Rebuild rocky9_5 with kernel-5.14.0-503.19.1.el9_5

Rebuild_History BUILDABLE
Rebuilding Kernel from rpm changelog with Fuzz Limit: 87.50%
Number of commits in upstream range v5.14~1..master: 244733
Number of commits in rpm: 42
Number of commits matched with upstream: 15 (35.71%)
Number of commits in upstream but not in rpm: 244718
Number of commits NOT found in upstream: 27 (64.29%)

Rebuilding Kernel on Branch rocky9_5_rebuild_kernel-5.14.0-503.19.1.el9_5 for kernel-5.14.0-503.19.1.el9_5
Clean Cherry Picks: 14 (93.33%)
Empty Cherry Picks: 1 (6.67%)
_______________________________

Full Details Located here:
ciq/ciq_backports/kernel-5.14.0-503.19.1.el9_5/rebuild.details.txt

Includes:
* git commit header above
* Empty Commits with upstream SHA
* RPM ChangeLog Entries that could not be matched

Individual Empty Commit failures contained in the same containing directory.
The git message for empty commits will have the path for the failed commit.
File names are the first 8 characters of the upstream SHA

Author: PlaidCat

COPYING-5.14.0-503.16.1.el9_5 renamed to COPYING-5.14.0-503.19.1.el9_5

@@ -12,7 +12,7 @@ RHEL_MINOR = 5
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 503.16.1
+RHEL_RELEASE = 503.19.1
 
 #
 # ZSTREAM

Makefile.rhelver

@@ -99,10 +99,6 @@ arm_probe_decode_insn(probe_opcode_t insn, struct arch_probe_insn *api)
 	    aarch64_insn_is_blr(insn) ||
 	    aarch64_insn_is_ret(insn)) {
 		api->handler = simulate_br_blr_ret;
-	} else if (aarch64_insn_is_ldr_lit(insn)) {
-		api->handler = simulate_ldr_literal;
-	} else if (aarch64_insn_is_ldrsw_lit(insn)) {
-		api->handler = simulate_ldrsw_literal;
 	} else {
 		/*
 		 * Instruction cannot be stepped out-of-line and we don't
@@ -140,6 +136,17 @@ arm_kprobe_decode_insn(kprobe_opcode_t *addr, struct arch_specific_insn *asi)
 	probe_opcode_t insn = le32_to_cpu(*addr);
 	probe_opcode_t *scan_end = NULL;
 	unsigned long size = 0, offset = 0;
+	struct arch_probe_insn *api = &asi->api;
+
+	if (aarch64_insn_is_ldr_lit(insn)) {
+		api->handler = simulate_ldr_literal;
+		decoded = INSN_GOOD_NO_SLOT;
+	} else if (aarch64_insn_is_ldrsw_lit(insn)) {
+		api->handler = simulate_ldrsw_literal;
+		decoded = INSN_GOOD_NO_SLOT;
+	} else {
+		decoded = arm_probe_decode_insn(insn, &asi->api);
+	}
 
 	/*
 	 * If there's a symbol defined in front of and near enough to
@@ -157,7 +164,6 @@ arm_kprobe_decode_insn(kprobe_opcode_t *addr, struct arch_specific_insn *asi)
 		else
 			scan_end = addr - MAX_ATOMIC_CONTEXT_SIZE;
 	}
-	decoded = arm_probe_decode_insn(insn, &asi->api);
 
 	if (decoded != INSN_REJECTED && scan_end)
 		if (is_probed_address_atomic(addr - 1, scan_end))

arch/arm64/kernel/probes/decode-insn.c

@@ -63,8 +63,12 @@ static u64 nested_svm_get_tdp_pdptr(struct kvm_vcpu *vcpu, int index)
 	u64 pdpte;
 	int ret;
 
+	/*
+	 * Note, nCR3 is "assumed" to be 32-byte aligned, i.e. the CPU ignores
+	 * nCR3[4:0] when loading PDPTEs from memory.
+	 */
 	ret = kvm_vcpu_read_guest_page(vcpu, gpa_to_gfn(cr3), &pdpte,
-				       offset_in_page(cr3) + index * 8, 8);
+				       (cr3 & GENMASK(11, 5)) + index * 8, 8);
 	if (ret)
 		return 0;
 	return pdpte;

arch/x86/kvm/svm/nested.c

@@ -0,0 +1,44 @@
+Rebuild_History BUILDABLE
+Rebuilding Kernel from rpm changelog with Fuzz Limit: 87.50%
+Number of commits in upstream range v5.14~1..master: 244733
+Number of commits in rpm: 42
+Number of commits matched with upstream: 15 (35.71%)
+Number of commits in upstream but not in rpm: 244718
+Number of commits NOT found in upstream: 27 (64.29%)
+
+Rebuilding Kernel on Branch rocky9_5_rebuild_kernel-5.14.0-503.19.1.el9_5 for kernel-5.14.0-503.19.1.el9_5
+Clean Cherry Picks: 14 (93.33%)
+Empty Cherry Picks: 1 (6.67%)
+_______________________________
+
+__EMPTY COMMITS__________________________
+bed2eb964c70b780fb55925892a74f26cb590b25 bpf: Fix a kernel verifier crash in stacksafe()
+
+__CHANGES NOT IN UPSTREAM________________
+Porting to Rocky Linux 9, debranding and Rocky branding'
+Ensure aarch64 kernel is not compressed'
+xfrm: validate new SA's prefixlen using SA family when sel.family is unset
+xfrm: fix one more kernel-infoleak in algo dumping
+Revert "Merge: softlockup triggered by ethtool -d  [rhel-9.5.z]"
+tracing/hwlat: Fix a race during cpuhp processing
+tracing/timerlat: Fix a race during cpuhp processing
+tracing/timerlat: Drop interface_lock in stop_kthread()
+tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
+ceph: remove the incorrect Fw reference check when dirtying pages
+bpf: Fix a sdiv overflow issue
+bpf: Fix out-of-bounds write in trie_get_next_key()
+bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
+KVM: nSVM: Ignore nCR3when loading PDPTEs from memory
+net: tighten bad gso csum offset check in virtio_net_hdr
+Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
+Bluetooth: ISO: Fix UAF on iso_sock_timeout
+Bluetooth: SCO: Fix UAF on sco_sock_timeout
+Bluetooth: bnep: fix wild-memory-access in proto_unregister
+arm64: probes: Remove broken LDR (literal) uprobe support
+qed: put cond_resched() in qed_dmae_operation_wait()
+qed: allow the callee of qed_mcp_nvm_read() to sleep
+qed: put cond_resched() in qed_grc_dump_ctx_data()
+qed: make 'ethtool -d' 10 times faster
+sched/numa: Fix the potential null pointer dereference in task_numa_work()
+irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
+irqchip/gic-v4: Don't allow a VMOVP on a dying VPE

ciq/ciq_backports/kernel-5.14.0-503.19.1.el9_5/rebuild.details.txt

@@ -0,0 +1,3 @@
+# See 'cpupower help' and cpupower(1) for more info
+CPUPOWER_START_OPTS="frequency-set -g performance"
+CPUPOWER_STOP_OPTS="frequency-set -g ondemand"