Skip to content
  1. Sep 18, 2021
    • Linus Torvalds's avatar
      Merge tag 'io_uring-5.15-2021-09-17' of git://git.kernel.dk/linux-block · 0bc7eb03
      Linus Torvalds authored
      Pull io_uring fixes from Jens Axboe:
       "Mostly fixes for regressions in this cycle, but also a few fixes that
        predate this release.
      
        The odd one out is a tweak to the direct files added in this release,
        where attempting to reuse a slot is allowed instead of needing an
        explicit removal of that slot first. It's a considerable improvement
        in usability to that API, hence I'm sending it for -rc2.
      
         - io-wq race fix and cleanup (Hao)
      
         - loop_rw_iter() type fix
      
         - SQPOLL max worker race fix
      
         - Allow poll arm for O_NONBLOCK files, fixing a case where it's
           impossible to properly use io_uring if you cannot modify the file
           flags
      
         - Allow direct open to simply reuse a slot, instead of needing it
           explicitly removed first (Pavel)
      
         - Fix a case where we missed signal mask restoring in cqring_wait, if
           we hit -EFAULT (Xiaoguang)"
      
      * tag 'io_uring-5.15-2021-09-17' of git://git.kernel.dk/linux-block:
        io_uring: allow retry for O_NONBLOCK if async is supported
        io_uring: auto-removal for direct open/accept
        io_uring: fix missing sigmask restore in io_cqring_wait()
        io_uring: pin SQPOLL data before unlocking ring lock
        io-wq: provide IO_WQ_* constants for IORING_REGISTER_IOWQ_MAX_WORKERS arg items
        io-wq: fix potential race of acct->nr_workers
        io-wq: code clean of io_wqe_create_worker()
        io_uring: ensure symmetry in handling iter types in loop_rw_iter()
      0bc7eb03
    • Linus Torvalds's avatar
      Merge tag 'block-5.15-2021-09-17' of git://git.kernel.dk/linux-block · 36d6753b
      Linus Torvalds authored
      Pull block fixes from Jens Axboe:
      
       - NVMe pull request via Christoph:
             - fix ANA state updates when a namespace is not present (Anton
               Eidelman)
             - nvmet: fix a width vs precision bug in
               nvmet_subsys_attr_serial_show (Dan Carpenter)
             - avoid race in shutdown namespace removal (Daniel Wagner)
             - fix io_work priority inversion in nvme-tcp (Keith Busch)
             - destroy cm id before destroy qp to avoid use after free (Ruozhu
               Li)
      
       - blk-integrity profile registration fixes (Christoph, Lihong)
      
       - blk-cgroup UAF fix (Li)
      
       - blk-mq tag iterator fix (Ming)
      
       - blkcg memory leak fix (Yanfei)
      
      * tag 'block-5.15-2021-09-17' of git://git.kernel.dk/linux-block:
        blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd
        blkcg: fix memory leak in blk_iolatency_init
        nvme: remove the call to nvme_update_disk_info in nvme_ns_remove
        block: flush the integrity workqueue in blk_integrity_unregister
        block: check if a profile is actually registered in blk_integrity_unregister
        nvme-tcp: fix io_work priority inversion
        nvme-rdma: destroy cm id before destroy qp to avoid use after free
        nvme-multipath: fix ANA state updates when a namespace is not present
        nvme: avoid race in shutdown namespace removal
        nvmet: fix a width vs precision bug in nvmet_subsys_attr_serial_show()
        blk-mq: avoid to iterate over stale request
      36d6753b
  2. Sep 17, 2021
    • Linus Torvalds's avatar
      Merge tag 'arm64-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux · 7f2cd141
      Linus Torvalds authored
      Pull arm64 fixes and cleanups from Catalin Marinas:
      
       - Fix the memset() size when re-initialising the SVE state.
      
       - Mark __stack_chk_guard as __ro_after_init.
      
       - Remove duplicate include.
      
      * tag 'arm64-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:
        arm64: Mark __stack_chk_guard as __ro_after_init
        arm64/kernel: remove duplicate include in process.c
        arm64/sve: Use correct size when reinitialising SVE state
      7f2cd141
    • Linus Torvalds's avatar
      Merge tag 'for-linus-5.15b-rc2-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip · c6460dae
      Linus Torvalds authored
      Pull xen fixes from Juergen Gross:
      
       - The first hunk of a Xen swiotlb fixup series fixing multiple minor
         issues and doing some small cleanups
      
       - Some further Xen related fixes avoiding WARN() splats when running as
         Xen guests or dom0
      
       - A Kconfig fix allowing the pvcalls frontend to be built as a module
      
      * tag 'for-linus-5.15b-rc2-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip:
        swiotlb-xen: drop DEFAULT_NSLABS
        swiotlb-xen: arrange to have buffer info logged
        swiotlb-xen: drop leftover __ref
        swiotlb-xen: limit init retries
        swiotlb-xen: suppress certain init retries
        swiotlb-xen: maintain slab count properly
        swiotlb-xen: fix late init retry
        swiotlb-xen: avoid double free
        xen/pvcalls: backend can be a module
        xen: fix usage of pmd_populate in mremap for pv guests
        xen: reset legacy rtc flag for PV domU
        PM: base: power: don't try to use non-existing RTC for storing data
        xen/balloon: use a kernel thread instead a workqueue
      c6460dae
    • Linus Torvalds's avatar
      Merge tag 'drm-fixes-2021-09-17' of git://anongit.freedesktop.org/drm/drm · bdb575f8
      Linus Torvalds authored
      Pull drm fixes from Dave Airlie:
       "Slightly busier than usual rc2, but mostly scattered amdgpu fixes,
        some i915 and etnaviv resolves an MMU/runtime PM blowup.
      
        amdgpu:
         - UBSAN fix
         - Powerplay table update fix
         - Fix use after free in BO moves
         - Debugfs init fixes
         - vblank workqueue fixes for headless devices
         - FPU fixes
         - sysfs_emit fixes
         - SMU updates for cyan skillfish
         - Backlight fixes when DMCU is not initialized
         - DP MST fixes
         - HDCP compliance fix
         - Link training fix
         - Runtime pm fix
         - Panel orientation fixes
         - Display GPUVM fix for yellow carp
         - Add missing license
      
        amdkfd:
         - Drop PCI atomics requirement if proper firmware is available
         - Suspend/resume fixes for IOMMUv2 cases
      
        radeon:
         - AGP fix
      
        i915:
         - Propagate DP link training error returns
         - Use max link params for eDP 1.3 and earlier
         - Build warning fixes
         - Gem selftest fixes
         - Ensure wakeref is held before hardware access
      
        etnaviv:
         - MMU context vs runtime PM fix"
      
      * tag 'drm-fixes-2021-09-17' of git://anongit.freedesktop.org/drm/drm: (44 commits)
        drm/amdgpu/display: add a proper license to dc_link_dp.c
        drm/amd/display: Fix white screen page fault for gpuvm
        amd/display: enable panel orientation quirks
        drm/amdgpu: Demote TMZ unsupported log message from warning to info
        drm/amdgpu: Drop inline from amdgpu_ras_eeprom_max_record_count
        drm/amd/pm: fix runpm hang when amdgpu loaded prior to sound driver
        drm/radeon: pass drm dev radeon_agp_head_init directly
        drm/amdgpu: move iommu_resume before ip init/resume
        drm/amdgpu: add amdgpu_amdkfd_resume_iommu
        drm/amdkfd: separate kfd_iommu_resume from kfd_resume
        drm/amd/display: Link training retry fix for abort case
        drm/amd/display: Fix unstable HPCP compliance on Chrome Barcelo
        drm/amd/display: dsc mst 2 4K displays go dark with 2 lane HBR3
        drm/amd/display: Get backlight from PWM if DMCU is not initialized
        drm/amdkfd: make needs_pcie_atomics FW-version dependent
        drm/amdgpu: add manual sclk/vddc setting support for cyan skilfish(v3)
        drm/amdgpu: add some pptable funcs for cyan skilfish(v3)
        drm/amdgpu: update SMU driver interface for cyan skilfish(v3)
        drm/amdgpu: update SMU PPSMC for cyan skilfish
        drm/amdgpu: fix sysfs_emit/sysfs_emit_at warnings(v2)
        ...
      bdb575f8
    • Linus Torvalds's avatar
      Merge tag 'net-5.15-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net · fc0c0548
      Linus Torvalds authored
      Pull networking fixes from Jakub Kicinski:
       "Including fixes from bpf.
      
        Current release - regressions:
      
         - vhost_net: fix OoB on sendmsg() failure
      
         - mlx5: bridge, fix uninitialized variable usage
      
         - bnxt_en: fix error recovery regression
      
        Current release - new code bugs:
      
         - bpf, mm: fix lockdep warning triggered by stack_map_get_build_id_offset()
      
        Previous releases - regressions:
      
         - r6040: restore MDIO clock frequency after MAC reset
      
         - tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
      
         - dsa: flush switchdev workqueue before tearing down CPU/DSA ports
      
        Previous releases - always broken:
      
         - ptp: dp83640: don't define PAGE0, avoid compiler warning
      
         - igc: fix tunnel segmentation offloads
      
         - phylink: update SFP selected interface on advertising changes
      
         - stmmac: fix system hang caused by eee_ctrl_timer during suspend/resume
      
         - mlx5e: fix mutual exclusion between CQE compression and HW TS
      
        Misc:
      
         - bpf, cgroups: fix cgroup v2 fallback on v1/v2 mixed mode
      
         - sfc: fallback for lack of xdp tx queues
      
         - hns3: add option to turn off page pool feature"
      
      * tag 'net-5.15-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net: (67 commits)
        mlxbf_gige: clear valid_polarity upon open
        igc: fix tunnel offloading
        net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert
        net: wan: wanxl: define CROSS_COMPILE_M68K
        selftests: nci: replace unsigned int with int
        net: dsa: flush switchdev workqueue before tearing down CPU/DSA ports
        Revert "net: phy: Uniform PHY driver access"
        net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup
        ptp: dp83640: don't define PAGE0
        bnx2x: Fix enabling network interfaces without VFs
        Revert "Revert "ipv4: fix memory leaks in ip_cmsg_send() callers""
        tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
        net-caif: avoid user-triggerable WARN_ON(1)
        bpf, selftests: Add test case for mixed cgroup v1/v2
        bpf, selftests: Add cgroup v1 net_cls classid helpers
        bpf, cgroups: Fix cgroup v2 fallback on v1/v2 mixed mode
        bpf: Add oversize check before call kvcalloc()
        net: hns3: fix the timing issue of VF clearing interrupt sources
        net: hns3: fix the exception when query imp info
        net: hns3: disable mac in flr process
        ...
      fc0c0548
    • Dave Airlie's avatar
      Merge tag 'amd-drm-fixes-5.15-2021-09-16' of... · 109f7ea9
      Dave Airlie authored
      Merge tag 'amd-drm-fixes-5.15-2021-09-16' of https://gitlab.freedesktop.org/agd5f/linux
      
       into drm-fixes
      
      amd-drm-fixes-5.15-2021-09-16:
      
      amdgpu:
      - UBSAN fix
      - Powerplay table update fix
      - Fix use after free in BO moves
      - Debugfs init fixes
      - vblank workqueue fixes for headless devices
      - FPU fixes
      - sysfs_emit fixes
      - SMU updates for cyan skillfish
      - Backlight fixes when DMCU is not initialized
      - DP MST fixes
      - HDCP compliance fix
      - Link training fix
      - Runtime pm fix
      - Panel orientation fixes
      - Display GPUVM fix for yellow carp
      - Add missing license
      
      amdkfd:
      - Drop PCI atomics requirement if proper firmware is available
      - Suspend/resume fixes for IOMMUv2 cases
      
      radeon:
      - AGP fix
      
      Signed-off-by: default avatarDave Airlie <airlied@redhat.com>
      From: Alex Deucher <alexander.deucher@amd.com>
      Link: https://patchwork.freedesktop.org/patch/msgid/20210916140611.59816-1-alexander.deucher@amd.com
      109f7ea9
    • Dave Airlie's avatar
      Merge tag 'drm-intel-fixes-2021-09-16' of... · 11654b37
      Dave Airlie authored
      Merge tag 'drm-intel-fixes-2021-09-16' of ssh://git.freedesktop.org/git/drm/drm-intel
      
       into drm-fixes
      
      drm/i915 fixes for v5.15-rc2:
      - Propagate DP link training error returns
      - Use max link params for eDP 1.3 and earlier
      - Build warning fixes
      - Gem selftest fixes
      - Ensure wakeref is held before hardware access
      
      Signed-off-by: default avatarDave Airlie <airlied@redhat.com>
      From: Jani Nikula <jani.nikula@intel.com>
      Link: https://patchwork.freedesktop.org/patch/msgid/8735q4wsu7.fsf@intel.com
      11654b37
    • Guenter Roeck's avatar
      net: 6pack: Fix tx timeout and slot time · 3c0d2a46
      Guenter Roeck authored
      tx timeout and slot time are currently specified in units of HZ.  On
      Alpha, HZ is defined as 1024.  When building alpha:allmodconfig, this
      results in the following error message.
      
        drivers/net/hamradio/6pack.c: In function 'sixpack_open':
        drivers/net/hamradio/6pack.c:71:41: error:
        	unsigned conversion from 'int' to 'unsigned char'
        	changes value from '256' to '0'
      
      In the 6PACK protocol, tx timeout is specified in units of 10 ms and
      transmitted over the wire:
      
          https://www.linux-ax25.org/wiki/6PACK
      
      
      
      Defining a value dependent on HZ doesn't really make sense, and
      presumably comes from the (very historical) situation where HZ was
      originally 100.
      
      Note that the SIXP_SLOTTIME use explicitly is about 10ms granularity:
      
              mod_timer(&sp->tx_t, jiffies + ((when + 1) * HZ) / 100);
      
      and the SIXP_TXDELAY walue is sent as a byte over the wire.
      
      Signed-off-by: default avatarGuenter Roeck <linux@roeck-us.net>
      Signed-off-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
      3c0d2a46
    • Dave Airlie's avatar
      Merge branch 'etnaviv/fixes' of https://git.pengutronix.de/git/lst/linux into drm-fixes · da4ce47e
      Dave Airlie authored
      
      
      Fixes a very annoying issue where the driver view of the MMU state gets
      out of sync with the actual hardware state across a runtime PM cycle,
      so we end up restarting the GPU with the wrong (potentially already
      freed) MMU context. Hilarity ensues.
      
      Signed-off-by: default avatarDave Airlie <airlied@redhat.com>
      From: Lucas Stach <l.stach@pengutronix.de>
      Link: https://patchwork.freedesktop.org/patch/msgid/729a561b6cfed090457bcc856a9e14ed6209fe21.camel@pengutronix.de
      da4ce47e
    • Arnd Bergmann's avatar
      drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume __maybe_unused · 040b8907
      Arnd Bergmann authored
      With the new static annotation, the compiler warns when the functions
      are actually unused:
      
         drivers/gpu/drm/rockchip/cdn-dp-core.c:1123:12: error: 'cdn_dp_resume' defined but not used [-Werror=unused-function]
          1123 | static int cdn_dp_resume(struct device *dev)
               |            ^~~~~~~~~~~~~
      
      Mark them __maybe_unused to suppress that warning as well.
      
      [ Not so 'new' static annotations any more, and I removed the part of
        the patch that added __maybe_unused to cdn_dp_suspend(), because it's
        used by the shutdown/remove code.
      
        So only the resume function ends up possibly unused if CONFIG_PM isn't
        set     - Linus ]
      
      Fixes: 7c49abb4
      
       ("drm/rockchip: cdn-dp-core: Make cdn_dp_core_suspend/resume static")
      Signed-off-by: default avatarArnd Bergmann <arnd@arndb.de>
      Reviewed-by: default avatarEnric Balletbo i Serra <enric.balletbo@collabora.com>
      Signed-off-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
      040b8907
    • Guenter Roeck's avatar
      cpufreq: vexpress: Drop unused variable · b60cee5b
      Guenter Roeck authored
      arm:allmodconfig fails to build with the following error.
      
        drivers/cpufreq/vexpress-spc-cpufreq.c:454:13: error:
      					unused variable 'cur_cluster'
      
      Remove the unused variable.
      
      Fixes: bb8c26d9
      
       ("cpufreq: vexpress: Set CPUFREQ_IS_COOLING_DEV flag")
      Cc: Viresh Kumar <viresh.kumar@linaro.org>
      Signed-off-by: default avatarGuenter Roeck <linux@roeck-us.net>
      Reviewed-by: default avatarKees Cook <keescook@chromium.org>
      Signed-off-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
      b60cee5b
    • Guenter Roeck's avatar
      alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile · 35a3f4ef
      Guenter Roeck authored
      
      
      Some drivers pass a pointer to volatile data to virt_to_bus() and
      virt_to_phys(), and that works fine.  One exception is alpha.  This
      results in a number of compile errors such as
      
        drivers/net/wan/lmc/lmc_main.c: In function 'lmc_softreset':
        drivers/net/wan/lmc/lmc_main.c:1782:50: error:
      	passing argument 1 of 'virt_to_bus' discards 'volatile'
      	qualifier from pointer target type
      
        drivers/atm/ambassador.c: In function 'do_loader_command':
        drivers/atm/ambassador.c:1747:58: error:
      	passing argument 1 of 'virt_to_bus' discards 'volatile'
      	qualifier from pointer target type
      
      Declare the parameter of virt_to_phys and virt_to_bus as pointer to
      volatile to fix the problem.
      
      Signed-off-by: default avatarGuenter Roeck <linux@roeck-us.net>
      Acked-by: default avatarArnd Bergmann <arnd@arndb.de>
      Signed-off-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
      35a3f4ef
    • Linus Torvalds's avatar
      3com 3c515: make it compile on 64-bit architectures · db71f8fb
      Linus Torvalds authored
      
      
      This driver isn't enabled most places because of the ISA config
      dependency, but alpha still has it.  And I think the 'Jensen' actually
      did have an ISA slot.
      
      However, it doesn't build cleanly, because the "Vortex bus master" code
      just casts the skb->data pointer to 'int':
      
              outl((int) (skb->data), ioaddr + Wn7_MasterAddr);
      
      which is all kinds of broken.  Even on a good old traditional PC/AT it
      would be broken because the high bits will be random kernel address
      bits, but presumably the hardware ignores those bits.  I mean, it's ISA.
      We're talking 16MB dma limits. The "good old days".
      
      Make the build happy with this kind of craziness by using the proper
      isa_virt_to_bus() handling that the full bus master code uses anyway
      (the Vortex bus mastering is a limited special case).
      
      Who knows, this might even work.
      
      Reported-by: default avatarGuenter Roeck <linux@roeck-us.net>
      Signed-off-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
      db71f8fb
    • Linus Torvalds's avatar
      Merge tag 'for-5.15/parisc-4' of git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux · 5fe983d3
      Linus Torvalds authored
      Pull parisc fix from Helge Deller:
       "Fix a build warning when using the PAGE0 pointer"
      
      * tag 'for-5.15/parisc-4' of git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux:
        parisc: Use absolute_pointer() to define PAGE0
      5fe983d3
    • Linus Torvalds's avatar
      Merge tag 'm68k-for-v5.15-tag2' of git://git.kernel.org/pub/scm/linux/kernel/git/geert/linux-m68k · 077a6ccf
      Linus Torvalds authored
      Pull m68k fixes from Geert Uytterhoeven:
      
       - Warning fixes to mitigate CONFIG_WERROR=y
      
      * tag 'm68k-for-v5.15-tag2' of git://git.kernel.org/pub/scm/linux/kernel/git/geert/linux-m68k:
        m68k: mvme: Remove overdue #warnings in RTC handling
        m68k: Double cast io functions to unsigned long
      077a6ccf
    • Dan Li's avatar
      arm64: Mark __stack_chk_guard as __ro_after_init · 9fcb2e93
      Dan Li authored
      
      
      __stack_chk_guard is setup once while init stage and never changed
      after that.
      
      Although the modification of this variable at runtime will usually
      cause the kernel to crash (so does the attacker), it should be marked
      as __ro_after_init, and it should not affect performance if it is
      placed in the ro_after_init section.
      
      Signed-off-by: default avatarDan Li <ashimida@linux.alibaba.com>
      Acked-by: default avatarMark Rutland <mark.rutland@arm.com>
      Link: https://lore.kernel.org/r/1631612642-102881-1-git-send-email-ashimida@linux.alibaba.com
      
      
      Signed-off-by: default avatarCatalin Marinas <catalin.marinas@arm.com>
      9fcb2e93
    • Lv Ruyi's avatar
      arm64/kernel: remove duplicate include in process.c · 861dc4f5
      Lv Ruyi authored
      
      
      Remove all but the first include of linux/sched.h from process.c
      
      Reported-by: default avatarZeal Robot <zealci@zte.com.cn>
      Signed-off-by: default avatarLv Ruyi <lv.ruyi@zte.com.cn>
      Acked-by: default avatarMark Rutland <mark.rutland@arm.com>
      Link: https://lore.kernel.org/r/20210902011126.29828-1-lv.ruyi@zte.com.cn
      
      
      Signed-off-by: default avatarCatalin Marinas <catalin.marinas@arm.com>
      861dc4f5
    • Mark Brown's avatar
      arm64/sve: Use correct size when reinitialising SVE state · e35ac9d0
      Mark Brown authored
      When we need a buffer for SVE register state we call sve_alloc() to make
      sure that one is there. In order to avoid repeated allocations and frees
      we keep the buffer around unless we change vector length and just memset()
      it to ensure a clean register state. The function that deals with this
      takes the task to operate on as an argument, however in the case where we
      do a memset() we initialise using the SVE state size for the current task
      rather than the task passed as an argument.
      
      This is only an issue in the case where we are setting the register state
      for a task via ptrace and the task being configured has a different vector
      length to the task tracing it. In the case where the buffer is larger in
      the traced process we will leak old state from the traced process to
      itself, in the case where the buffer is smaller in the traced process we
      will overflow the buffer and corrupt memory.
      
      Fixes: bc0ee476
      
       ("arm64/sve: Core task context handling")
      Cc: <stable@vger.kernel.org> # 4.15.x
      Signed-off-by: default avatarMark Brown <broonie@kernel.org>
      Link: https://lore.kernel.org/r/20210909165356.10675-1-broonie@kernel.org
      
      
      Signed-off-by: default avatarCatalin Marinas <catalin.marinas@arm.com>
      e35ac9d0
  3. Sep 16, 2021