commit:     408bea8d06812fc78c53afb96b920ce2ff50d550
Author:     Mike Pagano <mpagano <AT> gentoo <DOT> org>
AuthorDate: Sat Mar 19 13:18:23 2022 +0000
Commit:     Mike Pagano <mpagano <AT> gentoo <DOT> org>
CommitDate: Sat Mar 19 13:18:23 2022 +0000
URL:        https://gitweb.gentoo.org/proj/linux-patches.git/commit/?id=408bea8d

Linux patch 5.15.30

Signed-off-by: Mike Pagano <mpagano <AT> gentoo.org>

 0000_README              |   4 +
 1029_linux-5.15.30.patch | 683 +++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 687 insertions(+)

diff --git a/0000_README b/0000_README
index d2c204af..26b11d81 100644
--- a/0000_README
+++ b/0000_README
@@ -159,6 +159,10 @@ Patch:  1028_linux-5.15.29.patch
 From:   http://www.kernel.org
 Desc:   Linux 5.15.29
 
+Patch:  1028_linux-5.15.30.patch
+From:   http://www.kernel.org
+Desc:   Linux 5.15.30
+
 Patch:  1500_XATTR_USER_PREFIX.patch
 From:   https://bugs.gentoo.org/show_bug.cgi?id=470644
 Desc:   Support for namespace user.pax.* on tmpfs.

diff --git a/1029_linux-5.15.30.patch b/1029_linux-5.15.30.patch
new file mode 100644
index 00000000..bc7446b5
--- /dev/null
+++ b/1029_linux-5.15.30.patch
@@ -0,0 +1,683 @@
+diff --git a/Makefile b/Makefile
+index 5adb4865ffa06..e0b2057a2dda6 100644
+--- a/Makefile
++++ b/Makefile
+@@ -1,7 +1,7 @@
+ # SPDX-License-Identifier: GPL-2.0
+ VERSION = 5
+ PATCHLEVEL = 15
+-SUBLEVEL = 29
++SUBLEVEL = 30
+ EXTRAVERSION =
+ NAME = Trick or Treat
+ 
+diff --git a/arch/arm/boot/dts/rk322x.dtsi b/arch/arm/boot/dts/rk322x.dtsi
+index 75af99c76d7ea..f31cf1df892b2 100644
+--- a/arch/arm/boot/dts/rk322x.dtsi
++++ b/arch/arm/boot/dts/rk322x.dtsi
+@@ -718,8 +718,8 @@
+               interrupts = <GIC_SPI 35 IRQ_TYPE_LEVEL_HIGH>;
+               assigned-clocks = <&cru SCLK_HDMI_PHY>;
+               assigned-clock-parents = <&hdmi_phy>;
+-              clocks = <&cru SCLK_HDMI_HDCP>, <&cru PCLK_HDMI_CTRL>, <&cru 
SCLK_HDMI_CEC>;
+-              clock-names = "isfr", "iahb", "cec";
++              clocks = <&cru PCLK_HDMI_CTRL>, <&cru SCLK_HDMI_HDCP>, <&cru 
SCLK_HDMI_CEC>;
++              clock-names = "iahb", "isfr", "cec";
+               pinctrl-names = "default";
+               pinctrl-0 = <&hdmii2c_xfer &hdmi_hpd &hdmi_cec>;
+               resets = <&cru SRST_HDMI_P>;
+diff --git a/arch/arm/boot/dts/rk3288.dtsi b/arch/arm/boot/dts/rk3288.dtsi
+index 4dcdcf17c9776..66ff5db53c5a9 100644
+--- a/arch/arm/boot/dts/rk3288.dtsi
++++ b/arch/arm/boot/dts/rk3288.dtsi
+@@ -971,7 +971,7 @@
+               status = "disabled";
+       };
+ 
+-      crypto: cypto-controller@ff8a0000 {
++      crypto: crypto@ff8a0000 {
+               compatible = "rockchip,rk3288-crypto";
+               reg = <0x0 0xff8a0000 0x0 0x4000>;
+               interrupts = <GIC_SPI 48 IRQ_TYPE_LEVEL_HIGH>;
+diff --git a/arch/arm64/boot/dts/intel/socfpga_agilex.dtsi 
b/arch/arm64/boot/dts/intel/socfpga_agilex.dtsi
+index 163f33b46e4f7..de1e98c99ec5b 100644
+--- a/arch/arm64/boot/dts/intel/socfpga_agilex.dtsi
++++ b/arch/arm64/boot/dts/intel/socfpga_agilex.dtsi
+@@ -502,7 +502,7 @@
+               };
+ 
+               usb0: usb@ffb00000 {
+-                      compatible = "snps,dwc2";
++                      compatible = "intel,socfpga-agilex-hsotg", "snps,dwc2";
+                       reg = <0xffb00000 0x40000>;
+                       interrupts = <GIC_SPI 93 IRQ_TYPE_LEVEL_HIGH>;
+                       phys = <&usbphy0>;
+@@ -515,7 +515,7 @@
+               };
+ 
+               usb1: usb@ffb40000 {
+-                      compatible = "snps,dwc2";
++                      compatible = "intel,socfpga-agilex-hsotg", "snps,dwc2";
+                       reg = <0xffb40000 0x40000>;
+                       interrupts = <GIC_SPI 94 IRQ_TYPE_LEVEL_HIGH>;
+                       phys = <&usbphy0>;
+diff --git a/arch/arm64/boot/dts/rockchip/px30.dtsi 
b/arch/arm64/boot/dts/rockchip/px30.dtsi
+index 248ebb61aa790..5200d0bbd9e9c 100644
+--- a/arch/arm64/boot/dts/rockchip/px30.dtsi
++++ b/arch/arm64/boot/dts/rockchip/px30.dtsi
+@@ -711,7 +711,7 @@
+               clock-names = "pclk", "timer";
+       };
+ 
+-      dmac: dmac@ff240000 {
++      dmac: dma-controller@ff240000 {
+               compatible = "arm,pl330", "arm,primecell";
+               reg = <0x0 0xff240000 0x0 0x4000>;
+               interrupts = <GIC_SPI 1 IRQ_TYPE_LEVEL_HIGH>,
+diff --git a/arch/arm64/boot/dts/rockchip/rk3328.dtsi 
b/arch/arm64/boot/dts/rockchip/rk3328.dtsi
+index da84be6f4715e..3cbe83e6fb9a4 100644
+--- a/arch/arm64/boot/dts/rockchip/rk3328.dtsi
++++ b/arch/arm64/boot/dts/rockchip/rk3328.dtsi
+@@ -489,7 +489,7 @@
+               status = "disabled";
+       };
+ 
+-      dmac: dmac@ff1f0000 {
++      dmac: dma-controller@ff1f0000 {
+               compatible = "arm,pl330", "arm,primecell";
+               reg = <0x0 0xff1f0000 0x0 0x4000>;
+               interrupts = <GIC_SPI 0 IRQ_TYPE_LEVEL_HIGH>,
+diff --git a/arch/arm64/boot/dts/rockchip/rk3399-puma-haikou.dts 
b/arch/arm64/boot/dts/rockchip/rk3399-puma-haikou.dts
+index 292bb7e80cf35..3ae5d727e3674 100644
+--- a/arch/arm64/boot/dts/rockchip/rk3399-puma-haikou.dts
++++ b/arch/arm64/boot/dts/rockchip/rk3399-puma-haikou.dts
+@@ -232,6 +232,7 @@
+ 
+ &usbdrd_dwc3_0 {
+       dr_mode = "otg";
++      extcon = <&extcon_usb3>;
+       status = "okay";
+ };
+ 
+diff --git a/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi 
b/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi
+index fb67db4619ea0..08fa00364b42f 100644
+--- a/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi
++++ b/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi
+@@ -25,6 +25,13 @@
+               };
+       };
+ 
++      extcon_usb3: extcon-usb3 {
++              compatible = "linux,extcon-usb-gpio";
++              id-gpio = <&gpio1 RK_PC2 GPIO_ACTIVE_HIGH>;
++              pinctrl-names = "default";
++              pinctrl-0 = <&usb3_id>;
++      };
++
+       clkin_gmac: external-gmac-clock {
+               compatible = "fixed-clock";
+               clock-frequency = <125000000>;
+@@ -422,9 +429,22 @@
+                         <4 RK_PA3 RK_FUNC_GPIO &pcfg_pull_none>;
+               };
+       };
++
++      usb3 {
++              usb3_id: usb3-id {
++                      rockchip,pins =
++                        <1 RK_PC2 RK_FUNC_GPIO &pcfg_pull_none>;
++              };
++      };
+ };
+ 
+ &sdhci {
++      /*
++       * Signal integrity isn't great at 200MHz but 100MHz has proven stable
++       * enough.
++       */
++      max-frequency = <100000000>;
++
+       bus-width = <8>;
+       mmc-hs400-1_8v;
+       mmc-hs400-enhanced-strobe;
+diff --git a/arch/arm64/boot/dts/rockchip/rk3399.dtsi 
b/arch/arm64/boot/dts/rockchip/rk3399.dtsi
+index 3871c7fd83b00..00f1d036dfe08 100644
+--- a/arch/arm64/boot/dts/rockchip/rk3399.dtsi
++++ b/arch/arm64/boot/dts/rockchip/rk3399.dtsi
+@@ -1802,10 +1802,10 @@
+               interrupts = <GIC_SPI 23 IRQ_TYPE_LEVEL_HIGH 0>;
+               clocks = <&cru PCLK_HDMI_CTRL>,
+                        <&cru SCLK_HDMI_SFR>,
+-                       <&cru PLL_VPLL>,
++                       <&cru SCLK_HDMI_CEC>,
+                        <&cru PCLK_VIO_GRF>,
+-                       <&cru SCLK_HDMI_CEC>;
+-              clock-names = "iahb", "isfr", "vpll", "grf", "cec";
++                       <&cru PLL_VPLL>;
++              clock-names = "iahb", "isfr", "cec", "grf", "vpll";
+               power-domains = <&power RK3399_PD_HDCP>;
+               reg-io-width = <4>;
+               rockchip,grf = <&grf>;
+diff --git a/arch/mips/kernel/smp.c b/arch/mips/kernel/smp.c
+index d542fb7af3ba2..1986d13094100 100644
+--- a/arch/mips/kernel/smp.c
++++ b/arch/mips/kernel/smp.c
+@@ -351,6 +351,9 @@ asmlinkage void start_secondary(void)
+       cpu = smp_processor_id();
+       cpu_data[cpu].udelay_val = loops_per_jiffy;
+ 
++      set_cpu_sibling_map(cpu);
++      set_cpu_core_map(cpu);
++
+       cpumask_set_cpu(cpu, &cpu_coherent_mask);
+       notify_cpu_starting(cpu);
+ 
+@@ -362,9 +365,6 @@ asmlinkage void start_secondary(void)
+       /* The CPU is running and counters synchronised, now mark it online */
+       set_cpu_online(cpu, true);
+ 
+-      set_cpu_sibling_map(cpu);
+-      set_cpu_core_map(cpu);
+-
+       calculate_cpu_foreign_map();
+ 
+       /*
+diff --git a/arch/x86/kernel/module.c b/arch/x86/kernel/module.c
+index 867a341a0c7e8..32e546e416296 100644
+--- a/arch/x86/kernel/module.c
++++ b/arch/x86/kernel/module.c
+@@ -270,6 +270,14 @@ int module_finalize(const Elf_Ehdr *hdr,
+                       orc_ip = s;
+       }
+ 
++      /*
++       * See alternative_instructions() for the ordering rules between the
++       * various patching types.
++       */
++      if (para) {
++              void *pseg = (void *)para->sh_addr;
++              apply_paravirt(pseg, pseg + para->sh_size);
++      }
+       if (alt) {
+               /* patch .altinstructions */
+               void *aseg = (void *)alt->sh_addr;
+@@ -283,11 +291,6 @@ int module_finalize(const Elf_Ehdr *hdr,
+                                           tseg, tseg + text->sh_size);
+       }
+ 
+-      if (para) {
+-              void *pseg = (void *)para->sh_addr;
+-              apply_paravirt(pseg, pseg + para->sh_size);
+-      }
+-
+       /* make jump label nops */
+       jump_label_apply_nops(me);
+ 
+diff --git a/drivers/atm/firestream.c b/drivers/atm/firestream.c
+index 3bc3c314a467b..4f67404fe64c7 100644
+--- a/drivers/atm/firestream.c
++++ b/drivers/atm/firestream.c
+@@ -1676,6 +1676,8 @@ static int fs_init(struct fs_dev *dev)
+       dev->hw_base = pci_resource_start(pci_dev, 0);
+ 
+       dev->base = ioremap(dev->hw_base, 0x1000);
++      if (!dev->base)
++              return 1;
+ 
+       reset_chip (dev);
+   
+diff --git a/drivers/gpu/drm/drm_connector.c b/drivers/gpu/drm/drm_connector.c
+index 2ba257b1ae208..e9b7926d9b663 100644
+--- a/drivers/gpu/drm/drm_connector.c
++++ b/drivers/gpu/drm/drm_connector.c
+@@ -2233,6 +2233,9 @@ EXPORT_SYMBOL(drm_connector_atomic_hdr_metadata_equal);
+ void drm_connector_set_vrr_capable_property(
+               struct drm_connector *connector, bool capable)
+ {
++      if (!connector->vrr_capable_property)
++              return;
++
+       drm_object_property_set_value(&connector->base,
+                                     connector->vrr_capable_property,
+                                     capable);
+diff --git a/drivers/net/can/rcar/rcar_canfd.c 
b/drivers/net/can/rcar/rcar_canfd.c
+index 388521e70837f..2f44c567ebd73 100644
+--- a/drivers/net/can/rcar/rcar_canfd.c
++++ b/drivers/net/can/rcar/rcar_canfd.c
+@@ -1720,15 +1720,15 @@ static int rcar_canfd_channel_probe(struct 
rcar_canfd_global *gpriv, u32 ch,
+ 
+       netif_napi_add(ndev, &priv->napi, rcar_canfd_rx_poll,
+                      RCANFD_NAPI_WEIGHT);
++      spin_lock_init(&priv->tx_lock);
++      devm_can_led_init(ndev);
++      gpriv->ch[priv->channel] = priv;
+       err = register_candev(ndev);
+       if (err) {
+               dev_err(&pdev->dev,
+                       "register_candev() failed, error %d\n", err);
+               goto fail_candev;
+       }
+-      spin_lock_init(&priv->tx_lock);
+-      devm_can_led_init(ndev);
+-      gpriv->ch[priv->channel] = priv;
+       dev_info(&pdev->dev, "device registered (channel %u)\n", priv->channel);
+       return 0;
+ 
+diff --git a/drivers/net/ethernet/broadcom/bnx2.c 
b/drivers/net/ethernet/broadcom/bnx2.c
+index 8c83973adca57..9d70d908c0646 100644
+--- a/drivers/net/ethernet/broadcom/bnx2.c
++++ b/drivers/net/ethernet/broadcom/bnx2.c
+@@ -8212,7 +8212,7 @@ bnx2_init_board(struct pci_dev *pdev, struct net_device 
*dev)
+               rc = dma_set_coherent_mask(&pdev->dev, persist_dma_mask);
+               if (rc) {
+                       dev_err(&pdev->dev,
+-                              "pci_set_consistent_dma_mask failed, 
aborting\n");
++                              "dma_set_coherent_mask failed, aborting\n");
+                       goto err_out_unmap;
+               }
+       } else if ((rc = dma_set_mask(&pdev->dev, DMA_BIT_MASK(32))) != 0) {
+diff --git a/drivers/net/ethernet/intel/ice/ice.h 
b/drivers/net/ethernet/intel/ice/ice.h
+index f23a741e30bfc..16b63f727efac 100644
+--- a/drivers/net/ethernet/intel/ice/ice.h
++++ b/drivers/net/ethernet/intel/ice/ice.h
+@@ -703,7 +703,16 @@ static inline void ice_set_rdma_cap(struct ice_pf *pf)
+  */
+ static inline void ice_clear_rdma_cap(struct ice_pf *pf)
+ {
+-      ice_unplug_aux_dev(pf);
++      /* We can directly unplug aux device here only if the flag bit
++       * ICE_FLAG_PLUG_AUX_DEV is not set because ice_unplug_aux_dev()
++       * could race with ice_plug_aux_dev() called from
++       * ice_service_task(). In this case we only clear that bit now and
++       * aux device will be unplugged later once ice_plug_aux_device()
++       * called from ice_service_task() finishes (see ice_service_task()).
++       */
++      if (!test_and_clear_bit(ICE_FLAG_PLUG_AUX_DEV, pf->flags))
++              ice_unplug_aux_dev(pf);
++
+       clear_bit(ICE_FLAG_RDMA_ENA, pf->flags);
+       clear_bit(ICE_FLAG_AUX_ENA, pf->flags);
+ }
+diff --git a/drivers/net/ethernet/intel/ice/ice_main.c 
b/drivers/net/ethernet/intel/ice/ice_main.c
+index 137a054dd1e31..524e6e65dc9d7 100644
+--- a/drivers/net/ethernet/intel/ice/ice_main.c
++++ b/drivers/net/ethernet/intel/ice/ice_main.c
+@@ -2143,9 +2143,19 @@ static void ice_service_task(struct work_struct *work)
+               return;
+       }
+ 
+-      if (test_and_clear_bit(ICE_FLAG_PLUG_AUX_DEV, pf->flags))
++      if (test_bit(ICE_FLAG_PLUG_AUX_DEV, pf->flags)) {
++              /* Plug aux device per request */
+               ice_plug_aux_dev(pf);
+ 
++              /* Mark plugging as done but check whether unplug was
++               * requested during ice_plug_aux_dev() call
++               * (e.g. from ice_clear_rdma_cap()) and if so then
++               * plug aux device.
++               */
++              if (!test_and_clear_bit(ICE_FLAG_PLUG_AUX_DEV, pf->flags))
++                      ice_unplug_aux_dev(pf);
++      }
++
+       if (test_and_clear_bit(ICE_FLAG_MTU_CHANGED, pf->flags)) {
+               struct iidc_event *event;
+ 
+diff --git a/drivers/net/ethernet/sfc/mcdi.c b/drivers/net/ethernet/sfc/mcdi.c
+index be6bfd6b7ec75..50baf62b2cbc6 100644
+--- a/drivers/net/ethernet/sfc/mcdi.c
++++ b/drivers/net/ethernet/sfc/mcdi.c
+@@ -163,9 +163,9 @@ static void efx_mcdi_send_request(struct efx_nic *efx, 
unsigned cmd,
+       /* Serialise with efx_mcdi_ev_cpl() and efx_mcdi_ev_death() */
+       spin_lock_bh(&mcdi->iface_lock);
+       ++mcdi->seqno;
++      seqno = mcdi->seqno & SEQ_MASK;
+       spin_unlock_bh(&mcdi->iface_lock);
+ 
+-      seqno = mcdi->seqno & SEQ_MASK;
+       xflags = 0;
+       if (mcdi->mode == MCDI_MODE_EVENTS)
+               xflags |= MCDI_HEADER_XFLAGS_EVREQ;
+diff --git a/drivers/net/wireless/intel/iwlwifi/iwl-nvm-parse.c 
b/drivers/net/wireless/intel/iwlwifi/iwl-nvm-parse.c
+index 475f951d4b1ef..fc40cca096c26 100644
+--- a/drivers/net/wireless/intel/iwlwifi/iwl-nvm-parse.c
++++ b/drivers/net/wireless/intel/iwlwifi/iwl-nvm-parse.c
+@@ -541,8 +541,7 @@ static const struct ieee80211_sband_iftype_data 
iwl_he_capa[] = {
+                       .has_he = true,
+                       .he_cap_elem = {
+                               .mac_cap_info[0] =
+-                                      IEEE80211_HE_MAC_CAP0_HTC_HE |
+-                                      IEEE80211_HE_MAC_CAP0_TWT_REQ,
++                                      IEEE80211_HE_MAC_CAP0_HTC_HE,
+                               .mac_cap_info[1] =
+                                       
IEEE80211_HE_MAC_CAP1_TF_MAC_PAD_DUR_16US |
+                                       
IEEE80211_HE_MAC_CAP1_MULTI_TID_AGG_RX_QOS_8,
+diff --git a/drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c 
b/drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c
+index 750217393f480..56c7a68a6491c 100644
+--- a/drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c
++++ b/drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c
+@@ -295,7 +295,6 @@ static const u8 he_if_types_ext_capa_sta[] = {
+        [0] = WLAN_EXT_CAPA1_EXT_CHANNEL_SWITCHING,
+        [2] = WLAN_EXT_CAPA3_MULTI_BSSID_SUPPORT,
+        [7] = WLAN_EXT_CAPA8_OPMODE_NOTIF,
+-       [9] = WLAN_EXT_CAPA10_TWT_REQUESTER_SUPPORT,
+ };
+ 
+ static const struct wiphy_iftype_ext_capab he_iftypes_ext_capa[] = {
+diff --git a/include/net/xfrm.h b/include/net/xfrm.h
+index 301a164f17e9f..358dfe6fefefc 100644
+--- a/include/net/xfrm.h
++++ b/include/net/xfrm.h
+@@ -1679,14 +1679,15 @@ int km_migrate(const struct xfrm_selector *sel, u8 
dir, u8 type,
+              const struct xfrm_migrate *m, int num_bundles,
+              const struct xfrm_kmaddress *k,
+              const struct xfrm_encap_tmpl *encap);
+-struct xfrm_state *xfrm_migrate_state_find(struct xfrm_migrate *m, struct net 
*net);
++struct xfrm_state *xfrm_migrate_state_find(struct xfrm_migrate *m, struct net 
*net,
++                                              u32 if_id);
+ struct xfrm_state *xfrm_state_migrate(struct xfrm_state *x,
+                                     struct xfrm_migrate *m,
+                                     struct xfrm_encap_tmpl *encap);
+ int xfrm_migrate(const struct xfrm_selector *sel, u8 dir, u8 type,
+                struct xfrm_migrate *m, int num_bundles,
+                struct xfrm_kmaddress *k, struct net *net,
+-               struct xfrm_encap_tmpl *encap);
++               struct xfrm_encap_tmpl *encap, u32 if_id);
+ #endif
+ 
+ int km_new_mapping(struct xfrm_state *x, xfrm_address_t *ipaddr, __be16 
sport);
+diff --git a/lib/Kconfig b/lib/Kconfig
+index 5e7165e6a346c..fa4b10322efcd 100644
+--- a/lib/Kconfig
++++ b/lib/Kconfig
+@@ -45,7 +45,6 @@ config BITREVERSE
+ config HAVE_ARCH_BITREVERSE
+       bool
+       default n
+-      depends on BITREVERSE
+       help
+         This option enables the use of hardware bit-reversal instructions on
+         architectures which support such operations.
+diff --git a/net/bluetooth/hci_core.c b/net/bluetooth/hci_core.c
+index 53f1b08017aab..c67390367cc2c 100644
+--- a/net/bluetooth/hci_core.c
++++ b/net/bluetooth/hci_core.c
+@@ -4083,6 +4083,7 @@ void hci_release_dev(struct hci_dev *hdev)
+       hci_dev_unlock(hdev);
+ 
+       ida_simple_remove(&hci_index_ida, hdev->id);
++      kfree_skb(hdev->sent_cmd);
+       kfree(hdev);
+ }
+ EXPORT_SYMBOL(hci_release_dev);
+diff --git a/net/ipv4/tcp.c b/net/ipv4/tcp.c
+index f48f1059b31a6..ef68d55e09448 100644
+--- a/net/ipv4/tcp.c
++++ b/net/ipv4/tcp.c
+@@ -1663,11 +1663,13 @@ int tcp_read_sock(struct sock *sk, read_descriptor_t 
*desc,
+                               if (!copied)
+                                       copied = used;
+                               break;
+-                      } else if (used <= len) {
+-                              seq += used;
+-                              copied += used;
+-                              offset += used;
+                       }
++                      if (WARN_ON_ONCE(used > len))
++                              used = len;
++                      seq += used;
++                      copied += used;
++                      offset += used;
++
+                       /* If recv_actor drops the lock (e.g. TCP splice
+                        * receive) the skb pointer might be invalid when
+                        * getting here: tcp_collapse might have deleted it
+diff --git a/net/key/af_key.c b/net/key/af_key.c
+index de24a7d474dfd..9bf52a09b5ff3 100644
+--- a/net/key/af_key.c
++++ b/net/key/af_key.c
+@@ -2623,7 +2623,7 @@ static int pfkey_migrate(struct sock *sk, struct sk_buff 
*skb,
+       }
+ 
+       return xfrm_migrate(&sel, dir, XFRM_POLICY_TYPE_MAIN, m, i,
+-                          kma ? &k : NULL, net, NULL);
++                          kma ? &k : NULL, net, NULL, 0);
+ 
+  out:
+       return err;
+diff --git a/net/mac80211/agg-tx.c b/net/mac80211/agg-tx.c
+index 74a878f213d3e..1deb3d874a4b9 100644
+--- a/net/mac80211/agg-tx.c
++++ b/net/mac80211/agg-tx.c
+@@ -9,7 +9,7 @@
+  * Copyright 2007, Michael Wu <[email protected]>
+  * Copyright 2007-2010, Intel Corporation
+  * Copyright(c) 2015-2017 Intel Deutschland GmbH
+- * Copyright (C) 2018 - 2021 Intel Corporation
++ * Copyright (C) 2018 - 2022 Intel Corporation
+  */
+ 
+ #include <linux/ieee80211.h>
+@@ -626,6 +626,14 @@ int ieee80211_start_tx_ba_session(struct ieee80211_sta 
*pubsta, u16 tid,
+               return -EINVAL;
+       }
+ 
++      if (test_sta_flag(sta, WLAN_STA_MFP) &&
++          !test_sta_flag(sta, WLAN_STA_AUTHORIZED)) {
++              ht_dbg(sdata,
++                     "MFP STA not authorized - deny BA session request %pM 
tid %d\n",
++                     sta->sta.addr, tid);
++              return -EINVAL;
++      }
++
+       /*
+        * 802.11n-2009 11.5.1.1: If the initiating STA is an HT STA, is a
+        * member of an IBSS, and has no other existing Block Ack agreement
+diff --git a/net/wireless/nl80211.c b/net/wireless/nl80211.c
+index 99564db14aa12..2f9ead98a9dad 100644
+--- a/net/wireless/nl80211.c
++++ b/net/wireless/nl80211.c
+@@ -17525,7 +17525,8 @@ void cfg80211_ch_switch_notify(struct net_device *dev,
+       wdev->chandef = *chandef;
+       wdev->preset_chandef = *chandef;
+ 
+-      if (wdev->iftype == NL80211_IFTYPE_STATION &&
++      if ((wdev->iftype == NL80211_IFTYPE_STATION ||
++           wdev->iftype == NL80211_IFTYPE_P2P_CLIENT) &&
+           !WARN_ON(!wdev->current_bss))
+               cfg80211_update_assoc_bss_entry(wdev, chandef->chan);
+ 
+diff --git a/net/xfrm/xfrm_policy.c b/net/xfrm/xfrm_policy.c
+index 37b149f632624..02099d113a0a5 100644
+--- a/net/xfrm/xfrm_policy.c
++++ b/net/xfrm/xfrm_policy.c
+@@ -4259,7 +4259,7 @@ static bool xfrm_migrate_selector_match(const struct 
xfrm_selector *sel_cmp,
+ }
+ 
+ static struct xfrm_policy *xfrm_migrate_policy_find(const struct 
xfrm_selector *sel,
+-                                                  u8 dir, u8 type, struct net 
*net)
++                                                  u8 dir, u8 type, struct net 
*net, u32 if_id)
+ {
+       struct xfrm_policy *pol, *ret = NULL;
+       struct hlist_head *chain;
+@@ -4268,7 +4268,8 @@ static struct xfrm_policy 
*xfrm_migrate_policy_find(const struct xfrm_selector *
+       spin_lock_bh(&net->xfrm.xfrm_policy_lock);
+       chain = policy_hash_direct(net, &sel->daddr, &sel->saddr, sel->family, 
dir);
+       hlist_for_each_entry(pol, chain, bydst) {
+-              if (xfrm_migrate_selector_match(sel, &pol->selector) &&
++              if ((if_id == 0 || pol->if_id == if_id) &&
++                  xfrm_migrate_selector_match(sel, &pol->selector) &&
+                   pol->type == type) {
+                       ret = pol;
+                       priority = ret->priority;
+@@ -4280,7 +4281,8 @@ static struct xfrm_policy 
*xfrm_migrate_policy_find(const struct xfrm_selector *
+               if ((pol->priority >= priority) && ret)
+                       break;
+ 
+-              if (xfrm_migrate_selector_match(sel, &pol->selector) &&
++              if ((if_id == 0 || pol->if_id == if_id) &&
++                  xfrm_migrate_selector_match(sel, &pol->selector) &&
+                   pol->type == type) {
+                       ret = pol;
+                       break;
+@@ -4396,7 +4398,7 @@ static int xfrm_migrate_check(const struct xfrm_migrate 
*m, int num_migrate)
+ int xfrm_migrate(const struct xfrm_selector *sel, u8 dir, u8 type,
+                struct xfrm_migrate *m, int num_migrate,
+                struct xfrm_kmaddress *k, struct net *net,
+-               struct xfrm_encap_tmpl *encap)
++               struct xfrm_encap_tmpl *encap, u32 if_id)
+ {
+       int i, err, nx_cur = 0, nx_new = 0;
+       struct xfrm_policy *pol = NULL;
+@@ -4415,14 +4417,14 @@ int xfrm_migrate(const struct xfrm_selector *sel, u8 
dir, u8 type,
+       }
+ 
+       /* Stage 1 - find policy */
+-      if ((pol = xfrm_migrate_policy_find(sel, dir, type, net)) == NULL) {
++      if ((pol = xfrm_migrate_policy_find(sel, dir, type, net, if_id)) == 
NULL) {
+               err = -ENOENT;
+               goto out;
+       }
+ 
+       /* Stage 2 - find and update state(s) */
+       for (i = 0, mp = m; i < num_migrate; i++, mp++) {
+-              if ((x = xfrm_migrate_state_find(mp, net))) {
++              if ((x = xfrm_migrate_state_find(mp, net, if_id))) {
+                       x_cur[nx_cur] = x;
+                       nx_cur++;
+                       xc = xfrm_state_migrate(x, mp, encap);
+diff --git a/net/xfrm/xfrm_state.c b/net/xfrm/xfrm_state.c
+index 100b4b3723e72..f7bfa19169688 100644
+--- a/net/xfrm/xfrm_state.c
++++ b/net/xfrm/xfrm_state.c
+@@ -1578,9 +1578,6 @@ static struct xfrm_state *xfrm_state_clone(struct 
xfrm_state *orig,
+       memcpy(&x->mark, &orig->mark, sizeof(x->mark));
+       memcpy(&x->props.smark, &orig->props.smark, sizeof(x->props.smark));
+ 
+-      if (xfrm_init_state(x) < 0)
+-              goto error;
+-
+       x->props.flags = orig->props.flags;
+       x->props.extra_flags = orig->props.extra_flags;
+ 
+@@ -1605,7 +1602,8 @@ out:
+       return NULL;
+ }
+ 
+-struct xfrm_state *xfrm_migrate_state_find(struct xfrm_migrate *m, struct net 
*net)
++struct xfrm_state *xfrm_migrate_state_find(struct xfrm_migrate *m, struct net 
*net,
++                                              u32 if_id)
+ {
+       unsigned int h;
+       struct xfrm_state *x = NULL;
+@@ -1621,6 +1619,8 @@ struct xfrm_state *xfrm_migrate_state_find(struct 
xfrm_migrate *m, struct net *n
+                               continue;
+                       if (m->reqid && x->props.reqid != m->reqid)
+                               continue;
++                      if (if_id != 0 && x->if_id != if_id)
++                              continue;
+                       if (!xfrm_addr_equal(&x->id.daddr, &m->old_daddr,
+                                            m->old_family) ||
+                           !xfrm_addr_equal(&x->props.saddr, &m->old_saddr,
+@@ -1636,6 +1636,8 @@ struct xfrm_state *xfrm_migrate_state_find(struct 
xfrm_migrate *m, struct net *n
+                       if (x->props.mode != m->mode ||
+                           x->id.proto != m->proto)
+                               continue;
++                      if (if_id != 0 && x->if_id != if_id)
++                              continue;
+                       if (!xfrm_addr_equal(&x->id.daddr, &m->old_daddr,
+                                            m->old_family) ||
+                           !xfrm_addr_equal(&x->props.saddr, &m->old_saddr,
+@@ -1662,6 +1664,11 @@ struct xfrm_state *xfrm_state_migrate(struct xfrm_state 
*x,
+       if (!xc)
+               return NULL;
+ 
++      xc->props.family = m->new_family;
++
++      if (xfrm_init_state(xc) < 0)
++              goto error;
++
+       memcpy(&xc->id.daddr, &m->new_daddr, sizeof(xc->id.daddr));
+       memcpy(&xc->props.saddr, &m->new_saddr, sizeof(xc->props.saddr));
+ 
+diff --git a/net/xfrm/xfrm_user.c b/net/xfrm/xfrm_user.c
+index b10f88822c0df..2acba159327cb 100644
+--- a/net/xfrm/xfrm_user.c
++++ b/net/xfrm/xfrm_user.c
+@@ -629,13 +629,8 @@ static struct xfrm_state *xfrm_state_construct(struct net 
*net,
+ 
+       xfrm_smark_init(attrs, &x->props.smark);
+ 
+-      if (attrs[XFRMA_IF_ID]) {
++      if (attrs[XFRMA_IF_ID])
+               x->if_id = nla_get_u32(attrs[XFRMA_IF_ID]);
+-              if (!x->if_id) {
+-                      err = -EINVAL;
+-                      goto error;
+-              }
+-      }
+ 
+       err = __xfrm_init_state(x, false, attrs[XFRMA_OFFLOAD_DEV]);
+       if (err)
+@@ -1431,13 +1426,8 @@ static int xfrm_alloc_userspi(struct sk_buff *skb, 
struct nlmsghdr *nlh,
+ 
+       mark = xfrm_mark_get(attrs, &m);
+ 
+-      if (attrs[XFRMA_IF_ID]) {
++      if (attrs[XFRMA_IF_ID])
+               if_id = nla_get_u32(attrs[XFRMA_IF_ID]);
+-              if (!if_id) {
+-                      err = -EINVAL;
+-                      goto out_noput;
+-              }
+-      }
+ 
+       if (p->info.seq) {
+               x = xfrm_find_acq_byseq(net, mark, p->info.seq);
+@@ -1750,13 +1740,8 @@ static struct xfrm_policy *xfrm_policy_construct(struct 
net *net, struct xfrm_us
+ 
+       xfrm_mark_get(attrs, &xp->mark);
+ 
+-      if (attrs[XFRMA_IF_ID]) {
++      if (attrs[XFRMA_IF_ID])
+               xp->if_id = nla_get_u32(attrs[XFRMA_IF_ID]);
+-              if (!xp->if_id) {
+-                      err = -EINVAL;
+-                      goto error;
+-              }
+-      }
+ 
+       return xp;
+  error:
+@@ -2607,6 +2592,7 @@ static int xfrm_do_migrate(struct sk_buff *skb, struct 
nlmsghdr *nlh,
+       int n = 0;
+       struct net *net = sock_net(skb->sk);
+       struct xfrm_encap_tmpl  *encap = NULL;
++      u32 if_id = 0;
+ 
+       if (attrs[XFRMA_MIGRATE] == NULL)
+               return -EINVAL;
+@@ -2631,7 +2617,10 @@ static int xfrm_do_migrate(struct sk_buff *skb, struct 
nlmsghdr *nlh,
+                       return -ENOMEM;
+       }
+ 
+-      err = xfrm_migrate(&pi->sel, pi->dir, type, m, n, kmp, net, encap);
++      if (attrs[XFRMA_IF_ID])
++              if_id = nla_get_u32(attrs[XFRMA_IF_ID]);
++
++      err = xfrm_migrate(&pi->sel, pi->dir, type, m, n, kmp, net, encap, 
if_id);
+ 
+       kfree(encap);
+ 
+diff --git a/tools/testing/selftests/vm/userfaultfd.c 
b/tools/testing/selftests/vm/userfaultfd.c
+index 81690f1737c80..138b011c667e2 100644
+--- a/tools/testing/selftests/vm/userfaultfd.c
++++ b/tools/testing/selftests/vm/userfaultfd.c
+@@ -46,6 +46,7 @@
+ #include <signal.h>
+ #include <poll.h>
+ #include <string.h>
++#include <linux/mman.h>
+ #include <sys/mman.h>
+ #include <sys/syscall.h>
+ #include <sys/ioctl.h>

Reply via email to