Skip to content
  1. Jun 24, 2022
  2. Jun 20, 2022
  3. Jun 19, 2022
  4. Jun 18, 2022
    • Kirill A. Shutemov's avatar
      x86/tdx: Handle load_unaligned_zeropad() page-cross to a shared page · 1e776965
      Kirill A. Shutemov authored
      
      
      load_unaligned_zeropad() can lead to unwanted loads across page boundaries.
      The unwanted loads are typically harmless. But, they might be made to
      totally unrelated or even unmapped memory. load_unaligned_zeropad()
      relies on exception fixup (#PF, #GP and now #VE) to recover from these
      unwanted loads.
      
      In TDX guests, the second page can be shared page and a VMM may configure
      it to trigger #VE.
      
      The kernel assumes that #VE on a shared page is an MMIO access and tries to
      decode instruction to handle it. In case of load_unaligned_zeropad() it
      may result in confusion as it is not MMIO access.
      
      Fix it by detecting split page MMIO accesses and failing them.
      load_unaligned_zeropad() will recover using exception fixups.
      
      The issue was discovered by analysis and reproduced artificially. It was
      not triggered during testing.
      
      [ dhansen: fix up changelogs and comments for grammar and clarity,
      	   plus incorporate Kirill's off-by-one fix]
      
      Signed-off-by: default avatarKirill A. Shutemov <kirill.shutemov@linux.intel.com>
      Signed-off-by: default avatarDave Hansen <dave.hansen@linux.intel.com>
      Link: https://lkml.kernel.org/r/20220614120135.14812-4-kirill.shutemov@linux.intel.com
      1e776965
    • Linus Torvalds's avatar
      Merge tag 'nfs-for-5.19-2' of git://git.linux-nfs.org/projects/anna/linux-nfs · 4b35035b
      Linus Torvalds authored
      Pull NFS client fixes from Anna Schumaker:
      
       - Add FMODE_CAN_ODIRECT support to NFSv4 so opens don't fail
      
       - Fix trunking detection & cl_max_connect setting
      
       - Avoid pnfs_update_layout() livelocks
      
       - Don't keep retrying pNFS if the server replies with NFS4ERR_UNAVAILABLE
      
      * tag 'nfs-for-5.19-2' of git://git.linux-nfs.org/projects/anna/linux-nfs:
        NFSv4: Add FMODE_CAN_ODIRECT after successful open of a NFS4.x file
        sunrpc: set cl_max_connect when cloning an rpc_clnt
        pNFS: Avoid a live lock condition in pnfs_update_layout()
        pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE
      4b35035b
    • Linus Torvalds's avatar
      Merge tag 'pci-v5.19-fixes-2' of git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci · 32efdbff
      Linus Torvalds authored
      Pull pci fix from Bjorn Helgaas:
       "Revert clipping of PCI host bridge windows to avoid E820 regions,
        which broke several machines by forcing unnecessary BAR reassignments
        (Hans de Goede)"
      
      * tag 'pci-v5.19-fixes-2' of git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci:
        x86/PCI: Revert "x86/PCI: Clip only host bridge windows for E820 regions"
      32efdbff
    • Linus Torvalds's avatar
      Merge tag 'printk-for-5.19-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/printk/linux · 93d17c1c
      Linus Torvalds authored
      Pull printk fixes from Petr Mladek:
       "Make the global console_sem available for CPU that is handling panic()
        or shutdown.
      
        This is an old problem when an existing console lock owner might block
        console output, but it became more visible with the kthreads"
      
      * tag 'printk-for-5.19-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/printk/linux:
        printk: Wait for the global console lock when the system is going down
        printk: Block console kthreads when direct printing will be required
      93d17c1c
    • Hans de Goede's avatar
      x86/PCI: Revert "x86/PCI: Clip only host bridge windows for E820 regions" · a2b36ffb
      Hans de Goede authored
      This reverts commit 4c5e242d.
      
      Prior to 4c5e242d ("x86/PCI: Clip only host bridge windows for E820
      regions"), E820 regions did not affect PCI host bridge windows.  We only
      looked at E820 regions and avoided them when allocating new MMIO space.
      If firmware PCI bridge window and BAR assignments used E820 regions, we
      left them alone.
      
      After 4c5e242d, we removed E820 regions from the PCI host bridge
      windows before looking at BARs, so firmware assignments in E820 regions
      looked like errors, and we moved things around to fit in the space left
      (if any) after removing the E820 regions.  This unnecessary BAR
      reassignment broke several machines.
      
      Guilherme reported that Steam Deck fails to boot after 4c5e242d.  We
      clipped the window that contained most 32-bit BARs:
      
        BIOS-e820: [mem 0x00000000a0000000-0x00000000a00fffff] reserved
        acpi PNP0A08:00: clipped [mem 0x80000000-0xf7ffffff window] to [mem 0xa0100000-0xf7ffffff window] for e820 entry [mem 0xa0000000-0xa00fffff]
      
      which forced us to reassign all those BARs, for example, this NVMe BAR:
      
        pci 0000:00:01.2: PCI bridge to [bus 01]
        pci 0000:00:01.2:   bridge window [mem 0x80600000-0x806fffff]
        pci 0000:01:00.0: BAR 0: [mem 0x80600000-0x80603fff 64bit]
        pci 0000:00:01.2: can't claim window [mem 0x80600000-0x806fffff]: no compatible bridge window
        pci 0000:01:00.0: can't claim BAR 0 [mem 0x80600000-0x80603fff 64bit]: no compatible bridge window
      
        pci 0000:00:01.2: bridge window: assigned [mem 0xa0100000-0xa01fffff]
        pci 0000:01:00.0: BAR 0: assigned [mem 0xa0100000-0xa0103fff 64bit]
      
      All the reassignments were successful, so the devices should have been
      functional at the new addresses, but some were not.
      
      Andy reported a similar failure on an Intel MID platform.  Benjamin
      reported a similar failure on a VMWare Fusion VM.
      
      Note: this is not a clean revert; this revert keeps the later change to
      make the clipping dependent on a new pci_use_e820 bool, moving the checking
      of this bool to arch_remove_reservations().
      
      [bhelgaas: commit log, add more reporters and testers]
      BugLink: https://bugzilla.kernel.org/show_bug.cgi?id=216109
      
      
      Reported-by: default avatarGuilherme G. Piccoli <gpiccoli@igalia.com>
      Reported-by: default avatarAndy Shevchenko <andy.shevchenko@gmail.com>
      Reported-by: default avatarBenjamin Coddington <bcodding@redhat.com>
      Reported-by: default avatarJongman Heo <jongman.heo@gmail.com>
      Fixes: 4c5e242d ("x86/PCI: Clip only host bridge windows for E820 regions")
      Link: https://lore.kernel.org/r/20220612144325.85366-1-hdegoede@redhat.com
      
      
      Tested-by: default avatarGuilherme G. Piccoli <gpiccoli@igalia.com>
      Tested-by: default avatarAndy Shevchenko <andriy.shevchenko@linux.intel.com>
      Tested-by: default avatarBenjamin Coddington <bcodding@redhat.com>
      Signed-off-by: default avatarHans de Goede <hdegoede@redhat.com>
      Signed-off-by: default avatarBjorn Helgaas <bhelgaas@google.com>
      a2b36ffb
    • Linus Torvalds's avatar
      Merge tag 'arm64-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux · ef06e682
      Linus Torvalds authored
      Pull arm64 fixes from Catalin Marinas:
      
       - Revert the moving of the jump labels initialisation before
         setup_machine_fdt(). The bug was fixed in drivers/char/random.c.
      
       - Ftrace fixes: branch range check and consistent handling of PLTs.
      
       - Clean rather than invalidate FROM_DEVICE buffers at start of DMA
         transfer (safer if such buffer is mapped in user space). A cache
         invalidation is done already at the end of the transfer.
      
       - A couple of clean-ups (unexport symbol, remove unused label).
      
      * tag 'arm64-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:
        arm64: mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer
        arm64/cpufeature: Unexport set_cpu_feature()
        arm64: ftrace: remove redundant label
        arm64: ftrace: consistently handle PLTs.
        arm64: ftrace: fix branch range checks
        Revert "arm64: Initialize jump labels before setup_machine_fdt()"
      ef06e682
    • Linus Torvalds's avatar
      Merge tag 'loongarch-fixes-5.19-2' of... · cc2fb31d
      Linus Torvalds authored
      Merge tag 'loongarch-fixes-5.19-2' of git://git.kernel.org/pub/scm/linux/kernel/git/chenhuacai/linux-loongson
      
      Pull LoongArch fixes from Huacai Chen:
       "Add missing ELF_DETAILS in vmlinux.lds.S and fix document rendering"
      
      * tag 'loongarch-fixes-5.19-2' of git://git.kernel.org/pub/scm/linux/kernel/git/chenhuacai/linux-loongson:
        docs/zh_CN/LoongArch: Fix notes rendering by using reST directives
        docs/LoongArch: Fix notes rendering by using reST directives
        LoongArch: vmlinux.lds.S: Add missing ELF_DETAILS
      cc2fb31d
    • Linus Torvalds's avatar
      Merge tag 'riscv-for-linus-5.19-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux · f1051632
      Linus Torvalds authored
      Pull RISC-V fixes from Palmer Dabbelt:
      
       - A fix for the PolarFire SOC's device tree
      
       - A handful of fixes for the recently added Svpmbt support
      
       - An improvement to the Kconfig text for Svpbmt
      
      * tag 'riscv-for-linus-5.19-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux:
        riscv: Improve description for RISCV_ISA_SVPBMT Kconfig symbol
        riscv: drop cpufeature_apply_feature tracking variable
        riscv: fix dependency for t-head errata
        riscv: dts: microchip: re-add pdma to mpfs device tree
      f1051632
    • Linus Torvalds's avatar
      Merge tag 'hyperv-fixes-signed-20220617' of... · 2d806a68
      Linus Torvalds authored
      Merge tag 'hyperv-fixes-signed-20220617' of git://git.kernel.org/pub/scm/linux/kernel/git/hyperv/linux
      
      Pull hyperv fixes from Wei Liu:
      
       - Fix hv_init_clocksource annotation (Masahiro Yamada)
      
       - Two bug fixes for vmbus driver (Saurabh Sengar)
      
       - Fix SEV negotiation (Tianyu Lan)
      
       - Fix comments in code (Xiang Wang)
      
       - One minor fix to HID driver (Michael Kelley)
      
      * tag 'hyperv-fixes-signed-20220617' of git://git.kernel.org/pub/scm/linux/kernel/git/hyperv/linux:
        x86/Hyper-V: Add SEV negotiate protocol support in Isolation VM
        Drivers: hv: vmbus: Release cpu lock in error case
        HID: hyperv: Correctly access fields declared as __le16
        clocksource: hyper-v: unexport __init-annotated hv_init_clocksource()
        Drivers: hv: Fix syntax errors in comments
        Drivers: hv: vmbus: Don't assign VMbus channel interrupts to isolated CPUs
      2d806a68
    • Linus Torvalds's avatar
      Merge tag 'block-5.19-2022-06-16' of git://git.kernel.dk/linux-block · 462abc9d
      Linus Torvalds authored
      Pull block fixes from Jens Axboe:
      
       - NVMe pull request from Christoph
            - Quirks, quirks, quirks to work around buggy consumer grade
              devices (Keith Bush, Ning Wang, Stefan Reiter, Rasheed Hsueh)
            - Better kernel messages for devices that need quirking (Keith
              Bush)
            - Make a kernel message more useful (Thomas Weißschuh)
      
       - MD pull request from Song, with a few fixes
      
       - blk-mq sysfs locking fixes (Ming)
      
       - BFQ stats fix (Bart)
      
       - blk-mq offline queue fix (Bart)
      
       - blk-mq flush request tag fix (Ming)
      
      * tag 'block-5.19-2022-06-16' of git://git.kernel.dk/linux-block:
        block/bfq: Enable I/O statistics
        blk-mq: don't clear flush_rq from tags->rqs[]
        blk-mq: avoid to touch q->elevator without any protection
        blk-mq: protect q->elevator by ->sysfs_lock in blk_mq_elv_switch_none
        block: Fix handling of offline queues in blk_mq_alloc_request_hctx()
        md/raid5-ppl: Fix argument order in bio_alloc_bioset()
        Revert "md: don't unregister sync_thread with reconfig_mutex held"
        nvme-pci: disable write zeros support on UMIC and Samsung SSDs
        nvme-pci: avoid the deepest sleep state on ZHITAI TiPro7000 SSDs
        nvme-pci: sk hynix p31 has bogus namespace ids
        nvme-pci: smi has bogus namespace ids
        nvme-pci: phison e12 has bogus namespace ids
        nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG GAMMIX S50
        nvme-pci: add trouble shooting steps for timeouts
        nvme: add bug report info for global duplicate id
        nvme: add device name to warning in uuid_show()
      462abc9d
    • Linus Torvalds's avatar
      Merge tag 'io_uring-5.19-2022-06-16' of git://git.kernel.dk/linux-block · f8e174c3
      Linus Torvalds authored
      Pull io_uring fixes from Jens Axboe:
       "Bigger than usual at this time, both because we missed -rc2, but also
        because of some reverts that we chose to do. In detail:
      
         - Adjust mapped buffer API while we still can (Dylan)
      
         - Mapped buffer fixes (Dylan, Hao, Pavel, me)
      
         - Fix for uring_cmd wrong API usage for task_work (Dylan)
      
         - Fix for bug introduced in fixed file closing (Hao)
      
         - Fix race in buffer/file resource handling (Pavel)
      
         - Revert the NOP support for CQE32 and buffer selection that was
           brought up during the merge window (Pavel)
      
         - Remove IORING_CLOSE_FD_AND_FILE_SLOT introduced in this merge
           window. The API needs further refining, so just yank it for now and
           we'll revisit for a later kernel.
      
         - Series cleaning up the CQE32 support added in this merge window,
           making it more integrated rather than sitting on the side (Pavel)"
      
      * tag 'io_uring-5.19-2022-06-16' of git://git.kernel.dk/linux-block: (21 commits)
        io_uring: recycle provided buffer if we punt to io-wq
        io_uring: do not use prio task_work_add in uring_cmd
        io_uring: commit non-pollable provided mapped buffers upfront
        io_uring: make io_fill_cqe_aux honour CQE32
        io_uring: remove __io_fill_cqe() helper
        io_uring: fix ->extra{1,2} misuse
        io_uring: fill extra big cqe fields from req
        io_uring: unite fill_cqe and the 32B version
        io_uring: get rid of __io_fill_cqe{32}_req()
        io_uring: remove IORING_CLOSE_FD_AND_FILE_SLOT
        Revert "io_uring: add buffer selection support to IORING_OP_NOP"
        Revert "io_uring: support CQE32 for nop operation"
        io_uring: limit size of provided buffer ring
        io_uring: fix types in provided buffer ring
        io_uring: fix index calculation
        io_uring: fix double unlock for pbuf select
        io_uring: kbuf: fix bug of not consuming ring buffer in partial io case
        io_uring: openclose: fix bug of closing wrong fixed file
        io_uring: fix not locked access to fixed buf table
        io_uring: fix races with buffer table unregister
        ...
      f8e174c3
    • Will Deacon's avatar
      arm64: mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer · c50f11c6
      Will Deacon authored
      Invalidating the buffer memory in arch_sync_dma_for_device() for
      FROM_DEVICE transfers
      
      When using the streaming DMA API to map a buffer prior to inbound
      non-coherent DMA (i.e. DMA_FROM_DEVICE), we invalidate any dirty CPU
      cachelines so that they will not be written back during the transfer and
      corrupt the buffer contents written by the DMA. This, however, poses two
      potential problems:
      
        (1) If the DMA transfer does not write to every byte in the buffer,
            then the unwritten bytes will contain stale data once the transfer
            has completed.
      
        (2) If the buffer has a virtual alias in userspace, then stale data
            may be visible via this alias during the period between performing
            the cache invalidation and the DMA writes landing in memory.
      
      Address both of these issues by cleaning (aka writing-back) the dirty
      lines in arch_sync_dma_for_device(DMA_FROM_DEVICE) instead of discarding
      them using invalidation.
      
      Cc: Ard Biesheuvel <ardb@kernel.org>
      Cc: Christoph Hellwig <hch@lst.de>
      Cc: Robin Murphy <robin.murphy@arm.com>
      Cc: Russell King <linux@armlinux.org.uk>
      Cc: <stable@vger.kernel.org>
      Link: https://lore.kernel.org/r/20220606152150.GA31568@willie-the-truck
      
      
      Signed-off-by: default avatarWill Deacon <will@kernel.org>
      Reviewed-by: default avatarArd Biesheuvel <ardb@kernel.org>
      Link: https://lore.kernel.org/r/20220610151228.4562-2-will@kernel.org
      
      
      Signed-off-by: default avatarCatalin Marinas <catalin.marinas@arm.com>
      c50f11c6
    • Linus Torvalds's avatar
      Merge tag 'fs_for_v5.19-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs · 5c0cd3d4
      Linus Torvalds authored
      Pull writeback and ext2 fixes from Jan Kara:
       "A fix for writeback bug which prevented machines with kdevtmpfs from
        booting and also one small ext2 bugfix in IO error handling"
      
      * tag 'fs_for_v5.19-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs:
        init: Initialize noop_backing_dev_info early
        ext2: fix fs corruption when trying to remove a non-empty directory with IO error
      5c0cd3d4
    • Linus Torvalds's avatar
      Merge tag 'for-5.19/dm-fixes-3' of... · 274295c6
      Linus Torvalds authored
      Merge tag 'for-5.19/dm-fixes-3' of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm
      
      Pull device mapper fixes from Mike Snitzer:
      
       - Fix a race in DM core's dm_start_io_acct that could result in double
         accounting for abnormal IO (e.g. discards, write zeroes, etc).
      
       - Fix a use-after-free in DM core's dm_put_live_table_bio.
      
       - Fix a race for REQ_NOWAIT bios being issued despite no support from
         underlying DM targets (due to DM table reload at an "unlucky" time)
      
       - Fix access beyond allocated bitmap in DM mirror's log.
      
      * tag 'for-5.19/dm-fixes-3' of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm:
        dm mirror log: round up region bitmap size to BITS_PER_LONG
        dm: fix narrow race for REQ_NOWAIT bios being issued despite no support
        dm: fix use-after-free in dm_put_live_table_bio
        dm: fix race in dm_start_io_acct
      274295c6
    • Linus Torvalds's avatar
      Merge tag 'hwmon-for-v5.19-rc3' of... · a96e902b
      Linus Torvalds authored
      Merge tag 'hwmon-for-v5.19-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging
      
      Pull hwmon fixes from Guenter Roeck:
      
       - Add missing lock protection in occ driver
      
       - Add missing comma in board name list in asus-ec-sensors driver
      
       - Fix devicetree bindings for ti,tmp401
      
      * tag 'hwmon-for-v5.19-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging:
        hwmon: (asus-ec-sensors) add missing comma in board name list.
        hwmon: (occ) Lock mutex in shutdown to prevent race with occ_active
        dt-bindings: hwmon: ti,tmp401: Drop 'items' from 'ti,n-factor' property
      a96e902b
    • Linus Torvalds's avatar
      Merge tag 'linux-watchdog-5.19-rc3' of git://www.linux-watchdog.org/linux-watchdog · 7c2d03f1
      Linus Torvalds authored
      Pull watchdog fix from Wim Van Sebroeck:
       "Add missing MODULE_LICENSE in gxp driver"
      
      * tag 'linux-watchdog-5.19-rc3' of git://www.linux-watchdog.org/linux-watchdog:
        watchdog: gxp: Add missing MODULE_LICENSE
      7c2d03f1
  5. Jun 17, 2022