We need to make sure the offsets are not out of range of the
total size.
Also check that they are in ascending order.

The WARN_ON triggered by syzkaller (it sets panic_on_warn) is
changed to also bail out, no point in continuing parsing.

Briefly tested with simple ruleset of
-A INPUT --limit 1/s' --log
plus jump to custom chains using 32bit ebtables binary.

Change-Id: Ic1b91b00521fb550f1774b916aa5b53c91940ed0
Reported-by:  <syzbot+845a53d13171abf8bf29@syzkaller.appspotmail.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Git-repo: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git


Git-commit: b7181216
Signed-off-by: Dennis Cagle <dcagle@codeaurora.org>

* changes:
  defconfig: sdm670: Enable Hypervisor core_ctl driver
  soc: qcom: Add hyp_core_ctl driver

This driver reserve the specified CPUs for the hypervisor to
use them for the other guests. The reservation is honored by
isolating the CPUs.

Change-Id: I46bbdf304dcace318bed5d5b470b8812b22130ed
Signed-off-by: Pavankumar Kondeti <pkondeti@codeaurora.org>

This driver reserve the specified CPUs for the hypervisor to use
it for the other guests. The reservation is done by isolating a CPU
so that this OS try not to use the CPU as much as possible. A CPU
can't be left in the isolation state while it is going offline. Since
the CPU is going offline and it can't be used by this OS, it is
considered as reserved. When such CPUs come online again, isolate
them to honor the reservation.

The following sysfs files are made available to configure this driver.

/sys/module/hyp_core_ctl/parameters/reserve_cpus:

Receive a cpumask string for the reservation. The default value
can be specified via a config option.

/sys/module/hyp_core_ctl/parameters/enable:

A boolean input to enable/disable the reservation. When reservation
is enabled, all the online CPUs in the reserve_cpus cpumask are
isolated. They get un-isolated after writing 0 to this file.

Change-Id: I0a266936c37546325f7bd63526b77cf888def92a
Signed-off-by: Pavankumar Kondeti <pkondeti@codeaurora.org>

System-pm level 5 turns off other regulators of UFS
in addition to the VCC. The VDD_PX10 supply is ON for
UFS configuration & turning it off causes a leakage.

Hence, resort to the default spm-level.

CRs-fixed: 2279765
Change-Id: Iadf1a0b26c84134e49c2c0207c852105b74ad660
Signed-off-by: Asutosh Das <asutoshd@codeaurora.org>

* changes:
  defconfig: msm: Enable arm cpuidle on SDM670 VM
  block: vservices: fix client and server to work for UFS
  defconfig: msm: enable vservices on sdm670

* changes:
  perf: don't zombie certain events in perf_event_release_kernel
  arch: arm64: Reenable HW breakpoint

Ignore events with no particular cpu associated, while
moving the events to zombie state, during event
release.

Change-Id: I11624f3734633ee6c55454be0cd32f638ed61024
Signed-off-by: Neeraj Upadhyay <neeraju@codeaurora.org>

HW breakpoint was disabled in
'commit f2a3f3ef ("arch: arm64: disable HW breakpoint")'.
However, it is required for setting breakpoints using ptrace
syscall, which is required for certain userspace applications
to work. So, reenable it.

Change-Id: Ib2a49488b92b0f77d13871d151778b3f0feab273
Signed-off-by: Neeraj Upadhyay <neeraju@codeaurora.org>

Enable CPUIDLE and ARM cpuidle configs on SDM670
VM defconfig.

Change-Id: I2af047a60ca4ce9ce6dd728acb9feb6563f219d2
Signed-off-by: Srinivas Rao L <lsrao@codeaurora.org>
Signed-off-by: Ashok Kundurthi <askund@codeaurora.org>

Fix block vservice client and server to support UFS storage,
which requires a minimum block size of 4096 bytes.

Change-Id: I3846a86925efbfbf8840e99226962de6d09b3b70
Signed-off-by: Neeraj Upadhyay <neeraju@codeaurora.org>
Signed-off-by: Ashok Kundurthi <askund@codeaurora.org>

Enable vservices configuration on sdm670.

Change-Id: Iebbde77b5162239a7808f9c88471bbdb7d7283af
Signed-off-by: Neeraj Upadhyay <neeraju@codeaurora.org>
Signed-off-by: Ashok Kundurthi <askund@codeaurora.org>

Adds a driver which provides console and TTY using the OKL4
hypervisor pipe IPC facility.

Change-Id: Iccbb9eda626fd90d3cc6494c490e13d51edfe42a
Signed-off-by: Carl van Schaik <carl@cog.systems>
Signed-off-by: Neeraj Upadhyay <neeraju@codeaurora.org>
Signed-off-by: Ashok Kundurthi <askund@codeaurora.org>

Add WLAN FW SSR event to handle FW rejuvenate
scenario.

Change-Id: I417d46cc07f455792906a18f4b6dc8e5ca8ca3de
Acked-by: Pooja Kumari <kumarip@qti.qualcomm.com>
Signed-off-by: Mohammed Javid <mjavid@codeaurora.org>

Remove WARN_ON during self recovery trigger to avoid
false positive while doing stress testing of self
recovery feature.

CRs-Fixed: 2296234
Change-Id: Ibe858f74ccb78565c98ba249a244f6bceb0ca1e5
Signed-off-by: Hardik Kantilal Patel <hkpatel@codeaurora.org>

When a core is doing system pm enter, as a part of
the GIC workaround, it would save the distributor registers.
There is a window where other core is doing tick_broadcast_enter
which will disable broadcast timer interrupt and enable back.
If the GIC save for broadcast timer interrupt falls in this window
it would be saved as disabled which leads to GIC restore would
keep interrupt disabled after exiting from low power mode.

To avoid this, hold a lock during tick_broadcast_enter and
system pm enter.

Change-Id: I924aa1a14f8fe4dc55a0e0d90e82e7c0ace6ec4e
Signed-off-by: Srinivas Rao L <lsrao@codeaurora.org>

During hardware suspend, host prepares video firmware for
power collapse before waiting for vcodec hardware to go
into idle state.Video firmware expects power collapse
command from host only after the vcodec hardware is
in idle state. Without this, video hardware continues
to process frame with host disabling the clocks.

The change waits for vcodec hardware to go into
idle state before preparing for power collapse.

Change-Id: Ie83c65cfe0bfbcccfcc6b58e0e67faa0d065fc0e
Signed-off-by: Santhosh Behara <santhoshbehara@codeaurora.org>

Use non-retrying version of scm calls to
configure ICE keys. This ensures that control is
returned to upper layer as quickly as possible.

Change-Id: Idbecd9301d2f361c17a720c4ac0dcdc393985676
Signed-off-by: Neeraj Soni <neersoni@codeaurora.org>

To avoid access of variable after being freed, using
list_first_entry_safe function to iterate over list
of given type,safe against removal of list entry.

Change-Id: I70611fddf3e9b80b1affa3e5235be24eac0d0a58
Signed-off-by: Monika Singh <monising@codeaurora.org>

Skip save and restore of GIC SPI configuration, if the GICV3
drivers hasn't been initialized.

Change-Id: I1bc32f58eef349487b2096ea2c26d491ee45a433
Signed-off-by: Neeraj Upadhyay <neeraju@codeaurora.org>

IPC Router FIFO Transport Layer enables IPC Router communication
between two virtual machines and configure the VM node ID as 101.

CRs-Fixed: 2279076
Change-Id: I4ff9f7ab53659e14bcf00c8b13b79873c73b94b6
Signed-off-by: Arun Kumar Neelakantam <aneela@codeaurora.org>

V1 header length check for read_avail cause read failures if packet
comes with V2 header and payload less than 16bytes.

Remove the V1 header length check to read small packets once it receives.

CRs-Fixed: 2279076
Change-Id: I7daf5c150e501d209057d6f2af998f685f5cd25d
Signed-off-by: Arun Kumar Neelakantam <aneela@codeaurora.org>

Include the microvisor header file to avoid compilation error.

Change-Id: I2dd744bf7bbdf13539eb6dedcebab18d381d6215
Signed-off-by: Arun Kumar Neelakantam <aneela@codeaurora.org>

IPC Router FIFO Transport Layer enables IPC Router communication
between two virtual machines.

CRs-Fixed: 2279076
Change-Id: I61ba78807733c2ff1faed40c7bf06f3c4dfb560c
Signed-off-by: Arun Kumar Neelakantam <aneela@codeaurora.org>

FIFO Transport Layer enables IPC Router communication between
two virtual machines.

CRs-Fixed: 2263332
Change-Id: I46a494efe5e76d32f71c9951805dff17c71ace11
Signed-off-by: Arun Kumar Neelakantam <aneela@codeaurora.org>

Add support to configure the IPC Router NODE ID per target
basis through defconfig value.

CRs-Fixed: 2263332
Change-Id: If26cdb384cc98246f80b70d7d943d820d78e7d9e
Signed-off-by: Arun Kumar Neelakantam <aneela@codeaurora.org>

Send HELLO message after transport up notification, instead of
waiting for the remote to send the HELLO message and process it.

CRs-Fixed: 2263332
Change-Id: Ib39eb5bc90887e47a75d6726cc84d10a8f5eecf4
Signed-off-by: Arun Kumar Neelakantam <aneela@codeaurora.org>

Add SDM670 Vm device tree file, with minimal configuration
for interrupt controller.

Change-Id: Ib13a6cb9f6ed99ecb8b0ebc1d89ef46669d0a3aa
Signed-off-by: Neeraj Upadhyay <neeraju@codeaurora.org>

A simple driver for using a shared-memory bridge between two
VMs.

Change-Id: I3dac6dd88d1f658c95e799262a9720a44af00291
Signed-off-by: Carl van Schaik <carl@cog.systems>
Signed-off-by: Neeraj Upadhyay <neeraju@codeaurora.org>

Adds the virtual services block protocol and block io drivers.
This protocol and drivers support exporting virtual block devices
from one VM to another, which are backed by another block device.

Change-Id: I47f86307c6201cb66d81bd453bb8c6c7ce99480f
Signed-off-by: Carl van Schaik <carl@cog.systems>
Signed-off-by: Neeraj Upadhyay <neeraju@codeaurora.org>

Adds the virtual services serial protocol and tty drivers
for virtual serial and console.

Change-Id: I2dd86a677406d6b74b0e02e5fda720eaf9edcd62
Signed-off-by: Carl van Schaik <carl@cog.systems>
Signed-off-by: Neeraj Upadhyay <neeraju@codeaurora.org>

The Axon transport driver adds a virtual services transport
driver for the OKL4 hypervisor Axons IPC interface, which
provides a secure high-performance scatter-gather style
inter-VM communication.

Change-Id: I2e1f573a43d3d89123687ab103f156aa83bdb893
Signed-off-by: Carl van Schaik <carl@cog.systems>
Signed-off-by: Neeraj Upadhyay <neeraju@codeaurora.org>

Enabled appended DTB and VM platform on SDM670 VM
defconfig.

Change-Id: I34ceda1081cb60b7bf2ae33fef02d732153dc806
Signed-off-by: Neeraj Upadhyay <neeraju@codeaurora.org>

Sync SDM670 virtual platform config, using menuconfig.

Change-Id: Ia26ce8117122883352e94cf227591ad63ce4b2e1
Signed-off-by: Neeraj Upadhyay <neeraju@codeaurora.org>

Define VM platform config for SDM670. This config is
used for enabling virtual machine on SDM670.

Change-Id: I7298715f881015bd91e88c1d29cbd13c4dc9d517
Signed-off-by: Neeraj Upadhyay <neeraju@codeaurora.org>

Compile VM kernel defconfig, if specified, in addition to the
base defconfig.

Change-Id: Id40a4304be97144818fe8b71d2991273196903f0
Signed-off-by: Neeraj Upadhyay <neeraju@codeaurora.org>