March 2025 - Linux-stable-mirror

x86 kexec problem in stable 6.1.129 and later due to change related to PGD allocation

by Elias Rudberg

Hello, The following change seems to cause kexec to sometimes fail (not every time but about 50% chance) for the stable 6.1 kernels, 6.1.129 and later: 6821918f4519 ("x86/kexec: Allocate PGD for x86_64 transition page tables separately") The commit message for that commit states that it is dependent on another change "x86/mm: Add _PAGE_NOPTISHADOW bit to avoid updating userspace page tables" but that change does not seem to have been done in the 6.1 kernel series, which could explain why the 6821918f4519 change causes problems for 6.1. This appears to be a problem only for 6.1, for the 6.6 and later stable kernels there is no problem. I think the reason this problem is seen only for 6.1 and not for 6.6 and later is that the change "x86/kexec: Allocate PGD for x86_64 transition page tables separately" relies on things that are not available in 6.1. In the tests I have done, kexec is called via u-root. More details are available here: https://git.glasklar.is/system-transparency/core/stboot/-/issues/227 Cheers, Elias

5 months, 3 weeks

1
0
0 0

[PATCH 5.10] btrfs: have proper error handling in btrfs_init_reloc_root

by Ilia Gavrilov

From: Josef Bacik <josef(a)toxicpanda.com> commit 00bb36a0e76ab7e94bdd70d561baf25f9bc1415d upstream. create_reloc_root will return errors in the future, and __add_reloc_root can return ENOMEM or EEXIST, so handle these errors properly. Signed-off-by: Josef Bacik <josef(a)toxicpanda.com> Reviewed-by: David Sterba <dsterba(a)suse.com> Signed-off-by: David Sterba <dsterba(a)suse.com> Signed-off-by: Ilia Gavrilov <Ilia.Gavrilov(a)infotecs.ru> --- fs/btrfs/relocation.c | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/fs/btrfs/relocation.c b/fs/btrfs/relocation.c index 5b921e6ed94e..b0d34879e267 100644 --- a/fs/btrfs/relocation.c +++ b/fs/btrfs/relocation.c @@ -878,9 +878,15 @@ int btrfs_init_reloc_root(struct btrfs_trans_handle *trans, reloc_root = create_reloc_root(trans, root, root->root_key.objectid); if (clear_rsv) trans->block_rsv = rsv; + if (IS_ERR(reloc_root)) + return PTR_ERR(reloc_root); ret = __add_reloc_root(reloc_root); - BUG_ON(ret < 0); + if (ret) { + /* Pairs with create_reloc_root */ + btrfs_put_root(reloc_root); + return ret; + } root->reloc_root = btrfs_grab_root(reloc_root); return 0; } -- 2.39.5

5 months, 3 weeks

1
0
0 0

Manufacturers and Engineers Accurate Contacts

by Debbie McCoy

Hello, Outdated or inaccurate contact data wastes valuable time. We provide highly accurate, *verified contact lists of Engineers, Manufacturers and Purchasing Managers Contacts*, ensuring you connect with the right people. Would you like to see a sample? If so, please let me know your *target geography* I’ll be happy to share details. Just a note that we can customize the lists to meet any specific requirements based on your criteria. Wishing you a wonderful day! Debbie McCoy Manager, Demand Generation If you ever feel like opting out, simply reply with "remove me" in the subject line

5 months, 3 weeks

1
0
0 0

[PATCH 6.13 000/241] 6.13.8-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.13.8 release. There are 241 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 21 Mar 2025 14:29:55 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.13.8-rc1… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.13.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.13.8-rc1 Max Kellermann <max.kellermann(a)ionos.com> fs/netfs/read_collect: add to next->prev_donated Alex Henrie <alexhenrie24(a)gmail.com> HID: apple: disable Fn key handling on the Omoton KB066 Daniel Wagner <wagi(a)kernel.org> nvme-fc: rely on state transitions to handle connectivity loss Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix corrupted list in hci_chan_del Lucas De Marchi <lucas.demarchi(a)intel.com> drm/xe/guc: Fix size_t print format Andrea Righi <arighi(a)nvidia.com> tools/sched_ext: Add helper to check task migration state Andrea Righi <arighi(a)nvidia.com> sched_ext: selftests/dsp_local_on: Fix selftest on UP systems Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: Fix match_session bug preventing session reuse Steve French <stfrench(a)microsoft.com> smb3: add support for IAKerb Ge Yang <yangge1116(a)126.com> mm/hugetlb: wait for hugetlb folios to be freed Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> i2c: sis630: Fix an error handling path in sis630_probe() Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> i2c: ali15x3: Fix an error handling path in ali15x3_probe() Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> i2c: ali1535: Fix an error handling path in ali1535_probe() Ajay Kaher <ajay.kaher(a)broadcom.com> x86/vmware: Parse MP tables for SEV-SNP enabled guests under VMware hypervisors Murad Masimov <m.masimov(a)mt-integration.ru> cifs: Fix integer overflow while processing closetimeo mount option Murad Masimov <m.masimov(a)mt-integration.ru> cifs: Fix integer overflow while processing actimeo mount option Murad Masimov <m.masimov(a)mt-integration.ru> cifs: Fix integer overflow while processing acdirmax mount option Murad Masimov <m.masimov(a)mt-integration.ru> cifs: Fix integer overflow while processing acregmax mount option Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org> gpio: cdev: use raw notifier for line state events Shin'ichiro Kawasaki <shinichiro.kawasaki(a)wdc.com> block: change blk_mq_add_to_batch() third argument type to bool Tamir Duberstein <tamird(a)gmail.com> scripts: generate_rust_analyzer: add uapi crate Tamir Duberstein <tamird(a)gmail.com> scripts: generate_rust_analyzer: add missing include_dirs Tamir Duberstein <tamird(a)gmail.com> scripts: generate_rust_analyzer: add missing macros deps José Roberto de Souza <jose.souza(a)intel.com> drm/i915: Increase I915_PARAM_MMAP_GTT_VERSION version to indicate support for partial mmaps Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe() Shin'ichiro Kawasaki <shinichiro.kawasaki(a)wdc.com> nvme: move error logging from nvme_end_req() to __nvme_end_req() Rodrigo Vivi <rodrigo.vivi(a)intel.com> drm/xe/pm: Temporarily disable D3Cold on BMG Thomas Hellström <thomas.hellstrom(a)linux.intel.com> drm/xe/userptr: Fix an incorrect assert Tejas Upadhyay <tejas.upadhyay(a)intel.com> drm/xe: Release guc ids before cancelling work Tejas Upadhyay <tejas.upadhyay(a)intel.com> drm/xe: cancel pending job timer before freeing scheduler Bard Liao <yung-chuan.liao(a)linux.intel.com> ASoC: rt722-sdca: add missing readable registers Alban Kurti <kurti(a)invicto.ai> rust: init: add missing newline to pr_info! calls Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: cs42l43: Fix maximum ADC Volume Ivan Abramov <i.abramov(a)mt-integration.ru> drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data() Alban Kurti <kurti(a)invicto.ai> rust: error: add missing newline to pr_warn! calls Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: ops: Consistently treat platform_max as control value Andrea Righi <arighi(a)nvidia.com> sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() Andrei Botila <andrei.botila(a)oss.nxp.com> net: phy: nxp-c45-tja11xx: add TJA112XB SGMII PCS restart errata Andrei Botila <andrei.botila(a)oss.nxp.com> net: phy: nxp-c45-tja11xx: add TJA112X PHY configuration errata Shradha Gupta <shradhagupta(a)linux.microsoft.com> net: mana: cleanup mana struct after debugfs_remove() Paulo Alcantara <pc(a)manguebit.com> smb: client: fix regression with guest option Haoxiang Li <haoxiang_li2024(a)163.com> qlcnic: fix memory leak issues in qlcnic_sriov_common.c Piotr Jaroszynski <pjaroszynski(a)nvidia.com> Fix mmu notifiers for range-based invalidates Zhenhua Huang <quic_zhenhuah(a)quicinc.com> arm64: mm: Populate vmemmap at the page level if not section aligned Kent Overstreet <kent.overstreet(a)linux.dev> dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature Mina Almasry <almasrymina(a)google.com> netmem: prevent TX of unreadable skbs Thomas Mizrahi <thomasmizra(a)gmail.com> ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: Intel: sof_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() Thorsten Blum <thorsten.blum(a)linux.dev> ASoC: tegra: Fix ADX S24_LE audio format Peter Griffin <peter.griffin(a)linaro.org> clk: samsung: gs101: fix synchronous external abort in samsung_clk_save() Varada Pavani <v.pavani(a)samsung.com> clk: samsung: update PLL locktime for PLL142XX used on FSD platform Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: prevent connection release during oplock break notification Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free in ksmbd_free_work_struct Mario Limonciello <mario.limonciello(a)amd.com> drm/amd/display: Fix slab-use-after-free on hdcp_work Alex Hung <alex.hung(a)amd.com> drm/amd/display: Assign normalized_pix_clk when color depth = 14 Mario Limonciello <mario.limonciello(a)amd.com> drm/amd/display: Restore correct backlight brightness after a GPU reset Aliaksei Urbanski <aliaksei.urbanski(a)gmail.com> drm/amd/display: fix missing .is_two_pixels_per_container Mario Limonciello <mario.limonciello(a)amd.com> drm/amd/display: fix default brightness Leo Li <sunpeng.li(a)amd.com> drm/amd/display: Disable unneeded hpd interrupts during dm_init David Rosca <david.rosca(a)amd.com> drm/amdgpu/display: Allow DCC for video formats on GFX12 Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/vce2: fix ip block reference Yifan Zha <Yifan.Zha(a)amd.com> drm/amd/amdkfd: Evict all queues even HWS remove queue failed Natalie Vock <natalie.vock(a)gmx.de> drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags Imre Deak <imre.deak(a)intel.com> drm/dp_mst: Fix locking when skipping CSN before topology probing Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/atomic: Filter out redundant DPMS calls Miguel Ojeda <ojeda(a)kernel.org> drm/panic: fix overindented list items in documentation Miguel Ojeda <ojeda(a)kernel.org> drm/panic: use `div_ceil` to clean Clippy warning Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/cdclk: Do cdclk post plane programming later Conor Dooley <conor.dooley(a)microchip.com> spi: microchip-core: prevent RX overflows when transmit size > FIFO size Florent Revest <revest(a)chromium.org> x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes Benno Lossin <benno.lossin(a)proton.me> rust: init: fix `Zeroable` implementation for `Option<NonNull<T>>` and `Option<KBox<T>>` Matthew Maurer <mmaurer(a)google.com> rust: Disallow BTF generation with Rust + LTO Tamir Duberstein <tamird(a)gmail.com> rust: alloc: satisfy POSIX alignment requirement Miguel Ojeda <ojeda(a)kernel.org> rust: remove leftover mentions of the `alloc` crate Mitchell Levy <levymitchell0(a)gmail.com> rust: lockdep: Remove support for dynamically allocated LockClassKeys Johan Hovold <johan(a)kernel.org> USB: serial: option: match on interface class for Telit FN990B Fabio Porcedda <fabio.porcedda(a)gmail.com> USB: serial: option: fix Telit Cinterion FE990A name Fabio Porcedda <fabio.porcedda(a)gmail.com> USB: serial: option: add Telit Cinterion FE990B compositions Boon Khai Ng <boon.khai.ng(a)intel.com> USB: serial: ftdi_sio: add support for Altera USB Blaster 3 Amit Sunil Dhamne <amitsd(a)google.com> usb: typec: tcpm: fix state transition for SNK_WAIT_CAPABILITIES state in run_state_machine() Werner Sembach <wse(a)tuxedocomputers.com> Input: i8042 - swap old quirk combination with new quirk for more devices Werner Sembach <wse(a)tuxedocomputers.com> Input: i8042 - swap old quirk combination with new quirk for several devices Werner Sembach <wse(a)tuxedocomputers.com> Input: i8042 - add required quirks for missing old boardnames Werner Sembach <wse(a)tuxedocomputers.com> Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ Antheas Kapenekakis <lkml(a)antheas.dev> Input: xpad - rename QH controller to Legion Go S Antheas Kapenekakis <lkml(a)antheas.dev> Input: xpad - add support for TECNO Pocket Go Antheas Kapenekakis <lkml(a)antheas.dev> Input: xpad - add support for ZOTAC Gaming Zone Pavel Rojtberg <rojtberg(a)gmail.com> Input: xpad - add multiple supported devices Nilton Perim Neto <niltonperimneto(a)gmail.com> Input: xpad - add 8BitDo SN30 Pro, Hyperkin X91 and Gamesir G7 SE controllers Jeff LaBundy <jeff(a)labundy.com> Input: iqs7222 - preserve system status register H. Nikolaus Schaller <hns(a)goldelico.com> Input: ads7846 - fix gpiod allocation Luca Weiss <luca.weiss(a)fairphone.com> Input: goodix-berlin - fix vddio regulator references Keith Busch <kbusch(a)kernel.org> vhost: return task creation error instead of NULL Ming Lei <ming.lei(a)redhat.com> block: fix 'kmem_cache of name 'bio-108' already exists' Frederic Weisbecker <frederic(a)kernel.org> net: Handle napi_schedule() calls from non-interrupt Thomas Zimmermann <tzimmermann(a)suse.de> drm/nouveau: Do not override forced connector status Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: safety check before fallback Aaron Ma <aaron.ma(a)canonical.com> perf/x86/rapl: Add support for Intel Arrow Lake U Arnd Bergmann <arnd(a)arndb.de> x86/irq: Define trace events conditionally Dmytro Maluka <dmaluka(a)chromium.org> x86/of: Don't use DTB for SMP setup if ACPI is enabled Kan Liang <kan.liang(a)linux.intel.com> perf/x86/intel: Use better start period for frequency mode Harry Wentland <harry.wentland(a)amd.com> drm/vkms: Round fixp2int conversion in lerp_u16 Bard Liao <yung-chuan.liao(a)linux.intel.com> ASoC: SOF: Intel: don't check number of sdw links when set dmic_fixup Nicolas Frattaroli <nicolas.frattaroli(a)collabora.com> ASoC: dapm-graph: set fill colour of turned on nodes Miklos Szeredi <mszeredi(a)redhat.com> fuse: don't truncate cached, mutated symlink Hector Martin <marcan(a)marcan.st> ASoC: tas2764: Set the SDOUT polarity correctly Hector Martin <marcan(a)marcan.st> ASoC: tas2764: Fix power control mask Hector Martin <marcan(a)marcan.st> ASoC: tas2770: Fix volume scale Andrew Davis <afd(a)ti.com> phy: ti: gmii-sel: Do not use syscon helper to build regmap Daniel Wagner <wagi(a)kernel.org> nvme: only allow entering LIVE from CONNECTING state Yu-Chun Lin <eleanor15x(a)gmail.com> sctp: Fix undefined behavior in left shift operation Pali Rohár <pali(a)kernel.org> cifs: Treat unhandled directory name surrogate reparse points as mount directory nodes Pali Rohár <pali(a)kernel.org> cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from parse_reparse_point() José Roberto de Souza <jose.souza(a)intel.com> drm/xe: Make GUC binaries dump consistent with other binaries in devcoredump Hector Martin <marcan(a)marcan.st> apple-nvme: Release power domains when probe fails Ruozhu Li <david.li(a)jaguarmicro.com> nvmet-rdma: recheck queue state is LIVE in state lock in recv done Christopher Lentocha <christopherericlentocha(a)gmail.com> nvme-pci: quirk Acer FA100 for non-uniqueue identifiers Uday Shankar <ushankar(a)purestorage.com> io-wq: backoff when retrying worker creation Stephan Gerhold <stephan.gerhold(a)linaro.org> net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> ASoC: SOF: amd: Add post_fw_run_delay ACP quirk Pierre-Louis Bossart <pierre-louis.bossart(a)linux.dev> ALSA: hda: hda-intel: add Panther Lake-H support Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: Intel: pci-ptl: Add support for PTL-H Pierre-Louis Bossart <pierre-louis.bossart(a)linux.dev> ALSA: hda: intel-dsp-config: Add PTL-H support Pierre-Louis Bossart <pierre-louis.bossart(a)linux.dev> PCI: pci_ids: add INTEL_HDA_PTL_H Terry Cheong <htcheong(a)chromium.org> ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module Vitaly Rodionov <vitalyr(a)opensource.cirrus.com> ASoC: arizona/madera: use fsleep() in up/down DAPM event delays. Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: rsnd: adjust convert rate limitation Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime() Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: rsnd: indicate unsupported clock rate Edson Juliano Drosdeck <edson.drosdeck(a)gmail.com> ALSA: hda/realtek: Limit mic boost on Positivo ARN50 Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: simple-card-utils.c: add missing dlc->of_node Bard Liao <yung-chuan.liao(a)linux.intel.com> ASoC: Intel: soc-acpi-intel-mtl-match: declare adr as ull Uday M Bhat <uday.m.bhat(a)intel.com> ASoC: Intel: sof_sdw: Add support for Fatcat board with BT offload enabled in PTL platform Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S14 Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: Intel: sof_sdw: Add lookup of quirk using PCI subsystem ID Jiayuan Chen <mrpre(a)163.com> selftests/bpf: Fix invalid flag of recv() Shigeru Yoshida <syoshida(a)redhat.com> selftests/bpf: Adjust data size to have ETH_HLEN Maxime Ripard <mripard(a)kernel.org> drm/tests: hdmi: Fix recursive locking Maxime Ripard <mripard(a)kernel.org> drm/tests: hdmi: Reorder DRM entities variables assignment Maxime Ripard <mripard(a)kernel.org> drm/tests: hdmi: Remove redundant assignments Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd Jan Beulich <jbeulich(a)suse.com> Xen/swiotlb: mark xen_swiotlb_fixup() __init Beata Michalska <beata.michalska(a)arm.com> arm64: amu: Delay allocating cpumask for AMU FIE support Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Set host with kernel mode when switch to VM mode Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Fix kernel_page_present() for KPRANGE/XKPRANGE Daniel Lezcano <daniel.lezcano(a)linaro.org> thermal/cpufreq_cooling: Remove structure member documentation Peter Oberparleiter <oberpar(a)linux.ibm.com> s390/cio: Fix CHPID "configure" attribute caching Sakari Ailus <sakari.ailus(a)linux.intel.com> platform/x86: int3472: Call "reset" GPIO "enable" for INT347E Sakari Ailus <sakari.ailus(a)linux.intel.com> platform/x86: int3472: Use correct type for "polarity", call it gpio_flags Mark Pearson <mpearson-lenovo(a)squebb.ca> platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles Sybil Isabel Dorsett <sybdorsett(a)proton.me> platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e Jann Horn <jannh(a)google.com> sched: Clarify wake_up_q()'s write to task->wake_q.next Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Ignore dangling jump table entries Matthew Wilcox (Oracle) <willy(a)infradead.org> btrfs: fix two misuses of folio_shift() Alex Henrie <alexhenrie24(a)gmail.com> HID: apple: fix up the F6 key on the Omoton KB066 keyboard Ievgen Vovk <YevgenVovk(a)ukr.net> HID: hid-apple: Apple Magic Keyboard a3203 USB-C support Bharadwaj Raju <bharadwaj.raju777(a)gmail.com> selftests/cgroup: use bash in test_cpuset_v1_hp.sh Daniel Brackenbury <daniel.brackenbury(a)gmail.com> HID: topre: Fix n-key rollover on Realforce R3S TKL boards Zhang Lixu <lixu.zhang(a)intel.com> HID: intel-ish-hid: ipc: Add Panther Lake PCI device IDs Alexander Stein <alexander.stein(a)ew.tq-group.com> usb: phy: generic: Use proper helper for property detection Vicki Pfau <vi(a)endrift.com> HID: hid-steam: Fix issues with disabling both gamepad mode and lizard mode Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> HID: ignore non-functional sensor in HP 5MP Camera Zhang Lixu <lixu.zhang(a)intel.com> HID: intel-ish-hid: Send clock sync message immediately after reset Zhang Lixu <lixu.zhang(a)intel.com> HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell Tejun Heo <tj(a)kernel.org> sched_ext: selftests/dsp_local_on: Fix sporadic failures Miklos Szeredi <mszeredi(a)redhat.com> selftests: always check mask returned by statmount(2) Brahmajit Das <brahmajit.xyz(a)gmail.com> vboxsf: fix building with GCC 15 Eric W. Biederman <ebiederm(a)xmission.com> alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support Paulo Alcantara <pc(a)manguebit.com> smb: client: fix noisy when tree connecting to DFS interlink targets Gannon Kolding <gannon.kolding(a)gmail.com> ACPI: resource: IRQ override for Eluktronics MECH-17 Masahiro Yamada <masahiroy(a)kernel.org> kbuild: keep symbols for symbol_get() even with CONFIG_TRIM_UNUSED_KSYMS Magnus Lindholm <linmag7(a)gmail.com> scsi: qla1280: Fix kernel oops when debug level > 2 Seunghui Lee <sh043.lee(a)samsung.com> scsi: ufs: core: Fix error return with query response Rik van Riel <riel(a)surriel.com> scsi: core: Use GFP_NOIO to avoid circular locking dependency Alex Hung <alex.hung(a)amd.com> drm/amd/display: Fix out-of-bound accesses Dmitry Kandybka <d.kandybka(a)gmail.com> platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show() Christian Loehle <christian.loehle(a)arm.com> sched/debug: Provide slice length for fair tasks Chengen Du <chengen.du(a)canonical.com> iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() Xu Lu <luxu.kernel(a)bytedance.com> irqchip/riscv: Ensure ordering of memory writes and IPI writes Jens Axboe <axboe(a)kernel.dk> futex: Pass in task to futex_queue() Filipe Manana <fdmanana(a)suse.com> btrfs: avoid starting new transaction when cleaning qgroup during subvolume drop Joe Hattori <joe(a)pf.is.s.u-tokyo.ac.jp> powercap: call put_device() on an error path in powercap_register_control_type() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> hrtimers: Mark is_migration_base() with __always_inline Daniel Wagner <wagi(a)kernel.org> nvme-fc: do not ignore connectivity loss during connecting Daniel Wagner <wagi(a)kernel.org> nvme-fc: go straight to connecting state when initializing Carolina Jubran <cjubran(a)nvidia.com> net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices Jianbo Liu <jianbol(a)nvidia.com> net/mlx5: Bridge, fix the crash caused by LAG state check Shay Drory <shayd(a)nvidia.com> net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch Shay Drory <shayd(a)nvidia.com> net/mlx5: Fix incorrect IRQ pool usage when releasing IRQs Vlad Dogaru <vdogaru(a)nvidia.com> net/mlx5: HWS, Rightsize bwc matcher priority Xin Long <lucien.xin(a)gmail.com> Revert "openvswitch: switch to per-action label counting in conntrack" Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: remove misbehaving actions length check Guillaume Nault <gnault(a)redhat.com> gre: Fix IPv6 link-local address generation. Alexey Kashavkin <akashavkin(a)gmail.com> netfilter: nft_exthdr: fix offset with ipv4_find_option() Cong Wang <xiyou.wangcong(a)gmail.com> net_sched: Prevent creation of classes with TC_H_ROOT Dan Carpenter <dan.carpenter(a)linaro.org> ipvs: prevent integer overflow in do_ip_vs_get_ctl() Kohei Enju <enjuk(a)amazon.com> netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() Benjamin Berg <benjamin.berg(a)intel.com> wifi: mac80211: fix MPDU length parsing for EHT 5/6 GHz Justin Lai <justinlai0215(a)realtek.com> rtase: Fix improper release of ring list entries in rtase_sw_reset Hangbin Liu <liuhangbin(a)gmail.com> selftests: bonding: fix incorrect mac address Hangbin Liu <liuhangbin(a)gmail.com> bonding: fix incorrect MAC address setting to receive NS messages Matt Johnston <matt(a)codeconstruct.com.au> net: mctp: unshare packets when reassembling Amit Cohen <amcohen(a)nvidia.com> net: switchdev: Convert blocking notification chain to a raw one Taehee Yoo <ap420073(a)gmail.com> eth: bnxt: fix memory leak in queue reset Taehee Yoo <ap420073(a)gmail.com> eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx | tx} Taehee Yoo <ap420073(a)gmail.com> eth: bnxt: do not update checksum in bnxt_xdp_build_skb() Taehee Yoo <ap420073(a)gmail.com> eth: bnxt: do not use BNXT_VNIC_NTUPLE unconditionally in queue restart logic Taehee Yoo <ap420073(a)gmail.com> eth: bnxt: return fail if interface is down in bnxt_queue_mem_alloc() Taehee Yoo <ap420073(a)gmail.com> eth: bnxt: fix truesize for mb-xdp-pass case Wentao Liang <vulab(a)iscas.ac.cn> net/mlx5: handle errors in mlx5_chains_create_table() Michael Kelley <mhklinux(a)outlook.com> Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio() Saurabh Sengar <ssengar(a)linux.microsoft.com> fbdev: hyperv_fb: Allow graceful removal of framebuffer Saurabh Sengar <ssengar(a)linux.microsoft.com> fbdev: hyperv_fb: Simplify hvfb_putmem Michael Kelley <mhklinux(a)outlook.com> fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs Michael Kelley <mhklinux(a)outlook.com> drm/hyperv: Fix address space leak when Hyper-V DRM device is removed Breno Leitao <leitao(a)debian.org> netpoll: hold rcu read lock in __netpoll_send_skb() Matt Johnston <matt(a)codeconstruct.com.au> net: mctp i2c: Copy headers if cloned Matt Johnston <matt(a)codeconstruct.com.au> net: mctp i3c: Copy headers if cloned Joseph Huang <Joseph.Huang(a)garmin.com> net: dsa: mv88e6xxx: Verify after ATU Load ops Jiri Pirko <jiri(a)resnulli.us> net/mlx5: Fill out devlink dev info only for PFs Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context" Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: hci_event: Fix enabling passive scanning Pauli Virtanen <pav(a)iki.fi> Bluetooth: SCO: fix sco_conn refcounting on sco_conn_ready Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: cfg80211: cancel wiphy_work before freeing wiphy Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: mac80211: don't queue sdata::work for a non-running sdata Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: fix PNVM timeout for non-MSI-X platforms Jun Yang <juny24602(a)gmail.com> sched: address a potential NULL pointer dereference in the GRED scheduler. Florian Westphal <fw(a)strlen.de> netfilter: nf_tables: make destruction work queue pernet Nicklas Bo Jensen <njensen(a)akamai.com> netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap around Marcin Szycik <marcin.szycik(a)linux.intel.com> ice: Fix switchdev slow-path in LAG Grzegorz Nitka <grzegorz.nitka(a)intel.com> ice: fix memory leak in aRFS after reset Larysa Zaremba <larysa.zaremba(a)intel.com> ice: do not configure destination override for switchdev Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template. Charles Han <hanchunchao(a)inspur.com> pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw Artur Weber <aweber.kernel(a)gmail.com> pinctrl: bcm281xx: Fix incorrect regmap max_registers value Michael Kelley <mhklinux(a)outlook.com> fbdev: hyperv_fb: iounmap() the correct memory when removing a device Alexey Kardashevskiy <aik(a)amd.com> virt: sev-guest: Move SNP Guest Request data pages handling under snp_cmd_mutex Uladzislau Rezki (Sony) <urezki(a)gmail.com> mm/slab/kvfree_rcu: Switch to WQ_MEM_RECLAIM wq Suren Baghdasaryan <surenb(a)google.com> userfaultfd: fix PTE unmapping stack-allocated PTE copies Barry Song <baohua(a)kernel.org> mm: fix kernel BUG when userfaultfd_move encounters swapcache ------------- Diffstat: Documentation/rust/quick-start.rst | 2 +- Makefile | 4 +- arch/alpha/include/asm/elf.h | 6 +- arch/alpha/include/asm/pgtable.h | 2 +- arch/alpha/include/asm/processor.h | 8 +- arch/alpha/kernel/osf_sys.c | 11 +- arch/arm64/include/asm/tlbflush.h | 22 +-- arch/arm64/kernel/topology.c | 22 ++- arch/arm64/mm/mmu.c | 5 +- arch/loongarch/kvm/switch.S | 2 +- arch/loongarch/mm/pageattr.c | 3 +- arch/x86/events/intel/core.c | 85 +++++++++ arch/x86/events/rapl.c | 1 + arch/x86/include/asm/sev.h | 6 +- arch/x86/kernel/cpu/microcode/amd.c | 2 +- arch/x86/kernel/cpu/vmware.c | 4 + arch/x86/kernel/devicetree.c | 3 +- arch/x86/kernel/irq.c | 2 + arch/x86/kvm/mmu/mmu.c | 2 +- block/bio.c | 2 +- drivers/acpi/resource.c | 6 + drivers/block/null_blk/main.c | 4 +- drivers/block/virtio_blk.c | 5 +- drivers/clk/samsung/clk-gs101.c | 8 - drivers/clk/samsung/clk-pll.c | 7 +- drivers/firmware/iscsi_ibft.c | 5 +- drivers/gpio/gpiolib-cdev.c | 15 +- drivers/gpio/gpiolib.c | 8 +- drivers/gpio/gpiolib.h | 5 +- drivers/gpu/drm/amd/amdgpu/gmc_v12_0.c | 5 +- drivers/gpu/drm/amd/amdgpu/vce_v2_0.c | 2 +- .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 8 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 12 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c | 1 + .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_irq.c | 64 +++++-- .../drm/amd/display/amdgpu_dm/amdgpu_dm_plane.c | 7 +- drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 7 +- .../amd/display/dc/dce60/dce60_timing_generator.c | 1 + .../dc/dml2/dml21/dml21_translation_helper.c | 4 +- .../amd/display/dc/dml2/dml2_translation_helper.c | 6 +- drivers/gpu/drm/display/drm_dp_mst_topology.c | 40 +++-- drivers/gpu/drm/drm_atomic_uapi.c | 4 + drivers/gpu/drm/drm_connector.c | 4 + drivers/gpu/drm/drm_panic_qr.rs | 16 +- drivers/gpu/drm/gma500/mid_bios.c | 5 + drivers/gpu/drm/hyperv/hyperv_drm_drv.c | 2 + drivers/gpu/drm/i915/display/intel_display.c | 5 +- drivers/gpu/drm/i915/gem/i915_gem_mman.c | 5 +- drivers/gpu/drm/nouveau/nouveau_connector.c | 1 - drivers/gpu/drm/tests/drm_hdmi_state_helper_test.c | 193 ++++++++++----------- drivers/gpu/drm/vkms/vkms_composer.c | 2 +- drivers/gpu/drm/xe/xe_guc_ct.c | 6 +- drivers/gpu/drm/xe/xe_guc_log.c | 3 +- drivers/gpu/drm/xe/xe_guc_submit.c | 4 +- drivers/gpu/drm/xe/xe_hmm.c | 6 +- drivers/gpu/drm/xe/xe_pm.c | 13 +- drivers/hid/Kconfig | 3 +- drivers/hid/hid-apple.c | 13 +- drivers/hid/hid-ids.h | 3 + drivers/hid/hid-quirks.c | 1 + drivers/hid/hid-steam.c | 6 +- drivers/hid/hid-topre.c | 7 + drivers/hid/intel-ish-hid/ipc/hw-ish.h | 2 + drivers/hid/intel-ish-hid/ipc/ipc.c | 15 +- drivers/hid/intel-ish-hid/ipc/pci-ish.c | 7 + drivers/hid/intel-ish-hid/ishtp/ishtp-dev.h | 2 + drivers/hv/vmbus_drv.c | 13 ++ drivers/i2c/busses/i2c-ali1535.c | 12 +- drivers/i2c/busses/i2c-ali15x3.c | 12 +- drivers/i2c/busses/i2c-sis630.c | 12 +- drivers/input/joystick/xpad.c | 39 ++++- drivers/input/misc/iqs7222.c | 50 +++--- drivers/input/serio/i8042-acpipnpio.h | 111 ++++++------ drivers/input/touchscreen/ads7846.c | 2 +- drivers/input/touchscreen/goodix_berlin_core.c | 24 +-- drivers/irqchip/irq-riscv-imsic-early.c | 2 +- drivers/irqchip/irq-thead-c900-aclint-sswi.c | 2 +- drivers/md/dm-flakey.c | 2 +- drivers/net/bonding/bond_options.c | 55 +++++- drivers/net/dsa/mv88e6xxx/chip.c | 59 +++++-- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 25 ++- drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 13 +- drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.h | 3 +- drivers/net/ethernet/intel/ice/ice_arfs.c | 2 +- drivers/net/ethernet/intel/ice/ice_eswitch.c | 6 - drivers/net/ethernet/intel/ice/ice_lag.c | 27 +++ drivers/net/ethernet/intel/ice/ice_lib.c | 18 -- drivers/net/ethernet/intel/ice/ice_lib.h | 4 - drivers/net/ethernet/intel/ice/ice_txrx.c | 4 +- drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 3 + .../ethernet/mellanox/mlx5/core/en/rep/bridge.c | 12 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 6 +- drivers/net/ethernet/mellanox/mlx5/core/eq.c | 2 +- .../net/ethernet/mellanox/mlx5/core/irq_affinity.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c | 4 +- drivers/net/ethernet/mellanox/mlx5/core/lag/lag.h | 1 + .../net/ethernet/mellanox/mlx5/core/lag/mpesw.c | 3 +- .../ethernet/mellanox/mlx5/core/lib/fs_chains.c | 5 + drivers/net/ethernet/mellanox/mlx5/core/mlx5_irq.h | 4 +- drivers/net/ethernet/mellanox/mlx5/core/pci_irq.c | 13 +- drivers/net/ethernet/mellanox/mlx5/core/pci_irq.h | 2 +- .../ethernet/mellanox/mlx5/core/steering/hws/bwc.h | 2 +- drivers/net/ethernet/microsoft/mana/gdma_main.c | 11 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 10 +- .../ethernet/qlogic/qlcnic/qlcnic_sriov_common.c | 8 +- drivers/net/ethernet/realtek/rtase/rtase_main.c | 10 ++ drivers/net/mctp/mctp-i2c.c | 5 + drivers/net/mctp/mctp-i3c.c | 5 + drivers/net/phy/nxp-c45-tja11xx.c | 68 ++++++++ drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 6 +- drivers/net/wwan/mhi_wwan_mbim.c | 2 +- drivers/nvme/host/apple.c | 5 +- drivers/nvme/host/core.c | 14 +- drivers/nvme/host/fc.c | 59 +------ drivers/nvme/host/pci.c | 7 +- drivers/nvme/target/rdma.c | 33 ++-- drivers/phy/ti/phy-gmii-sel.c | 15 +- drivers/pinctrl/bcm/pinctrl-bcm281xx.c | 2 +- drivers/pinctrl/nuvoton/pinctrl-npcm8xx.c | 3 + drivers/platform/x86/intel/int3472/discrete.c | 85 ++++++--- drivers/platform/x86/intel/pmc/core.c | 4 +- drivers/platform/x86/thinkpad_acpi.c | 50 ++++-- drivers/powercap/powercap_sys.c | 3 +- drivers/s390/cio/chp.c | 3 +- drivers/scsi/qla1280.c | 2 +- drivers/scsi/scsi_scan.c | 2 +- drivers/spi/spi-microchip-core.c | 41 ++--- drivers/thermal/cpufreq_cooling.c | 2 - drivers/ufs/core/ufshcd.c | 7 +- drivers/usb/phy/phy-generic.c | 2 +- drivers/usb/serial/ftdi_sio.c | 14 ++ drivers/usb/serial/ftdi_sio_ids.h | 13 ++ drivers/usb/serial/option.c | 48 +++-- drivers/usb/typec/tcpm/tcpm.c | 8 +- drivers/vhost/vhost.c | 2 +- drivers/video/fbdev/hyperv_fb.c | 52 ++++-- drivers/virt/coco/sev-guest/sev-guest.c | 63 ++++--- drivers/xen/swiotlb-xen.c | 2 +- fs/btrfs/extent_io.c | 11 +- fs/btrfs/qgroup.c | 6 +- fs/fuse/dir.c | 2 +- fs/namei.c | 24 ++- fs/netfs/read_collect.c | 2 +- fs/smb/client/asn1.c | 2 + fs/smb/client/cifs_spnego.c | 4 +- fs/smb/client/cifsglob.h | 4 + fs/smb/client/connect.c | 16 +- fs/smb/client/fs_context.c | 18 +- fs/smb/client/inode.c | 13 ++ fs/smb/client/reparse.c | 5 +- fs/smb/client/sess.c | 3 +- fs/smb/client/smb2pdu.c | 4 +- fs/smb/common/smbfsctl.h | 3 + fs/smb/server/connection.c | 20 +++ fs/smb/server/connection.h | 2 + fs/smb/server/ksmbd_work.c | 3 - fs/smb/server/ksmbd_work.h | 1 - fs/smb/server/oplock.c | 43 +++-- fs/smb/server/oplock.h | 1 - fs/smb/server/server.c | 14 +- fs/vboxsf/super.c | 3 +- include/asm-generic/vmlinux.lds.h | 1 + include/linux/blk-mq.h | 16 +- include/linux/fs.h | 2 + include/linux/hugetlb.h | 5 + include/linux/module.h | 5 +- include/linux/pci_ids.h | 1 + include/net/bluetooth/hci_core.h | 108 ++++-------- include/net/bluetooth/l2cap.h | 3 +- include/net/netfilter/nf_tables.h | 4 +- include/sound/soc.h | 5 +- init/Kconfig | 2 +- io_uring/futex.c | 2 +- io_uring/io-wq.c | 23 ++- kernel/futex/core.c | 5 +- kernel/futex/futex.h | 11 +- kernel/futex/pi.c | 2 +- kernel/futex/waitwake.c | 4 +- kernel/rcu/tree.c | 14 +- kernel/sched/core.c | 5 +- kernel/sched/debug.c | 2 + kernel/sched/ext.c | 3 + kernel/time/hrtimer.c | 22 +-- kernel/vhost_task.c | 4 +- mm/hugetlb.c | 8 + mm/page_isolation.c | 10 ++ mm/userfaultfd.c | 91 ++++++++-- net/bluetooth/hci_core.c | 10 +- net/bluetooth/hci_event.c | 37 ++-- net/bluetooth/iso.c | 6 - net/bluetooth/l2cap_core.c | 181 +++++++++---------- net/bluetooth/l2cap_sock.c | 15 +- net/bluetooth/rfcomm/core.c | 6 - net/bluetooth/sco.c | 25 ++- net/core/dev.c | 5 +- net/core/netpoll.c | 9 +- net/ipv6/addrconf.c | 15 +- net/mac80211/eht.c | 9 +- net/mac80211/util.c | 8 +- net/mctp/route.c | 10 +- net/mctp/test/route-test.c | 109 ++++++++++++ net/mptcp/protocol.h | 2 + net/netfilter/ipvs/ip_vs_ctl.c | 8 +- net/netfilter/nf_conncount.c | 6 +- net/netfilter/nf_tables_api.c | 24 +-- net/netfilter/nft_compat.c | 8 +- net/netfilter/nft_ct.c | 6 +- net/netfilter/nft_exthdr.c | 10 +- net/openvswitch/conntrack.c | 30 ++-- net/openvswitch/datapath.h | 3 + net/openvswitch/flow_netlink.c | 15 +- net/sched/sch_api.c | 6 + net/sched/sch_gred.c | 3 +- net/sctp/stream.c | 2 +- net/switchdev/switchdev.c | 25 ++- net/wireless/core.c | 7 + rust/kernel/alloc/allocator_test.rs | 18 ++ rust/kernel/error.rs | 2 +- rust/kernel/init.rs | 23 ++- rust/kernel/init/macros.rs | 6 +- rust/kernel/lib.rs | 2 +- rust/kernel/sync.rs | 16 +- scripts/generate_rust_analyzer.py | 71 ++++---- scripts/mod/modpost.c | 35 ++++ scripts/mod/modpost.h | 6 + scripts/module.lds.S | 1 + scripts/rustdoc_test_gen.rs | 4 +- sound/hda/intel-dsp-config.c | 5 + sound/pci/hda/hda_intel.c | 2 + sound/pci/hda/patch_realtek.c | 1 + sound/soc/amd/yc/acp6x-mach.c | 7 + sound/soc/codecs/arizona.c | 14 +- sound/soc/codecs/cs42l43.c | 2 +- sound/soc/codecs/madera.c | 10 +- sound/soc/codecs/rt722-sdca-sdw.c | 4 + sound/soc/codecs/tas2764.c | 10 +- sound/soc/codecs/tas2764.h | 8 +- sound/soc/codecs/tas2770.c | 2 +- sound/soc/codecs/wm0010.c | 13 +- sound/soc/codecs/wm5110.c | 8 +- sound/soc/generic/simple-card-utils.c | 1 + sound/soc/intel/boards/sof_sdw.c | 43 ++++- sound/soc/intel/common/soc-acpi-intel-mtl-match.c | 2 +- sound/soc/renesas/rcar/core.c | 14 -- sound/soc/renesas/rcar/rsnd.h | 1 - sound/soc/renesas/rcar/src.c | 116 ++++++++++--- sound/soc/renesas/rcar/ssi.c | 3 +- sound/soc/soc-ops.c | 15 +- sound/soc/sof/amd/acp-ipc.c | 23 ++- sound/soc/sof/amd/acp.c | 1 + sound/soc/sof/amd/acp.h | 1 + sound/soc/sof/amd/vangogh.c | 18 ++ sound/soc/sof/intel/hda-codec.c | 1 + sound/soc/sof/intel/hda.c | 18 +- sound/soc/sof/intel/pci-ptl.c | 1 + sound/soc/tegra/tegra210_adx.c | 4 +- tools/objtool/check.c | 9 + tools/sched_ext/include/scx/common.bpf.h | 11 ++ tools/sound/dapm-graph | 2 +- .../selftests/bpf/prog_tests/sockmap_basic.c | 6 +- .../selftests/bpf/prog_tests/xdp_cpumap_attach.c | 4 +- .../selftests/bpf/prog_tests/xdp_devmap_attach.c | 8 +- .../testing/selftests/cgroup/test_cpuset_v1_hp.sh | 2 +- .../selftests/drivers/net/bonding/bond_options.sh | 4 +- .../filesystems/statmount/statmount_test.c | 22 ++- .../testing/selftests/sched_ext/dsp_local_on.bpf.c | 2 +- 266 files changed, 2455 insertions(+), 1273 deletions(-)

5 months, 3 weeks

15
255
0 0

BUG in LTS 5.15.x cpusets with tasks launched by newer systemd

by James Thomas

Hello all, I encountered an issue with the CPU affinity of tasks launched by systemd in a slice, after updating from systemd 254 to by systemd >= 256, on the LTS 5.15.x branch (tested on v5.15.179). Despite the slice file stipulating AllowedCPUS=2 (and confirming this was set in /sys/fs/cgroup/test.slice/cpuset.cpus) tasks launched in the slice would have the CPU affinity of the system.slice (i.e all by default) rather than 2. To reproduce: * Check kernel version and systemd version (I used a debian testing image for testing) ``` # uname -r 5.15.179 # systemctl --version systemd 257 (257.4-3) ... ``` * Create a test.slice with AllowedCPUS=2 ``` # cat <<EOF > /usr/lib/systemd/system/test.slice [Unit] Description=Test slice Before=slices.target [Slice] AllowedCPUs=2 [Install] WantedBy=slices.target EOF # systemctl daemon-reload && systemctl start test.slice ``` * Confirm cpuset ``` # cat /sys/fs/cgroup/test.slice/cpuset.cpus 2 ``` * Launch task in slice ``` # systemd-run --slice test.slice yes Running as unit: run-r9187b97c6958498aad5bba213289ac56.service; invocation ID: f470f74047ac43b7a60861d03a7ef6f9 # cat /sys/fs/cgroup/test.slice/run-r9187b97c6958498aad5bba213289ac56.service/cgroup.procs 317 ``` # Check affinity ``` # taskset -pc 317 pid 317's current affinity list: 0-7 ``` This issue is fixed by applying upstream commits: 18f9a4d47527772515ad6cbdac796422566e6440 cgroup/cpuset: Skip spread flags update on v2 and 42a11bf5c5436e91b040aeb04063be1710bb9f9c cgroup/cpuset: Make cpuset_fork() handle CLONE_INTO_CGROUP properly With these applied: ``` # systemd-run --slice test.slice yes Running as unit: run-r442c444559ff49f48c6c2b8325b3b500.service; invocation ID: 5211167267154e9292cb6b854585cb91 # cat /sys/fs/cgroup/test.slice/run-r442c444559ff49f48c6c2b8325b3b500.service/cgroup.procs 291 # taskset -pc 291 pid 291's current affinity list: 2 ``` Perhaps these are a good candidate for backport onto the 5.15 LTS branch? Thanks James

5 months, 3 weeks

1
0
0 0

[PATCH v2] exfat: fix random stack corruption after get_block

by Sungjong Seo

When get_block is called with a buffer_head allocated on the stack, such as do_mpage_readpage, stack corruption due to buffer_head UAF may occur in the following race condition situation. <CPU 0> <CPU 1> mpage_read_folio <<bh on stack>> do_mpage_readpage exfat_get_block bh_read __bh_read get_bh(bh) submit_bh wait_on_buffer ... end_buffer_read_sync __end_buffer_read_notouch unlock_buffer <<keep going>> ... ... ... ... <<bh is not valid out of mpage_read_folio>> . . another_function <<variable A on stack>> put_bh(bh) atomic_dec(bh->b_count) * stack corruption here * This patch returns -EAGAIN if a folio does not have buffers when bh_read needs to be called. By doing this, the caller can fallback to functions like block_read_full_folio(), create a buffer_head in the folio, and then call get_block again. Let's do not call bh_read() with on-stack buffer_head. Fixes: 11a347fb6cef ("exfat: change to get file size from DataLength") Cc: stable(a)vger.kernel.org Tested-by: Yeongjin Gil <youngjin.gil(a)samsung.com> Signed-off-by: Sungjong Seo <sj1557.seo(a)samsung.com> --- v2: - clear_buffer_mapped if there is any errors. - remove unnecessary BUG_ON() --- fs/exfat/inode.c | 39 +++++++++++++++++++++++++++++++++------ 1 file changed, 33 insertions(+), 6 deletions(-) diff --git a/fs/exfat/inode.c b/fs/exfat/inode.c index 96952d4acb50..f3fdba9f4d21 100644 --- a/fs/exfat/inode.c +++ b/fs/exfat/inode.c @@ -344,7 +344,8 @@ static int exfat_get_block(struct inode *inode, sector_t iblock, * The block has been partially written, * zero the unwritten part and map the block. */ - loff_t size, off, pos; + loff_t size, pos; + void *addr; max_blocks = 1; @@ -355,17 +356,41 @@ static int exfat_get_block(struct inode *inode, sector_t iblock, if (!bh_result->b_folio) goto done; + /* + * No buffer_head is allocated. + * (1) bmap: It's enough to fill bh_result without I/O. + * (2) read: The unwritten part should be filled with 0 + * If a folio does not have any buffers, + * let's returns -EAGAIN to fallback to + * per-bh IO like block_read_full_folio(). + */ + if (!folio_buffers(bh_result->b_folio)) { + err = -EAGAIN; + goto done; + } + pos = EXFAT_BLK_TO_B(iblock, sb); size = ei->valid_size - pos; - off = pos & (PAGE_SIZE - 1); + addr = folio_address(bh_result->b_folio) + + offset_in_folio(bh_result->b_folio, pos); + + /* Check if bh->b_data points to proper addr in folio */ + if (bh_result->b_data != addr) { + exfat_fs_error_ratelimit(sb, + "b_data(%p) != folio_addr(%p)", + bh_result->b_data, addr); + err = -EINVAL; + goto done; + } - folio_set_bh(bh_result, bh_result->b_folio, off); + /* Read a block */ err = bh_read(bh_result, 0); if (err < 0) - goto unlock_ret; + goto done; - folio_zero_segment(bh_result->b_folio, off + size, - off + sb->s_blocksize); + /* Zero unwritten part of a block */ + memset(bh_result->b_data + size, 0, + bh_result->b_size - size); } else { /* * The range has not been written, clear the mapped flag @@ -376,6 +401,8 @@ static int exfat_get_block(struct inode *inode, sector_t iblock, } done: bh_result->b_size = EXFAT_BLK_TO_B(max_blocks, sb); + if (err < 0) + clear_buffer_mapped(bh_result); unlock_ret: mutex_unlock(&sbi->s_lock); return err; -- 2.25.1

5 months, 3 weeks

3
2
0 0

6.1.132-rc1 build regression on ia64 (and possibly other architectures)

by Frank Scheiner

Hi again, also for 6.1.132-rc1 the review hasn't started yet, but as it was already available on [1], our CI has also tried to built it for ia64 in the morning. Unfortunately that failed, too - I assume due to the following **missing** upstream commit: https://web.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/comm… [1]: https://web.git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.… Build failure (see [2]): ``` [...] In file included from ./include/linux/string.h:5, from ./include/linux/uuid.h:12, from ./fs/xfs/xfs_linux.h:10, from ./fs/xfs/xfs.h:22, from fs/xfs/libxfs/xfs_alloc.c:6: fs/xfs/libxfs/xfs_alloc.c: In function '__xfs_free_extent_later': fs/xfs/libxfs/xfs_alloc.c:2551:51: error: 'mp' undeclared (first use in this function); did you mean 'tp'? 2551 | if (XFS_IS_CORRUPT(mp, !xfs_verify_fsbext(mp, bno, len))) | ^~ ./include/linux/compiler.h:78:45: note: in definition of macro 'unlikely' 78 | # define unlikely(x) __builtin_expect(!!(x), 0) | ^ fs/xfs/libxfs/xfs_alloc.c:2551:13: note: in expansion of macro 'XFS_IS_CORRUPT' 2551 | if (XFS_IS_CORRUPT(mp, !xfs_verify_fsbext(mp, bno, len))) | ^~~~~~~~~~~~~~ fs/xfs/libxfs/xfs_alloc.c:2551:51: note: each undeclared identifier is reported only once for each function it appears in 2551 | if (XFS_IS_CORRUPT(mp, !xfs_verify_fsbext(mp, bno, len))) | ^~ ./include/linux/compiler.h:78:45: note: in definition of macro 'unlikely' 78 | # define unlikely(x) __builtin_expect(!!(x), 0) | ^ fs/xfs/libxfs/xfs_alloc.c:2551:13: note: in expansion of macro 'XFS_IS_CORRUPT' 2551 | if (XFS_IS_CORRUPT(mp, !xfs_verify_fsbext(mp, bno, len))) | ^~~~~~~~~~~~~~ ./fs/xfs/xfs_linux.h:225:63: warning: left-hand operand of comma expression has no effect [-Wunused-value] 225 | __this_address), \ | ^ fs/xfs/libxfs/xfs_alloc.c:2551:13: note: in expansion of macro 'XFS_IS_CORRUPT' 2551 | if (XFS_IS_CORRUPT(mp, !xfs_verify_fsbext(mp, bno, len))) | ^~~~~~~~~~~~~~ make[5]: *** [scripts/Makefile.build:250: fs/xfs/libxfs/xfs_alloc.o] Error 1 [...] ``` [2]: https://github.com/linux-ia64/linux-stable-rc/actions/runs/13914712427/job/… [3] (7dfee17b13e5024c5c0ab1911859ded4182de3e5 upstream) introduced the XFS_IS_CORRUPT macro call now in `fs/xfs/libxfs/xfs_alloc.c:2551`, but the struct "mp" is only there when DEBUG is defined in 6.1.132-rc1. The above upstream commit (f6b3846) moves "mp" out of that guard and hence should fix that specific build regression IIUC. Again not build-tested yet, though. [3]: https://web.git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.… Cheers, Frank

5 months, 3 weeks

4
4
0 0

[PATCH V2] tracing/osnoise: Fix possible recursive locking for cpus_read_lock()

by Ran Xiaokai

From: Ran Xiaokai <ran.xiaokai(a)zte.com.cn> Lockdep reports this deadlock log: osnoise: could not start sampling thread ============================================ WARNING: possible recursive locking detected -------------------------------------------- CPU0 ---- lock(cpu_hotplug_lock); lock(cpu_hotplug_lock); Call Trace: <TASK> print_deadlock_bug+0x282/0x3c0 __lock_acquire+0x1610/0x29a0 lock_acquire+0xcb/0x2d0 cpus_read_lock+0x49/0x120 stop_per_cpu_kthreads+0x7/0x60 start_kthread+0x103/0x120 osnoise_hotplug_workfn+0x5e/0x90 process_one_work+0x44f/0xb30 worker_thread+0x33e/0x5e0 kthread+0x206/0x3b0 ret_from_fork+0x31/0x50 ret_from_fork_asm+0x11/0x20 </TASK> This is the deadlock scenario: osnoise_hotplug_workfn() guard(cpus_read_lock)(); // first lock call start_kthread(cpu) if (IS_ERR(kthread)) { stop_per_cpu_kthreads(); { cpus_read_lock(); // second lock call. Cause the AA deadlock } } It is not necessary to call stop_per_cpu_kthreads() which stops osnoise kthread for every other CPUs in the system if a failure occurs during hotplug of a certain CPU. For start_per_cpu_kthreads(), if the start_kthread() call fails, this function calls stop_per_cpu_kthreads() to handle the error. Therefore, similarly, there is no need to call stop_per_cpu_kthreads() again within start_kthread(). So just remove stop_per_cpu_kthreads() from start_kthread to solve this issue. Fixes: c8895e271f79 ("trace/osnoise: Support hotplug operations") Signed-off-by: Ran Xiaokai <ran.xiaokai(a)zte.com.cn> --- kernel/trace/trace_osnoise.c | 1 - 1 file changed, 1 deletion(-) diff --git a/kernel/trace/trace_osnoise.c b/kernel/trace/trace_osnoise.c index 647516a73fa2..e732c9e37e14 100644 --- a/kernel/trace/trace_osnoise.c +++ b/kernel/trace/trace_osnoise.c @@ -2006,7 +2006,6 @@ static int start_kthread(unsigned int cpu) if (IS_ERR(kthread)) { pr_err(BANNER "could not start sampling thread\n"); - stop_per_cpu_kthreads(); return -ENOMEM; } -- 2.17.1

5 months, 3 weeks

2
1
0 0

[PATCH 6.12 000/231] 6.12.20-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.20 release. There are 231 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 21 Mar 2025 14:29:55 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.20-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.20-rc1 Max Kellermann <max.kellermann(a)ionos.com> fs/netfs/read_collect: add to next->prev_donated Alex Henrie <alexhenrie24(a)gmail.com> HID: apple: disable Fn key handling on the Omoton KB066 Daniel Wagner <wagi(a)kernel.org> nvme-fc: rely on state transitions to handle connectivity loss Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix corrupted list in hci_chan_del Andrea Righi <arighi(a)nvidia.com> tools/sched_ext: Add helper to check task migration state Andrea Righi <arighi(a)nvidia.com> sched_ext: selftests/dsp_local_on: Fix selftest on UP systems Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: Fix match_session bug preventing session reuse Steve French <stfrench(a)microsoft.com> smb3: add support for IAKerb Ge Yang <yangge1116(a)126.com> mm/hugetlb: wait for hugetlb folios to be freed Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> i2c: sis630: Fix an error handling path in sis630_probe() Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> i2c: ali15x3: Fix an error handling path in ali15x3_probe() Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> i2c: ali1535: Fix an error handling path in ali1535_probe() Ajay Kaher <ajay.kaher(a)broadcom.com> x86/vmware: Parse MP tables for SEV-SNP enabled guests under VMware hypervisors Murad Masimov <m.masimov(a)mt-integration.ru> cifs: Fix integer overflow while processing closetimeo mount option Murad Masimov <m.masimov(a)mt-integration.ru> cifs: Fix integer overflow while processing actimeo mount option Murad Masimov <m.masimov(a)mt-integration.ru> cifs: Fix integer overflow while processing acdirmax mount option Murad Masimov <m.masimov(a)mt-integration.ru> cifs: Fix integer overflow while processing acregmax mount option Shin'ichiro Kawasaki <shinichiro.kawasaki(a)wdc.com> block: change blk_mq_add_to_batch() third argument type to bool Tamir Duberstein <tamird(a)gmail.com> scripts: generate_rust_analyzer: add uapi crate Tamir Duberstein <tamird(a)gmail.com> scripts: generate_rust_analyzer: add missing include_dirs Tamir Duberstein <tamird(a)gmail.com> scripts: generate_rust_analyzer: add missing macros deps José Roberto de Souza <jose.souza(a)intel.com> drm/i915: Increase I915_PARAM_MMAP_GTT_VERSION version to indicate support for partial mmaps Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe() Shin'ichiro Kawasaki <shinichiro.kawasaki(a)wdc.com> nvme: move error logging from nvme_end_req() to __nvme_end_req() Rodrigo Vivi <rodrigo.vivi(a)intel.com> drm/xe/pm: Temporarily disable D3Cold on BMG Thomas Hellström <thomas.hellstrom(a)linux.intel.com> drm/xe/userptr: Fix an incorrect assert Tejas Upadhyay <tejas.upadhyay(a)intel.com> drm/xe: Release guc ids before cancelling work Tejas Upadhyay <tejas.upadhyay(a)intel.com> drm/xe: cancel pending job timer before freeing scheduler Bard Liao <yung-chuan.liao(a)linux.intel.com> ASoC: rt722-sdca: add missing readable registers Alban Kurti <kurti(a)invicto.ai> rust: init: add missing newline to pr_info! calls Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: cs42l43: Fix maximum ADC Volume Ivan Abramov <i.abramov(a)mt-integration.ru> drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data() Alban Kurti <kurti(a)invicto.ai> rust: error: add missing newline to pr_warn! calls Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: ops: Consistently treat platform_max as control value Andrea Righi <arighi(a)nvidia.com> sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() Andrei Botila <andrei.botila(a)oss.nxp.com> net: phy: nxp-c45-tja11xx: add TJA112XB SGMII PCS restart errata Andrei Botila <andrei.botila(a)oss.nxp.com> net: phy: nxp-c45-tja11xx: add TJA112X PHY configuration errata Paulo Alcantara <pc(a)manguebit.com> smb: client: fix regression with guest option Haoxiang Li <haoxiang_li2024(a)163.com> qlcnic: fix memory leak issues in qlcnic_sriov_common.c Piotr Jaroszynski <pjaroszynski(a)nvidia.com> Fix mmu notifiers for range-based invalidates Zhenhua Huang <quic_zhenhuah(a)quicinc.com> arm64: mm: Populate vmemmap at the page level if not section aligned Kent Overstreet <kent.overstreet(a)linux.dev> dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature Mina Almasry <almasrymina(a)google.com> netmem: prevent TX of unreadable skbs Thomas Mizrahi <thomasmizra(a)gmail.com> ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: Intel: sof_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() Peter Griffin <peter.griffin(a)linaro.org> clk: samsung: gs101: fix synchronous external abort in samsung_clk_save() Varada Pavani <v.pavani(a)samsung.com> clk: samsung: update PLL locktime for PLL142XX used on FSD platform Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: prevent connection release during oplock break notification Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free in ksmbd_free_work_struct Mario Limonciello <mario.limonciello(a)amd.com> drm/amd/display: Fix slab-use-after-free on hdcp_work Alex Hung <alex.hung(a)amd.com> drm/amd/display: Assign normalized_pix_clk when color depth = 14 Mario Limonciello <mario.limonciello(a)amd.com> drm/amd/display: Restore correct backlight brightness after a GPU reset Aliaksei Urbanski <aliaksei.urbanski(a)gmail.com> drm/amd/display: fix missing .is_two_pixels_per_container Mario Limonciello <mario.limonciello(a)amd.com> drm/amd/display: fix default brightness Leo Li <sunpeng.li(a)amd.com> drm/amd/display: Disable unneeded hpd interrupts during dm_init David Rosca <david.rosca(a)amd.com> drm/amdgpu/display: Allow DCC for video formats on GFX12 Yifan Zha <Yifan.Zha(a)amd.com> drm/amd/amdkfd: Evict all queues even HWS remove queue failed Natalie Vock <natalie.vock(a)gmx.de> drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags Imre Deak <imre.deak(a)intel.com> drm/dp_mst: Fix locking when skipping CSN before topology probing Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/atomic: Filter out redundant DPMS calls Miguel Ojeda <ojeda(a)kernel.org> drm/panic: fix overindented list items in documentation Miguel Ojeda <ojeda(a)kernel.org> drm/panic: use `div_ceil` to clean Clippy warning Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/cdclk: Do cdclk post plane programming later Conor Dooley <conor.dooley(a)microchip.com> spi: microchip-core: prevent RX overflows when transmit size > FIFO size Florent Revest <revest(a)chromium.org> x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes Benno Lossin <benno.lossin(a)proton.me> rust: init: fix `Zeroable` implementation for `Option<NonNull<T>>` and `Option<KBox<T>>` Matthew Maurer <mmaurer(a)google.com> rust: Disallow BTF generation with Rust + LTO Tamir Duberstein <tamird(a)gmail.com> rust: alloc: satisfy POSIX alignment requirement Miguel Ojeda <ojeda(a)kernel.org> rust: remove leftover mentions of the `alloc` crate Mitchell Levy <levymitchell0(a)gmail.com> rust: lockdep: Remove support for dynamically allocated LockClassKeys Johan Hovold <johan(a)kernel.org> USB: serial: option: match on interface class for Telit FN990B Fabio Porcedda <fabio.porcedda(a)gmail.com> USB: serial: option: fix Telit Cinterion FE990A name Fabio Porcedda <fabio.porcedda(a)gmail.com> USB: serial: option: add Telit Cinterion FE990B compositions Boon Khai Ng <boon.khai.ng(a)intel.com> USB: serial: ftdi_sio: add support for Altera USB Blaster 3 Werner Sembach <wse(a)tuxedocomputers.com> Input: i8042 - swap old quirk combination with new quirk for more devices Werner Sembach <wse(a)tuxedocomputers.com> Input: i8042 - swap old quirk combination with new quirk for several devices Werner Sembach <wse(a)tuxedocomputers.com> Input: i8042 - add required quirks for missing old boardnames Werner Sembach <wse(a)tuxedocomputers.com> Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ Antheas Kapenekakis <lkml(a)antheas.dev> Input: xpad - rename QH controller to Legion Go S Antheas Kapenekakis <lkml(a)antheas.dev> Input: xpad - add support for TECNO Pocket Go Antheas Kapenekakis <lkml(a)antheas.dev> Input: xpad - add support for ZOTAC Gaming Zone Pavel Rojtberg <rojtberg(a)gmail.com> Input: xpad - add multiple supported devices Nilton Perim Neto <niltonperimneto(a)gmail.com> Input: xpad - add 8BitDo SN30 Pro, Hyperkin X91 and Gamesir G7 SE controllers Jeff LaBundy <jeff(a)labundy.com> Input: iqs7222 - preserve system status register H. Nikolaus Schaller <hns(a)goldelico.com> Input: ads7846 - fix gpiod allocation Luca Weiss <luca.weiss(a)fairphone.com> Input: goodix-berlin - fix vddio regulator references Pali Rohár <pali(a)kernel.org> cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from parse_reparse_point() Pali Rohár <pali(a)kernel.org> cifs: Validate content of WSL reparse point buffers Keith Busch <kbusch(a)kernel.org> vhost: return task creation error instead of NULL Ming Lei <ming.lei(a)redhat.com> block: fix 'kmem_cache of name 'bio-108' already exists' Frederic Weisbecker <frederic(a)kernel.org> net: Handle napi_schedule() calls from non-interrupt Thomas Zimmermann <tzimmermann(a)suse.de> drm/nouveau: Do not override forced connector status Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: safety check before fallback Aaron Ma <aaron.ma(a)canonical.com> perf/x86/rapl: Add support for Intel Arrow Lake U Arnd Bergmann <arnd(a)arndb.de> x86/irq: Define trace events conditionally Dmytro Maluka <dmaluka(a)chromium.org> x86/of: Don't use DTB for SMP setup if ACPI is enabled Kan Liang <kan.liang(a)linux.intel.com> perf/x86/intel: Use better start period for frequency mode Harry Wentland <harry.wentland(a)amd.com> drm/vkms: Round fixp2int conversion in lerp_u16 Bard Liao <yung-chuan.liao(a)linux.intel.com> ASoC: SOF: Intel: don't check number of sdw links when set dmic_fixup Nicolas Frattaroli <nicolas.frattaroli(a)collabora.com> ASoC: dapm-graph: set fill colour of turned on nodes Miklos Szeredi <mszeredi(a)redhat.com> fuse: don't truncate cached, mutated symlink Hector Martin <marcan(a)marcan.st> ASoC: tas2764: Set the SDOUT polarity correctly Hector Martin <marcan(a)marcan.st> ASoC: tas2764: Fix power control mask Hector Martin <marcan(a)marcan.st> ASoC: tas2770: Fix volume scale Andrew Davis <afd(a)ti.com> phy: ti: gmii-sel: Do not use syscon helper to build regmap Daniel Wagner <wagi(a)kernel.org> nvme: only allow entering LIVE from CONNECTING state Yu-Chun Lin <eleanor15x(a)gmail.com> sctp: Fix undefined behavior in left shift operation Pali Rohár <pali(a)kernel.org> cifs: Treat unhandled directory name surrogate reparse points as mount directory nodes Hector Martin <marcan(a)marcan.st> apple-nvme: Release power domains when probe fails Ruozhu Li <david.li(a)jaguarmicro.com> nvmet-rdma: recheck queue state is LIVE in state lock in recv done Christopher Lentocha <christopherericlentocha(a)gmail.com> nvme-pci: quirk Acer FA100 for non-uniqueue identifiers Uday Shankar <ushankar(a)purestorage.com> io-wq: backoff when retrying worker creation Stephan Gerhold <stephan.gerhold(a)linaro.org> net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> ASoC: SOF: amd: Add post_fw_run_delay ACP quirk Pierre-Louis Bossart <pierre-louis.bossart(a)linux.dev> ALSA: hda: hda-intel: add Panther Lake-H support Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: Intel: pci-ptl: Add support for PTL-H Pierre-Louis Bossart <pierre-louis.bossart(a)linux.dev> ALSA: hda: intel-dsp-config: Add PTL-H support Pierre-Louis Bossart <pierre-louis.bossart(a)linux.dev> PCI: pci_ids: add INTEL_HDA_PTL_H Terry Cheong <htcheong(a)chromium.org> ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module Vitaly Rodionov <vitalyr(a)opensource.cirrus.com> ASoC: arizona/madera: use fsleep() in up/down DAPM event delays. Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: rsnd: adjust convert rate limitation Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime() Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: rsnd: indicate unsupported clock rate Edson Juliano Drosdeck <edson.drosdeck(a)gmail.com> ALSA: hda/realtek: Limit mic boost on Positivo ARN50 Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: simple-card-utils.c: add missing dlc->of_node Bard Liao <yung-chuan.liao(a)linux.intel.com> ASoC: Intel: soc-acpi-intel-mtl-match: declare adr as ull Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S14 Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: Intel: sof_sdw: Add lookup of quirk using PCI subsystem ID Jiayuan Chen <mrpre(a)163.com> selftests/bpf: Fix invalid flag of recv() Maxime Ripard <mripard(a)kernel.org> drm/tests: hdmi: Fix recursive locking Maxime Ripard <mripard(a)kernel.org> drm/tests: hdmi: Reorder DRM entities variables assignment Maxime Ripard <mripard(a)kernel.org> drm/tests: hdmi: Remove redundant assignments Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd Jan Beulich <jbeulich(a)suse.com> Xen/swiotlb: mark xen_swiotlb_fixup() __init Beata Michalska <beata.michalska(a)arm.com> arm64: amu: Delay allocating cpumask for AMU FIE support Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Set host with kernel mode when switch to VM mode Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Fix kernel_page_present() for KPRANGE/XKPRANGE Daniel Lezcano <daniel.lezcano(a)linaro.org> thermal/cpufreq_cooling: Remove structure member documentation Peter Oberparleiter <oberpar(a)linux.ibm.com> s390/cio: Fix CHPID "configure" attribute caching Sakari Ailus <sakari.ailus(a)linux.intel.com> platform/x86: int3472: Call "reset" GPIO "enable" for INT347E Sakari Ailus <sakari.ailus(a)linux.intel.com> platform/x86: int3472: Use correct type for "polarity", call it gpio_flags Mark Pearson <mpearson-lenovo(a)squebb.ca> platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles Sybil Isabel Dorsett <sybdorsett(a)proton.me> platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e Jann Horn <jannh(a)google.com> sched: Clarify wake_up_q()'s write to task->wake_q.next Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Ignore dangling jump table entries Matthew Wilcox (Oracle) <willy(a)infradead.org> btrfs: fix two misuses of folio_shift() Alex Henrie <alexhenrie24(a)gmail.com> HID: apple: fix up the F6 key on the Omoton KB066 keyboard Ievgen Vovk <YevgenVovk(a)ukr.net> HID: hid-apple: Apple Magic Keyboard a3203 USB-C support Bharadwaj Raju <bharadwaj.raju777(a)gmail.com> selftests/cgroup: use bash in test_cpuset_v1_hp.sh Daniel Brackenbury <daniel.brackenbury(a)gmail.com> HID: topre: Fix n-key rollover on Realforce R3S TKL boards Zhang Lixu <lixu.zhang(a)intel.com> HID: intel-ish-hid: ipc: Add Panther Lake PCI device IDs Alexander Stein <alexander.stein(a)ew.tq-group.com> usb: phy: generic: Use proper helper for property detection Vicki Pfau <vi(a)endrift.com> HID: hid-steam: Fix issues with disabling both gamepad mode and lizard mode Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> HID: ignore non-functional sensor in HP 5MP Camera Zhang Lixu <lixu.zhang(a)intel.com> HID: intel-ish-hid: Send clock sync message immediately after reset Zhang Lixu <lixu.zhang(a)intel.com> HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell Tejun Heo <tj(a)kernel.org> sched_ext: selftests/dsp_local_on: Fix sporadic failures Miklos Szeredi <mszeredi(a)redhat.com> selftests: always check mask returned by statmount(2) Brahmajit Das <brahmajit.xyz(a)gmail.com> vboxsf: fix building with GCC 15 Eric W. Biederman <ebiederm(a)xmission.com> alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support Paulo Alcantara <pc(a)manguebit.com> smb: client: fix noisy when tree connecting to DFS interlink targets Gannon Kolding <gannon.kolding(a)gmail.com> ACPI: resource: IRQ override for Eluktronics MECH-17 Magnus Lindholm <linmag7(a)gmail.com> scsi: qla1280: Fix kernel oops when debug level > 2 Seunghui Lee <sh043.lee(a)samsung.com> scsi: ufs: core: Fix error return with query response Rik van Riel <riel(a)surriel.com> scsi: core: Use GFP_NOIO to avoid circular locking dependency Alex Hung <alex.hung(a)amd.com> drm/amd/display: Fix out-of-bound accesses Dmitry Kandybka <d.kandybka(a)gmail.com> platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show() Christian Loehle <christian.loehle(a)arm.com> sched/debug: Provide slice length for fair tasks Chengen Du <chengen.du(a)canonical.com> iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() Jens Axboe <axboe(a)kernel.dk> futex: Pass in task to futex_queue() Filipe Manana <fdmanana(a)suse.com> btrfs: avoid starting new transaction when cleaning qgroup during subvolume drop Joe Hattori <joe(a)pf.is.s.u-tokyo.ac.jp> powercap: call put_device() on an error path in powercap_register_control_type() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> hrtimers: Mark is_migration_base() with __always_inline Daniel Wagner <wagi(a)kernel.org> nvme-fc: do not ignore connectivity loss during connecting Daniel Wagner <wagi(a)kernel.org> nvme-fc: go straight to connecting state when initializing Carolina Jubran <cjubran(a)nvidia.com> net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices Jianbo Liu <jianbol(a)nvidia.com> net/mlx5: Bridge, fix the crash caused by LAG state check Shay Drory <shayd(a)nvidia.com> net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch Shay Drory <shayd(a)nvidia.com> net/mlx5: Fix incorrect IRQ pool usage when releasing IRQs Vlad Dogaru <vdogaru(a)nvidia.com> net/mlx5: HWS, Rightsize bwc matcher priority Xin Long <lucien.xin(a)gmail.com> Revert "openvswitch: switch to per-action label counting in conntrack" Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: remove misbehaving actions length check Guillaume Nault <gnault(a)redhat.com> gre: Fix IPv6 link-local address generation. Alexey Kashavkin <akashavkin(a)gmail.com> netfilter: nft_exthdr: fix offset with ipv4_find_option() Cong Wang <xiyou.wangcong(a)gmail.com> net_sched: Prevent creation of classes with TC_H_ROOT Dan Carpenter <dan.carpenter(a)linaro.org> ipvs: prevent integer overflow in do_ip_vs_get_ctl() Kohei Enju <enjuk(a)amazon.com> netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() Justin Lai <justinlai0215(a)realtek.com> rtase: Fix improper release of ring list entries in rtase_sw_reset Hangbin Liu <liuhangbin(a)gmail.com> selftests: bonding: fix incorrect mac address Hangbin Liu <liuhangbin(a)gmail.com> bonding: fix incorrect MAC address setting to receive NS messages Matt Johnston <matt(a)codeconstruct.com.au> net: mctp: unshare packets when reassembling Amit Cohen <amcohen(a)nvidia.com> net: switchdev: Convert blocking notification chain to a raw one Taehee Yoo <ap420073(a)gmail.com> eth: bnxt: fix memory leak in queue reset David Wei <dw(a)davidwei.uk> bnxt_en: handle tpa_info in queue API implementation David Wei <dw(a)davidwei.uk> bnxt_en: refactor tpa_info alloc/free into helpers Jakub Kicinski <kuba(a)kernel.org> eth: bnxt: use page pool for head frags Taehee Yoo <ap420073(a)gmail.com> eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx | tx} Taehee Yoo <ap420073(a)gmail.com> eth: bnxt: do not update checksum in bnxt_xdp_build_skb() Taehee Yoo <ap420073(a)gmail.com> eth: bnxt: do not use BNXT_VNIC_NTUPLE unconditionally in queue restart logic Taehee Yoo <ap420073(a)gmail.com> eth: bnxt: return fail if interface is down in bnxt_queue_mem_alloc() Taehee Yoo <ap420073(a)gmail.com> eth: bnxt: fix truesize for mb-xdp-pass case Wentao Liang <vulab(a)iscas.ac.cn> net/mlx5: handle errors in mlx5_chains_create_table() Michael Kelley <mhklinux(a)outlook.com> Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio() Saurabh Sengar <ssengar(a)linux.microsoft.com> fbdev: hyperv_fb: Allow graceful removal of framebuffer Saurabh Sengar <ssengar(a)linux.microsoft.com> fbdev: hyperv_fb: Simplify hvfb_putmem Michael Kelley <mhklinux(a)outlook.com> fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs Michael Kelley <mhklinux(a)outlook.com> drm/hyperv: Fix address space leak when Hyper-V DRM device is removed Breno Leitao <leitao(a)debian.org> netpoll: hold rcu read lock in __netpoll_send_skb() Matt Johnston <matt(a)codeconstruct.com.au> net: mctp i2c: Copy headers if cloned Matt Johnston <matt(a)codeconstruct.com.au> net: mctp i3c: Copy headers if cloned Joseph Huang <Joseph.Huang(a)garmin.com> net: dsa: mv88e6xxx: Verify after ATU Load ops Jiri Pirko <jiri(a)resnulli.us> net/mlx5: Fill out devlink dev info only for PFs Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context" Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: hci_event: Fix enabling passive scanning Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: cfg80211: cancel wiphy_work before freeing wiphy Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: mac80211: don't queue sdata::work for a non-running sdata Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: fix PNVM timeout for non-MSI-X platforms Jun Yang <juny24602(a)gmail.com> sched: address a potential NULL pointer dereference in the GRED scheduler. Florian Westphal <fw(a)strlen.de> netfilter: nf_tables: make destruction work queue pernet Nicklas Bo Jensen <njensen(a)akamai.com> netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap around Marcin Szycik <marcin.szycik(a)linux.intel.com> ice: Fix switchdev slow-path in LAG Grzegorz Nitka <grzegorz.nitka(a)intel.com> ice: fix memory leak in aRFS after reset Larysa Zaremba <larysa.zaremba(a)intel.com> ice: do not configure destination override for switchdev Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template. Charles Han <hanchunchao(a)inspur.com> pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw Artur Weber <aweber.kernel(a)gmail.com> pinctrl: bcm281xx: Fix incorrect regmap max_registers value Michael Kelley <mhklinux(a)outlook.com> fbdev: hyperv_fb: iounmap() the correct memory when removing a device Suren Baghdasaryan <surenb(a)google.com> userfaultfd: fix PTE unmapping stack-allocated PTE copies Barry Song <baohua(a)kernel.org> mm: fix kernel BUG when userfaultfd_move encounters swapcache Uladzislau Rezki (Sony) <urezki(a)gmail.com> mm/slab/kvfree_rcu: Switch to WQ_MEM_RECLAIM wq ------------- Diffstat: Documentation/rust/quick-start.rst | 2 +- Makefile | 4 +- arch/alpha/include/asm/elf.h | 6 +- arch/alpha/include/asm/pgtable.h | 2 +- arch/alpha/include/asm/processor.h | 8 +- arch/alpha/kernel/osf_sys.c | 11 +- arch/arm64/include/asm/tlbflush.h | 22 +- arch/arm64/kernel/topology.c | 22 +- arch/arm64/mm/mmu.c | 5 +- arch/loongarch/kvm/switch.S | 2 +- arch/loongarch/mm/pageattr.c | 3 +- arch/x86/events/intel/core.c | 85 ++++++ arch/x86/events/rapl.c | 1 + arch/x86/kernel/cpu/microcode/amd.c | 2 +- arch/x86/kernel/cpu/vmware.c | 4 + arch/x86/kernel/devicetree.c | 3 +- arch/x86/kernel/irq.c | 2 + arch/x86/kvm/mmu/mmu.c | 2 +- block/bio.c | 2 +- drivers/acpi/resource.c | 6 + drivers/block/null_blk/main.c | 4 +- drivers/block/virtio_blk.c | 5 +- drivers/clk/samsung/clk-gs101.c | 8 - drivers/clk/samsung/clk-pll.c | 7 +- drivers/firmware/iscsi_ibft.c | 5 +- drivers/gpu/drm/amd/amdgpu/gmc_v12_0.c | 5 +- .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 8 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 12 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c | 1 + .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_irq.c | 64 +++-- .../drm/amd/display/amdgpu_dm/amdgpu_dm_plane.c | 7 +- drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 7 +- .../amd/display/dc/dce60/dce60_timing_generator.c | 1 + .../dc/dml2/dml21/dml21_translation_helper.c | 4 +- .../amd/display/dc/dml2/dml2_translation_helper.c | 6 +- drivers/gpu/drm/display/drm_dp_mst_topology.c | 40 +-- drivers/gpu/drm/drm_atomic_uapi.c | 4 + drivers/gpu/drm/drm_connector.c | 4 + drivers/gpu/drm/drm_panic_qr.rs | 16 +- drivers/gpu/drm/gma500/mid_bios.c | 5 + drivers/gpu/drm/hyperv/hyperv_drm_drv.c | 2 + drivers/gpu/drm/i915/display/intel_display.c | 5 +- drivers/gpu/drm/i915/gem/i915_gem_mman.c | 5 +- drivers/gpu/drm/nouveau/nouveau_connector.c | 1 - drivers/gpu/drm/tests/drm_hdmi_state_helper_test.c | 193 +++++++------- drivers/gpu/drm/vkms/vkms_composer.c | 2 +- drivers/gpu/drm/xe/xe_guc_submit.c | 4 +- drivers/gpu/drm/xe/xe_hmm.c | 6 +- drivers/gpu/drm/xe/xe_pm.c | 13 +- drivers/hid/Kconfig | 3 +- drivers/hid/hid-apple.c | 13 +- drivers/hid/hid-ids.h | 3 + drivers/hid/hid-quirks.c | 1 + drivers/hid/hid-steam.c | 6 +- drivers/hid/hid-topre.c | 7 + drivers/hid/intel-ish-hid/ipc/hw-ish.h | 2 + drivers/hid/intel-ish-hid/ipc/ipc.c | 15 +- drivers/hid/intel-ish-hid/ipc/pci-ish.c | 7 + drivers/hid/intel-ish-hid/ishtp/ishtp-dev.h | 2 + drivers/hv/vmbus_drv.c | 13 + drivers/i2c/busses/i2c-ali1535.c | 12 +- drivers/i2c/busses/i2c-ali15x3.c | 12 +- drivers/i2c/busses/i2c-sis630.c | 12 +- drivers/input/joystick/xpad.c | 39 ++- drivers/input/misc/iqs7222.c | 50 ++-- drivers/input/serio/i8042-acpipnpio.h | 111 ++++---- drivers/input/touchscreen/ads7846.c | 2 +- drivers/input/touchscreen/goodix_berlin_core.c | 24 +- drivers/md/dm-flakey.c | 2 +- drivers/net/bonding/bond_options.c | 55 +++- drivers/net/dsa/mv88e6xxx/chip.c | 59 ++++- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 286 +++++++++++++-------- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 1 + drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 13 +- drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.h | 3 +- drivers/net/ethernet/intel/ice/ice_arfs.c | 2 +- drivers/net/ethernet/intel/ice/ice_eswitch.c | 6 - drivers/net/ethernet/intel/ice/ice_lag.c | 27 ++ drivers/net/ethernet/intel/ice/ice_lib.c | 18 -- drivers/net/ethernet/intel/ice/ice_lib.h | 4 - drivers/net/ethernet/intel/ice/ice_txrx.c | 4 +- drivers/net/ethernet/mellanox/mlx5/core/devlink.c | 3 + .../ethernet/mellanox/mlx5/core/en/rep/bridge.c | 12 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 6 +- drivers/net/ethernet/mellanox/mlx5/core/eq.c | 2 +- .../net/ethernet/mellanox/mlx5/core/irq_affinity.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c | 4 +- drivers/net/ethernet/mellanox/mlx5/core/lag/lag.h | 1 + .../net/ethernet/mellanox/mlx5/core/lag/mpesw.c | 3 +- .../ethernet/mellanox/mlx5/core/lib/fs_chains.c | 5 + drivers/net/ethernet/mellanox/mlx5/core/mlx5_irq.h | 4 +- drivers/net/ethernet/mellanox/mlx5/core/pci_irq.c | 13 +- drivers/net/ethernet/mellanox/mlx5/core/pci_irq.h | 2 +- .../mellanox/mlx5/core/steering/hws/mlx5hws_bwc.h | 2 +- .../ethernet/qlogic/qlcnic/qlcnic_sriov_common.c | 8 +- drivers/net/ethernet/realtek/rtase/rtase_main.c | 10 + drivers/net/mctp/mctp-i2c.c | 5 + drivers/net/mctp/mctp-i3c.c | 5 + drivers/net/phy/nxp-c45-tja11xx.c | 68 +++++ drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 6 +- drivers/net/wwan/mhi_wwan_mbim.c | 2 +- drivers/nvme/host/apple.c | 5 +- drivers/nvme/host/core.c | 14 +- drivers/nvme/host/fc.c | 59 +---- drivers/nvme/host/pci.c | 7 +- drivers/nvme/target/rdma.c | 33 ++- drivers/phy/ti/phy-gmii-sel.c | 15 +- drivers/pinctrl/bcm/pinctrl-bcm281xx.c | 2 +- drivers/pinctrl/nuvoton/pinctrl-npcm8xx.c | 3 + drivers/platform/x86/intel/int3472/discrete.c | 85 ++++-- drivers/platform/x86/intel/pmc/core.c | 4 +- drivers/platform/x86/thinkpad_acpi.c | 50 +++- drivers/powercap/powercap_sys.c | 3 +- drivers/s390/cio/chp.c | 3 +- drivers/scsi/qla1280.c | 2 +- drivers/scsi/scsi_scan.c | 2 +- drivers/spi/spi-microchip-core.c | 41 ++- drivers/thermal/cpufreq_cooling.c | 2 - drivers/ufs/core/ufshcd.c | 7 +- drivers/usb/phy/phy-generic.c | 2 +- drivers/usb/serial/ftdi_sio.c | 14 + drivers/usb/serial/ftdi_sio_ids.h | 13 + drivers/usb/serial/option.c | 48 ++-- drivers/vhost/vhost.c | 2 +- drivers/video/fbdev/hyperv_fb.c | 52 ++-- drivers/xen/swiotlb-xen.c | 2 +- fs/btrfs/extent_io.c | 11 +- fs/btrfs/qgroup.c | 6 +- fs/fuse/dir.c | 2 +- fs/namei.c | 24 +- fs/netfs/read_collect.c | 2 +- fs/smb/client/asn1.c | 2 + fs/smb/client/cifs_spnego.c | 4 +- fs/smb/client/cifsglob.h | 4 + fs/smb/client/connect.c | 16 +- fs/smb/client/fs_context.c | 18 +- fs/smb/client/inode.c | 13 + fs/smb/client/reparse.c | 10 +- fs/smb/client/sess.c | 3 +- fs/smb/client/smb2pdu.c | 4 +- fs/smb/common/smbfsctl.h | 3 + fs/smb/server/connection.c | 20 ++ fs/smb/server/connection.h | 2 + fs/smb/server/ksmbd_work.c | 3 - fs/smb/server/ksmbd_work.h | 1 - fs/smb/server/oplock.c | 43 ++-- fs/smb/server/oplock.h | 1 - fs/smb/server/server.c | 14 +- fs/vboxsf/super.c | 3 +- include/linux/blk-mq.h | 16 +- include/linux/fs.h | 2 + include/linux/hugetlb.h | 5 + include/linux/pci_ids.h | 1 + include/net/bluetooth/hci_core.h | 108 +++----- include/net/bluetooth/l2cap.h | 3 +- include/net/netfilter/nf_tables.h | 4 +- include/sound/soc.h | 5 +- init/Kconfig | 2 +- io_uring/futex.c | 2 +- io_uring/io-wq.c | 23 +- kernel/futex/core.c | 5 +- kernel/futex/futex.h | 11 +- kernel/futex/pi.c | 2 +- kernel/futex/waitwake.c | 4 +- kernel/rcu/tree.c | 14 +- kernel/sched/core.c | 5 +- kernel/sched/debug.c | 2 + kernel/sched/ext.c | 3 + kernel/time/hrtimer.c | 22 +- kernel/vhost_task.c | 4 +- mm/hugetlb.c | 8 + mm/page_isolation.c | 10 + mm/userfaultfd.c | 91 +++++-- net/bluetooth/hci_core.c | 10 +- net/bluetooth/hci_event.c | 37 +-- net/bluetooth/iso.c | 6 - net/bluetooth/l2cap_core.c | 181 ++++++------- net/bluetooth/l2cap_sock.c | 15 +- net/bluetooth/rfcomm/core.c | 6 - net/bluetooth/sco.c | 12 +- net/core/dev.c | 5 +- net/core/netpoll.c | 9 +- net/ipv6/addrconf.c | 15 +- net/mac80211/util.c | 8 +- net/mctp/route.c | 10 +- net/mctp/test/route-test.c | 109 ++++++++ net/mptcp/protocol.h | 2 + net/netfilter/ipvs/ip_vs_ctl.c | 8 +- net/netfilter/nf_conncount.c | 6 +- net/netfilter/nf_tables_api.c | 24 +- net/netfilter/nft_compat.c | 8 +- net/netfilter/nft_ct.c | 6 +- net/netfilter/nft_exthdr.c | 10 +- net/openvswitch/conntrack.c | 30 ++- net/openvswitch/datapath.h | 3 + net/openvswitch/flow_netlink.c | 15 +- net/sched/sch_api.c | 6 + net/sched/sch_gred.c | 3 +- net/sctp/stream.c | 2 +- net/switchdev/switchdev.c | 25 +- net/wireless/core.c | 7 + rust/kernel/alloc/allocator_test.rs | 18 ++ rust/kernel/error.rs | 2 +- rust/kernel/init.rs | 23 +- rust/kernel/init/macros.rs | 6 +- rust/kernel/lib.rs | 2 +- rust/kernel/sync.rs | 16 +- scripts/generate_rust_analyzer.py | 71 ++--- scripts/rustdoc_test_gen.rs | 4 +- sound/hda/intel-dsp-config.c | 5 + sound/pci/hda/hda_intel.c | 2 + sound/pci/hda/patch_realtek.c | 1 + sound/soc/amd/yc/acp6x-mach.c | 7 + sound/soc/codecs/arizona.c | 14 +- sound/soc/codecs/cs42l43.c | 2 +- sound/soc/codecs/madera.c | 10 +- sound/soc/codecs/rt722-sdca-sdw.c | 4 + sound/soc/codecs/tas2764.c | 10 +- sound/soc/codecs/tas2764.h | 8 +- sound/soc/codecs/tas2770.c | 2 +- sound/soc/codecs/wm0010.c | 13 +- sound/soc/codecs/wm5110.c | 8 +- sound/soc/generic/simple-card-utils.c | 1 + sound/soc/intel/boards/sof_sdw.c | 33 ++- sound/soc/intel/common/soc-acpi-intel-mtl-match.c | 2 +- sound/soc/sh/rcar/core.c | 14 - sound/soc/sh/rcar/rsnd.h | 1 - sound/soc/sh/rcar/src.c | 116 +++++++-- sound/soc/sh/rcar/ssi.c | 3 +- sound/soc/soc-ops.c | 15 +- sound/soc/sof/amd/acp-ipc.c | 23 +- sound/soc/sof/amd/acp.c | 1 + sound/soc/sof/amd/acp.h | 1 + sound/soc/sof/amd/vangogh.c | 18 ++ sound/soc/sof/intel/hda-codec.c | 1 + sound/soc/sof/intel/hda.c | 18 +- sound/soc/sof/intel/pci-ptl.c | 1 + tools/objtool/check.c | 9 + tools/sched_ext/include/scx/common.bpf.h | 11 + tools/sound/dapm-graph | 2 +- .../selftests/bpf/prog_tests/sockmap_basic.c | 6 +- .../testing/selftests/cgroup/test_cpuset_v1_hp.sh | 2 +- .../selftests/drivers/net/bonding/bond_options.sh | 4 +- .../filesystems/statmount/statmount_test.c | 22 +- .../testing/selftests/sched_ext/dsp_local_on.bpf.c | 2 +- 245 files changed, 2447 insertions(+), 1311 deletions(-)

5 months, 3 weeks

12
242
0 0

[PATCH] exfat: fix random stack corruption after get_block

by Sungjong Seo

When get_block is called with a buffer_head allocated on the stack, such as do_mpage_readpage, stack corruption due to buffer_head UAF may occur in the following race condition situation. <CPU 0> <CPU 1> mpage_read_folio <<bh on stack>> do_mpage_readpage exfat_get_block bh_read __bh_read get_bh(bh) submit_bh wait_on_buffer ... end_buffer_read_sync __end_buffer_read_notouch unlock_buffer <<keep going>> ... ... ... ... <<bh is not valid out of mpage_read_folio>> . . another_function <<variable A on stack>> put_bh(bh) atomic_dec(bh->b_count) * stack corruption here * This patch returns -EAGAIN if a folio does not have buffers when bh_read needs to be called. By doing this, the caller can fallback to functions like block_read_full_folio(), create a buffer_head in the folio, and then call get_block again. Let's do not call bh_read() with on-stack buffer_head. Fixes: 11a347fb6cef ("exfat: change to get file size from DataLength") Cc: stable(a)vger.kernel.org Tested-by: Yeongjin Gil <youngjin.gil(a)samsung.com> Signed-off-by: Sungjong Seo <sj1557.seo(a)samsung.com> --- fs/exfat/inode.c | 37 ++++++++++++++++++++++++++++++++----- 1 file changed, 32 insertions(+), 5 deletions(-) diff --git a/fs/exfat/inode.c b/fs/exfat/inode.c index 96952d4acb50..b8ea910586e4 100644 --- a/fs/exfat/inode.c +++ b/fs/exfat/inode.c @@ -344,7 +344,8 @@ static int exfat_get_block(struct inode *inode, sector_t iblock, * The block has been partially written, * zero the unwritten part and map the block. */ - loff_t size, off, pos; + loff_t size, pos; + void *addr; max_blocks = 1; @@ -355,17 +356,43 @@ static int exfat_get_block(struct inode *inode, sector_t iblock, if (!bh_result->b_folio) goto done; + /* + * No buffer_head is allocated. + * (1) bmap: It's enough to fill bh_result without I/O. + * (2) read: The unwritten part should be filled with 0 + * If a folio does not have any buffers, + * let's returns -EAGAIN to fallback to + * per-bh IO like block_read_full_folio(). + */ + if (!folio_buffers(bh_result->b_folio)) { + err = -EAGAIN; + goto done; + } + pos = EXFAT_BLK_TO_B(iblock, sb); size = ei->valid_size - pos; - off = pos & (PAGE_SIZE - 1); + addr = folio_address(bh_result->b_folio) + + offset_in_folio(bh_result->b_folio, pos); + + BUG_ON(size > sb->s_blocksize); + + /* Check if bh->b_data points to proper addr in folio */ + if (bh_result->b_data != addr) { + exfat_fs_error_ratelimit(sb, + "b_data(%p) != folio_addr(%p)", + bh_result->b_data, addr); + err = -EINVAL; + goto done; + } - folio_set_bh(bh_result, bh_result->b_folio, off); + /* Read a block */ err = bh_read(bh_result, 0); if (err < 0) goto unlock_ret; - folio_zero_segment(bh_result->b_folio, off + size, - off + sb->s_blocksize); + /* Zero unwritten part of a block */ + memset(bh_result->b_data + size, 0, + bh_result->b_size - size); } else { /* * The range has not been written, clear the mapped flag -- 2.25.1

5 months, 3 weeks

2
2
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror March 2025