[PATCH 2/2] xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive.
by Mathias Nyman
Event polling delay is set to 0 if there are any pending requests in
either rx or tx requests lists. Checking for pending requests does
not work well for "IN" transfers as the tty driver always queues
requests to the list and TRBs to the ring, preparing to receive data
from the host.
This causes unnecessary busylooping and cpu hogging.
Only set the event polling delay to 0 if there are pending tx "write"
transfers, or if it was less than 10ms since last active data transfer
in any direction.
Cc: Łukasz Bartosik <ukaszb(a)chromium.org>
Fixes: fb18e5bb9660 ("xhci: dbc: poll at different rate depending on data transfer activity")
Cc: stable(a)vger.kernel.org
Signed-off-by: Mathias Nyman <mathias.nyman(a)linux.intel.com>
---
drivers/usb/host/xhci-dbgcap.c | 19 ++++++++++++++++---
drivers/usb/host/xhci-dbgcap.h | 3 +++
2 files changed, 19 insertions(+), 3 deletions(-)
diff --git a/drivers/usb/host/xhci-dbgcap.c b/drivers/usb/host/xhci-dbgcap.c
index fd7895b24367..0d4ce5734165 100644
--- a/drivers/usb/host/xhci-dbgcap.c
+++ b/drivers/usb/host/xhci-dbgcap.c
@@ -823,6 +823,7 @@ static enum evtreturn xhci_dbc_do_handle_events(struct xhci_dbc *dbc)
{
dma_addr_t deq;
union xhci_trb *evt;
+ enum evtreturn ret = EVT_DONE;
u32 ctrl, portsc;
bool update_erdp = false;
@@ -909,6 +910,7 @@ static enum evtreturn xhci_dbc_do_handle_events(struct xhci_dbc *dbc)
break;
case TRB_TYPE(TRB_TRANSFER):
dbc_handle_xfer_event(dbc, evt);
+ ret = EVT_XFER_DONE;
break;
default:
break;
@@ -927,7 +929,7 @@ static enum evtreturn xhci_dbc_do_handle_events(struct xhci_dbc *dbc)
lo_hi_writeq(deq, &dbc->regs->erdp);
}
- return EVT_DONE;
+ return ret;
}
static void xhci_dbc_handle_events(struct work_struct *work)
@@ -936,6 +938,7 @@ static void xhci_dbc_handle_events(struct work_struct *work)
struct xhci_dbc *dbc;
unsigned long flags;
unsigned int poll_interval;
+ unsigned long busypoll_timelimit;
dbc = container_of(to_delayed_work(work), struct xhci_dbc, event_work);
poll_interval = dbc->poll_interval;
@@ -954,11 +957,21 @@ static void xhci_dbc_handle_events(struct work_struct *work)
dbc->driver->disconnect(dbc);
break;
case EVT_DONE:
- /* set fast poll rate if there are pending data transfers */
+ /*
+ * Set fast poll rate if there are pending out transfers, or
+ * a transfer was recently processed
+ */
+ busypoll_timelimit = dbc->xfer_timestamp +
+ msecs_to_jiffies(DBC_XFER_INACTIVITY_TIMEOUT);
+
if (!list_empty(&dbc->eps[BULK_OUT].list_pending) ||
- !list_empty(&dbc->eps[BULK_IN].list_pending))
+ time_is_after_jiffies(busypoll_timelimit))
poll_interval = 0;
break;
+ case EVT_XFER_DONE:
+ dbc->xfer_timestamp = jiffies;
+ poll_interval = 0;
+ break;
default:
dev_info(dbc->dev, "stop handling dbc events\n");
return;
diff --git a/drivers/usb/host/xhci-dbgcap.h b/drivers/usb/host/xhci-dbgcap.h
index 9dc8f4d8077c..47ac72c2286d 100644
--- a/drivers/usb/host/xhci-dbgcap.h
+++ b/drivers/usb/host/xhci-dbgcap.h
@@ -96,6 +96,7 @@ struct dbc_ep {
#define DBC_WRITE_BUF_SIZE 8192
#define DBC_POLL_INTERVAL_DEFAULT 64 /* milliseconds */
#define DBC_POLL_INTERVAL_MAX 5000 /* milliseconds */
+#define DBC_XFER_INACTIVITY_TIMEOUT 10 /* milliseconds */
/*
* Private structure for DbC hardware state:
*/
@@ -142,6 +143,7 @@ struct xhci_dbc {
enum dbc_state state;
struct delayed_work event_work;
unsigned int poll_interval; /* ms */
+ unsigned long xfer_timestamp;
unsigned resume_required:1;
struct dbc_ep eps[2];
@@ -187,6 +189,7 @@ struct dbc_request {
enum evtreturn {
EVT_ERR = -1,
EVT_DONE,
+ EVT_XFER_DONE,
EVT_GSER,
EVT_DISC,
};
--
2.43.0
4 months, 2 weeks
- 1
- 0
[PATCH] arm64: dts: amlogic: dreambox: fix missing clkc_audio node
by Christian Hewitt
Add the clkc_audio node to fix audio support on Dreambox One/Two.
Fixes: 83a6f4c62cb1 ("arm64: dts: meson: add initial support for Dreambox One/Two")
CC: <stable(a)vger.kernel.org>
Suggested-by: Emanuel Strobel <emanuel.strobel(a)yahoo.com>
Signed-off-by: Christian Hewitt <christianshewitt(a)gmail.com>
---
arch/arm64/boot/dts/amlogic/meson-g12b-dreambox.dtsi | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/arch/arm64/boot/dts/amlogic/meson-g12b-dreambox.dtsi b/arch/arm64/boot/dts/amlogic/meson-g12b-dreambox.dtsi
index de35fa2d7a6d..8e3e3354ed67 100644
--- a/arch/arm64/boot/dts/amlogic/meson-g12b-dreambox.dtsi
+++ b/arch/arm64/boot/dts/amlogic/meson-g12b-dreambox.dtsi
@@ -116,6 +116,10 @@ &arb {
status = "okay";
};
+&clkc_audio {
+ status = "okay";
+};
+
&frddr_a {
status = "okay";
};
--
2.34.1
4 months, 2 weeks
- 3
- 2
[PATCH 6.14.y] btrfs: fix the inode leak in btrfs_iget()
by Penglei Jiang
[BUG]
There is a bug report that a syzbot reproducer can lead to the following
busy inode at unmount time:
BTRFS info (device loop1): last unmount of filesystem 1680000e-3c1e-4c46-84b6-56bd3909af50
VFS: Busy inodes after unmount of loop1 (btrfs)
------------[ cut here ]------------
kernel BUG at fs/super.c:650!
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 48168 Comm: syz-executor Not tainted 6.15.0-rc2-00471-g119009db2674 #2 PREEMPT(full)
Hardware name: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:generic_shutdown_super+0x2e9/0x390 fs/super.c:650
Call Trace:
<TASK>
kill_anon_super+0x3a/0x60 fs/super.c:1237
btrfs_kill_super+0x3b/0x50 fs/btrfs/super.c:2099
deactivate_locked_super+0xbe/0x1a0 fs/super.c:473
deactivate_super fs/super.c:506 [inline]
deactivate_super+0xe2/0x100 fs/super.c:502
cleanup_mnt+0x21f/0x440 fs/namespace.c:1435
task_work_run+0x14d/0x240 kernel/task_work.c:227
resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
__syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
syscall_exit_to_user_mode+0x269/0x290 kernel/entry/common.c:218
do_syscall_64+0xd4/0x250 arch/x86/entry/syscall_64.c:100
entry_SYSCALL_64_after_hwframe+0x77/0x7f
</TASK>
[CAUSE]
When btrfs_alloc_path() failed, btrfs_iget() directly returned without
releasing the inode already allocated by btrfs_iget_locked().
This results the above busy inode and trigger the kernel BUG.
[FIX]
Fix it by calling iget_failed() if btrfs_alloc_path() failed.
If we hit error inside btrfs_read_locked_inode(), it will properly call
iget_failed(), so nothing to worry about.
Although the iget_failed() cleanup inside btrfs_read_locked_inode() is a
break of the normal error handling scheme, let's fix the obvious bug
and backport first, then rework the error handling later.
Reported-by: Penglei Jiang <superman.xpt(a)gmail.com>
Link: https://lore.kernel.org/linux-btrfs/20250421102425.44431-1-superman.xpt@gma…
Fixes: 7c855e16ab72 ("btrfs: remove conditional path allocation in btrfs_read_locked_inode()")
CC: stable(a)vger.kernel.org # 6.13+
Reviewed-by: Qu Wenruo <wqu(a)suse.com>
Signed-off-by: Penglei Jiang <superman.xpt(a)gmail.com>
Signed-off-by: David Sterba <dsterba(a)suse.com>
(cherry picked from commit 48c1d1bb525b1c44b8bdc8e7ec5629cb6c2b9fc4)
---
fs/btrfs/inode.c | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/fs/btrfs/inode.c b/fs/btrfs/inode.c
index 38756f8cef46..ad7009d336fa 100644
--- a/fs/btrfs/inode.c
+++ b/fs/btrfs/inode.c
@@ -5659,8 +5659,10 @@ struct inode *btrfs_iget(u64 ino, struct btrfs_root *root)
return inode;
path = btrfs_alloc_path();
- if (!path)
+ if (!path) {
+ iget_failed(&inode->vfs_inode);
return ERR_PTR(-ENOMEM);
+ }
ret = btrfs_read_locked_inode(inode, path);
btrfs_free_path(path);
--
2.17.1
4 months, 2 weeks
- 1
- 0
[PATCH v2 rc] iommu: Skip PASID validation for devices without PASID capability
by Tushar Dave
Generally PASID support requires ACS settings that usually create
single device groups, but there are some niche cases where we can get
multi-device groups and still have working PASID support. The primary
issue is that PCI switches are not required to treat PASID tagged TLPs
specially so appropriate ACS settings are required to route all TLPs to
the host bridge if PASID is going to work properly.
pci_enable_pasid() does check that each device that will use PASID has
the proper ACS settings to achieve this routing.
However, no-PASID devices can be combined with PASID capable devices
within the same topology using non-uniform ACS settings. In this case
the no-PASID devices may not have strict route to host ACS flags and
end up being grouped with the PASID devices.
This configuration fails to allow use of the PASID within the iommu
core code which wrongly checks if the no-PASID device supports PASID.
Fix this by ignoring no-PASID devices during the PASID validation. They
will never issue a PASID TLP anyhow so they can be ignored.
Fixes: c404f55c26fc ("iommu: Validate the PASID in iommu_attach_device_pasid()")
Cc: stable(a)vger.kernel.org
Signed-off-by: Tushar Dave <tdave(a)nvidia.com>
---
changes in v2:
- added no-pasid check in __iommu_set_group_pasid and __iommu_remove_group_pasid
drivers/iommu/iommu.c | 22 ++++++++++++++++------
1 file changed, 16 insertions(+), 6 deletions(-)
diff --git a/drivers/iommu/iommu.c b/drivers/iommu/iommu.c
index 60aed01e54f2..8251b07f4022 100644
--- a/drivers/iommu/iommu.c
+++ b/drivers/iommu/iommu.c
@@ -3329,8 +3329,9 @@ static int __iommu_set_group_pasid(struct iommu_domain *domain,
int ret;
for_each_group_device(group, device) {
- ret = domain->ops->set_dev_pasid(domain, device->dev,
- pasid, NULL);
+ if (device->dev->iommu->max_pasids > 0)
+ ret = domain->ops->set_dev_pasid(domain, device->dev,
+ pasid, NULL);
if (ret)
goto err_revert;
}
@@ -3342,7 +3343,8 @@ static int __iommu_set_group_pasid(struct iommu_domain *domain,
for_each_group_device(group, device) {
if (device == last_gdev)
break;
- iommu_remove_dev_pasid(device->dev, pasid, domain);
+ if (device->dev->iommu->max_pasids > 0)
+ iommu_remove_dev_pasid(device->dev, pasid, domain);
}
return ret;
}
@@ -3353,8 +3355,10 @@ static void __iommu_remove_group_pasid(struct iommu_group *group,
{
struct group_device *device;
- for_each_group_device(group, device)
- iommu_remove_dev_pasid(device->dev, pasid, domain);
+ for_each_group_device(group, device) {
+ if (device->dev->iommu->max_pasids > 0)
+ iommu_remove_dev_pasid(device->dev, pasid, domain);
+ }
}
/*
@@ -3391,7 +3395,13 @@ int iommu_attach_device_pasid(struct iommu_domain *domain,
mutex_lock(&group->mutex);
for_each_group_device(group, device) {
- if (pasid >= device->dev->iommu->max_pasids) {
+ /*
+ * Skip PASID validation for devices without PASID support
+ * (max_pasids = 0). These devices cannot issue transactions
+ * with PASID, so they don't affect group's PASID usage.
+ */
+ if ((device->dev->iommu->max_pasids > 0) &&
+ (pasid >= device->dev->iommu->max_pasids)) {
ret = -EINVAL;
goto out_unlock;
}
--
2.34.1
4 months, 2 weeks
- 3
- 4
[PATCH] xfs: fix diff_two_keys calculation for cnt btree
by Fedor Pchelkin
Currently the difference is computed on 32-bit unsigned values although
eventually it is stored in a variable of int64_t type. This gives awkward
results, e.g. when the diff _should_ be negative, it is represented as
some large positive int64_t value.
Perform the calculations directly in int64_t as all other diff_two_keys
routines actually do.
Found by Linux Verification Center (linuxtesting.org) with Svace static
analysis tool.
Fixes: 08438b1e386b ("xfs: plumb in needed functions for range querying of the freespace btrees")
Cc: stable(a)vger.kernel.org
Signed-off-by: Fedor Pchelkin <pchelkin(a)ispras.ru>
---
fs/xfs/libxfs/xfs_alloc_btree.c | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/fs/xfs/libxfs/xfs_alloc_btree.c b/fs/xfs/libxfs/xfs_alloc_btree.c
index a4ac37ba5d51..b3c54ae90e25 100644
--- a/fs/xfs/libxfs/xfs_alloc_btree.c
+++ b/fs/xfs/libxfs/xfs_alloc_btree.c
@@ -238,13 +238,13 @@ xfs_cntbt_diff_two_keys(
ASSERT(!mask || (mask->alloc.ar_blockcount &&
mask->alloc.ar_startblock));
- diff = be32_to_cpu(k1->alloc.ar_blockcount) -
- be32_to_cpu(k2->alloc.ar_blockcount);
+ diff = (int64_t)be32_to_cpu(k1->alloc.ar_blockcount) -
+ be32_to_cpu(k2->alloc.ar_blockcount);
if (diff)
return diff;
- return be32_to_cpu(k1->alloc.ar_startblock) -
- be32_to_cpu(k2->alloc.ar_startblock);
+ return (int64_t)be32_to_cpu(k1->alloc.ar_startblock) -
+ be32_to_cpu(k2->alloc.ar_startblock);
}
static xfs_failaddr_t
--
2.49.0
4 months, 2 weeks
- 3
- 4
[PATCH] arm64: dts: qcom: ipq5424: fix MSI base vector interrupt number
by Kathiravan Thirumoorthy
From: Vignesh Viswanathan <quic_viswanat(a)quicinc.com>
As per the hardware design, MSI interrupt starts from 704. Fix the same.
Cc: stable(a)vger.kernel.org
Fixes: 1a91d2a6021e ("arm64: dts: qcom: add IPQ5424 SoC and rdp466 board support")
Signed-off-by: Vignesh Viswanathan <quic_viswanat(a)quicinc.com>
Signed-off-by: Kathiravan Thirumoorthy <kathiravan.thirumoorthy(a)oss.qualcomm.com>
---
arch/arm64/boot/dts/qcom/ipq5424.dtsi | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/arch/arm64/boot/dts/qcom/ipq5424.dtsi b/arch/arm64/boot/dts/qcom/ipq5424.dtsi
index 5d6ed2172b1bb0a57c593f121f387ec917f42419..7a2e5c89b26ad8010f158be6f052b307e8a32fb5 100644
--- a/arch/arm64/boot/dts/qcom/ipq5424.dtsi
+++ b/arch/arm64/boot/dts/qcom/ipq5424.dtsi
@@ -371,7 +371,7 @@ intc: interrupt-controller@f200000 {
#redistributor-regions = <1>;
redistributor-stride = <0x0 0x20000>;
interrupts = <GIC_PPI 9 IRQ_TYPE_LEVEL_HIGH>;
- mbi-ranges = <672 128>;
+ mbi-ranges = <704 128>;
msi-controller;
};
---
base-commit: 407f60a151df3c44397e5afc0111eb9b026c38d3
change-id: 20250505-msi-vector-f0dcd22233d9
Best regards,
--
Kathiravan Thirumoorthy <kathiravan.thirumoorthy(a)oss.qualcomm.com>
4 months, 2 weeks
- 1
- 1
[PATCH 0/7] accel/ivpu: Add context violation handling for 6.12
by Jacek Lawrynowicz
These patchset adds support for VPU_JSM_STATUS_MVNCI_CONTEXT_VIOLATION_HW
message added in recent VPU firmware. Without it the driver will not be able to
process any jobs after this message is received and would need to be reloaded.
Most patches are as-is from upstream besides these two:
- Fix locking order in ivpu_job_submit
- Abort all jobs after command queue unregister
Both these patches need to be rebased because of missing new CMDQ UAPI changes
that should not be backported to stable.
Andrew Kreimer (1):
accel/ivpu: Fix a typo
Andrzej Kacprowski (1):
accel/ivpu: Update VPU FW API headers
Karol Wachowski (4):
accel/ivpu: Use xa_alloc_cyclic() instead of custom function
accel/ivpu: Abort all jobs after command queue unregister
accel/ivpu: Fix locking order in ivpu_job_submit
accel/ivpu: Add handling of VPU_JSM_STATUS_MVNCI_CONTEXT_VIOLATION_HW
Tomasz Rusinowicz (1):
accel/ivpu: Make DB_ID and JOB_ID allocations incremental
drivers/accel/ivpu/ivpu_drv.c | 38 ++--
drivers/accel/ivpu/ivpu_drv.h | 9 +
drivers/accel/ivpu/ivpu_job.c | 125 +++++++++---
drivers/accel/ivpu/ivpu_job.h | 1 +
drivers/accel/ivpu/ivpu_jsm_msg.c | 3 +-
drivers/accel/ivpu/ivpu_mmu.c | 3 +-
drivers/accel/ivpu/ivpu_sysfs.c | 5 +-
drivers/accel/ivpu/vpu_boot_api.h | 45 +++--
drivers/accel/ivpu/vpu_jsm_api.h | 303 +++++++++++++++++++++++++-----
9 files changed, 412 insertions(+), 120 deletions(-)
--
2.45.1
4 months, 2 weeks
- 3
- 16
[PATCH v2 0/3] accel/ivpu: Add context violation handling for 6.14
by Jacek Lawrynowicz
These patchset adds support for VPU_JSM_STATUS_MVNCI_CONTEXT_VIOLATION_HW
message added in recent VPU firmware. Without it the driver will not be able to
process any jobs after this message is received and would need to be reloaded.
The last patch in this series is as-is from upstream, but other two patches
had to be rebased because of missing new CMDQ UAPI changes that should not be
backported to stable.
Changes since v1:
- Documented deviations from the original upstream patches in commit messages
Karol Wachowski (3):
accel/ivpu: Abort all jobs after command queue unregister
accel/ivpu: Fix locking order in ivpu_job_submit
accel/ivpu: Add handling of VPU_JSM_STATUS_MVNCI_CONTEXT_VIOLATION_HW
drivers/accel/ivpu/ivpu_drv.c | 32 ++-------
drivers/accel/ivpu/ivpu_drv.h | 2 +
drivers/accel/ivpu/ivpu_job.c | 111 ++++++++++++++++++++++++++------
drivers/accel/ivpu/ivpu_job.h | 1 +
drivers/accel/ivpu/ivpu_mmu.c | 3 +-
drivers/accel/ivpu/ivpu_sysfs.c | 5 +-
6 files changed, 103 insertions(+), 51 deletions(-)
--
2.45.1
4 months, 2 weeks
- 1
- 3
[PATCH] fs: minix: Fix handling of corrupted directories
by Andrey Kriulin
If the directory is corrupted and the number of nlinks is less than 2
(valid nlinks have at least 2), then when the directory is deleted, the
minix_rmdir will try to reduce the nlinks(unsigned int) to a negative
value.
Make nlinks validity check for directory in minix_lookup.
Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Cc: stable(a)vger.kernel.org
Signed-off-by: Andrey Kriulin <kitotavrik.media(a)gmail.com>
---
fs/minix/namei.c | 7 ++++++-
1 file changed, 6 insertions(+), 1 deletion(-)
diff --git a/fs/minix/namei.c b/fs/minix/namei.c
index 8938536d8..5717a56fa 100644
--- a/fs/minix/namei.c
+++ b/fs/minix/namei.c
@@ -28,8 +28,13 @@ static struct dentry *minix_lookup(struct inode * dir, struct dentry *dentry, un
return ERR_PTR(-ENAMETOOLONG);
ino = minix_inode_by_name(dentry);
- if (ino)
+ if (ino) {
inode = minix_iget(dir->i_sb, ino);
+ if (S_ISDIR(inode->i_mode) && inode->i_nlink < 2) {
+ iput(inode);
+ return ERR_PTR(-EIO);
+ }
+ }
return d_splice_alias(inode, dentry);
}
--
2.47.2
4 months, 2 weeks
- 4
- 3
[PATCH] fs: minix: Fix handling of corrupted directories
by Andrey Kriulin
If the directory is corrupted and the number of nlinks is less than 2
(valid nlinks have at least 2), then when the directory is deleted, the
minix_rmdir will try to reduce the nlinks(unsigned int) to a negative
value.
Make nlinks validity check for directory in minix_lookup.
Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Cc: stable(a)vger.kernel.org
Signed-off-by: Andrey Kriulin <kitotavrik.media(a)gmail.com>
---
fs/minix/namei.c | 7 ++++++-
1 file changed, 6 insertions(+), 1 deletion(-)
diff --git a/fs/minix/namei.c b/fs/minix/namei.c
index 8938536d8..5717a56fa 100644
--- a/fs/minix/namei.c
+++ b/fs/minix/namei.c
@@ -28,8 +28,13 @@ static struct dentry *minix_lookup(struct inode * dir, struct dentry *dentry, un
return ERR_PTR(-ENAMETOOLONG);
ino = minix_inode_by_name(dentry);
- if (ino)
+ if (ino) {
inode = minix_iget(dir->i_sb, ino);
+ if (S_ISDIR(inode->i_mode) && inode->i_nlink < 2) {
+ iput(inode);
+ return ERR_PTR(-EIO);
+ }
+ }
return d_splice_alias(inode, dentry);
}
--
2.47.2
4 months, 2 weeks
- 2
- 1
FAILED: patch "[PATCH] dm-bufio: don't schedule in atomic context" failed to apply to 6.1-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 6.1-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.1.y
git checkout FETCH_HEAD
git cherry-pick -x a3d8f0a7f5e8b193db509c7191fefeed3533fc44
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050552-backslid-thirsting-324d@gregkh' --subject-prefix 'PATCH 6.1.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From a3d8f0a7f5e8b193db509c7191fefeed3533fc44 Mon Sep 17 00:00:00 2001
From: LongPing Wei <weilongping(a)oppo.com>
Date: Thu, 17 Apr 2025 11:07:38 +0800
Subject: [PATCH] dm-bufio: don't schedule in atomic context
A BUG was reported as below when CONFIG_DEBUG_ATOMIC_SLEEP and
try_verify_in_tasklet are enabled.
[ 129.444685][ T934] BUG: sleeping function called from invalid context at drivers/md/dm-bufio.c:2421
[ 129.444723][ T934] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 934, name: kworker/1:4
[ 129.444740][ T934] preempt_count: 201, expected: 0
[ 129.444756][ T934] RCU nest depth: 0, expected: 0
[ 129.444781][ T934] Preemption disabled at:
[ 129.444789][ T934] [<ffffffd816231900>] shrink_work+0x21c/0x248
[ 129.445167][ T934] kernel BUG at kernel/sched/walt/walt_debug.c:16!
[ 129.445183][ T934] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
[ 129.445204][ T934] Skip md ftrace buffer dump for: 0x1609e0
[ 129.447348][ T934] CPU: 1 PID: 934 Comm: kworker/1:4 Tainted: G W OE 6.6.56-android15-8-o-g6f82312b30b9-debug #1 1400000003000000474e5500b3187743670464e8
[ 129.447362][ T934] Hardware name: Qualcomm Technologies, Inc. Parrot QRD, Alpha-M (DT)
[ 129.447373][ T934] Workqueue: dm_bufio_cache shrink_work
[ 129.447394][ T934] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[ 129.447406][ T934] pc : android_rvh_schedule_bug+0x0/0x8 [sched_walt_debug]
[ 129.447435][ T934] lr : __traceiter_android_rvh_schedule_bug+0x44/0x6c
[ 129.447451][ T934] sp : ffffffc0843dbc90
[ 129.447459][ T934] x29: ffffffc0843dbc90 x28: ffffffffffffffff x27: 0000000000000c8b
[ 129.447479][ T934] x26: 0000000000000040 x25: ffffff804b3d6260 x24: ffffffd816232b68
[ 129.447497][ T934] x23: ffffff805171c5b4 x22: 0000000000000000 x21: ffffffd816231900
[ 129.447517][ T934] x20: ffffff80306ba898 x19: 0000000000000000 x18: ffffffc084159030
[ 129.447535][ T934] x17: 00000000d2b5dd1f x16: 00000000d2b5dd1f x15: ffffffd816720358
[ 129.447554][ T934] x14: 0000000000000004 x13: ffffff89ef978000 x12: 0000000000000003
[ 129.447572][ T934] x11: ffffffd817a823c4 x10: 0000000000000202 x9 : 7e779c5735de9400
[ 129.447591][ T934] x8 : ffffffd81560d004 x7 : 205b5d3938373434 x6 : ffffffd8167397c8
[ 129.447610][ T934] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffffffc0843db9e0
[ 129.447629][ T934] x2 : 0000000000002f15 x1 : 0000000000000000 x0 : 0000000000000000
[ 129.447647][ T934] Call trace:
[ 129.447655][ T934] android_rvh_schedule_bug+0x0/0x8 [sched_walt_debug 1400000003000000474e550080cce8a8a78606b6]
[ 129.447681][ T934] __might_resched+0x190/0x1a8
[ 129.447694][ T934] shrink_work+0x180/0x248
[ 129.447706][ T934] process_one_work+0x260/0x624
[ 129.447718][ T934] worker_thread+0x28c/0x454
[ 129.447729][ T934] kthread+0x118/0x158
[ 129.447742][ T934] ret_from_fork+0x10/0x20
[ 129.447761][ T934] Code: ???????? ???????? ???????? d2b5dd1f (d4210000)
[ 129.447772][ T934] ---[ end trace 0000000000000000 ]---
dm_bufio_lock will call spin_lock_bh when try_verify_in_tasklet
is enabled, and __scan will be called in atomic context.
Fixes: 7cd326747f46 ("dm bufio: remove dm_bufio_cond_resched()")
Signed-off-by: LongPing Wei <weilongping(a)oppo.com>
Cc: stable(a)vger.kernel.org
Signed-off-by: Mikulas Patocka <mpatocka(a)redhat.com>
diff --git a/drivers/md/dm-bufio.c b/drivers/md/dm-bufio.c
index 9c8ed65cd87e..f0b5a6931161 100644
--- a/drivers/md/dm-bufio.c
+++ b/drivers/md/dm-bufio.c
@@ -68,6 +68,8 @@
#define LIST_DIRTY 1
#define LIST_SIZE 2
+#define SCAN_RESCHED_CYCLE 16
+
/*--------------------------------------------------------------*/
/*
@@ -2424,7 +2426,12 @@ static void __scan(struct dm_bufio_client *c)
atomic_long_dec(&c->need_shrink);
freed++;
- cond_resched();
+
+ if (unlikely(freed % SCAN_RESCHED_CYCLE == 0)) {
+ dm_bufio_unlock(c);
+ cond_resched();
+ dm_bufio_lock(c);
+ }
}
}
}
4 months, 2 weeks
- 2
- 1
Linux 6.12.27
by Greg Kroah-Hartman
I'm announcing the release of the 6.12.27 kernel.
This fixes a build problem in the 6.12.26 release. If you do not have a
build issue with 6.12.26, there is no need to update.
The updated 6.12.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.12.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Makefile | 2 +-
kernel/bpf/preload/bpf_preload_kern.c | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
Greg Kroah-Hartman (1):
Linux 6.12.27
Xi Ruoyao (1):
bpf: Fix BPF_INTERNAL namespace import
4 months, 2 weeks
- 1
- 1
Linux 6.1.137
by Greg Kroah-Hartman
I'm announcing the release of the 6.1.137 kernel.
This release fixes a problem building the Loongarch target in the
6.1.136 release. If you do not have build problems with the 6.1.136
release, there is no need for you to update to this release.
The updated 6.1.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.1.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Makefile | 2 +-
arch/loongarch/mm/hugetlbpage.c | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
Greg Kroah-Hartman (1):
Linux 6.1.137
Huacai Chen (1):
LoongArch: Fix build error due to backport
4 months, 2 weeks
- 1
- 1
[PATCH 6.1 000/157] 6.1.136-rc2 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 6.1.136 release.
There are 157 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sat, 03 May 2025 08:08:16 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.136-rc…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 6.1.136-rc2
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool: Silence more KCOV warnings, part 2
Srinivas Kandagatla <srinivas.kandagatla(a)linaro.org>
ASoC: qcom: q6afe-dai: fix Display Port Playback stream name
Rob Herring <robh(a)kernel.org>
PCI: Fix use-after-free in pci_bus_release_domain_nr()
Steven Rostedt (Google) <rostedt(a)goodmis.org>
tracing: Remove pointer (asterisk) and brackets from cpumask_t field
Richard Zhu <hongxing.zhu(a)nxp.com>
phy: freescale: imx8m-pcie: Add one missing error return
Richard Zhu <hongxing.zhu(a)nxp.com>
phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
Hannes Reinecke <hare(a)kernel.org>
nvme: fixup scan failure for non-ANA multipath controllers
Thomas Bogendoerfer <tsbogend(a)alpha.franken.de>
MIPS: cm: Fix warning if MIPS_CM is disabled
Sebastian Andrzej Siewior <bigeasy(a)linutronix.de>
xdp: Reset bpf_redirect_info before running a xdp's BPF prog.
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: enable STU methods for 6320 family
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: enable PVT for 6321 switch
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
Jakub Kicinski <kuba(a)kernel.org>
net/sched: act_mirred: don't override retval if we already lost the skb
Marek Behún <kabel(a)kernel.org>
crypto: atmel-sha204a - Set hwrng quality to lowest possible
Ian Abbott <abbotti(a)mev.co.uk>
comedi: jr3_pci: Fix synchronous deletion of timer
Dave Kleikamp <dave.kleikamp(a)oracle.com>
jfs: define xtree root and page independently
Sergey Shtylyov <s.shtylyov(a)omp.ru>
of: module: add buffer overflow check in of_modalias()
Tamura Dai <kirinode0(a)gmail.com>
spi: spi-imx: Add check for spi_imx_setupxfer()
Meir Elisha <meir.elisha(a)volumez.com>
md/raid1: Add check for missing source disk in process_checks()
Mostafa Saleh <smostafa(a)google.com>
ubsan: Fix panic from test_ubsan_out_of_bounds
Breno Leitao <leitao(a)debian.org>
spi: tegra210-quad: add rate limiting and simplify timeout error message
Breno Leitao <leitao(a)debian.org>
spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
Yunlong Xing <yunlong.xing(a)unisoc.com>
loop: aio inherit the ioprio of original request
Fernando Fernandez Mancera <ffmancera(a)riseup.net>
x86/i8253: Call clockevent_i8253_disable() with interrupts disabled
Igor Pylypiv <ipylypiv(a)google.com>
scsi: pm80xx: Set phy_attached to zero when device is gone
Peter Griffin <peter.griffin(a)linaro.org>
scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init()
Xingui Yang <yangxingui(a)huawei.com>
scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
Ojaswin Mujoo <ojaswin(a)linux.ibm.com>
ext4: make block validity check resistent to sb bh corruption
Daniel Wagner <wagi(a)kernel.org>
nvmet-fc: put ref when assoc->del_work is already scheduled
Daniel Wagner <wagi(a)kernel.org>
nvmet-fc: take tgtport reference only once
Josh Poimboeuf <jpoimboe(a)kernel.org>
x86/bugs: Don't fill RSB on context switch with eIBRS
Josh Poimboeuf <jpoimboe(a)kernel.org>
x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
Josh Poimboeuf <jpoimboe(a)kernel.org>
x86/bugs: Use SBPB in write_ibpb() if applicable
Qiuxu Zhuo <qiuxu.zhuo(a)intel.com>
selftests/mincore: Allow read-ahead pages to reach the end of the file
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool: Stop UNRET validation on UD2
Hannes Reinecke <hare(a)kernel.org>
nvme: re-read ANA log page after ns scan completes
Jean-Marc Eurin <jmeurin(a)google.com>
ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
Mario Limonciello <mario.limonciello(a)amd.com>
ACPI: EC: Set ec_no_wakeup for Lenovo Go S
Hannes Reinecke <hare(a)kernel.org>
nvme: requeue namespace scan on missed AENs
Jason Andryuk <jason.andryuk(a)amd.com>
xen: Change xen-acpi-processor dom0 dependency
Ming Lei <ming.lei(a)redhat.com>
selftests: ublk: fix test_stripe_04
Xiaogang Chen <xiaogang.chen(a)amd.com>
udmabuf: fix a buf size overflow issue during udmabuf creation
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
KVM: s390: Don't use %pK through tracepoints
Oleg Nesterov <oleg(a)redhat.com>
sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
Lukas Stockmann <lukas.stockmann(a)siemens.com>
rtc: pcf85063: do a SW reset if POR failed
Dominique Martinet <asmadeus(a)codewreck.org>
9p/net: fix improper handling of bogus negative read/write replies
Basavaraj Natikar <Basavaraj.Natikar(a)amd.com>
ntb_hw_amd: Add NTB PCI ID for new gen CPU
Arnd Bergmann <arnd(a)arndb.de>
ntb: reduce stack usage in idt_scan_mws
Al Viro <viro(a)zeniv.linux.org.uk>
qibfs: fix _another_ leak
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool, lkdtm: Obfuscate the do_nothing() pointer
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler()
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool: Silence more KCOV warnings
Mika Westerberg <mika.westerberg(a)linux.intel.com>
thunderbolt: Scan retimers after device router has been enumerated
Théo Lebrun <theo.lebrun(a)bootlin.com>
usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
Chenyuan Yang <chenyuan0y(a)gmail.com>
usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
Michal Pecio <michal.pecio(a)gmail.com>
usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running
Vinicius Costa Gomes <vinicius.gomes(a)intel.com>
dmaengine: dmatest: Fix dmatest waiting less when interrupted
John Stultz <jstultz(a)google.com>
sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
Edward Adam Davis <eadavis(a)qq.com>
fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
Alexander Stein <alexander.stein(a)mailbox.org>
usb: host: max3421-hcd: Add missing spi_device_id table
Haoxiang Li <haoxiang_li2024(a)163.com>
s390/tty: Fix a potential memory leak bug
Haoxiang Li <haoxiang_li2024(a)163.com>
s390/sclp: Add check for get_zeroed_page()
Yu-Chun Lin <eleanor15x(a)gmail.com>
parisc: PDT: Fix missing prototype warning
Heiko Stuebner <heiko(a)sntech.de>
clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
Alexei Starovoitov <ast(a)kernel.org>
bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: null - Use spin lock instead of mutex
Gregory CLEMENT <gregory.clement(a)bootlin.com>
MIPS: cm: Detect CM quirks from device tree
Chenyuan Yang <chenyuan0y(a)gmail.com>
pinctrl: renesas: rza2: Fix potential NULL pointer dereference
Oliver Neukum <oneukum(a)suse.com>
USB: wdm: add annotation
Oliver Neukum <oneukum(a)suse.com>
USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
Oliver Neukum <oneukum(a)suse.com>
USB: wdm: close race between wdm_open and wdm_wwan_port_stop
Oliver Neukum <oneukum(a)suse.com>
USB: wdm: handle IO errors in wdm_wwan_port_start
Oliver Neukum <oneukum(a)suse.com>
USB: VLI disk crashes if LPM is used
Miao Li <limiao(a)kylinos.cn>
usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
Miao Li <limiao(a)kylinos.cn>
usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
Mike Looijmans <mike.looijmans(a)topic.nl>
usb: dwc3: xilinx: Prevent spike in reset signal
Frode Isaksen <frode(a)meta.com>
usb: dwc3: gadget: check that event count does not exceed event buffer length
Huacai Chen <chenhuacai(a)kernel.org>
USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
Fedor Pchelkin <pchelkin(a)ispras.ru>
usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
Fedor Pchelkin <pchelkin(a)ispras.ru>
usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
Fedor Pchelkin <pchelkin(a)ispras.ru>
usb: chipidea: ci_hdrc_imx: fix usbmisc handling
Ralph Siemsen <ralph.siemsen(a)linaro.org>
usb: cdns3: Fix deadlock when using NCM gadget
Craig Hesling <craig(a)hesling.com>
USB: serial: simple: add OWON HDS200 series oscilloscope support
Adam Xue <zxue(a)semtech.com>
USB: serial: option: add Sierra Wireless EM9291
Michael Ehrenreich <michideep(a)gmail.com>
USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
Ryo Takakura <ryotkkr98(a)gmail.com>
serial: sifive: lock port in startup()/shutdown() callbacks
Stephan Gerhold <stephan.gerhold(a)linaro.org>
serial: msm: Configure correct working mode before starting earlycon
Rengarajan S <rengarajan.s(a)microchip.com>
misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack
Rengarajan S <rengarajan.s(a)microchip.com>
misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Reset IRTE to host control if *new* route isn't postable
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Explicitly treat routing entry type changes as changes
Alexander Usyskin <alexander.usyskin(a)intel.com>
mei: me: add panther lake H DID
Oliver Neukum <oneukum(a)suse.com>
USB: storage: quirk for ADATA Portable HDD CH94
Haoxiang Li <haoxiang_li2024(a)163.com>
mcb: fix a double free bug in chameleon_parse_gdd()
Sean Christopherson <seanjc(a)google.com>
KVM: SVM: Allocate IR data using atomic allocation
Petr Tesarik <ptesarik(a)suse.com>
LoongArch: Remove a bogus reference to ZONE_DMA
Ming Wang <wangming01(a)loongson.cn>
LoongArch: Return NULL from huge_pte_offset() for invalid PMD
Roman Li <Roman.Li(a)amd.com>
drm/amd/display: Force full update in gpu reset
Roman Li <Roman.Li(a)amd.com>
drm/amd/display: Fix gpu reset in multidisplay config
Oleksij Rempel <linux(a)rempel-privat.de>
net: selftests: initialize TCP header and skb payload with zero
Alexey Nepomnyashih <sdl(a)nppct.ru>
xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
Halil Pasic <pasic(a)linux.ibm.com>
virtio_console: fix missing byte order handling for cols and rows
Ping-Ke Shih <pkshih(a)realtek.com>
wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb
Ping-Ke Shih <pkshih(a)realtek.com>
wifi: mac80211: export ieee80211_purge_tx_queue() for drivers
Tiezhu Yang <yangtiezhu(a)loongson.cn>
LoongArch: Make regs_irqs_disabled() more clear
Yuli Wang <wangyuli(a)uniontech.com>
LoongArch: Select ARCH_USE_MEMTEST
Luo Gengkun <luogengkun(a)huaweicloud.com>
perf/x86: Fix non-sampling (counting) events on certain x86 platforms
Sean Christopherson <seanjc(a)google.com>
iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
Cong Wang <xiyou.wangcong(a)gmail.com>
net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
Cong Wang <xiyou.wangcong(a)gmail.com>
net_sched: hfsc: Fix a UAF vulnerability in class handling
Tung Nguyen <tung.quang.nguyen(a)est.tech>
tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
Qingfang Deng <qingfang.deng(a)siflower.com.cn>
net: phy: leds: fix memory leak
Justin Iurman <justin.iurman(a)uliege.be>
net: lwtunnel: disable BHs when required
Anastasia Kovaleva <a.kovaleva(a)yadro.com>
scsi: core: Clear flags for scsi_cmnd that did not complete
Qu Wenruo <wqu(a)suse.com>
btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
Marc Zyngier <maz(a)kernel.org>
cpufreq: cppc: Fix invalid return value in .get() callback
Henry Martin <bsdhenrymartin(a)gmail.com>
cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
Henry Martin <bsdhenrymartin(a)gmail.com>
cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
Arnd Bergmann <arnd(a)arndb.de>
dma/contiguous: avoid warning about unused size_bytes
Mark Brown <broonie(a)kernel.org>
selftests/mm: generate a temporary mountpoint for cgroup filesystem
Evgeny Pimenov <pimenoveu12(a)gmail.com>
ASoC: qcom: Fix sc7280 lpass potential buffer overflow
Srinivas Kandagatla <srinivas.kandagatla(a)linaro.org>
ASoC: qcom: q6dsp: add support to more display ports
Stefan Eichenberger <stefan.eichenberger(a)toradex.com>
phy: freescale: imx8m-pcie: assert phy reset and perst in power off
Richard Zhu <hongxing.zhu(a)nxp.com>
phy: freescale: imx8m-pcie: Add i.MX8MP PCIe PHY support
Ma Ke <make24(a)iscas.ac.cn>
PCI: Fix reference leak in pci_register_host_bridge()
Pali Rohár <pali(a)kernel.org>
PCI: Assign PCI domain IDs by ida_alloc()
Zijun Hu <quic_zijuhu(a)quicinc.com>
of: resolver: Fix device node refcount leakage in of_resolve_phandles()
Rob Herring (Arm) <robh(a)kernel.org>
of: resolver: Simplify of_resolve_phandles() using __free()
Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com>
clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
clk: renesas: r9a07g04[34]: Fix typo for sel_shdi variable
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
clk: renesas: r9a07g04[34]: Use SEL_SDHI1_STS status configuration for SD1 mux
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
clk: renesas: rzg2l: Refactor SD mux driver
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
clk: renesas: rzg2l: Remove CPG_SDHI_DSEL from generic header
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
clk: renesas: rzg2l: Add struct clk_hw_data
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
clk: renesas: rzg2l: Use u32 for flag and mux_flags
Herve Codina <herve.codina(a)bootlin.com>
backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de>
backlight: led_bl: Convert to platform remove callback returning void
Sergiu Cuciurean <sergiu.cuciurean(a)analog.com>
iio: adc: ad7768-1: Fix conversion result sign
Jonathan Cameron <Jonathan.Cameron(a)huawei.com>
iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: fix VTU methods for 6320 family
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: fix internal PHYs for 6320 family
Alexis Lothoré <alexis.lothore(a)bootlin.com>
net: dsa: mv88e6xxx: add field to specify internal phys layout
Alexis Lothoré <alexis.lothore(a)bootlin.com>
net: dsa: mv88e6xxx: pass directly chip structure to mv88e6xxx_phy_is_internal
Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk>
net: dsa: mv88e6xxx: move link forcing to mac_prepare/mac_finish
Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk>
net: dsa: add support for mac_prepare() and mac_finish() calls
Vladimir Oltean <vladimir.oltean(a)nxp.com>
net: dsa: mv88e6xxx: don't dispose of Global2 IRQ mappings from mdiobus code
Haoxiang Li <haoxiang_li2024(a)163.com>
auxdisplay: hd44780: Fix an API misuse in hd44780.c
Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de>
auxdisplay: hd44780: Convert to platform remove callback returning void
Steven Rostedt <rostedt(a)goodmis.org>
tracing: Verify event formats that have "%*p.."
Steven Rostedt <rostedt(a)goodmis.org>
tracing: Add __print_dynamic_array() helper
Steven Rostedt (Google) <rostedt(a)goodmis.org>
tracing: Add __string_len() example
Steven Rostedt (Google) <rostedt(a)goodmis.org>
tracing: Fix cpumask() example typo
Steven Rostedt (Google) <rostedt(a)goodmis.org>
tracing: Add __cpumask to denote a trace event field that is a cpumask_t
Thorsten Leemhuis <linux(a)leemhuis.info>
module: sign with sha512 instead of sha1 by default
-------------
Diffstat:
Makefile | 4 +-
arch/loongarch/Kconfig | 1 +
arch/loongarch/include/asm/ptrace.h | 4 +-
arch/loongarch/mm/hugetlbpage.c | 2 +-
arch/loongarch/mm/init.c | 3 -
arch/mips/include/asm/mips-cm.h | 22 +++
arch/mips/kernel/mips-cm.c | 14 ++
arch/parisc/kernel/pdt.c | 2 +
arch/s390/kvm/trace-s390.h | 4 +-
arch/x86/entry/entry.S | 2 +-
arch/x86/events/core.c | 2 +-
arch/x86/kernel/cpu/bugs.c | 36 ++---
arch/x86/kernel/i8253.c | 3 +-
arch/x86/kvm/svm/avic.c | 60 +++----
arch/x86/kvm/vmx/posted_intr.c | 28 ++--
arch/x86/kvm/x86.c | 3 +-
arch/x86/mm/tlb.c | 6 +-
crypto/crypto_null.c | 37 +++--
drivers/acpi/ec.c | 28 ++++
drivers/acpi/pptt.c | 4 +-
drivers/auxdisplay/hd44780.c | 9 +-
drivers/block/loop.c | 2 +-
drivers/char/virtio_console.c | 7 +-
drivers/clk/clk.c | 4 +
drivers/clk/renesas/r9a07g043-cpg.c | 28 +++-
drivers/clk/renesas/r9a07g044-cpg.c | 21 ++-
drivers/clk/renesas/rzg2l-cpg.c | 178 +++++++++++++++------
drivers/clk/renesas/rzg2l-cpg.h | 24 +--
drivers/comedi/drivers/jr3_pci.c | 17 +-
drivers/cpufreq/cppc_cpufreq.c | 2 +-
drivers/cpufreq/scmi-cpufreq.c | 10 +-
drivers/cpufreq/scpi-cpufreq.c | 13 +-
drivers/crypto/atmel-sha204a.c | 7 +-
drivers/dma-buf/udmabuf.c | 2 +-
drivers/dma/dmatest.c | 6 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 9 +-
drivers/iio/adc/ad7768-1.c | 5 +-
drivers/infiniband/hw/qib/qib_fs.c | 1 +
drivers/iommu/amd/iommu.c | 2 +-
drivers/mcb/mcb-parse.c | 2 +-
drivers/md/raid1.c | 26 +--
drivers/misc/lkdtm/perms.c | 14 +-
drivers/misc/mchp_pci1xxxx/mchp_pci1xxxx_gpio.c | 8 +-
drivers/misc/mei/hw-me-regs.h | 1 +
drivers/misc/mei/pci-me.c | 1 +
drivers/net/dsa/mv88e6xxx/chip.c | 106 ++++++++----
drivers/net/dsa/mv88e6xxx/chip.h | 5 +
drivers/net/dsa/mv88e6xxx/global2.c | 25 +--
drivers/net/phy/phy_led_triggers.c | 23 +--
drivers/net/wireless/realtek/rtw88/main.c | 2 +-
drivers/net/wireless/realtek/rtw88/tx.c | 2 +-
drivers/net/xen-netfront.c | 19 ++-
drivers/ntb/hw/amd/ntb_hw_amd.c | 1 +
drivers/ntb/hw/idt/ntb_hw_idt.c | 18 +--
drivers/nvme/host/core.c | 9 ++
drivers/nvme/target/fc.c | 25 ++-
drivers/of/device.c | 7 +-
drivers/of/resolver.c | 37 ++---
drivers/pci/pci.c | 107 +++++++------
drivers/pci/probe.c | 16 +-
drivers/pci/remove.c | 7 +
drivers/phy/freescale/phy-fsl-imx8m-pcie.c | 46 +++++-
drivers/pinctrl/renesas/pinctrl-rza2.c | 3 +
drivers/rtc/rtc-pcf85063.c | 19 ++-
drivers/s390/char/sclp_con.c | 17 ++
drivers/s390/char/sclp_tty.c | 12 ++
drivers/scsi/hisi_sas/hisi_sas_main.c | 20 +++
drivers/scsi/pm8001/pm8001_sas.c | 1 +
drivers/scsi/scsi_lib.c | 6 +-
drivers/spi/spi-imx.c | 5 +-
drivers/spi/spi-tegra210-quad.c | 6 +-
drivers/thunderbolt/tb.c | 16 +-
drivers/tty/serial/msm_serial.c | 6 +
drivers/tty/serial/sifive.c | 6 +
drivers/ufs/host/ufs-exynos.c | 10 +-
drivers/usb/cdns3/cdns3-gadget.c | 2 +
drivers/usb/chipidea/ci_hdrc_imx.c | 44 +++--
drivers/usb/class/cdc-wdm.c | 21 ++-
drivers/usb/core/quirks.c | 9 ++
drivers/usb/dwc3/dwc3-pci.c | 10 ++
drivers/usb/dwc3/dwc3-xilinx.c | 4 +-
drivers/usb/dwc3/gadget.c | 28 +++-
drivers/usb/gadget/udc/aspeed-vhub/dev.c | 3 +
drivers/usb/host/max3421-hcd.c | 7 +
drivers/usb/host/ohci-pci.c | 23 +++
drivers/usb/host/xhci-mvebu.c | 10 --
drivers/usb/host/xhci-mvebu.h | 6 -
drivers/usb/host/xhci-plat.c | 2 +-
drivers/usb/host/xhci-ring.c | 11 +-
drivers/usb/serial/ftdi_sio.c | 2 +
drivers/usb/serial/ftdi_sio_ids.h | 5 +
drivers/usb/serial/option.c | 3 +
drivers/usb/serial/usb-serial-simple.c | 7 +
drivers/usb/storage/unusual_uas.h | 7 +
drivers/video/backlight/led_bl.c | 11 +-
drivers/xen/Kconfig | 2 +-
fs/btrfs/file.c | 9 +-
fs/ext4/block_validity.c | 5 +-
fs/ext4/inode.c | 7 +-
fs/jfs/jfs_dinode.h | 2 +-
fs/jfs/jfs_imap.c | 6 +-
fs/jfs/jfs_incore.h | 2 +-
fs/jfs/jfs_txnmgr.c | 4 +-
fs/jfs/jfs_xtree.c | 4 +-
fs/jfs/jfs_xtree.h | 37 +++--
fs/ntfs3/file.c | 1 +
include/dt-bindings/sound/qcom,q6dsp-lpass-ports.h | 8 +
include/linux/filter.h | 9 +-
include/linux/pci.h | 1 +
include/net/dsa.h | 6 +
include/net/mac80211.h | 13 ++
include/trace/bpf_probe.h | 6 +
include/trace/perf.h | 6 +
include/trace/stages/stage1_struct_define.h | 6 +
include/trace/stages/stage2_data_offsets.h | 6 +
include/trace/stages/stage3_trace_output.h | 14 ++
include/trace/stages/stage4_event_fields.h | 12 ++
include/trace/stages/stage5_get_offsets.h | 6 +
include/trace/stages/stage6_event_callback.h | 20 +++
include/trace/stages/stage7_class_define.h | 3 +
init/Kconfig | 2 +-
kernel/dma/contiguous.c | 3 +-
kernel/module/Kconfig | 1 +
kernel/trace/bpf_trace.c | 7 +-
kernel/trace/trace_events.c | 7 +
lib/test_ubsan.c | 18 ++-
net/9p/client.c | 30 ++--
net/core/lwtunnel.c | 26 ++-
net/core/selftests.c | 18 ++-
net/dsa/port.c | 32 ++++
net/mac80211/ieee80211_i.h | 2 -
net/mac80211/status.c | 1 +
net/sched/act_mirred.c | 22 +--
net/sched/sch_hfsc.c | 23 ++-
net/tipc/monitor.c | 3 +-
samples/trace_events/trace-events-sample.c | 2 +-
samples/trace_events/trace-events-sample.h | 46 +++++-
scripts/Makefile.lib | 2 +-
sound/soc/codecs/wcd934x.c | 2 +-
sound/soc/qcom/lpass.h | 3 +-
sound/soc/qcom/qdsp6/q6afe-dai.c | 2 +-
sound/soc/qcom/qdsp6/q6dsp-lpass-ports.c | 43 +++--
sound/virtio/virtio_pcm.c | 21 ++-
tools/objtool/check.c | 9 ++
tools/testing/selftests/mincore/mincore_selftest.c | 3 -
tools/testing/selftests/ublk/test_stripe_04.sh | 24 +++
.../selftests/vm/charge_reserved_hugetlb.sh | 4 +-
.../selftests/vm/hugetlb_reparenting_test.sh | 2 +-
148 files changed, 1434 insertions(+), 580 deletions(-)
4 months, 2 weeks
- 9
- 9
[PATCH 0/3] can: rx-offload: fix order of unregistration calls
by Marc Kleine-Budde
If a driver is removed, the driver framework invokes the driver's
remove callback. A CAN driver's remove function calls
unregister_candev(), which calls net_device_ops::ndo_stop further down
in the call stack for interfaces which are in the "up" state.
With the mcp251xfd driver the removal of the module causes the
following warning:
| WARNING: CPU: 0 PID: 352 at net/core/dev.c:7342 __netif_napi_del_locked+0xc8/0xd8
as can_rx_offload_del() deletes the NAPI, while it is still active,
because the interface is still up.
To fix the warning, first unregister the network interface, which
calls net_device_ops::ndo_stop, which disables the NAPI, and then call
can_rx_offload_del().
All other driver using the rx-offload helper have been checked and the
same issue has been found in the rockchip and m_can driver. These have
been fixed, but only compile time tested. On the mcp251xfd the fix was
tested on hardware.
Signed-off-by: Marc Kleine-Budde <mkl(a)pengutronix.de>
---
Marc Kleine-Budde (3):
can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls
can: rockchip_canfd: m_can_class_unregister: fix order of unregistration calls
can: mcan: m_can_class_unregister: fix order of unregistration calls
drivers/net/can/m_can/m_can.c | 2 +-
drivers/net/can/rockchip/rockchip_canfd-core.c | 2 +-
drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c | 2 +-
3 files changed, 3 insertions(+), 3 deletions(-)
---
base-commit: ebd297a2affadb6f6f4d2e5d975c1eda18ac762d
change-id: 20250502-can-rx-offload-del-eb79379733dd
Best regards,
--
Marc Kleine-Budde <mkl(a)pengutronix.de>
4 months, 2 weeks
- 2
- 5
FAILED: patch "[PATCH] platform/x86: alienware-wmi-wmax: Add support for Alienware" failed to apply to 5.4-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.4-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.4.y
git checkout FETCH_HEAD
git cherry-pick -x 246f9bb62016c423972ea7f2335a8e0ed3521cde
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050500-crinkly-accent-49da@gregkh' --subject-prefix 'PATCH 5.4.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From 246f9bb62016c423972ea7f2335a8e0ed3521cde Mon Sep 17 00:00:00 2001
From: Kurt Borja <kuurtb(a)gmail.com>
Date: Sat, 19 Apr 2025 12:45:29 -0300
Subject: [PATCH] platform/x86: alienware-wmi-wmax: Add support for Alienware
m15 R7
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Extend thermal control support to Alienware m15 R7.
Cc: stable(a)vger.kernel.org
Tested-by: Romain THERY <romain.thery(a)ik.me>
Signed-off-by: Kurt Borja <kuurtb(a)gmail.com>
Link: https://lore.kernel.org/r/20250419-m15-r7-v1-1-18c6eaa27e25@gmail.com
Reviewed-by: Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com>
Signed-off-by: Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com>
diff --git a/drivers/platform/x86/dell/alienware-wmi-wmax.c b/drivers/platform/x86/dell/alienware-wmi-wmax.c
index 3f9e1e986ecf..08b82c151e07 100644
--- a/drivers/platform/x86/dell/alienware-wmi-wmax.c
+++ b/drivers/platform/x86/dell/alienware-wmi-wmax.c
@@ -69,6 +69,14 @@ static const struct dmi_system_id awcc_dmi_table[] __initconst = {
},
.driver_data = &generic_quirks,
},
+ {
+ .ident = "Alienware m15 R7",
+ .matches = {
+ DMI_MATCH(DMI_SYS_VENDOR, "Alienware"),
+ DMI_MATCH(DMI_PRODUCT_NAME, "Alienware m15 R7"),
+ },
+ .driver_data = &generic_quirks,
+ },
{
.ident = "Alienware m16 R1",
.matches = {
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] platform/x86: alienware-wmi-wmax: Add support for Alienware" failed to apply to 5.10-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.10-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.10.y
git checkout FETCH_HEAD
git cherry-pick -x 246f9bb62016c423972ea7f2335a8e0ed3521cde
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050559-chirping-thievish-0b30@gregkh' --subject-prefix 'PATCH 5.10.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From 246f9bb62016c423972ea7f2335a8e0ed3521cde Mon Sep 17 00:00:00 2001
From: Kurt Borja <kuurtb(a)gmail.com>
Date: Sat, 19 Apr 2025 12:45:29 -0300
Subject: [PATCH] platform/x86: alienware-wmi-wmax: Add support for Alienware
m15 R7
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Extend thermal control support to Alienware m15 R7.
Cc: stable(a)vger.kernel.org
Tested-by: Romain THERY <romain.thery(a)ik.me>
Signed-off-by: Kurt Borja <kuurtb(a)gmail.com>
Link: https://lore.kernel.org/r/20250419-m15-r7-v1-1-18c6eaa27e25@gmail.com
Reviewed-by: Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com>
Signed-off-by: Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com>
diff --git a/drivers/platform/x86/dell/alienware-wmi-wmax.c b/drivers/platform/x86/dell/alienware-wmi-wmax.c
index 3f9e1e986ecf..08b82c151e07 100644
--- a/drivers/platform/x86/dell/alienware-wmi-wmax.c
+++ b/drivers/platform/x86/dell/alienware-wmi-wmax.c
@@ -69,6 +69,14 @@ static const struct dmi_system_id awcc_dmi_table[] __initconst = {
},
.driver_data = &generic_quirks,
},
+ {
+ .ident = "Alienware m15 R7",
+ .matches = {
+ DMI_MATCH(DMI_SYS_VENDOR, "Alienware"),
+ DMI_MATCH(DMI_PRODUCT_NAME, "Alienware m15 R7"),
+ },
+ .driver_data = &generic_quirks,
+ },
{
.ident = "Alienware m16 R1",
.matches = {
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] platform/x86: alienware-wmi-wmax: Add support for Alienware" failed to apply to 5.15-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.15-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.15.y
git checkout FETCH_HEAD
git cherry-pick -x 246f9bb62016c423972ea7f2335a8e0ed3521cde
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050559-nappy-trouble-9e98@gregkh' --subject-prefix 'PATCH 5.15.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From 246f9bb62016c423972ea7f2335a8e0ed3521cde Mon Sep 17 00:00:00 2001
From: Kurt Borja <kuurtb(a)gmail.com>
Date: Sat, 19 Apr 2025 12:45:29 -0300
Subject: [PATCH] platform/x86: alienware-wmi-wmax: Add support for Alienware
m15 R7
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Extend thermal control support to Alienware m15 R7.
Cc: stable(a)vger.kernel.org
Tested-by: Romain THERY <romain.thery(a)ik.me>
Signed-off-by: Kurt Borja <kuurtb(a)gmail.com>
Link: https://lore.kernel.org/r/20250419-m15-r7-v1-1-18c6eaa27e25@gmail.com
Reviewed-by: Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com>
Signed-off-by: Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com>
diff --git a/drivers/platform/x86/dell/alienware-wmi-wmax.c b/drivers/platform/x86/dell/alienware-wmi-wmax.c
index 3f9e1e986ecf..08b82c151e07 100644
--- a/drivers/platform/x86/dell/alienware-wmi-wmax.c
+++ b/drivers/platform/x86/dell/alienware-wmi-wmax.c
@@ -69,6 +69,14 @@ static const struct dmi_system_id awcc_dmi_table[] __initconst = {
},
.driver_data = &generic_quirks,
},
+ {
+ .ident = "Alienware m15 R7",
+ .matches = {
+ DMI_MATCH(DMI_SYS_VENDOR, "Alienware"),
+ DMI_MATCH(DMI_PRODUCT_NAME, "Alienware m15 R7"),
+ },
+ .driver_data = &generic_quirks,
+ },
{
.ident = "Alienware m16 R1",
.matches = {
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] platform/x86: alienware-wmi-wmax: Add support for Alienware" failed to apply to 6.6-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 6.6-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.6.y
git checkout FETCH_HEAD
git cherry-pick -x 246f9bb62016c423972ea7f2335a8e0ed3521cde
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050558-dingo-canola-c07e@gregkh' --subject-prefix 'PATCH 6.6.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From 246f9bb62016c423972ea7f2335a8e0ed3521cde Mon Sep 17 00:00:00 2001
From: Kurt Borja <kuurtb(a)gmail.com>
Date: Sat, 19 Apr 2025 12:45:29 -0300
Subject: [PATCH] platform/x86: alienware-wmi-wmax: Add support for Alienware
m15 R7
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Extend thermal control support to Alienware m15 R7.
Cc: stable(a)vger.kernel.org
Tested-by: Romain THERY <romain.thery(a)ik.me>
Signed-off-by: Kurt Borja <kuurtb(a)gmail.com>
Link: https://lore.kernel.org/r/20250419-m15-r7-v1-1-18c6eaa27e25@gmail.com
Reviewed-by: Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com>
Signed-off-by: Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com>
diff --git a/drivers/platform/x86/dell/alienware-wmi-wmax.c b/drivers/platform/x86/dell/alienware-wmi-wmax.c
index 3f9e1e986ecf..08b82c151e07 100644
--- a/drivers/platform/x86/dell/alienware-wmi-wmax.c
+++ b/drivers/platform/x86/dell/alienware-wmi-wmax.c
@@ -69,6 +69,14 @@ static const struct dmi_system_id awcc_dmi_table[] __initconst = {
},
.driver_data = &generic_quirks,
},
+ {
+ .ident = "Alienware m15 R7",
+ .matches = {
+ DMI_MATCH(DMI_SYS_VENDOR, "Alienware"),
+ DMI_MATCH(DMI_PRODUCT_NAME, "Alienware m15 R7"),
+ },
+ .driver_data = &generic_quirks,
+ },
{
.ident = "Alienware m16 R1",
.matches = {
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] platform/x86: alienware-wmi-wmax: Add support for Alienware" failed to apply to 6.1-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 6.1-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.1.y
git checkout FETCH_HEAD
git cherry-pick -x 246f9bb62016c423972ea7f2335a8e0ed3521cde
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050558-unissued-fructose-3d77@gregkh' --subject-prefix 'PATCH 6.1.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From 246f9bb62016c423972ea7f2335a8e0ed3521cde Mon Sep 17 00:00:00 2001
From: Kurt Borja <kuurtb(a)gmail.com>
Date: Sat, 19 Apr 2025 12:45:29 -0300
Subject: [PATCH] platform/x86: alienware-wmi-wmax: Add support for Alienware
m15 R7
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Extend thermal control support to Alienware m15 R7.
Cc: stable(a)vger.kernel.org
Tested-by: Romain THERY <romain.thery(a)ik.me>
Signed-off-by: Kurt Borja <kuurtb(a)gmail.com>
Link: https://lore.kernel.org/r/20250419-m15-r7-v1-1-18c6eaa27e25@gmail.com
Reviewed-by: Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com>
Signed-off-by: Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com>
diff --git a/drivers/platform/x86/dell/alienware-wmi-wmax.c b/drivers/platform/x86/dell/alienware-wmi-wmax.c
index 3f9e1e986ecf..08b82c151e07 100644
--- a/drivers/platform/x86/dell/alienware-wmi-wmax.c
+++ b/drivers/platform/x86/dell/alienware-wmi-wmax.c
@@ -69,6 +69,14 @@ static const struct dmi_system_id awcc_dmi_table[] __initconst = {
},
.driver_data = &generic_quirks,
},
+ {
+ .ident = "Alienware m15 R7",
+ .matches = {
+ DMI_MATCH(DMI_SYS_VENDOR, "Alienware"),
+ DMI_MATCH(DMI_PRODUCT_NAME, "Alienware m15 R7"),
+ },
+ .driver_data = &generic_quirks,
+ },
{
.ident = "Alienware m16 R1",
.matches = {
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] platform/x86: alienware-wmi-wmax: Add support for Alienware" failed to apply to 6.12-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 6.12-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.12.y
git checkout FETCH_HEAD
git cherry-pick -x 246f9bb62016c423972ea7f2335a8e0ed3521cde
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050558-triumph-watch-9e5b@gregkh' --subject-prefix 'PATCH 6.12.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From 246f9bb62016c423972ea7f2335a8e0ed3521cde Mon Sep 17 00:00:00 2001
From: Kurt Borja <kuurtb(a)gmail.com>
Date: Sat, 19 Apr 2025 12:45:29 -0300
Subject: [PATCH] platform/x86: alienware-wmi-wmax: Add support for Alienware
m15 R7
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Extend thermal control support to Alienware m15 R7.
Cc: stable(a)vger.kernel.org
Tested-by: Romain THERY <romain.thery(a)ik.me>
Signed-off-by: Kurt Borja <kuurtb(a)gmail.com>
Link: https://lore.kernel.org/r/20250419-m15-r7-v1-1-18c6eaa27e25@gmail.com
Reviewed-by: Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com>
Signed-off-by: Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com>
diff --git a/drivers/platform/x86/dell/alienware-wmi-wmax.c b/drivers/platform/x86/dell/alienware-wmi-wmax.c
index 3f9e1e986ecf..08b82c151e07 100644
--- a/drivers/platform/x86/dell/alienware-wmi-wmax.c
+++ b/drivers/platform/x86/dell/alienware-wmi-wmax.c
@@ -69,6 +69,14 @@ static const struct dmi_system_id awcc_dmi_table[] __initconst = {
},
.driver_data = &generic_quirks,
},
+ {
+ .ident = "Alienware m15 R7",
+ .matches = {
+ DMI_MATCH(DMI_SYS_VENDOR, "Alienware"),
+ DMI_MATCH(DMI_PRODUCT_NAME, "Alienware m15 R7"),
+ },
+ .driver_data = &generic_quirks,
+ },
{
.ident = "Alienware m16 R1",
.matches = {
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] drm/amd/display: Fix slab-use-after-free in hdcp" failed to apply to 5.10-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.10-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.10.y
git checkout FETCH_HEAD
git cherry-pick -x be593d9d91c5a3a363d456b9aceb71029aeb3f1d
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050552-definite-secrecy-8c21@gregkh' --subject-prefix 'PATCH 5.10.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From be593d9d91c5a3a363d456b9aceb71029aeb3f1d Mon Sep 17 00:00:00 2001
From: Chris Bainbridge <chris.bainbridge(a)gmail.com>
Date: Thu, 17 Apr 2025 16:50:05 -0500
Subject: [PATCH] drm/amd/display: Fix slab-use-after-free in hdcp
The HDCP code in amdgpu_dm_hdcp.c copies pointers to amdgpu_dm_connector
objects without incrementing the kref reference counts. When using a
USB-C dock, and the dock is unplugged, the corresponding
amdgpu_dm_connector objects are freed, creating dangling pointers in the
HDCP code. When the dock is plugged back, the dangling pointers are
dereferenced, resulting in a slab-use-after-free:
[ 66.775837] BUG: KASAN: slab-use-after-free in event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.776171] Read of size 4 at addr ffff888127804120 by task kworker/0:1/10
[ 66.776179] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.14.0-rc7-00180-g54505f727a38-dirty #233
[ 66.776183] Hardware name: HP HP Pavilion Aero Laptop 13-be0xxx/8916, BIOS F.17 12/18/2024
[ 66.776186] Workqueue: events event_property_validate [amdgpu]
[ 66.776494] Call Trace:
[ 66.776496] <TASK>
[ 66.776497] dump_stack_lvl+0x70/0xa0
[ 66.776504] print_report+0x175/0x555
[ 66.776507] ? __virt_addr_valid+0x243/0x450
[ 66.776510] ? kasan_complete_mode_report_info+0x66/0x1c0
[ 66.776515] kasan_report+0xeb/0x1c0
[ 66.776518] ? event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.776819] ? event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.777121] __asan_report_load4_noabort+0x14/0x20
[ 66.777124] event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.777342] ? __lock_acquire+0x6b40/0x6b40
[ 66.777347] ? enable_assr+0x250/0x250 [amdgpu]
[ 66.777571] process_one_work+0x86b/0x1510
[ 66.777575] ? pwq_dec_nr_in_flight+0xcf0/0xcf0
[ 66.777578] ? assign_work+0x16b/0x280
[ 66.777580] ? lock_is_held_type+0xa3/0x130
[ 66.777583] worker_thread+0x5c0/0xfa0
[ 66.777587] ? process_one_work+0x1510/0x1510
[ 66.777588] kthread+0x3a2/0x840
[ 66.777591] ? kthread_is_per_cpu+0xd0/0xd0
[ 66.777594] ? trace_hardirqs_on+0x4f/0x60
[ 66.777597] ? _raw_spin_unlock_irq+0x27/0x60
[ 66.777599] ? calculate_sigpending+0x77/0xa0
[ 66.777602] ? kthread_is_per_cpu+0xd0/0xd0
[ 66.777605] ret_from_fork+0x40/0x90
[ 66.777607] ? kthread_is_per_cpu+0xd0/0xd0
[ 66.777609] ret_from_fork_asm+0x11/0x20
[ 66.777614] </TASK>
[ 66.777643] Allocated by task 10:
[ 66.777646] kasan_save_stack+0x39/0x60
[ 66.777649] kasan_save_track+0x14/0x40
[ 66.777652] kasan_save_alloc_info+0x37/0x50
[ 66.777655] __kasan_kmalloc+0xbb/0xc0
[ 66.777658] __kmalloc_cache_noprof+0x1c8/0x4b0
[ 66.777661] dm_dp_add_mst_connector+0xdd/0x5c0 [amdgpu]
[ 66.777880] drm_dp_mst_port_add_connector+0x47e/0x770 [drm_display_helper]
[ 66.777892] drm_dp_send_link_address+0x1554/0x2bf0 [drm_display_helper]
[ 66.777901] drm_dp_check_and_send_link_address+0x187/0x1f0 [drm_display_helper]
[ 66.777909] drm_dp_mst_link_probe_work+0x2b8/0x410 [drm_display_helper]
[ 66.777917] process_one_work+0x86b/0x1510
[ 66.777919] worker_thread+0x5c0/0xfa0
[ 66.777922] kthread+0x3a2/0x840
[ 66.777925] ret_from_fork+0x40/0x90
[ 66.777927] ret_from_fork_asm+0x11/0x20
[ 66.777932] Freed by task 1713:
[ 66.777935] kasan_save_stack+0x39/0x60
[ 66.777938] kasan_save_track+0x14/0x40
[ 66.777940] kasan_save_free_info+0x3b/0x60
[ 66.777944] __kasan_slab_free+0x52/0x70
[ 66.777946] kfree+0x13f/0x4b0
[ 66.777949] dm_dp_mst_connector_destroy+0xfa/0x150 [amdgpu]
[ 66.778179] drm_connector_free+0x7d/0xb0
[ 66.778184] drm_mode_object_put.part.0+0xee/0x160
[ 66.778188] drm_mode_object_put+0x37/0x50
[ 66.778191] drm_atomic_state_default_clear+0x220/0xd60
[ 66.778194] __drm_atomic_state_free+0x16e/0x2a0
[ 66.778197] drm_mode_atomic_ioctl+0x15ed/0x2ba0
[ 66.778200] drm_ioctl_kernel+0x17a/0x310
[ 66.778203] drm_ioctl+0x584/0xd10
[ 66.778206] amdgpu_drm_ioctl+0xd2/0x1c0 [amdgpu]
[ 66.778375] __x64_sys_ioctl+0x139/0x1a0
[ 66.778378] x64_sys_call+0xee7/0xfb0
[ 66.778381] do_syscall_64+0x87/0x140
[ 66.778385] entry_SYSCALL_64_after_hwframe+0x4b/0x53
Fix this by properly incrementing and decrementing the reference counts
when making and deleting copies of the amdgpu_dm_connector pointers.
(Mario: rebase on current code and update fixes tag)
Closes: https://gitlab.freedesktop.org/drm/amd/-/issues/4006
Signed-off-by: Chris Bainbridge <chris.bainbridge(a)gmail.com>
Fixes: da3fd7ac0bcf3 ("drm/amd/display: Update CP property based on HW query")
Reviewed-by: Alex Hung <alex.hung(a)amd.com>
Link: https://lore.kernel.org/r/20250417215005.37964-1-mario.limonciello@amd.com
Signed-off-by: Mario Limonciello <mario.limonciello(a)amd.com>
Signed-off-by: Alex Deucher <alexander.deucher(a)amd.com>
(cherry picked from commit d4673f3c3b3dcb74e36e53cdfc880baa7a87b330)
Cc: stable(a)vger.kernel.org
diff --git a/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c b/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c
index 5198a079b463..8f22ad966543 100644
--- a/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c
+++ b/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c
@@ -173,6 +173,9 @@ void hdcp_update_display(struct hdcp_workqueue *hdcp_work,
unsigned int conn_index = aconnector->base.index;
guard(mutex)(&hdcp_w->mutex);
+ drm_connector_get(&aconnector->base);
+ if (hdcp_w->aconnector[conn_index])
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
hdcp_w->aconnector[conn_index] = aconnector;
memset(&link_adjust, 0, sizeof(link_adjust));
@@ -220,7 +223,6 @@ static void hdcp_remove_display(struct hdcp_workqueue *hdcp_work,
unsigned int conn_index = aconnector->base.index;
guard(mutex)(&hdcp_w->mutex);
- hdcp_w->aconnector[conn_index] = aconnector;
/* the removal of display will invoke auth reset -> hdcp destroy and
* we'd expect the Content Protection (CP) property changed back to
@@ -236,7 +238,10 @@ static void hdcp_remove_display(struct hdcp_workqueue *hdcp_work,
}
mod_hdcp_remove_display(&hdcp_w->hdcp, aconnector->base.index, &hdcp_w->output);
-
+ if (hdcp_w->aconnector[conn_index]) {
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
+ hdcp_w->aconnector[conn_index] = NULL;
+ }
process_output(hdcp_w);
}
@@ -254,6 +259,10 @@ void hdcp_reset_display(struct hdcp_workqueue *hdcp_work, unsigned int link_inde
for (conn_index = 0; conn_index < AMDGPU_DM_MAX_DISPLAY_INDEX; conn_index++) {
hdcp_w->encryption_status[conn_index] =
MOD_HDCP_ENCRYPTION_STATUS_HDCP_OFF;
+ if (hdcp_w->aconnector[conn_index]) {
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
+ hdcp_w->aconnector[conn_index] = NULL;
+ }
}
process_output(hdcp_w);
@@ -488,6 +497,7 @@ static void update_config(void *handle, struct cp_psp_stream_config *config)
struct hdcp_workqueue *hdcp_work = handle;
struct amdgpu_dm_connector *aconnector = config->dm_stream_ctx;
int link_index = aconnector->dc_link->link_index;
+ unsigned int conn_index = aconnector->base.index;
struct mod_hdcp_display *display = &hdcp_work[link_index].display;
struct mod_hdcp_link *link = &hdcp_work[link_index].link;
struct hdcp_workqueue *hdcp_w = &hdcp_work[link_index];
@@ -544,7 +554,10 @@ static void update_config(void *handle, struct cp_psp_stream_config *config)
guard(mutex)(&hdcp_w->mutex);
mod_hdcp_add_display(&hdcp_w->hdcp, link, display, &hdcp_w->output);
-
+ drm_connector_get(&aconnector->base);
+ if (hdcp_w->aconnector[conn_index])
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
+ hdcp_w->aconnector[conn_index] = aconnector;
process_output(hdcp_w);
}
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] drm/amd/display: Fix slab-use-after-free in hdcp" failed to apply to 5.15-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.15-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.15.y
git checkout FETCH_HEAD
git cherry-pick -x be593d9d91c5a3a363d456b9aceb71029aeb3f1d
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050551-plated-craziness-6483@gregkh' --subject-prefix 'PATCH 5.15.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From be593d9d91c5a3a363d456b9aceb71029aeb3f1d Mon Sep 17 00:00:00 2001
From: Chris Bainbridge <chris.bainbridge(a)gmail.com>
Date: Thu, 17 Apr 2025 16:50:05 -0500
Subject: [PATCH] drm/amd/display: Fix slab-use-after-free in hdcp
The HDCP code in amdgpu_dm_hdcp.c copies pointers to amdgpu_dm_connector
objects without incrementing the kref reference counts. When using a
USB-C dock, and the dock is unplugged, the corresponding
amdgpu_dm_connector objects are freed, creating dangling pointers in the
HDCP code. When the dock is plugged back, the dangling pointers are
dereferenced, resulting in a slab-use-after-free:
[ 66.775837] BUG: KASAN: slab-use-after-free in event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.776171] Read of size 4 at addr ffff888127804120 by task kworker/0:1/10
[ 66.776179] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.14.0-rc7-00180-g54505f727a38-dirty #233
[ 66.776183] Hardware name: HP HP Pavilion Aero Laptop 13-be0xxx/8916, BIOS F.17 12/18/2024
[ 66.776186] Workqueue: events event_property_validate [amdgpu]
[ 66.776494] Call Trace:
[ 66.776496] <TASK>
[ 66.776497] dump_stack_lvl+0x70/0xa0
[ 66.776504] print_report+0x175/0x555
[ 66.776507] ? __virt_addr_valid+0x243/0x450
[ 66.776510] ? kasan_complete_mode_report_info+0x66/0x1c0
[ 66.776515] kasan_report+0xeb/0x1c0
[ 66.776518] ? event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.776819] ? event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.777121] __asan_report_load4_noabort+0x14/0x20
[ 66.777124] event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.777342] ? __lock_acquire+0x6b40/0x6b40
[ 66.777347] ? enable_assr+0x250/0x250 [amdgpu]
[ 66.777571] process_one_work+0x86b/0x1510
[ 66.777575] ? pwq_dec_nr_in_flight+0xcf0/0xcf0
[ 66.777578] ? assign_work+0x16b/0x280
[ 66.777580] ? lock_is_held_type+0xa3/0x130
[ 66.777583] worker_thread+0x5c0/0xfa0
[ 66.777587] ? process_one_work+0x1510/0x1510
[ 66.777588] kthread+0x3a2/0x840
[ 66.777591] ? kthread_is_per_cpu+0xd0/0xd0
[ 66.777594] ? trace_hardirqs_on+0x4f/0x60
[ 66.777597] ? _raw_spin_unlock_irq+0x27/0x60
[ 66.777599] ? calculate_sigpending+0x77/0xa0
[ 66.777602] ? kthread_is_per_cpu+0xd0/0xd0
[ 66.777605] ret_from_fork+0x40/0x90
[ 66.777607] ? kthread_is_per_cpu+0xd0/0xd0
[ 66.777609] ret_from_fork_asm+0x11/0x20
[ 66.777614] </TASK>
[ 66.777643] Allocated by task 10:
[ 66.777646] kasan_save_stack+0x39/0x60
[ 66.777649] kasan_save_track+0x14/0x40
[ 66.777652] kasan_save_alloc_info+0x37/0x50
[ 66.777655] __kasan_kmalloc+0xbb/0xc0
[ 66.777658] __kmalloc_cache_noprof+0x1c8/0x4b0
[ 66.777661] dm_dp_add_mst_connector+0xdd/0x5c0 [amdgpu]
[ 66.777880] drm_dp_mst_port_add_connector+0x47e/0x770 [drm_display_helper]
[ 66.777892] drm_dp_send_link_address+0x1554/0x2bf0 [drm_display_helper]
[ 66.777901] drm_dp_check_and_send_link_address+0x187/0x1f0 [drm_display_helper]
[ 66.777909] drm_dp_mst_link_probe_work+0x2b8/0x410 [drm_display_helper]
[ 66.777917] process_one_work+0x86b/0x1510
[ 66.777919] worker_thread+0x5c0/0xfa0
[ 66.777922] kthread+0x3a2/0x840
[ 66.777925] ret_from_fork+0x40/0x90
[ 66.777927] ret_from_fork_asm+0x11/0x20
[ 66.777932] Freed by task 1713:
[ 66.777935] kasan_save_stack+0x39/0x60
[ 66.777938] kasan_save_track+0x14/0x40
[ 66.777940] kasan_save_free_info+0x3b/0x60
[ 66.777944] __kasan_slab_free+0x52/0x70
[ 66.777946] kfree+0x13f/0x4b0
[ 66.777949] dm_dp_mst_connector_destroy+0xfa/0x150 [amdgpu]
[ 66.778179] drm_connector_free+0x7d/0xb0
[ 66.778184] drm_mode_object_put.part.0+0xee/0x160
[ 66.778188] drm_mode_object_put+0x37/0x50
[ 66.778191] drm_atomic_state_default_clear+0x220/0xd60
[ 66.778194] __drm_atomic_state_free+0x16e/0x2a0
[ 66.778197] drm_mode_atomic_ioctl+0x15ed/0x2ba0
[ 66.778200] drm_ioctl_kernel+0x17a/0x310
[ 66.778203] drm_ioctl+0x584/0xd10
[ 66.778206] amdgpu_drm_ioctl+0xd2/0x1c0 [amdgpu]
[ 66.778375] __x64_sys_ioctl+0x139/0x1a0
[ 66.778378] x64_sys_call+0xee7/0xfb0
[ 66.778381] do_syscall_64+0x87/0x140
[ 66.778385] entry_SYSCALL_64_after_hwframe+0x4b/0x53
Fix this by properly incrementing and decrementing the reference counts
when making and deleting copies of the amdgpu_dm_connector pointers.
(Mario: rebase on current code and update fixes tag)
Closes: https://gitlab.freedesktop.org/drm/amd/-/issues/4006
Signed-off-by: Chris Bainbridge <chris.bainbridge(a)gmail.com>
Fixes: da3fd7ac0bcf3 ("drm/amd/display: Update CP property based on HW query")
Reviewed-by: Alex Hung <alex.hung(a)amd.com>
Link: https://lore.kernel.org/r/20250417215005.37964-1-mario.limonciello@amd.com
Signed-off-by: Mario Limonciello <mario.limonciello(a)amd.com>
Signed-off-by: Alex Deucher <alexander.deucher(a)amd.com>
(cherry picked from commit d4673f3c3b3dcb74e36e53cdfc880baa7a87b330)
Cc: stable(a)vger.kernel.org
diff --git a/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c b/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c
index 5198a079b463..8f22ad966543 100644
--- a/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c
+++ b/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c
@@ -173,6 +173,9 @@ void hdcp_update_display(struct hdcp_workqueue *hdcp_work,
unsigned int conn_index = aconnector->base.index;
guard(mutex)(&hdcp_w->mutex);
+ drm_connector_get(&aconnector->base);
+ if (hdcp_w->aconnector[conn_index])
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
hdcp_w->aconnector[conn_index] = aconnector;
memset(&link_adjust, 0, sizeof(link_adjust));
@@ -220,7 +223,6 @@ static void hdcp_remove_display(struct hdcp_workqueue *hdcp_work,
unsigned int conn_index = aconnector->base.index;
guard(mutex)(&hdcp_w->mutex);
- hdcp_w->aconnector[conn_index] = aconnector;
/* the removal of display will invoke auth reset -> hdcp destroy and
* we'd expect the Content Protection (CP) property changed back to
@@ -236,7 +238,10 @@ static void hdcp_remove_display(struct hdcp_workqueue *hdcp_work,
}
mod_hdcp_remove_display(&hdcp_w->hdcp, aconnector->base.index, &hdcp_w->output);
-
+ if (hdcp_w->aconnector[conn_index]) {
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
+ hdcp_w->aconnector[conn_index] = NULL;
+ }
process_output(hdcp_w);
}
@@ -254,6 +259,10 @@ void hdcp_reset_display(struct hdcp_workqueue *hdcp_work, unsigned int link_inde
for (conn_index = 0; conn_index < AMDGPU_DM_MAX_DISPLAY_INDEX; conn_index++) {
hdcp_w->encryption_status[conn_index] =
MOD_HDCP_ENCRYPTION_STATUS_HDCP_OFF;
+ if (hdcp_w->aconnector[conn_index]) {
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
+ hdcp_w->aconnector[conn_index] = NULL;
+ }
}
process_output(hdcp_w);
@@ -488,6 +497,7 @@ static void update_config(void *handle, struct cp_psp_stream_config *config)
struct hdcp_workqueue *hdcp_work = handle;
struct amdgpu_dm_connector *aconnector = config->dm_stream_ctx;
int link_index = aconnector->dc_link->link_index;
+ unsigned int conn_index = aconnector->base.index;
struct mod_hdcp_display *display = &hdcp_work[link_index].display;
struct mod_hdcp_link *link = &hdcp_work[link_index].link;
struct hdcp_workqueue *hdcp_w = &hdcp_work[link_index];
@@ -544,7 +554,10 @@ static void update_config(void *handle, struct cp_psp_stream_config *config)
guard(mutex)(&hdcp_w->mutex);
mod_hdcp_add_display(&hdcp_w->hdcp, link, display, &hdcp_w->output);
-
+ drm_connector_get(&aconnector->base);
+ if (hdcp_w->aconnector[conn_index])
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
+ hdcp_w->aconnector[conn_index] = aconnector;
process_output(hdcp_w);
}
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] drm/amd/display: Fix slab-use-after-free in hdcp" failed to apply to 6.1-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 6.1-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.1.y
git checkout FETCH_HEAD
git cherry-pick -x be593d9d91c5a3a363d456b9aceb71029aeb3f1d
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050549-destruct-nutrient-aaf4@gregkh' --subject-prefix 'PATCH 6.1.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From be593d9d91c5a3a363d456b9aceb71029aeb3f1d Mon Sep 17 00:00:00 2001
From: Chris Bainbridge <chris.bainbridge(a)gmail.com>
Date: Thu, 17 Apr 2025 16:50:05 -0500
Subject: [PATCH] drm/amd/display: Fix slab-use-after-free in hdcp
The HDCP code in amdgpu_dm_hdcp.c copies pointers to amdgpu_dm_connector
objects without incrementing the kref reference counts. When using a
USB-C dock, and the dock is unplugged, the corresponding
amdgpu_dm_connector objects are freed, creating dangling pointers in the
HDCP code. When the dock is plugged back, the dangling pointers are
dereferenced, resulting in a slab-use-after-free:
[ 66.775837] BUG: KASAN: slab-use-after-free in event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.776171] Read of size 4 at addr ffff888127804120 by task kworker/0:1/10
[ 66.776179] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.14.0-rc7-00180-g54505f727a38-dirty #233
[ 66.776183] Hardware name: HP HP Pavilion Aero Laptop 13-be0xxx/8916, BIOS F.17 12/18/2024
[ 66.776186] Workqueue: events event_property_validate [amdgpu]
[ 66.776494] Call Trace:
[ 66.776496] <TASK>
[ 66.776497] dump_stack_lvl+0x70/0xa0
[ 66.776504] print_report+0x175/0x555
[ 66.776507] ? __virt_addr_valid+0x243/0x450
[ 66.776510] ? kasan_complete_mode_report_info+0x66/0x1c0
[ 66.776515] kasan_report+0xeb/0x1c0
[ 66.776518] ? event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.776819] ? event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.777121] __asan_report_load4_noabort+0x14/0x20
[ 66.777124] event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.777342] ? __lock_acquire+0x6b40/0x6b40
[ 66.777347] ? enable_assr+0x250/0x250 [amdgpu]
[ 66.777571] process_one_work+0x86b/0x1510
[ 66.777575] ? pwq_dec_nr_in_flight+0xcf0/0xcf0
[ 66.777578] ? assign_work+0x16b/0x280
[ 66.777580] ? lock_is_held_type+0xa3/0x130
[ 66.777583] worker_thread+0x5c0/0xfa0
[ 66.777587] ? process_one_work+0x1510/0x1510
[ 66.777588] kthread+0x3a2/0x840
[ 66.777591] ? kthread_is_per_cpu+0xd0/0xd0
[ 66.777594] ? trace_hardirqs_on+0x4f/0x60
[ 66.777597] ? _raw_spin_unlock_irq+0x27/0x60
[ 66.777599] ? calculate_sigpending+0x77/0xa0
[ 66.777602] ? kthread_is_per_cpu+0xd0/0xd0
[ 66.777605] ret_from_fork+0x40/0x90
[ 66.777607] ? kthread_is_per_cpu+0xd0/0xd0
[ 66.777609] ret_from_fork_asm+0x11/0x20
[ 66.777614] </TASK>
[ 66.777643] Allocated by task 10:
[ 66.777646] kasan_save_stack+0x39/0x60
[ 66.777649] kasan_save_track+0x14/0x40
[ 66.777652] kasan_save_alloc_info+0x37/0x50
[ 66.777655] __kasan_kmalloc+0xbb/0xc0
[ 66.777658] __kmalloc_cache_noprof+0x1c8/0x4b0
[ 66.777661] dm_dp_add_mst_connector+0xdd/0x5c0 [amdgpu]
[ 66.777880] drm_dp_mst_port_add_connector+0x47e/0x770 [drm_display_helper]
[ 66.777892] drm_dp_send_link_address+0x1554/0x2bf0 [drm_display_helper]
[ 66.777901] drm_dp_check_and_send_link_address+0x187/0x1f0 [drm_display_helper]
[ 66.777909] drm_dp_mst_link_probe_work+0x2b8/0x410 [drm_display_helper]
[ 66.777917] process_one_work+0x86b/0x1510
[ 66.777919] worker_thread+0x5c0/0xfa0
[ 66.777922] kthread+0x3a2/0x840
[ 66.777925] ret_from_fork+0x40/0x90
[ 66.777927] ret_from_fork_asm+0x11/0x20
[ 66.777932] Freed by task 1713:
[ 66.777935] kasan_save_stack+0x39/0x60
[ 66.777938] kasan_save_track+0x14/0x40
[ 66.777940] kasan_save_free_info+0x3b/0x60
[ 66.777944] __kasan_slab_free+0x52/0x70
[ 66.777946] kfree+0x13f/0x4b0
[ 66.777949] dm_dp_mst_connector_destroy+0xfa/0x150 [amdgpu]
[ 66.778179] drm_connector_free+0x7d/0xb0
[ 66.778184] drm_mode_object_put.part.0+0xee/0x160
[ 66.778188] drm_mode_object_put+0x37/0x50
[ 66.778191] drm_atomic_state_default_clear+0x220/0xd60
[ 66.778194] __drm_atomic_state_free+0x16e/0x2a0
[ 66.778197] drm_mode_atomic_ioctl+0x15ed/0x2ba0
[ 66.778200] drm_ioctl_kernel+0x17a/0x310
[ 66.778203] drm_ioctl+0x584/0xd10
[ 66.778206] amdgpu_drm_ioctl+0xd2/0x1c0 [amdgpu]
[ 66.778375] __x64_sys_ioctl+0x139/0x1a0
[ 66.778378] x64_sys_call+0xee7/0xfb0
[ 66.778381] do_syscall_64+0x87/0x140
[ 66.778385] entry_SYSCALL_64_after_hwframe+0x4b/0x53
Fix this by properly incrementing and decrementing the reference counts
when making and deleting copies of the amdgpu_dm_connector pointers.
(Mario: rebase on current code and update fixes tag)
Closes: https://gitlab.freedesktop.org/drm/amd/-/issues/4006
Signed-off-by: Chris Bainbridge <chris.bainbridge(a)gmail.com>
Fixes: da3fd7ac0bcf3 ("drm/amd/display: Update CP property based on HW query")
Reviewed-by: Alex Hung <alex.hung(a)amd.com>
Link: https://lore.kernel.org/r/20250417215005.37964-1-mario.limonciello@amd.com
Signed-off-by: Mario Limonciello <mario.limonciello(a)amd.com>
Signed-off-by: Alex Deucher <alexander.deucher(a)amd.com>
(cherry picked from commit d4673f3c3b3dcb74e36e53cdfc880baa7a87b330)
Cc: stable(a)vger.kernel.org
diff --git a/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c b/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c
index 5198a079b463..8f22ad966543 100644
--- a/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c
+++ b/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c
@@ -173,6 +173,9 @@ void hdcp_update_display(struct hdcp_workqueue *hdcp_work,
unsigned int conn_index = aconnector->base.index;
guard(mutex)(&hdcp_w->mutex);
+ drm_connector_get(&aconnector->base);
+ if (hdcp_w->aconnector[conn_index])
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
hdcp_w->aconnector[conn_index] = aconnector;
memset(&link_adjust, 0, sizeof(link_adjust));
@@ -220,7 +223,6 @@ static void hdcp_remove_display(struct hdcp_workqueue *hdcp_work,
unsigned int conn_index = aconnector->base.index;
guard(mutex)(&hdcp_w->mutex);
- hdcp_w->aconnector[conn_index] = aconnector;
/* the removal of display will invoke auth reset -> hdcp destroy and
* we'd expect the Content Protection (CP) property changed back to
@@ -236,7 +238,10 @@ static void hdcp_remove_display(struct hdcp_workqueue *hdcp_work,
}
mod_hdcp_remove_display(&hdcp_w->hdcp, aconnector->base.index, &hdcp_w->output);
-
+ if (hdcp_w->aconnector[conn_index]) {
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
+ hdcp_w->aconnector[conn_index] = NULL;
+ }
process_output(hdcp_w);
}
@@ -254,6 +259,10 @@ void hdcp_reset_display(struct hdcp_workqueue *hdcp_work, unsigned int link_inde
for (conn_index = 0; conn_index < AMDGPU_DM_MAX_DISPLAY_INDEX; conn_index++) {
hdcp_w->encryption_status[conn_index] =
MOD_HDCP_ENCRYPTION_STATUS_HDCP_OFF;
+ if (hdcp_w->aconnector[conn_index]) {
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
+ hdcp_w->aconnector[conn_index] = NULL;
+ }
}
process_output(hdcp_w);
@@ -488,6 +497,7 @@ static void update_config(void *handle, struct cp_psp_stream_config *config)
struct hdcp_workqueue *hdcp_work = handle;
struct amdgpu_dm_connector *aconnector = config->dm_stream_ctx;
int link_index = aconnector->dc_link->link_index;
+ unsigned int conn_index = aconnector->base.index;
struct mod_hdcp_display *display = &hdcp_work[link_index].display;
struct mod_hdcp_link *link = &hdcp_work[link_index].link;
struct hdcp_workqueue *hdcp_w = &hdcp_work[link_index];
@@ -544,7 +554,10 @@ static void update_config(void *handle, struct cp_psp_stream_config *config)
guard(mutex)(&hdcp_w->mutex);
mod_hdcp_add_display(&hdcp_w->hdcp, link, display, &hdcp_w->output);
-
+ drm_connector_get(&aconnector->base);
+ if (hdcp_w->aconnector[conn_index])
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
+ hdcp_w->aconnector[conn_index] = aconnector;
process_output(hdcp_w);
}
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] drm/amd/display: Fix slab-use-after-free in hdcp" failed to apply to 6.6-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 6.6-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.6.y
git checkout FETCH_HEAD
git cherry-pick -x be593d9d91c5a3a363d456b9aceb71029aeb3f1d
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050548-clench-backed-6eb2@gregkh' --subject-prefix 'PATCH 6.6.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From be593d9d91c5a3a363d456b9aceb71029aeb3f1d Mon Sep 17 00:00:00 2001
From: Chris Bainbridge <chris.bainbridge(a)gmail.com>
Date: Thu, 17 Apr 2025 16:50:05 -0500
Subject: [PATCH] drm/amd/display: Fix slab-use-after-free in hdcp
The HDCP code in amdgpu_dm_hdcp.c copies pointers to amdgpu_dm_connector
objects without incrementing the kref reference counts. When using a
USB-C dock, and the dock is unplugged, the corresponding
amdgpu_dm_connector objects are freed, creating dangling pointers in the
HDCP code. When the dock is plugged back, the dangling pointers are
dereferenced, resulting in a slab-use-after-free:
[ 66.775837] BUG: KASAN: slab-use-after-free in event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.776171] Read of size 4 at addr ffff888127804120 by task kworker/0:1/10
[ 66.776179] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.14.0-rc7-00180-g54505f727a38-dirty #233
[ 66.776183] Hardware name: HP HP Pavilion Aero Laptop 13-be0xxx/8916, BIOS F.17 12/18/2024
[ 66.776186] Workqueue: events event_property_validate [amdgpu]
[ 66.776494] Call Trace:
[ 66.776496] <TASK>
[ 66.776497] dump_stack_lvl+0x70/0xa0
[ 66.776504] print_report+0x175/0x555
[ 66.776507] ? __virt_addr_valid+0x243/0x450
[ 66.776510] ? kasan_complete_mode_report_info+0x66/0x1c0
[ 66.776515] kasan_report+0xeb/0x1c0
[ 66.776518] ? event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.776819] ? event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.777121] __asan_report_load4_noabort+0x14/0x20
[ 66.777124] event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.777342] ? __lock_acquire+0x6b40/0x6b40
[ 66.777347] ? enable_assr+0x250/0x250 [amdgpu]
[ 66.777571] process_one_work+0x86b/0x1510
[ 66.777575] ? pwq_dec_nr_in_flight+0xcf0/0xcf0
[ 66.777578] ? assign_work+0x16b/0x280
[ 66.777580] ? lock_is_held_type+0xa3/0x130
[ 66.777583] worker_thread+0x5c0/0xfa0
[ 66.777587] ? process_one_work+0x1510/0x1510
[ 66.777588] kthread+0x3a2/0x840
[ 66.777591] ? kthread_is_per_cpu+0xd0/0xd0
[ 66.777594] ? trace_hardirqs_on+0x4f/0x60
[ 66.777597] ? _raw_spin_unlock_irq+0x27/0x60
[ 66.777599] ? calculate_sigpending+0x77/0xa0
[ 66.777602] ? kthread_is_per_cpu+0xd0/0xd0
[ 66.777605] ret_from_fork+0x40/0x90
[ 66.777607] ? kthread_is_per_cpu+0xd0/0xd0
[ 66.777609] ret_from_fork_asm+0x11/0x20
[ 66.777614] </TASK>
[ 66.777643] Allocated by task 10:
[ 66.777646] kasan_save_stack+0x39/0x60
[ 66.777649] kasan_save_track+0x14/0x40
[ 66.777652] kasan_save_alloc_info+0x37/0x50
[ 66.777655] __kasan_kmalloc+0xbb/0xc0
[ 66.777658] __kmalloc_cache_noprof+0x1c8/0x4b0
[ 66.777661] dm_dp_add_mst_connector+0xdd/0x5c0 [amdgpu]
[ 66.777880] drm_dp_mst_port_add_connector+0x47e/0x770 [drm_display_helper]
[ 66.777892] drm_dp_send_link_address+0x1554/0x2bf0 [drm_display_helper]
[ 66.777901] drm_dp_check_and_send_link_address+0x187/0x1f0 [drm_display_helper]
[ 66.777909] drm_dp_mst_link_probe_work+0x2b8/0x410 [drm_display_helper]
[ 66.777917] process_one_work+0x86b/0x1510
[ 66.777919] worker_thread+0x5c0/0xfa0
[ 66.777922] kthread+0x3a2/0x840
[ 66.777925] ret_from_fork+0x40/0x90
[ 66.777927] ret_from_fork_asm+0x11/0x20
[ 66.777932] Freed by task 1713:
[ 66.777935] kasan_save_stack+0x39/0x60
[ 66.777938] kasan_save_track+0x14/0x40
[ 66.777940] kasan_save_free_info+0x3b/0x60
[ 66.777944] __kasan_slab_free+0x52/0x70
[ 66.777946] kfree+0x13f/0x4b0
[ 66.777949] dm_dp_mst_connector_destroy+0xfa/0x150 [amdgpu]
[ 66.778179] drm_connector_free+0x7d/0xb0
[ 66.778184] drm_mode_object_put.part.0+0xee/0x160
[ 66.778188] drm_mode_object_put+0x37/0x50
[ 66.778191] drm_atomic_state_default_clear+0x220/0xd60
[ 66.778194] __drm_atomic_state_free+0x16e/0x2a0
[ 66.778197] drm_mode_atomic_ioctl+0x15ed/0x2ba0
[ 66.778200] drm_ioctl_kernel+0x17a/0x310
[ 66.778203] drm_ioctl+0x584/0xd10
[ 66.778206] amdgpu_drm_ioctl+0xd2/0x1c0 [amdgpu]
[ 66.778375] __x64_sys_ioctl+0x139/0x1a0
[ 66.778378] x64_sys_call+0xee7/0xfb0
[ 66.778381] do_syscall_64+0x87/0x140
[ 66.778385] entry_SYSCALL_64_after_hwframe+0x4b/0x53
Fix this by properly incrementing and decrementing the reference counts
when making and deleting copies of the amdgpu_dm_connector pointers.
(Mario: rebase on current code and update fixes tag)
Closes: https://gitlab.freedesktop.org/drm/amd/-/issues/4006
Signed-off-by: Chris Bainbridge <chris.bainbridge(a)gmail.com>
Fixes: da3fd7ac0bcf3 ("drm/amd/display: Update CP property based on HW query")
Reviewed-by: Alex Hung <alex.hung(a)amd.com>
Link: https://lore.kernel.org/r/20250417215005.37964-1-mario.limonciello@amd.com
Signed-off-by: Mario Limonciello <mario.limonciello(a)amd.com>
Signed-off-by: Alex Deucher <alexander.deucher(a)amd.com>
(cherry picked from commit d4673f3c3b3dcb74e36e53cdfc880baa7a87b330)
Cc: stable(a)vger.kernel.org
diff --git a/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c b/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c
index 5198a079b463..8f22ad966543 100644
--- a/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c
+++ b/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c
@@ -173,6 +173,9 @@ void hdcp_update_display(struct hdcp_workqueue *hdcp_work,
unsigned int conn_index = aconnector->base.index;
guard(mutex)(&hdcp_w->mutex);
+ drm_connector_get(&aconnector->base);
+ if (hdcp_w->aconnector[conn_index])
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
hdcp_w->aconnector[conn_index] = aconnector;
memset(&link_adjust, 0, sizeof(link_adjust));
@@ -220,7 +223,6 @@ static void hdcp_remove_display(struct hdcp_workqueue *hdcp_work,
unsigned int conn_index = aconnector->base.index;
guard(mutex)(&hdcp_w->mutex);
- hdcp_w->aconnector[conn_index] = aconnector;
/* the removal of display will invoke auth reset -> hdcp destroy and
* we'd expect the Content Protection (CP) property changed back to
@@ -236,7 +238,10 @@ static void hdcp_remove_display(struct hdcp_workqueue *hdcp_work,
}
mod_hdcp_remove_display(&hdcp_w->hdcp, aconnector->base.index, &hdcp_w->output);
-
+ if (hdcp_w->aconnector[conn_index]) {
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
+ hdcp_w->aconnector[conn_index] = NULL;
+ }
process_output(hdcp_w);
}
@@ -254,6 +259,10 @@ void hdcp_reset_display(struct hdcp_workqueue *hdcp_work, unsigned int link_inde
for (conn_index = 0; conn_index < AMDGPU_DM_MAX_DISPLAY_INDEX; conn_index++) {
hdcp_w->encryption_status[conn_index] =
MOD_HDCP_ENCRYPTION_STATUS_HDCP_OFF;
+ if (hdcp_w->aconnector[conn_index]) {
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
+ hdcp_w->aconnector[conn_index] = NULL;
+ }
}
process_output(hdcp_w);
@@ -488,6 +497,7 @@ static void update_config(void *handle, struct cp_psp_stream_config *config)
struct hdcp_workqueue *hdcp_work = handle;
struct amdgpu_dm_connector *aconnector = config->dm_stream_ctx;
int link_index = aconnector->dc_link->link_index;
+ unsigned int conn_index = aconnector->base.index;
struct mod_hdcp_display *display = &hdcp_work[link_index].display;
struct mod_hdcp_link *link = &hdcp_work[link_index].link;
struct hdcp_workqueue *hdcp_w = &hdcp_work[link_index];
@@ -544,7 +554,10 @@ static void update_config(void *handle, struct cp_psp_stream_config *config)
guard(mutex)(&hdcp_w->mutex);
mod_hdcp_add_display(&hdcp_w->hdcp, link, display, &hdcp_w->output);
-
+ drm_connector_get(&aconnector->base);
+ if (hdcp_w->aconnector[conn_index])
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
+ hdcp_w->aconnector[conn_index] = aconnector;
process_output(hdcp_w);
}
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] drm/amd/display: Fix slab-use-after-free in hdcp" failed to apply to 6.12-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 6.12-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.12.y
git checkout FETCH_HEAD
git cherry-pick -x be593d9d91c5a3a363d456b9aceb71029aeb3f1d
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050546-eligible-paving-b582@gregkh' --subject-prefix 'PATCH 6.12.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From be593d9d91c5a3a363d456b9aceb71029aeb3f1d Mon Sep 17 00:00:00 2001
From: Chris Bainbridge <chris.bainbridge(a)gmail.com>
Date: Thu, 17 Apr 2025 16:50:05 -0500
Subject: [PATCH] drm/amd/display: Fix slab-use-after-free in hdcp
The HDCP code in amdgpu_dm_hdcp.c copies pointers to amdgpu_dm_connector
objects without incrementing the kref reference counts. When using a
USB-C dock, and the dock is unplugged, the corresponding
amdgpu_dm_connector objects are freed, creating dangling pointers in the
HDCP code. When the dock is plugged back, the dangling pointers are
dereferenced, resulting in a slab-use-after-free:
[ 66.775837] BUG: KASAN: slab-use-after-free in event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.776171] Read of size 4 at addr ffff888127804120 by task kworker/0:1/10
[ 66.776179] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.14.0-rc7-00180-g54505f727a38-dirty #233
[ 66.776183] Hardware name: HP HP Pavilion Aero Laptop 13-be0xxx/8916, BIOS F.17 12/18/2024
[ 66.776186] Workqueue: events event_property_validate [amdgpu]
[ 66.776494] Call Trace:
[ 66.776496] <TASK>
[ 66.776497] dump_stack_lvl+0x70/0xa0
[ 66.776504] print_report+0x175/0x555
[ 66.776507] ? __virt_addr_valid+0x243/0x450
[ 66.776510] ? kasan_complete_mode_report_info+0x66/0x1c0
[ 66.776515] kasan_report+0xeb/0x1c0
[ 66.776518] ? event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.776819] ? event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.777121] __asan_report_load4_noabort+0x14/0x20
[ 66.777124] event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.777342] ? __lock_acquire+0x6b40/0x6b40
[ 66.777347] ? enable_assr+0x250/0x250 [amdgpu]
[ 66.777571] process_one_work+0x86b/0x1510
[ 66.777575] ? pwq_dec_nr_in_flight+0xcf0/0xcf0
[ 66.777578] ? assign_work+0x16b/0x280
[ 66.777580] ? lock_is_held_type+0xa3/0x130
[ 66.777583] worker_thread+0x5c0/0xfa0
[ 66.777587] ? process_one_work+0x1510/0x1510
[ 66.777588] kthread+0x3a2/0x840
[ 66.777591] ? kthread_is_per_cpu+0xd0/0xd0
[ 66.777594] ? trace_hardirqs_on+0x4f/0x60
[ 66.777597] ? _raw_spin_unlock_irq+0x27/0x60
[ 66.777599] ? calculate_sigpending+0x77/0xa0
[ 66.777602] ? kthread_is_per_cpu+0xd0/0xd0
[ 66.777605] ret_from_fork+0x40/0x90
[ 66.777607] ? kthread_is_per_cpu+0xd0/0xd0
[ 66.777609] ret_from_fork_asm+0x11/0x20
[ 66.777614] </TASK>
[ 66.777643] Allocated by task 10:
[ 66.777646] kasan_save_stack+0x39/0x60
[ 66.777649] kasan_save_track+0x14/0x40
[ 66.777652] kasan_save_alloc_info+0x37/0x50
[ 66.777655] __kasan_kmalloc+0xbb/0xc0
[ 66.777658] __kmalloc_cache_noprof+0x1c8/0x4b0
[ 66.777661] dm_dp_add_mst_connector+0xdd/0x5c0 [amdgpu]
[ 66.777880] drm_dp_mst_port_add_connector+0x47e/0x770 [drm_display_helper]
[ 66.777892] drm_dp_send_link_address+0x1554/0x2bf0 [drm_display_helper]
[ 66.777901] drm_dp_check_and_send_link_address+0x187/0x1f0 [drm_display_helper]
[ 66.777909] drm_dp_mst_link_probe_work+0x2b8/0x410 [drm_display_helper]
[ 66.777917] process_one_work+0x86b/0x1510
[ 66.777919] worker_thread+0x5c0/0xfa0
[ 66.777922] kthread+0x3a2/0x840
[ 66.777925] ret_from_fork+0x40/0x90
[ 66.777927] ret_from_fork_asm+0x11/0x20
[ 66.777932] Freed by task 1713:
[ 66.777935] kasan_save_stack+0x39/0x60
[ 66.777938] kasan_save_track+0x14/0x40
[ 66.777940] kasan_save_free_info+0x3b/0x60
[ 66.777944] __kasan_slab_free+0x52/0x70
[ 66.777946] kfree+0x13f/0x4b0
[ 66.777949] dm_dp_mst_connector_destroy+0xfa/0x150 [amdgpu]
[ 66.778179] drm_connector_free+0x7d/0xb0
[ 66.778184] drm_mode_object_put.part.0+0xee/0x160
[ 66.778188] drm_mode_object_put+0x37/0x50
[ 66.778191] drm_atomic_state_default_clear+0x220/0xd60
[ 66.778194] __drm_atomic_state_free+0x16e/0x2a0
[ 66.778197] drm_mode_atomic_ioctl+0x15ed/0x2ba0
[ 66.778200] drm_ioctl_kernel+0x17a/0x310
[ 66.778203] drm_ioctl+0x584/0xd10
[ 66.778206] amdgpu_drm_ioctl+0xd2/0x1c0 [amdgpu]
[ 66.778375] __x64_sys_ioctl+0x139/0x1a0
[ 66.778378] x64_sys_call+0xee7/0xfb0
[ 66.778381] do_syscall_64+0x87/0x140
[ 66.778385] entry_SYSCALL_64_after_hwframe+0x4b/0x53
Fix this by properly incrementing and decrementing the reference counts
when making and deleting copies of the amdgpu_dm_connector pointers.
(Mario: rebase on current code and update fixes tag)
Closes: https://gitlab.freedesktop.org/drm/amd/-/issues/4006
Signed-off-by: Chris Bainbridge <chris.bainbridge(a)gmail.com>
Fixes: da3fd7ac0bcf3 ("drm/amd/display: Update CP property based on HW query")
Reviewed-by: Alex Hung <alex.hung(a)amd.com>
Link: https://lore.kernel.org/r/20250417215005.37964-1-mario.limonciello@amd.com
Signed-off-by: Mario Limonciello <mario.limonciello(a)amd.com>
Signed-off-by: Alex Deucher <alexander.deucher(a)amd.com>
(cherry picked from commit d4673f3c3b3dcb74e36e53cdfc880baa7a87b330)
Cc: stable(a)vger.kernel.org
diff --git a/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c b/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c
index 5198a079b463..8f22ad966543 100644
--- a/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c
+++ b/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c
@@ -173,6 +173,9 @@ void hdcp_update_display(struct hdcp_workqueue *hdcp_work,
unsigned int conn_index = aconnector->base.index;
guard(mutex)(&hdcp_w->mutex);
+ drm_connector_get(&aconnector->base);
+ if (hdcp_w->aconnector[conn_index])
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
hdcp_w->aconnector[conn_index] = aconnector;
memset(&link_adjust, 0, sizeof(link_adjust));
@@ -220,7 +223,6 @@ static void hdcp_remove_display(struct hdcp_workqueue *hdcp_work,
unsigned int conn_index = aconnector->base.index;
guard(mutex)(&hdcp_w->mutex);
- hdcp_w->aconnector[conn_index] = aconnector;
/* the removal of display will invoke auth reset -> hdcp destroy and
* we'd expect the Content Protection (CP) property changed back to
@@ -236,7 +238,10 @@ static void hdcp_remove_display(struct hdcp_workqueue *hdcp_work,
}
mod_hdcp_remove_display(&hdcp_w->hdcp, aconnector->base.index, &hdcp_w->output);
-
+ if (hdcp_w->aconnector[conn_index]) {
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
+ hdcp_w->aconnector[conn_index] = NULL;
+ }
process_output(hdcp_w);
}
@@ -254,6 +259,10 @@ void hdcp_reset_display(struct hdcp_workqueue *hdcp_work, unsigned int link_inde
for (conn_index = 0; conn_index < AMDGPU_DM_MAX_DISPLAY_INDEX; conn_index++) {
hdcp_w->encryption_status[conn_index] =
MOD_HDCP_ENCRYPTION_STATUS_HDCP_OFF;
+ if (hdcp_w->aconnector[conn_index]) {
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
+ hdcp_w->aconnector[conn_index] = NULL;
+ }
}
process_output(hdcp_w);
@@ -488,6 +497,7 @@ static void update_config(void *handle, struct cp_psp_stream_config *config)
struct hdcp_workqueue *hdcp_work = handle;
struct amdgpu_dm_connector *aconnector = config->dm_stream_ctx;
int link_index = aconnector->dc_link->link_index;
+ unsigned int conn_index = aconnector->base.index;
struct mod_hdcp_display *display = &hdcp_work[link_index].display;
struct mod_hdcp_link *link = &hdcp_work[link_index].link;
struct hdcp_workqueue *hdcp_w = &hdcp_work[link_index];
@@ -544,7 +554,10 @@ static void update_config(void *handle, struct cp_psp_stream_config *config)
guard(mutex)(&hdcp_w->mutex);
mod_hdcp_add_display(&hdcp_w->hdcp, link, display, &hdcp_w->output);
-
+ drm_connector_get(&aconnector->base);
+ if (hdcp_w->aconnector[conn_index])
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
+ hdcp_w->aconnector[conn_index] = aconnector;
process_output(hdcp_w);
}
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] drm/amd/display: Fix slab-use-after-free in hdcp" failed to apply to 6.14-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 6.14-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.14.y
git checkout FETCH_HEAD
git cherry-pick -x be593d9d91c5a3a363d456b9aceb71029aeb3f1d
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050545-monsoon-attractor-6e31@gregkh' --subject-prefix 'PATCH 6.14.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From be593d9d91c5a3a363d456b9aceb71029aeb3f1d Mon Sep 17 00:00:00 2001
From: Chris Bainbridge <chris.bainbridge(a)gmail.com>
Date: Thu, 17 Apr 2025 16:50:05 -0500
Subject: [PATCH] drm/amd/display: Fix slab-use-after-free in hdcp
The HDCP code in amdgpu_dm_hdcp.c copies pointers to amdgpu_dm_connector
objects without incrementing the kref reference counts. When using a
USB-C dock, and the dock is unplugged, the corresponding
amdgpu_dm_connector objects are freed, creating dangling pointers in the
HDCP code. When the dock is plugged back, the dangling pointers are
dereferenced, resulting in a slab-use-after-free:
[ 66.775837] BUG: KASAN: slab-use-after-free in event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.776171] Read of size 4 at addr ffff888127804120 by task kworker/0:1/10
[ 66.776179] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.14.0-rc7-00180-g54505f727a38-dirty #233
[ 66.776183] Hardware name: HP HP Pavilion Aero Laptop 13-be0xxx/8916, BIOS F.17 12/18/2024
[ 66.776186] Workqueue: events event_property_validate [amdgpu]
[ 66.776494] Call Trace:
[ 66.776496] <TASK>
[ 66.776497] dump_stack_lvl+0x70/0xa0
[ 66.776504] print_report+0x175/0x555
[ 66.776507] ? __virt_addr_valid+0x243/0x450
[ 66.776510] ? kasan_complete_mode_report_info+0x66/0x1c0
[ 66.776515] kasan_report+0xeb/0x1c0
[ 66.776518] ? event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.776819] ? event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.777121] __asan_report_load4_noabort+0x14/0x20
[ 66.777124] event_property_validate+0x42f/0x6c0 [amdgpu]
[ 66.777342] ? __lock_acquire+0x6b40/0x6b40
[ 66.777347] ? enable_assr+0x250/0x250 [amdgpu]
[ 66.777571] process_one_work+0x86b/0x1510
[ 66.777575] ? pwq_dec_nr_in_flight+0xcf0/0xcf0
[ 66.777578] ? assign_work+0x16b/0x280
[ 66.777580] ? lock_is_held_type+0xa3/0x130
[ 66.777583] worker_thread+0x5c0/0xfa0
[ 66.777587] ? process_one_work+0x1510/0x1510
[ 66.777588] kthread+0x3a2/0x840
[ 66.777591] ? kthread_is_per_cpu+0xd0/0xd0
[ 66.777594] ? trace_hardirqs_on+0x4f/0x60
[ 66.777597] ? _raw_spin_unlock_irq+0x27/0x60
[ 66.777599] ? calculate_sigpending+0x77/0xa0
[ 66.777602] ? kthread_is_per_cpu+0xd0/0xd0
[ 66.777605] ret_from_fork+0x40/0x90
[ 66.777607] ? kthread_is_per_cpu+0xd0/0xd0
[ 66.777609] ret_from_fork_asm+0x11/0x20
[ 66.777614] </TASK>
[ 66.777643] Allocated by task 10:
[ 66.777646] kasan_save_stack+0x39/0x60
[ 66.777649] kasan_save_track+0x14/0x40
[ 66.777652] kasan_save_alloc_info+0x37/0x50
[ 66.777655] __kasan_kmalloc+0xbb/0xc0
[ 66.777658] __kmalloc_cache_noprof+0x1c8/0x4b0
[ 66.777661] dm_dp_add_mst_connector+0xdd/0x5c0 [amdgpu]
[ 66.777880] drm_dp_mst_port_add_connector+0x47e/0x770 [drm_display_helper]
[ 66.777892] drm_dp_send_link_address+0x1554/0x2bf0 [drm_display_helper]
[ 66.777901] drm_dp_check_and_send_link_address+0x187/0x1f0 [drm_display_helper]
[ 66.777909] drm_dp_mst_link_probe_work+0x2b8/0x410 [drm_display_helper]
[ 66.777917] process_one_work+0x86b/0x1510
[ 66.777919] worker_thread+0x5c0/0xfa0
[ 66.777922] kthread+0x3a2/0x840
[ 66.777925] ret_from_fork+0x40/0x90
[ 66.777927] ret_from_fork_asm+0x11/0x20
[ 66.777932] Freed by task 1713:
[ 66.777935] kasan_save_stack+0x39/0x60
[ 66.777938] kasan_save_track+0x14/0x40
[ 66.777940] kasan_save_free_info+0x3b/0x60
[ 66.777944] __kasan_slab_free+0x52/0x70
[ 66.777946] kfree+0x13f/0x4b0
[ 66.777949] dm_dp_mst_connector_destroy+0xfa/0x150 [amdgpu]
[ 66.778179] drm_connector_free+0x7d/0xb0
[ 66.778184] drm_mode_object_put.part.0+0xee/0x160
[ 66.778188] drm_mode_object_put+0x37/0x50
[ 66.778191] drm_atomic_state_default_clear+0x220/0xd60
[ 66.778194] __drm_atomic_state_free+0x16e/0x2a0
[ 66.778197] drm_mode_atomic_ioctl+0x15ed/0x2ba0
[ 66.778200] drm_ioctl_kernel+0x17a/0x310
[ 66.778203] drm_ioctl+0x584/0xd10
[ 66.778206] amdgpu_drm_ioctl+0xd2/0x1c0 [amdgpu]
[ 66.778375] __x64_sys_ioctl+0x139/0x1a0
[ 66.778378] x64_sys_call+0xee7/0xfb0
[ 66.778381] do_syscall_64+0x87/0x140
[ 66.778385] entry_SYSCALL_64_after_hwframe+0x4b/0x53
Fix this by properly incrementing and decrementing the reference counts
when making and deleting copies of the amdgpu_dm_connector pointers.
(Mario: rebase on current code and update fixes tag)
Closes: https://gitlab.freedesktop.org/drm/amd/-/issues/4006
Signed-off-by: Chris Bainbridge <chris.bainbridge(a)gmail.com>
Fixes: da3fd7ac0bcf3 ("drm/amd/display: Update CP property based on HW query")
Reviewed-by: Alex Hung <alex.hung(a)amd.com>
Link: https://lore.kernel.org/r/20250417215005.37964-1-mario.limonciello@amd.com
Signed-off-by: Mario Limonciello <mario.limonciello(a)amd.com>
Signed-off-by: Alex Deucher <alexander.deucher(a)amd.com>
(cherry picked from commit d4673f3c3b3dcb74e36e53cdfc880baa7a87b330)
Cc: stable(a)vger.kernel.org
diff --git a/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c b/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c
index 5198a079b463..8f22ad966543 100644
--- a/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c
+++ b/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c
@@ -173,6 +173,9 @@ void hdcp_update_display(struct hdcp_workqueue *hdcp_work,
unsigned int conn_index = aconnector->base.index;
guard(mutex)(&hdcp_w->mutex);
+ drm_connector_get(&aconnector->base);
+ if (hdcp_w->aconnector[conn_index])
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
hdcp_w->aconnector[conn_index] = aconnector;
memset(&link_adjust, 0, sizeof(link_adjust));
@@ -220,7 +223,6 @@ static void hdcp_remove_display(struct hdcp_workqueue *hdcp_work,
unsigned int conn_index = aconnector->base.index;
guard(mutex)(&hdcp_w->mutex);
- hdcp_w->aconnector[conn_index] = aconnector;
/* the removal of display will invoke auth reset -> hdcp destroy and
* we'd expect the Content Protection (CP) property changed back to
@@ -236,7 +238,10 @@ static void hdcp_remove_display(struct hdcp_workqueue *hdcp_work,
}
mod_hdcp_remove_display(&hdcp_w->hdcp, aconnector->base.index, &hdcp_w->output);
-
+ if (hdcp_w->aconnector[conn_index]) {
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
+ hdcp_w->aconnector[conn_index] = NULL;
+ }
process_output(hdcp_w);
}
@@ -254,6 +259,10 @@ void hdcp_reset_display(struct hdcp_workqueue *hdcp_work, unsigned int link_inde
for (conn_index = 0; conn_index < AMDGPU_DM_MAX_DISPLAY_INDEX; conn_index++) {
hdcp_w->encryption_status[conn_index] =
MOD_HDCP_ENCRYPTION_STATUS_HDCP_OFF;
+ if (hdcp_w->aconnector[conn_index]) {
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
+ hdcp_w->aconnector[conn_index] = NULL;
+ }
}
process_output(hdcp_w);
@@ -488,6 +497,7 @@ static void update_config(void *handle, struct cp_psp_stream_config *config)
struct hdcp_workqueue *hdcp_work = handle;
struct amdgpu_dm_connector *aconnector = config->dm_stream_ctx;
int link_index = aconnector->dc_link->link_index;
+ unsigned int conn_index = aconnector->base.index;
struct mod_hdcp_display *display = &hdcp_work[link_index].display;
struct mod_hdcp_link *link = &hdcp_work[link_index].link;
struct hdcp_workqueue *hdcp_w = &hdcp_work[link_index];
@@ -544,7 +554,10 @@ static void update_config(void *handle, struct cp_psp_stream_config *config)
guard(mutex)(&hdcp_w->mutex);
mod_hdcp_add_display(&hdcp_w->hdcp, link, display, &hdcp_w->output);
-
+ drm_connector_get(&aconnector->base);
+ if (hdcp_w->aconnector[conn_index])
+ drm_connector_put(&hdcp_w->aconnector[conn_index]->base);
+ hdcp_w->aconnector[conn_index] = aconnector;
process_output(hdcp_w);
}
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] drm: Select DRM_KMS_HELPER from" failed to apply to 5.10-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.10-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.10.y
git checkout FETCH_HEAD
git cherry-pick -x 32dce6b1949a696dc7abddc04de8cbe35c260217
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050556-copier-vengeful-2f43@gregkh' --subject-prefix 'PATCH 5.10.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From 32dce6b1949a696dc7abddc04de8cbe35c260217 Mon Sep 17 00:00:00 2001
From: Janne Grunau <j(a)jannau.net>
Date: Tue, 4 Mar 2025 20:12:14 +0100
Subject: [PATCH] drm: Select DRM_KMS_HELPER from
DRM_DEBUG_DP_MST_TOPOLOGY_REFS
Using "depends on" and "select" for the same Kconfig symbol is known to
cause circular dependencies (cmp. "Kconfig recursive dependency
limitations" in Documentation/kbuild/kconfig-language.rst.
DRM drivers are selecting drm helpers so do the same for
DRM_DEBUG_DP_MST_TOPOLOGY_REFS.
Fixes following circular dependency reported on x86 for the downstream
Asahi Linux tree:
error: recursive dependency detected!
symbol DRM_KMS_HELPER is selected by DRM_GEM_SHMEM_HELPER
symbol DRM_GEM_SHMEM_HELPER is selected by RUST_DRM_GEM_SHMEM_HELPER
symbol RUST_DRM_GEM_SHMEM_HELPER is selected by DRM_ASAHI
symbol DRM_ASAHI depends on RUST
symbol RUST depends on CALL_PADDING
symbol CALL_PADDING depends on OBJTOOL
symbol OBJTOOL is selected by STACK_VALIDATION
symbol STACK_VALIDATION depends on UNWINDER_FRAME_POINTER
symbol UNWINDER_FRAME_POINTER is part of choice block at arch/x86/Kconfig.debug:224
symbol <choice> unknown is visible depending on UNWINDER_GUESS
symbol UNWINDER_GUESS prompt is visible depending on STACKDEPOT
symbol STACKDEPOT is selected by DRM_DEBUG_DP_MST_TOPOLOGY_REFS
symbol DRM_DEBUG_DP_MST_TOPOLOGY_REFS depends on DRM_KMS_HELPER
Fixes: 12a280c72868 ("drm/dp_mst: Add topology ref history tracking for debugging")
Cc: stable(a)vger.kernel.org
Signed-off-by: Janne Grunau <j(a)jannau.net>
Acked-by: Thomas Zimmermann <tzimmermann(a)suse.de>
Link: https://lore.kernel.org/r/20250304-drm_debug_dp_mst_topo_kconfig-v1-1-e16fd…
Signed-off-by: Alyssa Rosenzweig <alyssa(a)rosenzweig.io>
diff --git a/drivers/gpu/drm/Kconfig b/drivers/gpu/drm/Kconfig
index 2cba2b6ebe1c..f01925ed8176 100644
--- a/drivers/gpu/drm/Kconfig
+++ b/drivers/gpu/drm/Kconfig
@@ -188,7 +188,7 @@ config DRM_DEBUG_DP_MST_TOPOLOGY_REFS
bool "Enable refcount backtrace history in the DP MST helpers"
depends on STACKTRACE_SUPPORT
select STACKDEPOT
- depends on DRM_KMS_HELPER
+ select DRM_KMS_HELPER
depends on DEBUG_KERNEL
depends on EXPERT
help
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] drm: Select DRM_KMS_HELPER from" failed to apply to 5.15-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.15-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.15.y
git checkout FETCH_HEAD
git cherry-pick -x 32dce6b1949a696dc7abddc04de8cbe35c260217
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050556-precision-sandbank-dcf8@gregkh' --subject-prefix 'PATCH 5.15.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From 32dce6b1949a696dc7abddc04de8cbe35c260217 Mon Sep 17 00:00:00 2001
From: Janne Grunau <j(a)jannau.net>
Date: Tue, 4 Mar 2025 20:12:14 +0100
Subject: [PATCH] drm: Select DRM_KMS_HELPER from
DRM_DEBUG_DP_MST_TOPOLOGY_REFS
Using "depends on" and "select" for the same Kconfig symbol is known to
cause circular dependencies (cmp. "Kconfig recursive dependency
limitations" in Documentation/kbuild/kconfig-language.rst.
DRM drivers are selecting drm helpers so do the same for
DRM_DEBUG_DP_MST_TOPOLOGY_REFS.
Fixes following circular dependency reported on x86 for the downstream
Asahi Linux tree:
error: recursive dependency detected!
symbol DRM_KMS_HELPER is selected by DRM_GEM_SHMEM_HELPER
symbol DRM_GEM_SHMEM_HELPER is selected by RUST_DRM_GEM_SHMEM_HELPER
symbol RUST_DRM_GEM_SHMEM_HELPER is selected by DRM_ASAHI
symbol DRM_ASAHI depends on RUST
symbol RUST depends on CALL_PADDING
symbol CALL_PADDING depends on OBJTOOL
symbol OBJTOOL is selected by STACK_VALIDATION
symbol STACK_VALIDATION depends on UNWINDER_FRAME_POINTER
symbol UNWINDER_FRAME_POINTER is part of choice block at arch/x86/Kconfig.debug:224
symbol <choice> unknown is visible depending on UNWINDER_GUESS
symbol UNWINDER_GUESS prompt is visible depending on STACKDEPOT
symbol STACKDEPOT is selected by DRM_DEBUG_DP_MST_TOPOLOGY_REFS
symbol DRM_DEBUG_DP_MST_TOPOLOGY_REFS depends on DRM_KMS_HELPER
Fixes: 12a280c72868 ("drm/dp_mst: Add topology ref history tracking for debugging")
Cc: stable(a)vger.kernel.org
Signed-off-by: Janne Grunau <j(a)jannau.net>
Acked-by: Thomas Zimmermann <tzimmermann(a)suse.de>
Link: https://lore.kernel.org/r/20250304-drm_debug_dp_mst_topo_kconfig-v1-1-e16fd…
Signed-off-by: Alyssa Rosenzweig <alyssa(a)rosenzweig.io>
diff --git a/drivers/gpu/drm/Kconfig b/drivers/gpu/drm/Kconfig
index 2cba2b6ebe1c..f01925ed8176 100644
--- a/drivers/gpu/drm/Kconfig
+++ b/drivers/gpu/drm/Kconfig
@@ -188,7 +188,7 @@ config DRM_DEBUG_DP_MST_TOPOLOGY_REFS
bool "Enable refcount backtrace history in the DP MST helpers"
depends on STACKTRACE_SUPPORT
select STACKDEPOT
- depends on DRM_KMS_HELPER
+ select DRM_KMS_HELPER
depends on DEBUG_KERNEL
depends on EXPERT
help
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] drm: Select DRM_KMS_HELPER from" failed to apply to 6.1-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 6.1-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.1.y
git checkout FETCH_HEAD
git cherry-pick -x 32dce6b1949a696dc7abddc04de8cbe35c260217
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050555-pulse-ended-2cea@gregkh' --subject-prefix 'PATCH 6.1.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From 32dce6b1949a696dc7abddc04de8cbe35c260217 Mon Sep 17 00:00:00 2001
From: Janne Grunau <j(a)jannau.net>
Date: Tue, 4 Mar 2025 20:12:14 +0100
Subject: [PATCH] drm: Select DRM_KMS_HELPER from
DRM_DEBUG_DP_MST_TOPOLOGY_REFS
Using "depends on" and "select" for the same Kconfig symbol is known to
cause circular dependencies (cmp. "Kconfig recursive dependency
limitations" in Documentation/kbuild/kconfig-language.rst.
DRM drivers are selecting drm helpers so do the same for
DRM_DEBUG_DP_MST_TOPOLOGY_REFS.
Fixes following circular dependency reported on x86 for the downstream
Asahi Linux tree:
error: recursive dependency detected!
symbol DRM_KMS_HELPER is selected by DRM_GEM_SHMEM_HELPER
symbol DRM_GEM_SHMEM_HELPER is selected by RUST_DRM_GEM_SHMEM_HELPER
symbol RUST_DRM_GEM_SHMEM_HELPER is selected by DRM_ASAHI
symbol DRM_ASAHI depends on RUST
symbol RUST depends on CALL_PADDING
symbol CALL_PADDING depends on OBJTOOL
symbol OBJTOOL is selected by STACK_VALIDATION
symbol STACK_VALIDATION depends on UNWINDER_FRAME_POINTER
symbol UNWINDER_FRAME_POINTER is part of choice block at arch/x86/Kconfig.debug:224
symbol <choice> unknown is visible depending on UNWINDER_GUESS
symbol UNWINDER_GUESS prompt is visible depending on STACKDEPOT
symbol STACKDEPOT is selected by DRM_DEBUG_DP_MST_TOPOLOGY_REFS
symbol DRM_DEBUG_DP_MST_TOPOLOGY_REFS depends on DRM_KMS_HELPER
Fixes: 12a280c72868 ("drm/dp_mst: Add topology ref history tracking for debugging")
Cc: stable(a)vger.kernel.org
Signed-off-by: Janne Grunau <j(a)jannau.net>
Acked-by: Thomas Zimmermann <tzimmermann(a)suse.de>
Link: https://lore.kernel.org/r/20250304-drm_debug_dp_mst_topo_kconfig-v1-1-e16fd…
Signed-off-by: Alyssa Rosenzweig <alyssa(a)rosenzweig.io>
diff --git a/drivers/gpu/drm/Kconfig b/drivers/gpu/drm/Kconfig
index 2cba2b6ebe1c..f01925ed8176 100644
--- a/drivers/gpu/drm/Kconfig
+++ b/drivers/gpu/drm/Kconfig
@@ -188,7 +188,7 @@ config DRM_DEBUG_DP_MST_TOPOLOGY_REFS
bool "Enable refcount backtrace history in the DP MST helpers"
depends on STACKTRACE_SUPPORT
select STACKDEPOT
- depends on DRM_KMS_HELPER
+ select DRM_KMS_HELPER
depends on DEBUG_KERNEL
depends on EXPERT
help
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] iommu/arm-smmu-v3: Fix pgsize_bit for sva domains" failed to apply to 6.1-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 6.1-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.1.y
git checkout FETCH_HEAD
git cherry-pick -x 12f78021973ae422564b234136c702a305932d73
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050545-renovator-scuba-7cbb@gregkh' --subject-prefix 'PATCH 6.1.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From 12f78021973ae422564b234136c702a305932d73 Mon Sep 17 00:00:00 2001
From: Balbir Singh <balbirs(a)nvidia.com>
Date: Sat, 12 Apr 2025 10:23:54 +1000
Subject: [PATCH] iommu/arm-smmu-v3: Fix pgsize_bit for sva domains
UBSan caught a bug with IOMMU SVA domains, where the reported exponent
value in __arm_smmu_tlb_inv_range() was >= 64.
__arm_smmu_tlb_inv_range() uses the domain's pgsize_bitmap to compute
the number of pages to invalidate and the invalidation range. Currently
arm_smmu_sva_domain_alloc() does not setup the iommu domain's
pgsize_bitmap. This leads to __ffs() on the value returning 64 and that
leads to undefined behaviour w.r.t. shift operations
Fix this by initializing the iommu_domain's pgsize_bitmap to PAGE_SIZE.
Effectively the code needs to use the smallest page size for
invalidation
Cc: stable(a)vger.kernel.org
Fixes: eb6c97647be2 ("iommu/arm-smmu-v3: Avoid constructing invalid range commands")
Suggested-by: Jason Gunthorpe <jgg(a)nvidia.com>
Signed-off-by: Balbir Singh <balbirs(a)nvidia.com>
Cc: Jean-Philippe Brucker <jean-philippe(a)linaro.org>
Cc: Will Deacon <will(a)kernel.org>
Cc: Robin Murphy <robin.murphy(a)arm.com>
Cc: Joerg Roedel <joro(a)8bytes.org>
Cc: Jason Gunthorpe <jgg(a)ziepe.ca>
Reviewed-by: Jason Gunthorpe <jgg(a)nvidia.com>
Link: https://lore.kernel.org/r/20250412002354.3071449-1-balbirs@nvidia.com
Signed-off-by: Will Deacon <will(a)kernel.org>
diff --git a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3-sva.c b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3-sva.c
index 9ba596430e7c..980cc6b33c43 100644
--- a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3-sva.c
+++ b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3-sva.c
@@ -411,6 +411,12 @@ struct iommu_domain *arm_smmu_sva_domain_alloc(struct device *dev,
return ERR_CAST(smmu_domain);
smmu_domain->domain.type = IOMMU_DOMAIN_SVA;
smmu_domain->domain.ops = &arm_smmu_sva_domain_ops;
+
+ /*
+ * Choose page_size as the leaf page size for invalidation when
+ * ARM_SMMU_FEAT_RANGE_INV is present
+ */
+ smmu_domain->domain.pgsize_bitmap = PAGE_SIZE;
smmu_domain->smmu = smmu;
ret = xa_alloc(&arm_smmu_asid_xa, &asid, smmu_domain,
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] iommu/arm-smmu-v3: Fix pgsize_bit for sva domains" failed to apply to 5.15-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.15-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.15.y
git checkout FETCH_HEAD
git cherry-pick -x 12f78021973ae422564b234136c702a305932d73
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050545-next-pesticide-ba2f@gregkh' --subject-prefix 'PATCH 5.15.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From 12f78021973ae422564b234136c702a305932d73 Mon Sep 17 00:00:00 2001
From: Balbir Singh <balbirs(a)nvidia.com>
Date: Sat, 12 Apr 2025 10:23:54 +1000
Subject: [PATCH] iommu/arm-smmu-v3: Fix pgsize_bit for sva domains
UBSan caught a bug with IOMMU SVA domains, where the reported exponent
value in __arm_smmu_tlb_inv_range() was >= 64.
__arm_smmu_tlb_inv_range() uses the domain's pgsize_bitmap to compute
the number of pages to invalidate and the invalidation range. Currently
arm_smmu_sva_domain_alloc() does not setup the iommu domain's
pgsize_bitmap. This leads to __ffs() on the value returning 64 and that
leads to undefined behaviour w.r.t. shift operations
Fix this by initializing the iommu_domain's pgsize_bitmap to PAGE_SIZE.
Effectively the code needs to use the smallest page size for
invalidation
Cc: stable(a)vger.kernel.org
Fixes: eb6c97647be2 ("iommu/arm-smmu-v3: Avoid constructing invalid range commands")
Suggested-by: Jason Gunthorpe <jgg(a)nvidia.com>
Signed-off-by: Balbir Singh <balbirs(a)nvidia.com>
Cc: Jean-Philippe Brucker <jean-philippe(a)linaro.org>
Cc: Will Deacon <will(a)kernel.org>
Cc: Robin Murphy <robin.murphy(a)arm.com>
Cc: Joerg Roedel <joro(a)8bytes.org>
Cc: Jason Gunthorpe <jgg(a)ziepe.ca>
Reviewed-by: Jason Gunthorpe <jgg(a)nvidia.com>
Link: https://lore.kernel.org/r/20250412002354.3071449-1-balbirs@nvidia.com
Signed-off-by: Will Deacon <will(a)kernel.org>
diff --git a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3-sva.c b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3-sva.c
index 9ba596430e7c..980cc6b33c43 100644
--- a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3-sva.c
+++ b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3-sva.c
@@ -411,6 +411,12 @@ struct iommu_domain *arm_smmu_sva_domain_alloc(struct device *dev,
return ERR_CAST(smmu_domain);
smmu_domain->domain.type = IOMMU_DOMAIN_SVA;
smmu_domain->domain.ops = &arm_smmu_sva_domain_ops;
+
+ /*
+ * Choose page_size as the leaf page size for invalidation when
+ * ARM_SMMU_FEAT_RANGE_INV is present
+ */
+ smmu_domain->domain.pgsize_bitmap = PAGE_SIZE;
smmu_domain->smmu = smmu;
ret = xa_alloc(&arm_smmu_asid_xa, &asid, smmu_domain,
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] iommu/arm-smmu-v3: Fix pgsize_bit for sva domains" failed to apply to 6.6-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 6.6-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.6.y
git checkout FETCH_HEAD
git cherry-pick -x 12f78021973ae422564b234136c702a305932d73
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050539-scorpion-gents-a5e3@gregkh' --subject-prefix 'PATCH 6.6.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From 12f78021973ae422564b234136c702a305932d73 Mon Sep 17 00:00:00 2001
From: Balbir Singh <balbirs(a)nvidia.com>
Date: Sat, 12 Apr 2025 10:23:54 +1000
Subject: [PATCH] iommu/arm-smmu-v3: Fix pgsize_bit for sva domains
UBSan caught a bug with IOMMU SVA domains, where the reported exponent
value in __arm_smmu_tlb_inv_range() was >= 64.
__arm_smmu_tlb_inv_range() uses the domain's pgsize_bitmap to compute
the number of pages to invalidate and the invalidation range. Currently
arm_smmu_sva_domain_alloc() does not setup the iommu domain's
pgsize_bitmap. This leads to __ffs() on the value returning 64 and that
leads to undefined behaviour w.r.t. shift operations
Fix this by initializing the iommu_domain's pgsize_bitmap to PAGE_SIZE.
Effectively the code needs to use the smallest page size for
invalidation
Cc: stable(a)vger.kernel.org
Fixes: eb6c97647be2 ("iommu/arm-smmu-v3: Avoid constructing invalid range commands")
Suggested-by: Jason Gunthorpe <jgg(a)nvidia.com>
Signed-off-by: Balbir Singh <balbirs(a)nvidia.com>
Cc: Jean-Philippe Brucker <jean-philippe(a)linaro.org>
Cc: Will Deacon <will(a)kernel.org>
Cc: Robin Murphy <robin.murphy(a)arm.com>
Cc: Joerg Roedel <joro(a)8bytes.org>
Cc: Jason Gunthorpe <jgg(a)ziepe.ca>
Reviewed-by: Jason Gunthorpe <jgg(a)nvidia.com>
Link: https://lore.kernel.org/r/20250412002354.3071449-1-balbirs@nvidia.com
Signed-off-by: Will Deacon <will(a)kernel.org>
diff --git a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3-sva.c b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3-sva.c
index 9ba596430e7c..980cc6b33c43 100644
--- a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3-sva.c
+++ b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3-sva.c
@@ -411,6 +411,12 @@ struct iommu_domain *arm_smmu_sva_domain_alloc(struct device *dev,
return ERR_CAST(smmu_domain);
smmu_domain->domain.type = IOMMU_DOMAIN_SVA;
smmu_domain->domain.ops = &arm_smmu_sva_domain_ops;
+
+ /*
+ * Choose page_size as the leaf page size for invalidation when
+ * ARM_SMMU_FEAT_RANGE_INV is present
+ */
+ smmu_domain->domain.pgsize_bitmap = PAGE_SIZE;
smmu_domain->smmu = smmu;
ret = xa_alloc(&arm_smmu_asid_xa, &asid, smmu_domain,
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] iommu/arm-smmu-v3: Fix iommu_device_probe bug due to" failed to apply to 5.15-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.15-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.15.y
git checkout FETCH_HEAD
git cherry-pick -x b00d24997a11c10d3e420614f0873b83ce358a34
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050523-phonics-bankable-dd5b@gregkh' --subject-prefix 'PATCH 5.15.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From b00d24997a11c10d3e420614f0873b83ce358a34 Mon Sep 17 00:00:00 2001
From: Nicolin Chen <nicolinc(a)nvidia.com>
Date: Tue, 15 Apr 2025 11:56:20 -0700
Subject: [PATCH] iommu/arm-smmu-v3: Fix iommu_device_probe bug due to
duplicated stream ids
ASPEED VGA card has two built-in devices:
0008:06:00.0 PCI bridge: ASPEED Technology, Inc. AST1150 PCI-to-PCI Bridge (rev 06)
0008:07:00.0 VGA compatible controller: ASPEED Technology, Inc. ASPEED Graphics Family (rev 52)
Its toplogy looks like this:
+-[0008:00]---00.0-[01-09]--+-00.0-[02-09]--+-00.0-[03]----00.0 Sandisk Corp Device 5017
| +-01.0-[04]--
| +-02.0-[05]----00.0 NVIDIA Corporation Device
| +-03.0-[06-07]----00.0-[07]----00.0 ASPEED Technology, Inc. ASPEED Graphics Family
| +-04.0-[08]----00.0 Renesas Technology Corp. uPD720201 USB 3.0 Host Controller
| \-05.0-[09]----00.0 Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller
\-00.1 PMC-Sierra Inc. Device 4028
The IORT logic populaties two identical IDs into the fwspec->ids array via
DMA aliasing in iort_pci_iommu_init() called by pci_for_each_dma_alias().
Though the SMMU driver had been able to handle this situation since commit
563b5cbe334e ("iommu/arm-smmu-v3: Cope with duplicated Stream IDs"), that
got broken by the later commit cdf315f907d4 ("iommu/arm-smmu-v3: Maintain
a SID->device structure"), which ended up with allocating separate streams
with the same stuffing.
On a kernel prior to v6.15-rc1, there has been an overlooked warning:
pci 0008:07:00.0: vgaarb: setting as boot VGA device
pci 0008:07:00.0: vgaarb: bridge control possible
pci 0008:07:00.0: vgaarb: VGA device added: decodes=io+mem,owns=none,locks=none
pcieport 0008:06:00.0: Adding to iommu group 14
ast 0008:07:00.0: stream 67328 already in tree <===== WARNING
ast 0008:07:00.0: enabling device (0002 -> 0003)
ast 0008:07:00.0: Using default configuration
ast 0008:07:00.0: AST 2600 detected
ast 0008:07:00.0: [drm] Using analog VGA
ast 0008:07:00.0: [drm] dram MCLK=396 Mhz type=1 bus_width=16
[drm] Initialized ast 0.1.0 for 0008:07:00.0 on minor 0
ast 0008:07:00.0: [drm] fb0: astdrmfb frame buffer device
With v6.15-rc, since the commit bcb81ac6ae3c ("iommu: Get DT/ACPI parsing
into the proper probe path"), the error returned with the warning is moved
to the SMMU device probe flow:
arm_smmu_probe_device+0x15c/0x4c0
__iommu_probe_device+0x150/0x4f8
probe_iommu_group+0x44/0x80
bus_for_each_dev+0x7c/0x100
bus_iommu_probe+0x48/0x1a8
iommu_device_register+0xb8/0x178
arm_smmu_device_probe+0x1350/0x1db0
which then fails the entire SMMU driver probe:
pci 0008:06:00.0: Adding to iommu group 21
pci 0008:07:00.0: stream 67328 already in tree
arm-smmu-v3 arm-smmu-v3.9.auto: Failed to register iommu
arm-smmu-v3 arm-smmu-v3.9.auto: probe with driver arm-smmu-v3 failed with error -22
Since SMMU driver had been already expecting a potential duplicated Stream
ID in arm_smmu_install_ste_for_dev(), change the arm_smmu_insert_master()
routine to ignore a duplicated ID from the fwspec->sids array as well.
Note: this has been failing the iommu_device_probe() since 2021, although a
recent iommu commit in v6.15-rc1 that moves iommu_device_probe() started to
fail the SMMU driver probe. Since nobody has cared about DMA Alias support,
leave that as it was but fix the fundamental iommu_device_probe() breakage.
Fixes: cdf315f907d4 ("iommu/arm-smmu-v3: Maintain a SID->device structure")
Cc: stable(a)vger.kernel.org
Suggested-by: Jason Gunthorpe <jgg(a)nvidia.com>
Reviewed-by: Jason Gunthorpe <jgg(a)nvidia.com>
Signed-off-by: Nicolin Chen <nicolinc(a)nvidia.com>
Link: https://lore.kernel.org/r/20250415185620.504299-1-nicolinc@nvidia.com
Signed-off-by: Will Deacon <will(a)kernel.org>
diff --git a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c
index 5467f85dd463..0826b6bdf327 100644
--- a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c
+++ b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c
@@ -3388,6 +3388,7 @@ static int arm_smmu_insert_master(struct arm_smmu_device *smmu,
mutex_lock(&smmu->streams_mutex);
for (i = 0; i < fwspec->num_ids; i++) {
struct arm_smmu_stream *new_stream = &master->streams[i];
+ struct rb_node *existing;
u32 sid = fwspec->ids[i];
new_stream->id = sid;
@@ -3398,10 +3399,20 @@ static int arm_smmu_insert_master(struct arm_smmu_device *smmu,
break;
/* Insert into SID tree */
- if (rb_find_add(&new_stream->node, &smmu->streams,
- arm_smmu_streams_cmp_node)) {
- dev_warn(master->dev, "stream %u already in tree\n",
- sid);
+ existing = rb_find_add(&new_stream->node, &smmu->streams,
+ arm_smmu_streams_cmp_node);
+ if (existing) {
+ struct arm_smmu_master *existing_master =
+ rb_entry(existing, struct arm_smmu_stream, node)
+ ->master;
+
+ /* Bridged PCI devices may end up with duplicated IDs */
+ if (existing_master == master)
+ continue;
+
+ dev_warn(master->dev,
+ "stream %u already in tree from dev %s\n", sid,
+ dev_name(existing_master->dev));
ret = -EINVAL;
break;
}
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] iommu/arm-smmu-v3: Fix iommu_device_probe bug due to" failed to apply to 6.1-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 6.1-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.1.y
git checkout FETCH_HEAD
git cherry-pick -x b00d24997a11c10d3e420614f0873b83ce358a34
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050522-frown-chimp-96cf@gregkh' --subject-prefix 'PATCH 6.1.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From b00d24997a11c10d3e420614f0873b83ce358a34 Mon Sep 17 00:00:00 2001
From: Nicolin Chen <nicolinc(a)nvidia.com>
Date: Tue, 15 Apr 2025 11:56:20 -0700
Subject: [PATCH] iommu/arm-smmu-v3: Fix iommu_device_probe bug due to
duplicated stream ids
ASPEED VGA card has two built-in devices:
0008:06:00.0 PCI bridge: ASPEED Technology, Inc. AST1150 PCI-to-PCI Bridge (rev 06)
0008:07:00.0 VGA compatible controller: ASPEED Technology, Inc. ASPEED Graphics Family (rev 52)
Its toplogy looks like this:
+-[0008:00]---00.0-[01-09]--+-00.0-[02-09]--+-00.0-[03]----00.0 Sandisk Corp Device 5017
| +-01.0-[04]--
| +-02.0-[05]----00.0 NVIDIA Corporation Device
| +-03.0-[06-07]----00.0-[07]----00.0 ASPEED Technology, Inc. ASPEED Graphics Family
| +-04.0-[08]----00.0 Renesas Technology Corp. uPD720201 USB 3.0 Host Controller
| \-05.0-[09]----00.0 Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller
\-00.1 PMC-Sierra Inc. Device 4028
The IORT logic populaties two identical IDs into the fwspec->ids array via
DMA aliasing in iort_pci_iommu_init() called by pci_for_each_dma_alias().
Though the SMMU driver had been able to handle this situation since commit
563b5cbe334e ("iommu/arm-smmu-v3: Cope with duplicated Stream IDs"), that
got broken by the later commit cdf315f907d4 ("iommu/arm-smmu-v3: Maintain
a SID->device structure"), which ended up with allocating separate streams
with the same stuffing.
On a kernel prior to v6.15-rc1, there has been an overlooked warning:
pci 0008:07:00.0: vgaarb: setting as boot VGA device
pci 0008:07:00.0: vgaarb: bridge control possible
pci 0008:07:00.0: vgaarb: VGA device added: decodes=io+mem,owns=none,locks=none
pcieport 0008:06:00.0: Adding to iommu group 14
ast 0008:07:00.0: stream 67328 already in tree <===== WARNING
ast 0008:07:00.0: enabling device (0002 -> 0003)
ast 0008:07:00.0: Using default configuration
ast 0008:07:00.0: AST 2600 detected
ast 0008:07:00.0: [drm] Using analog VGA
ast 0008:07:00.0: [drm] dram MCLK=396 Mhz type=1 bus_width=16
[drm] Initialized ast 0.1.0 for 0008:07:00.0 on minor 0
ast 0008:07:00.0: [drm] fb0: astdrmfb frame buffer device
With v6.15-rc, since the commit bcb81ac6ae3c ("iommu: Get DT/ACPI parsing
into the proper probe path"), the error returned with the warning is moved
to the SMMU device probe flow:
arm_smmu_probe_device+0x15c/0x4c0
__iommu_probe_device+0x150/0x4f8
probe_iommu_group+0x44/0x80
bus_for_each_dev+0x7c/0x100
bus_iommu_probe+0x48/0x1a8
iommu_device_register+0xb8/0x178
arm_smmu_device_probe+0x1350/0x1db0
which then fails the entire SMMU driver probe:
pci 0008:06:00.0: Adding to iommu group 21
pci 0008:07:00.0: stream 67328 already in tree
arm-smmu-v3 arm-smmu-v3.9.auto: Failed to register iommu
arm-smmu-v3 arm-smmu-v3.9.auto: probe with driver arm-smmu-v3 failed with error -22
Since SMMU driver had been already expecting a potential duplicated Stream
ID in arm_smmu_install_ste_for_dev(), change the arm_smmu_insert_master()
routine to ignore a duplicated ID from the fwspec->sids array as well.
Note: this has been failing the iommu_device_probe() since 2021, although a
recent iommu commit in v6.15-rc1 that moves iommu_device_probe() started to
fail the SMMU driver probe. Since nobody has cared about DMA Alias support,
leave that as it was but fix the fundamental iommu_device_probe() breakage.
Fixes: cdf315f907d4 ("iommu/arm-smmu-v3: Maintain a SID->device structure")
Cc: stable(a)vger.kernel.org
Suggested-by: Jason Gunthorpe <jgg(a)nvidia.com>
Reviewed-by: Jason Gunthorpe <jgg(a)nvidia.com>
Signed-off-by: Nicolin Chen <nicolinc(a)nvidia.com>
Link: https://lore.kernel.org/r/20250415185620.504299-1-nicolinc@nvidia.com
Signed-off-by: Will Deacon <will(a)kernel.org>
diff --git a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c
index 5467f85dd463..0826b6bdf327 100644
--- a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c
+++ b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c
@@ -3388,6 +3388,7 @@ static int arm_smmu_insert_master(struct arm_smmu_device *smmu,
mutex_lock(&smmu->streams_mutex);
for (i = 0; i < fwspec->num_ids; i++) {
struct arm_smmu_stream *new_stream = &master->streams[i];
+ struct rb_node *existing;
u32 sid = fwspec->ids[i];
new_stream->id = sid;
@@ -3398,10 +3399,20 @@ static int arm_smmu_insert_master(struct arm_smmu_device *smmu,
break;
/* Insert into SID tree */
- if (rb_find_add(&new_stream->node, &smmu->streams,
- arm_smmu_streams_cmp_node)) {
- dev_warn(master->dev, "stream %u already in tree\n",
- sid);
+ existing = rb_find_add(&new_stream->node, &smmu->streams,
+ arm_smmu_streams_cmp_node);
+ if (existing) {
+ struct arm_smmu_master *existing_master =
+ rb_entry(existing, struct arm_smmu_stream, node)
+ ->master;
+
+ /* Bridged PCI devices may end up with duplicated IDs */
+ if (existing_master == master)
+ continue;
+
+ dev_warn(master->dev,
+ "stream %u already in tree from dev %s\n", sid,
+ dev_name(existing_master->dev));
ret = -EINVAL;
break;
}
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] iommu/arm-smmu-v3: Fix iommu_device_probe bug due to" failed to apply to 6.6-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 6.6-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.6.y
git checkout FETCH_HEAD
git cherry-pick -x b00d24997a11c10d3e420614f0873b83ce358a34
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050520-chastity-tasty-6f1e@gregkh' --subject-prefix 'PATCH 6.6.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From b00d24997a11c10d3e420614f0873b83ce358a34 Mon Sep 17 00:00:00 2001
From: Nicolin Chen <nicolinc(a)nvidia.com>
Date: Tue, 15 Apr 2025 11:56:20 -0700
Subject: [PATCH] iommu/arm-smmu-v3: Fix iommu_device_probe bug due to
duplicated stream ids
ASPEED VGA card has two built-in devices:
0008:06:00.0 PCI bridge: ASPEED Technology, Inc. AST1150 PCI-to-PCI Bridge (rev 06)
0008:07:00.0 VGA compatible controller: ASPEED Technology, Inc. ASPEED Graphics Family (rev 52)
Its toplogy looks like this:
+-[0008:00]---00.0-[01-09]--+-00.0-[02-09]--+-00.0-[03]----00.0 Sandisk Corp Device 5017
| +-01.0-[04]--
| +-02.0-[05]----00.0 NVIDIA Corporation Device
| +-03.0-[06-07]----00.0-[07]----00.0 ASPEED Technology, Inc. ASPEED Graphics Family
| +-04.0-[08]----00.0 Renesas Technology Corp. uPD720201 USB 3.0 Host Controller
| \-05.0-[09]----00.0 Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller
\-00.1 PMC-Sierra Inc. Device 4028
The IORT logic populaties two identical IDs into the fwspec->ids array via
DMA aliasing in iort_pci_iommu_init() called by pci_for_each_dma_alias().
Though the SMMU driver had been able to handle this situation since commit
563b5cbe334e ("iommu/arm-smmu-v3: Cope with duplicated Stream IDs"), that
got broken by the later commit cdf315f907d4 ("iommu/arm-smmu-v3: Maintain
a SID->device structure"), which ended up with allocating separate streams
with the same stuffing.
On a kernel prior to v6.15-rc1, there has been an overlooked warning:
pci 0008:07:00.0: vgaarb: setting as boot VGA device
pci 0008:07:00.0: vgaarb: bridge control possible
pci 0008:07:00.0: vgaarb: VGA device added: decodes=io+mem,owns=none,locks=none
pcieport 0008:06:00.0: Adding to iommu group 14
ast 0008:07:00.0: stream 67328 already in tree <===== WARNING
ast 0008:07:00.0: enabling device (0002 -> 0003)
ast 0008:07:00.0: Using default configuration
ast 0008:07:00.0: AST 2600 detected
ast 0008:07:00.0: [drm] Using analog VGA
ast 0008:07:00.0: [drm] dram MCLK=396 Mhz type=1 bus_width=16
[drm] Initialized ast 0.1.0 for 0008:07:00.0 on minor 0
ast 0008:07:00.0: [drm] fb0: astdrmfb frame buffer device
With v6.15-rc, since the commit bcb81ac6ae3c ("iommu: Get DT/ACPI parsing
into the proper probe path"), the error returned with the warning is moved
to the SMMU device probe flow:
arm_smmu_probe_device+0x15c/0x4c0
__iommu_probe_device+0x150/0x4f8
probe_iommu_group+0x44/0x80
bus_for_each_dev+0x7c/0x100
bus_iommu_probe+0x48/0x1a8
iommu_device_register+0xb8/0x178
arm_smmu_device_probe+0x1350/0x1db0
which then fails the entire SMMU driver probe:
pci 0008:06:00.0: Adding to iommu group 21
pci 0008:07:00.0: stream 67328 already in tree
arm-smmu-v3 arm-smmu-v3.9.auto: Failed to register iommu
arm-smmu-v3 arm-smmu-v3.9.auto: probe with driver arm-smmu-v3 failed with error -22
Since SMMU driver had been already expecting a potential duplicated Stream
ID in arm_smmu_install_ste_for_dev(), change the arm_smmu_insert_master()
routine to ignore a duplicated ID from the fwspec->sids array as well.
Note: this has been failing the iommu_device_probe() since 2021, although a
recent iommu commit in v6.15-rc1 that moves iommu_device_probe() started to
fail the SMMU driver probe. Since nobody has cared about DMA Alias support,
leave that as it was but fix the fundamental iommu_device_probe() breakage.
Fixes: cdf315f907d4 ("iommu/arm-smmu-v3: Maintain a SID->device structure")
Cc: stable(a)vger.kernel.org
Suggested-by: Jason Gunthorpe <jgg(a)nvidia.com>
Reviewed-by: Jason Gunthorpe <jgg(a)nvidia.com>
Signed-off-by: Nicolin Chen <nicolinc(a)nvidia.com>
Link: https://lore.kernel.org/r/20250415185620.504299-1-nicolinc@nvidia.com
Signed-off-by: Will Deacon <will(a)kernel.org>
diff --git a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c
index 5467f85dd463..0826b6bdf327 100644
--- a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c
+++ b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c
@@ -3388,6 +3388,7 @@ static int arm_smmu_insert_master(struct arm_smmu_device *smmu,
mutex_lock(&smmu->streams_mutex);
for (i = 0; i < fwspec->num_ids; i++) {
struct arm_smmu_stream *new_stream = &master->streams[i];
+ struct rb_node *existing;
u32 sid = fwspec->ids[i];
new_stream->id = sid;
@@ -3398,10 +3399,20 @@ static int arm_smmu_insert_master(struct arm_smmu_device *smmu,
break;
/* Insert into SID tree */
- if (rb_find_add(&new_stream->node, &smmu->streams,
- arm_smmu_streams_cmp_node)) {
- dev_warn(master->dev, "stream %u already in tree\n",
- sid);
+ existing = rb_find_add(&new_stream->node, &smmu->streams,
+ arm_smmu_streams_cmp_node);
+ if (existing) {
+ struct arm_smmu_master *existing_master =
+ rb_entry(existing, struct arm_smmu_stream, node)
+ ->master;
+
+ /* Bridged PCI devices may end up with duplicated IDs */
+ if (existing_master == master)
+ continue;
+
+ dev_warn(master->dev,
+ "stream %u already in tree from dev %s\n", sid,
+ dev_name(existing_master->dev));
ret = -EINVAL;
break;
}
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] iommu/amd: Fix potential buffer overflow in" failed to apply to 5.4-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.4-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.4.y
git checkout FETCH_HEAD
git cherry-pick -x 8dee308e4c01dea48fc104d37f92d5b58c50b96c
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050502-aqueduct-contented-b9f9@gregkh' --subject-prefix 'PATCH 5.4.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From 8dee308e4c01dea48fc104d37f92d5b58c50b96c Mon Sep 17 00:00:00 2001
From: Pavel Paklov <Pavel.Paklov(a)cyberprotect.ru>
Date: Tue, 25 Mar 2025 09:22:44 +0000
Subject: [PATCH] iommu/amd: Fix potential buffer overflow in
parse_ivrs_acpihid
There is a string parsing logic error which can lead to an overflow of hid
or uid buffers. Comparing ACPIID_LEN against a total string length doesn't
take into account the lengths of individual hid and uid buffers so the
check is insufficient in some cases. For example if the length of hid
string is 4 and the length of the uid string is 260, the length of str
will be equal to ACPIID_LEN + 1 but uid string will overflow uid buffer
which size is 256.
The same applies to the hid string with length 13 and uid string with
length 250.
Check the length of hid and uid strings separately to prevent
buffer overflow.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Fixes: ca3bf5d47cec ("iommu/amd: Introduces ivrs_acpihid kernel parameter")
Cc: stable(a)vger.kernel.org
Signed-off-by: Pavel Paklov <Pavel.Paklov(a)cyberprotect.ru>
Link: https://lore.kernel.org/r/20250325092259.392844-1-Pavel.Paklov@cyberprotect…
Signed-off-by: Joerg Roedel <jroedel(a)suse.de>
diff --git a/drivers/iommu/amd/init.c b/drivers/iommu/amd/init.c
index dd9e26b7b718..14aa0d77df26 100644
--- a/drivers/iommu/amd/init.c
+++ b/drivers/iommu/amd/init.c
@@ -3664,6 +3664,14 @@ static int __init parse_ivrs_acpihid(char *str)
while (*uid == '0' && *(uid + 1))
uid++;
+ if (strlen(hid) >= ACPIHID_HID_LEN) {
+ pr_err("Invalid command line: hid is too long\n");
+ return 1;
+ } else if (strlen(uid) >= ACPIHID_UID_LEN) {
+ pr_err("Invalid command line: uid is too long\n");
+ return 1;
+ }
+
i = early_acpihid_map_size++;
memcpy(early_acpihid_map[i].hid, hid, strlen(hid));
memcpy(early_acpihid_map[i].uid, uid, strlen(uid));
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] drivers: base: handle module_kobject creation" failed to apply to 6.6-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 6.6-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.6.y
git checkout FETCH_HEAD
git cherry-pick -x f95bbfe18512c5c018720468959edac056a17196
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050548-pursuable-absence-aa7d@gregkh' --subject-prefix 'PATCH 6.6.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From f95bbfe18512c5c018720468959edac056a17196 Mon Sep 17 00:00:00 2001
From: Shyam Saini <shyamsaini(a)linux.microsoft.com>
Date: Thu, 27 Feb 2025 10:49:30 -0800
Subject: [PATCH] drivers: base: handle module_kobject creation
module_add_driver() relies on module_kset list for
/sys/module/<built-in-module>/drivers directory creation.
Since,
commit 96a1a2412acba ("kernel/params.c: defer most of param_sysfs_init() to late_initcall time")
drivers which are initialized from subsys_initcall() or any other
higher precedence initcall couldn't find the related kobject entry
in the module_kset list because module_kset is not fully populated
by the time module_add_driver() refers it. As a consequence,
module_add_driver() returns early without calling make_driver_name().
Therefore, /sys/module/<built-in-module>/drivers is never created.
Fix this issue by letting module_add_driver() handle module_kobject
creation itself.
Fixes: 96a1a2412acb ("kernel/params.c: defer most of param_sysfs_init() to late_initcall time")
Cc: stable(a)vger.kernel.org # requires all other patches from the series
Suggested-by: Rasmus Villemoes <linux(a)rasmusvillemoes.dk>
Signed-off-by: Shyam Saini <shyamsaini(a)linux.microsoft.com>
Acked-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Link: https://lore.kernel.org/r/20250227184930.34163-5-shyamsaini@linux.microsoft…
Signed-off-by: Petr Pavlu <petr.pavlu(a)suse.com>
diff --git a/drivers/base/module.c b/drivers/base/module.c
index 5bc71bea883a..218aaa096455 100644
--- a/drivers/base/module.c
+++ b/drivers/base/module.c
@@ -42,16 +42,13 @@ int module_add_driver(struct module *mod, const struct device_driver *drv)
if (mod)
mk = &mod->mkobj;
else if (drv->mod_name) {
- struct kobject *mkobj;
-
- /* Lookup built-in module entry in /sys/modules */
- mkobj = kset_find_obj(module_kset, drv->mod_name);
- if (mkobj) {
- mk = container_of(mkobj, struct module_kobject, kobj);
+ /* Lookup or create built-in module entry in /sys/modules */
+ mk = lookup_or_create_module_kobject(drv->mod_name);
+ if (mk) {
/* remember our module structure */
drv->p->mkobj = mk;
- /* kset_find_obj took a reference */
- kobject_put(mkobj);
+ /* lookup_or_create_module_kobject took a reference */
+ kobject_put(&mk->kobj);
}
}
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] drivers: base: handle module_kobject creation" failed to apply to 6.12-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 6.12-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.12.y
git checkout FETCH_HEAD
git cherry-pick -x f95bbfe18512c5c018720468959edac056a17196
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050547-conduit-flyable-e816@gregkh' --subject-prefix 'PATCH 6.12.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From f95bbfe18512c5c018720468959edac056a17196 Mon Sep 17 00:00:00 2001
From: Shyam Saini <shyamsaini(a)linux.microsoft.com>
Date: Thu, 27 Feb 2025 10:49:30 -0800
Subject: [PATCH] drivers: base: handle module_kobject creation
module_add_driver() relies on module_kset list for
/sys/module/<built-in-module>/drivers directory creation.
Since,
commit 96a1a2412acba ("kernel/params.c: defer most of param_sysfs_init() to late_initcall time")
drivers which are initialized from subsys_initcall() or any other
higher precedence initcall couldn't find the related kobject entry
in the module_kset list because module_kset is not fully populated
by the time module_add_driver() refers it. As a consequence,
module_add_driver() returns early without calling make_driver_name().
Therefore, /sys/module/<built-in-module>/drivers is never created.
Fix this issue by letting module_add_driver() handle module_kobject
creation itself.
Fixes: 96a1a2412acb ("kernel/params.c: defer most of param_sysfs_init() to late_initcall time")
Cc: stable(a)vger.kernel.org # requires all other patches from the series
Suggested-by: Rasmus Villemoes <linux(a)rasmusvillemoes.dk>
Signed-off-by: Shyam Saini <shyamsaini(a)linux.microsoft.com>
Acked-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Link: https://lore.kernel.org/r/20250227184930.34163-5-shyamsaini@linux.microsoft…
Signed-off-by: Petr Pavlu <petr.pavlu(a)suse.com>
diff --git a/drivers/base/module.c b/drivers/base/module.c
index 5bc71bea883a..218aaa096455 100644
--- a/drivers/base/module.c
+++ b/drivers/base/module.c
@@ -42,16 +42,13 @@ int module_add_driver(struct module *mod, const struct device_driver *drv)
if (mod)
mk = &mod->mkobj;
else if (drv->mod_name) {
- struct kobject *mkobj;
-
- /* Lookup built-in module entry in /sys/modules */
- mkobj = kset_find_obj(module_kset, drv->mod_name);
- if (mkobj) {
- mk = container_of(mkobj, struct module_kobject, kobj);
+ /* Lookup or create built-in module entry in /sys/modules */
+ mk = lookup_or_create_module_kobject(drv->mod_name);
+ if (mk) {
/* remember our module structure */
drv->p->mkobj = mk;
- /* kset_find_obj took a reference */
- kobject_put(mkobj);
+ /* lookup_or_create_module_kobject took a reference */
+ kobject_put(&mk->kobj);
}
}
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] drivers: base: handle module_kobject creation" failed to apply to 6.14-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 6.14-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.14.y
git checkout FETCH_HEAD
git cherry-pick -x f95bbfe18512c5c018720468959edac056a17196
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050546-oozy-nylon-220d@gregkh' --subject-prefix 'PATCH 6.14.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From f95bbfe18512c5c018720468959edac056a17196 Mon Sep 17 00:00:00 2001
From: Shyam Saini <shyamsaini(a)linux.microsoft.com>
Date: Thu, 27 Feb 2025 10:49:30 -0800
Subject: [PATCH] drivers: base: handle module_kobject creation
module_add_driver() relies on module_kset list for
/sys/module/<built-in-module>/drivers directory creation.
Since,
commit 96a1a2412acba ("kernel/params.c: defer most of param_sysfs_init() to late_initcall time")
drivers which are initialized from subsys_initcall() or any other
higher precedence initcall couldn't find the related kobject entry
in the module_kset list because module_kset is not fully populated
by the time module_add_driver() refers it. As a consequence,
module_add_driver() returns early without calling make_driver_name().
Therefore, /sys/module/<built-in-module>/drivers is never created.
Fix this issue by letting module_add_driver() handle module_kobject
creation itself.
Fixes: 96a1a2412acb ("kernel/params.c: defer most of param_sysfs_init() to late_initcall time")
Cc: stable(a)vger.kernel.org # requires all other patches from the series
Suggested-by: Rasmus Villemoes <linux(a)rasmusvillemoes.dk>
Signed-off-by: Shyam Saini <shyamsaini(a)linux.microsoft.com>
Acked-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Link: https://lore.kernel.org/r/20250227184930.34163-5-shyamsaini@linux.microsoft…
Signed-off-by: Petr Pavlu <petr.pavlu(a)suse.com>
diff --git a/drivers/base/module.c b/drivers/base/module.c
index 5bc71bea883a..218aaa096455 100644
--- a/drivers/base/module.c
+++ b/drivers/base/module.c
@@ -42,16 +42,13 @@ int module_add_driver(struct module *mod, const struct device_driver *drv)
if (mod)
mk = &mod->mkobj;
else if (drv->mod_name) {
- struct kobject *mkobj;
-
- /* Lookup built-in module entry in /sys/modules */
- mkobj = kset_find_obj(module_kset, drv->mod_name);
- if (mkobj) {
- mk = container_of(mkobj, struct module_kobject, kobj);
+ /* Lookup or create built-in module entry in /sys/modules */
+ mk = lookup_or_create_module_kobject(drv->mod_name);
+ if (mk) {
/* remember our module structure */
drv->p->mkobj = mk;
- /* kset_find_obj took a reference */
- kobject_put(mkobj);
+ /* lookup_or_create_module_kobject took a reference */
+ kobject_put(&mk->kobj);
}
}
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] dm-bufio: don't schedule in atomic context" failed to apply to 5.4-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.4-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.4.y
git checkout FETCH_HEAD
git cherry-pick -x a3d8f0a7f5e8b193db509c7191fefeed3533fc44
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050556-expose-shuffling-4d2a@gregkh' --subject-prefix 'PATCH 5.4.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From a3d8f0a7f5e8b193db509c7191fefeed3533fc44 Mon Sep 17 00:00:00 2001
From: LongPing Wei <weilongping(a)oppo.com>
Date: Thu, 17 Apr 2025 11:07:38 +0800
Subject: [PATCH] dm-bufio: don't schedule in atomic context
A BUG was reported as below when CONFIG_DEBUG_ATOMIC_SLEEP and
try_verify_in_tasklet are enabled.
[ 129.444685][ T934] BUG: sleeping function called from invalid context at drivers/md/dm-bufio.c:2421
[ 129.444723][ T934] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 934, name: kworker/1:4
[ 129.444740][ T934] preempt_count: 201, expected: 0
[ 129.444756][ T934] RCU nest depth: 0, expected: 0
[ 129.444781][ T934] Preemption disabled at:
[ 129.444789][ T934] [<ffffffd816231900>] shrink_work+0x21c/0x248
[ 129.445167][ T934] kernel BUG at kernel/sched/walt/walt_debug.c:16!
[ 129.445183][ T934] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
[ 129.445204][ T934] Skip md ftrace buffer dump for: 0x1609e0
[ 129.447348][ T934] CPU: 1 PID: 934 Comm: kworker/1:4 Tainted: G W OE 6.6.56-android15-8-o-g6f82312b30b9-debug #1 1400000003000000474e5500b3187743670464e8
[ 129.447362][ T934] Hardware name: Qualcomm Technologies, Inc. Parrot QRD, Alpha-M (DT)
[ 129.447373][ T934] Workqueue: dm_bufio_cache shrink_work
[ 129.447394][ T934] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[ 129.447406][ T934] pc : android_rvh_schedule_bug+0x0/0x8 [sched_walt_debug]
[ 129.447435][ T934] lr : __traceiter_android_rvh_schedule_bug+0x44/0x6c
[ 129.447451][ T934] sp : ffffffc0843dbc90
[ 129.447459][ T934] x29: ffffffc0843dbc90 x28: ffffffffffffffff x27: 0000000000000c8b
[ 129.447479][ T934] x26: 0000000000000040 x25: ffffff804b3d6260 x24: ffffffd816232b68
[ 129.447497][ T934] x23: ffffff805171c5b4 x22: 0000000000000000 x21: ffffffd816231900
[ 129.447517][ T934] x20: ffffff80306ba898 x19: 0000000000000000 x18: ffffffc084159030
[ 129.447535][ T934] x17: 00000000d2b5dd1f x16: 00000000d2b5dd1f x15: ffffffd816720358
[ 129.447554][ T934] x14: 0000000000000004 x13: ffffff89ef978000 x12: 0000000000000003
[ 129.447572][ T934] x11: ffffffd817a823c4 x10: 0000000000000202 x9 : 7e779c5735de9400
[ 129.447591][ T934] x8 : ffffffd81560d004 x7 : 205b5d3938373434 x6 : ffffffd8167397c8
[ 129.447610][ T934] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffffffc0843db9e0
[ 129.447629][ T934] x2 : 0000000000002f15 x1 : 0000000000000000 x0 : 0000000000000000
[ 129.447647][ T934] Call trace:
[ 129.447655][ T934] android_rvh_schedule_bug+0x0/0x8 [sched_walt_debug 1400000003000000474e550080cce8a8a78606b6]
[ 129.447681][ T934] __might_resched+0x190/0x1a8
[ 129.447694][ T934] shrink_work+0x180/0x248
[ 129.447706][ T934] process_one_work+0x260/0x624
[ 129.447718][ T934] worker_thread+0x28c/0x454
[ 129.447729][ T934] kthread+0x118/0x158
[ 129.447742][ T934] ret_from_fork+0x10/0x20
[ 129.447761][ T934] Code: ???????? ???????? ???????? d2b5dd1f (d4210000)
[ 129.447772][ T934] ---[ end trace 0000000000000000 ]---
dm_bufio_lock will call spin_lock_bh when try_verify_in_tasklet
is enabled, and __scan will be called in atomic context.
Fixes: 7cd326747f46 ("dm bufio: remove dm_bufio_cond_resched()")
Signed-off-by: LongPing Wei <weilongping(a)oppo.com>
Cc: stable(a)vger.kernel.org
Signed-off-by: Mikulas Patocka <mpatocka(a)redhat.com>
diff --git a/drivers/md/dm-bufio.c b/drivers/md/dm-bufio.c
index 9c8ed65cd87e..f0b5a6931161 100644
--- a/drivers/md/dm-bufio.c
+++ b/drivers/md/dm-bufio.c
@@ -68,6 +68,8 @@
#define LIST_DIRTY 1
#define LIST_SIZE 2
+#define SCAN_RESCHED_CYCLE 16
+
/*--------------------------------------------------------------*/
/*
@@ -2424,7 +2426,12 @@ static void __scan(struct dm_bufio_client *c)
atomic_long_dec(&c->need_shrink);
freed++;
- cond_resched();
+
+ if (unlikely(freed % SCAN_RESCHED_CYCLE == 0)) {
+ dm_bufio_unlock(c);
+ cond_resched();
+ dm_bufio_lock(c);
+ }
}
}
}
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] dm-bufio: don't schedule in atomic context" failed to apply to 5.10-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.10-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.10.y
git checkout FETCH_HEAD
git cherry-pick -x a3d8f0a7f5e8b193db509c7191fefeed3533fc44
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050555-kept-sixteen-bc46@gregkh' --subject-prefix 'PATCH 5.10.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From a3d8f0a7f5e8b193db509c7191fefeed3533fc44 Mon Sep 17 00:00:00 2001
From: LongPing Wei <weilongping(a)oppo.com>
Date: Thu, 17 Apr 2025 11:07:38 +0800
Subject: [PATCH] dm-bufio: don't schedule in atomic context
A BUG was reported as below when CONFIG_DEBUG_ATOMIC_SLEEP and
try_verify_in_tasklet are enabled.
[ 129.444685][ T934] BUG: sleeping function called from invalid context at drivers/md/dm-bufio.c:2421
[ 129.444723][ T934] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 934, name: kworker/1:4
[ 129.444740][ T934] preempt_count: 201, expected: 0
[ 129.444756][ T934] RCU nest depth: 0, expected: 0
[ 129.444781][ T934] Preemption disabled at:
[ 129.444789][ T934] [<ffffffd816231900>] shrink_work+0x21c/0x248
[ 129.445167][ T934] kernel BUG at kernel/sched/walt/walt_debug.c:16!
[ 129.445183][ T934] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
[ 129.445204][ T934] Skip md ftrace buffer dump for: 0x1609e0
[ 129.447348][ T934] CPU: 1 PID: 934 Comm: kworker/1:4 Tainted: G W OE 6.6.56-android15-8-o-g6f82312b30b9-debug #1 1400000003000000474e5500b3187743670464e8
[ 129.447362][ T934] Hardware name: Qualcomm Technologies, Inc. Parrot QRD, Alpha-M (DT)
[ 129.447373][ T934] Workqueue: dm_bufio_cache shrink_work
[ 129.447394][ T934] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[ 129.447406][ T934] pc : android_rvh_schedule_bug+0x0/0x8 [sched_walt_debug]
[ 129.447435][ T934] lr : __traceiter_android_rvh_schedule_bug+0x44/0x6c
[ 129.447451][ T934] sp : ffffffc0843dbc90
[ 129.447459][ T934] x29: ffffffc0843dbc90 x28: ffffffffffffffff x27: 0000000000000c8b
[ 129.447479][ T934] x26: 0000000000000040 x25: ffffff804b3d6260 x24: ffffffd816232b68
[ 129.447497][ T934] x23: ffffff805171c5b4 x22: 0000000000000000 x21: ffffffd816231900
[ 129.447517][ T934] x20: ffffff80306ba898 x19: 0000000000000000 x18: ffffffc084159030
[ 129.447535][ T934] x17: 00000000d2b5dd1f x16: 00000000d2b5dd1f x15: ffffffd816720358
[ 129.447554][ T934] x14: 0000000000000004 x13: ffffff89ef978000 x12: 0000000000000003
[ 129.447572][ T934] x11: ffffffd817a823c4 x10: 0000000000000202 x9 : 7e779c5735de9400
[ 129.447591][ T934] x8 : ffffffd81560d004 x7 : 205b5d3938373434 x6 : ffffffd8167397c8
[ 129.447610][ T934] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffffffc0843db9e0
[ 129.447629][ T934] x2 : 0000000000002f15 x1 : 0000000000000000 x0 : 0000000000000000
[ 129.447647][ T934] Call trace:
[ 129.447655][ T934] android_rvh_schedule_bug+0x0/0x8 [sched_walt_debug 1400000003000000474e550080cce8a8a78606b6]
[ 129.447681][ T934] __might_resched+0x190/0x1a8
[ 129.447694][ T934] shrink_work+0x180/0x248
[ 129.447706][ T934] process_one_work+0x260/0x624
[ 129.447718][ T934] worker_thread+0x28c/0x454
[ 129.447729][ T934] kthread+0x118/0x158
[ 129.447742][ T934] ret_from_fork+0x10/0x20
[ 129.447761][ T934] Code: ???????? ???????? ???????? d2b5dd1f (d4210000)
[ 129.447772][ T934] ---[ end trace 0000000000000000 ]---
dm_bufio_lock will call spin_lock_bh when try_verify_in_tasklet
is enabled, and __scan will be called in atomic context.
Fixes: 7cd326747f46 ("dm bufio: remove dm_bufio_cond_resched()")
Signed-off-by: LongPing Wei <weilongping(a)oppo.com>
Cc: stable(a)vger.kernel.org
Signed-off-by: Mikulas Patocka <mpatocka(a)redhat.com>
diff --git a/drivers/md/dm-bufio.c b/drivers/md/dm-bufio.c
index 9c8ed65cd87e..f0b5a6931161 100644
--- a/drivers/md/dm-bufio.c
+++ b/drivers/md/dm-bufio.c
@@ -68,6 +68,8 @@
#define LIST_DIRTY 1
#define LIST_SIZE 2
+#define SCAN_RESCHED_CYCLE 16
+
/*--------------------------------------------------------------*/
/*
@@ -2424,7 +2426,12 @@ static void __scan(struct dm_bufio_client *c)
atomic_long_dec(&c->need_shrink);
freed++;
- cond_resched();
+
+ if (unlikely(freed % SCAN_RESCHED_CYCLE == 0)) {
+ dm_bufio_unlock(c);
+ cond_resched();
+ dm_bufio_lock(c);
+ }
}
}
}
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] dm-bufio: don't schedule in atomic context" failed to apply to 5.15-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.15-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.15.y
git checkout FETCH_HEAD
git cherry-pick -x a3d8f0a7f5e8b193db509c7191fefeed3533fc44
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050553-patience-catalyze-90ee@gregkh' --subject-prefix 'PATCH 5.15.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From a3d8f0a7f5e8b193db509c7191fefeed3533fc44 Mon Sep 17 00:00:00 2001
From: LongPing Wei <weilongping(a)oppo.com>
Date: Thu, 17 Apr 2025 11:07:38 +0800
Subject: [PATCH] dm-bufio: don't schedule in atomic context
A BUG was reported as below when CONFIG_DEBUG_ATOMIC_SLEEP and
try_verify_in_tasklet are enabled.
[ 129.444685][ T934] BUG: sleeping function called from invalid context at drivers/md/dm-bufio.c:2421
[ 129.444723][ T934] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 934, name: kworker/1:4
[ 129.444740][ T934] preempt_count: 201, expected: 0
[ 129.444756][ T934] RCU nest depth: 0, expected: 0
[ 129.444781][ T934] Preemption disabled at:
[ 129.444789][ T934] [<ffffffd816231900>] shrink_work+0x21c/0x248
[ 129.445167][ T934] kernel BUG at kernel/sched/walt/walt_debug.c:16!
[ 129.445183][ T934] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
[ 129.445204][ T934] Skip md ftrace buffer dump for: 0x1609e0
[ 129.447348][ T934] CPU: 1 PID: 934 Comm: kworker/1:4 Tainted: G W OE 6.6.56-android15-8-o-g6f82312b30b9-debug #1 1400000003000000474e5500b3187743670464e8
[ 129.447362][ T934] Hardware name: Qualcomm Technologies, Inc. Parrot QRD, Alpha-M (DT)
[ 129.447373][ T934] Workqueue: dm_bufio_cache shrink_work
[ 129.447394][ T934] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[ 129.447406][ T934] pc : android_rvh_schedule_bug+0x0/0x8 [sched_walt_debug]
[ 129.447435][ T934] lr : __traceiter_android_rvh_schedule_bug+0x44/0x6c
[ 129.447451][ T934] sp : ffffffc0843dbc90
[ 129.447459][ T934] x29: ffffffc0843dbc90 x28: ffffffffffffffff x27: 0000000000000c8b
[ 129.447479][ T934] x26: 0000000000000040 x25: ffffff804b3d6260 x24: ffffffd816232b68
[ 129.447497][ T934] x23: ffffff805171c5b4 x22: 0000000000000000 x21: ffffffd816231900
[ 129.447517][ T934] x20: ffffff80306ba898 x19: 0000000000000000 x18: ffffffc084159030
[ 129.447535][ T934] x17: 00000000d2b5dd1f x16: 00000000d2b5dd1f x15: ffffffd816720358
[ 129.447554][ T934] x14: 0000000000000004 x13: ffffff89ef978000 x12: 0000000000000003
[ 129.447572][ T934] x11: ffffffd817a823c4 x10: 0000000000000202 x9 : 7e779c5735de9400
[ 129.447591][ T934] x8 : ffffffd81560d004 x7 : 205b5d3938373434 x6 : ffffffd8167397c8
[ 129.447610][ T934] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffffffc0843db9e0
[ 129.447629][ T934] x2 : 0000000000002f15 x1 : 0000000000000000 x0 : 0000000000000000
[ 129.447647][ T934] Call trace:
[ 129.447655][ T934] android_rvh_schedule_bug+0x0/0x8 [sched_walt_debug 1400000003000000474e550080cce8a8a78606b6]
[ 129.447681][ T934] __might_resched+0x190/0x1a8
[ 129.447694][ T934] shrink_work+0x180/0x248
[ 129.447706][ T934] process_one_work+0x260/0x624
[ 129.447718][ T934] worker_thread+0x28c/0x454
[ 129.447729][ T934] kthread+0x118/0x158
[ 129.447742][ T934] ret_from_fork+0x10/0x20
[ 129.447761][ T934] Code: ???????? ???????? ???????? d2b5dd1f (d4210000)
[ 129.447772][ T934] ---[ end trace 0000000000000000 ]---
dm_bufio_lock will call spin_lock_bh when try_verify_in_tasklet
is enabled, and __scan will be called in atomic context.
Fixes: 7cd326747f46 ("dm bufio: remove dm_bufio_cond_resched()")
Signed-off-by: LongPing Wei <weilongping(a)oppo.com>
Cc: stable(a)vger.kernel.org
Signed-off-by: Mikulas Patocka <mpatocka(a)redhat.com>
diff --git a/drivers/md/dm-bufio.c b/drivers/md/dm-bufio.c
index 9c8ed65cd87e..f0b5a6931161 100644
--- a/drivers/md/dm-bufio.c
+++ b/drivers/md/dm-bufio.c
@@ -68,6 +68,8 @@
#define LIST_DIRTY 1
#define LIST_SIZE 2
+#define SCAN_RESCHED_CYCLE 16
+
/*--------------------------------------------------------------*/
/*
@@ -2424,7 +2426,12 @@ static void __scan(struct dm_bufio_client *c)
atomic_long_dec(&c->need_shrink);
freed++;
- cond_resched();
+
+ if (unlikely(freed % SCAN_RESCHED_CYCLE == 0)) {
+ dm_bufio_unlock(c);
+ cond_resched();
+ dm_bufio_lock(c);
+ }
}
}
}
4 months, 2 weeks
- 1
- 0
Investment H e l p
by Calib Cassim
Good Day,
How are you?
My name is Calib Cassim from Eskom Holdings Ltd. SA. I got your email from
my personal search.
I have in my position an (over-invoice / over-estimated) contract amount
executed by a Foreign Contractor through my Department, which the
contractor has been paid, and left the amount of $25.5M with the payment
Management.
So, I need your help to receive the amount as the Beneficiary on my behalf
for an investment in your area, I will obtain all the needed legal
documents on your name for the transfer.
If you can help handle it, please reply with your phone number for more
discussions and guidelines.
Thanks,
Mr. Calib
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode" failed to apply to 5.4-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.4-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.4.y
git checkout FETCH_HEAD
git cherry-pick -x ac4e04d9e378f5aa826c2406ad7871ae1b6a6fb9
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050520-deprecate-skinny-0232@gregkh' --subject-prefix 'PATCH 5.4.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From ac4e04d9e378f5aa826c2406ad7871ae1b6a6fb9 Mon Sep 17 00:00:00 2001
From: Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com>
Date: Tue, 29 Apr 2025 14:07:11 -0700
Subject: [PATCH] cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode
When turbo mode is unavailable on a Skylake-X system, executing the
command:
# echo 1 > /sys/devices/system/cpu/intel_pstate/no_turbo
results in an unchecked MSR access error:
WRMSR to 0x199 (attempted to write 0x0000000100001300).
This issue was reproduced on an OEM (Original Equipment Manufacturer)
system and is not a common problem across all Skylake-X systems.
This error occurs because the MSR 0x199 Turbo Engage Bit (bit 32) is set
when turbo mode is disabled. The issue arises when intel_pstate fails to
detect that turbo mode is disabled. Here intel_pstate relies on
MSR_IA32_MISC_ENABLE bit 38 to determine the status of turbo mode.
However, on this system, bit 38 is not set even when turbo mode is
disabled.
According to the Intel Software Developer's Manual (SDM), the BIOS sets
this bit during platform initialization to enable or disable
opportunistic processor performance operations. Logically, this bit
should be set in such cases. However, the SDM also specifies that "OS
and applications must use CPUID leaf 06H to detect processors with
opportunistic processor performance operations enabled."
Therefore, in addition to checking MSR_IA32_MISC_ENABLE bit 38, verify
that CPUID.06H:EAX[1] is 0 to accurately determine if turbo mode is
disabled.
Fixes: 4521e1a0ce17 ("cpufreq: intel_pstate: Reflect current no_turbo state correctly")
Signed-off-by: Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com>
Cc: All applicable <stable(a)vger.kernel.org>
Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
diff --git a/drivers/cpufreq/intel_pstate.c b/drivers/cpufreq/intel_pstate.c
index f41ed0b9e610..ba9bf06f1c77 100644
--- a/drivers/cpufreq/intel_pstate.c
+++ b/drivers/cpufreq/intel_pstate.c
@@ -598,6 +598,9 @@ static bool turbo_is_disabled(void)
{
u64 misc_en;
+ if (!cpu_feature_enabled(X86_FEATURE_IDA))
+ return true;
+
rdmsrl(MSR_IA32_MISC_ENABLE, misc_en);
return !!(misc_en & MSR_IA32_MISC_ENABLE_TURBO_DISABLE);
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode" failed to apply to 5.10-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.10-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.10.y
git checkout FETCH_HEAD
git cherry-pick -x ac4e04d9e378f5aa826c2406ad7871ae1b6a6fb9
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050518-excusable-payback-b0f6@gregkh' --subject-prefix 'PATCH 5.10.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From ac4e04d9e378f5aa826c2406ad7871ae1b6a6fb9 Mon Sep 17 00:00:00 2001
From: Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com>
Date: Tue, 29 Apr 2025 14:07:11 -0700
Subject: [PATCH] cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode
When turbo mode is unavailable on a Skylake-X system, executing the
command:
# echo 1 > /sys/devices/system/cpu/intel_pstate/no_turbo
results in an unchecked MSR access error:
WRMSR to 0x199 (attempted to write 0x0000000100001300).
This issue was reproduced on an OEM (Original Equipment Manufacturer)
system and is not a common problem across all Skylake-X systems.
This error occurs because the MSR 0x199 Turbo Engage Bit (bit 32) is set
when turbo mode is disabled. The issue arises when intel_pstate fails to
detect that turbo mode is disabled. Here intel_pstate relies on
MSR_IA32_MISC_ENABLE bit 38 to determine the status of turbo mode.
However, on this system, bit 38 is not set even when turbo mode is
disabled.
According to the Intel Software Developer's Manual (SDM), the BIOS sets
this bit during platform initialization to enable or disable
opportunistic processor performance operations. Logically, this bit
should be set in such cases. However, the SDM also specifies that "OS
and applications must use CPUID leaf 06H to detect processors with
opportunistic processor performance operations enabled."
Therefore, in addition to checking MSR_IA32_MISC_ENABLE bit 38, verify
that CPUID.06H:EAX[1] is 0 to accurately determine if turbo mode is
disabled.
Fixes: 4521e1a0ce17 ("cpufreq: intel_pstate: Reflect current no_turbo state correctly")
Signed-off-by: Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com>
Cc: All applicable <stable(a)vger.kernel.org>
Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
diff --git a/drivers/cpufreq/intel_pstate.c b/drivers/cpufreq/intel_pstate.c
index f41ed0b9e610..ba9bf06f1c77 100644
--- a/drivers/cpufreq/intel_pstate.c
+++ b/drivers/cpufreq/intel_pstate.c
@@ -598,6 +598,9 @@ static bool turbo_is_disabled(void)
{
u64 misc_en;
+ if (!cpu_feature_enabled(X86_FEATURE_IDA))
+ return true;
+
rdmsrl(MSR_IA32_MISC_ENABLE, misc_en);
return !!(misc_en & MSR_IA32_MISC_ENABLE_TURBO_DISABLE);
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode" failed to apply to 5.15-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.15-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.15.y
git checkout FETCH_HEAD
git cherry-pick -x ac4e04d9e378f5aa826c2406ad7871ae1b6a6fb9
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050517-linked-numbing-6e20@gregkh' --subject-prefix 'PATCH 5.15.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From ac4e04d9e378f5aa826c2406ad7871ae1b6a6fb9 Mon Sep 17 00:00:00 2001
From: Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com>
Date: Tue, 29 Apr 2025 14:07:11 -0700
Subject: [PATCH] cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode
When turbo mode is unavailable on a Skylake-X system, executing the
command:
# echo 1 > /sys/devices/system/cpu/intel_pstate/no_turbo
results in an unchecked MSR access error:
WRMSR to 0x199 (attempted to write 0x0000000100001300).
This issue was reproduced on an OEM (Original Equipment Manufacturer)
system and is not a common problem across all Skylake-X systems.
This error occurs because the MSR 0x199 Turbo Engage Bit (bit 32) is set
when turbo mode is disabled. The issue arises when intel_pstate fails to
detect that turbo mode is disabled. Here intel_pstate relies on
MSR_IA32_MISC_ENABLE bit 38 to determine the status of turbo mode.
However, on this system, bit 38 is not set even when turbo mode is
disabled.
According to the Intel Software Developer's Manual (SDM), the BIOS sets
this bit during platform initialization to enable or disable
opportunistic processor performance operations. Logically, this bit
should be set in such cases. However, the SDM also specifies that "OS
and applications must use CPUID leaf 06H to detect processors with
opportunistic processor performance operations enabled."
Therefore, in addition to checking MSR_IA32_MISC_ENABLE bit 38, verify
that CPUID.06H:EAX[1] is 0 to accurately determine if turbo mode is
disabled.
Fixes: 4521e1a0ce17 ("cpufreq: intel_pstate: Reflect current no_turbo state correctly")
Signed-off-by: Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com>
Cc: All applicable <stable(a)vger.kernel.org>
Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
diff --git a/drivers/cpufreq/intel_pstate.c b/drivers/cpufreq/intel_pstate.c
index f41ed0b9e610..ba9bf06f1c77 100644
--- a/drivers/cpufreq/intel_pstate.c
+++ b/drivers/cpufreq/intel_pstate.c
@@ -598,6 +598,9 @@ static bool turbo_is_disabled(void)
{
u64 misc_en;
+ if (!cpu_feature_enabled(X86_FEATURE_IDA))
+ return true;
+
rdmsrl(MSR_IA32_MISC_ENABLE, misc_en);
return !!(misc_en & MSR_IA32_MISC_ENABLE_TURBO_DISABLE);
4 months, 2 weeks
- 1
- 0
FAILED: patch "[PATCH] btrfs: adjust subpage bit start based on sectorsize" failed to apply to 5.15-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.15-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.15.y
git checkout FETCH_HEAD
git cherry-pick -x e08e49d986f82c30f42ad0ed43ebbede1e1e3739
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025050520-specimen-smell-8a92@gregkh' --subject-prefix 'PATCH 5.15.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From e08e49d986f82c30f42ad0ed43ebbede1e1e3739 Mon Sep 17 00:00:00 2001
From: Josef Bacik <josef(a)toxicpanda.com>
Date: Mon, 14 Apr 2025 14:51:58 -0400
Subject: [PATCH] btrfs: adjust subpage bit start based on sectorsize
When running machines with 64k page size and a 16k nodesize we started
seeing tree log corruption in production. This turned out to be because
we were not writing out dirty blocks sometimes, so this in fact affects
all metadata writes.
When writing out a subpage EB we scan the subpage bitmap for a dirty
range. If the range isn't dirty we do
bit_start++;
to move onto the next bit. The problem is the bitmap is based on the
number of sectors that an EB has. So in this case, we have a 64k
pagesize, 16k nodesize, but a 4k sectorsize. This means our bitmap is 4
bits for every node. With a 64k page size we end up with 4 nodes per
page.
To make this easier this is how everything looks
[0 16k 32k 48k ] logical address
[0 4 8 12 ] radix tree offset
[ 64k page ] folio
[ 16k eb ][ 16k eb ][ 16k eb ][ 16k eb ] extent buffers
[ | | | | | | | | | | | | | | | | ] bitmap
Now we use all of our addressing based on fs_info->sectorsize_bits, so
as you can see the above our 16k eb->start turns into radix entry 4.
When we find a dirty range for our eb, we correctly do bit_start +=
sectors_per_node, because if we start at bit 0, the next bit for the
next eb is 4, to correspond to eb->start 16k.
However if our range is clean, we will do bit_start++, which will now
put us offset from our radix tree entries.
In our case, assume that the first time we check the bitmap the block is
not dirty, we increment bit_start so now it == 1, and then we loop
around and check again. This time it is dirty, and we go to find that
start using the following equation
start = folio_start + bit_start * fs_info->sectorsize;
so in the case above, eb->start 0 is now dirty, and we calculate start
as
0 + 1 * fs_info->sectorsize = 4096
4096 >> 12 = 1
Now we're looking up the radix tree for 1, and we won't find an eb.
What's worse is now we're using bit_start == 1, so we do bit_start +=
sectors_per_node, which is now 5. If that eb is dirty we will run into
the same thing, we will look at an offset that is not populated in the
radix tree, and now we're skipping the writeout of dirty extent buffers.
The best fix for this is to not use sectorsize_bits to address nodes,
but that's a larger change. Since this is a fs corruption problem fix
it simply by always using sectors_per_node to increment the start bit.
Fixes: c4aec299fa8f ("btrfs: introduce submit_eb_subpage() to submit a subpage metadata page")
CC: stable(a)vger.kernel.org # 5.15+
Reviewed-by: Boris Burkov <boris(a)bur.io>
Reviewed-by: Qu Wenruo <wqu(a)suse.com>
Signed-off-by: Josef Bacik <josef(a)toxicpanda.com>
Signed-off-by: David Sterba <dsterba(a)suse.com>
diff --git a/fs/btrfs/extent_io.c b/fs/btrfs/extent_io.c
index 197f5e51c474..8515c31f563b 100644
--- a/fs/btrfs/extent_io.c
+++ b/fs/btrfs/extent_io.c
@@ -2047,7 +2047,7 @@ static int submit_eb_subpage(struct folio *folio, struct writeback_control *wbc)
subpage->bitmaps)) {
spin_unlock_irqrestore(&subpage->lock, flags);
spin_unlock(&folio->mapping->i_private_lock);
- bit_start++;
+ bit_start += sectors_per_node;
continue;
}
4 months, 2 weeks
- 1
- 0
[PATCH 0/3] accel/ivpu: Add context violation handling for 6.14
by Jacek Lawrynowicz
These patchset adds support for VPU_JSM_STATUS_MVNCI_CONTEXT_VIOLATION_HW
message added in recent VPU firmware. Without it the driver will not be able to
process any jobs after this message is received and would need to be reloaded.
The last patch in this series is as-is from upstream, but other two patches
had to be rebased because of missing new CMDQ UAPI changes that should not be
backported to stable.
Karol Wachowski (3):
accel/ivpu: Abort all jobs after command queue unregister
accel/ivpu: Fix locking order in ivpu_job_submit
accel/ivpu: Add handling of VPU_JSM_STATUS_MVNCI_CONTEXT_VIOLATION_HW
drivers/accel/ivpu/ivpu_drv.c | 32 ++-------
drivers/accel/ivpu/ivpu_drv.h | 2 +
drivers/accel/ivpu/ivpu_job.c | 111 ++++++++++++++++++++++++++------
drivers/accel/ivpu/ivpu_job.h | 1 +
drivers/accel/ivpu/ivpu_mmu.c | 3 +-
drivers/accel/ivpu/ivpu_sysfs.c | 5 +-
6 files changed, 103 insertions(+), 51 deletions(-)
--
2.45.1
4 months, 2 weeks
- 3
- 7
[PATCH v4.1] x86/sev: Fix making shared pages private during kdump
by Ashish Kalra
From: Ashish Kalra <ashish.kalra(a)amd.com>
When the shared pages are being made private during kdump preparation
there are additional checks to handle shared GHCB pages.
These additional checks include handling the case of GHCB page being
contained within a huge page.
The check for handling the case of GHCB contained within a huge
page incorrectly skips a page just below the GHCB page from being
transitioned back to private during kdump preparation.
This skipped page causes a 0x404 #VC exception when it is accessed
later while dumping guest memory during vmcore generation via kdump.
Correct the range to be checked for GHCB contained in a huge page.
Also ensure that the skipped huge page containing the GHCB page is
transitioned back to private by applying the correct address mask
later when changing GHCBs to private at end of kdump preparation.
Cc: stable(a)vger.kernel.org
Fixes: 3074152e56c9 ("x86/sev: Convert shared memory back to private on kexec")
Signed-off-by: Ashish Kalra <ashish.kalra(a)amd.com>
---
arch/x86/coco/sev/core.c | 14 ++++++++------
1 file changed, 8 insertions(+), 6 deletions(-)
diff --git a/arch/x86/coco/sev/core.c b/arch/x86/coco/sev/core.c
index d35fec7b164a..e39db6714f09 100644
--- a/arch/x86/coco/sev/core.c
+++ b/arch/x86/coco/sev/core.c
@@ -1019,7 +1019,8 @@ static void unshare_all_memory(void)
data = per_cpu(runtime_data, cpu);
ghcb = (unsigned long)&data->ghcb_page;
- if (addr <= ghcb && ghcb <= addr + size) {
+ /* Handle the case of a huge page containing the GHCB page */
+ if (addr <= ghcb && ghcb < addr + size) {
skipped_addr = true;
break;
}
@@ -1131,9 +1132,8 @@ static void shutdown_all_aps(void)
void snp_kexec_finish(void)
{
struct sev_es_runtime_data *data;
+ unsigned long size, ghcb;
unsigned int level, cpu;
- unsigned long size;
- struct ghcb *ghcb;
pte_t *pte;
if (!cc_platform_has(CC_ATTR_GUEST_SEV_SNP))
@@ -1157,11 +1157,13 @@ void snp_kexec_finish(void)
for_each_possible_cpu(cpu) {
data = per_cpu(runtime_data, cpu);
- ghcb = &data->ghcb_page;
- pte = lookup_address((unsigned long)ghcb, &level);
+ ghcb = (unsigned long)&data->ghcb_page;
+ pte = lookup_address(ghcb, &level);
size = page_level_size(level);
+ /* Handle the case of a huge page containing the GHCB page */
+ ghcb &= page_level_mask(level);
set_pte_enc(pte, level, (void *)ghcb);
- snp_set_memory_private((unsigned long)ghcb, (size / PAGE_SIZE));
+ snp_set_memory_private(ghcb, (size / PAGE_SIZE));
}
}
--
2.34.1
4 months, 2 weeks
- 2
- 1
[PATCH 0/3] Preserve the request order in the block layer
by Bart Van Assche
Hi Greg,
In kernel v6.10 the zoned storage approach was changed from zoned write
locking to zone write plugging. Because of this change the block layer
must preserve the request order. Hence this backport of Christoph's
"don't reorder requests passed to ->queue_rqs" patch series. Please
consider this patch series for inclusion in the 6.12 stable kernel.
See also https://lore.kernel.org/linux-block/20241113152050.157179-1-hch@lst.de/.
Thanks,
Bart.
Christoph Hellwig (3):
block: remove rq_list_move
block: add a rq_list type
block: don't reorder requests in blk_add_rq_to_plug
block/blk-core.c | 6 +--
block/blk-merge.c | 2 +-
block/blk-mq.c | 42 +++++++--------
block/blk-mq.h | 2 +-
drivers/block/null_blk/main.c | 9 ++--
drivers/block/virtio_blk.c | 13 +++--
drivers/nvme/host/apple.c | 2 +-
drivers/nvme/host/pci.c | 15 +++---
include/linux/blk-mq.h | 99 +++++++++++++++++------------------
include/linux/blkdev.h | 11 ++--
io_uring/rw.c | 4 +-
11 files changed, 102 insertions(+), 103 deletions(-)
4 months, 2 weeks
- 3
- 8
[PATCH v2 0/2] iio: accel: fxls8962af: Fix temperature readings
by Sean Nyekjaer
Add the correct scale to get temperature in mili degree Celcius.
Add sign component to temperature scan element.
Signed-off-by: Sean Nyekjaer <sean(a)geanix.com>
---
Changes in v2:
- Correct offset is applied before scaling component
- Added sign component to temperature scan element
- Link to v1: https://lore.kernel.org/r/20250501-fxls-v1-1-f54061a07099@geanix.com
---
Sean Nyekjaer (2):
iio: accel: fxls8962af: Fix temperature calculation
iio: accel: fxls8962af: Fix sign temperature scan element
drivers/iio/accel/fxls8962af-core.c | 16 ++++++++++++++--
1 file changed, 14 insertions(+), 2 deletions(-)
---
base-commit: 609bc31eca06c7408e6860d8b46311ebe45c1fef
change-id: 20250501-fxls-307ef3d6d065
Best regards,
--
Sean Nyekjaer <sean(a)geanix.com>
4 months, 2 weeks
- 4
- 7
[PATCH RESEND] drm/msm: fix a potential memory leak issue in submit_create()
by Haoxiang Li
The memory allocated by msm_fence_alloc() actually is the
container of msm_fence_alloc()'s return value. Thus, just
free its return value is not enough.
Add a helper 'msm_fence_free()' in msm_fence.h/msm_fence.c
to do the complete job.
Fixes: f94e6a51e17c ("drm/msm: Pre-allocate hw_fence")
Cc: stable(a)vger.kernel.org
Signed-off-by: Haoxiang Li <haoxiang_li2024(a)163.com>
---
drivers/gpu/drm/msm/msm_fence.c | 7 +++++++
drivers/gpu/drm/msm/msm_fence.h | 1 +
drivers/gpu/drm/msm/msm_gem_submit.c | 2 +-
3 files changed, 9 insertions(+), 1 deletion(-)
diff --git a/drivers/gpu/drm/msm/msm_fence.c b/drivers/gpu/drm/msm/msm_fence.c
index d41e5a6bbee0..72641e6a627d 100644
--- a/drivers/gpu/drm/msm/msm_fence.c
+++ b/drivers/gpu/drm/msm/msm_fence.c
@@ -183,6 +183,13 @@ msm_fence_alloc(void)
return &f->base;
}
+void msm_fence_free(struct dma_fence *fence)
+{
+ struct msm_fence *f = to_msm_fence(fence);
+
+ kfree(f);
+}
+
void
msm_fence_init(struct dma_fence *fence, struct msm_fence_context *fctx)
{
diff --git a/drivers/gpu/drm/msm/msm_fence.h b/drivers/gpu/drm/msm/msm_fence.h
index 148196375a0b..635c68629070 100644
--- a/drivers/gpu/drm/msm/msm_fence.h
+++ b/drivers/gpu/drm/msm/msm_fence.h
@@ -82,6 +82,7 @@ bool msm_fence_completed(struct msm_fence_context *fctx, uint32_t fence);
void msm_update_fence(struct msm_fence_context *fctx, uint32_t fence);
struct dma_fence * msm_fence_alloc(void);
+void msm_fence_free(struct dma_fence *fence);
void msm_fence_init(struct dma_fence *fence, struct msm_fence_context *fctx);
static inline bool
diff --git a/drivers/gpu/drm/msm/msm_gem_submit.c b/drivers/gpu/drm/msm/msm_gem_submit.c
index 3e9aa2cc38ef..213baa5bca5e 100644
--- a/drivers/gpu/drm/msm/msm_gem_submit.c
+++ b/drivers/gpu/drm/msm/msm_gem_submit.c
@@ -56,7 +56,7 @@ static struct msm_gem_submit *submit_create(struct drm_device *dev,
ret = drm_sched_job_init(&submit->base, queue->entity, 1, queue);
if (ret) {
- kfree(submit->hw_fence);
+ msm_fence_free(submit->hw_fence);
kfree(submit);
return ERR_PTR(ret);
}
--
2.25.1
4 months, 2 weeks
- 2
- 1
[PATCH v2 0/1] mm: Xen PV regression after THP PTE optimization
by Petr Vaněk
Hi all,
I recently discovered an mm regression introduced in kernel version 6.9
that affects systems running as a Xen PV domain [1]. Original fix
proposal wasn't ideal, but it sparked a discussion which helped us
fully understand the root cause.
The new v2 patch contains changes based on David Hildenbrand's proposal
to cap max_nr to the number of PFNs that actually remain in the folio
and to clean up the loop.
Thanks,
Petr
[1] https://lore.kernel.org/lkml/20250429142237.22138-1-arkamar@atlas.cz
Petr Vaněk (1):
mm: fix folio_pte_batch() on XEN PV
mm/internal.h | 27 +++++++++++----------------
1 file changed, 11 insertions(+), 16 deletions(-)
--
2.48.1
4 months, 3 weeks
- 3
- 5
[PATCH] x86/boot/sev: Support memory acceptance in the EFI stub under SVSM
by Ard Biesheuvel
From: Ard Biesheuvel <ardb(a)kernel.org>
Commit
d54d610243a4 ("x86/boot/sev: Avoid shared GHCB page for early memory acceptance")
provided a fix for SEV-SNP memory acceptance from the EFI stub when
running at VMPL #0. However, that fix was insufficient for SVSM SEV-SNP
guests running at VMPL >0, as those rely on a SVSM calling area, which
is a shared buffer whose address is programmed into a SEV-SNP MSR, and
the SEV init code that sets up this calling area executes much later
during the boot.
Given that booting via the EFI stub at VMPL >0 implies that the firmware
has configured this calling area already, reuse it for performing memory
acceptance in the EFI stub.
Cc: Borislav Petkov <bp(a)alien8.de>
Cc: Ingo Molnar <mingo(a)kernel.org>
Cc: Dionna Amalie Glaze <dionnaglaze(a)google.com>
Cc: Kevin Loughlin <kevinloughlin(a)google.com>
Cc: <stable(a)vger.kernel.org>
Fixes: fcd042e86422 ("x86/sev: Perform PVALIDATE using the SVSM when not at VMPL0")
Co-developed-by: Tom Lendacky <thomas.lendacky(a)amd.com>
Signed-off-by: Tom Lendacky <thomas.lendacky(a)amd.com>
Signed-off-by: Ard Biesheuvel <ardb(a)kernel.org>
---
Tom,
Please confirm that this works as you intended.
Thanks,
arch/x86/boot/compressed/mem.c | 5 +--
arch/x86/boot/compressed/sev.c | 40 ++++++++++++++++++++
arch/x86/boot/compressed/sev.h | 2 +
3 files changed, 43 insertions(+), 4 deletions(-)
diff --git a/arch/x86/boot/compressed/mem.c b/arch/x86/boot/compressed/mem.c
index f676156d9f3d..0e9f84ab4bdc 100644
--- a/arch/x86/boot/compressed/mem.c
+++ b/arch/x86/boot/compressed/mem.c
@@ -34,14 +34,11 @@ static bool early_is_tdx_guest(void)
void arch_accept_memory(phys_addr_t start, phys_addr_t end)
{
- static bool sevsnp;
-
/* Platform-specific memory-acceptance call goes here */
if (early_is_tdx_guest()) {
if (!tdx_accept_memory(start, end))
panic("TDX: Failed to accept memory\n");
- } else if (sevsnp || (sev_get_status() & MSR_AMD64_SEV_SNP_ENABLED)) {
- sevsnp = true;
+ } else if (early_is_sevsnp_guest()) {
snp_accept_memory(start, end);
} else {
error("Cannot accept memory: unknown platform\n");
diff --git a/arch/x86/boot/compressed/sev.c b/arch/x86/boot/compressed/sev.c
index 89ba168f4f0f..0003e4416efd 100644
--- a/arch/x86/boot/compressed/sev.c
+++ b/arch/x86/boot/compressed/sev.c
@@ -645,3 +645,43 @@ void sev_prep_identity_maps(unsigned long top_level_pgt)
sev_verify_cbit(top_level_pgt);
}
+
+bool early_is_sevsnp_guest(void)
+{
+ static bool sevsnp;
+
+ if (sevsnp)
+ return true;
+
+ if (!(sev_get_status() & MSR_AMD64_SEV_SNP_ENABLED))
+ return false;
+
+ sevsnp = true;
+
+ if (!snp_vmpl) {
+ unsigned int eax, ebx, ecx, edx;
+
+ /*
+ * CPUID Fn8000_001F_EAX[28] - SVSM support
+ */
+ eax = 0x8000001f;
+ ecx = 0;
+ native_cpuid(&eax, &ebx, &ecx, &edx);
+ if (eax & BIT(28)) {
+ struct msr m;
+
+ /* Obtain the address of the calling area to use */
+ boot_rdmsr(MSR_SVSM_CAA, &m);
+ boot_svsm_caa = (void *)m.q;
+ boot_svsm_caa_pa = m.q;
+
+ /*
+ * The real VMPL level cannot be discovered, but the
+ * memory acceptance routines make no use of that so
+ * any non-zero value suffices here.
+ */
+ snp_vmpl = U8_MAX;
+ }
+ }
+ return true;
+}
diff --git a/arch/x86/boot/compressed/sev.h b/arch/x86/boot/compressed/sev.h
index 4e463f33186d..d3900384b8ab 100644
--- a/arch/x86/boot/compressed/sev.h
+++ b/arch/x86/boot/compressed/sev.h
@@ -13,12 +13,14 @@
bool sev_snp_enabled(void);
void snp_accept_memory(phys_addr_t start, phys_addr_t end);
u64 sev_get_status(void);
+bool early_is_sevsnp_guest(void);
#else
static inline bool sev_snp_enabled(void) { return false; }
static inline void snp_accept_memory(phys_addr_t start, phys_addr_t end) { }
static inline u64 sev_get_status(void) { return 0; }
+static inline bool early_is_sevsnp_guest(void) { return false; }
#endif
base-commit: b4432656b36e5cc1d50a1f2dc15357543add530e
--
2.49.0.906.g1f30a19c02-goog
4 months, 3 weeks
- 5
- 5
[PATCH v3] powerpc/bpf: fix JIT code size calculation of bpf trampoline
by Hari Bathini
arch_bpf_trampoline_size() provides JIT size of the BPF trampoline
before the buffer for JIT'ing it is allocated. The total number of
instructions emitted for BPF trampoline JIT code depends on where
the final image is located. So, the size arrived at with the dummy
pass in arch_bpf_trampoline_size() can vary from the actual size
needed in arch_prepare_bpf_trampoline(). When the instructions
accounted in arch_bpf_trampoline_size() is less than the number of
instructions emitted during the actual JIT compile of the trampoline,
the below warning is produced:
WARNING: CPU: 8 PID: 204190 at arch/powerpc/net/bpf_jit_comp.c:981 __arch_prepare_bpf_trampoline.isra.0+0xd2c/0xdcc
which is:
/* Make sure the trampoline generation logic doesn't overflow */
if (image && WARN_ON_ONCE(&image[ctx->idx] >
(u32 *)rw_image_end - BPF_INSN_SAFETY)) {
So, during the dummy pass, instead of providing some arbitrary image
location, account for maximum possible instructions if and when there
is a dependency with image location for JIT'ing.
Fixes: d243b62b7bd3 ("powerpc64/bpf: Add support for bpf trampolines")
Reported-by: Venkat Rao Bagalkote <venkat88(a)linux.ibm.com>
Closes: https://lore.kernel.org/all/6168bfc8-659f-4b5a-a6fb-90a916dde3b3@linux.ibm.…
Cc: stable(a)vger.kernel.org # v6.13+
Acked-by: Naveen N Rao (AMD) <naveen(a)kernel.org>
Tested-by: Venkat Rao Bagalkote <venkat88(a)linux.ibm.com>
Signed-off-by: Hari Bathini <hbathini(a)linux.ibm.com>
---
Changes since v2:
- Address review comments from Naveen:
- Remove additional padding for 'case BPF_LD | BPF_IMM | BPF_DW:'
in arch/powerpc/net/bpf_jit_comp*.c
- Merge the if sequence in bpf_jit_emit_func_call_rel() with the
other conditionals
- Naveen, carried your Acked-by tag as the additional changes are
minimal and in line with your suggestion. Feel free to update
if you look at it differently.
- Venkat, carried your Tested-by tag from v2 as the changes in
v3 should not alter the test result. Feel free to update if
you look at it differently.
Changes since v1:
- Pass NULL for image during intial pass and account for max. possible
instruction during this pass as Naveen suggested.
arch/powerpc/net/bpf_jit.h | 20 ++++++++++++++++---
arch/powerpc/net/bpf_jit_comp.c | 33 ++++++++++---------------------
arch/powerpc/net/bpf_jit_comp32.c | 6 ------
arch/powerpc/net/bpf_jit_comp64.c | 15 +++++++-------
4 files changed, 35 insertions(+), 39 deletions(-)
diff --git a/arch/powerpc/net/bpf_jit.h b/arch/powerpc/net/bpf_jit.h
index 6beacaec63d3..4c26912c2e3c 100644
--- a/arch/powerpc/net/bpf_jit.h
+++ b/arch/powerpc/net/bpf_jit.h
@@ -51,8 +51,16 @@
EMIT(PPC_INST_BRANCH_COND | (((cond) & 0x3ff) << 16) | (offset & 0xfffc)); \
} while (0)
-/* Sign-extended 32-bit immediate load */
+/*
+ * Sign-extended 32-bit immediate load
+ *
+ * If this is a dummy pass (!image), account for
+ * maximum possible instructions.
+ */
#define PPC_LI32(d, i) do { \
+ if (!image) \
+ ctx->idx += 2; \
+ else { \
if ((int)(uintptr_t)(i) >= -32768 && \
(int)(uintptr_t)(i) < 32768) \
EMIT(PPC_RAW_LI(d, i)); \
@@ -60,10 +68,15 @@
EMIT(PPC_RAW_LIS(d, IMM_H(i))); \
if (IMM_L(i)) \
EMIT(PPC_RAW_ORI(d, d, IMM_L(i))); \
- } } while(0)
+ } \
+ } } while (0)
#ifdef CONFIG_PPC64
+/* If dummy pass (!image), account for maximum possible instructions */
#define PPC_LI64(d, i) do { \
+ if (!image) \
+ ctx->idx += 5; \
+ else { \
if ((long)(i) >= -2147483648 && \
(long)(i) < 2147483648) \
PPC_LI32(d, i); \
@@ -84,7 +97,8 @@
if ((uintptr_t)(i) & 0x000000000000ffffULL) \
EMIT(PPC_RAW_ORI(d, d, (uintptr_t)(i) & \
0xffff)); \
- } } while (0)
+ } \
+ } } while (0)
#define PPC_LI_ADDR PPC_LI64
#ifndef CONFIG_PPC_KERNEL_PCREL
diff --git a/arch/powerpc/net/bpf_jit_comp.c b/arch/powerpc/net/bpf_jit_comp.c
index 2991bb171a9b..c0684733e9d6 100644
--- a/arch/powerpc/net/bpf_jit_comp.c
+++ b/arch/powerpc/net/bpf_jit_comp.c
@@ -504,10 +504,11 @@ static int invoke_bpf_prog(u32 *image, u32 *ro_image, struct codegen_context *ct
EMIT(PPC_RAW_ADDI(_R3, _R1, regs_off));
if (!p->jited)
PPC_LI_ADDR(_R4, (unsigned long)p->insnsi);
- if (!create_branch(&branch_insn, (u32 *)&ro_image[ctx->idx], (unsigned long)p->bpf_func,
- BRANCH_SET_LINK)) {
- if (image)
- image[ctx->idx] = ppc_inst_val(branch_insn);
+ /* Account for max possible instructions during dummy pass for size calculation */
+ if (image && !create_branch(&branch_insn, (u32 *)&ro_image[ctx->idx],
+ (unsigned long)p->bpf_func,
+ BRANCH_SET_LINK)) {
+ image[ctx->idx] = ppc_inst_val(branch_insn);
ctx->idx++;
} else {
EMIT(PPC_RAW_LL(_R12, _R25, offsetof(struct bpf_prog, bpf_func)));
@@ -889,7 +890,8 @@ static int __arch_prepare_bpf_trampoline(struct bpf_tramp_image *im, void *rw_im
bpf_trampoline_restore_tail_call_cnt(image, ctx, func_frame_offset, r4_off);
/* Reserve space to patch branch instruction to skip fexit progs */
- im->ip_after_call = &((u32 *)ro_image)[ctx->idx];
+ if (ro_image) /* image is NULL for dummy pass */
+ im->ip_after_call = &((u32 *)ro_image)[ctx->idx];
EMIT(PPC_RAW_NOP());
}
@@ -912,7 +914,8 @@ static int __arch_prepare_bpf_trampoline(struct bpf_tramp_image *im, void *rw_im
}
if (flags & BPF_TRAMP_F_CALL_ORIG) {
- im->ip_epilogue = &((u32 *)ro_image)[ctx->idx];
+ if (ro_image) /* image is NULL for dummy pass */
+ im->ip_epilogue = &((u32 *)ro_image)[ctx->idx];
PPC_LI_ADDR(_R3, im);
ret = bpf_jit_emit_func_call_rel(image, ro_image, ctx,
(unsigned long)__bpf_tramp_exit);
@@ -973,25 +976,9 @@ int arch_bpf_trampoline_size(const struct btf_func_model *m, u32 flags,
struct bpf_tramp_links *tlinks, void *func_addr)
{
struct bpf_tramp_image im;
- void *image;
int ret;
- /*
- * Allocate a temporary buffer for __arch_prepare_bpf_trampoline().
- * This will NOT cause fragmentation in direct map, as we do not
- * call set_memory_*() on this buffer.
- *
- * We cannot use kvmalloc here, because we need image to be in
- * module memory range.
- */
- image = bpf_jit_alloc_exec(PAGE_SIZE);
- if (!image)
- return -ENOMEM;
-
- ret = __arch_prepare_bpf_trampoline(&im, image, image + PAGE_SIZE, image,
- m, flags, tlinks, func_addr);
- bpf_jit_free_exec(image);
-
+ ret = __arch_prepare_bpf_trampoline(&im, NULL, NULL, NULL, m, flags, tlinks, func_addr);
return ret;
}
diff --git a/arch/powerpc/net/bpf_jit_comp32.c b/arch/powerpc/net/bpf_jit_comp32.c
index c4db278dae36..0aace304dfe1 100644
--- a/arch/powerpc/net/bpf_jit_comp32.c
+++ b/arch/powerpc/net/bpf_jit_comp32.c
@@ -313,7 +313,6 @@ int bpf_jit_build_body(struct bpf_prog *fp, u32 *image, u32 *fimage, struct code
u64 func_addr;
u32 true_cond;
u32 tmp_idx;
- int j;
if (i && (BPF_CLASS(code) == BPF_ALU64 || BPF_CLASS(code) == BPF_ALU) &&
(BPF_CLASS(prevcode) == BPF_ALU64 || BPF_CLASS(prevcode) == BPF_ALU) &&
@@ -1099,13 +1098,8 @@ int bpf_jit_build_body(struct bpf_prog *fp, u32 *image, u32 *fimage, struct code
* 16 byte instruction that uses two 'struct bpf_insn'
*/
case BPF_LD | BPF_IMM | BPF_DW: /* dst = (u64) imm */
- tmp_idx = ctx->idx;
PPC_LI32(dst_reg_h, (u32)insn[i + 1].imm);
PPC_LI32(dst_reg, (u32)insn[i].imm);
- /* padding to allow full 4 instructions for later patching */
- if (!image)
- for (j = ctx->idx - tmp_idx; j < 4; j++)
- EMIT(PPC_RAW_NOP());
/* Adjust for two bpf instructions */
addrs[++i] = ctx->idx * 4;
break;
diff --git a/arch/powerpc/net/bpf_jit_comp64.c b/arch/powerpc/net/bpf_jit_comp64.c
index 233703b06d7c..5daa77aee7f7 100644
--- a/arch/powerpc/net/bpf_jit_comp64.c
+++ b/arch/powerpc/net/bpf_jit_comp64.c
@@ -227,7 +227,14 @@ int bpf_jit_emit_func_call_rel(u32 *image, u32 *fimage, struct codegen_context *
#ifdef CONFIG_PPC_KERNEL_PCREL
reladdr = func_addr - local_paca->kernelbase;
- if (reladdr < (long)SZ_8G && reladdr >= -(long)SZ_8G) {
+ /*
+ * If fimage is NULL (the initial pass to find image size),
+ * account for the maximum no. of instructions possible.
+ */
+ if (!fimage) {
+ ctx->idx += 7;
+ return 0;
+ } else if (reladdr < (long)SZ_8G && reladdr >= -(long)SZ_8G) {
EMIT(PPC_RAW_LD(_R12, _R13, offsetof(struct paca_struct, kernelbase)));
/* Align for subsequent prefix instruction */
if (!IS_ALIGNED((unsigned long)fimage + CTX_NIA(ctx), 8))
@@ -412,7 +419,6 @@ int bpf_jit_build_body(struct bpf_prog *fp, u32 *image, u32 *fimage, struct code
u64 imm64;
u32 true_cond;
u32 tmp_idx;
- int j;
/*
* addrs[] maps a BPF bytecode address into a real offset from
@@ -1046,12 +1052,7 @@ int bpf_jit_build_body(struct bpf_prog *fp, u32 *image, u32 *fimage, struct code
case BPF_LD | BPF_IMM | BPF_DW: /* dst = (u64) imm */
imm64 = ((u64)(u32) insn[i].imm) |
(((u64)(u32) insn[i+1].imm) << 32);
- tmp_idx = ctx->idx;
PPC_LI64(dst_reg, imm64);
- /* padding to allow full 5 instructions for later patching */
- if (!image)
- for (j = ctx->idx - tmp_idx; j < 5; j++)
- EMIT(PPC_RAW_NOP());
/* Adjust for two bpf instructions */
addrs[++i] = ctx->idx * 4;
break;
--
2.49.0
4 months, 3 weeks
- 2
- 1
[PATCH] powerpc64/ftrace: fix clobbered r15 during livepatching
by Hari Bathini
While r15 is clobbered always with PPC_FTRACE_OUT_OF_LINE, it is
not restored in livepatch sequence leading to not so obvious fails
like below:
BUG: Unable to handle kernel data access on write at 0xc0000000000f9078
Faulting instruction address: 0xc0000000018ff958
Oops: Kernel access of bad area, sig: 11 [#1]
...
NIP: c0000000018ff958 LR: c0000000018ff930 CTR: c0000000009c0790
REGS: c00000005f2e7790 TRAP: 0300 Tainted: G K (6.14.0+)
MSR: 8000000000009033 <SF,EE,ME,IR,DR,RI,LE> CR: 2822880b XER: 20040000
CFAR: c0000000008addc0 DAR: c0000000000f9078 DSISR: 0a000000 IRQMASK: 1
GPR00: c0000000018f2584 c00000005f2e7a30 c00000000280a900 c000000017ffa488
GPR04: 0000000000000008 0000000000000000 c0000000018f24fc 000000000000000d
GPR08: fffffffffffe0000 000000000000000d 0000000000000000 0000000000008000
GPR12: c0000000009c0790 c000000017ffa480 c00000005f2e7c78 c0000000000f9070
GPR16: c00000005f2e7c90 0000000000000000 0000000000000000 0000000000000000
GPR20: 0000000000000000 c00000005f3efa80 c00000005f2e7c60 c00000005f2e7c88
GPR24: c00000005f2e7c60 0000000000000001 c0000000000f9078 0000000000000000
GPR28: 00007fff97960000 c000000017ffa480 0000000000000000 c0000000000f9078
...
Call Trace:
check_heap_object+0x34/0x390 (unreliable)
__mutex_unlock_slowpath.isra.0+0xe4/0x230
seq_read_iter+0x430/0xa90
proc_reg_read_iter+0xa4/0x200
vfs_read+0x41c/0x510
ksys_read+0xa4/0x190
system_call_exception+0x1d0/0x440
system_call_vectored_common+0x15c/0x2ec
Fix it by restoring r15 always.
Fixes: eec37961a56a ("powerpc64/ftrace: Move ftrace sequence out of line")
Reported-by: Viktor Malik <vmalik(a)redhat.com>
Closes: https://lore.kernel.org/lkml/1aec4a9a-a30b-43fd-b303-7a351caeccb7@redhat.com
Cc: stable(a)vger.kernel.org # v6.13+
Signed-off-by: Hari Bathini <hbathini(a)linux.ibm.com>
---
arch/powerpc/kernel/trace/ftrace_entry.S | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/arch/powerpc/kernel/trace/ftrace_entry.S b/arch/powerpc/kernel/trace/ftrace_entry.S
index 2c1b24100eca..3565c67fc638 100644
--- a/arch/powerpc/kernel/trace/ftrace_entry.S
+++ b/arch/powerpc/kernel/trace/ftrace_entry.S
@@ -212,10 +212,10 @@
bne- 1f
mr r3, r15
+1: mtlr r3
.if \allregs == 0
REST_GPR(15, r1)
.endif
-1: mtlr r3
#endif
/* Restore gprs */
--
2.49.0
4 months, 3 weeks
- 4
- 3
+ mm-fix-folio_pte_batch-on-xen-pv.patch added to mm-hotfixes-unstable branch
by Andrew Morton
The patch titled
Subject: mm: fix folio_pte_batch() on XEN PV
has been added to the -mm mm-hotfixes-unstable branch. Its filename is
mm-fix-folio_pte_batch-on-xen-pv.patch
This patch will shortly appear at
https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patche…
This patch will later appear in the mm-hotfixes-unstable branch at
git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
Before you just go and hit "reply", please:
a) Consider who else should be cc'ed
b) Prefer to cc a suitable mailing list as well
c) Ideally: find the original patch on the mailing list and do a
reply-to-all to that, adding suitable additional cc's
*** Remember to use Documentation/process/submit-checklist.rst when testing your code ***
The -mm tree is included into linux-next via the mm-everything
branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
and is updated there every 2-3 working days
------------------------------------------------------
From: Petr Van��k <arkamar(a)atlas.cz>
Subject: mm: fix folio_pte_batch() on XEN PV
Date: Fri, 2 May 2025 23:50:19 +0200
On XEN PV, folio_pte_batch() can incorrectly batch beyond the end of a
folio due to a corner case in pte_advance_pfn(). Specifically, when the
PFN following the folio maps to an invalidated MFN,
expected_pte = pte_advance_pfn(expected_pte, nr);
produces a pte_none(). If the actual next PTE in memory is also
pte_none(), the pte_same() succeeds,
if (!pte_same(pte, expected_pte))
break;
the loop is not broken, and batching continues into unrelated memory.
For example, with a 4-page folio, the PTE layout might look like this:
[ 53.465673] [ T2552] folio_pte_batch: printing PTE values at addr=0x7f1ac9dc5000
[ 53.465674] [ T2552] PTE[453] = 000000010085c125
[ 53.465679] [ T2552] PTE[454] = 000000010085d125
[ 53.465682] [ T2552] PTE[455] = 000000010085e125
[ 53.465684] [ T2552] PTE[456] = 000000010085f125
[ 53.465686] [ T2552] PTE[457] = 0000000000000000 <-- not present
[ 53.465689] [ T2552] PTE[458] = 0000000101da7125
pte_advance_pfn(PTE[456]) returns a pte_none() due to invalid PFN->MFN
mapping. The next actual PTE (PTE[457]) is also pte_none(), so the loop
continues and includes PTE[457] in the batch, resulting in 5 batched
entries for a 4-page folio. This triggers the following warning:
[ 53.465751] [ T2552] page: refcount:85 mapcount:20 mapping:ffff88813ff4f6a8 index:0x110 pfn:0x10085c
[ 53.465754] [ T2552] head: order:2 mapcount:80 entire_mapcount:0 nr_pages_mapped:4 pincount:0
[ 53.465756] [ T2552] memcg:ffff888003573000
[ 53.465758] [ T2552] aops:0xffffffff8226fd20 ino:82467c dentry name(?):"libc.so.6"
[ 53.465761] [ T2552] flags: 0x2000000000416c(referenced|uptodate|lru|active|private|head|node=0|zone=2)
[ 53.465764] [ T2552] raw: 002000000000416c ffffea0004021f08 ffffea0004021908 ffff88813ff4f6a8
[ 53.465767] [ T2552] raw: 0000000000000110 ffff888133d8bd40 0000005500000013 ffff888003573000
[ 53.465768] [ T2552] head: 002000000000416c ffffea0004021f08 ffffea0004021908 ffff88813ff4f6a8
[ 53.465770] [ T2552] head: 0000000000000110 ffff888133d8bd40 0000005500000013 ffff888003573000
[ 53.465772] [ T2552] head: 0020000000000202 ffffea0004021701 000000040000004f 00000000ffffffff
[ 53.465774] [ T2552] head: 0000000300000003 8000000300000002 0000000000000013 0000000000000004
[ 53.465775] [ T2552] page dumped because: VM_WARN_ON_FOLIO((_Generic((page + nr_pages - 1), const struct page *: (const struct folio *)_compound_head(page + nr_pages - 1), struct page *: (struct folio *)_compound_head(page + nr_pages - 1))) != folio)
Original code works as expected everywhere, except on XEN PV, where
pte_advance_pfn() can yield a pte_none() after balloon inflation due to
MFNs invalidation. In XEN, pte_advance_pfn() ends up calling
__pte()->xen_make_pte()->pte_pfn_to_mfn(), which returns pte_none() when
mfn == INVALID_P2M_ENTRY.
The pte_pfn_to_mfn() documents that nastiness:
If there's no mfn for the pfn, then just create an
empty non-present pte. Unfortunately this loses
information about the original pfn, so
pte_mfn_to_pfn is asymmetric.
While such hacks should certainly be removed, we can do better in
folio_pte_batch() and simply check ahead of time how many PTEs we can
possibly batch in our folio.
This way, we can not only fix the issue but cleanup the code: removing the
pte_pfn() check inside the loop body and avoiding end_ptr comparison +
arithmetic.
Link: https://lkml.kernel.org/r/20250502215019.822-2-arkamar@atlas.cz
Fixes: f8d937761d65 ("mm/memory: optimize fork() with PTE-mapped THP")
Co-developed-by: David Hildenbrand <david(a)redhat.com>
Signed-off-by: David Hildenbrand <david(a)redhat.com>
Signed-off-by: Petr Van��k <arkamar(a)atlas.cz>
Cc: Ryan Roberts <ryan.roberts(a)arm.com>
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
mm/internal.h | 27 +++++++++++----------------
1 file changed, 11 insertions(+), 16 deletions(-)
--- a/mm/internal.h~mm-fix-folio_pte_batch-on-xen-pv
+++ a/mm/internal.h
@@ -248,11 +248,9 @@ static inline int folio_pte_batch(struct
pte_t *start_ptep, pte_t pte, int max_nr, fpb_t flags,
bool *any_writable, bool *any_young, bool *any_dirty)
{
- unsigned long folio_end_pfn = folio_pfn(folio) + folio_nr_pages(folio);
- const pte_t *end_ptep = start_ptep + max_nr;
pte_t expected_pte, *ptep;
bool writable, young, dirty;
- int nr;
+ int nr, cur_nr;
if (any_writable)
*any_writable = false;
@@ -265,11 +263,15 @@ static inline int folio_pte_batch(struct
VM_WARN_ON_FOLIO(!folio_test_large(folio) || max_nr < 1, folio);
VM_WARN_ON_FOLIO(page_folio(pfn_to_page(pte_pfn(pte))) != folio, folio);
+ /* Limit max_nr to the actual remaining PFNs in the folio we could batch. */
+ max_nr = min_t(unsigned long, max_nr,
+ folio_pfn(folio) + folio_nr_pages(folio) - pte_pfn(pte));
+
nr = pte_batch_hint(start_ptep, pte);
expected_pte = __pte_batch_clear_ignored(pte_advance_pfn(pte, nr), flags);
ptep = start_ptep + nr;
- while (ptep < end_ptep) {
+ while (nr < max_nr) {
pte = ptep_get(ptep);
if (any_writable)
writable = !!pte_write(pte);
@@ -282,14 +284,6 @@ static inline int folio_pte_batch(struct
if (!pte_same(pte, expected_pte))
break;
- /*
- * Stop immediately once we reached the end of the folio. In
- * corner cases the next PFN might fall into a different
- * folio.
- */
- if (pte_pfn(pte) >= folio_end_pfn)
- break;
-
if (any_writable)
*any_writable |= writable;
if (any_young)
@@ -297,12 +291,13 @@ static inline int folio_pte_batch(struct
if (any_dirty)
*any_dirty |= dirty;
- nr = pte_batch_hint(ptep, pte);
- expected_pte = pte_advance_pfn(expected_pte, nr);
- ptep += nr;
+ cur_nr = pte_batch_hint(ptep, pte);
+ expected_pte = pte_advance_pfn(expected_pte, cur_nr);
+ ptep += cur_nr;
+ nr += cur_nr;
}
- return min(ptep - start_ptep, max_nr);
+ return min(nr, max_nr);
}
/**
_
Patches currently in -mm which might be from arkamar(a)atlas.cz are
mm-fix-folio_pte_batch-on-xen-pv.patch
4 months, 3 weeks
- 1
- 0
[PATCH] arm64/cpufeature: annotate arm64_use_ng_mappings with ro_after_init to prevent wrong idmap generation
by Yeoreum Yun
create_init_idmap() could be called before .bss section initialization
which is done in early_map_kernel() since data/test_prot could be set
wrong for PTE_MAYBE_NG macro.
PTE_MAYBE_NG macro is set according to value of "arm64_use_ng_mappings".
and this variable is located in .bss section.
# llvm-objdump-21 --syms vmlinux-gcc | grep arm64_use_ng_mappings
ffff800082f242a8 g O .bss 0000000000000001 arm64_use_ng_mappings
If .bss section doesn't initialized, "arm64_use_ng_mappings" would be set
with garbage value ant then the text_prot or data_prot could be set
with garbgae value.
Here is what i saw with kernel compiled via llvm-21
// create_init_idmap()
ffff80008255c058: d10103ff sub sp, sp, #0x40
ffff80008255c05c: a9017bfd stp x29, x30, [sp, #0x10]
ffff80008255c060: a90257f6 stp x22, x21, [sp, #0x20]
ffff80008255c064: a9034ff4 stp x20, x19, [sp, #0x30]
ffff80008255c068: 910043fd add x29, sp, #0x10
ffff80008255c06c: 90003fc8 adrp x8, 0xffff800082d54000
ffff80008255c070: d280e06a mov x10, #0x703 // =1795
ffff80008255c074: 91400409 add x9, x0, #0x1, lsl #12 // =0x1000
ffff80008255c078: 394a4108 ldrb w8, [x8, #0x290] ------------- (1)
ffff80008255c07c: f2e00d0a movk x10, #0x68, lsl #48
ffff80008255c080: f90007e9 str x9, [sp, #0x8]
ffff80008255c084: aa0103f3 mov x19, x1
ffff80008255c088: aa0003f4 mov x20, x0
ffff80008255c08c: 14000000 b 0xffff80008255c08c <__pi_create_init_idmap+0x34>
ffff80008255c090: aa082d56 orr x22, x10, x8, lsl #11 -------- (2)
Note (1) is load the arm64_use_ng_mappings value in w8.
and (2) is set the text or data prot with the w8 value to set PTE_NG bit.
If .bss section doesn't initialized, x8 can include garbage value
-- In case of some platform, x8 loaded with 0xcf -- it could generate
wrong mapping. (i.e) text_prot is expected with
PAGE_KERNEL_ROX(0x0040000000000F83) but
with garbage x8 -- 0xcf, it sets with (0x0040000000067F83)
and This makes boot failure with translation fault.
This error cannot happen according to code generated by compiler.
here is the case of gcc:
ffff80008260a940 <__pi_create_init_idmap>:
ffff80008260a940: d100c3ff sub sp, sp, #0x30
ffff80008260a944: aa0003ed mov x13, x0
ffff80008260a948: 91400400 add x0, x0, #0x1, lsl #12 // =0x1000
ffff80008260a94c: a9017bfd stp x29, x30, [sp, #0x10]
ffff80008260a950: 910043fd add x29, sp, #0x10
ffff80008260a954: f90017e0 str x0, [sp, #0x28]
ffff80008260a958: d00048c0 adrp x0, 0xffff800082f24000 <reset_devices>
ffff80008260a95c: 394aa000 ldrb w0, [x0, #0x2a8]
ffff80008260a960: 37000640 tbnz w0, #0x0, 0xffff80008260aa28 <__pi_create_init_idmap+0xe8> ---(3)
ffff80008260a964: d280f060 mov x0, #0x783 // =1923
ffff80008260a968: d280e062 mov x2, #0x703 // =1795
ffff80008260a96c: f2e00800 movk x0, #0x40, lsl #48
ffff80008260a970: f2e00d02 movk x2, #0x68, lsl #48
ffff80008260a974: aa2103e4 mvn x4, x1
ffff80008260a978: 8a210049 bic x9, x2, x1
...
ffff80008260aa28: d281f060 mov x0, #0xf83 // =3971
ffff80008260aa2c: d281e062 mov x2, #0xf03 // =3843
ffff80008260aa30: f2e00800 movk x0, #0x40, lsl #48
In case of gcc, according to value of arm64_use_ng_mappings (annoated as(3)),
it branches to each prot settup code.
However this is also problem since it branches according to garbage
value too -- idmapping with wrong pgprot.
To resolve this, annotate arm64_use_ng_mappings as ro_after_init.
Fixes: 84b04d3e6bdb ("arm64: kernel: Create initial ID map from C code")
Cc: <stable(a)vger.kernel.org> # 6.9.x
Signed-off-by: Yeoreum Yun <yeoreum.yun(a)arm.com>
---
There is another way to solve this problem by setting
test/data_prot with _PAGE_DEFAULT which doesn't include PTE_MAYBE_NG
with constanst check in create_init_idmap() to be free from
arm64_use_ng_mappings. but i think it would be better to change
arm64_use_ng_mappings as ro_after_init because it doesn't change after
init phase and solve this problem too.
---
arch/arm64/kernel/cpufeature.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/arch/arm64/kernel/cpufeature.c b/arch/arm64/kernel/cpufeature.c
index d2104a1e7843..967ffb1cbd52 100644
--- a/arch/arm64/kernel/cpufeature.c
+++ b/arch/arm64/kernel/cpufeature.c
@@ -114,7 +114,7 @@ static struct arm64_cpu_capabilities const __ro_after_init *cpucap_ptrs[ARM64_NC
DECLARE_BITMAP(boot_cpucaps, ARM64_NCAPS);
-bool arm64_use_ng_mappings = false;
+bool arm64_use_ng_mappings __ro_after_init = false;
EXPORT_SYMBOL(arm64_use_ng_mappings);
DEFINE_PER_CPU_READ_MOSTLY(const char *, this_cpu_vector) = vectors;
--
LEVI:{C3F47F37-75D8-414A-A8BA-3980EC8A46D7}
4 months, 3 weeks
- 4
- 9
[PATCH 6.1 6.6 6.12 6.13] scripts/sorttable: fix ELF64 mcount_loc address parsing when compiling on 32-bit
by Sahil Gupta
The ftrace __mcount_loc buildtime sort does not work properly when the host is
32-bit and the target is 64-bit. sorttable parses the start and stop addresses
by calling strtoul on the buffer holding the hexadecimal string. Since the
target is 64-bit but unsigned long on 32-bit machines is 32 bits, strtoul,
and by extension the start and stop addresses, can max out to 2^32 - 1.
This patch adds a new macro, parse_addr, that corresponds to a strtoul
or strtoull call based on whether you are operating on a 32-bit ELF or
a 64-bit ELF. This way, the correct width is guaranteed whether or not
the host is 32-bit. This should cleanly apply on all of the 6.x stable
kernels.
Manually verified that the __mcount_loc section is sorted by parsing the
ELF and verified tests corresponding to CONFIG_FTRACE_SORT_STARTUP_TEST
for kernels built on a 32-bit and a 64-bit host.
Signed-off-by: Sahil Gupta <s.gupta(a)arista.com>
---
scripts/sorttable.h | 7 +++++--
1 file changed, 5 insertions(+), 2 deletions(-)
diff --git a/scripts/sorttable.h b/scripts/sorttable.h
index 7bd0184380d3..9ed7acca9f30 100644
--- a/scripts/sorttable.h
+++ b/scripts/sorttable.h
@@ -40,6 +40,7 @@
#undef uint_t
#undef _r
#undef _w
+#undef parse_addr
#ifdef SORTTABLE_64
# define extable_ent_size 16
@@ -65,6 +66,7 @@
# define uint_t uint64_t
# define _r r8
# define _w w8
+# define parse_addr(buf) strtoull(buf, NULL, 16)
#else
# define extable_ent_size 8
# define compare_extable compare_extable_32
@@ -89,6 +91,7 @@
# define uint_t uint32_t
# define _r r
# define _w w
+# define parse_addr(buf) strtoul(buf, NULL, 16)
#endif
#if defined(SORTTABLE_64) && defined(UNWINDER_ORC_ENABLED)
@@ -246,13 +249,13 @@ static void get_mcount_loc(uint_t *_start, uint_t *_stop)
len = strlen(start_buff);
start_buff[len - 1] = '\0';
}
- *_start = strtoul(start_buff, NULL, 16);
+ *_start = parse_addr(start_buff);
while (fgets(stop_buff, sizeof(stop_buff), file_stop) != NULL) {
len = strlen(stop_buff);
stop_buff[len - 1] = '\0';
}
- *_stop = strtoul(stop_buff, NULL, 16);
+ *_stop = parse_addr(stop_buff);
pclose(file_start);
pclose(file_stop);
--
2.47.0
4 months, 3 weeks
- 4
- 8
[PATCH v2] drm/v3d: Add job to pending list if the reset was skipped
by Maíra Canal
When a CL/CSD job times out, we check if the GPU has made any progress
since the last timeout. If so, instead of resetting the hardware, we skip
the reset and let the timer get rearmed. This gives long-running jobs a
chance to complete.
However, when `timedout_job()` is called, the job in question is removed
from the pending list, which means it won't be automatically freed through
`free_job()`. Consequently, when we skip the reset and keep the job
running, the job won't be freed when it finally completes.
This situation leads to a memory leak, as exposed in [1] and [2].
Similarly to commit 704d3d60fec4 ("drm/etnaviv: don't block scheduler when
GPU is still active"), this patch ensures the job is put back on the
pending list when extending the timeout.
Cc: stable(a)vger.kernel.org # 6.0
Reported-by: Daivik Bhatia <dtgs1208(a)gmail.com>
Closes: https://gitlab.freedesktop.org/mesa/mesa/-/issues/12227 [1]
Closes: https://github.com/raspberrypi/linux/issues/6817 [2]
Signed-off-by: Maíra Canal <mcanal(a)igalia.com>
Reviewed-by: Iago Toral Quiroga <itoral(a)igalia.com>
---
Hi,
While we typically strive to avoid exposing the scheduler's internals
within the drivers, I'm proposing this fix as an interim solution. I'm aware
that a comprehensive fix will need some adjustments on the DRM sched side,
and I plan to address that soon.
However, it would be hard to justify the backport of such patches to the
stable branches and this issue is affecting users in the moment.
Therefore, I'd like to push this patch to drm-misc-fixes in order to
address this leak as soon as possible, while working in a more generic
solution.
Best Regards,
- Maíra
v1 -> v2: https://lore.kernel.org/dri-devel/20250427202907.94415-2-mcanal@igalia.com/
- Protect the pending list by using its spinlock.
- Add the URL of another downstream issue related to this patch.
drivers/gpu/drm/v3d/v3d_sched.c | 28 +++++++++++++++++++++-------
1 file changed, 21 insertions(+), 7 deletions(-)
diff --git a/drivers/gpu/drm/v3d/v3d_sched.c b/drivers/gpu/drm/v3d/v3d_sched.c
index b3be08b0ca91..c612363181df 100644
--- a/drivers/gpu/drm/v3d/v3d_sched.c
+++ b/drivers/gpu/drm/v3d/v3d_sched.c
@@ -734,11 +734,16 @@ v3d_gpu_reset_for_timeout(struct v3d_dev *v3d, struct drm_sched_job *sched_job)
return DRM_GPU_SCHED_STAT_NOMINAL;
}
-/* If the current address or return address have changed, then the GPU
- * has probably made progress and we should delay the reset. This
- * could fail if the GPU got in an infinite loop in the CL, but that
- * is pretty unlikely outside of an i-g-t testcase.
- */
+static void
+v3d_sched_skip_reset(struct drm_sched_job *sched_job)
+{
+ struct drm_gpu_scheduler *sched = sched_job->sched;
+
+ spin_lock(&sched->job_list_lock);
+ list_add(&sched_job->list, &sched->pending_list);
+ spin_unlock(&sched->job_list_lock);
+}
+
static enum drm_gpu_sched_stat
v3d_cl_job_timedout(struct drm_sched_job *sched_job, enum v3d_queue q,
u32 *timedout_ctca, u32 *timedout_ctra)
@@ -748,9 +753,16 @@ v3d_cl_job_timedout(struct drm_sched_job *sched_job, enum v3d_queue q,
u32 ctca = V3D_CORE_READ(0, V3D_CLE_CTNCA(q));
u32 ctra = V3D_CORE_READ(0, V3D_CLE_CTNRA(q));
+ /* If the current address or return address have changed, then the GPU
+ * has probably made progress and we should delay the reset. This
+ * could fail if the GPU got in an infinite loop in the CL, but that
+ * is pretty unlikely outside of an i-g-t testcase.
+ */
if (*timedout_ctca != ctca || *timedout_ctra != ctra) {
*timedout_ctca = ctca;
*timedout_ctra = ctra;
+
+ v3d_sched_skip_reset(sched_job);
return DRM_GPU_SCHED_STAT_NOMINAL;
}
@@ -790,11 +802,13 @@ v3d_csd_job_timedout(struct drm_sched_job *sched_job)
struct v3d_dev *v3d = job->base.v3d;
u32 batches = V3D_CORE_READ(0, V3D_CSD_CURRENT_CFG4(v3d->ver));
- /* If we've made progress, skip reset and let the timer get
- * rearmed.
+ /* If we've made progress, skip reset, add the job to the pending
+ * list, and let the timer get rearmed.
*/
if (job->timedout_batches != batches) {
job->timedout_batches = batches;
+
+ v3d_sched_skip_reset(sched_job);
return DRM_GPU_SCHED_STAT_NOMINAL;
}
--
2.49.0
4 months, 3 weeks
- 2
- 2
[PATCH v3] x86/sev: Fix making shared pages private during kdump
by Ashish Kalra
From: Ashish Kalra <ashish.kalra(a)amd.com>
When the shared pages are being made private during kdump preparation
there are additional checks to handle shared GHCB pages.
These additional checks include handling the case of GHCB page being
contained within a huge page.
While handling the case of GHCB page contained within a huge page
any shared page just below the GHCB page gets skipped from being
transitioned back to private during kdump preparation.
This subsequently causes a 0x404 #VC exception when this skipped
shared page is accessed later while dumping guest memory during
vmcore generation via kdump.
Split the initial check for skipping the GHCB page into the page
being skipped fully containing the GHCB and GHCB being contained
within a huge page. Also ensure that the skipped huge page
containing the GHCB page is transitioned back to private later
when changing GHCBs to private at end of kdump preparation.
Reviewed-by: Tom Lendacky <thomas.lendacky(a)amd.com>
Cc: stable(a)vger.kernel.org
Fixes: 3074152e56c9 ("x86/sev: Convert shared memory back to private on kexec")
Signed-off-by: Ashish Kalra <ashish.kalra(a)amd.com>
---
arch/x86/coco/sev/core.c | 14 ++++++++++++--
1 file changed, 12 insertions(+), 2 deletions(-)
diff --git a/arch/x86/coco/sev/core.c b/arch/x86/coco/sev/core.c
index d35fec7b164a..1f53383bd1fa 100644
--- a/arch/x86/coco/sev/core.c
+++ b/arch/x86/coco/sev/core.c
@@ -1019,7 +1019,13 @@ static void unshare_all_memory(void)
data = per_cpu(runtime_data, cpu);
ghcb = (unsigned long)&data->ghcb_page;
- if (addr <= ghcb && ghcb <= addr + size) {
+ /* Handle the case of a huge page containing the GHCB page */
+ if (level == PG_LEVEL_4K && addr == ghcb) {
+ skipped_addr = true;
+ break;
+ }
+ if (level > PG_LEVEL_4K && addr <= ghcb &&
+ ghcb < addr + size) {
skipped_addr = true;
break;
}
@@ -1131,8 +1137,8 @@ static void shutdown_all_aps(void)
void snp_kexec_finish(void)
{
struct sev_es_runtime_data *data;
+ unsigned long size, mask;
unsigned int level, cpu;
- unsigned long size;
struct ghcb *ghcb;
pte_t *pte;
@@ -1160,6 +1166,10 @@ void snp_kexec_finish(void)
ghcb = &data->ghcb_page;
pte = lookup_address((unsigned long)ghcb, &level);
size = page_level_size(level);
+ mask = page_level_mask(level);
+ /* Handle the case of a huge page containing the GHCB page */
+ if (level > PG_LEVEL_4K)
+ ghcb = (struct ghcb *)((unsigned long)ghcb & mask);
set_pte_enc(pte, level, (void *)ghcb);
snp_set_memory_private((unsigned long)ghcb, (size / PAGE_SIZE));
}
--
2.34.1
4 months, 3 weeks
- 4
- 4
[tip: irq/urgent] irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs
by tip-bot2 for Stephan Gerhold
The following commit has been merged into the irq/urgent branch of tip:
Commit-ID: 38a05c0b87833f5b188ae43b428b1f792df2b384
Gitweb: https://git.kernel.org/tip/38a05c0b87833f5b188ae43b428b1f792df2b384
Author: Stephan Gerhold <stephan.gerhold(a)linaro.org>
AuthorDate: Fri, 02 May 2025 13:22:28 +02:00
Committer: Thomas Gleixner <tglx(a)linutronix.de>
CommitterDate: Fri, 02 May 2025 21:07:02 +02:00
irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs
On Qualcomm chipsets not all GPIOs are wakeup capable. Those GPIOs do not
have a corresponding MPM pin and should not be handled inside the MPM
driver. The IRQ domain hierarchy is always applied, so it's required to
explicitly disconnect the hierarchy for those. The pinctrl-msm driver marks
these with GPIO_NO_WAKE_IRQ. qcom-pdc has a check for this, but
irq-qcom-mpm is currently missing the check. This is causing crashes when
setting up interrupts for non-wake GPIOs:
root@rb1:~# gpiomon -c gpiochip1 10
irq: IRQ159: trimming hierarchy from :soc@0:interrupt-controller@f200000-1
Unable to handle kernel paging request at virtual address ffff8000a1dc3820
Hardware name: Qualcomm Technologies, Inc. Robotics RB1 (DT)
pc : mpm_set_type+0x80/0xcc
lr : mpm_set_type+0x5c/0xcc
Call trace:
mpm_set_type+0x80/0xcc (P)
qcom_mpm_set_type+0x64/0x158
irq_chip_set_type_parent+0x20/0x38
msm_gpio_irq_set_type+0x50/0x530
__irq_set_trigger+0x60/0x184
__setup_irq+0x304/0x6bc
request_threaded_irq+0xc8/0x19c
edge_detector_setup+0x260/0x364
linereq_create+0x420/0x5a8
gpio_ioctl+0x2d4/0x6c0
Fix this by copying the check for GPIO_NO_WAKE_IRQ from qcom-pdc.c, so that
MPM is removed entirely from the hierarchy for non-wake GPIOs.
Fixes: a6199bb514d8 ("irqchip: Add Qualcomm MPM controller driver")
Reported-by: Alexey Klimov <alexey.klimov(a)linaro.org>
Signed-off-by: Stephan Gerhold <stephan.gerhold(a)linaro.org>
Signed-off-by: Thomas Gleixner <tglx(a)linutronix.de>
Tested-by: Alexey Klimov <alexey.klimov(a)linaro.org>
Reviewed-by: Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org>
Cc: stable(a)vger.kernel.org
Link: https://lore.kernel.org/all/20250502-irq-qcom-mpm-fix-no-wake-v1-1-8a1eafcd…
---
drivers/irqchip/irq-qcom-mpm.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/drivers/irqchip/irq-qcom-mpm.c b/drivers/irqchip/irq-qcom-mpm.c
index 7942d8e..f772deb 100644
--- a/drivers/irqchip/irq-qcom-mpm.c
+++ b/drivers/irqchip/irq-qcom-mpm.c
@@ -227,6 +227,9 @@ static int qcom_mpm_alloc(struct irq_domain *domain, unsigned int virq,
if (ret)
return ret;
+ if (pin == GPIO_NO_WAKE_IRQ)
+ return irq_domain_disconnect_hierarchy(domain, virq);
+
ret = irq_domain_set_hwirq_and_chip(domain, virq, pin,
&qcom_mpm_chip, priv);
if (ret)
4 months, 3 weeks
- 1
- 0
[PATCH 5/5] rust: clean Rust 1.88.0's `clippy::uninlined_format_args` lint
by Miguel Ojeda
Starting with Rust 1.88.0 (expected 2025-06-26) [1], `rustc` may move
back the `uninlined_format_args` to `style` from `pedantic` (it was
there waiting for rust-analyzer suppotr), and thus we will start to see
lints like:
warning: variables can be used directly in the `format!` string
--> rust/macros/kunit.rs:105:37
|
105 | let kunit_wrapper_fn_name = format!("kunit_rust_wrapper_{}", test);
| ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|
= help: for further information visit https://rust-lang.github.io/rust-clippy/master/index.html#uninlined_format_…
help: change this to
|
105 - let kunit_wrapper_fn_name = format!("kunit_rust_wrapper_{}", test);
105 + let kunit_wrapper_fn_name = format!("kunit_rust_wrapper_{test}");
There is even a case that is a pure removal:
warning: variables can be used directly in the `format!` string
--> rust/macros/module.rs:51:13
|
51 | format!("{field}={content}\0", field = field, content = content)
| ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|
= help: for further information visit https://rust-lang.github.io/rust-clippy/master/index.html#uninlined_format_…
help: change this to
|
51 - format!("{field}={content}\0", field = field, content = content)
51 + format!("{field}={content}\0")
The lints all seem like nice cleanups, thus just apply them.
We may want to disable `allow-mixed-uninlined-format-args` in the future.
Cc: stable(a)vger.kernel.org # Needed in 6.12.y and later (Rust is pinned in older LTSs).
Cc: Benno Lossin <benno.lossin(a)proton.me>
Link: https://github.com/rust-lang/rust-clippy/pull/14160 [1]
Signed-off-by: Miguel Ojeda <ojeda(a)kernel.org>
---
drivers/gpu/nova-core/gpu.rs | 2 +-
rust/kernel/str.rs | 46 +++++++++++------------
rust/macros/kunit.rs | 13 ++-----
rust/macros/module.rs | 19 +++-------
rust/macros/paste.rs | 2 +-
rust/pin-init/internal/src/pinned_drop.rs | 3 +-
6 files changed, 35 insertions(+), 50 deletions(-)
diff --git a/drivers/gpu/nova-core/gpu.rs b/drivers/gpu/nova-core/gpu.rs
index 17c9660da450..ab0e5a72a059 100644
--- a/drivers/gpu/nova-core/gpu.rs
+++ b/drivers/gpu/nova-core/gpu.rs
@@ -93,7 +93,7 @@ pub(crate) fn arch(&self) -> Architecture {
// For now, redirect to fmt::Debug for convenience.
impl fmt::Display for Chipset {
fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
- write!(f, "{:?}", self)
+ write!(f, "{self:?}")
}
}
diff --git a/rust/kernel/str.rs b/rust/kernel/str.rs
index 878111cb77bc..fb61ce81ea28 100644
--- a/rust/kernel/str.rs
+++ b/rust/kernel/str.rs
@@ -73,7 +73,7 @@ fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
b'\r' => f.write_str("\\r")?,
// Printable characters.
0x20..=0x7e => f.write_char(b as char)?,
- _ => write!(f, "\\x{:02x}", b)?,
+ _ => write!(f, "\\x{b:02x}")?,
}
}
Ok(())
@@ -109,7 +109,7 @@ fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
b'\\' => f.write_str("\\\\")?,
// Printable characters.
0x20..=0x7e => f.write_char(b as char)?,
- _ => write!(f, "\\x{:02x}", b)?,
+ _ => write!(f, "\\x{b:02x}")?,
}
}
f.write_char('"')
@@ -447,7 +447,7 @@ fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
// Printable character.
f.write_char(c as char)?;
} else {
- write!(f, "\\x{:02x}", c)?;
+ write!(f, "\\x{c:02x}")?;
}
}
Ok(())
@@ -479,7 +479,7 @@ fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
// Printable characters.
b'\"' => f.write_str("\\\"")?,
0x20..=0x7e => f.write_char(c as char)?,
- _ => write!(f, "\\x{:02x}", c)?,
+ _ => write!(f, "\\x{c:02x}")?,
}
}
f.write_str("\"")
@@ -641,13 +641,13 @@ fn test_cstr_as_str_unchecked() {
#[test]
fn test_cstr_display() {
let hello_world = CStr::from_bytes_with_nul(b"hello, world!\0").unwrap();
- assert_eq!(format!("{}", hello_world), "hello, world!");
+ assert_eq!(format!("{hello_world}"), "hello, world!");
let non_printables = CStr::from_bytes_with_nul(b"\x01\x09\x0a\0").unwrap();
- assert_eq!(format!("{}", non_printables), "\\x01\\x09\\x0a");
+ assert_eq!(format!("{non_printables}"), "\\x01\\x09\\x0a");
let non_ascii = CStr::from_bytes_with_nul(b"d\xe9j\xe0 vu\0").unwrap();
- assert_eq!(format!("{}", non_ascii), "d\\xe9j\\xe0 vu");
+ assert_eq!(format!("{non_ascii}"), "d\\xe9j\\xe0 vu");
let good_bytes = CStr::from_bytes_with_nul(b"\xf0\x9f\xa6\x80\0").unwrap();
- assert_eq!(format!("{}", good_bytes), "\\xf0\\x9f\\xa6\\x80");
+ assert_eq!(format!("{good_bytes}"), "\\xf0\\x9f\\xa6\\x80");
}
#[test]
@@ -658,47 +658,47 @@ fn test_cstr_display_all_bytes() {
bytes[i as usize] = i.wrapping_add(1);
}
let cstr = CStr::from_bytes_with_nul(&bytes).unwrap();
- assert_eq!(format!("{}", cstr), ALL_ASCII_CHARS);
+ assert_eq!(format!("{cstr}"), ALL_ASCII_CHARS);
}
#[test]
fn test_cstr_debug() {
let hello_world = CStr::from_bytes_with_nul(b"hello, world!\0").unwrap();
- assert_eq!(format!("{:?}", hello_world), "\"hello, world!\"");
+ assert_eq!(format!("{hello_world:?}"), "\"hello, world!\"");
let non_printables = CStr::from_bytes_with_nul(b"\x01\x09\x0a\0").unwrap();
- assert_eq!(format!("{:?}", non_printables), "\"\\x01\\x09\\x0a\"");
+ assert_eq!(format!("{non_printables:?}"), "\"\\x01\\x09\\x0a\"");
let non_ascii = CStr::from_bytes_with_nul(b"d\xe9j\xe0 vu\0").unwrap();
- assert_eq!(format!("{:?}", non_ascii), "\"d\\xe9j\\xe0 vu\"");
+ assert_eq!(format!("{non_ascii:?}"), "\"d\\xe9j\\xe0 vu\"");
let good_bytes = CStr::from_bytes_with_nul(b"\xf0\x9f\xa6\x80\0").unwrap();
- assert_eq!(format!("{:?}", good_bytes), "\"\\xf0\\x9f\\xa6\\x80\"");
+ assert_eq!(format!("{good_bytes:?}"), "\"\\xf0\\x9f\\xa6\\x80\"");
}
#[test]
fn test_bstr_display() {
let hello_world = BStr::from_bytes(b"hello, world!");
- assert_eq!(format!("{}", hello_world), "hello, world!");
+ assert_eq!(format!("{hello_world}"), "hello, world!");
let escapes = BStr::from_bytes(b"_\t_\n_\r_\\_\'_\"_");
- assert_eq!(format!("{}", escapes), "_\\t_\\n_\\r_\\_'_\"_");
+ assert_eq!(format!("{escapes}"), "_\\t_\\n_\\r_\\_'_\"_");
let others = BStr::from_bytes(b"\x01");
- assert_eq!(format!("{}", others), "\\x01");
+ assert_eq!(format!("{others}"), "\\x01");
let non_ascii = BStr::from_bytes(b"d\xe9j\xe0 vu");
- assert_eq!(format!("{}", non_ascii), "d\\xe9j\\xe0 vu");
+ assert_eq!(format!("{non_ascii}"), "d\\xe9j\\xe0 vu");
let good_bytes = BStr::from_bytes(b"\xf0\x9f\xa6\x80");
- assert_eq!(format!("{}", good_bytes), "\\xf0\\x9f\\xa6\\x80");
+ assert_eq!(format!("{good_bytes}"), "\\xf0\\x9f\\xa6\\x80");
}
#[test]
fn test_bstr_debug() {
let hello_world = BStr::from_bytes(b"hello, world!");
- assert_eq!(format!("{:?}", hello_world), "\"hello, world!\"");
+ assert_eq!(format!("{hello_world:?}"), "\"hello, world!\"");
let escapes = BStr::from_bytes(b"_\t_\n_\r_\\_\'_\"_");
- assert_eq!(format!("{:?}", escapes), "\"_\\t_\\n_\\r_\\\\_'_\\\"_\"");
+ assert_eq!(format!("{escapes:?}"), "\"_\\t_\\n_\\r_\\\\_'_\\\"_\"");
let others = BStr::from_bytes(b"\x01");
- assert_eq!(format!("{:?}", others), "\"\\x01\"");
+ assert_eq!(format!("{others:?}"), "\"\\x01\"");
let non_ascii = BStr::from_bytes(b"d\xe9j\xe0 vu");
- assert_eq!(format!("{:?}", non_ascii), "\"d\\xe9j\\xe0 vu\"");
+ assert_eq!(format!("{non_ascii:?}"), "\"d\\xe9j\\xe0 vu\"");
let good_bytes = BStr::from_bytes(b"\xf0\x9f\xa6\x80");
- assert_eq!(format!("{:?}", good_bytes), "\"\\xf0\\x9f\\xa6\\x80\"");
+ assert_eq!(format!("{good_bytes:?}"), "\"\\xf0\\x9f\\xa6\\x80\"");
}
}
diff --git a/rust/macros/kunit.rs b/rust/macros/kunit.rs
index 4f553ecf40c0..99ccac82edde 100644
--- a/rust/macros/kunit.rs
+++ b/rust/macros/kunit.rs
@@ -15,10 +15,7 @@ pub(crate) fn kunit_tests(attr: TokenStream, ts: TokenStream) -> TokenStream {
}
if attr.len() > 255 {
- panic!(
- "The test suite name `{}` exceeds the maximum length of 255 bytes",
- attr
- )
+ panic!("The test suite name `{attr}` exceeds the maximum length of 255 bytes")
}
let mut tokens: Vec<_> = ts.into_iter().collect();
@@ -102,16 +99,14 @@ pub(crate) fn kunit_tests(attr: TokenStream, ts: TokenStream) -> TokenStream {
let mut kunit_macros = "".to_owned();
let mut test_cases = "".to_owned();
for test in &tests {
- let kunit_wrapper_fn_name = format!("kunit_rust_wrapper_{}", test);
+ let kunit_wrapper_fn_name = format!("kunit_rust_wrapper_{test}");
let kunit_wrapper = format!(
- "unsafe extern \"C\" fn {}(_test: *mut kernel::bindings::kunit) {{ {}(); }}",
- kunit_wrapper_fn_name, test
+ "unsafe extern \"C\" fn {kunit_wrapper_fn_name}(_test: *mut kernel::bindings::kunit) {{ {test}(); }}"
);
writeln!(kunit_macros, "{kunit_wrapper}").unwrap();
writeln!(
test_cases,
- " kernel::kunit::kunit_case(kernel::c_str!(\"{}\"), {}),",
- test, kunit_wrapper_fn_name
+ " kernel::kunit::kunit_case(kernel::c_str!(\"{test}\"), {kunit_wrapper_fn_name}),"
)
.unwrap();
}
diff --git a/rust/macros/module.rs b/rust/macros/module.rs
index a9418fbc9b44..2f66107847f7 100644
--- a/rust/macros/module.rs
+++ b/rust/macros/module.rs
@@ -48,7 +48,7 @@ fn emit_base(&mut self, field: &str, content: &str, builtin: bool) {
)
} else {
// Loadable modules' modinfo strings go as-is.
- format!("{field}={content}\0", field = field, content = content)
+ format!("{field}={content}\0")
};
write!(
@@ -126,10 +126,7 @@ fn parse(it: &mut token_stream::IntoIter) -> Self {
};
if seen_keys.contains(&key) {
- panic!(
- "Duplicated key \"{}\". Keys can only be specified once.",
- key
- );
+ panic!("Duplicated key \"{key}\". Keys can only be specified once.");
}
assert_eq!(expect_punct(it), ':');
@@ -143,10 +140,7 @@ fn parse(it: &mut token_stream::IntoIter) -> Self {
"license" => info.license = expect_string_ascii(it),
"alias" => info.alias = Some(expect_string_array(it)),
"firmware" => info.firmware = Some(expect_string_array(it)),
- _ => panic!(
- "Unknown key \"{}\". Valid keys are: {:?}.",
- key, EXPECTED_KEYS
- ),
+ _ => panic!("Unknown key \"{key}\". Valid keys are: {EXPECTED_KEYS:?}."),
}
assert_eq!(expect_punct(it), ',');
@@ -158,7 +152,7 @@ fn parse(it: &mut token_stream::IntoIter) -> Self {
for key in REQUIRED_KEYS {
if !seen_keys.iter().any(|e| e == key) {
- panic!("Missing required key \"{}\".", key);
+ panic!("Missing required key \"{key}\".");
}
}
@@ -170,10 +164,7 @@ fn parse(it: &mut token_stream::IntoIter) -> Self {
}
if seen_keys != ordered_keys {
- panic!(
- "Keys are not ordered as expected. Order them like: {:?}.",
- ordered_keys
- );
+ panic!("Keys are not ordered as expected. Order them like: {ordered_keys:?}.");
}
info
diff --git a/rust/macros/paste.rs b/rust/macros/paste.rs
index 6529a387673f..cce712d19855 100644
--- a/rust/macros/paste.rs
+++ b/rust/macros/paste.rs
@@ -50,7 +50,7 @@ fn concat_helper(tokens: &[TokenTree]) -> Vec<(String, Span)> {
let tokens = group.stream().into_iter().collect::<Vec<TokenTree>>();
segments.append(&mut concat_helper(tokens.as_slice()));
}
- token => panic!("unexpected token in paste segments: {:?}", token),
+ token => panic!("unexpected token in paste segments: {token:?}"),
};
}
diff --git a/rust/pin-init/internal/src/pinned_drop.rs b/rust/pin-init/internal/src/pinned_drop.rs
index c824dd8b436d..c4ca7a70b726 100644
--- a/rust/pin-init/internal/src/pinned_drop.rs
+++ b/rust/pin-init/internal/src/pinned_drop.rs
@@ -28,8 +28,7 @@ pub(crate) fn pinned_drop(_args: TokenStream, input: TokenStream) -> TokenStream
// Found the end of the generics, this should be `PinnedDrop`.
assert!(
matches!(tt, TokenTree::Ident(i) if i.to_string() == "PinnedDrop"),
- "expected 'PinnedDrop', found: '{:?}'",
- tt
+ "expected 'PinnedDrop', found: '{tt:?}'"
);
pinned_drop_idx = Some(i);
break;
--
2.49.0
4 months, 3 weeks
- 3
- 2
Branch Tech Users and Customers
by brielle.hayes＠softwareuserzone.info
Hi there,
Are you looking for a high-quality, global opt-in user list for Branch and
other top mobile analytics platforms?
We have fresh, permission-based data available for the following platforms:
* Adjust
* Mixpanel
* AppsFlyer
* CleverTap
* Amplitude Analytics
* Braze
* Singular
* Tenjin & many more...!
Would you be interested in learning more or receiving a sample?
Best regards,
Brielle Hayes | Marketing Executive
Please response with "skip" if not required.
4 months, 3 weeks
- 1
- 0
[for-linus][PATCH 4/4] tracing: Do not take trace_event_sem in print_event_fields()
by Steven Rostedt
From: Steven Rostedt <rostedt(a)goodmis.org>
On some paths in print_event_fields() it takes the trace_event_sem for
read, even though it should always be held when the function is called.
Remove the taking of that mutex and add a lockdep_assert_held_read() to
make sure the trace_event_sem is held when print_event_fields() is called.
Cc: stable(a)vger.kernel.org
Cc: Masami Hiramatsu <mhiramat(a)kernel.org>
Cc: Mathieu Desnoyers <mathieu.desnoyers(a)efficios.com>
Link: https://lore.kernel.org/20250501224128.0b1f0571@batman.local.home
Fixes: 80a76994b2d88 ("tracing: Add "fields" option to show raw trace event fields")
Reported-by: syzbot+441582c1592938fccf09(a)syzkaller.appspotmail.com
Closes: https://lore.kernel.org/all/6813ff5e.050a0220.14dd7d.001b.GAE@google.com/
Signed-off-by: Steven Rostedt (Google) <rostedt(a)goodmis.org>
---
kernel/trace/trace_output.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/kernel/trace/trace_output.c b/kernel/trace/trace_output.c
index fee40ffbd490..b9ab06c99543 100644
--- a/kernel/trace/trace_output.c
+++ b/kernel/trace/trace_output.c
@@ -1042,11 +1042,12 @@ enum print_line_t print_event_fields(struct trace_iterator *iter,
struct trace_event_call *call;
struct list_head *head;
+ lockdep_assert_held_read(&trace_event_sem);
+
/* ftrace defined events have separate call structures */
if (event->type <= __TRACE_LAST_TYPE) {
bool found = false;
- down_read(&trace_event_sem);
list_for_each_entry(call, &ftrace_events, list) {
if (call->event.type == event->type) {
found = true;
@@ -1056,7 +1057,6 @@ enum print_line_t print_event_fields(struct trace_iterator *iter,
if (call->event.type > __TRACE_LAST_TYPE)
break;
}
- up_read(&trace_event_sem);
if (!found) {
trace_seq_printf(&iter->seq, "UNKNOWN TYPE %d\n", event->type);
goto out;
--
2.47.2
4 months, 3 weeks
- 1
- 0
[PATCH 4/5] rust: clean Rust 1.88.0's warning about `clippy::disallowed_macros` configuration
by Miguel Ojeda
Starting with Rust 1.88.0 (expected 2025-06-26) [1], Clippy may start
warning about paths that do not resolve in the `disallowed_macros`
configuration:
warning: `kernel::dbg` does not refer to an existing macro
--> .clippy.toml:10:5
|
10 | { path = "kernel::dbg", reason = "the `dbg!` macro is intended as a debugging tool" },
| ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
This is a lint we requested at [2], due to the trouble debugging
the lint due to false negatives (e.g. [3]), which we use to emulate
`clippy::dbg_macro` [4]. See commit 8577c9dca799 ("rust: replace
`clippy::dbg_macro` with `disallowed_macros`") for more details.
Given the false negatives are not resolved yet, it is expected that
Clippy complains about not finding this macro.
Thus, until the false negatives are fixed (and, even then, probably we
will need to wait for the MSRV to raise enough), use the escape hatch
to allow an invalid path.
Cc: stable(a)vger.kernel.org # Needed in 6.12.y and later (Rust is pinned in older LTSs).
Link: https://github.com/rust-lang/rust-clippy/pull/14397 [1]
Link: https://github.com/rust-lang/rust-clippy/issues/11432 [2]
Link: https://github.com/rust-lang/rust-clippy/issues/11431 [3]
Link: https://github.com/rust-lang/rust-clippy/issues/11303 [4]
Signed-off-by: Miguel Ojeda <ojeda(a)kernel.org>
---
.clippy.toml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.clippy.toml b/.clippy.toml
index 815c94732ed7..137f41d203de 100644
--- a/.clippy.toml
+++ b/.clippy.toml
@@ -7,5 +7,5 @@ check-private-items = true
disallowed-macros = [
# The `clippy::dbg_macro` lint only works with `std::dbg!`, thus we simulate
# it here, see: https://github.com/rust-lang/rust-clippy/issues/11303.
- { path = "kernel::dbg", reason = "the `dbg!` macro is intended as a debugging tool" },
+ { path = "kernel::dbg", reason = "the `dbg!` macro is intended as a debugging tool", allow-invalid = true },
]
--
2.49.0
4 months, 3 weeks
- 1
- 0
[PATCH 3/5] rust: clean Rust 1.88.0's `unnecessary_transmutes` lint
by Miguel Ojeda
Starting with Rust 1.88.0 (expected 2025-06-26) [1][2], `rustc` may
introduce a new lint that catches unnecessary transmutes, e.g.:
error: unnecessary transmute
--> rust/uapi/uapi_generated.rs:23242:18
|
23242 | unsafe { ::core::mem::transmute(self._bitfield_1.get(0usize, 1u8) as u8) }
| ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ help: replace this with: `(self._bitfield_1.get(0usize, 1u8) as u8 == 1)`
|
= note: `-D unnecessary-transmutes` implied by `-D warnings`
= help: to override `-D warnings` add `#[allow(unnecessary_transmutes)]`
There are a lot of them (at least 300), but luckily they are all in
`bindgen`-generated code.
Thus clean all up by allowing it there.
Since unknown lints trigger a lint itself in older compilers, do it
conditionally so that we can keep the `unknown_lints` lint enabled.
Cc: stable(a)vger.kernel.org # Needed in 6.12.y and later (Rust is pinned in older LTSs).
Link: https://github.com/rust-lang/rust/pull/136083 [1]
Link: https://github.com/rust-lang/rust/issues/136067 [2]
Signed-off-by: Miguel Ojeda <ojeda(a)kernel.org>
---
init/Kconfig | 3 +++
rust/bindings/lib.rs | 1 +
rust/uapi/lib.rs | 1 +
3 files changed, 5 insertions(+)
diff --git a/init/Kconfig b/init/Kconfig
index 63f5974b9fa6..4cdd1049283c 100644
--- a/init/Kconfig
+++ b/init/Kconfig
@@ -140,6 +140,9 @@ config LD_CAN_USE_KEEP_IN_OVERLAY
config RUSTC_HAS_COERCE_POINTEE
def_bool RUSTC_VERSION >= 108400
+config RUSTC_HAS_UNNECESSARY_TRANSMUTES
+ def_bool RUSTC_VERSION >= 108800
+
config PAHOLE_VERSION
int
default $(shell,$(srctree)/scripts/pahole-version.sh $(PAHOLE))
diff --git a/rust/bindings/lib.rs b/rust/bindings/lib.rs
index 014af0d1fc70..a08eb5518cac 100644
--- a/rust/bindings/lib.rs
+++ b/rust/bindings/lib.rs
@@ -26,6 +26,7 @@
#[allow(dead_code)]
#[allow(clippy::undocumented_unsafe_blocks)]
+#[cfg_attr(CONFIG_RUSTC_HAS_UNNECESSARY_TRANSMUTES, allow(unnecessary_transmutes))]
mod bindings_raw {
// Manual definition for blocklisted types.
type __kernel_size_t = usize;
diff --git a/rust/uapi/lib.rs b/rust/uapi/lib.rs
index 13495910271f..c98d7a8cde77 100644
--- a/rust/uapi/lib.rs
+++ b/rust/uapi/lib.rs
@@ -24,6 +24,7 @@
unreachable_pub,
unsafe_op_in_unsafe_fn
)]
+#![cfg_attr(CONFIG_RUSTC_HAS_UNNECESSARY_TRANSMUTES, allow(unnecessary_transmutes))]
// Manual definition of blocklisted types.
type __kernel_size_t = usize;
--
2.49.0
4 months, 3 weeks
- 1
- 0
[PATCH v4] x86/sev: Don't touch VMSA pages during kdump of SNP guest memory
by Ashish Kalra
From: Ashish Kalra <ashish.kalra(a)amd.com>
When kdump is running makedumpfile to generate vmcore and dumping SNP
guest memory it touches the VMSA page of the vCPU executing kdump which
then results in unrecoverable #NPF/RMP faults as the VMSA page is
marked busy/in-use when the vCPU is running and subsequently causes
guest softlockup/hang.
Additionally other APs may be halted in guest mode and their VMSA pages
are marked busy and touching these VMSA pages during guest memory dump
will also cause #NPF.
Issue AP_DESTROY GHCB calls on other APs to ensure they are kicked out
of guest mode and then clear the VMSA bit on their VMSA pages.
If the vCPU running kdump is an AP, mark it's VMSA page as offline to
ensure that makedumpfile excludes that page while dumping guest memory.
Reviewed-by: Tom Lendacky <thomas.lendacky(a)amd.com>
Reviewed-by: Pankaj Gupta <pankaj.gupta(a)amd.com>
Cc: stable(a)vger.kernel.org
Fixes: 3074152e56c9 ("x86/sev: Convert shared memory back to private on kexec")
Signed-off-by: Ashish Kalra <ashish.kalra(a)amd.com>
---
arch/x86/coco/sev/core.c | 244 +++++++++++++++++++++++++--------------
1 file changed, 158 insertions(+), 86 deletions(-)
diff --git a/arch/x86/coco/sev/core.c b/arch/x86/coco/sev/core.c
index dcfaa698d6cf..d35fec7b164a 100644
--- a/arch/x86/coco/sev/core.c
+++ b/arch/x86/coco/sev/core.c
@@ -877,6 +877,102 @@ void snp_accept_memory(phys_addr_t start, phys_addr_t end)
set_pages_state(vaddr, npages, SNP_PAGE_STATE_PRIVATE);
}
+static int vmgexit_ap_control(u64 event, struct sev_es_save_area *vmsa, u32 apic_id)
+{
+ bool create = event == SVM_VMGEXIT_AP_CREATE;
+ struct ghcb_state state;
+ unsigned long flags;
+ struct ghcb *ghcb;
+ int ret = 0;
+
+ local_irq_save(flags);
+
+ ghcb = __sev_get_ghcb(&state);
+
+ vc_ghcb_invalidate(ghcb);
+
+ if (create)
+ ghcb_set_rax(ghcb, vmsa->sev_features);
+
+ ghcb_set_sw_exit_code(ghcb, SVM_VMGEXIT_AP_CREATION);
+ ghcb_set_sw_exit_info_1(ghcb,
+ ((u64)apic_id << 32) |
+ ((u64)snp_vmpl << 16) |
+ event);
+ ghcb_set_sw_exit_info_2(ghcb, __pa(vmsa));
+
+ sev_es_wr_ghcb_msr(__pa(ghcb));
+ VMGEXIT();
+
+ if (!ghcb_sw_exit_info_1_is_valid(ghcb) ||
+ lower_32_bits(ghcb->save.sw_exit_info_1)) {
+ pr_err("SNP AP %s error\n", (create ? "CREATE" : "DESTROY"));
+ ret = -EINVAL;
+ }
+
+ __sev_put_ghcb(&state);
+
+ local_irq_restore(flags);
+
+ return ret;
+}
+
+static int snp_set_vmsa(void *va, void *caa, int apic_id, bool make_vmsa)
+{
+ int ret;
+
+ if (snp_vmpl) {
+ struct svsm_call call = {};
+ unsigned long flags;
+
+ local_irq_save(flags);
+
+ call.caa = this_cpu_read(svsm_caa);
+ call.rcx = __pa(va);
+
+ if (make_vmsa) {
+ /* Protocol 0, Call ID 2 */
+ call.rax = SVSM_CORE_CALL(SVSM_CORE_CREATE_VCPU);
+ call.rdx = __pa(caa);
+ call.r8 = apic_id;
+ } else {
+ /* Protocol 0, Call ID 3 */
+ call.rax = SVSM_CORE_CALL(SVSM_CORE_DELETE_VCPU);
+ }
+
+ ret = svsm_perform_call_protocol(&call);
+
+ local_irq_restore(flags);
+ } else {
+ /*
+ * If the kernel runs at VMPL0, it can change the VMSA
+ * bit for a page using the RMPADJUST instruction.
+ * However, for the instruction to succeed it must
+ * target the permissions of a lesser privileged (higher
+ * numbered) VMPL level, so use VMPL1.
+ */
+ u64 attrs = 1;
+
+ if (make_vmsa)
+ attrs |= RMPADJUST_VMSA_PAGE_BIT;
+
+ ret = rmpadjust((unsigned long)va, RMP_PG_SIZE_4K, attrs);
+ }
+
+ return ret;
+}
+
+static void snp_cleanup_vmsa(struct sev_es_save_area *vmsa, int apic_id)
+{
+ int err;
+
+ err = snp_set_vmsa(vmsa, NULL, apic_id, false);
+ if (err)
+ pr_err("clear VMSA page failed (%u), leaking page\n", err);
+ else
+ free_page((unsigned long)vmsa);
+}
+
static void set_pte_enc(pte_t *kpte, int level, void *va)
{
struct pte_enc_desc d = {
@@ -973,6 +1069,65 @@ void snp_kexec_begin(void)
pr_warn("Failed to stop shared<->private conversions\n");
}
+/*
+ * Shutdown all APs except the one handling kexec/kdump and clearing
+ * the VMSA tag on AP's VMSA pages as they are not being used as
+ * VMSA page anymore.
+ */
+static void shutdown_all_aps(void)
+{
+ struct sev_es_save_area *vmsa;
+ int apic_id, this_cpu, cpu;
+
+ this_cpu = get_cpu();
+
+ /*
+ * APs are already in HLT loop when enc_kexec_finish() callback
+ * is invoked.
+ */
+ for_each_present_cpu(cpu) {
+ vmsa = per_cpu(sev_vmsa, cpu);
+
+ /*
+ * The BSP or offlined APs do not have guest allocated VMSA
+ * and there is no need to clear the VMSA tag for this page.
+ */
+ if (!vmsa)
+ continue;
+
+ /*
+ * Cannot clear the VMSA tag for the currently running vCPU.
+ */
+ if (this_cpu == cpu) {
+ unsigned long pa;
+ struct page *p;
+
+ pa = __pa(vmsa);
+ /*
+ * Mark the VMSA page of the running vCPU as offline
+ * so that is excluded and not touched by makedumpfile
+ * while generating vmcore during kdump.
+ */
+ p = pfn_to_online_page(pa >> PAGE_SHIFT);
+ if (p)
+ __SetPageOffline(p);
+ continue;
+ }
+
+ apic_id = cpuid_to_apicid[cpu];
+
+ /*
+ * Issue AP destroy to ensure AP gets kicked out of guest mode
+ * to allow using RMPADJUST to remove the VMSA tag on it's
+ * VMSA page.
+ */
+ vmgexit_ap_control(SVM_VMGEXIT_AP_DESTROY, vmsa, apic_id);
+ snp_cleanup_vmsa(vmsa, apic_id);
+ }
+
+ put_cpu();
+}
+
void snp_kexec_finish(void)
{
struct sev_es_runtime_data *data;
@@ -987,6 +1142,8 @@ void snp_kexec_finish(void)
if (!IS_ENABLED(CONFIG_KEXEC_CORE))
return;
+ shutdown_all_aps();
+
unshare_all_memory();
/*
@@ -1008,51 +1165,6 @@ void snp_kexec_finish(void)
}
}
-static int snp_set_vmsa(void *va, void *caa, int apic_id, bool make_vmsa)
-{
- int ret;
-
- if (snp_vmpl) {
- struct svsm_call call = {};
- unsigned long flags;
-
- local_irq_save(flags);
-
- call.caa = this_cpu_read(svsm_caa);
- call.rcx = __pa(va);
-
- if (make_vmsa) {
- /* Protocol 0, Call ID 2 */
- call.rax = SVSM_CORE_CALL(SVSM_CORE_CREATE_VCPU);
- call.rdx = __pa(caa);
- call.r8 = apic_id;
- } else {
- /* Protocol 0, Call ID 3 */
- call.rax = SVSM_CORE_CALL(SVSM_CORE_DELETE_VCPU);
- }
-
- ret = svsm_perform_call_protocol(&call);
-
- local_irq_restore(flags);
- } else {
- /*
- * If the kernel runs at VMPL0, it can change the VMSA
- * bit for a page using the RMPADJUST instruction.
- * However, for the instruction to succeed it must
- * target the permissions of a lesser privileged (higher
- * numbered) VMPL level, so use VMPL1.
- */
- u64 attrs = 1;
-
- if (make_vmsa)
- attrs |= RMPADJUST_VMSA_PAGE_BIT;
-
- ret = rmpadjust((unsigned long)va, RMP_PG_SIZE_4K, attrs);
- }
-
- return ret;
-}
-
#define __ATTR_BASE (SVM_SELECTOR_P_MASK | SVM_SELECTOR_S_MASK)
#define INIT_CS_ATTRIBS (__ATTR_BASE | SVM_SELECTOR_READ_MASK | SVM_SELECTOR_CODE_MASK)
#define INIT_DS_ATTRIBS (__ATTR_BASE | SVM_SELECTOR_WRITE_MASK)
@@ -1084,24 +1196,10 @@ static void *snp_alloc_vmsa_page(int cpu)
return page_address(p + 1);
}
-static void snp_cleanup_vmsa(struct sev_es_save_area *vmsa, int apic_id)
-{
- int err;
-
- err = snp_set_vmsa(vmsa, NULL, apic_id, false);
- if (err)
- pr_err("clear VMSA page failed (%u), leaking page\n", err);
- else
- free_page((unsigned long)vmsa);
-}
-
static int wakeup_cpu_via_vmgexit(u32 apic_id, unsigned long start_ip)
{
struct sev_es_save_area *cur_vmsa, *vmsa;
- struct ghcb_state state;
struct svsm_ca *caa;
- unsigned long flags;
- struct ghcb *ghcb;
u8 sipi_vector;
int cpu, ret;
u64 cr4;
@@ -1215,33 +1313,7 @@ static int wakeup_cpu_via_vmgexit(u32 apic_id, unsigned long start_ip)
}
/* Issue VMGEXIT AP Creation NAE event */
- local_irq_save(flags);
-
- ghcb = __sev_get_ghcb(&state);
-
- vc_ghcb_invalidate(ghcb);
- ghcb_set_rax(ghcb, vmsa->sev_features);
- ghcb_set_sw_exit_code(ghcb, SVM_VMGEXIT_AP_CREATION);
- ghcb_set_sw_exit_info_1(ghcb,
- ((u64)apic_id << 32) |
- ((u64)snp_vmpl << 16) |
- SVM_VMGEXIT_AP_CREATE);
- ghcb_set_sw_exit_info_2(ghcb, __pa(vmsa));
-
- sev_es_wr_ghcb_msr(__pa(ghcb));
- VMGEXIT();
-
- if (!ghcb_sw_exit_info_1_is_valid(ghcb) ||
- lower_32_bits(ghcb->save.sw_exit_info_1)) {
- pr_err("SNP AP Creation error\n");
- ret = -EINVAL;
- }
-
- __sev_put_ghcb(&state);
-
- local_irq_restore(flags);
-
- /* Perform cleanup if there was an error */
+ ret = vmgexit_ap_control(SVM_VMGEXIT_AP_CREATE, vmsa, apic_id);
if (ret) {
snp_cleanup_vmsa(vmsa, apic_id);
vmsa = NULL;
--
2.34.1
4 months, 3 weeks
- 3
- 2
[PATCH 5.15 000/368] 5.15.181-rc2 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 5.15.181 release.
There are 368 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sat, 03 May 2025 08:13:53 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.181-r…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 5.15.181-rc2
Ross Lagerwall <ross.lagerwall(a)citrix.com>
PCI: Release resource invalidated by coalescing
Geert Uytterhoeven <geert+renesas(a)glider.be>
PCI: Fix dropping valid root bus resources with .end = zero
Rob Herring <robh(a)kernel.org>
PCI: Fix use-after-free in pci_bus_release_domain_nr()
Hannes Reinecke <hare(a)kernel.org>
nvme: fixup scan failure for non-ANA multipath controllers
Thomas Bogendoerfer <tsbogend(a)alpha.franken.de>
MIPS: cm: Fix warning if MIPS_CM is disabled
Sebastian Andrzej Siewior <bigeasy(a)linutronix.de>
xdp: Reset bpf_redirect_info before running a xdp's BPF prog.
Tim Huang <tim.huang(a)amd.com>
drm/amd/display: fix double free issue during amdgpu module unload
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: enable PVT for 6321 switch
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
Marek Behún <kabel(a)kernel.org>
crypto: atmel-sha204a - Set hwrng quality to lowest possible
Ian Abbott <abbotti(a)mev.co.uk>
comedi: jr3_pci: Fix synchronous deletion of timer
Dave Kleikamp <dave.kleikamp(a)oracle.com>
jfs: define xtree root and page independently
Meir Elisha <meir.elisha(a)volumez.com>
md/raid1: Add check for missing source disk in process_checks()
Mostafa Saleh <smostafa(a)google.com>
ubsan: Fix panic from test_ubsan_out_of_bounds
Yunlong Xing <yunlong.xing(a)unisoc.com>
loop: aio inherit the ioprio of original request
Igor Pylypiv <ipylypiv(a)google.com>
scsi: pm80xx: Set phy_attached to zero when device is gone
Xingui Yang <yangxingui(a)huawei.com>
scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
Ojaswin Mujoo <ojaswin(a)linux.ibm.com>
ext4: make block validity check resistent to sb bh corruption
Daniel Wagner <wagi(a)kernel.org>
nvmet-fc: put ref when assoc->del_work is already scheduled
Daniel Wagner <wagi(a)kernel.org>
nvmet-fc: take tgtport reference only once
Josh Poimboeuf <jpoimboe(a)kernel.org>
x86/bugs: Don't fill RSB on context switch with eIBRS
Josh Poimboeuf <jpoimboe(a)kernel.org>
x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
Josh Poimboeuf <jpoimboe(a)kernel.org>
x86/bugs: Use SBPB in write_ibpb() if applicable
Qiuxu Zhuo <qiuxu.zhuo(a)intel.com>
selftests/mincore: Allow read-ahead pages to reach the end of the file
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool: Stop UNRET validation on UD2
Hannes Reinecke <hare(a)kernel.org>
nvme: re-read ANA log page after ns scan completes
Jean-Marc Eurin <jmeurin(a)google.com>
ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
Hannes Reinecke <hare(a)kernel.org>
nvme: requeue namespace scan on missed AENs
Jason Andryuk <jason.andryuk(a)amd.com>
xen: Change xen-acpi-processor dom0 dependency
Ming Lei <ming.lei(a)redhat.com>
selftests: ublk: fix test_stripe_04
Xiaogang Chen <xiaogang.chen(a)amd.com>
udmabuf: fix a buf size overflow issue during udmabuf creation
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
KVM: s390: Don't use %pK through tracepoints
Oleg Nesterov <oleg(a)redhat.com>
sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
Arnd Bergmann <arnd(a)arndb.de>
ntb: reduce stack usage in idt_scan_mws
Al Viro <viro(a)zeniv.linux.org.uk>
qibfs: fix _another_ leak
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler()
Chenyuan Yang <chenyuan0y(a)gmail.com>
usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
Michal Pecio <michal.pecio(a)gmail.com>
usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running
Vinicius Costa Gomes <vinicius.gomes(a)intel.com>
dmaengine: dmatest: Fix dmatest waiting less when interrupted
John Stultz <jstultz(a)google.com>
sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
Edward Adam Davis <eadavis(a)qq.com>
fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
Alexander Stein <alexander.stein(a)mailbox.org>
usb: host: max3421-hcd: Add missing spi_device_id table
Haoxiang Li <haoxiang_li2024(a)163.com>
s390/tty: Fix a potential memory leak bug
Haoxiang Li <haoxiang_li2024(a)163.com>
s390/sclp: Add check for get_zeroed_page()
Yu-Chun Lin <eleanor15x(a)gmail.com>
parisc: PDT: Fix missing prototype warning
Heiko Stuebner <heiko(a)sntech.de>
clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: null - Use spin lock instead of mutex
Gregory CLEMENT <gregory.clement(a)bootlin.com>
MIPS: cm: Detect CM quirks from device tree
Oliver Neukum <oneukum(a)suse.com>
USB: wdm: add annotation
Oliver Neukum <oneukum(a)suse.com>
USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
Oliver Neukum <oneukum(a)suse.com>
USB: wdm: close race between wdm_open and wdm_wwan_port_stop
Oliver Neukum <oneukum(a)suse.com>
USB: wdm: handle IO errors in wdm_wwan_port_start
Oliver Neukum <oneukum(a)suse.com>
USB: VLI disk crashes if LPM is used
Miao Li <limiao(a)kylinos.cn>
usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
Miao Li <limiao(a)kylinos.cn>
usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
Frode Isaksen <frode(a)meta.com>
usb: dwc3: gadget: check that event count does not exceed event buffer length
Huacai Chen <chenhuacai(a)kernel.org>
USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
Fedor Pchelkin <pchelkin(a)ispras.ru>
usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
Fedor Pchelkin <pchelkin(a)ispras.ru>
usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
Fedor Pchelkin <pchelkin(a)ispras.ru>
usb: chipidea: ci_hdrc_imx: fix usbmisc handling
Ralph Siemsen <ralph.siemsen(a)linaro.org>
usb: cdns3: Fix deadlock when using NCM gadget
Craig Hesling <craig(a)hesling.com>
USB: serial: simple: add OWON HDS200 series oscilloscope support
Adam Xue <zxue(a)semtech.com>
USB: serial: option: add Sierra Wireless EM9291
Michael Ehrenreich <michideep(a)gmail.com>
USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
Ryo Takakura <ryotkkr98(a)gmail.com>
serial: sifive: lock port in startup()/shutdown() callbacks
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Reset IRTE to host control if *new* route isn't postable
Alexander Usyskin <alexander.usyskin(a)intel.com>
mei: me: add panther lake H DID
Oliver Neukum <oneukum(a)suse.com>
USB: storage: quirk for ADATA Portable HDD CH94
Haoxiang Li <haoxiang_li2024(a)163.com>
mcb: fix a double free bug in chameleon_parse_gdd()
Sean Christopherson <seanjc(a)google.com>
KVM: SVM: Allocate IR data using atomic allocation
Roman Li <Roman.Li(a)amd.com>
drm/amd/display: Fix gpu reset in multidisplay config
Oleksij Rempel <linux(a)rempel-privat.de>
net: selftests: initialize TCP header and skb payload with zero
Halil Pasic <pasic(a)linux.ibm.com>
virtio_console: fix missing byte order handling for cols and rows
Sean Christopherson <seanjc(a)google.com>
iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
Cong Wang <xiyou.wangcong(a)gmail.com>
net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
Cong Wang <xiyou.wangcong(a)gmail.com>
net_sched: hfsc: Fix a UAF vulnerability in class handling
Tung Nguyen <tung.quang.nguyen(a)est.tech>
tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
Qingfang Deng <qingfang.deng(a)siflower.com.cn>
net: phy: leds: fix memory leak
Marc Zyngier <maz(a)kernel.org>
cpufreq: cppc: Fix invalid return value in .get() callback
Henry Martin <bsdhenrymartin(a)gmail.com>
cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
Henry Martin <bsdhenrymartin(a)gmail.com>
cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
Arnd Bergmann <arnd(a)arndb.de>
dma/contiguous: avoid warning about unused size_bytes
Akhil P Oommen <quic_akhilpo(a)quicinc.com>
drm/msm/a6xx: Fix stale rpmh votes from GPU
Akhil P Oommen <quic_akhilpo(a)quicinc.com>
drm/msm/a6xx: Avoid gx gbit halt during rpm suspend
Akhil P Oommen <quic_akhilpo(a)quicinc.com>
drm/msm/a6xx: Handle GMU prepare-slumber hfi failure
Akhil P Oommen <quic_akhilpo(a)quicinc.com>
drm/msm/a6xx: Improve gpu recovery sequence
Peter Collingbourne <pcc(a)google.com>
string: Add load_unaligned_zeropad() code path to sized_strscpy()
Alexander Potapenko <glider(a)google.com>
kmsan: disable strscpy() optimization under KMSAN
Mark Brown <broonie(a)kernel.org>
selftests/mm: generate a temporary mountpoint for cgroup filesystem
Denis Arefev <arefev(a)swemel.ru>
ksmbd: Prevent integer overflow in calculation of deadtime
Ma Ke <make24(a)iscas.ac.cn>
PCI: Fix reference leak in pci_register_host_bridge()
Pali Rohár <pali(a)kernel.org>
PCI: Assign PCI domain IDs by ida_alloc()
Kai-Heng Feng <kai.heng.feng(a)canonical.com>
PCI: Coalesce host bridge contiguous apertures
Guixin Liu <kanie(a)linux.alibaba.com>
gpio: tegra186: fix resource handling in ACPI probe path
Thierry Reding <treding(a)nvidia.com>
gpio: tegra186: Force one interrupt per bank
Roman Smirnov <r.smirnov(a)omp.ru>
cifs: fix integer overflow in match_server()
Alexandra Diupina <adiupina(a)astralinux.ru>
cifs: avoid NULL pointer dereference in dbg call
Enzo Matsumiya <ematsumiya(a)suse.de>
cifs: print TIDs as hex
Herve Codina <herve.codina(a)bootlin.com>
backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de>
backlight: led_bl: Convert to platform remove callback returning void
Sergiu Cuciurean <sergiu.cuciurean(a)analog.com>
iio: adc: ad7768-1: Fix conversion result sign
Jonathan Cameron <Jonathan.Cameron(a)huawei.com>
iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
Chenyuan Yang <chenyuan0y(a)gmail.com>
soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
Sam Protsenko <semen.protsenko(a)linaro.org>
soc: samsung: exynos-chipid: Pass revision reg offsets
Krzysztof Kozlowski <krzysztof.kozlowski(a)canonical.com>
soc: samsung: exynos-chipid: avoid soc_device_to_device()
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: fix VTU methods for 6320 family
Haoxiang Li <haoxiang_li2024(a)163.com>
auxdisplay: hd44780: Fix an API misuse in hd44780.c
Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de>
auxdisplay: hd44780: Convert to platform remove callback returning void
Murad Masimov <m.masimov(a)mt-integration.ru>
media: streamzap: fix race between device disconnection and urb callback
Sean Young <sean(a)mess.org>
media: streamzap: remove unused struct members
Sean Young <sean(a)mess.org>
media: streamzap: less chatter
Sean Young <sean(a)mess.org>
media: streamzap: no need for usb pid/vid in device name
Sean Young <sean(a)mess.org>
media: streamzap: remove unnecessary ir_raw_event_reset and handle
Thorsten Leemhuis <linux(a)leemhuis.info>
module: sign with sha512 instead of sha1 by default
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: SCO: Fix UAF on sco_sock_timeout
Nathan Chancellor <nathan(a)kernel.org>
f2fs: Add inline to f2fs_build_fault_attr() stub
James Smart <jsmart2021(a)gmail.com>
scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
Kunwu Chan <chentao(a)kylinos.cn>
pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
Chao Yu <chao(a)kernel.org>
f2fs: check validation of fault attrs in f2fs_build_fault_attr()
Kirill A. Shutemov <kirill.shutemov(a)linux.intel.com>
mm: fix apply_to_existing_page_range()
Oleg Nesterov <oleg(a)redhat.com>
fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats
Chris Wilson <chris.p.wilson(a)intel.com>
drm/i915/gt: Cleanup partial engine discovery failures
Ming-Hung Tsai <mtsai(a)redhat.com>
dm cache: fix flushing uninitialized delayed_work on cache_ctr error
Pei Li <peili.dev(a)gmail.com>
jfs: Fix shift-out-of-bounds in dbDiscardAG
WangYuli <wangyuli(a)uniontech.com>
MIPS: ds1287: Match ds1287_set_base_clock() function types
WangYuli <wangyuli(a)uniontech.com>
MIPS: cevt-ds1287: Add missing ds1287.h include
WangYuli <wangyuli(a)uniontech.com>
MIPS: dec: Declare which_prom() as static
Eric Dumazet <edumazet(a)google.com>
net: defer final 'struct net' free in netns dismantle
Guixin Liu <kanie(a)linux.alibaba.com>
scsi: ufs: bsg: Set bsg_queue to NULL after removal
Tuo Li <islituo(a)gmail.com>
scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
Ilya Maximets <i.maximets(a)ovn.org>
openvswitch: fix lockup on tx to unregistering netdev with carrier
Felix Huettner <felix.huettner(a)mail.schwarz>
net: openvswitch: fix race on port output
Chen Hanxiao <chenhx.fnst(a)fujitsu.com>
ipvs: properly dereference pe in ip_vs_add_service
Xiaxi Shen <shenxiaxi26(a)gmail.com>
ext4: fix timer use-after-free on failed mount
Li Nan <linan122(a)huawei.com>
blk-iocost: do not WARN if iocg was already offlined
Yu Kuai <yukuai3(a)huawei.com>
blk-cgroup: support to track if policy is online
Hou Tao <houtao1(a)huawei.com>
bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
Andrii Nakryiko <andrii(a)kernel.org>
bpf: avoid holding freeze_mutex during mmap operation
Qun-Wei Lin <qun-wei.lin(a)mediatek.com>
sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
Paulo Alcantara <pc(a)manguebit.com>
smb: client: fix potential UAF in cifs_stats_proc_show()
Paulo Alcantara <pc(a)manguebit.com>
smb: client: fix potential deadlock when releasing mids
ChenXiaoSong <chenxiaosong(a)kylinos.cn>
smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
Paulo Alcantara <pc(a)manguebit.com>
smb: client: fix NULL ptr deref in crypto_aead_setkey()
Enzo Matsumiya <ematsumiya(a)suse.de>
smb: client: fix UAF in async decryption
Zhang Xiaoxu <zhangxiaoxu5(a)huawei.com>
cifs: Fix UAF in cifs_demultiplex_thread()
Paulo Alcantara <pc(a)manguebit.com>
smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
Eric Dumazet <edumazet(a)google.com>
net: make sock_inuse_add() available
Namjae Jeon <linkinjeon(a)kernel.org>
ksmbd: fix potencial out-of-bounds when buffer offset is invalid
Paulo Alcantara <pc(a)manguebit.com>
smb: client: fix potential UAF in cifs_dump_full_key()
WangYuli <wangyuli(a)uniontech.com>
nvmet-fc: Remove unused functions
Mickaël Salaün <mic(a)digikod.net>
landlock: Add the errata interface
Vitaly Prosyak <vitaly.prosyak(a)amd.com>
drm/amdgpu: fix usage slab after free
Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com>
drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing
Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com>
drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
Hersen Wu <hersenxs.wu(a)amd.com>
drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
Kang Yang <quic_kangyang(a)quicinc.com>
wifi: ath10k: avoid NULL pointer error during sdio remove
Miaoqian Lin <linmq006(a)gmail.com>
phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
Nathan Lynch <nathanl(a)linux.ibm.com>
powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
Ard Biesheuvel <ardb(a)kernel.org>
x86/pvh: Call C code via the kernel virtual mapping
Souradeep Chakrabarti <schakrabarti(a)linux.microsoft.com>
net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
Michal Schmidt <mschmidt(a)redhat.com>
bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
Rémi Denis-Courmont <courmisch(a)gmail.com>
phonet/pep: fix racy skb_queue_empty() use
Trond Myklebust <trond.myklebust(a)hammerspace.com>
filemap: Fix bounds checking in filemap_read()
Wang Liang <wangliang74(a)huawei.com>
net: fix crash when config small gso_max_size/gso_ipv4_max_size
Paolo Abeni <pabeni(a)redhat.com>
ipv6: release nexthop on device removal
Kunihiko Hayashi <hayashi.kunihiko(a)socionext.com>
misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
Kunihiko Hayashi <hayashi.kunihiko(a)socionext.com>
misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
Kunihiko Hayashi <hayashi.kunihiko(a)socionext.com>
misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
mptcp: sockopt: fix getting IPV6_V6ONLY
Nathan Chancellor <nathan(a)kernel.org>
kbuild: Add '-fno-builtin-wcslen'
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
cpufreq: Reference count policy in cpufreq_update_limits()
Mark Rutland <mark.rutland(a)arm.com>
KVM: arm64: Eagerly switch ZCR_EL{1,2}
Fuad Tabba <tabba(a)google.com>
KVM: arm64: Calculate cptr_el2 traps on activating traps
Mark Rutland <mark.rutland(a)arm.com>
KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN
Mark Rutland <mark.rutland(a)arm.com>
KVM: arm64: Remove host FPSIMD saving for non-protected KVM
Mark Rutland <mark.rutland(a)arm.com>
KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
Mark Brown <broonie(a)kernel.org>
arm64/fpsimd: Stop using TIF_SVE to manage register saving in KVM
Mark Brown <broonie(a)kernel.org>
arm64/fpsimd: Have KVM explicitly say which FP registers to save
Mark Brown <broonie(a)kernel.org>
arm64/fpsimd: Track the saved FPSIMD state type separately to TIF_SVE
Mark Brown <broonie(a)kernel.org>
KVM: arm64: Discard any SVE state when entering KVM guests
Marc Zyngier <maz(a)kernel.org>
KVM: arm64: Always start with clearing SVE flag on load
Mark Brown <broonie(a)kernel.org>
KVM: arm64: Get rid of host SVE tracking/saving
Rolf Eike Beer <eb(a)emlix.com>
drm/sti: remove duplicate object names
Chris Bainbridge <chris.bainbridge(a)gmail.com>
drm/nouveau: prime: fix ttm_bo_delayed_delete oops
Matthew Auld <matthew.auld(a)intel.com>
drm/amdgpu/dma_buf: fix page_link check
Denis Arefev <arefev(a)swemel.ru>
drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
Denis Arefev <arefev(a)swemel.ru>
drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero
Denis Arefev <arefev(a)swemel.ru>
drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
Denis Arefev <arefev(a)swemel.ru>
drm/amd/pm/powerplay: Prevent division by zero
Denis Arefev <arefev(a)swemel.ru>
drm/amd/pm: Prevent division by zero
Nikita Zhandarovich <n.zhandarovich(a)fintech.ru>
drm/repaper: fix integer overflows in repeat functions
Kan Liang <kan.liang(a)linux.intel.com>
perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR
Kan Liang <kan.liang(a)linux.intel.com>
perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX
Kan Liang <kan.liang(a)linux.intel.com>
perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
Dapeng Mi <dapeng1.mi(a)linux.intel.com>
perf/x86/intel: Allow to update user space GPRs from PEBS records
Xiangsheng Hou <xiangsheng.hou(a)mediatek.com>
virtiofs: add filesystem context source name check
Steven Rostedt <rostedt(a)goodmis.org>
tracing: Fix filter string testing
Nathan Chancellor <nathan(a)kernel.org>
riscv: Avoid fortify warning in syscall_get_arguments()
Baoquan He <bhe(a)redhat.com>
mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable()
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
loop: LOOP_SET_FD: send uevents for partitions
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
loop: properly send KOBJ_CHANGED uevent for disk device
Edward Adam Davis <eadavis(a)qq.com>
isofs: Prevent the use of too small fid
Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com>
i2c: cros-ec-tunnel: defer probe if parent EC is not present
Vasiliy Kovalev <kovalev(a)altlinux.org>
hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: caam/qi - Fix drv_ctx refcount bug
Johannes Kimmel <kernel(a)bareminimum.eu>
btrfs: correctly escape subvol in btrfs_show_options()
Li Lingfeng <lilingfeng3(a)huawei.com>
nfsd: decrease sc_count directly if fail to queue dl_recall
Eric Biggers <ebiggers(a)google.com>
nfs: add missing selections of CONFIG_CRC32
Jeff Layton <jlayton(a)kernel.org>
nfs: move nfs_fhandle_hash to common include file
Denis Arefev <arefev(a)swemel.ru>
asus-laptop: Fix an uninitialized variable
Srinivas Kandagatla <srinivas.kandagatla(a)linaro.org>
ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels
Srinivas Kandagatla <srinivas.kandagatla(a)linaro.org>
ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate
Alex Williamson <alex.williamson(a)redhat.com>
Revert "PCI: Avoid reset when disabled via sysfs"
Andreas Gruenbacher <agruenba(a)redhat.com>
writeback: fix false warning in inode_to_wb()
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
WangYuli <wangyuli(a)uniontech.com>
riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break
WangYuli <wangyuli(a)uniontech.com>
riscv: KGDB: Do not inline arch_kgdb_breakpoint()
Björn Töpel <bjorn(a)rivosinc.com>
riscv: Properly export reserved regions in /proc/iomem
Vladimir Oltean <vladimir.oltean(a)nxp.com>
net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails
Vladimir Oltean <vladimir.oltean(a)nxp.com>
net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered
Jonas Gorski <jonas.gorski(a)gmail.com>
net: b53: enable BPDU reception for management port
Abdun Nihaal <abdun.nihaal(a)gmail.com>
cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
Ilya Maximets <i.maximets(a)ovn.org>
net: openvswitch: fix nested key length validation in the set() action
Matt Johnston <matt(a)codeconstruct.com.au>
net: mctp: Set SOCK_RCU_FREE
Christopher S M Hall <christopher.s.hall(a)intel.com>
igc: cleanup PTP module if probe fails
Christopher S M Hall <christopher.s.hall(a)intel.com>
igc: handle the IGC_PTP_ENABLED flag correctly
Christopher S M Hall <christopher.s.hall(a)intel.com>
igc: move ktime snapshot into PTM retry loop
Christopher S M Hall <christopher.s.hall(a)intel.com>
igc: fix PTM cycle trigger logic
Johannes Berg <johannes.berg(a)intel.com>
Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
Frédéric Danis <frederic.danis(a)collabora.com>
Bluetooth: l2cap: Check encryption key size on incoming connection
Dan Carpenter <dan.carpenter(a)linaro.org>
Bluetooth: btrtl: Prevent potential NULL dereference
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
Shay Drory <shayd(a)nvidia.com>
RDMA/core: Silence oversized kvmalloc() warning
Chengchang Tang <tangchengchang(a)huawei.com>
RDMA/hns: Fix wrong maximum DMA segment size
Yue Haibing <yuehaibing(a)huawei.com>
RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
Yu Kuai <yukuai3(a)huawei.com>
md/raid10: fix missing discard IO accounting
Miaoqian Lin <linmq006(a)gmail.com>
scsi: iscsi: Fix missing scsi_host_put() in error path
Abdun Nihaal <abdun.nihaal(a)gmail.com>
wifi: wl1251: fix memory leak in wl1251_tx_work
Remi Pommarel <repk(a)triplefau.lt>
wifi: mac80211: Purge vif txq in ieee80211_do_stop()
Remi Pommarel <repk(a)triplefau.lt>
wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
Abdun Nihaal <abdun.nihaal(a)gmail.com>
wifi: at76c50x: fix use after free access in at76_disconnect
Xingui Yang <yangxingui(a)huawei.com>
scsi: hisi_sas: Enable force phy when SATA disk directly connected
John Garry <john.garry(a)huawei.com>
scsi: libsas: Add struct sas_tmf_task
John Garry <john.garry(a)huawei.com>
scsi: libsas: Delete lldd_clear_aca callback
John Garry <john.garry(a)huawei.com>
scsi: hisi_sas: Fix setting of hisi_sas_slot.is_internal
John Garry <john.garry(a)huawei.com>
scsi: hisi_sas: Factor out task prep and delivery code
John Garry <john.garry(a)huawei.com>
scsi: hisi_sas: Pass abort structure for internal abort
John Garry <john.garry(a)huawei.com>
scsi: hisi_sas: Start delivery hisi_sas_task_exec() directly
Arseniy Krasnov <avkrasnov(a)salutedevices.com>
Bluetooth: hci_uart: Fix another race during initialization
Myrrh Periwinkle <myrrhperiwinkle(a)qtmlabs.xyz>
x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions()
Nathan Chancellor <nathan(a)kernel.org>
ACPI: platform-profile: Fix CFI violation when accessing sysfs files
Douglas Anderson <dianders(a)chromium.org>
arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists
Kaixin Wang <kxwang23(a)m.fudan.edu.cn>
HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition
Stephan Gerhold <stephan.gerhold(a)linaro.org>
pinctrl: qcom: Clear latched interrupt status when changing IRQ type
Ma Ke <make24(a)iscas.ac.cn>
PCI: Fix reference leak in pci_alloc_child_bus()
Stanimir Varbanov <svarbanov(a)suse.de>
PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
Zijun Hu <quic_zijuhu(a)quicinc.com>
of/irq: Fix device node refcount leakages in of_irq_init()
Zijun Hu <quic_zijuhu(a)quicinc.com>
of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
Zijun Hu <quic_zijuhu(a)quicinc.com>
of/irq: Fix device node refcount leakages in of_irq_count()
Fedor Pchelkin <pchelkin(a)ispras.ru>
ntb: use 64-bit arithmetic for the MSI doorbell mask
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
gpio: zynq: Fix wakeup source leaks on device unbind
zhoumin <teczm(a)foxmail.com>
ftrace: Add cond_resched() to ftrace_graph_set_hash()
Mikulas Patocka <mpatocka(a)redhat.com>
dm-integrity: set ti->error on memory allocation failure
Tom Lendacky <thomas.lendacky(a)amd.com>
crypto: ccp - Fix check for the primary ASP device
Trevor Woerner <twoerner(a)gmail.com>
thermal/drivers/rockchip: Add missing rk3328 mapping entry
Ricardo Cañuelo Navarro <rcn(a)igalia.com>
sctp: detect and prevent references to a freed transport in sendmsg
Shuai Xue <xueshuai(a)linux.alibaba.com>
mm/hwpoison: do not send SIGBUS to processes with recovered clean pages
Mathieu Desnoyers <mathieu.desnoyers(a)efficios.com>
mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
Ryan Roberts <ryan.roberts(a)arm.com>
sparc/mm: disable preemption in lazy mmu mode
Chen-Yu Tsai <wenst(a)chromium.org>
arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
Wentao Liang <vulab(a)iscas.ac.cn>
mtd: rawnand: Add status chack in r852_ready()
Wentao Liang <vulab(a)iscas.ac.cn>
mtd: inftlcore: Add error check for inftl_read_oob()
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
mptcp: only inc MPJoinAckHMacFailure for HMAC failures
Gang Yan <yangang(a)kylinos.cn>
mptcp: fix NULL pointer in can_accept_new_subflow
T Pratham <t-pratham(a)ti.com>
lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
Boqun Feng <boqun.feng(a)gmail.com>
locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
Chenyuan Yang <chenyuan0y(a)gmail.com>
mfd: ene-kb3930: Fix a potential NULL pointer dereference
Jan Kara <jack(a)suse.cz>
jbd2: remove wrong sb->s_sequence check
Manjunatha Venkatesh <manjunatha.venkatesh(a)nxp.com>
i3c: Add NULL pointer check in i3c_master_queue_ibi()
Stanley Chu <yschu(a)nuvoton.com>
i3c: master: svc: Use readsb helper for reading MDB
Si-Wei Liu <si-wei.liu(a)oracle.com>
vdpa/mlx5: Fix oversized null mkey longer than 32bit
Artem Sadovnikov <a.sadovnikov(a)ispras.ru>
ext4: fix off-by-one error in do_split
Jeff Hugo <quic_jhugo(a)quicinc.com>
bus: mhi: host: Fix race between unprepare and queue_buf
Alexey Klimov <alexey.klimov(a)linaro.org>
ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
Gavrilov Ilia <Ilia.Gavrilov(a)infotecs.ru>
wifi: mac80211: fix integer overflow in hwmp_route_info_get()
Haoxiang Li <haoxiang_li2024(a)163.com>
wifi: mt76: Add check for devm_kstrdup()
Alexandre Torgue <alexandre.torgue(a)foss.st.com>
clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup
Jiasheng Jiang <jiashengjiangcool(a)gmail.com>
mtd: Replace kcalloc() with devm_kcalloc()
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
Jiasheng Jiang <jiashengjiangcool(a)gmail.com>
mtd: Add check for devm_kcalloc()
Vikash Garodia <quic_vgarodia(a)quicinc.com>
media: venus: hfi_parser: refactor hfi packet parsing logic
Vikash Garodia <quic_vgarodia(a)quicinc.com>
media: venus: hfi_parser: add check to avoid out of bound access
Sakari Ailus <sakari.ailus(a)linux.intel.com>
media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
Sakari Ailus <sakari.ailus(a)linux.intel.com>
media: i2c: ov7251: Set enable GPIO low in probe
Sakari Ailus <sakari.ailus(a)linux.intel.com>
media: i2c: ccs: Set the device's runtime PM status correctly in probe
Sakari Ailus <sakari.ailus(a)linux.intel.com>
media: i2c: ccs: Set the device's runtime PM status correctly in remove
Karina Yankevich <k.yankevich(a)omp.ru>
media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
Murad Masimov <m.masimov(a)mt-integration.ru>
media: streamzap: prevent processing IR data on URB failure
Kamal Dasu <kamal.dasu(a)broadcom.com>
mtd: rawnand: brcmnand: fix PM resume warning
Miquel Raynal <miquel.raynal(a)bootlin.com>
spi: cadence-qspi: Fix probe on AM62A LP SK
Douglas Anderson <dianders(a)chromium.org>
arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
Douglas Anderson <dianders(a)chromium.org>
arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
Douglas Anderson <dianders(a)chromium.org>
arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
Douglas Anderson <dianders(a)chromium.org>
arm64: cputype: Add MIDR_CORTEX_A76AE
Jan Beulich <jbeulich(a)suse.com>
xenfs/xensyms: respect hypervisor's "next" indication
Yuan Can <yuancan(a)huawei.com>
media: siano: Fix error handling in smsdvb_module_init()
Matthew Majewski <mattwmajewski(a)gmail.com>
media: vim2m: print device name after registering device
Vikash Garodia <quic_vgarodia(a)quicinc.com>
media: venus: hfi: add check to handle incorrect queue size
Vikash Garodia <quic_vgarodia(a)quicinc.com>
media: venus: hfi: add a check to handle OOB in sfr region
Niklas Söderlund <niklas.soderlund+renesas(a)ragnatech.se>
media: i2c: adv748x: Fix test pattern selection mask
Jann Horn <jannh(a)google.com>
ext4: don't treat fhandle lookup of ea_inode as FS corruption
Willem de Bruijn <willemb(a)google.com>
bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
Ben Dooks <ben.dooks(a)sifive.com>
bpf: Add endian modifiers to fix endian warnings
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: fsl-ftm: Handle clk_get_rate() returning 0
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: rcar: Improve register calculation
Geert Uytterhoeven <geert+renesas(a)glider.be>
pwm: rcar: Simplify multiplication/shift logic
Josh Poimboeuf <jpoimboe(a)kernel.org>
pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
Ayush Jain <Ayush.jain3(a)amd.com>
ktest: Fix Test Failures Due to Missing LOG_FILE Directories
Leonid Arapov <arapovl839(a)gmail.com>
fbdev: omapfb: Add 'plane' value check
Ryo Takakura <ryotkkr98(a)gmail.com>
PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com>
drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
Philip Yang <Philip.Yang(a)amd.com>
drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
David Yat Sin <David.YatSin(a)amd.com>
drm/amdkfd: clamp queue size to minimum
Lucas De Marchi <lucas.demarchi(a)intel.com>
drivers: base: devres: Allow to release group on device release
Luca Ceresoli <luca.ceresoli(a)bootlin.com>
drm/bridge: panel: forbid initializing a panel with unknown connector type
Andrew Wyatt <fewtarius(a)steamfork.org>
drm: panel-orientation-quirks: Add new quirk for GPD Win 2
Andrew Wyatt <fewtarius(a)steamfork.org>
drm: panel-orientation-quirks: Add support for AYANEO 2S
Zhikai Zhai <zhikai.zhai(a)amd.com>
drm/amd/display: Update Cursor request mode to the beginning prefetch always
Abhinav Kumar <quic_abhinavk(a)quicinc.com>
drm: allow encoder mode_set even when connectors change for crtc
Arseniy Krasnov <avkrasnov(a)salutedevices.com>
Bluetooth: hci_uart: fix race during initialization
Gabriele Paoloni <gpaoloni(a)redhat.com>
tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER
Stanislav Fomichev <sdf(a)fomichev.me>
net: vlan: don't propagate flags on open
Icenowy Zheng <uwu(a)icenowy.me>
wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
Kai Mäkisara <Kai.Makisara(a)kolumbus.fi>
scsi: st: Fix array overflow in st_setup()
Bhupesh <bhupesh(a)igalia.com>
ext4: ignore xattrs past end
Ojaswin Mujoo <ojaswin(a)linux.ibm.com>
ext4: protect ext4_release_dquot against freezing
Daniel Kral <d.kral(a)proxmox.com>
ahci: add PCI ID for Marvell 88SE9215 SATA Controller
Chao Yu <chao(a)kernel.org>
f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
Niklas Cassel <cassel(a)kernel.org>
ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
Edward Adam Davis <eadavis(a)qq.com>
jfs: add sanity check for agwidth in dbMount
Edward Adam Davis <eadavis(a)qq.com>
jfs: Prevent copying of nlink with value 0 from disk inode
Rand Deeb <rand.sec96(a)gmail.com>
fs/jfs: Prevent integer overflow in AG size calculation
Rand Deeb <rand.sec96(a)gmail.com>
fs/jfs: cast inactags to s64 to prevent potential overflow
Zhongqiu Han <quic_zhonhan(a)quicinc.com>
jfs: Fix uninit-value access of imap allocated in the diMount() function
Jason Xing <kerneljasonxing(a)gmail.com>
page_pool: avoid infinite loop to schedule delayed worker
Ricard Wanderlof <ricard2013(a)butoba.net>
ALSA: usb-audio: Fix CME quirk for UF series keyboards
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ASoC: fsl_audmix: register card device depends on 'dais' property
Maxim Mikityanskiy <maxtram95(a)gmail.com>
ALSA: hda: intel: Fix Optimus when GPU has no sound
Tomasz Pakuła <forest10pl(a)gmail.com>
HID: pidff: Fix null pointer dereference in pidff_find_fields
Tomasz Pakuła <tomasz.pakula.oficjalny(a)gmail.com>
HID: pidff: Do not send effect envelope if it's empty
Tomasz Pakuła <tomasz.pakula.oficjalny(a)gmail.com>
HID: pidff: Convert infinite length from Linux API to PID standard
Kees Cook <kees(a)kernel.org>
xen/mcelog: Add __nonstring annotations for unterminated strings
Douglas Anderson <dianders(a)chromium.org>
arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
Mark Rutland <mark.rutland(a)arm.com>
perf: arm_pmu: Don't disable counter in armpmu_add()
Max Grobecker <max(a)grobecker.info>
x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine
Zhongqiu Han <quic_zhonhan(a)quicinc.com>
pm: cpupower: bench: Prevent NULL dereference on malloc failure
Trond Myklebust <trond.myklebust(a)hammerspace.com>
umount: Allow superblock owners to force umount
Florian Westphal <fw(a)strlen.de>
nft_set_pipapo: fix incorrect avx2 match of 5th field octet
Arnaud Lecomte <contact(a)arnaud-lcm.com>
net: ppp: Add bound checking for skb data on ppp_sync_txmung
Daniel Wagner <wagi(a)kernel.org>
nvmet-fcloop: swap list_add_tail arguments
Wentao Liang <vulab(a)iscas.ac.cn>
ata: sata_sx4: Add error handling in pdc20621_i2c_read()
Hannes Reinecke <hare(a)suse.de>
ata: sata_sx4: Drop pointless VPRINTK() calls and convert the remaining ones
Maxime Chevallier <maxime.chevallier(a)bootlin.com>
net: ethtool: Don't call .cleanup_data when prepare_data fails
Jakub Kicinski <kuba(a)kernel.org>
net: tls: explicitly disallow disconnect
Tung Nguyen <tung.quang.nguyen(a)est.tech>
tipc: fix memory leak in tipc_link_xmit
Henry Martin <bsdhenrymartin(a)gmail.com>
ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
-------------
Diffstat:
Documentation/scsi/libsas.rst | 2 -
Makefile | 7 +-
arch/arm64/boot/dts/mediatek/mt8173.dtsi | 6 +-
arch/arm64/include/asm/cputype.h | 4 +
arch/arm64/include/asm/fpsimd.h | 4 +-
arch/arm64/include/asm/kvm_host.h | 17 +-
arch/arm64/include/asm/kvm_hyp.h | 7 +
arch/arm64/include/asm/processor.h | 7 +
arch/arm64/include/asm/spectre.h | 1 -
arch/arm64/kernel/fpsimd.c | 115 +++++--
arch/arm64/kernel/process.c | 3 +
arch/arm64/kernel/proton-pack.c | 208 ++++++------
arch/arm64/kernel/ptrace.c | 3 +
arch/arm64/kernel/signal.c | 3 +
arch/arm64/kvm/arm.c | 1 -
arch/arm64/kvm/fpsimd.c | 72 ++--
arch/arm64/kvm/hyp/entry.S | 5 +
arch/arm64/kvm/hyp/include/hyp/switch.h | 86 +++--
arch/arm64/kvm/hyp/nvhe/hyp-main.c | 9 +-
arch/arm64/kvm/hyp/nvhe/switch.c | 52 ++-
arch/arm64/kvm/hyp/vhe/switch.c | 4 +
arch/arm64/kvm/reset.c | 3 +
arch/mips/dec/prom/init.c | 2 +-
arch/mips/include/asm/ds1287.h | 2 +-
arch/mips/include/asm/mips-cm.h | 22 ++
arch/mips/kernel/cevt-ds1287.c | 1 +
arch/mips/kernel/mips-cm.c | 14 +
arch/parisc/kernel/pdt.c | 2 +
arch/powerpc/kernel/rtas.c | 4 +
arch/riscv/include/asm/kgdb.h | 9 +-
arch/riscv/include/asm/syscall.h | 7 +-
arch/riscv/kernel/kgdb.c | 6 +
arch/riscv/kernel/setup.c | 36 +-
arch/s390/kvm/trace-s390.h | 4 +-
arch/sparc/mm/tlb.c | 5 +-
arch/x86/entry/entry.S | 2 +-
arch/x86/events/intel/ds.c | 8 +-
arch/x86/events/intel/uncore_snbep.c | 107 +-----
arch/x86/kernel/cpu/amd.c | 2 +-
arch/x86/kernel/cpu/bugs.c | 36 +-
arch/x86/kernel/e820.c | 17 +-
arch/x86/kvm/svm/avic.c | 60 ++--
arch/x86/kvm/vmx/posted_intr.c | 28 +-
arch/x86/mm/tlb.c | 6 +-
arch/x86/platform/pvh/head.S | 7 +-
block/blk-cgroup.c | 24 +-
block/blk-iocost.c | 7 +-
crypto/crypto_null.c | 37 +-
drivers/acpi/platform_profile.c | 20 +-
drivers/acpi/pptt.c | 4 +-
drivers/ata/ahci.c | 2 +
drivers/ata/libata-eh.c | 11 +-
drivers/ata/pata_pxa.c | 6 +
drivers/ata/sata_sx4.c | 118 +++----
drivers/auxdisplay/hd44780.c | 9 +-
drivers/base/devres.c | 7 +
drivers/block/loop.c | 9 +-
drivers/bluetooth/btrtl.c | 2 +
drivers/bluetooth/hci_ldisc.c | 19 +-
drivers/bluetooth/hci_uart.h | 1 +
drivers/bus/mhi/host/main.c | 16 +-
drivers/char/virtio_console.c | 7 +-
drivers/clk/clk.c | 4 +
drivers/clocksource/timer-stm32-lp.c | 4 +-
drivers/comedi/drivers/jr3_pci.c | 17 +-
drivers/cpufreq/cppc_cpufreq.c | 2 +-
drivers/cpufreq/cpufreq.c | 8 +
drivers/cpufreq/scmi-cpufreq.c | 10 +-
drivers/cpufreq/scpi-cpufreq.c | 13 +-
drivers/crypto/atmel-sha204a.c | 7 +-
drivers/crypto/caam/qi.c | 6 +-
drivers/crypto/ccp/sp-pci.c | 15 +-
drivers/dma-buf/udmabuf.c | 2 +-
drivers/dma/dmatest.c | 6 +-
drivers/gpio/gpio-tegra186.c | 93 +++++-
drivers/gpio/gpio-zynq.c | 1 +
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c | 6 +-
drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 10 +
.../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 2 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 20 +-
drivers/gpu/drm/amd/display/dc/core/dc_link.c | 2 +-
.../drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 22 +-
.../gpu/drm/amd/display/dc/dcn21/dcn21_resource.c | 2 +-
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c | 3 +
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_hubp.c | 2 +-
.../gpu/drm/amd/pm/powerplay/hwmgr/smu7_thermal.c | 4 +-
.../drm/amd/pm/powerplay/hwmgr/vega10_thermal.c | 4 +-
.../drm/amd/pm/powerplay/hwmgr/vega20_thermal.c | 2 +-
drivers/gpu/drm/amd/pm/swsmu/smu11/arcturus_ppt.c | 3 +
drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c | 2 +-
drivers/gpu/drm/drm_atomic_helper.c | 2 +-
drivers/gpu/drm/drm_panel.c | 5 +-
drivers/gpu/drm/drm_panel_orientation_quirks.c | 10 +-
drivers/gpu/drm/i915/gt/intel_engine_cs.c | 7 +-
drivers/gpu/drm/mediatek/mtk_dpi.c | 9 +
drivers/gpu/drm/msm/adreno/a6xx.xml.h | 4 +
drivers/gpu/drm/msm/adreno/a6xx_gmu.c | 158 +++++----
drivers/gpu/drm/msm/adreno/a6xx_gpu.c | 14 +
drivers/gpu/drm/msm/adreno/a6xx_gpu.h | 1 +
drivers/gpu/drm/nouveau/nouveau_bo.c | 3 +
drivers/gpu/drm/nouveau/nouveau_gem.c | 3 -
drivers/gpu/drm/sti/Makefile | 2 -
drivers/gpu/drm/tiny/repaper.c | 4 +-
drivers/hid/usbhid/hid-pidff.c | 60 ++--
drivers/hsi/clients/ssi_protocol.c | 1 +
drivers/i2c/busses/i2c-cros-ec-tunnel.c | 3 +
drivers/i3c/master.c | 3 +
drivers/i3c/master/svc-i3c-master.c | 2 +-
drivers/iio/adc/ad7768-1.c | 5 +-
drivers/infiniband/core/umem_odp.c | 6 +-
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3 +-
drivers/infiniband/hw/hns/hns_roce_main.c | 2 +-
drivers/infiniband/hw/qib/qib_fs.c | 1 +
drivers/infiniband/hw/usnic/usnic_ib_main.c | 14 +-
drivers/iommu/amd/iommu.c | 2 +-
drivers/mcb/mcb-parse.c | 2 +-
drivers/md/dm-cache-target.c | 24 +-
drivers/md/dm-integrity.c | 3 +
drivers/md/raid1.c | 26 +-
drivers/md/raid10.c | 1 +
drivers/media/common/siano/smsdvb-main.c | 2 +
drivers/media/i2c/adv748x/adv748x.h | 2 +-
drivers/media/i2c/ccs/ccs-core.c | 6 +-
drivers/media/i2c/ov7251.c | 4 +-
drivers/media/platform/qcom/venus/hfi_parser.c | 100 ++++--
drivers/media/platform/qcom/venus/hfi_venus.c | 18 +-
drivers/media/rc/streamzap.c | 135 +++-----
drivers/media/test-drivers/vim2m.c | 6 +-
drivers/media/v4l2-core/v4l2-dv-timings.c | 4 +-
drivers/mfd/ene-kb3930.c | 2 +-
drivers/misc/mei/hw-me-regs.h | 1 +
drivers/misc/mei/pci-me.c | 1 +
drivers/misc/pci_endpoint_test.c | 6 +-
drivers/mtd/inftlcore.c | 9 +-
drivers/mtd/mtdpstore.c | 12 +-
drivers/mtd/nand/raw/brcmnand/brcmnand.c | 2 +-
drivers/mtd/nand/raw/r852.c | 3 +
drivers/net/dsa/b53/b53_common.c | 10 +
drivers/net/dsa/mv88e6xxx/chip.c | 32 +-
drivers/net/dsa/mv88e6xxx/devlink.c | 3 +-
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 1 +
drivers/net/ethernet/intel/igc/igc_defines.h | 1 +
drivers/net/ethernet/intel/igc/igc_main.c | 1 +
drivers/net/ethernet/intel/igc/igc_ptp.c | 93 ++++--
drivers/net/ethernet/microsoft/mana/mana.h | 2 +
drivers/net/ethernet/microsoft/mana/mana_en.c | 21 +-
drivers/net/phy/phy_led_triggers.c | 23 +-
drivers/net/ppp/ppp_synctty.c | 5 +
drivers/net/wireless/ath/ath10k/sdio.c | 5 +-
drivers/net/wireless/atmel/at76c50x-usb.c | 2 +-
drivers/net/wireless/mediatek/mt76/eeprom.c | 4 +
drivers/net/wireless/mediatek/mt76/mt76x2/usb.c | 1 +
drivers/net/wireless/ti/wl1251/tx.c | 4 +-
drivers/ntb/hw/idt/ntb_hw_idt.c | 18 +-
drivers/ntb/ntb_transport.c | 2 +-
drivers/nvme/host/core.c | 9 +
drivers/nvme/target/fc.c | 39 +--
drivers/nvme/target/fcloop.c | 2 +-
drivers/of/irq.c | 13 +-
drivers/pci/controller/pcie-brcmstb.c | 13 +-
drivers/pci/controller/vmd.c | 12 +-
drivers/pci/pci.c | 111 +++---
drivers/pci/probe.c | 56 +++-
drivers/pci/remove.c | 7 +
drivers/perf/arm_pmu.c | 8 +-
drivers/phy/tegra/xusb.c | 2 +-
drivers/pinctrl/qcom/pinctrl-msm.c | 12 +-
drivers/platform/x86/asus-laptop.c | 9 +-
drivers/pwm/pwm-fsl-ftm.c | 6 +
drivers/pwm/pwm-mediatek.c | 8 +-
drivers/pwm/pwm-rcar.c | 24 +-
drivers/s390/char/sclp_con.c | 17 +
drivers/s390/char/sclp_tty.c | 12 +
drivers/scsi/aic94xx/aic94xx.h | 1 -
drivers/scsi/aic94xx/aic94xx_init.c | 1 -
drivers/scsi/aic94xx/aic94xx_tmf.c | 9 -
drivers/scsi/hisi_sas/hisi_sas.h | 14 +-
drivers/scsi/hisi_sas/hisi_sas_main.c | 371 ++++++++++-----------
drivers/scsi/hisi_sas/hisi_sas_v1_hw.c | 2 +-
drivers/scsi/hisi_sas/hisi_sas_v2_hw.c | 13 +-
drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 16 +-
drivers/scsi/isci/init.c | 1 -
drivers/scsi/isci/task.c | 18 -
drivers/scsi/isci/task.h | 4 -
drivers/scsi/lpfc/lpfc_els.c | 51 ++-
drivers/scsi/lpfc/lpfc_hbadisc.c | 2 +
drivers/scsi/mvsas/mv_defs.h | 5 -
drivers/scsi/mvsas/mv_init.c | 1 -
drivers/scsi/mvsas/mv_sas.c | 31 +-
drivers/scsi/mvsas/mv_sas.h | 1 -
drivers/scsi/pm8001/pm8001_hwi.c | 4 +-
drivers/scsi/pm8001/pm8001_init.c | 1 -
drivers/scsi/pm8001/pm8001_sas.c | 27 +-
drivers/scsi/pm8001/pm8001_sas.h | 11 +-
drivers/scsi/scsi_transport_iscsi.c | 7 +-
drivers/scsi/st.c | 2 +-
drivers/scsi/ufs/ufs_bsg.c | 1 +
drivers/soc/samsung/exynos-chipid.c | 74 +++-
drivers/soc/ti/omap_prm.c | 2 +
drivers/spi/spi-cadence-quadspi.c | 6 +
drivers/thermal/rockchip_thermal.c | 1 +
drivers/tty/serial/sifive.c | 6 +
drivers/usb/cdns3/cdns3-gadget.c | 2 +
drivers/usb/chipidea/ci_hdrc_imx.c | 44 ++-
drivers/usb/class/cdc-wdm.c | 21 +-
drivers/usb/core/quirks.c | 9 +
drivers/usb/dwc3/dwc3-pci.c | 10 +
drivers/usb/dwc3/gadget.c | 6 +
drivers/usb/gadget/udc/aspeed-vhub/dev.c | 3 +
drivers/usb/host/max3421-hcd.c | 7 +
drivers/usb/host/ohci-pci.c | 23 ++
drivers/usb/host/xhci-ring.c | 11 +-
drivers/usb/serial/ftdi_sio.c | 2 +
drivers/usb/serial/ftdi_sio_ids.h | 5 +
drivers/usb/serial/option.c | 3 +
drivers/usb/serial/usb-serial-simple.c | 7 +
drivers/usb/storage/unusual_uas.h | 7 +
drivers/vdpa/mlx5/core/mr.c | 7 +-
drivers/video/backlight/led_bl.c | 11 +-
drivers/video/fbdev/omap2/omapfb/dss/dispc.c | 6 +-
drivers/xen/Kconfig | 2 +-
drivers/xen/xenfs/xensyms.c | 4 +-
fs/Kconfig | 1 +
fs/btrfs/super.c | 3 +-
fs/cifs/cifs_debug.c | 4 +
fs/cifs/cifsglob.h | 1 +
fs/cifs/cifsproto.h | 7 +-
fs/cifs/connect.c | 2 +-
fs/cifs/fs_context.c | 5 +
fs/cifs/ioctl.c | 3 +-
fs/cifs/smb2misc.c | 11 +-
fs/cifs/smb2ops.c | 48 +--
fs/cifs/smb2pdu.c | 10 +-
fs/cifs/transport.c | 43 +--
fs/ext4/block_validity.c | 5 +-
fs/ext4/inode.c | 75 +++--
fs/ext4/namei.c | 2 +-
fs/ext4/super.c | 19 +-
fs/ext4/xattr.c | 11 +-
fs/f2fs/f2fs.h | 12 +-
fs/f2fs/node.c | 9 +-
fs/f2fs/super.c | 27 +-
fs/f2fs/sysfs.c | 14 +-
fs/fuse/virtio_fs.c | 3 +
fs/hfs/bnode.c | 6 +
fs/hfsplus/bnode.c | 6 +
fs/isofs/export.c | 2 +-
fs/jbd2/journal.c | 1 -
fs/jfs/jfs_dinode.h | 2 +-
fs/jfs/jfs_dmap.c | 12 +-
fs/jfs/jfs_imap.c | 10 +-
fs/jfs/jfs_incore.h | 2 +-
fs/jfs/jfs_txnmgr.c | 4 +-
fs/jfs/jfs_xtree.c | 4 +-
fs/jfs/jfs_xtree.h | 37 +-
fs/ksmbd/oplock.c | 2 +-
fs/ksmbd/smb2misc.c | 22 +-
fs/ksmbd/smb2pdu.c | 49 +--
fs/ksmbd/transport_ipc.c | 7 +-
fs/namespace.c | 3 +-
fs/nfs/Kconfig | 2 +-
fs/nfs/internal.h | 22 --
fs/nfs/nfs4session.h | 4 -
fs/nfsd/Kconfig | 1 +
fs/nfsd/nfs4state.c | 2 +-
fs/nfsd/nfsfh.h | 7 -
fs/ntfs3/file.c | 1 +
fs/proc/array.c | 59 ++--
include/linux/backing-dev.h | 1 +
include/linux/blk-cgroup.h | 1 +
include/linux/filter.h | 9 +-
include/linux/nfs.h | 13 +
include/linux/pci.h | 1 +
include/linux/sched/task_stack.h | 2 +
include/linux/soc/samsung/exynos-chipid.h | 6 +-
include/net/bluetooth/bluetooth.h | 1 +
include/net/net_namespace.h | 1 +
include/net/sctp/structs.h | 3 +-
include/net/sock.h | 10 +
include/scsi/libsas.h | 10 +-
include/uapi/linux/kfd_ioctl.h | 2 +
include/uapi/linux/landlock.h | 2 +
include/xen/interface/xen-mca.h | 2 +-
init/Kconfig | 3 +-
kernel/bpf/helpers.c | 14 +-
kernel/bpf/syscall.c | 17 +-
kernel/dma/contiguous.c | 3 +-
kernel/locking/lockdep.c | 3 +
kernel/sched/cpufreq_schedutil.c | 18 +-
kernel/trace/ftrace.c | 1 +
kernel/trace/trace_events.c | 4 +-
kernel/trace/trace_events_filter.c | 4 +-
lib/sg_split.c | 2 -
lib/string.c | 15 +
lib/test_ubsan.c | 18 +-
mm/filemap.c | 2 +-
mm/gup.c | 4 +-
mm/memory-failure.c | 11 +-
mm/memory.c | 4 +-
mm/vmscan.c | 2 +-
net/8021q/vlan_dev.c | 31 +-
net/bluetooth/af_bluetooth.c | 22 ++
net/bluetooth/hci_event.c | 5 +-
net/bluetooth/l2cap_core.c | 3 +-
net/bluetooth/sco.c | 18 +-
net/core/dev.c | 1 +
net/core/filter.c | 80 +++--
net/core/net_namespace.c | 21 +-
net/core/page_pool.c | 8 +-
net/core/rtnetlink.c | 2 +-
net/core/selftests.c | 18 +-
net/core/sock.c | 10 -
net/dsa/tag_8021q.c | 2 +-
net/ethtool/netlink.c | 8 +-
net/ipv6/route.c | 6 +-
net/mac80211/iface.c | 3 +
net/mac80211/mesh_hwmp.c | 14 +-
net/mctp/af_mctp.c | 3 +
net/mptcp/sockopt.c | 16 +
net/mptcp/subflow.c | 23 +-
net/netfilter/ipvs/ip_vs_ctl.c | 10 +-
net/netfilter/nft_set_pipapo_avx2.c | 3 +-
net/openvswitch/actions.c | 4 +-
net/openvswitch/flow_netlink.c | 3 +-
net/phonet/pep.c | 41 ++-
net/sched/sch_hfsc.c | 23 +-
net/sctp/socket.c | 22 +-
net/sctp/transport.c | 2 +
net/tipc/link.c | 1 +
net/tipc/monitor.c | 3 +-
net/tls/tls_main.c | 6 +
security/landlock/errata.h | 87 +++++
security/landlock/setup.c | 30 ++
security/landlock/setup.h | 3 +
security/landlock/syscalls.c | 22 +-
sound/pci/hda/hda_intel.c | 15 +-
sound/soc/codecs/lpass-wsa-macro.c | 139 +++++---
sound/soc/codecs/wcd934x.c | 2 +-
sound/soc/fsl/fsl_audmix.c | 16 +-
sound/soc/qcom/qdsp6/q6asm-dai.c | 19 +-
sound/usb/midi.c | 80 ++++-
sound/virtio/virtio_pcm.c | 21 +-
tools/objtool/check.c | 3 +
tools/power/cpupower/bench/parse.c | 4 +
tools/testing/ktest/ktest.pl | 8 +
tools/testing/selftests/landlock/base_test.c | 46 ++-
tools/testing/selftests/mincore/mincore_selftest.c | 3 -
tools/testing/selftests/ublk/test_stripe_04.sh | 24 ++
.../selftests/vm/charge_reserved_hugetlb.sh | 4 +-
.../selftests/vm/hugetlb_reparenting_test.sh | 2 +-
352 files changed, 3478 insertions(+), 1968 deletions(-)
4 months, 3 weeks
- 7
- 7
[PATCH 6.12 000/280] 6.12.26-rc1 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 6.12.26 release.
There are 280 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 01 May 2025 16:10:15 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.26-rc…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 6.12.26-rc1
Christoph Hellwig <hch(a)lst.de>
mq-deadline: don't call req_get_ioprio from the I/O completion handler
Keerthy <j-keerthy(a)ti.com>
arm64: dts: ti: k3-j784s4-j742s2-main-common: Correct the GICD size
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: Kconfig - Select LIB generic option
Dan Carpenter <dan.carpenter(a)linaro.org>
usb: typec: class: Unlocked on error in typec_register_partner()
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool: Silence more KCOV warnings, part 2
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool: Ignore end-of-section jumps for KCOV/GCOV
Michal Pecio <michal.pecio(a)gmail.com>
usb: xhci: Fix Short Packet handling rework ignoring errors
Hannes Reinecke <hare(a)kernel.org>
nvme: fixup scan failure for non-ANA multipath controllers
Thomas Bogendoerfer <tsbogend(a)alpha.franken.de>
MIPS: cm: Fix warning if MIPS_CM is disabled
Dan Carpenter <dan.carpenter(a)linaro.org>
media: i2c: imx214: Fix uninitialized variable in imx214_set_ctrl()
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: lib/Kconfig - Hide arch options from user
Robin Murphy <robin.murphy(a)arm.com>
iommu: Handle race with default domain setup
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: enable STU methods for 6320 family
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: enable PVT for 6321 switch
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
Marek Behún <kabel(a)kernel.org>
Revert "net: dsa: mv88e6xxx: fix internal PHYs for 6320 family"
Andrei Kuchynski <akuchynski(a)chromium.org>
usb: typec: class: Invalidate USB device pointers on partner unregistration
Baokun Li <libaokun1(a)huawei.com>
ext4: goto right label 'out_mmap_sem' in ext4_setattr()
Ian Abbott <abbotti(a)mev.co.uk>
comedi: jr3_pci: Fix synchronous deletion of timer
Daniel Borkmann <daniel(a)iogearbox.net>
vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
Andrei Kuchynski <akuchynski(a)chromium.org>
usb: typec: class: Fix NULL pointer access
Shigeru Yoshida <syoshida(a)redhat.com>
selftests/bpf: Adjust data size to have ETH_HLEN
Alexis Lothoré (eBPF Foundation) <alexis.lothore(a)bootlin.com>
selftests/bpf: check program redirect in xdp_cpumap_attach
Alexis Lothoré (eBPF Foundation) <alexis.lothore(a)bootlin.com>
selftests/bpf: make xdp_cpumap_attach keep redirect prog attached
Alexis Lothoré (eBPF Foundation) <alexis.lothore(a)bootlin.com>
selftests/bpf: fix bpf_map_redirect call for cpu map test
Christoph Hellwig <hch(a)lst.de>
xfs: flush inodegc before swapon
Christoph Hellwig <hch(a)lst.de>
xfs: rename xfs_iomap_swapfile_activate to xfs_vm_swap_activate
Carlos Maiolino <cem(a)kernel.org>
xfs: Do not allow norecovery mount with quotacheck
Lukas Herbolt <lukas(a)herbolt.com>
xfs: do not check NEEDSREPAIR if ro,norecovery mount.
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
driver core: fix potential NULL pointer dereference in dev_uevent()
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
driver core: introduce device_set_driver() helper
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
Revert "drivers: core: synchronize really_probe() and dev_uevent()"
Tamura Dai <kirinode0(a)gmail.com>
spi: spi-imx: Add check for spi_imx_setupxfer()
Lijo Lazar <lijo.lazar(a)amd.com>
drm/amdgpu: Use the right function for hdp flush
Christian König <christian.koenig(a)amd.com>
drm/amdgpu: use a dummy owner for sysfs triggered cleaner shaders v4
Meir Elisha <meir.elisha(a)volumez.com>
md/raid1: Add check for missing source disk in process_checks()
Pi Xiange <xiange.pi(a)intel.com>
x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores
Mostafa Saleh <smostafa(a)google.com>
ubsan: Fix panic from test_ubsan_out_of_bounds
Breno Leitao <leitao(a)debian.org>
spi: tegra210-quad: add rate limiting and simplify timeout error message
Breno Leitao <leitao(a)debian.org>
spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
Namjae Jeon <linkinjeon(a)kernel.org>
ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING"
Andrew Jones <ajones(a)ventanamicro.com>
riscv: Provide all alternative macros all the time
Gou Hao <gouhao(a)uniontech.com>
iomap: skip unnecessary ifs_block_is_uptodate check
Song Liu <song(a)kernel.org>
netfs: Only create /proc/fs/netfs with CONFIG_PROC_FS
Fernando Fernandez Mancera <ffmancera(a)riseup.net>
x86/i8253: Call clockevent_i8253_disable() with interrupts disabled
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ASoC: fsl_asrc_dma: get codec or cpu dai from backend
Igor Pylypiv <ipylypiv(a)google.com>
scsi: pm80xx: Set phy_attached to zero when device is gone
Peter Griffin <peter.griffin(a)linaro.org>
scsi: ufs: exynos: gs101: Put UFS device in reset on .suspend()
Peter Griffin <peter.griffin(a)linaro.org>
scsi: ufs: exynos: Move phy calls to .exit() callback
Peter Griffin <peter.griffin(a)linaro.org>
scsi: ufs: exynos: Enable PRDT pre-fetching with UFSHCD_CAP_CRYPTO
Peter Griffin <peter.griffin(a)linaro.org>
scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init()
Xingui Yang <yangxingui(a)huawei.com>
scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
Ojaswin Mujoo <ojaswin(a)linux.ibm.com>
ext4: make block validity check resistent to sb bh corruption
Robin Murphy <robin.murphy(a)arm.com>
iommu: Clear iommu-dma ops on cleanup
Pali Rohár <pali(a)kernel.org>
cifs: Fix querying of WSL CHR and BLK reparse points over SMB1
Sebastian Andrzej Siewior <bigeasy(a)linutronix.de>
timekeeping: Add a lockdep override in tick_freeze()
Pali Rohár <pali(a)kernel.org>
cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode
Daniel Wagner <wagi(a)kernel.org>
nvmet-fc: put ref when assoc->del_work is already scheduled
Daniel Wagner <wagi(a)kernel.org>
nvmet-fc: take tgtport reference only once
Josh Poimboeuf <jpoimboe(a)kernel.org>
x86/bugs: Don't fill RSB on context switch with eIBRS
Josh Poimboeuf <jpoimboe(a)kernel.org>
x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
Josh Poimboeuf <jpoimboe(a)kernel.org>
x86/bugs: Use SBPB in write_ibpb() if applicable
Qiuxu Zhuo <qiuxu.zhuo(a)intel.com>
selftests/mincore: Allow read-ahead pages to reach the end of the file
Roger Pau Monne <roger.pau(a)citrix.com>
x86/xen: disable CPU idle and frequency drivers for PVH dom0
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool: Stop UNRET validation on UD2
Uday Shankar <ushankar(a)purestorage.com>
nvme: multipath: fix return value of nvme_available_path
Hannes Reinecke <hare(a)kernel.org>
nvme: re-read ANA log page after ns scan completes
Julia Filipchuk <julia.filipchuk(a)intel.com>
drm/xe/xe3lpg: Apply Wa_14022293748, Wa_22019794406
Jay Cornwall <jay.cornwall(a)amd.com>
drm/amdgpu: Increase KIQ invalidate_tlbs timeout
Jean-Marc Eurin <jmeurin(a)google.com>
ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
Mario Limonciello <mario.limonciello(a)amd.com>
ACPI: EC: Set ec_no_wakeup for Lenovo Go S
Hannes Reinecke <hare(a)kernel.org>
nvme: requeue namespace scan on missed AENs
Jason Andryuk <jason.andryuk(a)amd.com>
xen: Change xen-acpi-processor dom0 dependency
Gabriel Shahrouzi <gshahrouzi(a)gmail.com>
perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
Ming Lei <ming.lei(a)redhat.com>
selftests: ublk: fix test_stripe_04
Waiman Long <longman(a)redhat.com>
cgroup/cpuset: Don't allow creation of local partition over a remote one
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
KVM: s390: Don't use %pK through debug printing
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
KVM: s390: Don't use %pK through tracepoints
Oleg Nesterov <oleg(a)redhat.com>
sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
Xi Ruoyao <xry111(a)xry111.site>
kbuild: add dependency from vmlinux to sorttable
Pavel Begunkov <asml.silence(a)gmail.com>
io_uring: always do atomic put from iowq
Lukas Stockmann <lukas.stockmann(a)siemens.com>
rtc: pcf85063: do a SW reset if POR failed
Ignacio Encinas <ignacio(a)iencinas.com>
9p/trans_fd: mark concurrent read and writes to p9_conn->err
Dominique Martinet <asmadeus(a)codewreck.org>
9p/net: fix improper handling of bogus negative read/write replies
Basavaraj Natikar <Basavaraj.Natikar(a)amd.com>
ntb_hw_amd: Add NTB PCI ID for new gen CPU
Arnd Bergmann <arnd(a)arndb.de>
ntb: reduce stack usage in idt_scan_mws
Al Viro <viro(a)zeniv.linux.org.uk>
qibfs: fix _another_ leak
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool, lkdtm: Obfuscate the do_nothing() pointer
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool, regulator: rk808: Remove potential undefined behavior in rk806_set_mode_dcdc()
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler()
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool, panic: Disable SMAP in __stack_chk_fail()
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool: Silence more KCOV warnings
Benjamin Berg <benjamin.berg(a)intel.com>
um: work around sched_yield not yielding in time-travel mode
Mika Westerberg <mika.westerberg(a)linux.intel.com>
thunderbolt: Scan retimers after device router has been enumerated
Théo Lebrun <theo.lebrun(a)bootlin.com>
usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
Chenyuan Yang <chenyuan0y(a)gmail.com>
usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
Andy Yan <andy.yan(a)rock-chips.com>
phy: rockchip: usbdp: Avoid call hpd_event_trigger in dp_phy_init
Michal Pecio <michal.pecio(a)gmail.com>
usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running
Vinicius Costa Gomes <vinicius.gomes(a)intel.com>
dmaengine: dmatest: Fix dmatest waiting less when interrupted
Stanley Chu <yschu(a)nuvoton.com>
i3c: master: svc: Add support for Nuvoton npcm845 i3c
Mathias Nyman <mathias.nyman(a)linux.intel.com>
xhci: Handle spurious events on Etron host isoc enpoints
Michal Pecio <michal.pecio(a)gmail.com>
usb: xhci: Fix isochronous Ring Underrun/Overrun event handling
Michal Pecio <michal.pecio(a)gmail.com>
usb: xhci: Complete 'error mid TD' transfers when handling Missed Service
John Stultz <jstultz(a)google.com>
sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
Edward Adam Davis <eadavis(a)qq.com>
fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
Lizhi Xu <lizhi.xu(a)windriver.com>
fs/ntfs3: Keep write operations atomic
Alexander Stein <alexander.stein(a)mailbox.org>
usb: host: max3421-hcd: Add missing spi_device_id table
Sudeep Holla <sudeep.holla(a)arm.com>
mailbox: pcc: Always clear the platform ack interrupt first
Huisong Li <lihuisong(a)huawei.com>
mailbox: pcc: Fix the possible race in updation of chan_in_use flag
Yafang Shao <laoar.shao(a)gmail.com>
bpf: Reject attaching fexit/fmod_ret to __noreturn functions
Martin KaFai Lau <martin.lau(a)kernel.org>
bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates storage
Sewon Nam <swnam0729(a)gmail.com>
bpf: bpftool: Setting error code in do_loader()
Haoxiang Li <haoxiang_li2024(a)163.com>
s390/tty: Fix a potential memory leak bug
Haoxiang Li <haoxiang_li2024(a)163.com>
s390/sclp: Add check for get_zeroed_page()
Yu-Chun Lin <eleanor15x(a)gmail.com>
parisc: PDT: Fix missing prototype warning
Heiko Stuebner <heiko(a)sntech.de>
clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
Alexei Starovoitov <ast(a)kernel.org>
bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
Yonghong Song <yonghong.song(a)linux.dev>
bpf: Fix kmemleak warning for percpu hashmap
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: null - Use spin lock instead of mutex
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: lib/Kconfig - Fix lib built-in failure when arch is modular
Devaraj Rangasamy <Devaraj.Rangasamy(a)amd.com>
crypto: ccp - Add support for PCI device 0x1134
Gregory CLEMENT <gregory.clement(a)bootlin.com>
MIPS: cm: Detect CM quirks from device tree
Dmitry Mastykin <mastichi(a)gmail.com>
pinctrl: mcp23s08: Get rid of spurious level interrupts
Chenyuan Yang <chenyuan0y(a)gmail.com>
pinctrl: renesas: rza2: Fix potential NULL pointer dereference
Amery Hung <ameryhung(a)gmail.com>
selftests/bpf: Fix stdout race condition in traffic monitor
Oliver Neukum <oneukum(a)suse.com>
USB: wdm: add annotation
Oliver Neukum <oneukum(a)suse.com>
USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
Oliver Neukum <oneukum(a)suse.com>
USB: wdm: close race between wdm_open and wdm_wwan_port_stop
Oliver Neukum <oneukum(a)suse.com>
USB: wdm: handle IO errors in wdm_wwan_port_start
Oliver Neukum <oneukum(a)suse.com>
USB: VLI disk crashes if LPM is used
Miao Li <limiao(a)kylinos.cn>
usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
Miao Li <limiao(a)kylinos.cn>
usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
Mike Looijmans <mike.looijmans(a)topic.nl>
usb: dwc3: xilinx: Prevent spike in reset signal
Frode Isaksen <frode(a)meta.com>
usb: dwc3: gadget: check that event count does not exceed event buffer length
Huacai Chen <chenhuacai(a)kernel.org>
USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
Fedor Pchelkin <pchelkin(a)ispras.ru>
usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
Fedor Pchelkin <pchelkin(a)ispras.ru>
usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
Fedor Pchelkin <pchelkin(a)ispras.ru>
usb: chipidea: ci_hdrc_imx: fix usbmisc handling
Ralph Siemsen <ralph.siemsen(a)linaro.org>
usb: cdns3: Fix deadlock when using NCM gadget
Michal Pecio <michal.pecio(a)gmail.com>
usb: xhci: Fix invalid pointer dereference in Etron workaround
Mathias Nyman <mathias.nyman(a)linux.intel.com>
xhci: Limit time spent with xHC interrupts disabled during bus resume
Craig Hesling <craig(a)hesling.com>
USB: serial: simple: add OWON HDS200 series oscilloscope support
Adam Xue <zxue(a)semtech.com>
USB: serial: option: add Sierra Wireless EM9291
Michael Ehrenreich <michideep(a)gmail.com>
USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
Ryo Takakura <ryotkkr98(a)gmail.com>
serial: sifive: lock port in startup()/shutdown() callbacks
Stephan Gerhold <stephan.gerhold(a)linaro.org>
serial: msm: Configure correct working mode before starting earlycon
Günther Noack <gnoack3000(a)gmail.com>
tty: Require CAP_SYS_ADMIN for all usages of TIOCL_SELMOUSEREPORT
Mahesh Rao <mahesh.rao(a)intel.com>
firmware: stratix10-svc: Add of_platform_default_populate()
Rengarajan S <rengarajan.s(a)microchip.com>
misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack
Rengarajan S <rengarajan.s(a)microchip.com>
misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration
Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com>
char: misc: register chrdev region with all possible minors
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Reset IRTE to host control if *new* route isn't postable
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Explicitly treat routing entry type changes as changes
Hans de Goede <hdegoede(a)redhat.com>
mei: vsc: Fix fortify-panic caused by invalid counted_by() use
Alexander Usyskin <alexander.usyskin(a)intel.com>
mei: me: add panther lake H DID
Damien Le Moal <dlemoal(a)kernel.org>
scsi: Improve CDL control
Oliver Neukum <oneukum(a)suse.com>
USB: storage: quirk for ADATA Portable HDD CH94
Damien Le Moal <dlemoal(a)kernel.org>
ata: libata-scsi: Fix ata_msense_control_ata_feature()
Damien Le Moal <dlemoal(a)kernel.org>
ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type
Damien Le Moal <dlemoal(a)kernel.org>
ata: libata-scsi: Improve CDL control
Haoxiang Li <haoxiang_li2024(a)163.com>
mcb: fix a double free bug in chameleon_parse_gdd()
Smita Koralahalli <Smita.KoralahalliChannabasappa(a)amd.com>
cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports
Sean Christopherson <seanjc(a)google.com>
KVM: SVM: Allocate IR data using atomic allocation
Jens Axboe <axboe(a)kernel.dk>
io_uring: fix 'sync' handling of io_fallback_tw()
Bibo Mao <maobibo(a)loongson.cn>
LoongArch: KVM: Fix PMU pass-through issue if VM exits to host finally
Bibo Mao <maobibo(a)loongson.cn>
LoongArch: KVM: Fully clear some CSRs when VM reboot
Petr Tesarik <ptesarik(a)suse.com>
LoongArch: Remove a bogus reference to ZONE_DMA
Ming Wang <wangming01(a)loongson.cn>
LoongArch: Return NULL from huge_pte_offset() for invalid PMD
Tiezhu Yang <yangtiezhu(a)loongson.cn>
LoongArch: Handle fp, lsx, lasx and lbt assembly symbols
Suzuki K Poulose <suzuki.poulose(a)arm.com>
irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
Kirill A. Shutemov <kirill.shutemov(a)linux.intel.com>
x86/insn: Fix CTEST instruction decoding
Roman Li <Roman.Li(a)amd.com>
drm/amd/display: Force full update in gpu reset
Roman Li <Roman.Li(a)amd.com>
drm/amd/display: Fix gpu reset in multidisplay config
Hugo Villeneuve <hvilleneuve(a)dimonoff.com>
drm: panel: jd9365da: fix reset signal polarity in unprepare
Christian Schrefl <chrisi.schrefl(a)gmail.com>
rust: firmware: Use `ffi::c_char` type in `FwFunc`
Ranjan Kumar <ranjan.kumar(a)broadcom.com>
scsi: mpi3mr: Fix pending I/O counter
Fiona Klute <fiona.klute(a)gmx.de>
net: phy: microchip: force IRQ polling mode for lan88xx
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: selftests: initialize TCP header and skb payload with zero
Alexey Nepomnyashih <sdl(a)nppct.ru>
xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
Marek Behún <kabel(a)kernel.org>
crypto: atmel-sha204a - Set hwrng quality to lowest possible
Breno Leitao <leitao(a)debian.org>
sched_ext: Use kvzalloc for large exit_dump allocation
Halil Pasic <pasic(a)linux.ibm.com>
virtio_console: fix missing byte order handling for cols and rows
Florian Westphal <fw(a)strlen.de>
netfilter: fib: avoid lookup if socket is available
Suravee Suthikulpanit <suravee.suthikulpanit(a)amd.com>
KVM: SVM: Disable AVIC on SNP-enabled system without HvInUseWrAllowed feature
Tiezhu Yang <yangtiezhu(a)loongson.cn>
LoongArch: Make do_xyz() exception handlers more robust
Tiezhu Yang <yangtiezhu(a)loongson.cn>
LoongArch: Make regs_irqs_disabled() more clear
Yuli Wang <wangyuli(a)uniontech.com>
LoongArch: Select ARCH_USE_MEMTEST
Luo Gengkun <luogengkun(a)huaweicloud.com>
perf/x86: Fix non-sampling (counting) events on certain x86 platforms
Alexei Starovoitov <ast(a)kernel.org>
bpf: Add namespace to BPF internal symbols
T.J. Mercier <tjmercier(a)google.com>
splice: remove duplicate noinline from pipe_clear_nowait
Björn Töpel <bjorn(a)rivosinc.com>
riscv: uprobes: Add missing fence.i after building the XOL buffer
Björn Töpel <bjorn(a)rivosinc.com>
riscv: Replace function-like macro by static inline function
Sean Christopherson <seanjc(a)google.com>
iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
Christoph Hellwig <hch(a)lst.de>
block: never reduce ra_pages in blk_apply_bdi_limits
Shannon Nelson <shannon.nelson(a)amd.com>
pds_core: make wait_context part of q_info
Brett Creeley <brett.creeley(a)amd.com>
pds_core: Remove unnecessary check in pds_client_adminq_cmd()
Brett Creeley <brett.creeley(a)amd.com>
pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result
Brett Creeley <brett.creeley(a)amd.com>
pds_core: Prevent possible adminq overflow/stuck condition
Daniel Golle <daniel(a)makrotopia.org>
net: dsa: mt7530: sync driver-specific behavior of MT7531 variants
Cong Wang <xiyou.wangcong(a)gmail.com>
net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
Cong Wang <xiyou.wangcong(a)gmail.com>
net_sched: hfsc: Fix a UAF vulnerability in class handling
Al Viro <viro(a)zeniv.linux.org.uk>
fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
Bo-Cun Chen <bc-bocun.chen(a)mediatek.com>
net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration
Tung Nguyen <tung.quang.nguyen(a)est.tech>
tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
Qingfang Deng <qingfang.deng(a)siflower.com.cn>
net: phy: leds: fix memory leak
Justin Iurman <justin.iurman(a)uliege.be>
net: lwtunnel: disable BHs when required
Chenyuan Yang <chenyuan0y(a)gmail.com>
scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()
Anastasia Kovaleva <a.kovaleva(a)yadro.com>
scsi: core: Clear flags for scsi_cmnd that did not complete
Henry Martin <bsdhenrymartin(a)gmail.com>
net/mlx5: Move ttc allocation after switch case to prevent leaks
Henry Martin <bsdhenrymartin(a)gmail.com>
net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table()
Dongli Zhang <dongli.zhang(a)oracle.com>
vhost-scsi: Fix vhost_scsi_send_status()
Dongli Zhang <dongli.zhang(a)oracle.com>
vhost-scsi: Fix vhost_scsi_send_bad_target()
Mike Christie <michael.christie(a)oracle.com>
vhost-scsi: Add better resource allocation failure handling
T.J. Mercier <tjmercier(a)google.com>
cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
Johannes Thumshirn <johannes.thumshirn(a)wdc.com>
btrfs: zoned: return EIO on RAID1 block group write pointer mismatch
Qu Wenruo <wqu(a)suse.com>
btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
Johan Hovold <johan+linaro(a)kernel.org>
cpufreq: fix compile-test defaults
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
cpufreq: Do not enable by default during compile testing
Marc Zyngier <maz(a)kernel.org>
cpufreq: cppc: Fix invalid return value in .get() callback
Chenyuan Yang <chenyuan0y(a)gmail.com>
scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
Henry Martin <bsdhenrymartin(a)gmail.com>
cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
Henry Martin <bsdhenrymartin(a)gmail.com>
cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
Henry Martin <bsdhenrymartin(a)gmail.com>
cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()
Arnd Bergmann <arnd(a)arndb.de>
dma/contiguous: avoid warning about unused size_bytes
Andre Przywara <andre.przywara(a)arm.com>
cpufreq: sun50i: prevent out-of-bounds access
David Howells <dhowells(a)redhat.com>
ceph: Fix incorrect flush end position calculation
Nathan Chancellor <nathan(a)kernel.org>
lib/Kconfig.ubsan: Remove 'default UBSAN' from UBSAN_INTEGER_WRAP
Alex Deucher <alexander.deucher(a)amd.com>
drm/amd/display/dml2: use vzalloc rather than kzalloc
Rohit Chavan <roheetchavan(a)gmail.com>
drm/amd/display: Fix unnecessary cast warnings from checkpatch
Matt Roper <matthew.d.roper(a)intel.com>
drm/xe/bmg: Add one additional PCI ID
Jonathan Currier <dullfire(a)yahoo.com>
net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads
Peter Griffin <peter.griffin(a)linaro.org>
scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set
Peter Griffin <peter.griffin(a)linaro.org>
scsi: ufs: exynos: Move UFS shareability value to drvdata
Peter Griffin <peter.griffin(a)linaro.org>
scsi: ufs: exynos: Add gs101_ufs_drv_init() hook and enable WriteBooster
Tudor Ambarus <tudor.ambarus(a)linaro.org>
scsi: ufs: exynos: Remove superfluous function parameter
Tudor Ambarus <tudor.ambarus(a)linaro.org>
scsi: ufs: exynos: Remove empty drv_init method
Namjae Jeon <linkinjeon(a)kernel.org>
ksmbd: fix use-after-free in __smb2_lease_break_noti()
Namjae Jeon <linkinjeon(a)kernel.org>
ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL
Namjae Jeon <linkinjeon(a)kernel.org>
ksmbd: add netdev-up/down event debug print
Namjae Jeon <linkinjeon(a)kernel.org>
ksmbd: use __GFP_RETRY_MAYFAIL
Andrzej Kacprowski <Andrzej.Kacprowski(a)intel.com>
accel/ivpu: Fix the NPU's DPU frequency calculation
Jacek Lawrynowicz <jacek.lawrynowicz(a)linux.intel.com>
accel/ivpu: Add auto selection logic for job scheduler
Jonathan Currier <dullfire(a)yahoo.com>
PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads
Thomas Gleixner <tglx(a)linutronix.de>
PCI/MSI: Handle the NOMASK flag correctly for all PCI/MSI backends
Roger Pau Monne <roger.pau(a)citrix.com>
PCI/MSI: Convert pci_msi_ignore_mask to per MSI domain flag
Niklas Schnelle <schnelle(a)linux.ibm.com>
s390/pci: Support mmap() of PCI resources except for ISM devices
Niklas Schnelle <schnelle(a)linux.ibm.com>
s390/pci: Report PCI error recovery results via SCLP
Niklas Schnelle <schnelle(a)linux.ibm.com>
s390/sclp: Allow user-space to provide PCI reports for optical modules
Tudor Ambarus <tudor.ambarus(a)linaro.org>
scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get
Zijun Hu <quic_zijuhu(a)quicinc.com>
of: resolver: Fix device node refcount leakage in of_resolve_phandles()
Rob Herring (Arm) <robh(a)kernel.org>
of: resolver: Simplify of_resolve_phandles() using __free()
Siddharth Vadapalli <s-vadapalli(a)ti.com>
arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix serdes_ln_ctrl reg-masks
Manorit Chawdhry <m-chawdhry(a)ti.com>
arm64: dts: ti: Refactor J784s4 SoC files to a common file
Sergiu Cuciurean <sergiu.cuciurean(a)analog.com>
iio: adc: ad7768-1: Fix conversion result sign
Jonathan Cameron <Jonathan.Cameron(a)huawei.com>
iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: fix VTU methods for 6320 family
Ming Lei <ming.lei(a)redhat.com>
block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone
Christoph Hellwig <hch(a)lst.de>
block: remove the ioprio field from struct request
Christoph Hellwig <hch(a)lst.de>
block: remove the write_hint field from struct request
Hans de Goede <hdegoede(a)redhat.com>
media: ov08x40: Add missing ov08x40_identify_module() call on stream-start
Hans de Goede <hdegoede(a)redhat.com>
media: ov08x40: Move ov08x40_identify_module() function up
André Apitzsch <git(a)apitzsch.eu>
media: i2c: imx214: Fix link frequency validation
André Apitzsch <git(a)apitzsch.eu>
media: i2c: imx214: Check number of lanes from device tree
André Apitzsch <git(a)apitzsch.eu>
media: i2c: imx214: Replace register addresses with macros
André Apitzsch <git(a)apitzsch.eu>
media: i2c: imx214: Convert to CCI register access helpers
André Apitzsch <git(a)apitzsch.eu>
media: i2c: imx214: Simplify with dev_err_probe()
André Apitzsch <git(a)apitzsch.eu>
media: i2c: imx214: Use subdev active state
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
PM: EM: Address RCU-related sparse warnings
Li RongQing <lirongqing(a)baidu.com>
PM: EM: use kfree_rcu() to simplify the code
Tudor Ambarus <tudor.ambarus(a)linaro.org>
mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get
Tudor Ambarus <tudor.ambarus(a)linaro.org>
soc: qcom: ice: introduce devm_of_qcom_ice_get
Jinjiang Tu <tujinjiang(a)huawei.com>
mm/vmscan: don't try to reclaim hwpoison folio
Steven Rostedt <rostedt(a)goodmis.org>
tracing: Verify event formats that have "%*p.."
Steven Rostedt <rostedt(a)goodmis.org>
tracing: Add __print_dynamic_array() helper
Thorsten Leemhuis <linux(a)leemhuis.info>
module: sign with sha512 instead of sha1 by default
-------------
Diffstat:
Documentation/bpf/bpf_devel_QA.rst | 8 +
Makefile | 4 +-
arch/arm/crypto/Kconfig | 10 +-
.../arm64/boot/dts/ti/k3-j784s4-j742s2-common.dtsi | 148 ++
.../boot/dts/ti/k3-j784s4-j742s2-main-common.dtsi | 2673 +++++++++++++++++++
...tsi => k3-j784s4-j742s2-mcu-wakeup-common.dtsi} | 2 +-
...l.dtsi => k3-j784s4-j742s2-thermal-common.dtsi} | 0
arch/arm64/boot/dts/ti/k3-j784s4-main.dtsi | 2705 +-------------------
arch/arm64/boot/dts/ti/k3-j784s4.dtsi | 133 +-
arch/arm64/crypto/Kconfig | 6 +-
arch/loongarch/Kconfig | 1 +
arch/loongarch/include/asm/fpu.h | 33 +-
arch/loongarch/include/asm/lbt.h | 10 +-
arch/loongarch/include/asm/ptrace.h | 4 +-
arch/loongarch/kernel/fpu.S | 6 +
arch/loongarch/kernel/lbt.S | 4 +
arch/loongarch/kernel/signal.c | 21 -
arch/loongarch/kernel/traps.c | 20 +-
arch/loongarch/kvm/vcpu.c | 8 +
arch/loongarch/mm/hugetlbpage.c | 2 +-
arch/loongarch/mm/init.c | 3 -
arch/mips/crypto/Kconfig | 7 +-
arch/mips/include/asm/mips-cm.h | 22 +
arch/mips/kernel/mips-cm.c | 14 +
arch/parisc/kernel/pdt.c | 2 +
arch/powerpc/crypto/Kconfig | 7 +-
arch/riscv/crypto/Kconfig | 1 -
arch/riscv/include/asm/alternative-macros.h | 21 +-
arch/riscv/include/asm/cacheflush.h | 15 +-
arch/riscv/kernel/probes/uprobes.c | 10 +-
arch/s390/Kconfig | 4 +-
arch/s390/crypto/Kconfig | 3 +-
arch/s390/include/asm/pci.h | 3 +
arch/s390/include/asm/sclp.h | 33 +
arch/s390/kvm/intercept.c | 2 +-
arch/s390/kvm/interrupt.c | 8 +-
arch/s390/kvm/kvm-s390.c | 10 +-
arch/s390/kvm/trace-s390.h | 4 +-
arch/s390/pci/Makefile | 2 +-
arch/s390/pci/pci_event.c | 21 +-
arch/s390/pci/pci_fixup.c | 23 +
arch/s390/pci/pci_report.c | 111 +
arch/s390/pci/pci_report.h | 16 +
arch/um/include/linux/time-internal.h | 2 +
arch/um/kernel/skas/syscall.c | 11 +
arch/x86/crypto/Kconfig | 11 +-
arch/x86/entry/entry.S | 2 +-
arch/x86/events/core.c | 2 +-
arch/x86/include/asm/cpufeatures.h | 1 +
arch/x86/include/asm/intel-family.h | 2 +
arch/x86/kernel/cpu/bugs.c | 36 +-
arch/x86/kernel/i8253.c | 3 +-
arch/x86/kvm/svm/avic.c | 66 +-
arch/x86/kvm/vmx/posted_intr.c | 28 +-
arch/x86/kvm/x86.c | 20 +-
arch/x86/lib/x86-opcode-map.txt | 4 +-
arch/x86/mm/tlb.c | 6 +-
arch/x86/pci/xen.c | 8 +-
arch/x86/xen/enlighten_pvh.c | 19 +-
block/blk-merge.c | 26 +-
block/blk-mq.c | 6 +-
block/blk-settings.c | 8 +-
block/mq-deadline.c | 13 +-
crypto/Kconfig | 3 +
crypto/crypto_null.c | 37 +-
drivers/accel/ivpu/ivpu_drv.c | 10 +-
drivers/accel/ivpu/ivpu_drv.h | 2 +
drivers/accel/ivpu/ivpu_fw.c | 18 +-
drivers/accel/ivpu/ivpu_fw.h | 3 +
drivers/accel/ivpu/ivpu_hw.h | 12 +-
drivers/accel/ivpu/ivpu_hw_btrs.c | 128 +-
drivers/accel/ivpu/ivpu_hw_btrs.h | 6 +-
drivers/accel/ivpu/ivpu_job.c | 14 +-
drivers/accel/ivpu/ivpu_sysfs.c | 24 +
drivers/acpi/ec.c | 28 +
drivers/acpi/pptt.c | 4 +-
drivers/ata/libata-scsi.c | 25 +-
drivers/base/base.h | 17 +
drivers/base/bus.c | 2 +-
drivers/base/core.c | 38 +-
drivers/base/dd.c | 7 +-
drivers/char/misc.c | 2 +-
drivers/char/virtio_console.c | 7 +-
drivers/clk/clk.c | 4 +
drivers/comedi/drivers/jr3_pci.c | 2 +-
drivers/cpufreq/Kconfig.arm | 20 +-
drivers/cpufreq/apple-soc-cpufreq.c | 10 +-
drivers/cpufreq/cppc_cpufreq.c | 2 +-
drivers/cpufreq/scmi-cpufreq.c | 10 +-
drivers/cpufreq/scpi-cpufreq.c | 13 +-
drivers/cpufreq/sun50i-cpufreq-nvmem.c | 18 +-
drivers/crypto/atmel-sha204a.c | 6 +
drivers/crypto/ccp/sp-pci.c | 1 +
drivers/cxl/core/regs.c | 4 -
drivers/dma/dmatest.c | 6 +-
drivers/firmware/stratix10-svc.c | 14 +-
drivers/gpio/gpiolib-of.c | 6 +-
drivers/gpu/drm/amd/amdgpu/amdgpu.h | 1 -
drivers/gpu/drm/amd/amdgpu/amdgpu_gfx.c | 14 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 19 +-
drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 8 +-
drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 12 +-
drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 6 +-
drivers/gpu/drm/amd/amdgpu/gmc_v10_0.c | 4 +-
drivers/gpu/drm/amd/amdgpu/gmc_v11_0.c | 4 +-
drivers/gpu/drm/amd/amdgpu/gmc_v12_0.c | 4 +-
drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c | 2 +-
drivers/gpu/drm/amd/amdgpu/psp_v11_0.c | 2 +-
drivers/gpu/drm/amd/amdgpu/psp_v13_0.c | 2 +-
drivers/gpu/drm/amd/amdgpu/psp_v14_0.c | 2 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 9 +-
.../drm/amd/display/dc/dml2/dml21/dml21_wrapper.c | 11 +-
drivers/gpu/drm/amd/display/dc/dml2/dml2_wrapper.c | 6 +-
drivers/gpu/drm/panel/panel-jadard-jd9365da-h3.c | 4 +-
drivers/gpu/drm/xe/xe_wa_oob.rules | 2 +
drivers/i3c/master/svc-i3c-master.c | 17 +-
drivers/iio/adc/ad7768-1.c | 5 +-
drivers/infiniband/hw/qib/qib_fs.c | 1 +
drivers/iommu/amd/iommu.c | 2 +-
drivers/iommu/iommu.c | 8 +
drivers/irqchip/irq-gic-v2m.c | 2 +-
drivers/mailbox/pcc.c | 15 +-
drivers/mcb/mcb-parse.c | 2 +-
drivers/md/raid1.c | 26 +-
drivers/media/i2c/Kconfig | 1 +
drivers/media/i2c/imx214.c | 934 ++++---
drivers/media/i2c/ov08x40.c | 78 +-
drivers/misc/lkdtm/perms.c | 14 +-
drivers/misc/mchp_pci1xxxx/mchp_pci1xxxx_gpio.c | 8 +-
drivers/misc/mei/hw-me-regs.h | 1 +
drivers/misc/mei/pci-me.c | 1 +
drivers/misc/mei/vsc-tp.c | 26 +-
drivers/mmc/host/sdhci-msm.c | 2 +-
drivers/net/dsa/mt7530.c | 6 +-
drivers/net/dsa/mv88e6xxx/chip.c | 27 +-
drivers/net/ethernet/amd/pds_core/adminq.c | 36 +-
drivers/net/ethernet/amd/pds_core/auxbus.c | 3 -
drivers/net/ethernet/amd/pds_core/core.c | 9 +-
drivers/net/ethernet/amd/pds_core/core.h | 4 +-
drivers/net/ethernet/amd/pds_core/devlink.c | 4 +-
drivers/net/ethernet/mediatek/mtk_eth_soc.c | 24 +-
drivers/net/ethernet/mediatek/mtk_eth_soc.h | 10 +-
.../net/ethernet/mellanox/mlx5/core/lib/fs_ttc.c | 26 +-
drivers/net/ethernet/sun/niu.c | 2 +
drivers/net/phy/microchip.c | 46 +-
drivers/net/phy/phy_led_triggers.c | 23 +-
drivers/net/vmxnet3/vmxnet3_xdp.c | 2 +-
drivers/net/xen-netfront.c | 19 +-
drivers/ntb/hw/amd/ntb_hw_amd.c | 1 +
drivers/ntb/hw/idt/ntb_hw_idt.c | 18 +-
drivers/nvme/host/core.c | 9 +
drivers/nvme/host/multipath.c | 2 +-
drivers/nvme/target/fc.c | 25 +-
drivers/of/resolver.c | 37 +-
drivers/pci/msi/msi.c | 38 +-
drivers/phy/rockchip/phy-rockchip-usbdp.c | 1 -
drivers/pinctrl/pinctrl-mcp23s08.c | 23 +-
drivers/pinctrl/renesas/pinctrl-rza2.c | 3 +
drivers/regulator/rk808-regulator.c | 4 +-
drivers/rtc/rtc-pcf85063.c | 19 +-
drivers/s390/char/sclp.h | 14 -
drivers/s390/char/sclp_con.c | 17 +
drivers/s390/char/sclp_pci.c | 19 +-
drivers/s390/char/sclp_tty.c | 12 +
drivers/s390/net/ism_drv.c | 1 -
drivers/scsi/hisi_sas/hisi_sas_main.c | 20 +
drivers/scsi/mpi3mr/mpi3mr_fw.c | 2 +-
drivers/scsi/pm8001/pm8001_sas.c | 1 +
drivers/scsi/scsi.c | 36 +-
drivers/scsi/scsi_lib.c | 6 +-
drivers/scsi/sd.c | 6 +-
drivers/soc/qcom/ice.c | 48 +
drivers/spi/spi-imx.c | 5 +-
drivers/spi/spi-tegra210-quad.c | 6 +-
drivers/thunderbolt/tb.c | 16 +-
drivers/tty/serial/msm_serial.c | 6 +
drivers/tty/serial/sifive.c | 6 +
drivers/tty/vt/selection.c | 5 +-
drivers/ufs/core/ufs-mcq.c | 12 +-
drivers/ufs/core/ufshcd.c | 2 +
drivers/ufs/host/ufs-exynos.c | 106 +-
drivers/ufs/host/ufs-exynos.h | 8 +-
drivers/ufs/host/ufs-qcom.c | 2 +-
drivers/usb/cdns3/cdns3-gadget.c | 2 +
drivers/usb/chipidea/ci_hdrc_imx.c | 44 +-
drivers/usb/class/cdc-wdm.c | 21 +-
drivers/usb/core/quirks.c | 9 +
drivers/usb/dwc3/dwc3-pci.c | 10 +
drivers/usb/dwc3/dwc3-xilinx.c | 4 +-
drivers/usb/dwc3/gadget.c | 28 +-
drivers/usb/gadget/udc/aspeed-vhub/dev.c | 3 +
drivers/usb/host/max3421-hcd.c | 7 +
drivers/usb/host/ohci-pci.c | 23 +
drivers/usb/host/xhci-hub.c | 30 +-
drivers/usb/host/xhci-mvebu.c | 10 -
drivers/usb/host/xhci-mvebu.h | 6 -
drivers/usb/host/xhci-plat.c | 2 +-
drivers/usb/host/xhci-ring.c | 75 +-
drivers/usb/host/xhci.c | 4 +-
drivers/usb/host/xhci.h | 4 +-
drivers/usb/serial/ftdi_sio.c | 2 +
drivers/usb/serial/ftdi_sio_ids.h | 5 +
drivers/usb/serial/option.c | 3 +
drivers/usb/serial/usb-serial-simple.c | 7 +
drivers/usb/storage/unusual_uas.h | 7 +
drivers/usb/typec/class.c | 24 +-
drivers/usb/typec/class.h | 1 +
drivers/vhost/scsi.c | 80 +-
drivers/xen/Kconfig | 2 +-
fs/btrfs/file.c | 9 +-
fs/btrfs/zoned.c | 1 -
fs/ceph/inode.c | 2 +-
fs/ext4/block_validity.c | 5 +-
fs/ext4/inode.c | 9 +-
fs/iomap/buffered-io.c | 2 +-
fs/namespace.c | 69 +-
fs/netfs/main.c | 4 +
fs/ntfs3/file.c | 20 +-
fs/smb/client/sess.c | 60 +-
fs/smb/client/smb1ops.c | 36 +
fs/smb/server/asn1.c | 6 +-
fs/smb/server/auth.c | 19 +-
fs/smb/server/connection.c | 8 +-
fs/smb/server/crypto_ctx.c | 6 +-
fs/smb/server/glob.h | 2 +
fs/smb/server/ksmbd_netlink.h | 3 +-
fs/smb/server/ksmbd_work.c | 10 +-
fs/smb/server/mgmt/ksmbd_ida.c | 11 +-
fs/smb/server/mgmt/share_config.c | 10 +-
fs/smb/server/mgmt/tree_connect.c | 5 +-
fs/smb/server/mgmt/user_config.c | 8 +-
fs/smb/server/mgmt/user_session.c | 10 +-
fs/smb/server/misc.c | 11 +-
fs/smb/server/ndr.c | 10 +-
fs/smb/server/oplock.c | 12 +-
fs/smb/server/server.c | 4 +-
fs/smb/server/server.h | 1 +
fs/smb/server/smb2pdu.c | 42 +-
fs/smb/server/smb_common.c | 2 +-
fs/smb/server/smbacl.c | 23 +-
fs/smb/server/transport_ipc.c | 7 +-
fs/smb/server/transport_rdma.c | 10 +-
fs/smb/server/transport_tcp.c | 93 +-
fs/smb/server/transport_tcp.h | 2 +
fs/smb/server/unicode.c | 4 +-
fs/smb/server/vfs.c | 12 +-
fs/smb/server/vfs_cache.c | 18 +-
fs/splice.c | 2 +-
fs/xfs/xfs_aops.c | 41 +-
fs/xfs/xfs_qm_bhv.c | 49 +-
fs/xfs/xfs_super.c | 8 +-
include/drm/intel/i915_pciids.h | 1 +
include/linux/blk-mq.h | 8 +-
include/linux/energy_model.h | 12 +-
include/linux/msi.h | 3 +-
include/linux/pci.h | 2 +
include/linux/pci_ids.h | 1 +
include/net/netfilter/nft_fib.h | 21 +
include/soc/qcom/ice.h | 2 +
include/trace/events/block.h | 6 +-
include/trace/stages/stage3_trace_output.h | 8 +
include/trace/stages/stage7_class_define.h | 1 +
include/uapi/drm/ivpu_accel.h | 4 +-
init/Kconfig | 2 +-
io_uring/io_uring.c | 15 +-
io_uring/refs.h | 7 +
kernel/bpf/bpf_cgrp_storage.c | 11 +-
kernel/bpf/hashtab.c | 6 +-
kernel/bpf/preload/bpf_preload_kern.c | 1 +
kernel/bpf/syscall.c | 6 +-
kernel/bpf/verifier.c | 32 +
kernel/cgroup/cgroup.c | 29 +
kernel/cgroup/cpuset-internal.h | 1 +
kernel/cgroup/cpuset.c | 14 +
kernel/dma/contiguous.c | 3 +-
kernel/events/core.c | 6 +-
kernel/irq/msi.c | 2 +-
kernel/module/Kconfig | 1 +
kernel/panic.c | 6 +
kernel/power/energy_model.c | 47 +-
kernel/sched/ext.c | 4 +-
kernel/time/tick-common.c | 22 +
kernel/trace/bpf_trace.c | 7 +-
kernel/trace/trace_events.c | 7 +
lib/Kconfig.ubsan | 1 -
lib/crypto/Kconfig | 37 +-
lib/test_ubsan.c | 18 +-
mm/vmscan.c | 7 +
net/9p/client.c | 30 +-
net/9p/trans_fd.c | 17 +-
net/core/lwtunnel.c | 26 +-
net/core/selftests.c | 18 +-
net/ipv4/netfilter/nft_fib_ipv4.c | 11 +-
net/ipv6/netfilter/nft_fib_ipv6.c | 19 +-
net/sched/sch_hfsc.c | 23 +-
net/tipc/monitor.c | 3 +-
rust/kernel/firmware.rs | 8 +-
samples/trace_events/trace-events-sample.h | 13 +-
scripts/Makefile.lib | 2 +-
scripts/Makefile.vmlinux | 4 +
sound/soc/codecs/wcd934x.c | 2 +-
sound/soc/fsl/fsl_asrc_dma.c | 15 +-
sound/virtio/virtio_pcm.c | 21 +-
tools/arch/x86/lib/x86-opcode-map.txt | 4 +-
tools/bpf/bpftool/prog.c | 1 +
tools/objtool/check.c | 36 +-
tools/testing/selftests/bpf/network_helpers.c | 33 +-
.../selftests/bpf/prog_tests/xdp_cpumap_attach.c | 44 +-
.../selftests/bpf/prog_tests/xdp_devmap_attach.c | 8 +-
.../bpf/progs/test_xdp_with_cpumap_helpers.c | 7 +-
tools/testing/selftests/mincore/mincore_selftest.c | 3 -
tools/testing/selftests/ublk/test_stripe_04.sh | 24 +
312 files changed, 6080 insertions(+), 4681 deletions(-)
4 months, 3 weeks
- 13
- 293
[PATCH 6.6 000/196] 6.6.89-rc2 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 6.6.89 release.
There are 196 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sat, 03 May 2025 08:13:56 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.89-rc2…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 6.6.89-rc2
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool: Silence more KCOV warnings, part 2
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool: Ignore end-of-section jumps for KCOV/GCOV
Hannes Reinecke <hare(a)kernel.org>
nvme: fixup scan failure for non-ANA multipath controllers
Thomas Bogendoerfer <tsbogend(a)alpha.franken.de>
MIPS: cm: Fix warning if MIPS_CM is disabled
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: enable STU methods for 6320 family
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: enable PVT for 6321 switch
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
Baokun Li <libaokun1(a)huawei.com>
ext4: goto right label 'out_mmap_sem' in ext4_setattr()
Ian Abbott <abbotti(a)mev.co.uk>
comedi: jr3_pci: Fix synchronous deletion of timer
Daniel Borkmann <daniel(a)iogearbox.net>
vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
driver core: fix potential NULL pointer dereference in dev_uevent()
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
driver core: introduce device_set_driver() helper
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
Revert "drivers: core: synchronize really_probe() and dev_uevent()"
Ard Biesheuvel <ardb(a)kernel.org>
x86/pvh: Call C code via the kernel virtual mapping
Tamura Dai <kirinode0(a)gmail.com>
spi: spi-imx: Add check for spi_imx_setupxfer()
Meir Elisha <meir.elisha(a)volumez.com>
md/raid1: Add check for missing source disk in process_checks()
Pi Xiange <xiange.pi(a)intel.com>
x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores
Mostafa Saleh <smostafa(a)google.com>
ubsan: Fix panic from test_ubsan_out_of_bounds
Breno Leitao <leitao(a)debian.org>
spi: tegra210-quad: add rate limiting and simplify timeout error message
Breno Leitao <leitao(a)debian.org>
spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
Yunlong Xing <yunlong.xing(a)unisoc.com>
loop: aio inherit the ioprio of original request
Andrew Jones <ajones(a)ventanamicro.com>
riscv: Provide all alternative macros all the time
Gou Hao <gouhao(a)uniontech.com>
iomap: skip unnecessary ifs_block_is_uptodate check
Fernando Fernandez Mancera <ffmancera(a)riseup.net>
x86/i8253: Call clockevent_i8253_disable() with interrupts disabled
Igor Pylypiv <ipylypiv(a)google.com>
scsi: pm80xx: Set phy_attached to zero when device is gone
Peter Griffin <peter.griffin(a)linaro.org>
scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init()
Xingui Yang <yangxingui(a)huawei.com>
scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
Ojaswin Mujoo <ojaswin(a)linux.ibm.com>
ext4: make block validity check resistent to sb bh corruption
Pali Rohár <pali(a)kernel.org>
cifs: Fix querying of WSL CHR and BLK reparse points over SMB1
Sebastian Andrzej Siewior <bigeasy(a)linutronix.de>
timekeeping: Add a lockdep override in tick_freeze()
Pali Rohár <pali(a)kernel.org>
cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode
Daniel Wagner <wagi(a)kernel.org>
nvmet-fc: put ref when assoc->del_work is already scheduled
Daniel Wagner <wagi(a)kernel.org>
nvmet-fc: take tgtport reference only once
Josh Poimboeuf <jpoimboe(a)kernel.org>
x86/bugs: Don't fill RSB on context switch with eIBRS
Josh Poimboeuf <jpoimboe(a)kernel.org>
x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
Josh Poimboeuf <jpoimboe(a)kernel.org>
x86/bugs: Use SBPB in write_ibpb() if applicable
Qiuxu Zhuo <qiuxu.zhuo(a)intel.com>
selftests/mincore: Allow read-ahead pages to reach the end of the file
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool: Stop UNRET validation on UD2
Uday Shankar <ushankar(a)purestorage.com>
nvme: multipath: fix return value of nvme_available_path
Hannes Reinecke <hare(a)kernel.org>
nvme: re-read ANA log page after ns scan completes
Jean-Marc Eurin <jmeurin(a)google.com>
ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
Mario Limonciello <mario.limonciello(a)amd.com>
ACPI: EC: Set ec_no_wakeup for Lenovo Go S
Hannes Reinecke <hare(a)kernel.org>
nvme: requeue namespace scan on missed AENs
Jason Andryuk <jason.andryuk(a)amd.com>
xen: Change xen-acpi-processor dom0 dependency
Gabriel Shahrouzi <gshahrouzi(a)gmail.com>
perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
Ming Lei <ming.lei(a)redhat.com>
selftests: ublk: fix test_stripe_04
Xiaogang Chen <xiaogang.chen(a)amd.com>
udmabuf: fix a buf size overflow issue during udmabuf creation
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
KVM: s390: Don't use %pK through debug printing
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
KVM: s390: Don't use %pK through tracepoints
Oleg Nesterov <oleg(a)redhat.com>
sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
Pavel Begunkov <asml.silence(a)gmail.com>
io_uring: always do atomic put from iowq
Lukas Stockmann <lukas.stockmann(a)siemens.com>
rtc: pcf85063: do a SW reset if POR failed
Dominique Martinet <asmadeus(a)codewreck.org>
9p/net: fix improper handling of bogus negative read/write replies
Basavaraj Natikar <Basavaraj.Natikar(a)amd.com>
ntb_hw_amd: Add NTB PCI ID for new gen CPU
Arnd Bergmann <arnd(a)arndb.de>
ntb: reduce stack usage in idt_scan_mws
Al Viro <viro(a)zeniv.linux.org.uk>
qibfs: fix _another_ leak
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool, lkdtm: Obfuscate the do_nothing() pointer
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool, regulator: rk808: Remove potential undefined behavior in rk806_set_mode_dcdc()
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler()
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool, panic: Disable SMAP in __stack_chk_fail()
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool: Silence more KCOV warnings
Mika Westerberg <mika.westerberg(a)linux.intel.com>
thunderbolt: Scan retimers after device router has been enumerated
Théo Lebrun <theo.lebrun(a)bootlin.com>
usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
Chenyuan Yang <chenyuan0y(a)gmail.com>
usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
Michal Pecio <michal.pecio(a)gmail.com>
usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running
Vinicius Costa Gomes <vinicius.gomes(a)intel.com>
dmaengine: dmatest: Fix dmatest waiting less when interrupted
John Stultz <jstultz(a)google.com>
sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
Edward Adam Davis <eadavis(a)qq.com>
fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
Alexander Stein <alexander.stein(a)mailbox.org>
usb: host: max3421-hcd: Add missing spi_device_id table
Sudeep Holla <sudeep.holla(a)arm.com>
mailbox: pcc: Always clear the platform ack interrupt first
Huisong Li <lihuisong(a)huawei.com>
mailbox: pcc: Fix the possible race in updation of chan_in_use flag
Yafang Shao <laoar.shao(a)gmail.com>
bpf: Reject attaching fexit/fmod_ret to __noreturn functions
Martin KaFai Lau <martin.lau(a)kernel.org>
bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates storage
Sewon Nam <swnam0729(a)gmail.com>
bpf: bpftool: Setting error code in do_loader()
Haoxiang Li <haoxiang_li2024(a)163.com>
s390/tty: Fix a potential memory leak bug
Haoxiang Li <haoxiang_li2024(a)163.com>
s390/sclp: Add check for get_zeroed_page()
Yu-Chun Lin <eleanor15x(a)gmail.com>
parisc: PDT: Fix missing prototype warning
Heiko Stuebner <heiko(a)sntech.de>
clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
Alexei Starovoitov <ast(a)kernel.org>
bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: null - Use spin lock instead of mutex
Devaraj Rangasamy <Devaraj.Rangasamy(a)amd.com>
crypto: ccp - Add support for PCI device 0x1134
Gregory CLEMENT <gregory.clement(a)bootlin.com>
MIPS: cm: Detect CM quirks from device tree
Chenyuan Yang <chenyuan0y(a)gmail.com>
pinctrl: renesas: rza2: Fix potential NULL pointer dereference
Oliver Neukum <oneukum(a)suse.com>
USB: wdm: add annotation
Oliver Neukum <oneukum(a)suse.com>
USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
Oliver Neukum <oneukum(a)suse.com>
USB: wdm: close race between wdm_open and wdm_wwan_port_stop
Oliver Neukum <oneukum(a)suse.com>
USB: wdm: handle IO errors in wdm_wwan_port_start
Oliver Neukum <oneukum(a)suse.com>
USB: VLI disk crashes if LPM is used
Miao Li <limiao(a)kylinos.cn>
usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
Miao Li <limiao(a)kylinos.cn>
usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
Mike Looijmans <mike.looijmans(a)topic.nl>
usb: dwc3: xilinx: Prevent spike in reset signal
Frode Isaksen <frode(a)meta.com>
usb: dwc3: gadget: check that event count does not exceed event buffer length
Huacai Chen <chenhuacai(a)kernel.org>
USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
Fedor Pchelkin <pchelkin(a)ispras.ru>
usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
Fedor Pchelkin <pchelkin(a)ispras.ru>
usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
Fedor Pchelkin <pchelkin(a)ispras.ru>
usb: chipidea: ci_hdrc_imx: fix usbmisc handling
Ralph Siemsen <ralph.siemsen(a)linaro.org>
usb: cdns3: Fix deadlock when using NCM gadget
Michal Pecio <michal.pecio(a)gmail.com>
usb: xhci: Fix invalid pointer dereference in Etron workaround
Craig Hesling <craig(a)hesling.com>
USB: serial: simple: add OWON HDS200 series oscilloscope support
Adam Xue <zxue(a)semtech.com>
USB: serial: option: add Sierra Wireless EM9291
Michael Ehrenreich <michideep(a)gmail.com>
USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
Ryo Takakura <ryotkkr98(a)gmail.com>
serial: sifive: lock port in startup()/shutdown() callbacks
Stephan Gerhold <stephan.gerhold(a)linaro.org>
serial: msm: Configure correct working mode before starting earlycon
Rengarajan S <rengarajan.s(a)microchip.com>
misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack
Rengarajan S <rengarajan.s(a)microchip.com>
misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration
Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com>
char: misc: register chrdev region with all possible minors
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Reset IRTE to host control if *new* route isn't postable
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Explicitly treat routing entry type changes as changes
Alexander Usyskin <alexander.usyskin(a)intel.com>
mei: me: add panther lake H DID
Damien Le Moal <dlemoal(a)kernel.org>
scsi: Improve CDL control
Oliver Neukum <oneukum(a)suse.com>
USB: storage: quirk for ADATA Portable HDD CH94
Damien Le Moal <dlemoal(a)kernel.org>
ata: libata-scsi: Fix ata_msense_control_ata_feature()
Damien Le Moal <dlemoal(a)kernel.org>
ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type
Damien Le Moal <dlemoal(a)kernel.org>
ata: libata-scsi: Improve CDL control
Haoxiang Li <haoxiang_li2024(a)163.com>
mcb: fix a double free bug in chameleon_parse_gdd()
Smita Koralahalli <Smita.KoralahalliChannabasappa(a)amd.com>
cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports
Sean Christopherson <seanjc(a)google.com>
KVM: SVM: Allocate IR data using atomic allocation
Jens Axboe <axboe(a)kernel.dk>
io_uring: fix 'sync' handling of io_fallback_tw()
Petr Tesarik <ptesarik(a)suse.com>
LoongArch: Remove a bogus reference to ZONE_DMA
Ming Wang <wangming01(a)loongson.cn>
LoongArch: Return NULL from huge_pte_offset() for invalid PMD
Suzuki K Poulose <suzuki.poulose(a)arm.com>
irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
Roman Li <Roman.Li(a)amd.com>
drm/amd/display: Force full update in gpu reset
Roman Li <Roman.Li(a)amd.com>
drm/amd/display: Fix gpu reset in multidisplay config
Fiona Klute <fiona.klute(a)gmx.de>
net: phy: microchip: force IRQ polling mode for lan88xx
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: selftests: initialize TCP header and skb payload with zero
Alexey Nepomnyashih <sdl(a)nppct.ru>
xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
Marek Behún <kabel(a)kernel.org>
crypto: atmel-sha204a - Set hwrng quality to lowest possible
Halil Pasic <pasic(a)linux.ibm.com>
virtio_console: fix missing byte order handling for cols and rows
Tiezhu Yang <yangtiezhu(a)loongson.cn>
LoongArch: Make do_xyz() exception handlers more robust
Tiezhu Yang <yangtiezhu(a)loongson.cn>
LoongArch: Make regs_irqs_disabled() more clear
Yuli Wang <wangyuli(a)uniontech.com>
LoongArch: Select ARCH_USE_MEMTEST
Luo Gengkun <luogengkun(a)huaweicloud.com>
perf/x86: Fix non-sampling (counting) events on certain x86 platforms
T.J. Mercier <tjmercier(a)google.com>
splice: remove duplicate noinline from pipe_clear_nowait
Sean Christopherson <seanjc(a)google.com>
iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
Shannon Nelson <shannon.nelson(a)amd.com>
pds_core: make wait_context part of q_info
Brett Creeley <brett.creeley(a)amd.com>
pds_core: Remove unnecessary check in pds_client_adminq_cmd()
Brett Creeley <brett.creeley(a)amd.com>
pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result
Daniel Golle <daniel(a)makrotopia.org>
net: dsa: mt7530: sync driver-specific behavior of MT7531 variants
Cong Wang <xiyou.wangcong(a)gmail.com>
net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
Cong Wang <xiyou.wangcong(a)gmail.com>
net_sched: hfsc: Fix a UAF vulnerability in class handling
Al Viro <viro(a)zeniv.linux.org.uk>
fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
Bo-Cun Chen <bc-bocun.chen(a)mediatek.com>
net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration
Tung Nguyen <tung.quang.nguyen(a)est.tech>
tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
Qingfang Deng <qingfang.deng(a)siflower.com.cn>
net: phy: leds: fix memory leak
Justin Iurman <justin.iurman(a)uliege.be>
net: lwtunnel: disable BHs when required
Anastasia Kovaleva <a.kovaleva(a)yadro.com>
scsi: core: Clear flags for scsi_cmnd that did not complete
Qu Wenruo <wqu(a)suse.com>
btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
Marc Zyngier <maz(a)kernel.org>
cpufreq: cppc: Fix invalid return value in .get() callback
Chenyuan Yang <chenyuan0y(a)gmail.com>
scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
Henry Martin <bsdhenrymartin(a)gmail.com>
cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
Henry Martin <bsdhenrymartin(a)gmail.com>
cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
Henry Martin <bsdhenrymartin(a)gmail.com>
cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()
Arnd Bergmann <arnd(a)arndb.de>
dma/contiguous: avoid warning about unused size_bytes
David Howells <dhowells(a)redhat.com>
ceph: Fix incorrect flush end position calculation
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
cpufreq/sched: Explicitly synchronize limits_changed flag handling
Vincent Guittot <vincent.guittot(a)linaro.org>
sched/cpufreq: Rework schedutil governor performance estimation
Vincent Guittot <vincent.guittot(a)linaro.org>
sched/topology: Consolidate and clean up access to a CPU's max compute capacity
Tudor Ambarus <tudor.ambarus(a)linaro.org>
scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get
Ma Ke <make24(a)iscas.ac.cn>
PCI: Fix reference leak in pci_register_host_bridge()
Zijun Hu <quic_zijuhu(a)quicinc.com>
of: resolver: Fix device node refcount leakage in of_resolve_phandles()
Rob Herring (Arm) <robh(a)kernel.org>
of: resolver: Simplify of_resolve_phandles() using __free()
Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com>
clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
clk: renesas: r9a07g04[34]: Fix typo for sel_shdi variable
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
clk: renesas: r9a07g04[34]: Use SEL_SDHI1_STS status configuration for SD1 mux
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
clk: renesas: rzg2l: Refactor SD mux driver
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
clk: renesas: rzg2l: Remove CPG_SDHI_DSEL from generic header
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
clk: renesas: rzg2l: Add struct clk_hw_data
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
clk: renesas: rzg2l: Use u32 for flag and mux_flags
Ninad Malwade <nmalwade(a)nvidia.com>
arm64: tegra: Remove the Orin NX/Nano suspend key
Sergiu Cuciurean <sergiu.cuciurean(a)analog.com>
iio: adc: ad7768-1: Fix conversion result sign
Jonathan Cameron <Jonathan.Cameron(a)huawei.com>
iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
Srinivas Kandagatla <srinivas.kandagatla(a)linaro.org>
ASoC: q6apm-dai: make use of q6apm_get_hw_pointer
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
ASoC: qcom: Fix trivial code style issues
Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de>
ASoC: qcom: lpass: Make asoc_qcom_lpass_cpu_platform_remove() return void
Srinivas Kandagatla <srinivas.kandagatla(a)linaro.org>
ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
ASoC: qcom: q6apm-dai: drop unused 'q6apm_dai_rtd' fields
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: fix VTU methods for 6320 family
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: fix internal PHYs for 6320 family
Haoxiang Li <haoxiang_li2024(a)163.com>
auxdisplay: hd44780: Fix an API misuse in hd44780.c
Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de>
auxdisplay: hd44780: Convert to platform remove callback returning void
Tudor Ambarus <tudor.ambarus(a)linaro.org>
mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get
Tudor Ambarus <tudor.ambarus(a)linaro.org>
soc: qcom: ice: introduce devm_of_qcom_ice_get
Nikita Zhandarovich <n.zhandarovich(a)fintech.ru>
media: vimc: skip .s_stream() for stopped entities
Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com>
media: subdev: Add v4l2_subdev_is_streaming()
Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com>
media: subdev: Improve v4l2_subdev_enable/disable_streams_fallback
Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com>
media: subdev: Fix use of sd->enabled_streams in call_s_stream()
Steven Rostedt <rostedt(a)goodmis.org>
tracing: Verify event formats that have "%*p.."
Steven Rostedt <rostedt(a)goodmis.org>
tracing: Add __print_dynamic_array() helper
Steven Rostedt (Google) <rostedt(a)goodmis.org>
tracing: Add __string_len() example
Shuai Xue <xueshuai(a)linux.alibaba.com>
x86/mce: use is_copy_from_user() to determine copy-from-user context
Tong Tiangen <tongtiangen(a)huawei.com>
x86/extable: Remove unused fixup type EX_TYPE_COPY
Thorsten Leemhuis <linux(a)leemhuis.info>
module: sign with sha512 instead of sha1 by default
-------------
Diffstat:
Documentation/scheduler/sched-capacity.rst | 13 +-
Makefile | 4 +-
.../arm64/boot/dts/nvidia/tegra234-p3768-0000.dtsi | 7 -
arch/loongarch/Kconfig | 1 +
arch/loongarch/include/asm/ptrace.h | 4 +-
arch/loongarch/kernel/traps.c | 20 ++-
arch/loongarch/mm/hugetlbpage.c | 2 +-
arch/loongarch/mm/init.c | 3 -
arch/mips/include/asm/mips-cm.h | 22 +++
arch/mips/kernel/mips-cm.c | 14 ++
arch/parisc/kernel/pdt.c | 2 +
arch/riscv/include/asm/alternative-macros.h | 21 +--
arch/s390/kvm/intercept.c | 2 +-
arch/s390/kvm/interrupt.c | 8 +-
arch/s390/kvm/kvm-s390.c | 10 +-
arch/s390/kvm/trace-s390.h | 4 +-
arch/x86/entry/entry.S | 2 +-
arch/x86/events/core.c | 2 +-
arch/x86/include/asm/asm.h | 3 -
arch/x86/include/asm/extable_fixup_types.h | 2 +-
arch/x86/include/asm/intel-family.h | 2 +
arch/x86/kernel/cpu/bugs.c | 36 ++---
arch/x86/kernel/cpu/mce/severity.c | 12 +-
arch/x86/kernel/i8253.c | 3 +-
arch/x86/kvm/svm/avic.c | 60 +++----
arch/x86/kvm/vmx/posted_intr.c | 28 ++--
arch/x86/kvm/x86.c | 3 +-
arch/x86/mm/extable.c | 9 --
arch/x86/mm/tlb.c | 6 +-
arch/x86/platform/pvh/head.S | 7 +-
crypto/crypto_null.c | 37 +++--
drivers/acpi/ec.c | 28 ++++
drivers/acpi/pptt.c | 4 +-
drivers/ata/libata-scsi.c | 25 ++-
drivers/auxdisplay/hd44780.c | 9 +-
drivers/base/base.h | 17 ++
drivers/base/bus.c | 2 +-
drivers/base/core.c | 38 ++++-
drivers/base/dd.c | 6 +-
drivers/block/loop.c | 2 +-
drivers/char/misc.c | 2 +-
drivers/char/virtio_console.c | 7 +-
drivers/clk/clk.c | 4 +
drivers/clk/renesas/r9a07g043-cpg.c | 28 +++-
drivers/clk/renesas/r9a07g044-cpg.c | 21 ++-
drivers/clk/renesas/rzg2l-cpg.c | 178 +++++++++++++++------
drivers/clk/renesas/rzg2l-cpg.h | 24 +--
drivers/comedi/drivers/jr3_pci.c | 2 +-
drivers/cpufreq/apple-soc-cpufreq.c | 10 +-
drivers/cpufreq/cppc_cpufreq.c | 2 +-
drivers/cpufreq/scmi-cpufreq.c | 10 +-
drivers/cpufreq/scpi-cpufreq.c | 13 +-
drivers/crypto/atmel-sha204a.c | 6 +
drivers/crypto/ccp/sp-pci.c | 1 +
drivers/cxl/core/regs.c | 4 -
drivers/dma-buf/udmabuf.c | 2 +-
drivers/dma/dmatest.c | 6 +-
drivers/gpio/gpiolib-of.c | 6 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 9 +-
drivers/iio/adc/ad7768-1.c | 5 +-
drivers/infiniband/hw/qib/qib_fs.c | 1 +
drivers/iommu/amd/iommu.c | 2 +-
drivers/irqchip/irq-gic-v2m.c | 2 +-
drivers/mailbox/pcc.c | 15 +-
drivers/mcb/mcb-parse.c | 2 +-
drivers/md/raid1.c | 26 +--
drivers/media/test-drivers/vimc/vimc-streamer.c | 6 +
drivers/media/v4l2-core/v4l2-subdev.c | 101 ++++++++----
drivers/misc/lkdtm/perms.c | 14 +-
drivers/misc/mchp_pci1xxxx/mchp_pci1xxxx_gpio.c | 8 +-
drivers/misc/mei/hw-me-regs.h | 1 +
drivers/misc/mei/pci-me.c | 1 +
drivers/mmc/host/sdhci-msm.c | 2 +-
drivers/net/dsa/mt7530.c | 6 +-
drivers/net/dsa/mv88e6xxx/chip.c | 27 +++-
drivers/net/ethernet/amd/pds_core/adminq.c | 36 ++---
drivers/net/ethernet/amd/pds_core/auxbus.c | 3 -
drivers/net/ethernet/amd/pds_core/core.c | 4 +-
drivers/net/ethernet/amd/pds_core/core.h | 2 +-
drivers/net/ethernet/amd/pds_core/devlink.c | 4 +-
drivers/net/ethernet/mediatek/mtk_eth_soc.c | 24 ++-
drivers/net/ethernet/mediatek/mtk_eth_soc.h | 10 +-
drivers/net/phy/microchip.c | 46 +-----
drivers/net/phy/phy_led_triggers.c | 23 +--
drivers/net/vmxnet3/vmxnet3_xdp.c | 2 +-
drivers/net/xen-netfront.c | 19 ++-
drivers/ntb/hw/amd/ntb_hw_amd.c | 1 +
drivers/ntb/hw/idt/ntb_hw_idt.c | 18 +--
drivers/nvme/host/core.c | 9 ++
drivers/nvme/host/multipath.c | 2 +-
drivers/nvme/target/fc.c | 25 ++-
drivers/of/resolver.c | 37 ++---
drivers/pci/probe.c | 9 +-
drivers/pinctrl/renesas/pinctrl-rza2.c | 3 +
drivers/regulator/rk808-regulator.c | 4 +-
drivers/rtc/rtc-pcf85063.c | 19 ++-
drivers/s390/char/sclp_con.c | 17 ++
drivers/s390/char/sclp_tty.c | 12 ++
drivers/scsi/hisi_sas/hisi_sas_main.c | 20 +++
drivers/scsi/pm8001/pm8001_sas.c | 1 +
drivers/scsi/scsi.c | 36 +++--
drivers/scsi/scsi_lib.c | 6 +-
drivers/soc/qcom/ice.c | 48 ++++++
drivers/spi/spi-imx.c | 5 +-
drivers/spi/spi-tegra210-quad.c | 6 +-
drivers/thunderbolt/tb.c | 16 +-
drivers/tty/serial/msm_serial.c | 6 +
drivers/tty/serial/sifive.c | 6 +
drivers/ufs/core/ufs-mcq.c | 12 +-
drivers/ufs/host/ufs-exynos.c | 10 +-
drivers/ufs/host/ufs-qcom.c | 2 +-
drivers/usb/cdns3/cdns3-gadget.c | 2 +
drivers/usb/chipidea/ci_hdrc_imx.c | 44 +++--
drivers/usb/class/cdc-wdm.c | 21 ++-
drivers/usb/core/quirks.c | 9 ++
drivers/usb/dwc3/dwc3-pci.c | 10 ++
drivers/usb/dwc3/dwc3-xilinx.c | 4 +-
drivers/usb/dwc3/gadget.c | 28 +++-
drivers/usb/gadget/udc/aspeed-vhub/dev.c | 3 +
drivers/usb/host/max3421-hcd.c | 7 +
drivers/usb/host/ohci-pci.c | 23 +++
drivers/usb/host/xhci-mvebu.c | 10 --
drivers/usb/host/xhci-mvebu.h | 6 -
drivers/usb/host/xhci-plat.c | 2 +-
drivers/usb/host/xhci-ring.c | 13 +-
drivers/usb/serial/ftdi_sio.c | 2 +
drivers/usb/serial/ftdi_sio_ids.h | 5 +
drivers/usb/serial/option.c | 3 +
drivers/usb/serial/usb-serial-simple.c | 7 +
drivers/usb/storage/unusual_uas.h | 7 +
drivers/xen/Kconfig | 2 +-
fs/btrfs/file.c | 9 +-
fs/ceph/inode.c | 2 +-
fs/ext4/block_validity.c | 5 +-
fs/ext4/inode.c | 9 +-
fs/iomap/buffered-io.c | 2 +-
fs/namespace.c | 69 ++++----
fs/ntfs3/file.c | 1 +
fs/smb/client/sess.c | 60 ++++---
fs/smb/client/smb1ops.c | 36 +++++
fs/splice.c | 2 +-
include/linux/energy_model.h | 1 -
include/media/v4l2-subdev.h | 25 ++-
include/soc/qcom/ice.h | 2 +
include/trace/stages/stage3_trace_output.h | 8 +
include/trace/stages/stage7_class_define.h | 1 +
init/Kconfig | 2 +-
io_uring/io_uring.c | 15 +-
io_uring/refs.h | 7 +
kernel/bpf/bpf_cgrp_storage.c | 11 +-
kernel/bpf/verifier.c | 32 ++++
kernel/dma/contiguous.c | 3 +-
kernel/events/core.c | 6 +-
kernel/module/Kconfig | 1 +
kernel/panic.c | 6 +
kernel/sched/core.c | 92 +++++------
kernel/sched/cpudeadline.c | 2 +-
kernel/sched/cpufreq_schedutil.c | 63 ++++++--
kernel/sched/deadline.c | 4 +-
kernel/sched/fair.c | 40 +++--
kernel/sched/rt.c | 2 +-
kernel/sched/sched.h | 30 +---
kernel/sched/topology.c | 7 +-
kernel/time/tick-common.c | 22 +++
kernel/trace/bpf_trace.c | 7 +-
kernel/trace/trace_events.c | 7 +
lib/test_ubsan.c | 18 ++-
net/9p/client.c | 30 ++--
net/core/lwtunnel.c | 26 ++-
net/core/selftests.c | 18 ++-
net/sched/sch_hfsc.c | 23 ++-
net/tipc/monitor.c | 3 +-
samples/trace_events/trace-events-sample.h | 18 ++-
scripts/Makefile.lib | 2 +-
sound/soc/codecs/wcd934x.c | 2 +-
sound/soc/qcom/apq8016_sbc.c | 2 +-
sound/soc/qcom/apq8096.c | 2 +-
sound/soc/qcom/common.c | 2 +-
sound/soc/qcom/lpass-apq8016.c | 4 +-
sound/soc/qcom/lpass-cpu.c | 7 +-
sound/soc/qcom/lpass-hdmi.c | 2 +-
sound/soc/qcom/lpass-ipq806x.c | 4 +-
sound/soc/qcom/lpass-platform.c | 2 +-
sound/soc/qcom/lpass-sc7180.c | 4 +-
sound/soc/qcom/lpass-sc7280.c | 2 +-
sound/soc/qcom/lpass.h | 4 +-
sound/soc/qcom/qdsp6/q6afe.c | 8 +-
sound/soc/qcom/qdsp6/q6apm-dai.c | 61 ++++---
sound/soc/qcom/qdsp6/q6asm.h | 20 +--
sound/soc/qcom/qdsp6/topology.c | 3 +-
sound/soc/qcom/sc7180.c | 2 +-
sound/soc/qcom/sc8280xp.c | 2 +-
sound/soc/qcom/sdm845.c | 2 +-
sound/soc/qcom/sdw.c | 2 +-
sound/soc/qcom/sm8250.c | 2 +-
sound/soc/qcom/storm.c | 2 +-
sound/virtio/virtio_pcm.c | 21 ++-
tools/bpf/bpftool/prog.c | 1 +
tools/objtool/check.c | 36 ++++-
tools/testing/selftests/mincore/mincore_selftest.c | 3 -
tools/testing/selftests/ublk/test_stripe_04.sh | 24 +++
201 files changed, 1788 insertions(+), 912 deletions(-)
4 months, 3 weeks
- 8
- 7
[PATCH] fs/eventpoll: fix endless busy loop after timeout has expired
by Max Kellermann
After commit 0a65bc27bd64 ("eventpoll: Set epoll timeout if it's in
the future"), the following program would immediately enter a busy
loop in the kernel:
```
int main() {
int e = epoll_create1(0);
struct epoll_event event = {.events = EPOLLIN};
epoll_ctl(e, EPOLL_CTL_ADD, 0, &event);
const struct timespec timeout = {.tv_nsec = 1};
epoll_pwait2(e, &event, 1, &timeout, 0);
}
```
This happens because the given (non-zero) timeout of 1 nanosecond
usually expires before ep_poll() is entered and then
ep_schedule_timeout() returns false, but `timed_out` is never set
because the code line that sets it is skipped. This quickly turns
into a soft lockup, RCU stalls and deadlocks, inflicting severe
headaches to the whole system.
When the timeout has expired, we don't need to schedule a hrtimer, but
we should set the `timed_out` variable. Therefore, I suggest moving
the ep_schedule_timeout() check into the `timed_out` expression
instead of skipping it.
Fixes: 0a65bc27bd64 ("eventpoll: Set epoll timeout if it's in the future")
Cc: Joe Damato <jdamato(a)fastly.com>
Cc: stable(a)vger.kernel.org
Signed-off-by: Max Kellermann <max.kellermann(a)ionos.com>
---
fs/eventpoll.c | 7 ++++---
1 file changed, 4 insertions(+), 3 deletions(-)
diff --git a/fs/eventpoll.c b/fs/eventpoll.c
index 4bc264b854c4..d4dbffdedd08 100644
--- a/fs/eventpoll.c
+++ b/fs/eventpoll.c
@@ -2111,9 +2111,10 @@ static int ep_poll(struct eventpoll *ep, struct epoll_event __user *events,
write_unlock_irq(&ep->lock);
- if (!eavail && ep_schedule_timeout(to))
- timed_out = !schedule_hrtimeout_range(to, slack,
- HRTIMER_MODE_ABS);
+ if (!eavail)
+ timed_out = !ep_schedule_timeout(to) ||
+ !schedule_hrtimeout_range(to, slack,
+ HRTIMER_MODE_ABS);
__set_current_state(TASK_RUNNING);
/*
--
2.47.2
4 months, 3 weeks
- 3
- 2
[PATCH 5.10 000/286] 5.10.237-rc1 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 5.10.237 release.
There are 286 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 01 May 2025 16:10:15 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.237-r…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 5.10.237-rc1
Stanimir Varbanov <stanimir.varbanov(a)linaro.org>
media: venus: hfi_parser: Check for instance after hfi platform get
Colin Ian King <colin.king(a)canonical.com>
media: venus: Fix uninitialized variable count being checked for zero
Krzysztof Kozlowski <krzk(a)kernel.org>
soc: samsung: exynos-chipid: correct helpers __init annotation
Rob Herring <robh(a)kernel.org>
PCI: Fix use-after-free in pci_bus_release_domain_nr()
Hannes Reinecke <hare(a)kernel.org>
nvme: fixup scan failure for non-ANA multipath controllers
Thomas Bogendoerfer <tsbogend(a)alpha.franken.de>
MIPS: cm: Fix warning if MIPS_CM is disabled
Sebastian Andrzej Siewior <bigeasy(a)linutronix.de>
xdp: Reset bpf_redirect_info before running a xdp's BPF prog.
Marek Behún <kabel(a)kernel.org>
crypto: atmel-sha204a - Set hwrng quality to lowest possible
Ian Abbott <abbotti(a)mev.co.uk>
comedi: jr3_pci: Fix synchronous deletion of timer
David Hildenbrand <david(a)redhat.com>
s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues
Meir Elisha <meir.elisha(a)volumez.com>
md/raid1: Add check for missing source disk in process_checks()
Igor Pylypiv <ipylypiv(a)google.com>
scsi: pm80xx: Set phy_attached to zero when device is gone
Ojaswin Mujoo <ojaswin(a)linux.ibm.com>
ext4: make block validity check resistent to sb bh corruption
Josh Poimboeuf <jpoimboe(a)kernel.org>
x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
Josh Poimboeuf <jpoimboe(a)kernel.org>
x86/bugs: Use SBPB in write_ibpb() if applicable
Qiuxu Zhuo <qiuxu.zhuo(a)intel.com>
selftests/mincore: Allow read-ahead pages to reach the end of the file
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool: Stop UNRET validation on UD2
Hannes Reinecke <hare(a)kernel.org>
nvme: re-read ANA log page after ns scan completes
Jean-Marc Eurin <jmeurin(a)google.com>
ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
Hannes Reinecke <hare(a)kernel.org>
nvme: requeue namespace scan on missed AENs
Ming Lei <ming.lei(a)redhat.com>
selftests: ublk: fix test_stripe_04
Xiaogang Chen <xiaogang.chen(a)amd.com>
udmabuf: fix a buf size overflow issue during udmabuf creation
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
KVM: s390: Don't use %pK through tracepoints
Oleg Nesterov <oleg(a)redhat.com>
sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
Arnd Bergmann <arnd(a)arndb.de>
ntb: reduce stack usage in idt_scan_mws
Al Viro <viro(a)zeniv.linux.org.uk>
qibfs: fix _another_ leak
Josh Poimboeuf <jpoimboe(a)kernel.org>
objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler()
Chenyuan Yang <chenyuan0y(a)gmail.com>
usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
Vinicius Costa Gomes <vinicius.gomes(a)intel.com>
dmaengine: dmatest: Fix dmatest waiting less when interrupted
Alexander Stein <alexander.stein(a)mailbox.org>
usb: host: max3421-hcd: Add missing spi_device_id table
Yu-Chun Lin <eleanor15x(a)gmail.com>
parisc: PDT: Fix missing prototype warning
Heiko Stuebner <heiko(a)sntech.de>
clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: null - Use spin lock instead of mutex
Gregory CLEMENT <gregory.clement(a)bootlin.com>
MIPS: cm: Detect CM quirks from device tree
Oliver Neukum <oneukum(a)suse.com>
USB: VLI disk crashes if LPM is used
Miao Li <limiao(a)kylinos.cn>
usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
Miao Li <limiao(a)kylinos.cn>
usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
Frode Isaksen <frode(a)meta.com>
usb: dwc3: gadget: check that event count does not exceed event buffer length
Huacai Chen <chenhuacai(a)loongson.cn>
USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
Ralph Siemsen <ralph.siemsen(a)linaro.org>
usb: cdns3: Fix deadlock when using NCM gadget
Craig Hesling <craig(a)hesling.com>
USB: serial: simple: add OWON HDS200 series oscilloscope support
Adam Xue <zxue(a)semtech.com>
USB: serial: option: add Sierra Wireless EM9291
Michael Ehrenreich <michideep(a)gmail.com>
USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
Ryo Takakura <ryotkkr98(a)gmail.com>
serial: sifive: lock port in startup()/shutdown() callbacks
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Reset IRTE to host control if *new* route isn't postable
Alexander Usyskin <alexander.usyskin(a)intel.com>
mei: me: add panther lake H DID
Oliver Neukum <oneukum(a)suse.com>
USB: storage: quirk for ADATA Portable HDD CH94
Haoxiang Li <haoxiang_li2024(a)163.com>
mcb: fix a double free bug in chameleon_parse_gdd()
Sean Christopherson <seanjc(a)google.com>
KVM: SVM: Allocate IR data using atomic allocation
Halil Pasic <pasic(a)linux.ibm.com>
virtio_console: fix missing byte order handling for cols and rows
Sean Christopherson <seanjc(a)google.com>
iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
Cong Wang <xiyou.wangcong(a)gmail.com>
net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
Cong Wang <xiyou.wangcong(a)gmail.com>
net_sched: hfsc: Fix a UAF vulnerability in class handling
Tung Nguyen <tung.quang.nguyen(a)est.tech>
tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
Qingfang Deng <qingfang.deng(a)siflower.com.cn>
net: phy: leds: fix memory leak
Henry Martin <bsdhenrymartin(a)gmail.com>
cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
Arnd Bergmann <arnd(a)arndb.de>
dma/contiguous: avoid warning about unused size_bytes
Matthew Auld <matthew.auld(a)intel.com>
drm/amdgpu/dma_buf: fix page_link check
Ramesh Errabolu <Ramesh.Errabolu(a)amd.com>
drm/amdgpu: Remove amdgpu_device arg from free_sgt api (v2)
Lee Jones <lee.jones(a)linaro.org>
drm/amd/amdgpu/amdgpu_vram_mgr: Add missing descriptions for 'dev' and 'dir'
Mark Brown <broonie(a)kernel.org>
selftests/mm: generate a temporary mountpoint for cgroup filesystem
Ma Ke <make24(a)iscas.ac.cn>
PCI: Fix reference leak in pci_register_host_bridge()
Pali Rohár <pali(a)kernel.org>
PCI: Assign PCI domain IDs by ida_alloc()
Kai-Heng Feng <kai.heng.feng(a)canonical.com>
PCI: Coalesce host bridge contiguous apertures
Boqun Feng <boqun.feng(a)gmail.com>
PCI: Introduce domain_nr in pci_host_bridge
Alexandra Diupina <adiupina(a)astralinux.ru>
cifs: avoid NULL pointer dereference in dbg call
Enzo Matsumiya <ematsumiya(a)suse.de>
cifs: print TIDs as hex
Herve Codina <herve.codina(a)bootlin.com>
backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
Sergiu Cuciurean <sergiu.cuciurean(a)analog.com>
iio: adc: ad7768-1: Fix conversion result sign
Jonathan Cameron <Jonathan.Cameron(a)huawei.com>
iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
Chenyuan Yang <chenyuan0y(a)gmail.com>
soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
Sam Protsenko <semen.protsenko(a)linaro.org>
soc: samsung: exynos-chipid: Pass revision reg offsets
Krzysztof Kozlowski <krzysztof.kozlowski(a)canonical.com>
soc: samsung: exynos-chipid: avoid soc_device_to_device()
Krzysztof Kozlowski <krzk(a)kernel.org>
soc: samsung: exynos-chipid: convert to driver and merge exynos-asv
Krzysztof Kozlowski <krzk(a)kernel.org>
soc: samsung: exynos-chipid: initialize later - with arch_initcall
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: fix VTU methods for 6320 family
Vikash Garodia <quic_vgarodia(a)quicinc.com>
media: venus: hfi_parser: refactor hfi packet parsing logic
Stanimir Varbanov <stanimir.varbanov(a)linaro.org>
media: venus: Get codecs and capabilities from hfi platform
Stanimir Varbanov <stanimir.varbanov(a)linaro.org>
media: venus: hfi_plat: Add codecs and capabilities ops
Stanimir Varbanov <stanimir.varbanov(a)linaro.org>
media: venus: Rename venus_caps to hfi_plat_caps
Stanimir Varbanov <stanimir.varbanov(a)linaro.org>
media: venus: Create hfi platform and move vpp/vsp there
Stanimir Varbanov <stanimir.varbanov(a)linaro.org>
media: venus: pm_helpers: Check instance state when calculate instance frequency
Stanimir Varbanov <stanimir.varbanov(a)linaro.org>
media: venus: hfi: Correct session init return error
Stanimir Varbanov <stanimir.varbanov(a)linaro.org>
media: venus: Limit HFI sessions to the maximum supported
Stanimir Varbanov <stanimir.varbanov(a)linaro.org>
media: venus: venc: Init the session only once in queue_setup
Murad Masimov <m.masimov(a)mt-integration.ru>
media: streamzap: fix race between device disconnection and urb callback
Sean Young <sean(a)mess.org>
media: streamzap: remove unused struct members
Sean Young <sean(a)mess.org>
media: streamzap: less chatter
Sean Young <sean(a)mess.org>
media: streamzap: no need for usb pid/vid in device name
Sean Young <sean(a)mess.org>
media: streamzap: remove unnecessary ir_raw_event_reset and handle
Douglas Raillard <douglas.raillard(a)arm.com>
tracing: Fix synth event printk format for str fields
Steven Rostedt (Google) <rostedt(a)goodmis.org>
tracing: Allow synthetic events to pass around stacktraces
Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com>
platform/x86: ISST: Correct command storage data length
Hans de Goede <hdegoede(a)redhat.com>
drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler()
Kunwu Chan <chentao(a)kylinos.cn>
pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
Miroslav Franc <mfranc(a)suse.cz>
s390/dasd: fix double module refcount decrement
Duoming Zhou <duoming(a)zju.edu.cn>
drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback()
Kirill A. Shutemov <kirill.shutemov(a)linux.intel.com>
mm: fix apply_to_existing_page_range()
Oleg Nesterov <oleg(a)redhat.com>
fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats
Chris Wilson <chris.p.wilson(a)intel.com>
drm/i915/gt: Cleanup partial engine discovery failures
Miaohe Lin <linmiaohe(a)huawei.com>
kernel/resource: fix kfree() of bootmem memory again
Abhishek Sahu <abhsahu(a)nvidia.com>
vfio/pci: fix memory leak during D3hot to D0 transition
Ming-Hung Tsai <mtsai(a)redhat.com>
dm cache: fix flushing uninitialized delayed_work on cache_ctr error
Pei Li <peili.dev(a)gmail.com>
jfs: Fix shift-out-of-bounds in dbDiscardAG
WangYuli <wangyuli(a)uniontech.com>
MIPS: ds1287: Match ds1287_set_base_clock() function types
WangYuli <wangyuli(a)uniontech.com>
MIPS: cevt-ds1287: Add missing ds1287.h include
WangYuli <wangyuli(a)uniontech.com>
MIPS: dec: Declare which_prom() as static
Eric Dumazet <edumazet(a)google.com>
net: defer final 'struct net' free in netns dismantle
Guixin Liu <kanie(a)linux.alibaba.com>
scsi: ufs: bsg: Set bsg_queue to NULL after removal
Tuo Li <islituo(a)gmail.com>
scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
Ilya Maximets <i.maximets(a)ovn.org>
openvswitch: fix lockup on tx to unregistering netdev with carrier
Felix Huettner <felix.huettner(a)mail.schwarz>
net: openvswitch: fix race on port output
Chen Hanxiao <chenhx.fnst(a)fujitsu.com>
ipvs: properly dereference pe in ip_vs_add_service
Vlad Buslov <vladbu(a)nvidia.com>
net/mlx5e: Fix use-after-free of encap entry in neigh update handler
Xiaxi Shen <shenxiaxi26(a)gmail.com>
ext4: fix timer use-after-free on failed mount
Li Nan <linan122(a)huawei.com>
blk-iocost: do not WARN if iocg was already offlined
Yu Kuai <yukuai3(a)huawei.com>
blk-cgroup: support to track if policy is online
Hou Tao <houtao1(a)huawei.com>
bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
Andrii Nakryiko <andrii(a)kernel.org>
bpf: avoid holding freeze_mutex during mmap operation
Paulo Alcantara <pc(a)manguebit.com>
smb: client: fix NULL ptr deref in crypto_aead_setkey()
Enzo Matsumiya <ematsumiya(a)suse.de>
smb: client: fix UAF in async decryption
Paulo Alcantara <pc(a)manguebit.com>
smb: client: fix potential UAF in cifs_stats_proc_show()
Paulo Alcantara <pc(a)manguebit.com>
smb: client: fix potential deadlock when releasing mids
Zhang Xiaoxu <zhangxiaoxu5(a)huawei.com>
cifs: Fix UAF in cifs_demultiplex_thread()
Paulo Alcantara <pc(a)manguebit.com>
smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
Paulo Alcantara <pc(a)manguebit.com>
smb: client: fix potential UAF in cifs_debug_files_proc_show()
WangYuli <wangyuli(a)uniontech.com>
nvmet-fc: Remove unused functions
Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com>
drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
Hersen Wu <hersenxs.wu(a)amd.com>
drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
Kang Yang <quic_kangyang(a)quicinc.com>
wifi: ath10k: avoid NULL pointer error during sdio remove
Miaoqian Lin <linmq006(a)gmail.com>
phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
Nathan Lynch <nathanl(a)linux.ibm.com>
powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
Chunguang Xu <chunguang.xu(a)shopee.com>
nvme: avoid double free special payload
Ard Biesheuvel <ardb(a)kernel.org>
x86/pvh: Call C code via the kernel virtual mapping
Kunihiko Hayashi <hayashi.kunihiko(a)socionext.com>
misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
Kunihiko Hayashi <hayashi.kunihiko(a)socionext.com>
misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
Kunihiko Hayashi <hayashi.kunihiko(a)socionext.com>
misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
mptcp: sockopt: fix getting IPV6_V6ONLY
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
mptcp: only inc MPJoinAckHMacFailure for HMAC failures
Gang Yan <yangang(a)kylinos.cn>
mptcp: fix NULL pointer in can_accept_new_subflow
Kuniyuki Iwashima <kuniyu(a)amazon.com>
tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
Nathan Chancellor <nathan(a)kernel.org>
kbuild: Add '-fno-builtin-wcslen'
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
cpufreq: Reference count policy in cpufreq_update_limits()
Rolf Eike Beer <eb(a)emlix.com>
drm/sti: remove duplicate object names
Chris Bainbridge <chris.bainbridge(a)gmail.com>
drm/nouveau: prime: fix ttm_bo_delayed_delete oops
Denis Arefev <arefev(a)swemel.ru>
drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
Denis Arefev <arefev(a)swemel.ru>
drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
Denis Arefev <arefev(a)swemel.ru>
drm/amd/pm/powerplay: Prevent division by zero
Nikita Zhandarovich <n.zhandarovich(a)fintech.ru>
drm/repaper: fix integer overflows in repeat functions
Thorsten Leemhuis <linux(a)leemhuis.info>
module: sign with sha512 instead of sha1 by default
Kan Liang <kan.liang(a)linux.intel.com>
perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX
Kan Liang <kan.liang(a)linux.intel.com>
perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
Dapeng Mi <dapeng1.mi(a)linux.intel.com>
perf/x86/intel: Allow to update user space GPRs from PEBS records
Xiangsheng Hou <xiangsheng.hou(a)mediatek.com>
virtiofs: add filesystem context source name check
Steven Rostedt <rostedt(a)goodmis.org>
tracing: Fix filter string testing
Nathan Chancellor <nathan(a)kernel.org>
riscv: Avoid fortify warning in syscall_get_arguments()
Edward Adam Davis <eadavis(a)qq.com>
isofs: Prevent the use of too small fid
Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com>
i2c: cros-ec-tunnel: defer probe if parent EC is not present
Vasiliy Kovalev <kovalev(a)altlinux.org>
hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: caam/qi - Fix drv_ctx refcount bug
Johannes Kimmel <kernel(a)bareminimum.eu>
btrfs: correctly escape subvol in btrfs_show_options()
Li Lingfeng <lilingfeng3(a)huawei.com>
nfsd: decrease sc_count directly if fail to queue dl_recall
Eric Biggers <ebiggers(a)google.com>
nfs: add missing selections of CONFIG_CRC32
Jeff Layton <jlayton(a)kernel.org>
nfs: move nfs_fhandle_hash to common include file
Denis Arefev <arefev(a)swemel.ru>
asus-laptop: Fix an uninitialized variable
Andreas Gruenbacher <agruenba(a)redhat.com>
writeback: fix false warning in inode_to_wb()
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
WangYuli <wangyuli(a)uniontech.com>
riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break
WangYuli <wangyuli(a)uniontech.com>
riscv: KGDB: Do not inline arch_kgdb_breakpoint()
Jonas Gorski <jonas.gorski(a)gmail.com>
net: b53: enable BPDU reception for management port
Abdun Nihaal <abdun.nihaal(a)gmail.com>
cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
Ilya Maximets <i.maximets(a)ovn.org>
net: openvswitch: fix nested key length validation in the set() action
Christopher S M Hall <christopher.s.hall(a)intel.com>
igc: cleanup PTP module if probe fails
Christopher S M Hall <christopher.s.hall(a)intel.com>
igc: handle the IGC_PTP_ENABLED flag correctly
Johannes Berg <johannes.berg(a)intel.com>
Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
Dan Carpenter <dan.carpenter(a)linaro.org>
Bluetooth: btrtl: Prevent potential NULL dereference
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
Shay Drory <shayd(a)nvidia.com>
RDMA/core: Silence oversized kvmalloc() warning
Chengchang Tang <tangchengchang(a)huawei.com>
RDMA/hns: Fix wrong maximum DMA segment size
Yue Haibing <yuehaibing(a)huawei.com>
RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
Miaoqian Lin <linmq006(a)gmail.com>
scsi: iscsi: Fix missing scsi_host_put() in error path
Abdun Nihaal <abdun.nihaal(a)gmail.com>
wifi: wl1251: fix memory leak in wl1251_tx_work
Remi Pommarel <repk(a)triplefau.lt>
wifi: mac80211: Purge vif txq in ieee80211_do_stop()
Remi Pommarel <repk(a)triplefau.lt>
wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
Abdun Nihaal <abdun.nihaal(a)gmail.com>
wifi: at76c50x: fix use after free access in at76_disconnect
Kaixin Wang <kxwang23(a)m.fudan.edu.cn>
HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition
Daniel Golle <daniel(a)makrotopia.org>
pwm: mediatek: always use bus clock for PWM on MT7622
Arseniy Krasnov <avkrasnov(a)salutedevices.com>
Bluetooth: hci_uart: Fix another race during initialization
Myrrh Periwinkle <myrrhperiwinkle(a)qtmlabs.xyz>
x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions()
Stephan Gerhold <stephan.gerhold(a)linaro.org>
pinctrl: qcom: Clear latched interrupt status when changing IRQ type
Ma Ke <make24(a)iscas.ac.cn>
PCI: Fix reference leak in pci_alloc_child_bus()
Stanimir Varbanov <svarbanov(a)suse.de>
PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
Zijun Hu <quic_zijuhu(a)quicinc.com>
of/irq: Fix device node refcount leakages in of_irq_init()
Zijun Hu <quic_zijuhu(a)quicinc.com>
of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
Zijun Hu <quic_zijuhu(a)quicinc.com>
of/irq: Fix device node refcount leakages in of_irq_count()
Fedor Pchelkin <pchelkin(a)ispras.ru>
ntb: use 64-bit arithmetic for the MSI doorbell mask
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
gpio: zynq: Fix wakeup source leaks on device unbind
zhoumin <teczm(a)foxmail.com>
ftrace: Add cond_resched() to ftrace_graph_set_hash()
Mikulas Patocka <mpatocka(a)redhat.com>
dm-integrity: set ti->error on memory allocation failure
Tom Lendacky <thomas.lendacky(a)amd.com>
crypto: ccp - Fix check for the primary ASP device
Trevor Woerner <twoerner(a)gmail.com>
thermal/drivers/rockchip: Add missing rk3328 mapping entry
Ricardo Cañuelo Navarro <rcn(a)igalia.com>
sctp: detect and prevent references to a freed transport in sendmsg
Mathieu Desnoyers <mathieu.desnoyers(a)efficios.com>
mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
Ryan Roberts <ryan.roberts(a)arm.com>
sparc/mm: disable preemption in lazy mmu mode
Chen-Yu Tsai <wenst(a)chromium.org>
arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
Wentao Liang <vulab(a)iscas.ac.cn>
mtd: rawnand: Add status chack in r852_ready()
Wentao Liang <vulab(a)iscas.ac.cn>
mtd: inftlcore: Add error check for inftl_read_oob()
T Pratham <t-pratham(a)ti.com>
lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
Boqun Feng <boqun.feng(a)gmail.com>
locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
Chenyuan Yang <chenyuan0y(a)gmail.com>
mfd: ene-kb3930: Fix a potential NULL pointer dereference
Jan Kara <jack(a)suse.cz>
jbd2: remove wrong sb->s_sequence check
Manjunatha Venkatesh <manjunatha.venkatesh(a)nxp.com>
i3c: Add NULL pointer check in i3c_master_queue_ibi()
Si-Wei Liu <si-wei.liu(a)oracle.com>
vdpa/mlx5: Fix oversized null mkey longer than 32bit
Artem Sadovnikov <a.sadovnikov(a)ispras.ru>
ext4: fix off-by-one error in do_split
Alexey Klimov <alexey.klimov(a)linaro.org>
ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
Gavrilov Ilia <Ilia.Gavrilov(a)infotecs.ru>
wifi: mac80211: fix integer overflow in hwmp_route_info_get()
Alexandre Torgue <alexandre.torgue(a)foss.st.com>
clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup
Jiasheng Jiang <jiashengjiangcool(a)gmail.com>
mtd: Replace kcalloc() with devm_kcalloc()
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
Vikash Garodia <quic_vgarodia(a)quicinc.com>
media: venus: hfi_parser: add check to avoid out of bound access
Sakari Ailus <sakari.ailus(a)linux.intel.com>
media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
Sakari Ailus <sakari.ailus(a)linux.intel.com>
media: i2c: ov7251: Set enable GPIO low in probe
Karina Yankevich <k.yankevich(a)omp.ru>
media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
Murad Masimov <m.masimov(a)mt-integration.ru>
media: streamzap: prevent processing IR data on URB failure
Kamal Dasu <kamal.dasu(a)broadcom.com>
mtd: rawnand: brcmnand: fix PM resume warning
Miquel Raynal <miquel.raynal(a)bootlin.com>
spi: cadence-qspi: Fix probe on AM62A LP SK
Douglas Anderson <dianders(a)chromium.org>
arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
Douglas Anderson <dianders(a)chromium.org>
arm64: cputype: Add MIDR_CORTEX_A76AE
Jan Beulich <jbeulich(a)suse.com>
xenfs/xensyms: respect hypervisor's "next" indication
Yuan Can <yuancan(a)huawei.com>
media: siano: Fix error handling in smsdvb_module_init()
Matthew Majewski <mattwmajewski(a)gmail.com>
media: vim2m: print device name after registering device
Vikash Garodia <quic_vgarodia(a)quicinc.com>
media: venus: hfi: add check to handle incorrect queue size
Vikash Garodia <quic_vgarodia(a)quicinc.com>
media: venus: hfi: add a check to handle OOB in sfr region
Niklas Söderlund <niklas.soderlund+renesas(a)ragnatech.se>
media: i2c: adv748x: Fix test pattern selection mask
Jann Horn <jannh(a)google.com>
ext4: don't treat fhandle lookup of ea_inode as FS corruption
Eric Biggers <ebiggers(a)google.com>
ext4: reject casefold inode flag without casefold feature
Willem de Bruijn <willemb(a)google.com>
bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
Ben Dooks <ben.dooks(a)sifive.com>
bpf: Add endian modifiers to fix endian warnings
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: fsl-ftm: Handle clk_get_rate() returning 0
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: rcar: Improve register calculation
Geert Uytterhoeven <geert+renesas(a)glider.be>
pwm: rcar: Simplify multiplication/shift logic
Josh Poimboeuf <jpoimboe(a)kernel.org>
pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
Fabien Parent <fparent(a)baylibre.com>
pwm: mediatek: Always use bus clock
Leonid Arapov <arapovl839(a)gmail.com>
fbdev: omapfb: Add 'plane' value check
AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com>
drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
Philip Yang <Philip.Yang(a)amd.com>
drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
David Yat Sin <David.YatSin(a)amd.com>
drm/amdkfd: clamp queue size to minimum
Luca Ceresoli <luca.ceresoli(a)bootlin.com>
drm/bridge: panel: forbid initializing a panel with unknown connector type
Andrew Wyatt <fewtarius(a)steamfork.org>
drm: panel-orientation-quirks: Add new quirk for GPD Win 2
Andrew Wyatt <fewtarius(a)steamfork.org>
drm: panel-orientation-quirks: Add support for AYANEO 2S
Abhinav Kumar <quic_abhinavk(a)quicinc.com>
drm: allow encoder mode_set even when connectors change for crtc
Arseniy Krasnov <avkrasnov(a)salutedevices.com>
Bluetooth: hci_uart: fix race during initialization
Gabriele Paoloni <gpaoloni(a)redhat.com>
tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER
Stanislav Fomichev <sdf(a)fomichev.me>
net: vlan: don't propagate flags on open
Icenowy Zheng <uwu(a)icenowy.me>
wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
Kai Mäkisara <Kai.Makisara(a)kolumbus.fi>
scsi: st: Fix array overflow in st_setup()
Bhupesh <bhupesh(a)igalia.com>
ext4: ignore xattrs past end
Ojaswin Mujoo <ojaswin(a)linux.ibm.com>
ext4: protect ext4_release_dquot against freezing
Daniel Kral <d.kral(a)proxmox.com>
ahci: add PCI ID for Marvell 88SE9215 SATA Controller
Chao Yu <chao(a)kernel.org>
f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
Niklas Cassel <cassel(a)kernel.org>
ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
Edward Adam Davis <eadavis(a)qq.com>
jfs: add sanity check for agwidth in dbMount
Edward Adam Davis <eadavis(a)qq.com>
jfs: Prevent copying of nlink with value 0 from disk inode
Rand Deeb <rand.sec96(a)gmail.com>
fs/jfs: Prevent integer overflow in AG size calculation
Rand Deeb <rand.sec96(a)gmail.com>
fs/jfs: cast inactags to s64 to prevent potential overflow
Jason Xing <kerneljasonxing(a)gmail.com>
page_pool: avoid infinite loop to schedule delayed worker
Ricard Wanderlof <ricard2013(a)butoba.net>
ALSA: usb-audio: Fix CME quirk for UF series keyboards
Maxim Mikityanskiy <maxtram95(a)gmail.com>
ALSA: hda: intel: Fix Optimus when GPU has no sound
Tomasz Pakuła <forest10pl(a)gmail.com>
HID: pidff: Fix null pointer dereference in pidff_find_fields
Tomasz Pakuła <tomasz.pakula.oficjalny(a)gmail.com>
HID: pidff: Do not send effect envelope if it's empty
Tomasz Pakuła <tomasz.pakula.oficjalny(a)gmail.com>
HID: pidff: Convert infinite length from Linux API to PID standard
Kees Cook <kees(a)kernel.org>
xen/mcelog: Add __nonstring annotations for unterminated strings
Douglas Anderson <dianders(a)chromium.org>
arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
Mark Rutland <mark.rutland(a)arm.com>
perf: arm_pmu: Don't disable counter in armpmu_add()
Max Grobecker <max(a)grobecker.info>
x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine
Zhongqiu Han <quic_zhonhan(a)quicinc.com>
pm: cpupower: bench: Prevent NULL dereference on malloc failure
Trond Myklebust <trond.myklebust(a)hammerspace.com>
umount: Allow superblock owners to force umount
Florian Westphal <fw(a)strlen.de>
nft_set_pipapo: fix incorrect avx2 match of 5th field octet
Arnaud Lecomte <contact(a)arnaud-lcm.com>
net: ppp: Add bound checking for skb data on ppp_sync_txmung
Daniel Wagner <wagi(a)kernel.org>
nvmet-fcloop: swap list_add_tail arguments
Wentao Liang <vulab(a)iscas.ac.cn>
ata: sata_sx4: Add error handling in pdc20621_i2c_read()
Hannes Reinecke <hare(a)suse.de>
ata: sata_sx4: Drop pointless VPRINTK() calls and convert the remaining ones
Jakub Kicinski <kuba(a)kernel.org>
net: tls: explicitly disallow disconnect
Cong Wang <xiyou.wangcong(a)gmail.com>
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
Tung Nguyen <tung.quang.nguyen(a)est.tech>
tipc: fix memory leak in tipc_link_xmit
Henry Martin <bsdhenrymartin(a)gmail.com>
ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
-------------
Diffstat:
Makefile | 7 +-
arch/arm/mach-exynos/Kconfig | 1 -
arch/arm64/boot/dts/mediatek/mt8173.dtsi | 6 +-
arch/arm64/include/asm/cputype.h | 4 +
arch/arm64/kernel/proton-pack.c | 1 +
arch/mips/dec/prom/init.c | 2 +-
arch/mips/include/asm/ds1287.h | 2 +-
arch/mips/include/asm/mips-cm.h | 22 +++
arch/mips/kernel/cevt-ds1287.c | 1 +
arch/mips/kernel/mips-cm.c | 14 ++
arch/parisc/kernel/pdt.c | 2 +
arch/powerpc/kernel/rtas.c | 4 +
arch/riscv/include/asm/kgdb.h | 9 +-
arch/riscv/include/asm/syscall.h | 7 +-
arch/riscv/kernel/kgdb.c | 6 +
arch/s390/kvm/trace-s390.h | 4 +-
arch/sparc/mm/tlb.c | 5 +-
arch/x86/entry/entry.S | 2 +-
arch/x86/events/intel/ds.c | 8 +-
arch/x86/events/intel/uncore_snbep.c | 49 ++-----
arch/x86/kernel/cpu/amd.c | 2 +-
arch/x86/kernel/cpu/bugs.c | 8 +-
arch/x86/kernel/e820.c | 17 ++-
arch/x86/kvm/svm/avic.c | 60 ++++----
arch/x86/kvm/vmx/posted_intr.c | 28 ++--
arch/x86/platform/pvh/head.S | 7 +-
block/blk-cgroup.c | 24 +++-
block/blk-iocost.c | 7 +-
crypto/crypto_null.c | 37 +++--
drivers/acpi/pptt.c | 4 +-
drivers/ata/ahci.c | 2 +
drivers/ata/libata-eh.c | 11 +-
drivers/ata/pata_pxa.c | 6 +
drivers/ata/sata_sx4.c | 118 ++++++---------
drivers/bluetooth/btrtl.c | 2 +
drivers/bluetooth/hci_ldisc.c | 19 ++-
drivers/bluetooth/hci_uart.h | 1 +
drivers/char/virtio_console.c | 7 +-
drivers/clk/clk.c | 4 +
drivers/clocksource/timer-stm32-lp.c | 4 +-
drivers/cpufreq/cpufreq.c | 8 ++
drivers/cpufreq/scpi-cpufreq.c | 13 +-
drivers/crypto/atmel-sha204a.c | 7 +-
drivers/crypto/caam/qi.c | 6 +-
drivers/crypto/ccp/sp-pci.c | 15 +-
drivers/dma-buf/udmabuf.c | 2 +-
drivers/dma/dmatest.c | 6 +-
drivers/gpio/gpio-zynq.c | 1 +
drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c | 9 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.h | 3 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.c | 6 +-
drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 10 ++
.../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 2 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 14 +-
.../gpu/drm/amd/display/dc/dcn21/dcn21_resource.c | 2 +-
.../gpu/drm/amd/pm/powerplay/hwmgr/smu7_thermal.c | 4 +-
.../drm/amd/pm/powerplay/hwmgr/vega10_thermal.c | 4 +-
.../drm/amd/pm/powerplay/hwmgr/vega20_thermal.c | 2 +-
drivers/gpu/drm/drm_atomic_helper.c | 2 +-
drivers/gpu/drm/drm_panel.c | 5 +-
drivers/gpu/drm/drm_panel_orientation_quirks.c | 10 +-
drivers/gpu/drm/i915/gt/intel_engine_cs.c | 7 +-
drivers/gpu/drm/mediatek/mtk_dpi.c | 9 ++
drivers/gpu/drm/nouveau/nouveau_bo.c | 3 +
drivers/gpu/drm/nouveau/nouveau_gem.c | 3 -
drivers/gpu/drm/sti/Makefile | 2 -
drivers/gpu/drm/tiny/repaper.c | 4 +-
drivers/hid/usbhid/hid-pidff.c | 60 +++++---
drivers/hsi/clients/ssi_protocol.c | 1 +
drivers/i2c/busses/i2c-cros-ec-tunnel.c | 3 +
drivers/i3c/master.c | 3 +
drivers/iio/adc/ad7768-1.c | 5 +-
drivers/infiniband/core/umem_odp.c | 6 +-
drivers/infiniband/hw/hns/hns_roce_main.c | 2 +-
drivers/infiniband/hw/qib/qib_fs.c | 1 +
drivers/infiniband/hw/usnic/usnic_ib_main.c | 14 +-
drivers/iommu/amd/iommu.c | 2 +-
drivers/mcb/mcb-parse.c | 2 +-
drivers/md/dm-cache-target.c | 24 ++--
drivers/md/dm-integrity.c | 3 +
drivers/md/raid1.c | 26 ++--
drivers/media/common/siano/smsdvb-main.c | 2 +
drivers/media/i2c/adv748x/adv748x.h | 2 +-
drivers/media/i2c/ov7251.c | 4 +-
drivers/media/platform/qcom/venus/Makefile | 3 +-
drivers/media/platform/qcom/venus/core.c | 17 ---
drivers/media/platform/qcom/venus/core.h | 41 +-----
drivers/media/platform/qcom/venus/helpers.c | 60 ++++----
drivers/media/platform/qcom/venus/helpers.h | 2 +-
drivers/media/platform/qcom/venus/hfi.c | 18 ++-
drivers/media/platform/qcom/venus/hfi_parser.c | 159 ++++++++++++++++-----
drivers/media/platform/qcom/venus/hfi_parser.h | 2 +-
drivers/media/platform/qcom/venus/hfi_platform.c | 49 +++++++
drivers/media/platform/qcom/venus/hfi_platform.h | 61 ++++++++
.../media/platform/qcom/venus/hfi_platform_v4.c | 60 ++++++++
drivers/media/platform/qcom/venus/hfi_venus.c | 18 ++-
drivers/media/platform/qcom/venus/pm_helpers.c | 12 +-
drivers/media/platform/qcom/venus/vdec.c | 8 +-
drivers/media/platform/qcom/venus/venc.c | 91 ++++++++----
drivers/media/rc/streamzap.c | 135 +++++++----------
drivers/media/test-drivers/vim2m.c | 6 +-
drivers/media/v4l2-core/v4l2-dv-timings.c | 4 +-
drivers/mfd/ene-kb3930.c | 2 +-
drivers/misc/mei/hw-me-regs.h | 1 +
drivers/misc/mei/pci-me.c | 1 +
drivers/misc/pci_endpoint_test.c | 6 +-
drivers/mtd/inftlcore.c | 9 +-
drivers/mtd/mtdpstore.c | 9 +-
drivers/mtd/nand/raw/brcmnand/brcmnand.c | 2 +-
drivers/mtd/nand/raw/r852.c | 3 +
drivers/net/dsa/b53/b53_common.c | 10 ++
drivers/net/dsa/mv88e6xxx/chip.c | 25 +++-
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 1 +
drivers/net/ethernet/intel/igc/igc_main.c | 1 +
drivers/net/ethernet/intel/igc/igc_ptp.c | 7 +
.../net/ethernet/mellanox/mlx5/core/en/rep/neigh.c | 15 +-
.../net/ethernet/mellanox/mlx5/core/en/rep/tc.c | 6 +-
drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 33 ++++-
drivers/net/ethernet/mellanox/mlx5/core/en_tc.h | 3 +
drivers/net/phy/phy_led_triggers.c | 23 +--
drivers/net/ppp/ppp_synctty.c | 5 +
drivers/net/wireless/ath/ath10k/sdio.c | 5 +-
drivers/net/wireless/atmel/at76c50x-usb.c | 2 +-
drivers/net/wireless/mediatek/mt76/mt76x2/usb.c | 1 +
drivers/net/wireless/ti/wl1251/tx.c | 4 +-
drivers/ntb/hw/idt/ntb_hw_idt.c | 18 +--
drivers/ntb/ntb_transport.c | 2 +-
drivers/nvme/host/core.c | 10 ++
drivers/nvme/target/fc.c | 14 --
drivers/nvme/target/fcloop.c | 2 +-
drivers/of/irq.c | 13 +-
drivers/pci/controller/pcie-brcmstb.c | 13 +-
drivers/pci/pci.c | 107 ++++++++------
drivers/pci/probe.c | 60 ++++++--
drivers/pci/remove.c | 7 +
drivers/perf/arm_pmu.c | 8 +-
drivers/phy/tegra/xusb.c | 2 +-
drivers/pinctrl/qcom/pinctrl-msm.c | 12 +-
drivers/platform/x86/asus-laptop.c | 9 +-
.../x86/intel_speed_select_if/isst_if_common.c | 2 +-
drivers/pwm/pwm-fsl-ftm.c | 6 +
drivers/pwm/pwm-mediatek.c | 20 ++-
drivers/pwm/pwm-rcar.c | 24 ++--
drivers/s390/block/dasd.c | 5 +-
drivers/s390/virtio/virtio_ccw.c | 16 ++-
drivers/scsi/lpfc/lpfc_hbadisc.c | 2 +
drivers/scsi/pm8001/pm8001_sas.c | 1 +
drivers/scsi/scsi_transport_iscsi.c | 7 +-
drivers/scsi/st.c | 2 +-
drivers/scsi/ufs/ufs_bsg.c | 1 +
drivers/soc/samsung/Kconfig | 12 +-
drivers/soc/samsung/Makefile | 3 +-
drivers/soc/samsung/exynos-asv.c | 45 ++----
drivers/soc/samsung/exynos-asv.h | 2 +
drivers/soc/samsung/exynos-chipid.c | 139 +++++++++++++-----
drivers/soc/ti/omap_prm.c | 2 +
drivers/spi/spi-cadence-quadspi.c | 6 +
drivers/staging/comedi/drivers/jr3_pci.c | 15 +-
drivers/staging/rtl8723bs/core/rtw_mlme.c | 2 +
drivers/thermal/rockchip_thermal.c | 1 +
drivers/tty/serial/sifive.c | 6 +
drivers/usb/cdns3/gadget.c | 2 +
drivers/usb/core/quirks.c | 9 ++
drivers/usb/dwc3/gadget.c | 6 +
drivers/usb/gadget/udc/aspeed-vhub/dev.c | 3 +
drivers/usb/host/max3421-hcd.c | 7 +
drivers/usb/host/ohci-pci.c | 23 +++
drivers/usb/serial/ftdi_sio.c | 2 +
drivers/usb/serial/ftdi_sio_ids.h | 5 +
drivers/usb/serial/option.c | 3 +
drivers/usb/serial/usb-serial-simple.c | 7 +
drivers/usb/storage/unusual_uas.h | 7 +
drivers/vdpa/mlx5/core/mr.c | 7 +-
drivers/vfio/pci/vfio_pci.c | 13 ++
drivers/video/backlight/led_bl.c | 5 +-
drivers/video/fbdev/omap2/omapfb/dss/dispc.c | 6 +-
drivers/xen/xenfs/xensyms.c | 4 +-
fs/Kconfig | 1 +
fs/btrfs/super.c | 3 +-
fs/cifs/cifs_debug.c | 6 +
fs/cifs/cifsglob.h | 9 ++
fs/cifs/cifsproto.h | 7 +-
fs/cifs/connect.c | 2 +-
fs/cifs/smb2misc.c | 11 +-
fs/cifs/smb2ops.c | 48 ++++---
fs/cifs/smb2pdu.c | 10 +-
fs/cifs/transport.c | 43 +++---
fs/ext4/block_validity.c | 5 +-
fs/ext4/inode.c | 76 +++++++---
fs/ext4/namei.c | 2 +-
fs/ext4/super.c | 19 ++-
fs/ext4/xattr.c | 11 +-
fs/f2fs/node.c | 9 +-
fs/fuse/virtio_fs.c | 3 +
fs/hfs/bnode.c | 6 +
fs/hfsplus/bnode.c | 6 +
fs/isofs/export.c | 2 +-
fs/jbd2/journal.c | 1 -
fs/jfs/jfs_dmap.c | 12 +-
fs/jfs/jfs_imap.c | 2 +-
fs/namespace.c | 3 +-
fs/nfs/Kconfig | 2 +-
fs/nfs/internal.h | 22 ---
fs/nfs/nfs4session.h | 4 -
fs/nfsd/Kconfig | 1 +
fs/nfsd/nfs4state.c | 2 +-
fs/nfsd/nfsfh.h | 7 -
fs/proc/array.c | 64 +++++----
include/linux/backing-dev.h | 1 +
include/linux/blk-cgroup.h | 1 +
include/linux/filter.h | 4 +
include/linux/nfs.h | 13 ++
include/linux/pci.h | 12 ++
include/linux/soc/samsung/exynos-chipid.h | 6 +-
include/net/net_namespace.h | 1 +
include/net/sctp/structs.h | 3 +-
include/uapi/linux/kfd_ioctl.h | 2 +
include/xen/interface/xen-mca.h | 2 +-
init/Kconfig | 3 +-
kernel/bpf/helpers.c | 11 +-
kernel/bpf/syscall.c | 17 ++-
kernel/dma/contiguous.c | 3 +-
kernel/locking/lockdep.c | 3 +
kernel/resource.c | 41 ++----
kernel/sched/cpufreq_schedutil.c | 18 ++-
kernel/trace/ftrace.c | 1 +
kernel/trace/trace.h | 4 +
kernel/trace/trace_events.c | 4 +-
kernel/trace/trace_events_filter.c | 4 +-
kernel/trace/trace_events_hist.c | 7 +-
kernel/trace/trace_events_synth.c | 82 ++++++++++-
kernel/trace/trace_synth.h | 1 +
lib/sg_split.c | 2 -
mm/memory.c | 4 +-
mm/vmscan.c | 2 +-
net/8021q/vlan_dev.c | 31 +---
net/bluetooth/hci_event.c | 5 +-
net/core/dev.c | 1 +
net/core/filter.c | 80 ++++++-----
net/core/net_namespace.c | 21 ++-
net/core/page_pool.c | 8 +-
net/ipv4/inet_connection_sock.c | 19 ++-
net/mac80211/iface.c | 3 +
net/mac80211/mesh_hwmp.c | 14 +-
net/mptcp/protocol.c | 45 ++++++
net/mptcp/subflow.c | 15 +-
net/netfilter/ipvs/ip_vs_ctl.c | 10 +-
net/netfilter/nft_set_pipapo_avx2.c | 3 +-
net/openvswitch/actions.c | 4 +-
net/openvswitch/flow_netlink.c | 3 +-
net/sched/sch_codel.c | 5 +-
net/sched/sch_fq_codel.c | 6 +-
net/sched/sch_hfsc.c | 23 ++-
net/sctp/socket.c | 22 +--
net/sctp/transport.c | 2 +
net/tipc/link.c | 1 +
net/tipc/monitor.c | 3 +-
net/tls/tls_main.c | 6 +
sound/pci/hda/hda_intel.c | 15 +-
sound/soc/codecs/wcd934x.c | 2 +-
sound/soc/qcom/qdsp6/q6asm-dai.c | 19 ++-
sound/usb/midi.c | 80 ++++++++++-
tools/objtool/check.c | 3 +
tools/power/cpupower/bench/parse.c | 4 +
tools/testing/selftests/mincore/mincore_selftest.c | 3 -
tools/testing/selftests/ublk/test_stripe_04.sh | 24 ++++
.../selftests/vm/charge_reserved_hugetlb.sh | 4 +-
.../selftests/vm/hugetlb_reparenting_test.sh | 2 +-
268 files changed, 2396 insertions(+), 1209 deletions(-)
4 months, 3 weeks
- 6
- 291
[PATCH 5.4 000/179] 5.4.293-rc1 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 5.4.293 release.
There are 179 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 01 May 2025 16:10:15 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.293-rc…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 5.4.293-rc1
Thomas Bogendoerfer <tsbogend(a)alpha.franken.de>
MIPS: cm: Fix warning if MIPS_CM is disabled
Marek Behún <kabel(a)kernel.org>
crypto: atmel-sha204a - Set hwrng quality to lowest possible
Ian Abbott <abbotti(a)mev.co.uk>
comedi: jr3_pci: Fix synchronous deletion of timer
David Hildenbrand <david(a)redhat.com>
s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues
Meir Elisha <meir.elisha(a)volumez.com>
md/raid1: Add check for missing source disk in process_checks()
Igor Pylypiv <ipylypiv(a)google.com>
scsi: pm80xx: Set phy_attached to zero when device is gone
Josh Poimboeuf <jpoimboe(a)kernel.org>
x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
Jean-Marc Eurin <jmeurin(a)google.com>
ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
Ming Lei <ming.lei(a)redhat.com>
selftests: ublk: fix test_stripe_04
Xiaogang Chen <xiaogang.chen(a)amd.com>
udmabuf: fix a buf size overflow issue during udmabuf creation
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
KVM: s390: Don't use %pK through tracepoints
Oleg Nesterov <oleg(a)redhat.com>
sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
Arnd Bergmann <arnd(a)arndb.de>
ntb: reduce stack usage in idt_scan_mws
Al Viro <viro(a)zeniv.linux.org.uk>
qibfs: fix _another_ leak
Chenyuan Yang <chenyuan0y(a)gmail.com>
usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
Vinicius Costa Gomes <vinicius.gomes(a)intel.com>
dmaengine: dmatest: Fix dmatest waiting less when interrupted
Alexander Stein <alexander.stein(a)mailbox.org>
usb: host: max3421-hcd: Add missing spi_device_id table
Yu-Chun Lin <eleanor15x(a)gmail.com>
parisc: PDT: Fix missing prototype warning
Heiko Stuebner <heiko(a)sntech.de>
clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: null - Use spin lock instead of mutex
Gregory CLEMENT <gregory.clement(a)bootlin.com>
MIPS: cm: Detect CM quirks from device tree
Oliver Neukum <oneukum(a)suse.com>
USB: VLI disk crashes if LPM is used
Miao Li <limiao(a)kylinos.cn>
usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
Miao Li <limiao(a)kylinos.cn>
usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
Frode Isaksen <frode(a)meta.com>
usb: dwc3: gadget: check that event count does not exceed event buffer length
Huacai Chen <chenhuacai(a)loongson.cn>
USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
Ralph Siemsen <ralph.siemsen(a)linaro.org>
usb: cdns3: Fix deadlock when using NCM gadget
Craig Hesling <craig(a)hesling.com>
USB: serial: simple: add OWON HDS200 series oscilloscope support
Adam Xue <zxue(a)semtech.com>
USB: serial: option: add Sierra Wireless EM9291
Michael Ehrenreich <michideep(a)gmail.com>
USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
Ryo Takakura <ryotkkr98(a)gmail.com>
serial: sifive: lock port in startup()/shutdown() callbacks
Oliver Neukum <oneukum(a)suse.com>
USB: storage: quirk for ADATA Portable HDD CH94
Haoxiang Li <haoxiang_li2024(a)163.com>
mcb: fix a double free bug in chameleon_parse_gdd()
Halil Pasic <pasic(a)linux.ibm.com>
virtio_console: fix missing byte order handling for cols and rows
Cong Wang <xiyou.wangcong(a)gmail.com>
net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
Cong Wang <xiyou.wangcong(a)gmail.com>
net_sched: hfsc: Fix a UAF vulnerability in class handling
Tung Nguyen <tung.quang.nguyen(a)est.tech>
tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
Qingfang Deng <qingfang.deng(a)siflower.com.cn>
net: phy: leds: fix memory leak
Henry Martin <bsdhenrymartin(a)gmail.com>
cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
Denis Arefev <arefev(a)swemel.ru>
drm/amd/pm: Prevent division by zero
Kunihiko Hayashi <hayashi.kunihiko(a)socionext.com>
misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
Damien Le Moal <dlemoal(a)kernel.org>
misc: pci_endpoint_test: Use INTX instead of LEGACY
Bjorn Helgaas <bhelgaas(a)google.com>
PCI: Rename PCI_IRQ_LEGACY to PCI_IRQ_INTX
Sergiu Cuciurean <sergiu.cuciurean(a)analog.com>
iio: adc: ad7768-1: Fix conversion result sign
Jonathan Cameron <Jonathan.Cameron(a)huawei.com>
iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: fix VTU methods for 6320 family
Matthew Majewski <mattwmajewski(a)gmail.com>
media: vim2m: print device name after registering device
Acs, Jakub <acsjakub(a)amazon.de>
ext4: fix OOB read when checking dotdot dir
Theodore Ts'o <tytso(a)mit.edu>
ext4: optimize __ext4_check_dir_entry()
Theodore Ts'o <tytso(a)mit.edu>
ext4: don't over-report free space or inodes in statvfs
Chengguang Xu <cgxu519(a)mykernel.net>
ext4: code cleanup for ext4_statfs_project()
Jan Kara <jack(a)suse.cz>
ext4: simplify checking quota limits in ext4_statfs()
Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com>
platform/x86: ISST: Correct command storage data length
WangYuli <wangyuli(a)uniontech.com>
MIPS: ds1287: Match ds1287_set_base_clock() function types
WangYuli <wangyuli(a)uniontech.com>
MIPS: cevt-ds1287: Add missing ds1287.h include
WangYuli <wangyuli(a)uniontech.com>
MIPS: dec: Declare which_prom() as static
Xie Yongji <xieyongji(a)bytedance.com>
virtio-net: Add validation for used length
Bart Van Assche <bvanassche(a)acm.org>
RDMA/srpt: Support specifying the srpt_service_guid parameter
Ilya Maximets <i.maximets(a)ovn.org>
openvswitch: fix lockup on tx to unregistering netdev with carrier
Felix Huettner <felix.huettner(a)mail.schwarz>
net: openvswitch: fix race on port output
Seunghwan Baek <sh8267.baek(a)samsung.com>
mmc: cqhci: Fix checking of CQHCI_HALT state
WangYuli <wangyuli(a)uniontech.com>
nvmet-fc: Remove unused functions
Martin Kepplinger <martin.kepplinger(a)puri.sm>
usb: dwc3: support continuous runtime PM with dual role
Kunihiko Hayashi <hayashi.kunihiko(a)socionext.com>
misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
Kunihiko Hayashi <hayashi.kunihiko(a)socionext.com>
misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
Kuniyuki Iwashima <kuniyu(a)amazon.com>
tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
Nathan Chancellor <natechancellor(a)gmail.com>
powerpc/prom_init: Use -ffreestanding to avoid a reference to bcmp
Nathan Chancellor <nathan(a)kernel.org>
kbuild: Add '-fno-builtin-wcslen'
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
cpufreq: Reference count policy in cpufreq_update_limits()
Rolf Eike Beer <eb(a)emlix.com>
drm/sti: remove duplicate object names
Chris Bainbridge <chris.bainbridge(a)gmail.com>
drm/nouveau: prime: fix ttm_bo_delayed_delete oops
Nikita Zhandarovich <n.zhandarovich(a)fintech.ru>
drm/repaper: fix integer overflows in repeat functions
Thorsten Leemhuis <linux(a)leemhuis.info>
module: sign with sha512 instead of sha1 by default
Kan Liang <kan.liang(a)linux.intel.com>
perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
Dapeng Mi <dapeng1.mi(a)linux.intel.com>
perf/x86/intel: Allow to update user space GPRs from PEBS records
Xiangsheng Hou <xiangsheng.hou(a)mediatek.com>
virtiofs: add filesystem context source name check
Nathan Chancellor <nathan(a)kernel.org>
riscv: Avoid fortify warning in syscall_get_arguments()
Edward Adam Davis <eadavis(a)qq.com>
isofs: Prevent the use of too small fid
Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com>
i2c: cros-ec-tunnel: defer probe if parent EC is not present
Vasiliy Kovalev <kovalev(a)altlinux.org>
hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
Johannes Kimmel <kernel(a)bareminimum.eu>
btrfs: correctly escape subvol in btrfs_show_options()
Eric Biggers <ebiggers(a)google.com>
nfs: add missing selections of CONFIG_CRC32
Jeff Layton <jlayton(a)kernel.org>
nfs: move nfs_fhandle_hash to common include file
Chuck Lever <chuck.lever(a)oracle.com>
NFSD: Constify @fh argument of knfsd_fh_hash()
Denis Arefev <arefev(a)swemel.ru>
asus-laptop: Fix an uninitialized variable
Andreas Gruenbacher <agruenba(a)redhat.com>
writeback: fix false warning in inode_to_wb()
Jonas Gorski <jonas.gorski(a)gmail.com>
net: b53: enable BPDU reception for management port
Ilya Maximets <i.maximets(a)ovn.org>
net: openvswitch: fix nested key length validation in the set() action
Johannes Berg <johannes.berg(a)intel.com>
Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
Dan Carpenter <dan.carpenter(a)linaro.org>
Bluetooth: btrtl: Prevent potential NULL dereference
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
Yue Haibing <yuehaibing(a)huawei.com>
RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
Miaoqian Lin <linmq006(a)gmail.com>
scsi: iscsi: Fix missing scsi_host_put() in error path
Abdun Nihaal <abdun.nihaal(a)gmail.com>
wifi: wl1251: fix memory leak in wl1251_tx_work
Remi Pommarel <repk(a)triplefau.lt>
wifi: mac80211: Purge vif txq in ieee80211_do_stop()
Remi Pommarel <repk(a)triplefau.lt>
wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
Abdun Nihaal <abdun.nihaal(a)gmail.com>
wifi: at76c50x: fix use after free access in at76_disconnect
Kaixin Wang <kxwang23(a)m.fudan.edu.cn>
HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition
Daniel Golle <daniel(a)makrotopia.org>
pwm: mediatek: always use bus clock for PWM on MT7622
Arseniy Krasnov <avkrasnov(a)salutedevices.com>
Bluetooth: hci_uart: Fix another race during initialization
Myrrh Periwinkle <myrrhperiwinkle(a)qtmlabs.xyz>
x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions()
Ma Ke <make24(a)iscas.ac.cn>
PCI: Fix reference leak in pci_alloc_child_bus()
Zijun Hu <quic_zijuhu(a)quicinc.com>
of/irq: Fix device node refcount leakages in of_irq_init()
Zijun Hu <quic_zijuhu(a)quicinc.com>
of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
Zijun Hu <quic_zijuhu(a)quicinc.com>
of/irq: Fix device node refcount leakages in of_irq_count()
Fedor Pchelkin <pchelkin(a)ispras.ru>
ntb: use 64-bit arithmetic for the MSI doorbell mask
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
gpio: zynq: Fix wakeup source leaks on device unbind
zhoumin <teczm(a)foxmail.com>
ftrace: Add cond_resched() to ftrace_graph_set_hash()
Mikulas Patocka <mpatocka(a)redhat.com>
dm-integrity: set ti->error on memory allocation failure
Tom Lendacky <thomas.lendacky(a)amd.com>
crypto: ccp - Fix check for the primary ASP device
Trevor Woerner <twoerner(a)gmail.com>
thermal/drivers/rockchip: Add missing rk3328 mapping entry
Ricardo Cañuelo Navarro <rcn(a)igalia.com>
sctp: detect and prevent references to a freed transport in sendmsg
Mathieu Desnoyers <mathieu.desnoyers(a)efficios.com>
mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
Ryan Roberts <ryan.roberts(a)arm.com>
sparc/mm: disable preemption in lazy mmu mode
Chen-Yu Tsai <wenst(a)chromium.org>
arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
Wentao Liang <vulab(a)iscas.ac.cn>
mtd: rawnand: Add status chack in r852_ready()
Wentao Liang <vulab(a)iscas.ac.cn>
mtd: inftlcore: Add error check for inftl_read_oob()
T Pratham <t-pratham(a)ti.com>
lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
Boqun Feng <boqun.feng(a)gmail.com>
locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
Jan Kara <jack(a)suse.cz>
jbd2: remove wrong sb->s_sequence check
Manjunatha Venkatesh <manjunatha.venkatesh(a)nxp.com>
i3c: Add NULL pointer check in i3c_master_queue_ibi()
Artem Sadovnikov <a.sadovnikov(a)ispras.ru>
ext4: fix off-by-one error in do_split
Gavrilov Ilia <Ilia.Gavrilov(a)infotecs.ru>
wifi: mac80211: fix integer overflow in hwmp_route_info_get()
Marek Behún <kabel(a)kernel.org>
net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
Vikash Garodia <quic_vgarodia(a)quicinc.com>
media: venus: hfi_parser: add check to avoid out of bound access
Sakari Ailus <sakari.ailus(a)linux.intel.com>
media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
Sakari Ailus <sakari.ailus(a)linux.intel.com>
media: i2c: ov7251: Set enable GPIO low in probe
Karina Yankevich <k.yankevich(a)omp.ru>
media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
Murad Masimov <m.masimov(a)mt-integration.ru>
media: streamzap: prevent processing IR data on URB failure
Kamal Dasu <kamal.dasu(a)broadcom.com>
mtd: rawnand: brcmnand: fix PM resume warning
Douglas Anderson <dianders(a)chromium.org>
arm64: cputype: Add MIDR_CORTEX_A76AE
Jan Beulich <jbeulich(a)suse.com>
xenfs/xensyms: respect hypervisor's "next" indication
Yuan Can <yuancan(a)huawei.com>
media: siano: Fix error handling in smsdvb_module_init()
Vikash Garodia <quic_vgarodia(a)quicinc.com>
media: venus: hfi: add check to handle incorrect queue size
Vikash Garodia <quic_vgarodia(a)quicinc.com>
media: venus: hfi: add a check to handle OOB in sfr region
Niklas Söderlund <niklas.soderlund+renesas(a)ragnatech.se>
media: i2c: adv748x: Fix test pattern selection mask
Jann Horn <jannh(a)google.com>
ext4: don't treat fhandle lookup of ea_inode as FS corruption
Eric Biggers <ebiggers(a)google.com>
ext4: reject casefold inode flag without casefold feature
Willem de Bruijn <willemb(a)google.com>
bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
Ben Dooks <ben.dooks(a)sifive.com>
bpf: Add endian modifiers to fix endian warnings
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: fsl-ftm: Handle clk_get_rate() returning 0
Josh Poimboeuf <jpoimboe(a)kernel.org>
pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
Fabien Parent <fparent(a)baylibre.com>
pwm: mediatek: Always use bus clock
Leonid Arapov <arapovl839(a)gmail.com>
fbdev: omapfb: Add 'plane' value check
AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com>
drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
Philip Yang <Philip.Yang(a)amd.com>
drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
David Yat Sin <David.YatSin(a)amd.com>
drm/amdkfd: clamp queue size to minimum
Andrew Wyatt <fewtarius(a)steamfork.org>
drm: panel-orientation-quirks: Add new quirk for GPD Win 2
Andrew Wyatt <fewtarius(a)steamfork.org>
drm: panel-orientation-quirks: Add support for AYANEO 2S
Abhinav Kumar <quic_abhinavk(a)quicinc.com>
drm: allow encoder mode_set even when connectors change for crtc
Arseniy Krasnov <avkrasnov(a)salutedevices.com>
Bluetooth: hci_uart: fix race during initialization
Gabriele Paoloni <gpaoloni(a)redhat.com>
tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER
Stanislav Fomichev <sdf(a)fomichev.me>
net: vlan: don't propagate flags on open
Icenowy Zheng <uwu(a)icenowy.me>
wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
Kai Mäkisara <Kai.Makisara(a)kolumbus.fi>
scsi: st: Fix array overflow in st_setup()
Bhupesh <bhupesh(a)igalia.com>
ext4: ignore xattrs past end
Ojaswin Mujoo <ojaswin(a)linux.ibm.com>
ext4: protect ext4_release_dquot against freezing
Daniel Kral <d.kral(a)proxmox.com>
ahci: add PCI ID for Marvell 88SE9215 SATA Controller
Niklas Cassel <cassel(a)kernel.org>
ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
Edward Adam Davis <eadavis(a)qq.com>
jfs: add sanity check for agwidth in dbMount
Edward Adam Davis <eadavis(a)qq.com>
jfs: Prevent copying of nlink with value 0 from disk inode
Rand Deeb <rand.sec96(a)gmail.com>
fs/jfs: Prevent integer overflow in AG size calculation
Rand Deeb <rand.sec96(a)gmail.com>
fs/jfs: cast inactags to s64 to prevent potential overflow
Jason Xing <kerneljasonxing(a)gmail.com>
page_pool: avoid infinite loop to schedule delayed worker
Ricard Wanderlof <ricard2013(a)butoba.net>
ALSA: usb-audio: Fix CME quirk for UF series keyboards
Maxim Mikityanskiy <maxtram95(a)gmail.com>
ALSA: hda: intel: Fix Optimus when GPU has no sound
Tomasz Pakuła <forest10pl(a)gmail.com>
HID: pidff: Fix null pointer dereference in pidff_find_fields
Tomasz Pakuła <tomasz.pakula.oficjalny(a)gmail.com>
HID: pidff: Do not send effect envelope if it's empty
Tomasz Pakuła <tomasz.pakula.oficjalny(a)gmail.com>
HID: pidff: Convert infinite length from Linux API to PID standard
Kees Cook <kees(a)kernel.org>
xen/mcelog: Add __nonstring annotations for unterminated strings
Mark Rutland <mark.rutland(a)arm.com>
perf: arm_pmu: Don't disable counter in armpmu_add()
Max Grobecker <max(a)grobecker.info>
x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine
Zhongqiu Han <quic_zhonhan(a)quicinc.com>
pm: cpupower: bench: Prevent NULL dereference on malloc failure
Arnaud Lecomte <contact(a)arnaud-lcm.com>
net: ppp: Add bound checking for skb data on ppp_sync_txmung
Wentao Liang <vulab(a)iscas.ac.cn>
ata: sata_sx4: Add error handling in pdc20621_i2c_read()
Hannes Reinecke <hare(a)suse.de>
ata: sata_sx4: Drop pointless VPRINTK() calls and convert the remaining ones
Cong Wang <xiyou.wangcong(a)gmail.com>
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
Tung Nguyen <tung.quang.nguyen(a)est.tech>
tipc: fix memory leak in tipc_link_xmit
Henry Martin <bsdhenrymartin(a)gmail.com>
ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
-------------
Diffstat:
Makefile | 7 +-
arch/arm64/boot/dts/mediatek/mt8173.dtsi | 6 +-
arch/arm64/include/asm/cputype.h | 2 +
arch/mips/dec/prom/init.c | 2 +-
arch/mips/include/asm/ds1287.h | 2 +-
arch/mips/include/asm/mips-cm.h | 22 ++++
arch/mips/kernel/cevt-ds1287.c | 1 +
arch/mips/kernel/mips-cm.c | 14 +++
arch/parisc/kernel/pdt.c | 2 +
arch/powerpc/kernel/Makefile | 1 +
arch/riscv/include/asm/syscall.h | 7 +-
arch/s390/kvm/trace-s390.h | 4 +-
arch/sparc/mm/tlb.c | 5 +-
arch/x86/events/intel/ds.c | 8 +-
arch/x86/events/intel/uncore_snbep.c | 16 +--
arch/x86/kernel/cpu/amd.c | 2 +-
arch/x86/kernel/cpu/bugs.c | 8 +-
arch/x86/kernel/e820.c | 17 ++-
crypto/crypto_null.c | 37 ++++---
drivers/acpi/pptt.c | 4 +-
drivers/ata/ahci.c | 2 +
drivers/ata/libata-eh.c | 11 +-
drivers/ata/pata_pxa.c | 6 ++
drivers/ata/sata_sx4.c | 118 ++++++++-------------
drivers/bluetooth/btrtl.c | 2 +
drivers/bluetooth/hci_ldisc.c | 19 +++-
drivers/bluetooth/hci_uart.h | 1 +
drivers/char/virtio_console.c | 7 +-
drivers/clk/clk.c | 4 +
drivers/cpufreq/cpufreq.c | 8 ++
drivers/cpufreq/scpi-cpufreq.c | 13 ++-
drivers/crypto/atmel-sha204a.c | 7 +-
drivers/crypto/ccp/sp-pci.c | 15 +--
drivers/dma-buf/udmabuf.c | 2 +-
drivers/dma/dmatest.c | 6 +-
drivers/gpio/gpio-zynq.c | 1 +
drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 10 ++
.../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 2 +-
.../gpu/drm/amd/powerplay/hwmgr/vega20_thermal.c | 2 +-
drivers/gpu/drm/drm_atomic_helper.c | 2 +-
drivers/gpu/drm/drm_panel_orientation_quirks.c | 10 +-
drivers/gpu/drm/mediatek/mtk_dpi.c | 9 ++
drivers/gpu/drm/nouveau/nouveau_bo.c | 3 +
drivers/gpu/drm/nouveau/nouveau_gem.c | 3 -
drivers/gpu/drm/sti/Makefile | 2 -
drivers/gpu/drm/tiny/repaper.c | 4 +-
drivers/hid/usbhid/hid-pidff.c | 60 +++++++----
drivers/hsi/clients/ssi_protocol.c | 1 +
drivers/i2c/busses/i2c-cros-ec-tunnel.c | 3 +
drivers/i3c/master.c | 3 +
drivers/iio/adc/ad7768-1.c | 5 +-
drivers/infiniband/hw/qib/qib_fs.c | 1 +
drivers/infiniband/hw/usnic/usnic_ib_main.c | 14 +--
drivers/infiniband/ulp/srpt/ib_srpt.c | 8 +-
drivers/mcb/mcb-parse.c | 2 +-
drivers/md/dm-integrity.c | 3 +
drivers/md/raid1.c | 26 +++--
drivers/media/common/siano/smsdvb-main.c | 2 +
drivers/media/i2c/adv748x/adv748x.h | 2 +-
drivers/media/i2c/ov7251.c | 4 +-
drivers/media/platform/qcom/venus/hfi_parser.c | 2 +
drivers/media/platform/qcom/venus/hfi_venus.c | 18 +++-
drivers/media/platform/vim2m.c | 6 +-
drivers/media/rc/streamzap.c | 68 ++++++------
drivers/media/v4l2-core/v4l2-dv-timings.c | 4 +-
drivers/misc/pci_endpoint_test.c | 36 ++++---
drivers/mmc/host/cqhci.c | 2 +-
drivers/mtd/inftlcore.c | 9 +-
drivers/mtd/nand/raw/brcmnand/brcmnand.c | 2 +-
drivers/mtd/nand/raw/r852.c | 3 +
drivers/net/dsa/b53/b53_common.c | 10 ++
drivers/net/dsa/mv88e6xxx/chip.c | 25 ++++-
drivers/net/phy/phy_led_triggers.c | 23 ++--
drivers/net/ppp/ppp_synctty.c | 5 +
drivers/net/virtio_net.c | 22 ++--
drivers/net/wireless/atmel/at76c50x-usb.c | 2 +-
drivers/net/wireless/mediatek/mt76/mt76x2/usb.c | 1 +
drivers/net/wireless/ti/wl1251/tx.c | 4 +-
drivers/ntb/hw/idt/ntb_hw_idt.c | 18 ++--
drivers/ntb/ntb_transport.c | 2 +-
drivers/nvme/target/fc.c | 14 ---
drivers/of/irq.c | 13 ++-
drivers/pci/probe.c | 5 +-
drivers/perf/arm_pmu.c | 8 +-
drivers/platform/x86/asus-laptop.c | 9 +-
.../x86/intel_speed_select_if/isst_if_common.c | 2 +-
drivers/pwm/pwm-fsl-ftm.c | 6 ++
drivers/pwm/pwm-mediatek.c | 20 +++-
drivers/s390/virtio/virtio_ccw.c | 16 ++-
drivers/scsi/pm8001/pm8001_sas.c | 1 +
drivers/scsi/scsi_transport_iscsi.c | 7 +-
drivers/scsi/st.c | 2 +-
drivers/staging/comedi/drivers/jr3_pci.c | 15 ++-
drivers/thermal/rockchip_thermal.c | 1 +
drivers/tty/serial/sifive.c | 6 ++
drivers/usb/cdns3/gadget.c | 2 +
drivers/usb/core/quirks.c | 9 ++
drivers/usb/dwc3/core.c | 11 +-
drivers/usb/dwc3/gadget.c | 6 ++
drivers/usb/gadget/udc/aspeed-vhub/dev.c | 3 +
drivers/usb/host/max3421-hcd.c | 7 ++
drivers/usb/host/ohci-pci.c | 23 ++++
drivers/usb/serial/ftdi_sio.c | 2 +
drivers/usb/serial/ftdi_sio_ids.h | 5 +
drivers/usb/serial/option.c | 3 +
drivers/usb/serial/usb-serial-simple.c | 7 ++
drivers/usb/storage/unusual_uas.h | 7 ++
drivers/video/fbdev/omap2/omapfb/dss/dispc.c | 6 +-
drivers/xen/xenfs/xensyms.c | 4 +-
fs/Kconfig | 1 +
fs/btrfs/super.c | 3 +-
fs/ext4/dir.c | 12 ++-
fs/ext4/inode.c | 69 ++++++++----
fs/ext4/namei.c | 2 +-
fs/ext4/super.c | 61 ++++++-----
fs/ext4/xattr.c | 11 +-
fs/fuse/virtio_fs.c | 3 +
fs/hfs/bnode.c | 6 ++
fs/hfsplus/bnode.c | 6 ++
fs/isofs/export.c | 2 +-
fs/jbd2/journal.c | 1 -
fs/jfs/jfs_dmap.c | 10 +-
fs/jfs/jfs_imap.c | 2 +-
fs/nfs/Kconfig | 2 +-
fs/nfs/internal.h | 22 ----
fs/nfs/nfs4session.h | 4 -
fs/nfsd/Kconfig | 1 +
fs/nfsd/nfsfh.h | 12 +--
include/linux/backing-dev.h | 1 +
include/linux/nfs.h | 13 +++
include/linux/pci.h | 4 +-
include/net/sctp/structs.h | 3 +-
include/uapi/linux/kfd_ioctl.h | 2 +
include/uapi/linux/pcitest.h | 3 +-
include/xen/interface/xen-mca.h | 2 +-
init/Kconfig | 3 +-
kernel/locking/lockdep.c | 3 +
kernel/trace/ftrace.c | 1 +
kernel/trace/trace_events.c | 4 +-
lib/sg_split.c | 2 -
mm/vmscan.c | 2 +-
net/8021q/vlan_dev.c | 31 +-----
net/bluetooth/hci_event.c | 5 +-
net/core/dev.c | 1 +
net/core/filter.c | 80 +++++++-------
net/core/page_pool.c | 8 +-
net/ipv4/inet_connection_sock.c | 19 +++-
net/mac80211/iface.c | 3 +
net/mac80211/mesh_hwmp.c | 14 ++-
net/openvswitch/actions.c | 4 +-
net/openvswitch/flow_netlink.c | 3 +-
net/sched/sch_codel.c | 5 +-
net/sched/sch_fq_codel.c | 6 +-
net/sched/sch_hfsc.c | 23 ++--
net/sctp/socket.c | 22 ++--
net/sctp/transport.c | 2 +
net/tipc/link.c | 1 +
net/tipc/monitor.c | 3 +-
sound/pci/hda/hda_intel.c | 15 ++-
sound/usb/midi.c | 80 ++++++++++++--
tools/power/cpupower/bench/parse.c | 4 +
tools/testing/selftests/ublk/test_stripe_04.sh | 24 +++++
162 files changed, 1121 insertions(+), 557 deletions(-)
4 months, 3 weeks
- 6
- 184
[PATCH 0/1] mm: Fix regression after THP PTE optimization on Xen PV Dom0
by Petr Vaněk
Hi all,
I have found a problem in recent kernels 6.9+ when running under the Xen
hypervisor as a PV dom0. In my setup (PV Dom0 with 4G RAM, using XFS), I
shrink memory to 256M via the balloon driver after boot:
xl mem-set Domain-0 256m
Once memory is reduced, even running a simple command like ls usually
triggers the following warning:
[ 27.963562] [ T2553] page: refcount:88 mapcount:21 mapping:ffff88813ff6f6a8 index:0x110 pfn:0x10085c
[ 27.963564] [ T2553] head: order:2 mapcount:83 entire_mapcount:0 nr_pages_mapped:4 pincount:0
[ 27.963565] [ T2553] memcg:ffff888003573000
[ 27.963567] [ T2553] aops:0xffffffff8226fd20 ino:82467c dentry name(?):"libc.so.6"
[ 27.963570] [ T2553] flags: 0x2000000000416c(referenced|uptodate|lru|active|private|head|node=0|zone=2)
[ 27.963573] [ T2553] raw: 002000000000416c ffffea0004021e88 ffffea0004021908 ffff88813ff6f6a8
[ 27.963574] [ T2553] raw: 0000000000000110 ffff88811bf06b60 0000005800000014 ffff888003573000
[ 27.963576] [ T2553] head: 002000000000416c ffffea0004021e88 ffffea0004021908 ffff88813ff6f6a8
[ 27.963577] [ T2553] head: 0000000000000110 ffff88811bf06b60 0000005800000014 ffff888003573000
[ 27.963578] [ T2553] head: 0020000000000202 ffffea0004021701 0000000400000052 00000000ffffffff
[ 27.963580] [ T2553] head: 0000000300000003 8000000300000002 0000000000000014 0000000000000004
[ 27.963581] [ T2553] page dumped because: VM_WARN_ON_FOLIO((_Generic((page + nr_pages - 1), const struct page *: (const struct folio *)_compound_head(page + nr_pages - 1), struct page *: (struct folio *)_compound_head(page + nr_pages - 1))) != folio)
[ 27.963590] [ T2553] ------------[ cut here ]------------
[ 27.963591] [ T2553] WARNING: CPU: 1 PID: 2553 at include/linux/rmap.h:427 __folio_rmap_sanity_checks+0x1a0/0x270
[ 27.963596] [ T2553] CPU: 1 UID: 0 PID: 2553 Comm: ls Not tainted 6.15.0-rc4-00002-ge0363f942651 #270 PREEMPT(undef)
[ 27.963599] [ T2553] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-20240910_120124-localhost 04/01/2014
[ 27.963601] [ T2553] RIP: e030:__folio_rmap_sanity_checks+0x1a0/0x270
[ 27.963603] [ T2553] Code: 89 df e8 b3 7d fd ff 0f 0b e9 eb fe ff ff 48 8d 42 ff 48 39 c3 0f 84 0e ff ff ff 48 c7 c6 e8 49 5b 82 48 89 df e8 90 7d fd ff <0f> 0b e9 f8 fe ff ff 41 f7 c4 ff 0f 00 00 0f 85 b2 fe ff ff 49 8b
[ 27.963605] [ T2553] RSP: e02b:ffffc90040f8fac0 EFLAGS: 00010246
[ 27.963608] [ T2553] RAX: 00000000000000e5 RBX: ffffea0004021700 RCX: 0000000000000000
[ 27.963609] [ T2553] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000ffffffff
[ 27.963610] [ T2553] RBP: ffffc90040f8fae0 R08: 00000000ffffdfff R09: ffffffff82929308
[ 27.963612] [ T2553] R10: ffffffff82879360 R11: 0000000000000002 R12: ffffea0004021700
[ 27.963613] [ T2553] R13: 0000000000000005 R14: 0000000000000000 R15: 0000000000000005
[ 27.963625] [ T2553] FS: 00007ff06dafe740(0000) GS:ffff8880b7ccb000(0000) knlGS:0000000000000000
[ 27.963627] [ T2553] CS: e030 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 27.963628] [ T2553] CR2: 000055deb932f630 CR3: 0000000002844000 CR4: 0000000000050660
[ 27.963630] [ T2553] Call Trace:
[ 27.963632] [ T2553] <TASK>
[ 27.963633] [ T2553] folio_remove_rmap_ptes+0x24/0x2b0
[ 27.963635] [ T2553] unmap_page_range+0x132e/0x17e0
[ 27.963638] [ T2553] unmap_single_vma+0x81/0xd0
[ 27.963640] [ T2553] unmap_vmas+0xb5/0x180
[ 27.963642] [ T2553] exit_mmap+0x10c/0x460
[ 27.963644] [ T2553] mmput+0x59/0x120
[ 27.963647] [ T2553] do_exit+0x2d1/0xbd0
[ 27.963649] [ T2553] do_group_exit+0x2f/0x90
[ 27.963651] [ T2553] __x64_sys_exit_group+0x13/0x20
[ 27.963652] [ T2553] x64_sys_call+0x126b/0x1d70
[ 27.963655] [ T2553] do_syscall_64+0x54/0x120
[ 27.963657] [ T2553] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 27.963659] [ T2553] RIP: 0033:0x7ff06dbdbe9d
[ 27.963660] [ T2553] Code: Unable to access opcode bytes at 0x7ff06dbdbe73.
[ 27.963661] [ T2553] RSP: 002b:00007ffde44f9ac8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7
[ 27.963664] [ T2553] RAX: ffffffffffffffda RBX: 00007ff06dce4fa8 RCX: 00007ff06dbdbe9d
[ 27.963665] [ T2553] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000
[ 27.963666] [ T2553] RBP: 0000000000000000 R08: 00007ffde44f9a70 R09: 00007ffde44f99ff
[ 27.963667] [ T2553] R10: 00007ffde44f9980 R11: 0000000000000206 R12: 00007ff06dce3680
[ 27.963668] [ T2553] R13: 00007ff06dd010e0 R14: 0000000000000002 R15: 00007ff06dce4fc0
[ 27.963670] [ T2553] </TASK>
[ 27.963671] [ T2553] ---[ end trace 0000000000000000 ]---
Later on bigger problems start to appear:
[ 69.035059] [ T2593] BUG: Bad page map in process ls pte:10006c125 pmd:1003dc067
[ 69.035061] [ T2593] page: refcount:8 mapcount:20 mapping:ffff88813fd736a8 index:0x110 pfn:0x10006c
[ 69.035064] [ T2593] head: order:2 mapcount:-2 entire_mapcount:0 nr_pages_mapped:8388532 pincount:0
[ 69.035066] [ T2593] memcg:ffff888003573000
[ 69.035067] [ T2593] aops:0xffffffff8226fd20 ino:82467c dentry name(?):"libc.so.6"
[ 69.035069] [ T2593] flags: 0x2000000000416c(referenced|uptodate|lru|active|private|head|node=0|zone=2)
[ 69.035072] [ T2593] raw: 002000000000416c ffffea0004002348 ffffea0004001d08 ffff88813fd736a8
[ 69.035074] [ T2593] raw: 0000000000000110 ffff888100d19860 0000000800000013 ffff888003573000
[ 69.035076] [ T2593] head: 002000000000416c ffffea0004002348 ffffea0004001d08 ffff88813fd736a8
[ 69.035078] [ T2593] head: 0000000000000110 ffff888100d19860 0000000800000013 ffff888003573000
[ 69.035079] [ T2593] head: 0020000000000202 ffffea0004001b01 ffffffb4fffffffd 00000000ffffffff
[ 69.035081] [ T2593] head: 0000000300000003 0000000500000002 0000000000000013 0000000000000004
[ 69.035082] [ T2593] page dumped because: bad pte
[ 69.035083] [ T2593] addr:00007f6524b96000 vm_flags:00000075 anon_vma:0000000000000000 mapping:ffff88813fd736a8 index:110
[ 69.035086] [ T2593] file:libc.so.6 fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio
The system eventually becomes unusable and typically crashes.
I was able to bisect this issue to the commit: 10ebac4f95e7 ("mm/memory:
optimize unmap/zap with PTE-mapped THP").
If I understand correctly, the folio from the first warning has 4 pages,
but folio_pte_batch incorrectly counts 5 pages, because expected_pte and
pte are both zero-valued PTEs, and the loop is not broken in such a case
because pte_same() returns true.
[ 27.963266] [ T2553] folio_pte_batch debug: printing PTE values starting at addr=0x7ff06dc11000
[ 27.963268] [ T2553] PTE[ 0] = 000000010085c125
[ 27.963272] [ T2553] PTE[ 1] = 000000010085d125
[ 27.963274] [ T2553] PTE[ 2] = 000000010085e125
[ 27.963276] [ T2553] PTE[ 3] = 000000010085f125
[ 27.963277] [ T2553] PTE[ 4] = 0000000000000000 <-- not present
[ 27.963279] [ T2553] PTE[ 5] = 0000000102e47125
[ 27.963281] [ T2553] PTE[ 6] = 0000000102e48125
[ 27.963283] [ T2553] PTE[ 7] = 0000000102e49125
As a consequence, zap_present_folio_ptes() is called with nr = 5, which
later calls folio_remove_rmap_ptes(), where __folio_rmap_sanity_checks()
emits the warning log.
The patch in the following message fixes the problem for me. It adds a
check that breaks the loop when encountering non-present PTE, before the
!pte_same() check.
I still don't fully understand how the zero-valued PTE appears there or
why this issue is triggered only when xen-balloon driver shrinks the
memory. I wasn't able to reproduce it without shrinking.
Cheers,
Petr
Petr Vaněk (1):
mm: Fix folio_pte_batch() overcount with zero PTEs
mm/internal.h | 2 ++
1 file changed, 2 insertions(+)
--
2.48.1
4 months, 3 weeks
- 3
- 19
[PATCH 0/3 V3] usb: usbtmc: Fix erroneous ioctl returns
by Dave Penkler
Recent tests with timeouts > INT_MAX produced random error returns
with usbtmc_get_stb. This was caused by assigning the return value
of wait_event_interruptible_timeout to an int which overflowed to
negative values. Also return value on success was the remaining
number of jiffies instead of 0.
These patches fix all the cases where the return of
wait_event_interruptible_timeout was assigned to an int and
the case of the remaining jiffies return in usbtmc_get_stb.
Patch 1: Fixes usbtmc_get_stb
Patch 2: Fixes usbtmc488_ioctl_wait_srq
Patch 3: Fixes usbtmc_generic_read
Dave Penkler (3):
usb: usbtmc: Fix erroneous get_stb ioctl error returns
usb: usbtmc: Fix erroneous wait_srq ioctl return
usb: usbtmc: Fix erroneous generic_read ioctl return
drivers/usb/class/usbtmc.c | 53 ++++++++++++++++++++++----------------
1 file changed, 31 insertions(+), 22 deletions(-)
--
Changes V1 => V2 Add cc to stable line
V2 => V3 Add susbsystem to cover letter
2.49.0
4 months, 3 weeks
- 1
- 3
Linux 6.14.5
by Greg Kroah-Hartman
I'm announcing the release of the 6.14.5 kernel.
All users of the 6.14 kernel series must upgrade.
The updated 6.14.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.14.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/admin-guide/kernel-parameters.txt | 2
Documentation/bpf/bpf_devel_QA.rst | 8
Documentation/trace/debugging.rst | 2
Makefile | 3
arch/arm/crypto/Kconfig | 10
arch/arm64/crypto/Kconfig | 6
arch/loongarch/Kconfig | 1
arch/loongarch/include/asm/fpu.h | 39
arch/loongarch/include/asm/lbt.h | 10
arch/loongarch/include/asm/ptrace.h | 4
arch/loongarch/kernel/fpu.S | 6
arch/loongarch/kernel/lbt.S | 4
arch/loongarch/kernel/signal.c | 21
arch/loongarch/kernel/traps.c | 20
arch/loongarch/kvm/intc/ipi.c | 4
arch/loongarch/kvm/main.c | 4
arch/loongarch/kvm/vcpu.c | 8
arch/loongarch/mm/hugetlbpage.c | 2
arch/loongarch/mm/init.c | 3
arch/mips/crypto/Kconfig | 7
arch/mips/include/asm/mips-cm.h | 22
arch/mips/kernel/mips-cm.c | 14
arch/parisc/kernel/pdt.c | 2
arch/powerpc/crypto/Kconfig | 7
arch/riscv/crypto/Kconfig | 1
arch/riscv/include/asm/alternative-macros.h | 19
arch/riscv/include/asm/cacheflush.h | 15
arch/riscv/include/asm/ftrace.h | 2
arch/riscv/include/asm/ptrace.h | 18
arch/riscv/kernel/probes/uprobes.c | 10
arch/s390/crypto/Kconfig | 3
arch/s390/kvm/intercept.c | 2
arch/s390/kvm/interrupt.c | 8
arch/s390/kvm/kvm-s390.c | 10
arch/s390/kvm/trace-s390.h | 4
arch/um/include/linux/time-internal.h | 2
arch/um/kernel/skas/syscall.c | 11
arch/x86/crypto/Kconfig | 11
arch/x86/entry/entry.S | 2
arch/x86/events/core.c | 2
arch/x86/include/asm/intel-family.h | 2
arch/x86/include/asm/pgalloc.h | 19
arch/x86/kernel/cpu/bugs.c | 30
arch/x86/kernel/i8253.c | 3
arch/x86/kernel/machine_kexec_32.c | 4
arch/x86/kvm/svm/avic.c | 60
arch/x86/kvm/vmx/posted_intr.c | 28
arch/x86/kvm/x86.c | 20
arch/x86/lib/x86-opcode-map.txt | 4
arch/x86/mm/pgtable.c | 4
arch/x86/mm/tlb.c | 6
arch/x86/pci/xen.c | 8
arch/x86/platform/efi/efi_64.c | 4
arch/x86/xen/enlighten_pvh.c | 19
block/bdev.c | 22
block/blk-cgroup.c | 2
block/blk-settings.c | 8
block/blk.h | 3
block/fops.c | 2
crypto/Kconfig | 3
crypto/crypto_null.c | 39
crypto/ecc.c | 2
crypto/ecdsa-p1363.c | 2
crypto/ecdsa-x962.c | 4
drivers/acpi/ec.c | 28
drivers/acpi/pptt.c | 4
drivers/android/binder.c | 2
drivers/ata/libata-scsi.c | 25
drivers/base/base.h | 17
drivers/base/bus.c | 2
drivers/base/core.c | 38
drivers/base/dd.c | 7
drivers/block/ublk_drv.c | 214 +-
drivers/char/misc.c | 2
drivers/char/virtio_console.c | 7
drivers/clk/clk.c | 4
drivers/clk/renesas/rzv2h-cpg.c | 12
drivers/comedi/drivers/jr3_pci.c | 2
drivers/cpufreq/Kconfig.arm | 20
drivers/cpufreq/apple-soc-cpufreq.c | 10
drivers/cpufreq/cppc_cpufreq.c | 2
drivers/cpufreq/scmi-cpufreq.c | 10
drivers/cpufreq/scpi-cpufreq.c | 13
drivers/cpufreq/sun50i-cpufreq-nvmem.c | 18
drivers/crypto/atmel-sha204a.c | 6
drivers/crypto/ccp/sp-pci.c | 1
drivers/cxl/core/regs.c | 4
drivers/dma-buf/udmabuf.c | 2
drivers/dma/bcm2835-dma.c | 2
drivers/dma/dmatest.c | 6
drivers/firmware/stratix10-svc.c | 14
drivers/gpio/gpiolib-of.c | 6
drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14
drivers/gpu/drm/amd/amdgpu/amdgpu_gfx.c | 14
drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 19
drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 8
drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 12
drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 6
drivers/gpu/drm/amd/amdgpu/gmc_v10_0.c | 4
drivers/gpu/drm/amd/amdgpu/gmc_v11_0.c | 4
drivers/gpu/drm/amd/amdgpu/gmc_v12_0.c | 4
drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c | 2
drivers/gpu/drm/amd/amdgpu/psp_v11_0.c | 2
drivers/gpu/drm/amd/amdgpu/psp_v13_0.c | 2
drivers/gpu/drm/amd/amdgpu/psp_v14_0.c | 2
drivers/gpu/drm/amd/amdkfd/kfd_topology.c | 3
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 9
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c | 2
drivers/gpu/drm/meson/meson_drv.c | 2
drivers/gpu/drm/meson/meson_drv.h | 2
drivers/gpu/drm/meson/meson_encoder_hdmi.c | 29
drivers/gpu/drm/meson/meson_vclk.c | 195 +
drivers/gpu/drm/meson/meson_vclk.h | 13
drivers/gpu/drm/panel/panel-jadard-jd9365da-h3.c | 4
drivers/gpu/drm/xe/regs/xe_gt_regs.h | 4
drivers/gpu/drm/xe/tests/xe_rtp_test.c | 2
drivers/gpu/drm/xe/xe_gt.c | 4
drivers/gpu/drm/xe/xe_gt_debugfs.c | 11
drivers/gpu/drm/xe/xe_gt_types.h | 10
drivers/gpu/drm/xe/xe_hw_engine.c | 18
drivers/gpu/drm/xe/xe_reg_whitelist.c | 4
drivers/gpu/drm/xe/xe_rtp.c | 6
drivers/gpu/drm/xe/xe_rtp.h | 2
drivers/gpu/drm/xe/xe_tuning.c | 71
drivers/gpu/drm/xe/xe_tuning.h | 3
drivers/gpu/drm/xe/xe_wa.c | 22
drivers/gpu/drm/xe/xe_wa_oob.rules | 2
drivers/i3c/master/svc-i3c-master.c | 17
drivers/iio/adc/ad4695.c | 34
drivers/iio/adc/ad7768-1.c | 5
drivers/infiniband/hw/qib/qib_fs.c | 1
drivers/iommu/amd/iommu.c | 2
drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3-iommufd.c | 2
drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 4
drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h | 1
drivers/iommu/iommu.c | 3
drivers/irqchip/irq-gic-v2m.c | 2
drivers/irqchip/irq-renesas-rzv2h.c | 91
drivers/mailbox/pcc.c | 15
drivers/mcb/mcb-parse.c | 2
drivers/md/raid1.c | 26
drivers/media/i2c/Kconfig | 1
drivers/media/i2c/imx214.c | 978 ++++------
drivers/media/i2c/ov08x40.c | 56
drivers/misc/lkdtm/perms.c | 14
drivers/misc/mchp_pci1xxxx/mchp_pci1xxxx_gpio.c | 8
drivers/misc/mei/hw-me-regs.h | 1
drivers/misc/mei/pci-me.c | 1
drivers/misc/mei/vsc-tp.c | 26
drivers/mmc/host/sdhci-msm.c | 2
drivers/net/dsa/mt7530.c | 6
drivers/net/ethernet/amd/pds_core/adminq.c | 36
drivers/net/ethernet/amd/pds_core/auxbus.c | 3
drivers/net/ethernet/amd/pds_core/core.c | 9
drivers/net/ethernet/amd/pds_core/core.h | 4
drivers/net/ethernet/amd/pds_core/devlink.c | 4
drivers/net/ethernet/freescale/enetc/enetc.c | 45
drivers/net/ethernet/mediatek/mtk_eth_soc.c | 24
drivers/net/ethernet/mediatek/mtk_eth_soc.h | 10
drivers/net/ethernet/mellanox/mlx5/core/lib/fs_ttc.c | 26
drivers/net/ethernet/stmicro/stmmac/dwmac-socfpga.c | 18
drivers/net/ethernet/stmicro/stmmac/dwmac1000.h | 4
drivers/net/ethernet/stmicro/stmmac/dwmac1000_core.c | 2
drivers/net/ethernet/stmicro/stmmac/stmmac_hwtstamp.c | 2
drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 62
drivers/net/ethernet/sun/niu.c | 2
drivers/net/phy/dp83822.c | 40
drivers/net/phy/microchip.c | 46
drivers/net/phy/phy_device.c | 53
drivers/net/phy/phy_led_triggers.c | 23
drivers/net/phy/phylink.c | 164 +
drivers/net/virtio_net.c | 125 -
drivers/net/vmxnet3/vmxnet3_xdp.c | 2
drivers/net/xen-netfront.c | 17
drivers/ntb/hw/amd/ntb_hw_amd.c | 1
drivers/ntb/hw/idt/ntb_hw_idt.c | 18
drivers/nvme/host/core.c | 9
drivers/nvme/host/multipath.c | 2
drivers/nvme/target/core.c | 3
drivers/nvme/target/fc.c | 25
drivers/nvme/target/pci-epf.c | 14
drivers/of/resolver.c | 37
drivers/pci/msi/msi.c | 38
drivers/phy/rockchip/phy-rockchip-usbdp.c | 1
drivers/pinctrl/pinctrl-mcp23s08.c | 23
drivers/pinctrl/renesas/pinctrl-rza2.c | 3
drivers/platform/x86/x86-android-tablets/dmi.c | 14
drivers/platform/x86/x86-android-tablets/other.c | 124 -
drivers/platform/x86/x86-android-tablets/x86-android-tablets.h | 3
drivers/pwm/core.c | 13
drivers/pwm/pwm-axi-pwmgen.c | 10
drivers/regulator/rk808-regulator.c | 4
drivers/rtc/rtc-pcf85063.c | 19
drivers/s390/char/sclp_con.c | 17
drivers/s390/char/sclp_tty.c | 12
drivers/scsi/hisi_sas/hisi_sas_main.c | 20
drivers/scsi/mpi3mr/mpi3mr_fw.c | 2
drivers/scsi/pm8001/pm8001_sas.c | 1
drivers/scsi/scsi.c | 36
drivers/scsi/scsi_lib.c | 6
drivers/soc/qcom/ice.c | 48
drivers/spi/spi-imx.c | 5
drivers/spi/spi-tegra210-quad.c | 6
drivers/staging/gpib/agilent_82350b/agilent_82350b.c | 10
drivers/thunderbolt/tb.c | 16
drivers/tty/serial/msm_serial.c | 6
drivers/tty/serial/sifive.c | 6
drivers/tty/vt/selection.c | 5
drivers/ufs/core/ufs-mcq.c | 12
drivers/ufs/core/ufshcd.c | 2
drivers/ufs/host/ufs-exynos.c | 44
drivers/ufs/host/ufs-exynos.h | 1
drivers/ufs/host/ufs-qcom.c | 2
drivers/usb/cdns3/cdns3-gadget.c | 2
drivers/usb/chipidea/ci_hdrc_imx.c | 44
drivers/usb/class/cdc-wdm.c | 21
drivers/usb/core/quirks.c | 9
drivers/usb/dwc3/dwc3-pci.c | 10
drivers/usb/dwc3/dwc3-xilinx.c | 4
drivers/usb/dwc3/gadget.c | 28
drivers/usb/gadget/udc/aspeed-vhub/dev.c | 3
drivers/usb/host/max3421-hcd.c | 7
drivers/usb/host/ohci-pci.c | 23
drivers/usb/host/xhci-hub.c | 30
drivers/usb/host/xhci-mvebu.c | 10
drivers/usb/host/xhci-mvebu.h | 6
drivers/usb/host/xhci-plat.c | 2
drivers/usb/host/xhci-ring.c | 75
drivers/usb/host/xhci.c | 4
drivers/usb/host/xhci.h | 4
drivers/usb/serial/ftdi_sio.c | 2
drivers/usb/serial/ftdi_sio_ids.h | 5
drivers/usb/serial/option.c | 3
drivers/usb/serial/usb-serial-simple.c | 7
drivers/usb/storage/unusual_uas.h | 7
drivers/usb/typec/class.c | 24
drivers/usb/typec/class.h | 1
drivers/usb/typec/ucsi/cros_ec_ucsi.c | 5
drivers/usb/typec/ucsi/ucsi.c | 19
drivers/usb/typec/ucsi/ucsi.h | 6
drivers/usb/typec/ucsi/ucsi_acpi.c | 5
drivers/usb/typec/ucsi/ucsi_ccg.c | 67
drivers/vhost/scsi.c | 80
drivers/virtio/virtio_pci_modern.c | 4
drivers/xen/Kconfig | 2
fs/btrfs/file.c | 9
fs/btrfs/zoned.c | 1
fs/ceph/inode.c | 2
fs/ext4/block_validity.c | 5
fs/ext4/inode.c | 7
fs/iomap/buffered-io.c | 2
fs/namespace.c | 69
fs/netfs/main.c | 4
fs/ntfs3/file.c | 20
fs/smb/client/sess.c | 60
fs/smb/client/smb1ops.c | 36
fs/smb/server/vfs_cache.c | 8
fs/splice.c | 2
fs/xattr.c | 4
include/linux/blkdev.h | 4
include/linux/energy_model.h | 12
include/linux/math.h | 12
include/linux/msi.h | 3
include/linux/pci.h | 2
include/linux/phy.h | 4
include/linux/phylink.h | 4
include/net/netfilter/nft_fib.h | 21
include/soc/qcom/ice.h | 2
include/uapi/linux/virtio_pci.h | 1
init/Kconfig | 2
io_uring/io_uring.c | 15
io_uring/refs.h | 7
kernel/bpf/bpf_cgrp_storage.c | 11
kernel/bpf/hashtab.c | 6
kernel/bpf/preload/bpf_preload_kern.c | 1
kernel/bpf/syscall.c | 6
kernel/bpf/verifier.c | 32
kernel/cgroup/cgroup.c | 29
kernel/cgroup/cpuset-internal.h | 1
kernel/cgroup/cpuset.c | 14
kernel/dma/contiguous.c | 3
kernel/events/core.c | 6
kernel/irq/msi.c | 2
kernel/panic.c | 6
kernel/power/energy_model.c | 47
kernel/sched/ext.c | 4
kernel/sched/fair.c | 4
kernel/time/tick-common.c | 22
kernel/trace/bpf_trace.c | 7
kernel/trace/trace.c | 10
lib/Kconfig.ubsan | 1
lib/crypto/Kconfig | 37
lib/test_ubsan.c | 18
mm/vmscan.c | 7
net/9p/client.c | 30
net/9p/trans_fd.c | 17
net/core/lwtunnel.c | 26
net/core/selftests.c | 18
net/ipv4/netfilter/nft_fib_ipv4.c | 11
net/ipv6/netfilter/nft_fib_ipv6.c | 19
net/mptcp/pm_userspace.c | 6
net/sched/sch_hfsc.c | 23
net/tipc/monitor.c | 3
rust/Makefile | 8
rust/kernel/firmware.rs | 8
scripts/Makefile.lib | 2
scripts/Makefile.vmlinux | 4
sound/soc/codecs/aw88081.c | 10
sound/soc/codecs/wcd934x.c | 2
sound/soc/fsl/fsl_asrc_dma.c | 15
sound/virtio/virtio_pcm.c | 21
tools/arch/x86/lib/x86-opcode-map.txt | 4
tools/bpf/bpftool/prog.c | 1
tools/objtool/check.c | 36
tools/testing/selftests/bpf/cap_helpers.c | 8
tools/testing/selftests/bpf/cap_helpers.h | 1
tools/testing/selftests/bpf/network_helpers.c | 33
tools/testing/selftests/bpf/prog_tests/verifier.c | 4
tools/testing/selftests/bpf/test_loader.c | 6
tools/testing/selftests/mincore/mincore_selftest.c | 3
tools/testing/selftests/pcie_bwctrl/Makefile | 3
tools/testing/selftests/ublk/test_stripe_04.sh | 24
323 files changed, 3670 insertions(+), 2042 deletions(-)
Adam Xue (1):
USB: serial: option: add Sierra Wireless EM9291
Al Viro (2):
fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
qibfs: fix _another_ leak
Alexander Stein (1):
usb: host: max3421-hcd: Add missing spi_device_id table
Alexander Usyskin (1):
mei: me: add panther lake H DID
Alexei Starovoitov (2):
bpf: Add namespace to BPF internal symbols
bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
Alexey Nepomnyashih (1):
xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
Alexis Lothore (1):
net: stmmac: fix dwmac1000 ptp timestamp status offset
Alexis Lothoré (1):
net: stmmac: fix multiplication overflow when reading timestamp
Amery Hung (1):
selftests/bpf: Fix stdout race condition in traffic monitor
Anastasia Kovaleva (1):
scsi: core: Clear flags for scsi_cmnd that did not complete
Andre Przywara (1):
cpufreq: sun50i: prevent out-of-bounds access
Andrei Kuchynski (2):
usb: typec: class: Fix NULL pointer access
usb: typec: class: Invalidate USB device pointers on partner unregistration
Andrew Jones (1):
riscv: Provide all alternative macros all the time
André Apitzsch (6):
media: i2c: imx214: Use subdev active state
media: i2c: imx214: Simplify with dev_err_probe()
media: i2c: imx214: Convert to CCI register access helpers
media: i2c: imx214: Replace register addresses with macros
media: i2c: imx214: Check number of lanes from device tree
media: i2c: imx214: Fix link frequency validation
Andy Shevchenko (3):
usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment
Andy Yan (1):
phy: rockchip: usbdp: Avoid call hpd_event_trigger in dp_phy_init
Arnd Bergmann (2):
dma/contiguous: avoid warning about unused size_bytes
ntb: reduce stack usage in idt_scan_mws
Basavaraj Natikar (1):
ntb_hw_amd: Add NTB PCI ID for new gen CPU
Benjamin Berg (1):
um: work around sched_yield not yielding in time-travel mode
Bibo Mao (2):
LoongArch: KVM: Fully clear some CSRs when VM reboot
LoongArch: KVM: Fix PMU pass-through issue if VM exits to host finally
Biju Das (4):
irqchip/renesas-rzv2h: Simplify rzv2h_icu_init()
irqchip/renesas-rzv2h: Add struct rzv2h_hw_info with t_offs variable
irqchip/renesas-rzv2h: Prevent TINT spurious interrupt
clk: renesas: rzv2h: Adjust for CPG_BUS_m_MSTOP starting from m = 1
Björn Töpel (2):
riscv: Replace function-like macro by static inline function
riscv: uprobes: Add missing fence.i after building the XOL buffer
Bo-Cun Chen (1):
net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration
Breno Leitao (3):
sched_ext: Use kvzalloc for large exit_dump allocation
spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
spi: tegra210-quad: add rate limiting and simplify timeout error message
Brett Creeley (3):
pds_core: Prevent possible adminq overflow/stuck condition
pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result
pds_core: Remove unnecessary check in pds_client_adminq_cmd()
Bui Quang Minh (1):
virtio-net: disable delayed refill when pausing rx
Caleb Sander Mateos (1):
ublk: remove unused cmd argument to ublk_dispatch_req()
Carlos Llamas (1):
binder: fix offset calculation in debug log
Charlie Jenkins (1):
riscv: tracing: Fix __write_overflow_field in ftrace_partial_regs()
Chenyuan Yang (4):
scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()
pinctrl: renesas: rza2: Fix potential NULL pointer dereference
usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
Christian Hewitt (1):
Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates"
Christian König (1):
drm/amdgpu: use a dummy owner for sysfs triggered cleaner shaders v4
Christian Schrefl (1):
rust: firmware: Use `ffi::c_char` type in `FwFunc`
Christoph Hellwig (4):
block: never reduce ra_pages in blk_apply_bdi_limits
block: move blkdev_{get,put} _no_open prototypes out of blkdev.h
block: remove the backing_inode variable in bdev_statx
block: don't autoload drivers on stat
Cong Wang (2):
net_sched: hfsc: Fix a UAF vulnerability in class handling
net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
Craig Hesling (1):
USB: serial: simple: add OWON HDS200 series oscilloscope support
Damien Le Moal (5):
ata: libata-scsi: Improve CDL control
ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type
ata: libata-scsi: Fix ata_msense_control_ata_feature()
scsi: Improve CDL control
nvmet: pci-epf: cleanup link state management
Dan Carpenter (2):
usb: typec: class: Unlocked on error in typec_register_partner()
media: i2c: imx214: Fix uninitialized variable in imx214_set_ctrl()
Daniel Borkmann (1):
vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
Daniel Golle (1):
net: dsa: mt7530: sync driver-specific behavior of MT7531 variants
Daniel Jurgens (1):
virtio_pci: Use self group type for cap commands
Daniel Wagner (2):
nvmet-fc: take tgtport reference only once
nvmet-fc: put ref when assoc->del_work is already scheduled
Dave Penkler (1):
staging: gpib: Use min for calculating transfer length
David Howells (1):
ceph: Fix incorrect flush end position calculation
Devaraj Rangasamy (1):
crypto: ccp - Add support for PCI device 0x1134
Dimitri Fedrau (3):
net: phy: Add helper for getting tx amplitude gain
net: phy: dp83822: Add support for changing the transmit amplitude voltage
net: phy: dp83822: fix transmit amplitude if CONFIG_OF_MDIO not defined
Dmitry Baryshkov (2):
usb: typec: ucsi: return CCI and message from sync_control callback
usb: typec: ucsi: ccg: move command quirks to ucsi_ccg_sync_control()
Dmitry Mastykin (1):
pinctrl: mcp23s08: Get rid of spurious level interrupts
Dmitry Torokhov (3):
Revert "drivers: core: synchronize really_probe() and dev_uevent()"
driver core: introduce device_set_driver() helper
driver core: fix potential NULL pointer dereference in dev_uevent()
Dominique Martinet (1):
9p/net: fix improper handling of bogus negative read/write replies
Dongli Zhang (2):
vhost-scsi: Fix vhost_scsi_send_bad_target()
vhost-scsi: Fix vhost_scsi_send_status()
Edward Adam Davis (1):
fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
Emily Deng (1):
drm/amdkfd: sriov doesn't support per queue reset
Fedor Pchelkin (3):
usb: chipidea: ci_hdrc_imx: fix usbmisc handling
usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
Feng Yang (1):
selftests/bpf: Fix cap_enable_effective() return code
Fernando Fernandez Mancera (1):
x86/i8253: Call clockevent_i8253_disable() with interrupts disabled
Fiona Klute (1):
net: phy: microchip: force IRQ polling mode for lan88xx
Florian Westphal (1):
netfilter: fib: avoid lookup if socket is available
Frode Isaksen (1):
usb: dwc3: gadget: check that event count does not exceed event buffer length
Gabriel Shahrouzi (1):
perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
Gou Hao (1):
iomap: skip unnecessary ifs_block_is_uptodate check
Greg Kroah-Hartman (1):
Linux 6.14.5
Gregory CLEMENT (1):
MIPS: cm: Detect CM quirks from device tree
Günther Noack (1):
tty: Require CAP_SYS_ADMIN for all usages of TIOCL_SELMOUSEREPORT
Halil Pasic (1):
virtio_console: fix missing byte order handling for cols and rows
Hannes Reinecke (3):
nvme: requeue namespace scan on missed AENs
nvme: re-read ANA log page after ns scan completes
nvme: fixup scan failure for non-ANA multipath controllers
Hans de Goede (5):
media: ov08x40: Move ov08x40_identify_module() function up
media: ov08x40: Add missing ov08x40_identify_module() call on stream-start
mei: vsc: Fix fortify-panic caused by invalid counted_by() use
platform/x86: x86-android-tablets: Add "9v" to Vexia EDU ATLA 10 tablet symbols
platform/x86: x86-android-tablets: Add Vexia Edu Atla 10 tablet 5V data
Haoxiang Li (3):
mcb: fix a double free bug in chameleon_parse_gdd()
s390/sclp: Add check for get_zeroed_page()
s390/tty: Fix a potential memory leak bug
Heiko Stuebner (1):
clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
Henry Martin (5):
cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()
cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table()
net/mlx5: Move ttc allocation after switch case to prevent leaks
Herbert Xu (4):
crypto: lib/Kconfig - Fix lib built-in failure when arch is modular
crypto: null - Use spin lock instead of mutex
crypto: lib/Kconfig - Hide arch options from user
crypto: Kconfig - Select LIB generic option
Huacai Chen (1):
USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
Hugo Villeneuve (1):
drm: panel: jd9365da: fix reset signal polarity in unprepare
Huisong Li (1):
mailbox: pcc: Fix the possible race in updation of chan_in_use flag
Ian Abbott (1):
comedi: jr3_pci: Fix synchronous deletion of timer
Ignacio Encinas (1):
9p/trans_fd: mark concurrent read and writes to p9_conn->err
Igor Pylypiv (1):
scsi: pm80xx: Set phy_attached to zero when device is gone
Ilpo Järvinen (1):
selftests/pcie_bwctrl: Fix test progs list
Jan Kara (1):
fs/xattr: Fix handling of AT_FDCWD in setxattrat(2) and getxattrat(2)
Jason Andryuk (1):
xen: Change xen-acpi-processor dom0 dependency
Jay Cornwall (1):
drm/amdgpu: Increase KIQ invalidate_tlbs timeout
Jean-Marc Eurin (1):
ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
Jens Axboe (1):
io_uring: fix 'sync' handling of io_fallback_tw()
Jinjiang Tu (1):
mm/vmscan: don't try to reclaim hwpoison folio
Joe Damato (2):
virtio-net: Refactor napi_enable paths
virtio-net: Refactor napi_disable paths
Johan Hovold (1):
cpufreq: fix compile-test defaults
Johannes Schneider (1):
net: dp83822: Fix OF_MDIO config check
Johannes Thumshirn (1):
btrfs: zoned: return EIO on RAID1 block group write pointer mismatch
John Stultz (1):
sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
Jonathan Cameron (1):
iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
Jonathan Currier (2):
PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads
net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads
Josh Poimboeuf (11):
objtool: Silence more KCOV warnings
objtool, panic: Disable SMAP in __stack_chk_fail()
objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler()
objtool, regulator: rk808: Remove potential undefined behavior in rk806_set_mode_dcdc()
objtool, lkdtm: Obfuscate the do_nothing() pointer
objtool: Stop UNRET validation on UD2
x86/bugs: Use SBPB in write_ibpb() if applicable
x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
x86/bugs: Don't fill RSB on context switch with eIBRS
objtool: Ignore end-of-section jumps for KCOV/GCOV
objtool: Silence more KCOV warnings, part 2
Juergen Gross (1):
x86/mm: Fix _pgd_alloc() for Xen PV mode
Julia Filipchuk (1):
drm/xe/xe3lpg: Apply Wa_14022293748, Wa_22019794406
Justin Iurman (1):
net: lwtunnel: disable BHs when required
Kirill A. Shutemov (1):
x86/insn: Fix CTEST instruction decoding
Krzysztof Kozlowski (1):
cpufreq: Do not enable by default during compile testing
Li RongQing (1):
PM: EM: use kfree_rcu() to simplify the code
Lijo Lazar (1):
drm/amdgpu: Use the right function for hdp flush
Lizhi Xu (1):
fs/ntfs3: Keep write operations atomic
Lucas De Marchi (1):
drm/xe/rtp: Drop sentinels from arg to xe_rtp_process_to_sr()
Luis Chamberlain (1):
bdev: use bdev_io_min() for statx block size
Lukas Stockmann (1):
rtc: pcf85063: do a SW reset if POR failed
Lukas Wunner (1):
crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
Luo Gengkun (1):
perf/x86: Fix non-sampling (counting) events on certain x86 platforms
Mahesh Rao (1):
firmware: stratix10-svc: Add of_platform_default_populate()
Marc Zyngier (1):
cpufreq: cppc: Fix invalid return value in .get() callback
Marek Behún (1):
crypto: atmel-sha204a - Set hwrng quality to lowest possible
Mario Limonciello (3):
drm/amd/display: Fix ACPI edid parsing on some Lenovo systems
ACPI: EC: Set ec_no_wakeup for Lenovo Go S
drm/amd: Forbid suspending into non-default suspend states
Martin Blumenstingl (1):
drm/meson: use unsigned long long / Hz for frequency types
Martin KaFai Lau (1):
bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates storage
Mat Martineau (1):
mptcp: pm: Defer freeing of MPTCP userspace path manager entries
Mathias Nyman (2):
xhci: Limit time spent with xHC interrupts disabled during bus resume
xhci: Handle spurious events on Etron host isoc enpoints
Meir Elisha (1):
md/raid1: Add check for missing source disk in process_checks()
Miao Li (2):
usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
Michael Ehrenreich (1):
USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
Michal Pecio (5):
usb: xhci: Fix invalid pointer dereference in Etron workaround
usb: xhci: Complete 'error mid TD' transfers when handling Missed Service
usb: xhci: Fix isochronous Ring Underrun/Overrun event handling
usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running
usb: xhci: Fix Short Packet handling rework ignoring errors
Miguel Ojeda (1):
rust: kbuild: skip `--remap-path-prefix` for `rustdoc`
Mika Westerberg (1):
thunderbolt: Scan retimers after device router has been enumerated
Mike Christie (1):
vhost-scsi: Add better resource allocation failure handling
Mike Looijmans (1):
usb: dwc3: xilinx: Prevent spike in reset signal
Ming Lei (7):
ublk: comment on ubq->canceling handling in ublk_queue_rq()
ublk: implement ->queue_rqs()
ublk: call ublk_dispatch_req() for handling UBLK_U_IO_NEED_GET_DATA
selftests: ublk: fix test_stripe_04
ublk: add ublk_force_abort_dev()
ublk: rely on ->canceling for dealing with ublk_nosrv_dev_should_queue_io
ublk: don't fail request for recovery & reissue in case of ubq->canceling
Ming Wang (1):
LoongArch: Return NULL from huge_pte_offset() for invalid PMD
Mostafa Saleh (1):
ubsan: Fix panic from test_ubsan_out_of_bounds
Namjae Jeon (1):
ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING"
Nathan Chancellor (1):
lib/Kconfig.ubsan: Remove 'default UBSAN' from UBSAN_INTEGER_WRAP
Nicolin Chen (1):
iommu/arm-smmu-v3: Set MEV bit in nested STE for DoS mitigations
Niranjana Vishwanathapura (1):
drm/xe: Ensure fixed_slice_mode gets set after ccs_mode change
Nirmoy Das (1):
drm/xe/ptl: Apply Wa_14023061436
Ojaswin Mujoo (1):
ext4: make block validity check resistent to sb bh corruption
Oleg Nesterov (1):
sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
Oleksij Rempel (1):
net: selftests: initialize TCP header and skb payload with zero
Oliver Neukum (6):
USB: storage: quirk for ADATA Portable HDD CH94
USB: VLI disk crashes if LPM is used
USB: wdm: handle IO errors in wdm_wwan_port_start
USB: wdm: close race between wdm_open and wdm_wwan_port_stop
USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
USB: wdm: add annotation
Omar Sandoval (1):
sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash
Pali Rohár (2):
cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode
cifs: Fix querying of WSL CHR and BLK reparse points over SMB1
Pavel Begunkov (1):
io_uring: always do atomic put from iowq
Peter Griffin (4):
scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init()
scsi: ufs: exynos: Enable PRDT pre-fetching with UFSHCD_CAP_CRYPTO
scsi: ufs: exynos: Move phy calls to .exit() callback
scsi: ufs: exynos: gs101: Put UFS device in reset on .suspend()
Petr Tesarik (1):
LoongArch: Remove a bogus reference to ZONE_DMA
Pi Xiange (1):
x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores
Qingfang Deng (1):
net: phy: leds: fix memory leak
Qiuxu Zhuo (1):
selftests/mincore: Allow read-ahead pages to reach the end of the file
Qu Wenruo (1):
btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
Rafael J. Wysocki (1):
PM: EM: Address RCU-related sparse warnings
Ralph Siemsen (1):
usb: cdns3: Fix deadlock when using NCM gadget
Ranjan Kumar (1):
scsi: mpi3mr: Fix pending I/O counter
Rengarajan S (2):
misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration
misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack
Richard Weinberger (1):
nvmet: fix out-of-bounds access in nvmet_enable_port
Rob Herring (Arm) (1):
of: resolver: Simplify of_resolve_phandles() using __free()
Robin Murphy (1):
iommu: Clear iommu-dma ops on cleanup
Roger Pau Monne (2):
PCI/MSI: Convert pci_msi_ignore_mask to per MSI domain flag
x86/xen: disable CPU idle and frequency drivers for PVH dom0
Roman Li (2):
drm/amd/display: Fix gpu reset in multidisplay config
drm/amd/display: Force full update in gpu reset
Russell King (Oracle) (8):
net: phylink: force link down on major_config failure
net: phylink: fix suspend/resume with WoL enabled and link down
net: stmmac: simplify phylink_suspend() and phylink_resume() calls
net: phylink: add phylink_prepare_resume()
net: stmmac: address non-LPI resume failures properly
net: stmmac: socfpga: remove phy_resume() call
net: phylink: add functions to block/unblock rx clock stop
net: stmmac: block PHY RXC clock-stop
Ryo Takakura (1):
serial: sifive: lock port in startup()/shutdown() callbacks
Sean Christopherson (5):
iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
KVM: SVM: Allocate IR data using atomic allocation
KVM: x86: Explicitly treat routing entry type changes as changes
KVM: x86: Reset IRTE to host control if *new* route isn't postable
KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
Sebastian Andrzej Siewior (1):
timekeeping: Add a lockdep override in tick_freeze()
Sergiu Cuciurean (1):
iio: adc: ad7768-1: Fix conversion result sign
Sewon Nam (1):
bpf: bpftool: Setting error code in do_loader()
Shannon Nelson (1):
pds_core: make wait_context part of q_info
Shengjiu Wang (1):
ASoC: fsl_asrc_dma: get codec or cpu dai from backend
Smita Koralahalli (1):
cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports
Song Liu (1):
netfs: Only create /proc/fs/netfs with CONFIG_PROC_FS
Stanley Chu (1):
i3c: master: svc: Add support for Nuvoton npcm845 i3c
Stefan Wahren (1):
dmaengine: bcm2835-dma: fix warning when CONFIG_PM=n
Stephan Gerhold (1):
serial: msm: Configure correct working mode before starting earlycon
Steven Rostedt (1):
tracing: Enforce the persistent ring buffer to be page aligned
Sudeep Holla (1):
mailbox: pcc: Always clear the platform ack interrupt first
Suzuki K Poulose (1):
irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
T.J. Mercier (2):
cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
splice: remove duplicate noinline from pipe_clear_nowait
Tamura Dai (1):
spi: spi-imx: Add check for spi_imx_setupxfer()
Tejas Upadhyay (1):
drm/xe/xe3lpg: Add Wa_13012615864
Thadeu Lima de Souza Cascardo (1):
char: misc: register chrdev region with all possible minors
Thomas Bogendoerfer (1):
MIPS: cm: Fix warning if MIPS_CM is disabled
Thomas Gleixner (1):
PCI/MSI: Handle the NOMASK flag correctly for all PCI/MSI backends
Thomas Weißschuh (3):
kbuild, rust: use -fremap-path-prefix to make paths relative
KVM: s390: Don't use %pK through tracepoints
KVM: s390: Don't use %pK through debug printing
Théo Lebrun (1):
usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
Tiezhu Yang (3):
LoongArch: Make regs_irqs_disabled() more clear
LoongArch: Make do_xyz() exception handlers more robust
LoongArch: Handle fp, lsx, lasx and lbt assembly symbols
Trevor Gamblin (1):
iio: adc: ad4695: make ad4695_exit_conversion_mode() more robust
Tudor Ambarus (3):
soc: qcom: ice: introduce devm_of_qcom_ice_get
mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get
scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get
Tung Nguyen (1):
tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
Tvrtko Ursulin (1):
drm/xe: Add performance tunings to debugfs
Uday Shankar (2):
ublk: remove io_cmds list in ublk_queue
nvme: multipath: fix return value of nvme_available_path
Uwe Kleine-König (2):
pwm: Let pwm_set_waveform() succeed even if lowlevel driver rounded up
pwm: axi-pwmgen: Let .round_waveform_tohw() signal when request was rounded up
Vinicius Costa Gomes (1):
dmaengine: dmatest: Fix dmatest waiting less when interrupted
Vladimir Oltean (3):
net: enetc: register XDP RX queues with frag_size
net: enetc: refactor bulk flipping of RX buffers to separate function
net: enetc: fix frame corruption on bpf_xdp_adjust_head/tail() and XDP_PASS
Waiman Long (1):
cgroup/cpuset: Don't allow creation of local partition over a remote one
Weidong Wang (1):
ASoC: codecs: Add of_match_table for aw888081 driver
Xi Ruoyao (1):
kbuild: add dependency from vmlinux to sorttable
Xiaogang Chen (1):
udmabuf: fix a buf size overflow issue during udmabuf creation
Xingui Yang (1):
scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
Yafang Shao (1):
bpf: Reject attaching fexit/fmod_ret to __noreturn functions
Yonghong Song (1):
bpf: Fix kmemleak warning for percpu hashmap
Yu-Chun Lin (1):
parisc: PDT: Fix missing prototype warning
Yuli Wang (1):
LoongArch: Select ARCH_USE_MEMTEST
Yulong Han (1):
LoongArch: KVM: Fix multiple typos of KVM code
Zijun Hu (1):
of: resolver: Fix device node refcount leakage in of_resolve_phandles()
4 months, 3 weeks
- 1
- 1
Linux 6.12.26
by Greg Kroah-Hartman
I'm announcing the release of the 6.12.26 kernel.
All users of the 6.12 kernel series must upgrade.
The updated 6.12.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.12.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/bpf/bpf_devel_QA.rst | 8
Makefile | 2
arch/arm/crypto/Kconfig | 10
arch/arm64/boot/dts/ti/k3-j784s4-j742s2-common.dtsi | 148
arch/arm64/boot/dts/ti/k3-j784s4-j742s2-main-common.dtsi | 2673 +++++++++
arch/arm64/boot/dts/ti/k3-j784s4-j742s2-mcu-wakeup-common.dtsi | 760 ++
arch/arm64/boot/dts/ti/k3-j784s4-j742s2-thermal-common.dtsi | 104
arch/arm64/boot/dts/ti/k3-j784s4-main.dtsi | 2847 ----------
arch/arm64/boot/dts/ti/k3-j784s4-mcu-wakeup.dtsi | 760 --
arch/arm64/boot/dts/ti/k3-j784s4-thermal.dtsi | 104
arch/arm64/boot/dts/ti/k3-j784s4.dtsi | 133
arch/arm64/crypto/Kconfig | 6
arch/loongarch/Kconfig | 1
arch/loongarch/include/asm/fpu.h | 39
arch/loongarch/include/asm/lbt.h | 10
arch/loongarch/include/asm/ptrace.h | 4
arch/loongarch/kernel/fpu.S | 6
arch/loongarch/kernel/lbt.S | 4
arch/loongarch/kernel/signal.c | 21
arch/loongarch/kernel/traps.c | 20
arch/loongarch/kvm/vcpu.c | 8
arch/loongarch/mm/hugetlbpage.c | 2
arch/loongarch/mm/init.c | 3
arch/mips/crypto/Kconfig | 7
arch/mips/include/asm/mips-cm.h | 22
arch/mips/kernel/mips-cm.c | 14
arch/parisc/kernel/pdt.c | 2
arch/powerpc/crypto/Kconfig | 7
arch/riscv/crypto/Kconfig | 1
arch/riscv/include/asm/alternative-macros.h | 19
arch/riscv/include/asm/cacheflush.h | 15
arch/riscv/kernel/probes/uprobes.c | 10
arch/s390/crypto/Kconfig | 3
arch/s390/kvm/intercept.c | 2
arch/s390/kvm/interrupt.c | 8
arch/s390/kvm/kvm-s390.c | 10
arch/s390/kvm/trace-s390.h | 4
arch/um/include/linux/time-internal.h | 2
arch/um/kernel/skas/syscall.c | 11
arch/x86/crypto/Kconfig | 11
arch/x86/entry/entry.S | 2
arch/x86/events/core.c | 2
arch/x86/include/asm/cpufeatures.h | 1
arch/x86/include/asm/intel-family.h | 2
arch/x86/kernel/cpu/bugs.c | 30
arch/x86/kernel/i8253.c | 3
arch/x86/kvm/svm/avic.c | 66
arch/x86/kvm/vmx/posted_intr.c | 28
arch/x86/kvm/x86.c | 20
arch/x86/lib/x86-opcode-map.txt | 4
arch/x86/mm/tlb.c | 6
arch/x86/pci/xen.c | 8
arch/x86/xen/enlighten_pvh.c | 19
block/blk-merge.c | 26
block/blk-mq.c | 6
block/blk-settings.c | 8
block/mq-deadline.c | 13
crypto/Kconfig | 3
crypto/crypto_null.c | 39
drivers/accel/ivpu/ivpu_drv.c | 10
drivers/accel/ivpu/ivpu_drv.h | 2
drivers/accel/ivpu/ivpu_fw.c | 18
drivers/accel/ivpu/ivpu_fw.h | 3
drivers/accel/ivpu/ivpu_hw.h | 12
drivers/accel/ivpu/ivpu_hw_btrs.c | 128
drivers/accel/ivpu/ivpu_hw_btrs.h | 6
drivers/accel/ivpu/ivpu_job.c | 14
drivers/accel/ivpu/ivpu_sysfs.c | 24
drivers/acpi/ec.c | 28
drivers/acpi/pptt.c | 4
drivers/ata/libata-scsi.c | 25
drivers/base/base.h | 17
drivers/base/bus.c | 2
drivers/base/core.c | 38
drivers/base/dd.c | 7
drivers/char/misc.c | 2
drivers/char/virtio_console.c | 7
drivers/clk/clk.c | 4
drivers/comedi/drivers/jr3_pci.c | 2
drivers/cpufreq/Kconfig.arm | 20
drivers/cpufreq/apple-soc-cpufreq.c | 10
drivers/cpufreq/cppc_cpufreq.c | 2
drivers/cpufreq/scmi-cpufreq.c | 10
drivers/cpufreq/scpi-cpufreq.c | 13
drivers/cpufreq/sun50i-cpufreq-nvmem.c | 18
drivers/crypto/atmel-sha204a.c | 6
drivers/crypto/ccp/sp-pci.c | 1
drivers/cxl/core/regs.c | 4
drivers/dma/dmatest.c | 6
drivers/firmware/stratix10-svc.c | 14
drivers/gpio/gpiolib-of.c | 6
drivers/gpu/drm/amd/amdgpu/amdgpu.h | 1
drivers/gpu/drm/amd/amdgpu/amdgpu_gfx.c | 14
drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 19
drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 8
drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 12
drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 6
drivers/gpu/drm/amd/amdgpu/gmc_v10_0.c | 4
drivers/gpu/drm/amd/amdgpu/gmc_v11_0.c | 4
drivers/gpu/drm/amd/amdgpu/gmc_v12_0.c | 4
drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c | 2
drivers/gpu/drm/amd/amdgpu/psp_v11_0.c | 2
drivers/gpu/drm/amd/amdgpu/psp_v13_0.c | 2
drivers/gpu/drm/amd/amdgpu/psp_v14_0.c | 2
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 9
drivers/gpu/drm/amd/display/dc/dml2/dml21/dml21_wrapper.c | 11
drivers/gpu/drm/amd/display/dc/dml2/dml2_wrapper.c | 6
drivers/gpu/drm/panel/panel-jadard-jd9365da-h3.c | 4
drivers/gpu/drm/xe/xe_wa_oob.rules | 2
drivers/i3c/master/svc-i3c-master.c | 17
drivers/iio/adc/ad7768-1.c | 5
drivers/infiniband/hw/qib/qib_fs.c | 1
drivers/iommu/amd/iommu.c | 2
drivers/iommu/iommu.c | 8
drivers/irqchip/irq-gic-v2m.c | 2
drivers/mailbox/pcc.c | 15
drivers/mcb/mcb-parse.c | 2
drivers/md/raid1.c | 26
drivers/media/i2c/Kconfig | 1
drivers/media/i2c/imx214.c | 978 +--
drivers/media/i2c/ov08x40.c | 56
drivers/misc/lkdtm/perms.c | 14
drivers/misc/mchp_pci1xxxx/mchp_pci1xxxx_gpio.c | 8
drivers/misc/mei/hw-me-regs.h | 1
drivers/misc/mei/pci-me.c | 1
drivers/misc/mei/vsc-tp.c | 26
drivers/mmc/host/sdhci-msm.c | 2
drivers/net/dsa/mt7530.c | 6
drivers/net/dsa/mv88e6xxx/chip.c | 27
drivers/net/ethernet/amd/pds_core/adminq.c | 36
drivers/net/ethernet/amd/pds_core/auxbus.c | 3
drivers/net/ethernet/amd/pds_core/core.c | 9
drivers/net/ethernet/amd/pds_core/core.h | 4
drivers/net/ethernet/amd/pds_core/devlink.c | 4
drivers/net/ethernet/mediatek/mtk_eth_soc.c | 24
drivers/net/ethernet/mediatek/mtk_eth_soc.h | 10
drivers/net/ethernet/mellanox/mlx5/core/lib/fs_ttc.c | 26
drivers/net/ethernet/sun/niu.c | 2
drivers/net/phy/microchip.c | 46
drivers/net/phy/phy_led_triggers.c | 23
drivers/net/vmxnet3/vmxnet3_xdp.c | 2
drivers/net/xen-netfront.c | 17
drivers/ntb/hw/amd/ntb_hw_amd.c | 1
drivers/ntb/hw/idt/ntb_hw_idt.c | 18
drivers/nvme/host/core.c | 9
drivers/nvme/host/multipath.c | 2
drivers/nvme/target/fc.c | 25
drivers/of/resolver.c | 37
drivers/pci/msi/msi.c | 38
drivers/phy/rockchip/phy-rockchip-usbdp.c | 1
drivers/pinctrl/pinctrl-mcp23s08.c | 23
drivers/pinctrl/renesas/pinctrl-rza2.c | 3
drivers/regulator/rk808-regulator.c | 4
drivers/rtc/rtc-pcf85063.c | 19
drivers/s390/char/sclp_con.c | 17
drivers/s390/char/sclp_tty.c | 12
drivers/scsi/hisi_sas/hisi_sas_main.c | 20
drivers/scsi/mpi3mr/mpi3mr_fw.c | 2
drivers/scsi/pm8001/pm8001_sas.c | 1
drivers/scsi/scsi.c | 36
drivers/scsi/scsi_lib.c | 6
drivers/scsi/sd.c | 6
drivers/soc/qcom/ice.c | 48
drivers/spi/spi-imx.c | 5
drivers/spi/spi-tegra210-quad.c | 6
drivers/thunderbolt/tb.c | 16
drivers/tty/serial/msm_serial.c | 6
drivers/tty/serial/sifive.c | 6
drivers/tty/vt/selection.c | 5
drivers/ufs/core/ufs-mcq.c | 12
drivers/ufs/core/ufshcd.c | 2
drivers/ufs/host/ufs-exynos.c | 106
drivers/ufs/host/ufs-exynos.h | 8
drivers/ufs/host/ufs-qcom.c | 2
drivers/usb/cdns3/cdns3-gadget.c | 2
drivers/usb/chipidea/ci_hdrc_imx.c | 44
drivers/usb/class/cdc-wdm.c | 21
drivers/usb/core/quirks.c | 9
drivers/usb/dwc3/dwc3-pci.c | 10
drivers/usb/dwc3/dwc3-xilinx.c | 4
drivers/usb/dwc3/gadget.c | 28
drivers/usb/gadget/udc/aspeed-vhub/dev.c | 3
drivers/usb/host/max3421-hcd.c | 7
drivers/usb/host/ohci-pci.c | 23
drivers/usb/host/xhci-hub.c | 30
drivers/usb/host/xhci-mvebu.c | 10
drivers/usb/host/xhci-mvebu.h | 6
drivers/usb/host/xhci-plat.c | 2
drivers/usb/host/xhci-ring.c | 75
drivers/usb/host/xhci.c | 4
drivers/usb/host/xhci.h | 4
drivers/usb/serial/ftdi_sio.c | 2
drivers/usb/serial/ftdi_sio_ids.h | 5
drivers/usb/serial/option.c | 3
drivers/usb/serial/usb-serial-simple.c | 7
drivers/usb/storage/unusual_uas.h | 7
drivers/usb/typec/class.c | 24
drivers/usb/typec/class.h | 1
drivers/vhost/scsi.c | 80
drivers/xen/Kconfig | 2
fs/btrfs/file.c | 9
fs/btrfs/zoned.c | 1
fs/ceph/inode.c | 2
fs/ext4/block_validity.c | 5
fs/ext4/inode.c | 9
fs/iomap/buffered-io.c | 2
fs/namespace.c | 69
fs/netfs/main.c | 4
fs/ntfs3/file.c | 20
fs/smb/client/sess.c | 60
fs/smb/client/smb1ops.c | 36
fs/smb/server/asn1.c | 6
fs/smb/server/auth.c | 19
fs/smb/server/connection.c | 8
fs/smb/server/crypto_ctx.c | 6
fs/smb/server/glob.h | 2
fs/smb/server/ksmbd_netlink.h | 3
fs/smb/server/ksmbd_work.c | 10
fs/smb/server/mgmt/ksmbd_ida.c | 11
fs/smb/server/mgmt/share_config.c | 10
fs/smb/server/mgmt/tree_connect.c | 5
fs/smb/server/mgmt/user_config.c | 8
fs/smb/server/mgmt/user_session.c | 10
fs/smb/server/misc.c | 11
fs/smb/server/ndr.c | 10
fs/smb/server/oplock.c | 12
fs/smb/server/server.c | 4
fs/smb/server/server.h | 1
fs/smb/server/smb2pdu.c | 42
fs/smb/server/smb_common.c | 2
fs/smb/server/smbacl.c | 23
fs/smb/server/transport_ipc.c | 7
fs/smb/server/transport_rdma.c | 10
fs/smb/server/transport_tcp.c | 95
fs/smb/server/transport_tcp.h | 2
fs/smb/server/unicode.c | 4
fs/smb/server/vfs.c | 12
fs/smb/server/vfs_cache.c | 18
fs/splice.c | 2
fs/xfs/xfs_aops.c | 41
fs/xfs/xfs_qm_bhv.c | 49
fs/xfs/xfs_super.c | 8
include/drm/intel/i915_pciids.h | 1
include/linux/blk-mq.h | 8
include/linux/energy_model.h | 12
include/linux/msi.h | 3
include/linux/pci.h | 2
include/net/netfilter/nft_fib.h | 21
include/soc/qcom/ice.h | 2
include/trace/events/block.h | 6
include/trace/stages/stage3_trace_output.h | 8
include/trace/stages/stage7_class_define.h | 1
include/uapi/drm/ivpu_accel.h | 4
init/Kconfig | 2
io_uring/io_uring.c | 15
io_uring/refs.h | 7
kernel/bpf/bpf_cgrp_storage.c | 11
kernel/bpf/hashtab.c | 6
kernel/bpf/preload/bpf_preload_kern.c | 1
kernel/bpf/syscall.c | 6
kernel/bpf/verifier.c | 32
kernel/cgroup/cgroup.c | 29
kernel/cgroup/cpuset-internal.h | 1
kernel/cgroup/cpuset.c | 14
kernel/dma/contiguous.c | 3
kernel/events/core.c | 6
kernel/irq/msi.c | 2
kernel/module/Kconfig | 1
kernel/panic.c | 6
kernel/power/energy_model.c | 47
kernel/sched/ext.c | 4
kernel/time/tick-common.c | 22
kernel/trace/bpf_trace.c | 7
kernel/trace/trace_events.c | 7
lib/Kconfig.ubsan | 1
lib/crypto/Kconfig | 37
lib/test_ubsan.c | 18
mm/vmscan.c | 7
net/9p/client.c | 30
net/9p/trans_fd.c | 17
net/core/lwtunnel.c | 26
net/core/selftests.c | 18
net/ipv4/netfilter/nft_fib_ipv4.c | 11
net/ipv6/netfilter/nft_fib_ipv6.c | 19
net/sched/sch_hfsc.c | 23
net/tipc/monitor.c | 3
rust/kernel/firmware.rs | 8
samples/trace_events/trace-events-sample.h | 13
scripts/Makefile.lib | 2
scripts/Makefile.vmlinux | 4
sound/soc/codecs/wcd934x.c | 2
sound/soc/fsl/fsl_asrc_dma.c | 15
sound/virtio/virtio_pcm.c | 21
tools/arch/x86/lib/x86-opcode-map.txt | 4
tools/bpf/bpftool/prog.c | 1
tools/objtool/check.c | 36
tools/testing/selftests/bpf/network_helpers.c | 33
tools/testing/selftests/bpf/prog_tests/xdp_cpumap_attach.c | 44
tools/testing/selftests/bpf/prog_tests/xdp_devmap_attach.c | 8
tools/testing/selftests/bpf/progs/test_xdp_with_cpumap_helpers.c | 7
tools/testing/selftests/mincore/mincore_selftest.c | 3
tools/testing/selftests/ublk/test_stripe_04.sh | 24
302 files changed, 6817 insertions(+), 5584 deletions(-)
Adam Xue (1):
USB: serial: option: add Sierra Wireless EM9291
Al Viro (2):
fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
qibfs: fix _another_ leak
Alex Deucher (1):
drm/amd/display/dml2: use vzalloc rather than kzalloc
Alexander Stein (1):
usb: host: max3421-hcd: Add missing spi_device_id table
Alexander Usyskin (1):
mei: me: add panther lake H DID
Alexei Starovoitov (2):
bpf: Add namespace to BPF internal symbols
bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
Alexey Nepomnyashih (1):
xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
Alexis Lothoré (eBPF Foundation) (3):
selftests/bpf: fix bpf_map_redirect call for cpu map test
selftests/bpf: make xdp_cpumap_attach keep redirect prog attached
selftests/bpf: check program redirect in xdp_cpumap_attach
Amery Hung (1):
selftests/bpf: Fix stdout race condition in traffic monitor
Anastasia Kovaleva (1):
scsi: core: Clear flags for scsi_cmnd that did not complete
Andre Przywara (1):
cpufreq: sun50i: prevent out-of-bounds access
Andrei Kuchynski (2):
usb: typec: class: Fix NULL pointer access
usb: typec: class: Invalidate USB device pointers on partner unregistration
Andrew Jones (1):
riscv: Provide all alternative macros all the time
Andrzej Kacprowski (1):
accel/ivpu: Fix the NPU's DPU frequency calculation
André Apitzsch (6):
media: i2c: imx214: Use subdev active state
media: i2c: imx214: Simplify with dev_err_probe()
media: i2c: imx214: Convert to CCI register access helpers
media: i2c: imx214: Replace register addresses with macros
media: i2c: imx214: Check number of lanes from device tree
media: i2c: imx214: Fix link frequency validation
Andy Shevchenko (3):
usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment
Andy Yan (1):
phy: rockchip: usbdp: Avoid call hpd_event_trigger in dp_phy_init
Arnd Bergmann (2):
dma/contiguous: avoid warning about unused size_bytes
ntb: reduce stack usage in idt_scan_mws
Baokun Li (1):
ext4: goto right label 'out_mmap_sem' in ext4_setattr()
Basavaraj Natikar (1):
ntb_hw_amd: Add NTB PCI ID for new gen CPU
Benjamin Berg (1):
um: work around sched_yield not yielding in time-travel mode
Bibo Mao (2):
LoongArch: KVM: Fully clear some CSRs when VM reboot
LoongArch: KVM: Fix PMU pass-through issue if VM exits to host finally
Björn Töpel (2):
riscv: Replace function-like macro by static inline function
riscv: uprobes: Add missing fence.i after building the XOL buffer
Bo-Cun Chen (1):
net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration
Breno Leitao (3):
sched_ext: Use kvzalloc for large exit_dump allocation
spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
spi: tegra210-quad: add rate limiting and simplify timeout error message
Brett Creeley (3):
pds_core: Prevent possible adminq overflow/stuck condition
pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result
pds_core: Remove unnecessary check in pds_client_adminq_cmd()
Carlos Maiolino (1):
xfs: Do not allow norecovery mount with quotacheck
Chenyuan Yang (4):
scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()
pinctrl: renesas: rza2: Fix potential NULL pointer dereference
usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
Christian König (1):
drm/amdgpu: use a dummy owner for sysfs triggered cleaner shaders v4
Christian Schrefl (1):
rust: firmware: Use `ffi::c_char` type in `FwFunc`
Christoph Hellwig (6):
block: remove the write_hint field from struct request
block: remove the ioprio field from struct request
block: never reduce ra_pages in blk_apply_bdi_limits
xfs: rename xfs_iomap_swapfile_activate to xfs_vm_swap_activate
xfs: flush inodegc before swapon
mq-deadline: don't call req_get_ioprio from the I/O completion handler
Cong Wang (2):
net_sched: hfsc: Fix a UAF vulnerability in class handling
net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
Craig Hesling (1):
USB: serial: simple: add OWON HDS200 series oscilloscope support
Damien Le Moal (4):
ata: libata-scsi: Improve CDL control
ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type
ata: libata-scsi: Fix ata_msense_control_ata_feature()
scsi: Improve CDL control
Dan Carpenter (2):
media: i2c: imx214: Fix uninitialized variable in imx214_set_ctrl()
usb: typec: class: Unlocked on error in typec_register_partner()
Daniel Borkmann (1):
vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
Daniel Golle (1):
net: dsa: mt7530: sync driver-specific behavior of MT7531 variants
Daniel Wagner (2):
nvmet-fc: take tgtport reference only once
nvmet-fc: put ref when assoc->del_work is already scheduled
David Howells (1):
ceph: Fix incorrect flush end position calculation
Devaraj Rangasamy (1):
crypto: ccp - Add support for PCI device 0x1134
Dmitry Mastykin (1):
pinctrl: mcp23s08: Get rid of spurious level interrupts
Dmitry Torokhov (3):
Revert "drivers: core: synchronize really_probe() and dev_uevent()"
driver core: introduce device_set_driver() helper
driver core: fix potential NULL pointer dereference in dev_uevent()
Dominique Martinet (1):
9p/net: fix improper handling of bogus negative read/write replies
Dongli Zhang (2):
vhost-scsi: Fix vhost_scsi_send_bad_target()
vhost-scsi: Fix vhost_scsi_send_status()
Edward Adam Davis (1):
fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
Fedor Pchelkin (3):
usb: chipidea: ci_hdrc_imx: fix usbmisc handling
usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
Fernando Fernandez Mancera (1):
x86/i8253: Call clockevent_i8253_disable() with interrupts disabled
Fiona Klute (1):
net: phy: microchip: force IRQ polling mode for lan88xx
Florian Westphal (1):
netfilter: fib: avoid lookup if socket is available
Frode Isaksen (1):
usb: dwc3: gadget: check that event count does not exceed event buffer length
Gabriel Shahrouzi (1):
perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
Gou Hao (1):
iomap: skip unnecessary ifs_block_is_uptodate check
Greg Kroah-Hartman (1):
Linux 6.12.26
Gregory CLEMENT (1):
MIPS: cm: Detect CM quirks from device tree
Günther Noack (1):
tty: Require CAP_SYS_ADMIN for all usages of TIOCL_SELMOUSEREPORT
Halil Pasic (1):
virtio_console: fix missing byte order handling for cols and rows
Hannes Reinecke (3):
nvme: requeue namespace scan on missed AENs
nvme: re-read ANA log page after ns scan completes
nvme: fixup scan failure for non-ANA multipath controllers
Hans de Goede (3):
media: ov08x40: Move ov08x40_identify_module() function up
media: ov08x40: Add missing ov08x40_identify_module() call on stream-start
mei: vsc: Fix fortify-panic caused by invalid counted_by() use
Haoxiang Li (3):
mcb: fix a double free bug in chameleon_parse_gdd()
s390/sclp: Add check for get_zeroed_page()
s390/tty: Fix a potential memory leak bug
Heiko Stuebner (1):
clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
Henry Martin (5):
cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()
cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table()
net/mlx5: Move ttc allocation after switch case to prevent leaks
Herbert Xu (4):
crypto: lib/Kconfig - Fix lib built-in failure when arch is modular
crypto: null - Use spin lock instead of mutex
crypto: lib/Kconfig - Hide arch options from user
crypto: Kconfig - Select LIB generic option
Huacai Chen (1):
USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
Hugo Villeneuve (1):
drm: panel: jd9365da: fix reset signal polarity in unprepare
Huisong Li (1):
mailbox: pcc: Fix the possible race in updation of chan_in_use flag
Ian Abbott (1):
comedi: jr3_pci: Fix synchronous deletion of timer
Ignacio Encinas (1):
9p/trans_fd: mark concurrent read and writes to p9_conn->err
Igor Pylypiv (1):
scsi: pm80xx: Set phy_attached to zero when device is gone
Jacek Lawrynowicz (1):
accel/ivpu: Add auto selection logic for job scheduler
Jason Andryuk (1):
xen: Change xen-acpi-processor dom0 dependency
Jay Cornwall (1):
drm/amdgpu: Increase KIQ invalidate_tlbs timeout
Jean-Marc Eurin (1):
ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
Jens Axboe (1):
io_uring: fix 'sync' handling of io_fallback_tw()
Jinjiang Tu (1):
mm/vmscan: don't try to reclaim hwpoison folio
Johan Hovold (1):
cpufreq: fix compile-test defaults
Johannes Thumshirn (1):
btrfs: zoned: return EIO on RAID1 block group write pointer mismatch
John Stultz (1):
sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
Jonathan Cameron (1):
iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
Jonathan Currier (2):
PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads
net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads
Josh Poimboeuf (11):
objtool: Silence more KCOV warnings
objtool, panic: Disable SMAP in __stack_chk_fail()
objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler()
objtool, regulator: rk808: Remove potential undefined behavior in rk806_set_mode_dcdc()
objtool, lkdtm: Obfuscate the do_nothing() pointer
objtool: Stop UNRET validation on UD2
x86/bugs: Use SBPB in write_ibpb() if applicable
x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
x86/bugs: Don't fill RSB on context switch with eIBRS
objtool: Ignore end-of-section jumps for KCOV/GCOV
objtool: Silence more KCOV warnings, part 2
Julia Filipchuk (1):
drm/xe/xe3lpg: Apply Wa_14022293748, Wa_22019794406
Justin Iurman (1):
net: lwtunnel: disable BHs when required
Keerthy (1):
arm64: dts: ti: k3-j784s4-j742s2-main-common: Correct the GICD size
Kirill A. Shutemov (1):
x86/insn: Fix CTEST instruction decoding
Krzysztof Kozlowski (1):
cpufreq: Do not enable by default during compile testing
Li RongQing (1):
PM: EM: use kfree_rcu() to simplify the code
Lijo Lazar (1):
drm/amdgpu: Use the right function for hdp flush
Lizhi Xu (1):
fs/ntfs3: Keep write operations atomic
Lukas Herbolt (1):
xfs: do not check NEEDSREPAIR if ro,norecovery mount.
Lukas Stockmann (1):
rtc: pcf85063: do a SW reset if POR failed
Luo Gengkun (1):
perf/x86: Fix non-sampling (counting) events on certain x86 platforms
Mahesh Rao (1):
firmware: stratix10-svc: Add of_platform_default_populate()
Manorit Chawdhry (1):
arm64: dts: ti: Refactor J784s4 SoC files to a common file
Marc Zyngier (1):
cpufreq: cppc: Fix invalid return value in .get() callback
Marek Behún (7):
net: dsa: mv88e6xxx: fix VTU methods for 6320 family
crypto: atmel-sha204a - Set hwrng quality to lowest possible
Revert "net: dsa: mv88e6xxx: fix internal PHYs for 6320 family"
net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
net: dsa: mv88e6xxx: enable PVT for 6321 switch
net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
net: dsa: mv88e6xxx: enable STU methods for 6320 family
Mario Limonciello (1):
ACPI: EC: Set ec_no_wakeup for Lenovo Go S
Martin KaFai Lau (1):
bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates storage
Mathias Nyman (2):
xhci: Limit time spent with xHC interrupts disabled during bus resume
xhci: Handle spurious events on Etron host isoc enpoints
Matt Roper (1):
drm/xe/bmg: Add one additional PCI ID
Meir Elisha (1):
md/raid1: Add check for missing source disk in process_checks()
Miao Li (2):
usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
Michael Ehrenreich (1):
USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
Michal Pecio (5):
usb: xhci: Fix invalid pointer dereference in Etron workaround
usb: xhci: Complete 'error mid TD' transfers when handling Missed Service
usb: xhci: Fix isochronous Ring Underrun/Overrun event handling
usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running
usb: xhci: Fix Short Packet handling rework ignoring errors
Mika Westerberg (1):
thunderbolt: Scan retimers after device router has been enumerated
Mike Christie (1):
vhost-scsi: Add better resource allocation failure handling
Mike Looijmans (1):
usb: dwc3: xilinx: Prevent spike in reset signal
Ming Lei (2):
block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone
selftests: ublk: fix test_stripe_04
Ming Wang (1):
LoongArch: Return NULL from huge_pte_offset() for invalid PMD
Mostafa Saleh (1):
ubsan: Fix panic from test_ubsan_out_of_bounds
Namjae Jeon (5):
ksmbd: use __GFP_RETRY_MAYFAIL
ksmbd: add netdev-up/down event debug print
ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL
ksmbd: fix use-after-free in __smb2_lease_break_noti()
ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING"
Nathan Chancellor (1):
lib/Kconfig.ubsan: Remove 'default UBSAN' from UBSAN_INTEGER_WRAP
Ojaswin Mujoo (1):
ext4: make block validity check resistent to sb bh corruption
Oleg Nesterov (1):
sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
Oleksij Rempel (1):
net: selftests: initialize TCP header and skb payload with zero
Oliver Neukum (6):
USB: storage: quirk for ADATA Portable HDD CH94
USB: VLI disk crashes if LPM is used
USB: wdm: handle IO errors in wdm_wwan_port_start
USB: wdm: close race between wdm_open and wdm_wwan_port_stop
USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
USB: wdm: add annotation
Pali Rohár (2):
cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode
cifs: Fix querying of WSL CHR and BLK reparse points over SMB1
Pavel Begunkov (1):
io_uring: always do atomic put from iowq
Peter Griffin (7):
scsi: ufs: exynos: Add gs101_ufs_drv_init() hook and enable WriteBooster
scsi: ufs: exynos: Move UFS shareability value to drvdata
scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set
scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init()
scsi: ufs: exynos: Enable PRDT pre-fetching with UFSHCD_CAP_CRYPTO
scsi: ufs: exynos: Move phy calls to .exit() callback
scsi: ufs: exynos: gs101: Put UFS device in reset on .suspend()
Petr Tesarik (1):
LoongArch: Remove a bogus reference to ZONE_DMA
Pi Xiange (1):
x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores
Qingfang Deng (1):
net: phy: leds: fix memory leak
Qiuxu Zhuo (1):
selftests/mincore: Allow read-ahead pages to reach the end of the file
Qu Wenruo (1):
btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
Rafael J. Wysocki (1):
PM: EM: Address RCU-related sparse warnings
Ralph Siemsen (1):
usb: cdns3: Fix deadlock when using NCM gadget
Ranjan Kumar (1):
scsi: mpi3mr: Fix pending I/O counter
Rengarajan S (2):
misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration
misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack
Rob Herring (Arm) (1):
of: resolver: Simplify of_resolve_phandles() using __free()
Robin Murphy (2):
iommu: Clear iommu-dma ops on cleanup
iommu: Handle race with default domain setup
Roger Pau Monne (2):
PCI/MSI: Convert pci_msi_ignore_mask to per MSI domain flag
x86/xen: disable CPU idle and frequency drivers for PVH dom0
Rohit Chavan (1):
drm/amd/display: Fix unnecessary cast warnings from checkpatch
Roman Li (2):
drm/amd/display: Fix gpu reset in multidisplay config
drm/amd/display: Force full update in gpu reset
Ryo Takakura (1):
serial: sifive: lock port in startup()/shutdown() callbacks
Sean Christopherson (5):
iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
KVM: SVM: Allocate IR data using atomic allocation
KVM: x86: Explicitly treat routing entry type changes as changes
KVM: x86: Reset IRTE to host control if *new* route isn't postable
KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
Sebastian Andrzej Siewior (1):
timekeeping: Add a lockdep override in tick_freeze()
Sergiu Cuciurean (1):
iio: adc: ad7768-1: Fix conversion result sign
Sewon Nam (1):
bpf: bpftool: Setting error code in do_loader()
Shannon Nelson (1):
pds_core: make wait_context part of q_info
Shengjiu Wang (1):
ASoC: fsl_asrc_dma: get codec or cpu dai from backend
Shigeru Yoshida (1):
selftests/bpf: Adjust data size to have ETH_HLEN
Siddharth Vadapalli (1):
arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix serdes_ln_ctrl reg-masks
Smita Koralahalli (1):
cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports
Song Liu (1):
netfs: Only create /proc/fs/netfs with CONFIG_PROC_FS
Stanley Chu (1):
i3c: master: svc: Add support for Nuvoton npcm845 i3c
Stephan Gerhold (1):
serial: msm: Configure correct working mode before starting earlycon
Steven Rostedt (2):
tracing: Add __print_dynamic_array() helper
tracing: Verify event formats that have "%*p.."
Sudeep Holla (1):
mailbox: pcc: Always clear the platform ack interrupt first
Suravee Suthikulpanit (1):
KVM: SVM: Disable AVIC on SNP-enabled system without HvInUseWrAllowed feature
Suzuki K Poulose (1):
irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
T.J. Mercier (2):
cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
splice: remove duplicate noinline from pipe_clear_nowait
Tamura Dai (1):
spi: spi-imx: Add check for spi_imx_setupxfer()
Thadeu Lima de Souza Cascardo (1):
char: misc: register chrdev region with all possible minors
Thomas Bogendoerfer (1):
MIPS: cm: Fix warning if MIPS_CM is disabled
Thomas Gleixner (1):
PCI/MSI: Handle the NOMASK flag correctly for all PCI/MSI backends
Thomas Weißschuh (2):
KVM: s390: Don't use %pK through tracepoints
KVM: s390: Don't use %pK through debug printing
Thorsten Leemhuis (1):
module: sign with sha512 instead of sha1 by default
Théo Lebrun (1):
usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
Tiezhu Yang (3):
LoongArch: Make regs_irqs_disabled() more clear
LoongArch: Make do_xyz() exception handlers more robust
LoongArch: Handle fp, lsx, lasx and lbt assembly symbols
Tudor Ambarus (5):
soc: qcom: ice: introduce devm_of_qcom_ice_get
mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get
scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get
scsi: ufs: exynos: Remove empty drv_init method
scsi: ufs: exynos: Remove superfluous function parameter
Tung Nguyen (1):
tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
Uday Shankar (1):
nvme: multipath: fix return value of nvme_available_path
Vinicius Costa Gomes (1):
dmaengine: dmatest: Fix dmatest waiting less when interrupted
Waiman Long (1):
cgroup/cpuset: Don't allow creation of local partition over a remote one
Xi Ruoyao (1):
kbuild: add dependency from vmlinux to sorttable
Xingui Yang (1):
scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
Yafang Shao (1):
bpf: Reject attaching fexit/fmod_ret to __noreturn functions
Yonghong Song (1):
bpf: Fix kmemleak warning for percpu hashmap
Yu-Chun Lin (1):
parisc: PDT: Fix missing prototype warning
Yuli Wang (1):
LoongArch: Select ARCH_USE_MEMTEST
Zijun Hu (1):
of: resolver: Fix device node refcount leakage in of_resolve_phandles()
4 months, 3 weeks
- 1
- 1
Linux 6.6.89
by Greg Kroah-Hartman
I'm announcing the release of the 6.6.89 kernel.
All users of the 6.6 kernel series must upgrade.
The updated 6.6.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.6.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/scheduler/sched-capacity.rst | 13 -
Makefile | 2
arch/arm64/boot/dts/nvidia/tegra234-p3768-0000.dtsi | 7
arch/loongarch/Kconfig | 1
arch/loongarch/include/asm/ptrace.h | 4
arch/loongarch/kernel/traps.c | 20 +-
arch/loongarch/mm/hugetlbpage.c | 2
arch/loongarch/mm/init.c | 3
arch/mips/include/asm/mips-cm.h | 22 ++
arch/mips/kernel/mips-cm.c | 14 +
arch/parisc/kernel/pdt.c | 2
arch/riscv/include/asm/alternative-macros.h | 19 --
arch/s390/kvm/intercept.c | 2
arch/s390/kvm/interrupt.c | 8
arch/s390/kvm/kvm-s390.c | 10 -
arch/s390/kvm/trace-s390.h | 4
arch/x86/entry/entry.S | 2
arch/x86/events/core.c | 2
arch/x86/include/asm/asm.h | 3
arch/x86/include/asm/extable_fixup_types.h | 2
arch/x86/include/asm/intel-family.h | 2
arch/x86/kernel/cpu/bugs.c | 30 +--
arch/x86/kernel/cpu/mce/severity.c | 12 -
arch/x86/kernel/i8253.c | 3
arch/x86/kvm/svm/avic.c | 60 +++---
arch/x86/kvm/vmx/posted_intr.c | 28 +--
arch/x86/kvm/x86.c | 3
arch/x86/mm/extable.c | 9 -
arch/x86/mm/tlb.c | 6
arch/x86/platform/pvh/head.S | 7
crypto/crypto_null.c | 39 ++--
drivers/acpi/ec.c | 28 +++
drivers/acpi/pptt.c | 4
drivers/ata/libata-scsi.c | 25 +-
drivers/auxdisplay/hd44780.c | 9 -
drivers/base/base.h | 17 +
drivers/base/bus.c | 2
drivers/base/core.c | 38 +++-
drivers/base/dd.c | 6
drivers/block/loop.c | 2
drivers/char/misc.c | 2
drivers/char/virtio_console.c | 7
drivers/clk/clk.c | 4
drivers/clk/renesas/r9a07g043-cpg.c | 28 ++-
drivers/clk/renesas/r9a07g044-cpg.c | 21 ++
drivers/clk/renesas/rzg2l-cpg.c | 180 ++++++++++++++------
drivers/clk/renesas/rzg2l-cpg.h | 24 +-
drivers/comedi/drivers/jr3_pci.c | 2
drivers/cpufreq/apple-soc-cpufreq.c | 10 -
drivers/cpufreq/cppc_cpufreq.c | 2
drivers/cpufreq/scmi-cpufreq.c | 10 -
drivers/cpufreq/scpi-cpufreq.c | 13 +
drivers/crypto/atmel-sha204a.c | 6
drivers/crypto/ccp/sp-pci.c | 1
drivers/cxl/core/regs.c | 4
drivers/dma-buf/udmabuf.c | 2
drivers/dma/dmatest.c | 6
drivers/gpio/gpiolib-of.c | 6
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 9 -
drivers/iio/adc/ad7768-1.c | 5
drivers/infiniband/hw/qib/qib_fs.c | 1
drivers/iommu/amd/iommu.c | 2
drivers/irqchip/irq-gic-v2m.c | 2
drivers/mailbox/pcc.c | 15 +
drivers/mcb/mcb-parse.c | 2
drivers/md/raid1.c | 26 +-
drivers/media/test-drivers/vimc/vimc-streamer.c | 6
drivers/media/v4l2-core/v4l2-subdev.c | 101 +++++++----
drivers/misc/lkdtm/perms.c | 14 +
drivers/misc/mchp_pci1xxxx/mchp_pci1xxxx_gpio.c | 8
drivers/misc/mei/hw-me-regs.h | 1
drivers/misc/mei/pci-me.c | 1
drivers/mmc/host/sdhci-msm.c | 2
drivers/net/dsa/mt7530.c | 6
drivers/net/dsa/mv88e6xxx/chip.c | 27 ++-
drivers/net/ethernet/amd/pds_core/adminq.c | 36 +---
drivers/net/ethernet/amd/pds_core/auxbus.c | 3
drivers/net/ethernet/amd/pds_core/core.c | 4
drivers/net/ethernet/amd/pds_core/core.h | 2
drivers/net/ethernet/amd/pds_core/devlink.c | 4
drivers/net/ethernet/mediatek/mtk_eth_soc.c | 24 ++
drivers/net/ethernet/mediatek/mtk_eth_soc.h | 10 +
drivers/net/phy/microchip.c | 46 -----
drivers/net/phy/phy_led_triggers.c | 23 +-
drivers/net/vmxnet3/vmxnet3_xdp.c | 2
drivers/net/xen-netfront.c | 17 +
drivers/ntb/hw/amd/ntb_hw_amd.c | 1
drivers/ntb/hw/idt/ntb_hw_idt.c | 18 --
drivers/nvme/host/core.c | 9 +
drivers/nvme/host/multipath.c | 2
drivers/nvme/target/fc.c | 25 +-
drivers/of/resolver.c | 37 +---
drivers/pci/probe.c | 9 -
drivers/pinctrl/renesas/pinctrl-rza2.c | 3
drivers/regulator/rk808-regulator.c | 4
drivers/rtc/rtc-pcf85063.c | 19 ++
drivers/s390/char/sclp_con.c | 17 +
drivers/s390/char/sclp_tty.c | 12 +
drivers/scsi/hisi_sas/hisi_sas_main.c | 20 ++
drivers/scsi/pm8001/pm8001_sas.c | 1
drivers/scsi/scsi.c | 36 ++--
drivers/scsi/scsi_lib.c | 6
drivers/soc/qcom/ice.c | 48 +++++
drivers/spi/spi-imx.c | 5
drivers/spi/spi-tegra210-quad.c | 6
drivers/thunderbolt/tb.c | 16 +
drivers/tty/serial/msm_serial.c | 6
drivers/tty/serial/sifive.c | 6
drivers/ufs/core/ufs-mcq.c | 12 -
drivers/ufs/host/ufs-exynos.c | 10 -
drivers/ufs/host/ufs-qcom.c | 2
drivers/usb/cdns3/cdns3-gadget.c | 2
drivers/usb/chipidea/ci_hdrc_imx.c | 44 +++-
drivers/usb/class/cdc-wdm.c | 21 +-
drivers/usb/core/quirks.c | 9 +
drivers/usb/dwc3/dwc3-pci.c | 10 +
drivers/usb/dwc3/dwc3-xilinx.c | 4
drivers/usb/dwc3/gadget.c | 28 ++-
drivers/usb/gadget/udc/aspeed-vhub/dev.c | 3
drivers/usb/host/max3421-hcd.c | 7
drivers/usb/host/ohci-pci.c | 23 ++
drivers/usb/host/xhci-mvebu.c | 10 -
drivers/usb/host/xhci-mvebu.h | 6
drivers/usb/host/xhci-plat.c | 2
drivers/usb/host/xhci-ring.c | 13 -
drivers/usb/serial/ftdi_sio.c | 2
drivers/usb/serial/ftdi_sio_ids.h | 5
drivers/usb/serial/option.c | 3
drivers/usb/serial/usb-serial-simple.c | 7
drivers/usb/storage/unusual_uas.h | 7
drivers/xen/Kconfig | 2
fs/btrfs/file.c | 9 -
fs/ceph/inode.c | 2
fs/ext4/block_validity.c | 5
fs/ext4/inode.c | 9 -
fs/iomap/buffered-io.c | 2
fs/namespace.c | 69 ++++---
fs/ntfs3/file.c | 1
fs/smb/client/sess.c | 60 ++++--
fs/smb/client/smb1ops.c | 36 ++++
fs/splice.c | 2
include/linux/energy_model.h | 1
include/media/v4l2-subdev.h | 25 ++
include/soc/qcom/ice.h | 2
include/trace/stages/stage3_trace_output.h | 8
include/trace/stages/stage7_class_define.h | 1
init/Kconfig | 2
io_uring/io_uring.c | 15 -
io_uring/refs.h | 7
kernel/bpf/bpf_cgrp_storage.c | 11 -
kernel/bpf/verifier.c | 32 +++
kernel/dma/contiguous.c | 3
kernel/events/core.c | 6
kernel/module/Kconfig | 1
kernel/panic.c | 6
kernel/sched/core.c | 92 ++++------
kernel/sched/cpudeadline.c | 2
kernel/sched/cpufreq_schedutil.c | 63 +++++--
kernel/sched/deadline.c | 4
kernel/sched/fair.c | 40 +++-
kernel/sched/rt.c | 2
kernel/sched/sched.h | 28 ---
kernel/sched/topology.c | 7
kernel/time/tick-common.c | 22 ++
kernel/trace/bpf_trace.c | 7
kernel/trace/trace_events.c | 7
lib/test_ubsan.c | 18 +-
net/9p/client.c | 30 +--
net/core/lwtunnel.c | 26 ++
net/core/selftests.c | 18 +-
net/sched/sch_hfsc.c | 23 +-
net/tipc/monitor.c | 3
samples/trace_events/trace-events-sample.h | 18 +-
scripts/Makefile.lib | 2
sound/soc/codecs/wcd934x.c | 2
sound/soc/qcom/apq8016_sbc.c | 2
sound/soc/qcom/apq8096.c | 2
sound/soc/qcom/common.c | 2
sound/soc/qcom/lpass-apq8016.c | 4
sound/soc/qcom/lpass-cpu.c | 7
sound/soc/qcom/lpass-hdmi.c | 2
sound/soc/qcom/lpass-ipq806x.c | 4
sound/soc/qcom/lpass-platform.c | 2
sound/soc/qcom/lpass-sc7180.c | 4
sound/soc/qcom/lpass-sc7280.c | 2
sound/soc/qcom/lpass.h | 4
sound/soc/qcom/qdsp6/q6afe.c | 8
sound/soc/qcom/qdsp6/q6apm-dai.c | 61 +++---
sound/soc/qcom/qdsp6/q6asm.h | 20 +-
sound/soc/qcom/qdsp6/topology.c | 3
sound/soc/qcom/sc7180.c | 2
sound/soc/qcom/sc8280xp.c | 2
sound/soc/qcom/sdm845.c | 2
sound/soc/qcom/sdw.c | 2
sound/soc/qcom/sm8250.c | 2
sound/soc/qcom/storm.c | 2
sound/virtio/virtio_pcm.c | 21 +-
tools/bpf/bpftool/prog.c | 1
tools/objtool/check.c | 36 +++-
tools/testing/selftests/mincore/mincore_selftest.c | 3
tools/testing/selftests/ublk/test_stripe_04.sh | 24 ++
201 files changed, 1783 insertions(+), 907 deletions(-)
Adam Xue (1):
USB: serial: option: add Sierra Wireless EM9291
Al Viro (2):
fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
qibfs: fix _another_ leak
Alexander Stein (1):
usb: host: max3421-hcd: Add missing spi_device_id table
Alexander Usyskin (1):
mei: me: add panther lake H DID
Alexei Starovoitov (1):
bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
Alexey Nepomnyashih (1):
xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
Anastasia Kovaleva (1):
scsi: core: Clear flags for scsi_cmnd that did not complete
Andrew Jones (1):
riscv: Provide all alternative macros all the time
Andy Shevchenko (3):
usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment
Ard Biesheuvel (1):
x86/pvh: Call C code via the kernel virtual mapping
Arnd Bergmann (2):
dma/contiguous: avoid warning about unused size_bytes
ntb: reduce stack usage in idt_scan_mws
Baokun Li (1):
ext4: goto right label 'out_mmap_sem' in ext4_setattr()
Basavaraj Natikar (1):
ntb_hw_amd: Add NTB PCI ID for new gen CPU
Bo-Cun Chen (1):
net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration
Breno Leitao (2):
spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
spi: tegra210-quad: add rate limiting and simplify timeout error message
Brett Creeley (2):
pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result
pds_core: Remove unnecessary check in pds_client_adminq_cmd()
Chenyuan Yang (3):
scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
pinctrl: renesas: rza2: Fix potential NULL pointer dereference
usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
Claudiu Beznea (6):
clk: renesas: rzg2l: Use u32 for flag and mux_flags
clk: renesas: rzg2l: Add struct clk_hw_data
clk: renesas: rzg2l: Remove CPG_SDHI_DSEL from generic header
clk: renesas: rzg2l: Refactor SD mux driver
clk: renesas: r9a07g04[34]: Use SEL_SDHI1_STS status configuration for SD1 mux
clk: renesas: r9a07g04[34]: Fix typo for sel_shdi variable
Cong Wang (2):
net_sched: hfsc: Fix a UAF vulnerability in class handling
net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
Craig Hesling (1):
USB: serial: simple: add OWON HDS200 series oscilloscope support
Damien Le Moal (4):
ata: libata-scsi: Improve CDL control
ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type
ata: libata-scsi: Fix ata_msense_control_ata_feature()
scsi: Improve CDL control
Daniel Borkmann (1):
vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
Daniel Golle (1):
net: dsa: mt7530: sync driver-specific behavior of MT7531 variants
Daniel Wagner (2):
nvmet-fc: take tgtport reference only once
nvmet-fc: put ref when assoc->del_work is already scheduled
David Howells (1):
ceph: Fix incorrect flush end position calculation
Devaraj Rangasamy (1):
crypto: ccp - Add support for PCI device 0x1134
Dmitry Torokhov (3):
Revert "drivers: core: synchronize really_probe() and dev_uevent()"
driver core: introduce device_set_driver() helper
driver core: fix potential NULL pointer dereference in dev_uevent()
Dominique Martinet (1):
9p/net: fix improper handling of bogus negative read/write replies
Edward Adam Davis (1):
fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
Fedor Pchelkin (3):
usb: chipidea: ci_hdrc_imx: fix usbmisc handling
usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
Fernando Fernandez Mancera (1):
x86/i8253: Call clockevent_i8253_disable() with interrupts disabled
Fiona Klute (1):
net: phy: microchip: force IRQ polling mode for lan88xx
Frode Isaksen (1):
usb: dwc3: gadget: check that event count does not exceed event buffer length
Gabriel Shahrouzi (1):
perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
Gou Hao (1):
iomap: skip unnecessary ifs_block_is_uptodate check
Greg Kroah-Hartman (1):
Linux 6.6.89
Gregory CLEMENT (1):
MIPS: cm: Detect CM quirks from device tree
Halil Pasic (1):
virtio_console: fix missing byte order handling for cols and rows
Hannes Reinecke (3):
nvme: requeue namespace scan on missed AENs
nvme: re-read ANA log page after ns scan completes
nvme: fixup scan failure for non-ANA multipath controllers
Haoxiang Li (4):
auxdisplay: hd44780: Fix an API misuse in hd44780.c
mcb: fix a double free bug in chameleon_parse_gdd()
s390/sclp: Add check for get_zeroed_page()
s390/tty: Fix a potential memory leak bug
Heiko Stuebner (1):
clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
Henry Martin (3):
cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()
cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
Herbert Xu (1):
crypto: null - Use spin lock instead of mutex
Huacai Chen (1):
USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
Huisong Li (1):
mailbox: pcc: Fix the possible race in updation of chan_in_use flag
Ian Abbott (1):
comedi: jr3_pci: Fix synchronous deletion of timer
Igor Pylypiv (1):
scsi: pm80xx: Set phy_attached to zero when device is gone
Jason Andryuk (1):
xen: Change xen-acpi-processor dom0 dependency
Jean-Marc Eurin (1):
ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
Jens Axboe (1):
io_uring: fix 'sync' handling of io_fallback_tw()
John Stultz (1):
sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
Jonathan Cameron (1):
iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
Josh Poimboeuf (11):
objtool: Silence more KCOV warnings
objtool, panic: Disable SMAP in __stack_chk_fail()
objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler()
objtool, regulator: rk808: Remove potential undefined behavior in rk806_set_mode_dcdc()
objtool, lkdtm: Obfuscate the do_nothing() pointer
objtool: Stop UNRET validation on UD2
x86/bugs: Use SBPB in write_ibpb() if applicable
x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
x86/bugs: Don't fill RSB on context switch with eIBRS
objtool: Ignore end-of-section jumps for KCOV/GCOV
objtool: Silence more KCOV warnings, part 2
Justin Iurman (1):
net: lwtunnel: disable BHs when required
Krzysztof Kozlowski (2):
ASoC: qcom: q6apm-dai: drop unused 'q6apm_dai_rtd' fields
ASoC: qcom: Fix trivial code style issues
Lad Prabhakar (1):
clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
Lukas Stockmann (1):
rtc: pcf85063: do a SW reset if POR failed
Luo Gengkun (1):
perf/x86: Fix non-sampling (counting) events on certain x86 platforms
Ma Ke (1):
PCI: Fix reference leak in pci_register_host_bridge()
Marc Zyngier (1):
cpufreq: cppc: Fix invalid return value in .get() callback
Marek Behún (7):
net: dsa: mv88e6xxx: fix internal PHYs for 6320 family
net: dsa: mv88e6xxx: fix VTU methods for 6320 family
crypto: atmel-sha204a - Set hwrng quality to lowest possible
net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
net: dsa: mv88e6xxx: enable PVT for 6321 switch
net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
net: dsa: mv88e6xxx: enable STU methods for 6320 family
Mario Limonciello (1):
ACPI: EC: Set ec_no_wakeup for Lenovo Go S
Martin KaFai Lau (1):
bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates storage
Meir Elisha (1):
md/raid1: Add check for missing source disk in process_checks()
Miao Li (2):
usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
Michael Ehrenreich (1):
USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
Michal Pecio (2):
usb: xhci: Fix invalid pointer dereference in Etron workaround
usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running
Mika Westerberg (1):
thunderbolt: Scan retimers after device router has been enumerated
Mike Looijmans (1):
usb: dwc3: xilinx: Prevent spike in reset signal
Ming Lei (1):
selftests: ublk: fix test_stripe_04
Ming Wang (1):
LoongArch: Return NULL from huge_pte_offset() for invalid PMD
Mostafa Saleh (1):
ubsan: Fix panic from test_ubsan_out_of_bounds
Nikita Zhandarovich (1):
media: vimc: skip .s_stream() for stopped entities
Ninad Malwade (1):
arm64: tegra: Remove the Orin NX/Nano suspend key
Ojaswin Mujoo (1):
ext4: make block validity check resistent to sb bh corruption
Oleg Nesterov (1):
sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
Oleksij Rempel (1):
net: selftests: initialize TCP header and skb payload with zero
Oliver Neukum (6):
USB: storage: quirk for ADATA Portable HDD CH94
USB: VLI disk crashes if LPM is used
USB: wdm: handle IO errors in wdm_wwan_port_start
USB: wdm: close race between wdm_open and wdm_wwan_port_stop
USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
USB: wdm: add annotation
Pali Rohár (2):
cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode
cifs: Fix querying of WSL CHR and BLK reparse points over SMB1
Pavel Begunkov (1):
io_uring: always do atomic put from iowq
Peter Griffin (1):
scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init()
Petr Tesarik (1):
LoongArch: Remove a bogus reference to ZONE_DMA
Pi Xiange (1):
x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores
Qingfang Deng (1):
net: phy: leds: fix memory leak
Qiuxu Zhuo (1):
selftests/mincore: Allow read-ahead pages to reach the end of the file
Qu Wenruo (1):
btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
Rafael J. Wysocki (1):
cpufreq/sched: Explicitly synchronize limits_changed flag handling
Ralph Siemsen (1):
usb: cdns3: Fix deadlock when using NCM gadget
Rengarajan S (2):
misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration
misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack
Rob Herring (Arm) (1):
of: resolver: Simplify of_resolve_phandles() using __free()
Roman Li (2):
drm/amd/display: Fix gpu reset in multidisplay config
drm/amd/display: Force full update in gpu reset
Ryo Takakura (1):
serial: sifive: lock port in startup()/shutdown() callbacks
Sean Christopherson (4):
iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
KVM: SVM: Allocate IR data using atomic allocation
KVM: x86: Explicitly treat routing entry type changes as changes
KVM: x86: Reset IRTE to host control if *new* route isn't postable
Sebastian Andrzej Siewior (1):
timekeeping: Add a lockdep override in tick_freeze()
Sergiu Cuciurean (1):
iio: adc: ad7768-1: Fix conversion result sign
Sewon Nam (1):
bpf: bpftool: Setting error code in do_loader()
Shannon Nelson (1):
pds_core: make wait_context part of q_info
Shuai Xue (1):
x86/mce: use is_copy_from_user() to determine copy-from-user context
Smita Koralahalli (1):
cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports
Srinivas Kandagatla (2):
ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs
ASoC: q6apm-dai: make use of q6apm_get_hw_pointer
Stephan Gerhold (1):
serial: msm: Configure correct working mode before starting earlycon
Steven Rostedt (2):
tracing: Add __print_dynamic_array() helper
tracing: Verify event formats that have "%*p.."
Steven Rostedt (Google) (1):
tracing: Add __string_len() example
Sudeep Holla (1):
mailbox: pcc: Always clear the platform ack interrupt first
Suzuki K Poulose (1):
irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
T.J. Mercier (1):
splice: remove duplicate noinline from pipe_clear_nowait
Tamura Dai (1):
spi: spi-imx: Add check for spi_imx_setupxfer()
Thadeu Lima de Souza Cascardo (1):
char: misc: register chrdev region with all possible minors
Thomas Bogendoerfer (1):
MIPS: cm: Fix warning if MIPS_CM is disabled
Thomas Weißschuh (2):
KVM: s390: Don't use %pK through tracepoints
KVM: s390: Don't use %pK through debug printing
Thorsten Leemhuis (1):
module: sign with sha512 instead of sha1 by default
Théo Lebrun (1):
usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
Tiezhu Yang (2):
LoongArch: Make regs_irqs_disabled() more clear
LoongArch: Make do_xyz() exception handlers more robust
Tomi Valkeinen (3):
media: subdev: Fix use of sd->enabled_streams in call_s_stream()
media: subdev: Improve v4l2_subdev_enable/disable_streams_fallback
media: subdev: Add v4l2_subdev_is_streaming()
Tong Tiangen (1):
x86/extable: Remove unused fixup type EX_TYPE_COPY
Tudor Ambarus (3):
soc: qcom: ice: introduce devm_of_qcom_ice_get
mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get
scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get
Tung Nguyen (1):
tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
Uday Shankar (1):
nvme: multipath: fix return value of nvme_available_path
Uwe Kleine-König (2):
auxdisplay: hd44780: Convert to platform remove callback returning void
ASoC: qcom: lpass: Make asoc_qcom_lpass_cpu_platform_remove() return void
Vincent Guittot (2):
sched/topology: Consolidate and clean up access to a CPU's max compute capacity
sched/cpufreq: Rework schedutil governor performance estimation
Vinicius Costa Gomes (1):
dmaengine: dmatest: Fix dmatest waiting less when interrupted
Xiaogang Chen (1):
udmabuf: fix a buf size overflow issue during udmabuf creation
Xingui Yang (1):
scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
Yafang Shao (1):
bpf: Reject attaching fexit/fmod_ret to __noreturn functions
Yu-Chun Lin (1):
parisc: PDT: Fix missing prototype warning
Yuli Wang (1):
LoongArch: Select ARCH_USE_MEMTEST
Yunlong Xing (1):
loop: aio inherit the ioprio of original request
Zijun Hu (1):
of: resolver: Fix device node refcount leakage in of_resolve_phandles()
4 months, 3 weeks
- 1
- 1
Linux 6.1.136
by Greg Kroah-Hartman
I'm announcing the release of the 6.1.136 kernel.
All users of the 6.1 kernel series must upgrade.
The updated 6.1.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.1.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Makefile | 2
arch/loongarch/Kconfig | 1
arch/loongarch/include/asm/ptrace.h | 4
arch/loongarch/mm/hugetlbpage.c | 2
arch/loongarch/mm/init.c | 3
arch/mips/include/asm/mips-cm.h | 22 ++
arch/mips/kernel/mips-cm.c | 14 +
arch/parisc/kernel/pdt.c | 2
arch/s390/kvm/trace-s390.h | 4
arch/x86/entry/entry.S | 2
arch/x86/events/core.c | 2
arch/x86/kernel/cpu/bugs.c | 30 +-
arch/x86/kernel/i8253.c | 3
arch/x86/kvm/svm/avic.c | 60 +++--
arch/x86/kvm/vmx/posted_intr.c | 28 --
arch/x86/kvm/x86.c | 3
arch/x86/mm/tlb.c | 6
crypto/crypto_null.c | 39 ++-
drivers/acpi/ec.c | 28 ++
drivers/acpi/pptt.c | 4
drivers/auxdisplay/hd44780.c | 9
drivers/block/loop.c | 2
drivers/char/virtio_console.c | 7
drivers/clk/clk.c | 4
drivers/clk/renesas/r9a07g043-cpg.c | 28 ++
drivers/clk/renesas/r9a07g044-cpg.c | 21 +
drivers/clk/renesas/rzg2l-cpg.c | 180 ++++++++++++-----
drivers/clk/renesas/rzg2l-cpg.h | 24 +-
drivers/comedi/drivers/jr3_pci.c | 17 +
drivers/cpufreq/cppc_cpufreq.c | 2
drivers/cpufreq/scmi-cpufreq.c | 10
drivers/cpufreq/scpi-cpufreq.c | 13 -
drivers/crypto/atmel-sha204a.c | 7
drivers/dma-buf/udmabuf.c | 2
drivers/dma/dmatest.c | 6
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 9
drivers/iio/adc/ad7768-1.c | 5
drivers/infiniband/hw/qib/qib_fs.c | 1
drivers/iommu/amd/iommu.c | 2
drivers/mcb/mcb-parse.c | 2
drivers/md/raid1.c | 26 +-
drivers/misc/lkdtm/perms.c | 14 +
drivers/misc/mchp_pci1xxxx/mchp_pci1xxxx_gpio.c | 8
drivers/misc/mei/hw-me-regs.h | 1
drivers/misc/mei/pci-me.c | 1
drivers/net/dsa/mv88e6xxx/chip.c | 106 ++++++----
drivers/net/dsa/mv88e6xxx/chip.h | 5
drivers/net/dsa/mv88e6xxx/global2.c | 25 --
drivers/net/phy/phy_led_triggers.c | 23 +-
drivers/net/wireless/realtek/rtw88/main.c | 2
drivers/net/wireless/realtek/rtw88/tx.c | 2
drivers/net/xen-netfront.c | 17 +
drivers/ntb/hw/amd/ntb_hw_amd.c | 1
drivers/ntb/hw/idt/ntb_hw_idt.c | 18 -
drivers/nvme/host/core.c | 9
drivers/nvme/target/fc.c | 25 --
drivers/of/device.c | 7
drivers/of/resolver.c | 37 +--
drivers/pci/pci.c | 103 +++++----
drivers/pci/probe.c | 16 +
drivers/pci/remove.c | 7
drivers/phy/freescale/phy-fsl-imx8m-pcie.c | 46 +++-
drivers/pinctrl/renesas/pinctrl-rza2.c | 3
drivers/rtc/rtc-pcf85063.c | 19 +
drivers/s390/char/sclp_con.c | 17 +
drivers/s390/char/sclp_tty.c | 12 +
drivers/scsi/hisi_sas/hisi_sas_main.c | 20 +
drivers/scsi/pm8001/pm8001_sas.c | 1
drivers/scsi/scsi_lib.c | 6
drivers/spi/spi-imx.c | 5
drivers/spi/spi-tegra210-quad.c | 6
drivers/thunderbolt/tb.c | 16 +
drivers/tty/serial/msm_serial.c | 6
drivers/tty/serial/sifive.c | 6
drivers/ufs/host/ufs-exynos.c | 10
drivers/usb/cdns3/cdns3-gadget.c | 2
drivers/usb/chipidea/ci_hdrc_imx.c | 44 ++--
drivers/usb/class/cdc-wdm.c | 21 +
drivers/usb/core/quirks.c | 9
drivers/usb/dwc3/dwc3-pci.c | 10
drivers/usb/dwc3/dwc3-xilinx.c | 4
drivers/usb/dwc3/gadget.c | 28 ++
drivers/usb/gadget/udc/aspeed-vhub/dev.c | 3
drivers/usb/host/max3421-hcd.c | 7
drivers/usb/host/ohci-pci.c | 23 ++
drivers/usb/host/xhci-mvebu.c | 10
drivers/usb/host/xhci-mvebu.h | 6
drivers/usb/host/xhci-plat.c | 2
drivers/usb/host/xhci-ring.c | 11 -
drivers/usb/serial/ftdi_sio.c | 2
drivers/usb/serial/ftdi_sio_ids.h | 5
drivers/usb/serial/option.c | 3
drivers/usb/serial/usb-serial-simple.c | 7
drivers/usb/storage/unusual_uas.h | 7
drivers/video/backlight/led_bl.c | 11 -
drivers/xen/Kconfig | 2
fs/btrfs/file.c | 9
fs/ext4/block_validity.c | 5
fs/ext4/inode.c | 7
fs/jfs/jfs_dinode.h | 2
fs/jfs/jfs_imap.c | 6
fs/jfs/jfs_incore.h | 2
fs/jfs/jfs_txnmgr.c | 4
fs/jfs/jfs_xtree.c | 4
fs/jfs/jfs_xtree.h | 37 ++-
fs/ntfs3/file.c | 1
include/dt-bindings/sound/qcom,q6dsp-lpass-ports.h | 8
include/linux/filter.h | 9
include/linux/pci.h | 1
include/net/dsa.h | 6
include/net/mac80211.h | 13 +
include/trace/bpf_probe.h | 6
include/trace/perf.h | 6
include/trace/stages/stage1_struct_define.h | 6
include/trace/stages/stage2_data_offsets.h | 6
include/trace/stages/stage3_trace_output.h | 14 +
include/trace/stages/stage4_event_fields.h | 12 +
include/trace/stages/stage5_get_offsets.h | 6
include/trace/stages/stage6_event_callback.h | 20 +
include/trace/stages/stage7_class_define.h | 3
init/Kconfig | 2
kernel/dma/contiguous.c | 3
kernel/module/Kconfig | 1
kernel/trace/bpf_trace.c | 7
kernel/trace/trace_events.c | 7
lib/test_ubsan.c | 18 +
net/9p/client.c | 30 +-
net/core/lwtunnel.c | 26 +-
net/core/selftests.c | 18 +
net/dsa/port.c | 32 +++
net/mac80211/ieee80211_i.h | 2
net/mac80211/status.c | 1
net/sched/act_mirred.c | 22 +-
net/sched/sch_hfsc.c | 23 +-
net/tipc/monitor.c | 3
samples/trace_events/trace-events-sample.c | 2
samples/trace_events/trace-events-sample.h | 46 +++-
scripts/Makefile.lib | 2
sound/soc/codecs/wcd934x.c | 2
sound/soc/qcom/lpass.h | 3
sound/soc/qcom/qdsp6/q6afe-dai.c | 2
sound/soc/qcom/qdsp6/q6dsp-lpass-ports.c | 43 ++--
sound/virtio/virtio_pcm.c | 21 +
tools/objtool/check.c | 9
tools/testing/selftests/mincore/mincore_selftest.c | 3
tools/testing/selftests/ublk/test_stripe_04.sh | 24 ++
tools/testing/selftests/vm/charge_reserved_hugetlb.sh | 4
tools/testing/selftests/vm/hugetlb_reparenting_test.sh | 2
148 files changed, 1429 insertions(+), 575 deletions(-)
Adam Xue (1):
USB: serial: option: add Sierra Wireless EM9291
Al Viro (1):
qibfs: fix _another_ leak
Alexander Stein (1):
usb: host: max3421-hcd: Add missing spi_device_id table
Alexander Usyskin (1):
mei: me: add panther lake H DID
Alexei Starovoitov (1):
bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
Alexey Nepomnyashih (1):
xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
Alexis Lothoré (2):
net: dsa: mv88e6xxx: pass directly chip structure to mv88e6xxx_phy_is_internal
net: dsa: mv88e6xxx: add field to specify internal phys layout
Anastasia Kovaleva (1):
scsi: core: Clear flags for scsi_cmnd that did not complete
Andy Shevchenko (2):
usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
Arnd Bergmann (2):
dma/contiguous: avoid warning about unused size_bytes
ntb: reduce stack usage in idt_scan_mws
Basavaraj Natikar (1):
ntb_hw_amd: Add NTB PCI ID for new gen CPU
Breno Leitao (2):
spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
spi: tegra210-quad: add rate limiting and simplify timeout error message
Chenyuan Yang (2):
pinctrl: renesas: rza2: Fix potential NULL pointer dereference
usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
Claudiu Beznea (6):
clk: renesas: rzg2l: Use u32 for flag and mux_flags
clk: renesas: rzg2l: Add struct clk_hw_data
clk: renesas: rzg2l: Remove CPG_SDHI_DSEL from generic header
clk: renesas: rzg2l: Refactor SD mux driver
clk: renesas: r9a07g04[34]: Use SEL_SDHI1_STS status configuration for SD1 mux
clk: renesas: r9a07g04[34]: Fix typo for sel_shdi variable
Cong Wang (2):
net_sched: hfsc: Fix a UAF vulnerability in class handling
net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
Craig Hesling (1):
USB: serial: simple: add OWON HDS200 series oscilloscope support
Daniel Wagner (2):
nvmet-fc: take tgtport reference only once
nvmet-fc: put ref when assoc->del_work is already scheduled
Dave Kleikamp (1):
jfs: define xtree root and page independently
Dominique Martinet (1):
9p/net: fix improper handling of bogus negative read/write replies
Edward Adam Davis (1):
fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
Evgeny Pimenov (1):
ASoC: qcom: Fix sc7280 lpass potential buffer overflow
Fedor Pchelkin (3):
usb: chipidea: ci_hdrc_imx: fix usbmisc handling
usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
Fernando Fernandez Mancera (1):
x86/i8253: Call clockevent_i8253_disable() with interrupts disabled
Frode Isaksen (1):
usb: dwc3: gadget: check that event count does not exceed event buffer length
Greg Kroah-Hartman (1):
Linux 6.1.136
Gregory CLEMENT (1):
MIPS: cm: Detect CM quirks from device tree
Halil Pasic (1):
virtio_console: fix missing byte order handling for cols and rows
Hannes Reinecke (3):
nvme: requeue namespace scan on missed AENs
nvme: re-read ANA log page after ns scan completes
nvme: fixup scan failure for non-ANA multipath controllers
Haoxiang Li (4):
auxdisplay: hd44780: Fix an API misuse in hd44780.c
mcb: fix a double free bug in chameleon_parse_gdd()
s390/sclp: Add check for get_zeroed_page()
s390/tty: Fix a potential memory leak bug
Heiko Stuebner (1):
clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
Henry Martin (2):
cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
Herbert Xu (1):
crypto: null - Use spin lock instead of mutex
Herve Codina (1):
backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
Huacai Chen (1):
USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
Ian Abbott (1):
comedi: jr3_pci: Fix synchronous deletion of timer
Igor Pylypiv (1):
scsi: pm80xx: Set phy_attached to zero when device is gone
Jakub Kicinski (1):
net/sched: act_mirred: don't override retval if we already lost the skb
Jason Andryuk (1):
xen: Change xen-acpi-processor dom0 dependency
Jean-Marc Eurin (1):
ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
John Stultz (1):
sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
Jonathan Cameron (1):
iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
Josh Poimboeuf (8):
objtool: Silence more KCOV warnings
objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler()
objtool, lkdtm: Obfuscate the do_nothing() pointer
objtool: Stop UNRET validation on UD2
x86/bugs: Use SBPB in write_ibpb() if applicable
x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
x86/bugs: Don't fill RSB on context switch with eIBRS
objtool: Silence more KCOV warnings, part 2
Justin Iurman (1):
net: lwtunnel: disable BHs when required
Lad Prabhakar (1):
clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
Lukas Stockmann (1):
rtc: pcf85063: do a SW reset if POR failed
Luo Gengkun (1):
perf/x86: Fix non-sampling (counting) events on certain x86 platforms
Ma Ke (1):
PCI: Fix reference leak in pci_register_host_bridge()
Marc Zyngier (1):
cpufreq: cppc: Fix invalid return value in .get() callback
Marek Behún (7):
net: dsa: mv88e6xxx: fix internal PHYs for 6320 family
net: dsa: mv88e6xxx: fix VTU methods for 6320 family
crypto: atmel-sha204a - Set hwrng quality to lowest possible
net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
net: dsa: mv88e6xxx: enable PVT for 6321 switch
net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
net: dsa: mv88e6xxx: enable STU methods for 6320 family
Mario Limonciello (1):
ACPI: EC: Set ec_no_wakeup for Lenovo Go S
Mark Brown (1):
selftests/mm: generate a temporary mountpoint for cgroup filesystem
Meir Elisha (1):
md/raid1: Add check for missing source disk in process_checks()
Miao Li (2):
usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
Michael Ehrenreich (1):
USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
Michal Pecio (1):
usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running
Mika Westerberg (1):
thunderbolt: Scan retimers after device router has been enumerated
Mike Looijmans (1):
usb: dwc3: xilinx: Prevent spike in reset signal
Ming Lei (1):
selftests: ublk: fix test_stripe_04
Ming Wang (1):
LoongArch: Return NULL from huge_pte_offset() for invalid PMD
Mostafa Saleh (1):
ubsan: Fix panic from test_ubsan_out_of_bounds
Ojaswin Mujoo (1):
ext4: make block validity check resistent to sb bh corruption
Oleg Nesterov (1):
sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
Oleksij Rempel (1):
net: selftests: initialize TCP header and skb payload with zero
Oliver Neukum (6):
USB: storage: quirk for ADATA Portable HDD CH94
USB: VLI disk crashes if LPM is used
USB: wdm: handle IO errors in wdm_wwan_port_start
USB: wdm: close race between wdm_open and wdm_wwan_port_stop
USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
USB: wdm: add annotation
Pali Rohár (1):
PCI: Assign PCI domain IDs by ida_alloc()
Peter Griffin (1):
scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init()
Petr Tesarik (1):
LoongArch: Remove a bogus reference to ZONE_DMA
Ping-Ke Shih (2):
wifi: mac80211: export ieee80211_purge_tx_queue() for drivers
wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb
Qingfang Deng (1):
net: phy: leds: fix memory leak
Qiuxu Zhuo (1):
selftests/mincore: Allow read-ahead pages to reach the end of the file
Qu Wenruo (1):
btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
Ralph Siemsen (1):
usb: cdns3: Fix deadlock when using NCM gadget
Rengarajan S (2):
misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration
misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack
Richard Zhu (3):
phy: freescale: imx8m-pcie: Add i.MX8MP PCIe PHY support
phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
phy: freescale: imx8m-pcie: Add one missing error return
Rob Herring (1):
PCI: Fix use-after-free in pci_bus_release_domain_nr()
Rob Herring (Arm) (1):
of: resolver: Simplify of_resolve_phandles() using __free()
Roman Li (2):
drm/amd/display: Fix gpu reset in multidisplay config
drm/amd/display: Force full update in gpu reset
Russell King (Oracle) (2):
net: dsa: add support for mac_prepare() and mac_finish() calls
net: dsa: mv88e6xxx: move link forcing to mac_prepare/mac_finish
Ryo Takakura (1):
serial: sifive: lock port in startup()/shutdown() callbacks
Sean Christopherson (4):
iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
KVM: SVM: Allocate IR data using atomic allocation
KVM: x86: Explicitly treat routing entry type changes as changes
KVM: x86: Reset IRTE to host control if *new* route isn't postable
Sebastian Andrzej Siewior (1):
xdp: Reset bpf_redirect_info before running a xdp's BPF prog.
Sergey Shtylyov (1):
of: module: add buffer overflow check in of_modalias()
Sergiu Cuciurean (1):
iio: adc: ad7768-1: Fix conversion result sign
Srinivas Kandagatla (2):
ASoC: qcom: q6dsp: add support to more display ports
ASoC: qcom: q6afe-dai: fix Display Port Playback stream name
Stefan Eichenberger (1):
phy: freescale: imx8m-pcie: assert phy reset and perst in power off
Stephan Gerhold (1):
serial: msm: Configure correct working mode before starting earlycon
Steven Rostedt (2):
tracing: Add __print_dynamic_array() helper
tracing: Verify event formats that have "%*p.."
Steven Rostedt (Google) (4):
tracing: Add __cpumask to denote a trace event field that is a cpumask_t
tracing: Fix cpumask() example typo
tracing: Add __string_len() example
tracing: Remove pointer (asterisk) and brackets from cpumask_t field
Tamura Dai (1):
spi: spi-imx: Add check for spi_imx_setupxfer()
Thomas Bogendoerfer (1):
MIPS: cm: Fix warning if MIPS_CM is disabled
Thomas Weißschuh (1):
KVM: s390: Don't use %pK through tracepoints
Thorsten Leemhuis (1):
module: sign with sha512 instead of sha1 by default
Théo Lebrun (1):
usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
Tiezhu Yang (1):
LoongArch: Make regs_irqs_disabled() more clear
Tung Nguyen (1):
tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
Uwe Kleine-König (2):
auxdisplay: hd44780: Convert to platform remove callback returning void
backlight: led_bl: Convert to platform remove callback returning void
Vinicius Costa Gomes (1):
dmaengine: dmatest: Fix dmatest waiting less when interrupted
Vladimir Oltean (1):
net: dsa: mv88e6xxx: don't dispose of Global2 IRQ mappings from mdiobus code
Xiaogang Chen (1):
udmabuf: fix a buf size overflow issue during udmabuf creation
Xingui Yang (1):
scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
Yu-Chun Lin (1):
parisc: PDT: Fix missing prototype warning
Yuli Wang (1):
LoongArch: Select ARCH_USE_MEMTEST
Yunlong Xing (1):
loop: aio inherit the ioprio of original request
Zijun Hu (1):
of: resolver: Fix device node refcount leakage in of_resolve_phandles()
4 months, 3 weeks
- 1
- 1
Linux 5.15.181
by Greg Kroah-Hartman
I'm announcing the release of the 5.15.181 kernel.
All users of the 5.15 kernel series must upgrade.
The updated 5.15.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.15.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/scsi/libsas.rst | 2
Makefile | 5
arch/arm64/boot/dts/mediatek/mt8173.dtsi | 6
arch/arm64/include/asm/cputype.h | 4
arch/arm64/include/asm/fpsimd.h | 4
arch/arm64/include/asm/kvm_host.h | 17
arch/arm64/include/asm/kvm_hyp.h | 7
arch/arm64/include/asm/processor.h | 7
arch/arm64/include/asm/spectre.h | 1
arch/arm64/kernel/fpsimd.c | 117 +++-
arch/arm64/kernel/process.c | 3
arch/arm64/kernel/proton-pack.c | 218 ++++----
arch/arm64/kernel/ptrace.c | 3
arch/arm64/kernel/signal.c | 3
arch/arm64/kvm/arm.c | 1
arch/arm64/kvm/fpsimd.c | 72 +-
arch/arm64/kvm/hyp/entry.S | 5
arch/arm64/kvm/hyp/include/hyp/switch.h | 86 ++-
arch/arm64/kvm/hyp/nvhe/hyp-main.c | 9
arch/arm64/kvm/hyp/nvhe/switch.c | 52 +-
arch/arm64/kvm/hyp/vhe/switch.c | 4
arch/arm64/kvm/reset.c | 3
arch/mips/dec/prom/init.c | 2
arch/mips/include/asm/ds1287.h | 2
arch/mips/include/asm/mips-cm.h | 22
arch/mips/kernel/cevt-ds1287.c | 1
arch/mips/kernel/mips-cm.c | 14
arch/parisc/kernel/pdt.c | 2
arch/powerpc/kernel/rtas.c | 4
arch/riscv/include/asm/kgdb.h | 9
arch/riscv/include/asm/syscall.h | 7
arch/riscv/kernel/kgdb.c | 6
arch/riscv/kernel/setup.c | 36 +
arch/s390/kvm/trace-s390.h | 4
arch/sparc/mm/tlb.c | 5
arch/x86/entry/entry.S | 2
arch/x86/events/intel/ds.c | 8
arch/x86/events/intel/uncore_snbep.c | 107 ----
arch/x86/kernel/cpu/amd.c | 2
arch/x86/kernel/cpu/bugs.c | 30 -
arch/x86/kernel/e820.c | 17
arch/x86/kvm/svm/avic.c | 60 +-
arch/x86/kvm/vmx/posted_intr.c | 28 -
arch/x86/mm/tlb.c | 6
arch/x86/platform/pvh/head.S | 7
block/blk-cgroup.c | 24
block/blk-iocost.c | 7
crypto/crypto_null.c | 39 +
drivers/acpi/platform_profile.c | 20
drivers/acpi/pptt.c | 4
drivers/ata/ahci.c | 2
drivers/ata/libata-eh.c | 11
drivers/ata/pata_pxa.c | 6
drivers/ata/sata_sx4.c | 118 +---
drivers/auxdisplay/hd44780.c | 9
drivers/base/devres.c | 7
drivers/block/loop.c | 9
drivers/bluetooth/btrtl.c | 2
drivers/bluetooth/hci_ldisc.c | 19
drivers/bluetooth/hci_uart.h | 1
drivers/bus/mhi/host/main.c | 16
drivers/char/virtio_console.c | 7
drivers/clk/clk.c | 4
drivers/clocksource/timer-stm32-lp.c | 4
drivers/comedi/drivers/jr3_pci.c | 17
drivers/cpufreq/cppc_cpufreq.c | 2
drivers/cpufreq/cpufreq.c | 8
drivers/cpufreq/scmi-cpufreq.c | 10
drivers/cpufreq/scpi-cpufreq.c | 13
drivers/crypto/atmel-sha204a.c | 7
drivers/crypto/caam/qi.c | 6
drivers/crypto/ccp/sp-pci.c | 15
drivers/dma-buf/udmabuf.c | 2
drivers/dma/dmatest.c | 6
drivers/gpio/gpio-tegra186.c | 95 ++-
drivers/gpio/gpio-zynq.c | 1
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c | 2
drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c | 6
drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 10
drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 2
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 20
drivers/gpu/drm/amd/display/dc/core/dc_link.c | 2
drivers/gpu/drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 22
drivers/gpu/drm/amd/display/dc/dcn21/dcn21_resource.c | 2
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c | 3
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_hubp.c | 2
drivers/gpu/drm/amd/pm/powerplay/hwmgr/smu7_thermal.c | 4
drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega10_thermal.c | 4
drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_thermal.c | 2
drivers/gpu/drm/amd/pm/swsmu/smu11/arcturus_ppt.c | 3
drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c | 2
drivers/gpu/drm/drm_atomic_helper.c | 2
drivers/gpu/drm/drm_panel.c | 5
drivers/gpu/drm/drm_panel_orientation_quirks.c | 10
drivers/gpu/drm/i915/gt/intel_engine_cs.c | 7
drivers/gpu/drm/mediatek/mtk_dpi.c | 9
drivers/gpu/drm/msm/adreno/a6xx.xml.h | 4
drivers/gpu/drm/msm/adreno/a6xx_gmu.c | 148 +++--
drivers/gpu/drm/msm/adreno/a6xx_gpu.c | 14
drivers/gpu/drm/msm/adreno/a6xx_gpu.h | 1
drivers/gpu/drm/nouveau/nouveau_bo.c | 3
drivers/gpu/drm/nouveau/nouveau_gem.c | 3
drivers/gpu/drm/sti/Makefile | 2
drivers/gpu/drm/tiny/repaper.c | 4
drivers/hid/usbhid/hid-pidff.c | 60 +-
drivers/hsi/clients/ssi_protocol.c | 1
drivers/i2c/busses/i2c-cros-ec-tunnel.c | 3
drivers/i3c/master.c | 3
drivers/i3c/master/svc-i3c-master.c | 2
drivers/iio/adc/ad7768-1.c | 5
drivers/infiniband/core/umem_odp.c | 6
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3
drivers/infiniband/hw/hns/hns_roce_main.c | 2
drivers/infiniband/hw/qib/qib_fs.c | 1
drivers/infiniband/hw/usnic/usnic_ib_main.c | 14
drivers/iommu/amd/iommu.c | 2
drivers/mcb/mcb-parse.c | 2
drivers/md/dm-cache-target.c | 24
drivers/md/dm-integrity.c | 3
drivers/md/raid1.c | 26 -
drivers/md/raid10.c | 1
drivers/media/common/siano/smsdvb-main.c | 2
drivers/media/i2c/adv748x/adv748x.h | 2
drivers/media/i2c/ccs/ccs-core.c | 6
drivers/media/i2c/ov7251.c | 4
drivers/media/platform/qcom/venus/hfi_parser.c | 100 ++-
drivers/media/platform/qcom/venus/hfi_venus.c | 18
drivers/media/rc/streamzap.c | 135 ++---
drivers/media/test-drivers/vim2m.c | 6
drivers/media/v4l2-core/v4l2-dv-timings.c | 4
drivers/mfd/ene-kb3930.c | 2
drivers/misc/mei/hw-me-regs.h | 1
drivers/misc/mei/pci-me.c | 1
drivers/misc/pci_endpoint_test.c | 6
drivers/mtd/inftlcore.c | 9
drivers/mtd/mtdpstore.c | 12
drivers/mtd/nand/raw/brcmnand/brcmnand.c | 2
drivers/mtd/nand/raw/r852.c | 3
drivers/net/dsa/b53/b53_common.c | 10
drivers/net/dsa/mv88e6xxx/chip.c | 32 +
drivers/net/dsa/mv88e6xxx/devlink.c | 3
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 1
drivers/net/ethernet/intel/igc/igc_defines.h | 1
drivers/net/ethernet/intel/igc/igc_main.c | 1
drivers/net/ethernet/intel/igc/igc_ptp.c | 93 ++-
drivers/net/ethernet/microsoft/mana/mana.h | 2
drivers/net/ethernet/microsoft/mana/mana_en.c | 21
drivers/net/phy/phy_led_triggers.c | 23
drivers/net/ppp/ppp_synctty.c | 5
drivers/net/wireless/ath/ath10k/sdio.c | 5
drivers/net/wireless/atmel/at76c50x-usb.c | 2
drivers/net/wireless/mediatek/mt76/eeprom.c | 4
drivers/net/wireless/mediatek/mt76/mt76x2/usb.c | 1
drivers/net/wireless/ti/wl1251/tx.c | 4
drivers/ntb/hw/idt/ntb_hw_idt.c | 18
drivers/ntb/ntb_transport.c | 2
drivers/nvme/host/core.c | 9
drivers/nvme/target/fc.c | 39 -
drivers/nvme/target/fcloop.c | 2
drivers/of/irq.c | 13
drivers/pci/controller/pcie-brcmstb.c | 13
drivers/pci/controller/vmd.c | 12
drivers/pci/pci.c | 107 ++--
drivers/pci/probe.c | 54 +-
drivers/pci/remove.c | 7
drivers/perf/arm_pmu.c | 8
drivers/phy/tegra/xusb.c | 2
drivers/pinctrl/qcom/pinctrl-msm.c | 12
drivers/platform/x86/asus-laptop.c | 9
drivers/pwm/pwm-fsl-ftm.c | 6
drivers/pwm/pwm-mediatek.c | 8
drivers/pwm/pwm-rcar.c | 24
drivers/s390/char/sclp_con.c | 17
drivers/s390/char/sclp_tty.c | 12
drivers/scsi/aic94xx/aic94xx.h | 1
drivers/scsi/aic94xx/aic94xx_init.c | 1
drivers/scsi/aic94xx/aic94xx_tmf.c | 9
drivers/scsi/hisi_sas/hisi_sas.h | 14
drivers/scsi/hisi_sas/hisi_sas_main.c | 363 ++++++--------
drivers/scsi/hisi_sas/hisi_sas_v1_hw.c | 2
drivers/scsi/hisi_sas/hisi_sas_v2_hw.c | 13
drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 16
drivers/scsi/isci/init.c | 1
drivers/scsi/isci/task.c | 18
drivers/scsi/isci/task.h | 4
drivers/scsi/lpfc/lpfc_els.c | 51 +
drivers/scsi/lpfc/lpfc_hbadisc.c | 2
drivers/scsi/mvsas/mv_defs.h | 5
drivers/scsi/mvsas/mv_init.c | 1
drivers/scsi/mvsas/mv_sas.c | 31 -
drivers/scsi/mvsas/mv_sas.h | 1
drivers/scsi/pm8001/pm8001_hwi.c | 4
drivers/scsi/pm8001/pm8001_init.c | 1
drivers/scsi/pm8001/pm8001_sas.c | 27 -
drivers/scsi/pm8001/pm8001_sas.h | 11
drivers/scsi/scsi_transport_iscsi.c | 7
drivers/scsi/st.c | 2
drivers/scsi/ufs/ufs_bsg.c | 1
drivers/soc/samsung/exynos-chipid.c | 74 ++
drivers/soc/ti/omap_prm.c | 2
drivers/spi/spi-cadence-quadspi.c | 6
drivers/thermal/rockchip_thermal.c | 1
drivers/tty/serial/sifive.c | 6
drivers/usb/cdns3/cdns3-gadget.c | 2
drivers/usb/chipidea/ci_hdrc_imx.c | 44 +
drivers/usb/class/cdc-wdm.c | 21
drivers/usb/core/quirks.c | 9
drivers/usb/dwc3/dwc3-pci.c | 10
drivers/usb/dwc3/gadget.c | 6
drivers/usb/gadget/udc/aspeed-vhub/dev.c | 3
drivers/usb/host/max3421-hcd.c | 7
drivers/usb/host/ohci-pci.c | 23
drivers/usb/host/xhci-ring.c | 11
drivers/usb/serial/ftdi_sio.c | 2
drivers/usb/serial/ftdi_sio_ids.h | 5
drivers/usb/serial/option.c | 3
drivers/usb/serial/usb-serial-simple.c | 7
drivers/usb/storage/unusual_uas.h | 7
drivers/vdpa/mlx5/core/mr.c | 7
drivers/video/backlight/led_bl.c | 11
drivers/video/fbdev/omap2/omapfb/dss/dispc.c | 6
drivers/xen/Kconfig | 2
drivers/xen/xenfs/xensyms.c | 4
fs/Kconfig | 1
fs/btrfs/super.c | 3
fs/cifs/cifs_debug.c | 4
fs/cifs/cifsglob.h | 1
fs/cifs/cifsproto.h | 7
fs/cifs/connect.c | 2
fs/cifs/fs_context.c | 5
fs/cifs/ioctl.c | 3
fs/cifs/smb2misc.c | 11
fs/cifs/smb2ops.c | 48 +
fs/cifs/smb2pdu.c | 10
fs/cifs/transport.c | 43 -
fs/ext4/block_validity.c | 5
fs/ext4/inode.c | 75 ++
fs/ext4/namei.c | 2
fs/ext4/super.c | 19
fs/ext4/xattr.c | 11
fs/f2fs/f2fs.h | 12
fs/f2fs/node.c | 9
fs/f2fs/super.c | 27 -
fs/f2fs/sysfs.c | 14
fs/fuse/virtio_fs.c | 3
fs/hfs/bnode.c | 6
fs/hfsplus/bnode.c | 6
fs/isofs/export.c | 2
fs/jbd2/journal.c | 1
fs/jfs/jfs_dinode.h | 2
fs/jfs/jfs_dmap.c | 12
fs/jfs/jfs_imap.c | 10
fs/jfs/jfs_incore.h | 2
fs/jfs/jfs_txnmgr.c | 4
fs/jfs/jfs_xtree.c | 4
fs/jfs/jfs_xtree.h | 37 -
fs/ksmbd/oplock.c | 2
fs/ksmbd/smb2misc.c | 22
fs/ksmbd/smb2pdu.c | 49 +
fs/ksmbd/transport_ipc.c | 7
fs/namespace.c | 3
fs/nfs/Kconfig | 2
fs/nfs/internal.h | 22
fs/nfs/nfs4session.h | 4
fs/nfsd/Kconfig | 1
fs/nfsd/nfs4state.c | 2
fs/nfsd/nfsfh.h | 7
fs/ntfs3/file.c | 1
fs/proc/array.c | 53 +-
include/linux/backing-dev.h | 1
include/linux/blk-cgroup.h | 1
include/linux/filter.h | 9
include/linux/nfs.h | 13
include/linux/pci.h | 1
include/linux/sched/task_stack.h | 2
include/linux/soc/samsung/exynos-chipid.h | 6
include/net/bluetooth/bluetooth.h | 1
include/net/net_namespace.h | 1
include/net/sctp/structs.h | 3
include/net/sock.h | 10
include/scsi/libsas.h | 10
include/uapi/linux/kfd_ioctl.h | 2
include/uapi/linux/landlock.h | 2
include/xen/interface/xen-mca.h | 2
init/Kconfig | 3
kernel/bpf/helpers.c | 14
kernel/bpf/syscall.c | 17
kernel/dma/contiguous.c | 3
kernel/locking/lockdep.c | 3
kernel/sched/cpufreq_schedutil.c | 18
kernel/trace/ftrace.c | 1
kernel/trace/trace_events.c | 4
kernel/trace/trace_events_filter.c | 4
lib/sg_split.c | 2
lib/string.c | 15
lib/test_ubsan.c | 18
mm/filemap.c | 2
mm/gup.c | 4
mm/memory-failure.c | 11
mm/memory.c | 4
mm/vmscan.c | 2
net/8021q/vlan_dev.c | 31 -
net/bluetooth/af_bluetooth.c | 22
net/bluetooth/hci_event.c | 5
net/bluetooth/l2cap_core.c | 3
net/bluetooth/sco.c | 18
net/core/dev.c | 1
net/core/filter.c | 80 +--
net/core/net_namespace.c | 21
net/core/page_pool.c | 8
net/core/rtnetlink.c | 2
net/core/selftests.c | 18
net/core/sock.c | 10
net/dsa/tag_8021q.c | 2
net/ethtool/netlink.c | 8
net/ipv6/route.c | 6
net/mac80211/iface.c | 3
net/mac80211/mesh_hwmp.c | 14
net/mctp/af_mctp.c | 3
net/mptcp/sockopt.c | 16
net/mptcp/subflow.c | 23
net/netfilter/ipvs/ip_vs_ctl.c | 10
net/netfilter/nft_set_pipapo_avx2.c | 3
net/openvswitch/actions.c | 4
net/openvswitch/flow_netlink.c | 3
net/phonet/pep.c | 41 +
net/sched/sch_hfsc.c | 23
net/sctp/socket.c | 22
net/sctp/transport.c | 2
net/tipc/link.c | 1
net/tipc/monitor.c | 3
net/tls/tls_main.c | 6
security/landlock/errata.h | 87 +++
security/landlock/setup.c | 30 +
security/landlock/setup.h | 3
security/landlock/syscalls.c | 22
sound/pci/hda/hda_intel.c | 15
sound/soc/codecs/lpass-wsa-macro.c | 117 +++-
sound/soc/codecs/wcd934x.c | 2
sound/soc/fsl/fsl_audmix.c | 16
sound/soc/qcom/qdsp6/q6asm-dai.c | 19
sound/usb/midi.c | 80 ++-
sound/virtio/virtio_pcm.c | 21
tools/objtool/check.c | 3
tools/power/cpupower/bench/parse.c | 4
tools/testing/ktest/ktest.pl | 8
tools/testing/selftests/landlock/base_test.c | 46 +
tools/testing/selftests/mincore/mincore_selftest.c | 3
tools/testing/selftests/ublk/test_stripe_04.sh | 24
tools/testing/selftests/vm/charge_reserved_hugetlb.sh | 4
tools/testing/selftests/vm/hugetlb_reparenting_test.sh | 2
352 files changed, 3456 insertions(+), 1946 deletions(-)
Abdun Nihaal (3):
wifi: at76c50x: fix use after free access in at76_disconnect
wifi: wl1251: fix memory leak in wl1251_tx_work
cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
Abhinav Kumar (1):
drm: allow encoder mode_set even when connectors change for crtc
Adam Xue (1):
USB: serial: option: add Sierra Wireless EM9291
Akhil P Oommen (4):
drm/msm/a6xx: Improve gpu recovery sequence
drm/msm/a6xx: Handle GMU prepare-slumber hfi failure
drm/msm/a6xx: Avoid gx gbit halt during rpm suspend
drm/msm/a6xx: Fix stale rpmh votes from GPU
Al Viro (1):
qibfs: fix _another_ leak
Alex Williamson (1):
Revert "PCI: Avoid reset when disabled via sysfs"
Alexander Potapenko (1):
kmsan: disable strscpy() optimization under KMSAN
Alexander Stein (1):
usb: host: max3421-hcd: Add missing spi_device_id table
Alexander Usyskin (1):
mei: me: add panther lake H DID
Alexandra Diupina (1):
cifs: avoid NULL pointer dereference in dbg call
Alexandre Torgue (1):
clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup
Alexey Klimov (1):
ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
Andreas Gruenbacher (1):
writeback: fix false warning in inode_to_wb()
Andrew Wyatt (2):
drm: panel-orientation-quirks: Add support for AYANEO 2S
drm: panel-orientation-quirks: Add new quirk for GPD Win 2
Andrii Nakryiko (1):
bpf: avoid holding freeze_mutex during mmap operation
Andy Shevchenko (1):
usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
AngeloGioacchino Del Regno (1):
drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
Ard Biesheuvel (1):
x86/pvh: Call C code via the kernel virtual mapping
Arnaud Lecomte (1):
net: ppp: Add bound checking for skb data on ppp_sync_txmung
Arnd Bergmann (2):
dma/contiguous: avoid warning about unused size_bytes
ntb: reduce stack usage in idt_scan_mws
Arseniy Krasnov (2):
Bluetooth: hci_uart: fix race during initialization
Bluetooth: hci_uart: Fix another race during initialization
Artem Sadovnikov (1):
ext4: fix off-by-one error in do_split
Ayush Jain (1):
ktest: Fix Test Failures Due to Missing LOG_FILE Directories
Baoquan He (1):
mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable()
Ben Dooks (1):
bpf: Add endian modifiers to fix endian warnings
Bhupesh (1):
ext4: ignore xattrs past end
Björn Töpel (1):
riscv: Properly export reserved regions in /proc/iomem
Boqun Feng (1):
locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
Chao Yu (2):
f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
f2fs: check validation of fault attrs in f2fs_build_fault_attr()
Chen Hanxiao (1):
ipvs: properly dereference pe in ip_vs_add_service
Chen-Yu Tsai (1):
arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
ChenXiaoSong (1):
smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
Chengchang Tang (1):
RDMA/hns: Fix wrong maximum DMA segment size
Chenyuan Yang (3):
mfd: ene-kb3930: Fix a potential NULL pointer dereference
soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
Chris Bainbridge (1):
drm/nouveau: prime: fix ttm_bo_delayed_delete oops
Chris Wilson (1):
drm/i915/gt: Cleanup partial engine discovery failures
Christopher S M Hall (4):
igc: fix PTM cycle trigger logic
igc: move ktime snapshot into PTM retry loop
igc: handle the IGC_PTP_ENABLED flag correctly
igc: cleanup PTP module if probe fails
Cong Wang (2):
net_sched: hfsc: Fix a UAF vulnerability in class handling
net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
Craig Hesling (1):
USB: serial: simple: add OWON HDS200 series oscilloscope support
Dan Carpenter (1):
Bluetooth: btrtl: Prevent potential NULL dereference
Daniel Kral (1):
ahci: add PCI ID for Marvell 88SE9215 SATA Controller
Daniel Wagner (3):
nvmet-fcloop: swap list_add_tail arguments
nvmet-fc: take tgtport reference only once
nvmet-fc: put ref when assoc->del_work is already scheduled
Dapeng Mi (1):
perf/x86/intel: Allow to update user space GPRs from PEBS records
Dave Kleikamp (1):
jfs: define xtree root and page independently
David Yat Sin (1):
drm/amdkfd: clamp queue size to minimum
Denis Arefev (7):
asus-laptop: Fix an uninitialized variable
drm/amd/pm: Prevent division by zero
drm/amd/pm/powerplay: Prevent division by zero
drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero
drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
ksmbd: Prevent integer overflow in calculation of deadtime
Douglas Anderson (6):
arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
arm64: cputype: Add MIDR_CORTEX_A76AE
arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists
Edward Adam Davis (4):
jfs: Prevent copying of nlink with value 0 from disk inode
jfs: add sanity check for agwidth in dbMount
isofs: Prevent the use of too small fid
fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
Enzo Matsumiya (2):
smb: client: fix UAF in async decryption
cifs: print TIDs as hex
Eric Biggers (1):
nfs: add missing selections of CONFIG_CRC32
Eric Dumazet (2):
net: make sock_inuse_add() available
net: defer final 'struct net' free in netns dismantle
Fedor Pchelkin (4):
ntb: use 64-bit arithmetic for the MSI doorbell mask
usb: chipidea: ci_hdrc_imx: fix usbmisc handling
usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
Felix Huettner (1):
net: openvswitch: fix race on port output
Florian Westphal (1):
nft_set_pipapo: fix incorrect avx2 match of 5th field octet
Frode Isaksen (1):
usb: dwc3: gadget: check that event count does not exceed event buffer length
Frédéric Danis (1):
Bluetooth: l2cap: Check encryption key size on incoming connection
Fuad Tabba (1):
KVM: arm64: Calculate cptr_el2 traps on activating traps
Gabriele Paoloni (1):
tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER
Gang Yan (1):
mptcp: fix NULL pointer in can_accept_new_subflow
Gavrilov Ilia (1):
wifi: mac80211: fix integer overflow in hwmp_route_info_get()
Geert Uytterhoeven (2):
pwm: rcar: Simplify multiplication/shift logic
PCI: Fix dropping valid root bus resources with .end = zero
Greg Kroah-Hartman (1):
Linux 5.15.181
Gregory CLEMENT (1):
MIPS: cm: Detect CM quirks from device tree
Guixin Liu (2):
scsi: ufs: bsg: Set bsg_queue to NULL after removal
gpio: tegra186: fix resource handling in ACPI probe path
Halil Pasic (1):
virtio_console: fix missing byte order handling for cols and rows
Hannes Reinecke (4):
ata: sata_sx4: Drop pointless VPRINTK() calls and convert the remaining ones
nvme: requeue namespace scan on missed AENs
nvme: re-read ANA log page after ns scan completes
nvme: fixup scan failure for non-ANA multipath controllers
Haoxiang Li (5):
wifi: mt76: Add check for devm_kstrdup()
auxdisplay: hd44780: Fix an API misuse in hd44780.c
mcb: fix a double free bug in chameleon_parse_gdd()
s390/sclp: Add check for get_zeroed_page()
s390/tty: Fix a potential memory leak bug
Heiko Stuebner (1):
clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
Henry Martin (3):
ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
Herbert Xu (2):
crypto: caam/qi - Fix drv_ctx refcount bug
crypto: null - Use spin lock instead of mutex
Hersen Wu (1):
drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
Herve Codina (1):
backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
Hou Tao (1):
bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
Huacai Chen (1):
USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
Ian Abbott (1):
comedi: jr3_pci: Fix synchronous deletion of timer
Icenowy Zheng (1):
wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
Igor Pylypiv (1):
scsi: pm80xx: Set phy_attached to zero when device is gone
Ilya Maximets (2):
net: openvswitch: fix nested key length validation in the set() action
openvswitch: fix lockup on tx to unregistering netdev with carrier
Jakub Kicinski (1):
net: tls: explicitly disallow disconnect
James Smart (1):
scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
Jan Beulich (1):
xenfs/xensyms: respect hypervisor's "next" indication
Jan Kara (1):
jbd2: remove wrong sb->s_sequence check
Jann Horn (1):
ext4: don't treat fhandle lookup of ea_inode as FS corruption
Jason Andryuk (1):
xen: Change xen-acpi-processor dom0 dependency
Jason Xing (1):
page_pool: avoid infinite loop to schedule delayed worker
Jean-Marc Eurin (1):
ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
Jeff Hugo (1):
bus: mhi: host: Fix race between unprepare and queue_buf
Jeff Layton (1):
nfs: move nfs_fhandle_hash to common include file
Jiasheng Jiang (2):
mtd: Add check for devm_kcalloc()
mtd: Replace kcalloc() with devm_kcalloc()
Johannes Berg (1):
Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
Johannes Kimmel (1):
btrfs: correctly escape subvol in btrfs_show_options()
John Garry (6):
scsi: hisi_sas: Start delivery hisi_sas_task_exec() directly
scsi: hisi_sas: Pass abort structure for internal abort
scsi: hisi_sas: Factor out task prep and delivery code
scsi: hisi_sas: Fix setting of hisi_sas_slot.is_internal
scsi: libsas: Delete lldd_clear_aca callback
scsi: libsas: Add struct sas_tmf_task
John Stultz (1):
sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
Jonas Gorski (1):
net: b53: enable BPDU reception for management port
Jonathan Cameron (1):
iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
Josh Poimboeuf (6):
pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler()
objtool: Stop UNRET validation on UD2
x86/bugs: Use SBPB in write_ibpb() if applicable
x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
x86/bugs: Don't fill RSB on context switch with eIBRS
Kai Mäkisara (1):
scsi: st: Fix array overflow in st_setup()
Kai-Heng Feng (1):
PCI: Coalesce host bridge contiguous apertures
Kaixin Wang (1):
HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition
Kamal Dasu (1):
mtd: rawnand: brcmnand: fix PM resume warning
Kan Liang (3):
perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX
perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR
Kang Yang (1):
wifi: ath10k: avoid NULL pointer error during sdio remove
Karina Yankevich (1):
media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
Kees Cook (1):
xen/mcelog: Add __nonstring annotations for unterminated strings
Kirill A. Shutemov (1):
mm: fix apply_to_existing_page_range()
Krzysztof Kozlowski (2):
gpio: zynq: Fix wakeup source leaks on device unbind
soc: samsung: exynos-chipid: avoid soc_device_to_device()
Kunihiko Hayashi (3):
misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
Kunwu Chan (1):
pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
Leonid Arapov (1):
fbdev: omapfb: Add 'plane' value check
Li Lingfeng (1):
nfsd: decrease sc_count directly if fail to queue dl_recall
Li Nan (1):
blk-iocost: do not WARN if iocg was already offlined
Luca Ceresoli (1):
drm/bridge: panel: forbid initializing a panel with unknown connector type
Lucas De Marchi (1):
drivers: base: devres: Allow to release group on device release
Luiz Augusto von Dentz (2):
Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
Bluetooth: SCO: Fix UAF on sco_sock_timeout
Ma Ke (2):
PCI: Fix reference leak in pci_alloc_child_bus()
PCI: Fix reference leak in pci_register_host_bridge()
Manjunatha Venkatesh (1):
i3c: Add NULL pointer check in i3c_master_queue_ibi()
Marc Zyngier (2):
KVM: arm64: Always start with clearing SVE flag on load
cpufreq: cppc: Fix invalid return value in .get() callback
Marek Behún (6):
net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
net: dsa: mv88e6xxx: fix VTU methods for 6320 family
crypto: atmel-sha204a - Set hwrng quality to lowest possible
net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
net: dsa: mv88e6xxx: enable PVT for 6321 switch
net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
Mark Brown (6):
KVM: arm64: Get rid of host SVE tracking/saving
KVM: arm64: Discard any SVE state when entering KVM guests
arm64/fpsimd: Track the saved FPSIMD state type separately to TIF_SVE
arm64/fpsimd: Have KVM explicitly say which FP registers to save
arm64/fpsimd: Stop using TIF_SVE to manage register saving in KVM
selftests/mm: generate a temporary mountpoint for cgroup filesystem
Mark Rutland (5):
perf: arm_pmu: Don't disable counter in armpmu_add()
KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
KVM: arm64: Remove host FPSIMD saving for non-protected KVM
KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN
KVM: arm64: Eagerly switch ZCR_EL{1,2}
Mathieu Desnoyers (1):
mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
Matt Johnston (1):
net: mctp: Set SOCK_RCU_FREE
Matthew Auld (1):
drm/amdgpu/dma_buf: fix page_link check
Matthew Majewski (1):
media: vim2m: print device name after registering device
Matthieu Baerts (NGI0) (2):
mptcp: only inc MPJoinAckHMacFailure for HMAC failures
mptcp: sockopt: fix getting IPV6_V6ONLY
Max Grobecker (1):
x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine
Maxim Mikityanskiy (1):
ALSA: hda: intel: Fix Optimus when GPU has no sound
Maxime Chevallier (1):
net: ethtool: Don't call .cleanup_data when prepare_data fails
Meir Elisha (1):
md/raid1: Add check for missing source disk in process_checks()
Miao Li (2):
usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
Miaoqian Lin (2):
scsi: iscsi: Fix missing scsi_host_put() in error path
phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
Michael Ehrenreich (1):
USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
Michal Pecio (1):
usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running
Michal Schmidt (1):
bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
Mickaël Salaün (1):
landlock: Add the errata interface
Mikulas Patocka (1):
dm-integrity: set ti->error on memory allocation failure
Ming Lei (1):
selftests: ublk: fix test_stripe_04
Ming-Hung Tsai (1):
dm cache: fix flushing uninitialized delayed_work on cache_ctr error
Miquel Raynal (1):
spi: cadence-qspi: Fix probe on AM62A LP SK
Mostafa Saleh (1):
ubsan: Fix panic from test_ubsan_out_of_bounds
Murad Masimov (2):
media: streamzap: prevent processing IR data on URB failure
media: streamzap: fix race between device disconnection and urb callback
Myrrh Periwinkle (1):
x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions()
Namjae Jeon (1):
ksmbd: fix potencial out-of-bounds when buffer offset is invalid
Nathan Chancellor (4):
ACPI: platform-profile: Fix CFI violation when accessing sysfs files
riscv: Avoid fortify warning in syscall_get_arguments()
kbuild: Add '-fno-builtin-wcslen'
f2fs: Add inline to f2fs_build_fault_attr() stub
Nathan Lynch (1):
powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
Nikita Zhandarovich (1):
drm/repaper: fix integer overflows in repeat functions
Niklas Cassel (1):
ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
Niklas Söderlund (1):
media: i2c: adv748x: Fix test pattern selection mask
Ojaswin Mujoo (2):
ext4: protect ext4_release_dquot against freezing
ext4: make block validity check resistent to sb bh corruption
Oleg Nesterov (2):
fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats
sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
Oleksij Rempel (1):
net: selftests: initialize TCP header and skb payload with zero
Oliver Neukum (6):
USB: storage: quirk for ADATA Portable HDD CH94
USB: VLI disk crashes if LPM is used
USB: wdm: handle IO errors in wdm_wwan_port_start
USB: wdm: close race between wdm_open and wdm_wwan_port_stop
USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
USB: wdm: add annotation
Pali Rohár (1):
PCI: Assign PCI domain IDs by ida_alloc()
Paolo Abeni (1):
ipv6: release nexthop on device removal
Paulo Alcantara (5):
smb: client: fix potential UAF in cifs_dump_full_key()
smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
smb: client: fix NULL ptr deref in crypto_aead_setkey()
smb: client: fix potential deadlock when releasing mids
smb: client: fix potential UAF in cifs_stats_proc_show()
Pei Li (1):
jfs: Fix shift-out-of-bounds in dbDiscardAG
Peter Collingbourne (1):
string: Add load_unaligned_zeropad() code path to sized_strscpy()
Philip Yang (1):
drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
Qingfang Deng (1):
net: phy: leds: fix memory leak
Qiuxu Zhuo (1):
selftests/mincore: Allow read-ahead pages to reach the end of the file
Qun-Wei Lin (1):
sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
Rafael J. Wysocki (2):
cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
cpufreq: Reference count policy in cpufreq_update_limits()
Ralph Siemsen (1):
usb: cdns3: Fix deadlock when using NCM gadget
Rand Deeb (2):
fs/jfs: cast inactags to s64 to prevent potential overflow
fs/jfs: Prevent integer overflow in AG size calculation
Remi Pommarel (2):
wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
wifi: mac80211: Purge vif txq in ieee80211_do_stop()
Ricard Wanderlof (1):
ALSA: usb-audio: Fix CME quirk for UF series keyboards
Ricardo Cañuelo Navarro (1):
sctp: detect and prevent references to a freed transport in sendmsg
Rob Herring (1):
PCI: Fix use-after-free in pci_bus_release_domain_nr()
Rolf Eike Beer (1):
drm/sti: remove duplicate object names
Roman Li (1):
drm/amd/display: Fix gpu reset in multidisplay config
Roman Smirnov (1):
cifs: fix integer overflow in match_server()
Ross Lagerwall (1):
PCI: Release resource invalidated by coalescing
Ryan Roberts (1):
sparc/mm: disable preemption in lazy mmu mode
Ryo Takakura (2):
PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
serial: sifive: lock port in startup()/shutdown() callbacks
Rémi Denis-Courmont (1):
phonet/pep: fix racy skb_queue_empty() use
Sakari Ailus (4):
media: i2c: ccs: Set the device's runtime PM status correctly in remove
media: i2c: ccs: Set the device's runtime PM status correctly in probe
media: i2c: ov7251: Set enable GPIO low in probe
media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
Sam Protsenko (1):
soc: samsung: exynos-chipid: Pass revision reg offsets
Sean Christopherson (3):
iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
KVM: SVM: Allocate IR data using atomic allocation
KVM: x86: Reset IRTE to host control if *new* route isn't postable
Sean Young (4):
media: streamzap: remove unnecessary ir_raw_event_reset and handle
media: streamzap: no need for usb pid/vid in device name
media: streamzap: less chatter
media: streamzap: remove unused struct members
Sebastian Andrzej Siewior (1):
xdp: Reset bpf_redirect_info before running a xdp's BPF prog.
Sergiu Cuciurean (1):
iio: adc: ad7768-1: Fix conversion result sign
Shay Drory (1):
RDMA/core: Silence oversized kvmalloc() warning
Shengjiu Wang (1):
ASoC: fsl_audmix: register card device depends on 'dais' property
Shuai Xue (1):
mm/hwpoison: do not send SIGBUS to processes with recovered clean pages
Si-Wei Liu (1):
vdpa/mlx5: Fix oversized null mkey longer than 32bit
Souradeep Chakrabarti (1):
net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
Srinivas Kandagatla (2):
ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate
ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels
Srinivasan Shanmugam (2):
drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing
Stanimir Varbanov (1):
PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
Stanislav Fomichev (1):
net: vlan: don't propagate flags on open
Stanley Chu (1):
i3c: master: svc: Use readsb helper for reading MDB
Stephan Gerhold (1):
pinctrl: qcom: Clear latched interrupt status when changing IRQ type
Steven Rostedt (1):
tracing: Fix filter string testing
T Pratham (1):
lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
Thadeu Lima de Souza Cascardo (1):
i2c: cros-ec-tunnel: defer probe if parent EC is not present
Thierry Reding (1):
gpio: tegra186: Force one interrupt per bank
Thomas Bogendoerfer (1):
MIPS: cm: Fix warning if MIPS_CM is disabled
Thomas Weißschuh (3):
loop: properly send KOBJ_CHANGED uevent for disk device
loop: LOOP_SET_FD: send uevents for partitions
KVM: s390: Don't use %pK through tracepoints
Thorsten Leemhuis (1):
module: sign with sha512 instead of sha1 by default
Tim Huang (1):
drm/amd/display: fix double free issue during amdgpu module unload
Tom Lendacky (1):
crypto: ccp - Fix check for the primary ASP device
Tomasz Pakuła (3):
HID: pidff: Convert infinite length from Linux API to PID standard
HID: pidff: Do not send effect envelope if it's empty
HID: pidff: Fix null pointer dereference in pidff_find_fields
Trevor Woerner (1):
thermal/drivers/rockchip: Add missing rk3328 mapping entry
Trond Myklebust (2):
umount: Allow superblock owners to force umount
filemap: Fix bounds checking in filemap_read()
Tung Nguyen (2):
tipc: fix memory leak in tipc_link_xmit
tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
Tuo Li (1):
scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
Uwe Kleine-König (4):
pwm: rcar: Improve register calculation
pwm: fsl-ftm: Handle clk_get_rate() returning 0
auxdisplay: hd44780: Convert to platform remove callback returning void
backlight: led_bl: Convert to platform remove callback returning void
Vasiliy Kovalev (1):
hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
Vikash Garodia (4):
media: venus: hfi: add a check to handle OOB in sfr region
media: venus: hfi: add check to handle incorrect queue size
media: venus: hfi_parser: add check to avoid out of bound access
media: venus: hfi_parser: refactor hfi packet parsing logic
Vinicius Costa Gomes (1):
dmaengine: dmatest: Fix dmatest waiting less when interrupted
Vitaly Prosyak (1):
drm/amdgpu: fix usage slab after free
Vladimir Oltean (2):
net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered
net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails
Wang Liang (1):
net: fix crash when config small gso_max_size/gso_ipv4_max_size
WangYuli (6):
riscv: KGDB: Do not inline arch_kgdb_breakpoint()
riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break
nvmet-fc: Remove unused functions
MIPS: dec: Declare which_prom() as static
MIPS: cevt-ds1287: Add missing ds1287.h include
MIPS: ds1287: Match ds1287_set_base_clock() function types
Wentao Liang (3):
ata: sata_sx4: Add error handling in pdc20621_i2c_read()
mtd: inftlcore: Add error check for inftl_read_oob()
mtd: rawnand: Add status chack in r852_ready()
Willem de Bruijn (1):
bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
Xiangsheng Hou (1):
virtiofs: add filesystem context source name check
Xiaogang Chen (1):
udmabuf: fix a buf size overflow issue during udmabuf creation
Xiaxi Shen (1):
ext4: fix timer use-after-free on failed mount
Xingui Yang (2):
scsi: hisi_sas: Enable force phy when SATA disk directly connected
scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
Yu Kuai (2):
md/raid10: fix missing discard IO accounting
blk-cgroup: support to track if policy is online
Yu-Chun Lin (1):
parisc: PDT: Fix missing prototype warning
Yuan Can (1):
media: siano: Fix error handling in smsdvb_module_init()
Yue Haibing (1):
RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
Yunlong Xing (1):
loop: aio inherit the ioprio of original request
Zhang Xiaoxu (1):
cifs: Fix UAF in cifs_demultiplex_thread()
Zhikai Zhai (1):
drm/amd/display: Update Cursor request mode to the beginning prefetch always
Zhongqiu Han (2):
pm: cpupower: bench: Prevent NULL dereference on malloc failure
jfs: Fix uninit-value access of imap allocated in the diMount() function
Zijun Hu (3):
of/irq: Fix device node refcount leakages in of_irq_count()
of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
of/irq: Fix device node refcount leakages in of_irq_init()
zhoumin (1):
ftrace: Add cond_resched() to ftrace_graph_set_hash()
4 months, 3 weeks
- 1
- 1
Linux 5.10.237
by Greg Kroah-Hartman
I'm announcing the release of the 5.10.237 kernel.
All users of the 5.10 kernel series must upgrade.
The updated 5.10.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.10.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Makefile | 5
arch/arm/mach-exynos/Kconfig | 1
arch/arm64/boot/dts/mediatek/mt8173.dtsi | 6
arch/arm64/include/asm/cputype.h | 4
arch/arm64/kernel/proton-pack.c | 1
arch/mips/dec/prom/init.c | 2
arch/mips/include/asm/ds1287.h | 2
arch/mips/include/asm/mips-cm.h | 22 +
arch/mips/kernel/cevt-ds1287.c | 1
arch/mips/kernel/mips-cm.c | 14 +
arch/parisc/kernel/pdt.c | 2
arch/powerpc/kernel/rtas.c | 4
arch/riscv/include/asm/kgdb.h | 9
arch/riscv/include/asm/syscall.h | 7
arch/riscv/kernel/kgdb.c | 6
arch/s390/kvm/trace-s390.h | 4
arch/sparc/mm/tlb.c | 5
arch/x86/entry/entry.S | 2
arch/x86/events/intel/ds.c | 8
arch/x86/events/intel/uncore_snbep.c | 49 ---
arch/x86/kernel/cpu/amd.c | 2
arch/x86/kernel/cpu/bugs.c | 8
arch/x86/kernel/e820.c | 17 -
arch/x86/kvm/svm/avic.c | 60 ++--
arch/x86/kvm/vmx/posted_intr.c | 28 --
arch/x86/platform/pvh/head.S | 7
block/blk-cgroup.c | 24 +
block/blk-iocost.c | 7
crypto/crypto_null.c | 39 +-
drivers/acpi/pptt.c | 4
drivers/ata/ahci.c | 2
drivers/ata/libata-eh.c | 11
drivers/ata/pata_pxa.c | 6
drivers/ata/sata_sx4.c | 118 +++-----
drivers/bluetooth/btrtl.c | 2
drivers/bluetooth/hci_ldisc.c | 19 +
drivers/bluetooth/hci_uart.h | 1
drivers/char/virtio_console.c | 7
drivers/clk/clk.c | 4
drivers/clocksource/timer-stm32-lp.c | 4
drivers/cpufreq/cpufreq.c | 8
drivers/cpufreq/scpi-cpufreq.c | 13
drivers/crypto/atmel-sha204a.c | 7
drivers/crypto/caam/qi.c | 6
drivers/crypto/ccp/sp-pci.c | 15 -
drivers/dma-buf/udmabuf.c | 2
drivers/dma/dmatest.c | 6
drivers/gpio/gpio-zynq.c | 1
drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c | 9
drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.h | 3
drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.c | 6
drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 10
drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 2
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 14 -
drivers/gpu/drm/amd/display/dc/dcn21/dcn21_resource.c | 2
drivers/gpu/drm/amd/pm/powerplay/hwmgr/smu7_thermal.c | 4
drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega10_thermal.c | 4
drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_thermal.c | 2
drivers/gpu/drm/drm_atomic_helper.c | 2
drivers/gpu/drm/drm_panel.c | 5
drivers/gpu/drm/drm_panel_orientation_quirks.c | 10
drivers/gpu/drm/i915/gt/intel_engine_cs.c | 7
drivers/gpu/drm/mediatek/mtk_dpi.c | 9
drivers/gpu/drm/nouveau/nouveau_bo.c | 3
drivers/gpu/drm/nouveau/nouveau_gem.c | 3
drivers/gpu/drm/sti/Makefile | 2
drivers/gpu/drm/tiny/repaper.c | 4
drivers/hid/usbhid/hid-pidff.c | 60 +++-
drivers/hsi/clients/ssi_protocol.c | 1
drivers/i2c/busses/i2c-cros-ec-tunnel.c | 3
drivers/i3c/master.c | 3
drivers/iio/adc/ad7768-1.c | 5
drivers/infiniband/core/umem_odp.c | 6
drivers/infiniband/hw/hns/hns_roce_main.c | 2
drivers/infiniband/hw/qib/qib_fs.c | 1
drivers/infiniband/hw/usnic/usnic_ib_main.c | 14 -
drivers/iommu/amd/iommu.c | 2
drivers/mcb/mcb-parse.c | 2
drivers/md/dm-cache-target.c | 24 +
drivers/md/dm-integrity.c | 3
drivers/md/raid1.c | 26 +
drivers/media/common/siano/smsdvb-main.c | 2
drivers/media/i2c/adv748x/adv748x.h | 2
drivers/media/i2c/ov7251.c | 4
drivers/media/platform/qcom/venus/Makefile | 3
drivers/media/platform/qcom/venus/core.c | 17 -
drivers/media/platform/qcom/venus/core.h | 41 ---
drivers/media/platform/qcom/venus/helpers.c | 60 ++--
drivers/media/platform/qcom/venus/helpers.h | 2
drivers/media/platform/qcom/venus/hfi.c | 18 +
drivers/media/platform/qcom/venus/hfi_parser.c | 159 +++++++++---
drivers/media/platform/qcom/venus/hfi_parser.h | 2
drivers/media/platform/qcom/venus/hfi_platform.c | 49 +++
drivers/media/platform/qcom/venus/hfi_platform.h | 61 ++++
drivers/media/platform/qcom/venus/hfi_platform_v4.c | 60 ++++
drivers/media/platform/qcom/venus/hfi_venus.c | 18 +
drivers/media/platform/qcom/venus/pm_helpers.c | 12
drivers/media/platform/qcom/venus/vdec.c | 8
drivers/media/platform/qcom/venus/venc.c | 91 ++++--
drivers/media/rc/streamzap.c | 135 ++++------
drivers/media/test-drivers/vim2m.c | 6
drivers/media/v4l2-core/v4l2-dv-timings.c | 4
drivers/mfd/ene-kb3930.c | 2
drivers/misc/mei/hw-me-regs.h | 1
drivers/misc/mei/pci-me.c | 1
drivers/misc/pci_endpoint_test.c | 6
drivers/mtd/inftlcore.c | 9
drivers/mtd/mtdpstore.c | 9
drivers/mtd/nand/raw/brcmnand/brcmnand.c | 2
drivers/mtd/nand/raw/r852.c | 3
drivers/net/dsa/b53/b53_common.c | 10
drivers/net/dsa/mv88e6xxx/chip.c | 25 +
drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 1
drivers/net/ethernet/intel/igc/igc_main.c | 1
drivers/net/ethernet/intel/igc/igc_ptp.c | 7
drivers/net/ethernet/mellanox/mlx5/core/en/rep/neigh.c | 15 -
drivers/net/ethernet/mellanox/mlx5/core/en/rep/tc.c | 6
drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 33 ++
drivers/net/ethernet/mellanox/mlx5/core/en_tc.h | 3
drivers/net/phy/phy_led_triggers.c | 23 -
drivers/net/ppp/ppp_synctty.c | 5
drivers/net/wireless/ath/ath10k/sdio.c | 5
drivers/net/wireless/atmel/at76c50x-usb.c | 2
drivers/net/wireless/mediatek/mt76/mt76x2/usb.c | 1
drivers/net/wireless/ti/wl1251/tx.c | 4
drivers/ntb/hw/idt/ntb_hw_idt.c | 18 -
drivers/ntb/ntb_transport.c | 2
drivers/nvme/host/core.c | 10
drivers/nvme/target/fc.c | 14 -
drivers/nvme/target/fcloop.c | 2
drivers/of/irq.c | 13
drivers/pci/controller/pcie-brcmstb.c | 13
drivers/pci/pci.c | 103 ++++---
drivers/pci/probe.c | 58 +++-
drivers/pci/remove.c | 7
drivers/perf/arm_pmu.c | 8
drivers/phy/tegra/xusb.c | 2
drivers/pinctrl/qcom/pinctrl-msm.c | 12
drivers/platform/x86/asus-laptop.c | 9
drivers/platform/x86/intel_speed_select_if/isst_if_common.c | 2
drivers/pwm/pwm-fsl-ftm.c | 6
drivers/pwm/pwm-mediatek.c | 20 +
drivers/pwm/pwm-rcar.c | 24 -
drivers/s390/block/dasd.c | 5
drivers/scsi/lpfc/lpfc_hbadisc.c | 2
drivers/scsi/pm8001/pm8001_sas.c | 1
drivers/scsi/scsi_transport_iscsi.c | 7
drivers/scsi/st.c | 2
drivers/scsi/ufs/ufs_bsg.c | 1
drivers/soc/samsung/Kconfig | 12
drivers/soc/samsung/Makefile | 3
drivers/soc/samsung/exynos-asv.c | 45 ---
drivers/soc/samsung/exynos-asv.h | 2
drivers/soc/samsung/exynos-chipid.c | 137 ++++++++--
drivers/soc/ti/omap_prm.c | 2
drivers/spi/spi-cadence-quadspi.c | 6
drivers/staging/comedi/drivers/jr3_pci.c | 15 -
drivers/staging/rtl8723bs/core/rtw_mlme.c | 2
drivers/thermal/rockchip_thermal.c | 1
drivers/tty/serial/sifive.c | 6
drivers/usb/cdns3/gadget.c | 2
drivers/usb/core/quirks.c | 9
drivers/usb/dwc3/gadget.c | 6
drivers/usb/gadget/udc/aspeed-vhub/dev.c | 3
drivers/usb/host/max3421-hcd.c | 7
drivers/usb/host/ohci-pci.c | 23 +
drivers/usb/serial/ftdi_sio.c | 2
drivers/usb/serial/ftdi_sio_ids.h | 5
drivers/usb/serial/option.c | 3
drivers/usb/serial/usb-serial-simple.c | 7
drivers/usb/storage/unusual_uas.h | 7
drivers/vdpa/mlx5/core/mr.c | 7
drivers/vfio/pci/vfio_pci.c | 13
drivers/video/backlight/led_bl.c | 5
drivers/video/fbdev/omap2/omapfb/dss/dispc.c | 6
drivers/xen/xenfs/xensyms.c | 4
fs/Kconfig | 1
fs/btrfs/super.c | 3
fs/cifs/cifs_debug.c | 6
fs/cifs/cifsglob.h | 9
fs/cifs/cifsproto.h | 7
fs/cifs/connect.c | 2
fs/cifs/smb2misc.c | 11
fs/cifs/smb2ops.c | 48 ++-
fs/cifs/smb2pdu.c | 10
fs/cifs/transport.c | 43 +--
fs/ext4/block_validity.c | 5
fs/ext4/inode.c | 76 ++++-
fs/ext4/namei.c | 2
fs/ext4/super.c | 19 +
fs/ext4/xattr.c | 11
fs/f2fs/node.c | 9
fs/fuse/virtio_fs.c | 3
fs/hfs/bnode.c | 6
fs/hfsplus/bnode.c | 6
fs/isofs/export.c | 2
fs/jbd2/journal.c | 1
fs/jfs/jfs_dmap.c | 12
fs/jfs/jfs_imap.c | 2
fs/namespace.c | 3
fs/nfs/Kconfig | 2
fs/nfs/internal.h | 22 -
fs/nfs/nfs4session.h | 4
fs/nfsd/Kconfig | 1
fs/nfsd/nfs4state.c | 2
fs/nfsd/nfsfh.h | 7
fs/proc/array.c | 52 ++-
include/linux/backing-dev.h | 1
include/linux/blk-cgroup.h | 1
include/linux/filter.h | 4
include/linux/nfs.h | 13
include/linux/pci.h | 12
include/linux/soc/samsung/exynos-chipid.h | 6
include/net/net_namespace.h | 1
include/net/sctp/structs.h | 3
include/uapi/linux/kfd_ioctl.h | 2
include/xen/interface/xen-mca.h | 2
init/Kconfig | 3
kernel/bpf/helpers.c | 11
kernel/bpf/syscall.c | 17 -
kernel/dma/contiguous.c | 3
kernel/locking/lockdep.c | 3
kernel/resource.c | 41 ---
kernel/sched/cpufreq_schedutil.c | 18 +
kernel/trace/ftrace.c | 1
kernel/trace/trace.h | 4
kernel/trace/trace_events.c | 4
kernel/trace/trace_events_filter.c | 4
kernel/trace/trace_events_hist.c | 7
kernel/trace/trace_events_synth.c | 82 ++++++
kernel/trace/trace_synth.h | 1
lib/sg_split.c | 2
mm/memory.c | 4
mm/vmscan.c | 2
net/8021q/vlan_dev.c | 31 --
net/bluetooth/hci_event.c | 5
net/core/dev.c | 1
net/core/filter.c | 80 +++---
net/core/net_namespace.c | 21 +
net/core/page_pool.c | 8
net/ipv4/inet_connection_sock.c | 19 +
net/mac80211/iface.c | 3
net/mac80211/mesh_hwmp.c | 14 -
net/mptcp/protocol.c | 45 +++
net/mptcp/subflow.c | 15 -
net/netfilter/ipvs/ip_vs_ctl.c | 10
net/netfilter/nft_set_pipapo_avx2.c | 3
net/openvswitch/actions.c | 4
net/openvswitch/flow_netlink.c | 3
net/sched/sch_hfsc.c | 23 +
net/sctp/socket.c | 22 +
net/sctp/transport.c | 2
net/tipc/link.c | 1
net/tipc/monitor.c | 3
net/tls/tls_main.c | 6
sound/pci/hda/hda_intel.c | 15 +
sound/soc/codecs/wcd934x.c | 2
sound/soc/qcom/qdsp6/q6asm-dai.c | 19 -
sound/usb/midi.c | 80 +++++-
tools/objtool/check.c | 3
tools/power/cpupower/bench/parse.c | 4
tools/testing/selftests/mincore/mincore_selftest.c | 3
tools/testing/selftests/ublk/test_stripe_04.sh | 24 +
tools/testing/selftests/vm/charge_reserved_hugetlb.sh | 4
tools/testing/selftests/vm/hugetlb_reparenting_test.sh | 2
265 files changed, 2371 insertions(+), 1187 deletions(-)
Abdun Nihaal (3):
wifi: at76c50x: fix use after free access in at76_disconnect
wifi: wl1251: fix memory leak in wl1251_tx_work
cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
Abhinav Kumar (1):
drm: allow encoder mode_set even when connectors change for crtc
Abhishek Sahu (1):
vfio/pci: fix memory leak during D3hot to D0 transition
Adam Xue (1):
USB: serial: option: add Sierra Wireless EM9291
Al Viro (1):
qibfs: fix _another_ leak
Alexander Stein (1):
usb: host: max3421-hcd: Add missing spi_device_id table
Alexander Usyskin (1):
mei: me: add panther lake H DID
Alexandra Diupina (1):
cifs: avoid NULL pointer dereference in dbg call
Alexandre Torgue (1):
clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup
Alexey Klimov (1):
ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
Andreas Gruenbacher (1):
writeback: fix false warning in inode_to_wb()
Andrew Wyatt (2):
drm: panel-orientation-quirks: Add support for AYANEO 2S
drm: panel-orientation-quirks: Add new quirk for GPD Win 2
Andrii Nakryiko (1):
bpf: avoid holding freeze_mutex during mmap operation
AngeloGioacchino Del Regno (1):
drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
Ard Biesheuvel (1):
x86/pvh: Call C code via the kernel virtual mapping
Arnaud Lecomte (1):
net: ppp: Add bound checking for skb data on ppp_sync_txmung
Arnd Bergmann (2):
dma/contiguous: avoid warning about unused size_bytes
ntb: reduce stack usage in idt_scan_mws
Arseniy Krasnov (2):
Bluetooth: hci_uart: fix race during initialization
Bluetooth: hci_uart: Fix another race during initialization
Artem Sadovnikov (1):
ext4: fix off-by-one error in do_split
Ben Dooks (1):
bpf: Add endian modifiers to fix endian warnings
Bhupesh (1):
ext4: ignore xattrs past end
Boqun Feng (2):
locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
PCI: Introduce domain_nr in pci_host_bridge
Chao Yu (1):
f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
Chen Hanxiao (1):
ipvs: properly dereference pe in ip_vs_add_service
Chen-Yu Tsai (1):
arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
Chengchang Tang (1):
RDMA/hns: Fix wrong maximum DMA segment size
Chenyuan Yang (3):
mfd: ene-kb3930: Fix a potential NULL pointer dereference
soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
Chris Bainbridge (1):
drm/nouveau: prime: fix ttm_bo_delayed_delete oops
Chris Wilson (1):
drm/i915/gt: Cleanup partial engine discovery failures
Christopher S M Hall (2):
igc: handle the IGC_PTP_ENABLED flag correctly
igc: cleanup PTP module if probe fails
Chunguang Xu (1):
nvme: avoid double free special payload
Colin Ian King (1):
media: venus: Fix uninitialized variable count being checked for zero
Cong Wang (2):
net_sched: hfsc: Fix a UAF vulnerability in class handling
net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
Craig Hesling (1):
USB: serial: simple: add OWON HDS200 series oscilloscope support
Dan Carpenter (1):
Bluetooth: btrtl: Prevent potential NULL dereference
Daniel Golle (1):
pwm: mediatek: always use bus clock for PWM on MT7622
Daniel Kral (1):
ahci: add PCI ID for Marvell 88SE9215 SATA Controller
Daniel Wagner (1):
nvmet-fcloop: swap list_add_tail arguments
Dapeng Mi (1):
perf/x86/intel: Allow to update user space GPRs from PEBS records
David Yat Sin (1):
drm/amdkfd: clamp queue size to minimum
Denis Arefev (4):
asus-laptop: Fix an uninitialized variable
drm/amd/pm/powerplay: Prevent division by zero
drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
Douglas Anderson (3):
arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
arm64: cputype: Add MIDR_CORTEX_A76AE
arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
Douglas Raillard (1):
tracing: Fix synth event printk format for str fields
Duoming Zhou (1):
drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback()
Edward Adam Davis (3):
jfs: Prevent copying of nlink with value 0 from disk inode
jfs: add sanity check for agwidth in dbMount
isofs: Prevent the use of too small fid
Enzo Matsumiya (2):
smb: client: fix UAF in async decryption
cifs: print TIDs as hex
Eric Biggers (2):
ext4: reject casefold inode flag without casefold feature
nfs: add missing selections of CONFIG_CRC32
Eric Dumazet (1):
net: defer final 'struct net' free in netns dismantle
Fabien Parent (1):
pwm: mediatek: Always use bus clock
Fedor Pchelkin (1):
ntb: use 64-bit arithmetic for the MSI doorbell mask
Felix Huettner (1):
net: openvswitch: fix race on port output
Florian Westphal (1):
nft_set_pipapo: fix incorrect avx2 match of 5th field octet
Frode Isaksen (1):
usb: dwc3: gadget: check that event count does not exceed event buffer length
Gabriele Paoloni (1):
tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER
Gang Yan (1):
mptcp: fix NULL pointer in can_accept_new_subflow
Gavrilov Ilia (1):
wifi: mac80211: fix integer overflow in hwmp_route_info_get()
Geert Uytterhoeven (1):
pwm: rcar: Simplify multiplication/shift logic
Greg Kroah-Hartman (1):
Linux 5.10.237
Gregory CLEMENT (1):
MIPS: cm: Detect CM quirks from device tree
Guixin Liu (1):
scsi: ufs: bsg: Set bsg_queue to NULL after removal
Halil Pasic (1):
virtio_console: fix missing byte order handling for cols and rows
Hannes Reinecke (4):
ata: sata_sx4: Drop pointless VPRINTK() calls and convert the remaining ones
nvme: requeue namespace scan on missed AENs
nvme: re-read ANA log page after ns scan completes
nvme: fixup scan failure for non-ANA multipath controllers
Hans de Goede (1):
drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler()
Haoxiang Li (1):
mcb: fix a double free bug in chameleon_parse_gdd()
Heiko Stuebner (1):
clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
Henry Martin (2):
ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
Herbert Xu (2):
crypto: caam/qi - Fix drv_ctx refcount bug
crypto: null - Use spin lock instead of mutex
Hersen Wu (1):
drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
Herve Codina (1):
backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
Hou Tao (1):
bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
Huacai Chen (1):
USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
Ian Abbott (1):
comedi: jr3_pci: Fix synchronous deletion of timer
Icenowy Zheng (1):
wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
Igor Pylypiv (1):
scsi: pm80xx: Set phy_attached to zero when device is gone
Ilya Maximets (2):
net: openvswitch: fix nested key length validation in the set() action
openvswitch: fix lockup on tx to unregistering netdev with carrier
Jakub Kicinski (1):
net: tls: explicitly disallow disconnect
Jan Beulich (1):
xenfs/xensyms: respect hypervisor's "next" indication
Jan Kara (1):
jbd2: remove wrong sb->s_sequence check
Jann Horn (1):
ext4: don't treat fhandle lookup of ea_inode as FS corruption
Jason Xing (1):
page_pool: avoid infinite loop to schedule delayed worker
Jean-Marc Eurin (1):
ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
Jeff Layton (1):
nfs: move nfs_fhandle_hash to common include file
Jiasheng Jiang (1):
mtd: Replace kcalloc() with devm_kcalloc()
Johannes Berg (1):
Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
Johannes Kimmel (1):
btrfs: correctly escape subvol in btrfs_show_options()
Jonas Gorski (1):
net: b53: enable BPDU reception for management port
Jonathan Cameron (1):
iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
Josh Poimboeuf (5):
pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler()
objtool: Stop UNRET validation on UD2
x86/bugs: Use SBPB in write_ibpb() if applicable
x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
Kai Mäkisara (1):
scsi: st: Fix array overflow in st_setup()
Kai-Heng Feng (1):
PCI: Coalesce host bridge contiguous apertures
Kaixin Wang (1):
HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition
Kamal Dasu (1):
mtd: rawnand: brcmnand: fix PM resume warning
Kan Liang (2):
perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX
Kang Yang (1):
wifi: ath10k: avoid NULL pointer error during sdio remove
Karina Yankevich (1):
media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
Kees Cook (1):
xen/mcelog: Add __nonstring annotations for unterminated strings
Kirill A. Shutemov (1):
mm: fix apply_to_existing_page_range()
Krzysztof Kozlowski (5):
gpio: zynq: Fix wakeup source leaks on device unbind
soc: samsung: exynos-chipid: initialize later - with arch_initcall
soc: samsung: exynos-chipid: convert to driver and merge exynos-asv
soc: samsung: exynos-chipid: avoid soc_device_to_device()
soc: samsung: exynos-chipid: correct helpers __init annotation
Kunihiko Hayashi (3):
misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
Kuniyuki Iwashima (1):
tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
Kunwu Chan (1):
pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
Lee Jones (1):
drm/amd/amdgpu/amdgpu_vram_mgr: Add missing descriptions for 'dev' and 'dir'
Leonid Arapov (1):
fbdev: omapfb: Add 'plane' value check
Li Lingfeng (1):
nfsd: decrease sc_count directly if fail to queue dl_recall
Li Nan (1):
blk-iocost: do not WARN if iocg was already offlined
Luca Ceresoli (1):
drm/bridge: panel: forbid initializing a panel with unknown connector type
Luiz Augusto von Dentz (1):
Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
Ma Ke (2):
PCI: Fix reference leak in pci_alloc_child_bus()
PCI: Fix reference leak in pci_register_host_bridge()
Manjunatha Venkatesh (1):
i3c: Add NULL pointer check in i3c_master_queue_ibi()
Marek Behún (3):
net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
net: dsa: mv88e6xxx: fix VTU methods for 6320 family
crypto: atmel-sha204a - Set hwrng quality to lowest possible
Mark Brown (1):
selftests/mm: generate a temporary mountpoint for cgroup filesystem
Mark Rutland (1):
perf: arm_pmu: Don't disable counter in armpmu_add()
Mathieu Desnoyers (1):
mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
Matthew Auld (1):
drm/amdgpu/dma_buf: fix page_link check
Matthew Majewski (1):
media: vim2m: print device name after registering device
Matthieu Baerts (NGI0) (2):
mptcp: only inc MPJoinAckHMacFailure for HMAC failures
mptcp: sockopt: fix getting IPV6_V6ONLY
Max Grobecker (1):
x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine
Maxim Mikityanskiy (1):
ALSA: hda: intel: Fix Optimus when GPU has no sound
Meir Elisha (1):
md/raid1: Add check for missing source disk in process_checks()
Miao Li (2):
usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
Miaohe Lin (1):
kernel/resource: fix kfree() of bootmem memory again
Miaoqian Lin (2):
scsi: iscsi: Fix missing scsi_host_put() in error path
phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
Michael Ehrenreich (1):
USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
Mikulas Patocka (1):
dm-integrity: set ti->error on memory allocation failure
Ming Lei (1):
selftests: ublk: fix test_stripe_04
Ming-Hung Tsai (1):
dm cache: fix flushing uninitialized delayed_work on cache_ctr error
Miquel Raynal (1):
spi: cadence-qspi: Fix probe on AM62A LP SK
Miroslav Franc (1):
s390/dasd: fix double module refcount decrement
Murad Masimov (2):
media: streamzap: prevent processing IR data on URB failure
media: streamzap: fix race between device disconnection and urb callback
Myrrh Periwinkle (1):
x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions()
Nathan Chancellor (2):
riscv: Avoid fortify warning in syscall_get_arguments()
kbuild: Add '-fno-builtin-wcslen'
Nathan Lynch (1):
powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
Nikita Zhandarovich (1):
drm/repaper: fix integer overflows in repeat functions
Niklas Cassel (1):
ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
Niklas Söderlund (1):
media: i2c: adv748x: Fix test pattern selection mask
Ojaswin Mujoo (2):
ext4: protect ext4_release_dquot against freezing
ext4: make block validity check resistent to sb bh corruption
Oleg Nesterov (2):
fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats
sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
Oliver Neukum (2):
USB: storage: quirk for ADATA Portable HDD CH94
USB: VLI disk crashes if LPM is used
Pali Rohár (1):
PCI: Assign PCI domain IDs by ida_alloc()
Paulo Alcantara (5):
smb: client: fix potential UAF in cifs_debug_files_proc_show()
smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
smb: client: fix potential deadlock when releasing mids
smb: client: fix potential UAF in cifs_stats_proc_show()
smb: client: fix NULL ptr deref in crypto_aead_setkey()
Pei Li (1):
jfs: Fix shift-out-of-bounds in dbDiscardAG
Philip Yang (1):
drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
Qingfang Deng (1):
net: phy: leds: fix memory leak
Qiuxu Zhuo (1):
selftests/mincore: Allow read-ahead pages to reach the end of the file
Rafael J. Wysocki (2):
cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
cpufreq: Reference count policy in cpufreq_update_limits()
Ralph Siemsen (1):
usb: cdns3: Fix deadlock when using NCM gadget
Ramesh Errabolu (1):
drm/amdgpu: Remove amdgpu_device arg from free_sgt api (v2)
Rand Deeb (2):
fs/jfs: cast inactags to s64 to prevent potential overflow
fs/jfs: Prevent integer overflow in AG size calculation
Remi Pommarel (2):
wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
wifi: mac80211: Purge vif txq in ieee80211_do_stop()
Ricard Wanderlof (1):
ALSA: usb-audio: Fix CME quirk for UF series keyboards
Ricardo Cañuelo Navarro (1):
sctp: detect and prevent references to a freed transport in sendmsg
Rob Herring (1):
PCI: Fix use-after-free in pci_bus_release_domain_nr()
Rolf Eike Beer (1):
drm/sti: remove duplicate object names
Ryan Roberts (1):
sparc/mm: disable preemption in lazy mmu mode
Ryo Takakura (1):
serial: sifive: lock port in startup()/shutdown() callbacks
Sakari Ailus (2):
media: i2c: ov7251: Set enable GPIO low in probe
media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
Sam Protsenko (1):
soc: samsung: exynos-chipid: Pass revision reg offsets
Sean Christopherson (3):
iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
KVM: SVM: Allocate IR data using atomic allocation
KVM: x86: Reset IRTE to host control if *new* route isn't postable
Sean Young (4):
media: streamzap: remove unnecessary ir_raw_event_reset and handle
media: streamzap: no need for usb pid/vid in device name
media: streamzap: less chatter
media: streamzap: remove unused struct members
Sebastian Andrzej Siewior (1):
xdp: Reset bpf_redirect_info before running a xdp's BPF prog.
Sergiu Cuciurean (1):
iio: adc: ad7768-1: Fix conversion result sign
Shay Drory (1):
RDMA/core: Silence oversized kvmalloc() warning
Si-Wei Liu (1):
vdpa/mlx5: Fix oversized null mkey longer than 32bit
Srinivas Pandruvada (1):
platform/x86: ISST: Correct command storage data length
Srinivasan Shanmugam (1):
drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
Stanimir Varbanov (10):
PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
media: venus: venc: Init the session only once in queue_setup
media: venus: Limit HFI sessions to the maximum supported
media: venus: hfi: Correct session init return error
media: venus: pm_helpers: Check instance state when calculate instance frequency
media: venus: Create hfi platform and move vpp/vsp there
media: venus: Rename venus_caps to hfi_plat_caps
media: venus: hfi_plat: Add codecs and capabilities ops
media: venus: Get codecs and capabilities from hfi platform
media: venus: hfi_parser: Check for instance after hfi platform get
Stanislav Fomichev (1):
net: vlan: don't propagate flags on open
Stephan Gerhold (1):
pinctrl: qcom: Clear latched interrupt status when changing IRQ type
Steven Rostedt (1):
tracing: Fix filter string testing
Steven Rostedt (Google) (1):
tracing: Allow synthetic events to pass around stacktraces
T Pratham (1):
lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
Thadeu Lima de Souza Cascardo (1):
i2c: cros-ec-tunnel: defer probe if parent EC is not present
Thomas Bogendoerfer (1):
MIPS: cm: Fix warning if MIPS_CM is disabled
Thomas Weißschuh (1):
KVM: s390: Don't use %pK through tracepoints
Thorsten Leemhuis (1):
module: sign with sha512 instead of sha1 by default
Tom Lendacky (1):
crypto: ccp - Fix check for the primary ASP device
Tomasz Pakuła (3):
HID: pidff: Convert infinite length from Linux API to PID standard
HID: pidff: Do not send effect envelope if it's empty
HID: pidff: Fix null pointer dereference in pidff_find_fields
Trevor Woerner (1):
thermal/drivers/rockchip: Add missing rk3328 mapping entry
Trond Myklebust (1):
umount: Allow superblock owners to force umount
Tung Nguyen (2):
tipc: fix memory leak in tipc_link_xmit
tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
Tuo Li (1):
scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
Uwe Kleine-König (2):
pwm: rcar: Improve register calculation
pwm: fsl-ftm: Handle clk_get_rate() returning 0
Vasiliy Kovalev (1):
hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
Vikash Garodia (4):
media: venus: hfi: add a check to handle OOB in sfr region
media: venus: hfi: add check to handle incorrect queue size
media: venus: hfi_parser: add check to avoid out of bound access
media: venus: hfi_parser: refactor hfi packet parsing logic
Vinicius Costa Gomes (1):
dmaengine: dmatest: Fix dmatest waiting less when interrupted
Vlad Buslov (1):
net/mlx5e: Fix use-after-free of encap entry in neigh update handler
WangYuli (6):
riscv: KGDB: Do not inline arch_kgdb_breakpoint()
riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break
nvmet-fc: Remove unused functions
MIPS: dec: Declare which_prom() as static
MIPS: cevt-ds1287: Add missing ds1287.h include
MIPS: ds1287: Match ds1287_set_base_clock() function types
Wentao Liang (3):
ata: sata_sx4: Add error handling in pdc20621_i2c_read()
mtd: inftlcore: Add error check for inftl_read_oob()
mtd: rawnand: Add status chack in r852_ready()
Willem de Bruijn (1):
bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
Xiangsheng Hou (1):
virtiofs: add filesystem context source name check
Xiaogang Chen (1):
udmabuf: fix a buf size overflow issue during udmabuf creation
Xiaxi Shen (1):
ext4: fix timer use-after-free on failed mount
Yu Kuai (1):
blk-cgroup: support to track if policy is online
Yu-Chun Lin (1):
parisc: PDT: Fix missing prototype warning
Yuan Can (1):
media: siano: Fix error handling in smsdvb_module_init()
Yue Haibing (1):
RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
Zhang Xiaoxu (1):
cifs: Fix UAF in cifs_demultiplex_thread()
Zhongqiu Han (1):
pm: cpupower: bench: Prevent NULL dereference on malloc failure
Zijun Hu (3):
of/irq: Fix device node refcount leakages in of_irq_count()
of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
of/irq: Fix device node refcount leakages in of_irq_init()
zhoumin (1):
ftrace: Add cond_resched() to ftrace_graph_set_hash()
4 months, 3 weeks
- 1
- 1
Linux 5.4.293
by Greg Kroah-Hartman
I'm announcing the release of the 5.4.293 kernel.
All users of the 5.4 kernel series must upgrade.
The updated 5.4.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.4.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Makefile | 5
arch/arm64/boot/dts/mediatek/mt8173.dtsi | 6
arch/arm64/include/asm/cputype.h | 2
arch/mips/dec/prom/init.c | 2
arch/mips/include/asm/ds1287.h | 2
arch/mips/include/asm/mips-cm.h | 22 ++
arch/mips/kernel/cevt-ds1287.c | 1
arch/mips/kernel/mips-cm.c | 14 +
arch/parisc/kernel/pdt.c | 2
arch/powerpc/kernel/Makefile | 1
arch/riscv/include/asm/syscall.h | 7
arch/s390/kvm/trace-s390.h | 4
arch/sparc/mm/tlb.c | 5
arch/x86/events/intel/ds.c | 8
arch/x86/events/intel/uncore_snbep.c | 16 -
arch/x86/kernel/cpu/amd.c | 2
arch/x86/kernel/cpu/bugs.c | 8
arch/x86/kernel/e820.c | 17 -
crypto/crypto_null.c | 39 ++-
drivers/acpi/pptt.c | 4
drivers/ata/ahci.c | 2
drivers/ata/libata-eh.c | 11 -
drivers/ata/pata_pxa.c | 6
drivers/ata/sata_sx4.c | 118 ++++--------
drivers/bluetooth/btrtl.c | 2
drivers/bluetooth/hci_ldisc.c | 19 +
drivers/bluetooth/hci_uart.h | 1
drivers/char/virtio_console.c | 7
drivers/clk/clk.c | 4
drivers/cpufreq/cpufreq.c | 8
drivers/cpufreq/scpi-cpufreq.c | 13 +
drivers/crypto/atmel-sha204a.c | 7
drivers/crypto/ccp/sp-pci.c | 15 -
drivers/dma-buf/udmabuf.c | 2
drivers/dma/dmatest.c | 6
drivers/gpio/gpio-zynq.c | 1
drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 10 +
drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 2
drivers/gpu/drm/amd/powerplay/hwmgr/vega20_thermal.c | 2
drivers/gpu/drm/drm_atomic_helper.c | 2
drivers/gpu/drm/drm_panel_orientation_quirks.c | 10 -
drivers/gpu/drm/mediatek/mtk_dpi.c | 9
drivers/gpu/drm/nouveau/nouveau_bo.c | 3
drivers/gpu/drm/nouveau/nouveau_gem.c | 3
drivers/gpu/drm/sti/Makefile | 2
drivers/gpu/drm/tiny/repaper.c | 4
drivers/hid/usbhid/hid-pidff.c | 60 ++++--
drivers/hsi/clients/ssi_protocol.c | 1
drivers/i2c/busses/i2c-cros-ec-tunnel.c | 3
drivers/i3c/master.c | 3
drivers/iio/adc/ad7768-1.c | 5
drivers/infiniband/hw/qib/qib_fs.c | 1
drivers/infiniband/hw/usnic/usnic_ib_main.c | 14 -
drivers/infiniband/ulp/srpt/ib_srpt.c | 8
drivers/mcb/mcb-parse.c | 2
drivers/md/dm-integrity.c | 3
drivers/md/raid1.c | 26 +-
drivers/media/common/siano/smsdvb-main.c | 2
drivers/media/i2c/adv748x/adv748x.h | 2
drivers/media/i2c/ov7251.c | 4
drivers/media/platform/qcom/venus/hfi_parser.c | 2
drivers/media/platform/qcom/venus/hfi_venus.c | 18 +
drivers/media/platform/vim2m.c | 6
drivers/media/rc/streamzap.c | 68 +++---
drivers/media/v4l2-core/v4l2-dv-timings.c | 4
drivers/misc/pci_endpoint_test.c | 36 ++-
drivers/mmc/host/cqhci.c | 2
drivers/mtd/inftlcore.c | 9
drivers/mtd/nand/raw/brcmnand/brcmnand.c | 2
drivers/mtd/nand/raw/r852.c | 3
drivers/net/dsa/b53/b53_common.c | 10 +
drivers/net/dsa/mv88e6xxx/chip.c | 25 ++
drivers/net/phy/phy_led_triggers.c | 23 +-
drivers/net/ppp/ppp_synctty.c | 5
drivers/net/virtio_net.c | 22 +-
drivers/net/wireless/atmel/at76c50x-usb.c | 2
drivers/net/wireless/mediatek/mt76/mt76x2/usb.c | 1
drivers/net/wireless/ti/wl1251/tx.c | 4
drivers/ntb/hw/idt/ntb_hw_idt.c | 18 -
drivers/ntb/ntb_transport.c | 2
drivers/nvme/target/fc.c | 14 -
drivers/of/irq.c | 13 +
drivers/pci/probe.c | 5
drivers/perf/arm_pmu.c | 8
drivers/platform/x86/asus-laptop.c | 9
drivers/platform/x86/intel_speed_select_if/isst_if_common.c | 2
drivers/pwm/pwm-fsl-ftm.c | 6
drivers/pwm/pwm-mediatek.c | 20 +-
drivers/scsi/pm8001/pm8001_sas.c | 1
drivers/scsi/scsi_transport_iscsi.c | 7
drivers/scsi/st.c | 2
drivers/staging/comedi/drivers/jr3_pci.c | 15 +
drivers/thermal/rockchip_thermal.c | 1
drivers/tty/serial/sifive.c | 6
drivers/usb/cdns3/gadget.c | 2
drivers/usb/core/quirks.c | 9
drivers/usb/dwc3/core.c | 11 -
drivers/usb/dwc3/gadget.c | 6
drivers/usb/gadget/udc/aspeed-vhub/dev.c | 3
drivers/usb/host/max3421-hcd.c | 7
drivers/usb/host/ohci-pci.c | 23 ++
drivers/usb/serial/ftdi_sio.c | 2
drivers/usb/serial/ftdi_sio_ids.h | 5
drivers/usb/serial/option.c | 3
drivers/usb/serial/usb-serial-simple.c | 7
drivers/usb/storage/unusual_uas.h | 7
drivers/video/fbdev/omap2/omapfb/dss/dispc.c | 6
drivers/xen/xenfs/xensyms.c | 4
fs/Kconfig | 1
fs/btrfs/super.c | 3
fs/ext4/dir.c | 12 -
fs/ext4/inode.c | 69 +++++--
fs/ext4/namei.c | 2
fs/ext4/super.c | 61 +++---
fs/ext4/xattr.c | 11 +
fs/fuse/virtio_fs.c | 3
fs/hfs/bnode.c | 6
fs/hfsplus/bnode.c | 6
fs/isofs/export.c | 2
fs/jbd2/journal.c | 1
fs/jfs/jfs_dmap.c | 10 -
fs/jfs/jfs_imap.c | 2
fs/nfs/Kconfig | 2
fs/nfs/internal.h | 22 --
fs/nfs/nfs4session.h | 4
fs/nfsd/Kconfig | 1
fs/nfsd/nfsfh.h | 12 -
include/linux/backing-dev.h | 1
include/linux/nfs.h | 13 +
include/linux/pci.h | 4
include/net/sctp/structs.h | 3
include/uapi/linux/kfd_ioctl.h | 2
include/uapi/linux/pcitest.h | 3
include/xen/interface/xen-mca.h | 2
init/Kconfig | 3
kernel/locking/lockdep.c | 3
kernel/trace/ftrace.c | 1
kernel/trace/trace_events.c | 4
lib/sg_split.c | 2
mm/vmscan.c | 2
net/8021q/vlan_dev.c | 31 ---
net/bluetooth/hci_event.c | 5
net/core/dev.c | 1
net/core/filter.c | 80 ++++----
net/core/page_pool.c | 8
net/ipv4/inet_connection_sock.c | 19 +
net/mac80211/iface.c | 3
net/mac80211/mesh_hwmp.c | 14 +
net/openvswitch/actions.c | 4
net/openvswitch/flow_netlink.c | 3
net/sched/sch_hfsc.c | 23 +-
net/sctp/socket.c | 22 +-
net/sctp/transport.c | 2
net/tipc/link.c | 1
net/tipc/monitor.c | 3
sound/pci/hda/hda_intel.c | 15 +
sound/usb/midi.c | 80 +++++++-
tools/power/cpupower/bench/parse.c | 4
tools/testing/selftests/ublk/test_stripe_04.sh | 24 ++
159 files changed, 1106 insertions(+), 545 deletions(-)
Abdun Nihaal (2):
wifi: at76c50x: fix use after free access in at76_disconnect
wifi: wl1251: fix memory leak in wl1251_tx_work
Abhinav Kumar (1):
drm: allow encoder mode_set even when connectors change for crtc
Acs, Jakub (1):
ext4: fix OOB read when checking dotdot dir
Adam Xue (1):
USB: serial: option: add Sierra Wireless EM9291
Al Viro (1):
qibfs: fix _another_ leak
Alexander Stein (1):
usb: host: max3421-hcd: Add missing spi_device_id table
Andreas Gruenbacher (1):
writeback: fix false warning in inode_to_wb()
Andrew Wyatt (2):
drm: panel-orientation-quirks: Add support for AYANEO 2S
drm: panel-orientation-quirks: Add new quirk for GPD Win 2
AngeloGioacchino Del Regno (1):
drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
Arnaud Lecomte (1):
net: ppp: Add bound checking for skb data on ppp_sync_txmung
Arnd Bergmann (1):
ntb: reduce stack usage in idt_scan_mws
Arseniy Krasnov (2):
Bluetooth: hci_uart: fix race during initialization
Bluetooth: hci_uart: Fix another race during initialization
Artem Sadovnikov (1):
ext4: fix off-by-one error in do_split
Bart Van Assche (1):
RDMA/srpt: Support specifying the srpt_service_guid parameter
Ben Dooks (1):
bpf: Add endian modifiers to fix endian warnings
Bhupesh (1):
ext4: ignore xattrs past end
Bjorn Helgaas (1):
PCI: Rename PCI_IRQ_LEGACY to PCI_IRQ_INTX
Boqun Feng (1):
locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
Chen-Yu Tsai (1):
arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
Chengguang Xu (1):
ext4: code cleanup for ext4_statfs_project()
Chenyuan Yang (1):
usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
Chris Bainbridge (1):
drm/nouveau: prime: fix ttm_bo_delayed_delete oops
Chuck Lever (1):
NFSD: Constify @fh argument of knfsd_fh_hash()
Cong Wang (2):
net_sched: hfsc: Fix a UAF vulnerability in class handling
net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
Craig Hesling (1):
USB: serial: simple: add OWON HDS200 series oscilloscope support
Damien Le Moal (1):
misc: pci_endpoint_test: Use INTX instead of LEGACY
Dan Carpenter (1):
Bluetooth: btrtl: Prevent potential NULL dereference
Daniel Golle (1):
pwm: mediatek: always use bus clock for PWM on MT7622
Daniel Kral (1):
ahci: add PCI ID for Marvell 88SE9215 SATA Controller
Dapeng Mi (1):
perf/x86/intel: Allow to update user space GPRs from PEBS records
David Yat Sin (1):
drm/amdkfd: clamp queue size to minimum
Denis Arefev (2):
asus-laptop: Fix an uninitialized variable
drm/amd/pm: Prevent division by zero
Douglas Anderson (1):
arm64: cputype: Add MIDR_CORTEX_A76AE
Edward Adam Davis (3):
jfs: Prevent copying of nlink with value 0 from disk inode
jfs: add sanity check for agwidth in dbMount
isofs: Prevent the use of too small fid
Eric Biggers (2):
ext4: reject casefold inode flag without casefold feature
nfs: add missing selections of CONFIG_CRC32
Fabien Parent (1):
pwm: mediatek: Always use bus clock
Fedor Pchelkin (1):
ntb: use 64-bit arithmetic for the MSI doorbell mask
Felix Huettner (1):
net: openvswitch: fix race on port output
Frode Isaksen (1):
usb: dwc3: gadget: check that event count does not exceed event buffer length
Gabriele Paoloni (1):
tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER
Gavrilov Ilia (1):
wifi: mac80211: fix integer overflow in hwmp_route_info_get()
Greg Kroah-Hartman (1):
Linux 5.4.293
Gregory CLEMENT (1):
MIPS: cm: Detect CM quirks from device tree
Halil Pasic (1):
virtio_console: fix missing byte order handling for cols and rows
Hannes Reinecke (1):
ata: sata_sx4: Drop pointless VPRINTK() calls and convert the remaining ones
Haoxiang Li (1):
mcb: fix a double free bug in chameleon_parse_gdd()
Heiko Stuebner (1):
clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
Henry Martin (2):
ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
Herbert Xu (1):
crypto: null - Use spin lock instead of mutex
Huacai Chen (1):
USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
Ian Abbott (1):
comedi: jr3_pci: Fix synchronous deletion of timer
Icenowy Zheng (1):
wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
Igor Pylypiv (1):
scsi: pm80xx: Set phy_attached to zero when device is gone
Ilya Maximets (2):
net: openvswitch: fix nested key length validation in the set() action
openvswitch: fix lockup on tx to unregistering netdev with carrier
Jan Beulich (1):
xenfs/xensyms: respect hypervisor's "next" indication
Jan Kara (2):
jbd2: remove wrong sb->s_sequence check
ext4: simplify checking quota limits in ext4_statfs()
Jann Horn (1):
ext4: don't treat fhandle lookup of ea_inode as FS corruption
Jason Xing (1):
page_pool: avoid infinite loop to schedule delayed worker
Jean-Marc Eurin (1):
ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
Jeff Layton (1):
nfs: move nfs_fhandle_hash to common include file
Johannes Berg (1):
Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
Johannes Kimmel (1):
btrfs: correctly escape subvol in btrfs_show_options()
Jonas Gorski (1):
net: b53: enable BPDU reception for management port
Jonathan Cameron (1):
iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
Josh Poimboeuf (2):
pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
Kai Mäkisara (1):
scsi: st: Fix array overflow in st_setup()
Kaixin Wang (1):
HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition
Kamal Dasu (1):
mtd: rawnand: brcmnand: fix PM resume warning
Kan Liang (1):
perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
Karina Yankevich (1):
media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
Kees Cook (1):
xen/mcelog: Add __nonstring annotations for unterminated strings
Krzysztof Kozlowski (1):
gpio: zynq: Fix wakeup source leaks on device unbind
Kunihiko Hayashi (3):
misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
Kuniyuki Iwashima (1):
tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
Leonid Arapov (1):
fbdev: omapfb: Add 'plane' value check
Luiz Augusto von Dentz (1):
Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
Ma Ke (1):
PCI: Fix reference leak in pci_alloc_child_bus()
Manjunatha Venkatesh (1):
i3c: Add NULL pointer check in i3c_master_queue_ibi()
Marek Behún (3):
net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
net: dsa: mv88e6xxx: fix VTU methods for 6320 family
crypto: atmel-sha204a - Set hwrng quality to lowest possible
Mark Rutland (1):
perf: arm_pmu: Don't disable counter in armpmu_add()
Martin Kepplinger (1):
usb: dwc3: support continuous runtime PM with dual role
Mathieu Desnoyers (1):
mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
Matthew Majewski (1):
media: vim2m: print device name after registering device
Max Grobecker (1):
x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine
Maxim Mikityanskiy (1):
ALSA: hda: intel: Fix Optimus when GPU has no sound
Meir Elisha (1):
md/raid1: Add check for missing source disk in process_checks()
Miao Li (2):
usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
Miaoqian Lin (1):
scsi: iscsi: Fix missing scsi_host_put() in error path
Michael Ehrenreich (1):
USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
Mikulas Patocka (1):
dm-integrity: set ti->error on memory allocation failure
Ming Lei (1):
selftests: ublk: fix test_stripe_04
Murad Masimov (1):
media: streamzap: prevent processing IR data on URB failure
Myrrh Periwinkle (1):
x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions()
Nathan Chancellor (3):
riscv: Avoid fortify warning in syscall_get_arguments()
kbuild: Add '-fno-builtin-wcslen'
powerpc/prom_init: Use -ffreestanding to avoid a reference to bcmp
Nikita Zhandarovich (1):
drm/repaper: fix integer overflows in repeat functions
Niklas Cassel (1):
ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
Niklas Söderlund (1):
media: i2c: adv748x: Fix test pattern selection mask
Ojaswin Mujoo (1):
ext4: protect ext4_release_dquot against freezing
Oleg Nesterov (1):
sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
Oliver Neukum (2):
USB: storage: quirk for ADATA Portable HDD CH94
USB: VLI disk crashes if LPM is used
Philip Yang (1):
drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
Qingfang Deng (1):
net: phy: leds: fix memory leak
Rafael J. Wysocki (1):
cpufreq: Reference count policy in cpufreq_update_limits()
Ralph Siemsen (1):
usb: cdns3: Fix deadlock when using NCM gadget
Rand Deeb (2):
fs/jfs: cast inactags to s64 to prevent potential overflow
fs/jfs: Prevent integer overflow in AG size calculation
Remi Pommarel (2):
wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
wifi: mac80211: Purge vif txq in ieee80211_do_stop()
Ricard Wanderlof (1):
ALSA: usb-audio: Fix CME quirk for UF series keyboards
Ricardo Cañuelo Navarro (1):
sctp: detect and prevent references to a freed transport in sendmsg
Rolf Eike Beer (1):
drm/sti: remove duplicate object names
Ryan Roberts (1):
sparc/mm: disable preemption in lazy mmu mode
Ryo Takakura (1):
serial: sifive: lock port in startup()/shutdown() callbacks
Sakari Ailus (2):
media: i2c: ov7251: Set enable GPIO low in probe
media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
Sergiu Cuciurean (1):
iio: adc: ad7768-1: Fix conversion result sign
Seunghwan Baek (1):
mmc: cqhci: Fix checking of CQHCI_HALT state
Srinivas Pandruvada (1):
platform/x86: ISST: Correct command storage data length
Stanislav Fomichev (1):
net: vlan: don't propagate flags on open
T Pratham (1):
lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
Thadeu Lima de Souza Cascardo (1):
i2c: cros-ec-tunnel: defer probe if parent EC is not present
Theodore Ts'o (2):
ext4: don't over-report free space or inodes in statvfs
ext4: optimize __ext4_check_dir_entry()
Thomas Bogendoerfer (1):
MIPS: cm: Fix warning if MIPS_CM is disabled
Thomas Weißschuh (1):
KVM: s390: Don't use %pK through tracepoints
Thorsten Leemhuis (1):
module: sign with sha512 instead of sha1 by default
Tom Lendacky (1):
crypto: ccp - Fix check for the primary ASP device
Tomasz Pakuła (3):
HID: pidff: Convert infinite length from Linux API to PID standard
HID: pidff: Do not send effect envelope if it's empty
HID: pidff: Fix null pointer dereference in pidff_find_fields
Trevor Woerner (1):
thermal/drivers/rockchip: Add missing rk3328 mapping entry
Tung Nguyen (2):
tipc: fix memory leak in tipc_link_xmit
tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
Uwe Kleine-König (1):
pwm: fsl-ftm: Handle clk_get_rate() returning 0
Vasiliy Kovalev (1):
hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
Vikash Garodia (3):
media: venus: hfi: add a check to handle OOB in sfr region
media: venus: hfi: add check to handle incorrect queue size
media: venus: hfi_parser: add check to avoid out of bound access
Vinicius Costa Gomes (1):
dmaengine: dmatest: Fix dmatest waiting less when interrupted
WangYuli (4):
nvmet-fc: Remove unused functions
MIPS: dec: Declare which_prom() as static
MIPS: cevt-ds1287: Add missing ds1287.h include
MIPS: ds1287: Match ds1287_set_base_clock() function types
Wentao Liang (3):
ata: sata_sx4: Add error handling in pdc20621_i2c_read()
mtd: inftlcore: Add error check for inftl_read_oob()
mtd: rawnand: Add status chack in r852_ready()
Willem de Bruijn (1):
bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
Xiangsheng Hou (1):
virtiofs: add filesystem context source name check
Xiaogang Chen (1):
udmabuf: fix a buf size overflow issue during udmabuf creation
Xie Yongji (1):
virtio-net: Add validation for used length
Yu-Chun Lin (1):
parisc: PDT: Fix missing prototype warning
Yuan Can (1):
media: siano: Fix error handling in smsdvb_module_init()
Yue Haibing (1):
RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
Zhongqiu Han (1):
pm: cpupower: bench: Prevent NULL dereference on malloc failure
Zijun Hu (3):
of/irq: Fix device node refcount leakages in of_irq_count()
of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
of/irq: Fix device node refcount leakages in of_irq_init()
zhoumin (1):
ftrace: Add cond_resched() to ftrace_graph_set_hash()
4 months, 3 weeks
- 1
- 1
[PATCH] iio: accel: fxls8962af: Fix temperature calculation
by Sean Nyekjaer
According to spec temperature should be returned in milli degrees Celsius.
Add in_temp_scale to calculate from Celsius to milli Celsius.
Fixes: a3e0b51884ee ("iio: accel: add support for FXLS8962AF/FXLS8964AF accelerometers")
Cc: stable(a)vger.kernel.org
Signed-off-by: Sean Nyekjaer <sean(a)geanix.com>
---
drivers/iio/accel/fxls8962af-core.c | 17 ++++++++++++++---
1 file changed, 14 insertions(+), 3 deletions(-)
diff --git a/drivers/iio/accel/fxls8962af-core.c b/drivers/iio/accel/fxls8962af-core.c
index bf1d3923a181798a1c884ee08b62d86ab5aed26f..30f08160eecdd1f9574c86baeeb17cc0ef1e7c60 100644
--- a/drivers/iio/accel/fxls8962af-core.c
+++ b/drivers/iio/accel/fxls8962af-core.c
@@ -133,7 +133,9 @@
#define FXLS8967AF_DEVICE_ID 0x87
/* Raw temp channel offset */
-#define FXLS8962AF_TEMP_CENTER_VAL 25
+#define FXLS8962AF_TEMP_CENTER_VAL 25000
+/* Raw temp channel scale */
+#define FXLS8962AF_TEMP_SCALE 1000
#define FXLS8962AF_AUTO_SUSPEND_DELAY_MS 2000
@@ -439,8 +441,16 @@ static int fxls8962af_read_raw(struct iio_dev *indio_dev,
*val = FXLS8962AF_TEMP_CENTER_VAL;
return IIO_VAL_INT;
case IIO_CHAN_INFO_SCALE:
- *val = 0;
- return fxls8962af_read_full_scale(data, val2);
+ switch (chan->type) {
+ case IIO_TEMP:
+ *val = FXLS8962AF_TEMP_SCALE;
+ return IIO_VAL_INT;
+ case IIO_ACCEL:
+ *val = 0;
+ return fxls8962af_read_full_scale(data, val2);
+ default:
+ return -EINVAL;
+ }
case IIO_CHAN_INFO_SAMP_FREQ:
return fxls8962af_read_samp_freq(data, val, val2);
default:
@@ -736,6 +746,7 @@ static const struct iio_event_spec fxls8962af_event[] = {
.type = IIO_TEMP, \
.address = FXLS8962AF_TEMP_OUT, \
.info_mask_separate = BIT(IIO_CHAN_INFO_RAW) | \
+ BIT(IIO_CHAN_INFO_SCALE) | \
BIT(IIO_CHAN_INFO_OFFSET),\
.scan_index = -1, \
.scan_type = { \
---
base-commit: 609bc31eca06c7408e6860d8b46311ebe45c1fef
change-id: 20250501-fxls-307ef3d6d065
Best regards,
--
Sean Nyekjaer <sean(a)geanix.com>
4 months, 3 weeks
- 2
- 2
Please backport 980a573621ea to 6.12, 6.14
by Dionna Amalie Glaze
980a573621ea ("tpm: Make chip->{status,cancel,req_canceled} opt")
This is a dependent commit for the series of patches to add the AMD
SEV-SNP SVSM vTPM device driver. Kernel 6.11 added SVSM support, but
not support for the critical component for boot integrity that follows
the SEV-SNP threat model. That series
https://lore.kernel.org/all/20250410135118.133240-1-sgarzare@redhat.com/
is applied at tip but is not yet in the mainline.
I have confirmed that this patch applies cleanly. Stefano's patch
series needs a minor tweak to the first patch due to the changed
surrounding function declarations in arch/x86/include/asm/sev.h
https://github.com/deeglaze/amdese-linux/commits/vtpm612/
I've independently tested the patches.
--
-Dionna Glaze, PhD, CISSP, CCSP (she/her)
4 months, 3 weeks
- 2
- 3
FAILED: patch "[PATCH] KVM: x86: Load DR6 with guest value only before entering" failed to apply to 5.15-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.15-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.15.y
git checkout FETCH_HEAD
git cherry-pick -x c2fee09fc167c74a64adb08656cb993ea475197e
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025021815-protract-greasily-cdea@gregkh' --subject-prefix 'PATCH 5.15.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From c2fee09fc167c74a64adb08656cb993ea475197e Mon Sep 17 00:00:00 2001
From: Sean Christopherson <seanjc(a)google.com>
Date: Fri, 24 Jan 2025 17:18:33 -0800
Subject: [PATCH] KVM: x86: Load DR6 with guest value only before entering
.vcpu_run() loop
Move the conditional loading of hardware DR6 with the guest's DR6 value
out of the core .vcpu_run() loop to fix a bug where KVM can load hardware
with a stale vcpu->arch.dr6.
When the guest accesses a DR and host userspace isn't debugging the guest,
KVM disables DR interception and loads the guest's values into hardware on
VM-Enter and saves them on VM-Exit. This allows the guest to access DRs
at will, e.g. so that a sequence of DR accesses to configure a breakpoint
only generates one VM-Exit.
For DR0-DR3, the logic/behavior is identical between VMX and SVM, and also
identical between KVM_DEBUGREG_BP_ENABLED (userspace debugging the guest)
and KVM_DEBUGREG_WONT_EXIT (guest using DRs), and so KVM handles loading
DR0-DR3 in common code, _outside_ of the core kvm_x86_ops.vcpu_run() loop.
But for DR6, the guest's value doesn't need to be loaded into hardware for
KVM_DEBUGREG_BP_ENABLED, and SVM provides a dedicated VMCB field whereas
VMX requires software to manually load the guest value, and so loading the
guest's value into DR6 is handled by {svm,vmx}_vcpu_run(), i.e. is done
_inside_ the core run loop.
Unfortunately, saving the guest values on VM-Exit is initiated by common
x86, again outside of the core run loop. If the guest modifies DR6 (in
hardware, when DR interception is disabled), and then the next VM-Exit is
a fastpath VM-Exit, KVM will reload hardware DR6 with vcpu->arch.dr6 and
clobber the guest's actual value.
The bug shows up primarily with nested VMX because KVM handles the VMX
preemption timer in the fastpath, and the window between hardware DR6
being modified (in guest context) and DR6 being read by guest software is
orders of magnitude larger in a nested setup. E.g. in non-nested, the
VMX preemption timer would need to fire precisely between #DB injection
and the #DB handler's read of DR6, whereas with a KVM-on-KVM setup, the
window where hardware DR6 is "dirty" extends all the way from L1 writing
DR6 to VMRESUME (in L1).
L1's view:
==========
<L1 disables DR interception>
CPU 0/KVM-7289 [023] d.... 2925.640961: kvm_entry: vcpu 0
A: L1 Writes DR6
CPU 0/KVM-7289 [023] d.... 2925.640963: <hack>: Set DRs, DR6 = 0xffff0ff1
B: CPU 0/KVM-7289 [023] d.... 2925.640967: kvm_exit: vcpu 0 reason EXTERNAL_INTERRUPT intr_info 0x800000ec
D: L1 reads DR6, arch.dr6 = 0
CPU 0/KVM-7289 [023] d.... 2925.640969: <hack>: Sync DRs, DR6 = 0xffff0ff0
CPU 0/KVM-7289 [023] d.... 2925.640976: kvm_entry: vcpu 0
L2 reads DR6, L1 disables DR interception
CPU 0/KVM-7289 [023] d.... 2925.640980: kvm_exit: vcpu 0 reason DR_ACCESS info1 0x0000000000000216
CPU 0/KVM-7289 [023] d.... 2925.640983: kvm_entry: vcpu 0
CPU 0/KVM-7289 [023] d.... 2925.640983: <hack>: Set DRs, DR6 = 0xffff0ff0
L2 detects failure
CPU 0/KVM-7289 [023] d.... 2925.640987: kvm_exit: vcpu 0 reason HLT
L1 reads DR6 (confirms failure)
CPU 0/KVM-7289 [023] d.... 2925.640990: <hack>: Sync DRs, DR6 = 0xffff0ff0
L0's view:
==========
L2 reads DR6, arch.dr6 = 0
CPU 23/KVM-5046 [001] d.... 3410.005610: kvm_exit: vcpu 23 reason DR_ACCESS info1 0x0000000000000216
CPU 23/KVM-5046 [001] ..... 3410.005610: kvm_nested_vmexit: vcpu 23 reason DR_ACCESS info1 0x0000000000000216
L2 => L1 nested VM-Exit
CPU 23/KVM-5046 [001] ..... 3410.005610: kvm_nested_vmexit_inject: reason: DR_ACCESS ext_inf1: 0x0000000000000216
CPU 23/KVM-5046 [001] d.... 3410.005610: kvm_entry: vcpu 23
CPU 23/KVM-5046 [001] d.... 3410.005611: kvm_exit: vcpu 23 reason VMREAD
CPU 23/KVM-5046 [001] d.... 3410.005611: kvm_entry: vcpu 23
CPU 23/KVM-5046 [001] d.... 3410.005612: kvm_exit: vcpu 23 reason VMREAD
CPU 23/KVM-5046 [001] d.... 3410.005612: kvm_entry: vcpu 23
L1 writes DR7, L0 disables DR interception
CPU 23/KVM-5046 [001] d.... 3410.005612: kvm_exit: vcpu 23 reason DR_ACCESS info1 0x0000000000000007
CPU 23/KVM-5046 [001] d.... 3410.005613: kvm_entry: vcpu 23
L0 writes DR6 = 0 (arch.dr6)
CPU 23/KVM-5046 [001] d.... 3410.005613: <hack>: Set DRs, DR6 = 0xffff0ff0
A: <L1 writes DR6 = 1, no interception, arch.dr6 is still '0'>
B: CPU 23/KVM-5046 [001] d.... 3410.005614: kvm_exit: vcpu 23 reason PREEMPTION_TIMER
CPU 23/KVM-5046 [001] d.... 3410.005614: kvm_entry: vcpu 23
C: L0 writes DR6 = 0 (arch.dr6)
CPU 23/KVM-5046 [001] d.... 3410.005614: <hack>: Set DRs, DR6 = 0xffff0ff0
L1 => L2 nested VM-Enter
CPU 23/KVM-5046 [001] d.... 3410.005616: kvm_exit: vcpu 23 reason VMRESUME
L0 reads DR6, arch.dr6 = 0
Reported-by: John Stultz <jstultz(a)google.com>
Closes: https://lkml.kernel.org/r/CANDhNCq5_F3HfFYABqFGCA1bPd_%2BxgNj-iDQhH4tDk%2Bw…
Fixes: 375e28ffc0cf ("KVM: X86: Set host DR6 only on VMX and for KVM_DEBUGREG_WONT_EXIT")
Fixes: d67668e9dd76 ("KVM: x86, SVM: isolate vcpu->arch.dr6 from vmcb->save.dr6")
Cc: stable(a)vger.kernel.org
Cc: Jim Mattson <jmattson(a)google.com>
Tested-by: John Stultz <jstultz(a)google.com>
Link: https://lore.kernel.org/r/20250125011833.3644371-1-seanjc@google.com
Signed-off-by: Sean Christopherson <seanjc(a)google.com>
diff --git a/arch/x86/include/asm/kvm-x86-ops.h b/arch/x86/include/asm/kvm-x86-ops.h
index c35550581da0..823c0434bbad 100644
--- a/arch/x86/include/asm/kvm-x86-ops.h
+++ b/arch/x86/include/asm/kvm-x86-ops.h
@@ -48,6 +48,7 @@ KVM_X86_OP(set_idt)
KVM_X86_OP(get_gdt)
KVM_X86_OP(set_gdt)
KVM_X86_OP(sync_dirty_debug_regs)
+KVM_X86_OP(set_dr6)
KVM_X86_OP(set_dr7)
KVM_X86_OP(cache_reg)
KVM_X86_OP(get_rflags)
diff --git a/arch/x86/include/asm/kvm_host.h b/arch/x86/include/asm/kvm_host.h
index b15cde0a9b5c..0b7af5902ff7 100644
--- a/arch/x86/include/asm/kvm_host.h
+++ b/arch/x86/include/asm/kvm_host.h
@@ -1696,6 +1696,7 @@ struct kvm_x86_ops {
void (*get_gdt)(struct kvm_vcpu *vcpu, struct desc_ptr *dt);
void (*set_gdt)(struct kvm_vcpu *vcpu, struct desc_ptr *dt);
void (*sync_dirty_debug_regs)(struct kvm_vcpu *vcpu);
+ void (*set_dr6)(struct kvm_vcpu *vcpu, unsigned long value);
void (*set_dr7)(struct kvm_vcpu *vcpu, unsigned long value);
void (*cache_reg)(struct kvm_vcpu *vcpu, enum kvm_reg reg);
unsigned long (*get_rflags)(struct kvm_vcpu *vcpu);
diff --git a/arch/x86/kvm/svm/svm.c b/arch/x86/kvm/svm/svm.c
index 7640a84e554a..a713c803a3a3 100644
--- a/arch/x86/kvm/svm/svm.c
+++ b/arch/x86/kvm/svm/svm.c
@@ -1991,11 +1991,11 @@ static void new_asid(struct vcpu_svm *svm, struct svm_cpu_data *sd)
svm->asid = sd->next_asid++;
}
-static void svm_set_dr6(struct vcpu_svm *svm, unsigned long value)
+static void svm_set_dr6(struct kvm_vcpu *vcpu, unsigned long value)
{
- struct vmcb *vmcb = svm->vmcb;
+ struct vmcb *vmcb = to_svm(vcpu)->vmcb;
- if (svm->vcpu.arch.guest_state_protected)
+ if (vcpu->arch.guest_state_protected)
return;
if (unlikely(value != vmcb->save.dr6)) {
@@ -4247,10 +4247,8 @@ static __no_kcsan fastpath_t svm_vcpu_run(struct kvm_vcpu *vcpu,
* Run with all-zero DR6 unless needed, so that we can get the exact cause
* of a #DB.
*/
- if (unlikely(vcpu->arch.switch_db_regs & KVM_DEBUGREG_WONT_EXIT))
- svm_set_dr6(svm, vcpu->arch.dr6);
- else
- svm_set_dr6(svm, DR6_ACTIVE_LOW);
+ if (likely(!(vcpu->arch.switch_db_regs & KVM_DEBUGREG_WONT_EXIT)))
+ svm_set_dr6(vcpu, DR6_ACTIVE_LOW);
clgi();
kvm_load_guest_xsave_state(vcpu);
@@ -5043,6 +5041,7 @@ static struct kvm_x86_ops svm_x86_ops __initdata = {
.set_idt = svm_set_idt,
.get_gdt = svm_get_gdt,
.set_gdt = svm_set_gdt,
+ .set_dr6 = svm_set_dr6,
.set_dr7 = svm_set_dr7,
.sync_dirty_debug_regs = svm_sync_dirty_debug_regs,
.cache_reg = svm_cache_reg,
diff --git a/arch/x86/kvm/vmx/main.c b/arch/x86/kvm/vmx/main.c
index 2427f918e763..43ee9ed11291 100644
--- a/arch/x86/kvm/vmx/main.c
+++ b/arch/x86/kvm/vmx/main.c
@@ -61,6 +61,7 @@ struct kvm_x86_ops vt_x86_ops __initdata = {
.set_idt = vmx_set_idt,
.get_gdt = vmx_get_gdt,
.set_gdt = vmx_set_gdt,
+ .set_dr6 = vmx_set_dr6,
.set_dr7 = vmx_set_dr7,
.sync_dirty_debug_regs = vmx_sync_dirty_debug_regs,
.cache_reg = vmx_cache_reg,
diff --git a/arch/x86/kvm/vmx/vmx.c b/arch/x86/kvm/vmx/vmx.c
index f72835e85b6d..6c56d5235f0f 100644
--- a/arch/x86/kvm/vmx/vmx.c
+++ b/arch/x86/kvm/vmx/vmx.c
@@ -5648,6 +5648,12 @@ void vmx_sync_dirty_debug_regs(struct kvm_vcpu *vcpu)
set_debugreg(DR6_RESERVED, 6);
}
+void vmx_set_dr6(struct kvm_vcpu *vcpu, unsigned long val)
+{
+ lockdep_assert_irqs_disabled();
+ set_debugreg(vcpu->arch.dr6, 6);
+}
+
void vmx_set_dr7(struct kvm_vcpu *vcpu, unsigned long val)
{
vmcs_writel(GUEST_DR7, val);
@@ -7417,10 +7423,6 @@ fastpath_t vmx_vcpu_run(struct kvm_vcpu *vcpu, bool force_immediate_exit)
vmx->loaded_vmcs->host_state.cr4 = cr4;
}
- /* When KVM_DEBUGREG_WONT_EXIT, dr6 is accessible in guest. */
- if (unlikely(vcpu->arch.switch_db_regs & KVM_DEBUGREG_WONT_EXIT))
- set_debugreg(vcpu->arch.dr6, 6);
-
/* When single-stepping over STI and MOV SS, we must clear the
* corresponding interruptibility bits in the guest state. Otherwise
* vmentry fails as it then expects bit 14 (BS) in pending debug
diff --git a/arch/x86/kvm/vmx/x86_ops.h b/arch/x86/kvm/vmx/x86_ops.h
index ce3295a67c04..430773a5ef8e 100644
--- a/arch/x86/kvm/vmx/x86_ops.h
+++ b/arch/x86/kvm/vmx/x86_ops.h
@@ -73,6 +73,7 @@ void vmx_get_idt(struct kvm_vcpu *vcpu, struct desc_ptr *dt);
void vmx_set_idt(struct kvm_vcpu *vcpu, struct desc_ptr *dt);
void vmx_get_gdt(struct kvm_vcpu *vcpu, struct desc_ptr *dt);
void vmx_set_gdt(struct kvm_vcpu *vcpu, struct desc_ptr *dt);
+void vmx_set_dr6(struct kvm_vcpu *vcpu, unsigned long val);
void vmx_set_dr7(struct kvm_vcpu *vcpu, unsigned long val);
void vmx_sync_dirty_debug_regs(struct kvm_vcpu *vcpu);
void vmx_cache_reg(struct kvm_vcpu *vcpu, enum kvm_reg reg);
diff --git a/arch/x86/kvm/x86.c b/arch/x86/kvm/x86.c
index 8e77e61d4fbd..02159c967d29 100644
--- a/arch/x86/kvm/x86.c
+++ b/arch/x86/kvm/x86.c
@@ -10961,6 +10961,9 @@ static int vcpu_enter_guest(struct kvm_vcpu *vcpu)
set_debugreg(vcpu->arch.eff_db[1], 1);
set_debugreg(vcpu->arch.eff_db[2], 2);
set_debugreg(vcpu->arch.eff_db[3], 3);
+ /* When KVM_DEBUGREG_WONT_EXIT, dr6 is accessible in guest. */
+ if (unlikely(vcpu->arch.switch_db_regs & KVM_DEBUGREG_WONT_EXIT))
+ kvm_x86_call(set_dr6)(vcpu, vcpu->arch.dr6);
} else if (unlikely(hw_breakpoint_active())) {
set_debugreg(0, 7);
}
4 months, 3 weeks
- 3
- 2
FAILED: patch "[PATCH] KVM: x86: Load DR6 with guest value only before entering" failed to apply to 6.6-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 6.6-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.6.y
git checkout FETCH_HEAD
git cherry-pick -x c2fee09fc167c74a64adb08656cb993ea475197e
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025021809-census-mammal-224b@gregkh' --subject-prefix 'PATCH 6.6.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From c2fee09fc167c74a64adb08656cb993ea475197e Mon Sep 17 00:00:00 2001
From: Sean Christopherson <seanjc(a)google.com>
Date: Fri, 24 Jan 2025 17:18:33 -0800
Subject: [PATCH] KVM: x86: Load DR6 with guest value only before entering
.vcpu_run() loop
Move the conditional loading of hardware DR6 with the guest's DR6 value
out of the core .vcpu_run() loop to fix a bug where KVM can load hardware
with a stale vcpu->arch.dr6.
When the guest accesses a DR and host userspace isn't debugging the guest,
KVM disables DR interception and loads the guest's values into hardware on
VM-Enter and saves them on VM-Exit. This allows the guest to access DRs
at will, e.g. so that a sequence of DR accesses to configure a breakpoint
only generates one VM-Exit.
For DR0-DR3, the logic/behavior is identical between VMX and SVM, and also
identical between KVM_DEBUGREG_BP_ENABLED (userspace debugging the guest)
and KVM_DEBUGREG_WONT_EXIT (guest using DRs), and so KVM handles loading
DR0-DR3 in common code, _outside_ of the core kvm_x86_ops.vcpu_run() loop.
But for DR6, the guest's value doesn't need to be loaded into hardware for
KVM_DEBUGREG_BP_ENABLED, and SVM provides a dedicated VMCB field whereas
VMX requires software to manually load the guest value, and so loading the
guest's value into DR6 is handled by {svm,vmx}_vcpu_run(), i.e. is done
_inside_ the core run loop.
Unfortunately, saving the guest values on VM-Exit is initiated by common
x86, again outside of the core run loop. If the guest modifies DR6 (in
hardware, when DR interception is disabled), and then the next VM-Exit is
a fastpath VM-Exit, KVM will reload hardware DR6 with vcpu->arch.dr6 and
clobber the guest's actual value.
The bug shows up primarily with nested VMX because KVM handles the VMX
preemption timer in the fastpath, and the window between hardware DR6
being modified (in guest context) and DR6 being read by guest software is
orders of magnitude larger in a nested setup. E.g. in non-nested, the
VMX preemption timer would need to fire precisely between #DB injection
and the #DB handler's read of DR6, whereas with a KVM-on-KVM setup, the
window where hardware DR6 is "dirty" extends all the way from L1 writing
DR6 to VMRESUME (in L1).
L1's view:
==========
<L1 disables DR interception>
CPU 0/KVM-7289 [023] d.... 2925.640961: kvm_entry: vcpu 0
A: L1 Writes DR6
CPU 0/KVM-7289 [023] d.... 2925.640963: <hack>: Set DRs, DR6 = 0xffff0ff1
B: CPU 0/KVM-7289 [023] d.... 2925.640967: kvm_exit: vcpu 0 reason EXTERNAL_INTERRUPT intr_info 0x800000ec
D: L1 reads DR6, arch.dr6 = 0
CPU 0/KVM-7289 [023] d.... 2925.640969: <hack>: Sync DRs, DR6 = 0xffff0ff0
CPU 0/KVM-7289 [023] d.... 2925.640976: kvm_entry: vcpu 0
L2 reads DR6, L1 disables DR interception
CPU 0/KVM-7289 [023] d.... 2925.640980: kvm_exit: vcpu 0 reason DR_ACCESS info1 0x0000000000000216
CPU 0/KVM-7289 [023] d.... 2925.640983: kvm_entry: vcpu 0
CPU 0/KVM-7289 [023] d.... 2925.640983: <hack>: Set DRs, DR6 = 0xffff0ff0
L2 detects failure
CPU 0/KVM-7289 [023] d.... 2925.640987: kvm_exit: vcpu 0 reason HLT
L1 reads DR6 (confirms failure)
CPU 0/KVM-7289 [023] d.... 2925.640990: <hack>: Sync DRs, DR6 = 0xffff0ff0
L0's view:
==========
L2 reads DR6, arch.dr6 = 0
CPU 23/KVM-5046 [001] d.... 3410.005610: kvm_exit: vcpu 23 reason DR_ACCESS info1 0x0000000000000216
CPU 23/KVM-5046 [001] ..... 3410.005610: kvm_nested_vmexit: vcpu 23 reason DR_ACCESS info1 0x0000000000000216
L2 => L1 nested VM-Exit
CPU 23/KVM-5046 [001] ..... 3410.005610: kvm_nested_vmexit_inject: reason: DR_ACCESS ext_inf1: 0x0000000000000216
CPU 23/KVM-5046 [001] d.... 3410.005610: kvm_entry: vcpu 23
CPU 23/KVM-5046 [001] d.... 3410.005611: kvm_exit: vcpu 23 reason VMREAD
CPU 23/KVM-5046 [001] d.... 3410.005611: kvm_entry: vcpu 23
CPU 23/KVM-5046 [001] d.... 3410.005612: kvm_exit: vcpu 23 reason VMREAD
CPU 23/KVM-5046 [001] d.... 3410.005612: kvm_entry: vcpu 23
L1 writes DR7, L0 disables DR interception
CPU 23/KVM-5046 [001] d.... 3410.005612: kvm_exit: vcpu 23 reason DR_ACCESS info1 0x0000000000000007
CPU 23/KVM-5046 [001] d.... 3410.005613: kvm_entry: vcpu 23
L0 writes DR6 = 0 (arch.dr6)
CPU 23/KVM-5046 [001] d.... 3410.005613: <hack>: Set DRs, DR6 = 0xffff0ff0
A: <L1 writes DR6 = 1, no interception, arch.dr6 is still '0'>
B: CPU 23/KVM-5046 [001] d.... 3410.005614: kvm_exit: vcpu 23 reason PREEMPTION_TIMER
CPU 23/KVM-5046 [001] d.... 3410.005614: kvm_entry: vcpu 23
C: L0 writes DR6 = 0 (arch.dr6)
CPU 23/KVM-5046 [001] d.... 3410.005614: <hack>: Set DRs, DR6 = 0xffff0ff0
L1 => L2 nested VM-Enter
CPU 23/KVM-5046 [001] d.... 3410.005616: kvm_exit: vcpu 23 reason VMRESUME
L0 reads DR6, arch.dr6 = 0
Reported-by: John Stultz <jstultz(a)google.com>
Closes: https://lkml.kernel.org/r/CANDhNCq5_F3HfFYABqFGCA1bPd_%2BxgNj-iDQhH4tDk%2Bw…
Fixes: 375e28ffc0cf ("KVM: X86: Set host DR6 only on VMX and for KVM_DEBUGREG_WONT_EXIT")
Fixes: d67668e9dd76 ("KVM: x86, SVM: isolate vcpu->arch.dr6 from vmcb->save.dr6")
Cc: stable(a)vger.kernel.org
Cc: Jim Mattson <jmattson(a)google.com>
Tested-by: John Stultz <jstultz(a)google.com>
Link: https://lore.kernel.org/r/20250125011833.3644371-1-seanjc@google.com
Signed-off-by: Sean Christopherson <seanjc(a)google.com>
diff --git a/arch/x86/include/asm/kvm-x86-ops.h b/arch/x86/include/asm/kvm-x86-ops.h
index c35550581da0..823c0434bbad 100644
--- a/arch/x86/include/asm/kvm-x86-ops.h
+++ b/arch/x86/include/asm/kvm-x86-ops.h
@@ -48,6 +48,7 @@ KVM_X86_OP(set_idt)
KVM_X86_OP(get_gdt)
KVM_X86_OP(set_gdt)
KVM_X86_OP(sync_dirty_debug_regs)
+KVM_X86_OP(set_dr6)
KVM_X86_OP(set_dr7)
KVM_X86_OP(cache_reg)
KVM_X86_OP(get_rflags)
diff --git a/arch/x86/include/asm/kvm_host.h b/arch/x86/include/asm/kvm_host.h
index b15cde0a9b5c..0b7af5902ff7 100644
--- a/arch/x86/include/asm/kvm_host.h
+++ b/arch/x86/include/asm/kvm_host.h
@@ -1696,6 +1696,7 @@ struct kvm_x86_ops {
void (*get_gdt)(struct kvm_vcpu *vcpu, struct desc_ptr *dt);
void (*set_gdt)(struct kvm_vcpu *vcpu, struct desc_ptr *dt);
void (*sync_dirty_debug_regs)(struct kvm_vcpu *vcpu);
+ void (*set_dr6)(struct kvm_vcpu *vcpu, unsigned long value);
void (*set_dr7)(struct kvm_vcpu *vcpu, unsigned long value);
void (*cache_reg)(struct kvm_vcpu *vcpu, enum kvm_reg reg);
unsigned long (*get_rflags)(struct kvm_vcpu *vcpu);
diff --git a/arch/x86/kvm/svm/svm.c b/arch/x86/kvm/svm/svm.c
index 7640a84e554a..a713c803a3a3 100644
--- a/arch/x86/kvm/svm/svm.c
+++ b/arch/x86/kvm/svm/svm.c
@@ -1991,11 +1991,11 @@ static void new_asid(struct vcpu_svm *svm, struct svm_cpu_data *sd)
svm->asid = sd->next_asid++;
}
-static void svm_set_dr6(struct vcpu_svm *svm, unsigned long value)
+static void svm_set_dr6(struct kvm_vcpu *vcpu, unsigned long value)
{
- struct vmcb *vmcb = svm->vmcb;
+ struct vmcb *vmcb = to_svm(vcpu)->vmcb;
- if (svm->vcpu.arch.guest_state_protected)
+ if (vcpu->arch.guest_state_protected)
return;
if (unlikely(value != vmcb->save.dr6)) {
@@ -4247,10 +4247,8 @@ static __no_kcsan fastpath_t svm_vcpu_run(struct kvm_vcpu *vcpu,
* Run with all-zero DR6 unless needed, so that we can get the exact cause
* of a #DB.
*/
- if (unlikely(vcpu->arch.switch_db_regs & KVM_DEBUGREG_WONT_EXIT))
- svm_set_dr6(svm, vcpu->arch.dr6);
- else
- svm_set_dr6(svm, DR6_ACTIVE_LOW);
+ if (likely(!(vcpu->arch.switch_db_regs & KVM_DEBUGREG_WONT_EXIT)))
+ svm_set_dr6(vcpu, DR6_ACTIVE_LOW);
clgi();
kvm_load_guest_xsave_state(vcpu);
@@ -5043,6 +5041,7 @@ static struct kvm_x86_ops svm_x86_ops __initdata = {
.set_idt = svm_set_idt,
.get_gdt = svm_get_gdt,
.set_gdt = svm_set_gdt,
+ .set_dr6 = svm_set_dr6,
.set_dr7 = svm_set_dr7,
.sync_dirty_debug_regs = svm_sync_dirty_debug_regs,
.cache_reg = svm_cache_reg,
diff --git a/arch/x86/kvm/vmx/main.c b/arch/x86/kvm/vmx/main.c
index 2427f918e763..43ee9ed11291 100644
--- a/arch/x86/kvm/vmx/main.c
+++ b/arch/x86/kvm/vmx/main.c
@@ -61,6 +61,7 @@ struct kvm_x86_ops vt_x86_ops __initdata = {
.set_idt = vmx_set_idt,
.get_gdt = vmx_get_gdt,
.set_gdt = vmx_set_gdt,
+ .set_dr6 = vmx_set_dr6,
.set_dr7 = vmx_set_dr7,
.sync_dirty_debug_regs = vmx_sync_dirty_debug_regs,
.cache_reg = vmx_cache_reg,
diff --git a/arch/x86/kvm/vmx/vmx.c b/arch/x86/kvm/vmx/vmx.c
index f72835e85b6d..6c56d5235f0f 100644
--- a/arch/x86/kvm/vmx/vmx.c
+++ b/arch/x86/kvm/vmx/vmx.c
@@ -5648,6 +5648,12 @@ void vmx_sync_dirty_debug_regs(struct kvm_vcpu *vcpu)
set_debugreg(DR6_RESERVED, 6);
}
+void vmx_set_dr6(struct kvm_vcpu *vcpu, unsigned long val)
+{
+ lockdep_assert_irqs_disabled();
+ set_debugreg(vcpu->arch.dr6, 6);
+}
+
void vmx_set_dr7(struct kvm_vcpu *vcpu, unsigned long val)
{
vmcs_writel(GUEST_DR7, val);
@@ -7417,10 +7423,6 @@ fastpath_t vmx_vcpu_run(struct kvm_vcpu *vcpu, bool force_immediate_exit)
vmx->loaded_vmcs->host_state.cr4 = cr4;
}
- /* When KVM_DEBUGREG_WONT_EXIT, dr6 is accessible in guest. */
- if (unlikely(vcpu->arch.switch_db_regs & KVM_DEBUGREG_WONT_EXIT))
- set_debugreg(vcpu->arch.dr6, 6);
-
/* When single-stepping over STI and MOV SS, we must clear the
* corresponding interruptibility bits in the guest state. Otherwise
* vmentry fails as it then expects bit 14 (BS) in pending debug
diff --git a/arch/x86/kvm/vmx/x86_ops.h b/arch/x86/kvm/vmx/x86_ops.h
index ce3295a67c04..430773a5ef8e 100644
--- a/arch/x86/kvm/vmx/x86_ops.h
+++ b/arch/x86/kvm/vmx/x86_ops.h
@@ -73,6 +73,7 @@ void vmx_get_idt(struct kvm_vcpu *vcpu, struct desc_ptr *dt);
void vmx_set_idt(struct kvm_vcpu *vcpu, struct desc_ptr *dt);
void vmx_get_gdt(struct kvm_vcpu *vcpu, struct desc_ptr *dt);
void vmx_set_gdt(struct kvm_vcpu *vcpu, struct desc_ptr *dt);
+void vmx_set_dr6(struct kvm_vcpu *vcpu, unsigned long val);
void vmx_set_dr7(struct kvm_vcpu *vcpu, unsigned long val);
void vmx_sync_dirty_debug_regs(struct kvm_vcpu *vcpu);
void vmx_cache_reg(struct kvm_vcpu *vcpu, enum kvm_reg reg);
diff --git a/arch/x86/kvm/x86.c b/arch/x86/kvm/x86.c
index 8e77e61d4fbd..02159c967d29 100644
--- a/arch/x86/kvm/x86.c
+++ b/arch/x86/kvm/x86.c
@@ -10961,6 +10961,9 @@ static int vcpu_enter_guest(struct kvm_vcpu *vcpu)
set_debugreg(vcpu->arch.eff_db[1], 1);
set_debugreg(vcpu->arch.eff_db[2], 2);
set_debugreg(vcpu->arch.eff_db[3], 3);
+ /* When KVM_DEBUGREG_WONT_EXIT, dr6 is accessible in guest. */
+ if (unlikely(vcpu->arch.switch_db_regs & KVM_DEBUGREG_WONT_EXIT))
+ kvm_x86_call(set_dr6)(vcpu, vcpu->arch.dr6);
} else if (unlikely(hw_breakpoint_active())) {
set_debugreg(0, 7);
}
4 months, 3 weeks
- 3
- 2
FAILED: patch "[PATCH] KVM: x86: Load DR6 with guest value only before entering" failed to apply to 6.1-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 6.1-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.1.y
git checkout FETCH_HEAD
git cherry-pick -x c2fee09fc167c74a64adb08656cb993ea475197e
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025021812-candied-hamper-7f08@gregkh' --subject-prefix 'PATCH 6.1.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From c2fee09fc167c74a64adb08656cb993ea475197e Mon Sep 17 00:00:00 2001
From: Sean Christopherson <seanjc(a)google.com>
Date: Fri, 24 Jan 2025 17:18:33 -0800
Subject: [PATCH] KVM: x86: Load DR6 with guest value only before entering
.vcpu_run() loop
Move the conditional loading of hardware DR6 with the guest's DR6 value
out of the core .vcpu_run() loop to fix a bug where KVM can load hardware
with a stale vcpu->arch.dr6.
When the guest accesses a DR and host userspace isn't debugging the guest,
KVM disables DR interception and loads the guest's values into hardware on
VM-Enter and saves them on VM-Exit. This allows the guest to access DRs
at will, e.g. so that a sequence of DR accesses to configure a breakpoint
only generates one VM-Exit.
For DR0-DR3, the logic/behavior is identical between VMX and SVM, and also
identical between KVM_DEBUGREG_BP_ENABLED (userspace debugging the guest)
and KVM_DEBUGREG_WONT_EXIT (guest using DRs), and so KVM handles loading
DR0-DR3 in common code, _outside_ of the core kvm_x86_ops.vcpu_run() loop.
But for DR6, the guest's value doesn't need to be loaded into hardware for
KVM_DEBUGREG_BP_ENABLED, and SVM provides a dedicated VMCB field whereas
VMX requires software to manually load the guest value, and so loading the
guest's value into DR6 is handled by {svm,vmx}_vcpu_run(), i.e. is done
_inside_ the core run loop.
Unfortunately, saving the guest values on VM-Exit is initiated by common
x86, again outside of the core run loop. If the guest modifies DR6 (in
hardware, when DR interception is disabled), and then the next VM-Exit is
a fastpath VM-Exit, KVM will reload hardware DR6 with vcpu->arch.dr6 and
clobber the guest's actual value.
The bug shows up primarily with nested VMX because KVM handles the VMX
preemption timer in the fastpath, and the window between hardware DR6
being modified (in guest context) and DR6 being read by guest software is
orders of magnitude larger in a nested setup. E.g. in non-nested, the
VMX preemption timer would need to fire precisely between #DB injection
and the #DB handler's read of DR6, whereas with a KVM-on-KVM setup, the
window where hardware DR6 is "dirty" extends all the way from L1 writing
DR6 to VMRESUME (in L1).
L1's view:
==========
<L1 disables DR interception>
CPU 0/KVM-7289 [023] d.... 2925.640961: kvm_entry: vcpu 0
A: L1 Writes DR6
CPU 0/KVM-7289 [023] d.... 2925.640963: <hack>: Set DRs, DR6 = 0xffff0ff1
B: CPU 0/KVM-7289 [023] d.... 2925.640967: kvm_exit: vcpu 0 reason EXTERNAL_INTERRUPT intr_info 0x800000ec
D: L1 reads DR6, arch.dr6 = 0
CPU 0/KVM-7289 [023] d.... 2925.640969: <hack>: Sync DRs, DR6 = 0xffff0ff0
CPU 0/KVM-7289 [023] d.... 2925.640976: kvm_entry: vcpu 0
L2 reads DR6, L1 disables DR interception
CPU 0/KVM-7289 [023] d.... 2925.640980: kvm_exit: vcpu 0 reason DR_ACCESS info1 0x0000000000000216
CPU 0/KVM-7289 [023] d.... 2925.640983: kvm_entry: vcpu 0
CPU 0/KVM-7289 [023] d.... 2925.640983: <hack>: Set DRs, DR6 = 0xffff0ff0
L2 detects failure
CPU 0/KVM-7289 [023] d.... 2925.640987: kvm_exit: vcpu 0 reason HLT
L1 reads DR6 (confirms failure)
CPU 0/KVM-7289 [023] d.... 2925.640990: <hack>: Sync DRs, DR6 = 0xffff0ff0
L0's view:
==========
L2 reads DR6, arch.dr6 = 0
CPU 23/KVM-5046 [001] d.... 3410.005610: kvm_exit: vcpu 23 reason DR_ACCESS info1 0x0000000000000216
CPU 23/KVM-5046 [001] ..... 3410.005610: kvm_nested_vmexit: vcpu 23 reason DR_ACCESS info1 0x0000000000000216
L2 => L1 nested VM-Exit
CPU 23/KVM-5046 [001] ..... 3410.005610: kvm_nested_vmexit_inject: reason: DR_ACCESS ext_inf1: 0x0000000000000216
CPU 23/KVM-5046 [001] d.... 3410.005610: kvm_entry: vcpu 23
CPU 23/KVM-5046 [001] d.... 3410.005611: kvm_exit: vcpu 23 reason VMREAD
CPU 23/KVM-5046 [001] d.... 3410.005611: kvm_entry: vcpu 23
CPU 23/KVM-5046 [001] d.... 3410.005612: kvm_exit: vcpu 23 reason VMREAD
CPU 23/KVM-5046 [001] d.... 3410.005612: kvm_entry: vcpu 23
L1 writes DR7, L0 disables DR interception
CPU 23/KVM-5046 [001] d.... 3410.005612: kvm_exit: vcpu 23 reason DR_ACCESS info1 0x0000000000000007
CPU 23/KVM-5046 [001] d.... 3410.005613: kvm_entry: vcpu 23
L0 writes DR6 = 0 (arch.dr6)
CPU 23/KVM-5046 [001] d.... 3410.005613: <hack>: Set DRs, DR6 = 0xffff0ff0
A: <L1 writes DR6 = 1, no interception, arch.dr6 is still '0'>
B: CPU 23/KVM-5046 [001] d.... 3410.005614: kvm_exit: vcpu 23 reason PREEMPTION_TIMER
CPU 23/KVM-5046 [001] d.... 3410.005614: kvm_entry: vcpu 23
C: L0 writes DR6 = 0 (arch.dr6)
CPU 23/KVM-5046 [001] d.... 3410.005614: <hack>: Set DRs, DR6 = 0xffff0ff0
L1 => L2 nested VM-Enter
CPU 23/KVM-5046 [001] d.... 3410.005616: kvm_exit: vcpu 23 reason VMRESUME
L0 reads DR6, arch.dr6 = 0
Reported-by: John Stultz <jstultz(a)google.com>
Closes: https://lkml.kernel.org/r/CANDhNCq5_F3HfFYABqFGCA1bPd_%2BxgNj-iDQhH4tDk%2Bw…
Fixes: 375e28ffc0cf ("KVM: X86: Set host DR6 only on VMX and for KVM_DEBUGREG_WONT_EXIT")
Fixes: d67668e9dd76 ("KVM: x86, SVM: isolate vcpu->arch.dr6 from vmcb->save.dr6")
Cc: stable(a)vger.kernel.org
Cc: Jim Mattson <jmattson(a)google.com>
Tested-by: John Stultz <jstultz(a)google.com>
Link: https://lore.kernel.org/r/20250125011833.3644371-1-seanjc@google.com
Signed-off-by: Sean Christopherson <seanjc(a)google.com>
diff --git a/arch/x86/include/asm/kvm-x86-ops.h b/arch/x86/include/asm/kvm-x86-ops.h
index c35550581da0..823c0434bbad 100644
--- a/arch/x86/include/asm/kvm-x86-ops.h
+++ b/arch/x86/include/asm/kvm-x86-ops.h
@@ -48,6 +48,7 @@ KVM_X86_OP(set_idt)
KVM_X86_OP(get_gdt)
KVM_X86_OP(set_gdt)
KVM_X86_OP(sync_dirty_debug_regs)
+KVM_X86_OP(set_dr6)
KVM_X86_OP(set_dr7)
KVM_X86_OP(cache_reg)
KVM_X86_OP(get_rflags)
diff --git a/arch/x86/include/asm/kvm_host.h b/arch/x86/include/asm/kvm_host.h
index b15cde0a9b5c..0b7af5902ff7 100644
--- a/arch/x86/include/asm/kvm_host.h
+++ b/arch/x86/include/asm/kvm_host.h
@@ -1696,6 +1696,7 @@ struct kvm_x86_ops {
void (*get_gdt)(struct kvm_vcpu *vcpu, struct desc_ptr *dt);
void (*set_gdt)(struct kvm_vcpu *vcpu, struct desc_ptr *dt);
void (*sync_dirty_debug_regs)(struct kvm_vcpu *vcpu);
+ void (*set_dr6)(struct kvm_vcpu *vcpu, unsigned long value);
void (*set_dr7)(struct kvm_vcpu *vcpu, unsigned long value);
void (*cache_reg)(struct kvm_vcpu *vcpu, enum kvm_reg reg);
unsigned long (*get_rflags)(struct kvm_vcpu *vcpu);
diff --git a/arch/x86/kvm/svm/svm.c b/arch/x86/kvm/svm/svm.c
index 7640a84e554a..a713c803a3a3 100644
--- a/arch/x86/kvm/svm/svm.c
+++ b/arch/x86/kvm/svm/svm.c
@@ -1991,11 +1991,11 @@ static void new_asid(struct vcpu_svm *svm, struct svm_cpu_data *sd)
svm->asid = sd->next_asid++;
}
-static void svm_set_dr6(struct vcpu_svm *svm, unsigned long value)
+static void svm_set_dr6(struct kvm_vcpu *vcpu, unsigned long value)
{
- struct vmcb *vmcb = svm->vmcb;
+ struct vmcb *vmcb = to_svm(vcpu)->vmcb;
- if (svm->vcpu.arch.guest_state_protected)
+ if (vcpu->arch.guest_state_protected)
return;
if (unlikely(value != vmcb->save.dr6)) {
@@ -4247,10 +4247,8 @@ static __no_kcsan fastpath_t svm_vcpu_run(struct kvm_vcpu *vcpu,
* Run with all-zero DR6 unless needed, so that we can get the exact cause
* of a #DB.
*/
- if (unlikely(vcpu->arch.switch_db_regs & KVM_DEBUGREG_WONT_EXIT))
- svm_set_dr6(svm, vcpu->arch.dr6);
- else
- svm_set_dr6(svm, DR6_ACTIVE_LOW);
+ if (likely(!(vcpu->arch.switch_db_regs & KVM_DEBUGREG_WONT_EXIT)))
+ svm_set_dr6(vcpu, DR6_ACTIVE_LOW);
clgi();
kvm_load_guest_xsave_state(vcpu);
@@ -5043,6 +5041,7 @@ static struct kvm_x86_ops svm_x86_ops __initdata = {
.set_idt = svm_set_idt,
.get_gdt = svm_get_gdt,
.set_gdt = svm_set_gdt,
+ .set_dr6 = svm_set_dr6,
.set_dr7 = svm_set_dr7,
.sync_dirty_debug_regs = svm_sync_dirty_debug_regs,
.cache_reg = svm_cache_reg,
diff --git a/arch/x86/kvm/vmx/main.c b/arch/x86/kvm/vmx/main.c
index 2427f918e763..43ee9ed11291 100644
--- a/arch/x86/kvm/vmx/main.c
+++ b/arch/x86/kvm/vmx/main.c
@@ -61,6 +61,7 @@ struct kvm_x86_ops vt_x86_ops __initdata = {
.set_idt = vmx_set_idt,
.get_gdt = vmx_get_gdt,
.set_gdt = vmx_set_gdt,
+ .set_dr6 = vmx_set_dr6,
.set_dr7 = vmx_set_dr7,
.sync_dirty_debug_regs = vmx_sync_dirty_debug_regs,
.cache_reg = vmx_cache_reg,
diff --git a/arch/x86/kvm/vmx/vmx.c b/arch/x86/kvm/vmx/vmx.c
index f72835e85b6d..6c56d5235f0f 100644
--- a/arch/x86/kvm/vmx/vmx.c
+++ b/arch/x86/kvm/vmx/vmx.c
@@ -5648,6 +5648,12 @@ void vmx_sync_dirty_debug_regs(struct kvm_vcpu *vcpu)
set_debugreg(DR6_RESERVED, 6);
}
+void vmx_set_dr6(struct kvm_vcpu *vcpu, unsigned long val)
+{
+ lockdep_assert_irqs_disabled();
+ set_debugreg(vcpu->arch.dr6, 6);
+}
+
void vmx_set_dr7(struct kvm_vcpu *vcpu, unsigned long val)
{
vmcs_writel(GUEST_DR7, val);
@@ -7417,10 +7423,6 @@ fastpath_t vmx_vcpu_run(struct kvm_vcpu *vcpu, bool force_immediate_exit)
vmx->loaded_vmcs->host_state.cr4 = cr4;
}
- /* When KVM_DEBUGREG_WONT_EXIT, dr6 is accessible in guest. */
- if (unlikely(vcpu->arch.switch_db_regs & KVM_DEBUGREG_WONT_EXIT))
- set_debugreg(vcpu->arch.dr6, 6);
-
/* When single-stepping over STI and MOV SS, we must clear the
* corresponding interruptibility bits in the guest state. Otherwise
* vmentry fails as it then expects bit 14 (BS) in pending debug
diff --git a/arch/x86/kvm/vmx/x86_ops.h b/arch/x86/kvm/vmx/x86_ops.h
index ce3295a67c04..430773a5ef8e 100644
--- a/arch/x86/kvm/vmx/x86_ops.h
+++ b/arch/x86/kvm/vmx/x86_ops.h
@@ -73,6 +73,7 @@ void vmx_get_idt(struct kvm_vcpu *vcpu, struct desc_ptr *dt);
void vmx_set_idt(struct kvm_vcpu *vcpu, struct desc_ptr *dt);
void vmx_get_gdt(struct kvm_vcpu *vcpu, struct desc_ptr *dt);
void vmx_set_gdt(struct kvm_vcpu *vcpu, struct desc_ptr *dt);
+void vmx_set_dr6(struct kvm_vcpu *vcpu, unsigned long val);
void vmx_set_dr7(struct kvm_vcpu *vcpu, unsigned long val);
void vmx_sync_dirty_debug_regs(struct kvm_vcpu *vcpu);
void vmx_cache_reg(struct kvm_vcpu *vcpu, enum kvm_reg reg);
diff --git a/arch/x86/kvm/x86.c b/arch/x86/kvm/x86.c
index 8e77e61d4fbd..02159c967d29 100644
--- a/arch/x86/kvm/x86.c
+++ b/arch/x86/kvm/x86.c
@@ -10961,6 +10961,9 @@ static int vcpu_enter_guest(struct kvm_vcpu *vcpu)
set_debugreg(vcpu->arch.eff_db[1], 1);
set_debugreg(vcpu->arch.eff_db[2], 2);
set_debugreg(vcpu->arch.eff_db[3], 3);
+ /* When KVM_DEBUGREG_WONT_EXIT, dr6 is accessible in guest. */
+ if (unlikely(vcpu->arch.switch_db_regs & KVM_DEBUGREG_WONT_EXIT))
+ kvm_x86_call(set_dr6)(vcpu, vcpu->arch.dr6);
} else if (unlikely(hw_breakpoint_active())) {
set_debugreg(0, 7);
}
4 months, 3 weeks
- 3
- 2
Re: [PATCH] Handle Ice Lake MONITOR erratum
by Christian Ludloff
> [ICX143 in https://cdrdv2.intel.com/v1/dl/getContent/637780]
> There is no equivalent erratum for the "Xeon D" Ice Lakes so
> INTEL_ICELAKE_D is not affected.
There is ICXD80 in...
https://www.intel.com/content/www/us/en/content-details/714069/intel-xeon-d…
https://www.intel.com/content/www/us/en/content-details/714071/intel-xeon-d…
And although the ICL spec update...
https://edc.intel.com/content/www/us/en/design/ipla/software-development-pl…
...doesn't seem to have a MONITOR erratum, it might be a good
idea for Intel to double check.
--
Christian
4 months, 3 weeks
- 2
- 1
[PATCH v5] Restrict devmem for confidential VMs
by Dan Williams
Changes since v3 [1] (note v4 was a partial re-roll, but more feedback
came in requiring a v5):
- Fix a kbuild robot report for a missing header include of cc_platform.h
- Switch to selecting STRICT_DEVMEM and IOSTRICT_DEVMEM rather than
"depends on". (Naveen)
- Clarify the "SEPT violation" vs "crash" and other changelog fixups for
devmem maintainers and other arch maintainers. (Dave)
- Drop patch numbering since patch2 is a fix and has no dependencies on
patch1
[1]: http://lore.kernel.org/174491711228.1395340.3647010925173796093.stgit@dwill…
---
The original response to Nikolay's report of a "crash" (unhandled SEPT
violation) triggered by /dev/mem access to private memory was "let's
just turn off /dev/mem".
After some machinations of x86_platform_ops to block a subset of
problematic access, spelunking the history of devmem_is_allowed()
returning "2" to enable some compatibility benefits while blocking
access, and discovering that userspace depends buggy kernel behavior for
mmap(2) of the first 1MB of memory on x86, the proposal has circled back
to "disable /dev/mem".
Require both STRICT_DEVMEM and IO_STRICT_DEVMEM for x86 confidential
guests to close /dev/mem hole while still allowing for userspace
mapping of PCI MMIO as long as the kernel and userspace are not mapping
the range at the same time.
The range_is_allowed() cleanup is not strictly necessary, but might as
well close a 17 year-old "TODO".
Dan Williams (2):
x86/devmem: Remove duplicate range_is_allowed() definition
x86/devmem: Drop /dev/mem access for confidential guests
arch/x86/Kconfig | 4 ++++
arch/x86/mm/pat/memtype.c | 31 ++++---------------------------
drivers/char/mem.c | 28 ++++++++++------------------
include/linux/io.h | 21 +++++++++++++++++++++
4 files changed, 39 insertions(+), 45 deletions(-)
base-commit: 0af2f6be1b4281385b618cb86ad946eded089ac8
--
2.49.0
4 months, 3 weeks
- 4
- 10
[PATCH 6.1 00/16] xfs backports for 6.1.y from 6.10
by Leah Rumancik
Hello again,
This is the 6.1.y backports set from 6.10 which corresponds to the 6.6.y
backports set from here:
https://lore.kernel.org/all/20241002174108.64615-1-catherine.hoang@oracle.c…
The following patches were included:
f43bd357fde0 xfs: fix error returns from xfs_bmapi_write
4bcef72d96b5 xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
c299188b443a xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
c13c21f77824 xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovey
0934046e3392 xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2
9716cdcc2f9e xfs: validate recovered name buffers when recovering xattr items
20adb1e2f069 xfs: revert commit 44af6c7e59b12
f24ba2183148 xfs: match lock mode in xfs_buffered_write_iomap_begin()
0f726c17dfd8 xfs: make the seq argument to xfs_bmapi_convert_delalloc() optional
36081fd0ee37 xfs: make xfs_bmapi_convert_delalloc() to allocate the target offset
4c99f3026cf2 xfs: convert delayed extents to unwritten when zeroing post eof blocks
0aca73915dc1 xfs: allow symlinks with short remote targets
0e52b98bf041 xfs: make sure sb_fdblocks is non-negative
2bc2d49c36c2 xfs: fix freeing speculative preallocations for preallocated files
3eeac3311683 xfs: allow unlinked symlinks and dirs with zero size
9a0ab4fc28ed xfs: restrict when we try to align cow fork delalloc to cowextsz hints
The following patches were omitted:
cad051826d83 xfs: fix missing check for invalid attr flags
scrub
db460c26f0b0 xfs: check shortform attr entry flags specifically
scrub
5689d2345a01 xfs: enforce one namespace per attribute
doesn't cherry pick cleanly, it is some refactoring and isn't a
dependency for other patches, lets skip it for now
7c03b124353a xfs: use dontcache for grabbing inodes during scrub
scrub
740a427e8f45 xfs: fix unlink vs cluster buffer instantiation race
already in 6.1.y
No fixes were found on mainline for any of the patches being ported.
The auto group was run 1x on each of these configs:
xfs/4k
xfs/1k
xfs/logdev
xfs/realtime
xfs/quota
xfs/v4
xfs/dax
xfs/adv
xfs/dirblock_8k
and no regressions were seen. This set has already been ack'd on the
xfs-stable list.
Let me know if you see any issues. Thanks,
Leah
Christoph Hellwig (4):
xfs: fix error returns from xfs_bmapi_write
xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
xfs: fix freeing speculative preallocations for preallocated files
Darrick J. Wong (7):
xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item
recovery
xfs: check opcode and iovec count match in
xlog_recover_attri_commit_pass2
xfs: validate recovered name buffers when recovering xattr items
xfs: revert commit 44af6c7e59b12
xfs: allow symlinks with short remote targets
xfs: allow unlinked symlinks and dirs with zero size
xfs: restrict when we try to align cow fork delalloc to cowextsz hints
Wengang Wang (1):
xfs: make sure sb_fdblocks is non-negative
Zhang Yi (4):
xfs: match lock mode in xfs_buffered_write_iomap_begin()
xfs: make the seq argument to xfs_bmapi_convert_delalloc() optional
xfs: make xfs_bmapi_convert_delalloc() to allocate the target offset
xfs: convert delayed extents to unwritten when zeroing post eof blocks
fs/xfs/libxfs/xfs_attr_remote.c | 1 -
fs/xfs/libxfs/xfs_bmap.c | 130 ++++++++++++++++++++++++++------
fs/xfs/libxfs/xfs_da_btree.c | 20 ++---
fs/xfs/libxfs/xfs_inode_buf.c | 47 ++++++++++--
fs/xfs/libxfs/xfs_sb.c | 7 +-
fs/xfs/scrub/attr.c | 5 ++
fs/xfs/xfs_aops.c | 54 ++++---------
fs/xfs/xfs_attr_item.c | 88 ++++++++++++++++++---
fs/xfs/xfs_bmap_util.c | 61 +++++++++------
fs/xfs/xfs_bmap_util.h | 2 +-
fs/xfs/xfs_dquot.c | 1 -
fs/xfs/xfs_icache.c | 2 +-
fs/xfs/xfs_inode.c | 14 +---
fs/xfs/xfs_iomap.c | 81 +++++++++++---------
fs/xfs/xfs_reflink.c | 20 -----
fs/xfs/xfs_rtalloc.c | 2 -
16 files changed, 342 insertions(+), 193 deletions(-)
--
2.49.0.906.g1f30a19c02-goog
4 months, 3 weeks
- 2
- 32
[PATCH stable 6.6 00/10] bpf: track changes_pkt_data property for global functions
by Shung-Hsi Yu
Fix the bypassing of invalid packet pointer check in 6.6 by backporting
the entire "bpf: track changes_pkt_data property for global functions"
series[1], along with the follow up, "bpf: fix NPE when computing
changes_pkt_data of program w/o subprograms" series[2]; both from
Eduard.
I had ran the BPF selftests after backporting, confirmed that newly
added BPF selftests passes, and that no new failure observed in BPF
selftests (dummy_st_ops, ns_current_pid_tgid, test_bpf_ma, and
test_bpffs are failing even without this patchset applied). See [3] for
the full log.
#50/1 changes_pkt_data_freplace/changes_pkt_data_with_changes_pkt_data:OK
#50/2 changes_pkt_data_freplace/changes_pkt_data_with_does_not_change_pkt_data:OK
#50/3 changes_pkt_data_freplace/does_not_change_pkt_data_with_changes_pkt_data:OK
#50/4 changes_pkt_data_freplace/does_not_change_pkt_data_with_does_not_change_pkt_data:OK
#50/5 changes_pkt_data_freplace/main_changes_with_changes_pkt_data:OK
#50/6 changes_pkt_data_freplace/main_changes_with_does_not_change_pkt_data:OK
#50/7 changes_pkt_data_freplace/main_does_not_change_with_changes_pkt_data:OK
#50/8 changes_pkt_data_freplace/main_does_not_change_with_does_not_change_pkt_data:OK
#395/57 verifier_sock/invalidate_pkt_pointers_from_global_func:OK
#395/58 verifier_sock/invalidate_pkt_pointers_by_tail_call:OK
1: https://lore.kernel.org/all/20241210041100.1898468-1-eddyz87@gmail.com/
2: https://lore.kernel.org/all/20241212070711.427443-1-eddyz87@gmail.com/
3: https://github.com/shunghsiyu/libbpf/actions/runs/14747347842/job/413971041…
Eduard Zingerman (10):
bpf: add find_containing_subprog() utility function
bpf: refactor bpf_helper_changes_pkt_data to use helper number
bpf: track changes_pkt_data property for global functions
selftests/bpf: test for changing packet data from global functions
bpf: check changes_pkt_data property for extension programs
selftests/bpf: freplace tests for tracking of changes_packet_data
bpf: consider that tail calls invalidate packet pointers
selftests/bpf: validate that tail call invalidates packet pointers
bpf: fix null dereference when computing changes_pkt_data of prog w/o
subprogs
selftests/bpf: extend changes_pkt_data with cases w/o subprograms
include/linux/bpf.h | 1 +
include/linux/bpf_verifier.h | 1 +
include/linux/filter.h | 2 +-
kernel/bpf/core.c | 2 +-
kernel/bpf/verifier.c | 81 +++++++++++--
net/core/filter.c | 63 +++++------
.../bpf/prog_tests/changes_pkt_data.c | 107 ++++++++++++++++++
.../selftests/bpf/progs/changes_pkt_data.c | 39 +++++++
.../bpf/progs/changes_pkt_data_freplace.c | 18 +++
.../selftests/bpf/progs/verifier_sock.c | 56 +++++++++
10 files changed, 324 insertions(+), 46 deletions(-)
create mode 100644 tools/testing/selftests/bpf/prog_tests/changes_pkt_data.c
create mode 100644 tools/testing/selftests/bpf/progs/changes_pkt_data.c
create mode 100644 tools/testing/selftests/bpf/progs/changes_pkt_data_freplace.c
--
2.49.0
4 months, 3 weeks
- 2
- 20
[PATCH 6.12.y 0/6] Bluetooth: btusb: add a bunch of USB device IDs for Qualcomm WCN785x
by Alexander Tsoy
This was tested on a device with USB ID 2c7c:0130
4 months, 3 weeks
- 2
- 12
FAILED: patch "[PATCH] comedi: jr3_pci: Fix synchronous deletion of timer" failed to apply to 5.4-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.4-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.4.y
git checkout FETCH_HEAD
git cherry-pick -x 44d9b3f584c59a606b521e7274e658d5b866c699
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025042808-vastly-armrest-7811@gregkh' --subject-prefix 'PATCH 5.4.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From 44d9b3f584c59a606b521e7274e658d5b866c699 Mon Sep 17 00:00:00 2001
From: Ian Abbott <abbotti(a)mev.co.uk>
Date: Tue, 15 Apr 2025 13:39:01 +0100
Subject: [PATCH] comedi: jr3_pci: Fix synchronous deletion of timer
When `jr3_pci_detach()` is called during device removal, it calls
`timer_delete_sync()` to stop the timer, but the timer expiry function
always reschedules the timer, so the synchronization is ineffective.
Call `timer_shutdown_sync()` instead. It does not matter that the timer
expiry function pointer is cleared, because the device is being removed.
Fixes: 07b509e6584a5 ("Staging: comedi: add jr3_pci driver")
Cc: stable <stable(a)kernel.org>
Signed-off-by: Ian Abbott <abbotti(a)mev.co.uk>
Link: https://lore.kernel.org/r/20250415123901.13483-1-abbotti@mev.co.uk
Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
diff --git a/drivers/comedi/drivers/jr3_pci.c b/drivers/comedi/drivers/jr3_pci.c
index cdc842b32bab..75dce1ff2419 100644
--- a/drivers/comedi/drivers/jr3_pci.c
+++ b/drivers/comedi/drivers/jr3_pci.c
@@ -758,7 +758,7 @@ static void jr3_pci_detach(struct comedi_device *dev)
struct jr3_pci_dev_private *devpriv = dev->private;
if (devpriv)
- timer_delete_sync(&devpriv->timer);
+ timer_shutdown_sync(&devpriv->timer);
comedi_pci_detach(dev);
}
4 months, 3 weeks
- 3
- 2
FAILED: patch "[PATCH] binder: fix offset calculation in debug log" failed to apply to 6.12-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 6.12-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.12.y
git checkout FETCH_HEAD
git cherry-pick -x 170d1a3738908eef6a0dbf378ea77fb4ae8e294d
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025042803-deflected-overdue-01a5@gregkh' --subject-prefix 'PATCH 6.12.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From 170d1a3738908eef6a0dbf378ea77fb4ae8e294d Mon Sep 17 00:00:00 2001
From: Carlos Llamas <cmllamas(a)google.com>
Date: Tue, 25 Mar 2025 18:49:00 +0000
Subject: [PATCH] binder: fix offset calculation in debug log
The vma start address should be substracted from the buffer's user data
address and not the other way around.
Cc: Tiffany Y. Yang <ynaffit(a)google.com>
Cc: stable <stable(a)kernel.org>
Fixes: 162c79731448 ("binder: avoid user addresses in debug logs")
Signed-off-by: Carlos Llamas <cmllamas(a)google.com>
Reviewed-by: Tiffany Y. Yang <ynaffit(a)google.com>
Link: https://lore.kernel.org/r/20250325184902.587138-1-cmllamas@google.com
Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
diff --git a/drivers/android/binder.c b/drivers/android/binder.c
index 76052006bd87..5fc2c8ee61b1 100644
--- a/drivers/android/binder.c
+++ b/drivers/android/binder.c
@@ -6373,7 +6373,7 @@ static void print_binder_transaction_ilocked(struct seq_file *m,
seq_printf(m, " node %d", buffer->target_node->debug_id);
seq_printf(m, " size %zd:%zd offset %lx\n",
buffer->data_size, buffer->offsets_size,
- proc->alloc.vm_start - buffer->user_data);
+ buffer->user_data - proc->alloc.vm_start);
}
static void print_binder_work_ilocked(struct seq_file *m,
4 months, 3 weeks
- 3
- 2
[PATCH stable v6.6] riscv: kprobes: Fix wrong lengths passed to patch_text_nosync()
by Nam Cao
Unlike patch_text(), patch_text_nosync() takes the length in bytes, not
number of instructions. It is therefore wrong for arch_prepare_ss_slot() to
pass length=1 while patching one instruction.
This bug was introduced by commit b1756750a397 ("riscv: kprobes: Use
patch_text_nosync() for insn slots"). It has been fixed upstream by commit
51781ce8f448 ("riscv: Pass patch_text() the length in bytes"). However,
beside fixing this bug, this commit does many other things, making it
unsuitable for backporting.
Fix it by properly passing the lengths in bytes.
Fixes: b1756750a397 ("riscv: kprobes: Use patch_text_nosync() for insn slots")
Signed-off-by: Nam Cao <namcao(a)linutronix.de>
---
arch/riscv/kernel/probes/kprobes.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/arch/riscv/kernel/probes/kprobes.c b/arch/riscv/kernel/probes/kprobes.c
index 4fbc70e823f0..dc431b965bc3 100644
--- a/arch/riscv/kernel/probes/kprobes.c
+++ b/arch/riscv/kernel/probes/kprobes.c
@@ -28,8 +28,8 @@ static void __kprobes arch_prepare_ss_slot(struct kprobe *p)
p->ainsn.api.restore = (unsigned long)p->addr + offset;
- patch_text_nosync(p->ainsn.api.insn, &p->opcode, 1);
- patch_text_nosync((void *)p->ainsn.api.insn + offset, &insn, 1);
+ patch_text_nosync(p->ainsn.api.insn, &p->opcode, offset);
+ patch_text_nosync((void *)p->ainsn.api.insn + offset, &insn, sizeof(insn));
}
static void __kprobes arch_prepare_simulate(struct kprobe *p)
--
2.39.5
4 months, 3 weeks
- 3
- 4
FAILED: patch "[PATCH] comedi: jr3_pci: Fix synchronous deletion of timer" failed to apply to 5.15-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.15-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.15.y
git checkout FETCH_HEAD
git cherry-pick -x 44d9b3f584c59a606b521e7274e658d5b866c699
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025042807-vanquish-unbeaten-57ab@gregkh' --subject-prefix 'PATCH 5.15.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From 44d9b3f584c59a606b521e7274e658d5b866c699 Mon Sep 17 00:00:00 2001
From: Ian Abbott <abbotti(a)mev.co.uk>
Date: Tue, 15 Apr 2025 13:39:01 +0100
Subject: [PATCH] comedi: jr3_pci: Fix synchronous deletion of timer
When `jr3_pci_detach()` is called during device removal, it calls
`timer_delete_sync()` to stop the timer, but the timer expiry function
always reschedules the timer, so the synchronization is ineffective.
Call `timer_shutdown_sync()` instead. It does not matter that the timer
expiry function pointer is cleared, because the device is being removed.
Fixes: 07b509e6584a5 ("Staging: comedi: add jr3_pci driver")
Cc: stable <stable(a)kernel.org>
Signed-off-by: Ian Abbott <abbotti(a)mev.co.uk>
Link: https://lore.kernel.org/r/20250415123901.13483-1-abbotti@mev.co.uk
Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
diff --git a/drivers/comedi/drivers/jr3_pci.c b/drivers/comedi/drivers/jr3_pci.c
index cdc842b32bab..75dce1ff2419 100644
--- a/drivers/comedi/drivers/jr3_pci.c
+++ b/drivers/comedi/drivers/jr3_pci.c
@@ -758,7 +758,7 @@ static void jr3_pci_detach(struct comedi_device *dev)
struct jr3_pci_dev_private *devpriv = dev->private;
if (devpriv)
- timer_delete_sync(&devpriv->timer);
+ timer_shutdown_sync(&devpriv->timer);
comedi_pci_detach(dev);
}
4 months, 3 weeks
- 3
- 2
FAILED: patch "[PATCH] comedi: jr3_pci: Fix synchronous deletion of timer" failed to apply to 5.10-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.10-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.10.y
git checkout FETCH_HEAD
git cherry-pick -x 44d9b3f584c59a606b521e7274e658d5b866c699
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025042808-difficult-germicide-075a@gregkh' --subject-prefix 'PATCH 5.10.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From 44d9b3f584c59a606b521e7274e658d5b866c699 Mon Sep 17 00:00:00 2001
From: Ian Abbott <abbotti(a)mev.co.uk>
Date: Tue, 15 Apr 2025 13:39:01 +0100
Subject: [PATCH] comedi: jr3_pci: Fix synchronous deletion of timer
When `jr3_pci_detach()` is called during device removal, it calls
`timer_delete_sync()` to stop the timer, but the timer expiry function
always reschedules the timer, so the synchronization is ineffective.
Call `timer_shutdown_sync()` instead. It does not matter that the timer
expiry function pointer is cleared, because the device is being removed.
Fixes: 07b509e6584a5 ("Staging: comedi: add jr3_pci driver")
Cc: stable <stable(a)kernel.org>
Signed-off-by: Ian Abbott <abbotti(a)mev.co.uk>
Link: https://lore.kernel.org/r/20250415123901.13483-1-abbotti@mev.co.uk
Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
diff --git a/drivers/comedi/drivers/jr3_pci.c b/drivers/comedi/drivers/jr3_pci.c
index cdc842b32bab..75dce1ff2419 100644
--- a/drivers/comedi/drivers/jr3_pci.c
+++ b/drivers/comedi/drivers/jr3_pci.c
@@ -758,7 +758,7 @@ static void jr3_pci_detach(struct comedi_device *dev)
struct jr3_pci_dev_private *devpriv = dev->private;
if (devpriv)
- timer_delete_sync(&devpriv->timer);
+ timer_shutdown_sync(&devpriv->timer);
comedi_pci_detach(dev);
}
4 months, 3 weeks
- 3
- 2
[to-be-updated] mm-userfaultfd-prevent-busy-looping-for-tasks-with-signals-pending.patch removed from -mm tree
by Andrew Morton
The quilt patch titled
Subject: mm/userfaultfd: prevent busy looping for tasks with signals pending
has been removed from the -mm tree. Its filename was
mm-userfaultfd-prevent-busy-looping-for-tasks-with-signals-pending.patch
This patch was dropped because an updated version will be issued
------------------------------------------------------
From: Jens Axboe <axboe(a)kernel.dk>
Subject: mm/userfaultfd: prevent busy looping for tasks with signals pending
Date: Wed, 23 Apr 2025 17:37:06 -0600
userfaultfd may use interruptible sleeps to wait on userspace filling a
page fault, which works fine if the task can be reliably put to sleeping
waiting for that. However, if the task has a normal (ie non-fatal) signal
pending, then TASK_INTERRUPTIBLE sleep will simply cause schedule() to be
a no-op.
For a task that registers a page with userfaultfd and then proceeds to do
a write from it, if that task also has a signal pending then it'll
essentially busy loop from do_page_fault() -> handle_userfault() until
that fault has been filled. Normally it'd be expected that the task would
sleep until that happens. Here's a trace from an application doing just
that:
handle_userfault+0x4b8/0xa00 (P)
hugetlb_fault+0xe24/0x1060
handle_mm_fault+0x2bc/0x318
do_page_fault+0x1e8/0x6f0
do_translation_fault+0x9c/0xd0
do_mem_abort+0x44/0xa0
el1_abort+0x3c/0x68
el1h_64_sync_handler+0xd4/0x100
el1h_64_sync+0x6c/0x70
fault_in_readable+0x74/0x108 (P)
iomap_file_buffered_write+0x14c/0x438
blkdev_write_iter+0x1a8/0x340
vfs_write+0x20c/0x348
ksys_write+0x64/0x108
__arm64_sys_write+0x1c/0x38
where the task is looping with 100% CPU time in the above mentioned fault
path.
Since it's impossible to handle signals, or other conditions like
TIF_NOTIFY_SIGNAL that also prevents interruptible sleeping, from the
fault path, use TASK_UNINTERRUPTIBLE with a short timeout even for vmf
modes that would normally ask for INTERRUPTIBLE or KILLABLE sleep. Fatal
signals will still be handled by the caller, and the timeout is short
enough to hopefully not cause any issues. If this is the first invocation
of this fault, eg FAULT_FLAG_TRIED isn't set, then the normal sleep mode
is used.
Link: https://lkml.kernel.org/r/27c3a7f5-aad8-4f2a-a66e-ff5ae98f31eb@kernel.dk
Fixes: 4064b9827063 ("mm: allow VM_FAULT_RETRY for multiple times")
Signed-off-by: Jens Axboe <axboe(a)kernel.dk>
Reported-by: Zhiwei Jiang <qq282012236(a)gmail.com>
Closes: https://lore.kernel.org/io-uring/20250422162913.1242057-1-qq282012236@gmail…
Acked-by: Johannes Weiner <hannes(a)cmpxchg.org>
Cc: Peter Xu <peterx(a)redhat.com>
Cc: Matthew Wilcox <willy(a)infradead.org>
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
fs/userfaultfd.c | 34 ++++++++++++++++++++++++++--------
1 file changed, 26 insertions(+), 8 deletions(-)
--- a/fs/userfaultfd.c~mm-userfaultfd-prevent-busy-looping-for-tasks-with-signals-pending
+++ a/fs/userfaultfd.c
@@ -334,15 +334,29 @@ out:
return ret;
}
-static inline unsigned int userfaultfd_get_blocking_state(unsigned int flags)
+struct userfault_wait {
+ unsigned int task_state;
+ bool timeout;
+};
+
+static struct userfault_wait userfaultfd_get_blocking_state(unsigned int flags)
{
+ /*
+ * If the fault has already been tried AND there's a signal pending
+ * for this task, use TASK_UNINTERRUPTIBLE with a small timeout.
+ * This prevents busy looping where schedule() otherwise does nothing
+ * for TASK_INTERRUPTIBLE when the task has a signal pending.
+ */
+ if ((flags & FAULT_FLAG_TRIED) && signal_pending(current))
+ return (struct userfault_wait) { TASK_UNINTERRUPTIBLE, true };
+
if (flags & FAULT_FLAG_INTERRUPTIBLE)
- return TASK_INTERRUPTIBLE;
+ return (struct userfault_wait) { TASK_INTERRUPTIBLE, false };
if (flags & FAULT_FLAG_KILLABLE)
- return TASK_KILLABLE;
+ return (struct userfault_wait) { TASK_KILLABLE, false };
- return TASK_UNINTERRUPTIBLE;
+ return (struct userfault_wait) { TASK_UNINTERRUPTIBLE, false };
}
/*
@@ -368,7 +382,7 @@ vm_fault_t handle_userfault(struct vm_fa
struct userfaultfd_wait_queue uwq;
vm_fault_t ret = VM_FAULT_SIGBUS;
bool must_wait;
- unsigned int blocking_state;
+ struct userfault_wait wait_mode;
/*
* We don't do userfault handling for the final child pid update
@@ -466,7 +480,7 @@ vm_fault_t handle_userfault(struct vm_fa
uwq.ctx = ctx;
uwq.waken = false;
- blocking_state = userfaultfd_get_blocking_state(vmf->flags);
+ wait_mode = userfaultfd_get_blocking_state(vmf->flags);
/*
* Take the vma lock now, in order to safely call
@@ -488,7 +502,7 @@ vm_fault_t handle_userfault(struct vm_fa
* following the spin_unlock to happen before the list_add in
* __add_wait_queue.
*/
- set_current_state(blocking_state);
+ set_current_state(wait_mode.task_state);
spin_unlock_irq(&ctx->fault_pending_wqh.lock);
if (!is_vm_hugetlb_page(vma))
@@ -501,7 +515,11 @@ vm_fault_t handle_userfault(struct vm_fa
if (likely(must_wait && !READ_ONCE(ctx->released))) {
wake_up_poll(&ctx->fd_wqh, EPOLLIN);
- schedule();
+ /* See comment in userfaultfd_get_blocking_state() */
+ if (!wait_mode.timeout)
+ schedule();
+ else
+ schedule_timeout(HZ / 10);
}
__set_current_state(TASK_RUNNING);
_
Patches currently in -mm which might be from axboe(a)kernel.dk are
4 months, 3 weeks
- 1
- 0