x.c | 5 +- drivers/usb/serial/option.c | 3 + drivers/usb/storage/unusual_uas.h | 7 + drivers/usb/typec/stusb160x.c | 20 ++- drivers/usb/typec/tipd/core.c | 9 + fs/afs/cmservice.c | 25 +-- fs/afs/write.c | 18 +- fs/btrfs/backref.c | 6 +- fs/btrfs/backref.h | 3 +- fs/btrfs/delayed-ref.c | 4 +- fs/btrfs/extent-tree.c | 3 + fs/btrfs/qgroup.c | 38 ++++- fs/btrfs/qgroup.h | 2 +- fs/btrfs/tests/qgroup-tests.c | 20 +-- fs/btrfs/tree-log.c | 31 +++- fs/ceph/mds_client.c | 2 +- fs/cifs/smb2ops.c | 49 ++++-- fs/hugetlbfs/inode.c | 2 +- fs/io_uring.c | 33 ++-- fs/proc/base.c | 2 +- fs/userfaultfd.c | 26 ++- include/acpi/acpi_bus.h | 8 +- include/drm/drm_ioctl.h | 1 + include/linux/highmem.h | 2 + include/linux/marvell_phy.h | 6 +- include/linux/memblock.h | 4 +- include/net/bonding.h | 9 +- include/net/mptcp.h | 5 +- include/sound/soc.h | 6 + include/trace/events/afs.h | 67 +++++++- kernel/bpf/verifier.c | 2 + kernel/dma/ops_helpers.c | 12 +- kernel/time/posix-cpu-timers.c | 10 +- kernel/time/timer.c | 8 +- kernel/trace/ring_buffer.c | 28 +++- kernel/trace/trace.c | 4 + kernel/trace/trace_events_hist.c | 22 ++- kernel/trace/trace_synth.h | 2 +- kernel/tracepoint.c | 2 +- mm/kfence/core.c | 19 ++- mm/memblock.c | 3 +- mm/memory.c | 11 +- mm/page_alloc.c | 29 ++-- net/bpf/test_run.c | 3 + net/caif/caif_socket.c | 3 +- net/core/dev.c | 27 ++- net/core/skbuff.c | 1 + net/core/skmsg.c | 16 +- net/decnet/af_decnet.c | 27 ++- net/ipv4/tcp_bpf.c | 2 +- net/ipv4/tcp_fastopen.c | 28 +++- net/ipv4/tcp_input.c | 19 ++- net/ipv4/tcp_ipv4.c | 2 +- net/ipv4/udp.c | 25 ++- net/ipv4/udp_bpf.c | 2 +- net/ipv6/ip6_output.c | 4 +- net/ipv6/route.c | 2 +- net/ipv6/udp.c | 25 ++- net/mptcp/mib.c | 1 + net/mptcp/mib.h | 1 + net/mptcp/options.c | 24 ++- net/mptcp/pm_netlink.c | 10 +- net/mptcp/protocol.c | 81 +++++---- net/mptcp/protocol.h | 14 +- net/mptcp/subflow.c | 21 +-- net/mptcp/syncookies.c | 16 +- net/netrom/nr_timer.c | 20 ++- net/sched/act_skbmod.c | 12 +- net/sched/cls_api.c | 2 +- net/sched/cls_tcindex.c | 5 +- net/sctp/auth.c | 2 + net/sctp/socket.c | 4 + samples/bpf/xdpsock_user.c | 28 ++++ scripts/Makefile.build | 2 +- sound/core/pcm_native.c | 25 ++- sound/hda/intel-dsp-config.c | 4 + sound/isa/sb/sb16_csp.c | 4 + sound/pci/hda/patch_hdmi.c | 1 + sound/pci/hda/patch_realtek.c | 1 + sound/soc/codecs/rt5631.c | 2 + sound/soc/codecs/wm_adsp.c | 2 +- sound/soc/soc-pcm.c | 22 ++- sound/soc/sof/intel/pci-tgl.c | 1 + sound/usb/mixer.c | 10 +- sound/usb/quirks.c | 3 + tools/bpf/bpftool/common.c | 5 + tools/perf/builtin-inject.c | 13 +- tools/perf/builtin-report.c | 33 ++-- tools/perf/builtin-sched.c | 33 +++- tools/perf/builtin-script.c | 8 + tools/perf/tests/event_update.c | 6 +- tools/perf/tests/maps.c | 2 + tools/perf/tests/topology.c | 1 + tools/perf/util/data.c | 2 +- tools/perf/util/dso.c | 4 +- tools/perf/util/env.c | 2 + tools/perf/util/lzma.c | 8 +- tools/perf/util/map.c | 2 + tools/perf/util/probe-event.c | 4 +- tools/perf/util/probe-file.c | 4 +- tools/perf/util/sort.c | 2 +- tools/perf/util/sort.h | 2 +- tools/testing/selftests/net/icmp_redirect.sh | 5 +- tools/testing/selftests/net/mptcp/mptcp_join.sh | 2 +- tools/testing/selftests/vm/userfaultfd.c | 6 +- 210 files changed, 1840 insertions(+), 869 deletions(-)

2 years, 8 months

7
234
0 0

[PATCH v3] lib: Use PFN_PHYS() in devmem_is_allowed()

by Liang Wang

The physical address may exceed 32 bits on 32-bit systems with more than 32 bits of physcial address,use PFN_PHYS() in devmem_is_allowed(), or the physical address may overflow and be truncated. We found this bug when mapping a high addresses through devmem tool, when CONFIG_STRICT_DEVMEM is enabled on the ARM with ARM_LPAE and devmem is used to map a high address that is not in the iomem address range, an unexpected error indicating no permission is returned. This bug was initially introduced from v2.6.37, and the function was moved to lib when v5.11. Cc: Luis Chamberlain <mcgrof(a)kernel.org> Fixes: 087aaffcdf9c ("ARM: implement CONFIG_STRICT_DEVMEM by disabling access to RAM via /dev/mem") Fixes: 527701eda5f1 ("lib: Add a generic version of devmem_is_allowed()") Cc: stable(a)vger.kernel.org # v2.6.37 Signed-off-by: Liang Wang <wangliang101(a)huawei.com> --- v3: update changelog suggested by Luis Chamberlain <mcgrof(a)kernel.org> lib/devmem_is_allowed.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/devmem_is_allowed.c b/lib/devmem_is_allowed.c index c0d67c541849..60be9e24bd57 100644 --- a/lib/devmem_is_allowed.c +++ b/lib/devmem_is_allowed.c @@ -19,7 +19,7 @@ */ int devmem_is_allowed(unsigned long pfn) { - if (iomem_is_exclusive(pfn << PAGE_SHIFT)) + if (iomem_is_exclusive(PFN_PHYS(pfn))) return 0; if (!page_is_ram(pfn)) return 1; -- 2.32.0

2 years, 8 months

4
3
0 0

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror July 2021