From: Yu Changchun <yuchangchun1@huawei.com> These patches refer to some bugfixes(ext4, ubifs, etc) from upstream or local test. -------------------------------------------------------------- Al Viro (2): switch file_open_root() to struct path take LOOKUP_{ROOT,ROOT_GRABBED,JUMPED} out of LOOKUP_... space Andrii Nakryiko (1): bpf: Add ambient BPF runtime context stored in current Ard Biesheuvel (1): ARM: 9057/1: cache-v7: add missing ISB after cache level selection Baokun Li (5): nbd: add the check to prevent overflow in __nbd_ioctl() ubi: fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl ubifs: fix slab-out-of-bounds in ubifs_change_lp ubifs: fix double return leb in ubifs_garbage_collect ubifs: read-only if LEB may always be taken in ubifs_garbage_collect Baolin Wang (1): mm: memcontrol: set the correct memcg swappiness restriction Barry Song (1): sched/topology: fix the issue groups don't span domain->span for NUMA diameter > 2 Bart Van Assche (2): blk-mq: Introduce the BLK_MQ_F_NO_SCHED_BY_DEFAULT flag loop: Select I/O scheduler 'none' from inside add_disk() Chengsong Ke (1): ubifs: Remove the redundant return in dbg_check_nondata_nodes_order Christian Brauner (1): fs: add vfs_parse_fs_param_source() helper Claudiu Beznea (1): regulator: core: do not continue if selector match Daniel Borkmann (2): bpf, cgroups: Fix cgroup v2 fallback on v1/v2 mixed mode bpf, cgroup: Assign cgroup in cgroup_sk_alloc when called from interrupt Dietmar Eggemann (1): sched/topology: Fix sched_domain_topology_level alloc in sched_init_numa() Georgi Djakov (1): mm/page_owner: record the timestamp of all pages during free Guo Xuenan (1): ubi: fix slab-out-of-bounds in ubi_eba_get_ldesc+0xfb/0x130 Hans de Goede (1): iio: core: Allow drivers to specify a label without it coming from of Heiner Kallweit (1): net: phy: fix duplex out of sync problem while changing settings Huang Guobin (1): bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed Jakub Kicinski (1): net: make free_netdev() more lenient with unregistering devices Jan Kara (3): ext4: fix e2fsprogs checksum failure for mounted filesystem bfq: Remove merged request already in bfq_requests_merged() blk: Fix lock inversion between ioc lock and bfqd lock Johannes Weiner (1): mm: vmscan: fix missing psi annotation for node_reclaim() John Garry (1): blk-mq-sched: Fix blk_mq_sched_alloc_tags() error handling Keith Busch (1): block: return errors from blk_execute_rq() Kevin Locke (1): ovl: warn about orphan metacopy Laibin Qiu (5): block: fix UAF from race of ioc_release_fn() and __ioc_clear_queue() block: fix memory leak for mq shared sbitmap Fix NULL pointer dereference in handling for passthrough commands loop: fix loop_validate_block_size() can't make sense blkcg: Remove extra blkcg_bio_issue_init Lakshmi Ramasubramanian (1): ima: Fix warning: no previous prototype for function 'ima_add_kexec_buffer' Li Hua (1): sched/rt: Try to restart rt period timer when rt runtime exceeded Li Xinhai (1): mm: rmap: explicitly reset vma->anon_vma in unlink_anon_vmas() Liam Mark (1): mm/page_owner: record timestamp and pid Luo Meng (1): locks: Fix UBSAN undefined behaviour in flock64_to_posix_lock Mike Kravetz (1): hugetlb: before freeing hugetlb page set dtor to appropriate value Ming Lei (10): block: don't call rq_qos_ops->done_bio if the bio isn't tracked nvme: add APIs for stopping/starting admin queue nvme: apply nvme API to quiesce/unquiesce admin queue nvme: prepare for pairing quiescing and unquiescing nvme: paring quiesce/unquiesce nvme: loop: clear NVME_CTRL_ADMIN_Q_STOPPED after admin queue is reallocated blk-mq: support concurrent queue quiesce/unquiesce dm: don't stop request queue after the dm device is suspended scsi: avoid to quiesce sdev->request_queue two times scsi: make sure that request queue queiesce and unquiesce balanced Nuno Sá (1): iio: buffer: Return error if no callback is given Pavel Begunkov (2): io_uring: deduplicate failing task_work_add io_uring: don't take uring_lock during iowq cancel Qian Cai (1): powerpc/powernv/pci: fix a RCU-list lock Sergei Trofimovich (1): mm: page_poison: print page info when corruption is caught Srikar Dronamraju (1): powerpc/numa: Update cpu_cpu_map on CPU online/offline Theodore Ts'o (1): ext4: if zeroout fails fall back to splitting the extent node Valentin Schneider (3): sched/topology: Warn when NUMA diameter > 2 sched/topology: Make sched_init_numa() use a set for the deduplicating sort ia64: ensure proper NUMA distance and possible map initialization Vasily Averin (6): memcg: enable accounting for mnt_cache entries memcg: enable accounting for fasync_cache memcg: enable accounting for new namesapces and struct nsproxy memcg: enable accounting for signals memcg: enable accounting for posix_timers_cache slab memcg: enable accounting for ldt_struct objects Vincent Whitchurch (1): regulator: core: Respect off_on_delay at startup Vlastimil Babka (2): mm: slub: fix slub_debug disabling for list of slabs mm, vmscan: guarantee drop_slab_node() termination Wang Wensheng (1): ALSA: timer: Fix use-after-free problem Yang Yang (1): kyber: introduce kyber_depth_updated() Ye Bin (7): ext4: fix potential uninitialized access to retval in kmmpd scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() PM: hibernate: Get block device exclusively in swsusp_check() nbd: Fix use-after-free in pid_show blk-mq: don't free tags if the tag_set is used by other device in queue initialztion block: avoid quiesce while elevator init Yu Kuai (11): blk-mq: fix divide by zero crash in tg_may_dispatch() nbd: don't handle response without a corresponding request message nbd: make sure request completion won't concurrent nbd: check sock index in nbd_read_stat() nbd: don't start request if nbd_queue_rq() failed nbd: clean up return value checking of sock_xmit() nbd: partition nbd_read_stat() into nbd_read_reply() and nbd_handle_reply() nbd: fix uaf in nbd_handle_reply() nbd: add sanity check for first_minor blk-cgroup: synchronize blkg creation against policy deactivation blk-cgroup: fix missing put device in error path from blkg_conf_pref() Yutian Yang (1): memcg: charge fs_context and legacy_fs_context Zhang Yi (12): ext4: move inode eio simulation behind io completeion ext4: make the updating inode data procedure atomic ext4: factor out ext4_fill_raw_inode() ext4: move ext4_fill_raw_inode() related functions ext4: prevent getting empty inode buffer ext4: factor out write end code of inline file ext4: drop unnecessary journal handle in delalloc write quota: check block number when reading the block in quota file quota: correct error number in free_dqentry() ext4: check for out-of-order index extents in ext4_valid_extent_entries() ext4: check for inconsistent extents between index and leaf block ext4: prevent partial update of the extent blocks Zheng Liang (2): block, bfq: fix UAF problem in bfqg_stats_init() squashfs: provides backing_dev_info in order to disable read-ahead Zhenhua Huang (1): mm: fix page_owner initializing issue for arm32 Zhihao Cheng (17): ubifs: Limit dumping length by size of memory which is allocated for the node Revert "ubifs: Fix out-of-bounds memory access caused by abnormal value of node_len" ubifs: Pass node length in all node dumping callers ubifs: ubifs_dump_sleb: Remove unused function ubifs: ubifs_dump_node: Dump all branches of the index node ubifs: rename_whiteout: Fix double free for whiteout_ui->data ubifs: Fix deadlock in concurrent rename whiteout and inode writeback ubifs: Fix wrong number of inodes locked by ui_mutex in ubifs_inode comment ubifs: Add missing iput if do_tmpfile() failed in rename whiteout ubifs: Rename whiteout atomically ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback work ubifs: Rectify space amount budget for mkdir/tmpfile operations ubifs: setflags: Make dirtied_ino_d 8 bytes aligned ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() ubifs: Fix to add refcount once page is set private ubi: fastmap: Return error code if memory allocation fails in add_aeb() ubi: fastmap: Add all fastmap pebs into 'ai->fastmap' when fm->used_blocks>=2 yangerkun (9): ext4: flush s_error_work before journal destroy in ext4_fill_super ramfs: fix mount source show for ramfs ext4: avoid recheck extent for EXT4_EX_FORCE_CACHE ext4: check magic even the extent block bh is verified ext4: ensure enough credits in ext4_ext_shift_path_extents ext4: refresh the ext4_ext_path struct after dropping i_data_sem. ovl: fix use after free in struct ovl_aio_req ext4: stop IO for page without buffer_head hugetlbfs: avoid overflow in hugetlbfs_fallocate Documentation/filesystems/path-lookup.rst | 6 +- Documentation/filesystems/porting.rst | 9 + Documentation/vm/page_owner.rst | 12 +- arch/arm/mm/cache-v7.S | 7 +- arch/ia64/kernel/acpi.c | 7 +- arch/powerpc/include/asm/topology.h | 13 + arch/powerpc/kernel/smp.c | 3 + arch/powerpc/mm/numa.c | 7 +- arch/powerpc/platforms/powernv/pci-ioda-tce.c | 4 + arch/um/drivers/mconsole_kern.c | 2 +- arch/x86/kernel/ldt.c | 6 +- block/bfq-cgroup.c | 12 +- block/bfq-iosched.c | 47 +- block/bio.c | 2 +- block/blk-cgroup.c | 15 +- block/blk-core.c | 4 +- block/blk-exec.c | 7 +- block/blk-ioc.c | 2 +- block/blk-merge.c | 19 +- block/blk-mq-sched.c | 24 +- block/blk-mq-sched.h | 3 +- block/blk-mq.c | 42 +- block/blk-mq.h | 12 + block/blk-sysfs.c | 7 + block/blk-throttle.c | 37 +- block/blk.h | 2 +- block/elevator.c | 24 +- block/kyber-iosched.c | 29 +- block/mq-deadline.c | 5 +- drivers/block/loop.c | 5 +- drivers/block/nbd.c | 169 ++++-- drivers/iio/buffer/industrialio-buffer-cb.c | 5 + drivers/iio/industrialio-core.c | 6 +- drivers/md/dm.c | 10 - drivers/mtd/ubi/build.c | 9 +- drivers/mtd/ubi/fastmap.c | 69 ++- drivers/mtd/ubi/vmt.c | 35 +- drivers/net/bonding/bond_sysfs_slave.c | 36 +- drivers/net/phy/phy.c | 7 +- drivers/nvme/host/core.c | 72 ++- drivers/nvme/host/fc.c | 8 +- drivers/nvme/host/nvme.h | 5 + drivers/nvme/host/pci.c | 8 +- drivers/nvme/host/rdma.c | 14 +- drivers/nvme/host/tcp.c | 16 +- drivers/nvme/target/loop.c | 6 +- drivers/regulator/core.c | 6 + drivers/scsi/scsi_debug.c | 11 +- drivers/scsi/scsi_lib.c | 72 ++- fs/coredump.c | 4 +- fs/ext4/ext4.h | 3 - fs/ext4/extents.c | 182 ++++--- fs/ext4/inline.c | 128 ++--- fs/ext4/inode.c | 485 +++++++++--------- fs/ext4/mmp.c | 2 +- fs/ext4/super.c | 13 +- fs/fcntl.c | 3 +- fs/fhandle.c | 2 +- fs/fs_context.c | 58 ++- fs/hugetlbfs/inode.c | 2 +- fs/internal.h | 2 +- fs/io_uring.c | 52 +- fs/kernel_read_file.c | 2 +- fs/locks.c | 2 +- fs/namei.c | 60 ++- fs/namespace.c | 7 +- fs/nfs/nfstrace.h | 4 - fs/open.c | 4 +- fs/overlayfs/file.c | 16 +- fs/overlayfs/namei.c | 2 + fs/proc/proc_sysctl.c | 2 +- fs/quota/quota_tree.c | 15 + fs/ramfs/inode.c | 11 +- fs/squashfs/super.c | 32 ++ fs/ubifs/commit.c | 4 +- fs/ubifs/debug.c | 112 ++-- fs/ubifs/debug.h | 5 +- fs/ubifs/dir.c | 235 +++++---- fs/ubifs/file.c | 16 +- fs/ubifs/gc.c | 16 +- fs/ubifs/io.c | 71 +-- fs/ubifs/ioctl.c | 2 +- fs/ubifs/journal.c | 55 +- fs/ubifs/master.c | 4 +- fs/ubifs/orphan.c | 6 +- fs/ubifs/recovery.c | 6 +- fs/ubifs/replay.c | 4 +- fs/ubifs/sb.c | 2 +- fs/ubifs/scan.c | 4 +- fs/ubifs/super.c | 2 +- fs/ubifs/tnc.c | 8 +- fs/ubifs/tnc_misc.c | 4 +- fs/ubifs/ubifs.h | 6 +- include/linux/blk-mq.h | 6 + include/linux/blkdev.h | 7 +- include/linux/bpf-cgroup.h | 54 -- include/linux/bpf.h | 45 +- include/linux/cgroup-defs.h | 107 +--- include/linux/cgroup.h | 22 +- include/linux/elevator.h | 3 +- include/linux/fs.h | 9 +- include/linux/fs_context.h | 2 + include/linux/namei.h | 3 - include/linux/page_ext.h | 8 + include/linux/sched.h | 5 + include/linux/topology.h | 1 + include/scsi/scsi_device.h | 1 + init/main.c | 2 + ipc/namespace.c | 2 +- kernel/bpf/helpers.c | 16 +- kernel/bpf/local_storage.c | 3 - kernel/cgroup/cgroup-v1.c | 14 +- kernel/cgroup/cgroup.c | 63 +-- kernel/cgroup/namespace.c | 2 +- kernel/fork.c | 3 + kernel/nsproxy.c | 2 +- kernel/pid_namespace.c | 2 +- kernel/power/swap.c | 5 +- kernel/sched/rt.c | 20 +- kernel/sched/topology.c | 164 ++++-- kernel/signal.c | 2 +- kernel/time/namespace.c | 4 +- kernel/time/posix-timers.c | 4 +- kernel/user_namespace.c | 2 +- kernel/usermode_driver.c | 2 +- mm/hugetlb.c | 20 +- mm/memcontrol.c | 2 +- mm/page_ext.c | 10 +- mm/page_owner.c | 21 +- mm/page_poison.c | 6 +- mm/rmap.c | 9 +- mm/slub.c | 13 +- mm/vmscan.c | 6 +- net/8021q/vlan.c | 4 +- net/bpf/test_run.c | 22 +- net/core/dev.c | 11 + net/core/netclassid_cgroup.c | 7 +- net/core/netprio_cgroup.c | 11 +- net/core/rtnetlink.c | 23 +- security/integrity/ima/ima_kexec.c | 1 + sound/core/timer.c | 4 +- 141 files changed, 1921 insertions(+), 1427 deletions(-) -- 2.25.1