Junxiao Chang 7c687a893f net: stmmac: fix dma queue left shift overflow issue ... [ Upstream commit 613b065ca3 ] When queue number is > 4, left shift overflows due to 32 bits integer variable. Mask calculation is wrong for MTL_RXQ_DMA_MAP1. If CONFIG_UBSAN is enabled, kernel dumps below warning: [ 10.363842] ================================================================== [ 10.363882] UBSAN: shift-out-of-bounds in /build/linux-intel-iotg-5.15-8e6Tf4/ linux-intel-iotg-5.15-5.15.0/drivers/net/ethernet/stmicro/stmmac/dwmac4_core.c:224:12 [ 10.363929] shift exponent 40 is too large for 32-bit type 'unsigned int' [ 10.363953] CPU: 1 PID: 599 Comm: NetworkManager Not tainted 5.15.0-1003-intel-iotg [ 10.363956] Hardware name: ADLINK Technology Inc. LEC-EL/LEC-EL, BIOS 0.15.11 12/22/2021 [ 10.363958] Call Trace: [ 10.363960] <TASK> [ 10.363963] dump_stack_lvl+0x4a/0x5f [ 10.363971] dump_stack+0x10/0x12 [ 10.363974] ubsan_epilogue+0x9/0x45 [ 10.363976] __ubsan_handle_shift_out_of_bounds.cold+0x61/0x10e [ 10.363979] ? wake_up_klogd+0x4a/0x50 [ 10.363983] ? vprintk_emit+0x8f/0x240 [ 10.363986] dwmac4_map_mtl_dma.cold+0x42/0x91 [stmmac] [ 10.364001] stmmac_mtl_configuration+0x1ce/0x7a0 [stmmac] [ 10.364009] ? dwmac410_dma_init_channel+0x70/0x70 [stmmac] [ 10.364020] stmmac_hw_setup.cold+0xf/0xb14 [stmmac] [ 10.364030] ? page_pool_alloc_pages+0x4d/0x70 [ 10.364034] ? stmmac_clear_tx_descriptors+0x6e/0xe0 [stmmac] [ 10.364042] stmmac_open+0x39e/0x920 [stmmac] [ 10.364050] __dev_open+0xf0/0x1a0 [ 10.364054] __dev_change_flags+0x188/0x1f0 [ 10.364057] dev_change_flags+0x26/0x60 [ 10.364059] do_setlink+0x908/0xc40 [ 10.364062] ? do_setlink+0xb10/0xc40 [ 10.364064] ? __nla_validate_parse+0x4c/0x1a0 [ 10.364068] __rtnl_newlink+0x597/0xa10 [ 10.364072] ? __nla_reserve+0x41/0x50 [ 10.364074] ? __kmalloc_node_track_caller+0x1d0/0x4d0 [ 10.364079] ? pskb_expand_head+0x75/0x310 [ 10.364082] ? nla_reserve_64bit+0x21/0x40 [ 10.364086] ? skb_free_head+0x65/0x80 [ 10.364089] ? security_sock_rcv_skb+0x2c/0x50 [ 10.364094] ? __cond_resched+0x19/0x30 [ 10.364097] ? kmem_cache_alloc_trace+0x15a/0x420 [ 10.364100] rtnl_newlink+0x49/0x70 This change fixes MTL_RXQ_DMA_MAP1 mask issue and channel/queue mapping warning. Fixes: d43042f4da ("net: stmmac: mapping mtl rx to dma channel") BugLink: https://bugzilla.kernel.org/show_bug.cgi?id=216195 Reported-by: Cedric Wassenaar <cedric@bytespeed.nl> Signed-off-by: Junxiao Chang <junxiao.chang@intel.com> Reviewed-by: Florian Fainelli <f.fainelli@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>		2022-07-29 17:25:17 +02:00
..
accessibility	speakup-dectlk: Restore pitch setting	2022-02-16 12:56:37 +01:00
acpi	ACPI: video: Fix acpi_video_handles_brightness_key_presses()	2022-07-21 21:24:32 +02:00
amba	…
android	…
ata	ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()	2022-06-22 14:21:56 +02:00
atm	atm: eni: Add check for dma_map_single	2022-03-23 09:16:41 +01:00
auxdisplay	auxdisplay: lcd2s: Use proper API to free the instance of charlcd object	2022-03-08 19:12:47 +01:00
base	x86/bugs: Report AMD retbleed vulnerability	2022-07-23 12:54:02 +02:00
bcma	…
block	virtio-blk: modify the value type of num in virtio_queue_rq()	2022-07-12 16:35:11 +02:00
bluetooth	Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event	2022-07-12 16:35:08 +02:00
bus	bus: mhi: host: pci_generic: add Telit FN990	2022-07-29 17:25:06 +02:00
cdrom	…
char	random: update comment from copy_to_user() -> copy_to_iter()	2022-06-29 09:03:31 +02:00
clk	clk: renesas: r9a07g044: Update multiplier and divider values for PLL2/3	2022-07-12 16:34:58 +02:00
clocksource	clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup()	2022-07-07 17:53:32 +02:00
comedi	comedi: vmk80xx: fix expression for tx buffer size	2022-06-22 14:22:03 +02:00
connector	…
counter	…
cpufreq	cpufreq: pmac32-cpufreq: Fix refcount leak bug	2022-07-21 21:24:34 +02:00
cpuidle	cpuidle: PSCI: Improve support for suspend-to-RAM for PSCI OSI mode	2022-06-09 10:22:33 +02:00
crypto	crypto: sun8i-ss - handle zero sized sg	2022-06-09 10:23:11 +02:00
cxl	cxl/port: Hold port reference until decoder release	2022-07-12 16:34:58 +02:00
dax	dax: make sure inodes are flushed before destroy cache	2022-04-08 14:23:31 +02:00
dca	…
devfreq	PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events	2022-07-07 17:53:27 +02:00
dio	…
dma	dmaengine: idxd: force wq context cleanup on device disable path	2022-07-12 16:35:19 +02:00
dma-buf	dma-buf/poll: Get a file reference for outstanding fence callbacks	2022-07-12 16:34:51 +02:00
edac	EDAC/dmc520: Don't print an error for each unconfigured interrupt line	2022-06-09 10:22:47 +02:00
eisa	…
extcon	extcon: Modify extcon device to be created after driver data is set	2022-06-14 18:36:22 +02:00
firewire	firewire: core: extend card->lock in fw_core_handle_bus_reset	2022-05-12 12:30:05 +02:00
firmware	firmware: sysfb: Add sysfb_disable() helper function	2022-07-21 21:24:35 +02:00
fpga	…
fsi	fsi: occ: Force sequence numbering per OCC	2022-07-07 17:53:32 +02:00
gnss	…
gpio	gpio: winbond: Fix error code in winbond_gpio_get()	2022-06-29 09:03:26 +02:00
gpu	drm/amd/display: Ignore First MST Sideband Message Return Error	2022-07-29 17:25:12 +02:00
greybus	greybus: svc: fix an error handling bug in gb_svc_hello()	2022-04-08 14:22:50 +02:00
hid	HID: amd_sfh: Modify the hid name	2022-06-09 10:22:56 +02:00
hsi	…
hv	Drivers: hv: vmbus: Release cpu lock in error case	2022-06-22 14:22:00 +02:00
hwmon	hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails	2022-07-07 17:53:35 +02:00
hwspinlock	…
hwtracing	coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier	2022-06-14 18:36:06 +02:00
i2c	i2c: cadence: Change large transfer count reset logic to be unconditional	2022-07-29 17:25:17 +02:00
i3c	i3c: master: dw: check return of dw_i3c_master_get_free_pos()	2022-03-08 19:12:37 +01:00
idle	intel_idle: Disable IBRS during long idle	2022-07-23 12:54:04 +02:00
iio	iio: accel: mma8452: use the correct logic to get mma8452_data	2022-07-12 16:35:01 +02:00
infiniband	RDMA/irdma: Fix sleep from invalid context BUG	2022-07-29 17:25:10 +02:00
input	Input: goodix - try not to touch the reset-pin on x86/ACPI devices	2022-07-12 16:34:51 +02:00
interconnect	interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate	2022-06-09 10:23:31 +02:00
iommu	iommu/vt-d: Fix PCI bus rescan device hot add	2022-07-12 16:35:09 +02:00
ipack	…
irqchip	irqchip: or1k-pic: Undefine mask_ack for level triggered hardware	2022-07-21 21:24:40 +02:00
isdn	isdn: hfcpci: check the return value of dma_set_mask() in setup_hw()	2022-03-16 14:23:36 +01:00
leds	…
macintosh	macintosh: via-pmu and via-cuda need RTC_LIB	2022-06-09 10:23:12 +02:00
mailbox	mailbox: forward the hrtimer if not queued and under a lock	2022-06-09 10:23:12 +02:00
mcb	…
md	dm raid: fix KASAN warning in raid5_add_disks	2022-07-07 17:53:24 +02:00
media	media: davinci: vpif: fix use-after-free on driver unbind	2022-07-12 16:34:57 +02:00
memory	memory: renesas-rpc-if: Avoid unaligned bus access for HyperFlash	2022-07-12 16:34:52 +02:00
memstick	…
message	…
mfd	mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe()	2022-06-09 10:23:12 +02:00
misc	misc: rtsx_usb: set return value in rsp_buf alloc err path	2022-07-12 16:35:17 +02:00
mmc	mmc: mediatek: wait dma stop bit reset to 0	2022-06-29 09:03:19 +02:00
most	…
mtd	mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times	2022-07-29 17:25:15 +02:00
mux	…
net	net: stmmac: fix dma queue left shift overflow issue	2022-07-29 17:25:17 +02:00
nfc	NFC: nxp-nci: don't print header length mismatch on i2c error	2022-07-21 21:24:35 +02:00
ntb	ntb: intel: fix port config status offset for SPR	2022-03-08 19:12:44 +01:00
nubus	…
nvdimm	nvdimm: Fix badblocks clear off-by-one error	2022-07-07 17:53:24 +02:00
nvme	nvme: fix block device naming collision	2022-07-29 17:25:12 +02:00
nvmem	nvmem: core: Fix a conflict between MTD and NVMEM on wp-gpios property	2022-03-02 11:48:06 +01:00
of	of: overlay: do not break notify on NOTIFY_{OK|STOP}	2022-06-09 10:22:50 +02:00
opp	OPP: call of_node_put() on error path in _bandwidth_supported()	2022-06-09 10:23:13 +02:00
parisc	parisc: Fix CPU affinity for Lasi, WAX and Dino chips	2022-04-13 20:59:14 +02:00
parport	…
pci	PCI: hv: Fix interrupt mapping for multi-MSI	2022-07-29 17:25:07 +02:00
pcmcia	pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards	2022-06-14 18:36:02 +02:00
perf	arm_pmu: Validate single/group leader events	2022-04-27 14:39:00 +02:00
phy	phy: qcom-qmp: fix pipe-clock imbalance on power-on failure	2022-06-14 18:36:06 +02:00
pinctrl	pinctrl: ralink: Check for null return of devm_kcalloc	2022-07-29 17:25:10 +02:00
platform	platform/x86: hp-wmi: Ignore Sanitization Mode event	2022-07-21 21:24:34 +02:00
pnp	…
power	power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe	2022-07-29 17:25:10 +02:00
powercap	…
pps	pps: clients: gpio: Propagate return value from pps_gpio_probe	2022-04-08 14:23:44 +02:00
ps3	…
ptp	ptp: replace snprintf with sysfs_emit	2022-04-13 20:59:01 +02:00
pwm	pwm: raspberrypi-poe: Fix endianness in firmware struct	2022-06-14 18:36:04 +02:00
rapidio	…
ras	…
regulator	regulator: scmi: Fix refcount leak in scmi_regulator_probe	2022-06-09 10:23:00 +02:00
remoteproc	remoteproc: imx_rproc: Ignore create mem entry for resource table	2022-06-14 18:36:03 +02:00
reset	reset: tegra-bpmp: Restore Handle errors in BPMP response	2022-04-27 14:38:55 +02:00
rpmsg	rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails	2022-06-14 18:36:05 +02:00
rtc	rtc: ftrtc010: Fix error handling in ftrtc010_rtc_probe	2022-06-14 18:36:07 +02:00
s390	s390/stp: clock_delta should be signed	2022-06-09 10:23:21 +02:00
sbus	…
scsi	scsi: ufs: core: Drop loglevel of WriteBoost message	2022-07-29 17:25:12 +02:00
sh	…
siox	…
slimbus	slimbus: qcom: Fix IRQ check in qcom_slim_probe	2022-05-18 10:26:55 +02:00
soc	soc: ixp4xx/npe: Fix unused match warning	2022-07-21 21:24:40 +02:00
soundwire	soundwire: qcom: adjust autoenumeration timeout	2022-06-14 18:36:21 +02:00
spi	spi: amd: Limit max transfer and message size	2022-07-21 21:24:16 +02:00
spmi	…
ssb	…
staging	staging: r8188eu: Fix warning of array overflow in ioctl_linux.c	2022-06-22 14:21:59 +02:00
target	target: remove an incorrect unmap zeroes data deduction	2022-06-09 10:22:47 +02:00
tc	…
tee	optee: use driver internal tee_context for some rpc	2022-03-02 11:47:51 +01:00
thermal	thermal: devfreq_cooling: use local ops instead of global ops	2022-06-09 10:23:26 +02:00
thunderbolt	thunderbolt: Use different lane for second DisplayPort tunnel	2022-06-14 18:36:20 +02:00
tty	serial: mvebu-uart: correctly report configured baudrate value	2022-07-29 17:25:07 +02:00
uio	…
usb	usb: dwc3: gadget: Fix event pending check	2022-07-21 21:24:42 +02:00
vdpa	vduse: Tie vduse mgmtdev and its device	2022-07-21 21:24:33 +02:00
vfio	vfio/pci: Fix vf_token mechanism when device-specific VF drivers are used	2022-04-20 09:34:13 +02:00
vhost	vringh: Fix loop descriptors check in the indirect cases	2022-06-14 18:36:24 +02:00
video	fbdev: Disable sysfb device registration when removing conflicting FBs	2022-07-21 21:24:35 +02:00
virt	virt: acrn: fix a memory leak in acrn_dev_ioctl()	2022-04-08 14:23:50 +02:00
virtio	virtio_mmio: Restore guest page size on resume	2022-07-21 21:24:33 +02:00
visorbus	…
vlynq	…
vme	…
w1	w1: w1_therm: fixes w1_seq for ds28ea00 sensors	2022-04-13 20:59:11 +02:00
watchdog	watchdog: wdat_wdt: Stop watchdog when rebooting the system	2022-06-14 18:36:22 +02:00
xen	xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE	2022-07-21 21:24:23 +02:00
zorro	…
Kconfig	…
Makefile	…