Select Git revision
Search by author
- Any Author
- authors
-
72162444 72162444 gaochangning
-
Aakash Dave aakash.dave
-
Aaron Kim akim
-
Aaron Kloc akloc
-
Aaron Lan aaron.lan
-
Aaron Nabil aaronna
-
Aaron Pohle aaron.pohle
-
Abbott Chung chung.abbott
-
Abdallah Omar abdallah_omar
-
Abdessamii Chalbi abdessamii.chalbi
-
Abdul Hussain Sirajudeen abdul.hussain
-
Abdullah Alghamdi a.alghamdi
-
Abdullah Elmarghany abdullah_elmarghany
-
Abel Fang abel_fang
-
Abel Vesa
abel.vesa
-
Abhijeet Badurkar abhijeet.badurkar
-
Abhijit Adsule adsule
-
Abhijit Murthy abhijit
-
Abhi Khanal akhanal
-
Abhilash Sahoo abhilashsahoo
- Dec 30, 2024
-
-
Greg Kroah-Hartman authored
Changes in 5.10.232 tcp: check space before adding MPTCP SYN options usb: host: max3421-hcd: Correctly abort a USB request. ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature usb: ehci-hcd: fix call balance of clocks handling routines usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer xfs: don't drop errno values when we fail to ficlone the entire range xfs: fix scrub tracepoints when inode-rooted btrees are involved bpf, sockmap: Fix update element with same virtio/vsock: Fix accept_queue memory leak exfat: fix potential deadlock on __exfat_get_dentry_set acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl batman-adv: Do not send uninitialized TT changes batman-adv: Remove uninitialized data in full table TT response batman-adv: Do not let TT changes list grows indefinitely tipc: fix NULL deref in cleanup_bearer() selftests: mlxsw: sharedbuffer: Remove h1 ingress test case selftests: mlxsw: sharedbuffer: Remove duplicate test cases net: lapb: increase LAPB_HEADER_LEN ACPI: resource: Fix memory resource type union access cxgb4: use port number to set mac addr qca_spi: Fix clock speed for multiple QCA7000 qca_spi: Make driver probing reliable net/sched: netem: account for backlog updates from child qdisc net: bonding, dummy, ifb, team: advertise NETIF_F_GSO_SOFTWARE bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired blk-iocost: Avoid using clamp() on inuse in __propagate_weights() bpf: sync_linked_regs() must preserve subreg_def tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() drm/i915: Fix memory leak by correcting cache object name in error handler Revert "clocksource/drivers:sp804: Make user selectable" Revert "clkdev: remove CONFIG_CLKDEV_LOOKUP" xen/netfront: fix crash when removing device x86: make get_cpu_vendor() accessible from Xen code objtool/x86: allow syscall instruction x86/static-call: provide a way to do very early static-call updates x86/xen: don't do PV iret hypercall through hypercall page x86/xen: add central hypercall functions x86/xen: use new hypercall functions instead of hypercall page x86/xen: remove hypercall page ALSA: usb-audio: Fix a DMA to stack memory bug x86/static-call: fix 32-bit build Linux 5.10.232 Change-Id: I1987994312c16f84c0fe9a028627d65995c2d0b2 Signed-off-by:Greg Kroah-Hartman <gregkh@google.com>
-
Greg Kroah-Hartman authored
In commit a32712d5 ("mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling"), new .h files are included which break the CRC generation of some symbols. Fix this up by only including the .h files for when a real build happens to preserve the ABI. Fixes: a32712d5 ("mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling") Change-Id: I1f0990d75a4813c4f2dcb01ead3396cfbc7c452c Signed-off-by:
-
Greg Kroah-Hartman authored
This reverts commit 837f37f0 which is commit 87e0a94e upstream. It breaks the Android kernel abi and can be brought back in the future in an abi-safe way if it is really needed. Bug: 161946584 Change-Id: Iede4972ab02e043091349777a5ac3109ec9e1fcb Signed-off-by:
-
Greg Kroah-Hartman authored
This reverts commit 76ff31c0 which is commit 482db2f1 upstream. It breaks the Android kernel abi and can be brought back in the future in an abi-safe way if it is really needed. Bug: 161946584 Change-Id: I88d9803ece3fbc9b01a2430d6f32d6fd26d2ea68 Signed-off-by:
-
Greg Kroah-Hartman authored
This reverts commit 7fd24ee9 which is commit 55e2f83a upstream. It breaks the Android kernel abi and can be brought back in the future in an abi-safe way if it is really needed. Bug: 161946584 Change-Id: I0a9d7b43aba691e57b9b33399b2c750987eeb74b Signed-off-by:
-
Greg Kroah-Hartman authored
This reverts commit e4decf4c which is commit 2cf567f4 upstream. It breaks the Android kernel abi and can be brought back in the future in an abi-safe way if it is really needed. Bug: 161946584 Change-Id: I9dabfeaaa26dc579c27013e41e5d45457bbc0f2c Signed-off-by:
-
Greg Kroah-Hartman authored
This reverts commit 3aecd6fd which is commit f18f9811 upstream. It breaks the Android kernel abi and can be brought back in the future in an abi-safe way if it is really needed. Bug: 161946584 Change-Id: I740eb7f23ef7862718ccbe4045c285b5a06a8517 Signed-off-by:
-
Greg Kroah-Hartman authored
This reverts commit 1c47272e which is commit 16aed0a6 upstream. It breaks the Android kernel abi and can be brought back in the future in an abi-safe way if it is really needed. Bug: 161946584 Change-Id: I10211929334cb62fe44f09e423f05d7f2927b78a Signed-off-by:
-
Greg Kroah-Hartman authored
This reverts commit b70ba15c which is commit 2f552fa2 upstream. It breaks the Android kernel abi and can be brought back in the future in an abi-safe way if it is really needed. Bug: 161946584 Change-Id: I0cfa327abf71fc13449e46ee2aba561a94975886 Signed-off-by:
-
Greg Kroah-Hartman authored
This reverts commit 7fd09abc which is commit 851bd21c upstream. It breaks the Android kernel abi and can be brought back in the future in an abi-safe way if it is really needed. Bug: 161946584 Change-Id: I2960216c8e1cb9472a3a560aa06a80eacba4ef74 Signed-off-by:
-
Greg Kroah-Hartman authored
Changes in 5.10.231 arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer media: i2c: tc358743: Fix crash in the probe error path when using polling media: ts2020: fix null-ptr-deref in ts2020_probe() media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() media: uvcvideo: Stop stream during unregister ovl: Filter invalid inodes with missing lookup function ftrace: Fix regression with module command in stack_trace_filter leds: lp55xx: Remove redundant test for invalid channel number clk: qcom: gcc-qcs404: fix initial rate of GPLL3 netlink: terminate outstanding dump on socket close net/mlx5: fs, lock FTE when checking if active net/mlx5e: kTLS, Fix incorrect page refcounting x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y ocfs2: uncache inode which has failed entering the group vdpa/mlx5: Fix PA offset with unaligned starting iotlb map KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint ocfs2: fix UBSAN warning in ocfs2_verify_volume() nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" drm/bridge: tc358768: Fix DSI command tx mmc: core: fix return value check in devm_mmc_alloc_host() media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point NFSD: Async COPY result needs to return a write verifier NFSD: Limit the number of concurrent async COPY operations NFSD: Initialize struct nfsd4_copy earlier NFSD: Never decrement pending_async_copies on error mm: revert "mm: shmem: fix data-race in shmem_getattr()" mm: avoid unsafe VMA hook invocation when error arises on mmap hook mm: unconditionally close VMAs on error mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling mm: resolve faulty mmap_region() error path behaviour ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet mac80211: fix user-power when emulating chanctx selftests/watchdog-test: Fix system accidentally reset after watchdog-test ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB net: usb: qmi_wwan: add Quectel RG650V soc: qcom: Add check devm_kasprintf() returned value regulator: rk808: Add apply_bit for BUCK3 on RK809 can: j1939: fix error in J1939 documentation. ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() proc/softirqs: replace seq_printf with seq_put_decimal_ull_width ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry ipmr: Fix access to mfc_cache_list without lock held rcu-tasks: Idle tasks on offline CPUs are in quiescent states cifs: Fix buffer overflow when parsing NFS reparse points nvme: fix metadata handling in nvme-passthrough x86/barrier: Do not serialize MSR accesses on AMD kselftest/arm64: mte: fix printf type warnings about longs x86/xen/pvh: Annotate indirect branch as safe mips: asm: fix warning when disabling MIPS_FP_SUPPORT initramfs: avoid filename buffer overrun nvme-pci: fix freeing of the HMB descriptor table m68k: mvme147: Fix SCSI controller IRQ numbers m68k: mvme16x: Add and use "mvme16x.h" m68k: mvme147: Reinstate early console arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() s390/syscalls: Avoid creation of arch/arch/ directory hfsplus: don't query the device logical block size multiple times crypto: caam - Fix the pointer passed to caam_qi_shutdown() firmware: google: Unregister driver_info on failure EDAC/bluefield: Fix potential integer overflow EDAC/fsl_ddr: Fix bad bit shift operations crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY crypto: cavium - Fix the if condition to exit loop after timeout crypto: caam - add error check to caam_rsa_set_priv_key_form crypto: bcm - add error check in the ahash_hmac_init function crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() time: Fix references to _msecs_to_jiffies() handling of values kcsan, seqlock: Fix incorrect assumption in read_seqbegin() clkdev: remove CONFIG_CLKDEV_LOOKUP clocksource/drivers:sp804: Make user selectable spi: spi-fsl-lpspi: downgrade log level for pio mode spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq() soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() mmc: mmc_spi: drop buggy snprintf() tpm: fix signed/unsigned bug when checking event logs arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4 arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline" cgroup/bpf: only cgroup v2 can be attached by bpf programs pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle ARM: dts: cubieboard4: Fix DCDC5 regulator constraints pmdomain: ti-sci: Add missing of_node_put() for args.np regmap: irq: Set lockdep class for hierarchical IRQ domains selftests/resctrl: Protect against array overrun during iMC config parsing firmware: arm_scpi: Check the DVFS OPP count returned by the firmware media: atomisp: remove #ifdef HAS_NO_HMEM media: atomisp: Add check for rgby_data memory allocation failure drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() drm/omap: Fix locking in omap_gem_new_dmabuf() wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() drm/v3d: Address race-condition in MMU flush wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 dt-bindings: vendor-prefixes: Add NeoFidelity, Inc ASoC: fsl_micfil: Drop unnecessary register read ASoC: fsl_micfil: do not define SHIFT/MASK for single bits ASoC: fsl_micfil: use GENMASK to define register bit fields ASoC: fsl_micfil: fix regmap_write_bits usage ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode bpf: Fix the xdp_adjust_tail sample prog issue xfrm: rename xfrm_state_offload struct to allow reuse xfrm: store and rely on direction to construct offload flags netdevsim: rely on XFRM state direction instead of flags netdevsim: copy addresses for both in and out paths drm/bridge: tc358767: Fix link properties discovery selftests/bpf: Fix msg_verify_data in test_sockmap selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() drm/fsl-dcu: Convert to Linux IRQ interfaces drm: fsl-dcu: enable PIXCLK on LS1021A octeontx2-af: Mbox changes for 98xx octeontx2-pf: Calculate LBK link instead of hardcoding octeontx2-af: forward error correction configuration octeontx2-af: Add new CGX_CMD to get PHY FEC statistics octeontx2-pf: ethtool fec mode support octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c drm/panfrost: Remove unused id_mask from struct panfrost_model drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() drm/etnaviv: rework linear window offset calculation drm/etnaviv: Request pages from DMA32 zone on addressing_limited drm/etnaviv: dump: fix sparse warnings drm/etnaviv: fix power register offset on GC300 drm/etnaviv: hold GPU lock across perfmon sampling wifi: wfx: Fix error handling in wfx_core_init() drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() netlink: typographical error in nlmsg_type constants definition selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap selftests/bpf: Fix SENDPAGE data logic in test_sockmap selftests, bpf: Add one test for sockmap with strparser selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap bpf, sockmap: Several fixes to bpf_msg_push_data bpf, sockmap: Several fixes to bpf_msg_pop_data bpf, sockmap: Fix sk_msg_reset_curr selftests: net: really check for bg process completion drm/amdkfd: Fix wrong usage of INIT_WORK() net: rfkill: gpio: Add check for clk_enable() ALSA: usx2y: Fix spaces ALSA: usx2y: Coding style fixes ALSA: usx2y: Cleanup probe and disconnect callbacks ALSA: usx2y: Use snd_card_free_when_closed() at disconnection ALSA: us122l: Use snd_card_free_when_closed() at disconnection ALSA: caiaq: Use snd_card_free_when_closed() at disconnection ALSA: 6fire: Release resources at card release driver core: Introduce device_find_any_child() helper Bluetooth: fix use-after-free in device_for_each_child() netpoll: Use rcu_access_pointer() in netpoll_poll_lock wireguard: selftests: load nf_conntrack if not present trace/trace_event_perf: remove duplicate samples on the first tracepoint event powerpc/vdso: Flag VDSO64 entry points as functions mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race mfd: da9052-spi: Change read-mask to write-mask mfd: intel_soc_pmic_bxtwc: Use dev_err_probe() mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices cpufreq: loongson2: Unregister platform_driver on failure mtd: rawnand: atmel: Fix possible memory leak powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey mfd: rt5033: Fix missing regmap_del_irq_chip() scsi: bfa: Fix use-after-free in bfad_im_module_exit() scsi: fusion: Remove unused variable 'rc' scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() ocfs2: fix uninitialized value in ocfs2_file_read_iter() powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static powerpc/kexec: Fix return of uninitialized variable fbdev/sh7760fb: Alloc DMA memory from hardware device fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() dt-bindings: clock: adi,axi-clkgen: convert old binding to yaml format dt-bindings: clock: axi-clkgen: include AXI clk clk: axi-clkgen: use devm_platform_ioremap_resource() short-hand clk: clk-axi-clkgen: make sure to enable the AXI bus clock perf cs-etm: Don't flush when packet_queue fills up perf probe: Fix libdw memory leak perf probe: Correct demangled symbols in C++ program PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads PCI: cpqphp: Fix PCIBIOS_* return value confusion f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block f2fs: avoid using native allocate_segment_by_default() f2fs: remove struct segment_allocation default_salloc_ops f2fs: open code allocate_segment_by_default f2fs: remove the unused flush argument to change_curseg f2fs: check curseg->inited before write_sum_page in change_curseg perf trace: avoid garbage when not printing a trace event's arguments m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x m68k: coldfire/device.c: only build FEC when HW macros are defined perf trace: Do not lose last events in a race perf trace: Avoid garbage when not printing a syscall's arguments rpmsg: glink: Add TX_DATA_CONT command while sending rpmsg: glink: Send READ_NOTIFY command in FIFO full case rpmsg: glink: Fix GLINK command prefix rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region NFSD: Prevent NULL dereference in nfsd4_process_cb_update() NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() NFSD: Fix nfsd4_shutdown_copy() vdpa/mlx5: Fix suboptimal range on iotlb iteration vfio/pci: Properly hide first-in-list PCIe extended capability fs_parser: update mount_api doc to match function signature power: supply: core: Remove might_sleep() from power_supply_put() power: supply: bq27xxx: Support CHARGE_NOW for bq27z561/bq28z610/bq34z100 power: supply: bq27xxx: Fix registers of bq27426 net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration marvell: pxa168_eth: fix call balance of pep->clk handling routines net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken spi: atmel-quadspi: Fix register name in verbose logging function net: introduce a netdev feature for UDP GRO forwarding net: hsr: fix hsr_init_sk() vs network/transport headers. bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down ipmr: convert /proc handlers to rcu_read_lock() ipmr: fix tables suspicious RCU usage iio: light: al3010: Fix an error handling path in al3010_probe() usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() usb: yurex: make waiting on yurex_write interruptible USB: chaoskey: fail open after removal USB: chaoskey: Fix possible deadlock chaoskey_list_lock misc: apds990x: Fix missing pm_runtime_disable() staging: greybus: uart: clean up TIOCGSERIAL ALSA: hda/realtek - Add type for ALC287 ALSA: hda/realtek: Update ALC256 depop procedure apparmor: fix 'Do simple duplicate message elimination' xen: Fix the issue of resource not being properly released in xenbus_dev_probe() usb: ehci-spear: fix call balance of sehci clk handling routines soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices ext4: supress data-race warnings in ext4_free_inodes_{count,set}() ext4: fix FS_IOC_GETFSMAP handling jfs: xattr: check invalid xattr size more strictly ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() perf/x86/intel/pt: Fix buffer full but size is 0 case crypto: x86/aegis128 - access 32-bit arguments as 32-bit KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status PCI: Fix use-after-free of slot->bus on hot remove fsnotify: fix sending inotify event with unexpected filename comedi: Flush partial mappings in error case apparmor: test: Fix memory leak for aa_unpack_strdup() tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass() exfat: fix uninit-value in __exfat_get_dentry_set Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() driver core: bus: Fix double free in driver API bus_register() Revert "usb: gadget: composite: fix OS descriptors w_value logic" serial: sh-sci: Clean sci_ports[0] after at earlycon exit Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit" netfilter: ipset: add missing range check in bitmap_ip_uadt spi: Fix acpi deferred irq probe platform/chrome: cros_ec_typec: fix missing fwnode reference decrement ubi: wl: Put source PEB into correct list if trying locking LEB failed um: ubd: Do not use drvdata in release um: net: Do not use drvdata in release serial: 8250: omap: Move pm_runtime_get_sync um: vector: Do not use drvdata in release sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled block: fix ordering between checking BLK_MQ_S_STOPPED request adding HID: wacom: Interpret tilt data from Intuos Pro BT as signed values media: wl128x: Fix atomicity violation in fmc_send_cmd() media: v4l2-core: v4l2-dv-timings: check cvt/gtf result ALSA: hda/realtek: Update ALC225 depop procedure ALSA: hda/realtek: Set PCBeep to default value for ALC274 ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max ALSA: hda/realtek: Apply quirk for Medion E15433 usb: dwc3: gadget: Fix checking for number of TRBs left usb: dwc3: gadget: Fix looping of queued SG entries lib: string_helpers: silence snprintf() output truncation warning NFSD: Prevent a potential integer overflow SUNRPC: make sure cache entry active before cache_show rpmsg: glink: Propagate TX failures in intentless mode as well um: Fix potential integer overflow during physmem setup um: Fix the return value of elf_core_copy_task_fpregs um: Always dump trace for specified task in show_stack NFSv4.0: Fix a use-after-free problem in the asynchronous open() rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() rtc: abx80x: Fix WDT bit position of the status register rtc: check if __rtc_read_time was successful in rtc_timer_do_work() ubifs: Correct the total block count by deducting journal reservation ubi: fastmap: Fix duplicate slab cache names while attaching ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit jffs2: fix use of uninitialized variable block: return unsigned int from bdev_io_min 9p/xen: fix init sequence 9p/xen: fix release of IRQ rtc: ab-eoz9: don't fail temperature reads on undervoltage notification modpost: remove incorrect code in do_eisa_entry() nfs: ignore SB_RDONLY when mounting nfs SUNRPC: correct error code comment in xs_tcp_setup_socket() SUNRPC: Convert rpc_client refcount to use refcount_t sunrpc: remove unnecessary test in rpc_task_set_client() SUNRPC: Replace internal use of SOCKWQ_ASYNC_NOSPACE sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport sh: intc: Fix use-after-free bug in register_intc_controller() ASoC: fsl_micfil: fix the naming style for mask definition octeontx2-pf: Fix out-of-bounds read in otx2_get_fecparam() quota: flush quota_release_work upon quota writeback btrfs: ref-verify: fix use-after-free after invalid ref action ad7780: fix division by zero in ad7780_write_raw() util_macros.h: fix/rework find_closest() macros scsi: ufs: exynos: Fix hibern8 notify callbacks i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() PCI: keystone: Add link up check to ks_pcie_other_map_bus() dm thin: Add missing destroy_work_on_stack() nfsd: make sure exp active before svc_export_show nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() drm/etnaviv: flush shader L1 cache after user commandstream iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() netfilter: x_tables: fix LED ID check in led_tg_check() ptp: Add error handling for adjfine callback in ptp_clock_adjtime net/sched: tbf: correct backlog statistic for GSO packets net: hsr: avoid potential out-of-bound access in fill_frame_info() can: j1939: j1939_session_new(): fix skb reference counting net/ipv6: release expired exception dst cached in socket dccp: Fix memory leak in dccp_feat_change_recv tipc: Fix use-after-free of kernel socket in cleanup_bearer(). net/qed: allow old cards not supporting "num_images" to work igb: Fix potential invalid memory access in igb_init_module() net: sched: fix erspan_opt settings in cls_flower netfilter: ipset: Hold module reference while requesting a module netfilter: nft_set_hash: skip duplicated elements pending gc run ethtool: Fix wrong mod state in case of verbose and no_mask bitset geneve: do not assume mac header is set in geneve_xmit_skb() gpio: grgpio: use a helper variable to store the address of ofdev->dev gpio: grgpio: Add NULL check in grgpio_probe dt_bindings: rs485: Correct delay values dt-bindings: serial: rs485: Fix rs485-rts-delay property i3c: fix incorrect address slot lookup on 64-bit i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS i3c: master: Extend address status bit to 4 and add I3C_ADDR_SLOT_EXT_DESIRED i3c: master: Fix dynamic address leak when 'assigned-address' is present drm/sti: Add __iomem for mixer_dbg_mxn's parameter tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg spi: mpc52xx: Add cancel_work_sync before module remove ocfs2: free inode when ocfs2_get_init_inode() fails bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie bpf: Fix exact match conditions in trie_get_next_key() HID: wacom: fix when get product name maybe null pointer watchdog: rti: of: honor timeout-sec property tracing: Fix cmp_entries_dup() to respect sort() comparison rules arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL ALSA: usb-audio: add mixer mapping for Corsair HS80 ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) scsi: qla2xxx: Fix NVMe and NPIV connect issue scsi: qla2xxx: Supported speed displayed incorrectly for VPorts scsi: qla2xxx: Fix use after free on unload scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again bpf: fix OOB devmap writes when deleting elements dma-buf: fix dma_fence_array_signaled v4 regmap: detach regmap from dev on regmap_exit mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet mmc: core: Further prevent card detect during shutdown ocfs2: update seq_file index in ocfs2_dlm_seq_next iommu/arm-smmu: Defer probe of clients after smmu device bound s390/cpum_sf: Handle CPU hotplug remove during sampling btrfs: avoid unnecessary device path update for the same device kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all() kcsan: Turn report_filterlist_lock into a raw_spinlock media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 drm/vc4: hvs: Set AXI panic modes for the HVS drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model drm/mcde: Enable module autoloading drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() r8169: don't apply UDP padding quirk on RTL8126A samples/bpf: Fix a resource leak net: fec_mpc52xx_phy: Use %pa to format resource_size_t net: ethernet: fs_enet: Use %pa to format resource_size_t net/sched: cbs: Fix integer overflow in cbs_set_port_rate() af_packet: avoid erroring out after sock_init_data() in packet_create() Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() net: af_can: do not leave a dangling sk pointer in can_create() net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() net: inet: do not leave a dangling sk pointer in inet_create() net: inet6: do not leave a dangling sk pointer in inet6_create() wifi: ath5k: add PCI ID for SX76X wifi: ath5k: add PCI ID for Arcadyan devices drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr dma-debug: fix a possible deadlock on radix_lock jfs: array-index-out-of-bounds fix in dtReadFirst jfs: fix shift-out-of-bounds in dbSplit jfs: fix array-index-out-of-bounds in jfs_readdir jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov drm/amdgpu: set the right AMDGPU sg segment limitation wifi: ipw2x00: libipw_rx_any(): fix bad alignment wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables ASoC: hdmi-codec: reorder channel allocation list rocker: fix link status detection in rocker_carrier_init() net/neighbor: clear error in case strict check is not set netpoll: Use rcu_access_pointer() in __netpoll_setup pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU tracing: Use atomic64_inc_return() in trace_clock_counter() scsi: hisi_sas: Add cond_resched() for no forced preemption model leds: class: Protect brightness_show() with led_cdev->led_access mutex scsi: st: Don't modify unknown block number in MTIOCGET scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset pinctrl: qcom-pmic-gpio: add support for PM8937 nvdimm: rectify the illogical code within nd_dax_probe() f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. PCI: Add 'reset_subordinate' to reset hierarchy below bridge PCI: Add ACS quirk for Wangxun FF5xxx NICs i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock usb: chipidea: udc: handle USB Error Interrupt if IOC not set MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a powerpc/prom_init: Fixup missing powermac #size-cells misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle sched/core: Remove the unnecessary need_resched() check in nohz_csd_func() sched/fair: Remove update of blocked load from newidle_balance sched/fair: Remove unused parameter of update_nohz_stats sched/fair: Merge for each idle cpu loop of ILB sched/fair: Trigger the update of blocked load on newly idle cpu sched/fair: Add NOHZ balancer flag for nohz.next_balance updates sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy sched/core: Prevent wakeup of ksoftirqd during idle load balance btrfs: fix missing snapshot drew unlock when root is dead during swap activation Revert "unicode: Don't special case ignorable code points" KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE jffs2: Prevent rtime decompress memory corruption jffs2: Fix rtime decompressor xhci: dbc: Fix STALL transfer event handling drm/amd/display: Check BIOS images before it is used ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume" modpost: Add .irqentry.text to OTHER_SECTIONS Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()" PCI: rockchip-ep: Fix address translation unit programming scsi: sd: Fix sd_do_mode_sense() buffer length handling scsi: core: Fix scsi_mode_select() buffer length handling ALSA: usb-audio: Fix out of bounds reads when finding clock sources media: uvcvideo: Require entities to have a non-zero unique ID octeontx2: Fix condition. octeontx2-pf: Fix otx2_get_fecparam() Linux 5.10.231 Change-Id: I9f898f01cfaab475581c068959ac597789122af0 Signed-off-by:
-
- Dec 19, 2024
-
-
Greg Kroah-Hartman authored
Link: https://lore.kernel.org/r/20241217170520.459491270@linuxfoundation.org Tested-by:
Florian Fainelli <florian.fainelli@broadcom.com> Tested-by:
Pavel Machek (CIP) <pavel@denx.de> Tested-by:
Dominique Martinet <dominique.martinet@atmark-techno.com> Tested-by:
Mark Brown <broonie@kernel.org> Tested-by:
Jon Hunter <jonathanh@nvidia.com> Signed-off-by:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
-
Juergen Gross authored
commit 349f0086 upstream. In 32-bit x86 builds CONFIG_STATIC_CALL_INLINE isn't set, leading to static_call_initialized not being available. Define it as "0" in that case. Reported-by:
Stephen Rothwell <sfr@canb.auug.org.au> Fixes: 0ef8047b ("x86/static-call: provide a way to do very early static-call updates") Signed-off-by:
Juergen Gross <jgross@suse.com> Acked-by:
Peter Zijlstra (Intel) <peterz@infradead.org> Signed-off-by:
Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by:
-
Dan Carpenter authored
commit f7d306b4 upstream. The usb_get_descriptor() function does DMA so we're not allowed to use a stack buffer for that. Doing DMA to the stack is not portable all architectures. Move the "new_device_descriptor" from being stored on the stack and allocate it with kmalloc() instead. Fixes: b909df18 ("ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices") Cc: stable@kernel.org Signed-off-by:
Dan Carpenter <dan.carpenter@linaro.org> Link: https://patch.msgid.link/60e3aa09-039d-46d2-934c-6f123026c2eb@stanley.mountain Signed-off-by:
Takashi Iwai <tiwai@suse.de> Signed-off-by:
Benoît Sevens <bsevens@google.com> Signed-off-by:
-
Juergen Gross authored
commit 7fa0da53 upstream. The hypercall page is no longer needed. It can be removed, as from the Xen perspective it is optional. But, from Linux's perspective, it removes naked RET instructions that escape the speculative protections that Call Depth Tracking and/or Untrain Ret are trying to achieve. This is part of XSA-466 / CVE-2024-53241. Reported-by:
Andrew Cooper <andrew.cooper3@citrix.com> Signed-off-by:
Jan Beulich <jbeulich@suse.com> Signed-off-by:
-
Juergen Gross authored
commit b1c2cb86 upstream. Call the Xen hypervisor via the new xen_hypercall_func static-call instead of the hypercall page. This is part of XSA-466 / CVE-2024-53241. Reported-by:
Josh Poimboeuf <jpoimboe@redhat.com> Signed-off-by:
-
Juergen Gross authored
commit b4845bb6 upstream. Add generic hypercall functions usable for all normal (i.e. not iret) hypercalls. Depending on the guest type and the processor vendor different functions need to be used due to the to be used instruction for entering the hypervisor: - PV guests need to use syscall - HVM/PVH guests on Intel need to use vmcall - HVM/PVH guests on AMD and Hygon need to use vmmcall As PVH guests need to issue hypercalls very early during boot, there is a 4th hypercall function needed for HVM/PVH which can be used on Intel and AMD processors. It will check the vendor type and then set the Intel or AMD specific function to use via static_call(). This is part of XSA-466 / CVE-2024-53241. Reported-by:
-
Juergen Gross authored
commit a2796dff upstream. Instead of jumping to the Xen hypercall page for doing the iret hypercall, directly code the required sequence in xen-asm.S. This is done in preparation of no longer using hypercall page at all, as it has shown to cause problems with speculation mitigations. This is part of XSA-466 / CVE-2024-53241. Reported-by:
-
Juergen Gross authored
commit 0ef8047b upstream. Add static_call_update_early() for updating static-call targets in very early boot. This will be needed for support of Xen guest type specific hypercall functions. This is part of XSA-466 / CVE-2024-53241. Reported-by:
-
Juergen Gross authored
commit dda014ba upstream. The syscall instruction is used in Xen PV mode for doing hypercalls. Allow syscall to be used in the kernel in case it is tagged with an unwind hint for objtool. This is part of XSA-466 / CVE-2024-53241. Reported-by:
-
Juergen Gross authored
commit efbcd61d upstream. In order to be able to differentiate between AMD and Intel based systems for very early hypercalls without having to rely on the Xen hypercall page, make get_cpu_vendor() non-static. Refactor early_cpu_init() for the same reason by splitting out the loop initializing cpu_devs() into an externally callable function. This is part of XSA-466 / CVE-2024-53241. Reported-by:
-
Juergen Gross authored
commit f9244fb5 upstream. When removing a netfront device directly after a suspend/resume cycle it might happen that the queues have not been setup again, causing a crash during the attempt to stop the queues another time. Fix that by checking the queues are existing before trying to stop them. This is XSA-465 / CVE-2024-53240. Reported-by:
Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Fixes: d50b7914 ("xen-netfront: Fix NULL sring after live migration") Signed-off-by:
-
Greg Kroah-Hartman authored
This reverts commit d08932bb which is commit 2f4574dd upstream. It is reported to cause build errors in m68k, so revert it. Link: https://lore.kernel.org/r/68b0559e-47e8-4756-b3de-67d59242756e@roeck-us.net Reported-by:
Guenter Roeck <linux@roeck-us.net> Cc: Arnd Bergmann <arnd@arndb.de> Cc: Ross Burton <ross.burton@arm.com> Cc: Sudeep Holla <sudeep.holla@arm.com> Cc: Mark Rutland <mark.rutland@arm.com> Cc: Mark Brown <broonie@kernel.org> Cc: Daniel Lezcano <daniel.lezcano@linaro.org> Cc: Sasha Levin <sashal@kernel.org> Signed-off-by:
-
Greg Kroah-Hartman authored
This reverts commit ef1db3d1 which is commit 0309f714 upstream. It is reported to cause build errors in m68k, so revert it. Link: https://lore.kernel.org/r/68b0559e-47e8-4756-b3de-67d59242756e@roeck-us.net Reported-by:
-
Jiasheng Jiang authored
commit 2828e580 upstream. Replace "slab_priorities" with "slab_dependencies" in the error handler to avoid memory leak. Fixes: 32eb6bcf ("drm/i915: Make request allocation caches global") Cc: <stable@vger.kernel.org> # v5.2+ Signed-off-by:
Jiasheng Jiang <jiashengjiangcool@outlook.com> Reviewed-by:
Nirmoy Das <nirmoy.das@intel.com> Reviewed-by:
Andi Shyti <andi.shyti@linux.intel.com> Signed-off-by:
Tvrtko Ursulin <tursulin@ursulin.net> Signed-off-by:
-
Nikolay Kuratov authored
commit b022f0c7 ("tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols") avoids checking number_of_same_symbols() for module symbol in __trace_kprobe_create(), but create_local_trace_kprobe() should avoid this check too. Doing this check leads to ENOENT for module_name:symbol_name constructions passed over perf_event_open. No bug in newer kernels as it was fixed more generally by commit 9d861603 ("tracing/kprobes: Add symbol counting check when module loads") Link: https://lore.kernel.org/linux-trace-kernel/20240705161030.b3ddb33a8167013b9b1da202@kernel.org Fixes: b022f0c7 ("tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols") Signed-off-by:
Nikolay Kuratov <kniv@yandex-team.ru> Signed-off-by:
-
Eduard Zingerman authored
commit e9bd9c49 upstream. Range propagation must not affect subreg_def marks, otherwise the following example is rewritten by verifier incorrectly when BPF_F_TEST_RND_HI32 flag is set: 0: call bpf_ktime_get_ns call bpf_ktime_get_ns 1: r0 &= 0x7fffffff after verifier r0 &= 0x7fffffff 2: w1 = w0 rewrites w1 = w0 3: if w0 < 10 goto +0 --------------> r11 = 0x2f5674a6 (r) 4: r1 >>= 32 r11 <<= 32 (r) 5: r0 = r1 r1 |= r11 (r) 6: exit; if w0 < 0xa goto pc+0 r1 >>= 32 r0 = r1 exit (or zero extension of w1 at (2) is missing for architectures that require zero extension for upper register half). The following happens w/o this patch: - r0 is marked as not a subreg at (0); - w1 is marked as subreg at (2); - w1 subreg_def is overridden at (3) by copy_register_state(); - w1 is read at (5) but mark_insn_zext() does not mark (2) for zero extension, because w1 subreg_def is not set; - because of BPF_F_TEST_RND_HI32 flag verifier inserts random value for hi32 bits of (2) (marked (r)); - this random value is read at (5). Fixes: 75748837 ("bpf: Propagate scalar ranges through register assignments.") Reported-by:
Lonial Con <kongln9170@gmail.com> Signed-off-by:
Eduard Zingerman <eddyz87@gmail.com> Signed-off-by:
Andrii Nakryiko <andrii@kernel.org> Signed-off-by:
Daniel Borkmann <daniel@iogearbox.net> Acked-by:
Shung-Hsi Yu <shung-hsi.yu@suse.com> Signed-off-by:
-
Nathan Chancellor authored
[ Upstream commit 57e420c8 ] After a recent change to clamp() and its variants [1] that increases the coverage of the check that high is greater than low because it can be done through inlining, certain build configurations (such as s390 defconfig) fail to build with clang with: block/blk-iocost.c:1101:11: error: call to '__compiletime_assert_557' declared with 'error' attribute: clamp() low limit 1 greater than high limit active 1101 | inuse = clamp_t(u32, inuse, 1, active); | ^ include/linux/minmax.h:218:36: note: expanded from macro 'clamp_t' 218 | #define clamp_t(type, val, lo, hi) __careful_clamp(type, val, lo, hi) | ^ include/linux/minmax.h:195:2: note: expanded from macro '__careful_clamp' 195 | __clamp_once(type, val, lo, hi, __UNIQUE_ID(v_), __UNIQUE_ID(l_), __UNIQUE_ID(h_)) | ^ include/linux/minmax.h:188:2: note: expanded from macro '__clamp_once' 188 | BUILD_BUG_ON_MSG(statically_true(ulo > uhi), \ | ^ __propagate_weights() is called with an active value of zero in ioc_check_iocgs(), which results in the high value being less than the low value, which is undefined because the value returned depends on the order of the comparisons. The purpose of this expression is to ensure inuse is not more than active and at least 1. This could be written more simply with a ternary expression that uses min(inuse, active) as the condition so that the value of that condition can be used if it is not zero and one if it is. Do this conversion to resolve the error and add a comment to deter people from turning this back into clamp(). Fixes: 7caa4715 ("blkcg: implement blk-iocost") Link: https://lore.kernel.org/r/34d53778977747f19cce2abb287bb3e6@AcuMS.aculab.com/ [1] Suggested-by:
David Laight <david.laight@aculab.com> Reported-by:
Linux Kernel Functional Testing <lkft@linaro.org> Closes: https://lore.kernel.org/llvm/CA+G9fYsD7mw13wredcZn0L-KBA3yeoVSTuxnss-AEWMN3ha0cA@mail.gmail.com/ Reported-by:
kernel test robot <lkp@intel.com> Closes: https://lore.kernel.org/oe-kbuild-all/202412120322.3GfVe3vF-lkp@intel.com/ Signed-off-by:
Nathan Chancellor <nathan@kernel.org> Acked-by:
Tejun Heo <tj@kernel.org> Signed-off-by:
Jens Axboe <axboe@kernel.dk> Signed-off-by:
Sasha Levin <sashal@kernel.org>
-
Daniil Tatianin authored
[ Upstream commit c53d96a4 ] This bug was first introduced in c27f3d01, where the author of the patch probably meant to do DeleteMutex instead of ReleaseMutex. The mutex leak was noticed later on and fixed in e4dfe108, but the bogus MutexRelease line was never removed, so do it now. Link: https://github.com/acpica/acpica/pull/982 Fixes: c27f3d01 ("ACPICA: Fix race in generic_serial_bus (I2C) and GPIO op_region parameter handling") Signed-off-by:
Daniil Tatianin <d-tatianin@yandex-team.ru> Link: https://patch.msgid.link/20241122082954.658356-1-d-tatianin@yandex-team.ru Signed-off-by:
Rafael J. Wysocki <rafael.j.wysocki@intel.com> Signed-off-by:
-
Daniel Borkmann authored
[ Upstream commit 98712844 ] Similar to bonding driver, add NETIF_F_GSO_ENCAP_ALL to TEAM_VLAN_FEATURES in order to support slave devices which propagate NETIF_F_GSO_UDP_TUNNEL & NETIF_F_GSO_UDP_TUNNEL_CSUM as vlan_features. Fixes: 3625920b ("teaming: fix vlan_features computing") Signed-off-by:
Nikolay Aleksandrov <razor@blackwall.org> Reviewed-by:
Hangbin Liu <liuhangbin@gmail.com> Link: https://patch.msgid.link/20241210141245.327886-5-daniel@iogearbox.net Signed-off-by:
Paolo Abeni <pabeni@redhat.com> Signed-off-by:
-
Daniel Borkmann authored
[ Upstream commit 77b11c8b ] Drivers like mlx5 expose NIC's vlan_features such as NETIF_F_GSO_UDP_TUNNEL & NETIF_F_GSO_UDP_TUNNEL_CSUM which are later not propagated when the underlying devices are bonded and a vlan device created on top of the bond. Right now, the more cumbersome workaround for this is to create the vlan on top of the mlx5 and then enslave the vlan devices to a bond. To fix this, add NETIF_F_GSO_ENCAP_ALL to BOND_VLAN_FEATURES such that bond_compute_features() can probe and propagate the vlan_features from the slave devices up to the vlan device. Given the following bond: # ethtool -i enp2s0f{0,1}np{0,1} driver: mlx5_core [...] # ethtool -k enp2s0f0np0 | grep udp tx-udp_tnl-segmentation: on tx-udp_tnl-csum-segmentation: on tx-udp-segmentation: on rx-udp_tunnel-port-offload: on rx-udp-gro-forwarding: off # ethtool -k enp2s0f1np1 | grep udp tx-udp_tnl-segmentation: on tx-udp_tnl-csum-segmentation: on tx-udp-segmentation: on rx-udp_tunnel-port-offload: on rx-udp-gro-forwarding: off # ethtool -k bond0 | grep udp tx-udp_tnl-segmentation: on tx-udp_tnl-csum-segmentation: on tx-udp-segmentation: on rx-udp_tunnel-port-offload: off [fixed] rx-udp-gro-forwarding: off Before: # ethtool -k bond0.100 | grep udp tx-udp_tnl-segmentation: off [requested on] tx-udp_tnl-csum-segmentation: off [requested on] tx-udp-segmentation: on rx-udp_tunnel-port-offload: off [fixed] rx-udp-gro-forwarding: off After: # ethtool -k bond0.100 | grep udp tx-udp_tnl-segmentation: on tx-udp_tnl-csum-segmentation: on tx-udp-segmentation: on rx-udp_tunnel-port-offload: off [fixed] rx-udp-gro-forwarding: off Various users have run into this reporting performance issues when configuring Cilium in vxlan tunneling mode and having the combination of bond & vlan for the core devices connecting the Kubernetes cluster to the outside world. Fixes: a9b3ace4 ("bonding: fix vlan_features computing") Signed-off-by:
-
Alexander Lobakin authored
[ Upstream commit ecb8fed4 ] Virtual netdevs should use NETIF_F_GSO_SOFTWARE to forward GSO skbs as-is and let the final drivers deal with them when supported. Also remove NETIF_F_GSO_UDP_L4 from bonding and team drivers as it's now included in the "software" list. Suggested-by:
Willem de Bruijn <willemb@google.com> Signed-off-by:
Alexander Lobakin <alobakin@pm.me> Acked-by:
Jakub Kicinski <kuba@kernel.org> Stable-dep-of: 77b11c8b ("bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL") Signed-off-by:
-
Martin Ottens authored
[ Upstream commit f8d4bc45 ] In general, 'qlen' of any classful qdisc should keep track of the number of packets that the qdisc itself and all of its children holds. In case of netem, 'qlen' only accounts for the packets in its internal tfifo. When netem is used with a child qdisc, the child qdisc can use 'qdisc_tree_reduce_backlog' to inform its parent, netem, about created or dropped SKBs. This function updates 'qlen' and the backlog statistics of netem, but netem does not account for changes made by a child qdisc. 'qlen' then indicates the wrong number of packets in the tfifo. If a child qdisc creates new SKBs during enqueue and informs its parent about this, netem's 'qlen' value is increased. When netem dequeues the newly created SKBs from the child, the 'qlen' in netem is not updated. If 'qlen' reaches the configured sch->limit, the enqueue function stops working, even though the tfifo is not full. Reproduce the bug: Ensure that the sender machine has GSO enabled. Configure netem as root qdisc and tbf as its child on the outgoing interface of the machine as follows: $ tc qdisc add dev <oif> root handle 1: netem delay 100ms limit 100 $ tc qdisc add dev <oif> parent 1:0 tbf rate 50Mbit burst 1542 latency 50ms Send bulk TCP traffic out via this interface, e.g., by running an iPerf3 client on the machine. Check the qdisc statistics: $ tc -s qdisc show dev <oif> Statistics after 10s of iPerf3 TCP test before the fix (note that netem's backlog > limit, netem stopped accepting packets): qdisc netem 1: root refcnt 2 limit 1000 delay 100ms Sent 2767766 bytes 1848 pkt (dropped 652, overlimits 0 requeues 0) backlog 4294528236b 1155p requeues 0 qdisc tbf 10: parent 1:1 rate 50Mbit burst 1537b lat 50ms Sent 2767766 bytes 1848 pkt (dropped 327, overlimits 7601 requeues 0) backlog 0b 0p requeues 0 Statistics after the fix: qdisc netem 1: root refcnt 2 limit 1000 delay 100ms Sent 37766372 bytes 24974 pkt (dropped 9, overlimits 0 requeues 0) backlog 0b 0p requeues 0 qdisc tbf 10: parent 1:1 rate 50Mbit burst 1537b lat 50ms Sent 37766372 bytes 24974 pkt (dropped 327, overlimits 96017 requeues 0) backlog 0b 0p requeues 0 tbf segments the GSO SKBs (tbf_segment) and updates the netem's 'qlen'. The interface fully stops transferring packets and "locks". In this case, the child qdisc and tfifo are empty, but 'qlen' indicates the tfifo is at its limit and no more packets are accepted. This patch adds a counter for the entries in the tfifo. Netem's 'qlen' is only decreased when a packet is returned by its dequeue function, and not during enqueuing into the child qdisc. External updates to 'qlen' are thus accounted for and only the behavior of the backlog statistics changes. As in other qdiscs, 'qlen' then keeps track of how many packets are held in netem and all of its children. As before, sch->limit remains as the maximum number of packets in the tfifo. The same applies to netem's backlog statistics. Fixes: 50612537 ("netem: fix classful handling") Signed-off-by:
Martin Ottens <martin.ottens@fau.de> Acked-by:
Jamal Hadi Salim <jhs@mojatatu.com> Link: https://patch.msgid.link/20241210131412.1837202-1-martin.ottens@fau.de Signed-off-by:
-
Stefan Wahren authored
[ Upstream commit becc6399 ] The module parameter qcaspi_pluggable controls if QCA7000 signature should be checked at driver probe (current default) or not. Unfortunately this could fail in case the chip is temporary in reset, which isn't under total control by the Linux host. So disable this check per default in order to avoid unexpected probe failures. Fixes: 291ab06e ("net: qualcomm: new Ethernet over SPI driver for QCA7000") Signed-off-by:
Stefan Wahren <wahrenst@gmx.net> Link: https://patch.msgid.link/20241206184643.123399-3-wahrenst@gmx.net Signed-off-by:
-
Stefan Wahren authored
[ Upstream commit 4dba406f ] Storing the maximum clock speed in module parameter qcaspi_clkspeed has the unintended side effect that the first probed instance defines the value for all other instances. Fix this issue by storing it in max_speed_hz of the relevant SPI device. This fix keeps the priority of the speed parameter (module parameter, device tree property, driver default). Btw this uses the opportunity to get the rid of the unused member clkspeed. Fixes: 291ab06e ("net: qualcomm: new Ethernet over SPI driver for QCA7000") Signed-off-by:
-
Anumula Murali Mohan Reddy authored
[ Upstream commit 356983f5 ] t4_set_vf_mac_acl() uses pf to set mac addr, but t4vf_get_vf_mac_acl() uses port number to get mac addr, this leads to error when an attempt to set MAC address on VF's of PF2 and PF3. This patch fixes the issue by using port number to set mac address. Fixes: e0cdac65 ("cxgb4vf: configure ports accessible by the VF") Signed-off-by:
Anumula Murali Mohan Reddy <anumula@chelsio.com> Signed-off-by:
Potnuri Bharat Teja <bharat@chelsio.com> Reviewed-by:
Simon Horman <horms@kernel.org> Link: https://patch.msgid.link/20241206062014.49414-1-anumula@chelsio.com Signed-off-by:
-
Ilpo Järvinen authored
[ Upstream commit 7899ca9f ] In acpi_decode_space() addr->info.mem.caching is checked on main level for any resource type but addr->info.mem is part of union and thus valid only if the resource type is memory range. Move the check inside the preceeding switch/case to only execute it when the union is of correct type. Fixes: fcb29bbc ("ACPI: Add prefetch decoding to the address space parser") Signed-off-by:
Ilpo Järvinen <ilpo.jarvinen@linux.intel.com> Link: https://patch.msgid.link/20241202100614.20731-1-ilpo.jarvinen@linux.intel.com Signed-off-by:
-
Eric Dumazet authored
[ Upstream commit a6d75ece ] It is unclear if net/lapb code is supposed to be ready for 8021q. We can at least avoid crashes like the following : skbuff: skb_under_panic: text:ffffffff8aabe1f6 len:24 put:20 head:ffff88802824a400 data:ffff88802824a3fe tail:0x16 end:0x140 dev:nr0.2 ------------[ cut here ]------------ kernel BUG at net/core/skbuff.c:206 ! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 1 UID: 0 PID: 5508 Comm: dhcpcd Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 RIP: 0010:skb_panic net/core/skbuff.c:206 [inline] RIP: 0010:skb_under_panic+0x14b/0x150 net/core/skbuff.c:216 Code: 0d 8d 48 c7 c6 2e 9e 29 8e 48 8b 54 24 08 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 41 54 41 57 41 56 e8 1a 6f 37 02 48 83 c4 20 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 RSP: 0018:ffffc90002ddf638 EFLAGS: 00010282 RAX: 0000000000000086 RBX: dffffc0000000000 RCX: 7a24750e538ff600 RDX: 0000000000000000 RSI: 0000000000000201 RDI: 0000000000000000 RBP: ffff888034a86650 R08: ffffffff8174b13c R09: 1ffff920005bbe60 R10: dffffc0000000000 R11: fffff520005bbe61 R12: 0000000000000140 R13: ffff88802824a400 R14: ffff88802824a3fe R15: 0000000000000016 FS: 00007f2a5990d740(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c2631fd CR3: 0000000029504000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> skb_push+0xe5/0x100 net/core/skbuff.c:2636 nr_header+0x36/0x320 net/netrom/nr_dev.c:69 dev_hard_header include/linux/netdevice.h:3148 [inline] vlan_dev_hard_header+0x359/0x480 net/8021q/vlan_dev.c:83 dev_hard_header include/linux/netdevice.h:3148 [inline] lapbeth_data_transmit+0x1f6/0x2a0 drivers/net/wan/lapbether.c:257 lapb_data_transmit+0x91/0xb0 net/lapb/lapb_iface.c:447 lapb_transmit_buffer+0x168/0x1f0 net/lapb/lapb_out.c:149 lapb_establish_data_link+0x84/0xd0 lapb_device_event+0x4e0/0x670 notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93 __dev_notify_flags+0x207/0x400 dev_change_flags+0xf0/0x1a0 net/core/dev.c:8922 devinet_ioctl+0xa4e/0x1aa0 net/ipv4/devinet.c:1188 inet_ioctl+0x3d7/0x4f0 net/ipv4/af_inet.c:1003 sock_do_ioctl+0x158/0x460 net/socket.c:1227 sock_ioctl+0x626/0x8e0 net/socket.c:1346 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0xf9/0x170 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 Fixes: 1da177e4 ("Linux-2.6.12-rc2") Reported-by:
<syzbot+fb99d1b0c0f81d94a5e2@syzkaller.appspotmail.com> Closes: https://lore.kernel.org/netdev/67506220.050a0220.17bd51.006c.GAE@google.com/T/#u Signed-off-by:
Eric Dumazet <edumazet@google.com> Reviewed-by:
-
Danielle Ratson authored
[ Upstream commit 6c46ad4d ] On both port_tc_ip_test() and port_tc_arp_test(), the max occupancy is checked on $h2 twice, when only the error message is different and does not match the check itself. Remove the two duplicated test cases from the test. Fixes: a865ad99 ("selftests: mlxsw: Add shared buffer traffic test") Signed-off-by:
Danielle Ratson <danieller@nvidia.com> Reviewed-by:
Ido Schimmel <idosch@nvidia.com> Signed-off-by:
Petr Machata <petrm@nvidia.com> Link: https://patch.msgid.link/d9eb26f6fc16a06a30b5c2c16ad80caf502bc561.1733414773.git.petrm@nvidia.com Signed-off-by:
-
Danielle Ratson authored
[ Upstream commit cf3515c5 ] The test is sending only one packet generated with mausezahn from $h1 to $h2. However, for some reason, it is testing for non-zero maximum occupancy in both the ingress pool of $h1 and $h2. The former only passes when $h2 happens to send a packet. Avoid intermittent failures by removing unintentional test case regarding the ingress pool of $h1. Fixes: a865ad99 ("selftests: mlxsw: Add shared buffer traffic test") Signed-off-by:
-
