ffe9ce5b43
https://source.android.com/docs/security/bulletin/2023-12-01 * tag 'ASB-2023-12-05_11-5.4' of https://android.googlesource.com/kernel/common: ANDROID: ABI: Update allowed list for QCOM BACKPORT: ALSA: compress: Allow pause and resume during draining UPSTREAM: netfilter: nf_tables: pass context to nft_set_destroy() UPSTREAM: netfilter: nf_tables: don't skip expired elements during walk ANDROID: GKI: db845c: Update symbols list and ABI on rpmsg_register_device_override ANDROID: Use GKI Dr. No OWNERS file ANDROID: Remove android/OWNERs file FROMGIT: Input: uinput - allow injecting event times ANDROID: fix up rpmsg_device ABI break ANDROID: fix up platform_device ABI break UPSTREAM: rpmsg: Fix possible refcount leak in rpmsg_register_device_override() UPSTREAM: rpmsg: glink: Release driver_override BACKPORT: rpmsg: Fix calling device_lock() on non-initialized device BACKPORT: rpmsg: Fix kfree() of static memory on setting driver_override UPSTREAM: rpmsg: Constify local variable in field store macro UPSTREAM: driver: platform: Add helper for safer setting of driver_override BACKPORT: firmware_loader: Abort all upcoming firmware load request once reboot triggered UPSTREAM: firmware_loader: Refactor kill_pending_fw_fallback_reqs() Revert "perf: Disallow mis-matched inherited group reads" Revert "xfrm: fix a data-race in xfrm_gen_index()" Revert "Bluetooth: hci_core: Fix build warnings" Revert "xfrm: interface: use DEV_STATS_INC()" Revert "netfilter: conntrack: allow sctp hearbeat after connection re-use" Revert "netfilter: conntrack: don't refresh sctp entries in closed state" Revert "netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp" Reapply "netfilter: conntrack: don't refresh sctp entries in closed state" Reapply "netfilter: conntrack: allow sctp hearbeat after connection re-use" Linux 5.4.259 xfrm6: fix inet6_dev refcount underflow problem Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name Bluetooth: hci_sock: fix slab oob read in create_monitor_event phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins phy: mapphone-mdm6600: Fix runtime PM for remove phy: mapphone-mdm6600: Fix runtime disable on probe ASoC: pxa: fix a memory leak in probe() gpio: vf610: set value before the direction to avoid a glitch s390/pci: fix iommu bitmap allocation perf: Disallow mis-matched inherited group reads USB: serial: option: add Fibocom to DELL custom modem FM101R-GL USB: serial: option: add entry for Sierra EM9191 with new firmware USB: serial: option: add Telit LE910C4-WWX 0x1035 composition ACPI: irq: Fix incorrect return value in acpi_register_gsi() Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" mmc: core: Capture correct oemid-bits for eMMC cards mmc: core: sdio: hold retuning if sdio in 1-bit mode mtd: physmap-core: Restore map_rom fallback mtd: spinand: micron: correct bitmask for ecc status mtd: rawnand: qcom: Unmap the right resource upon probe failure Bluetooth: hci_event: Fix using memcmp when comparing keys HID: multitouch: Add required quirk for Synaptics 0xcd7e device btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c drm: panel-orientation-quirks: Add quirk for One Mix 2S sky2: Make sure there is at least one frag_addr available regulator/core: Revert "fix kobject release warning and memory leak in regulator_register()" wifi: cfg80211: avoid leaking stack data into trace wifi: mac80211: allow transmitting EAPOL frames with tainted key Bluetooth: hci_core: Fix build warnings Bluetooth: Avoid redundant authentication HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event tracing: relax trace_event_eval_update() execution with cond_resched() ata: libata-eh: Fix compilation warning in ata_eh_link_report() gpio: timberdale: Fix potential deadlock on &tgpio->lock overlayfs: set ctime when setting mtime and atime i2c: mux: Avoid potential false error message in i2c_mux_add_adapter btrfs: initialize start_slot in btrfs_log_prealloc_extents btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA ACPI: resource: Add ASUS model S5402ZA to quirks ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA ACPI: resources: Add DMI-based legacy IRQ override quirk ACPI: Drop acpi_dev_irqresource_disabled() resource: Add irqresource_disabled() net: pktgen: Fix interface flags printing netfilter: nft_set_rbtree: .deactivate fails if element has expired neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve i40e: prevent crash on probe if hw registers have invalid values net: usb: smsc95xx: Fix an error code in smsc95xx_reset() ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr tun: prevent negative ifindex tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb tcp: fix excessive TLP and RACK timeouts from HZ rounding net: rfkill: gpio: prevent value glitch during probe net: ipv6: fix return value check in esp_remove_trailer net: ipv4: fix return value check in esp_remove_trailer xfrm: interface: use DEV_STATS_INC() xfrm: fix a data-race in xfrm_gen_index() qed: fix LL2 RX buffer allocation netfilter: nft_payload: fix wrong mac header matching KVM: x86: Mask LVTPC when handling a PMI regmap: fix NULL deref on lookup nfc: nci: fix possible NULL pointer dereference in send_acknowledge() ice: fix over-shifted variable Bluetooth: avoid memcmp() out of bounds warning Bluetooth: hci_event: Fix coding style Bluetooth: vhci: Fix race when opening vhci device Bluetooth: Fix a refcnt underflow problem for hci_conn Bluetooth: Reject connection with the device which has same BD_ADDR Bluetooth: hci_event: Ignore NULL link key usb: hub: Guard against accesses to uninitialized BOS descriptors Documentation: sysctl: align cells in second content column dev_forward_skb: do not scrub skb mark within the same name space ravb: Fix use-after-free issue in ravb_tx_timeout_work() powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE dmaengine: mediatek: Fix deadlock caused by synchronize_irq() x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call usb: gadget: udc-xilinx: replace memcpy with memcpy_toio pinctrl: avoid unsafe code pattern in find_pinctrl() cgroup: Remove duplicates in cgroup v1 tasks file Input: xpad - add PXN V900 support Input: psmouse - fix fast_reconnect function for PS/2 mode Input: powermate - fix use-after-free in powermate_config_complete ceph: fix incorrect revoked caps assert in ceph_fill_file_size() libceph: use kernel_connect() mcb: remove is_added flag from mcb_device struct iio: pressure: ms5611: ms5611_prom_is_valid false negative bug iio: pressure: dps310: Adjust Timeout Settings iio: pressure: bmp280: Fix NULL pointer exception usb: musb: Modify the "HWVers" register address usb: musb: Get the musb_qh poniter after musb_giveback usb: dwc3: Soft reset phy on probe for host net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer dmaengine: stm32-mdma: abort resume if no ongoing transfer workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() nfc: nci: assert requested protocol is valid net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() ixgbe: fix crash with empty VF macvlan list drm/vmwgfx: fix typo of sizeof argument xen-netback: use default TX queue size for vifs mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type ieee802154: ca8210: Fix a potential UAF in ca8210_probe ravb: Fix up dma_free_coherent() call in ravb_remove() drm/msm/dsi: skip the wait for video mode done if not applicable drm: etvnaviv: fix bad backport leading to warning net: prevent address rewrite in kernel_bind() quota: Fix slow quotaoff HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect pwm: hibvt: Explicitly set .polarity in .get_state() lib/test_meminit: fix off-by-one error in test_pages() RDMA/cxgb4: Check skb value for failure to allocate Reapply "ANDROID: Revert "tracing/ring-buffer: Have polling block on watermark"" Revert "ring-buffer: Update "shortest_full" in polling" Revert "ANDROID: Revert "tracing/ring-buffer: Have polling block on watermark"" Revert "net: bridge: use DEV_STATS_INC()" FROMLIST: lib/test_meminit: fix off-by-one error in test_pages() Linux 5.4.258 xen/events: replace evtchn_rwlock with RCU ima: rework CONFIG_IMA dependency block NFS: Fix a race in __nfs_list_for_each_server() parisc: Restore __ldcw_align for PA-RISC 2.0 processors RDMA/mlx5: Fix NULL string error RDMA/siw: Fix connection failure handling RDMA/uverbs: Fix typo of sizeof argument RDMA/cma: Fix truncation compilation warning in make_cma_ports gpio: pxa: disable pinctrl calls for MMP_GPIO gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() IB/mlx4: Fix the size of a buffer in add_port_entries() RDMA/core: Require admin capabilities to set system parameters cpupower: add Makefile dependencies for install targets sctp: update hb timer immediately after users change hb_interval sctp: update transport state when processing a dupcook packet tcp: fix delayed ACKs for MSS boundary condition tcp: fix quick-ack counting to count actual ACKs of new data net: stmmac: dwmac-stm32: fix resume on STM32 MCU netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp net: nfc: llcp: Add lock when modifying device list net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() net: fix possible store tearing in neigh_periodic_work() modpost: add missing else to the "of" check NFSv4: Fix a nfs4_state_manager() race NFS: Add a helper nfs_client_for_each_server() NFS4: Trace state recovery operation wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling wifi: mwifiex: Fix tlv_buf_left calculation scsi: target: core: Fix deadlock due to recursive locking drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close() qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet regmap: rbtree: Fix wrong register marked as in-cache when creating new node wifi: iwlwifi: dbg_ini: fix structure packing ubi: Refuse attaching if mtd's erasesize is 0 net: prevent rewrite of msg_name in sock_sendmsg() net: replace calls to sock->ops->connect() with kernel_connect() fs: binfmt_elf_efpic: fix personality for ELF-FDPIC scsi: zfcp: Fix a double put in zfcp_port_enqueue() ata: libata-sata: increase PMP SRST timeout to 10s Revert "PCI: qcom: Disable write access to read only registers for IP v2.3.3" ata: libata-core: Do not register PM operations for SAS ports rbd: take header_rwsem in rbd_dev_refresh() only when updating ata: libata-core: Fix port and device removal rbd: decouple parent info read-in from updating rbd_dev ata: libata-core: Fix ata_port_request_pm() locking rbd: decouple header read-in from updating rbd_dev->header rbd: move rbd_dev_refresh() definition ring-buffer: Update "shortest_full" in polling i2c: i801: unregister tco_pdev in i801_probe() error path net: thunderbolt: Fix TCPv6 GSO checksum calculation ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES btrfs: properly report 0 avail for very full file systems ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() serial: 8250_port: Check IRQ data before use Smack:- Use overlay inode label in smack_inode_copy_up() smack: Retrieve transmuting information in smack_inode_getsecurity() smack: Record transmuting in smk_transmuted i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc i40e: always propagate error value in i40e_set_vsi_promisc() ring-buffer: Avoid softlockup in ring_buffer_resize() selftests/ftrace: Correctly enable event in instance-event.tc i40e: improve locking of mac_filter_hash watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running watchdog: iTCO_wdt: No need to stop the timer in probe nvme-pci: do not set the NUMA node of device if it has none fbdev/sh7760fb: Depend on FB=y ncsi: Propagate carrier gain/loss events to the NCSI controller powerpc/watchpoints: Annotate atomic context in more places bpf: Clarify error expectations from bpf_clone_redirect spi: nxp-fspi: reset the FLSHxCR1 registers ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset() parisc: irq: Make irq_stack_union static to avoid sparse warning parisc: drivers: Fix sparse warning parisc: iosapic.c: Fix sparse warnings parisc: sba: Fix compile warning wrt list of SBA devices gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip xtensa: boot/lib: fix function prototypes xtensa: boot: don't add include-dirs xtensa: iss/network: make functions static xtensa: add default definition for XCHAL_HAVE_DIV32 bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot clk: tegra: fix error return case for recalc_rate scsi: qla2xxx: Fix deletion race condition MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled scsi: qla2xxx: Fix update_fcport for current_topology ata: libata: disallow dev-initiated LPM transitions to unsupported states Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN drm/amd/display: prevent potential division by zero errors i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() drm/amd/display: Fix LFC multiplier changing erratically gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() drm/amd/display: Reinstate LFC optimization netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP net: rds: Fix possible NULL-pointer dereference team: fix null-ptr-deref when team device type is changed net: bridge: use DEV_STATS_INC() net: hns3: add 5ms delay before clear firmware reset irq source dccp: fix dccp_v4_err()/dccp_v6_err() again powerpc/perf/hv-24x7: Update domain value check ipv4: fix null-deref in ipv4_link_failure i40e: Fix VF VLAN offloading when port VLAN is configured i40e: Fix warning message and call stack during rmmod i40e driver i40e: Remove scheduling while atomic possibility i40e: Fix for persistent lldp support ASoC: imx-audmix: Fix return error with devm_clk_get() selftests: tls: swap the TX and RX sockets in some tests ASoC: meson: spdifin: start hw on dai probe selftests/tls: Add {} to avoid static checker warning ext4: do not let fstrim block system suspend bpf: Avoid deadlock when using queue and stack maps from NMI ext4: move setting of trimmed bit into ext4_try_to_trim_range() netfilter: nf_tables: disallow element removal on anonymous sets ext4: replace the traditional ternary conditional operator with with max()/min() ext4: mark group as trimmed only if it was fully scanned ext4: change s_last_trim_minblks type to unsigned long ext4: scope ret locally in ext4_try_to_trim_range() ext4: add new helper interface ext4_try_to_trim_range() ext4: remove the 'group' parameter of ext4_trim_extent ata: libahci: clear pending interrupt status tracing: Increase trace array ref count on enable and filter files SUNRPC: Mark the cred for revalidation if the server rejects it NFS/pNFS: Report EINVAL errors from connect() to the server Revert "drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01" Revert "usb: typec: bus: verify partner exists in typec_altmode_attention" Revert "fs/nls: make load_nls() take a const parameter" Revert "ip_tunnels: use DEV_STATS_INC()" Linux 5.4.257 net/sched: Retire rsvp classifier drm/amdgpu: fix amdgpu_cs_p1_user_fence mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller ext4: fix rec_len verify error scsi: megaraid_sas: Fix deadlock on firmware crashdump i2c: aspeed: Reset the i2c controller when timeout occurs tracefs: Add missing lockdown check to tracefs_create_dir() nfsd: fix change_info in NFSv4 RENAME replies tracing: Have option files inc the trace array ref count tracing: Have current_trace inc the trace array ref count btrfs: fix lockdep splat and potential deadlock after failure running delayed items attr: block mode changes of symlinks md/raid1: fix error: ISO C90 forbids mixed declarations selftests: tracing: Fix to unmount tracefs for recovering environment btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super btrfs: add a helper to read the superblock metadata_uuid btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h perf tools: Add an option to build without libbfd perf jevents: Make build dependency on test JSONs tools features: Add feature test to check if libbfd has buildid support kobject: Add sanity check for kset->kobj.ktype in kset_register() media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning serial: cpm_uart: Avoid suspicious locking scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc media: pci: cx23885: replace BUG with error return media: tuners: qt1010: replace BUG_ON with a regular error media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() media: anysee: fix null-ptr-deref in anysee_master_xfer media: af9005: Fix null-ptr-deref in af9005_i2c_xfer media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer powerpc/pseries: fix possible memory leak in ibmebus_bus_init() jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() ext2: fix datatype of block number in ext2_xattr_set2() md: raid1: fix potential OOB in raid1_remove_disk() bus: ti-sysc: Configure uart quirks for k3 SoC drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() wifi: mac80211_hwsim: drop short frames alx: fix OOB-read compiler warning mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450 tpm_tis: Resend command to recover from data transfer errors crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() wifi: mwifiex: fix fortify warning wifi: ath9k: fix printk specifier devlink: remove reload failed checks in params get/set callbacks hw_breakpoint: fix single-stepping when using bpf_overflow_handler perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 kernel/fork: beware of __put_task_struct() calling context ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock btrfs: output extra debug info if we failed to find an inline backref autofs: fix memory leak of waitqueues in autofs_catatonic_mode parisc: Drop loops_per_jiffy from per_cpu struct drm/amd/display: Fix a bug when searching for insert_above_mpcc kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). ixgbe: fix timestamp configuration code net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() platform/mellanox: mlxbf-tmfifo: Drop jumbo frames mlxbf-tmfifo: sparse tags for config access platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors kcm: Fix memory leak in error path of kcm_sendmsg() r8152: check budget for r8152_poll() net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() net: ipv4: fix one memleak in __inet_del_ifa() clk: imx8mm: Move 1443X/1416X PLL clock structure to common place ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2 usb: typec: bus: verify partner exists in typec_altmode_attention usb: typec: tcpm: Refactor tcpm_handle_vdm_request usb: typec: tcpm: Refactor tcpm_handle_vdm_request payload handling perf tools: Handle old data in PERF_RECORD_ATTR perf hists browser: Fix hierarchy mode header mtd: rawnand: brcmnand: Fix potential false time out warning mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write mtd: rawnand: brcmnand: Fix crash during the panic_write btrfs: use the correct superblock to compare fsid in btrfs_validate_super btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART fuse: nlookup missing decrement in fuse_direntplus_link ata: pata_ftide010: Add missing MODULE_DESCRIPTION ata: sata_gemini: Add missing MODULE_DESCRIPTION sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory() net: hns3: fix the port information display when sfp is absent netfilter: nfnetlink_osf: avoid OOB read ip_tunnels: use DEV_STATS_INC() idr: fix param name in idr_alloc_cyclic() doc s390/zcrypt: don't leak memory if dev_set_name() fails igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 igc: Change IGC_MIN to allow set rx/tx value between 64 and 80 kcm: Destroy mutex in kcm_exit_net() net: sched: sch_qfq: Fix UAF in qfq_dequeue() af_unix: Fix data race around sk->sk_err. af_unix: Fix data-races around sk->sk_shutdown. af_unix: Fix data-race around unix_tot_inflight. af_unix: Fix data-races around user->unix_inflight. net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr veth: Fixing transmit return status for dropped packets igb: disable virtualization features on 82580 net: read sk->sk_family once in sk_mc_loop() ipv4: annotate data-races around fi->fib_dead sctp: annotate data-races around sk->sk_wmem_queued pwm: lpc32xx: Remove handling of PWM channels watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load perf top: Don't pass an ERR_PTR() directly to perf_session__delete() x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm() perf annotate bpf: Don't enclose non-debug code with an assert() kconfig: fix possible buffer overflow NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info soc: qcom: qmi_encdec: Restrict string length in decode clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock parisc: led: Reduce CPU overhead for disk & lan LED computation parisc: led: Fix LAN receive and transmit LEDs lib/test_meminit: allocate pages up to order MAX_ORDER drm/ast: Fix DRAM init on AST2200 fbdev/ep93xx-fb: Do not assign to struct fb_info.dev scsi: qla2xxx: Remove unsupported ql2xenabledif option scsi: qla2xxx: Turn off noisy message log scsi: qla2xxx: Fix erroneous link up failure scsi: qla2xxx: fix inconsistent TMF timeout net/ipv6: SKB symmetric hash should incorporate transport ports drm: fix double free for gbo in drm_gem_vram_init and drm_gem_vram_create udf: initialize newblock to 0 usb: typec: tcpci: clear the fault status bit serial: sc16is7xx: fix broken port 0 uart init sc16is7xx: Set iobase to device index cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug crypto: stm32 - fix loop iterating through scatterlist for DMA s390/ipl: add missing secure/has_secure file to ipl type 'unknown' pstore/ram: Check start of empty przs during init fsverity: skip PKCS#7 parser when keyring is empty net: handle ARPHRD_PPP in dev_is_mac_header_xmit() X.509: if signature is unsupported skip validation dccp: Fix out of bounds access in DCCP error handler dlm: fix plock lookup when using multiple lockspaces parisc: Fix /proc/cpuinfo output for lscpu procfs: block chmod on /proc/thread-self/comm Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset" ntb: Fix calculation ntb_transport_tx_free_entry() ntb: Clean up tx tail index on link down ntb: Drop packets when qp link is down media: dvb: symbol fixup for dvb_attach() xtensa: PMU: fix base address for the newer hardware backlight/lv5207lp: Compare against struct fb_info.device backlight/bd6107: Compare against struct fb_info.device backlight/gpio_backlight: Compare against struct fb_info.device ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch() ipmi_si: fix a memleak in try_smi_init() ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl PM / devfreq: Fix leak in devfreq_dev_release() igb: set max size RX buffer when store bad packet is enabled skbuff: skb_segment, Call zero copy functions before using skbuff frags netfilter: xt_sctp: validate the flag_info count netfilter: xt_u32: validate user space input netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU virtio_ring: fix avail_wrap_counter in virtqueue_add_packed cpufreq: Fix the race condition while updating the transition_task of policy dmaengine: ste_dma40: Add missing IRQ check in d40_probe um: Fix hostaudio build errors mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() rpmsg: glink: Add check for kstrdup phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 tracing: Fix race issue between cpu buffer write and swap x86/speculation: Mark all Skylake CPUs as vulnerable to GDS HID: multitouch: Correct devm device reference for hidinput input_dev name HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() RDMA/siw: Correct wrong debug message RDMA/siw: Balance the reference of cep->kref in the error path Revert "IB/isert: Fix incorrect release of isert connection" amba: bus: fix refcount leak serial: tegra: handle clk prepare error in tegra_uart_hw_init() scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock scsi: core: Use 32-bit hostnum in scsi_host_lookup() media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors media: ov2680: Fix vflip / hflip set functions media: ov2680: Fix ov2680_bayer_order() media: ov2680: Remove auto-gain and auto-exposure controls media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() media: i2c: ov5640: Configure HVP lines in s_power callback USB: gadget: f_mass_storage: Fix unused variable warning media: go7007: Remove redundant if statement iommu/vt-d: Fix to flush cache of PASID directory table IB/uverbs: Fix an potential error pointer dereference driver core: test_async: fix an error code dma-buf/sync_file: Fix docs syntax coresight: tmc: Explicit type conversions to prevent integer overflow scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly x86/APM: drop the duplicate APM_MINOR_DEV macro serial: sprd: Fix DMA buffer leak issue serial: sprd: Assign sprd_port after initialized to avoid wrong access serial: sprd: remove redundant sprd_port cleanup serial: sprd: getting port index via serial aliases only scsi: qla4xxx: Add length check when parsing nlattrs scsi: be2iscsi: Add length check when parsing nlattrs scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() media: mediatek: vcodec: Return NULL if no vdec_fb is found media: cx24120: Add retval check for cx24120_message_send() media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() media: dib7000p: Fix potential division by zero drivers: usb: smsusb: fix error handling code in smsusb_init_device media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() media: v4l2-fwnode: simplify v4l2_fwnode_parse_link media: v4l2-fwnode: fix v4l2_fwnode_parse_link handling NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN NFSD: da_addr_body field missing in some GETDEVICEINFO replies fs: lockd: avoid possible wrong NULL parameter jfs: validate max amount of blocks before allocation. powerpc/iommu: Fix notifiers being shared by PCI and VIO buses nfs/blocklayout: Use the passed in gfp flags wifi: ath10k: Use RMW accessors for changing LNKCTL drm/radeon: Use RMW accessors for changing LNKCTL drm/radeon: Prefer pcie_capability_read_word() drm/radeon: Replace numbers with PCI_EXP_LNKCTL2 definitions drm/radeon: Correct Transmit Margin masks drm/amdgpu: Use RMW accessors for changing LNKCTL drm/amdgpu: Prefer pcie_capability_read_word() drm/amdgpu: Replace numbers with PCI_EXP_LNKCTL2 definitions drm/amdgpu: Correct Transmit Margin masks PCI: Add #defines for Enter Compliance, Transmit Margin powerpc/fadump: reset dump area size if fadump memory reserve fails clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op PCI/ASPM: Use RMW accessors for changing LNKCTL PCI: pciehp: Use RMW accessors for changing LNKCTL PCI: Mark NVIDIA T4 GPUs to avoid bus reset clk: sunxi-ng: Modify mismatched function name drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() ipmi:ssif: Fix a memory leak when scanning for an adapter ipmi:ssif: Add check for kstrdup ALSA: ac97: Fix possible error value of *rac97 of: unittest: Fix overlay type in apply/revert check drm/mediatek: Fix potential memory leak if vmap() fail audit: fix possible soft lockup in __audit_inode_child() smackfs: Prevent underflow in smk_set_cipso() drm/msm/mdp5: Don't leak some plane state ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 drm/armada: Fix off-by-one error in armada_overlay_get_property() of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() drm/tegra: dpaux: Fix incorrect return value of platform_get_irq drm/tegra: Remove superfluous error messages around platform_get_irq() md/md-bitmap: hold 'reconfig_mutex' in backlog_store() md/bitmap: don't set max_write_behind if there is no write mostly device drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl' arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC ARM: dts: BCM53573: Fix Ethernet info for Luxul devices drm: adv7511: Fix low refresh rate register for ADV7533/5 ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split) ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210 ARM: dts: s5pv210: correct ethernet unit address in SMDKV210 ARM: dts: s5pv210: use defines for IRQ flags in SMDKV210 ARM: dts: s5pv210: add RTC 32 KHz clock in SMDKV210 ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split) ARM: dts: s3c64xx: align pinctrl with dtschema ARM: dts: s3c6410: align node SROM bus node name with dtschema in Mini6410 ARM: dts: s3c6410: move fixed clocks under root node in Mini6410 drm/etnaviv: fix dumping of active MMU context ARM: dts: BCM53573: Use updated "spi-gpio" binding properties ARM: dts: BCM53573: Add cells sizes to PCIe node ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() quota: fix dqput() to follow the guarantees dquot_srcu should provide quota: add new helper dquot_active() quota: rename dquot_active() to inode_quota_active() quota: factor out dquot_write_dquot() quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list drm/bridge: tc358764: Fix debug print parameter order netrom: Deny concurrent connect(). net/sched: sch_hfsc: Ensure inner classes have fsc curve mlxsw: i2c: Limit single transaction buffer size mlxsw: i2c: Fix chunk size setting in output mailbox buffer net: arcnet: Do not call kfree_skb() under local_irq_disable() wifi: ath9k: use IS_ERR() with debugfs_create_dir() wifi: mwifiex: avoid possible NULL skb pointer dereference wifi: ath9k: protect WMI command response buffer replacement with a lock wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx wifi: mwifiex: Fix missed return in oob checks failed path wifi: mwifiex: fix memory leak in mwifiex_histogram_read() fs: ocfs2: namei: check return value of ocfs2_add_entry() lwt: Check LWTUNNEL_XMIT_CONTINUE strictly lwt: Fix return values of BPF xmit ops hwrng: iproc-rng200 - Implement suspend and resume calls hwrng: iproc-rng200 - use semicolons rather than commas to separate statements crypto: caam - fix unchecked return value error Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() crypto: stm32 - Properly handle pm_runtime_get failing wifi: mwifiex: fix error recovery in PCIE buffer descriptor management mwifiex: switch from 'pci_' to 'dma_' API wifi: mwifiex: Fix OOB and integer underflow when rx packets can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() regmap: rbtree: Use alloc_flags for memory allocations tcp: tcp_enter_quickack_mode() should be static bpf: Clear the probe_addr for uprobe cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() perf/imx_ddr: don't enable counter0 if none of 4 counters are used x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved x86/boot: Annotate local functions x86/asm: Make more symbols local OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd() tmpfs: verify {g,u}id mount options correctly fs: Fix error checking for d_hash_and_lookup() new helper: lookup_positive_unlocked() eventfd: prevent underflow for eventfd semaphores eventfd: Export eventfd_ctx_do_read() reiserfs: Check the return value from __getblk() Revert "net: macsec: preserve ingress frame ordering" udf: Handle error when adding extent to a file udf: Check consistency of Space Bitmap Descriptor powerpc/32s: Fix assembler warning about r0 net: Avoid address overwrite in kernel_connect platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications ALSA: seq: oss: Fix racy open/close of MIDI devices scsi: storvsc: Always set no_report_opcodes cifs: add a warning when the in-flight count goes negative sctp: handle invalid error codes without calling BUG() bnx2x: fix page fault following EEH recovery netlabel: fix shift wrapping bug in netlbl_catmap_setlong() scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM net: usb: qmi_wwan: add Quectel EM05GV2 clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM security: keys: perform capable check only on privileged operations platform/x86: huawei-wmi: Silence ambient light sensor platform/x86: intel: hid: Always call BTNL ACPI method ASoC: atmel: Fix the 8K sample parameter in I2SC master ASoc: codecs: ES8316: Fix DMIC config fs/nls: make load_nls() take a const parameter s390/dasd: fix hanging device after request requeue s390/dasd: use correct number of retries for ERP requests m68k: Fix invalid .section syntax vxlan: generalize vxlan_parse_gpe_hdr and remove unused args ethernet: atheros: fix return value check in atl1c_tso_csum() ASoC: da7219: Check for failure reading AAD IRQ events ASoC: da7219: Flush pending AAD IRQ when suspending 9p: virtio: make sure 'offs' is initialized in zc_request pinctrl: amd: Don't show `Invalid config param` errors nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers() fsi: master-ast-cf: Add MODULE_FIRMWARE macro firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe serial: sc16is7xx: fix bug when first setting GPIO direction Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition staging: rtl8712: fix race condition HID: wacom: remove the battery when the EKR is off USB: serial: option: add FOXCONN T99W368/T99W373 product USB: serial: option: add Quectel EM05G variant (0x030e) modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index mmc: au1xmmc: force non-modular build and remove symbol_get usage ARM: pxa: remove use of symbol_get() erofs: ensure that the post-EOF tails are all zeroed Linux 5.4.256 Revert "MIPS: Alchemy: fix dbdma2" powerpc/pmac/smp: Drop unnecessary volatile qualifier powerpc/pmac/smp: Avoid unused-variable warnings Revert "drm/display/dp: Fix the DP DSC Receiver cap size" Revert "macsec: Fix traffic counters/statistics" Revert "macsec: use DEV_STATS_INC()" ANDROID: GKI: add back pm_runtime_get_if_in_use() Revert "interconnect: Add helpers for enabling/disabling a path" Revert "interconnect: Do not skip aggregation for disabled paths" Revert "ALSA: pcm: Set per-card upper limit of PCM buffer allocations" Revert "ALSA: pcm: Use SG-buffer only when direct DMA is available" Revert "ALSA: pcm: Fix potential data race at PCM memory allocation helpers" Revert "ALSA: pcm: Fix build error on m68k and others" Revert "Revert "ALSA: pcm: Use SG-buffer only when direct DMA is available"" Revert "ALSA: pcm: Check for null pointer of pointer substream before dereferencing it" Linux 5.4.255 dma-buf/sw_sync: Avoid recursive lock during fence signal pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' scsi: core: raid_class: Remove raid_component_add() scsi: snic: Fix double free in snic_tgt_create() irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable Documentation/sysctl: document page_lock_unfairness ALSA: pcm: Check for null pointer of pointer substream before dereferencing it interconnect: Do not skip aggregation for disabled paths Revert "ALSA: pcm: Use SG-buffer only when direct DMA is available" ALSA: pcm: Fix build error on m68k and others rtnetlink: Reject negative ifindexes in RTM_NEWLINK mm: allow a controlled amount of unfairness in the page lock x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 drm/display/dp: Fix the DP DSC Receiver cap size PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus media: vcodec: Fix potential array out-of-bounds in encoder queue_setup radix tree: remove unused variable lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels batman-adv: Hold rtnl lock during MTU update via netlink batman-adv: Fix batadv_v_ogm_aggr_send memory leak batman-adv: Fix TT global entry leak when client roamed back batman-adv: Do not get eth header before batadv_check_management_packet batman-adv: Don't increase MTU when set by user batman-adv: Trigger events for auto adjusted MTU nfsd: Fix race to FREE_STATEID and cl_revoked clk: Fix slab-out-of-bounds error in devm_clk_release() NFSv4: Fix dropped lock for racing OPEN and delegation return ibmveth: Use dcbf rather than dcbfl bonding: fix macvlan over alb bond support net: remove bond_slave_has_mac_rcu() net/sched: fix a qdisc modification with ambiguous command request igb: Avoid starting unnecessary workqueues net: validate veth and vxcan peer ifindexes net: bcmgenet: Fix return value check for fixed_phy_register() net: bgmac: Fix return value check for fixed_phy_register() ipvlan: Fix a reference count leak warning in ipvlan_ns_exit() dccp: annotate data-races in dccp_poll() sock: annotate data-races around prot->memory_pressure octeontx2-af: SDP: fix receive link config tracing: Fix memleak due to race between current_tracer and trace drm/amd/display: check TG is non-null before checking if enabled drm/amd/display: do not wait for mpc idle if tg is disabled ASoC: fsl_sai: Disable bit clock with transmitter ASoC: fsl_sai: Add new added registers and new bit definition ASoC: fsl_sai: Refine enable/disable TE/RE sequence in trigger() regmap: Account for register length in SMBus I/O limits ALSA: pcm: Fix potential data race at PCM memory allocation helpers ALSA: pcm: Use SG-buffer only when direct DMA is available ALSA: pcm: Set per-card upper limit of PCM buffer allocations dm integrity: reduce vmalloc space footprint on 32-bit architectures dm integrity: increase RECALC_SECTORS to improve recalculate speed fbdev: fix potential OOB read in fast_imageblit() fbdev: Fix sys_imageblit() for arbitrary image widths fbdev: Improve performance of sys_imageblit() MIPS: cpu-features: Use boot_cpu_type for CPU type based features MIPS: cpu-features: Enable octeon_cache by cpu_type fs: dlm: fix mismatch of plock results from userspace fs: dlm: use dlm_plock_info for do_unlock_close fs: dlm: change plock interrupted message to debug again fs: dlm: add pid to debug log dlm: replace usage of found with dedicated list iterator variable dlm: improve plock logging if interrupted PCI: acpiphp: Reassign resources on bridge if necessary net: phy: broadcom: stub c45 read/write for 54810 mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled virtio-net: set queues after driver_ok af_unix: Fix null-ptr-deref in unix_stream_sendpage(). netfilter: set default timeout to 3 secs for sctp shutdown send and recv state mmc: block: Fix in_flight[issue_type] value error mmc: wbsd: fix double mmc_free_host() in wbsd_init() cifs: Release folio lock on fscache read hit. ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. serial: 8250: Fix oops for port->pm on uart_change_pm() ASoC: meson: axg-tdm-formatter: fix channel slot allocation ASoC: rt5665: add missed regulator_bulk_disable ARM: dts: imx: Set default tuning step for imx6sx usdhc ARM: dts: imx: Set default tuning step for imx7d usdhc ARM: dts: imx: Adjust dma-apbh node name ARM: dts: imx7s: Drop dma-apb interrupt-names bus: ti-sysc: Flush posted write on enable before reset bus: ti-sysc: Improve reset to work with modules with no sysconfig net: do not allow gso_size to be set to GSO_BY_FRAGS sock: Fix misuse of sk_under_memory_pressure() net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset i40e: fix misleading debug logs team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves netfilter: nft_dynset: disallow object maps ipvs: fix racy memcpy in proc_do_sync_threshold selftests: mirror_gre_changes: Tighten up the TTL test match xfrm: add NULL check in xfrm_update_ae_params ip_vti: fix potential slab-use-after-free in decode_session6 ip6_vti: fix slab-use-after-free in decode_session6 xfrm: fix slab-use-after-free in decode_session6 xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c net: af_key: fix sadb_x_filter validation net: xfrm: Fix xfrm_address_filter OOB read btrfs: fix BUG_ON condition in btrfs_cancel_balance tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms powerpc/rtas_flash: allow user copy to flash block cache objects fbdev: mmp: fix value check in mmphw_probe() i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue virtio-mmio: don't break lifecycle of vm_dev virtio-mmio: Use to_virtio_mmio_device() to simply code virtio-mmio: convert to devm_platform_ioremap_resource nfsd: Remove incorrect check in nfsd4_validate_stateid nfsd4: kill warnings on testing stateids with mismatched clientids net/ncsi: Fix gma flag setting after response tracing/probes: Fix to update dynamic data counter if fetcharg uses it tracing/probes: Have process_fetch_insn() take a void * instead of pt_regs leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename mmc: sunxi: fix deferred probing mmc: bcm2835: fix deferred probing USB: dwc3: qcom: fix NULL-deref on suspend usb: dwc3: qcom: Add helper functions to enable,disable wake irqs interconnect: Add helpers for enabling/disabling a path interconnect: Move internal structs into a separate file irqchip/mips-gic: Use raw spinlock for gic_lock irqchip/mips-gic: Get rid of the reliance on irq_cpu_online() ALSA: hda: Fix unhandled register update during auto-suspend period PM: runtime: Add pm_runtime_get_if_active() PM-runtime: add tracepoints for usage_count changes iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE iio: addac: stx104: Fix race condition when converting analog-to-digital iio: addac: stx104: Fix race condition for stx104_write_raw() iio: stx104: Move to addac subdirectory iio: adc: stx104: Implement and utilize register structures iio: adc: stx104: Utilize iomap interface iio: add addac subdirectory IMA: allow/fix UML builds powerpc/kasan: Disable KCOV in KASAN code ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 drm/amdgpu: Fix potential fence use-after-free v2 Bluetooth: L2CAP: Fix use-after-free pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() gfs2: Fix possible data races in gfs2_show_options() usb: chipidea: imx: don't request QoS for imx8ulp media: platform: mediatek: vpu: fix NULL ptr dereference media: v4l2-mem2mem: add lock to protect parameter num_rdy FS: JFS: Check for read-only mounted filesystem in txBegin FS: JFS: Fix null-ptr-deref Read in txBegin MIPS: dec: prom: Address -Warray-bounds warning fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev udf: Fix uninitialized array access for some pathnames ovl: check type and offset of struct vfsmount in ovl_entry HID: add quirk for 03f0:464a HP Elite Presenter Mouse quota: fix warning in dqgrab() quota: Properly disable quotas when add_dquot_ref() fails ALSA: emu10k1: roll up loops in DSP setup code for Audigy drm/radeon: Fix integer overflow in radeon_cs_parser_init macsec: use DEV_STATS_INC() macsec: Fix traffic counters/statistics selftests: forwarding: tc_flower: Relax success criterion mmc: sdhci-f-sdh30: Replace with sdhci_pltfm mmc: sdhci_f_sdh30: convert to devm_platform_ioremap_resource Conflicts: drivers/devfreq/devfreq.c drivers/mmc/core/block.c drivers/rpmsg/qcom_glink_native.c include/net/tcp.h Change-Id: Ic33d13451796752e101ed9f9bdb8c80a580af8b5
1048 lines
36 KiB
ReStructuredText
1048 lines
36 KiB
ReStructuredText
===============================
|
|
Documentation for /proc/sys/vm/
|
|
===============================
|
|
|
|
kernel version 2.6.29
|
|
|
|
Copyright (c) 1998, 1999, Rik van Riel <riel@nl.linux.org>
|
|
|
|
Copyright (c) 2008 Peter W. Morreale <pmorreale@novell.com>
|
|
|
|
For general info and legal blurb, please look in index.rst.
|
|
|
|
------------------------------------------------------------------------------
|
|
|
|
This file contains the documentation for the sysctl files in
|
|
/proc/sys/vm and is valid for Linux kernel version 2.6.29.
|
|
|
|
The files in this directory can be used to tune the operation
|
|
of the virtual memory (VM) subsystem of the Linux kernel and
|
|
the writeout of dirty data to disk.
|
|
|
|
Default values and initialization routines for most of these
|
|
files can be found in mm/swap.c.
|
|
|
|
Currently, these files are in /proc/sys/vm:
|
|
|
|
- admin_reserve_kbytes
|
|
- block_dump
|
|
- compact_memory
|
|
- compact_unevictable_allowed
|
|
- dirty_background_bytes
|
|
- dirty_background_ratio
|
|
- dirty_bytes
|
|
- dirty_expire_centisecs
|
|
- dirty_ratio
|
|
- dirtytime_expire_seconds
|
|
- dirty_writeback_centisecs
|
|
- drop_caches
|
|
- extfrag_threshold
|
|
- extra_free_kbytes
|
|
- hugetlb_shm_group
|
|
- kswapd_threads
|
|
- laptop_mode
|
|
- legacy_va_layout
|
|
- lowmem_reserve_ratio
|
|
- max_map_count
|
|
- memory_failure_early_kill
|
|
- memory_failure_recovery
|
|
- min_free_kbytes
|
|
- min_slab_ratio
|
|
- min_unmapped_ratio
|
|
- mmap_min_addr
|
|
- mmap_rnd_bits
|
|
- mmap_rnd_compat_bits
|
|
- nr_hugepages
|
|
- nr_hugepages_mempolicy
|
|
- nr_overcommit_hugepages
|
|
- nr_trim_pages (only if CONFIG_MMU=n)
|
|
- numa_zonelist_order
|
|
- oom_dump_tasks
|
|
- reap_mem_on_sigkill
|
|
- oom_kill_allocating_task
|
|
- overcommit_kbytes
|
|
- overcommit_memory
|
|
- overcommit_ratio
|
|
- page-cluster
|
|
- page_lock_unfairness
|
|
- panic_on_oom
|
|
- percpu_pagelist_fraction
|
|
- stat_interval
|
|
- stat_refresh
|
|
- numa_stat
|
|
- swappiness
|
|
- unprivileged_userfaultfd
|
|
- user_reserve_kbytes
|
|
- vfs_cache_pressure
|
|
- watermark_boost_factor
|
|
- watermark_scale_factor
|
|
- zone_reclaim_mode
|
|
- want_old_faultaround_pte
|
|
|
|
admin_reserve_kbytes
|
|
====================
|
|
|
|
The amount of free memory in the system that should be reserved for users
|
|
with the capability cap_sys_admin.
|
|
|
|
admin_reserve_kbytes defaults to min(3% of free pages, 8MB)
|
|
|
|
That should provide enough for the admin to log in and kill a process,
|
|
if necessary, under the default overcommit 'guess' mode.
|
|
|
|
Systems running under overcommit 'never' should increase this to account
|
|
for the full Virtual Memory Size of programs used to recover. Otherwise,
|
|
root may not be able to log in to recover the system.
|
|
|
|
How do you calculate a minimum useful reserve?
|
|
|
|
sshd or login + bash (or some other shell) + top (or ps, kill, etc.)
|
|
|
|
For overcommit 'guess', we can sum resident set sizes (RSS).
|
|
On x86_64 this is about 8MB.
|
|
|
|
For overcommit 'never', we can take the max of their virtual sizes (VSZ)
|
|
and add the sum of their RSS.
|
|
On x86_64 this is about 128MB.
|
|
|
|
Changing this takes effect whenever an application requests memory.
|
|
|
|
|
|
block_dump
|
|
==========
|
|
|
|
block_dump enables block I/O debugging when set to a nonzero value. More
|
|
information on block I/O debugging is in Documentation/admin-guide/laptops/laptop-mode.rst.
|
|
|
|
|
|
compact_memory
|
|
==============
|
|
|
|
Available only when CONFIG_COMPACTION is set. When 1 is written to the file,
|
|
all zones are compacted such that free memory is available in contiguous
|
|
blocks where possible. This can be important for example in the allocation of
|
|
huge pages although processes will also directly compact memory as required.
|
|
|
|
|
|
compact_unevictable_allowed
|
|
===========================
|
|
|
|
Available only when CONFIG_COMPACTION is set. When set to 1, compaction is
|
|
allowed to examine the unevictable lru (mlocked pages) for pages to compact.
|
|
This should be used on systems where stalls for minor page faults are an
|
|
acceptable trade for large contiguous free memory. Set to 0 to prevent
|
|
compaction from moving pages that are unevictable. Default value is 1.
|
|
|
|
|
|
dirty_background_bytes
|
|
======================
|
|
|
|
Contains the amount of dirty memory at which the background kernel
|
|
flusher threads will start writeback.
|
|
|
|
Note:
|
|
dirty_background_bytes is the counterpart of dirty_background_ratio. Only
|
|
one of them may be specified at a time. When one sysctl is written it is
|
|
immediately taken into account to evaluate the dirty memory limits and the
|
|
other appears as 0 when read.
|
|
|
|
|
|
dirty_background_ratio
|
|
======================
|
|
|
|
Contains, as a percentage of total available memory that contains free pages
|
|
and reclaimable pages, the number of pages at which the background kernel
|
|
flusher threads will start writing out dirty data.
|
|
|
|
The total available memory is not equal to total system memory.
|
|
|
|
|
|
dirty_bytes
|
|
===========
|
|
|
|
Contains the amount of dirty memory at which a process generating disk writes
|
|
will itself start writeback.
|
|
|
|
Note: dirty_bytes is the counterpart of dirty_ratio. Only one of them may be
|
|
specified at a time. When one sysctl is written it is immediately taken into
|
|
account to evaluate the dirty memory limits and the other appears as 0 when
|
|
read.
|
|
|
|
Note: the minimum value allowed for dirty_bytes is two pages (in bytes); any
|
|
value lower than this limit will be ignored and the old configuration will be
|
|
retained.
|
|
|
|
|
|
dirty_expire_centisecs
|
|
======================
|
|
|
|
This tunable is used to define when dirty data is old enough to be eligible
|
|
for writeout by the kernel flusher threads. It is expressed in 100'ths
|
|
of a second. Data which has been dirty in-memory for longer than this
|
|
interval will be written out next time a flusher thread wakes up.
|
|
|
|
|
|
dirty_ratio
|
|
===========
|
|
|
|
Contains, as a percentage of total available memory that contains free pages
|
|
and reclaimable pages, the number of pages at which a process which is
|
|
generating disk writes will itself start writing out dirty data.
|
|
|
|
The total available memory is not equal to total system memory.
|
|
|
|
|
|
dirtytime_expire_seconds
|
|
========================
|
|
|
|
When a lazytime inode is constantly having its pages dirtied, the inode with
|
|
an updated timestamp will never get chance to be written out. And, if the
|
|
only thing that has happened on the file system is a dirtytime inode caused
|
|
by an atime update, a worker will be scheduled to make sure that inode
|
|
eventually gets pushed out to disk. This tunable is used to define when dirty
|
|
inode is old enough to be eligible for writeback by the kernel flusher threads.
|
|
And, it is also used as the interval to wakeup dirtytime_writeback thread.
|
|
|
|
|
|
dirty_writeback_centisecs
|
|
=========================
|
|
|
|
The kernel flusher threads will periodically wake up and write `old` data
|
|
out to disk. This tunable expresses the interval between those wakeups, in
|
|
100'ths of a second.
|
|
|
|
Setting this to zero disables periodic writeback altogether.
|
|
|
|
|
|
drop_caches
|
|
===========
|
|
|
|
Writing to this will cause the kernel to drop clean caches, as well as
|
|
reclaimable slab objects like dentries and inodes. Once dropped, their
|
|
memory becomes free.
|
|
|
|
To free pagecache::
|
|
|
|
echo 1 > /proc/sys/vm/drop_caches
|
|
|
|
To free reclaimable slab objects (includes dentries and inodes)::
|
|
|
|
echo 2 > /proc/sys/vm/drop_caches
|
|
|
|
To free slab objects and pagecache::
|
|
|
|
echo 3 > /proc/sys/vm/drop_caches
|
|
|
|
This is a non-destructive operation and will not free any dirty objects.
|
|
To increase the number of objects freed by this operation, the user may run
|
|
`sync` prior to writing to /proc/sys/vm/drop_caches. This will minimize the
|
|
number of dirty objects on the system and create more candidates to be
|
|
dropped.
|
|
|
|
This file is not a means to control the growth of the various kernel caches
|
|
(inodes, dentries, pagecache, etc...) These objects are automatically
|
|
reclaimed by the kernel when memory is needed elsewhere on the system.
|
|
|
|
Use of this file can cause performance problems. Since it discards cached
|
|
objects, it may cost a significant amount of I/O and CPU to recreate the
|
|
dropped objects, especially if they were under heavy use. Because of this,
|
|
use outside of a testing or debugging environment is not recommended.
|
|
|
|
You may see informational messages in your kernel log when this file is
|
|
used::
|
|
|
|
cat (1234): drop_caches: 3
|
|
|
|
These are informational only. They do not mean that anything is wrong
|
|
with your system. To disable them, echo 4 (bit 2) into drop_caches.
|
|
|
|
|
|
extfrag_threshold
|
|
=================
|
|
|
|
This parameter affects whether the kernel will compact memory or direct
|
|
reclaim to satisfy a high-order allocation. The extfrag/extfrag_index file in
|
|
debugfs shows what the fragmentation index for each order is in each zone in
|
|
the system. Values tending towards 0 imply allocations would fail due to lack
|
|
of memory, values towards 1000 imply failures are due to fragmentation and -1
|
|
implies that the allocation will succeed as long as watermarks are met.
|
|
|
|
The kernel will not compact memory in a zone if the
|
|
fragmentation index is <= extfrag_threshold. The default value is 500.
|
|
|
|
|
|
highmem_is_dirtyable
|
|
====================
|
|
|
|
Available only for systems with CONFIG_HIGHMEM enabled (32b systems).
|
|
|
|
This parameter controls whether the high memory is considered for dirty
|
|
writers throttling. This is not the case by default which means that
|
|
only the amount of memory directly visible/usable by the kernel can
|
|
be dirtied. As a result, on systems with a large amount of memory and
|
|
lowmem basically depleted writers might be throttled too early and
|
|
streaming writes can get very slow.
|
|
|
|
Changing the value to non zero would allow more memory to be dirtied
|
|
and thus allow writers to write more data which can be flushed to the
|
|
storage more effectively. Note this also comes with a risk of pre-mature
|
|
OOM killer because some writers (e.g. direct block device writes) can
|
|
only use the low memory and they can fill it up with dirty data without
|
|
any throttling.
|
|
|
|
|
|
extra_free_kbytes
|
|
|
|
This parameter tells the VM to keep extra free memory between the threshold
|
|
where background reclaim (kswapd) kicks in, and the threshold where direct
|
|
reclaim (by allocating processes) kicks in.
|
|
|
|
This is useful for workloads that require low latency memory allocations
|
|
and have a bounded burstiness in memory allocations, for example a
|
|
realtime application that receives and transmits network traffic
|
|
(causing in-kernel memory allocations) with a maximum total message burst
|
|
size of 200MB may need 200MB of extra free memory to avoid direct reclaim
|
|
related latencies.
|
|
|
|
==============================================================
|
|
|
|
hugetlb_shm_group
|
|
=================
|
|
|
|
hugetlb_shm_group contains group id that is allowed to create SysV
|
|
shared memory segment using hugetlb page.
|
|
|
|
kswapd_threads
|
|
==============
|
|
kswapd_threads allows you to control the number of kswapd threads per node
|
|
running on the system. This provides the ability to devote additional CPU
|
|
resources toward proactive page replacement with the goal of reducing
|
|
direct reclaims. When direct reclaims are prevented, the CPU consumed
|
|
by them is prevented as well. Depending on the workload, the result can
|
|
cause aggregate CPU usage on the system to go up, down or stay the same.
|
|
|
|
More aggressive page replacement can reduce direct reclaims which cause
|
|
latency for tasks and decrease throughput when doing filesystem IO through
|
|
the pagecache. Direct reclaims are recorded using the allocstall counter
|
|
in /proc/vmstat.
|
|
|
|
The default value is 1 and the range of acceptible values are 1-16.
|
|
Always start with lower values in the 2-6 range. Higher values should
|
|
be justified with testing. If direct reclaims occur in spite of high
|
|
values, the cost of direct reclaims (in latency) that occur can be
|
|
higher due to increased lock contention.
|
|
|
|
laptop_mode
|
|
===========
|
|
|
|
laptop_mode is a knob that controls "laptop mode". All the things that are
|
|
controlled by this knob are discussed in Documentation/admin-guide/laptops/laptop-mode.rst.
|
|
|
|
|
|
legacy_va_layout
|
|
================
|
|
|
|
If non-zero, this sysctl disables the new 32-bit mmap layout - the kernel
|
|
will use the legacy (2.4) layout for all processes.
|
|
|
|
|
|
lowmem_reserve_ratio
|
|
====================
|
|
|
|
For some specialised workloads on highmem machines it is dangerous for
|
|
the kernel to allow process memory to be allocated from the "lowmem"
|
|
zone. This is because that memory could then be pinned via the mlock()
|
|
system call, or by unavailability of swapspace.
|
|
|
|
And on large highmem machines this lack of reclaimable lowmem memory
|
|
can be fatal.
|
|
|
|
So the Linux page allocator has a mechanism which prevents allocations
|
|
which *could* use highmem from using too much lowmem. This means that
|
|
a certain amount of lowmem is defended from the possibility of being
|
|
captured into pinned user memory.
|
|
|
|
(The same argument applies to the old 16 megabyte ISA DMA region. This
|
|
mechanism will also defend that region from allocations which could use
|
|
highmem or lowmem).
|
|
|
|
The `lowmem_reserve_ratio` tunable determines how aggressive the kernel is
|
|
in defending these lower zones.
|
|
|
|
If you have a machine which uses highmem or ISA DMA and your
|
|
applications are using mlock(), or if you are running with no swap then
|
|
you probably should change the lowmem_reserve_ratio setting.
|
|
|
|
The lowmem_reserve_ratio is an array. You can see them by reading this file::
|
|
|
|
% cat /proc/sys/vm/lowmem_reserve_ratio
|
|
256 256 32
|
|
|
|
But, these values are not used directly. The kernel calculates # of protection
|
|
pages for each zones from them. These are shown as array of protection pages
|
|
in /proc/zoneinfo like followings. (This is an example of x86-64 box).
|
|
Each zone has an array of protection pages like this::
|
|
|
|
Node 0, zone DMA
|
|
pages free 1355
|
|
min 3
|
|
low 3
|
|
high 4
|
|
:
|
|
:
|
|
numa_other 0
|
|
protection: (0, 2004, 2004, 2004)
|
|
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|
|
pagesets
|
|
cpu: 0 pcp: 0
|
|
:
|
|
|
|
These protections are added to score to judge whether this zone should be used
|
|
for page allocation or should be reclaimed.
|
|
|
|
In this example, if normal pages (index=2) are required to this DMA zone and
|
|
watermark[WMARK_HIGH] is used for watermark, the kernel judges this zone should
|
|
not be used because pages_free(1355) is smaller than watermark + protection[2]
|
|
(4 + 2004 = 2008). If this protection value is 0, this zone would be used for
|
|
normal page requirement. If requirement is DMA zone(index=0), protection[0]
|
|
(=0) is used.
|
|
|
|
zone[i]'s protection[j] is calculated by following expression::
|
|
|
|
(i < j):
|
|
zone[i]->protection[j]
|
|
= (total sums of managed_pages from zone[i+1] to zone[j] on the node)
|
|
/ lowmem_reserve_ratio[i];
|
|
(i = j):
|
|
(should not be protected. = 0;
|
|
(i > j):
|
|
(not necessary, but looks 0)
|
|
|
|
The default values of lowmem_reserve_ratio[i] are
|
|
|
|
=== ====================================
|
|
256 (if zone[i] means DMA or DMA32 zone)
|
|
32 (others)
|
|
=== ====================================
|
|
|
|
As above expression, they are reciprocal number of ratio.
|
|
256 means 1/256. # of protection pages becomes about "0.39%" of total managed
|
|
pages of higher zones on the node.
|
|
|
|
If you would like to protect more pages, smaller values are effective.
|
|
The minimum value is 1 (1/1 -> 100%). The value less than 1 completely
|
|
disables protection of the pages.
|
|
|
|
|
|
max_map_count:
|
|
==============
|
|
|
|
This file contains the maximum number of memory map areas a process
|
|
may have. Memory map areas are used as a side-effect of calling
|
|
malloc, directly by mmap, mprotect, and madvise, and also when loading
|
|
shared libraries.
|
|
|
|
While most applications need less than a thousand maps, certain
|
|
programs, particularly malloc debuggers, may consume lots of them,
|
|
e.g., up to one or two maps per allocation.
|
|
|
|
The default value is 65536.
|
|
|
|
|
|
memory_failure_early_kill:
|
|
==========================
|
|
|
|
Control how to kill processes when uncorrected memory error (typically
|
|
a 2bit error in a memory module) is detected in the background by hardware
|
|
that cannot be handled by the kernel. In some cases (like the page
|
|
still having a valid copy on disk) the kernel will handle the failure
|
|
transparently without affecting any applications. But if there is
|
|
no other uptodate copy of the data it will kill to prevent any data
|
|
corruptions from propagating.
|
|
|
|
1: Kill all processes that have the corrupted and not reloadable page mapped
|
|
as soon as the corruption is detected. Note this is not supported
|
|
for a few types of pages, like kernel internally allocated data or
|
|
the swap cache, but works for the majority of user pages.
|
|
|
|
0: Only unmap the corrupted page from all processes and only kill a process
|
|
who tries to access it.
|
|
|
|
The kill is done using a catchable SIGBUS with BUS_MCEERR_AO, so processes can
|
|
handle this if they want to.
|
|
|
|
This is only active on architectures/platforms with advanced machine
|
|
check handling and depends on the hardware capabilities.
|
|
|
|
Applications can override this setting individually with the PR_MCE_KILL prctl
|
|
|
|
|
|
memory_failure_recovery
|
|
=======================
|
|
|
|
Enable memory failure recovery (when supported by the platform)
|
|
|
|
1: Attempt recovery.
|
|
|
|
0: Always panic on a memory failure.
|
|
|
|
|
|
min_free_kbytes
|
|
===============
|
|
|
|
This is used to force the Linux VM to keep a minimum number
|
|
of kilobytes free. The VM uses this number to compute a
|
|
watermark[WMARK_MIN] value for each lowmem zone in the system.
|
|
Each lowmem zone gets a number of reserved free pages based
|
|
proportionally on its size.
|
|
|
|
Some minimal amount of memory is needed to satisfy PF_MEMALLOC
|
|
allocations; if you set this to lower than 1024KB, your system will
|
|
become subtly broken, and prone to deadlock under high loads.
|
|
|
|
Setting this too high will OOM your machine instantly.
|
|
|
|
|
|
min_slab_ratio
|
|
==============
|
|
|
|
This is available only on NUMA kernels.
|
|
|
|
A percentage of the total pages in each zone. On Zone reclaim
|
|
(fallback from the local zone occurs) slabs will be reclaimed if more
|
|
than this percentage of pages in a zone are reclaimable slab pages.
|
|
This insures that the slab growth stays under control even in NUMA
|
|
systems that rarely perform global reclaim.
|
|
|
|
The default is 5 percent.
|
|
|
|
Note that slab reclaim is triggered in a per zone / node fashion.
|
|
The process of reclaiming slab memory is currently not node specific
|
|
and may not be fast.
|
|
|
|
|
|
min_unmapped_ratio
|
|
==================
|
|
|
|
This is available only on NUMA kernels.
|
|
|
|
This is a percentage of the total pages in each zone. Zone reclaim will
|
|
only occur if more than this percentage of pages are in a state that
|
|
zone_reclaim_mode allows to be reclaimed.
|
|
|
|
If zone_reclaim_mode has the value 4 OR'd, then the percentage is compared
|
|
against all file-backed unmapped pages including swapcache pages and tmpfs
|
|
files. Otherwise, only unmapped pages backed by normal files but not tmpfs
|
|
files and similar are considered.
|
|
|
|
The default is 1 percent.
|
|
|
|
|
|
mmap_min_addr
|
|
=============
|
|
|
|
This file indicates the amount of address space which a user process will
|
|
be restricted from mmapping. Since kernel null dereference bugs could
|
|
accidentally operate based on the information in the first couple of pages
|
|
of memory userspace processes should not be allowed to write to them. By
|
|
default this value is set to 0 and no protections will be enforced by the
|
|
security module. Setting this value to something like 64k will allow the
|
|
vast majority of applications to work correctly and provide defense in depth
|
|
against future potential kernel bugs.
|
|
|
|
|
|
mmap_rnd_bits
|
|
=============
|
|
|
|
This value can be used to select the number of bits to use to
|
|
determine the random offset to the base address of vma regions
|
|
resulting from mmap allocations on architectures which support
|
|
tuning address space randomization. This value will be bounded
|
|
by the architecture's minimum and maximum supported values.
|
|
|
|
This value can be changed after boot using the
|
|
/proc/sys/vm/mmap_rnd_bits tunable
|
|
|
|
|
|
mmap_rnd_compat_bits
|
|
====================
|
|
|
|
This value can be used to select the number of bits to use to
|
|
determine the random offset to the base address of vma regions
|
|
resulting from mmap allocations for applications run in
|
|
compatibility mode on architectures which support tuning address
|
|
space randomization. This value will be bounded by the
|
|
architecture's minimum and maximum supported values.
|
|
|
|
This value can be changed after boot using the
|
|
/proc/sys/vm/mmap_rnd_compat_bits tunable
|
|
|
|
|
|
nr_hugepages
|
|
============
|
|
|
|
Change the minimum size of the hugepage pool.
|
|
|
|
See Documentation/admin-guide/mm/hugetlbpage.rst
|
|
|
|
|
|
nr_hugepages_mempolicy
|
|
======================
|
|
|
|
Change the size of the hugepage pool at run-time on a specific
|
|
set of NUMA nodes.
|
|
|
|
See Documentation/admin-guide/mm/hugetlbpage.rst
|
|
|
|
|
|
nr_overcommit_hugepages
|
|
=======================
|
|
|
|
Change the maximum size of the hugepage pool. The maximum is
|
|
nr_hugepages + nr_overcommit_hugepages.
|
|
|
|
See Documentation/admin-guide/mm/hugetlbpage.rst
|
|
|
|
|
|
nr_trim_pages
|
|
=============
|
|
|
|
This is available only on NOMMU kernels.
|
|
|
|
This value adjusts the excess page trimming behaviour of power-of-2 aligned
|
|
NOMMU mmap allocations.
|
|
|
|
A value of 0 disables trimming of allocations entirely, while a value of 1
|
|
trims excess pages aggressively. Any value >= 1 acts as the watermark where
|
|
trimming of allocations is initiated.
|
|
|
|
The default value is 1.
|
|
|
|
See Documentation/nommu-mmap.txt for more information.
|
|
|
|
|
|
numa_zonelist_order
|
|
===================
|
|
|
|
This sysctl is only for NUMA and it is deprecated. Anything but
|
|
Node order will fail!
|
|
|
|
'where the memory is allocated from' is controlled by zonelists.
|
|
|
|
(This documentation ignores ZONE_HIGHMEM/ZONE_DMA32 for simple explanation.
|
|
you may be able to read ZONE_DMA as ZONE_DMA32...)
|
|
|
|
In non-NUMA case, a zonelist for GFP_KERNEL is ordered as following.
|
|
ZONE_NORMAL -> ZONE_DMA
|
|
This means that a memory allocation request for GFP_KERNEL will
|
|
get memory from ZONE_DMA only when ZONE_NORMAL is not available.
|
|
|
|
In NUMA case, you can think of following 2 types of order.
|
|
Assume 2 node NUMA and below is zonelist of Node(0)'s GFP_KERNEL::
|
|
|
|
(A) Node(0) ZONE_NORMAL -> Node(0) ZONE_DMA -> Node(1) ZONE_NORMAL
|
|
(B) Node(0) ZONE_NORMAL -> Node(1) ZONE_NORMAL -> Node(0) ZONE_DMA.
|
|
|
|
Type(A) offers the best locality for processes on Node(0), but ZONE_DMA
|
|
will be used before ZONE_NORMAL exhaustion. This increases possibility of
|
|
out-of-memory(OOM) of ZONE_DMA because ZONE_DMA is tend to be small.
|
|
|
|
Type(B) cannot offer the best locality but is more robust against OOM of
|
|
the DMA zone.
|
|
|
|
Type(A) is called as "Node" order. Type (B) is "Zone" order.
|
|
|
|
"Node order" orders the zonelists by node, then by zone within each node.
|
|
Specify "[Nn]ode" for node order
|
|
|
|
"Zone Order" orders the zonelists by zone type, then by node within each
|
|
zone. Specify "[Zz]one" for zone order.
|
|
|
|
Specify "[Dd]efault" to request automatic configuration.
|
|
|
|
On 32-bit, the Normal zone needs to be preserved for allocations accessible
|
|
by the kernel, so "zone" order will be selected.
|
|
|
|
On 64-bit, devices that require DMA32/DMA are relatively rare, so "node"
|
|
order will be selected.
|
|
|
|
Default order is recommended unless this is causing problems for your
|
|
system/application.
|
|
|
|
|
|
oom_dump_tasks
|
|
==============
|
|
|
|
Enables a system-wide task dump (excluding kernel threads) to be produced
|
|
when the kernel performs an OOM-killing and includes such information as
|
|
pid, uid, tgid, vm size, rss, pgtables_bytes, swapents, oom_score_adj
|
|
score, and name. This is helpful to determine why the OOM killer was
|
|
invoked, to identify the rogue task that caused it, and to determine why
|
|
the OOM killer chose the task it did to kill.
|
|
|
|
If this is set to zero, this information is suppressed. On very
|
|
large systems with thousands of tasks it may not be feasible to dump
|
|
the memory state information for each one. Such systems should not
|
|
be forced to incur a performance penalty in OOM conditions when the
|
|
information may not be desired.
|
|
|
|
If this is set to non-zero, this information is shown whenever the
|
|
OOM killer actually kills a memory-hogging task.
|
|
|
|
The default value is 1 (enabled).
|
|
|
|
reap_mem_on_sigkill
|
|
===================
|
|
|
|
This enables or disables the memory reaping for a SIGKILL received
|
|
process and that the sending process must have the CAP_KILL capabilities.
|
|
|
|
If this is set to 1, when a process receives SIGKILL from a process
|
|
that has the capability, CAP_KILL, the process is added into the oom_reaper
|
|
queue which can be picked up by the oom_reaper thread to reap the memory of
|
|
that process. This reaps for the process which received SIGKILL through
|
|
either sys_kill from user or kill_pid from kernel.
|
|
|
|
If this is set to 0, we are not reaping memory of a SIGKILL, sent through
|
|
either sys_kill from user or kill_pid from kernel, received process.
|
|
|
|
The default value is 0 (disabled).
|
|
|
|
oom_kill_allocating_task
|
|
========================
|
|
|
|
This enables or disables killing the OOM-triggering task in
|
|
out-of-memory situations.
|
|
|
|
If this is set to zero, the OOM killer will scan through the entire
|
|
tasklist and select a task based on heuristics to kill. This normally
|
|
selects a rogue memory-hogging task that frees up a large amount of
|
|
memory when killed.
|
|
|
|
If this is set to non-zero, the OOM killer simply kills the task that
|
|
triggered the out-of-memory condition. This avoids the expensive
|
|
tasklist scan.
|
|
|
|
If panic_on_oom is selected, it takes precedence over whatever value
|
|
is used in oom_kill_allocating_task.
|
|
|
|
The default value is 0.
|
|
|
|
|
|
overcommit_kbytes
|
|
=================
|
|
|
|
When overcommit_memory is set to 2, the committed address space is not
|
|
permitted to exceed swap plus this amount of physical RAM. See below.
|
|
|
|
Note: overcommit_kbytes is the counterpart of overcommit_ratio. Only one
|
|
of them may be specified at a time. Setting one disables the other (which
|
|
then appears as 0 when read).
|
|
|
|
|
|
overcommit_memory
|
|
=================
|
|
|
|
This value contains a flag that enables memory overcommitment.
|
|
|
|
When this flag is 0, the kernel attempts to estimate the amount
|
|
of free memory left when userspace requests more memory.
|
|
|
|
When this flag is 1, the kernel pretends there is always enough
|
|
memory until it actually runs out.
|
|
|
|
When this flag is 2, the kernel uses a "never overcommit"
|
|
policy that attempts to prevent any overcommit of memory.
|
|
Note that user_reserve_kbytes affects this policy.
|
|
|
|
This feature can be very useful because there are a lot of
|
|
programs that malloc() huge amounts of memory "just-in-case"
|
|
and don't use much of it.
|
|
|
|
The default value is 0.
|
|
|
|
See Documentation/vm/overcommit-accounting.rst and
|
|
mm/util.c::__vm_enough_memory() for more information.
|
|
|
|
|
|
overcommit_ratio
|
|
================
|
|
|
|
When overcommit_memory is set to 2, the committed address
|
|
space is not permitted to exceed swap plus this percentage
|
|
of physical RAM. See above.
|
|
|
|
|
|
page-cluster
|
|
============
|
|
|
|
page-cluster controls the number of pages up to which consecutive pages
|
|
are read in from swap in a single attempt. This is the swap counterpart
|
|
to page cache readahead.
|
|
The mentioned consecutivity is not in terms of virtual/physical addresses,
|
|
but consecutive on swap space - that means they were swapped out together.
|
|
|
|
It is a logarithmic value - setting it to zero means "1 page", setting
|
|
it to 1 means "2 pages", setting it to 2 means "4 pages", etc.
|
|
Zero disables swap readahead completely.
|
|
|
|
The default value is three (eight pages at a time). There may be some
|
|
small benefits in tuning this to a different value if your workload is
|
|
swap-intensive.
|
|
|
|
Lower values mean lower latencies for initial faults, but at the same time
|
|
extra faults and I/O delays for following faults if they would have been part of
|
|
that consecutive pages readahead would have brought in.
|
|
|
|
|
|
page_lock_unfairness
|
|
====================
|
|
|
|
This value determines the number of times that the page lock can be
|
|
stolen from under a waiter. After the lock is stolen the number of times
|
|
specified in this file (default is 5), the "fair lock handoff" semantics
|
|
will apply, and the waiter will only be awakened if the lock can be taken.
|
|
|
|
panic_on_oom
|
|
============
|
|
|
|
This enables or disables panic on out-of-memory feature.
|
|
|
|
If this is set to 0, the kernel will kill some rogue process,
|
|
called oom_killer. Usually, oom_killer can kill rogue processes and
|
|
system will survive.
|
|
|
|
If this is set to 1, the kernel panics when out-of-memory happens.
|
|
However, if a process limits using nodes by mempolicy/cpusets,
|
|
and those nodes become memory exhaustion status, one process
|
|
may be killed by oom-killer. No panic occurs in this case.
|
|
Because other nodes' memory may be free. This means system total status
|
|
may be not fatal yet.
|
|
|
|
If this is set to 2, the kernel panics compulsorily even on the
|
|
above-mentioned. Even oom happens under memory cgroup, the whole
|
|
system panics.
|
|
|
|
The default value is 0.
|
|
|
|
1 and 2 are for failover of clustering. Please select either
|
|
according to your policy of failover.
|
|
|
|
panic_on_oom=2+kdump gives you very strong tool to investigate
|
|
why oom happens. You can get snapshot.
|
|
|
|
|
|
percpu_pagelist_fraction
|
|
========================
|
|
|
|
This is the fraction of pages at most (high mark pcp->high) in each zone that
|
|
are allocated for each per cpu page list. The min value for this is 8. It
|
|
means that we don't allow more than 1/8th of pages in each zone to be
|
|
allocated in any single per_cpu_pagelist. This entry only changes the value
|
|
of hot per cpu pagelists. User can specify a number like 100 to allocate
|
|
1/100th of each zone to each per cpu page list.
|
|
|
|
The batch value of each per cpu pagelist is also updated as a result. It is
|
|
set to pcp->high/4. The upper limit of batch is (PAGE_SHIFT * 8)
|
|
|
|
The initial value is zero. Kernel does not use this value at boot time to set
|
|
the high water marks for each per cpu page list. If the user writes '0' to this
|
|
sysctl, it will revert to this default behavior.
|
|
|
|
|
|
stat_interval
|
|
=============
|
|
|
|
The time interval between which vm statistics are updated. The default
|
|
is 1 second.
|
|
|
|
|
|
stat_refresh
|
|
============
|
|
|
|
Any read or write (by root only) flushes all the per-cpu vm statistics
|
|
into their global totals, for more accurate reports when testing
|
|
e.g. cat /proc/sys/vm/stat_refresh /proc/meminfo
|
|
|
|
As a side-effect, it also checks for negative totals (elsewhere reported
|
|
as 0) and "fails" with EINVAL if any are found, with a warning in dmesg.
|
|
(At time of writing, a few stats are known sometimes to be found negative,
|
|
with no ill effects: errors and warnings on these stats are suppressed.)
|
|
|
|
|
|
numa_stat
|
|
=========
|
|
|
|
This interface allows runtime configuration of numa statistics.
|
|
|
|
When page allocation performance becomes a bottleneck and you can tolerate
|
|
some possible tool breakage and decreased numa counter precision, you can
|
|
do::
|
|
|
|
echo 0 > /proc/sys/vm/numa_stat
|
|
|
|
When page allocation performance is not a bottleneck and you want all
|
|
tooling to work, you can do::
|
|
|
|
echo 1 > /proc/sys/vm/numa_stat
|
|
|
|
|
|
swappiness
|
|
==========
|
|
|
|
This control is used to define how aggressive the kernel will swap
|
|
memory pages. Higher values will increase aggressiveness, lower values
|
|
decrease the amount of swap. A value of 0 instructs the kernel not to
|
|
initiate swap until the amount of free and file-backed pages is less
|
|
than the high water mark in a zone.
|
|
|
|
The default value is 60.
|
|
|
|
|
|
unprivileged_userfaultfd
|
|
========================
|
|
|
|
This flag controls whether unprivileged users can use the userfaultfd
|
|
system calls. Set this to 1 to allow unprivileged users to use the
|
|
userfaultfd system calls, or set this to 0 to restrict userfaultfd to only
|
|
privileged users (with SYS_CAP_PTRACE capability).
|
|
|
|
The default value is 1.
|
|
|
|
|
|
user_reserve_kbytes
|
|
===================
|
|
|
|
When overcommit_memory is set to 2, "never overcommit" mode, reserve
|
|
min(3% of current process size, user_reserve_kbytes) of free memory.
|
|
This is intended to prevent a user from starting a single memory hogging
|
|
process, such that they cannot recover (kill the hog).
|
|
|
|
user_reserve_kbytes defaults to min(3% of the current process size, 128MB).
|
|
|
|
If this is reduced to zero, then the user will be allowed to allocate
|
|
all free memory with a single process, minus admin_reserve_kbytes.
|
|
Any subsequent attempts to execute a command will result in
|
|
"fork: Cannot allocate memory".
|
|
|
|
Changing this takes effect whenever an application requests memory.
|
|
|
|
|
|
vfs_cache_pressure
|
|
==================
|
|
|
|
This percentage value controls the tendency of the kernel to reclaim
|
|
the memory which is used for caching of directory and inode objects.
|
|
|
|
At the default value of vfs_cache_pressure=100 the kernel will attempt to
|
|
reclaim dentries and inodes at a "fair" rate with respect to pagecache and
|
|
swapcache reclaim. Decreasing vfs_cache_pressure causes the kernel to prefer
|
|
to retain dentry and inode caches. When vfs_cache_pressure=0, the kernel will
|
|
never reclaim dentries and inodes due to memory pressure and this can easily
|
|
lead to out-of-memory conditions. Increasing vfs_cache_pressure beyond 100
|
|
causes the kernel to prefer to reclaim dentries and inodes.
|
|
|
|
Increasing vfs_cache_pressure significantly beyond 100 may have negative
|
|
performance impact. Reclaim code needs to take various locks to find freeable
|
|
directory and inode objects. With vfs_cache_pressure=1000, it will look for
|
|
ten times more freeable objects than there are.
|
|
|
|
|
|
watermark_boost_factor
|
|
======================
|
|
|
|
This factor controls the level of reclaim when memory is being fragmented.
|
|
It defines the percentage of the high watermark of a zone that will be
|
|
reclaimed if pages of different mobility are being mixed within pageblocks.
|
|
The intent is that compaction has less work to do in the future and to
|
|
increase the success rate of future high-order allocations such as SLUB
|
|
allocations, THP and hugetlbfs pages.
|
|
|
|
To make it sensible with respect to the watermark_scale_factor
|
|
parameter, the unit is in fractions of 10,000. The default value of
|
|
15,000 on !DISCONTIGMEM configurations means that up to 150% of the high
|
|
watermark will be reclaimed in the event of a pageblock being mixed due
|
|
to fragmentation. The level of reclaim is determined by the number of
|
|
fragmentation events that occurred in the recent past. If this value is
|
|
smaller than a pageblock then a pageblocks worth of pages will be reclaimed
|
|
(e.g. 2MB on 64-bit x86). A boost factor of 0 will disable the feature.
|
|
|
|
|
|
watermark_scale_factor
|
|
======================
|
|
|
|
This factor controls the aggressiveness of kswapd. It defines the
|
|
amount of memory left in a node/system before kswapd is woken up and
|
|
how much memory needs to be free before kswapd goes back to sleep.
|
|
|
|
The unit is in fractions of 10,000. The default value of 10 means the
|
|
distances between watermarks are 0.1% of the available memory in the
|
|
node/system. The maximum value is 1000, or 10% of memory.
|
|
|
|
A high rate of threads entering direct reclaim (allocstall) or kswapd
|
|
going to sleep prematurely (kswapd_low_wmark_hit_quickly) can indicate
|
|
that the number of free pages kswapd maintains for latency reasons is
|
|
too small for the allocation bursts occurring in the system. This knob
|
|
can then be used to tune kswapd aggressiveness accordingly.
|
|
|
|
|
|
zone_reclaim_mode
|
|
=================
|
|
|
|
Zone_reclaim_mode allows someone to set more or less aggressive approaches to
|
|
reclaim memory when a zone runs out of memory. If it is set to zero then no
|
|
zone reclaim occurs. Allocations will be satisfied from other zones / nodes
|
|
in the system.
|
|
|
|
This is value OR'ed together of
|
|
|
|
= ===================================
|
|
1 Zone reclaim on
|
|
2 Zone reclaim writes dirty pages out
|
|
4 Zone reclaim swaps pages
|
|
= ===================================
|
|
|
|
zone_reclaim_mode is disabled by default. For file servers or workloads
|
|
that benefit from having their data cached, zone_reclaim_mode should be
|
|
left disabled as the caching effect is likely to be more important than
|
|
data locality.
|
|
|
|
zone_reclaim may be enabled if it's known that the workload is partitioned
|
|
such that each partition fits within a NUMA node and that accessing remote
|
|
memory would cause a measurable performance reduction. The page allocator
|
|
will then reclaim easily reusable pages (those page cache pages that are
|
|
currently not used) before allocating off node pages.
|
|
|
|
Allowing zone reclaim to write out pages stops processes that are
|
|
writing large amounts of data from dirtying pages on other nodes. Zone
|
|
reclaim will write out dirty pages if a zone fills up and so effectively
|
|
throttle the process. This may decrease the performance of a single process
|
|
since it cannot use all of system memory to buffer the outgoing writes
|
|
anymore but it preserve the memory on other nodes so that the performance
|
|
of other processes running on other nodes will not be affected.
|
|
|
|
Allowing regular swap effectively restricts allocations to the local
|
|
node unless explicitly overridden by memory policies or cpuset
|
|
configurations.
|
|
|
|
|
|
want_old_faultaround_pte:
|
|
=========================
|
|
|
|
By default faultaround code produces young pte. When want_old_faultaround_pte is
|
|
set to 1, faultaround produces old ptes.
|
|
|
|
During sparse file access faultaround gets more pages mapped and when all of
|
|
them are young (default), under memory pressure, this makes vmscan swap out anon
|
|
pages instead, or to drop other page cache pages which otherwise stay resident.
|
|
Setting want_old_faultaround_pte to 1 avoids this.
|
|
|
|
Making the faultaround ptes old can result in performance regression on some
|
|
architectures. This is due to cycles spent in micro-faults which would take page
|
|
walk to set young bit in the pte. One such known test that shows a regression on
|
|
x86 is unixbench shell8. Set want_old_faultaround_pte to 1 on architectures
|
|
which does not show this regression or if the workload shows overall performance
|
|
benefit with old faultaround ptes.
|
|
|
|
The default value is 0.
|