ci2 starts bisection 2023-12-14 19:39:31.644694229 +0000 UTC m=+87734.633271068 bisecting fixing commit since 312dfb3b7ec3beb9ff305db3b194e19eec7f2bc3 building syzkaller on a4ae4f428721da42ac15f07d6f3b54584dedee27 ensuring issue is reproducible on original commit 312dfb3b7ec3beb9ff305db3b194e19eec7f2bc3 testing commit 312dfb3b7ec3beb9ff305db3b194e19eec7f2bc3 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1708fe4eff31fc4deaa1122969a3b0115a072142ffe09a78220f7267e7a1daa8 all runs: crashed: KASAN: use-after-free Write in igrab representative crash: KASAN: use-after-free Write in igrab, types: [KASAN] check whether we can drop unnecessary instrumentation disabling configs for [UBSAN BUG LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit 312dfb3b7ec3beb9ff305db3b194e19eec7f2bc3 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4ec766425a2a35aa655f8b51a44b9223cadf3a8be9e71f194a2be1abf609e539 all runs: crashed: KASAN: use-after-free Write in igrab representative crash: KASAN: use-after-free Write in igrab, types: [KASAN] the bug reproduces without the instrumentation disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG LOCKDEP], they are not needed kconfig minimization: base=5179 full=6520 leaves diff=250 split chunks (needed=false): <250> split chunk #0 of len 250 into 5 parts testing without sub-chunk 1/5 disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed testing commit 312dfb3b7ec3beb9ff305db3b194e19eec7f2bc3 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7a759d8f6618a30487e3f8f6ebb0615f6ec8f7a9b5614452252deddf8aad6de7 all runs: crashed: KASAN: use-after-free Write in igrab representative crash: KASAN: use-after-free Write in igrab, types: [KASAN] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [HANG LEAK UBSAN BUG LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 312dfb3b7ec3beb9ff305db3b194e19eec7f2bc3 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5fd6e1d864db1f12bd499fc3b084c84b23e9da98525482e97ffb64772635e576 run #0: crashed: KASAN: use-after-free Write in igrab run #1: crashed: KASAN: use-after-free Read in igrab run #2: crashed: KASAN: use-after-free Write in igrab run #3: crashed: KASAN: use-after-free Write in igrab run #4: crashed: KASAN: use-after-free Read in igrab run #5: crashed: KASAN: use-after-free Write in igrab run #6: crashed: KASAN: use-after-free Write in igrab run #7: crashed: KASAN: use-after-free Write in igrab run #8: crashed: KASAN: use-after-free Write in igrab run #9: crashed: KASAN: use-after-free Write in igrab representative crash: KASAN: use-after-free Write in igrab, types: [KASAN] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [UBSAN BUG LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit 312dfb3b7ec3beb9ff305db3b194e19eec7f2bc3 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a4b469976545288477d02eed8c337e44275ad165e7d809b9dc1b343eeeb3c028 all runs: crashed: KASAN: use-after-free Write in igrab representative crash: KASAN: use-after-free Write in igrab, types: [KASAN] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [LEAK UBSAN BUG LOCKDEP ATOMIC_SLEEP HANG], they are not needed testing commit 312dfb3b7ec3beb9ff305db3b194e19eec7f2bc3 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 612fb39bdde634d46e950ac5c39acc102842e55ff8fd9301a3b191bf57f0fdff all runs: crashed: KASAN: use-after-free Write in igrab representative crash: KASAN: use-after-free Write in igrab, types: [KASAN] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [UBSAN BUG LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit 312dfb3b7ec3beb9ff305db3b194e19eec7f2bc3 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 failed building 312dfb3b7ec3beb9ff305db3b194e19eec7f2bc3: net/socket.c:1225: undefined reference to `wext_handle_ioctl' net/socket.c:3420: undefined reference to `compat_wext_handle_ioctl' net/core/net-procfs.c:329: undefined reference to `wext_proc_init' net/core/net-procfs.c:345: undefined reference to `wext_proc_exit' minimized to 50 configs; suspects: [HID_ZEROPLUS USB_NET_CDC_MBIM USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_DM9601 USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_PURELIFI WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_SILABS WLAN_VENDOR_ZYDAS X86_X32_ABI ZEROPLUS_FF] disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG LOCKDEP], they are not needed testing current HEAD d8d2b95fd0b415ea700d02348ac852f463908950 testing commit d8d2b95fd0b415ea700d02348ac852f463908950 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: cf4a853de66b8bf86c9d866f70065e2e175057406572c2e8af57eb08f726ec75 all runs: OK false negative chance: 0.000 # git bisect start d8d2b95fd0b415ea700d02348ac852f463908950 312dfb3b7ec3beb9ff305db3b194e19eec7f2bc3 Bisecting: 3185 revisions left to test after this (roughly 12 steps) [51aea7e9d5212adb8a3d198510cfcde4125988f9] tcp: Reduce chance of collisions in inet6_hashfn(). determine whether the revision contains the guilty commit checking the merge base b1644a0031cfb3ca2cbd84c92f771f8ebb62302d no existing result, test the revision testing commit b1644a0031cfb3ca2cbd84c92f771f8ebb62302d gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 47e7115bb1a485176da5bc478565580b340cb45273f4fa1bba6223d97f8ab6fb all runs: OK false negative chance: 0.000 the bug was not introduced yet; pretend that kernel crashed # git bisect good 51aea7e9d5212adb8a3d198510cfcde4125988f9 Bisecting: 1593 revisions left to test after this (roughly 11 steps) [c29bfda64b44bc20b99a2d86fc7db9c1e4cb8931] perf hists browser: Fix the number of entries for 'e' key determine whether the revision contains the guilty commit checking the merge base b1644a0031cfb3ca2cbd84c92f771f8ebb62302d the bug was not introduced yet; pretend that kernel crashed # git bisect good c29bfda64b44bc20b99a2d86fc7db9c1e4cb8931 Bisecting: 789 revisions left to test after this (roughly 10 steps) [1c5ec1e54d03795c00599280de29935bef01051f] Merge 6.1.55 into android14-6.1-lts determine whether the revision contains the guilty commit revision 312dfb3b7ec3beb9ff305db3b194e19eec7f2bc3 crashed and is reachable testing commit 1c5ec1e54d03795c00599280de29935bef01051f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 13c82dfd9df8673ad464720f75bb343945b49f24ccea53c044c81a775f8488f3 all runs: OK false negative chance: 0.000 # git bisect bad 1c5ec1e54d03795c00599280de29935bef01051f Bisecting: 401 revisions left to test after this (roughly 9 steps) [1e114e6efac1254b0a5c11c1a8f9b6d7bdec0d7f] ANDROID: KVM: arm64: Fix memory ordering for pKVM module callbacks determine whether the revision contains the guilty commit revision 312dfb3b7ec3beb9ff305db3b194e19eec7f2bc3 crashed and is reachable testing commit 1e114e6efac1254b0a5c11c1a8f9b6d7bdec0d7f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 62ed794f06aa6dd111e959b8322979fe05f20d5effdee2490f2a74c523b90907 all runs: crashed: KASAN: use-after-free Write in igrab representative crash: KASAN: use-after-free Write in igrab, types: [KASAN] # git bisect good 1e114e6efac1254b0a5c11c1a8f9b6d7bdec0d7f Bisecting: 200 revisions left to test after this (roughly 8 steps) [82a49ac6c80a5bce4d12088f4fa5379b233210cd] ANDROID: GKI: fix up merge issue in drivers/scsi/storvsc_drv.c determine whether the revision contains the guilty commit revision 312dfb3b7ec3beb9ff305db3b194e19eec7f2bc3 crashed and is reachable testing commit 82a49ac6c80a5bce4d12088f4fa5379b233210cd gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1cae7cb72229e079832b79864287dade1fea7d10da160fb6e292a8691e228ff5 all runs: crashed: KASAN: use-after-free Write in igrab representative crash: KASAN: use-after-free Write in igrab, types: [KASAN] # git bisect good 82a49ac6c80a5bce4d12088f4fa5379b233210cd Bisecting: 100 revisions left to test after this (roughly 7 steps) [ee378f45a70d09b51373ba495d30d99ef12219c1] ARM: 9317/1: kexec: Make smp stop calls asynchronous determine whether the revision contains the guilty commit checking the merge base b1644a0031cfb3ca2cbd84c92f771f8ebb62302d the bug was not introduced yet; pretend that kernel crashed # git bisect good ee378f45a70d09b51373ba495d30d99ef12219c1 Bisecting: 50 revisions left to test after this (roughly 6 steps) [17854d92fa4a7d40463a83d558774b6f8ba1749a] ovl: fix failed copyup of fileattr on a symlink determine whether the revision contains the guilty commit checking the merge base b1644a0031cfb3ca2cbd84c92f771f8ebb62302d the bug was not introduced yet; pretend that kernel crashed # git bisect good 17854d92fa4a7d40463a83d558774b6f8ba1749a Bisecting: 25 revisions left to test after this (roughly 5 steps) [4422080e777e3fa740e2920fe4de53cfad7fcef2] drm/amd/display: fix the white screen issue when >= 64GB DRAM determine whether the revision contains the guilty commit checking the merge base b1644a0031cfb3ca2cbd84c92f771f8ebb62302d the bug was not introduced yet; pretend that kernel crashed # git bisect good 4422080e777e3fa740e2920fe4de53cfad7fcef2 Bisecting: 12 revisions left to test after this (roughly 4 steps) [1d14a4d9cef9c8cea3635abf858524f90b50deb6] ANDROID: GKI: sched: put back the cpu_capacity_inverted variable determine whether the revision contains the guilty commit revision 312dfb3b7ec3beb9ff305db3b194e19eec7f2bc3 crashed and is reachable testing commit 1d14a4d9cef9c8cea3635abf858524f90b50deb6 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1f81c843eff47038f90c5f9da0ee5d6c975330ff60e488ddb92e63d7477dcbbf run #0: crashed: KASAN: use-after-free Write in igrab run #1: crashed: KASAN: use-after-free Write in igrab run #2: crashed: KASAN: use-after-free Write in igrab run #3: crashed: KASAN: use-after-free Write in igrab run #4: crashed: KASAN: use-after-free Write in igrab run #5: crashed: KASAN: use-after-free Write in igrab run #6: crashed: KASAN: use-after-free Write in igrab run #7: crashed: KASAN: use-after-free Write in igrab run #8: crashed: KASAN: use-after-free Read in igrab run #9: crashed: KASAN: use-after-free Write in igrab representative crash: KASAN: use-after-free Write in igrab, types: [KASAN] # git bisect good 1d14a4d9cef9c8cea3635abf858524f90b50deb6 Bisecting: 6 revisions left to test after this (roughly 3 steps) [5cdaba14b853ce2240d6d1224565aa765bcb07a7] ANDROID: GKI: add guards for an include file in net/ethtool/ioctl.c determine whether the revision contains the guilty commit revision 1e114e6efac1254b0a5c11c1a8f9b6d7bdec0d7f crashed and is reachable testing commit 5cdaba14b853ce2240d6d1224565aa765bcb07a7 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 85f87469997da8fbae87be4f7d28e600ca46900e4c42f9b63dff658e006a4212 all runs: OK false negative chance: 0.000 # git bisect bad 5cdaba14b853ce2240d6d1224565aa765bcb07a7 Bisecting: 3 revisions left to test after this (roughly 2 steps) [d7156e9445d44216a1299bcc2bcbe3c41eccac0e] ANDROID: GKI: update .stg due to internal zswap and tracing changes determine whether the revision contains the guilty commit revision 1d14a4d9cef9c8cea3635abf858524f90b50deb6 crashed and is reachable testing commit d7156e9445d44216a1299bcc2bcbe3c41eccac0e gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d6c5b688021123fa76dacd669a0582f03515b6679d6283cb16eaae663b6c51cb all runs: crashed: KASAN: use-after-free Write in igrab representative crash: KASAN: use-after-free Write in igrab, types: [KASAN] # git bisect good d7156e9445d44216a1299bcc2bcbe3c41eccac0e Bisecting: 1 revision left to test after this (roughly 1 step) [7732c16f408c3b14cbd91d48c83957326895a193] Merge changes Ib5bb4a55,I5ad48ff8,I2b41b3ba,Ib36deff9,Ib271c569, ... into android14-6.1-lts determine whether the revision contains the guilty commit revision 312dfb3b7ec3beb9ff305db3b194e19eec7f2bc3 crashed and is reachable testing commit 7732c16f408c3b14cbd91d48c83957326895a193 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3649ea80474234fdc8eff6d0ad349563f7d2c02a6546787c95d24672c6868d70 all runs: crashed: KASAN: use-after-free Write in igrab representative crash: KASAN: use-after-free Write in igrab, types: [KASAN] # git bisect good 7732c16f408c3b14cbd91d48c83957326895a193 Bisecting: 0 revisions left to test after this (roughly 0 steps) [4f94769349e14da16d0fbc943e42ead90cf7372f] Merge 6.1.54 into android14-6.1-lts determine whether the revision contains the guilty commit revision 7732c16f408c3b14cbd91d48c83957326895a193 crashed and is reachable testing commit 4f94769349e14da16d0fbc943e42ead90cf7372f gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2d18c8afc85162c795146d0b09389db27345c5d986646b4a68b24ece873f8139 all runs: OK false negative chance: 0.000 # git bisect bad 4f94769349e14da16d0fbc943e42ead90cf7372f 4f94769349e14da16d0fbc943e42ead90cf7372f is the first bad commit commit 4f94769349e14da16d0fbc943e42ead90cf7372f Merge: 7732c16f408c a356197db198 Author: Greg Kroah-Hartman Date: Tue Oct 17 12:03:09 2023 +0000 Merge 6.1.54 into android14-6.1-lts Changes in 6.1.54 net/ipv6: SKB symmetric hash should incorporate transport ports mm: multi-gen LRU: rename lrugen->lists[] to lrugen->folios[] Multi-gen LRU: fix per-zone reclaim io_uring: always lock in io_apoll_task_func io_uring: revert "io_uring fix multishot accept ordering" io_uring/net: don't overflow multishot accept io_uring: break out of iowq iopoll on teardown io_uring/sqpoll: fix io-wq affinity when IORING_SETUP_SQPOLL is used io_uring: Don't set affinity on a dying sqpoll thread drm/virtio: Conditionally allocate virtio_gpu_fence scsi: qla2xxx: Adjust IOCB resource on qpair create scsi: qla2xxx: Limit TMF to 8 per function scsi: qla2xxx: Fix deletion race condition scsi: qla2xxx: fix inconsistent TMF timeout scsi: qla2xxx: Fix command flush during TMF scsi: qla2xxx: Fix erroneous link up failure scsi: qla2xxx: Turn off noisy message log scsi: qla2xxx: Fix session hang in gnl scsi: qla2xxx: Fix TMF leak through scsi: qla2xxx: Remove unsupported ql2xenabledif option scsi: qla2xxx: Flush mailbox commands on chip reset scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() scsi: qla2xxx: Error code did not return to upper layer scsi: qla2xxx: Fix firmware resource tracking null_blk: fix poll request timeout handling fbdev/ep93xx-fb: Do not assign to struct fb_info.dev clk: qcom: camcc-sc7180: fix async resume during probe drm/ast: Fix DRAM init on AST2200 ASoC: tegra: Fix SFC conversion for few rates clk: qcom: turingcc-qcs404: fix missing resume during probe arm64: dts: renesas: rzg2l: Fix txdv-skew-psec typos send channel sequence number in SMB3 requests after reconnects memcg: drop kmem.limit_in_bytes mm: hugetlb_vmemmap: fix a race between vmemmap pmd split lib/test_meminit: allocate pages up to order MAX_ORDER parisc: led: Fix LAN receive and transmit LEDs parisc: led: Reduce CPU overhead for disk & lan LED computation cifs: update desired access while requesting for directory lease pinctrl: cherryview: fix address_space_handler() argument dt-bindings: clock: xlnx,versal-clk: drop select:false clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz clk: imx: pll14xx: align pdiv with reference manual clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock soc: qcom: qmi_encdec: Restrict string length in decode clk: qcom: dispcc-sm8450: fix runtime PM imbalance on probe errors clk: qcom: lpasscc-sc7280: fix missing resume during probe clk: qcom: q6sstop-qcs404: fix missing resume during probe clk: qcom: mss-sc7180: fix missing resume during probe NFS: Fix a potential data corruption NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info bus: mhi: host: Skip MHI reset if device is in RDDM net: add SKB_HEAD_ALIGN() helper net: remove osize variable in __alloc_skb() net: factorize code in kmalloc_reserve() net: deal with integer overflows in kmalloc_reserve() kbuild: rpm-pkg: define _arch conditionally kbuild: do not run depmod for 'make modules_sign' tpm_crb: Fix an error handling path in crb_acpi_add() gfs2: Switch to wait_event in gfs2_logd gfs2: low-memory forced flush fixes mailbox: qcom-ipcc: fix incorrect num_chans counting kconfig: fix possible buffer overflow Input: iqs7222 - configure power mode before triggering ATI perf trace: Use zfree() to reduce chances of use after free perf trace: Really free the evsel->priv area pwm: atmel-tcb: Convert to platform remove callback returning void pwm: atmel-tcb: Harmonize resource allocation order pwm: atmel-tcb: Fix resource freeing in error path and remove backlight: gpio_backlight: Drop output GPIO direction check for initial power state Input: tca6416-keypad - always expect proper IRQ number in i2c client Input: tca6416-keypad - fix interrupt enable disbalance perf annotate bpf: Don't enclose non-debug code with an assert() x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm() perf vendor events: Update the JSON/events descriptions for power10 platform perf vendor events: Drop some of the JSON/events for power10 platform perf vendor events: Drop STORES_PER_INST metric event for power10 platform perf top: Don't pass an ERR_PTR() directly to perf_session__delete() watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load pwm: lpc32xx: Remove handling of PWM channels perf test stat_bpf_counters_cgrp: Fix shellcheck issue about logical operators perf test stat_bpf_counters_cgrp: Enhance perf stat cgroup BPF counter test drm/i915: mark requests for GuC virtual engines to avoid use-after-free blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice() blk-throttle: consider 'carryover_ios/bytes' in throtl_trim_slice() cifs: use fs_context for automounts smb: propagate error code of extract_sharename() net/sched: fq_pie: avoid stalls in fq_pie_timer() sctp: annotate data-races around sk->sk_wmem_queued ipv4: annotate data-races around fi->fib_dead net: read sk->sk_family once in sk_mc_loop() net: fib: avoid warn splat in flow dissector xsk: Fix xsk_diag use-after-free error during socket cleanup drm/i915/gvt: Verify pfn is "valid" before dereferencing "struct page" drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn() drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt() net: use sk_forward_alloc_get() in sk_get_meminfo() net: annotate data-races around sk->sk_forward_alloc mptcp: annotate data-races around msk->rmem_fwd_alloc ipv4: ignore dst hint for multipath routes ipv6: ignore dst hint for multipath routes igb: disable virtualization features on 82580 gve: fix frag_list chaining veth: Fixing transmit return status for dropped packets net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr net: phy: micrel: Correct bit assignments for phy_device flags bpf, sockmap: Fix skb refcnt race after locking changes af_unix: Fix data-races around user->unix_inflight. af_unix: Fix data-race around unix_tot_inflight. af_unix: Fix data-races around sk->sk_shutdown. af_unix: Fix data race around sk->sk_err. net: sched: sch_qfq: Fix UAF in qfq_dequeue() kcm: Destroy mutex in kcm_exit_net() octeontx2-af: Fix truncation of smq in CN10K NIX AQ enqueue mbox handler igc: Change IGC_MIN to allow set rx/tx value between 64 and 80 igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 s390/zcrypt: don't leak memory if dev_set_name() fails idr: fix param name in idr_alloc_cyclic() doc ip_tunnels: use DEV_STATS_INC() net: dsa: sja1105: fix bandwidth discrepancy between tc-cbs software and offload net: dsa: sja1105: fix -ENOSPC when replacing the same tc-cbs too many times net: dsa: sja1105: complete tc-cbs offload support on SJA1110 bpf: Remove prog->active check for bpf_lsm and bpf_iter bpf: Invoke __bpf_prog_exit_sleepable_recur() on recursion in kern_sys_bpf(). bpf: Assign bpf_tramp_run_ctx::saved_run_ctx before recursion check. netfilter: nftables: exthdr: fix 4-byte stack OOB write netfilter: nfnetlink_osf: avoid OOB read net: hns3: fix tx timeout issue net: hns3: fix byte order conversion issue in hclge_dbg_fd_tcam_read() net: hns3: fix debugfs concurrency issue between kfree buffer and read net: hns3: fix invalid mutex between tc qdisc and dcb ets command issue net: hns3: fix the port information display when sfp is absent net: hns3: remove GSO partial feature bit sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory() Multi-gen LRU: avoid race in inc_min_seq() net/mlx5: Free IRQ rmap and notifier on kernel shutdown ARC: atomics: Add compiler barrier to atomic operations... clocksource/drivers/arm_arch_timer: Disable timer before programming CVAL dmaengine: sh: rz-dmac: Fix destination and source data size setting jbd2: fix checkpoint cleanup performance regression jbd2: check 'jh->b_transaction' before removing it from checkpoint jbd2: correct the end of the journal recovery scan range ext4: add correct group descriptors and reserved GDT blocks to system zone ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} f2fs: flush inode if atomic file is aborted f2fs: avoid false alarm of circular locking lib: test_scanf: Add explicit type cast to result initialization in test_number_prefix() hwspinlock: qcom: add missing regmap config for SFPB MMIO implementation ata: ahci: Add Elkhart Lake AHCI controller ata: pata_falcon: fix IO base selection for Q40 ata: sata_gemini: Add missing MODULE_DESCRIPTION ata: pata_ftide010: Add missing MODULE_DESCRIPTION fuse: nlookup missing decrement in fuse_direntplus_link btrfs: zoned: do not zone finish data relocation block group btrfs: fix start transaction qgroup rsv double free btrfs: free qgroup rsv on io failure btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART btrfs: set page extent mapped after read_folio in relocate_one_page btrfs: zoned: re-enable metadata over-commit for zoned mode btrfs: use the correct superblock to compare fsid in btrfs_validate_super drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() mtd: rawnand: brcmnand: Fix crash during the panic_write mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write mtd: spi-nor: Correct flags for Winbond w25q128 mtd: rawnand: brcmnand: Fix potential false time out warning mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma drm/amd/display: prevent potential division by zero errors KVM: SVM: Take and hold ir_list_lock when updating vCPU's Physical ID entry KVM: SVM: Don't inject #UD if KVM attempts to skip SEV guest insn KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration KVM: nSVM: Check instead of asserting on nested TSC scaling support KVM: nSVM: Load L1's TSC multiplier based on L1 state, not L2 state KVM: SVM: Set target pCPU during IRTE update if target vCPU is running KVM: SVM: Skip VMSA init in sev_es_init_vmcb() if pointer is NULL MIPS: Fix CONFIG_CPU_DADDI_WORKAROUNDS `modules_install' regression perf hists browser: Fix hierarchy mode header perf test shell stat_bpf_counters: Fix test on Intel perf tools: Handle old data in PERF_RECORD_ATTR perf hists browser: Fix the number of entries for 'e' key drm/amd/display: always switch off ODM before committing more streams drm/amd/display: Remove wait while locked drm/amdgpu: register a dirty framebuffer callback for fbcon kunit: Fix wild-memory-access bug in kunit_free_suite_set() net: ipv4: fix one memleak in __inet_del_ifa() kselftest/runner.sh: Propagate SIGTERM to runner child selftests: Keep symlinks, when possible net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in smcr_port_add net: stmmac: fix handling of zero coalescing tx-usecs net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() hsr: Fix uninit-value access in fill_frame_info() net: ethernet: adi: adin1110: use eth_broadcast_addr() to assign broadcast address net:ethernet:adi:adin1110: Fix forwarding offload net: dsa: sja1105: hide all multicast addresses from "bridge fdb show" net: dsa: sja1105: propagate exact error code from sja1105_dynamic_config_poll_valid() net: dsa: sja1105: fix multicast forwarding working only for last added mdb entry net: dsa: sja1105: serialize sja1105_port_mcast_flood() with other FDB accesses net: dsa: sja1105: block FDB accesses that are concurrent with a switch reset r8152: check budget for r8152_poll() kcm: Fix memory leak in error path of kcm_sendmsg() platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors platform/mellanox: mlxbf-tmfifo: Drop jumbo frames platform/mellanox: mlxbf-pmc: Fix potential buffer overflows platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events platform/mellanox: NVSW_SN2201 should depend on ACPI net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() net: macb: Enable PTP unicast net: macb: fix sleep inside spinlock ipv6: fix ip6_sock_set_addr_preferences() typo ipv6: Remove in6addr_any alternatives. tcp: Factorise sk_family-independent comparison in inet_bind2_bucket_match(_addr_any). tcp: Fix bind() regression for v4-mapped-v6 wildcard address. tcp: Fix bind() regression for v4-mapped-v6 non-wildcard address. ixgbe: fix timestamp configuration code kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). MIPS: Only fiddle with CHECKFLAGS if `need-compiler' drm/amd/display: Fix a bug when searching for insert_above_mpcc Linux 6.1.54 Change-Id: I42dc80e7b812eb2bdd28575280b7b88169eb6d58 Signed-off-by: Greg Kroah-Hartman Documentation/admin-guide/cgroup-v1/memory.rst | 2 - .../devicetree/bindings/clock/xlnx,versal-clk.yaml | 2 - Makefile | 4 +- arch/arc/include/asm/atomic-llsc.h | 6 +- arch/arc/include/asm/atomic64-arcv2.h | 6 +- arch/arm64/boot/dts/renesas/rzg2l-smarc-som.dtsi | 4 +- arch/arm64/boot/dts/renesas/rzg2lc-smarc-som.dtsi | 2 +- arch/arm64/boot/dts/renesas/rzg2ul-smarc-som.dtsi | 4 +- arch/arm64/net/bpf_jit_comp.c | 9 +- arch/mips/Makefile | 6 +- arch/parisc/include/asm/led.h | 4 +- arch/sh/boards/mach-ap325rxa/setup.c | 2 +- arch/sh/boards/mach-ecovec24/setup.c | 6 +- arch/sh/boards/mach-kfr2r09/setup.c | 2 +- arch/sh/boards/mach-migor/setup.c | 2 +- arch/sh/boards/mach-se/7724/setup.c | 6 +- arch/x86/include/asm/virtext.h | 6 - arch/x86/kvm/svm/avic.c | 59 +++++- arch/x86/kvm/svm/nested.c | 9 +- arch/x86/kvm/svm/sev.c | 9 +- arch/x86/kvm/svm/svm.c | 35 ++- arch/x86/net/bpf_jit_comp.c | 19 +- block/blk-throttle.c | 99 ++++----- drivers/ata/ahci.c | 2 + drivers/ata/pata_falcon.c | 50 +++-- drivers/ata/pata_ftide010.c | 1 + drivers/ata/sata_gemini.c | 1 + drivers/block/null_blk/main.c | 12 +- drivers/bus/mhi/host/pm.c | 5 + drivers/char/tpm/tpm_crb.c | 5 +- drivers/clk/imx/clk-pll14xx.c | 13 +- drivers/clk/qcom/camcc-sc7180.c | 2 +- drivers/clk/qcom/dispcc-sm8450.c | 13 +- drivers/clk/qcom/gcc-mdm9615.c | 2 +- drivers/clk/qcom/lpasscc-sc7280.c | 16 +- drivers/clk/qcom/mss-sc7180.c | 13 +- drivers/clk/qcom/q6sstop-qcs404.c | 15 +- drivers/clk/qcom/turingcc-qcs404.c | 13 +- drivers/clocksource/arm_arch_timer.c | 7 + drivers/dma/sh/rz-dmac.c | 11 +- drivers/gpu/drm/amd/amdgpu/amdgpu_display.c | 26 ++- .../drm/amd/display/amdgpu_dm/amdgpu_dm_plane.c | 7 + drivers/gpu/drm/amd/display/dc/Makefile | 1 + drivers/gpu/drm/amd/display/dc/core/dc.c | 68 ++++-- drivers/gpu/drm/amd/display/dc/dcn10/dcn10_mpc.c | 5 +- drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 11 - .../drm/amd/display/modules/freesync/freesync.c | 9 +- drivers/gpu/drm/ast/ast_post.c | 2 +- drivers/gpu/drm/i915/gt/intel_engine_types.h | 1 + drivers/gpu/drm/i915/gt/uc/intel_guc_submission.c | 3 + drivers/gpu/drm/i915/gvt/gtt.c | 27 +-- drivers/gpu/drm/i915/gvt/gtt.h | 1 - drivers/gpu/drm/i915/i915_request.c | 7 +- drivers/gpu/drm/mxsfb/mxsfb_kms.c | 9 + drivers/gpu/drm/virtio/virtgpu_ioctl.c | 30 +-- drivers/hwspinlock/qcom_hwspinlock.c | 9 + drivers/input/keyboard/tca6416-keypad.c | 31 +-- drivers/input/misc/iqs7222.c | 8 +- drivers/mailbox/qcom-ipcc.c | 4 +- drivers/mtd/nand/raw/brcmnand/brcmnand.c | 112 ++++++---- drivers/mtd/spi-nor/winbond.c | 5 +- drivers/net/dsa/sja1105/sja1105.h | 4 + drivers/net/dsa/sja1105/sja1105_dynamic_config.c | 93 ++++---- drivers/net/dsa/sja1105/sja1105_main.c | 120 ++++++++--- drivers/net/dsa/sja1105/sja1105_spi.c | 4 + drivers/net/ethernet/adi/adin1110.c | 10 +- drivers/net/ethernet/cadence/macb.h | 4 + drivers/net/ethernet/cadence/macb_main.c | 18 +- drivers/net/ethernet/google/gve/gve_rx_dqo.c | 5 +- drivers/net/ethernet/hisilicon/hns3/hnae3.h | 1 + drivers/net/ethernet/hisilicon/hns3/hns3_debugfs.c | 7 +- drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 19 +- drivers/net/ethernet/hisilicon/hns3/hns3_ethtool.c | 4 +- .../net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 20 +- .../ethernet/hisilicon/hns3/hns3pf/hclge_debugfs.c | 14 +- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 5 +- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.h | 2 - drivers/net/ethernet/intel/igb/igb.h | 4 +- drivers/net/ethernet/intel/igb/igb_main.c | 5 +- drivers/net/ethernet/intel/igbvf/igbvf.h | 4 +- drivers/net/ethernet/intel/igc/igc.h | 4 +- drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 28 +-- drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 5 + .../net/ethernet/marvell/octeontx2/af/rvu_nix.c | 21 +- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 3 + .../ethernet/mellanox/mlx5/core/en/tc_tun_encap.c | 5 +- drivers/net/ethernet/mellanox/mlx5/core/pci_irq.c | 26 ++- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 10 +- drivers/net/usb/r8152.c | 3 + drivers/net/veth.c | 4 +- drivers/parisc/led.c | 4 +- drivers/pinctrl/intel/pinctrl-cherryview.c | 5 +- drivers/platform/mellanox/Kconfig | 4 +- drivers/platform/mellanox/mlxbf-pmc.c | 41 ++-- drivers/platform/mellanox/mlxbf-tmfifo.c | 90 +++++--- drivers/pwm/pwm-atmel-tcb.c | 70 +++--- drivers/pwm/pwm-lpc32xx.c | 16 +- drivers/s390/crypto/zcrypt_api.c | 1 + drivers/scsi/qla2xxx/qla_attr.c | 2 - drivers/scsi/qla2xxx/qla_dbg.c | 2 +- drivers/scsi/qla2xxx/qla_def.h | 21 +- drivers/scsi/qla2xxx/qla_dfs.c | 10 + drivers/scsi/qla2xxx/qla_gbl.h | 1 + drivers/scsi/qla2xxx/qla_init.c | 234 +++++++++++++-------- drivers/scsi/qla2xxx/qla_inline.h | 57 ++++- drivers/scsi/qla2xxx/qla_iocb.c | 1 + drivers/scsi/qla2xxx/qla_isr.c | 7 +- drivers/scsi/qla2xxx/qla_mbx.c | 7 +- drivers/scsi/qla2xxx/qla_nvme.c | 3 +- drivers/scsi/qla2xxx/qla_os.c | 26 ++- drivers/scsi/qla2xxx/qla_target.c | 14 +- drivers/soc/qcom/qmi_encdec.c | 4 +- drivers/video/backlight/gpio_backlight.c | 3 +- drivers/video/fbdev/ep93xx-fb.c | 1 - drivers/watchdog/intel-mid_wdt.c | 1 + fs/btrfs/disk-io.c | 5 +- fs/btrfs/extent-tree.c | 43 ++-- fs/btrfs/inode.c | 7 + fs/btrfs/relocation.c | 12 +- fs/btrfs/space-info.c | 6 +- fs/btrfs/transaction.c | 26 ++- fs/btrfs/zoned.c | 16 +- fs/ext4/balloc.c | 15 +- fs/ext4/block_validity.c | 8 +- fs/ext4/crypto.c | 4 + fs/ext4/ext4.h | 2 + fs/f2fs/f2fs.h | 24 ++- fs/f2fs/inline.c | 3 +- fs/f2fs/segment.c | 2 + fs/fuse/readdir.c | 10 +- fs/gfs2/aops.c | 4 +- fs/gfs2/log.c | 25 +-- fs/jbd2/checkpoint.c | 22 +- fs/jbd2/recovery.c | 12 +- fs/nfs/direct.c | 20 +- fs/nfs/pnfs_dev.c | 2 +- fs/smb/client/cached_dir.c | 2 +- fs/smb/client/cifs_dfs_ref.c | 100 ++++----- fs/smb/client/cifsglob.h | 1 + fs/smb/client/connect.c | 1 + fs/smb/client/fscache.c | 2 +- fs/smb/client/smb2ops.c | 11 +- fs/smb/client/smb2pdu.c | 11 + fs/smb/common/smb2pdu.h | 22 ++ include/linux/bpf.h | 24 +-- include/linux/bpf_verifier.h | 13 ++ include/linux/ipv6.h | 1 + include/linux/micrel_phy.h | 6 +- include/linux/skbuff.h | 8 + include/linux/tca6416_keypad.h | 1 - include/net/ip.h | 1 + include/net/ip6_fib.h | 14 +- include/net/ip_fib.h | 5 +- include/net/ip_tunnels.h | 15 +- include/net/ipv6.h | 7 +- include/net/sock.h | 12 +- include/trace/events/fib.h | 5 +- include/trace/events/fib6.h | 5 +- io_uring/io-wq.c | 17 +- io_uring/io-wq.h | 3 +- io_uring/io_uring.c | 31 ++- io_uring/net.c | 8 +- io_uring/poll.c | 3 +- io_uring/sqpoll.c | 17 ++ io_uring/sqpoll.h | 1 + kernel/bpf/syscall.c | 7 +- kernel/bpf/trampoline.c | 81 +++++-- lib/idr.c | 2 +- lib/kunit/test.c | 3 +- lib/test_meminit.c | 2 +- lib/test_scanf.c | 2 +- mm/hugetlb_vmemmap.c | 34 ++- mm/memcontrol.c | 10 - mm/vmscan.c | 8 + net/core/flow_dissector.c | 3 +- net/core/skbuff.c | 49 ++--- net/core/skmsg.c | 12 +- net/core/sock.c | 19 +- net/ethtool/ioctl.c | 10 +- net/hsr/hsr_forward.c | 1 + net/ipv4/devinet.c | 10 +- net/ipv4/fib_semantics.c | 5 +- net/ipv4/fib_trie.c | 3 +- net/ipv4/inet_hashtables.c | 43 ++-- net/ipv4/ip_input.c | 3 +- net/ipv4/route.c | 1 + net/ipv4/tcp_output.c | 2 +- net/ipv4/udp.c | 6 +- net/ipv6/addrconf.c | 2 +- net/ipv6/ip6_input.c | 3 +- net/ipv6/route.c | 3 + net/kcm/kcmsock.c | 15 +- net/mptcp/protocol.c | 23 +- net/netfilter/nfnetlink_osf.c | 8 + net/netfilter/nft_exthdr.c | 22 +- net/sched/sch_fq_pie.c | 27 ++- net/sched/sch_plug.c | 2 +- net/sched/sch_qfq.c | 22 +- net/sctp/proc.c | 2 +- net/sctp/socket.c | 10 +- net/smc/smc_core.c | 2 + net/tls/tls_sw.c | 4 +- net/unix/af_unix.c | 2 +- net/unix/scm.c | 6 +- net/xdp/xsk_diag.c | 3 + scripts/kconfig/preprocess.c | 3 + scripts/package/mkspec | 2 +- sound/soc/tegra/tegra210_sfc.c | 31 ++- sound/soc/tegra/tegra210_sfc.h | 4 +- tools/perf/builtin-top.c | 1 + tools/perf/builtin-trace.c | 15 +- .../pmu-events/arch/powerpc/power10/cache.json | 4 +- .../arch/powerpc/power10/floating_point.json | 7 - .../pmu-events/arch/powerpc/power10/frontend.json | 30 +-- .../pmu-events/arch/powerpc/power10/marked.json | 30 +-- .../pmu-events/arch/powerpc/power10/memory.json | 6 +- .../pmu-events/arch/powerpc/power10/metrics.json | 6 - .../pmu-events/arch/powerpc/power10/others.json | 53 +++-- .../pmu-events/arch/powerpc/power10/pipeline.json | 30 +-- .../perf/pmu-events/arch/powerpc/power10/pmc.json | 4 +- .../arch/powerpc/power10/translation.json | 11 +- tools/perf/tests/shell/stat_bpf_counters.sh | 4 +- tools/perf/tests/shell/stat_bpf_counters_cgrp.sh | 28 ++- tools/perf/ui/browsers/hists.c | 60 +++--- tools/perf/util/annotate.c | 10 +- tools/perf/util/header.c | 11 +- tools/testing/selftests/kselftest/runner.sh | 3 +- tools/testing/selftests/lib.mk | 4 +- 228 files changed, 2082 insertions(+), 1299 deletions(-) delete mode 100644 tools/perf/pmu-events/arch/powerpc/power10/floating_point.json accumulated error probability: 0.00 revisions tested: 16, total time: 2h32m31.286768387s (build: 1h12m5.964316311s, test: 1h14m1.189978618s) first good commit: 4f94769349e14da16d0fbc943e42ead90cf7372f Merge 6.1.54 into android14-6.1-lts recipients (to): ["gregkh@google.com"] recipients (cc): []