July 2024 - Linux-stable-mirror

[PATCH 04/11] drm/v3d: Validate passed in drm syncobj handles in the timestamp extension

by Tvrtko Ursulin

From: Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> If userspace provides an unknown or invalid handle anywhere in the handle array the rest of the driver will not handle that well. Fix it by checking handle was looked up successfully or otherwise fail the extension by jumping into the existing unwind. Signed-off-by: Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> Fixes: 9ba0ff3e083f ("drm/v3d: Create a CPU job extension for the timestamp query job") Cc: Maíra Canal <mcanal(a)igalia.com> Cc: Iago Toral Quiroga <itoral(a)igalia.com> Cc: <stable(a)vger.kernel.org> # v6.8+ --- drivers/gpu/drm/v3d/v3d_submit.c | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/drivers/gpu/drm/v3d/v3d_submit.c b/drivers/gpu/drm/v3d/v3d_submit.c index d626c8539b04..e3a00c8394a5 100644 --- a/drivers/gpu/drm/v3d/v3d_submit.c +++ b/drivers/gpu/drm/v3d/v3d_submit.c @@ -498,6 +498,10 @@ v3d_get_cpu_timestamp_query_params(struct drm_file *file_priv, } job->timestamp_query.queries[i].syncobj = drm_syncobj_find(file_priv, sync); + if (!job->timestamp_query.queries[i].syncobj) { + err = -ENOENT; + goto error; + } } job->timestamp_query.count = timestamp.count; @@ -552,6 +556,10 @@ v3d_get_cpu_reset_timestamp_params(struct drm_file *file_priv, } job->timestamp_query.queries[i].syncobj = drm_syncobj_find(file_priv, sync); + if (!job->timestamp_query.queries[i].syncobj) { + err = -ENOENT; + goto error; + } } job->timestamp_query.count = reset.count; @@ -616,6 +624,10 @@ v3d_get_cpu_copy_query_results_params(struct drm_file *file_priv, } job->timestamp_query.queries[i].syncobj = drm_syncobj_find(file_priv, sync); + if (!job->timestamp_query.queries[i].syncobj) { + err = -ENOENT; + goto error; + } } job->timestamp_query.count = copy.count; -- 2.44.0

6 months

2
1
0 0

[PATCH 03/11] drm/v3d: Fix potential memory leak in the performance extension

by Tvrtko Ursulin

From: Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> If fetching of userspace memory fails during the main loop, all drm sync objs looked up until that point will be leaked because of the missing drm_syncobj_put. Fix it by exporting and using a common cleanup helper. Signed-off-by: Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> Fixes: bae7cb5d6800 ("drm/v3d: Create a CPU job extension for the reset performance query job") Cc: Maíra Canal <mcanal(a)igalia.com> Cc: Iago Toral Quiroga <itoral(a)igalia.com> Cc: <stable(a)vger.kernel.org> # v6.8+ --- drivers/gpu/drm/v3d/v3d_drv.h | 2 ++ drivers/gpu/drm/v3d/v3d_sched.c | 22 ++++++++++---- drivers/gpu/drm/v3d/v3d_submit.c | 50 ++++++++++++++++++++------------ 3 files changed, 49 insertions(+), 25 deletions(-) diff --git a/drivers/gpu/drm/v3d/v3d_drv.h b/drivers/gpu/drm/v3d/v3d_drv.h index e208ffdfba32..dd3ead4cb8bd 100644 --- a/drivers/gpu/drm/v3d/v3d_drv.h +++ b/drivers/gpu/drm/v3d/v3d_drv.h @@ -565,6 +565,8 @@ void v3d_mmu_remove_ptes(struct v3d_bo *bo); /* v3d_sched.c */ void v3d_timestamp_query_info_free(struct v3d_timestamp_query_info *query_info, unsigned int count); +void v3d_performance_query_info_free(struct v3d_performance_query_info *query_info, + unsigned int count); void v3d_job_update_stats(struct v3d_job *job, enum v3d_queue queue); int v3d_sched_init(struct v3d_dev *v3d); void v3d_sched_fini(struct v3d_dev *v3d); diff --git a/drivers/gpu/drm/v3d/v3d_sched.c b/drivers/gpu/drm/v3d/v3d_sched.c index 59dc0287dab9..5fbbee47c6b7 100644 --- a/drivers/gpu/drm/v3d/v3d_sched.c +++ b/drivers/gpu/drm/v3d/v3d_sched.c @@ -87,20 +87,30 @@ v3d_timestamp_query_info_free(struct v3d_timestamp_query_info *query_info, } } +void +v3d_performance_query_info_free(struct v3d_performance_query_info *query_info, + unsigned int count) +{ + if (query_info->queries) { + unsigned int i; + + for (i = 0; i < count; i++) + drm_syncobj_put(query_info->queries[i].syncobj); + + kvfree(query_info->queries); + } +} + static void v3d_cpu_job_free(struct drm_sched_job *sched_job) { struct v3d_cpu_job *job = to_cpu_job(sched_job); - struct v3d_performance_query_info *performance_query = &job->performance_query; v3d_timestamp_query_info_free(&job->timestamp_query, job->timestamp_query.count); - if (performance_query->queries) { - for (int i = 0; i < performance_query->count; i++) - drm_syncobj_put(performance_query->queries[i].syncobj); - kvfree(performance_query->queries); - } + v3d_performance_query_info_free(&job->performance_query, + job->performance_query.count); v3d_job_cleanup(&job->base); } diff --git a/drivers/gpu/drm/v3d/v3d_submit.c b/drivers/gpu/drm/v3d/v3d_submit.c index 121bf1314b80..d626c8539b04 100644 --- a/drivers/gpu/drm/v3d/v3d_submit.c +++ b/drivers/gpu/drm/v3d/v3d_submit.c @@ -640,6 +640,8 @@ v3d_get_cpu_reset_performance_params(struct drm_file *file_priv, u32 __user *syncs; u64 __user *kperfmon_ids; struct drm_v3d_reset_performance_query reset; + unsigned int i, j; + int err; if (!job) { DRM_DEBUG("CPU job extension was attached to a GPU job.\n"); @@ -668,39 +670,43 @@ v3d_get_cpu_reset_performance_params(struct drm_file *file_priv, syncs = u64_to_user_ptr(reset.syncs); kperfmon_ids = u64_to_user_ptr(reset.kperfmon_ids); - for (int i = 0; i < reset.count; i++) { + for (i = 0; i < reset.count; i++) { u32 sync; u64 ids; u32 __user *ids_pointer; u32 id; if (copy_from_user(&sync, syncs++, sizeof(sync))) { - kvfree(job->performance_query.queries); - return -EFAULT; + err = -EFAULT; + goto error; } - job->performance_query.queries[i].syncobj = drm_syncobj_find(file_priv, sync); - if (copy_from_user(&ids, kperfmon_ids++, sizeof(ids))) { - kvfree(job->performance_query.queries); - return -EFAULT; + err = -EFAULT; + goto error; } ids_pointer = u64_to_user_ptr(ids); - for (int j = 0; j < reset.nperfmons; j++) { + for (j = 0; j < reset.nperfmons; j++) { if (copy_from_user(&id, ids_pointer++, sizeof(id))) { - kvfree(job->performance_query.queries); - return -EFAULT; + err = -EFAULT; + goto error; } job->performance_query.queries[i].kperfmon_ids[j] = id; } + + job->performance_query.queries[i].syncobj = drm_syncobj_find(file_priv, sync); } job->performance_query.count = reset.count; job->performance_query.nperfmons = reset.nperfmons; return 0; + +error: + v3d_performance_query_info_free(&job->performance_query, i); + return err; } static int @@ -711,6 +717,8 @@ v3d_get_cpu_copy_performance_query_params(struct drm_file *file_priv, u32 __user *syncs; u64 __user *kperfmon_ids; struct drm_v3d_copy_performance_query copy; + unsigned int i, j; + int err; if (!job) { DRM_DEBUG("CPU job extension was attached to a GPU job.\n"); @@ -749,27 +757,27 @@ v3d_get_cpu_copy_performance_query_params(struct drm_file *file_priv, u32 id; if (copy_from_user(&sync, syncs++, sizeof(sync))) { - kvfree(job->performance_query.queries); - return -EFAULT; + err = -EFAULT; + goto error; } - job->performance_query.queries[i].syncobj = drm_syncobj_find(file_priv, sync); - if (copy_from_user(&ids, kperfmon_ids++, sizeof(ids))) { - kvfree(job->performance_query.queries); - return -EFAULT; + err = -EFAULT; + goto error; } ids_pointer = u64_to_user_ptr(ids); - for (int j = 0; j < copy.nperfmons; j++) { + for (j = 0; j < copy.nperfmons; j++) { if (copy_from_user(&id, ids_pointer++, sizeof(id))) { - kvfree(job->performance_query.queries); - return -EFAULT; + err = -EFAULT; + goto error; } job->performance_query.queries[i].kperfmon_ids[j] = id; } + + job->performance_query.queries[i].syncobj = drm_syncobj_find(file_priv, sync); } job->performance_query.count = copy.count; job->performance_query.nperfmons = copy.nperfmons; @@ -782,6 +790,10 @@ v3d_get_cpu_copy_performance_query_params(struct drm_file *file_priv, job->copy.stride = copy.stride; return 0; + +error: + v3d_performance_query_info_free(&job->performance_query, i); + return err; } /* Whenever userspace sets ioctl extensions, v3d_get_extensions parses data -- 2.44.0

6 months

3
2
0 0

[PATCH 02/11] drm/v3d: Fix potential memory leak in the timestamp extension

by Tvrtko Ursulin

From: Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> If fetching of userspace memory fails during the main loop, all drm sync objs looked up until that point will be leaked because of the missing drm_syncobj_put. Fix it by exporting and using a common cleanup helper. Signed-off-by: Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> Fixes: 9ba0ff3e083f ("drm/v3d: Create a CPU job extension for the timestamp query job") Cc: Maíra Canal <mcanal(a)igalia.com> Cc: Iago Toral Quiroga <itoral(a)igalia.com> Cc: <stable(a)vger.kernel.org> # v6.8+ --- drivers/gpu/drm/v3d/v3d_drv.h | 2 ++ drivers/gpu/drm/v3d/v3d_sched.c | 22 +++++++++++----- drivers/gpu/drm/v3d/v3d_submit.c | 43 ++++++++++++++++++++++---------- 3 files changed, 48 insertions(+), 19 deletions(-) diff --git a/drivers/gpu/drm/v3d/v3d_drv.h b/drivers/gpu/drm/v3d/v3d_drv.h index 099b962bdfde..e208ffdfba32 100644 --- a/drivers/gpu/drm/v3d/v3d_drv.h +++ b/drivers/gpu/drm/v3d/v3d_drv.h @@ -563,6 +563,8 @@ void v3d_mmu_insert_ptes(struct v3d_bo *bo); void v3d_mmu_remove_ptes(struct v3d_bo *bo); /* v3d_sched.c */ +void v3d_timestamp_query_info_free(struct v3d_timestamp_query_info *query_info, + unsigned int count); void v3d_job_update_stats(struct v3d_job *job, enum v3d_queue queue); int v3d_sched_init(struct v3d_dev *v3d); void v3d_sched_fini(struct v3d_dev *v3d); diff --git a/drivers/gpu/drm/v3d/v3d_sched.c b/drivers/gpu/drm/v3d/v3d_sched.c index 03df37a3acf5..59dc0287dab9 100644 --- a/drivers/gpu/drm/v3d/v3d_sched.c +++ b/drivers/gpu/drm/v3d/v3d_sched.c @@ -73,18 +73,28 @@ v3d_sched_job_free(struct drm_sched_job *sched_job) v3d_job_cleanup(job); } +void +v3d_timestamp_query_info_free(struct v3d_timestamp_query_info *query_info, + unsigned int count) +{ + if (query_info->queries) { + unsigned int i; + + for (i = 0; i < count; i++) + drm_syncobj_put(query_info->queries[i].syncobj); + + kvfree(query_info->queries); + } +} + static void v3d_cpu_job_free(struct drm_sched_job *sched_job) { struct v3d_cpu_job *job = to_cpu_job(sched_job); - struct v3d_timestamp_query_info *timestamp_query = &job->timestamp_query; struct v3d_performance_query_info *performance_query = &job->performance_query; - if (timestamp_query->queries) { - for (int i = 0; i < timestamp_query->count; i++) - drm_syncobj_put(timestamp_query->queries[i].syncobj); - kvfree(timestamp_query->queries); - } + v3d_timestamp_query_info_free(&job->timestamp_query, + job->timestamp_query.count); if (performance_query->queries) { for (int i = 0; i < performance_query->count; i++) diff --git a/drivers/gpu/drm/v3d/v3d_submit.c b/drivers/gpu/drm/v3d/v3d_submit.c index 263fefc1d04f..121bf1314b80 100644 --- a/drivers/gpu/drm/v3d/v3d_submit.c +++ b/drivers/gpu/drm/v3d/v3d_submit.c @@ -452,6 +452,8 @@ v3d_get_cpu_timestamp_query_params(struct drm_file *file_priv, { u32 __user *offsets, *syncs; struct drm_v3d_timestamp_query timestamp; + unsigned int i; + int err; if (!job) { DRM_DEBUG("CPU job extension was attached to a GPU job.\n"); @@ -480,19 +482,19 @@ v3d_get_cpu_timestamp_query_params(struct drm_file *file_priv, offsets = u64_to_user_ptr(timestamp.offsets); syncs = u64_to_user_ptr(timestamp.syncs); - for (int i = 0; i < timestamp.count; i++) { + for (i = 0; i < timestamp.count; i++) { u32 offset, sync; if (copy_from_user(&offset, offsets++, sizeof(offset))) { - kvfree(job->timestamp_query.queries); - return -EFAULT; + err = -EFAULT; + goto error; } job->timestamp_query.queries[i].offset = offset; if (copy_from_user(&sync, syncs++, sizeof(sync))) { - kvfree(job->timestamp_query.queries); - return -EFAULT; + err = -EFAULT; + goto error; } job->timestamp_query.queries[i].syncobj = drm_syncobj_find(file_priv, sync); @@ -500,6 +502,10 @@ v3d_get_cpu_timestamp_query_params(struct drm_file *file_priv, job->timestamp_query.count = timestamp.count; return 0; + +error: + v3d_timestamp_query_info_free(&job->timestamp_query, i); + return err; } static int @@ -509,6 +515,8 @@ v3d_get_cpu_reset_timestamp_params(struct drm_file *file_priv, { u32 __user *syncs; struct drm_v3d_reset_timestamp_query reset; + unsigned int i; + int err; if (!job) { DRM_DEBUG("CPU job extension was attached to a GPU job.\n"); @@ -533,14 +541,14 @@ v3d_get_cpu_reset_timestamp_params(struct drm_file *file_priv, syncs = u64_to_user_ptr(reset.syncs); - for (int i = 0; i < reset.count; i++) { + for (i = 0; i < reset.count; i++) { u32 sync; job->timestamp_query.queries[i].offset = reset.offset + 8 * i; if (copy_from_user(&sync, syncs++, sizeof(sync))) { - kvfree(job->timestamp_query.queries); - return -EFAULT; + err = -EFAULT; + goto error; } job->timestamp_query.queries[i].syncobj = drm_syncobj_find(file_priv, sync); @@ -548,6 +556,10 @@ v3d_get_cpu_reset_timestamp_params(struct drm_file *file_priv, job->timestamp_query.count = reset.count; return 0; + +error: + v3d_timestamp_query_info_free(&job->timestamp_query, i); + return err; } /* Get data for the copy timestamp query results job submission. */ @@ -558,7 +570,8 @@ v3d_get_cpu_copy_query_results_params(struct drm_file *file_priv, { u32 __user *offsets, *syncs; struct drm_v3d_copy_timestamp_query copy; - int i; + unsigned int i; + int err; if (!job) { DRM_DEBUG("CPU job extension was attached to a GPU job.\n"); @@ -591,15 +604,15 @@ v3d_get_cpu_copy_query_results_params(struct drm_file *file_priv, u32 offset, sync; if (copy_from_user(&offset, offsets++, sizeof(offset))) { - kvfree(job->timestamp_query.queries); - return -EFAULT; + err = -EFAULT; + goto error; } job->timestamp_query.queries[i].offset = offset; if (copy_from_user(&sync, syncs++, sizeof(sync))) { - kvfree(job->timestamp_query.queries); - return -EFAULT; + err = -EFAULT; + goto error; } job->timestamp_query.queries[i].syncobj = drm_syncobj_find(file_priv, sync); @@ -613,6 +626,10 @@ v3d_get_cpu_copy_query_results_params(struct drm_file *file_priv, job->copy.stride = copy.stride; return 0; + +error: + v3d_timestamp_query_info_free(&job->timestamp_query, i); + return err; } static int -- 2.44.0

6 months

2
1
0 0

[PATCH 0/2] media: ov5675: Fixup ov5675 reset failures

by Bryan O'Donoghue

One long running saga for me on the Lenovo X13s is the occasional failure to either probe or subsequently bring-up the ov5675 main RGB sensor on the laptop. Initially I suspected the PMIC for this part as the PMIC is using a new interface on an I2C bus instead of an SPMI bus. In particular I thought perhaps the I2C write to PMIC had completed but the regulator output hadn't become stable from the perspective of the SoC. This however doesn't appear to be the case - I can introduce a delay of milliseconds on the PMIC path without resolving the sensor reset problem. Secondly I thought about reset pin polarity or drive-strength but, again playing about with both didn't yield decent results. I also played with the duration of reset to no avail. The error manifested as an I2C write timeout to the sensor which indicated that the chip likely hadn't come out reset. An intermittent fault appearing in perhaps 1/10 or 1/20 reset cycles. Looking at the expression of the reset we see that there is a minimum time expressed in XVCLK cycles between reset completion and first I2C transaction to the sensor. The specification calls out the minimum delay @ 8192 XVCLK cycles and the ov5675 driver meets that timing almost exactly. A little too exactly - testing finally showed that we were too racy with respect to the minimum quiescence between reset completion and first command to the chip. Fixing this error I choose to base the fix again on the number of clocks but to also support any clock rate the chip could support by moving away from a define to reading and using the XVCLK. True enough only 19.2 MHz is currently supported but for the hypothetical case where some other frequency is supported in the future, I wanted the fix introduced in this series to still hold. Hence this series: 1. Allows for any clock rate to be used in the valid range for the reset. 2. Elongates the post-reset period based on clock cycles which can now vary. Patch #2 can still be backported to stable irrespective of patch #1. Signed-off-by: Bryan O'Donoghue <bryan.odonoghue(a)linaro.org> --- Bryan O'Donoghue (2): media: ov5675: Derive delay cycles from the clock rate reported media: ov5675: Elongate reset to first transaction minimum gap drivers/media/i2c/ov5675.c | 26 +++++++++++++++++--------- 1 file changed, 17 insertions(+), 9 deletions(-) --- base-commit: 523b23f0bee3014a7a752c9bb9f5c54f0eddae88 change-id: 20240710-linux-next-ov5675-60b0e83c73f1 Best regards, -- Bryan O'Donoghue <bryan.odonoghue(a)linaro.org>

6 months

3
10
0 0

[PATCH AUTOSEL 4.19 1/7] Input: elantech - fix touchpad state on resume for Lenovo N24

by Sasha Levin

From: Jonathan Denose <jdenose(a)google.com> [ Upstream commit a69ce592cbe0417664bc5a075205aa75c2ec1273 ] The Lenovo N24 on resume becomes stuck in a state where it sends incorrect packets, causing elantech_packet_check_v4 to fail. The only way for the device to resume sending the correct packets is for it to be disabled and then re-enabled. This change adds a dmi check to trigger this behavior on resume. Signed-off-by: Jonathan Denose <jdenose(a)google.com> Link: https://lore.kernel.org/r/20240503155020.v2.1.Ifa0e25ebf968d8f307f58d678036… Signed-off-by: Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- drivers/input/mouse/elantech.c | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) diff --git a/drivers/input/mouse/elantech.c b/drivers/input/mouse/elantech.c index 6759cab82a723..6f747c59cd652 100644 --- a/drivers/input/mouse/elantech.c +++ b/drivers/input/mouse/elantech.c @@ -1527,16 +1527,47 @@ static void elantech_disconnect(struct psmouse *psmouse) psmouse->private = NULL; } +/* + * Some hw_version 4 models fail to properly activate absolute mode on + * resume without going through disable/enable cycle. + */ +static const struct dmi_system_id elantech_needs_reenable[] = { +#if defined(CONFIG_DMI) && defined(CONFIG_X86) + { + /* Lenovo N24 */ + .matches = { + DMI_MATCH(DMI_SYS_VENDOR, "LENOVO"), + DMI_MATCH(DMI_PRODUCT_NAME, "81AF"), + }, + }, +#endif + { } +}; + /* * Put the touchpad back into absolute mode when reconnecting */ static int elantech_reconnect(struct psmouse *psmouse) { + int err; + psmouse_reset(psmouse); if (elantech_detect(psmouse, 0)) return -1; + if (dmi_check_system(elantech_needs_reenable)) { + err = ps2_command(&psmouse->ps2dev, NULL, PSMOUSE_CMD_DISABLE); + if (err) + psmouse_warn(psmouse, "failed to deactivate mouse on %s: %d\n", + psmouse->ps2dev.serio->phys, err); + + err = ps2_command(&psmouse->ps2dev, NULL, PSMOUSE_CMD_ENABLE); + if (err) + psmouse_warn(psmouse, "failed to reactivate mouse on %s: %d\n", + psmouse->ps2dev.serio->phys, err); + } + if (elantech_set_absolute_mode(psmouse)) { psmouse_err(psmouse, "failed to put touchpad back into absolute mode.\n"); -- 2.43.0

6 months

2
7
0 0

Linux 6.9.9

by Greg Kroah-Hartman

I'm announcing the release of the 6.9.9 kernel. All users of the 6.9 kernel series must upgrade. The updated 6.9.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.9.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm64/boot/dts/rockchip/rk3566-quartz64-b.dts | 2 arch/powerpc/include/asm/interrupt.h | 10 arch/powerpc/include/asm/io.h | 2 arch/powerpc/include/asm/percpu.h | 10 arch/powerpc/kernel/head_64.S | 5 arch/powerpc/kernel/setup_64.c | 2 arch/powerpc/kexec/core_64.c | 11 arch/powerpc/platforms/pseries/kexec.c | 8 arch/powerpc/platforms/pseries/pseries.h | 1 arch/powerpc/platforms/pseries/setup.c | 1 arch/powerpc/xmon/xmon.c | 6 arch/riscv/include/asm/errata_list.h | 12 arch/riscv/include/asm/tlbflush.h | 19 + arch/riscv/kernel/machine_kexec.c | 10 arch/riscv/kvm/vcpu_pmu.c | 2 arch/riscv/mm/tlbflush.c | 23 - arch/s390/include/asm/kvm_host.h | 1 arch/s390/include/asm/processor.h | 2 arch/s390/kvm/kvm-s390.c | 1 arch/s390/kvm/kvm-s390.h | 15 + arch/s390/kvm/priv.c | 32 ++ block/blk-settings.c | 8 crypto/aead.c | 3 crypto/cipher.c | 3 drivers/base/regmap/regmap-i2c.c | 3 drivers/block/null_blk/zoned.c | 11 drivers/bluetooth/hci_bcm4377.c | 10 drivers/bluetooth/hci_qca.c | 18 + drivers/cdrom/cdrom.c | 2 drivers/clk/mediatek/clk-mt8183-mfgcfg.c | 1 drivers/clk/mediatek/clk-mtk.c | 24 + drivers/clk/mediatek/clk-mtk.h | 2 drivers/clk/qcom/clk-alpha-pll.c | 3 drivers/clk/qcom/gcc-ipq9574.c | 10 drivers/clk/qcom/gcc-sm6350.c | 10 drivers/clk/sunxi-ng/ccu_common.c | 18 - drivers/crypto/hisilicon/debugfs.c | 21 + drivers/crypto/hisilicon/sec2/sec_main.c | 2 drivers/firmware/dmi_scan.c | 11 drivers/firmware/sysfb.c | 12 drivers/gpio/gpio-mmio.c | 2 drivers/gpio/gpiolib-of.c | 22 + drivers/gpu/drm/amd/amdgpu/aldebaran.c | 2 drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 5 drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 20 - drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 5 drivers/gpu/drm/amd/amdgpu/amdgpu_gfx.c | 3 drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c | 8 drivers/gpu/drm/amd/amdgpu/amdgpu_ras.h | 2 drivers/gpu/drm/amd/amdgpu/amdgpu_umc.c | 1 drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c | 3 drivers/gpu/drm/amd/amdgpu/sienna_cichlid.c | 2 drivers/gpu/drm/amd/amdkfd/kfd_migrate.c | 2 drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 6 drivers/gpu/drm/amd/amdkfd/kfd_svm.h | 3 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 8 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 4 drivers/gpu/drm/amd/display/dc/clk_mgr/dcn30/dcn30_clk_mgr.c | 8 drivers/gpu/drm/amd/display/dc/clk_mgr/dcn32/dcn32_clk_mgr.c | 8 drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 106 +++++--- drivers/gpu/drm/amd/display/dc/dml2/display_mode_core.c | 4 drivers/gpu/drm/amd/display/dc/dml2/dml2_dc_resource_mgmt.c | 6 drivers/gpu/drm/amd/display/dc/irq/dce110/irq_service_dce110.c | 8 drivers/gpu/drm/amd/display/dc/resource/dcn30/dcn30_resource.c | 3 drivers/gpu/drm/amd/display/dc/resource/dcn31/dcn31_resource.c | 5 drivers/gpu/drm/amd/display/dc/resource/dcn314/dcn314_resource.c | 5 drivers/gpu/drm/amd/display/dc/resource/dcn315/dcn315_resource.c | 2 drivers/gpu/drm/amd/display/dc/resource/dcn316/dcn316_resource.c | 2 drivers/gpu/drm/amd/display/dc/resource/dcn32/dcn32_resource.c | 5 drivers/gpu/drm/amd/display/dc/resource/dcn321/dcn321_resource.c | 2 drivers/gpu/drm/amd/display/dc/resource/dcn35/dcn35_resource.c | 2 drivers/gpu/drm/amd/display/dc/resource/dcn351/dcn351_resource.c | 2 drivers/gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c | 8 drivers/gpu/drm/amd/include/atomfirmware.h | 4 drivers/gpu/drm/drm_fbdev_generic.c | 3 drivers/gpu/drm/drm_panel_orientation_quirks.c | 7 drivers/gpu/drm/lima/lima_gp.c | 2 drivers/gpu/drm/lima/lima_mmu.c | 5 drivers/gpu/drm/lima/lima_pp.c | 4 drivers/gpu/drm/nouveau/nouveau_connector.c | 3 drivers/gpu/drm/ttm/ttm_bo.c | 1 drivers/gpu/drm/xe/tests/xe_dma_buf.c | 3 drivers/gpu/drm/xe/xe_gt_mcr.c | 6 drivers/gpu/drm/xe/xe_migrate.c | 8 drivers/hwmon/dell-smm-hwmon.c | 8 drivers/i2c/busses/i2c-i801.c | 2 drivers/i2c/busses/i2c-pnx.c | 48 --- drivers/infiniband/core/user_mad.c | 21 + drivers/input/ff-core.c | 7 drivers/leds/leds-an30259a.c | 14 - drivers/leds/leds-mlxreg.c | 14 - drivers/media/dvb-frontends/as102_fe_types.h | 2 drivers/media/dvb-frontends/tda10048.c | 9 drivers/media/dvb-frontends/tda18271c2dd.c | 4 drivers/media/i2c/st-mipid02.c | 2 drivers/media/i2c/tc358746.c | 3 drivers/media/platform/mediatek/vcodec/decoder/vdec/vdec_av1_req_lat_if.c | 22 + drivers/media/platform/mediatek/vcodec/encoder/venc/venc_h264_if.c | 5 drivers/media/usb/dvb-usb/dib0700_devices.c | 18 + drivers/media/usb/dvb-usb/dw2102.c | 120 +++++---- drivers/media/usb/s2255/s2255drv.c | 20 - drivers/mtd/nand/raw/nand_base.c | 66 +++-- drivers/mtd/nand/raw/rockchip-nand-controller.c | 6 drivers/net/bonding/bond_options.c | 6 drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 1 drivers/net/dsa/mv88e6xxx/chip.c | 4 drivers/net/ethernet/broadcom/bnx2x/bnx2x.h | 2 drivers/net/ethernet/broadcom/bnxt/bnxt.c | 6 drivers/net/ethernet/google/gve/gve_ethtool.c | 41 ++- drivers/net/ethernet/intel/e1000e/netdev.c | 132 +++++----- drivers/net/ethernet/intel/ice/ice_hwmon.c | 2 drivers/net/ethernet/intel/ice/ice_ptp.c | 131 +++++++-- drivers/net/ethernet/intel/ice/ice_ptp.h | 9 drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.c | 48 ++- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 5 drivers/net/ethernet/mellanox/mlx5/core/esw/acl/ingress_ofld.c | 37 ++ drivers/net/ethernet/mellanox/mlxsw/core_linecards.c | 1 drivers/net/ethernet/renesas/rswitch.c | 4 drivers/net/ethernet/stmicro/stmmac/dwmac-qcom-ethqos.c | 2 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 7 drivers/net/ethernet/wangxun/libwx/wx_hw.c | 1 drivers/net/ethernet/wangxun/libwx/wx_lib.c | 10 drivers/net/ethernet/wangxun/libwx/wx_type.h | 1 drivers/net/ethernet/wangxun/ngbe/ngbe_main.c | 2 drivers/net/ethernet/wangxun/txgbe/txgbe_irq.c | 124 +++------ drivers/net/ethernet/wangxun/txgbe/txgbe_irq.h | 2 drivers/net/ethernet/wangxun/txgbe/txgbe_main.c | 9 drivers/net/ntb_netdev.c | 2 drivers/net/phy/aquantia/aquantia.h | 5 drivers/net/wireless/mediatek/mt76/mt76_connac_mcu.c | 10 drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 2 drivers/net/wireless/mediatek/mt76/mt7996/debugfs.c | 5 drivers/net/wireless/mediatek/mt76/mt7996/mcu.c | 5 drivers/net/wireless/microchip/wilc1000/hif.c | 3 drivers/net/wireless/realtek/rtw89/fw.c | 4 drivers/nfc/virtual_ncidev.c | 4 drivers/nvme/host/multipath.c | 2 drivers/nvme/host/pci.c | 3 drivers/nvme/target/core.c | 9 drivers/platform/x86/toshiba_acpi.c | 31 +- drivers/platform/x86/touchscreen_dmi.c | 36 ++ drivers/s390/block/dasd_eckd.c | 4 drivers/s390/block/dasd_fba.c | 2 drivers/s390/cio/vfio_ccw_cp.c | 9 drivers/s390/crypto/pkey_api.c | 109 +++----- drivers/scsi/mpi3mr/mpi3mr_transport.c | 10 drivers/scsi/qedf/qedf_io.c | 6 drivers/spi/spi-cadence-xspi.c | 20 + drivers/thermal/mediatek/lvts_thermal.c | 2 drivers/tty/serial/imx.c | 2 drivers/usb/host/xhci-ring.c | 5 drivers/vhost/scsi.c | 17 - drivers/vhost/vhost.c | 114 ++++++-- drivers/vhost/vhost.h | 2 drivers/virtio/virtio_pci_common.c | 2 fs/btrfs/block-group.c | 13 fs/btrfs/extent_io.c | 2 fs/btrfs/qgroup.c | 10 fs/btrfs/scrub.c | 2 fs/btrfs/space-info.c | 24 + fs/f2fs/f2fs.h | 12 fs/f2fs/super.c | 27 +- fs/f2fs/sysfs.c | 14 - fs/jffs2/super.c | 1 fs/locks.c | 9 fs/nilfs2/alloc.c | 19 + fs/nilfs2/alloc.h | 4 fs/nilfs2/dat.c | 2 fs/nilfs2/dir.c | 6 fs/nilfs2/ifile.c | 7 fs/nilfs2/nilfs.h | 10 fs/nilfs2/the_nilfs.c | 6 fs/nilfs2/the_nilfs.h | 2 fs/ntfs3/xattr.c | 5 fs/orangefs/super.c | 3 fs/super.c | 11 include/linux/dynamic_queue_limits.h | 3 include/linux/fsnotify.h | 8 include/linux/mutex.h | 27 ++ include/linux/phy.h | 2 include/linux/sched/vhost_task.h | 3 include/net/bluetooth/hci.h | 11 include/net/mac80211.h | 2 include/uapi/linux/cn_proc.h | 3 kernel/dma/map_benchmark.c | 3 kernel/exit.c | 2 kernel/locking/mutex-debug.c | 12 kernel/power/swap.c | 2 kernel/vhost_task.c | 53 ++-- lib/fortify_kunit.c | 9 lib/kunit/try-catch.c | 3 mm/page-writeback.c | 32 ++ net/bluetooth/hci_conn.c | 15 - net/bluetooth/hci_event.c | 33 ++ net/bluetooth/iso.c | 3 net/bpf/bpf_dummy_struct_ops.c | 55 +++- net/core/datagram.c | 19 - net/ipv4/inet_diag.c | 2 net/ipv4/tcp_input.c | 9 net/ipv4/tcp_metrics.c | 1 net/mac802154/main.c | 14 - net/netfilter/nf_tables_api.c | 3 net/sctp/socket.c | 7 net/wireless/nl80211.c | 6 scripts/link-vmlinux.sh | 2 sound/core/ump.c | 8 sound/pci/hda/patch_realtek.c | 9 tools/lib/bpf/bpf_core_read.h | 1 tools/lib/bpf/features.c | 32 ++ tools/power/x86/turbostat/turbostat.c | 35 +- tools/testing/selftests/bpf/prog_tests/dummy_st_ops.c | 34 ++ tools/testing/selftests/bpf/progs/dummy_st_ops_success.c | 15 - tools/testing/selftests/kselftest_harness.h | 43 +-- tools/testing/selftests/net/gro.c | 3 tools/testing/selftests/net/ip_local_port_range.c | 2 tools/testing/selftests/net/mptcp/pm_nl_ctl.c | 2 tools/testing/selftests/net/msg_zerocopy.c | 14 - tools/testing/selftests/resctrl/cat_test.c | 32 +- 219 files changed, 1973 insertions(+), 862 deletions(-) Aleksandr Mishin (1): mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file Alex Deucher (2): drm/amdgpu/atomfirmware: silence UBSAN warning drm/amdgpu: silence UBSAN warning Alex Hung (6): drm/amd/display: Check index msg_id before read or write drm/amd/display: Check pipe offset before setting vblank drm/amd/display: Skip finding free audio for unknown engine_id drm/amd/display: Do not return negative stream id for array drm/amd/display: ASSERT when failing to find index by plane/stream id drm/amd/display: Fix uninitialized variables in DM Andrii Nakryiko (2): libbpf: detect broken PID filtering logic for multi-uprobe libbpf: don't close(-1) in multi-uprobe feature detector Armin Wolf (2): platform/x86: toshiba_acpi: Fix quickstart quirk handling hwmon: (dell-smm) Add Dell G15 5511 to fan control whitelist Atish Patra (1): RISC-V: KVM: Fix the initial sample period value Babu Moger (1): selftests/resctrl: Fix non-contiguous CBM for AMD Bartosz Golaszewski (1): net: phy: aquantia: add missing include guards Bob Zhou (1): drm/amdgpu: fix double free err_addr pointer warnings Boris Burkov (1): btrfs: fix folio refcount in __alloc_dummy_extent_buffer() Breno Leitao (1): net: dql: Avoid calling BUG() when WARN() is enough Chao Yu (1): f2fs: check validation of fault attrs in f2fs_build_fault_attr() Chenghai Huang (1): crypto: hisilicon/debugfs - Fix debugfs uninit process issue Chris Mi (1): net/mlx5: E-switch, Create ingress ACL when needed Christian Borntraeger (1): KVM: s390: fix LPSWEY handling Christian Brauner (2): fs: don't misleadingly warn during thaw operations swap: yield device immediately Corinna Vinschen (1): igc: fix a log entry using uninitialized netdev Damien Le Moal (1): null_blk: Do not allow runt zone with zone capacity smaller then zone size Dave Jiang (1): net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() Dima Ruinskiy (1): e1000e: Fix S0ix residency on corporate systems Dmitry Antipov (1): mac802154: fix time calculation in ieee802154_configure_durations() Dmitry Torokhov (2): gpiolib: of: fix lookup quirk for MIPS Lantiq gpiolib: of: add polarity quirk for TSC2005 Dragan Simic (1): arm64: dts: rockchip: Fix the DCDC_REG2 minimum voltage on Quartz64 Model B Eduard Zingerman (5): bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable selftests/bpf: adjust dummy_st_ops_success to detect additional error selftests/bpf: do not pass NULL for non-nullable params in dummy_st_ops bpf: check bpf_dummy_struct_ops program params for test runs selftests/bpf: dummy_st_ops should reject 0 for non-nullable params Edward Adam Davis (2): Bluetooth: Ignore too large handle values in BIG nfc/nci: Add the inconsistency check between the input data length and count Eric Dumazet (1): wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values Eric Farman (1): s390/vfio_ccw: Fix target addresses of TIC CCWs Erick Archer (2): sctp: prefer struct_size over open coded arithmetic Input: ff-core - prefer struct_size over open coded arithmetic Erico Nunes (1): drm/lima: fix shared irq handling on driver remove Fedor Pchelkin (1): dma-mapping: benchmark: avoid needless copy_to_user if benchmark fails Fei Shao (1): media: mediatek: vcodec: Only free buffer VA that is not NULL Felix Fietkau (1): wifi: mt76: replace skb_put with skb_put_zero Florian Westphal (1): netfilter: nf_tables: unconditionally flush pending work before notifier Frank Oltmanns (1): clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common Furong Xu (1): net: stmmac: enable HW-accelerated VLAN stripping for gmac4 only Gabor Juhos (1): clk: qcom: clk-alpha-pll: set ALPHA_EN bit for Stromer Plus PLLs George Stark (3): locking/mutex: Introduce devm_mutex_init() leds: mlxreg: Use devm_mutex_init() for mutex initialization leds: an30259a: Use devm_mutex_init() for mutex initialization Ghadi Elie Rahme (1): bnx2x: Fix multiple UBSAN array-index-out-of-bounds Greg Kroah-Hartman (1): Linux 6.9.9 Greg Kurz (1): powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#" Hailey Mothershead (1): crypto: aead,cipher - zeroize key buffer after use Hannes Reinecke (1): block: check for max_hw_sectors underflow Hawking Zhang (1): drm/amdgpu: correct hbm field in boot status Hector Martin (1): Bluetooth: hci_bcm4377: Fix msgid release Heiner Kallweit (1): i2c: i801: Annotate apanel_addr as __ro_after_init Hersen Wu (2): drm/amd/display: Add NULL pointer check for kzalloc drm/amd/display: Fix overlapping copy within dml_core_mode_programming Holger Dengler (3): s390/pkey: Wipe sensitive data on failure s390/pkey: Wipe copies of clear-key structures on failure s390/pkey: Wipe copies of protected- and secure-keys Iulia Tanasescu (1): Bluetooth: ISO: Check socket flag instead of hcon Jacob Keller (2): ice: Don't process extts if PTP is disabled ice: Reject pin requests with unsupported flags Jakub Kicinski (1): tcp_metrics: validate source addr length Jan Kara (3): mm: avoid overflows in dirty throttling logic fsnotify: Do not generate events for O_PATH file descriptors Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" Jann Horn (1): filelock: Remove locks reliably when fcntl/close race is detected Jean Delvare (1): firmware: dmi: Stop decoding on broken entry Jesse Zhang (2): drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc drm/amdgpu: fix the warning about the expression (int)size - len Jian-Hong Pan (1): ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897 Jianbo Liu (1): net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() Jiawen Wu (4): net: txgbe: initialize num_q_vectors for MSI/INTx interrupts net: txgbe: remove separate irq request for MSI and INTx net: txgbe: add extra handle for MSI/INTx into thread irq handle net: txgbe: free isb resources at the right time Jim Wylder (1): regmap-i2c: Subtract reg size from max_write Jimmy Assarsson (1): can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct Jinglin Wen (1): powerpc/64s: Fix unnecessary copy to 0 when kernel is booted at address 0 Jinliang Zheng (1): mm: optimize the redundant loop of mm_update_owner_next() Johannes Berg (1): wifi: mac80211: fix BSS_CHANGED_UNSOL_BCAST_PROBE_RESP John Hubbard (1): selftests/net: fix uninitialized variables John Meneghini (1): scsi: qedf: Make qedf_execute_tmf() non-preemptible John Schoenick (1): drm: panel-orientation-quirks: Add quirk for Valve Galileo Jose E. Marchesi (1): bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD Jozef Hopko (1): wifi: wilc1000: fix ies_len type in connect path Jules Irenge (1): s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings Julien Panis (1): thermal/drivers/mediatek/lvts_thermal: Check NULL ptr on lvts_data Justin Stitt (1): cdrom: rearrange last_media_change check to avoid unintentional overflow Kees Cook (1): kunit/fortify: Do not spam logs with fortify WARNs Konstantin Komarov (1): fs/ntfs3: Mark volume as dirty if xattr is broken Kundan Kumar (1): nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset Kuniyuki Iwashima (1): tcp: Don't flag tcp_sk(sk)->rx_opt.saw_unknown for TCP AO. Lang Yu (1): drm/amdkfd: Let VRAM allocations go to GTT domain on small APUs Len Brown (1): tools/power turbostat: Remember global max_die_id Leon Romanovsky (2): net/mlx5e: Present succeeded IPsec SA bytes and packet net/mlx5e: Approximate IPsec per-SA payload data bytes count Li Zhang (1): virtio-pci: Check if is_avq is NULL Lu Yao (1): btrfs: scrub: initialize ret in scrub_simple_mirror() to fix compilation warning Luca Weiss (1): clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents Luiz Augusto von Dentz (1): Bluetooth: hci_event: Fix setting of unicast qos interval Ma Jun (2): drm/amdgpu: Fix uninitialized variable warnings drm/amdgpu: Initialize timestamp for some legacy SOCs Ma Ke (1): drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes Mahesh Salgaonkar (1): powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt. Marek Vasut (1): net: phy: phy_device: Fix PHY LED blinking code comment Masahiro Yamada (1): kbuild: fix short log for AS in link-vmlinux.sh Matt Jan (1): connector: Fix invalid conversion in cn_proc.h Matt Roper (1): drm/xe/mcr: Avoid clobbering DSS steering Matthew Auld (1): drm/xe: fix error handling in xe_migrate_update_pgtables Matthias Schiffer (1): serial: imx: Raise TX trigger level to 8 Mauro Carvalho Chehab (1): media: dw2102: fix a potential buffer overflow Md Sadre Alam (1): clk: qcom: gcc-ipq9574: Add BRANCH_HALT_VOTED flag Michael Bunk (1): media: dw2102: Don't translate i2c read into write Michael Ellerman (1): powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n Michael Guralnik (1): IB/core: Implement a limit on UMAD receive List Mickaël Salaün (2): kunit: Fix timeout message selftests/harness: Fix tests timeout and race condition Mike Christie (4): vhost: Use virtqueue mutex for swapping worker vhost: Release worker mutex during flushes vhost_task: Handle SIGKILL by flushing work and exiting vhost-scsi: Handle vhost_vq_work_queue failures for events Mike Marshall (1): orangefs: fix out-of-bounds fsid access Milena Olech (1): ice: Fix improper extts handling Miquel Raynal (3): mtd: rawnand: Ensure ECC configuration is propagated to upper layers mtd: rawnand: Fix the nand_read_data_op() early check mtd: rawnand: Bypass a couple of sanity checks during NAND identification Naohiro Aota (2): btrfs: zoned: fix calc_available_free_space() for zoned mode btrfs: fix adding block group to a reclaim list and the unused list during reclaim Nathan Chancellor (2): f2fs: Add inline to f2fs_build_fault_attr() stub scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() Neal Cardwell (1): UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open() Nicholas Piggin (1): powerpc/pseries: Fix scv instruction crash with kexec Niklas Neronin (1): usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB Nilay Shroff (1): nvme-multipath: find NUMA path only for online numa-node Patryk Wlazlyn (1): tools/power turbostat: Avoid possible memory corruption due to sparse topology IDs Pavan Chebbi (1): bnxt_en: Fix the resource check condition for RSS contexts Pavel Skripkin (1): bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX Petr Oros (1): ice: use proper macro for testing bit Pin-yen Lin (1): clk: mediatek: mt8183: Only enable runtime PM on mt8183-mfgcfg Piotr Wojtaszczyk (1): i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr Qu Wenruo (1): btrfs: always do the basic checks for btrfs_qgroup_inherit structure Radu Rendec (1): net: rswitch: Avoid use-after-free in rswitch_poll() Ricardo Ribalda (7): media: dvb: as102-fe: Fix as10x_register_addr packing media: dvb-usb: dib0700_devices: Add missing release_firmware() media: dvb-frontends: tda18271c2dd: Remove casting during div media: s2255: Use refcount_t instead of atomic_t for num_channels media: i2c: st-mipid02: Use the correct div function media: tc358746: Use the correct div_ function media: dvb-frontends: tda10048: Fix integer overflow Rodrigo Vivi (1): drm/xe: Add outer runtime_pm protection to xe_live_ktest@xe_dma_buf Ryusuke Konishi (3): nilfs2: fix inode number range checks nilfs2: add missing check for inode numbers on directory entries nilfs2: fix incorrect inode allocation from reserved inodes Sagi Grimberg (2): net: allow skb_datagram_iter to be called from any context nvmet: fix a possible leak when destroy a ctrl during qp establishment Sam Sun (1): bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() Samuel Holland (1): riscv: Apply SiFive CIP-1200 workaround to single-ASID sfence.vma Sasha Neftin (1): Revert "igc: fix a log entry using uninitialized netdev" Shailend Chand (1): gve: Account for stopped queues when reading NIC stats Shigeru Yoshida (1): inet_diag: Initialize pad field in struct inet_diag_req_v2 Shiji Yang (1): gpio: mmio: do not calculate bgpio_bits via "ngpios" Simon Horman (1): net: dsa: mv88e6xxx: Correct check for empty list Song Shuai (1): riscv: kexec: Avoid deadlock in kexec crash path StanleyYP Wang (1): wifi: mt76: mt7996: add sanity checks for background radar trigger Stefan Haberland (1): s390/dasd: Fix invalid dereferencing of indirect CCW data pointer Sven Peter (1): Bluetooth: Add quirk to ignore reserved PHY bits in LE Extended Adv Report Sven Schnelle (1): s390: Mark psw in __load_psw_mask() as __unitialized Takashi Iwai (1): ALSA: ump: Set default protocol when not given explicitly Thomas Hellström (1): drm/ttm: Always take the bo delayed cleanup path for imported bos Thomas Huth (1): drm/fbdev-generic: Fix framebuffer on big endian devices Thomas Zimmermann (1): firmware: sysfb: Fix reference count of sysfb parent device Tim Huang (1): drm/amdgpu: fix uninitialized scalar variable warning Tomas Henzl (1): scsi: mpi3mr: Sanitise num_phys Val Packett (1): mtd: rawnand: rockchip: ensure NVDDR timings are rejected Wang Yong (1): jffs2: Fix potential illegal address access in jffs2_free_inode Wenjing Liu (1): drm/amd/display: update pipe topology log to support subvp Wenkai Lin (1): crypto: hisilicon/sec2 - fix for register offset Witold Sadowski (1): spi: cadence: Ensure data lines set to low during dummy-cycle period Yijie Yang (1): net: stmmac: dwmac-qcom-ethqos: fix error array size Zijian Zhang (2): selftests: fix OOM in msg_zerocopy selftest selftests: make order checking verbose in msg_zerocopy selftest Zijun Hu (1): Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot Zong-Zhe Yang (1): wifi: rtw89: fw: scan offload prohibit all 6 GHz channel if no 6 GHz sband hmtheboy154 (2): platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro

6 months

1
1
0 0

Linux 6.6.39

by Greg Kroah-Hartman

I'm announcing the release of the 6.6.39 kernel. All users of the 6.6 kernel series must upgrade. The updated 6.6.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.6.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm64/boot/dts/rockchip/rk3566-quartz64-b.dts | 2 arch/powerpc/include/asm/interrupt.h | 10 arch/powerpc/include/asm/io.h | 2 arch/powerpc/include/asm/percpu.h | 10 arch/powerpc/kernel/head_64.S | 5 arch/powerpc/kernel/setup_64.c | 2 arch/powerpc/kexec/core_64.c | 11 arch/powerpc/platforms/pseries/kexec.c | 8 arch/powerpc/platforms/pseries/pseries.h | 1 arch/powerpc/platforms/pseries/setup.c | 1 arch/powerpc/xmon/xmon.c | 6 arch/riscv/include/asm/errata_list.h | 12 arch/riscv/include/asm/tlbflush.h | 19 + arch/riscv/kernel/machine_kexec.c | 10 arch/riscv/kvm/vcpu_pmu.c | 2 arch/riscv/mm/tlbflush.c | 23 - arch/s390/include/asm/kvm_host.h | 1 arch/s390/kvm/kvm-s390.c | 1 arch/s390/kvm/kvm-s390.h | 15 + arch/s390/kvm/priv.c | 32 ++ crypto/aead.c | 3 crypto/cipher.c | 3 drivers/base/regmap/regmap-i2c.c | 3 drivers/block/null_blk/zoned.c | 11 drivers/bluetooth/hci_bcm4377.c | 2 drivers/bluetooth/hci_qca.c | 18 + drivers/cdrom/cdrom.c | 2 drivers/clk/mediatek/clk-mt8183-mfgcfg.c | 1 drivers/clk/mediatek/clk-mtk.c | 24 + drivers/clk/mediatek/clk-mtk.h | 2 drivers/clk/qcom/clk-alpha-pll.c | 3 drivers/clk/qcom/gcc-ipq9574.c | 10 drivers/clk/qcom/gcc-sm6350.c | 10 drivers/clk/sunxi-ng/ccu_common.c | 18 - drivers/crypto/hisilicon/debugfs.c | 21 + drivers/firmware/dmi_scan.c | 11 drivers/gpio/gpio-mmio.c | 2 drivers/gpio/gpiolib-of.c | 22 + drivers/gpu/drm/amd/amdgpu/aldebaran.c | 2 drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 5 drivers/gpu/drm/amd/amdgpu/amdgpu_gfx.c | 3 drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c | 8 drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c | 3 drivers/gpu/drm/amd/amdgpu/sienna_cichlid.c | 2 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 8 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 4 drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 3 drivers/gpu/drm/amd/display/dc/irq/dce110/irq_service_dce110.c | 8 drivers/gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c | 8 drivers/gpu/drm/amd/include/atomfirmware.h | 4 drivers/gpu/drm/drm_panel_orientation_quirks.c | 7 drivers/gpu/drm/lima/lima_gp.c | 2 drivers/gpu/drm/lima/lima_mmu.c | 5 drivers/gpu/drm/lima/lima_pp.c | 4 drivers/gpu/drm/nouveau/nouveau_connector.c | 3 drivers/i2c/busses/i2c-i801.c | 2 drivers/i2c/busses/i2c-pnx.c | 48 --- drivers/infiniband/core/user_mad.c | 21 + drivers/input/ff-core.c | 7 drivers/leds/leds-an30259a.c | 14 - drivers/media/dvb-frontends/as102_fe_types.h | 2 drivers/media/dvb-frontends/tda10048.c | 9 drivers/media/dvb-frontends/tda18271c2dd.c | 4 drivers/media/platform/mediatek/vcodec/decoder/vdec/vdec_av1_req_lat_if.c | 22 + drivers/media/platform/mediatek/vcodec/encoder/venc/venc_h264_if.c | 5 drivers/media/usb/dvb-usb/dib0700_devices.c | 18 + drivers/media/usb/dvb-usb/dw2102.c | 120 +++++---- drivers/media/usb/s2255/s2255drv.c | 20 - drivers/mtd/nand/raw/nand_base.c | 66 +++-- drivers/mtd/nand/raw/rockchip-nand-controller.c | 6 drivers/net/bonding/bond_options.c | 6 drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 1 drivers/net/dsa/mv88e6xxx/chip.c | 4 drivers/net/ethernet/broadcom/bnx2x/bnx2x.h | 2 drivers/net/ethernet/intel/e1000e/netdev.c | 132 +++++----- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 5 drivers/net/ethernet/mellanox/mlx5/core/esw/acl/ingress_ofld.c | 37 ++ drivers/net/ethernet/mellanox/mlxsw/core_linecards.c | 1 drivers/net/ethernet/stmicro/stmmac/dwmac-qcom-ethqos.c | 2 drivers/net/ethernet/wangxun/libwx/wx_lib.c | 1 drivers/net/ntb_netdev.c | 2 drivers/net/wireless/mediatek/mt76/mt76_connac_mcu.c | 10 drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 2 drivers/net/wireless/mediatek/mt76/mt7996/debugfs.c | 5 drivers/net/wireless/mediatek/mt76/mt7996/mcu.c | 5 drivers/net/wireless/microchip/wilc1000/hif.c | 3 drivers/nfc/virtual_ncidev.c | 4 drivers/nvme/host/multipath.c | 2 drivers/nvme/host/pci.c | 3 drivers/nvme/target/core.c | 9 drivers/platform/x86/toshiba_acpi.c | 31 +- drivers/platform/x86/touchscreen_dmi.c | 36 ++ drivers/s390/crypto/pkey_api.c | 4 drivers/scsi/mpi3mr/mpi3mr_transport.c | 10 drivers/scsi/qedf/qedf_io.c | 6 drivers/spi/spi-cadence-xspi.c | 20 + drivers/thermal/mediatek/lvts_thermal.c | 2 drivers/tty/serial/imx.c | 2 drivers/usb/host/xhci-ring.c | 5 drivers/vhost/scsi.c | 17 - drivers/vhost/vhost.c | 114 ++++++-- drivers/vhost/vhost.h | 2 fs/btrfs/block-group.c | 13 fs/btrfs/scrub.c | 2 fs/f2fs/f2fs.h | 12 fs/f2fs/super.c | 27 +- fs/f2fs/sysfs.c | 14 - fs/jffs2/super.c | 1 fs/nilfs2/alloc.c | 18 + fs/nilfs2/alloc.h | 4 fs/nilfs2/dat.c | 2 fs/nilfs2/dir.c | 6 fs/nilfs2/ifile.c | 7 fs/nilfs2/nilfs.h | 10 fs/nilfs2/the_nilfs.c | 6 fs/nilfs2/the_nilfs.h | 2 fs/ntfs3/xattr.c | 5 fs/orangefs/super.c | 3 include/linux/fsnotify.h | 8 include/linux/lsm_hook_defs.h | 2 include/linux/mutex.h | 27 ++ include/linux/phy.h | 2 include/linux/sched/vhost_task.h | 3 include/linux/security.h | 5 include/uapi/linux/cn_proc.h | 3 kernel/auditfilter.c | 5 kernel/cpu.c | 3 kernel/dma/map_benchmark.c | 3 kernel/exit.c | 2 kernel/locking/mutex-debug.c | 12 kernel/vhost_task.c | 53 ++-- lib/kunit/try-catch.c | 3 mm/page-writeback.c | 32 ++ net/bluetooth/hci_conn.c | 15 - net/bluetooth/hci_event.c | 26 + net/bluetooth/iso.c | 3 net/core/datagram.c | 19 - net/ipv4/inet_diag.c | 2 net/ipv4/tcp_input.c | 2 net/ipv4/tcp_metrics.c | 1 net/mac802154/main.c | 14 - net/netfilter/nf_tables_api.c | 3 net/sctp/socket.c | 7 scripts/link-vmlinux.sh | 2 security/apparmor/audit.c | 6 security/apparmor/include/audit.h | 2 security/integrity/ima/ima.h | 2 security/integrity/ima/ima_policy.c | 15 - security/security.c | 6 security/selinux/include/audit.h | 4 security/selinux/ss/services.c | 5 security/smack/smack_lsm.c | 4 sound/core/ump.c | 8 sound/pci/hda/patch_realtek.c | 9 tools/lib/bpf/bpf_core_read.h | 1 tools/power/x86/turbostat/turbostat.c | 10 tools/testing/selftests/bpf/prog_tests/dummy_st_ops.c | 34 ++ tools/testing/selftests/bpf/progs/dummy_st_ops_success.c | 15 - tools/testing/selftests/net/gro.c | 3 tools/testing/selftests/net/ip_local_port_range.c | 2 tools/testing/selftests/net/mptcp/pm_nl_ctl.c | 2 tools/testing/selftests/net/msg_zerocopy.c | 14 - 163 files changed, 1253 insertions(+), 547 deletions(-) Aleksandr Mishin (1): mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file Alex Deucher (2): drm/amdgpu/atomfirmware: silence UBSAN warning drm/amdgpu: silence UBSAN warning Alex Hung (4): drm/amd/display: Check index msg_id before read or write drm/amd/display: Check pipe offset before setting vblank drm/amd/display: Skip finding free audio for unknown engine_id drm/amd/display: Fix uninitialized variables in DM Armin Wolf (1): platform/x86: toshiba_acpi: Fix quickstart quirk handling Atish Patra (1): RISC-V: KVM: Fix the initial sample period value Chao Yu (1): f2fs: check validation of fault attrs in f2fs_build_fault_attr() Chenghai Huang (1): crypto: hisilicon/debugfs - Fix debugfs uninit process issue Chris Mi (1): net/mlx5: E-switch, Create ingress ACL when needed Christian Borntraeger (1): KVM: s390: fix LPSWEY handling Corinna Vinschen (1): igc: fix a log entry using uninitialized netdev Damien Le Moal (1): null_blk: Do not allow runt zone with zone capacity smaller then zone size Dave Jiang (1): net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() Dima Ruinskiy (1): e1000e: Fix S0ix residency on corporate systems Dmitry Antipov (1): mac802154: fix time calculation in ieee802154_configure_durations() Dmitry Torokhov (2): gpiolib: of: fix lookup quirk for MIPS Lantiq gpiolib: of: add polarity quirk for TSC2005 Dragan Simic (1): arm64: dts: rockchip: Fix the DCDC_REG2 minimum voltage on Quartz64 Model B Eduard Zingerman (3): selftests/bpf: adjust dummy_st_ops_success to detect additional error selftests/bpf: do not pass NULL for non-nullable params in dummy_st_ops selftests/bpf: dummy_st_ops should reject 0 for non-nullable params Edward Adam Davis (2): Bluetooth: Ignore too large handle values in BIG nfc/nci: Add the inconsistency check between the input data length and count Erick Archer (2): sctp: prefer struct_size over open coded arithmetic Input: ff-core - prefer struct_size over open coded arithmetic Erico Nunes (1): drm/lima: fix shared irq handling on driver remove Fedor Pchelkin (1): dma-mapping: benchmark: avoid needless copy_to_user if benchmark fails Fei Shao (1): media: mediatek: vcodec: Only free buffer VA that is not NULL Felix Fietkau (1): wifi: mt76: replace skb_put with skb_put_zero Florian Westphal (1): netfilter: nf_tables: unconditionally flush pending work before notifier Frank Oltmanns (1): clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common GUO Zihua (1): ima: Avoid blocking in RCU read-side critical section Gabor Juhos (1): clk: qcom: clk-alpha-pll: set ALPHA_EN bit for Stromer Plus PLLs George Stark (2): locking/mutex: Introduce devm_mutex_init() leds: an30259a: Use devm_mutex_init() for mutex initialization Ghadi Elie Rahme (1): bnx2x: Fix multiple UBSAN array-index-out-of-bounds Greg Kroah-Hartman (1): Linux 6.6.39 Greg Kurz (1): powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#" Hailey Mothershead (1): crypto: aead,cipher - zeroize key buffer after use Hector Martin (1): Bluetooth: hci_bcm4377: Fix msgid release Heiner Kallweit (1): i2c: i801: Annotate apanel_addr as __ro_after_init Holger Dengler (1): s390/pkey: Wipe sensitive data on failure Huacai Chen (1): cpu: Fix broken cmdline "nosmp" and "maxcpus=0" Iulia Tanasescu (1): Bluetooth: ISO: Check socket flag instead of hcon Jakub Kicinski (1): tcp_metrics: validate source addr length Jan Kara (3): mm: avoid overflows in dirty throttling logic fsnotify: Do not generate events for O_PATH file descriptors Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" Jean Delvare (1): firmware: dmi: Stop decoding on broken entry Jesse Zhang (2): drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc drm/amdgpu: fix the warning about the expression (int)size - len Jian-Hong Pan (1): ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897 Jianbo Liu (1): net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() Jiawen Wu (1): net: txgbe: initialize num_q_vectors for MSI/INTx interrupts Jim Wylder (1): regmap-i2c: Subtract reg size from max_write Jimmy Assarsson (1): can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct Jinglin Wen (1): powerpc/64s: Fix unnecessary copy to 0 when kernel is booted at address 0 Jinliang Zheng (1): mm: optimize the redundant loop of mm_update_owner_next() John Hubbard (1): selftests/net: fix uninitialized variables John Meneghini (1): scsi: qedf: Make qedf_execute_tmf() non-preemptible John Schoenick (1): drm: panel-orientation-quirks: Add quirk for Valve Galileo Jose E. Marchesi (1): bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD Jozef Hopko (1): wifi: wilc1000: fix ies_len type in connect path Julien Panis (1): thermal/drivers/mediatek/lvts_thermal: Check NULL ptr on lvts_data Justin Stitt (1): cdrom: rearrange last_media_change check to avoid unintentional overflow Konstantin Komarov (1): fs/ntfs3: Mark volume as dirty if xattr is broken Kundan Kumar (1): nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset Len Brown (1): tools/power turbostat: Remember global max_die_id Lu Yao (1): btrfs: scrub: initialize ret in scrub_simple_mirror() to fix compilation warning Luca Weiss (1): clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents Luiz Augusto von Dentz (1): Bluetooth: hci_event: Fix setting of unicast qos interval Ma Jun (2): drm/amdgpu: Fix uninitialized variable warnings drm/amdgpu: Initialize timestamp for some legacy SOCs Ma Ke (1): drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes Mahesh Salgaonkar (1): powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt. Marek Vasut (1): net: phy: phy_device: Fix PHY LED blinking code comment Masahiro Yamada (1): kbuild: fix short log for AS in link-vmlinux.sh Matt Jan (1): connector: Fix invalid conversion in cn_proc.h Matthias Schiffer (1): serial: imx: Raise TX trigger level to 8 Mauro Carvalho Chehab (1): media: dw2102: fix a potential buffer overflow Md Sadre Alam (1): clk: qcom: gcc-ipq9574: Add BRANCH_HALT_VOTED flag Michael Bunk (1): media: dw2102: Don't translate i2c read into write Michael Ellerman (1): powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n Michael Guralnik (1): IB/core: Implement a limit on UMAD receive List Mickaël Salaün (1): kunit: Fix timeout message Mike Christie (4): vhost: Use virtqueue mutex for swapping worker vhost: Release worker mutex during flushes vhost_task: Handle SIGKILL by flushing work and exiting vhost-scsi: Handle vhost_vq_work_queue failures for events Mike Marshall (1): orangefs: fix out-of-bounds fsid access Miquel Raynal (3): mtd: rawnand: Ensure ECC configuration is propagated to upper layers mtd: rawnand: Fix the nand_read_data_op() early check mtd: rawnand: Bypass a couple of sanity checks during NAND identification Naohiro Aota (1): btrfs: fix adding block group to a reclaim list and the unused list during reclaim Nathan Chancellor (2): f2fs: Add inline to f2fs_build_fault_attr() stub scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() Neal Cardwell (1): UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open() Nicholas Piggin (1): powerpc/pseries: Fix scv instruction crash with kexec Niklas Neronin (1): usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB Nilay Shroff (1): nvme-multipath: find NUMA path only for online numa-node Pavel Skripkin (1): bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX Pin-yen Lin (1): clk: mediatek: mt8183: Only enable runtime PM on mt8183-mfgcfg Piotr Wojtaszczyk (1): i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr Ricardo Ribalda (5): media: dvb: as102-fe: Fix as10x_register_addr packing media: dvb-usb: dib0700_devices: Add missing release_firmware() media: dvb-frontends: tda18271c2dd: Remove casting during div media: s2255: Use refcount_t instead of atomic_t for num_channels media: dvb-frontends: tda10048: Fix integer overflow Ryusuke Konishi (3): nilfs2: fix inode number range checks nilfs2: add missing check for inode numbers on directory entries nilfs2: fix incorrect inode allocation from reserved inodes Sagi Grimberg (2): net: allow skb_datagram_iter to be called from any context nvmet: fix a possible leak when destroy a ctrl during qp establishment Sam Sun (1): bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() Samuel Holland (1): riscv: Apply SiFive CIP-1200 workaround to single-ASID sfence.vma Sasha Neftin (1): Revert "igc: fix a log entry using uninitialized netdev" Shigeru Yoshida (1): inet_diag: Initialize pad field in struct inet_diag_req_v2 Shiji Yang (1): gpio: mmio: do not calculate bgpio_bits via "ngpios" Simon Horman (1): net: dsa: mv88e6xxx: Correct check for empty list Song Shuai (1): riscv: kexec: Avoid deadlock in kexec crash path StanleyYP Wang (1): wifi: mt76: mt7996: add sanity checks for background radar trigger Takashi Iwai (1): ALSA: ump: Set default protocol when not given explicitly Tim Huang (1): drm/amdgpu: fix uninitialized scalar variable warning Tomas Henzl (1): scsi: mpi3mr: Sanitise num_phys Val Packett (1): mtd: rawnand: rockchip: ensure NVDDR timings are rejected Wang Yong (1): jffs2: Fix potential illegal address access in jffs2_free_inode Witold Sadowski (1): spi: cadence: Ensure data lines set to low during dummy-cycle period Yijie Yang (1): net: stmmac: dwmac-qcom-ethqos: fix error array size Zijian Zhang (2): selftests: fix OOM in msg_zerocopy selftest selftests: make order checking verbose in msg_zerocopy selftest Zijun Hu (1): Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot hmtheboy154 (2): platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro

6 months

1
1
0 0

Linux 6.1.98

by Greg Kroah-Hartman

I'm announcing the release of the 6.1.98 kernel. All users of the 6.1 kernel series must upgrade. The updated 6.1.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.1.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm64/boot/dts/rockchip/rk3566-quartz64-b.dts | 2 arch/powerpc/include/asm/interrupt.h | 10 arch/powerpc/include/asm/io.h | 2 arch/powerpc/include/asm/percpu.h | 10 arch/powerpc/kernel/setup_64.c | 2 arch/powerpc/kexec/core_64.c | 11 arch/powerpc/platforms/pseries/kexec.c | 8 arch/powerpc/platforms/pseries/pseries.h | 1 arch/powerpc/platforms/pseries/setup.c | 1 arch/powerpc/xmon/xmon.c | 6 arch/riscv/kernel/machine_kexec.c | 10 arch/s390/include/asm/kvm_host.h | 1 arch/s390/kvm/kvm-s390.c | 1 arch/s390/kvm/kvm-s390.h | 15 + arch/s390/kvm/priv.c | 32 ++ crypto/aead.c | 3 crypto/cipher.c | 3 drivers/base/regmap/regmap-i2c.c | 3 drivers/block/null_blk/zoned.c | 11 drivers/bluetooth/hci_qca.c | 18 + drivers/cdrom/cdrom.c | 2 drivers/clk/mediatek/clk-mt8183-mfgcfg.c | 1 drivers/clk/mediatek/clk-mtk.c | 32 +- drivers/clk/mediatek/clk-mtk.h | 5 drivers/clk/qcom/gcc-sm6350.c | 10 drivers/crypto/hisilicon/debugfs.c | 21 + drivers/firmware/dmi_scan.c | 11 drivers/gpu/drm/amd/amdgpu/aldebaran.c | 2 drivers/gpu/drm/amd/amdgpu/amdgpu_gfx.c | 3 drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c | 8 drivers/gpu/drm/amd/amdgpu/sienna_cichlid.c | 2 drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 3 drivers/gpu/drm/amd/display/dc/irq/dce110/irq_service_dce110.c | 8 drivers/gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c | 8 drivers/gpu/drm/amd/include/atomfirmware.h | 2 drivers/gpu/drm/drm_panel_orientation_quirks.c | 7 drivers/gpu/drm/lima/lima_gp.c | 2 drivers/gpu/drm/lima/lima_mmu.c | 5 drivers/gpu/drm/lima/lima_pp.c | 4 drivers/gpu/drm/nouveau/nouveau_connector.c | 3 drivers/i2c/busses/i2c-i801.c | 2 drivers/i2c/busses/i2c-pnx.c | 48 --- drivers/infiniband/core/user_mad.c | 21 + drivers/input/ff-core.c | 7 drivers/media/dvb-frontends/as102_fe_types.h | 2 drivers/media/dvb-frontends/tda10048.c | 9 drivers/media/dvb-frontends/tda18271c2dd.c | 4 drivers/media/usb/dvb-usb/dib0700_devices.c | 18 + drivers/media/usb/dvb-usb/dw2102.c | 120 +++++---- drivers/media/usb/s2255/s2255drv.c | 20 - drivers/mtd/nand/raw/nand_base.c | 64 ++-- drivers/mtd/nand/raw/rockchip-nand-controller.c | 6 drivers/net/bonding/bond_options.c | 6 drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 1 drivers/net/dsa/mv88e6xxx/chip.c | 4 drivers/net/ethernet/broadcom/bnx2x/bnx2x.h | 2 drivers/net/ethernet/intel/e1000e/netdev.c | 132 +++++----- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 5 drivers/net/ethernet/mellanox/mlx5/core/esw/acl/ingress_ofld.c | 37 ++ drivers/net/ethernet/mellanox/mlxsw/core_linecards.c | 1 drivers/net/ntb_netdev.c | 2 drivers/net/wireless/mediatek/mt76/mt76_connac_mcu.c | 10 drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 2 drivers/net/wireless/microchip/wilc1000/hif.c | 3 drivers/nfc/virtual_ncidev.c | 4 drivers/nvme/host/multipath.c | 2 drivers/nvme/host/pci.c | 3 drivers/nvme/target/core.c | 9 drivers/platform/x86/toshiba_acpi.c | 31 +- drivers/platform/x86/touchscreen_dmi.c | 36 ++ drivers/s390/crypto/pkey_api.c | 4 drivers/scsi/mpi3mr/mpi3mr_transport.c | 10 drivers/scsi/qedf/qedf_io.c | 6 drivers/spi/spi-cadence-xspi.c | 20 + drivers/tty/serial/imx.c | 2 drivers/usb/host/xhci-ring.c | 5 fs/btrfs/block-group.c | 13 fs/btrfs/scrub.c | 2 fs/f2fs/f2fs.h | 12 fs/f2fs/super.c | 27 +- fs/f2fs/sysfs.c | 14 - fs/jffs2/super.c | 1 fs/nilfs2/alloc.c | 18 + fs/nilfs2/alloc.h | 4 fs/nilfs2/dat.c | 2 fs/nilfs2/dir.c | 6 fs/nilfs2/ifile.c | 7 fs/nilfs2/nilfs.h | 10 fs/nilfs2/the_nilfs.c | 6 fs/nilfs2/the_nilfs.h | 2 fs/ntfs3/xattr.c | 5 fs/orangefs/super.c | 3 include/linux/fsnotify.h | 8 include/linux/lsm_hook_defs.h | 2 include/linux/mutex.h | 27 ++ include/linux/security.h | 5 kernel/auditfilter.c | 5 kernel/dma/map_benchmark.c | 3 kernel/exit.c | 2 kernel/locking/mutex-debug.c | 12 lib/kunit/try-catch.c | 3 mm/page-writeback.c | 32 ++ net/core/datagram.c | 19 - net/ipv4/inet_diag.c | 2 net/ipv4/tcp_input.c | 2 net/ipv4/tcp_metrics.c | 1 net/mac802154/main.c | 14 - net/netfilter/nf_tables_api.c | 3 net/sctp/socket.c | 7 scripts/link-vmlinux.sh | 2 security/apparmor/audit.c | 6 security/apparmor/include/audit.h | 2 security/integrity/ima/ima.h | 2 security/integrity/ima/ima_policy.c | 15 - security/security.c | 6 security/selinux/include/audit.h | 4 security/selinux/ss/services.c | 5 security/smack/smack_lsm.c | 4 sound/pci/hda/patch_realtek.c | 9 tools/lib/bpf/bpf_core_read.h | 1 tools/power/x86/turbostat/turbostat.c | 10 tools/testing/selftests/net/msg_zerocopy.c | 14 - 123 files changed, 902 insertions(+), 406 deletions(-) Aleksandr Mishin (1): mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file Alex Deucher (1): drm/amdgpu/atomfirmware: silence UBSAN warning Alex Hung (3): drm/amd/display: Check index msg_id before read or write drm/amd/display: Check pipe offset before setting vblank drm/amd/display: Skip finding free audio for unknown engine_id AngeloGioacchino Del Regno (1): clk: mediatek: clk-mtk: Register MFG notifier in mtk_clk_simple_probe() Armin Wolf (1): platform/x86: toshiba_acpi: Fix quickstart quirk handling Chao Yu (1): f2fs: check validation of fault attrs in f2fs_build_fault_attr() Chenghai Huang (1): crypto: hisilicon/debugfs - Fix debugfs uninit process issue Chris Mi (1): net/mlx5: E-switch, Create ingress ACL when needed Christian Borntraeger (1): KVM: s390: fix LPSWEY handling Corinna Vinschen (1): igc: fix a log entry using uninitialized netdev Damien Le Moal (1): null_blk: Do not allow runt zone with zone capacity smaller then zone size Dave Jiang (1): net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() Dima Ruinskiy (1): e1000e: Fix S0ix residency on corporate systems Dmitry Antipov (1): mac802154: fix time calculation in ieee802154_configure_durations() Dragan Simic (1): arm64: dts: rockchip: Fix the DCDC_REG2 minimum voltage on Quartz64 Model B Edward Adam Davis (1): nfc/nci: Add the inconsistency check between the input data length and count Erick Archer (2): sctp: prefer struct_size over open coded arithmetic Input: ff-core - prefer struct_size over open coded arithmetic Erico Nunes (1): drm/lima: fix shared irq handling on driver remove Fedor Pchelkin (1): dma-mapping: benchmark: avoid needless copy_to_user if benchmark fails Felix Fietkau (1): wifi: mt76: replace skb_put with skb_put_zero Florian Westphal (1): netfilter: nf_tables: unconditionally flush pending work before notifier GUO Zihua (1): ima: Avoid blocking in RCU read-side critical section George Stark (1): locking/mutex: Introduce devm_mutex_init() Ghadi Elie Rahme (1): bnx2x: Fix multiple UBSAN array-index-out-of-bounds Greg Kroah-Hartman (1): Linux 6.1.98 Greg Kurz (1): powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#" Hailey Mothershead (1): crypto: aead,cipher - zeroize key buffer after use Heiner Kallweit (1): i2c: i801: Annotate apanel_addr as __ro_after_init Holger Dengler (1): s390/pkey: Wipe sensitive data on failure Jakub Kicinski (1): tcp_metrics: validate source addr length Jan Kara (3): mm: avoid overflows in dirty throttling logic fsnotify: Do not generate events for O_PATH file descriptors Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" Jean Delvare (1): firmware: dmi: Stop decoding on broken entry Jian-Hong Pan (1): ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897 Jianbo Liu (1): net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() Jim Wylder (1): regmap-i2c: Subtract reg size from max_write Jimmy Assarsson (1): can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct Jinliang Zheng (1): mm: optimize the redundant loop of mm_update_owner_next() John Meneghini (1): scsi: qedf: Make qedf_execute_tmf() non-preemptible John Schoenick (1): drm: panel-orientation-quirks: Add quirk for Valve Galileo Jose E. Marchesi (1): bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD Jozef Hopko (1): wifi: wilc1000: fix ies_len type in connect path Justin Stitt (1): cdrom: rearrange last_media_change check to avoid unintentional overflow Konstantin Komarov (1): fs/ntfs3: Mark volume as dirty if xattr is broken Kundan Kumar (1): nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset Len Brown (1): tools/power turbostat: Remember global max_die_id Lu Yao (1): btrfs: scrub: initialize ret in scrub_simple_mirror() to fix compilation warning Luca Weiss (1): clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents Ma Jun (2): drm/amdgpu: Fix uninitialized variable warnings drm/amdgpu: Initialize timestamp for some legacy SOCs Ma Ke (1): drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes Mahesh Salgaonkar (1): powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt. Masahiro Yamada (1): kbuild: fix short log for AS in link-vmlinux.sh Matthias Schiffer (1): serial: imx: Raise TX trigger level to 8 Mauro Carvalho Chehab (1): media: dw2102: fix a potential buffer overflow Michael Bunk (1): media: dw2102: Don't translate i2c read into write Michael Ellerman (1): powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n Michael Guralnik (1): IB/core: Implement a limit on UMAD receive List Mickaël Salaün (1): kunit: Fix timeout message Mike Marshall (1): orangefs: fix out-of-bounds fsid access Miquel Raynal (2): mtd: rawnand: Ensure ECC configuration is propagated to upper layers mtd: rawnand: Bypass a couple of sanity checks during NAND identification Naohiro Aota (1): btrfs: fix adding block group to a reclaim list and the unused list during reclaim Nathan Chancellor (2): f2fs: Add inline to f2fs_build_fault_attr() stub scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() Neal Cardwell (1): UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open() Nicholas Piggin (1): powerpc/pseries: Fix scv instruction crash with kexec Niklas Neronin (1): usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB Nilay Shroff (1): nvme-multipath: find NUMA path only for online numa-node Pin-yen Lin (1): clk: mediatek: mt8183: Only enable runtime PM on mt8183-mfgcfg Piotr Wojtaszczyk (1): i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr Ricardo Ribalda (5): media: dvb: as102-fe: Fix as10x_register_addr packing media: dvb-usb: dib0700_devices: Add missing release_firmware() media: dvb-frontends: tda18271c2dd: Remove casting during div media: s2255: Use refcount_t instead of atomic_t for num_channels media: dvb-frontends: tda10048: Fix integer overflow Ryusuke Konishi (3): nilfs2: fix inode number range checks nilfs2: add missing check for inode numbers on directory entries nilfs2: fix incorrect inode allocation from reserved inodes Sagi Grimberg (2): net: allow skb_datagram_iter to be called from any context nvmet: fix a possible leak when destroy a ctrl during qp establishment Sam Sun (1): bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() Sasha Neftin (1): Revert "igc: fix a log entry using uninitialized netdev" Shigeru Yoshida (1): inet_diag: Initialize pad field in struct inet_diag_req_v2 Simon Horman (1): net: dsa: mv88e6xxx: Correct check for empty list Song Shuai (1): riscv: kexec: Avoid deadlock in kexec crash path Tim Huang (1): drm/amdgpu: fix uninitialized scalar variable warning Tomas Henzl (1): scsi: mpi3mr: Sanitise num_phys Val Packett (1): mtd: rawnand: rockchip: ensure NVDDR timings are rejected Wang Yong (1): jffs2: Fix potential illegal address access in jffs2_free_inode Witold Sadowski (1): spi: cadence: Ensure data lines set to low during dummy-cycle period Zijian Zhang (2): selftests: fix OOM in msg_zerocopy selftest selftests: make order checking verbose in msg_zerocopy selftest Zijun Hu (1): Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot hmtheboy154 (2): platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro

6 months

1
1
0 0

[PATCH] drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8

by Nitin Gote

We're seeing a GPU HANG issue on a CHV platform, which was caused by bac24f59f454 ("drm/i915/execlists: Enable coarse preemption boundaries for gen8"). Gen8 platform has only timeslice and doesn't support a preemption mechanism as engines do not have a preemption timer and doesn't send an irq if the preemption timeout expires. So, add a fix to not consider preemption during dequeuing for gen8 platforms. Also move can_preemt() above need_preempt() function to resolve implicit declaration of function ‘can_preempt' error and make can_preempt() function param as const to resolve error: passing argument 1 of ‘can_preempt’ discards ‘const’ qualifier from the pointer target type. v2: Simplify can_preemt() function (Tvrtko Ursulin) Fixes: bac24f59f454 ("drm/i915/execlists: Enable coarse preemption boundaries for gen8") Closes: https://gitlab.freedesktop.org/drm/i915/kernel/-/issues/11396 Suggested-by: Andi Shyti <andi.shyti(a)intel.com> Signed-off-by: Nitin Gote <nitin.r.gote(a)intel.com> Cc: Chris Wilson <chris.p.wilson(a)linux.intel.com> CC: <stable(a)vger.kernel.org> # v5.2+ --- .../drm/i915/gt/intel_execlists_submission.c | 17 ++++++++--------- 1 file changed, 8 insertions(+), 9 deletions(-) diff --git a/drivers/gpu/drm/i915/gt/intel_execlists_submission.c b/drivers/gpu/drm/i915/gt/intel_execlists_submission.c index 21829439e686..59885d7721e4 100644 --- a/drivers/gpu/drm/i915/gt/intel_execlists_submission.c +++ b/drivers/gpu/drm/i915/gt/intel_execlists_submission.c @@ -294,11 +294,19 @@ static int virtual_prio(const struct intel_engine_execlists *el) return rb ? rb_entry(rb, struct ve_node, rb)->prio : INT_MIN; } +static bool can_preempt(const struct intel_engine_cs *engine) +{ + return GRAPHICS_VER(engine->i915) > 8; +} + static bool need_preempt(const struct intel_engine_cs *engine, const struct i915_request *rq) { int last_prio; + if (!can_preempt(engine)) + return false; + if (!intel_engine_has_semaphores(engine)) return false; @@ -3313,15 +3321,6 @@ static void remove_from_engine(struct i915_request *rq) i915_request_notify_execute_cb_imm(rq); } -static bool can_preempt(struct intel_engine_cs *engine) -{ - if (GRAPHICS_VER(engine->i915) > 8) - return true; - - /* GPGPU on bdw requires extra w/a; not implemented */ - return engine->class != RENDER_CLASS; -} - static void kick_execlists(const struct i915_request *rq, int prio) { struct intel_engine_cs *engine = rq->engine; -- 2.25.1

6 months

2
1
0 0

FAILED: patch "[PATCH] s390: Mark psw in __load_psw_mask() as __unitialized" failed to apply to 4.19-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 4.19-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-4.19.y git checkout FETCH_HEAD git cherry-pick -x 7278a8fb8d032dfdc03d9b5d17e0bc451cdc1492 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2024071155-mushiness-lumpiness-edc1@gregkh' --subject-prefix 'PATCH 4.19.y' HEAD^.. Possible dependencies: 7278a8fb8d03 ("s390: Mark psw in __load_psw_mask() as __unitialized") thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 7278a8fb8d032dfdc03d9b5d17e0bc451cdc1492 Mon Sep 17 00:00:00 2001 From: Sven Schnelle <svens(a)linux.ibm.com> Date: Tue, 30 Apr 2024 16:30:01 +0200 Subject: [PATCH] s390: Mark psw in __load_psw_mask() as __unitialized Without __unitialized, the following code is generated when INIT_STACK_ALL_ZERO is enabled: 86: d7 0f f0 a0 f0 a0 xc 160(16,%r15), 160(%r15) 8c: e3 40 f0 a0 00 24 stg %r4, 160(%r15) 92: c0 10 00 00 00 08 larl %r1, 0xa2 98: e3 10 f0 a8 00 24 stg %r1, 168(%r15) 9e: b2 b2 f0 a0 lpswe 160(%r15) The xc is not adding any security because psw is fully initialized with the following instructions. Add __unitialized to the psw definitiation to avoid the superfluous clearing of psw. Reviewed-by: Heiko Carstens <hca(a)linux.ibm.com> Signed-off-by: Sven Schnelle <svens(a)linux.ibm.com> Signed-off-by: Alexander Gordeev <agordeev(a)linux.ibm.com> diff --git a/arch/s390/include/asm/processor.h b/arch/s390/include/asm/processor.h index 1e2fc6d6963c..07ad5a1df878 100644 --- a/arch/s390/include/asm/processor.h +++ b/arch/s390/include/asm/processor.h @@ -314,8 +314,8 @@ static inline void __load_psw(psw_t psw) */ static __always_inline void __load_psw_mask(unsigned long mask) { + psw_t psw __uninitialized; unsigned long addr; - psw_t psw; psw.mask = mask;

6 months

1
0
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror July 2024