LKML Archive on lore.kernel.org
help / color / mirror / Atom feed
* [PATCH 5.15 000/923] 5.15.3-rc3 review
@ 2021-11-17 10:19 Greg Kroah-Hartman
  2021-11-17 13:37 ` Fox Chen
                   ` (7 more replies)
  0 siblings, 8 replies; 35+ messages in thread
From: Greg Kroah-Hartman @ 2021-11-17 10:19 UTC (permalink / raw)
  To: linux-kernel
  Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
	lkft-triage, pavel, jonathanh, f.fainelli, stable

This is the start of the stable review cycle for the 5.15.3 release.
There are 923 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Fri, 19 Nov 2021 10:14:52 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.3-rc3.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Linux 5.15.3-rc3

Hans de Goede <hdegoede@redhat.com>
    media: videobuf2-dma-sg: Fix buf->vb NULL pointer dereference

Sergey Senozhatsky <senozhatsky@chromium.org>
    media: videobuf2: always set buffer vb2 pointer

Borislav Petkov <bp@suse.de>
    x86/sev: Make the #VC exception stacks part of the default stacks storage

Tom Lendacky <thomas.lendacky@amd.com>
    x86/sev: Add an x86 version of cc_platform_has()

Tom Lendacky <thomas.lendacky@amd.com>
    arch/cc: Introduce a function to check for confidential computing features

Andrii Nakryiko <andrii@kernel.org>
    selftests/bpf: Fix also no-alu32 strobemeta selftest

Borislav Petkov <bp@suse.de>
    selftests/x86/iopl: Adjust to the faked iopl CLI/STI usage

Colin Ian King <colin.king@canonical.com>
    mmc: moxart: Fix null pointer dereference on pointer host

Arnd Bergmann <arnd@arndb.de>
    ath10k: fix invalid dma_addr_t token assignment

Paulo Alcantara <pc@cjr.nz>
    cifs: fix memory leak of smb3_fs_context_dup::server_hostname

Hans Verkuil <hverkuil-cisco@xs4all.nl>
    media: vidtv: move kfree(dvb) to vidtv_bridge_dev_release()

Mario Limonciello <mario.limonciello@amd.com>
    drm/amd/display: Look at firmware version to determine using dmub on dcn21

Trond Myklebust <trond.myklebust@hammerspace.com>
    SUNRPC: Partial revert of commit 6f9f17287e78

Pali Rohár <pali@kernel.org>
    PCI: aardvark: Fix PCIe Max Payload Size setting

Pali Rohár <pali@kernel.org>
    PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros

Jernej Skrabec <jernej.skrabec@gmail.com>
    drm/sun4i: Fix macros in sun8i_csc.h

Xiaoming Ni <nixiaoming@huawei.com>
    powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n

Nathan Lynch <nathanl@linux.ibm.com>
    powerpc/pseries/mobility: ignore ibm, platform-facilities updates

Nicholas Piggin <npiggin@gmail.com>
    powerpc/64s/interrupt: Fix check_return_regs_valid() false positive

Russell Currey <ruscur@russell.cc>
    powerpc/security: Use a mutex for interrupt exit code patching

Vasant Hegde <hegdevasant@linux.vnet.ibm.com>
    powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload

Nicholas Piggin <npiggin@gmail.com>
    powerpc/32e: Ignore ESR in instruction storage interrupt handler

Hari Bathini <hbathini@linux.ibm.com>
    powerpc/bpf: Fix write protecting JIT code

Gustavo A. R. Silva <gustavoars@kernel.org>
    powerpc/vas: Fix potential NULL pointer dereference

Miquel Raynal <miquel.raynal@bootlin.com>
    mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines

Miquel Raynal <miquel.raynal@bootlin.com>
    mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines

Miquel Raynal <miquel.raynal@bootlin.com>
    mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines

Miquel Raynal <miquel.raynal@bootlin.com>
    mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines

Miquel Raynal <miquel.raynal@bootlin.com>
    mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines

Miquel Raynal <miquel.raynal@bootlin.com>
    mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines

Miquel Raynal <miquel.raynal@bootlin.com>
    mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines

Miquel Raynal <miquel.raynal@bootlin.com>
    mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines

Miquel Raynal <miquel.raynal@bootlin.com>
    mtd: rawnand: fsmc: Fix use of SM ORDER

Dong Aisheng <aisheng.dong@nxp.com>
    remoteproc: imx_rproc: Fix rsc-table name

Dong Aisheng <aisheng.dong@nxp.com>
    remoteproc: imx_rproc: Fix ignoring mapping vdev regions

Dong Aisheng <aisheng.dong@nxp.com>
    remoteproc: Fix the wrong default value of is_iomem

Peng Fan <peng.fan@nxp.com>
    remoteproc: elf_loader: Fix loading segment when is_iomem true

Halil Pasic <pasic@linux.ibm.com>
    s390/cio: make ccw_device_dma_* more robust

Harald Freudenberger <freude@linux.ibm.com>
    s390/ap: Fix hanging ioctl caused by orphaned replies

Sven Schnelle <svens@linux.ibm.com>
    s390/tape: fix timer initialization in tape_std_assign()

Vineeth Vijayan <vneethv@linux.ibm.com>
    s390/cio: check the subchannel validity for dev_busid

Thomas Richter <tmricht@linux.ibm.com>
    s390/cpumf: cpum_cf PMU displays invalid value after hotplug remove

Rafael J. Wysocki <rafael.j.wysocki@intel.com>
    PM: sleep: Avoid calling put_device() under dpm_list_mtx

Coly Li <colyli@suse.de>
    bcache: Revert "bcache: use bvec_virt"

Coly Li <colyli@suse.de>
    bcache: fix use-after-free problem in bcache_device_free()

Marek Vasut <marex@denx.de>
    video: backlight: Drop maximum brightness override for brightness zero

Jack Andersen <jackoalan@gmail.com>
    mfd: dln2: Add cell for initializing DLN2 ADC

Rongwei Wang <rongwei.wang@linux.alibaba.com>
    mm, thp: fix incorrect unmap behavior for private pages

Rongwei Wang <rongwei.wang@linux.alibaba.com>
    mm, thp: lock filemap when truncating page cache

Michal Hocko <mhocko@suse.com>
    mm, oom: do not trigger out_of_memory from the #PF

Vasily Averin <vvs@virtuozzo.com>
    mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks

Vasily Averin <vvs@virtuozzo.com>
    memcg: prohibit unconditional exceeding the limit of dying tasks

Matthew Wilcox (Oracle) <willy@infradead.org>
    mm/filemap.c: remove bogus VM_BUG_ON

Dominique Martinet <asmadeus@codewreck.org>
    9p/net: fix missing error check in p9_check_errors

Daniel Borkmann <daniel@iogearbox.net>
    net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE

Anatolij Gustschin <agust@denx.de>
    dmaengine: bestcomm: fix system boot lockups

Kishon Vijay Abraham I <kishon@ti.com>
    dmaengine: ti: k3-udma: Set r/tchan or rflow to NULL if request fail

Kishon Vijay Abraham I <kishon@ti.com>
    dmaengine: ti: k3-udma: Set bchan to NULL if a channel request fail

Namjae Jeon <linkinjeon@kernel.org>
    ksmbd: don't need 8byte alignment for request length in ksmbd_check_message

Marios Makassikis <mmakassikis@freebox.fr>
    ksmbd: Fix buffer length check in fsctl_validate_negotiate_info()

Shin'ichiro Kawasaki <shinichiro.kawasaki@wdc.com>
    block: Hold invalidate_lock in BLKRESETZONE ioctl

Shin'ichiro Kawasaki <shinichiro.kawasaki@wdc.com>
    block: Hold invalidate_lock in BLKZEROOUT ioctl

Shin'ichiro Kawasaki <shinichiro.kawasaki@wdc.com>
    block: Hold invalidate_lock in BLKDISCARD ioctl

Matthew Brost <matthew.brost@intel.com>
    drm/i915/guc: Fix blocked context accounting

Gao Xiang <hsiangkao@linux.alibaba.com>
    erofs: fix unsafe pagevec reuse of hooked pclusters

Xiubo Li <xiubli@redhat.com>
    ceph: fix mdsmap decode when there are MDS's beyond max_mds

Dongliang Mu <mudongliangabcd@gmail.com>
    f2fs: fix UAF in f2fs_available_free_memory

Daeho Jeong <daehojeong@google.com>
    f2fs: include non-compressed blocks in compr_written_block

Jaegeuk Kim <jaegeuk@kernel.org>
    f2fs: should use GFP_NOFS for directory inodes

Guo Ren <guoren@linux.alibaba.com>
    irqchip/sifive-plic: Fixup EOI failed when masked

Michael Pratt <mpratt@google.com>
    posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()

Paolo Bonzini <pbonzini@redhat.com>
    KVM: x86: move guest_pv_has out of user_access section

Thomas Gleixner <tglx@linutronix.de>
    PCI/MSI: Destroy sysfs before freeing entries

Thomas Gleixner <tglx@linutronix.de>
    PCI/MSI: Move non-mask check back into low level accessors

Dave Jones <davej@codemonkey.org.uk>
    x86/mce: Add errata workaround for Skylake SKX37

Maciej W. Rozycki <macro@orcam.me.uk>
    MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL

Masahiro Yamada <masahiroy@kernel.org>
    MIPS: fix *-pkg builds for loongson2ef platform

Masahiro Yamada <masahiroy@kernel.org>
    MIPS: fix duplicated slashes for Platform file path

John David Anglin <dave.anglin@bell.net>
    parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page

Helge Deller <deller@gmx.de>
    parisc: Fix backtrace to always include init funtion names

Arnd Bergmann <arnd@arndb.de>
    ARM: 9156/1: drop cc-option fallbacks for architecture selection

Michał Mirosław <mirq-linux@rere.qmqm.pl>
    ARM: 9155/1: fix early early_iounmap()

Steve French <stfrench@microsoft.com>
    smb3: do not error on fsync when readonly

Linus Torvalds <torvalds@linux-foundation.org>
    thermal: int340x: fix build on 32-bit targets

Willem de Bruijn <willemb@google.com>
    selftests/net: udpgso_bench_rx: fix port argument

Rahul Lakkireddy <rahul.lakkireddy@chelsio.com>
    cxgb4: fix eeprom len when diagnostics not implemented

Dust Li <dust.li@linux.alibaba.com>
    net/smc: fix sk_refcnt underflow on linkdown and fallback

Eiichi Tsukata <eiichi.tsukata@nutanix.com>
    vsock: prevent unnecessary refcnt inc for nonblocking connect

Marek Behún <kabel@kernel.org>
    net: marvell: mvpp2: Fix wrong SerDes reconfiguration order

Christophe JAILLET <christophe.jaillet@wanadoo.fr>
    net: ethernet: ti: cpsw_ale: Fix access to un-initialized memory

Vladimir Oltean <vladimir.oltean@nxp.com>
    net: stmmac: allow a tc-taprio base-time of zero

Guangbin Huang <huangguangbin2@huawei.com>
    net: hns3: allow configure ETS bandwidth of all TCs

Yufeng Mo <moyufeng@huawei.com>
    net: hns3: fix kernel crash when unload VF while it is being reset

Jie Wang <wangjie125@huawei.com>
    net: hns3: fix pfc packet number incorrect after querying pfc parameters

Jie Wang <wangjie125@huawei.com>
    net: hns3: fix ROCE base interrupt vector initialization bug

Eric Dumazet <edumazet@google.com>
    net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any

Marek Behún <kabel@kernel.org>
    net: dsa: mv88e6xxx: Don't support >1G speeds on 6191X on ports other than 10

Evan Quan <evan.quan@amd.com>
    drm/amdgpu: fix uvd crash on Polaris12 during driver unloading

Muchun Song <songmuchun@bytedance.com>
    seq_file: fix passing wrong private data

Andrew Halaney <ahalaney@redhat.com>
    init: make unknown command line param message clearer

Imre Deak <imre.deak@intel.com>
    drm/i915/fb: Fix rounding error in subsampled plane size calculation

Dan Carpenter <dan.carpenter@oracle.com>
    gve: Fix off by one in gve_tx_timeout()

Arnd Bergmann <arnd@arndb.de>
    dmaengine: stm32-dma: avoid 64-bit division in stm32_dma_get_max_width

Amelie Delaunay <amelie.delaunay@foss.st.com>
    dmaengine: stm32-dma: fix burst in case of unaligned memory address

Jussi Maki <joamaki@gmail.com>
    bpf, sockmap: sk_skb data_end access incorrect when src_reg = dst_reg

John Fastabend <john.fastabend@gmail.com>
    bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding

John Fastabend <john.fastabend@gmail.com>
    bpf, sockmap: Fix race in ingress receive verdict with redirect to self

John Fastabend <john.fastabend@gmail.com>
    bpf, sockmap: Remove unhash handler for BPF sockmap usage

Arnd Bergmann <arnd@arndb.de>
    arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions

Reiji Watanabe <reijiw@google.com>
    arm64: arm64_ftr_reg->name may not be a human-readable string

Christophe JAILLET <christophe.jaillet@wanadoo.fr>
    litex_liteeth: Fix a double free in the remove function

Chengfeng Ye <cyeaa@connect.ust.hk>
    nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails

Eric Dumazet <edumazet@google.com>
    llc: fix out-of-bound array index in llc_sk_dev_hash()

Ian Rogers <irogers@google.com>
    perf bpf: Add missing free to bpf_event__print_bpf_prog_info()

Dan Carpenter <dan.carpenter@oracle.com>
    zram: off by one in read_block_state()

Miaohe Lin <linmiaohe@huawei.com>
    mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()

Marc Kleine-Budde <mkl@pengutronix.de>
    can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for mcp251xfd_chip_rx_int_enable()

Vincent Mailhol <mailhol.vincent@wanadoo.fr>
    can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path

Alex Deucher <alexander.deucher@amd.com>
    drm/amdgpu/powerplay: fix sysfs_emit/sysfs_emit_at handling

Fabio Estevam <festevam@gmail.com>
    Revert "drm/imx: Annotate dma-fence critical section in commit path"

Arnd Bergmann <arnd@arndb.de>
    drm: fb_helper: improve CONFIG_FB dependency

Hangbin Liu <liuhangbin@gmail.com>
    selftests/bpf/xdp_redirect_multi: Limit the tests in netns

Hangbin Liu <liuhangbin@gmail.com>
    selftests/bpf/xdp_redirect_multi: Give tcpdump a chance to terminate cleanly

Hangbin Liu <liuhangbin@gmail.com>
    selftests/bpf/xdp_redirect_multi: Use arping to accurate the arp number

Hangbin Liu <liuhangbin@gmail.com>
    selftests/bpf/xdp_redirect_multi: Put the logs to tmp folder

Mehrdad Arshad Rad <arshad.rad@gmail.com>
    libbpf: Fix lookup_and_delete_elem_flags error reporting

Rafael J. Wysocki <rafael.j.wysocki@intel.com>
    ACPI: PM: Fix device wakeup power reference counting error

Kai Song <songkai01@inspur.com>
    mfd: altera-sysmgr: Fix a mistake caused by resource_size conversion

Mark Brown <broonie@kernel.org>
    mfd: sprd: Add SPI device ID table

Mark Brown <broonie@kernel.org>
    mfd: cpcap: Add SPI device ID table

Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
    mfd: core: Add missing of_node_put for loop iteration

Takashi Iwai <tiwai@suse.de>
    ALSA: memalloc: Catch call with NULL snd_dma_buffer pointer

Arnd Bergmann <arnd@arndb.de>
    octeontx2-pf: select CONFIG_NET_DEVLINK

Huang Guobin <huangguobin4@huawei.com>
    bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed

Jason Gunthorpe <jgg@ziepe.ca>
    drm/ttm: remove ttm_bo_vm_insert_huge()

Luis Chamberlain <mcgrof@kernel.org>
    block: fix device_add_disk() kobject_create_and_add() error handling

Heiner Kallweit <hkallweit1@gmail.com>
    net: phy: fix duplex out of sync problem while changing settings

Rafael J. Wysocki <rafael.j.wysocki@intel.com>
    cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline

Selvin Xavier <selvin.xavier@broadcom.com>
    PCI: Do not enable AtomicOps on VFs

Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
    ataflop: remove ataflop_probe_lock mutex

Luis Chamberlain <mcgrof@kernel.org>
    block/ataflop: provide a helper for cleanup up an atari disk

Luis Chamberlain <mcgrof@kernel.org>
    block/ataflop: add registration bool before calling del_gendisk()

Luis Chamberlain <mcgrof@kernel.org>
    block/ataflop: use the blk_cleanup_disk() helper

Luis Chamberlain <mcgrof@kernel.org>
    nvdimm/pmem: cleanup the disk if pmem_release_disk() is yet assigned

Chenyuan Mi <cymi20@fudan.edu.cn>
    drm/nouveau/svm: Fix refcount leak bug and missing check against null bug

Andrea Righi <andrea.righi@canonical.com>
    selftests: net: properly support IPv6 in GSO GRE test

Avri Altman <avri.altman@wdc.com>
    scsi: ufs: ufshpb: Properly handle max-single-cmd

Bean Huo <beanhuo@micron.com>
    scsi: ufs: core: Fix NULL pointer dereference

Daejun Park <daejun7.park@samsung.com>
    scsi: ufs: ufshpb: Use proper power management API

Jackie Liu <liuyun01@kylinos.cn>
    scsi: bsg: Fix errno when scsi_bsg_register_queue() fails

Luis Chamberlain <mcgrof@kernel.org>
    nvdimm/btt: do not call del_gendisk() if not needed

Christophe JAILLET <christophe.jaillet@wanadoo.fr>
    PCI: j721e: Fix j721e_pcie_probe() error path

Hans de Goede <hdegoede@redhat.com>
    ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses

Daniel Thompson <daniel.thompson@linaro.org>
    kdb: Adopt scheduler's task classification

Brett Creeley <brett.creeley@intel.com>
    ice: Fix not stopping Tx queues for VFs

Sylwester Dziedziuch <sylwesterx.dziedziuch@intel.com>
    ice: Fix replacing VF hardware MAC to existing MAC filter

Vladimir Oltean <vladimir.oltean@nxp.com>
    net: dsa: felix: fix broken VLAN-tagged PTP under VLAN-aware bridge

Ziyang Xuan <william.xuanziyang@huawei.com>
    net: vlan: fix a UAF in vlan_dev_real_dev()

Stafford Horne <shorne@gmail.com>
    openrisc: fix SMP tlb flush NULL pointer dereference

Jakub Kicinski <kuba@kernel.org>
    ethtool: fix ethtool msg len calculation for pause stats

Hangbin Liu <liuhangbin@gmail.com>
    kselftests/net: add missed toeplitz.sh/toeplitz_client.sh to Makefile

Hangbin Liu <liuhangbin@gmail.com>
    kselftests/net: add missed vrf_strict_mode_test.sh test to Makefile

Hangbin Liu <liuhangbin@gmail.com>
    kselftests/net: add missed SRv6 tests

Hangbin Liu <liuhangbin@gmail.com>
    kselftests/net: add missed setup_loopback.sh/setup_veth.sh to Makefile

Hangbin Liu <liuhangbin@gmail.com>
    kselftests/net: add missed icmp.sh test to Makefile

Maxim Kiselev <bigunclemax@gmail.com>
    net: davinci_emac: Fix interrupt pacing disable

Beld Zhang <beldzhang@gmail.com>
    io-wq: fix max-workers not correctly set on multi-node system

Yu Kuai <yukuai3@huawei.com>
    nbd: fix possible overflow for 'first_minor' in nbd_dev_add()

Yu Kuai <yukuai3@huawei.com>
    nbd: fix max value for 'first_minor'

YueHaibing <yuehaibing@huawei.com>
    xen-pciback: Fix return in pm_ctrl_init()

Sander Vanheule <sander@svanheule.net>
    gpio: realtek-otto: fix GPIO line IRQ offset

Christophe JAILLET <christophe.jaillet@wanadoo.fr>
    i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'

Dave Jiang <dave.jiang@intel.com>
    dmaengine: idxd: fix resource leak on dmaengine driver disable

Trond Myklebust <trond.myklebust@hammerspace.com>
    NFSv4: Fix a regression in nfs_set_open_stateid_locked()

Quinn Tran <qutran@marvell.com>
    scsi: qla2xxx: edif: Fix EDIF bsg

Quinn Tran <qutran@marvell.com>
    scsi: qla2xxx: edif: Increase ELS payload

Quinn Tran <qutran@marvell.com>
    scsi: qla2xxx: edif: Flush stale events and msgs on session down

Quinn Tran <qutran@marvell.com>
    scsi: qla2xxx: edif: Fix app start delay

Quinn Tran <qutran@marvell.com>
    scsi: qla2xxx: edif: Fix app start fail

Quinn Tran <qutran@marvell.com>
    scsi: qla2xxx: Turn off target reset during issue_lip

Quinn Tran <qutran@marvell.com>
    scsi: qla2xxx: Fix gnl list corruption

Quinn Tran <qutran@marvell.com>
    scsi: qla2xxx: Relogin during fabric disturbance

Dmitry Bogdanov <d.bogdanov@yadro.com>
    scsi: target: core: Remove from tmr_list during LUN unlink

Jackie Liu <liuyun01@kylinos.cn>
    ar7: fix kernel builds for compiler test

Ahmad Fatoum <a.fatoum@pengutronix.de>
    watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT

Randy Dunlap <rdunlap@infradead.org>
    m68k: set a default value for MEMORY_RESERVE

Eric W. Biederman <ebiederm@xmission.com>
    signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)

Dave Jiang <dave.jiang@intel.com>
    dmaengine: idxd: reconfig device after device reset command

Dave Jiang <dave.jiang@intel.com>
    dmanegine: idxd: fix resource free ordering on driver removal

Dongliang Mu <mudongliangabcd@gmail.com>
    dmaengine: tegra210-adma: fix pm runtime unbalance

Lars-Peter Clausen <lars@metafoo.de>
    dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`

Florian Westphal <fw@strlen.de>
    netfilter: nfnetlink_queue: fix OOB when mac header was cleared

Robert-Ionut Alexa <robert-ionut.alexa@nxp.com>
    soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read

Geert Uytterhoeven <geert@linux-m68k.org>
    auxdisplay: ht16k33: Fix frame buffer device blanking

Geert Uytterhoeven <geert@linux-m68k.org>
    auxdisplay: ht16k33: Connect backlight to fbdev

Geert Uytterhoeven <geert@linux-m68k.org>
    auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string

Alexey Gladkov <legion@kernel.org>
    Fix user namespace leak

Trond Myklebust <trond.myklebust@hammerspace.com>
    NFS: Fix an Oops in pnfs_mark_request_commit()

Trond Myklebust <trond.myklebust@hammerspace.com>
    NFS: Fix up commit deadlocks

Amelie Delaunay <amelie.delaunay@foss.st.com>
    dmaengine: stm32-dma: fix stm32_dma_get_max_width

Claudiu Beznea <claudiu.beznea@microchip.com>
    dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro

Claudiu Beznea <claudiu.beznea@microchip.com>
    dmaengine: at_xdmac: call at_xdmac_axi_config() on resume path

Dan Carpenter <dan.carpenter@oracle.com>
    rtc: rv3032: fix error handling in rv3032_clkout_set_rate()

Christophe JAILLET <christophe.jaillet@wanadoo.fr>
    remoteproc: Fix a memory leak in an error handling path in 'rproc_handle_vdev()'

Zev Weiss <zev@bewilderbeest.net>
    mtd: core: don't remove debugfs directory if device is in use

Miquel Raynal <miquel.raynal@bootlin.com>
    mtd: rawnand: arasan: Prevent an unsupported configuration

Kunihiko Hayashi <hayashi.kunihiko@socionext.com>
    PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation

Evgeny Novikov <novikov@ispras.ru>
    mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()

Guido Günther <agx@sigxcpu.org>
    drm/bridge: nwl-dsi: Add atomic_get_input_bus_fmts

John Keeping <john@metanate.com>
    Input: st1232 - increase "wait ready" timeout

Jia-Ju Bai <baijiaju1990@gmail.com>
    fs: orangefs: fix error return code of orangefs_revalidate_lookup()

Kees Cook <keescook@chromium.org>
    sparc: Add missing "FORCE" target when using if_changed

Trond Myklebust <trond.myklebust@hammerspace.com>
    NFS: Fix deadlocks in nfs_scan_commit_list()

YueHaibing <yuehaibing@huawei.com>
    opp: Fix return in _opp_add_static_v2()

Pali Rohár <pali@kernel.org>
    PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge

Marek Behún <kabel@kernel.org>
    PCI: aardvark: Don't spam about PIO Response Status

Alex Xu (Hello71) <alex_y_xu@yahoo.ca>
    drm/plane-helper: fix uninitialized variable reference

Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
    drm/bridge/lontium-lt9611uxc: fix provided connector suport

Baptiste Lepers <baptiste.lepers@gmail.com>
    pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds

Trond Myklebust <trond.myklebust@hammerspace.com>
    NFS: Fix dentry verifier races

Trond Myklebust <trond.myklebust@hammerspace.com>
    NFS: Ignore the directory size when marking for revalidation

Trond Myklebust <trond.myklebust@hammerspace.com>
    NFS: Don't set NFS_INO_DATA_INVAL_DEFER and NFS_INO_INVALID_DATA

Trond Myklebust <trond.myklebust@hammerspace.com>
    NFS: Default change_attr_type to NFS4_CHANGE_TYPE_IS_UNDEFINED

Kewei Xu <kewei.xu@mediatek.com>
    i2c: mediatek: fixing the incorrect register offset

Mark Brown <broonie@kernel.org>
    Input: ariel-pwrbutton - add SPI device ID table

Mark Brown <broonie@kernel.org>
    rtc: mcp795: Add SPI ID table

Dave Jiang <dave.jiang@intel.com>
    dmaengine: idxd: move out percpu_ref_exit() to ensure it's outside submission

Heiner Kallweit <hkallweit1@gmail.com>
    i2c: i801: Use PCI bus rescan mutex to protect P2SB access

Dong Aisheng <aisheng.dong@nxp.com>
    remoteproc: imx_rproc: Fix TCM io memory type

Mark Brown <broonie@kernel.org>
    rtc: pcf2123: Add SPI ID table

Mark Brown <broonie@kernel.org>
    rtc: ds1390: Add SPI ID table

Mark Brown <broonie@kernel.org>
    rtc: ds1302: Add SPI ID table

J. Bruce Fields <bfields@redhat.com>
    nfsd: don't alloc under spinlock in rpc_parse_scope_id

Evgeny Novikov <novikov@ispras.ru>
    mtd: rawnand: intel: Fix potential buffer overflow in probe

Arnaud Pouliquen <arnaud.pouliquen@foss.st.com>
    rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined

Tom Rix <trix@redhat.com>
    apparmor: fix error check

Aharon Landau <aharonl@nvidia.com>
    RDMA/core: Require the driver to set the IOVA correctly during rereg_mr

Hans de Goede <hdegoede@redhat.com>
    power: supply: bq27xxx: Fix kernel crash on IRQ handler register error

Geert Uytterhoeven <geert+renesas@glider.be>
    mips: cm: Convert to bitfield API to fix out-of-bounds access

Parav Pandit <parav@nvidia.com>
    vdpa/mlx5: Fix clearing of VIRTIO_NET_F_MAC feature bit

Xuan Zhuo <xuanzhuo@linux.alibaba.com>
    virtio_ring: check desc == NULL when using indirect with packed

Geert Uytterhoeven <geert@linux-m68k.org>
    serial: cpm_uart: Protect udbg definitions by CONFIG_SERIAL_CPM_CONSOLE

Christophe JAILLET <christophe.jaillet@wanadoo.fr>
    ASoC: rsnd: Fix an error handling path in 'rsnd_node_count()'

Yixing Liu <liuyixing1@huawei.com>
    RDMA/hns: Modify the value of MAX_LP_MSG_LEN to meet hardware compatibility

Haoyue Xu <xuhaoyue1@hisilicon.com>
    RDMA/hns: Fix initial arm_st of CQ

Richard Fitzgerald <rf@opensource.cirrus.com>
    ASoC: cs42l42: Correct configuring of switch inversion from ts-inv

Christophe Leroy <christophe.leroy@csgroup.eu>
    powerpc: Don't provide __kernel_map_pages() without ARCH_SUPPORTS_DEBUG_PAGEALLOC

Logan Gunthorpe <logang@deltatee.com>
    iommu/dma: Fix incorrect error return on iommu deferred attach

Takashi Sakamoto <o-takashi@sakamocchi.jp>
    ALSA: oxfw: fix functional regression for Mackie Onyx 1640i in v5.14 or later

Denis Kirjanov <kda@linux-powerpc.org>
    powerpc/xmon: fix task state output

Bixuan Cui <cuibixuan@linux.alibaba.com>
    powerpc/44x/fsp2: add missing of_node_put

Christophe Leroy <christophe.leroy@csgroup.eu>
    powerpc/book3e: Fix set_memory_x() and set_memory_nx()

Christophe Leroy <christophe.leroy@csgroup.eu>
    powerpc/nohash: Fix __ptep_set_access_flags() and ptep_set_wrprotect()

Andrej Shadura <andrew.shadura@collabora.co.uk>
    HID: u2fzero: properly handle timeouts in usb_submit_urb

Andrej Shadura <andrew.shadura@collabora.co.uk>
    HID: u2fzero: clarify error check and length calculations

Claudiu Beznea <claudiu.beznea@microchip.com>
    clk: at91: clk-master: fix prescaler logic

Claudiu Beznea <claudiu.beznea@microchip.com>
    clk: at91: clk-master: check if div or pres is zero

Claudiu Beznea <claudiu.beznea@microchip.com>
    clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL

Anssi Hannula <anssi.hannula@bitwise.fi>
    serial: xilinx_uartps: Fix race condition causing stuck TX

Yang Yingliang <yangyingliang@huawei.com>
    phy: Sparx5 Eth SerDes: Fix return value check in sparx5_serdes_probe()

Sandeep Maheswaram <quic_c_sanm@quicinc.com>
    phy: qcom-snps: Correct the FSEL_MASK

Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
    phy: qcom-qmp: another fix for the sc8180x PCIe definition

Dan Carpenter <dan.carpenter@oracle.com>
    phy: ti: gmii-sel: check of_get_address() for failure

Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
    phy: qcom-qusb2: Fix a memory leak on probe

Mark Brown <broonie@kernel.org>
    ASoC: topology: Fix stub for snd_soc_tplg_component_remove()

Rahul Tanwar <rtanwar@maxlinear.com>
    pinctrl: equilibrium: Fix function addition in multiple groups

Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org>
    arm64: dts: qcom: sdm845: Fix Qualcomm crypto engine bus clock

Bhupesh Sharma <bhupesh.sharma@linaro.org>
    arm64: dts: qcom: sdm845: Use RPMH_CE_CLK macro directly

Marijn Suijten <marijn.suijten@somainline.org>
    arm64: dts: qcom: pmi8994: Fix "eternal"->"external" typo in WLED node

Wan Jiabing <wanjiabing@vivo.com>
    soc: qcom: apr: Add of_node_put() before return

Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
    soc: qcom: rpmhpd: fix sm8350_mxc's peer domain

Guru Das Srinagesh <quic_gurus@quicinc.com>
    firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()

Jack Pham <jackp@codeaurora.org>
    usb: dwc3: gadget: Skip resizing EP's TX FIFO if already resized

Christophe Leroy <christophe.leroy@csgroup.eu>
    powerpc/booke: Disable STRICT_KERNEL_RWX, DEBUG_PAGEALLOC and KFENCE

Amelie Delaunay <amelie.delaunay@foss.st.com>
    usb: dwc2: drd: reset current session before setting the new one

Amelie Delaunay <amelie.delaunay@foss.st.com>
    usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled

Amelie Delaunay <amelie.delaunay@foss.st.com>
    usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init

Stefan Agner <stefan@agner.ch>
    serial: imx: fix detach/attach of serial console

James Smart <jsmart2021@gmail.com>
    scsi: lpfc: Wait for successful restart of SLI3 adapter during host sg_reset

Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
    scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer

Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
    soundwire: bus: stop dereferencing invalid slave pointer

Nuno Sá <nuno.sa@analog.com>
    iio: adis: do not disabe IRQs in 'adis_init()'

Randy Dunlap <rdunlap@infradead.org>
    usb: typec: STUSB160X should select REGMAP_I2C

Yang Yingliang <yangyingliang@huawei.com>
    iio: buffer: Fix double-free in iio_buffers_alloc_sysfs_and_mask()

Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
    soc: qcom: socinfo: add two missing PMIC IDs

Bjorn Andersson <bjorn.andersson@linaro.org>
    soc: qcom: rpmhpd: Make power_on actually enable the domain

Richard Fitzgerald <rf@opensource.cirrus.com>
    ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER

Richard Fitzgerald <rf@opensource.cirrus.com>
    ASoC: cs42l42: Correct some register default values

Richard Fitzgerald <rf@opensource.cirrus.com>
    ASoC: cs42l42: Always configure both ASP TX channels

Olivier Moysan <olivier.moysan@foss.st.com>
    ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15

Olivier Moysan <olivier.moysan@foss.st.com>
    ARM: dts: stm32: fix SAI sub nodes register range

Fabrice Gasnier <fabrice.gasnier@foss.st.com>
    ARM: dts: stm32: fix STUSB1600 Type-C irq level on stm32mp15xx-dkx

Marek Vasut <marex@denx.de>
    ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz

Geert Uytterhoeven <geert+renesas@glider.be>
    pinctrl: renesas: checker: Fix off-by-one bug in drive register check

Athira Rajeev <atrajeev@linux.vnet.ibm.cm>
    powerpc/perf: Fix cycles/instructions as PM_CYC/PM_INST_CMPL in power10

Andrew Halaney <ahalaney@redhat.com>
    dyndbg: make dyndbg a known cli param

Logan Gunthorpe <logang@deltatee.com>
    RDMA/core: Set sgtable nents when using ib_dma_virt_map_sg()

Vegard Nossum <vegard.nossum@oracle.com>
    staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC

Nikita Yushchenko <nikita.yoush@cogentembedded.com>
    staging: most: dim2: do not double-register the same device

Randy Dunlap <rdunlap@infradead.org>
    usb: musb: select GENERIC_PHY instead of depending on it

Leon Romanovsky <leon@kernel.org>
    RDMA/mlx4: Return missed an error if device doesn't support steering

Dan Carpenter <dan.carpenter@oracle.com>
    scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()

Yang Yingliang <yangyingliang@huawei.com>
    power: supply: max17040: fix null-ptr-deref in max17040_probe()

Jakob Hauser <jahau@rocketmail.com>
    power: supply: rt5033_battery: Change voltage values to µV

Dan Carpenter <dan.carpenter@oracle.com>
    usb: gadget: hid: fix error code in do_config()

Andy Shevchenko <andriy.shevchenko@linux.intel.com>
    serial: 8250_dw: Drop wrong use of ACPI_PTR()

Nathan Lynch <nathanl@linux.ibm.com>
    powerpc/paravirt: correct preempt debug splat in vcpu_is_preempted()

Nathan Lynch <nathanl@linux.ibm.com>
    powerpc: fix unbalanced node refcount in check_kvm_guest()

Christophe Leroy <christophe.leroy@csgroup.eu>
    video: fbdev: chipsfb: use memset_io() instead of memset()

Christophe Leroy <christophe.leroy@csgroup.eu>
    powerpc/mem: Fix arch/powerpc/mm/mem.c:53:12: error: no previous prototype for 'create_section_mapping'

Clément Léger <clement.leger@bootlin.com>
    clk: at91: check pmc node status before registering syscore ops

Dongliang Mu <mudongliangabcd@gmail.com>
    memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe

Christophe JAILLET <christophe.jaillet@wanadoo.fr>
    soc/tegra: Fix an error handling path in tegra_powergate_power_up()

Mark Brown <broonie@kernel.org>
    iio: st_pressure_spi: Add missing entries SPI to device ID table

Ranjani Sridharan <ranjani.sridharan@linux.intel.com>
    ASoC: SOF: topology: do not power down primary core during topology removal

Andreas Kemnade <andreas@kemnade.info>
    arm: dts: omap3-gta04a4: accelerometer irq fix

Yang Yingliang <yangyingliang@huawei.com>
    driver core: Fix possible memory leak in device_link_add()

Igor Pylypiv <ipylypiv@google.com>
    scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()

Sumit Saxena <sumit.saxena@broadcom.com>
    scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and real interrupt

Bart Van Assche <bvanassche@google.com>
    scsi: ufs: core: Stop clearing UNIT ATTENTIONS

Bean Huo <beanhuo@micron.com>
    scsi: ufs: core: Fix ufshcd_probe_hba() prototype to match the definition

Claudiu Beznea <claudiu.beznea@microchip.com>
    power: reset: at91-reset: check properly the return value of devm_of_iomap

Srinivas Kandagatla <srinivas.kandagatla@linaro.org>
    soundwire: debugfs: use controller id and link_id for debugfs

Takashi Iwai <tiwai@suse.de>
    ALSA: usb-audio: Fix possible race at sync of urb completions

Takashi Iwai <tiwai@suse.de>
    ALSA: hda: Use position buffer for SKL+ again

Takashi Iwai <tiwai@suse.de>
    ALSA: hda: Reduce udelay() at SKL+ position reporting

David Stevens <stevensd@chromium.org>
    iommu/dma: Fix arch_sync_dma for map

David Stevens <stevensd@chromium.org>
    iommu/dma: Fix sync_sg with swiotlb

Stephan Gerhold <stephan@gerhold.net>
    arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000

Arnd Bergmann <arnd@arndb.de>
    iommu/mediatek: Fix out-of-range warning with clang

Geert Uytterhoeven <geert+renesas@glider.be>
    arm64: dts: renesas: beacon: Fix Ethernet PHY mode

Stephan Gerhold <stephan@gerhold.net>
    arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock

Yassine Oudjana <y.oudjana@protonmail.com>
    ASoC: wcd9335: Use correct version to initialize Class H

Biju Das <biju.das.jz@bp.renesas.com>
    pinctrl: renesas: rzg2l: Fix missing port register 21h

Dongliang Mu <mudongliangabcd@gmail.com>
    JFS: fix memleak in jfs_mount

Jackie Liu <liuyun01@kylinos.cn>
    MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT

Tong Zhang <ztong0001@gmail.com>
    scsi: dc395: Fix error case unwinding

Kuogee Hsieh <khsieh@codeaurora.org>
    arm64: dts: qcom: sc7280: fix display port phy reg property

Naina Mehta <nainmeht@codeaurora.org>
    soc: qcom: llcc: Disable MMUHWT retention

Douglas Anderson <dianders@chromium.org>
    arm64: dts: qcom: sc7180: Base dynamic CPU power coefficients in reality

Peter Rosin <peda@axentia.se>
    ARM: dts: at91: tse850: the emac<->phy interface is rmii

Tony Lindgren <tony@atomide.com>
    bus: ti-sysc: Fix timekeeping_suspended warning on resume

Anand Moon <linux.amoon@gmail.com>
    arm64: dts: meson-sm1: Fix the pwm regulator supply properties

Anand Moon <linux.amoon@gmail.com>
    arm64: dts: meson-g12b: Fix the pwm regulator supply properties

Anand Moon <linux.amoon@gmail.com>
    arm64: dts: meson-g12a: Fix the pwm regulator supply properties

Kishon Vijay Abraham I <kishon@ti.com>
    arm64: dts: ti: j7200-main: Fix "bus-range" upto 256 bus number for PCIe

Kishon Vijay Abraham I <kishon@ti.com>
    arm64: dts: ti: j7200-main: Fix "vendor-id"/"device-id" properties of pcie node

Kishon Vijay Abraham I <kishon@ti.com>
    arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe

Kishon Vijay Abraham I <kishon@ti.com>
    arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes

Selvin Xavier <selvin.xavier@broadcom.com>
    RDMA/bnxt_re: Fix query SRQ failure

Marijn Suijten <marijn.suijten@somainline.org>
    ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY

Alex Bee <knaerzche@gmail.com>
    arm64: dts: rockchip: Fix GPU register width for RK3328

Jackie Liu <liuyun01@kylinos.cn>
    ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()

James Smart <jsmart2021@gmail.com>
    scsi: lpfc: Fix NVMe I/O failover to non-optimized path

Quinn Tran <qutran@marvell.com>
    scsi: qla2xxx: edif: Use link event to wake up app

Ajish Koshy <Ajish.Koshy@microchip.com>
    scsi: pm80xx: Fix lockup in outbound queue management

Christophe JAILLET <christophe.jaillet@wanadoo.fr>
    clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths

Rafał Miłecki <rafal@milecki.pl>
    arm64: dts: broadcom: bcm4908: Fix UART clock name

Rafał Miłecki <rafal@milecki.pl>
    ARM: dts: BCM5301X: Fix memory nodes names

Junji Wei <weijunji@bytedance.com>
    RDMA/rxe: Fix wrong port_cap_flags

Alexandru Ardelean <aardelean@deviqon.com>
    iio: st_sensors: disable regulators after device unregistration

Dongjin Kim <tobetter@gmail.com>
    arm64: dts: meson: sm1: add Ethernet PHY reset line for ODROID-C4/HC4

Pavel Skripkin <paskripkin@gmail.com>
    staging: r8188eu: fix memory leak in rtw_set_key

Hector.Yuan <hector.yuan@mediatek.com>
    cpufreq: Fix parameter in parse_perf_domain()

Frank Rowand <frank.rowand@sony.com>
    of: unittest: fix EXPECT text for gpio hog errors

Alexei Starovoitov <ast@kernel.org>
    bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.

Alexei Starovoitov <ast@kernel.org>
    bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.

Dan Schatzberg <schatzberg.dan@gmail.com>
    cgroup: Fix rootcg cpu.stat guest double counting

Liu Jian <liujian56@huawei.com>
    skmsg: Lose offset info in sk_psock_skb_ingress

Geliang Tang <geliang.tang@suse.com>
    selftests: mptcp: fix proto type in link_failure tests

Sukadev Bhattiprolu <sukadev@linux.ibm.com>
    ibmvnic: delay complete()

Sukadev Bhattiprolu <sukadev@linux.ibm.com>
    ibmvnic: Process crqs after enabling interrupts

Sukadev Bhattiprolu <sukadev@linux.ibm.com>
    ibmvnic: don't stop queue in xmit

Jakub Kicinski <kuba@kernel.org>
    udp6: allow SO_MARK ctrl msg to affect routing

Andrea Righi <andrea.righi@canonical.com>
    selftests/bpf: Fix fclose/pclose mismatch in test_progs

Daniel Jordan <daniel.m.jordan@oracle.com>
    crypto: pcrypt - Delay write to padata->info

Nikolay Aleksandrov <nikolay@nvidia.com>
    selftests: net: bridge: update IGMP/MLD membership interval value

Ivan Vecera <ivecera@redhat.com>
    net: bridge: fix uninitialized variables when BRIDGE_CFM is disabled

Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
    net: phylink: avoid mvneta warning when setting pause parameters

Yinjun Zhang <yinjun.zhang@corigine.com>
    nfp: fix potential deadlock when canceling dim work

Yinjun Zhang <yinjun.zhang@corigine.com>
    nfp: fix NULL pointer access when scheduling dim work

Christophe JAILLET <christophe.jaillet@wanadoo.fr>
    ipmi: kcs_bmc: Fix a memory leak in the error handling path of 'kcs_bmc_serio_add_device()'

Shyam Sundar S K <Shyam-sundar.S-k@amd.com>
    net: amd-xgbe: Toggle PLL settings during rate change

Xin Long <lucien.xin@gmail.com>
    sctp: return true only for pathmtu update in sctp_transport_pl_toobig

Xin Long <lucien.xin@gmail.com>
    sctp: subtract sctphdr len in sctp_transport_pl_hlen

Xin Long <lucien.xin@gmail.com>
    sctp: reset probe_timer in sctp_transport_pl_update

Xin Long <lucien.xin@gmail.com>
    sctp: allow IP fragmentation when PLPMTUD enters Error state

Kumar Kartikeya Dwivedi <memxor@gmail.com>
    selftests/bpf: Fix memory leak in test_ima

Kumar Kartikeya Dwivedi <memxor@gmail.com>
    selftests/bpf: Fix fd cleanup in sk_lookup test

Alex Deucher <alexander.deucher@amd.com>
    drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits

Lang Yu <lang.yu@amd.com>
    drm/amdgpu: fix a potential memory leak in amdgpu_device_fini_sw()

Loic Poulain <loic.poulain@linaro.org>
    wcn36xx: Channel list update before hardware scan

Eric Dumazet <edumazet@google.com>
    bpf: Fixes possible race in update_prog_stats() for 32bit arches

Eric Dumazet <edumazet@google.com>
    bpf: Avoid races in __bpf_prog_run() for 32bit arches

Loic Poulain <loic.poulain@linaro.org>
    wcn36xx: Fix discarded frames due to wrong sequence number

Benjamin Li <benl@squareup.com>
    wcn36xx: add proper DMA memory barriers in rx path

Wang Hai <wanghai38@huawei.com>
    libertas: Fix possible memory leak in probe and disconnect

Wang Hai <wanghai38@huawei.com>
    libertas_tf: Fix possible memory leak in probe and disconnect

Janis Schoetterl-Glausch <scgl@linux.ibm.com>
    KVM: s390: Fix handle_sske page fault handling

Tiezhu Yang <yangtiezhu@loongson.cn>
    samples/kretprobes: Fix return value if register_kretprobe() failed

Peter Zijlstra <peterz@infradead.org>
    x86: Fix __get_wchan() for !STACKTRACE

Kees Cook <keescook@chromium.org>
    sched: Add wrapper for get_wchan() to keep task blocked

Lad Prabhakar <prabhakar.mahadev-lad.rj@bp.renesas.com>
    spi: spi-rpc-if: Check return value of rpcif_sw_init()

Zhang Rui <rui.zhang@intel.com>
    cpufreq: intel_pstate: Fix cpu->pstate.turbo_freq initialization

Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
    tracing: Fix missing trace_boot_init_histograms kstrdup NULL checks

Jon Maxwell <jmaxwell37@gmail.com>
    tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()

Ilya Leoshkevich <iii@linux.ibm.com>
    libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()

Mark Brown <broonie@kernel.org>
    tpm_tis_spi: Add missing SPI ID

Hao Wu <hao.wu@rubrik.com>
    tpm: fix Atmel TPM crash caused by too frequent queries

Andrii Nakryiko <andrii@kernel.org>
    libbpf: Fix off-by-one bug in bpf_core_apply_relo()

Yu Kuai <yukuai3@huawei.com>
    blk-cgroup: synchronize blkg creation against policy deactivation

Michael Schmitz <schmitzmic@gmail.com>
    block: ataflop: more blk-mq refactoring fixes

Abinaya Kalaiselvan <akalaise@codeaurora.org>
    ath10k: fix module load regression with iram-recovery feature

Arnd Bergmann <arnd@arndb.de>
    ARM: 9142/1: kasan: work around LPAE build warning

Vladimir Oltean <vladimir.oltean@nxp.com>
    net: dsa: avoid refcount warnings when ->port_{fdb,mdb}_del returns error

Mark Rutland <mark.rutland@arm.com>
    irq: mips: avoid nested irq_enter()

Claudio Imbrenda <imbrenda@linux.ibm.com>
    KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm

Claudio Imbrenda <imbrenda@linux.ibm.com>
    KVM: s390: pv: avoid double free of sida page

David Hildenbrand <david@redhat.com>
    s390/uv: fully validate the VMA before calling follow_page()

David Hildenbrand <david@redhat.com>
    s390/mm: fix VMA and page table handling code in storage key handling functions

David Hildenbrand <david@redhat.com>
    s390/mm: validate VMA in PGSTE manipulation functions

David Hildenbrand <david@redhat.com>
    s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()

David Hildenbrand <david@redhat.com>
    s390/gmap: validate VMA in __gmap_zap()

Nick Hainke <vincent@systemli.org>
    mt76: mt7615: mt7622: fix ibss and meshpoint

Andrii Nakryiko <andrii@kernel.org>
    libbpf: Fix BTF header parsing checks

Andrii Nakryiko <andrii@kernel.org>
    libbpf: Fix overflow in BTF sanity checks

Quentin Monnet <quentin@isovalent.com>
    bpftool: Avoid leaking the JSON writer prepared for program metadata

Mauricio Vásquez <mauricio@kinvolk.io>
    libbpf: Fix memory leak in btf__dedup()

Jim Mattson <jmattson@google.com>
    KVM: selftests: Fix nested SVM tests when built with clang

Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
    smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi

Horia Geantă <horia.geanta@nxp.com>
    crypto: tcrypt - fix skcipher multi-buffer tests for 1420B blocks

Jessica Zhang <jesszhan@codeaurora.org>
    drm/msm/dsi: fix wrong type in msm_dsi_host

Jessica Zhang <jesszhan@codeaurora.org>
    drm/msm: Fix potential NULL dereference in DPU SSPP

Joerg Roedel <jroedel@suse.de>
    x86/sev: Fix stack type check in vc_switch_off_ist()

Kees Cook <keescook@chromium.org>
    clocksource/drivers/timer-ti-dm: Select TIMER_OF

Anders Roxell <anders.roxell@linaro.org>
    PM: hibernate: fix sparse warnings

Max Gurtovoy <mgurtovoy@nvidia.com>
    nvme-rdma: fix error code in nvme_rdma_setup_ctrl

Ye Bin <yebin10@huawei.com>
    nbd: Fix use-after-free in pid_show

Stefan Agner <stefan@agner.ch>
    phy: micrel: ksz8041nl: do not use power down mode

Tim Gardner <tim.gardner@canonical.com>
    net: enetc: unmap DMA in enetc_send_cmd()

Johannes Berg <johannes.berg@intel.com>
    iwlwifi: pnvm: read EFI data only if long enough

Johannes Berg <johannes.berg@intel.com>
    iwlwifi: pnvm: don't kmemdup() more than we have

Johannes Berg <johannes.berg@intel.com>
    iwlwifi: mvm: reset PM state on unsuccessful resume

Jonas Dreßler <verdre@v0yd.nl>
    mwifiex: Send DELBA requests according to spec

Ziyang Xuan <william.xuanziyang@huawei.com>
    rsi: stop thread firstly in rsi_91x_init() error handling

Shayne Chen <shayne.chen@mediatek.com>
    mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()

Shayne Chen <shayne.chen@mediatek.com>
    mt76: mt7915: fix sta_rec_wtbl tag len

Lorenzo Bianconi <lorenzo@kernel.org>
    mt76: connac: fix possible NULL pointer dereference in mt76_connac_get_phy_mode_v2

Ryder Lee <ryder.lee@mediatek.com>
    mt76: mt7615: fix monitor mode tear down crash

Sean Wang <sean.wang@mediatek.com>
    mt76: mt7921: fix retrying release semaphore without end

Lorenzo Bianconi <lorenzo@kernel.org>
    mt76: mt7915: fix possible infinite loop release semaphore

Ryder Lee <ryder.lee@mediatek.com>
    mt76: mt7615: fix hwmon temp sensor mem use-after-free

Ben Greear <greearb@candelatech.com>
    mt76: mt7915: fix hwmon temp sensor mem use-after-free

Lorenzo Bianconi <lorenzo@kernel.org>
    mt76: mt7921: always wake device if necessary in debugfs

Sean Wang <sean.wang@mediatek.com>
    mt76: mt7921: fix kernel warning from cfg80211_calculate_bitrate

Sean Wang <sean.wang@mediatek.com>
    mt76: mt7921: fix firmware usage of RA info using legacy rates

Sean Wang <sean.wang@mediatek.com>
    mt76: mt7921: report HE MU radiotap

Lorenzo Bianconi <lorenzo@kernel.org>
    mt76: overwrite default reg_ops if necessary

Leon Yen <Leon.Yen@mediatek.com>
    mt76: connac: fix GTK rekey offload failure on WPA mixed mode

Deren Wu <deren.wu@mediatek.com>
    mt76: mt7921: fix dma hang in rmmod

Shayne Chen <shayne.chen@mediatek.com>
    mt76: mt7915: fix bit fields for HT rate idx

Shayne Chen <shayne.chen@mediatek.com>
    mt76: mt7915: fix potential overflow of eeprom page index

Deren Wu <deren.wu@mediatek.com>
    mt76: mt7921: Fix out of order process by invalid event pkt

Lorenzo Bianconi <lorenzo@kernel.org>
    mt76: mt76x02: fix endianness warnings in mt76x02_mac.c

Lorenzo Bianconi <lorenzo@kernel.org>
    mt76: mt7921: fix survey-dump reporting

Sean Wang <sean.wang@mediatek.com>
    mt76: fix build error implicit enumeration conversion

Leon Yen <Leon.Yen@mediatek.com>
    mt76: connac: fix mt76_connac_gtk_rekey_tlv usage

Dan Carpenter <dan.carpenter@oracle.com>
    mt76: mt7915: fix info leak in mt7915_mcu_set_pre_cal()

Lorenzo Bianconi <lorenzo@kernel.org>
    mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi

Lorenzo Bianconi <lorenzo@kernel.org>
    mt76: mt7921: fix endianness warning in mt7921_update_txs

Lorenzo Bianconi <lorenzo@kernel.org>
    mt76: mt7915: fix endianness warning in mt7915_mac_add_txs_skb

Lorenzo Bianconi <lorenzo@kernel.org>
    mt76: mt7921: fix endianness in mt7921_mcu_tx_done_event

Lang Yu <lang.yu@amd.com>
    drm/amdkfd: Fix an inappropriate error handling in allloc memory of gpu

Rafael J. Wysocki <rafael.j.wysocki@intel.com>
    ACPI: PM: Fix sharing of wakeup power resources

Rafael J. Wysocki <rafael.j.wysocki@intel.com>
    ACPI: PM: Turn off unused wakeup power resources

Fei Shao <fshao@chromium.org>
    mailbox: mtk-cmdq: Fix local clock ID usage

Fei Shao <fshao@chromium.org>
    mailbox: mtk-cmdq: Validate alias_id on probe

Nathan Chancellor <nathan@kernel.org>
    platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning

Andrea Righi <andrea.righi@canonical.com>
    blk-wbt: prevent NULL pointer dereference in wb_timer_fn

Michael Schmitz <schmitzmic@gmail.com>
    block: ataflop: fix breakage introduced at blk-mq refactoring

Bixuan Cui <cuibixuan@huawei.com>
    io-wq: Remove duplicate code in io_workqueue_create()

Christophe JAILLET <christophe.jaillet@wanadoo.fr>
    mmc: mxs-mmc: disable regulator on error and in the remove function

Sean Young <sean@mess.org>
    media: ir_toy: assignment to be16 should be of correct type

Randy Dunlap <rdunlap@infradead.org>
    media: ivtv: fix build for UML

jason-jh.lin <jason-jh.lin@mediatek.com>
    mailbox: Remove WARN_ON for async_cb.cb in cmdq_exec_done

Jackie Liu <liuyun01@kylinos.cn>
    thermal/drivers/qcom/lmh: make QCOM_LMH depends on QCOM_SCM

Jakub Kicinski <kuba@kernel.org>
    net: stream: don't purge sk_error_queue in sk_stream_kill_queues()

Dan Carpenter <dan.carpenter@oracle.com>
    drm/msm: uninitialized variable in msm_gem_import()

Dan Carpenter <dan.carpenter@oracle.com>
    drm/msm: fix potential NULL dereference in cleanup

Dan Carpenter <dan.carpenter@oracle.com>
    drm/msm: unlock on error in get_sched_entity()

Dan Carpenter <dan.carpenter@oracle.com>
    drm/msm: potential error pointer dereference in init()

Dan Carpenter <dan.carpenter@oracle.com>
    drm/msm: Fix potential Oops in a6xx_gmu_rpmh_init()

Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
    drm/msm/dsi: do not enable irq handler before powering up the host

Ziyang Xuan <william.xuanziyang@huawei.com>
    thermal/core: fix a UAF bug in __thermal_cooling_device_register()

Ovidiu Panait <ovidiu.panait@windriver.com>
    crypto: octeontx2 - set assoclen in aead_do_fallback()

Eric Dumazet <edumazet@google.com>
    tcp: switch orphan_count to bare per-cpu counters

Qi Zheng <zhengqi.arch@bytedance.com>
    x86: Fix get_wchan() to support the ORC unwinder

Randy Dunlap <rdunlap@infradead.org>
    net: tulip: winbond-840: fix build for UML

Randy Dunlap <rdunlap@infradead.org>
    net: intel: igc_ptp: fix build for UML

Randy Dunlap <rdunlap@infradead.org>
    net: fealnx: fix build for UML

Zhang Qiao <zhangqiao22@huawei.com>
    kernel/sched: Fix sched_fork() access an invalid sched_task_group

Sven Eckelmann <seckelmann@datto.com>
    ath10k: fix max antenna gain unit

Zev Weiss <zev@bewilderbeest.net>
    hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff

Yang Yingliang <yangyingliang@huawei.com>
    hwmon: Fix possible memleak in __hwmon_device_register()

Daniel Borkmann <daniel@iogearbox.net>
    net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE

Dan Carpenter <dan.carpenter@oracle.com>
    memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()

Arnd Bergmann <arnd@arndb.de>
    memstick: avoid out-of-range warning

Tony Lindgren <tony@atomide.com>
    mmc: sdhci-omap: Fix context restore

Tony Lindgren <tony@atomide.com>
    mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured

Catherine Sullivan <csully@google.com>
    gve: Track RX buffer allocation failures

John Fraker <jfraker@google.com>
    gve: Recover from queue stall due to missed IRQ

Dan Carpenter <dan.carpenter@oracle.com>
    b43: fix a lower bounds test

Dan Carpenter <dan.carpenter@oracle.com>
    b43legacy: fix a lower bounds test

liqiong <liqiong@nfschina.com>
    ima: fix deadlock when traversing "ima_default_rules".

Markus Schneider-Pargmann <msp@baylibre.com>
    hwrng: mtk - Force runtime pm ops for sleep ops

Giovanni Cabiddu <giovanni.cabiddu@intel.com>
    crypto: qat - disregard spurious PFVF interrupts

Giovanni Cabiddu <giovanni.cabiddu@intel.com>
    crypto: qat - detect PFVF collision after ACK

Arnd Bergmann <arnd@arndb.de>
    crypto: ccree - avoid out-of-range warnings from clang

Evgeny Novikov <novikov@ispras.ru>
    media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()

Mansur Alisha Shaik <mansur@codeaurora.org>
    media: venus: fix vpp frequency calculation for decoder

Pablo Neira Ayuso <pablo@netfilter.org>
    netfilter: nft_dynset: relax superfluous check on set updates

Peter Zijlstra <peterz@infradead.org>
    rcu: Fix rcu_dynticks_curr_cpu_in_eqs() vs noinstr

Peter Zijlstra <peterz@infradead.org>
    rcu: Always inline rcu_dynticks_task*_{enter,exit}()

Yazen Ghannam <yazen.ghannam@amd.com>
    EDAC/amd64: Handle three rank interleaving mode

Borislav Petkov <bp@suse.de>
    x86/insn: Use get_unaligned() instead of memcpy()

Vincent Donnefort <vincent.donnefort@arm.com>
    PM: EM: Fix inefficient states detection

Linus Lüssing <ll@simonwunderlich.de>
    ath9k: Fix potential interrupt storm on queue reset

Stephen Boyd <swboyd@chromium.org>
    ath10k: Don't always treat modem stop events as crashes

Colin Ian King <colin.king@canonical.com>
    media: em28xx: Don't use ops->suspend if it is NULL

Anel Orazgaliyeva <anelkz@amazon.de>
    cpuidle: Fix kobject memory leaks in error paths

Arnd Bergmann <arnd@arndb.de>
    drm: fb_helper: fix CONFIG_FB dependency

Arnd Bergmann <arnd@arndb.de>
    crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency

Punit Agrawal <punitagrawal@gmail.com>
    kprobes: Do not use local variable when creating debugfs file

Yee Lee <yee.lee@mediatek.com>
    scs: Release kasan vmalloc poison in scs_free process

Eugen Hristev <eugen.hristev@microchip.com>
    media: atmel: fix the ispck initialization

Colin Ian King <colin.king@canonical.com>
    media: cx23885: Fix snd_card_free call on null card pointer

Kees Cook <keescook@chromium.org>
    media: tm6000: Avoid card name truncation

Kees Cook <keescook@chromium.org>
    media: si470x: Avoid card name truncation

Kees Cook <keescook@chromium.org>
    media: radio-wl1273: Avoid card name truncation

Ondrej Jirman <megous@megous.com>
    media: sun6i-csi: Allow the video device to be open multiple times

Randy Dunlap <rdunlap@infradead.org>
    media: i2c: ths8200 needs V4L2_ASYNC

Christophe JAILLET <christophe.jaillet@wanadoo.fr>
    media: imx-jpeg: Fix the error handling path of 'mxc_jpeg_probe()'

Christophe JAILLET <christophe.jaillet@wanadoo.fr>
    media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'

Tom Rix <trix@redhat.com>
    media: TDA1997x: handle short reads of hdmi info frame.

Dafna Hirschfeld <dafna.hirschfeld@collabora.com>
    media: mtk-vcodec: venc: fix return value when start_streaming fails

Ricardo Ribalda <ribalda@chromium.org>
    media: v4l2-ioctl: S_CTRL output the right value

Sakari Ailus <sakari.ailus@linux.intel.com>
    media: imx258: Fix getting clock frequency

Pavel Skripkin <paskripkin@gmail.com>
    media: dvb-usb: fix ununit-value in az6027_rc_query

Evgeny Novikov <novikov@ispras.ru>
    media: ttusb-dec: avoid release of non-acquired mutex

Colin Ian King <colin.king@canonical.com>
    media: cxd2880-spi: Fix a null pointer dereference on error handling path

Christophe JAILLET <christophe.jaillet@wanadoo.fr>
    media: meson-ge2d: Fix rotation parameter changes detection in 'ge2d_s_ctrl()'

Pavel Skripkin <paskripkin@gmail.com>
    media: em28xx: add missing em28xx_close_extension

Kumar Kartikeya Dwivedi <memxor@gmail.com>
    libbpf: Fix skel_internal.h to set errno on loader retval < 0

Arnd Bergmann <arnd@arndb.de>
    drm/amdgpu: fix warning for overflow check

Sudarshan Rajagopalan <quic_sudaraja@quicinc.com>
    arm64: mm: update max_pfn after memory hotplug

Matthew Auld <matthew.auld@intel.com>
    drm/ttm: stop calling tt_swapin in vm_access

Fabio Estevam <festevam@denx.de>
    ath10k: sdio: Add missing BH locking around napi_schdule()

Loic Poulain <loic.poulain@linaro.org>
    ath10k: Fix missing frame timestamp for beacon/probe-resp

Arnd Bergmann <arnd@arndb.de>
    gve: DQO: avoid unused variable warnings

Baochen Qiang <bqiang@codeaurora.org>
    ath11k: Fix memory leak in ath11k_qmi_driver_event_work

Pradeep Kumar Chitrapu <pradeepc@codeaurora.org>
    ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status

Sriram R <srirrama@codeaurora.org>
    ath11k: Avoid race during regd updates

Dan Carpenter <dan.carpenter@oracle.com>
    ath11k: fix some sleeping in atomic bugs

Johan Almbladh <johan.almbladh@anyfinetworks.com>
    bpf/tests: Fix error in tail call limit tests

Linus Walleij <linus.walleij@linaro.org>
    net: dsa: rtl8366: Fix a bug in deleting VLANs

Linus Walleij <linus.walleij@linaro.org>
    net: dsa: rtl8366rb: Fix off-by-one bug

Leon Romanovsky <leon@kernel.org>
    net/mlx5: Accept devlink user input after driver initialization complete

Johannes Berg <johannes.berg@intel.com>
    cfg80211: always free wiphy specific regdomain

Johannes Berg <johannes.berg@intel.com>
    mac80211: twt: don't use potentially unaligned pointer

Kees Cook <keescook@chromium.org>
    fortify: Fix dropped strcpy() compile-time write overflow check

Florian Westphal <fw@strlen.de>
    mptcp: do not shrink snd_nxt when recovering

Jiasheng Jiang <jiasheng@iscas.ac.cn>
    rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()

Leon Romanovsky <leon@kernel.org>
    qed: Don't ignore devlink allocation failures

Leon Romanovsky <leon@kernel.org>
    bnxt_en: Check devlink allocation and registration status

Hans de Goede <hdegoede@redhat.com>
    Bluetooth: hci_h5: Fix (runtime)suspend issues on RTL8723BS HCIs

Giovanni Cabiddu <giovanni.cabiddu@intel.com>
    crypto: qat - power up 4xxx device

Michael Walle <michael@walle.cc>
    crypto: caam - disable pkc for non-E SoCs

Guchun Chen <guchun.chen@amd.com>
    drm/amdgpu: move amdgpu_virt_release_full_gpu to fini_early stage

Harry Wentland <harry.wentland@amd.com>
    drm/amd/display: Pass display_pipe_params_st as const in DML

Andrey Grodzovsky <andrey.grodzovsky@amd.com>
    drm/amdgpu: Fix crash on device remove/driver unload

Dinghao Liu <dinghao.liu@zju.edu.cn>
    Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync

Ajay Singh <ajay.kathat@microchip.com>
    wilc1000: fix possible memory leak in cfg_scan_result()

Bryan O'Donoghue <bryan.odonoghue@linaro.org>
    wcn36xx: Fix Antenna Diversity Switching

Waiman Long <longman@redhat.com>
    cgroup: Make rebind_subsystems() disable v2 controllers all at once

Yoshitaka Ikeda <ikeda@nskint.co.jp>
    spi: Fixed division by zero warning

Alex Bee <knaerzche@gmail.com>
    drm: bridge: it66121: Fix return value it66121_probe

Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
    net: phylink: don't call netif_carrier_off() with NULL netdev

Yajun Deng <yajun.deng@linux.dev>
    net: net_namespace: Fix undefined member in key_remove_domain()

Sebastian Andrzej Siewior <bigeasy@linutronix.de>
    lockdep: Let lock_is_held_type() detect recursive read as read

liuyuntao <liuyuntao10@huawei.com>
    virtio-gpu: fix possible memory allocation failure

Nathan Chancellor <nathan@kernel.org>
    crypto: sm4 - Do not change section of ck and sbox

Iago Toral Quiroga <itoral@igalia.com>
    drm/v3d: fix wait for TMU write combiner flush

Leon Romanovsky <leon@kernel.org>
    net/mlx5: Publish and unpublish all devlink parameters at once

Peter Zijlstra <peterz@infradead.org>
    objtool: Handle __sanitize_cov*() tail calls

Peter Zijlstra <peterz@infradead.org>
    x86/xen: Mark cpu_bringup_and_idle() as dead_end_function

Aleksander Jan Bajkowski <olek2@wp.pl>
    MIPS: lantiq: dma: fix burst length for DEU

Neeraj Upadhyay <neeraju@codeaurora.org>
    rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()

Pavel Skripkin <paskripkin@gmail.com>
    Bluetooth: hci_uart: fix GPF in h5_recv

Toke Høiland-Jørgensen <toke@redhat.com>
    libbpf: Don't crash on object files with no symbol tables

Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
    Bluetooth: fix init and cleanup of sco_conn.timeout_work

Paul Cercueil <paul@crapouillou.net>
    drm/bridge: it66121: Wait for next bridge to be probed

Paul Cercueil <paul@crapouillou.net>
    drm/bridge: it66121: Initialize {device,vendor}_ids

Kan Liang <kan.liang@linux.intel.com>
    perf/x86/intel/uncore: Fix Intel SPR M3UPI event constraints

Kan Liang <kan.liang@linux.intel.com>
    perf/x86/intel/uncore: Fix Intel SPR M2PCIE event constraints

Kan Liang <kan.liang@linux.intel.com>
    perf/x86/intel/uncore: Fix Intel SPR IIO event constraints

Kan Liang <kan.liang@linux.intel.com>
    perf/x86/intel/uncore: Fix Intel SPR CHA event constraints

Robert Foss <robert.foss@linaro.org>
    drm/bridge: anx7625: Propagate errors from sp_tx_rst_aux()

Imre Deak <imre.deak@intel.com>
    fbdev/efifb: Release PCI device's runtime PM ref during FB destroy

Andrii Nakryiko <andrii@kernel.org>
    selftests/bpf: Fix strobemeta selftest regression

Pablo Neira Ayuso <pablo@netfilter.org>
    netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state

Sven Schnelle <svens@stackframe.org>
    parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling

Sven Schnelle <svens@stackframe.org>
    parisc/unwind: fix unwinder when CONFIG_64BIT is enabled

Gao Xiang <hsiangkao@linux.alibaba.com>
    erofs: don't trigger WARN() when decompression fails

Helge Deller <deller@gmx.de>
    task_stack: Fix end_of_stack() for architectures with upwards-growing stack

Sven Schnelle <svens@stackframe.org>
    parisc: fix warning in flush_tlb_all

Stephane Eranian <eranian@google.com>
    perf/x86/intel: Fix ICL/SPR INST_RETIRED.PREC_DIST encodings

Shuah Khan <skhan@linuxfoundation.org>
    selftests/core: fix conflicting types compile error for close_range()

Anson Jacob <Anson.Jacob@amd.com>
    drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled

Vitaly Kuznetsov <vkuznets@redhat.com>
    x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted

Eric Dumazet <edumazet@google.com>
    inet: remove races in inet{6}_getname()

王贇 <yun.wang@linux.alibaba.com>
    ftrace: do CPU checking after preemption disabled

Bryan O'Donoghue <bryan.odonoghue@linaro.org>
    Revert "wcn36xx: Enable firmware link monitoring"

Loic Poulain <loic.poulain@linaro.org>
    wcn36xx: Fix packet drop on resume

Loic Poulain <loic.poulain@linaro.org>
    wcn36xx: Correct band/freq reporting on RX

Yang Yingliang <yangyingliang@huawei.com>
    spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()

Josef Bacik <josef@toxicpanda.com>
    btrfs: do not take the uuid_mutex in btrfs_rm_device

Sidong Yang <realwakka@gmail.com>
    btrfs: reflink: initialize return value to 0 in btrfs_extent_same()

Hui Wang <hui.wang@canonical.com>
    ACPI: resources: Add one more Medion model in IRQ override quirk

Stefan Schaeckeler <schaecsn@gmx.net>
    ACPI: AC: Quirk GK45 to skip reading _PSR

Eric Dumazet <edumazet@google.com>
    net: annotate data-race in neigh_output()

Florian Westphal <fw@strlen.de>
    vrf: run conntrack only in context of lower/physdev for locally generated packets

Viktor Rosendahl <Viktor.Rosendahl@bmw.de>
    tools/latency-collector: Use correct size when writing queue_full_warning

Arnd Bergmann <arnd@arndb.de>
    ARM: 9136/1: ARMv7-M uses BE-8, not BE-32

Andreas Gruenbacher <agruenba@redhat.com>
    gfs2: Fix glock_hash_walk bugs

Andreas Gruenbacher <agruenba@redhat.com>
    gfs2: Cancel remote delete work asynchronously

Marc Kleine-Budde <mkl@pengutronix.de>
    can: bittiming: can_fixup_bittiming(): change type of tseg1 and alltseg to unsigned int

Stephen Suryaputra <ssuryaextr@gmail.com>
    gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE

Masami Hiramatsu <mhiramat@kernel.org>
    ARM: clang: Do not rely on lr register for stacktrace

Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
    smackfs: use __GFP_NOFAIL for smk_cipso_doi()

Johannes Berg <johannes.berg@intel.com>
    iwlwifi: mvm: disable RX-diversity in powersave

Jiri Olsa <jolsa@redhat.com>
    selftests/bpf: Fix perf_buffer test on system with offline cpus

Shuah Khan <skhan@linuxfoundation.org>
    selftests: kvm: fix mismatched fclose() after popen()

Ye Bin <yebin10@huawei.com>
    PM: hibernate: Get block device exclusively in swsusp_check()

Nick Desaulniers <ndesaulniers@google.com>
    arm64: vdso32: suppress error message for 'make mrproper'

David Yang <davidcomponentone@gmail.com>
    samples/bpf: Fix application of sizeof to pointer

Hannes Reinecke <hare@suse.de>
    nvme: drop scan_lock and always kick requeue list when removing namespaces

Israel Rukshin <israelr@nvidia.com>
    nvmet-tcp: fix use-after-free when a port is removed

Israel Rukshin <israelr@nvidia.com>
    nvmet-rdma: fix use-after-free when a port is removed

Israel Rukshin <israelr@nvidia.com>
    nvmet: fix use-after-free when a port is removed

Alex Deucher <alexander.deucher@amd.com>
    drm/amdgpu/pm: properly handle sclk for profiling modes on vangogh

Michael Tretter <m.tretter@pengutronix.de>
    media: allegro: ignore interrupt if mailbox is not initialized

Jens Axboe <axboe@kernel.dk>
    block: remove inaccurate requeue check

Yaara Baruch <yaara.baruch@intel.com>
    iwlwifi: change all JnP to NO-160 configuration

Zheyu Ma <zheyuma97@gmail.com>
    mwl8k: Fix use-after-free in mwl8k_fw_state_machine()

Ryder Lee <ryder.lee@mediatek.com>
    mt76: mt7915: fix an off-by-one bound check

Kalesh Singh <kaleshsingh@google.com>
    tracing/cfi: Fix cmp_entries_* functions signature mismatch

Menglong Dong <imagedong@tencent.com>
    workqueue: make sysfs of unbound kworker cpumask more clever

Lasse Collin <lasse.collin@tukaani.org>
    lib/xz: Validate the value before assigning it to an enum variable

Lasse Collin <lasse.collin@tukaani.org>
    lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression

Yanfei Xu <yanfei.xu@windriver.com>
    locking/rwsem: Disable preemption for spinning region

Zheyu Ma <zheyuma97@gmail.com>
    memstick: r592: Fix a UAF bug when removing the driver

Xiao Ni <xni@redhat.com>
    md: update superblock after changing rdev flags in state_store

Luis Chamberlain <mcgrof@kernel.org>
    floppy: fix calling platform_device_unregister() on invalid drives

Jens Axboe <axboe@kernel.dk>
    block: bump max plugged deferred size from 16 to 32

Ansuel Smith <ansuelsmth@gmail.com>
    thermal/drivers/tsens: Add timeout to get_temp_tsens_valid

Tim Gardner <tim.gardner@canonical.com>
    drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()

Yuanzheng Song <songyuanzheng@huawei.com>
    thermal/core: Fix null pointer dereference in thermal_release()

Kees Cook <keescook@chromium.org>
    leaking_addresses: Always print a trailing newline

Matthias Schiffer <matthias.schiffer@ew.tq-group.com>
    net: phy: micrel: make *-skew-ps check more lenient

Yifan Zhang <yifan1.zhang@amd.com>
    drm/amdkfd: fix resume error when iommu disabled in Picasso

Aurabindo Pillai <aurabindo.pillai@amd.com>
    drm/amd/display: fix null pointer deref when plugging in display

Rafael J. Wysocki <rafael.j.wysocki@intel.com>
    ACPI: scan: Release PM resources blocked by unused objects

André Almeida <andrealmeid@collabora.com>
    ACPI: battery: Accept charges over the design capacity as full

Andreas Gruenbacher <agruenba@redhat.com>
    iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value

Xin Xiong <xiongx18@fudan.edu.cn>
    mmc: moxart: Fix reference count leaks in moxart_probe

Will Deacon <will@kernel.org>
    KVM: arm64: Propagate errors from __pkvm_prot_finalize hypercall

Tuo Li <islituo@gmail.com>
    ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()

Steven Rostedt (VMware) <rostedt@goodmis.org>
    tracing: Disable "other" permission bits in the tracefs files

Steven Rostedt (VMware) <rostedt@goodmis.org>
    tracefs: Have tracefs directories not set OTH permission bits by default

Alex Sierra <alex.sierra@amd.com>
    drm/amdkfd: rm BO resv on validation to avoid deadlock

Antoine Tenart <atenart@kernel.org>
    net-sysfs: try not to restart the syscall if it will fail eventually

Anant Thazhemadam <anant.thazhemadam@gmail.com>
    media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()

Ricardo Ribalda <ribalda@chromium.org>
    media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info

Ricardo Ribalda <ribalda@chromium.org>
    media: ipu3-imgu: imgu_fmt: Handle properly try

Mirela Rabulea <mirela.rabulea@nxp.com>
    media: imx-jpeg: Fix possible null pointer dereference

Wojciech Drewek <wojciech.drewek@intel.com>
    ice: Move devlink port to PF/VF struct

Vincent Donnefort <vincent.donnefort@arm.com>
    cpufreq: Make policy min/max hard requirements

Rafael J. Wysocki <rafael.j.wysocki@intel.com>
    ACPICA: Avoid evaluating methods too early during system resume

Li Zhijian <lizhijian@cn.fujitsu.com>
    kselftests/sched: cleanup the child processes

Josh Don <joshdon@google.com>
    fs/proc/uptime.c: Fix idle time reporting in /proc/uptime

Corey Minyard <cminyard@mvista.com>
    ipmi: Disable some operations during a panic

Nadezda Lutovinova <lutovinova@ispras.ru>
    media: rcar-csi2: Add checking to rcsi2_start_receiver()

Hans de Goede <hdegoede@redhat.com>
    brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet

Zong-Zhe Yang <kevin_yang@realtek.com>
    rtw88: fix RX clock gate setting while fifo dump

Randy Dunlap <rdunlap@infradead.org>
    ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK

Rajat Asthana <rajatasthana4@gmail.com>
    media: mceusb: return without resubmitting URB in case of -EPROTO error.

Niklas Söderlund <niklas.soderlund+renesas@ragnatech.se>
    media: rcar-vin: Use user provided buffers when starting

Martin Kepplinger <martink@posteo.de>
    media: imx: set a media_device bus_info string

Sergey Senozhatsky <senozhatsky@chromium.org>
    media: videobuf2: rework vb2_mem_ops API

Nadezda Lutovinova <lutovinova@ispras.ru>
    media: s5p-mfc: Add checking to s5p_mfc_probe().

Tuo Li <islituo@gmail.com>
    media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()

Evgeny Novikov <novikov@ispras.ru>
    media: vidtv: Fix memory leak in remove

Ricardo Ribalda <ribalda@chromium.org>
    media: uvcvideo: Set unique vdev name based in type

Ricardo Ribalda <ribalda@chromium.org>
    media: uvcvideo: Return -EIO for control errors

Ricardo Ribalda <ribalda@chromium.org>
    media: uvcvideo: Set capability in s_param

Dmitriy Ulitin <ulitin@ispras.ru>
    media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()

Evgeny Novikov <novikov@ispras.ru>
    media: atomisp: Fix error handling in probe

Zheyu Ma <zheyuma97@gmail.com>
    media: netup_unidvb: handle interrupt properly according to the firmware

Dirk Bender <d.bender@phytec.de>
    media: mt9p031: Fix corrupted frame after restarting stream

Rakesh Babu <rsaladi2@marvell.com>
    octeontx2-pf: Enable promisc/allmulti match MCAM entries.

Alagu Sankar <alagusankar@silex-india.com>
    ath10k: high latency fixes for beacon buffer

Baochen Qiang <bqiang@codeaurora.org>
    ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets

Wen Gong <wgong@codeaurora.org>
    ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED

Sriram R <srirrama@codeaurora.org>
    ath11k: Avoid reg rules update during firmware recovery

Petr Machata <petrm@nvidia.com>
    selftests: net: fib_nexthops: Wait before checking reported idle time

Jimmy Kizito <Jimmy.Kizito@amd.com>
    drm/amd/display: Fix null pointer dereference for encoders

Andrey Grodzovsky <andrey.grodzovsky@amd.com>
    drm/amdgpu: Fix MMIO access page fault

Eric Biggers <ebiggers@google.com>
    fscrypt: allow 256-bit master keys with AES-256-XTS

Mark Brown <broonie@kernel.org>
    spi: Check we have a spi_device_id for each DT compatible

Jonas Dreßler <verdre@v0yd.nl>
    mwifiex: Properly initialize private structure on interface type changes

Jonas Dreßler <verdre@v0yd.nl>
    mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type

Peter Zijlstra <peterz@infradead.org>
    x86: Increase exception stack sizes

Peter Zijlstra <peterz@infradead.org>
    x86/mm/64: Improve stack overflow warnings

Shreyansh Chouhan <chouhan.shreyansh630@gmail.com>
    crypto: aesni - check walk.nbytes instead of err

Seevalamuthu Mariappan <seevalam@codeaurora.org>
    ath11k: Align bss_chan_info structure with firmware

Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
    smackfs: Fix use-after-free in netlbl_catmap_walk()

Paul E. McKenney <paulmck@kernel.org>
    rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop

Hui Wang <hui.wang@canonical.com>
    ACPI: resources: Add DMI-based legacy IRQ override quirk

Jakub Kicinski <kuba@kernel.org>
    net: sched: update default qdisc visibility after Tx queue cnt changes

Peter Zijlstra <peterz@infradead.org>
    locking/lockdep: Avoid RCU-induced noinstr fail

Aleksander Jan Bajkowski <olek2@wp.pl>
    MIPS: lantiq: dma: reset correct number of channel

Aleksander Jan Bajkowski <olek2@wp.pl>
    MIPS: lantiq: dma: add small delay after reset

James Zhu <James.Zhu@amd.com>
    drm/amdgpu: move iommu_resume before ip init/resume

Barnabás Pőcze <pobrn@protonmail.com>
    platform/x86: wmi: do not fail if disabling fails

Scott Wood <swood@redhat.com>
    rcutorture: Avoid problematic critical section nesting on PREEMPT_RT

Simon Ser <contact@emersion.fr>
    drm/panel-orientation-quirks: add Valve Steam Deck

Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
    Bluetooth: call sock_hold earlier in sco_conn_del

Wang ShaoBo <bobo.shaobowang@huawei.com>
    Bluetooth: fix use-after-free error in lock_sock_nested()

Takashi Iwai <tiwai@suse.de>
    Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()

Hans de Goede <hdegoede@redhat.com>
    drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6

Hans de Goede <hdegoede@redhat.com>
    drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1

Hans de Goede <hdegoede@redhat.com>
    drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)

Charan Teja Reddy <charante@codeaurora.org>
    dma-buf: WARN on dmabuf release with pending attachments

Kai Vehmanen <kai.vehmanen@linux.intel.com>
    component: do not leave master devres group open after bind

Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
    power: supply: max17042_battery: Clear status bits in interrupt handler

Johan Hovold <johan@kernel.org>
    USB: chipidea: fix interrupt deadlock

Johan Hovold <johan@kernel.org>
    USB: iowarrior: fix control-message timeouts

Johan Hovold <johan@kernel.org>
    most: fix control-message timeouts

Johan Hovold <johan@kernel.org>
    Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"

Pali Rohár <pali@kernel.org>
    serial: 8250: Fix reporting real baudrate value in c_ospeed field

Jens Axboe <axboe@kernel.dk>
    io-wq: serialize hash clear with wakeup

Namjae Jeon <linkinjeon@kernel.org>
    ksmbd: set unique value to volume serial field in FS_VOLUME_INFORMATION

Johan Hovold <johan@kernel.org>
    serial: 8250: fix racy uartclk update

Wang Hai <wanghai38@huawei.com>
    USB: serial: keyspan: fix memleak on probe errors

Mihail Chindris <mihail.chindris@analog.com>
    Documentation:devicetree:bindings:iio:dac: Fix val

Nuno Sá <nuno.sa@analog.com>
    iio: ad5770r: make devicetree property reading consistent

Pekka Korpinen <pekka.korpinen@iki.fi>
    iio: dac: ad5446: Fix ad5622_write() return value

Mihail Chindris <mihail.chindris@analog.com>
    drivers: iio: dac: ad5766: Fix dt property name

Yang Yingliang <yangyingliang@huawei.com>
    iio: buffer: Fix memory leak in iio_buffer_register_legacy_sysfs_groups()

Yang Yingliang <yangyingliang@huawei.com>
    iio: buffer: Fix memory leak in __iio_buffer_alloc_sysfs_and_mask()

Yang Yingliang <yangyingliang@huawei.com>
    iio: buffer: Fix memory leak in iio_buffers_alloc_sysfs_and_mask()

Yang Yingliang <yangyingliang@huawei.com>
    iio: buffer: check return value of kstrdup_const()

Suzuki K Poulose <suzuki.poulose@arm.com>
    coresight: trbe: Defer the probe on offline CPUs

Suzuki K Poulose <suzuki.poulose@arm.com>
    coresight: trbe: Fix incorrect access of the sink specific data

Tao Zhang <quic_taozha@quicinc.com>
    coresight: cti: Correct the parameter for pm_runtime_put

Yang Yingliang <yangyingliang@huawei.com>
    pinctrl: core: fix possible memory leak in pinctrl_enable()

Robert Marko <robert.marko@sartura.hr>
    mfd: simple-mfd-i2c: Select MFD_CORE to fix build error

Paulo Alcantara <pc@cjr.nz>
    cifs: set a minimum of 120s for next dns resolution

Shyam Prasad N <sprasad@microsoft.com>
    cifs: To match file servers, make sure the server hostname matches

Zhang Yi <yi.zhang@huawei.com>
    quota: correct error number in free_dqentry()

Zhang Yi <yi.zhang@huawei.com>
    quota: check block number when reading the block in quota file

Pali Rohár <pali@kernel.org>
    PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge

Pali Rohár <pali@kernel.org>
    PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge

Pali Rohár <pali@kernel.org>
    PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge

Pali Rohár <pali@kernel.org>
    PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge

Marek Behún <kabel@kernel.org>
    PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG

Marek Behún <kabel@kernel.org>
    PCI: aardvark: Fix return value of MSI domain .alloc() method

Pali Rohár <pali@kernel.org>
    PCI: aardvark: Fix configuring Reference clock

Pali Rohár <pali@kernel.org>
    PCI: aardvark: Fix reporting Data Link Layer Link Active

Pali Rohár <pali@kernel.org>
    PCI: aardvark: Do not unmask unused interrupts

Pali Rohár <pali@kernel.org>
    PCI: aardvark: Fix checking for link up via LTSSM state

Pali Rohár <pali@kernel.org>
    PCI: aardvark: Do not clear status bits of masked interrupts

Dan Williams <dan.j.williams@intel.com>
    cxl/pci: Fix NULL vs ERR_PTR confusion

Li Chen <lchen@ambarella.com>
    PCI: cadence: Add cdns_plat_pcie_probe() missing return

Marek Behún <kabel@kernel.org>
    PCI: pci-bridge-emul: Fix emulation of W1C bits

Miklos Szeredi <mszeredi@redhat.com>
    ovl: fix filattr copy-up failure

yangerkun <yangerkun@huawei.com>
    ovl: fix use after free in struct ovl_aio_req

Juergen Gross <jgross@suse.com>
    xen/balloon: add late_initcall_sync() for initial ballooning done

Arnd Bergmann <arnd@arndb.de>
    ifb: fix building without CONFIG_NET_CLS_ACT

Pali Rohár <pali@kernel.org>
    serial: core: Fix initializing and restoring termios speed

Steven Rostedt (VMware) <rostedt@goodmis.org>
    ring-buffer: Protect ring_buffer_reset() from reentrancy

Pavel Begunkov <asml.silence@gmail.com>
    io_uring: honour zeroes as io-wq worker limits

Xiaoming Ni <nixiaoming@huawei.com>
    powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found

Oleksij Rempel <linux@rempel-privat.de>
    iio: adc: tsc2046: fix scan interval warning

Zhang Changzhong <zhangchangzhong@huawei.com>
    can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM

Zhang Changzhong <zhangchangzhong@huawei.com>
    can: j1939: j1939_can_recv(): ignore messages with invalid source address

Zhang Changzhong <zhangchangzhong@huawei.com>
    can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport

Marc Kleine-Budde <mkl@pengutronix.de>
    can: mcp251xfd: mcp251xfd_irq(): add missing can_rx_offload_threaded_irq_finish() in case of bus off

Stephane Grosjean <s.grosjean@peak-system.com>
    can: peak_usb: always ask for BERR reporting for PCAN-USB devices

Sean Christopherson <seanjc@google.com>
    KVM: nVMX: Handle dynamic MSR intercept toggling

Sean Christopherson <seanjc@google.com>
    KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use

Sean Christopherson <seanjc@google.com>
    KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows

David Woodhouse <dwmw2@infradead.org>
    KVM: x86: Fix recording of guest steal time / preempted status

Mark Rutland <mark.rutland@arm.com>
    KVM: arm64: Extract ESR_ELx.EC only

Yang Yingliang <yangyingliang@huawei.com>
    iio: core: check return value when calling dev_set_name()

Yang Yingliang <yangyingliang@huawei.com>
    iio: core: fix double free in iio_device_unregister_sysfs()

Henrik Grimler <henrik@grimler.se>
    power: supply: max17042_battery: use VFSOC for capacity when no rsns

Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>
    power: supply: max17042_battery: Prevent int underflow in set_soc_threshold

Eugene Syromiatnikov <esyr@redhat.com>
    mctp: handle the struct sockaddr_mctp padding fields

Miquel Raynal <miquel.raynal@bootlin.com>
    mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines

Meng Li <Meng.Li@windriver.com>
    soc: fsl: dpio: use the combined functions to protect critical zone

Meng Li <Meng.Li@windriver.com>
    soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id

David Virag <virag.david003@gmail.com>
    soc: samsung: exynos-pmu: Fix compilation when nothing selects CONFIG_MFD_CORE

Eric W. Biederman <ebiederm@xmission.com>
    signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed

Eric W. Biederman <ebiederm@xmission.com>
    signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT

Wolfram Sang <wsa+renesas@sang-engineering.com>
    memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode

Eric W. Biederman <ebiederm@xmission.com>
    signal: Remove the bogus sigkill_pending in ptrace_stop

Dmitry Osipenko <digetx@gmail.com>
    ASoC: tegra: Restore AC97 support

Dmitry Osipenko <digetx@gmail.com>
    ASoC: tegra: Set default card name for Trimslice

Alok Prasad <palok@marvell.com>
    RDMA/qedr: Fix NULL deref for query_qp on the GSI QP

Kan Liang <kan.liang@linux.intel.com>
    perf/x86/intel/uncore: Fix Intel ICX IIO event constraints

Kan Liang <kan.liang@linux.intel.com>
    perf/x86/intel/uncore: Fix invalid unit check

Kan Liang <kan.liang@linux.intel.com>
    perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server

Marek Vasut <marex@denx.de>
    rsi: Fix module dev_oper_mode parameter description

Martin Fuzzey <martin.fuzzey@flowbird.group>
    rsi: fix rate mask set leading to P2P failure

Martin Fuzzey <martin.fuzzey@flowbird.group>
    rsi: fix key enabled check causing unwanted encryption for vap_id > 0

Martin Fuzzey <martin.fuzzey@flowbird.group>
    rsi: fix occasional initialisation failure with BT coex

Benjamin Li <benl@squareup.com>
    wcn36xx: handle connection loss indication

Christian König <christian.koenig@amd.com>
    dma-buf: fix and rework dma_buf_poll v7

Reimar Döffinger <Reimar.Doeffinger@gmx.de>
    libata: fix checking of DMA state

Jonas Dreßler <verdre@v0yd.nl>
    mwifiex: Try waking the firmware until we get an interrupt

Jonas Dreßler <verdre@v0yd.nl>
    mwifiex: Read a PCI register after writing the TX ring write pointer

Rafael J. Wysocki <rafael.j.wysocki@intel.com>
    PM: sleep: Do not let "syscore" devices runtime-suspend during system transitions

Loic Poulain <loic.poulain@linaro.org>
    wcn36xx: Fix (QoS) null data frame bitrate/modulation

Loic Poulain <loic.poulain@linaro.org>
    wcn36xx: Fix tx_status mechanism

Loic Poulain <loic.poulain@linaro.org>
    wcn36xx: Fix HT40 capability for 2Ghz band

Maximilian Luz <luzmaximilian@gmail.com>
    HID: surface-hid: Allow driver matching for target ID 1 devices

Maximilian Luz <luzmaximilian@gmail.com>
    HID: surface-hid: Use correct event registry for managing HID events

Felix Fietkau <nbd@nbd.name>
    mt76: mt7615: fix skb use-after-free on mac reset

Maximilian Luz <luzmaximilian@gmail.com>
    platform/surface: aggregator_registry: Add support for Surface Laptop Studio

Lukas Wunner <lukas@wunner.de>
    ifb: Depend on netfilter alternatively to tc

Austin Kim <austin.kim@lge.com>
    evm: mark evm_fixmode as __ro_after_init

Johan Hovold <johan@kernel.org>
    rtl8187: fix control-message timeouts

Ingmar Klein <ingmar_klein@web.de>
    PCI: Mark Atheros QCA6174 to avoid bus reset

Johan Hovold <johan@kernel.org>
    ath10k: fix division by zero in send path

Johan Hovold <johan@kernel.org>
    ath10k: fix control-message timeout

Johan Hovold <johan@kernel.org>
    ath6kl: fix control-message timeout

Johan Hovold <johan@kernel.org>
    ath6kl: fix division by zero in send path

Johan Hovold <johan@kernel.org>
    mwifiex: fix division by zero in fw download path

Eric Badger <ebadger@purestorage.com>
    EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell

Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
    regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property

Krzysztof Kozlowski <krzysztof.kozlowski@canonical.com>
    regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled

Zev Weiss <zev@bewilderbeest.net>
    hwmon: (pmbus/lm25066) Add offset coefficients

Guoqing Jiang <guoqing.jiang@linux.dev>
    md/raid1: only allocate write behind bio for WriteMostly device

Corey Minyard <cminyard@mvista.com>
    ipmi:watchdog: Set panic count to proper value on a panic

Ondrej Mosnacek <omosnace@redhat.com>
    selinux: fix race condition when computing ocontext SIDs

Masami Hiramatsu <mhiramat@kernel.org>
    ia64: kprobes: Fix to pass correct trampoline address to the handler

Laurent Vivier <lvivier@redhat.com>
    KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling

Sean Christopherson <seanjc@google.com>
    KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup

Sean Christopherson <seanjc@google.com>
    KVM: x86/mmu: Drop a redundant, broken remote TLB flush

Anand Jain <anand.jain@oracle.com>
    btrfs: call btrfs_check_rw_degradable only if there is a missing device

Filipe Manana <fdmanana@suse.com>
    btrfs: fix lost error handling when replaying directory deletes

Li Zhang <zhanglikernel@gmail.com>
    btrfs: clear MISSING device status bit in btrfs_close_one_device

Peter Zijlstra <peterz@infradead.org>
    x86/iopl: Fake iopl(3) CLI/STI usage

Sean Christopherson <seanjc@google.com>
    x86/irq: Ensure PI wakeup handler is unregistered before module unload

Jane Malalane <jane.malalane@citrix.com>
    x86/cpu: Fix migration safety with X86_BUG_NULL_SEL

Tom Lendacky <thomas.lendacky@amd.com>
    x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c

Miklos Szeredi <mszeredi@redhat.com>
    fuse: fix page stealing

yangerkun <yangerkun@huawei.com>
    ext4: refresh the ext4_ext_path struct after dropping i_data_sem.

yangerkun <yangerkun@huawei.com>
    ext4: ensure enough credits in ext4_ext_shift_path_extents

Shaoying Xu <shaoyi@amazon.com>
    ext4: fix lazy initialization next schedule time computation in more granular unit

Eric Whitney <enwlinux@gmail.com>
    Revert "ext4: enforce buffer head state assertion in ext4_da_map_blocks"

Takashi Iwai <tiwai@suse.de>
    ALSA: timer: Unconditionally unlink slave instances, too

Wang Wensheng <wangwensheng4@huawei.com>
    ALSA: timer: Fix use-after-free problem

Takashi Iwai <tiwai@suse.de>
    ALSA: PCM: Fix NULL dereference at mmap checks

Takashi Iwai <tiwai@suse.de>
    ALSA: pci: rme: Fix unaligned buffer addresses

Austin Kim <austin.kim@lge.com>
    ALSA: synth: missing check for possible NULL after the call to kstrdup

Takashi Iwai <tiwai@suse.de>
    ALSA: hda: Free card instance properly at probe errors

Alexander Tsoy <alexander@tsoy.me>
    ALSA: usb-audio: Add registration quirk for JBL Quantum 400

Jason Ormes <skryking@gmail.com>
    ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk

Pavel Skripkin <paskripkin@gmail.com>
    ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume

Takashi Iwai <tiwai@suse.de>
    ALSA: mixer: oss: Fix racy access to slots

Johan Hovold <johan@kernel.org>
    ALSA: line6: fix control and interrupt message timeouts

Johan Hovold <johan@kernel.org>
    ALSA: 6fire: fix control and bulk message timeouts

Johan Hovold <johan@kernel.org>
    ALSA: ua101: fix division by zero at probe

Kai-Heng Feng <kai.heng.feng@canonical.com>
    ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED

Takashi Iwai <tiwai@suse.de>
    ALSA: hda/realtek: Add quirk for ASUS UX550VE

Jaroslav Kysela <perex@perex.cz>
    ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N

Jeremy Soller <jeremy@system76.com>
    ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ

Tim Crawford <tcrawford@system76.com>
    ALSA: hda/realtek: Add quirk for Clevo PC70HS

Takashi Iwai <tiwai@suse.de>
    ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED

Johnathon Clark <john.clark@cantab.net>
    ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14

Ricardo Ribalda <ribalda@chromium.org>
    media: v4l2-ioctl: Fix check_ext_ctrls

Sean Young <sean@mess.org>
    media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers

Chen-Yu Tsai <wenst@chromium.org>
    media: rkvdec: Support dynamic resolution changes

Sean Young <sean@mess.org>
    media: ite-cir: IR receiver stop working after receive overflow

Chen-Yu Tsai <wenst@chromium.org>
    media: rkvdec: Do not override sizeimage for output format

Tang Bin <tangbin@cmss.chinamobile.com>
    crypto: s5p-sss - Add error handling in s5p_aes_probe()

jing yangyang <cgel.zte@gmail.com>
    firmware/psci: fix application of sizeof to pointer

Dan Carpenter <dan.carpenter@oracle.com>
    tpm: Check for integer overflow in tpm2_map_response_body()

Helge Deller <deller@gmx.de>
    parisc: Fix ptrace check on syscall return

Helge Deller <deller@gmx.de>
    parisc: Fix set_fixmap() on PA1.x CPUs

Pavel Begunkov <asml.silence@gmail.com>
    io-wq: remove worker to owner tw dependency

Sungjong Seo <sj1557.seo@samsung.com>
    exfat: fix incorrect loading of i_blocks for large files

Christian Löhle <CLoehle@hyperstone.com>
    mmc: dw_mmc: Dont wait for DRTO on Write RSP error

Derong Liu <derong.liu@mediatek.com>
    mmc: mtk-sd: Add wait dma stop done flow

Ziyang Xuan <william.xuanziyang@huawei.com>
    char: xillybus: fix msg_ep UAF in xillyusb_probe()

Ben Skeggs <bskeggs@redhat.com>
    ce/gf100: fix incorrect CE0 address calculation on some GPUs

Quinn Tran <qutran@marvell.com>
    scsi: qla2xxx: Fix use after free in eh_abort path

Arun Easi <aeasi@marvell.com>
    scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file

Arun Easi <aeasi@marvell.com>
    scsi: qla2xxx: Fix crash in NVMe abort path

James Smart <jsmart2021@gmail.com>
    scsi: lpfc: Fix FCP I/O flush functionality for TMF routines

James Smart <jsmart2021@gmail.com>
    scsi: lpfc: Don't release final kref on Fport node while ABTS outstanding

Tadeusz Struk <tadeusz.struk@linaro.org>
    scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()

Ewan D. Milne <emilne@redhat.com>
    scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run

Tadeusz Struk <tadeusz.struk@linaro.org>
    scsi: scsi_ioctl: Validate command size

Jan Kara <jack@suse.cz>
    ocfs2: fix data corruption on truncate

Damien Le Moal <damien.lemoal@opensource.wdc.com>
    libata: fix read log timeout value

Takashi Iwai <tiwai@suse.de>
    Input: i8042 - Add quirk for Fujitsu Lifebook T725

Phoenix Huang <phoenix@emc.com.tw>
    Input: elantench - fix misreporting trackpoint coordinates

Johan Hovold <johan@kernel.org>
    Input: iforce - fix control-message timeout

Nehal Bakulchandra Shah <Nehal-Bakulchandra.shah@amd.com>
    usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform

Mathias Nyman <mathias.nyman@linux.intel.com>
    xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay


-------------

Diffstat:

 Documentation/admin-guide/kernel-parameters.txt    |   7 +
 .../devicetree/bindings/iio/dac/adi,ad5766.yaml    |   2 +-
 .../bindings/regulator/samsung,s5m8767.txt         |  23 +-
 Documentation/filesystems/fscrypt.rst              |  10 +-
 Makefile                                           |   4 +-
 arch/Kconfig                                       |   3 +
 arch/alpha/include/asm/processor.h                 |   2 +-
 arch/alpha/kernel/process.c                        |   5 +-
 arch/arc/include/asm/processor.h                   |   2 +-
 arch/arc/kernel/stacktrace.c                       |   4 +-
 arch/arm/Makefile                                  |  22 +-
 arch/arm/boot/dts/at91-tse850-3.dts                |   2 +-
 arch/arm/boot/dts/bcm4708-netgear-r6250.dts        |   2 +-
 arch/arm/boot/dts/bcm4709-asus-rt-ac87u.dts        |   2 +-
 arch/arm/boot/dts/bcm4709-buffalo-wxr-1900dhp.dts  |   2 +-
 arch/arm/boot/dts/bcm4709-linksys-ea9200.dts       |   2 +-
 arch/arm/boot/dts/bcm4709-netgear-r7000.dts        |   2 +-
 arch/arm/boot/dts/bcm4709-netgear-r8000.dts        |   2 +-
 arch/arm/boot/dts/bcm4709-tplink-archer-c9-v1.dts  |   2 +-
 arch/arm/boot/dts/bcm47094-luxul-xwc-2000.dts      |   2 +-
 arch/arm/boot/dts/bcm53016-meraki-mr32.dts         |   2 +-
 arch/arm/boot/dts/bcm94708.dts                     |   2 +-
 arch/arm/boot/dts/bcm94709.dts                     |   2 +-
 arch/arm/boot/dts/omap3-gta04.dtsi                 |   2 +-
 arch/arm/boot/dts/qcom-msm8974.dtsi                |   4 +-
 arch/arm/boot/dts/stm32mp15-pinctrl.dtsi           |   8 +-
 arch/arm/boot/dts/stm32mp151.dtsi                  |  16 +-
 arch/arm/boot/dts/stm32mp15xx-dhcor-som.dtsi       |   2 +-
 arch/arm/boot/dts/stm32mp15xx-dkx.dtsi             |   2 +-
 arch/arm/include/asm/processor.h                   |   2 +-
 arch/arm/kernel/process.c                          |   4 +-
 arch/arm/kernel/stacktrace.c                       |   3 +-
 arch/arm/mach-s3c/irq-s3c24xx.c                    |  22 +-
 arch/arm/mm/Kconfig                                |   2 +-
 arch/arm/mm/kasan_init.c                           |   2 +-
 arch/arm/mm/mmu.c                                  |   4 +-
 arch/arm64/boot/dts/amlogic/meson-g12a-sei510.dts  |   2 +-
 arch/arm64/boot/dts/amlogic/meson-g12a-u200.dts    |   2 +-
 arch/arm64/boot/dts/amlogic/meson-g12a-x96-max.dts |   2 +-
 .../boot/dts/amlogic/meson-g12b-khadas-vim3.dtsi   |   4 +-
 .../boot/dts/amlogic/meson-g12b-odroid-n2.dtsi     |   4 +-
 arch/arm64/boot/dts/amlogic/meson-g12b-w400.dtsi   |   4 +-
 .../boot/dts/amlogic/meson-sm1-bananapi-m5.dts     |   2 +-
 .../boot/dts/amlogic/meson-sm1-khadas-vim3l.dts    |   2 +-
 arch/arm64/boot/dts/amlogic/meson-sm1-odroid.dtsi  |   6 +-
 arch/arm64/boot/dts/amlogic/meson-sm1-sei610.dts   |   2 +-
 arch/arm64/boot/dts/broadcom/bcm4908/bcm4908.dtsi  |   2 +-
 arch/arm64/boot/dts/qcom/msm8916.dtsi              |   8 +-
 arch/arm64/boot/dts/qcom/pm8916.dtsi               |   1 -
 arch/arm64/boot/dts/qcom/pmi8994.dtsi              |   2 +-
 .../arm64/boot/dts/qcom/sc7180-trogdor-coachz.dtsi |   2 +-
 .../arm64/boot/dts/qcom/sc7180-trogdor-pompom.dtsi |   8 +-
 arch/arm64/boot/dts/qcom/sc7180.dtsi               |  52 ++---
 arch/arm64/boot/dts/qcom/sc7280.dtsi               |   8 +-
 arch/arm64/boot/dts/qcom/sdm845.dtsi               |   6 +-
 .../arm64/boot/dts/renesas/beacon-renesom-som.dtsi |   1 +
 arch/arm64/boot/dts/rockchip/rk3328.dtsi           |   2 +-
 arch/arm64/boot/dts/ti/k3-j7200-main.dtsi          |   6 +-
 arch/arm64/boot/dts/ti/k3-j721e-main.dtsi          |  16 +-
 arch/arm64/include/asm/esr.h                       |   1 +
 arch/arm64/include/asm/pgtable.h                   |  12 +-
 arch/arm64/include/asm/processor.h                 |   2 +-
 arch/arm64/kernel/cpufeature.c                     |  10 +-
 arch/arm64/kernel/process.c                        |   4 +-
 arch/arm64/kernel/vdso32/Makefile                  |   3 +-
 arch/arm64/kvm/arm.c                               |  30 ++-
 arch/arm64/kvm/hyp/hyp-entry.S                     |   2 +-
 arch/arm64/kvm/hyp/nvhe/host.S                     |   2 +-
 arch/arm64/mm/mmu.c                                |   5 +
 arch/csky/include/asm/processor.h                  |   2 +-
 arch/csky/kernel/stacktrace.c                      |   5 +-
 arch/h8300/include/asm/processor.h                 |   2 +-
 arch/h8300/kernel/process.c                        |   5 +-
 arch/hexagon/include/asm/processor.h               |   2 +-
 arch/hexagon/kernel/process.c                      |   4 +-
 arch/ia64/Kconfig.debug                            |   2 +-
 arch/ia64/include/asm/processor.h                  |   2 +-
 arch/ia64/kernel/kprobes.c                         |   9 +-
 arch/ia64/kernel/process.c                         |   5 +-
 arch/m68k/Kconfig.machine                          |   1 +
 arch/m68k/include/asm/processor.h                  |   2 +-
 arch/m68k/kernel/process.c                         |   4 +-
 arch/microblaze/include/asm/processor.h            |   2 +-
 arch/microblaze/kernel/process.c                   |   2 +-
 arch/mips/Kbuild.platforms                         |   2 +-
 arch/mips/Kconfig                                  |   1 +
 arch/mips/Makefile                                 |   2 +
 arch/mips/include/asm/cmpxchg.h                    |   5 +-
 arch/mips/include/asm/mips-cm.h                    |  12 +-
 arch/mips/include/asm/processor.h                  |   2 +-
 arch/mips/kernel/mips-cm.c                         |  21 +-
 arch/mips/kernel/process.c                         |   8 +-
 arch/mips/kernel/r2300_fpu.S                       |   4 +-
 arch/mips/kernel/syscall.c                         |   9 -
 arch/mips/lantiq/xway/dma.c                        |  23 +-
 arch/nds32/include/asm/processor.h                 |   2 +-
 arch/nds32/kernel/process.c                        |   7 +-
 arch/nios2/include/asm/processor.h                 |   2 +-
 arch/nios2/kernel/process.c                        |   5 +-
 arch/openrisc/include/asm/processor.h              |   2 +-
 arch/openrisc/kernel/dma.c                         |   4 +-
 arch/openrisc/kernel/process.c                     |   2 +-
 arch/openrisc/kernel/smp.c                         |   6 +-
 arch/parisc/include/asm/pgtable.h                  |  10 +-
 arch/parisc/include/asm/processor.h                |   2 +-
 arch/parisc/kernel/cache.c                         |   4 +-
 arch/parisc/kernel/entry.S                         |   2 +-
 arch/parisc/kernel/process.c                       |   5 +-
 arch/parisc/kernel/smp.c                           |  19 +-
 arch/parisc/kernel/unwind.c                        |  21 +-
 arch/parisc/kernel/vmlinux.lds.S                   |   3 +-
 arch/parisc/mm/fixmap.c                            |   5 +-
 arch/parisc/mm/init.c                              |   4 +-
 arch/powerpc/Kconfig                               |   6 +-
 arch/powerpc/include/asm/nohash/32/pgtable.h       |  19 +-
 arch/powerpc/include/asm/nohash/32/pte-8xx.h       |  22 ++
 arch/powerpc/include/asm/nohash/64/pgtable.h       |   5 -
 arch/powerpc/include/asm/nohash/pte-book3e.h       |  18 +-
 arch/powerpc/include/asm/paravirt.h                |  18 +-
 arch/powerpc/include/asm/processor.h               |   2 +-
 arch/powerpc/kernel/firmware.c                     |   7 +-
 arch/powerpc/kernel/head_booke.h                   |  15 +-
 arch/powerpc/kernel/interrupt.c                    |   2 +-
 arch/powerpc/kernel/process.c                      |   9 +-
 arch/powerpc/kvm/book3s_hv.c                       |  30 ++-
 arch/powerpc/kvm/booke.c                           |  16 +-
 arch/powerpc/lib/feature-fixups.c                  |  11 +
 arch/powerpc/mm/mem.c                              |   2 +-
 arch/powerpc/mm/nohash/tlb_low_64e.S               |   8 +-
 arch/powerpc/mm/pgtable_32.c                       |   2 +-
 arch/powerpc/net/bpf_jit_comp.c                    |   2 +-
 arch/powerpc/perf/power10-events-list.h            |   8 +-
 arch/powerpc/perf/power10-pmu.c                    |  44 ++--
 arch/powerpc/platforms/44x/fsp2.c                  |   2 +
 arch/powerpc/platforms/85xx/Makefile               |   4 +-
 arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c       |   7 +-
 arch/powerpc/platforms/85xx/smp.c                  |  12 +-
 arch/powerpc/platforms/book3s/vas-api.c            |   4 +-
 arch/powerpc/platforms/powernv/opal-prd.c          |  12 +-
 arch/powerpc/platforms/pseries/mobility.c          |  34 +++
 arch/powerpc/xmon/xmon.c                           |   3 +-
 arch/riscv/include/asm/processor.h                 |   2 +-
 arch/riscv/kernel/stacktrace.c                     |  12 +-
 arch/s390/include/asm/processor.h                  |   2 +-
 arch/s390/kernel/perf_cpum_cf.c                    |   4 +-
 arch/s390/kernel/process.c                         |   4 +-
 arch/s390/kernel/uv.c                              |   2 +-
 arch/s390/kvm/priv.c                               |   2 +
 arch/s390/kvm/pv.c                                 |  21 +-
 arch/s390/mm/gmap.c                                |  11 +-
 arch/s390/mm/pgtable.c                             |  70 ++++--
 arch/sh/include/asm/processor_32.h                 |   2 +-
 arch/sh/kernel/cpu/fpu.c                           |  10 +-
 arch/sh/kernel/process_32.c                        |   5 +-
 arch/sparc/boot/Makefile                           |   8 +-
 arch/sparc/include/asm/processor_32.h              |   2 +-
 arch/sparc/include/asm/processor_64.h              |   2 +-
 arch/sparc/kernel/process_32.c                     |   5 +-
 arch/sparc/kernel/process_64.c                     |   5 +-
 arch/um/include/asm/processor-generic.h            |   2 +-
 arch/um/kernel/process.c                           |   5 +-
 arch/x86/Kconfig                                   |   1 +
 arch/x86/crypto/aesni-intel_glue.c                 |   2 +-
 arch/x86/events/intel/core.c                       |   5 +-
 arch/x86/events/intel/ds.c                         |   5 +-
 arch/x86/events/intel/uncore_discovery.h           |   2 +-
 arch/x86/events/intel/uncore_snbep.c               |  16 +-
 arch/x86/hyperv/hv_init.c                          |   5 +-
 arch/x86/include/asm/cpu_entry_area.h              |   8 +-
 arch/x86/include/asm/insn-eval.h                   |   1 +
 arch/x86/include/asm/irq_stack.h                   |  37 ++-
 arch/x86/include/asm/kvm_host.h                    |   2 +-
 arch/x86/include/asm/mem_encrypt.h                 |   1 +
 arch/x86/include/asm/page_64_types.h               |   2 +-
 arch/x86/include/asm/processor.h                   |   3 +-
 arch/x86/include/asm/stacktrace.h                  |  10 +
 arch/x86/include/asm/traps.h                       |   6 +-
 arch/x86/kernel/Makefile                           |   6 +
 arch/x86/kernel/cc_platform.c                      |  69 ++++++
 arch/x86/kernel/cpu/amd.c                          |   2 +
 arch/x86/kernel/cpu/common.c                       |  44 +++-
 arch/x86/kernel/cpu/cpu.h                          |   1 +
 arch/x86/kernel/cpu/hygon.c                        |   2 +
 arch/x86/kernel/cpu/mce/intel.c                    |   5 +-
 arch/x86/kernel/dumpstack_64.c                     |   6 +
 arch/x86/kernel/irq.c                              |   4 +-
 arch/x86/kernel/process.c                          |  66 ++----
 arch/x86/kernel/sev.c                              |  32 ---
 arch/x86/kernel/traps.c                            |  60 +++--
 arch/x86/kvm/cpuid.c                               |  47 ++--
 arch/x86/kvm/mmu/mmu.c                             |   6 +-
 arch/x86/kvm/vmx/nested.c                          | 103 ++++----
 arch/x86/kvm/vmx/vmx.c                             |  68 +-----
 arch/x86/kvm/vmx/vmx.h                             |  63 +++++
 arch/x86/kvm/x86.c                                 | 108 ++++++---
 arch/x86/lib/insn-eval.c                           |   2 +-
 arch/x86/lib/insn.c                                |   5 +-
 arch/x86/mm/cpu_entry_area.c                       |   7 +
 arch/x86/mm/fault.c                                |  20 +-
 arch/x86/mm/mem_encrypt.c                          |   1 +
 arch/x86/mm/mem_encrypt_identity.c                 |   9 +
 arch/xtensa/include/asm/processor.h                |   2 +-
 arch/xtensa/kernel/process.c                       |   5 +-
 block/blk-cgroup.c                                 |  10 +
 block/blk-mq.c                                     |   5 +-
 block/blk-wbt.c                                    |   3 +
 block/blk-zoned.c                                  |  15 +-
 block/blk.h                                        |   6 +
 block/genhd.c                                      |   8 +-
 block/ioctl.c                                      |  24 +-
 crypto/Kconfig                                     |   2 +-
 crypto/pcrypt.c                                    |  12 +-
 crypto/tcrypt.c                                    |   5 +-
 drivers/acpi/ac.c                                  |  19 ++
 drivers/acpi/acpica/acglobal.h                     |   2 +
 drivers/acpi/acpica/hwesleep.c                     |   8 +-
 drivers/acpi/acpica/hwsleep.c                      |  11 +-
 drivers/acpi/acpica/hwxfsleep.c                    |   7 +
 drivers/acpi/battery.c                             |   2 +-
 drivers/acpi/glue.c                                |  25 ++
 drivers/acpi/internal.h                            |   1 +
 drivers/acpi/pmic/intel_pmic.c                     |  51 ++--
 drivers/acpi/power.c                               |  86 +++----
 drivers/acpi/resource.c                            |  56 ++++-
 drivers/acpi/scan.c                                |   6 +
 drivers/ata/libata-core.c                          |   2 +-
 drivers/ata/libata-eh.c                            |   8 +
 drivers/auxdisplay/ht16k33.c                       |  66 +++---
 drivers/auxdisplay/img-ascii-lcd.c                 |  10 +
 drivers/base/component.c                           |   5 +-
 drivers/base/core.c                                |   4 +-
 drivers/base/power/main.c                          |  93 +++++---
 drivers/block/ataflop.c                            | 141 ++++++-----
 drivers/block/floppy.c                             |   9 +-
 drivers/block/nbd.c                                |  24 +-
 drivers/block/zram/zram_drv.c                      |   2 +-
 drivers/bluetooth/btmtkuart.c                      |  13 +-
 drivers/bluetooth/hci_h5.c                         |  28 ++-
 drivers/bus/ti-sysc.c                              |  65 +++++-
 drivers/char/hw_random/mtk-rng.c                   |   9 +-
 drivers/char/ipmi/ipmi_msghandler.c                |  10 +-
 drivers/char/ipmi/ipmi_watchdog.c                  |  25 +-
 drivers/char/ipmi/kcs_bmc_serio.c                  |   4 +-
 drivers/char/tpm/tpm2-space.c                      |   3 +
 drivers/char/tpm/tpm_tis_core.c                    |  26 ++-
 drivers/char/tpm/tpm_tis_core.h                    |   4 +
 drivers/char/tpm/tpm_tis_spi_main.c                |   1 +
 drivers/char/xillybus/xillyusb.c                   |   1 +
 drivers/clk/at91/clk-master.c                      |   6 +-
 drivers/clk/at91/clk-sam9x60-pll.c                 |   4 +-
 drivers/clk/at91/pmc.c                             |   5 +
 drivers/clk/mvebu/ap-cpu-clk.c                     |  14 +-
 drivers/clocksource/Kconfig                        |   1 +
 drivers/cpufreq/cpufreq.c                          |   7 +
 drivers/cpufreq/intel_pstate.c                     |  35 ++-
 drivers/cpuidle/sysfs.c                            |   5 +-
 drivers/crypto/caam/caampkc.c                      |  19 +-
 drivers/crypto/caam/regs.h                         |   3 +
 drivers/crypto/ccree/cc_driver.c                   |   3 +-
 drivers/crypto/marvell/octeontx2/otx2_cptvf_algs.c |   1 +
 drivers/crypto/qat/qat_4xxx/adf_4xxx_hw_data.c     |  31 +++
 drivers/crypto/qat/qat_4xxx/adf_4xxx_hw_data.h     |  10 +
 drivers/crypto/qat/qat_common/adf_accel_devices.h  |   1 +
 drivers/crypto/qat/qat_common/adf_init.c           |   5 +
 drivers/crypto/qat/qat_common/adf_pf2vf_msg.c      |  13 ++
 drivers/crypto/qat/qat_common/adf_vf_isr.c         |   6 +
 drivers/crypto/s5p-sss.c                           |   2 +
 drivers/cxl/pci.c                                  |   2 +-
 drivers/dma-buf/dma-buf.c                          | 153 ++++++------
 drivers/dma/at_xdmac.c                             |  53 +++--
 drivers/dma/bestcomm/ata.c                         |   2 +-
 drivers/dma/bestcomm/bestcomm.c                    |  22 +-
 drivers/dma/bestcomm/fec.c                         |   4 +-
 drivers/dma/bestcomm/gen_bd.c                      |   4 +-
 drivers/dma/dmaengine.h                            |   2 +-
 drivers/dma/idxd/device.c                          |   3 +-
 drivers/dma/idxd/dma.c                             |   5 +-
 drivers/dma/idxd/init.c                            |  14 +-
 drivers/dma/stm32-dma.c                            |  23 +-
 drivers/dma/tegra210-adma.c                        |   2 +-
 drivers/dma/ti/k3-udma.c                           |  32 ++-
 drivers/edac/amd64_edac.c                          |  22 +-
 drivers/edac/sb_edac.c                             |   2 +-
 drivers/firmware/psci/psci_checker.c               |   2 +-
 drivers/firmware/qcom_scm.c                        |   2 +-
 drivers/gpio/gpio-realtek-otto.c                   |   2 +-
 drivers/gpu/drm/Kconfig                            |   5 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c   |   2 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c        |   2 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.h        |   2 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c         |  15 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c            |   2 +-
 drivers/gpu/drm/amd/amdgpu/gmc_v6_0.c              |   4 +-
 drivers/gpu/drm/amd/amdgpu/uvd_v3_1.c              |  24 +-
 drivers/gpu/drm/amd/amdgpu/uvd_v4_2.c              |  24 +-
 drivers/gpu/drm/amd/amdgpu/uvd_v5_0.c              |  24 +-
 drivers/gpu/drm/amd/amdgpu/uvd_v6_0.c              |  24 +-
 drivers/gpu/drm/amd/amdgpu/uvd_v7_0.c              |  32 +--
 drivers/gpu/drm/amd/amdgpu/vce_v2_0.c              |  19 +-
 drivers/gpu/drm/amd/amdgpu/vce_v3_0.c              |  28 +--
 drivers/gpu/drm/amd/amdgpu/vce_v4_0.c              |  44 ++--
 drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c              |   8 +-
 drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c              |  17 +-
 drivers/gpu/drm/amd/amdkfd/kfd_device.c            |   1 +
 drivers/gpu/drm/amd/amdkfd/kfd_svm.c               |   7 +-
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c  |   9 +-
 drivers/gpu/drm/amd/display/dc/core/dc_link_dp.c   |   2 +-
 .../drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c  |   2 +-
 .../gpu/drm/amd/display/dc/dcn20/dcn20_resource.c  |  18 +-
 drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c |   3 +-
 .../display/dc/dml/dcn20/display_rq_dlg_calc_20.c  |   6 +-
 .../display/dc/dml/dcn20/display_rq_dlg_calc_20.h  |   4 +-
 .../dc/dml/dcn20/display_rq_dlg_calc_20v2.c        |   6 +-
 .../dc/dml/dcn20/display_rq_dlg_calc_20v2.h        |   4 +-
 .../display/dc/dml/dcn21/display_rq_dlg_calc_21.c  |  62 ++---
 .../display/dc/dml/dcn21/display_rq_dlg_calc_21.h  |   4 +-
 .../display/dc/dml/dcn30/display_rq_dlg_calc_30.c  |  72 +++---
 .../display/dc/dml/dcn30/display_rq_dlg_calc_30.h  |   4 +-
 .../display/dc/dml/dcn31/display_rq_dlg_calc_31.c  |  68 +++---
 .../display/dc/dml/dcn31/display_rq_dlg_calc_31.h  |   4 +-
 .../gpu/drm/amd/display/dc/dml/display_mode_lib.h  |   4 +-
 .../gpu/drm/amd/pm/powerplay/hwmgr/smu10_hwmgr.c   |   8 +-
 .../gpu/drm/amd/pm/powerplay/hwmgr/smu7_hwmgr.c    |  10 +-
 .../gpu/drm/amd/pm/powerplay/hwmgr/smu8_hwmgr.c    |   2 +
 .../gpu/drm/amd/pm/powerplay/hwmgr/smu_helper.h    |  13 ++
 .../gpu/drm/amd/pm/powerplay/hwmgr/vega10_hwmgr.c  |  12 +-
 .../gpu/drm/amd/pm/powerplay/hwmgr/vega12_hwmgr.c  |   4 +
 .../gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c  |  14 +-
 drivers/gpu/drm/amd/pm/swsmu/smu11/vangogh_ppt.c   |  89 +++----
 drivers/gpu/drm/bridge/analogix/anx7625.c          |  12 +-
 drivers/gpu/drm/bridge/ite-it66121.c               |  21 +-
 drivers/gpu/drm/bridge/lontium-lt9611uxc.c         |   9 +-
 drivers/gpu/drm/bridge/nwl-dsi.c                   |  35 +++
 drivers/gpu/drm/drm_panel_orientation_quirks.c     |  35 ++-
 drivers/gpu/drm/drm_plane_helper.c                 |   1 -
 drivers/gpu/drm/i915/display/intel_fb.c            |   5 +-
 drivers/gpu/drm/i915/gt/uc/intel_guc_submission.c  |   2 +-
 drivers/gpu/drm/imx/imx-drm-core.c                 |   2 -
 drivers/gpu/drm/msm/adreno/a6xx_gmu.c              |   6 +-
 drivers/gpu/drm/msm/disp/dpu1/dpu_hw_sspp.c        |   8 +-
 drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c            |   4 +
 drivers/gpu/drm/msm/dsi/dsi.h                      |   2 +
 drivers/gpu/drm/msm/dsi/dsi_host.c                 |  72 +++---
 drivers/gpu/drm/msm/dsi/dsi_manager.c              |  16 ++
 drivers/gpu/drm/msm/msm_gem.c                      |   5 +-
 drivers/gpu/drm/msm/msm_gpu.c                      |   2 +-
 drivers/gpu/drm/msm/msm_submitqueue.c              |   1 +
 drivers/gpu/drm/nouveau/nouveau_gem.c              |   2 +-
 drivers/gpu/drm/nouveau/nouveau_svm.c              |   4 +
 drivers/gpu/drm/nouveau/nvkm/engine/ce/gt215.c     |   2 +-
 drivers/gpu/drm/nouveau/nvkm/engine/device/base.c  |   3 +-
 drivers/gpu/drm/radeon/radeon_gem.c                |   2 +-
 drivers/gpu/drm/sun4i/sun8i_csc.h                  |   4 +-
 drivers/gpu/drm/ttm/ttm_bo_vm.c                    |  99 +-------
 drivers/gpu/drm/v3d/v3d_gem.c                      |   4 +-
 drivers/gpu/drm/virtio/virtgpu_vq.c                |   8 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h                |   4 -
 drivers/gpu/drm/vmwgfx/vmwgfx_page_dirty.c         |  72 +-----
 drivers/gpu/drm/vmwgfx/vmwgfx_ttm_glue.c           |   3 -
 drivers/hid/hid-u2fzero.c                          |  10 +-
 drivers/hid/surface-hid/surface_hid.c              |   4 +-
 drivers/hwmon/hwmon.c                              |   6 +-
 drivers/hwmon/pmbus/lm25066.c                      |  25 +-
 drivers/hwtracing/coresight/coresight-cti-core.c   |   2 +-
 drivers/hwtracing/coresight/coresight-trbe.c       |  10 +-
 drivers/i2c/busses/i2c-i801.c                      |   5 +-
 drivers/i2c/busses/i2c-mt65xx.c                    |   2 +-
 drivers/i2c/busses/i2c-xlr.c                       |   6 +-
 drivers/iio/accel/st_accel_i2c.c                   |   4 +-
 drivers/iio/accel/st_accel_spi.c                   |   4 +-
 drivers/iio/adc/ti-tsc2046.c                       |   2 +-
 drivers/iio/dac/ad5446.c                           |   9 +-
 drivers/iio/dac/ad5766.c                           |   6 +-
 drivers/iio/dac/ad5770r.c                          |   2 +-
 drivers/iio/gyro/st_gyro_i2c.c                     |   4 +-
 drivers/iio/gyro/st_gyro_spi.c                     |   4 +-
 drivers/iio/imu/adis.c                             |   4 +-
 drivers/iio/industrialio-buffer.c                  |  28 ++-
 drivers/iio/industrialio-core.c                    |   9 +-
 drivers/iio/magnetometer/st_magn_i2c.c             |   4 +-
 drivers/iio/magnetometer/st_magn_spi.c             |   4 +-
 drivers/iio/pressure/st_pressure_i2c.c             |   4 +-
 drivers/iio/pressure/st_pressure_spi.c             |   8 +-
 drivers/infiniband/core/uverbs_cmd.c               |   3 -
 drivers/infiniband/hw/bnxt_re/qplib_fp.c           |   3 +-
 drivers/infiniband/hw/hns/hns_roce_hw_v2.c         |   6 +-
 drivers/infiniband/hw/mlx4/qp.c                    |   4 +-
 drivers/infiniband/hw/qedr/verbs.c                 |  15 +-
 drivers/infiniband/sw/rxe/rxe_param.h              |   2 +-
 drivers/input/joystick/iforce/iforce-usb.c         |   2 +-
 drivers/input/misc/ariel-pwrbutton.c               |   7 +
 drivers/input/mouse/elantech.c                     |  13 ++
 drivers/input/serio/i8042-x86ia64io.h              |  14 ++
 drivers/input/touchscreen/st1232.c                 |   2 +-
 drivers/iommu/dma-iommu.c                          |  52 ++---
 drivers/iommu/mtk_iommu.c                          |   4 +-
 drivers/irqchip/irq-bcm6345-l1.c                   |   2 +-
 drivers/irqchip/irq-sifive-plic.c                  |   8 +-
 drivers/mailbox/mtk-cmdq-mailbox.c                 |  11 +-
 drivers/md/bcache/btree.c                          |   2 +-
 drivers/md/bcache/super.c                          |   2 +-
 drivers/md/md.c                                    |  11 +-
 drivers/md/raid1.c                                 |   2 +-
 drivers/media/common/videobuf2/videobuf2-core.c    |  42 ++--
 .../media/common/videobuf2/videobuf2-dma-contig.c  |  39 ++--
 drivers/media/common/videobuf2/videobuf2-dma-sg.c  |  35 +--
 drivers/media/common/videobuf2/videobuf2-vmalloc.c |  30 +--
 drivers/media/dvb-frontends/mn88443x.c             |  18 +-
 drivers/media/i2c/Kconfig                          |   1 +
 drivers/media/i2c/imx258.c                         |  12 +-
 drivers/media/i2c/ir-kbd-i2c.c                     |   1 +
 drivers/media/i2c/mt9p031.c                        |  28 ++-
 drivers/media/i2c/tda1997x.c                       |   8 +-
 drivers/media/pci/cx23885/cx23885-alsa.c           |   3 +-
 drivers/media/pci/ivtv/ivtvfb.c                    |   4 +-
 drivers/media/pci/netup_unidvb/netup_unidvb_core.c |  27 ++-
 drivers/media/platform/allegro-dvt/allegro-core.c  |   9 +
 drivers/media/platform/atmel/atmel-isc-base.c      |  25 +-
 drivers/media/platform/atmel/atmel-isc.h           |   2 +
 drivers/media/platform/atmel/atmel-sama5d2-isc.c   |  39 ++--
 drivers/media/platform/atmel/atmel-sama7g5-isc.c   |  22 +-
 drivers/media/platform/imx-jpeg/mxc-jpeg.c         |   6 +
 drivers/media/platform/meson/ge2d/ge2d.c           |   6 +-
 drivers/media/platform/mtk-vcodec/mtk_vcodec_enc.c |   8 +-
 drivers/media/platform/mtk-vpu/mtk_vpu.c           |   5 +-
 drivers/media/platform/qcom/venus/pm_helpers.c     |   8 +-
 drivers/media/platform/rcar-vin/rcar-csi2.c        |   2 +
 drivers/media/platform/rcar-vin/rcar-dma.c         |   3 +-
 drivers/media/platform/s5p-mfc/s5p_mfc.c           |   6 +-
 drivers/media/platform/stm32/stm32-dcmi.c          |  19 +-
 .../media/platform/sunxi/sun6i-csi/sun6i_video.c   |   6 +-
 drivers/media/radio/radio-wl1273.c                 |   2 +-
 drivers/media/radio/si470x/radio-si470x-i2c.c      |   2 +-
 drivers/media/radio/si470x/radio-si470x-usb.c      |   2 +-
 drivers/media/rc/ir_toy.c                          |   2 +-
 drivers/media/rc/ite-cir.c                         |   2 +-
 drivers/media/rc/mceusb.c                          |   1 +
 drivers/media/spi/cxd2880-spi.c                    |   2 +-
 drivers/media/test-drivers/vidtv/vidtv_bridge.c    |   4 +
 drivers/media/usb/dvb-usb/az6027.c                 |   1 +
 drivers/media/usb/dvb-usb/dibusb-common.c          |   2 +-
 drivers/media/usb/em28xx/em28xx-cards.c            |   5 +-
 drivers/media/usb/em28xx/em28xx-core.c             |   5 +-
 drivers/media/usb/tm6000/tm6000-video.c            |   3 +-
 drivers/media/usb/ttusb-dec/ttusb_dec.c            |  10 +-
 drivers/media/usb/uvc/uvc_driver.c                 |   7 +-
 drivers/media/usb/uvc/uvc_v4l2.c                   |   7 +-
 drivers/media/usb/uvc/uvc_video.c                  |   5 +
 drivers/media/v4l2-core/v4l2-ioctl.c               |  67 ++++--
 drivers/memory/fsl_ifc.c                           |  13 +-
 drivers/memory/renesas-rpc-if.c                    | 113 ++++++---
 drivers/memstick/core/ms_block.c                   |   2 +-
 drivers/memstick/host/jmb38x_ms.c                  |   2 +-
 drivers/memstick/host/r592.c                       |   8 +-
 drivers/mfd/Kconfig                                |   1 +
 drivers/mfd/altera-sysmgr.c                        |   2 +-
 drivers/mfd/dln2.c                                 |  18 ++
 drivers/mfd/mfd-core.c                             |   2 +
 drivers/mfd/motorola-cpcap.c                       |   8 +
 drivers/mfd/sprd-sc27xx-spi.c                      |   7 +
 drivers/mmc/host/dw_mmc.c                          |   3 +-
 drivers/mmc/host/moxart-mmc.c                      |  29 ++-
 drivers/mmc/host/mtk-sd.c                          |   5 +
 drivers/mmc/host/mxs-mmc.c                         |  10 +
 drivers/mmc/host/sdhci-omap.c                      |  18 +-
 drivers/most/most_usb.c                            |   5 +-
 drivers/mtd/mtdcore.c                              |   4 +-
 drivers/mtd/nand/raw/ams-delta.c                   |  12 +-
 drivers/mtd/nand/raw/arasan-nand-controller.c      |  15 ++
 drivers/mtd/nand/raw/au1550nd.c                    |  12 +-
 drivers/mtd/nand/raw/fsmc_nand.c                   |   4 +-
 drivers/mtd/nand/raw/gpio.c                        |  12 +-
 drivers/mtd/nand/raw/intel-nand-controller.c       |   5 +
 drivers/mtd/nand/raw/mpc5121_nfc.c                 |  12 +-
 drivers/mtd/nand/raw/orion_nand.c                  |  12 +-
 drivers/mtd/nand/raw/pasemi_nand.c                 |  12 +-
 drivers/mtd/nand/raw/plat_nand.c                   |  12 +-
 drivers/mtd/nand/raw/socrates_nand.c               |  12 +-
 drivers/mtd/nand/raw/xway_nand.c                   |  12 +-
 drivers/mtd/spi-nor/controllers/hisi-sfc.c         |   1 -
 drivers/net/Kconfig                                |   2 +-
 drivers/net/bonding/bond_sysfs_slave.c             |  36 +--
 drivers/net/can/dev/bittiming.c                    |   2 +-
 drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c     |   6 +-
 drivers/net/can/usb/etas_es58x/es58x_core.c        |   6 +-
 drivers/net/can/usb/peak_usb/pcan_usb.c            |  17 +-
 drivers/net/dsa/mv88e6xxx/chip.c                   |   5 +-
 drivers/net/dsa/ocelot/felix.c                     |   9 +-
 drivers/net/dsa/rtl8366.c                          |   2 +-
 drivers/net/dsa/rtl8366rb.c                        |   2 +-
 drivers/net/ethernet/amd/xgbe/xgbe-common.h        |   8 +
 drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c        |  20 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt.c          |   5 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.c  |  13 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.h  |  13 --
 drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c |   7 +-
 drivers/net/ethernet/chelsio/cxgb4/t4_hw.h         |   2 +
 .../chelsio/inline_crypto/chtls/chtls_cm.c         |   2 +-
 .../chelsio/inline_crypto/chtls/chtls_cm.h         |   2 +-
 drivers/net/ethernet/dec/tulip/winbond-840.c       |   2 +-
 drivers/net/ethernet/fealnx.c                      |   2 +-
 drivers/net/ethernet/freescale/enetc/enetc_qos.c   |  18 +-
 drivers/net/ethernet/google/gve/gve.h              |  17 +-
 drivers/net/ethernet/google/gve/gve_adminq.h       |   1 +
 drivers/net/ethernet/google/gve/gve_main.c         |  48 +++-
 drivers/net/ethernet/google/gve/gve_rx.c           |   7 +-
 drivers/net/ethernet/google/gve/gve_tx.c           |  23 +-
 drivers/net/ethernet/google/gve/gve_tx_dqo.c       |  84 +++----
 .../net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c |  20 +-
 .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c    |  10 +-
 .../ethernet/hisilicon/hns3/hns3pf/hclge_main.h    |   6 +-
 .../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c  |  77 +++---
 .../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.h  |   4 +-
 .../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c  |  10 +-
 .../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.h  |   4 +-
 drivers/net/ethernet/ibm/ibmvnic.c                 |  21 +-
 drivers/net/ethernet/intel/ice/ice.h               |   7 +-
 drivers/net/ethernet/intel/ice/ice_base.c          |   2 +-
 drivers/net/ethernet/intel/ice/ice_devlink.c       | 109 ++++++---
 drivers/net/ethernet/intel/ice/ice_devlink.h       |   6 +-
 drivers/net/ethernet/intel/ice/ice_lib.c           |   3 +-
 drivers/net/ethernet/intel/ice/ice_main.c          |   4 +-
 drivers/net/ethernet/intel/ice/ice_virtchnl_pf.c   |  22 +-
 drivers/net/ethernet/intel/ice/ice_virtchnl_pf.h   |   9 +
 drivers/net/ethernet/intel/igc/igc_ptp.c           |   2 +-
 drivers/net/ethernet/litex/litex_liteeth.c         |   1 -
 drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c    |  38 +--
 drivers/net/ethernet/marvell/octeontx2/Kconfig     |   1 +
 .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c   |  78 ++++---
 drivers/net/ethernet/mellanox/mlx5/core/devlink.c  |  18 +-
 drivers/net/ethernet/mellanox/mlx5/core/main.c     |   2 +
 .../ethernet/mellanox/mlx5/core/sf/dev/driver.c    |   2 +
 .../net/ethernet/netronome/nfp/nfp_net_common.c    |   8 +-
 drivers/net/ethernet/qlogic/qede/qede_main.c       |  12 +-
 drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c    |   2 -
 drivers/net/ethernet/ti/cpsw_ale.c                 |   6 +-
 drivers/net/ethernet/ti/davinci_emac.c             |  16 +-
 drivers/net/ifb.c                                  |   2 +
 drivers/net/phy/micrel.c                           |   9 +-
 drivers/net/phy/phy.c                              |   7 +-
 drivers/net/phy/phylink.c                          |   7 +-
 drivers/net/vrf.c                                  |  28 ++-
 drivers/net/wireless/ath/ath10k/core.c             |  11 +-
 drivers/net/wireless/ath/ath10k/coredump.c         |  11 +-
 drivers/net/wireless/ath/ath10k/coredump.h         |   7 +
 drivers/net/wireless/ath/ath10k/mac.c              |  45 +++-
 drivers/net/wireless/ath/ath10k/qmi.c              |   3 +-
 drivers/net/wireless/ath/ath10k/sdio.c             |   5 +-
 drivers/net/wireless/ath/ath10k/snoc.c             |  77 ++++++
 drivers/net/wireless/ath/ath10k/snoc.h             |   5 +
 drivers/net/wireless/ath/ath10k/usb.c              |   7 +-
 drivers/net/wireless/ath/ath10k/wmi.c              |   4 +
 drivers/net/wireless/ath/ath10k/wmi.h              |   3 +
 drivers/net/wireless/ath/ath11k/dbring.c           |  16 +-
 drivers/net/wireless/ath/ath11k/dp_rx.c            |  13 +-
 drivers/net/wireless/ath/ath11k/mac.c              |   2 +-
 drivers/net/wireless/ath/ath11k/qmi.c              |   4 +-
 drivers/net/wireless/ath/ath11k/reg.c              |  11 +-
 drivers/net/wireless/ath/ath11k/reg.h              |   2 +-
 drivers/net/wireless/ath/ath11k/wmi.c              |  40 ++--
 drivers/net/wireless/ath/ath11k/wmi.h              |   3 +-
 drivers/net/wireless/ath/ath6kl/usb.c              |   7 +-
 drivers/net/wireless/ath/ath9k/main.c              |   4 +-
 drivers/net/wireless/ath/dfs_pattern_detector.c    |  10 +-
 drivers/net/wireless/ath/wcn36xx/dxe.c             |  49 ++--
 drivers/net/wireless/ath/wcn36xx/hal.h             |  32 +++
 drivers/net/wireless/ath/wcn36xx/main.c            |  21 +-
 drivers/net/wireless/ath/wcn36xx/smd.c             | 126 +++++++++-
 drivers/net/wireless/ath/wcn36xx/smd.h             |   1 +
 drivers/net/wireless/ath/wcn36xx/txrx.c            |  64 ++---
 drivers/net/wireless/ath/wcn36xx/txrx.h            |   3 +-
 drivers/net/wireless/broadcom/b43/phy_g.c          |   2 +-
 drivers/net/wireless/broadcom/b43legacy/radio.c    |   2 +-
 .../net/wireless/broadcom/brcm80211/brcmfmac/dmi.c |  10 +
 drivers/net/wireless/intel/iwlwifi/fw/pnvm.c       |  13 +-
 drivers/net/wireless/intel/iwlwifi/mvm/d3.c        |   5 +-
 drivers/net/wireless/intel/iwlwifi/mvm/utils.c     |   3 +
 drivers/net/wireless/intel/iwlwifi/pcie/drv.c      |   6 +-
 drivers/net/wireless/marvell/libertas/if_usb.c     |   2 +
 drivers/net/wireless/marvell/libertas_tf/if_usb.c  |   2 +
 drivers/net/wireless/marvell/mwifiex/11n.c         |   5 +-
 drivers/net/wireless/marvell/mwifiex/cfg80211.c    |  32 +--
 drivers/net/wireless/marvell/mwifiex/pcie.c        |  36 ++-
 drivers/net/wireless/marvell/mwifiex/usb.c         |  16 ++
 drivers/net/wireless/marvell/mwl8k.c               |   2 +-
 drivers/net/wireless/mediatek/mt76/debugfs.c       |  10 +-
 drivers/net/wireless/mediatek/mt76/mt76.h          |   8 +-
 .../net/wireless/mediatek/mt76/mt7615/debugfs.c    |  29 ++-
 drivers/net/wireless/mediatek/mt76/mt7615/init.c   |   6 +-
 drivers/net/wireless/mediatek/mt76/mt7615/mac.c    |  60 ++---
 drivers/net/wireless/mediatek/mt76/mt7615/main.c   |   4 +-
 drivers/net/wireless/mediatek/mt76/mt7615/mcu.c    |  18 +-
 .../net/wireless/mediatek/mt76/mt76_connac_mcu.c   |  30 ++-
 .../net/wireless/mediatek/mt76/mt76_connac_mcu.h   |   8 +-
 drivers/net/wireless/mediatek/mt76/mt76x02_mac.c   |  13 +-
 drivers/net/wireless/mediatek/mt76/mt7915/init.c   |  10 +-
 drivers/net/wireless/mediatek/mt76/mt7915/mac.c    |   2 +-
 drivers/net/wireless/mediatek/mt76/mt7915/mac.h    |   3 +-
 drivers/net/wireless/mediatek/mt76/mt7915/mcu.c    |  22 +-
 .../net/wireless/mediatek/mt76/mt7921/debugfs.c    |  36 ++-
 drivers/net/wireless/mediatek/mt76/mt7921/init.c   |  13 ++
 drivers/net/wireless/mediatek/mt76/mt7921/mac.c    |  68 +++++-
 drivers/net/wireless/mediatek/mt76/mt7921/mac.h    |   8 +
 drivers/net/wireless/mediatek/mt76/mt7921/mcu.c    |  22 +-
 drivers/net/wireless/mediatek/mt76/mt7921/mcu.h    |  10 +-
 drivers/net/wireless/mediatek/mt76/mt7921/regs.h   |   8 +-
 drivers/net/wireless/microchip/wilc1000/cfg80211.c |   3 +-
 .../net/wireless/realtek/rtl818x/rtl8187/rtl8225.c |  14 +-
 drivers/net/wireless/realtek/rtw88/fw.c            |   7 +-
 drivers/net/wireless/realtek/rtw88/reg.h           |   1 +
 drivers/net/wireless/rsi/rsi_91x_core.c            |   2 +
 drivers/net/wireless/rsi/rsi_91x_hal.c             |  10 +-
 drivers/net/wireless/rsi/rsi_91x_mac80211.c        |  74 ++----
 drivers/net/wireless/rsi/rsi_91x_main.c            |  17 +-
 drivers/net/wireless/rsi/rsi_91x_mgmt.c            |  24 +-
 drivers/net/wireless/rsi/rsi_91x_sdio.c            |   5 +-
 drivers/net/wireless/rsi/rsi_91x_usb.c             |   5 +-
 drivers/net/wireless/rsi/rsi_hal.h                 |  11 +
 drivers/net/wireless/rsi/rsi_main.h                |  15 +-
 drivers/nfc/pn533/pn533.c                          |   6 +-
 drivers/nvdimm/btt.c                               |   1 -
 drivers/nvdimm/pmem.c                              |  13 +-
 drivers/nvme/host/multipath.c                      |   9 +-
 drivers/nvme/host/rdma.c                           |   2 +
 drivers/nvme/target/configfs.c                     |   2 +
 drivers/nvme/target/rdma.c                         |  24 ++
 drivers/nvme/target/tcp.c                          |  16 ++
 drivers/of/unittest.c                              |  16 +-
 drivers/opp/of.c                                   |   2 +-
 drivers/pci/controller/cadence/pci-j721e.c         |   2 +-
 drivers/pci/controller/cadence/pcie-cadence-plat.c |   2 +
 drivers/pci/controller/dwc/pcie-uniphier.c         |  26 +--
 drivers/pci/controller/pci-aardvark.c              | 251 +++++++++++++++++---
 drivers/pci/msi.c                                  |  36 +--
 drivers/pci/pci-bridge-emul.c                      |  13 ++
 drivers/pci/pci.c                                  |   8 +
 drivers/pci/quirks.c                               |   1 +
 drivers/phy/microchip/sparx5_serdes.c              |   4 +-
 drivers/phy/qualcomm/phy-qcom-qmp.c                |   2 +-
 drivers/phy/qualcomm/phy-qcom-qusb2.c              |  16 +-
 drivers/phy/qualcomm/phy-qcom-snps-femto-v2.c      |   2 +-
 drivers/phy/ti/phy-gmii-sel.c                      |   2 +
 drivers/pinctrl/core.c                             |   2 +
 drivers/pinctrl/pinctrl-equilibrium.c              |   7 +-
 drivers/pinctrl/renesas/core.c                     |   2 +-
 drivers/pinctrl/renesas/pinctrl-rzg2l.c            |   2 +-
 .../platform/surface/surface_aggregator_registry.c |  54 +++++
 drivers/platform/x86/thinkpad_acpi.c               |   2 +-
 drivers/platform/x86/wmi.c                         |   9 +-
 drivers/power/reset/at91-reset.c                   |   4 +-
 drivers/power/supply/bq27xxx_battery_i2c.c         |   3 +-
 drivers/power/supply/max17040_battery.c            |   2 +
 drivers/power/supply/max17042_battery.c            |  12 +-
 drivers/power/supply/rt5033_battery.c              |   2 +-
 drivers/regulator/s5m8767.c                        |  21 +-
 drivers/remoteproc/imx_rproc.c                     |  41 ++--
 drivers/remoteproc/remoteproc_core.c               |   8 +-
 drivers/remoteproc/remoteproc_coredump.c           |   2 +-
 drivers/remoteproc/remoteproc_elf_loader.c         |   4 +-
 drivers/rtc/rtc-ds1302.c                           |   7 +
 drivers/rtc/rtc-ds1390.c                           |   7 +
 drivers/rtc/rtc-mcp795.c                           |   7 +
 drivers/rtc/rtc-pcf2123.c                          |   9 +
 drivers/rtc/rtc-rv3032.c                           |   4 +-
 drivers/s390/char/tape_std.c                       |   3 +-
 drivers/s390/cio/css.c                             |   4 +-
 drivers/s390/cio/device_ops.c                      |  12 +-
 drivers/s390/crypto/ap_queue.c                     |   2 +
 drivers/scsi/csiostor/csio_lnode.c                 |   2 +-
 drivers/scsi/dc395x.c                              |   1 +
 drivers/scsi/hosts.c                               |   1 +
 drivers/scsi/lpfc/lpfc_els.c                       |  12 +-
 drivers/scsi/lpfc/lpfc_hbadisc.c                   |  10 +-
 drivers/scsi/lpfc/lpfc_nvme.c                      |   5 +-
 drivers/scsi/lpfc/lpfc_scsi.c                      |   7 +
 drivers/scsi/lpfc/lpfc_sli.c                       | 101 ++++++--
 drivers/scsi/megaraid/megaraid_sas_fusion.c        |  11 +-
 drivers/scsi/pm8001/pm8001_hwi.c                   |   2 +-
 drivers/scsi/pm8001/pm8001_sas.h                   |   3 +-
 drivers/scsi/pm8001/pm80xx_hwi.c                   |  53 ++++-
 drivers/scsi/qedf/qedf_main.c                      |   2 +
 drivers/scsi/qla2xxx/qla_attr.c                    |  24 +-
 drivers/scsi/qla2xxx/qla_edif.c                    | 259 ++++++++++++---------
 drivers/scsi/qla2xxx/qla_edif.h                    |   3 +-
 drivers/scsi/qla2xxx/qla_edif_bsg.h                |   2 +-
 drivers/scsi/qla2xxx/qla_gbl.h                     |   4 +-
 drivers/scsi/qla2xxx/qla_init.c                    |  77 ++++--
 drivers/scsi/qla2xxx/qla_mr.c                      |  23 --
 drivers/scsi/qla2xxx/qla_nvme.c                    |  14 +-
 drivers/scsi/qla2xxx/qla_os.c                      |  37 +--
 drivers/scsi/qla2xxx/qla_target.c                  |   1 +
 drivers/scsi/scsi_error.c                          |  25 ++
 drivers/scsi/scsi_ioctl.c                          |   2 +
 drivers/scsi/scsi_lib.c                            |   3 +-
 drivers/scsi/scsi_sysfs.c                          |   1 +
 drivers/scsi/ufs/ufshcd-pltfrm.c                   |   4 +-
 drivers/scsi/ufs/ufshcd.c                          | 186 +--------------
 drivers/scsi/ufs/ufshcd.h                          |  14 --
 drivers/scsi/ufs/ufshpb.c                          |  31 ++-
 drivers/scsi/ufs/ufshpb.h                          |   1 -
 drivers/soc/fsl/dpaa2-console.c                    |   1 +
 drivers/soc/fsl/dpio/dpio-service.c                |   2 +-
 drivers/soc/fsl/dpio/qbman-portal.c                |   9 +-
 drivers/soc/qcom/apr.c                             |   2 +
 drivers/soc/qcom/llcc-qcom.c                       |   2 +-
 drivers/soc/qcom/rpmhpd.c                          |  20 +-
 drivers/soc/qcom/socinfo.c                         |   4 +-
 drivers/soc/samsung/Kconfig                        |   1 +
 drivers/soc/tegra/pmc.c                            |   2 +-
 drivers/soundwire/bus.c                            |   2 +-
 drivers/soundwire/debugfs.c                        |   2 +-
 drivers/spi/atmel-quadspi.c                        |   2 +-
 drivers/spi/spi-bcm-qspi.c                         |   8 +-
 drivers/spi/spi-mtk-nor.c                          |   2 +-
 drivers/spi/spi-rpc-if.c                           |   4 +-
 drivers/spi/spi-stm32-qspi.c                       |   2 +-
 drivers/spi/spi.c                                  |  41 ++++
 drivers/staging/ks7010/Kconfig                     |   3 +
 drivers/staging/media/atomisp/i2c/atomisp-lm3554.c |  37 +--
 drivers/staging/media/imx/imx-media-dev-common.c   |   2 +
 drivers/staging/media/ipu3/ipu3-v4l2.c             |   7 +-
 drivers/staging/media/rkvdec/rkvdec-h264.c         |   5 +-
 drivers/staging/media/rkvdec/rkvdec.c              |  40 ++--
 drivers/staging/most/dim2/Makefile                 |   2 +-
 drivers/staging/most/dim2/dim2.c                   |  24 +-
 drivers/staging/most/dim2/sysfs.c                  |  49 ----
 drivers/staging/most/dim2/sysfs.h                  |  11 -
 drivers/staging/r8188eu/core/rtw_mlme.c            |   2 +
 drivers/target/target_core_tmr.c                   |  17 +-
 drivers/target/target_core_transport.c             |  30 ++-
 .../intel/int340x_thermal/processor_thermal_mbox.c |   1 +
 drivers/thermal/qcom/Kconfig                       |   2 +-
 drivers/thermal/qcom/tsens.c                       |  29 ++-
 drivers/thermal/thermal_core.c                     |  16 +-
 drivers/tty/serial/8250/8250_dw.c                  |   2 +-
 drivers/tty/serial/8250/8250_port.c                |  21 +-
 drivers/tty/serial/cpm_uart/cpm_uart_core.c        |   2 +
 drivers/tty/serial/imx.c                           |   4 +-
 drivers/tty/serial/serial_core.c                   |  16 +-
 drivers/tty/serial/xilinx_uartps.c                 |   3 +-
 drivers/usb/chipidea/core.c                        |  23 +-
 drivers/usb/dwc2/drd.c                             |  24 +-
 drivers/usb/dwc3/core.h                            |   1 +
 drivers/usb/dwc3/gadget.c                          |   8 +-
 drivers/usb/gadget/legacy/hid.c                    |   4 +-
 drivers/usb/host/xhci-hub.c                        |   3 +-
 drivers/usb/host/xhci-pci.c                        |  16 ++
 drivers/usb/misc/iowarrior.c                       |   8 +-
 drivers/usb/musb/Kconfig                           |   2 +-
 drivers/usb/serial/keyspan.c                       |  15 +-
 drivers/usb/typec/Kconfig                          |   4 +-
 drivers/vdpa/mlx5/net/mlx5_vnet.c                  |   1 -
 drivers/video/backlight/backlight.c                |   6 -
 drivers/video/fbdev/chipsfb.c                      |   2 +-
 drivers/video/fbdev/efifb.c                        |  21 +-
 drivers/virtio/virtio_ring.c                       |  14 +-
 drivers/watchdog/Kconfig                           |   2 +-
 drivers/watchdog/f71808e_wdt.c                     |   4 +-
 drivers/xen/balloon.c                              |  86 +++++--
 drivers/xen/xen-pciback/conf_space_capability.c    |   2 +-
 fs/btrfs/disk-io.c                                 |   3 +-
 fs/btrfs/reflink.c                                 |   2 +-
 fs/btrfs/tree-log.c                                |   4 +-
 fs/btrfs/volumes.c                                 |  14 +-
 fs/ceph/mdsmap.c                                   |   4 -
 fs/cifs/cifsglob.h                                 |   3 +-
 fs/cifs/connect.c                                  |  21 +-
 fs/cifs/file.c                                     |  35 ++-
 fs/cifs/fs_context.c                               |  10 +
 fs/cifs/fs_context.h                               |   1 +
 fs/crypto/fscrypt_private.h                        |   5 +-
 fs/crypto/hkdf.c                                   |  11 +-
 fs/crypto/keysetup.c                               |  57 ++++-
 fs/erofs/decompressor.c                            |   1 -
 fs/erofs/zdata.c                                   |  13 +-
 fs/erofs/zpvec.h                                   |  13 +-
 fs/exfat/inode.c                                   |   2 +-
 fs/ext4/extents.c                                  |  63 +++--
 fs/ext4/inode.c                                    |  15 +-
 fs/ext4/super.c                                    |   9 +-
 fs/f2fs/compress.c                                 |   1 +
 fs/f2fs/inode.c                                    |   2 +-
 fs/f2fs/namei.c                                    |   2 +-
 fs/f2fs/super.c                                    |   2 +
 fs/fuse/dev.c                                      |  14 +-
 fs/gfs2/glock.c                                    |  24 +-
 fs/io-wq.c                                         |  88 +++++--
 fs/io_uring.c                                      |   4 +-
 fs/jfs/jfs_mount.c                                 |  51 ++--
 fs/ksmbd/Kconfig                                   |   1 +
 fs/ksmbd/server.c                                  |   1 +
 fs/ksmbd/smb2misc.c                                |   6 +-
 fs/ksmbd/smb2pdu.c                                 |  11 +-
 fs/nfs/dir.c                                       |   9 +-
 fs/nfs/direct.c                                    |   2 +-
 fs/nfs/flexfilelayout/flexfilelayoutdev.c          |   4 +-
 fs/nfs/inode.c                                     |  13 +-
 fs/nfs/nfs3xdr.c                                   |   2 +-
 fs/nfs/nfs4idmap.c                                 |   2 +-
 fs/nfs/nfs4proc.c                                  |  15 +-
 fs/nfs/pnfs.h                                      |   2 +-
 fs/nfs/pnfs_nfs.c                                  |   6 +-
 fs/nfs/proc.c                                      |   2 +-
 fs/nfs/write.c                                     |  26 +--
 fs/ocfs2/file.c                                    |   8 +-
 fs/open.c                                          |  16 +-
 fs/orangefs/dcache.c                               |   4 +-
 fs/overlayfs/copy_up.c                             |  23 +-
 fs/overlayfs/file.c                                |  16 +-
 fs/overlayfs/inode.c                               |   5 +-
 fs/proc/stat.c                                     |   4 +-
 fs/proc/uptime.c                                   |  14 +-
 fs/quota/quota_tree.c                              |  15 ++
 fs/tracefs/inode.c                                 |   3 +-
 include/drm/ttm/ttm_bo_api.h                       |   3 +-
 include/linux/blkdev.h                             |   2 -
 include/linux/bpf-cgroup.h                         |   1 +
 include/linux/cc_platform.h                        |  88 +++++++
 include/linux/console.h                            |   2 +
 include/linux/cpufreq.h                            |   2 +-
 include/linux/dma-buf.h                            |   2 +-
 include/linux/dsa/ocelot.h                         |   1 +
 include/linux/ethtool_netlink.h                    |   3 +
 include/linux/filter.h                             |   5 +-
 include/linux/fortify-string.h                     |   5 +-
 include/linux/kernel_stat.h                        |   1 +
 include/linux/libata.h                             |   2 +-
 include/linux/msi.h                                |   2 +-
 include/linux/nfs_fs.h                             |   1 +
 include/linux/posix-timers.h                       |   2 +
 include/linux/rpmsg.h                              |   2 +-
 include/linux/sched.h                              |   1 +
 include/linux/sched/task.h                         |   3 +-
 include/linux/sched/task_stack.h                   |   4 +
 include/linux/seq_file.h                           |   2 +-
 include/linux/signal_types.h                       |   3 +
 include/linux/skmsg.h                              |  18 +-
 include/linux/surface_aggregator/controller.h      |   4 +-
 include/linux/tpm.h                                |   1 +
 include/media/videobuf2-core.h                     |  37 +--
 include/memory/renesas-rpc-if.h                    |   1 +
 include/net/inet_connection_sock.h                 |   2 +-
 include/net/llc.h                                  |   4 +-
 include/net/neighbour.h                            |  12 +-
 include/net/sch_generic.h                          |   4 +
 include/net/sctp/sctp.h                            |   7 +-
 include/net/sock.h                                 |   2 +-
 include/net/strparser.h                            |  20 +-
 include/net/tcp.h                                  |  17 +-
 include/rdma/ib_verbs.h                            |   7 +-
 include/scsi/scsi_cmnd.h                           |   2 +-
 include/scsi/scsi_host.h                           |   1 +
 include/sound/soc-topology.h                       |   3 +-
 include/uapi/asm-generic/signal-defs.h             |   1 +
 include/uapi/linux/ethtool_netlink.h               |   4 +-
 include/uapi/linux/pci_regs.h                      |   6 +
 init/main.c                                        |   4 +-
 kernel/bpf/trampoline.c                            |   6 +-
 kernel/bpf/verifier.c                              |   4 +-
 kernel/cgroup/cgroup.c                             |  31 ++-
 kernel/cgroup/rstat.c                              |   2 -
 kernel/debug/kdb/kdb_bt.c                          |  16 +-
 kernel/debug/kdb/kdb_main.c                        |  37 +--
 kernel/debug/kdb/kdb_private.h                     |   4 +-
 kernel/debug/kdb/kdb_support.c                     | 118 ++--------
 kernel/fork.c                                      |   3 +-
 kernel/irq/msi.c                                   |   4 +-
 kernel/kprobes.c                                   |   3 +-
 kernel/locking/lockdep.c                           |   4 +-
 kernel/locking/rwsem.c                             |  53 +++--
 kernel/power/energy_model.c                        |  23 +-
 kernel/power/swap.c                                |   7 +-
 kernel/rcu/rcutorture.c                            |  48 +++-
 kernel/rcu/tasks.h                                 |   3 +-
 kernel/rcu/tree.c                                  |   2 +-
 kernel/rcu/tree_exp.h                              |   2 +-
 kernel/rcu/tree_plugin.h                           |   8 +-
 kernel/sched/core.c                                |  62 +++--
 kernel/scs.c                                       |   1 +
 kernel/signal.c                                    |  26 +--
 kernel/time/posix-cpu-timers.c                     |  19 +-
 kernel/trace/ftrace.c                              |  23 +-
 kernel/trace/ring_buffer.c                         |   5 +
 kernel/trace/trace.c                               |  73 +++---
 kernel/trace/trace.h                               |   3 +
 kernel/trace/trace_boot.c                          |   4 +
 kernel/trace/trace_dynevent.c                      |   2 +-
 kernel/trace/trace_event_perf.c                    |   6 +-
 kernel/trace/trace_events.c                        |  42 ++--
 kernel/trace/trace_events_synth.c                  |   4 +-
 kernel/trace/trace_functions_graph.c               |   2 +-
 kernel/trace/trace_hwlat.c                         |   6 +-
 kernel/trace/trace_kprobe.c                        |   8 +-
 kernel/trace/trace_osnoise.c                       |  14 +-
 kernel/trace/trace_printk.c                        |   2 +-
 kernel/trace/trace_recursion_record.c              |   4 +-
 kernel/trace/trace_stack.c                         |   6 +-
 kernel/trace/trace_stat.c                          |   6 +-
 kernel/trace/trace_uprobe.c                        |   4 +-
 kernel/trace/tracing_map.c                         |  40 ++--
 kernel/workqueue.c                                 |  15 +-
 lib/crypto/sm4.c                                   |   4 +-
 lib/decompress_unxz.c                              |   2 +-
 lib/dynamic_debug.c                                |  12 +
 lib/iov_iter.c                                     |   5 +-
 lib/test_bpf.c                                     |  37 ++-
 lib/xz/xz_dec_lzma2.c                              |  21 +-
 lib/xz/xz_dec_stream.c                             |   6 +-
 mm/filemap.c                                       |   1 -
 mm/memcontrol.c                                    |  27 +--
 mm/oom_kill.c                                      |  23 +-
 mm/zsmalloc.c                                      |   7 +-
 net/8021q/vlan.c                                   |   3 -
 net/8021q/vlan_dev.c                               |   3 +
 net/9p/client.c                                    |   2 +
 net/bluetooth/l2cap_sock.c                         |  10 +-
 net/bluetooth/sco.c                                |  36 +--
 net/bridge/br_private.h                            |   2 +
 net/can/j1939/main.c                               |   7 +
 net/can/j1939/transport.c                          |  11 +
 net/core/dev.c                                     |   2 +
 net/core/filter.c                                  |  58 ++++-
 net/core/neighbour.c                               |  48 ++--
 net/core/net-sysfs.c                               |  55 +++++
 net/core/net_namespace.c                           |   4 +
 net/core/skmsg.c                                   |  43 +++-
 net/core/stream.c                                  |   3 -
 net/dccp/dccp.h                                    |   2 +-
 net/dccp/proto.c                                   |  14 +-
 net/dsa/switch.c                                   |   4 +-
 net/dsa/tag_ocelot.c                               |   3 +
 net/ethtool/pause.c                                |   3 +-
 net/ipv4/af_inet.c                                 |  16 +-
 net/ipv4/inet_connection_sock.c                    |   4 +-
 net/ipv4/inet_hashtables.c                         |   2 +-
 net/ipv4/proc.c                                    |   2 +-
 net/ipv4/tcp.c                                     |  40 +++-
 net/ipv4/tcp_bpf.c                                 |  48 +++-
 net/ipv6/addrconf.c                                |   3 +
 net/ipv6/af_inet6.c                                |  21 +-
 net/ipv6/udp.c                                     |   2 +-
 net/mac80211/s1g.c                                 |   8 +-
 net/mctp/af_mctp.c                                 |  13 ++
 net/mptcp/options.c                                |   8 +-
 net/mptcp/protocol.c                               |  43 +++-
 net/netfilter/nf_conntrack_proto_udp.c             |   7 +-
 net/netfilter/nfnetlink_queue.c                    |   2 +-
 net/netfilter/nft_dynset.c                         |  11 +-
 net/rxrpc/rtt.c                                    |   2 +-
 net/sched/sch_generic.c                            |   9 +
 net/sched/sch_mq.c                                 |  24 ++
 net/sched/sch_mqprio.c                             |  23 ++
 net/sched/sch_taprio.c                             |  27 ++-
 net/sctp/output.c                                  |  13 +-
 net/sctp/transport.c                               |  11 +-
 net/smc/af_smc.c                                   |  18 +-
 net/strparser/strparser.c                          |  10 +-
 net/sunrpc/addr.c                                  |  40 ++--
 net/sunrpc/xprt.c                                  |  28 +--
 net/vmw_vsock/af_vsock.c                           |   2 +
 net/wireless/core.c                                |  10 +
 samples/bpf/xdp_redirect_cpu_user.c                |   6 +-
 samples/kprobes/kretprobe_example.c                |   2 +-
 scripts/leaking_addresses.pl                       |   3 +-
 security/apparmor/label.c                          |   4 +-
 security/integrity/evm/evm_main.c                  |   2 +-
 security/integrity/ima/ima_policy.c                |  27 ++-
 security/selinux/ss/services.c                     | 162 ++++++-------
 security/smack/smackfs.c                           |  11 +-
 sound/core/memalloc.c                              |   7 +-
 sound/core/oss/mixer_oss.c                         |  44 +++-
 sound/core/timer.c                                 |  17 +-
 sound/firewire/oxfw/oxfw-stream.c                  |   7 +-
 sound/firewire/oxfw/oxfw.c                         |   8 +
 sound/firewire/oxfw/oxfw.h                         |   5 +
 sound/pci/hda/hda_intel.c                          |  52 ++---
 sound/pci/hda/patch_realtek.c                      |  36 +++
 sound/pci/rme9652/hdsp.c                           |  41 ++--
 sound/pci/rme9652/rme9652.c                        |  41 ++--
 sound/soc/codecs/cs42l42.c                         |  27 ++-
 sound/soc/codecs/wcd9335.c                         |   2 +-
 sound/soc/sh/rcar/core.c                           |   1 +
 sound/soc/sof/topology.c                           |   9 +
 sound/soc/tegra/tegra_asoc_machine.c               |  60 ++++-
 sound/soc/tegra/tegra_asoc_machine.h               |   1 +
 sound/synth/emux/emux.c                            |   2 +-
 sound/usb/6fire/comm.c                             |   2 +-
 sound/usb/6fire/firmware.c                         |   6 +-
 sound/usb/card.h                                   |   1 +
 sound/usb/endpoint.c                               |   7 +-
 sound/usb/format.c                                 |   1 +
 sound/usb/line6/driver.c                           |  14 +-
 sound/usb/line6/driver.h                           |   2 +-
 sound/usb/line6/podhd.c                            |   6 +-
 sound/usb/line6/toneport.c                         |   2 +-
 sound/usb/misc/ua101.c                             |   4 +-
 sound/usb/quirks.c                                 |   1 +
 tools/arch/x86/lib/insn.c                          |   5 +-
 tools/bpf/bpftool/prog.c                           |  16 +-
 tools/include/asm-generic/unaligned.h              |  23 ++
 tools/lib/bpf/bpf.c                                |   4 +-
 tools/lib/bpf/bpf_core_read.h                      |   2 +-
 tools/lib/bpf/btf.c                                |  22 +-
 tools/lib/bpf/libbpf.c                             |   8 +-
 tools/lib/bpf/skel_internal.h                      |   6 +-
 tools/objtool/arch/x86/decode.c                    |  20 ++
 tools/objtool/check.c                              | 159 +++++++------
 tools/objtool/include/objtool/arch.h               |   1 +
 tools/perf/util/bpf-event.c                        |   4 +-
 tools/perf/util/intel-pt-decoder/Build             |   2 +
 .../testing/selftests/bpf/prog_tests/perf_buffer.c |   4 +-
 tools/testing/selftests/bpf/prog_tests/sk_lookup.c |   4 +-
 tools/testing/selftests/bpf/prog_tests/test_ima.c  |   3 +-
 tools/testing/selftests/bpf/progs/strobemeta.h     |   4 +-
 tools/testing/selftests/bpf/test_progs.c           |   4 +-
 .../selftests/bpf/test_xdp_redirect_multi.sh       |  62 ++---
 .../testing/selftests/bpf/verifier/array_access.c  |   2 +-
 tools/testing/selftests/bpf/xdp_redirect_multi.c   |   4 +-
 tools/testing/selftests/core/close_range_test.c    |   2 +-
 tools/testing/selftests/kvm/lib/x86_64/svm.c       |  14 +-
 .../selftests/kvm/x86_64/mmio_warning_test.c       |   2 +-
 tools/testing/selftests/net/Makefile               |   9 +-
 tools/testing/selftests/net/fib_nexthops.sh        |   1 +
 .../selftests/net/forwarding/bridge_igmp.sh        |  12 +-
 .../testing/selftests/net/forwarding/bridge_mld.sh |  12 +-
 tools/testing/selftests/net/gre_gso.sh             |   9 +-
 tools/testing/selftests/net/mptcp/mptcp_join.sh    |   2 +-
 tools/testing/selftests/net/udpgso_bench_rx.c      |  11 +-
 tools/testing/selftests/sched/cs_prctl_test.c      |  28 ++-
 tools/testing/selftests/x86/iopl.c                 |  78 +++++--
 tools/tracing/latency/latency-collector.c          |   2 +-
 1031 files changed, 8927 insertions(+), 5210 deletions(-)



^ permalink raw reply	[flat|nested] 35+ messages in thread

* RE: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-17 10:19 [PATCH 5.15 000/923] 5.15.3-rc3 review Greg Kroah-Hartman
@ 2021-11-17 13:37 ` Fox Chen
  2021-11-17 14:13 ` Guenter Roeck
                   ` (6 subsequent siblings)
  7 siblings, 0 replies; 35+ messages in thread
From: Fox Chen @ 2021-11-17 13:37 UTC (permalink / raw)
  To: linux-kernel
  Cc: Greg Kroah-Hartman, torvalds, akpm, linux, shuah, patches,
	lkft-triage, pavel, jonathanh, f.fainelli, stable, Fox Chen

On Wed, 17 Nov 2021 11:19:15 +0100, Greg Kroah-Hartman <gregkh@linuxfoundation.org> wrote:
> This is the start of the stable review cycle for the 5.15.3 release.
> There are 923 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.
> 
> Responses should be made by Fri, 19 Nov 2021 10:14:52 +0000.
> Anything received after that time might be too late.
> 
> The whole patch series can be found in one patch at:
> 	https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.3-rc3.gz
> or in the git tree and branch at:
> 	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
> and the diffstat can be found below.
> 
> thanks,
> 
> greg k-h
> 

5.15.3-rc3 Successfully Compiled and booted on my Raspberry PI 4b (8g) (bcm2711)
                
Tested-by: Fox Chen <foxhlchen@gmail.com>


^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-17 10:19 [PATCH 5.15 000/923] 5.15.3-rc3 review Greg Kroah-Hartman
  2021-11-17 13:37 ` Fox Chen
@ 2021-11-17 14:13 ` Guenter Roeck
  2021-11-17 14:43   ` Greg Kroah-Hartman
  2021-11-17 17:34 ` Jon Hunter
                   ` (5 subsequent siblings)
  7 siblings, 1 reply; 35+ messages in thread
From: Guenter Roeck @ 2021-11-17 14:13 UTC (permalink / raw)
  To: Greg Kroah-Hartman, linux-kernel
  Cc: torvalds, akpm, shuah, patches, lkft-triage, pavel, jonathanh,
	f.fainelli, stable

On 11/17/21 2:19 AM, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 5.15.3 release.
> There are 923 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.
> 
> Responses should be made by Fri, 19 Nov 2021 10:14:52 +0000.
> Anything received after that time might be too late.
> 

Build is still broken for m68k.

drivers/block/ataflop.c: In function 'atari_cleanup_floppy_disk':
drivers/block/ataflop.c:2050:17: error: implicit declaration of function 'blk_cleanup_disk'
drivers/block/ataflop.c: In function 'atari_floppy_init':
drivers/block/ataflop.c:2065:15: error: implicit declaration of function '__register_blkdev'

Are you sure you want to carry that patch series into v5.10.y ? I had to revert
pretty much everything to get it to compile. It seems to me that someone should
provide a working backport if the series is needed/wanted in v5.10.y.

Guenter

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-17 14:13 ` Guenter Roeck
@ 2021-11-17 14:43   ` Greg Kroah-Hartman
  2021-11-17 14:54     ` Guenter Roeck
  0 siblings, 1 reply; 35+ messages in thread
From: Greg Kroah-Hartman @ 2021-11-17 14:43 UTC (permalink / raw)
  To: Guenter Roeck
  Cc: linux-kernel, torvalds, akpm, shuah, patches, lkft-triage, pavel,
	jonathanh, f.fainelli, stable

On Wed, Nov 17, 2021 at 06:13:47AM -0800, Guenter Roeck wrote:
> On 11/17/21 2:19 AM, Greg Kroah-Hartman wrote:
> > This is the start of the stable review cycle for the 5.15.3 release.
> > There are 923 patches in this series, all will be posted as a response
> > to this one.  If anyone has any issues with these being applied, please
> > let me know.
> > 
> > Responses should be made by Fri, 19 Nov 2021 10:14:52 +0000.
> > Anything received after that time might be too late.
> > 
> 
> Build is still broken for m68k.
> 
> drivers/block/ataflop.c: In function 'atari_cleanup_floppy_disk':
> drivers/block/ataflop.c:2050:17: error: implicit declaration of function 'blk_cleanup_disk'
> drivers/block/ataflop.c: In function 'atari_floppy_init':
> drivers/block/ataflop.c:2065:15: error: implicit declaration of function '__register_blkdev'
> 
> Are you sure you want to carry that patch series into v5.10.y ? I had to revert
> pretty much everything to get it to compile. It seems to me that someone should
> provide a working backport if the series is needed/wanted in v5.10.y.

Wow, I dropped the wrong patch :(

No, I don't want to carry that series, let me go rip out everything for
ataflop.c now.  If someone cares about this for 5.10.y, I'll take a
backport series, but really, they should just go use 5.15.y instead.

I'll push out a -rc4 now.

thanks,

greg k-h

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-17 14:43   ` Greg Kroah-Hartman
@ 2021-11-17 14:54     ` Guenter Roeck
  0 siblings, 0 replies; 35+ messages in thread
From: Guenter Roeck @ 2021-11-17 14:54 UTC (permalink / raw)
  To: Greg Kroah-Hartman
  Cc: linux-kernel, torvalds, akpm, shuah, patches, lkft-triage, pavel,
	jonathanh, f.fainelli, stable

On Wed, Nov 17, 2021 at 03:43:53PM +0100, Greg Kroah-Hartman wrote:
> On Wed, Nov 17, 2021 at 06:13:47AM -0800, Guenter Roeck wrote:
> > On 11/17/21 2:19 AM, Greg Kroah-Hartman wrote:
> > > This is the start of the stable review cycle for the 5.15.3 release.
> > > There are 923 patches in this series, all will be posted as a response
> > > to this one.  If anyone has any issues with these being applied, please
> > > let me know.
> > > 
> > > Responses should be made by Fri, 19 Nov 2021 10:14:52 +0000.
> > > Anything received after that time might be too late.
> > > 
> > 
> > Build is still broken for m68k.
> > 
> > drivers/block/ataflop.c: In function 'atari_cleanup_floppy_disk':
> > drivers/block/ataflop.c:2050:17: error: implicit declaration of function 'blk_cleanup_disk'
> > drivers/block/ataflop.c: In function 'atari_floppy_init':
> > drivers/block/ataflop.c:2065:15: error: implicit declaration of function '__register_blkdev'
> > 
> > Are you sure you want to carry that patch series into v5.10.y ? I had to revert
> > pretty much everything to get it to compile. It seems to me that someone should
> > provide a working backport if the series is needed/wanted in v5.10.y.
> 
> Wow, I dropped the wrong patch :(
> 
... and I replied to the wrong announcement. Yes, this was for 5.10.y.
Sorry, and thanks for catching.

Guenter

> No, I don't want to carry that series, let me go rip out everything for
> ataflop.c now.  If someone cares about this for 5.10.y, I'll take a
> backport series, but really, they should just go use 5.15.y instead.
> 
> I'll push out a -rc4 now.
> 
> thanks,
> 
> greg k-h

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-17 10:19 [PATCH 5.15 000/923] 5.15.3-rc3 review Greg Kroah-Hartman
  2021-11-17 13:37 ` Fox Chen
  2021-11-17 14:13 ` Guenter Roeck
@ 2021-11-17 17:34 ` Jon Hunter
  2021-11-17 18:51 ` Florian Fainelli
                   ` (4 subsequent siblings)
  7 siblings, 0 replies; 35+ messages in thread
From: Jon Hunter @ 2021-11-17 17:34 UTC (permalink / raw)
  To: Greg Kroah-Hartman, linux-kernel
  Cc: torvalds, akpm, linux, shuah, patches, lkft-triage, pavel,
	f.fainelli, stable, linux-tegra


On 17/11/2021 10:19, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 5.15.3 release.
> There are 923 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.
> 
> Responses should be made by Fri, 19 Nov 2021 10:14:52 +0000.
> Anything received after that time might be too late.
> 
> The whole patch series can be found in one patch at:
> 	https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.3-rc3.gz
> or in the git tree and branch at:
> 	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
> and the diffstat can be found below.
> 
> thanks,
> 
> greg k-h


No new regressions for Tegra.

Test results for stable-v5.15:
     10 builds:	10 pass, 0 fail
     28 boots:	28 pass, 0 fail
     114 tests:	108 pass, 6 fail

Linux version:	5.15.3-rc3-g7c10b031cbb7
Boards tested:	tegra124-jetson-tk1, tegra186-p2771-0000,
                 tegra194-p2972-0000, tegra194-p3509-0000+p3668-0000,
                 tegra20-ventana, tegra210-p2371-2180,
                 tegra210-p3450-0000, tegra30-cardhu-a04

Test failures:	tegra194-p2972-0000: boot.py
                 tegra194-p2972-0000: tegra-audio-boot-sanity.sh
                 tegra194-p2972-0000: tegra-audio-hda-playback.sh
                 tegra194-p3509-0000+p3668-0000: devices
                 tegra194-p3509-0000+p3668-0000: tegra-audio-boot-sanity.sh
                 tegra194-p3509-0000+p3668-0000: tegra-audio-hda-playback.sh

Tested-by: Jon Hunter <jonathanh@nvidia.com>

Jon

-- 
nvpublic

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-17 10:19 [PATCH 5.15 000/923] 5.15.3-rc3 review Greg Kroah-Hartman
                   ` (2 preceding siblings ...)
  2021-11-17 17:34 ` Jon Hunter
@ 2021-11-17 18:51 ` Florian Fainelli
  2021-11-17 20:25 ` Holger Kiehl
                   ` (3 subsequent siblings)
  7 siblings, 0 replies; 35+ messages in thread
From: Florian Fainelli @ 2021-11-17 18:51 UTC (permalink / raw)
  To: Greg Kroah-Hartman, linux-kernel
  Cc: torvalds, akpm, linux, shuah, patches, lkft-triage, pavel,
	jonathanh, stable

On 11/17/21 2:19 AM, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 5.15.3 release.
> There are 923 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.
> 
> Responses should be made by Fri, 19 Nov 2021 10:14:52 +0000.
> Anything received after that time might be too late.
> 
> The whole patch series can be found in one patch at:
> 	https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.3-rc3.gz
> or in the git tree and branch at:
> 	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
> and the diffstat can be found below.
> 
> thanks,
> 
> greg k-h

On ARCH_BRCMSTB using 32-bit and 64-bit ARM kernels:

Tested-by: Florian Fainelli <f.fainelli@gmail.com>
-- 
Florian

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-17 10:19 [PATCH 5.15 000/923] 5.15.3-rc3 review Greg Kroah-Hartman
                   ` (3 preceding siblings ...)
  2021-11-17 18:51 ` Florian Fainelli
@ 2021-11-17 20:25 ` Holger Kiehl
  2021-11-18  8:14   ` Greg Kroah-Hartman
  2021-11-17 20:35 ` Guenter Roeck
                   ` (2 subsequent siblings)
  7 siblings, 1 reply; 35+ messages in thread
From: Holger Kiehl @ 2021-11-17 20:25 UTC (permalink / raw)
  To: Greg Kroah-Hartman
  Cc: linux-kernel, torvalds, akpm, linux, shuah, patches, lkft-triage,
	pavel, jonathanh, f.fainelli, stable

Hello,

On Wed, 17 Nov 2021, Greg Kroah-Hartman wrote:

> This is the start of the stable review cycle for the 5.15.3 release.
> There are 923 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.
> 
> Responses should be made by Fri, 19 Nov 2021 10:14:52 +0000.
> Anything received after that time might be too late.
> 
> The whole patch series can be found in one patch at:
> 	https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.3-rc3.gz
> or in the git tree and branch at:
> 	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
> and the diffstat can be found below.
> 
On a Deskmini X300 with a AMD APU 5700G this does not boot (rc1+rc2 also
do not boot). As Scott Bruce already noticed, if one removes
c3fc9d9e8f2dc518a8ce3c77f833a11b47865944 "x86: Fix __get_wchan() for
!STACKTRACE" it boots.

Holger

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-17 10:19 [PATCH 5.15 000/923] 5.15.3-rc3 review Greg Kroah-Hartman
                   ` (4 preceding siblings ...)
  2021-11-17 20:25 ` Holger Kiehl
@ 2021-11-17 20:35 ` Guenter Roeck
  2021-11-17 21:32 ` Justin Forbes
  2021-11-18  5:45 ` [PATCH 5.15 000/923] 5.15.3-rc3 review Naresh Kamboju
  7 siblings, 0 replies; 35+ messages in thread
From: Guenter Roeck @ 2021-11-17 20:35 UTC (permalink / raw)
  To: Greg Kroah-Hartman
  Cc: linux-kernel, torvalds, akpm, shuah, patches, lkft-triage, pavel,
	jonathanh, f.fainelli, stable

On Wed, Nov 17, 2021 at 11:19:15AM +0100, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 5.15.3 release.
> There are 923 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.
> 
> Responses should be made by Fri, 19 Nov 2021 10:14:52 +0000.
> Anything received after that time might be too late.
> 

Build results:
	total: 154 pass: 154 fail: 0
Qemu test results:
	total: 482 pass: 482 fail: 0

Tested-by: Guenter Roeck <linux@roeck-us.net>

Guenter

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-17 10:19 [PATCH 5.15 000/923] 5.15.3-rc3 review Greg Kroah-Hartman
                   ` (5 preceding siblings ...)
  2021-11-17 20:35 ` Guenter Roeck
@ 2021-11-17 21:32 ` Justin Forbes
  2021-11-17 23:32   ` Holger Hoffstätte
  2021-11-18  5:45 ` [PATCH 5.15 000/923] 5.15.3-rc3 review Naresh Kamboju
  7 siblings, 1 reply; 35+ messages in thread
From: Justin Forbes @ 2021-11-17 21:32 UTC (permalink / raw)
  To: Greg Kroah-Hartman
  Cc: linux-kernel, torvalds, akpm, linux, shuah, patches, lkft-triage,
	pavel, jonathanh, f.fainelli, stable

On Wed, Nov 17, 2021 at 11:19:15AM +0100, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 5.15.3 release.
> There are 923 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.
> 
> Responses should be made by Fri, 19 Nov 2021 10:14:52 +0000.
> Anything received after that time might be too late.
> 
> The whole patch series can be found in one patch at:
> 	https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.3-rc3.gz
> or in the git tree and branch at:
> 	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
> and the diffstat can be found below.
> 

I replied to Bruno's original message to lkml which has CKI artifacts
for the issue, but I am still seeing it with rc3 on x86:

[    4.435551] BUG: unable to handle page fault for address: ffffb381402d7de0
[    4.437498] #PF: supervisor read access in kernel mode
[    4.438937] #PF: error_code(0x0000) - not-present page
[    4.440373] PGD 100000067 P4D 100000067 PUD 1001d7067 PMD 100a1f067 PTE 0
[    4.442269] Oops: 0000 [#1] SMP PTI
[    4.443256] CPU: 1 PID: 1 Comm: systemd Not tainted 5.15.3-0.rc3.1.fc35.x86_64 #1
[    4.445230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-3.fc34 04/01/2014
[    4.447514] RIP: 0010:__unwind_start+0x10b/0x1e0
[    4.448749] Code: af fb ff 85 c0 75 d2 eb c0 65 48 8b 04 25 c0 fb 01 00 48 39 c6 0f 84 86 00 00 00 48 8b 86 98 23 00 00 48 8d 78 38 48 89 7d 38 <48> 8b 50 28 48 89 55 40 48 8b 40 30 48 89 45 48 48 3d 80 43 00 a1
[    4.453406] RSP: 0018:ffffb38140017c18 EFLAGS: 00010006
[    4.454672] RAX: ffffb381402d7db8 RBX: ffffb381402d7db8 RCX: 0000000000000000
[    4.456370] RDX: 0000000000000000 RSI: ffff9b5080c08000 RDI: ffffb381402d7df0
[    4.458065] RBP: ffffb38140017c38 R08: 0000000000000040 R09: 0000000000005000
[    4.459689] R10: 8000000000000000 R11: 0000000000000000 R12: 0000000000000000
[    4.461306] R13: ffff9b5080c08c74 R14: 000000000000024b R15: 0000000000000001
[    4.462857] FS:  00007f8d7729c340(0000) GS:ffff9b51f7d00000(0000) knlGS:0000000000000000
[    4.464613] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    4.465825] CR2: ffffb381402d7de0 CR3: 0000000100244004 CR4: 0000000000770ee0
[    4.467301] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[    4.468789] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[    4.470217] PKRU: 55555554
[    4.470777] Call Trace:
[    4.471280]  <TASK>
[    4.471718]  __get_wchan+0x35/0x80
[    4.472415]  get_wchan+0x65/0x80
[    4.473085]  do_task_stat+0xcd9/0xde0
[    4.473821]  proc_single_show+0x4d/0xb0
[    4.474583]  seq_read_iter+0x120/0x4b0
[    4.475327]  seq_read+0xed/0x120
[    4.475973]  ? cap_convert_nscap+0x160/0x1b0
[    4.476832]  vfs_read+0x95/0x190
[    4.477472]  ksys_read+0x4f/0xc0
[    4.478115]  do_syscall_64+0x3b/0x90
[    4.478830]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[    4.479823] RIP: 0033:0x7f8d77e2c31c
[    4.480537] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 49 f9 ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 4f 4a f9 ff 48
[    4.484140] RSP: 002b:00007ffc2434e8c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[    4.485608] RAX: ffffffffffffffda RBX: 000055aa6dc4f650 RCX: 00007f8d77e2c31c
[    4.486991] RDX: 0000000000000400 RSI: 000055aa6dcaf960 RDI: 0000000000000005
[    4.488376] RBP: 00007f8d77f00300 R08: 0000000000000000 R09: 0000000000000001
[    4.489761] R10: 0000000000001000 R11: 0000000000000246 R12: 00007f8d7729c0f8
[    4.491159] R13: 0000000000000d68 R14: 00007f8d77eff700 R15: 0000000000000d68
[    4.492545]  </TASK>
[    4.492982] Modules linked in: xfs crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel serio_raw virtio_console virtio_blk virtio_net net_failover failover qemu_fw_cfg pkcs8_key_parser
[    4.496354] CR2: ffffb381402d7de0
[    4.497010] ---[ end trace dc5691b47f8ba15b ]---
[    4.497913] RIP: 0010:__unwind_start+0x10b/0x1e0
[    4.498822] Code: af fb ff 85 c0 75 d2 eb c0 65 48 8b 04 25 c0 fb 01 00 48 39 c6 0f 84 86 00 00 00 48 8b 86 98 23 00 00 48 8d 78 38 48 89 7d 38 <48> 8b 50 28 48 89 55 40 48 8b 40 30 48 89 45 48 48 3d 80 43 00 a1
[    4.502401] RSP: 0018:ffffb38140017c18 EFLAGS: 00010006
[    4.503418] RAX: ffffb381402d7db8 RBX: ffffb381402d7db8 RCX: 0000000000000000
[    4.504803] RDX: 0000000000000000 RSI: ffff9b5080c08000 RDI: ffffb381402d7df0
[    4.506185] RBP: ffffb38140017c38 R08: 0000000000000040 R09: 0000000000005000
[    4.507582] R10: 8000000000000000 R11: 0000000000000000 R12: 0000000000000000
[    4.508956] R13: ffff9b5080c08c74 R14: 000000000000024b R15: 0000000000000001
[    4.510339] FS:  00007f8d7729c340(0000) GS:ffff9b51f7d00000(0000) knlGS:0000000000000000
[    4.511914] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    4.513032] CR2: ffffb381402d7de0 CR3: 0000000100244004 CR4: 0000000000770ee0
[    4.514420] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[    4.515803] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[    4.517182] PKRU: 55555554
[    4.517724] Kernel panic - not syncing: Attempted to kill init! exitcode=0x00000009
[    4.519317] Kernel Offset: 0x20000000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[    4.521398] ---[ end Kernel panic - not syncing: Attempted to kill init! exitcode=0x00000009 ]---

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-17 21:32 ` Justin Forbes
@ 2021-11-17 23:32   ` Holger Hoffstätte
  2021-11-17 23:50     ` Linus Torvalds
  0 siblings, 1 reply; 35+ messages in thread
From: Holger Hoffstätte @ 2021-11-17 23:32 UTC (permalink / raw)
  To: Justin Forbes, Greg Kroah-Hartman
  Cc: linux-kernel, torvalds, akpm, linux, shuah, patches, lkft-triage,
	pavel, jonathanh, f.fainelli, stable

On 2021-11-17 22:32, Justin Forbes wrote:
> On Wed, Nov 17, 2021 at 11:19:15AM +0100, Greg Kroah-Hartman wrote:
>> This is the start of the stable review cycle for the 5.15.3 release.
>> There are 923 patches in this series, all will be posted as a response
>> to this one.  If anyone has any issues with these being applied, please
>> let me know.
>>
>> Responses should be made by Fri, 19 Nov 2021 10:14:52 +0000.
>> Anything received after that time might be too late.
>>
>> The whole patch series can be found in one patch at:
>> 	https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.3-rc3.gz
>> or in the git tree and branch at:
>> 	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
>> and the diffstat can be found below.
>>
> 
> I replied to Bruno's original message to lkml which has CKI artifacts
> for the issue, but I am still seeing it with rc3 on x86:
> 
> [    4.435551] BUG: unable to handle page fault for address: ffffb381402d7de0
> [    4.437498] #PF: supervisor read access in kernel mode
> [    4.438937] #PF: error_code(0x0000) - not-present page
> [    4.440373] PGD 100000067 P4D 100000067 PUD 1001d7067 PMD 100a1f067 PTE 0
> [    4.442269] Oops: 0000 [#1] SMP PTI
> [    4.443256] CPU: 1 PID: 1 Comm: systemd Not tainted 5.15.3-0.rc3.1.fc35.x86_64 #1
> [    4.445230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-3.fc34 04/01/2014
> [    4.447514] RIP: 0010:__unwind_start+0x10b/0x1e0
> [    4.448749] Code: af fb ff 85 c0 75 d2 eb c0 65 48 8b 04 25 c0 fb 01 00 48 39 c6 0f 84 86 00 00 00 48 8b 86 98 23 00 00 48 8d 78 38 48 89 7d 38 <48> 8b 50 28 48 89 55 40 48 8b 40 30 48 89 45 48 48 3d 80 43 00 a1
> [    4.453406] RSP: 0018:ffffb38140017c18 EFLAGS: 00010006
> [    4.454672] RAX: ffffb381402d7db8 RBX: ffffb381402d7db8 RCX: 0000000000000000
> [    4.456370] RDX: 0000000000000000 RSI: ffff9b5080c08000 RDI: ffffb381402d7df0
> [    4.458065] RBP: ffffb38140017c38 R08: 0000000000000040 R09: 0000000000005000
> [    4.459689] R10: 8000000000000000 R11: 0000000000000000 R12: 0000000000000000
> [    4.461306] R13: ffff9b5080c08c74 R14: 000000000000024b R15: 0000000000000001
> [    4.462857] FS:  00007f8d7729c340(0000) GS:ffff9b51f7d00000(0000) knlGS:0000000000000000
> [    4.464613] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [    4.465825] CR2: ffffb381402d7de0 CR3: 0000000100244004 CR4: 0000000000770ee0
> [    4.467301] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> [    4.468789] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
> [    4.470217] PKRU: 55555554
> [    4.470777] Call Trace:
> [    4.471280]  <TASK>
> [    4.471718]  __get_wchan+0x35/0x80
> [    4.472415]  get_wchan+0x65/0x80
> [    4.473085]  do_task_stat+0xcd9/0xde0
> [    4.473821]  proc_single_show+0x4d/0xb0
> [    4.474583]  seq_read_iter+0x120/0x4b0
> [    4.475327]  seq_read+0xed/0x120
> [    4.475973]  ? cap_convert_nscap+0x160/0x1b0
> [    4.476832]  vfs_read+0x95/0x190
> [    4.477472]  ksys_read+0x4f/0xc0
> [    4.478115]  do_syscall_64+0x3b/0x90
> [    4.478830]  entry_SYSCALL_64_after_hwframe+0x44/0xae
> [    4.479823] RIP: 0033:0x7f8d77e2c31c
> [    4.480537] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 49 f9 ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 4f 4a f9 ff 48
> [    4.484140] RSP: 002b:00007ffc2434e8c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
> [    4.485608] RAX: ffffffffffffffda RBX: 000055aa6dc4f650 RCX: 00007f8d77e2c31c
> [    4.486991] RDX: 0000000000000400 RSI: 000055aa6dcaf960 RDI: 0000000000000005
> [    4.488376] RBP: 00007f8d77f00300 R08: 0000000000000000 R09: 0000000000000001
> [    4.489761] R10: 0000000000001000 R11: 0000000000000246 R12: 00007f8d7729c0f8
> [    4.491159] R13: 0000000000000d68 R14: 00007f8d77eff700 R15: 0000000000000d68
> [    4.492545]  </TASK>
> [    4.492982] Modules linked in: xfs crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel serio_raw virtio_console virtio_blk virtio_net net_failover failover qemu_fw_cfg pkcs8_key_parser
> [    4.496354] CR2: ffffb381402d7de0
> [    4.497010] ---[ end trace dc5691b47f8ba15b ]---
> [    4.497913] RIP: 0010:__unwind_start+0x10b/0x1e0
> [    4.498822] Code: af fb ff 85 c0 75 d2 eb c0 65 48 8b 04 25 c0 fb 01 00 48 39 c6 0f 84 86 00 00 00 48 8b 86 98 23 00 00 48 8d 78 38 48 89 7d 38 <48> 8b 50 28 48 89 55 40 48 8b 40 30 48 89 45 48 48 3d 80 43 00 a1
> [    4.502401] RSP: 0018:ffffb38140017c18 EFLAGS: 00010006
> [    4.503418] RAX: ffffb381402d7db8 RBX: ffffb381402d7db8 RCX: 0000000000000000
> [    4.504803] RDX: 0000000000000000 RSI: ffff9b5080c08000 RDI: ffffb381402d7df0
> [    4.506185] RBP: ffffb38140017c38 R08: 0000000000000040 R09: 0000000000005000
> [    4.507582] R10: 8000000000000000 R11: 0000000000000000 R12: 0000000000000000
> [    4.508956] R13: ffff9b5080c08c74 R14: 000000000000024b R15: 0000000000000001
> [    4.510339] FS:  00007f8d7729c340(0000) GS:ffff9b51f7d00000(0000) knlGS:0000000000000000
> [    4.511914] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [    4.513032] CR2: ffffb381402d7de0 CR3: 0000000100244004 CR4: 0000000000770ee0
> [    4.514420] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> [    4.515803] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
> [    4.517182] PKRU: 55555554
> [    4.517724] Kernel panic - not syncing: Attempted to kill init! exitcode=0x00000009
> [    4.519317] Kernel Offset: 0x20000000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
> [    4.521398] ---[ end Kernel panic - not syncing: Attempted to kill init! exitcode=0x00000009 ]---
> 

This is great! Several people (incl. me) have seen the _exact same_ trace, but with
BMQ/PDS (custom CPU schedulers) so we suspected a locking issue/incompatibility in
get_wchan()'s spinlocking & task diddling compared to CFS. The fact that this happens
with vanilla means it's a generic problem with either: "sched: Add wrapper for get_wchan()
to keep task blocked" or "x86: Fix get_wchan() to support the ORC unwinder" or both.
I have been running with a dummy implementation of get_wchan that just returns 0
(effectively disabling wchan) and 5.15.3-rc3 has been rock-solid again.

Maybe just revert all the wchan stuff and let it stew in mainline a bit longer?

-h

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-17 23:32   ` Holger Hoffstätte
@ 2021-11-17 23:50     ` Linus Torvalds
  2021-11-18  0:16       ` Kees Cook
  2021-11-18  8:06       ` Peter Zijlstra
  0 siblings, 2 replies; 35+ messages in thread
From: Linus Torvalds @ 2021-11-17 23:50 UTC (permalink / raw)
  To: Holger Hoffstätte, Qi Zheng, Kees Cook,
	Peter Zijlstra (Intel),
	Thomas Gleixner
  Cc: Justin Forbes, Greg Kroah-Hartman, Linux Kernel Mailing List,
	Andrew Morton, Guenter Roeck, Shuah Khan, patches, lkft-triage,
	Pavel Machek, Jon Hunter, Florian Fainelli, stable

Sorry for top-posting and quoting this all, but the actual people
involved with the wchan changes don't seem to be on the participant
list.

And if people see this in stable kernels, I suspect it happens in my
kernel too, but there are more users of stable backports.

I already complained about the locking for the get_wchan() patch for
other reasons, but it looks like this is an actual unwinder problem
that triggers this issue.

Which I'm not AT ALL surprised about. In my locking complaint, I
explicitly mentioned that we've had unwinder issues before, and that
it's probably a really bad idea to call some random unwinder inside a
critical lock.

I really don't think the WCHAN code should use unwinders at all. It's
too damn fragile, and it's too easily triggered from user space.

So I think we need to revert all the wchan changes. Not just in
stable, but in mainline too.

And I hope people start taking the whole "unwinding is so fraught with
problems that you shouldn't do it in any normal circumstances"
seriously.

We've had toolchain issues with unwinding markers being wrong or incomplete.

We've had our own asm files not have all the proper annotations.

And most importantly, we've had unwinding code that is written by
people who don't take these issues seriously enough, and just blindly
follow possibly corrupted or wrong pointers.

Ironically, in the scheduler pull request for this all, the claim was
"Make wchan() more robust".

Which was very much the opposite of what it actually did.

              Linus

On Wed, Nov 17, 2021 at 3:32 PM Holger Hoffstätte
<holger@applied-asynchrony.com> wrote:
>
> On 2021-11-17 22:32, Justin Forbes wrote:
> > On Wed, Nov 17, 2021 at 11:19:15AM +0100, Greg Kroah-Hartman wrote:
> >> This is the start of the stable review cycle for the 5.15.3 release.
> >> There are 923 patches in this series, all will be posted as a response
> >> to this one.  If anyone has any issues with these being applied, please
> >> let me know.
> >>
> >> Responses should be made by Fri, 19 Nov 2021 10:14:52 +0000.
> >> Anything received after that time might be too late.
> >>
> >> The whole patch series can be found in one patch at:
> >>      https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.3-rc3.gz
> >> or in the git tree and branch at:
> >>      git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
> >> and the diffstat can be found below.
> >>
> >
> > I replied to Bruno's original message to lkml which has CKI artifacts
> > for the issue, but I am still seeing it with rc3 on x86:
> >
> > [    4.435551] BUG: unable to handle page fault for address: ffffb381402d7de0
> > [    4.437498] #PF: supervisor read access in kernel mode
> > [    4.438937] #PF: error_code(0x0000) - not-present page
> > [    4.440373] PGD 100000067 P4D 100000067 PUD 1001d7067 PMD 100a1f067 PTE 0
> > [    4.442269] Oops: 0000 [#1] SMP PTI
> > [    4.443256] CPU: 1 PID: 1 Comm: systemd Not tainted 5.15.3-0.rc3.1.fc35.x86_64 #1
> > [    4.445230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-3.fc34 04/01/2014
> > [    4.447514] RIP: 0010:__unwind_start+0x10b/0x1e0
> > [    4.448749] Code: af fb ff 85 c0 75 d2 eb c0 65 48 8b 04 25 c0 fb 01 00 48 39 c6 0f 84 86 00 00 00 48 8b 86 98 23 00 00 48 8d 78 38 48 89 7d 38 <48> 8b 50 28 48 89 55 40 48 8b 40 30 48 89 45 48 48 3d 80 43 00 a1
> > [    4.453406] RSP: 0018:ffffb38140017c18 EFLAGS: 00010006
> > [    4.454672] RAX: ffffb381402d7db8 RBX: ffffb381402d7db8 RCX: 0000000000000000
> > [    4.456370] RDX: 0000000000000000 RSI: ffff9b5080c08000 RDI: ffffb381402d7df0
> > [    4.458065] RBP: ffffb38140017c38 R08: 0000000000000040 R09: 0000000000005000
> > [    4.459689] R10: 8000000000000000 R11: 0000000000000000 R12: 0000000000000000
> > [    4.461306] R13: ffff9b5080c08c74 R14: 000000000000024b R15: 0000000000000001
> > [    4.462857] FS:  00007f8d7729c340(0000) GS:ffff9b51f7d00000(0000) knlGS:0000000000000000
> > [    4.464613] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> > [    4.465825] CR2: ffffb381402d7de0 CR3: 0000000100244004 CR4: 0000000000770ee0
> > [    4.467301] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> > [    4.468789] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
> > [    4.470217] PKRU: 55555554
> > [    4.470777] Call Trace:
> > [    4.471280]  <TASK>
> > [    4.471718]  __get_wchan+0x35/0x80
> > [    4.472415]  get_wchan+0x65/0x80
> > [    4.473085]  do_task_stat+0xcd9/0xde0
> > [    4.473821]  proc_single_show+0x4d/0xb0
> > [    4.474583]  seq_read_iter+0x120/0x4b0
> > [    4.475327]  seq_read+0xed/0x120
> > [    4.475973]  ? cap_convert_nscap+0x160/0x1b0
> > [    4.476832]  vfs_read+0x95/0x190
> > [    4.477472]  ksys_read+0x4f/0xc0
> > [    4.478115]  do_syscall_64+0x3b/0x90
> > [    4.478830]  entry_SYSCALL_64_after_hwframe+0x44/0xae
> > [    4.479823] RIP: 0033:0x7f8d77e2c31c
> > [    4.480537] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 49 f9 ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 4f 4a f9 ff 48
> > [    4.484140] RSP: 002b:00007ffc2434e8c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
> > [    4.485608] RAX: ffffffffffffffda RBX: 000055aa6dc4f650 RCX: 00007f8d77e2c31c
> > [    4.486991] RDX: 0000000000000400 RSI: 000055aa6dcaf960 RDI: 0000000000000005
> > [    4.488376] RBP: 00007f8d77f00300 R08: 0000000000000000 R09: 0000000000000001
> > [    4.489761] R10: 0000000000001000 R11: 0000000000000246 R12: 00007f8d7729c0f8
> > [    4.491159] R13: 0000000000000d68 R14: 00007f8d77eff700 R15: 0000000000000d68
> > [    4.492545]  </TASK>
> > [    4.492982] Modules linked in: xfs crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel serio_raw virtio_console virtio_blk virtio_net net_failover failover qemu_fw_cfg pkcs8_key_parser
> > [    4.496354] CR2: ffffb381402d7de0
> > [    4.497010] ---[ end trace dc5691b47f8ba15b ]---
> > [    4.497913] RIP: 0010:__unwind_start+0x10b/0x1e0
> > [    4.498822] Code: af fb ff 85 c0 75 d2 eb c0 65 48 8b 04 25 c0 fb 01 00 48 39 c6 0f 84 86 00 00 00 48 8b 86 98 23 00 00 48 8d 78 38 48 89 7d 38 <48> 8b 50 28 48 89 55 40 48 8b 40 30 48 89 45 48 48 3d 80 43 00 a1
> > [    4.502401] RSP: 0018:ffffb38140017c18 EFLAGS: 00010006
> > [    4.503418] RAX: ffffb381402d7db8 RBX: ffffb381402d7db8 RCX: 0000000000000000
> > [    4.504803] RDX: 0000000000000000 RSI: ffff9b5080c08000 RDI: ffffb381402d7df0
> > [    4.506185] RBP: ffffb38140017c38 R08: 0000000000000040 R09: 0000000000005000
> > [    4.507582] R10: 8000000000000000 R11: 0000000000000000 R12: 0000000000000000
> > [    4.508956] R13: ffff9b5080c08c74 R14: 000000000000024b R15: 0000000000000001
> > [    4.510339] FS:  00007f8d7729c340(0000) GS:ffff9b51f7d00000(0000) knlGS:0000000000000000
> > [    4.511914] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> > [    4.513032] CR2: ffffb381402d7de0 CR3: 0000000100244004 CR4: 0000000000770ee0
> > [    4.514420] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> > [    4.515803] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
> > [    4.517182] PKRU: 55555554
> > [    4.517724] Kernel panic - not syncing: Attempted to kill init! exitcode=0x00000009
> > [    4.519317] Kernel Offset: 0x20000000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
> > [    4.521398] ---[ end Kernel panic - not syncing: Attempted to kill init! exitcode=0x00000009 ]---
> >
>
> This is great! Several people (incl. me) have seen the _exact same_ trace, but with
> BMQ/PDS (custom CPU schedulers) so we suspected a locking issue/incompatibility in
> get_wchan()'s spinlocking & task diddling compared to CFS. The fact that this happens
> with vanilla means it's a generic problem with either: "sched: Add wrapper for get_wchan()
> to keep task blocked" or "x86: Fix get_wchan() to support the ORC unwinder" or both.
> I have been running with a dummy implementation of get_wchan that just returns 0
> (effectively disabling wchan) and 5.15.3-rc3 has been rock-solid again.
>
> Maybe just revert all the wchan stuff and let it stew in mainline a bit longer?
>
> -h

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-17 23:50     ` Linus Torvalds
@ 2021-11-18  0:16       ` Kees Cook
  2021-11-18  6:26         ` Guenter Roeck
  2021-11-18  8:12         ` Greg Kroah-Hartman
  2021-11-18  8:06       ` Peter Zijlstra
  1 sibling, 2 replies; 35+ messages in thread
From: Kees Cook @ 2021-11-18  0:16 UTC (permalink / raw)
  To: Linus Torvalds
  Cc: Holger Hoffstätte, Qi Zheng, Peter Zijlstra (Intel),
	Thomas Gleixner, Justin Forbes, Greg Kroah-Hartman,
	Linux Kernel Mailing List, Andrew Morton, Guenter Roeck,
	Shuah Khan, patches, lkft-triage, Pavel Machek, Jon Hunter,
	Florian Fainelli, stable, Wang Yugui, François Guerraz,
	Josh Poimboeuf

On Wed, Nov 17, 2021 at 03:50:17PM -0800, Linus Torvalds wrote:
> Sorry for top-posting and quoting this all, but the actual people
> involved with the wchan changes don't seem to be on the participant
> list.

Adding more folks from a private report and
https://bugzilla.kernel.org/show_bug.cgi?id=215031

and for the new people, here's a lore link for this thread:
https://lore.kernel.org/stable/YZV02RCRVHIa144u@fedora64.linuxtx.org/


FWIW, earlier bisection pointed to the stable backport of
5d1ceb3969b6b2e47e2df6d17790a7c5a20fcbb4 being the primary culprit.
At first glance it seems to me that the problem with -stable is that an
unvetted subset of the wchan refactoring series landed in -stable.

-Kees

-- 
Kees Cook

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-17 10:19 [PATCH 5.15 000/923] 5.15.3-rc3 review Greg Kroah-Hartman
                   ` (6 preceding siblings ...)
  2021-11-17 21:32 ` Justin Forbes
@ 2021-11-18  5:45 ` Naresh Kamboju
  7 siblings, 0 replies; 35+ messages in thread
From: Naresh Kamboju @ 2021-11-18  5:45 UTC (permalink / raw)
  To: Greg Kroah-Hartman
  Cc: linux-kernel, shuah, f.fainelli, patches, lkft-triage, jonathanh,
	stable, pavel, akpm, torvalds, linux

On Wed, 17 Nov 2021 at 15:49, Greg Kroah-Hartman
<gregkh@linuxfoundation.org> wrote:
>
> This is the start of the stable review cycle for the 5.15.3 release.
> There are 923 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Fri, 19 Nov 2021 10:14:52 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
>         https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.3-rc3.gz
> or in the git tree and branch at:
>         git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h

Results from Linaro’s test farm.
No regressions on arm64, arm, x86_64, and i386.

Tested-by: Linux Kernel Functional Testing <lkft@linaro.org>

## Build
* kernel: 5.15.3-rc3
* git: https://gitlab.com/Linaro/lkft/mirrors/stable/linux-stable-rc
* git branch: linux-5.15.y
* git commit: 7c10b031cbb7ead7befe5ffd99f08aaae7128eac
* git describe: v5.15.2-924-g7c10b031cbb7
* test details:
https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-5.15.y/build/v5.15.2-924-g7c10b031cbb7

## No regressions (compared to v5.15.2-928-gcb98d6b416c1)

## No fixes (compared to v5.15.2-928-gcb98d6b416c1)

## Test result summary
total: 88673, pass: 75229, fail: 811, skip: 11931, xfail: 702

## Build Summary
* arc: 10 total, 10 passed, 0 failed
* arm: 290 total, 290 passed, 0 failed
* arm64: 40 total, 40 passed, 0 failed
* i386: 38 total, 38 passed, 0 failed
* mips: 37 total, 37 passed, 0 failed
* parisc: 12 total, 12 passed, 0 failed
* powerpc: 45 total, 42 passed, 3 failed
* riscv: 24 total, 24 passed, 0 failed
* s390: 18 total, 18 passed, 0 failed
* sh: 24 total, 24 passed, 0 failed
* sparc: 12 total, 12 passed, 0 failed
* x86_64: 40 total, 40 passed, 0 failed

## Test suites summary
* fwts
* igt-gpu-tools
* kselftest-android
* kselftest-arm64
* kselftest-arm64/arm64.btitest.bti_c_func
* kselftest-arm64/arm64.btitest.bti_j_func
* kselftest-arm64/arm64.btitest.bti_jc_func
* kselftest-arm64/arm64.btitest.bti_none_func
* kselftest-arm64/arm64.btitest.nohint_func
* kselftest-arm64/arm64.btitest.paciasp_func
* kselftest-arm64/arm64.nobtitest.bti_c_func
* kselftest-arm64/arm64.nobtitest.bti_j_func
* kselftest-arm64/arm64.nobtitest.bti_jc_func
* kselftest-arm64/arm64.nobtitest.bti_none_func
* kselftest-arm64/arm64.nobtitest.nohint_func
* kselftest-arm64/arm64.nobtitest.paciasp_func
* kselftest-breakpoints
* kselftest-capabilities
* kselftest-cgroup
* kselftest-clone3
* kselftest-core
* kselftest-cpu-hotplug
* kselftest-cpufreq
* kselftest-drivers
* kselftest-efivarfs
* kselftest-filesystems
* kselftest-firmware
* kselftest-fpu
* kselftest-futex
* kselftest-gpio
* kselftest-intel_pstate
* kselftest-ipc
* kselftest-ir
* kselftest-kcmp
* kselftest-kvm
* kselftest-lib
* kselftest-livepatch
* kselftest-membarrier
* kselftest-openat2
* kselftest-pid_namespace
* kselftest-pidfd
* kselftest-proc
* kselftest-pstore
* kselftest-ptrace
* kselftest-rseq
* kselftest-rtc
* kselftest-seccomp
* kselftest-sigaltstack
* kselftest-size
* kselftest-splice
* kselftest-static_keys
* kselftest-sync
* kselftest-sysctl
* kselftest-timens
* kselftest-timers
* kselftest-tmpfs
* kselftest-tpm2
* kselftest-user
* kselftest-vm
* kselftest-x86
* kselftest-zram
* kunit
* kvm-unit-tests
* libgpiod
* libhugetlbfs
* linux-log-parser
* ltp-cap_bounds-tests
* ltp-commands-tests
* ltp-containers-tests
* ltp-controllers-tests
* ltp-cpuhotplug-tests
* ltp-crypto-tests
* ltp-cve-tests
* ltp-dio-tests
* ltp-fcntl-locktests-tests
* ltp-filecaps-tests
* ltp-fs-tests
* ltp-fs_bind-tests
* ltp-fs_perms_simple-tests
* ltp-fsx-tests
* ltp-hugetlb-tests
* ltp-io-tests
* ltp-ipc-tests
* ltp-math-tests
* ltp-mm-tests
* ltp-nptl-tests
* ltp-open-posix-tests
* ltp-pty-tests
* ltp-sched-tests
* ltp-securebits-tests
* ltp-syscalls-tests
* ltp-tracing-tests
* network-basic-tests
* packetdrill
* perf
* perf/Zstd-perf.data-compression
* rcutorture
* ssuite
* v4l2-compliance

--
Linaro LKFT
https://lkft.linaro.org

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-18  0:16       ` Kees Cook
@ 2021-11-18  6:26         ` Guenter Roeck
  2021-11-18  8:14           ` Greg Kroah-Hartman
  2021-11-18  8:12         ` Greg Kroah-Hartman
  1 sibling, 1 reply; 35+ messages in thread
From: Guenter Roeck @ 2021-11-18  6:26 UTC (permalink / raw)
  To: Kees Cook, Linus Torvalds
  Cc: Holger Hoffstätte, Qi Zheng, Peter Zijlstra (Intel),
	Thomas Gleixner, Justin Forbes, Greg Kroah-Hartman,
	Linux Kernel Mailing List, Andrew Morton, Shuah Khan, patches,
	lkft-triage, Pavel Machek, Jon Hunter, Florian Fainelli, stable,
	Wang Yugui, François Guerraz, Josh Poimboeuf

On 11/17/21 4:16 PM, Kees Cook wrote:
> On Wed, Nov 17, 2021 at 03:50:17PM -0800, Linus Torvalds wrote:
>> Sorry for top-posting and quoting this all, but the actual people
>> involved with the wchan changes don't seem to be on the participant
>> list.
> 
> Adding more folks from a private report and
> https://bugzilla.kernel.org/show_bug.cgi?id=215031
> 
> and for the new people, here's a lore link for this thread:
> https://lore.kernel.org/stable/YZV02RCRVHIa144u@fedora64.linuxtx.org/
> 
> 
> FWIW, earlier bisection pointed to the stable backport of
> 5d1ceb3969b6b2e47e2df6d17790a7c5a20fcbb4 being the primary culprit.
> At first glance it seems to me that the problem with -stable is that an
> unvetted subset of the wchan refactoring series landed in -stable.
> 

Can the (partial) wchan backport possibly be dropped from v5.15.y until
someone figures out what exactly - if anything - is needed ?

Thanks,
Guenter

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-17 23:50     ` Linus Torvalds
  2021-11-18  0:16       ` Kees Cook
@ 2021-11-18  8:06       ` Peter Zijlstra
  2021-11-18  8:18         ` Peter Zijlstra
  1 sibling, 1 reply; 35+ messages in thread
From: Peter Zijlstra @ 2021-11-18  8:06 UTC (permalink / raw)
  To: Linus Torvalds
  Cc: Holger Hoffstätte, Qi Zheng, Kees Cook, Thomas Gleixner,
	Justin Forbes, Greg Kroah-Hartman, Linux Kernel Mailing List,
	Andrew Morton, Guenter Roeck, Shuah Khan, patches, lkft-triage,
	Pavel Machek, Jon Hunter, Florian Fainelli, stable,
	Josh Poimboeuf

On Wed, Nov 17, 2021 at 03:50:17PM -0800, Linus Torvalds wrote:

> I really don't think the WCHAN code should use unwinders at all. It's
> too damn fragile, and it's too easily triggered from user space.

On x86, esp. with ORC, it pretty much has to. The thing is, the ORC
unwinder has been very stable so far. I'm guessing there's some really
stupid thing going on, like for example trying to unwind a freed stack.

I *just* managed to reproduce, so let me go have a poke.

> So I think we need to revert all the wchan changes. Not just in
> stable, but in mainline too.

Sure, we can do that. Want a pull request for that or will you just kill
them outright?

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-18  0:16       ` Kees Cook
  2021-11-18  6:26         ` Guenter Roeck
@ 2021-11-18  8:12         ` Greg Kroah-Hartman
  2021-11-18 17:17           ` Kees Cook
  1 sibling, 1 reply; 35+ messages in thread
From: Greg Kroah-Hartman @ 2021-11-18  8:12 UTC (permalink / raw)
  To: Kees Cook
  Cc: Linus Torvalds, Holger Hoffstätte, Qi Zheng,
	Peter Zijlstra (Intel),
	Thomas Gleixner, Justin Forbes, Linux Kernel Mailing List,
	Andrew Morton, Guenter Roeck, Shuah Khan, patches, lkft-triage,
	Pavel Machek, Jon Hunter, Florian Fainelli, stable, Wang Yugui,
	François Guerraz, Josh Poimboeuf

On Wed, Nov 17, 2021 at 04:16:51PM -0800, Kees Cook wrote:
> On Wed, Nov 17, 2021 at 03:50:17PM -0800, Linus Torvalds wrote:
> > Sorry for top-posting and quoting this all, but the actual people
> > involved with the wchan changes don't seem to be on the participant
> > list.
> 
> Adding more folks from a private report and
> https://bugzilla.kernel.org/show_bug.cgi?id=215031
> 
> and for the new people, here's a lore link for this thread:
> https://lore.kernel.org/stable/YZV02RCRVHIa144u@fedora64.linuxtx.org/
> 
> 
> FWIW, earlier bisection pointed to the stable backport of
> 5d1ceb3969b6b2e47e2df6d17790a7c5a20fcbb4 being the primary culprit.
> At first glance it seems to me that the problem with -stable is that an
> unvetted subset of the wchan refactoring series landed in -stable.

What would be the vetted subset?  :)

Anyway, I have now dropped the following patches that were in the
5.15.3-rc tree:
	bc9bbb81730e ("x86: Fix get_wchan() to support the ORC unwinder")
	42a20f86dc19 ("sched: Add wrapper for get_wchan() to keep task blocked")
	5d1ceb3969b6 ("x86: Fix __get_wchan() for !STACKTRACE")

And will push out another -rc release to let people test.

If there are any other commits I should have also dropped, please let me
know.

thanks,

greg k-h

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-17 20:25 ` Holger Kiehl
@ 2021-11-18  8:14   ` Greg Kroah-Hartman
  2021-11-18 14:08     ` Holger Kiehl
  0 siblings, 1 reply; 35+ messages in thread
From: Greg Kroah-Hartman @ 2021-11-18  8:14 UTC (permalink / raw)
  To: Holger Kiehl
  Cc: linux-kernel, torvalds, akpm, linux, shuah, patches, lkft-triage,
	pavel, jonathanh, f.fainelli, stable

On Wed, Nov 17, 2021 at 08:25:12PM +0000, Holger Kiehl wrote:
> Hello,
> 
> On Wed, 17 Nov 2021, Greg Kroah-Hartman wrote:
> 
> > This is the start of the stable review cycle for the 5.15.3 release.
> > There are 923 patches in this series, all will be posted as a response
> > to this one.  If anyone has any issues with these being applied, please
> > let me know.
> > 
> > Responses should be made by Fri, 19 Nov 2021 10:14:52 +0000.
> > Anything received after that time might be too late.
> > 
> > The whole patch series can be found in one patch at:
> > 	https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.3-rc3.gz
> > or in the git tree and branch at:
> > 	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
> > and the diffstat can be found below.
> > 
> On a Deskmini X300 with a AMD APU 5700G this does not boot (rc1+rc2 also
> do not boot). As Scott Bruce already noticed, if one removes
> c3fc9d9e8f2dc518a8ce3c77f833a11b47865944 "x86: Fix __get_wchan() for
> !STACKTRACE" it boots.

Now dropped, thanks.

greg k-h

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-18  6:26         ` Guenter Roeck
@ 2021-11-18  8:14           ` Greg Kroah-Hartman
  0 siblings, 0 replies; 35+ messages in thread
From: Greg Kroah-Hartman @ 2021-11-18  8:14 UTC (permalink / raw)
  To: Guenter Roeck
  Cc: Kees Cook, Linus Torvalds, Holger Hoffstätte, Qi Zheng,
	Peter Zijlstra (Intel),
	Thomas Gleixner, Justin Forbes, Linux Kernel Mailing List,
	Andrew Morton, Shuah Khan, patches, lkft-triage, Pavel Machek,
	Jon Hunter, Florian Fainelli, stable, Wang Yugui,
	François Guerraz, Josh Poimboeuf

On Wed, Nov 17, 2021 at 10:26:31PM -0800, Guenter Roeck wrote:
> On 11/17/21 4:16 PM, Kees Cook wrote:
> > On Wed, Nov 17, 2021 at 03:50:17PM -0800, Linus Torvalds wrote:
> > > Sorry for top-posting and quoting this all, but the actual people
> > > involved with the wchan changes don't seem to be on the participant
> > > list.
> > 
> > Adding more folks from a private report and
> > https://bugzilla.kernel.org/show_bug.cgi?id=215031
> > 
> > and for the new people, here's a lore link for this thread:
> > https://lore.kernel.org/stable/YZV02RCRVHIa144u@fedora64.linuxtx.org/
> > 
> > 
> > FWIW, earlier bisection pointed to the stable backport of
> > 5d1ceb3969b6b2e47e2df6d17790a7c5a20fcbb4 being the primary culprit.
> > At first glance it seems to me that the problem with -stable is that an
> > unvetted subset of the wchan refactoring series landed in -stable.
> > 
> 
> Can the (partial) wchan backport possibly be dropped from v5.15.y until
> someone figures out what exactly - if anything - is needed ?

Now dropped.

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-18  8:06       ` Peter Zijlstra
@ 2021-11-18  8:18         ` Peter Zijlstra
  2021-11-18  9:39           ` Peter Zijlstra
  0 siblings, 1 reply; 35+ messages in thread
From: Peter Zijlstra @ 2021-11-18  8:18 UTC (permalink / raw)
  To: Linus Torvalds
  Cc: Holger Hoffstätte, Qi Zheng, Kees Cook, Thomas Gleixner,
	Justin Forbes, Greg Kroah-Hartman, Linux Kernel Mailing List,
	Andrew Morton, Guenter Roeck, Shuah Khan, patches, lkft-triage,
	Pavel Machek, Jon Hunter, Florian Fainelli, stable,
	Josh Poimboeuf

On Thu, Nov 18, 2021 at 09:06:27AM +0100, Peter Zijlstra wrote:
> On Wed, Nov 17, 2021 at 03:50:17PM -0800, Linus Torvalds wrote:
> 
> > I really don't think the WCHAN code should use unwinders at all. It's
> > too damn fragile, and it's too easily triggered from user space.
> 
> On x86, esp. with ORC, it pretty much has to. The thing is, the ORC
> unwinder has been very stable so far. I'm guessing there's some really
> stupid thing going on, like for example trying to unwind a freed stack.
> 
> I *just* managed to reproduce, so let me go have a poke.

Confirmed, with the below it no longer reproduces. Now, let me go undo
that and fix the unwinder to not explode while trying to unwind nothing.


---
diff --git a/kernel/sched/core.c b/kernel/sched/core.c
index 862af1db22ab..f810c5192cb9 100644
--- a/kernel/sched/core.c
+++ b/kernel/sched/core.c
@@ -1978,7 +1978,7 @@ unsigned long get_wchan(struct task_struct *p)
 	raw_spin_lock_irq(&p->pi_lock);
 	state = READ_ONCE(p->__state);
 	smp_rmb(); /* see try_to_wake_up() */
-	if (state != TASK_RUNNING && state != TASK_WAKING && !p->on_rq)
+	if (state != TASK_RUNNING && state != TASK_WAKING && !p->on_rq && !(p->flags & PF_EXITING))
 		ip = __get_wchan(p);
 	raw_spin_unlock_irq(&p->pi_lock);
 

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-18  8:18         ` Peter Zijlstra
@ 2021-11-18  9:39           ` Peter Zijlstra
  2021-11-18 10:12             ` Peter Zijlstra
  2021-11-18 12:11             ` Peter Zijlstra
  0 siblings, 2 replies; 35+ messages in thread
From: Peter Zijlstra @ 2021-11-18  9:39 UTC (permalink / raw)
  To: Linus Torvalds
  Cc: Holger Hoffstätte, Qi Zheng, Kees Cook, Thomas Gleixner,
	Justin Forbes, Greg Kroah-Hartman, Linux Kernel Mailing List,
	Andrew Morton, Guenter Roeck, Shuah Khan, patches, lkft-triage,
	Pavel Machek, Jon Hunter, Florian Fainelli, stable,
	Josh Poimboeuf

On Thu, Nov 18, 2021 at 09:18:52AM +0100, Peter Zijlstra wrote:
> On Thu, Nov 18, 2021 at 09:06:27AM +0100, Peter Zijlstra wrote:
> > On Wed, Nov 17, 2021 at 03:50:17PM -0800, Linus Torvalds wrote:
> > 
> > > I really don't think the WCHAN code should use unwinders at all. It's
> > > too damn fragile, and it's too easily triggered from user space.
> > 
> > On x86, esp. with ORC, it pretty much has to. The thing is, the ORC
> > unwinder has been very stable so far. I'm guessing there's some really
> > stupid thing going on, like for example trying to unwind a freed stack.
> > 
> > I *just* managed to reproduce, so let me go have a poke.
> 
> Confirmed, with the below it no longer reproduces. Now, let me go undo
> that and fix the unwinder to not explode while trying to unwind nothing.

OK, so the bug is firmly with 5d1ceb3969b6 ("x86: Fix __get_wchan() for
!STACKTRACE") which lost the try_get_task_stack() that stack_trace_*()
does.

We can ofc trivially re-instate that, but I'm now running with the
below which I suppose is a better fix, hmm?

(obv I still need to look a the other two unwinders)

---
diff --git a/arch/x86/kernel/unwind_orc.c b/arch/x86/kernel/unwind_orc.c
index e6f7592790af..9261ff1343cf 100644
--- a/arch/x86/kernel/unwind_orc.c
+++ b/arch/x86/kernel/unwind_orc.c
@@ -352,8 +352,14 @@ static bool deref_stack_reg(struct unwind_state *state, unsigned long addr,
 	if (!stack_access_ok(state, addr, sizeof(long)))
 		return false;
 
-	*val = READ_ONCE_NOCHECK(*(unsigned long *)addr);
+	pagefault_disable();
+	__get_kernel_nofault(val, addr, unsigned long, Efault);
+	pagefault_enable();
 	return true;
+
+Efault:
+	pagefault_enable();
+	return false;
 }
 
 static bool deref_stack_regs(struct unwind_state *state, unsigned long addr,
@@ -367,9 +373,16 @@ static bool deref_stack_regs(struct unwind_state *state, unsigned long addr,
 	if (!stack_access_ok(state, addr, sizeof(struct pt_regs)))
 		return false;
 
-	*ip = READ_ONCE_NOCHECK(regs->ip);
-	*sp = READ_ONCE_NOCHECK(regs->sp);
+	pagefault_disable();
+	__get_kernel_nofault(ip, &regs->ip, unsigned long, Efault);
+	__get_kernel_nofault(sp, &regs->sp, unsigned long, Efault);
+	pagefault_enable();
+
 	return true;
+
+Efault:
+	pagefault_enable();
+	return false;
 }
 
 static bool deref_stack_iret_regs(struct unwind_state *state, unsigned long addr,
@@ -380,9 +393,16 @@ static bool deref_stack_iret_regs(struct unwind_state *state, unsigned long addr
 	if (!stack_access_ok(state, addr, IRET_FRAME_SIZE))
 		return false;
 
-	*ip = READ_ONCE_NOCHECK(regs->ip);
-	*sp = READ_ONCE_NOCHECK(regs->sp);
+	pagefault_disable();
+	__get_kernel_nofault(ip, &regs->ip, unsigned long, Efault);
+	__get_kernel_nofault(sp, &regs->sp, unsigned long, Efault);
+	pagefault_enable();
+
 	return true;
+
+Efault:
+	pagefault_enable();
+	return false;
 }
 
 /*
@@ -396,22 +416,27 @@ static bool deref_stack_iret_regs(struct unwind_state *state, unsigned long addr
 static bool get_reg(struct unwind_state *state, unsigned int reg_off,
 		    unsigned long *val)
 {
-	unsigned int reg = reg_off/8;
-
 	if (!state->regs)
 		return false;
 
+	pagefault_disable();
 	if (state->full_regs) {
-		*val = READ_ONCE_NOCHECK(((unsigned long *)state->regs)[reg]);
+		__get_kernel_nofault(val, (void *)state->regs + reg_off, unsigned long, Efault);
+		pagefault_enable();
 		return true;
 	}
 
 	if (state->prev_regs) {
-		*val = READ_ONCE_NOCHECK(((unsigned long *)state->prev_regs)[reg]);
+		__get_kernel_nofault(val, (void *)state->regs + reg_off, unsigned long, Efault);
+		pagefault_enable();
 		return true;
 	}
 
 	return false;
+
+Efault:
+	pagefault_enable();
+	return false;
 }
 
 bool unwind_next_frame(struct unwind_state *state)
@@ -673,8 +698,12 @@ void __unwind_start(struct unwind_state *state, struct task_struct *task,
 		struct inactive_task_frame *frame = (void *)task->thread.sp;
 
 		state->sp = task->thread.sp + sizeof(*frame);
-		state->bp = READ_ONCE_NOCHECK(frame->bp);
-		state->ip = READ_ONCE_NOCHECK(frame->ret_addr);
+
+		pagefault_disable();
+		__get_kernel_nofault(&state->bp, &frame->bp, unsigned long, Efault);
+		__get_kernel_nofault(&state->ip, &frame->ret_addr, unsigned long, Efault);
+		pagefault_enable();
+
 		state->signal = (void *)state->ip == ret_from_fork;
 	}
 
@@ -713,6 +742,8 @@ void __unwind_start(struct unwind_state *state, struct task_struct *task,
 
 	return;
 
+Efault:
+	pagefault_enable();
 err:
 	state->error = true;
 the_end:

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-18  9:39           ` Peter Zijlstra
@ 2021-11-18 10:12             ` Peter Zijlstra
  2021-11-18 12:11             ` Peter Zijlstra
  1 sibling, 0 replies; 35+ messages in thread
From: Peter Zijlstra @ 2021-11-18 10:12 UTC (permalink / raw)
  To: Linus Torvalds
  Cc: Holger Hoffstätte, Qi Zheng, Kees Cook, Thomas Gleixner,
	Justin Forbes, Greg Kroah-Hartman, Linux Kernel Mailing List,
	Andrew Morton, Guenter Roeck, Shuah Khan, patches, lkft-triage,
	Pavel Machek, Jon Hunter, Florian Fainelli, stable,
	Josh Poimboeuf

On Thu, Nov 18, 2021 at 10:39:44AM +0100, Peter Zijlstra wrote:
> @@ -396,22 +416,27 @@ static bool deref_stack_iret_regs(struct unwind_state *state, unsigned long addr
>  static bool get_reg(struct unwind_state *state, unsigned int reg_off,
>  		    unsigned long *val)
>  {
> -	unsigned int reg = reg_off/8;
> -
>  	if (!state->regs)
>  		return false;
>  
> +	pagefault_disable();
>  	if (state->full_regs) {
> -		*val = READ_ONCE_NOCHECK(((unsigned long *)state->regs)[reg]);
> +		__get_kernel_nofault(val, (void *)state->regs + reg_off, unsigned long, Efault);
> +		pagefault_enable();
>  		return true;
>  	}
>  
>  	if (state->prev_regs) {
> -		*val = READ_ONCE_NOCHECK(((unsigned long *)state->prev_regs)[reg]);
> +		__get_kernel_nofault(val, (void *)state->regs + reg_off, unsigned long, Efault);
							^^^ prev_regs
> +		pagefault_enable();
>  		return true;
>  	}
>  
>  	return false;
> +
> +Efault:
> +	pagefault_enable();
> +	return false;
>  }

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-18  9:39           ` Peter Zijlstra
  2021-11-18 10:12             ` Peter Zijlstra
@ 2021-11-18 12:11             ` Peter Zijlstra
  2021-11-19  2:04               ` Josh Poimboeuf
  1 sibling, 1 reply; 35+ messages in thread
From: Peter Zijlstra @ 2021-11-18 12:11 UTC (permalink / raw)
  To: Linus Torvalds
  Cc: Holger Hoffstätte, Qi Zheng, Kees Cook, Thomas Gleixner,
	Justin Forbes, Greg Kroah-Hartman, Linux Kernel Mailing List,
	Andrew Morton, Guenter Roeck, Shuah Khan, patches, lkft-triage,
	Pavel Machek, Jon Hunter, Florian Fainelli, stable,
	Josh Poimboeuf

On Thu, Nov 18, 2021 at 10:39:44AM +0100, Peter Zijlstra wrote:
> On Thu, Nov 18, 2021 at 09:18:52AM +0100, Peter Zijlstra wrote:
> > On Thu, Nov 18, 2021 at 09:06:27AM +0100, Peter Zijlstra wrote:
> > > On Wed, Nov 17, 2021 at 03:50:17PM -0800, Linus Torvalds wrote:
> > > 
> > > > I really don't think the WCHAN code should use unwinders at all. It's
> > > > too damn fragile, and it's too easily triggered from user space.
> > > 
> > > On x86, esp. with ORC, it pretty much has to. The thing is, the ORC
> > > unwinder has been very stable so far. I'm guessing there's some really
> > > stupid thing going on, like for example trying to unwind a freed stack.
> > > 
> > > I *just* managed to reproduce, so let me go have a poke.
> > 
> > Confirmed, with the below it no longer reproduces. Now, let me go undo
> > that and fix the unwinder to not explode while trying to unwind nothing.
> 
> OK, so the bug is firmly with 5d1ceb3969b6 ("x86: Fix __get_wchan() for
> !STACKTRACE") which lost the try_get_task_stack() that stack_trace_*()
> does.
> 
> We can ofc trivially re-instate that, but I'm now running with the
> below which I suppose is a better fix, hmm?
> 
> (obv I still need to look a the other two unwinders)

I now have the below, the only thing missing is that there's a
user_mode() call on a stack based regs. Now on x86_64 we can
__get_kernel_nofault() regs->cs and call it a day, but on i386 we have
to also fetch regs->flags.

Is this really the way to go?

The thing is, we're already very careful about making sure the addresses
are within the stack range before touching them, it's just that when we
free the task stack we end up with trivially dodgy state.

---
 arch/x86/kernel/unwind_frame.c | 31 ++++++++++++++++++------
 arch/x86/kernel/unwind_guess.c | 18 ++++++++++++--
 arch/x86/kernel/unwind_orc.c   | 54 +++++++++++++++++++++++++++++++++---------
 3 files changed, 83 insertions(+), 20 deletions(-)

diff --git a/arch/x86/kernel/unwind_frame.c b/arch/x86/kernel/unwind_frame.c
index 8e1c50c86e5d..0c5cbc8ee300 100644
--- a/arch/x86/kernel/unwind_frame.c
+++ b/arch/x86/kernel/unwind_frame.c
@@ -215,10 +215,11 @@ static bool update_stack_state(struct unwind_state *state,
 	 * that info->next_sp could point to an empty stack and the next bp
 	 * could be on a subsequent stack.
 	 */
-	while (!on_stack(info, frame, len))
+	while (!on_stack(info, frame, len)) {
 		if (get_stack_info(info->next_sp, state->task, info,
 				   &state->stack_mask))
 			return false;
+	}
 
 	/* Make sure it only unwinds up and doesn't overlap the prev frame: */
 	if (state->orig_sp && state->stack_info.type == prev_type &&
@@ -235,11 +236,16 @@ static bool update_stack_state(struct unwind_state *state,
 	}
 
 	/* Save the return address: */
-	if (state->regs && user_mode(state->regs))
+	// regs deref
+	if (state->regs && user_mode(state->regs)) {
 		state->ip = 0;
-	else {
+	} else {
 		addr_p = unwind_get_return_address_ptr(state);
-		addr = READ_ONCE_TASK_STACK(state->task, *addr_p);
+
+		pagefault_disable();
+		__get_kernel_nofault(&addr, addr_p, unsigned long, Efault);
+		pagefault_enable();
+
 		state->ip = unwind_recover_ret_addr(state, addr, addr_p);
 	}
 
@@ -248,6 +254,10 @@ static bool update_stack_state(struct unwind_state *state,
 		state->orig_sp = frame;
 
 	return true;
+
+Efault:
+	pagefault_enable();
+	return false;
 }
 
 bool unwind_next_frame(struct unwind_state *state)
@@ -259,6 +269,7 @@ bool unwind_next_frame(struct unwind_state *state)
 		return false;
 
 	/* Have we reached the end? */
+	// regs deref
 	if (state->regs && user_mode(state->regs))
 		goto the_end;
 
@@ -295,9 +306,13 @@ bool unwind_next_frame(struct unwind_state *state)
 		next_bp = state->next_bp;
 		state->next_bp = NULL;
 	} else if (state->regs) {
-		next_bp = (unsigned long *)state->regs->bp;
+		pagefault_disable();
+		__get_kernel_nofault(&next_bp, &state->regs->bp, unsigned long, Efault);
+		pagefault_enable();
 	} else {
-		next_bp = (unsigned long *)READ_ONCE_TASK_STACK(state->task, *state->bp);
+		pagefault_disable();
+		__get_kernel_nofault(&next_bp, state->bp, unsigned long, Efault);
+		pagefault_enable();
 	}
 
 	/* Move to the next frame if it's safe: */
@@ -306,6 +321,8 @@ bool unwind_next_frame(struct unwind_state *state)
 
 	return true;
 
+Efault:
+	pagefault_enable();
 bad_address:
 	state->error = true;
 
@@ -402,7 +419,7 @@ void __unwind_start(struct unwind_state *state, struct task_struct *task,
 	 */
 	while (!unwind_done(state) &&
 	       (!on_stack(&state->stack_info, first_frame, sizeof(long)) ||
-			(state->next_bp == NULL && state->bp < first_frame)))
+		(state->next_bp == NULL && state->bp < first_frame)))
 		unwind_next_frame(state);
 }
 EXPORT_SYMBOL_GPL(__unwind_start);
diff --git a/arch/x86/kernel/unwind_guess.c b/arch/x86/kernel/unwind_guess.c
index 884d68a6e714..22153d91e868 100644
--- a/arch/x86/kernel/unwind_guess.c
+++ b/arch/x86/kernel/unwind_guess.c
@@ -13,9 +13,15 @@ unsigned long unwind_get_return_address(struct unwind_state *state)
 	if (unwind_done(state))
 		return 0;
 
-	addr = READ_ONCE_NOCHECK(*state->sp);
+	pagefault_disable();
+	__get_kernel_nofault(&addr, state->sp, unsigned long, Efault);
+	pagefault_enable();
 
 	return unwind_recover_ret_addr(state, addr, state->sp);
+
+Efault:
+	pagefault_enable();
+	return 0;
 }
 EXPORT_SYMBOL_GPL(unwind_get_return_address);
 
@@ -33,7 +39,11 @@ bool unwind_next_frame(struct unwind_state *state)
 
 	do {
 		for (state->sp++; state->sp < info->end; state->sp++) {
-			unsigned long addr = READ_ONCE_NOCHECK(*state->sp);
+			unsigned long addr;
+
+			pagefault_disable();
+			__get_kernel_nofault(&addr, state->sp, unsigned long, Efault);
+			pagefault_enable();
 
 			if (__kernel_text_address(addr))
 				return true;
@@ -45,6 +55,10 @@ bool unwind_next_frame(struct unwind_state *state)
 				 &state->stack_mask));
 
 	return false;
+
+Efault:
+	pagefault_enable();
+	return false;
 }
 EXPORT_SYMBOL_GPL(unwind_next_frame);
 
diff --git a/arch/x86/kernel/unwind_orc.c b/arch/x86/kernel/unwind_orc.c
index e6f7592790af..b0b5ac530450 100644
--- a/arch/x86/kernel/unwind_orc.c
+++ b/arch/x86/kernel/unwind_orc.c
@@ -352,8 +352,14 @@ static bool deref_stack_reg(struct unwind_state *state, unsigned long addr,
 	if (!stack_access_ok(state, addr, sizeof(long)))
 		return false;
 
-	*val = READ_ONCE_NOCHECK(*(unsigned long *)addr);
+	pagefault_disable();
+	__get_kernel_nofault(val, addr, unsigned long, Efault);
+	pagefault_enable();
 	return true;
+
+Efault:
+	pagefault_enable();
+	return false;
 }
 
 static bool deref_stack_regs(struct unwind_state *state, unsigned long addr,
@@ -367,9 +373,16 @@ static bool deref_stack_regs(struct unwind_state *state, unsigned long addr,
 	if (!stack_access_ok(state, addr, sizeof(struct pt_regs)))
 		return false;
 
-	*ip = READ_ONCE_NOCHECK(regs->ip);
-	*sp = READ_ONCE_NOCHECK(regs->sp);
+	pagefault_disable();
+	__get_kernel_nofault(ip, &regs->ip, unsigned long, Efault);
+	__get_kernel_nofault(sp, &regs->sp, unsigned long, Efault);
+	pagefault_enable();
+
 	return true;
+
+Efault:
+	pagefault_enable();
+	return false;
 }
 
 static bool deref_stack_iret_regs(struct unwind_state *state, unsigned long addr,
@@ -380,9 +393,16 @@ static bool deref_stack_iret_regs(struct unwind_state *state, unsigned long addr
 	if (!stack_access_ok(state, addr, IRET_FRAME_SIZE))
 		return false;
 
-	*ip = READ_ONCE_NOCHECK(regs->ip);
-	*sp = READ_ONCE_NOCHECK(regs->sp);
+	pagefault_disable();
+	__get_kernel_nofault(ip, &regs->ip, unsigned long, Efault);
+	__get_kernel_nofault(sp, &regs->sp, unsigned long, Efault);
+	pagefault_enable();
+
 	return true;
+
+Efault:
+	pagefault_enable();
+	return false;
 }
 
 /*
@@ -396,22 +416,27 @@ static bool deref_stack_iret_regs(struct unwind_state *state, unsigned long addr
 static bool get_reg(struct unwind_state *state, unsigned int reg_off,
 		    unsigned long *val)
 {
-	unsigned int reg = reg_off/8;
-
 	if (!state->regs)
 		return false;
 
+	pagefault_disable();
 	if (state->full_regs) {
-		*val = READ_ONCE_NOCHECK(((unsigned long *)state->regs)[reg]);
+		__get_kernel_nofault(val, (void *)state->regs + reg_off, unsigned long, Efault);
+		pagefault_enable();
 		return true;
 	}
 
 	if (state->prev_regs) {
-		*val = READ_ONCE_NOCHECK(((unsigned long *)state->prev_regs)[reg]);
+		__get_kernel_nofault(val, (void *)state->prev_regs + reg_off, unsigned long, Efault);
+		pagefault_enable();
 		return true;
 	}
 
 	return false;
+
+Efault:
+	pagefault_enable();
+	return false;
 }
 
 bool unwind_next_frame(struct unwind_state *state)
@@ -428,6 +453,7 @@ bool unwind_next_frame(struct unwind_state *state)
 	preempt_disable();
 
 	/* End-of-stack check for user tasks: */
+	// regs deref
 	if (state->regs && user_mode(state->regs))
 		goto the_end;
 
@@ -673,8 +699,12 @@ void __unwind_start(struct unwind_state *state, struct task_struct *task,
 		struct inactive_task_frame *frame = (void *)task->thread.sp;
 
 		state->sp = task->thread.sp + sizeof(*frame);
-		state->bp = READ_ONCE_NOCHECK(frame->bp);
-		state->ip = READ_ONCE_NOCHECK(frame->ret_addr);
+
+		pagefault_disable();
+		__get_kernel_nofault(&state->bp, &frame->bp, unsigned long, Efault);
+		__get_kernel_nofault(&state->ip, &frame->ret_addr, unsigned long, Efault);
+		pagefault_enable();
+
 		state->signal = (void *)state->ip == ret_from_fork;
 	}
 
@@ -713,6 +743,8 @@ void __unwind_start(struct unwind_state *state, struct task_struct *task,
 
 	return;
 
+Efault:
+	pagefault_enable();
 err:
 	state->error = true;
 the_end:

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-18  8:14   ` Greg Kroah-Hartman
@ 2021-11-18 14:08     ` Holger Kiehl
  2021-11-18 17:08       ` Greg Kroah-Hartman
  0 siblings, 1 reply; 35+ messages in thread
From: Holger Kiehl @ 2021-11-18 14:08 UTC (permalink / raw)
  To: Greg Kroah-Hartman
  Cc: linux-kernel, torvalds, akpm, linux, shuah, patches, lkft-triage,
	pavel, jonathanh, f.fainelli, stable

On Thu, 18 Nov 2021, Greg Kroah-Hartman wrote:

> On Wed, Nov 17, 2021 at 08:25:12PM +0000, Holger Kiehl wrote:
> > Hello,
> > 
> > On Wed, 17 Nov 2021, Greg Kroah-Hartman wrote:
> > 
> > > This is the start of the stable review cycle for the 5.15.3 release.
> > > There are 923 patches in this series, all will be posted as a response
> > > to this one.  If anyone has any issues with these being applied, please
> > > let me know.
> > > 
> > > Responses should be made by Fri, 19 Nov 2021 10:14:52 +0000.
> > > Anything received after that time might be too late.
> > > 
> > > The whole patch series can be found in one patch at:
> > > 	https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.3-rc3.gz
> > > or in the git tree and branch at:
> > > 	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
> > > and the diffstat can be found below.
> > > 
> > On a Deskmini X300 with a AMD APU 5700G this does not boot (rc1+rc2 also
> > do not boot). As Scott Bruce already noticed, if one removes
> > c3fc9d9e8f2dc518a8ce3c77f833a11b47865944 "x86: Fix __get_wchan() for
> > !STACKTRACE" it boots.
> 
> Now dropped, thanks.
> 
Thanks. Now 5.15.3-rc4 works fine!

Holger

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-18 14:08     ` Holger Kiehl
@ 2021-11-18 17:08       ` Greg Kroah-Hartman
  0 siblings, 0 replies; 35+ messages in thread
From: Greg Kroah-Hartman @ 2021-11-18 17:08 UTC (permalink / raw)
  To: Holger Kiehl
  Cc: linux-kernel, torvalds, akpm, linux, shuah, patches, lkft-triage,
	pavel, jonathanh, f.fainelli, stable

On Thu, Nov 18, 2021 at 02:08:33PM +0000, Holger Kiehl wrote:
> On Thu, 18 Nov 2021, Greg Kroah-Hartman wrote:
> 
> > On Wed, Nov 17, 2021 at 08:25:12PM +0000, Holger Kiehl wrote:
> > > Hello,
> > > 
> > > On Wed, 17 Nov 2021, Greg Kroah-Hartman wrote:
> > > 
> > > > This is the start of the stable review cycle for the 5.15.3 release.
> > > > There are 923 patches in this series, all will be posted as a response
> > > > to this one.  If anyone has any issues with these being applied, please
> > > > let me know.
> > > > 
> > > > Responses should be made by Fri, 19 Nov 2021 10:14:52 +0000.
> > > > Anything received after that time might be too late.
> > > > 
> > > > The whole patch series can be found in one patch at:
> > > > 	https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.3-rc3.gz
> > > > or in the git tree and branch at:
> > > > 	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
> > > > and the diffstat can be found below.
> > > > 
> > > On a Deskmini X300 with a AMD APU 5700G this does not boot (rc1+rc2 also
> > > do not boot). As Scott Bruce already noticed, if one removes
> > > c3fc9d9e8f2dc518a8ce3c77f833a11b47865944 "x86: Fix __get_wchan() for
> > > !STACKTRACE" it boots.
> > 
> > Now dropped, thanks.
> > 
> Thanks. Now 5.15.3-rc4 works fine!

Wonderful, thanks for testing and letting us know.

greg k-h

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-18  8:12         ` Greg Kroah-Hartman
@ 2021-11-18 17:17           ` Kees Cook
  0 siblings, 0 replies; 35+ messages in thread
From: Kees Cook @ 2021-11-18 17:17 UTC (permalink / raw)
  To: Greg Kroah-Hartman
  Cc: Linus Torvalds, Holger Hoffstätte, Qi Zheng,
	Peter Zijlstra (Intel),
	Thomas Gleixner, Justin Forbes, Linux Kernel Mailing List,
	Andrew Morton, Guenter Roeck, Shuah Khan, patches, lkft-triage,
	Pavel Machek, Jon Hunter, Florian Fainelli, stable, Wang Yugui,
	François Guerraz, Josh Poimboeuf

On Thu, Nov 18, 2021 at 09:12:59AM +0100, Greg Kroah-Hartman wrote:
> On Wed, Nov 17, 2021 at 04:16:51PM -0800, Kees Cook wrote:
> > On Wed, Nov 17, 2021 at 03:50:17PM -0800, Linus Torvalds wrote:
> > > Sorry for top-posting and quoting this all, but the actual people
> > > involved with the wchan changes don't seem to be on the participant
> > > list.
> > 
> > Adding more folks from a private report and
> > https://bugzilla.kernel.org/show_bug.cgi?id=215031
> > 
> > and for the new people, here's a lore link for this thread:
> > https://lore.kernel.org/stable/YZV02RCRVHIa144u@fedora64.linuxtx.org/
> > 
> > 
> > FWIW, earlier bisection pointed to the stable backport of
> > 5d1ceb3969b6b2e47e2df6d17790a7c5a20fcbb4 being the primary culprit.
> > At first glance it seems to me that the problem with -stable is that an
> > unvetted subset of the wchan refactoring series landed in -stable.
> 
> What would be the vetted subset?  :)

The ones with "Cc: stable" ;)

> Anyway, I have now dropped the following patches that were in the
> 5.15.3-rc tree:
> 	bc9bbb81730e ("x86: Fix get_wchan() to support the ORC unwinder")
> 	42a20f86dc19 ("sched: Add wrapper for get_wchan() to keep task blocked")
> 	5d1ceb3969b6 ("x86: Fix __get_wchan() for !STACKTRACE")
> 
> And will push out another -rc release to let people test.
> 
> If there are any other commits I should have also dropped, please let me
> know.

That looks right to me. These three were part of Peter's much larger
wchan refactoring (of which 42a20f86dc19 was a core part).

Thanks!

-- 
Kees Cook

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH 5.15 000/923] 5.15.3-rc3 review
  2021-11-18 12:11             ` Peter Zijlstra
@ 2021-11-19  2:04               ` Josh Poimboeuf
  2021-11-19  9:29                 ` [PATCH] x86: Pin task-stack in __get_wchan() Peter Zijlstra
  0 siblings, 1 reply; 35+ messages in thread
From: Josh Poimboeuf @ 2021-11-19  2:04 UTC (permalink / raw)
  To: Peter Zijlstra
  Cc: Linus Torvalds, Holger Hoffstätte, Qi Zheng, Kees Cook,
	Thomas Gleixner, Justin Forbes, Greg Kroah-Hartman,
	Linux Kernel Mailing List, Andrew Morton, Guenter Roeck,
	Shuah Khan, patches, lkft-triage, Pavel Machek, Jon Hunter,
	Florian Fainelli, stable

On Thu, Nov 18, 2021 at 01:11:09PM +0100, Peter Zijlstra wrote:
> On Thu, Nov 18, 2021 at 10:39:44AM +0100, Peter Zijlstra wrote:
> > On Thu, Nov 18, 2021 at 09:18:52AM +0100, Peter Zijlstra wrote:
> > > On Thu, Nov 18, 2021 at 09:06:27AM +0100, Peter Zijlstra wrote:
> > > > On Wed, Nov 17, 2021 at 03:50:17PM -0800, Linus Torvalds wrote:
> > > > 
> > > > > I really don't think the WCHAN code should use unwinders at all. It's
> > > > > too damn fragile, and it's too easily triggered from user space.
> > > > 
> > > > On x86, esp. with ORC, it pretty much has to. The thing is, the ORC
> > > > unwinder has been very stable so far. I'm guessing there's some really
> > > > stupid thing going on, like for example trying to unwind a freed stack.
> > > > 
> > > > I *just* managed to reproduce, so let me go have a poke.
> > > 
> > > Confirmed, with the below it no longer reproduces. Now, let me go undo
> > > that and fix the unwinder to not explode while trying to unwind nothing.
> > 
> > OK, so the bug is firmly with 5d1ceb3969b6 ("x86: Fix __get_wchan() for
> > !STACKTRACE") which lost the try_get_task_stack() that stack_trace_*()
> > does.
> > 
> > We can ofc trivially re-instate that, but I'm now running with the
> > below which I suppose is a better fix, hmm?
> > 
> > (obv I still need to look a the other two unwinders)
> 
> I now have the below, the only thing missing is that there's a
> user_mode() call on a stack based regs. Now on x86_64 we can
> __get_kernel_nofault() regs->cs and call it a day, but on i386 we have
> to also fetch regs->flags.
> 
> Is this really the way to go?

Please no.  Can we just add a check in unwind_start() to ensure the
caller did try_get_task_stack()?

-- 
Josh


^ permalink raw reply	[flat|nested] 35+ messages in thread

* [PATCH] x86: Pin task-stack in __get_wchan()
  2021-11-19  2:04               ` Josh Poimboeuf
@ 2021-11-19  9:29                 ` Peter Zijlstra
  2021-11-19 10:02                   ` Qi Zheng
                                     ` (2 more replies)
  0 siblings, 3 replies; 35+ messages in thread
From: Peter Zijlstra @ 2021-11-19  9:29 UTC (permalink / raw)
  To: Josh Poimboeuf
  Cc: Linus Torvalds, Holger Hoffst??tte, Qi Zheng, Kees Cook,
	Thomas Gleixner, Justin Forbes, Greg Kroah-Hartman,
	Linux Kernel Mailing List, Andrew Morton, Guenter Roeck,
	Shuah Khan, patches, lkft-triage, Pavel Machek, Jon Hunter,
	Florian Fainelli, stable

On Thu, Nov 18, 2021 at 06:04:27PM -0800, Josh Poimboeuf wrote:
> On Thu, Nov 18, 2021 at 01:11:09PM +0100, Peter Zijlstra wrote:

> > I now have the below, the only thing missing is that there's a
> > user_mode() call on a stack based regs. Now on x86_64 we can
> > __get_kernel_nofault() regs->cs and call it a day, but on i386 we have
> > to also fetch regs->flags.
> > 
> > Is this really the way to go?
> 
> Please no.  Can we just add a check in unwind_start() to ensure the
> caller did try_get_task_stack()?

I tried; but at best it's fundamentally racy and in practise its worse
because init_task doesn't seem to believe in refcounts and kthreads are
odd for some raisin. Now those are fixable, but given the fundamental
races, I don't see how it's ever going to be reliable.

I don't mind the __get_kernel_nofault() usage and think I can do a
better implementation that will allow us to get rid of the
pagefault_{dis,en}able() sprinkling, but that's for another day. It's
just the user_mode(regs) usage that's going to be somewhat ugleh.

Anyway, below is the minimal fix for the situation at hand. I'm not
going to be around much today, so if Linus wants to pick that up instead
of mass revert things that's obviously fine too.

---
Subject: x86: Pin task-stack in __get_wchan()

When commit 5d1ceb3969b6 ("x86: Fix __get_wchan() for !STACKTRACE")
moved from stacktrace to native unwind_*() usage, the
try_get_task_stack() got lost, leading to use-after-free issues for
dying tasks.

Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>
---
 arch/x86/kernel/process.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/arch/x86/kernel/process.c b/arch/x86/kernel/process.c
index e9ee8b526319..04143a653a8a 100644
--- a/arch/x86/kernel/process.c
+++ b/arch/x86/kernel/process.c
@@ -964,6 +964,9 @@ unsigned long __get_wchan(struct task_struct *p)
 	struct unwind_state state;
 	unsigned long addr = 0;
 
+	if (!try_get_task_stack(p))
+		return 0;
+
 	for (unwind_start(&state, p, NULL, NULL); !unwind_done(&state);
 	     unwind_next_frame(&state)) {
 		addr = unwind_get_return_address(&state);
@@ -974,6 +977,8 @@ unsigned long __get_wchan(struct task_struct *p)
 		break;
 	}
 
+	put_task_stack(p);
+
 	return addr;
 }
 

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH] x86: Pin task-stack in __get_wchan()
  2021-11-19  9:29                 ` [PATCH] x86: Pin task-stack in __get_wchan() Peter Zijlstra
@ 2021-11-19 10:02                   ` Qi Zheng
  2021-11-19 10:22                     ` Peter Zijlstra
  2021-11-19 18:16                   ` Linus Torvalds
  2021-11-19 18:35                   ` Josh Poimboeuf
  2 siblings, 1 reply; 35+ messages in thread
From: Qi Zheng @ 2021-11-19 10:02 UTC (permalink / raw)
  To: Peter Zijlstra, Josh Poimboeuf
  Cc: Linus Torvalds, Holger Hoffst??tte, Kees Cook, Thomas Gleixner,
	Justin Forbes, Greg Kroah-Hartman, Linux Kernel Mailing List,
	Andrew Morton, Guenter Roeck, Shuah Khan, patches, lkft-triage,
	Pavel Machek, Jon Hunter, Florian Fainelli, stable



On 11/19/21 5:29 PM, Peter Zijlstra wrote:
> On Thu, Nov 18, 2021 at 06:04:27PM -0800, Josh Poimboeuf wrote:
>> On Thu, Nov 18, 2021 at 01:11:09PM +0100, Peter Zijlstra wrote:
> 
>>> I now have the below, the only thing missing is that there's a
>>> user_mode() call on a stack based regs. Now on x86_64 we can
>>> __get_kernel_nofault() regs->cs and call it a day, but on i386 we have
>>> to also fetch regs->flags.
>>>
>>> Is this really the way to go?
>>
>> Please no.  Can we just add a check in unwind_start() to ensure the
>> caller did try_get_task_stack()?
> 
> I tried; but at best it's fundamentally racy and in practise its worse
> because init_task doesn't seem to believe in refcounts and kthreads are
> odd for some raisin. Now those are fixable, but given the fundamental
> races, I don't see how it's ever going to be reliable.
> 
> I don't mind the __get_kernel_nofault() usage and think I can do a
> better implementation that will allow us to get rid of the
> pagefault_{dis,en}able() sprinkling, but that's for another day. It's
> just the user_mode(regs) usage that's going to be somewhat ugleh.
> 
> Anyway, below is the minimal fix for the situation at hand. I'm not
> going to be around much today, so if Linus wants to pick that up instead
> of mass revert things that's obviously fine too.
> 
> ---
> Subject: x86: Pin task-stack in __get_wchan()
> 
> When commit 5d1ceb3969b6 ("x86: Fix __get_wchan() for !STACKTRACE")
> moved from stacktrace to native unwind_*() usage, the
> try_get_task_stack() got lost, leading to use-after-free issues for
> dying tasks.
> 
> Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>
> ---
>   arch/x86/kernel/process.c | 5 +++++
>   1 file changed, 5 insertions(+)
> 
> diff --git a/arch/x86/kernel/process.c b/arch/x86/kernel/process.c
> index e9ee8b526319..04143a653a8a 100644
> --- a/arch/x86/kernel/process.c
> +++ b/arch/x86/kernel/process.c
> @@ -964,6 +964,9 @@ unsigned long __get_wchan(struct task_struct *p)
>   	struct unwind_state state;
>   	unsigned long addr = 0;
>   
> +	if (!try_get_task_stack(p))
> +		return 0;
> +
>   	for (unwind_start(&state, p, NULL, NULL); !unwind_done(&state);
>   	     unwind_next_frame(&state)) {
>   		addr = unwind_get_return_address(&state);
> @@ -974,6 +977,8 @@ unsigned long __get_wchan(struct task_struct *p)
>   		break;
>   	}
>   
> +	put_task_stack(p);
> +
>   	return addr;
>   }
>   
> 

This implementation is very similar to stack_trace_save_tsk(), maybe we
can just move stack_trace_save_tsk() out of CONFIG_STACKTRACE and reuse
it.

-- 
Thanks,
Qi

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH] x86: Pin task-stack in __get_wchan()
  2021-11-19 10:02                   ` Qi Zheng
@ 2021-11-19 10:22                     ` Peter Zijlstra
  2021-11-19 10:26                       ` Qi Zheng
  0 siblings, 1 reply; 35+ messages in thread
From: Peter Zijlstra @ 2021-11-19 10:22 UTC (permalink / raw)
  To: Qi Zheng
  Cc: Josh Poimboeuf, Linus Torvalds, Holger Hoffst??tte, Kees Cook,
	Thomas Gleixner, Justin Forbes, Greg Kroah-Hartman,
	Linux Kernel Mailing List, Andrew Morton, Guenter Roeck,
	Shuah Khan, patches, lkft-triage, Pavel Machek, Jon Hunter,
	Florian Fainelli, stable

On Fri, Nov 19, 2021 at 06:02:50PM +0800, Qi Zheng wrote:

> This implementation is very similar to stack_trace_save_tsk(), maybe we
> can just move stack_trace_save_tsk() out of CONFIG_STACKTRACE and reuse
> it.

No, we want to move away from the stack_trace_*() API because it has
very unclear semantics and various arch implementations differ in
details.

There's a patch that untangles arch_stack_walk*() from CONFIG_STACKTRACE
and we can eventually use that.

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH] x86: Pin task-stack in __get_wchan()
  2021-11-19 10:22                     ` Peter Zijlstra
@ 2021-11-19 10:26                       ` Qi Zheng
  0 siblings, 0 replies; 35+ messages in thread
From: Qi Zheng @ 2021-11-19 10:26 UTC (permalink / raw)
  To: Peter Zijlstra
  Cc: Josh Poimboeuf, Linus Torvalds, Holger Hoffst??tte, Kees Cook,
	Thomas Gleixner, Justin Forbes, Greg Kroah-Hartman,
	Linux Kernel Mailing List, Andrew Morton, Guenter Roeck,
	Shuah Khan, patches, lkft-triage, Pavel Machek, Jon Hunter,
	Florian Fainelli, stable



On 11/19/21 6:22 PM, Peter Zijlstra wrote:
> On Fri, Nov 19, 2021 at 06:02:50PM +0800, Qi Zheng wrote:
> 
>> This implementation is very similar to stack_trace_save_tsk(), maybe we
>> can just move stack_trace_save_tsk() out of CONFIG_STACKTRACE and reuse
>> it.
> 
> No, we want to move away from the stack_trace_*() API because it has
> very unclear semantics and various arch implementations differ in
> details.
> 
> There's a patch that untangles arch_stack_walk*() from CONFIG_STACKTRACE
> and we can eventually use that.
> 

Got it.

-- 
Thanks,
Qi

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH] x86: Pin task-stack in __get_wchan()
  2021-11-19  9:29                 ` [PATCH] x86: Pin task-stack in __get_wchan() Peter Zijlstra
  2021-11-19 10:02                   ` Qi Zheng
@ 2021-11-19 18:16                   ` Linus Torvalds
  2021-11-19 18:35                   ` Josh Poimboeuf
  2 siblings, 0 replies; 35+ messages in thread
From: Linus Torvalds @ 2021-11-19 18:16 UTC (permalink / raw)
  To: Peter Zijlstra
  Cc: Josh Poimboeuf, Holger Hoffst??tte, Qi Zheng, Kees Cook,
	Thomas Gleixner, Justin Forbes, Greg Kroah-Hartman,
	Linux Kernel Mailing List, Andrew Morton, Guenter Roeck,
	Shuah Khan, patches, lkft-triage, Pavel Machek, Jon Hunter,
	Florian Fainelli, stable

On Fri, Nov 19, 2021 at 1:30 AM Peter Zijlstra <peterz@infradead.org> wrote:
>
> Anyway, below is the minimal fix for the situation at hand. I'm not
> going to be around much today, so if Linus wants to pick that up instead
> of mass revert things that's obviously fine too.

Applied.

I did have to add a number of "Link:" and "Reported-by:" etc lines
though. Please try to keep those kinds around as you make patches,
they get lost and forgotten too easily.

            Linus

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH] x86: Pin task-stack in __get_wchan()
  2021-11-19  9:29                 ` [PATCH] x86: Pin task-stack in __get_wchan() Peter Zijlstra
  2021-11-19 10:02                   ` Qi Zheng
  2021-11-19 18:16                   ` Linus Torvalds
@ 2021-11-19 18:35                   ` Josh Poimboeuf
  2021-11-22  9:32                     ` Peter Zijlstra
  2 siblings, 1 reply; 35+ messages in thread
From: Josh Poimboeuf @ 2021-11-19 18:35 UTC (permalink / raw)
  To: Peter Zijlstra
  Cc: Linus Torvalds, Holger Hoffst??tte, Qi Zheng, Kees Cook,
	Thomas Gleixner, Justin Forbes, Greg Kroah-Hartman,
	Linux Kernel Mailing List, Andrew Morton, Guenter Roeck,
	Shuah Khan, patches, lkft-triage, Pavel Machek, Jon Hunter,
	Florian Fainelli, stable

On Fri, Nov 19, 2021 at 10:29:47AM +0100, Peter Zijlstra wrote:
> On Thu, Nov 18, 2021 at 06:04:27PM -0800, Josh Poimboeuf wrote:
> > On Thu, Nov 18, 2021 at 01:11:09PM +0100, Peter Zijlstra wrote:
> 
> > > I now have the below, the only thing missing is that there's a
> > > user_mode() call on a stack based regs. Now on x86_64 we can
> > > __get_kernel_nofault() regs->cs and call it a day, but on i386 we have
> > > to also fetch regs->flags.
> > > 
> > > Is this really the way to go?
> > 
> > Please no.  Can we just add a check in unwind_start() to ensure the
> > caller did try_get_task_stack()?
> 
> I tried; but at best it's fundamentally racy and in practise its worse
> because init_task doesn't seem to believe in refcounts and kthreads are
> odd for some raisin. Now those are fixable, but given the fundamental
> races, I don't see how it's ever going to be reliable.

I'm probably out of the loop here, but I wonder what races you're
referring to.

And I assume 'stack_refcount > 0' only needs to be asserted when
unwinding other tasks, not current.  So it shouldn't affect unwinds
during boot, or oopses.

Yes, the unwinder has to be rock solid, but if the caller can't even
ensure the given task's memory exists, it sounds like a bug in the
caller that needs a warning.

-- 
Josh


^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH] x86: Pin task-stack in __get_wchan()
  2021-11-19 18:35                   ` Josh Poimboeuf
@ 2021-11-22  9:32                     ` Peter Zijlstra
  2021-11-22 16:14                       ` Josh Poimboeuf
  0 siblings, 1 reply; 35+ messages in thread
From: Peter Zijlstra @ 2021-11-22  9:32 UTC (permalink / raw)
  To: Josh Poimboeuf
  Cc: Linus Torvalds, Holger Hoffst??tte, Qi Zheng, Kees Cook,
	Thomas Gleixner, Justin Forbes, Greg Kroah-Hartman,
	Linux Kernel Mailing List, Andrew Morton, Guenter Roeck,
	Shuah Khan, patches, lkft-triage, Pavel Machek, Jon Hunter,
	Florian Fainelli, stable

On Fri, Nov 19, 2021 at 10:35:44AM -0800, Josh Poimboeuf wrote:
> On Fri, Nov 19, 2021 at 10:29:47AM +0100, Peter Zijlstra wrote:
> > On Thu, Nov 18, 2021 at 06:04:27PM -0800, Josh Poimboeuf wrote:
> > > On Thu, Nov 18, 2021 at 01:11:09PM +0100, Peter Zijlstra wrote:
> > 
> > > > I now have the below, the only thing missing is that there's a
> > > > user_mode() call on a stack based regs. Now on x86_64 we can
> > > > __get_kernel_nofault() regs->cs and call it a day, but on i386 we have
> > > > to also fetch regs->flags.
> > > > 
> > > > Is this really the way to go?
> > > 
> > > Please no.  Can we just add a check in unwind_start() to ensure the
> > > caller did try_get_task_stack()?
> > 
> > I tried; but at best it's fundamentally racy and in practise its worse
> > because init_task doesn't seem to believe in refcounts and kthreads are
> > odd for some raisin. Now those are fixable, but given the fundamental
> > races, I don't see how it's ever going to be reliable.
> 
> I'm probably out of the loop here, but I wonder what races you're
> referring to.

We can do the warn as you suggest, however, it can become 0 right after
we test and then still make the unwder explode.

That is, the test is not sufficient.

> And I assume 'stack_refcount > 0' only needs to be asserted when
> unwinding other tasks, not current.  So it shouldn't affect unwinds
> during boot, or oopses.
> 
> Yes, the unwinder has to be rock solid, but if the caller can't even
> ensure the given task's memory exists, it sounds like a bug in the
> caller that needs a warning.

Well, yes. Still it would be nice if the unwinder would not itself burn
the house, even in that case.

^ permalink raw reply	[flat|nested] 35+ messages in thread

* Re: [PATCH] x86: Pin task-stack in __get_wchan()
  2021-11-22  9:32                     ` Peter Zijlstra
@ 2021-11-22 16:14                       ` Josh Poimboeuf
  0 siblings, 0 replies; 35+ messages in thread
From: Josh Poimboeuf @ 2021-11-22 16:14 UTC (permalink / raw)
  To: Peter Zijlstra
  Cc: Linus Torvalds, Holger Hoffst??tte, Qi Zheng, Kees Cook,
	Thomas Gleixner, Justin Forbes, Greg Kroah-Hartman,
	Linux Kernel Mailing List, Andrew Morton, Guenter Roeck,
	Shuah Khan, patches, lkft-triage, Pavel Machek, Jon Hunter,
	Florian Fainelli, stable

On Mon, Nov 22, 2021 at 10:32:32AM +0100, Peter Zijlstra wrote:
> On Fri, Nov 19, 2021 at 10:35:44AM -0800, Josh Poimboeuf wrote:
> > On Fri, Nov 19, 2021 at 10:29:47AM +0100, Peter Zijlstra wrote:
> > > On Thu, Nov 18, 2021 at 06:04:27PM -0800, Josh Poimboeuf wrote:
> > > > On Thu, Nov 18, 2021 at 01:11:09PM +0100, Peter Zijlstra wrote:
> > > 
> > > > > I now have the below, the only thing missing is that there's a
> > > > > user_mode() call on a stack based regs. Now on x86_64 we can
> > > > > __get_kernel_nofault() regs->cs and call it a day, but on i386 we have
> > > > > to also fetch regs->flags.
> > > > > 
> > > > > Is this really the way to go?
> > > > 
> > > > Please no.  Can we just add a check in unwind_start() to ensure the
> > > > caller did try_get_task_stack()?
> > > 
> > > I tried; but at best it's fundamentally racy and in practise its worse
> > > because init_task doesn't seem to believe in refcounts and kthreads are
> > > odd for some raisin. Now those are fixable, but given the fundamental
> > > races, I don't see how it's ever going to be reliable.
> > 
> > I'm probably out of the loop here, but I wonder what races you're
> > referring to.
> 
> We can do the warn as you suggest, however, it can become 0 right after
> we test and then still make the unwder explode.
> 
> That is, the test is not sufficient.

Realistically there are a limited number of callers to the unwinder.  If
anybody calls with refcount < 2 then we can WARN() and root them out.

It would have found this bug far before any weird races would have been
found.

True, it's not bulletproof, but task unwinder usage is (to some degree)
less critical than oopses.

Now I'm off to disappear for turkey week.  Cheers.

-- 
Josh


^ permalink raw reply	[flat|nested] 35+ messages in thread

end of thread, other threads:[~2021-11-22 16:14 UTC | newest]

Thread overview: 35+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-11-17 10:19 [PATCH 5.15 000/923] 5.15.3-rc3 review Greg Kroah-Hartman
2021-11-17 13:37 ` Fox Chen
2021-11-17 14:13 ` Guenter Roeck
2021-11-17 14:43   ` Greg Kroah-Hartman
2021-11-17 14:54     ` Guenter Roeck
2021-11-17 17:34 ` Jon Hunter
2021-11-17 18:51 ` Florian Fainelli
2021-11-17 20:25 ` Holger Kiehl
2021-11-18  8:14   ` Greg Kroah-Hartman
2021-11-18 14:08     ` Holger Kiehl
2021-11-18 17:08       ` Greg Kroah-Hartman
2021-11-17 20:35 ` Guenter Roeck
2021-11-17 21:32 ` Justin Forbes
2021-11-17 23:32   ` Holger Hoffstätte
2021-11-17 23:50     ` Linus Torvalds
2021-11-18  0:16       ` Kees Cook
2021-11-18  6:26         ` Guenter Roeck
2021-11-18  8:14           ` Greg Kroah-Hartman
2021-11-18  8:12         ` Greg Kroah-Hartman
2021-11-18 17:17           ` Kees Cook
2021-11-18  8:06       ` Peter Zijlstra
2021-11-18  8:18         ` Peter Zijlstra
2021-11-18  9:39           ` Peter Zijlstra
2021-11-18 10:12             ` Peter Zijlstra
2021-11-18 12:11             ` Peter Zijlstra
2021-11-19  2:04               ` Josh Poimboeuf
2021-11-19  9:29                 ` [PATCH] x86: Pin task-stack in __get_wchan() Peter Zijlstra
2021-11-19 10:02                   ` Qi Zheng
2021-11-19 10:22                     ` Peter Zijlstra
2021-11-19 10:26                       ` Qi Zheng
2021-11-19 18:16                   ` Linus Torvalds
2021-11-19 18:35                   ` Josh Poimboeuf
2021-11-22  9:32                     ` Peter Zijlstra
2021-11-22 16:14                       ` Josh Poimboeuf
2021-11-18  5:45 ` [PATCH 5.15 000/923] 5.15.3-rc3 review Naresh Kamboju

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).