September 2024 - Linux-stable-mirror

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.1.110 release. There are 186 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 13 Sep 2024 13:05:08 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.110-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.1.110-rc2 Miklos Szeredi <mszeredi(a)redhat.com> fuse: add feature flag for expire-only Peng Wu <wupeng58(a)huawei.com> regulator: of: fix a NULL vs IS_ERR() check in of_regulator_bulk_get_all() Shakeel Butt <shakeel.butt(a)linux.dev> memcg: protect concurrent access to mem_cgroup_idr Yonghong Song <yhs(a)fb.com> bpf: Silence a warning in btf_type_id_size() Filipe Manana <fdmanana(a)suse.com> btrfs: fix race between direct IO write and fsync when using same fd Thomas Gleixner <tglx(a)linutronix.de> x86/mm: Fix PTI for i386 some more Li Nan <linan122(a)huawei.com> ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery() Liao Chen <liaochen4(a)huawei.com> gpio: modepin: Enable module autoloading Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> gpio: rockchip: fix OF node leak in probe() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> drm/i915/fence: Mark debug_fence_free() with __maybe_unused Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused Matteo Martelli <matteomartelli3(a)gmail.com> ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode Chen-Yu Tsai <wenst(a)chromium.org> ASoc: SOF: topology: Clear SOF link platform name upon unload Maurizio Lombardi <mlombard(a)redhat.com> nvmet-tcp: fix kernel crash if commands allocation fails Mohan Kumar <mkumard(a)nvidia.com> ASoC: tegra: Fix CBB error during probe() Christophe Leroy <christophe.leroy(a)csgroup.eu> powerpc/64e: Define mmu_pte_psize static Michael Ellerman <mpe(a)ellerman.id.au> powerpc/64e: split out nohash Book3E 64-bit code Michael Ellerman <mpe(a)ellerman.id.au> powerpc/64e: remove unused IBM HTW code Marek Olšák <marek.olsak(a)amd.com> drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes Aurabindo Pillai <aurabindo.pillai(a)amd.com> drm/amd: Add gfx12 swizzle mode defs Marc Kleine-Budde <mkl(a)pengutronix.de> can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd Marc Kleine-Budde <mkl(a)pengutronix.de> can: mcp251xfd: clarify the meaning of timestamp Marc Kleine-Budde <mkl(a)pengutronix.de> can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum Marc Kleine-Budde <mkl(a)pengutronix.de> can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function Jonathan Cameron <Jonathan.Cameron(a)huawei.com> arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry James Morse <james.morse(a)arm.com> arm64: acpi: Move get_cpu_for_acpi_id() to a header Jonathan Cameron <Jonathan.Cameron(a)huawei.com> ACPI: processor: Fix memory leaks in error paths of processor_add() Jonathan Cameron <Jonathan.Cameron(a)huawei.com> ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add() Nicholas Piggin <npiggin(a)gmail.com> workqueue: Improve scalability of workqueue watchdog touch Nicholas Piggin <npiggin(a)gmail.com> workqueue: wq_watchdog_touch is always called with valid CPU Souradeep Chakrabarti <schakrabarti(a)linux.microsoft.com> net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup yangyun <yangyun50(a)huawei.com> fuse: fix memory leak in fuse_create_open Miklos Szeredi <mszeredi(a)redhat.com> fuse: add request extension Dharmendra Singh <dsingh(a)ddn.com> fuse: allow non-extending parallel direct writes on the same file Miklos Szeredi <mszeredi(a)redhat.com> fuse: add "expire only" mode to FUSE_NOTIFY_INVAL_ENTRY Peter Zijlstra <peterz(a)infradead.org> perf/aux: Fix AUX buffer serialization Sven Schnelle <svens(a)linux.ibm.com> uprobes: Use kzalloc to allocate xol area Daniel Lezcano <daniel.lezcano(a)linaro.org> clocksource/drivers/timer-of: Remove percpu irq related code Jacky Bai <ping.bai(a)nxp.com> clocksource/drivers/imx-tpm: Fix next event not taking effect sometime Jacky Bai <ping.bai(a)nxp.com> clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX David Fernandez Gonzalez <david.fernandez.gonzalez(a)oracle.com> VMCI: Fix use-after-free when removing resource in vmci_resource_remove() Naman Jain <namjain(a)linux.microsoft.com> Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic Saurabh Sengar <ssengar(a)linux.microsoft.com> uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind Geert Uytterhoeven <geert+renesas(a)glider.be> nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc Carlos Llamas <cmllamas(a)google.com> binder: fix UAF caused by offsets overwrite Faisal Hassan <quic_faisalh(a)quicinc.com> usb: dwc3: core: update LC timer as per USB Spec V3.2 Dumitru Ceclan <mitrutzceclan(a)gmail.com> iio: adc: ad7124: fix chip ID mismatch Guillaume Stols <gstols(a)baylibre.com> iio: adc: ad7606: remove frstdata check for serial mode Dumitru Ceclan <mitrutzceclan(a)gmail.com> iio: adc: ad7124: fix config comparison Matteo Martelli <matteomartelli3(a)gmail.com> iio: fix scale application in iio_convert_raw_to_processed_unlocked David Lechner <dlechner(a)baylibre.com> iio: buffer-dmaengine: fix releasing dma channel on error Aleksandr Mishin <amishin(a)t-argos.ru> staging: iio: frequency: ad9834: Validate frequency parameter value Matthieu Baerts (NGI0) <matttbe(a)kernel.org> tcp: process the 3rd ACK with sk_socket for TFO/MPTCP Michal Koutný <mkoutny(a)suse.com> io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads Jens Axboe <axboe(a)kernel.dk> io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: join: check re-re-adding ID 0 signal Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: join: validate event numbers Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: fix backport issues Trond Myklebust <trond.myklebust(a)hammerspace.com> NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations Michael Ellerman <mpe(a)ellerman.id.au> ata: pata_macio: Use WARN instead of BUG Jiaxun Yang <jiaxun.yang(a)flygoat.com> MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed Kent Overstreet <kent.overstreet(a)linux.dev> lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() Stefan Wiehler <stefan.wiehler(a)nokia.com> of/irq: Prevent device address out-of-bounds read in interrupt map walk Phillip Lougher <phillip(a)squashfs.org.uk> Squashfs: sanity check symbolic link size Oliver Neukum <oneukum(a)suse.com> usbnet: ipheth: race between ipheth_close and error handling Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: uinput - reject requests with unreasonable number of slots Olivier Sobrie <olivier(a)sobrie.be> HID: amd_sfh: free driver_data after destroying hid device Camila Alvarez <cam.alvarez.i(a)gmail.com> HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup Heiko Carstens <hca(a)linux.ibm.com> s390/vmlinux.lds.S: Move ro_after_init section behind rodata section David Sterba <dsterba(a)suse.com> btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry() Zenghui Yu <yuzenghui(a)huawei.com> kselftests: dmabuf-heaps: Ensure the driver name is null-terminated Jarkko Nikula <jarkko.nikula(a)linux.intel.com> i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dpaa: avoid on-stack arrays of NR_CPUS elements Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Don't drop SYN+ACK for simultaneous connect(). Dan Williams <dan.j.williams(a)intel.com> PCI: Add missing bridge lock to pci_bus_lock() yang.zhang <yang.zhang(a)hexintek.com> riscv: set trap vector earlier Filipe Manana <fdmanana(a)suse.com> btrfs: replace BUG_ON() with error handling at update_ref_for_cow() Josef Bacik <josef(a)toxicpanda.com> btrfs: clean up our handling of refs == 0 in snapshot delete Josef Bacik <josef(a)toxicpanda.com> btrfs: replace BUG_ON with ASSERT in walk_down_proc() Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: Check more cases when directory is corrupted Zqiang <qiang.zhang1211(a)gmail.com> smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu() Sascha Hauer <s.hauer(a)pengutronix.de> wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() Yicong Yang <yangyicong(a)hisilicon.com> dma-mapping: benchmark: Don't starve others when doing the test Luis Henriques (SUSE) <luis.henriques(a)linux.dev> ext4: fix possible tid_t sequence overflows Yifan Zha <Yifan.Zha(a)amd.com> drm/amdgpu: Set no_hw_access when VF request full GPU fails Andreas Ziegler <ziegler.andreas(a)siemens.com> libbpf: Add NULL checks to bpf_object__{prev_map,next_map} Guenter Roeck <linux(a)roeck-us.net> hwmon: (w83627ehf) Fix underflows seen when writing limit attributes Guenter Roeck <linux(a)roeck-us.net> hwmon: (nct6775-core) Fix underflows seen when writing limit attributes Guenter Roeck <linux(a)roeck-us.net> hwmon: (lm95234) Fix underflows seen when writing limit attributes Guenter Roeck <linux(a)roeck-us.net> hwmon: (adc128d818) Fix underflows seen when writing limit attributes Hareshx Sankar Raj <hareshx.sankar.raj(a)intel.com> crypto: qat - fix unintentional re-enabling of error interrupts Krishna Kumar <krishnak(a)linux.ibm.com> pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv Zijun Hu <quic_zijuhu(a)quicinc.com> devres: Initialize an uninitialized struct member Johannes Berg <johannes.berg(a)intel.com> um: line: always fill *error_out in setup_one_line() Waiman Long <longman(a)redhat.com> cgroup: Protect css->cgroup write under css_set_lock Jacob Pan <jacob.jun.pan(a)linux.intel.com> iommu/vt-d: Handle volatile descriptor status read Benjamin Marzinski <bmarzins(a)redhat.com> dm init: Handle minors larger than 255 Amadeusz Sławiński <amadeuszx.slawinski(a)linux.intel.com> ASoC: topology: Properly initialize soc_enum values Sean Anderson <sean.anderson(a)linux.dev> phy: zynqmp: Take the phy mutex in xlate Richard Fitzgerald <rf(a)opensource.cirrus.com> firmware: cs_dsp: Don't allow writes to read-only controls Pawel Dembicki <paweldembicki(a)gmail.com> net: dsa: vsc73xx: fix possible subblocks range of CAPT block Jonas Gorski <jonas.gorski(a)bisdn.de> net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN Kuniyuki Iwashima <kuniyu(a)amazon.com> fou: Fix null-ptr-deref in GRO. Guillaume Nault <gnault(a)redhat.com> bareudp: Fix device stats updates. Oliver Neukum <oneukum(a)suse.com> usbnet: modern method to get random MAC Larysa Zaremba <larysa.zaremba(a)intel.com> ice: do not bring the VSI up, if it was down before the XDP setup Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> ice: allow hot-swapping XDP programs Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> ice: Use ice_max_xdp_frame_size() in ice_xdp_setup_prog() Dan Carpenter <dan.carpenter(a)linaro.org> igc: Unlock on error in igc_io_resume() Douglas Anderson <dianders(a)chromium.org> regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR Corentin Labbe <clabbe(a)baylibre.com> regulator: Add of_regulator_bulk_get_all Aleksandr Mishin <amishin(a)t-argos.ru> platform/x86: dell-smbios: Fix error path in dell_smbios_init() Dawid Osuchowski <dawid.osuchowski(a)linux.intel.com> ice: Add netif_device_attach/detach into PF reset flow Daiwei Li <daiweili(a)google.com> igb: Fix not clearing TimeSync interrupts for 82580 David Howells <dhowells(a)redhat.com> cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region Andreas Hindborg <a.hindborg(a)samsung.com> rust: kbuild: fix export of bss symbols Matthew Maurer <mmaurer(a)google.com> rust: Use awk instead of recent xargs Marc Kleine-Budde <mkl(a)pengutronix.de> can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode Simon Horman <horms(a)kernel.org> can: m_can: Release irq on error in m_can_open Kuniyuki Iwashima <kuniyu(a)amazon.com> can: bcm: Remove proc entry when dev is unregistered. Marek Olšák <marek.olsak(a)amd.com> drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6 Alex Hung <alex.hung(a)amd.com> drm/amd/display: Check denominator pbn_div before used Jules Irenge <jbi.octave(a)gmail.com> pcmcia: Use resource_size function on resource object Chen Ni <nichen(a)iscas.ac.cn> media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ili210x - use kvmalloc() to allocate buffer for firmware update Kishon Vijay Abraham I <kishon(a)ti.com> PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) Hans Verkuil <hverkuil-cisco(a)xs4all.nl> media: vivid: don't set HDMI TX controls if there are no HDMI outputs Danijel Slivka <danijel.slivka(a)amd.com> drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts Hawking Zhang <Hawking.Zhang(a)amd.com> drm/amdgpu: Fix smatch static checker warning Alex Hung <alex.hung(a)amd.com> drm/amd/display: Check HDCP returned status Ma Ke <make24(a)iscas.ac.cn> usb: gadget: aspeed_udc: validate endpoint index for ast udc Shantanu Goel <sgoel01(a)yahoo.com> usb: uas: set host status byte on data completion error Arend van Spriel <arend.vanspriel(a)broadcom.com> wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3 Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> leds: spi-byte: Call of_node_put() on error path Hans Verkuil <hverkuil-cisco(a)xs4all.nl> media: vivid: fix wrong sizeimage value for mplane Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: One more reason to mark inode bad Jan Kara <jack(a)suse.cz> udf: Avoid excessive partition lengths Yunjian Wang <wangyunjian(a)huawei.com> netfilter: nf_conncount: fix wrong variable type Jernej Skrabec <jernej.skrabec(a)gmail.com> iommu: sun50i: clear bypass register Brian Johannesmeyer <bjohannesmeyer(a)gmail.com> x86/kmsan: Fix hook for unaligned accesses Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Remove put_pid()/put_cred() in copy_peercred(). Pali Rohár <pali(a)kernel.org> irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1 Alexey Dobriyan <adobriyan(a)gmail.com> ELF: fix kernel.randomize_va_space double read Konstantin Andreev <andreev(a)swemel.ru> smack: unix sockets: fix accept()ed socket label Takashi Iwai <tiwai(a)suse.de> ALSA: hda: Add input value sanity checks to HDMI channel map controls Takashi Iwai <tiwai(a)suse.de> ALSA: control: Apply sanity check of input values for user elements Ryusuke Konishi <konishi.ryusuke(a)gmail.com> nilfs2: fix state management in error path of log writing function Ryusuke Konishi <konishi.ryusuke(a)gmail.com> nilfs2: protect references to superblock parameters exposed in sysfs Ryusuke Konishi <konishi.ryusuke(a)gmail.com> nilfs2: fix missing cleanup on rollforward recovery error Toke Høiland-Jørgensen <toke(a)redhat.com> sched: sch_cake: fix bulk flow accounting logic for host fairness Eric Dumazet <edumazet(a)google.com> ila: call nf_unregister_net_hooks() sooner Cong Wang <cong.wang(a)bytedance.com> tcp_bpf: fix return value of tcp_bpf_sendmsg() Alex Deucher <alexander.deucher(a)amd.com> Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs" Mitchell Levy <levymitchell0(a)gmail.com> x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported Matt Johnston <matt(a)codeconstruct.com.au> net: mctp-serial: Fix missing escapes on transmit Zheng Yejian <zhengyejian(a)huaweicloud.com> tracing: Avoid possible softlockup in tracing_iter_reset() Brian Norris <briannorris(a)chromium.org> spi: rockchip: Resolve unbalanced runtime PM / system PM handling Simon Arlott <simon(a)octiron.net> can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open Satya Priya Kakitapalli <quic_skakitap(a)quicinc.com> clk: qcom: clk-alpha-pll: Fix zonda set_rate failure when PLL is disabled Satya Priya Kakitapalli <quic_skakitap(a)quicinc.com> clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API Satya Priya Kakitapalli <quic_skakitap(a)quicinc.com> clk: qcom: clk-alpha-pll: Fix the pll post div mask Jann Horn <jannh(a)google.com> fuse: use unsigned type for getxattr/listxattr size truncation Joanne Koong <joannelkoong(a)gmail.com> fuse: update stats for pages in dropped aux writeback list Seunghwan Baek <sh8267.baek(a)samsung.com> mmc: cqhci: Fix checking of CQHCI_HALT state Liao Chen <liaochen4(a)huawei.com> mmc: sdhci-of-aspeed: fix module autoloading Sam Protsenko <semen.protsenko(a)linaro.org> mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K Jonathan Bell <jonathan(a)raspberrypi.com> mmc: core: apply SD quirks earlier during probe Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: MGMT: Ignore keys being loaded with invalid type Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE" Georg Gottleuber <ggo(a)tuxedocomputers.com> nvme-pci: Add sleep quirk for Samsung 990 Evo Roland Xu <mu001999(a)outlook.com> rtmutex: Drop rt_mutex::wait_lock before scheduling Thomas Gleixner <tglx(a)linutronix.de> x86/kaslr: Expose and use the end of the physical memory address space Ma Ke <make24(a)iscas.ac.cn> irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init() Kan Liang <kan.liang(a)linux.intel.com> perf/x86/intel: Limit the period on Haswell Kirill A. Shutemov <kirill.shutemov(a)linux.intel.com> x86/tdx: Fix data leak in mmio_read() Zheng Qixing <zhengqixing(a)huawei.com> ata: libata: Fix memory leak for error path in ata_host_alloc() Dan Carpenter <dan.carpenter(a)linaro.org> ksmbd: Unlock on in ksmbd_tcp_set_interfaces() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: unset the binding mark of a reused connection Maximilien Perreault <maximilienperreault(a)gmail.com> ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx Terry Cheong <htcheong(a)chromium.org> ALSA: hda/realtek: add patch for internal mic in Lenovo V145 Christoffer Sandberg <cs(a)tuxedo.de> ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices Ravi Bangoria <ravi.bangoria(a)amd.com> KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing Maxim Levitsky <mlevitsk(a)redhat.com> KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE Sean Christopherson <seanjc(a)google.com> KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS robelin <robelin(a)nvidia.com> ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object Stephen Hemminger <stephen(a)networkplumber.org> sch/netem: fix use after free in netem_dequeue ------------- Diffstat: Makefile | 4 +- arch/arm64/include/asm/acpi.h | 12 + arch/arm64/kernel/acpi_numa.c | 11 - arch/mips/kernel/cevt-r4k.c | 15 +- arch/powerpc/include/asm/nohash/mmu-e500.h | 3 +- arch/powerpc/mm/nohash/Makefile | 2 +- arch/powerpc/mm/nohash/tlb.c | 398 +-------------------- arch/powerpc/mm/nohash/tlb_64e.c | 361 +++++++++++++++++++ arch/powerpc/mm/nohash/tlb_low_64e.S | 195 ---------- arch/riscv/kernel/head.S | 3 + arch/s390/kernel/vmlinux.lds.S | 9 + arch/um/drivers/line.c | 2 + arch/x86/coco/tdx/tdx.c | 1 - arch/x86/events/intel/core.c | 23 +- arch/x86/include/asm/fpu/types.h | 7 + arch/x86/include/asm/page_64.h | 1 + arch/x86/include/asm/pgtable_64_types.h | 4 + arch/x86/kernel/fpu/xstate.c | 3 + arch/x86/kernel/fpu/xstate.h | 4 +- arch/x86/kvm/svm/svm.c | 15 + arch/x86/kvm/x86.c | 2 + arch/x86/lib/iomem.c | 5 +- arch/x86/mm/init_64.c | 4 + arch/x86/mm/kaslr.c | 34 +- arch/x86/mm/pti.c | 45 ++- drivers/acpi/acpi_processor.c | 15 +- drivers/android/binder.c | 1 + drivers/ata/libata-core.c | 4 +- drivers/ata/pata_macio.c | 7 +- drivers/base/devres.c | 1 + drivers/block/ublk_drv.c | 2 + drivers/clk/qcom/clk-alpha-pll.c | 9 +- drivers/clocksource/timer-imx-tpm.c | 16 +- drivers/clocksource/timer-of.c | 17 +- drivers/clocksource/timer-of.h | 1 - drivers/crypto/qat/qat_common/adf_gen2_pfvf.c | 4 +- .../crypto/qat/qat_dh895xcc/adf_dh895xcc_hw_data.c | 8 +- drivers/firmware/cirrus/cs_dsp.c | 3 + drivers/gpio/gpio-rockchip.c | 1 + drivers/gpio/gpio-zynqmp-modepin.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_display.c | 30 +- drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c | 4 +- drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 8 +- drivers/gpu/drm/amd/amdgpu/ih_v6_0.c | 28 ++ drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 2 +- .../drm/amd/display/modules/hdcp/hdcp1_execution.c | 15 +- drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 6 +- drivers/gpu/drm/i915/i915_sw_fence.c | 8 +- drivers/hid/amd-sfh-hid/amd_sfh_hid.c | 4 +- drivers/hid/hid-cougar.c | 2 +- drivers/hv/vmbus_drv.c | 1 + drivers/hwmon/adc128d818.c | 4 +- drivers/hwmon/lm95234.c | 9 +- drivers/hwmon/nct6775-core.c | 2 +- drivers/hwmon/w83627ehf.c | 4 +- drivers/i3c/master/mipi-i3c-hci/dma.c | 5 +- drivers/iio/adc/ad7124.c | 27 +- drivers/iio/adc/ad7606.c | 28 +- drivers/iio/adc/ad7606.h | 2 + drivers/iio/adc/ad7606_par.c | 46 ++- drivers/iio/buffer/industrialio-buffer-dmaengine.c | 4 +- drivers/iio/inkern.c | 8 +- drivers/input/misc/uinput.c | 14 + drivers/input/touchscreen/ili210x.c | 6 +- drivers/iommu/intel/dmar.c | 2 +- drivers/iommu/sun50i-iommu.c | 1 + drivers/irqchip/irq-armada-370-xp.c | 4 + drivers/irqchip/irq-gic-v2m.c | 6 +- drivers/leds/leds-spi-byte.c | 6 +- drivers/md/dm-init.c | 4 +- drivers/media/platform/qcom/camss/camss.c | 5 +- drivers/media/test-drivers/vivid/vivid-vid-cap.c | 17 +- drivers/media/test-drivers/vivid/vivid-vid-out.c | 16 +- drivers/misc/vmw_vmci/vmci_resource.c | 3 +- drivers/mmc/core/quirks.h | 22 +- drivers/mmc/core/sd.c | 4 + drivers/mmc/host/cqhci-core.c | 2 +- drivers/mmc/host/dw_mmc.c | 4 +- drivers/mmc/host/sdhci-of-aspeed.c | 1 + drivers/net/bareudp.c | 22 +- drivers/net/can/m_can/m_can.c | 5 +- drivers/net/can/spi/mcp251x.c | 2 +- drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c | 28 +- drivers/net/can/spi/mcp251xfd/mcp251xfd-ram.c | 11 +- drivers/net/can/spi/mcp251xfd/mcp251xfd-ring.c | 23 +- drivers/net/can/spi/mcp251xfd/mcp251xfd-rx.c | 165 ++++++--- drivers/net/can/spi/mcp251xfd/mcp251xfd-tef.c | 2 +- .../net/can/spi/mcp251xfd/mcp251xfd-timestamp.c | 22 +- drivers/net/can/spi/mcp251xfd/mcp251xfd.h | 42 ++- drivers/net/dsa/vitesse-vsc73xx-core.c | 10 +- drivers/net/ethernet/freescale/dpaa/dpaa_eth.c | 20 +- drivers/net/ethernet/freescale/dpaa/dpaa_ethtool.c | 10 +- drivers/net/ethernet/intel/ice/ice_main.c | 61 ++-- drivers/net/ethernet/intel/igb/igb_main.c | 10 + drivers/net/ethernet/intel/igc/igc_main.c | 1 + drivers/net/ethernet/microsoft/mana/mana.h | 2 + drivers/net/ethernet/microsoft/mana/mana_en.c | 22 +- drivers/net/mctp/mctp-serial.c | 4 +- drivers/net/usb/ipheth.c | 2 +- drivers/net/usb/usbnet.c | 11 +- .../broadcom/brcm80211/brcmsmac/mac80211_if.c | 1 + drivers/net/wireless/marvell/mwifiex/main.h | 3 + drivers/nvme/host/pci.c | 11 + drivers/nvme/target/tcp.c | 4 +- drivers/nvmem/core.c | 6 +- drivers/of/irq.c | 15 +- drivers/pci/controller/dwc/pci-keystone.c | 44 ++- drivers/pci/hotplug/pnv_php.c | 3 +- drivers/pci/pci.c | 35 +- drivers/pcmcia/yenta_socket.c | 6 +- drivers/phy/xilinx/phy-zynqmp.c | 1 + drivers/platform/x86/dell/dell-smbios-base.c | 5 +- drivers/regulator/of_regulator.c | 92 +++++ drivers/spi/spi-rockchip.c | 23 +- drivers/staging/iio/frequency/ad9834.c | 2 +- drivers/uio/uio_hv_generic.c | 11 +- drivers/usb/dwc3/core.c | 15 + drivers/usb/dwc3/core.h | 2 + drivers/usb/gadget/udc/aspeed_udc.c | 2 + drivers/usb/storage/uas.c | 1 + fs/binfmt_elf.c | 5 +- fs/btrfs/ctree.c | 12 +- fs/btrfs/ctree.h | 1 - fs/btrfs/extent-tree.c | 32 +- fs/btrfs/file.c | 25 +- fs/btrfs/inode.c | 2 +- fs/btrfs/transaction.h | 6 + fs/ext4/fast_commit.c | 8 +- fs/fuse/dev.c | 6 +- fs/fuse/dir.c | 72 ++-- fs/fuse/file.c | 51 ++- fs/fuse/fuse_i.h | 8 +- fs/fuse/inode.c | 3 +- fs/fuse/xattr.c | 4 +- fs/nfs/super.c | 2 + fs/nilfs2/recovery.c | 35 +- fs/nilfs2/segment.c | 10 +- fs/nilfs2/sysfs.c | 43 ++- fs/ntfs3/dir.c | 52 +-- fs/ntfs3/frecord.c | 4 +- fs/smb/client/smb2ops.c | 16 +- fs/smb/server/smb2pdu.c | 4 + fs/smb/server/transport_tcp.c | 4 +- fs/squashfs/inode.c | 7 +- fs/udf/super.c | 15 + include/linux/mm.h | 4 + include/linux/regulator/consumer.h | 16 + include/net/bluetooth/hci_core.h | 5 - include/uapi/drm/drm_fourcc.h | 18 + include/uapi/linux/fuse.h | 46 ++- io_uring/io-wq.c | 16 +- io_uring/sqpoll.c | 1 - kernel/bpf/btf.c | 13 +- kernel/cgroup/cgroup.c | 2 +- kernel/dma/map_benchmark.c | 16 + kernel/events/core.c | 18 +- kernel/events/internal.h | 1 + kernel/events/ring_buffer.c | 2 + kernel/events/uprobes.c | 3 +- kernel/locking/rtmutex.c | 9 +- kernel/resource.c | 6 +- kernel/smp.c | 1 + kernel/trace/trace.c | 2 + kernel/workqueue.c | 14 +- lib/generic-radix-tree.c | 2 + mm/memcontrol.c | 22 +- mm/memory_hotplug.c | 2 +- mm/sparse.c | 2 +- net/bluetooth/mgmt.c | 60 ++-- net/bluetooth/smp.c | 7 - net/bridge/br_fdb.c | 6 +- net/can/bcm.c | 4 + net/ipv4/fou.c | 29 +- net/ipv4/tcp_bpf.c | 2 +- net/ipv4/tcp_input.c | 6 + net/ipv6/ila/ila.h | 1 + net/ipv6/ila/ila_main.c | 6 + net/ipv6/ila/ila_xlat.c | 13 +- net/netfilter/nf_conncount.c | 8 +- net/sched/sch_cake.c | 11 +- net/sched/sch_netem.c | 9 +- net/unix/af_unix.c | 9 +- rust/Makefile | 4 +- security/smack/smack_lsm.c | 12 +- sound/core/control.c | 6 +- sound/hda/hdmi_chmap.c | 18 + sound/pci/hda/patch_conexant.c | 11 + sound/pci/hda/patch_realtek.c | 10 + sound/soc/soc-dapm.c | 1 + sound/soc/soc-topology.c | 2 + sound/soc/sof/topology.c | 2 + sound/soc/sunxi/sun4i-i2s.c | 143 ++++---- sound/soc/tegra/tegra210_ahub.c | 12 +- tools/lib/bpf/libbpf.c | 4 +- tools/testing/selftests/dmabuf-heaps/dmabuf-heap.c | 4 +- tools/testing/selftests/net/mptcp/mptcp_join.sh | 234 ++++++++---- tools/testing/selftests/net/mptcp/mptcp_lib.sh | 15 + 197 files changed, 2269 insertions(+), 1402 deletions(-)

8 months

7
6
0 0

[PATCH 6.10 000/375] 6.10.10-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.10.10 release. There are 375 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 12 Sep 2024 09:25:22 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.10.10-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.10.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.10.10-rc1 Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Use accessors to page table entries instead of direct dereference Stefan Wahren <wahrenst(a)gmx.net> spi: spi-fsl-lpspi: Fix off-by-one in prescale max Filipe Manana <fdmanana(a)suse.com> btrfs: fix race between direct IO write and fsync when using same fd Jouni Högander <jouni.hogander(a)intel.com> drm/i915/display: Increase Fast Wake Sync length as a quirk Jouni Högander <jouni.hogander(a)intel.com> drm/i915/display: Add mechanism to use sink model when applying quirk Thomas Gleixner <tglx(a)linutronix.de> x86/mm: Fix PTI for i386 some more Li Nan <linan122(a)huawei.com> ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery() Maurizio Lombardi <mlombard(a)redhat.com> nvmet: Identify-Active Namespace ID List command should reject invalid nsid Weiwen Hu <huweiwen(a)linux.alibaba.com> nvme: rename CDR/MORE/DNR to NVME_STATUS_* Weiwen Hu <huweiwen(a)linux.alibaba.com> nvme: fix status magic numbers Weiwen Hu <huweiwen(a)linux.alibaba.com> nvme: rename nvme_sc_to_pr_err to nvme_status_to_pr_err David Howells <dhowells(a)redhat.com> cifs: Fix SMB1 readv/writev callback in the same way as SMB2/3 David Howells <dhowells(a)redhat.com> cifs: Fix zero_point init on inode initialisation Alexandre Ghiti <alexghiti(a)rivosinc.com> riscv: Fix RISCV_ALTERNATIVE_EARLY Alexandre Ghiti <alexghiti(a)rivosinc.com> riscv: Improve sbi_ecall() code generation by reordering arguments Samuel Holland <samuel.holland(a)sifive.com> riscv: Add tracepoints for SBI calls and returns Alexandre Ghiti <alexghiti(a)rivosinc.com> riscv: Do not restrict memory size because of linear mapping on nommu Anton Blanchard <antonb(a)tenstorrent.com> riscv: Fix toolchain vector detection Paulo Alcantara <pc(a)manguebit.com> smb: client: fix double put of @cfile in smb2_rename_path() Liao Chen <liaochen4(a)huawei.com> gpio: modepin: Enable module autoloading Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> gpio: rockchip: fix OF node leak in probe() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> drm/i915/fence: Mark debug_fence_free() with __maybe_unused Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused Dave Airlie <airlied(a)redhat.com> nouveau: fix the fwsec sb verification register. Stephen Boyd <swboyd(a)chromium.org> clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time Stephen Boyd <swboyd(a)chromium.org> clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs Matteo Martelli <matteomartelli3(a)gmail.com> ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode Charlie Jenkins <charlie(a)rivosinc.com> riscv: mm: Do not restrict mmap address based on hint Charlie Jenkins <charlie(a)rivosinc.com> riscv: selftests: Remove mmap hint address checks Chen-Yu Tsai <wenst(a)chromium.org> ASoc: SOF: topology: Clear SOF link platform name upon unload Bryan O'Donoghue <bryan.odonoghue(a)linaro.org> clk: qcom: gcc-x1e80100: Don't use parking clk_ops for QUPs Keith Busch <kbusch(a)kernel.org> nvme-pci: allocate tagset on reset if necessary Maurizio Lombardi <mlombard(a)redhat.com> nvmet-tcp: fix kernel crash if commands allocation fails Mohan Kumar <mkumard(a)nvidia.com> ASoC: tegra: Fix CBB error during probe() Christophe Leroy <christophe.leroy(a)csgroup.eu> powerpc/vdso: Don't discard rela sections Christophe Leroy <christophe.leroy(a)csgroup.eu> powerpc/64e: Define mmu_pte_psize static Michael Ellerman <mpe(a)ellerman.id.au> powerpc/64e: split out nohash Book3E 64-bit code Michael Ellerman <mpe(a)ellerman.id.au> powerpc/64e: remove unused IBM HTW code devi priya <quic_devipriy(a)quicinc.com> clk: qcom: ipq9574: Update the alpha PLL type for GPLLs Abel Vesa <abel.vesa(a)linaro.org> clk: qcom: gcc-x1e80100: Fix USB 0 and 1 PHY GDSC pwrsts flags Bommu Krishnaiah <krishnaiah.bommu(a)intel.com> drm/xe/xe2lpg: Extend workaround 14021402888 Bommu Krishnaiah <krishnaiah.bommu(a)intel.com> drm/xe/xe2: Add workaround 14021402888 Dragos Tatulea <dtatulea(a)nvidia.com> net/mlx5e: SHAMPO, Fix page leak Yoray Zack <yorayz(a)nvidia.com> net/mlx5e: SHAMPO, Use KSMs instead of KLMs Arnd Bergmann <arnd(a)arndb.de> hid: bpf: add BPF_JIT dependency Jia Jie Ho <jiajie.ho(a)starfivetech.com> crypto: starfive - Fix nent assignment in rsa dec Jia Jie Ho <jiajie.ho(a)starfivetech.com> crypto: starfive - Align rsa input data to 32-bit Igor Pylypiv <ipylypiv(a)google.com> ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf Igor Pylypiv <ipylypiv(a)google.com> ata: libata-scsi: Remove redundant sense_buffer memsets Marek Olšák <marek.olsak(a)amd.com> drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes Aurabindo Pillai <aurabindo.pillai(a)amd.com> drm/amd: Add gfx12 swizzle mode defs Marc Kleine-Budde <mkl(a)pengutronix.de> can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd Marc Kleine-Budde <mkl(a)pengutronix.de> can: mcp251xfd: clarify the meaning of timestamp Marc Kleine-Budde <mkl(a)pengutronix.de> can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum Marc Kleine-Budde <mkl(a)pengutronix.de> can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function Jonathan Cameron <Jonathan.Cameron(a)huawei.com> arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry James Morse <james.morse(a)arm.com> arm64: acpi: Move get_cpu_for_acpi_id() to a header Jonathan Cameron <Jonathan.Cameron(a)huawei.com> ACPI: processor: Fix memory leaks in error paths of processor_add() Jonathan Cameron <Jonathan.Cameron(a)huawei.com> ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add() Christian Brauner <brauner(a)kernel.org> fs: relax permissions for listmount() Christian Brauner <brauner(a)kernel.org> fs: simplify error handling Christian Brauner <brauner(a)kernel.org> path: add cleanup helper Nicholas Piggin <npiggin(a)gmail.com> workqueue: Improve scalability of workqueue watchdog touch Nicholas Piggin <npiggin(a)gmail.com> workqueue: wq_watchdog_touch is always called with valid CPU Mike Yuan <me(a)yhndnzj.com> mm/memcontrol: respect zswap.writeback setting from parent cg too Yosry Ahmed <yosryahmed(a)google.com> mm: zswap: rename is_zswap_enabled() to zswap_is_enabled() Peter Zijlstra <peterz(a)infradead.org> perf/aux: Fix AUX buffer serialization Sven Schnelle <svens(a)linux.ibm.com> uprobes: Use kzalloc to allocate xol area Daniel Lezcano <daniel.lezcano(a)linaro.org> clocksource/drivers/timer-of: Remove percpu irq related code Jacky Bai <ping.bai(a)nxp.com> clocksource/drivers/imx-tpm: Fix next event not taking effect sometime Jacky Bai <ping.bai(a)nxp.com> clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX David Fernandez Gonzalez <david.fernandez.gonzalez(a)oracle.com> VMCI: Fix use-after-free when removing resource in vmci_resource_remove() Naman Jain <namjain(a)linux.microsoft.com> Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic Saurabh Sengar <ssengar(a)linux.microsoft.com> uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind Geert Uytterhoeven <geert+renesas(a)glider.be> nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc John Thomson <git(a)johnthomson.fastmail.com.au> nvmem: u-boot-env: error if NVMEM device is too small Michal Simek <michal.simek(a)amd.com> dt-bindings: nvmem: Use soc-nvmem node name instead of nvmem Carlos Llamas <cmllamas(a)google.com> binder: fix UAF caused by offsets overwrite Sukrut Bellary <sukrut.bellary(a)linux.com> misc: fastrpc: Fix double free of 'buf' in error path Heikki Krogerus <heikki.krogerus(a)linux.intel.com> usb: typec: ucsi: Fix the partner PD revision Prashanth K <quic_prashk(a)quicinc.com> usb: dwc3: Avoid waking up gadget during startxfer Pawel Laszczak <pawell(a)cadence.com> usb: cdns2: Fix controller reset issue Faisal Hassan <quic_faisalh(a)quicinc.com> usb: dwc3: core: update LC timer as per USB Spec V3.2 Dumitru Ceclan <mitrutzceclan(a)gmail.com> iio: adc: ad7124: fix DT configuration parsing Dumitru Ceclan <mitrutzceclan(a)gmail.com> iio: adc: ad7124: fix chip ID mismatch Nuno Sa <nuno.sa(a)analog.com> iio: adc: ad_sigma_delta: fix irq_flags on irq request Guillaume Stols <gstols(a)baylibre.com> iio: adc: ad7606: remove frstdata check for serial mode Dumitru Ceclan <mitrutzceclan(a)gmail.com> iio: adc: ad7124: fix config comparison Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_mpu6050: fix interrupt status read for old buggy chips Matteo Martelli <matteomartelli3(a)gmail.com> iio: fix scale application in iio_convert_raw_to_processed_unlocked David Lechner <dlechner(a)baylibre.com> iio: buffer-dmaengine: fix releasing dma channel on error Aleksandr Mishin <amishin(a)t-argos.ru> staging: iio: frequency: ad9834: Validate frequency parameter value Matthieu Baerts (NGI0) <matttbe(a)kernel.org> tcp: process the 3rd ACK with sk_socket for TFO/MPTCP Christian Brauner <brauner(a)kernel.org> fs: only copy to userspace on success in listmount() Yunxiang Li <Yunxiang.Li(a)amd.com> drm/amdgpu: Fix amdgpu_device_reset_sriov retry logic Yunxiang Li <Yunxiang.Li(a)amd.com> drm/amdgpu: Add reset_context flag for host FLR Yunxiang Li <Yunxiang.Li(a)amd.com> drm/amdgpu: Fix two reset triggered in a row Trond Myklebust <trond.myklebust(a)hammerspace.com> NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open() Michael Ellerman <mpe(a)ellerman.id.au> ata: pata_macio: Use WARN instead of BUG Carlos Song <carlos.song(a)nxp.com> spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register Jiaxun Yang <jiaxun.yang(a)flygoat.com> MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed Ivan Orlov <ivan.orlov0322(a)gmail.com> kunit/overflow: Fix UB in overflow_allocation_test Peiyang Wang <wangpeiyang1(a)huawei.com> net: hns3: void array out of bound when loop tnl_num Kent Overstreet <kent.overstreet(a)linux.dev> lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() Stefan Wiehler <stefan.wiehler(a)nokia.com> of/irq: Prevent device address out-of-bounds read in interrupt map walk Phillip Lougher <phillip(a)squashfs.org.uk> Squashfs: sanity check symbolic link size Oliver Neukum <oneukum(a)suse.com> usbnet: ipheth: race between ipheth_close and error handling Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: uinput - reject requests with unreasonable number of slots Olivier Sobrie <olivier(a)sobrie.be> HID: amd_sfh: free driver_data after destroying hid device Camila Alvarez <cam.alvarez.i(a)gmail.com> HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup Heiko Carstens <hca(a)linux.ibm.com> s390/vmlinux.lds.S: Move ro_after_init section behind rodata section David Sterba <dsterba(a)suse.com> btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry() Devyn Liu <liudingyuan(a)huawei.com> spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware Zenghui Yu <yuzenghui(a)huawei.com> kselftests: dmabuf-heaps: Ensure the driver name is null-terminated Jarkko Nikula <jarkko.nikula(a)linux.intel.com> i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup Frank Li <Frank.Li(a)nxp.com> i3c: master: svc: resend target address when get NACK David Howells <dhowells(a)redhat.com> vfs: Fix potential circular locking through setxattr() and removexattr() David Howells <dhowells(a)redhat.com> cachefiles: Set the max subreq size for cache writes to MAX_RW_COUNT Alexander Gordeev <agordeev(a)linux.ibm.com> s390/boot: Do not assume the decompressor range is reserved Arnd Bergmann <arnd(a)arndb.de> regmap: maple: work around gcc-14.1 false-positive warning Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Use correct API to map cmdline in relocate_kernel() YiPeng Chai <YiPeng.Chai(a)amd.com> drm/amdgpu: add mutex to protect ras shared memory Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dpaa: avoid on-stack arrays of NR_CPUS elements Neeraj Sanjay Kale <neeraj.sanjaykale(a)nxp.com> Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush() Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Don't drop SYN+ACK for simultaneous connect(). Dan Williams <dan.j.williams(a)intel.com> PCI: Add missing bridge lock to pci_bus_lock() yang.zhang <yang.zhang(a)hexintek.com> riscv: set trap vector earlier Alison Schofield <alison.schofield(a)intel.com> cxl/region: Verify target positions using the ordered target list Jakub Kicinski <kuba(a)kernel.org> ethtool: fail closed if we can't get max channel used in indirection tables Filipe Manana <fdmanana(a)suse.com> btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() Filipe Manana <fdmanana(a)suse.com> btrfs: replace BUG_ON() with error handling at update_ref_for_cow() Josef Bacik <josef(a)toxicpanda.com> btrfs: handle errors from btrfs_dec_ref() properly Josef Bacik <josef(a)toxicpanda.com> btrfs: clean up our handling of refs == 0 in snapshot delete Josef Bacik <josef(a)toxicpanda.com> btrfs: replace BUG_ON with ASSERT in walk_down_proc() Josef Bacik <josef(a)toxicpanda.com> btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() Qu Wenruo <wqu(a)suse.com> btrfs: slightly loosen the requirement for qgroup removal Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: Check more cases when directory is corrupted Zqiang <qiang.zhang1211(a)gmail.com> smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu() Christian König <christian.koenig(a)amd.com> drm/amdgpu: reject gang submit on reserved VMIDs Sascha Hauer <s.hauer(a)pengutronix.de> watchdog: imx7ulp_wdt: keep already running watchdog enabled Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> bpf: Remove tst_run from lwt_seg6local_prog_ops. Jason Gunthorpe <jgg(a)ziepe.ca> iommufd: Require drivers to supply the cache_invalidate_user ops Umang Jain <umang.jain(a)ideasonboard.com> staging: vchiq_core: Bubble up wait_event_interruptible() return value Mrinmay Sarkar <quic_msarkar(a)quicinc.com> PCI: qcom: Override NO_SNOOP attribute for SA8775P RC Kan Liang <kan.liang(a)linux.intel.com> perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated Sascha Hauer <s.hauer(a)pengutronix.de> wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() Yicong Yang <yangyicong(a)hisilicon.com> dma-mapping: benchmark: Don't starve others when doing the test Ye Bin <yebin10(a)huawei.com> jbd2: avoid mount failed when commit block is partial submitted Luis Henriques (SUSE) <luis.henriques(a)linux.dev> ext4: fix possible tid_t sequence overflows Yifan Zha <Yifan.Zha(a)amd.com> drm/amdgpu: Set no_hw_access when VF request full GPU fails Andreas Ziegler <ziegler.andreas(a)siemens.com> libbpf: Add NULL checks to bpf_object__{prev_map,next_map} Shenghao Ding <shenghao-ding(a)ti.com> ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment Guenter Roeck <linux(a)roeck-us.net> hwmon: (w83627ehf) Fix underflows seen when writing limit attributes Guenter Roeck <linux(a)roeck-us.net> hwmon: (nct6775-core) Fix underflows seen when writing limit attributes Guenter Roeck <linux(a)roeck-us.net> hwmon: (lm95234) Fix underflows seen when writing limit attributes Guenter Roeck <linux(a)roeck-us.net> hwmon: (adc128d818) Fix underflows seen when writing limit attributes Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/kprobes: Add symbol counting check when module loads Hareshx Sankar Raj <hareshx.sankar.raj(a)intel.com> crypto: qat - fix unintentional re-enabling of error interrupts Justin Tee <justin.tee(a)broadcom.com> scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info Igor Pylypiv <ipylypiv(a)google.com> scsi: pm80xx: Set phy->enable_completion only when we wait for it Kyoungrul Kim <k831.kim(a)samsung.com> scsi: ufs: core: Remove SCSI host only if added Marcin Ślusarz <mslusarz(a)renau.com> wifi: rtw88: usb: schedule rx work after everything is set up Xuan Zhuo <xuanzhuo(a)linux.alibaba.com> virtio_ring: fix KMSAN error for premapped mode Krishna Kumar <krishnak(a)linux.ibm.com> pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv Zijun Hu <quic_zijuhu(a)quicinc.com> devres: Initialize an uninitialized struct member Johannes Berg <johannes.berg(a)intel.com> um: line: always fill *error_out in setup_one_line() Waiman Long <longman(a)redhat.com> cgroup: Protect css->cgroup write under css_set_lock Christoph Hellwig <hch(a)lst.de> block: don't call bio_uninit from bio_endio Lu Baolu <baolu.lu(a)linux.intel.com> iommu/vt-d: Remove control over Execute-Requested requests Jacob Pan <jacob.jun.pan(a)linux.intel.com> iommu/vt-d: Handle volatile descriptor status read Huang Ying <ying.huang(a)intel.com> cxl/region: Fix a race condition in memory hotplug notifier Benjamin Marzinski <bmarzins(a)redhat.com> dm init: Handle minors larger than 255 Amadeusz Sławiński <amadeuszx.slawinski(a)linux.intel.com> ASoC: topology: Properly initialize soc_enum values Sean Anderson <sean.anderson(a)linux.dev> phy: zynqmp: Take the phy mutex in xlate Richard Fitzgerald <rf(a)opensource.cirrus.com> firmware: cs_dsp: Don't allow writes to read-only controls Viresh Kumar <viresh.kumar(a)linaro.org> xen: privcmd: Fix possible access to a freed kirqfd instance Arkadiusz Kubalewski <arkadiusz.kubalewski(a)intel.com> tools/net/ynl: fix cli.py --subscribe feature Jamie Bainbridge <jamie.bainbridge(a)gmail.com> selftests: net: enable bind tests Pawel Dembicki <paweldembicki(a)gmail.com> net: dsa: vsc73xx: fix possible subblocks range of CAPT block Sean Anderson <sean.anderson(a)linux.dev> net: xilinx: axienet: Fix race in axienet_stop Jonas Gorski <jonas.gorski(a)bisdn.de> net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN Hayes Wang <hayeswang(a)realtek.com> r8152: fix the firmware doesn't work Kuniyuki Iwashima <kuniyu(a)amazon.com> fou: Fix null-ptr-deref in GRO. Guillaume Nault <gnault(a)redhat.com> bareudp: Fix device stats updates. Jeongjun Park <aha310510(a)gmail.com> bpf: add check for invalid name in btf_name_valid_section() Tze-nan Wu <Tze-nan.Wu(a)mediatek.com> bpf, net: Fix a potential race in do_sock_getsockopt() Breno Leitao <leitao(a)debian.org> net: dqs: Do not use extern for unused dql_group Oliver Neukum <oneukum(a)suse.com> usbnet: modern method to get random MAC Larysa Zaremba <larysa.zaremba(a)intel.com> ice: do not bring the VSI up, if it was down before the XDP setup Larysa Zaremba <larysa.zaremba(a)intel.com> ice: remove ICE_CFG_BUSY locking from AF_XDP code Larysa Zaremba <larysa.zaremba(a)intel.com> ice: check ICE_VSI_DOWN under rtnl_lock when preparing for reset Larysa Zaremba <larysa.zaremba(a)intel.com> ice: protect XDP configuration with a mutex Larysa Zaremba <larysa.zaremba(a)intel.com> ice: move netif_queue_set_napi to rtnl-protected sections Vadim Fedorenko <vadim.fedorenko(a)linux.dev> ptp: ocp: adjust sysfs entries to expose tty information Vadim Fedorenko <vadim.fedorenko(a)linux.dev> ptp: ocp: convert serial ports to array Jinjie Ruan <ruanjinjie(a)huawei.com> net: phy: Fix missing of_node_put() for leds Roger Quadros <rogerq(a)kernel.org> net: ethernet: ti: am65-cpsw: Fix RX statistics for XDP_TX and XDP_REDIRECT Namhyung Kim <namhyung(a)kernel.org> perf lock contention: Fix spinlock and rwlock accounting Armin Wolf <W_Armin(a)gmx.de> hwmon: (hp-wmi-sensors) Check if WMI event data exists Dan Carpenter <dan.carpenter(a)linaro.org> igc: Unlock on error in igc_io_resume() Marc Zyngier <maz(a)kernel.org> scripts: fix gfp-translate after ___GFP_*_BITS conversion to an enum Pawel Dembicki <paweldembicki(a)gmail.com> hwmon: ltc2991: fix register bits defines Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once Douglas Anderson <dianders(a)chromium.org> Bluetooth: qca: If memdump doesn't work, re-enable IBS Martin Jocic <martin.jocic(a)kvaser.com> can: kvaser_pciefd: Use a single write when releasing RX buffers Martin Jocic <martin.jocic(a)kvaser.com> can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR Martin Jocic <martin.jocic(a)kvaser.com> can: kvaser_pciefd: Rename board_irq to pci_irq Martin Jocic <martin.jocic(a)kvaser.com> can: kvaser_pciefd: Remove unnecessary comment Martin Jocic <martin.jocic(a)kvaser.com> can: kvaser_pciefd: Skip redundant NULL pointer check in ISR Douglas Anderson <dianders(a)chromium.org> regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR Charles Han <hanchunchao(a)inspur.com> spi: intel: Add check devm_kasprintf() returned value Aleksandr Mishin <amishin(a)t-argos.ru> platform/x86: dell-smbios: Fix error path in dell_smbios_init() Dawid Osuchowski <dawid.osuchowski(a)linux.intel.com> ice: Add netif_device_attach/detach into PF reset flow Daiwei Li <daiweili(a)google.com> igb: Fix not clearing TimeSync interrupts for 82580 David Howells <dhowells(a)redhat.com> cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region David Howells <dhowells(a)redhat.com> cifs: Fix copy offload to flush destination region David Howells <dhowells(a)redhat.com> netfs, cifs: Fix handling of short DIO read David Howells <dhowells(a)redhat.com> cifs: Fix lack of credit renegotiation on read retry Andreas Hindborg <a.hindborg(a)samsung.com> rust: kbuild: fix export of bss symbols Marc Kleine-Budde <mkl(a)pengutronix.de> can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode Markus Schneider-Pargmann <msp(a)baylibre.com> can: m_can: Reset cached active_interrupts on start Markus Schneider-Pargmann <msp(a)baylibre.com> can: m_can: disable_all_interrupts, not clear active_interrupts Markus Schneider-Pargmann <msp(a)baylibre.com> can: m_can: Do not cancel timer from within timer Markus Schneider-Pargmann <msp(a)baylibre.com> can: m_can: Remove m_can_rx_peripheral indirection Markus Schneider-Pargmann <msp(a)baylibre.com> can: m_can: Remove coalesing disable in isr during suspend Markus Schneider-Pargmann <msp(a)baylibre.com> can: m_can: Reset coalescing during suspend/resume Simon Horman <horms(a)kernel.org> can: m_can: Release irq on error in m_can_open Kuniyuki Iwashima <kuniyu(a)amazon.com> can: bcm: Remove proc entry when dev is unregistered. Marek Olšák <marek.olsak(a)amd.com> drm/amdgpu/display: handle gfx12 in amdgpu_dm_plane_format_mod_supported Hawking Zhang <Hawking.Zhang(a)amd.com> drm/amdgpu: Correct register used to clear fault status Marek Olšák <marek.olsak(a)amd.com> drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6 Alex Hung <alex.hung(a)amd.com> drm/amd/display: Check denominator crb_pipes before used Alex Hung <alex.hung(a)amd.com> drm/amd/display: Check denominator pbn_div before used Jules Irenge <jbi.octave(a)gmail.com> pcmcia: Use resource_size function on resource object Chen Ni <nichen(a)iscas.ac.cn> media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ili210x - use kvmalloc() to allocate buffer for firmware update Kishon Vijay Abraham I <kishon(a)kernel.org> PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) Eric Joyner <eric.joyner(a)intel.com> ice: Check all ice_vsi_rebuild() errors in function Andrei Vagin <avagin(a)google.com> seccomp: release task filters when the task exits Nathan Lynch <nathanl(a)linux.ibm.com> powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() Christian Brauner <brauner(a)kernel.org> fs: relax permissions for statmount() Christian Brauner <brauner(a)kernel.org> fs: don't copy to userspace under namespace semaphore Shivaprasad G Bhat <sbhat(a)linux.ibm.com> vfio/spapr: Always clear TCEs before unsetting the window Hans Verkuil <hverkuil-cisco(a)xs4all.nl> media: vivid: don't set HDMI TX controls if there are no HDMI outputs Jiwei Sun <sunjw10(a)lenovo.com> crypto: qat - initialize user_input.lock for rate_limiting Danijel Slivka <danijel.slivka(a)amd.com> drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts Hawking Zhang <Hawking.Zhang(a)amd.com> drm/amdgpu: Fix smatch static checker warning Bob Zhou <bob.zhou(a)amd.com> drm/amdgpu: add missing error handling in function amdgpu_gmc_flush_gpu_tlb_pasid Alex Hung <alex.hung(a)amd.com> drm/amd/display: Validate function returns Alex Hung <alex.hung(a)amd.com> drm/amd/display: Check HDCP returned status Alex Hung <alex.hung(a)amd.com> drm/amd/display: Run DC_LOG_DC after checking link->link_enc Hawking Zhang <Hawking.Zhang(a)amd.com> drm/amdgpu: Fix register access violation Ma Ke <make24(a)iscas.ac.cn> usb: gadget: aspeed_udc: validate endpoint index for ast udc Shantanu Goel <sgoel01(a)yahoo.com> usb: uas: set host status byte on data completion error Chih-Kang Chang <gary.chang(a)realtek.com> wifi: rtw89: wow: prevent to send unexpected H2C during download Firmware Arend van Spriel <arend.vanspriel(a)broadcom.com> wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3 Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> leds: spi-byte: Call of_node_put() on error path Hans Verkuil <hverkuil-cisco(a)xs4all.nl> media: vivid: fix wrong sizeimage value for mplane Samuel Holland <samuel.holland(a)sifive.com> riscv: kprobes: Use patch_text_nosync() for insn slots Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: One more reason to mark inode bad Jan Kara <jack(a)suse.cz> udf: Avoid excessive partition lengths Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check Ziwei Xiao <ziweixiao(a)google.com> gve: Add adminq mutex lock Yunjian Wang <wangyunjian(a)huawei.com> netfilter: nf_conncount: fix wrong variable type Jernej Skrabec <jernej.skrabec(a)gmail.com> iommu: sun50i: clear bypass register Brian Johannesmeyer <bjohannesmeyer(a)gmail.com> x86/kmsan: Fix hook for unaligned accesses Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Remove put_pid()/put_cred() in copy_peercred(). Hans Verkuil <hverkuil-cisco(a)xs4all.nl> media: b2c2: flexcop-usb: fix flexcop_usb_memory_req Pali Rohár <pali(a)kernel.org> irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1 Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> irqchip/renesas-rzg2l: Reorder function calls in rzg2l_irqc_irq_disable() Rakesh Ughreja <rughreja(a)habana.ai> accel/habanalabs/gaudi2: unsecure edma max outstanding register Alexey Dobriyan <adobriyan(a)gmail.com> ELF: fix kernel.randomize_va_space double read Leon Hwang <hffilwlqm(a)gmail.com> bpf, verifier: Correct tail_call_reachable for bpf prog Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> virt: sev-guest: Mark driver struct with __refdata to prevent section mismatch Waiman Long <longman(a)redhat.com> cgroup/cpuset: Delay setting of CS_CPU_EXCLUSIVE until valid partition Alex Hung <alex.hung(a)amd.com> drm/amd/display: Check UnboundedRequestEnabled's value Konstantin Andreev <andreev(a)swemel.ru> smack: unix sockets: fix accept()ed socket label Ajith C <quic_ajithc(a)quicinc.com> wifi: ath12k: fix firmware crash due to invalid peer nss Aaradhana Sahu <quic_aarasahu(a)quicinc.com> wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he() Takashi Iwai <tiwai(a)suse.de> ALSA: hda: Add input value sanity checks to HDMI channel map controls Takashi Iwai <tiwai(a)suse.de> ALSA: control: Apply sanity check of input values for user elements Marek Marczykowski-Górecki <marmarek(a)invisiblethingslab.com> ALSA: hda/realtek: extend quirks for Clevo V5[46]0 Leo Li <sunpeng.li(a)amd.com> drm/amd/display: Lock DC and exit IPS when changing backlight Daniele Ceraolo Spurio <daniele.ceraolospurio(a)intel.com> drm/i915: Do not attempt to load the GSC multiple times Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: always allocate cleared VRAM for GEM allocations Matt Coster <matt.coster(a)imgtec.com> drm/imagination: Free pvr_vm_gpuva after unlink Mary Guillemard <mary.guillemard(a)collabora.com> drm/panthor: Restrict high priorities on group_create Adrián Larumbe <adrian.larumbe(a)collabora.com> drm/panthor: flush FW AS caches in slow reset path Daniele Ceraolo Spurio <daniele.ceraolospurio(a)intel.com> drm/xe/gsc: Do not attempt to load the GSC multiple times Naohiro Aota <naohiro.aota(a)wdc.com> btrfs: zoned: handle broken write pointer on zones Fedor Pchelkin <pchelkin(a)ispras.ru> btrfs: qgroup: don't use extent changeset when not needed Ryusuke Konishi <konishi.ryusuke(a)gmail.com> nilfs2: fix state management in error path of log writing function Ryusuke Konishi <konishi.ryusuke(a)gmail.com> nilfs2: protect references to superblock parameters exposed in sysfs Ryusuke Konishi <konishi.ryusuke(a)gmail.com> nilfs2: fix missing cleanup on rollforward recovery error Toke Høiland-Jørgensen <toke(a)redhat.com> sched: sch_cake: fix bulk flow accounting logic for host fairness Eric Dumazet <edumazet(a)google.com> ila: call nf_unregister_net_hooks() sooner Cong Wang <cong.wang(a)bytedance.com> tcp_bpf: fix return value of tcp_bpf_sendmsg() Baochen Qiang <quic_bqiang(a)quicinc.com> Revert "wifi: ath11k: support hibernation" Baochen Qiang <quic_bqiang(a)quicinc.com> Revert "wifi: ath11k: restore country code during resume" Alex Deucher <alexander.deucher(a)amd.com> Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs" Yuntao Wang <yuntao.wang(a)linux.dev> x86/apic: Make x2apic_disable() work correctly Mitchell Levy <levymitchell0(a)gmail.com> x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported Matt Johnston <matt(a)codeconstruct.com.au> net: mctp-serial: Fix missing escapes on transmit Souradeep Chakrabarti <schakrabarti(a)linux.microsoft.com> net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup Steven Rostedt <rostedt(a)goodmis.org> eventfs: Use list_del_rcu() for SRCU protected list variable Baokun Li <libaokun1(a)huawei.com> fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF Jann Horn <jannh(a)google.com> userfaultfd: fix checks for huge PMDs Jann Horn <jannh(a)google.com> userfaultfd: don't BUG_ON() if khugepaged yanks our page table Steven Rostedt <rostedt(a)goodmis.org> tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread() Zheng Yejian <zhengyejian(a)huaweicloud.com> tracing: Avoid possible softlockup in tracing_iter_reset() Steven Rostedt <rostedt(a)goodmis.org> tracing/timerlat: Only clear timer if a kthread exists Steven Rostedt <rostedt(a)goodmis.org> tracing/osnoise: Use a cpumask to know what threads are kthreads Brian Norris <briannorris(a)chromium.org> spi: rockchip: Resolve unbalanced runtime PM / system PM handling Usama Arif <usamaarif642(a)gmail.com> Revert "mm: skip CMA pages when they are not available" Hao Ge <gehao(a)kylinos.cn> mm/slub: add check for s->flags in the alloc_tagging_slab_free_hook Will Deacon <will(a)kernel.org> mm: vmalloc: ensure vmap_block is initialised before adding to queue Petr Tesarik <ptesarik(a)suse.com> kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y Liam R. Howlett <Liam.Howlett(a)Oracle.com> maple_tree: remove rcu_read_lock() from mt_validate() Hao Ge <gehao(a)kylinos.cn> codetag: debug: mark codetags for poisoned page as empty Suren Baghdasaryan <surenb(a)google.com> alloc_tag: fix allocation tag reporting when CONFIG_MODULES=n Adrian Huang <ahuang12(a)lenovo.com> mm: vmalloc: optimize vmap_lazy_nr arithmetic when purging each vmap_area Simon Arlott <simon(a)octiron.net> can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open Stephan Gerhold <stephan.gerhold(a)linaro.org> pinctrl: qcom: x1e80100: Bypass PDC wakeup parent for now Satya Priya Kakitapalli <quic_skakitap(a)quicinc.com> clk: qcom: clk-alpha-pll: Update set_rate for Zonda PLL Satya Priya Kakitapalli <quic_skakitap(a)quicinc.com> clk: qcom: clk-alpha-pll: Fix zonda set_rate failure when PLL is disabled Satya Priya Kakitapalli <quic_skakitap(a)quicinc.com> clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API Satya Priya Kakitapalli <quic_skakitap(a)quicinc.com> clk: qcom: clk-alpha-pll: Fix the pll post div mask Xingyu Wu <xingyu.wu(a)starfivetech.com> clk: starfive: jh7110-sys: Add notifier for PLL0 clock Helge Deller <deller(a)gmx.de> parisc: Delay write-protection until mark_rodata_ro() call Samuel Holland <samuel.holland(a)sifive.com> riscv: misaligned: Restrict user access to kernel memory Hans de Goede <hdegoede(a)redhat.com> ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder Miklos Szeredi <mszeredi(a)redhat.com> fuse: clear PG_uptodate when using a stolen page yangyun <yangyun50(a)huawei.com> fuse: fix memory leak in fuse_create_open Jann Horn <jannh(a)google.com> fuse: use unsigned type for getxattr/listxattr size truncation Joanne Koong <joannelkoong(a)gmail.com> fuse: check aborted connection before adding requests to pending list for resending Bernd Schubert <bschubert(a)ddn.com> fuse: disable the combination of passthrough and writeback cache Joanne Koong <joannelkoong(a)gmail.com> fuse: update stats for pages in dropped aux writeback list Seunghwan Baek <sh8267.baek(a)samsung.com> mmc: cqhci: Fix checking of CQHCI_HALT state Liao Chen <liaochen4(a)huawei.com> mmc: sdhci-of-aspeed: fix module autoloading Sam Protsenko <semen.protsenko(a)linaro.org> mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K Jonathan Bell <jonathan(a)raspberrypi.com> mmc: core: apply SD quirks earlier during probe Muhammad Usama Anjum <usama.anjum(a)collabora.com> selftests: mm: fix build errors on armhf Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: MGMT: Ignore keys being loaded with invalid type Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE" Boqun Feng <boqun.feng(a)gmail.com> rust: macros: provide correct provenance when constructing THIS_MODULE Georg Gottleuber <ggo(a)tuxedocomputers.com> nvme-pci: Add sleep quirk for Samsung 990 Evo Dan Carpenter <dan.carpenter(a)linaro.org> irqchip/riscv-aplic: Fix an IS_ERR() vs NULL bug in probe() Roland Xu <mu001999(a)outlook.com> rtmutex: Drop rt_mutex::wait_lock before scheduling Thomas Gleixner <tglx(a)linutronix.de> x86/kaslr: Expose and use the end of the physical memory address space Anup Patel <apatel(a)ventanamicro.com> irqchip/sifive-plic: Probe plic driver early for Allwinner D1 platform Ma Ke <make24(a)iscas.ac.cn> irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init() Kan Liang <kan.liang(a)linux.intel.com> perf/x86/intel: Limit the period on Haswell Kirill A. Shutemov <kirill.shutemov(a)linux.intel.com> x86/tdx: Fix data leak in mmio_read() Zheng Qixing <zhengqixing(a)huawei.com> ata: libata: Fix memory leak for error path in ata_host_alloc() Dan Carpenter <dan.carpenter(a)linaro.org> ksmbd: Unlock on in ksmbd_tcp_set_interfaces() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: unset the binding mark of a reused connection Paulo Alcantara <pc(a)manguebit.com> smb: client: fix double put of @cfile in smb2_set_path_size() Nysal Jan K.A. <nysal(a)linux.ibm.com> powerpc/qspinlock: Fix deadlock in MCS queue Maximilien Perreault <maximilienperreault(a)gmail.com> ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx Vasiliy Kovalev <kovalev(a)altlinux.org> ALSA: hda/realtek - Fix inactive headset mic jack for ASUS Vivobook 15 X1504VAP Adam Queler <queler+k(a)gmail.com> ALSA: hda/realtek: Enable Mute Led for HP Victus 15-fb1xxx Terry Cheong <htcheong(a)chromium.org> ALSA: hda/realtek: add patch for internal mic in Lenovo V145 Christoffer Sandberg <cs(a)tuxedo.de> ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices Ravi Bangoria <ravi.bangoria(a)amd.com> KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing Maxim Levitsky <mlevitsk(a)redhat.com> KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE Sean Christopherson <seanjc(a)google.com> KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS robelin <robelin(a)nvidia.com> ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object Roger Quadros <rogerq(a)kernel.org> net: ethernet: ti: am65-cpsw: fix XDP_DROP, XDP_TX and XDP_REDIRECT Jens Emil Schulz Østergaard <jensemil.schulzostergaard(a)microchip.com> net: microchip: vcap: Fix use-after-free error in kunit test Roger Quadros <rogerq(a)kernel.org> net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP_TX Dave Chinner <dchinner(a)redhat.com> xfs: xfs_finobt_count_blocks() walks the wrong btree Stephen Hemminger <stephen(a)networkplumber.org> sch/netem: fix use after free in netem_dequeue Christian Brauner <brauner(a)kernel.org> libfs: fix get_stashed_dentry() ------------- Diffstat: Documentation/admin-guide/cgroup-v2.rst | 15 +- .../bindings/nvmem/xlnx,zynqmp-nvmem.yaml | 2 +- Makefile | 4 +- arch/arm64/include/asm/acpi.h | 12 + arch/arm64/kernel/acpi_numa.c | 11 - arch/loongarch/include/asm/hugetlb.h | 4 +- arch/loongarch/include/asm/kfence.h | 6 +- arch/loongarch/include/asm/pgtable.h | 50 +-- arch/loongarch/kernel/relocate.c | 4 +- arch/loongarch/kvm/mmu.c | 8 +- arch/loongarch/mm/hugetlbpage.c | 6 +- arch/loongarch/mm/init.c | 10 +- arch/loongarch/mm/kasan_init.c | 10 +- arch/loongarch/mm/pgtable.c | 2 +- arch/mips/kernel/cevt-r4k.c | 15 +- arch/parisc/mm/init.c | 16 +- arch/powerpc/include/asm/nohash/mmu-e500.h | 3 +- arch/powerpc/kernel/rtas.c | 4 + arch/powerpc/kernel/vdso/vdso32.lds.S | 4 +- arch/powerpc/kernel/vdso/vdso64.lds.S | 4 +- arch/powerpc/lib/qspinlock.c | 10 +- arch/powerpc/mm/nohash/Makefile | 2 +- arch/powerpc/mm/nohash/tlb.c | 398 +-------------------- arch/powerpc/mm/nohash/tlb_64e.c | 361 +++++++++++++++++++ arch/powerpc/mm/nohash/tlb_low_64e.S | 195 ---------- arch/riscv/Kconfig | 4 +- arch/riscv/include/asm/processor.h | 26 +- arch/riscv/include/asm/sbi.h | 30 +- arch/riscv/include/asm/trace.h | 54 +++ arch/riscv/kernel/Makefile | 6 +- arch/riscv/kernel/head.S | 3 + arch/riscv/kernel/probes/kprobes.c | 5 +- arch/riscv/kernel/sbi.c | 56 --- arch/riscv/kernel/sbi_ecall.c | 48 +++ arch/riscv/kernel/traps_misaligned.c | 4 +- arch/riscv/mm/init.c | 2 +- arch/s390/boot/startup.c | 8 +- arch/s390/kernel/vmlinux.lds.S | 17 +- arch/um/drivers/line.c | 2 + arch/x86/coco/tdx/tdx.c | 1 - arch/x86/events/intel/core.c | 57 ++- arch/x86/include/asm/fpu/types.h | 7 + arch/x86/include/asm/page_64.h | 1 + arch/x86/include/asm/pgtable_64_types.h | 4 + arch/x86/kernel/apic/apic.c | 11 +- arch/x86/kernel/fpu/xstate.c | 3 + arch/x86/kernel/fpu/xstate.h | 4 +- arch/x86/kvm/svm/svm.c | 15 + arch/x86/kvm/x86.c | 2 + arch/x86/lib/iomem.c | 5 +- arch/x86/mm/init_64.c | 4 + arch/x86/mm/kaslr.c | 34 +- arch/x86/mm/pti.c | 45 ++- block/bio.c | 14 +- drivers/accel/habanalabs/gaudi2/gaudi2_security.c | 1 + drivers/acpi/acpi_processor.c | 15 +- drivers/android/binder.c | 1 + drivers/ata/libata-core.c | 4 +- drivers/ata/libata-scsi.c | 24 +- drivers/ata/pata_macio.c | 7 +- drivers/base/devres.c | 1 + drivers/base/regmap/regcache-maple.c | 3 +- drivers/block/ublk_drv.c | 2 + drivers/bluetooth/btnxpuart.c | 12 +- drivers/bluetooth/hci_qca.c | 1 + drivers/clk/qcom/clk-alpha-pll.c | 25 +- drivers/clk/qcom/clk-rcg.h | 1 + drivers/clk/qcom/clk-rcg2.c | 30 ++ drivers/clk/qcom/gcc-ipq9574.c | 12 +- drivers/clk/qcom/gcc-sm8550.c | 54 +-- drivers/clk/qcom/gcc-x1e80100.c | 52 +-- drivers/clk/starfive/clk-starfive-jh7110-sys.c | 31 +- drivers/clk/starfive/clk-starfive-jh71x0.h | 2 + drivers/clocksource/timer-imx-tpm.c | 16 +- drivers/clocksource/timer-of.c | 17 +- drivers/clocksource/timer-of.h | 1 - .../crypto/intel/qat/qat_common/adf_gen2_pfvf.c | 4 +- drivers/crypto/intel/qat/qat_common/adf_rl.c | 1 + .../intel/qat/qat_dh895xcc/adf_dh895xcc_hw_data.c | 8 +- drivers/crypto/starfive/jh7110-cryp.h | 4 +- drivers/crypto/starfive/jh7110-rsa.c | 15 +- drivers/cxl/core/region.c | 24 +- drivers/firmware/cirrus/cs_dsp.c | 3 + drivers/gpio/gpio-rockchip.c | 1 + drivers/gpio/gpio-zynqmp-modepin.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 15 + drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 79 ++-- drivers/gpu/drm/amd/amdgpu/amdgpu_display.c | 30 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 15 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 123 ++++--- drivers/gpu/drm/amd/amdgpu/amdgpu_psp.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_psp_ta.c | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_reset.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c | 6 +- drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 8 +- drivers/gpu/drm/amd/amdgpu/gfxhub_v1_2.c | 8 +- drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c | 3 +- drivers/gpu/drm/amd/amdgpu/ih_v6_0.c | 28 ++ drivers/gpu/drm/amd/amdgpu/mmhub_v1_8.c | 8 +- drivers/gpu/drm/amd/amdgpu/mxgpu_ai.c | 3 +- drivers/gpu/drm/amd/amdgpu/mxgpu_nv.c | 3 +- drivers/gpu/drm/amd/amdgpu/mxgpu_vi.c | 3 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 15 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_plane.c | 47 +-- drivers/gpu/drm/amd/display/dc/dc_dmub_srv.c | 7 +- .../gpu/drm/amd/display/dc/dcn20/dcn20_hubbub.c | 3 +- .../drm/amd/display/dc/dml2/display_mode_core.c | 2 +- drivers/gpu/drm/amd/display/dc/link/link_factory.c | 6 +- .../display/dc/link/protocols/link_dp_training.c | 3 +- .../display/dc/resource/dcn315/dcn315_resource.c | 2 +- .../drm/amd/display/modules/hdcp/hdcp1_execution.c | 15 +- drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 6 +- drivers/gpu/drm/i915/display/intel_display_types.h | 4 + drivers/gpu/drm/i915/display/intel_dp.c | 4 + drivers/gpu/drm/i915/display/intel_dp_aux.c | 16 +- drivers/gpu/drm/i915/display/intel_dp_aux.h | 2 +- drivers/gpu/drm/i915/display/intel_psr.c | 2 +- drivers/gpu/drm/i915/display/intel_quirks.c | 68 ++++ drivers/gpu/drm/i915/display/intel_quirks.h | 6 + drivers/gpu/drm/i915/gt/uc/intel_gsc_uc.c | 2 +- drivers/gpu/drm/i915/gt/uc/intel_uc_fw.h | 5 + drivers/gpu/drm/i915/i915_sw_fence.c | 8 +- drivers/gpu/drm/imagination/pvr_vm.c | 4 + drivers/gpu/drm/nouveau/nvkm/subdev/gsp/fwsec.c | 2 +- drivers/gpu/drm/panthor/panthor_drv.c | 23 ++ drivers/gpu/drm/panthor/panthor_fw.c | 8 +- drivers/gpu/drm/panthor/panthor_mmu.c | 21 +- drivers/gpu/drm/panthor/panthor_mmu.h | 1 + drivers/gpu/drm/panthor/panthor_sched.c | 2 +- drivers/gpu/drm/xe/regs/xe_gt_regs.h | 1 + drivers/gpu/drm/xe/xe_gsc.c | 12 + drivers/gpu/drm/xe/xe_uc_fw.h | 9 +- drivers/gpu/drm/xe/xe_wa.c | 8 + drivers/hid/amd-sfh-hid/amd_sfh_hid.c | 4 +- drivers/hid/bpf/Kconfig | 2 +- drivers/hid/hid-cougar.c | 2 +- drivers/hv/vmbus_drv.c | 1 + drivers/hwmon/adc128d818.c | 4 +- drivers/hwmon/hp-wmi-sensors.c | 2 + drivers/hwmon/lm95234.c | 9 +- drivers/hwmon/ltc2991.c | 6 +- drivers/hwmon/nct6775-core.c | 2 +- drivers/hwmon/w83627ehf.c | 4 +- drivers/i3c/master/mipi-i3c-hci/dma.c | 5 +- drivers/i3c/master/svc-i3c-master.c | 58 ++- drivers/iio/adc/ad7124.c | 30 +- drivers/iio/adc/ad7606.c | 28 +- drivers/iio/adc/ad7606.h | 2 + drivers/iio/adc/ad7606_par.c | 46 ++- drivers/iio/adc/ad_sigma_delta.c | 2 +- drivers/iio/buffer/industrialio-buffer-dmaengine.c | 4 +- drivers/iio/imu/inv_mpu6050/inv_mpu_trigger.c | 13 +- drivers/iio/inkern.c | 8 +- drivers/input/misc/uinput.c | 14 + drivers/input/touchscreen/ili210x.c | 6 +- drivers/iommu/intel/dmar.c | 2 +- drivers/iommu/intel/iommu.c | 4 +- drivers/iommu/intel/iommu.h | 6 +- drivers/iommu/intel/pasid.c | 1 - drivers/iommu/intel/pasid.h | 10 - drivers/iommu/iommufd/hw_pagetable.c | 3 +- drivers/iommu/sun50i-iommu.c | 1 + drivers/irqchip/irq-armada-370-xp.c | 4 + drivers/irqchip/irq-gic-v2m.c | 6 +- drivers/irqchip/irq-renesas-rzg2l.c | 2 +- drivers/irqchip/irq-riscv-aplic-main.c | 4 +- drivers/irqchip/irq-sifive-plic.c | 115 +++--- drivers/leds/leds-spi-byte.c | 6 +- drivers/md/dm-init.c | 4 +- drivers/media/platform/qcom/camss/camss.c | 5 +- drivers/media/test-drivers/vivid/vivid-vid-cap.c | 17 +- drivers/media/test-drivers/vivid/vivid-vid-out.c | 16 +- drivers/media/usb/b2c2/flexcop-usb.c | 7 +- drivers/misc/fastrpc.c | 5 +- drivers/misc/vmw_vmci/vmci_resource.c | 3 +- drivers/mmc/core/quirks.h | 22 +- drivers/mmc/core/sd.c | 4 + drivers/mmc/host/cqhci-core.c | 2 +- drivers/mmc/host/dw_mmc.c | 4 +- drivers/mmc/host/sdhci-of-aspeed.c | 1 + drivers/net/bareudp.c | 22 +- drivers/net/can/kvaser_pciefd.c | 43 ++- drivers/net/can/m_can/m_can.c | 100 ++++-- drivers/net/can/spi/mcp251x.c | 2 +- drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c | 28 +- drivers/net/can/spi/mcp251xfd/mcp251xfd-ram.c | 11 +- drivers/net/can/spi/mcp251xfd/mcp251xfd-ring.c | 23 +- drivers/net/can/spi/mcp251xfd/mcp251xfd-rx.c | 165 ++++++--- drivers/net/can/spi/mcp251xfd/mcp251xfd-tef.c | 2 +- .../net/can/spi/mcp251xfd/mcp251xfd-timestamp.c | 22 +- drivers/net/can/spi/mcp251xfd/mcp251xfd.h | 42 ++- drivers/net/dsa/vitesse-vsc73xx-core.c | 10 +- drivers/net/ethernet/freescale/dpaa/dpaa_eth.c | 20 +- drivers/net/ethernet/freescale/dpaa/dpaa_ethtool.c | 10 +- drivers/net/ethernet/google/gve/gve.h | 1 + drivers/net/ethernet/google/gve/gve_adminq.c | 22 +- .../net/ethernet/hisilicon/hns3/hns3pf/hclge_err.c | 6 +- drivers/net/ethernet/intel/ice/ice.h | 2 + drivers/net/ethernet/intel/ice/ice_base.c | 11 +- drivers/net/ethernet/intel/ice/ice_lib.c | 197 ++++------ drivers/net/ethernet/intel/ice/ice_lib.h | 10 +- drivers/net/ethernet/intel/ice/ice_main.c | 63 +++- drivers/net/ethernet/intel/ice/ice_xsk.c | 12 +- drivers/net/ethernet/intel/igb/igb_main.c | 10 + drivers/net/ethernet/intel/igc/igc_main.c | 1 + drivers/net/ethernet/mellanox/mlx5/core/en.h | 20 +- .../net/ethernet/mellanox/mlx5/core/en/params.c | 12 +- drivers/net/ethernet/mellanox/mlx5/core/en/txrx.h | 19 + drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 21 +- drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 66 ++-- .../net/ethernet/microchip/vcap/vcap_api_kunit.c | 14 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 22 +- drivers/net/ethernet/ti/am65-cpsw-nuss.c | 82 +++-- drivers/net/ethernet/xilinx/xilinx_axienet.h | 3 + drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 8 + drivers/net/mctp/mctp-serial.c | 4 +- drivers/net/phy/phy_device.c | 2 + drivers/net/usb/ipheth.c | 2 +- drivers/net/usb/r8152.c | 17 +- drivers/net/usb/usbnet.c | 11 +- drivers/net/wireless/ath/ath11k/ahb.c | 4 +- drivers/net/wireless/ath/ath11k/core.c | 119 ++---- drivers/net/wireless/ath/ath11k/core.h | 4 - drivers/net/wireless/ath/ath11k/hif.h | 12 +- drivers/net/wireless/ath/ath11k/mhi.c | 12 +- drivers/net/wireless/ath/ath11k/mhi.h | 3 +- drivers/net/wireless/ath/ath11k/pci.c | 44 +-- drivers/net/wireless/ath/ath11k/qmi.c | 2 +- drivers/net/wireless/ath/ath12k/mac.c | 9 +- .../broadcom/brcm80211/brcmsmac/mac80211_if.c | 1 + drivers/net/wireless/intel/iwlwifi/mvm/mvm.h | 3 +- drivers/net/wireless/marvell/mwifiex/main.h | 3 + drivers/net/wireless/realtek/rtw88/usb.c | 13 +- drivers/net/wireless/realtek/rtw89/core.c | 3 +- drivers/nvme/host/constants.c | 2 +- drivers/nvme/host/core.c | 40 +-- drivers/nvme/host/fabrics.c | 10 +- drivers/nvme/host/fault_inject.c | 2 +- drivers/nvme/host/fc.c | 6 +- drivers/nvme/host/multipath.c | 2 +- drivers/nvme/host/nvme.h | 6 +- drivers/nvme/host/pci.c | 17 + drivers/nvme/host/pr.c | 10 +- drivers/nvme/target/admin-cmd.c | 34 +- drivers/nvme/target/core.c | 46 +-- drivers/nvme/target/discovery.c | 14 +- drivers/nvme/target/fabrics-cmd-auth.c | 16 +- drivers/nvme/target/fabrics-cmd.c | 36 +- drivers/nvme/target/io-cmd-bdev.c | 12 +- drivers/nvme/target/passthru.c | 10 +- drivers/nvme/target/rdma.c | 10 +- drivers/nvme/target/tcp.c | 8 +- drivers/nvme/target/zns.c | 30 +- drivers/nvmem/core.c | 6 +- drivers/nvmem/u-boot-env.c | 7 + drivers/of/irq.c | 15 +- drivers/pci/controller/dwc/pci-keystone.c | 44 ++- drivers/pci/controller/dwc/pcie-qcom.c | 25 +- drivers/pci/hotplug/pnv_php.c | 3 +- drivers/pci/pci.c | 35 +- drivers/pcmcia/yenta_socket.c | 6 +- drivers/phy/xilinx/phy-zynqmp.c | 1 + drivers/pinctrl/qcom/pinctrl-x1e80100.c | 4 +- drivers/platform/x86/dell/dell-smbios-base.c | 5 +- drivers/ptp/ptp_ocp.c | 168 +++++---- drivers/scsi/lpfc/lpfc_els.c | 17 +- drivers/scsi/pm8001/pm8001_sas.c | 4 +- drivers/spi/spi-fsl-lpspi.c | 31 +- drivers/spi/spi-hisi-kunpeng.c | 3 + drivers/spi/spi-intel.c | 3 + drivers/spi/spi-rockchip.c | 23 +- drivers/staging/iio/frequency/ad9834.c | 2 +- .../vc04_services/interface/vchiq_arm/vchiq_core.c | 31 +- drivers/ufs/core/ufshcd.c | 7 +- drivers/uio/uio_hv_generic.c | 11 +- drivers/usb/dwc3/core.c | 15 + drivers/usb/dwc3/core.h | 2 + drivers/usb/dwc3/gadget.c | 41 +-- drivers/usb/gadget/udc/aspeed_udc.c | 2 + drivers/usb/gadget/udc/cdns2/cdns2-gadget.c | 12 +- drivers/usb/gadget/udc/cdns2/cdns2-gadget.h | 9 + drivers/usb/storage/uas.c | 1 + drivers/usb/typec/ucsi/ucsi.c | 50 +-- drivers/vfio/vfio_iommu_spapr_tce.c | 13 +- drivers/virt/coco/sev-guest/sev-guest.c | 7 +- drivers/virtio/virtio_ring.c | 4 +- drivers/watchdog/imx7ulp_wdt.c | 5 + drivers/xen/privcmd.c | 10 +- fs/binfmt_elf.c | 5 +- fs/btrfs/ctree.c | 12 +- fs/btrfs/ctree.h | 1 - fs/btrfs/extent-tree.c | 62 +++- fs/btrfs/file.c | 25 +- fs/btrfs/inode.c | 2 +- fs/btrfs/qgroup.c | 90 ++++- fs/btrfs/transaction.h | 6 + fs/btrfs/zoned.c | 30 +- fs/cachefiles/io.c | 2 +- fs/ext4/fast_commit.c | 8 +- fs/fuse/dev.c | 14 +- fs/fuse/dir.c | 2 +- fs/fuse/file.c | 8 +- fs/fuse/inode.c | 7 +- fs/fuse/xattr.c | 4 +- fs/jbd2/recovery.c | 30 ++ fs/libfs.c | 6 +- fs/namespace.c | 93 ++--- fs/netfs/fscache_main.c | 1 + fs/netfs/io.c | 19 +- fs/nfs/super.c | 2 + fs/nilfs2/recovery.c | 35 +- fs/nilfs2/segment.c | 10 +- fs/nilfs2/sysfs.c | 43 ++- fs/ntfs3/dir.c | 52 +-- fs/ntfs3/frecord.c | 4 +- fs/smb/client/cifsfs.c | 21 +- fs/smb/client/cifsglob.h | 1 + fs/smb/client/cifssmb.c | 54 ++- fs/smb/client/file.c | 37 +- fs/smb/client/inode.c | 2 + fs/smb/client/smb2inode.c | 3 + fs/smb/client/smb2ops.c | 18 +- fs/smb/client/smb2pdu.c | 41 ++- fs/smb/client/trace.h | 1 + fs/smb/server/oplock.c | 2 +- fs/smb/server/smb2pdu.c | 14 +- fs/smb/server/transport_tcp.c | 4 +- fs/squashfs/inode.c | 7 +- fs/tracefs/event_inode.c | 2 +- fs/udf/super.c | 15 + fs/xattr.c | 91 ++--- fs/xfs/libxfs/xfs_ialloc_btree.c | 2 +- include/linux/bpf-cgroup.h | 9 - include/linux/mlx5/device.h | 1 + include/linux/mm.h | 4 + include/linux/netfs.h | 1 + include/linux/nvme.h | 16 +- include/linux/path.h | 9 + include/linux/regulator/consumer.h | 8 + include/linux/zswap.h | 4 +- include/net/bluetooth/hci_core.h | 5 - include/net/bluetooth/hci_sync.h | 4 + include/net/mana/mana.h | 2 + include/uapi/drm/drm_fourcc.h | 18 + include/uapi/drm/panthor_drm.h | 6 +- kernel/bpf/btf.c | 4 +- kernel/bpf/verifier.c | 4 +- kernel/cgroup/cgroup.c | 2 +- kernel/cgroup/cpuset.c | 36 +- kernel/dma/map_benchmark.c | 16 + kernel/events/core.c | 18 +- kernel/events/internal.h | 1 + kernel/events/ring_buffer.c | 2 + kernel/events/uprobes.c | 3 +- kernel/exit.c | 3 +- kernel/kexec_file.c | 2 +- kernel/locking/rtmutex.c | 9 +- kernel/resource.c | 6 +- kernel/seccomp.c | 23 +- kernel/smp.c | 1 + kernel/trace/trace.c | 2 + kernel/trace/trace_kprobe.c | 125 ++++--- kernel/trace/trace_osnoise.c | 50 ++- kernel/workqueue.c | 14 +- lib/codetag.c | 17 +- lib/generic-radix-tree.c | 2 + lib/maple_tree.c | 7 +- lib/overflow_kunit.c | 3 +- mm/memcontrol.c | 12 +- mm/memory_hotplug.c | 2 +- mm/page_alloc.c | 7 + mm/slub.c | 4 + mm/sparse.c | 2 +- mm/userfaultfd.c | 29 +- mm/vmalloc.c | 7 +- mm/vmscan.c | 24 +- mm/zswap.c | 2 +- net/bluetooth/hci_conn.c | 6 +- net/bluetooth/hci_sync.c | 42 ++- net/bluetooth/mgmt.c | 144 ++++---- net/bluetooth/smp.c | 7 - net/bridge/br_fdb.c | 6 +- net/can/bcm.c | 4 + net/core/filter.c | 1 - net/core/net-sysfs.c | 2 +- net/ethtool/channels.c | 6 +- net/ethtool/common.c | 26 +- net/ethtool/common.h | 2 +- net/ethtool/ioctl.c | 4 +- net/ipv4/fou_core.c | 29 +- net/ipv4/tcp_bpf.c | 2 +- net/ipv4/tcp_input.c | 6 + net/ipv6/ila/ila.h | 1 + net/ipv6/ila/ila_main.c | 6 + net/ipv6/ila/ila_xlat.c | 13 +- net/netfilter/nf_conncount.c | 8 +- net/sched/sch_cake.c | 11 +- net/sched/sch_netem.c | 9 +- net/socket.c | 4 +- net/unix/af_unix.c | 9 +- rust/Makefile | 2 +- rust/macros/module.rs | 6 +- scripts/gfp-translate | 66 +++- security/smack/smack_lsm.c | 12 +- sound/core/control.c | 6 +- sound/hda/hdmi_chmap.c | 18 + sound/pci/hda/patch_conexant.c | 11 + sound/pci/hda/patch_realtek.c | 22 +- sound/soc/codecs/tas2781-fmwlib.c | 71 ++-- sound/soc/intel/boards/bxt_rt298.c | 2 +- sound/soc/intel/boards/bytcht_cx2072x.c | 2 +- sound/soc/intel/boards/bytcht_da7213.c | 2 +- sound/soc/intel/boards/bytcht_es8316.c | 2 +- sound/soc/intel/boards/bytcr_rt5640.c | 2 +- sound/soc/intel/boards/bytcr_rt5651.c | 2 +- sound/soc/intel/boards/bytcr_wm5102.c | 2 +- sound/soc/intel/boards/cht_bsw_rt5645.c | 2 +- sound/soc/intel/boards/cht_bsw_rt5672.c | 2 +- sound/soc/soc-dapm.c | 1 + sound/soc/soc-topology.c | 2 + sound/soc/sof/topology.c | 2 + sound/soc/sunxi/sun4i-i2s.c | 143 ++++---- sound/soc/tegra/tegra210_ahub.c | 12 +- tools/lib/bpf/libbpf.c | 4 +- tools/net/ynl/lib/ynl.py | 7 +- tools/perf/util/bpf_lock_contention.c | 3 + tools/testing/selftests/dmabuf-heaps/dmabuf-heap.c | 4 +- tools/testing/selftests/mm/mseal_test.c | 37 +- tools/testing/selftests/mm/seal_elf.c | 13 +- tools/testing/selftests/net/Makefile | 3 +- tools/testing/selftests/riscv/mm/mmap_bottomup.c | 2 - tools/testing/selftests/riscv/mm/mmap_default.c | 2 - tools/testing/selftests/riscv/mm/mmap_test.h | 67 ---- 436 files changed, 4664 insertions(+), 3102 deletions(-)

8 months

15
391
0 0

[PATCH RFC V3 1/1] ocfs2: reserve space for inline xattr before attaching reflink tree

by Gautham Ananthakrishna

One of our customers reported a crash and a corrupted ocfs2 filesystem. The crash was due to the detection of corruption. Upon troubleshooting, the fsck -fn output showed the below corruption [EXTENT_LIST_FREE] Extent list in owner 33080590 claims 230 as the next free chain record, but fsck believes the largest valid value is 227. Clamp the next record value? n The stat output from the debugfs.ocfs2 showed the following corruption where the "Next Free Rec:" had overshot the "Count:" in the root metadata block. Inode: 33080590 Mode: 0640 Generation: 2619713622 (0x9c25a856) FS Generation: 904309833 (0x35e6ac49) CRC32: 00000000 ECC: 0000 Type: Regular Attr: 0x0 Flags: Valid Dynamic Features: (0x16) HasXattr InlineXattr Refcounted Extended Attributes Block: 0 Extended Attributes Inline Size: 256 User: 0 (root) Group: 0 (root) Size: 281320357888 Links: 1 Clusters: 141738 ctime: 0x66911b56 0x316edcb8 -- Fri Jul 12 06:02:30.829349048 2024 atime: 0x66911d6b 0x7f7a28d -- Fri Jul 12 06:11:23.133669517 2024 mtime: 0x66911b56 0x12ed75d7 -- Fri Jul 12 06:02:30.317552087 2024 dtime: 0x0 -- Wed Dec 31 17:00:00 1969 Refcount Block: 2777346 Last Extblk: 2886943 Orphan Slot: 0 Sub Alloc Slot: 0 Sub Alloc Bit: 14 Tree Depth: 1 Count: 227 Next Free Rec: 230 ## Offset Clusters Block# 0 0 2310 2776351 1 2310 2139 2777375 2 4449 1221 2778399 3 5670 731 2779423 4 6401 566 2780447 ....... .... ....... ....... .... ....... The issue was in the reflink workfow while reserving space for inline xattr. The problematic function is ocfs2_reflink_xattr_inline(). By the time this function is called the reflink tree is already recreated at the destination inode from the source inode. At this point, this function reserves space space inline xattrs at the destination inode without even checking if there is space at the root metadata block. It simply reduces the l_count from 243 to 227 thereby making space of 256 bytes for inline xattr whereas the inode already has extents beyond this index (in this case upto 230), thereby causing corruption. The fix for this is to reserve space for inline metadata before the at the destination inode before the reflink tree gets recreated. The customer has verified the fix. Fixes: ef962df057aa ("ocfs2: xattr: fix inlined xattr reflink") Cc: stable(a)vger.kernel.org Signed-off-by: Gautham Ananthakrishna <gautham.ananthakrishna(a)oracle.com> --- fs/ocfs2/refcounttree.c | 26 ++++++++++++++++++++++++-- fs/ocfs2/xattr.c | 11 +---------- 2 files changed, 25 insertions(+), 12 deletions(-) diff --git a/fs/ocfs2/refcounttree.c b/fs/ocfs2/refcounttree.c index 3f80a56d0d60..05105d271fc8 100644 --- a/fs/ocfs2/refcounttree.c +++ b/fs/ocfs2/refcounttree.c @@ -25,6 +25,7 @@ #include "namei.h" #include "ocfs2_trace.h" #include "file.h" +#include "symlink.h" #include <linux/bio.h> #include <linux/blkdev.h> @@ -4155,8 +4156,9 @@ static int __ocfs2_reflink(struct dentry *old_dentry, int ret; struct inode *inode = d_inode(old_dentry); struct buffer_head *new_bh = NULL; + struct ocfs2_inode_info *oi = OCFS2_I(inode); - if (OCFS2_I(inode)->ip_flags & OCFS2_INODE_SYSTEM_FILE) { + if (oi->ip_flags & OCFS2_INODE_SYSTEM_FILE) { ret = -EINVAL; mlog_errno(ret); goto out; @@ -4182,6 +4184,26 @@ static int __ocfs2_reflink(struct dentry *old_dentry, goto out_unlock; } + if ((oi->ip_dyn_features & OCFS2_HAS_XATTR_FL) && + (oi->ip_dyn_features & OCFS2_INLINE_XATTR_FL)) { + /* + * Adjust extent record count to reserve space for extended attribute. + * Inline data count had been adjusted in ocfs2_duplicate_inline_data(). + */ + struct ocfs2_inode_info *new_oi = OCFS2_I(new_inode); + + if (!(new_oi->ip_dyn_features & OCFS2_INLINE_DATA_FL) && + !(ocfs2_inode_is_fast_symlink(new_inode))) { + struct ocfs2_dinode *new_di = new_bh->b_data; + struct ocfs2_dinode *old_di = old_bh->b_data; + struct ocfs2_extent_list *el = &new_di->id2.i_list; + int inline_size = le16_to_cpu(old_di->i_xattr_inline_size); + + le16_add_cpu(&el->l_count, -(inline_size / + sizeof(struct ocfs2_extent_rec))); + } + } + ret = ocfs2_create_reflink_node(inode, old_bh, new_inode, new_bh, preserve); if (ret) { @@ -4189,7 +4211,7 @@ static int __ocfs2_reflink(struct dentry *old_dentry, goto inode_unlock; } - if (OCFS2_I(inode)->ip_dyn_features & OCFS2_HAS_XATTR_FL) { + if (oi->ip_dyn_features & OCFS2_HAS_XATTR_FL) { ret = ocfs2_reflink_xattrs(inode, old_bh, new_inode, new_bh, preserve); diff --git a/fs/ocfs2/xattr.c b/fs/ocfs2/xattr.c index 3b81213ed7b8..a9f716ec89e2 100644 --- a/fs/ocfs2/xattr.c +++ b/fs/ocfs2/xattr.c @@ -6511,16 +6511,7 @@ static int ocfs2_reflink_xattr_inline(struct ocfs2_xattr_reflink *args) } new_oi = OCFS2_I(args->new_inode); - /* - * Adjust extent record count to reserve space for extended attribute. - * Inline data count had been adjusted in ocfs2_duplicate_inline_data(). - */ - if (!(new_oi->ip_dyn_features & OCFS2_INLINE_DATA_FL) && - !(ocfs2_inode_is_fast_symlink(args->new_inode))) { - struct ocfs2_extent_list *el = &new_di->id2.i_list; - le16_add_cpu(&el->l_count, -(inline_size / - sizeof(struct ocfs2_extent_rec))); - } + spin_lock(&new_oi->ip_lock); new_oi->ip_dyn_features |= OCFS2_HAS_XATTR_FL | OCFS2_INLINE_XATTR_FL; new_di->i_dyn_features = cpu_to_le16(new_oi->ip_dyn_features); -- 2.39.3

8 months

2
2
0 0

[PATCH v2 2/3] block: fix ordering between checking QUEUE_FLAG_QUIESCED and adding requests

by Muchun Song

Supposing the following scenario. CPU0 CPU1 blk_mq_insert_request() 1) store blk_mq_unquiesce_queue() blk_mq_run_hw_queue() blk_queue_flag_clear(QUEUE_FLAG_QUIESCED) 3) store if (blk_queue_quiesced()) 2) load blk_mq_run_hw_queues() return blk_mq_run_hw_queue() blk_mq_sched_dispatch_requests() if (!blk_mq_hctx_has_pending()) 4) load return The full memory barrier should be inserted between 1) and 2), as well as between 3) and 4) to make sure that either CPU0 sees QUEUE_FLAG_QUIESCED is cleared or CPU1 sees dispatch list or setting of bitmap of software queue. Otherwise, either CPU will not re-run the hardware queue causing starvation. So the first solution is to 1) add a pair of memory barrier to fix the problem, another solution is to 2) use hctx->queue->queue_lock to synchronize QUEUE_FLAG_QUIESCED. Here, we chose 2) to fix it since memory barrier is not easy to be maintained. Fixes: f4560ffe8cec1 ("blk-mq: use QUEUE_FLAG_QUIESCED to quiesce queue") Cc: stable(a)vger.kernel.org Cc: Muchun Song <muchun.song(a)linux.dev> Signed-off-by: Muchun Song <songmuchun(a)bytedance.com> --- block/blk-mq.c | 47 ++++++++++++++++++++++++++++++++++------------- 1 file changed, 34 insertions(+), 13 deletions(-) diff --git a/block/blk-mq.c b/block/blk-mq.c index b2d0f22de0c7f..ac39f2a346a52 100644 --- a/block/blk-mq.c +++ b/block/blk-mq.c @@ -2202,6 +2202,24 @@ void blk_mq_delay_run_hw_queue(struct blk_mq_hw_ctx *hctx, unsigned long msecs) } EXPORT_SYMBOL(blk_mq_delay_run_hw_queue); +static inline bool blk_mq_hw_queue_need_run(struct blk_mq_hw_ctx *hctx) +{ + bool need_run; + + /* + * When queue is quiesced, we may be switching io scheduler, or + * updating nr_hw_queues, or other things, and we can't run queue + * any more, even blk_mq_hctx_has_pending() can't be called safely. + * + * And queue will be rerun in blk_mq_unquiesce_queue() if it is + * quiesced. + */ + __blk_mq_run_dispatch_ops(hctx->queue, false, + need_run = !blk_queue_quiesced(hctx->queue) && + blk_mq_hctx_has_pending(hctx)); + return need_run; +} + /** * blk_mq_run_hw_queue - Start to run a hardware queue. * @hctx: Pointer to the hardware queue to run. @@ -2222,20 +2240,23 @@ void blk_mq_run_hw_queue(struct blk_mq_hw_ctx *hctx, bool async) might_sleep_if(!async && hctx->flags & BLK_MQ_F_BLOCKING); - /* - * When queue is quiesced, we may be switching io scheduler, or - * updating nr_hw_queues, or other things, and we can't run queue - * any more, even __blk_mq_hctx_has_pending() can't be called safely. - * - * And queue will be rerun in blk_mq_unquiesce_queue() if it is - * quiesced. - */ - __blk_mq_run_dispatch_ops(hctx->queue, false, - need_run = !blk_queue_quiesced(hctx->queue) && - blk_mq_hctx_has_pending(hctx)); + need_run = blk_mq_hw_queue_need_run(hctx); + if (!need_run) { + unsigned long flags; - if (!need_run) - return; + /* + * Synchronize with blk_mq_unquiesce_queue(), becuase we check + * if hw queue is quiesced locklessly above, we need the use + * ->queue_lock to make sure we see the up-to-date status to + * not miss rerunning the hw queue. + */ + spin_lock_irqsave(&hctx->queue->queue_lock, flags); + need_run = blk_mq_hw_queue_need_run(hctx); + spin_unlock_irqrestore(&hctx->queue->queue_lock, flags); + + if (!need_run) + return; + } if (async || !cpumask_test_cpu(raw_smp_processor_id(), hctx->cpumask)) { blk_mq_delay_run_hw_queue(hctx, 0); -- 2.20.1

8 months

4
8
0 0

[PATCH 1/1] x86: SMT broken on Xen PV DomU since 6.9

by Niels Dettenbach

virtual machines under Xen Hypervisor (DomU) running in Xen PV mode use a special, nonstandard synthetized CPU topology which "just works" under kernels 6.9.x while newer kernels assuming a "crash kernel" and disable SMT (reducing to one CPU core) because the newer topology implementation produces a wrong error "[Firmware Bug]: APIC enumeration order not specification compliant" after new topology checks which are improper for Xen PV platform. As a result, the kernel disables SMT and activates just one CPU core within the VM (DomU). The patch disables the regarding checks if it is running in Xen PV mode (only) and bring back SMT / all CPUs as in the past to such DomU VMs. Signed-off-by: Niels Dettenbach <nd(a)syndicat.com> --- The current behaviour leads all of our production Xen Host platforms unusable after updating to newer linux kernels (with just one CPU available/activated per VM) while older kernels other OS still work fully (and stable since many years on the platform). Xen PV mode is still provided by current Xen and widely used - even if less wide as the newer Xen PVH mode today. So a solution probably will be required. So we assume that bug affects stable(a)vger.kernel.org as well. dmesg from affected kernel: -- snip -- Sep 10 14:35:50 ffm1 kernel: [ 0.640364] CPU topo: Enumerated BSP APIC 0 is not marked in APICBASE MSR Sep 10 14:35:50 ffm1 kernel: [ 0.640367] CPU topo: Assuming crash kernel. Limiting to one CPU to prevent machine INIT Sep 10 14:35:50 ffm1 kernel: [ 0.640368] CPU topo: [Firmware Bug]: APIC enumeration order not specification compliant Sep 10 14:35:50 ffm1 kernel: [ 0.640376] CPU topo: Max. logical packages: 1 Sep 10 14:35:50 ffm1 kernel: [ 0.640378] CPU topo: Max. logical dies: 1 Sep 10 14:35:50 ffm1 kernel: [ 0.640379] CPU topo: Max. dies per package: 1 Sep 10 14:35:50 ffm1 kernel: [ 0.640386] CPU topo: Max. threads per core: 1 Sep 10 14:35:50 ffm1 kernel: [ 0.640388] CPU topo: Num. cores per package: 1 Sep 10 14:35:50 ffm1 kernel: [ 0.640389] CPU topo: Num. threads per package: 1 Sep 10 14:35:50 ffm1 kernel: [ 0.640390] CPU topo: Allowing 1 present CPUs plus 0 hotplug CPUs Sep 10 14:35:50 ffm1 kernel: [ 0.640402] Cannot find an available gap in the 32-bit address range -- snap -- We tested the patch intensely under productive / high load since 2 days now with no issues. references: arch/x86/kernel/cpu/topology.c [line 448] --- snip --- /* * XEN PV is special as it does not advertise the local APIC * properly, but provides a fake topology for it so that the * infrastructure works. So don't apply the restrictions vs. APIC * here. */ ---snap --- Related errors / tickets: https://forum.qubes-os.org/t/fedora-sees-only-1-cpu-core-after-updating-the… --- linux/arch/x86/kernel/cpu/topology.c.orig 2024-09-11 09:53:16.194095250 +0200 +++ linux/arch/x86/kernel/cpu/topology.c 2024-09-11 09:55:17.338448094 +0200 @@ -158,7 +158,7 @@ static __init bool check_for_real_bsp(u3 is_bsp = !!(msr & MSR_IA32_APICBASE_BSP); } - if (apic_id == topo_info.boot_cpu_apic_id) { + if (!xen_pv_domain() && apic_id == topo_info.boot_cpu_apic_id) { /* * If the boot CPU has the APIC BSP bit set then the * firmware enumeration is agreeing. If the CPU does not @@ -185,7 +185,7 @@ static __init bool check_for_real_bsp(u3 pr_warn("Boot CPU APIC ID not the first enumerated APIC ID: %x != %x\n", topo_info.boot_cpu_apic_id, apic_id); - if (is_bsp) { + if (!xen_pv_domain() && is_bsp) { /* * The boot CPU has the APIC BSP bit set. Use it and complain * about the broken firmware enumeration.

8 months

2
2
0 0

[PATCH RFC V2 1/1] ocfs2: reserve space for inline xattr before attaching reflink tree

by Gautham Ananthakrishna

One of our customers reported a crash and a corrupted ocfs2 filesystem. The crash was due to the detection of corruption. Upon troubleshooting, the fsck -fn output showed the below corruption [EXTENT_LIST_FREE] Extent list in owner 33080590 claims 230 as the next free chain record, but fsck believes the largest valid value is 227. Clamp the next record value? n The stat output from the debugfs.ocfs2 showed the following corruption where the "Next Free Rec:" had overshot the "Count:" in the root metadata block. Inode: 33080590 Mode: 0640 Generation: 2619713622 (0x9c25a856) FS Generation: 904309833 (0x35e6ac49) CRC32: 00000000 ECC: 0000 Type: Regular Attr: 0x0 Flags: Valid Dynamic Features: (0x16) HasXattr InlineXattr Refcounted Extended Attributes Block: 0 Extended Attributes Inline Size: 256 User: 0 (root) Group: 0 (root) Size: 281320357888 Links: 1 Clusters: 141738 ctime: 0x66911b56 0x316edcb8 -- Fri Jul 12 06:02:30.829349048 2024 atime: 0x66911d6b 0x7f7a28d -- Fri Jul 12 06:11:23.133669517 2024 mtime: 0x66911b56 0x12ed75d7 -- Fri Jul 12 06:02:30.317552087 2024 dtime: 0x0 -- Wed Dec 31 17:00:00 1969 Refcount Block: 2777346 Last Extblk: 2886943 Orphan Slot: 0 Sub Alloc Slot: 0 Sub Alloc Bit: 14 Tree Depth: 1 Count: 227 Next Free Rec: 230 ## Offset Clusters Block# 0 0 2310 2776351 1 2310 2139 2777375 2 4449 1221 2778399 3 5670 731 2779423 4 6401 566 2780447 ....... .... ....... ....... .... ....... The issue was in the reflink workfow while reserving space for inline xattr. The problematic function is ocfs2_reflink_xattr_inline(). By the time this function is called the reflink tree is already recreated at the destination inode from the source inode. At this point, this function reserves space space inline xattrs at the destination inode without even checking if there is space at the root metadata block. It simply reduces the l_count from 243 to 227 thereby making space of 256 bytes for inline xattr whereas the inode already has extents beyond this index (in this case upto 230), thereby causing corruption. The fix for this is to reserve space for inline metadata before the at the destination inode before the reflink tree gets recreated. The customer has verified the fix. Fixes: ef962df057aa ("ocfs2: xattr: fix inlined xattr reflink") Cc: stable(a)vger.kernel.org Signed-off-by: Gautham Ananthakrishna <gautham.ananthakrishna(a)oracle.com> --- fs/ocfs2/refcounttree.c | 26 ++++++++++++++++++++++++-- fs/ocfs2/xattr.c | 11 +---------- 2 files changed, 25 insertions(+), 12 deletions(-) diff --git a/fs/ocfs2/refcounttree.c b/fs/ocfs2/refcounttree.c index 3f80a56d0d60..1d427da06bee 100644 --- a/fs/ocfs2/refcounttree.c +++ b/fs/ocfs2/refcounttree.c @@ -25,6 +25,7 @@ #include "namei.h" #include "ocfs2_trace.h" #include "file.h" +#include "symlink.h" #include <linux/bio.h> #include <linux/blkdev.h> @@ -4155,8 +4156,9 @@ static int __ocfs2_reflink(struct dentry *old_dentry, int ret; struct inode *inode = d_inode(old_dentry); struct buffer_head *new_bh = NULL; + struct ocfs2_inode_info *oi = OCFS2_I(inode); - if (OCFS2_I(inode)->ip_flags & OCFS2_INODE_SYSTEM_FILE) { + if (oi->ip_flags & OCFS2_INODE_SYSTEM_FILE) { ret = -EINVAL; mlog_errno(ret); goto out; @@ -4182,6 +4184,26 @@ static int __ocfs2_reflink(struct dentry *old_dentry, goto out_unlock; } + if ((oi->ip_dyn_features & OCFS2_HAS_XATTR_FL) && + (oi->ip_dyn_features & OCFS2_INLINE_XATTR_FL)) { + /* + * Adjust extent record count to reserve space for extended attribute. + * Inline data count had been adjusted in ocfs2_duplicate_inline_data(). + */ + struct ocfs2_inode_info *ni = OCFS2_I(new_inode); + + if (!(ni->ip_dyn_features & OCFS2_INLINE_DATA_FL) && + !(ocfs2_inode_is_fast_symlink(new_inode))) { + struct ocfs2_dinode *new_di = new_bh->b_data; + struct ocfs2_dinode *old_di = old_bh->b_data; + struct ocfs2_extent_list *el = &new_di->id2.i_list; + int inline_size = le16_to_cpu(old_di->i_xattr_inline_size); + + le16_add_cpu(&el->l_count, -(inline_size / + sizeof(struct ocfs2_extent_rec))); + } + } + ret = ocfs2_create_reflink_node(inode, old_bh, new_inode, new_bh, preserve); if (ret) { @@ -4189,7 +4211,7 @@ static int __ocfs2_reflink(struct dentry *old_dentry, goto inode_unlock; } - if (OCFS2_I(inode)->ip_dyn_features & OCFS2_HAS_XATTR_FL) { + if (oi->ip_dyn_features & OCFS2_HAS_XATTR_FL) { ret = ocfs2_reflink_xattrs(inode, old_bh, new_inode, new_bh, preserve); diff --git a/fs/ocfs2/xattr.c b/fs/ocfs2/xattr.c index 3b81213ed7b8..a9f716ec89e2 100644 --- a/fs/ocfs2/xattr.c +++ b/fs/ocfs2/xattr.c @@ -6511,16 +6511,7 @@ static int ocfs2_reflink_xattr_inline(struct ocfs2_xattr_reflink *args) } new_oi = OCFS2_I(args->new_inode); - /* - * Adjust extent record count to reserve space for extended attribute. - * Inline data count had been adjusted in ocfs2_duplicate_inline_data(). - */ - if (!(new_oi->ip_dyn_features & OCFS2_INLINE_DATA_FL) && - !(ocfs2_inode_is_fast_symlink(args->new_inode))) { - struct ocfs2_extent_list *el = &new_di->id2.i_list; - le16_add_cpu(&el->l_count, -(inline_size / - sizeof(struct ocfs2_extent_rec))); - } + spin_lock(&new_oi->ip_lock); new_oi->ip_dyn_features |= OCFS2_HAS_XATTR_FL | OCFS2_INLINE_XATTR_FL; new_di->i_dyn_features = cpu_to_le16(new_oi->ip_dyn_features); -- 2.39.3

8 months

2
2
0 0

[PATCH RFC V1 1/1] ocfs2: reserve space for inline xattr before attaching reflink tree

by Gautham Ananthakrishna

One of our customers reported a crash and a corrupted ocfs2 filesystem. The crash was due to the detection of corruption. Upon troubleshooting, the fsck -fn output showed the below corruption [EXTENT_LIST_FREE] Extent list in owner 33080590 claims 230 as the next free chain record, but fsck believes the largest valid value is 227. Clamp the next record value? n The stat output from the debugfs.ocfs2 showed the following corruption where the "Next Free Rec:" had overshot the "Count:" in the root metadata block. Inode: 33080590 Mode: 0640 Generation: 2619713622 (0x9c25a856) FS Generation: 904309833 (0x35e6ac49) CRC32: 00000000 ECC: 0000 Type: Regular Attr: 0x0 Flags: Valid Dynamic Features: (0x16) HasXattr InlineXattr Refcounted Extended Attributes Block: 0 Extended Attributes Inline Size: 256 User: 0 (root) Group: 0 (root) Size: 281320357888 Links: 1 Clusters: 141738 ctime: 0x66911b56 0x316edcb8 -- Fri Jul 12 06:02:30.829349048 2024 atime: 0x66911d6b 0x7f7a28d -- Fri Jul 12 06:11:23.133669517 2024 mtime: 0x66911b56 0x12ed75d7 -- Fri Jul 12 06:02:30.317552087 2024 dtime: 0x0 -- Wed Dec 31 17:00:00 1969 Refcount Block: 2777346 Last Extblk: 2886943 Orphan Slot: 0 Sub Alloc Slot: 0 Sub Alloc Bit: 14 Tree Depth: 1 Count: 227 Next Free Rec: 230 ## Offset Clusters Block# 0 0 2310 2776351 1 2310 2139 2777375 2 4449 1221 2778399 3 5670 731 2779423 4 6401 566 2780447 ....... .... ....... ....... .... ....... The issue was in the reflink workfow while reserving space for inline xattr. The problematic function is ocfs2_reflink_xattr_inline(). By the time this function is called the reflink tree is already recreated at the destination inode from the source inode. At this point, this function reserves space space inline xattrs at the destination inode without even checking if there is space at the root metadata block. It simply reduces the l_count from 243 to 227 thereby making space of 256 bytes for inline xattr whereas the inode already has extents beyond this index (in this case upto 230), thereby causing corruption. The fix for this is to reserve space for inline metadata before the at the destination inode before the reflink tree gets recreated. The customer has verified the fix. Fixes: ef962df057aa ("ocfs2: xattr: fix inlined xattr reflink") Signed-off-by: Gautham Ananthakrishna <gautham.ananthakrishna(a)oracle.com> --- fs/ocfs2/refcounttree.c | 26 ++++++++++++++++++++++++-- fs/ocfs2/xattr.c | 11 +---------- 2 files changed, 25 insertions(+), 12 deletions(-) diff --git a/fs/ocfs2/refcounttree.c b/fs/ocfs2/refcounttree.c index 3f80a56d0d60..1d427da06bee 100644 --- a/fs/ocfs2/refcounttree.c +++ b/fs/ocfs2/refcounttree.c @@ -25,6 +25,7 @@ #include "namei.h" #include "ocfs2_trace.h" #include "file.h" +#include "symlink.h" #include <linux/bio.h> #include <linux/blkdev.h> @@ -4155,8 +4156,9 @@ static int __ocfs2_reflink(struct dentry *old_dentry, int ret; struct inode *inode = d_inode(old_dentry); struct buffer_head *new_bh = NULL; + struct ocfs2_inode_info *oi = OCFS2_I(inode); - if (OCFS2_I(inode)->ip_flags & OCFS2_INODE_SYSTEM_FILE) { + if (oi->ip_flags & OCFS2_INODE_SYSTEM_FILE) { ret = -EINVAL; mlog_errno(ret); goto out; @@ -4182,6 +4184,26 @@ static int __ocfs2_reflink(struct dentry *old_dentry, goto out_unlock; } + if ((oi->ip_dyn_features & OCFS2_HAS_XATTR_FL) && + (oi->ip_dyn_features & OCFS2_INLINE_XATTR_FL)) { + /* + * Adjust extent record count to reserve space for extended attribute. + * Inline data count had been adjusted in ocfs2_duplicate_inline_data(). + */ + struct ocfs2_inode_info *ni = OCFS2_I(new_inode); + + if (!(ni->ip_dyn_features & OCFS2_INLINE_DATA_FL) && + !(ocfs2_inode_is_fast_symlink(new_inode))) { + struct ocfs2_dinode *new_di = new_bh->b_data; + struct ocfs2_dinode *old_di = old_bh->b_data; + struct ocfs2_extent_list *el = &new_di->id2.i_list; + int inline_size = le16_to_cpu(old_di->i_xattr_inline_size); + + le16_add_cpu(&el->l_count, -(inline_size / + sizeof(struct ocfs2_extent_rec))); + } + } + ret = ocfs2_create_reflink_node(inode, old_bh, new_inode, new_bh, preserve); if (ret) { @@ -4189,7 +4211,7 @@ static int __ocfs2_reflink(struct dentry *old_dentry, goto inode_unlock; } - if (OCFS2_I(inode)->ip_dyn_features & OCFS2_HAS_XATTR_FL) { + if (oi->ip_dyn_features & OCFS2_HAS_XATTR_FL) { ret = ocfs2_reflink_xattrs(inode, old_bh, new_inode, new_bh, preserve); diff --git a/fs/ocfs2/xattr.c b/fs/ocfs2/xattr.c index 3b81213ed7b8..a9f716ec89e2 100644 --- a/fs/ocfs2/xattr.c +++ b/fs/ocfs2/xattr.c @@ -6511,16 +6511,7 @@ static int ocfs2_reflink_xattr_inline(struct ocfs2_xattr_reflink *args) } new_oi = OCFS2_I(args->new_inode); - /* - * Adjust extent record count to reserve space for extended attribute. - * Inline data count had been adjusted in ocfs2_duplicate_inline_data(). - */ - if (!(new_oi->ip_dyn_features & OCFS2_INLINE_DATA_FL) && - !(ocfs2_inode_is_fast_symlink(args->new_inode))) { - struct ocfs2_extent_list *el = &new_di->id2.i_list; - le16_add_cpu(&el->l_count, -(inline_size / - sizeof(struct ocfs2_extent_rec))); - } + spin_lock(&new_oi->ip_lock); new_oi->ip_dyn_features |= OCFS2_HAS_XATTR_FL | OCFS2_INLINE_XATTR_FL; new_di->i_dyn_features = cpu_to_le16(new_oi->ip_dyn_features); -- 2.39.3

8 months

2
1
0 0

[PATCH 6.6 v2 4/4] riscv: dts: starfive: Add JH7110 PWM-DAC support

by WangYuli

From: Hal Feng <hal.feng(a)starfivetech.com> [ Upstream commit be326bee09374a2ebd18cb5af8fcd6f1e7825260 ] Add PWM-DAC support for StarFive JH7110 SoC. Reviewed-by: Walker Chen <walker.chen(a)starfivetech.com> Signed-off-by: Hal Feng <hal.feng(a)starfivetech.com> Signed-off-by: Conor Dooley <conor.dooley(a)microchip.com> Signed-off-by: WangYuli <wangyuli(a)uniontech.com> --- .../jh7110-starfive-visionfive-2.dtsi | 49 +++++++++++++++++++ arch/riscv/boot/dts/starfive/jh7110.dtsi | 13 +++++ 2 files changed, 62 insertions(+) diff --git a/arch/riscv/boot/dts/starfive/jh7110-starfive-visionfive-2.dtsi b/arch/riscv/boot/dts/starfive/jh7110-starfive-visionfive-2.dtsi index caa59b9b2f19..0e077f2f02d1 100644 --- a/arch/riscv/boot/dts/starfive/jh7110-starfive-visionfive-2.dtsi +++ b/arch/riscv/boot/dts/starfive/jh7110-starfive-visionfive-2.dtsi @@ -40,6 +40,33 @@ gpio-restart { gpios = <&sysgpio 35 GPIO_ACTIVE_HIGH>; priority = <224>; }; + + pwmdac_codec: pwmdac-codec { + compatible = "linux,spdif-dit"; + #sound-dai-cells = <0>; + }; + + sound-pwmdac { + compatible = "simple-audio-card"; + simple-audio-card,name = "StarFive-PWMDAC-Sound-Card"; + #address-cells = <1>; + #size-cells = <0>; + + simple-audio-card,dai-link@0 { + reg = <0>; + format = "left_j"; + bitclock-master = <&sndcpu0>; + frame-master = <&sndcpu0>; + + sndcpu0: cpu { + sound-dai = <&pwmdac>; + }; + + codec { + sound-dai = <&pwmdac_codec>; + }; + }; + }; }; &dvp_clk { @@ -253,6 +280,12 @@ &mmc1 { status = "okay"; }; +&pwmdac { + pinctrl-names = "default"; + pinctrl-0 = <&pwmdac_pins>; + status = "okay"; +}; + &qspi { #address-cells = <1>; #size-cells = <0>; @@ -463,6 +496,22 @@ GPOEN_SYS_SDIO1_DATA3, }; }; + pwmdac_pins: pwmdac-0 { + pwmdac-pins { + pinmux = <GPIOMUX(33, GPOUT_SYS_PWMDAC_LEFT, + GPOEN_ENABLE, + GPI_NONE)>, + <GPIOMUX(34, GPOUT_SYS_PWMDAC_RIGHT, + GPOEN_ENABLE, + GPI_NONE)>; + bias-disable; + drive-strength = <2>; + input-disable; + input-schmitt-disable; + slew-rate = <0>; + }; + }; + spi0_pins: spi0-0 { mosi-pins { pinmux = <GPIOMUX(52, GPOUT_SYS_SPI0_TXD, diff --git a/arch/riscv/boot/dts/starfive/jh7110.dtsi b/arch/riscv/boot/dts/starfive/jh7110.dtsi index 621b68c02ea8..9f31dec57c0d 100644 --- a/arch/riscv/boot/dts/starfive/jh7110.dtsi +++ b/arch/riscv/boot/dts/starfive/jh7110.dtsi @@ -536,6 +536,19 @@ i2srx: i2s@100e0000 { status = "disabled"; }; + pwmdac: pwmdac@100b0000 { + compatible = "starfive,jh7110-pwmdac"; + reg = <0x0 0x100b0000 0x0 0x1000>; + clocks = <&syscrg JH7110_SYSCLK_PWMDAC_APB>, + <&syscrg JH7110_SYSCLK_PWMDAC_CORE>; + clock-names = "apb", "core"; + resets = <&syscrg JH7110_SYSRST_PWMDAC_APB>; + dmas = <&dma 22>; + dma-names = "tx"; + #sound-dai-cells = <0>; + status = "disabled"; + }; + usb0: usb@10100000 { compatible = "starfive,jh7110-usb"; ranges = <0x0 0x0 0x10100000 0x100000>; -- 2.43.4

8 months

1
0
0 0

[PATCH 6.6 v2 2/4] riscv: dts: starfive: pinfunc: Fix the pins name of I2STX1

by WangYuli

From: Xingyu Wu <xingyu.wu(a)starfivetech.com> [ Upstream commit 4e1abae5688aae9dd8345dbd4ea92a4b9adf340d ] These pins are actually I2STX1 clock input, not I2STX0, so their names should be changed. Signed-off-by: Xingyu Wu <xingyu.wu(a)starfivetech.com> Reviewed-by: Walker Chen <walker.chen(a)starfivetech.com> Acked-by: Rob Herring <robh(a)kernel.org> Signed-off-by: Conor Dooley <conor.dooley(a)microchip.com> Signed-off-by: WangYuli <wangyuli(a)uniontech.com> --- arch/riscv/boot/dts/starfive/jh7110-pinfunc.h | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/arch/riscv/boot/dts/starfive/jh7110-pinfunc.h b/arch/riscv/boot/dts/starfive/jh7110-pinfunc.h index fb0139b56723..256de17f5261 100644 --- a/arch/riscv/boot/dts/starfive/jh7110-pinfunc.h +++ b/arch/riscv/boot/dts/starfive/jh7110-pinfunc.h @@ -240,8 +240,8 @@ #define GPI_SYS_MCLK_EXT 30 #define GPI_SYS_I2SRX_BCLK 31 #define GPI_SYS_I2SRX_LRCK 32 -#define GPI_SYS_I2STX0_BCLK 33 -#define GPI_SYS_I2STX0_LRCK 34 +#define GPI_SYS_I2STX1_BCLK 33 +#define GPI_SYS_I2STX1_LRCK 34 #define GPI_SYS_TDM_CLK 35 #define GPI_SYS_TDM_RXD 36 #define GPI_SYS_TDM_SYNC 37 -- 2.43.4

8 months

1
0
0 0

[PATCH 6.6.y RESEND 2/2] iio: adc: ad7124: fix DT configuration parsing

by He Lugang

From: Dumitru Ceclan <mitrutzceclan(a)gmail.com> commit 61cbfb5368dd50ed0d65ce21d305aa923581db2b upstream The cfg pointer is set before reading the channel number that the configuration should point to. This causes configurations to be shifted by one channel. For example setting bipolar to the first channel defined in the DT will cause bipolar mode to be active on the second defined channel. Fix by moving the cfg pointer setting after reading the channel number. Fixes: 7b8d045e497a ("iio: adc: ad7124: allow more than 8 channels") Signed-off-by: Dumitru Ceclan <dumitru.ceclan(a)analog.com> Reviewed-by: Nuno Sa <nuno.sa(a)analog.com> Link: https://patch.msgid.link/20240806085133.114547-1-dumitru.ceclan@analog.com Cc: <Stable(a)vger.kernel.org> Signed-off-by: Jonathan Cameron <Jonathan.Cameron(a)huawei.com> Signed-off-by: He Lugang <helugang(a)uniontech.com> --- drivers/iio/adc/ad7124.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/drivers/iio/adc/ad7124.c b/drivers/iio/adc/ad7124.c index e7b1d517d3de..089398a7664a 100644 --- a/drivers/iio/adc/ad7124.c +++ b/drivers/iio/adc/ad7124.c @@ -837,8 +837,6 @@ static int ad7124_parse_channel_config(struct iio_dev *indio_dev, st->channels = channels; device_for_each_child_node_scoped(dev, child) { - cfg = &st->channels[channel].cfg; - ret = fwnode_property_read_u32(child, "reg", &channel); if (ret) return ret; @@ -856,6 +854,7 @@ static int ad7124_parse_channel_config(struct iio_dev *indio_dev, st->channels[channel].ain = AD7124_CHANNEL_AINP(ain[0]) | AD7124_CHANNEL_AINM(ain[1]); + cfg = &st->channels[channel].cfg; cfg->bipolar = fwnode_property_read_bool(child, "bipolar"); ret = fwnode_property_read_u32(child, "adi,reference-select", &tmp); -- 2.45.2

8 months

1
0
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror September 2024