Author	SHA1	Message	Date
Miklos Szeredi	abf9dfb0e1	UPSTREAM: fuse: reject options on reconfigure via fsconfig(2) ... Previous patch changed handling of remount/reconfigure to ignore all options, including those that are unknown to the fuse kernel fs. This was done for backward compatibility, but this likely only affects the old mount(2) API. The new fsconfig(2) based reconfiguration could possibly be improved. This would make the new API less of a drop in replacement for the old, OTOH this is a good chance to get rid of some weirdnesses in the old API. Several other behaviors might make sense: 1) unknown options are rejected, known options are ignored 2) unknown options are rejected, known options are rejected if the value is changed, allowed otherwise 3) all options are rejected Prior to the backward compatibility fix to ignore all options all known options were accepted (1), even if they change the value of a mount parameter; fuse_reconfigure() does not look at the config values set by fuse_parse_param(). To fix that we'd need to verify that the value provided is the same as set in the initial configuration (2). The major drawback is that this is much more complex than just rejecting all attempts at changing options (3); i.e. all options signify initial configuration values and don't make sense on reconfigure. This patch opts for (3) with the rationale that no mount options are reconfigurable in fuse. Change-Id: I1eb25670fd437473a1a6c431fed1bb68a80c1046 Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>	2026-05-08 21:46:11 +02:00
Greg Kroah-Hartman	f6520a7c91	This is the 5.4.301 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmkCD9kACgkQONu9yGCS aT756BAAwEcL3lKO/0QKjMUrvgv7FRoRm9TH9Usq7Nswmiax6YKI3oPgZKfZZL6u yLGSnYqV8f+Jo8kALMJAybu+Oc3Z8WbBZJG/dvlAkvR7iN19ZCuKa2NwWmh8BTGd 5ZP4/nyXlNlg0/IIZ8xJa3067U895y9IhgMDmSvOZoUFGFecqUmJNBoj8bHgJaPL /MENYb7D0CcKWbgCwzsqN0EEm9UKb7xgtaaC52sfZD+GHUPF/RLq9QNyUGtyL0m8 y20HG6zXmBiVP+zdtYpTaaEP6OSNOCmiOweSZOFafnatd2XO1hRdnAoEk7+t2Lj+ Xa5GowVUuglmBd8bPbeY8cwVihMxr81DxMns+OpQJTiDD8Q6Whcxbaqwv+tVe7z4 cVDh1xlKG4U2rsDTeiGhbZVNb6gqqy3LnVFqImQE+dcZqlwC0pbqwO2lLdHMa8NF f+l1U3ab0k9qYx8HQegYDTufW5Eb0Rki/3YyHk8o3alOYd2Oc3r16lw9rpSw2Nq3 Rku+VMSy6z8uvmIP7Ywobla6j73SGFrDc61F0nsU1x+Gd/dMIgkn36dfxciBCgPa /AmkK1Psx04s7dIPMowx/nXy5Jk8J4k3JlVMeBnMCuFVUNCNp3qzq5WXdeL1G5f5 GFPJPblaZrfKQNSSlpUAmstl8v5t8aJcjxobmHn28fVliFAJdDI= =XPvH -----END PGP SIGNATURE----- Merge 5.4.301 into android11-5.4-lts Changes in 5.4.301 scsi: target: target_core_configfs: Add length check to avoid buffer overflow media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove udp: Fix memory accounting leak. media: tunner: xc5000: Refactor firmware load media: tuner: xc5000: Fix use-after-free in xc5000_release media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe media: rc: Add support for another iMON 0xffdc device media: imon: reorganize serialization media: imon: grab lock earlier in imon_ir_change_protocol() media: rc: fix races with imon_disconnect() USB: serial: option: add SIMCom 8230C compositions wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 dm-integrity: limit MAX_TAG_SIZE to 255 perf subcmd: avoid crash in exclude_cmds when excludes is empty staging: axis-fifo: fix maximum TX packet length check staging: axis-fifo: flush RX FIFO on read errors driver core/PM: Set power.no_callbacks along with power.no_pm perf: arm_spe: Prevent overflow in PERF_IDX2OFF() x86/vdso: Fix output operand size of RDPID regmap: Remove superfluous check for !config in __regmap_init() ACPI: processor: idle: Fix memory leak when register cpuidle device failed soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS pinctrl: meson-gxl: add missing i2c_d pinmux blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx block: use int to store blk_stack_limits() return value pwm: tiehrpwm: Fix corner case in clock divisor calculation selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported bpf: Explicitly check accesses to bpf_sock_addr i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD i2c: designware: Add disabling clocks when probe fails drm/radeon/r600_cs: clean up of dead code in r600_cs usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup serial: max310x: Add error checking in probe() scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod scsi: myrs: Fix dma_alloc_coherent() error check media: rj54n1cb0c: Fix memleak in rj54n1_probe() ALSA: lx_core: use int type to store negative error codes wifi: mwifiex: send world regulatory domain to driver PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation tcp: fix __tcp_close() to only send RST when required usb: phy: twl6030: Fix incorrect type for ret usb: gadget: configfs: Correctly set use_os_string at bind misc: genwqe: Fix incorrect cmd field being reported in error pps: fix warning in pps_register_cdev when register device fail ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping iio: consumers: Fix offset handling in iio_convert_raw_to_processed() netfilter: ipset: Remove unused htable_bits in macro ahash_region watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog drivers/base/node: handle error properly in register_one_node() wifi: mt76: fix potential memory leak in mt76_wmac_probe() RDMA/core: Resolve MAC of next-hop device without ARP support IB/sa: Fix sa_local_svc_timeout_ms read race sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara sparc: fix accurate exception reporting in copy_to_user for Niagara 4 sparc: fix accurate exception reporting in copy_{from,to}_user for M7 remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice NFSv4.1: fix backchannel max_resp_sz verification check ipvs: Defer ip_vs_ftp unregister during netns cleanup scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() usb: vhci-hcd: Prevent suspending virtually attached devices RDMA/siw: Always report immediate post SQ errors net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast ocfs2: fix double free in user_cluster_connect() drivers/base/node: fix double free in register_one_node() nfp: fix RSS hash key size when RSS is not supported net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set" Squashfs: fix uninit-value in squashfs_get_parent uio_hv_generic: Let userspace take care of interrupt mask mm: hugetlb: avoid soft lockup when mprotect to large memory area Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak pinctrl: check the return value of pinmux_ops::get_function_name() clocksource/drivers/clps711x: Fix resource leaks in error paths iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE perf util: Fix compression checks returning -1 as bool rtc: x1205: Fix Xicor X1205 vendor prefix perf session: Fix handling when buffer exceeds 2 GiB clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate() clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver scsi: libsas: Add sas_task_find_rq() scsi: mvsas: Delete mvs_tag_init() scsi: mvsas: Use sas_task_find_rq() for tagging scsi: mvsas: Fix use-after-free bugs in mvs_work_queue net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter() drm/vmwgfx: Fix Use-after-free in validation net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe tools build: Align warning options with perf mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes crypto: essiv - Check ssize for decryption and in-place encryption tpm, tpm_tis: Claim locality before writing interrupt registers tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT ACPI: debug: fix signedness issues in read/write helpers arm64: dts: qcom: msm8916: Add missing MDSS reset xen/manage: Fix suspend error path firmware: meson_sm: fix device leak at probe media: i2c: mt9v111: fix incorrect type for ret drm/nouveau: fix bad ret code in nouveau_bo_move_prep cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() crypto: atmel - Fix dma_unmap_sg() direction iio: dac: ad5360: use int type to store negative error codes iio: dac: ad5421: use int type to store negative error codes iio: frequency: adf4350: Fix prescaler usage. lib/genalloc: fix device leak in of_gen_pool_get() parisc: don't reference obsolete termio struct for TC* constants scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl() sctp: Fix MAC comparison to be constant-time sparc64: fix hugetlb for sun4u sparc: fix error handling in scan_one_device() mtd: rawnand: fsmc: Default to autodetect buswidth mmc: core: SPI mode remove cmd7 rtc: interface: Ensure alarm irq is enabled when UIE is enabled rtc: interface: Fix long-standing race when setting alarm rseq/selftests: Use weak symbol reference, not definition, to link with glibc PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV PCI/AER: Fix missing uevent on recovery when a reset is requested PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit x86/umip: Check that the instruction opcode is at least two bytes x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases) nfsd: nfserr_jukebox in nlm_fopen should lead to a retry ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch() ext4: correctly handle queries for metadata mappings ext4: guard against EA inode refcount underflow in xattr update net/9p: fix double req put in p9_fd_cancelled KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O fs: udf: fix OOB read in lengthAllocDescs handling mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data() media: mc: Clear minor number before put device Squashfs: add additional inode sanity checking Squashfs: reject negative file sizes in squashfs_read_inode() mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag dm: fix NULL pointer dereference in __dm_suspend() tracing: Fix race condition in kprobe initialization causing NULL pointer dereference minixfs: Verify inode mode when loading from disk pid: Add a judgment for ns null in pid_nr_ns fs: Add 'initramfs_options' to set initramfs mount options cramfs: Verify inode mode when loading from disk xen/events: Cleanup find_virq() return codes media: cx18: Add missing check after DMA map pwm: berlin: Fix wrong register in suspend/resume btrfs: avoid potential out-of-bounds in btrfs_encode_fh() drm/exynos: exynos7_drm_decon: remove ctx->suspended media: rc: Directly use ida_free() media: lirc: Fix error handling in lirc_register() xen/events: Update virq_to_irq on migration media: pci/ivtv: switch from 'pci_' to 'dma_' API media: pci: ivtv: Add missing check after DMA map net: dl2k: switch from 'pci_' to 'dma_' API net: dlink: handle dma_map_single() failure properly net/ip6_tunnel: Prevent perpetual tunnel growth amd-xgbe: Avoid spurious link down messages during interface toggle tcp: fix tcp_tso_should_defer() vs large RTT tg3: prevent use of uninitialized remote_adv and local_adv variables tls: always set record_type in tls_process_cmsg tls: don't rely on tx_work during send() sched: Make newidle_balance() static again sched/fair: Trivial correction of the newidle_balance() comment sched/balancing: Rename newidle_balance() => sched_balance_newidle() sched/fair: Fix pelt lost idle time detection ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() exec: Fix incorrect type for ret hfs: clear offset and space out of valid records in b-tree node hfs: make proper initalization of struct hfs_find_data hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() hfs: validate record offset in hfsplus_bmap_alloc hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() dlm: check for defined force value in dlm_lockspace_release hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super() m68k: bitops: Fix find_*_bit() signatures net: rtnetlink: remove redundant assignment to variable err net: rtnetlink: add msg kind names net: rtnetlink: add helper to extract msg type's kind net: rtnetlink: use BIT for flag values net: netlink: add NLM_F_BULK delete request modifier net: rtnetlink: add bulk delete support flag net: add ndo_fdb_del_bulk net: rtnetlink: add NLM_F_BULK support to rtnl_fdb_del rtnetlink: Allow deleting FDB entries in user namespace net: enetc: correct the value of ENETC_RXB_TRUESIZE arm64, mm: avoid always making PTE dirty in pte_mkwrite() sctp: avoid NULL dereference when chunk data buffer is missing net: bonding: fix possible peer notify event loss or dup issue Revert "cpuidle: menu: Avoid discarding useful information" MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering ocfs2: clear extent cache after moving/defragmenting extents net: usb: rtl8150: Fix frame padding net: ravb: Ensure memory write completes before ringing TX doorbell USB: serial: option: add UNISOC UIS7720 USB: serial: option: add Quectel RG255C USB: serial: option: add Telit FN920C04 ECM compositions usb/core/quirks: Add Huawei ME906S to wakeup quirk xhci: dbc: enable back DbC in resume if it was enabled before suspend binder: remove "invalid inc weak" check comedi: fix divide-by-zero in comedi_buf_munge() arm64: cputype: Add Neoverse-V3AE definitions arm64: errata: Apply workarounds for Neoverse-V3AE memory: samsung: exynos-srom: Correct alignment memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe spi: cadence-quadspi: Flush posted register writes before INDAC access spi: cadence-quadspi: Flush posted register writes before DAC access ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() drm/amdgpu: use atomic functions with memory barriers for vm fault info ext4: detect invalid INLINE_DATA + EXTENTS flag combination jbd2: ensure that all ongoing I/O complete before freeing blocks vfs: Don't leak disconnected dentries on umount NFSD: Define a proc_layoutcommit for the FlexFiles layout type KEYS: trusted_tpm1: Compare HMAC values in constant time padata: Reset next CPU when reorder sequence wraps around NFSD: Minor cleanup in layoutcommit processing NFSD: Fix last write offset handling in layoutcommit media: s5p-mfc: remove an unused/uninitialized variable net: rtnetlink: fix module reference count leak issue in rtnetlink_rcv_msg Linux 5.4.301 Change-Id: Ie2685625a0f630cb01ac8d8c9ddcd68c64ea6ed7 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2025-10-30 07:52:10 +00:00
Lichen Liu	6ad65ae94d	fs: Add 'initramfs_options' to set initramfs mount options ... [ Upstream commit 278033a225e13ec21900f0a92b8351658f5377f2 ] When CONFIG_TMPFS is enabled, the initial root filesystem is a tmpfs. By default, a tmpfs mount is limited to using 50% of the available RAM for its content. This can be problematic in memory-constrained environments, particularly during a kdump capture. In a kdump scenario, the capture kernel boots with a limited amount of memory specified by the 'crashkernel' parameter. If the initramfs is large, it may fail to unpack into the tmpfs rootfs due to insufficient space. This is because to get X MB of usable space in tmpfs, 2*X MB of memory must be available for the mount. This leads to an OOM failure during the early boot process, preventing a successful crash dump. This patch introduces a new kernel command-line parameter, initramfs_options, which allows passing specific mount options directly to the rootfs when it is first mounted. This gives users control over the rootfs behavior. For example, a user can now specify initramfs_options=size=75% to allow the tmpfs to use up to 75% of the available memory. This can significantly reduce the memory pressure for kdump. Consider a practical example: To unpack a 48MB initramfs, the tmpfs needs 48MB of usable space. With the default 50% limit, this requires a memory pool of 96MB to be available for the tmpfs mount. The total memory requirement is therefore approximately: 16MB (vmlinuz) + 48MB (loaded initramfs) + 48MB (unpacked kernel) + 96MB (for tmpfs) + 12MB (runtime overhead) ≈ 220MB. By using initramfs_options=size=75%, the memory pool required for the 48MB tmpfs is reduced to 48MB / 0.75 = 64MB. This reduces the total memory requirement by 32MB (96MB - 64MB), allowing the kdump to succeed with a smaller crashkernel size, such as 192MB. An alternative approach of reusing the existing rootflags parameter was considered. However, a new, dedicated initramfs_options parameter was chosen to avoid altering the current behavior of rootflags (which applies to the final root filesystem) and to prevent any potential regressions. Also add documentation for the new kernel parameter "initramfs_options" This approach is inspired by prior discussions and patches on the topic. Ref: https://www.lightofdawn.org/blog/?viewDetailed=00128 Ref: https://landley.net/notes-2015.html#01-01-2015 Ref: https://lkml.org/lkml/2021/6/29/783 Ref: https://www.kernel.org/doc/html/latest/filesystems/ramfs-rootfs-initramfs.html#what-is-rootfs Signed-off-by: Lichen Liu <lichliu@redhat.com> Link: https://lore.kernel.org/20250815121459.3391223-1-lichliu@redhat.com Tested-by: Rob Landley <rob@landley.net> Signed-off-by: Christian Brauner <brauner@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2025-10-29 13:59:55 +01:00
Greg Kroah-Hartman	0f7dff11a8	This is the 5.4.297 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmiwZfcACgkQONu9yGCS aT54xQ/7Bakgl/fkNhIOFy8BZtf4GX4drYUsyMFXzYKhmY+rsB41MuhgXEXnt29s JGG9evsj2MzyL5sxR244F3W/zoH+KEELCLvY93/z6Tt++9r9XNVvX8cWsHKIx9iV mcVrI0/IvQPnPpgeZoHSwakk86DzyB5Ck6ITCurTndVNx49wcqonqxdxDB79ChjB GE3XPrSodkPDQFs3ESYa2STRFmOCxm3YmD06rUfOA8WWxHfCPSB+uNZwBHuD5wla jS5Od20zdAvY+sex179zCSknJB4HBq8rKizIkMxeo84tivBodNbIb8Kf2Hy889ii 5pqIsF0jRmhV/ADO94OfBIcDB5+xoMkCUnqcSH3vsmaenfU7r93Godsl4Shii0z+ Wiw58LEZ/Ki1ZJEfgTvJw0A5sPF0F+06ySVcocUW1z4E8GuT/RKgjJA0BSu82fto 5T8GTJ2nrT1eZbAOiau0MU5jK72PPlFk2uEWD/kW6VYfelmfjGF/SYNy/JSGpivh dOQkW5V1ZLKyVzVYXyqYFvnZTxDNYCm9qGgYOL6Wkr2Q6XM7QiSKhhGMEBWMpSXP 0xuhZ332a/xrLXdXRR0s04CWPXe5Nb1R2XvJ7EC3JMx/TQHSWGqrbDD+4LBgZWmQ I6uSNV4IGaqQ83xx2ekSxa5HmbAhPhVvtY/0NhQzyKm7pFAY3WU= =o4wf -----END PGP SIGNATURE----- Merge 5.4.297 into android11-5.4-lts Changes in 5.4.297 USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition USB: serial: option: add Foxconn T99W640 USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI usb: gadget: configfs: Fix OOB read on empty string write i2c: stm32: fix the device used for the DMA map Input: xpad - set correct controller type for Acer NGR200 pch_uart: Fix dma_sync_sg_for_device() nents value HID: core: ensure the allocated report buffer can contain the reserved report ID HID: core: ensure __hid_request reserves the report ID as the first byte HID: core: do not bypass hid_hw_raw_request phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept() af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd() af_packet: fix soft lockup issue caused by tpacket_snd() dmaengine: nbpfaxi: Fix memory corruption in probe() isofs: Verify inode mode when loading from disk memstick: core: Zero initialize id_reg in h_memstick_read_dev_id() mmc: bcm2835: Fix dma_unmap_sg() nents value mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models mmc: sdhci_am654: Workaround for Errata i2312 soc: aspeed: lpc-snoop: Cleanup resources in stack-order soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[] iio: adc: max1363: Reorder mode_list[] entries iio: adc: stm32-adc: Fix race in installing chained IRQ handler comedi: pcl812: Fix bit shift out of bounds comedi: aio_iiro_16: Fix bit shift out of bounds comedi: das16m1: Fix bit shift out of bounds comedi: das6402: Fix bit shift out of bounds comedi: Fix some signed shift left operations comedi: Fix use of uninitialized data in insn_rw_emulate_bits() net: emaclite: Fix missing pointer increment in aligned_read() net/sched: sch_qfq: Fix race condition on qfq_aggregate usb: net: sierra: check for no status endpoint Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() Bluetooth: SMP: If an unallowed command is received consider it a failure Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree usb: musb: fix gadget state on disconnect usb: dwc3: qcom: Don't leave BCR asserted ASoC: fsl_sai: Force a software reset when starting in consumer mode virtio-net: ensure the received length does not exceed allocated size xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS power: supply: bq24190_charger: Fix runtime PM imbalance on error power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition net_sched: sch_sfq: annotate data-races around q->perturb_period net_sched: sch_sfq: handle bigger packets net_sched: sch_sfq: don't allow 1 packet limit net_sched: sch_sfq: use a temporary work area for validating configuration net_sched: sch_sfq: move the limit validation net_sched: sch_sfq: reject invalid perturb period usb: hub: fix detection of high tier USB3 devices behind suspended hubs usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm regulator: core: fix NULL dereference on unbind due to stale coupling data RDMA/core: Rate limit GID cache warning messages net: appletalk: fix kerneldoc warnings net: appletalk: Fix use-after-free in AARP proxy probe net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class i2c: qup: jump out of the loop in case of timeout nilfs2: reject invalid file types when reading inodes comedi: comedi_test: Fix possible deletion of uninitialized timers ALSA: hda: Add missing NVIDIA HDA codec IDs usb: chipidea: udc: add new API ci_hdrc_gadget_connect usb: chipidea: udc: protect usb interrupt enable usb: chipidea: introduce CI_HDRC_CONTROLLER_VBUS_EVENT glue layer use usb: chipidea: add USB PHY event usb: phy: mxs: disconnect line when USB charger is attached ethernet: intel: fix building with large NR_CPUS ASoC: Intel: fix SND_SOC_SOF dependencies hfsplus: remove mutex_lock check in hfsplus_free_extents ASoC: ops: dynamically allocate struct snd_ctl_elem_value ARM: dts: vfxxx: Correctly use two tuples for timer address staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() vmci: Prevent the dispatching of uninitialized payloads pps: fix poll support Revert "vmci: Prevent the dispatching of uninitialized payloads" usb: early: xhci-dbc: Fix early_ioremap leak ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface cpufreq: Init policy->rwsem before it may be possibly used samples: mei: Fix building on musl libc staging: nvec: Fix incorrect null termination of battery manufacturer bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure caif: reduce stack size, again wifi: rtl818x: Kill URBs before clearing tx status queue wifi: iwlwifi: Fix memory leak in iwl_mvm_init() iwlwifi: Add missing check for alloc_ordered_workqueue tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range m68k: Don't unregister boot console needlessly drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value netfilter: nf_tables: adjust lockdep assertions handling arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX net/sched: Restrict conditions for adding duplicating netems to qdisc tree wifi: rtl8xxxu: Fix RX skb size for aggregation disabled mwl8k: Add missing check after DMA map Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE can: kvaser_pciefd: Store device channel index can: kvaser_usb: Assign netdev.dev_port based on device channel index netfilter: xt_nfacct: don't assume acct name is null-terminated selftests: rtnetlink.sh: remove esp4_offload after test vrf: Drop existing dst reference in vrf_ip6_input_dst PCI: rockchip-host: Fix "Unexpected Completion" log message crypto: marvell/cesa - Fix engine load inaccuracy mtd: fix possible integer overflow in erase_xfer() clk: davinci: Add NULL check in davinci_lpsc_clk_register() power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set pinctrl: sunxi: Fix memory leak on krealloc failure crypto: ccp - Fix crash when rebind ccp device for ccp.ko perf tests bp_account: Fix leaked file descriptor clk: sunxi-ng: v3s: Fix de clock definition scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value scsi: mvsas: Fix dma_unmap_sg() nents value scsi: isci: Fix dma_unmap_sg() nents value watchdog: ziirave_wdt: check record length in ziirave_firm_verify() hwrng: mtk - handle devm_pm_runtime_enable errors crypto: img-hash - Fix dma_unmap_sg() nents value soundwire: stream: restore params when prepare ports fail fs/orangefs: Allow 2 more characters in do_c_string() dmaengine: mv_xor: Fix missing check after DMA map and missing unmap dmaengine: nbpfaxi: Add missing check after DMA map crypto: qat - fix seq_file position update in adf_ring_next() fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref jfs: fix metapage reference count leak in dbAllocCtl mtd: rawnand: atmel: Fix dma_mapping_error() address mtd: rawnand: atmel: set pmecc data setup time bpf: Check flow_dissector ctx accesses are aligned module: Restore the moduleparam prefix length check rtc: ds1307: fix incorrect maximum clock rate handling rtc: hym8563: fix incorrect maximum clock rate handling rtc: pcf8563: fix incorrect maximum clock rate handling f2fs: fix to avoid UAF in f2fs_sync_inode_meta() f2fs: fix to avoid panic in f2fs_evict_inode f2fs: fix to avoid out-of-boundary access in devs.path usb: chipidea: udc: fix sleeping function called from invalid context pci/hotplug/pnv-php: Improve error msg on power state change failure pci/hotplug/pnv-php: Wrap warnings in macro NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() netpoll: prevent hanging NAPI when netcons gets enabled pptp: ensure minimal skb length in pptp_xmit() ipv6: reject malicious packets in ipv6_gso_segment() net: drop UFO packets in udp_rcv_segment() benet: fix BUG when creating VFs smb: client: let recv_done() cleanup before notifying the callers. pptp: fix pptp_xmit() error path perf/core: Don't leak AUX buffer refcount on allocation failure perf/core: Exit early on perf_mmap() fail perf/core: Prevent VMA split of buffer mappings net/packet: fix a race in packet_set_ring() and packet_notifier() vsock: Do not allow binding to VMADDR_PORT_ANY USB: serial: option: add Foxconn T99W709 MIPS: mm: tlb-r4k: Uniquify TLB entries on init usb: gadget : fix use-after-free in composite_dev_cleanup() io_uring: don't use int for ABI ALSA: usb-audio: Validate UAC3 power domain descriptors, too ALSA: usb-audio: Validate UAC3 cluster segment descriptors netlink: avoid infinite retry looping in netlink_unicast() net: gianfar: fix device leak when querying time stamp info net: dpaa: fix device leak when querying time stamp info NFSD: detect mismatch of file handle and delegation stateid in OPEN op sunvdc: Balance device refcount in vdc_port_mpgroup_check fs: Prevent file descriptor table allocations exceeding INT_MAX Documentation: ACPI: Fix parent device references ACPI: processor: perflib: Fix initial _PPC limit application ACPI: processor: perflib: Move problematic pr->performance check udp: also consider secpath when evaluating ipsec use for checksumming netfilter: ctnetlink: fix refcount leak on table dump sctp: linearize cloned gso packets in sctp_rcv hfs: fix slab-out-of-bounds in hfs_bnode_read() hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() arm64: Handle KCOV __init vs inline mismatches udf: Verify partition map count drbd: add missing kref_get in handle_write_conflicts hfs: fix not erasing deleted b-tree node issue securityfs: don't pin dentries twice, once is enough... usb: xhci: print xhci->xhc_state when queue_command failed selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t usb: xhci: Avoid showing warnings for dying controller usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command usb: xhci: Avoid showing errors during surprise removal cpufreq: Exit governor when failed to start old governor ARM: rockchip: fix kernel hang during smp initialization ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed gpio: tps65912: check the return value of regmap_update_bits() ARM: tegra: Use I/O memcpy to write to IRAM selftests: tracing: Use mutex_unlock for testing glob filter PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() thermal: sysfs: Return ENODATA instead of EAGAIN for reads PM: sleep: console: Fix the black screen issue ACPI: processor: fix acpi_object initialization ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() ASoC: hdac_hdmi: Rate limit logging on connection and disconnection ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4 usb: core: usb_submit_urb: downgrade type check pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros ASoC: codecs: rt5640: Retry DEVICE_ID verification ktest.pl: Prevent recursion of default variable options wifi: cfg80211: reject HTC bit for management frames s390/time: Use monotonic clock in get_cycles() be2net: Use correct byte order and format string for TCP seq and ack_seq et131x: Add missing check after DMA map net: ag71xx: Add missing check after DMA map rcu: Protect ->defer_qs_iw_pending from data race wifi: cfg80211: Fix interface type validation net: ipv4: fix incorrect MTU in broadcast routes net: thunderx: Fix format-truncation warning in bgx_acpi_match_id() wifi: iwlwifi: mvm: fix scan request validation s390/stp: Remove udelay from stp_sync_clock() (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer net: fec: allow disable coalescing wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`. netmem: fix skb_frag_address_safe with unreadable skbs wifi: iwlegacy: Check rate_idx range after addition net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs net: dsa: b53: fix b53_imp_vlan_setup for BCM5325 net: dsa: b53: prevent SWITCH_CTRL access on BCM5325 net: ncsi: Fix buffer overflow in fetching version id uapi: in6: restore visibility of most IPv6 socket options net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325 vhost: fail early when __vhost_add_used() fails cifs: Fix calling CIFSFindFirst() for root path without msearch ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated fs/orangefs: use snprintf() instead of sprintf() watchdog: dw_wdt: Fix default timeout MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free} scsi: bfa: Double-free fix jfs: truncate good inode pages when hard link is 0 jfs: Regular file corruption check jfs: upper bound check of tree index in dbAllocAG MIPS: Don't crash in stack_top() for tasks without ABI or vDSO RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure scsi: mpt3sas: Correctly handle ATA device errors pinctrl: stm32: Manage irq affinity settings media: tc358743: Check I2C succeeded during probe media: tc358743: Return an appropriate colorspace from tc358743_set_fmt media: tc358743: Increase FIFO trigger level to 374 media: usb: hdpvr: disable zero-length read messages media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar media: uvcvideo: Fix bandwidth issue for Alcor camera i3c: add missing include to internal header PCI: pnv_php: Work around switches with broken presence detection i3c: don't fail if GETHDRCAP is unsupported kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c kconfig: nconf: Ensure null termination where strncpy is used scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans scsi: aacraid: Stop using PCI_IRQ_AFFINITY ipmi: Use dev_warn_ratelimited() for incorrect message warnings kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed() kconfig: gconf: fix potential memory leak in renderer_edited() kconfig: lxdialog: fix 'space' to (de)select options ipmi: Fix strcpy source and destination the same net: phy: smsc: add proper reset flags for LAN8710A pNFS: Fix stripe mapping in block/scsi layout pNFS: Fix disk addr range check in block/scsi layout pNFS: Handle RPC size limit for layoutcommits pNFS: Fix uninited ptr deref in block/scsi layout rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe scsi: lpfc: Remove redundant assignment to avoid memory leak drm/amdgpu: fix incorrect vm flags to map bo misc: rtsx: usb: Ensure mmc child device is active when card is present comedi: fix race between polling and detaching thunderbolt: Fix copy+paste error in match_service_id() btrfs: fix log tree replay failure due to file with 0 links and extents parisc: Makefile: fix a typo in palo.conf mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() media: uvcvideo: Do not mark valid metadata as invalid serial: 8250: fix panic due to PSLVERR cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table() m68k: Fix lost column on framebuffer debug console usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init() usb: gadget: udc: renesas_usb3: fix device leak at unbind usb: dwc3: meson-g12a: fix device leaks at unbind vt: keyboard: Don't process Unicode characters in K_OFF mode vt: defkeymap: Map keycodes above 127 to K_HOLE Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()" ext4: check fast symlink for ea_inode correctly ext4: fix fsmap end of range reporting with bigalloc ext4: fix reserved gdt blocks handling in fsmap ata: libata-scsi: Fix ata_to_sense_error() status handling zynq_fpga: use sgtable-based scatterlist wrappers wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table() pwm: imx-tpm: Reset counter if CMOD is 0 mtd: rawnand: fsmc: Add missing check after DMA map PCI: endpoint: Fix configfs group list head handling PCI: endpoint: Fix configfs group removal on driver teardown jbd2: prevent softlockup in jbd2_log_do_checkpoint() soc/tegra: pmc: Ensure power-domains are in a known state media: gspca: Add bounds checking to firmware parser media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init() media: usbtv: Lock resolution while streaming media: ov2659: Fix memory leaks in ov2659_probe() media: venus: Add a check for packet size after reading from shared memory memstick: Fix deadlock by moving removing flag earlier squashfs: fix memory leak in squashfs_fill_super drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3 drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs fs/buffer: fix use-after-free when call bh_read() helper move_mount: allow to add a mount into an existing group use uniform permission checks for all mount propagation changes fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable() ftrace: Also allocate and copy hash for reading of filter files iio: proximity: isl29501: fix buffered read on big-endian systems usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera usb: storage: realtek_cr: Use correct byte order for bcs->Residue USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles usb: dwc3: Ignore late xferNotReady event to prevent halt timeout ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS kbuild: Update assembler calls to use proper flags and language target mips: Include KBUILD_CPPFLAGS in CHECKFLAGS invocation kbuild: Add CLANG_FLAGS to as-instr kbuild: add $(CLANG_FLAGS) to KBUILD_CPPFLAGS kbuild: Add KBUILD_CPPFLAGS to as-option invocation comedi: Fix initialization of data for instructions that write to subdevice comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports net: usbnet: Avoid potential RCU stall on LINK_CHANGE event net: usbnet: Fix the wrong netif_carrier_on() call ice: Fix a null pointer dereference in ice_copy_and_init_pkg() drm/sched: Remove optimization that causes hang when killing dependent jobs mm/zsmalloc.c: convert to use kmem_cache_zalloc in cache_alloc_zspage() mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n f2fs: fix to do sanity check on ino and xnid iio: hid-sensor-prox: Fix incorrect OFFSET calculation x86/mce/amd: Add default names for MCA banks and blocks usb: hub: avoid warm port reset during USB3 disconnect usb: hub: Don't try to recover devices lost during warm reset. tracing: Add down_write(trace_event_sem) when adding trace event pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery x86/fpu: Delay instruction pointer fixup until after warning ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() mm/kmemleak: turn kmemleak_lock and object->lock to raw_spinlock_t mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock USB: cdc-acm: do not log successful probe on later errors cdc-acm: fix race between initial clearing halt and open usb: typec: fusb302: cache PD RX state NFSv4: Fix nfs4_bitmap_copy_adjust() NFS: Fix up handling of outstanding layoutcommit in nfs_update_inode() NFS: Fix the setting of capabilities when automounting a new filesystem usb: musb: omap2430: fix device leak at unbind rtc: ds1307: handle oscillator stop flag (OSF) for ds1341 soc: qcom: mdt_loader: Ensure we don't read past the ELF header ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig media: v4l2-ctrls: always copy the controls on completion media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() pwm: mediatek: Implement .apply() callback pwm: mediatek: Handle hardware enable and clock enable separately pwm: mediatek: Fix duty and period setting drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS media: venus: vdec: Clamp param smaller than 1fps and bigger than 240. media: qcom: camss: cleanup media device allocated resource on error path media: venus: protect against spurious interrupts during probe f2fs: fix to avoid out-of-boundary access in dnode page media: venus: hfi: explicitly release IRQ during teardown btrfs: populate otime when logging an inode item sch_drr: make drr_qlen_notify() idempotent sch_hfsc: make hfsc_qlen_notify() idempotent sch_qfq: make qfq_qlen_notify() idempotent codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() mm: drop the assumption that VM_SHARED always implies writable mm: update memfd seal write check to include F_SEAL_WRITE mm: perform the mapping_map_writable() check after call_mmap() net: sched: extract common action counters update code into function net: sched: extract bstats update code into function net: sched: extract qstats update code into functions net: sched: don't expose action qstats to skb_tc_reinsert() selftests: forwarding: tc_actions.sh: add matchall mirror test net/sched: act_mirred: refactor the handle of xmit net/sched: act_mirred: better wording on protection against excessive stack growth act_mirred: use the backlog for nested calls to mirred ingress Bluetooth: fix use-after-free in device_for_each_child() cifs: Fix UAF in cifs_demultiplex_thread() NFS: Fix up commit deadlocks nfs: fix UAF in direct writes usb: xhci: Fix slot_id resource race conflict scsi: qla4xxx: Prevent a potential error pointer dereference ALSA: usb-audio: Fix size validation in convert_chmap_v3() ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation s390/hypfs: Avoid unnecessary ioctl registration in debugfs s390/hypfs: Enable limited access during lockdown alloc_fdtable(): change calling conventions. Linux 5.4.297 Change-Id: I31d1928fd98d4aebd14d5e4753dffcf88dd4c03b Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2025-09-02 10:52:40 +00:00
Al Viro	3e3e50ce2e	use uniform permission checks for all mount propagation changes ... [ Upstream commit cffd0441872e7f6b1fce5e78fb1c99187a291330 ] do_change_type() and do_set_group() are operating on different aspects of the same thing - propagation graph. The latter asks for mounts involved to be mounted in namespace(s) the caller has CAP_SYS_ADMIN for. The former is a mess - originally it didn't even check that mount *is* mounted. That got fixed, but the resulting check turns out to be too strict for userland - in effect, we check that mount is in our namespace, having already checked that we have CAP_SYS_ADMIN there. What we really need (in both cases) is * only touch mounts that are mounted. That's a must-have constraint - data corruption happens if it get violated. * don't allow to mess with a namespace unless you already have enough permissions to do so (i.e. CAP_SYS_ADMIN in its userns). That's an equivalent of what do_set_group() does; let's extract that into a helper (may_change_propagation()) and use it in both do_set_group() and do_change_type(). Fixes: 12f147ddd6de "do_change_type(): refuse to operate on unmounted/not ours mounts" Acked-by: Andrei Vagin <avagin@gmail.com> Reviewed-by: Pavel Tikhomirov <ptikhomirov@virtuozzo.com> Tested-by: Pavel Tikhomirov <ptikhomirov@virtuozzo.com> Reviewed-by: Christian Brauner <brauner@kernel.org> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2025-08-28 16:21:32 +02:00
Pavel Tikhomirov	ce750f697c	move_mount: allow to add a mount into an existing group ... [ Upstream commit 9ffb14ef61bab83fa818736bf3e7e6b6e182e8e2 ] Previously a sharing group (shared and master ids pair) can be only inherited when mount is created via bindmount. This patch adds an ability to add an existing private mount into an existing sharing group. With this functionality one can first create the desired mount tree from only private mounts (without the need to care about undesired mount propagation or mount creation order implied by sharing group dependencies), and next then setup any desired mount sharing between those mounts in tree as needed. This allows CRIU to restore any set of mount namespaces, mount trees and sharing group trees for a container. We have many issues with restoring mounts in CRIU related to sharing groups and propagation: - reverse sharing groups vs mount tree order requires complex mounts reordering which mostly implies also using some temporary mounts (please see https://lkml.org/lkml/2021/3/23/569 for more info) - mount() syscall creates tons of mounts due to propagation - mount re-parenting due to propagation - "Mount Trap" due to propagation - "Non Uniform" propagation, meaning that with different tricks with mount order and temporary children-"lock" mounts one can create mount trees which can't be restored without those tricks (see https://www.linuxplumbersconf.org/event/7/contributions/640/) With this new functionality we can resolve all the problems with propagation at once. Link: https://lore.kernel.org/r/20210715100714.120228-1-ptikhomirov@virtuozzo.com Cc: Eric W. Biederman <ebiederm@xmission.com> Cc: Alexander Viro <viro@zeniv.linux.org.uk> Cc: Christian Brauner <christian.brauner@ubuntu.com> Cc: Mattias Nissler <mnissler@chromium.org> Cc: Aleksa Sarai <cyphar@cyphar.com> Cc: Andrei Vagin <avagin@gmail.com> Cc: linux-fsdevel@vger.kernel.org Cc: linux-api@vger.kernel.org Cc: lkml <linux-kernel@vger.kernel.org> Co-developed-by: Andrei Vagin <avagin@gmail.com> Acked-by: Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by: Pavel Tikhomirov <ptikhomirov@virtuozzo.com> Signed-off-by: Andrei Vagin <avagin@gmail.com> Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com> Stable-dep-of: cffd0441872e ("use uniform permission checks for all mount propagation changes") Signed-off-by: Sasha Levin <sashal@kernel.org>	2025-08-28 16:21:32 +02:00
Greg Kroah-Hartman	02f0aeffc1	This is the 5.4.296 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmh5JDkACgkQONu9yGCS aT5nfg//evp7vYDG9XXjBxzgNBJu1kP+N/yNxjM9ATgiEW4/gbhLASWZcMrdhiQl bvvEFad055VyjEnhK1OrCkAE/YivuJjnCvAhW4FA2V5sFTh2efYmGEOvgZBnHYsa txUYM/1NTlKZYPwM+YBX+9ImPDV84RX2Ryjx9ZKIZoCRsEAuH5rDbuNelgxHkmWe 7NfscD2Fz5If2DCA7SLAwsL4KTdTfMKuOJThy0/LxAiV0ephZwgYtDB5Do56woqU rrV+k4dfKmGz02nOz5AJAP5fjZ0nzC27Ztwahxpey/X/Q2O3qAb9hpC1ELOC88Qv /yd5SqnsW4RWW2mrHumu5wngMgz2lXvjR+WOWox0BxHH2BlkkbEDJJRN74Ji7Fyu n0uGhRPfP9B0Qm9owTav3SJwD0fvJ1IEuOZ8H7XMONA6Zpv1Xhntqh2hGy0IwXaZ 1lf9a0p0r9N6bbwLpOQXdDJXGh/nhmYVeTlbhkHdaZDtPpkpA28e3/bJJg15K9ap 55t4+Xc4yU1qAP3M1GdmygRONCHKt9CpLadVBJ3EG9E6N3xFN1Y6oHAvczmoPTco 8OITQWn1EBpg9ygLWWeof1COUZITPLsmqt6Yt3307UPqfPK+xjWiz39VNisFfuHB 4W1lKHa7616bSrQtlc9uvBUO+jhppFtqz9EsrqOEr9epH6jiHJE= =LIf5 -----END PGP SIGNATURE----- Merge 5.4.296 into android11-5.4-lts Changes in 5.4.296 cifs: Fix cifs_query_path_info() for Windows NT servers mailbox: Not protect module_put with spin_lock_irqsave mfd: max14577: Fix wakeup source leaks on device unbind dmaengine: xilinx_dma: Set dma_device directions md/md-bitmap: fix dm-raid max_write_behind setting iio: pressure: zpa2326: Use aligned_s64 for the timestamp usb: potential integer overflow in usbg_make_tpg() tty: serial: uartlite: register uart driver in init usb: Add checks for snprintf() calls in usb_alloc_dev() usb: cdc-wdm: avoid setting WDM_READ for ZLP-s usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode ALSA: hda: Ignore unsol events for cards being shut down ceph: fix possible integer overflow in ceph_zero_objects() ovl: Check for NULL d_inode() in ovl_dentry_upper() VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify kbuild: use -MMD instead of -MD to exclude system headers from dependency bpfilter: match bit size of bpfilter_umh to that of the kernel kbuild: add --target to correctly cross-compile UAPI headers with Clang kbuild: hdrcheck: fix cross build with clang of: property: define of_property_read_u{8,16,32,64}_array() unconditionally of: Add of_property_present() helper ASoC: meson: meson-card-utils: use of_property_present() for DT parsing fs/jfs: consolidate sanity checking in dbMount jfs: validate AG parameters in dbMount() to prevent crashes media: cxusb: use dev_dbg() rather than hand-rolled debug media: cxusb: no longer judge rbuf when the write fails media: omap3isp: use sgtable-based scatterlist wrappers media: vivid: Change the siize of the composing RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction i2c: tiny-usb: disable zero-length read messages i2c: robotfuzz-osif: disable zero-length read messages ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() attach_recursive_mnt(): do not lock the covering tree when sliding something under it wifi: mac80211: fix beacon interval calculation overflow vsock/uapi: fix linux/vm_sockets.h userspace compilation errors um: ubd: Add missing error check in start_io_thread() net: enetc: Correct endianness handling in _enetc_rd_reg64 atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). Bluetooth: L2CAP: Fix L2CAP MTU negotiation dm-raid: fix variable in journal device check HID: wacom: fix memory leak on kobject creation failure HID: wacom: fix memory leak on sysfs attribute creation failure HID: wacom: fix kobject reference count leak drm/tegra: Assign plane type before registration drm/bridge: cdns-dsi: Fix the clock variable for mode_valid() drm/bridge: cdns-dsi: Fix connecting to next bridge drm/bridge: cdns-dsi: Check return value when getting default PHY config s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS arm64: Restrict pagetable teardown to avoid false warning btrfs: don't abort filesystem when attempting to snapshot deleted subvolume vsock/vmci: Clear the vmci transport packet properly when initializing it mmc: sdhci: Add a helper function for dump register in dynamic debug mode Revert "mmc: sdhci: Disable SD card clock before changing parameters" usb: typec: altmodes/displayport: do not index invalid pin_assignments mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu() btrfs: fix missing error handling when searching for inode refs during log replay drm/exynos: fimd: Guard display clock control with runtime PM calls lib: test_objagg: Set error message in check_expect_hints_stats() amd-xgbe: align CL37 AN sequence as per databook enic: fix incorrect MTU comparison in enic_change_mtu() nui: Fix dma_mapping_error() check net/sched: Always pass notifications when child class becomes empty ALSA: sb: Force to disable DMAs once when DMA mode is changed ata: pata_cs5536: fix build on 32-bit UML powerpc: Fix struct termio related ioctl macros wifi: mac80211: drop invalid source address OCB frames wifi: ath6kl: remove WARN on bad firmware input ACPICA: Refuse to evaluate a method if arguments are missing regulator: gpio: Add input_supply support in gpio_regulator_config regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods mmc: mediatek: use data instead of mrq parameter from msdc_{un}prepare_data() mtk-sd: Prevent memory corruption from DMA map failure mtk-sd: reset host->mrq on prepare_data() error drm/v3d: Disable interrupts before resetting the GPU scsi: ufs: core: Fix spelling of a sysfs attribute name RDMA/core: Create and destroy counters in the ib_core RDMA/mlx5: Fix CC counters query for MPV btrfs: propagate last_unlink_trans earlier when doing a rmdir btrfs: use btrfs_record_snapshot_destroy() during rmdir ethernet: atl1: Add missing DMA mapping error checks and count errors dpaa2-eth: fix xdp_rxq_info leak spi: spi-fsl-dspi: Rename fifo_{read,write} and {tx,cmd}_fifo_write spi: spi-fsl-dspi: Fix interrupt-less DMA mode taking an XSPI code path spi: spi-fsl-dspi: Clear completion counter before initiating transfer drm/i915/selftests: Change mock_request() to return error pointers drm/i915/gt: Fix timeline left held on VMA alloc error net: rose: Fix fall-through warnings for Clang rose: fix dangling neighbour pointers in rose_rt_device_down() Logitech C-270 even more broken usb: typec: displayport: Fix potential deadlock ACPI: PAD: fix crash in exit_round_robin() media: uvcvideo: Return the number of processed controls media: uvcvideo: Send control events for partial succeeds media: uvcvideo: Rollback non processed entities on error staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher() drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling proc: Clear the pieces of proc_inode that proc_evict_inode cares about fix proc_sys_compare() handling of in-lookup dentries netlink: Fix wraparounds of sk->sk_rmem_alloc. tipc: Fix use-after-free in tipc_conn_close(). atm: clip: Fix potential null-ptr-deref in to_atmarpd(). atm: clip: Fix memory leak of struct clip_vcc. atm: clip: Fix infinite recursive call of clip_push(). atm: clip: Fix NULL pointer dereference in vcc_sendmsg() net/sched: Abort __tc_modify_qdisc if parent class does not exist rxrpc: Fix oops due to non-existence of prealloc backlog struct x86/mce/amd: Fix threshold limit reset x86/mce: Don't remove sysfs if thresholding sysfs init fails x86/mce: Make sure CMCI banks are cleared during shutdown on Intel pinctrl: qcom: msm: mark certain pins as invalid for interrupts drm/sched: Increment job count before swapping tail spsc queue usb: gadget: u_serial: Fix race condition in TTY wakeup Revert "ACPI: battery: negate current when discharging" pwm: mediatek: Ensure to disable clocks in error path netlink: make sure we allow at least one dump skb netlink: Fix rmem check in netlink_broadcast_deliver(). RDMA/mlx5: Fix vport loopback for MPV device flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes NFSv4/flexfiles: Fix handling of NFS level errors in I/O Input: xpad - add support for Amazon Game Controller Input: xpad - add VID for Turtle Beach controllers Input: xpad - support Acer NGR 200 Controller dma-buf: fix timeout handling in dma_resv_wait_timeout v2 wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() md/raid1: Fix stack memory use after return in raid1_reshape net: appletalk: Fix device refcount leak in atrtr_create() net: phy: microchip: limit 100M workaround to link-down events on LAN88xx can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level bnxt_en: Fix DCB ETS validation bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT atm: idt77252: Add missing `dma_map_error()` net: usb: qmi_wwan: add SIMCom 8230C composition vt: add missing notification when switching back to text mode HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID x86/mm: Disable hugetlb page table sharing on 32-bit net: ipv6: Discard next-hop MTU less than minimum link MTU Linux 5.4.296 Change-Id: Ida23d7bc57d7a55921aa3db936a175607d7859b8 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2025-07-18 10:57:54 +00:00
Al Viro	5925f9f229	attach_recursive_mnt(): do not lock the covering tree when sliding something under it ... [ Upstream commit ce7df19686530920f2f6b636e71ce5eb1d9303ef ] If we are propagating across the userns boundary, we need to lock the mounts added there. However, in case when something has already been mounted there and we end up sliding a new tree under that, the stuff that had been there before should not get locked. IOW, lock_mnt_tree() should be called before we reparent the preexisting tree on top of what we are adding. Fixes: 3bd045cc9c ("separate copying and locking mount tree on cross-userns copies") Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2025-07-17 18:24:53 +02:00
Greg Kroah-Hartman	978aeb58ff	This is the 5.4.295 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmhebGEACgkQONu9yGCS aT67mBAAqkBCrkNSqHHQpsl/YybmfDgGonfHeLkNOYp4G44Axp/oytb1bAEhg65A oqfTSF67Hr3xjBVEvFMHMnuFO1+xHxkKIy3LUr9o9gjS+6+rEn7U5cYkaHYPNef5 hN/tPUwf90d2ivpAsTueUu4PegJUJTaux0VqW6PsECKJ/fRF2sdAW7NpGps4zwaw +gnxZ7fhWnMLDeSH4d6HAFsVB10AH4sC/WzVMGlXpiS7V8vzM7QjAj3S7NWkOjaX fUWmKLecRT6388V+PBH6tr7vwsbFAv83gKVENgFMPKnsfPLTKd3d81TJvWqbU5Dn Y+KxG1NWmIUkhlMeqDld51JJCP2JpLxSchqHvJ2TiFJs3gRdkYeQxiDfXHzRsZ+v 8beqQufcmQFxOyUkWQLGlMR9ACva1IA7hQ4HdTqygDqcQjKcvIYGcy+29PpTBVjj +BNs6F8ttK6jQ19IqwhP2AeIObq/DQCtn0xRaOkfAwyODhi2nD7F191ZtmrRwAq7 ax+hXzNIWkLhvsuG+YLuNXczYbOGKZ56mg8XI+3DQ0KNRUieznsgeXXsjkGbzivn uDPWkRtqO48RnZHzlLUzT0Zv7pNCWXscnHEa1LfQ7Effj3G0C74TJWLDRcfSgf0i +cdXwJhnHc1ztExtmuNvfk7SHEFRNhjB8Zmdd8weK6SUzH0knPE= =jzgM -----END PGP SIGNATURE----- Merge 5.4.295 into android11-5.4-lts Changes in 5.4.295 tracing: Fix compilation warning on arm32 pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31 pinctrl: armada-37xx: set GPIO output value before setting direction usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device usb: usbtmc: Fix timeout value in get_stb thunderbolt: Do not double dequeue a configuration request netfilter: nft_socket: fix sk refcount leaks gfs2: gfs2_create_inode error handling fix perf/core: Fix broken throttling when max_samples_per_tick=1 x86/cpu: Sanitize CPUID(0x80000000) output crypto: marvell/cesa - Handle zero-length skcipher requests crypto: marvell/cesa - Avoid empty transfer descriptor EDAC/skx_common: Fix general protection fault PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks() x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges() ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions" spi: sh-msiof: Fix maximum DMA transfer size drm/vmwgfx: Add seqno waiter for sync_files m68k: mac: Fix macintosh_config for Mac II firmware: psci: Fix refcount leak in psci_dt_init selftests/seccomp: fix syscall_restart test for arm compat drm: rcar-du: Fix memory leak in rcar_du_vsps_init() drm/vkms: Adjust vkms_state->active_planes allocation type drm/tegra: rgb: Fix the unbound reference count f2fs: fix to do sanity check on sbi->total_valid_block_count net: ncsi: Fix GCPS 64-bit member variables wifi: rtw88: do not ignore hardware read error during DPK RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h f2fs: clean up w/ fscrypt_is_bounce_page() netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it ktls, sockmap: Fix missing uncharge operation pinctrl: at91: Fix possible out-of-boundary access bpf: Fix WARN() in get_bpf_raw_tp_regs wifi: ath9k_htc: Abort software beacon handling if disabled netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy net: usb: aqc111: fix error handling of usbnet read calls net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy calipso: Don't call calipso functions for AF_INET sk. f2fs: use d_inode(dentry) cleanup dentry->d_inode f2fs: fix to correct check conditions in f2fs_cross_rename ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select ARM: dts: at91: at91sam9263: fix NAND chip selects Squashfs: check return result of sb_min_blocksize nilfs2: add pointer check for nilfs_direct_propagate() nilfs2: do not propagate ENOENT error from nilfs_btree_propagate() bus: fsl-mc: fix double-free on mc_dev ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou soc: aspeed: lpc: Fix impossible judgment condition soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() perf ui browser hists: Set actions->thread before calling do_zoom_thread() perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3 rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send() mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove() mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE perf tests switch-tracking: Fix timestamp comparison perf record: Fix incorrect --user-regs comments rtc: sh: assign correct interrupts with DT rtc: Fix offset calculation for .start_secs < 0 usb: renesas_usbhs: Reorder clock handling and power management in probe serial: Fix potential null-ptr-deref in mlb_usio_probe() vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl() net/mlx4_en: Prevent potential integer overflow calculating Hz Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION ice: create new Tx scheduler nodes for new queues only PM: sleep: Fix power.is_suspended cleanup for direct-complete devices do_change_type(): refuse to operate on unmounted/not ours mounts pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id() Input: synaptics-rmi4 - convert to use sysfs_emit() APIs Input: synaptics-rmi - fix crash with unsupported versions of F34 NFSD: Fix ia_size underflow NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes scsi: iscsi: Fix incorrect error path labels for flashnode operations net_sched: sch_sfq: fix a potential crash on gso_skb handling i40e: return false from i40e_reset_vf if reset is in progress i40e: retry VFLR handling if there is ongoing VF reset net/mlx5: Wait for inactive autogroups net/mlx5: Fix return value when searching for existing flow group net_sched: prio: fix a race in prio_tune() net_sched: red: fix a race in __red_change() net_sched: tbf: fix a race in tbf_change() net: mdio: C22 is now optional, EOPNOTSUPP if not provided x86/boot/compressed: prefer cc-option for CFLAGS additions MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option drm/amd/display: Do not add '-mhard-float' to dml_ccflags for clang drm/amd/display: Do not add '-mhard-float' to dcn2{1,0}_resource.o for clang net/mdiobus: Fix potential out-of-bounds read/write access fs/filesystems: Fix potential unsigned integer underflow in fs_name() usb: Flush altsetting 0 endpoints before reinitializating them after reset. xen/arm: call uaccess_ttbr0_enable for dm_op hypercall calipso: unlock rcu before returning -EAFNOSUPPORT net: usb: aqc111: debug info before sanitation configfs: Do not override creating attribute file failure in populate_attrs() gfs2: move msleep to sleepable context wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723 media: gspca: Add error handling for stv06xx_read_sensor() media: v4l2-dev: fix error handling in __video_register_device() ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap() ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device ext4: inline: fix len overflow in ext4_prepare_inline_data ext4: fix calculation of credits for extent tree modification Input: ims-pcu - check record size in ims_pcu_flash_firmware() f2fs: prevent kernel warning due to negative i_nlink from corrupted image NFC: nci: uart: Set tty->disc_data only in success path EDAC/altera: Use correct write width with the INTTEST register fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var vgacon: Add check for vc_origin address range in vgacon_scroll() parisc: fix building with gcc-15 ipc: fix to protect IPCS lookups using RCU mm: fix ratelimit_pages update error in dirty_ratio_handler() mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk mtd: nand: sunxi: Add randomizer configuration before randomizer enable dm-mirror: fix a tiny race condition ftrace: Fix UAF when lookup kallsym after ftrace disabled net: ch9200: fix uninitialised access during mii_nway_restart staging: iio: ad5933: Correct settling cycles encoding per datasheet mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS regulator: max14577: Add error check for max14577_read_reg() uio_hv_generic: Use correct size for interrupt and monitor pages PCI: Add ACS quirk for Loongson PCIe PCI: Fix lock symmetry in pci_slot_unlock() iio: adc: ad7606_spi: fix reg write value mask ACPICA: fix acpi operand cache leak in dswstate.c ACPICA: Avoid sequence overread in call to strncmp() ACPICA: fix acpi parse and parseext cache leaks power: supply: bq27xxx: Retrieve again when busy PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn() ACPI: battery: negate current when discharging drm/amdgpu/gfx6: fix CSIB handling sunrpc: update nextcheck time when adding new cache entries drm/bridge: analogix_dp: Add irq flag IRQF_NO_AUTOEN instead of calling disable_irq() drm/msm/hdmi: add runtime PM calls to DDC transfer function media: uapi: v4l: Fix V4L2_TYPE_IS_OUTPUT condition drm/amd/display: Add NULL pointer checks in dm_force_atomic_commit() drm/msm/a6xx: Increase HFI response timeout drm/amdgpu/gfx10: fix CSIB handling drm/amdgpu/gfx7: fix CSIB handling jfs: fix array-index-out-of-bounds read in add_missing_indices drm/amdgpu/gfx8: fix CSIB handling drm/amdgpu/gfx9: fix CSIB handling jfs: Fix null-ptr-deref in jfs_ioc_trim drm/amdkfd: Set SDMA_RLCx_IB_CNTL/SWITCH_INSIDE_IB media: tc358743: ignore video while HPD is low media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() nios2: force update_mmu_cache on spurious tlb-permission--related pagefaults cpufreq: Force sync policy boost with global boost on sysfs update net: macb: Check return value of dma_set_mask_and_coherent() i2c: designware: Invoke runtime suspend on quick slave re-registration emulex/benet: correct command version selection in be_cmd_get_stats() sctp: Do not wake readers in __sctp_write_space() net: dlink: add synchronization for stats update tcp: always seek for minimal rtt in tcp_rcv_rtt_update() tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name() pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction() pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction() pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get() net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info wifi: mac80211: do not offer a mesh path if forwarding is disabled clk: rockchip: rk3036: mark ddrphy as critical vxlan: Do not treat dst cache initialization errors as fatal scsi: lpfc: Use memcpy() for BIOS version sock: Correct error checking condition for (assign|release)_proto_idx() i40e: fix MMIO write access to an invalid page in i40e_clear_hw watchdog: da9052_wdt: respect TWDMIN bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY tee: Prevent size calculation wraparound on 32-bit kernels Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first" platform: Add Surface platform directory platform/x86: dell_rbu: Stop overwriting data buffer powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery Revert "x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2" on v6.6 and older drivers/rapidio/rio_cm.c: prevent possible heap overwrite jffs2: check that raw node were preallocated before writing summary jffs2: check jffs2_prealloc_raw_node_refs() result in few other places scsi: storvsc: Increase the timeouts to storvsc_timeout scsi: s390: zfcp: Ensure synchronous unit_add selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len atm: Revert atm_account_tx() if copy_from_iter_full() fails. HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() Input: sparcspkr - avoid unannotated fall-through ALSA: hda/intel: Add Thinkpad E15 to PM deny list ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged erofs: remove unused trace event erofs_destroy_inode drm/nouveau/bl: increase buffer size to avoid truncate warning hwmon: (occ) fix unaligned accesses aoe: clean device rq_list in aoedev_downdev() wifi: carl9170: do not ping device which has failed to load firmware mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). atm: atmtcp: Free invalid length skb in atmtcp_c_send(). tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). net: atm: add lec_mutex net: atm: fix /proc/net/atm/lec handling ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board ARM: dts: am335x-bone-common: Increase MDIO reset deassert time ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create rtc: Improve performance of rtc_time64_to_tm(). Add tests. rtc: Make rtc_time64_to_tm() support dates before 1970 mm/huge_memory: fix dereferencing invalid pmd migration entry jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() rtc: test: Fix invalid format specifier. s390/pci: Fix __pcilg_mio_inuser() inline assembly perf: Fix sample vs do_exit() arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops Linux 5.4.295 Change-Id: I44ee88afdff6b4865efac55635f7529a2d9715e8 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2025-06-30 08:05:33 +00:00
Al Viro	787937c4e3	do_change_type(): refuse to operate on unmounted/not ours mounts ... [ Upstream commit 12f147ddd6de7382dad54812e65f3f08d05809fc ] Ensure that propagation settings can only be changed for mounts located in the caller's mount namespace. This change aligns permission checking with the rest of mount(2). Reviewed-by: Christian Brauner <brauner@kernel.org> Fixes: 07b20889e3 ("beginning of the shared-subtree proper") Reported-by: "Orlando, Noah" <Noah.Orlando@deshaw.com> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2025-06-27 11:02:49 +01:00
Greg Kroah-Hartman	cd881391f1	This is the 5.4.294 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmhAPSgACgkQONu9yGCS aT7FShAA16nZLD+wQFWNG0AB1oKDjWuH3cMzxcJnYKJC2LHAiFoCV8DX0SuLBEF/ Lf79xdniv4NYWja7hGykC+0iMBlZKaRWvKOO5jmqA0+Tgy39NCgoDyD5r2azsSnn vKqfDsmhijaZ3Vkr1Kw3Co0i9aVHFS2G532eaIdXjr+XrVGyXGoS/a4pPuZz2S5M FGBzQfgsFnMVhnYG1CCz3PSE4iVKaC0jWOrJOxIsyjrZJ038362fKl75AQQho0ga fNEleCDJiItnBGyOsgEYTuYgpiJ9Q2mfmScJaK4epphCwZ3IwRNp9ZGEjOWQlr+6 fmaDXqARB77cZ1HrrW89UyhiM/7D+yLZpmWGeSAKcpf0ytIUXzmkKwywFMd0znw7 HGYpjOgSpQKG7Nbf7+cYYi5h2RenO1ecbmDxz+o8oR5bJ/w4B20Qbwy1VGizlSxb HU492UirF783ZYFUuNTAhmzvVF5KPp4fRQVrn2MpOLusQe5tSDmA1LQLnkIRKh+N 9/w5CNugUvPUHwqJhJxEniTST+1mSJ3f3BDRWq16A4WVWN21IFtmFJOh3beC+cwB /maaA9ybh4D98XpPIo13tgjBYfDH5mAXWx80M7aoais+E0o08j4oMIyVhV/N/nJv dtjznweRdLFDyoST/PFku9JOKH+1WxzaM2vqX0D1NpB3BUfapww= =dZXI -----END PGP SIGNATURE----- Merge 5.4.294 into android11-5.4-lts Changes in 5.4.294 EDAC/altera: Test the correct error reg offset EDAC/altera: Set DDR and SDMMC interrupt mask before registration i2c: imx-lpi2c: Fix clock count when probe defers parisc: Fix double SIGFPE crash amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() dm-integrity: fix a warning on invalid table line dm: always update the array size in realloc_argv on success tracing: Fix oob write in trace_seq_to_buffer() net/mlx5: E-Switch, Initialize MAC Address for Default GID net_sched: drr: Fix double list add in class with netem as child qdisc net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc net_sched: qfq: Fix double list add in class with netem as child qdisc net: dlink: Correct endianness handling of led_mode nvme-tcp: fix premature queue removal and I/O failover lan743x: remove redundant initialization of variable current_head_index lan743x: fix endianness when accessing descriptors net: lan743x: Fix memleak issue when GSO enabled net: fec: ERR007885 Workaround for conventional TX PCI: imx6: Skip controller_id generation logic for i.MX7D of: module: add buffer overflow check in of_modalias() sch_htb: make htb_qlen_notify() idempotent irqchip/gic-v2m: Add const to of_device_id irqchip/gic-v2m: Mark a few functions __init irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() usb: chipidea: imx: change hsic power regulator as optional usb: chipidea: imx: refine the error handling for hsic usb: chipidea: ci_hdrc_imx: use dev_err_probe() usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling arm64: dts: rockchip: fix iface clock-name on px30 iommus iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid dm: fix copying after src array boundaries scsi: target: Fix WRITE_SAME No Data Buffer crash sch_htb: make htb_deactivate() idempotent netfilter: ipset: fix region locking in hash types net: dsa: b53: fix learning on VLAN unaware bridges Input: synaptics - enable InterTouch on Dynabook Portege X30-D Input: synaptics - enable InterTouch on Dynabook Portege X30L-G Input: synaptics - enable InterTouch on Dell Precision M3800 staging: iio: adc: ad7816: Correct conditional logic for store mode iio: adc: ad7606: fix serial register access iio: adis16201: Correct inclinometer channel resolution iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo usb: uhci-platform: Make the clock really optional xenbus: Use kref to track req lifetime module: ensure that kobject_put() is safe for module type kobjects ocfs2: switch osb->disable_recovery to enum ocfs2: implement handshaking with ocfs2 recovery thread ocfs2: stop quota recovery before disabling quotas usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition usb: typec: ucsi: displayport: Fix NULL pointer access USB: usbtmc: use interruptible sleep in usbtmc_read usb: usbtmc: Fix erroneous get_stb ioctl error returns usb: usbtmc: Fix erroneous wait_srq ioctl return usb: usbtmc: Fix erroneous generic_read ioctl return types: Complement the aligned types with signed 64-bit one iio: adc: dln2: Use aligned_s64 for timestamp MIPS: Fix MAX_REG_OFFSET nvme: unblock ctrl state transition for firmware update do_umount(): add missing barrier before refcount checks in sync case platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection staging: axis-fifo: replace spinlock with mutex staging: axis-fifo: Remove hardware resets for user errors staging: axis-fifo: avoid parsing ignored device tree properties staging: axis-fifo: Correct handling of tx_fifo_depth for size validation iio: adc: ad7768-1: Fix insufficient alignment of timestamp. iio: chemical: sps30: use aligned_s64 for timestamp RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug nfs: handle failure of nfs_get_lock_context in unlock path spi: loopback-test: Do not split 1024-byte hexdumps net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING ALSA: sh: SND_AICA should depend on SH_DMA_API qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd() NFSv4/pnfs: pnfs_set_layout_stateid() should update the layout cred NFSv4/pnfs: Reset the layout state after a layoutreturn dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted" ACPI: PPTT: Fix processor subtable walk ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2() phy: Fix error handling in tegra_xusb_port_init phy: renesas: rcar-gen3-usb2: Set timing registers only once clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable() Input: synaptics - enable SMBus for HP Elitebook 850 G1 Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5 openvswitch: Fix unsafe attribute parsing in output_userspace() scsi: target: iscsi: Fix timeout on deleted connection dma-mapping: avoid potential unused data compilation warning cgroup: Fix compilation issue due to cgroup_mutex not being exported kconfig: merge_config: use an empty file as initfile mailbox: use error ret code of of_parse_phandle_with_args() fbdev: fsl-diu-fb: add missing device_remove_file() fbdev: core: tileblit: Implement missing margin clearing for tileblit NFSv4: Treat ENETUNREACH errors as fatal for state recovery SUNRPC: rpc_clnt_set_transport() must not change the autobind setting dql: Fix dql->limit value when reset. tools/build: Don't pass test log files to linker pNFS/flexfiles: Report ENETDOWN as a connection error libnvdimm/labels: Fix divide error in nd_label_data_init() mmc: host: Wait for Vdd to settle on card power off i2c: pxa: fix call balance of i2c->clk handling routines btrfs: avoid linker error in btrfs_find_create_tree_block() btrfs: send: return -ENAMETOOLONG when attempting a path that is too long um: Store full CSGSFS and SS register from mcontext um: Update min_low_pfn to match changes in uml_reserved ext4: reorder capability check last scsi: st: Tighten the page format heuristics with MODE SELECT scsi: st: ERASE does not change tape location kbuild: fix argument parsing in scripts/config dm: restrict dm device size to 2^63-512 bytes xen: Add support for XenServer 6.1 platform device posix-timers: Add cond_resched() to posix_timer_add() search loop netfilter: conntrack: Bound nf_conntrack sysctl writes mmc: sdhci: Disable SD card clock before changing parameters powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 rtc: ds1307: stop disabling alarms on probe ieee802154: ca8210: Use proper setters and getters for bitwise types ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() dm cache: prevent BUG_ON by blocking retries on failed device resumes orangefs: Do not truncate file size media: cx231xx: set device_caps for 417 pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" net: pktgen: fix mpls maximum labels list parsing x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 hwmon: (gpio-fan) Add missing mutex locks drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence fpga: altera-cvp: Increase credit timeout net/mlx5: Avoid report two health errors on same syndrome drm/amdkfd: KFD release_work possible circular locking net: xgene-v2: remove incorrect ACPI_PTR annotation bonding: report duplicate MAC address in all situations x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() cpuidle: menu: Avoid discarding useful information MIPS: Use arch specific syscall name match function MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core scsi: mpt3sas: Send a diag reset if target reset fails wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU net: pktgen: fix access outside of user given buffer in pktgen_thread_write() EDAC/ie31200: work around false positive build warning PCI: Fix old_size lower bound in calculate_iosize() too ACPI: HED: Always initialize before evged net/mlx5: Modify LSB bitmask in temperature event to include only the first bit net/mlx5: Apply rate-limiting to high temperature warning ASoC: ops: Enforce platform maximum on initial value pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map smack: recognize ipv4 CIPSO w/o categories net/mlx4_core: Avoid impossible mlx4_db_alloc() order value phy: core: don't require set_mode() callback for phy_get_mode() to work net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB net/mlx5e: set the tx_queue_len for pfifo_fast net/mlx5e: reduce rep rxq depth to 256 for ECPF ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). hwmon: (xgene-hwmon) use appropriate type for the latency value vxlan: Annotate FDB data races rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y rcu: fix header guard for rcu_all_qs() scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine scsi: st: Restore some drive settings after reset HID: usbkbd: Fix the bit shift number for LED_KANA bpftool: Fix readlink usage in get_fd_type wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate regulator: ad5398: Add device tree support drm/atomic: clarify the rules around drm_atomic_state->allow_modeset drm: Add valid clones check pinctrl: meson: define the pull up/down resistor value as 60 kOhm ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 nvmet-tcp: don't restore null sk_state_change btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref xenbus: Allow PVH dom0 a non-local xenstore __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock xfrm: Sanitize marks before insert bridge: netfilter: Fix forwarding of fragmented packets net: dwmac-sun8i: Use parsed internal PHY address instead of 1 sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() crypto: algif_hash - fix double free in hash_accept can: bcm: add locking for bcm_op runtime updates can: bcm: add missing rcu read protection for procfs content ALSA: pcm: Fix race of buffer access at PCM OSS layer llc: fix data loss when reading from a socket in llc_ui_recvmsg() drm/edid: fixed the bug that hdr metadata was not reset memcg: always call cond_resched() after fn() mm/page_alloc.c: avoid infinite retries caused by cpuset race spi: spi-fsl-dspi: restrict register range for regmap access kbuild: Disable -Wdefault-const-init-unsafe netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx netfilter: nf_tables: wait for rcu grace period on net_device removal netfilter: nf_tables: do not defer rule destruction via call_rcu drm/i915/gvt: fix unterminated-string-initialization warning smb: client: Fix use-after-free in cifs_fill_dirent smb: client: Reset all search buffer pointers when releasing buffer net_sched: hfsc: Address reentrant enqueue adding class to eltree twice coredump: fix error handling for replace_fd() pidfd: check pid has attached task in fdinfo pid: add pidfd_prepare() fork: use pidfd_prepare() coredump: hand a pidfd to the usermode coredump helper HID: quirks: Add ADATA XPG alpha wireless mouse support nfs: don't share pNFS DS connections between net namespaces platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS um: let 'make clean' properly clean underlying SUBARCH as well spi: spi-sun4i: fix early activation platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys platform/x86: thinkpad_acpi: Ignore battery threshold change event notification xen/swiotlb: relax alignment requirements Linux 5.4.294 Change-Id: Iaf692049f875da760e327bc752534cc38c2795eb Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2025-06-05 07:11:21 +00:00
Al Viro	628fb00195	__legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock ... [ Upstream commit 250cf3693060a5f803c5f1ddc082bb06b16112a9 ] ... or we risk stealing final mntput from sync umount - raising mnt_count after umount(2) has verified that victim is not busy, but before it has set MNT_SYNC_UMOUNT; in that case __legitimize_mnt() doesn't see that it's safe to quietly undo mnt_count increment and leaves dropping the reference to caller, where it'll be a full-blown mntput(). Check under mount_lock is needed; leaving the current one done before taking that makes no sense - it's nowhere near common enough to bother with. Reviewed-by: Christian Brauner <brauner@kernel.org> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2025-06-04 14:32:35 +02:00
Al Viro	80a00ec057	do_umount(): add missing barrier before refcount checks in sync case ... [ Upstream commit 65781e19dcfcb4aed1167d87a3ffcc2a0c071d47 ] do_umount() analogue of the race fixed in 119e1ef80e "fix __legitimize_mnt()/mntput() race". Here we want to make sure that if __legitimize_mnt() doesn't notice our lock_mount_hash(), we will notice their refcount increment. Harder to hit than mntput_no_expire() one, fortunately, and consequences are milder (sync umount acting like umount -l on a rare race with RCU pathwalk hitting at just the wrong time instead of use-after-free galore mntput_no_expire() counterpart used to be hit). Still a bug... Fixes: 48a066e72d ("RCU'd vfsmounts") Reviewed-by: Christian Brauner <brauner@kernel.org> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2025-06-04 14:32:28 +02:00
Greg Kroah-Hartman	94424b0fce	This is the 5.4.285 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmcuLG4ACgkQONu9yGCS aT7BrA/+NGLfwp3lfOunHEhrw/IwD/tbMJuAOn5P2rvrg3f2aCVjboJpHh0pwL6O Axt4uEmJOo7++8mEo9cCBdLPSv5lQPK+j1uIXjKfdISODJYVqLf6g7GGHSdq/Ijj BCSW24P+Kl+XK0NHiyzlS2+XFP+Xk6T5yErV0cBwt6KFotYWjaAlpwDlCGHtvdra RROVwCQWVxGrCDLPEYeQIP3cD1fp/A3Q/d3quJLK1xo6SXAFBZjlYcOvl76i4ogj 6ZZPBdIusk24pjpnhaIwmlzbmfqWbp5T2uJHJGaXNfSioIKSs1CdKP9zsOnGxoDl Iv3c65O/IZbLz/77z1yKDPWn9lQ1uu0sr15Bq6G720HOvk1reKbBwP+XeWNnl8PF RLdDxVAYqIFxfMsWGHgc7NzToRH/Z2AkqmTcm+uYHh+u9z4gXbVKXcgOX/EBFKKL rlVjwOsTzPm2NV81EP4bDKNag+3D6yoYn1zJV6Qdu7j/Wsn69OjFEuMIVeXf1olv BGGdTwleHgA8ml18xZkoCun3J9NORhaCgdfz979fwSdxBBpGHxDcklWZtQMJxfgl UpD0huZWoD3mjIx557N9Rxh270L7ETQMSLd3B6Bu2qy6Gd9V4Ik0R33nEEiodPfU bxmZ3r/Fzqs8Zzc3V/NrKCgxopf/yLcdXfOJCpNyL9oXaxCH8oQ= =W8Y0 -----END PGP SIGNATURE----- Merge 5.4.285 into android11-5.4-lts Changes in 5.4.285 usbnet: ipheth: fix carrier detection in modes 1 and 4 net: ethernet: use ip_hdrlen() instead of bit shift net: phy: vitesse: repair vsc73xx autonegotiation scripts: kconfig: merge_config: config files: add a trailing newline arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma ice: fix accounting for filters shared by multiple VSIs net/mlx5e: Add missing link modes to ptys2ethtool_map net: ftgmac100: Enable TX interrupt to avoid TX timeout net: dpaa: Pad packets to ETH_ZLEN spi: nxp-fspi: fix the KASAN report out-of-bounds bug soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps" selftests: breakpoints: Fix a typo of function name ASoC: allow module autoloading for table db1200_pids ALSA: hda/realtek - Fixed ALC256 headphone no sound ALSA: hda/realtek - FIxed ALC285 headphone no sound pinctrl: at91: make it work with current gpiolib microblaze: don't treat zero reserved memory regions as error net: ftgmac100: Ensure tx descriptor updates are visible wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room() wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead ASoC: tda7419: fix module autoloading drm: komeda: Fix an issue related to normalized zpos spi: bcm63xx: Enable module autoloading x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency ocfs2: add bounds checking to ocfs2_xattr_find_entry() ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() gpio: prevent potential speculation leaks in gpio_device_get_desc() inet: inet_defrag: prevent sk release while still in use bpf: Fix DEVMAP_HASH overflow check on 32-bit arches USB: serial: pl2303: add device id for Macrosilicon MS3020 USB: usbtmc: prevent kernel-usb-infoleak ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe() wifi: ath9k: fix parameter check in ath9k_init_debug() wifi: ath9k: Remove error checks when creating debugfs entries fs: explicitly unregister per-superblock BDIs mount: warn only once about timestamp range expiration fs/namespace: fnic: Switch to use %ptTd mount: handle OOM on mnt_warn_timestamp_expiry can: j1939: use correct function name in comment netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire netfilter: nf_tables: reject element expiration with no timeout netfilter: nf_tables: reject expiration higher than timeout wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan() wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors mac80211: parse radiotap header when selecting Tx queue wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param sock_map: Add a cond_resched() in sock_hash_free() can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). Bluetooth: btusb: Fix not handling ZPL/short-transfer net: tipc: avoid possible garbage value block, bfq: fix possible UAF for bfqq->bic with merge chain block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator() block, bfq: don't break merge chain in bfq_split_bfqq() spi: ppc4xx: handle irq_of_parse_and_map() errors spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property ARM: versatile: fix OF node leak in CPUs prepare reset: berlin: fix OF node leak in probe() error path clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init() hwmon: (max16065) Fix overflows seen when writing limits mtd: slram: insert break after errors in parsing the map hwmon: (ntc_thermistor) fix module autoloading power: supply: axp20x_battery: allow disabling battery charging power: supply: axp20x_battery: Remove design from min and max voltage power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense fbdev: hpfb: Fix an error handling path in hpfb_dio_probe() mtd: powernv: Add check devm_kasprintf() returned value drm/stm: Fix an error handling path in stm_drm_platform_probe() drm/amdgpu: Replace one-element array with flexible-array member drm/amdgpu: properly handle vbios fake edid sizing drm/radeon: Replace one-element array with flexible-array member drm/radeon: properly handle vbios fake edid sizing drm/rockchip: vop: Allow 4096px width scaling drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets jfs: fix out-of-bounds in dbNextAG() and diAlloc() drm/msm: Fix incorrect file name output in adreno_request_fw() drm/msm/a5xx: disable preemption in submits by default drm/msm/a5xx: properly clear preemption records on resume drm/msm/a5xx: fix races in preemption evaluation stage ipmi: docs: don't advertise deprecated sysfs entries drm/msm: fix %s null argument error drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind() xen: use correct end address of kernel for conflict checking xen/swiotlb: add alignment check for dma buffers tpm: Clean up TPM space after command failure selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c selftests/bpf: Fix compiling flow_dissector.c with musl-libc selftests/bpf: Fix compiling tcp_rtt.c with musl-libc selftests/bpf: Fix error compiling test_lru_map.c xz: cleanup CRC32 edits from 2018 kthread: add kthread_work tracepoints kthread: fix task state in kthread worker if being frozen jbd2: introduce/export functions jbd2_journal_submit|finish_inode_data_buffers() ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso ext4: avoid negative min_clusters in find_group_orlov() ext4: return error on ext4_find_inline_entry ext4: avoid OOB when system.data xattr changes underneath the filesystem nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() nilfs2: determine empty node blocks as corrupted nilfs2: fix potential oob read in nilfs_btree_check_delete() bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit perf sched timehist: Fix missing free of session in perf_sched__timehist() perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time perf time-utils: Fix 32-bit nsec parsing clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228 drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error PCI: keystone: Fix if-statement expression in ks_pcie_quirk() PCI: xilinx-nwl: Fix register misspelling RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency pinctrl: single: fix missing error code in pcs_probe() clk: ti: dra7-atl: Fix leak of of_nodes pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function watchdog: imx_sc_wdt: Don't disable WDT in suspend RDMA/hns: Optimize hem allocation performance riscv: Fix fp alignment bug in perf_callchain_user() RDMA/cxgb4: Added NULL check for lookup_atid ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() nfsd: call cache_put if xdr_reserve_space returns NULL nfsd: return -EINVAL when namelen is 0 f2fs: enhance to update i_mode and acl atomically in f2fs_setattr() f2fs: fix typo f2fs: fix to update i_ctime in __f2fs_setxattr() f2fs: remove unneeded check condition in __f2fs_setxattr() f2fs: reduce expensive checkpoint trigger frequency iio: adc: ad7606: fix oversampling gpio array iio: adc: ad7606: fix standby gpio state to match the documentation coresight: tmc: sg: Do not leak sg_table netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition tcp: check skb is non-NULL in tcp_rto_delta_us() net: qrtr: Update packets cloning when broadcasting netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS crypto: aead,cipher - zeroize key buffer after use Remove *.orig pattern from .gitignore soc: versatile: integrator: fix OF node leak in probe() error path drm/amd/display: Round calculated vtotal USB: appledisplay: close race between probe and completion handler USB: misc: cypress_cy7c63: check for short transfer USB: class: CDC-ACM: fix race between get_serial and set_serial firmware_loader: Block path traversal tty: rp2: Fix reset with non forgiving PCIe host bridges drbd: Fix atomicity violation in drbd_uuid_set_bm() drbd: Add NULL check for net_conf to prevent dereference in state validation ACPI: sysfs: validate return type of _STR method ACPI: resource: Add another DMI match for the TongFang GMxXGxx wifi: rtw88: 8822c: Fix reported RX band width debugobjects: Fix conditions in fill_pool() f2fs: prevent possible int overflow in dir_block_index() f2fs: avoid potential int overflow in sanity_check_area_boundary() hwrng: mtk - Use devm_pm_runtime_enable vfs: fix race between evice_inodes() and find_inode()&iput() fs: Fix file_set_fowner LSM hook inconsistencies nfs: fix memory leak in error path of nfs4_do_reclaim ASoC: meson: axg: extract sound card utils ASoC: meson: axg-card: fix 'use-after-free' PCI: xilinx-nwl: Use irq_data_get_irq_chip_data() PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler soc: versatile: realview: fix memory leak during device remove soc: versatile: realview: fix soc_dev leak during device remove usb: yurex: Replace snprintf() with the safer scnprintf() variant USB: misc: yurex: fix race between read and write pps: remove usage of the deprecated ida_simple_xx() API pps: add an error check in parport_attach mm: only enforce minimum stack gap size if it's sensible i2c: aspeed: Update the stop sw state when the bus recovery occurs i2c: isch: Add missed 'else' usb: yurex: Fix inconsistent locking bug in yurex_read() mailbox: rockchip: fix a typo in module autoloading mailbox: bcm2835: Fix timeout during suspend mode ceph: remove the incorrect Fw reference check when dirtying pages Minor fixes to the CAIF Transport drivers Kconfig file drivers: net: Fix Kconfig indentation, continued ieee802154: Fix build error net/mlx5: Added cond_resched() to crdump collection netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq() netfilter: nf_tables: prevent nf_skb_duplicated corruption Bluetooth: btmrvl_sdio: Refactor irq wakeup Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq() net: ethernet: lantiq_etop: fix memory disclosure net: avoid potential underflow in qdisc_pkt_len_init() with UFO net: add more sanity checks to qdisc_pkt_len_init() ipv4: ip_gre: Fix drops of small packets in ipgre_xmit sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start ALSA: hda/realtek: Fix the push button function for the ALC257 ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin f2fs: Require FMODE_WRITE for atomic write ioctls wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats() wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node() net: hisilicon: hip04: fix OF node leak in probe() net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info() net: hisilicon: hns_mdio: fix OF node leak in probe() ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails ACPICA: Fix memory leak if acpi_ps_get_next_field() fails net: sched: consistently use rcu_replace_pointer() in taprio_change() wifi: rtw88: select WANT_DEV_COREDUMP ACPI: EC: Do not release locks during operation region accesses ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() tipc: guard against string buffer overrun net: mvpp2: Increase size of queue_name buffer ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR). ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process ACPICA: iasl: handle empty connection_node proc: add config & param to block forcing mem writes wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() nfp: Use IRQF_NO_AUTOEN flag in request_irq() signal: Replace BUG_ON()s ALSA: asihpi: Fix potential OOB array access ALSA: hdsp: Break infinite MIDI input flush loop x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments() fbdev: pxafb: Fix possible use after free in pxafb_task() power: reset: brcmstb: Do not go into infinite loop if reset fails ata: sata_sil: Rename sil_blacklist to sil_quirks jfs: UBSAN: shift-out-of-bounds in dbFindBits jfs: Fix uaf in dbFreeBits jfs: check if leafidx greater than num leaves per dmap tree jfs: Fix uninit-value access of new_ea in ea_buffer drm/amd/display: Check stream before comparing them drm/amd/display: Fix index out of bounds in degamma hardware format translation drm/amd/display: Initialize get_bytes_per_element's default to 1 drm/printer: Allow NULL data in devcoredump printer scsi: aacraid: Rearrange order of struct aac_srb_unit drm/radeon/r100: Handle unknown family in r100_cp_init_microcode() of/irq: Refer to actual buffer size in of_irq_parse_one() ext4: ext4_search_dir should return a proper error ext4: fix i_data_sem unlock order in ext4_ind_migrate() spi: s3c64xx: fix timeout counters in flush_fifo selftests: breakpoints: use remaining time to check if suspend succeed selftests: vDSO: fix vDSO symbols lookup for powerpc64 i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume i2c: xiic: Wait for TX empty to avoid missed TX NAKs firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp() spi: bcm63xx: Fix module autoloading perf/core: Fix small negative period being ignored parisc: Fix itlb miss handler for 64-bit programs drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS ALSA: core: add isascii() check to card ID generator ext4: no need to continue when the number of entries is 1 ext4: propagate errors from ext4_find_extent() in ext4_insert_range() ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space() ext4: aovid use-after-free in ext4_ext_insert_extent() ext4: fix double brelse() the buffer of the extents path ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit() parisc: Fix 64-bit userspace syscall path parisc: Fix stack start for ADDR_NO_RANDOMIZE personality of/irq: Support #msi-cells=<0> in of_msi_get_domain drm: omapdrm: Add missing check for alloc_ordered_workqueue jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error mm: krealloc: consider spare memory for __GFP_ZERO ocfs2: fix the la space leak when unmounting an ocfs2 volume ocfs2: fix uninit-value in ocfs2_get_block() ocfs2: reserve space for inline xattr before attaching reflink tree ocfs2: cancel dqi_sync_work before freeing oinfo ocfs2: remove unreasonable unlock in ocfs2_read_blocks ocfs2: fix null-ptr-deref when journal load failed. ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate riscv: define ILLEGAL_POINTER_VALUE for 64bit aoe: fix the potential use-after-free problem in more places clk: rockchip: fix error for unknown clocks media: sun4i_csi: Implement link validate for sun4i_csi subdev media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags media: venus: fix use after free bug in venus_remove due to race condition iio: magnetometer: ak8975: Fix reading for ak099xx sensors tomoyo: fallback to realpath if symlink's pathname does not exist rtc: at91sam9: fix OF node leak in probe() error path Input: adp5589-keys - fix adp5589_gpio_get_value() ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[] ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[] btrfs: fix a NULL pointer dereference when failed to start a new trasacntion btrfs: wait for fixup workers before stopping cleaner kthread during umount gpio: davinci: fix lazy disable i2c: qcom-geni: Let firmware specify irq trigger flags i2c: qcom-geni: Grow a dev pointer to simplify code i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq() arm64: Add Cortex-715 CPU part definition arm64: cputype: Add Neoverse-N3 definitions arm64: errata: Expand speculative SSBS workaround once more uprobes: fix kernel info leak via "[uprobes]" vma nfsd: use ktime_get_seconds() for timestamps nfsd: fix delegation_blocked() to block correctly for at least 30 seconds clk: qcom: rpmh: Simplify clk_rpmh_bcm_send_cmd() clk: qcom: clk-rpmh: Fix overflow in BCM vote r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun" r8169: add tally counter fields added with RTL8125 ACPI: battery: Simplify battery hook locking ACPI: battery: Fix possible crash when unregistering a battery hook ext4: fix inode tree inconsistency caused by ENOMEM unicode: Don't special case ignorable code points net: ethernet: cortina: Drop TSO support tracing: Remove precision vsnprintf() check from print event drm/crtc: fix uninitialized variable use even harder tracing: Have saved_cmdlines arrays all in one allocation virtio_console: fix misc probe bugs Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal bpf: Check percpu map value size first s390/facility: Disable compile time optimization for decompressor code s390/mm: Add cond_resched() to cmm_alloc/free_pages() ext4: nested locking for xattr inode s390/cpum_sf: Remove WARN_ON_ONCE statements ktest.pl: Avoid false positives with grub2 skip regex clk: bcm: bcm53573: fix OF node leak in init PCI: Add ACS quirk for Qualcomm SA8775P i2c: i801: Use a different adapter-name for IDF adapters PCI: Mark Creative Labs EMU20k2 INTx masking as broken ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put() usb: chipidea: udc: enable suspend interrupt after usb reset usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario virtio_pmem: Check device status before requesting flush tools/iio: Add memory allocation failure check for trigger_name driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute fbdev: sisfb: Fix strbuf array overflow RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt ice: fix VLAN replay after reset SUNRPC: Fix integer overflow in decode_rc_list() tcp: fix to allow timestamp undo if no retransmits were sent tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe netfilter: br_netfilter: fix panic with metadata_dst skb Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change gpio: aspeed: Add the flush write to ensure the write complete. gpio: aspeed: Use devm_clk api to manage clock source igb: Do not bring the device up after non-fatal error net/sched: accept TCA_STAB only for root qdisc net: ibm: emac: mal: fix wrong goto net: annotate lockless accesses to sk->sk_ack_backlog net: annotate lockless accesses to sk->sk_max_ack_backlog sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start ppp: fix ppp_async_encode() illegal access slip: make slhc_remember() more robust against malicious packets locking/lockdep: Fix bad recursion pattern locking/lockdep: Rework lockdep_lock locking/lockdep: Avoid potential access of invalid memory in lock_class lockdep: fix deadlock issue between lockdep and rcu resource: fix region_intersects() vs add_memory_driver_managed() CDC-NCM: avoid overflow in sanity checking HID: plantronics: Workaround for an unexcepted opposite volume key Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant" usb: dwc3: core: Stop processing of pending events if controller is halted usb: xhci: Fix problem with xhci resume from suspend usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma net: Fix an unsafe loop on the list nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error posix-clock: Fix missing timespec64 check in pc_clock_settime() arm64: probes: Remove broken LDR (literal) uprobe support arm64: probes: Fix simulate_ldr*_literal() tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols tracing/kprobes: Fix symbol counting logic by looking at modules as well PCI: Add function 0 DMA alias quirk for Glenfly Arise chip fat: fix uninitialized variable mm/swapfile: skip HugeTLB pages for unuse_vma wifi: mac80211: fix potential key use-after-free KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() s390/sclp_vt220: Convert newlines to CRLF instead of LFCR KVM: s390: Change virtual to physical address access in diag 0x258 handler x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race drm/vmwgfx: Handle surface check failure correctly iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency() iio: light: opt3001: add missing full-scale range value iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig Bluetooth: Remove debugfs directory on module init failure Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 xhci: Fix incorrect stream context type macro USB: serial: option: add support for Quectel EG916Q-GL USB: serial: option: add Telit FN920C04 MBIM compositions parport: Proper fix for array out-of-bounds access x86/resctrl: Annotate get_mem_config() functions as __init x86/apic: Always explicitly disarm TSC-deadline timer nilfs2: propagate directory read errors from nilfs_find_entry() erofs: fix lz4 inplace decompression mac80211: Fix NULL ptr deref for injected rate info RDMA/bnxt_re: Fix incorrect AVID type in WQE structure ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP ipv4: give an IPv4 dev to blackhole_netdev RDMA/bnxt_re: Return more meaningful error drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation macsec: don't increment counters for an unrelated SA net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit() net: systemport: fix potential memory leak in bcm_sysport_xmit() genetlink: hold RCU in genlmsg_mcast() smb: client: fix OOBs when building SMB2_IOCTL request usb: typec: altmode should keep reference to parent Bluetooth: bnep: fix wild-memory-access in proto_unregister arm64:uprobe fix the uprobe SWBP_INSN in big-endian arm64: probes: Fix uprobes for big-endian kernels KVM: s390: gaccess: Refactor gpa and length calculation KVM: s390: gaccess: Refactor access address range check KVM: s390: gaccess: Cleanup access to guest pages KVM: s390: gaccess: Check if guest address is in memslot drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA udf: fix uninit-value use in udf_get_fileshortad jfs: Fix sanity check in dbMount tracing: Consider the NULL character when validating the event length net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() be2net: fix potential memory leak in be_xmit() net: usb: usbnet: fix name regression net: sched: fix use-after-free in taprio_change() r8169: avoid unsolicited interrupts posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() ALSA: hda/realtek: Update default depop procedure drm/amd: Guard against bad data for ATIF ACPI method ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue nilfs2: fix kernel bug due to missing clearing of buffer delay flag ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event selinux: improve error checking in sel_write_load() arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning xfrm: validate new SA's prefixlen using SA family when sel.family is unset cgroup: Fix potential overflow issue when checking max_depth wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys mac80211: do drv_reconfig_complete() before restarting all mac80211: Add support to trigger sta disconnect on hardware restart wifi: iwlwifi: mvm: disconnect station vifs if recovery failed wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() dt-bindings: gpu: Convert Samsung Image Rotator to dt-schema gtp: simplify error handling code in 'gtp_encap_enable()' gtp: allow -1 to be specified as file description from userspace net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT bpf: Fix out-of-bounds write in trie_get_next_key() net: support ip generic csum processing in skb_csum_hwoffload_help net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension netfilter: nft_payload: sanitize offset and length before calling skb_checksum() drivers/misc: ti-st: Remove unneeded variable in st_tty_open firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() net: amd: mvme147: Fix probe banner message misc: sgi-gru: Don't disable preemption in GRU driver usbip: tools: Fix detach_port() invalid port error path usb: phy: Fix API devm_usb_put_phy() can not release the phy xhci: Fix Link TRB DMA in command ring stopped completion event Revert "driver core: Fix uevent_show() vs driver detach race" wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower wifi: ath10k: Fix memory leak in management tx wifi: iwlegacy: Clear stale interrupts before resuming device staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() nilfs2: fix potential deadlock with newly created symlinks riscv: Remove unused GENERATING_ASM_OFFSETS ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow nilfs2: fix kernel bug due to missing clearing of checked flag mm: shmem: fix data-race in shmem_getattr() Revert "drm/mipi-dsi: Set the fwnode for mipi_dsi_device" vt: prevent kernel-infoleak in con_font_get() mac80211: always have ieee80211_sta_restart() mm: krealloc: Fix MTE false alarm in __do_krealloc Linux 5.4.285 Change-Id: Ie1859b6122e2fdacf18a1fe83f792b855fd0e54c Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-11-09 11:29:17 +00:00
Olaf Hering	ac076cb0db	mount: handle OOM on mnt_warn_timestamp_expiry ... [ Upstream commit 4bcda1eaf184e308f07f9c61d3a535f9ce477ce8 ] If no page could be allocated, an error pointer was used as format string in pr_warn. Rearrange the code to return early in case of OOM. Also add a check for the return value of d_path. Fixes: f8b92ba67c ("mount: Add mount warning for impending timestamp expiry") Signed-off-by: Olaf Hering <olaf@aepfle.de> Link: https://lore.kernel.org/r/20240730085856.32385-1-olaf@aepfle.de [brauner: rewrite commit and commit message] Signed-off-by: Christian Brauner <brauner@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-11-08 16:20:26 +01:00
Andy Shevchenko	c6c1e1356d	fs/namespace: fnic: Switch to use %ptTd ... [ Upstream commit 74e60b8b2f0fe3702710e648a31725ee8224dbdf ] Use %ptTd instead of open-coded variant to print contents of time64_t type in human readable form. Signed-off-by: Andy Shevchenko <andriy.shevchenko@linux.intel.com> Signed-off-by: Christian Brauner (Microsoft) <brauner@kernel.org> Stable-dep-of: 4bcda1eaf184 ("mount: handle OOM on mnt_warn_timestamp_expiry") Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-11-08 16:20:26 +01:00
Anthony Iliopoulos	7e2e113f94	mount: warn only once about timestamp range expiration ... [ Upstream commit a128b054ce029554a4a52fc3abb8c1df8bafcaef ] Commit f8b92ba67c ("mount: Add mount warning for impending timestamp expiry") introduced a mount warning regarding filesystem timestamp limits, that is printed upon each writable mount or remount. This can result in a lot of unnecessary messages in the kernel log in setups where filesystems are being frequently remounted (or mounted multiple times). Avoid this by setting a superblock flag which indicates that the warning has been emitted at least once for any particular mount, as suggested in [1]. Link: https://lore.kernel.org/CAHk-=wim6VGnxQmjfK_tDg6fbHYKL4EFkmnTjVr9QnRqjDBAeA@mail.gmail.com/ [1] Link: https://lkml.kernel.org/r/20220119202934.26495-1-ailiop@suse.com Signed-off-by: Anthony Iliopoulos <ailiop@suse.com> Reviewed-by: Christoph Hellwig <hch@lst.de> Acked-by: Christian Brauner <christian.brauner@ubuntu.com> Reviewed-by: Darrick J. Wong <djwong@kernel.org> Cc: Alexander Viro <viro@zeniv.linux.org.uk> Cc: Deepa Dinamani <deepa.kernel@gmail.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Stable-dep-of: 4bcda1eaf184 ("mount: handle OOM on mnt_warn_timestamp_expiry") Signed-off-by: Sasha Levin <sashal@kernel.org>	2024-11-08 16:20:26 +01:00
Greg Kroah-Hartman	874997f95f	Linux 5.4.143 ... -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEE4n5dijQDou9mhzu83qZv95d3LNwFAmEnj2AACgkQ3qZv95d3 LNxNEQ//auFOSmgsMtI8LDmKlP/f22+FmICk8+IHeBMRBMDY0WGEEdsRZgcf4R7M hgyBn8ISmU5W0idpoxzVTiNxDJ0YVbVSIX12lZO6OHnwcv6hNW7iOW5TaGjd8EN+ fkh8MtAToBQrp4fFb1QkC11pYNMPiuvDNB2nW+F3ixfYLyC1EF4g2/qVUKy7s6rZ dbqDfuI3Q7R2opsIkpmsV7ClKGbJzsP7oo0H5EOQMpmOowhg3oJy8oYqMMTgij1T bJU8kujNElsK+/nbpVzJPrpprQH9eGP+hB5ZAv6s/FuJ6RmkoAczYQnX3HL6TfCS ymoyJ01gsmDic9RnG6qei5LkCwf5Td2SKjRZdqGWKTluWD1ZAwzUX8Ww6K+t5uWk PQPyCfU2wk2D3JjJWt0vTxl/GZGAkYbZpy5ISZFJhK7/j9/oTSrPWra7/BRu4K2I 2PK7XGjNyQxSguQqmG064Q0nYEOU03pR2H8tyG3iH0nBBd9p54D0Bg0D73I2h0az PoGhBo71m9SYCPP1zSXl+xLFyWGZZDUYCaU9KPlwkYCCcRUSQbfCKwrYHfEcHZgL 4QtYlpUi+/C0Ga7gAK9ierqCKSNTOpoVna618j97uqCYVIU8estLBqX4mMAQquVF R8+cy6L/aTBVw4Zwd0Jmt85GwBHlHahUGEq87+Qpw/laqjkBFcg= =SIVq -----END PGP SIGNATURE----- Merge 5.4.143 into android11-5.4-lts Changes in 5.4.143 ext4: fix EXT4_MAX_LOGICAL_BLOCK macro x86/fpu: Make init_fpstate correct with optimized XSAVE ath: Use safer key clearing with key cache entries ath9k: Clear key cache explicitly on disabling hardware ath: Export ath_hw_keysetmac() ath: Modify ath_key_delete() to not need full key entry ath9k: Postpone key cache entry deletion for TXQ frames reference it mtd: cfi_cmdset_0002: fix crash when erasing/writing AMD cards media: zr364xx: propagate errors from zr364xx_start_readpipe() media: zr364xx: fix memory leaks in probe() media: drivers/media/usb: fix memory leak in zr364xx_probe USB: core: Avoid WARNings for 0-length descriptor requests dmaengine: xilinx_dma: Fix read-after-free bug when terminating transfers dmaengine: usb-dmac: Fix PM reference leak in usb_dmac_probe() ARM: dts: am43x-epos-evm: Reduce i2c0 bus speed for tps65218 dmaengine: of-dma: router_xlate to return -EPROBE_DEFER if controller is not yet available scsi: megaraid_mm: Fix end of loop tests for list_for_each_entry() scsi: scsi_dh_rdac: Avoid crash during rdac_bus_attach() scsi: core: Avoid printing an error if target_alloc() returns -ENXIO scsi: core: Fix capacity set to zero after offlinining device ARM: dts: nomadik: Fix up interrupt controller node names net: usb: lan78xx: don't modify phy_device state concurrently drm/amd/display: Fix Dynamic bpp issue with 8K30 with Navi 1X Bluetooth: hidp: use correct wait queue when removing ctrl_wait iommu: Check if group is NULL before remove device cpufreq: armada-37xx: forbid cpufreq for 1.2 GHz variant dccp: add do-while-0 stubs for dccp_pr_debug macros virtio: Protect vqs list access vhost: Fix the calculation in vhost_overflow() bpf: Clear zext_dst of dead insns bnxt: don't lock the tx queue from napi poll bnxt: disable napi before canceling DIM net: 6pack: fix slab-out-of-bounds in decode_data ptp_pch: Restore dependency on PCI bnxt_en: Add missing DMA memory barriers vrf: Reset skb conntrack connection on VRF rcv virtio-net: support XDP when not more queues virtio-net: use NETIF_F_GRO_HW instead of NETIF_F_LRO net: qlcnic: add missed unlock in qlcnic_83xx_flash_read32 net: mdio-mux: Don't ignore memory allocation errors net: mdio-mux: Handle -EPROBE_DEFER correctly ovs: clear skb->tstamp in forwarding path i40e: Fix ATR queue selection iavf: Fix ping is lost after untrusted VF had tried to change MAC ovl: add splice file read write helper mmc: dw_mmc: Fix hang on data CRC error ALSA: hda - fix the 'Capture Switch' value change notifications tracing / histogram: Fix NULL pointer dereference on strcmp() on NULL event name slimbus: messaging: start transaction ids from 1 instead of zero slimbus: messaging: check for valid transaction id slimbus: ngd: reset dma setup during runtime pm ipack: tpci200: fix many double free issues in tpci200_pci_probe ipack: tpci200: fix memory leak in the tpci200_register btrfs: prevent rename2 from exchanging a subvol with a directory from different parents PCI: Increase D3 delay for AMD Renoir/Cezanne XHCI ASoC: intel: atom: Fix breakage for PCM buffer address setup mm, memcg: avoid stale protection values when cgroup is above protection mm: memcontrol: fix occasional OOMs due to proportional memory.low reclaim fs: warn about impending deprecation of mandatory locks netfilter: nft_exthdr: fix endianness of tcp option cast Linux 5.4.143 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I5220b773c51448c4b92f8b51dc002afe144a8499	2021-08-27 22:38:57 +02:00
Jeff Layton	e4fd994f02	fs: warn about impending deprecation of mandatory locks ... [ Upstream commit fdd92b64d15bc4aec973caa25899afd782402e68 ] We've had CONFIG_MANDATORY_FILE_LOCKING since 2015 and a lot of distros have disabled it. Warn the stragglers that still use "-o mand" that we'll be dropping support for that mount option. Cc: stable@vger.kernel.org Signed-off-by: Jeff Layton <jlayton@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2021-08-26 08:36:22 -04:00
Greg Kroah-Hartman	7116e6b9d8	This is the 5.4.141 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmEY9Z4ACgkQONu9yGCS aT6Zcw/9Hw/LCgboD9SnkaHWx1vWwXilz4uqTp6+qfCUZmtjWnvORA/wUzAqhcwu 1pO3aveUVLS4FyGQbn4vdMs5Zv7ZkDHchJ+FnloLAPnIUI8xce1YxKkwT8ysvvOF jFf2vPOr7PqCxTlGZ3MitJPhl4mkVghlwq6rk/EwFuqG8JRUiwL2jeHVX24VywJI E+XKOMJwXHdB+VWmmP5yvqDcPcQwYVAB01BBMWYEHFa4WTrRwICsQz6Y1319YAFT Sb0m2g/Pwv3YEzdgtCCTrB8FOr2Bjum/KoAZd+v9tQuFkZSwp14XhAlCWlYBSHUE AWoVc9w6KYNt4cCdem7P8oZWqAnkR9pLTwlg1XWZCQCTzqIp8YfsjTMONyKf/94O fHVTHTh7x0f2taGhAmzo52dIRBUBA8bGQ8F/t1XUc51RWn9CEBc230ich8BQtH1t hm3X9eB1CM9FRg4imIf9RW5X8+gkTSYNfrnpBh7IEKXIPiiKpDLyO3MN4IuFLBzN fRPhQacTxCq8QgO6eiS8M5cafglLL3U7GsE/qyiVQjVeoGNnLZINamdfmDLsgfGH f67pTwVNKNcoT1XJf1MqgDM2IoAcZcQqLtNhedva9cC74SiHv+nf28eDWwJJ5u10 fdNJowrZdF828BCuee6UYUsOXJ6r8I6UybLuzpZzpvBvvMiYZH0= =edfG -----END PGP SIGNATURE----- Merge 5.4.141 into android11-5.4-lts Changes in 5.4.141 KVM: SVM: Fix off-by-one indexing when nullifying last used SEV VMCB tee: Correct inappropriate usage of TEE_SHM_DMA_BUF flag media: v4l2-mem2mem: always consider OUTPUT queue during poll tracing: Reject string operand in the histogram expression usb: dwc3: Stop active transfers before halting the controller usb: dwc3: gadget: Allow runtime suspend if UDC unbinded usb: dwc3: gadget: Restart DWC3 gadget when enabling pullup usb: dwc3: gadget: Prevent EP queuing while stopping transfers usb: dwc3: gadget: Clear DEP flags after stop transfers in ep disable usb: dwc3: gadget: Disable gadget IRQ during pullup disable usb: dwc3: gadget: Avoid runtime resume if disabling pullup KVM: X86: MMU: Use the correct inherited permissions to get shadow page USB:ehci:fix Kunpeng920 ehci hardware problem ALSA: hda: Add quirk for ASUS Flow x13 ppp: Fix generating ppp unit id when ifname is not specified ovl: prevent private clone if bind mount is not allowed btrfs: make qgroup_free_reserved_data take btrfs_inode btrfs: make btrfs_qgroup_reserve_data take btrfs_inode btrfs: qgroup: allow to unreserve range without releasing other ranges btrfs: qgroup: try to flush qgroup space when we get -EDQUOT btrfs: transaction: Cleanup unused TRANS_STATE_BLOCKED btrfs: qgroup: remove ASYNC_COMMIT mechanism in favor of reserve retry-after-EDQUOT btrfs: fix lockdep splat when enabling and disabling qgroups net: xilinx_emaclite: Do not print real IOMEM pointer btrfs: qgroup: don't commit transaction when we already hold the handle btrfs: export and rename qgroup_reserve_meta btrfs: don't flush from btrfs_delayed_inode_reserve_metadata Linux 5.4.141 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I859f5efd0857ba315a6f4d1a8928b407d2c8ca28	2021-08-15 14:07:53 +02:00
Miklos Szeredi	812f39ed5b	ovl: prevent private clone if bind mount is not allowed ... commit 427215d85e8d1476da1a86b8d67aceb485eb3631 upstream. Add the following checks from __do_loopback() to clone_private_mount() as well: - verify that the mount is in the current namespace - verify that there are no locked children Reported-by: Alois Wohlschlager <alois1@gmx-topmail.de> Fixes: c771d683a6 ("vfs: introduce clone_private_mount()") Cc: <stable@vger.kernel.org> # v3.18 Signed-off-by: Miklos Szeredi <mszeredi@redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-08-15 13:08:04 +02:00
Greg Kroah-Hartman	b3b3b35a82	This is the 5.4.87 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAl/1wNYACgkQONu9yGCS aT64cxAAwwt2H911zFagJCVDfLKXJ4da062n0YcJe3saGSg+mdEkSGYEDxjV6jjM jTzK1W5C49sQ9kzIF43YnYgdULwcXJ76G/uqFjFOlmbRzAKAYgs/3KXesa7S4cp+ LT0fiR7uyViOw1zn4yBIeSnax8uRwT4vR1vV++ILC/7vL6hcnOBOPLxGzUKYlvJQ TD8ZQjeTXe5E7IhE+ztuhJQT+hZr1VERTjoktcfmlUps94uITeKdKYoCCZQ/zYIL IS7OgnAw5RNERHa1JUZruaGFvJORTu8wAfVtgD1VgRUZAe2ziWH6aCeDPaWaLzS5 3U7Rc3Fyf0CRYrhe7mI1J864GIEUAe9V34sGQzaU/ap4SWpLvHbu12ePlb+nLNKF MZmGEd0eZuKKDSx9dlcx8hbfVg99YpI5oOeDvfCJpYx/uxNzzJhO5wkkZxweiN9s XTMUhhkTNkhgYdzn4Y8G9++LLAZpwOImSh3NkntoH+mSVlC+jVBbskz6PdywDjQR ROVpW26t5Ee6uDTrjci5cffbfje2y0r9km5/sbRWUz2YGsqYfAI3FtbH5isNUPOm Q6ucTd+xvmApfp9bn+XYLnbTQEGAD6mAgSmO11CIDsUJUvOTD/2cv861kATJqhXm 01rHgohIG604vERppYC3WWFjh0cdevBvwSOpDi1LIdlgbEF6QY0= =q0Fm -----END PGP SIGNATURE----- Merge 5.4.87 into android11-5.4-lts Changes in 5.4.87 net/sched: sch_taprio: reset child qdiscs before freeing them md/raid10: initialize r10_bio->read_slot before use. thermal/drivers/cpufreq_cooling: Update cpufreq_state only if state has changed ext4: prevent creating duplicate encrypted filenames ubifs: prevent creating duplicate encrypted filenames f2fs: prevent creating duplicate encrypted filenames fscrypt: add fscrypt_is_nokey_name() fscrypt: remove kernel-internal constants from UAPI header vfio/pci: Move dummy_resources_list init in vfio_pci_probe() btrfs: fix race when defragmenting leads to unnecessary IO ext4: don't remount read-only with errors=continue on reboot KVM: x86: avoid incorrect writes to host MSR_IA32_SPEC_CTRL KVM: SVM: relax conditions for allowing MSR_IA32_SPEC_CTRL accesses KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits powerpc/bitops: Fix possible undefined behaviour with fls() and fls64() jffs2: Allow setting rp_size to zero during remounting jffs2: Fix NULL pointer dereference in rp_size fs option parsing scsi: block: Fix a race in the runtime power management code uapi: move constants from <linux/kernel.h> to <linux/const.h> tools headers UAPI: Sync linux/const.h with the kernel headers null_blk: Fix zone size initialization of: fix linker-section match-table corruption cgroup: Fix memory leak when parsing multiple source parameters scsi: cxgb4i: Fix TLS dependency Bluetooth: hci_h5: close serdev device and free hu in h5_close reiserfs: add check for an invalid ih_entry_count misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() media: gp8psk: initialize stats at power control logic f2fs: fix shift-out-of-bounds in sanity_check_raw_super() ALSA: seq: Use bool for snd_seq_queue internal flags ALSA: rawmidi: Access runtime->avail always in spinlock bfs: don't use WARNING: string when it's just info. fcntl: Fix potential deadlock in send_sig{io, urg}() rtc: sun6i: Fix memleak in sun6i_rtc_clk_init module: set MODULE_STATE_GOING state when a module fails to load quota: Don't overflow quota file offsets rtc: pl031: fix resource leak in pl031_probe powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe() i3c master: fix missing destroy_workqueue() on error in i3c_master_register NFSv4: Fix a pNFS layout related use-after-free race when freeing the inode f2fs: avoid race condition for shrinker count module: delay kobject uevent until after module init call fs/namespace.c: WARN if mnt_count has become negative um: ubd: Submit all data segments atomically tick/sched: Remove bogus boot "safety" check ALSA: pcm: Clear the full allocated memory at hw_params dm verity: skip verity work if I/O error when system is shutting down Linux 5.4.87 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> [EB: fixed fs/crypto/ merge resolution] Signed-off-by: Eric Biggers <ebiggers@google.com> Change-Id: I383fa03a6d3c025d167ab57faebf0d3a59919a00	2021-01-06 09:12:49 -08:00
Eric Biggers	d32747bb68	fs/namespace.c: WARN if mnt_count has become negative ... [ Upstream commit edf7ddbf1c5eb98b720b063b73e20e8a4a1ce673 ] Missing calls to mntget() (or equivalently, too many calls to mntput()) are hard to detect because mntput() delays freeing mounts using task_work_add(), then again using call_rcu(). As a result, mnt_count can often be decremented to -1 without getting a KASAN use-after-free report. Such cases are still bugs though, and they point to real use-after-frees being possible. For an example of this, see the bug fixed by commit 1b0b9cc8d3 ("vfs: fsmount: add missing mntget()"), discussed at https://lkml.kernel.org/linux-fsdevel/20190605135401.GB30925@xxxxxxxxxxxxxxxxxxxxxxxxx/T/#u. This bug *should* have been trivial to find. But actually, it wasn't found until syzkaller happened to use fchdir() to manipulate the reference count just right for the bug to be noticeable. Address this by making mntput_no_expire() issue a WARN if mnt_count has become negative. Suggested-by: Miklos Szeredi <miklos@szeredi.hu> Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2021-01-06 14:48:40 +01:00
Greg Kroah-Hartman	ad5859c6ae	Linux 5.4-rc8 ... -----BEGIN PGP SIGNATURE----- iQFSBAABCAA8FiEEq68RxlopcLEwq+PEeb4+QwBBGIYFAl3RzgkeHHRvcnZhbGRz QGxpbnV4LWZvdW5kYXRpb24ub3JnAAoJEHm+PkMAQRiGN18H/0JZbfIpy8/4Irol 0va7Aj2fBi1a5oxfqYsMKN0u3GKbN3OV9tQ+7w1eBNGvL72TGadgVTzTY+Im7A9U UjboAc7jDPCG+YhIwXFufMiIAq5jDIj6h0LDas7ALsMfsnI/RhTwgNtLTAkyI3dH YV/6ljFULwueJHCxzmrYbd1x39PScj3kCNL2pOe6On7rXMKOemY/nbbYYISxY30E GMgKApSS+li7VuSqgrKoq5Qaox26LyR2wrXB1ij4pqEJ9xgbnKRLdHuvXZnE+/5p 46EMirt+yeSkltW3d2/9MoCHaA76ESzWMMDijLx7tPgoTc3RB3/3ZLsm3rYVH+cR cRlNNSk= =0+Cg -----END PGP SIGNATURE----- Merge 5.4-rc8 into android-mainline Linux 5.4-rc8 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I1f55e5d34dc78ddb064910ce1e1b7a7b5b39aaba	2019-11-18 08:31:11 +01:00
Eric Biggers	0ecee66990	fs/namespace.c: fix use-after-free of mount in mnt_warn_timestamp_expiry() ... After do_add_mount() returns success, the caller doesn't hold a reference to the 'struct mount' anymore. So it's invalid to access it in mnt_warn_timestamp_expiry(). Fix it by calling mnt_warn_timestamp_expiry() before do_add_mount() rather than after, and adjusting the warning message accordingly. Reported-by: syzbot+da4f525235510683d855@syzkaller.appspotmail.com Fixes: f8b92ba67c ("mount: Add mount warning for impending timestamp expiry") Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>	2019-10-16 23:15:09 -04:00
Greg Kroah-Hartman	94139142d9	Merge 5.4-rc1-prelrease into android-mainline ... To make the 5.4-rc1 merge easier, merge at a prerelease point in time before the final release happens. Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: If613d657fd0abf9910c5bf3435a745f01b89765e	2019-10-02 17:58:47 +02:00
Linus Torvalds	cbafe18c71	Merge branch 'akpm' (patches from Andrew) ... Merge more updates from Andrew Morton: - almost all of the rest of -mm - various other subsystems Subsystems affected by this patch series: memcg, misc, core-kernel, lib, checkpatch, reiserfs, fat, fork, cpumask, kexec, uaccess, kconfig, kgdb, bug, ipc, lzo, kasan, madvise, cleanups, pagemap * emailed patches from Andrew Morton <akpm@linux-foundation.org>: (77 commits) arch/sparc/include/asm/pgtable_64.h: fix build mm: treewide: clarify pgtable_page_{ctor,dtor}() naming ntfs: remove (un)?likely() from IS_ERR() conditions IB/hfi1: remove unlikely() from IS_ERR*() condition xfs: remove unlikely() from WARN_ON() condition wimax/i2400m: remove unlikely() from WARN*() condition fs: remove unlikely() from WARN_ON() condition xen/events: remove unlikely() from WARN() condition checkpatch: check for nested (un)?likely() calls hexagon: drop empty and unused free_initrd_mem mm: factor out common parts between MADV_COLD and MADV_PAGEOUT mm: introduce MADV_PAGEOUT mm: change PAGEREF_RECLAIM_CLEAN with PAGE_REFRECLAIM mm: introduce MADV_COLD mm: untag user pointers in mmap/munmap/mremap/brk vfio/type1: untag user pointers in vaddr_get_pfn tee/shm: untag user pointers in tee_shm_register media/v4l2-core: untag user pointers in videobuf_dma_contig_user_get drm/radeon: untag user pointers in radeon_gem_userptr_ioctl drm/amdgpu: untag user pointers ...	2019-09-26 10:29:42 -07:00
Andrey Konovalov	ed8a66b832	fs/namespace: untag user pointers in copy_mount_options ... This patch is a part of a series that extends kernel ABI to allow to pass tagged user pointers (with the top byte set to something else other than 0x00) as syscall arguments. In copy_mount_options a user address is being subtracted from TASK_SIZE. If the address is lower than TASK_SIZE, the size is calculated to not allow the exact_copy_from_user() call to cross TASK_SIZE boundary. However if the address is tagged, then the size will be calculated incorrectly. Untag the address before subtracting. Link: http://lkml.kernel.org/r/1de225e4a54204bfd7f25dac2635e31aa4aa1d90.1563904656.git.andreyknvl@google.com Signed-off-by: Andrey Konovalov <andreyknvl@google.com> Reviewed-by: Khalid Aziz <khalid.aziz@oracle.com> Reviewed-by: Vincenzo Frascino <vincenzo.frascino@arm.com> Reviewed-by: Kees Cook <keescook@chromium.org> Reviewed-by: Catalin Marinas <catalin.marinas@arm.com> Cc: Al Viro <viro@zeniv.linux.org.uk> Cc: Dave Hansen <dave.hansen@intel.com> Cc: Eric Auger <eric.auger@redhat.com> Cc: Felix Kuehling <Felix.Kuehling@amd.com> Cc: Jens Wiklander <jens.wiklander@linaro.org> Cc: Mauro Carvalho Chehab <mchehab+samsung@kernel.org> Cc: Mike Rapoport <rppt@linux.ibm.com> Cc: Will Deacon <will@kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>	2019-09-25 17:51:41 -07:00
Linus Torvalds	7b1373dd6e	fuse update for 5.4 ... -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQSQHSd0lITzzeNWNm3h3BK/laaZPAUCXYod6wAKCRDh3BK/laaZ PG3fAP9WXuvUeYh3X7ThQPa2D33VCIMJRd6t+1TVSSc/H8P3dAD/ehN5HIWjnmzz iZFc3zDtO9UCJUe23IZomblxOQbu6Qk= =I0S2 -----END PGP SIGNATURE----- Merge tag 'fuse-update-5.4' of git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse Pull fuse updates from Miklos Szeredi: - Continue separating the transport (user/kernel communication) and the filesystem layers of fuse. Getting rid of most layering violations will allow for easier cleanup and optimization later on. - Prepare for the addition of the virtio-fs filesystem. The actual filesystem will be introduced by a separate pull request. - Convert to new mount API. - Various fixes, optimizations and cleanups. * tag 'fuse-update-5.4' of git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse: (55 commits) fuse: Make fuse_args_to_req static fuse: fix memleak in cuse_channel_open fuse: fix beyond-end-of-page access in fuse_parse_cache() fuse: unexport fuse_put_request fuse: kmemcg account fs data fuse: on 64-bit store time in d_fsdata directly fuse: fix missing unlock_page in fuse_writepage() fuse: reserve byteswapped init opcodes fuse: allow skipping control interface and forced unmount fuse: dissociate DESTROY from fuseblk fuse: delete dentry if timeout is zero fuse: separate fuse device allocation and installation in fuse_conn fuse: add fuse_iqueue_ops callbacks fuse: extract fuse_fill_super_common() fuse: export fuse_dequeue_forget() function fuse: export fuse_get_unique() fuse: export fuse_send_init_request() fuse: export fuse_len_args() fuse: export fuse_end_request() fuse: fix request limit ...	2019-09-25 09:55:59 -07:00
Greg Kroah-Hartman	896be8f44d	Merge 5.4-rc1-prereleae into android-mainline ... To make the 5.4-rc1 merge easier, merge at a prerelease point in time before the final release happens. Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I29b683c837ed1a3324644dbf9bf863f30740cd0b	2019-09-23 14:14:08 +02:00
Greg Kroah-Hartman	bfa0399bc8	Merge Linus's 5.4-rc1-prerelease branch into android-mainline ... This merges Linus's tree as of commit b41dae061b ("Merge tag 'xfs-5.4-merge-7' of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux") into android-mainline. This "early" merge makes it easier to test and handle merge conflicts instead of having to wait until the "end" of the merge window and handle all 10000+ commits at once. Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I6bebf55e5e2353f814e3c87f5033607b1ae5d812	2019-09-20 16:07:54 -07:00
Linus Torvalds	cfb82e1df8	y2038: add inode timestamp clamping ... This series from Deepa Dinamani adds a per-superblock minimum/maximum timestamp limit for a file system, and clamps timestamps as they are written, to avoid random behavior from integer overflow as well as having different time stamps on disk vs in memory. At mount time, a warning is now printed for any file system that can represent current timestamps but not future timestamps more than 30 years into the future, similar to the arbitrary 30 year limit that was added to settimeofday(). This was picked as a compromise to warn users to migrate to other file systems (e.g. ext4 instead of ext3) when they need the file system to survive beyond 2038 (or similar limits in other file systems), but not get in the way of normal usage. Signed-off-by: Arnd Bergmann <arnd@arndb.de> -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAABCAAGBQJdcs20AAoJEJpsee/mABjZaOwQALl3lBEhg0aV6a0ZZ1uYehtd vcjZ6OpehfiOAxYJu0wfLPATo4T0FuBxZKz3+trkJDICcxyc68AJ2wijwInIQnZW MrSKnPyv/fSGp8Jr5w/0CLdp6yT6Dh7z4j2UxhwusR1bQh4cCYSswDg29/nmxgKp Nu8m7jMvJQ2Q0r4Zy0sT/MaycUcSH5yvpyTcsYFixGOz1niNy91ISs1+aq6HZ3i3 +cuYTUy13y40iNUHzFBTcJItBnikwZOQ/zjNfJFXZ3bVEUPg8ZTLPYQ0OZz+pM0Z AlXCKghb2EOKgq729LtA6oaY+Nom/1Gm1p80q3G+nGRVOqRgC+dfAVPZQoiER5Y1 zNPEDf2Sf7J9xktvfC+Qqa9QEUPLKs22ZIccG+vYBW65sS8IAiEDH3LAt444GGls yB/Cx/Qw7BftpR5Om27Mhm5jDQzr43iTkZaPQWq7ydJXpfxnjlg9L19yS1omDFyV hdbBXY6FikUICPKUW6I49z5BhjL+kmK9M2DVljImmdKNDTrfr0xY5M/EWjJZ7X+I rnSe9qTY+iQ5/AXANn5wfj1Y6L5IxkmdWI/zDIbKhYMZLCqqFLd3mJERbs+CMDJq qNrYyFPReFrg50oSduBPAByMTR4x9hus7iIC7r77kpoz5i60DPmIJoTfFm3844Gv sBEyvWV08CpE9mSzXuv6 =em9y -----END PGP SIGNATURE----- Merge tag 'y2038-vfs' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground Pull y2038 vfs updates from Arnd Bergmann: "Add inode timestamp clamping. This series from Deepa Dinamani adds a per-superblock minimum/maximum timestamp limit for a file system, and clamps timestamps as they are written, to avoid random behavior from integer overflow as well as having different time stamps on disk vs in memory. At mount time, a warning is now printed for any file system that can represent current timestamps but not future timestamps more than 30 years into the future, similar to the arbitrary 30 year limit that was added to settimeofday(). This was picked as a compromise to warn users to migrate to other file systems (e.g. ext4 instead of ext3) when they need the file system to survive beyond 2038 (or similar limits in other file systems), but not get in the way of normal usage" * tag 'y2038-vfs' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground: ext4: Reduce ext4 timestamp warnings isofs: Initialize filesystem timestamp ranges pstore: fs superblock limits fs: omfs: Initialize filesystem timestamp ranges fs: hpfs: Initialize filesystem timestamp ranges fs: ceph: Initialize filesystem timestamp ranges fs: sysv: Initialize filesystem timestamp ranges fs: affs: Initialize filesystem timestamp ranges fs: fat: Initialize filesystem timestamp ranges fs: cifs: Initialize filesystem timestamp ranges fs: nfs: Initialize filesystem timestamp ranges ext4: Initialize timestamps limits 9p: Fill min and max timestamps in sb fs: Fill in max and min timestamps in superblock utimes: Clamp the timestamps before update mount: Add mount warning for impending timestamp expiry timestamp_truncate: Replace users of timespec64_trunc vfs: Add timestamp_truncate() api vfs: Add file timestamp range support	2019-09-19 09:42:37 -07:00
Linus Torvalds	d013cc800a	File locking changes for v5.4 ... -----BEGIN PGP SIGNATURE----- iQJHBAABCAAxFiEES8DXskRxsqGE6vXTAA5oQRlWghUFAl1/Zn0THGpsYXl0b25A a2VybmVsLm9yZwAKCRAADmhBGVaCFU5cD/9YDxYpQhOS0DvZcjBJwdYf7Wdck5gP plbyseJPLmjsILmZzYQpZB/vho0mlMMXgcmQ824x+SYPRN89+0kKDmM7Zio+4Rpo QpsQHda/aQfPt0LWO387tYwIHAvvibKPbI+WTFBvA2ARtfqhFUESIQtoshcRQsSa EolWDOpFO3AVuaQxenRp8Eb3y2a+X4v6mBRrhFFwNJGlqGHgkwTAor3upVgQXZYW 4ZQ25anwF5JIySq3K3dG5W1I2iPPAoTIPzfJBMgq46ZINgwxNMgLBc6KKckG6rvW LAOWxa7h3A/ac8OYzxqZ0M8Jm6Alshgy+uNvxngPAdyxJQzlYkw1wMVG4gRfEzdP 642P9gEjtBwW7aBydZ2hkkH7BQNlBrs8zpsiQK2aKXbfmu8/LGiXmpaa0yTPqX0r CswLK3aqfCP4wFfmb/Xa4vCa6SIPWu2J7XaCDgHo+LABbzfxtEoFQgQJX5+Ph3D1 7/CXVAfCYeLZ0Lf1XaFURib/uh5ll9WebXhQbzIGvAWePlZQEqT8jB7X8D45dCRB vRHNmT5GbG0Hmtw5q+woYyje1wuWkQbAzGRLdc+2byc7LehT4gFRt++4IMUATg9z y8B3pJSWJ0au9+SK+ymJrnX/+aV4n5LzCSLYJ+DD7g8lgeo/US1iTbP8lQqY3pnb 6LF2WGZQGlf36w== =63t2 -----END PGP SIGNATURE----- Merge tag 'filelock-v5.4-1' of git://git.kernel.org/pub/scm/linux/kernel/git/jlayton/linux Pull file locking updates from Jeff Layton: "Just a couple of minor bugfixes, a revision to a tracepoint to account for some earlier changes to the internals, and a patch to add a pr_warn message when someone tries to mount a filesystem with '-o mand' on a kernel that has that support disabled" * tag 'filelock-v5.4-1' of git://git.kernel.org/pub/scm/linux/kernel/git/jlayton/linux: locks: fix a memory leak bug in __break_lease() locks: print a warning when mount fails due to lack of "mand" support locks: Fix procfs output for file leases locks: revise generic_add_lease tracepoint	2019-09-18 13:41:01 -07:00
Linus Torvalds	53e5e7a7a7	Merge branch 'work.namei' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs ... Pull vfs namei updates from Al Viro: "Pathwalk-related stuff" [ Audit-related cleanups, misc simplifications, and easier to follow nd->root refcounts - Linus ] * 'work.namei' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs: devpts_pty_kill(): don't bother with d_delete() infiniband: don't bother with d_delete() hypfs: don't bother with d_delete() fs/namei.c: keep track of nd->root refcount status fs/namei.c: new helper - legitimize_root() kill the last users of user_{path,lpath,path_dir}() namei.h: get the comments on LOOKUP_... in sync with reality kill LOOKUP_NO_EVAL, don't bother including namei.h from audit.h audit_inode(): switch to passing AUDIT_INODE_... filename_mountpoint(): make LOOKUP_NO_EVAL unconditional there filename_lookup(): audit_inode() argument is always 0	2019-09-18 13:03:01 -07:00
David Howells	c7eb686963	vfs: subtype handling moved to fuse ... The unused vfs code can be removed. Don't pass empty subtype (same as if ->parse callback isn't called). The bits that are left involve determining whether it's permitted to split the filesystem type string passed in to mount(2). Consequently, this means that we cannot get rid of the FS_HAS_SUBTYPE flag unless we define that a type string with a dot in it always indicates a subtype specification. Signed-off-by: David Howells <dhowells@redhat.com> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>	2019-09-06 21:28:49 +02:00
Al Viro	ce6595a28a	kill the last users of user_{path,lpath,path_dir}() ... old wrappers with few callers remaining; put them out of their misery... Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>	2019-08-30 21:30:13 -04:00
Deepa Dinamani	f8b92ba67c	mount: Add mount warning for impending timestamp expiry ... The warning reuses the uptime max of 30 years used by settimeofday(). Note that the warning is only emitted for writable filesystem mounts through the mount syscall. Automounts do not have the same warning. Print out the warning in human readable format using the struct tm. After discussion with Arnd Bergmann, we chose to print only the year number. The raw s_time_max is also displayed, and the user can easily decode it e.g. "date -u -d @$((0x7fffffff))". We did not want to consolidate struct rtc_tm and struct tm just to print the date using a format specifier as part of this series. Given that the rtc_tm is not compiled on all architectures, this is not a trivial patch. This can be added in the future. Signed-off-by: Deepa Dinamani <deepa.kernel@gmail.com> Acked-by: Jeff Layton <jlayton@kernel.org>	2019-08-30 07:27:17 -07:00
Jeff Layton	df2474a22c	locks: print a warning when mount fails due to lack of "mand" support ... Since 9e8925b67a ("locks: Allow disabling mandatory locking at compile time"), attempts to mount filesystems with "-o mand" will fail. Unfortunately, there is no other indiciation of the reason for the failure. Change how the function is defined for better readability. When CONFIG_MANDATORY_FILE_LOCKING is disabled, printk a warning when someone attempts to mount with -o mand. Also, add a blurb to the mandatory-locking.txt file to explain about the "mand" option, and the behavior one should expect when it is disabled. Reported-by: Jan Kara <jack@suse.cz> Reviewed-by: Jan Kara <jack@suse.cz> Signed-off-by: Jeff Layton <jlayton@kernel.org>	2019-08-16 12:13:48 -04:00
Greg Kroah-Hartman	bea0791583	Linux 5.3-rc2 ... -----BEGIN PGP SIGNATURE----- iQFSBAABCAA8FiEEq68RxlopcLEwq+PEeb4+QwBBGIYFAl09+8IeHHRvcnZhbGRz QGxpbnV4LWZvdW5kYXRpb24ub3JnAAoJEHm+PkMAQRiGMtgH/3yxnVbzgPatWSd9 w5ahpB+nQ2sludZQXcqmychDsNoGlhxmSxxufxUJ6OL7/lOnfjb4Bc3icNltVlCk s32YyOH7Z/f+zGBE2IkCUK0ttr5bDdENmwJUOjoB39KsPXNK1y46x83QLeorKvBA kOyPtjhgy0nL2UaiM0HKuzMoypslKqwaw4ptXzHQBUkib+WdxVGYLQrTjflkpUMl 71EYwNnVgKwYRuvnMATB5bSgQCASInuF5eHJv9N7XbnBjJ9yVZNARvWW1sX4gNVe vCET+mCRWsMD80Sdnt9RJ8Nt2AEf0dgk2fAVwKqX58vuMIXlD27dayIYkVmJojE0 YuAvnAU= =X832 -----END PGP SIGNATURE----- Merge 5.3-rc2 into android-mainline Linux 5.3-rc2 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I4d36fd27ccc8cd773ba1b97dc3bd382e99a4dd7a	2019-07-29 08:40:17 +02:00
Al Viro	19a1c4092e	fix the struct mount leak in umount_tree() ... We need to drop everything we remove from the tree, whether mnt_has_parent() is true or not. Usually the bug manifests as a slow memory leak (leaked struct mount for initramfs); it becomes much more visible in mount_subtree() users, such as btrfs. There we leak a struct mount for btrfs superblock being mounted, which prevents fs shutdown on subsequent umount. Fixes: 56cbb429d9 ("switch the remnants of releasing the mountpoint away from fs_pin") Reported-by: Nikolay Borisov <nborisov@suse.com> Tested-by: Nikolay Borisov <nborisov@suse.com> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>	2019-07-26 07:59:06 -04:00
Greg Kroah-Hartman	37766c2946	Linus 5.3-rc1 ... -----BEGIN PGP SIGNATURE----- iQFSBAABCAA8FiEEq68RxlopcLEwq+PEeb4+QwBBGIYFAl0006weHHRvcnZhbGRz QGxpbnV4LWZvdW5kYXRpb24ub3JnAAoJEHm+PkMAQRiGaDUIAJ4oTyVWpMRZkfG6 vVY8qVMU3zlzEqRiyLYjkXoe/mGpuU/UVTyyStllxZ+Gg9da0mGwlugScKriPJof 4KRUDDTGX5DrfEOo+0brKvM+PYh9uGViPgKXzyv7i6BrnX2z3JdBR4bKNuEYlAJ9 N93Qg7v05SBHIq2Gfp3klrdWbsTTW2EaDTLbcgifXLnfKyFr47kwsmXAHPlTFP0p dYsZHHmf14Y9n1+ToZeVINgjQFr6mFn6ygY/PqTnd6vCgEEfP9eENJ4BZCtN1ZL/ V0BO9MyJ5iZV0AfwSEKydk+kDEvO16TG/nyDrECVuur7AXsBx18ZplVc787f6GK+ dyCQJ3U= =XLAF -----END PGP SIGNATURE----- Merge 5.3.0-rc1 into android-mainline Linus 5.3-rc1 release Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ic171e37d4c21ffa495240c5538852bbb5a9dcce8	2019-07-23 16:21:59 -07:00
Alistair Delva	cbfbd9e932	ANDROID: mnt: Fix null pointer dereference ... Fix "ANDROID: mnt: Add filesystem private data to mount points" to only call update_mnt_data() if the filesystem provides the function. This avoids a null pointer dereference in do_mount(). Reported-by: youling 257 <youling257@gmail.com> Signed-off-by: Alistair Delva <adelva@google.com> Signed-off-by: Daniel Rosenberg <drosen@google.com> Change-Id: I6aedaa89536ae85e6bc29093f38934c672c8fe42	2019-07-22 17:59:07 -07:00
Al Viro	39145f5f0c	filename_mountpoint(): make LOOKUP_NO_EVAL unconditional there ... user_path_mountpoint_at() always gets it and the reasons to have it there (i.e. in umount(2)) apply to kern_path_mountpoint() callers as well. Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>	2019-07-21 18:24:45 -04:00
Linus Torvalds	18253e034d	Merge branch 'work.dcache2' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs ... Pull dcache and mountpoint updates from Al Viro: "Saner handling of refcounts to mountpoints. Transfer the counting reference from struct mount ->mnt_mountpoint over to struct mountpoint ->m_dentry. That allows us to get rid of the convoluted games with ordering of mount shutdowns. The cost is in teaching shrink_dcache_{parent,for_umount} to cope with mixed-filesystem shrink lists, which we'll also need for the Slab Movable Objects patchset" * 'work.dcache2' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs: switch the remnants of releasing the mountpoint away from fs_pin get rid of detach_mnt() make struct mountpoint bear the dentry reference to mountpoint, not struct mount Teach shrink_dcache_parent() to cope with mixed-filesystem shrink lists fs/namespace.c: shift put_mountpoint() to callers of unhash_mnt() __detach_mounts(): lookup_mountpoint() can't return ERR_PTR() anymore nfs: dget_parent() never returns NULL ceph: don't open-code the check for dead lockref	2019-07-20 09:15:51 -07:00
Daniel Rosenberg	8e31748d2c	ANDROID: mnt: Add filesystem private data to mount points ... This starts to add private data associated directly to mount points. The intent is to give filesystems a sense of where they have come from, as a means of letting a filesystem take different actions based on this information. Bug: 62094374 Bug: 120446149 Bug: 122428178 Change-Id: Ie769d7b3bb2f5972afe05c1bf16cf88c91647ab2 Signed-off-by: Daniel Rosenberg <drosen@google.com> [astrachan: Folded 89a54ed3bf68 ("ANDROID: mnt: Fix next_descendent") into this patch] [drosen: Folded 138993ea820 ("Android: mnt: Propagate remount correctly") into this patch, integrated fs_context things Now has update_mnt_data instead of needing remount2 Signed-off-by: Alistair Strachan <astrachan@google.com>	2019-07-19 12:39:18 -07:00
Linus Torvalds	933a90bf4f	Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs ... Pull vfs mount updates from Al Viro: "The first part of mount updates. Convert filesystems to use the new mount API" * 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs: (63 commits) mnt_init(): call shmem_init() unconditionally constify ksys_mount() string arguments don't bother with registering rootfs init_rootfs(): don't bother with init_ramfs_fs() vfs: Convert smackfs to use the new mount API vfs: Convert selinuxfs to use the new mount API vfs: Convert securityfs to use the new mount API vfs: Convert apparmorfs to use the new mount API vfs: Convert openpromfs to use the new mount API vfs: Convert xenfs to use the new mount API vfs: Convert gadgetfs to use the new mount API vfs: Convert oprofilefs to use the new mount API vfs: Convert ibmasmfs to use the new mount API vfs: Convert qib_fs/ipathfs to use the new mount API vfs: Convert efivarfs to use the new mount API vfs: Convert configfs to use the new mount API vfs: Convert binfmt_misc to use the new mount API convenience helper: get_tree_single() convenience helper get_tree_nodev() vfs: Kill sget_userns() ...	2019-07-19 10:42:02 -07:00
Al Viro	56cbb429d9	switch the remnants of releasing the mountpoint away from fs_pin ... We used to need rather convoluted ordering trickery to guarantee that dput() of ex-mountpoints happens before the final mntput() of the same. Since we don't need that anymore, there's no point playing with fs_pin for that. Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>	2019-07-16 22:52:37 -04:00
Al Viro	2763d11912	get rid of detach_mnt() ... Lift getting the original mount (dentry is actually not needed at all) of the mountpoint into the callers - to do_move_mount() and pivot_root() level. That simplifies the cleanup in those and allows to get saner arguments for attach_mnt_recursive(). Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>	2019-07-16 22:50:11 -04:00
Al Viro	4edbe133f8	make struct mountpoint bear the dentry reference to mountpoint, not struct mount ... Using dput_to_list() to shift the contributing reference from ->mnt_mountpoint to ->mnt_mp->m_dentry. Dentries are dropped (with dput_to_list()) as soon as struct mountpoint is destroyed; in cases where we are under namespace_sem we use the global list, shrinking it in namespace_unlock(). In case of detaching stuck MNT_LOCKed children at final mntput_no_expire() we use a local list and shrink it ourselves. ->mnt_ex_mountpoint crap is gone. Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>	2019-07-16 22:43:40 -04:00
Al Viro	037f11b475	mnt_init(): call shmem_init() unconditionally ... No point having two call sites (earlier in init_rootfs() from mnt_init() in case we are going to use shmem-style rootfs, later from do_basic_setup() unconditionally), along with the logics in shmem_init() itself to make the second call a no-op... Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>	2019-07-04 22:01:59 -04:00