January 2024 - Linux-stable-mirror

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.7.3 release. There are 346 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 31 Jan 2024 16:59:28 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.7.3-rc1.… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.7.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.7.3-rc1 Richard Palethorpe <rpalethorpe(a)suse.com> x86/entry/ia32: Ensure s32 is sign extended to s64 Tim Chen <tim.c.chen(a)linux.intel.com> tick/sched: Preserve number of idle sleeps across CPU hotplug events Jiri Wiesner <jwiesner(a)suse.de> clocksource: Skip watchdog check for large watchdog intervals Dawei Li <dawei.li(a)shingroup.cn> genirq: Initialize resend_node hlist for all interrupt descriptors Xi Ruoyao <xry111(a)xry111.site> mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan Quanquan Cao <caoqq(a)fujitsu.com> cxl/region：Fix overflow issue in alloc_hpa() Jithu Joseph <jithu.joseph(a)intel.com> platform/x86/intel/ifs: Call release_firmware() when handling errors. Michael Walle <mwalle(a)kernel.org> drm: bridge: samsung-dsim: Don't use FORCE_STOP_STATE Inochi Amaoto <inochiama(a)outlook.com> riscv: dts: sophgo: separate sg2042 mtime and mtimecmp to fit aclint format Aleksander Jan Bajkowski <olek2(a)wp.pl> MIPS: lantiq: register smp_ops on non-smp platforms Huacai Chen <chenhuacai(a)kernel.org> LoongArch/smp: Call rcutree_report_cpu_starting() at tlb_init() David Lechner <dlechner(a)baylibre.com> spi: fix finalize message on error return Shyam Prasad N <sprasad(a)microsoft.com> cifs: fix stray unlock in cifs_chan_skip_or_disable Amit Kumar Mahapatra <amit.kumar-mahapatra(a)amd.com> spi: spi-cadence: Reverse the order of interleaved write and read operations Kamal Dasu <kamal.dasu(a)broadcom.com> spi: bcm-qspi: fix SFDP BFPT read by usig mspi read Mario Limonciello <mario.limonciello(a)amd.com> cpufreq/amd-pstate: Fix setting scaling max/min freq values Hsin-Yi Wang <hsinyi(a)chromium.org> drm/bridge: anx7625: Ensure bridge is suspended in disable() Li Lingfeng <lilingfeng3(a)huawei.com> block: Move checking GENHD_FL_NO_PART to bdev_add_partition() Mika Westerberg <mika.westerberg(a)linux.intel.com> spi: intel-pci: Remove Meteor Lake-S SoC PCI ID from the list Shravan Kumar Ramani <shravankr(a)nvidia.com> platform/mellanox: mlxbf-pmc: Fix offset calculation for crspace events Artur Weber <aweber.kernel(a)gmail.com> ARM: dts: exynos4212-tab3: add samsung,invert-vclk flag to fimd Wenhua Lin <Wenhua.Lin(a)unisoc.com> gpio: eic-sprd: Clear interrupt after set the interrupt type Armin Wolf <W_Armin(a)gmx.de> platform/x86: wmi: Fix error handling in legacy WMI notify handler functions Cristian Marussi <cristian.marussi(a)arm.com> firmware: arm_ffa: Check xa_load() return value Cristian Marussi <cristian.marussi(a)arm.com> firmware: arm_ffa: Add missing rwlock_init() for the driver partition Cristian Marussi <cristian.marussi(a)arm.com> firmware: arm_ffa: Add missing rwlock_init() in ffa_setup_partitions() Cristian Marussi <cristian.marussi(a)arm.com> firmware: arm_scmi: Fix the clock protocol version for v3.2 Cristian Marussi <cristian.marussi(a)arm.com> firmware: arm_scmi: Use xa_insert() when saving raw queues Cristian Marussi <cristian.marussi(a)arm.com> firmware: arm_scmi: Use xa_insert() to store opps Fedor Pchelkin <pchelkin(a)ispras.ru> drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume Arnd Bergmann <arnd(a)arndb.de> drm/exynos: fix accidental on-stack copy of exynos_drm_plane Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> futex: Prevent the reuse of stale pi_state Yajun Deng <yajun.deng(a)linux.dev> memblock: fix crash when reserved memory is not added to memory Douglas Anderson <dianders(a)chromium.org> drm/bridge: parade-ps8640: Make sure we drop the AUX mutex in the error case Pin-yen Lin <treapking(a)chromium.org> drm/bridge: parade-ps8640: Ensure bridge is suspended in .post_disable() Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> drm/bridge: sii902x: Fix audio codec unregistration Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> drm/bridge: sii902x: Fix probing race issue Arnd Bergmann <arnd(a)arndb.de> drm/panel/raydium-rm692e5: select CONFIG_DRM_DISPLAY_DP_HELPER Artur Weber <aweber.kernel(a)gmail.com> drm/panel: samsung-s6d7aa0: drop DRM_BUS_FLAG_DE_HIGH for lsl080al02 Markus Niebel <Markus.Niebel(a)ew.tq-group.com> drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33] Douglas Anderson <dianders(a)chromium.org> drm/bridge: parade-ps8640: Wait for HPD when doing an AUX transfer Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx11: set UNORD_DISPATCH in compute MQDs Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx10: set UNORD_DISPATCH in compute MQDs Friedrich Vock <friedrich.vock(a)gmx.de> drm/amdgpu: Enable tunneling on high-priority compute queues Dillon Varone <dillon.varone(a)amd.com> drm/amd/display: Init link enc resources in dc_state only if res_pool presents Wenjing Liu <wenjing.liu(a)amd.com> drm/amd/display: update pixel clock params after stream slice count change in context Charlene Liu <charlene.liu(a)amd.com> drm/amd/display: Add logging resource checks Ilya Bakoulin <ilya.bakoulin(a)amd.com> drm/amd/display: Clear OPTC mem select on disable George Shen <george.shen(a)amd.com> drm/amd/display: Disconnect phantom pipe OPP from OPTC being disabled Ilya Bakoulin <ilya.bakoulin(a)amd.com> drm/amd/display: Fix hang/underflow when transitioning to ODM4:1 Hsin-Yi Wang <hsinyi(a)chromium.org> drm/panel-edp: drm/panel-edp: Fix AUO B116XTN02 name Hsin-Yi Wang <hsinyi(a)chromium.org> drm/panel-edp: drm/panel-edp: Fix AUO B116XAK01 name and timing Sheng-Liang Pan <sheng-liang.pan(a)quanta.corp-partner.google.com> drm/panel-edp: Add AUO B116XTN02, BOE NT116WHM-N21,836X2, NV116WHM-N49 V8.0 Taimur Hassan <syed.hassan(a)amd.com> drm/amd/display: Fix conversions between bytes and KB Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> drm/amd/display: Wake DMCUB before executing GPINT commands Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> drm/amd/display: Wake DMCUB before sending a command Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> drm/amd/display: Refactor DMCUB enter/exit idle interface Samson Tam <samson.tam(a)amd.com> drm/amd/display: do not send commands to DMUB if DMUB is inactive from S3 Naohiro Aota <naohiro.aota(a)wdc.com> btrfs: zoned: optimize hint byte for zoned allocator Naohiro Aota <naohiro.aota(a)wdc.com> btrfs: zoned: factor out prepare_allocation_zoned() Alexander Stein <alexander.stein(a)ew.tq-group.com> media: i2c: imx290: Properly encode registers as little-endian Alexander Stein <alexander.stein(a)ew.tq-group.com> media: v4l2-cci: Add support for little-endian encoded registers Sakari Ailus <sakari.ailus(a)linux.intel.com> media: v4l: cci: Add macros to obtain register width and address Sakari Ailus <sakari.ailus(a)linux.intel.com> media: v4l: cci: Include linux/bits.h Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> thermal: intel: hfi: Add syscore callbacks for system-wide PM Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> thermal: intel: hfi: Disable an HFI instance when all its CPUs go offline Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> thermal: intel: hfi: Refactor enabling code into helper functions Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Fix uninitialized variable usage in core_link_ 'read_dpcd() & write_dpcd()' functions Ma Jun <Jun.Ma2(a)amd.com> drm/amdgpu/pm: Fix the power source flag error Kenneth Feng <kenneth.feng(a)amd.com> drm/amd/pm: update the power cap setting Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Show vram vendor only if available Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Avoid fetching vram vendor information Lijo Lazar <lijo.lazar(a)amd.com> drm/amd/pm: Fetch current power limit from FW Tom St Denis <tom.stdenis(a)amd.com> drm/amd/amdgpu: Assign GART pages to AMD device mapping Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> drm/amd/display: Fix a switch statement in populate_dml_output_cfg_from_stream_state() Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Fix late derefrence 'dsc' check in 'link_set_dsc_pps_packet()' Wayne Lin <Wayne.Lin(a)amd.com> drm/amd/display: Align the returned error code with legacy DP Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> drm/amd/display: Port DENTIST hang and TDR fixes to OTG disable W/A Ovidiu Bunea <ovidiu.bunea(a)amd.com> drm/amd/display: Fix DML2 watermark calculation Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Fix variable deferencing before NULL check in edp_setup_replay() Lijo Lazar <lijo.lazar(a)amd.com> drm/amd/pm: Add error log for smu v13.0.6 reset Lijo Lazar <lijo.lazar(a)amd.com> drm/amd/pm: Fix smuv13.0.6 current clock reporting Likun Gao <Likun.Gao(a)amd.com> drm/amdgpu: correct the cu count for gfx v11 Yifan Zhang <yifan1.zhang(a)amd.com> drm/amdgpu: update regGL2C_CTRL4 value in golden setting Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: drop exp hw support check for GC 9.4.3 Ori Messinger <Ori.Messinger(a)amd.com> drm/amdgpu: Enable GFXOFF for Compute on GFX11 Aurabindo Pillai <aurabindo.pillai(a)amd.com> drm/amd/display: Fix a debugfs null pointer error Dan Carpenter <dan.carpenter(a)linaro.org> drm/bridge: nxp-ptn3460: simplify some error checking Ivan Lipski <ivlipski(a)amd.com> Revert "drm/amd/display: fix bandwidth validation failure on DCN 2.1" Mario Limonciello <mario.limonciello(a)amd.com> drm/amd/display: Disable PSR-SU on Parade 0803 TCON again Melissa Wen <mwen(a)igalia.com> drm/amd/display: fix bandwidth validation failure on DCN 2.1 Javier Martinez Canillas <javierm(a)redhat.com> drm: Allow drivers to indicate the damage helpers to ignore damage clips Javier Martinez Canillas <javierm(a)redhat.com> drm/virtio: Disable damage clipping if FB changed since last page-flip Zack Rusin <zack.rusin(a)broadcom.com> drm: Disable the cursor plane on atomic contexts with virtualized drivers Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> drm/tidss: Fix atomic_flush check Thomas Zimmermann <tzimmermann(a)suse.de> drm: Fix TODO list mentioning non-KMS drivers Dan Carpenter <dan.carpenter(a)linaro.org> drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/psr: Only allow PSR in LPSP mode on HSW non-ULT Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm: Don't unref the same fb many times by mistake due to deadlock handling Ville Syrjälä <ville.syrjala(a)linux.intel.com> Revert "drm/i915/dsi: Do display on sequence later on icl+" Dave Airlie <airlied(a)redhat.com> Revert "nouveau: push event block/allowing out of the fence context" Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpufreq: intel_pstate: Refine computation of P-state for given frequency Mario Limonciello <mario.limonciello(a)amd.com> gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 Dave Chinner <dchinner(a)redhat.com> xfs: read only mounts with fsopen mount API are busted Ma Jun <Jun.Ma2(a)amd.com> drm/amdgpu: Fix the null pointer when load rlc firmware Thomas Zimmermann <tzimmermann(a)suse.de> Revert "drivers/firmware: Move sysfb_init() from device_initcall to subsys_initcall_sync" Cristian Marussi <cristian.marussi(a)arm.com> firmware: arm_scmi: Check mailbox/SMT channel for consistency Lin Ma <linma(a)zju.edu.cn> ksmbd: fix global oob in ksmbd_nl_policy Shin'ichiro Kawasaki <shinichiro.kawasaki(a)wdc.com> platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe Nathan Chancellor <nathan(a)kernel.org> platform/x86: intel-uncore-freq: Fix types in sysfs callbacks Florian Westphal <fw(a)strlen.de> netfilter: nf_tables: reject QUEUE/DROP verdict parameters Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain Michael Kelley <mhklinux(a)outlook.com> hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes Amir Goldstein <amir73il(a)gmail.com> ovl: mark xwhiteouts directory with overlay.opaque='x' NeilBrown <neilb(a)suse.de> nfsd: fix RELEASE_LOCKOWNER Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: fix a memory corruption Bernd Edlinger <bernd.edlinger(a)hotmail.de> exec: Fix error handling in begin_new_exec() Ilya Dryomov <idryomov(a)gmail.com> rbd: don't move requests to the running list on errors Omar Sandoval <osandov(a)fb.com> btrfs: don't abort filesystem when attempting to snapshot deleted subvolume Qu Wenruo <wqu(a)suse.com> btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args David Sterba <dsterba(a)suse.com> btrfs: don't warn if discard range is not aligned to sector Chung-Chiang Cheng <cccheng(a)synology.com> btrfs: tree-checker: fix inline ref size in error messages Fedor Pchelkin <pchelkin(a)ispras.ru> btrfs: ref-verify: free ref cache before clearing mount opt Omar Sandoval <osandov(a)fb.com> btrfs: avoid copying BTRFS_ROOT_SUBVOL_DEAD flag to snapshot of subvolume being deleted Naohiro Aota <naohiro.aota(a)wdc.com> btrfs: zoned: fix lock ordering in btrfs_zone_activate() Gerhard Engleder <gerhard(a)engleder-embedded.com> tsnep: Fix XDP_RING_NEED_WAKEUP for empty fill ring Gerhard Engleder <gerhard(a)engleder-embedded.com> tsnep: Remove FCS for XDP data path Shenwei Wang <shenwei.wang(a)nxp.com> net: fec: fix the unhandled context fault from smmu Hangbin Liu <liuhangbin(a)gmail.com> selftests: bonding: do not test arp/ns target with mode balance-alb/tlb Zhipeng Lu <alexious(a)zju.edu.cn> fjes: fix memleaks in fjes_hw_setup Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> i40e: update xdp_rxq_info::frag_size for ZC enabled Rx queue Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> i40e: set xdp_rxq_info::frag_size Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xdp: reflect tail increase for MEM_TYPE_XSK_BUFF_POOL Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> ice: update xdp_rxq_info::frag_size for ZC enabled Rx queue Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> intel: xsk: initialize skb_frag_t::bv_offset in ZC drivers Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> ice: remove redundant xdp_rxq_info registration Tirthendu Sarkar <tirthendu.sarkar(a)intel.com> i40e: handle multi-buffer packets that are shrunk by xdp prog Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> ice: work on pre-XDP prog frag count Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: fix usage of multi-buffer BPF helpers for ZC XDP Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: make xsk_buff_pool responsible for clearing xdp_buff::flags Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: recycle buffer in case Rx queue was full Jakub Kicinski <kuba(a)kernel.org> selftests: netdevsim: fix the udp_tunnel_nic test Jakub Kicinski <kuba(a)kernel.org> selftests: net: fix rps_default_mask with >32 CPUs Jenishkumar Maheshbhai Patel <jpatel2(a)marvell.com> net: mvpp2: clear BM pool before initialization Bernd Edlinger <bernd.edlinger(a)hotmail.de> net: stmmac: Wait a bit for the reset to take effect Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: validate NFPROTO_* family Florian Westphal <fw(a)strlen.de> netfilter: nf_tables: restrict anonymous set and map names to 16 bytes Florian Westphal <fw(a)strlen.de> netfilter: nft_limit: reject configurations that cause integer overflow Frederic Weisbecker <frederic(a)kernel.org> rcu: Defer RCU kthreads wakeup when CPU is dying Dinghao Liu <dinghao.liu(a)zju.edu.cn> net/mlx5e: fix a potential double-free in fs_any_create_groups Zhipeng Lu <alexious(a)zju.edu.cn> net/mlx5e: fix a double-free in arfs_create_groups Leon Romanovsky <leon(a)kernel.org> net/mlx5e: Ignore IPsec replay window values on sender side Leon Romanovsky <leon(a)kernel.org> net/mlx5e: Allow software parsing when IPsec crypto is enabled Rahul Rameshbabu <rrameshbabu(a)nvidia.com> net/mlx5: Use mlx5 device constant for selecting CQ period mode for ASO Yevgeny Kliteynik <kliteyn(a)nvidia.com> net/mlx5: DR, Can't go to uplink vport on RX rule Yevgeny Kliteynik <kliteyn(a)nvidia.com> net/mlx5: DR, Use the right GVMI number for drop action Moshe Shemesh <moshe(a)nvidia.com> net/mlx5: Bridge, fix multicast packets sent to uplink Yishai Hadas <yishaih(a)nvidia.com> net/mlx5: Fix a WARN upon a callback command failure Vlad Buslov <vladbu(a)nvidia.com> net/mlx5e: Fix peer flow lists handling Tariq Toukan <tariqt(a)nvidia.com> net/mlx5e: Fix inconsistent hairpin RQT sizes Rahul Rameshbabu <rrameshbabu(a)nvidia.com> net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context Ido Schimmel <idosch(a)nvidia.com> net/sched: flower: Fix chain template offload Jakub Kicinski <kuba(a)kernel.org> selftests: fill in some missing configs for net Zhengchao Shao <shaozhengchao(a)huawei.com> ipv6: init the accept_queue's spinlocks in inet6_create Zhengchao Shao <shaozhengchao(a)huawei.com> netlink: fix potential sleeping issue in mqueue_flush_file Kuniyuki Iwashima <kuniyu(a)amazon.com> selftest: Don't reuse port for SO_INCOMING_CPU test. Salvatore Dipietro <dipiets(a)amazon.com> tcp: Add memory barrier to tcp_push() David Howells <dhowells(a)redhat.com> afs: Fix error handling with lookup via FS.InlineBulkStatus David Howells <dhowells(a)redhat.com> afs: Simplify error handling David Howells <dhowells(a)redhat.com> afs: Don't put afs_call in afs_wait_for_call_to_complete() David Howells <dhowells(a)redhat.com> afs: Wrap most op->error accesses with inline funcs David Howells <dhowells(a)redhat.com> afs: Use op->nr_iterations=-1 to indicate to begin fileserver iteration David Howells <dhowells(a)redhat.com> afs: Handle the VIO and UAEIO aborts explicitly David Howells <dhowells(a)redhat.com> rxrpc, afs: Allow afs to pin rxrpc_peer objects David Howells <dhowells(a)redhat.com> afs: Turn the afs_addr_list address array into an array of structs David Howells <dhowells(a)redhat.com> afs: Add comments on abort handling Oleg Nesterov <oleg(a)redhat.com> afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() David Howells <dhowells(a)redhat.com> afs: Hide silly-rename files from userspace Petr Pavlu <petr.pavlu(a)suse.com> tracing: Ensure visibility when inserting an element into tracing_map Dan Carpenter <dan.carpenter(a)linaro.org> netfs, fscache: Prevent Oops in fscache_put_cache() Sharath Srinivasan <sharath.srinivasan(a)oracle.com> net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv Horatiu Vultur <horatiu.vultur(a)microchip.com> net: micrel: Fix PTP frame parsing for lan8814 Arkadiusz Kubalewski <arkadiusz.kubalewski(a)intel.com> dpll: fix register pin with unregistered parent pin Arkadiusz Kubalewski <arkadiusz.kubalewski(a)intel.com> dpll: fix userspace availability of pins Arkadiusz Kubalewski <arkadiusz.kubalewski(a)intel.com> dpll: fix pin dump crash for rebound module Arkadiusz Kubalewski <arkadiusz.kubalewski(a)intel.com> dpll: fix broken error path in dpll_pin_alloc(..) Yunjian Wang <wangyunjian(a)huawei.com> tun: add missing rx stats accounting in tun_xdp_act Yunjian Wang <wangyunjian(a)huawei.com> tun: fix missing dropped counter in tun_xdp_act Jakub Kicinski <kuba(a)kernel.org> net: fix removing a namespace with conflicting altnames Michal Schmidt <mschmidt(a)redhat.com> idpf: distinguish vports by the dev_port attribute Eric Dumazet <edumazet(a)google.com> udp: fix busy polling Kuniyuki Iwashima <kuniyu(a)amazon.com> llc: Drop support for ETH_P_TR_802_2. Eric Dumazet <edumazet(a)google.com> llc: make llc_ui_sendmsg() more robust against bonding changes Lin Ma <linma(a)zju.edu.cn> vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Prevent kernel warning when running offline self test Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Wait for FLR to complete during probe Zhengchao Shao <shaozhengchao(a)huawei.com> tcp: make sure init the accept_queue's spinlocks once Benjamin Poirier <bpoirier(a)nvidia.com> selftests: bonding: Increase timeout to 1200s Wen Gu <guwen(a)linux.alibaba.com> net/smc: fix illegal rmb_desc access in SMC-D connection dump Qu Wenruo <wqu(a)suse.com> btrfs: scrub: avoid use-after-free when chunk length is not 64K aligned Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: fix potential sta-link leak Lucas Stach <l.stach(a)pengutronix.de> SUNRPC: use request size to initialize bio_vec in svc_udp_sendto() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: Add missing set_freezable() for freezable kthread Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: send lease break notification on FILE_RENAME_INFORMATION Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: don't increment epoch if current state and request state are same Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix potential circular locking issue in smb2_set_ea() Jonathan Gray <jsg(a)jsg.id.au> Revert "drm/amd: Enable PCIe PME from D3" Benjamin Berg <benjamin.berg(a)intel.com> wifi: ath11k: rely on mac80211 debugfs handling for vif Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: set v2 lease version on lease upgrade Charan Teja Kalla <quic_charante(a)quicinc.com> mm: page_alloc: unreserve highatomic page blocks before oom Hugo Villeneuve <hvilleneuve(a)dimonoff.com> serial: sc16is7xx: improve do/while loop in sc16is7xx_irq() Hugo Villeneuve <hvilleneuve(a)dimonoff.com> serial: sc16is7xx: remove obsolete loop in sc16is7xx_port_irq() Hugo Villeneuve <hvilleneuve(a)dimonoff.com> serial: sc16is7xx: fix invalid sc16is7xx_lines bitfield in case of probe error Hugo Villeneuve <hvilleneuve(a)dimonoff.com> serial: sc16is7xx: fix unconditional activation of THRI interrupt Hugo Villeneuve <hvilleneuve(a)dimonoff.com> serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO Hugo Villeneuve <hvilleneuve(a)dimonoff.com> serial: sc16is7xx: change EFR lock to operate on each channels Hugo Villeneuve <hvilleneuve(a)dimonoff.com> serial: sc16is7xx: remove unused line structure member Hugo Villeneuve <hvilleneuve(a)dimonoff.com> serial: sc16is7xx: remove global regmap from struct sc16is7xx_port Hugo Villeneuve <hvilleneuve(a)dimonoff.com> serial: sc16is7xx: remove wasteful static buffer in sc16is7xx_regmap_name() Hugo Villeneuve <hvilleneuve(a)dimonoff.com> serial: sc16is7xx: improve regmap debugfs by using one regmap per port Al Viro <viro(a)zeniv.linux.org.uk> rename(): fix the locking of subdirectories Charan Teja Kalla <quic_charante(a)quicinc.com> mm/sparsemem: fix race in accessing memory_section->usage Baolin Wang <baolin.wang(a)linux.alibaba.com> mm: migrate: fix getting incorrect page mapping during page migration Steven Rostedt (Google) <rostedt(a)goodmis.org> mm/rmap: fix misplaced parenthesis of a likely() Donet Tom <donettom(a)linux.vnet.ibm.com> selftests: mm: hugepage-vmemmap fails on 64K page size systems James Gowans <jgowans(a)amazon.com> kexec: do syscore_shutdown() in kernel_kexec Muhammad Usama Anjum <usama.anjum(a)collabora.com> fs/proc/task_mmu: move mmu notification mechanism inside mm lock Di Shen <di.shen(a)unisoc.com> thermal: gov_power_allocator: avoid inability to reset a cdev Zhihao Cheng <chengzhihao1(a)huawei.com> ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path Huacai Chen <chenhuacai(a)kernel.org> kdump: defer the insertion of crashkernel resources Ma Wupeng <mawupeng1(a)huawei.com> efi: disable mirror feature during crashkernel Dave Airlie <airlied(a)redhat.com> nouveau/gsp: handle engines in runl without nonstall interrupts. Dave Airlie <airlied(a)redhat.com> nouveau/vmm: don't set addr on the fail path to avoid warning Mario Limonciello <mario.limonciello(a)amd.com> rtc: Extend timeout for waiting for UIP to clear to 1s Mario Limonciello <mario.limonciello(a)amd.com> rtc: Add support for configuring the UIP timeout for RTC reads Mario Limonciello <mario.limonciello(a)amd.com> rtc: mc146818-lib: Adjust failure return code for mc146818_get_time() Mario Limonciello <mario.limonciello(a)amd.com> rtc: Adjust failure return code for cmos_set_alarm() Mario Limonciello <mario.limonciello(a)amd.com> rtc: cmos: Use ACPI alarm for non-Intel x86 systems too Mark Rutland <mark.rutland(a)arm.com> arm64: entry: fix ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD Mark Brown <broonie(a)kernel.org> arm64/sme: Always exit sme_alloc() early with existing storage Rob Herring <robh(a)kernel.org> arm64: errata: Add Cortex-A510 speculative unprivileged load workaround Rob Herring <robh(a)kernel.org> arm64: Rename ARM64_WORKAROUND_2966298 Andrew Jones <ajones(a)ventanamicro.com> RISC-V: selftests: cbo: Ensure asm operands match constraints Guo Ren <guoren(a)kernel.org> riscv: mm: Fixup compat mode boot failure Guo Ren <guoren(a)kernel.org> riscv: mm: Fixup compat arch_get_mmap_end Zheng Wang <zyytlz.wz(a)163.com> media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run Zheng Wang <zyytlz.wz(a)163.com> media: mtk-jpeg: Fix timeout schedule error in mtk_jpegdec_worker. Alain Volmat <alain.volmat(a)foss.st.com> media: i2c: st-mipid02: correct format propagation Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> mmc: mmc_spi: remove custom DMA mapped buffers Avri Altman <avri.altman(a)wdc.com> mmc: core: Use mrq.sbc in close-ended ffu Michael Grzeschik <m.grzeschik(a)pengutronix.de> media: videobuf2-dma-sg: fix vmap callback Vegard Nossum <vegard.nossum(a)oracle.com> scripts/get_abi: fix source path leak Vegard Nossum <vegard.nossum(a)oracle.com> docs: kernel_abi.py: fix command injection Jordan Rife <jrife(a)google.com> dlm: use kernel_connect() and kernel_bind() Alfred Piccioni <alpic(a)google.com> lsm: new security_file_ioctl_compat() hook Johan Hovold <johan+linaro(a)kernel.org> ARM: dts: qcom: sdx55: fix USB SS wakeup Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: sdm670: fix USB SS wakeup Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: sdm670: fix USB DP/DM HS PHY interrupts Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: sc8180x: fix USB SS wakeup Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: sc8180x: fix USB DP/DM HS PHY interrupts Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: sm8150: fix USB SS wakeup Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: sm8150: fix USB DP/DM HS PHY interrupts Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: sdm845: fix USB SS wakeup Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts Johan Hovold <johan+linaro(a)kernel.org> ARM: dts: qcom: sdx55: fix USB DP/DM HS PHY interrupts Stephan Gerhold <stephan(a)gerhold.net> arm64: dts: qcom: Add missing vio-supply for AW2013 Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: sc7280: fix usb_1 wakeup interrupt types Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: sc8180x: fix USB wakeup interrupt types Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: sm8150: fix USB wakeup interrupt types Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: sdm670: fix USB wakeup interrupt types Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: sdm845: fix USB wakeup interrupt types Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: sc7180: fix USB wakeup interrupt types Stephan Gerhold <stephan(a)gerhold.net> arm64: dts: qcom: msm8939: Make blsp_dma controlled-remotely Stephan Gerhold <stephan(a)gerhold.net> arm64: dts: qcom: msm8916: Make blsp_dma controlled-remotely Sam Edwards <cfsworks(a)gmail.com> arm64: dts: rockchip: Fix rk3588 USB power-domain clocks Tianling Shen <cnsztl(a)gmail.com> arm64: dts: rockchip: configure eth pad driver strength for orangepi r1 plus lts Cixi Geng <cixi.geng1(a)unisoc.com> arm64: dts: sprd: fix the cpu node for UMS512 Johan Hovold <johan+linaro(a)kernel.org> ARM: dts: qcom: sdx55: fix pdc '#interrupt-cells' Paul Cercueil <paul(a)crapouillou.net> ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12 Johan Hovold <johan+linaro(a)kernel.org> ARM: dts: qcom: sdx55: fix USB wakeup interrupt types Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: sc8280xp-crd: fix eDP phy compatible Andrejs Cainikovs <andrejs.cainikovs(a)toradex.com> ARM: dts: imx6q-apalis: add can power-up delay on ixora board Shyam Prasad N <sprasad(a)microsoft.com> cifs: update iface_last_update on each query-and-update Shyam Prasad N <sprasad(a)microsoft.com> cifs: handle servers that still advertise multichannel after disabling Paulo Alcantara <pc(a)manguebit.com> smb: client: fix parsing of SMB3.1.1 POSIX create context Geert Uytterhoeven <geert+renesas(a)glider.be> sh: ecovec24: Rename missed backlight field from fbdev to dev Niklas Cassel <cassel(a)kernel.org> scsi: core: Kick the requeue list after inserting when flushing Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> riscv: Fix an off-by-one in get_early_cmdline() Charlie Jenkins <charlie(a)rivosinc.com> riscv: Fix relocation_hashtable size Charlie Jenkins <charlie(a)rivosinc.com> riscv: Correctly free relocation hashtable on error Charlie Jenkins <charlie(a)rivosinc.com> riscv: Fix module loading free order Bart Van Assche <bvanassche(a)acm.org> scsi: ufs: core: Remove the ufshcd_hba_exit() call from ufshcd_async_scan() Miquel Raynal <miquel.raynal(a)bootlin.com> dmaengine: xilinx: xdma: Fix the count of elapsed periods in cyclic mode Rex Zhang <rex.zhang(a)intel.com> dmaengine: idxd: Move dma_free_coherent() out of spinlocked context Amelie Delaunay <amelie.delaunay(a)foss.st.com> dmaengine: fix NULL pointer in channel unregistration function Frank Li <Frank.Li(a)nxp.com> dmaengine: fsl-edma: fix eDMAv4 channel allocation issue Marcelo Schmitt <marcelo.schmitt(a)analog.com> iio: adc: ad7091r: Enable internal vref if external vref is not supplied Helge Deller <deller(a)gmx.de> parisc/power: Fix power soft-off button emulation on qemu Helge Deller <deller(a)gmx.de> parisc/firmware: Fix F-extend for PDC addresses Bhaumik Bhatt <bbhatt(a)codeaurora.org> bus: mhi: host: Add spinlock to protect WP access when queueing TREs Qiang Yu <quic_qianyu(a)quicinc.com> bus: mhi: host: Drop chan lock before queuing buffers Krishna chaitanya chundru <quic_krichai(a)quicinc.com> bus: mhi: host: Add alignment check for event ring read pointer Serge Semin <fancer.lancer(a)gmail.com> mips: Fix max_mapnr being uninitialized on early stages Eric Dumazet <edumazet(a)google.com> nbd: always initialize struct msghdr completely Nathan Lynch <nathanl(a)linux.ibm.com> seq_buf: Make DECLARE_SEQ_BUF() usable Tony Krowiak <akrowiak(a)linux.ibm.com> s390/vfio-ap: do not reset queue removed from host config Tony Krowiak <akrowiak(a)linux.ibm.com> s390/vfio-ap: reset queues associated with adapter for queue unbound from driver Tony Krowiak <akrowiak(a)linux.ibm.com> s390/vfio-ap: reset queues filtered from the guest's AP config Tony Krowiak <akrowiak(a)linux.ibm.com> s390/vfio-ap: let on_scan_complete() callback filter matrix and update guest's APCB Tony Krowiak <akrowiak(a)linux.ibm.com> s390/vfio-ap: loop over the shadow APCB when filtering guest's AP configuration Tony Krowiak <akrowiak(a)linux.ibm.com> s390/vfio-ap: always filter entire AP matrix Herve Codina <herve.codina(a)bootlin.com> soc: fsl: cpm1: qmc: Fix rx channel reset Herve Codina <herve.codina(a)bootlin.com> soc: fsl: cpm1: qmc: Fix __iomem addresses declaration Herve Codina <herve.codina(a)bootlin.com> soc: fsl: cpm1: tsa: Fix __iomem addresses declaration Bingbu Cao <bingbu.cao(a)intel.com> media: ov01a10: Enable runtime PM before registering async sub-device Bingbu Cao <bingbu.cao(a)intel.com> media: ov13b10: Enable runtime PM before registering async sub-device Bingbu Cao <bingbu.cao(a)intel.com> media: ov9734: Enable runtime PM before registering async sub-device Xiaolei Wang <xiaolei.wang(a)windriver.com> rpmsg: virtio: Free driver_override when rpmsg_remove() Bingbu Cao <bingbu.cao(a)intel.com> media: imx355: Enable runtime PM before registering async sub-device Johan Hovold <johan+linaro(a)kernel.org> soc: qcom: pmic_glink_altmode: fix port sanity check Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: rawnand: Clarify conditions to enable continuous reads Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: rawnand: Prevent sequential reads with on-die ECC engines Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: rawnand: Fix core interference with sequential reads Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: rawnand: Prevent crossing LUN boundaries during sequential reads Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: maps: vmu-flash: Fix the (mtd core) switch to ref counters Christian Marangi <ansuelsmth(a)gmail.com> PM / devfreq: Fix buffer overflow in trans_stat_show Anthony Krowiak <akrowiak(a)linux.ibm.com> s390/vfio-ap: unpin pages on gisc registration failure Herbert Xu <herbert(a)gondor.apana.org.au> crypto: s390/aes - Fix buffer overread in CTR mode Herbert Xu <herbert(a)gondor.apana.org.au> hwrng: core - Fix page fault dead lock on mmap-ed hwrng Hongchen Zhang <zhanghongchen(a)loongson.cn> PM: hibernate: Enforce ordering during image compression/decompression Herbert Xu <herbert(a)gondor.apana.org.au> crypto: api - Disallow identical driver names Gao Xiang <xiang(a)kernel.org> erofs: fix lz4 inplace decompression Tianjia Zhang <tianjia.zhang(a)linux.alibaba.com> crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init David Disseldorp <ddiss(a)suse.de> btrfs: sysfs: validate scrub_speed_max value Viresh Kumar <viresh.kumar(a)linaro.org> OPP: Pass rounded rate to _set_opp() Josef Bacik <josef(a)toxicpanda.com> arm64: properly install vmlinuz.efi Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> PM: sleep: Fix possible deadlocks in core system-wide PM code Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> async: Introduce async_schedule_dev_nocall() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> async: Split async_schedule_node_domain() Suraj Jitindar Singh <surajjs(a)amazon.com> ext4: allow for the last group to be marked as trimmed Geoff Levand <geoff(a)infradead.org> powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2 Lukas Schauer <lukas(a)schauer.dev> pipe: wakeup wr_wait after setting max_usage Marcelo Schmitt <marcelo.schmitt(a)analog.com> iio: adc: ad7091r: Allow users to configure device events Marcelo Schmitt <marcelo.schmitt(a)analog.com> iio: adc: ad7091r: Set alert bit in config register Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> soundwire: fix initializing sysfs for same devices on different buses Pierre-Louis Bossart <pierre-louis.bossart(a)linux.intel.com> soundwire: bus: introduce controller_id ------------- Diffstat: Documentation/ABI/testing/sysfs-class-devfreq | 3 + Documentation/admin-guide/abi-obsolete.rst | 2 +- Documentation/admin-guide/abi-removed.rst | 2 +- Documentation/admin-guide/abi-stable.rst | 2 +- Documentation/admin-guide/abi-testing.rst | 2 +- Documentation/arch/arm64/silicon-errata.rst | 2 + Documentation/filesystems/directory-locking.rst | 29 +- Documentation/filesystems/locking.rst | 5 +- Documentation/filesystems/overlayfs.rst | 16 +- Documentation/filesystems/porting.rst | 18 ++ Documentation/gpu/drm-kms.rst | 2 + Documentation/gpu/todo.rst | 7 +- Documentation/sphinx/kernel_abi.py | 56 +--- Makefile | 4 +- arch/alpha/kernel/rtc.c | 2 +- .../boot/dts/nxp/imx/imx6q-apalis-ixora-v1.2.dts | 2 + arch/arm/boot/dts/qcom/qcom-sdx55.dtsi | 10 +- arch/arm/boot/dts/samsung/exynos4210-i9100.dts | 8 + arch/arm/boot/dts/samsung/exynos4212-tab3.dtsi | 1 + arch/arm64/Kconfig | 18 ++ .../boot/dts/qcom/msm8916-longcheer-l8150.dts | 1 + .../boot/dts/qcom/msm8916-wingtech-wt88047.dts | 1 + arch/arm64/boot/dts/qcom/msm8916.dtsi | 1 + arch/arm64/boot/dts/qcom/msm8939.dtsi | 1 + arch/arm64/boot/dts/qcom/msm8953-xiaomi-mido.dts | 1 + arch/arm64/boot/dts/qcom/msm8953-xiaomi-tissot.dts | 1 + arch/arm64/boot/dts/qcom/msm8953-xiaomi-vince.dts | 1 + arch/arm64/boot/dts/qcom/sc7180.dtsi | 4 +- arch/arm64/boot/dts/qcom/sc7280.dtsi | 4 +- arch/arm64/boot/dts/qcom/sc8180x.dtsi | 16 +- arch/arm64/boot/dts/qcom/sc8280xp-crd.dts | 2 + arch/arm64/boot/dts/qcom/sdm670.dtsi | 8 +- arch/arm64/boot/dts/qcom/sdm845.dtsi | 16 +- arch/arm64/boot/dts/qcom/sm8150.dtsi | 16 +- .../dts/rockchip/rk3328-orangepi-r1-plus-lts.dts | 4 +- arch/arm64/boot/dts/rockchip/rk3588s.dtsi | 1 + arch/arm64/boot/dts/sprd/ums512.dtsi | 4 +- arch/arm64/boot/install.sh | 3 +- arch/arm64/kernel/cpu_errata.c | 21 +- arch/arm64/kernel/entry.S | 22 +- arch/arm64/kernel/fpsimd.c | 6 +- arch/arm64/tools/cpucaps | 2 +- arch/loongarch/kernel/smp.c | 1 - arch/loongarch/mm/tlb.c | 16 +- arch/mips/kernel/elf.c | 6 + arch/mips/lantiq/prom.c | 7 +- arch/mips/mm/init.c | 12 +- arch/parisc/kernel/firmware.c | 4 +- arch/powerpc/configs/ps3_defconfig | 1 + arch/riscv/boot/dts/sophgo/sg2042.dtsi | 80 +++-- arch/riscv/include/asm/pgtable.h | 2 +- arch/riscv/include/asm/processor.h | 2 +- arch/riscv/kernel/module.c | 14 +- arch/riscv/kernel/pi/cmdline_early.c | 3 +- arch/s390/crypto/aes_s390.c | 4 +- arch/s390/crypto/paes_s390.c | 4 +- arch/sh/boards/mach-ecovec24/setup.c | 2 +- arch/x86/include/asm/syscall_wrapper.h | 25 +- arch/x86/kernel/hpet.c | 2 +- arch/x86/kernel/rtc.c | 2 +- block/ioctl.c | 2 - block/partitions/core.c | 5 + crypto/algapi.c | 1 + drivers/base/power/main.c | 148 ++++----- drivers/base/power/trace.c | 2 +- drivers/block/nbd.c | 6 +- drivers/block/rbd.c | 22 +- drivers/bus/mhi/host/main.c | 29 +- drivers/char/hw_random/core.c | 34 +- drivers/cpufreq/amd-pstate.c | 7 +- drivers/cpufreq/intel_pstate.c | 55 ++-- drivers/cxl/core/region.c | 4 +- drivers/devfreq/devfreq.c | 57 ++-- drivers/dma/dmaengine.c | 3 + drivers/dma/fsl-edma-main.c | 8 + drivers/dma/idxd/device.c | 9 +- drivers/dma/xilinx/xdma.c | 6 +- drivers/dpll/dpll_core.c | 68 +++- drivers/dpll/dpll_core.h | 4 +- drivers/dpll/dpll_netlink.c | 57 +++- drivers/firmware/arm_ffa/driver.c | 12 + drivers/firmware/arm_scmi/clock.c | 3 +- drivers/firmware/arm_scmi/common.h | 1 + drivers/firmware/arm_scmi/mailbox.c | 14 + drivers/firmware/arm_scmi/perf.c | 23 +- drivers/firmware/arm_scmi/raw_mode.c | 12 +- drivers/firmware/arm_scmi/shmem.c | 6 + drivers/firmware/sysfb.c | 2 +- drivers/gpio/gpio-eic-sprd.c | 32 +- drivers/gpio/gpiolib-acpi.c | 14 + drivers/gpu/drm/amd/amdgpu/amdgpu.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 2 - drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gart.c | 8 + drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c | 10 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.c | 17 +- drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 20 +- drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 10 +- drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c | 3 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v10.c | 1 + drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v11.c | 1 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 9 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 6 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c | 5 + .../gpu/drm/amd/display/dc/bios/command_table2.c | 12 +- .../amd/display/dc/clk_mgr/dcn31/dcn31_clk_mgr.c | 2 +- .../amd/display/dc/clk_mgr/dcn314/dcn314_clk_mgr.c | 23 +- .../amd/display/dc/clk_mgr/dcn315/dcn315_clk_mgr.c | 2 +- .../amd/display/dc/clk_mgr/dcn316/dcn316_clk_mgr.c | 2 +- .../amd/display/dc/clk_mgr/dcn35/dcn35_clk_mgr.c | 2 +- drivers/gpu/drm/amd/display/dc/core/dc.c | 16 +- .../gpu/drm/amd/display/dc/core/dc_hw_sequencer.c | 2 +- drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 19 +- drivers/gpu/drm/amd/display/dc/dc_dmub_srv.c | 176 ++++++++-- drivers/gpu/drm/amd/display/dc/dc_dmub_srv.h | 59 +++- drivers/gpu/drm/amd/display/dc/dc_helper.c | 6 +- drivers/gpu/drm/amd/display/dc/dce/dmub_abm_lcd.c | 14 +- .../gpu/drm/amd/display/dc/dce/dmub_hw_lock_mgr.c | 2 +- drivers/gpu/drm/amd/display/dc/dce/dmub_outbox.c | 2 +- drivers/gpu/drm/amd/display/dc/dce/dmub_psr.c | 33 +- .../gpu/drm/amd/display/dc/dcn20/dcn20_resource.c | 16 +- .../gpu/drm/amd/display/dc/dcn20/dcn20_resource.h | 1 + drivers/gpu/drm/amd/display/dc/dcn21/dcn21_hubp.c | 2 +- .../amd/display/dc/dcn31/dcn31_dio_link_encoder.c | 4 +- .../drm/amd/display/dc/dcn31/dcn31_panel_cntl.c | 4 +- drivers/gpu/drm/amd/display/dc/dcn32/dcn32_optc.c | 17 + .../gpu/drm/amd/display/dc/dcn32/dcn32_resource.c | 1 + .../drm/amd/display/dc/dcn321/dcn321_resource.c | 1 + drivers/gpu/drm/amd/display/dc/dcn35/dcn35_optc.c | 10 + .../gpu/drm/amd/display/dc/dml/dcn32/dcn32_fpu.c | 6 +- .../drm/amd/display/dc/dml2/display_mode_core.c | 30 +- .../amd/display/dc/dml2/dml2_translation_helper.c | 2 +- .../drm/amd/display/dc/hwss/dcn21/dcn21_hwseq.c | 4 +- .../drm/amd/display/dc/hwss/dcn30/dcn30_hwseq.c | 8 +- .../drm/amd/display/dc/hwss/dcn31/dcn31_hwseq.c | 4 +- .../drm/amd/display/dc/hwss/dcn32/dcn32_hwseq.c | 6 +- .../drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c | 8 +- drivers/gpu/drm/amd/display/dc/inc/core_types.h | 1 + drivers/gpu/drm/amd/display/dc/link/link_dpms.c | 8 +- .../display/dc/link/protocols/link_dp_capability.c | 2 +- .../amd/display/dc/link/protocols/link_dp_dpia.c | 3 +- .../drm/amd/display/dc/link/protocols/link_dpcd.c | 4 +- .../dc/link/protocols/link_edp_panel_control.c | 11 +- drivers/gpu/drm/amd/display/dmub/dmub_srv.h | 21 ++ drivers/gpu/drm/amd/display/dmub/src/dmub_srv.c | 15 + .../drm/amd/display/modules/power/power_helpers.c | 2 + drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 14 +- drivers/gpu/drm/amd/pm/swsmu/smu11/smu_v11_0.c | 2 + drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c | 2 + .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 54 +++- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c | 15 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 54 +++- drivers/gpu/drm/bridge/analogix/anx7625.c | 7 +- drivers/gpu/drm/bridge/analogix/anx7625.h | 2 + drivers/gpu/drm/bridge/nxp-ptn3460.c | 6 +- drivers/gpu/drm/bridge/parade-ps8640.c | 23 ++ drivers/gpu/drm/bridge/samsung-dsim.c | 32 +- drivers/gpu/drm/bridge/sii902x.c | 42 ++- drivers/gpu/drm/drm_damage_helper.c | 3 +- drivers/gpu/drm/drm_plane.c | 14 + drivers/gpu/drm/exynos/exynos5433_drm_decon.c | 4 +- drivers/gpu/drm/exynos/exynos_drm_fimd.c | 4 +- drivers/gpu/drm/exynos/exynos_drm_gsc.c | 2 +- drivers/gpu/drm/i915/display/icl_dsi.c | 3 +- drivers/gpu/drm/i915/display/intel_psr.c | 14 +- drivers/gpu/drm/nouveau/nouveau_fence.c | 28 +- drivers/gpu/drm/nouveau/nouveau_fence.h | 5 +- drivers/gpu/drm/nouveau/nouveau_vmm.c | 3 + drivers/gpu/drm/nouveau/nvkm/engine/fifo/ga100.c | 4 + drivers/gpu/drm/nouveau/nvkm/engine/fifo/r535.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/gsp/base.c | 8 +- drivers/gpu/drm/panel/Kconfig | 2 + drivers/gpu/drm/panel/panel-edp.c | 7 +- drivers/gpu/drm/panel/panel-samsung-s6d7aa0.c | 2 +- drivers/gpu/drm/panel/panel-simple.c | 2 + drivers/gpu/drm/qxl/qxl_drv.c | 2 +- drivers/gpu/drm/tidss/tidss_crtc.c | 10 +- drivers/gpu/drm/vboxvideo/vbox_drv.c | 2 +- drivers/gpu/drm/virtio/virtgpu_drv.c | 2 +- drivers/gpu/drm/virtio/virtgpu_plane.c | 10 + drivers/gpu/drm/vmwgfx/vmwgfx_drv.c | 2 +- drivers/iio/adc/ad7091r-base.c | 169 ++++++++++ drivers/iio/adc/ad7091r-base.h | 8 + drivers/iio/adc/ad7091r5.c | 28 +- drivers/media/common/videobuf2/videobuf2-dma-sg.c | 10 +- drivers/media/i2c/imx290.c | 42 +-- drivers/media/i2c/imx355.c | 12 +- drivers/media/i2c/ov01a10.c | 18 +- drivers/media/i2c/ov13b10.c | 14 +- drivers/media/i2c/ov9734.c | 19 +- drivers/media/i2c/st-mipid02.c | 9 +- .../media/platform/mediatek/jpeg/mtk_jpeg_core.c | 12 +- drivers/media/v4l2-core/v4l2-cci.c | 52 ++- drivers/mmc/core/block.c | 46 ++- drivers/mmc/host/mmc_spi.c | 186 +---------- drivers/mtd/maps/vmu-flash.c | 2 +- drivers/mtd/nand/raw/nand_base.c | 87 ++++- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 8 + drivers/net/ethernet/engleder/tsnep_main.c | 17 +- drivers/net/ethernet/freescale/fec_main.c | 2 + drivers/net/ethernet/intel/i40e/i40e_main.c | 47 ++- drivers/net/ethernet/intel/i40e/i40e_txrx.c | 49 ++- drivers/net/ethernet/intel/i40e/i40e_xsk.c | 4 +- drivers/net/ethernet/intel/ice/ice_base.c | 37 ++- drivers/net/ethernet/intel/ice/ice_txrx.c | 19 +- drivers/net/ethernet/intel/ice/ice_txrx.h | 1 + drivers/net/ethernet/intel/ice/ice_txrx_lib.h | 31 +- drivers/net/ethernet/intel/ice/ice_xsk.c | 4 +- drivers/net/ethernet/intel/idpf/idpf_lib.c | 2 + drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 27 +- drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 5 +- .../mellanox/mlx5/core/en/fs_tt_redirect.c | 1 + .../net/ethernet/mellanox/mlx5/core/en/params.c | 4 +- drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c | 2 +- .../ethernet/mellanox/mlx5/core/en_accel/ipsec.c | 10 +- drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c | 26 +- drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 5 +- .../ethernet/mellanox/mlx5/core/esw/bridge_mcast.c | 3 + drivers/net/ethernet/mellanox/mlx5/core/fs_cmd.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/lib/aso.c | 2 +- .../mellanox/mlx5/core/steering/dr_action.c | 17 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 3 + drivers/net/fjes/fjes_hw.c | 37 ++- drivers/net/hyperv/netvsc_drv.c | 4 +- drivers/net/phy/micrel.c | 11 + drivers/net/tun.c | 10 +- drivers/net/wireless/ath/ath11k/core.h | 4 - drivers/net/wireless/ath/ath11k/debugfs.c | 25 +- drivers/net/wireless/ath/ath11k/debugfs.h | 12 +- drivers/net/wireless/ath/ath11k/mac.c | 12 +- drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.c | 4 +- drivers/opp/core.c | 6 +- drivers/parisc/power.c | 2 +- drivers/platform/mellanox/mlxbf-pmc.c | 4 +- drivers/platform/x86/intel/ifs/load.c | 3 +- .../uncore-frequency/uncore-frequency-common.c | 82 ++--- .../uncore-frequency/uncore-frequency-common.h | 32 +- drivers/platform/x86/p2sb.c | 180 ++++++++--- drivers/platform/x86/wmi.c | 16 +- drivers/rpmsg/virtio_rpmsg_bus.c | 1 + drivers/rtc/rtc-cmos.c | 28 +- drivers/rtc/rtc-mc146818-lib.c | 39 ++- drivers/s390/crypto/vfio_ap_ops.c | 269 ++++++++++------ drivers/s390/crypto/vfio_ap_private.h | 3 + drivers/scsi/scsi_error.c | 9 +- drivers/soc/fsl/qe/qmc.c | 35 +- drivers/soc/fsl/qe/tsa.c | 22 +- drivers/soc/qcom/pmic_glink_altmode.c | 4 +- drivers/soundwire/amd_manager.c | 8 + drivers/soundwire/bus.c | 4 + drivers/soundwire/debugfs.c | 2 +- drivers/soundwire/intel_auxdevice.c | 3 + drivers/soundwire/master.c | 2 +- drivers/soundwire/qcom.c | 3 + drivers/soundwire/slave.c | 12 +- drivers/spi/spi-bcm-qspi.c | 4 +- drivers/spi/spi-cadence.c | 17 +- drivers/spi/spi-intel-pci.c | 1 - drivers/spi/spi.c | 4 + drivers/thermal/gov_power_allocator.c | 2 +- drivers/thermal/intel/intel_hfi.c | 106 +++++-- drivers/tty/serial/sc16is7xx.c | 353 +++++++++++---------- drivers/ufs/core/ufshcd.c | 7 +- fs/afs/addr_list.c | 133 ++++---- fs/afs/cmservice.c | 5 +- fs/afs/dir.c | 70 ++-- fs/afs/dir_silly.c | 2 +- fs/afs/file.c | 7 +- fs/afs/fs_operation.c | 54 ++-- fs/afs/fs_probe.c | 11 +- fs/afs/fsclient.c | 8 +- fs/afs/inode.c | 2 +- fs/afs/internal.h | 88 +++-- fs/afs/misc.c | 10 +- fs/afs/proc.c | 9 +- fs/afs/rotate.c | 224 +++++++++---- fs/afs/rxrpc.c | 100 +++--- fs/afs/server.c | 53 +--- fs/afs/vl_alias.c | 57 +--- fs/afs/vl_list.c | 15 +- fs/afs/vl_probe.c | 19 +- fs/afs/vl_rotate.c | 98 +++--- fs/afs/vlclient.c | 98 ++++-- fs/afs/write.c | 6 +- fs/btrfs/extent-tree.c | 53 +++- fs/btrfs/inode.c | 22 +- fs/btrfs/ioctl.c | 7 + fs/btrfs/ref-verify.c | 6 +- fs/btrfs/scrub.c | 29 +- fs/btrfs/sysfs.c | 4 + fs/btrfs/tree-checker.c | 2 +- fs/btrfs/zoned.c | 8 +- fs/dlm/lowcomms.c | 14 +- fs/erofs/decompressor.c | 31 +- fs/exec.c | 3 + fs/ext4/mballoc.c | 15 +- fs/fscache/cache.c | 3 +- fs/ioctl.c | 3 +- fs/namei.c | 60 ++-- fs/nfsd/nfs4state.c | 26 +- fs/overlayfs/namei.c | 43 ++- fs/overlayfs/overlayfs.h | 23 +- fs/overlayfs/ovl_entry.h | 4 +- fs/overlayfs/readdir.c | 7 +- fs/overlayfs/super.c | 15 + fs/overlayfs/util.c | 53 ++-- fs/pipe.c | 7 +- fs/proc/task_mmu.c | 24 +- fs/smb/client/smb2ops.c | 10 +- fs/smb/client/smb2pdu.c | 108 ++++--- fs/smb/server/connection.c | 1 + fs/smb/server/ksmbd_netlink.h | 3 +- fs/smb/server/oplock.c | 16 +- fs/smb/server/smb2pdu.c | 8 +- fs/smb/server/transport_ipc.c | 4 +- fs/ubifs/dir.c | 2 + fs/xfs/xfs_super.c | 27 +- include/drm/drm_drv.h | 9 + include/drm/drm_file.h | 12 + include/drm/drm_plane.h | 10 + include/linux/async.h | 2 + include/linux/lsm_hook_defs.h | 2 + include/linux/mc146818rtc.h | 3 +- include/linux/mlx5/fs.h | 1 + include/linux/mlx5/mlx5_ifc.h | 2 +- include/linux/mmzone.h | 14 +- include/linux/mtd/rawnand.h | 2 + include/linux/rmap.h | 4 +- include/linux/security.h | 9 + include/linux/seq_buf.h | 3 +- include/linux/skmsg.h | 6 - include/linux/soundwire/sdw.h | 4 +- include/linux/syscalls.h | 1 + include/media/v4l2-cci.h | 11 + include/net/af_rxrpc.h | 15 +- include/net/inet_connection_sock.h | 8 + include/net/inet_sock.h | 5 - include/net/llc_pdu.h | 6 +- include/net/sch_generic.h | 4 + include/net/sock.h | 18 +- include/net/xdp_sock_drv.h | 27 ++ include/trace/events/afs.h | 25 ++ include/trace/events/rxrpc.h | 3 + include/uapi/linux/btrfs.h | 3 + kernel/async.c | 85 +++-- kernel/crash_core.c | 14 +- kernel/futex/core.c | 15 +- kernel/futex/pi.c | 11 +- kernel/irq/irqdesc.c | 2 +- kernel/kexec_core.c | 1 + kernel/power/swap.c | 38 +-- kernel/rcu/tree.c | 34 +- kernel/rcu/tree_exp.h | 3 +- kernel/time/clocksource.c | 25 +- kernel/time/tick-sched.c | 5 + kernel/trace/tracing_map.c | 7 +- lib/crypto/mpi/ec.c | 3 + mm/memblock.c | 3 + mm/migrate.c | 27 +- mm/mm_init.c | 6 + mm/page_alloc.c | 16 +- mm/sparse.c | 17 +- net/8021q/vlan_netlink.c | 4 + net/core/dev.c | 9 + net/core/dev.h | 3 + net/core/filter.c | 44 ++- net/core/request_sock.c | 3 - net/core/sock.c | 11 +- net/ipv4/af_inet.c | 3 + net/ipv4/inet_connection_sock.c | 4 + net/ipv4/tcp.c | 1 + net/ipv6/af_inet6.c | 3 + net/llc/af_llc.c | 24 +- net/llc/llc_core.c | 7 - net/mac80211/sta_info.c | 5 +- net/netfilter/nf_tables_api.c | 20 +- net/netfilter/nft_chain_filter.c | 11 +- net/netfilter/nft_compat.c | 12 + net/netfilter/nft_flow_offload.c | 5 + net/netfilter/nft_limit.c | 23 +- net/netfilter/nft_nat.c | 5 + net/netfilter/nft_rt.c | 5 + net/netfilter/nft_socket.c | 5 + net/netfilter/nft_synproxy.c | 7 +- net/netfilter/nft_tproxy.c | 5 + net/netfilter/nft_xfrm.c | 5 + net/netlink/af_netlink.c | 2 +- net/rds/af_rds.c | 2 +- net/rxrpc/af_rxrpc.c | 62 +++- net/rxrpc/ar-internal.h | 2 +- net/rxrpc/call_object.c | 17 +- net/rxrpc/peer_object.c | 58 ++-- net/rxrpc/sendmsg.c | 11 +- net/sched/cls_api.c | 9 +- net/sched/cls_flower.c | 23 ++ net/smc/smc_diag.c | 2 +- net/sunrpc/svcsock.c | 4 +- net/xdp/xsk.c | 12 +- net/xdp/xsk_buff_pool.c | 1 + scripts/get_abi.pl | 2 +- security/security.c | 18 ++ security/selinux/hooks.c | 28 ++ security/smack/smack_lsm.c | 1 + security/tomoyo/tomoyo.c | 1 + sound/soc/intel/boards/sof_sdw.c | 4 +- .../selftests/drivers/net/bonding/bond_options.sh | 8 +- .../testing/selftests/drivers/net/bonding/settings | 2 +- .../drivers/net/netdevsim/udp_tunnel_nic.sh | 9 + tools/testing/selftests/mm/hugepage-vmemmap.c | 29 +- tools/testing/selftests/net/config | 28 ++ tools/testing/selftests/net/rps_default_mask.sh | 6 +- tools/testing/selftests/net/so_incoming_cpu.c | 68 ++-- tools/testing/selftests/riscv/hwprobe/cbo.c | 18 +- 414 files changed, 4903 insertions(+), 2618 deletions(-)

1 year, 10 months

14
361
0 0

[PATCH v2 1/5] fuse: Fix VM_MAYSHARE and direct_io_allow_mmap

by Bernd Schubert

There were multiple issues with direct_io_allow_mmap: - fuse_link_write_file() was missing, resulting in warnings in fuse_write_file_get() and EIO from msync() - "vma->vm_ops = &fuse_file_vm_ops" was not set, but especially fuse_page_mkwrite is needed. The semantics of invalidate_inode_pages2() is so far not clearly defined in fuse_file_mmap. It dates back to commit 3121bfe76311 ("fuse: fix "direct_io" private mmap") Though, as direct_io_allow_mmap is a new feature, that was for MAP_PRIVATE only. As invalidate_inode_pages2() is calling into fuse_launder_folio() and writes out dirty pages, it should be safe to call invalidate_inode_pages2 for MAP_PRIVATE and MAP_SHARED as well. Cc: Hao Xu <howeyxu(a)tencent.com> Cc: stable(a)vger.kernel.org Fixes: e78662e818f9 ("fuse: add a new fuse init flag to relax restrictions in no cache mode") Signed-off-by: Bernd Schubert <bschubert(a)ddn.com> Reviewed-by: Amir Goldstein <amir73il(a)gmail.com> --- fs/fuse/file.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/fs/fuse/file.c b/fs/fuse/file.c index 148a71b8b4d0..243f469cac07 100644 --- a/fs/fuse/file.c +++ b/fs/fuse/file.c @@ -2476,7 +2476,10 @@ static int fuse_file_mmap(struct file *file, struct vm_area_struct *vma) invalidate_inode_pages2(file->f_mapping); - return generic_file_mmap(file, vma); + if (!(vma->vm_flags & VM_MAYSHARE)) { + /* MAP_PRIVATE */ + return generic_file_mmap(file, vma); + } } if ((vma->vm_flags & VM_SHARED) && (vma->vm_flags & VM_MAYWRITE)) -- 2.40.1

1 year, 10 months

4
8
0 0

[PATCH] crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked

by Kim Phillips

The SEV platform device can be shutdown with a null psp_master, e.g., using DEBUG_TEST_DRIVER_REMOVE. Found using KASAN: [ 137.148210] ccp 0000:23:00.1: enabling device (0000 -> 0002) [ 137.162647] ccp 0000:23:00.1: no command queues available [ 137.170598] ccp 0000:23:00.1: sev enabled [ 137.174645] ccp 0000:23:00.1: psp enabled [ 137.178890] general protection fault, probably for non-canonical address 0xdffffc000000001e: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN NOPTI [ 137.182693] KASAN: null-ptr-deref in range [0x00000000000000f0-0x00000000000000f7] [ 137.182693] CPU: 93 PID: 1 Comm: swapper/0 Not tainted 6.8.0-rc1+ #311 [ 137.182693] RIP: 0010:__sev_platform_shutdown_locked+0x51/0x180 [ 137.182693] Code: 08 80 3c 08 00 0f 85 0e 01 00 00 48 8b 1d 67 b6 01 08 48 b8 00 00 00 00 00 fc ff df 48 8d bb f0 00 00 00 48 89 f9 48 c1 e9 03 <80> 3c 01 00 0f 85 fe 00 00 00 48 8b 9b f0 00 00 00 48 85 db 74 2c [ 137.182693] RSP: 0018:ffffc900000cf9b0 EFLAGS: 00010216 [ 137.182693] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 000000000000001e [ 137.182693] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000000000f0 [ 137.182693] RBP: ffffc900000cf9c8 R08: 0000000000000000 R09: fffffbfff58f5a66 [ 137.182693] R10: ffffc900000cf9c8 R11: ffffffffac7ad32f R12: ffff8881e5052c28 [ 137.182693] R13: ffff8881e5052c28 R14: ffff8881758e43e8 R15: ffffffffac64abf8 [ 137.182693] FS: 0000000000000000(0000) GS:ffff889de7000000(0000) knlGS:0000000000000000 [ 137.182693] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.182693] CR2: 0000000000000000 CR3: 0000001cf7c7e000 CR4: 0000000000350ef0 [ 137.182693] Call Trace: [ 137.182693] <TASK> [ 137.182693] ? show_regs+0x6c/0x80 [ 137.182693] ? __die_body+0x24/0x70 [ 137.182693] ? die_addr+0x4b/0x80 [ 137.182693] ? exc_general_protection+0x126/0x230 [ 137.182693] ? asm_exc_general_protection+0x2b/0x30 [ 137.182693] ? __sev_platform_shutdown_locked+0x51/0x180 [ 137.182693] sev_firmware_shutdown.isra.0+0x1e/0x80 [ 137.182693] sev_dev_destroy+0x49/0x100 [ 137.182693] psp_dev_destroy+0x47/0xb0 [ 137.182693] sp_destroy+0xbb/0x240 [ 137.182693] sp_pci_remove+0x45/0x60 [ 137.182693] pci_device_remove+0xaa/0x1d0 [ 137.182693] device_remove+0xc7/0x170 [ 137.182693] really_probe+0x374/0xbe0 [ 137.182693] ? srso_return_thunk+0x5/0x5f [ 137.182693] __driver_probe_device+0x199/0x460 [ 137.182693] driver_probe_device+0x4e/0xd0 [ 137.182693] __driver_attach+0x191/0x3d0 [ 137.182693] ? __pfx___driver_attach+0x10/0x10 [ 137.182693] bus_for_each_dev+0x100/0x190 [ 137.182693] ? __pfx_bus_for_each_dev+0x10/0x10 [ 137.182693] ? __kasan_check_read+0x15/0x20 [ 137.182693] ? srso_return_thunk+0x5/0x5f [ 137.182693] ? _raw_spin_unlock+0x27/0x50 [ 137.182693] driver_attach+0x41/0x60 [ 137.182693] bus_add_driver+0x2a8/0x580 [ 137.182693] driver_register+0x141/0x480 [ 137.182693] __pci_register_driver+0x1d6/0x2a0 [ 137.182693] ? srso_return_thunk+0x5/0x5f [ 137.182693] ? esrt_sysfs_init+0x1cd/0x5d0 [ 137.182693] ? __pfx_sp_mod_init+0x10/0x10 [ 137.182693] sp_pci_init+0x22/0x30 [ 137.182693] sp_mod_init+0x14/0x30 [ 137.182693] ? __pfx_sp_mod_init+0x10/0x10 [ 137.182693] do_one_initcall+0xd1/0x470 [ 137.182693] ? __pfx_do_one_initcall+0x10/0x10 [ 137.182693] ? parameq+0x80/0xf0 [ 137.182693] ? srso_return_thunk+0x5/0x5f [ 137.182693] ? __kmalloc+0x3b0/0x4e0 [ 137.182693] ? kernel_init_freeable+0x92d/0x1050 [ 137.182693] ? kasan_populate_vmalloc_pte+0x171/0x190 [ 137.182693] ? srso_return_thunk+0x5/0x5f [ 137.182693] kernel_init_freeable+0xa64/0x1050 [ 137.182693] ? __pfx_kernel_init+0x10/0x10 [ 137.182693] kernel_init+0x24/0x160 [ 137.182693] ? __switch_to_asm+0x3e/0x70 [ 137.182693] ret_from_fork+0x40/0x80 [ 137.182693] ? __pfx_kernel_init+0x10/0x10 [ 137.182693] ret_from_fork_asm+0x1b/0x30 [ 137.182693] </TASK> [ 137.182693] Modules linked in: [ 137.538483] ---[ end trace 0000000000000000 ]--- Fixes: 1b05ece0c9315 ("crypto: ccp - During shutdown, check SEV data pointer before using") Cc: stable(a)vger.kernel.org Reviewed-by: Mario Limonciello <mario.limonciello(a)amd.com> Signed-off-by: Kim Phillips <kim.phillips(a)amd.com> --- drivers/crypto/ccp/sev-dev.c | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/drivers/crypto/ccp/sev-dev.c b/drivers/crypto/ccp/sev-dev.c index fcaccd0b5a65..53b217a62104 100644 --- a/drivers/crypto/ccp/sev-dev.c +++ b/drivers/crypto/ccp/sev-dev.c @@ -534,10 +534,16 @@ EXPORT_SYMBOL_GPL(sev_platform_init); static int __sev_platform_shutdown_locked(int *error) { - struct sev_device *sev = psp_master->sev_data; + struct psp_device *psp = psp_master; + struct sev_device *sev; int ret; - if (!sev || sev->state == SEV_STATE_UNINIT) + if (!psp || !psp->sev_data) + return 0; + + sev = psp->sev_data; + + if (sev->state == SEV_STATE_UNINIT) return 0; ret = __sev_do_cmd_locked(SEV_CMD_SHUTDOWN, NULL, error); -- 2.34.1

1 year, 10 months

4
4
0 0

[PATCH regression fix 0/2] Input: atkbd - Fix Dell XPS 13 line suspend/resume regression

by Hans de Goede

Hi Dmitry, There have been multiple reports that the keyboard on Dell XPS 13 9350 / 9360 / 9370 models has stopped working after a suspend/resume after the merging of commit 936e4d49ecbc ("Input: atkbd - skip ATKBD_CMD_GETID in translated mode"). See the 4 closes tags in the first patch for 4 reports of this. I have been working with the first reporter on resolving this and testing on his Dell XPS 13 9360 confirms that these patches fix things. Unfortunately the commit causing the issue has also been picked up by multiple stable kernel series now. Can you please send these fixes to Linus ASAP, so that they can also be backported to the stable series ASAP ? Alternatively we could revert the commit causing this, but that commit is know to fix issues on a whole bunch of other laptops so I would rather not revert it. Regards, Hans Hans de Goede (2): Input: atkbd - Skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID Input: atkbd - Do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID drivers/input/keyboard/atkbd.c | 14 +++++++++----- 1 file changed, 9 insertions(+), 5 deletions(-) -- 2.43.0

1 year, 10 months

3
8
0 0

[PATCH net 0/9] mptcp: fixes for recent issues reported by CI's

by Matthieu Baerts (NGI0)

This series of 9 patches fixes issues mostly identified by CI's not managed by the MPTCP maintainers. Thank you Linero (LKFT) and Netdev maintainers (NIPA) for running our kunit and selftests tests! For the first patch, it took a bit of time to identify the root cause. Some MPTCP Join selftest subtests have been "flaky", mostly in slow environments. It appears to be due to the use of a TCP-specific helper on an MPTCP socket. A fix for kernels >= v5.15. Patches 2 to 4 add missing kernel config to support NetFilter tables needed for IPTables commands. These kconfigs are usually enabled in default configurations, but apparently not for all architectures. Patches 2 and 3 can be backported up to v5.11 and the 4th one up to v5.19. Patch 5 increases the time limit for MPTCP selftests. It appears that many CI's execute tests in a VM without acceleration supports, e.g. QEmu without KVM. As a result, the tests take longer. Plus, there are more and more tests. This patch modifies the timeout added in v5.18. Patch 6 reduces the maximum rate and delay of the different links in some Simult Flows selftest subtests. The goal is to let slow VMs reach the maximum speed. The original rate was introduced in v5.11. Patch 7 lets CI changing the prefix of the subtests titles, to be able to run the same selftest multiple times with different parameters. With different titles, tests will be considered as different and not override previous results as it is the case with some CI envs. Subtests have been introduced in v6.6. Patch 8 and 9 make some MPTCP Join selftest subtests quicker by stopping the transfer when the expected events have been seen. Patch 8 can be backported up to v6.5. Signed-off-by: Matthieu Baerts (NGI0) <matttbe(a)kernel.org> --- Matthieu Baerts (NGI0) (8): selftests: mptcp: add missing kconfig for NF Filter selftests: mptcp: add missing kconfig for NF Filter in v6 selftests: mptcp: add missing kconfig for NF Mangle selftests: mptcp: increase timeout to 30 min selftests: mptcp: decrease BW in simult flows selftests: mptcp: allow changing subtests prefix selftests: mptcp: join: stop transfer when check is done (part 1) selftests: mptcp: join: stop transfer when check is done (part 2) Paolo Abeni (1): mptcp: fix data re-injection from stale subflow net/mptcp/protocol.c | 3 --- tools/testing/selftests/net/mptcp/config | 3 +++ tools/testing/selftests/net/mptcp/mptcp_join.sh | 27 +++++++++-------------- tools/testing/selftests/net/mptcp/mptcp_lib.sh | 2 +- tools/testing/selftests/net/mptcp/settings | 2 +- tools/testing/selftests/net/mptcp/simult_flows.sh | 8 +++---- 6 files changed, 20 insertions(+), 25 deletions(-) --- base-commit: c9ec85153fea6873c52ed4f5055c87263f1b54f9 change-id: 20240131-upstream-net-20240131-mptcp-ci-issues-9d68b5601e74 Best regards, -- Matthieu Baerts (NGI0) <matttbe(a)kernel.org>

1 year, 10 months

2
10
0 0

[PATCH V2 net] hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove

by Souradeep Chakrabarti

In commit ac5047671758 ("hv_netvsc: Disable NAPI before closing the VMBus channel"), napi_disable was getting called for all channels, including all subchannels without confirming if they are enabled or not. This caused hv_netvsc getting hung at napi_disable, when netvsc_probe() has finished running but nvdev->subchan_work has not started yet. netvsc_subchan_work() -> rndis_set_subchannel() has not created the sub-channels and because of that netvsc_sc_open() is not running. netvsc_remove() calls cancel_work_sync(&nvdev->subchan_work), for which netvsc_subchan_work did not run. netif_napi_add() sets the bit NAPI_STATE_SCHED because it ensures NAPI cannot be scheduled. Then netvsc_sc_open() -> napi_enable will clear the NAPIF_STATE_SCHED bit, so it can be scheduled. napi_disable() does the opposite. Now during netvsc_device_remove(), when napi_disable is called for those subchannels, napi_disable gets stuck on infinite msleep. This fix addresses this problem by ensuring that napi_disable() is not getting called for non-enabled NAPI struct. But netif_napi_del() is still necessary for these non-enabled NAPI struct for cleanup purpose. Call trace: [ 654.559417] task:modprobe state:D stack: 0 pid: 2321 ppid: 1091 flags:0x00004002 [ 654.568030] Call Trace: [ 654.571221] <TASK> [ 654.573790] __schedule+0x2d6/0x960 [ 654.577733] schedule+0x69/0xf0 [ 654.581214] schedule_timeout+0x87/0x140 [ 654.585463] ? __bpf_trace_tick_stop+0x20/0x20 [ 654.590291] msleep+0x2d/0x40 [ 654.593625] napi_disable+0x2b/0x80 [ 654.597437] netvsc_device_remove+0x8a/0x1f0 [hv_netvsc] [ 654.603935] rndis_filter_device_remove+0x194/0x1c0 [hv_netvsc] [ 654.611101] ? do_wait_intr+0xb0/0xb0 [ 654.615753] netvsc_remove+0x7c/0x120 [hv_netvsc] [ 654.621675] vmbus_remove+0x27/0x40 [hv_vmbus] Cc: stable(a)vger.kernel.org Fixes: ac5047671758 ("hv_netvsc: Disable NAPI before closing the VMBus channel") Signed-off-by: Souradeep Chakrabarti <schakrabarti(a)linux.microsoft.com> Reviewed-by: Dexuan Cui <decui(a)microsoft.com> Reviewed-by: Haiyang Zhang <haiyangz(a)microsoft.com> --- V1 -> V2: Changed commit message, added some more details on napi NAPIF_STATE_SCHED bit set and reset. --- drivers/net/hyperv/netvsc.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/drivers/net/hyperv/netvsc.c b/drivers/net/hyperv/netvsc.c index 1dafa44155d0..a6fcbda64ecc 100644 --- a/drivers/net/hyperv/netvsc.c +++ b/drivers/net/hyperv/netvsc.c @@ -708,7 +708,10 @@ void netvsc_device_remove(struct hv_device *device) /* Disable NAPI and disassociate its context from the device. */ for (i = 0; i < net_device->num_chn; i++) { /* See also vmbus_reset_channel_cb(). */ - napi_disable(&net_device->chan_table[i].napi); + /* only disable enabled NAPI channel */ + if (i < ndev->real_num_rx_queues) + napi_disable(&net_device->chan_table[i].napi); + netif_napi_del(&net_device->chan_table[i].napi); } -- 2.34.1

1 year, 10 months

3
2
0 0

[PATCH] tty: fix atomicity violation in n_tty_read

by Gui-Dong Han

In n_tty_read(): if (packet && tty->link->ctrl.pktstatus) { ... spin_lock_irq(&tty->link->ctrl.lock); cs = tty->link->ctrl.pktstatus; tty->link->ctrl.pktstatus = 0; spin_unlock_irq(&tty->link->ctrl.lock); *kb++ = cs; ... In n_tty_read() function, there is a potential atomicity violation issue. The tty->link->ctrl.pktstatus might be set to 0 after being checked, which could lead to incorrect values in the kernel space buffer pointer (kb/kbuf). The check if (packet && tty->link->ctrl.pktstatus) occurs outside the spin_lock_irq(&tty->link->ctrl.lock) block. This may lead to tty->link->ctrl.pktstatus being altered between the check and the lock, causing *kb++ = cs; to be assigned with a zero pktstatus value. This possible bug is found by an experimental static analysis tool developed by our team, BassCheck[1]. This tool analyzes the locking APIs to extract function pairs that can be concurrently executed, and then analyzes the instructions in the paired functions to identify possible concurrency bugs including data races and atomicity violations. The above possible bug is reported when our tool analyzes the source code of Linux 5.17. To resolve this atomicity issue, it is suggested to move the condition check if (packet && tty->link->ctrl.pktstatus) inside the spin_lock block. With this patch applied, our tool no longer reports the bug, with the kernel configuration allyesconfig for x86_64. Due to the absence of the requisite hardware, we are unable to conduct runtime testing of the patch. Therefore, our verification is solely based on code logic analysis. [1] https://sites.google.com/view/basscheck/ Fixes: 64d608db38ff ("tty: cumulate and document tty_struct::ctrl* members") Cc: stable(a)vger.kernel.org Signed-off-by: Gui-Dong Han <2045gemini(a)gmail.com> --- drivers/tty/n_tty.c | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/drivers/tty/n_tty.c b/drivers/tty/n_tty.c index f252d0b5a434..df54ab0c4d8c 100644 --- a/drivers/tty/n_tty.c +++ b/drivers/tty/n_tty.c @@ -2222,19 +2222,23 @@ static ssize_t n_tty_read(struct tty_struct *tty, struct file *file, u8 *kbuf, add_wait_queue(&tty->read_wait, &wait); while (nr) { /* First test for status change. */ + spin_lock_irq(&tty->link->ctrl.lock); if (packet && tty->link->ctrl.pktstatus) { u8 cs; - if (kb != kbuf) + if (kb != kbuf) { + spin_unlock_irq(&tty->link->ctrl.lock); break; - spin_lock_irq(&tty->link->ctrl.lock); + } cs = tty->link->ctrl.pktstatus; tty->link->ctrl.pktstatus = 0; spin_unlock_irq(&tty->link->ctrl.lock); *kb++ = cs; nr--; break; + } else { + spin_unlock_irq(&tty->link->ctrl.lock); } - + if (!input_available_p(tty, 0)) { up_read(&tty->termios_rwsem); tty_buffer_flush_work(tty->port); -- 2.34.1

1 year, 10 months

6
7
0 0

[PATCH 5.10/5.15 0/1] media: atomisp: add error checking to atomisp_create_pipes_stream()

by Anastasia Belova

atomisp_create_pipes_stream does not handle errors in __create_pipes and __create_streams in versions 5.10 and 5.15. The following patch may fix it. Found by Linux Verification Center (linuxtesting.org) with Svace.

1 year, 10 months

1
2
0 0

[PATCH] HID: i2c-hid-of: fix NULL-deref on failed power up

by Johan Hovold

A while back the I2C HID implementation was split in an ACPI and OF part, but the new OF driver never initialises the client pointer which is dereferenced on power-up failures. Fixes: b33752c30023 ("HID: i2c-hid: Reorganize so ACPI and OF are separate modules") Cc: stable(a)vger.kernel.org # 5.12 Cc: Douglas Anderson <dianders(a)chromium.org> Signed-off-by: Johan Hovold <johan+linaro(a)kernel.org> --- drivers/hid/i2c-hid/i2c-hid-of.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/hid/i2c-hid/i2c-hid-of.c b/drivers/hid/i2c-hid/i2c-hid-of.c index c4e1fa0273c8..8be4d576da77 100644 --- a/drivers/hid/i2c-hid/i2c-hid-of.c +++ b/drivers/hid/i2c-hid/i2c-hid-of.c @@ -87,6 +87,7 @@ static int i2c_hid_of_probe(struct i2c_client *client) if (!ihid_of) return -ENOMEM; + ihid_of->client = client; ihid_of->ops.power_up = i2c_hid_of_power_up; ihid_of->ops.power_down = i2c_hid_of_power_down; -- 2.43.0

1 year, 10 months

4
3
0 0

[PATCH] hv_netvsc:Register VF in netvsc_probe if NET_DEVICE_REGISTER missed

by Shradha Gupta

If hv_netvsc driver is removed and reloaded, the NET_DEVICE_REGISTER handler cannot perform VF register successfully as the register call is received before netvsc_probe is finished. This is because we register register_netdevice_notifier() very early(even before vmbus_driver_register()). To fix this, we try to register each such matching VF( if it is visible as a netdevice) at the end of netvsc_probe. Cc: stable(a)vger.kernel.org Fixes: 85520856466e ("hv_netvsc: Fix race of register_netdevice_notifier and VF register") Suggested-by: Dexuan Cui <decui(a)microsoft.com> Signed-off-by: Shradha Gupta <shradhagupta(a)linux.microsoft.com> Tested-on: Ubuntu22 Testcases: LISA testsuites verify_reload_hyperv_modules, perf_tcp_ntttcp_sriov --- drivers/net/hyperv/netvsc_drv.c | 49 ++++++++++++++++++++++++++++----- 1 file changed, 42 insertions(+), 7 deletions(-) diff --git a/drivers/net/hyperv/netvsc_drv.c b/drivers/net/hyperv/netvsc_drv.c index 706ea5263e87..25c4dc9cc4bd 100644 --- a/drivers/net/hyperv/netvsc_drv.c +++ b/drivers/net/hyperv/netvsc_drv.c @@ -42,6 +42,10 @@ #define LINKCHANGE_INT (2 * HZ) #define VF_TAKEOVER_INT (HZ / 10) +/* Macros to define the context of vf registration */ +#define VF_REG_IN_PROBE 1 +#define VF_REG_IN_RECV_CBACK 2 + static unsigned int ring_size __ro_after_init = 128; module_param(ring_size, uint, 0444); MODULE_PARM_DESC(ring_size, "Ring buffer size (# of pages)"); @@ -2183,7 +2187,7 @@ static rx_handler_result_t netvsc_vf_handle_frame(struct sk_buff **pskb) } static int netvsc_vf_join(struct net_device *vf_netdev, - struct net_device *ndev) + struct net_device *ndev, int context) { struct net_device_context *ndev_ctx = netdev_priv(ndev); int ret; @@ -2205,8 +2209,11 @@ static int netvsc_vf_join(struct net_device *vf_netdev, ndev->name, ret); goto upper_link_failed; } - - schedule_delayed_work(&ndev_ctx->vf_takeover, VF_TAKEOVER_INT); + /* If this registration is called from probe context vf_takeover + * is taken care of later in probe itself. + */ + if (context == VF_REG_IN_RECV_CBACK) + schedule_delayed_work(&ndev_ctx->vf_takeover, VF_TAKEOVER_INT); call_netdevice_notifiers(NETDEV_JOIN, vf_netdev); @@ -2344,7 +2351,7 @@ static int netvsc_prepare_bonding(struct net_device *vf_netdev) return NOTIFY_DONE; } -static int netvsc_register_vf(struct net_device *vf_netdev) +static int netvsc_register_vf(struct net_device *vf_netdev, int context) { struct net_device_context *net_device_ctx; struct netvsc_device *netvsc_dev; @@ -2384,7 +2391,7 @@ static int netvsc_register_vf(struct net_device *vf_netdev) netdev_info(ndev, "VF registering: %s\n", vf_netdev->name); - if (netvsc_vf_join(vf_netdev, ndev) != 0) + if (netvsc_vf_join(vf_netdev, ndev, context) != 0) return NOTIFY_DONE; dev_hold(vf_netdev); @@ -2485,7 +2492,7 @@ static int netvsc_unregister_vf(struct net_device *vf_netdev) static int netvsc_probe(struct hv_device *dev, const struct hv_vmbus_device_id *dev_id) { - struct net_device *net = NULL; + struct net_device *net = NULL, *vf_netdev; struct net_device_context *net_device_ctx; struct netvsc_device_info *device_info = NULL; struct netvsc_device *nvdev; @@ -2597,6 +2604,34 @@ static int netvsc_probe(struct hv_device *dev, } list_add(&net_device_ctx->list, &netvsc_dev_list); + + /* When the hv_netvsc driver is removed and readded, the + * NET_DEVICE_REGISTER for the vf device is replayed before probe + * is complete. This is because register_netdevice_notifier() gets + * registered before vmbus_driver_register() so that callback func + * is set before probe and we don't miss events like NETDEV_POST_INIT + * So, in this section we try to register each matching + * vf device that is present as a netdevice, knowing that it's register + * call is not processed in the netvsc_netdev_notifier(as probing is + * progress and get_netvsc_byslot fails). + */ + for_each_netdev(dev_net(net), vf_netdev) { + if (vf_netdev->netdev_ops == &device_ops) + continue; + + if (vf_netdev->type != ARPHRD_ETHER) + continue; + + if (is_vlan_dev(vf_netdev)) + continue; + + if (netif_is_bond_master(vf_netdev)) + continue; + + netvsc_prepare_bonding(vf_netdev); + netvsc_register_vf(vf_netdev, VF_REG_IN_PROBE); + __netvsc_vf_setup(net, vf_netdev); + } rtnl_unlock(); netvsc_devinfo_put(device_info); @@ -2773,7 +2808,7 @@ static int netvsc_netdev_event(struct notifier_block *this, case NETDEV_POST_INIT: return netvsc_prepare_bonding(event_dev); case NETDEV_REGISTER: - return netvsc_register_vf(event_dev); + return netvsc_register_vf(event_dev, VF_REG_IN_RECV_CBACK); case NETDEV_UNREGISTER: return netvsc_unregister_vf(event_dev); case NETDEV_UP: -- 2.34.1

1 year, 10 months

5
12
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror January 2024