December 2022 - Linux-stable-mirror

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.0.12 release. There are 125 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 08 Dec 2022 16:34:27 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.0.12-rc3… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.0.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.0.12-rc3 Linus Torvalds <torvalds(a)linux-foundation.org> proc: proc_skip_spaces() shouldn't think it is working on C strings Linus Torvalds <torvalds(a)linux-foundation.org> proc: avoid integer type confusion in get_proc_long Jann Horn <jannh(a)google.com> ipc/sem: Fix dangling sem_array access in semtimedop race Christophe Leroy <christophe.leroy(a)csgroup.eu> powerpc/bpf/32: Fix Oops on tail call tests Zhang Xiaoxu <zhangxiaoxu5(a)huawei.com> Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() Jan Dabros <jsd(a)semihalf.com> char: tpm: Protect tpm_pm_suspend with locks Conor Dooley <conor.dooley(a)microchip.com> Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend" Vishal Verma <vishal.l.verma(a)intel.com> ACPI: HMAT: Fix initiator registration for single-initiator systems Vishal Verma <vishal.l.verma(a)intel.com> ACPI: HMAT: remove unnecessary variable initialization Andrew Lunn <andrew(a)lunn.ch> i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set Wang Yufen <wangyufen(a)huawei.com> i2c: qcom-geni: fix error return code in geni_i2c_gpi_xfer Yuan Can <yuancan(a)huawei.com> i2c: npcm7xx: Fix error handling in npcm_i2c_init() Ricardo Ribalda <ribalda(a)chromium.org> i2c: Restore initial power state if probe fails SeongJae Park <sj(a)kernel.org> mm/damon/sysfs: fix wrong empty schemes assumption under online tuning in damon_sysfs_set_schemes() Yajun Deng <yajun.deng(a)linux.dev> mm/damon: introduce struct damos_access_pattern Ido Schimmel <idosch(a)nvidia.com> ipv4: Fix route deletion when nexthop info is not specified David Ahern <dsahern(a)kernel.org> ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference Xiongfeng Wang <wangxiongfeng2(a)huawei.com> iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() Xiongfeng Wang <wangxiongfeng2(a)huawei.com> iommu/vt-d: Fix PCI device refcount leak in has_external_pci() Caleb Sander <csander(a)purestorage.com> nvme: fix SRCU protection of nvme_ns_head list Guo Ren <guoren(a)kernel.org> riscv: kexec: Fixup irq controller broken in kexec crash path Jisheng Zhang <jszhang(a)kernel.org> riscv: fix race when vmap stack overflow Alexandre Ghiti <alexghiti(a)rivosinc.com> riscv: Sync efi page table's kernel mappings before switching Maxim Korotkov <korotkov.maxim.s(a)gmail.com> pinctrl: single: Fix potential division by zero Hui Tang <tanghui20(a)huawei.com> ASoC: tlv320adc3xxx: Fix build error for implicit function declaration Mark Brown <broonie(a)kernel.org> ASoC: ops: Fix bounds check for _sx controls Steven Rostedt (Google) <rostedt(a)goodmis.org> tracing: Free buffers when a used dynamic event is removed Steven Rostedt (Google) <rostedt(a)goodmis.org> tracing: Fix race where histograms can be called before the event Daniel Bristot de Oliveira <bristot(a)kernel.org> tracing/osnoise: Fix duration type Janusz Krzysztofik <janusz.krzysztofik(a)linux.intel.com> drm/i915: Never return 0 if not all requests retired Janusz Krzysztofik <janusz.krzysztofik(a)linux.intel.com> drm/i915: Fix negative value passed as remaining time Leo Liu <leo.liu(a)amd.com> drm/amdgpu: enable Vangogh VCN indirect sram mode Lee Jones <lee(a)kernel.org> drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame Lee Jones <lee(a)kernel.org> Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled Adrian Hunter <adrian.hunter(a)intel.com> mmc: sdhci: Fix voltage switch delay Wenchao Chen <wenchao.chen(a)unisoc.com> mmc: sdhci-sprd: Fix no reset data and command after voltage switch Sebastian Falbesoner <sebastian.falbesoner(a)gmail.com> mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check Christian Löhle <CLoehle(a)hyperstone.com> mmc: core: Fix ambiguous TRIM and DISCARD arg Gaosheng Cui <cuigaosheng1(a)huawei.com> mmc: mtk-sd: Fix missing clk_disable_unprepare in msdc_of_clock_parse() Ye Bin <yebin10(a)huawei.com> mmc: mmc_test: Fix removal of debugfs file Goh, Wei Sheng <wei.sheng.goh(a)intel.com> net: stmmac: Set MAC's flow control register to reflect current settings Gavin Shan <gshan(a)redhat.com> mm: migrate: fix THP's mapcount on isolation Linus Torvalds <torvalds(a)linux-foundation.org> v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> pinctrl: intel: Save and restore pins in "direct IRQ" mode Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com> x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 ZhangPeng <zhangpeng362(a)huawei.com> nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() Tiezhu Yang <yangtiezhu(a)loongson.cn> tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep" Steven Rostedt (Google) <rostedt(a)goodmis.org> error-injection: Add prompt for function error injection Ziyang Xuan <william.xuanziyang(a)huawei.com> can: can327: can327_feed_frame_to_netdev(): fix potential skb leak when netdev is down Takashi Sakamoto <o-takashi(a)sakamocchi.jp> ALSA: dice: fix regression for Lexicon I-ONIX FW810S Björn Töpel <bjorn(a)rivosinc.com> riscv: mm: Proper page permissions after initmem free Jisheng Zhang <jszhang(a)kernel.org> riscv: vdso: fix section overlapping under some conditions Yuan Can <yuancan(a)huawei.com> hwmon: (asus-ec-sensors) Add checks for devm_kcalloc Yang Yingliang <yangyingliang(a)huawei.com> hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() Phil Auld <pauld(a)redhat.com> hwmon: (coretemp) Check for null before removing sysfs attrs Marc Dionne <marc.dionne(a)auristor.com> afs: Fix server->active leak in afs_put_server Yoshihiro Shimoda <yoshihiro.shimoda.uh(a)renesas.com> net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed Zhengchao Shao <shaozhengchao(a)huawei.com> sctp: fix memory leak in sctp_stream_outq_migrate() Willem de Bruijn <willemb(a)google.com> packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE Chris Mi <cmi(a)nvidia.com> net/mlx5: Lag, Fix for loop when checking lag Shigeru Yoshida <syoshida(a)redhat.com> net: tun: Fix use-after-free in tun_detach() David Howells <dhowells(a)redhat.com> afs: Fix fileserver probe RTT handling Yang Yingliang <yangyingliang(a)huawei.com> net: mdiobus: fix unbalanced node reference count YueHaibing <yuehaibing(a)huawei.com> net: hsr: Fix potential use-after-free Xin Long <lucien.xin(a)gmail.com> tipc: re-fetch skb cb after tipc_msg_validate Paolo Abeni <pabeni(a)redhat.com> mptcp: fix sleep in atomic at close time Menglong Dong <imagedong(a)tencent.com> mptcp: don't orphan ssk in mptcp_close() Jerry Ray <jerry.ray(a)microchip.com> dsa: lan9303: Correct stat name M Chetan Kumar <m.chetan.kumar(a)linux.intel.com> net: wwan: iosm: fix incorrect skb length M Chetan Kumar <m.chetan.kumar(a)linux.intel.com> net: wwan: iosm: fix crash in peek throughput test M Chetan Kumar <m.chetan.kumar(a)linux.intel.com> net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type M Chetan Kumar <m.chetan.kumar(a)linux.intel.com> net: wwan: iosm: fix kernel test robot reported error Yuri Karpov <YKarpov(a)ispras.ru> net: ethernet: nixge: fix NULL dereference Wang Hai <wanghai38(a)huawei.com> net/9p: Fix a potential socket leak in p9_socket_open Yuan Can <yuancan(a)huawei.com> net: net_netdev: Fix error handling in ntb_netdev_init_module() Zhang Changzhong <zhangchangzhong(a)huawei.com> net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe() Yang Yingliang <yangyingliang(a)huawei.com> net: phy: fix null-ptr-deref while probe() failed Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: don't allow multi-BSSID in S1G Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: fix buffer overflow in elem comparison Izabela Bakollari <ibakolla(a)redhat.com> aquantia: Do not purge addresses when setting the number of rings Duoming Zhou <duoming(a)zju.edu.cn> qlcnic: fix sleep-in-atomic-context bugs caused by msleep Amir Goldstein <amir73il(a)gmail.com> vfs: fix copy_file_range() averts filesystem freeze protection Jiasheng Jiang <jiasheng(a)iscas.ac.cn> can: m_can: Add check for devm_clk_get Zhang Changzhong <zhangchangzhong(a)huawei.com> can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods Zhang Changzhong <zhangchangzhong(a)huawei.com> can: etas_es58x: es58x_init_netdev(): free netdev when register_candev() Zhang Changzhong <zhangchangzhong(a)huawei.com> can: cc770: cc770_isa_probe(): add missing free_cc770dev() Zhang Changzhong <zhangchangzhong(a)huawei.com> can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() Roi Dayan <roid(a)nvidia.com> net/mlx5e: Fix use-after-free when reverting termination table YueHaibing <yuehaibing(a)huawei.com> net/mlx5: Fix uninitialized variable bug in outlen_write() Chris Mi <cmi(a)nvidia.com> net/mlx5: E-switch, Fix duplicate lag creation Chris Mi <cmi(a)nvidia.com> net/mlx5: E-switch, Destroy legacy fdb table when needed YueHaibing <yuehaibing(a)huawei.com> net/mlx5: DR, Fix uninitialized var warning Wang Hai <wanghai38(a)huawei.com> e100: Fix possible use after free in e100_xmit_prepare Yuan Can <yuancan(a)huawei.com> iavf: Fix error handling in iavf_init_module() Yuan Can <yuancan(a)huawei.com> fm10k: Fix error handling in fm10k_init_module() Shang XiaoJing <shangxiaojing(a)huawei.com> i40e: Fix error handling in i40e_init_module() Shang XiaoJing <shangxiaojing(a)huawei.com> ixgbevf: Fix resource leak in ixgbevf_init_module() Shazad Hussain <quic_shazhuss(a)quicinc.com> clk: qcom: gcc-sc8280xp: add cxo as parent for three ufs ref clks Yang Yingliang <yangyingliang(a)huawei.com> of: property: decrement node refcount in of_fwnode_get_reference_args() Wei Yongjun <weiyongjun1(a)huawei.com> nvmem: rmem: Fix return value check in rmem_read() Xu Kuohai <xukuohai(a)huawei.com> bpf: Do not copy spin lock field from user in bpf_selem_alloc Joe Korty <joe.korty(a)concurrent-rt.com> clocksource/drivers/arm_arch_timer: Fix XGene-1 TVAL register math error Gaosheng Cui <cuigaosheng1(a)huawei.com> hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails Yang Yingliang <yangyingliang(a)huawei.com> hwmon: (i5500_temp) fix missing pci_disable_device() Ninad Malwade <nmalwade(a)nvidia.com> hwmon: (ina3221) Fix shunt sum critical calculation Derek Nguyen <derek.nguyen(a)collins.com> hwmon: (ltc2947) fix temperature scaling Hou Tao <houtao1(a)huawei.com> libbpf: Handle size overflow for ringbuf mmap Michael Grzeschik <m.grzeschik(a)pengutronix.de> ARM: at91: rm9200: fix usb device clock id Srikar Dronamraju <srikar(a)linux.vnet.ibm.com> scripts/faddr2line: Fix regression in name resolution on ppc64le Hou Tao <houtao1(a)huawei.com> bpf, perf: Use subprog name when reporting subprog ksymbol Jiri Olsa <jolsa(a)kernel.org> libbpf: Use correct return pointer in attach_raw_tp Paul Gazzillo <paul(a)pgazz.com> iio: light: rpr0521: add missing Kconfig dependencies Wei Yongjun <weiyongjun1(a)huawei.com> iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw Wei Yongjun <weiyongjun1(a)huawei.com> iio: health: afe4403: Fix oob read in afe4403_read_raw Stephen Boyd <swboyd(a)chromium.org> clk: qcom: gdsc: Remove direct runtime PM calls Johan Hovold <johan+linaro(a)kernel.org> clk: qcom: gdsc: add missing error handling David Virag <virag.david003(a)gmail.com> clk: samsung: exynos7885: Correct "div4" clock parents lyndonli <Lyndon.Li(a)amd.com> drm/amd/pm: update driver if header for smu_13_0_7 Kenneth Feng <kenneth.feng(a)amd.com> drm/amd/pm: update driver-if header for smu_v13_0_10 Yang Wang <KevinYang.Wang(a)amd.com> drm/amd/pm: add smu_v13_0_10 driver if version Christian König <christian.koenig(a)amd.com> drm/amdgpu: fix userptr HMM range handling v2 Christian König <christian.koenig(a)amd.com> drm/amdgpu: cleanup error handling in amdgpu_cs_parser_bos Christian König <christian.koenig(a)amd.com> drm/amdgpu: move setting the job resources ChenXiaoSong <chenxiaosong2(a)huawei.com> btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/at91rm9200.dtsi | 2 +- arch/powerpc/net/bpf_jit_comp32.c | 52 ++++----- arch/riscv/include/asm/asm.h | 1 + arch/riscv/include/asm/efi.h | 6 +- arch/riscv/include/asm/pgalloc.h | 11 +- arch/riscv/kernel/entry.S | 13 +++ arch/riscv/kernel/machine_kexec.c | 35 ++++++ arch/riscv/kernel/setup.c | 9 +- arch/riscv/kernel/traps.c | 18 ++++ arch/riscv/kernel/vdso/Makefile | 1 + arch/x86/include/asm/nospec-branch.h | 2 +- arch/x86/kernel/cpu/bugs.c | 21 ++-- arch/x86/kernel/process.c | 2 +- drivers/acpi/numa/hmat.c | 27 +++-- drivers/char/tpm/tpm-interface.c | 5 +- drivers/clk/at91/at91rm9200.c | 2 +- drivers/clk/qcom/gcc-sc8280xp.c | 6 ++ drivers/clk/qcom/gdsc.c | 70 +++--------- drivers/clk/qcom/gdsc.h | 2 - drivers/clk/samsung/clk-exynos7885.c | 4 +- drivers/clocksource/arm_arch_timer.c | 7 +- drivers/clocksource/timer-riscv.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 12 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 60 ++++------- drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_job.c | 17 +++ drivers/gpu/drm/amd/amdgpu/amdgpu_job.h | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 53 +++------- drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.h | 14 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.c | 3 + drivers/gpu/drm/amd/display/Kconfig | 7 ++ .../pm/swsmu/inc/pmfw_if/smu13_driver_if_v13_0_0.h | 111 +++++++++++++------ .../pm/swsmu/inc/pmfw_if/smu13_driver_if_v13_0_7.h | 117 ++++++++++++++------- drivers/gpu/drm/amd/pm/swsmu/inc/smu_v13_0.h | 5 +- drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c | 3 +- drivers/gpu/drm/i915/gt/intel_gt.c | 9 +- drivers/gpu/drm/i915/gt/intel_gt_requests.c | 2 +- drivers/hwmon/asus-ec-sensors.c | 2 + drivers/hwmon/coretemp.c | 9 +- drivers/hwmon/i5500_temp.c | 2 +- drivers/hwmon/ibmpex.c | 1 + drivers/hwmon/ina3221.c | 4 +- drivers/hwmon/ltc2947-core.c | 2 +- drivers/i2c/busses/i2c-imx.c | 6 +- drivers/i2c/busses/i2c-npcm7xx.c | 11 +- drivers/i2c/busses/i2c-qcom-geni.c | 1 - drivers/i2c/i2c-core-base.c | 9 +- drivers/iio/health/afe4403.c | 5 +- drivers/iio/health/afe4404.c | 12 ++- drivers/iio/light/Kconfig | 2 + drivers/input/touchscreen/raydium_i2c_ts.c | 4 +- drivers/iommu/intel/dmar.c | 1 + drivers/iommu/intel/iommu.c | 4 +- drivers/media/common/videobuf2/frame_vector.c | 68 +++--------- drivers/mmc/core/core.c | 9 +- drivers/mmc/core/mmc_test.c | 3 +- drivers/mmc/host/mtk-sd.c | 6 +- drivers/mmc/host/sdhci-esdhc-imx.c | 2 +- drivers/mmc/host/sdhci-sprd.c | 4 +- drivers/mmc/host/sdhci.c | 61 +++++++++-- drivers/mmc/host/sdhci.h | 2 + drivers/net/can/can327.c | 4 +- drivers/net/can/cc770/cc770_isa.c | 10 +- drivers/net/can/m_can/m_can.c | 2 +- drivers/net/can/m_can/m_can_pci.c | 9 +- drivers/net/can/sja1000/sja1000_isa.c | 10 +- drivers/net/can/usb/etas_es58x/es58x_core.c | 5 +- drivers/net/dsa/lan9303-core.c | 2 +- .../net/ethernet/aquantia/atlantic/aq_ethtool.c | 5 +- drivers/net/ethernet/aquantia/atlantic/aq_main.c | 4 +- drivers/net/ethernet/aquantia/atlantic/aq_main.h | 2 + drivers/net/ethernet/intel/e100.c | 5 +- drivers/net/ethernet/intel/fm10k/fm10k_main.c | 10 +- drivers/net/ethernet/intel/i40e/i40e_main.c | 11 +- drivers/net/ethernet/intel/iavf/iavf_main.c | 9 +- drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 10 +- drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 4 +- drivers/net/ethernet/mellanox/mlx5/core/eswitch.c | 3 + drivers/net/ethernet/mellanox/mlx5/core/eswitch.h | 8 ++ .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 7 ++ .../mellanox/mlx5/core/eswitch_offloads_termtbl.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c | 9 +- .../mellanox/mlx5/core/steering/dr_table.c | 5 +- drivers/net/ethernet/ni/nixge.c | 29 ++--- .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_hw.c | 4 +- drivers/net/ethernet/renesas/ravb_main.c | 1 + drivers/net/ethernet/stmicro/stmmac/dwmac4_core.c | 2 + drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 12 ++- drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2 +- drivers/net/mdio/fwnode_mdio.c | 2 +- drivers/net/ntb_netdev.c | 9 +- drivers/net/phy/phy_device.c | 2 + drivers/net/tun.c | 4 +- drivers/net/wwan/iosm/iosm_ipc_mux_codec.c | 26 ++--- drivers/net/wwan/iosm/iosm_ipc_protocol.h | 2 +- drivers/nvme/host/core.c | 2 +- drivers/nvme/host/multipath.c | 3 + drivers/nvmem/rmem.c | 4 +- drivers/of/property.c | 4 +- drivers/pinctrl/intel/pinctrl-intel.c | 27 ++++- drivers/pinctrl/pinctrl-single.c | 2 +- fs/afs/fs_probe.c | 4 +- fs/afs/server.c | 2 +- fs/btrfs/qgroup.c | 9 +- fs/ksmbd/vfs.c | 6 +- fs/nfsd/vfs.c | 4 +- fs/nilfs2/dat.c | 7 ++ fs/read_write.c | 19 +++- include/linux/damon.h | 37 ++++--- include/linux/fs.h | 8 ++ include/linux/mmc/mmc.h | 2 +- include/net/sctp/stream_sched.h | 2 + ipc/sem.c | 3 +- kernel/bpf/bpf_local_storage.c | 2 +- kernel/events/core.c | 2 +- kernel/sysctl.c | 30 +++--- kernel/trace/trace_dynevent.c | 2 + kernel/trace/trace_events.c | 11 +- kernel/trace/trace_events_hist.c | 3 + kernel/trace/trace_osnoise.c | 6 +- lib/Kconfig.debug | 9 +- mm/compaction.c | 22 ++-- mm/damon/core.c | 31 +++--- mm/damon/dbgfs.c | 27 +++-- mm/damon/lru_sort.c | 46 ++++---- mm/damon/reclaim.c | 23 ++-- mm/damon/sysfs.c | 63 +++++++++-- net/9p/trans_fd.c | 4 +- net/hsr/hsr_forward.c | 5 +- net/ipv4/fib_semantics.c | 10 +- net/mac80211/airtime.c | 3 + net/mptcp/protocol.c | 13 ++- net/mptcp/subflow.c | 6 +- net/packet/af_packet.c | 6 +- net/sctp/stream.c | 25 +++-- net/sctp/stream_sched.c | 5 + net/sctp/stream_sched_prio.c | 19 ++++ net/sctp/stream_sched_rr.c | 5 + net/tipc/crypto.c | 3 + net/wireless/scan.c | 10 +- scripts/faddr2line | 7 +- sound/firewire/dice/dice-stream.c | 12 ++- sound/soc/codecs/tlv320adc3xxx.c | 3 + sound/soc/soc-ops.c | 2 +- tools/lib/bpf/libbpf.c | 2 +- tools/lib/bpf/ringbuf.c | 12 ++- tools/testing/selftests/net/fib_nexthops.sh | 16 +++ tools/vm/slabinfo-gnuplot.sh | 4 +- 151 files changed, 1153 insertions(+), 629 deletions(-)

3 years

8
7
0 0

[PATCH v2 1/2] evm: Alloc evm_digest in evm_verify_hmac() if CONFIG_VMAP_STACK=y

by Roberto Sassu

From: Roberto Sassu <roberto.sassu(a)huawei.com> Commit ac4e97abce9b8 ("scatterlist: sg_set_buf() argument must be in linear mapping") checks that both the signature and the digest reside in the linear mapping area. However, more recently commit ba14a194a434c ("fork: Add generic vmalloced stack support"), made it possible to move the stack in the vmalloc area, which is not contiguous, and thus not suitable for sg_set_buf() which needs adjacent pages. Fix this by checking if CONFIG_VMAP_STACK is enabled. If yes, allocate an evm_digest structure, and use that instead of the in-stack counterpart. Cc: stable(a)vger.kernel.org # 4.9.x Fixes: ba14a194a434 ("fork: Add generic vmalloced stack support") Signed-off-by: Roberto Sassu <roberto.sassu(a)huawei.com> --- security/integrity/evm/evm_main.c | 26 +++++++++++++++++++++----- 1 file changed, 21 insertions(+), 5 deletions(-) diff --git a/security/integrity/evm/evm_main.c b/security/integrity/evm/evm_main.c index 23d484e05e6f..7f76d6103f2e 100644 --- a/security/integrity/evm/evm_main.c +++ b/security/integrity/evm/evm_main.c @@ -174,6 +174,7 @@ static enum integrity_status evm_verify_hmac(struct dentry *dentry, struct signature_v2_hdr *hdr; enum integrity_status evm_status = INTEGRITY_PASS; struct evm_digest digest; + struct evm_digest *digest_ptr = &digest; struct inode *inode; int rc, xattr_len, evm_immutable = 0; @@ -231,14 +232,26 @@ static enum integrity_status evm_verify_hmac(struct dentry *dentry, } hdr = (struct signature_v2_hdr *)xattr_data; - digest.hdr.algo = hdr->hash_algo; + + if (IS_ENABLED(CONFIG_VMAP_STACK)) { + digest_ptr = kmalloc(sizeof(*digest_ptr), GFP_NOFS); + if (!digest_ptr) { + rc = -ENOMEM; + break; + } + } + + digest_ptr->hdr.algo = hdr->hash_algo; + rc = evm_calc_hash(dentry, xattr_name, xattr_value, - xattr_value_len, xattr_data->type, &digest); + xattr_value_len, xattr_data->type, + digest_ptr); if (rc) break; rc = integrity_digsig_verify(INTEGRITY_KEYRING_EVM, (const char *)xattr_data, xattr_len, - digest.digest, digest.hdr.length); + digest_ptr->digest, + digest_ptr->hdr.length); if (!rc) { inode = d_backing_inode(dentry); @@ -268,8 +281,11 @@ static enum integrity_status evm_verify_hmac(struct dentry *dentry, else evm_status = INTEGRITY_FAIL; } - pr_debug("digest: (%d) [%*phN]\n", digest.hdr.length, digest.hdr.length, - digest.digest); + pr_debug("digest: (%d) [%*phN]\n", digest_ptr->hdr.length, + digest_ptr->hdr.length, digest_ptr->digest); + + if (digest_ptr && digest_ptr != &digest) + kfree(digest_ptr); out: if (iint) iint->evm_status = evm_status; -- 2.25.1

3 years

3
8
0 0

[PATCH v5] ufs: core: wlun suspend SSU/enter hibern8 fail recovery

by peter.wang＠mediatek.com

From: Peter Wang <peter.wang(a)mediatek.com> When SSU/enter hibern8 fail in wlun suspend flow, trigger error handler and return busy to break the suspend. If not, wlun runtime pm status become error and the consumer will stuck in runtime suspend status. Fixes: b294ff3e3449 ("scsi: ufs: core: Enable power management for wlun") Cc: stable(a)vger.kernel.org Signed-off-by: Peter Wang <peter.wang(a)mediatek.com> --- drivers/ufs/core/ufshcd.c | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) diff --git a/drivers/ufs/core/ufshcd.c b/drivers/ufs/core/ufshcd.c index b1f59a5fe632..c91d58d1486a 100644 --- a/drivers/ufs/core/ufshcd.c +++ b/drivers/ufs/core/ufshcd.c @@ -106,6 +106,13 @@ 16, 4, buf, __len, false); \ } while (0) +#define ufshcd_force_error_recovery(hba) do { \ + spin_lock_irq(hba->host->host_lock); \ + hba->force_reset = true; \ + ufshcd_schedule_eh_work(hba); \ + spin_unlock_irq(hba->host->host_lock); \ +} while (0) + int ufshcd_dump_regs(struct ufs_hba *hba, size_t offset, size_t len, const char *prefix) { @@ -9049,6 +9056,15 @@ static int __ufshcd_wl_suspend(struct ufs_hba *hba, enum ufs_pm_op pm_op) if (!hba->dev_info.b_rpm_dev_flush_capable) { ret = ufshcd_set_dev_pwr_mode(hba, req_dev_pwr_mode); + if (ret && pm_op != UFS_SHUTDOWN_PM) { + /* + * If return err in suspend flow, IO will hang. + * Trigger error handler and break suspend for + * error recovery. + */ + ufshcd_force_error_recovery(hba); + ret = -EBUSY; + } if (ret) goto enable_scaling; } @@ -9060,6 +9076,15 @@ static int __ufshcd_wl_suspend(struct ufs_hba *hba, enum ufs_pm_op pm_op) */ check_for_bkops = !ufshcd_is_ufs_dev_deepsleep(hba); ret = ufshcd_link_state_transition(hba, req_link_state, check_for_bkops); + if (ret && pm_op != UFS_SHUTDOWN_PM) { + /* + * If return err in suspend flow, IO will hang. + * Trigger error handler and break suspend for + * error recovery. + */ + ufshcd_force_error_recovery(hba); + ret = -EBUSY; + } if (ret) goto set_dev_active; -- 2.18.0

3 years

4
3
0 0

[PATCH] ext4: don't allow journal inode to have encrypt flag

by Eric Biggers

From: Eric Biggers <ebiggers(a)google.com> Mounting a filesystem whose journal inode has the encrypt flag causes a NULL dereference in fscrypt_limit_io_blocks() when the 'inlinecrypt' mount option is used. The problem is that when jbd2_journal_init_inode() calls bmap(), it eventually finds its way into ext4_iomap_begin(), which calls fscrypt_limit_io_blocks(). fscrypt_limit_io_blocks() requires that if the inode is encrypted, then its encryption key must already be set up. That's not the case here, since the journal inode is never "opened" like a normal file would be. Hence the crash. A reproducer is: mkfs.ext4 -F /dev/vdb debugfs -w /dev/vdb -R "set_inode_field <8> flags 0x80808" mount /dev/vdb /mnt -o inlinecrypt To fix this, make ext4 consider journal inodes with the encrypt flag to be invalid. (Note, maybe other flags should be rejected on the journal inode too. For now, this is just the minimal fix for the above issue.) I've marked this as fixing the commit that introduced the call to fscrypt_limit_io_blocks(), since that's what made an actual crash start being possible. But this fix could be applied to any version of ext4 that supports the encrypt feature. Reported-by: syzbot+ba9dac45bc76c490b7c3(a)syzkaller.appspotmail.com Fixes: 38ea50daa7a4 ("ext4: support direct I/O with fscrypt using blk-crypto") Cc: stable(a)vger.kernel.org Signed-off-by: Eric Biggers <ebiggers(a)google.com> --- fs/ext4/super.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fs/ext4/super.c b/fs/ext4/super.c index 7950904fbf04f..2274f730b87e5 100644 --- a/fs/ext4/super.c +++ b/fs/ext4/super.c @@ -5723,7 +5723,7 @@ static struct inode *ext4_get_journal_inode(struct super_block *sb, ext4_debug("Journal inode found at %p: %lld bytes\n", journal_inode, journal_inode->i_size); - if (!S_ISREG(journal_inode->i_mode)) { + if (!S_ISREG(journal_inode->i_mode) || IS_ENCRYPTED(journal_inode)) { ext4_msg(sb, KERN_ERR, "invalid journal inode"); iput(journal_inode); return NULL; base-commit: 8f71a2b3f435f29b787537d1abedaa7d8ebe6647 -- 2.38.1

3 years

2
3
0 0

[PATCH net 1/4] can: af_can: fix NULL pointer dereference in can_rcv_filter

by Marc Kleine-Budde

From: Oliver Hartkopp <socketcan(a)hartkopp.net> Analogue to commit 8aa59e355949 ("can: af_can: fix NULL pointer dereference in can_rx_register()") we need to check for a missing initialization of ml_priv in the receive path of CAN frames. Since commit 4e096a18867a ("net: introduce CAN specific pointer in the struct net_device") the check for dev->type to be ARPHRD_CAN is not sufficient anymore since bonding or tun netdevices claim to be CAN devices but do not initialize ml_priv accordingly. Fixes: 4e096a18867a ("net: introduce CAN specific pointer in the struct net_device") Reported-by: syzbot+2d7f58292cb5b29eb5ad(a)syzkaller.appspotmail.com Reported-by: Wei Chen <harperchen1110(a)gmail.com> Signed-off-by: Oliver Hartkopp <socketcan(a)hartkopp.net> Link: https://lore.kernel.org/all/20221206201259.3028-1-socketcan@hartkopp.net Cc: stable(a)vger.kernel.org Signed-off-by: Marc Kleine-Budde <mkl(a)pengutronix.de> --- net/can/af_can.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/net/can/af_can.c b/net/can/af_can.c index 27dcdcc0b808..c69168f11e44 100644 --- a/net/can/af_can.c +++ b/net/can/af_can.c @@ -677,7 +677,7 @@ static void can_receive(struct sk_buff *skb, struct net_device *dev) static int can_rcv(struct sk_buff *skb, struct net_device *dev, struct packet_type *pt, struct net_device *orig_dev) { - if (unlikely(dev->type != ARPHRD_CAN || (!can_is_can_skb(skb)))) { + if (unlikely(dev->type != ARPHRD_CAN || !can_get_ml_priv(dev) || !can_is_can_skb(skb))) { pr_warn_once("PF_CAN: dropped non conform CAN skbuff: dev type %d, len %d\n", dev->type, skb->len); @@ -692,7 +692,7 @@ static int can_rcv(struct sk_buff *skb, struct net_device *dev, static int canfd_rcv(struct sk_buff *skb, struct net_device *dev, struct packet_type *pt, struct net_device *orig_dev) { - if (unlikely(dev->type != ARPHRD_CAN || (!can_is_canfd_skb(skb)))) { + if (unlikely(dev->type != ARPHRD_CAN || !can_get_ml_priv(dev) || !can_is_canfd_skb(skb))) { pr_warn_once("PF_CAN: dropped non conform CAN FD skbuff: dev type %d, len %d\n", dev->type, skb->len); @@ -707,7 +707,7 @@ static int canfd_rcv(struct sk_buff *skb, struct net_device *dev, static int canxl_rcv(struct sk_buff *skb, struct net_device *dev, struct packet_type *pt, struct net_device *orig_dev) { - if (unlikely(dev->type != ARPHRD_CAN || (!can_is_canxl_skb(skb)))) { + if (unlikely(dev->type != ARPHRD_CAN || !can_get_ml_priv(dev) || !can_is_canxl_skb(skb))) { pr_warn_once("PF_CAN: dropped non conform CAN XL skbuff: dev type %d, len %d\n", dev->type, skb->len); base-commit: 1799c1b85e292fbfad99892bbea0beee925149e8 -- 2.35.1

3 years

2
1
0 0

[for-next][PATCH 2/2] kest.pl: Fix grub2 menu handling for rebooting

by Steven Rostedt

From: Steven Rostedt <rostedt(a)goodmis.org> grub2 has submenus where to use grub-reboot, it requires: grub-reboot X>Y where X is the main index and Y is the submenu. Thus if you have: menuentry 'Debian GNU/Linux' --class debian --class gnu-linux ... [...] } submenu 'Advanced options for Debian GNU/Linux' $menuentry_id_option ... menuentry 'Debian GNU/Linux, with Linux 6.0.0-4-amd64' --class debian --class gnu-linux ... [...] } menuentry 'Debian GNU/Linux, with Linux 6.0.0-4-amd64 (recovery mode)' --class debian --class gnu-linux ... [...] } menuentry 'Debian GNU/Linux, with Linux test' --class debian --class gnu-linux ... [...] } And wanted to boot to the "Linux test" kernel, you need to run: # grub-reboot 1>2 As 1 is the second top menu (the submenu) and 2 is the third of the sub menu entries. Have the grub.cfg parsing for grub2 handle such cases. Cc: stable(a)vger.kernel.org Fixes: a15ba91361d46 ("ktest: Add support for grub2") Reviewed-by: John 'Warthog9' Hawley (VMware) <warthog9(a)eaglescrag.net> Signed-off-by: Steven Rostedt <rostedt(a)goodmis.org> --- tools/testing/ktest/ktest.pl | 20 +++++++++++++++----- 1 file changed, 15 insertions(+), 5 deletions(-) diff --git a/tools/testing/ktest/ktest.pl b/tools/testing/ktest/ktest.pl index d391bf7abeee..1737c59e4ff6 100755 --- a/tools/testing/ktest/ktest.pl +++ b/tools/testing/ktest/ktest.pl @@ -1963,7 +1963,7 @@ sub run_scp_mod { sub _get_grub_index { - my ($command, $target, $skip) = @_; + my ($command, $target, $skip, $submenu) = @_; return if (defined($grub_number) && defined($last_grub_menu) && $last_grub_menu eq $grub_menu && defined($last_machine) && @@ -1980,11 +1980,16 @@ sub _get_grub_index { my $found = 0; + my $submenu_number = 0; + while (<IN>) { if (/$target/) { $grub_number++; $found = 1; last; + } elsif (defined($submenu) && /$submenu/) { + $submenu_number++; + $grub_number = -1; } elsif (/$skip/) { $grub_number++; } @@ -1993,6 +1998,9 @@ sub _get_grub_index { dodie "Could not find '$grub_menu' through $command on $machine" if (!$found); + if ($submenu_number > 0) { + $grub_number = "$submenu_number>$grub_number"; + } doprint "$grub_number\n"; $last_grub_menu = $grub_menu; $last_machine = $machine; @@ -2003,6 +2011,7 @@ sub get_grub_index { my $command; my $target; my $skip; + my $submenu; my $grub_menu_qt; if ($reboot_type !~ /^grub/) { @@ -2017,8 +2026,9 @@ sub get_grub_index { $skip = '^\s*title\s'; } elsif ($reboot_type eq "grub2") { $command = "cat $grub_file"; - $target = '^menuentry.*' . $grub_menu_qt; - $skip = '^menuentry\s|^submenu\s'; + $target = '^\s*menuentry.*' . $grub_menu_qt; + $skip = '^\s*menuentry'; + $submenu = '^\s*submenu\s'; } elsif ($reboot_type eq "grub2bls") { $command = $grub_bls_get; $target = '^title=.*' . $grub_menu_qt; @@ -2027,7 +2037,7 @@ sub get_grub_index { return; } - _get_grub_index($command, $target, $skip); + _get_grub_index($command, $target, $skip, $submenu); } sub wait_for_input { @@ -2090,7 +2100,7 @@ sub reboot_to { if ($reboot_type eq "grub") { run_ssh "'(echo \"savedefault --default=$grub_number --once\" | grub --batch)'"; } elsif (($reboot_type eq "grub2") or ($reboot_type eq "grub2bls")) { - run_ssh "$grub_reboot $grub_number"; + run_ssh "$grub_reboot \"'$grub_number'\""; } elsif ($reboot_type eq "syslinux") { run_ssh "$syslinux --once \\\"$syslinux_label\\\" $syslinux_path"; } elsif (defined $reboot_script) { -- 2.35.1

3 years

1
0
0 0

[for-next][PATCH 1/2] ktest.pl minconfig: Unset configs instead of just removing them

by Steven Rostedt

From: Steven Rostedt <rostedt(a)goodmis.org> After a full run of a make_min_config test, I noticed there were a lot of CONFIGs still enabled that really should not be. Looking at them, I noticed they were all defined as "default y". The issue is that the test simple removes the config and re-runs make oldconfig, which enables it again because it is set to default 'y'. Instead, explicitly disable the config with writing "# CONFIG_FOO is not set" to the file to keep it from being set again. With this change, one of my box's minconfigs went from 768 configs set, down to 521 configs set. Link: https://lkml.kernel.org/r/20221202115936.016fce23@gandalf.local.home Cc: stable(a)vger.kernel.org Fixes: 0a05c769a9de5 ("ktest: Added config_bisect test type") Reviewed-by: John 'Warthog9' Hawley (VMware) <warthog9(a)eaglescrag.net> Signed-off-by: Steven Rostedt (Google) <rostedt(a)goodmis.org> --- tools/testing/ktest/ktest.pl | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/tools/testing/ktest/ktest.pl b/tools/testing/ktest/ktest.pl index 09d1578f9d66..d391bf7abeee 100755 --- a/tools/testing/ktest/ktest.pl +++ b/tools/testing/ktest/ktest.pl @@ -3768,9 +3768,10 @@ sub test_this_config { # .config to make sure it is missing the config that # we had before my %configs = %min_configs; - delete $configs{$config}; + $configs{$config} = "# $config is not set"; make_new_config ((values %configs), (values %keep_configs)); make_oldconfig; + delete $configs{$config}; undef %configs; assign_configs \%configs, $output_config; -- 2.35.1

3 years

1
0
0 0

+ hfsplus-fix-bug-causing-custom-uid-and-gid-being-unable-to-be-assigned-with-mount.patch added to mm-nonmm-unstable branch

by Andrew Morton

The patch titled Subject: hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount has been added to the -mm mm-nonmm-unstable branch. Its filename is hfsplus-fix-bug-causing-custom-uid-and-gid-being-unable-to-be-assigned-with-mount.patch This patch will shortly appear at https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patche… This patch will later appear in the mm-nonmm-unstable branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm Before you just go and hit "reply", please: a) Consider who else should be cc'ed b) Prefer to cc a suitable mailing list as well c) Ideally: find the original patch on the mailing list and do a reply-to-all to that, adding suitable additional cc's *** Remember to use Documentation/process/submit-checklist.rst when testing your code *** The -mm tree is included into linux-next via the mm-everything branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm and is updated there every 2-3 working days ------------------------------------------------------ From: Aditya Garg <gargaditya08(a)live.com> Subject: hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount Date: Wed, 7 Dec 2022 03:05:40 +0000 Despite specifying UID and GID in mount command, the specified UID and GID were not being assigned. This patch fixes this issue. Link: https://lkml.kernel.org/r/C0264BF5-059C-45CF-B8DA-3A3BD2C803A2@live.com Signed-off-by: Aditya Garg <gargaditya08(a)live.com> Reviewed-by: Viacheslav Dubeyko <slava(a)dubeyko.com> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> --- --- a/fs/hfsplus/hfsplus_fs.h~hfsplus-fix-bug-causing-custom-uid-and-gid-being-unable-to-be-assigned-with-mount +++ a/fs/hfsplus/hfsplus_fs.h @@ -198,6 +198,8 @@ struct hfsplus_sb_info { #define HFSPLUS_SB_HFSX 3 #define HFSPLUS_SB_CASEFOLD 4 #define HFSPLUS_SB_NOBARRIER 5 +#define HFSPLUS_SB_UID 6 +#define HFSPLUS_SB_GID 7 static inline struct hfsplus_sb_info *HFSPLUS_SB(struct super_block *sb) { --- a/fs/hfsplus/inode.c~hfsplus-fix-bug-causing-custom-uid-and-gid-being-unable-to-be-assigned-with-mount +++ a/fs/hfsplus/inode.c @@ -192,11 +192,11 @@ static void hfsplus_get_perms(struct ino mode = be16_to_cpu(perms->mode); i_uid_write(inode, be32_to_cpu(perms->owner)); - if (!i_uid_read(inode) && !mode) + if ((test_bit(HFSPLUS_SB_UID, &sbi->flags)) || (!i_uid_read(inode) && !mode)) inode->i_uid = sbi->uid; i_gid_write(inode, be32_to_cpu(perms->group)); - if (!i_gid_read(inode) && !mode) + if ((test_bit(HFSPLUS_SB_GID, &sbi->flags)) || (!i_gid_read(inode) && !mode)) inode->i_gid = sbi->gid; if (dir) { --- a/fs/hfsplus/options.c~hfsplus-fix-bug-causing-custom-uid-and-gid-being-unable-to-be-assigned-with-mount +++ a/fs/hfsplus/options.c @@ -140,6 +140,8 @@ int hfsplus_parse_options(char *input, s if (!uid_valid(sbi->uid)) { pr_err("invalid uid specified\n"); return 0; + } else { + set_bit(HFSPLUS_SB_UID, &sbi->flags); } break; case opt_gid: @@ -151,6 +153,8 @@ int hfsplus_parse_options(char *input, s if (!gid_valid(sbi->gid)) { pr_err("invalid gid specified\n"); return 0; + } else { + set_bit(HFSPLUS_SB_GID, &sbi->flags); } break; case opt_part: _ Patches currently in -mm which might be from gargaditya08(a)live.com are hfsplus-fix-bug-causing-custom-uid-and-gid-being-unable-to-be-assigned-with-mount.patch

3 years

1
0
0 0

+ mm-gup-fix-gup_pud_range-for-dax.patch added to mm-hotfixes-unstable branch

by Andrew Morton

The patch titled Subject: mm/gup: fix gup_pud_range() for dax has been added to the -mm mm-hotfixes-unstable branch. Its filename is mm-gup-fix-gup_pud_range-for-dax.patch This patch will shortly appear at https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patche… This patch will later appear in the mm-hotfixes-unstable branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm Before you just go and hit "reply", please: a) Consider who else should be cc'ed b) Prefer to cc a suitable mailing list as well c) Ideally: find the original patch on the mailing list and do a reply-to-all to that, adding suitable additional cc's *** Remember to use Documentation/process/submit-checklist.rst when testing your code *** The -mm tree is included into linux-next via the mm-everything branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm and is updated there every 2-3 working days ------------------------------------------------------ From: Saurabh Sengar <ssengar(a)linux.microsoft.com> Subject: mm/gup: fix gup_pud_range() for dax Date: Tue, 6 Dec 2022 22:00:53 -0800 For dax pud, pud_huge() returns true on x86. So the function works as long as hugetlb is configured. However, dax doesn't depend on hugetlb. Commit 414fd080d125 ("mm/gup: fix gup_pmd_range() for dax") fixed devmap-backed huge PMDs, but missed devmap-backed huge PUDs. Fix this as well. This fixes the below kernel panic: general protection fault, probably for non-canonical address 0x69e7c000cc478: 0000 [#1] SMP < snip > Call Trace: <TASK> get_user_pages_fast+0x1f/0x40 iov_iter_get_pages+0xc6/0x3b0 ? mempool_alloc+0x5d/0x170 bio_iov_iter_get_pages+0x82/0x4e0 ? bvec_alloc+0x91/0xc0 ? bio_alloc_bioset+0x19a/0x2a0 blkdev_direct_IO+0x282/0x480 ? __io_complete_rw_common+0xc0/0xc0 ? filemap_range_has_page+0x82/0xc0 generic_file_direct_write+0x9d/0x1a0 ? inode_update_time+0x24/0x30 __generic_file_write_iter+0xbd/0x1e0 blkdev_write_iter+0xb4/0x150 ? io_import_iovec+0x8d/0x340 io_write+0xf9/0x300 io_issue_sqe+0x3c3/0x1d30 ? sysvec_reschedule_ipi+0x6c/0x80 __io_queue_sqe+0x33/0x240 ? fget+0x76/0xa0 io_submit_sqes+0xe6a/0x18d0 ? __fget_light+0xd1/0x100 __x64_sys_io_uring_enter+0x199/0x880 ? __context_tracking_enter+0x1f/0x70 ? irqentry_exit_to_user_mode+0x24/0x30 ? irqentry_exit+0x1d/0x30 ? __context_tracking_exit+0xe/0x70 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x61/0xcb RIP: 0033:0x7fc97c11a7be < snip > </TASK> ---[ end trace 48b2e0e67debcaeb ]--- RIP: 0010:internal_get_user_pages_fast+0x340/0x990 < snip > Kernel panic - not syncing: Fatal exception Kernel Offset: disabled Link: https://lkml.kernel.org/r/1670392853-28252-1-git-send-email-ssengar@linux.m… Fixes: 414fd080d125 ("mm/gup: fix gup_pmd_range() for dax") Signed-off-by: John Starks <jostarks(a)microsoft.com> Signed-off-by: Saurabh Sengar <ssengar(a)linux.microsoft.com> Cc: Jan Kara <jack(a)suse.cz> Cc: Yu Zhao <yuzhao(a)google.com> Cc: Jason Gunthorpe <jgg(a)nvidia.com> Cc: John Hubbard <jhubbard(a)nvidia.com> Cc: David Hildenbrand <david(a)redhat.com> Cc: Dan Williams <dan.j.williams(a)intel.com> Cc: Alistair Popple <apopple(a)nvidia.com> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> --- --- a/mm/gup.c~mm-gup-fix-gup_pud_range-for-dax +++ a/mm/gup.c @@ -2852,7 +2852,7 @@ static int gup_pud_range(p4d_t *p4dp, p4 next = pud_addr_end(addr, end); if (unlikely(!pud_present(pud))) return 0; - if (unlikely(pud_huge(pud))) { + if (unlikely(pud_huge(pud) || pud_devmap(pud))) { if (!gup_huge_pud(pud, pudp, addr, next, flags, pages, nr)) return 0; _ Patches currently in -mm which might be from ssengar(a)linux.microsoft.com are mm-gup-fix-gup_pud_range-for-dax.patch

3 years

1
0
0 0

[PATCH linux-5.4.y only] Revert "net: dsa: b53: Fix valid setting for MDB entries"

by Rafał Miłecki

From: Rafał Miłecki <rafal(a)milecki.pl> This reverts commit 1fae6eb0fc91d3ecb539e03f9e4dcd1c53ada553. Upstream commit was a fix for an overlook of setting "ent.is_valid" twice after 5d65b64a3d97 ("net: dsa: b53: Add support for MDB"). Since MDB support was not backported to stable kernels (it's not a bug fix) there is nothing to fix there. Backporting this commit resulted in "env.is_valid" not being set at all. Signed-off-by: Rafał Miłecki <rafal(a)milecki.pl> --- drivers/net/dsa/b53/b53_common.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/net/dsa/b53/b53_common.c b/drivers/net/dsa/b53/b53_common.c index 825d840cdb8c..1458416f4f91 100644 --- a/drivers/net/dsa/b53/b53_common.c +++ b/drivers/net/dsa/b53/b53_common.c @@ -1551,6 +1551,7 @@ static int b53_arl_op(struct b53_device *dev, int op, int port, memset(&ent, 0, sizeof(ent)); ent.port = port; + ent.is_valid = is_valid; ent.vid = vid; ent.is_static = true; memcpy(ent.mac, addr, ETH_ALEN); -- 2.34.1

3 years

2
1
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror December 2022