[PATCH] PCI: j721e: Fix module autoloading
by Siddharth Vadapalli
Commit under Fixes added support to build the driver as a loadable
module. However, it did not add MODULE_DEVICE_TABLE() which is required
for autoloading the driver when it is built as a loadable module.
Fix it.
Fixes: a2790bf81f0f ("PCI: j721e: Add support to build as a loadable module")
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Siddharth Vadapalli <s-vadapalli(a)ti.com>
---
Hello,
This patch is based on commit
b320789d6883 Linux 6.17-rc4
of Mainline Linux.
Patch has been tested on J7200-EVM with the driver configs set to 'm'.
The pci-j721e.c driver is autoloaded as Linux boots and it doesn't need
to be manually probed. Logs:
https://gist.github.com/Siddharth-Vadapalli-at-TI/f64eed4df6fd4f714747b3c7e…
Regards,
Siddharth.
drivers/pci/controller/cadence/pci-j721e.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/drivers/pci/controller/cadence/pci-j721e.c b/drivers/pci/controller/cadence/pci-j721e.c
index 6c93f39d0288..cfca13a4c840 100644
--- a/drivers/pci/controller/cadence/pci-j721e.c
+++ b/drivers/pci/controller/cadence/pci-j721e.c
@@ -440,6 +440,7 @@ static const struct of_device_id of_j721e_pcie_match[] = {
},
{},
};
+MODULE_DEVICE_TABLE(of, of_j721e_pcie_match);
static int j721e_pcie_probe(struct platform_device *pdev)
{
--
2.43.0
2 weeks, 5 days
- 2
- 1
[PATCH 0/2] Backport request: mcp2221 needed to access eeprom data
by Romain Sioen
Hi maintainers,
Please consider backporting the following patches to the stable trees.
These patches fix a significant reading issue with mcp2221 on i2c eeprom.
I have confirmed that the patches applie cleanly and build successfully
against v6.6, v6.1, v5.15 and v5.10 stable branches.
I will later come back to you with other patches that might need larger
backport changes.
Thanks,
Romain
Hamish Martin (2):
HID: mcp2221: Don't set bus speed on every transfer
HID: mcp2221: Handle reads greater than 60 bytes
drivers/hid/hid-mcp2221.c | 71 +++++++++++++++++++++++++++------------
1 file changed, 49 insertions(+), 22 deletions(-)
--
2.48.1
2 weeks, 5 days
- 1
- 2
5.10 backport request: ASoC: Intel: sof_rt5682: shrink platform_id names below 20 characters
by Michał Górny
Hello,
I would like to request backporting the following patch to 5.10 series:
590cfb082837cc6c0c595adf1711330197c86a58
ASoC: Intel: sof_rt5682: shrink platform_id names below 20 characters
The patch seems to be already present in 5.15 and newer branches, and
its lack seems to be causing out-of-bounds read. I've hit it in the
wild while trying to install 5.10.241 on i686:
sh /var/tmp/portage/sys-kernel/gentoo-kernel-5.10.241/work/linux-5.10/scripts/depmod.sh depmod 5.10.241-gentoo-dist
depmod: FATAL: Module index: bad character '�'=0x80 - only 7-bit ASCII is supported:
platform:jsl_rt5682_max98360ax�
TIA.
--
Best regards,
Michał Górny
2 weeks, 5 days
- 3
- 17
[PATCH v4 2/4] x86/cpu/topology: Always try cpu_parse_topology_ext() on AMD/Hygon
by K Prateek Nayak
Support for parsing the topology on AMD/Hygon processors using CPUID
leaf 0xb was added in commit 3986a0a805e6 ("x86/CPU/AMD: Derive CPU
topology from CPUID function 0xB when available"). In an effort to keep
all the topology parsing bits in one place, this commit also introduced
a pseudo dependency on the TOPOEXT feature to parse the CPUID leaf 0xb.
TOPOEXT feature (CPUID 0x80000001 ECX[22]) advertises the support for
Cache Properties leaf 0x8000001d and the CPUID leaf 0x8000001e EAX for
"Extended APIC ID" however support for 0xb was introduced alongside the
x2APIC support not only on AMD [1], but also historically on x86 [2].
Similar to 0xb, the support for extended CPU topology leaf 0x80000026
too does not depend on the TOPOEXT feature.
The support for these leaves is expected to be confirmed by ensuring
"leaf <= {extended_}cpuid_level" and then parsing the level 0 of the
respective leaf to confirm EBX[15:0] (LogProcAtThisLevel) is non-zero as
stated in the definition of "CPUID_Fn0000000B_EAX_x00 [Extended Topology
Enumeration] (Core::X86::Cpuid::ExtTopEnumEax0)" in Processor
Programming Reference (PPR) for AMD Family 19h Model 01h Rev B1 Vol1 [3]
Sec. 2.1.15.1 "CPUID Instruction Functions".
This has not been a problem on baremetal platforms since support for
TOPOEXT (Fam 0x15 and later) predates the support for CPUID leaf 0xb
(Fam 0x17[Zen2] and later), however, for AMD guests on QEMU, "x2apic"
feature can be enabled independent of the "topoext" feature where QEMU
expects topology and the initial APICID to be parsed using the CPUID
leaf 0xb (especially when number of cores > 255) which is populated
independent of the "topoext" feature flag.
Unconditionally call cpu_parse_topology_ext() on AMD and Hygon
processors to first parse the topology using the XTOPOLOGY leaves
(0x80000026 / 0xb) before using the TOPOEXT leaf (0x8000001e).
Cc: stable(a)vger.kernel.org # Only v6.9 and above
Link: https://lore.kernel.org/lkml/1529686927-7665-1-git-send-email-suravee.suthi… [1]
Link: https://lore.kernel.org/lkml/20080818181435.523309000@linux-os.sc.intel.com/ [2]
Link: https://bugzilla.kernel.org/show_bug.cgi?id=206537 [3]
Suggested-by: Naveen N Rao (AMD) <naveen(a)kernel.org>
Fixes: 3986a0a805e6 ("x86/CPU/AMD: Derive CPU topology from CPUID function 0xB when available")
Signed-off-by: K Prateek Nayak <kprateek.nayak(a)amd.com>
---
Changelog v3..v4:
o Quoted relevant section of the PPR justifying the changes.
o Moved this patch up ahead.
o Cc'd stable and made a note that backports should target v6.9 and
above since this depends on the x86 topology rewrite.
---
arch/x86/kernel/cpu/topology_amd.c | 8 ++------
1 file changed, 2 insertions(+), 6 deletions(-)
diff --git a/arch/x86/kernel/cpu/topology_amd.c b/arch/x86/kernel/cpu/topology_amd.c
index 827dd0dbb6e9..4e3134a5550c 100644
--- a/arch/x86/kernel/cpu/topology_amd.c
+++ b/arch/x86/kernel/cpu/topology_amd.c
@@ -175,18 +175,14 @@ static void topoext_fixup(struct topo_scan *tscan)
static void parse_topology_amd(struct topo_scan *tscan)
{
- bool has_topoext = false;
-
/*
- * If the extended topology leaf 0x8000_001e is available
- * try to get SMT, CORE, TILE, and DIE shifts from extended
+ * Try to get SMT, CORE, TILE, and DIE shifts from extended
* CPUID leaf 0x8000_0026 on supported processors first. If
* extended CPUID leaf 0x8000_0026 is not supported, try to
* get SMT and CORE shift from leaf 0xb first, then try to
* get the CORE shift from leaf 0x8000_0008.
*/
- if (cpu_feature_enabled(X86_FEATURE_TOPOEXT))
- has_topoext = cpu_parse_topology_ext(tscan);
+ bool has_topoext = cpu_parse_topology_ext(tscan);
if (cpu_feature_enabled(X86_FEATURE_AMD_HTR_CORES))
tscan->c->topo.cpu_type = cpuid_ebx(0x80000026);
--
2.34.1
2 weeks, 5 days
- 2
- 3
[PATCH v2 0/4] nios2: Add architecture support for clone3
by Simon Schuster via B4 Relay
This series adds support for the clone3 system call to the nios2
architecture. This addresses the build-time warning "warning: clone3()
entry point is missing, please fix" introduced in 505d66d1abfb9
("clone3: drop __ARCH_WANT_SYS_CLONE3 macro"). The implementation passes
the relevant clone3 tests of kselftest when applied on top of
next-20250815:
./run_kselftest.sh
TAP version 13
1..4
# selftests: clone3: clone3
ok 1 selftests: clone3: clone3
# selftests: clone3: clone3_clear_sighand
ok 2 selftests: clone3: clone3_clear_sighand
# selftests: clone3: clone3_set_tid
ok 3 selftests: clone3: clone3_set_tid
# selftests: clone3: clone3_cap_checkpoint_restore
ok 4 selftests: clone3: clone3_cap_checkpoint_restore
The series also includes a small patch to kernel/fork.c that ensures
that clone_flags are passed correctly on architectures where unsigned
long is insufficient to store the u64 clone_flags. It is marked as a fix
for stable backporting.
As requested, in v2, this series now further tries to correct this type
error throughout the whole code base. Thus, it now touches a larger
number of subsystems and all architectures.
Therefore, another test was performed for ARCH=x86_64 (as a
representative for 64-bit architectures). Here, the series builds cleanly
without warnings on defconfig with CONFIG_SECURITY_APPARMOR=y and
CONFIG_SECURITY_TOMOYO=y (to compile-check the LSM-related changes).
The build further successfully passes testing/selftests/clone3 (with the
patch from 20241105062948.1037011-1-zhouyuhang1010(a)163.com to prepare
clone3_cap_checkpoint_restore for compatibility with the newer libcap
version on my system).
Is there any option to further preflight check this patch series via
lkp/KernelCI/etc. for a broader test across architectures, or is this
degree of testing sufficient to eventually get the series merged?
N.B.: The series is not checkpatch clean right now:
- include/linux/cred.h, include/linux/mnt_namespace.h:
function definition arguments without identifier name
- include/trace/events/task.h:
space prohibited after that open parenthesis
I did not fix these warnings to keep my changes minimal and reviewable,
as the issues persist throughout the files and they were not introduced
by me; I only followed the existing code style and just replaced the
types. If desired, I'd be happy to make the changes in a potential v3,
though.
Signed-off-by: Simon Schuster <schuster.simon(a)siemens-energy.com>
---
Changes in v2:
- Introduce "Fixes:" and "Cc: stable(a)vger.kernel.org" where necessary
- Factor out "Fixes:" when adapting the datatype of clone_flags for
easier backports
- Fix additional instances where `unsigned long` clone_flags is used
- Reword commit message to make it clearer that any 32-bit arch is
affected by this bug
- Link to v1: https://lore.kernel.org/r/20250821-nios2-implement-clone3-v1-0-1bb24017376a…
---
Simon Schuster (4):
copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64)
copy_process: pass clone_flags as u64 across calltree
arch: copy_thread: pass clone_flags as u64
nios2: implement architecture-specific portion of sys_clone3
arch/alpha/kernel/process.c | 2 +-
arch/arc/kernel/process.c | 2 +-
arch/arm/kernel/process.c | 2 +-
arch/arm64/kernel/process.c | 2 +-
arch/csky/kernel/process.c | 2 +-
arch/hexagon/kernel/process.c | 2 +-
arch/loongarch/kernel/process.c | 2 +-
arch/m68k/kernel/process.c | 2 +-
arch/microblaze/kernel/process.c | 2 +-
arch/mips/kernel/process.c | 2 +-
arch/nios2/include/asm/syscalls.h | 1 +
arch/nios2/include/asm/unistd.h | 2 --
arch/nios2/kernel/entry.S | 6 ++++++
arch/nios2/kernel/process.c | 2 +-
arch/nios2/kernel/syscall_table.c | 1 +
arch/openrisc/kernel/process.c | 2 +-
arch/parisc/kernel/process.c | 2 +-
arch/powerpc/kernel/process.c | 2 +-
arch/riscv/kernel/process.c | 2 +-
arch/s390/kernel/process.c | 2 +-
arch/sh/kernel/process_32.c | 2 +-
arch/sparc/kernel/process_32.c | 2 +-
arch/sparc/kernel/process_64.c | 2 +-
arch/um/kernel/process.c | 2 +-
arch/x86/include/asm/fpu/sched.h | 2 +-
arch/x86/include/asm/shstk.h | 4 ++--
arch/x86/kernel/fpu/core.c | 2 +-
arch/x86/kernel/process.c | 2 +-
arch/x86/kernel/shstk.c | 2 +-
arch/xtensa/kernel/process.c | 2 +-
block/blk-ioc.c | 2 +-
fs/namespace.c | 2 +-
include/linux/cgroup.h | 4 ++--
include/linux/cred.h | 2 +-
include/linux/iocontext.h | 6 +++---
include/linux/ipc_namespace.h | 4 ++--
include/linux/lsm_hook_defs.h | 2 +-
include/linux/mnt_namespace.h | 2 +-
include/linux/nsproxy.h | 2 +-
include/linux/pid_namespace.h | 4 ++--
include/linux/rseq.h | 4 ++--
include/linux/sched/task.h | 2 +-
include/linux/security.h | 4 ++--
include/linux/sem.h | 4 ++--
include/linux/time_namespace.h | 4 ++--
include/linux/uprobes.h | 4 ++--
include/linux/user_events.h | 4 ++--
include/linux/utsname.h | 4 ++--
include/net/net_namespace.h | 4 ++--
include/trace/events/task.h | 6 +++---
ipc/namespace.c | 2 +-
ipc/sem.c | 2 +-
kernel/cgroup/namespace.c | 2 +-
kernel/cred.c | 2 +-
kernel/events/uprobes.c | 2 +-
kernel/fork.c | 10 +++++-----
kernel/nsproxy.c | 4 ++--
kernel/pid_namespace.c | 2 +-
kernel/sched/core.c | 4 ++--
kernel/sched/fair.c | 2 +-
kernel/sched/sched.h | 4 ++--
kernel/time/namespace.c | 2 +-
kernel/utsname.c | 2 +-
net/core/net_namespace.c | 2 +-
security/apparmor/lsm.c | 2 +-
security/security.c | 2 +-
security/selinux/hooks.c | 2 +-
security/tomoyo/tomoyo.c | 2 +-
68 files changed, 95 insertions(+), 89 deletions(-)
---
base-commit: 1357b2649c026b51353c84ddd32bc963e8999603
change-id: 20250818-nios2-implement-clone3-7f252c20860b
Best regards,
--
Simon Schuster <schuster.simon(a)siemens-energy.com>
2 weeks, 5 days
- 4
- 5
[PATCH v2] mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing
by A. Sverdlin
From: Alexander Sverdlin <alexander.sverdlin(a)siemens.com>
Having setup time 0 violates tAR, tCLR of some chips, for instance
TOSHIBA TC58NVG2S3ETAI0 cannot be detected successfully (first ID byte
being read duplicated, i.e. 98 98 dc 90 15 76 14 03 instead of
98 dc 90 15 76 ...).
Atmel Application Notes postulated 1 cycle NRD_SETUP without explanation
[1], but it looks more appropriate to just calculate setup time properly.
[1] Link: https://ww1.microchip.com/downloads/aemDocuments/documents/MPU32/Applicatio…
Cc: stable(a)vger.kernel.org
Fixes: f9ce2eddf176 ("mtd: nand: atmel: Add ->setup_data_interface() hooks")
Signed-off-by: Alexander Sverdlin <alexander.sverdlin(a)siemens.com>
---
v2:
- Cc'ed stable
- reformatted atmel_smc_cs_conf_set_setup() call
- rebased onto mtd/fixes
drivers/mtd/nand/raw/atmel/nand-controller.c | 16 +++++++++++++---
1 file changed, 13 insertions(+), 3 deletions(-)
diff --git a/drivers/mtd/nand/raw/atmel/nand-controller.c b/drivers/mtd/nand/raw/atmel/nand-controller.c
index dedcca87defc7..ad0eff385e123 100644
--- a/drivers/mtd/nand/raw/atmel/nand-controller.c
+++ b/drivers/mtd/nand/raw/atmel/nand-controller.c
@@ -1377,14 +1377,24 @@ static int atmel_smc_nand_prepare_smcconf(struct atmel_nand *nand,
if (ret)
return ret;
+ /*
+ * Read setup timing depends on the operation done on the NAND:
+ *
+ * NRD_SETUP = max(tAR, tCLR)
+ */
+ timeps = max(conf->timings.sdr.tAR_min, conf->timings.sdr.tCLR_min);
+ ncycles = DIV_ROUND_UP(timeps, mckperiodps);
+ totalcycles += ncycles;
+ ret = atmel_smc_cs_conf_set_setup(smcconf, ATMEL_SMC_NRD_SHIFT, ncycles);
+ if (ret)
+ return ret;
+
/*
* The read cycle timing is directly matching tRC, but is also
* dependent on the setup and hold timings we calculated earlier,
* which gives:
*
- * NRD_CYCLE = max(tRC, NRD_PULSE + NRD_HOLD)
- *
- * NRD_SETUP is always 0.
+ * NRD_CYCLE = max(tRC, NRD_SETUP + NRD_PULSE + NRD_HOLD)
*/
ncycles = DIV_ROUND_UP(conf->timings.sdr.tRC_min, mckperiodps);
ncycles = max(totalcycles, ncycles);
--
2.50.1
2 weeks, 5 days
- 4
- 6
[PATCH] mtd: rawnand: stm32_fmc2: fix ECC overwrite
by Christophe Kerello
In case OOB write is requested during a data write, ECC is currently
lost. Avoid this issue by only writing in the free spare area.
This issue has been seen with a YAFFS2 file system.
Signed-off-by: Christophe Kerello <christophe.kerello(a)foss.st.com>
Cc: stable(a)vger.kernel.org
Fixes: 2cd457f328c1 ("mtd: rawnand: stm32_fmc2: add STM32 FMC2 NAND flash controller driver")
---
drivers/mtd/nand/raw/stm32_fmc2_nand.c | 18 +++++++++++++++---
1 file changed, 15 insertions(+), 3 deletions(-)
diff --git a/drivers/mtd/nand/raw/stm32_fmc2_nand.c b/drivers/mtd/nand/raw/stm32_fmc2_nand.c
index a960403081f11091837b73b8610231fe421d0c05..f84f23392fa441327bec90ba12a2a57d825d9330 100644
--- a/drivers/mtd/nand/raw/stm32_fmc2_nand.c
+++ b/drivers/mtd/nand/raw/stm32_fmc2_nand.c
@@ -996,9 +996,21 @@ static int stm32_fmc2_nfc_seq_write(struct nand_chip *chip, const u8 *buf,
/* Write oob */
if (oob_required) {
- ret = nand_change_write_column_op(chip, mtd->writesize,
- chip->oob_poi, mtd->oobsize,
- false);
+ unsigned int offset_in_page = mtd->writesize;
+ const void *buf = chip->oob_poi;
+ unsigned int len = mtd->oobsize;
+
+ if (!raw) {
+ struct mtd_oob_region oob_free;
+
+ mtd_ooblayout_free(mtd, 0, &oob_free);
+ offset_in_page += oob_free.offset;
+ buf += oob_free.offset;
+ len = oob_free.length;
+ }
+
+ ret = nand_change_write_column_op(chip, offset_in_page,
+ buf, len, false);
if (ret)
return ret;
}
---
base-commit: fb2fae70e7e985c4acb1ad96110d8b98bb64a87c
change-id: 20250811-fix-ecc-overwrite-9962b7797746
Best regards,
--
Christophe Kerello <christophe.kerello(a)foss.st.com>
2 weeks, 5 days
- 2
- 1
[PATCH] mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer
by Christophe Kerello
Avoid below overlapping mappings by using a contiguous
non-cacheable buffer.
[ 4.077708] DMA-API: stm32_fmc2_nfc 48810000.nand-controller: cacheline tracking EEXIST,
overlapping mappings aren't supported
[ 4.089103] WARNING: CPU: 1 PID: 44 at kernel/dma/debug.c:568 add_dma_entry+0x23c/0x300
[ 4.097071] Modules linked in:
[ 4.100101] CPU: 1 PID: 44 Comm: kworker/u4:2 Not tainted 6.1.82 #1
[ 4.106346] Hardware name: STMicroelectronics STM32MP257F VALID1 SNOR / MB1704 (LPDDR4 Power discrete) + MB1703 + MB1708 (SNOR MB1730) (DT)
[ 4.118824] Workqueue: events_unbound deferred_probe_work_func
[ 4.124674] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[ 4.131624] pc : add_dma_entry+0x23c/0x300
[ 4.135658] lr : add_dma_entry+0x23c/0x300
[ 4.139792] sp : ffff800009dbb490
[ 4.143016] x29: ffff800009dbb4a0 x28: 0000000004008022 x27: ffff8000098a6000
[ 4.150174] x26: 0000000000000000 x25: ffff8000099e7000 x24: ffff8000099e7de8
[ 4.157231] x23: 00000000ffffffff x22: 0000000000000000 x21: ffff8000098a6a20
[ 4.164388] x20: ffff000080964180 x19: ffff800009819ba0 x18: 0000000000000006
[ 4.171545] x17: 6361727420656e69 x16: 6c6568636163203a x15: 72656c6c6f72746e
[ 4.178602] x14: 6f632d646e616e2e x13: ffff800009832f58 x12: 00000000000004ec
[ 4.185759] x11: 00000000000001a4 x10: ffff80000988af58 x9 : ffff800009832f58
[ 4.192916] x8 : 00000000ffffefff x7 : ffff80000988af58 x6 : 80000000fffff000
[ 4.199972] x5 : 000000000000bff4 x4 : 0000000000000000 x3 : 0000000000000000
[ 4.207128] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000812d2c40
[ 4.214185] Call trace:
[ 4.216605] add_dma_entry+0x23c/0x300
[ 4.220338] debug_dma_map_sg+0x198/0x350
[ 4.224373] __dma_map_sg_attrs+0xa0/0x110
[ 4.228411] dma_map_sg_attrs+0x10/0x2c
[ 4.232247] stm32_fmc2_nfc_xfer.isra.0+0x1c8/0x3fc
[ 4.237088] stm32_fmc2_nfc_seq_read_page+0xc8/0x174
[ 4.242127] nand_read_oob+0x1d4/0x8e0
[ 4.245861] mtd_read_oob_std+0x58/0x84
[ 4.249596] mtd_read_oob+0x90/0x150
[ 4.253231] mtd_read+0x68/0xac
Signed-off-by: Christophe Kerello <christophe.kerello(a)foss.st.com>
Cc: stable(a)vger.kernel.org
Fixes: 2cd457f328c1 ("mtd: rawnand: stm32_fmc2: add STM32 FMC2 NAND flash controller driver")
---
drivers/mtd/nand/raw/stm32_fmc2_nand.c | 28 +++++++++-------------------
1 file changed, 9 insertions(+), 19 deletions(-)
diff --git a/drivers/mtd/nand/raw/stm32_fmc2_nand.c b/drivers/mtd/nand/raw/stm32_fmc2_nand.c
index a960403081f11091837b73b8610231fe421d0c05..222c3c3b684841879a55835e802dcf9983860c28 100644
--- a/drivers/mtd/nand/raw/stm32_fmc2_nand.c
+++ b/drivers/mtd/nand/raw/stm32_fmc2_nand.c
@@ -272,6 +272,7 @@ struct stm32_fmc2_nfc {
struct sg_table dma_data_sg;
struct sg_table dma_ecc_sg;
u8 *ecc_buf;
+ dma_addr_t dma_ecc_addr;
int dma_ecc_len;
u32 tx_dma_max_burst;
u32 rx_dma_max_burst;
@@ -902,17 +903,10 @@ static int stm32_fmc2_nfc_xfer(struct nand_chip *chip, const u8 *buf,
if (!write_data && !raw) {
/* Configure DMA ECC status */
- p = nfc->ecc_buf;
for_each_sg(nfc->dma_ecc_sg.sgl, sg, eccsteps, s) {
- sg_set_buf(sg, p, nfc->dma_ecc_len);
- p += nfc->dma_ecc_len;
- }
-
- ret = dma_map_sg(nfc->dev, nfc->dma_ecc_sg.sgl,
- eccsteps, dma_data_dir);
- if (!ret) {
- ret = -EIO;
- goto err_unmap_data;
+ sg_dma_address(sg) = nfc->dma_ecc_addr +
+ s * nfc->dma_ecc_len;
+ sg_dma_len(sg) = nfc->dma_ecc_len;
}
desc_ecc = dmaengine_prep_slave_sg(nfc->dma_ecc_ch,
@@ -921,7 +915,7 @@ static int stm32_fmc2_nfc_xfer(struct nand_chip *chip, const u8 *buf,
DMA_PREP_INTERRUPT);
if (!desc_ecc) {
ret = -ENOMEM;
- goto err_unmap_ecc;
+ goto err_unmap_data;
}
reinit_completion(&nfc->dma_ecc_complete);
@@ -929,7 +923,7 @@ static int stm32_fmc2_nfc_xfer(struct nand_chip *chip, const u8 *buf,
desc_ecc->callback_param = &nfc->dma_ecc_complete;
ret = dma_submit_error(dmaengine_submit(desc_ecc));
if (ret)
- goto err_unmap_ecc;
+ goto err_unmap_data;
dma_async_issue_pending(nfc->dma_ecc_ch);
}
@@ -949,7 +943,7 @@ static int stm32_fmc2_nfc_xfer(struct nand_chip *chip, const u8 *buf,
if (!write_data && !raw)
dmaengine_terminate_all(nfc->dma_ecc_ch);
ret = -ETIMEDOUT;
- goto err_unmap_ecc;
+ goto err_unmap_data;
}
/* Wait DMA data transfer completion */
@@ -969,11 +963,6 @@ static int stm32_fmc2_nfc_xfer(struct nand_chip *chip, const u8 *buf,
}
}
-err_unmap_ecc:
- if (!write_data && !raw)
- dma_unmap_sg(nfc->dev, nfc->dma_ecc_sg.sgl,
- eccsteps, dma_data_dir);
-
err_unmap_data:
dma_unmap_sg(nfc->dev, nfc->dma_data_sg.sgl, eccsteps, dma_data_dir);
@@ -1610,7 +1599,8 @@ static int stm32_fmc2_nfc_dma_setup(struct stm32_fmc2_nfc *nfc)
return ret;
/* Allocate a buffer to store ECC status registers */
- nfc->ecc_buf = devm_kzalloc(nfc->dev, FMC2_MAX_ECC_BUF_LEN, GFP_KERNEL);
+ nfc->ecc_buf = dmam_alloc_coherent(nfc->dev, FMC2_MAX_ECC_BUF_LEN,
+ &nfc->dma_ecc_addr, GFP_KERNEL);
if (!nfc->ecc_buf)
return -ENOMEM;
---
base-commit: fb2fae70e7e985c4acb1ad96110d8b98bb64a87c
change-id: 20250811-fix-dma-overlapping-1c8fba7fd519
Best regards,
--
Christophe Kerello <christophe.kerello(a)foss.st.com>
2 weeks, 5 days
- 2
- 1
UDF failures in 5.15
by Jan Kara
Hello,
Henrik notified me that UDF in 5.15 kernel is failing for him, likely
because commit 1ea1cd11c72d ("udf: Fix directory iteration for longer tail
extents") is missing 5.15 stable tree. Basically wherever d16076d9b684b got
backported, 1ea1cd11c72d needs to be backported as well (I'm sorry for
forgetting to add proper Fixes tag back then).
Honza
--
Jan Kara <jack(a)suse.com>
SUSE Labs, CR
2 weeks, 5 days
- 2
- 1
[PATCH] accel/ivpu: Prevent recovery work from being queued during device removal
by Jacek Lawrynowicz
From: Karol Wachowski <karol.wachowski(a)intel.com>
Use disable_work_sync() instead of cancel_work_sync() in ivpu_dev_fini()
to ensure that no new recovery work items can be queued after device
removal has started. Previously, recovery work could be scheduled even
after canceling existing work, potentially leading to use-after-free
bugs if recovery accessed freed resources.
Rename ivpu_pm_cancel_recovery() to ivpu_pm_disable_recovery() to better
reflect its new behavior.
Fixes: 58cde80f45a2 ("accel/ivpu: Use dedicated work for job timeout detection")
Cc: <stable(a)vger.kernel.org> # v6.8+
Signed-off-by: Karol Wachowski <karol.wachowski(a)intel.com>
Signed-off-by: Jacek Lawrynowicz <jacek.lawrynowicz(a)linux.intel.com>
---
drivers/accel/ivpu/ivpu_drv.c | 2 +-
drivers/accel/ivpu/ivpu_pm.c | 4 ++--
drivers/accel/ivpu/ivpu_pm.h | 2 +-
3 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/drivers/accel/ivpu/ivpu_drv.c b/drivers/accel/ivpu/ivpu_drv.c
index 3d6d52492536a..3289751b47573 100644
--- a/drivers/accel/ivpu/ivpu_drv.c
+++ b/drivers/accel/ivpu/ivpu_drv.c
@@ -677,7 +677,7 @@ static void ivpu_bo_unbind_all_user_contexts(struct ivpu_device *vdev)
static void ivpu_dev_fini(struct ivpu_device *vdev)
{
ivpu_jobs_abort_all(vdev);
- ivpu_pm_cancel_recovery(vdev);
+ ivpu_pm_disable_recovery(vdev);
ivpu_pm_disable(vdev);
ivpu_prepare_for_reset(vdev);
ivpu_shutdown(vdev);
diff --git a/drivers/accel/ivpu/ivpu_pm.c b/drivers/accel/ivpu/ivpu_pm.c
index eacda1dbe8405..475ddc94f1cfe 100644
--- a/drivers/accel/ivpu/ivpu_pm.c
+++ b/drivers/accel/ivpu/ivpu_pm.c
@@ -417,10 +417,10 @@ void ivpu_pm_init(struct ivpu_device *vdev)
ivpu_dbg(vdev, PM, "Autosuspend delay = %d\n", delay);
}
-void ivpu_pm_cancel_recovery(struct ivpu_device *vdev)
+void ivpu_pm_disable_recovery(struct ivpu_device *vdev)
{
drm_WARN_ON(&vdev->drm, delayed_work_pending(&vdev->pm->job_timeout_work));
- cancel_work_sync(&vdev->pm->recovery_work);
+ disable_work_sync(&vdev->pm->recovery_work);
}
void ivpu_pm_enable(struct ivpu_device *vdev)
diff --git a/drivers/accel/ivpu/ivpu_pm.h b/drivers/accel/ivpu/ivpu_pm.h
index 89b264cc0e3e7..a2aa7a27f32ef 100644
--- a/drivers/accel/ivpu/ivpu_pm.h
+++ b/drivers/accel/ivpu/ivpu_pm.h
@@ -25,7 +25,7 @@ struct ivpu_pm_info {
void ivpu_pm_init(struct ivpu_device *vdev);
void ivpu_pm_enable(struct ivpu_device *vdev);
void ivpu_pm_disable(struct ivpu_device *vdev);
-void ivpu_pm_cancel_recovery(struct ivpu_device *vdev);
+void ivpu_pm_disable_recovery(struct ivpu_device *vdev);
int ivpu_pm_suspend_cb(struct device *dev);
int ivpu_pm_resume_cb(struct device *dev);
--
2.45.1
2 weeks, 5 days
- 2
- 2
[PATCH v2] drm/rcar-du: dsi: Fix 1/2/3 lane support
by Marek Vasut
Remove fixed PPI lane count setup. The R-Car DSI host is capable
of operating in 1..4 DSI lane mode. Remove the hard-coded 4-lane
configuration from PPI register settings and instead configure
the PPI lane count according to lane count information already
obtained by this driver instance.
Configure TXSETR register to match PPI lane count. The R-Car V4H
Reference Manual R19UH0186EJ0121 Rev.1.21 section 67.2.2.3 Tx Set
Register (TXSETR), field LANECNT description indicates that the
TXSETR register LANECNT bitfield lane count must be configured
such, that it matches lane count configuration in PPISETR register
DLEN bitfield. Make sure the LANECNT and DLEN bitfields are
configured to match.
Fixes: 155358310f01 ("drm: rcar-du: Add R-Car DSI driver")
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Marek Vasut <marek.vasut+renesas(a)mailbox.org>
---
Cc: David Airlie <airlied(a)gmail.com>
Cc: Geert Uytterhoeven <geert+renesas(a)glider.be>
Cc: Kieran Bingham <kieran.bingham+renesas(a)ideasonboard.com>
Cc: Laurent Pinchart <laurent.pinchart+renesas(a)ideasonboard.com>
Cc: Maarten Lankhorst <maarten.lankhorst(a)linux.intel.com>
Cc: Magnus Damm <magnus.damm(a)gmail.com>
Cc: Maxime Ripard <mripard(a)kernel.org>
Cc: Simona Vetter <simona(a)ffwll.ch>
Cc: Thomas Zimmermann <tzimmermann(a)suse.de>
Cc: Tomi Valkeinen <tomi.valkeinen+renesas(a)ideasonboard.com>
Cc: dri-devel(a)lists.freedesktop.org
Cc: linux-renesas-soc(a)vger.kernel.org
---
V2: - Split this out of a series, update commit message, combine from
drm/rcar-du: dsi: Remove fixed PPI lane count setup
drm/rcar-du: dsi: Configure TXSETR register to match PPI lane count
- add Fixes tag, CC stable
---
drivers/gpu/drm/renesas/rcar-du/rcar_mipi_dsi.c | 5 ++++-
drivers/gpu/drm/renesas/rcar-du/rcar_mipi_dsi_regs.h | 8 ++++----
2 files changed, 8 insertions(+), 5 deletions(-)
diff --git a/drivers/gpu/drm/renesas/rcar-du/rcar_mipi_dsi.c b/drivers/gpu/drm/renesas/rcar-du/rcar_mipi_dsi.c
index 1af4c73f7a88..952c3efb74da 100644
--- a/drivers/gpu/drm/renesas/rcar-du/rcar_mipi_dsi.c
+++ b/drivers/gpu/drm/renesas/rcar-du/rcar_mipi_dsi.c
@@ -576,7 +576,10 @@ static int rcar_mipi_dsi_startup(struct rcar_mipi_dsi *dsi,
udelay(10);
rcar_mipi_dsi_clr(dsi, CLOCKSET1, CLOCKSET1_UPDATEPLL);
- ppisetr = PPISETR_DLEN_3 | PPISETR_CLEN;
+ rcar_mipi_dsi_clr(dsi, TXSETR, TXSETR_LANECNT_MASK);
+ rcar_mipi_dsi_set(dsi, TXSETR, dsi->lanes - 1);
+
+ ppisetr = ((BIT(dsi->lanes) - 1) & PPISETR_DLEN_MASK) | PPISETR_CLEN;
rcar_mipi_dsi_write(dsi, PPISETR, ppisetr);
rcar_mipi_dsi_set(dsi, PHYSETUP, PHYSETUP_SHUTDOWNZ);
diff --git a/drivers/gpu/drm/renesas/rcar-du/rcar_mipi_dsi_regs.h b/drivers/gpu/drm/renesas/rcar-du/rcar_mipi_dsi_regs.h
index a6b276f1d6ee..a54c7eb4113b 100644
--- a/drivers/gpu/drm/renesas/rcar-du/rcar_mipi_dsi_regs.h
+++ b/drivers/gpu/drm/renesas/rcar-du/rcar_mipi_dsi_regs.h
@@ -12,6 +12,9 @@
#define LINKSR_LPBUSY (1 << 1)
#define LINKSR_HSBUSY (1 << 0)
+#define TXSETR 0x100
+#define TXSETR_LANECNT_MASK (0x3 << 0)
+
/*
* Video Mode Register
*/
@@ -80,10 +83,7 @@
* PHY-Protocol Interface (PPI) Registers
*/
#define PPISETR 0x700
-#define PPISETR_DLEN_0 (0x1 << 0)
-#define PPISETR_DLEN_1 (0x3 << 0)
-#define PPISETR_DLEN_2 (0x7 << 0)
-#define PPISETR_DLEN_3 (0xf << 0)
+#define PPISETR_DLEN_MASK (0xf << 0)
#define PPISETR_CLEN (1 << 8)
#define PPICLCR 0x710
--
2.47.2
2 weeks, 5 days
- 3
- 4
[PATCH] xtensa: simdisk: add input size check in proc_write_simdisk
by Miaoqian Lin
A malicious user could pass an arbitrarily bad value
to memdup_user_nul(), potentially causing kernel crash.
This follows the same pattern as commit ee76746387f6
("netdevsim: prevent bad user input in nsim_dev_health_break_write()")
Fixes: b6c7e873daf7 ("xtensa: ISS: add host file-based simulated disk")
Fixes: 16e5c1fc3604 ("convert a bunch of open-coded instances of memdup_user_nul()")
Cc: stable(a)vger.kernel.org
Signed-off-by: Miaoqian Lin <linmq006(a)gmail.com>
---
arch/xtensa/platforms/iss/simdisk.c | 6 +++++-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/arch/xtensa/platforms/iss/simdisk.c b/arch/xtensa/platforms/iss/simdisk.c
index 6ed009318d24..3cafc8feddee 100644
--- a/arch/xtensa/platforms/iss/simdisk.c
+++ b/arch/xtensa/platforms/iss/simdisk.c
@@ -231,10 +231,14 @@ static ssize_t proc_read_simdisk(struct file *file, char __user *buf,
static ssize_t proc_write_simdisk(struct file *file, const char __user *buf,
size_t count, loff_t *ppos)
{
- char *tmp = memdup_user_nul(buf, count);
+ char *tmp;
struct simdisk *dev = pde_data(file_inode(file));
int err;
+ if (count == 0 || count > PAGE_SIZE)
+ return -EINVAL;
+
+ tmp = memdup_user_nul(buf, count);
if (IS_ERR(tmp))
return PTR_ERR(tmp);
--
2.35.1
2 weeks, 5 days
- 2
- 1
[PATCH v4] mm: slub: avoid wake up kswapd in set_track_prepare
by yangshiguang1011＠163.com
From: yangshiguang <yangshiguang(a)xiaomi.com>
From: yangshiguang <yangshiguang(a)xiaomi.com>
set_track_prepare() can incur lock recursion.
The issue is that it is called from hrtimer_start_range_ns
holding the per_cpu(hrtimer_bases)[n].lock, but when enabled
CONFIG_DEBUG_OBJECTS_TIMERS, may wake up kswapd in set_track_prepare,
and try to hold the per_cpu(hrtimer_bases)[n].lock.
Avoid deadlock caused by implicitly waking up kswapd by
passing in allocation flags. And the slab caller context has
preemption disabled, so __GFP_KSWAPD_RECLAIM must not appear in gfp_flags.
The oops looks something like:
BUG: spinlock recursion on CPU#3, swapper/3/0
lock: 0xffffff8a4bf29c80, .magic: dead4ead, .owner: swapper/3/0, .owner_cpu: 3
Hardware name: Qualcomm Technologies, Inc. Popsicle based on SM8850 (DT)
Call trace:
spin_bug+0x0
_raw_spin_lock_irqsave+0x80
hrtimer_try_to_cancel+0x94
task_contending+0x10c
enqueue_dl_entity+0x2a4
dl_server_start+0x74
enqueue_task_fair+0x568
enqueue_task+0xac
do_activate_task+0x14c
ttwu_do_activate+0xcc
try_to_wake_up+0x6c8
default_wake_function+0x20
autoremove_wake_function+0x1c
__wake_up+0xac
wakeup_kswapd+0x19c
wake_all_kswapds+0x78
__alloc_pages_slowpath+0x1ac
__alloc_pages_noprof+0x298
stack_depot_save_flags+0x6b0
stack_depot_save+0x14
set_track_prepare+0x5c
___slab_alloc+0xccc
__kmalloc_cache_noprof+0x470
__set_page_owner+0x2bc
post_alloc_hook[jt]+0x1b8
prep_new_page+0x28
get_page_from_freelist+0x1edc
__alloc_pages_noprof+0x13c
alloc_slab_page+0x244
allocate_slab+0x7c
___slab_alloc+0x8e8
kmem_cache_alloc_noprof+0x450
debug_objects_fill_pool+0x22c
debug_object_activate+0x40
enqueue_hrtimer[jt]+0xdc
hrtimer_start_range_ns+0x5f8
...
Signed-off-by: yangshiguang <yangshiguang(a)xiaomi.com>
Fixes: 5cf909c553e9 ("mm/slub: use stackdepot to save stack trace in objects")
Cc: stable(a)vger.kernel.org
---
v1 -> v2:
propagate gfp flags to set_track_prepare()
v2 -> v3:
Remove the gfp restriction in set_track_prepare()
v3 -> v4:
Re-describe the comments in set_track_prepare.
[1]https://lore.kernel.org/all/20250801065121.876793-1-yangshiguang1011@163.…
[2]https://lore.kernel.org/all/20250814111641.380629-2-yangshiguang1011@163.…
[3]https://lore.kernel.org/all/20250825121737.2535732-1-yangshiguang1011@163…
---
mm/slub.c | 26 ++++++++++++++++----------
1 file changed, 16 insertions(+), 10 deletions(-)
diff --git a/mm/slub.c b/mm/slub.c
index 30003763d224..b0af51a5321b 100644
--- a/mm/slub.c
+++ b/mm/slub.c
@@ -962,19 +962,25 @@ static struct track *get_track(struct kmem_cache *s, void *object,
}
#ifdef CONFIG_STACKDEPOT
-static noinline depot_stack_handle_t set_track_prepare(void)
+static noinline depot_stack_handle_t set_track_prepare(gfp_t gfp_flags)
{
depot_stack_handle_t handle;
unsigned long entries[TRACK_ADDRS_COUNT];
unsigned int nr_entries;
+ /*
+ * Preemption is disabled in ___slab_alloc() so we need to disallow
+ * blocking. The flags are further adjusted by gfp_nested_mask() in
+ * stack_depot itself.
+ */
+ gfp_flags &= ~(__GFP_DIRECT_RECLAIM);
nr_entries = stack_trace_save(entries, ARRAY_SIZE(entries), 3);
- handle = stack_depot_save(entries, nr_entries, GFP_NOWAIT);
+ handle = stack_depot_save(entries, nr_entries, gfp_flags);
return handle;
}
#else
-static inline depot_stack_handle_t set_track_prepare(void)
+static inline depot_stack_handle_t set_track_prepare(gfp_t gfp_flags)
{
return 0;
}
@@ -996,9 +1002,9 @@ static void set_track_update(struct kmem_cache *s, void *object,
}
static __always_inline void set_track(struct kmem_cache *s, void *object,
- enum track_item alloc, unsigned long addr)
+ enum track_item alloc, unsigned long addr, gfp_t gfp_flags)
{
- depot_stack_handle_t handle = set_track_prepare();
+ depot_stack_handle_t handle = set_track_prepare(gfp_flags);
set_track_update(s, object, alloc, addr, handle);
}
@@ -1921,9 +1927,9 @@ static inline bool free_debug_processing(struct kmem_cache *s,
static inline void slab_pad_check(struct kmem_cache *s, struct slab *slab) {}
static inline int check_object(struct kmem_cache *s, struct slab *slab,
void *object, u8 val) { return 1; }
-static inline depot_stack_handle_t set_track_prepare(void) { return 0; }
+static inline depot_stack_handle_t set_track_prepare(gfp_t gfp_flags) { return 0; }
static inline void set_track(struct kmem_cache *s, void *object,
- enum track_item alloc, unsigned long addr) {}
+ enum track_item alloc, unsigned long addr, gfp_t gfp_flags) {}
static inline void add_full(struct kmem_cache *s, struct kmem_cache_node *n,
struct slab *slab) {}
static inline void remove_full(struct kmem_cache *s, struct kmem_cache_node *n,
@@ -3878,7 +3884,7 @@ static void *___slab_alloc(struct kmem_cache *s, gfp_t gfpflags, int node,
* tracking info and return the object.
*/
if (s->flags & SLAB_STORE_USER)
- set_track(s, freelist, TRACK_ALLOC, addr);
+ set_track(s, freelist, TRACK_ALLOC, addr, gfpflags);
return freelist;
}
@@ -3910,7 +3916,7 @@ static void *___slab_alloc(struct kmem_cache *s, gfp_t gfpflags, int node,
goto new_objects;
if (s->flags & SLAB_STORE_USER)
- set_track(s, freelist, TRACK_ALLOC, addr);
+ set_track(s, freelist, TRACK_ALLOC, addr, gfpflags);
return freelist;
}
@@ -4422,7 +4428,7 @@ static noinline void free_to_partial_list(
depot_stack_handle_t handle = 0;
if (s->flags & SLAB_STORE_USER)
- handle = set_track_prepare();
+ handle = set_track_prepare(__GFP_NOWARN);
spin_lock_irqsave(&n->list_lock, flags);
--
2.43.0
2 weeks, 5 days
- 4
- 6
[PATCH] fbdev/simplefb: Fix use after free in simplefb_detach_genpds()
by Janne Grunau
The pm_domain cleanup can not be devres managed as it uses struct
simplefb_par which is allocated within struct fb_info by
framebuffer_alloc(). This allocation is explicitly freed by
unregister_framebuffer() in simplefb_remove().
Devres managed cleanup runs after the device remove call and thus can no
longer access struct simplefb_par.
Call simplefb_detach_genpds() explicitly from simplefb_destroy() like
the cleanup functions for clocks and regulators.
Fixes an use after free on M2 Mac mini during
aperture_remove_conflicting_devices() using the downstream asahi kernel
with Debian's kernel config. For unknown reasons this started to
consistently dereference an invalid pointer in v6.16.3 based kernels.
[ 6.736134] BUG: KASAN: slab-use-after-free in simplefb_detach_genpds+0x58/0x220
[ 6.743545] Read of size 4 at addr ffff8000304743f0 by task (udev-worker)/227
[ 6.750697]
[ 6.752182] CPU: 6 UID: 0 PID: 227 Comm: (udev-worker) Tainted: G S 6.16.3-asahi+ #16 PREEMPTLAZY
[ 6.752186] Tainted: [S]=CPU_OUT_OF_SPEC
[ 6.752187] Hardware name: Apple Mac mini (M2, 2023) (DT)
[ 6.752189] Call trace:
[ 6.752190] show_stack+0x34/0x98 (C)
[ 6.752194] dump_stack_lvl+0x60/0x80
[ 6.752197] print_report+0x17c/0x4d8
[ 6.752201] kasan_report+0xb4/0x100
[ 6.752206] __asan_report_load4_noabort+0x20/0x30
[ 6.752209] simplefb_detach_genpds+0x58/0x220
[ 6.752213] devm_action_release+0x50/0x98
[ 6.752216] release_nodes+0xd0/0x2c8
[ 6.752219] devres_release_all+0xfc/0x178
[ 6.752221] device_unbind_cleanup+0x28/0x168
[ 6.752224] device_release_driver_internal+0x34c/0x470
[ 6.752228] device_release_driver+0x20/0x38
[ 6.752231] bus_remove_device+0x1b0/0x380
[ 6.752234] device_del+0x314/0x820
[ 6.752238] platform_device_del+0x3c/0x1e8
[ 6.752242] platform_device_unregister+0x20/0x50
[ 6.752246] aperture_detach_platform_device+0x1c/0x30
[ 6.752250] aperture_detach_devices+0x16c/0x290
[ 6.752253] aperture_remove_conflicting_devices+0x34/0x50
...
[ 6.752343]
[ 6.967409] Allocated by task 62:
[ 6.970724] kasan_save_stack+0x3c/0x70
[ 6.974560] kasan_save_track+0x20/0x40
[ 6.978397] kasan_save_alloc_info+0x40/0x58
[ 6.982670] __kasan_kmalloc+0xd4/0xd8
[ 6.986420] __kmalloc_noprof+0x194/0x540
[ 6.990432] framebuffer_alloc+0xc8/0x130
[ 6.994444] simplefb_probe+0x258/0x2378
...
[ 7.054356]
[ 7.055838] Freed by task 227:
[ 7.058891] kasan_save_stack+0x3c/0x70
[ 7.062727] kasan_save_track+0x20/0x40
[ 7.066565] kasan_save_free_info+0x4c/0x80
[ 7.070751] __kasan_slab_free+0x6c/0xa0
[ 7.074675] kfree+0x10c/0x380
[ 7.077727] framebuffer_release+0x5c/0x90
[ 7.081826] simplefb_destroy+0x1b4/0x2c0
[ 7.085837] put_fb_info+0x98/0x100
[ 7.089326] unregister_framebuffer+0x178/0x320
[ 7.093861] simplefb_remove+0x3c/0x60
[ 7.097611] platform_remove+0x60/0x98
[ 7.101361] device_remove+0xb8/0x160
[ 7.105024] device_release_driver_internal+0x2fc/0x470
[ 7.110256] device_release_driver+0x20/0x38
[ 7.114529] bus_remove_device+0x1b0/0x380
[ 7.118628] device_del+0x314/0x820
[ 7.122116] platform_device_del+0x3c/0x1e8
[ 7.126302] platform_device_unregister+0x20/0x50
[ 7.131012] aperture_detach_platform_device+0x1c/0x30
[ 7.136157] aperture_detach_devices+0x16c/0x290
[ 7.140779] aperture_remove_conflicting_devices+0x34/0x50
...
Reported-by: Daniel Huhardeaux <tech(a)tootai.net>
Cc: stable(a)vger.kernel.org
Fixes: 92a511a568e44 ("fbdev/simplefb: Add support for generic power-domains")
Signed-off-by: Janne Grunau <j(a)jannau.net>
---
drivers/video/fbdev/simplefb.c | 15 +++++++++++----
1 file changed, 11 insertions(+), 4 deletions(-)
diff --git a/drivers/video/fbdev/simplefb.c b/drivers/video/fbdev/simplefb.c
index 1893815dc67f4c1403eea42c0e10a7ead4d96ba9..cd5193e704ffe1ccc178c13916a462446af9cb14 100644
--- a/drivers/video/fbdev/simplefb.c
+++ b/drivers/video/fbdev/simplefb.c
@@ -93,6 +93,7 @@ struct simplefb_par {
static void simplefb_clocks_destroy(struct simplefb_par *par);
static void simplefb_regulators_destroy(struct simplefb_par *par);
+static void simplefb_detach_genpds(void *res);
/*
* fb_ops.fb_destroy is called by the last put_fb_info() call at the end
@@ -105,6 +106,7 @@ static void simplefb_destroy(struct fb_info *info)
simplefb_regulators_destroy(info->par);
simplefb_clocks_destroy(info->par);
+ simplefb_detach_genpds(info->par);
if (info->screen_base)
iounmap(info->screen_base);
@@ -465,13 +467,11 @@ static int simplefb_attach_genpds(struct simplefb_par *par,
return err;
}
- par->num_genpds = err;
-
/*
* Single power-domain devices are handled by the driver core, so
* nothing to do here.
*/
- if (par->num_genpds <= 1)
+ if (err <= 1)
return 0;
par->genpds = devm_kcalloc(dev, par->num_genpds, sizeof(*par->genpds),
@@ -485,6 +485,12 @@ static int simplefb_attach_genpds(struct simplefb_par *par,
if (!par->genpd_links)
return -ENOMEM;
+ /*
+ * Set num_genpds only after genpds and genpd_links are allocated to
+ * exit early from simplefb_detach_genpds() without full initialisation.
+ */
+ par->num_genpds = err;
+
for (i = 0; i < par->num_genpds; i++) {
par->genpds[i] = dev_pm_domain_attach_by_id(dev, i);
if (IS_ERR(par->genpds[i])) {
@@ -506,9 +512,10 @@ static int simplefb_attach_genpds(struct simplefb_par *par,
dev_warn(dev, "failed to link power-domain %u\n", i);
}
- return devm_add_action_or_reset(dev, simplefb_detach_genpds, par);
+ return 0;
}
#else
+static void simplefb_detach_genpds(void *res) { }
static int simplefb_attach_genpds(struct simplefb_par *par,
struct platform_device *pdev)
{
---
base-commit: 8f5ae30d69d7543eee0d70083daf4de8fe15d585
change-id: 20250901-simplefb-genpd-uaf-352704761a29
Best regards,
--
Janne Grunau <j(a)jannau.net>
2 weeks, 5 days
- 1
- 0
[PATCH v5] mm: slub: avoid wake up kswapd in set_track_prepare
by yangshiguang1011＠163.com
From: yangshiguang <yangshiguang(a)xiaomi.com>
set_track_prepare() can incur lock recursion.
The issue is that it is called from hrtimer_start_range_ns
holding the per_cpu(hrtimer_bases)[n].lock, but when enabled
CONFIG_DEBUG_OBJECTS_TIMERS, may wake up kswapd in set_track_prepare,
and try to hold the per_cpu(hrtimer_bases)[n].lock.
Avoid deadlock caused by implicitly waking up kswapd by
passing in allocation flags. And the slab caller context has
preemption disabled, so __GFP_DIRECT_RECLAIM must not appear in gfp_flags.
The oops looks something like:
BUG: spinlock recursion on CPU#3, swapper/3/0
lock: 0xffffff8a4bf29c80, .magic: dead4ead, .owner: swapper/3/0, .owner_cpu: 3
Hardware name: Qualcomm Technologies, Inc. Popsicle based on SM8850 (DT)
Call trace:
spin_bug+0x0
_raw_spin_lock_irqsave+0x80
hrtimer_try_to_cancel+0x94
task_contending+0x10c
enqueue_dl_entity+0x2a4
dl_server_start+0x74
enqueue_task_fair+0x568
enqueue_task+0xac
do_activate_task+0x14c
ttwu_do_activate+0xcc
try_to_wake_up+0x6c8
default_wake_function+0x20
autoremove_wake_function+0x1c
__wake_up+0xac
wakeup_kswapd+0x19c
wake_all_kswapds+0x78
__alloc_pages_slowpath+0x1ac
__alloc_pages_noprof+0x298
stack_depot_save_flags+0x6b0
stack_depot_save+0x14
set_track_prepare+0x5c
___slab_alloc+0xccc
__kmalloc_cache_noprof+0x470
__set_page_owner+0x2bc
post_alloc_hook[jt]+0x1b8
prep_new_page+0x28
get_page_from_freelist+0x1edc
__alloc_pages_noprof+0x13c
alloc_slab_page+0x244
allocate_slab+0x7c
___slab_alloc+0x8e8
kmem_cache_alloc_noprof+0x450
debug_objects_fill_pool+0x22c
debug_object_activate+0x40
enqueue_hrtimer[jt]+0xdc
hrtimer_start_range_ns+0x5f8
...
Signed-off-by: yangshiguang <yangshiguang(a)xiaomi.com>
Fixes: 5cf909c553e9 ("mm/slub: use stackdepot to save stack trace in objects")
Cc: stable(a)vger.kernel.org
---
v1 -> v2:
propagate gfp flags to set_track_prepare()
v2 -> v3:
Remove the gfp restriction in set_track_prepare()
v3 -> v4:
Re-describe the comments in set_track_prepare.
v4 -> v5:
Modify the patch commit.
[1]https://lore.kernel.org/all/20250801065121.876793-1-yangshiguang1011@163.…
[2]https://lore.kernel.org/all/20250814111641.380629-2-yangshiguang1011@163.…
[3]https://lore.kernel.org/all/20250825121737.2535732-1-yangshiguang1011@163…
[4]https://lore.kernel.org/all/20250830020946.1767573-1-yangshiguang1011@163…
---
mm/slub.c | 26 ++++++++++++++++----------
1 file changed, 16 insertions(+), 10 deletions(-)
diff --git a/mm/slub.c b/mm/slub.c
index 30003763d224..b0af51a5321b 100644
--- a/mm/slub.c
+++ b/mm/slub.c
@@ -962,19 +962,25 @@ static struct track *get_track(struct kmem_cache *s, void *object,
}
#ifdef CONFIG_STACKDEPOT
-static noinline depot_stack_handle_t set_track_prepare(void)
+static noinline depot_stack_handle_t set_track_prepare(gfp_t gfp_flags)
{
depot_stack_handle_t handle;
unsigned long entries[TRACK_ADDRS_COUNT];
unsigned int nr_entries;
+ /*
+ * Preemption is disabled in ___slab_alloc() so we need to disallow
+ * blocking. The flags are further adjusted by gfp_nested_mask() in
+ * stack_depot itself.
+ */
+ gfp_flags &= ~(__GFP_DIRECT_RECLAIM);
nr_entries = stack_trace_save(entries, ARRAY_SIZE(entries), 3);
- handle = stack_depot_save(entries, nr_entries, GFP_NOWAIT);
+ handle = stack_depot_save(entries, nr_entries, gfp_flags);
return handle;
}
#else
-static inline depot_stack_handle_t set_track_prepare(void)
+static inline depot_stack_handle_t set_track_prepare(gfp_t gfp_flags)
{
return 0;
}
@@ -996,9 +1002,9 @@ static void set_track_update(struct kmem_cache *s, void *object,
}
static __always_inline void set_track(struct kmem_cache *s, void *object,
- enum track_item alloc, unsigned long addr)
+ enum track_item alloc, unsigned long addr, gfp_t gfp_flags)
{
- depot_stack_handle_t handle = set_track_prepare();
+ depot_stack_handle_t handle = set_track_prepare(gfp_flags);
set_track_update(s, object, alloc, addr, handle);
}
@@ -1921,9 +1927,9 @@ static inline bool free_debug_processing(struct kmem_cache *s,
static inline void slab_pad_check(struct kmem_cache *s, struct slab *slab) {}
static inline int check_object(struct kmem_cache *s, struct slab *slab,
void *object, u8 val) { return 1; }
-static inline depot_stack_handle_t set_track_prepare(void) { return 0; }
+static inline depot_stack_handle_t set_track_prepare(gfp_t gfp_flags) { return 0; }
static inline void set_track(struct kmem_cache *s, void *object,
- enum track_item alloc, unsigned long addr) {}
+ enum track_item alloc, unsigned long addr, gfp_t gfp_flags) {}
static inline void add_full(struct kmem_cache *s, struct kmem_cache_node *n,
struct slab *slab) {}
static inline void remove_full(struct kmem_cache *s, struct kmem_cache_node *n,
@@ -3878,7 +3884,7 @@ static void *___slab_alloc(struct kmem_cache *s, gfp_t gfpflags, int node,
* tracking info and return the object.
*/
if (s->flags & SLAB_STORE_USER)
- set_track(s, freelist, TRACK_ALLOC, addr);
+ set_track(s, freelist, TRACK_ALLOC, addr, gfpflags);
return freelist;
}
@@ -3910,7 +3916,7 @@ static void *___slab_alloc(struct kmem_cache *s, gfp_t gfpflags, int node,
goto new_objects;
if (s->flags & SLAB_STORE_USER)
- set_track(s, freelist, TRACK_ALLOC, addr);
+ set_track(s, freelist, TRACK_ALLOC, addr, gfpflags);
return freelist;
}
@@ -4422,7 +4428,7 @@ static noinline void free_to_partial_list(
depot_stack_handle_t handle = 0;
if (s->flags & SLAB_STORE_USER)
- handle = set_track_prepare();
+ handle = set_track_prepare(__GFP_NOWARN);
spin_lock_irqsave(&n->list_lock, flags);
--
2.43.0
2 weeks, 5 days
- 1
- 0
[PATCH v2 3/3] drm/xe: Block exec and rebind worker while evicting for suspend / hibernate
by Thomas Hellström
When the xe pm_notifier evicts for suspend / hibernate, there might be
racing tasks trying to re-validate again. This can lead to suspend taking
excessive time or get stuck in a live-lock. This behaviour becomes
much worse with the fix that actually makes re-validation bring back
bos to VRAM rather than letting them remain in TT.
Prevent that by having exec and the rebind worker waiting for a completion
that is set to block by the pm_notifier before suspend and is signaled
by the pm_notifier after resume / wakeup.
It's probably still possible to craft malicious applications that block
suspending. More work is pending to fix that.
Link: https://gitlab.freedesktop.org/drm/xe/kernel/-/issues/4288
Fixes: c6a4d46ec1d7 ("drm/xe: evict user memory in PM notifier")
Cc: Matthew Auld <matthew.auld(a)intel.com>
Cc: Rodrigo Vivi <rodrigo.vivi(a)intel.com>
Cc: <stable(a)vger.kernel.org> # v6.16+
Signed-off-by: Thomas Hellström <thomas.hellstrom(a)linux.intel.com>
---
drivers/gpu/drm/xe/xe_device_types.h | 2 ++
drivers/gpu/drm/xe/xe_exec.c | 9 +++++++++
drivers/gpu/drm/xe/xe_pm.c | 4 ++++
drivers/gpu/drm/xe/xe_vm.c | 14 ++++++++++++++
4 files changed, 29 insertions(+)
diff --git a/drivers/gpu/drm/xe/xe_device_types.h b/drivers/gpu/drm/xe/xe_device_types.h
index 092004d14db2..6602bd678cbc 100644
--- a/drivers/gpu/drm/xe/xe_device_types.h
+++ b/drivers/gpu/drm/xe/xe_device_types.h
@@ -507,6 +507,8 @@ struct xe_device {
/** @pm_notifier: Our PM notifier to perform actions in response to various PM events. */
struct notifier_block pm_notifier;
+ /** @pm_block: Completion to block validating tasks on suspend / hibernate prepare */
+ struct completion pm_block;
/** @pmt: Support the PMT driver callback interface */
struct {
diff --git a/drivers/gpu/drm/xe/xe_exec.c b/drivers/gpu/drm/xe/xe_exec.c
index 44364c042ad7..374c831e691b 100644
--- a/drivers/gpu/drm/xe/xe_exec.c
+++ b/drivers/gpu/drm/xe/xe_exec.c
@@ -237,6 +237,15 @@ int xe_exec_ioctl(struct drm_device *dev, void *data, struct drm_file *file)
goto err_unlock_list;
}
+ /*
+ * It's OK to block interruptible here with the vm lock held, since
+ * on task freezing during suspend / hibernate, the call will
+ * return -ERESTARTSYS and the IOCTL will be rerun.
+ */
+ err = wait_for_completion_interruptible(&xe->pm_block);
+ if (err)
+ goto err_unlock_list;
+
vm_exec.vm = &vm->gpuvm;
vm_exec.flags = DRM_EXEC_INTERRUPTIBLE_WAIT;
if (xe_vm_in_lr_mode(vm)) {
diff --git a/drivers/gpu/drm/xe/xe_pm.c b/drivers/gpu/drm/xe/xe_pm.c
index bee9aacd82e7..f4c7a84270ea 100644
--- a/drivers/gpu/drm/xe/xe_pm.c
+++ b/drivers/gpu/drm/xe/xe_pm.c
@@ -306,6 +306,7 @@ static int xe_pm_notifier_callback(struct notifier_block *nb,
switch (action) {
case PM_HIBERNATION_PREPARE:
case PM_SUSPEND_PREPARE:
+ reinit_completion(&xe->pm_block);
xe_pm_runtime_get(xe);
err = xe_bo_evict_all_user(xe);
if (err)
@@ -322,6 +323,7 @@ static int xe_pm_notifier_callback(struct notifier_block *nb,
break;
case PM_POST_HIBERNATION:
case PM_POST_SUSPEND:
+ complete_all(&xe->pm_block);
xe_bo_notifier_unprepare_all_pinned(xe);
xe_pm_runtime_put(xe);
break;
@@ -348,6 +350,8 @@ int xe_pm_init(struct xe_device *xe)
if (err)
return err;
+ init_completion(&xe->pm_block);
+ complete_all(&xe->pm_block);
/* For now suspend/resume is only allowed with GuC */
if (!xe_device_uc_enabled(xe))
return 0;
diff --git a/drivers/gpu/drm/xe/xe_vm.c b/drivers/gpu/drm/xe/xe_vm.c
index 3ff3c67aa79d..edcdb0528f2a 100644
--- a/drivers/gpu/drm/xe/xe_vm.c
+++ b/drivers/gpu/drm/xe/xe_vm.c
@@ -394,6 +394,9 @@ static int xe_gpuvm_validate(struct drm_gpuvm_bo *vm_bo, struct drm_exec *exec)
list_move_tail(&gpuva_to_vma(gpuva)->combined_links.rebind,
&vm->rebind_list);
+ if (!try_wait_for_completion(&vm->xe->pm_block))
+ return -EAGAIN;
+
ret = xe_bo_validate(gem_to_xe_bo(vm_bo->obj), vm, false);
if (ret)
return ret;
@@ -494,6 +497,12 @@ static void preempt_rebind_work_func(struct work_struct *w)
xe_assert(vm->xe, xe_vm_in_preempt_fence_mode(vm));
trace_xe_vm_rebind_worker_enter(vm);
+ /*
+ * This blocks the wq during suspend / hibernate.
+ * Don't hold any locks.
+ */
+retry_pm:
+ wait_for_completion(&vm->xe->pm_block);
down_write(&vm->lock);
if (xe_vm_is_closed_or_banned(vm)) {
@@ -503,6 +512,11 @@ static void preempt_rebind_work_func(struct work_struct *w)
}
retry:
+ if (!try_wait_for_completion(&vm->xe->pm_block)) {
+ up_write(&vm->lock);
+ goto retry_pm;
+ }
+
if (xe_vm_userptr_check_repin(vm)) {
err = xe_vm_userptr_pin(vm);
if (err)
--
2.50.1
2 weeks, 5 days
- 1
- 0
[PATCH v5] mm: slub: avoid wake up kswapd in set_track_prepare
by yangshiguang1011＠163.com
From: yangshiguang <yangshiguang(a)xiaomi.com>
From: yangshiguang <yangshiguang(a)xiaomi.com>
set_track_prepare() can incur lock recursion.
The issue is that it is called from hrtimer_start_range_ns
holding the per_cpu(hrtimer_bases)[n].lock, but when enabled
CONFIG_DEBUG_OBJECTS_TIMERS, may wake up kswapd in set_track_prepare,
and try to hold the per_cpu(hrtimer_bases)[n].lock.
Avoid deadlock caused by implicitly waking up kswapd by
passing in allocation flags. And the slab caller context has
preemption disabled, so __GFP_DIRECT_RECLAIM must not appear in gfp_flags.
The oops looks something like:
BUG: spinlock recursion on CPU#3, swapper/3/0
lock: 0xffffff8a4bf29c80, .magic: dead4ead, .owner: swapper/3/0, .owner_cpu: 3
Hardware name: Qualcomm Technologies, Inc. Popsicle based on SM8850 (DT)
Call trace:
spin_bug+0x0
_raw_spin_lock_irqsave+0x80
hrtimer_try_to_cancel+0x94
task_contending+0x10c
enqueue_dl_entity+0x2a4
dl_server_start+0x74
enqueue_task_fair+0x568
enqueue_task+0xac
do_activate_task+0x14c
ttwu_do_activate+0xcc
try_to_wake_up+0x6c8
default_wake_function+0x20
autoremove_wake_function+0x1c
__wake_up+0xac
wakeup_kswapd+0x19c
wake_all_kswapds+0x78
__alloc_pages_slowpath+0x1ac
__alloc_pages_noprof+0x298
stack_depot_save_flags+0x6b0
stack_depot_save+0x14
set_track_prepare+0x5c
___slab_alloc+0xccc
__kmalloc_cache_noprof+0x470
__set_page_owner+0x2bc
post_alloc_hook[jt]+0x1b8
prep_new_page+0x28
get_page_from_freelist+0x1edc
__alloc_pages_noprof+0x13c
alloc_slab_page+0x244
allocate_slab+0x7c
___slab_alloc+0x8e8
kmem_cache_alloc_noprof+0x450
debug_objects_fill_pool+0x22c
debug_object_activate+0x40
enqueue_hrtimer[jt]+0xdc
hrtimer_start_range_ns+0x5f8
...
Signed-off-by: yangshiguang <yangshiguang(a)xiaomi.com>
Fixes: 5cf909c553e9 ("mm/slub: use stackdepot to save stack trace in objects")
Cc: stable(a)vger.kernel.org
---
v1 -> v2:
propagate gfp flags to set_track_prepare()
v2 -> v3:
Remove the gfp restriction in set_track_prepare()
v3 -> v4:
Re-describe the comments in set_track_prepare.
v4 -> v5:
Modify the patch commit.
[1]https://lore.kernel.org/all/20250801065121.876793-1-yangshiguang1011@163.…
[2]https://lore.kernel.org/all/20250814111641.380629-2-yangshiguang1011@163.…
[3]https://lore.kernel.org/all/20250825121737.2535732-1-yangshiguang1011@163…
[4]https://lore.kernel.org/all/20250830020946.1767573-1-yangshiguang1011@163…
---
mm/slub.c | 26 ++++++++++++++++----------
1 file changed, 16 insertions(+), 10 deletions(-)
diff --git a/mm/slub.c b/mm/slub.c
index 30003763d224..b0af51a5321b 100644
--- a/mm/slub.c
+++ b/mm/slub.c
@@ -962,19 +962,25 @@ static struct track *get_track(struct kmem_cache *s, void *object,
}
#ifdef CONFIG_STACKDEPOT
-static noinline depot_stack_handle_t set_track_prepare(void)
+static noinline depot_stack_handle_t set_track_prepare(gfp_t gfp_flags)
{
depot_stack_handle_t handle;
unsigned long entries[TRACK_ADDRS_COUNT];
unsigned int nr_entries;
+ /*
+ * Preemption is disabled in ___slab_alloc() so we need to disallow
+ * blocking. The flags are further adjusted by gfp_nested_mask() in
+ * stack_depot itself.
+ */
+ gfp_flags &= ~(__GFP_DIRECT_RECLAIM);
nr_entries = stack_trace_save(entries, ARRAY_SIZE(entries), 3);
- handle = stack_depot_save(entries, nr_entries, GFP_NOWAIT);
+ handle = stack_depot_save(entries, nr_entries, gfp_flags);
return handle;
}
#else
-static inline depot_stack_handle_t set_track_prepare(void)
+static inline depot_stack_handle_t set_track_prepare(gfp_t gfp_flags)
{
return 0;
}
@@ -996,9 +1002,9 @@ static void set_track_update(struct kmem_cache *s, void *object,
}
static __always_inline void set_track(struct kmem_cache *s, void *object,
- enum track_item alloc, unsigned long addr)
+ enum track_item alloc, unsigned long addr, gfp_t gfp_flags)
{
- depot_stack_handle_t handle = set_track_prepare();
+ depot_stack_handle_t handle = set_track_prepare(gfp_flags);
set_track_update(s, object, alloc, addr, handle);
}
@@ -1921,9 +1927,9 @@ static inline bool free_debug_processing(struct kmem_cache *s,
static inline void slab_pad_check(struct kmem_cache *s, struct slab *slab) {}
static inline int check_object(struct kmem_cache *s, struct slab *slab,
void *object, u8 val) { return 1; }
-static inline depot_stack_handle_t set_track_prepare(void) { return 0; }
+static inline depot_stack_handle_t set_track_prepare(gfp_t gfp_flags) { return 0; }
static inline void set_track(struct kmem_cache *s, void *object,
- enum track_item alloc, unsigned long addr) {}
+ enum track_item alloc, unsigned long addr, gfp_t gfp_flags) {}
static inline void add_full(struct kmem_cache *s, struct kmem_cache_node *n,
struct slab *slab) {}
static inline void remove_full(struct kmem_cache *s, struct kmem_cache_node *n,
@@ -3878,7 +3884,7 @@ static void *___slab_alloc(struct kmem_cache *s, gfp_t gfpflags, int node,
* tracking info and return the object.
*/
if (s->flags & SLAB_STORE_USER)
- set_track(s, freelist, TRACK_ALLOC, addr);
+ set_track(s, freelist, TRACK_ALLOC, addr, gfpflags);
return freelist;
}
@@ -3910,7 +3916,7 @@ static void *___slab_alloc(struct kmem_cache *s, gfp_t gfpflags, int node,
goto new_objects;
if (s->flags & SLAB_STORE_USER)
- set_track(s, freelist, TRACK_ALLOC, addr);
+ set_track(s, freelist, TRACK_ALLOC, addr, gfpflags);
return freelist;
}
@@ -4422,7 +4428,7 @@ static noinline void free_to_partial_list(
depot_stack_handle_t handle = 0;
if (s->flags & SLAB_STORE_USER)
- handle = set_track_prepare();
+ handle = set_track_prepare(__GFP_NOWARN);
spin_lock_irqsave(&n->list_lock, flags);
--
2.43.0
2 weeks, 5 days
- 1
- 0
[PATCH v5] mm: slub: avoid wake up kswapd in set_track_prepare
by yangshiguang1011＠163.com
From: yangshiguang <yangshiguang(a)xiaomi.com>
From: yangshiguang <yangshiguang(a)xiaomi.com>
set_track_prepare() can incur lock recursion.
The issue is that it is called from hrtimer_start_range_ns
holding the per_cpu(hrtimer_bases)[n].lock, but when enabled
CONFIG_DEBUG_OBJECTS_TIMERS, may wake up kswapd in set_track_prepare,
and try to hold the per_cpu(hrtimer_bases)[n].lock.
Avoid deadlock caused by implicitly waking up kswapd by
passing in allocation flags. And the slab caller context has
preemption disabled, so __GFP_DIRECT_RECLAIM must not appear in gfp_flags.
The oops looks something like:
BUG: spinlock recursion on CPU#3, swapper/3/0
lock: 0xffffff8a4bf29c80, .magic: dead4ead, .owner: swapper/3/0, .owner_cpu: 3
Hardware name: Qualcomm Technologies, Inc. Popsicle based on SM8850 (DT)
Call trace:
spin_bug+0x0
_raw_spin_lock_irqsave+0x80
hrtimer_try_to_cancel+0x94
task_contending+0x10c
enqueue_dl_entity+0x2a4
dl_server_start+0x74
enqueue_task_fair+0x568
enqueue_task+0xac
do_activate_task+0x14c
ttwu_do_activate+0xcc
try_to_wake_up+0x6c8
default_wake_function+0x20
autoremove_wake_function+0x1c
__wake_up+0xac
wakeup_kswapd+0x19c
wake_all_kswapds+0x78
__alloc_pages_slowpath+0x1ac
__alloc_pages_noprof+0x298
stack_depot_save_flags+0x6b0
stack_depot_save+0x14
set_track_prepare+0x5c
___slab_alloc+0xccc
__kmalloc_cache_noprof+0x470
__set_page_owner+0x2bc
post_alloc_hook[jt]+0x1b8
prep_new_page+0x28
get_page_from_freelist+0x1edc
__alloc_pages_noprof+0x13c
alloc_slab_page+0x244
allocate_slab+0x7c
___slab_alloc+0x8e8
kmem_cache_alloc_noprof+0x450
debug_objects_fill_pool+0x22c
debug_object_activate+0x40
enqueue_hrtimer[jt]+0xdc
hrtimer_start_range_ns+0x5f8
...
Signed-off-by: yangshiguang <yangshiguang(a)xiaomi.com>
Fixes: 5cf909c553e9 ("mm/slub: use stackdepot to save stack trace in objects")
Cc: stable(a)vger.kernel.org
---
v1 -> v2:
propagate gfp flags to set_track_prepare()
v2 -> v3:
Remove the gfp restriction in set_track_prepare()
v3 -> v4:
Re-describe the comments in set_track_prepare.
v4 -> v5:
Modify the patch commit.
[1]https://lore.kernel.org/all/20250801065121.876793-1-yangshiguang1011@163.…
[2]https://lore.kernel.org/all/20250814111641.380629-2-yangshiguang1011@163.…
[3]https://lore.kernel.org/all/20250825121737.2535732-1-yangshiguang1011@163…
[4]https://lore.kernel.org/all/20250830020946.1767573-1-yangshiguang1011@163…
---
mm/slub.c | 26 ++++++++++++++++----------
1 file changed, 16 insertions(+), 10 deletions(-)
diff --git a/mm/slub.c b/mm/slub.c
index 30003763d224..b0af51a5321b 100644
--- a/mm/slub.c
+++ b/mm/slub.c
@@ -962,19 +962,25 @@ static struct track *get_track(struct kmem_cache *s, void *object,
}
#ifdef CONFIG_STACKDEPOT
-static noinline depot_stack_handle_t set_track_prepare(void)
+static noinline depot_stack_handle_t set_track_prepare(gfp_t gfp_flags)
{
depot_stack_handle_t handle;
unsigned long entries[TRACK_ADDRS_COUNT];
unsigned int nr_entries;
+ /*
+ * Preemption is disabled in ___slab_alloc() so we need to disallow
+ * blocking. The flags are further adjusted by gfp_nested_mask() in
+ * stack_depot itself.
+ */
+ gfp_flags &= ~(__GFP_DIRECT_RECLAIM);
nr_entries = stack_trace_save(entries, ARRAY_SIZE(entries), 3);
- handle = stack_depot_save(entries, nr_entries, GFP_NOWAIT);
+ handle = stack_depot_save(entries, nr_entries, gfp_flags);
return handle;
}
#else
-static inline depot_stack_handle_t set_track_prepare(void)
+static inline depot_stack_handle_t set_track_prepare(gfp_t gfp_flags)
{
return 0;
}
@@ -996,9 +1002,9 @@ static void set_track_update(struct kmem_cache *s, void *object,
}
static __always_inline void set_track(struct kmem_cache *s, void *object,
- enum track_item alloc, unsigned long addr)
+ enum track_item alloc, unsigned long addr, gfp_t gfp_flags)
{
- depot_stack_handle_t handle = set_track_prepare();
+ depot_stack_handle_t handle = set_track_prepare(gfp_flags);
set_track_update(s, object, alloc, addr, handle);
}
@@ -1921,9 +1927,9 @@ static inline bool free_debug_processing(struct kmem_cache *s,
static inline void slab_pad_check(struct kmem_cache *s, struct slab *slab) {}
static inline int check_object(struct kmem_cache *s, struct slab *slab,
void *object, u8 val) { return 1; }
-static inline depot_stack_handle_t set_track_prepare(void) { return 0; }
+static inline depot_stack_handle_t set_track_prepare(gfp_t gfp_flags) { return 0; }
static inline void set_track(struct kmem_cache *s, void *object,
- enum track_item alloc, unsigned long addr) {}
+ enum track_item alloc, unsigned long addr, gfp_t gfp_flags) {}
static inline void add_full(struct kmem_cache *s, struct kmem_cache_node *n,
struct slab *slab) {}
static inline void remove_full(struct kmem_cache *s, struct kmem_cache_node *n,
@@ -3878,7 +3884,7 @@ static void *___slab_alloc(struct kmem_cache *s, gfp_t gfpflags, int node,
* tracking info and return the object.
*/
if (s->flags & SLAB_STORE_USER)
- set_track(s, freelist, TRACK_ALLOC, addr);
+ set_track(s, freelist, TRACK_ALLOC, addr, gfpflags);
return freelist;
}
@@ -3910,7 +3916,7 @@ static void *___slab_alloc(struct kmem_cache *s, gfp_t gfpflags, int node,
goto new_objects;
if (s->flags & SLAB_STORE_USER)
- set_track(s, freelist, TRACK_ALLOC, addr);
+ set_track(s, freelist, TRACK_ALLOC, addr, gfpflags);
return freelist;
}
@@ -4422,7 +4428,7 @@ static noinline void free_to_partial_list(
depot_stack_handle_t handle = 0;
if (s->flags & SLAB_STORE_USER)
- handle = set_track_prepare();
+ handle = set_track_prepare(__GFP_NOWARN);
spin_lock_irqsave(&n->list_lock, flags);
--
2.43.0
2 weeks, 5 days
- 1
- 0
[PATCH v2] mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting
by Ruan Shiyang
Goto-san reported confusing pgpromote statistics where the
pgpromote_success count significantly exceeded pgpromote_candidate.
On a system with three nodes (nodes 0-1: DRAM 4GB, node 2: NVDIMM 4GB):
# Enable demotion only
echo 1 > /sys/kernel/mm/numa/demotion_enabled
numactl -m 0-1 memhog -r200 3500M >/dev/null &
pid=$!
sleep 2
numactl memhog -r100 2500M >/dev/null &
sleep 10
kill -9 $pid # terminate the 1st memhog
# Enable promotion
echo 2 > /proc/sys/kernel/numa_balancing
After a few seconds, we observeed `pgpromote_candidate < pgpromote_success`
$ grep -e pgpromote /proc/vmstat
pgpromote_success 2579
pgpromote_candidate 0
In this scenario, after terminating the first memhog, the conditions for
pgdat_free_space_enough() are quickly met, and triggers promotion.
However, these migrated pages are only counted for in PGPROMOTE_SUCCESS,
not in PGPROMOTE_CANDIDATE.
To solve these confusing statistics, introduce PGPROMOTE_CANDIDATE_NRL to
count the missed promotion pages. And also, not counting these pages into
PGPROMOTE_CANDIDATE is to avoid changing the existing algorithm or
performance of the promotion rate limit.
Link: https://lkml.kernel.org/r/20250729035101.1601407-1-ruansy.fnst@fujitsu.com
Co-developed-by: Li Zhijian <lizhijian(a)fujitsu.com>
Signed-off-by: Ruan Shiyang <ruansy.fnst(a)fujitsu.com>
Reported-by: Yasunori Gotou (Fujitsu) <y-goto(a)fujitsu.com>
Suggested-by: Huang Ying <ying.huang(a)linux.alibaba.com>
Acked-by: Vlastimil Babka <vbabka(a)suse.cz>
Cc: Ingo Molnar <mingo(a)redhat.com>
Cc: Peter Zijlstra <peterz(a)infradead.org>
Cc: Juri Lelli <juri.lelli(a)redhat.com>
Cc: Vincent Guittot <vincent.guittot(a)linaro.org>
Cc: Dietmar Eggemann <dietmar.eggemann(a)arm.com>
Cc: Steven Rostedt <rostedt(a)goodmis.org>
Cc: Ben Segall <bsegall(a)google.com>
Cc: Mel Gorman <mgorman(a)suse.de>
Cc: Valentin Schneider <vschneid(a)redhat.com>
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
Changes since v1:
1. change Li Zhijian from 'Signed-off-by' to 'Co-developed-by' per Vlastimil.
2. add Acked-by: Vlastimil Babka <vbabka(a)suse.cz>
---
include/linux/mmzone.h | 16 +++++++++++++++-
kernel/sched/fair.c | 5 +++--
mm/vmstat.c | 1 +
3 files changed, 19 insertions(+), 3 deletions(-)
diff --git a/include/linux/mmzone.h b/include/linux/mmzone.h
index 0c5da9141983..9d3ea9085556 100644
--- a/include/linux/mmzone.h
+++ b/include/linux/mmzone.h
@@ -234,7 +234,21 @@ enum node_stat_item {
#endif
#ifdef CONFIG_NUMA_BALANCING
PGPROMOTE_SUCCESS, /* promote successfully */
- PGPROMOTE_CANDIDATE, /* candidate pages to promote */
+ /**
+ * Candidate pages for promotion based on hint fault latency. This
+ * counter is used to control the promotion rate and adjust the hot
+ * threshold.
+ */
+ PGPROMOTE_CANDIDATE,
+ /**
+ * Not rate-limited (NRL) candidate pages for those can be promoted
+ * without considering hot threshold because of enough free pages in
+ * fast-tier node. These promotions bypass the regular hotness checks
+ * and do NOT influence the promotion rate-limiter or
+ * threshold-adjustment logic.
+ * This is for statistics/monitoring purposes.
+ */
+ PGPROMOTE_CANDIDATE_NRL,
#endif
/* PGDEMOTE_*: pages demoted */
PGDEMOTE_KSWAPD,
diff --git a/kernel/sched/fair.c b/kernel/sched/fair.c
index b173a059315c..82c8d804c54c 100644
--- a/kernel/sched/fair.c
+++ b/kernel/sched/fair.c
@@ -1923,11 +1923,13 @@ bool should_numa_migrate_memory(struct task_struct *p, struct folio *folio,
struct pglist_data *pgdat;
unsigned long rate_limit;
unsigned int latency, th, def_th;
+ long nr = folio_nr_pages(folio);
pgdat = NODE_DATA(dst_nid);
if (pgdat_free_space_enough(pgdat)) {
/* workload changed, reset hot threshold */
pgdat->nbp_threshold = 0;
+ mod_node_page_state(pgdat, PGPROMOTE_CANDIDATE_NRL, nr);
return true;
}
@@ -1941,8 +1943,7 @@ bool should_numa_migrate_memory(struct task_struct *p, struct folio *folio,
if (latency >= th)
return false;
- return !numa_promotion_rate_limit(pgdat, rate_limit,
- folio_nr_pages(folio));
+ return !numa_promotion_rate_limit(pgdat, rate_limit, nr);
}
this_cpupid = cpu_pid_to_cpupid(dst_cpu, current->pid);
diff --git a/mm/vmstat.c b/mm/vmstat.c
index 71cd1ceba191..e74f0b2a1021 100644
--- a/mm/vmstat.c
+++ b/mm/vmstat.c
@@ -1280,6 +1280,7 @@ const char * const vmstat_text[] = {
#ifdef CONFIG_NUMA_BALANCING
[I(PGPROMOTE_SUCCESS)] = "pgpromote_success",
[I(PGPROMOTE_CANDIDATE)] = "pgpromote_candidate",
+ [I(PGPROMOTE_CANDIDATE_NRL)] = "pgpromote_candidate_nrl",
#endif
[I(PGDEMOTE_KSWAPD)] = "pgdemote_kswapd",
[I(PGDEMOTE_DIRECT)] = "pgdemote_direct",
--
2.43.0
2 weeks, 5 days
- 2
- 1
[PATCH] iommu/intel: Fix __domain_mapping()'s usage of switch_to_super_page()
by Eugene Koira
switch_to_super_page() assumes the memory range it's working on is aligned
to the target large page level. Unfortunately, __domain_mapping() doesn't
take this into account when using it, and will pass unaligned ranges
ultimately freeing a PTE range larger than expected.
Take for example a mapping with the following iov_pfn range [0x3fe400,
0x4c0600], which should be backed by the following mappings:
iov_pfn [0x3fe400, 0x3fffff] covered by 2MiB pages
iov_pfn [0x400000, 0x4bffff] covered by 1GiB pages
iov_pfn [0x4c0000, 0x4c05ff] covered by 2MiB pages
Under this circumstance, __domain_mapping() will pass [0x400000, 0x4c05ff]
to switch_to_super_page() at a 1 GiB granularity, which will in turn
free PTEs all the way to iov_pfn 0x4fffff.
Mitigate this by rounding down the iov_pfn range passed to
switch_to_super_page() in __domain_mapping()
to the target large page level.
Additionally add range alignment checks to switch_to_super_page.
Fixes: 9906b9352a35 ("iommu/vt-d: Avoid duplicate removing in __domain_mapping()")
Signed-off-by: Eugene Koira <eugkoira(a)amazon.com>
Cc: stable(a)vger.kernel.org
---
drivers/iommu/intel/iommu.c | 7 ++++++-
1 file changed, 6 insertions(+), 1 deletion(-)
diff --git a/drivers/iommu/intel/iommu.c b/drivers/iommu/intel/iommu.c
index 9c3ab9d9f69a..dff2d895b8ab 100644
--- a/drivers/iommu/intel/iommu.c
+++ b/drivers/iommu/intel/iommu.c
@@ -1575,6 +1575,10 @@ static void switch_to_super_page(struct dmar_domain *domain,
unsigned long lvl_pages = lvl_to_nr_pages(level);
struct dma_pte *pte = NULL;
+ if (WARN_ON(!IS_ALIGNED(start_pfn, lvl_pages) ||
+ !IS_ALIGNED(end_pfn + 1, lvl_pages)))
+ return;
+
while (start_pfn <= end_pfn) {
if (!pte)
pte = pfn_to_dma_pte(domain, start_pfn, &level,
@@ -1650,7 +1654,8 @@ __domain_mapping(struct dmar_domain *domain, unsigned long iov_pfn,
unsigned long pages_to_remove;
pteval |= DMA_PTE_LARGE_PAGE;
- pages_to_remove = min_t(unsigned long, nr_pages,
+ pages_to_remove = min_t(unsigned long,
+ round_down(nr_pages, lvl_pages),
nr_pte_to_next_page(pte) * lvl_pages);
end_pfn = iov_pfn + pages_to_remove - 1;
switch_to_super_page(domain, iov_pfn, end_pfn, largepage_lvl);
--
2.47.3
Amazon Development Center (Netherlands) B.V., Johanna Westerdijkplein 1, NL-2521 EN The Hague, Registration No. Chamber of Commerce 56869649, VAT: NL 852339859B01
2 weeks, 5 days
- 4
- 5
[PATCH] coresight: trbe: Fix incorrect error check for devm_kzalloc
by Miaoqian Lin
Fix incorrect use of IS_ERR() to check devm_kzalloc() return value.
devm_kzalloc() returns NULL on failure, not an error pointer.
This issue was introduced by commit 4277f035d227
("coresight: trbe: Add a representative coresight_platform_data for TRBE")
which replaced the original function but didn't update the error check.
Fixes: 4277f035d227 ("coresight: trbe: Add a representative coresight_platform_data for TRBE")
Cc: stable(a)vger.kernel.org
Signed-off-by: Miaoqian Lin <linmq006(a)gmail.com>
---
drivers/hwtracing/coresight/coresight-trbe.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/drivers/hwtracing/coresight/coresight-trbe.c b/drivers/hwtracing/coresight/coresight-trbe.c
index 8267dd1a2130..caf873adfc3a 100644
--- a/drivers/hwtracing/coresight/coresight-trbe.c
+++ b/drivers/hwtracing/coresight/coresight-trbe.c
@@ -1279,7 +1279,7 @@ static void arm_trbe_register_coresight_cpu(struct trbe_drvdata *drvdata, int cp
* into the device for that purpose.
*/
desc.pdata = devm_kzalloc(dev, sizeof(*desc.pdata), GFP_KERNEL);
- if (IS_ERR(desc.pdata))
+ if (!desc.pdata)
goto cpu_clear;
desc.type = CORESIGHT_DEV_TYPE_SINK;
--
2.35.1
2 weeks, 5 days
- 2
- 1
+ mm-fix-folio_expected_ref_count-when-pg_private_2.patch added to mm-new branch
by Andrew Morton
The patch titled
Subject: mm: fix folio_expected_ref_count() when PG_private_2
has been added to the -mm mm-new branch. Its filename is
mm-fix-folio_expected_ref_count-when-pg_private_2.patch
This patch will shortly appear at
https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patche…
This patch will later appear in the mm-new branch at
git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
Note, mm-new is a provisional staging ground for work-in-progress
patches, and acceptance into mm-new is a notification for others take
notice and to finish up reviews. Please do not hesitate to respond to
review feedback and post updated versions to replace or incrementally
fixup patches in mm-new.
Before you just go and hit "reply", please:
a) Consider who else should be cc'ed
b) Prefer to cc a suitable mailing list as well
c) Ideally: find the original patch on the mailing list and do a
reply-to-all to that, adding suitable additional cc's
*** Remember to use Documentation/process/submit-checklist.rst when testing your code ***
The -mm tree is included into linux-next via the mm-everything
branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
and is updated there every 2-3 working days
------------------------------------------------------
From: Hugh Dickins <hughd(a)google.com>
Subject: mm: fix folio_expected_ref_count() when PG_private_2
Date: Sun, 31 Aug 2025 02:01:16 -0700 (PDT)
6.16's folio_expected_ref_count() is forgetting the PG_private_2 flag,
which (like PG_private, but not in addition to PG_private) counts for 1
more reference: it needs to be using folio_has_private() in place of
folio_test_private().
But this went wrong earlier: folio_expected_ref_count() was based on (and
replaced) mm/migrate.c's folio_expected_refs(), which has been using
folio_test_private() since 6.0 converted to folios(): before that,
expected_page_refs() was correctly using page_has_private().
Just a few filesystems are still using PG_private_2 a.k.a. PG_fscache.
Potentially, this fix re-enables page migration on their folios; but it
would not be surprising to learn that in practice those folios are not
migratable for other reasons.
Link: https://lkml.kernel.org/r/f91ee36e-a8cb-e3a4-c23b-524ff3848da7@google.com
Fixes: 86ebd50224c0 ("mm: add folio_expected_ref_count() for reference count calculation")
Fixes: 108ca8358139 ("mm/migrate: Convert expected_page_refs() to folio_expected_refs()")
Signed-off-by: Hugh Dickins <hughd(a)google.com>
Cc: "Aneesh Kumar K.V" <aneesh.kumar(a)kernel.org>
Cc: Axel Rasmussen <axelrasmussen(a)google.com>
Cc: Chris Li <chrisl(a)kernel.org>
Cc: Christoph Hellwig <hch(a)infradead.org>
Cc: David Hildenbrand <david(a)redhat.com>
Cc: Jason Gunthorpe <jgg(a)ziepe.ca>
Cc: Johannes Weiner <hannes(a)cmpxchg.org>
Cc: John Hubbard <jhubbard(a)nvidia.com>
Cc: Keir Fraser <keirf(a)google.com>
Cc: Konstantin Khlebnikov <koct9i(a)gmail.com>
Cc: Li Zhe <lizhe.67(a)bytedance.com>
Cc: Matthew Wilcox (Oracle) <willy(a)infradead.org>
Cc: Peter Xu <peterx(a)redhat.com>
Cc: Shivank Garg <shivankg(a)amd.com>
Cc: Vlastimil Babka <vbabka(a)suse.cz>
Cc: Wei Xu <weixugc(a)google.com>
Cc: Will Deacon <will(a)kernel.org>
Cc: yangge <yangge1116(a)126.com>
Cc: Yuanchu Xie <yuanchu(a)google.com>
Cc: Yu Zhao <yuzhao(a)google.com>
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
include/linux/mm.h | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
--- a/include/linux/mm.h~mm-fix-folio_expected_ref_count-when-pg_private_2
+++ a/include/linux/mm.h
@@ -2234,8 +2234,8 @@ static inline int folio_expected_ref_cou
} else {
/* One reference per page from the pagecache. */
ref_count += !!folio->mapping << order;
- /* One reference from PG_private. */
- ref_count += folio_test_private(folio);
+ /* One reference from PG_private or PG_private_2. */
+ ref_count += folio_has_private(folio);
}
/* One reference per page table mapping. */
_
Patches currently in -mm which might be from hughd(a)google.com are
mm-fix-folio_expected_ref_count-when-pg_private_2.patch
mm-gup-check-ref_count-instead-of-lru-before-migration.patch
mm-gup-local-lru_add_drain-to-avoid-lru_add_drain_all.patch
mm-revert-mm-gup-clear-the-lru-flag-of-a-page-before-adding-to-lru-batch.patch
mm-revert-mm-vmscanc-fix-oom-on-swap-stress-test.patch
mm-folio_may_be_cached-unless-folio_test_large.patch
mm-lru_add_drain_all-do-local-lru_add_drain-first.patch
2 weeks, 6 days
- 2
- 1
PCI: dwc: Ensure that dw_pcie_wait_for_link() waits 100 ms after link up
by Marek Vasut
Please backport the following commit into Linux v5.4 and newer stable
releases:
80dc18a0cba8dea42614f021b20a04354b213d86
The backport will likely depend on macro rename commit:
817f989700fddefa56e5e443e7d138018ca6709d
This part of commit description clarifies why this is a fix:
"
As per PCIe r6.0, sec 6.6.1, a Downstream Port that supports Link speeds
greater than 5.0 GT/s, software must wait a minimum of 100 ms after Link
training completes before sending a Configuration Request.
"
In practice, this makes detection of PCIe Gen3 and Gen4 SSDs reliable on
Renesas R-Car V4H SoC. Without this commit, the SSDs sporadically do not
get detected, or sometimes they link up in Gen1 mode.
This fixes commit
886bc5ceb5cc ("PCI: designware: Add generic dw_pcie_wait_for_link()")
which is in v4.5-rc1-4-g886bc5ceb5cc3 , so I think this fix should be
backported to all currently maintained stable releases, i.e. v5.4+ .
Thank you
--
Best regards,
Marek Vasut
2 weeks, 6 days
- 2
- 2
+ mm-folio_may_be_cached-unless-folio_test_large.patch added to mm-new branch
by Andrew Morton
The patch titled
Subject: mm: folio_may_be_cached() unless folio_test_large()
has been added to the -mm mm-new branch. Its filename is
mm-folio_may_be_cached-unless-folio_test_large.patch
This patch will shortly appear at
https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patche…
This patch will later appear in the mm-new branch at
git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
Note, mm-new is a provisional staging ground for work-in-progress
patches, and acceptance into mm-new is a notification for others take
notice and to finish up reviews. Please do not hesitate to respond to
review feedback and post updated versions to replace or incrementally
fixup patches in mm-new.
Before you just go and hit "reply", please:
a) Consider who else should be cc'ed
b) Prefer to cc a suitable mailing list as well
c) Ideally: find the original patch on the mailing list and do a
reply-to-all to that, adding suitable additional cc's
*** Remember to use Documentation/process/submit-checklist.rst when testing your code ***
The -mm tree is included into linux-next via the mm-everything
branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
and is updated there every 2-3 working days
------------------------------------------------------
From: Hugh Dickins <hughd(a)google.com>
Subject: mm: folio_may_be_cached() unless folio_test_large()
Date: Sun, 31 Aug 2025 02:16:25 -0700 (PDT)
mm/swap.c and mm/mlock.c agree to drain any per-CPU batch as soon as a
large folio is added: so collect_longterm_unpinnable_folios() just wastes
effort when calling lru_add_drain_all() on a large folio.
But although there is good reason not to batch up PMD-sized folios, we
might well benefit from batching a small number of low-order mTHPs (though
unclear how that "small number" limitation will be implemented).
So ask if folio_may_be_cached() rather than !folio_test_large(), to
insulate those particular checks from future change. Name preferred to
"folio_is_batchable" because large folios can well be put on a batch: it's
just the per-CPU LRU caches, drained much later, which need care.
Marked for stable, to counter the increase in lru_add_drain_all()s from
"mm/gup: check ref_count instead of lru before migration".
Link: https://lkml.kernel.org/r/861c061c-51cd-b940-49df-9f55e1fee2c8@google.com
Signed-off-by: Hugh Dickins <hughd(a)google.com>
Suggested-by: David Hildenbrand <david(a)redhat.com>
Cc: <stable(a)vger.kernel.org>
Cc: "Aneesh Kumar K.V" <aneesh.kumar(a)kernel.org>
Cc: Axel Rasmussen <axelrasmussen(a)google.com>
Cc: Chris Li <chrisl(a)kernel.org>
Cc: Christoph Hellwig <hch(a)infradead.org>
Cc: Jason Gunthorpe <jgg(a)ziepe.ca>
Cc: Johannes Weiner <hannes(a)cmpxchg.org>
Cc: John Hubbard <jhubbard(a)nvidia.com>
Cc: Keir Fraser <keirf(a)google.com>
Cc: Konstantin Khlebnikov <koct9i(a)gmail.com>
Cc: Li Zhe <lizhe.67(a)bytedance.com>
Cc: Matthew Wilcox (Oracle) <willy(a)infradead.org>
Cc: Peter Xu <peterx(a)redhat.com>
Cc: Shivank Garg <shivankg(a)amd.com>
Cc: Vlastimil Babka <vbabka(a)suse.cz>
Cc: Wei Xu <weixugc(a)google.com>
Cc: Will Deacon <will(a)kernel.org>
Cc: yangge <yangge1116(a)126.com>
Cc: Yuanchu Xie <yuanchu(a)google.com>
Cc: Yu Zhao <yuzhao(a)google.com>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
include/linux/swap.h | 10 ++++++++++
mm/gup.c | 5 +++--
mm/mlock.c | 6 +++---
mm/swap.c | 2 +-
4 files changed, 17 insertions(+), 6 deletions(-)
--- a/include/linux/swap.h~mm-folio_may_be_cached-unless-folio_test_large
+++ a/include/linux/swap.h
@@ -381,6 +381,16 @@ void folio_add_lru_vma(struct folio *, s
void mark_page_accessed(struct page *);
void folio_mark_accessed(struct folio *);
+static inline bool folio_may_be_cached(struct folio *folio)
+{
+ /*
+ * Holding PMD-sized folios in per-CPU LRU cache unbalances accounting.
+ * Holding small numbers of low-order mTHP folios in per-CPU LRU cache
+ * will be sensible, but nobody has implemented and tested that yet.
+ */
+ return !folio_test_large(folio);
+}
+
extern atomic_t lru_disable_count;
static inline bool lru_cache_disabled(void)
--- a/mm/gup.c~mm-folio_may_be_cached-unless-folio_test_large
+++ a/mm/gup.c
@@ -2309,8 +2309,9 @@ static unsigned long collect_longterm_un
continue;
}
- if (drain_allow && folio_ref_count(folio) !=
- folio_expected_ref_count(folio) + 1) {
+ if (drain_allow && folio_may_be_cached(folio) &&
+ folio_ref_count(folio) !=
+ folio_expected_ref_count(folio) + 1) {
lru_add_drain_all();
drain_allow = false;
}
--- a/mm/mlock.c~mm-folio_may_be_cached-unless-folio_test_large
+++ a/mm/mlock.c
@@ -255,7 +255,7 @@ void mlock_folio(struct folio *folio)
folio_get(folio);
if (!folio_batch_add(fbatch, mlock_lru(folio)) ||
- folio_test_large(folio) || lru_cache_disabled())
+ !folio_may_be_cached(folio) || lru_cache_disabled())
mlock_folio_batch(fbatch);
local_unlock(&mlock_fbatch.lock);
}
@@ -278,7 +278,7 @@ void mlock_new_folio(struct folio *folio
folio_get(folio);
if (!folio_batch_add(fbatch, mlock_new(folio)) ||
- folio_test_large(folio) || lru_cache_disabled())
+ !folio_may_be_cached(folio) || lru_cache_disabled())
mlock_folio_batch(fbatch);
local_unlock(&mlock_fbatch.lock);
}
@@ -299,7 +299,7 @@ void munlock_folio(struct folio *folio)
*/
folio_get(folio);
if (!folio_batch_add(fbatch, folio) ||
- folio_test_large(folio) || lru_cache_disabled())
+ !folio_may_be_cached(folio) || lru_cache_disabled())
mlock_folio_batch(fbatch);
local_unlock(&mlock_fbatch.lock);
}
--- a/mm/swap.c~mm-folio_may_be_cached-unless-folio_test_large
+++ a/mm/swap.c
@@ -192,7 +192,7 @@ static void __folio_batch_add_and_move(s
local_lock(&cpu_fbatches.lock);
if (!folio_batch_add(this_cpu_ptr(fbatch), folio) ||
- folio_test_large(folio) || lru_cache_disabled())
+ !folio_may_be_cached(folio) || lru_cache_disabled())
folio_batch_move_lru(this_cpu_ptr(fbatch), move_fn);
if (disable_irq)
_
Patches currently in -mm which might be from hughd(a)google.com are
mm-fix-folio_expected_ref_count-when-pg_private_2.patch
mm-gup-check-ref_count-instead-of-lru-before-migration.patch
mm-gup-local-lru_add_drain-to-avoid-lru_add_drain_all.patch
mm-revert-mm-gup-clear-the-lru-flag-of-a-page-before-adding-to-lru-batch.patch
mm-revert-mm-vmscanc-fix-oom-on-swap-stress-test.patch
mm-folio_may_be_cached-unless-folio_test_large.patch
mm-lru_add_drain_all-do-local-lru_add_drain-first.patch
2 weeks, 6 days
- 1
- 0
+ mm-revert-mm-vmscanc-fix-oom-on-swap-stress-test.patch added to mm-new branch
by Andrew Morton
The patch titled
Subject: mm: Revert "mm: vmscan.c: fix OOM on swap stress test"
has been added to the -mm mm-new branch. Its filename is
mm-revert-mm-vmscanc-fix-oom-on-swap-stress-test.patch
This patch will shortly appear at
https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patche…
This patch will later appear in the mm-new branch at
git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
Note, mm-new is a provisional staging ground for work-in-progress
patches, and acceptance into mm-new is a notification for others take
notice and to finish up reviews. Please do not hesitate to respond to
review feedback and post updated versions to replace or incrementally
fixup patches in mm-new.
Before you just go and hit "reply", please:
a) Consider who else should be cc'ed
b) Prefer to cc a suitable mailing list as well
c) Ideally: find the original patch on the mailing list and do a
reply-to-all to that, adding suitable additional cc's
*** Remember to use Documentation/process/submit-checklist.rst when testing your code ***
The -mm tree is included into linux-next via the mm-everything
branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
and is updated there every 2-3 working days
------------------------------------------------------
From: Hugh Dickins <hughd(a)google.com>
Subject: mm: Revert "mm: vmscan.c: fix OOM on swap stress test"
Date: Sun, 31 Aug 2025 02:13:55 -0700 (PDT)
This reverts commit 0885ef4705607936fc36a38fd74356e1c465b023: that
was a fix to the reverted 33dfe9204f29b415bbc0abb1a50642d1ba94f5e9.
Link: https://lkml.kernel.org/r/bd440614-3d2c-31d6-1b8f-9635c69cef7c@google.com
Fixes: 0885ef470560 ("mm: vmscan.c: fix OOM on swap stress test")
Signed-off-by: Hugh Dickins <hughd(a)google.com>
Cc: <stable(a)vger.kernel.org>
Cc: "Aneesh Kumar K.V" <aneesh.kumar(a)kernel.org>
Cc: Axel Rasmussen <axelrasmussen(a)google.com>
Cc: Chris Li <chrisl(a)kernel.org>
Cc: Christoph Hellwig <hch(a)infradead.org>
Cc: David Hildenbrand <david(a)redhat.com>
Cc: Jason Gunthorpe <jgg(a)ziepe.ca>
Cc: Johannes Weiner <hannes(a)cmpxchg.org>
Cc: John Hubbard <jhubbard(a)nvidia.com>
Cc: Keir Fraser <keirf(a)google.com>
Cc: Konstantin Khlebnikov <koct9i(a)gmail.com>
Cc: Li Zhe <lizhe.67(a)bytedance.com>
Cc: Matthew Wilcox (Oracle) <willy(a)infradead.org>
Cc: Peter Xu <peterx(a)redhat.com>
Cc: Shivank Garg <shivankg(a)amd.com>
Cc: Vlastimil Babka <vbabka(a)suse.cz>
Cc: Wei Xu <weixugc(a)google.com>
Cc: Will Deacon <will(a)kernel.org>
Cc: yangge <yangge1116(a)126.com>
Cc: Yuanchu Xie <yuanchu(a)google.com>
Cc: Yu Zhao <yuzhao(a)google.com>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
mm/vmscan.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
--- a/mm/vmscan.c~mm-revert-mm-vmscanc-fix-oom-on-swap-stress-test
+++ a/mm/vmscan.c
@@ -4500,7 +4500,7 @@ static bool sort_folio(struct lruvec *lr
}
/* ineligible */
- if (!folio_test_lru(folio) || zone > sc->reclaim_idx) {
+ if (zone > sc->reclaim_idx) {
gen = folio_inc_gen(lruvec, folio, false);
list_move_tail(&folio->lru, &lrugen->folios[gen][type][zone]);
return true;
_
Patches currently in -mm which might be from hughd(a)google.com are
mm-fix-folio_expected_ref_count-when-pg_private_2.patch
mm-gup-check-ref_count-instead-of-lru-before-migration.patch
mm-gup-local-lru_add_drain-to-avoid-lru_add_drain_all.patch
mm-revert-mm-gup-clear-the-lru-flag-of-a-page-before-adding-to-lru-batch.patch
mm-revert-mm-vmscanc-fix-oom-on-swap-stress-test.patch
mm-folio_may_be_cached-unless-folio_test_large.patch
mm-lru_add_drain_all-do-local-lru_add_drain-first.patch
2 weeks, 6 days
- 1
- 0
+ mm-revert-mm-gup-clear-the-lru-flag-of-a-page-before-adding-to-lru-batch.patch added to mm-new branch
by Andrew Morton
The patch titled
Subject: mm: Revert "mm/gup: clear the LRU flag of a page before adding to LRU batch"
has been added to the -mm mm-new branch. Its filename is
mm-revert-mm-gup-clear-the-lru-flag-of-a-page-before-adding-to-lru-batch.patch
This patch will shortly appear at
https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patche…
This patch will later appear in the mm-new branch at
git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
Note, mm-new is a provisional staging ground for work-in-progress
patches, and acceptance into mm-new is a notification for others take
notice and to finish up reviews. Please do not hesitate to respond to
review feedback and post updated versions to replace or incrementally
fixup patches in mm-new.
Before you just go and hit "reply", please:
a) Consider who else should be cc'ed
b) Prefer to cc a suitable mailing list as well
c) Ideally: find the original patch on the mailing list and do a
reply-to-all to that, adding suitable additional cc's
*** Remember to use Documentation/process/submit-checklist.rst when testing your code ***
The -mm tree is included into linux-next via the mm-everything
branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
and is updated there every 2-3 working days
------------------------------------------------------
From: Hugh Dickins <hughd(a)google.com>
Subject: mm: Revert "mm/gup: clear the LRU flag of a page before adding to LRU batch"
Date: Sun, 31 Aug 2025 02:11:33 -0700 (PDT)
This reverts commit 33dfe9204f29b415bbc0abb1a50642d1ba94f5e9: now that
collect_longterm_unpinnable_folios() is checking ref_count instead of lru,
and mlock/munlock do not participate in the revised LRU flag clearing,
those changes are misleading, and enlarge the window during which
mlock/munlock may miss an mlock_count update.
It is possible (I'd hesitate to claim probable) that the greater
likelihood of missed mlock_count updates would explain the "Realtime
threads delayed due to kcompactd0" observed on 6.12 in the Link below. If
that is the case, this reversion will help; but a complete solution needs
also a further patch, beyond the scope of this series.
Included some 80-column cleanup around folio_batch_add_and_move().
The role of folio_test_clear_lru() (before taking per-memcg lru_lock) is
questionable since 6.13 removed mem_cgroup_move_account() etc; but perhaps
there are still some races which need it - not examined here.
Link: https://lore.kernel.org/linux-mm/DU0PR01MB10385345F7153F334100981888259A@DU…
Link: https://lkml.kernel.org/r/0215a42b-99cd-612a-95f7-56f8251d99ef@google.com
Fixes: 33dfe9204f29 ("mm/gup: clear the LRU flag of a page before adding to LRU batch")
Signed-off-by: Hugh Dickins <hughd(a)google.com>
Cc: <stable(a)vger.kernel.org>
Cc: "Aneesh Kumar K.V" <aneesh.kumar(a)kernel.org>
Cc: Axel Rasmussen <axelrasmussen(a)google.com>
Cc: Chris Li <chrisl(a)kernel.org>
Cc: Christoph Hellwig <hch(a)infradead.org>
Cc: David Hildenbrand <david(a)redhat.com>
Cc: Jason Gunthorpe <jgg(a)ziepe.ca>
Cc: Johannes Weiner <hannes(a)cmpxchg.org>
Cc: John Hubbard <jhubbard(a)nvidia.com>
Cc: Keir Fraser <keirf(a)google.com>
Cc: Konstantin Khlebnikov <koct9i(a)gmail.com>
Cc: Li Zhe <lizhe.67(a)bytedance.com>
Cc: Matthew Wilcox (Oracle) <willy(a)infradead.org>
Cc: Peter Xu <peterx(a)redhat.com>
Cc: Shivank Garg <shivankg(a)amd.com>
Cc: Vlastimil Babka <vbabka(a)suse.cz>
Cc: Wei Xu <weixugc(a)google.com>
Cc: Will Deacon <will(a)kernel.org>
Cc: yangge <yangge1116(a)126.com>
Cc: Yuanchu Xie <yuanchu(a)google.com>
Cc: Yu Zhao <yuzhao(a)google.com>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
mm/swap.c | 50 ++++++++++++++++++++++++++------------------------
1 file changed, 26 insertions(+), 24 deletions(-)
--- a/mm/swap.c~mm-revert-mm-gup-clear-the-lru-flag-of-a-page-before-adding-to-lru-batch
+++ a/mm/swap.c
@@ -164,6 +164,10 @@ static void folio_batch_move_lru(struct
for (i = 0; i < folio_batch_count(fbatch); i++) {
struct folio *folio = fbatch->folios[i];
+ /* block memcg migration while the folio moves between lru */
+ if (move_fn != lru_add && !folio_test_clear_lru(folio))
+ continue;
+
folio_lruvec_relock_irqsave(folio, &lruvec, &flags);
move_fn(lruvec, folio);
@@ -176,14 +180,10 @@ static void folio_batch_move_lru(struct
}
static void __folio_batch_add_and_move(struct folio_batch __percpu *fbatch,
- struct folio *folio, move_fn_t move_fn,
- bool on_lru, bool disable_irq)
+ struct folio *folio, move_fn_t move_fn, bool disable_irq)
{
unsigned long flags;
- if (on_lru && !folio_test_clear_lru(folio))
- return;
-
folio_get(folio);
if (disable_irq)
@@ -191,8 +191,8 @@ static void __folio_batch_add_and_move(s
else
local_lock(&cpu_fbatches.lock);
- if (!folio_batch_add(this_cpu_ptr(fbatch), folio) || folio_test_large(folio) ||
- lru_cache_disabled())
+ if (!folio_batch_add(this_cpu_ptr(fbatch), folio) ||
+ folio_test_large(folio) || lru_cache_disabled())
folio_batch_move_lru(this_cpu_ptr(fbatch), move_fn);
if (disable_irq)
@@ -201,13 +201,13 @@ static void __folio_batch_add_and_move(s
local_unlock(&cpu_fbatches.lock);
}
-#define folio_batch_add_and_move(folio, op, on_lru) \
- __folio_batch_add_and_move( \
- &cpu_fbatches.op, \
- folio, \
- op, \
- on_lru, \
- offsetof(struct cpu_fbatches, op) >= offsetof(struct cpu_fbatches, lock_irq) \
+#define folio_batch_add_and_move(folio, op) \
+ __folio_batch_add_and_move( \
+ &cpu_fbatches.op, \
+ folio, \
+ op, \
+ offsetof(struct cpu_fbatches, op) >= \
+ offsetof(struct cpu_fbatches, lock_irq) \
)
static void lru_move_tail(struct lruvec *lruvec, struct folio *folio)
@@ -231,10 +231,10 @@ static void lru_move_tail(struct lruvec
void folio_rotate_reclaimable(struct folio *folio)
{
if (folio_test_locked(folio) || folio_test_dirty(folio) ||
- folio_test_unevictable(folio))
+ folio_test_unevictable(folio) || !folio_test_lru(folio))
return;
- folio_batch_add_and_move(folio, lru_move_tail, true);
+ folio_batch_add_and_move(folio, lru_move_tail);
}
void lru_note_cost_unlock_irq(struct lruvec *lruvec, bool file,
@@ -328,10 +328,11 @@ static void folio_activate_drain(int cpu
void folio_activate(struct folio *folio)
{
- if (folio_test_active(folio) || folio_test_unevictable(folio))
+ if (folio_test_active(folio) || folio_test_unevictable(folio) ||
+ !folio_test_lru(folio))
return;
- folio_batch_add_and_move(folio, lru_activate, true);
+ folio_batch_add_and_move(folio, lru_activate);
}
#else
@@ -507,7 +508,7 @@ void folio_add_lru(struct folio *folio)
lru_gen_in_fault() && !(current->flags & PF_MEMALLOC))
folio_set_active(folio);
- folio_batch_add_and_move(folio, lru_add, false);
+ folio_batch_add_and_move(folio, lru_add);
}
EXPORT_SYMBOL(folio_add_lru);
@@ -685,13 +686,13 @@ void lru_add_drain_cpu(int cpu)
void deactivate_file_folio(struct folio *folio)
{
/* Deactivating an unevictable folio will not accelerate reclaim */
- if (folio_test_unevictable(folio))
+ if (folio_test_unevictable(folio) || !folio_test_lru(folio))
return;
if (lru_gen_enabled() && lru_gen_clear_refs(folio))
return;
- folio_batch_add_and_move(folio, lru_deactivate_file, true);
+ folio_batch_add_and_move(folio, lru_deactivate_file);
}
/*
@@ -704,13 +705,13 @@ void deactivate_file_folio(struct folio
*/
void folio_deactivate(struct folio *folio)
{
- if (folio_test_unevictable(folio))
+ if (folio_test_unevictable(folio) || !folio_test_lru(folio))
return;
if (lru_gen_enabled() ? lru_gen_clear_refs(folio) : !folio_test_active(folio))
return;
- folio_batch_add_and_move(folio, lru_deactivate, true);
+ folio_batch_add_and_move(folio, lru_deactivate);
}
/**
@@ -723,10 +724,11 @@ void folio_deactivate(struct folio *foli
void folio_mark_lazyfree(struct folio *folio)
{
if (!folio_test_anon(folio) || !folio_test_swapbacked(folio) ||
+ !folio_test_lru(folio) ||
folio_test_swapcache(folio) || folio_test_unevictable(folio))
return;
- folio_batch_add_and_move(folio, lru_lazyfree, true);
+ folio_batch_add_and_move(folio, lru_lazyfree);
}
void lru_add_drain(void)
_
Patches currently in -mm which might be from hughd(a)google.com are
mm-fix-folio_expected_ref_count-when-pg_private_2.patch
mm-gup-check-ref_count-instead-of-lru-before-migration.patch
mm-gup-local-lru_add_drain-to-avoid-lru_add_drain_all.patch
mm-revert-mm-gup-clear-the-lru-flag-of-a-page-before-adding-to-lru-batch.patch
mm-revert-mm-vmscanc-fix-oom-on-swap-stress-test.patch
mm-folio_may_be_cached-unless-folio_test_large.patch
mm-lru_add_drain_all-do-local-lru_add_drain-first.patch
2 weeks, 6 days
- 1
- 0
+ mm-gup-local-lru_add_drain-to-avoid-lru_add_drain_all.patch added to mm-new branch
by Andrew Morton
The patch titled
Subject: mm/gup: local lru_add_drain() to avoid lru_add_drain_all()
has been added to the -mm mm-new branch. Its filename is
mm-gup-local-lru_add_drain-to-avoid-lru_add_drain_all.patch
This patch will shortly appear at
https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patche…
This patch will later appear in the mm-new branch at
git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
Note, mm-new is a provisional staging ground for work-in-progress
patches, and acceptance into mm-new is a notification for others take
notice and to finish up reviews. Please do not hesitate to respond to
review feedback and post updated versions to replace or incrementally
fixup patches in mm-new.
Before you just go and hit "reply", please:
a) Consider who else should be cc'ed
b) Prefer to cc a suitable mailing list as well
c) Ideally: find the original patch on the mailing list and do a
reply-to-all to that, adding suitable additional cc's
*** Remember to use Documentation/process/submit-checklist.rst when testing your code ***
The -mm tree is included into linux-next via the mm-everything
branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
and is updated there every 2-3 working days
------------------------------------------------------
From: Hugh Dickins <hughd(a)google.com>
Subject: mm/gup: local lru_add_drain() to avoid lru_add_drain_all()
Date: Sun, 31 Aug 2025 02:08:26 -0700 (PDT)
In many cases, if collect_longterm_unpinnable_folios() does need to drain
the LRU cache to release a reference, the cache in question is on this
same CPU, and much more efficiently drained by a preliminary local
lru_add_drain(), than the later cross-CPU lru_add_drain_all().
Marked for stable, to counter the increase in lru_add_drain_all()s from
"mm/gup: check ref_count instead of lru before migration". Note for clean
backports: can take 6.16 commit a03db236aebf ("gup: optimize longterm
pin_user_pages() for large folio") first.
Link: https://lkml.kernel.org/r/165ccfdb-16b5-ac11-0d66-2984293590c8@google.com
Signed-off-by: Hugh Dickins <hughd(a)google.com>
Cc: <stable(a)vger.kernel.org>
Cc: "Aneesh Kumar K.V" <aneesh.kumar(a)kernel.org>
Cc: Axel Rasmussen <axelrasmussen(a)google.com>
Cc: Chris Li <chrisl(a)kernel.org>
Cc: Christoph Hellwig <hch(a)infradead.org>
Cc: David Hildenbrand <david(a)redhat.com>
Cc: Jason Gunthorpe <jgg(a)ziepe.ca>
Cc: Johannes Weiner <hannes(a)cmpxchg.org>
Cc: John Hubbard <jhubbard(a)nvidia.com>
Cc: Keir Fraser <keirf(a)google.com>
Cc: Konstantin Khlebnikov <koct9i(a)gmail.com>
Cc: Li Zhe <lizhe.67(a)bytedance.com>
Cc: Matthew Wilcox (Oracle) <willy(a)infradead.org>
Cc: Peter Xu <peterx(a)redhat.com>
Cc: Shivank Garg <shivankg(a)amd.com>
Cc: Vlastimil Babka <vbabka(a)suse.cz>
Cc: Wei Xu <weixugc(a)google.com>
Cc: Will Deacon <will(a)kernel.org>
Cc: yangge <yangge1116(a)126.com>
Cc: Yuanchu Xie <yuanchu(a)google.com>
Cc: Yu Zhao <yuzhao(a)google.com>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
mm/gup.c | 2 ++
1 file changed, 2 insertions(+)
--- a/mm/gup.c~mm-gup-local-lru_add_drain-to-avoid-lru_add_drain_all
+++ a/mm/gup.c
@@ -2291,6 +2291,8 @@ static unsigned long collect_longterm_un
struct folio *folio;
long i = 0;
+ lru_add_drain();
+
for (folio = pofs_get_folio(pofs, i); folio;
folio = pofs_next_folio(folio, pofs, &i)) {
_
Patches currently in -mm which might be from hughd(a)google.com are
mm-fix-folio_expected_ref_count-when-pg_private_2.patch
mm-gup-check-ref_count-instead-of-lru-before-migration.patch
mm-gup-local-lru_add_drain-to-avoid-lru_add_drain_all.patch
mm-revert-mm-gup-clear-the-lru-flag-of-a-page-before-adding-to-lru-batch.patch
mm-revert-mm-vmscanc-fix-oom-on-swap-stress-test.patch
mm-folio_may_be_cached-unless-folio_test_large.patch
mm-lru_add_drain_all-do-local-lru_add_drain-first.patch
2 weeks, 6 days
- 1
- 0
+ mm-gup-check-ref_count-instead-of-lru-before-migration.patch added to mm-new branch
by Andrew Morton
The patch titled
Subject: mm/gup: check ref_count instead of lru before migration
has been added to the -mm mm-new branch. Its filename is
mm-gup-check-ref_count-instead-of-lru-before-migration.patch
This patch will shortly appear at
https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patche…
This patch will later appear in the mm-new branch at
git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
Note, mm-new is a provisional staging ground for work-in-progress
patches, and acceptance into mm-new is a notification for others take
notice and to finish up reviews. Please do not hesitate to respond to
review feedback and post updated versions to replace or incrementally
fixup patches in mm-new.
Before you just go and hit "reply", please:
a) Consider who else should be cc'ed
b) Prefer to cc a suitable mailing list as well
c) Ideally: find the original patch on the mailing list and do a
reply-to-all to that, adding suitable additional cc's
*** Remember to use Documentation/process/submit-checklist.rst when testing your code ***
The -mm tree is included into linux-next via the mm-everything
branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
and is updated there every 2-3 working days
------------------------------------------------------
From: Hugh Dickins <hughd(a)google.com>
Subject: mm/gup: check ref_count instead of lru before migration
Date: Sun, 31 Aug 2025 02:05:56 -0700 (PDT)
Will Deacon reports:-
When taking a longterm GUP pin via pin_user_pages(),
__gup_longterm_locked() tries to migrate target folios that should not be
longterm pinned, for example because they reside in a CMA region or
movable zone. This is done by first pinning all of the target folios
anyway, collecting all of the longterm-unpinnable target folios into a
list, dropping the pins that were just taken and finally handing the list
off to migrate_pages() for the actual migration.
It is critically important that no unexpected references are held on the
folios being migrated, otherwise the migration will fail and
pin_user_pages() will return -ENOMEM to its caller. Unfortunately, it is
relatively easy to observe migration failures when running pKVM (which
uses pin_user_pages() on crosvm's virtual address space to resolve stage-2
page faults from the guest) on a 6.15-based Pixel 6 device and this
results in the VM terminating prematurely.
In the failure case, 'crosvm' has called mlock(MLOCK_ONFAULT) on its
mapping of guest memory prior to the pinning. Subsequently, when
pin_user_pages() walks the page-table, the relevant 'pte' is not present
and so the faulting logic allocates a new folio, mlocks it with
mlock_folio() and maps it in the page-table.
Since commit 2fbb0c10d1e8 ("mm/munlock: mlock_page() munlock_page() batch
by pagevec"), mlock/munlock operations on a folio (formerly page), are
deferred. For example, mlock_folio() takes an additional reference on the
target folio before placing it into a per-cpu 'folio_batch' for later
processing by mlock_folio_batch(), which drops the refcount once the
operation is complete. Processing of the batches is coupled with the LRU
batch logic and can be forcefully drained with lru_add_drain_all() but as
long as a folio remains unprocessed on the batch, its refcount will be
elevated.
This deferred batching therefore interacts poorly with the pKVM pinning
scenario as we can find ourselves in a situation where the migration code
fails to migrate a folio due to the elevated refcount from the pending
mlock operation.
Hugh Dickins adds:-
!folio_test_lru() has never been a very reliable way to tell if an
lru_add_drain_all() is worth calling, to remove LRU cache references to
make the folio migratable: the LRU flag may be set even while the folio is
held with an extra reference in a per-CPU LRU cache.
5.18 commit 2fbb0c10d1e8 may have made it more unreliable. Then 6.11
commit 33dfe9204f29 ("mm/gup: clear the LRU flag of a page before adding
to LRU batch") tried to make it reliable, by moving LRU flag clearing; but
missed the mlock/munlock batches, so still unreliable as reported.
And it turns out to be difficult to extend 33dfe9204f29's LRU flag
clearing to the mlock/munlock batches: if they do benefit from batching,
mlock/munlock cannot be so effective when easily suppressed while !LRU.
Instead, switch to an expected ref_count check, which was more reliable
all along: some more false positives (unhelpful drains) than before, and
never a guarantee that the folio will prove migratable, but better.
Note for stable backports: requires 6.16 commit 86ebd50224c0 ("mm: add
folio_expected_ref_count() for reference count calculation") and 6.17
commit ("mm: fix folio_expected_ref_count() when PG_private_2").
Link: https://lkml.kernel.org/r/47c51c9a-140f-1ea1-b692-c4bae5d1fa58@google.com
Fixes: 9a4e9f3b2d73 ("mm: update get_user_pages_longterm to migrate pages allocated from CMA region")
Signed-off-by: Hugh Dickins <hughd(a)google.com>
Reported-by: Will Deacon <will(a)kernel.org>
Link: https://lore.kernel.org/linux-mm/20250815101858.24352-1-will@kernel.org/
Cc: <stable(a)vger.kernel.org>
Cc: "Aneesh Kumar K.V" <aneesh.kumar(a)kernel.org>
Cc: Axel Rasmussen <axelrasmussen(a)google.com>
Cc: Chris Li <chrisl(a)kernel.org>
Cc: Christoph Hellwig <hch(a)infradead.org>
Cc: David Hildenbrand <david(a)redhat.com>
Cc: Jason Gunthorpe <jgg(a)ziepe.ca>
Cc: Johannes Weiner <hannes(a)cmpxchg.org>
Cc: John Hubbard <jhubbard(a)nvidia.com>
Cc: Keir Fraser <keirf(a)google.com>
Cc: Konstantin Khlebnikov <koct9i(a)gmail.com>
Cc: Li Zhe <lizhe.67(a)bytedance.com>
Cc: Matthew Wilcox (Oracle) <willy(a)infradead.org>
Cc: Peter Xu <peterx(a)redhat.com>
Cc: Shivank Garg <shivankg(a)amd.com>
Cc: Vlastimil Babka <vbabka(a)suse.cz>
Cc: Wei Xu <weixugc(a)google.com>
Cc: yangge <yangge1116(a)126.com>
Cc: Yuanchu Xie <yuanchu(a)google.com>
Cc: Yu Zhao <yuzhao(a)google.com>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
mm/gup.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
--- a/mm/gup.c~mm-gup-check-ref_count-instead-of-lru-before-migration
+++ a/mm/gup.c
@@ -2307,7 +2307,8 @@ static unsigned long collect_longterm_un
continue;
}
- if (!folio_test_lru(folio) && drain_allow) {
+ if (drain_allow && folio_ref_count(folio) !=
+ folio_expected_ref_count(folio) + 1) {
lru_add_drain_all();
drain_allow = false;
}
_
Patches currently in -mm which might be from hughd(a)google.com are
mm-fix-folio_expected_ref_count-when-pg_private_2.patch
mm-gup-check-ref_count-instead-of-lru-before-migration.patch
mm-gup-local-lru_add_drain-to-avoid-lru_add_drain_all.patch
mm-revert-mm-gup-clear-the-lru-flag-of-a-page-before-adding-to-lru-batch.patch
mm-revert-mm-vmscanc-fix-oom-on-swap-stress-test.patch
mm-folio_may_be_cached-unless-folio_test_large.patch
mm-lru_add_drain_all-do-local-lru_add_drain-first.patch
2 weeks, 6 days
- 1
- 0
+ mm-vmalloc-mm-kasan-respect-gfp-mask-in-kasan_populate_vmalloc.patch added to mm-hotfixes-unstable branch
by Andrew Morton
The patch titled
Subject: mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()
has been added to the -mm mm-hotfixes-unstable branch. Its filename is
mm-vmalloc-mm-kasan-respect-gfp-mask-in-kasan_populate_vmalloc.patch
This patch will shortly appear at
https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patche…
This patch will later appear in the mm-hotfixes-unstable branch at
git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
Before you just go and hit "reply", please:
a) Consider who else should be cc'ed
b) Prefer to cc a suitable mailing list as well
c) Ideally: find the original patch on the mailing list and do a
reply-to-all to that, adding suitable additional cc's
*** Remember to use Documentation/process/submit-checklist.rst when testing your code ***
The -mm tree is included into linux-next via the mm-everything
branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
and is updated there every 2-3 working days
------------------------------------------------------
From: "Uladzislau Rezki (Sony)" <urezki(a)gmail.com>
Subject: mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()
Date: Sun, 31 Aug 2025 14:10:58 +0200
kasan_populate_vmalloc() and its helpers ignore the caller's gfp_mask and
always allocate memory using the hardcoded GFP_KERNEL flag. This makes
them inconsistent with vmalloc(), which was recently extended to support
GFP_NOFS and GFP_NOIO allocations.
Page table allocations performed during shadow population also ignore the
external gfp_mask. To preserve the intended semantics of GFP_NOFS and
GFP_NOIO, wrap the apply_to_page_range() calls into the appropriate
memalloc scope.
This patch:
- Extends kasan_populate_vmalloc() and helpers to take gfp_mask;
- Passes gfp_mask down to alloc_pages_bulk() and __get_free_page();
- Enforces GFP_NOFS/NOIO semantics with memalloc_*_save()/restore()
around apply_to_page_range();
- Updates vmalloc.c and percpu allocator call sites accordingly.
Link: https://lkml.kernel.org/r/20250831121058.92971-1-urezki@gmail.com
Fixes: 451769ebb7e7 ("mm/vmalloc: alloc GFP_NO{FS,IO} for vmalloc")
Signed-off-by: Uladzislau Rezki (Sony) <urezki(a)gmail.com>
Cc: Andrey Ryabinin <ryabinin.a.a(a)gmail.com>
Cc: Baoquan He <bhe(a)redhat.com>
Cc: Michal Hocko <mhocko(a)kernel.org>
Cc: Alexander Potapenko <glider(a)google.com>
Cc: Andrey Konovalov <andreyknvl(a)gmail.com>
Cc: Dmitry Vyukov <dvyukov(a)google.com>
Cc: Vincenzo Frascino <vincenzo.frascino(a)arm.com>
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
include/linux/kasan.h | 6 +++---
mm/kasan/shadow.c | 31 ++++++++++++++++++++++++-------
mm/vmalloc.c | 8 ++++----
3 files changed, 31 insertions(+), 14 deletions(-)
--- a/include/linux/kasan.h~mm-vmalloc-mm-kasan-respect-gfp-mask-in-kasan_populate_vmalloc
+++ a/include/linux/kasan.h
@@ -562,7 +562,7 @@ static inline void kasan_init_hw_tags(vo
#if defined(CONFIG_KASAN_GENERIC) || defined(CONFIG_KASAN_SW_TAGS)
void kasan_populate_early_vm_area_shadow(void *start, unsigned long size);
-int kasan_populate_vmalloc(unsigned long addr, unsigned long size);
+int kasan_populate_vmalloc(unsigned long addr, unsigned long size, gfp_t gfp_mask);
void kasan_release_vmalloc(unsigned long start, unsigned long end,
unsigned long free_region_start,
unsigned long free_region_end,
@@ -574,7 +574,7 @@ static inline void kasan_populate_early_
unsigned long size)
{ }
static inline int kasan_populate_vmalloc(unsigned long start,
- unsigned long size)
+ unsigned long size, gfp_t gfp_mask)
{
return 0;
}
@@ -610,7 +610,7 @@ static __always_inline void kasan_poison
static inline void kasan_populate_early_vm_area_shadow(void *start,
unsigned long size) { }
static inline int kasan_populate_vmalloc(unsigned long start,
- unsigned long size)
+ unsigned long size, gfp_t gfp_mask)
{
return 0;
}
--- a/mm/kasan/shadow.c~mm-vmalloc-mm-kasan-respect-gfp-mask-in-kasan_populate_vmalloc
+++ a/mm/kasan/shadow.c
@@ -336,13 +336,13 @@ static void ___free_pages_bulk(struct pa
}
}
-static int ___alloc_pages_bulk(struct page **pages, int nr_pages)
+static int ___alloc_pages_bulk(struct page **pages, int nr_pages, gfp_t gfp_mask)
{
unsigned long nr_populated, nr_total = nr_pages;
struct page **page_array = pages;
while (nr_pages) {
- nr_populated = alloc_pages_bulk(GFP_KERNEL, nr_pages, pages);
+ nr_populated = alloc_pages_bulk(gfp_mask, nr_pages, pages);
if (!nr_populated) {
___free_pages_bulk(page_array, nr_total - nr_pages);
return -ENOMEM;
@@ -354,25 +354,42 @@ static int ___alloc_pages_bulk(struct pa
return 0;
}
-static int __kasan_populate_vmalloc(unsigned long start, unsigned long end)
+static int __kasan_populate_vmalloc(unsigned long start, unsigned long end, gfp_t gfp_mask)
{
unsigned long nr_pages, nr_total = PFN_UP(end - start);
struct vmalloc_populate_data data;
+ unsigned int flags;
int ret = 0;
- data.pages = (struct page **)__get_free_page(GFP_KERNEL | __GFP_ZERO);
+ data.pages = (struct page **)__get_free_page(gfp_mask | __GFP_ZERO);
if (!data.pages)
return -ENOMEM;
while (nr_total) {
nr_pages = min(nr_total, PAGE_SIZE / sizeof(data.pages[0]));
- ret = ___alloc_pages_bulk(data.pages, nr_pages);
+ ret = ___alloc_pages_bulk(data.pages, nr_pages, gfp_mask);
if (ret)
break;
data.start = start;
+
+ /*
+ * page tables allocations ignore external gfp mask, enforce it
+ * by the scope API
+ */
+ if ((gfp_mask & (__GFP_FS | __GFP_IO)) == __GFP_IO)
+ flags = memalloc_nofs_save();
+ else if ((gfp_mask & (__GFP_FS | __GFP_IO)) == 0)
+ flags = memalloc_noio_save();
+
ret = apply_to_page_range(&init_mm, start, nr_pages * PAGE_SIZE,
kasan_populate_vmalloc_pte, &data);
+
+ if ((gfp_mask & (__GFP_FS | __GFP_IO)) == __GFP_IO)
+ memalloc_nofs_restore(flags);
+ else if ((gfp_mask & (__GFP_FS | __GFP_IO)) == 0)
+ memalloc_noio_restore(flags);
+
___free_pages_bulk(data.pages, nr_pages);
if (ret)
break;
@@ -386,7 +403,7 @@ static int __kasan_populate_vmalloc(unsi
return ret;
}
-int kasan_populate_vmalloc(unsigned long addr, unsigned long size)
+int kasan_populate_vmalloc(unsigned long addr, unsigned long size, gfp_t gfp_mask)
{
unsigned long shadow_start, shadow_end;
int ret;
@@ -415,7 +432,7 @@ int kasan_populate_vmalloc(unsigned long
shadow_start = PAGE_ALIGN_DOWN(shadow_start);
shadow_end = PAGE_ALIGN(shadow_end);
- ret = __kasan_populate_vmalloc(shadow_start, shadow_end);
+ ret = __kasan_populate_vmalloc(shadow_start, shadow_end, gfp_mask);
if (ret)
return ret;
--- a/mm/vmalloc.c~mm-vmalloc-mm-kasan-respect-gfp-mask-in-kasan_populate_vmalloc
+++ a/mm/vmalloc.c
@@ -2026,6 +2026,8 @@ static struct vmap_area *alloc_vmap_area
if (unlikely(!vmap_initialized))
return ERR_PTR(-EBUSY);
+ /* Only reclaim behaviour flags are relevant. */
+ gfp_mask = gfp_mask & GFP_RECLAIM_MASK;
might_sleep();
/*
@@ -2038,8 +2040,6 @@ static struct vmap_area *alloc_vmap_area
*/
va = node_alloc(size, align, vstart, vend, &addr, &vn_id);
if (!va) {
- gfp_mask = gfp_mask & GFP_RECLAIM_MASK;
-
va = kmem_cache_alloc_node(vmap_area_cachep, gfp_mask, node);
if (unlikely(!va))
return ERR_PTR(-ENOMEM);
@@ -2089,7 +2089,7 @@ retry:
BUG_ON(va->va_start < vstart);
BUG_ON(va->va_end > vend);
- ret = kasan_populate_vmalloc(addr, size);
+ ret = kasan_populate_vmalloc(addr, size, gfp_mask);
if (ret) {
free_vmap_area(va);
return ERR_PTR(ret);
@@ -4826,7 +4826,7 @@ retry:
/* populate the kasan shadow space */
for (area = 0; area < nr_vms; area++) {
- if (kasan_populate_vmalloc(vas[area]->va_start, sizes[area]))
+ if (kasan_populate_vmalloc(vas[area]->va_start, sizes[area], GFP_KERNEL))
goto err_free_shadow;
}
_
Patches currently in -mm which might be from urezki(a)gmail.com are
mm-vmalloc-mm-kasan-respect-gfp-mask-in-kasan_populate_vmalloc.patch
2 weeks, 6 days
- 1
- 0
+ ocfs2-fix-recursive-semaphore-deadlock-in-fiemap-call.patch added to mm-hotfixes-unstable branch
by Andrew Morton
The patch titled
Subject: ocfs2: fix recursive semaphore deadlock in fiemap call
has been added to the -mm mm-hotfixes-unstable branch. Its filename is
ocfs2-fix-recursive-semaphore-deadlock-in-fiemap-call.patch
This patch will shortly appear at
https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patche…
This patch will later appear in the mm-hotfixes-unstable branch at
git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
Before you just go and hit "reply", please:
a) Consider who else should be cc'ed
b) Prefer to cc a suitable mailing list as well
c) Ideally: find the original patch on the mailing list and do a
reply-to-all to that, adding suitable additional cc's
*** Remember to use Documentation/process/submit-checklist.rst when testing your code ***
The -mm tree is included into linux-next via the mm-everything
branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
and is updated there every 2-3 working days
------------------------------------------------------
From: Mark Tinguely <mark.tinguely(a)oracle.com>
Subject: ocfs2: fix recursive semaphore deadlock in fiemap call
Date: Fri, 29 Aug 2025 10:18:15 -0500
syzbot detected a OCFS2 hang due to a recursive semaphore on a
FS_IOC_FIEMAP of the extent list on a specially crafted mmap file.
context_switch kernel/sched/core.c:5357 [inline]
__schedule+0x1798/0x4cc0 kernel/sched/core.c:6961
__schedule_loop kernel/sched/core.c:7043 [inline]
schedule+0x165/0x360 kernel/sched/core.c:7058
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7115
rwsem_down_write_slowpath+0x872/0xfe0 kernel/locking/rwsem.c:1185
__down_write_common kernel/locking/rwsem.c:1317 [inline]
__down_write kernel/locking/rwsem.c:1326 [inline]
down_write+0x1ab/0x1f0 kernel/locking/rwsem.c:1591
ocfs2_page_mkwrite+0x2ff/0xc40 fs/ocfs2/mmap.c:142
do_page_mkwrite+0x14d/0x310 mm/memory.c:3361
wp_page_shared mm/memory.c:3762 [inline]
do_wp_page+0x268d/0x5800 mm/memory.c:3981
handle_pte_fault mm/memory.c:6068 [inline]
__handle_mm_fault+0x1033/0x5440 mm/memory.c:6195
handle_mm_fault+0x40a/0x8e0 mm/memory.c:6364
do_user_addr_fault+0x764/0x1390 arch/x86/mm/fault.c:1387
handle_page_fault arch/x86/mm/fault.c:1476 [inline]
exc_page_fault+0x76/0xf0 arch/x86/mm/fault.c:1532
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0010:copy_user_generic arch/x86/include/asm/uaccess_64.h:126 [inline]
RIP: 0010:raw_copy_to_user arch/x86/include/asm/uaccess_64.h:147 [inline]
RIP: 0010:_inline_copy_to_user include/linux/uaccess.h:197 [inline]
RIP: 0010:_copy_to_user+0x85/0xb0 lib/usercopy.c:26
Code: e8 00 bc f7 fc 4d 39 fc 72 3d 4d 39 ec 77 38 e8 91 b9 f7 fc 4c 89
f7 89 de e8 47 25 5b fd 0f 01 cb 4c 89 ff 48 89 d9 4c 89 f6 <f3> a4 0f
1f 00 48 89 cb 0f 01 ca 48 89 d8 5b 41 5c 41 5d 41 5e 41
RSP: 0018:ffffc9000403f950 EFLAGS: 00050256
RAX: ffffffff84c7f101 RBX: 0000000000000038 RCX: 0000000000000038
RDX: 0000000000000000 RSI: ffffc9000403f9e0 RDI: 0000200000000060
RBP: ffffc9000403fa90 R08: ffffc9000403fa17 R09: 1ffff92000807f42
R10: dffffc0000000000 R11: fffff52000807f43 R12: 0000200000000098
R13: 00007ffffffff000 R14: ffffc9000403f9e0 R15: 0000200000000060
copy_to_user include/linux/uaccess.h:225 [inline]
fiemap_fill_next_extent+0x1c0/0x390 fs/ioctl.c:145
ocfs2_fiemap+0x888/0xc90 fs/ocfs2/extent_map.c:806
ioctl_fiemap fs/ioctl.c:220 [inline]
do_vfs_ioctl+0x1173/0x1430 fs/ioctl.c:532
__do_sys_ioctl fs/ioctl.c:596 [inline]
__se_sys_ioctl+0x82/0x170 fs/ioctl.c:584
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5f13850fd9
RSP: 002b:00007ffe3b3518b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007f5f13850fd9
RDX: 0000200000000040 RSI: 00000000c020660b RDI: 0000000000000004
RBP: 6165627472616568 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe3b3518f0
R13: 00007ffe3b351b18 R14: 431bde82d7b634db R15: 00007f5f1389a03b
ocfs2_fiemap() takes a read lock of the ip_alloc_sem semaphore (since
v2.6.22-527-g7307de80510a) and calls fiemap_fill_next_extent() to read the
extent list of this running mmap executable. The user supplied buffer to
hold the fiemap information page faults calling ocfs2_page_mkwrite() which
will take a write lock (since v2.6.27-38-g00dc417fa3e7) of the same
semaphore. This recursive semaphore will hold filesystem locks and causes
a hang of the fileystem.
The ip_alloc_sem protects the inode extent list and size. Release the
read semphore before calling fiemap_fill_next_extent() in ocfs2_fiemap()
and ocfs2_fiemap_inline(). This does an unnecessary semaphore lock/unlock
on the last extent but simplifies the error path.
Link: https://lkml.kernel.org/r/61d1a62b-2631-4f12-81e2-cd689914360b@oracle.com
Fixes: 00dc417fa3e7 ("ocfs2: fiemap support")
Signed-off-by: Mark Tinguely <mark.tinguely(a)oracle.com>
Reported-by: syzbot+541dcc6ee768f77103e7(a)syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=541dcc6ee768f77103e7
Reviewed-by: Joseph Qi <joseph.qi(a)linux.alibaba.com>
Cc: Mark Fasheh <mark(a)fasheh.com>
Cc: Joel Becker <jlbec(a)evilplan.org>
Cc: Junxiao Bi <junxiao.bi(a)oracle.com>
Cc: Changwei Ge <gechangwei(a)live.cn>
Cc: Jun Piao <piaojun(a)huawei.com>
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
fs/ocfs2/extent_map.c | 10 +++++++++-
1 file changed, 9 insertions(+), 1 deletion(-)
--- a/fs/ocfs2/extent_map.c~ocfs2-fix-recursive-semaphore-deadlock-in-fiemap-call
+++ a/fs/ocfs2/extent_map.c
@@ -706,6 +706,8 @@ out:
* it not only handles the fiemap for inlined files, but also deals
* with the fast symlink, cause they have no difference for extent
* mapping per se.
+ *
+ * Must be called with ip_alloc_sem semaphore held.
*/
static int ocfs2_fiemap_inline(struct inode *inode, struct buffer_head *di_bh,
struct fiemap_extent_info *fieinfo,
@@ -717,6 +719,7 @@ static int ocfs2_fiemap_inline(struct in
u64 phys;
u32 flags = FIEMAP_EXTENT_DATA_INLINE|FIEMAP_EXTENT_LAST;
struct ocfs2_inode_info *oi = OCFS2_I(inode);
+ lockdep_assert_held_read(&oi->ip_alloc_sem);
di = (struct ocfs2_dinode *)di_bh->b_data;
if (ocfs2_inode_is_fast_symlink(inode))
@@ -732,8 +735,11 @@ static int ocfs2_fiemap_inline(struct in
phys += offsetof(struct ocfs2_dinode,
id2.i_data.id_data);
+ /* Release the ip_alloc_sem to prevent deadlock on page fault */
+ up_read(&OCFS2_I(inode)->ip_alloc_sem);
ret = fiemap_fill_next_extent(fieinfo, 0, phys, id_count,
flags);
+ down_read(&OCFS2_I(inode)->ip_alloc_sem);
if (ret < 0)
return ret;
}
@@ -802,9 +808,11 @@ int ocfs2_fiemap(struct inode *inode, st
len_bytes = (u64)le16_to_cpu(rec.e_leaf_clusters) << osb->s_clustersize_bits;
phys_bytes = le64_to_cpu(rec.e_blkno) << osb->sb->s_blocksize_bits;
virt_bytes = (u64)le32_to_cpu(rec.e_cpos) << osb->s_clustersize_bits;
-
+ /* Release the ip_alloc_sem to prevent deadlock on page fault */
+ up_read(&OCFS2_I(inode)->ip_alloc_sem);
ret = fiemap_fill_next_extent(fieinfo, virt_bytes, phys_bytes,
len_bytes, fe_flags);
+ down_read(&OCFS2_I(inode)->ip_alloc_sem);
if (ret)
break;
_
Patches currently in -mm which might be from mark.tinguely(a)oracle.com are
ocfs2-fix-recursive-semaphore-deadlock-in-fiemap-call.patch
2 weeks, 6 days
- 1
- 0
[PATCH v2] uio_hv_generic: Let userspace take care of interrupt mask
by Naman Jain
Remove the logic to set interrupt mask by default in uio_hv_generic
driver as the interrupt mask value is supposed to be controlled
completely by the user space. If the mask bit gets changed
by the driver, concurrently with user mode operating on the ring,
the mask bit may be set when it is supposed to be clear, and the
user-mode driver will miss an interrupt which will cause a hang.
For eg- when the driver sets inbound ring buffer interrupt mask to 1,
the host does not interrupt the guest on the UIO VMBus channel.
However, setting the mask does not prevent the host from putting a
message in the inbound ring buffer. So let’s assume that happens,
the host puts a message into the ring buffer but does not interrupt.
Subsequently, the user space code in the guest sets the inbound ring
buffer interrupt mask to 0, saying “Hey, I’m ready for interrupts”.
User space code then calls pread() to wait for an interrupt.
Then one of two things happens:
* The host never sends another message. So the pread() waits forever.
* The host does send another message. But because there’s already a
message in the ring buffer, it doesn’t generate an interrupt.
This is the correct behavior, because the host should only send an
interrupt when the inbound ring buffer transitions from empty to
not-empty. Adding an additional message to a ring buffer that is not
empty is not supposed to generate an interrupt on the guest.
Since the guest is waiting in pread() and not removing messages from
the ring buffer, the pread() waits forever.
This could be easily reproduced in hv_fcopy_uio_daemon if we delay
setting interrupt mask to 0.
Similarly if hv_uio_channel_cb() sets the interrupt_mask to 1,
there’s a race condition. Once user space empties the inbound ring
buffer, but before user space sets interrupt_mask to 0, the host could
put another message in the ring buffer but it wouldn’t interrupt.
Then the next pread() would hang.
Fix these by removing all instances where interrupt_mask is changed,
while keeping the one in set_event() unchanged to enable userspace
control the interrupt mask by writing 0/1 to /dev/uioX.
Fixes: 95096f2fbd10 ("uio-hv-generic: new userspace i/o driver for VMBus")
Suggested-by: John Starks <jostarks(a)microsoft.com>
Signed-off-by: Naman Jain <namjain(a)linux.microsoft.com>
Cc: <stable(a)vger.kernel.org>
---
Changes since v1:
https://lore.kernel.org/all/20250818064846.271294-1-namjain@linux.microsoft…
* Added Fixes and Cc stable tags.
---
drivers/uio/uio_hv_generic.c | 7 +------
1 file changed, 1 insertion(+), 6 deletions(-)
diff --git a/drivers/uio/uio_hv_generic.c b/drivers/uio/uio_hv_generic.c
index f19efad4d6f8..3f8e2e27697f 100644
--- a/drivers/uio/uio_hv_generic.c
+++ b/drivers/uio/uio_hv_generic.c
@@ -111,7 +111,6 @@ static void hv_uio_channel_cb(void *context)
struct hv_device *hv_dev;
struct hv_uio_private_data *pdata;
- chan->inbound.ring_buffer->interrupt_mask = 1;
virt_mb();
/*
@@ -183,8 +182,6 @@ hv_uio_new_channel(struct vmbus_channel *new_sc)
return;
}
- /* Disable interrupts on sub channel */
- new_sc->inbound.ring_buffer->interrupt_mask = 1;
set_channel_read_mode(new_sc, HV_CALL_ISR);
ret = hv_create_ring_sysfs(new_sc, hv_uio_ring_mmap);
if (ret) {
@@ -227,9 +224,7 @@ hv_uio_open(struct uio_info *info, struct inode *inode)
ret = vmbus_connect_ring(dev->channel,
hv_uio_channel_cb, dev->channel);
- if (ret == 0)
- dev->channel->inbound.ring_buffer->interrupt_mask = 1;
- else
+ if (ret)
atomic_dec(&pdata->refcnt);
return ret;
--
2.34.1
2 weeks, 6 days
- 5
- 5
[PATCH 6.16 000/457] 6.16.4-rc1 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 6.16.4 release.
There are 457 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 28 Aug 2025 11:08:27 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.16.4-rc1…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.16.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 6.16.4-rc1
Christoph Manszewski <christoph.manszewski(a)intel.com>
drm/xe: Fix vm_bind_ioctl double free bug
Piotr Piórkowski <piotr.piorkowski(a)intel.com>
drm/xe: Move ASID allocation and user PT BO tracking into xe_vm_create
Florian Westphal <fw(a)strlen.de>
netfilter: nf_reject: don't leak dst refcount for loopback packets
Peter Oberparleiter <oberpar(a)linux.ibm.com>
s390/hypfs: Enable limited access during lockdown
Peter Oberparleiter <oberpar(a)linux.ibm.com>
s390/hypfs: Avoid unnecessary ioctl registration in debugfs
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
Armen Ratner <armeng(a)nvidia.com>
net/mlx5e: Preserve shared buffer capacity during headroom updates
Alexei Lazar <alazar(a)nvidia.com>
net/mlx5e: Query FW for buffer ownership
Oren Sidi <osidi(a)nvidia.com>
net/mlx5: Add IFC bits and enums for buf_ownership
Daniel Jurgens <danielj(a)nvidia.com>
net/mlx5: Base ECVF devlink port attrs from 0
Hariprasad Kelam <hkelam(a)marvell.com>
Octeontx2-af: Skip overlap check for SPI field
Nilay Shroff <nilay(a)linux.ibm.com>
block: avoid cpu_hotplug_lock depedency on freeze_lock
Nilay Shroff <nilay(a)linux.ibm.com>
block: skip q->rq_qos check in rq_qos_done_bio()
Nilay Shroff <nilay(a)linux.ibm.com>
block: decrement block_rq_qos static key in rq_qos_del()
Ming Lei <ming.lei(a)redhat.com>
blk-mq: fix lockdep warning in __blk_mq_update_nr_hw_queues
Nilay Shroff <nilay(a)linux.ibm.com>
block: fix potential deadlock while running nr_hw_queue update
Nilay Shroff <nilay(a)linux.ibm.com>
block: fix lockdep warning caused by lock dependency in elv_iosched_store
Nilay Shroff <nilay(a)linux.ibm.com>
block: move elevator queue allocation logic into blk_mq_init_sched
Lorenzo Bianconi <lorenzo(a)kernel.org>
net: airoha: ppe: Do not invalid PPE entries in case of SW hash collision
Hangbin Liu <liuhangbin(a)gmail.com>
bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU
Hangbin Liu <liuhangbin(a)gmail.com>
bonding: update LACP activity flag after setting lacp_active
Dewei Meng <mengdewei(a)cqsoftware.com.cn>
ALSA: timer: fix ida_free call while not allocated
William Liu <will(a)willsroot.io>
net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
William Liu <will(a)willsroot.io>
net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
Tristram Ha <tristram.ha(a)microchip.com>
net: dsa: microchip: Fix KSZ9477 HSR port setup issue
ValdikSS <iam(a)valdikss.org.ru>
igc: fix disabling L1.2 PCI-E link substate on I226 on init
Jason Xing <kernelxing(a)tencent.com>
ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
Song Gao <gaosong(a)loongson.cn>
LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu()
Bibo Mao <maobibo(a)loongson.cn>
LoongArch: KVM: Use standard bitops API with eiointc
Heiko Carstens <hca(a)linux.ibm.com>
s390/mm: Do not map lowcore with identity mapping
Stefan Binding <sbinding(a)opensource.cirrus.com>
ASoC: cs35l56: Remove SoundWire Clock Divider workaround for CS35L63
Richard Fitzgerald <rf(a)opensource.cirrus.com>
ASoC: cs35l56: Handle new algorithms IDs for CS35L63
Stefan Binding <sbinding(a)opensource.cirrus.com>
ASoC: cs35l56: Update Firmware Addresses for CS35L63 for production silicon
Kanglong Wang <wangkanglong(a)loongson.cn>
LoongArch: Optimize module load time by optimizing PLT/GOT counting
Tiezhu Yang <yangtiezhu(a)loongson.cn>
LoongArch: Pass annotate-tablejump option if LTO is enabled
Tiezhu Yang <yangtiezhu(a)loongson.cn>
objtool/LoongArch: Get table size correctly if LTO is enabled
Parthiban Veerasooran <parthiban.veerasooran(a)microchip.com>
microchip: lan865x: fix missing Timer Increment config for Rev.B0/B1
Parthiban Veerasooran <parthiban.veerasooran(a)microchip.com>
microchip: lan865x: fix missing netif_start_queue() call on device open
Vlad Dogaru <vdogaru(a)nvidia.com>
net/mlx5: CT: Use the correct counter offset
Alex Vesker <valex(a)nvidia.com>
net/mlx5: HWS, Fix table creation UID
Yevgeny Kliteynik <kliteyn(a)nvidia.com>
net/mlx5: HWS, fix complex rules rehash error flow
Yevgeny Kliteynik <kliteyn(a)nvidia.com>
net/mlx5: HWS, fix bad parameter in CQ creation
D. Wythe <alibuda(a)linux.alibaba.com>
net/smc: fix UAF on smcsk after smc_listen_out()
Yao Zi <ziyao(a)disroot.org>
net: stmmac: thead: Enable TX clock before MAC initialization
Jordan Rhee <jordanrhee(a)google.com>
gve: prevent ethtool ops after shutdown
Yuichiro Tsuji <yuichtsu(a)amazon.com>
net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
Horatiu Vultur <horatiu.vultur(a)microchip.com>
phy: mscc: Fix timestamping for vsc8584
David Howells <dhowells(a)redhat.com>
cifs: Fix oops due to uninitialised variable
Dan Carpenter <dan.carpenter(a)linaro.org>
regulator: tps65219: regulator: tps65219: Fix error codes in probe()
Piotr Piórkowski <piotr.piorkowski(a)intel.com>
drm/xe: Assign ioctl xe file handler to vm in xe_vm_create
MD Danish Anwar <danishanwar(a)ti.com>
net: ti: icssg-prueth: Fix HSR and switch offload Enablement during firwmare reload.
Qingfang Deng <dqfext(a)gmail.com>
ppp: fix race conditions in ppp_fill_forward_path
Qingfang Deng <dqfext(a)gmail.com>
net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path
Nitin Rawat <quic_nitirawa(a)quicinc.com>
scsi: ufs: ufs-qcom: Fix ESI null pointer dereference
Bao D. Nguyen <quic_nguyenb(a)quicinc.com>
scsi: ufs: ufs-qcom: Update esi_vec_mask for HW major version >= 6
Bart Van Assche <bvanassche(a)acm.org>
scsi: ufs: core: Remove WARN_ON_ONCE() call from ufshcd_uic_cmd_compl()
Bart Van Assche <bvanassche(a)acm.org>
scsi: ufs: core: Fix IRQ lock inversion for the SCSI host lock
Michael Chan <michael.chan(a)broadcom.com>
bnxt_en: Fix lockdep warning during rmmod
Minhong He <heminhong(a)kylinos.cn>
ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
Jakub Ramaseuski <jramaseu(a)redhat.com>
net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Don't print errors for nonexistent connectors
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Adjust DCE 8-10 clock, don't overclock by 15%
Chenyuan Yang <chenyuan0y(a)gmail.com>
drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
Peng Fan <peng.fan(a)nxp.com>
regulator: pca9450: Use devm_register_sys_off_handler
Dan Carpenter <dan.carpenter(a)linaro.org>
ALSA: usb-audio: Fix size validation in convert_chmap_v3()
Baihan Li <libaihan(a)huawei.com>
drm/hisilicon/hibmc: fix dp and vga cannot show together
Baihan Li <libaihan(a)huawei.com>
drm/hisilicon/hibmc: fix rare monitors cannot display problem
Baihan Li <libaihan(a)huawei.com>
drm/hisilicon/hibmc: fix the hibmc loaded failed bug
Baihan Li <libaihan(a)huawei.com>
drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
Baihan Li <libaihan(a)huawei.com>
drm/hisilicon/hibmc: fix the i2c device resource leak when vdac init failed
Miguel Ojeda <ojeda(a)kernel.org>
rust: alloc: fix `rusttest` by providing `Cmalloc::aligned_layout` too
Zheng Qixing <zhengqixing(a)huawei.com>
md: fix sync_action incorrect display during resync
Zheng Qixing <zhengqixing(a)huawei.com>
md: add helper rdev_needs_recovery()
Li Nan <linan122(a)huawei.com>
md: rename recovery_cp to resync_offset
Miguel Ojeda <ojeda(a)kernel.org>
drm: nova-drm: fix 32-bit arm build
Ido Schimmel <idosch(a)nvidia.com>
mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_core: Fix not accounting for BIS/CIS/PA links separately
Yang Li <yang.li(a)amlogic.com>
Bluetooth: Add PA_LINK to distinguish BIG sync and PA sync connections
Sergey Shtylyov <s.shtylyov(a)omp.ru>
Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync()
Pauli Virtanen <pav(a)iki.fi>
Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established
Yang Li <yang.li(a)amlogic.com>
Bluetooth: hci_sync: Prevent unintended PA sync when SID is 0xFF
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_core: Fix using ll_privacy_capable for current settings
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_core: Fix using {cis,bis}_capable for current settings
Jiande Lu <jiande.lu(a)mediatek.com>
Bluetooth: btmtk: Fix wait_on_bit_timeout interruption during shutdown
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_sync: Fix scan state after PA Sync has been established
Kees Cook <kees(a)kernel.org>
iommu/amd: Avoid stack buffer overflow from kernel cmdline
Dan Carpenter <dan.carpenter(a)linaro.org>
scsi: qla4xxx: Prevent a potential error pointer dereference
Justin Lai <justinlai0215(a)realtek.com>
rtase: Fix Rx descriptor CRC error bit definition
William Liu <will(a)willsroot.io>
net/sched: Fix backlog accounting in qdisc_dequeue_internal
Wang Liang <wangliang74(a)huawei.com>
net: bridge: fix soft lockup in br_multicast_query_expired()
Suraj Gupta <suraj.gupta2(a)amd.com>
net: xilinx: axienet: Fix RX skb ring management in DMAengine mode
Junxian Huang <huangjunxian6(a)hisilicon.com>
RDMA/hns: Fix dip entries leak on devices newer than hip09
Akhilesh Patil <akhilesh(a)ee.iitb.ac.in>
RDMA/core: Free pfn_list with appropriate kvfree call
Anantha Prabhu <anantha.prabhu(a)broadcom.com>
RDMA/bnxt_re: Fix to initialize the PBL array
Kalesh AP <kalesh-anakkur.purayil(a)broadcom.com>
RDMA/bnxt_re: Fix a possible memory leak in the driver
Kashyap Desai <kashyap.desai(a)broadcom.com>
RDMA/bnxt_re: Fix to remove workload check in SRQ limit path
Kashyap Desai <kashyap.desai(a)broadcom.com>
RDMA/bnxt_re: Fix to do SRQ armena by default
wenglianfa <wenglianfa(a)huawei.com>
RDMA/hns: Fix querying wrong SCC context for DIP algorithm
Boshi Yu <boshiyu(a)linux.alibaba.com>
RDMA/erdma: Fix unset QPN of GSI QP
Boshi Yu <boshiyu(a)linux.alibaba.com>
RDMA/erdma: Fix ignored return value of init_kernel_qp
Suma Hegde <suma.hegde(a)amd.com>
platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL
Jocelyn Falempe <jfalempe(a)redhat.com>
drm/panic: Add a u64 divide by 10 for arm32
Danilo Krummrich <dakr(a)kernel.org>
rust: drm: don't pass the address of drm::Device to drm_dev_put()
Danilo Krummrich <dakr(a)kernel.org>
rust: drm: remove pin annotations from drm::Device
Danilo Krummrich <dakr(a)kernel.org>
rust: drm: ensure kmalloc() compatible Layout
Danilo Krummrich <dakr(a)kernel.org>
rust: alloc: replace aligned_size() with Kmalloc::aligned_layout()
Nitin Gote <nitin.r.gote(a)intel.com>
iosys-map: Fix undefined behavior in iosys_map_clear()
José Expósito <jose.exposito89(a)gmail.com>
drm/tests: Fix drm_test_fb_xrgb8888_to_xrgb2101010() on big-endian
Thomas Zimmermann <tzimmermann(a)suse.de>
drm/tests: Do not use drm_fb_blit() in format-helper tests
José Expósito <jose.exposito89(a)gmail.com>
drm/tests: Fix endian warning
Waiman Long <longman(a)redhat.com>
cgroup/cpuset: Fix a partition error with CPU hotplug
Waiman Long <longman(a)redhat.com>
cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
Fanhua Li <lifanhua5(a)huawei.com>
drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor().
Gabor Juhos <j4g8y7(a)gmail.com>
spi: spi-qpic-snand: fix calculating of ECC OOB regions' properties
Stefan Wahren <wahrenst(a)gmx.net>
spi: spi-fsl-lpspi: Clamp too high speed_hz
Gabor Juhos <j4g8y7(a)gmail.com>
spi: spi-qpic-snand: use correct CW_PER_PAGE value for OOB write
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com>
iio: imu: inv_icm42600: change invalid data error to -EBUSY
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
iio: imu: inv_icm42600: Convert to uXX and sXX integer types
David Lechner <dlechner(a)baylibre.com>
iio: imu: inv_icm42600: use = { } instead of memset()
Jedrzej Jagielski <jedrzej.jagielski(a)intel.com>
ixgbe: prevent from unwanted interface name changes
Jedrzej Jagielski <jedrzej.jagielski(a)intel.com>
devlink: let driver opt out of automatic phys_port_name generation
Sven Eckelmann <sven(a)narfation.org>
i2c: rtl9300: Add missing count byte for SMBus Block Ops
Sven Eckelmann <sven(a)narfation.org>
i2c: rtl9300: Increase timeout for transfer polling
Harshal Gohel <hg(a)simonwunderlich.de>
i2c: rtl9300: Fix multi-byte I2C write
Alex Guo <alexguo1023(a)gmail.com>
i2c: rtl9300: Fix out-of-bounds bug in rtl9300_i2c_smbus_xfer
Tianxiang Peng <txpeng(a)tencent.com>
x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/CPU/AMD: Ignore invalid reset reason value
Jakub Kicinski <kuba(a)kernel.org>
tls: fix handling of zero-length records on the rx_list
Niklas Cassel <cassel(a)kernel.org>
PCI: dwc: Ensure that dw_pcie_wait_for_link() waits 100 ms after link up
NeilBrown <neil(a)brown.name>
ovl: use I_MUTEX_PARENT when locking parent in ovl_create_temp()
Pu Lehui <pulehui(a)huawei.com>
tracing: Limit access to parser->buffer when trace_get_user failed
Steven Rostedt <rostedt(a)goodmis.org>
tracing: Remove unneeded goto out logic
Heikki Krogerus <heikki.krogerus(a)linux.intel.com>
usb: dwc3: pci: add support for the Intel Wildcat Lake
Selvarasu Ganesan <selvarasu.g(a)samsung.com>
usb: dwc3: Remove WARN_ON for device endpoint command timeouts
Kuen-Han Tsai <khtsai(a)google.com>
usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
Niklas Neronin <niklas.neronin(a)linux.intel.com>
usb: xhci: fix host not responding after suspend and resume
Weitao Wang <WeitaoWang-oc(a)zhaoxin.com>
usb: xhci: Fix slot_id resource race conflict
Amit Sunil Dhamne <amitsd(a)google.com>
usb: typec: maxim_contaminant: re-enable cc toggle if cc is open and port is clean
Amit Sunil Dhamne <amitsd(a)google.com>
usb: typec: maxim_contaminant: disable low power mode when reading comparator values
Zenm Chen <zenmchen(a)gmail.com>
USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
Thorsten Blum <thorsten.blum(a)linux.dev>
usb: storage: realtek_cr: Use correct byte order for bcs->Residue
Mael GUERIN <mael.guerin(a)murena.io>
USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
Marek Vasut <marek.vasut+renesas(a)mailbox.org>
usb: renesas-xhci: Fix External ROM access timeouts
Xu Yang <xu.yang_2(a)nxp.com>
usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
Edward Adam Davis <eadavis(a)qq.com>
comedi: pcl726: Prevent invalid irq number
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Make insn_rw_emulate_bits() do insn->n samples
Miao Li <limiao(a)kylinos.cn>
usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
Thorsten Blum <thorsten.blum(a)linux.dev>
cdx: Fix off-by-one error in cdx_rpmsg_probe()
Sebastian Andrzej Siewior <bigeasy(a)linutronix.de>
kcov, usb: Don't disable interrupts in kcov_remote_start_usb_softirq()
Miaoqian Lin <linmq006(a)gmail.com>
most: core: Drop device reference after usage in get_channel()
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
iio: adc: rzg2l: Cleanup suspend/resume path
David Lechner <dlechner(a)baylibre.com>
iio: proximity: isl29501: fix buffered read on big-endian systems
David Lechner <dlechner(a)baylibre.com>
iio: adc: ad7173: prevent scan if too many setups requested
Matti Vaittinen <mazziesaccount(a)gmail.com>
iio: adc: bd79124: Add GPIOLIB dependency
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
iio: adc: rzg2l_adc: Set driver data before enabling runtime PM
Salah Triki <salah.triki(a)gmail.com>
iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
Jonathan Cameron <Jonathan.Cameron(a)huawei.com>
iio: light: as73211: Ensure buffer holes are zeroed
David Lechner <dlechner(a)baylibre.com>
iio: adc: ad7124: fix channel lookup in syscalib functions
David Lechner <dlechner(a)baylibre.com>
iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read()
Steven Rostedt <rostedt(a)goodmis.org>
ftrace: Also allocate and copy hash for reading of filter files
David Lechner <dlechner(a)baylibre.com>
iio: accel: sca3300: fix uninitialized iio scan data
David Lechner <dlechner(a)baylibre.com>
iio: adc: ad7380: fix missing max_conversion_rate_hz on adaq4381-4
Xu Yilun <yilun.xu(a)linux.intel.com>
fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
Imre Deak <imre.deak(a)intel.com>
drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
Mario Limonciello <mario.limonciello(a)amd.com>
drm/amd: Restore cached manual clock settings during resume
Robin Murphy <robin.murphy(a)arm.com>
iommu/virtio: Make instance lookup robust
Jason Gunthorpe <jgg(a)ziepe.ca>
iommu: Remove ops.pgsize_bitmap from drivers that don't use it
Al Viro <viro(a)zeniv.linux.org.uk>
use uniform permission checks for all mount propagation changes
Adrian Huang (Lenovo) <adrianhuang0701(a)gmail.com>
signal: Fix memory leak for PIDFD_SELF* sentinels
Ye Bin <yebin10(a)huawei.com>
fs/buffer: fix use-after-free when call bh_read() helper
Stefan Metzmacher <metze(a)samba.org>
smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()
Christian Brauner <brauner(a)kernel.org>
libfs: massage path_from_stashed() to allow custom stashing behavior
Thomas Bertschinger <tahbertschinger(a)gmail.com>
fhandle: do_handle_open() should get FD with user flags
Naohiro Aota <naohiro.aota(a)wdc.com>
btrfs: zoned: fix data relocation block group reservation
Yuntao Wang <yuntao.wang(a)linux.dev>
fs: fix incorrect lflags value in the move_mount syscall
Charalampos Mitrodimas <charmitro(a)posteo.net>
debugfs: fix mount options not being applied
Miguel Ojeda <ojeda(a)kernel.org>
rust: faux: fix C header link
Christoph Hellwig <hch(a)lst.de>
xfs: fix frozen file system assert in xfs_trans_alloc
Dan Carpenter <dan.carpenter(a)linaro.org>
soc: qcom: mdt_loader: Fix error return values in mdt_header_valid()
Liu01 Tong <Tong.Liu01(a)amd.com>
drm/amdgpu: fix task hang from failed job submission during process kill
Geraldo Nascimento <geraldogabriel(a)gmail.com>
PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining
Geraldo Nascimento <geraldogabriel(a)gmail.com>
PCI: rockchip: Use standard PCIe definitions
Ranjan Kumar <ranjan.kumar(a)broadcom.com>
scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems
Ranjan Kumar <ranjan.kumar(a)broadcom.com>
scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
Tom Chung <chiahsuan.chung(a)amd.com>
drm/amd/display: Fix Xorg desktop unresponsive on Replay panel
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Don't overclock DCE 6 by 15%
Mario Limonciello <mario.limonciello(a)amd.com>
drm/amd/display: Avoid a NULL pointer dereference
Imre Deak <imre.deak(a)intel.com>
drm/i915/icl+/tc: Convert AUX powered WARN to a debug message
Imre Deak <imre.deak(a)intel.com>
drm/i915/lnl+/tc: Use the cached max lane count value
Imre Deak <imre.deak(a)intel.com>
drm/i915/lnl+/tc: Fix max lane count HW readout
Imre Deak <imre.deak(a)intel.com>
drm/i915/icl+/tc: Cache the max lane count value
Imre Deak <imre.deak(a)intel.com>
drm/i915/lnl+/tc: Fix handling of an enabled/disconnected dp-alt sink
Sebastian Brzezinka <sebastian.brzezinka(a)intel.com>
drm/i915/gt: Relocate compression repacking WA for JSL/EHL
Qianfeng Rong <rongqianfeng(a)vivo.com>
drm/nouveau/gsp: fix mismatched alloc/free for kvmalloc()
Jani Nikula <jani.nikula(a)intel.com>
drm/i915: silence rpm wakeref asserts on GEN11_GU_MISC_IIR access
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/swm14: Update power limit logic
Thorsten Blum <thorsten.blum(a)linux.dev>
accel/habanalabs/gaudi2: Use kvfree() for memory allocated with kvcalloc()
Jan Beulich <jbeulich(a)suse.com>
compiler: remove __ADDRESSABLE_ASM{_STR,}() again
Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com>
platform/x86/intel-uncore-freq: Check write blocked for ELC
Peter Oberparleiter <oberpar(a)linux.ibm.com>
s390/sclp: Fix SCCB present check
Zhu Yanjun <yanjun.zhu(a)linux.dev>
RDMA/rxe: Flush delayed SKBs while releasing RXE resources
Evgeniy Harchenko <evgeniyharchenko.dev(a)gmail.com>
ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
Takashi Iwai <tiwai(a)suse.de>
ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv
David Hildenbrand <david(a)redhat.com>
mm/mremap: fix WARN with uffd that has remap events disabled
Jinjiang Tu <tujinjiang(a)huawei.com>
mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn
Herton R. Krzesinski <herton(a)redhat.com>
mm/debug_vm_pgtable: clear page table entries at destroy_args()
Sang-Heon Jeon <ekffu200098(a)gmail.com>
mm/damon/core: fix damos_commit_filter not changing allow
Phillip Lougher <phillip(a)squashfs.org.uk>
squashfs: fix memory leak in squashfs_fill_super
Trond Myklebust <trond.myklebust(a)hammerspace.com>
NFS: Fix a race when updating an existing write
Judith Mendez <jm(a)ti.com>
mmc: sdhci_am654: Disable HS400 for AM62P SR1.0 and SR1.1
Victor Shih <victor.shih(a)genesyslogic.com.tw>
mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
Victor Shih <victor.shih(a)genesyslogic.com.tw>
mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER
Jiayi Li <lijiayi(a)kylinos.cn>
memstick: Fix deadlock by moving removing flag earlier
Pasha Tatashin <pasha.tatashin(a)soleen.com>
kho: warn if KHO is disabled due to an error
Pasha Tatashin <pasha.tatashin(a)soleen.com>
kho: mm: don't allow deferred struct page with KHO
Pasha Tatashin <pasha.tatashin(a)soleen.com>
kho: init new_physxa->phys_bits to fix lockdep
Victor Shih <victor.shih(a)genesyslogic.com.tw>
mmc: sdhci-pci-gli: Add a new function to simplify the code
Sai Krishna Potthuri <sai.krishna.potthuri(a)amd.com>
mmc: sdhci-of-arasan: Ensure CD logic stabilization before power-up
Sang-Heon Jeon <ekffu200098(a)gmail.com>
mm/damon/core: fix commit_ops_filters by using correct nth function
Nicolin Chen <nicolinc(a)nvidia.com>
iommu/arm-smmu-v3: Fix smmu_domain->nr_ats_masters decrement
Dominique Martinet <asmadeus(a)codewreck.org>
iov_iter: iterate_folioq: fix handling of offset >= folio size
Jens Axboe <axboe(a)kernel.dk>
io_uring/futex: ensure io_futex_wait() cleans up properly on failure
XianLiang Huang <huangxianliang(a)lanxincomputing.com>
iommu/riscv: prevent NULL deref in iova_to_phys
Eric Biggers <ebiggers(a)kernel.org>
crypto: acomp - Fix CFI failure due to type punning
Geert Uytterhoeven <geert+renesas(a)glider.be>
erofs: Do not select tristate symbols from bool symbols
Bo Liu (OpenAnolis) <liubo03(a)inspur.com>
erofs: fix build error with CONFIG_EROFS_FS_ZIP_ACCEL=y
Alan Huang <mmpgouride(a)gmail.com>
xfs: Remove unused label in xfs_dax_notify_dev_failure
Christoph Hellwig <hch(a)lst.de>
xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags
Christoph Hellwig <hch(a)lst.de>
xfs: improve the comments in xfs_select_zone_nowait
Christoph Hellwig <hch(a)lst.de>
xfs: return the allocated transaction from xfs_trans_alloc_empty
Christoph Hellwig <hch(a)lst.de>
xfs: decouple xfs_trans_alloc_empty from xfs_trans_alloc
Naohiro Aota <naohiro.aota(a)wdc.com>
btrfs: subpage: keep TOWRITE tag until folio is cleaned
Qu Wenruo <wqu(a)suse.com>
btrfs: rename btrfs_subpage structure
Qu Wenruo <wqu(a)suse.com>
btrfs: add comments on the extra btrfs specific subpage bitmaps
Leo Martins <loemra.dev(a)gmail.com>
btrfs: fix subpage deadlock in try_release_subpage_extent_buffer()
Filipe Manana <fdmanana(a)suse.com>
btrfs: use refcount_t type for the extent buffer reference counter
Filipe Manana <fdmanana(a)suse.com>
btrfs: add comment for optimization in free_extent_buffer()
Filipe Manana <fdmanana(a)suse.com>
btrfs: reorganize logic at free_extent_buffer() for better readability
Filipe Manana <fdmanana(a)suse.com>
btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()
Filipe Manana <fdmanana(a)suse.com>
btrfs: always abort transaction on failure to add block group to free space tree
David Sterba <dsterba(a)suse.com>
btrfs: move transaction aborts to the error site in add_block_group_free_space()
SeongJae Park <sj(a)kernel.org>
mm/damon/ops-common: ignore migration request to invalid nodes
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
selftests: mptcp: sockopt: fix C23 extension warning
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
selftests: mptcp: connect: fix C23 extension warning
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
selftests: mptcp: pm: check flush doesn't reset limits
Geliang Tang <geliang(a)kernel.org>
mptcp: disable add_addr retransmission when timeout is 0
Geliang Tang <geliang(a)kernel.org>
mptcp: remove duplicate sk_reset_timer call
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
mptcp: pm: kernel: flush: do not reset ADD_ADDR limit
Christoph Paasch <cpaasch(a)openai.com>
mptcp: drop skb if MPTCP skb extension allocation fails
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
ACPI: APEI: EINJ: Fix resource leak by remove callback in .exit.text
Chen Yu <yu.c.chen(a)intel.com>
ACPI: pfr_update: Fix the driver update version check
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
cpuidle: governors: menu: Avoid selecting states with too much latency
JP Kobryn <inwardvessel(a)gmail.com>
cgroup: avoid null de-ref in css_rstat_exit()
Eric Biggers <ebiggers(a)kernel.org>
ipv6: sr: Fix MAC comparison to be constant-time
Andrea Righi <arighi(a)nvidia.com>
sched/ext: Fix invalid task state transitions on class switch
Jakub Acs <acsjakub(a)amazon.de>
net, hsr: reject HSR frame if skb can't hold tag
Bibo Mao <maobibo(a)loongson.cn>
LoongArch: KVM: Add address alignment check in pch_pic register access
Bibo Mao <maobibo(a)loongson.cn>
LoongArch: KVM: Fix stack protector issue in send_ipi_data()
Bibo Mao <maobibo(a)loongson.cn>
LoongArch: KVM: Make function kvm_own_lbt() robust
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Don't overwrite dce60_clk_mgr
Mario Limonciello <mario.limonciello(a)amd.com>
drm/amd/display: Revert "drm/amd/display: Fix AMDGPU_MAX_BL_LEVEL value"
Mario Limonciello <mario.limonciello(a)amd.com>
drm/amd/display: Pass up errors for reset GPU that fails to init HW
Lauri Tirkkonen <lauri(a)hacktheplanet.fi>
drm/amd/display: fix initial backlight brightness calculation
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Fix DCE 6.0 and 6.4 PLL programming.
Siyang Liu <Security(a)tencent.com>
drm/amd/display: fix a Null pointer dereference vulnerability
Michel Dänzer <mdaenzer(a)redhat.com>
drm/amd/display: Add primary plane to commits for correct VRR handling
David Yat Sin <David.YatSin(a)amd.com>
drm/amdkfd: Fix checkpoint-restore on multi-xcc
Amber Lin <Amber.Lin(a)amd.com>
drm/amdkfd: Destroy KFD debugfs after destroy KFD wq
Lijo Lazar <lijo.lazar(a)amd.com>
drm/amdgpu: Update supported modes for GC v9.5.0
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu: update mmhub 4.1.0 client id mappings
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu: update mmhub 3.3 client id mappings
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu: update mmhub 3.0.1 client id mappings
Lijo Lazar <lijo.lazar(a)amd.com>
drm/amdgpu: Update external revid for GC v9.5.0
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu: track whether a queue is a kernel queue in amdgpu_mqd_prop
YuanShang <YuanShang.Mao(a)amd.com>
drm/amdgpu: Retain job->vm in amdgpu_job_prepare_job
Nathan Chancellor <nathan(a)kernel.org>
drm/amdgpu: Initialize data to NULL in imu_v12_0_program_rlc_ram()
Peter Shkenev <mustela(a)erminea.space>
drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities
Gang Ba <Gang.Ba(a)amd.com>
drm/amdgpu: Avoid extra evict-restore process.
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu: add missing vram lost check for LEGACY RESET
Frank Min <Frank.Min(a)amd.com>
drm/amdgpu: add kicker fws loading for gfx12/smu14/psp14
Mario Limonciello <mario.limonciello(a)amd.com>
drm/amd: Restore cached power limit during resume
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/discovery: fix fw based ip discovery
Yang Wang <kevinyang.wang(a)amd.com>
drm/amd/amdgpu: fix missing lock for cper.ring->rptr/wptr access
Thomas Hellström <thomas.hellstrom(a)linux.intel.com>
drm/xe: Defer buffer object shrinker write-backs and GPU waits
Vodapalli, Ravi Kumar <ravi.kumar.vodapalli(a)intel.com>
drm/xe/bmg: Add one additional PCI ID
Dikshita Agarwal <quic_dikshita(a)quicinc.com>
media: iris: Remove unnecessary re-initialization of flush completion
Dikshita Agarwal <quic_dikshita(a)quicinc.com>
media: iris: Verify internal buffer release on close
Dikshita Agarwal <quic_dikshita(a)quicinc.com>
media: iris: Update CAPTURE format info based on OUTPUT format
Dikshita Agarwal <quic_dikshita(a)quicinc.com>
media: iris: Track flush responses to prevent premature completion
Dikshita Agarwal <quic_dikshita(a)quicinc.com>
media: iris: Skip flush on first sequence change
Dikshita Agarwal <quic_dikshita(a)quicinc.com>
media: iris: Skip destroying internal buffer if not dequeued
Dikshita Agarwal <quic_dikshita(a)quicinc.com>
media: iris: Send V4L2_BUF_FLAG_ERROR for capture buffers with 0 filled length
Dikshita Agarwal <quic_dikshita(a)quicinc.com>
media: iris: Remove error check for non-zero v4l2 controls
Dikshita Agarwal <quic_dikshita(a)quicinc.com>
media: iris: Remove deprecated property setting to firmware
Dikshita Agarwal <quic_dikshita(a)quicinc.com>
media: iris: Prevent HFI queue writes when core is in deinit state
Dikshita Agarwal <quic_dikshita(a)quicinc.com>
media: iris: Fix typo in depth variable
Dikshita Agarwal <quic_dikshita(a)quicinc.com>
media: iris: Fix NULL pointer dereference
Dikshita Agarwal <quic_dikshita(a)quicinc.com>
media: iris: Fix missing function pointer initialization
Dikshita Agarwal <quic_dikshita(a)quicinc.com>
media: iris: Fix buffer preparation failure during resolution change
Dikshita Agarwal <quic_dikshita(a)quicinc.com>
media: iris: Drop port check for session property response
Dikshita Agarwal <quic_dikshita(a)quicinc.com>
media: iris: Avoid updating frame size to firmware during reconfig
Ricardo Ribalda <ribalda(a)chromium.org>
media: venus: venc: Clamp param smaller than 1fps and bigger than 240
Ricardo Ribalda <ribalda(a)chromium.org>
media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
Jorge Ramirez-Ortiz <jorge.ramirez(a)oss.qualcomm.com>
media: venus: protect against spurious interrupts during probe
Jorge Ramirez-Ortiz <jorge.ramirez(a)oss.qualcomm.com>
media: venus: hfi: explicitly release IRQ during teardown
Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com>
media: venus: Fix MSM8998 frequency table
Vedang Nagar <quic_vnagar(a)quicinc.com>
media: venus: Add a check for packet size after reading from shared memory
Bryan O'Donoghue <bryan.odonoghue(a)linaro.org>
media: qcom: camss: Remove extraneous -supply postfix on supply names
Vladimir Zapolskiy <vladimir.zapolskiy(a)linaro.org>
media: qcom: camss: cleanup media device allocated resource on error path
Bryan O'Donoghue <bryan.odonoghue(a)linaro.org>
media: qcom: camss: csiphy-3ph: Fix inadvertent dropping of SDM660/SDM670 phy init
Hans de Goede <hansg(a)kernel.org>
media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls
Mathis Foerst <mathis.foerst(a)mt.com>
media: mt9m114: Fix deadlock in get_frame_interval/set_frame_interval
Zhang Shurong <zhang_shurong(a)foxmail.com>
media: ov2659: Fix memory leaks in ov2659_probe()
Jacopo Mondi <jacopo.mondi(a)ideasonboard.com>
media: pisp_be: Fix pm_runtime underrun in probe
Gui-Dong Han <hanguidong02(a)gmail.com>
media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
Ludwig Disterhof <ludwig(a)disterhof.eu>
media: usbtv: Lock resolution while streaming
Sakari Ailus <sakari.ailus(a)linux.intel.com>
media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
Nicolas Dufresne <nicolas.dufresne(a)collabora.com>
media: verisilicon: Fix AV1 decoder clock frequency
Hans Verkuil <hverkuil(a)xs4all.nl>
media: vivid: fix wrong pixel_array control size
Sakari Ailus <sakari.ailus(a)linux.intel.com>
media: ipu6: isys: Use correct pads for xlate_streams()
Haoxiang Li <haoxiang_li2024(a)163.com>
media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
Bingbu Cao <bingbu.cao(a)intel.com>
media: hi556: correct the test pattern configuration
Dan Carpenter <dan.carpenter(a)linaro.org>
media: gspca: Add bounds checking to firmware parser
John David Anglin <dave.anglin(a)bell.net>
parisc: Update comments in make_insert_tlb
John David Anglin <dave.anglin(a)bell.net>
parisc: Try to fixup kernel exception in bad_area_nosemaphore path of do_page_fault()
John David Anglin <dave.anglin(a)bell.net>
parisc: Revise gateway LWS calls to probe user read access
John David Anglin <dave.anglin(a)bell.net>
parisc: Revise __get_user() to probe user read access
John David Anglin <dave.anglin(a)bell.net>
parisc: Rename pte_needs_flush() to pte_needs_cache_flush() in cache.c
Randy Dunlap <rdunlap(a)infradead.org>
parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit compilers
John David Anglin <dave.anglin(a)bell.net>
parisc: Drop WARN_ON_ONCE() from flush_cache_vmap
John David Anglin <dave.anglin(a)bell.net>
parisc: Define and use set_pte_at()
John David Anglin <dave.anglin(a)bell.net>
parisc: Check region is readable by user in raw_copy_from_user()
Jon Hunter <jonathanh(a)nvidia.com>
soc/tegra: pmc: Ensure power-domains are in a known state
Jialin Wang <wjl.linux(a)gmail.com>
proc: proc_maps_open allow proc_mem_open to return NULL
Aleksa Sarai <cyphar(a)cyphar.com>
open_tree_attr: do not allow id-mapping changes without OPEN_TREE_CLONE
Simon Richter <Simon.Richter(a)hogyros.de>
Mark xe driver as BROKEN if kernel page size is not 4kB
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
kbuild: userprogs: use correct linker when mixing clang and GNU ld
Jann Horn <jannh(a)google.com>
kasan/test: fix protection against compiler elision
Baokun Li <libaokun1(a)huawei.com>
jbd2: prevent softlockup in jbd2_log_do_checkpoint()
Jan Kara <jack(a)suse.cz>
iomap: Fix broken data integrity guarantees for O_SYNC writes
Kathiravan Thirumoorthy <kathiravan.thirumoorthy(a)oss.qualcomm.com>
i2c: qcom-geni: fix I2C frequency table to achieve accurate bus rates
Chao Yu <chao(a)kernel.org>
f2fs: fix to avoid out-of-boundary access in dnode page
Julian Sun <sunjunchao2870(a)gmail.com>
block: restore default wbt enablement
Muhammad Usama Anjum <usama.anjum(a)collabora.com>
ASoC: SOF: amd: acp-loader: Use GFP_KERNEL for DMA allocations in resume context
Xaver Hugl <xaver.hugl(a)kde.org>
amdgpu/amdgpu_discovery: increase timeout limit for IFWI init
Kathiravan Thirumoorthy <kathiravan.thirumoorthy(a)oss.qualcomm.com>
phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization sequence
Will Deacon <will(a)kernel.org>
vhost/vsock: Avoid allocating arbitrarily-sized SKBs
Will Deacon <will(a)kernel.org>
vsock/virtio: Validate length in packet header before skb_put()
Richard Zhu <hongxing.zhu(a)nxp.com>
PCI: imx6: Delay link start until configfs 'start' written
Richard Zhu <hongxing.zhu(a)nxp.com>
PCI: imx6: Remove apps_reset toggling from imx_pcie_{assert/deassert}_core_reset
Richard Zhu <hongxing.zhu(a)nxp.com>
PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4 in epc_features
Richard Zhu <hongxing.zhu(a)nxp.com>
PCI: imx6: Add IMX8MQ_EP third 64-bit BAR in epc_features
Damien Le Moal <dlemoal(a)kernel.org>
PCI: endpoint: Fix configfs group removal on driver teardown
Damien Le Moal <dlemoal(a)kernel.org>
PCI: endpoint: Fix configfs group list head handling
Jiwei Sun <sunjw10(a)lenovo.com>
PCI: Fix link speed calculation on retrain failure
Lukas Wunner <lukas(a)wunner.de>
PCI/portdrv: Use is_pciehp instead of is_hotplug_bridge
Chi Zhiling <chizhiling(a)kylinos.cn>
readahead: fix return value of page_cache_next_miss() when no hole is found
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
mfd: mt6397: Do not use generic name for keypad sub-devices
Thomas Fourier <fourier.thomas(a)gmail.com>
mtd: rawnand: renesas: Add missing check after DMA map
Thomas Fourier <fourier.thomas(a)gmail.com>
mtd: rawnand: fsmc: Add missing check after DMA map
Gabor Juhos <j4g8y7(a)gmail.com>
mtd: spinand: propagate spinand_wait() errors from spinand_write_page()
Michael Walle <mwalle(a)kernel.org>
mtd: spi-nor: Fix spi_nor_try_unlock_all()
Tim Harvey <tharvey(a)gateworks.com>
hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Fix duty and period setting
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Handle hardware enable and clock enable separately
Laurentiu Mihalcea <laurentiu.mihalcea(a)nxp.com>
pwm: imx-tpm: Reset counter if CMOD is 0
Johan Hovold <johan+linaro(a)kernel.org>
wifi: ath11k: fix dest ring-buffer corruption when ring is full
Johan Hovold <johan+linaro(a)kernel.org>
wifi: ath11k: fix source ring-buffer corruption
Johan Hovold <johan+linaro(a)kernel.org>
wifi: ath11k: fix dest ring-buffer corruption
Johan Hovold <johan+linaro(a)kernel.org>
wifi: ath12k: fix dest ring-buffer corruption when ring is full
Johan Hovold <johan+linaro(a)kernel.org>
wifi: ath12k: fix source ring-buffer corruption
Johan Hovold <johan+linaro(a)kernel.org>
wifi: ath12k: fix dest ring-buffer corruption
Nathan Chancellor <nathan(a)kernel.org>
wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
David Lechner <dlechner(a)baylibre.com>
iio: adc: ad7173: fix setting ODR in probe
David Lechner <dlechner(a)baylibre.com>
iio: adc: ad7173: fix calibration channel
David Lechner <dlechner(a)baylibre.com>
iio: adc: ad7173: fix channels index for syscalib_mode
David Lechner <dlechner(a)baylibre.com>
iio: adc: ad_sigma_delta: change to buffer predisable
David Lechner <dlechner(a)baylibre.com>
iio: imu: bno055: fix OOB access of hw_xlate array
Marek Szyprowski <m.szyprowski(a)samsung.com>
zynq_fpga: use sgtable-based scatterlist wrappers
Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com>
soc: qcom: mdt_loader: Ensure we don't read past the ELF header
Igor Pylypiv <ipylypiv(a)google.com>
ata: libata-scsi: Fix CDL control
Adrian Hunter <adrian.hunter(a)intel.com>
scsi: ufs: ufs-pci: Fix default runtime and system PM levels
Archana Patni <archana.patni(a)intel.com>
scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers
Damien Le Moal <dlemoal(a)kernel.org>
ata: libata-scsi: Return aborted command when missing sense and result TF
Damien Le Moal <dlemoal(a)kernel.org>
ata: libata-scsi: Fix ata_to_sense_error() status handling
Ranjan Kumar <ranjan.kumar(a)broadcom.com>
scsi: mpi3mr: Fix race between config read submit and interrupt completion
André Draszik <andre.draszik(a)linaro.org>
scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
Macpaul Lin <macpaul.lin(a)mediatek.com>
scsi: dt-bindings: mediatek,ufs: Add ufs-disable-mcq flag for UFS host
Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com>
dt-bindings: display: vop2: Add optional PLL clock property for rk3576
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks constraints
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints
Helge Deller <deller(a)gmx.de>
apparmor: Fix 8-byte alignment for initial dfa blob streams
Sam Edwards <cfsworks(a)gmail.com>
arm64: dts: rockchip: Remove workaround that prevented Turing RK1 GPU power regulator control
Emanuele Ghidoli <emanuele.ghidoli(a)toradex.com>
arm64: dts: ti: k3-am62-verdin: Enable pull-ups on I2C buses
Kaustabh Chakraborty <kauschluss(a)disroot.org>
arm64: dts: exynos7870-on7xelte: reduce memory ranges to base amount
Judith Mendez <jm(a)ti.com>
arm64: dts: ti: k3-am62*: Move eMMC pinmux to top level board file
Hong Guan <hguan(a)ti.com>
arm64: dts: ti: k3-am62a7-sk: fix pinmux for main_uart1
Peter Griffin <peter.griffin(a)linaro.org>
arm64: dts: exynos: gs101: ufs: add dma-coherent property
Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com>
arm64: dts: rockchip: Enable HDMI PHY clk provider on rk3576
Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com>
arm64: dts: rockchip: Add HDMI PHY PLL clock source to VOP2 on rk3576
Kaustabh Chakraborty <kauschluss(a)disroot.org>
arm64: dts: exynos7870: add quirk to disable USB2 LPM in gadget mode
Alexander Sverdlin <alexander.sverdlin(a)gmail.com>
arm64: dts: ti: k3-pinctrl: Enable Schmitt Trigger by default
Kaustabh Chakraborty <kauschluss(a)disroot.org>
arm64: dts: exynos7870-j6lte: reduce memory ranges to base amount
Judith Mendez <jm(a)ti.com>
arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support
Nick Chan <towinchenmi(a)gmail.com>
arm64: dts: apple: t8012-j132: Include touchbar framebuffer node
Kyoji Ogasawara <sawara04.o(a)gmail.com>
btrfs: fix printing of mount info messages for NODATACOW/NODATASUM
Kyoji Ogasawara <sawara04.o(a)gmail.com>
btrfs: restore mount option info messages during mount
Kyoji Ogasawara <sawara04.o(a)gmail.com>
btrfs: fix incorrect log message for nobarrier mount option
Naohiro Aota <naohiro.aota(a)wdc.com>
btrfs: zoned: fix write time activation failure for metadata block group
Zhang Yi <yi.zhang(a)huawei.com>
ext4: fix hole length calculation overflow in non-extent inodes
Liao Yuanhong <liaoyuanhong(a)vivo.com>
ext4: use kmalloc_array() for array space allocation
Theodore Ts'o <tytso(a)mit.edu>
ext4: don't try to clear the orphan_present feature block device is r/o
Ojaswin Mujoo <ojaswin(a)linux.ibm.com>
ext4: fix reserved gdt blocks handling in fsmap
Ojaswin Mujoo <ojaswin(a)linux.ibm.com>
ext4: fix fsmap end of range reporting with bigalloc
Andreas Dilger <adilger(a)dilger.ca>
ext4: check fast symlink for ea_inode correctly
Baokun Li <libaokun1(a)huawei.com>
ext4: preserve SB_I_VERSION on remount
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
tracing: fprobe-event: Sanitize wildcard for fprobe event name
Namjae Jeon <linkinjeon(a)kernel.org>
ksmbd: extend the connection limiting mechanism to support IPv6
Ziyan Xu <ziyan(a)securitygossip.com>
ksmbd: fix refcount leak causing resource not released
Helge Deller <deller(a)gmx.de>
Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: hash - Increase HASH_MAX_DESCSIZE for hmac(sha3-224-s390)
Bharat Bhushan <bbhushan2(a)marvell.com>
crypto: octeontx2 - Fix address alignment on CN10KB and CN10KA-B0
Bharat Bhushan <bbhushan2(a)marvell.com>
crypto: octeontx2 - Fix address alignment on CN10K A0/A1 and OcteonTX2
Bharat Bhushan <bbhushan2(a)marvell.com>
crypto: octeontx2 - Fix address alignment issue on ucode loading
Eric Biggers <ebiggers(a)kernel.org>
crypto: x86/aegis - Add missing error checks
Eric Biggers <ebiggers(a)kernel.org>
crypto: x86/aegis - Fix sleeping when disallowed on PREEMPT_RT
Giovanni Cabiddu <giovanni.cabiddu(a)intel.com>
crypto: qat - flush misc workqueue during device shutdown
John Ernberg <john.ernberg(a)actia.se>
crypto: caam - Prevent crash on suspend with iMX8QM / iMX8ULP
Ashish Kalra <ashish.kalra(a)amd.com>
crypto: ccp - Fix SNP panic notifier unregistration
Giovanni Cabiddu <giovanni.cabiddu(a)intel.com>
crypto: qat - lower priority for skcipher and aead algorithms
Eric Biggers <ebiggers(a)kernel.org>
lib/crypto: arm64/poly1305: Fix register corruption in no-SIMD contexts
Eric Biggers <ebiggers(a)kernel.org>
lib/crypto: arm/poly1305: Fix register corruption in no-SIMD contexts
Eric Biggers <ebiggers(a)kernel.org>
lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
David Howells <dhowells(a)redhat.com>
netfs: Fix unbuffered write error handling
Myrrh Periwinkle <myrrhperiwinkle(a)qtmlabs.xyz>
vt: defkeymap: Map keycodes above 127 to K_HOLE
Myrrh Periwinkle <myrrhperiwinkle(a)qtmlabs.xyz>
vt: keyboard: Don't process Unicode characters in K_OFF mode
Youssef Samir <quic_yabdulra(a)quicinc.com>
bus: mhi: host: Detect events pointing to unexpected TREs
Alexander Wilhelm <alexander.wilhelm(a)westermo.com>
bus: mhi: host: Fix endianness of BHI vector table
Johan Hovold <johan(a)kernel.org>
usb: dwc3: imx8mp: fix device leak at unbind
Johan Hovold <johan(a)kernel.org>
usb: dwc3: meson-g12a: fix device leaks at unbind
Johan Hovold <johan(a)kernel.org>
usb: musb: omap2430: fix device leak at unbind
Johan Hovold <johan(a)kernel.org>
usb: gadget: udc: renesas_usb3: fix device leak at unbind
Nathan Chancellor <nathan(a)kernel.org>
usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
David Lechner <dlechner(a)baylibre.com>
iio: adc: ad7173: fix num_slots
Finn Thain <fthain(a)linux-m68k.org>
m68k: Fix lost column on framebuffer debug console
Damien Le Moal <dlemoal(a)kernel.org>
dm: Check for forbidden splitting of zone write operations
Damien Le Moal <dlemoal(a)kernel.org>
dm: dm-crypt: Do not partially accept write BIOs with zoned targets
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
PM: runtime: Take active children into account in pm_runtime_get_if_in_use()
Tzung-Bi Shih <tzungbi(a)kernel.org>
platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
Dan Carpenter <dan.carpenter(a)linaro.org>
cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
Damien Le Moal <dlemoal(a)kernel.org>
ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
Yunhui Cui <cuiyunhui(a)bytedance.com>
serial: 8250: fix panic due to PSLVERR
-------------
Diffstat:
.../bindings/display/rockchip/rockchip-vop2.yaml | 56 ++++-
.../bindings/display/sprd/sprd,sharkl3-dpu.yaml | 2 +-
.../display/sprd/sprd,sharkl3-dsi-host.yaml | 2 +-
.../devicetree/bindings/ufs/mediatek,ufs.yaml | 4 +
Documentation/networking/mptcp-sysctl.rst | 2 +
Makefile | 6 +-
arch/arm/lib/crypto/poly1305-glue.c | 3 +-
arch/arm64/boot/dts/apple/t8012-j132.dts | 1 +
arch/arm64/boot/dts/exynos/exynos7870-j6lte.dts | 2 +-
arch/arm64/boot/dts/exynos/exynos7870-on7xelte.dts | 2 +-
arch/arm64/boot/dts/exynos/exynos7870.dtsi | 1 +
arch/arm64/boot/dts/exynos/google/gs101.dtsi | 1 +
arch/arm64/boot/dts/rockchip/rk3576.dtsi | 7 +-
.../arm64/boot/dts/rockchip/rk3588-turing-rk1.dtsi | 11 -
arch/arm64/boot/dts/ti/k3-am62-lp-sk.dts | 24 ++
arch/arm64/boot/dts/ti/k3-am62-main.dtsi | 1 -
arch/arm64/boot/dts/ti/k3-am62-verdin.dtsi | 12 +-
arch/arm64/boot/dts/ti/k3-am625-sk.dts | 24 ++
arch/arm64/boot/dts/ti/k3-am62a7-sk.dts | 4 +-
arch/arm64/boot/dts/ti/k3-am62x-sk-common.dtsi | 24 --
arch/arm64/boot/dts/ti/k3-pinctrl.h | 15 +-
arch/arm64/lib/crypto/poly1305-glue.c | 3 +-
arch/loongarch/Makefile | 6 +
arch/loongarch/kernel/module-sections.c | 38 +--
arch/loongarch/kvm/intc/eiointc.c | 32 +--
arch/loongarch/kvm/intc/ipi.c | 8 +-
arch/loongarch/kvm/intc/pch_pic.c | 10 +
arch/loongarch/kvm/vcpu.c | 8 +-
arch/m68k/kernel/head.S | 31 ++-
arch/mips/lib/crypto/chacha-core.S | 20 +-
arch/parisc/Makefile | 4 +-
arch/parisc/include/asm/pgtable.h | 7 +-
arch/parisc/include/asm/special_insns.h | 28 +++
arch/parisc/include/asm/uaccess.h | 21 +-
arch/parisc/kernel/cache.c | 6 +-
arch/parisc/kernel/entry.S | 17 +-
arch/parisc/kernel/syscall.S | 30 ++-
arch/parisc/lib/memcpy.c | 19 +-
arch/parisc/mm/fault.c | 4 +
arch/s390/boot/vmem.c | 3 +
arch/s390/hypfs/hypfs_dbfs.c | 19 +-
arch/x86/crypto/aegis128-aesni-glue.c | 40 +++-
arch/x86/include/asm/xen/hypercall.h | 5 +-
arch/x86/kernel/cpu/amd.c | 8 +-
arch/x86/kernel/cpu/hygon.c | 3 +
block/bfq-iosched.c | 13 +-
block/blk-mq-debugfs.c | 1 +
block/blk-mq-sched.c | 223 ++++++++++++------
block/blk-mq-sched.h | 12 +-
block/blk-mq.c | 29 ++-
block/blk-rq-qos.c | 8 +-
block/blk-rq-qos.h | 48 ++--
block/blk-sysfs.c | 2 +-
block/blk.h | 4 +-
block/elevator.c | 38 ++-
block/elevator.h | 16 +-
block/kyber-iosched.c | 11 +-
block/mq-deadline.c | 14 +-
crypto/deflate.c | 7 +-
drivers/accel/habanalabs/gaudi2/gaudi2.c | 2 +-
drivers/acpi/apei/einj-core.c | 12 +-
drivers/acpi/pfr_update.c | 2 +-
drivers/ata/Kconfig | 32 ++-
drivers/ata/libata-scsi.c | 49 ++--
drivers/base/power/runtime.c | 27 ++-
drivers/bluetooth/btmtk.c | 7 +-
drivers/bus/mhi/host/boot.c | 8 +-
drivers/bus/mhi/host/internal.h | 4 +-
drivers/bus/mhi/host/main.c | 12 +-
drivers/cdx/controller/cdx_rpmsg.c | 3 +-
drivers/comedi/comedi_fops.c | 5 +
drivers/comedi/drivers.c | 27 +--
drivers/comedi/drivers/pcl726.c | 3 +-
drivers/cpufreq/armada-8k-cpufreq.c | 2 +-
drivers/cpuidle/governors/menu.c | 29 +--
drivers/crypto/caam/ctrl.c | 5 +-
drivers/crypto/caam/intern.h | 1 +
drivers/crypto/ccp/sev-dev.c | 10 +-
.../crypto/intel/qat/qat_common/adf_common_drv.h | 1 +
drivers/crypto/intel/qat/qat_common/adf_init.c | 1 +
drivers/crypto/intel/qat/qat_common/adf_isr.c | 5 +
drivers/crypto/intel/qat/qat_common/qat_algs.c | 12 +-
drivers/crypto/marvell/octeontx2/otx2_cpt_reqmgr.h | 125 +++++++---
.../crypto/marvell/octeontx2/otx2_cptpf_ucode.c | 35 +--
drivers/fpga/zynq-fpga.c | 10 +-
drivers/gpu/drm/amd/amdgpu/amdgpu.h | 1 +
drivers/gpu/drm/amd/amdgpu/amdgpu_cper.c | 8 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 3 +
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 6 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 76 +++---
drivers/gpu/drm/amd/amdgpu/amdgpu_job.c | 7 -
drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c | 1 +
drivers/gpu/drm/amd/amdgpu/amdgpu_ucode.c | 1 +
drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 21 +-
drivers/gpu/drm/amd/amdgpu/aqua_vanjaram.c | 5 +-
drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 14 +-
drivers/gpu/drm/amd/amdgpu/imu_v12_0.c | 13 +-
drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c | 57 +++--
drivers/gpu/drm/amd/amdgpu/mmhub_v3_3.c | 121 +++++++++-
drivers/gpu/drm/amd/amdgpu/mmhub_v4_1_0.c | 34 ++-
drivers/gpu/drm/amd/amdgpu/psp_v14_0.c | 2 +
drivers/gpu/drm/amd/amdgpu/soc15.c | 2 +
.../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 2 +-
drivers/gpu/drm/amd/amdkfd/kfd_module.c | 2 +-
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c | 61 ++++-
.../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 20 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 19 +-
.../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c | 28 +++
.../drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 2 +-
drivers/gpu/drm/amd/display/dc/bios/bios_parser.c | 5 +-
.../gpu/drm/amd/display/dc/bios/command_table.c | 2 +-
drivers/gpu/drm/amd/display/dc/clk_mgr/clk_mgr.c | 1 -
.../amd/display/dc/clk_mgr/dce100/dce_clk_mgr.c | 19 +-
.../amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 40 ++--
.../amd/display/dc/clk_mgr/dce60/dce60_clk_mgr.c | 31 +--
drivers/gpu/drm/amd/display/dc/core/dc.c | 34 ++-
.../amd/display/dc/resource/dce60/dce60_resource.c | 34 +--
.../gpu/drm/amd/display/modules/hdcp/hdcp_psp.c | 3 +
drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 16 ++
drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c | 11 +-
.../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 30 ++-
drivers/gpu/drm/display/drm_dp_helper.c | 2 +-
drivers/gpu/drm/drm_format_helper.c | 108 ++++++++-
drivers/gpu/drm/drm_format_internal.h | 8 +
drivers/gpu/drm/drm_panic_qr.rs | 22 +-
drivers/gpu/drm/hisilicon/hibmc/dp/dp_link.c | 14 +-
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 22 +-
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.h | 1 +
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_i2c.c | 5 +
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_vdac.c | 11 +-
drivers/gpu/drm/i915/display/intel_display_irq.c | 4 +
drivers/gpu/drm/i915/display/intel_tc.c | 93 ++++++--
drivers/gpu/drm/i915/gt/intel_workarounds.c | 20 +-
drivers/gpu/drm/nouveau/nvif/vmm.c | 3 +-
.../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/rpc.c | 4 +-
drivers/gpu/drm/nova/file.rs | 3 +-
drivers/gpu/drm/tests/drm_format_helper_test.c | 111 ++-------
drivers/gpu/drm/xe/Kconfig | 1 +
drivers/gpu/drm/xe/xe_migrate.c | 2 +-
drivers/gpu/drm/xe/xe_pxp_submit.c | 2 +-
drivers/gpu/drm/xe/xe_shrinker.c | 51 +++-
drivers/gpu/drm/xe/xe_vm.c | 48 ++--
drivers/gpu/drm/xe/xe_vm.h | 2 +-
drivers/hwmon/gsc-hwmon.c | 4 +-
drivers/i2c/busses/i2c-qcom-geni.c | 6 +-
drivers/i2c/busses/i2c-rtl9300.c | 20 +-
drivers/iio/accel/sca3300.c | 2 +-
drivers/iio/adc/Kconfig | 2 +-
drivers/iio/adc/ad7124.c | 14 +-
drivers/iio/adc/ad7173.c | 137 ++++++++---
drivers/iio/adc/ad7380.c | 1 +
drivers/iio/adc/ad_sigma_delta.c | 4 +-
drivers/iio/adc/rzg2l_adc.c | 33 +--
drivers/iio/imu/bno055/bno055.c | 11 +-
drivers/iio/imu/inv_icm42600/inv_icm42600.h | 8 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 31 ++-
drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 22 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h | 10 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 6 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 41 ++--
drivers/iio/imu/inv_icm42600/inv_icm42600_temp.c | 12 +-
drivers/iio/light/as73211.c | 2 +-
drivers/iio/pressure/bmp280-core.c | 9 +-
drivers/iio/proximity/isl29501.c | 14 +-
drivers/iio/temperature/maxim_thermocouple.c | 26 ++-
drivers/infiniband/core/umem_odp.c | 4 +-
drivers/infiniband/hw/bnxt_re/ib_verbs.c | 8 +-
drivers/infiniband/hw/bnxt_re/main.c | 23 ++
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 30 +--
drivers/infiniband/hw/bnxt_re/qplib_fp.h | 2 -
drivers/infiniband/hw/bnxt_re/qplib_res.c | 2 +
drivers/infiniband/hw/erdma/erdma_verbs.c | 6 +-
drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 6 +-
drivers/infiniband/hw/hns/hns_roce_restrack.c | 9 +-
drivers/infiniband/sw/rxe/rxe_net.c | 29 +--
drivers/infiniband/sw/rxe/rxe_qp.c | 2 +-
drivers/iommu/amd/init.c | 4 +-
drivers/iommu/apple-dart.c | 1 -
drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 2 +-
drivers/iommu/intel/iommu.c | 1 -
drivers/iommu/iommufd/selftest.c | 1 -
drivers/iommu/riscv/iommu.c | 3 +-
drivers/iommu/virtio-iommu.c | 19 +-
drivers/md/dm-crypt.c | 47 +++-
drivers/md/dm-raid.c | 42 ++--
drivers/md/dm.c | 17 +-
drivers/md/md-bitmap.c | 8 +-
drivers/md/md-cluster.c | 16 +-
drivers/md/md.c | 110 ++++++---
drivers/md/md.h | 2 +-
drivers/md/raid0.c | 6 +-
drivers/md/raid1-10.c | 2 +-
drivers/md/raid1.c | 10 +-
drivers/md/raid10.c | 16 +-
drivers/md/raid5-ppl.c | 6 +-
drivers/md/raid5.c | 30 +--
drivers/media/cec/usb/rainshadow/rainshadow-cec.c | 3 +-
drivers/media/i2c/hi556.c | 26 ++-
drivers/media/i2c/mt9m114.c | 8 -
drivers/media/i2c/ov2659.c | 3 +-
drivers/media/pci/intel/ipu6/ipu6-isys-csi2.c | 12 +-
drivers/media/pci/intel/ivsc/mei_ace.c | 2 +
drivers/media/pci/intel/ivsc/mei_csi.c | 2 +
.../platform/qcom/camss/camss-csiphy-3ph-1-0.c | 3 +-
drivers/media/platform/qcom/camss/camss.c | 20 +-
drivers/media/platform/qcom/iris/iris_buffer.c | 20 +-
drivers/media/platform/qcom/iris/iris_buffer.h | 3 +-
drivers/media/platform/qcom/iris/iris_ctrls.c | 7 +-
.../platform/qcom/iris/iris_hfi_gen1_command.c | 27 +--
.../platform/qcom/iris/iris_hfi_gen1_defines.h | 1 -
.../platform/qcom/iris/iris_hfi_gen1_response.c | 20 +-
.../platform/qcom/iris/iris_hfi_gen2_command.c | 4 +-
.../platform/qcom/iris/iris_hfi_gen2_response.c | 11 +-
drivers/media/platform/qcom/iris/iris_hfi_queue.c | 2 +-
drivers/media/platform/qcom/iris/iris_instance.h | 2 +
.../platform/qcom/iris/iris_platform_common.h | 2 +-
.../platform/qcom/iris/iris_platform_sm8250.c | 9 -
drivers/media/platform/qcom/iris/iris_state.c | 2 +-
drivers/media/platform/qcom/iris/iris_state.h | 1 +
drivers/media/platform/qcom/iris/iris_vb2.c | 15 +-
drivers/media/platform/qcom/iris/iris_vdec.c | 9 +-
drivers/media/platform/qcom/iris/iris_vidc.c | 33 ++-
drivers/media/platform/qcom/venus/core.c | 18 +-
drivers/media/platform/qcom/venus/core.h | 2 +
drivers/media/platform/qcom/venus/hfi_venus.c | 5 +
drivers/media/platform/qcom/venus/vdec.c | 5 +-
drivers/media/platform/qcom/venus/venc.c | 5 +-
drivers/media/platform/raspberrypi/pisp_be/Kconfig | 1 +
.../media/platform/raspberrypi/pisp_be/pisp_be.c | 5 +-
.../media/platform/verisilicon/rockchip_vpu_hw.c | 9 -
drivers/media/test-drivers/vivid/vivid-ctrls.c | 3 +-
drivers/media/test-drivers/vivid/vivid-vid-cap.c | 4 +-
drivers/media/usb/gspca/vicam.c | 10 +-
drivers/media/usb/usbtv/usbtv-video.c | 4 +
drivers/media/v4l2-core/v4l2-ctrls-core.c | 1 -
drivers/memstick/core/memstick.c | 1 -
drivers/memstick/host/rtsx_usb_ms.c | 1 +
drivers/mfd/mt6397-core.c | 12 +-
drivers/mmc/host/sdhci-of-arasan.c | 33 ++-
drivers/mmc/host/sdhci-pci-gli.c | 37 +--
drivers/mmc/host/sdhci_am654.c | 18 ++
drivers/most/core.c | 2 +-
drivers/mtd/nand/raw/fsmc_nand.c | 2 +
drivers/mtd/nand/raw/renesas-nand-controller.c | 6 +
drivers/mtd/nand/spi/core.c | 5 +-
drivers/mtd/spi-nor/swp.c | 19 +-
drivers/net/bonding/bond_3ad.c | 67 ++++--
drivers/net/bonding/bond_options.c | 1 +
drivers/net/dsa/microchip/ksz_common.c | 6 +
drivers/net/ethernet/airoha/airoha_ppe.c | 4 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 2 +-
drivers/net/ethernet/google/gve/gve_main.c | 2 +
drivers/net/ethernet/intel/igc/igc_main.c | 14 +-
drivers/net/ethernet/intel/ixgbe/devlink/devlink.c | 1 +
drivers/net/ethernet/intel/ixgbe/ixgbe_xsk.c | 4 +-
.../net/ethernet/marvell/octeontx2/af/rvu_npc_fs.c | 4 +-
drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 2 +
drivers/net/ethernet/mellanox/mlx5/core/en/dcbnl.h | 1 -
.../ethernet/mellanox/mlx5/core/en/port_buffer.c | 18 +-
.../ethernet/mellanox/mlx5/core/en/tc/ct_fs_hmfs.c | 2 +
drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 12 +-
.../ethernet/mellanox/mlx5/core/esw/devlink_port.c | 4 +-
.../net/ethernet/mellanox/mlx5/core/mlx5_core.h | 2 +
drivers/net/ethernet/mellanox/mlx5/core/port.c | 20 ++
.../mellanox/mlx5/core/steering/hws/bwc_complex.c | 41 ++--
.../ethernet/mellanox/mlx5/core/steering/hws/cmd.c | 1 +
.../ethernet/mellanox/mlx5/core/steering/hws/cmd.h | 1 +
.../mellanox/mlx5/core/steering/hws/fs_hws.c | 1 +
.../mellanox/mlx5/core/steering/hws/matcher.c | 5 +-
.../mellanox/mlx5/core/steering/hws/mlx5hws.h | 1 +
.../mellanox/mlx5/core/steering/hws/send.c | 1 -
.../mellanox/mlx5/core/steering/hws/table.c | 13 +-
.../mellanox/mlx5/core/steering/hws/table.h | 3 +-
drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +
drivers/net/ethernet/mellanox/mlxsw/trap.h | 1 +
drivers/net/ethernet/microchip/lan865x/lan865x.c | 21 ++
drivers/net/ethernet/realtek/rtase/rtase.h | 2 +-
drivers/net/ethernet/stmicro/stmmac/dwmac-thead.c | 9 +-
drivers/net/ethernet/ti/icssg/icssg_prueth.c | 72 +++---
drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 8 +-
drivers/net/phy/mscc/mscc.h | 12 +
drivers/net/phy/mscc/mscc_main.c | 12 +
drivers/net/phy/mscc/mscc_ptp.c | 49 +++-
drivers/net/ppp/ppp_generic.c | 17 +-
drivers/net/usb/asix_devices.c | 2 +-
drivers/net/wireless/ath/ath11k/ce.c | 3 -
drivers/net/wireless/ath/ath11k/dp_rx.c | 3 -
drivers/net/wireless/ath/ath11k/hal.c | 33 ++-
drivers/net/wireless/ath/ath12k/ce.c | 3 -
drivers/net/wireless/ath/ath12k/hal.c | 38 ++-
.../broadcom/brcm80211/brcmsmac/phy/phy_lcn.c | 2 +-
drivers/pci/controller/dwc/pci-imx6.c | 12 +-
drivers/pci/controller/dwc/pcie-designware.c | 8 +
drivers/pci/controller/pcie-rockchip-ep.c | 4 +-
drivers/pci/controller/pcie-rockchip-host.c | 49 ++--
drivers/pci/controller/pcie-rockchip.h | 12 +-
drivers/pci/endpoint/pci-ep-cfs.c | 1 +
drivers/pci/endpoint/pci-epf-core.c | 2 +-
drivers/pci/pci.h | 32 +--
drivers/pci/pcie/portdrv.c | 2 +-
drivers/phy/qualcomm/phy-qcom-m31.c | 14 +-
drivers/platform/chrome/cros_ec.c | 3 +
drivers/platform/x86/amd/hsmp/hsmp.c | 5 +
.../intel/uncore-frequency/uncore-frequency-tpmi.c | 5 +
drivers/pwm/pwm-imx-tpm.c | 9 +
drivers/pwm/pwm-mediatek.c | 71 +++---
drivers/regulator/pca9450-regulator.c | 13 +-
drivers/regulator/tps65219-regulator.c | 12 +-
drivers/s390/char/sclp.c | 11 +-
drivers/scsi/mpi3mr/mpi3mr.h | 6 +-
drivers/scsi/mpi3mr/mpi3mr_fw.c | 17 +-
drivers/scsi/mpi3mr/mpi3mr_os.c | 2 +
drivers/scsi/qla4xxx/ql4_os.c | 2 +
drivers/soc/qcom/mdt_loader.c | 43 ++++
drivers/soc/tegra/pmc.c | 51 ++--
drivers/spi/spi-fsl-lpspi.c | 8 +-
drivers/spi/spi-qpic-snand.c | 22 +-
drivers/staging/media/imx/imx-media-csc-scaler.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 3 +-
drivers/tty/vt/defkeymap.c_shipped | 112 +++++++++
drivers/tty/vt/keyboard.c | 2 +-
drivers/ufs/core/ufshcd.c | 10 +-
drivers/ufs/host/ufs-exynos.c | 4 +-
drivers/ufs/host/ufs-qcom.c | 42 ++--
drivers/ufs/host/ufshcd-pci.c | 42 +++-
drivers/usb/atm/cxacru.c | 172 +++++++-------
drivers/usb/core/hcd.c | 20 +-
drivers/usb/core/quirks.c | 1 +
drivers/usb/dwc3/dwc3-imx8mp.c | 7 +-
drivers/usb/dwc3/dwc3-meson-g12a.c | 3 +
drivers/usb/dwc3/dwc3-pci.c | 2 +
drivers/usb/dwc3/ep0.c | 20 +-
drivers/usb/dwc3/gadget.c | 19 +-
drivers/usb/gadget/udc/renesas_usb3.c | 1 +
drivers/usb/host/xhci-hub.c | 3 +-
drivers/usb/host/xhci-mem.c | 22 +-
drivers/usb/host/xhci-pci-renesas.c | 7 +-
drivers/usb/host/xhci-ring.c | 9 +-
drivers/usb/host/xhci.c | 23 +-
drivers/usb/host/xhci.h | 3 +-
drivers/usb/musb/omap2430.c | 14 +-
drivers/usb/storage/realtek_cr.c | 2 +-
drivers/usb/storage/unusual_devs.h | 29 +++
drivers/usb/typec/tcpm/maxim_contaminant.c | 58 +++++
drivers/usb/typec/tcpm/tcpci_maxim.h | 1 +
drivers/vhost/vsock.c | 6 +-
drivers/video/console/vgacon.c | 2 +-
fs/btrfs/ctree.c | 23 +-
fs/btrfs/extent-tree.c | 2 +-
fs/btrfs/extent_io.c | 94 ++++----
fs/btrfs/extent_io.h | 2 +-
fs/btrfs/fiemap.c | 2 +-
fs/btrfs/free-space-tree.c | 17 +-
fs/btrfs/inode.c | 8 +-
fs/btrfs/print-tree.c | 2 +-
fs/btrfs/qgroup.c | 6 +-
fs/btrfs/relocation.c | 4 +-
fs/btrfs/subpage.c | 258 +++++++++++----------
fs/btrfs/subpage.h | 45 +++-
fs/btrfs/super.c | 13 +-
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/zoned.c | 70 ++++--
fs/buffer.c | 2 +-
fs/debugfs/inode.c | 11 +-
fs/erofs/Kconfig | 18 +-
fs/ext4/fsmap.c | 23 +-
fs/ext4/indirect.c | 4 +-
fs/ext4/inode.c | 2 +-
fs/ext4/orphan.c | 5 +-
fs/ext4/super.c | 8 +-
fs/f2fs/node.c | 10 +
fs/fhandle.c | 2 +-
fs/internal.h | 3 +
fs/iomap/direct-io.c | 14 +-
fs/jbd2/checkpoint.c | 1 +
fs/libfs.c | 27 ++-
fs/namespace.c | 69 +++---
fs/netfs/read_collect.c | 4 +-
fs/netfs/write_collect.c | 10 +-
fs/netfs/write_issue.c | 4 +-
fs/nfs/pagelist.c | 9 +-
fs/nfs/write.c | 29 +--
fs/overlayfs/copy_up.c | 2 +-
fs/proc/task_mmu.c | 4 +-
fs/smb/client/smb2ops.c | 2 +-
fs/smb/server/connection.c | 3 +-
fs/smb/server/connection.h | 7 +-
fs/smb/server/oplock.c | 13 +-
fs/smb/server/transport_rdma.c | 5 +-
fs/smb/server/transport_rdma.h | 4 +-
fs/smb/server/transport_tcp.c | 26 ++-
fs/splice.c | 3 +
fs/squashfs/super.c | 14 +-
fs/xfs/libxfs/xfs_refcount.c | 4 +-
fs/xfs/scrub/common.c | 3 +-
fs/xfs/scrub/repair.c | 12 +-
fs/xfs/scrub/scrub.c | 5 +-
fs/xfs/xfs_attr_item.c | 5 +-
fs/xfs/xfs_discard.c | 12 +-
fs/xfs/xfs_fsmap.c | 4 +-
fs/xfs/xfs_icache.c | 5 +-
fs/xfs/xfs_inode.c | 7 +-
fs/xfs/xfs_itable.c | 24 +-
fs/xfs/xfs_iwalk.c | 11 +-
fs/xfs/xfs_notify_failure.c | 6 +-
fs/xfs/xfs_qm.c | 10 +-
fs/xfs/xfs_rtalloc.c | 13 +-
fs/xfs/xfs_trans.c | 56 ++---
fs/xfs/xfs_trans.h | 3 +-
fs/xfs/xfs_zone_alloc.c | 10 +-
fs/xfs/xfs_zone_gc.c | 5 +-
include/crypto/hash.h | 2 +-
include/crypto/internal/acompress.h | 5 +-
include/drm/drm_format_helper.h | 9 +
include/drm/intel/pciids.h | 1 +
include/linux/blkdev.h | 1 +
include/linux/compiler.h | 8 -
include/linux/iosys-map.h | 7 +-
include/linux/iov_iter.h | 20 +-
include/linux/kcov.h | 47 +---
include/linux/mlx5/mlx5_ifc.h | 14 +-
include/linux/netfs.h | 1 +
include/linux/nfs_page.h | 1 +
include/net/bluetooth/bluetooth.h | 4 +-
include/net/bluetooth/hci.h | 1 +
include/net/bluetooth/hci_core.h | 54 ++++-
include/net/bond_3ad.h | 1 +
include/net/devlink.h | 6 +-
include/net/sch_generic.h | 11 +-
include/sound/cs35l56.h | 5 +-
include/trace/events/btrfs.h | 2 +-
include/uapi/linux/pfrut.h | 1 +
include/uapi/linux/raid/md_p.h | 2 +-
io_uring/futex.c | 3 +
kernel/Kconfig.kexec | 1 +
kernel/cgroup/cpuset.c | 9 +-
kernel/cgroup/rstat.c | 3 +
kernel/kexec_handover.c | 29 ++-
kernel/sched/ext.c | 4 +
kernel/signal.c | 6 +-
kernel/trace/ftrace.c | 19 +-
kernel/trace/trace.c | 34 ++-
kernel/trace/trace.h | 10 +-
mm/damon/core.c | 15 +-
mm/damon/paddr.c | 4 +
mm/debug_vm_pgtable.c | 9 +-
mm/filemap.c | 3 +-
mm/kasan/kasan_test_c.c | 2 +-
mm/memory-failure.c | 8 +
mm/mremap.c | 41 ++--
net/bluetooth/hci_conn.c | 17 +-
net/bluetooth/hci_core.c | 27 ++-
net/bluetooth/hci_event.c | 15 +-
net/bluetooth/hci_sync.c | 33 +--
net/bluetooth/iso.c | 20 +-
net/bluetooth/mgmt.c | 13 +-
net/bridge/br_multicast.c | 16 ++
net/bridge/br_private.h | 2 +
net/core/dev.c | 12 +
net/devlink/port.c | 2 +-
net/hsr/hsr_slave.c | 8 +-
net/ipv4/netfilter/nf_reject_ipv4.c | 6 +-
net/ipv6/netfilter/nf_reject_ipv6.c | 5 +-
net/ipv6/seg6_hmac.c | 6 +-
net/mptcp/options.c | 6 +-
net/mptcp/pm.c | 18 +-
net/mptcp/pm_kernel.c | 1 -
net/sched/sch_cake.c | 14 +-
net/sched/sch_codel.c | 12 +-
net/sched/sch_fq.c | 12 +-
net/sched/sch_fq_codel.c | 12 +-
net/sched/sch_fq_pie.c | 12 +-
net/sched/sch_hhf.c | 12 +-
net/sched/sch_htb.c | 2 +-
net/sched/sch_pie.c | 12 +-
net/smc/af_smc.c | 3 +-
net/tls/tls_sw.c | 7 +-
net/vmw_vsock/virtio_transport.c | 12 +-
rust/kernel/alloc/allocator.rs | 30 ++-
rust/kernel/alloc/allocator_test.rs | 11 +
rust/kernel/drm/device.rs | 32 ++-
rust/kernel/faux.rs | 2 +-
security/apparmor/lsm.c | 4 +-
sound/core/timer.c | 4 +-
sound/pci/hda/patch_realtek.c | 2 +
sound/pci/hda/tas2781_hda_i2c.c | 2 +-
sound/soc/codecs/cs35l56-sdw.c | 69 ------
sound/soc/codecs/cs35l56-shared.c | 29 ++-
sound/soc/codecs/cs35l56.c | 2 +-
sound/soc/codecs/cs35l56.h | 3 -
sound/soc/sof/amd/acp-loader.c | 6 +-
sound/usb/stream.c | 2 +-
sound/usb/validate.c | 2 +-
tools/objtool/arch/loongarch/special.c | 23 ++
tools/testing/selftests/net/mptcp/mptcp_connect.c | 5 +-
tools/testing/selftests/net/mptcp/mptcp_inq.c | 5 +-
tools/testing/selftests/net/mptcp/mptcp_sockopt.c | 5 +-
tools/testing/selftests/net/mptcp/pm_netlink.sh | 1 +
498 files changed, 4907 insertions(+), 2746 deletions(-)
2 weeks, 6 days
- 20
- 477
[PATCH net v2] batman-adv: fix OOB read/write in network-coding decode
by Stanislav Fort
batadv_nc_skb_decode_packet() trusts coded_len and checks only against
skb->len. XOR starts at sizeof(struct batadv_unicast_packet), reducing
payload headroom, and the source skb length is not verified, allowing an
out-of-bounds read and a small out-of-bounds write.
Validate that coded_len fits within the payload area of both destination
and source sk_buffs before XORing.
Fixes: 2df5278b0267 ("batman-adv: network coding - receive coded packets and decode them")
Cc: stable(a)vger.kernel.org
Reported-by: Stanislav Fort <disclosure(a)aisle.com>
Signed-off-by: Stanislav Fort <disclosure(a)aisle.com>
---
net/batman-adv/network-coding.c | 7 ++++++-
1 file changed, 6 insertions(+), 1 deletion(-)
diff --git a/net/batman-adv/network-coding.c b/net/batman-adv/network-coding.c
index 9f56308779cc..af97d077369f 100644
--- a/net/batman-adv/network-coding.c
+++ b/net/batman-adv/network-coding.c
@@ -1687,7 +1687,12 @@ batadv_nc_skb_decode_packet(struct batadv_priv *bat_priv, struct sk_buff *skb,
coding_len = ntohs(coded_packet_tmp.coded_len);
- if (coding_len > skb->len)
+ /* ensure dst buffer is large enough (payload only) */
+ if (coding_len + h_size > skb->len)
+ return NULL;
+
+ /* ensure src buffer is large enough (payload only) */
+ if (coding_len + h_size > nc_packet->skb->len)
return NULL;
/* Here the magic is reversed:
--
2.39.3 (Apple Git-146)
2 weeks, 6 days
- 2
- 1
[PATCH 0/3] clk: samsung: exynos990: Fix USB clock support
by Denzeel Oliva
Hi,
Small fixes for Exynos990 HSI0 USB clocks:
Add missing LHS_ACEL clock ID and implementation, plus two missing
USB clock registers. Without these, USB connections fail with errors
like device descriptor read timeouts and address response issues.
These changes ensure proper USB operation by adding critical missing
clock definitions.
Denzeel Oliva
Signed-off-by: Denzeel Oliva <wachiturroxd150(a)gmail.com>
Signed-off-by: Denzeel Oliva <wachiturroxd150(a)gmail.com>
---
Denzeel Oliva (3):
dt-bindings: clock: exynos990: Add LHS_ACEL clock ID for HSI0 block
clk: samsung: exynos990: Add LHS_ACEL gate clock for HSI0 and update CLK_NR_TOP
clk: samsung: exynos990: Add missing USB clock registers to HSI0
drivers/clk/samsung/clk-exynos990.c | 8 +++++++-
include/dt-bindings/clock/samsung,exynos990.h | 1 +
2 files changed, 8 insertions(+), 1 deletion(-)
---
base-commit: e0edfc39b62e35dfb6d669b1189fa268147345ef
change-id: 20250830-usb-c8d352f5de9f
Best regards,
--
Denzeel Oliva <wachiturroxd150(a)gmail.com>
2 weeks, 6 days
- 2
- 4
[PATCH v7 02/12] i2c: rtl9300: ensure data length is within supported range
by Jonas Jelonek
Add an explicit check for the xfer length to 'rtl9300_i2c_config_xfer'
to ensure the data length isn't within the supported range. In
particular a data length of 0 is not supported by the hardware and
causes unintended or destructive behaviour.
This limitation becomes obvious when looking at the register
documentation [1]. 4 bits are reserved for DATA_WIDTH and the value
of these 4 bits is used as N + 1, allowing a data length range of
1 <= len <= 16.
Affected by this is the SMBus Quick Operation which works with a data
length of 0. Passing 0 as the length causes an underflow of the value
due to:
(len - 1) & 0xf
and effectively specifying a transfer length of 16 via the registers.
This causes a 16-byte write operation instead of a Quick Write. For
example, on SFP modules without write-protected EEPROM this soft-bricks
them by overwriting some initial bytes.
For completeness, also add a quirk for the zero length.
[1] https://svanheule.net/realtek/longan/register/i2c_mst1_ctrl2
Fixes: c366be720235 ("i2c: Add driver for the RTL9300 I2C controller")
Cc: <stable(a)vger.kernel.org> # v6.13+
Signed-off-by: Jonas Jelonek <jelonek.jonas(a)gmail.com>
Tested-by: Sven Eckelmann <sven(a)narfation.org>
Reviewed-by: Chris Packham <chris.packham(a)alliedtelesis.co.nz>
Tested-by: Chris Packham <chris.packham(a)alliedtelesis.co.nz> # On RTL9302C based board
Tested-by: Markus Stockhausen <markus.stockhausen(a)gmx.de>
---
drivers/i2c/busses/i2c-rtl9300.c | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/drivers/i2c/busses/i2c-rtl9300.c b/drivers/i2c/busses/i2c-rtl9300.c
index 19c367703eaf..ebd4a85e1bde 100644
--- a/drivers/i2c/busses/i2c-rtl9300.c
+++ b/drivers/i2c/busses/i2c-rtl9300.c
@@ -99,6 +99,9 @@ static int rtl9300_i2c_config_xfer(struct rtl9300_i2c *i2c, struct rtl9300_i2c_c
{
u32 val, mask;
+ if (len < 1 || len > 16)
+ return -EINVAL;
+
val = chan->bus_freq << RTL9300_I2C_MST_CTRL2_SCL_FREQ_OFS;
mask = RTL9300_I2C_MST_CTRL2_SCL_FREQ_MASK;
@@ -352,7 +355,7 @@ static const struct i2c_algorithm rtl9300_i2c_algo = {
};
static struct i2c_adapter_quirks rtl9300_i2c_quirks = {
- .flags = I2C_AQ_NO_CLK_STRETCH,
+ .flags = I2C_AQ_NO_CLK_STRETCH | I2C_AQ_NO_ZERO_LEN,
.max_read_len = 16,
.max_write_len = 16,
};
--
2.48.1
2 weeks, 6 days
- 1
- 0
[PATCH v7 01/12] i2c: rtl9300: fix channel number bound check
by Jonas Jelonek
Fix the current check for number of channels (child nodes in the device
tree). Before, this was:
if (device_get_child_node_count(dev) >= RTL9300_I2C_MUX_NCHAN)
RTL9300_I2C_MUX_NCHAN gives the maximum number of channels so checking
with '>=' isn't correct because it doesn't allow the last channel
number. Thus, fix it to:
if (device_get_child_node_count(dev) > RTL9300_I2C_MUX_NCHAN)
Issue occured on a TP-Link TL-ST1008F v2.0 device (8 SFP+ ports) and fix
is tested there.
Fixes: c366be720235 ("i2c: Add driver for the RTL9300 I2C controller")
Cc: <stable(a)vger.kernel.org> # v6.13+
Signed-off-by: Jonas Jelonek <jelonek.jonas(a)gmail.com>
Tested-by: Sven Eckelmann <sven(a)narfation.org>
Reviewed-by: Chris Packham <chris.packham(a)alliedtelesis.co.nz>
Tested-by: Chris Packham <chris.packham(a)alliedtelesis.co.nz> # On RTL9302C based board
Tested-by: Markus Stockhausen <markus.stockhausen(a)gmx.de>
---
drivers/i2c/busses/i2c-rtl9300.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/drivers/i2c/busses/i2c-rtl9300.c b/drivers/i2c/busses/i2c-rtl9300.c
index 4b215f9a24e6..19c367703eaf 100644
--- a/drivers/i2c/busses/i2c-rtl9300.c
+++ b/drivers/i2c/busses/i2c-rtl9300.c
@@ -382,7 +382,7 @@ static int rtl9300_i2c_probe(struct platform_device *pdev)
platform_set_drvdata(pdev, i2c);
- if (device_get_child_node_count(dev) >= RTL9300_I2C_MUX_NCHAN)
+ if (device_get_child_node_count(dev) > RTL9300_I2C_MUX_NCHAN)
return dev_err_probe(dev, -EINVAL, "Too many channels\n");
device_for_each_child_node(dev, child) {
--
2.48.1
2 weeks, 6 days
- 1
- 0
New September Order. 15508 Sunday, August 31, 2025 at 11:07:52 AM
by Info - Albinayah 957
Hi Stable,
Please provide a quote for your products:
Include:
1.Pricing (per unit)
2.Delivery cost & timeline
3.Quote expiry date
Deadline: September
Thanks!
Kamal Prasad
Albinayah Trading
2 weeks, 6 days
- 1
- 0
[PATCH 6.6 0/8] Backport sched/schedutil fixes and depend patch series
by Wentao Guan
Our user report a bug that his cpu keep the min cpu freq,
bisect to commit ada8d7fa0ad49a2a078f97f7f6e02d24d3c357a3
("sched/cpufreq: Rework schedutil governor performance estimation")
and test the fix e37617c8e53a1f7fcba6d5e1041f4fd8a2425c27
("sched/fair: Fix frequency selection for non-invariant case")
works.
And backport the "stable-deps-of" series:
"consolidate and cleanup CPU capacity"
Link: https://lore.kernel.org/all/20231211104855.558096-1-vincent.guittot@linaro.…
PS:
commit 50b813b147e9eb6546a1fc49d4e703e6d23691f2 in series
("cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()")
merged in v6.6.59 as 33e89c16cea0882bb05c585fa13236b730dd0efa
Vincent Guittot (8):
sched/topology: Add a new arch_scale_freq_ref() method
cpufreq: Use the fixed and coherent frequency for scaling capacity
cpufreq/schedutil: Use a fixed reference frequency
energy_model: Use a fixed reference frequency
cpufreq/cppc: Set the frequency used for computing the capacity
arm64/amu: Use capacity_ref_freq() to set AMU ratio
topology: Set capacity_freq_ref in all cases
sched/fair: Fix frequency selection for non-invariant case
arch/arm/include/asm/topology.h | 1 +
arch/arm64/include/asm/topology.h | 1 +
arch/arm64/kernel/topology.c | 26 ++++++------
arch/riscv/include/asm/topology.h | 1 +
drivers/base/arch_topology.c | 69 ++++++++++++++++++++-----------
drivers/cpufreq/cpufreq.c | 4 +-
include/linux/arch_topology.h | 8 ++++
include/linux/cpufreq.h | 1 +
include/linux/energy_model.h | 6 +--
include/linux/sched/topology.h | 8 ++++
kernel/sched/cpufreq_schedutil.c | 30 +++++++++++++-
11 files changed, 111 insertions(+), 44 deletions(-)
--
2.20.1
2 weeks, 6 days
- 3
- 12
[PATCH v2] scsi: lpfc: Fix buffer free/clear order in deferred receive path
by John Evans
Fix a use-after-free window by correcting the buffer release sequence in
the deferred receive path. The code freed the RQ buffer first and only
then cleared the context pointer under the lock. Concurrent paths
(e.g., ABTS and the repost path) also inspect and release the same
pointer under the lock, so the old order could lead to double-free/UAF.
Note that the repost path already uses the correct pattern: detach the
pointer under the lock, then free it after dropping the lock. The deferred
path should do the same.
Fixes: 472e146d1cf3 ("scsi: lpfc: Correct upcalling nvmet_fc transport during io done downcall")
Cc: stable(a)vger.kernel.org
Signed-off-by: John Evans <evans1210144(a)gmail.com>
---
v2:
* Rework locking to read and clear the buffer pointer atomically, as
suggested by Justin Tee.
---
drivers/scsi/lpfc/lpfc_nvmet.c | 10 ++++++----
1 file changed, 6 insertions(+), 4 deletions(-)
diff --git a/drivers/scsi/lpfc/lpfc_nvmet.c b/drivers/scsi/lpfc/lpfc_nvmet.c
index fba2e62027b7..4cfc928bcf2d 100644
--- a/drivers/scsi/lpfc/lpfc_nvmet.c
+++ b/drivers/scsi/lpfc/lpfc_nvmet.c
@@ -1243,7 +1243,7 @@ lpfc_nvmet_defer_rcv(struct nvmet_fc_target_port *tgtport,
struct lpfc_nvmet_tgtport *tgtp;
struct lpfc_async_xchg_ctx *ctxp =
container_of(rsp, struct lpfc_async_xchg_ctx, hdlrctx.fcp_req);
- struct rqb_dmabuf *nvmebuf = ctxp->rqb_buffer;
+ struct rqb_dmabuf *nvmebuf;
struct lpfc_hba *phba = ctxp->phba;
unsigned long iflag;
@@ -1251,13 +1251,18 @@ lpfc_nvmet_defer_rcv(struct nvmet_fc_target_port *tgtport,
lpfc_nvmeio_data(phba, "NVMET DEFERRCV: xri x%x sz %d CPU %02x\n",
ctxp->oxid, ctxp->size, raw_smp_processor_id());
+ spin_lock_irqsave(&ctxp->ctxlock, iflag);
+ nvmebuf = ctxp->rqb_buffer;
if (!nvmebuf) {
+ spin_unlock_irqrestore(&ctxp->ctxlock, iflag);
lpfc_printf_log(phba, KERN_INFO, LOG_NVME_IOERR,
"6425 Defer rcv: no buffer oxid x%x: "
"flg %x ste %x\n",
ctxp->oxid, ctxp->flag, ctxp->state);
return;
}
+ ctxp->rqb_buffer = NULL;
+ spin_unlock_irqrestore(&ctxp->ctxlock, iflag);
tgtp = phba->targetport->private;
if (tgtp)
@@ -1265,9 +1270,6 @@ lpfc_nvmet_defer_rcv(struct nvmet_fc_target_port *tgtport,
/* Free the nvmebuf since a new buffer already replaced it */
nvmebuf->hrq->rqbp->rqb_free_buffer(phba, nvmebuf);
- spin_lock_irqsave(&ctxp->ctxlock, iflag);
- ctxp->rqb_buffer = NULL;
- spin_unlock_irqrestore(&ctxp->ctxlock, iflag);
}
/**
--
2.43.0
2 weeks, 6 days
- 3
- 2
[regression] Wireguard fragmentation fails with VXLAN since 8930424777e4 ("tunnels: Accept PACKET_HOST skb_tunnel_check_pmtu().") causing network timeouts
by Salvatore Bonaccorso
Hi,
Charles Bordet reported the following issue (full context in
https://bugs.debian.org/1108860)
> Dear Maintainer,
>
> What led up to the situation?
> We run a production environment using Debian 12 VMs, with a network
> topology involving VXLAN tunnels encapsulated inside Wireguard
> interfaces. This setup has worked reliably for over a year, with MTU set
> to 1500 on all interfaces except the Wireguard interface (set to 1420).
> Wireguard kernel fragmentation allowed this configuration to function
> without issues, even though the effective path MTU is lower than 1500.
>
> What exactly did you do (or not do) that was effective (or ineffective)?
> We performed a routine system upgrade, updating all packages include the
> kernel. After the upgrade, we observed severe network issues (timeouts,
> very slow HTTP/HTTPS, and apt update failures) on all VMs behind the
> router. SSH and small-packet traffic continued to work.
>
> To diagnose, we:
>
> * Restored a backup (with the previous kernel): the problem disappeared.
> * Repeated the upgrade, confirming the issue reappeared.
> * Systematically tested each kernel version from 6.1.124-1 up to
> 6.1.140-1. The problem first appears with kernel 6.1.135-1; all earlier
> versions work as expected.
> * Kernel version from the backports (6.12.32-1) did not resolve the
> problem.
>
> What was the outcome of this action?
>
> * With kernel 6.1.135-1 or later, network timeouts occur for
> large-packet protocols (HTTP, apt, etc.), while SSH and small-packet
> protocols work.
> * With kernel 6.1.133-1 or earlier, everything works as expected.
>
> What outcome did you expect instead?
> We expected the network to function as before, with Wireguard handling
> fragmentation transparently and no application-level timeouts,
> regardless of the kernel version.
While triaging the issue we found that the commit 8930424777e4
("tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu()." introduces
the issue and Charles confirmed that the issue was present as well in
6.12.35 and 6.15.4 (other version up could potentially still be
affected, but we wanted to check it is not a 6.1.y specific
regression).
Reverthing the commit fixes Charles' issue.
Does that ring a bell?
Regards,
Salvatore
3 weeks
- 3
- 3
[PATCH] net: dsa: mv88e6xxx: Fix fwnode reference leaks in mv88e6xxx_port_setup_leds
by Miaoqian Lin
Fix multiple fwnode reference leaks:
1. The function calls fwnode_get_named_child_node() to get the "leds" node,
but never calls fwnode_handle_put(leds) to release this reference.
2. Within the fwnode_for_each_child_node() loop, the early return
paths that don't properly release the "led" fwnode reference.
This fix follows the same pattern as commit d029edefed39
("net dsa: qca8k: fix usages of device_get_named_child_node()")
Fixes: 94a2a84f5e9e ("net: dsa: mv88e6xxx: Support LED control")
Cc: stable(a)vger.kernel.org
Signed-off-by: Miaoqian Lin <linmq006(a)gmail.com>
---
drivers/net/dsa/mv88e6xxx/leds.c | 10 +++++++++-
1 file changed, 9 insertions(+), 1 deletion(-)
diff --git a/drivers/net/dsa/mv88e6xxx/leds.c b/drivers/net/dsa/mv88e6xxx/leds.c
index 1c88bfaea46b..dcc765066f9c 100644
--- a/drivers/net/dsa/mv88e6xxx/leds.c
+++ b/drivers/net/dsa/mv88e6xxx/leds.c
@@ -779,6 +779,8 @@ int mv88e6xxx_port_setup_leds(struct mv88e6xxx_chip *chip, int port)
continue;
if (led_num > 1) {
dev_err(dev, "invalid LED specified port %d\n", port);
+ fwnode_handle_put(led);
+ fwnode_handle_put(leds);
return -EINVAL;
}
@@ -823,17 +825,23 @@ int mv88e6xxx_port_setup_leds(struct mv88e6xxx_chip *chip, int port)
init_data.devname_mandatory = true;
init_data.devicename = kasprintf(GFP_KERNEL, "%s:0%d:0%d", chip->info->name,
port, led_num);
- if (!init_data.devicename)
+ if (!init_data.devicename) {
+ fwnode_handle_put(led);
+ fwnode_handle_put(leds);
return -ENOMEM;
+ }
ret = devm_led_classdev_register_ext(dev, l, &init_data);
kfree(init_data.devicename);
if (ret) {
dev_err(dev, "Failed to init LED %d for port %d", led_num, port);
+ fwnode_handle_put(led);
+ fwnode_handle_put(leds);
return ret;
}
}
+ fwnode_handle_put(leds);
return 0;
}
--
2.35.1
3 weeks
- 2
- 1
[PATCH 1/2] ALSA: hda: tas2781: fix tas2563 EFI data endianness
by Gergo Koteles
Before conversion to unify the calibration data management, the
tas2563_apply_calib() function performed the big endian conversion and
wrote the calibration data to the device. The writing is now done by the
common tasdev_load_calibrated_data() function, but without conversion.
Put the values into the calibration data buffer with the expected
endianness.
Fixes: 4fe238513407 ("ALSA: hda/tas2781: Move and unified the calibrated-data getting function for SPI and I2C into the tas2781_hda lib")
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Gergo Koteles <soyer(a)irl.hu>
---
sound/hda/codecs/side-codecs/tas2781_hda_i2c.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/sound/hda/codecs/side-codecs/tas2781_hda_i2c.c b/sound/hda/codecs/side-codecs/tas2781_hda_i2c.c
index e34b17f0c9b9..1eac751ab2a6 100644
--- a/sound/hda/codecs/side-codecs/tas2781_hda_i2c.c
+++ b/sound/hda/codecs/side-codecs/tas2781_hda_i2c.c
@@ -310,6 +310,7 @@ static int tas2563_save_calibration(struct tas2781_hda *h)
struct cali_reg *r = &cd->cali_reg_array;
unsigned int offset = 0;
unsigned char *data;
+ __be32 bedata;
efi_status_t status;
unsigned int attr;
int ret, i, j, k;
@@ -351,6 +352,8 @@ static int tas2563_save_calibration(struct tas2781_hda *h)
i, j, status);
return -EINVAL;
}
+ bedata = cpu_to_be32(*(uint32_t *)&data[offset]);
+ memcpy(&data[offset], &bedata, sizeof(bedata));
offset += TAS2563_CAL_DATA_SIZE;
}
}
--
2.51.0
3 weeks
- 2
- 2
[PATCH 5.4 000/403] 5.4.297-rc1 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 5.4.297 release.
There are 403 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 28 Aug 2025 11:08:17 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.297-rc…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 5.4.297-rc1
Peter Oberparleiter <oberpar(a)linux.ibm.com>
s390/hypfs: Enable limited access during lockdown
Peter Oberparleiter <oberpar(a)linux.ibm.com>
s390/hypfs: Avoid unnecessary ioctl registration in debugfs
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
William Liu <will(a)willsroot.io>
net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
William Liu <will(a)willsroot.io>
net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
Jason Xing <kernelxing(a)tencent.com>
ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
Minhong He <heminhong(a)kylinos.cn>
ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
Dan Carpenter <dan.carpenter(a)linaro.org>
ALSA: usb-audio: Fix size validation in convert_chmap_v3()
Dan Carpenter <dan.carpenter(a)linaro.org>
scsi: qla4xxx: Prevent a potential error pointer dereference
Weitao Wang <WeitaoWang-oc(a)zhaoxin.com>
usb: xhci: Fix slot_id resource race conflict
Josef Bacik <josef(a)toxicpanda.com>
nfs: fix UAF in direct writes
Trond Myklebust <trond.myklebust(a)hammerspace.com>
NFS: Fix up commit deadlocks
Zhang Xiaoxu <zhangxiaoxu5(a)huawei.com>
cifs: Fix UAF in cifs_demultiplex_thread()
Dmitry Antipov <dmantipov(a)yandex.ru>
Bluetooth: fix use-after-free in device_for_each_child()
Davide Caratti <dcaratti(a)redhat.com>
act_mirred: use the backlog for nested calls to mirred ingress
Davide Caratti <dcaratti(a)redhat.com>
net/sched: act_mirred: better wording on protection against excessive stack growth
wenxu <wenxu(a)ucloud.cn>
net/sched: act_mirred: refactor the handle of xmit
Jiri Pirko <jiri(a)mellanox.com>
selftests: forwarding: tc_actions.sh: add matchall mirror test
Vlad Buslov <vladbu(a)mellanox.com>
net: sched: don't expose action qstats to skb_tc_reinsert()
Vlad Buslov <vladbu(a)mellanox.com>
net: sched: extract qstats update code into functions
Vlad Buslov <vladbu(a)mellanox.com>
net: sched: extract bstats update code into function
Vlad Buslov <vladbu(a)mellanox.com>
net: sched: extract common action counters update code into function
Lorenzo Stoakes <lstoakes(a)gmail.com>
mm: perform the mapping_map_writable() check after call_mmap()
Lorenzo Stoakes <lstoakes(a)gmail.com>
mm: update memfd seal write check to include F_SEAL_WRITE
Lorenzo Stoakes <lstoakes(a)gmail.com>
mm: drop the assumption that VM_SHARED always implies writable
Cong Wang <xiyou.wangcong(a)gmail.com>
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
Cong Wang <xiyou.wangcong(a)gmail.com>
sch_qfq: make qfq_qlen_notify() idempotent
Cong Wang <xiyou.wangcong(a)gmail.com>
sch_hfsc: make hfsc_qlen_notify() idempotent
Cong Wang <xiyou.wangcong(a)gmail.com>
sch_drr: make drr_qlen_notify() idempotent
Qu Wenruo <wqu(a)suse.com>
btrfs: populate otime when logging an inode item
Jorge Ramirez-Ortiz <jorge.ramirez(a)oss.qualcomm.com>
media: venus: hfi: explicitly release IRQ during teardown
Chao Yu <chao(a)kernel.org>
f2fs: fix to avoid out-of-boundary access in dnode page
Jorge Ramirez-Ortiz <jorge.ramirez(a)oss.qualcomm.com>
media: venus: protect against spurious interrupts during probe
Vladimir Zapolskiy <vladimir.zapolskiy(a)linaro.org>
media: qcom: camss: cleanup media device allocated resource on error path
Ricardo Ribalda <ribalda(a)chromium.org>
media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
Imre Deak <imre.deak(a)intel.com>
drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Fix duty and period setting
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Handle hardware enable and clock enable separately
Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de>
pwm: mediatek: Implement .apply() callback
Gui-Dong Han <hanguidong02(a)gmail.com>
media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
Sakari Ailus <sakari.ailus(a)linux.intel.com>
media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
Hans Verkuil <hverkuil-cisco(a)xs4all.nl>
media: v4l2-ctrls: always copy the controls on completion
Damien Le Moal <dlemoal(a)kernel.org>
ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com>
soc: qcom: mdt_loader: Ensure we don't read past the ELF header
Meagan Lloyd <meaganlloyd(a)linux.microsoft.com>
rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
Johan Hovold <johan(a)kernel.org>
usb: musb: omap2430: fix device leak at unbind
Trond Myklebust <trond.myklebust(a)hammerspace.com>
NFS: Fix the setting of capabilities when automounting a new filesystem
Trond Myklebust <trond.myklebust(a)hammerspace.com>
NFS: Fix up handling of outstanding layoutcommit in nfs_update_inode()
Trond Myklebust <trond.myklebust(a)hammerspace.com>
NFSv4: Fix nfs4_bitmap_copy_adjust()
Sebastian Reichel <sebastian.reichel(a)collabora.com>
usb: typec: fusb302: cache PD RX state
Oliver Neukum <oneukum(a)suse.com>
cdc-acm: fix race between initial clearing halt and open
Johan Hovold <johan(a)kernel.org>
USB: cdc-acm: do not log successful probe on later errors
Breno Leitao <leitao(a)debian.org>
mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
He Zhe <zhe.he(a)windriver.com>
mm/kmemleak: turn kmemleak_lock and object->lock to raw_spinlock_t
Geoffrey D. Bennett <g(a)b4.vu>
ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
Dave Hansen <dave.hansen(a)linux.intel.com>
x86/fpu: Delay instruction pointer fixup until after warning
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
Jeff Layton <jlayton(a)kernel.org>
nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
Maulik Shah <maulik.shah(a)oss.qualcomm.com>
pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
Steven Rostedt <rostedt(a)goodmis.org>
tracing: Add down_write(trace_event_sem) when adding trace event
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: hub: Don't try to recover devices lost during warm reset.
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: hub: avoid warm port reset during USB3 disconnect
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce/amd: Add default names for MCA banks and blocks
Zhang Lixu <lixu.zhang(a)intel.com>
iio: hid-sensor-prox: Fix incorrect OFFSET calculation
Chao Yu <chao(a)kernel.org>
f2fs: fix to do sanity check on ino and xnid
Harry Yoo <harry.yoo(a)oracle.com>
mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
Miaohe Lin <linmiaohe(a)huawei.com>
mm/zsmalloc.c: convert to use kmem_cache_zalloc in cache_alloc_zspage()
Lin.Cao <lincao12(a)amd.com>
drm/sched: Remove optimization that causes hang when killing dependent jobs
Haoxiang Li <haoxiang_li2024(a)163.com>
ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
Ammar Faizi <ammarfaizi2(a)gnuweeb.org>
net: usbnet: Fix the wrong netif_carrier_on() call
John Ernberg <john.ernberg(a)actia.se>
net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
Lukas Wunner <lukas(a)wunner.de>
PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
Li Zhong <floridsleeves(a)gmail.com>
ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fix initialization of data for instructions that write to subdevice
Nathan Chancellor <nathan(a)kernel.org>
kbuild: Add KBUILD_CPPFLAGS to as-option invocation
Masahiro Yamada <masahiroy(a)kernel.org>
kbuild: add $(CLANG_FLAGS) to KBUILD_CPPFLAGS
Nathan Chancellor <nathan(a)kernel.org>
kbuild: Add CLANG_FLAGS to as-instr
Nathan Chancellor <nathan(a)kernel.org>
mips: Include KBUILD_CPPFLAGS in CHECKFLAGS invocation
Nick Desaulniers <ndesaulniers(a)google.com>
kbuild: Update assembler calls to use proper flags and language target
Nathan Chancellor <nathan(a)kernel.org>
ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
Kuen-Han Tsai <khtsai(a)google.com>
usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
Zenm Chen <zenmchen(a)gmail.com>
USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
Thorsten Blum <thorsten.blum(a)linux.dev>
usb: storage: realtek_cr: Use correct byte order for bcs->Residue
Mael GUERIN <mael.guerin(a)murena.io>
USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
Miao Li <limiao(a)kylinos.cn>
usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
David Lechner <dlechner(a)baylibre.com>
iio: proximity: isl29501: fix buffered read on big-endian systems
Steven Rostedt <rostedt(a)goodmis.org>
ftrace: Also allocate and copy hash for reading of filter files
Xu Yilun <yilun.xu(a)linux.intel.com>
fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
Al Viro <viro(a)zeniv.linux.org.uk>
use uniform permission checks for all mount propagation changes
Pavel Tikhomirov <ptikhomirov(a)virtuozzo.com>
move_mount: allow to add a mount into an existing group
Ye Bin <yebin10(a)huawei.com>
fs/buffer: fix use-after-free when call bh_read() helper
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
Phillip Lougher <phillip(a)squashfs.org.uk>
squashfs: fix memory leak in squashfs_fill_super
Jiayi Li <lijiayi(a)kylinos.cn>
memstick: Fix deadlock by moving removing flag earlier
Vedang Nagar <quic_vnagar(a)quicinc.com>
media: venus: Add a check for packet size after reading from shared memory
Zhang Shurong <zhang_shurong(a)foxmail.com>
media: ov2659: Fix memory leaks in ov2659_probe()
Ludwig Disterhof <ludwig(a)disterhof.eu>
media: usbtv: Lock resolution while streaming
Haoxiang Li <haoxiang_li2024(a)163.com>
media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
Dan Carpenter <dan.carpenter(a)linaro.org>
media: gspca: Add bounds checking to firmware parser
Jon Hunter <jonathanh(a)nvidia.com>
soc/tegra: pmc: Ensure power-domains are in a known state
Baokun Li <libaokun1(a)huawei.com>
jbd2: prevent softlockup in jbd2_log_do_checkpoint()
Damien Le Moal <dlemoal(a)kernel.org>
PCI: endpoint: Fix configfs group removal on driver teardown
Damien Le Moal <dlemoal(a)kernel.org>
PCI: endpoint: Fix configfs group list head handling
Thomas Fourier <fourier.thomas(a)gmail.com>
mtd: rawnand: fsmc: Add missing check after DMA map
Laurentiu Mihalcea <laurentiu.mihalcea(a)nxp.com>
pwm: imx-tpm: Reset counter if CMOD is 0
Nathan Chancellor <nathan(a)kernel.org>
wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
Marek Szyprowski <m.szyprowski(a)samsung.com>
zynq_fpga: use sgtable-based scatterlist wrappers
Damien Le Moal <dlemoal(a)kernel.org>
ata: libata-scsi: Fix ata_to_sense_error() status handling
Ojaswin Mujoo <ojaswin(a)linux.ibm.com>
ext4: fix reserved gdt blocks handling in fsmap
Ojaswin Mujoo <ojaswin(a)linux.ibm.com>
ext4: fix fsmap end of range reporting with bigalloc
Andreas Dilger <adilger(a)dilger.ca>
ext4: check fast symlink for ea_inode correctly
Helge Deller <deller(a)gmx.de>
Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
Myrrh Periwinkle <myrrhperiwinkle(a)qtmlabs.xyz>
vt: defkeymap: Map keycodes above 127 to K_HOLE
Myrrh Periwinkle <myrrhperiwinkle(a)qtmlabs.xyz>
vt: keyboard: Don't process Unicode characters in K_OFF mode
Johan Hovold <johan(a)kernel.org>
usb: dwc3: meson-g12a: fix device leaks at unbind
Johan Hovold <johan(a)kernel.org>
usb: gadget: udc: renesas_usb3: fix device leak at unbind
Nathan Chancellor <nathan(a)kernel.org>
usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
Finn Thain <fthain(a)linux-m68k.org>
m68k: Fix lost column on framebuffer debug console
Dan Carpenter <dan.carpenter(a)linaro.org>
cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
Yunhui Cui <cuiyunhui(a)bytedance.com>
serial: 8250: fix panic due to PSLVERR
Ricardo Ribalda <ribalda(a)chromium.org>
media: uvcvideo: Do not mark valid metadata as invalid
Youngjun Lee <yjjuny.lee(a)samsung.com>
media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
Waiman Long <longman(a)redhat.com>
mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
Randy Dunlap <rdunlap(a)infradead.org>
parisc: Makefile: fix a typo in palo.conf
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix log tree replay failure due to file with 0 links and extents
Eric Biggers <ebiggers(a)kernel.org>
thunderbolt: Fix copy+paste error in match_service_id()
Ian Abbott <abbotti(a)mev.co.uk>
comedi: fix race between polling and detaching
Ricky Wu <ricky_wu(a)realtek.com>
misc: rtsx: usb: Ensure mmc child device is active when card is present
Jack Xiao <Jack.Xiao(a)amd.com>
drm/amdgpu: fix incorrect vm flags to map bo
Jiasheng Jiang <jiashengjiangcool(a)gmail.com>
scsi: lpfc: Remove redundant assignment to avoid memory leak
Meagan Lloyd <meaganlloyd(a)linux.microsoft.com>
rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Fix uninited ptr deref in block/scsi layout
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Handle RPC size limit for layoutcommits
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Fix disk addr range check in block/scsi layout
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Fix stripe mapping in block/scsi layout
Buday Csaba <buday.csaba(a)prolan.hu>
net: phy: smsc: add proper reset flags for LAN8710A
Corey Minyard <corey(a)minyard.net>
ipmi: Fix strcpy source and destination the same
Yann E. MORIN <yann.morin.1998(a)free.fr>
kconfig: lxdialog: fix 'space' to (de)select options
Masahiro Yamada <masahiroy(a)kernel.org>
kconfig: gconf: fix potential memory leak in renderer_edited()
Masahiro Yamada <masahiroy(a)kernel.org>
kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
Breno Leitao <leitao(a)debian.org>
ipmi: Use dev_warn_ratelimited() for incorrect message warnings
John Garry <john.g.garry(a)oracle.com>
scsi: aacraid: Stop using PCI_IRQ_AFFINITY
Ranjan Kumar <ranjan.kumar(a)broadcom.com>
scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
Shankari Anand <shankari.ak0208(a)gmail.com>
kconfig: nconf: Ensure null termination where strncpy is used
Suchit Karunakaran <suchitkarunakaran(a)gmail.com>
kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
i3c: don't fail if GETHDRCAP is unsupported
Timothy Pearson <tpearson(a)raptorengineering.com>
PCI: pnv_php: Work around switches with broken presence detection
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
i3c: add missing include to internal header
chenchangcheng <chenchangcheng(a)kylinos.cn>
media: uvcvideo: Fix bandwidth issue for Alcor camera
Alex Guo <alexguo1023(a)gmail.com>
media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
Alex Guo <alexguo1023(a)gmail.com>
media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
media: usb: hdpvr: disable zero-length read messages
Dave Stevenson <dave.stevenson(a)raspberrypi.com>
media: tc358743: Increase FIFO trigger level to 374
Dave Stevenson <dave.stevenson(a)raspberrypi.com>
media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
Dave Stevenson <dave.stevenson(a)raspberrypi.com>
media: tc358743: Check I2C succeeded during probe
Cheick Traore <cheick.traore(a)foss.st.com>
pinctrl: stm32: Manage irq affinity settings
Damien Le Moal <dlemoal(a)kernel.org>
scsi: mpt3sas: Correctly handle ATA device errors
Justin Tee <justin.tee(a)broadcom.com>
scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
Yury Norov [NVIDIA] <yury.norov(a)gmail.com>
RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
Arnaud Lecomte <contact(a)arnaud-lcm.com>
jfs: upper bound check of tree index in dbAllocAG
Edward Adam Davis <eadavis(a)qq.com>
jfs: Regular file corruption check
Lizhi Xu <lizhi.xu(a)windriver.com>
jfs: truncate good inode pages when hard link is 0
jackysliu <1972843537(a)qq.com>
scsi: bfa: Double-free fix
Shiji Yang <yangshiji66(a)outlook.com>
MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
Sebastian Reichel <sebastian.reichel(a)collabora.com>
watchdog: dw_wdt: Fix default timeout
Amir Mohammad Jahangirzad <a.jahangirzad(a)gmail.com>
fs/orangefs: use snprintf() instead of sprintf()
Showrya M N <showrya(a)chelsio.com>
scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
Theodore Ts'o <tytso(a)mit.edu>
ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
Pali Rohár <pali(a)kernel.org>
cifs: Fix calling CIFSFindFirst() for root path without msearch
Jason Wang <jasowang(a)redhat.com>
vhost: fail early when __vhost_add_used() fails
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
Jakub Kicinski <kuba(a)kernel.org>
uapi: in6: restore visibility of most IPv6 socket options
Hari Kalavakunta <kalavakunta.hari.prasad(a)gmail.com>
net: ncsi: Fix buffer overflow in fetching version id
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
Gal Pressman <gal(a)nvidia.com>
net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
Stanislaw Gruszka <stf_xl(a)wp.pl>
wifi: iwlegacy: Check rate_idx range after addition
Mina Almasry <almasrymina(a)google.com>
netmem: fix skb_frag_address_safe with unreadable skbs
Thomas Fourier <fourier.thomas(a)gmail.com>
wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
Pagadala Yesu Anjaneyulu <pagadala.yesu.anjaneyulu(a)intel.com>
wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
Rand Deeb <rand.sec96(a)gmail.com>
wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
Jonas Rebmann <jre(a)pengutronix.de>
net: fec: allow disable coalescing
Thomas Fourier <fourier.thomas(a)gmail.com>
(powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
Sven Schnelle <svens(a)linux.ibm.com>
s390/stp: Remove udelay from stp_sync_clock()
Avraham Stern <avraham.stern(a)intel.com>
wifi: iwlwifi: mvm: fix scan request validation
Alok Tiwari <alok.a.tiwari(a)oracle.com>
net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
Oscar Maes <oscmaes92(a)gmail.com>
net: ipv4: fix incorrect MTU in broadcast routes
Ilan Peer <ilan.peer(a)intel.com>
wifi: cfg80211: Fix interface type validation
Paul E. McKenney <paulmck(a)kernel.org>
rcu: Protect ->defer_qs_iw_pending from data race
Thomas Fourier <fourier.thomas(a)gmail.com>
net: ag71xx: Add missing check after DMA map
Thomas Fourier <fourier.thomas(a)gmail.com>
et131x: Add missing check after DMA map
Alok Tiwari <alok.a.tiwari(a)oracle.com>
be2net: Use correct byte order and format string for TCP seq and ack_seq
Sven Schnelle <svens(a)linux.ibm.com>
s390/time: Use monotonic clock in get_cycles()
Johannes Berg <johannes.berg(a)intel.com>
wifi: cfg80211: reject HTC bit for management frames
Steven Rostedt <rostedt(a)goodmis.org>
ktest.pl: Prevent recursion of default variable options
Xinxin Wan <xinxin.wan(a)intel.com>
ASoC: codecs: rt5640: Retry DEVICE_ID verification
Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com>
ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
Lucy Thrun <lucy.thrun(a)digital-rabbithole.de>
ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
Kees Cook <kees(a)kernel.org>
platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
Gautham R. Shenoy <gautham.shenoy(a)amd.com>
pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
Oliver Neukum <oneukum(a)suse.com>
usb: core: usb_submit_urb: downgrade type check
Alok Tiwari <alok.a.tiwari(a)oracle.com>
ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
Mark Brown <broonie(a)kernel.org>
ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
Ulf Hansson <ulf.hansson(a)linaro.org>
mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
Breno Leitao <leitao(a)debian.org>
ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
Sebastian Ott <sebott(a)redhat.com>
ACPI: processor: fix acpi_object initialization
tuhaowen <tuhaowen(a)uniontech.com>
PM: sleep: console: Fix the black screen issue
Hsin-Te Yuan <yuanhsinte(a)chromium.org>
thermal: sysfs: Return ENODATA instead of EAGAIN for reads
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
selftests: tracing: Use mutex_unlock for testing glob filter
Aaron Kling <webgeek1234(a)gmail.com>
ARM: tegra: Use I/O memcpy to write to IRAM
Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org>
gpio: tps65912: check the return value of regmap_update_bits()
Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com>
ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
Alexander Kochetkov <al.kochet(a)gmail.com>
ARM: rockchip: fix kernel hang during smp initialization
Lifeng Zheng <zhenglifeng1(a)huawei.com>
cpufreq: Exit governor when failed to start old governor
Mario Limonciello <mario.limonciello(a)amd.com>
usb: xhci: Avoid showing errors during surprise removal
Jay Chen <shawn2000100(a)gmail.com>
usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
Mario Limonciello <mario.limonciello(a)amd.com>
usb: xhci: Avoid showing warnings for dying controller
Cynthia Huang <cynthia(a)andestech.com>
selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
Prashant Malani <pmalani(a)google.com>
cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
Su Hui <suhui(a)nfschina.com>
usb: xhci: print xhci->xhc_state when queue_command failed
Al Viro <viro(a)zeniv.linux.org.uk>
securityfs: don't pin dentries twice, once is enough...
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfs: fix not erasing deleted b-tree node issue
Sarah Newman <srn(a)prgmr.com>
drbd: add missing kref_get in handle_write_conflicts
Jan Kara <jack(a)suse.cz>
udf: Verify partition map count
Kees Cook <kees(a)kernel.org>
arm64: Handle KCOV __init vs inline mismatches
Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp>
hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfs: fix slab-out-of-bounds in hfs_bnode_read()
Xin Long <lucien.xin(a)gmail.com>
sctp: linearize cloned gso packets in sctp_rcv
Florian Westphal <fw(a)strlen.de>
netfilter: ctnetlink: fix refcount leak on table dump
Sabrina Dubroca <sd(a)queasysnail.net>
udp: also consider secpath when evaluating ipsec use for checksumming
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
ACPI: processor: perflib: Move problematic pr->performance check
Jiayi Li <lijiayi(a)kylinos.cn>
ACPI: processor: perflib: Fix initial _PPC limit application
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
Documentation: ACPI: Fix parent device references
Sasha Levin <sashal(a)kernel.org>
fs: Prevent file descriptor table allocations exceeding INT_MAX
Ma Ke <make24(a)iscas.ac.cn>
sunvdc: Balance device refcount in vdc_port_mpgroup_check
Dai Ngo <dai.ngo(a)oracle.com>
NFSD: detect mismatch of file handle and delegation stateid in OPEN op
Johan Hovold <johan(a)kernel.org>
net: dpaa: fix device leak when querying time stamp info
Johan Hovold <johan(a)kernel.org>
net: gianfar: fix device leak when querying time stamp info
Fedor Pchelkin <pchelkin(a)ispras.ru>
netlink: avoid infinite retry looping in netlink_unicast()
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Validate UAC3 cluster segment descriptors
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Validate UAC3 power domain descriptors, too
Pavel Begunkov <asml.silence(a)gmail.com>
io_uring: don't use int for ABI
Tao Xue <xuetao09(a)huawei.com>
usb: gadget : fix use-after-free in composite_dev_cleanup()
Jiaxun Yang <jiaxun.yang(a)flygoat.com>
MIPS: mm: tlb-r4k: Uniquify TLB entries on init
Slark Xiao <slark_xiao(a)163.com>
USB: serial: option: add Foxconn T99W709
Budimir Markovic <markovicbudimir(a)gmail.com>
vsock: Do not allow binding to VMADDR_PORT_ANY
Quang Le <quanglex97(a)gmail.com>
net/packet: fix a race in packet_set_ring() and packet_notifier()
Thomas Gleixner <tglx(a)linutronix.de>
perf/core: Prevent VMA split of buffer mappings
Thomas Gleixner <tglx(a)linutronix.de>
perf/core: Exit early on perf_mmap() fail
Thomas Gleixner <tglx(a)linutronix.de>
perf/core: Don't leak AUX buffer refcount on allocation failure
Eric Dumazet <edumazet(a)google.com>
pptp: fix pptp_xmit() error path
Stefan Metzmacher <metze(a)samba.org>
smb: client: let recv_done() cleanup before notifying the callers.
Michal Schmidt <mschmidt(a)redhat.com>
benet: fix BUG when creating VFs
Wang Liang <wangliang74(a)huawei.com>
net: drop UFO packets in udp_rcv_segment()
Eric Dumazet <edumazet(a)google.com>
ipv6: reject malicious packets in ipv6_gso_segment()
Eric Dumazet <edumazet(a)google.com>
pptp: ensure minimal skb length in pptp_xmit()
Jakub Kicinski <kuba(a)kernel.org>
netpoll: prevent hanging NAPI when netcons gets enabled
Trond Myklebust <trond.myklebust(a)hammerspace.com>
NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
Frederic Barrat <fbarrat(a)linux.ibm.com>
pci/hotplug/pnv-php: Wrap warnings in macro
Frederic Barrat <fbarrat(a)linux.ibm.com>
pci/hotplug/pnv-php: Improve error msg on power state change failure
Peter Chen <peter.chen(a)nxp.com>
usb: chipidea: udc: fix sleeping function called from invalid context
Chao Yu <chao(a)kernel.org>
f2fs: fix to avoid out-of-boundary access in devs.path
Chao Yu <chao(a)kernel.org>
f2fs: fix to avoid panic in f2fs_evict_inode
Chao Yu <chao(a)kernel.org>
f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
Brian Masney <bmasney(a)redhat.com>
rtc: pcf8563: fix incorrect maximum clock rate handling
Brian Masney <bmasney(a)redhat.com>
rtc: hym8563: fix incorrect maximum clock rate handling
Brian Masney <bmasney(a)redhat.com>
rtc: ds1307: fix incorrect maximum clock rate handling
Petr Pavlu <petr.pavlu(a)suse.com>
module: Restore the moduleparam prefix length check
Paul Chaignon <paul.chaignon(a)gmail.com>
bpf: Check flow_dissector ctx accesses are aligned
Balamanikandan Gunasundar <balamanikandan.gunasundar(a)microchip.com>
mtd: rawnand: atmel: set pmecc data setup time
Thomas Fourier <fourier.thomas(a)gmail.com>
mtd: rawnand: atmel: Fix dma_mapping_error() address
Zheng Yu <zheng.yu(a)northwestern.edu>
jfs: fix metapage reference count leak in dbAllocCtl
Chenyuan Yang <chenyuan0y(a)gmail.com>
fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
Giovanni Cabiddu <giovanni.cabiddu(a)intel.com>
crypto: qat - fix seq_file position update in adf_ring_next()
Thomas Fourier <fourier.thomas(a)gmail.com>
dmaengine: nbpfaxi: Add missing check after DMA map
Thomas Fourier <fourier.thomas(a)gmail.com>
dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
Dan Carpenter <dan.carpenter(a)linaro.org>
fs/orangefs: Allow 2 more characters in do_c_string()
Bard Liao <yung-chuan.liao(a)linux.intel.com>
soundwire: stream: restore params when prepare ports fail
Thomas Fourier <fourier.thomas(a)gmail.com>
crypto: img-hash - Fix dma_unmap_sg() nents value
Ovidiu Panait <ovidiu.panait.oss(a)gmail.com>
hwrng: mtk - handle devm_pm_runtime_enable errors
Dan Carpenter <dan.carpenter(a)linaro.org>
watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
Thomas Fourier <fourier.thomas(a)gmail.com>
scsi: isci: Fix dma_unmap_sg() nents value
Thomas Fourier <fourier.thomas(a)gmail.com>
scsi: mvsas: Fix dma_unmap_sg() nents value
Thomas Fourier <fourier.thomas(a)gmail.com>
scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
Paul Kocialkowski <paulk(a)sys-base.io>
clk: sunxi-ng: v3s: Fix de clock definition
Leo Yan <leo.yan(a)arm.com>
perf tests bp_account: Fix leaked file descriptor
Mengbiao Xiong <xisme1998(a)gmail.com>
crypto: ccp - Fix crash when rebind ccp device for ccp.ko
Yuan Chen <chenyuan(a)kylinos.cn>
pinctrl: sunxi: Fix memory leak on krealloc failure
Charles Han <hanchunchao(a)inspur.com>
power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
Henry Martin <bsdhenrymartin(a)gmail.com>
clk: davinci: Add NULL check in davinci_lpsc_clk_register()
Ivan Stepchenko <sid(a)itb.spb.ru>
mtd: fix possible integer overflow in erase_xfer()
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: marvell/cesa - Fix engine load inaccuracy
Hans Zhang <18255117159(a)163.com>
PCI: rockchip-host: Fix "Unexpected Completion" log message
Stanislav Fomichev <sdf(a)fomichev.me>
vrf: Drop existing dst reference in vrf_ip6_input_dst
Xiumei Mu <xmu(a)redhat.com>
selftests: rtnetlink.sh: remove esp4_offload after test
Florian Westphal <fw(a)strlen.de>
netfilter: xt_nfacct: don't assume acct name is null-terminated
Jimmy Assarsson <extja(a)kvaser.com>
can: kvaser_usb: Assign netdev.dev_port based on device channel index
Jimmy Assarsson <extja(a)kvaser.com>
can: kvaser_pciefd: Store device channel index
Gokul Sivakumar <gokulkumar.sivakumar(a)infineon.com>
wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE
Remi Pommarel <repk(a)triplefau.lt>
Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
Thomas Fourier <fourier.thomas(a)gmail.com>
mwl8k: Add missing check after DMA map
Martin Kaistra <martin.kaistra(a)linutronix.de>
wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
William Liu <will(a)willsroot.io>
net/sched: Restrict conditions for adding duplicating netems to qdisc tree
Johan Korsnes <johan.korsnes(a)gmail.com>
arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
Fedor Pchelkin <pchelkin(a)ispras.ru>
netfilter: nf_tables: adjust lockdep assertions handling
Fedor Pchelkin <pchelkin(a)ispras.ru>
drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
Finn Thain <fthain(a)linux-m68k.org>
m68k: Don't unregister boot console needlessly
xin.guo <guoxin0309(a)gmail.com>
tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
Jiasheng Jiang <jiasheng(a)iscas.ac.cn>
iwlwifi: Add missing check for alloc_ordered_workqueue
Xiu Jianfeng <xiujianfeng(a)huawei.com>
wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
Daniil Dulov <d.dulov(a)aladdin.ru>
wifi: rtl818x: Kill URBs before clearing tx status queue
Arnd Bergmann <arnd(a)arndb.de>
caif: reduce stack size, again
Yuan Chen <chenyuan(a)kylinos.cn>
bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
Jiayuan Chen <jiayuan.chen(a)linux.dev>
bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
Alok Tiwari <alok.a.tiwari(a)oracle.com>
staging: nvec: Fix incorrect null termination of battery manufacturer
Brahmajit Das <listout(a)listout.xyz>
samples: mei: Fix building on musl libc
Lifeng Zheng <zhenglifeng1(a)huawei.com>
cpufreq: Init policy->rwsem before it may be possibly used
Annette Kobou <annette.kobou(a)kontron.de>
ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
Lucas De Marchi <lucas.demarchi(a)intel.com>
usb: early: xhci-dbc: Fix early_ioremap leak
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Revert "vmci: Prevent the dispatching of uninitialized payloads"
Denis OSTERLAND-HEIM <denis.osterland(a)diehl.com>
pps: fix poll support
Lizhi Xu <lizhi.xu(a)windriver.com>
vmci: Prevent the dispatching of uninitialized payloads
Abdun Nihaal <abdun.nihaal(a)gmail.com>
staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
ARM: dts: vfxxx: Correctly use two tuples for timer address
Arnd Bergmann <arnd(a)arndb.de>
ASoC: ops: dynamically allocate struct snd_ctl_elem_value
Yangtao Li <frank.li(a)vivo.com>
hfsplus: remove mutex_lock check in hfsplus_free_extents
Arnd Bergmann <arnd(a)arndb.de>
ASoC: Intel: fix SND_SOC_SOF dependencies
Arnd Bergmann <arnd(a)arndb.de>
ethernet: intel: fix building with large NR_CPUS
Xu Yang <xu.yang_2(a)nxp.com>
usb: phy: mxs: disconnect line when USB charger is attached
Xu Yang <xu.yang_2(a)nxp.com>
usb: chipidea: add USB PHY event
Peter Chen <peter.chen(a)nxp.com>
usb: chipidea: introduce CI_HDRC_CONTROLLER_VBUS_EVENT glue layer use
Jun Li <jun.li(a)nxp.com>
usb: chipidea: udc: protect usb interrupt enable
Peter Chen <peter.chen(a)nxp.com>
usb: chipidea: udc: add new API ci_hdrc_gadget_connect
Daniel Dadap <ddadap(a)nvidia.com>
ALSA: hda: Add missing NVIDIA HDA codec IDs
Ian Abbott <abbotti(a)mev.co.uk>
comedi: comedi_test: Fix possible deletion of uninitialized timers
Ryusuke Konishi <konishi.ryusuke(a)gmail.com>
nilfs2: reject invalid file types when reading inodes
Yang Xiwen <forbidden405(a)outlook.com>
i2c: qup: jump out of the loop in case of timeout
Xiang Mei <xmei5(a)asu.edu>
net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
Kito Xu (veritas501) <hxzene(a)gmail.com>
net: appletalk: Fix use-after-free in AARP proxy probe
Andrew Lunn <andrew(a)lunn.ch>
net: appletalk: fix kerneldoc warnings
Maor Gottlieb <maorg(a)nvidia.com>
RDMA/core: Rate limit GID cache warning messages
Alessandro Carminati <acarmina(a)redhat.com>
regulator: core: fix NULL dereference on unbind due to stale coupling data
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: hub: fix detection of high tier USB3 devices behind suspended hubs
Eric Dumazet <edumazet(a)google.com>
net_sched: sch_sfq: reject invalid perturb period
Octavian Purdila <tavip(a)google.com>
net_sched: sch_sfq: move the limit validation
Octavian Purdila <tavip(a)google.com>
net_sched: sch_sfq: use a temporary work area for validating configuration
Octavian Purdila <tavip(a)google.com>
net_sched: sch_sfq: don't allow 1 packet limit
Eric Dumazet <edumazet(a)google.com>
net_sched: sch_sfq: handle bigger packets
Eric Dumazet <edumazet(a)google.com>
net_sched: sch_sfq: annotate data-races around q->perturb_period
Zheng Wang <zyytlz.wz(a)163.com>
power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
Minghao Chi <chi.minghao(a)zte.com.cn>
power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync
Dinghao Liu <dinghao.liu(a)zju.edu.cn>
power: supply: bq24190_charger: Fix runtime PM imbalance on error
Hongyu Xie <xiehongyu1(a)kylinos.cn>
xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
Bui Quang Minh <minhquangbui99(a)gmail.com>
virtio-net: ensure the received length does not exceed allocated size
Arun Raghavan <arun(a)asymptotic.io>
ASoC: fsl_sai: Force a software reset when starting in consumer mode
Krishna Kurapati <krishna.kurapati(a)oss.qualcomm.com>
usb: dwc3: qcom: Don't leave BCR asserted
Drew Hamilton <drew.hamilton(a)zetier.com>
usb: musb: fix gadget state on disconnect
William Liu <will(a)willsroot.io>
net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
Dong Chenchen <dongchenchen2(a)huawei.com>
net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: SMP: If an unallowed command is received consider it a failure
Kuniyuki Iwashima <kuniyu(a)google.com>
Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
Oliver Neukum <oneukum(a)suse.com>
usb: net: sierra: check for no status endpoint
Xiang Mei <xmei5(a)asu.edu>
net/sched: sch_qfq: Fix race condition on qfq_aggregate
Alok Tiwari <alok.a.tiwari(a)oracle.com>
net: emaclite: Fix missing pointer increment in aligned_read()
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fix some signed shift left operations
Ian Abbott <abbotti(a)mev.co.uk>
comedi: das6402: Fix bit shift out of bounds
Ian Abbott <abbotti(a)mev.co.uk>
comedi: das16m1: Fix bit shift out of bounds
Ian Abbott <abbotti(a)mev.co.uk>
comedi: aio_iiro_16: Fix bit shift out of bounds
Ian Abbott <abbotti(a)mev.co.uk>
comedi: pcl812: Fix bit shift out of bounds
Chen Ni <nichen(a)iscas.ac.cn>
iio: adc: stm32-adc: Fix race in installing chained IRQ handler
Fabio Estevam <festevam(a)denx.de>
iio: adc: max1363: Reorder mode_list[] entries
Fabio Estevam <festevam(a)denx.de>
iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
Andrew Jeffery <andrew(a)codeconstruct.com.au>
soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
Andrew Jeffery <andrew(a)codeconstruct.com.au>
soc: aspeed: lpc-snoop: Cleanup resources in stack-order
Judith Mendez <jm(a)ti.com>
mmc: sdhci_am654: Workaround for Errata i2312
Edson Juliano Drosdeck <edson.drosdeck(a)gmail.com>
mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
Thomas Fourier <fourier.thomas(a)gmail.com>
mmc: bcm2835: Fix dma_unmap_sg() nents value
Nathan Chancellor <nathan(a)kernel.org>
memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
Jan Kara <jack(a)suse.cz>
isofs: Verify inode mode when loading from disk
Dan Carpenter <dan.carpenter(a)linaro.org>
dmaengine: nbpfaxi: Fix memory corruption in probe()
Yun Lu <luyun(a)kylinos.cn>
af_packet: fix soft lockup issue caused by tpacket_snd()
Yun Lu <luyun(a)kylinos.cn>
af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
Nathan Chancellor <nathan(a)kernel.org>
phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
Benjamin Tissoires <bentiss(a)kernel.org>
HID: core: do not bypass hid_hw_raw_request
Benjamin Tissoires <bentiss(a)kernel.org>
HID: core: ensure __hid_request reserves the report ID as the first byte
Benjamin Tissoires <bentiss(a)kernel.org>
HID: core: ensure the allocated report buffer can contain the reserved report ID
Thomas Fourier <fourier.thomas(a)gmail.com>
pch_uart: Fix dma_sync_sg_for_device() nents value
Nilton Perim Neto <niltonperimneto(a)gmail.com>
Input: xpad - set correct controller type for Acer NGR200
Clément Le Goffic <clement.legoffic(a)foss.st.com>
i2c: stm32: fix the device used for the DMA map
Xinyu Liu <1171169449(a)qq.com>
usb: gadget: configfs: Fix OOB read on empty string write
Ryan Mann (NDI) <rmann(a)ndigital.com>
USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
Slark Xiao <slark_xiao(a)163.com>
USB: serial: option: add Foxconn T99W640
Fabio Porcedda <fabio.porcedda(a)gmail.com>
USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
-------------
Diffstat:
Documentation/firmware-guide/acpi/i2c-muxes.rst | 8 +-
Makefile | 7 +-
arch/arm/Makefile | 2 +-
arch/arm/boot/dts/imx6ul-kontron-n6310-s.dts | 1 -
arch/arm/boot/dts/vfxxx.dtsi | 2 +-
arch/arm/mach-rockchip/platsmp.c | 15 +-
arch/arm/mach-tegra/reset.c | 2 +-
arch/arm64/include/asm/acpi.h | 2 +-
arch/m68k/Kconfig.debug | 2 +-
arch/m68k/kernel/early_printk.c | 42 +--
arch/m68k/kernel/head.S | 39 ++-
arch/mips/Makefile | 2 +-
arch/mips/include/asm/vpe.h | 8 +
arch/mips/kernel/process.c | 16 +-
arch/mips/mm/tlb-r4k.c | 56 +++-
arch/parisc/Makefile | 2 +-
arch/powerpc/configs/ppc6xx_defconfig | 1 -
arch/powerpc/platforms/512x/mpc512x_lpbfifo.c | 6 +-
arch/s390/hypfs/hypfs_dbfs.c | 19 +-
arch/s390/include/asm/timex.h | 13 +-
arch/s390/kernel/time.c | 2 +-
arch/x86/kernel/cpu/mce/amd.c | 13 +-
arch/x86/mm/extable.c | 5 +-
drivers/acpi/acpi_processor.c | 2 +-
drivers/acpi/apei/ghes.c | 2 +
drivers/acpi/processor_idle.c | 4 +-
drivers/acpi/processor_perflib.c | 11 +
drivers/ata/Kconfig | 35 ++-
drivers/ata/libata-scsi.c | 20 +-
drivers/base/power/domain_governor.c | 18 +-
drivers/base/power/runtime.c | 5 +
drivers/block/drbd/drbd_receiver.c | 6 +-
drivers/block/sunvdc.c | 4 +-
drivers/char/hw_random/mtk-rng.c | 4 +-
drivers/char/ipmi/ipmi_msghandler.c | 8 +-
drivers/char/ipmi/ipmi_watchdog.c | 59 +++--
drivers/clk/davinci/psc.c | 5 +
drivers/clk/sunxi-ng/ccu-sun8i-v3s.c | 3 +-
drivers/cpufreq/armada-8k-cpufreq.c | 2 +-
drivers/cpufreq/cppc_cpufreq.c | 2 +-
drivers/cpufreq/cpufreq.c | 11 +-
drivers/crypto/ccp/ccp-debugfs.c | 3 +
drivers/crypto/img-hash.c | 2 +-
drivers/crypto/marvell/cipher.c | 4 +-
drivers/crypto/marvell/hash.c | 5 +-
.../crypto/qat/qat_common/adf_transport_debug.c | 4 +-
drivers/dma/mv_xor.c | 21 +-
drivers/dma/nbpfaxi.c | 24 +-
drivers/fpga/zynq-fpga.c | 10 +-
drivers/gpio/gpio-tps65912.c | 7 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_csa.c | 4 +-
.../gpu/drm/amd/display/dc/bios/command_table.c | 2 +-
.../amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 30 ++-
drivers/gpu/drm/amd/powerplay/hwmgr/smu_helper.c | 2 +-
drivers/gpu/drm/drm_dp_helper.c | 2 +-
drivers/gpu/drm/scheduler/sched_entity.c | 23 +-
drivers/hid/hid-core.c | 21 +-
drivers/i2c/busses/i2c-qup.c | 4 +-
drivers/i2c/busses/i2c-stm32.c | 8 +-
drivers/i2c/busses/i2c-stm32f7.c | 4 +-
drivers/i3c/internals.h | 1 +
drivers/i3c/master.c | 2 +-
drivers/iio/adc/max1363.c | 43 ++-
drivers/iio/adc/stm32-adc-core.c | 7 +-
drivers/iio/light/hid-sensor-prox.c | 3 +-
drivers/iio/proximity/isl29501.c | 14 +-
drivers/infiniband/core/cache.c | 4 +-
drivers/infiniband/hw/hfi1/affinity.c | 44 +--
drivers/input/joystick/xpad.c | 2 +-
drivers/media/dvb-frontends/dib7000p.c | 8 +
drivers/media/i2c/ov2659.c | 3 +-
drivers/media/i2c/tc358743.c | 86 +++---
drivers/media/platform/qcom/camss/camss.c | 4 +-
drivers/media/platform/qcom/venus/core.c | 8 +-
drivers/media/platform/qcom/venus/core.h | 2 +
drivers/media/platform/qcom/venus/hfi_venus.c | 5 +
drivers/media/platform/qcom/venus/vdec.c | 5 +-
drivers/media/usb/gspca/vicam.c | 10 +-
drivers/media/usb/hdpvr/hdpvr-i2c.c | 6 +
drivers/media/usb/rainshadow-cec/rainshadow-cec.c | 3 +-
drivers/media/usb/usbtv/usbtv-video.c | 4 +
drivers/media/usb/uvc/uvc_driver.c | 3 +
drivers/media/usb/uvc/uvc_video.c | 21 +-
drivers/media/v4l2-core/v4l2-ctrls.c | 37 ++-
drivers/memstick/core/memstick.c | 3 +-
drivers/memstick/host/rtsx_usb_ms.c | 1 +
drivers/misc/cardreader/rtsx_usb.c | 16 +-
drivers/mmc/host/bcm2835.c | 3 +-
drivers/mmc/host/rtsx_usb_sdmmc.c | 4 +-
drivers/mmc/host/sdhci-pci-core.c | 3 +-
drivers/mmc/host/sdhci_am654.c | 9 +-
drivers/mtd/ftl.c | 2 +-
drivers/mtd/nand/raw/atmel/nand-controller.c | 2 +-
drivers/mtd/nand/raw/atmel/pmecc.c | 6 +
drivers/mtd/nand/raw/fsmc_nand.c | 2 +
drivers/net/can/kvaser_pciefd.c | 1 +
drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 1 +
drivers/net/dsa/b53/b53_common.c | 31 ++-
drivers/net/dsa/b53/b53_regs.h | 1 +
drivers/net/ethernet/agere/et131x.c | 36 +++
drivers/net/ethernet/atheros/ag71xx.c | 9 +
drivers/net/ethernet/cavium/thunder/thunder_bgx.c | 4 +-
drivers/net/ethernet/emulex/benet/be_cmds.c | 2 +-
drivers/net/ethernet/emulex/benet/be_main.c | 8 +-
drivers/net/ethernet/freescale/dpaa/dpaa_ethtool.c | 4 +-
drivers/net/ethernet/freescale/fec_main.c | 34 ++-
drivers/net/ethernet/freescale/gianfar_ethtool.c | 4 +-
drivers/net/ethernet/intel/fm10k/fm10k.h | 3 +-
drivers/net/ethernet/intel/i40e/i40e.h | 2 +-
drivers/net/ethernet/intel/ice/ice_flex_pipe.c | 2 +
drivers/net/ethernet/intel/ixgbe/ixgbe.h | 3 +-
drivers/net/ethernet/intel/ixgbe/ixgbe_xsk.c | 4 +-
drivers/net/ethernet/xilinx/xilinx_emaclite.c | 2 +-
drivers/net/phy/smsc.c | 1 +
drivers/net/ppp/pptp.c | 18 +-
drivers/net/usb/sierra_net.c | 4 +
drivers/net/usb/usbnet.c | 11 +-
drivers/net/virtio_net.c | 38 ++-
drivers/net/vrf.c | 2 +
.../broadcom/brcm80211/brcmfmac/cfg80211.c | 8 +-
.../broadcom/brcm80211/brcmsmac/phy/phy_lcn.c | 2 +-
drivers/net/wireless/intel/iwlegacy/4965-mac.c | 5 +-
drivers/net/wireless/intel/iwlwifi/dvm/main.c | 11 +-
drivers/net/wireless/intel/iwlwifi/dvm/rs.c | 2 +-
drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 7 +-
drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 4 +-
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 2 +-
drivers/net/wireless/marvell/mwl8k.c | 4 +
drivers/net/wireless/realtek/rtl818x/rtl8187/dev.c | 3 +-
.../net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 2 +-
drivers/net/wireless/realtek/rtlwifi/pci.c | 18 +-
drivers/pci/controller/pcie-rockchip-host.c | 2 +-
drivers/pci/endpoint/pci-ep-cfs.c | 1 +
drivers/pci/endpoint/pci-epf-core.c | 2 +-
drivers/pci/hotplug/pnv_php.c | 90 +++++--
drivers/pci/pci-acpi.c | 4 +-
drivers/pci/pci.c | 8 +-
drivers/pci/probe.c | 2 +-
drivers/pinctrl/stm32/pinctrl-stm32.c | 1 +
drivers/pinctrl/sunxi/pinctrl-sunxi.c | 11 +-
drivers/platform/x86/thinkpad_acpi.c | 4 +-
drivers/power/supply/bq24190_charger.c | 60 ++---
drivers/power/supply/max14577_charger.c | 4 +-
drivers/pps/pps.c | 11 +-
drivers/pwm/pwm-imx-tpm.c | 9 +
drivers/pwm/pwm-mediatek.c | 78 ++++--
drivers/regulator/core.c | 1 +
drivers/rtc/rtc-ds1307.c | 17 +-
drivers/rtc/rtc-hym8563.c | 2 +-
drivers/rtc/rtc-pcf8563.c | 2 +-
drivers/scsi/aacraid/comminit.c | 3 +-
drivers/scsi/bfa/bfad_im.c | 1 +
drivers/scsi/ibmvscsi_tgt/libsrp.c | 6 +-
drivers/scsi/isci/request.c | 2 +-
drivers/scsi/libiscsi.c | 3 +-
drivers/scsi/lpfc/lpfc_debugfs.c | 1 -
drivers/scsi/lpfc/lpfc_scsi.c | 4 +
drivers/scsi/mpt3sas/mpt3sas_scsih.c | 19 ++
drivers/scsi/mvsas/mv_sas.c | 4 +-
drivers/scsi/qla4xxx/ql4_os.c | 2 +
drivers/scsi/scsi_scan.c | 2 +-
drivers/scsi/scsi_transport_sas.c | 62 ++++-
drivers/soc/aspeed/aspeed-lpc-snoop.c | 13 +-
drivers/soc/qcom/mdt_loader.c | 41 +++
drivers/soc/tegra/pmc.c | 51 ++--
drivers/soundwire/stream.c | 2 +-
drivers/staging/comedi/comedi_compat32.c | 3 +
drivers/staging/comedi/comedi_fops.c | 60 ++++-
drivers/staging/comedi/comedi_internal.h | 1 +
drivers/staging/comedi/drivers.c | 30 ++-
drivers/staging/comedi/drivers/aio_iiro_16.c | 3 +-
drivers/staging/comedi/drivers/comedi_test.c | 2 +-
drivers/staging/comedi/drivers/das16m1.c | 3 +-
drivers/staging/comedi/drivers/das6402.c | 3 +-
drivers/staging/comedi/drivers/pcl812.c | 3 +-
drivers/staging/fbtft/fbtft-core.c | 1 +
drivers/staging/media/imx/imx-media-csc-scaler.c | 2 +-
drivers/staging/nvec/nvec_power.c | 2 +-
drivers/thermal/thermal_sysfs.c | 9 +-
drivers/thunderbolt/domain.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 3 +-
drivers/tty/serial/pch_uart.c | 2 +-
drivers/tty/vt/defkeymap.c_shipped | 112 ++++++++
drivers/tty/vt/keyboard.c | 2 +-
drivers/usb/atm/cxacru.c | 172 ++++++------
drivers/usb/chipidea/ci.h | 18 +-
drivers/usb/chipidea/udc.c | 89 ++++---
drivers/usb/class/cdc-acm.c | 13 +-
drivers/usb/core/hub.c | 67 ++++-
drivers/usb/core/quirks.c | 1 +
drivers/usb/core/urb.c | 2 +-
drivers/usb/dwc3/dwc3-meson-g12a.c | 3 +
drivers/usb/dwc3/dwc3-qcom.c | 8 +-
drivers/usb/dwc3/gadget.c | 9 +
drivers/usb/early/xhci-dbc.c | 4 +
drivers/usb/gadget/composite.c | 5 +
drivers/usb/gadget/configfs.c | 2 +
drivers/usb/gadget/udc/renesas_usb3.c | 1 +
drivers/usb/host/xhci-hub.c | 3 +-
drivers/usb/host/xhci-mem.c | 24 +-
drivers/usb/host/xhci-plat.c | 3 +-
drivers/usb/host/xhci-ring.c | 19 +-
drivers/usb/host/xhci.c | 24 +-
drivers/usb/host/xhci.h | 3 +-
drivers/usb/musb/musb_gadget.c | 2 +
drivers/usb/musb/omap2430.c | 10 +-
drivers/usb/phy/phy-mxs-usb.c | 4 +-
drivers/usb/serial/ftdi_sio.c | 2 +
drivers/usb/serial/ftdi_sio_ids.h | 3 +
drivers/usb/serial/option.c | 7 +
drivers/usb/storage/realtek_cr.c | 2 +-
drivers/usb/storage/unusual_devs.h | 29 ++
drivers/usb/typec/tcpm/fusb302.c | 8 +
drivers/vhost/vhost.c | 3 +
drivers/video/console/vgacon.c | 2 +-
drivers/video/fbdev/imxfb.c | 9 +-
drivers/watchdog/dw_wdt.c | 2 +
drivers/watchdog/ziirave_wdt.c | 3 +
fs/btrfs/tree-log.c | 53 ++--
fs/buffer.c | 2 +-
fs/cifs/cifsglob.h | 1 +
fs/cifs/cifssmb.c | 10 +
fs/cifs/smbdirect.c | 14 +-
fs/cifs/transport.c | 34 ++-
fs/ext4/fsmap.c | 23 +-
fs/ext4/inline.c | 19 +-
fs/ext4/inode.c | 2 +-
fs/f2fs/f2fs.h | 2 +-
fs/f2fs/inode.c | 28 +-
fs/f2fs/node.c | 10 +
fs/file.c | 15 ++
fs/hfs/bnode.c | 93 +++++++
fs/hfsplus/bnode.c | 92 +++++++
fs/hfsplus/extents.c | 3 -
fs/hfsplus/unicode.c | 7 +
fs/hfsplus/xattr.c | 6 +-
fs/hugetlbfs/inode.c | 2 +-
fs/isofs/inode.c | 9 +-
fs/jbd2/checkpoint.c | 1 +
fs/jfs/file.c | 3 +
fs/jfs/inode.c | 2 +-
fs/jfs/jfs_dmap.c | 10 +-
fs/namespace.c | 89 ++++++-
fs/nfs/blocklayout/blocklayout.c | 4 +-
fs/nfs/blocklayout/dev.c | 5 +-
fs/nfs/blocklayout/extent_tree.c | 20 +-
fs/nfs/client.c | 44 ++-
fs/nfs/direct.c | 13 +-
fs/nfs/export.c | 11 +-
fs/nfs/inode.c | 6 +-
fs/nfs/internal.h | 1 +
fs/nfs/nfs4client.c | 13 +-
fs/nfs/nfs4proc.c | 35 +--
fs/nfs/pnfs.c | 11 +-
fs/nfs/write.c | 11 +-
fs/nfsd/nfs4state.c | 34 ++-
fs/nilfs2/inode.c | 9 +-
fs/orangefs/orangefs-debugfs.c | 8 +-
fs/squashfs/super.c | 14 +-
fs/udf/super.c | 13 +-
include/linux/fs.h | 4 +-
include/linux/if_vlan.h | 6 +-
include/linux/mm.h | 26 +-
include/linux/moduleparam.h | 5 +-
include/linux/nfs_fs.h | 2 +
include/linux/pci.h | 1 +
include/linux/pps_kernel.h | 1 +
include/linux/skbuff.h | 31 ++-
include/linux/usb/chipidea.h | 1 +
include/linux/usb/usbnet.h | 1 +
include/net/act_api.h | 25 ++
include/net/cfg80211.h | 2 +-
include/net/sch_generic.h | 13 -
include/net/udp.h | 24 +-
include/uapi/linux/in6.h | 4 +-
include/uapi/linux/io_uring.h | 2 +-
include/uapi/linux/mount.h | 3 +-
kernel/events/core.c | 20 +-
kernel/fork.c | 2 +-
kernel/power/console.c | 7 +-
kernel/rcu/tree_plugin.h | 3 +
kernel/trace/ftrace.c | 19 +-
kernel/trace/trace_events.c | 5 +
mm/filemap.c | 2 +-
mm/hmm.c | 2 +-
mm/kmemleak.c | 120 +++++----
mm/madvise.c | 2 +-
mm/mmap.c | 26 +-
mm/shmem.c | 2 +-
mm/zsmalloc.c | 6 +-
net/8021q/vlan.c | 42 ++-
net/8021q/vlan.h | 1 +
net/appletalk/aarp.c | 42 ++-
net/appletalk/ddp.c | 7 +-
net/bluetooth/hci_sysfs.c | 15 +-
net/bluetooth/l2cap_core.c | 26 +-
net/bluetooth/l2cap_sock.c | 3 +
net/bluetooth/smp.c | 21 +-
net/bluetooth/smp.h | 1 +
net/caif/cfctrl.c | 294 ++++++++++-----------
net/core/filter.c | 3 +
net/core/netpoll.c | 7 +
net/ipv4/route.c | 1 -
net/ipv4/tcp_input.c | 3 +-
net/ipv4/udp_offload.c | 2 +-
net/ipv6/ip6_offload.c | 4 +-
net/ipv6/seg6_hmac.c | 3 +
net/mac80211/tx.c | 1 +
net/ncsi/internal.h | 2 +-
net/ncsi/ncsi-rsp.c | 1 +
net/netfilter/nf_conntrack_netlink.c | 24 +-
net/netfilter/nf_tables_api.c | 4 +-
net/netfilter/xt_nfacct.c | 4 +-
net/netlink/af_netlink.c | 2 +-
net/packet/af_packet.c | 39 ++-
net/phonet/pep.c | 2 +-
net/sched/act_api.c | 14 +
net/sched/act_csum.c | 4 +-
net/sched/act_ct.c | 10 +-
net/sched/act_gact.c | 14 +-
net/sched/act_mirred.c | 55 ++--
net/sched/act_police.c | 5 +-
net/sched/act_tunnel_key.c | 2 +-
net/sched/act_vlan.c | 9 +-
net/sched/sch_cake.c | 14 +-
net/sched/sch_codel.c | 5 +-
net/sched/sch_drr.c | 7 +-
net/sched/sch_fq_codel.c | 6 +-
net/sched/sch_hfsc.c | 8 +-
net/sched/sch_htb.c | 6 +-
net/sched/sch_netem.c | 40 +++
net/sched/sch_qfq.c | 40 ++-
net/sched/sch_sfq.c | 116 +++++---
net/sctp/input.c | 2 +-
net/tls/tls_sw.c | 13 +
net/vmw_vsock/af_vsock.c | 3 +-
net/wireless/mlme.c | 3 +-
samples/mei/mei-amt-version.c | 2 +-
scripts/Kbuild.include | 8 +-
scripts/kconfig/gconf.c | 8 +-
scripts/kconfig/lxdialog/inputbox.c | 6 +-
scripts/kconfig/lxdialog/menubox.c | 2 +-
scripts/kconfig/nconf.c | 2 +
scripts/kconfig/nconf.gui.c | 1 +
security/inode.c | 2 -
sound/pci/hda/patch_ca0132.c | 2 +-
sound/pci/hda/patch_hdmi.c | 19 ++
sound/pci/intel8x0.c | 2 +-
sound/soc/codecs/hdac_hdmi.c | 10 +-
sound/soc/codecs/rt5640.c | 5 +
sound/soc/fsl/fsl_sai.c | 14 +-
sound/soc/intel/boards/Kconfig | 2 +-
sound/soc/soc-dapm.c | 4 +
sound/soc/soc-ops.c | 28 +-
sound/usb/mixer_quirks.c | 14 +-
sound/usb/mixer_scarlett_gen2.c | 9 +
sound/usb/stream.c | 25 +-
sound/usb/validate.c | 14 +-
tools/bpf/bpftool/net.c | 15 +-
tools/perf/tests/bp_account.c | 1 +
.../cpupower/utils/idle_monitor/mperf_monitor.c | 4 +-
tools/testing/ktest/ktest.pl | 5 +-
.../ftrace/test.d/ftrace/func-filter-glob.tc | 2 +-
tools/testing/selftests/futex/include/futextest.h | 11 +
.../testing/selftests/net/forwarding/tc_actions.sh | 72 ++++-
tools/testing/selftests/net/rtnetlink.sh | 6 +
366 files changed, 3519 insertions(+), 1494 deletions(-)
3 weeks
- 7
- 413
[RFC 1/8] powerpc/mm: Fix SLB multihit issue during SLB preload
by Ritesh Harjani (IBM)
From: Donet Tom <donettom(a)linux.ibm.com>
On systems using the hash MMU, there is a software SLB preload cache that
mirrors the entries loaded into the hardware SLB buffer. This preload
cache is subject to periodic eviction — typically after every 256 context
switches — to remove old entry.
To optimize performance, the kernel skips switch_mmu_context() in
switch_mm_irqs_off() when the prev and next mm_struct are the same.
However, on hash MMU systems, this can lead to inconsistencies between
the hardware SLB and the software preload cache.
If an SLB entry for a process is evicted from the software cache on one
CPU, and the same process later runs on another CPU without executing
switch_mmu_context(), the hardware SLB may retain stale entries. If the
kernel then attempts to reload that entry, it can trigger an SLB
multi-hit error.
The following timeline shows how stale SLB entries are created and can
cause a multi-hit error when a process moves between CPUs without a
MMU context switch.
CPU 0 CPU 1
----- -----
Process P
exec swapper/1
load_elf_binary
begin_new_exc
activate_mm
switch_mm_irqs_off
switch_mmu_context
switch_slb
/*
* This invalidates all
* the entries in the HW
* and setup the new HW
* SLB entries as per the
* preload cache.
*/
context_switch
sched_migrate_task migrates process P to cpu-1
Process swapper/0 context switch (to process P)
(uses mm_struct of Process P) switch_mm_irqs_off()
switch_slb
load_slb++
/*
* load_slb becomes 0 here
* and we evict an entry from
* the preload cache with
* preload_age(). We still
* keep HW SLB and preload
* cache in sync, that is
* because all HW SLB entries
* anyways gets evicted in
* switch_slb during SLBIA.
* We then only add those
* entries back in HW SLB,
* which are currently
* present in preload_cache
* (after eviction).
*/
load_elf_binary continues...
setup_new_exec()
slb_setup_new_exec()
sched_switch event
sched_migrate_task migrates
process P to cpu-0
context_switch from swapper/0 to Process P
switch_mm_irqs_off()
/*
* Since both prev and next mm struct are same we don't call
* switch_mmu_context(). This will cause the HW SLB and SW preload
* cache to go out of sync in preload_new_slb_context. Because there
* was an SLB entry which was evicted from both HW and preload cache
* on cpu-1. Now later in preload_new_slb_context(), when we will try
* to add the same preload entry again, we will add this to the SW
* preload cache and then will add it to the HW SLB. Since on cpu-0
* this entry was never invalidated, hence adding this entry to the HW
* SLB will cause a SLB multi-hit error.
*/
load_elf_binary continues...
START_THREAD
start_thread
preload_new_slb_context
/*
* This tries to add a new EA to preload cache which was earlier
* evicted from both cpu-1 HW SLB and preload cache. This caused the
* HW SLB of cpu-0 to go out of sync with the SW preload cache. The
* reason for this was, that when we context switched back on CPU-0,
* we should have ideally called switch_mmu_context() which will
* bring the HW SLB entries on CPU-0 in sync with SW preload cache
* entries by setting up the mmu context properly. But we didn't do
* that since the prev mm_struct running on cpu-0 was same as the
* next mm_struct (which is true for swapper / kernel threads). So
* now when we try to add this new entry into the HW SLB of cpu-0,
* we hit a SLB multi-hit error.
*/
WARNING: CPU: 0 PID: 1810970 at arch/powerpc/mm/book3s64/slb.c:62
assert_slb_presence+0x2c/0x50(48 results) 02:47:29 [20157/42149]
Modules linked in:
CPU: 0 UID: 0 PID: 1810970 Comm: dd Not tainted 6.16.0-rc3-dirty #12
VOLUNTARY
Hardware name: IBM pSeries (emulated by qemu) POWER8 (architected)
0x4d0200 0xf000004 of:SLOF,HEAD hv:linux,kvm pSeries
NIP: c00000000015426c LR: c0000000001543b4 CTR: 0000000000000000
REGS: c0000000497c77e0 TRAP: 0700 Not tainted (6.16.0-rc3-dirty)
MSR: 8000000002823033 <SF,VEC,VSX,FP,ME,IR,DR,RI,LE> CR: 28888482 XER: 00000000
CFAR: c0000000001543b0 IRQMASK: 3
<...>
NIP [c00000000015426c] assert_slb_presence+0x2c/0x50
LR [c0000000001543b4] slb_insert_entry+0x124/0x390
Call Trace:
0x7fffceb5ffff (unreliable)
preload_new_slb_context+0x100/0x1a0
start_thread+0x26c/0x420
load_elf_binary+0x1b04/0x1c40
bprm_execve+0x358/0x680
do_execveat_common+0x1f8/0x240
sys_execve+0x58/0x70
system_call_exception+0x114/0x300
system_call_common+0x160/0x2c4
>From the above analysis, during early exec the hardware SLB is cleared,
and entries from the software preload cache are reloaded into hardware
by switch_slb. However, preload_new_slb_context and slb_setup_new_exec
also attempt to load some of the same entries, which can trigger a
multi-hit. In most cases, these additional preloads simply hit existing
entries and add nothing new. Removing these functions avoids redundant
preloads and eliminates the multi-hit issue. This patch removes these
two functions.
We tested process switching performance using the context_switch
benchmark on POWER9/hash, and observed no regression.
Without this patch: 129041 ops/sec
With this patch: 129341 ops/sec
We also measured SLB faults during boot, and the counts are essentially
the same with and without this patch.
SLB faults without this patch: 19727
SLB faults with this patch: 19786
Cc: Madhavan Srinivasan <maddy(a)linux.ibm.com>
Cc: Michael Ellerman <mpe(a)ellerman.id.au>
Cc: Nicholas Piggin <npiggin(a)gmail.com>
Cc: Christophe Leroy <christophe.leroy(a)csgroup.eu>
Cc: Paul Mackerras <paulus(a)ozlabs.org>
Cc: "Aneesh Kumar K.V" <aneesh.kumar(a)kernel.org>
Cc: Donet Tom <donettom(a)linux.ibm.com>
Cc: linuxppc-dev(a)lists.ozlabs.org
Fixes: 5434ae74629a ("powerpc/64s/hash: Add a SLB preload cache")
cc: <stable(a)vger.kernel.org>
Suggested-by: Nicholas Piggin <npiggin(a)gmail.com>
Signed-off-by: Donet Tom <donettom(a)linux.ibm.com>
---
arch/powerpc/include/asm/book3s/64/mmu-hash.h | 1 -
arch/powerpc/kernel/process.c | 5 --
arch/powerpc/mm/book3s64/internal.h | 2 -
arch/powerpc/mm/book3s64/mmu_context.c | 2 -
arch/powerpc/mm/book3s64/slb.c | 88 -------------------
5 files changed, 98 deletions(-)
diff --git a/arch/powerpc/include/asm/book3s/64/mmu-hash.h b/arch/powerpc/include/asm/book3s/64/mmu-hash.h
index 1c4eebbc69c9..e1f77e2eead4 100644
--- a/arch/powerpc/include/asm/book3s/64/mmu-hash.h
+++ b/arch/powerpc/include/asm/book3s/64/mmu-hash.h
@@ -524,7 +524,6 @@ void slb_save_contents(struct slb_entry *slb_ptr);
void slb_dump_contents(struct slb_entry *slb_ptr);
extern void slb_vmalloc_update(void);
-void preload_new_slb_context(unsigned long start, unsigned long sp);
#ifdef CONFIG_PPC_64S_HASH_MMU
void slb_set_size(u16 size);
diff --git a/arch/powerpc/kernel/process.c b/arch/powerpc/kernel/process.c
index 855e09886503..2b9799157eb4 100644
--- a/arch/powerpc/kernel/process.c
+++ b/arch/powerpc/kernel/process.c
@@ -1897,8 +1897,6 @@ int copy_thread(struct task_struct *p, const struct kernel_clone_args *args)
return 0;
}
-void preload_new_slb_context(unsigned long start, unsigned long sp);
-
/*
* Set up a thread for executing a new program
*/
@@ -1906,9 +1904,6 @@ void start_thread(struct pt_regs *regs, unsigned long start, unsigned long sp)
{
#ifdef CONFIG_PPC64
unsigned long load_addr = regs->gpr[2]; /* saved by ELF_PLAT_INIT */
-
- if (IS_ENABLED(CONFIG_PPC_BOOK3S_64) && !radix_enabled())
- preload_new_slb_context(start, sp);
#endif
#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
diff --git a/arch/powerpc/mm/book3s64/internal.h b/arch/powerpc/mm/book3s64/internal.h
index a57a25f06a21..c26a6f0c90fc 100644
--- a/arch/powerpc/mm/book3s64/internal.h
+++ b/arch/powerpc/mm/book3s64/internal.h
@@ -24,8 +24,6 @@ static inline bool stress_hpt(void)
void hpt_do_stress(unsigned long ea, unsigned long hpte_group);
-void slb_setup_new_exec(void);
-
void exit_lazy_flush_tlb(struct mm_struct *mm, bool always_flush);
#endif /* ARCH_POWERPC_MM_BOOK3S64_INTERNAL_H */
diff --git a/arch/powerpc/mm/book3s64/mmu_context.c b/arch/powerpc/mm/book3s64/mmu_context.c
index 4e1e45420bd4..fb9dcf9ca599 100644
--- a/arch/powerpc/mm/book3s64/mmu_context.c
+++ b/arch/powerpc/mm/book3s64/mmu_context.c
@@ -150,8 +150,6 @@ static int hash__init_new_context(struct mm_struct *mm)
void hash__setup_new_exec(void)
{
slice_setup_new_exec();
-
- slb_setup_new_exec();
}
#else
static inline int hash__init_new_context(struct mm_struct *mm)
diff --git a/arch/powerpc/mm/book3s64/slb.c b/arch/powerpc/mm/book3s64/slb.c
index 6b783552403c..7e053c561a09 100644
--- a/arch/powerpc/mm/book3s64/slb.c
+++ b/arch/powerpc/mm/book3s64/slb.c
@@ -328,94 +328,6 @@ static void preload_age(struct thread_info *ti)
ti->slb_preload_tail = (ti->slb_preload_tail + 1) % SLB_PRELOAD_NR;
}
-void slb_setup_new_exec(void)
-{
- struct thread_info *ti = current_thread_info();
- struct mm_struct *mm = current->mm;
- unsigned long exec = 0x10000000;
-
- WARN_ON(irqs_disabled());
-
- /*
- * preload cache can only be used to determine whether a SLB
- * entry exists if it does not start to overflow.
- */
- if (ti->slb_preload_nr + 2 > SLB_PRELOAD_NR)
- return;
-
- hard_irq_disable();
-
- /*
- * We have no good place to clear the slb preload cache on exec,
- * flush_thread is about the earliest arch hook but that happens
- * after we switch to the mm and have already preloaded the SLBEs.
- *
- * For the most part that's probably okay to use entries from the
- * previous exec, they will age out if unused. It may turn out to
- * be an advantage to clear the cache before switching to it,
- * however.
- */
-
- /*
- * preload some userspace segments into the SLB.
- * Almost all 32 and 64bit PowerPC executables are linked at
- * 0x10000000 so it makes sense to preload this segment.
- */
- if (!is_kernel_addr(exec)) {
- if (preload_add(ti, exec))
- slb_allocate_user(mm, exec);
- }
-
- /* Libraries and mmaps. */
- if (!is_kernel_addr(mm->mmap_base)) {
- if (preload_add(ti, mm->mmap_base))
- slb_allocate_user(mm, mm->mmap_base);
- }
-
- /* see switch_slb */
- asm volatile("isync" : : : "memory");
-
- local_irq_enable();
-}
-
-void preload_new_slb_context(unsigned long start, unsigned long sp)
-{
- struct thread_info *ti = current_thread_info();
- struct mm_struct *mm = current->mm;
- unsigned long heap = mm->start_brk;
-
- WARN_ON(irqs_disabled());
-
- /* see above */
- if (ti->slb_preload_nr + 3 > SLB_PRELOAD_NR)
- return;
-
- hard_irq_disable();
-
- /* Userspace entry address. */
- if (!is_kernel_addr(start)) {
- if (preload_add(ti, start))
- slb_allocate_user(mm, start);
- }
-
- /* Top of stack, grows down. */
- if (!is_kernel_addr(sp)) {
- if (preload_add(ti, sp))
- slb_allocate_user(mm, sp);
- }
-
- /* Bottom of heap, grows up. */
- if (heap && !is_kernel_addr(heap)) {
- if (preload_add(ti, heap))
- slb_allocate_user(mm, heap);
- }
-
- /* see switch_slb */
- asm volatile("isync" : : : "memory");
-
- local_irq_enable();
-}
-
static void slb_cache_slbie_kernel(unsigned int index)
{
unsigned long slbie_data = get_paca()->slb_cache[index];
--
2.50.1
3 weeks
- 1
- 0
Re: [PATCH v3] mm: slub: avoid wake up kswapd in set_track_prepare
by Vlastimil Babka
On 8/29/25 13:29, yangshiguang wrote:
> At 2025-08-27 16:40:21, "Vlastimil Babka" <vbabka(a)suse.cz> wrote:
>
>>>
>>>>
>>>
>>> How about this?
>>>
>>> /* Preemption is disabled in ___slab_alloc() */
>>> - gfp_flags &= ~(__GFP_DIRECT_RECLAIM);
>>> + gfp_flags = (gfp_flags & ~(__GFP_DIRECT_RECLAIM | __GFP_NOFAIL)) |
>>> + __GFP_NOWARN;
>>
>>I'd suggest using gfp_nested_flags() and & ~(__GFP_DIRECT_RECLAIM);
>>
>
> However, gfp has been processed by gfp_nested_mask() in
> stack_depot_save_flags().
Aha, didn't notice. Good to know!
> Still need to call here?
No then we can indeed just mask out __GFP_DIRECT_RECLAIM.
Maybe the comment could say something like:
/*
* Preemption is disabled in ___slab_alloc() so we need to disallow
* blocking. The flags are further adjusted by gfp_nested_mask() in
* stack_depot itself.
*/
> set_track_prepare()
> ->stack_depot_save_flags()
>
>>> >--
>>>>Cheers,
>>>>Harry / Hyeonggon
3 weeks
- 2
- 1
[PATCH 2/3] drm/xe: Allow the pm notifier to continue on failure
by Thomas Hellström
Its actions are opportunistic anyway and will be completed
on device suspend.
Also restrict the scope of the pm runtime reference to
the notifier callback itself to make it easier to
follow.
Marking as a fix to simplify backporting of the fix
that follows in the series.
Fixes: c6a4d46ec1d7 ("drm/xe: evict user memory in PM notifier")
Cc: Matthew Auld <matthew.auld(a)intel.com>
Cc: Rodrigo Vivi <rodrigo.vivi(a)intel.com>
Cc: <stable(a)vger.kernel.org> # v6.16+
Signed-off-by: Thomas Hellström <thomas.hellstrom(a)linux.intel.com>
---
drivers/gpu/drm/xe/xe_pm.c | 14 ++++----------
1 file changed, 4 insertions(+), 10 deletions(-)
diff --git a/drivers/gpu/drm/xe/xe_pm.c b/drivers/gpu/drm/xe/xe_pm.c
index a2e85030b7f4..b57b46ad9f7c 100644
--- a/drivers/gpu/drm/xe/xe_pm.c
+++ b/drivers/gpu/drm/xe/xe_pm.c
@@ -308,28 +308,22 @@ static int xe_pm_notifier_callback(struct notifier_block *nb,
case PM_SUSPEND_PREPARE:
xe_pm_runtime_get(xe);
err = xe_bo_evict_all_user(xe);
- if (err) {
+ if (err)
drm_dbg(&xe->drm, "Notifier evict user failed (%d)\n", err);
- xe_pm_runtime_put(xe);
- break;
- }
err = xe_bo_notifier_prepare_all_pinned(xe);
- if (err) {
+ if (err)
drm_dbg(&xe->drm, "Notifier prepare pin failed (%d)\n", err);
- xe_pm_runtime_put(xe);
- }
+ xe_pm_runtime_put(xe);
break;
case PM_POST_HIBERNATION:
case PM_POST_SUSPEND:
+ xe_pm_runtime_get(xe);
xe_bo_notifier_unprepare_all_pinned(xe);
xe_pm_runtime_put(xe);
break;
}
- if (err)
- return NOTIFY_BAD;
-
return NOTIFY_DONE;
}
--
2.50.1
3 weeks, 1 day
- 3
- 4
[PATCH 5.4 000/403] 5.4.297-rc2 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 5.4.297 release.
There are 403 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Fri, 29 Aug 2025 07:37:48 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.297-rc…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 5.4.297-rc2
Al Viro <viro(a)zeniv.linux.org.uk>
alloc_fdtable(): change calling conventions.
Peter Oberparleiter <oberpar(a)linux.ibm.com>
s390/hypfs: Enable limited access during lockdown
Peter Oberparleiter <oberpar(a)linux.ibm.com>
s390/hypfs: Avoid unnecessary ioctl registration in debugfs
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
William Liu <will(a)willsroot.io>
net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
William Liu <will(a)willsroot.io>
net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
Jason Xing <kernelxing(a)tencent.com>
ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
Minhong He <heminhong(a)kylinos.cn>
ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
Dan Carpenter <dan.carpenter(a)linaro.org>
ALSA: usb-audio: Fix size validation in convert_chmap_v3()
Dan Carpenter <dan.carpenter(a)linaro.org>
scsi: qla4xxx: Prevent a potential error pointer dereference
Weitao Wang <WeitaoWang-oc(a)zhaoxin.com>
usb: xhci: Fix slot_id resource race conflict
Josef Bacik <josef(a)toxicpanda.com>
nfs: fix UAF in direct writes
Trond Myklebust <trond.myklebust(a)hammerspace.com>
NFS: Fix up commit deadlocks
Zhang Xiaoxu <zhangxiaoxu5(a)huawei.com>
cifs: Fix UAF in cifs_demultiplex_thread()
Dmitry Antipov <dmantipov(a)yandex.ru>
Bluetooth: fix use-after-free in device_for_each_child()
Davide Caratti <dcaratti(a)redhat.com>
act_mirred: use the backlog for nested calls to mirred ingress
Davide Caratti <dcaratti(a)redhat.com>
net/sched: act_mirred: better wording on protection against excessive stack growth
wenxu <wenxu(a)ucloud.cn>
net/sched: act_mirred: refactor the handle of xmit
Jiri Pirko <jiri(a)mellanox.com>
selftests: forwarding: tc_actions.sh: add matchall mirror test
Vlad Buslov <vladbu(a)mellanox.com>
net: sched: don't expose action qstats to skb_tc_reinsert()
Vlad Buslov <vladbu(a)mellanox.com>
net: sched: extract qstats update code into functions
Vlad Buslov <vladbu(a)mellanox.com>
net: sched: extract bstats update code into function
Vlad Buslov <vladbu(a)mellanox.com>
net: sched: extract common action counters update code into function
Lorenzo Stoakes <lstoakes(a)gmail.com>
mm: perform the mapping_map_writable() check after call_mmap()
Lorenzo Stoakes <lstoakes(a)gmail.com>
mm: update memfd seal write check to include F_SEAL_WRITE
Lorenzo Stoakes <lstoakes(a)gmail.com>
mm: drop the assumption that VM_SHARED always implies writable
Cong Wang <xiyou.wangcong(a)gmail.com>
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
Cong Wang <xiyou.wangcong(a)gmail.com>
sch_qfq: make qfq_qlen_notify() idempotent
Cong Wang <xiyou.wangcong(a)gmail.com>
sch_hfsc: make hfsc_qlen_notify() idempotent
Cong Wang <xiyou.wangcong(a)gmail.com>
sch_drr: make drr_qlen_notify() idempotent
Qu Wenruo <wqu(a)suse.com>
btrfs: populate otime when logging an inode item
Jorge Ramirez-Ortiz <jorge.ramirez(a)oss.qualcomm.com>
media: venus: hfi: explicitly release IRQ during teardown
Chao Yu <chao(a)kernel.org>
f2fs: fix to avoid out-of-boundary access in dnode page
Jorge Ramirez-Ortiz <jorge.ramirez(a)oss.qualcomm.com>
media: venus: protect against spurious interrupts during probe
Vladimir Zapolskiy <vladimir.zapolskiy(a)linaro.org>
media: qcom: camss: cleanup media device allocated resource on error path
Ricardo Ribalda <ribalda(a)chromium.org>
media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
Imre Deak <imre.deak(a)intel.com>
drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Fix duty and period setting
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Handle hardware enable and clock enable separately
Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de>
pwm: mediatek: Implement .apply() callback
Gui-Dong Han <hanguidong02(a)gmail.com>
media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
Sakari Ailus <sakari.ailus(a)linux.intel.com>
media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
Hans Verkuil <hverkuil-cisco(a)xs4all.nl>
media: v4l2-ctrls: always copy the controls on completion
Damien Le Moal <dlemoal(a)kernel.org>
ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com>
soc: qcom: mdt_loader: Ensure we don't read past the ELF header
Meagan Lloyd <meaganlloyd(a)linux.microsoft.com>
rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
Johan Hovold <johan(a)kernel.org>
usb: musb: omap2430: fix device leak at unbind
Trond Myklebust <trond.myklebust(a)hammerspace.com>
NFS: Fix the setting of capabilities when automounting a new filesystem
Trond Myklebust <trond.myklebust(a)hammerspace.com>
NFS: Fix up handling of outstanding layoutcommit in nfs_update_inode()
Trond Myklebust <trond.myklebust(a)hammerspace.com>
NFSv4: Fix nfs4_bitmap_copy_adjust()
Sebastian Reichel <sebastian.reichel(a)collabora.com>
usb: typec: fusb302: cache PD RX state
Oliver Neukum <oneukum(a)suse.com>
cdc-acm: fix race between initial clearing halt and open
Johan Hovold <johan(a)kernel.org>
USB: cdc-acm: do not log successful probe on later errors
Breno Leitao <leitao(a)debian.org>
mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
He Zhe <zhe.he(a)windriver.com>
mm/kmemleak: turn kmemleak_lock and object->lock to raw_spinlock_t
Geoffrey D. Bennett <g(a)b4.vu>
ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
Dave Hansen <dave.hansen(a)linux.intel.com>
x86/fpu: Delay instruction pointer fixup until after warning
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
Jeff Layton <jlayton(a)kernel.org>
nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
Maulik Shah <maulik.shah(a)oss.qualcomm.com>
pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
Steven Rostedt <rostedt(a)goodmis.org>
tracing: Add down_write(trace_event_sem) when adding trace event
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: hub: Don't try to recover devices lost during warm reset.
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: hub: avoid warm port reset during USB3 disconnect
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce/amd: Add default names for MCA banks and blocks
Zhang Lixu <lixu.zhang(a)intel.com>
iio: hid-sensor-prox: Fix incorrect OFFSET calculation
Chao Yu <chao(a)kernel.org>
f2fs: fix to do sanity check on ino and xnid
Harry Yoo <harry.yoo(a)oracle.com>
mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
Miaohe Lin <linmiaohe(a)huawei.com>
mm/zsmalloc.c: convert to use kmem_cache_zalloc in cache_alloc_zspage()
Lin.Cao <lincao12(a)amd.com>
drm/sched: Remove optimization that causes hang when killing dependent jobs
Haoxiang Li <haoxiang_li2024(a)163.com>
ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
Ammar Faizi <ammarfaizi2(a)gnuweeb.org>
net: usbnet: Fix the wrong netif_carrier_on() call
John Ernberg <john.ernberg(a)actia.se>
net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
Lukas Wunner <lukas(a)wunner.de>
PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
Li Zhong <floridsleeves(a)gmail.com>
ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fix initialization of data for instructions that write to subdevice
Nathan Chancellor <nathan(a)kernel.org>
kbuild: Add KBUILD_CPPFLAGS to as-option invocation
Masahiro Yamada <masahiroy(a)kernel.org>
kbuild: add $(CLANG_FLAGS) to KBUILD_CPPFLAGS
Nathan Chancellor <nathan(a)kernel.org>
kbuild: Add CLANG_FLAGS to as-instr
Nathan Chancellor <nathan(a)kernel.org>
mips: Include KBUILD_CPPFLAGS in CHECKFLAGS invocation
Nick Desaulniers <ndesaulniers(a)google.com>
kbuild: Update assembler calls to use proper flags and language target
Nathan Chancellor <nathan(a)kernel.org>
ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
Kuen-Han Tsai <khtsai(a)google.com>
usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
Zenm Chen <zenmchen(a)gmail.com>
USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
Thorsten Blum <thorsten.blum(a)linux.dev>
usb: storage: realtek_cr: Use correct byte order for bcs->Residue
Mael GUERIN <mael.guerin(a)murena.io>
USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
Miao Li <limiao(a)kylinos.cn>
usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
David Lechner <dlechner(a)baylibre.com>
iio: proximity: isl29501: fix buffered read on big-endian systems
Steven Rostedt <rostedt(a)goodmis.org>
ftrace: Also allocate and copy hash for reading of filter files
Xu Yilun <yilun.xu(a)linux.intel.com>
fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
Al Viro <viro(a)zeniv.linux.org.uk>
use uniform permission checks for all mount propagation changes
Pavel Tikhomirov <ptikhomirov(a)virtuozzo.com>
move_mount: allow to add a mount into an existing group
Ye Bin <yebin10(a)huawei.com>
fs/buffer: fix use-after-free when call bh_read() helper
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
Phillip Lougher <phillip(a)squashfs.org.uk>
squashfs: fix memory leak in squashfs_fill_super
Jiayi Li <lijiayi(a)kylinos.cn>
memstick: Fix deadlock by moving removing flag earlier
Vedang Nagar <quic_vnagar(a)quicinc.com>
media: venus: Add a check for packet size after reading from shared memory
Zhang Shurong <zhang_shurong(a)foxmail.com>
media: ov2659: Fix memory leaks in ov2659_probe()
Ludwig Disterhof <ludwig(a)disterhof.eu>
media: usbtv: Lock resolution while streaming
Haoxiang Li <haoxiang_li2024(a)163.com>
media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
Dan Carpenter <dan.carpenter(a)linaro.org>
media: gspca: Add bounds checking to firmware parser
Jon Hunter <jonathanh(a)nvidia.com>
soc/tegra: pmc: Ensure power-domains are in a known state
Baokun Li <libaokun1(a)huawei.com>
jbd2: prevent softlockup in jbd2_log_do_checkpoint()
Damien Le Moal <dlemoal(a)kernel.org>
PCI: endpoint: Fix configfs group removal on driver teardown
Damien Le Moal <dlemoal(a)kernel.org>
PCI: endpoint: Fix configfs group list head handling
Thomas Fourier <fourier.thomas(a)gmail.com>
mtd: rawnand: fsmc: Add missing check after DMA map
Laurentiu Mihalcea <laurentiu.mihalcea(a)nxp.com>
pwm: imx-tpm: Reset counter if CMOD is 0
Nathan Chancellor <nathan(a)kernel.org>
wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
Marek Szyprowski <m.szyprowski(a)samsung.com>
zynq_fpga: use sgtable-based scatterlist wrappers
Damien Le Moal <dlemoal(a)kernel.org>
ata: libata-scsi: Fix ata_to_sense_error() status handling
Ojaswin Mujoo <ojaswin(a)linux.ibm.com>
ext4: fix reserved gdt blocks handling in fsmap
Ojaswin Mujoo <ojaswin(a)linux.ibm.com>
ext4: fix fsmap end of range reporting with bigalloc
Andreas Dilger <adilger(a)dilger.ca>
ext4: check fast symlink for ea_inode correctly
Helge Deller <deller(a)gmx.de>
Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
Myrrh Periwinkle <myrrhperiwinkle(a)qtmlabs.xyz>
vt: defkeymap: Map keycodes above 127 to K_HOLE
Myrrh Periwinkle <myrrhperiwinkle(a)qtmlabs.xyz>
vt: keyboard: Don't process Unicode characters in K_OFF mode
Johan Hovold <johan(a)kernel.org>
usb: dwc3: meson-g12a: fix device leaks at unbind
Johan Hovold <johan(a)kernel.org>
usb: gadget: udc: renesas_usb3: fix device leak at unbind
Nathan Chancellor <nathan(a)kernel.org>
usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
Finn Thain <fthain(a)linux-m68k.org>
m68k: Fix lost column on framebuffer debug console
Dan Carpenter <dan.carpenter(a)linaro.org>
cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
Yunhui Cui <cuiyunhui(a)bytedance.com>
serial: 8250: fix panic due to PSLVERR
Ricardo Ribalda <ribalda(a)chromium.org>
media: uvcvideo: Do not mark valid metadata as invalid
Youngjun Lee <yjjuny.lee(a)samsung.com>
media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
Waiman Long <longman(a)redhat.com>
mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
Randy Dunlap <rdunlap(a)infradead.org>
parisc: Makefile: fix a typo in palo.conf
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix log tree replay failure due to file with 0 links and extents
Eric Biggers <ebiggers(a)kernel.org>
thunderbolt: Fix copy+paste error in match_service_id()
Ian Abbott <abbotti(a)mev.co.uk>
comedi: fix race between polling and detaching
Ricky Wu <ricky_wu(a)realtek.com>
misc: rtsx: usb: Ensure mmc child device is active when card is present
Jack Xiao <Jack.Xiao(a)amd.com>
drm/amdgpu: fix incorrect vm flags to map bo
Jiasheng Jiang <jiashengjiangcool(a)gmail.com>
scsi: lpfc: Remove redundant assignment to avoid memory leak
Meagan Lloyd <meaganlloyd(a)linux.microsoft.com>
rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Fix uninited ptr deref in block/scsi layout
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Handle RPC size limit for layoutcommits
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Fix disk addr range check in block/scsi layout
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Fix stripe mapping in block/scsi layout
Buday Csaba <buday.csaba(a)prolan.hu>
net: phy: smsc: add proper reset flags for LAN8710A
Corey Minyard <corey(a)minyard.net>
ipmi: Fix strcpy source and destination the same
Yann E. MORIN <yann.morin.1998(a)free.fr>
kconfig: lxdialog: fix 'space' to (de)select options
Masahiro Yamada <masahiroy(a)kernel.org>
kconfig: gconf: fix potential memory leak in renderer_edited()
Masahiro Yamada <masahiroy(a)kernel.org>
kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
Breno Leitao <leitao(a)debian.org>
ipmi: Use dev_warn_ratelimited() for incorrect message warnings
John Garry <john.g.garry(a)oracle.com>
scsi: aacraid: Stop using PCI_IRQ_AFFINITY
Ranjan Kumar <ranjan.kumar(a)broadcom.com>
scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
Shankari Anand <shankari.ak0208(a)gmail.com>
kconfig: nconf: Ensure null termination where strncpy is used
Suchit Karunakaran <suchitkarunakaran(a)gmail.com>
kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
i3c: don't fail if GETHDRCAP is unsupported
Timothy Pearson <tpearson(a)raptorengineering.com>
PCI: pnv_php: Work around switches with broken presence detection
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
i3c: add missing include to internal header
chenchangcheng <chenchangcheng(a)kylinos.cn>
media: uvcvideo: Fix bandwidth issue for Alcor camera
Alex Guo <alexguo1023(a)gmail.com>
media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
Alex Guo <alexguo1023(a)gmail.com>
media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
media: usb: hdpvr: disable zero-length read messages
Dave Stevenson <dave.stevenson(a)raspberrypi.com>
media: tc358743: Increase FIFO trigger level to 374
Dave Stevenson <dave.stevenson(a)raspberrypi.com>
media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
Dave Stevenson <dave.stevenson(a)raspberrypi.com>
media: tc358743: Check I2C succeeded during probe
Cheick Traore <cheick.traore(a)foss.st.com>
pinctrl: stm32: Manage irq affinity settings
Damien Le Moal <dlemoal(a)kernel.org>
scsi: mpt3sas: Correctly handle ATA device errors
Justin Tee <justin.tee(a)broadcom.com>
scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
Yury Norov [NVIDIA] <yury.norov(a)gmail.com>
RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
Arnaud Lecomte <contact(a)arnaud-lcm.com>
jfs: upper bound check of tree index in dbAllocAG
Edward Adam Davis <eadavis(a)qq.com>
jfs: Regular file corruption check
Lizhi Xu <lizhi.xu(a)windriver.com>
jfs: truncate good inode pages when hard link is 0
jackysliu <1972843537(a)qq.com>
scsi: bfa: Double-free fix
Shiji Yang <yangshiji66(a)outlook.com>
MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
Sebastian Reichel <sebastian.reichel(a)collabora.com>
watchdog: dw_wdt: Fix default timeout
Amir Mohammad Jahangirzad <a.jahangirzad(a)gmail.com>
fs/orangefs: use snprintf() instead of sprintf()
Showrya M N <showrya(a)chelsio.com>
scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
Theodore Ts'o <tytso(a)mit.edu>
ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
Pali Rohár <pali(a)kernel.org>
cifs: Fix calling CIFSFindFirst() for root path without msearch
Jason Wang <jasowang(a)redhat.com>
vhost: fail early when __vhost_add_used() fails
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
Jakub Kicinski <kuba(a)kernel.org>
uapi: in6: restore visibility of most IPv6 socket options
Hari Kalavakunta <kalavakunta.hari.prasad(a)gmail.com>
net: ncsi: Fix buffer overflow in fetching version id
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
Gal Pressman <gal(a)nvidia.com>
net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
Stanislaw Gruszka <stf_xl(a)wp.pl>
wifi: iwlegacy: Check rate_idx range after addition
Mina Almasry <almasrymina(a)google.com>
netmem: fix skb_frag_address_safe with unreadable skbs
Thomas Fourier <fourier.thomas(a)gmail.com>
wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
Pagadala Yesu Anjaneyulu <pagadala.yesu.anjaneyulu(a)intel.com>
wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
Rand Deeb <rand.sec96(a)gmail.com>
wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
Jonas Rebmann <jre(a)pengutronix.de>
net: fec: allow disable coalescing
Thomas Fourier <fourier.thomas(a)gmail.com>
(powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
Sven Schnelle <svens(a)linux.ibm.com>
s390/stp: Remove udelay from stp_sync_clock()
Avraham Stern <avraham.stern(a)intel.com>
wifi: iwlwifi: mvm: fix scan request validation
Alok Tiwari <alok.a.tiwari(a)oracle.com>
net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
Oscar Maes <oscmaes92(a)gmail.com>
net: ipv4: fix incorrect MTU in broadcast routes
Ilan Peer <ilan.peer(a)intel.com>
wifi: cfg80211: Fix interface type validation
Paul E. McKenney <paulmck(a)kernel.org>
rcu: Protect ->defer_qs_iw_pending from data race
Thomas Fourier <fourier.thomas(a)gmail.com>
net: ag71xx: Add missing check after DMA map
Thomas Fourier <fourier.thomas(a)gmail.com>
et131x: Add missing check after DMA map
Alok Tiwari <alok.a.tiwari(a)oracle.com>
be2net: Use correct byte order and format string for TCP seq and ack_seq
Sven Schnelle <svens(a)linux.ibm.com>
s390/time: Use monotonic clock in get_cycles()
Johannes Berg <johannes.berg(a)intel.com>
wifi: cfg80211: reject HTC bit for management frames
Steven Rostedt <rostedt(a)goodmis.org>
ktest.pl: Prevent recursion of default variable options
Xinxin Wan <xinxin.wan(a)intel.com>
ASoC: codecs: rt5640: Retry DEVICE_ID verification
Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com>
ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
Lucy Thrun <lucy.thrun(a)digital-rabbithole.de>
ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
Kees Cook <kees(a)kernel.org>
platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
Gautham R. Shenoy <gautham.shenoy(a)amd.com>
pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
Oliver Neukum <oneukum(a)suse.com>
usb: core: usb_submit_urb: downgrade type check
Alok Tiwari <alok.a.tiwari(a)oracle.com>
ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
Mark Brown <broonie(a)kernel.org>
ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
Ulf Hansson <ulf.hansson(a)linaro.org>
mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
Breno Leitao <leitao(a)debian.org>
ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
Sebastian Ott <sebott(a)redhat.com>
ACPI: processor: fix acpi_object initialization
tuhaowen <tuhaowen(a)uniontech.com>
PM: sleep: console: Fix the black screen issue
Hsin-Te Yuan <yuanhsinte(a)chromium.org>
thermal: sysfs: Return ENODATA instead of EAGAIN for reads
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
selftests: tracing: Use mutex_unlock for testing glob filter
Aaron Kling <webgeek1234(a)gmail.com>
ARM: tegra: Use I/O memcpy to write to IRAM
Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org>
gpio: tps65912: check the return value of regmap_update_bits()
Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com>
ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
Alexander Kochetkov <al.kochet(a)gmail.com>
ARM: rockchip: fix kernel hang during smp initialization
Lifeng Zheng <zhenglifeng1(a)huawei.com>
cpufreq: Exit governor when failed to start old governor
Mario Limonciello <mario.limonciello(a)amd.com>
usb: xhci: Avoid showing errors during surprise removal
Jay Chen <shawn2000100(a)gmail.com>
usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
Mario Limonciello <mario.limonciello(a)amd.com>
usb: xhci: Avoid showing warnings for dying controller
Cynthia Huang <cynthia(a)andestech.com>
selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
Su Hui <suhui(a)nfschina.com>
usb: xhci: print xhci->xhc_state when queue_command failed
Al Viro <viro(a)zeniv.linux.org.uk>
securityfs: don't pin dentries twice, once is enough...
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfs: fix not erasing deleted b-tree node issue
Sarah Newman <srn(a)prgmr.com>
drbd: add missing kref_get in handle_write_conflicts
Jan Kara <jack(a)suse.cz>
udf: Verify partition map count
Kees Cook <kees(a)kernel.org>
arm64: Handle KCOV __init vs inline mismatches
Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp>
hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfs: fix slab-out-of-bounds in hfs_bnode_read()
Xin Long <lucien.xin(a)gmail.com>
sctp: linearize cloned gso packets in sctp_rcv
Florian Westphal <fw(a)strlen.de>
netfilter: ctnetlink: fix refcount leak on table dump
Sabrina Dubroca <sd(a)queasysnail.net>
udp: also consider secpath when evaluating ipsec use for checksumming
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
ACPI: processor: perflib: Move problematic pr->performance check
Jiayi Li <lijiayi(a)kylinos.cn>
ACPI: processor: perflib: Fix initial _PPC limit application
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
Documentation: ACPI: Fix parent device references
Sasha Levin <sashal(a)kernel.org>
fs: Prevent file descriptor table allocations exceeding INT_MAX
Ma Ke <make24(a)iscas.ac.cn>
sunvdc: Balance device refcount in vdc_port_mpgroup_check
Dai Ngo <dai.ngo(a)oracle.com>
NFSD: detect mismatch of file handle and delegation stateid in OPEN op
Johan Hovold <johan(a)kernel.org>
net: dpaa: fix device leak when querying time stamp info
Johan Hovold <johan(a)kernel.org>
net: gianfar: fix device leak when querying time stamp info
Fedor Pchelkin <pchelkin(a)ispras.ru>
netlink: avoid infinite retry looping in netlink_unicast()
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Validate UAC3 cluster segment descriptors
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Validate UAC3 power domain descriptors, too
Pavel Begunkov <asml.silence(a)gmail.com>
io_uring: don't use int for ABI
Tao Xue <xuetao09(a)huawei.com>
usb: gadget : fix use-after-free in composite_dev_cleanup()
Jiaxun Yang <jiaxun.yang(a)flygoat.com>
MIPS: mm: tlb-r4k: Uniquify TLB entries on init
Slark Xiao <slark_xiao(a)163.com>
USB: serial: option: add Foxconn T99W709
Budimir Markovic <markovicbudimir(a)gmail.com>
vsock: Do not allow binding to VMADDR_PORT_ANY
Quang Le <quanglex97(a)gmail.com>
net/packet: fix a race in packet_set_ring() and packet_notifier()
Thomas Gleixner <tglx(a)linutronix.de>
perf/core: Prevent VMA split of buffer mappings
Thomas Gleixner <tglx(a)linutronix.de>
perf/core: Exit early on perf_mmap() fail
Thomas Gleixner <tglx(a)linutronix.de>
perf/core: Don't leak AUX buffer refcount on allocation failure
Eric Dumazet <edumazet(a)google.com>
pptp: fix pptp_xmit() error path
Stefan Metzmacher <metze(a)samba.org>
smb: client: let recv_done() cleanup before notifying the callers.
Michal Schmidt <mschmidt(a)redhat.com>
benet: fix BUG when creating VFs
Wang Liang <wangliang74(a)huawei.com>
net: drop UFO packets in udp_rcv_segment()
Eric Dumazet <edumazet(a)google.com>
ipv6: reject malicious packets in ipv6_gso_segment()
Eric Dumazet <edumazet(a)google.com>
pptp: ensure minimal skb length in pptp_xmit()
Jakub Kicinski <kuba(a)kernel.org>
netpoll: prevent hanging NAPI when netcons gets enabled
Trond Myklebust <trond.myklebust(a)hammerspace.com>
NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
Frederic Barrat <fbarrat(a)linux.ibm.com>
pci/hotplug/pnv-php: Wrap warnings in macro
Frederic Barrat <fbarrat(a)linux.ibm.com>
pci/hotplug/pnv-php: Improve error msg on power state change failure
Peter Chen <peter.chen(a)nxp.com>
usb: chipidea: udc: fix sleeping function called from invalid context
Chao Yu <chao(a)kernel.org>
f2fs: fix to avoid out-of-boundary access in devs.path
Chao Yu <chao(a)kernel.org>
f2fs: fix to avoid panic in f2fs_evict_inode
Chao Yu <chao(a)kernel.org>
f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
Brian Masney <bmasney(a)redhat.com>
rtc: pcf8563: fix incorrect maximum clock rate handling
Brian Masney <bmasney(a)redhat.com>
rtc: hym8563: fix incorrect maximum clock rate handling
Brian Masney <bmasney(a)redhat.com>
rtc: ds1307: fix incorrect maximum clock rate handling
Petr Pavlu <petr.pavlu(a)suse.com>
module: Restore the moduleparam prefix length check
Paul Chaignon <paul.chaignon(a)gmail.com>
bpf: Check flow_dissector ctx accesses are aligned
Balamanikandan Gunasundar <balamanikandan.gunasundar(a)microchip.com>
mtd: rawnand: atmel: set pmecc data setup time
Thomas Fourier <fourier.thomas(a)gmail.com>
mtd: rawnand: atmel: Fix dma_mapping_error() address
Zheng Yu <zheng.yu(a)northwestern.edu>
jfs: fix metapage reference count leak in dbAllocCtl
Chenyuan Yang <chenyuan0y(a)gmail.com>
fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
Giovanni Cabiddu <giovanni.cabiddu(a)intel.com>
crypto: qat - fix seq_file position update in adf_ring_next()
Thomas Fourier <fourier.thomas(a)gmail.com>
dmaengine: nbpfaxi: Add missing check after DMA map
Thomas Fourier <fourier.thomas(a)gmail.com>
dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
Dan Carpenter <dan.carpenter(a)linaro.org>
fs/orangefs: Allow 2 more characters in do_c_string()
Bard Liao <yung-chuan.liao(a)linux.intel.com>
soundwire: stream: restore params when prepare ports fail
Thomas Fourier <fourier.thomas(a)gmail.com>
crypto: img-hash - Fix dma_unmap_sg() nents value
Ovidiu Panait <ovidiu.panait.oss(a)gmail.com>
hwrng: mtk - handle devm_pm_runtime_enable errors
Dan Carpenter <dan.carpenter(a)linaro.org>
watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
Thomas Fourier <fourier.thomas(a)gmail.com>
scsi: isci: Fix dma_unmap_sg() nents value
Thomas Fourier <fourier.thomas(a)gmail.com>
scsi: mvsas: Fix dma_unmap_sg() nents value
Thomas Fourier <fourier.thomas(a)gmail.com>
scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
Paul Kocialkowski <paulk(a)sys-base.io>
clk: sunxi-ng: v3s: Fix de clock definition
Leo Yan <leo.yan(a)arm.com>
perf tests bp_account: Fix leaked file descriptor
Mengbiao Xiong <xisme1998(a)gmail.com>
crypto: ccp - Fix crash when rebind ccp device for ccp.ko
Yuan Chen <chenyuan(a)kylinos.cn>
pinctrl: sunxi: Fix memory leak on krealloc failure
Charles Han <hanchunchao(a)inspur.com>
power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
Henry Martin <bsdhenrymartin(a)gmail.com>
clk: davinci: Add NULL check in davinci_lpsc_clk_register()
Ivan Stepchenko <sid(a)itb.spb.ru>
mtd: fix possible integer overflow in erase_xfer()
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: marvell/cesa - Fix engine load inaccuracy
Hans Zhang <18255117159(a)163.com>
PCI: rockchip-host: Fix "Unexpected Completion" log message
Stanislav Fomichev <sdf(a)fomichev.me>
vrf: Drop existing dst reference in vrf_ip6_input_dst
Xiumei Mu <xmu(a)redhat.com>
selftests: rtnetlink.sh: remove esp4_offload after test
Florian Westphal <fw(a)strlen.de>
netfilter: xt_nfacct: don't assume acct name is null-terminated
Jimmy Assarsson <extja(a)kvaser.com>
can: kvaser_usb: Assign netdev.dev_port based on device channel index
Jimmy Assarsson <extja(a)kvaser.com>
can: kvaser_pciefd: Store device channel index
Gokul Sivakumar <gokulkumar.sivakumar(a)infineon.com>
wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE
Remi Pommarel <repk(a)triplefau.lt>
Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
Thomas Fourier <fourier.thomas(a)gmail.com>
mwl8k: Add missing check after DMA map
Martin Kaistra <martin.kaistra(a)linutronix.de>
wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
William Liu <will(a)willsroot.io>
net/sched: Restrict conditions for adding duplicating netems to qdisc tree
Johan Korsnes <johan.korsnes(a)gmail.com>
arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
Fedor Pchelkin <pchelkin(a)ispras.ru>
netfilter: nf_tables: adjust lockdep assertions handling
Fedor Pchelkin <pchelkin(a)ispras.ru>
drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
Finn Thain <fthain(a)linux-m68k.org>
m68k: Don't unregister boot console needlessly
xin.guo <guoxin0309(a)gmail.com>
tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
Jiasheng Jiang <jiasheng(a)iscas.ac.cn>
iwlwifi: Add missing check for alloc_ordered_workqueue
Xiu Jianfeng <xiujianfeng(a)huawei.com>
wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
Daniil Dulov <d.dulov(a)aladdin.ru>
wifi: rtl818x: Kill URBs before clearing tx status queue
Arnd Bergmann <arnd(a)arndb.de>
caif: reduce stack size, again
Yuan Chen <chenyuan(a)kylinos.cn>
bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
Jiayuan Chen <jiayuan.chen(a)linux.dev>
bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
Alok Tiwari <alok.a.tiwari(a)oracle.com>
staging: nvec: Fix incorrect null termination of battery manufacturer
Brahmajit Das <listout(a)listout.xyz>
samples: mei: Fix building on musl libc
Lifeng Zheng <zhenglifeng1(a)huawei.com>
cpufreq: Init policy->rwsem before it may be possibly used
Annette Kobou <annette.kobou(a)kontron.de>
ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
Lucas De Marchi <lucas.demarchi(a)intel.com>
usb: early: xhci-dbc: Fix early_ioremap leak
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Revert "vmci: Prevent the dispatching of uninitialized payloads"
Denis OSTERLAND-HEIM <denis.osterland(a)diehl.com>
pps: fix poll support
Lizhi Xu <lizhi.xu(a)windriver.com>
vmci: Prevent the dispatching of uninitialized payloads
Abdun Nihaal <abdun.nihaal(a)gmail.com>
staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
ARM: dts: vfxxx: Correctly use two tuples for timer address
Arnd Bergmann <arnd(a)arndb.de>
ASoC: ops: dynamically allocate struct snd_ctl_elem_value
Yangtao Li <frank.li(a)vivo.com>
hfsplus: remove mutex_lock check in hfsplus_free_extents
Arnd Bergmann <arnd(a)arndb.de>
ASoC: Intel: fix SND_SOC_SOF dependencies
Arnd Bergmann <arnd(a)arndb.de>
ethernet: intel: fix building with large NR_CPUS
Xu Yang <xu.yang_2(a)nxp.com>
usb: phy: mxs: disconnect line when USB charger is attached
Xu Yang <xu.yang_2(a)nxp.com>
usb: chipidea: add USB PHY event
Peter Chen <peter.chen(a)nxp.com>
usb: chipidea: introduce CI_HDRC_CONTROLLER_VBUS_EVENT glue layer use
Jun Li <jun.li(a)nxp.com>
usb: chipidea: udc: protect usb interrupt enable
Peter Chen <peter.chen(a)nxp.com>
usb: chipidea: udc: add new API ci_hdrc_gadget_connect
Daniel Dadap <ddadap(a)nvidia.com>
ALSA: hda: Add missing NVIDIA HDA codec IDs
Ian Abbott <abbotti(a)mev.co.uk>
comedi: comedi_test: Fix possible deletion of uninitialized timers
Ryusuke Konishi <konishi.ryusuke(a)gmail.com>
nilfs2: reject invalid file types when reading inodes
Yang Xiwen <forbidden405(a)outlook.com>
i2c: qup: jump out of the loop in case of timeout
Xiang Mei <xmei5(a)asu.edu>
net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
Kito Xu (veritas501) <hxzene(a)gmail.com>
net: appletalk: Fix use-after-free in AARP proxy probe
Andrew Lunn <andrew(a)lunn.ch>
net: appletalk: fix kerneldoc warnings
Maor Gottlieb <maorg(a)nvidia.com>
RDMA/core: Rate limit GID cache warning messages
Alessandro Carminati <acarmina(a)redhat.com>
regulator: core: fix NULL dereference on unbind due to stale coupling data
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: hub: fix detection of high tier USB3 devices behind suspended hubs
Eric Dumazet <edumazet(a)google.com>
net_sched: sch_sfq: reject invalid perturb period
Octavian Purdila <tavip(a)google.com>
net_sched: sch_sfq: move the limit validation
Octavian Purdila <tavip(a)google.com>
net_sched: sch_sfq: use a temporary work area for validating configuration
Octavian Purdila <tavip(a)google.com>
net_sched: sch_sfq: don't allow 1 packet limit
Eric Dumazet <edumazet(a)google.com>
net_sched: sch_sfq: handle bigger packets
Eric Dumazet <edumazet(a)google.com>
net_sched: sch_sfq: annotate data-races around q->perturb_period
Zheng Wang <zyytlz.wz(a)163.com>
power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
Minghao Chi <chi.minghao(a)zte.com.cn>
power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync
Dinghao Liu <dinghao.liu(a)zju.edu.cn>
power: supply: bq24190_charger: Fix runtime PM imbalance on error
Hongyu Xie <xiehongyu1(a)kylinos.cn>
xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
Bui Quang Minh <minhquangbui99(a)gmail.com>
virtio-net: ensure the received length does not exceed allocated size
Arun Raghavan <arun(a)asymptotic.io>
ASoC: fsl_sai: Force a software reset when starting in consumer mode
Krishna Kurapati <krishna.kurapati(a)oss.qualcomm.com>
usb: dwc3: qcom: Don't leave BCR asserted
Drew Hamilton <drew.hamilton(a)zetier.com>
usb: musb: fix gadget state on disconnect
William Liu <will(a)willsroot.io>
net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
Dong Chenchen <dongchenchen2(a)huawei.com>
net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: SMP: If an unallowed command is received consider it a failure
Kuniyuki Iwashima <kuniyu(a)google.com>
Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
Oliver Neukum <oneukum(a)suse.com>
usb: net: sierra: check for no status endpoint
Xiang Mei <xmei5(a)asu.edu>
net/sched: sch_qfq: Fix race condition on qfq_aggregate
Alok Tiwari <alok.a.tiwari(a)oracle.com>
net: emaclite: Fix missing pointer increment in aligned_read()
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fix some signed shift left operations
Ian Abbott <abbotti(a)mev.co.uk>
comedi: das6402: Fix bit shift out of bounds
Ian Abbott <abbotti(a)mev.co.uk>
comedi: das16m1: Fix bit shift out of bounds
Ian Abbott <abbotti(a)mev.co.uk>
comedi: aio_iiro_16: Fix bit shift out of bounds
Ian Abbott <abbotti(a)mev.co.uk>
comedi: pcl812: Fix bit shift out of bounds
Chen Ni <nichen(a)iscas.ac.cn>
iio: adc: stm32-adc: Fix race in installing chained IRQ handler
Fabio Estevam <festevam(a)denx.de>
iio: adc: max1363: Reorder mode_list[] entries
Fabio Estevam <festevam(a)denx.de>
iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
Andrew Jeffery <andrew(a)codeconstruct.com.au>
soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
Andrew Jeffery <andrew(a)codeconstruct.com.au>
soc: aspeed: lpc-snoop: Cleanup resources in stack-order
Judith Mendez <jm(a)ti.com>
mmc: sdhci_am654: Workaround for Errata i2312
Edson Juliano Drosdeck <edson.drosdeck(a)gmail.com>
mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
Thomas Fourier <fourier.thomas(a)gmail.com>
mmc: bcm2835: Fix dma_unmap_sg() nents value
Nathan Chancellor <nathan(a)kernel.org>
memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
Jan Kara <jack(a)suse.cz>
isofs: Verify inode mode when loading from disk
Dan Carpenter <dan.carpenter(a)linaro.org>
dmaengine: nbpfaxi: Fix memory corruption in probe()
Yun Lu <luyun(a)kylinos.cn>
af_packet: fix soft lockup issue caused by tpacket_snd()
Yun Lu <luyun(a)kylinos.cn>
af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
Nathan Chancellor <nathan(a)kernel.org>
phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
Benjamin Tissoires <bentiss(a)kernel.org>
HID: core: do not bypass hid_hw_raw_request
Benjamin Tissoires <bentiss(a)kernel.org>
HID: core: ensure __hid_request reserves the report ID as the first byte
Benjamin Tissoires <bentiss(a)kernel.org>
HID: core: ensure the allocated report buffer can contain the reserved report ID
Thomas Fourier <fourier.thomas(a)gmail.com>
pch_uart: Fix dma_sync_sg_for_device() nents value
Nilton Perim Neto <niltonperimneto(a)gmail.com>
Input: xpad - set correct controller type for Acer NGR200
Clément Le Goffic <clement.legoffic(a)foss.st.com>
i2c: stm32: fix the device used for the DMA map
Xinyu Liu <1171169449(a)qq.com>
usb: gadget: configfs: Fix OOB read on empty string write
Ryan Mann (NDI) <rmann(a)ndigital.com>
USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
Slark Xiao <slark_xiao(a)163.com>
USB: serial: option: add Foxconn T99W640
Fabio Porcedda <fabio.porcedda(a)gmail.com>
USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
-------------
Diffstat:
Documentation/firmware-guide/acpi/i2c-muxes.rst | 8 +-
Makefile | 7 +-
arch/arm/Makefile | 2 +-
arch/arm/boot/dts/imx6ul-kontron-n6310-s.dts | 1 -
arch/arm/boot/dts/vfxxx.dtsi | 2 +-
arch/arm/mach-rockchip/platsmp.c | 15 +-
arch/arm/mach-tegra/reset.c | 2 +-
arch/arm64/include/asm/acpi.h | 2 +-
arch/m68k/Kconfig.debug | 2 +-
arch/m68k/kernel/early_printk.c | 42 +--
arch/m68k/kernel/head.S | 39 ++-
arch/mips/Makefile | 2 +-
arch/mips/include/asm/vpe.h | 8 +
arch/mips/kernel/process.c | 16 +-
arch/mips/mm/tlb-r4k.c | 56 +++-
arch/parisc/Makefile | 2 +-
arch/powerpc/configs/ppc6xx_defconfig | 1 -
arch/powerpc/platforms/512x/mpc512x_lpbfifo.c | 6 +-
arch/s390/hypfs/hypfs_dbfs.c | 19 +-
arch/s390/include/asm/timex.h | 13 +-
arch/s390/kernel/time.c | 2 +-
arch/x86/kernel/cpu/mce/amd.c | 13 +-
arch/x86/mm/extable.c | 5 +-
drivers/acpi/acpi_processor.c | 2 +-
drivers/acpi/apei/ghes.c | 2 +
drivers/acpi/processor_idle.c | 4 +-
drivers/acpi/processor_perflib.c | 11 +
drivers/ata/Kconfig | 35 ++-
drivers/ata/libata-scsi.c | 20 +-
drivers/base/power/domain_governor.c | 18 +-
drivers/base/power/runtime.c | 5 +
drivers/block/drbd/drbd_receiver.c | 6 +-
drivers/block/sunvdc.c | 4 +-
drivers/char/hw_random/mtk-rng.c | 4 +-
drivers/char/ipmi/ipmi_msghandler.c | 8 +-
drivers/char/ipmi/ipmi_watchdog.c | 59 +++--
drivers/clk/davinci/psc.c | 5 +
drivers/clk/sunxi-ng/ccu-sun8i-v3s.c | 3 +-
drivers/cpufreq/armada-8k-cpufreq.c | 2 +-
drivers/cpufreq/cpufreq.c | 11 +-
drivers/crypto/ccp/ccp-debugfs.c | 3 +
drivers/crypto/img-hash.c | 2 +-
drivers/crypto/marvell/cipher.c | 4 +-
drivers/crypto/marvell/hash.c | 5 +-
.../crypto/qat/qat_common/adf_transport_debug.c | 4 +-
drivers/dma/mv_xor.c | 21 +-
drivers/dma/nbpfaxi.c | 24 +-
drivers/fpga/zynq-fpga.c | 10 +-
drivers/gpio/gpio-tps65912.c | 7 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_csa.c | 4 +-
.../gpu/drm/amd/display/dc/bios/command_table.c | 2 +-
.../amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 30 ++-
drivers/gpu/drm/amd/powerplay/hwmgr/smu_helper.c | 2 +-
drivers/gpu/drm/drm_dp_helper.c | 2 +-
drivers/gpu/drm/scheduler/sched_entity.c | 23 +-
drivers/hid/hid-core.c | 21 +-
drivers/i2c/busses/i2c-qup.c | 4 +-
drivers/i2c/busses/i2c-stm32.c | 8 +-
drivers/i2c/busses/i2c-stm32f7.c | 4 +-
drivers/i3c/internals.h | 1 +
drivers/i3c/master.c | 2 +-
drivers/iio/adc/max1363.c | 43 ++-
drivers/iio/adc/stm32-adc-core.c | 7 +-
drivers/iio/light/hid-sensor-prox.c | 3 +-
drivers/iio/proximity/isl29501.c | 14 +-
drivers/infiniband/core/cache.c | 4 +-
drivers/infiniband/hw/hfi1/affinity.c | 44 +--
drivers/input/joystick/xpad.c | 2 +-
drivers/media/dvb-frontends/dib7000p.c | 8 +
drivers/media/i2c/ov2659.c | 3 +-
drivers/media/i2c/tc358743.c | 86 +++---
drivers/media/platform/qcom/camss/camss.c | 4 +-
drivers/media/platform/qcom/venus/core.c | 8 +-
drivers/media/platform/qcom/venus/core.h | 2 +
drivers/media/platform/qcom/venus/hfi_venus.c | 5 +
drivers/media/platform/qcom/venus/vdec.c | 5 +-
drivers/media/usb/gspca/vicam.c | 10 +-
drivers/media/usb/hdpvr/hdpvr-i2c.c | 6 +
drivers/media/usb/rainshadow-cec/rainshadow-cec.c | 3 +-
drivers/media/usb/usbtv/usbtv-video.c | 4 +
drivers/media/usb/uvc/uvc_driver.c | 3 +
drivers/media/usb/uvc/uvc_video.c | 21 +-
drivers/media/v4l2-core/v4l2-ctrls.c | 37 ++-
drivers/memstick/core/memstick.c | 3 +-
drivers/memstick/host/rtsx_usb_ms.c | 1 +
drivers/misc/cardreader/rtsx_usb.c | 16 +-
drivers/mmc/host/bcm2835.c | 3 +-
drivers/mmc/host/rtsx_usb_sdmmc.c | 4 +-
drivers/mmc/host/sdhci-pci-core.c | 3 +-
drivers/mmc/host/sdhci_am654.c | 9 +-
drivers/mtd/ftl.c | 2 +-
drivers/mtd/nand/raw/atmel/nand-controller.c | 2 +-
drivers/mtd/nand/raw/atmel/pmecc.c | 6 +
drivers/mtd/nand/raw/fsmc_nand.c | 2 +
drivers/net/can/kvaser_pciefd.c | 1 +
drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 1 +
drivers/net/dsa/b53/b53_common.c | 31 ++-
drivers/net/dsa/b53/b53_regs.h | 1 +
drivers/net/ethernet/agere/et131x.c | 36 +++
drivers/net/ethernet/atheros/ag71xx.c | 9 +
drivers/net/ethernet/cavium/thunder/thunder_bgx.c | 4 +-
drivers/net/ethernet/emulex/benet/be_cmds.c | 2 +-
drivers/net/ethernet/emulex/benet/be_main.c | 8 +-
drivers/net/ethernet/freescale/dpaa/dpaa_ethtool.c | 4 +-
drivers/net/ethernet/freescale/fec_main.c | 34 ++-
drivers/net/ethernet/freescale/gianfar_ethtool.c | 4 +-
drivers/net/ethernet/intel/fm10k/fm10k.h | 3 +-
drivers/net/ethernet/intel/i40e/i40e.h | 2 +-
drivers/net/ethernet/intel/ice/ice_flex_pipe.c | 2 +
drivers/net/ethernet/intel/ixgbe/ixgbe.h | 3 +-
drivers/net/ethernet/intel/ixgbe/ixgbe_xsk.c | 4 +-
drivers/net/ethernet/xilinx/xilinx_emaclite.c | 2 +-
drivers/net/phy/smsc.c | 1 +
drivers/net/ppp/pptp.c | 18 +-
drivers/net/usb/sierra_net.c | 4 +
drivers/net/usb/usbnet.c | 11 +-
drivers/net/virtio_net.c | 38 ++-
drivers/net/vrf.c | 2 +
.../broadcom/brcm80211/brcmfmac/cfg80211.c | 8 +-
.../broadcom/brcm80211/brcmsmac/phy/phy_lcn.c | 2 +-
drivers/net/wireless/intel/iwlegacy/4965-mac.c | 5 +-
drivers/net/wireless/intel/iwlwifi/dvm/main.c | 11 +-
drivers/net/wireless/intel/iwlwifi/dvm/rs.c | 2 +-
drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 7 +-
drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 4 +-
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 2 +-
drivers/net/wireless/marvell/mwl8k.c | 4 +
drivers/net/wireless/realtek/rtl818x/rtl8187/dev.c | 3 +-
.../net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 2 +-
drivers/net/wireless/realtek/rtlwifi/pci.c | 18 +-
drivers/pci/controller/pcie-rockchip-host.c | 2 +-
drivers/pci/endpoint/pci-ep-cfs.c | 1 +
drivers/pci/endpoint/pci-epf-core.c | 2 +-
drivers/pci/hotplug/pnv_php.c | 90 +++++--
drivers/pci/pci-acpi.c | 4 +-
drivers/pci/pci.c | 8 +-
drivers/pci/probe.c | 2 +-
drivers/pinctrl/stm32/pinctrl-stm32.c | 1 +
drivers/pinctrl/sunxi/pinctrl-sunxi.c | 11 +-
drivers/platform/x86/thinkpad_acpi.c | 4 +-
drivers/power/supply/bq24190_charger.c | 60 ++---
drivers/power/supply/max14577_charger.c | 4 +-
drivers/pps/pps.c | 11 +-
drivers/pwm/pwm-imx-tpm.c | 9 +
drivers/pwm/pwm-mediatek.c | 78 ++++--
drivers/regulator/core.c | 1 +
drivers/rtc/rtc-ds1307.c | 17 +-
drivers/rtc/rtc-hym8563.c | 2 +-
drivers/rtc/rtc-pcf8563.c | 2 +-
drivers/scsi/aacraid/comminit.c | 3 +-
drivers/scsi/bfa/bfad_im.c | 1 +
drivers/scsi/ibmvscsi_tgt/libsrp.c | 6 +-
drivers/scsi/isci/request.c | 2 +-
drivers/scsi/libiscsi.c | 3 +-
drivers/scsi/lpfc/lpfc_debugfs.c | 1 -
drivers/scsi/lpfc/lpfc_scsi.c | 4 +
drivers/scsi/mpt3sas/mpt3sas_scsih.c | 19 ++
drivers/scsi/mvsas/mv_sas.c | 4 +-
drivers/scsi/qla4xxx/ql4_os.c | 2 +
drivers/scsi/scsi_scan.c | 2 +-
drivers/scsi/scsi_transport_sas.c | 62 ++++-
drivers/soc/aspeed/aspeed-lpc-snoop.c | 13 +-
drivers/soc/qcom/mdt_loader.c | 41 +++
drivers/soc/tegra/pmc.c | 51 ++--
drivers/soundwire/stream.c | 2 +-
drivers/staging/comedi/comedi_compat32.c | 3 +
drivers/staging/comedi/comedi_fops.c | 60 ++++-
drivers/staging/comedi/comedi_internal.h | 1 +
drivers/staging/comedi/drivers.c | 30 ++-
drivers/staging/comedi/drivers/aio_iiro_16.c | 3 +-
drivers/staging/comedi/drivers/comedi_test.c | 2 +-
drivers/staging/comedi/drivers/das16m1.c | 3 +-
drivers/staging/comedi/drivers/das6402.c | 3 +-
drivers/staging/comedi/drivers/pcl812.c | 3 +-
drivers/staging/fbtft/fbtft-core.c | 1 +
drivers/staging/media/imx/imx-media-csc-scaler.c | 2 +-
drivers/staging/nvec/nvec_power.c | 2 +-
drivers/thermal/thermal_sysfs.c | 9 +-
drivers/thunderbolt/domain.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 3 +-
drivers/tty/serial/pch_uart.c | 2 +-
drivers/tty/vt/defkeymap.c_shipped | 112 ++++++++
drivers/tty/vt/keyboard.c | 2 +-
drivers/usb/atm/cxacru.c | 172 ++++++------
drivers/usb/chipidea/ci.h | 18 +-
drivers/usb/chipidea/udc.c | 89 ++++---
drivers/usb/class/cdc-acm.c | 13 +-
drivers/usb/core/hub.c | 67 ++++-
drivers/usb/core/quirks.c | 1 +
drivers/usb/core/urb.c | 2 +-
drivers/usb/dwc3/dwc3-meson-g12a.c | 3 +
drivers/usb/dwc3/dwc3-qcom.c | 8 +-
drivers/usb/dwc3/gadget.c | 9 +
drivers/usb/early/xhci-dbc.c | 4 +
drivers/usb/gadget/composite.c | 5 +
drivers/usb/gadget/configfs.c | 2 +
drivers/usb/gadget/udc/renesas_usb3.c | 1 +
drivers/usb/host/xhci-hub.c | 3 +-
drivers/usb/host/xhci-mem.c | 24 +-
drivers/usb/host/xhci-plat.c | 3 +-
drivers/usb/host/xhci-ring.c | 19 +-
drivers/usb/host/xhci.c | 24 +-
drivers/usb/host/xhci.h | 3 +-
drivers/usb/musb/musb_gadget.c | 2 +
drivers/usb/musb/omap2430.c | 10 +-
drivers/usb/phy/phy-mxs-usb.c | 4 +-
drivers/usb/serial/ftdi_sio.c | 2 +
drivers/usb/serial/ftdi_sio_ids.h | 3 +
drivers/usb/serial/option.c | 7 +
drivers/usb/storage/realtek_cr.c | 2 +-
drivers/usb/storage/unusual_devs.h | 29 ++
drivers/usb/typec/tcpm/fusb302.c | 8 +
drivers/vhost/vhost.c | 3 +
drivers/video/console/vgacon.c | 2 +-
drivers/video/fbdev/imxfb.c | 9 +-
drivers/watchdog/dw_wdt.c | 2 +
drivers/watchdog/ziirave_wdt.c | 3 +
fs/btrfs/tree-log.c | 53 ++--
fs/buffer.c | 2 +-
fs/cifs/cifsglob.h | 1 +
fs/cifs/cifssmb.c | 10 +
fs/cifs/smbdirect.c | 14 +-
fs/cifs/transport.c | 34 ++-
fs/ext4/fsmap.c | 23 +-
fs/ext4/inline.c | 19 +-
fs/ext4/inode.c | 2 +-
fs/f2fs/f2fs.h | 2 +-
fs/f2fs/inode.c | 28 +-
fs/f2fs/node.c | 10 +
fs/file.c | 81 +++---
fs/hfs/bnode.c | 93 +++++++
fs/hfsplus/bnode.c | 92 +++++++
fs/hfsplus/extents.c | 3 -
fs/hfsplus/unicode.c | 7 +
fs/hfsplus/xattr.c | 6 +-
fs/hugetlbfs/inode.c | 2 +-
fs/isofs/inode.c | 9 +-
fs/jbd2/checkpoint.c | 1 +
fs/jfs/file.c | 3 +
fs/jfs/inode.c | 2 +-
fs/jfs/jfs_dmap.c | 10 +-
fs/namespace.c | 89 ++++++-
fs/nfs/blocklayout/blocklayout.c | 4 +-
fs/nfs/blocklayout/dev.c | 5 +-
fs/nfs/blocklayout/extent_tree.c | 20 +-
fs/nfs/client.c | 44 ++-
fs/nfs/direct.c | 13 +-
fs/nfs/export.c | 11 +-
fs/nfs/inode.c | 6 +-
fs/nfs/internal.h | 1 +
fs/nfs/nfs4client.c | 13 +-
fs/nfs/nfs4proc.c | 35 +--
fs/nfs/pnfs.c | 11 +-
fs/nfs/write.c | 11 +-
fs/nfsd/nfs4state.c | 34 ++-
fs/nilfs2/inode.c | 9 +-
fs/orangefs/orangefs-debugfs.c | 8 +-
fs/squashfs/super.c | 14 +-
fs/udf/super.c | 13 +-
include/linux/fs.h | 4 +-
include/linux/if_vlan.h | 6 +-
include/linux/mm.h | 26 +-
include/linux/moduleparam.h | 5 +-
include/linux/nfs_fs.h | 2 +
include/linux/pci.h | 1 +
include/linux/pps_kernel.h | 1 +
include/linux/skbuff.h | 31 ++-
include/linux/usb/chipidea.h | 1 +
include/linux/usb/usbnet.h | 1 +
include/net/act_api.h | 25 ++
include/net/cfg80211.h | 2 +-
include/net/sch_generic.h | 13 -
include/net/udp.h | 24 +-
include/uapi/linux/in6.h | 4 +-
include/uapi/linux/io_uring.h | 2 +-
include/uapi/linux/mount.h | 3 +-
kernel/events/core.c | 20 +-
kernel/fork.c | 2 +-
kernel/power/console.c | 7 +-
kernel/rcu/tree_plugin.h | 3 +
kernel/trace/ftrace.c | 19 +-
kernel/trace/trace_events.c | 5 +
mm/filemap.c | 2 +-
mm/hmm.c | 2 +-
mm/kmemleak.c | 120 +++++----
mm/madvise.c | 2 +-
mm/mmap.c | 26 +-
mm/shmem.c | 2 +-
mm/zsmalloc.c | 6 +-
net/8021q/vlan.c | 42 ++-
net/8021q/vlan.h | 1 +
net/appletalk/aarp.c | 42 ++-
net/appletalk/ddp.c | 7 +-
net/bluetooth/hci_sysfs.c | 15 +-
net/bluetooth/l2cap_core.c | 26 +-
net/bluetooth/l2cap_sock.c | 3 +
net/bluetooth/smp.c | 21 +-
net/bluetooth/smp.h | 1 +
net/caif/cfctrl.c | 294 ++++++++++-----------
net/core/filter.c | 3 +
net/core/netpoll.c | 7 +
net/ipv4/route.c | 1 -
net/ipv4/tcp_input.c | 3 +-
net/ipv4/udp_offload.c | 2 +-
net/ipv6/ip6_offload.c | 4 +-
net/ipv6/seg6_hmac.c | 3 +
net/mac80211/tx.c | 1 +
net/ncsi/internal.h | 2 +-
net/ncsi/ncsi-rsp.c | 1 +
net/netfilter/nf_conntrack_netlink.c | 24 +-
net/netfilter/nf_tables_api.c | 4 +-
net/netfilter/xt_nfacct.c | 4 +-
net/netlink/af_netlink.c | 2 +-
net/packet/af_packet.c | 39 ++-
net/phonet/pep.c | 2 +-
net/sched/act_api.c | 14 +
net/sched/act_csum.c | 4 +-
net/sched/act_ct.c | 10 +-
net/sched/act_gact.c | 14 +-
net/sched/act_mirred.c | 55 ++--
net/sched/act_police.c | 5 +-
net/sched/act_tunnel_key.c | 2 +-
net/sched/act_vlan.c | 9 +-
net/sched/sch_cake.c | 14 +-
net/sched/sch_codel.c | 5 +-
net/sched/sch_drr.c | 7 +-
net/sched/sch_fq_codel.c | 6 +-
net/sched/sch_hfsc.c | 8 +-
net/sched/sch_htb.c | 6 +-
net/sched/sch_netem.c | 40 +++
net/sched/sch_qfq.c | 40 ++-
net/sched/sch_sfq.c | 116 +++++---
net/sctp/input.c | 2 +-
net/tls/tls_sw.c | 13 +
net/vmw_vsock/af_vsock.c | 3 +-
net/wireless/mlme.c | 3 +-
samples/mei/mei-amt-version.c | 2 +-
scripts/Kbuild.include | 8 +-
scripts/kconfig/gconf.c | 8 +-
scripts/kconfig/lxdialog/inputbox.c | 6 +-
scripts/kconfig/lxdialog/menubox.c | 2 +-
scripts/kconfig/nconf.c | 2 +
scripts/kconfig/nconf.gui.c | 1 +
security/inode.c | 2 -
sound/pci/hda/patch_ca0132.c | 2 +-
sound/pci/hda/patch_hdmi.c | 19 ++
sound/pci/intel8x0.c | 2 +-
sound/soc/codecs/hdac_hdmi.c | 10 +-
sound/soc/codecs/rt5640.c | 5 +
sound/soc/fsl/fsl_sai.c | 14 +-
sound/soc/intel/boards/Kconfig | 2 +-
sound/soc/soc-dapm.c | 4 +
sound/soc/soc-ops.c | 28 +-
sound/usb/mixer_quirks.c | 14 +-
sound/usb/mixer_scarlett_gen2.c | 9 +
sound/usb/stream.c | 25 +-
sound/usb/validate.c | 14 +-
tools/bpf/bpftool/net.c | 15 +-
tools/perf/tests/bp_account.c | 1 +
.../cpupower/utils/idle_monitor/mperf_monitor.c | 4 +-
tools/testing/ktest/ktest.pl | 5 +-
.../ftrace/test.d/ftrace/func-filter-glob.tc | 2 +-
tools/testing/selftests/futex/include/futextest.h | 11 +
.../testing/selftests/net/forwarding/tc_actions.sh | 72 ++++-
tools/testing/selftests/net/rtnetlink.sh | 6 +
365 files changed, 3553 insertions(+), 1524 deletions(-)
3 weeks, 1 day
- 5
- 4
[PATCH 6.6 000/587] 6.6.103-rc1 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 6.6.103 release.
There are 587 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 28 Aug 2025 11:08:24 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.103-rc…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 6.6.103-rc1
Florian Westphal <fw(a)strlen.de>
netfilter: nf_reject: don't leak dst refcount for loopback packets
Peter Oberparleiter <oberpar(a)linux.ibm.com>
s390/hypfs: Enable limited access during lockdown
Peter Oberparleiter <oberpar(a)linux.ibm.com>
s390/hypfs: Avoid unnecessary ioctl registration in debugfs
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
Armen Ratner <armeng(a)nvidia.com>
net/mlx5e: Preserve shared buffer capacity during headroom updates
Daniel Jurgens <danielj(a)nvidia.com>
net/mlx5: Base ECVF devlink port attrs from 0
Hariprasad Kelam <hkelam(a)marvell.com>
Octeontx2-af: Skip overlap check for SPI field
Hangbin Liu <liuhangbin(a)gmail.com>
bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU
Aahil Awatramani <aahila(a)google.com>
bonding: Add independent control state machine
Hangbin Liu <liuhangbin(a)gmail.com>
bonding: update LACP activity flag after setting lacp_active
William Liu <will(a)willsroot.io>
net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
William Liu <will(a)willsroot.io>
net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
ValdikSS <iam(a)valdikss.org.ru>
igc: fix disabling L1.2 PCI-E link substate on I226 on init
Jason Xing <kernelxing(a)tencent.com>
ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
Kanglong Wang <wangkanglong(a)loongson.cn>
LoongArch: Optimize module load time by optimizing PLT/GOT counting
D. Wythe <alibuda(a)linux.alibaba.com>
net/smc: fix UAF on smcsk after smc_listen_out()
Jordan Rhee <jordanrhee(a)google.com>
gve: prevent ethtool ops after shutdown
Yuichiro Tsuji <yuichtsu(a)amazon.com>
net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
Horatiu Vultur <horatiu.vultur(a)microchip.com>
phy: mscc: Fix timestamping for vsc8584
Qingfang Deng <dqfext(a)gmail.com>
ppp: fix race conditions in ppp_fill_forward_path
Qingfang Deng <dqfext(a)gmail.com>
net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path
Minhong He <heminhong(a)kylinos.cn>
ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
Jakub Ramaseuski <jramaseu(a)redhat.com>
net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
Chenyuan Yang <chenyuan0y(a)gmail.com>
drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
Dan Carpenter <dan.carpenter(a)linaro.org>
ALSA: usb-audio: Fix size validation in convert_chmap_v3()
Baihan Li <libaihan(a)huawei.com>
drm/hisilicon/hibmc: fix the hibmc loaded failed bug
Ido Schimmel <idosch(a)nvidia.com>
mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
Sergey Shtylyov <s.shtylyov(a)omp.ru>
Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync()
Pauli Virtanen <pav(a)iki.fi>
Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established
Kees Cook <kees(a)kernel.org>
iommu/amd: Avoid stack buffer overflow from kernel cmdline
Dan Carpenter <dan.carpenter(a)linaro.org>
scsi: qla4xxx: Prevent a potential error pointer dereference
Wang Liang <wangliang74(a)huawei.com>
net: bridge: fix soft lockup in br_multicast_query_expired()
Anantha Prabhu <anantha.prabhu(a)broadcom.com>
RDMA/bnxt_re: Fix to initialize the PBL array
Kashyap Desai <kashyap.desai(a)broadcom.com>
RDMA/bnxt_re: Fix to remove workload check in SRQ limit path
Kashyap Desai <kashyap.desai(a)broadcom.com>
RDMA/bnxt_re: Fix to do SRQ armena by default
Boshi Yu <boshiyu(a)linux.alibaba.com>
RDMA/erdma: Fix ignored return value of init_kernel_qp
Nitin Gote <nitin.r.gote(a)intel.com>
iosys-map: Fix undefined behavior in iosys_map_clear()
Waiman Long <longman(a)redhat.com>
cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
Fanhua Li <lifanhua5(a)huawei.com>
drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor().
Stefan Wahren <wahrenst(a)gmx.net>
spi: spi-fsl-lpspi: Clamp too high speed_hz
Tianxiang Peng <txpeng(a)tencent.com>
x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
Amit Sunil Dhamne <amitsd(a)google.com>
usb: typec: maxim_contaminant: disable low power mode when reading comparator values
Amit Sunil Dhamne <amitsd(a)google.com>
usb: typec: maxim_contaminant: re-enable cc toggle if cc is open and port is clean
Weitao Wang <WeitaoWang-oc(a)zhaoxin.com>
usb: xhci: Fix slot_id resource race conflict
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com>
iio: imu: inv_icm42600: change invalid data error to -EBUSY
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
iio: imu: inv_icm42600: Convert to uXX and sXX integer types
David Lechner <dlechner(a)baylibre.com>
iio: imu: inv_icm42600: use = { } instead of memset()
Jonathan Cameron <Jonathan.Cameron(a)huawei.com>
iio: imu: inv_icm42600: switch timestamp type from int64_t __aligned(8) to aligned_s64
David Lechner <dlechner(a)baylibre.com>
iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read()
Jonathan Cameron <Jonathan.Cameron(a)huawei.com>
iio: light: as73211: Ensure buffer holes are zeroed
Pu Lehui <pulehui(a)huawei.com>
tracing: Limit access to parser->buffer when trace_get_user failed
Steven Rostedt <rostedt(a)goodmis.org>
tracing: Remove unneeded goto out logic
Jakub Kicinski <kuba(a)kernel.org>
tls: fix handling of zero-length records on the rx_list
Michal Suchanek <msuchanek(a)suse.de>
powerpc/boot: Fix build with gcc 15
Victor Shih <victor.shih(a)genesyslogic.com.tw>
mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER
Jan Beulich <jbeulich(a)suse.com>
compiler: remove __ADDRESSABLE_ASM{_STR,}() again
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Don't overclock DCE 6 by 15%
Heikki Krogerus <heikki.krogerus(a)linux.intel.com>
usb: dwc3: pci: add support for the Intel Wildcat Lake
Selvarasu Ganesan <selvarasu.g(a)samsung.com>
usb: dwc3: Remove WARN_ON for device endpoint command timeouts
Kuen-Han Tsai <khtsai(a)google.com>
usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
Zenm Chen <zenmchen(a)gmail.com>
USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
Thorsten Blum <thorsten.blum(a)linux.dev>
usb: storage: realtek_cr: Use correct byte order for bcs->Residue
Mael GUERIN <mael.guerin(a)murena.io>
USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
Marek Vasut <marek.vasut+renesas(a)mailbox.org>
usb: renesas-xhci: Fix External ROM access timeouts
Xu Yang <xu.yang_2(a)nxp.com>
usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
Edward Adam Davis <eadavis(a)qq.com>
comedi: pcl726: Prevent invalid irq number
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Make insn_rw_emulate_bits() do insn->n samples
Miao Li <limiao(a)kylinos.cn>
usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
Thorsten Blum <thorsten.blum(a)linux.dev>
cdx: Fix off-by-one error in cdx_rpmsg_probe()
Miaoqian Lin <linmq006(a)gmail.com>
most: core: Drop device reference after usage in get_channel()
David Lechner <dlechner(a)baylibre.com>
iio: proximity: isl29501: fix buffered read on big-endian systems
Salah Triki <salah.triki(a)gmail.com>
iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
Steven Rostedt <rostedt(a)goodmis.org>
ftrace: Also allocate and copy hash for reading of filter files
Xu Yilun <yilun.xu(a)linux.intel.com>
fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
Imre Deak <imre.deak(a)intel.com>
drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
cpuidle: governors: menu: Avoid selecting states with too much latency
Christian Loehle <christian.loehle(a)arm.com>
cpuidle: menu: Remove iowait influence
Victor Shih <victor.shih(a)genesyslogic.com.tw>
mmc: sdhci-pci-gli: Add a new function to simplify the code
Bjorn Helgaas <bhelgaas(a)google.com>
mmc: sdhci-pci-gli: Use PCI AER definitions, not hard-coded values
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
selftests: mptcp: pm: check flush doesn't reset limits
Geliang Tang <tanggeliang(a)kylinos.cn>
mptcp: disable add_addr retransmission when timeout is 0
Geliang Tang <tanggeliang(a)kylinos.cn>
mptcp: remove duplicate sk_reset_timer call
Al Viro <viro(a)zeniv.linux.org.uk>
use uniform permission checks for all mount propagation changes
Ye Bin <yebin10(a)huawei.com>
fs/buffer: fix use-after-free when call bh_read() helper
Stefan Metzmacher <metze(a)samba.org>
smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()
Judith Mendez <jm(a)ti.com>
arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support
Baokun Li <libaokun1(a)huawei.com>
ext4: preserve SB_I_VERSION on remount
Ranjan Kumar <ranjan.kumar(a)broadcom.com>
scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems
Ranjan Kumar <ranjan.kumar(a)broadcom.com>
scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers
André Draszik <andre.draszik(a)linaro.org>
scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
Richard Zhu <hongxing.zhu(a)nxp.com>
PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4 in epc_features
Richard Zhu <hongxing.zhu(a)nxp.com>
PCI: imx6: Delay link start until configfs 'start' written
Geraldo Nascimento <geraldogabriel(a)gmail.com>
PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining
Geraldo Nascimento <geraldogabriel(a)gmail.com>
PCI: rockchip: Use standard PCIe definitions
Dan Carpenter <dan.carpenter(a)linaro.org>
soc: qcom: mdt_loader: Fix error return values in mdt_header_valid()
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
Mario Limonciello <mario.limonciello(a)amd.com>
drm/amd/display: Avoid a NULL pointer dereference
Peter Oberparleiter <oberpar(a)linux.ibm.com>
s390/sclp: Fix SCCB present check
Evgeniy Harchenko <evgeniyharchenko.dev(a)gmail.com>
ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
Jinjiang Tu <tujinjiang(a)huawei.com>
mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn
Herton R. Krzesinski <herton(a)redhat.com>
mm/debug_vm_pgtable: clear page table entries at destroy_args()
Phillip Lougher <phillip(a)squashfs.org.uk>
squashfs: fix memory leak in squashfs_fill_super
Victor Shih <victor.shih(a)genesyslogic.com.tw>
mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
Jiayi Li <lijiayi(a)kylinos.cn>
memstick: Fix deadlock by moving removing flag earlier
Will Deacon <will(a)kernel.org>
KVM: arm64: Fix kernel BUG() due to bad backport of FPSIMD/SVE/SME fix
Vincent Guittot <vincent.guittot(a)linaro.org>
sched/fair: Fix frequency selection for non-invariant case
Vincent Guittot <vincent.guittot(a)linaro.org>
topology: Set capacity_freq_ref in all cases
Vincent Guittot <vincent.guittot(a)linaro.org>
arm64/amu: Use capacity_ref_freq() to set AMU ratio
Vincent Guittot <vincent.guittot(a)linaro.org>
cpufreq/cppc: Set the frequency used for computing the capacity
Vincent Guittot <vincent.guittot(a)linaro.org>
energy_model: Use a fixed reference frequency
Vincent Guittot <vincent.guittot(a)linaro.org>
cpufreq/schedutil: Use a fixed reference frequency
Vincent Guittot <vincent.guittot(a)linaro.org>
cpufreq: Use the fixed and coherent frequency for scaling capacity
Vincent Guittot <vincent.guittot(a)linaro.org>
sched/topology: Add a new arch_scale_freq_ref() method
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
kbuild: userprogs: use correct linker when mixing clang and GNU ld
Damien Le Moal <dlemoal(a)kernel.org>
ata: libata-scsi: Return aborted command when missing sense and result TF
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
PM: runtime: Take active children into account in pm_runtime_get_if_in_use()
Sakari Ailus <sakari.ailus(a)linux.intel.com>
PM: runtime: Simplify pm_runtime_get_if_active() usage
Damien Le Moal <dlemoal(a)kernel.org>
ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
Johan Hovold <johan(a)kernel.org>
usb: dwc3: imx8mp: fix device leak at unbind
Anshuman Khandual <anshuman.khandual(a)arm.com>
mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
Mikhail Lobanov <m.lobanov(a)rosa.ru>
wifi: mac80211: check basic rates validity in sta_link_apply_parameters
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
Gerald Schaefer <gerald.schaefer(a)linux.ibm.com>
s390/mm: Remove possible false-positive warning in pte_free_defer()
Filipe Manana <fdmanana(a)suse.com>
btrfs: send: make fs_path_len() inline and constify its argument
Filipe Manana <fdmanana(a)suse.com>
btrfs: send: use fallocate for hole punching with send stream v2
Filipe Manana <fdmanana(a)suse.com>
btrfs: send: avoid path allocation for the current inode when issuing commands
Filipe Manana <fdmanana(a)suse.com>
btrfs: send: keep the current inode's path cached
Filipe Manana <fdmanana(a)suse.com>
btrfs: send: add and use helper to rename current inode when processing refs
Filipe Manana <fdmanana(a)suse.com>
btrfs: send: only use boolean variables at process_recorded_refs()
Filipe Manana <fdmanana(a)suse.com>
btrfs: send: factor out common logic when sending xattrs
Qu Wenruo <wqu(a)suse.com>
btrfs: populate otime when logging an inode item
David Sterba <dsterba(a)suse.com>
btrfs: constify more pointer parameters
Boris Burkov <boris(a)bur.io>
btrfs: fix ssd_spread overallocation
David Sterba <dsterba(a)suse.com>
btrfs: open code timespec64 in struct btrfs_inode
Christoph Hellwig <hch(a)lst.de>
xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags
Filipe Manana <fdmanana(a)suse.com>
btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()
Filipe Manana <fdmanana(a)suse.com>
btrfs: always abort transaction on failure to add block group to free space tree
David Sterba <dsterba(a)suse.com>
btrfs: move transaction aborts to the error site in add_block_group_free_space()
Filipe Manana <fdmanana(a)suse.com>
btrfs: qgroup: fix race between quota disable and quota rescan ioctl
Filipe Manana <fdmanana(a)suse.com>
btrfs: don't ignore inode missing when replaying log tree
Sebastian Reichel <sebastian.reichel(a)collabora.com>
usb: typec: fusb302: cache PD RX state
Lukas Wunner <lukas(a)wunner.de>
PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
Damien Le Moal <dlemoal(a)kernel.org>
block: Make REQ_OP_ZONE_FINISH a write operation
Christoph Hellwig <hch(a)lst.de>
block: reject invalid operation in submit_bio_noacct
Eric Biggers <ebiggers(a)kernel.org>
fscrypt: Don't use problematic non-inline crypto engines
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
leds: flash: leds-qcom-flash: Fix registry access after re-bind
Fenglin Wu <quic_fenglinw(a)quicinc.com>
leds: flash: leds-qcom-flash: Limit LED current based on thermal condition
Davide Caratti <dcaratti(a)redhat.com>
net/sched: ets: use old 'nbands' while purging unused classes
Eric Dumazet <edumazet(a)google.com>
net_sched: sch_ets: implement lockless ets_dump()
Wang Zhaolong <wangzhaolong(a)huaweicloud.com>
smb: client: fix netns refcount leak after net_passive changes
Eric Dumazet <edumazet(a)google.com>
net: better track kernel sockets lifetime
Kuniyuki Iwashima <kuniyu(a)amazon.com>
net: Add net_passive_inc() and net_passive_dec().
Isaac J. Manjarres <isaacmanjarres(a)google.com>
selftests/memfd: add test for mapping write-sealed memfd read-only
Isaac J. Manjarres <isaacmanjarres(a)google.com>
mm: reinstate ability to map write-sealed memfd mappings read-only
Isaac J. Manjarres <isaacmanjarres(a)google.com>
mm: update memfd seal write check to include F_SEAL_WRITE
Isaac J. Manjarres <isaacmanjarres(a)google.com>
mm: drop the assumption that VM_SHARED always implies writable
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
mptcp: pm: kernel: flush: do not reset ADD_ADDR limit
Christoph Paasch <cpaasch(a)openai.com>
mptcp: drop skb if MPTCP skb extension allocation fails
Chen Yu <yu.c.chen(a)intel.com>
ACPI: pfr_update: Fix the driver update version check
Eric Biggers <ebiggers(a)kernel.org>
ipv6: sr: Fix MAC comparison to be constant-time
Jakub Acs <acsjakub(a)amazon.de>
net, hsr: reject HSR frame if skb can't hold tag
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Don't overwrite dce60_clk_mgr
Michel Dänzer <mdaenzer(a)redhat.com>
drm/amd/display: Add primary plane to commits for correct VRR handling
Amber Lin <Amber.Lin(a)amd.com>
drm/amdkfd: Destroy KFD debugfs after destroy KFD wq
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu: update mmhub 3.0.1 client id mappings
Gang Ba <Gang.Ba(a)amd.com>
drm/amdgpu: Avoid extra evict-restore process.
Mario Limonciello <mario.limonciello(a)amd.com>
drm/amd: Restore cached power limit during resume
Ricardo Ribalda <ribalda(a)chromium.org>
media: venus: venc: Clamp param smaller than 1fps and bigger than 240
Ricardo Ribalda <ribalda(a)chromium.org>
media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
Jorge Ramirez-Ortiz <jorge.ramirez(a)oss.qualcomm.com>
media: venus: protect against spurious interrupts during probe
Jorge Ramirez-Ortiz <jorge.ramirez(a)oss.qualcomm.com>
media: venus: hfi: explicitly release IRQ during teardown
Vedang Nagar <quic_vnagar(a)quicinc.com>
media: venus: Add a check for packet size after reading from shared memory
Vladimir Zapolskiy <vladimir.zapolskiy(a)linaro.org>
media: qcom: camss: cleanup media device allocated resource on error path
Hans de Goede <hansg(a)kernel.org>
media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls
Zhang Shurong <zhang_shurong(a)foxmail.com>
media: ov2659: Fix memory leaks in ov2659_probe()
Gui-Dong Han <hanguidong02(a)gmail.com>
media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
Ludwig Disterhof <ludwig(a)disterhof.eu>
media: usbtv: Lock resolution while streaming
Sakari Ailus <sakari.ailus(a)linux.intel.com>
media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
Nicolas Dufresne <nicolas.dufresne(a)collabora.com>
media: verisilicon: Fix AV1 decoder clock frequency
Hans Verkuil <hverkuil(a)xs4all.nl>
media: vivid: fix wrong pixel_array control size
Haoxiang Li <haoxiang_li2024(a)163.com>
media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
Bingbu Cao <bingbu.cao(a)intel.com>
media: hi556: correct the test pattern configuration
Dan Carpenter <dan.carpenter(a)linaro.org>
media: gspca: Add bounds checking to firmware parser
John David Anglin <dave.anglin(a)bell.net>
parisc: Update comments in make_insert_tlb
John David Anglin <dave.anglin(a)bell.net>
parisc: Try to fixup kernel exception in bad_area_nosemaphore path of do_page_fault()
John David Anglin <dave.anglin(a)bell.net>
parisc: Revise gateway LWS calls to probe user read access
John David Anglin <dave.anglin(a)bell.net>
parisc: Revise __get_user() to probe user read access
John David Anglin <dave.anglin(a)bell.net>
parisc: Rename pte_needs_flush() to pte_needs_cache_flush() in cache.c
Randy Dunlap <rdunlap(a)infradead.org>
parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit compilers
John David Anglin <dave.anglin(a)bell.net>
parisc: Drop WARN_ON_ONCE() from flush_cache_vmap
John David Anglin <dave.anglin(a)bell.net>
parisc: Define and use set_pte_at()
John David Anglin <dave.anglin(a)bell.net>
parisc: Check region is readable by user in raw_copy_from_user()
Jon Hunter <jonathanh(a)nvidia.com>
soc/tegra: pmc: Ensure power-domains are in a known state
Baokun Li <libaokun1(a)huawei.com>
jbd2: prevent softlockup in jbd2_log_do_checkpoint()
Chao Yu <chao(a)kernel.org>
f2fs: fix to avoid out-of-boundary access in dnode page
Kathiravan Thirumoorthy <kathiravan.thirumoorthy(a)oss.qualcomm.com>
phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization sequence
Will Deacon <will(a)kernel.org>
vhost/vsock: Avoid allocating arbitrarily-sized SKBs
Will Deacon <will(a)kernel.org>
vsock/virtio: Validate length in packet header before skb_put()
Damien Le Moal <dlemoal(a)kernel.org>
PCI: endpoint: Fix configfs group removal on driver teardown
Damien Le Moal <dlemoal(a)kernel.org>
PCI: endpoint: Fix configfs group list head handling
Thomas Fourier <fourier.thomas(a)gmail.com>
mtd: rawnand: renesas: Add missing check after DMA map
Thomas Fourier <fourier.thomas(a)gmail.com>
mtd: rawnand: fsmc: Add missing check after DMA map
Gabor Juhos <j4g8y7(a)gmail.com>
mtd: spinand: propagate spinand_wait() errors from spinand_write_page()
Michael Walle <mwalle(a)kernel.org>
mtd: spi-nor: Fix spi_nor_try_unlock_all()
Tim Harvey <tharvey(a)gateworks.com>
hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Fix duty and period setting
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Handle hardware enable and clock enable separately
Laurentiu Mihalcea <laurentiu.mihalcea(a)nxp.com>
pwm: imx-tpm: Reset counter if CMOD is 0
Johan Hovold <johan+linaro(a)kernel.org>
wifi: ath11k: fix dest ring-buffer corruption when ring is full
Johan Hovold <johan+linaro(a)kernel.org>
wifi: ath11k: fix source ring-buffer corruption
Johan Hovold <johan+linaro(a)kernel.org>
wifi: ath11k: fix dest ring-buffer corruption
Johan Hovold <johan+linaro(a)kernel.org>
wifi: ath12k: fix dest ring-buffer corruption when ring is full
Johan Hovold <johan+linaro(a)kernel.org>
wifi: ath12k: fix source ring-buffer corruption
Johan Hovold <johan+linaro(a)kernel.org>
wifi: ath12k: fix dest ring-buffer corruption
Nathan Chancellor <nathan(a)kernel.org>
wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
David Lechner <dlechner(a)baylibre.com>
iio: adc: ad_sigma_delta: change to buffer predisable
David Lechner <dlechner(a)baylibre.com>
iio: imu: bno055: fix OOB access of hw_xlate array
Marek Szyprowski <m.szyprowski(a)samsung.com>
zynq_fpga: use sgtable-based scatterlist wrappers
Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com>
soc: qcom: mdt_loader: Ensure we don't read past the ELF header
Igor Pylypiv <ipylypiv(a)google.com>
ata: libata-scsi: Fix CDL control
Adrian Hunter <adrian.hunter(a)intel.com>
scsi: ufs: ufs-pci: Fix default runtime and system PM levels
Archana Patni <archana.patni(a)intel.com>
scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers
Damien Le Moal <dlemoal(a)kernel.org>
ata: libata-scsi: Fix ata_to_sense_error() status handling
Ranjan Kumar <ranjan.kumar(a)broadcom.com>
scsi: mpi3mr: Fix race between config read submit and interrupt completion
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks constraints
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints
Emanuele Ghidoli <emanuele.ghidoli(a)toradex.com>
arm64: dts: ti: k3-am62-verdin: Enable pull-ups on I2C buses
Hong Guan <hguan(a)ti.com>
arm64: dts: ti: k3-am62a7-sk: fix pinmux for main_uart1
Alexander Sverdlin <alexander.sverdlin(a)siemens.com>
arm64: dts: ti: k3-pinctrl: Enable Schmitt Trigger by default
Naohiro Aota <naohiro.aota(a)wdc.com>
btrfs: zoned: fix write time activation failure for metadata block group
Zhang Yi <yi.zhang(a)huawei.com>
ext4: fix hole length calculation overflow in non-extent inodes
Liao Yuanhong <liaoyuanhong(a)vivo.com>
ext4: use kmalloc_array() for array space allocation
Theodore Ts'o <tytso(a)mit.edu>
ext4: don't try to clear the orphan_present feature block device is r/o
Ojaswin Mujoo <ojaswin(a)linux.ibm.com>
ext4: fix reserved gdt blocks handling in fsmap
Ojaswin Mujoo <ojaswin(a)linux.ibm.com>
ext4: fix fsmap end of range reporting with bigalloc
Andreas Dilger <adilger(a)dilger.ca>
ext4: check fast symlink for ea_inode correctly
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
tracing: fprobe-event: Sanitize wildcard for fprobe event name
Namjae Jeon <linkinjeon(a)kernel.org>
ksmbd: extend the connection limiting mechanism to support IPv6
Ziyan Xu <ziyan(a)securitygossip.com>
ksmbd: fix refcount leak causing resource not released
Helge Deller <deller(a)gmx.de>
Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
Giovanni Cabiddu <giovanni.cabiddu(a)intel.com>
crypto: qat - flush misc workqueue during device shutdown
Giovanni Cabiddu <giovanni.cabiddu(a)intel.com>
crypto: qat - lower priority for skcipher and aead algorithms
Eric Biggers <ebiggers(a)kernel.org>
lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
Myrrh Periwinkle <myrrhperiwinkle(a)qtmlabs.xyz>
vt: defkeymap: Map keycodes above 127 to K_HOLE
Myrrh Periwinkle <myrrhperiwinkle(a)qtmlabs.xyz>
vt: keyboard: Don't process Unicode characters in K_OFF mode
Youssef Samir <quic_yabdulra(a)quicinc.com>
bus: mhi: host: Detect events pointing to unexpected TREs
Alexander Wilhelm <alexander.wilhelm(a)westermo.com>
bus: mhi: host: Fix endianness of BHI vector table
Johan Hovold <johan(a)kernel.org>
usb: dwc3: meson-g12a: fix device leaks at unbind
Johan Hovold <johan(a)kernel.org>
usb: musb: omap2430: fix device leak at unbind
Johan Hovold <johan(a)kernel.org>
usb: gadget: udc: renesas_usb3: fix device leak at unbind
Nathan Chancellor <nathan(a)kernel.org>
usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
Finn Thain <fthain(a)linux-m68k.org>
m68k: Fix lost column on framebuffer debug console
Tzung-Bi Shih <tzungbi(a)kernel.org>
platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
Dan Carpenter <dan.carpenter(a)linaro.org>
cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
Yunhui Cui <cuiyunhui(a)bytedance.com>
serial: 8250: fix panic due to PSLVERR
Frederic Weisbecker <frederic(a)kernel.org>
rcu: Fix racy re-initialization of irq_work causing hangs
Aditya Garg <gargaditya08(a)live.com>
HID: apple: avoid setting up battery timer for devices without battery
Aditya Garg <gargaditya08(a)live.com>
HID: magicmouse: avoid setting up battery timer when not needed
Pedro Falcato <pfalcato(a)suse.de>
RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages
Willy Tarreau <w(a)1wt.eu>
tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros
Ricardo Ribalda <ribalda(a)chromium.org>
media: uvcvideo: Do not mark valid metadata as invalid
Vedang Nagar <quic_vnagar(a)quicinc.com>
media: venus: Fix OOB read due to missing payload bound check
Youngjun Lee <yjjuny.lee(a)samsung.com>
media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
Breno Leitao <leitao(a)debian.org>
mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
Waiman Long <longman(a)redhat.com>
mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
Randy Dunlap <rdunlap(a)infradead.org>
parisc: Makefile: fix a typo in palo.conf
Haiyang Zhang <haiyangz(a)microsoft.com>
hv_netvsc: Fix panic during namespace deletion with VF
Sravan Kumar Gundu <sravankumarlpu(a)gmail.com>
fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
Qu Wenruo <wqu(a)suse.com>
btrfs: do not allow relocation of partially dropped subvolumes
Naohiro Aota <naohiro.aota(a)wdc.com>
btrfs: zoned: do not select metadata BG as finish target
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix log tree replay failure due to file with 0 links and extents
Filipe Manana <fdmanana(a)suse.com>
btrfs: clear dirty status from extent buffer on error at insert_new_root()
Naohiro Aota <naohiro.aota(a)wdc.com>
btrfs: zoned: do not remove unwritten non-data block group
Filipe Manana <fdmanana(a)suse.com>
btrfs: abort transaction during log replay if walk_log_tree() failed
Johannes Thumshirn <johannes.thumshirn(a)wdc.com>
btrfs: zoned: use filesystem size not disk size for reclaim decision
Oliver Neukum <oneukum(a)suse.com>
cdc-acm: fix race between initial clearing halt and open
Eric Biggers <ebiggers(a)kernel.org>
thunderbolt: Fix copy+paste error in match_service_id()
Ian Abbott <abbotti(a)mev.co.uk>
comedi: fix race between polling and detaching
Myrrh Periwinkle <myrrhperiwinkle(a)qtmlabs.xyz>
usb: typec: ucsi: Update power_supply on power role change
Ricky Wu <ricky_wu(a)realtek.com>
misc: rtsx: usb: Ensure mmc child device is active when card is present
Xinyu Liu <katieeliu(a)tencent.com>
usb: core: config: Prevent OOB read in SS endpoint companion parsing
Baokun Li <libaokun1(a)huawei.com>
ext4: fix largest free orders lists corruption on mb_optimize_scan switch
Baokun Li <libaokun1(a)huawei.com>
ext4: fix zombie groups in average fragment size lists
Jason Gunthorpe <jgg(a)ziepe.ca>
iommufd: Prevent ALIGN() overflow
Nicolin Chen <nicolinc(a)nvidia.com>
iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range
Alexey Klimov <alexey.klimov(a)linaro.org>
iommu/arm-smmu-qcom: Add SM6115 MDSS compatible
Shyam Prasad N <sprasad(a)microsoft.com>
cifs: reset iface weights when we cannot find a candidate
Jack Xiao <Jack.Xiao(a)amd.com>
drm/amdgpu: fix incorrect vm flags to map bo
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ASoC: fsl_sai: replace regmap_write with regmap_update_bits
Jiasheng Jiang <jiashengjiangcool(a)gmail.com>
scsi: lpfc: Remove redundant assignment to avoid memory leak
Meagan Lloyd <meaganlloyd(a)linux.microsoft.com>
rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Fix uninited ptr deref in block/scsi layout
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Handle RPC size limit for layoutcommits
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Fix disk addr range check in block/scsi layout
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Fix stripe mapping in block/scsi layout
John Garry <john.g.garry(a)oracle.com>
block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
Cezary Rojewski <cezary.rojewski(a)intel.com>
ASoC: Intel: avs: Fix uninitialized pointer error in probe()
Buday Csaba <buday.csaba(a)prolan.hu>
net: phy: smsc: add proper reset flags for LAN8710A
Corey Minyard <corey(a)minyard.net>
ipmi: Fix strcpy source and destination the same
Yann E. MORIN <yann.morin.1998(a)free.fr>
kconfig: lxdialog: fix 'space' to (de)select options
Masahiro Yamada <masahiroy(a)kernel.org>
kconfig: gconf: fix potential memory leak in renderer_edited()
Masahiro Yamada <masahiroy(a)kernel.org>
kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
Breno Leitao <leitao(a)debian.org>
ipmi: Use dev_warn_ratelimited() for incorrect message warnings
Artem Sadovnikov <a.sadovnikov(a)ispras.ru>
vfio/mlx5: fix possible overflow in tracking max message size
John Garry <john.g.garry(a)oracle.com>
scsi: aacraid: Stop using PCI_IRQ_AFFINITY
Maurizio Lombardi <mlombard(a)redhat.com>
scsi: target: core: Generate correct identifiers for PR OUT transport IDs
Ranjan Kumar <ranjan.kumar(a)broadcom.com>
scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
Shankari Anand <shankari.ak0208(a)gmail.com>
kconfig: nconf: Ensure null termination where strncpy is used
Keith Busch <kbusch(a)kernel.org>
vfio/type1: conditional rescheduling while pinning
Suchit Karunakaran <suchitkarunakaran(a)gmail.com>
kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
Jaegeuk Kim <jaegeuk(a)kernel.org>
f2fs: check the generic conditions first
Yuezhang Mo <Yuezhang.Mo(a)sony.com>
exfat: add cluster chain loop check for dir
fangzhong.zhou <myth5(a)myth5.com>
i2c: Force DLL0945 touchpad i2c freq to 100khz
Mateusz Guzik <mjguzik(a)gmail.com>
apparmor: use the condition in AA_BUG_FMT even with debug disabled
Benjamin Marzinski <bmarzins(a)redhat.com>
dm-table: fix checking for rq stackable devices
Mikulas Patocka <mpatocka(a)redhat.com>
dm-mpath: don't print the "loaded" message if registering fails
Jorge Marques <jorge.marques(a)analog.com>
i3c: master: Initialize ret in i3c_i2c_notifier_call()
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
i3c: don't fail if GETHDRCAP is unsupported
Gabriel Totev <gabriel.totev(a)zetier.com>
apparmor: shift ouid when mediating hard links in userns
Meagan Lloyd <meaganlloyd(a)linux.microsoft.com>
rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
i3c: add missing include to internal header
Petr Pavlu <petr.pavlu(a)suse.com>
module: Prevent silent truncation of module name in delete_module(2)
Purva Yeshi <purvayeshi550(a)gmail.com>
md: dm-zoned-target: Initialize return variable r to avoid uninitialized use
Charles Keepax <ckeepax(a)opensource.cirrus.com>
soundwire: Move handle_nested_irq outside of sdw_dev_lock
Vijendar Mukunda <Vijendar.Mukunda(a)amd.com>
soundwire: amd: serialize amd manager resume sequence during pm_prepare
Bharat Bhushan <bbhushan2(a)marvell.com>
crypto: octeontx2 - add timeout for load_fvc completion poll
chenchangcheng <chenchangcheng(a)kylinos.cn>
media: uvcvideo: Fix bandwidth issue for Alcor camera
Alex Guo <alexguo1023(a)gmail.com>
media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
Alex Guo <alexguo1023(a)gmail.com>
media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
media: usb: hdpvr: disable zero-length read messages
Dave Stevenson <dave.stevenson(a)raspberrypi.com>
media: tc358743: Increase FIFO trigger level to 374
Dave Stevenson <dave.stevenson(a)raspberrypi.com>
media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
Dave Stevenson <dave.stevenson(a)raspberrypi.com>
media: tc358743: Check I2C succeeded during probe
Cheick Traore <cheick.traore(a)foss.st.com>
pinctrl: stm32: Manage irq affinity settings
Damien Le Moal <dlemoal(a)kernel.org>
scsi: mpi3mr: Correctly handle ATA device errors
Damien Le Moal <dlemoal(a)kernel.org>
scsi: mpt3sas: Correctly handle ATA device errors
Abel Vesa <abel.vesa(a)linaro.org>
power: supply: qcom_battmgr: Add lithium-polymer entry
Justin Tee <justin.tee(a)broadcom.com>
scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
Arnd Bergmann <arnd(a)arndb.de>
RDMA/core: reduce stack using in nldev_stat_get_doit()
Yury Norov [NVIDIA] <yury.norov(a)gmail.com>
RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
Amelie Delaunay <amelie.delaunay(a)foss.st.com>
dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs
Johan Adolfsson <johan.adolfsson(a)axis.com>
leds: leds-lp50xx: Handle reg to get correct multi_index
Niklas Söderlund <niklas.soderlund+renesas(a)ragnatech.se>
media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control
Shiji Yang <yangshiji66(a)outlook.com>
MIPS: lantiq: falcon: sysctrl: fix request memory check logic
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
Markus Theil <theil.markus(a)gmail.com>
crypto: jitter - fix intermediary handling
Arnaud Lecomte <contact(a)arnaud-lcm.com>
jfs: upper bound check of tree index in dbAllocAG
Edward Adam Davis <eadavis(a)qq.com>
jfs: Regular file corruption check
Lizhi Xu <lizhi.xu(a)windriver.com>
jfs: truncate good inode pages when hard link is 0
jackysliu <1972843537(a)qq.com>
scsi: bfa: Double-free fix
Ziyan Fu <fuzy5(a)lenovo.com>
watchdog: iTCO_wdt: Report error if timeout configuration fails
Shiji Yang <yangshiji66(a)outlook.com>
MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
George Moussalem <george.moussalem(a)outlook.com>
clk: qcom: ipq5018: keep XO clock always on
Florin Leotescu <florin.leotescu(a)nxp.com>
hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state
Sebastian Reichel <sebastian.reichel(a)collabora.com>
watchdog: dw_wdt: Fix default timeout
Amir Mohammad Jahangirzad <a.jahangirzad(a)gmail.com>
fs/orangefs: use snprintf() instead of sprintf()
Showrya M N <showrya(a)chelsio.com>
scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
Geraldo Nascimento <geraldogabriel(a)gmail.com>
phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal
Chen-Yu Tsai <wens(a)csie.org>
mfd: axp20x: Set explicit ID for AXP313 regulator
Pei Xiao <xiaopei01(a)kylinos.cn>
clk: tegra: periph: Fix error handling and resolve unsigned compare warning
Theodore Ts'o <tytso(a)mit.edu>
ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
Zhiqi Song <songzhiqi1(a)huawei.com>
crypto: hisilicon/hpre - fix dma unmap sequence
Yongzhen Zhang <zhangyongzhen(a)kylinos.cn>
fbdev: fix potential buffer overflow in do_register_framebuffer()
Pali Rohár <pali(a)kernel.org>
cifs: Fix calling CIFSFindFirst() for root path without msearch
Aaron Plattner <aplattner(a)nvidia.com>
watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition
Mario Limonciello <mario.limonciello(a)amd.com>
drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported
Mario Limonciello <mario.limonciello(a)amd.com>
drm/amd/display: Only finalize atomic_obj if it was initialized
Jason Wang <jasowang(a)redhat.com>
vhost: fail early when __vhost_add_used() fails
Will Deacon <will(a)kernel.org>
vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
Joel Fernandes <joelagnelf(a)nvidia.com>
rcu: Fix rcu_read_unlock() deadloop due to IRQ work
Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com>
drm/ttm: Respect the shrinker core free target
Wayne Lin <Wayne.Lin(a)amd.com>
drm/amd/display: Avoid trying AUX transactions on disconnected ports
Yonghong Song <yonghong.song(a)linux.dev>
selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size
Ihor Solodrai <isolodrai(a)meta.com>
bpf: Make reg_not_null() true for CONST_PTR_TO_MAP
Jakub Kicinski <kuba(a)kernel.org>
uapi: in6: restore visibility of most IPv6 socket options
Emily Deng <Emily.Deng(a)amd.com>
drm/ttm: Should to return the evict error
Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com>
drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range
Hari Kalavakunta <kalavakunta.hari.prasad(a)gmail.com>
net: ncsi: Fix buffer overflow in fetching version id
Shannon Nelson <shannon.nelson(a)amd.com>
ionic: clean dbpage in de-init
Thomas Fourier <fourier.thomas(a)gmail.com>
wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc()
Breno Leitao <leitao(a)debian.org>
ptp: Use ratelimite for freerun error message
Yuan Chen <chenyuan(a)kylinos.cn>
bpftool: Fix JSON writer resource leak in version command
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: prevent DIS_LEARNING access on BCM5325
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
Alok Tiwari <alok.a.tiwari(a)oracle.com>
gve: Return error for unknown admin queue command
Gal Pressman <gal(a)nvidia.com>
net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
Gal Pressman <gal(a)nvidia.com>
net: vlan: Make is_vlan_dev() a stub when VLAN is not configured
Mario Limonciello <mario.limonciello(a)amd.com>
drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual
Heiner Kallweit <hkallweit1(a)gmail.com>
dpaa_eth: don't use fixed_phy_change_carrier
Nicolas Escande <nico.escande(a)gmail.com>
neighbour: add support for NUD_PERMANENT proxy entries
Stanislaw Gruszka <stf_xl(a)wp.pl>
wifi: iwlegacy: Check rate_idx range after addition
Mina Almasry <almasrymina(a)google.com>
netmem: fix skb_frag_address_safe with unreadable skbs
Thomas Fourier <fourier.thomas(a)gmail.com>
powerpc: floppy: Add missing checks after DMA map
Karthikeyan Kathirvel <quic_kathirve(a)quicinc.com>
wifi: ath12k: Decrement TID on RX peer frag setup error handling
Raj Kumar Bhagat <quic_rajkbhag(a)quicinc.com>
wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0
Thomas Fourier <fourier.thomas(a)gmail.com>
wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
Ramya Gnanasekar <ramya.gnanasekar(a)oss.qualcomm.com>
wifi: mac80211: update radar_required in channel context after channel switch
Wen Chen <Wen.Chen3(a)amd.com>
drm/amd/display: Fix 'failed to blank crtc!'
Pagadala Yesu Anjaneyulu <pagadala.yesu.anjaneyulu(a)intel.com>
wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
Rand Deeb <rand.sec96(a)gmail.com>
wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
Sarika Sharma <quic_sarishar(a)quicinc.com>
wifi: ath12k: Add memset and update default rate value in wmi tx completion
Ilya Bakoulin <Ilya.Bakoulin(a)amd.com>
drm/amd/display: Separate set_gsl from set_gsl_source_select
Jonas Rebmann <jre(a)pengutronix.de>
net: fec: allow disable coalescing
Eric Work <work.eric(a)gmail.com>
net: atlantic: add set_power to fw_ops for atl2 to fix wol
Aakash Kumar S <saakashkumar(a)marvell.com>
xfrm: Duplicate SPI Handling
zhangjianrong <zhangjianrong5(a)huawei.com>
net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths()
zhangjianrong <zhangjianrong5(a)huawei.com>
net: thunderbolt: Enable end-to-end flow control also in transmit
Mark Brown <broonie(a)kernel.org>
kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace
David Bauer <mail(a)david-bauer.net>
wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch
Bitterblue Smith <rtl8821cerfe2(a)gmail.com>
wifi: rtw89: Disable deep power saving for USB/SDIO
Bitterblue Smith <rtl8821cerfe2(a)gmail.com>
wifi: rtw89: Fix rtw89_mac_power_switch() for USB
Rob Clark <robdclark(a)chromium.org>
drm/msm: use trylock for debugfs
Hari Chandrakanthan <quic_haric(a)quicinc.com>
wifi: mac80211: fix rx link assignment for non-MLO stations
Kuniyuki Iwashima <kuniyu(a)google.com>
ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc().
Thomas Fourier <fourier.thomas(a)gmail.com>
(powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
Johannes Berg <johannes.berg(a)intel.com>
wifi: mac80211: don't complete management TX on SAE commit
Chris Mason <clm(a)fb.com>
sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails
Sven Schnelle <svens(a)linux.ibm.com>
s390/stp: Remove udelay from stp_sync_clock()
Avraham Stern <avraham.stern(a)intel.com>
wifi: iwlwifi: mvm: fix scan request validation
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
um: Re-evaluate thread flags repeatedly
Miri Korenblit <miriam.rachel.korenblit(a)intel.com>
wifi: iwlwifi: mvm: set gtk id also in older FWs
Alok Tiwari <alok.a.tiwari(a)oracle.com>
perf/cxlpmu: Remove unintended newline from IRQ name format string
Biju Das <biju.das.jz(a)bp.renesas.com>
net: phy: micrel: Add ksz9131_resume()
Alok Tiwari <alok.a.tiwari(a)oracle.com>
net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
Oscar Maes <oscmaes92(a)gmail.com>
net: ipv4: fix incorrect MTU in broadcast routes
Ilan Peer <ilan.peer(a)intel.com>
wifi: cfg80211: Fix interface type validation
Matt Johnston <matt(a)codeconstruct.com.au>
net: mctp: Prevent duplicate binds
Paul E. McKenney <paulmck(a)kernel.org>
rcu: Protect ->defer_qs_iw_pending from data race
Breno Leitao <leitao(a)debian.org>
arm64: Mark kernel as tainted on SAE and SError panic
Leon Romanovsky <leon(a)kernel.org>
net/mlx5e: Properly access RCU protected qdisc_sleeping variable
Thomas Fourier <fourier.thomas(a)gmail.com>
net: ag71xx: Add missing check after DMA map
Thomas Fourier <fourier.thomas(a)gmail.com>
et131x: Add missing check after DMA map
Bitterblue Smith <rtl8821cerfe2(a)gmail.com>
wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB
Alok Tiwari <alok.a.tiwari(a)oracle.com>
be2net: Use correct byte order and format string for TCP seq and ack_seq
Sven Schnelle <svens(a)linux.ibm.com>
s390/time: Use monotonic clock in get_cycles()
Johannes Berg <johannes.berg(a)intel.com>
wifi: cfg80211: reject HTC bit for management frames
Steven Rostedt <rostedt(a)goodmis.org>
ktest.pl: Prevent recursion of default variable options
Sarika Sharma <quic_sarishar(a)quicinc.com>
wifi: ath12k: Correct tid cleanup when tid setup fails
Oliver Neukum <oneukum(a)suse.com>
net: usb: cdc-ncm: check for filtering capability
Anthoine Bourgeois <anthoine.bourgeois(a)vates.tech>
xen/netfront: Fix TX response spurious interrupts
Zijun Hu <zijun.hu(a)oss.qualcomm.com>
Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie()
Steven Rostedt <rostedt(a)goodmis.org>
powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64
Srinivas Kandagatla <srini(a)kernel.org>
ASoC: qcom: use drvdata instead of component to keep id
Xinxin Wan <xinxin.wan(a)intel.com>
ASoC: codecs: rt5640: Retry DEVICE_ID verification
Jonathan Santos <Jonathan.Santos(a)analog.com>
iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com>
ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
Christophe Leroy <christophe.leroy(a)csgroup.eu>
ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
Lucy Thrun <lucy.thrun(a)digital-rabbithole.de>
ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
Tomasz Michalec <tmichalec(a)google.com>
platform/chrome: cros_ec_typec: Defer probe on missing EC parent
Kees Cook <kees(a)kernel.org>
platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com>
soc: qcom: mdt_loader: Actually use the e_phoff
Krzysztof Hałasa <khalasa(a)piap.pl>
imx8m-blk-ctrl: set ISI panic write hurry level
Gautham R. Shenoy <gautham.shenoy(a)amd.com>
pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
Oliver Neukum <oneukum(a)suse.com>
usb: core: usb_submit_urb: downgrade type check
Tomasz Michalec <tmichalec(a)google.com>
usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com>
ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
Alok Tiwari <alok.a.tiwari(a)oracle.com>
ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
Mark Brown <broonie(a)kernel.org>
ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
x86/bugs: Avoid warning when overriding return thunk
Takashi Iwai <tiwai(a)suse.de>
ALSA: hda: Disable jack polling at shutdown
Takashi Iwai <tiwai(a)suse.de>
ALSA: hda: Handle the jack polling always via a work
Ulf Hansson <ulf.hansson(a)linaro.org>
mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
Hans de Goede <hansg(a)kernel.org>
mei: bus: Check for still connected devices in mei_cl_bus_dev_release()
Zijun Hu <zijun.hu(a)oss.qualcomm.com>
char: misc: Fix improper and inaccurate error code returned by misc_init()
Peter Robinson <pbrobinson(a)gmail.com>
reset: brcmstb: Enable reset drivers for ARCH_BCM2835
Eliav Farber <farbere(a)amazon.com>
pps: clients: gpio: fix interrupt handling order in remove path
Breno Leitao <leitao(a)debian.org>
ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
Sarthak Garg <quic_sartgarg(a)quicinc.com>
mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
Sebastian Ott <sebott(a)redhat.com>
ACPI: processor: fix acpi_object initialization
tuhaowen <tuhaowen(a)uniontech.com>
PM: sleep: console: Fix the black screen issue
Hsin-Te Yuan <yuanhsinte(a)chromium.org>
thermal: sysfs: Return ENODATA instead of EAGAIN for reads
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
Thierry Reding <treding(a)nvidia.com>
firmware: tegra: Fix IVC dependency problems
Zhu Qiyu <qiyuzhu2(a)amd.com>
ACPI: PRM: Reduce unnecessary printing to avoid user confusion
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
selftests: tracing: Use mutex_unlock for testing glob filter
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
tools/build: Fix s390(x) cross-compilation with clang
Aaron Kling <webgeek1234(a)gmail.com>
ARM: tegra: Use I/O memcpy to write to IRAM
Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org>
gpio: tps65912: check the return value of regmap_update_bits()
David Lechner <dlechner(a)baylibre.com>
iio: adc: ad_sigma_delta: don't overallocate scan buffer
Thomas Weißschuh <linux(a)weissschuh.net>
tools/nolibc: define time_t in terms of __kernel_old_time_t
David Collins <david.collins(a)oss.qualcomm.com>
thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required
Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com>
ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
Shubhrajyoti Datta <shubhrajyoti.datta(a)amd.com>
EDAC/synopsys: Clear the ECC counters on init
Lifeng Zheng <zhenglifeng1(a)huawei.com>
PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()
Alexander Kochetkov <al.kochet(a)gmail.com>
ARM: rockchip: fix kernel hang during smp initialization
Lifeng Zheng <zhenglifeng1(a)huawei.com>
cpufreq: Exit governor when failed to start old governor
Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org>
gpio: wcd934x: check the return value of regmap_update_bits()
Hiago De Franco <hiago.franco(a)toradex.com>
remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU
Shuai Xue <xueshuai(a)linux.alibaba.com>
ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
Maulik Shah <maulik.shah(a)oss.qualcomm.com>
soc: qcom: rpmh-rsc: Add RSC version 4 support
Mario Limonciello <mario.limonciello(a)amd.com>
usb: xhci: Avoid showing errors during surprise removal
Jay Chen <shawn2000100(a)gmail.com>
usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
Mario Limonciello <mario.limonciello(a)amd.com>
usb: xhci: Avoid showing warnings for dying controller
Benson Leung <bleung(a)chromium.org>
usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default
Cynthia Huang <cynthia(a)andestech.com>
selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
Prashant Malani <pmalani(a)google.com>
cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
Mario Limonciello <mario.limonciello(a)amd.com>
platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list
Su Hui <suhui(a)nfschina.com>
usb: xhci: print xhci->xhc_state when queue_command failed
Steven Rostedt <rostedt(a)goodmis.org>
tracefs: Add d_delete to remove negative dentries
Al Viro <viro(a)zeniv.linux.org.uk>
securityfs: don't pin dentries twice, once is enough...
Al Viro <viro(a)zeniv.linux.org.uk>
fix locking in efi_secret_unlink()
Wei Gao <wegao(a)suse.com>
ext2: Handle fiemap on empty files to prevent EINVAL
Rong Zhang <ulin0208(a)gmail.com>
fs/ntfs3: correctly create symlink for relative path
Lizhi Xu <lizhi.xu(a)windriver.com>
fs/ntfs3: Add sanity check for file name
Damien Le Moal <dlemoal(a)kernel.org>
ata: libata-sata: Disallow changing LPM state if not supported
Al Viro <viro(a)zeniv.linux.org.uk>
better lockdep annotations for simple_recursive_removal()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfs: fix not erasing deleted b-tree node issue
Sarah Newman <srn(a)prgmr.com>
drbd: add missing kref_get in handle_write_conflicts
Jan Kara <jack(a)suse.cz>
udf: Verify partition map count
Jan Kara <jack(a)suse.cz>
loop: Avoid updating block size under exclusive owner
Andrew Price <anprice(a)redhat.com>
gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops
Keith Busch <kbusch(a)kernel.org>
nvme-pci: try function level reset on init failure
NeilBrown <neil(a)brown.name>
smb/server: avoid deadlock when linking with ReplaceIfExists
Kees Cook <kees(a)kernel.org>
arm64: Handle KCOV __init vs inline mismatches
Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp>
hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfs: fix slab-out-of-bounds in hfs_bnode_read()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfs: fix general protection fault in hfs_find_init()
Jakub Kicinski <kuba(a)kernel.org>
tls: handle data disappearing from under the TLS ULP
Jeongjun Park <aha310510(a)gmail.com>
ptp: prevent possible ABBA deadlock in ptp_clock_freerun()
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
cpuidle: governors: menu: Avoid using invalid recent intervals data
Len Brown <len.brown(a)intel.com>
intel_idle: Allow loading ACPI tables for any family
Xin Long <lucien.xin(a)gmail.com>
sctp: linearize cloned gso packets in sctp_rcv
Alok Tiwari <alok.a.tiwari(a)oracle.com>
net: ti: icss-iep: Fix incorrect type for return value in extts_enable()
Florian Westphal <fw(a)strlen.de>
netfilter: ctnetlink: fix refcount leak on table dump
Sabrina Dubroca <sd(a)queasysnail.net>
udp: also consider secpath when evaluating ipsec use for checksumming
Maxim Levitsky <mlevitsk(a)redhat.com>
KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest
Maxim Levitsky <mlevitsk(a)redhat.com>
KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs
Maxim Levitsky <mlevitsk(a)redhat.com>
KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter
Sean Christopherson <seanjc(a)google.com>
KVM: VMX: Extract checking of guest's DEBUGCTL into helper
Sean Christopherson <seanjc(a)google.com>
KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Fully defer to vendor code to decide how to force immediate exit
Sean Christopherson <seanjc(a)google.com>
KVM: VMX: Handle KVM-induced preemption timer exits in fastpath for L2
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Move handling of is_guest_mode() into fastpath exit handlers
Sean Christopherson <seanjc(a)google.com>
KVM: VMX: Handle forced exit due to preemption timer in fastpath
Sean Christopherson <seanjc(a)google.com>
KVM: VMX: Re-enter guest in fastpath for "spurious" preemption timer exits
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Plumb "force_immediate_exit" into kvm_entry() tracepoint
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Snapshot the host's DEBUGCTL in common x86
Chao Gao <chao.gao(a)intel.com>
KVM: nVMX: Defer SVI update to vmcs01 on EOI when L2 is active w/o VID
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update()
Sean Christopherson <seanjc(a)google.com>
KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow
Manuel Andreas <manuel.andreas(a)tum.de>
KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush
Stefan Metzmacher <metze(a)samba.org>
smb: client: don't wait for info->send_pending == 0 on error
Stefan Metzmacher <metze(a)samba.org>
smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection()
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
ACPI: processor: perflib: Move problematic pr->performance check
Jiayi Li <lijiayi(a)kylinos.cn>
ACPI: processor: perflib: Fix initial _PPC limit application
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
Documentation: ACPI: Fix parent device references
Jann Horn <jannh(a)google.com>
eventpoll: Fix semi-unbounded recursion
Sasha Levin <sashal(a)kernel.org>
fs: Prevent file descriptor table allocations exceeding INT_MAX
Ma Ke <make24(a)iscas.ac.cn>
sunvdc: Balance device refcount in vdc_port_mpgroup_check
Haoran Jiang <jianghaoran(a)kylinos.cn>
LoongArch: BPF: Fix jump offset calculation in tailcall
Huacai Chen <chenhuacai(a)kernel.org>
PCI: Extend isolated function probing to LoongArch
Trond Myklebust <trond.myklebust(a)hammerspace.com>
NFS: Fix the setting of capabilities when automounting a new filesystem
Dai Ngo <dai.ngo(a)oracle.com>
NFSD: detect mismatch of file handle and delegation stateid in OPEN op
Jeff Layton <jlayton(a)kernel.org>
nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
Jens Axboe <axboe(a)kernel.dk>
io_uring/net: commit partial buffers on retry
Xu Yang <xu.yang_2(a)nxp.com>
net: usb: asix_devices: add phy_mask for ax88772 mdio bus
Johan Hovold <johan(a)kernel.org>
net: dpaa: fix device leak when querying time stamp info
Johan Hovold <johan(a)kernel.org>
net: ti: icss-iep: fix device and OF node leaks at probe
Johan Hovold <johan(a)kernel.org>
net: mtk_eth_soc: fix device leak at probe
Johan Hovold <johan(a)kernel.org>
net: enetc: fix device and OF node leak at probe
Johan Hovold <johan(a)kernel.org>
net: gianfar: fix device leak when querying time stamp info
Florian Larysch <fl(a)n621.de>
net: phy: micrel: fix KSZ8081/KSZ8091 cable test
Fedor Pchelkin <pchelkin(a)ispras.ru>
netlink: avoid infinite retry looping in netlink_unicast()
Daniel Golle <daniel(a)makrotopia.org>
Revert "leds: trigger: netdev: Configure LED blink interval for HW offload"
David Thompson <davthompson(a)nvidia.com>
gpio: mlxbf3: use platform_get_irq_optional()
David Thompson <davthompson(a)nvidia.com>
Revert "gpio: mlxbf3: only get IRQ for device instance 0"
David Thompson <davthompson(a)nvidia.com>
gpio: mlxbf2: use platform_get_irq_optional()
Harald Mommer <harald.mommer(a)oss.qualcomm.com>
gpio: virtio: Fix config space reading.
Wang Zhaolong <wangzhaolong(a)huaweicloud.com>
smb: client: remove redundant lstrp update in negotiate protocol
Steve French <stfrench(a)microsoft.com>
smb3: fix for slab out of bounds on mount to ksmbd
Christopher Eby <kreed(a)kreed.org>
ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks
Vasiliy Kovalev <kovalev(a)altlinux.org>
ALSA: hda/realtek: Fix headset mic on HONOR BRB-X
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Validate UAC3 cluster segment descriptors
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Validate UAC3 power domain descriptors, too
Pavel Begunkov <asml.silence(a)gmail.com>
io_uring: don't use int for ABI
-------------
Diffstat:
.../bindings/display/sprd/sprd,sharkl3-dpu.yaml | 2 +-
.../display/sprd/sprd,sharkl3-dsi-host.yaml | 2 +-
Documentation/filesystems/fscrypt.rst | 37 +--
Documentation/firmware-guide/acpi/i2c-muxes.rst | 8 +-
Documentation/networking/bonding.rst | 12 +
Documentation/networking/mptcp-sysctl.rst | 2 +
Documentation/power/runtime_pm.rst | 5 +-
Makefile | 6 +-
arch/arm/include/asm/topology.h | 1 +
arch/arm/mach-rockchip/platsmp.c | 15 +-
arch/arm/mach-tegra/reset.c | 2 +-
arch/arm64/boot/dts/ti/k3-am62-main.dtsi | 1 -
arch/arm64/boot/dts/ti/k3-am62-verdin.dtsi | 12 +-
arch/arm64/boot/dts/ti/k3-am62a7-sk.dts | 4 +-
arch/arm64/boot/dts/ti/k3-pinctrl.h | 15 +-
arch/arm64/include/asm/acpi.h | 2 +-
arch/arm64/include/asm/topology.h | 1 +
arch/arm64/kernel/fpsimd.c | 4 +-
arch/arm64/kernel/topology.c | 26 +-
arch/arm64/kernel/traps.c | 1 +
arch/arm64/mm/fault.c | 1 +
arch/arm64/mm/ptdump_debugfs.c | 3 -
arch/loongarch/kernel/module-sections.c | 38 +--
arch/loongarch/net/bpf_jit.c | 21 +-
arch/m68k/kernel/head.S | 31 +-
arch/mips/crypto/chacha-core.S | 20 +-
arch/mips/include/asm/vpe.h | 8 +
arch/mips/kernel/process.c | 16 +-
arch/mips/lantiq/falcon/sysctrl.c | 23 +-
arch/parisc/Makefile | 6 +-
arch/parisc/include/asm/pgtable.h | 7 +-
arch/parisc/include/asm/special_insns.h | 28 ++
arch/parisc/include/asm/uaccess.h | 21 +-
arch/parisc/kernel/cache.c | 6 +-
arch/parisc/kernel/entry.S | 17 +-
arch/parisc/kernel/syscall.S | 30 +-
arch/parisc/lib/memcpy.c | 19 +-
arch/parisc/mm/fault.c | 4 +
arch/powerpc/boot/Makefile | 1 +
arch/powerpc/include/asm/floppy.h | 5 +-
arch/powerpc/platforms/512x/mpc512x_lpbfifo.c | 6 +-
arch/riscv/include/asm/topology.h | 1 +
arch/s390/hypfs/hypfs_dbfs.c | 19 +-
arch/s390/include/asm/timex.h | 13 +-
arch/s390/kernel/time.c | 2 +-
arch/s390/mm/dump_pagetables.c | 2 -
arch/s390/mm/pgalloc.c | 5 -
arch/um/include/asm/thread_info.h | 4 +
arch/um/kernel/process.c | 18 +-
arch/x86/include/asm/kvm-x86-ops.h | 2 -
arch/x86/include/asm/kvm_host.h | 22 +-
arch/x86/include/asm/msr-index.h | 1 +
arch/x86/include/asm/xen/hypercall.h | 5 +-
arch/x86/kernel/cpu/bugs.c | 5 +-
arch/x86/kernel/cpu/hygon.c | 3 +
arch/x86/kvm/hyperv.c | 3 +
arch/x86/kvm/lapic.c | 19 +-
arch/x86/kvm/lapic.h | 1 +
arch/x86/kvm/svm/svm.c | 42 ++-
arch/x86/kvm/svm/vmenter.S | 9 +-
arch/x86/kvm/trace.h | 9 +-
arch/x86/kvm/vmx/nested.c | 26 +-
arch/x86/kvm/vmx/pmu_intel.c | 8 +-
arch/x86/kvm/vmx/vmx.c | 164 ++++++----
arch/x86/kvm/vmx/vmx.h | 31 +-
arch/x86/kvm/x86.c | 46 ++-
block/blk-core.c | 26 +-
block/blk-settings.c | 2 +-
crypto/jitterentropy-kcapi.c | 9 +-
drivers/acpi/acpi_processor.c | 2 +-
drivers/acpi/apei/ghes.c | 13 +
drivers/acpi/pfr_update.c | 2 +-
drivers/acpi/prmt.c | 26 +-
drivers/acpi/processor_perflib.c | 11 +
drivers/ata/Kconfig | 35 +-
drivers/ata/libata-sata.c | 5 +
drivers/ata/libata-scsi.c | 58 ++--
drivers/base/arch_topology.c | 69 ++--
drivers/base/power/runtime.c | 59 +++-
drivers/block/drbd/drbd_receiver.c | 6 +-
drivers/block/loop.c | 38 ++-
drivers/block/sunvdc.c | 4 +-
drivers/bus/mhi/host/boot.c | 8 +-
drivers/bus/mhi/host/internal.h | 4 +-
drivers/bus/mhi/host/main.c | 12 +-
drivers/cdx/controller/cdx_rpmsg.c | 3 +-
drivers/char/ipmi/ipmi_msghandler.c | 8 +-
drivers/char/ipmi/ipmi_watchdog.c | 59 +++-
drivers/char/misc.c | 4 +-
drivers/clk/qcom/gcc-ipq5018.c | 2 +-
drivers/clk/tegra/clk-periph.c | 4 +-
drivers/comedi/comedi_fops.c | 38 ++-
drivers/comedi/comedi_internal.h | 1 +
drivers/comedi/drivers.c | 40 ++-
drivers/comedi/drivers/pcl726.c | 3 +-
drivers/cpufreq/armada-8k-cpufreq.c | 2 +-
drivers/cpufreq/cppc_cpufreq.c | 2 +-
drivers/cpufreq/cpufreq.c | 12 +-
drivers/cpuidle/governors/menu.c | 98 ++----
drivers/crypto/hisilicon/hpre/hpre_crypto.c | 8 +-
.../crypto/intel/qat/qat_common/adf_common_drv.h | 1 +
drivers/crypto/intel/qat/qat_common/adf_init.c | 1 +
drivers/crypto/intel/qat/qat_common/adf_isr.c | 5 +
drivers/crypto/intel/qat/qat_common/qat_algs.c | 12 +-
.../crypto/marvell/octeontx2/otx2_cptpf_ucode.c | 16 +-
drivers/devfreq/governor_userspace.c | 6 +-
drivers/dma/stm32-dma.c | 2 +-
drivers/edac/synopsys_edac.c | 93 +++---
drivers/firmware/tegra/Kconfig | 5 +-
drivers/fpga/zynq-fpga.c | 10 +-
drivers/gpio/gpio-mlxbf2.c | 2 +-
drivers/gpio/gpio-mlxbf3.c | 52 +--
drivers/gpio/gpio-tps65912.c | 7 +-
drivers/gpio/gpio-virtio.c | 9 +-
drivers/gpio/gpio-wcd934x.c | 7 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_csa.c | 4 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 6 +-
drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c | 57 ++--
drivers/gpu/drm/amd/amdkfd/kfd_module.c | 2 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 6 +-
.../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c | 9 +
.../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_psr.c | 6 +-
.../gpu/drm/amd/display/dc/bios/command_table.c | 2 +-
drivers/gpu/drm/amd/display/dc/clk_mgr/clk_mgr.c | 1 -
.../amd/display/dc/clk_mgr/dce100/dce_clk_mgr.c | 2 -
.../amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 40 ++-
.../amd/display/dc/clk_mgr/dce60/dce60_clk_mgr.c | 31 +-
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 11 +-
drivers/gpu/drm/amd/display/dc/link/link_dpms.c | 3 +-
.../gpu/drm/amd/display/modules/hdcp/hdcp_psp.c | 3 +
drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 6 +
drivers/gpu/drm/amd/pm/swsmu/smu11/vangogh_ppt.c | 37 +--
drivers/gpu/drm/display/drm_dp_helper.c | 2 +-
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 4 +-
drivers/gpu/drm/i915/intel_runtime_pm.c | 5 +-
drivers/gpu/drm/msm/msm_gem.c | 3 +-
drivers/gpu/drm/msm/msm_gem.h | 6 +
drivers/gpu/drm/nouveau/nvif/vmm.c | 3 +-
drivers/gpu/drm/renesas/rcar-du/rzg2l_mipi_dsi.c | 3 +
drivers/gpu/drm/ttm/ttm_pool.c | 8 +-
drivers/gpu/drm/ttm/ttm_resource.c | 3 +
drivers/hid/hid-apple.c | 13 +-
drivers/hid/hid-magicmouse.c | 56 ++--
drivers/hwmon/emc2305.c | 10 +-
drivers/hwmon/gsc-hwmon.c | 4 +-
drivers/i2c/i2c-core-acpi.c | 1 +
drivers/i3c/internals.h | 1 +
drivers/i3c/master.c | 4 +-
drivers/idle/intel_idle.c | 2 +-
drivers/iio/adc/ad7768-1.c | 23 +-
drivers/iio/adc/ad_sigma_delta.c | 6 +-
drivers/iio/imu/bno055/bno055.c | 11 +-
drivers/iio/imu/inv_icm42600/inv_icm42600.h | 8 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 33 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 22 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h | 10 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 6 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 43 ++-
drivers/iio/imu/inv_icm42600/inv_icm42600_temp.c | 12 +-
drivers/iio/light/as73211.c | 2 +-
drivers/iio/pressure/bmp280-core.c | 9 +-
drivers/iio/proximity/isl29501.c | 14 +-
drivers/iio/temperature/maxim_thermocouple.c | 26 +-
drivers/infiniband/core/nldev.c | 22 +-
drivers/infiniband/hw/bnxt_re/ib_verbs.c | 8 +-
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 30 +-
drivers/infiniband/hw/bnxt_re/qplib_fp.h | 2 -
drivers/infiniband/hw/bnxt_re/qplib_res.c | 2 +
drivers/infiniband/hw/erdma/erdma_verbs.c | 4 +-
drivers/infiniband/hw/hfi1/affinity.c | 44 +--
drivers/infiniband/sw/siw/siw_qp_tx.c | 5 +-
drivers/iommu/amd/init.c | 4 +-
drivers/iommu/arm/arm-smmu/arm-smmu-qcom.c | 1 +
drivers/iommu/iommufd/io_pagetable.c | 48 ++-
drivers/leds/flash/leds-qcom-flash.c | 178 +++++++++-
drivers/leds/leds-lp50xx.c | 11 +-
drivers/leds/trigger/ledtrig-netdev.c | 16 +-
drivers/md/dm-ps-historical-service-time.c | 4 +-
drivers/md/dm-ps-queue-length.c | 4 +-
drivers/md/dm-ps-round-robin.c | 4 +-
drivers/md/dm-ps-service-time.c | 4 +-
drivers/md/dm-table.c | 10 +-
drivers/md/dm-zoned-target.c | 2 +-
drivers/media/cec/usb/rainshadow/rainshadow-cec.c | 3 +-
drivers/media/dvb-frontends/dib7000p.c | 8 +
drivers/media/i2c/ccs/ccs-core.c | 2 +-
drivers/media/i2c/hi556.c | 26 +-
drivers/media/i2c/ov2659.c | 3 +-
drivers/media/i2c/tc358743.c | 86 +++--
drivers/media/pci/intel/ivsc/mei_ace.c | 2 +
drivers/media/pci/intel/ivsc/mei_csi.c | 2 +
drivers/media/platform/qcom/camss/camss.c | 4 +-
drivers/media/platform/qcom/venus/core.c | 8 +-
drivers/media/platform/qcom/venus/core.h | 2 +
drivers/media/platform/qcom/venus/hfi_msgs.c | 83 +++--
drivers/media/platform/qcom/venus/hfi_venus.c | 5 +
drivers/media/platform/qcom/venus/vdec.c | 5 +-
drivers/media/platform/qcom/venus/venc.c | 5 +-
.../media/platform/verisilicon/rockchip_vpu_hw.c | 9 -
drivers/media/test-drivers/vivid/vivid-ctrls.c | 3 +-
drivers/media/test-drivers/vivid/vivid-vid-cap.c | 4 +-
drivers/media/usb/gspca/vicam.c | 10 +-
drivers/media/usb/hdpvr/hdpvr-i2c.c | 6 +
drivers/media/usb/usbtv/usbtv-video.c | 4 +
drivers/media/usb/uvc/uvc_driver.c | 3 +
drivers/media/usb/uvc/uvc_video.c | 21 +-
drivers/media/v4l2-core/v4l2-common.c | 8 +-
drivers/media/v4l2-core/v4l2-ctrls-core.c | 1 -
drivers/memstick/core/memstick.c | 1 -
drivers/memstick/host/rtsx_usb_ms.c | 1 +
drivers/mfd/axp20x.c | 3 +-
drivers/misc/cardreader/rtsx_usb.c | 16 +-
drivers/misc/mei/bus.c | 6 +
drivers/mmc/host/rtsx_usb_sdmmc.c | 4 +-
drivers/mmc/host/sdhci-msm.c | 14 +
drivers/mmc/host/sdhci-pci-gli.c | 35 +-
drivers/most/core.c | 2 +-
drivers/mtd/nand/raw/fsmc_nand.c | 2 +
drivers/mtd/nand/raw/renesas-nand-controller.c | 6 +
drivers/mtd/nand/spi/core.c | 5 +-
drivers/mtd/spi-nor/swp.c | 19 +-
drivers/net/bonding/bond_3ad.c | 224 +++++++++++--
drivers/net/bonding/bond_main.c | 1 +
drivers/net/bonding/bond_netlink.c | 16 +
drivers/net/bonding/bond_options.c | 29 +-
drivers/net/dsa/b53/b53_common.c | 63 +++-
drivers/net/dsa/b53/b53_regs.h | 2 +
drivers/net/ethernet/agere/et131x.c | 36 ++
drivers/net/ethernet/aquantia/atlantic/aq_hw.h | 2 +
.../aquantia/atlantic/hw_atl2/hw_atl2_utils_fw.c | 39 +++
drivers/net/ethernet/atheros/ag71xx.c | 9 +
drivers/net/ethernet/cavium/thunder/thunder_bgx.c | 4 +-
drivers/net/ethernet/emulex/benet/be_main.c | 8 +-
drivers/net/ethernet/freescale/dpaa/dpaa_eth.c | 2 -
drivers/net/ethernet/freescale/dpaa/dpaa_ethtool.c | 4 +-
drivers/net/ethernet/freescale/enetc/enetc_pf.c | 14 +-
drivers/net/ethernet/freescale/fec_main.c | 34 +-
drivers/net/ethernet/freescale/gianfar_ethtool.c | 4 +-
drivers/net/ethernet/google/gve/gve_adminq.c | 1 +
drivers/net/ethernet/google/gve/gve_main.c | 2 +
drivers/net/ethernet/intel/igc/igc_main.c | 14 +-
drivers/net/ethernet/intel/ixgbe/ixgbe_xsk.c | 4 +-
.../net/ethernet/marvell/octeontx2/af/rvu_npc_fs.c | 4 +-
drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 2 +
drivers/net/ethernet/mediatek/mtk_wed.c | 1 -
.../ethernet/mellanox/mlx5/core/en/port_buffer.c | 18 +-
drivers/net/ethernet/mellanox/mlx5/core/en/qos.c | 2 +-
.../ethernet/mellanox/mlx5/core/esw/devlink_port.c | 4 +-
drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +
drivers/net/ethernet/mellanox/mlxsw/trap.h | 1 +
drivers/net/ethernet/pensando/ionic/ionic_lif.c | 7 +-
drivers/net/ethernet/ti/icssg/icss_iep.c | 26 +-
drivers/net/hyperv/hyperv_net.h | 3 +
drivers/net/hyperv/netvsc_drv.c | 29 +-
drivers/net/ipa/ipa_smp2p.c | 2 +-
drivers/net/phy/micrel.c | 12 +-
drivers/net/phy/mscc/mscc.h | 12 +
drivers/net/phy/mscc/mscc_main.c | 12 +
drivers/net/phy/mscc/mscc_ptp.c | 49 ++-
drivers/net/phy/smsc.c | 1 +
drivers/net/ppp/ppp_generic.c | 17 +-
drivers/net/thunderbolt/main.c | 21 +-
drivers/net/usb/asix_devices.c | 1 +
drivers/net/usb/cdc_ncm.c | 20 +-
drivers/net/wireless/ath/ath11k/ce.c | 3 -
drivers/net/wireless/ath/ath11k/dp_rx.c | 3 -
drivers/net/wireless/ath/ath11k/hal.c | 33 +-
drivers/net/wireless/ath/ath12k/ce.c | 3 -
drivers/net/wireless/ath/ath12k/dp.c | 3 +-
drivers/net/wireless/ath/ath12k/hal.c | 38 ++-
drivers/net/wireless/ath/ath12k/hw.c | 2 +-
drivers/net/wireless/ath/ath12k/wmi.c | 5 +
.../broadcom/brcm80211/brcmsmac/phy/phy_lcn.c | 2 +-
drivers/net/wireless/intel/iwlegacy/4965-mac.c | 5 +-
drivers/net/wireless/intel/iwlwifi/dvm/rs.c | 2 +-
drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 7 +-
drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 2 +
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 2 +-
drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 25 +-
drivers/net/wireless/realtek/rtlwifi/pci.c | 23 +-
drivers/net/wireless/realtek/rtw89/core.c | 3 +
drivers/net/wireless/realtek/rtw89/fw.c | 9 +-
drivers/net/wireless/realtek/rtw89/fw.h | 2 +
drivers/net/wireless/realtek/rtw89/mac.c | 19 ++
drivers/net/wireless/realtek/rtw89/reg.h | 1 +
drivers/net/xen-netfront.c | 5 -
drivers/nvme/host/pci.c | 24 +-
drivers/pci/controller/dwc/pci-imx6.c | 7 +-
drivers/pci/controller/pcie-rockchip-host.c | 49 +--
drivers/pci/controller/pcie-rockchip.h | 11 +-
drivers/pci/endpoint/pci-ep-cfs.c | 1 +
drivers/pci/endpoint/pci-epf-core.c | 2 +-
drivers/pci/pci-acpi.c | 4 +-
drivers/pci/pci.c | 10 +-
drivers/pci/probe.c | 2 +-
drivers/perf/cxl_pmu.c | 2 +-
drivers/phy/qualcomm/phy-qcom-m31.c | 14 +-
drivers/phy/rockchip/phy-rockchip-pcie.c | 3 +-
drivers/pinctrl/stm32/pinctrl-stm32.c | 1 +
drivers/platform/chrome/cros_ec.c | 3 +
drivers/platform/chrome/cros_ec_typec.c | 4 +-
drivers/platform/x86/amd/pmc/pmc-quirks.c | 9 +
drivers/platform/x86/thinkpad_acpi.c | 4 +-
drivers/pmdomain/imx/imx8m-blk-ctrl.c | 10 +
drivers/power/supply/qcom_battmgr.c | 2 +
drivers/pps/clients/pps-gpio.c | 5 +-
drivers/ptp/ptp_clock.c | 2 +-
drivers/ptp/ptp_private.h | 5 +
drivers/ptp/ptp_vclock.c | 7 +
drivers/pwm/pwm-imx-tpm.c | 9 +
drivers/pwm/pwm-mediatek.c | 71 ++--
drivers/remoteproc/imx_rproc.c | 4 +-
drivers/reset/Kconfig | 10 +-
drivers/rtc/rtc-ds1307.c | 15 +-
drivers/s390/char/sclp.c | 11 +-
drivers/scsi/aacraid/comminit.c | 3 +-
drivers/scsi/bfa/bfad_im.c | 1 +
drivers/scsi/libiscsi.c | 3 +-
drivers/scsi/lpfc/lpfc_debugfs.c | 1 -
drivers/scsi/lpfc/lpfc_scsi.c | 4 +
drivers/scsi/mpi3mr/mpi3mr.h | 6 +-
drivers/scsi/mpi3mr/mpi3mr_fw.c | 17 +-
drivers/scsi/mpi3mr/mpi3mr_os.c | 22 +-
drivers/scsi/mpt3sas/mpt3sas_scsih.c | 19 ++
drivers/scsi/qla4xxx/ql4_os.c | 2 +
drivers/scsi/scsi_scan.c | 2 +-
drivers/scsi/scsi_transport_sas.c | 62 +++-
drivers/soc/qcom/mdt_loader.c | 53 ++-
drivers/soc/qcom/rpmh-rsc.c | 2 +-
drivers/soc/tegra/pmc.c | 51 +--
drivers/soundwire/amd_manager.c | 6 +-
drivers/soundwire/bus.c | 6 +-
drivers/spi/spi-fsl-lpspi.c | 8 +-
drivers/staging/media/imx/imx-media-csc-scaler.c | 2 +-
drivers/target/target_core_fabric_lib.c | 65 +++-
drivers/target/target_core_internal.h | 4 +-
drivers/target/target_core_pr.c | 18 +-
drivers/thermal/qcom/qcom-spmi-temp-alarm.c | 43 ++-
drivers/thermal/thermal_sysfs.c | 9 +-
drivers/thunderbolt/domain.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 3 +-
drivers/tty/vt/defkeymap.c_shipped | 112 +++++++
drivers/tty/vt/keyboard.c | 2 +-
drivers/ufs/core/ufshcd-priv.h | 2 +-
drivers/ufs/host/ufs-exynos.c | 4 +-
drivers/ufs/host/ufshcd-pci.c | 42 ++-
drivers/usb/atm/cxacru.c | 172 +++++-----
drivers/usb/class/cdc-acm.c | 11 +-
drivers/usb/core/config.c | 10 +-
drivers/usb/core/hcd.c | 8 +-
drivers/usb/core/quirks.c | 1 +
drivers/usb/core/urb.c | 2 +-
drivers/usb/dwc3/dwc3-imx8mp.c | 6 +-
drivers/usb/dwc3/dwc3-meson-g12a.c | 3 +
drivers/usb/dwc3/dwc3-pci.c | 2 +
drivers/usb/dwc3/ep0.c | 20 +-
drivers/usb/dwc3/gadget.c | 19 +-
drivers/usb/gadget/udc/renesas_usb3.c | 1 +
drivers/usb/host/xhci-hub.c | 3 +-
drivers/usb/host/xhci-mem.c | 24 +-
drivers/usb/host/xhci-pci-renesas.c | 7 +-
drivers/usb/host/xhci-ring.c | 19 +-
drivers/usb/host/xhci.c | 27 +-
drivers/usb/host/xhci.h | 3 +-
drivers/usb/musb/omap2430.c | 14 +-
drivers/usb/storage/realtek_cr.c | 2 +-
drivers/usb/storage/unusual_devs.h | 29 ++
drivers/usb/typec/mux/intel_pmc_mux.c | 2 +-
drivers/usb/typec/tcpm/fusb302.c | 8 +
drivers/usb/typec/tcpm/maxim_contaminant.c | 54 +++
drivers/usb/typec/tcpm/tcpci_maxim.h | 1 +
drivers/usb/typec/ucsi/psy.c | 2 +-
drivers/usb/typec/ucsi/ucsi.c | 1 +
drivers/usb/typec/ucsi/ucsi.h | 7 +-
drivers/vfio/pci/mlx5/cmd.c | 4 +-
drivers/vfio/vfio_iommu_type1.c | 7 +
drivers/vhost/vhost.c | 3 +
drivers/vhost/vsock.c | 6 +-
drivers/video/console/vgacon.c | 2 +-
drivers/video/fbdev/core/fbcon.c | 9 +-
drivers/video/fbdev/core/fbmem.c | 3 +
drivers/virt/coco/efi_secret/efi_secret.c | 10 +-
drivers/watchdog/dw_wdt.c | 2 +
drivers/watchdog/iTCO_wdt.c | 6 +-
drivers/watchdog/sbsa_gwdt.c | 50 ++-
fs/btrfs/backref.c | 6 +-
fs/btrfs/block-group.c | 61 ++--
fs/btrfs/block-group.h | 11 +-
fs/btrfs/block-rsv.c | 2 +-
fs/btrfs/block-rsv.h | 2 +-
fs/btrfs/btrfs_inode.h | 3 +-
fs/btrfs/ctree.c | 24 +-
fs/btrfs/ctree.h | 6 +-
fs/btrfs/delayed-inode.c | 12 +-
fs/btrfs/discard.c | 4 +-
fs/btrfs/extent-tree.c | 33 +-
fs/btrfs/file-item.c | 4 +-
fs/btrfs/file-item.h | 2 +-
fs/btrfs/free-space-tree.c | 17 +-
fs/btrfs/inode-item.c | 10 +-
fs/btrfs/inode-item.h | 4 +-
fs/btrfs/inode.c | 26 +-
fs/btrfs/qgroup.c | 31 +-
fs/btrfs/relocation.c | 19 ++
fs/btrfs/send.c | 361 ++++++++++++---------
fs/btrfs/space-info.c | 17 +-
fs/btrfs/space-info.h | 6 +-
fs/btrfs/tree-log.c | 72 ++--
fs/btrfs/tree-mod-log.c | 14 +-
fs/btrfs/tree-mod-log.h | 6 +-
fs/btrfs/zoned.c | 20 +-
fs/btrfs/zoned.h | 4 +-
fs/buffer.c | 2 +-
fs/crypto/fscrypt_private.h | 16 +
fs/crypto/hkdf.c | 2 +-
fs/crypto/keysetup.c | 3 +-
fs/crypto/keysetup_v1.c | 3 +-
fs/eventpoll.c | 60 +++-
fs/exfat/dir.c | 12 +
fs/exfat/fatent.c | 10 +
fs/exfat/namei.c | 5 +
fs/exfat/super.c | 32 +-
fs/ext2/inode.c | 12 +-
fs/ext4/fsmap.c | 23 +-
fs/ext4/indirect.c | 4 +-
fs/ext4/inline.c | 19 +-
fs/ext4/inode.c | 2 +-
fs/ext4/mballoc.c | 69 ++--
fs/ext4/orphan.c | 5 +-
fs/ext4/super.c | 8 +-
fs/f2fs/file.c | 24 +-
fs/f2fs/node.c | 10 +
fs/file.c | 15 +
fs/gfs2/meta_io.c | 2 +
fs/hfs/bfind.c | 3 +
fs/hfs/bnode.c | 93 ++++++
fs/hfs/btree.c | 57 +++-
fs/hfs/extent.c | 2 +-
fs/hfs/hfs_fs.h | 1 +
fs/hfsplus/bnode.c | 92 ++++++
fs/hfsplus/unicode.c | 7 +
fs/hfsplus/xattr.c | 6 +-
fs/hugetlbfs/inode.c | 2 +-
fs/jbd2/checkpoint.c | 1 +
fs/jfs/file.c | 3 +
fs/jfs/inode.c | 2 +-
fs/jfs/jfs_dmap.c | 6 +
fs/libfs.c | 4 +-
fs/namespace.c | 34 +-
fs/nfs/blocklayout/blocklayout.c | 4 +-
fs/nfs/blocklayout/dev.c | 5 +-
fs/nfs/blocklayout/extent_tree.c | 20 +-
fs/nfs/client.c | 44 ++-
fs/nfs/internal.h | 2 +-
fs/nfs/nfs4client.c | 20 +-
fs/nfs/nfs4proc.c | 2 +-
fs/nfs/pnfs.c | 11 +-
fs/nfsd/nfs4state.c | 34 +-
fs/ntfs3/dir.c | 3 +
fs/ntfs3/inode.c | 31 +-
fs/orangefs/orangefs-debugfs.c | 2 +-
fs/smb/client/cifssmb.c | 10 +
fs/smb/client/connect.c | 10 +-
fs/smb/client/sess.c | 9 +
fs/smb/client/smb2ops.c | 11 +-
fs/smb/client/smbdirect.c | 24 +-
fs/smb/server/connection.c | 3 +-
fs/smb/server/connection.h | 7 +-
fs/smb/server/oplock.c | 13 +-
fs/smb/server/smb2pdu.c | 16 +-
fs/smb/server/transport_rdma.c | 5 +-
fs/smb/server/transport_rdma.h | 4 +-
fs/smb/server/transport_tcp.c | 26 +-
fs/squashfs/super.c | 14 +-
fs/tracefs/inode.c | 11 +
fs/udf/super.c | 13 +-
fs/xfs/xfs_itable.c | 6 +-
include/linux/arch_topology.h | 8 +
include/linux/blk_types.h | 6 +-
include/linux/compiler.h | 8 -
include/linux/cpufreq.h | 1 +
include/linux/energy_model.h | 6 +-
include/linux/fs.h | 4 +-
include/linux/hypervisor.h | 3 +
include/linux/if_vlan.h | 21 +-
include/linux/iosys-map.h | 7 +-
include/linux/memfd.h | 14 +
include/linux/mm.h | 76 +++--
include/linux/pci.h | 10 +-
include/linux/pm_runtime.h | 18 +-
include/linux/sched/topology.h | 8 +
include/linux/skbuff.h | 8 +-
include/linux/usb/cdc_ncm.h | 1 +
include/linux/virtio_vsock.h | 7 +-
include/net/bond_3ad.h | 3 +
include/net/bond_options.h | 1 +
include/net/bonding.h | 23 ++
include/net/cfg80211.h | 2 +-
include/net/mac80211.h | 2 +
include/net/neighbour.h | 1 +
include/net/net_namespace.h | 16 +
include/net/sock.h | 1 +
include/trace/events/btrfs.h | 6 +-
include/trace/events/thp.h | 2 +
include/uapi/linux/if_link.h | 1 +
include/uapi/linux/in6.h | 4 +-
include/uapi/linux/io_uring.h | 2 +-
include/uapi/linux/pfrut.h | 1 +
io_uring/net.c | 19 +-
kernel/bpf/verifier.c | 3 +-
kernel/cgroup/cpuset.c | 2 +-
kernel/fork.c | 2 +-
kernel/module/main.c | 10 +-
kernel/power/console.c | 7 +-
kernel/rcu/tree.c | 2 +
kernel/rcu/tree.h | 14 +-
kernel/rcu/tree_plugin.h | 44 ++-
kernel/sched/cpufreq_schedutil.c | 30 +-
kernel/sched/fair.c | 19 +-
kernel/trace/ftrace.c | 19 +-
kernel/trace/trace.c | 33 +-
kernel/trace/trace.h | 10 +-
mm/debug_vm_pgtable.c | 9 +-
mm/filemap.c | 2 +-
mm/kmemleak.c | 10 +-
mm/madvise.c | 2 +-
mm/memfd.c | 2 +-
mm/memory-failure.c | 8 +
mm/mmap.c | 12 +-
mm/ptdump.c | 2 +
mm/shmem.c | 2 +-
net/bluetooth/hci_conn.c | 3 +-
net/bluetooth/hci_event.c | 8 +-
net/bluetooth/hci_sock.c | 2 +-
net/bridge/br_multicast.c | 16 +
net/bridge/br_private.h | 2 +
net/core/dev.c | 12 +
net/core/neighbour.c | 12 +-
net/core/net_namespace.c | 8 +-
net/core/sock.c | 27 +-
net/hsr/hsr_slave.c | 8 +-
net/ipv4/netfilter/nf_reject_ipv4.c | 6 +-
net/ipv4/route.c | 1 -
net/ipv4/udp_offload.c | 2 +-
net/ipv6/addrconf.c | 7 +-
net/ipv6/mcast.c | 11 +-
net/ipv6/netfilter/nf_reject_ipv6.c | 5 +-
net/ipv6/seg6_hmac.c | 6 +-
net/mac80211/cfg.c | 12 +-
net/mac80211/chan.c | 1 +
net/mac80211/mlme.c | 9 +-
net/mac80211/rx.c | 12 +-
net/mctp/af_mctp.c | 28 +-
net/mptcp/options.c | 6 +-
net/mptcp/pm_netlink.c | 19 +-
net/mptcp/subflow.c | 5 +-
net/ncsi/internal.h | 2 +-
net/ncsi/ncsi-rsp.c | 1 +
net/netfilter/nf_conntrack_netlink.c | 24 +-
net/netlink/af_netlink.c | 12 +-
net/rds/tcp.c | 8 +-
net/sched/sch_cake.c | 14 +-
net/sched/sch_ets.c | 36 +-
net/sched/sch_htb.c | 2 +-
net/sctp/input.c | 2 +-
net/smc/af_smc.c | 8 +-
net/sunrpc/svcsock.c | 5 +-
net/sunrpc/xprtsock.c | 8 +-
net/tls/tls.h | 2 +-
net/tls/tls_strp.c | 11 +-
net/tls/tls_sw.c | 10 +-
net/vmw_vsock/virtio_transport.c | 14 +-
net/wireless/mlme.c | 3 +-
net/xfrm/xfrm_state.c | 74 +++--
scripts/kconfig/gconf.c | 8 +-
scripts/kconfig/lxdialog/inputbox.c | 6 +-
scripts/kconfig/lxdialog/menubox.c | 2 +-
scripts/kconfig/nconf.c | 2 +
scripts/kconfig/nconf.gui.c | 1 +
security/apparmor/file.c | 6 +-
security/apparmor/include/lib.h | 6 +-
security/inode.c | 2 -
sound/core/pcm_native.c | 19 +-
sound/hda/hdac_device.c | 2 +-
sound/pci/hda/hda_codec.c | 44 +--
sound/pci/hda/patch_ca0132.c | 2 +-
sound/pci/hda/patch_realtek.c | 4 +
sound/pci/intel8x0.c | 2 +-
sound/soc/codecs/hdac_hdmi.c | 10 +-
sound/soc/codecs/rt5640.c | 5 +
sound/soc/fsl/fsl_sai.c | 20 +-
sound/soc/intel/avs/core.c | 3 +-
sound/soc/qcom/lpass-platform.c | 27 +-
sound/soc/soc-core.c | 3 +
sound/soc/soc-dapm.c | 4 +
sound/usb/mixer_quirks.c | 14 +-
sound/usb/stream.c | 25 +-
sound/usb/validate.c | 14 +-
tools/bpf/bpftool/main.c | 6 +-
tools/include/nolibc/std.h | 4 +-
tools/include/nolibc/types.h | 4 +-
tools/include/uapi/linux/if_link.h | 1 +
.../cpupower/utils/idle_monitor/mperf_monitor.c | 4 +-
tools/scripts/Makefile.include | 4 +-
tools/testing/ktest/ktest.pl | 5 +-
tools/testing/selftests/arm64/fp/sve-ptrace.c | 3 +-
.../selftests/bpf/prog_tests/user_ringbuf.c | 10 +-
.../testing/selftests/bpf/progs/verifier_unpriv.c | 2 +-
.../ftrace/test.d/ftrace/func-filter-glob.tc | 2 +-
tools/testing/selftests/futex/include/futextest.h | 11 +
tools/testing/selftests/memfd/memfd_test.c | 43 +++
tools/testing/selftests/net/mptcp/pm_netlink.sh | 1 +
612 files changed, 6034 insertions(+), 2714 deletions(-)
3 weeks, 1 day
- 12
- 602
3 weeks, 1 day
- 1
- 0
[PATCH v2 3/4] cxl, acpi/hmat: Update CXL access coordinates directly instead of through HMAT
by Dave Jiang
The current implementation of CXL memory hotplug notifier gets called
before the HMAT memory hotplug notifier. The CXL driver calculates the
access coordinates (bandwidth and latency values) for the CXL end to
end path (i.e. CPU to endpoint). When the CXL region is onlined, the CXL
memory hotplug notifier writes the access coordinates to the HMAT target
structs. Then the HMAT memory hotplug notifier is called and it creates
the access coordinates for the node sysfs attributes.
During testing on an Intel platform, it was found that although the
newly calculated coordinates were pushed to sysfs, the sysfs attributes for
the access coordinates showed up with the wrong initiator. The system has
4 nodes (0, 1, 2, 3) where node 0 and 1 are CPU nodes and node 2 and 3 are
CXL nodes. The expectation is that node 2 would show up as a target to node
0:
/sys/devices/system/node/node2/access0/initiators/node0
However it was observed that node 2 showed up as a target under node 1:
/sys/devices/system/node/node2/access0/initiators/node1
The original intent of the 'ext_updated' flag in HMAT handling code was to
stop HMAT memory hotplug callback from clobbering the access coordinates
after CXL has injected its calculated coordinates and replaced the generic
target access coordinates provided by the HMAT table in the HMAT target
structs. However the flag is hacky at best and blocks the updates from
other CXL regions that are onlined in the same node later on. Remove the
'ext_updated' flag usage and just update the access coordinates for the
nodes directly without touching HMAT target data.
The hotplug memory callback ordering is changed. Instead of changing CXL,
move HMAT back so there's room for the levels rather than have CXL share
the same level as SLAB_CALLBACK_PRI. The change will resulting in the CXL
callback to be executed after the HMAT callback.
With the change, the CXL hotplug memory notifier runs after the HMAT
callback. The HMAT callback will create the node sysfs attributes for
access coordinates. The CXL callback will write the access coordinates to
the now created node sysfs attributes directly and will not pollute the
HMAT target values.
Fixes: 067353a46d8c ("cxl/region: Add memory hotplug notifier for cxl region")
Cc: stable(a)vger.kernel.org
Tested-by: Marc Herbert <marc.herbert(a)linux.intel.com>
Reviewed-by: Dan Williams <dan.j.williams(a)intel.com>
Signed-off-by: Dave Jiang <dave.jiang(a)intel.com>
---
v2:
- Add description to what was observed for the issue. (Dan)
- Use the correct Fixes tag. (Dan)
- Add Cc to stable. (Dan)
- Add support to only update on first region appearance. (Jonathan)
---
drivers/acpi/numa/hmat.c | 6 ------
drivers/cxl/core/cdat.c | 5 -----
drivers/cxl/core/core.h | 1 -
drivers/cxl/core/region.c | 21 +++++++++++++--------
include/linux/memory.h | 2 +-
5 files changed, 14 insertions(+), 21 deletions(-)
diff --git a/drivers/acpi/numa/hmat.c b/drivers/acpi/numa/hmat.c
index 4958301f5417..5d32490dc4ab 100644
--- a/drivers/acpi/numa/hmat.c
+++ b/drivers/acpi/numa/hmat.c
@@ -74,7 +74,6 @@ struct memory_target {
struct node_cache_attrs cache_attrs;
u8 gen_port_device_handle[ACPI_SRAT_DEVICE_HANDLE_SIZE];
bool registered;
- bool ext_updated; /* externally updated */
};
struct memory_initiator {
@@ -391,7 +390,6 @@ int hmat_update_target_coordinates(int nid, struct access_coordinate *coord,
coord->read_bandwidth, access);
hmat_update_target_access(target, ACPI_HMAT_WRITE_BANDWIDTH,
coord->write_bandwidth, access);
- target->ext_updated = true;
return 0;
}
@@ -773,10 +771,6 @@ static void hmat_update_target_attrs(struct memory_target *target,
u32 best = 0;
int i;
- /* Don't update if an external agent has changed the data. */
- if (target->ext_updated)
- return;
-
/* Don't update for generic port if there's no device handle */
if ((access == NODE_ACCESS_CLASS_GENPORT_SINK_LOCAL ||
access == NODE_ACCESS_CLASS_GENPORT_SINK_CPU) &&
diff --git a/drivers/cxl/core/cdat.c b/drivers/cxl/core/cdat.c
index c0af645425f4..c891fd618cfd 100644
--- a/drivers/cxl/core/cdat.c
+++ b/drivers/cxl/core/cdat.c
@@ -1081,8 +1081,3 @@ int cxl_update_hmat_access_coordinates(int nid, struct cxl_region *cxlr,
{
return hmat_update_target_coordinates(nid, &cxlr->coord[access], access);
}
-
-bool cxl_need_node_perf_attrs_update(int nid)
-{
- return !acpi_node_backed_by_real_pxm(nid);
-}
diff --git a/drivers/cxl/core/core.h b/drivers/cxl/core/core.h
index 2669f251d677..a253d308f3c9 100644
--- a/drivers/cxl/core/core.h
+++ b/drivers/cxl/core/core.h
@@ -139,7 +139,6 @@ long cxl_pci_get_latency(struct pci_dev *pdev);
int cxl_pci_get_bandwidth(struct pci_dev *pdev, struct access_coordinate *c);
int cxl_update_hmat_access_coordinates(int nid, struct cxl_region *cxlr,
enum access_coordinate_class access);
-bool cxl_need_node_perf_attrs_update(int nid);
int cxl_port_get_switch_dport_bandwidth(struct cxl_port *port,
struct access_coordinate *c);
diff --git a/drivers/cxl/core/region.c b/drivers/cxl/core/region.c
index 71cc42d05248..371873fc43eb 100644
--- a/drivers/cxl/core/region.c
+++ b/drivers/cxl/core/region.c
@@ -9,6 +9,7 @@
#include <linux/uuid.h>
#include <linux/sort.h>
#include <linux/idr.h>
+#include <linux/xarray.h>
#include <linux/memory-tiers.h>
#include <cxlmem.h>
#include <cxl.h>
@@ -30,6 +31,9 @@
* 3. Decoder targets
*/
+/* xarray that stores the reference count per node for regions */
+static DEFINE_XARRAY(node_regions_xa);
+
static struct cxl_region *to_cxl_region(struct device *dev);
#define __ACCESS_ATTR_RO(_level, _name) { \
@@ -2442,14 +2446,8 @@ static bool cxl_region_update_coordinates(struct cxl_region *cxlr, int nid)
for (int i = 0; i < ACCESS_COORDINATE_MAX; i++) {
if (cxlr->coord[i].read_bandwidth) {
- rc = 0;
- if (cxl_need_node_perf_attrs_update(nid))
- node_set_perf_attrs(nid, &cxlr->coord[i], i);
- else
- rc = cxl_update_hmat_access_coordinates(nid, cxlr, i);
-
- if (rc == 0)
- cset++;
+ node_update_perf_attrs(nid, &cxlr->coord[i], i);
+ cset++;
}
}
@@ -2475,6 +2473,7 @@ static int cxl_region_perf_attrs_callback(struct notifier_block *nb,
struct node_notify *nn = arg;
int nid = nn->nid;
int region_nid;
+ int rc;
if (action != NODE_ADDED_FIRST_MEMORY)
return NOTIFY_DONE;
@@ -2487,6 +2486,11 @@ static int cxl_region_perf_attrs_callback(struct notifier_block *nb,
if (nid != region_nid)
return NOTIFY_DONE;
+ /* No action needed if there's existing entry */
+ rc = xa_insert(&node_regions_xa, nid, NULL, GFP_KERNEL);
+ if (rc < 0)
+ return NOTIFY_DONE;
+
if (!cxl_region_update_coordinates(cxlr, nid))
return NOTIFY_DONE;
@@ -3638,6 +3642,7 @@ int cxl_region_init(void)
void cxl_region_exit(void)
{
+ xa_destroy(&node_regions_xa);
cxl_driver_unregister(&cxl_region_driver);
}
diff --git a/include/linux/memory.h b/include/linux/memory.h
index de5c0d8e8925..684fd641f2f0 100644
--- a/include/linux/memory.h
+++ b/include/linux/memory.h
@@ -120,8 +120,8 @@ struct mem_section;
*/
#define DEFAULT_CALLBACK_PRI 0
#define SLAB_CALLBACK_PRI 1
-#define HMAT_CALLBACK_PRI 2
#define CXL_CALLBACK_PRI 5
+#define HMAT_CALLBACK_PRI 6
#define MM_COMPUTE_BATCH_PRI 10
#define CPUSET_CALLBACK_PRI 10
#define MEMTIER_HOTPLUG_PRI 100
--
2.50.1
3 weeks, 1 day
- 2
- 1
Re: [PATCH] interconnect: qcom: icc-rpm: Set the count member before accessing the flex array
by Dan Carpenter
Hi Greg,
Could you pick up this commit for 6.12 and 6.6:
00a973e093e9 ("interconnect: qcom: icc-rpm: Set the count member before accessing the flex array")
It just silences a UBSan warning so it doesn't affect regular users, but
it helps in testing to silence those warnings. It is a clean cherry-pick.
regards,
dan carpenter
On Wed, Dec 04, 2024 at 12:33:34AM +0200, djakov(a)kernel.org wrote:
> From: Georgi Djakov <djakov(a)kernel.org>
>
> The following UBSAN error is reported during boot on the db410c board on
> a clang-19 build:
>
> Internal error: UBSAN: array index out of bounds: 00000000f2005512 [#1] PREEMPT SMP
> ...
> pc : qnoc_probe+0x5f8/0x5fc
> ...
>
> The cause of the error is that the counter member was not set before
> accessing the annotated flexible array member, but after that. Fix this
> by initializing it earlier.
>
> Reported-by: Linux Kernel Functional Testing <lkft(a)linaro.org>
> Closes: https://lore.kernel.org/r/CA+G9fYs+2mBz1y2dAzxkj9-oiBJ2Acm1Sf1h2YQ3VmBqj_VX…
> Fixes: dd4904f3b924 ("interconnect: qcom: Annotate struct icc_onecell_data with __counted_by")
> Signed-off-by: Georgi Djakov <djakov(a)kernel.org>
> ---
> drivers/interconnect/qcom/icc-rpm.c | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/drivers/interconnect/qcom/icc-rpm.c b/drivers/interconnect/qcom/icc-rpm.c
> index a8ed435f696c..ea1042d38128 100644
> --- a/drivers/interconnect/qcom/icc-rpm.c
> +++ b/drivers/interconnect/qcom/icc-rpm.c
> @@ -503,6 +503,7 @@ int qnoc_probe(struct platform_device *pdev)
> GFP_KERNEL);
> if (!data)
> return -ENOMEM;
> + data->num_nodes = num_nodes;
>
> qp->num_intf_clks = cd_num;
> for (i = 0; i < cd_num; i++)
> @@ -597,7 +598,6 @@ int qnoc_probe(struct platform_device *pdev)
>
> data->nodes[i] = node;
> }
> - data->num_nodes = num_nodes;
>
> clk_bulk_disable_unprepare(qp->num_intf_clks, qp->intf_clks);
>
3 weeks, 1 day
- 1
- 0
ACPI: EC: Add device to acpi_ec_no_wakeup[] qurik list
by Werner Sembach
Commit ID: 9cd51eefae3c871440b93c03716c5398f41bdf78
Why it should be applied: This is a small addition to a quirk list for which I
forgot to set cc: stable when originally submitted it. Bringing it onto stable
will result in several downstream distributions automatically adopting the
patch, helping the affected device.
What kernel versions I wish it to be applied to: It should apply cleanly to
6.1.y and newer longterm releases.
I hope I correctly followed
https://docs.kernel.org/process/stable-kernel-rules.html#option-2 to bring this
into stable.
3 weeks, 1 day
- 2
- 1
After Hours? Dr. Sam Lavi Cosmetic And Implant Dentistry
by Mohanish Ved
Hi Dr. Sam Lavi Cosmetic And Implant Dentistry ,
Quick question: what happens when a patient calls after hours about implants?
Studies show 35–40% of dental calls go unanswered.
Every unanswered call = one implant patient choosing another practice.
We built an AI voice agent that answers every call, educates patients, and books consultations
24/7.
Want me to send you a 30-sec demo recording so you can hear it in action?
Just reply 'Yes' and I’ll send it right away.
—
Best regards,
Mohanish Ved
AI Growth Specialist
EditRage Solutions
3 weeks, 1 day
- 1
- 0
Re: Bug report - Sticky keys acting not sticky sometimes
by Alerymin
Note:
The issue looks like it's from tty directly but I don't see who is the maintainer, so I email the closest I can get
Description:
In command line, sticky keys reset only when typing ASCII and ISO-8859-1 characters.
Tested with the QWERTY Lafayette layout: https://codeberg.org/Alerymin/kbd-qwerty-lafayette
Observed Behaviour:
When the layout is loaded in ISO-8859-15, most characters typed don't reset the sticky key, unless it's basic ASCII characters or Unicode
When the layout is loaded in ISO-8859-1, the sticky key works fine.
Expected behaviour:
Sticky key working in ISO-8859-1 and ISO-8859-15
System used:
Arch Linux, kernel 6.16.3-arch1-1
3 weeks, 1 day
- 2
- 3
[PATCH 3/3] drm/xe: Block exec and rebind worker while evicting for suspend / hibernate
by Thomas Hellström
When the xe pm_notifier evicts for suspend / hibernate, there might be
racing tasks trying to re-validate again. This can lead to suspend taking
excessive time or get stuck in a live-lock. This behaviour becomes
much worse with the fix that actually makes re-validation bring back
bos to VRAM rather than letting them remain in TT.
Prevent that by having exec and the rebind worker waiting for a completion
that is set to block by the pm_notifier before suspend and is signaled
by the pm_notifier after resume / wakeup.
It's probably still possible to craft malicious applications that block
suspending. More work is pending to fix that.
Link: https://gitlab.freedesktop.org/drm/xe/kernel/-/issues/4288
Fixes: c6a4d46ec1d7 ("drm/xe: evict user memory in PM notifier")
Cc: Matthew Auld <matthew.auld(a)intel.com>
Cc: Rodrigo Vivi <rodrigo.vivi(a)intel.com>
Cc: <stable(a)vger.kernel.org> # v6.16+
Signed-off-by: Thomas Hellström <thomas.hellstrom(a)linux.intel.com>
---
drivers/gpu/drm/xe/xe_device_types.h | 2 ++
drivers/gpu/drm/xe/xe_exec.c | 9 +++++++++
drivers/gpu/drm/xe/xe_pm.c | 4 ++++
drivers/gpu/drm/xe/xe_vm.c | 14 ++++++++++++++
4 files changed, 29 insertions(+)
diff --git a/drivers/gpu/drm/xe/xe_device_types.h b/drivers/gpu/drm/xe/xe_device_types.h
index 092004d14db2..6602bd678cbc 100644
--- a/drivers/gpu/drm/xe/xe_device_types.h
+++ b/drivers/gpu/drm/xe/xe_device_types.h
@@ -507,6 +507,8 @@ struct xe_device {
/** @pm_notifier: Our PM notifier to perform actions in response to various PM events. */
struct notifier_block pm_notifier;
+ /** @pm_block: Completion to block validating tasks on suspend / hibernate prepare */
+ struct completion pm_block;
/** @pmt: Support the PMT driver callback interface */
struct {
diff --git a/drivers/gpu/drm/xe/xe_exec.c b/drivers/gpu/drm/xe/xe_exec.c
index 44364c042ad7..374c831e691b 100644
--- a/drivers/gpu/drm/xe/xe_exec.c
+++ b/drivers/gpu/drm/xe/xe_exec.c
@@ -237,6 +237,15 @@ int xe_exec_ioctl(struct drm_device *dev, void *data, struct drm_file *file)
goto err_unlock_list;
}
+ /*
+ * It's OK to block interruptible here with the vm lock held, since
+ * on task freezing during suspend / hibernate, the call will
+ * return -ERESTARTSYS and the IOCTL will be rerun.
+ */
+ err = wait_for_completion_interruptible(&xe->pm_block);
+ if (err)
+ goto err_unlock_list;
+
vm_exec.vm = &vm->gpuvm;
vm_exec.flags = DRM_EXEC_INTERRUPTIBLE_WAIT;
if (xe_vm_in_lr_mode(vm)) {
diff --git a/drivers/gpu/drm/xe/xe_pm.c b/drivers/gpu/drm/xe/xe_pm.c
index b57b46ad9f7c..2d7b05d8a78b 100644
--- a/drivers/gpu/drm/xe/xe_pm.c
+++ b/drivers/gpu/drm/xe/xe_pm.c
@@ -306,6 +306,7 @@ static int xe_pm_notifier_callback(struct notifier_block *nb,
switch (action) {
case PM_HIBERNATION_PREPARE:
case PM_SUSPEND_PREPARE:
+ reinit_completion(&xe->pm_block);
xe_pm_runtime_get(xe);
err = xe_bo_evict_all_user(xe);
if (err)
@@ -318,6 +319,7 @@ static int xe_pm_notifier_callback(struct notifier_block *nb,
break;
case PM_POST_HIBERNATION:
case PM_POST_SUSPEND:
+ complete_all(&xe->pm_block);
xe_pm_runtime_get(xe);
xe_bo_notifier_unprepare_all_pinned(xe);
xe_pm_runtime_put(xe);
@@ -345,6 +347,8 @@ int xe_pm_init(struct xe_device *xe)
if (err)
return err;
+ init_completion(&xe->pm_block);
+ complete_all(&xe->pm_block);
/* For now suspend/resume is only allowed with GuC */
if (!xe_device_uc_enabled(xe))
return 0;
diff --git a/drivers/gpu/drm/xe/xe_vm.c b/drivers/gpu/drm/xe/xe_vm.c
index 3ff3c67aa79d..edcdb0528f2a 100644
--- a/drivers/gpu/drm/xe/xe_vm.c
+++ b/drivers/gpu/drm/xe/xe_vm.c
@@ -394,6 +394,9 @@ static int xe_gpuvm_validate(struct drm_gpuvm_bo *vm_bo, struct drm_exec *exec)
list_move_tail(&gpuva_to_vma(gpuva)->combined_links.rebind,
&vm->rebind_list);
+ if (!try_wait_for_completion(&vm->xe->pm_block))
+ return -EAGAIN;
+
ret = xe_bo_validate(gem_to_xe_bo(vm_bo->obj), vm, false);
if (ret)
return ret;
@@ -494,6 +497,12 @@ static void preempt_rebind_work_func(struct work_struct *w)
xe_assert(vm->xe, xe_vm_in_preempt_fence_mode(vm));
trace_xe_vm_rebind_worker_enter(vm);
+ /*
+ * This blocks the wq during suspend / hibernate.
+ * Don't hold any locks.
+ */
+retry_pm:
+ wait_for_completion(&vm->xe->pm_block);
down_write(&vm->lock);
if (xe_vm_is_closed_or_banned(vm)) {
@@ -503,6 +512,11 @@ static void preempt_rebind_work_func(struct work_struct *w)
}
retry:
+ if (!try_wait_for_completion(&vm->xe->pm_block)) {
+ up_write(&vm->lock);
+ goto retry_pm;
+ }
+
if (xe_vm_userptr_check_repin(vm)) {
err = xe_vm_userptr_pin(vm);
if (err)
--
2.50.1
3 weeks, 1 day
- 1
- 0
[PATCH 1/3] drm/xe: Attempt to bring bos back to VRAM after eviction
by Thomas Hellström
VRAM+TT bos that are evicted from VRAM to TT may remain in
TT also after a revalidation following eviction or suspend.
This manifests itself as applications becoming sluggish
after buffer objects get evicted or after a resume from
suspend or hibernation.
If the bo supports placement in both VRAM and TT, and
we are on DGFX, mark the TT placement as fallback. This means
that it is tried only after VRAM + eviction.
This flaw has probably been present since the xe module was
upstreamed but use a Fixes: commit below where backporting is
likely to be simple. For earlier versions we need to open-
code the fallback algorithm in the driver.
v2:
- Remove check for dgfx. (Matthew Auld)
- Update the xe_dma_buf kunit test for the new strategy (CI)
- Allow dma-buf to pin in current placement (CI)
- Make xe_bo_validate() for pinned bos a NOP.
Closes: https://gitlab.freedesktop.org/drm/xe/kernel/-/issues/5995
Fixes: a78a8da51b36 ("drm/ttm: replace busy placement with flags v6")
Cc: Matthew Brost <matthew.brost(a)intel.com>
Cc: Matthew Auld <matthew.auld(a)intel.com>
Cc: <stable(a)vger.kernel.org> # v6.9+
Signed-off-by: Thomas Hellström <thomas.hellstrom(a)linux.intel.com>
Reviewed-by: Matthew Auld <matthew.auld(a)intel.com>
---
drivers/gpu/drm/xe/tests/xe_bo.c | 2 +-
drivers/gpu/drm/xe/tests/xe_dma_buf.c | 10 +---------
drivers/gpu/drm/xe/xe_bo.c | 16 ++++++++++++----
drivers/gpu/drm/xe/xe_bo.h | 2 +-
drivers/gpu/drm/xe/xe_dma_buf.c | 2 +-
5 files changed, 16 insertions(+), 16 deletions(-)
diff --git a/drivers/gpu/drm/xe/tests/xe_bo.c b/drivers/gpu/drm/xe/tests/xe_bo.c
index bb469096d072..7b40cc8be1c9 100644
--- a/drivers/gpu/drm/xe/tests/xe_bo.c
+++ b/drivers/gpu/drm/xe/tests/xe_bo.c
@@ -236,7 +236,7 @@ static int evict_test_run_tile(struct xe_device *xe, struct xe_tile *tile, struc
}
xe_bo_lock(external, false);
- err = xe_bo_pin_external(external);
+ err = xe_bo_pin_external(external, false);
xe_bo_unlock(external);
if (err) {
KUNIT_FAIL(test, "external bo pin err=%pe\n",
diff --git a/drivers/gpu/drm/xe/tests/xe_dma_buf.c b/drivers/gpu/drm/xe/tests/xe_dma_buf.c
index cde9530bef8c..3f30d2cef917 100644
--- a/drivers/gpu/drm/xe/tests/xe_dma_buf.c
+++ b/drivers/gpu/drm/xe/tests/xe_dma_buf.c
@@ -85,15 +85,7 @@ static void check_residency(struct kunit *test, struct xe_bo *exported,
return;
}
- /*
- * If on different devices, the exporter is kept in system if
- * possible, saving a migration step as the transfer is just
- * likely as fast from system memory.
- */
- if (params->mem_mask & XE_BO_FLAG_SYSTEM)
- KUNIT_EXPECT_TRUE(test, xe_bo_is_mem_type(exported, XE_PL_TT));
- else
- KUNIT_EXPECT_TRUE(test, xe_bo_is_mem_type(exported, mem_type));
+ KUNIT_EXPECT_TRUE(test, xe_bo_is_mem_type(exported, mem_type));
if (params->force_different_devices)
KUNIT_EXPECT_TRUE(test, xe_bo_is_mem_type(imported, XE_PL_TT));
diff --git a/drivers/gpu/drm/xe/xe_bo.c b/drivers/gpu/drm/xe/xe_bo.c
index 4faf15d5fa6d..870f43347281 100644
--- a/drivers/gpu/drm/xe/xe_bo.c
+++ b/drivers/gpu/drm/xe/xe_bo.c
@@ -188,6 +188,8 @@ static void try_add_system(struct xe_device *xe, struct xe_bo *bo,
bo->placements[*c] = (struct ttm_place) {
.mem_type = XE_PL_TT,
+ .flags = (bo_flags & XE_BO_FLAG_VRAM_MASK) ?
+ TTM_PL_FLAG_FALLBACK : 0,
};
*c += 1;
}
@@ -2322,6 +2324,7 @@ uint64_t vram_region_gpu_offset(struct ttm_resource *res)
/**
* xe_bo_pin_external - pin an external BO
* @bo: buffer object to be pinned
+ * @in_place: Pin in current placement, don't attempt to migrate.
*
* Pin an external (not tied to a VM, can be exported via dma-buf / prime FD)
* BO. Unique call compared to xe_bo_pin as this function has it own set of
@@ -2329,7 +2332,7 @@ uint64_t vram_region_gpu_offset(struct ttm_resource *res)
*
* Returns 0 for success, negative error code otherwise.
*/
-int xe_bo_pin_external(struct xe_bo *bo)
+int xe_bo_pin_external(struct xe_bo *bo, bool in_place)
{
struct xe_device *xe = xe_bo_device(bo);
int err;
@@ -2338,9 +2341,11 @@ int xe_bo_pin_external(struct xe_bo *bo)
xe_assert(xe, xe_bo_is_user(bo));
if (!xe_bo_is_pinned(bo)) {
- err = xe_bo_validate(bo, NULL, false);
- if (err)
- return err;
+ if (!in_place) {
+ err = xe_bo_validate(bo, NULL, false);
+ if (err)
+ return err;
+ }
spin_lock(&xe->pinned.lock);
list_add_tail(&bo->pinned_link, &xe->pinned.late.external);
@@ -2493,6 +2498,9 @@ int xe_bo_validate(struct xe_bo *bo, struct xe_vm *vm, bool allow_res_evict)
};
int ret;
+ if (xe_bo_is_pinned(bo))
+ return 0;
+
if (vm) {
lockdep_assert_held(&vm->lock);
xe_vm_assert_held(vm);
diff --git a/drivers/gpu/drm/xe/xe_bo.h b/drivers/gpu/drm/xe/xe_bo.h
index 8cce413b5235..cfb1ec266a6d 100644
--- a/drivers/gpu/drm/xe/xe_bo.h
+++ b/drivers/gpu/drm/xe/xe_bo.h
@@ -200,7 +200,7 @@ static inline void xe_bo_unlock_vm_held(struct xe_bo *bo)
}
}
-int xe_bo_pin_external(struct xe_bo *bo);
+int xe_bo_pin_external(struct xe_bo *bo, bool in_place);
int xe_bo_pin(struct xe_bo *bo);
void xe_bo_unpin_external(struct xe_bo *bo);
void xe_bo_unpin(struct xe_bo *bo);
diff --git a/drivers/gpu/drm/xe/xe_dma_buf.c b/drivers/gpu/drm/xe/xe_dma_buf.c
index 346f857f3837..af64baf872ef 100644
--- a/drivers/gpu/drm/xe/xe_dma_buf.c
+++ b/drivers/gpu/drm/xe/xe_dma_buf.c
@@ -72,7 +72,7 @@ static int xe_dma_buf_pin(struct dma_buf_attachment *attach)
return ret;
}
- ret = xe_bo_pin_external(bo);
+ ret = xe_bo_pin_external(bo, true);
xe_assert(xe, !ret);
return 0;
--
2.50.1
3 weeks, 1 day
- 1
- 0
[PATCH] drm/xe: Attempt to bring bos back to VRAM after eviction
by Thomas Hellström
VRAM+TT bos that are evicted from VRAM to TT may remain in
TT also after a revalidation following eviction or suspend.
This manifests itself as applications becoming sluggish
after buffer objects get evicted or after a resume from
suspend or hibernation.
If the bo supports placement in both VRAM and TT, and
we are on DGFX, mark the TT placement as fallback. This means
that it is tried only after VRAM + eviction.
This flaw has probably been present since the xe module was
upstreamed but use a Fixes: commit below where backporting is
likely to be simple. For earlier versions we need to open-
code the fallback algorithm in the driver.
Closes: https://gitlab.freedesktop.org/drm/xe/kernel/-/issues/5995
Fixes: a78a8da51b36 ("drm/ttm: replace busy placement with flags v6")
Cc: Matthew Brost <matthew.brost(a)intel.com>
Cc: Matthew Auld <matthew.auld(a)intel.com>
Cc: <stable(a)vger.kernel.org> # v6.9+
Signed-off-by: Thomas Hellström <thomas.hellstrom(a)linux.intel.com>
---
drivers/gpu/drm/xe/xe_bo.c | 2 ++
1 file changed, 2 insertions(+)
diff --git a/drivers/gpu/drm/xe/xe_bo.c b/drivers/gpu/drm/xe/xe_bo.c
index 4faf15d5fa6d..64dea4e478bd 100644
--- a/drivers/gpu/drm/xe/xe_bo.c
+++ b/drivers/gpu/drm/xe/xe_bo.c
@@ -188,6 +188,8 @@ static void try_add_system(struct xe_device *xe, struct xe_bo *bo,
bo->placements[*c] = (struct ttm_place) {
.mem_type = XE_PL_TT,
+ .flags = (IS_DGFX(xe) && (bo_flags & XE_BO_FLAG_VRAM_MASK)) ?
+ TTM_PL_FLAG_FALLBACK : 0,
};
*c += 1;
}
--
2.50.1
3 weeks, 1 day
- 3
- 7
[PATCH rtw v3 2/5] wifi: rtw89: fix tx_wait initialization race
by Fedor Pchelkin
Now that nullfunc skbs are recycled in a separate work item in the driver,
the following race during initialization and processing of those skbs
might lead to noticeable bugs:
Waiting thread Completing thread
rtw89_core_send_nullfunc()
rtw89_core_tx_write_link()
...
rtw89_pci_txwd_submit()
skb_data->wait = NULL
/* add skb to the queue */
skb_queue_tail(&txwd->queue, skb)
rtw89_pci_napi_poll()
...
rtw89_pci_release_txwd_skb()
/* get skb from the queue */
skb_unlink(skb, &txwd->queue)
rtw89_pci_tx_status()
rtw89_core_tx_wait_complete()
/* use incorrect skb_data->wait */
rtw89_core_tx_kick_off_and_wait()
/* assign skb_data->wait but too late */
The value of skb_data->wait indicates whether skb is passed on to the
core ieee80211 stack or released by the driver itself. So assure that by
the time skb is added to txwd queue and becomes visible to the completing
side, it has already allocated tx_wait-related data (in case it's needed).
Found by Linux Verification Center (linuxtesting.org).
Fixes: 1ae5ca615285 ("wifi: rtw89: add function to wait for completion of TX skbs")
Cc: stable(a)vger.kernel.org
Signed-off-by: Fedor Pchelkin <pchelkin(a)ispras.ru>
---
drivers/net/wireless/realtek/rtw89/core.c | 30 ++++++++++++++---------
drivers/net/wireless/realtek/rtw89/pci.c | 2 --
2 files changed, 18 insertions(+), 14 deletions(-)
diff --git a/drivers/net/wireless/realtek/rtw89/core.c b/drivers/net/wireless/realtek/rtw89/core.c
index 5c964283cd67..57f20559dfde 100644
--- a/drivers/net/wireless/realtek/rtw89/core.c
+++ b/drivers/net/wireless/realtek/rtw89/core.c
@@ -1094,20 +1094,12 @@ int rtw89_core_tx_kick_off_and_wait(struct rtw89_dev *rtwdev, struct sk_buff *sk
int qsel, unsigned int timeout)
{
struct rtw89_tx_skb_data *skb_data = RTW89_TX_SKB_CB(skb);
- struct rtw89_tx_wait_info *wait;
+ struct rtw89_tx_wait_info *wait = skb_data->wait;
unsigned long time_left;
int ret = 0;
lockdep_assert_wiphy(rtwdev->hw->wiphy);
- wait = kzalloc(sizeof(*wait), GFP_KERNEL);
- if (!wait) {
- rtw89_core_tx_kick_off(rtwdev, qsel);
- return 0;
- }
-
- init_completion(&wait->completion);
- rcu_assign_pointer(skb_data->wait, wait);
wait->skb = skb;
rtw89_core_tx_kick_off(rtwdev, qsel);
@@ -1172,10 +1164,12 @@ int rtw89_h2c_tx(struct rtw89_dev *rtwdev,
static int rtw89_core_tx_write_link(struct rtw89_dev *rtwdev,
struct rtw89_vif_link *rtwvif_link,
struct rtw89_sta_link *rtwsta_link,
- struct sk_buff *skb, int *qsel, bool sw_mld)
+ struct sk_buff *skb, int *qsel, bool sw_mld,
+ struct rtw89_tx_wait_info *wait)
{
struct ieee80211_sta *sta = rtwsta_link_to_sta_safe(rtwsta_link);
struct ieee80211_vif *vif = rtwvif_link_to_vif(rtwvif_link);
+ struct rtw89_tx_skb_data *skb_data = RTW89_TX_SKB_CB(skb);
struct rtw89_vif *rtwvif = rtwvif_link->rtwvif;
struct rtw89_core_tx_request tx_req = {};
int ret;
@@ -1192,6 +1186,8 @@ static int rtw89_core_tx_write_link(struct rtw89_dev *rtwdev,
rtw89_core_tx_update_desc_info(rtwdev, &tx_req);
rtw89_core_tx_wake(rtwdev, &tx_req);
+ rcu_assign_pointer(skb_data->wait, wait);
+
ret = rtw89_hci_tx_write(rtwdev, &tx_req);
if (ret) {
rtw89_err(rtwdev, "failed to transmit skb to HCI\n");
@@ -1228,7 +1224,8 @@ int rtw89_core_tx_write(struct rtw89_dev *rtwdev, struct ieee80211_vif *vif,
}
}
- return rtw89_core_tx_write_link(rtwdev, rtwvif_link, rtwsta_link, skb, qsel, false);
+ return rtw89_core_tx_write_link(rtwdev, rtwvif_link, rtwsta_link, skb, qsel, false,
+ NULL);
}
static __le32 rtw89_build_txwd_body0(struct rtw89_tx_desc_info *desc_info)
@@ -3426,6 +3423,7 @@ int rtw89_core_send_nullfunc(struct rtw89_dev *rtwdev, struct rtw89_vif_link *rt
struct ieee80211_vif *vif = rtwvif_link_to_vif(rtwvif_link);
int link_id = ieee80211_vif_is_mld(vif) ? rtwvif_link->link_id : -1;
struct rtw89_sta_link *rtwsta_link;
+ struct rtw89_tx_wait_info *wait;
struct ieee80211_sta *sta;
struct ieee80211_hdr *hdr;
struct rtw89_sta *rtwsta;
@@ -3435,6 +3433,12 @@ int rtw89_core_send_nullfunc(struct rtw89_dev *rtwdev, struct rtw89_vif_link *rt
if (vif->type != NL80211_IFTYPE_STATION || !vif->cfg.assoc)
return 0;
+ wait = kzalloc(sizeof(*wait), GFP_KERNEL);
+ if (!wait)
+ return -ENOMEM;
+
+ init_completion(&wait->completion);
+
rcu_read_lock();
sta = ieee80211_find_sta(vif, vif->cfg.ap_addr);
if (!sta) {
@@ -3459,7 +3463,8 @@ int rtw89_core_send_nullfunc(struct rtw89_dev *rtwdev, struct rtw89_vif_link *rt
goto out;
}
- ret = rtw89_core_tx_write_link(rtwdev, rtwvif_link, rtwsta_link, skb, &qsel, true);
+ ret = rtw89_core_tx_write_link(rtwdev, rtwvif_link, rtwsta_link, skb, &qsel, true,
+ wait);
if (ret) {
rtw89_warn(rtwdev, "nullfunc transmit failed: %d\n", ret);
dev_kfree_skb_any(skb);
@@ -3472,6 +3477,7 @@ int rtw89_core_send_nullfunc(struct rtw89_dev *rtwdev, struct rtw89_vif_link *rt
timeout);
out:
rcu_read_unlock();
+ kfree(wait);
return ret;
}
diff --git a/drivers/net/wireless/realtek/rtw89/pci.c b/drivers/net/wireless/realtek/rtw89/pci.c
index 4e3034b44f56..cb9682f306a6 100644
--- a/drivers/net/wireless/realtek/rtw89/pci.c
+++ b/drivers/net/wireless/realtek/rtw89/pci.c
@@ -1372,7 +1372,6 @@ static int rtw89_pci_txwd_submit(struct rtw89_dev *rtwdev,
struct pci_dev *pdev = rtwpci->pdev;
struct sk_buff *skb = tx_req->skb;
struct rtw89_pci_tx_data *tx_data = RTW89_PCI_TX_SKB_CB(skb);
- struct rtw89_tx_skb_data *skb_data = RTW89_TX_SKB_CB(skb);
bool en_wd_info = desc_info->en_wd_info;
u32 txwd_len;
u32 txwp_len;
@@ -1388,7 +1387,6 @@ static int rtw89_pci_txwd_submit(struct rtw89_dev *rtwdev,
}
tx_data->dma = dma;
- rcu_assign_pointer(skb_data->wait, NULL);
txwp_len = sizeof(*txwp_info);
txwd_len = chip->txwd_body_size;
--
2.51.0
3 weeks, 1 day
- 2
- 1
[PATCH] drm/mediatek: fix device leaks at bind
by Johan Hovold
Make sure to drop the references to the sibling platform devices and
their child drm devices taken by of_find_device_by_node() and
device_find_child() when initialising the driver data during bind().
Fixes: 1ef7ed48356c ("drm/mediatek: Modify mediatek-drm for mt8195 multi mmsys support")
Cc: stable(a)vger.kernel.org # 6.4
Cc: Nancy.Lin <nancy.lin(a)mediatek.com>
Signed-off-by: Johan Hovold <johan(a)kernel.org>
---
drivers/gpu/drm/mediatek/mtk_drm_drv.c | 2 ++
1 file changed, 2 insertions(+)
diff --git a/drivers/gpu/drm/mediatek/mtk_drm_drv.c b/drivers/gpu/drm/mediatek/mtk_drm_drv.c
index 7c0c12dde488..33b83576af7e 100644
--- a/drivers/gpu/drm/mediatek/mtk_drm_drv.c
+++ b/drivers/gpu/drm/mediatek/mtk_drm_drv.c
@@ -395,10 +395,12 @@ static bool mtk_drm_get_all_drm_priv(struct device *dev)
continue;
drm_dev = device_find_child(&pdev->dev, NULL, mtk_drm_match);
+ put_device(&pdev->dev);
if (!drm_dev)
continue;
temp_drm_priv = dev_get_drvdata(drm_dev);
+ put_device(drm_dev);
if (!temp_drm_priv)
continue;
--
2.49.1
3 weeks, 1 day
- 3
- 5
[PATCH rtw v3 1/5] wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait()
by Fedor Pchelkin
There is a bug observed when rtw89_core_tx_kick_off_and_wait() tries to
access already freed skb_data:
BUG: KFENCE: use-after-free write in rtw89_core_tx_kick_off_and_wait drivers/net/wireless/realtek/rtw89/core.c:1110
CPU: 6 UID: 0 PID: 41377 Comm: kworker/u64:24 Not tainted 6.17.0-rc1+ #1 PREEMPT(lazy)
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS edk2-20250523-14.fc42 05/23/2025
Workqueue: events_unbound cfg80211_wiphy_work [cfg80211]
Use-after-free write at 0x0000000020309d9d (in kfence-#251):
rtw89_core_tx_kick_off_and_wait drivers/net/wireless/realtek/rtw89/core.c:1110
rtw89_core_scan_complete drivers/net/wireless/realtek/rtw89/core.c:5338
rtw89_hw_scan_complete_cb drivers/net/wireless/realtek/rtw89/fw.c:7979
rtw89_chanctx_proceed_cb drivers/net/wireless/realtek/rtw89/chan.c:3165
rtw89_chanctx_proceed drivers/net/wireless/realtek/rtw89/chan.h:141
rtw89_hw_scan_complete drivers/net/wireless/realtek/rtw89/fw.c:8012
rtw89_mac_c2h_scanofld_rsp drivers/net/wireless/realtek/rtw89/mac.c:5059
rtw89_fw_c2h_work drivers/net/wireless/realtek/rtw89/fw.c:6758
process_one_work kernel/workqueue.c:3241
worker_thread kernel/workqueue.c:3400
kthread kernel/kthread.c:463
ret_from_fork arch/x86/kernel/process.c:154
ret_from_fork_asm arch/x86/entry/entry_64.S:258
kfence-#251: 0x0000000056e2393d-0x000000009943cb62, size=232, cache=skbuff_head_cache
allocated by task 41377 on cpu 6 at 77869.159548s (0.009551s ago):
__alloc_skb net/core/skbuff.c:659
__netdev_alloc_skb net/core/skbuff.c:734
ieee80211_nullfunc_get net/mac80211/tx.c:5844
rtw89_core_send_nullfunc drivers/net/wireless/realtek/rtw89/core.c:3431
rtw89_core_scan_complete drivers/net/wireless/realtek/rtw89/core.c:5338
rtw89_hw_scan_complete_cb drivers/net/wireless/realtek/rtw89/fw.c:7979
rtw89_chanctx_proceed_cb drivers/net/wireless/realtek/rtw89/chan.c:3165
rtw89_chanctx_proceed drivers/net/wireless/realtek/rtw89/chan.c:3194
rtw89_hw_scan_complete drivers/net/wireless/realtek/rtw89/fw.c:8012
rtw89_mac_c2h_scanofld_rsp drivers/net/wireless/realtek/rtw89/mac.c:5059
rtw89_fw_c2h_work drivers/net/wireless/realtek/rtw89/fw.c:6758
process_one_work kernel/workqueue.c:3241
worker_thread kernel/workqueue.c:3400
kthread kernel/kthread.c:463
ret_from_fork arch/x86/kernel/process.c:154
ret_from_fork_asm arch/x86/entry/entry_64.S:258
freed by task 1045 on cpu 9 at 77869.168393s (0.001557s ago):
ieee80211_tx_status_skb net/mac80211/status.c:1117
rtw89_pci_release_txwd_skb drivers/net/wireless/realtek/rtw89/pci.c:564
rtw89_pci_release_tx_skbs.isra.0 drivers/net/wireless/realtek/rtw89/pci.c:651
rtw89_pci_release_tx drivers/net/wireless/realtek/rtw89/pci.c:676
rtw89_pci_napi_poll drivers/net/wireless/realtek/rtw89/pci.c:4238
__napi_poll net/core/dev.c:7495
net_rx_action net/core/dev.c:7557 net/core/dev.c:7684
handle_softirqs kernel/softirq.c:580
do_softirq.part.0 kernel/softirq.c:480
__local_bh_enable_ip kernel/softirq.c:407
rtw89_pci_interrupt_threadfn drivers/net/wireless/realtek/rtw89/pci.c:927
irq_thread_fn kernel/irq/manage.c:1133
irq_thread kernel/irq/manage.c:1257
kthread kernel/kthread.c:463
ret_from_fork arch/x86/kernel/process.c:154
ret_from_fork_asm arch/x86/entry/entry_64.S:258
It is a consequence of a race between the waiting and the signaling side
of the completion:
Waiting thread Completing thread
rtw89_core_tx_kick_off_and_wait()
rcu_assign_pointer(skb_data->wait, wait)
/* start waiting */
wait_for_completion_timeout()
rtw89_pci_tx_status()
rtw89_core_tx_wait_complete()
rcu_read_lock()
/* signals completion and
* proceeds further
*/
complete(&wait->completion)
rcu_read_unlock()
...
/* frees skb_data */
ieee80211_tx_status_ni()
/* returns (exit status doesn't matter) */
wait_for_completion_timeout()
...
/* accesses the already freed skb_data */
rcu_assign_pointer(skb_data->wait, NULL)
The completing side might proceed and free the underlying skb even before
the waiting side is fully awoken and run to execution. Actually the race
happens regardless of wait_for_completion_timeout() exit status, e.g.
the waiting side may hit a timeout and the concurrent completing side is
still able to free the skb.
Skbs which are sent by rtw89_core_tx_kick_off_and_wait() are owned by the
driver. They don't come from core ieee80211 stack so no need to pass them
to ieee80211_tx_status_ni() on completing side.
Introduce a work function which will act as a garbage collector for
rtw89_tx_wait_info objects and the associated skbs. Thus no potentially
heavy locks are required on the completing side.
Found by Linux Verification Center (linuxtesting.org).
Fixes: 1ae5ca615285 ("wifi: rtw89: add function to wait for completion of TX skbs")
Cc: stable(a)vger.kernel.org
Suggested-by: Zong-Zhe Yang <kevin_yang(a)realtek.com>
Signed-off-by: Fedor Pchelkin <pchelkin(a)ispras.ru>
---
v3: - decrease waiting timeout in rtw89_tx_wait_work() (Zong-Zhe)
- clear tx_waits list from rtw89_hci_reset(), too (Zong-Zhe)
- keep RCU updating for skb_data->wait (Zong-Zhe)
- keep the old order of calls in rtw89_pci_tx_status() (Zong-Zhe)
- drop wait->finished as complete_all() would make the completion be
done permanently (me)
v2: - use a work function to manage release of tx_waits and associated skbs (Zong-Zhe)
FWIW, I think RCU locking becomes unnecessary after the next patch
[PATCH rtw v3 2/5] wifi: rtw89: fix tx_wait initialization race
but let's keep it if you feel that's more safe.
drivers/net/wireless/realtek/rtw89/core.c | 28 ++++++++++++++---
drivers/net/wireless/realtek/rtw89/core.h | 38 +++++++++++++++++++++--
drivers/net/wireless/realtek/rtw89/pci.c | 3 +-
drivers/net/wireless/realtek/rtw89/ser.c | 2 ++
4 files changed, 63 insertions(+), 8 deletions(-)
diff --git a/drivers/net/wireless/realtek/rtw89/core.c b/drivers/net/wireless/realtek/rtw89/core.c
index 57590f5577a3..5c964283cd67 100644
--- a/drivers/net/wireless/realtek/rtw89/core.c
+++ b/drivers/net/wireless/realtek/rtw89/core.c
@@ -1073,6 +1073,14 @@ rtw89_core_tx_update_desc_info(struct rtw89_dev *rtwdev,
}
}
+static void rtw89_tx_wait_work(struct wiphy *wiphy, struct wiphy_work *work)
+{
+ struct rtw89_dev *rtwdev = container_of(work, struct rtw89_dev,
+ tx_wait_work);
+
+ rtw89_tx_wait_list_clear(rtwdev);
+}
+
void rtw89_core_tx_kick_off(struct rtw89_dev *rtwdev, u8 qsel)
{
u8 ch_dma;
@@ -1090,6 +1098,8 @@ int rtw89_core_tx_kick_off_and_wait(struct rtw89_dev *rtwdev, struct sk_buff *sk
unsigned long time_left;
int ret = 0;
+ lockdep_assert_wiphy(rtwdev->hw->wiphy);
+
wait = kzalloc(sizeof(*wait), GFP_KERNEL);
if (!wait) {
rtw89_core_tx_kick_off(rtwdev, qsel);
@@ -1098,17 +1108,22 @@ int rtw89_core_tx_kick_off_and_wait(struct rtw89_dev *rtwdev, struct sk_buff *sk
init_completion(&wait->completion);
rcu_assign_pointer(skb_data->wait, wait);
+ wait->skb = skb;
rtw89_core_tx_kick_off(rtwdev, qsel);
time_left = wait_for_completion_timeout(&wait->completion,
msecs_to_jiffies(timeout));
- if (time_left == 0)
+
+ if (time_left == 0) {
ret = -ETIMEDOUT;
- else if (!wait->tx_done)
- ret = -EAGAIN;
+ list_add_tail(&wait->list, &rtwdev->tx_waits);
+ wiphy_work_queue(rtwdev->hw->wiphy, &rtwdev->tx_wait_work);
- rcu_assign_pointer(skb_data->wait, NULL);
- kfree_rcu(wait, rcu_head);
+ } else {
+ if (!wait->tx_done)
+ ret = -EAGAIN;
+ rtw89_tx_wait_release(&wait->rcu_head);
+ }
return ret;
}
@@ -4972,6 +4987,7 @@ void rtw89_core_stop(struct rtw89_dev *rtwdev)
clear_bit(RTW89_FLAG_RUNNING, rtwdev->flags);
wiphy_work_cancel(wiphy, &rtwdev->c2h_work);
+ wiphy_work_cancel(wiphy, &rtwdev->tx_wait_work);
wiphy_work_cancel(wiphy, &rtwdev->cancel_6ghz_probe_work);
wiphy_work_cancel(wiphy, &btc->eapol_notify_work);
wiphy_work_cancel(wiphy, &btc->arp_notify_work);
@@ -5203,6 +5219,7 @@ int rtw89_core_init(struct rtw89_dev *rtwdev)
INIT_LIST_HEAD(&rtwdev->scan_info.pkt_list[band]);
}
INIT_LIST_HEAD(&rtwdev->scan_info.chan_list);
+ INIT_LIST_HEAD(&rtwdev->tx_waits);
INIT_WORK(&rtwdev->ba_work, rtw89_core_ba_work);
INIT_WORK(&rtwdev->txq_work, rtw89_core_txq_work);
INIT_DELAYED_WORK(&rtwdev->txq_reinvoke_work, rtw89_core_txq_reinvoke_work);
@@ -5233,6 +5250,7 @@ int rtw89_core_init(struct rtw89_dev *rtwdev)
wiphy_work_init(&rtwdev->c2h_work, rtw89_fw_c2h_work);
wiphy_work_init(&rtwdev->ips_work, rtw89_ips_work);
wiphy_work_init(&rtwdev->cancel_6ghz_probe_work, rtw89_cancel_6ghz_probe_work);
+ wiphy_work_init(&rtwdev->tx_wait_work, rtw89_tx_wait_work);
INIT_WORK(&rtwdev->load_firmware_work, rtw89_load_firmware_work);
skb_queue_head_init(&rtwdev->c2h_queue);
diff --git a/drivers/net/wireless/realtek/rtw89/core.h b/drivers/net/wireless/realtek/rtw89/core.h
index 43e10278e14d..9b22bb116af9 100644
--- a/drivers/net/wireless/realtek/rtw89/core.h
+++ b/drivers/net/wireless/realtek/rtw89/core.h
@@ -3506,9 +3506,12 @@ struct rtw89_phy_rate_pattern {
bool enable;
};
+#define RTW89_TX_WAIT_DEFAULT_TIMEOUT 10
struct rtw89_tx_wait_info {
struct rcu_head rcu_head;
+ struct list_head list;
struct completion completion;
+ struct sk_buff *skb;
bool tx_done;
};
@@ -5925,6 +5928,9 @@ struct rtw89_dev {
/* used to protect rpwm */
spinlock_t rpwm_lock;
+ struct list_head tx_waits;
+ struct wiphy_work tx_wait_work;
+
struct rtw89_cam_info cam_info;
struct sk_buff_head c2h_queue;
@@ -6181,6 +6187,30 @@ rtw89_assoc_link_rcu_dereference(struct rtw89_dev *rtwdev, u8 macid)
list_first_entry_or_null(&p->dlink_pool, typeof(*p->links_inst), dlink_schd); \
})
+static inline void rtw89_tx_wait_release(struct rcu_head *rcu_head)
+{
+ struct rtw89_tx_wait_info *wait =
+ container_of(rcu_head, struct rtw89_tx_wait_info, rcu_head);
+
+ dev_kfree_skb_any(wait->skb);
+ kfree(wait);
+}
+
+static inline void rtw89_tx_wait_list_clear(struct rtw89_dev *rtwdev)
+{
+ struct rtw89_tx_wait_info *wait, *tmp;
+
+ lockdep_assert_wiphy(rtwdev->hw->wiphy);
+
+ list_for_each_entry_safe(wait, tmp, &rtwdev->tx_waits, list) {
+ if (!wait_for_completion_timeout(&wait->completion,
+ RTW89_TX_WAIT_DEFAULT_TIMEOUT))
+ continue;
+ list_del(&wait->list);
+ call_rcu(&wait->rcu_head, rtw89_tx_wait_release);
+ }
+}
+
static inline int rtw89_hci_tx_write(struct rtw89_dev *rtwdev,
struct rtw89_core_tx_request *tx_req)
{
@@ -6190,6 +6220,7 @@ static inline int rtw89_hci_tx_write(struct rtw89_dev *rtwdev,
static inline void rtw89_hci_reset(struct rtw89_dev *rtwdev)
{
rtwdev->hci.ops->reset(rtwdev);
+ rtw89_tx_wait_list_clear(rtwdev);
}
static inline int rtw89_hci_start(struct rtw89_dev *rtwdev)
@@ -7258,11 +7289,12 @@ static inline struct sk_buff *rtw89_alloc_skb_for_rx(struct rtw89_dev *rtwdev,
return dev_alloc_skb(length);
}
-static inline void rtw89_core_tx_wait_complete(struct rtw89_dev *rtwdev,
+static inline bool rtw89_core_tx_wait_complete(struct rtw89_dev *rtwdev,
struct rtw89_tx_skb_data *skb_data,
bool tx_done)
{
struct rtw89_tx_wait_info *wait;
+ bool ret = false;
rcu_read_lock();
@@ -7270,11 +7302,13 @@ static inline void rtw89_core_tx_wait_complete(struct rtw89_dev *rtwdev,
if (!wait)
goto out;
+ ret = true;
wait->tx_done = tx_done;
- complete(&wait->completion);
+ complete_all(&wait->completion);
out:
rcu_read_unlock();
+ return ret;
}
static inline bool rtw89_is_mlo_1_1(struct rtw89_dev *rtwdev)
diff --git a/drivers/net/wireless/realtek/rtw89/pci.c b/drivers/net/wireless/realtek/rtw89/pci.c
index a669f2f843aa..4e3034b44f56 100644
--- a/drivers/net/wireless/realtek/rtw89/pci.c
+++ b/drivers/net/wireless/realtek/rtw89/pci.c
@@ -464,7 +464,8 @@ static void rtw89_pci_tx_status(struct rtw89_dev *rtwdev,
struct rtw89_tx_skb_data *skb_data = RTW89_TX_SKB_CB(skb);
struct ieee80211_tx_info *info;
- rtw89_core_tx_wait_complete(rtwdev, skb_data, tx_status == RTW89_TX_DONE);
+ if (rtw89_core_tx_wait_complete(rtwdev, skb_data, tx_status == RTW89_TX_DONE))
+ return;
info = IEEE80211_SKB_CB(skb);
ieee80211_tx_info_clear_status(info);
diff --git a/drivers/net/wireless/realtek/rtw89/ser.c b/drivers/net/wireless/realtek/rtw89/ser.c
index bb39fdbcba0d..fe7beff8c424 100644
--- a/drivers/net/wireless/realtek/rtw89/ser.c
+++ b/drivers/net/wireless/realtek/rtw89/ser.c
@@ -502,7 +502,9 @@ static void ser_reset_trx_st_hdl(struct rtw89_ser *ser, u8 evt)
}
drv_stop_rx(ser);
+ wiphy_lock(wiphy);
drv_trx_reset(ser);
+ wiphy_unlock(wiphy);
/* wait m3 */
hal_send_m2_event(ser);
--
2.51.0
3 weeks, 1 day
- 2
- 1
[PATCH 6.1 000/482] 6.1.149-rc1 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 6.1.149 release.
There are 482 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 28 Aug 2025 11:08:22 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.149-rc…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 6.1.149-rc1
Florian Westphal <fw(a)strlen.de>
netfilter: nf_reject: don't leak dst refcount for loopback packets
Peter Oberparleiter <oberpar(a)linux.ibm.com>
s390/hypfs: Enable limited access during lockdown
Peter Oberparleiter <oberpar(a)linux.ibm.com>
s390/hypfs: Avoid unnecessary ioctl registration in debugfs
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
Hangbin Liu <liuhangbin(a)gmail.com>
bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU
Aahil Awatramani <aahila(a)google.com>
bonding: Add independent control state machine
Hangbin Liu <liuhangbin(a)gmail.com>
bonding: update LACP activity flag after setting lacp_active
William Liu <will(a)willsroot.io>
net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
William Liu <will(a)willsroot.io>
net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
ValdikSS <iam(a)valdikss.org.ru>
igc: fix disabling L1.2 PCI-E link substate on I226 on init
Jason Xing <kernelxing(a)tencent.com>
ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
Jordan Rhee <jordanrhee(a)google.com>
gve: prevent ethtool ops after shutdown
Yuichiro Tsuji <yuichtsu(a)amazon.com>
net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
Horatiu Vultur <horatiu.vultur(a)microchip.com>
phy: mscc: Fix timestamping for vsc8584
Qingfang Deng <dqfext(a)gmail.com>
ppp: fix race conditions in ppp_fill_forward_path
Qingfang Deng <dqfext(a)gmail.com>
net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path
Minhong He <heminhong(a)kylinos.cn>
ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
Jakub Ramaseuski <jramaseu(a)redhat.com>
net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
Chenyuan Yang <chenyuan0y(a)gmail.com>
drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
Dan Carpenter <dan.carpenter(a)linaro.org>
ALSA: usb-audio: Fix size validation in convert_chmap_v3()
Baihan Li <libaihan(a)huawei.com>
drm/hisilicon/hibmc: fix the hibmc loaded failed bug
Ido Schimmel <idosch(a)nvidia.com>
mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
Sergey Shtylyov <s.shtylyov(a)omp.ru>
Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync()
Kees Cook <kees(a)kernel.org>
iommu/amd: Avoid stack buffer overflow from kernel cmdline
Dan Carpenter <dan.carpenter(a)linaro.org>
scsi: qla4xxx: Prevent a potential error pointer dereference
Wang Liang <wangliang74(a)huawei.com>
net: bridge: fix soft lockup in br_multicast_query_expired()
Anantha Prabhu <anantha.prabhu(a)broadcom.com>
RDMA/bnxt_re: Fix to initialize the PBL array
Boshi Yu <boshiyu(a)linux.alibaba.com>
RDMA/erdma: Fix ignored return value of init_kernel_qp
Nitin Gote <nitin.r.gote(a)intel.com>
iosys-map: Fix undefined behavior in iosys_map_clear()
Waiman Long <longman(a)redhat.com>
cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
Tianxiang Peng <txpeng(a)tencent.com>
x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
Jan Beulich <jbeulich(a)suse.com>
compiler: remove __ADDRESSABLE_ASM{_STR,}() again
David Lechner <dlechner(a)baylibre.com>
iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read()
Jonathan Cameron <Jonathan.Cameron(a)huawei.com>
iio: light: as73211: Ensure buffer holes are zeroed
Pu Lehui <pulehui(a)huawei.com>
tracing: Limit access to parser->buffer when trace_get_user failed
Steven Rostedt <rostedt(a)goodmis.org>
tracing: Remove unneeded goto out logic
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com>
iio: imu: inv_icm42600: change invalid data error to -EBUSY
Jakub Kicinski <kuba(a)kernel.org>
tls: fix handling of zero-length records on the rx_list
Mikhail Lobanov <m.lobanov(a)rosa.ru>
wifi: mac80211: check basic rates validity in sta_link_apply_parameters
Benjamin Berg <benjamin.berg(a)intel.com>
wifi: mac80211: avoid lockdep checking when removing deflink
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
selftests: mptcp: pm: check flush doesn't reset limits
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Don't overclock DCE 6 by 15%
Jinjiang Tu <tujinjiang(a)huawei.com>
mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn
Victor Shih <victor.shih(a)genesyslogic.com.tw>
mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER
Victor Shih <victor.shih(a)genesyslogic.com.tw>
mmc: sdhci-pci-gli: Add a new function to simplify the code
Bjorn Helgaas <bhelgaas(a)google.com>
mmc: sdhci-pci-gli: Use PCI AER definitions, not hard-coded values
Imre Deak <imre.deak(a)intel.com>
drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
Geliang Tang <tanggeliang(a)kylinos.cn>
mptcp: disable add_addr retransmission when timeout is 0
Chao Yu <chao(a)kernel.org>
f2fs: fix to avoid out-of-boundary access in dnode page
Chao Yu <chao(a)kernel.org>
f2fs: fix to call clear_page_private_reference in .{release,invalid}_folio
Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com>
soc: qcom: mdt_loader: Ensure we don't read past the ELF header
Gokul krishna Krishnakumar <quic_gokukris(a)quicinc.com>
soc: qcom: mdt_loader: Enhance split binary detection
Geraldo Nascimento <geraldogabriel(a)gmail.com>
PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining
Geraldo Nascimento <geraldogabriel(a)gmail.com>
PCI: rockchip: Use standard PCIe definitions
Ranjan Kumar <ranjan.kumar(a)broadcom.com>
scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems
Ranjan Kumar <ranjan.kumar(a)broadcom.com>
scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers
Baokun Li <libaokun1(a)huawei.com>
ext4: preserve SB_I_VERSION on remount
André Draszik <andre.draszik(a)linaro.org>
scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
Judith Mendez <jm(a)ti.com>
arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support
Selvarasu Ganesan <selvarasu.g(a)samsung.com>
usb: dwc3: Remove WARN_ON for device endpoint command timeouts
Kuen-Han Tsai <khtsai(a)google.com>
usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
Zenm Chen <zenmchen(a)gmail.com>
USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
Thorsten Blum <thorsten.blum(a)linux.dev>
usb: storage: realtek_cr: Use correct byte order for bcs->Residue
Mael GUERIN <mael.guerin(a)murena.io>
USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
Marek Vasut <marek.vasut+renesas(a)mailbox.org>
usb: renesas-xhci: Fix External ROM access timeouts
Xu Yang <xu.yang_2(a)nxp.com>
usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
Edward Adam Davis <eadavis(a)qq.com>
comedi: pcl726: Prevent invalid irq number
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Make insn_rw_emulate_bits() do insn->n samples
Miao Li <limiao(a)kylinos.cn>
usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
Miaoqian Lin <linmq006(a)gmail.com>
most: core: Drop device reference after usage in get_channel()
David Lechner <dlechner(a)baylibre.com>
iio: proximity: isl29501: fix buffered read on big-endian systems
Salah Triki <salah.triki(a)gmail.com>
iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
Steven Rostedt <rostedt(a)goodmis.org>
ftrace: Also allocate and copy hash for reading of filter files
Xu Yilun <yilun.xu(a)linux.intel.com>
fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
Al Viro <viro(a)zeniv.linux.org.uk>
use uniform permission checks for all mount propagation changes
Ye Bin <yebin10(a)huawei.com>
fs/buffer: fix use-after-free when call bh_read() helper
Stefan Metzmacher <metze(a)samba.org>
smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
Mario Limonciello <mario.limonciello(a)amd.com>
drm/amd/display: Avoid a NULL pointer dereference
Peter Oberparleiter <oberpar(a)linux.ibm.com>
s390/sclp: Fix SCCB present check
Evgeniy Harchenko <evgeniyharchenko.dev(a)gmail.com>
ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
Herton R. Krzesinski <herton(a)redhat.com>
mm/debug_vm_pgtable: clear page table entries at destroy_args()
Phillip Lougher <phillip(a)squashfs.org.uk>
squashfs: fix memory leak in squashfs_fill_super
Victor Shih <victor.shih(a)genesyslogic.com.tw>
mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
Jiayi Li <lijiayi(a)kylinos.cn>
memstick: Fix deadlock by moving removing flag earlier
Will Deacon <will(a)kernel.org>
KVM: arm64: Fix kernel BUG() due to bad backport of FPSIMD/SVE/SME fix
Chao Gao <chao.gao(a)intel.com>
KVM: VMX: Flush shadow VMCS on emergency reboot
Sean Christopherson <seanjc(a)google.com>
x86/reboot: KVM: Handle VMXOFF in KVM's reboot callback
Sean Christopherson <seanjc(a)google.com>
x86/reboot: Harden virtualization hooks for emergency reboot
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
kbuild: userprogs: use correct linker when mixing clang and GNU ld
Sumanth Gavini <sumanth.gavini(a)yahoo.com>
Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com>
selftests/memfd: add test for mapping write-sealed memfd read-only
Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com>
mm: reinstate ability to map write-sealed memfd mappings read-only
Lorenzo Stoakes <lstoakes(a)gmail.com>
mm: update memfd seal write check to include F_SEAL_WRITE
Lorenzo Stoakes <lstoakes(a)gmail.com>
mm: drop the assumption that VM_SHARED always implies writable
Paolo Abeni <pabeni(a)redhat.com>
mptcp: reset fallback status gracefully at disconnect() time
Paolo Abeni <pabeni(a)redhat.com>
mptcp: plug races between subflow fail and subflow creation
Paolo Abeni <pabeni(a)redhat.com>
mptcp: make fallback action and fallback decision atomic
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
Nianyao Tang <tangnianyao(a)huawei.com>
arm64/cpufeatures/kvm: Add ARMv8.9 FEAT_ECBHB bits in ID_AA64MMFR1 register
Giovanni Cabiddu <giovanni.cabiddu(a)intel.com>
crypto: qat - fix ring to service map for QAT GEN4
Sabrina Dubroca <sd(a)queasysnail.net>
tls: separate no-async decryption request handling from async
Qu Wenruo <wqu(a)suse.com>
btrfs: populate otime when logging an inode item
Damien Le Moal <dlemoal(a)kernel.org>
ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
Johan Hovold <johan(a)kernel.org>
usb: dwc3: imx8mp: fix device leak at unbind
Tzung-Bi Shih <tzungbi(a)kernel.org>
platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
Tzung-Bi Shih <tzungbi(a)kernel.org>
platform/chrome: cros_ec: remove unneeded label and if-condition
Chen-Yu Tsai <wenst(a)chromium.org>
platform/chrome: cros_ec: Use per-device lockdep key
Johan Hovold <johan(a)kernel.org>
usb: musb: omap2430: fix device leak at unbind
Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de>
usb: musb: omap2430: Convert to platform remove callback returning void
Vedang Nagar <quic_vnagar(a)quicinc.com>
media: venus: Fix OOB read due to missing payload bound check
Konrad Dybcio <konrad.dybcio(a)linaro.org>
media: venus: Introduce accessors for remapped hfi_buffer_reqs members
Anshuman Khandual <anshuman.khandual(a)arm.com>
mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
Davide Caratti <dcaratti(a)redhat.com>
net/sched: ets: use old 'nbands' while purging unused classes
Eric Dumazet <edumazet(a)google.com>
net_sched: sch_ets: implement lockless ets_dump()
Filipe Manana <fdmanana(a)suse.com>
btrfs: send: use fallocate for hole punching with send stream v2
Christoph Hellwig <hch(a)lst.de>
xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags
Filipe Manana <fdmanana(a)suse.com>
btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()
Filipe Manana <fdmanana(a)suse.com>
btrfs: qgroup: fix race between quota disable and quota rescan ioctl
Sebastian Reichel <sebastian.reichel(a)collabora.com>
usb: typec: fusb302: cache PD RX state
Shyam Prasad N <sprasad(a)microsoft.com>
cifs: reset iface weights when we cannot find a candidate
Lukas Wunner <lukas(a)wunner.de>
PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
Damien Le Moal <dlemoal(a)kernel.org>
block: Make REQ_OP_ZONE_FINISH a write operation
Christoph Hellwig <hch(a)lst.de>
block: reject invalid operation in submit_bio_noacct
Eric Biggers <ebiggers(a)kernel.org>
fscrypt: Don't use problematic non-inline crypto engines
Johan Hovold <johan(a)kernel.org>
net: enetc: fix device and OF node leak at probe
Lin.Cao <lincao12(a)amd.com>
drm/sched: Remove optimization that causes hang when killing dependent jobs
Ada Couprie Diaz <ada.coupriediaz(a)arm.com>
arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
Nathan Chancellor <nathan(a)kernel.org>
ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix qgroup reservation leak on failure to allocate ordered extent
Eric Dumazet <edumazet(a)google.com>
net: add netdev_lockdep_set_classes() to virtual drivers
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce/amd: Add default names for MCA banks and blocks
Kan Liang <kan.liang(a)linux.intel.com>
perf/x86/intel: Fix crash in icl_update_topdown_event()
Zhang Lixu <lixu.zhang(a)intel.com>
iio: hid-sensor-prox: Fix incorrect OFFSET calculation
Zhang Lixu <lixu.zhang(a)intel.com>
iio: hid-sensor-prox: Restore lost scale assignments
Chao Yu <chao(a)kernel.org>
f2fs: fix to do sanity check on ino and xnid
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
mptcp: pm: kernel: flush: do not reset ADD_ADDR limit
Christoph Paasch <cpaasch(a)openai.com>
mptcp: drop skb if MPTCP skb extension allocation fails
Chen Yu <yu.c.chen(a)intel.com>
ACPI: pfr_update: Fix the driver update version check
Eric Biggers <ebiggers(a)kernel.org>
ipv6: sr: Fix MAC comparison to be constant-time
Jakub Acs <acsjakub(a)amazon.de>
net, hsr: reject HSR frame if skb can't hold tag
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Don't overwrite dce60_clk_mgr
Amber Lin <Amber.Lin(a)amd.com>
drm/amdkfd: Destroy KFD debugfs after destroy KFD wq
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu: update mmhub 3.0.1 client id mappings
Gang Ba <Gang.Ba(a)amd.com>
drm/amdgpu: Avoid extra evict-restore process.
Mario Limonciello <mario.limonciello(a)amd.com>
drm/amd: Restore cached power limit during resume
Ricardo Ribalda <ribalda(a)chromium.org>
media: venus: venc: Clamp param smaller than 1fps and bigger than 240
Ricardo Ribalda <ribalda(a)chromium.org>
media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
Jorge Ramirez-Ortiz <jorge.ramirez(a)oss.qualcomm.com>
media: venus: protect against spurious interrupts during probe
Jorge Ramirez-Ortiz <jorge.ramirez(a)oss.qualcomm.com>
media: venus: hfi: explicitly release IRQ during teardown
Vedang Nagar <quic_vnagar(a)quicinc.com>
media: venus: Add a check for packet size after reading from shared memory
Vladimir Zapolskiy <vladimir.zapolskiy(a)linaro.org>
media: qcom: camss: cleanup media device allocated resource on error path
Zhang Shurong <zhang_shurong(a)foxmail.com>
media: ov2659: Fix memory leaks in ov2659_probe()
Gui-Dong Han <hanguidong02(a)gmail.com>
media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
Ludwig Disterhof <ludwig(a)disterhof.eu>
media: usbtv: Lock resolution while streaming
Sakari Ailus <sakari.ailus(a)linux.intel.com>
media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
Hans Verkuil <hverkuil(a)xs4all.nl>
media: vivid: fix wrong pixel_array control size
Haoxiang Li <haoxiang_li2024(a)163.com>
media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
Bingbu Cao <bingbu.cao(a)intel.com>
media: hi556: correct the test pattern configuration
Dan Carpenter <dan.carpenter(a)linaro.org>
media: gspca: Add bounds checking to firmware parser
John David Anglin <dave.anglin(a)bell.net>
parisc: Update comments in make_insert_tlb
John David Anglin <dave.anglin(a)bell.net>
parisc: Try to fixup kernel exception in bad_area_nosemaphore path of do_page_fault()
John David Anglin <dave.anglin(a)bell.net>
parisc: Revise gateway LWS calls to probe user read access
John David Anglin <dave.anglin(a)bell.net>
parisc: Revise __get_user() to probe user read access
Randy Dunlap <rdunlap(a)infradead.org>
parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit compilers
John David Anglin <dave.anglin(a)bell.net>
parisc: Check region is readable by user in raw_copy_from_user()
Jon Hunter <jonathanh(a)nvidia.com>
soc/tegra: pmc: Ensure power-domains are in a known state
Baokun Li <libaokun1(a)huawei.com>
jbd2: prevent softlockup in jbd2_log_do_checkpoint()
Will Deacon <will(a)kernel.org>
vhost/vsock: Avoid allocating arbitrarily-sized SKBs
Will Deacon <will(a)kernel.org>
vsock/virtio: Validate length in packet header before skb_put()
Damien Le Moal <dlemoal(a)kernel.org>
PCI: endpoint: Fix configfs group removal on driver teardown
Damien Le Moal <dlemoal(a)kernel.org>
PCI: endpoint: Fix configfs group list head handling
Thomas Fourier <fourier.thomas(a)gmail.com>
mtd: rawnand: renesas: Add missing check after DMA map
Thomas Fourier <fourier.thomas(a)gmail.com>
mtd: rawnand: fsmc: Add missing check after DMA map
Gabor Juhos <j4g8y7(a)gmail.com>
mtd: spinand: propagate spinand_wait() errors from spinand_write_page()
Michael Walle <mwalle(a)kernel.org>
mtd: spi-nor: Fix spi_nor_try_unlock_all()
Tim Harvey <tharvey(a)gateworks.com>
hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Fix duty and period setting
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Handle hardware enable and clock enable separately
Laurentiu Mihalcea <laurentiu.mihalcea(a)nxp.com>
pwm: imx-tpm: Reset counter if CMOD is 0
Johan Hovold <johan+linaro(a)kernel.org>
wifi: ath11k: fix dest ring-buffer corruption when ring is full
Johan Hovold <johan+linaro(a)kernel.org>
wifi: ath11k: fix source ring-buffer corruption
Johan Hovold <johan+linaro(a)kernel.org>
wifi: ath11k: fix dest ring-buffer corruption
Nathan Chancellor <nathan(a)kernel.org>
wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
David Lechner <dlechner(a)baylibre.com>
iio: adc: ad_sigma_delta: change to buffer predisable
David Lechner <dlechner(a)baylibre.com>
iio: imu: bno055: fix OOB access of hw_xlate array
Marek Szyprowski <m.szyprowski(a)samsung.com>
zynq_fpga: use sgtable-based scatterlist wrappers
Adrian Hunter <adrian.hunter(a)intel.com>
scsi: ufs: ufs-pci: Fix default runtime and system PM levels
Archana Patni <archana.patni(a)intel.com>
scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers
Damien Le Moal <dlemoal(a)kernel.org>
ata: libata-scsi: Fix ata_to_sense_error() status handling
Ranjan Kumar <ranjan.kumar(a)broadcom.com>
scsi: mpi3mr: Fix race between config read submit and interrupt completion
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks constraints
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints
Zhang Yi <yi.zhang(a)huawei.com>
ext4: fix hole length calculation overflow in non-extent inodes
Liao Yuanhong <liaoyuanhong(a)vivo.com>
ext4: use kmalloc_array() for array space allocation
Theodore Ts'o <tytso(a)mit.edu>
ext4: don't try to clear the orphan_present feature block device is r/o
Ojaswin Mujoo <ojaswin(a)linux.ibm.com>
ext4: fix reserved gdt blocks handling in fsmap
Ojaswin Mujoo <ojaswin(a)linux.ibm.com>
ext4: fix fsmap end of range reporting with bigalloc
Andreas Dilger <adilger(a)dilger.ca>
ext4: check fast symlink for ea_inode correctly
Namjae Jeon <linkinjeon(a)kernel.org>
ksmbd: extend the connection limiting mechanism to support IPv6
Helge Deller <deller(a)gmx.de>
Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
Eric Biggers <ebiggers(a)kernel.org>
lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
Myrrh Periwinkle <myrrhperiwinkle(a)qtmlabs.xyz>
vt: defkeymap: Map keycodes above 127 to K_HOLE
Myrrh Periwinkle <myrrhperiwinkle(a)qtmlabs.xyz>
vt: keyboard: Don't process Unicode characters in K_OFF mode
Youssef Samir <quic_yabdulra(a)quicinc.com>
bus: mhi: host: Detect events pointing to unexpected TREs
Alexander Wilhelm <alexander.wilhelm(a)westermo.com>
bus: mhi: host: Fix endianness of BHI vector table
Johan Hovold <johan(a)kernel.org>
usb: dwc3: meson-g12a: fix device leaks at unbind
Johan Hovold <johan(a)kernel.org>
usb: gadget: udc: renesas_usb3: fix device leak at unbind
Nathan Chancellor <nathan(a)kernel.org>
usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
Finn Thain <fthain(a)linux-m68k.org>
m68k: Fix lost column on framebuffer debug console
Dan Carpenter <dan.carpenter(a)linaro.org>
cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
Yunhui Cui <cuiyunhui(a)bytedance.com>
serial: 8250: fix panic due to PSLVERR
Aditya Garg <gargaditya08(a)live.com>
HID: apple: avoid setting up battery timer for devices without battery
Aditya Garg <gargaditya08(a)live.com>
HID: magicmouse: avoid setting up battery timer when not needed
Willy Tarreau <w(a)1wt.eu>
tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros
Ricardo Ribalda <ribalda(a)chromium.org>
media: uvcvideo: Do not mark valid metadata as invalid
Youngjun Lee <yjjuny.lee(a)samsung.com>
media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
Breno Leitao <leitao(a)debian.org>
mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
Waiman Long <longman(a)redhat.com>
mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
Randy Dunlap <rdunlap(a)infradead.org>
parisc: Makefile: fix a typo in palo.conf
Haiyang Zhang <haiyangz(a)microsoft.com>
hv_netvsc: Fix panic during namespace deletion with VF
Sravan Kumar Gundu <sravankumarlpu(a)gmail.com>
fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
Qu Wenruo <wqu(a)suse.com>
btrfs: do not allow relocation of partially dropped subvolumes
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix log tree replay failure due to file with 0 links and extents
Naohiro Aota <naohiro.aota(a)wdc.com>
btrfs: zoned: do not remove unwritten non-data block group
Filipe Manana <fdmanana(a)suse.com>
btrfs: abort transaction during log replay if walk_log_tree() failed
Johannes Thumshirn <johannes.thumshirn(a)wdc.com>
btrfs: zoned: use filesystem size not disk size for reclaim decision
Oliver Neukum <oneukum(a)suse.com>
cdc-acm: fix race between initial clearing halt and open
Eric Biggers <ebiggers(a)kernel.org>
thunderbolt: Fix copy+paste error in match_service_id()
Ian Abbott <abbotti(a)mev.co.uk>
comedi: fix race between polling and detaching
Myrrh Periwinkle <myrrhperiwinkle(a)qtmlabs.xyz>
usb: typec: ucsi: Update power_supply on power role change
Ricky Wu <ricky_wu(a)realtek.com>
misc: rtsx: usb: Ensure mmc child device is active when card is present
Xinyu Liu <katieeliu(a)tencent.com>
usb: core: config: Prevent OOB read in SS endpoint companion parsing
Baokun Li <libaokun1(a)huawei.com>
ext4: fix largest free orders lists corruption on mb_optimize_scan switch
Baokun Li <libaokun1(a)huawei.com>
ext4: fix zombie groups in average fragment size lists
Jack Xiao <Jack.Xiao(a)amd.com>
drm/amdgpu: fix incorrect vm flags to map bo
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ASoC: fsl_sai: replace regmap_write with regmap_update_bits
Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com>
ASoC: fsl: merge DAI call back functions into ops
Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com>
ASoC: soc-dai.h: merge DAI call back functions into ops
Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com>
ASoC: soc-dai.c: add missing flag check at snd_soc_pcm_dai_probe()
Jiasheng Jiang <jiashengjiangcool(a)gmail.com>
scsi: lpfc: Remove redundant assignment to avoid memory leak
Meagan Lloyd <meaganlloyd(a)linux.microsoft.com>
rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Fix uninited ptr deref in block/scsi layout
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Handle RPC size limit for layoutcommits
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Fix disk addr range check in block/scsi layout
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Fix stripe mapping in block/scsi layout
John Garry <john.g.garry(a)oracle.com>
block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
Cezary Rojewski <cezary.rojewski(a)intel.com>
ASoC: Intel: avs: Fix uninitialized pointer error in probe()
Buday Csaba <buday.csaba(a)prolan.hu>
net: phy: smsc: add proper reset flags for LAN8710A
Corey Minyard <corey(a)minyard.net>
ipmi: Fix strcpy source and destination the same
Yann E. MORIN <yann.morin.1998(a)free.fr>
kconfig: lxdialog: fix 'space' to (de)select options
Masahiro Yamada <masahiroy(a)kernel.org>
kconfig: gconf: fix potential memory leak in renderer_edited()
Masahiro Yamada <masahiroy(a)kernel.org>
kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
Breno Leitao <leitao(a)debian.org>
ipmi: Use dev_warn_ratelimited() for incorrect message warnings
Artem Sadovnikov <a.sadovnikov(a)ispras.ru>
vfio/mlx5: fix possible overflow in tracking max message size
John Garry <john.g.garry(a)oracle.com>
scsi: aacraid: Stop using PCI_IRQ_AFFINITY
Maurizio Lombardi <mlombard(a)redhat.com>
scsi: target: core: Generate correct identifiers for PR OUT transport IDs
Ranjan Kumar <ranjan.kumar(a)broadcom.com>
scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
Shankari Anand <shankari.ak0208(a)gmail.com>
kconfig: nconf: Ensure null termination where strncpy is used
Keith Busch <kbusch(a)kernel.org>
vfio/type1: conditional rescheduling while pinning
Suchit Karunakaran <suchitkarunakaran(a)gmail.com>
kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
fangzhong.zhou <myth5(a)myth5.com>
i2c: Force DLL0945 touchpad i2c freq to 100khz
Mateusz Guzik <mjguzik(a)gmail.com>
apparmor: use the condition in AA_BUG_FMT even with debug disabled
Benjamin Marzinski <bmarzins(a)redhat.com>
dm-table: fix checking for rq stackable devices
Mikulas Patocka <mpatocka(a)redhat.com>
dm-mpath: don't print the "loaded" message if registering fails
Jorge Marques <jorge.marques(a)analog.com>
i3c: master: Initialize ret in i3c_i2c_notifier_call()
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
i3c: don't fail if GETHDRCAP is unsupported
Meagan Lloyd <meaganlloyd(a)linux.microsoft.com>
rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
i3c: add missing include to internal header
Petr Pavlu <petr.pavlu(a)suse.com>
module: Prevent silent truncation of module name in delete_module(2)
Purva Yeshi <purvayeshi550(a)gmail.com>
md: dm-zoned-target: Initialize return variable r to avoid uninitialized use
Bharat Bhushan <bbhushan2(a)marvell.com>
crypto: octeontx2 - add timeout for load_fvc completion poll
chenchangcheng <chenchangcheng(a)kylinos.cn>
media: uvcvideo: Fix bandwidth issue for Alcor camera
Alex Guo <alexguo1023(a)gmail.com>
media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
Alex Guo <alexguo1023(a)gmail.com>
media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
media: usb: hdpvr: disable zero-length read messages
Dave Stevenson <dave.stevenson(a)raspberrypi.com>
media: tc358743: Increase FIFO trigger level to 374
Dave Stevenson <dave.stevenson(a)raspberrypi.com>
media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
Dave Stevenson <dave.stevenson(a)raspberrypi.com>
media: tc358743: Check I2C succeeded during probe
Cheick Traore <cheick.traore(a)foss.st.com>
pinctrl: stm32: Manage irq affinity settings
Damien Le Moal <dlemoal(a)kernel.org>
scsi: mpi3mr: Correctly handle ATA device errors
Damien Le Moal <dlemoal(a)kernel.org>
scsi: mpt3sas: Correctly handle ATA device errors
Justin Tee <justin.tee(a)broadcom.com>
scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
Arnd Bergmann <arnd(a)arndb.de>
RDMA/core: reduce stack using in nldev_stat_get_doit()
Yury Norov [NVIDIA] <yury.norov(a)gmail.com>
RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
Amelie Delaunay <amelie.delaunay(a)foss.st.com>
dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs
Johan Adolfsson <johan.adolfsson(a)axis.com>
leds: leds-lp50xx: Handle reg to get correct multi_index
Niklas Söderlund <niklas.soderlund+renesas(a)ragnatech.se>
media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control
Shiji Yang <yangshiji66(a)outlook.com>
MIPS: lantiq: falcon: sysctrl: fix request memory check logic
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
Arnaud Lecomte <contact(a)arnaud-lcm.com>
jfs: upper bound check of tree index in dbAllocAG
Edward Adam Davis <eadavis(a)qq.com>
jfs: Regular file corruption check
Lizhi Xu <lizhi.xu(a)windriver.com>
jfs: truncate good inode pages when hard link is 0
jackysliu <1972843537(a)qq.com>
scsi: bfa: Double-free fix
Ziyan Fu <fuzy5(a)lenovo.com>
watchdog: iTCO_wdt: Report error if timeout configuration fails
Shiji Yang <yangshiji66(a)outlook.com>
MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
Florin Leotescu <florin.leotescu(a)nxp.com>
hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state
Sebastian Reichel <sebastian.reichel(a)collabora.com>
watchdog: dw_wdt: Fix default timeout
Amir Mohammad Jahangirzad <a.jahangirzad(a)gmail.com>
fs/orangefs: use snprintf() instead of sprintf()
Showrya M N <showrya(a)chelsio.com>
scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
Theodore Ts'o <tytso(a)mit.edu>
ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
Zhiqi Song <songzhiqi1(a)huawei.com>
crypto: hisilicon/hpre - fix dma unmap sequence
Yongzhen Zhang <zhangyongzhen(a)kylinos.cn>
fbdev: fix potential buffer overflow in do_register_framebuffer()
Pali Rohár <pali(a)kernel.org>
cifs: Fix calling CIFSFindFirst() for root path without msearch
Aaron Plattner <aplattner(a)nvidia.com>
watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition
Mario Limonciello <mario.limonciello(a)amd.com>
drm/amd/display: Only finalize atomic_obj if it was initialized
Jason Wang <jasowang(a)redhat.com>
vhost: fail early when __vhost_add_used() fails
Will Deacon <will(a)kernel.org>
vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com>
drm/ttm: Respect the shrinker core free target
Yonghong Song <yonghong.song(a)linux.dev>
selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size
Jakub Kicinski <kuba(a)kernel.org>
uapi: in6: restore visibility of most IPv6 socket options
Emily Deng <Emily.Deng(a)amd.com>
drm/ttm: Should to return the evict error
Hari Kalavakunta <kalavakunta.hari.prasad(a)gmail.com>
net: ncsi: Fix buffer overflow in fetching version id
Shannon Nelson <shannon.nelson(a)amd.com>
ionic: clean dbpage in de-init
Thomas Fourier <fourier.thomas(a)gmail.com>
wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc()
Breno Leitao <leitao(a)debian.org>
ptp: Use ratelimite for freerun error message
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: prevent DIS_LEARNING access on BCM5325
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
Alok Tiwari <alok.a.tiwari(a)oracle.com>
gve: Return error for unknown admin queue command
Gal Pressman <gal(a)nvidia.com>
net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
Mario Limonciello <mario.limonciello(a)amd.com>
drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual
Heiner Kallweit <hkallweit1(a)gmail.com>
dpaa_eth: don't use fixed_phy_change_carrier
Nicolas Escande <nico.escande(a)gmail.com>
neighbour: add support for NUD_PERMANENT proxy entries
Stanislaw Gruszka <stf_xl(a)wp.pl>
wifi: iwlegacy: Check rate_idx range after addition
Mina Almasry <almasrymina(a)google.com>
netmem: fix skb_frag_address_safe with unreadable skbs
Thomas Fourier <fourier.thomas(a)gmail.com>
powerpc: floppy: Add missing checks after DMA map
Thomas Fourier <fourier.thomas(a)gmail.com>
wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
Ramya Gnanasekar <ramya.gnanasekar(a)oss.qualcomm.com>
wifi: mac80211: update radar_required in channel context after channel switch
Wen Chen <Wen.Chen3(a)amd.com>
drm/amd/display: Fix 'failed to blank crtc!'
Pagadala Yesu Anjaneyulu <pagadala.yesu.anjaneyulu(a)intel.com>
wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
Rand Deeb <rand.sec96(a)gmail.com>
wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
Ilya Bakoulin <Ilya.Bakoulin(a)amd.com>
drm/amd/display: Separate set_gsl from set_gsl_source_select
Jonas Rebmann <jre(a)pengutronix.de>
net: fec: allow disable coalescing
Eric Work <work.eric(a)gmail.com>
net: atlantic: add set_power to fw_ops for atl2 to fix wol
zhangjianrong <zhangjianrong5(a)huawei.com>
net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths()
zhangjianrong <zhangjianrong5(a)huawei.com>
net: thunderbolt: Enable end-to-end flow control also in transmit
Mark Brown <broonie(a)kernel.org>
kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace
Bitterblue Smith <rtl8821cerfe2(a)gmail.com>
wifi: rtw89: Disable deep power saving for USB/SDIO
Bitterblue Smith <rtl8821cerfe2(a)gmail.com>
wifi: rtw89: Fix rtw89_mac_power_switch() for USB
Rob Clark <robdclark(a)chromium.org>
drm/msm: use trylock for debugfs
Kuniyuki Iwashima <kuniyu(a)google.com>
ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc().
Thomas Fourier <fourier.thomas(a)gmail.com>
(powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
Johannes Berg <johannes.berg(a)intel.com>
wifi: mac80211: don't complete management TX on SAE commit
Chris Mason <clm(a)fb.com>
sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails
Sven Schnelle <svens(a)linux.ibm.com>
s390/stp: Remove udelay from stp_sync_clock()
Avraham Stern <avraham.stern(a)intel.com>
wifi: iwlwifi: mvm: fix scan request validation
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
um: Re-evaluate thread flags repeatedly
Alok Tiwari <alok.a.tiwari(a)oracle.com>
net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
Oscar Maes <oscmaes92(a)gmail.com>
net: ipv4: fix incorrect MTU in broadcast routes
Ilan Peer <ilan.peer(a)intel.com>
wifi: cfg80211: Fix interface type validation
Matt Johnston <matt(a)codeconstruct.com.au>
net: mctp: Prevent duplicate binds
Paul E. McKenney <paulmck(a)kernel.org>
rcu: Protect ->defer_qs_iw_pending from data race
Breno Leitao <leitao(a)debian.org>
arm64: Mark kernel as tainted on SAE and SError panic
Leon Romanovsky <leon(a)kernel.org>
net/mlx5e: Properly access RCU protected qdisc_sleeping variable
Thomas Fourier <fourier.thomas(a)gmail.com>
net: ag71xx: Add missing check after DMA map
Thomas Fourier <fourier.thomas(a)gmail.com>
et131x: Add missing check after DMA map
Bitterblue Smith <rtl8821cerfe2(a)gmail.com>
wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB
Alok Tiwari <alok.a.tiwari(a)oracle.com>
be2net: Use correct byte order and format string for TCP seq and ack_seq
Sven Schnelle <svens(a)linux.ibm.com>
s390/time: Use monotonic clock in get_cycles()
Johannes Berg <johannes.berg(a)intel.com>
wifi: cfg80211: reject HTC bit for management frames
Steven Rostedt <rostedt(a)goodmis.org>
ktest.pl: Prevent recursion of default variable options
Oliver Neukum <oneukum(a)suse.com>
net: usb: cdc-ncm: check for filtering capability
Anthoine Bourgeois <anthoine.bourgeois(a)vates.tech>
xen/netfront: Fix TX response spurious interrupts
Xinxin Wan <xinxin.wan(a)intel.com>
ASoC: codecs: rt5640: Retry DEVICE_ID verification
Jonathan Santos <Jonathan.Santos(a)analog.com>
iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com>
ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
Christophe Leroy <christophe.leroy(a)csgroup.eu>
ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
Lucy Thrun <lucy.thrun(a)digital-rabbithole.de>
ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
Tomasz Michalec <tmichalec(a)google.com>
platform/chrome: cros_ec_typec: Defer probe on missing EC parent
Kees Cook <kees(a)kernel.org>
platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
Gautham R. Shenoy <gautham.shenoy(a)amd.com>
pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
Oliver Neukum <oneukum(a)suse.com>
usb: core: usb_submit_urb: downgrade type check
Tomasz Michalec <tmichalec(a)google.com>
usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com>
ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
Alok Tiwari <alok.a.tiwari(a)oracle.com>
ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
Mark Brown <broonie(a)kernel.org>
ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
x86/bugs: Avoid warning when overriding return thunk
Takashi Iwai <tiwai(a)suse.de>
ALSA: hda: Disable jack polling at shutdown
Takashi Iwai <tiwai(a)suse.de>
ALSA: hda: Handle the jack polling always via a work
Ulf Hansson <ulf.hansson(a)linaro.org>
mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
Hans de Goede <hansg(a)kernel.org>
mei: bus: Check for still connected devices in mei_cl_bus_dev_release()
Peter Robinson <pbrobinson(a)gmail.com>
reset: brcmstb: Enable reset drivers for ARCH_BCM2835
Eliav Farber <farbere(a)amazon.com>
pps: clients: gpio: fix interrupt handling order in remove path
Breno Leitao <leitao(a)debian.org>
ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
Sarthak Garg <quic_sartgarg(a)quicinc.com>
mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
Sebastian Ott <sebott(a)redhat.com>
ACPI: processor: fix acpi_object initialization
tuhaowen <tuhaowen(a)uniontech.com>
PM: sleep: console: Fix the black screen issue
Hsin-Te Yuan <yuanhsinte(a)chromium.org>
thermal: sysfs: Return ENODATA instead of EAGAIN for reads
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
Zhu Qiyu <qiyuzhu2(a)amd.com>
ACPI: PRM: Reduce unnecessary printing to avoid user confusion
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
selftests: tracing: Use mutex_unlock for testing glob filter
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
tools/build: Fix s390(x) cross-compilation with clang
Aaron Kling <webgeek1234(a)gmail.com>
ARM: tegra: Use I/O memcpy to write to IRAM
Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org>
gpio: tps65912: check the return value of regmap_update_bits()
David Lechner <dlechner(a)baylibre.com>
iio: adc: ad_sigma_delta: don't overallocate scan buffer
Thomas Weißschuh <linux(a)weissschuh.net>
tools/nolibc: define time_t in terms of __kernel_old_time_t
David Collins <david.collins(a)oss.qualcomm.com>
thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required
Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com>
ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
Shubhrajyoti Datta <shubhrajyoti.datta(a)amd.com>
EDAC/synopsys: Clear the ECC counters on init
Lifeng Zheng <zhenglifeng1(a)huawei.com>
PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()
Alexander Kochetkov <al.kochet(a)gmail.com>
ARM: rockchip: fix kernel hang during smp initialization
Lifeng Zheng <zhenglifeng1(a)huawei.com>
cpufreq: Exit governor when failed to start old governor
Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org>
gpio: wcd934x: check the return value of regmap_update_bits()
Hiago De Franco <hiago.franco(a)toradex.com>
remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU
Mario Limonciello <mario.limonciello(a)amd.com>
usb: xhci: Avoid showing errors during surprise removal
Jay Chen <shawn2000100(a)gmail.com>
usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
Mario Limonciello <mario.limonciello(a)amd.com>
usb: xhci: Avoid showing warnings for dying controller
Benson Leung <bleung(a)chromium.org>
usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default
Cynthia Huang <cynthia(a)andestech.com>
selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
Prashant Malani <pmalani(a)google.com>
cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
Su Hui <suhui(a)nfschina.com>
usb: xhci: print xhci->xhc_state when queue_command failed
Al Viro <viro(a)zeniv.linux.org.uk>
securityfs: don't pin dentries twice, once is enough...
Al Viro <viro(a)zeniv.linux.org.uk>
fix locking in efi_secret_unlink()
Wei Gao <wegao(a)suse.com>
ext2: Handle fiemap on empty files to prevent EINVAL
Rong Zhang <ulin0208(a)gmail.com>
fs/ntfs3: correctly create symlink for relative path
Lizhi Xu <lizhi.xu(a)windriver.com>
fs/ntfs3: Add sanity check for file name
Damien Le Moal <dlemoal(a)kernel.org>
ata: libata-sata: Disallow changing LPM state if not supported
Al Viro <viro(a)zeniv.linux.org.uk>
better lockdep annotations for simple_recursive_removal()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfs: fix not erasing deleted b-tree node issue
Sarah Newman <srn(a)prgmr.com>
drbd: add missing kref_get in handle_write_conflicts
Jan Kara <jack(a)suse.cz>
udf: Verify partition map count
NeilBrown <neil(a)brown.name>
smb/server: avoid deadlock when linking with ReplaceIfExists
Kees Cook <kees(a)kernel.org>
arm64: Handle KCOV __init vs inline mismatches
Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp>
hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfs: fix slab-out-of-bounds in hfs_bnode_read()
Florian Westphal <fw(a)strlen.de>
netfilter: ctnetlink: fix refcount leak on table dump
Sabrina Dubroca <sd(a)queasysnail.net>
udp: also consider secpath when evaluating ipsec use for checksumming
Maxim Levitsky <mlevitsk(a)redhat.com>
KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest
Maxim Levitsky <mlevitsk(a)redhat.com>
KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs
Maxim Levitsky <mlevitsk(a)redhat.com>
KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter
Sean Christopherson <seanjc(a)google.com>
KVM: VMX: Extract checking of guest's DEBUGCTL into helper
Sean Christopherson <seanjc(a)google.com>
KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Fully defer to vendor code to decide how to force immediate exit
Sean Christopherson <seanjc(a)google.com>
KVM: VMX: Handle KVM-induced preemption timer exits in fastpath for L2
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Move handling of is_guest_mode() into fastpath exit handlers
Sean Christopherson <seanjc(a)google.com>
KVM: VMX: Handle forced exit due to preemption timer in fastpath
Sean Christopherson <seanjc(a)google.com>
KVM: VMX: Re-enter guest in fastpath for "spurious" preemption timer exits
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Plumb "force_immediate_exit" into kvm_entry() tracepoint
Sean Christopherson <seanjc(a)google.com>
KVM: x86/pmu: Gate all "unimplemented MSR" prints on report_ignored_msrs
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Snapshot the host's DEBUGCTL in common x86
Chao Gao <chao.gao(a)intel.com>
KVM: nVMX: Defer SVI update to vmcs01 on EOI when L2 is active w/o VID
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update()
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC)
Sean Christopherson <seanjc(a)google.com>
KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
ACPI: processor: perflib: Move problematic pr->performance check
Jiayi Li <lijiayi(a)kylinos.cn>
ACPI: processor: perflib: Fix initial _PPC limit application
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
Documentation: ACPI: Fix parent device references
Jann Horn <jannh(a)google.com>
eventpoll: Fix semi-unbounded recursion
Sasha Levin <sashal(a)kernel.org>
fs: Prevent file descriptor table allocations exceeding INT_MAX
Ma Ke <make24(a)iscas.ac.cn>
sunvdc: Balance device refcount in vdc_port_mpgroup_check
Haoran Jiang <jianghaoran(a)kylinos.cn>
LoongArch: BPF: Fix jump offset calculation in tailcall
Huacai Chen <chenhuacai(a)kernel.org>
PCI: Extend isolated function probing to LoongArch
Trond Myklebust <trond.myklebust(a)hammerspace.com>
NFS: Fix the setting of capabilities when automounting a new filesystem
Dai Ngo <dai.ngo(a)oracle.com>
NFSD: detect mismatch of file handle and delegation stateid in OPEN op
Jeff Layton <jlayton(a)kernel.org>
nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
Xu Yang <xu.yang_2(a)nxp.com>
net: usb: asix_devices: add phy_mask for ax88772 mdio bus
Johan Hovold <johan(a)kernel.org>
net: dpaa: fix device leak when querying time stamp info
Johan Hovold <johan(a)kernel.org>
net: mtk_eth_soc: fix device leak at probe
Johan Hovold <johan(a)kernel.org>
net: gianfar: fix device leak when querying time stamp info
Florian Larysch <fl(a)n621.de>
net: phy: micrel: fix KSZ8081/KSZ8091 cable test
Fedor Pchelkin <pchelkin(a)ispras.ru>
netlink: avoid infinite retry looping in netlink_unicast()
David Thompson <davthompson(a)nvidia.com>
gpio: mlxbf2: use platform_get_irq_optional()
Harald Mommer <harald.mommer(a)oss.qualcomm.com>
gpio: virtio: Fix config space reading.
Wang Zhaolong <wangzhaolong(a)huaweicloud.com>
smb: client: remove redundant lstrp update in negotiate protocol
Steve French <stfrench(a)microsoft.com>
smb3: fix for slab out of bounds on mount to ksmbd
Christopher Eby <kreed(a)kreed.org>
ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks
Vasiliy Kovalev <kovalev(a)altlinux.org>
ALSA: hda/realtek: Fix headset mic on HONOR BRB-X
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Validate UAC3 cluster segment descriptors
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Validate UAC3 power domain descriptors, too
Pavel Begunkov <asml.silence(a)gmail.com>
io_uring: don't use int for ABI
-------------
Diffstat:
.../bindings/display/sprd/sprd,sharkl3-dpu.yaml | 2 +-
.../display/sprd/sprd,sharkl3-dsi-host.yaml | 2 +-
Documentation/firmware-guide/acpi/i2c-muxes.rst | 8 +-
Documentation/networking/bonding.rst | 12 ++
Documentation/networking/mptcp-sysctl.rst | 2 +
Makefile | 6 +-
arch/arm/Makefile | 2 +-
arch/arm/mach-rockchip/platsmp.c | 15 +-
arch/arm/mach-tegra/reset.c | 2 +-
arch/arm64/boot/dts/ti/k3-am62-main.dtsi | 1 -
arch/arm64/include/asm/acpi.h | 2 +-
arch/arm64/kernel/cpufeature.c | 1 +
arch/arm64/kernel/entry.S | 6 +
arch/arm64/kernel/fpsimd.c | 4 +-
arch/arm64/kernel/traps.c | 1 +
arch/arm64/mm/fault.c | 1 +
arch/arm64/mm/ptdump_debugfs.c | 3 -
arch/loongarch/net/bpf_jit.c | 21 +-
arch/m68k/kernel/head.S | 31 ++-
arch/mips/crypto/chacha-core.S | 20 +-
arch/mips/include/asm/vpe.h | 8 +
arch/mips/kernel/process.c | 16 +-
arch/mips/lantiq/falcon/sysctrl.c | 23 +--
arch/parisc/Makefile | 6 +-
arch/parisc/include/asm/special_insns.h | 28 +++
arch/parisc/include/asm/uaccess.h | 21 +-
arch/parisc/kernel/entry.S | 17 +-
arch/parisc/kernel/syscall.S | 30 ++-
arch/parisc/lib/memcpy.c | 19 +-
arch/parisc/mm/fault.c | 4 +
arch/powerpc/include/asm/floppy.h | 5 +-
arch/powerpc/platforms/512x/mpc512x_lpbfifo.c | 6 +-
arch/s390/hypfs/hypfs_dbfs.c | 19 +-
arch/s390/include/asm/timex.h | 13 +-
arch/s390/kernel/time.c | 2 +-
arch/s390/mm/dump_pagetables.c | 2 -
arch/um/include/asm/thread_info.h | 4 +
arch/um/kernel/process.c | 18 +-
arch/x86/events/intel/core.c | 2 +-
arch/x86/include/asm/kvm-x86-ops.h | 2 -
arch/x86/include/asm/kvm_host.h | 24 ++-
arch/x86/include/asm/msr-index.h | 1 +
arch/x86/include/asm/reboot.h | 5 +-
arch/x86/include/asm/virtext.h | 10 -
arch/x86/include/asm/xen/hypercall.h | 5 +-
arch/x86/kernel/cpu/bugs.c | 5 +-
arch/x86/kernel/cpu/hygon.c | 3 +
arch/x86/kernel/cpu/mce/amd.c | 13 +-
arch/x86/kernel/reboot.c | 43 ++--
arch/x86/kvm/hyperv.c | 10 +-
arch/x86/kvm/lapic.c | 61 ++++--
arch/x86/kvm/lapic.h | 1 +
arch/x86/kvm/svm/svm.c | 49 +++--
arch/x86/kvm/svm/vmenter.S | 9 +-
arch/x86/kvm/trace.h | 9 +-
arch/x86/kvm/vmx/nested.c | 26 ++-
arch/x86/kvm/vmx/pmu_intel.c | 8 +-
arch/x86/kvm/vmx/vmx.c | 183 +++++++++++------
arch/x86/kvm/vmx/vmx.h | 31 ++-
arch/x86/kvm/x86.c | 65 +++---
arch/x86/kvm/x86.h | 12 ++
block/blk-core.c | 26 ++-
block/blk-settings.c | 2 +-
drivers/acpi/acpi_processor.c | 2 +-
drivers/acpi/apei/ghes.c | 2 +
drivers/acpi/pfr_update.c | 2 +-
drivers/acpi/prmt.c | 26 ++-
drivers/acpi/processor_perflib.c | 11 +
drivers/ata/Kconfig | 35 +++-
drivers/ata/libata-sata.c | 5 +
drivers/ata/libata-scsi.c | 20 +-
drivers/base/power/runtime.c | 5 +
drivers/block/drbd/drbd_receiver.c | 6 +-
drivers/block/sunvdc.c | 4 +-
drivers/bus/mhi/host/boot.c | 8 +-
drivers/bus/mhi/host/internal.h | 4 +-
drivers/bus/mhi/host/main.c | 12 +-
drivers/char/ipmi/ipmi_msghandler.c | 8 +-
drivers/char/ipmi/ipmi_watchdog.c | 59 ++++--
drivers/comedi/comedi_fops.c | 38 +++-
drivers/comedi/comedi_internal.h | 1 +
drivers/comedi/drivers.c | 40 ++--
drivers/comedi/drivers/pcl726.c | 3 +-
drivers/cpufreq/armada-8k-cpufreq.c | 2 +-
drivers/cpufreq/cppc_cpufreq.c | 2 +-
drivers/cpufreq/cpufreq.c | 8 +-
drivers/crypto/hisilicon/hpre/hpre_crypto.c | 8 +-
.../crypto/marvell/octeontx2/otx2_cptpf_ucode.c | 16 +-
drivers/crypto/qat/qat_4xxx/adf_4xxx_hw_data.c | 13 ++
drivers/crypto/qat/qat_common/adf_accel_devices.h | 1 +
drivers/crypto/qat/qat_common/adf_gen4_hw_data.h | 6 +
drivers/crypto/qat/qat_common/adf_init.c | 3 +
drivers/devfreq/governor_userspace.c | 6 +-
drivers/dma/stm32-dma.c | 2 +-
drivers/edac/synopsys_edac.c | 93 ++++-----
drivers/fpga/zynq-fpga.c | 10 +-
drivers/gpio/gpio-mlxbf2.c | 2 +-
drivers/gpio/gpio-tps65912.c | 7 +-
drivers/gpio/gpio-virtio.c | 9 +-
drivers/gpio/gpio-wcd934x.c | 7 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_csa.c | 4 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 6 +-
drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c | 57 +++---
drivers/gpu/drm/amd/amdkfd/kfd_module.c | 2 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 6 +-
.../gpu/drm/amd/display/dc/bios/command_table.c | 2 +-
drivers/gpu/drm/amd/display/dc/clk_mgr/clk_mgr.c | 1 -
.../amd/display/dc/clk_mgr/dce100/dce_clk_mgr.c | 2 -
.../amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 40 ++--
.../amd/display/dc/clk_mgr/dce60/dce60_clk_mgr.c | 31 +--
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 11 +-
.../gpu/drm/amd/display/modules/hdcp/hdcp_psp.c | 3 +
drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 6 +
drivers/gpu/drm/amd/pm/swsmu/smu11/vangogh_ppt.c | 37 ++--
drivers/gpu/drm/display/drm_dp_helper.c | 2 +-
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 4 +-
drivers/gpu/drm/msm/msm_gem.c | 3 +-
drivers/gpu/drm/msm/msm_gem.h | 6 +
drivers/gpu/drm/scheduler/sched_entity.c | 21 +-
drivers/gpu/drm/ttm/ttm_pool.c | 8 +-
drivers/gpu/drm/ttm/ttm_resource.c | 3 +
drivers/hid/hid-apple.c | 13 +-
drivers/hid/hid-magicmouse.c | 56 ++++--
drivers/hwmon/emc2305.c | 10 +-
drivers/hwmon/gsc-hwmon.c | 4 +-
drivers/i2c/i2c-core-acpi.c | 1 +
drivers/i3c/internals.h | 1 +
drivers/i3c/master.c | 4 +-
drivers/iio/adc/ad7768-1.c | 23 ++-
drivers/iio/adc/ad_sigma_delta.c | 6 +-
drivers/iio/imu/bno055/bno055.c | 11 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_temp.c | 6 +-
drivers/iio/light/as73211.c | 2 +-
drivers/iio/light/hid-sensor-prox.c | 8 +-
drivers/iio/pressure/bmp280-core.c | 9 +-
drivers/iio/proximity/isl29501.c | 14 +-
drivers/iio/temperature/maxim_thermocouple.c | 26 ++-
drivers/infiniband/core/nldev.c | 22 +-
drivers/infiniband/hw/bnxt_re/qplib_res.c | 2 +
drivers/infiniband/hw/erdma/erdma_verbs.c | 4 +-
drivers/infiniband/hw/hfi1/affinity.c | 44 ++--
drivers/iommu/amd/init.c | 4 +-
drivers/leds/leds-lp50xx.c | 11 +-
drivers/md/dm-ps-historical-service-time.c | 4 +-
drivers/md/dm-ps-queue-length.c | 4 +-
drivers/md/dm-ps-round-robin.c | 4 +-
drivers/md/dm-ps-service-time.c | 4 +-
drivers/md/dm-table.c | 10 +-
drivers/md/dm-zoned-target.c | 2 +-
drivers/media/cec/usb/rainshadow/rainshadow-cec.c | 3 +-
drivers/media/dvb-frontends/dib7000p.c | 8 +
drivers/media/i2c/hi556.c | 26 +--
drivers/media/i2c/ov2659.c | 3 +-
drivers/media/i2c/tc358743.c | 86 +++++---
drivers/media/platform/qcom/camss/camss.c | 4 +-
drivers/media/platform/qcom/venus/core.c | 8 +-
drivers/media/platform/qcom/venus/core.h | 2 +
drivers/media/platform/qcom/venus/helpers.c | 2 +-
drivers/media/platform/qcom/venus/hfi_helper.h | 61 +++++-
drivers/media/platform/qcom/venus/hfi_msgs.c | 85 +++++---
drivers/media/platform/qcom/venus/hfi_venus.c | 5 +
drivers/media/platform/qcom/venus/vdec.c | 13 +-
drivers/media/platform/qcom/venus/vdec_ctrls.c | 2 +-
drivers/media/platform/qcom/venus/venc.c | 9 +-
drivers/media/platform/qcom/venus/venc_ctrls.c | 2 +-
drivers/media/test-drivers/vivid/vivid-ctrls.c | 3 +-
drivers/media/test-drivers/vivid/vivid-vid-cap.c | 4 +-
drivers/media/usb/gspca/vicam.c | 10 +-
drivers/media/usb/hdpvr/hdpvr-i2c.c | 6 +
drivers/media/usb/usbtv/usbtv-video.c | 4 +
drivers/media/usb/uvc/uvc_driver.c | 3 +
drivers/media/usb/uvc/uvc_video.c | 21 +-
drivers/media/v4l2-core/v4l2-common.c | 8 +-
drivers/media/v4l2-core/v4l2-ctrls-core.c | 1 -
drivers/memstick/core/memstick.c | 1 -
drivers/memstick/host/rtsx_usb_ms.c | 1 +
drivers/misc/cardreader/rtsx_usb.c | 16 +-
drivers/misc/mei/bus.c | 6 +
drivers/mmc/host/rtsx_usb_sdmmc.c | 4 +-
drivers/mmc/host/sdhci-msm.c | 14 ++
drivers/mmc/host/sdhci-pci-gli.c | 33 +--
drivers/most/core.c | 2 +-
drivers/mtd/nand/raw/fsmc_nand.c | 2 +
drivers/mtd/nand/raw/renesas-nand-controller.c | 6 +
drivers/mtd/nand/spi/core.c | 5 +-
drivers/mtd/spi-nor/swp.c | 19 +-
drivers/net/bonding/bond_3ad.c | 224 ++++++++++++++++++---
drivers/net/bonding/bond_main.c | 1 +
drivers/net/bonding/bond_netlink.c | 16 ++
drivers/net/bonding/bond_options.c | 29 ++-
drivers/net/dsa/b53/b53_common.c | 63 ++++--
drivers/net/dsa/b53/b53_regs.h | 2 +
drivers/net/dummy.c | 1 +
drivers/net/ethernet/agere/et131x.c | 36 ++++
drivers/net/ethernet/aquantia/atlantic/aq_hw.h | 2 +
.../aquantia/atlantic/hw_atl2/hw_atl2_utils_fw.c | 39 ++++
drivers/net/ethernet/atheros/ag71xx.c | 9 +
drivers/net/ethernet/cavium/thunder/thunder_bgx.c | 4 +-
drivers/net/ethernet/emulex/benet/be_main.c | 8 +-
drivers/net/ethernet/freescale/dpaa/dpaa_eth.c | 2 -
drivers/net/ethernet/freescale/dpaa/dpaa_ethtool.c | 4 +-
drivers/net/ethernet/freescale/enetc/enetc_pf.c | 14 +-
drivers/net/ethernet/freescale/fec_main.c | 34 ++--
drivers/net/ethernet/freescale/gianfar_ethtool.c | 4 +-
drivers/net/ethernet/google/gve/gve_adminq.c | 1 +
drivers/net/ethernet/google/gve/gve_main.c | 2 +
drivers/net/ethernet/intel/igc/igc_main.c | 14 +-
drivers/net/ethernet/intel/ixgbe/ixgbe_xsk.c | 4 +-
drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 2 +
drivers/net/ethernet/mediatek/mtk_wed.c | 1 -
drivers/net/ethernet/mellanox/mlx5/core/en/qos.c | 2 +-
drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +
drivers/net/ethernet/mellanox/mlxsw/trap.h | 1 +
drivers/net/ethernet/pensando/ionic/ionic_lif.c | 7 +-
drivers/net/geneve.c | 1 +
drivers/net/hyperv/hyperv_net.h | 3 +
drivers/net/hyperv/netvsc_drv.c | 29 ++-
drivers/net/loopback.c | 1 +
drivers/net/phy/micrel.c | 2 +
drivers/net/phy/mscc/mscc.h | 12 ++
drivers/net/phy/mscc/mscc_main.c | 12 ++
drivers/net/phy/mscc/mscc_ptp.c | 49 +++--
drivers/net/phy/smsc.c | 1 +
drivers/net/ppp/ppp_generic.c | 17 +-
drivers/net/thunderbolt.c | 21 +-
drivers/net/usb/asix_devices.c | 1 +
drivers/net/usb/cdc_ncm.c | 20 +-
drivers/net/veth.c | 1 +
drivers/net/vxlan/vxlan_core.c | 1 +
drivers/net/wireless/ath/ath11k/ce.c | 3 -
drivers/net/wireless/ath/ath11k/dp_rx.c | 3 -
drivers/net/wireless/ath/ath11k/hal.c | 33 ++-
.../broadcom/brcm80211/brcmsmac/phy/phy_lcn.c | 2 +-
drivers/net/wireless/intel/iwlegacy/4965-mac.c | 5 +-
drivers/net/wireless/intel/iwlwifi/dvm/rs.c | 2 +-
drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 7 +-
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 2 +-
drivers/net/wireless/realtek/rtlwifi/pci.c | 23 ++-
drivers/net/wireless/realtek/rtw89/core.c | 3 +
drivers/net/wireless/realtek/rtw89/fw.c | 9 +-
drivers/net/wireless/realtek/rtw89/fw.h | 2 +
drivers/net/wireless/realtek/rtw89/mac.c | 19 ++
drivers/net/wireless/realtek/rtw89/reg.h | 1 +
drivers/net/xen-netfront.c | 5 -
drivers/pci/controller/pcie-rockchip-host.c | 49 +++--
drivers/pci/controller/pcie-rockchip.h | 11 +-
drivers/pci/endpoint/pci-ep-cfs.c | 1 +
drivers/pci/endpoint/pci-epf-core.c | 2 +-
drivers/pci/pci-acpi.c | 4 +-
drivers/pci/pci.c | 8 +-
drivers/pci/probe.c | 2 +-
drivers/pinctrl/stm32/pinctrl-stm32.c | 1 +
drivers/platform/chrome/cros_ec.c | 19 +-
drivers/platform/chrome/cros_ec_typec.c | 4 +-
drivers/platform/x86/thinkpad_acpi.c | 4 +-
drivers/pps/clients/pps-gpio.c | 5 +-
drivers/ptp/ptp_clock.c | 2 +-
drivers/pwm/pwm-imx-tpm.c | 9 +
drivers/pwm/pwm-mediatek.c | 71 +++----
drivers/remoteproc/imx_rproc.c | 4 +-
drivers/reset/Kconfig | 10 +-
drivers/rtc/rtc-ds1307.c | 15 +-
drivers/s390/char/sclp.c | 11 +-
drivers/scsi/aacraid/comminit.c | 3 +-
drivers/scsi/bfa/bfad_im.c | 1 +
drivers/scsi/libiscsi.c | 3 +-
drivers/scsi/lpfc/lpfc_debugfs.c | 1 -
drivers/scsi/lpfc/lpfc_scsi.c | 4 +
drivers/scsi/mpi3mr/mpi3mr.h | 6 +-
drivers/scsi/mpi3mr/mpi3mr_fw.c | 17 +-
drivers/scsi/mpi3mr/mpi3mr_os.c | 22 +-
drivers/scsi/mpt3sas/mpt3sas_scsih.c | 19 ++
drivers/scsi/qla4xxx/ql4_os.c | 2 +
drivers/scsi/scsi_scan.c | 2 +-
drivers/scsi/scsi_transport_sas.c | 62 ++++--
drivers/soc/qcom/mdt_loader.c | 68 ++++++-
drivers/soc/tegra/pmc.c | 51 +++--
drivers/staging/media/imx/imx-media-csc-scaler.c | 2 +-
drivers/target/target_core_fabric_lib.c | 65 ++++--
drivers/target/target_core_internal.h | 4 +-
drivers/target/target_core_pr.c | 18 +-
drivers/thermal/qcom/qcom-spmi-temp-alarm.c | 43 +++-
drivers/thermal/thermal_sysfs.c | 9 +-
drivers/thunderbolt/domain.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 3 +-
drivers/tty/vt/defkeymap.c_shipped | 112 +++++++++++
drivers/tty/vt/keyboard.c | 2 +-
drivers/ufs/host/ufs-exynos.c | 4 +-
drivers/ufs/host/ufshcd-pci.c | 42 +++-
drivers/usb/atm/cxacru.c | 172 ++++++++--------
drivers/usb/class/cdc-acm.c | 11 +-
drivers/usb/core/config.c | 10 +-
drivers/usb/core/hcd.c | 8 +-
drivers/usb/core/quirks.c | 1 +
drivers/usb/core/urb.c | 2 +-
drivers/usb/dwc3/dwc3-imx8mp.c | 6 +-
drivers/usb/dwc3/dwc3-meson-g12a.c | 3 +
drivers/usb/dwc3/ep0.c | 20 +-
drivers/usb/dwc3/gadget.c | 19 +-
drivers/usb/gadget/udc/renesas_usb3.c | 1 +
drivers/usb/host/xhci-mem.c | 2 +
drivers/usb/host/xhci-pci-renesas.c | 7 +-
drivers/usb/host/xhci-ring.c | 10 +-
drivers/usb/host/xhci.c | 6 +-
drivers/usb/musb/omap2430.c | 20 +-
drivers/usb/storage/realtek_cr.c | 2 +-
drivers/usb/storage/unusual_devs.h | 29 +++
drivers/usb/typec/mux/intel_pmc_mux.c | 2 +-
drivers/usb/typec/tcpm/fusb302.c | 8 +
drivers/usb/typec/ucsi/psy.c | 2 +-
drivers/usb/typec/ucsi/ucsi.c | 1 +
drivers/usb/typec/ucsi/ucsi.h | 7 +-
drivers/vfio/pci/mlx5/cmd.c | 4 +-
drivers/vfio/vfio_iommu_type1.c | 7 +
drivers/vhost/vhost.c | 3 +
drivers/vhost/vsock.c | 6 +-
drivers/video/console/vgacon.c | 2 +-
drivers/video/fbdev/core/fbcon.c | 9 +-
drivers/video/fbdev/core/fbmem.c | 3 +
drivers/virt/coco/efi_secret/efi_secret.c | 10 +-
drivers/watchdog/dw_wdt.c | 2 +
drivers/watchdog/iTCO_wdt.c | 6 +-
drivers/watchdog/sbsa_gwdt.c | 50 ++++-
fs/btrfs/block-group.c | 27 ++-
fs/btrfs/ctree.c | 9 +-
fs/btrfs/ordered-data.c | 12 +-
fs/btrfs/qgroup.c | 31 ++-
fs/btrfs/relocation.c | 19 ++
fs/btrfs/send.c | 39 ++++
fs/btrfs/tree-log.c | 60 ++++--
fs/btrfs/zoned.c | 3 +-
fs/buffer.c | 2 +-
fs/crypto/fscrypt_private.h | 17 ++
fs/crypto/hkdf.c | 2 +-
fs/crypto/keysetup.c | 3 +-
fs/crypto/keysetup_v1.c | 3 +-
fs/eventpoll.c | 60 ++++--
fs/ext2/inode.c | 12 +-
fs/ext4/fsmap.c | 23 ++-
fs/ext4/indirect.c | 4 +-
fs/ext4/inline.c | 19 +-
fs/ext4/inode.c | 2 +-
fs/ext4/mballoc.c | 69 +++----
fs/ext4/orphan.c | 5 +-
fs/ext4/super.c | 8 +-
fs/f2fs/data.c | 2 +
fs/f2fs/f2fs.h | 1 -
fs/f2fs/inode.c | 7 +
fs/f2fs/node.c | 10 +
fs/file.c | 15 ++
fs/hfs/bnode.c | 93 +++++++++
fs/hfsplus/bnode.c | 92 +++++++++
fs/hfsplus/unicode.c | 7 +
fs/hfsplus/xattr.c | 6 +-
fs/hugetlbfs/inode.c | 2 +-
fs/jbd2/checkpoint.c | 1 +
fs/jfs/file.c | 3 +
fs/jfs/inode.c | 2 +-
fs/jfs/jfs_dmap.c | 6 +
fs/libfs.c | 4 +-
fs/namespace.c | 34 ++--
fs/nfs/blocklayout/blocklayout.c | 4 +-
fs/nfs/blocklayout/dev.c | 5 +-
fs/nfs/blocklayout/extent_tree.c | 20 +-
fs/nfs/client.c | 44 +++-
fs/nfs/internal.h | 2 +-
fs/nfs/nfs4client.c | 20 +-
fs/nfs/nfs4proc.c | 2 +-
fs/nfs/pnfs.c | 11 +-
fs/nfsd/nfs4state.c | 34 +++-
fs/ntfs3/dir.c | 3 +
fs/ntfs3/inode.c | 31 +--
fs/orangefs/orangefs-debugfs.c | 2 +-
fs/smb/client/cifssmb.c | 10 +
fs/smb/client/connect.c | 1 -
fs/smb/client/sess.c | 9 +
fs/smb/client/smb2ops.c | 11 +-
fs/smb/server/connection.c | 3 +-
fs/smb/server/connection.h | 7 +-
fs/smb/server/smb2pdu.c | 16 +-
fs/smb/server/transport_rdma.c | 5 +-
fs/smb/server/transport_rdma.h | 4 +-
fs/smb/server/transport_tcp.c | 26 ++-
fs/squashfs/super.c | 14 +-
fs/udf/super.c | 13 +-
fs/xfs/xfs_itable.c | 6 +-
include/linux/blk_types.h | 6 +-
include/linux/compiler.h | 8 -
include/linux/fs.h | 4 +-
include/linux/hypervisor.h | 3 +
include/linux/if_vlan.h | 6 +-
include/linux/iosys-map.h | 7 +-
include/linux/memfd.h | 14 ++
include/linux/mm.h | 76 +++++--
include/linux/pci.h | 10 +-
include/linux/platform_data/cros_ec_proto.h | 4 +
include/linux/skbuff.h | 8 +-
include/linux/usb/cdc_ncm.h | 1 +
include/linux/virtio_vsock.h | 7 +-
include/net/bond_3ad.h | 3 +
include/net/bond_options.h | 1 +
include/net/bonding.h | 23 +++
include/net/cfg80211.h | 2 +-
include/net/mac80211.h | 2 +
include/net/neighbour.h | 1 +
include/sound/soc-dai.h | 13 ++
include/uapi/linux/if_link.h | 1 +
include/uapi/linux/in6.h | 4 +-
include/uapi/linux/io_uring.h | 2 +-
include/uapi/linux/pfrut.h | 1 +
kernel/cgroup/cpuset.c | 2 +-
kernel/fork.c | 2 +-
kernel/module/main.c | 10 +-
kernel/power/console.c | 7 +-
kernel/rcu/tree_plugin.h | 3 +
kernel/sched/fair.c | 19 +-
kernel/trace/ftrace.c | 19 +-
kernel/trace/trace.c | 33 ++-
kernel/trace/trace.h | 8 +-
mm/debug_vm_pgtable.c | 9 +-
mm/filemap.c | 2 +-
mm/kmemleak.c | 10 +-
mm/madvise.c | 2 +-
mm/memfd.c | 2 +-
mm/memory-failure.c | 8 +
mm/mmap.c | 12 +-
mm/ptdump.c | 2 +
mm/shmem.c | 2 +-
net/bluetooth/hci_conn.c | 3 +-
net/bluetooth/hci_sync.c | 43 ++--
net/bridge/br_multicast.c | 16 ++
net/bridge/br_private.h | 2 +
net/core/dev.c | 12 ++
net/core/neighbour.c | 12 +-
net/hsr/hsr_slave.c | 8 +-
net/ipv4/ip_tunnel.c | 1 +
net/ipv4/netfilter/nf_reject_ipv4.c | 6 +-
net/ipv4/route.c | 1 -
net/ipv4/udp_offload.c | 2 +-
net/ipv6/addrconf.c | 7 +-
net/ipv6/ip6_gre.c | 2 +
net/ipv6/ip6_tunnel.c | 1 +
net/ipv6/ip6_vti.c | 1 +
net/ipv6/mcast.c | 11 +-
net/ipv6/netfilter/nf_reject_ipv6.c | 5 +-
net/ipv6/seg6_hmac.c | 6 +-
net/ipv6/sit.c | 1 +
net/mac80211/cfg.c | 12 +-
net/mac80211/chan.c | 1 +
net/mac80211/mlme.c | 9 +-
net/mac80211/sta_info.c | 5 +-
net/mctp/af_mctp.c | 28 ++-
net/mptcp/options.c | 9 +-
net/mptcp/pm.c | 8 +-
net/mptcp/pm_netlink.c | 19 +-
net/mptcp/protocol.c | 55 ++++-
net/mptcp/protocol.h | 27 ++-
net/mptcp/subflow.c | 30 ++-
net/ncsi/internal.h | 2 +-
net/ncsi/ncsi-rsp.c | 1 +
net/netfilter/nf_conntrack_netlink.c | 24 ++-
net/netlink/af_netlink.c | 2 +-
net/sched/sch_cake.c | 14 +-
net/sched/sch_ets.c | 36 ++--
net/sched/sch_htb.c | 2 +-
net/tls/tls_sw.c | 16 +-
net/vmw_vsock/virtio_transport.c | 14 +-
net/wireless/mlme.c | 3 +-
scripts/kconfig/gconf.c | 8 +-
scripts/kconfig/lxdialog/inputbox.c | 6 +-
scripts/kconfig/lxdialog/menubox.c | 2 +-
scripts/kconfig/nconf.c | 2 +
scripts/kconfig/nconf.gui.c | 1 +
security/apparmor/include/lib.h | 6 +-
security/inode.c | 2 -
sound/core/pcm_native.c | 19 +-
sound/pci/hda/hda_codec.c | 44 ++--
sound/pci/hda/patch_ca0132.c | 2 +-
sound/pci/hda/patch_realtek.c | 4 +
sound/pci/intel8x0.c | 2 +-
sound/soc/codecs/hdac_hdmi.c | 10 +-
sound/soc/codecs/rt5640.c | 5 +
sound/soc/fsl/fsl_asrc.c | 16 +-
sound/soc/fsl/fsl_aud2htx.c | 10 +-
sound/soc/fsl/fsl_easrc.c | 16 +-
sound/soc/fsl/fsl_esai.c | 20 +-
sound/soc/fsl/fsl_micfil.c | 14 +-
sound/soc/fsl/fsl_sai.c | 44 ++--
sound/soc/fsl/fsl_spdif.c | 17 +-
sound/soc/fsl/fsl_ssi.c | 3 +-
sound/soc/fsl/fsl_xcvr.c | 16 +-
sound/soc/generic/audio-graph-card.c | 2 +-
sound/soc/intel/avs/core.c | 3 +-
sound/soc/soc-core.c | 28 +++
sound/soc/soc-dai.c | 43 ++--
sound/soc/soc-dapm.c | 4 +
sound/usb/mixer_quirks.c | 14 +-
sound/usb/stream.c | 25 ++-
sound/usb/validate.c | 14 +-
tools/include/nolibc/std.h | 4 +-
tools/include/nolibc/types.h | 4 +-
tools/include/uapi/linux/if_link.h | 1 +
.../cpupower/utils/idle_monitor/mperf_monitor.c | 4 +-
tools/scripts/Makefile.include | 4 +-
tools/testing/ktest/ktest.pl | 5 +-
tools/testing/selftests/arm64/fp/sve-ptrace.c | 3 +-
.../selftests/bpf/prog_tests/user_ringbuf.c | 10 +-
.../ftrace/test.d/ftrace/func-filter-glob.tc | 2 +-
tools/testing/selftests/futex/include/futextest.h | 11 +
tools/testing/selftests/memfd/memfd_test.c | 43 ++++
tools/testing/selftests/net/mptcp/pm_netlink.sh | 1 +
511 files changed, 4945 insertions(+), 1976 deletions(-)
3 weeks, 1 day
- 10
- 491
[PATCH rtw v2 1/4] wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait()
by Fedor Pchelkin
There is a bug observed when rtw89_core_tx_kick_off_and_wait() tries to
access already freed skb_data:
BUG: KFENCE: use-after-free write in rtw89_core_tx_kick_off_and_wait drivers/net/wireless/realtek/rtw89/core.c:1110
CPU: 6 UID: 0 PID: 41377 Comm: kworker/u64:24 Not tainted 6.17.0-rc1+ #1 PREEMPT(lazy)
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS edk2-20250523-14.fc42 05/23/2025
Workqueue: events_unbound cfg80211_wiphy_work [cfg80211]
Use-after-free write at 0x0000000020309d9d (in kfence-#251):
rtw89_core_tx_kick_off_and_wait drivers/net/wireless/realtek/rtw89/core.c:1110
rtw89_core_scan_complete drivers/net/wireless/realtek/rtw89/core.c:5338
rtw89_hw_scan_complete_cb drivers/net/wireless/realtek/rtw89/fw.c:7979
rtw89_chanctx_proceed_cb drivers/net/wireless/realtek/rtw89/chan.c:3165
rtw89_chanctx_proceed drivers/net/wireless/realtek/rtw89/chan.h:141
rtw89_hw_scan_complete drivers/net/wireless/realtek/rtw89/fw.c:8012
rtw89_mac_c2h_scanofld_rsp drivers/net/wireless/realtek/rtw89/mac.c:5059
rtw89_fw_c2h_work drivers/net/wireless/realtek/rtw89/fw.c:6758
process_one_work kernel/workqueue.c:3241
worker_thread kernel/workqueue.c:3400
kthread kernel/kthread.c:463
ret_from_fork arch/x86/kernel/process.c:154
ret_from_fork_asm arch/x86/entry/entry_64.S:258
kfence-#251: 0x0000000056e2393d-0x000000009943cb62, size=232, cache=skbuff_head_cache
allocated by task 41377 on cpu 6 at 77869.159548s (0.009551s ago):
__alloc_skb net/core/skbuff.c:659
__netdev_alloc_skb net/core/skbuff.c:734
ieee80211_nullfunc_get net/mac80211/tx.c:5844
rtw89_core_send_nullfunc drivers/net/wireless/realtek/rtw89/core.c:3431
rtw89_core_scan_complete drivers/net/wireless/realtek/rtw89/core.c:5338
rtw89_hw_scan_complete_cb drivers/net/wireless/realtek/rtw89/fw.c:7979
rtw89_chanctx_proceed_cb drivers/net/wireless/realtek/rtw89/chan.c:3165
rtw89_chanctx_proceed drivers/net/wireless/realtek/rtw89/chan.c:3194
rtw89_hw_scan_complete drivers/net/wireless/realtek/rtw89/fw.c:8012
rtw89_mac_c2h_scanofld_rsp drivers/net/wireless/realtek/rtw89/mac.c:5059
rtw89_fw_c2h_work drivers/net/wireless/realtek/rtw89/fw.c:6758
process_one_work kernel/workqueue.c:3241
worker_thread kernel/workqueue.c:3400
kthread kernel/kthread.c:463
ret_from_fork arch/x86/kernel/process.c:154
ret_from_fork_asm arch/x86/entry/entry_64.S:258
freed by task 1045 on cpu 9 at 77869.168393s (0.001557s ago):
ieee80211_tx_status_skb net/mac80211/status.c:1117
rtw89_pci_release_txwd_skb drivers/net/wireless/realtek/rtw89/pci.c:564
rtw89_pci_release_tx_skbs.isra.0 drivers/net/wireless/realtek/rtw89/pci.c:651
rtw89_pci_release_tx drivers/net/wireless/realtek/rtw89/pci.c:676
rtw89_pci_napi_poll drivers/net/wireless/realtek/rtw89/pci.c:4238
__napi_poll net/core/dev.c:7495
net_rx_action net/core/dev.c:7557 net/core/dev.c:7684
handle_softirqs kernel/softirq.c:580
do_softirq.part.0 kernel/softirq.c:480
__local_bh_enable_ip kernel/softirq.c:407
rtw89_pci_interrupt_threadfn drivers/net/wireless/realtek/rtw89/pci.c:927
irq_thread_fn kernel/irq/manage.c:1133
irq_thread kernel/irq/manage.c:1257
kthread kernel/kthread.c:463
ret_from_fork arch/x86/kernel/process.c:154
ret_from_fork_asm arch/x86/entry/entry_64.S:258
It is a consequence of a race between the waiting and the signaling side
of the completion:
Waiting thread Completing thread
rtw89_core_tx_kick_off_and_wait()
rcu_assign_pointer(skb_data->wait, wait)
/* start waiting */
wait_for_completion_timeout()
rtw89_pci_tx_status()
rtw89_core_tx_wait_complete()
rcu_read_lock()
/* signals completion and
* proceeds further
*/
complete(&wait->completion)
rcu_read_unlock()
...
/* frees skb_data */
ieee80211_tx_status_ni()
/* returns (exit status doesn't matter) */
wait_for_completion_timeout()
...
/* accesses the already freed skb_data */
rcu_assign_pointer(skb_data->wait, NULL)
The completing side might proceed and free the underlying skb even before
the waiting side is fully awoken and run to execution. Actually the race
happens regardless of wait_for_completion_timeout() exit status, e.g.
the waiting side may hit a timeout and the concurrent completing side is
still able to free the skb.
Skbs which are sent by rtw89_core_tx_kick_off_and_wait() are owned by the
driver. They don't come from core ieee80211 stack so no need to pass them
to ieee80211_tx_status_ni() on completing side.
Introduce a work function which will act as a garbage collector for
rtw89_tx_wait_info objects and the associated skbs. Thus no potentially
heavy locks are required on the completing side.
Found by Linux Verification Center (linuxtesting.org).
Fixes: 1ae5ca615285 ("wifi: rtw89: add function to wait for completion of TX skbs")
Cc: stable(a)vger.kernel.org
Suggested-by: Zong-Zhe Yang <kevin_yang(a)realtek.com>
Signed-off-by: Fedor Pchelkin <pchelkin(a)ispras.ru>
---
v2: use a work function to manage release of tx_waits and associated skbs (Zong-Zhe)
The interesting part is how rtw89_tx_wait_work() should wait for
completion - based on timeout or without it, or just check status with
a call to completion_done().
Simply waiting with wait_for_completion() may become a bottleneck if for
any reason the completion is delayed significantly, and we are holding a
wiphy lock here. I _suspect_ rtw89_pci_tx_status() should be called
either by napi polling handler or in other cases e.g. by rtw89_hci_reset()
but it's hard to deduce for any possible scenario that it will be called
in some time.
Anyway, the current and the next patch try to make sure that when
rtw89_core_tx_wait_complete() is called, skbdata->wait is properly
initialized so that there should be no buggy situations when tx_wait skb
is not recognized and invalidly passed to ieee80211 stack, also without
signaling a completion.
If rtw89_core_tx_wait_complete() is not called at all, this should
indicate a bug elsewhere.
drivers/net/wireless/realtek/rtw89/core.c | 42 +++++++++++++++++++----
drivers/net/wireless/realtek/rtw89/core.h | 22 +++++++-----
drivers/net/wireless/realtek/rtw89/pci.c | 9 ++---
3 files changed, 54 insertions(+), 19 deletions(-)
diff --git a/drivers/net/wireless/realtek/rtw89/core.c b/drivers/net/wireless/realtek/rtw89/core.c
index 57590f5577a3..48aa02d6abd4 100644
--- a/drivers/net/wireless/realtek/rtw89/core.c
+++ b/drivers/net/wireless/realtek/rtw89/core.c
@@ -1073,6 +1073,26 @@ rtw89_core_tx_update_desc_info(struct rtw89_dev *rtwdev,
}
}
+static void rtw89_tx_wait_work(struct wiphy *wiphy, struct wiphy_work *work)
+{
+ struct rtw89_dev *rtwdev = container_of(work, struct rtw89_dev,
+ tx_wait_work);
+ struct rtw89_tx_wait_info *wait, *tmp;
+
+ lockdep_assert_wiphy(wiphy);
+
+ list_for_each_entry_safe(wait, tmp, &rtwdev->tx_waits, list) {
+ if (!wait->finished) {
+ unsigned long tmo = msecs_to_jiffies(wait->timeout);
+ if (!wait_for_completion_timeout(&wait->completion, tmo))
+ continue;
+ }
+ list_del(&wait->list);
+ dev_kfree_skb_any(wait->skb);
+ kfree(wait);
+ }
+}
+
void rtw89_core_tx_kick_off(struct rtw89_dev *rtwdev, u8 qsel)
{
u8 ch_dma;
@@ -1090,6 +1110,8 @@ int rtw89_core_tx_kick_off_and_wait(struct rtw89_dev *rtwdev, struct sk_buff *sk
unsigned long time_left;
int ret = 0;
+ lockdep_assert_wiphy(rtwdev->hw->wiphy);
+
wait = kzalloc(sizeof(*wait), GFP_KERNEL);
if (!wait) {
rtw89_core_tx_kick_off(rtwdev, qsel);
@@ -1097,18 +1119,23 @@ int rtw89_core_tx_kick_off_and_wait(struct rtw89_dev *rtwdev, struct sk_buff *sk
}
init_completion(&wait->completion);
- rcu_assign_pointer(skb_data->wait, wait);
+ skb_data->wait = wait;
rtw89_core_tx_kick_off(rtwdev, qsel);
time_left = wait_for_completion_timeout(&wait->completion,
msecs_to_jiffies(timeout));
- if (time_left == 0)
+ if (time_left == 0) {
ret = -ETIMEDOUT;
- else if (!wait->tx_done)
- ret = -EAGAIN;
+ } else {
+ wait->finished = true;
+ if (!wait->tx_done)
+ ret = -EAGAIN;
+ }
- rcu_assign_pointer(skb_data->wait, NULL);
- kfree_rcu(wait, rcu_head);
+ wait->skb = skb;
+ wait->timeout = timeout;
+ list_add_tail(&wait->list, &rtwdev->tx_waits);
+ wiphy_work_queue(rtwdev->hw->wiphy, &rtwdev->tx_wait_work);
return ret;
}
@@ -4972,6 +4999,7 @@ void rtw89_core_stop(struct rtw89_dev *rtwdev)
clear_bit(RTW89_FLAG_RUNNING, rtwdev->flags);
wiphy_work_cancel(wiphy, &rtwdev->c2h_work);
+ wiphy_work_cancel(wiphy, &rtwdev->tx_wait_work);
wiphy_work_cancel(wiphy, &rtwdev->cancel_6ghz_probe_work);
wiphy_work_cancel(wiphy, &btc->eapol_notify_work);
wiphy_work_cancel(wiphy, &btc->arp_notify_work);
@@ -5203,6 +5231,7 @@ int rtw89_core_init(struct rtw89_dev *rtwdev)
INIT_LIST_HEAD(&rtwdev->scan_info.pkt_list[band]);
}
INIT_LIST_HEAD(&rtwdev->scan_info.chan_list);
+ INIT_LIST_HEAD(&rtwdev->tx_waits);
INIT_WORK(&rtwdev->ba_work, rtw89_core_ba_work);
INIT_WORK(&rtwdev->txq_work, rtw89_core_txq_work);
INIT_DELAYED_WORK(&rtwdev->txq_reinvoke_work, rtw89_core_txq_reinvoke_work);
@@ -5233,6 +5262,7 @@ int rtw89_core_init(struct rtw89_dev *rtwdev)
wiphy_work_init(&rtwdev->c2h_work, rtw89_fw_c2h_work);
wiphy_work_init(&rtwdev->ips_work, rtw89_ips_work);
wiphy_work_init(&rtwdev->cancel_6ghz_probe_work, rtw89_cancel_6ghz_probe_work);
+ wiphy_work_init(&rtwdev->tx_wait_work, rtw89_tx_wait_work);
INIT_WORK(&rtwdev->load_firmware_work, rtw89_load_firmware_work);
skb_queue_head_init(&rtwdev->c2h_queue);
diff --git a/drivers/net/wireless/realtek/rtw89/core.h b/drivers/net/wireless/realtek/rtw89/core.h
index 43e10278e14d..06f7d82a8d18 100644
--- a/drivers/net/wireless/realtek/rtw89/core.h
+++ b/drivers/net/wireless/realtek/rtw89/core.h
@@ -3508,12 +3508,16 @@ struct rtw89_phy_rate_pattern {
struct rtw89_tx_wait_info {
struct rcu_head rcu_head;
+ struct list_head list;
struct completion completion;
+ struct sk_buff *skb;
+ unsigned int timeout;
bool tx_done;
+ bool finished;
};
struct rtw89_tx_skb_data {
- struct rtw89_tx_wait_info __rcu *wait;
+ struct rtw89_tx_wait_info *wait;
u8 hci_priv[];
};
@@ -5925,6 +5929,9 @@ struct rtw89_dev {
/* used to protect rpwm */
spinlock_t rpwm_lock;
+ struct list_head tx_waits;
+ struct wiphy_work tx_wait_work;
+
struct rtw89_cam_info cam_info;
struct sk_buff_head c2h_queue;
@@ -7258,23 +7265,20 @@ static inline struct sk_buff *rtw89_alloc_skb_for_rx(struct rtw89_dev *rtwdev,
return dev_alloc_skb(length);
}
-static inline void rtw89_core_tx_wait_complete(struct rtw89_dev *rtwdev,
+static inline bool rtw89_core_tx_wait_complete(struct rtw89_dev *rtwdev,
struct rtw89_tx_skb_data *skb_data,
bool tx_done)
{
struct rtw89_tx_wait_info *wait;
- rcu_read_lock();
-
- wait = rcu_dereference(skb_data->wait);
+ wait = skb_data->wait;
if (!wait)
- goto out;
+ return false;
wait->tx_done = tx_done;
- complete(&wait->completion);
+ complete_all(&wait->completion);
-out:
- rcu_read_unlock();
+ return true;
}
static inline bool rtw89_is_mlo_1_1(struct rtw89_dev *rtwdev)
diff --git a/drivers/net/wireless/realtek/rtw89/pci.c b/drivers/net/wireless/realtek/rtw89/pci.c
index a669f2f843aa..6356c2c224c5 100644
--- a/drivers/net/wireless/realtek/rtw89/pci.c
+++ b/drivers/net/wireless/realtek/rtw89/pci.c
@@ -464,10 +464,7 @@ static void rtw89_pci_tx_status(struct rtw89_dev *rtwdev,
struct rtw89_tx_skb_data *skb_data = RTW89_TX_SKB_CB(skb);
struct ieee80211_tx_info *info;
- rtw89_core_tx_wait_complete(rtwdev, skb_data, tx_status == RTW89_TX_DONE);
-
info = IEEE80211_SKB_CB(skb);
- ieee80211_tx_info_clear_status(info);
if (info->flags & IEEE80211_TX_CTL_NO_ACK)
info->flags |= IEEE80211_TX_STAT_NOACK_TRANSMITTED;
@@ -494,6 +491,10 @@ static void rtw89_pci_tx_status(struct rtw89_dev *rtwdev,
}
}
+ if (rtw89_core_tx_wait_complete(rtwdev, skb_data, tx_status == RTW89_TX_DONE))
+ return;
+
+ ieee80211_tx_info_clear_status(info);
ieee80211_tx_status_ni(rtwdev->hw, skb);
}
@@ -1387,7 +1388,7 @@ static int rtw89_pci_txwd_submit(struct rtw89_dev *rtwdev,
}
tx_data->dma = dma;
- rcu_assign_pointer(skb_data->wait, NULL);
+ skb_data->wait = NULL;
txwp_len = sizeof(*txwp_info);
txwd_len = chip->txwd_body_size;
--
2.50.1
3 weeks, 1 day
- 3
- 3
[REGRESSION][BISECTED][PATCH] net: ipv4: fix regression in broadcast routes
by Brett A C Sheffield
Fix the regression introduced in 9e30ecf23b1b whereby IPv4 broadcast
packets were having their ethernet destination field mangled. This
broke WOL magic packets and likely other IPv4 broadcast.
The regression can be observed by sending an IPv4 WOL packet using
the wakeonlan program to any ethernet address:
wakeonlan 46:3b:ad:61:e0:5d
and capturing the packet with tcpdump:
tcpdump -i eth0 -w /tmp/bad.cap dst port 9
The ethernet destination MUST be ff:ff:ff:ff:ff:ff for broadcast, but is
mangled with 9e30ecf23b1b applied.
Revert the change made in 9e30ecf23b1b and ensure the MTU value for
broadcast routes is retained by calling ip_dst_init_metrics() directly,
avoiding the need to enter the main code block in rt_set_nexthop().
Simplify the code path taken for broadcast packets back to the original
before the regression, adding only the call to ip_dst_init_metrics().
The broadcast_pmtu.sh selftest provided with the original patch still
passes with this patch applied.
Fixes: 9e30ecf23b1b ("net: ipv4: fix incorrect MTU in broadcast routes")
Signed-off-by: Brett A C Sheffield <bacs(a)librecast.net>
---
net/ipv4/route.c | 7 ++++++-
1 file changed, 6 insertions(+), 1 deletion(-)
diff --git a/net/ipv4/route.c b/net/ipv4/route.c
index f639a2ae881a..eaf78e128aca 100644
--- a/net/ipv4/route.c
+++ b/net/ipv4/route.c
@@ -2588,6 +2588,7 @@ static struct rtable *__mkroute_output(const struct fib_result *res,
do_cache = true;
if (type == RTN_BROADCAST) {
flags |= RTCF_BROADCAST | RTCF_LOCAL;
+ fi = NULL;
} else if (type == RTN_MULTICAST) {
flags |= RTCF_MULTICAST | RTCF_LOCAL;
if (!ip_check_mc_rcu(in_dev, fl4->daddr, fl4->saddr,
@@ -2657,8 +2658,12 @@ static struct rtable *__mkroute_output(const struct fib_result *res,
rth->dst.output = ip_mc_output;
RT_CACHE_STAT_INC(out_slow_mc);
}
+ if (type == RTN_BROADCAST) {
+ /* ensure MTU value for broadcast routes is retained */
+ ip_dst_init_metrics(&rth->dst, res->fi->fib_metrics);
+ }
#ifdef CONFIG_IP_MROUTE
- if (type == RTN_MULTICAST) {
+ else if (type == RTN_MULTICAST) {
if (IN_DEV_MFORWARD(in_dev) &&
!ipv4_is_local_multicast(fl4->daddr)) {
rth->dst.input = ip_mr_input;
base-commit: 01b9128c5db1b470575d07b05b67ffa3cb02ebf1
--
2.49.1
3 weeks, 1 day
- 8
- 21
[PATCH 1/2] mm/slub: Fix cmp_loc_by_count() to return 0 when counts are equal
by Kuan-Wei Chiu
The comparison function cmp_loc_by_count() used for sorting stack trace
locations in debugfs currently returns -1 if a->count > b->count and 1
otherwise. This breaks the antisymmetry property required by sort(),
because when two counts are equal, both cmp(a, b) and cmp(b, a) return
1.
This can lead to undefined or incorrect ordering results. Fix it by
explicitly returning 0 when the counts are equal, ensuring that the
comparison function follows the expected mathematical properties.
Fixes: 553c0369b3e1 ("mm/slub: sort debugfs output by frequency of stack traces")
Cc: stable(a)vger.kernel.org
Signed-off-by: Kuan-Wei Chiu <visitorckw(a)gmail.com>
---
mm/slub.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/mm/slub.c b/mm/slub.c
index 30003763d224..c91b3744adbc 100644
--- a/mm/slub.c
+++ b/mm/slub.c
@@ -7718,8 +7718,9 @@ static int cmp_loc_by_count(const void *a, const void *b, const void *data)
if (loc1->count > loc2->count)
return -1;
- else
+ if (loc1->count < loc2->count)
return 1;
+ return 0;
}
static void *slab_debugfs_start(struct seq_file *seq, loff_t *ppos)
--
2.34.1
3 weeks, 1 day
- 4
- 8
+ mm-memory-failure-fix-vm_bug_on_pagepagepoisonedpage-when-unpoison-memory.patch added to mm-hotfixes-unstable branch
by Andrew Morton
The patch titled
Subject: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
has been added to the -mm mm-hotfixes-unstable branch. Its filename is
mm-memory-failure-fix-vm_bug_on_pagepagepoisonedpage-when-unpoison-memory.patch
This patch will shortly appear at
https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patche…
This patch will later appear in the mm-hotfixes-unstable branch at
git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
Before you just go and hit "reply", please:
a) Consider who else should be cc'ed
b) Prefer to cc a suitable mailing list as well
c) Ideally: find the original patch on the mailing list and do a
reply-to-all to that, adding suitable additional cc's
*** Remember to use Documentation/process/submit-checklist.rst when testing your code ***
The -mm tree is included into linux-next via the mm-everything
branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
and is updated there every 2-3 working days
------------------------------------------------------
From: Miaohe Lin <linmiaohe(a)huawei.com>
Subject: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
Date: Thu, 28 Aug 2025 10:46:18 +0800
When I did memory failure tests, below panic occurs:
page dumped because: VM_BUG_ON_PAGE(PagePoisoned(page))
kernel BUG at include/linux/page-flags.h:616!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI
CPU: 3 PID: 720 Comm: bash Not tainted 6.10.0-rc1-00195-g148743902568 #40
RIP: 0010:unpoison_memory+0x2f3/0x590
RSP: 0018:ffffa57fc8787d60 EFLAGS: 00000246
RAX: 0000000000000037 RBX: 0000000000000009 RCX: ffff9be25fcdc9c8
RDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff9be25fcdc9c0
RBP: 0000000000300000 R08: ffffffffb4956f88 R09: 0000000000009ffb
R10: 0000000000000284 R11: ffffffffb4926fa0 R12: ffffe6b00c000000
R13: ffff9bdb453dfd00 R14: 0000000000000000 R15: fffffffffffffffe
FS: 00007f08f04e4740(0000) GS:ffff9be25fcc0000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000564787a30410 CR3: 000000010d4e2000 CR4: 00000000000006f0
Call Trace:
<TASK>
unpoison_memory+0x2f3/0x590
simple_attr_write_xsigned.constprop.0.isra.0+0xb3/0x110
debugfs_attr_write+0x42/0x60
full_proxy_write+0x5b/0x80
vfs_write+0xd5/0x540
ksys_write+0x64/0xe0
do_syscall_64+0xb9/0x1d0
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f08f0314887
RSP: 002b:00007ffece710078 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f08f0314887
RDX: 0000000000000009 RSI: 0000564787a30410 RDI: 0000000000000001
RBP: 0000564787a30410 R08: 000000000000fefe R09: 000000007fffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
R13: 00007f08f041b780 R14: 00007f08f0417600 R15: 00007f08f0416a00
</TASK>
Modules linked in: hwpoison_inject
---[ end trace 0000000000000000 ]---
RIP: 0010:unpoison_memory+0x2f3/0x590
RSP: 0018:ffffa57fc8787d60 EFLAGS: 00000246
RAX: 0000000000000037 RBX: 0000000000000009 RCX: ffff9be25fcdc9c8
RDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff9be25fcdc9c0
RBP: 0000000000300000 R08: ffffffffb4956f88 R09: 0000000000009ffb
R10: 0000000000000284 R11: ffffffffb4926fa0 R12: ffffe6b00c000000
R13: ffff9bdb453dfd00 R14: 0000000000000000 R15: fffffffffffffffe
FS: 00007f08f04e4740(0000) GS:ffff9be25fcc0000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000564787a30410 CR3: 000000010d4e2000 CR4: 00000000000006f0
Kernel panic - not syncing: Fatal exception
Kernel Offset: 0x31c00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
---[ end Kernel panic - not syncing: Fatal exception ]---
The root cause is that unpoison_memory() tries to check the PG_HWPoison
flags of an uninitialized page. So VM_BUG_ON_PAGE(PagePoisoned(page)) is
triggered. This can be reproduced by below steps:
1.Offline memory block:
echo offline > /sys/devices/system/memory/memory12/state
2.Get offlined memory pfn:
page-types -b n -rlN
3.Write pfn to unpoison-pfn
echo <pfn> > /sys/kernel/debug/hwpoison/unpoison-pfn
This scenario can be identified by pfn_to_online_page() returning NULL.
And ZONE_DEVICE pages are never expected, so we can simply fail if
pfn_to_online_page() == NULL to fix the bug.
Link: https://lkml.kernel.org/r/20250828024618.1744895-1-linmiaohe@huawei.com
Fixes: f1dd2cd13c4b ("mm, memory_hotplug: do not associate hotadded memory to zones until online")
Signed-off-by: Miaohe Lin <linmiaohe(a)huawei.com>
Suggested-by: David Hildenbrand <david(a)redhat.com>
Acked-by: David Hildenbrand <david(a)redhat.com>
Cc: Naoya Horiguchi <nao.horiguchi(a)gmail.com>
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
mm/memory-failure.c | 7 +++----
1 file changed, 3 insertions(+), 4 deletions(-)
--- a/mm/memory-failure.c~mm-memory-failure-fix-vm_bug_on_pagepagepoisonedpage-when-unpoison-memory
+++ a/mm/memory-failure.c
@@ -2568,10 +2568,9 @@ int unpoison_memory(unsigned long pfn)
static DEFINE_RATELIMIT_STATE(unpoison_rs, DEFAULT_RATELIMIT_INTERVAL,
DEFAULT_RATELIMIT_BURST);
- if (!pfn_valid(pfn))
- return -ENXIO;
-
- p = pfn_to_page(pfn);
+ p = pfn_to_online_page(pfn);
+ if (!p)
+ return -EIO;
folio = page_folio(p);
mutex_lock(&mf_mutex);
_
Patches currently in -mm which might be from linmiaohe(a)huawei.com are
mm-memory-failure-fix-vm_bug_on_pagepagepoisonedpage-when-unpoison-memory.patch
revert-hugetlb-make-hugetlb-depends-on-sysfs-or-sysctl.patch
3 weeks, 2 days
- 1
- 0
Loan Offer
by Mrs.Seinfield
Hello,
Are you looking for a loan to either increase your activity or to
carry out a project. We offer Crypto Loans at 2-7% interest rate
with or without a credit check. We also pay 1% commission to
brokers, who introduce project owners for finance or other
opportunities.
Please get back to me if you are interested in more details.
Best Regards,
Lucy Seinfield
Assistant Secretary
3 weeks, 2 days
- 1
- 0
+ mm-memory-failure-fix-redundant-updates-for-already-poisoned-pages.patch added to mm-hotfixes-unstable branch
by Andrew Morton
The patch titled
Subject: mm/memory-failure: fix redundant updates for already poisoned pages
has been added to the -mm mm-hotfixes-unstable branch. Its filename is
mm-memory-failure-fix-redundant-updates-for-already-poisoned-pages.patch
This patch will shortly appear at
https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patche…
This patch will later appear in the mm-hotfixes-unstable branch at
git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
Before you just go and hit "reply", please:
a) Consider who else should be cc'ed
b) Prefer to cc a suitable mailing list as well
c) Ideally: find the original patch on the mailing list and do a
reply-to-all to that, adding suitable additional cc's
*** Remember to use Documentation/process/submit-checklist.rst when testing your code ***
The -mm tree is included into linux-next via the mm-everything
branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
and is updated there every 2-3 working days
------------------------------------------------------
From: Kyle Meyer <kyle.meyer(a)hpe.com>
Subject: mm/memory-failure: fix redundant updates for already poisoned pages
Date: Thu, 28 Aug 2025 13:38:20 -0500
Duplicate memory errors can be reported by multiple sources.
Passing an already poisoned page to action_result() causes issues:
* The amount of hardware corrupted memory is incorrectly updated.
* Per NUMA node MF stats are incorrectly updated.
* Redundant "already poisoned" messages are printed.
Avoid those issues by:
* Skipping hardware corrupted memory updates for already poisoned pages.
* Skipping per NUMA node MF stats updates for already poisoned pages.
* Dropping redundant "already poisoned" messages.
Make MF_MSG_ALREADY_POISONED consistent with other action_page_types and
make calls to action_result() consistent for already poisoned normal pages
and huge pages.
Link: https://lkml.kernel.org/r/aLCiHMy12Ck3ouwC@hpe.com
Fixes: b8b9488d50b7 ("mm/memory-failure: improve memory failure action_result messages")
Signed-off-by: Kyle Meyer <kyle.meyer(a)hpe.com>
Reviewed-by: Jiaqi Yan <jiaqiyan(a)google.com>
Acked-by: David Hildenbrand <david(a)redhat.com>
Cc: Borislav Betkov <bp(a)alien8.de>
Cc: Jane Chu <jane.chu(a)oracle.com>
Cc: Kyle Meyer <kyle.meyer(a)hpe.com>
Cc: Liam Howlett <liam.howlett(a)oracle.com>
Cc: Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com>
Cc: "Luck, Tony" <tony.luck(a)intel.com>
Cc: Miaohe Lin <linmiaohe(a)huawei.com>
Cc: Michal Hocko <mhocko(a)suse.com>
Cc: Mike Rapoport <rppt(a)kernel.org>
Cc: Naoya Horiguchi <nao.horiguchi(a)gmail.com>
Cc: Oscar Salvador <osalvador(a)suse.de>
Cc: Russ Anderson <russ.anderson(a)hpe.com>
Cc: Suren Baghdasaryan <surenb(a)google.com>
Cc: Vlastimil Babka <vbabka(a)suse.cz>
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
mm/memory-failure.c | 13 ++++++-------
1 file changed, 6 insertions(+), 7 deletions(-)
--- a/mm/memory-failure.c~mm-memory-failure-fix-redundant-updates-for-already-poisoned-pages
+++ a/mm/memory-failure.c
@@ -956,7 +956,7 @@ static const char * const action_page_ty
[MF_MSG_BUDDY] = "free buddy page",
[MF_MSG_DAX] = "dax page",
[MF_MSG_UNSPLIT_THP] = "unsplit thp",
- [MF_MSG_ALREADY_POISONED] = "already poisoned",
+ [MF_MSG_ALREADY_POISONED] = "already poisoned page",
[MF_MSG_UNKNOWN] = "unknown page",
};
@@ -1349,9 +1349,10 @@ static int action_result(unsigned long p
{
trace_memory_failure_event(pfn, type, result);
- num_poisoned_pages_inc(pfn);
-
- update_per_node_mf_stats(pfn, result);
+ if (type != MF_MSG_ALREADY_POISONED) {
+ num_poisoned_pages_inc(pfn);
+ update_per_node_mf_stats(pfn, result);
+ }
pr_err("%#lx: recovery action for %s: %s\n",
pfn, action_page_types[type], action_name[result]);
@@ -2094,12 +2095,11 @@ retry:
*hugetlb = 0;
return 0;
} else if (res == -EHWPOISON) {
- pr_err("%#lx: already hardware poisoned\n", pfn);
if (flags & MF_ACTION_REQUIRED) {
folio = page_folio(p);
res = kill_accessing_process(current, folio_pfn(folio), flags);
- action_result(pfn, MF_MSG_ALREADY_POISONED, MF_FAILED);
}
+ action_result(pfn, MF_MSG_ALREADY_POISONED, MF_FAILED);
return res;
} else if (res == -EBUSY) {
if (!(flags & MF_NO_RETRY)) {
@@ -2285,7 +2285,6 @@ try_again:
goto unlock_mutex;
if (TestSetPageHWPoison(p)) {
- pr_err("%#lx: already hardware poisoned\n", pfn);
res = -EHWPOISON;
if (flags & MF_ACTION_REQUIRED)
res = kill_accessing_process(current, pfn, flags);
_
Patches currently in -mm which might be from kyle.meyer(a)hpe.com are
mm-memory-failure-fix-redundant-updates-for-already-poisoned-pages.patch
3 weeks, 2 days
- 1
- 0
[PATCH v3 1/1] iommu/sva: Invalidate KVA range on kernel TLB flush
by Lu Baolu
In the IOMMU Shared Virtual Addressing (SVA) context, the IOMMU hardware
shares and walks the CPU's page tables. The Linux x86 architecture maps
the kernel address space into the upper portion of every process’s page
table. Consequently, in an SVA context, the IOMMU hardware can walk and
cache kernel space mappings. However, the Linux kernel currently lacks
a notification mechanism for kernel space mapping changes. This means
the IOMMU driver is not aware of such changes, leading to a break in
IOMMU cache coherence.
Modern IOMMUs often cache page table entries of the intermediate-level
page table as long as the entry is valid, no matter the permissions, to
optimize walk performance. Currently the iommu driver is notified only
for changes of user VA mappings, so the IOMMU's internal caches may
retain stale entries for kernel VA. When kernel page table mappings are
changed (e.g., by vfree()), but the IOMMU's internal caches retain stale
entries, Use-After-Free (UAF) vulnerability condition arises.
If these freed page table pages are reallocated for a different purpose,
potentially by an attacker, the IOMMU could misinterpret the new data as
valid page table entries. This allows the IOMMU to walk into attacker-
controlled memory, leading to arbitrary physical memory DMA access or
privilege escalation.
To mitigate this, introduce a new iommu interface to flush IOMMU caches.
This interface should be invoked from architecture-specific code that
manages combined user and kernel page tables, whenever a kernel page table
update is done and the CPU TLB needs to be flushed.
Fixes: 26b25a2b98e4 ("iommu: Bind process address spaces to devices")
Cc: stable(a)vger.kernel.org
Suggested-by: Jann Horn <jannh(a)google.com>
Co-developed-by: Jason Gunthorpe <jgg(a)nvidia.com>
Signed-off-by: Jason Gunthorpe <jgg(a)nvidia.com>
Signed-off-by: Lu Baolu <baolu.lu(a)linux.intel.com>
Reviewed-by: Jason Gunthorpe <jgg(a)nvidia.com>
Reviewed-by: Vasant Hegde <vasant.hegde(a)amd.com>
Reviewed-by: Kevin Tian <kevin.tian(a)intel.com>
Tested-by: Yi Lai <yi1.lai(a)intel.com>
---
arch/x86/mm/tlb.c | 4 +++
drivers/iommu/iommu-sva.c | 60 ++++++++++++++++++++++++++++++++++++++-
include/linux/iommu.h | 4 +++
3 files changed, 67 insertions(+), 1 deletion(-)
Change log:
v3:
- iommu_sva_mms is an unbound list; iterating it in an atomic context
could introduce significant latency issues. Schedule it in a kernel
thread and replace the spinlock with a mutex.
- Replace the static key with a normal bool; it can be brought back if
data shows the benefit.
- Invalidate KVA range in the flush_tlb_all() paths.
- All previous reviewed-bys are preserved. Please let me know if there
are any objections.
v2:
- https://lore.kernel.org/linux-iommu/20250709062800.651521-1-baolu.lu@linux.…
- Remove EXPORT_SYMBOL_GPL(iommu_sva_invalidate_kva_range);
- Replace the mutex with a spinlock to make the interface usable in the
critical regions.
v1: https://lore.kernel.org/linux-iommu/20250704133056.4023816-1-baolu.lu@linux…
diff --git a/arch/x86/mm/tlb.c b/arch/x86/mm/tlb.c
index 39f80111e6f1..3b85e7d3ba44 100644
--- a/arch/x86/mm/tlb.c
+++ b/arch/x86/mm/tlb.c
@@ -12,6 +12,7 @@
#include <linux/task_work.h>
#include <linux/mmu_notifier.h>
#include <linux/mmu_context.h>
+#include <linux/iommu.h>
#include <asm/tlbflush.h>
#include <asm/mmu_context.h>
@@ -1478,6 +1479,8 @@ void flush_tlb_all(void)
else
/* Fall back to the IPI-based invalidation. */
on_each_cpu(do_flush_tlb_all, NULL, 1);
+
+ iommu_sva_invalidate_kva_range(0, TLB_FLUSH_ALL);
}
/* Flush an arbitrarily large range of memory with INVLPGB. */
@@ -1540,6 +1543,7 @@ void flush_tlb_kernel_range(unsigned long start, unsigned long end)
kernel_tlb_flush_range(info);
put_flush_tlb_info();
+ iommu_sva_invalidate_kva_range(start, end);
}
/*
diff --git a/drivers/iommu/iommu-sva.c b/drivers/iommu/iommu-sva.c
index 1a51cfd82808..d0da2b3fd64b 100644
--- a/drivers/iommu/iommu-sva.c
+++ b/drivers/iommu/iommu-sva.c
@@ -10,6 +10,8 @@
#include "iommu-priv.h"
static DEFINE_MUTEX(iommu_sva_lock);
+static bool iommu_sva_present;
+static LIST_HEAD(iommu_sva_mms);
static struct iommu_domain *iommu_sva_domain_alloc(struct device *dev,
struct mm_struct *mm);
@@ -42,6 +44,7 @@ static struct iommu_mm_data *iommu_alloc_mm_data(struct mm_struct *mm, struct de
return ERR_PTR(-ENOSPC);
}
iommu_mm->pasid = pasid;
+ iommu_mm->mm = mm;
INIT_LIST_HEAD(&iommu_mm->sva_domains);
/*
* Make sure the write to mm->iommu_mm is not reordered in front of
@@ -132,8 +135,13 @@ struct iommu_sva *iommu_sva_bind_device(struct device *dev, struct mm_struct *mm
if (ret)
goto out_free_domain;
domain->users = 1;
- list_add(&domain->next, &mm->iommu_mm->sva_domains);
+ if (list_empty(&iommu_mm->sva_domains)) {
+ if (list_empty(&iommu_sva_mms))
+ WRITE_ONCE(iommu_sva_present, true);
+ list_add(&iommu_mm->mm_list_elm, &iommu_sva_mms);
+ }
+ list_add(&domain->next, &iommu_mm->sva_domains);
out:
refcount_set(&handle->users, 1);
mutex_unlock(&iommu_sva_lock);
@@ -175,6 +183,13 @@ void iommu_sva_unbind_device(struct iommu_sva *handle)
list_del(&domain->next);
iommu_domain_free(domain);
}
+
+ if (list_empty(&iommu_mm->sva_domains)) {
+ list_del(&iommu_mm->mm_list_elm);
+ if (list_empty(&iommu_sva_mms))
+ WRITE_ONCE(iommu_sva_present, false);
+ }
+
mutex_unlock(&iommu_sva_lock);
kfree(handle);
}
@@ -312,3 +327,46 @@ static struct iommu_domain *iommu_sva_domain_alloc(struct device *dev,
return domain;
}
+
+struct kva_invalidation_work_data {
+ struct work_struct work;
+ unsigned long start;
+ unsigned long end;
+};
+
+static void invalidate_kva_func(struct work_struct *work)
+{
+ struct kva_invalidation_work_data *data =
+ container_of(work, struct kva_invalidation_work_data, work);
+ struct iommu_mm_data *iommu_mm;
+
+ guard(mutex)(&iommu_sva_lock);
+ list_for_each_entry(iommu_mm, &iommu_sva_mms, mm_list_elm)
+ mmu_notifier_arch_invalidate_secondary_tlbs(iommu_mm->mm,
+ data->start, data->end);
+
+ kfree(data);
+}
+
+void iommu_sva_invalidate_kva_range(unsigned long start, unsigned long end)
+{
+ struct kva_invalidation_work_data *data;
+
+ if (likely(!READ_ONCE(iommu_sva_present)))
+ return;
+
+ /* will be freed in the task function */
+ data = kzalloc(sizeof(*data), GFP_ATOMIC);
+ if (!data)
+ return;
+
+ data->start = start;
+ data->end = end;
+ INIT_WORK(&data->work, invalidate_kva_func);
+
+ /*
+ * Since iommu_sva_mms is an unbound list, iterating it in an atomic
+ * context could introduce significant latency issues.
+ */
+ schedule_work(&data->work);
+}
diff --git a/include/linux/iommu.h b/include/linux/iommu.h
index c30d12e16473..66e4abb2df0d 100644
--- a/include/linux/iommu.h
+++ b/include/linux/iommu.h
@@ -1134,7 +1134,9 @@ struct iommu_sva {
struct iommu_mm_data {
u32 pasid;
+ struct mm_struct *mm;
struct list_head sva_domains;
+ struct list_head mm_list_elm;
};
int iommu_fwspec_init(struct device *dev, struct fwnode_handle *iommu_fwnode);
@@ -1615,6 +1617,7 @@ struct iommu_sva *iommu_sva_bind_device(struct device *dev,
struct mm_struct *mm);
void iommu_sva_unbind_device(struct iommu_sva *handle);
u32 iommu_sva_get_pasid(struct iommu_sva *handle);
+void iommu_sva_invalidate_kva_range(unsigned long start, unsigned long end);
#else
static inline struct iommu_sva *
iommu_sva_bind_device(struct device *dev, struct mm_struct *mm)
@@ -1639,6 +1642,7 @@ static inline u32 mm_get_enqcmd_pasid(struct mm_struct *mm)
}
static inline void mm_pasid_drop(struct mm_struct *mm) {}
+static inline void iommu_sva_invalidate_kva_range(unsigned long start, unsigned long end) {}
#endif /* CONFIG_IOMMU_SVA */
#ifdef CONFIG_IOMMU_IOPF
--
2.43.0
3 weeks, 2 days
- 8
- 48
[PATCH 5.4.y] Revert "drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS"
by Imre Deak
This reverts commit 2402adce8da4e7396b63b5ffa71e1fa16e5fe5c4.
The upstream commit a40c5d727b8111b5db424a1e43e14a1dcce1e77f ("drm/dp:
Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS") the
reverted commit backported causes a regression, on one eDP panel at
least resulting in display flickering, described in detail at the Link:
below. The issue fixed by the upstream commit will need a different
solution, revert the backport for now.
Cc: intel-gfx(a)lists.freedesktop.org
Cc: dri-devel(a)lists.freedesktop.org
Cc: Sasha Levin <sashal(a)kernel.org>
Link: https://gitlab.freedesktop.org/drm/i915/kernel/-/issues/14558
Signed-off-by: Imre Deak <imre.deak(a)intel.com>
---
drivers/gpu/drm/drm_dp_helper.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/drivers/gpu/drm/drm_dp_helper.c b/drivers/gpu/drm/drm_dp_helper.c
index 4eabef5b86d0..ffc68d305afe 100644
--- a/drivers/gpu/drm/drm_dp_helper.c
+++ b/drivers/gpu/drm/drm_dp_helper.c
@@ -280,7 +280,7 @@ ssize_t drm_dp_dpcd_read(struct drm_dp_aux *aux, unsigned int offset,
* We just have to do it before any DPCD access and hope that the
* monitor doesn't power down exactly after the throw away read.
*/
- ret = drm_dp_dpcd_access(aux, DP_AUX_NATIVE_READ, DP_LANE0_1_STATUS, buffer,
+ ret = drm_dp_dpcd_access(aux, DP_AUX_NATIVE_READ, DP_DPCD_REV, buffer,
1);
if (ret != 1)
goto out;
--
2.49.1
3 weeks, 2 days
- 1
- 6
FAILED: patch "[PATCH] NFS: Fix a race when updating an existing write" failed to apply to 5.10-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.10-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.10.y
git checkout FETCH_HEAD
git cherry-pick -x 76d2e3890fb169168c73f2e4f8375c7cc24a765e
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025082225-attribute-embark-823b@gregkh' --subject-prefix 'PATCH 5.10.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From 76d2e3890fb169168c73f2e4f8375c7cc24a765e Mon Sep 17 00:00:00 2001
From: Trond Myklebust <trond.myklebust(a)hammerspace.com>
Date: Sat, 16 Aug 2025 07:25:20 -0700
Subject: [PATCH] NFS: Fix a race when updating an existing write
After nfs_lock_and_join_requests() tests for whether the request is
still attached to the mapping, nothing prevents a call to
nfs_inode_remove_request() from succeeding until we actually lock the
page group.
The reason is that whoever called nfs_inode_remove_request() doesn't
necessarily have a lock on the page group head.
So in order to avoid races, let's take the page group lock earlier in
nfs_lock_and_join_requests(), and hold it across the removal of the
request in nfs_inode_remove_request().
Reported-by: Jeff Layton <jlayton(a)kernel.org>
Tested-by: Joe Quanaim <jdq(a)meta.com>
Tested-by: Andrew Steffen <aksteffen(a)meta.com>
Reviewed-by: Jeff Layton <jlayton(a)kernel.org>
Fixes: bd37d6fce184 ("NFSv4: Convert nfs_lock_and_join_requests() to use nfs_page_find_head_request()")
Cc: stable(a)vger.kernel.org
Signed-off-by: Trond Myklebust <trond.myklebust(a)hammerspace.com>
diff --git a/fs/nfs/pagelist.c b/fs/nfs/pagelist.c
index 11968dcb7243..6e69ce43a13f 100644
--- a/fs/nfs/pagelist.c
+++ b/fs/nfs/pagelist.c
@@ -253,13 +253,14 @@ nfs_page_group_unlock(struct nfs_page *req)
nfs_page_clear_headlock(req);
}
-/*
- * nfs_page_group_sync_on_bit_locked
+/**
+ * nfs_page_group_sync_on_bit_locked - Test if all requests have @bit set
+ * @req: request in page group
+ * @bit: PG_* bit that is used to sync page group
*
* must be called with page group lock held
*/
-static bool
-nfs_page_group_sync_on_bit_locked(struct nfs_page *req, unsigned int bit)
+bool nfs_page_group_sync_on_bit_locked(struct nfs_page *req, unsigned int bit)
{
struct nfs_page *head = req->wb_head;
struct nfs_page *tmp;
diff --git a/fs/nfs/write.c b/fs/nfs/write.c
index fa5c41d0989a..8b7c04737967 100644
--- a/fs/nfs/write.c
+++ b/fs/nfs/write.c
@@ -153,20 +153,10 @@ nfs_page_set_inode_ref(struct nfs_page *req, struct inode *inode)
}
}
-static int
-nfs_cancel_remove_inode(struct nfs_page *req, struct inode *inode)
+static void nfs_cancel_remove_inode(struct nfs_page *req, struct inode *inode)
{
- int ret;
-
- if (!test_bit(PG_REMOVE, &req->wb_flags))
- return 0;
- ret = nfs_page_group_lock(req);
- if (ret)
- return ret;
if (test_and_clear_bit(PG_REMOVE, &req->wb_flags))
nfs_page_set_inode_ref(req, inode);
- nfs_page_group_unlock(req);
- return 0;
}
/**
@@ -585,19 +575,18 @@ retry:
}
}
+ ret = nfs_page_group_lock(head);
+ if (ret < 0)
+ goto out_unlock;
+
/* Ensure that nobody removed the request before we locked it */
if (head != folio->private) {
+ nfs_page_group_unlock(head);
nfs_unlock_and_release_request(head);
goto retry;
}
- ret = nfs_cancel_remove_inode(head, inode);
- if (ret < 0)
- goto out_unlock;
-
- ret = nfs_page_group_lock(head);
- if (ret < 0)
- goto out_unlock;
+ nfs_cancel_remove_inode(head, inode);
/* lock each request in the page group */
for (subreq = head->wb_this_page;
@@ -786,7 +775,8 @@ static void nfs_inode_remove_request(struct nfs_page *req)
{
struct nfs_inode *nfsi = NFS_I(nfs_page_to_inode(req));
- if (nfs_page_group_sync_on_bit(req, PG_REMOVE)) {
+ nfs_page_group_lock(req);
+ if (nfs_page_group_sync_on_bit_locked(req, PG_REMOVE)) {
struct folio *folio = nfs_page_to_folio(req->wb_head);
struct address_space *mapping = folio->mapping;
@@ -798,6 +788,7 @@ static void nfs_inode_remove_request(struct nfs_page *req)
}
spin_unlock(&mapping->i_private_lock);
}
+ nfs_page_group_unlock(req);
if (test_and_clear_bit(PG_INODE_REF, &req->wb_flags)) {
atomic_long_dec(&nfsi->nrequests);
diff --git a/include/linux/nfs_page.h b/include/linux/nfs_page.h
index 169b4ae30ff4..9aed39abc94b 100644
--- a/include/linux/nfs_page.h
+++ b/include/linux/nfs_page.h
@@ -160,6 +160,7 @@ extern void nfs_join_page_group(struct nfs_page *head,
extern int nfs_page_group_lock(struct nfs_page *);
extern void nfs_page_group_unlock(struct nfs_page *);
extern bool nfs_page_group_sync_on_bit(struct nfs_page *, unsigned int);
+extern bool nfs_page_group_sync_on_bit_locked(struct nfs_page *, unsigned int);
extern int nfs_page_set_headlock(struct nfs_page *req);
extern void nfs_page_clear_headlock(struct nfs_page *req);
extern bool nfs_async_iocounter_wait(struct rpc_task *, struct nfs_lock_context *);
3 weeks, 2 days
- 2
- 3
FAILED: patch "[PATCH] NFS: Fix a race when updating an existing write" failed to apply to 5.15-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 5.15-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.15.y
git checkout FETCH_HEAD
git cherry-pick -x 76d2e3890fb169168c73f2e4f8375c7cc24a765e
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025082225-cling-drainer-d884@gregkh' --subject-prefix 'PATCH 5.15.y' HEAD^..
Possible dependencies:
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From 76d2e3890fb169168c73f2e4f8375c7cc24a765e Mon Sep 17 00:00:00 2001
From: Trond Myklebust <trond.myklebust(a)hammerspace.com>
Date: Sat, 16 Aug 2025 07:25:20 -0700
Subject: [PATCH] NFS: Fix a race when updating an existing write
After nfs_lock_and_join_requests() tests for whether the request is
still attached to the mapping, nothing prevents a call to
nfs_inode_remove_request() from succeeding until we actually lock the
page group.
The reason is that whoever called nfs_inode_remove_request() doesn't
necessarily have a lock on the page group head.
So in order to avoid races, let's take the page group lock earlier in
nfs_lock_and_join_requests(), and hold it across the removal of the
request in nfs_inode_remove_request().
Reported-by: Jeff Layton <jlayton(a)kernel.org>
Tested-by: Joe Quanaim <jdq(a)meta.com>
Tested-by: Andrew Steffen <aksteffen(a)meta.com>
Reviewed-by: Jeff Layton <jlayton(a)kernel.org>
Fixes: bd37d6fce184 ("NFSv4: Convert nfs_lock_and_join_requests() to use nfs_page_find_head_request()")
Cc: stable(a)vger.kernel.org
Signed-off-by: Trond Myklebust <trond.myklebust(a)hammerspace.com>
diff --git a/fs/nfs/pagelist.c b/fs/nfs/pagelist.c
index 11968dcb7243..6e69ce43a13f 100644
--- a/fs/nfs/pagelist.c
+++ b/fs/nfs/pagelist.c
@@ -253,13 +253,14 @@ nfs_page_group_unlock(struct nfs_page *req)
nfs_page_clear_headlock(req);
}
-/*
- * nfs_page_group_sync_on_bit_locked
+/**
+ * nfs_page_group_sync_on_bit_locked - Test if all requests have @bit set
+ * @req: request in page group
+ * @bit: PG_* bit that is used to sync page group
*
* must be called with page group lock held
*/
-static bool
-nfs_page_group_sync_on_bit_locked(struct nfs_page *req, unsigned int bit)
+bool nfs_page_group_sync_on_bit_locked(struct nfs_page *req, unsigned int bit)
{
struct nfs_page *head = req->wb_head;
struct nfs_page *tmp;
diff --git a/fs/nfs/write.c b/fs/nfs/write.c
index fa5c41d0989a..8b7c04737967 100644
--- a/fs/nfs/write.c
+++ b/fs/nfs/write.c
@@ -153,20 +153,10 @@ nfs_page_set_inode_ref(struct nfs_page *req, struct inode *inode)
}
}
-static int
-nfs_cancel_remove_inode(struct nfs_page *req, struct inode *inode)
+static void nfs_cancel_remove_inode(struct nfs_page *req, struct inode *inode)
{
- int ret;
-
- if (!test_bit(PG_REMOVE, &req->wb_flags))
- return 0;
- ret = nfs_page_group_lock(req);
- if (ret)
- return ret;
if (test_and_clear_bit(PG_REMOVE, &req->wb_flags))
nfs_page_set_inode_ref(req, inode);
- nfs_page_group_unlock(req);
- return 0;
}
/**
@@ -585,19 +575,18 @@ retry:
}
}
+ ret = nfs_page_group_lock(head);
+ if (ret < 0)
+ goto out_unlock;
+
/* Ensure that nobody removed the request before we locked it */
if (head != folio->private) {
+ nfs_page_group_unlock(head);
nfs_unlock_and_release_request(head);
goto retry;
}
- ret = nfs_cancel_remove_inode(head, inode);
- if (ret < 0)
- goto out_unlock;
-
- ret = nfs_page_group_lock(head);
- if (ret < 0)
- goto out_unlock;
+ nfs_cancel_remove_inode(head, inode);
/* lock each request in the page group */
for (subreq = head->wb_this_page;
@@ -786,7 +775,8 @@ static void nfs_inode_remove_request(struct nfs_page *req)
{
struct nfs_inode *nfsi = NFS_I(nfs_page_to_inode(req));
- if (nfs_page_group_sync_on_bit(req, PG_REMOVE)) {
+ nfs_page_group_lock(req);
+ if (nfs_page_group_sync_on_bit_locked(req, PG_REMOVE)) {
struct folio *folio = nfs_page_to_folio(req->wb_head);
struct address_space *mapping = folio->mapping;
@@ -798,6 +788,7 @@ static void nfs_inode_remove_request(struct nfs_page *req)
}
spin_unlock(&mapping->i_private_lock);
}
+ nfs_page_group_unlock(req);
if (test_and_clear_bit(PG_INODE_REF, &req->wb_flags)) {
atomic_long_dec(&nfsi->nrequests);
diff --git a/include/linux/nfs_page.h b/include/linux/nfs_page.h
index 169b4ae30ff4..9aed39abc94b 100644
--- a/include/linux/nfs_page.h
+++ b/include/linux/nfs_page.h
@@ -160,6 +160,7 @@ extern void nfs_join_page_group(struct nfs_page *head,
extern int nfs_page_group_lock(struct nfs_page *);
extern void nfs_page_group_unlock(struct nfs_page *);
extern bool nfs_page_group_sync_on_bit(struct nfs_page *, unsigned int);
+extern bool nfs_page_group_sync_on_bit_locked(struct nfs_page *, unsigned int);
extern int nfs_page_set_headlock(struct nfs_page *req);
extern void nfs_page_clear_headlock(struct nfs_page *req);
extern bool nfs_async_iocounter_wait(struct rpc_task *, struct nfs_lock_context *);
3 weeks, 2 days
- 2
- 3
[PATCH] drm/xe: Fix incorrect migration of backed-up object to VRAM
by Thomas Hellström
If an object is backed up to shmem it is incorrectly identified
as not having valid data by the move code. This means moving
to VRAM skips the -EMULTIHOP step and the bo is cleared. This
causes all sorts of weird behaviour on DGFX if an already evicted
object is targeted by the shrinker.
Fix this by using ttm_tt_is_swapped() to identify backed-up
objects.
Closes: https://gitlab.freedesktop.org/drm/xe/kernel/-/issues/5996
Fixes: 00c8efc3180f ("drm/xe: Add a shrinker for xe bos")
Cc: Matthew Brost <matthew.brost(a)intel.com>
Cc: Matthew Auld <matthew.auld(a)intel.com>
Cc: <stable(a)vger.kernel.org> # v6.15+
Signed-off-by: Thomas Hellström <thomas.hellstrom(a)linux.intel.com>
---
drivers/gpu/drm/xe/xe_bo.c | 3 +--
1 file changed, 1 insertion(+), 2 deletions(-)
diff --git a/drivers/gpu/drm/xe/xe_bo.c b/drivers/gpu/drm/xe/xe_bo.c
index 7d1ff642b02a..4faf15d5fa6d 100644
--- a/drivers/gpu/drm/xe/xe_bo.c
+++ b/drivers/gpu/drm/xe/xe_bo.c
@@ -823,8 +823,7 @@ static int xe_bo_move(struct ttm_buffer_object *ttm_bo, bool evict,
return ret;
}
- tt_has_data = ttm && (ttm_tt_is_populated(ttm) ||
- (ttm->page_flags & TTM_TT_FLAG_SWAPPED));
+ tt_has_data = ttm && (ttm_tt_is_populated(ttm) || ttm_tt_is_swapped(ttm));
move_lacks_source = !old_mem || (handle_system_ccs ? (!bo->ccs_cleared) :
(!mem_type_is_vram(old_mem_type) && !tt_has_data));
--
2.50.1
3 weeks, 2 days
- 2
- 2
Linux 6.16.4
by Greg Kroah-Hartman
I'm announcing the release of the 6.16.4 kernel.
All users of the 6.16 kernel series must upgrade.
The updated 6.16.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.16.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/devicetree/bindings/display/rockchip/rockchip-vop2.yaml | 56 +-
Documentation/devicetree/bindings/display/sprd/sprd,sharkl3-dpu.yaml | 2
Documentation/devicetree/bindings/display/sprd/sprd,sharkl3-dsi-host.yaml | 2
Documentation/devicetree/bindings/ufs/mediatek,ufs.yaml | 4
Documentation/networking/mptcp-sysctl.rst | 2
Makefile | 4
arch/arm/lib/crypto/poly1305-glue.c | 3
arch/arm64/boot/dts/apple/t8012-j132.dts | 1
arch/arm64/boot/dts/exynos/exynos7870-j6lte.dts | 2
arch/arm64/boot/dts/exynos/exynos7870-on7xelte.dts | 2
arch/arm64/boot/dts/exynos/exynos7870.dtsi | 1
arch/arm64/boot/dts/exynos/google/gs101.dtsi | 1
arch/arm64/boot/dts/rockchip/rk3576.dtsi | 7
arch/arm64/boot/dts/rockchip/rk3588-turing-rk1.dtsi | 11
arch/arm64/boot/dts/ti/k3-am62-lp-sk.dts | 24
arch/arm64/boot/dts/ti/k3-am62-main.dtsi | 1
arch/arm64/boot/dts/ti/k3-am62-verdin.dtsi | 12
arch/arm64/boot/dts/ti/k3-am625-sk.dts | 24
arch/arm64/boot/dts/ti/k3-am62a7-sk.dts | 4
arch/arm64/boot/dts/ti/k3-am62x-sk-common.dtsi | 24
arch/arm64/boot/dts/ti/k3-pinctrl.h | 15
arch/arm64/lib/crypto/poly1305-glue.c | 3
arch/loongarch/Makefile | 6
arch/loongarch/kernel/module-sections.c | 36 -
arch/loongarch/kvm/intc/eiointc.c | 32 -
arch/loongarch/kvm/intc/ipi.c | 8
arch/loongarch/kvm/intc/pch_pic.c | 10
arch/loongarch/kvm/vcpu.c | 8
arch/m68k/kernel/head.S | 31 -
arch/mips/lib/crypto/chacha-core.S | 20
arch/parisc/Makefile | 4
arch/parisc/include/asm/pgtable.h | 7
arch/parisc/include/asm/special_insns.h | 28 +
arch/parisc/include/asm/uaccess.h | 21
arch/parisc/kernel/cache.c | 6
arch/parisc/kernel/entry.S | 17
arch/parisc/kernel/syscall.S | 30 -
arch/parisc/lib/memcpy.c | 19
arch/parisc/mm/fault.c | 4
arch/s390/boot/vmem.c | 3
arch/s390/hypfs/hypfs_dbfs.c | 19
arch/x86/crypto/aegis128-aesni-glue.c | 40 +
arch/x86/include/asm/xen/hypercall.h | 5
arch/x86/kernel/cpu/amd.c | 8
arch/x86/kernel/cpu/hygon.c | 3
block/bfq-iosched.c | 13
block/blk-mq-debugfs.c | 1
block/blk-mq-sched.c | 223 +++++---
block/blk-mq-sched.h | 12
block/blk-mq.c | 29 -
block/blk-rq-qos.c | 8
block/blk-rq-qos.h | 48 +
block/blk-sysfs.c | 2
block/blk.h | 4
block/elevator.c | 38 +
block/elevator.h | 16
block/kyber-iosched.c | 11
block/mq-deadline.c | 14
crypto/deflate.c | 7
drivers/accel/habanalabs/gaudi2/gaudi2.c | 2
drivers/acpi/apei/einj-core.c | 12
drivers/acpi/pfr_update.c | 2
drivers/ata/Kconfig | 36 +
drivers/ata/libata-scsi.c | 49 -
drivers/base/power/runtime.c | 27 -
drivers/bluetooth/btmtk.c | 7
drivers/bus/mhi/host/boot.c | 8
drivers/bus/mhi/host/internal.h | 4
drivers/bus/mhi/host/main.c | 12
drivers/cdx/controller/cdx_rpmsg.c | 3
drivers/comedi/comedi_fops.c | 5
drivers/comedi/drivers.c | 23
drivers/comedi/drivers/pcl726.c | 3
drivers/cpufreq/armada-8k-cpufreq.c | 2
drivers/cpuidle/governors/menu.c | 29 -
drivers/crypto/caam/ctrl.c | 5
drivers/crypto/caam/intern.h | 1
drivers/crypto/ccp/sev-dev.c | 10
drivers/crypto/intel/qat/qat_common/adf_common_drv.h | 1
drivers/crypto/intel/qat/qat_common/adf_init.c | 1
drivers/crypto/intel/qat/qat_common/adf_isr.c | 5
drivers/crypto/intel/qat/qat_common/qat_algs.c | 12
drivers/crypto/marvell/octeontx2/otx2_cpt_reqmgr.h | 125 +++-
drivers/crypto/marvell/octeontx2/otx2_cptpf_ucode.c | 35 -
drivers/fpga/zynq-fpga.c | 10
drivers/gpu/drm/amd/amdgpu/amdgpu.h | 1
drivers/gpu/drm/amd/amdgpu/amdgpu_cper.c | 6
drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 3
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 6
drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 76 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_job.c | 7
drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c | 1
drivers/gpu/drm/amd/amdgpu/amdgpu_ucode.c | 1
drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 21
drivers/gpu/drm/amd/amdgpu/aqua_vanjaram.c | 5
drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 14
drivers/gpu/drm/amd/amdgpu/imu_v12_0.c | 13
drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c | 57 +-
drivers/gpu/drm/amd/amdgpu/mmhub_v3_3.c | 105 ++++
drivers/gpu/drm/amd/amdgpu/mmhub_v4_1_0.c | 34 -
drivers/gpu/drm/amd/amdgpu/psp_v14_0.c | 2
drivers/gpu/drm/amd/amdgpu/soc15.c | 2
drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 2
drivers/gpu/drm/amd/amdkfd/kfd_module.c | 2
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c | 61 +-
drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 20
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 19
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c | 28 +
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 2
drivers/gpu/drm/amd/display/dc/bios/bios_parser.c | 5
drivers/gpu/drm/amd/display/dc/bios/command_table.c | 2
drivers/gpu/drm/amd/display/dc/clk_mgr/clk_mgr.c | 1
drivers/gpu/drm/amd/display/dc/clk_mgr/dce100/dce_clk_mgr.c | 19
drivers/gpu/drm/amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 40 -
drivers/gpu/drm/amd/display/dc/clk_mgr/dce60/dce60_clk_mgr.c | 31 -
drivers/gpu/drm/amd/display/dc/core/dc.c | 34 -
drivers/gpu/drm/amd/display/dc/resource/dce60/dce60_resource.c | 34 -
drivers/gpu/drm/amd/display/modules/hdcp/hdcp_psp.c | 3
drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 16
drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c | 11
drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 30 -
drivers/gpu/drm/display/drm_dp_helper.c | 2
drivers/gpu/drm/drm_format_helper.c | 108 +++-
drivers/gpu/drm/drm_format_internal.h | 8
drivers/gpu/drm/drm_panic_qr.rs | 22
drivers/gpu/drm/hisilicon/hibmc/dp/dp_link.c | 14
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 22
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.h | 1
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_i2c.c | 5
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_vdac.c | 11
drivers/gpu/drm/i915/display/intel_display_irq.c | 4
drivers/gpu/drm/i915/display/intel_tc.c | 93 ++-
drivers/gpu/drm/i915/gt/intel_workarounds.c | 20
drivers/gpu/drm/nouveau/nvif/vmm.c | 3
drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/rpc.c | 4
drivers/gpu/drm/nova/file.rs | 3
drivers/gpu/drm/tests/drm_format_helper_test.c | 111 ----
drivers/gpu/drm/xe/Kconfig | 1
drivers/gpu/drm/xe/xe_migrate.c | 2
drivers/gpu/drm/xe/xe_pxp_submit.c | 2
drivers/gpu/drm/xe/xe_shrinker.c | 51 +
drivers/gpu/drm/xe/xe_vm.c | 48 -
drivers/gpu/drm/xe/xe_vm.h | 2
drivers/hwmon/gsc-hwmon.c | 4
drivers/i2c/busses/i2c-qcom-geni.c | 6
drivers/i2c/busses/i2c-rtl9300.c | 20
drivers/iio/accel/sca3300.c | 2
drivers/iio/adc/Kconfig | 2
drivers/iio/adc/ad7124.c | 14
drivers/iio/adc/ad7173.c | 137 ++++-
drivers/iio/adc/ad7380.c | 1
drivers/iio/adc/ad_sigma_delta.c | 4
drivers/iio/adc/rzg2l_adc.c | 33 -
drivers/iio/imu/bno055/bno055.c | 11
drivers/iio/imu/inv_icm42600/inv_icm42600.h | 8
drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 31 -
drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 22
drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h | 10
drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 6
drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 41 -
drivers/iio/imu/inv_icm42600/inv_icm42600_temp.c | 12
drivers/iio/light/as73211.c | 2
drivers/iio/pressure/bmp280-core.c | 9
drivers/iio/proximity/isl29501.c | 16
drivers/iio/temperature/maxim_thermocouple.c | 26 -
drivers/infiniband/core/umem_odp.c | 4
drivers/infiniband/hw/bnxt_re/ib_verbs.c | 8
drivers/infiniband/hw/bnxt_re/main.c | 23
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 30 -
drivers/infiniband/hw/bnxt_re/qplib_fp.h | 2
drivers/infiniband/hw/bnxt_re/qplib_res.c | 2
drivers/infiniband/hw/erdma/erdma_verbs.c | 6
drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 6
drivers/infiniband/hw/hns/hns_roce_restrack.c | 9
drivers/infiniband/sw/rxe/rxe_net.c | 29 -
drivers/infiniband/sw/rxe/rxe_qp.c | 2
drivers/iommu/amd/init.c | 4
drivers/iommu/apple-dart.c | 1
drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 2
drivers/iommu/intel/iommu.c | 1
drivers/iommu/iommufd/selftest.c | 1
drivers/iommu/riscv/iommu.c | 3
drivers/iommu/virtio-iommu.c | 19
drivers/md/dm-crypt.c | 49 +
drivers/md/dm-raid.c | 42 -
drivers/md/dm.c | 17
drivers/md/md-bitmap.c | 8
drivers/md/md-cluster.c | 16
drivers/md/md.c | 110 ++--
drivers/md/md.h | 2
drivers/md/raid0.c | 6
drivers/md/raid1-10.c | 2
drivers/md/raid1.c | 10
drivers/md/raid10.c | 16
drivers/md/raid5-ppl.c | 6
drivers/md/raid5.c | 30 -
drivers/media/cec/usb/rainshadow/rainshadow-cec.c | 3
drivers/media/i2c/hi556.c | 26 -
drivers/media/i2c/mt9m114.c | 8
drivers/media/i2c/ov2659.c | 3
drivers/media/pci/intel/ipu6/ipu6-isys-csi2.c | 12
drivers/media/pci/intel/ivsc/mei_ace.c | 2
drivers/media/pci/intel/ivsc/mei_csi.c | 2
drivers/media/platform/qcom/camss/camss-csiphy-3ph-1-0.c | 3
drivers/media/platform/qcom/camss/camss.c | 20
drivers/media/platform/qcom/iris/iris_buffer.c | 20
drivers/media/platform/qcom/iris/iris_buffer.h | 3
drivers/media/platform/qcom/iris/iris_ctrls.c | 7
drivers/media/platform/qcom/iris/iris_hfi_gen1_command.c | 27 -
drivers/media/platform/qcom/iris/iris_hfi_gen1_defines.h | 1
drivers/media/platform/qcom/iris/iris_hfi_gen1_response.c | 20
drivers/media/platform/qcom/iris/iris_hfi_gen2_command.c | 4
drivers/media/platform/qcom/iris/iris_hfi_gen2_response.c | 11
drivers/media/platform/qcom/iris/iris_hfi_queue.c | 2
drivers/media/platform/qcom/iris/iris_instance.h | 2
drivers/media/platform/qcom/iris/iris_platform_common.h | 2
drivers/media/platform/qcom/iris/iris_platform_sm8250.c | 9
drivers/media/platform/qcom/iris/iris_state.c | 2
drivers/media/platform/qcom/iris/iris_state.h | 1
drivers/media/platform/qcom/iris/iris_vb2.c | 15
drivers/media/platform/qcom/iris/iris_vdec.c | 9
drivers/media/platform/qcom/iris/iris_vidc.c | 33 +
drivers/media/platform/qcom/venus/core.c | 18
drivers/media/platform/qcom/venus/core.h | 2
drivers/media/platform/qcom/venus/hfi_venus.c | 5
drivers/media/platform/qcom/venus/vdec.c | 5
drivers/media/platform/qcom/venus/venc.c | 5
drivers/media/platform/raspberrypi/pisp_be/Kconfig | 1
drivers/media/platform/raspberrypi/pisp_be/pisp_be.c | 5
drivers/media/platform/verisilicon/rockchip_vpu_hw.c | 9
drivers/media/test-drivers/vivid/vivid-ctrls.c | 3
drivers/media/test-drivers/vivid/vivid-vid-cap.c | 4
drivers/media/usb/gspca/vicam.c | 10
drivers/media/usb/usbtv/usbtv-video.c | 4
drivers/media/v4l2-core/v4l2-ctrls-core.c | 1
drivers/memstick/core/memstick.c | 1
drivers/memstick/host/rtsx_usb_ms.c | 1
drivers/mfd/mt6397-core.c | 12
drivers/mmc/host/sdhci-of-arasan.c | 33 +
drivers/mmc/host/sdhci-pci-gli.c | 37 -
drivers/mmc/host/sdhci_am654.c | 18
drivers/most/core.c | 2
drivers/mtd/nand/raw/fsmc_nand.c | 2
drivers/mtd/nand/raw/renesas-nand-controller.c | 6
drivers/mtd/nand/spi/core.c | 5
drivers/mtd/spi-nor/swp.c | 19
drivers/net/bonding/bond_3ad.c | 67 +-
drivers/net/bonding/bond_options.c | 1
drivers/net/dsa/microchip/ksz_common.c | 6
drivers/net/ethernet/airoha/airoha_ppe.c | 4
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 2
drivers/net/ethernet/google/gve/gve_main.c | 2
drivers/net/ethernet/intel/igc/igc_main.c | 14
drivers/net/ethernet/intel/ixgbe/devlink/devlink.c | 1
drivers/net/ethernet/intel/ixgbe/ixgbe_xsk.c | 4
drivers/net/ethernet/marvell/octeontx2/af/rvu_npc_fs.c | 4
drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 2
drivers/net/ethernet/mellanox/mlx5/core/en/dcbnl.h | 1
drivers/net/ethernet/mellanox/mlx5/core/en/port_buffer.c | 18
drivers/net/ethernet/mellanox/mlx5/core/en/tc/ct_fs_hmfs.c | 2
drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 12
drivers/net/ethernet/mellanox/mlx5/core/esw/devlink_port.c | 4
drivers/net/ethernet/mellanox/mlx5/core/mlx5_core.h | 2
drivers/net/ethernet/mellanox/mlx5/core/port.c | 20
drivers/net/ethernet/mellanox/mlx5/core/steering/hws/bwc_complex.c | 41 +
drivers/net/ethernet/mellanox/mlx5/core/steering/hws/cmd.c | 1
drivers/net/ethernet/mellanox/mlx5/core/steering/hws/cmd.h | 1
drivers/net/ethernet/mellanox/mlx5/core/steering/hws/fs_hws.c | 1
drivers/net/ethernet/mellanox/mlx5/core/steering/hws/matcher.c | 5
drivers/net/ethernet/mellanox/mlx5/core/steering/hws/mlx5hws.h | 1
drivers/net/ethernet/mellanox/mlx5/core/steering/hws/send.c | 1
drivers/net/ethernet/mellanox/mlx5/core/steering/hws/table.c | 13
drivers/net/ethernet/mellanox/mlx5/core/steering/hws/table.h | 3
drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2
drivers/net/ethernet/mellanox/mlxsw/trap.h | 1
drivers/net/ethernet/microchip/lan865x/lan865x.c | 21
drivers/net/ethernet/realtek/rtase/rtase.h | 2
drivers/net/ethernet/stmicro/stmmac/dwmac-thead.c | 9
drivers/net/ethernet/ti/icssg/icssg_prueth.c | 72 +-
drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 8
drivers/net/phy/mscc/mscc.h | 12
drivers/net/phy/mscc/mscc_main.c | 12
drivers/net/phy/mscc/mscc_ptp.c | 49 +
drivers/net/ppp/ppp_generic.c | 17
drivers/net/usb/asix_devices.c | 2
drivers/net/wireless/ath/ath11k/ce.c | 3
drivers/net/wireless/ath/ath11k/dp_rx.c | 3
drivers/net/wireless/ath/ath11k/hal.c | 33 +
drivers/net/wireless/ath/ath12k/ce.c | 3
drivers/net/wireless/ath/ath12k/hal.c | 38 +
drivers/net/wireless/broadcom/brcm80211/brcmsmac/phy/phy_lcn.c | 2
drivers/pci/controller/dwc/pci-imx6.c | 12
drivers/pci/controller/dwc/pcie-designware.c | 8
drivers/pci/controller/pcie-rockchip-ep.c | 4
drivers/pci/controller/pcie-rockchip-host.c | 49 +
drivers/pci/controller/pcie-rockchip.h | 12
drivers/pci/endpoint/pci-ep-cfs.c | 1
drivers/pci/endpoint/pci-epf-core.c | 2
drivers/pci/pci.h | 32 -
drivers/pci/pcie/portdrv.c | 2
drivers/phy/qualcomm/phy-qcom-m31.c | 14
drivers/platform/chrome/cros_ec.c | 3
drivers/platform/x86/amd/hsmp/hsmp.c | 5
drivers/platform/x86/intel/uncore-frequency/uncore-frequency-tpmi.c | 5
drivers/pwm/pwm-imx-tpm.c | 9
drivers/pwm/pwm-mediatek.c | 71 +-
drivers/regulator/pca9450-regulator.c | 13
drivers/regulator/tps65219-regulator.c | 12
drivers/s390/char/sclp.c | 11
drivers/scsi/mpi3mr/mpi3mr.h | 6
drivers/scsi/mpi3mr/mpi3mr_fw.c | 17
drivers/scsi/mpi3mr/mpi3mr_os.c | 2
drivers/scsi/qla4xxx/ql4_os.c | 2
drivers/soc/qcom/mdt_loader.c | 43 +
drivers/soc/tegra/pmc.c | 51 +
drivers/spi/spi-fsl-lpspi.c | 8
drivers/spi/spi-qpic-snand.c | 22
drivers/staging/media/imx/imx-media-csc-scaler.c | 2
drivers/tty/serial/8250/8250_port.c | 3
drivers/tty/vt/defkeymap.c_shipped | 112 ++++
drivers/tty/vt/keyboard.c | 2
drivers/ufs/core/ufshcd.c | 10
drivers/ufs/host/ufs-exynos.c | 4
drivers/ufs/host/ufs-qcom.c | 42 -
drivers/ufs/host/ufshcd-pci.c | 42 +
drivers/usb/atm/cxacru.c | 106 +---
drivers/usb/core/hcd.c | 20
drivers/usb/core/quirks.c | 1
drivers/usb/dwc3/dwc3-imx8mp.c | 7
drivers/usb/dwc3/dwc3-meson-g12a.c | 3
drivers/usb/dwc3/dwc3-pci.c | 2
drivers/usb/dwc3/ep0.c | 20
drivers/usb/dwc3/gadget.c | 19
drivers/usb/gadget/udc/renesas_usb3.c | 1
drivers/usb/host/xhci-hub.c | 3
drivers/usb/host/xhci-mem.c | 22
drivers/usb/host/xhci-pci-renesas.c | 7
drivers/usb/host/xhci-ring.c | 9
drivers/usb/host/xhci.c | 23
drivers/usb/host/xhci.h | 3
drivers/usb/musb/omap2430.c | 14
drivers/usb/storage/realtek_cr.c | 2
drivers/usb/storage/unusual_devs.h | 29 +
drivers/usb/typec/tcpm/maxim_contaminant.c | 58 ++
drivers/usb/typec/tcpm/tcpci_maxim.h | 1
drivers/vhost/vsock.c | 6
drivers/video/console/vgacon.c | 2
fs/btrfs/ctree.c | 23
fs/btrfs/extent-tree.c | 2
fs/btrfs/extent_io.c | 94 +--
fs/btrfs/extent_io.h | 2
fs/btrfs/fiemap.c | 2
fs/btrfs/free-space-tree.c | 17
fs/btrfs/inode.c | 8
fs/btrfs/print-tree.c | 2
fs/btrfs/qgroup.c | 6
fs/btrfs/relocation.c | 4
fs/btrfs/subpage.c | 258 +++++-----
fs/btrfs/subpage.h | 45 +
fs/btrfs/super.c | 13
fs/btrfs/tree-log.c | 4
fs/btrfs/zoned.c | 70 ++
fs/buffer.c | 2
fs/debugfs/inode.c | 11
fs/erofs/Kconfig | 18
fs/ext4/fsmap.c | 23
fs/ext4/indirect.c | 4
fs/ext4/inode.c | 2
fs/ext4/orphan.c | 5
fs/ext4/super.c | 8
fs/f2fs/node.c | 10
fs/fhandle.c | 2
fs/internal.h | 3
fs/iomap/direct-io.c | 14
fs/jbd2/checkpoint.c | 1
fs/libfs.c | 27 -
fs/namespace.c | 69 +-
fs/netfs/read_collect.c | 4
fs/netfs/write_collect.c | 10
fs/netfs/write_issue.c | 4
fs/nfs/pagelist.c | 9
fs/nfs/write.c | 29 -
fs/overlayfs/copy_up.c | 2
fs/proc/task_mmu.c | 4
fs/smb/client/smb2ops.c | 2
fs/smb/server/connection.c | 3
fs/smb/server/connection.h | 7
fs/smb/server/oplock.c | 13
fs/smb/server/transport_rdma.c | 5
fs/smb/server/transport_rdma.h | 4
fs/smb/server/transport_tcp.c | 26 -
fs/splice.c | 3
fs/squashfs/super.c | 14
fs/xfs/libxfs/xfs_refcount.c | 4
fs/xfs/scrub/common.c | 3
fs/xfs/scrub/repair.c | 12
fs/xfs/scrub/scrub.c | 5
fs/xfs/xfs_attr_item.c | 5
fs/xfs/xfs_discard.c | 12
fs/xfs/xfs_fsmap.c | 4
fs/xfs/xfs_icache.c | 5
fs/xfs/xfs_inode.c | 7
fs/xfs/xfs_itable.c | 24
fs/xfs/xfs_iwalk.c | 11
fs/xfs/xfs_notify_failure.c | 6
fs/xfs/xfs_qm.c | 10
fs/xfs/xfs_rtalloc.c | 13
fs/xfs/xfs_trans.c | 56 +-
fs/xfs/xfs_trans.h | 3
fs/xfs/xfs_zone_alloc.c | 10
fs/xfs/xfs_zone_gc.c | 5
include/crypto/hash.h | 2
include/crypto/internal/acompress.h | 5
include/drm/drm_format_helper.h | 9
include/drm/intel/pciids.h | 1
include/linux/blkdev.h | 1
include/linux/compiler.h | 8
include/linux/iosys-map.h | 7
include/linux/iov_iter.h | 20
include/linux/kcov.h | 47 -
include/linux/mlx5/mlx5_ifc.h | 14
include/linux/netfs.h | 1
include/linux/nfs_page.h | 1
include/net/bluetooth/bluetooth.h | 4
include/net/bluetooth/hci.h | 1
include/net/bluetooth/hci_core.h | 54 +-
include/net/bond_3ad.h | 1
include/net/devlink.h | 6
include/net/sch_generic.h | 11
include/sound/cs35l56.h | 5
include/trace/events/btrfs.h | 2
include/uapi/linux/pfrut.h | 1
include/uapi/linux/raid/md_p.h | 2
io_uring/futex.c | 3
kernel/Kconfig.kexec | 1
kernel/cgroup/cpuset.c | 9
kernel/cgroup/rstat.c | 3
kernel/kexec_handover.c | 29 -
kernel/sched/ext.c | 4
kernel/signal.c | 6
kernel/trace/ftrace.c | 19
kernel/trace/trace.c | 34 -
kernel/trace/trace.h | 10
mm/damon/core.c | 15
mm/damon/paddr.c | 4
mm/debug_vm_pgtable.c | 9
mm/filemap.c | 3
mm/kasan/kasan_test_c.c | 2
mm/memory-failure.c | 8
mm/mremap.c | 41 -
net/bluetooth/hci_conn.c | 17
net/bluetooth/hci_core.c | 27 -
net/bluetooth/hci_event.c | 15
net/bluetooth/hci_sync.c | 33 -
net/bluetooth/iso.c | 20
net/bluetooth/mgmt.c | 13
net/bridge/br_multicast.c | 16
net/bridge/br_private.h | 2
net/core/dev.c | 12
net/devlink/port.c | 2
net/hsr/hsr_slave.c | 8
net/ipv4/netfilter/nf_reject_ipv4.c | 6
net/ipv6/netfilter/nf_reject_ipv6.c | 5
net/ipv6/seg6_hmac.c | 6
net/mptcp/options.c | 6
net/mptcp/pm.c | 18
net/mptcp/pm_kernel.c | 1
net/sched/sch_cake.c | 14
net/sched/sch_codel.c | 12
net/sched/sch_fq.c | 12
net/sched/sch_fq_codel.c | 12
net/sched/sch_fq_pie.c | 12
net/sched/sch_hhf.c | 12
net/sched/sch_htb.c | 2
net/sched/sch_pie.c | 12
net/smc/af_smc.c | 3
net/tls/tls_sw.c | 7
net/vmw_vsock/virtio_transport.c | 12
rust/kernel/alloc/allocator.rs | 30 -
rust/kernel/alloc/allocator_test.rs | 11
rust/kernel/drm/device.rs | 32 -
rust/kernel/faux.rs | 2
security/apparmor/lsm.c | 4
sound/core/timer.c | 4
sound/pci/hda/patch_realtek.c | 2
sound/pci/hda/tas2781_hda_i2c.c | 2
sound/soc/codecs/cs35l56-sdw.c | 69 --
sound/soc/codecs/cs35l56-shared.c | 29 +
sound/soc/codecs/cs35l56.c | 2
sound/soc/codecs/cs35l56.h | 3
sound/soc/sof/amd/acp-loader.c | 6
sound/usb/stream.c | 2
sound/usb/validate.c | 2
tools/objtool/arch/loongarch/special.c | 23
tools/testing/selftests/net/mptcp/mptcp_connect.c | 5
tools/testing/selftests/net/mptcp/mptcp_inq.c | 5
tools/testing/selftests/net/mptcp/mptcp_sockopt.c | 5
tools/testing/selftests/net/mptcp/pm_netlink.sh | 1
498 files changed, 4865 insertions(+), 2704 deletions(-)
Adrian Huang (Lenovo) (1):
signal: Fix memory leak for PIDFD_SELF* sentinels
Adrian Hunter (1):
scsi: ufs: ufs-pci: Fix default runtime and system PM levels
Akhilesh Patil (1):
RDMA/core: Free pfn_list with appropriate kvfree call
Al Viro (1):
use uniform permission checks for all mount propagation changes
Alan Huang (1):
xfs: Remove unused label in xfs_dax_notify_dev_failure
Aleksa Sarai (1):
open_tree_attr: do not allow id-mapping changes without OPEN_TREE_CLONE
Alex Deucher (7):
drm/amdgpu/discovery: fix fw based ip discovery
drm/amdgpu: add missing vram lost check for LEGACY RESET
drm/amdgpu: track whether a queue is a kernel queue in amdgpu_mqd_prop
drm/amdgpu: update mmhub 3.0.1 client id mappings
drm/amdgpu: update mmhub 3.3 client id mappings
drm/amdgpu: update mmhub 4.1.0 client id mappings
drm/amdgpu/swm14: Update power limit logic
Alex Guo (1):
i2c: rtl9300: Fix out-of-bounds bug in rtl9300_i2c_smbus_xfer
Alex Vesker (1):
net/mlx5: HWS, Fix table creation UID
Alexander Sverdlin (1):
arm64: dts: ti: k3-pinctrl: Enable Schmitt Trigger by default
Alexander Wilhelm (1):
bus: mhi: host: Fix endianness of BHI vector table
Alexei Lazar (1):
net/mlx5e: Query FW for buffer ownership
Amber Lin (1):
drm/amdkfd: Destroy KFD debugfs after destroy KFD wq
Amit Sunil Dhamne (2):
usb: typec: maxim_contaminant: disable low power mode when reading comparator values
usb: typec: maxim_contaminant: re-enable cc toggle if cc is open and port is clean
Anantha Prabhu (1):
RDMA/bnxt_re: Fix to initialize the PBL array
Andrea Righi (1):
sched/ext: Fix invalid task state transitions on class switch
Andreas Dilger (1):
ext4: check fast symlink for ea_inode correctly
André Draszik (1):
scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
Andy Shevchenko (1):
iio: imu: inv_icm42600: Convert to uXX and sXX integer types
Archana Patni (1):
scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers
Armen Ratner (1):
net/mlx5e: Preserve shared buffer capacity during headroom updates
Ashish Kalra (1):
crypto: ccp - Fix SNP panic notifier unregistration
Baihan Li (5):
drm/hisilicon/hibmc: fix the i2c device resource leak when vdac init failed
drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
drm/hisilicon/hibmc: fix the hibmc loaded failed bug
drm/hisilicon/hibmc: fix rare monitors cannot display problem
drm/hisilicon/hibmc: fix dp and vga cannot show together
Bao D. Nguyen (1):
scsi: ufs: ufs-qcom: Update esi_vec_mask for HW major version >= 6
Baokun Li (2):
ext4: preserve SB_I_VERSION on remount
jbd2: prevent softlockup in jbd2_log_do_checkpoint()
Bart Van Assche (2):
scsi: ufs: core: Fix IRQ lock inversion for the SCSI host lock
scsi: ufs: core: Remove WARN_ON_ONCE() call from ufshcd_uic_cmd_compl()
Bharat Bhushan (3):
crypto: octeontx2 - Fix address alignment issue on ucode loading
crypto: octeontx2 - Fix address alignment on CN10K A0/A1 and OcteonTX2
crypto: octeontx2 - Fix address alignment on CN10KB and CN10KA-B0
Bibo Mao (4):
LoongArch: KVM: Make function kvm_own_lbt() robust
LoongArch: KVM: Fix stack protector issue in send_ipi_data()
LoongArch: KVM: Add address alignment check in pch_pic register access
LoongArch: KVM: Use standard bitops API with eiointc
Bingbu Cao (1):
media: hi556: correct the test pattern configuration
Bjorn Andersson (1):
soc: qcom: mdt_loader: Ensure we don't read past the ELF header
Bo Liu (OpenAnolis) (1):
erofs: fix build error with CONFIG_EROFS_FS_ZIP_ACCEL=y
Boshi Yu (2):
RDMA/erdma: Fix ignored return value of init_kernel_qp
RDMA/erdma: Fix unset QPN of GSI QP
Bryan O'Donoghue (2):
media: qcom: camss: csiphy-3ph: Fix inadvertent dropping of SDM660/SDM670 phy init
media: qcom: camss: Remove extraneous -supply postfix on supply names
Chao Yu (1):
f2fs: fix to avoid out-of-boundary access in dnode page
Charalampos Mitrodimas (1):
debugfs: fix mount options not being applied
Chen Yu (1):
ACPI: pfr_update: Fix the driver update version check
Chenyuan Yang (1):
drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
Chi Zhiling (1):
readahead: fix return value of page_cache_next_miss() when no hole is found
Christian Brauner (1):
libfs: massage path_from_stashed() to allow custom stashing behavior
Christoph Hellwig (5):
xfs: decouple xfs_trans_alloc_empty from xfs_trans_alloc
xfs: return the allocated transaction from xfs_trans_alloc_empty
xfs: improve the comments in xfs_select_zone_nowait
xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags
xfs: fix frozen file system assert in xfs_trans_alloc
Christoph Manszewski (1):
drm/xe: Fix vm_bind_ioctl double free bug
Christoph Paasch (1):
mptcp: drop skb if MPTCP skb extension allocation fails
Claudiu Beznea (2):
iio: adc: rzg2l_adc: Set driver data before enabling runtime PM
iio: adc: rzg2l: Cleanup suspend/resume path
Cristian Ciocaltea (3):
arm64: dts: rockchip: Add HDMI PHY PLL clock source to VOP2 on rk3576
arm64: dts: rockchip: Enable HDMI PHY clk provider on rk3576
dt-bindings: display: vop2: Add optional PLL clock property for rk3576
D. Wythe (1):
net/smc: fix UAF on smcsk after smc_listen_out()
Damien Le Moal (7):
ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
dm: dm-crypt: Do not partially accept write BIOs with zoned targets
dm: Check for forbidden splitting of zone write operations
ata: libata-scsi: Fix ata_to_sense_error() status handling
ata: libata-scsi: Return aborted command when missing sense and result TF
PCI: endpoint: Fix configfs group list head handling
PCI: endpoint: Fix configfs group removal on driver teardown
Dan Carpenter (6):
cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
media: gspca: Add bounds checking to firmware parser
soc: qcom: mdt_loader: Fix error return values in mdt_header_valid()
scsi: qla4xxx: Prevent a potential error pointer dereference
ALSA: usb-audio: Fix size validation in convert_chmap_v3()
regulator: tps65219: regulator: tps65219: Fix error codes in probe()
Daniel Jurgens (1):
net/mlx5: Base ECVF devlink port attrs from 0
Danilo Krummrich (4):
rust: alloc: replace aligned_size() with Kmalloc::aligned_layout()
rust: drm: ensure kmalloc() compatible Layout
rust: drm: remove pin annotations from drm::Device
rust: drm: don't pass the address of drm::Device to drm_dev_put()
David Hildenbrand (1):
mm/mremap: fix WARN with uffd that has remap events disabled
David Howells (2):
netfs: Fix unbuffered write error handling
cifs: Fix oops due to uninitialised variable
David Lechner (13):
iio: adc: ad7173: fix num_slots
iio: imu: bno055: fix OOB access of hw_xlate array
iio: adc: ad_sigma_delta: change to buffer predisable
iio: adc: ad7173: fix channels index for syscalib_mode
iio: adc: ad7173: fix calibration channel
iio: adc: ad7173: fix setting ODR in probe
iio: adc: ad7380: fix missing max_conversion_rate_hz on adaq4381-4
iio: accel: sca3300: fix uninitialized iio scan data
iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read()
iio: adc: ad7124: fix channel lookup in syscalib functions
iio: adc: ad7173: prevent scan if too many setups requested
iio: proximity: isl29501: fix buffered read on big-endian systems
iio: imu: inv_icm42600: use = { } instead of memset()
David Sterba (1):
btrfs: move transaction aborts to the error site in add_block_group_free_space()
David Yat Sin (1):
drm/amdkfd: Fix checkpoint-restore on multi-xcc
Dewei Meng (1):
ALSA: timer: fix ida_free call while not allocated
Dikshita Agarwal (16):
media: iris: Avoid updating frame size to firmware during reconfig
media: iris: Drop port check for session property response
media: iris: Fix buffer preparation failure during resolution change
media: iris: Fix missing function pointer initialization
media: iris: Fix NULL pointer dereference
media: iris: Fix typo in depth variable
media: iris: Prevent HFI queue writes when core is in deinit state
media: iris: Remove deprecated property setting to firmware
media: iris: Remove error check for non-zero v4l2 controls
media: iris: Send V4L2_BUF_FLAG_ERROR for capture buffers with 0 filled length
media: iris: Skip destroying internal buffer if not dequeued
media: iris: Skip flush on first sequence change
media: iris: Track flush responses to prevent premature completion
media: iris: Update CAPTURE format info based on OUTPUT format
media: iris: Verify internal buffer release on close
media: iris: Remove unnecessary re-initialization of flush completion
Dmitry Torokhov (1):
mfd: mt6397: Do not use generic name for keypad sub-devices
Dominique Martinet (1):
iov_iter: iterate_folioq: fix handling of offset >= folio size
Edward Adam Davis (1):
comedi: pcl726: Prevent invalid irq number
Emanuele Ghidoli (1):
arm64: dts: ti: k3-am62-verdin: Enable pull-ups on I2C buses
Eric Biggers (7):
lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
lib/crypto: arm/poly1305: Fix register corruption in no-SIMD contexts
lib/crypto: arm64/poly1305: Fix register corruption in no-SIMD contexts
crypto: x86/aegis - Fix sleeping when disallowed on PREEMPT_RT
crypto: x86/aegis - Add missing error checks
ipv6: sr: Fix MAC comparison to be constant-time
crypto: acomp - Fix CFI failure due to type punning
Evgeniy Harchenko (1):
ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
Fanhua Li (1):
drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor().
Filipe Manana (5):
btrfs: always abort transaction on failure to add block group to free space tree
btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()
btrfs: reorganize logic at free_extent_buffer() for better readability
btrfs: add comment for optimization in free_extent_buffer()
btrfs: use refcount_t type for the extent buffer reference counter
Finn Thain (1):
m68k: Fix lost column on framebuffer debug console
Florian Westphal (1):
netfilter: nf_reject: don't leak dst refcount for loopback packets
Frank Min (1):
drm/amdgpu: add kicker fws loading for gfx12/smu14/psp14
Gabor Juhos (3):
mtd: spinand: propagate spinand_wait() errors from spinand_write_page()
spi: spi-qpic-snand: use correct CW_PER_PAGE value for OOB write
spi: spi-qpic-snand: fix calculating of ECC OOB regions' properties
Gang Ba (1):
drm/amdgpu: Avoid extra evict-restore process.
Geert Uytterhoeven (1):
erofs: Do not select tristate symbols from bool symbols
Geliang Tang (2):
mptcp: remove duplicate sk_reset_timer call
mptcp: disable add_addr retransmission when timeout is 0
Geraldo Nascimento (2):
PCI: rockchip: Use standard PCIe definitions
PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining
Giovanni Cabiddu (2):
crypto: qat - lower priority for skcipher and aead algorithms
crypto: qat - flush misc workqueue during device shutdown
Greg Kroah-Hartman (1):
Linux 6.16.4
Gui-Dong Han (1):
media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
Hangbin Liu (2):
bonding: update LACP activity flag after setting lacp_active
bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU
Hans Verkuil (1):
media: vivid: fix wrong pixel_array control size
Hans de Goede (1):
media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls
Haoxiang Li (1):
media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
Hariprasad Kelam (1):
Octeontx2-af: Skip overlap check for SPI field
Harshal Gohel (1):
i2c: rtl9300: Fix multi-byte I2C write
Heikki Krogerus (1):
usb: dwc3: pci: add support for the Intel Wildcat Lake
Heiko Carstens (1):
s390/mm: Do not map lowcore with identity mapping
Helge Deller (2):
Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
apparmor: Fix 8-byte alignment for initial dfa blob streams
Herbert Xu (1):
crypto: hash - Increase HASH_MAX_DESCSIZE for hmac(sha3-224-s390)
Herton R. Krzesinski (1):
mm/debug_vm_pgtable: clear page table entries at destroy_args()
Hong Guan (1):
arm64: dts: ti: k3-am62a7-sk: fix pinmux for main_uart1
Horatiu Vultur (1):
phy: mscc: Fix timestamping for vsc8584
Ian Abbott (2):
comedi: Make insn_rw_emulate_bits() do insn->n samples
comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
Ido Schimmel (1):
mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
Igor Pylypiv (1):
ata: libata-scsi: Fix CDL control
Imre Deak (6):
drm/i915/lnl+/tc: Fix handling of an enabled/disconnected dp-alt sink
drm/i915/icl+/tc: Cache the max lane count value
drm/i915/lnl+/tc: Fix max lane count HW readout
drm/i915/lnl+/tc: Use the cached max lane count value
drm/i915/icl+/tc: Convert AUX powered WARN to a debug message
drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
JP Kobryn (1):
cgroup: avoid null de-ref in css_rstat_exit()
Jacopo Mondi (1):
media: pisp_be: Fix pm_runtime underrun in probe
Jakub Acs (1):
net, hsr: reject HSR frame if skb can't hold tag
Jakub Kicinski (1):
tls: fix handling of zero-length records on the rx_list
Jakub Ramaseuski (1):
net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
Jan Beulich (1):
compiler: remove __ADDRESSABLE_ASM{_STR,}() again
Jan Kara (1):
iomap: Fix broken data integrity guarantees for O_SYNC writes
Jani Nikula (1):
drm/i915: silence rpm wakeref asserts on GEN11_GU_MISC_IIR access
Jann Horn (1):
kasan/test: fix protection against compiler elision
Jason Gunthorpe (1):
iommu: Remove ops.pgsize_bitmap from drivers that don't use it
Jason Xing (1):
ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
Jean-Baptiste Maneyrol (1):
iio: imu: inv_icm42600: change invalid data error to -EBUSY
Jedrzej Jagielski (2):
devlink: let driver opt out of automatic phys_port_name generation
ixgbe: prevent from unwanted interface name changes
Jens Axboe (1):
io_uring/futex: ensure io_futex_wait() cleans up properly on failure
Jialin Wang (1):
proc: proc_maps_open allow proc_mem_open to return NULL
Jiande Lu (1):
Bluetooth: btmtk: Fix wait_on_bit_timeout interruption during shutdown
Jiayi Li (1):
memstick: Fix deadlock by moving removing flag earlier
Jinjiang Tu (1):
mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn
Jiwei Sun (1):
PCI: Fix link speed calculation on retrain failure
Jocelyn Falempe (1):
drm/panic: Add a u64 divide by 10 for arm32
Johan Hovold (10):
usb: gadget: udc: renesas_usb3: fix device leak at unbind
usb: musb: omap2430: fix device leak at unbind
usb: dwc3: meson-g12a: fix device leaks at unbind
usb: dwc3: imx8mp: fix device leak at unbind
wifi: ath12k: fix dest ring-buffer corruption
wifi: ath12k: fix source ring-buffer corruption
wifi: ath12k: fix dest ring-buffer corruption when ring is full
wifi: ath11k: fix dest ring-buffer corruption
wifi: ath11k: fix source ring-buffer corruption
wifi: ath11k: fix dest ring-buffer corruption when ring is full
John David Anglin (8):
parisc: Check region is readable by user in raw_copy_from_user()
parisc: Define and use set_pte_at()
parisc: Drop WARN_ON_ONCE() from flush_cache_vmap
parisc: Rename pte_needs_flush() to pte_needs_cache_flush() in cache.c
parisc: Revise __get_user() to probe user read access
parisc: Revise gateway LWS calls to probe user read access
parisc: Try to fixup kernel exception in bad_area_nosemaphore path of do_page_fault()
parisc: Update comments in make_insert_tlb
John Ernberg (1):
crypto: caam - Prevent crash on suspend with iMX8QM / iMX8ULP
Jon Hunter (1):
soc/tegra: pmc: Ensure power-domains are in a known state
Jonathan Cameron (1):
iio: light: as73211: Ensure buffer holes are zeroed
Jordan Rhee (1):
gve: prevent ethtool ops after shutdown
Jorge Ramirez-Ortiz (2):
media: venus: hfi: explicitly release IRQ during teardown
media: venus: protect against spurious interrupts during probe
José Expósito (2):
drm/tests: Fix endian warning
drm/tests: Fix drm_test_fb_xrgb8888_to_xrgb2101010() on big-endian
Judith Mendez (3):
arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support
arm64: dts: ti: k3-am62*: Move eMMC pinmux to top level board file
mmc: sdhci_am654: Disable HS400 for AM62P SR1.0 and SR1.1
Julian Sun (1):
block: restore default wbt enablement
Junxian Huang (1):
RDMA/hns: Fix dip entries leak on devices newer than hip09
Justin Lai (1):
rtase: Fix Rx descriptor CRC error bit definition
Kalesh AP (1):
RDMA/bnxt_re: Fix a possible memory leak in the driver
Kanglong Wang (1):
LoongArch: Optimize module load time by optimizing PLT/GOT counting
Kashyap Desai (2):
RDMA/bnxt_re: Fix to do SRQ armena by default
RDMA/bnxt_re: Fix to remove workload check in SRQ limit path
Kathiravan Thirumoorthy (2):
phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization sequence
i2c: qcom-geni: fix I2C frequency table to achieve accurate bus rates
Kaustabh Chakraborty (3):
arm64: dts: exynos7870-j6lte: reduce memory ranges to base amount
arm64: dts: exynos7870: add quirk to disable USB2 LPM in gadget mode
arm64: dts: exynos7870-on7xelte: reduce memory ranges to base amount
Kees Cook (1):
iommu/amd: Avoid stack buffer overflow from kernel cmdline
Konrad Dybcio (1):
media: venus: Fix MSM8998 frequency table
Krzysztof Kozlowski (2):
dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints
dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks constraints
Kuen-Han Tsai (1):
usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
Kyoji Ogasawara (3):
btrfs: fix incorrect log message for nobarrier mount option
btrfs: restore mount option info messages during mount
btrfs: fix printing of mount info messages for NODATACOW/NODATASUM
Laurentiu Mihalcea (1):
pwm: imx-tpm: Reset counter if CMOD is 0
Lauri Tirkkonen (1):
drm/amd/display: fix initial backlight brightness calculation
Leo Martins (1):
btrfs: fix subpage deadlock in try_release_subpage_extent_buffer()
Li Nan (1):
md: rename recovery_cp to resync_offset
Liao Yuanhong (1):
ext4: use kmalloc_array() for array space allocation
Lijo Lazar (2):
drm/amdgpu: Update external revid for GC v9.5.0
drm/amdgpu: Update supported modes for GC v9.5.0
Liu01 Tong (1):
drm/amdgpu: fix task hang from failed job submission during process kill
Lorenzo Bianconi (1):
net: airoha: ppe: Do not invalid PPE entries in case of SW hash collision
Ludwig Disterhof (1):
media: usbtv: Lock resolution while streaming
Luiz Augusto von Dentz (4):
Bluetooth: hci_sync: Fix scan state after PA Sync has been established
Bluetooth: hci_core: Fix using {cis,bis}_capable for current settings
Bluetooth: hci_core: Fix using ll_privacy_capable for current settings
Bluetooth: hci_core: Fix not accounting for BIS/CIS/PA links separately
Lukas Wunner (1):
PCI/portdrv: Use is_pciehp instead of is_hotplug_bridge
MD Danish Anwar (1):
net: ti: icssg-prueth: Fix HSR and switch offload Enablement during firwmare reload.
Macpaul Lin (1):
scsi: dt-bindings: mediatek,ufs: Add ufs-disable-mcq flag for UFS host
Mael GUERIN (1):
USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
Marek Szyprowski (1):
zynq_fpga: use sgtable-based scatterlist wrappers
Marek Vasut (1):
usb: renesas-xhci: Fix External ROM access timeouts
Mario Limonciello (5):
drm/amd: Restore cached power limit during resume
drm/amd/display: Pass up errors for reset GPU that fails to init HW
drm/amd/display: Revert "drm/amd/display: Fix AMDGPU_MAX_BL_LEVEL value"
drm/amd/display: Avoid a NULL pointer dereference
drm/amd: Restore cached manual clock settings during resume
Masami Hiramatsu (Google) (1):
tracing: fprobe-event: Sanitize wildcard for fprobe event name
Mathis Foerst (1):
media: mt9m114: Fix deadlock in get_frame_interval/set_frame_interval
Matthieu Baerts (NGI0) (4):
mptcp: pm: kernel: flush: do not reset ADD_ADDR limit
selftests: mptcp: pm: check flush doesn't reset limits
selftests: mptcp: connect: fix C23 extension warning
selftests: mptcp: sockopt: fix C23 extension warning
Matti Vaittinen (1):
iio: adc: bd79124: Add GPIOLIB dependency
Miao Li (1):
usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
Miaoqian Lin (1):
most: core: Drop device reference after usage in get_channel()
Michael Chan (1):
bnxt_en: Fix lockdep warning during rmmod
Michael Walle (1):
mtd: spi-nor: Fix spi_nor_try_unlock_all()
Michel Dänzer (1):
drm/amd/display: Add primary plane to commits for correct VRR handling
Miguel Ojeda (3):
rust: faux: fix C header link
drm: nova-drm: fix 32-bit arm build
rust: alloc: fix `rusttest` by providing `Cmalloc::aligned_layout` too
Ming Lei (1):
blk-mq: fix lockdep warning in __blk_mq_update_nr_hw_queues
Minhong He (1):
ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
Muhammad Usama Anjum (1):
ASoC: SOF: amd: acp-loader: Use GFP_KERNEL for DMA allocations in resume context
Myrrh Periwinkle (2):
vt: keyboard: Don't process Unicode characters in K_OFF mode
vt: defkeymap: Map keycodes above 127 to K_HOLE
Namjae Jeon (1):
ksmbd: extend the connection limiting mechanism to support IPv6
Naohiro Aota (3):
btrfs: zoned: fix write time activation failure for metadata block group
btrfs: subpage: keep TOWRITE tag until folio is cleaned
btrfs: zoned: fix data relocation block group reservation
Nathan Chancellor (3):
usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
drm/amdgpu: Initialize data to NULL in imu_v12_0_program_rlc_ram()
NeilBrown (1):
ovl: use I_MUTEX_PARENT when locking parent in ovl_create_temp()
Nick Chan (1):
arm64: dts: apple: t8012-j132: Include touchbar framebuffer node
Nicolas Dufresne (1):
media: verisilicon: Fix AV1 decoder clock frequency
Nicolin Chen (1):
iommu/arm-smmu-v3: Fix smmu_domain->nr_ats_masters decrement
Niklas Cassel (1):
PCI: dwc: Ensure that dw_pcie_wait_for_link() waits 100 ms after link up
Niklas Neronin (1):
usb: xhci: fix host not responding after suspend and resume
Nilay Shroff (6):
block: move elevator queue allocation logic into blk_mq_init_sched
block: fix lockdep warning caused by lock dependency in elv_iosched_store
block: fix potential deadlock while running nr_hw_queue update
block: decrement block_rq_qos static key in rq_qos_del()
block: skip q->rq_qos check in rq_qos_done_bio()
block: avoid cpu_hotplug_lock depedency on freeze_lock
Nitin Gote (1):
iosys-map: Fix undefined behavior in iosys_map_clear()
Nitin Rawat (1):
scsi: ufs: ufs-qcom: Fix ESI null pointer dereference
Ojaswin Mujoo (2):
ext4: fix fsmap end of range reporting with bigalloc
ext4: fix reserved gdt blocks handling in fsmap
Oren Sidi (1):
net/mlx5: Add IFC bits and enums for buf_ownership
Parthiban Veerasooran (2):
microchip: lan865x: fix missing netif_start_queue() call on device open
microchip: lan865x: fix missing Timer Increment config for Rev.B0/B1
Pasha Tatashin (3):
kho: init new_physxa->phys_bits to fix lockdep
kho: mm: don't allow deferred struct page with KHO
kho: warn if KHO is disabled due to an error
Pauli Virtanen (1):
Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established
Peng Fan (1):
regulator: pca9450: Use devm_register_sys_off_handler
Peter Griffin (1):
arm64: dts: exynos: gs101: ufs: add dma-coherent property
Peter Oberparleiter (3):
s390/sclp: Fix SCCB present check
s390/hypfs: Avoid unnecessary ioctl registration in debugfs
s390/hypfs: Enable limited access during lockdown
Peter Shkenev (1):
drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities
Phillip Lougher (1):
squashfs: fix memory leak in squashfs_fill_super
Piotr Piórkowski (2):
drm/xe: Assign ioctl xe file handler to vm in xe_vm_create
drm/xe: Move ASID allocation and user PT BO tracking into xe_vm_create
Pu Lehui (1):
tracing: Limit access to parser->buffer when trace_get_user failed
Qianfeng Rong (1):
drm/nouveau/gsp: fix mismatched alloc/free for kvmalloc()
Qingfang Deng (2):
net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path
ppp: fix race conditions in ppp_fill_forward_path
Qu Wenruo (2):
btrfs: add comments on the extra btrfs specific subpage bitmaps
btrfs: rename btrfs_subpage structure
Rafael J. Wysocki (2):
PM: runtime: Take active children into account in pm_runtime_get_if_in_use()
cpuidle: governors: menu: Avoid selecting states with too much latency
Randy Dunlap (1):
parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit compilers
Ranjan Kumar (3):
scsi: mpi3mr: Fix race between config read submit and interrupt completion
scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers
scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems
Ricardo Ribalda (2):
media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
media: venus: venc: Clamp param smaller than 1fps and bigger than 240
Richard Fitzgerald (1):
ASoC: cs35l56: Handle new algorithms IDs for CS35L63
Richard Zhu (4):
PCI: imx6: Add IMX8MQ_EP third 64-bit BAR in epc_features
PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4 in epc_features
PCI: imx6: Remove apps_reset toggling from imx_pcie_{assert/deassert}_core_reset
PCI: imx6: Delay link start until configfs 'start' written
Robin Murphy (1):
iommu/virtio: Make instance lookup robust
Sai Krishna Potthuri (1):
mmc: sdhci-of-arasan: Ensure CD logic stabilization before power-up
Sakari Ailus (2):
media: ipu6: isys: Use correct pads for xlate_streams()
media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
Salah Triki (1):
iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
Sam Edwards (1):
arm64: dts: rockchip: Remove workaround that prevented Turing RK1 GPU power regulator control
Sang-Heon Jeon (2):
mm/damon/core: fix commit_ops_filters by using correct nth function
mm/damon/core: fix damos_commit_filter not changing allow
Sebastian Andrzej Siewior (1):
kcov, usb: Don't disable interrupts in kcov_remote_start_usb_softirq()
Sebastian Brzezinka (1):
drm/i915/gt: Relocate compression repacking WA for JSL/EHL
Selvarasu Ganesan (1):
usb: dwc3: Remove WARN_ON for device endpoint command timeouts
SeongJae Park (1):
mm/damon/ops-common: ignore migration request to invalid nodes
Sergey Shtylyov (1):
Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync()
Simon Richter (1):
Mark xe driver as BROKEN if kernel page size is not 4kB
Siyang Liu (1):
drm/amd/display: fix a Null pointer dereference vulnerability
Song Gao (1):
LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu()
Srinivas Pandruvada (1):
platform/x86/intel-uncore-freq: Check write blocked for ELC
Stefan Binding (2):
ASoC: cs35l56: Update Firmware Addresses for CS35L63 for production silicon
ASoC: cs35l56: Remove SoundWire Clock Divider workaround for CS35L63
Stefan Metzmacher (1):
smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()
Stefan Wahren (1):
spi: spi-fsl-lpspi: Clamp too high speed_hz
Steven Rostedt (2):
ftrace: Also allocate and copy hash for reading of filter files
tracing: Remove unneeded goto out logic
Suma Hegde (1):
platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL
Suraj Gupta (1):
net: xilinx: axienet: Fix RX skb ring management in DMAengine mode
Sven Eckelmann (2):
i2c: rtl9300: Increase timeout for transfer polling
i2c: rtl9300: Add missing count byte for SMBus Block Ops
Takashi Iwai (2):
ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv
ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
Theodore Ts'o (1):
ext4: don't try to clear the orphan_present feature block device is r/o
Thomas Bertschinger (1):
fhandle: do_handle_open() should get FD with user flags
Thomas Fourier (2):
mtd: rawnand: fsmc: Add missing check after DMA map
mtd: rawnand: renesas: Add missing check after DMA map
Thomas Hellström (1):
drm/xe: Defer buffer object shrinker write-backs and GPU waits
Thomas Weißschuh (1):
kbuild: userprogs: use correct linker when mixing clang and GNU ld
Thomas Zimmermann (1):
drm/tests: Do not use drm_fb_blit() in format-helper tests
Thorsten Blum (3):
accel/habanalabs/gaudi2: Use kvfree() for memory allocated with kvcalloc()
cdx: Fix off-by-one error in cdx_rpmsg_probe()
usb: storage: realtek_cr: Use correct byte order for bcs->Residue
Tianxiang Peng (1):
x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
Tiezhu Yang (2):
objtool/LoongArch: Get table size correctly if LTO is enabled
LoongArch: Pass annotate-tablejump option if LTO is enabled
Tim Harvey (1):
hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
Timur Kristóf (9):
drm/amd/display: Fix DCE 6.0 and 6.4 PLL programming.
drm/amd/display: Don't overwrite dce60_clk_mgr
drm/amd/display: Don't overclock DCE 6 by 15%
drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
drm/amd/display: Adjust DCE 8-10 clock, don't overclock by 15%
drm/amd/display: Don't print errors for nonexistent connectors
Tom Chung (1):
drm/amd/display: Fix Xorg desktop unresponsive on Replay panel
Tristram Ha (1):
net: dsa: microchip: Fix KSZ9477 HSR port setup issue
Trond Myklebust (1):
NFS: Fix a race when updating an existing write
Tzung-Bi Shih (1):
platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
Uwe Kleine-König (3):
pwm: mediatek: Handle hardware enable and clock enable separately
pwm: mediatek: Fix duty and period setting
ACPI: APEI: EINJ: Fix resource leak by remove callback in .exit.text
ValdikSS (1):
igc: fix disabling L1.2 PCI-E link substate on I226 on init
Vedang Nagar (1):
media: venus: Add a check for packet size after reading from shared memory
Victor Shih (3):
mmc: sdhci-pci-gli: Add a new function to simplify the code
mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER
mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
Vlad Dogaru (1):
net/mlx5: CT: Use the correct counter offset
Vladimir Zapolskiy (1):
media: qcom: camss: cleanup media device allocated resource on error path
Vodapalli, Ravi Kumar (1):
drm/xe/bmg: Add one additional PCI ID
Waiman Long (2):
cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
cgroup/cpuset: Fix a partition error with CPU hotplug
Wang Liang (1):
net: bridge: fix soft lockup in br_multicast_query_expired()
Weitao Wang (1):
usb: xhci: Fix slot_id resource race conflict
Will Deacon (2):
vsock/virtio: Validate length in packet header before skb_put()
vhost/vsock: Avoid allocating arbitrarily-sized SKBs
William Liu (3):
net/sched: Fix backlog accounting in qdisc_dequeue_internal
net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
Xaver Hugl (1):
amdgpu/amdgpu_discovery: increase timeout limit for IFWI init
XianLiang Huang (1):
iommu/riscv: prevent NULL deref in iova_to_phys
Xu Yang (1):
usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test
Xu Yilun (1):
fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
Yang Li (2):
Bluetooth: hci_sync: Prevent unintended PA sync when SID is 0xFF
Bluetooth: Add PA_LINK to distinguish BIG sync and PA sync connections
Yang Wang (1):
drm/amd/amdgpu: fix missing lock for cper.ring->rptr/wptr access
Yao Zi (1):
net: stmmac: thead: Enable TX clock before MAC initialization
Yazen Ghannam (1):
x86/CPU/AMD: Ignore invalid reset reason value
Ye Bin (1):
fs/buffer: fix use-after-free when call bh_read() helper
Yevgeny Kliteynik (2):
net/mlx5: HWS, fix bad parameter in CQ creation
net/mlx5: HWS, fix complex rules rehash error flow
Youssef Samir (1):
bus: mhi: host: Detect events pointing to unexpected TREs
YuanShang (1):
drm/amdgpu: Retain job->vm in amdgpu_job_prepare_job
Yuichiro Tsuji (1):
net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
Yunhui Cui (1):
serial: 8250: fix panic due to PSLVERR
Yuntao Wang (1):
fs: fix incorrect lflags value in the move_mount syscall
Zenm Chen (1):
USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
Zhang Shurong (1):
media: ov2659: Fix memory leaks in ov2659_probe()
Zhang Yi (1):
ext4: fix hole length calculation overflow in non-extent inodes
Zheng Qixing (2):
md: add helper rdev_needs_recovery()
md: fix sync_action incorrect display during resync
Zhu Yanjun (1):
RDMA/rxe: Flush delayed SKBs while releasing RXE resources
Ziyan Xu (1):
ksmbd: fix refcount leak causing resource not released
wenglianfa (1):
RDMA/hns: Fix querying wrong SCC context for DIP algorithm
3 weeks, 2 days
- 1
- 1
Linux 6.12.44
by Greg Kroah-Hartman
I'm announcing the release of the 6.12.44 kernel.
All users of the 6.12 kernel series must upgrade.
The updated 6.12.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.12.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/devicetree/bindings/display/sprd/sprd,sharkl3-dpu.yaml | 2
Documentation/devicetree/bindings/display/sprd/sprd,sharkl3-dsi-host.yaml | 2
Documentation/devicetree/bindings/ufs/mediatek,ufs.yaml | 4
Documentation/networking/mptcp-sysctl.rst | 2
Makefile | 4
arch/arm64/boot/dts/exynos/google/gs101.dtsi | 1
arch/arm64/boot/dts/ti/k3-am62-lp-sk.dts | 36 +
arch/arm64/boot/dts/ti/k3-am62-main.dtsi | 1
arch/arm64/boot/dts/ti/k3-am62-phycore-som.dtsi | 1
arch/arm64/boot/dts/ti/k3-am62-verdin.dtsi | 12
arch/arm64/boot/dts/ti/k3-am625-beagleplay.dts | 2
arch/arm64/boot/dts/ti/k3-am625-sk.dts | 24
arch/arm64/boot/dts/ti/k3-am62a-phycore-som.dtsi | 1
arch/arm64/boot/dts/ti/k3-am62a7-sk.dts | 7
arch/arm64/boot/dts/ti/k3-am62p5-sk.dts | 2
arch/arm64/boot/dts/ti/k3-am62x-sk-common.dtsi | 24
arch/arm64/boot/dts/ti/k3-am642-evm.dts | 1
arch/arm64/boot/dts/ti/k3-am654-base-board.dts | 1
arch/arm64/boot/dts/ti/k3-am6548-iot2050-advanced-common.dtsi | 1
arch/arm64/boot/dts/ti/k3-am69-sk.dts | 1
arch/arm64/boot/dts/ti/k3-pinctrl.h | 15
arch/loongarch/kernel/module-sections.c | 36 -
arch/loongarch/kvm/vcpu.c | 8
arch/m68k/kernel/head.S | 31
arch/mips/crypto/chacha-core.S | 20
arch/parisc/Makefile | 4
arch/parisc/include/asm/pgtable.h | 7
arch/parisc/include/asm/special_insns.h | 28
arch/parisc/include/asm/uaccess.h | 21
arch/parisc/kernel/cache.c | 6
arch/parisc/kernel/entry.S | 17
arch/parisc/kernel/syscall.S | 30
arch/parisc/lib/memcpy.c | 19
arch/parisc/mm/fault.c | 4
arch/powerpc/boot/Makefile | 1
arch/s390/boot/vmem.c | 3
arch/s390/hypfs/hypfs_dbfs.c | 19
arch/x86/coco/sev/shared.c | 3
arch/x86/include/asm/xen/hypercall.h | 5
arch/x86/kernel/cpu/hygon.c | 3
arch/x86/kvm/mmu/mmu.c | 10
drivers/accel/habanalabs/gaudi2/gaudi2.c | 2
drivers/acpi/pfr_update.c | 2
drivers/ata/Kconfig | 36 -
drivers/ata/libata-scsi.c | 58 -
drivers/base/power/runtime.c | 27
drivers/bluetooth/btmtk.c | 7
drivers/bus/mhi/host/boot.c | 8
drivers/bus/mhi/host/internal.h | 4
drivers/bus/mhi/host/main.c | 12
drivers/cdx/controller/cdx_rpmsg.c | 3
drivers/comedi/comedi_fops.c | 5
drivers/comedi/drivers.c | 23
drivers/comedi/drivers/pcl726.c | 3
drivers/cpufreq/armada-8k-cpufreq.c | 2
drivers/cpuidle/governors/menu.c | 101 --
drivers/crypto/caam/ctrl.c | 5
drivers/crypto/caam/intern.h | 1
drivers/crypto/intel/qat/qat_common/adf_common_drv.h | 1
drivers/crypto/intel/qat/qat_common/adf_init.c | 1
drivers/crypto/intel/qat/qat_common/adf_isr.c | 5
drivers/crypto/intel/qat/qat_common/qat_algs.c | 12
drivers/crypto/marvell/octeontx2/otx2_cpt_reqmgr.h | 125 ++-
drivers/crypto/marvell/octeontx2/otx2_cptpf_ucode.c | 35
drivers/fpga/zynq-fpga.c | 10
drivers/gpu/drm/Kconfig | 5
drivers/gpu/drm/Makefile | 1
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 5
drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 76 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 6
drivers/gpu/drm/amd/amdgpu/imu_v12_0.c | 2
drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c | 57 -
drivers/gpu/drm/amd/amdgpu/mmhub_v4_1_0.c | 34
drivers/gpu/drm/amd/amdgpu/soc15.c | 2
drivers/gpu/drm/amd/amdkfd/kfd_module.c | 2
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 3
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c | 28
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 2
drivers/gpu/drm/amd/display/dc/bios/bios_parser.c | 5
drivers/gpu/drm/amd/display/dc/bios/command_table.c | 2
drivers/gpu/drm/amd/display/dc/clk_mgr/clk_mgr.c | 1
drivers/gpu/drm/amd/display/dc/clk_mgr/dce100/dce_clk_mgr.c | 2
drivers/gpu/drm/amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 40 -
drivers/gpu/drm/amd/display/dc/clk_mgr/dce60/dce60_clk_mgr.c | 31
drivers/gpu/drm/amd/display/dc/core/dc.c | 34
drivers/gpu/drm/amd/display/modules/hdcp/hdcp_psp.c | 3
drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 6
drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 30
drivers/gpu/drm/display/drm_dp_helper.c | 2
drivers/gpu/drm/drm_draw.c | 155 ++++
drivers/gpu/drm/drm_draw_internal.h | 56 +
drivers/gpu/drm/drm_format_helper.c | 234 ++++--
drivers/gpu/drm/drm_format_internal.h | 127 +++
drivers/gpu/drm/drm_panic.c | 269 -------
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 4
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.h | 17
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_i2c.c | 46 -
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_vdac.c | 29
drivers/gpu/drm/i915/display/intel_tc.c | 58 +
drivers/gpu/drm/nouveau/nvif/vmm.c | 3
drivers/gpu/drm/tests/drm_format_helper_test.c | 176 ++--
drivers/gpu/drm/xe/Kconfig | 1
drivers/hwmon/gsc-hwmon.c | 4
drivers/iio/adc/ad7173.c | 3
drivers/iio/adc/ad_sigma_delta.c | 4
drivers/iio/imu/bno055/bno055.c | 11
drivers/iio/imu/inv_icm42600/inv_icm42600.h | 8
drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 33
drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 22
drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h | 10
drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 6
drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 43 -
drivers/iio/imu/inv_icm42600/inv_icm42600_temp.c | 12
drivers/iio/light/adjd_s311.c | 2
drivers/iio/light/as73211.c | 4
drivers/iio/light/bh1745.c | 2
drivers/iio/light/isl29125.c | 2
drivers/iio/light/ltr501.c | 2
drivers/iio/light/max44000.c | 2
drivers/iio/light/rohm-bu27034.c | 2
drivers/iio/light/rpr0521.c | 2
drivers/iio/light/st_uvis25.h | 2
drivers/iio/light/tcs3414.c | 2
drivers/iio/light/tcs3472.c | 2
drivers/iio/pressure/bmp280-core.c | 9
drivers/iio/proximity/isl29501.c | 16
drivers/iio/temperature/maxim_thermocouple.c | 26
drivers/infiniband/hw/bnxt_re/ib_verbs.c | 8
drivers/infiniband/hw/bnxt_re/main.c | 23
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 30
drivers/infiniband/hw/bnxt_re/qplib_fp.h | 2
drivers/infiniband/hw/bnxt_re/qplib_res.c | 2
drivers/infiniband/hw/erdma/erdma_verbs.c | 4
drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 6
drivers/infiniband/hw/hns/hns_roce_restrack.c | 9
drivers/infiniband/sw/rxe/rxe_net.c | 29
drivers/infiniband/sw/rxe/rxe_qp.c | 2
drivers/iommu/amd/init.c | 4
drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 2
drivers/md/dm-crypt.c | 49 +
drivers/md/dm.c | 17
drivers/media/cec/usb/rainshadow/rainshadow-cec.c | 3
drivers/media/i2c/hi556.c | 26
drivers/media/i2c/mt9m114.c | 8
drivers/media/i2c/ov2659.c | 3
drivers/media/pci/intel/ipu6/ipu6-isys-csi2.c | 12
drivers/media/pci/intel/ivsc/mei_ace.c | 2
drivers/media/pci/intel/ivsc/mei_csi.c | 2
drivers/media/platform/qcom/camss/camss.c | 4
drivers/media/platform/qcom/venus/core.c | 18
drivers/media/platform/qcom/venus/core.h | 2
drivers/media/platform/qcom/venus/hfi_venus.c | 5
drivers/media/platform/qcom/venus/vdec.c | 5
drivers/media/platform/qcom/venus/venc.c | 5
drivers/media/platform/raspberrypi/pisp_be/Kconfig | 1
drivers/media/platform/raspberrypi/pisp_be/pisp_be.c | 5
drivers/media/platform/verisilicon/rockchip_vpu_hw.c | 9
drivers/media/test-drivers/vivid/vivid-ctrls.c | 3
drivers/media/test-drivers/vivid/vivid-vid-cap.c | 4
drivers/media/usb/gspca/vicam.c | 10
drivers/media/usb/usbtv/usbtv-video.c | 4
drivers/media/v4l2-core/v4l2-ctrls-core.c | 1
drivers/memstick/core/memstick.c | 1
drivers/memstick/host/rtsx_usb_ms.c | 1
drivers/mmc/host/sdhci-pci-gli.c | 37 -
drivers/mmc/host/sdhci_am654.c | 18
drivers/most/core.c | 2
drivers/mtd/nand/raw/fsmc_nand.c | 2
drivers/mtd/nand/raw/renesas-nand-controller.c | 6
drivers/mtd/nand/spi/core.c | 5
drivers/mtd/spi-nor/swp.c | 19
drivers/net/bonding/bond_3ad.c | 67 +
drivers/net/bonding/bond_options.c | 1
drivers/net/can/ti_hecc.c | 2
drivers/net/dsa/microchip/ksz_common.c | 6
drivers/net/ethernet/google/gve/gve_main.c | 2
drivers/net/ethernet/intel/igc/igc_main.c | 14
drivers/net/ethernet/intel/ixgbe/ixgbe_xsk.c | 4
drivers/net/ethernet/marvell/octeontx2/af/rvu_npc_fs.c | 4
drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 2
drivers/net/ethernet/mellanox/mlx5/core/en/dcbnl.h | 1
drivers/net/ethernet/mellanox/mlx5/core/en/port_buffer.c | 18
drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 12
drivers/net/ethernet/mellanox/mlx5/core/esw/devlink_port.c | 4
drivers/net/ethernet/mellanox/mlx5/core/mlx5_core.h | 87 ++
drivers/net/ethernet/mellanox/mlx5/core/port.c | 40 -
drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2
drivers/net/ethernet/mellanox/mlxsw/trap.h | 1
drivers/net/ethernet/microchip/lan865x/lan865x.c | 21
drivers/net/ethernet/realtek/rtase/rtase.h | 2
drivers/net/ethernet/ti/icssg/icssg_prueth.c | 72 +-
drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 8
drivers/net/phy/mscc/mscc.h | 12
drivers/net/phy/mscc/mscc_main.c | 12
drivers/net/phy/mscc/mscc_ptp.c | 49 +
drivers/net/ppp/ppp_generic.c | 17
drivers/net/usb/asix_devices.c | 2
drivers/net/wireless/ath/ath11k/ce.c | 3
drivers/net/wireless/ath/ath11k/dp_rx.c | 3
drivers/net/wireless/ath/ath11k/hal.c | 33
drivers/net/wireless/ath/ath12k/ce.c | 3
drivers/net/wireless/ath/ath12k/hal.c | 38 -
drivers/net/wireless/broadcom/brcm80211/brcmsmac/phy/phy_lcn.c | 2
drivers/pci/controller/dwc/pci-imx6.c | 32
drivers/pci/controller/pcie-rockchip-host.c | 49 -
drivers/pci/controller/pcie-rockchip.h | 11
drivers/pci/endpoint/pci-ep-cfs.c | 1
drivers/pci/endpoint/pci-epf-core.c | 2
drivers/pci/pcie/portdrv.c | 2
drivers/phy/qualcomm/phy-qcom-m31.c | 14
drivers/platform/chrome/cros_ec.c | 3
drivers/platform/x86/intel/uncore-frequency/uncore-frequency-tpmi.c | 5
drivers/pwm/pwm-imx-tpm.c | 9
drivers/pwm/pwm-mediatek.c | 71 +
drivers/s390/char/sclp.c | 11
drivers/scsi/mpi3mr/mpi3mr.h | 6
drivers/scsi/mpi3mr/mpi3mr_fw.c | 17
drivers/scsi/mpi3mr/mpi3mr_os.c | 2
drivers/scsi/qla4xxx/ql4_os.c | 2
drivers/scsi/scsi_lib.c | 3
drivers/soc/qcom/mdt_loader.c | 43 +
drivers/soc/tegra/pmc.c | 51 -
drivers/spi/spi-fsl-lpspi.c | 8
drivers/staging/media/imx/imx-media-csc-scaler.c | 2
drivers/tty/serial/8250/8250_port.c | 3
drivers/tty/vt/defkeymap.c_shipped | 112 +++
drivers/tty/vt/keyboard.c | 2
drivers/ufs/host/ufs-exynos.c | 4
drivers/ufs/host/ufshcd-pci.c | 42 +
drivers/usb/atm/cxacru.c | 106 +-
drivers/usb/core/hcd.c | 20
drivers/usb/core/quirks.c | 1
drivers/usb/dwc3/dwc3-imx8mp.c | 7
drivers/usb/dwc3/dwc3-meson-g12a.c | 3
drivers/usb/dwc3/dwc3-pci.c | 2
drivers/usb/dwc3/ep0.c | 20
drivers/usb/dwc3/gadget.c | 19
drivers/usb/gadget/udc/renesas_usb3.c | 1
drivers/usb/host/xhci-hub.c | 3
drivers/usb/host/xhci-mem.c | 22
drivers/usb/host/xhci-pci-renesas.c | 7
drivers/usb/host/xhci-ring.c | 9
drivers/usb/host/xhci.c | 21
drivers/usb/host/xhci.h | 3
drivers/usb/musb/omap2430.c | 14
drivers/usb/storage/realtek_cr.c | 2
drivers/usb/storage/unusual_devs.h | 29
drivers/usb/typec/class.c | 7
drivers/usb/typec/tcpm/fusb302.c | 32
drivers/usb/typec/tcpm/maxim_contaminant.c | 58 +
drivers/usb/typec/tcpm/qcom/qcom_pmic_typec_pdphy.c | 3
drivers/usb/typec/tcpm/qcom/qcom_pmic_typec_pdphy_stub.c | 3
drivers/usb/typec/tcpm/qcom/qcom_pmic_typec_port.c | 4
drivers/usb/typec/tcpm/tcpci_maxim.h | 1
drivers/usb/typec/tcpm/tcpm.c | 7
drivers/vhost/vsock.c | 6
drivers/video/console/vgacon.c | 2
fs/btrfs/block-group.c | 59 -
fs/btrfs/ctree.c | 9
fs/btrfs/free-space-tree.c | 17
fs/btrfs/qgroup.c | 38 -
fs/btrfs/send.c | 359 +++++-----
fs/btrfs/subpage.c | 19
fs/btrfs/super.c | 13
fs/btrfs/transaction.c | 1
fs/btrfs/zoned.c | 13
fs/buffer.c | 2
fs/debugfs/inode.c | 11
fs/ext4/fsmap.c | 23
fs/ext4/indirect.c | 4
fs/ext4/inode.c | 2
fs/ext4/orphan.c | 5
fs/ext4/super.c | 8
fs/f2fs/node.c | 10
fs/file.c | 75 --
fs/jbd2/checkpoint.c | 1
fs/namespace.c | 34
fs/netfs/write_collect.c | 10
fs/netfs/write_issue.c | 4
fs/nfs/pagelist.c | 9
fs/nfs/write.c | 29
fs/overlayfs/copy_up.c | 2
fs/smb/client/smb2ops.c | 2
fs/smb/server/connection.c | 3
fs/smb/server/connection.h | 7
fs/smb/server/oplock.c | 13
fs/smb/server/transport_rdma.c | 5
fs/smb/server/transport_rdma.h | 4
fs/smb/server/transport_tcp.c | 26
fs/splice.c | 3
fs/squashfs/super.c | 14
fs/xfs/xfs_itable.c | 6
include/drm/drm_format_helper.h | 12
include/linux/call_once.h | 47 -
include/linux/compiler.h | 8
include/linux/iosys-map.h | 7
include/linux/iov_iter.h | 20
include/linux/kcov.h | 47 -
include/linux/mlx5/mlx5_ifc.h | 14
include/linux/mlx5/port.h | 85 --
include/linux/netfs.h | 1
include/linux/nfs_page.h | 1
include/net/bond_3ad.h | 1
include/uapi/linux/pfrut.h | 1
io_uring/futex.c | 3
io_uring/net.c | 27
kernel/cgroup/cpuset.c | 9
kernel/sched/ext.c | 18
kernel/trace/ftrace.c | 19
kernel/trace/trace.c | 34
kernel/trace/trace.h | 10
mm/damon/paddr.c | 4
mm/debug_vm_pgtable.c | 9
mm/filemap.c | 3
mm/memory-failure.c | 8
net/bluetooth/hci_conn.c | 3
net/bluetooth/hci_event.c | 8
net/bluetooth/hci_sync.c | 19
net/bridge/br_multicast.c | 16
net/bridge/br_private.h | 2
net/core/dev.c | 12
net/hsr/hsr_slave.c | 8
net/ipv4/netfilter/nf_reject_ipv4.c | 6
net/ipv6/netfilter/nf_reject_ipv6.c | 5
net/ipv6/seg6_hmac.c | 6
net/mptcp/options.c | 6
net/mptcp/pm_netlink.c | 19
net/sched/sch_cake.c | 14
net/sched/sch_htb.c | 2
net/smc/af_smc.c | 3
net/tls/tls_sw.c | 7
net/vmw_vsock/virtio_transport.c | 12
rust/kernel/alloc/allocator.rs | 30
rust/kernel/alloc/allocator_test.rs | 11
security/apparmor/lsm.c | 4
sound/core/timer.c | 4
sound/pci/hda/patch_realtek.c | 2
sound/soc/sof/amd/acp-loader.c | 6
sound/usb/stream.c | 2
sound/usb/validate.c | 2
tools/testing/selftests/net/mptcp/pm_netlink.sh | 1
341 files changed, 3787 insertions(+), 2216 deletions(-)
Adrian Hunter (1):
scsi: ufs: ufs-pci: Fix default runtime and system PM levels
Al Viro (2):
use uniform permission checks for all mount propagation changes
alloc_fdtable(): change calling conventions.
Alex Deucher (4):
drm/amdgpu/discovery: fix fw based ip discovery
drm/amdgpu: update mmhub 3.0.1 client id mappings
drm/amdgpu: update mmhub 4.1.0 client id mappings
drm/amdgpu/swm14: Update power limit logic
Alexander Sverdlin (1):
arm64: dts: ti: k3-pinctrl: Enable Schmitt Trigger by default
Alexander Wilhelm (1):
bus: mhi: host: Fix endianness of BHI vector table
Alexei Lazar (1):
net/mlx5e: Query FW for buffer ownership
Amber Lin (1):
drm/amdkfd: Destroy KFD debugfs after destroy KFD wq
Amit Sunil Dhamne (2):
usb: typec: maxim_contaminant: disable low power mode when reading comparator values
usb: typec: maxim_contaminant: re-enable cc toggle if cc is open and port is clean
Anantha Prabhu (1):
RDMA/bnxt_re: Fix to initialize the PBL array
Andrea Righi (2):
sched/ext: Fix invalid task state transitions on class switch
sched_ext: initialize built-in idle state before ops.init()
Andreas Dilger (1):
ext4: check fast symlink for ea_inode correctly
André Draszik (1):
scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
Andy Shevchenko (1):
iio: imu: inv_icm42600: Convert to uXX and sXX integer types
Archana Patni (1):
scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers
Armen Ratner (1):
net/mlx5e: Preserve shared buffer capacity during headroom updates
Baihan Li (3):
drm/hisilicon/hibmc: refactored struct hibmc_drm_private
drm/hisilicon/hibmc: fix the i2c device resource leak when vdac init failed
drm/hisilicon/hibmc: fix the hibmc loaded failed bug
Baokun Li (2):
jbd2: prevent softlockup in jbd2_log_do_checkpoint()
ext4: preserve SB_I_VERSION on remount
Bharat Bhushan (3):
crypto: octeontx2 - Fix address alignment issue on ucode loading
crypto: octeontx2 - Fix address alignment on CN10K A0/A1 and OcteonTX2
crypto: octeontx2 - Fix address alignment on CN10KB and CN10KA-B0
Bibo Mao (1):
LoongArch: KVM: Make function kvm_own_lbt() robust
Bingbu Cao (1):
media: hi556: correct the test pattern configuration
Bjorn Andersson (1):
soc: qcom: mdt_loader: Ensure we don't read past the ELF header
Boris Burkov (2):
btrfs: explicitly ref count block_group on new_bgs list
btrfs: codify pattern for adding block_group to bg_list
Boshi Yu (1):
RDMA/erdma: Fix ignored return value of init_kernel_qp
Chao Yu (1):
f2fs: fix to avoid out-of-boundary access in dnode page
Charalampos Mitrodimas (1):
debugfs: fix mount options not being applied
Chen Yu (1):
ACPI: pfr_update: Fix the driver update version check
Chenyuan Yang (1):
drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
Chi Zhiling (1):
readahead: fix return value of page_cache_next_miss() when no hole is found
Christian Loehle (1):
cpuidle: menu: Remove iowait influence
Christoph Hellwig (1):
xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags
Christoph Paasch (1):
mptcp: drop skb if MPTCP skb extension allocation fails
D. Wythe (1):
net/smc: fix UAF on smcsk after smc_listen_out()
Damien Le Moal (7):
ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
dm: dm-crypt: Do not partially accept write BIOs with zoned targets
dm: Check for forbidden splitting of zone write operations
ata: libata-scsi: Fix ata_to_sense_error() status handling
PCI: endpoint: Fix configfs group list head handling
PCI: endpoint: Fix configfs group removal on driver teardown
ata: libata-scsi: Return aborted command when missing sense and result TF
Dan Carpenter (5):
cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
media: gspca: Add bounds checking to firmware parser
soc: qcom: mdt_loader: Fix error return values in mdt_header_valid()
scsi: qla4xxx: Prevent a potential error pointer dereference
ALSA: usb-audio: Fix size validation in convert_chmap_v3()
Daniel Jurgens (1):
net/mlx5: Base ECVF devlink port attrs from 0
Danilo Krummrich (1):
rust: alloc: replace aligned_size() with Kmalloc::aligned_layout()
David Howells (2):
netfs: Fix unbuffered write error handling
cifs: Fix oops due to uninitialised variable
David Lechner (6):
iio: imu: bno055: fix OOB access of hw_xlate array
iio: adc: ad_sigma_delta: change to buffer predisable
iio: adc: ad7173: fix setting ODR in probe
iio: proximity: isl29501: fix buffered read on big-endian systems
iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read()
iio: imu: inv_icm42600: use = { } instead of memset()
David Sterba (2):
btrfs: qgroup: drop unused parameter fs_info from __del_qgroup_rb()
btrfs: move transaction aborts to the error site in add_block_group_free_space()
Dewei Meng (1):
ALSA: timer: fix ida_free call while not allocated
Dominique Martinet (1):
iov_iter: iterate_folioq: fix handling of offset >= folio size
Edward Adam Davis (1):
comedi: pcl726: Prevent invalid irq number
Emanuele Ghidoli (1):
arm64: dts: ti: k3-am62-verdin: Enable pull-ups on I2C buses
Eric Biggers (2):
lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
ipv6: sr: Fix MAC comparison to be constant-time
Evgeniy Harchenko (1):
ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
Fanhua Li (1):
drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor().
Filipe Manana (10):
btrfs: qgroup: fix race between quota disable and quota rescan ioctl
btrfs: always abort transaction on failure to add block group to free space tree
btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()
btrfs: send: factor out common logic when sending xattrs
btrfs: send: only use boolean variables at process_recorded_refs()
btrfs: send: add and use helper to rename current inode when processing refs
btrfs: send: keep the current inode's path cached
btrfs: send: avoid path allocation for the current inode when issuing commands
btrfs: send: use fallocate for hole punching with send stream v2
btrfs: send: make fs_path_len() inline and constify its argument
Finn Thain (1):
m68k: Fix lost column on framebuffer debug console
Florian Westphal (1):
netfilter: nf_reject: don't leak dst refcount for loopback packets
Frank Li (1):
PCI: imx6: Add i.MX8Q PCIe Endpoint (EP) support
Gabor Juhos (1):
mtd: spinand: propagate spinand_wait() errors from spinand_write_page()
Gang Ba (1):
drm/amdgpu: Avoid extra evict-restore process.
Geliang Tang (2):
mptcp: remove duplicate sk_reset_timer call
mptcp: disable add_addr retransmission when timeout is 0
Geraldo Nascimento (2):
PCI: rockchip: Use standard PCIe definitions
PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining
Giovanni Cabiddu (2):
crypto: qat - lower priority for skcipher and aead algorithms
crypto: qat - flush misc workqueue during device shutdown
Greg Kroah-Hartman (2):
Revert "can: ti_hecc: fix -Woverflow compiler warning"
Linux 6.12.44
Gui-Dong Han (1):
media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
Hangbin Liu (2):
bonding: update LACP activity flag after setting lacp_active
bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU
Hans Verkuil (1):
media: vivid: fix wrong pixel_array control size
Hans de Goede (1):
media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls
Haoxiang Li (1):
media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
Hariprasad Kelam (1):
Octeontx2-af: Skip overlap check for SPI field
Heikki Krogerus (1):
usb: dwc3: pci: add support for the Intel Wildcat Lake
Heiko Carstens (1):
s390/mm: Do not map lowcore with identity mapping
Helge Deller (2):
Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
apparmor: Fix 8-byte alignment for initial dfa blob streams
Herton R. Krzesinski (1):
mm/debug_vm_pgtable: clear page table entries at destroy_args()
Hong Guan (1):
arm64: dts: ti: k3-am62a7-sk: fix pinmux for main_uart1
Horatiu Vultur (1):
phy: mscc: Fix timestamping for vsc8584
Ian Abbott (2):
comedi: Make insn_rw_emulate_bits() do insn->n samples
comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
Ido Schimmel (1):
mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
Igor Pylypiv (1):
ata: libata-scsi: Fix CDL control
Imre Deak (3):
drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
drm/i915/icl+/tc: Convert AUX powered WARN to a debug message
drm/i915/icl+/tc: Cache the max lane count value
Jacopo Mondi (1):
media: pisp_be: Fix pm_runtime underrun in probe
Jakub Acs (1):
net, hsr: reject HSR frame if skb can't hold tag
Jakub Kicinski (1):
tls: fix handling of zero-length records on the rx_list
Jakub Ramaseuski (1):
net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
Jan Beulich (1):
compiler: remove __ADDRESSABLE_ASM{_STR,}() again
Jason Xing (1):
ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
Jean-Baptiste Maneyrol (1):
iio: imu: inv_icm42600: change invalid data error to -EBUSY
Jens Axboe (2):
io_uring/net: commit partial buffers on retry
io_uring/futex: ensure io_futex_wait() cleans up properly on failure
Jiande Lu (1):
Bluetooth: btmtk: Fix wait_on_bit_timeout interruption during shutdown
Jiayi Li (1):
memstick: Fix deadlock by moving removing flag earlier
Jinjiang Tu (1):
mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn
Jocelyn Falempe (1):
drm/panic: Move drawing functions to drm_draw
Johan Hovold (10):
usb: gadget: udc: renesas_usb3: fix device leak at unbind
usb: musb: omap2430: fix device leak at unbind
usb: dwc3: meson-g12a: fix device leaks at unbind
usb: dwc3: imx8mp: fix device leak at unbind
wifi: ath12k: fix dest ring-buffer corruption
wifi: ath12k: fix source ring-buffer corruption
wifi: ath12k: fix dest ring-buffer corruption when ring is full
wifi: ath11k: fix dest ring-buffer corruption
wifi: ath11k: fix source ring-buffer corruption
wifi: ath11k: fix dest ring-buffer corruption when ring is full
John David Anglin (8):
parisc: Check region is readable by user in raw_copy_from_user()
parisc: Define and use set_pte_at()
parisc: Drop WARN_ON_ONCE() from flush_cache_vmap
parisc: Rename pte_needs_flush() to pte_needs_cache_flush() in cache.c
parisc: Revise __get_user() to probe user read access
parisc: Revise gateway LWS calls to probe user read access
parisc: Try to fixup kernel exception in bad_area_nosemaphore path of do_page_fault()
parisc: Update comments in make_insert_tlb
John Ernberg (1):
crypto: caam - Prevent crash on suspend with iMX8QM / iMX8ULP
Jon Hunter (1):
soc/tegra: pmc: Ensure power-domains are in a known state
Jonathan Cameron (3):
iio: light: Use aligned_s64 instead of open coding alignment.
iio: light: as73211: Ensure buffer holes are zeroed
iio: imu: inv_icm42600: switch timestamp type from int64_t __aligned(8) to aligned_s64
Jordan Rhee (1):
gve: prevent ethtool ops after shutdown
Jorge Ramirez-Ortiz (2):
media: venus: hfi: explicitly release IRQ during teardown
media: venus: protect against spurious interrupts during probe
José Expósito (2):
drm/tests: Fix endian warning
drm/tests: Fix drm_test_fb_xrgb8888_to_xrgb2101010() on big-endian
Judith Mendez (6):
arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support
arm64: dts: ti: k3-am6*: Add boot phase flag to support MMC boot
arm64: dts: ti: k3-am62*: Add non-removable flag for eMMC
arm64: dts: ti: k3-am6*: Remove disable-wp for eMMC
arm64: dts: ti: k3-am62*: Move eMMC pinmux to top level board file
mmc: sdhci_am654: Disable HS400 for AM62P SR1.0 and SR1.1
Junxian Huang (1):
RDMA/hns: Fix dip entries leak on devices newer than hip09
Justin Lai (1):
rtase: Fix Rx descriptor CRC error bit definition
Kalesh AP (1):
RDMA/bnxt_re: Fix a possible memory leak in the driver
Kanglong Wang (1):
LoongArch: Optimize module load time by optimizing PLT/GOT counting
Kashyap Desai (2):
RDMA/bnxt_re: Fix to do SRQ armena by default
RDMA/bnxt_re: Fix to remove workload check in SRQ limit path
Kathiravan Thirumoorthy (1):
phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization sequence
Kees Cook (1):
iommu/amd: Avoid stack buffer overflow from kernel cmdline
Keith Busch (1):
kvm: retry nx_huge_page_recovery_thread creation
Kerem Karabay (1):
drm/format-helper: Add conversion from XRGB8888 to BGR888
Konrad Dybcio (1):
media: venus: Fix MSM8998 frequency table
Krzysztof Kozlowski (3):
dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints
dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks constraints
USB: typec: Use str_enable_disable-like helpers
Kuen-Han Tsai (1):
usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
Kyoji Ogasawara (3):
btrfs: fix incorrect log message for nobarrier mount option
btrfs: restore mount option info messages during mount
btrfs: fix printing of mount info messages for NODATACOW/NODATASUM
Laurentiu Mihalcea (1):
pwm: imx-tpm: Reset counter if CMOD is 0
Liao Yuanhong (1):
ext4: use kmalloc_array() for array space allocation
Lijo Lazar (1):
drm/amdgpu: Update external revid for GC v9.5.0
Ludwig Disterhof (1):
media: usbtv: Lock resolution while streaming
Luiz Augusto von Dentz (1):
Bluetooth: hci_sync: Fix scan state after PA Sync has been established
Lukas Wunner (1):
PCI/portdrv: Use is_pciehp instead of is_hotplug_bridge
MD Danish Anwar (1):
net: ti: icssg-prueth: Fix HSR and switch offload Enablement during firwmare reload.
Macpaul Lin (1):
scsi: dt-bindings: mediatek,ufs: Add ufs-disable-mcq flag for UFS host
Mael GUERIN (1):
USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
Marek Szyprowski (1):
zynq_fpga: use sgtable-based scatterlist wrappers
Marek Vasut (1):
usb: renesas-xhci: Fix External ROM access timeouts
Mario Limonciello (2):
drm/amd: Restore cached power limit during resume
drm/amd/display: Avoid a NULL pointer dereference
Masami Hiramatsu (Google) (1):
tracing: fprobe-event: Sanitize wildcard for fprobe event name
Mathis Foerst (1):
media: mt9m114: Fix deadlock in get_frame_interval/set_frame_interval
Matthieu Baerts (NGI0) (2):
mptcp: pm: kernel: flush: do not reset ADD_ADDR limit
selftests: mptcp: pm: check flush doesn't reset limits
Miao Li (1):
usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
Miaoqian Lin (1):
most: core: Drop device reference after usage in get_channel()
Michael Walle (1):
mtd: spi-nor: Fix spi_nor_try_unlock_all()
Michal Suchanek (1):
powerpc/boot: Fix build with gcc 15
Michel Dänzer (1):
drm/amd/display: Add primary plane to commits for correct VRR handling
Miguel Ojeda (1):
rust: alloc: fix `rusttest` by providing `Cmalloc::aligned_layout` too
Mike Christie (1):
scsi: core: Fix command pass through retry regression
Minhong He (1):
ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
Muhammad Usama Anjum (1):
ASoC: SOF: amd: acp-loader: Use GFP_KERNEL for DMA allocations in resume context
Myrrh Periwinkle (2):
vt: keyboard: Don't process Unicode characters in K_OFF mode
vt: defkeymap: Map keycodes above 127 to K_HOLE
Namjae Jeon (1):
ksmbd: extend the connection limiting mechanism to support IPv6
Naohiro Aota (3):
btrfs: zoned: fix write time activation failure for metadata block group
btrfs: zoned: requeue to unused block group list if zone finish failed
btrfs: subpage: keep TOWRITE tag until folio is cleaned
Nathan Chancellor (3):
usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
drm/amdgpu: Initialize data to NULL in imu_v12_0_program_rlc_ram()
NeilBrown (1):
ovl: use I_MUTEX_PARENT when locking parent in ovl_create_temp()
Nicolas Dufresne (1):
media: verisilicon: Fix AV1 decoder clock frequency
Nicolin Chen (1):
iommu/arm-smmu-v3: Fix smmu_domain->nr_ats_masters decrement
Nitin Gote (1):
iosys-map: Fix undefined behavior in iosys_map_clear()
Ojaswin Mujoo (2):
ext4: fix fsmap end of range reporting with bigalloc
ext4: fix reserved gdt blocks handling in fsmap
Oren Sidi (1):
net/mlx5: Add IFC bits and enums for buf_ownership
Parthiban Veerasooran (2):
microchip: lan865x: fix missing netif_start_queue() call on device open
microchip: lan865x: fix missing Timer Increment config for Rev.B0/B1
Pauli Virtanen (1):
Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established
Peter Griffin (1):
arm64: dts: exynos: gs101: ufs: add dma-coherent property
Peter Oberparleiter (3):
s390/sclp: Fix SCCB present check
s390/hypfs: Avoid unnecessary ioctl registration in debugfs
s390/hypfs: Enable limited access during lockdown
Peter Shkenev (1):
drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities
Phillip Lougher (1):
squashfs: fix memory leak in squashfs_fill_super
Pu Lehui (1):
tracing: Limit access to parser->buffer when trace_get_user failed
Qingfang Deng (2):
net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path
ppp: fix race conditions in ppp_fill_forward_path
Rafael J. Wysocki (2):
PM: runtime: Take active children into account in pm_runtime_get_if_in_use()
cpuidle: governors: menu: Avoid selecting states with too much latency
Randy Dunlap (1):
parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit compilers
Ranjan Kumar (3):
scsi: mpi3mr: Fix race between config read submit and interrupt completion
scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers
scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems
Ricardo Ribalda (2):
media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
media: venus: venc: Clamp param smaller than 1fps and bigger than 240
Richard Zhu (4):
PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4 in epc_features
PCI: imx6: Remove apps_reset toggling from imx_pcie_{assert/deassert}_core_reset
PCI: imx6: Delay link start until configfs 'start' written
PCI: imx6: Add IMX8MQ_EP third 64-bit BAR in epc_features
Sakari Ailus (2):
media: ipu6: isys: Use correct pads for xlate_streams()
media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
Salah Triki (1):
iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
Sebastian Andrzej Siewior (1):
kcov, usb: Don't disable interrupts in kcov_remote_start_usb_softirq()
Sebastian Reichel (1):
usb: typec: fusb302: cache PD RX state
Selvarasu Ganesan (1):
usb: dwc3: Remove WARN_ON for device endpoint command timeouts
SeongJae Park (1):
mm/damon/ops-common: ignore migration request to invalid nodes
Sergey Shtylyov (1):
Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync()
Shahar Shitrit (1):
net/mlx5: Relocate function declarations from port.h to mlx5_core.h
Simon Richter (1):
Mark xe driver as BROKEN if kernel page size is not 4kB
Siyang Liu (1):
drm/amd/display: fix a Null pointer dereference vulnerability
Srinivas Pandruvada (1):
platform/x86/intel-uncore-freq: Check write blocked for ELC
Stefan Metzmacher (1):
smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()
Stefan Wahren (1):
spi: spi-fsl-lpspi: Clamp too high speed_hz
Steven Rostedt (2):
ftrace: Also allocate and copy hash for reading of filter files
tracing: Remove unneeded goto out logic
Suraj Gupta (1):
net: xilinx: axienet: Fix RX skb ring management in DMAengine mode
Takashi Iwai (1):
ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
Theodore Ts'o (1):
ext4: don't try to clear the orphan_present feature block device is r/o
Thomas Fourier (2):
mtd: rawnand: fsmc: Add missing check after DMA map
mtd: rawnand: renesas: Add missing check after DMA map
Thomas Weißschuh (1):
kbuild: userprogs: use correct linker when mixing clang and GNU ld
Thomas Zimmermann (3):
drm/format-helper: Move helpers for pixel conversion to header file
drm/format-helper: Add generic conversion to 32-bit formats
drm/tests: Do not use drm_fb_blit() in format-helper tests
Thorsten Blum (3):
accel/habanalabs/gaudi2: Use kvfree() for memory allocated with kvcalloc()
cdx: Fix off-by-one error in cdx_rpmsg_probe()
usb: storage: realtek_cr: Use correct byte order for bcs->Residue
Tianxiang Peng (1):
x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
Tim Harvey (1):
hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
Timur Kristóf (7):
drm/amd/display: Don't overwrite dce60_clk_mgr
drm/amd/display: Don't overclock DCE 6 by 15%
drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
drm/amd/display: Don't print errors for nonexistent connectors
Tom Chung (1):
drm/amd/display: Fix Xorg desktop unresponsive on Replay panel
Tom Lendacky (1):
x86/sev: Ensure SVSM reserved fields in a page validation entry are initialized to zero
Tristram Ha (1):
net: dsa: microchip: Fix KSZ9477 HSR port setup issue
Trond Myklebust (1):
NFS: Fix a race when updating an existing write
Tzung-Bi Shih (1):
platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
Uwe Kleine-König (2):
pwm: mediatek: Handle hardware enable and clock enable separately
pwm: mediatek: Fix duty and period setting
ValdikSS (1):
igc: fix disabling L1.2 PCI-E link substate on I226 on init
Vedang Nagar (1):
media: venus: Add a check for packet size after reading from shared memory
Victor Shih (3):
mmc: sdhci-pci-gli: Add a new function to simplify the code
mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER
mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
Vladimir Zapolskiy (1):
media: qcom: camss: cleanup media device allocated resource on error path
Waiman Long (2):
cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
cgroup/cpuset: Fix a partition error with CPU hotplug
Wang Liang (1):
net: bridge: fix soft lockup in br_multicast_query_expired()
Weitao Wang (1):
usb: xhci: Fix slot_id resource race conflict
Will Deacon (2):
vsock/virtio: Validate length in packet header before skb_put()
vhost/vsock: Avoid allocating arbitrarily-sized SKBs
William Liu (2):
net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
Xaver Hugl (1):
amdgpu/amdgpu_discovery: increase timeout limit for IFWI init
Xu Yang (1):
usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test
Xu Yilun (1):
fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
Yang Li (1):
Bluetooth: hci_sync: Prevent unintended PA sync when SID is 0xFF
Ye Bin (1):
fs/buffer: fix use-after-free when call bh_read() helper
Youssef Samir (1):
bus: mhi: host: Detect events pointing to unexpected TREs
Yuichiro Tsuji (1):
net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
Yunhui Cui (1):
serial: 8250: fix panic due to PSLVERR
Zenm Chen (1):
USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
Zhang Shurong (1):
media: ov2659: Fix memory leaks in ov2659_probe()
Zhang Yi (1):
ext4: fix hole length calculation overflow in non-extent inodes
Zhu Yanjun (1):
RDMA/rxe: Flush delayed SKBs while releasing RXE resources
Ziyan Xu (1):
ksmbd: fix refcount leak causing resource not released
wenglianfa (1):
RDMA/hns: Fix querying wrong SCC context for DIP algorithm
3 weeks, 2 days
- 1
- 1
Linux 6.6.103
by Greg Kroah-Hartman
I'm announcing the release of the 6.6.103 kernel.
All users of the 6.6 kernel series must upgrade.
The updated 6.6.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.6.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/devicetree/bindings/display/sprd/sprd,sharkl3-dpu.yaml | 2
Documentation/devicetree/bindings/display/sprd/sprd,sharkl3-dsi-host.yaml | 2
Documentation/filesystems/fscrypt.rst | 37 -
Documentation/firmware-guide/acpi/i2c-muxes.rst | 8
Documentation/networking/bonding.rst | 12
Documentation/networking/mptcp-sysctl.rst | 2
Documentation/power/runtime_pm.rst | 5
Makefile | 4
arch/arm/include/asm/topology.h | 1
arch/arm/mach-rockchip/platsmp.c | 15
arch/arm/mach-tegra/reset.c | 2
arch/arm64/boot/dts/ti/k3-am62-main.dtsi | 1
arch/arm64/boot/dts/ti/k3-am62-verdin.dtsi | 12
arch/arm64/boot/dts/ti/k3-am62a7-sk.dts | 4
arch/arm64/boot/dts/ti/k3-pinctrl.h | 15
arch/arm64/include/asm/acpi.h | 2
arch/arm64/include/asm/topology.h | 1
arch/arm64/kernel/fpsimd.c | 4
arch/arm64/kernel/topology.c | 26
arch/arm64/kernel/traps.c | 1
arch/arm64/mm/fault.c | 1
arch/arm64/mm/ptdump_debugfs.c | 3
arch/loongarch/kernel/module-sections.c | 36 -
arch/loongarch/net/bpf_jit.c | 21
arch/m68k/kernel/head.S | 31
arch/mips/crypto/chacha-core.S | 20
arch/mips/include/asm/vpe.h | 8
arch/mips/kernel/process.c | 16
arch/mips/lantiq/falcon/sysctrl.c | 23
arch/parisc/Makefile | 6
arch/parisc/include/asm/pgtable.h | 7
arch/parisc/include/asm/special_insns.h | 28
arch/parisc/include/asm/uaccess.h | 21
arch/parisc/kernel/cache.c | 6
arch/parisc/kernel/entry.S | 17
arch/parisc/kernel/syscall.S | 30
arch/parisc/lib/memcpy.c | 19
arch/parisc/mm/fault.c | 4
arch/powerpc/boot/Makefile | 1
arch/powerpc/include/asm/floppy.h | 5
arch/powerpc/platforms/512x/mpc512x_lpbfifo.c | 6
arch/riscv/include/asm/topology.h | 1
arch/s390/hypfs/hypfs_dbfs.c | 19
arch/s390/include/asm/timex.h | 13
arch/s390/kernel/time.c | 2
arch/s390/mm/dump_pagetables.c | 2
arch/s390/mm/pgalloc.c | 5
arch/um/include/asm/thread_info.h | 4
arch/um/kernel/process.c | 20
arch/x86/include/asm/kvm-x86-ops.h | 2
arch/x86/include/asm/kvm_host.h | 22
arch/x86/include/asm/msr-index.h | 1
arch/x86/include/asm/xen/hypercall.h | 5
arch/x86/kernel/cpu/bugs.c | 5
arch/x86/kernel/cpu/hygon.c | 3
arch/x86/kvm/hyperv.c | 3
arch/x86/kvm/lapic.c | 19
arch/x86/kvm/lapic.h | 1
arch/x86/kvm/svm/svm.c | 42 -
arch/x86/kvm/svm/vmenter.S | 9
arch/x86/kvm/trace.h | 9
arch/x86/kvm/vmx/nested.c | 26
arch/x86/kvm/vmx/pmu_intel.c | 8
arch/x86/kvm/vmx/vmx.c | 164 ++--
arch/x86/kvm/vmx/vmx.h | 31
arch/x86/kvm/x86.c | 46 -
block/blk-core.c | 26
block/blk-settings.c | 2
crypto/jitterentropy-kcapi.c | 9
drivers/acpi/acpi_processor.c | 2
drivers/acpi/apei/ghes.c | 13
drivers/acpi/pfr_update.c | 2
drivers/acpi/prmt.c | 26
drivers/acpi/processor_perflib.c | 11
drivers/ata/Kconfig | 35
drivers/ata/libata-sata.c | 5
drivers/ata/libata-scsi.c | 58 -
drivers/base/arch_topology.c | 69 +
drivers/base/power/runtime.c | 59 +
drivers/block/drbd/drbd_receiver.c | 6
drivers/block/loop.c | 38 -
drivers/block/sunvdc.c | 4
drivers/bus/mhi/host/boot.c | 8
drivers/bus/mhi/host/internal.h | 4
drivers/bus/mhi/host/main.c | 12
drivers/cdx/controller/cdx_rpmsg.c | 3
drivers/char/ipmi/ipmi_msghandler.c | 8
drivers/char/ipmi/ipmi_watchdog.c | 59 +
drivers/char/misc.c | 4
drivers/clk/qcom/gcc-ipq5018.c | 2
drivers/clk/tegra/clk-periph.c | 4
drivers/comedi/comedi_fops.c | 36 -
drivers/comedi/comedi_internal.h | 1
drivers/comedi/drivers.c | 36 -
drivers/comedi/drivers/pcl726.c | 3
drivers/cpufreq/armada-8k-cpufreq.c | 2
drivers/cpufreq/cppc_cpufreq.c | 2
drivers/cpufreq/cpufreq.c | 12
drivers/cpuidle/governors/menu.c | 96 --
drivers/crypto/hisilicon/hpre/hpre_crypto.c | 8
drivers/crypto/intel/qat/qat_common/adf_common_drv.h | 1
drivers/crypto/intel/qat/qat_common/adf_init.c | 1
drivers/crypto/intel/qat/qat_common/adf_isr.c | 5
drivers/crypto/intel/qat/qat_common/qat_algs.c | 12
drivers/crypto/marvell/octeontx2/otx2_cptpf_ucode.c | 16
drivers/devfreq/governor_userspace.c | 6
drivers/dma/stm32-dma.c | 2
drivers/edac/synopsys_edac.c | 97 +-
drivers/firmware/tegra/Kconfig | 5
drivers/fpga/zynq-fpga.c | 10
drivers/gpio/gpio-mlxbf2.c | 2
drivers/gpio/gpio-mlxbf3.c | 54 -
drivers/gpio/gpio-tps65912.c | 7
drivers/gpio/gpio-virtio.c | 9
drivers/gpio/gpio-wcd934x.c | 7
drivers/gpu/drm/amd/amdgpu/amdgpu_csa.c | 4
drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 6
drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c | 57 -
drivers/gpu/drm/amd/amdkfd/kfd_module.c | 2
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 6
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c | 9
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_psr.c | 6
drivers/gpu/drm/amd/display/dc/bios/command_table.c | 2
drivers/gpu/drm/amd/display/dc/clk_mgr/clk_mgr.c | 1
drivers/gpu/drm/amd/display/dc/clk_mgr/dce100/dce_clk_mgr.c | 2
drivers/gpu/drm/amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 40 -
drivers/gpu/drm/amd/display/dc/clk_mgr/dce60/dce60_clk_mgr.c | 31
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 11
drivers/gpu/drm/amd/display/dc/link/link_dpms.c | 3
drivers/gpu/drm/amd/display/modules/hdcp/hdcp_psp.c | 3
drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 6
drivers/gpu/drm/amd/pm/swsmu/smu11/vangogh_ppt.c | 37 -
drivers/gpu/drm/display/drm_dp_helper.c | 2
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 4
drivers/gpu/drm/i915/intel_runtime_pm.c | 5
drivers/gpu/drm/msm/msm_gem.c | 3
drivers/gpu/drm/msm/msm_gem.h | 6
drivers/gpu/drm/nouveau/nvif/vmm.c | 3
drivers/gpu/drm/renesas/rcar-du/rzg2l_mipi_dsi.c | 3
drivers/gpu/drm/ttm/ttm_pool.c | 8
drivers/gpu/drm/ttm/ttm_resource.c | 3
drivers/hid/hid-apple.c | 13
drivers/hid/hid-magicmouse.c | 56 +
drivers/hwmon/emc2305.c | 10
drivers/hwmon/gsc-hwmon.c | 4
drivers/i2c/i2c-core-acpi.c | 1
drivers/i3c/internals.h | 1
drivers/i3c/master.c | 4
drivers/idle/intel_idle.c | 2
drivers/iio/adc/ad7768-1.c | 23
drivers/iio/adc/ad_sigma_delta.c | 6
drivers/iio/imu/bno055/bno055.c | 11
drivers/iio/imu/inv_icm42600/inv_icm42600.h | 8
drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 33
drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 22
drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h | 10
drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 6
drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 43 -
drivers/iio/imu/inv_icm42600/inv_icm42600_temp.c | 12
drivers/iio/light/as73211.c | 2
drivers/iio/pressure/bmp280-core.c | 9
drivers/iio/proximity/isl29501.c | 16
drivers/iio/temperature/maxim_thermocouple.c | 26
drivers/infiniband/core/nldev.c | 22
drivers/infiniband/hw/bnxt_re/ib_verbs.c | 8
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 30
drivers/infiniband/hw/bnxt_re/qplib_fp.h | 2
drivers/infiniband/hw/bnxt_re/qplib_res.c | 2
drivers/infiniband/hw/erdma/erdma_verbs.c | 4
drivers/infiniband/hw/hfi1/affinity.c | 44 -
drivers/infiniband/sw/siw/siw_qp_tx.c | 5
drivers/iommu/amd/init.c | 4
drivers/iommu/arm/arm-smmu/arm-smmu-qcom.c | 1
drivers/iommu/iommufd/io_pagetable.c | 48 -
drivers/leds/flash/leds-qcom-flash.c | 178 ++++
drivers/leds/leds-lp50xx.c | 11
drivers/leds/trigger/ledtrig-netdev.c | 16
drivers/md/dm-ps-historical-service-time.c | 4
drivers/md/dm-ps-queue-length.c | 4
drivers/md/dm-ps-round-robin.c | 4
drivers/md/dm-ps-service-time.c | 4
drivers/md/dm-table.c | 10
drivers/md/dm-zoned-target.c | 2
drivers/media/cec/usb/rainshadow/rainshadow-cec.c | 3
drivers/media/dvb-frontends/dib7000p.c | 8
drivers/media/i2c/ccs/ccs-core.c | 2
drivers/media/i2c/hi556.c | 26
drivers/media/i2c/ov2659.c | 3
drivers/media/i2c/tc358743.c | 86 +-
drivers/media/pci/intel/ivsc/mei_ace.c | 2
drivers/media/pci/intel/ivsc/mei_csi.c | 2
drivers/media/platform/qcom/camss/camss.c | 4
drivers/media/platform/qcom/venus/core.c | 8
drivers/media/platform/qcom/venus/core.h | 2
drivers/media/platform/qcom/venus/hfi_msgs.c | 83 +-
drivers/media/platform/qcom/venus/hfi_venus.c | 5
drivers/media/platform/qcom/venus/vdec.c | 5
drivers/media/platform/qcom/venus/venc.c | 5
drivers/media/platform/verisilicon/rockchip_vpu_hw.c | 9
drivers/media/test-drivers/vivid/vivid-ctrls.c | 3
drivers/media/test-drivers/vivid/vivid-vid-cap.c | 4
drivers/media/usb/gspca/vicam.c | 10
drivers/media/usb/hdpvr/hdpvr-i2c.c | 6
drivers/media/usb/usbtv/usbtv-video.c | 4
drivers/media/usb/uvc/uvc_driver.c | 3
drivers/media/usb/uvc/uvc_video.c | 21
drivers/media/v4l2-core/v4l2-common.c | 8
drivers/media/v4l2-core/v4l2-ctrls-core.c | 1
drivers/memstick/core/memstick.c | 1
drivers/memstick/host/rtsx_usb_ms.c | 1
drivers/mfd/axp20x.c | 3
drivers/misc/cardreader/rtsx_usb.c | 16
drivers/misc/mei/bus.c | 6
drivers/mmc/host/rtsx_usb_sdmmc.c | 4
drivers/mmc/host/sdhci-msm.c | 14
drivers/mmc/host/sdhci-pci-gli.c | 35
drivers/most/core.c | 2
drivers/mtd/nand/raw/fsmc_nand.c | 2
drivers/mtd/nand/raw/renesas-nand-controller.c | 6
drivers/mtd/nand/spi/core.c | 5
drivers/mtd/spi-nor/swp.c | 19
drivers/net/bonding/bond_3ad.c | 224 +++++-
drivers/net/bonding/bond_main.c | 1
drivers/net/bonding/bond_netlink.c | 16
drivers/net/bonding/bond_options.c | 29
drivers/net/dsa/b53/b53_common.c | 65 +
drivers/net/dsa/b53/b53_regs.h | 2
drivers/net/ethernet/agere/et131x.c | 36 +
drivers/net/ethernet/aquantia/atlantic/aq_hw.h | 2
drivers/net/ethernet/aquantia/atlantic/hw_atl2/hw_atl2_utils_fw.c | 39 +
drivers/net/ethernet/atheros/ag71xx.c | 9
drivers/net/ethernet/cavium/thunder/thunder_bgx.c | 4
drivers/net/ethernet/emulex/benet/be_main.c | 8
drivers/net/ethernet/freescale/dpaa/dpaa_eth.c | 2
drivers/net/ethernet/freescale/dpaa/dpaa_ethtool.c | 4
drivers/net/ethernet/freescale/enetc/enetc_pf.c | 14
drivers/net/ethernet/freescale/fec_main.c | 34
drivers/net/ethernet/freescale/gianfar_ethtool.c | 4
drivers/net/ethernet/google/gve/gve_adminq.c | 1
drivers/net/ethernet/google/gve/gve_main.c | 2
drivers/net/ethernet/intel/igc/igc_main.c | 14
drivers/net/ethernet/intel/ixgbe/ixgbe_xsk.c | 4
drivers/net/ethernet/marvell/octeontx2/af/rvu_npc_fs.c | 4
drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 2
drivers/net/ethernet/mediatek/mtk_wed.c | 1
drivers/net/ethernet/mellanox/mlx5/core/en/port_buffer.c | 18
drivers/net/ethernet/mellanox/mlx5/core/en/qos.c | 2
drivers/net/ethernet/mellanox/mlx5/core/esw/devlink_port.c | 4
drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2
drivers/net/ethernet/mellanox/mlxsw/trap.h | 1
drivers/net/ethernet/pensando/ionic/ionic_lif.c | 7
drivers/net/ethernet/ti/icssg/icss_iep.c | 26
drivers/net/hyperv/hyperv_net.h | 3
drivers/net/hyperv/netvsc_drv.c | 29
drivers/net/ipa/ipa_smp2p.c | 2
drivers/net/phy/micrel.c | 12
drivers/net/phy/mscc/mscc.h | 12
drivers/net/phy/mscc/mscc_main.c | 12
drivers/net/phy/mscc/mscc_ptp.c | 49 +
drivers/net/phy/smsc.c | 1
drivers/net/ppp/ppp_generic.c | 17
drivers/net/thunderbolt/main.c | 21
drivers/net/usb/asix_devices.c | 1
drivers/net/usb/cdc_ncm.c | 20
drivers/net/wireless/ath/ath11k/ce.c | 3
drivers/net/wireless/ath/ath11k/dp_rx.c | 3
drivers/net/wireless/ath/ath11k/hal.c | 33
drivers/net/wireless/ath/ath12k/ce.c | 3
drivers/net/wireless/ath/ath12k/dp.c | 3
drivers/net/wireless/ath/ath12k/hal.c | 38 -
drivers/net/wireless/ath/ath12k/hw.c | 2
drivers/net/wireless/ath/ath12k/wmi.c | 5
drivers/net/wireless/broadcom/brcm80211/brcmsmac/phy/phy_lcn.c | 2
drivers/net/wireless/intel/iwlegacy/4965-mac.c | 5
drivers/net/wireless/intel/iwlwifi/dvm/rs.c | 2
drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 7
drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 2
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 2
drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 25
drivers/net/wireless/realtek/rtlwifi/pci.c | 23
drivers/net/wireless/realtek/rtw89/core.c | 3
drivers/net/wireless/realtek/rtw89/fw.c | 9
drivers/net/wireless/realtek/rtw89/fw.h | 2
drivers/net/wireless/realtek/rtw89/mac.c | 19
drivers/net/wireless/realtek/rtw89/reg.h | 1
drivers/net/xen-netfront.c | 5
drivers/nvme/host/pci.c | 24
drivers/pci/controller/dwc/pci-imx6.c | 7
drivers/pci/controller/pcie-rockchip-host.c | 49 -
drivers/pci/controller/pcie-rockchip.h | 11
drivers/pci/endpoint/pci-ep-cfs.c | 1
drivers/pci/endpoint/pci-epf-core.c | 2
drivers/pci/pci-acpi.c | 4
drivers/pci/pci.c | 10
drivers/pci/probe.c | 2
drivers/perf/cxl_pmu.c | 2
drivers/phy/qualcomm/phy-qcom-m31.c | 14
drivers/phy/rockchip/phy-rockchip-pcie.c | 3
drivers/pinctrl/stm32/pinctrl-stm32.c | 1
drivers/platform/chrome/cros_ec.c | 3
drivers/platform/chrome/cros_ec_typec.c | 4
drivers/platform/x86/amd/pmc/pmc-quirks.c | 9
drivers/platform/x86/thinkpad_acpi.c | 4
drivers/pmdomain/imx/imx8m-blk-ctrl.c | 10
drivers/power/supply/qcom_battmgr.c | 2
drivers/pps/clients/pps-gpio.c | 5
drivers/ptp/ptp_clock.c | 2
drivers/ptp/ptp_private.h | 5
drivers/ptp/ptp_vclock.c | 7
drivers/pwm/pwm-imx-tpm.c | 9
drivers/pwm/pwm-mediatek.c | 71 +
drivers/remoteproc/imx_rproc.c | 4
drivers/reset/Kconfig | 10
drivers/rtc/rtc-ds1307.c | 15
drivers/s390/char/sclp.c | 11
drivers/scsi/aacraid/comminit.c | 3
drivers/scsi/bfa/bfad_im.c | 1
drivers/scsi/libiscsi.c | 3
drivers/scsi/lpfc/lpfc_debugfs.c | 1
drivers/scsi/lpfc/lpfc_scsi.c | 4
drivers/scsi/mpi3mr/mpi3mr.h | 6
drivers/scsi/mpi3mr/mpi3mr_fw.c | 17
drivers/scsi/mpi3mr/mpi3mr_os.c | 22
drivers/scsi/mpt3sas/mpt3sas_scsih.c | 19
drivers/scsi/qla4xxx/ql4_os.c | 2
drivers/scsi/scsi_scan.c | 2
drivers/scsi/scsi_transport_sas.c | 60 +
drivers/soc/qcom/mdt_loader.c | 53 +
drivers/soc/qcom/rpmh-rsc.c | 2
drivers/soc/tegra/pmc.c | 51 -
drivers/soundwire/amd_manager.c | 6
drivers/soundwire/bus.c | 6
drivers/spi/spi-fsl-lpspi.c | 8
drivers/staging/media/imx/imx-media-csc-scaler.c | 2
drivers/target/target_core_fabric_lib.c | 63 +
drivers/target/target_core_internal.h | 4
drivers/target/target_core_pr.c | 18
drivers/thermal/qcom/qcom-spmi-temp-alarm.c | 43 -
drivers/thermal/thermal_sysfs.c | 9
drivers/thunderbolt/domain.c | 2
drivers/tty/serial/8250/8250_port.c | 3
drivers/tty/vt/defkeymap.c_shipped | 112 +++
drivers/tty/vt/keyboard.c | 2
drivers/ufs/core/ufshcd-priv.h | 2
drivers/ufs/host/ufs-exynos.c | 4
drivers/ufs/host/ufshcd-pci.c | 42 +
drivers/usb/atm/cxacru.c | 106 +-
drivers/usb/class/cdc-acm.c | 11
drivers/usb/core/config.c | 10
drivers/usb/core/hcd.c | 8
drivers/usb/core/quirks.c | 1
drivers/usb/core/urb.c | 2
drivers/usb/dwc3/dwc3-imx8mp.c | 6
drivers/usb/dwc3/dwc3-meson-g12a.c | 3
drivers/usb/dwc3/dwc3-pci.c | 2
drivers/usb/dwc3/ep0.c | 20
drivers/usb/dwc3/gadget.c | 19
drivers/usb/gadget/udc/renesas_usb3.c | 1
drivers/usb/host/xhci-hub.c | 3
drivers/usb/host/xhci-mem.c | 24
drivers/usb/host/xhci-pci-renesas.c | 7
drivers/usb/host/xhci-ring.c | 19
drivers/usb/host/xhci.c | 27
drivers/usb/host/xhci.h | 3
drivers/usb/musb/omap2430.c | 14
drivers/usb/storage/realtek_cr.c | 2
drivers/usb/storage/unusual_devs.h | 29
drivers/usb/typec/mux/intel_pmc_mux.c | 2
drivers/usb/typec/tcpm/fusb302.c | 8
drivers/usb/typec/tcpm/maxim_contaminant.c | 54 +
drivers/usb/typec/tcpm/tcpci_maxim.h | 1
drivers/usb/typec/ucsi/psy.c | 2
drivers/usb/typec/ucsi/ucsi.c | 1
drivers/usb/typec/ucsi/ucsi.h | 7
drivers/vfio/pci/mlx5/cmd.c | 4
drivers/vfio/vfio_iommu_type1.c | 7
drivers/vhost/vhost.c | 3
drivers/vhost/vsock.c | 6
drivers/video/console/vgacon.c | 2
drivers/video/fbdev/core/fbcon.c | 9
drivers/video/fbdev/core/fbmem.c | 3
drivers/virt/coco/efi_secret/efi_secret.c | 10
drivers/watchdog/dw_wdt.c | 2
drivers/watchdog/iTCO_wdt.c | 6
drivers/watchdog/sbsa_gwdt.c | 50 +
fs/btrfs/backref.c | 6
fs/btrfs/block-group.c | 61 +
fs/btrfs/block-group.h | 11
fs/btrfs/block-rsv.c | 2
fs/btrfs/block-rsv.h | 2
fs/btrfs/btrfs_inode.h | 3
fs/btrfs/ctree.c | 24
fs/btrfs/ctree.h | 6
fs/btrfs/delayed-inode.c | 12
fs/btrfs/discard.c | 4
fs/btrfs/extent-tree.c | 33
fs/btrfs/file-item.c | 4
fs/btrfs/file-item.h | 2
fs/btrfs/free-space-tree.c | 17
fs/btrfs/inode-item.c | 10
fs/btrfs/inode-item.h | 4
fs/btrfs/inode.c | 26
fs/btrfs/qgroup.c | 31
fs/btrfs/relocation.c | 19
fs/btrfs/send.c | 359 +++++-----
fs/btrfs/space-info.c | 17
fs/btrfs/space-info.h | 6
fs/btrfs/tree-log.c | 72 +-
fs/btrfs/tree-mod-log.c | 14
fs/btrfs/tree-mod-log.h | 6
fs/btrfs/zoned.c | 20
fs/btrfs/zoned.h | 4
fs/buffer.c | 2
fs/crypto/fscrypt_private.h | 16
fs/crypto/hkdf.c | 2
fs/crypto/keysetup.c | 3
fs/crypto/keysetup_v1.c | 3
fs/eventpoll.c | 60 +
fs/exfat/dir.c | 12
fs/exfat/fatent.c | 10
fs/exfat/namei.c | 5
fs/exfat/super.c | 32
fs/ext2/inode.c | 12
fs/ext4/fsmap.c | 23
fs/ext4/indirect.c | 4
fs/ext4/inline.c | 19
fs/ext4/inode.c | 2
fs/ext4/mballoc.c | 67 -
fs/ext4/orphan.c | 5
fs/ext4/super.c | 8
fs/f2fs/file.c | 24
fs/f2fs/node.c | 10
fs/file.c | 90 +-
fs/gfs2/meta_io.c | 2
fs/hfs/bfind.c | 3
fs/hfs/bnode.c | 93 ++
fs/hfs/btree.c | 57 +
fs/hfs/extent.c | 2
fs/hfs/hfs_fs.h | 1
fs/hfsplus/bnode.c | 92 ++
fs/hfsplus/unicode.c | 7
fs/hfsplus/xattr.c | 6
fs/hugetlbfs/inode.c | 2
fs/jbd2/checkpoint.c | 1
fs/jfs/file.c | 3
fs/jfs/inode.c | 2
fs/jfs/jfs_dmap.c | 6
fs/libfs.c | 4
fs/namespace.c | 34
fs/nfs/blocklayout/blocklayout.c | 4
fs/nfs/blocklayout/dev.c | 5
fs/nfs/blocklayout/extent_tree.c | 20
fs/nfs/client.c | 44 +
fs/nfs/internal.h | 2
fs/nfs/nfs4client.c | 20
fs/nfs/nfs4proc.c | 2
fs/nfs/pnfs.c | 11
fs/nfsd/nfs4state.c | 34
fs/ntfs3/dir.c | 3
fs/ntfs3/inode.c | 31
fs/orangefs/orangefs-debugfs.c | 2
fs/smb/client/cifssmb.c | 10
fs/smb/client/connect.c | 10
fs/smb/client/sess.c | 9
fs/smb/client/smb2ops.c | 11
fs/smb/client/smbdirect.c | 24
fs/smb/server/connection.c | 3
fs/smb/server/connection.h | 7
fs/smb/server/oplock.c | 13
fs/smb/server/smb2pdu.c | 16
fs/smb/server/transport_rdma.c | 5
fs/smb/server/transport_rdma.h | 4
fs/smb/server/transport_tcp.c | 26
fs/squashfs/super.c | 14
fs/tracefs/inode.c | 11
fs/udf/super.c | 13
fs/xfs/xfs_itable.c | 6
include/linux/arch_topology.h | 8
include/linux/blk_types.h | 6
include/linux/compiler.h | 8
include/linux/cpufreq.h | 1
include/linux/energy_model.h | 6
include/linux/fs.h | 4
include/linux/hypervisor.h | 3
include/linux/if_vlan.h | 21
include/linux/iosys-map.h | 7
include/linux/memfd.h | 14
include/linux/mm.h | 82 +-
include/linux/pci.h | 10
include/linux/pm_runtime.h | 18
include/linux/sched/topology.h | 8
include/linux/skbuff.h | 8
include/linux/usb/cdc_ncm.h | 1
include/linux/virtio_vsock.h | 7
include/net/bond_3ad.h | 3
include/net/bond_options.h | 1
include/net/bonding.h | 23
include/net/cfg80211.h | 2
include/net/mac80211.h | 2
include/net/neighbour.h | 1
include/net/net_namespace.h | 16
include/net/sock.h | 1
include/trace/events/btrfs.h | 6
include/trace/events/thp.h | 2
include/uapi/linux/if_link.h | 1
include/uapi/linux/in6.h | 4
include/uapi/linux/io_uring.h | 2
include/uapi/linux/pfrut.h | 1
io_uring/net.c | 19
kernel/bpf/verifier.c | 3
kernel/cgroup/cpuset.c | 2
kernel/fork.c | 2
kernel/module/main.c | 10
kernel/power/console.c | 7
kernel/rcu/tree.c | 2
kernel/rcu/tree.h | 14
kernel/rcu/tree_plugin.h | 44 -
kernel/sched/cpufreq_schedutil.c | 30
kernel/sched/fair.c | 19
kernel/trace/ftrace.c | 19
kernel/trace/trace.c | 33
kernel/trace/trace.h | 10
mm/debug_vm_pgtable.c | 9
mm/filemap.c | 2
mm/kmemleak.c | 10
mm/madvise.c | 2
mm/memfd.c | 2
mm/memory-failure.c | 8
mm/mmap.c | 12
mm/ptdump.c | 2
mm/shmem.c | 2
net/bluetooth/hci_conn.c | 3
net/bluetooth/hci_event.c | 8
net/bluetooth/hci_sock.c | 2
net/bridge/br_multicast.c | 16
net/bridge/br_private.h | 2
net/core/dev.c | 12
net/core/neighbour.c | 12
net/core/net_namespace.c | 8
net/core/sock.c | 27
net/hsr/hsr_slave.c | 8
net/ipv4/netfilter/nf_reject_ipv4.c | 6
net/ipv4/route.c | 1
net/ipv4/udp_offload.c | 2
net/ipv6/addrconf.c | 7
net/ipv6/mcast.c | 11
net/ipv6/netfilter/nf_reject_ipv6.c | 5
net/ipv6/seg6_hmac.c | 6
net/mac80211/cfg.c | 12
net/mac80211/chan.c | 1
net/mac80211/mlme.c | 9
net/mac80211/rx.c | 12
net/mctp/af_mctp.c | 26
net/mptcp/options.c | 6
net/mptcp/pm_netlink.c | 19
net/mptcp/subflow.c | 5
net/ncsi/internal.h | 2
net/ncsi/ncsi-rsp.c | 1
net/netfilter/nf_conntrack_netlink.c | 24
net/netlink/af_netlink.c | 12
net/rds/tcp.c | 8
net/sched/sch_cake.c | 14
net/sched/sch_ets.c | 36 -
net/sched/sch_htb.c | 2
net/sctp/input.c | 2
net/smc/af_smc.c | 8
net/sunrpc/svcsock.c | 5
net/sunrpc/xprtsock.c | 8
net/tls/tls.h | 2
net/tls/tls_strp.c | 11
net/tls/tls_sw.c | 10
net/vmw_vsock/virtio_transport.c | 14
net/wireless/mlme.c | 3
net/xfrm/xfrm_state.c | 72 +-
scripts/kconfig/gconf.c | 8
scripts/kconfig/lxdialog/inputbox.c | 6
scripts/kconfig/lxdialog/menubox.c | 2
scripts/kconfig/nconf.c | 2
scripts/kconfig/nconf.gui.c | 1
security/apparmor/file.c | 6
security/apparmor/include/lib.h | 6
security/inode.c | 2
sound/core/pcm_native.c | 19
sound/hda/hdac_device.c | 2
sound/pci/hda/hda_codec.c | 42 -
sound/pci/hda/patch_ca0132.c | 2
sound/pci/hda/patch_realtek.c | 4
sound/pci/intel8x0.c | 2
sound/soc/codecs/hdac_hdmi.c | 10
sound/soc/codecs/rt5640.c | 5
sound/soc/fsl/fsl_sai.c | 20
sound/soc/intel/avs/core.c | 3
sound/soc/qcom/lpass-platform.c | 27
sound/soc/soc-core.c | 3
sound/soc/soc-dapm.c | 4
sound/usb/mixer_quirks.c | 14
sound/usb/stream.c | 25
sound/usb/validate.c | 14
tools/bpf/bpftool/main.c | 6
tools/include/nolibc/std.h | 4
tools/include/nolibc/types.h | 4
tools/include/uapi/linux/if_link.h | 1
tools/power/cpupower/utils/idle_monitor/mperf_monitor.c | 4
tools/scripts/Makefile.include | 4
tools/testing/ktest/ktest.pl | 5
tools/testing/selftests/arm64/fp/sve-ptrace.c | 3
tools/testing/selftests/bpf/prog_tests/user_ringbuf.c | 10
tools/testing/selftests/bpf/progs/verifier_unpriv.c | 2
tools/testing/selftests/ftrace/test.d/ftrace/func-filter-glob.tc | 2
tools/testing/selftests/futex/include/futextest.h | 11
tools/testing/selftests/memfd/memfd_test.c | 43 +
tools/testing/selftests/net/mptcp/pm_netlink.sh | 1
612 files changed, 6026 insertions(+), 2723 deletions(-)
Aahil Awatramani (1):
bonding: Add independent control state machine
Aakash Kumar S (1):
xfrm: Duplicate SPI Handling
Aaron Kling (1):
ARM: tegra: Use I/O memcpy to write to IRAM
Aaron Plattner (1):
watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition
Abel Vesa (1):
power: supply: qcom_battmgr: Add lithium-polymer entry
Aditya Garg (2):
HID: magicmouse: avoid setting up battery timer when not needed
HID: apple: avoid setting up battery timer for devices without battery
Adrian Hunter (1):
scsi: ufs: ufs-pci: Fix default runtime and system PM levels
Al Viro (5):
better lockdep annotations for simple_recursive_removal()
fix locking in efi_secret_unlink()
securityfs: don't pin dentries twice, once is enough...
use uniform permission checks for all mount propagation changes
alloc_fdtable(): change calling conventions.
Alex Deucher (1):
drm/amdgpu: update mmhub 3.0.1 client id mappings
Alex Guo (2):
media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
Alexander Kochetkov (1):
ARM: rockchip: fix kernel hang during smp initialization
Alexander Sverdlin (1):
arm64: dts: ti: k3-pinctrl: Enable Schmitt Trigger by default
Alexander Wilhelm (1):
bus: mhi: host: Fix endianness of BHI vector table
Alexey Klimov (1):
iommu/arm-smmu-qcom: Add SM6115 MDSS compatible
Alok Tiwari (6):
net: ti: icss-iep: Fix incorrect type for return value in extts_enable()
ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
be2net: Use correct byte order and format string for TCP seq and ack_seq
net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
perf/cxlpmu: Remove unintended newline from IRQ name format string
gve: Return error for unknown admin queue command
Amber Lin (1):
drm/amdkfd: Destroy KFD debugfs after destroy KFD wq
Amelie Delaunay (1):
dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs
Amir Mohammad Jahangirzad (1):
fs/orangefs: use snprintf() instead of sprintf()
Amit Sunil Dhamne (2):
usb: typec: maxim_contaminant: re-enable cc toggle if cc is open and port is clean
usb: typec: maxim_contaminant: disable low power mode when reading comparator values
Anantha Prabhu (1):
RDMA/bnxt_re: Fix to initialize the PBL array
Andreas Dilger (1):
ext4: check fast symlink for ea_inode correctly
Andrew Price (1):
gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops
André Draszik (1):
scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
Andy Shevchenko (2):
Documentation: ACPI: Fix parent device references
iio: imu: inv_icm42600: Convert to uXX and sXX integer types
Anshuman Khandual (1):
mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
Anthoine Bourgeois (1):
xen/netfront: Fix TX response spurious interrupts
Archana Patni (1):
scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers
Armen Ratner (1):
net/mlx5e: Preserve shared buffer capacity during headroom updates
Arnaud Lecomte (1):
jfs: upper bound check of tree index in dbAllocAG
Arnd Bergmann (1):
RDMA/core: reduce stack using in nldev_stat_get_doit()
Artem Sadovnikov (1):
vfio/mlx5: fix possible overflow in tracking max message size
Avraham Stern (1):
wifi: iwlwifi: mvm: fix scan request validation
Baihan Li (1):
drm/hisilicon/hibmc: fix the hibmc loaded failed bug
Baokun Li (4):
ext4: fix zombie groups in average fragment size lists
ext4: fix largest free orders lists corruption on mb_optimize_scan switch
jbd2: prevent softlockup in jbd2_log_do_checkpoint()
ext4: preserve SB_I_VERSION on remount
Bartosz Golaszewski (2):
gpio: wcd934x: check the return value of regmap_update_bits()
gpio: tps65912: check the return value of regmap_update_bits()
Benjamin Marzinski (1):
dm-table: fix checking for rq stackable devices
Benson Leung (1):
usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default
Bharat Bhushan (1):
crypto: octeontx2 - add timeout for load_fvc completion poll
Biju Das (1):
net: phy: micrel: Add ksz9131_resume()
Bingbu Cao (1):
media: hi556: correct the test pattern configuration
Bitterblue Smith (3):
wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB
wifi: rtw89: Fix rtw89_mac_power_switch() for USB
wifi: rtw89: Disable deep power saving for USB/SDIO
Bjorn Andersson (2):
soc: qcom: mdt_loader: Actually use the e_phoff
soc: qcom: mdt_loader: Ensure we don't read past the ELF header
Bjorn Helgaas (1):
mmc: sdhci-pci-gli: Use PCI AER definitions, not hard-coded values
Boris Burkov (1):
btrfs: fix ssd_spread overallocation
Boshi Yu (1):
RDMA/erdma: Fix ignored return value of init_kernel_qp
Breno Leitao (5):
ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
arm64: Mark kernel as tainted on SAE and SError panic
ptp: Use ratelimite for freerun error message
ipmi: Use dev_warn_ratelimited() for incorrect message warnings
mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
Buday Csaba (1):
net: phy: smsc: add proper reset flags for LAN8710A
Cezary Rojewski (1):
ASoC: Intel: avs: Fix uninitialized pointer error in probe()
Chao Gao (1):
KVM: nVMX: Defer SVI update to vmcs01 on EOI when L2 is active w/o VID
Chao Yu (1):
f2fs: fix to avoid out-of-boundary access in dnode page
Charles Keepax (1):
soundwire: Move handle_nested_irq outside of sdw_dev_lock
Cheick Traore (1):
pinctrl: stm32: Manage irq affinity settings
Chen Yu (1):
ACPI: pfr_update: Fix the driver update version check
Chen-Yu Tsai (1):
mfd: axp20x: Set explicit ID for AXP313 regulator
Chenyuan Yang (1):
drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
Chris Mason (1):
sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails
Christian Loehle (1):
cpuidle: menu: Remove iowait influence
Christoph Hellwig (2):
block: reject invalid operation in submit_bio_noacct
xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags
Christoph Paasch (1):
mptcp: drop skb if MPTCP skb extension allocation fails
Christophe Leroy (1):
ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
Christopher Eby (1):
ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks
Corey Minyard (1):
ipmi: Fix strcpy source and destination the same
Cristian Ciocaltea (1):
ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
Cynthia Huang (1):
selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
D. Wythe (1):
net/smc: fix UAF on smcsk after smc_listen_out()
Dai Ngo (1):
NFSD: detect mismatch of file handle and delegation stateid in OPEN op
Damien Le Moal (9):
ata: libata-sata: Disallow changing LPM state if not supported
scsi: mpt3sas: Correctly handle ATA device errors
scsi: mpi3mr: Correctly handle ATA device errors
ata: libata-scsi: Fix ata_to_sense_error() status handling
PCI: endpoint: Fix configfs group list head handling
PCI: endpoint: Fix configfs group removal on driver teardown
block: Make REQ_OP_ZONE_FINISH a write operation
ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
ata: libata-scsi: Return aborted command when missing sense and result TF
Dan Carpenter (5):
cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
media: gspca: Add bounds checking to firmware parser
soc: qcom: mdt_loader: Fix error return values in mdt_header_valid()
scsi: qla4xxx: Prevent a potential error pointer dereference
ALSA: usb-audio: Fix size validation in convert_chmap_v3()
Daniel Golle (1):
Revert "leds: trigger: netdev: Configure LED blink interval for HW offload"
Daniel Jurgens (1):
net/mlx5: Base ECVF devlink port attrs from 0
Dave Stevenson (3):
media: tc358743: Check I2C succeeded during probe
media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
media: tc358743: Increase FIFO trigger level to 374
David Bauer (1):
wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch
David Collins (1):
thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required
David Lechner (6):
iio: adc: ad_sigma_delta: don't overallocate scan buffer
iio: imu: bno055: fix OOB access of hw_xlate array
iio: adc: ad_sigma_delta: change to buffer predisable
iio: proximity: isl29501: fix buffered read on big-endian systems
iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read()
iio: imu: inv_icm42600: use = { } instead of memset()
David Sterba (3):
btrfs: move transaction aborts to the error site in add_block_group_free_space()
btrfs: open code timespec64 in struct btrfs_inode
btrfs: constify more pointer parameters
David Thompson (3):
gpio: mlxbf2: use platform_get_irq_optional()
Revert "gpio: mlxbf3: only get IRQ for device instance 0"
gpio: mlxbf3: use platform_get_irq_optional()
Davide Caratti (1):
net/sched: ets: use old 'nbands' while purging unused classes
Edward Adam Davis (2):
jfs: Regular file corruption check
comedi: pcl726: Prevent invalid irq number
Eliav Farber (1):
pps: clients: gpio: fix interrupt handling order in remove path
Emanuele Ghidoli (1):
arm64: dts: ti: k3-am62-verdin: Enable pull-ups on I2C buses
Emily Deng (1):
drm/ttm: Should to return the evict error
Eric Biggers (4):
thunderbolt: Fix copy+paste error in match_service_id()
lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
ipv6: sr: Fix MAC comparison to be constant-time
fscrypt: Don't use problematic non-inline crypto engines
Eric Dumazet (2):
net: better track kernel sockets lifetime
net_sched: sch_ets: implement lockless ets_dump()
Eric Work (1):
net: atlantic: add set_power to fw_ops for atl2 to fix wol
Evgeniy Harchenko (1):
ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
Fanhua Li (1):
drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor().
Fedor Pchelkin (1):
netlink: avoid infinite retry looping in netlink_unicast()
Fenglin Wu (1):
leds: flash: leds-qcom-flash: Limit LED current based on thermal condition
Filipe Manana (14):
btrfs: abort transaction during log replay if walk_log_tree() failed
btrfs: clear dirty status from extent buffer on error at insert_new_root()
btrfs: fix log tree replay failure due to file with 0 links and extents
btrfs: don't ignore inode missing when replaying log tree
btrfs: qgroup: fix race between quota disable and quota rescan ioctl
btrfs: always abort transaction on failure to add block group to free space tree
btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()
btrfs: send: factor out common logic when sending xattrs
btrfs: send: only use boolean variables at process_recorded_refs()
btrfs: send: add and use helper to rename current inode when processing refs
btrfs: send: keep the current inode's path cached
btrfs: send: avoid path allocation for the current inode when issuing commands
btrfs: send: use fallocate for hole punching with send stream v2
btrfs: send: make fs_path_len() inline and constify its argument
Finn Thain (1):
m68k: Fix lost column on framebuffer debug console
Florian Larysch (1):
net: phy: micrel: fix KSZ8081/KSZ8091 cable test
Florian Westphal (2):
netfilter: ctnetlink: fix refcount leak on table dump
netfilter: nf_reject: don't leak dst refcount for loopback packets
Florin Leotescu (1):
hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state
Frederic Weisbecker (1):
rcu: Fix racy re-initialization of irq_work causing hangs
Gabor Juhos (1):
mtd: spinand: propagate spinand_wait() errors from spinand_write_page()
Gabriel Totev (1):
apparmor: shift ouid when mediating hard links in userns
Gal Pressman (2):
net: vlan: Make is_vlan_dev() a stub when VLAN is not configured
net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
Gang Ba (1):
drm/amdgpu: Avoid extra evict-restore process.
Gautham R. Shenoy (1):
pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
Geliang Tang (2):
mptcp: remove duplicate sk_reset_timer call
mptcp: disable add_addr retransmission when timeout is 0
George Moussalem (1):
clk: qcom: ipq5018: keep XO clock always on
Gerald Schaefer (1):
s390/mm: Remove possible false-positive warning in pte_free_defer()
Geraldo Nascimento (3):
phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal
PCI: rockchip: Use standard PCIe definitions
PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining
Giovanni Cabiddu (2):
crypto: qat - lower priority for skcipher and aead algorithms
crypto: qat - flush misc workqueue during device shutdown
Greg Kroah-Hartman (1):
Linux 6.6.103
Gui-Dong Han (1):
media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
Haiyang Zhang (1):
hv_netvsc: Fix panic during namespace deletion with VF
Hangbin Liu (2):
bonding: update LACP activity flag after setting lacp_active
bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU
Hans Verkuil (1):
media: vivid: fix wrong pixel_array control size
Hans de Goede (2):
mei: bus: Check for still connected devices in mei_cl_bus_dev_release()
media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls
Haoran Jiang (1):
LoongArch: BPF: Fix jump offset calculation in tailcall
Haoxiang Li (1):
media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
Harald Mommer (1):
gpio: virtio: Fix config space reading.
Hari Chandrakanthan (1):
wifi: mac80211: fix rx link assignment for non-MLO stations
Hari Kalavakunta (1):
net: ncsi: Fix buffer overflow in fetching version id
Hariprasad Kelam (1):
Octeontx2-af: Skip overlap check for SPI field
Heikki Krogerus (1):
usb: dwc3: pci: add support for the Intel Wildcat Lake
Heiner Kallweit (1):
dpaa_eth: don't use fixed_phy_change_carrier
Helge Deller (1):
Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
Herton R. Krzesinski (1):
mm/debug_vm_pgtable: clear page table entries at destroy_args()
Hiago De Franco (1):
remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU
Hong Guan (1):
arm64: dts: ti: k3-am62a7-sk: fix pinmux for main_uart1
Horatiu Vultur (1):
phy: mscc: Fix timestamping for vsc8584
Hsin-Te Yuan (1):
thermal: sysfs: Return ENODATA instead of EAGAIN for reads
Huacai Chen (1):
PCI: Extend isolated function probing to LoongArch
Ian Abbott (3):
comedi: fix race between polling and detaching
comedi: Make insn_rw_emulate_bits() do insn->n samples
comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
Ido Schimmel (1):
mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
Igor Pylypiv (1):
ata: libata-scsi: Fix CDL control
Ihor Solodrai (1):
bpf: Make reg_not_null() true for CONST_PTR_TO_MAP
Ilan Peer (1):
wifi: cfg80211: Fix interface type validation
Ilya Bakoulin (1):
drm/amd/display: Separate set_gsl from set_gsl_source_select
Imre Deak (1):
drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
Isaac J. Manjarres (4):
mm: drop the assumption that VM_SHARED always implies writable
mm: update memfd seal write check to include F_SEAL_WRITE
mm: reinstate ability to map write-sealed memfd mappings read-only
selftests/memfd: add test for mapping write-sealed memfd read-only
Jack Xiao (1):
drm/amdgpu: fix incorrect vm flags to map bo
Jaegeuk Kim (1):
f2fs: check the generic conditions first
Jakub Acs (1):
net, hsr: reject HSR frame if skb can't hold tag
Jakub Kicinski (3):
tls: handle data disappearing from under the TLS ULP
uapi: in6: restore visibility of most IPv6 socket options
tls: fix handling of zero-length records on the rx_list
Jakub Ramaseuski (1):
net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
Jan Beulich (1):
compiler: remove __ADDRESSABLE_ASM{_STR,}() again
Jan Kara (2):
loop: Avoid updating block size under exclusive owner
udf: Verify partition map count
Jann Horn (1):
eventpoll: Fix semi-unbounded recursion
Jason Gunthorpe (1):
iommufd: Prevent ALIGN() overflow
Jason Wang (1):
vhost: fail early when __vhost_add_used() fails
Jason Xing (1):
ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
Jay Chen (1):
usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
Jean-Baptiste Maneyrol (1):
iio: imu: inv_icm42600: change invalid data error to -EBUSY
Jeff Layton (1):
nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
Jens Axboe (1):
io_uring/net: commit partial buffers on retry
Jeongjun Park (1):
ptp: prevent possible ABBA deadlock in ptp_clock_freerun()
Jiasheng Jiang (1):
scsi: lpfc: Remove redundant assignment to avoid memory leak
Jiayi Li (2):
ACPI: processor: perflib: Fix initial _PPC limit application
memstick: Fix deadlock by moving removing flag earlier
Jinjiang Tu (1):
mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn
Joel Fernandes (1):
rcu: Fix rcu_read_unlock() deadloop due to IRQ work
Johan Adolfsson (1):
leds: leds-lp50xx: Handle reg to get correct multi_index
Johan Hovold (15):
net: gianfar: fix device leak when querying time stamp info
net: enetc: fix device and OF node leak at probe
net: mtk_eth_soc: fix device leak at probe
net: ti: icss-iep: fix device and OF node leaks at probe
net: dpaa: fix device leak when querying time stamp info
usb: gadget: udc: renesas_usb3: fix device leak at unbind
usb: musb: omap2430: fix device leak at unbind
usb: dwc3: meson-g12a: fix device leaks at unbind
wifi: ath12k: fix dest ring-buffer corruption
wifi: ath12k: fix source ring-buffer corruption
wifi: ath12k: fix dest ring-buffer corruption when ring is full
wifi: ath11k: fix dest ring-buffer corruption
wifi: ath11k: fix source ring-buffer corruption
wifi: ath11k: fix dest ring-buffer corruption when ring is full
usb: dwc3: imx8mp: fix device leak at unbind
Johannes Berg (2):
wifi: cfg80211: reject HTC bit for management frames
wifi: mac80211: don't complete management TX on SAE commit
Johannes Thumshirn (1):
btrfs: zoned: use filesystem size not disk size for reclaim decision
John David Anglin (8):
parisc: Check region is readable by user in raw_copy_from_user()
parisc: Define and use set_pte_at()
parisc: Drop WARN_ON_ONCE() from flush_cache_vmap
parisc: Rename pte_needs_flush() to pte_needs_cache_flush() in cache.c
parisc: Revise __get_user() to probe user read access
parisc: Revise gateway LWS calls to probe user read access
parisc: Try to fixup kernel exception in bad_area_nosemaphore path of do_page_fault()
parisc: Update comments in make_insert_tlb
John Garry (2):
scsi: aacraid: Stop using PCI_IRQ_AFFINITY
block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
Jon Hunter (1):
soc/tegra: pmc: Ensure power-domains are in a known state
Jonas Rebmann (1):
net: fec: allow disable coalescing
Jonathan Cameron (2):
iio: light: as73211: Ensure buffer holes are zeroed
iio: imu: inv_icm42600: switch timestamp type from int64_t __aligned(8) to aligned_s64
Jonathan Santos (1):
iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
Jordan Rhee (1):
gve: prevent ethtool ops after shutdown
Jorge Marques (1):
i3c: master: Initialize ret in i3c_i2c_notifier_call()
Jorge Ramirez-Ortiz (2):
media: venus: hfi: explicitly release IRQ during teardown
media: venus: protect against spurious interrupts during probe
Judith Mendez (1):
arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support
Justin Tee (1):
scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
Kanglong Wang (1):
LoongArch: Optimize module load time by optimizing PLT/GOT counting
Karthikeyan Kathirvel (1):
wifi: ath12k: Decrement TID on RX peer frag setup error handling
Kashyap Desai (2):
RDMA/bnxt_re: Fix to do SRQ armena by default
RDMA/bnxt_re: Fix to remove workload check in SRQ limit path
Kathiravan Thirumoorthy (1):
phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization sequence
Kees Cook (3):
arm64: Handle KCOV __init vs inline mismatches
platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
iommu/amd: Avoid stack buffer overflow from kernel cmdline
Keith Busch (2):
nvme-pci: try function level reset on init failure
vfio/type1: conditional rescheduling while pinning
Krzysztof Hałasa (1):
imx8m-blk-ctrl: set ISI panic write hurry level
Krzysztof Kozlowski (3):
dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints
dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks constraints
leds: flash: leds-qcom-flash: Fix registry access after re-bind
Kuen-Han Tsai (1):
usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
Kuninori Morimoto (1):
ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
Kuniyuki Iwashima (2):
ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc().
net: Add net_passive_inc() and net_passive_dec().
Lad Prabhakar (1):
drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range
Laurentiu Mihalcea (1):
pwm: imx-tpm: Reset counter if CMOD is 0
Len Brown (1):
intel_idle: Allow loading ACPI tables for any family
Leon Romanovsky (1):
net/mlx5e: Properly access RCU protected qdisc_sleeping variable
Liao Yuanhong (1):
ext4: use kmalloc_array() for array space allocation
Lifeng Zheng (2):
cpufreq: Exit governor when failed to start old governor
PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()
Lizhi Xu (2):
fs/ntfs3: Add sanity check for file name
jfs: truncate good inode pages when hard link is 0
Lucy Thrun (1):
ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
Ludwig Disterhof (1):
media: usbtv: Lock resolution while streaming
Lukas Wunner (1):
PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
Ma Ke (1):
sunvdc: Balance device refcount in vdc_port_mpgroup_check
Mael GUERIN (1):
USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
Manuel Andreas (1):
KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush
Marek Szyprowski (1):
zynq_fpga: use sgtable-based scatterlist wrappers
Marek Vasut (1):
usb: renesas-xhci: Fix External ROM access timeouts
Mario Limonciello (8):
platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list
usb: xhci: Avoid showing warnings for dying controller
usb: xhci: Avoid showing errors during surprise removal
drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual
drm/amd/display: Only finalize atomic_obj if it was initialized
drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported
drm/amd: Restore cached power limit during resume
drm/amd/display: Avoid a NULL pointer dereference
Mark Brown (2):
ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace
Markus Theil (1):
crypto: jitter - fix intermediary handling
Masahiro Yamada (2):
kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
kconfig: gconf: fix potential memory leak in renderer_edited()
Masami Hiramatsu (Google) (2):
selftests: tracing: Use mutex_unlock for testing glob filter
tracing: fprobe-event: Sanitize wildcard for fprobe event name
Mateusz Guzik (1):
apparmor: use the condition in AA_BUG_FMT even with debug disabled
Matt Johnston (1):
net: mctp: Prevent duplicate binds
Matthieu Baerts (NGI0) (2):
mptcp: pm: kernel: flush: do not reset ADD_ADDR limit
selftests: mptcp: pm: check flush doesn't reset limits
Maulik Shah (1):
soc: qcom: rpmh-rsc: Add RSC version 4 support
Maurizio Lombardi (1):
scsi: target: core: Generate correct identifiers for PR OUT transport IDs
Maxim Levitsky (3):
KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter
KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs
KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest
Meagan Lloyd (2):
rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
Miao Li (1):
usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
Miaoqian Lin (1):
most: core: Drop device reference after usage in get_channel()
Michael Walle (1):
mtd: spi-nor: Fix spi_nor_try_unlock_all()
Michal Suchanek (1):
powerpc/boot: Fix build with gcc 15
Michel Dänzer (1):
drm/amd/display: Add primary plane to commits for correct VRR handling
Mikhail Lobanov (1):
wifi: mac80211: check basic rates validity in sta_link_apply_parameters
Mikulas Patocka (1):
dm-mpath: don't print the "loaded" message if registering fails
Mina Almasry (1):
netmem: fix skb_frag_address_safe with unreadable skbs
Minhong He (1):
ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
Miri Korenblit (1):
wifi: iwlwifi: mvm: set gtk id also in older FWs
Myrrh Periwinkle (3):
usb: typec: ucsi: Update power_supply on power role change
vt: keyboard: Don't process Unicode characters in K_OFF mode
vt: defkeymap: Map keycodes above 127 to K_HOLE
Namjae Jeon (1):
ksmbd: extend the connection limiting mechanism to support IPv6
Naohiro Aota (3):
btrfs: zoned: do not remove unwritten non-data block group
btrfs: zoned: do not select metadata BG as finish target
btrfs: zoned: fix write time activation failure for metadata block group
Nathan Chancellor (2):
usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
NeilBrown (1):
smb/server: avoid deadlock when linking with ReplaceIfExists
Nicolas Dufresne (1):
media: verisilicon: Fix AV1 decoder clock frequency
Nicolas Escande (1):
neighbour: add support for NUD_PERMANENT proxy entries
Nicolin Chen (1):
iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range
Niklas Söderlund (1):
media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control
Nitin Gote (1):
iosys-map: Fix undefined behavior in iosys_map_clear()
Ojaswin Mujoo (2):
ext4: fix fsmap end of range reporting with bigalloc
ext4: fix reserved gdt blocks handling in fsmap
Oliver Neukum (3):
usb: core: usb_submit_urb: downgrade type check
net: usb: cdc-ncm: check for filtering capability
cdc-acm: fix race between initial clearing halt and open
Oscar Maes (1):
net: ipv4: fix incorrect MTU in broadcast routes
Pagadala Yesu Anjaneyulu (1):
wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
Pali Rohár (1):
cifs: Fix calling CIFSFindFirst() for root path without msearch
Paul E. McKenney (1):
rcu: Protect ->defer_qs_iw_pending from data race
Pauli Virtanen (1):
Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established
Pavel Begunkov (1):
io_uring: don't use int for ABI
Pawan Gupta (1):
x86/bugs: Avoid warning when overriding return thunk
Pedro Falcato (1):
RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages
Pei Xiao (1):
clk: tegra: periph: Fix error handling and resolve unsigned compare warning
Peter Oberparleiter (3):
s390/sclp: Fix SCCB present check
s390/hypfs: Avoid unnecessary ioctl registration in debugfs
s390/hypfs: Enable limited access during lockdown
Peter Robinson (1):
reset: brcmstb: Enable reset drivers for ARCH_BCM2835
Peter Ujfalusi (1):
ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
Petr Pavlu (1):
module: Prevent silent truncation of module name in delete_module(2)
Phillip Lougher (1):
squashfs: fix memory leak in squashfs_fill_super
Prashant Malani (1):
cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
Pu Lehui (1):
tracing: Limit access to parser->buffer when trace_get_user failed
Purva Yeshi (1):
md: dm-zoned-target: Initialize return variable r to avoid uninitialized use
Qingfang Deng (2):
net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path
ppp: fix race conditions in ppp_fill_forward_path
Qu Wenruo (2):
btrfs: do not allow relocation of partially dropped subvolumes
btrfs: populate otime when logging an inode item
Rafael J. Wysocki (5):
ACPI: processor: perflib: Move problematic pr->performance check
cpuidle: governors: menu: Avoid using invalid recent intervals data
PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
PM: runtime: Take active children into account in pm_runtime_get_if_in_use()
cpuidle: governors: menu: Avoid selecting states with too much latency
Raj Kumar Bhagat (1):
wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0
Ramya Gnanasekar (1):
wifi: mac80211: update radar_required in channel context after channel switch
Rand Deeb (1):
wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
Randy Dunlap (2):
parisc: Makefile: fix a typo in palo.conf
parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit compilers
Ranjan Kumar (4):
scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
scsi: mpi3mr: Fix race between config read submit and interrupt completion
scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers
scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems
Ricardo Ribalda (3):
media: uvcvideo: Do not mark valid metadata as invalid
media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
media: venus: venc: Clamp param smaller than 1fps and bigger than 240
Richard Zhu (2):
PCI: imx6: Delay link start until configfs 'start' written
PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4 in epc_features
Ricky Wu (1):
misc: rtsx: usb: Ensure mmc child device is active when card is present
Rob Clark (1):
drm/msm: use trylock for debugfs
Rong Zhang (1):
fs/ntfs3: correctly create symlink for relative path
Sabrina Dubroca (1):
udp: also consider secpath when evaluating ipsec use for checksumming
Sakari Ailus (2):
media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
PM: runtime: Simplify pm_runtime_get_if_active() usage
Salah Triki (1):
iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
Sarah Newman (1):
drbd: add missing kref_get in handle_write_conflicts
Sarika Sharma (2):
wifi: ath12k: Correct tid cleanup when tid setup fails
wifi: ath12k: Add memset and update default rate value in wmi tx completion
Sarthak Garg (1):
mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
Sasha Levin (1):
fs: Prevent file descriptor table allocations exceeding INT_MAX
Sean Christopherson (15):
KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow
KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update()
KVM: x86: Snapshot the host's DEBUGCTL in common x86
KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs
KVM: x86: Plumb "force_immediate_exit" into kvm_entry() tracepoint
KVM: VMX: Re-enter guest in fastpath for "spurious" preemption timer exits
KVM: VMX: Handle forced exit due to preemption timer in fastpath
KVM: x86: Move handling of is_guest_mode() into fastpath exit handlers
KVM: VMX: Handle KVM-induced preemption timer exits in fastpath for L2
KVM: x86: Fully defer to vendor code to decide how to force immediate exit
KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap
KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag
KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported
KVM: VMX: Extract checking of guest's DEBUGCTL into helper
KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
Sebastian Ott (1):
ACPI: processor: fix acpi_object initialization
Sebastian Reichel (2):
watchdog: dw_wdt: Fix default timeout
usb: typec: fusb302: cache PD RX state
Selvarasu Ganesan (1):
usb: dwc3: Remove WARN_ON for device endpoint command timeouts
Sergey Bashirov (4):
pNFS: Fix stripe mapping in block/scsi layout
pNFS: Fix disk addr range check in block/scsi layout
pNFS: Handle RPC size limit for layoutcommits
pNFS: Fix uninited ptr deref in block/scsi layout
Sergey Shtylyov (1):
Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync()
Shankari Anand (1):
kconfig: nconf: Ensure null termination where strncpy is used
Shannon Nelson (1):
ionic: clean dbpage in de-init
Shengjiu Wang (1):
ASoC: fsl_sai: replace regmap_write with regmap_update_bits
Shiji Yang (2):
MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
MIPS: lantiq: falcon: sysctrl: fix request memory check logic
Showrya M N (1):
scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
Shuai Xue (1):
ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
Shubhrajyoti Datta (1):
EDAC/synopsys: Clear the ECC counters on init
Shyam Prasad N (1):
cifs: reset iface weights when we cannot find a candidate
Sravan Kumar Gundu (1):
fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
Srinivas Kandagatla (1):
ASoC: qcom: use drvdata instead of component to keep id
Stanislaw Gruszka (1):
wifi: iwlegacy: Check rate_idx range after addition
Stefan Metzmacher (3):
smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection()
smb: client: don't wait for info->send_pending == 0 on error
smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()
Stefan Wahren (1):
spi: spi-fsl-lpspi: Clamp too high speed_hz
Steve French (1):
smb3: fix for slab out of bounds on mount to ksmbd
Steven Rostedt (5):
tracefs: Add d_delete to remove negative dentries
powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64
ktest.pl: Prevent recursion of default variable options
ftrace: Also allocate and copy hash for reading of filter files
tracing: Remove unneeded goto out logic
Su Hui (1):
usb: xhci: print xhci->xhc_state when queue_command failed
Suchit Karunakaran (1):
kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
Sven Schnelle (2):
s390/time: Use monotonic clock in get_cycles()
s390/stp: Remove udelay from stp_sync_clock()
Takashi Iwai (5):
ALSA: usb-audio: Validate UAC3 power domain descriptors, too
ALSA: usb-audio: Validate UAC3 cluster segment descriptors
ALSA: hda: Handle the jack polling always via a work
ALSA: hda: Disable jack polling at shutdown
ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
Tetsuo Handa (1):
hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
Theodore Ts'o (2):
ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
ext4: don't try to clear the orphan_present feature block device is r/o
Thierry Reding (1):
firmware: tegra: Fix IVC dependency problems
Thomas Fourier (8):
et131x: Add missing check after DMA map
net: ag71xx: Add missing check after DMA map
(powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
powerpc: floppy: Add missing checks after DMA map
wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc()
mtd: rawnand: fsmc: Add missing check after DMA map
mtd: rawnand: renesas: Add missing check after DMA map
Thomas Weißschuh (5):
tools/nolibc: define time_t in terms of __kernel_old_time_t
tools/build: Fix s390(x) cross-compilation with clang
um: Re-evaluate thread flags repeatedly
MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
kbuild: userprogs: use correct linker when mixing clang and GNU ld
Thorsten Blum (2):
cdx: Fix off-by-one error in cdx_rpmsg_probe()
usb: storage: realtek_cr: Use correct byte order for bcs->Residue
Tianxiang Peng (1):
x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
Tim Harvey (1):
hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
Timur Kristóf (6):
drm/amd/display: Don't overwrite dce60_clk_mgr
drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
drm/amd/display: Don't overclock DCE 6 by 15%
Tomasz Michalec (2):
usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
platform/chrome: cros_ec_typec: Defer probe on missing EC parent
Trond Myklebust (1):
NFS: Fix the setting of capabilities when automounting a new filesystem
Tvrtko Ursulin (1):
drm/ttm: Respect the shrinker core free target
Tzung-Bi Shih (1):
platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
Ulf Hansson (1):
mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
Uwe Kleine-König (2):
pwm: mediatek: Handle hardware enable and clock enable separately
pwm: mediatek: Fix duty and period setting
ValdikSS (1):
igc: fix disabling L1.2 PCI-E link substate on I226 on init
Vasiliy Kovalev (1):
ALSA: hda/realtek: Fix headset mic on HONOR BRB-X
Vedang Nagar (2):
media: venus: Fix OOB read due to missing payload bound check
media: venus: Add a check for packet size after reading from shared memory
Viacheslav Dubeyko (5):
hfs: fix general protection fault in hfs_find_init()
hfs: fix slab-out-of-bounds in hfs_bnode_read()
hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
hfs: fix not erasing deleted b-tree node issue
Victor Shih (3):
mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
mmc: sdhci-pci-gli: Add a new function to simplify the code
mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER
Vijendar Mukunda (1):
soundwire: amd: serialize amd manager resume sequence during pm_prepare
Vincent Guittot (8):
sched/topology: Add a new arch_scale_freq_ref() method
cpufreq: Use the fixed and coherent frequency for scaling capacity
cpufreq/schedutil: Use a fixed reference frequency
energy_model: Use a fixed reference frequency
cpufreq/cppc: Set the frequency used for computing the capacity
arm64/amu: Use capacity_ref_freq() to set AMU ratio
topology: Set capacity_freq_ref in all cases
sched/fair: Fix frequency selection for non-invariant case
Vladimir Zapolskiy (1):
media: qcom: camss: cleanup media device allocated resource on error path
Waiman Long (2):
mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
Wang Liang (1):
net: bridge: fix soft lockup in br_multicast_query_expired()
Wang Zhaolong (2):
smb: client: remove redundant lstrp update in negotiate protocol
smb: client: fix netns refcount leak after net_passive changes
Wayne Lin (1):
drm/amd/display: Avoid trying AUX transactions on disconnected ports
Wei Gao (1):
ext2: Handle fiemap on empty files to prevent EINVAL
Weitao Wang (1):
usb: xhci: Fix slot_id resource race conflict
Wen Chen (1):
drm/amd/display: Fix 'failed to blank crtc!'
Will Deacon (4):
vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page
vsock/virtio: Validate length in packet header before skb_put()
vhost/vsock: Avoid allocating arbitrarily-sized SKBs
KVM: arm64: Fix kernel BUG() due to bad backport of FPSIMD/SVE/SME fix
William Liu (2):
net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
Willy Tarreau (1):
tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros
Wolfram Sang (3):
media: usb: hdpvr: disable zero-length read messages
i3c: add missing include to internal header
i3c: don't fail if GETHDRCAP is unsupported
Xin Long (1):
sctp: linearize cloned gso packets in sctp_rcv
Xinxin Wan (1):
ASoC: codecs: rt5640: Retry DEVICE_ID verification
Xinyu Liu (1):
usb: core: config: Prevent OOB read in SS endpoint companion parsing
Xu Yang (2):
net: usb: asix_devices: add phy_mask for ax88772 mdio bus
usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test
Xu Yilun (1):
fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
Yann E. MORIN (1):
kconfig: lxdialog: fix 'space' to (de)select options
Ye Bin (1):
fs/buffer: fix use-after-free when call bh_read() helper
Yonghong Song (1):
selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size
Yongzhen Zhang (1):
fbdev: fix potential buffer overflow in do_register_framebuffer()
Youngjun Lee (1):
media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
Youssef Samir (1):
bus: mhi: host: Detect events pointing to unexpected TREs
Yuan Chen (1):
bpftool: Fix JSON writer resource leak in version command
Yuezhang Mo (1):
exfat: add cluster chain loop check for dir
Yuichiro Tsuji (1):
net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
Yunhui Cui (1):
serial: 8250: fix panic due to PSLVERR
Yury Norov [NVIDIA] (1):
RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
Zenm Chen (1):
USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
Zhang Shurong (1):
media: ov2659: Fix memory leaks in ov2659_probe()
Zhang Yi (1):
ext4: fix hole length calculation overflow in non-extent inodes
Zhiqi Song (1):
crypto: hisilicon/hpre - fix dma unmap sequence
Zhu Qiyu (1):
ACPI: PRM: Reduce unnecessary printing to avoid user confusion
Zijun Hu (2):
char: misc: Fix improper and inaccurate error code returned by misc_init()
Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie()
Ziyan Fu (1):
watchdog: iTCO_wdt: Report error if timeout configuration fails
Ziyan Xu (1):
ksmbd: fix refcount leak causing resource not released
chenchangcheng (1):
media: uvcvideo: Fix bandwidth issue for Alcor camera
fangzhong.zhou (1):
i2c: Force DLL0945 touchpad i2c freq to 100khz
jackysliu (1):
scsi: bfa: Double-free fix
tuhaowen (1):
PM: sleep: console: Fix the black screen issue
zhangjianrong (2):
net: thunderbolt: Enable end-to-end flow control also in transmit
net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths()
Álvaro Fernández Rojas (5):
net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
net: dsa: b53: prevent DIS_LEARNING access on BCM5325
net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
3 weeks, 2 days
- 1
- 1
Linux 6.1.149
by Greg Kroah-Hartman
I'm announcing the release of the 6.1.149 kernel.
All users of the 6.1 kernel series must upgrade.
The updated 6.1.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.1.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/devicetree/bindings/display/sprd/sprd,sharkl3-dpu.yaml | 2
Documentation/devicetree/bindings/display/sprd/sprd,sharkl3-dsi-host.yaml | 2
Documentation/firmware-guide/acpi/i2c-muxes.rst | 8
Documentation/networking/bonding.rst | 12
Documentation/networking/mptcp-sysctl.rst | 2
Makefile | 4
arch/arm/Makefile | 2
arch/arm/mach-rockchip/platsmp.c | 15
arch/arm/mach-tegra/reset.c | 2
arch/arm64/boot/dts/ti/k3-am62-main.dtsi | 1
arch/arm64/include/asm/acpi.h | 2
arch/arm64/kernel/cpufeature.c | 1
arch/arm64/kernel/entry.S | 6
arch/arm64/kernel/fpsimd.c | 4
arch/arm64/kernel/traps.c | 1
arch/arm64/mm/fault.c | 1
arch/arm64/mm/ptdump_debugfs.c | 3
arch/loongarch/net/bpf_jit.c | 21
arch/m68k/kernel/head.S | 31 -
arch/mips/crypto/chacha-core.S | 20
arch/mips/include/asm/vpe.h | 8
arch/mips/kernel/process.c | 16
arch/mips/lantiq/falcon/sysctrl.c | 23 -
arch/parisc/Makefile | 6
arch/parisc/include/asm/special_insns.h | 28 +
arch/parisc/include/asm/uaccess.h | 21
arch/parisc/kernel/entry.S | 17
arch/parisc/kernel/syscall.S | 30 -
arch/parisc/lib/memcpy.c | 19
arch/parisc/mm/fault.c | 4
arch/powerpc/include/asm/floppy.h | 5
arch/powerpc/platforms/512x/mpc512x_lpbfifo.c | 6
arch/s390/hypfs/hypfs_dbfs.c | 19
arch/s390/include/asm/timex.h | 13
arch/s390/kernel/time.c | 2
arch/s390/mm/dump_pagetables.c | 2
arch/um/include/asm/thread_info.h | 4
arch/um/kernel/process.c | 20
arch/x86/events/intel/core.c | 2
arch/x86/include/asm/kvm-x86-ops.h | 2
arch/x86/include/asm/kvm_host.h | 24 -
arch/x86/include/asm/msr-index.h | 1
arch/x86/include/asm/reboot.h | 5
arch/x86/include/asm/virtext.h | 10
arch/x86/include/asm/xen/hypercall.h | 5
arch/x86/kernel/cpu/bugs.c | 5
arch/x86/kernel/cpu/hygon.c | 3
arch/x86/kernel/cpu/mce/amd.c | 13
arch/x86/kernel/reboot.c | 43 +
arch/x86/kvm/hyperv.c | 10
arch/x86/kvm/lapic.c | 61 ++
arch/x86/kvm/lapic.h | 1
arch/x86/kvm/svm/svm.c | 49 +-
arch/x86/kvm/svm/vmenter.S | 9
arch/x86/kvm/trace.h | 9
arch/x86/kvm/vmx/nested.c | 26 -
arch/x86/kvm/vmx/pmu_intel.c | 8
arch/x86/kvm/vmx/vmx.c | 183 +++++---
arch/x86/kvm/vmx/vmx.h | 31 +
arch/x86/kvm/x86.c | 65 +-
arch/x86/kvm/x86.h | 12
block/blk-core.c | 26 -
block/blk-settings.c | 2
drivers/acpi/acpi_processor.c | 2
drivers/acpi/apei/ghes.c | 2
drivers/acpi/pfr_update.c | 2
drivers/acpi/prmt.c | 26 +
drivers/acpi/processor_perflib.c | 11
drivers/ata/Kconfig | 35 +
drivers/ata/libata-sata.c | 5
drivers/ata/libata-scsi.c | 20
drivers/base/power/runtime.c | 5
drivers/block/drbd/drbd_receiver.c | 6
drivers/block/sunvdc.c | 4
drivers/bus/mhi/host/boot.c | 8
drivers/bus/mhi/host/internal.h | 4
drivers/bus/mhi/host/main.c | 12
drivers/char/ipmi/ipmi_msghandler.c | 8
drivers/char/ipmi/ipmi_watchdog.c | 59 +-
drivers/comedi/comedi_fops.c | 36 +
drivers/comedi/comedi_internal.h | 1
drivers/comedi/drivers.c | 36 -
drivers/comedi/drivers/pcl726.c | 3
drivers/cpufreq/armada-8k-cpufreq.c | 2
drivers/cpufreq/cppc_cpufreq.c | 2
drivers/cpufreq/cpufreq.c | 8
drivers/crypto/hisilicon/hpre/hpre_crypto.c | 8
drivers/crypto/marvell/octeontx2/otx2_cptpf_ucode.c | 16
drivers/crypto/qat/qat_4xxx/adf_4xxx_hw_data.c | 13
drivers/crypto/qat/qat_common/adf_accel_devices.h | 1
drivers/crypto/qat/qat_common/adf_gen4_hw_data.h | 6
drivers/crypto/qat/qat_common/adf_init.c | 3
drivers/devfreq/governor_userspace.c | 6
drivers/dma/stm32-dma.c | 2
drivers/edac/synopsys_edac.c | 97 ++--
drivers/fpga/zynq-fpga.c | 10
drivers/gpio/gpio-mlxbf2.c | 2
drivers/gpio/gpio-tps65912.c | 7
drivers/gpio/gpio-virtio.c | 9
drivers/gpio/gpio-wcd934x.c | 7
drivers/gpu/drm/amd/amdgpu/amdgpu_csa.c | 4
drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 6
drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c | 57 +-
drivers/gpu/drm/amd/amdkfd/kfd_module.c | 2
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 6
drivers/gpu/drm/amd/display/dc/bios/command_table.c | 2
drivers/gpu/drm/amd/display/dc/clk_mgr/clk_mgr.c | 1
drivers/gpu/drm/amd/display/dc/clk_mgr/dce100/dce_clk_mgr.c | 2
drivers/gpu/drm/amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 40 +
drivers/gpu/drm/amd/display/dc/clk_mgr/dce60/dce60_clk_mgr.c | 31 -
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 11
drivers/gpu/drm/amd/display/modules/hdcp/hdcp_psp.c | 3
drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 6
drivers/gpu/drm/amd/pm/swsmu/smu11/vangogh_ppt.c | 37 -
drivers/gpu/drm/display/drm_dp_helper.c | 2
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 4
drivers/gpu/drm/msm/msm_gem.c | 3
drivers/gpu/drm/msm/msm_gem.h | 6
drivers/gpu/drm/scheduler/sched_entity.c | 21
drivers/gpu/drm/ttm/ttm_pool.c | 8
drivers/gpu/drm/ttm/ttm_resource.c | 3
drivers/hid/hid-apple.c | 13
drivers/hid/hid-magicmouse.c | 56 +-
drivers/hwmon/emc2305.c | 10
drivers/hwmon/gsc-hwmon.c | 4
drivers/i2c/i2c-core-acpi.c | 1
drivers/i3c/internals.h | 1
drivers/i3c/master.c | 4
drivers/iio/adc/ad7768-1.c | 23 -
drivers/iio/adc/ad_sigma_delta.c | 6
drivers/iio/imu/bno055/bno055.c | 11
drivers/iio/imu/inv_icm42600/inv_icm42600_temp.c | 6
drivers/iio/light/as73211.c | 2
drivers/iio/light/hid-sensor-prox.c | 8
drivers/iio/pressure/bmp280-core.c | 9
drivers/iio/proximity/isl29501.c | 16
drivers/iio/temperature/maxim_thermocouple.c | 26 -
drivers/infiniband/core/nldev.c | 22
drivers/infiniband/hw/bnxt_re/qplib_res.c | 2
drivers/infiniband/hw/erdma/erdma_verbs.c | 4
drivers/infiniband/hw/hfi1/affinity.c | 44 +
drivers/iommu/amd/init.c | 4
drivers/leds/leds-lp50xx.c | 11
drivers/md/dm-ps-historical-service-time.c | 4
drivers/md/dm-ps-queue-length.c | 4
drivers/md/dm-ps-round-robin.c | 4
drivers/md/dm-ps-service-time.c | 4
drivers/md/dm-table.c | 10
drivers/md/dm-zoned-target.c | 2
drivers/media/cec/usb/rainshadow/rainshadow-cec.c | 3
drivers/media/dvb-frontends/dib7000p.c | 8
drivers/media/i2c/hi556.c | 26 -
drivers/media/i2c/ov2659.c | 3
drivers/media/i2c/tc358743.c | 86 ++-
drivers/media/platform/qcom/camss/camss.c | 4
drivers/media/platform/qcom/venus/core.c | 8
drivers/media/platform/qcom/venus/core.h | 2
drivers/media/platform/qcom/venus/helpers.c | 2
drivers/media/platform/qcom/venus/hfi_helper.h | 61 ++
drivers/media/platform/qcom/venus/hfi_msgs.c | 85 ++-
drivers/media/platform/qcom/venus/hfi_venus.c | 5
drivers/media/platform/qcom/venus/vdec.c | 13
drivers/media/platform/qcom/venus/vdec_ctrls.c | 2
drivers/media/platform/qcom/venus/venc.c | 9
drivers/media/platform/qcom/venus/venc_ctrls.c | 2
drivers/media/test-drivers/vivid/vivid-ctrls.c | 3
drivers/media/test-drivers/vivid/vivid-vid-cap.c | 4
drivers/media/usb/gspca/vicam.c | 10
drivers/media/usb/hdpvr/hdpvr-i2c.c | 6
drivers/media/usb/usbtv/usbtv-video.c | 4
drivers/media/usb/uvc/uvc_driver.c | 3
drivers/media/usb/uvc/uvc_video.c | 21
drivers/media/v4l2-core/v4l2-common.c | 8
drivers/media/v4l2-core/v4l2-ctrls-core.c | 1
drivers/memstick/core/memstick.c | 1
drivers/memstick/host/rtsx_usb_ms.c | 1
drivers/misc/cardreader/rtsx_usb.c | 16
drivers/misc/mei/bus.c | 6
drivers/mmc/host/rtsx_usb_sdmmc.c | 4
drivers/mmc/host/sdhci-msm.c | 14
drivers/mmc/host/sdhci-pci-gli.c | 33 -
drivers/most/core.c | 2
drivers/mtd/nand/raw/fsmc_nand.c | 2
drivers/mtd/nand/raw/renesas-nand-controller.c | 6
drivers/mtd/nand/spi/core.c | 5
drivers/mtd/spi-nor/swp.c | 19
drivers/net/bonding/bond_3ad.c | 224 ++++++++--
drivers/net/bonding/bond_main.c | 1
drivers/net/bonding/bond_netlink.c | 16
drivers/net/bonding/bond_options.c | 29 +
drivers/net/dsa/b53/b53_common.c | 65 ++
drivers/net/dsa/b53/b53_regs.h | 2
drivers/net/dummy.c | 1
drivers/net/ethernet/agere/et131x.c | 36 +
drivers/net/ethernet/aquantia/atlantic/aq_hw.h | 2
drivers/net/ethernet/aquantia/atlantic/hw_atl2/hw_atl2_utils_fw.c | 39 +
drivers/net/ethernet/atheros/ag71xx.c | 9
drivers/net/ethernet/cavium/thunder/thunder_bgx.c | 4
drivers/net/ethernet/emulex/benet/be_main.c | 8
drivers/net/ethernet/freescale/dpaa/dpaa_eth.c | 2
drivers/net/ethernet/freescale/dpaa/dpaa_ethtool.c | 4
drivers/net/ethernet/freescale/enetc/enetc_pf.c | 14
drivers/net/ethernet/freescale/fec_main.c | 34 -
drivers/net/ethernet/freescale/gianfar_ethtool.c | 4
drivers/net/ethernet/google/gve/gve_adminq.c | 1
drivers/net/ethernet/google/gve/gve_main.c | 2
drivers/net/ethernet/intel/igc/igc_main.c | 14
drivers/net/ethernet/intel/ixgbe/ixgbe_xsk.c | 4
drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 2
drivers/net/ethernet/mediatek/mtk_wed.c | 1
drivers/net/ethernet/mellanox/mlx5/core/en/qos.c | 2
drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2
drivers/net/ethernet/mellanox/mlxsw/trap.h | 1
drivers/net/ethernet/pensando/ionic/ionic_lif.c | 7
drivers/net/geneve.c | 1
drivers/net/hyperv/hyperv_net.h | 3
drivers/net/hyperv/netvsc_drv.c | 29 +
drivers/net/loopback.c | 1
drivers/net/phy/micrel.c | 2
drivers/net/phy/mscc/mscc.h | 12
drivers/net/phy/mscc/mscc_main.c | 12
drivers/net/phy/mscc/mscc_ptp.c | 49 +-
drivers/net/phy/smsc.c | 1
drivers/net/ppp/ppp_generic.c | 17
drivers/net/thunderbolt.c | 21
drivers/net/usb/asix_devices.c | 1
drivers/net/usb/cdc_ncm.c | 20
drivers/net/veth.c | 1
drivers/net/vxlan/vxlan_core.c | 1
drivers/net/wireless/ath/ath11k/ce.c | 3
drivers/net/wireless/ath/ath11k/dp_rx.c | 3
drivers/net/wireless/ath/ath11k/hal.c | 33 +
drivers/net/wireless/broadcom/brcm80211/brcmsmac/phy/phy_lcn.c | 2
drivers/net/wireless/intel/iwlegacy/4965-mac.c | 5
drivers/net/wireless/intel/iwlwifi/dvm/rs.c | 2
drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 7
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 2
drivers/net/wireless/realtek/rtlwifi/pci.c | 23 -
drivers/net/wireless/realtek/rtw89/core.c | 3
drivers/net/wireless/realtek/rtw89/fw.c | 9
drivers/net/wireless/realtek/rtw89/fw.h | 2
drivers/net/wireless/realtek/rtw89/mac.c | 19
drivers/net/wireless/realtek/rtw89/reg.h | 1
drivers/net/xen-netfront.c | 5
drivers/pci/controller/pcie-rockchip-host.c | 49 +-
drivers/pci/controller/pcie-rockchip.h | 11
drivers/pci/endpoint/pci-ep-cfs.c | 1
drivers/pci/endpoint/pci-epf-core.c | 2
drivers/pci/pci-acpi.c | 4
drivers/pci/pci.c | 8
drivers/pci/probe.c | 2
drivers/pinctrl/stm32/pinctrl-stm32.c | 1
drivers/platform/chrome/cros_ec.c | 19
drivers/platform/chrome/cros_ec_typec.c | 4
drivers/platform/x86/thinkpad_acpi.c | 4
drivers/pps/clients/pps-gpio.c | 5
drivers/ptp/ptp_clock.c | 2
drivers/pwm/pwm-imx-tpm.c | 9
drivers/pwm/pwm-mediatek.c | 71 +--
drivers/remoteproc/imx_rproc.c | 4
drivers/reset/Kconfig | 10
drivers/rtc/rtc-ds1307.c | 15
drivers/s390/char/sclp.c | 11
drivers/scsi/aacraid/comminit.c | 3
drivers/scsi/bfa/bfad_im.c | 1
drivers/scsi/libiscsi.c | 3
drivers/scsi/lpfc/lpfc_debugfs.c | 1
drivers/scsi/lpfc/lpfc_scsi.c | 4
drivers/scsi/mpi3mr/mpi3mr.h | 6
drivers/scsi/mpi3mr/mpi3mr_fw.c | 17
drivers/scsi/mpi3mr/mpi3mr_os.c | 22
drivers/scsi/mpt3sas/mpt3sas_scsih.c | 19
drivers/scsi/qla4xxx/ql4_os.c | 2
drivers/scsi/scsi_scan.c | 2
drivers/scsi/scsi_transport_sas.c | 60 ++
drivers/soc/qcom/mdt_loader.c | 68 ++-
drivers/soc/tegra/pmc.c | 51 +-
drivers/staging/media/imx/imx-media-csc-scaler.c | 2
drivers/target/target_core_fabric_lib.c | 63 ++
drivers/target/target_core_internal.h | 4
drivers/target/target_core_pr.c | 18
drivers/thermal/qcom/qcom-spmi-temp-alarm.c | 43 +
drivers/thermal/thermal_sysfs.c | 9
drivers/thunderbolt/domain.c | 2
drivers/tty/serial/8250/8250_port.c | 3
drivers/tty/vt/defkeymap.c_shipped | 112 +++++
drivers/tty/vt/keyboard.c | 2
drivers/ufs/host/ufs-exynos.c | 4
drivers/ufs/host/ufshcd-pci.c | 42 +
drivers/usb/atm/cxacru.c | 106 ++--
drivers/usb/class/cdc-acm.c | 11
drivers/usb/core/config.c | 10
drivers/usb/core/hcd.c | 8
drivers/usb/core/quirks.c | 1
drivers/usb/core/urb.c | 2
drivers/usb/dwc3/dwc3-imx8mp.c | 6
drivers/usb/dwc3/dwc3-meson-g12a.c | 3
drivers/usb/dwc3/ep0.c | 20
drivers/usb/dwc3/gadget.c | 19
drivers/usb/gadget/udc/renesas_usb3.c | 1
drivers/usb/host/xhci-mem.c | 2
drivers/usb/host/xhci-pci-renesas.c | 7
drivers/usb/host/xhci-ring.c | 10
drivers/usb/host/xhci.c | 6
drivers/usb/musb/omap2430.c | 20
drivers/usb/storage/realtek_cr.c | 2
drivers/usb/storage/unusual_devs.h | 29 +
drivers/usb/typec/mux/intel_pmc_mux.c | 2
drivers/usb/typec/tcpm/fusb302.c | 8
drivers/usb/typec/ucsi/psy.c | 2
drivers/usb/typec/ucsi/ucsi.c | 1
drivers/usb/typec/ucsi/ucsi.h | 7
drivers/vfio/pci/mlx5/cmd.c | 4
drivers/vfio/vfio_iommu_type1.c | 7
drivers/vhost/vhost.c | 3
drivers/vhost/vsock.c | 6
drivers/video/console/vgacon.c | 2
drivers/video/fbdev/core/fbcon.c | 9
drivers/video/fbdev/core/fbmem.c | 3
drivers/virt/coco/efi_secret/efi_secret.c | 10
drivers/watchdog/dw_wdt.c | 2
drivers/watchdog/iTCO_wdt.c | 6
drivers/watchdog/sbsa_gwdt.c | 50 ++
fs/btrfs/block-group.c | 27 +
fs/btrfs/ctree.c | 9
fs/btrfs/ordered-data.c | 12
fs/btrfs/qgroup.c | 31 +
fs/btrfs/relocation.c | 19
fs/btrfs/send.c | 39 +
fs/btrfs/tree-log.c | 60 +-
fs/btrfs/zoned.c | 3
fs/buffer.c | 2
fs/crypto/fscrypt_private.h | 17
fs/crypto/hkdf.c | 2
fs/crypto/keysetup.c | 3
fs/crypto/keysetup_v1.c | 3
fs/eventpoll.c | 60 ++
fs/ext2/inode.c | 12
fs/ext4/fsmap.c | 23 -
fs/ext4/indirect.c | 4
fs/ext4/inline.c | 19
fs/ext4/inode.c | 2
fs/ext4/mballoc.c | 67 +-
fs/ext4/orphan.c | 5
fs/ext4/super.c | 8
fs/f2fs/data.c | 2
fs/f2fs/f2fs.h | 1
fs/f2fs/inode.c | 7
fs/f2fs/node.c | 10
fs/file.c | 90 +---
fs/hfs/bnode.c | 93 ++++
fs/hfsplus/bnode.c | 92 ++++
fs/hfsplus/unicode.c | 7
fs/hfsplus/xattr.c | 6
fs/hugetlbfs/inode.c | 2
fs/jbd2/checkpoint.c | 1
fs/jfs/file.c | 3
fs/jfs/inode.c | 2
fs/jfs/jfs_dmap.c | 6
fs/libfs.c | 4
fs/namespace.c | 34 -
fs/nfs/blocklayout/blocklayout.c | 4
fs/nfs/blocklayout/dev.c | 5
fs/nfs/blocklayout/extent_tree.c | 20
fs/nfs/client.c | 44 +
fs/nfs/internal.h | 2
fs/nfs/nfs4client.c | 20
fs/nfs/nfs4proc.c | 2
fs/nfs/pnfs.c | 11
fs/nfsd/nfs4state.c | 34 +
fs/ntfs3/dir.c | 3
fs/ntfs3/inode.c | 31 -
fs/orangefs/orangefs-debugfs.c | 2
fs/smb/client/cifssmb.c | 10
fs/smb/client/connect.c | 1
fs/smb/client/sess.c | 9
fs/smb/client/smb2ops.c | 11
fs/smb/server/connection.c | 3
fs/smb/server/connection.h | 7
fs/smb/server/smb2pdu.c | 16
fs/smb/server/transport_rdma.c | 5
fs/smb/server/transport_rdma.h | 4
fs/smb/server/transport_tcp.c | 26 +
fs/squashfs/super.c | 14
fs/udf/super.c | 13
fs/xfs/xfs_itable.c | 6
include/linux/blk_types.h | 6
include/linux/compiler.h | 8
include/linux/fs.h | 4
include/linux/hypervisor.h | 3
include/linux/if_vlan.h | 6
include/linux/iosys-map.h | 7
include/linux/memfd.h | 14
include/linux/mm.h | 82 ++-
include/linux/pci.h | 10
include/linux/platform_data/cros_ec_proto.h | 4
include/linux/skbuff.h | 8
include/linux/usb/cdc_ncm.h | 1
include/linux/virtio_vsock.h | 7
include/net/bond_3ad.h | 3
include/net/bond_options.h | 1
include/net/bonding.h | 23 +
include/net/cfg80211.h | 2
include/net/mac80211.h | 2
include/net/neighbour.h | 1
include/sound/soc-dai.h | 13
include/uapi/linux/if_link.h | 1
include/uapi/linux/in6.h | 4
include/uapi/linux/io_uring.h | 2
include/uapi/linux/pfrut.h | 1
kernel/cgroup/cpuset.c | 2
kernel/fork.c | 2
kernel/module/main.c | 10
kernel/power/console.c | 7
kernel/rcu/tree_plugin.h | 3
kernel/sched/fair.c | 19
kernel/trace/ftrace.c | 19
kernel/trace/trace.c | 33 -
kernel/trace/trace.h | 8
mm/debug_vm_pgtable.c | 9
mm/filemap.c | 2
mm/kmemleak.c | 10
mm/madvise.c | 2
mm/memfd.c | 2
mm/memory-failure.c | 8
mm/mmap.c | 12
mm/ptdump.c | 2
mm/shmem.c | 2
net/bluetooth/hci_conn.c | 3
net/bluetooth/hci_sync.c | 43 +
net/bridge/br_multicast.c | 16
net/bridge/br_private.h | 2
net/core/dev.c | 12
net/core/neighbour.c | 12
net/hsr/hsr_slave.c | 8
net/ipv4/ip_tunnel.c | 1
net/ipv4/netfilter/nf_reject_ipv4.c | 6
net/ipv4/route.c | 1
net/ipv4/udp_offload.c | 2
net/ipv6/addrconf.c | 7
net/ipv6/ip6_gre.c | 2
net/ipv6/ip6_tunnel.c | 1
net/ipv6/ip6_vti.c | 1
net/ipv6/mcast.c | 11
net/ipv6/netfilter/nf_reject_ipv6.c | 5
net/ipv6/seg6_hmac.c | 6
net/ipv6/sit.c | 1
net/mac80211/cfg.c | 12
net/mac80211/chan.c | 1
net/mac80211/mlme.c | 9
net/mac80211/sta_info.c | 5
net/mctp/af_mctp.c | 26 +
net/mptcp/options.c | 9
net/mptcp/pm.c | 8
net/mptcp/pm_netlink.c | 19
net/mptcp/protocol.c | 55 ++
net/mptcp/protocol.h | 27 -
net/mptcp/subflow.c | 30 -
net/ncsi/internal.h | 2
net/ncsi/ncsi-rsp.c | 1
net/netfilter/nf_conntrack_netlink.c | 24 -
net/netlink/af_netlink.c | 2
net/sched/sch_cake.c | 14
net/sched/sch_ets.c | 36 -
net/sched/sch_htb.c | 2
net/tls/tls_sw.c | 16
net/vmw_vsock/virtio_transport.c | 14
net/wireless/mlme.c | 3
scripts/kconfig/gconf.c | 8
scripts/kconfig/lxdialog/inputbox.c | 6
scripts/kconfig/lxdialog/menubox.c | 2
scripts/kconfig/nconf.c | 2
scripts/kconfig/nconf.gui.c | 1
security/apparmor/include/lib.h | 6
security/inode.c | 2
sound/core/pcm_native.c | 19
sound/pci/hda/hda_codec.c | 42 -
sound/pci/hda/patch_ca0132.c | 2
sound/pci/hda/patch_realtek.c | 4
sound/pci/intel8x0.c | 2
sound/soc/codecs/hdac_hdmi.c | 10
sound/soc/codecs/rt5640.c | 5
sound/soc/fsl/fsl_asrc.c | 16
sound/soc/fsl/fsl_aud2htx.c | 10
sound/soc/fsl/fsl_easrc.c | 16
sound/soc/fsl/fsl_esai.c | 20
sound/soc/fsl/fsl_micfil.c | 14
sound/soc/fsl/fsl_sai.c | 44 -
sound/soc/fsl/fsl_spdif.c | 17
sound/soc/fsl/fsl_ssi.c | 3
sound/soc/fsl/fsl_xcvr.c | 16
sound/soc/generic/audio-graph-card.c | 2
sound/soc/intel/avs/core.c | 3
sound/soc/soc-core.c | 28 +
sound/soc/soc-dai.c | 43 +
sound/soc/soc-dapm.c | 4
sound/usb/mixer_quirks.c | 14
sound/usb/stream.c | 25 -
sound/usb/validate.c | 14
tools/include/nolibc/std.h | 4
tools/include/nolibc/types.h | 4
tools/include/uapi/linux/if_link.h | 1
tools/power/cpupower/utils/idle_monitor/mperf_monitor.c | 4
tools/scripts/Makefile.include | 4
tools/testing/ktest/ktest.pl | 5
tools/testing/selftests/arm64/fp/sve-ptrace.c | 3
tools/testing/selftests/bpf/prog_tests/user_ringbuf.c | 10
tools/testing/selftests/ftrace/test.d/ftrace/func-filter-glob.tc | 2
tools/testing/selftests/futex/include/futextest.h | 11
tools/testing/selftests/memfd/memfd_test.c | 43 +
tools/testing/selftests/net/mptcp/pm_netlink.sh | 1
511 files changed, 4940 insertions(+), 1988 deletions(-)
Aahil Awatramani (1):
bonding: Add independent control state machine
Aaron Kling (1):
ARM: tegra: Use I/O memcpy to write to IRAM
Aaron Plattner (1):
watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition
Ada Couprie Diaz (1):
arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
Aditya Garg (2):
HID: magicmouse: avoid setting up battery timer when not needed
HID: apple: avoid setting up battery timer for devices without battery
Adrian Hunter (1):
scsi: ufs: ufs-pci: Fix default runtime and system PM levels
Al Viro (5):
better lockdep annotations for simple_recursive_removal()
fix locking in efi_secret_unlink()
securityfs: don't pin dentries twice, once is enough...
use uniform permission checks for all mount propagation changes
alloc_fdtable(): change calling conventions.
Alex Deucher (1):
drm/amdgpu: update mmhub 3.0.1 client id mappings
Alex Guo (2):
media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
Alexander Kochetkov (1):
ARM: rockchip: fix kernel hang during smp initialization
Alexander Wilhelm (1):
bus: mhi: host: Fix endianness of BHI vector table
Alok Tiwari (4):
ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
be2net: Use correct byte order and format string for TCP seq and ack_seq
net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
gve: Return error for unknown admin queue command
Amber Lin (1):
drm/amdkfd: Destroy KFD debugfs after destroy KFD wq
Amelie Delaunay (1):
dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs
Amir Mohammad Jahangirzad (1):
fs/orangefs: use snprintf() instead of sprintf()
Anantha Prabhu (1):
RDMA/bnxt_re: Fix to initialize the PBL array
Andreas Dilger (1):
ext4: check fast symlink for ea_inode correctly
André Draszik (1):
scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
Andy Shevchenko (1):
Documentation: ACPI: Fix parent device references
Anshuman Khandual (1):
mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
Anthoine Bourgeois (1):
xen/netfront: Fix TX response spurious interrupts
Archana Patni (1):
scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers
Arnaud Lecomte (1):
jfs: upper bound check of tree index in dbAllocAG
Arnd Bergmann (1):
RDMA/core: reduce stack using in nldev_stat_get_doit()
Artem Sadovnikov (1):
vfio/mlx5: fix possible overflow in tracking max message size
Avraham Stern (1):
wifi: iwlwifi: mvm: fix scan request validation
Baihan Li (1):
drm/hisilicon/hibmc: fix the hibmc loaded failed bug
Baokun Li (4):
ext4: fix zombie groups in average fragment size lists
ext4: fix largest free orders lists corruption on mb_optimize_scan switch
jbd2: prevent softlockup in jbd2_log_do_checkpoint()
ext4: preserve SB_I_VERSION on remount
Bartosz Golaszewski (2):
gpio: wcd934x: check the return value of regmap_update_bits()
gpio: tps65912: check the return value of regmap_update_bits()
Benjamin Berg (1):
wifi: mac80211: avoid lockdep checking when removing deflink
Benjamin Marzinski (1):
dm-table: fix checking for rq stackable devices
Benson Leung (1):
usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default
Bharat Bhushan (1):
crypto: octeontx2 - add timeout for load_fvc completion poll
Bingbu Cao (1):
media: hi556: correct the test pattern configuration
Bitterblue Smith (3):
wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB
wifi: rtw89: Fix rtw89_mac_power_switch() for USB
wifi: rtw89: Disable deep power saving for USB/SDIO
Bjorn Andersson (1):
soc: qcom: mdt_loader: Ensure we don't read past the ELF header
Bjorn Helgaas (1):
mmc: sdhci-pci-gli: Use PCI AER definitions, not hard-coded values
Boshi Yu (1):
RDMA/erdma: Fix ignored return value of init_kernel_qp
Breno Leitao (5):
ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
arm64: Mark kernel as tainted on SAE and SError panic
ptp: Use ratelimite for freerun error message
ipmi: Use dev_warn_ratelimited() for incorrect message warnings
mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
Buday Csaba (1):
net: phy: smsc: add proper reset flags for LAN8710A
Cezary Rojewski (1):
ASoC: Intel: avs: Fix uninitialized pointer error in probe()
Chao Gao (2):
KVM: nVMX: Defer SVI update to vmcs01 on EOI when L2 is active w/o VID
KVM: VMX: Flush shadow VMCS on emergency reboot
Chao Yu (3):
f2fs: fix to do sanity check on ino and xnid
f2fs: fix to call clear_page_private_reference in .{release,invalid}_folio
f2fs: fix to avoid out-of-boundary access in dnode page
Cheick Traore (1):
pinctrl: stm32: Manage irq affinity settings
Chen Yu (1):
ACPI: pfr_update: Fix the driver update version check
Chen-Yu Tsai (1):
platform/chrome: cros_ec: Use per-device lockdep key
Chenyuan Yang (1):
drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
Chris Mason (1):
sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails
Christoph Hellwig (2):
block: reject invalid operation in submit_bio_noacct
xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags
Christoph Paasch (1):
mptcp: drop skb if MPTCP skb extension allocation fails
Christophe Leroy (1):
ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
Christopher Eby (1):
ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks
Corey Minyard (1):
ipmi: Fix strcpy source and destination the same
Cristian Ciocaltea (1):
ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
Cynthia Huang (1):
selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
Dai Ngo (1):
NFSD: detect mismatch of file handle and delegation stateid in OPEN op
Damien Le Moal (8):
ata: libata-sata: Disallow changing LPM state if not supported
scsi: mpt3sas: Correctly handle ATA device errors
scsi: mpi3mr: Correctly handle ATA device errors
ata: libata-scsi: Fix ata_to_sense_error() status handling
PCI: endpoint: Fix configfs group list head handling
PCI: endpoint: Fix configfs group removal on driver teardown
block: Make REQ_OP_ZONE_FINISH a write operation
ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
Dan Carpenter (4):
cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
media: gspca: Add bounds checking to firmware parser
scsi: qla4xxx: Prevent a potential error pointer dereference
ALSA: usb-audio: Fix size validation in convert_chmap_v3()
Dave Stevenson (3):
media: tc358743: Check I2C succeeded during probe
media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
media: tc358743: Increase FIFO trigger level to 374
David Collins (1):
thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required
David Lechner (5):
iio: adc: ad_sigma_delta: don't overallocate scan buffer
iio: imu: bno055: fix OOB access of hw_xlate array
iio: adc: ad_sigma_delta: change to buffer predisable
iio: proximity: isl29501: fix buffered read on big-endian systems
iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read()
David Thompson (1):
gpio: mlxbf2: use platform_get_irq_optional()
Davide Caratti (1):
net/sched: ets: use old 'nbands' while purging unused classes
Edward Adam Davis (2):
jfs: Regular file corruption check
comedi: pcl726: Prevent invalid irq number
Eliav Farber (1):
pps: clients: gpio: fix interrupt handling order in remove path
Emily Deng (1):
drm/ttm: Should to return the evict error
Eric Biggers (4):
thunderbolt: Fix copy+paste error in match_service_id()
lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
ipv6: sr: Fix MAC comparison to be constant-time
fscrypt: Don't use problematic non-inline crypto engines
Eric Dumazet (2):
net: add netdev_lockdep_set_classes() to virtual drivers
net_sched: sch_ets: implement lockless ets_dump()
Eric Work (1):
net: atlantic: add set_power to fw_ops for atl2 to fix wol
Evgeniy Harchenko (1):
ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
Fedor Pchelkin (1):
netlink: avoid infinite retry looping in netlink_unicast()
Filipe Manana (6):
btrfs: abort transaction during log replay if walk_log_tree() failed
btrfs: fix log tree replay failure due to file with 0 links and extents
btrfs: fix qgroup reservation leak on failure to allocate ordered extent
btrfs: qgroup: fix race between quota disable and quota rescan ioctl
btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()
btrfs: send: use fallocate for hole punching with send stream v2
Finn Thain (1):
m68k: Fix lost column on framebuffer debug console
Florian Larysch (1):
net: phy: micrel: fix KSZ8081/KSZ8091 cable test
Florian Westphal (2):
netfilter: ctnetlink: fix refcount leak on table dump
netfilter: nf_reject: don't leak dst refcount for loopback packets
Florin Leotescu (1):
hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state
Gabor Juhos (1):
mtd: spinand: propagate spinand_wait() errors from spinand_write_page()
Gal Pressman (1):
net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
Gang Ba (1):
drm/amdgpu: Avoid extra evict-restore process.
Gautham R. Shenoy (1):
pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
Geliang Tang (1):
mptcp: disable add_addr retransmission when timeout is 0
Geraldo Nascimento (2):
PCI: rockchip: Use standard PCIe definitions
PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining
Giovanni Cabiddu (1):
crypto: qat - fix ring to service map for QAT GEN4
Gokul krishna Krishnakumar (1):
soc: qcom: mdt_loader: Enhance split binary detection
Greg Kroah-Hartman (1):
Linux 6.1.149
Gui-Dong Han (1):
media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
Haiyang Zhang (1):
hv_netvsc: Fix panic during namespace deletion with VF
Hangbin Liu (2):
bonding: update LACP activity flag after setting lacp_active
bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU
Hans Verkuil (1):
media: vivid: fix wrong pixel_array control size
Hans de Goede (1):
mei: bus: Check for still connected devices in mei_cl_bus_dev_release()
Haoran Jiang (1):
LoongArch: BPF: Fix jump offset calculation in tailcall
Haoxiang Li (1):
media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
Harald Mommer (1):
gpio: virtio: Fix config space reading.
Hari Kalavakunta (1):
net: ncsi: Fix buffer overflow in fetching version id
Heiner Kallweit (1):
dpaa_eth: don't use fixed_phy_change_carrier
Helge Deller (1):
Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
Herton R. Krzesinski (1):
mm/debug_vm_pgtable: clear page table entries at destroy_args()
Hiago De Franco (1):
remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU
Horatiu Vultur (1):
phy: mscc: Fix timestamping for vsc8584
Hsin-Te Yuan (1):
thermal: sysfs: Return ENODATA instead of EAGAIN for reads
Huacai Chen (1):
PCI: Extend isolated function probing to LoongArch
Ian Abbott (3):
comedi: fix race between polling and detaching
comedi: Make insn_rw_emulate_bits() do insn->n samples
comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
Ido Schimmel (1):
mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
Ilan Peer (1):
wifi: cfg80211: Fix interface type validation
Ilya Bakoulin (1):
drm/amd/display: Separate set_gsl from set_gsl_source_select
Imre Deak (1):
drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
Jack Xiao (1):
drm/amdgpu: fix incorrect vm flags to map bo
Jakub Acs (1):
net, hsr: reject HSR frame if skb can't hold tag
Jakub Kicinski (2):
uapi: in6: restore visibility of most IPv6 socket options
tls: fix handling of zero-length records on the rx_list
Jakub Ramaseuski (1):
net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
Jan Beulich (1):
compiler: remove __ADDRESSABLE_ASM{_STR,}() again
Jan Kara (1):
udf: Verify partition map count
Jann Horn (1):
eventpoll: Fix semi-unbounded recursion
Jason Wang (1):
vhost: fail early when __vhost_add_used() fails
Jason Xing (1):
ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
Jay Chen (1):
usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
Jean-Baptiste Maneyrol (1):
iio: imu: inv_icm42600: change invalid data error to -EBUSY
Jeff Layton (1):
nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
Jiasheng Jiang (1):
scsi: lpfc: Remove redundant assignment to avoid memory leak
Jiayi Li (2):
ACPI: processor: perflib: Fix initial _PPC limit application
memstick: Fix deadlock by moving removing flag earlier
Jinjiang Tu (1):
mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn
Johan Adolfsson (1):
leds: leds-lp50xx: Handle reg to get correct multi_index
Johan Hovold (11):
net: gianfar: fix device leak when querying time stamp info
net: mtk_eth_soc: fix device leak at probe
net: dpaa: fix device leak when querying time stamp info
usb: gadget: udc: renesas_usb3: fix device leak at unbind
usb: dwc3: meson-g12a: fix device leaks at unbind
wifi: ath11k: fix dest ring-buffer corruption
wifi: ath11k: fix source ring-buffer corruption
wifi: ath11k: fix dest ring-buffer corruption when ring is full
net: enetc: fix device and OF node leak at probe
usb: musb: omap2430: fix device leak at unbind
usb: dwc3: imx8mp: fix device leak at unbind
Johannes Berg (2):
wifi: cfg80211: reject HTC bit for management frames
wifi: mac80211: don't complete management TX on SAE commit
Johannes Thumshirn (1):
btrfs: zoned: use filesystem size not disk size for reclaim decision
John David Anglin (5):
parisc: Check region is readable by user in raw_copy_from_user()
parisc: Revise __get_user() to probe user read access
parisc: Revise gateway LWS calls to probe user read access
parisc: Try to fixup kernel exception in bad_area_nosemaphore path of do_page_fault()
parisc: Update comments in make_insert_tlb
John Garry (2):
scsi: aacraid: Stop using PCI_IRQ_AFFINITY
block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
Jon Hunter (1):
soc/tegra: pmc: Ensure power-domains are in a known state
Jonas Rebmann (1):
net: fec: allow disable coalescing
Jonathan Cameron (1):
iio: light: as73211: Ensure buffer holes are zeroed
Jonathan Santos (1):
iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
Jordan Rhee (1):
gve: prevent ethtool ops after shutdown
Jorge Marques (1):
i3c: master: Initialize ret in i3c_i2c_notifier_call()
Jorge Ramirez-Ortiz (2):
media: venus: hfi: explicitly release IRQ during teardown
media: venus: protect against spurious interrupts during probe
Judith Mendez (1):
arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support
Justin Tee (1):
scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
Kan Liang (1):
perf/x86/intel: Fix crash in icl_update_topdown_event()
Kees Cook (3):
arm64: Handle KCOV __init vs inline mismatches
platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
iommu/amd: Avoid stack buffer overflow from kernel cmdline
Keith Busch (1):
vfio/type1: conditional rescheduling while pinning
Konrad Dybcio (1):
media: venus: Introduce accessors for remapped hfi_buffer_reqs members
Krzysztof Kozlowski (2):
dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints
dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks constraints
Kuen-Han Tsai (1):
usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
Kuninori Morimoto (4):
ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
ASoC: soc-dai.c: add missing flag check at snd_soc_pcm_dai_probe()
ASoC: soc-dai.h: merge DAI call back functions into ops
ASoC: fsl: merge DAI call back functions into ops
Kuniyuki Iwashima (1):
ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc().
Laurentiu Mihalcea (1):
pwm: imx-tpm: Reset counter if CMOD is 0
Leon Romanovsky (1):
net/mlx5e: Properly access RCU protected qdisc_sleeping variable
Liao Yuanhong (1):
ext4: use kmalloc_array() for array space allocation
Lifeng Zheng (2):
cpufreq: Exit governor when failed to start old governor
PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()
Lin.Cao (1):
drm/sched: Remove optimization that causes hang when killing dependent jobs
Lizhi Xu (2):
fs/ntfs3: Add sanity check for file name
jfs: truncate good inode pages when hard link is 0
Lorenzo Stoakes (4):
mm: drop the assumption that VM_SHARED always implies writable
mm: update memfd seal write check to include F_SEAL_WRITE
mm: reinstate ability to map write-sealed memfd mappings read-only
selftests/memfd: add test for mapping write-sealed memfd read-only
Lucy Thrun (1):
ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
Ludwig Disterhof (1):
media: usbtv: Lock resolution while streaming
Lukas Wunner (1):
PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
Ma Ke (1):
sunvdc: Balance device refcount in vdc_port_mpgroup_check
Mael GUERIN (1):
USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
Marek Szyprowski (1):
zynq_fpga: use sgtable-based scatterlist wrappers
Marek Vasut (1):
usb: renesas-xhci: Fix External ROM access timeouts
Mario Limonciello (6):
usb: xhci: Avoid showing warnings for dying controller
usb: xhci: Avoid showing errors during surprise removal
drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual
drm/amd/display: Only finalize atomic_obj if it was initialized
drm/amd: Restore cached power limit during resume
drm/amd/display: Avoid a NULL pointer dereference
Mark Brown (2):
ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace
Masahiro Yamada (2):
kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
kconfig: gconf: fix potential memory leak in renderer_edited()
Masami Hiramatsu (Google) (1):
selftests: tracing: Use mutex_unlock for testing glob filter
Mateusz Guzik (1):
apparmor: use the condition in AA_BUG_FMT even with debug disabled
Matt Johnston (1):
net: mctp: Prevent duplicate binds
Matthieu Baerts (NGI0) (2):
mptcp: pm: kernel: flush: do not reset ADD_ADDR limit
selftests: mptcp: pm: check flush doesn't reset limits
Maurizio Lombardi (1):
scsi: target: core: Generate correct identifiers for PR OUT transport IDs
Maxim Levitsky (3):
KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter
KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs
KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest
Meagan Lloyd (2):
rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
Miao Li (1):
usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
Miaoqian Lin (1):
most: core: Drop device reference after usage in get_channel()
Michael Walle (1):
mtd: spi-nor: Fix spi_nor_try_unlock_all()
Mikhail Lobanov (1):
wifi: mac80211: check basic rates validity in sta_link_apply_parameters
Mikulas Patocka (1):
dm-mpath: don't print the "loaded" message if registering fails
Mina Almasry (1):
netmem: fix skb_frag_address_safe with unreadable skbs
Minhong He (1):
ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
Myrrh Periwinkle (3):
usb: typec: ucsi: Update power_supply on power role change
vt: keyboard: Don't process Unicode characters in K_OFF mode
vt: defkeymap: Map keycodes above 127 to K_HOLE
Namjae Jeon (1):
ksmbd: extend the connection limiting mechanism to support IPv6
Naohiro Aota (1):
btrfs: zoned: do not remove unwritten non-data block group
Nathan Chancellor (3):
usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
NeilBrown (1):
smb/server: avoid deadlock when linking with ReplaceIfExists
Nianyao Tang (1):
arm64/cpufeatures/kvm: Add ARMv8.9 FEAT_ECBHB bits in ID_AA64MMFR1 register
Nicolas Escande (1):
neighbour: add support for NUD_PERMANENT proxy entries
Niklas Söderlund (1):
media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control
Nitin Gote (1):
iosys-map: Fix undefined behavior in iosys_map_clear()
Ojaswin Mujoo (2):
ext4: fix fsmap end of range reporting with bigalloc
ext4: fix reserved gdt blocks handling in fsmap
Oliver Neukum (3):
usb: core: usb_submit_urb: downgrade type check
net: usb: cdc-ncm: check for filtering capability
cdc-acm: fix race between initial clearing halt and open
Oscar Maes (1):
net: ipv4: fix incorrect MTU in broadcast routes
Pagadala Yesu Anjaneyulu (1):
wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
Pali Rohár (1):
cifs: Fix calling CIFSFindFirst() for root path without msearch
Paolo Abeni (3):
mptcp: make fallback action and fallback decision atomic
mptcp: plug races between subflow fail and subflow creation
mptcp: reset fallback status gracefully at disconnect() time
Paul E. McKenney (1):
rcu: Protect ->defer_qs_iw_pending from data race
Pavel Begunkov (1):
io_uring: don't use int for ABI
Pawan Gupta (1):
x86/bugs: Avoid warning when overriding return thunk
Peter Oberparleiter (3):
s390/sclp: Fix SCCB present check
s390/hypfs: Avoid unnecessary ioctl registration in debugfs
s390/hypfs: Enable limited access during lockdown
Peter Robinson (1):
reset: brcmstb: Enable reset drivers for ARCH_BCM2835
Peter Ujfalusi (1):
ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
Petr Pavlu (1):
module: Prevent silent truncation of module name in delete_module(2)
Phillip Lougher (1):
squashfs: fix memory leak in squashfs_fill_super
Prashant Malani (1):
cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
Pu Lehui (1):
tracing: Limit access to parser->buffer when trace_get_user failed
Purva Yeshi (1):
md: dm-zoned-target: Initialize return variable r to avoid uninitialized use
Qingfang Deng (2):
net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path
ppp: fix race conditions in ppp_fill_forward_path
Qu Wenruo (2):
btrfs: do not allow relocation of partially dropped subvolumes
btrfs: populate otime when logging an inode item
Rafael J. Wysocki (2):
ACPI: processor: perflib: Move problematic pr->performance check
PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
Ramya Gnanasekar (1):
wifi: mac80211: update radar_required in channel context after channel switch
Rand Deeb (1):
wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
Randy Dunlap (2):
parisc: Makefile: fix a typo in palo.conf
parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit compilers
Ranjan Kumar (4):
scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
scsi: mpi3mr: Fix race between config read submit and interrupt completion
scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers
scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems
Ricardo Ribalda (3):
media: uvcvideo: Do not mark valid metadata as invalid
media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
media: venus: venc: Clamp param smaller than 1fps and bigger than 240
Ricky Wu (1):
misc: rtsx: usb: Ensure mmc child device is active when card is present
Rob Clark (1):
drm/msm: use trylock for debugfs
Rong Zhang (1):
fs/ntfs3: correctly create symlink for relative path
Sabrina Dubroca (2):
udp: also consider secpath when evaluating ipsec use for checksumming
tls: separate no-async decryption request handling from async
Sakari Ailus (1):
media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
Salah Triki (1):
iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
Sarah Newman (1):
drbd: add missing kref_get in handle_write_conflicts
Sarthak Garg (1):
mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
Sasha Levin (1):
fs: Prevent file descriptor table allocations exceeding INT_MAX
Sean Christopherson (19):
KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow
KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC)
KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update()
KVM: x86: Snapshot the host's DEBUGCTL in common x86
KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs
KVM: x86/pmu: Gate all "unimplemented MSR" prints on report_ignored_msrs
KVM: x86: Plumb "force_immediate_exit" into kvm_entry() tracepoint
KVM: VMX: Re-enter guest in fastpath for "spurious" preemption timer exits
KVM: VMX: Handle forced exit due to preemption timer in fastpath
KVM: x86: Move handling of is_guest_mode() into fastpath exit handlers
KVM: VMX: Handle KVM-induced preemption timer exits in fastpath for L2
KVM: x86: Fully defer to vendor code to decide how to force immediate exit
KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap
KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag
KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported
KVM: VMX: Extract checking of guest's DEBUGCTL into helper
KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
x86/reboot: Harden virtualization hooks for emergency reboot
x86/reboot: KVM: Handle VMXOFF in KVM's reboot callback
Sebastian Ott (1):
ACPI: processor: fix acpi_object initialization
Sebastian Reichel (2):
watchdog: dw_wdt: Fix default timeout
usb: typec: fusb302: cache PD RX state
Selvarasu Ganesan (1):
usb: dwc3: Remove WARN_ON for device endpoint command timeouts
Sergey Bashirov (4):
pNFS: Fix stripe mapping in block/scsi layout
pNFS: Fix disk addr range check in block/scsi layout
pNFS: Handle RPC size limit for layoutcommits
pNFS: Fix uninited ptr deref in block/scsi layout
Sergey Shtylyov (1):
Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync()
Shankari Anand (1):
kconfig: nconf: Ensure null termination where strncpy is used
Shannon Nelson (1):
ionic: clean dbpage in de-init
Shengjiu Wang (1):
ASoC: fsl_sai: replace regmap_write with regmap_update_bits
Shiji Yang (2):
MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
MIPS: lantiq: falcon: sysctrl: fix request memory check logic
Showrya M N (1):
scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
Shubhrajyoti Datta (1):
EDAC/synopsys: Clear the ECC counters on init
Shyam Prasad N (1):
cifs: reset iface weights when we cannot find a candidate
Sravan Kumar Gundu (1):
fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
Stanislaw Gruszka (1):
wifi: iwlegacy: Check rate_idx range after addition
Stefan Metzmacher (1):
smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()
Steve French (1):
smb3: fix for slab out of bounds on mount to ksmbd
Steven Rostedt (3):
ktest.pl: Prevent recursion of default variable options
ftrace: Also allocate and copy hash for reading of filter files
tracing: Remove unneeded goto out logic
Su Hui (1):
usb: xhci: print xhci->xhc_state when queue_command failed
Suchit Karunakaran (1):
kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
Sumanth Gavini (1):
Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
Sven Schnelle (2):
s390/time: Use monotonic clock in get_cycles()
s390/stp: Remove udelay from stp_sync_clock()
Takashi Iwai (5):
ALSA: usb-audio: Validate UAC3 power domain descriptors, too
ALSA: usb-audio: Validate UAC3 cluster segment descriptors
ALSA: hda: Handle the jack polling always via a work
ALSA: hda: Disable jack polling at shutdown
ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
Tetsuo Handa (1):
hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
Theodore Ts'o (2):
ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
ext4: don't try to clear the orphan_present feature block device is r/o
Thomas Fourier (8):
et131x: Add missing check after DMA map
net: ag71xx: Add missing check after DMA map
(powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
powerpc: floppy: Add missing checks after DMA map
wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc()
mtd: rawnand: fsmc: Add missing check after DMA map
mtd: rawnand: renesas: Add missing check after DMA map
Thomas Weißschuh (5):
tools/nolibc: define time_t in terms of __kernel_old_time_t
tools/build: Fix s390(x) cross-compilation with clang
um: Re-evaluate thread flags repeatedly
MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
kbuild: userprogs: use correct linker when mixing clang and GNU ld
Thorsten Blum (1):
usb: storage: realtek_cr: Use correct byte order for bcs->Residue
Tianxiang Peng (1):
x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
Tim Harvey (1):
hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
Timur Kristóf (6):
drm/amd/display: Don't overwrite dce60_clk_mgr
drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
drm/amd/display: Don't overclock DCE 6 by 15%
Tomasz Michalec (2):
usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
platform/chrome: cros_ec_typec: Defer probe on missing EC parent
Trond Myklebust (1):
NFS: Fix the setting of capabilities when automounting a new filesystem
Tvrtko Ursulin (1):
drm/ttm: Respect the shrinker core free target
Tzung-Bi Shih (2):
platform/chrome: cros_ec: remove unneeded label and if-condition
platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
Ulf Hansson (1):
mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
Uwe Kleine-König (3):
pwm: mediatek: Handle hardware enable and clock enable separately
pwm: mediatek: Fix duty and period setting
usb: musb: omap2430: Convert to platform remove callback returning void
ValdikSS (1):
igc: fix disabling L1.2 PCI-E link substate on I226 on init
Vasiliy Kovalev (1):
ALSA: hda/realtek: Fix headset mic on HONOR BRB-X
Vedang Nagar (2):
media: venus: Add a check for packet size after reading from shared memory
media: venus: Fix OOB read due to missing payload bound check
Viacheslav Dubeyko (4):
hfs: fix slab-out-of-bounds in hfs_bnode_read()
hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
hfs: fix not erasing deleted b-tree node issue
Victor Shih (3):
mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
mmc: sdhci-pci-gli: Add a new function to simplify the code
mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER
Vladimir Zapolskiy (1):
media: qcom: camss: cleanup media device allocated resource on error path
Waiman Long (2):
mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
Wang Liang (1):
net: bridge: fix soft lockup in br_multicast_query_expired()
Wang Zhaolong (1):
smb: client: remove redundant lstrp update in negotiate protocol
Wei Gao (1):
ext2: Handle fiemap on empty files to prevent EINVAL
Wen Chen (1):
drm/amd/display: Fix 'failed to blank crtc!'
Will Deacon (4):
vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page
vsock/virtio: Validate length in packet header before skb_put()
vhost/vsock: Avoid allocating arbitrarily-sized SKBs
KVM: arm64: Fix kernel BUG() due to bad backport of FPSIMD/SVE/SME fix
William Liu (2):
net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
Willy Tarreau (1):
tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros
Wolfram Sang (3):
media: usb: hdpvr: disable zero-length read messages
i3c: add missing include to internal header
i3c: don't fail if GETHDRCAP is unsupported
Xinxin Wan (1):
ASoC: codecs: rt5640: Retry DEVICE_ID verification
Xinyu Liu (1):
usb: core: config: Prevent OOB read in SS endpoint companion parsing
Xu Yang (2):
net: usb: asix_devices: add phy_mask for ax88772 mdio bus
usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test
Xu Yilun (1):
fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
Yann E. MORIN (1):
kconfig: lxdialog: fix 'space' to (de)select options
Yazen Ghannam (1):
x86/mce/amd: Add default names for MCA banks and blocks
Ye Bin (1):
fs/buffer: fix use-after-free when call bh_read() helper
Yonghong Song (1):
selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size
Yongzhen Zhang (1):
fbdev: fix potential buffer overflow in do_register_framebuffer()
Youngjun Lee (1):
media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
Youssef Samir (1):
bus: mhi: host: Detect events pointing to unexpected TREs
Yuichiro Tsuji (1):
net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
Yunhui Cui (1):
serial: 8250: fix panic due to PSLVERR
Yury Norov [NVIDIA] (1):
RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
Zenm Chen (1):
USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
Zhang Lixu (2):
iio: hid-sensor-prox: Restore lost scale assignments
iio: hid-sensor-prox: Fix incorrect OFFSET calculation
Zhang Shurong (1):
media: ov2659: Fix memory leaks in ov2659_probe()
Zhang Yi (1):
ext4: fix hole length calculation overflow in non-extent inodes
Zhiqi Song (1):
crypto: hisilicon/hpre - fix dma unmap sequence
Zhu Qiyu (1):
ACPI: PRM: Reduce unnecessary printing to avoid user confusion
Ziyan Fu (1):
watchdog: iTCO_wdt: Report error if timeout configuration fails
chenchangcheng (1):
media: uvcvideo: Fix bandwidth issue for Alcor camera
fangzhong.zhou (1):
i2c: Force DLL0945 touchpad i2c freq to 100khz
jackysliu (1):
scsi: bfa: Double-free fix
tuhaowen (1):
PM: sleep: console: Fix the black screen issue
zhangjianrong (2):
net: thunderbolt: Enable end-to-end flow control also in transmit
net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths()
Álvaro Fernández Rojas (5):
net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
net: dsa: b53: prevent DIS_LEARNING access on BCM5325
net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
3 weeks, 2 days
- 1
- 1
Linux 5.15.190
by Greg Kroah-Hartman
I'm announcing the release of the 5.15.190 kernel.
All users of the 5.15 kernel series must upgrade.
The updated 5.15.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.15.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/filesystems/f2fs.rst | 6
Documentation/firmware-guide/acpi/i2c-muxes.rst | 8
Documentation/memory-barriers.txt | 11
Documentation/networking/mptcp-sysctl.rst | 2
Makefile | 4
arch/alpha/include/asm/processor.h | 2
arch/alpha/kernel/process.c | 5
arch/arc/include/asm/processor.h | 2
arch/arc/kernel/stacktrace.c | 4
arch/arm/Makefile | 2
arch/arm/boot/dts/am335x-boneblack.dts | 2
arch/arm/boot/dts/imx6ul-kontron-n6x1x-s.dtsi | 1
arch/arm/boot/dts/vfxxx.dtsi | 2
arch/arm/include/asm/processor.h | 2
arch/arm/kernel/process.c | 4
arch/arm/mach-rockchip/platsmp.c | 15
arch/arm/mach-tegra/reset.c | 2
arch/arm64/boot/dts/freescale/imx8mm-beacon-som.dtsi | 2
arch/arm64/boot/dts/freescale/imx8mn-beacon-som.dtsi | 2
arch/arm64/include/asm/acpi.h | 2
arch/arm64/include/asm/processor.h | 2
arch/arm64/kernel/entry.S | 6
arch/arm64/kernel/fpsimd.c | 4
arch/arm64/kernel/process.c | 4
arch/arm64/kernel/traps.c | 1
arch/arm64/mm/fault.c | 1
arch/arm64/mm/ptdump_debugfs.c | 3
arch/csky/include/asm/processor.h | 2
arch/csky/kernel/stacktrace.c | 5
arch/h8300/include/asm/processor.h | 2
arch/h8300/kernel/process.c | 5
arch/hexagon/include/asm/processor.h | 2
arch/hexagon/kernel/process.c | 4
arch/ia64/include/asm/processor.h | 2
arch/ia64/kernel/process.c | 5
arch/m68k/Kconfig.debug | 2
arch/m68k/include/asm/processor.h | 2
arch/m68k/kernel/early_printk.c | 42 -
arch/m68k/kernel/head.S | 39 -
arch/m68k/kernel/process.c | 4
arch/microblaze/include/asm/processor.h | 2
arch/microblaze/kernel/process.c | 2
arch/mips/crypto/chacha-core.S | 20
arch/mips/include/asm/processor.h | 2
arch/mips/include/asm/vpe.h | 8
arch/mips/kernel/process.c | 24
arch/mips/mm/tlb-r4k.c | 56 +
arch/nds32/include/asm/processor.h | 2
arch/nds32/kernel/process.c | 7
arch/nios2/include/asm/processor.h | 2
arch/nios2/kernel/process.c | 5
arch/openrisc/include/asm/processor.h | 2
arch/openrisc/kernel/process.c | 2
arch/parisc/Makefile | 2
arch/parisc/include/asm/processor.h | 2
arch/parisc/kernel/process.c | 5
arch/powerpc/configs/ppc6xx_defconfig | 1
arch/powerpc/include/asm/processor.h | 2
arch/powerpc/kernel/eeh.c | 1
arch/powerpc/kernel/eeh_driver.c | 48 +
arch/powerpc/kernel/eeh_pe.c | 11
arch/powerpc/kernel/pci-hotplug.c | 3
arch/powerpc/kernel/process.c | 9
arch/powerpc/platforms/512x/mpc512x_lpbfifo.c | 6
arch/riscv/include/asm/processor.h | 2
arch/riscv/kernel/stacktrace.c | 12
arch/s390/hypfs/hypfs_dbfs.c | 19
arch/s390/include/asm/processor.h | 2
arch/s390/include/asm/timex.h | 13
arch/s390/kernel/process.c | 4
arch/s390/kernel/time.c | 2
arch/s390/mm/dump_pagetables.c | 2
arch/sh/Makefile | 10
arch/sh/boot/compressed/Makefile | 4
arch/sh/boot/romimage/Makefile | 4
arch/sh/include/asm/processor_32.h | 2
arch/sh/kernel/process_32.c | 5
arch/sparc/include/asm/processor_32.h | 2
arch/sparc/include/asm/processor_64.h | 2
arch/sparc/kernel/process_32.c | 5
arch/sparc/kernel/process_64.c | 5
arch/um/drivers/rtc_user.c | 2
arch/um/include/asm/processor-generic.h | 2
arch/um/kernel/process.c | 5
arch/x86/include/asm/processor.h | 2
arch/x86/include/asm/xen/hypercall.h | 6
arch/x86/kernel/cpu/amd.c | 2
arch/x86/kernel/cpu/bugs.c | 5
arch/x86/kernel/cpu/hygon.c | 3
arch/x86/kernel/cpu/mce/amd.c | 13
arch/x86/kernel/process.c | 62 --
arch/x86/kvm/vmx/vmx.c | 5
arch/x86/mm/extable.c | 5
arch/xtensa/include/asm/processor.h | 2
arch/xtensa/kernel/process.c | 5
block/blk-settings.c | 2
drivers/acpi/acpi_processor.c | 2
drivers/acpi/apei/ghes.c | 2
drivers/acpi/prmt.c | 26
drivers/acpi/processor_idle.c | 4
drivers/acpi/processor_perflib.c | 11
drivers/ata/Kconfig | 35 -
drivers/ata/libata-sata.c | 5
drivers/ata/libata-scsi.c | 20
drivers/base/power/domain_governor.c | 18
drivers/base/power/runtime.c | 5
drivers/base/regmap/regmap.c | 2
drivers/block/drbd/drbd_receiver.c | 6
drivers/block/sunvdc.c | 4
drivers/bus/fsl-mc/fsl-mc-bus.c | 19
drivers/bus/mhi/host/boot.c | 8
drivers/bus/mhi/host/internal.h | 4
drivers/bus/mhi/host/main.c | 15
drivers/char/hw_random/mtk-rng.c | 4
drivers/char/ipmi/ipmi_msghandler.c | 8
drivers/char/ipmi/ipmi_watchdog.c | 59 +-
drivers/clk/clk-axi-clkgen.c | 2
drivers/clk/davinci/psc.c | 5
drivers/clk/sunxi-ng/ccu-sun8i-v3s.c | 3
drivers/clk/xilinx/xlnx_vcu.c | 4
drivers/comedi/comedi_fops.c | 66 +-
drivers/comedi/comedi_internal.h | 1
drivers/comedi/drivers.c | 43 -
drivers/comedi/drivers/aio_iiro_16.c | 3
drivers/comedi/drivers/comedi_test.c | 2
drivers/comedi/drivers/das16m1.c | 3
drivers/comedi/drivers/das6402.c | 3
drivers/comedi/drivers/pcl726.c | 3
drivers/comedi/drivers/pcl812.c | 3
drivers/cpufreq/armada-8k-cpufreq.c | 2
drivers/cpufreq/cppc_cpufreq.c | 2
drivers/cpufreq/cpufreq.c | 29
drivers/cpufreq/intel_pstate.c | 4
drivers/cpuidle/governors/menu.c | 21
drivers/crypto/ccp/ccp-debugfs.c | 3
drivers/crypto/hisilicon/hpre/hpre_crypto.c | 8
drivers/crypto/img-hash.c | 2
drivers/crypto/inside-secure/safexcel_hash.c | 8
drivers/crypto/keembay/keembay-ocs-hcu-core.c | 8
drivers/crypto/marvell/cesa/cipher.c | 4
drivers/crypto/marvell/cesa/hash.c | 5
drivers/crypto/marvell/octeontx2/otx2_cptpf_ucode.c | 16
drivers/crypto/qat/qat_common/adf_transport_debug.c | 4
drivers/devfreq/devfreq.c | 10
drivers/devfreq/governor_userspace.c | 6
drivers/dma/mv_xor.c | 21
drivers/dma/nbpfaxi.c | 24
drivers/edac/synopsys_edac.c | 97 +--
drivers/fpga/zynq-fpga.c | 10
drivers/gpio/gpio-tps65912.c | 7
drivers/gpio/gpio-virtio.c | 9
drivers/gpio/gpio-wcd934x.c | 7
drivers/gpu/drm/amd/amdgpu/amdgpu_csa.c | 4
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 3
drivers/gpu/drm/amd/display/dc/bios/command_table.c | 2
drivers/gpu/drm/amd/display/dc/clk_mgr/clk_mgr.c | 1
drivers/gpu/drm/amd/display/dc/clk_mgr/dce100/dce_clk_mgr.c | 2
drivers/gpu/drm/amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 40 -
drivers/gpu/drm/amd/display/dc/clk_mgr/dce60/dce60_clk_mgr.c | 31 -
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 11
drivers/gpu/drm/amd/display/modules/hdcp/hdcp_psp.c | 3
drivers/gpu/drm/amd/pm/powerplay/hwmgr/smu_helper.c | 2
drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 6
drivers/gpu/drm/amd/pm/swsmu/smu11/vangogh_ppt.c | 37 -
drivers/gpu/drm/drm_dp_helper.c | 2
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 4
drivers/gpu/drm/msm/msm_gem.c | 3
drivers/gpu/drm/rockchip/rockchip_drm_fb.c | 9
drivers/gpu/drm/scheduler/sched_entity.c | 27
drivers/gpu/drm/ttm/ttm_pool.c | 8
drivers/gpu/drm/ttm/ttm_resource.c | 3
drivers/hid/hid-core.c | 19
drivers/hid/hid-magicmouse.c | 51 +
drivers/hwmon/corsair-cpro.c | 5
drivers/hwmon/gsc-hwmon.c | 4
drivers/i2c/busses/i2c-qup.c | 4
drivers/i2c/busses/i2c-stm32.c | 8
drivers/i2c/busses/i2c-stm32f7.c | 4
drivers/i2c/busses/i2c-virtio.c | 15
drivers/i2c/i2c-core-acpi.c | 1
drivers/i3c/internals.h | 1
drivers/i3c/master.c | 2
drivers/idle/intel_idle.c | 2
drivers/iio/adc/ad7768-1.c | 23
drivers/iio/adc/ad_sigma_delta.c | 4
drivers/iio/adc/max1363.c | 43 -
drivers/iio/adc/stm32-adc-core.c | 7
drivers/iio/imu/inv_icm42600/inv_icm42600_temp.c | 6
drivers/iio/light/as73211.c | 2
drivers/iio/light/hid-sensor-prox.c | 8
drivers/iio/pressure/bmp280-core.c | 9
drivers/iio/proximity/isl29501.c | 16
drivers/infiniband/core/cache.c | 4
drivers/infiniband/core/nldev.c | 22
drivers/infiniband/hw/bnxt_re/qplib_res.c | 2
drivers/infiniband/hw/hfi1/affinity.c | 44 -
drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 15
drivers/infiniband/hw/mlx5/dm.c | 2
drivers/input/joystick/xpad.c | 2
drivers/input/keyboard/gpio_keys.c | 4
drivers/interconnect/qcom/sc7280.c | 1
drivers/iommu/amd/init.c | 4
drivers/leds/leds-lp50xx.c | 11
drivers/md/dm-ps-historical-service-time.c | 4
drivers/md/dm-ps-queue-length.c | 4
drivers/md/dm-ps-round-robin.c | 4
drivers/md/dm-ps-service-time.c | 4
drivers/md/dm-zoned-target.c | 2
drivers/media/cec/usb/rainshadow/rainshadow-cec.c | 3
drivers/media/dvb-frontends/dib7000p.c | 10
drivers/media/i2c/hi556.c | 26
drivers/media/i2c/ov2659.c | 3
drivers/media/i2c/tc358743.c | 86 +-
drivers/media/platform/qcom/camss/camss.c | 10
drivers/media/platform/qcom/venus/core.c | 21
drivers/media/platform/qcom/venus/core.h | 2
drivers/media/platform/qcom/venus/dbgfs.c | 9
drivers/media/platform/qcom/venus/dbgfs.h | 13
drivers/media/platform/qcom/venus/hfi_venus.c | 5
drivers/media/platform/qcom/venus/vdec.c | 5
drivers/media/platform/qcom/venus/venc.c | 5
drivers/media/usb/gspca/vicam.c | 10
drivers/media/usb/hdpvr/hdpvr-i2c.c | 6
drivers/media/usb/usbtv/usbtv-video.c | 4
drivers/media/usb/uvc/uvc_driver.c | 3
drivers/media/usb/uvc/uvc_video.c | 21
drivers/media/v4l2-core/v4l2-common.c | 8
drivers/media/v4l2-core/v4l2-ctrls-core.c | 9
drivers/memstick/core/memstick.c | 3
drivers/memstick/host/rtsx_usb_ms.c | 1
drivers/misc/cardreader/rtsx_usb.c | 16
drivers/mmc/host/bcm2835.c | 3
drivers/mmc/host/rtsx_usb_sdmmc.c | 4
drivers/mmc/host/sdhci-msm.c | 14
drivers/mmc/host/sdhci-pci-core.c | 3
drivers/mmc/host/sdhci-pci-gli.c | 4
drivers/mmc/host/sdhci_am654.c | 9
drivers/most/core.c | 2
drivers/mtd/ftl.c | 2
drivers/mtd/nand/raw/atmel/nand-controller.c | 2
drivers/mtd/nand/raw/atmel/pmecc.c | 6
drivers/mtd/nand/raw/fsmc_nand.c | 2
drivers/mtd/nand/raw/rockchip-nand-controller.c | 15
drivers/mtd/nand/spi/core.c | 5
drivers/net/bonding/bond_3ad.c | 25
drivers/net/bonding/bond_options.c | 1
drivers/net/can/kvaser_pciefd.c | 1
drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 1
drivers/net/dsa/b53/b53_common.c | 65 +-
drivers/net/dsa/b53/b53_regs.h | 2
drivers/net/ethernet/agere/et131x.c | 36 +
drivers/net/ethernet/aquantia/atlantic/aq_hw.h | 2
drivers/net/ethernet/aquantia/atlantic/hw_atl2/hw_atl2_utils_fw.c | 39 +
drivers/net/ethernet/atheros/ag71xx.c | 9
drivers/net/ethernet/cavium/thunder/thunder_bgx.c | 4
drivers/net/ethernet/emulex/benet/be_cmds.c | 2
drivers/net/ethernet/emulex/benet/be_main.c | 8
drivers/net/ethernet/freescale/dpaa/dpaa_eth.c | 2
drivers/net/ethernet/freescale/dpaa/dpaa_ethtool.c | 4
drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c | 15
drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c | 15
drivers/net/ethernet/freescale/enetc/enetc_pf.c | 14
drivers/net/ethernet/freescale/fec_main.c | 34 -
drivers/net/ethernet/freescale/gianfar_ethtool.c | 4
drivers/net/ethernet/google/gve/gve_adminq.c | 1
drivers/net/ethernet/google/gve/gve_main.c | 67 +-
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 36 -
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_ptp.c | 9
drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 6
drivers/net/ethernet/intel/e1000e/defines.h | 3
drivers/net/ethernet/intel/e1000e/ich8lan.c | 2
drivers/net/ethernet/intel/e1000e/nvm.c | 6
drivers/net/ethernet/intel/fm10k/fm10k.h | 3
drivers/net/ethernet/intel/i40e/i40e.h | 2
drivers/net/ethernet/intel/i40e/i40e_ethtool.c | 3
drivers/net/ethernet/intel/i40e/i40e_main.c | 18
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 4
drivers/net/ethernet/intel/ice/ice_flex_pipe.c | 2
drivers/net/ethernet/intel/igc/igc_main.c | 14
drivers/net/ethernet/intel/ixgbe/ixgbe.h | 3
drivers/net/ethernet/intel/ixgbe/ixgbe_xsk.c | 4
drivers/net/ethernet/mellanox/mlx5/core/en.h | 24
drivers/net/ethernet/mellanox/mlx5/core/en/qos.c | 2
drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 13
drivers/net/ethernet/mellanox/mlx5/core/lib/dm.c | 4
drivers/net/ethernet/mellanox/mlx5/core/main.c | 3
drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2
drivers/net/ethernet/mellanox/mlxsw/trap.h | 1
drivers/net/ethernet/xilinx/xilinx_emaclite.c | 2
drivers/net/hyperv/hyperv_net.h | 3
drivers/net/hyperv/netvsc_drv.c | 29
drivers/net/phy/dp83640.c | 6
drivers/net/phy/mscc/mscc.h | 12
drivers/net/phy/mscc/mscc_main.c | 12
drivers/net/phy/mscc/mscc_ptp.c | 50 +
drivers/net/phy/mscc/mscc_ptp.h | 1
drivers/net/phy/nxp-c45-tja11xx.c | 2
drivers/net/phy/smsc.c | 1
drivers/net/ppp/ppp_generic.c | 17
drivers/net/ppp/pptp.c | 18
drivers/net/thunderbolt.c | 8
drivers/net/usb/asix_devices.c | 1
drivers/net/usb/sierra_net.c | 4
drivers/net/usb/usbnet.c | 11
drivers/net/vrf.c | 2
drivers/net/wireless/ath/ath11k/hal.c | 25
drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c | 8
drivers/net/wireless/broadcom/brcm80211/brcmsmac/phy/phy_lcn.c | 2
drivers/net/wireless/intel/iwlegacy/4965-mac.c | 5
drivers/net/wireless/intel/iwlwifi/dvm/main.c | 11
drivers/net/wireless/intel/iwlwifi/dvm/rs.c | 2
drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 7
drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 4
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 2
drivers/net/wireless/marvell/mwl8k.c | 4
drivers/net/wireless/realtek/rtl818x/rtl8187/dev.c | 3
drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 2
drivers/net/wireless/realtek/rtlwifi/pci.c | 23
drivers/net/xen-netfront.c | 5
drivers/nvme/host/core.c | 4
drivers/pci/controller/pcie-rockchip-host.c | 2
drivers/pci/controller/vmd.c | 3
drivers/pci/endpoint/functions/pci-epf-vntb.c | 4
drivers/pci/endpoint/pci-ep-cfs.c | 1
drivers/pci/endpoint/pci-epf-core.c | 2
drivers/pci/hotplug/pnv_php.c | 233 +++++++
drivers/pci/pci-acpi.c | 4
drivers/pci/pci.c | 8
drivers/pci/probe.c | 2
drivers/phy/tegra/xusb-tegra186.c | 59 +-
drivers/pinctrl/mediatek/pinctrl-moore.c | 18
drivers/pinctrl/stm32/pinctrl-stm32.c | 1
drivers/pinctrl/sunxi/pinctrl-sunxi.c | 11
drivers/platform/chrome/cros_ec.c | 23
drivers/platform/chrome/cros_ec.h | 2
drivers/platform/chrome/cros_ec_i2c.c | 4
drivers/platform/chrome/cros_ec_lpc.c | 4
drivers/platform/chrome/cros_ec_spi.c | 4
drivers/platform/chrome/cros_ec_typec.c | 4
drivers/platform/x86/ideapad-laptop.c | 2
drivers/platform/x86/think-lmi.c | 27
drivers/platform/x86/thinkpad_acpi.c | 4
drivers/power/supply/cpcap-charger.c | 5
drivers/power/supply/max14577_charger.c | 4
drivers/powercap/intel_rapl_common.c | 23
drivers/pps/clients/pps-gpio.c | 5
drivers/pps/pps.c | 11
drivers/ptp/ptp_private.h | 5
drivers/ptp/ptp_vclock.c | 7
drivers/pwm/pwm-imx-tpm.c | 9
drivers/pwm/pwm-mediatek.c | 78 +-
drivers/regulator/core.c | 1
drivers/reset/Kconfig | 10
drivers/rtc/rtc-ds1307.c | 17
drivers/rtc/rtc-hym8563.c | 2
drivers/rtc/rtc-pcf85063.c | 2
drivers/rtc/rtc-pcf8563.c | 2
drivers/rtc/rtc-rv3028.c | 2
drivers/scsi/aacraid/comminit.c | 3
drivers/scsi/bfa/bfad_im.c | 1
drivers/scsi/ibmvscsi_tgt/libsrp.c | 6
drivers/scsi/isci/request.c | 2
drivers/scsi/libiscsi.c | 3
drivers/scsi/lpfc/lpfc_debugfs.c | 1
drivers/scsi/lpfc/lpfc_scsi.c | 4
drivers/scsi/mpi3mr/mpi3mr.h | 6
drivers/scsi/mpi3mr/mpi3mr_fw.c | 17
drivers/scsi/mpi3mr/mpi3mr_os.c | 2
drivers/scsi/mpt3sas/mpt3sas_scsih.c | 22
drivers/scsi/mvsas/mv_sas.c | 4
drivers/scsi/qla4xxx/ql4_os.c | 2
drivers/scsi/scsi_scan.c | 2
drivers/scsi/scsi_transport_sas.c | 60 +-
drivers/scsi/ufs/ufs-exynos.c | 4
drivers/scsi/ufs/ufshcd-pci.c | 42 +
drivers/scsi/ufs/ufshcd.c | 10
drivers/soc/aspeed/aspeed-lpc-snoop.c | 13
drivers/soc/qcom/mdt_loader.c | 41 +
drivers/soc/tegra/pmc.c | 51 -
drivers/soundwire/stream.c | 2
drivers/staging/fbtft/fbtft-core.c | 1
drivers/staging/media/imx/imx-media-csc-scaler.c | 2
drivers/staging/nvec/nvec_power.c | 2
drivers/target/target_core_fabric_lib.c | 63 +-
drivers/target/target_core_internal.h | 4
drivers/target/target_core_pr.c | 18
drivers/thermal/qcom/qcom-spmi-temp-alarm.c | 43 +
drivers/thermal/thermal_sysfs.c | 9
drivers/thunderbolt/domain.c | 2
drivers/thunderbolt/switch.c | 2
drivers/tty/serial/8250/8250_port.c | 3
drivers/tty/serial/pch_uart.c | 2
drivers/tty/vt/defkeymap.c_shipped | 112 +++
drivers/tty/vt/keyboard.c | 2
drivers/usb/atm/cxacru.c | 106 +--
drivers/usb/chipidea/ci.h | 18
drivers/usb/chipidea/udc.c | 10
drivers/usb/class/cdc-acm.c | 11
drivers/usb/core/config.c | 10
drivers/usb/core/hcd.c | 8
drivers/usb/core/hub.c | 60 +-
drivers/usb/core/hub.h | 1
drivers/usb/core/quirks.c | 1
drivers/usb/core/urb.c | 2
drivers/usb/dwc3/dwc3-imx8mp.c | 6
drivers/usb/dwc3/dwc3-meson-g12a.c | 3
drivers/usb/dwc3/dwc3-qcom.c | 7
drivers/usb/dwc3/ep0.c | 20
drivers/usb/dwc3/gadget.c | 19
drivers/usb/early/xhci-dbc.c | 4
drivers/usb/gadget/composite.c | 5
drivers/usb/gadget/configfs.c | 2
drivers/usb/gadget/udc/renesas_usb3.c | 1
drivers/usb/host/xhci-hub.c | 3
drivers/usb/host/xhci-mem.c | 24
drivers/usb/host/xhci-pci-renesas.c | 7
drivers/usb/host/xhci-ring.c | 19
drivers/usb/host/xhci.c | 24
drivers/usb/host/xhci.h | 3
drivers/usb/misc/apple-mfi-fastcharge.c | 24
drivers/usb/musb/musb_core.c | 62 +-
drivers/usb/musb/musb_core.h | 11
drivers/usb/musb/musb_debugfs.c | 6
drivers/usb/musb/musb_gadget.c | 30 -
drivers/usb/musb/musb_host.c | 6
drivers/usb/musb/musb_virthub.c | 18
drivers/usb/musb/omap2430.c | 16
drivers/usb/phy/phy-mxs-usb.c | 4
drivers/usb/serial/ftdi_sio.c | 2
drivers/usb/serial/ftdi_sio_ids.h | 3
drivers/usb/serial/option.c | 7
drivers/usb/storage/realtek_cr.c | 2
drivers/usb/storage/unusual_devs.h | 29
drivers/usb/typec/mux/intel_pmc_mux.c | 2
drivers/usb/typec/tcpm/fusb302.c | 8
drivers/usb/typec/tcpm/tcpm.c | 64 +-
drivers/usb/typec/ucsi/psy.c | 2
drivers/usb/typec/ucsi/ucsi.c | 1
drivers/usb/typec/ucsi/ucsi.h | 7
drivers/vhost/scsi.c | 4
drivers/vhost/vhost.c | 3
drivers/video/console/vgacon.c | 2
drivers/video/fbdev/core/fbcon.c | 9
drivers/video/fbdev/imxfb.c | 9
drivers/watchdog/dw_wdt.c | 2
drivers/watchdog/iTCO_wdt.c | 6
drivers/watchdog/sbsa_gwdt.c | 50 +
drivers/watchdog/ziirave_wdt.c | 3
drivers/xen/gntdev-common.h | 4
drivers/xen/gntdev.c | 71 +-
fs/btrfs/relocation.c | 19
fs/btrfs/tree-log.c | 53 +
fs/buffer.c | 2
fs/cifs/cifssmb.c | 10
fs/cifs/file.c | 10
fs/cifs/smb2ops.c | 7
fs/cifs/smbdirect.c | 14
fs/eventpoll.c | 60 +-
fs/ext2/inode.c | 12
fs/ext4/fsmap.c | 23
fs/ext4/indirect.c | 4
fs/ext4/inline.c | 19
fs/ext4/inode.c | 2
fs/ext4/mballoc.c | 33 -
fs/ext4/orphan.c | 5
fs/ext4/super.c | 2
fs/f2fs/extent_cache.c | 2
fs/f2fs/f2fs.h | 2
fs/f2fs/inode.c | 28
fs/f2fs/node.c | 10
fs/file.c | 90 +--
fs/hfs/bnode.c | 93 +++
fs/hfsplus/bnode.c | 92 +++
fs/hfsplus/extents.c | 3
fs/hfsplus/unicode.c | 7
fs/hfsplus/xattr.c | 6
fs/hugetlbfs/inode.c | 2
fs/isofs/inode.c | 9
fs/jbd2/checkpoint.c | 1
fs/jfs/file.c | 3
fs/jfs/inode.c | 2
fs/jfs/jfs_dmap.c | 10
fs/jfs/jfs_imap.c | 13
fs/ksmbd/smb2pdu.c | 16
fs/ksmbd/smb_common.c | 2
fs/ksmbd/transport_rdma.c | 97 +--
fs/libfs.c | 4
fs/namespace.c | 39 -
fs/nfs/blocklayout/blocklayout.c | 4
fs/nfs/blocklayout/dev.c | 5
fs/nfs/blocklayout/extent_tree.c | 20
fs/nfs/client.c | 44 +
fs/nfs/export.c | 11
fs/nfs/flexfilelayout/flexfilelayout.c | 26
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 6
fs/nfs/internal.h | 10
fs/nfs/nfs4client.c | 15
fs/nfs/nfs4proc.c | 12
fs/nfs/pnfs.c | 11
fs/nfsd/nfs4state.c | 34 -
fs/nilfs2/inode.c | 9
fs/ntfs3/dir.c | 3
fs/ntfs3/file.c | 5
fs/ntfs3/inode.c | 31 -
fs/orangefs/orangefs-debugfs.c | 8
fs/squashfs/super.c | 14
fs/udf/super.c | 13
include/asm-generic/barrier.h | 33 +
include/linux/bitmap.h | 2
include/linux/blk_types.h | 8
include/linux/compiler.h | 8
include/linux/cpuset.h | 17
include/linux/fs.h | 4
include/linux/fs_context.h | 2
include/linux/if_vlan.h | 6
include/linux/memfd.h | 14
include/linux/mlx5/device.h | 1
include/linux/mm.h | 80 +-
include/linux/mmzone.h | 22
include/linux/moduleparam.h | 5
include/linux/pci.h | 10
include/linux/platform_data/cros_ec_proto.h | 4
include/linux/pps_kernel.h | 1
include/linux/sched.h | 1
include/linux/skbuff.h | 31 +
include/linux/usb/usbnet.h | 1
include/linux/xarray.h | 15
include/net/bond_3ad.h | 1
include/net/cfg80211.h | 2
include/net/mac80211.h | 2
include/net/tc_act/tc_ctinfo.h | 6
include/net/udp.h | 24
include/sound/soc-dai.h | 13
include/uapi/linux/in6.h | 4
include/uapi/linux/io_uring.h | 2
kernel/bpf/helpers.c | 11
kernel/cgroup/cpuset.c | 23
kernel/events/core.c | 20
kernel/fork.c | 2
kernel/power/console.c | 7
kernel/rcu/tree_plugin.h | 3
kernel/sched/core.c | 19
kernel/sched/deadline.c | 4
kernel/sched/loadavg.c | 2
kernel/sched/rt.c | 6
kernel/sched/sched.h | 2
kernel/trace/ftrace.c | 19
kernel/trace/preemptirq_delay_test.c | 13
kernel/trace/trace.c | 33 -
kernel/trace/trace.h | 8
kernel/trace/trace_events.c | 5
kernel/ucount.c | 2
lib/bitmap.c | 13
mm/debug_vm_pgtable.c | 9
mm/filemap.c | 2
mm/hmm.c | 2
mm/kmemleak.c | 10
mm/madvise.c | 2
mm/memfd.c | 2
mm/memory-failure.c | 8
mm/mmap.c | 10
mm/page_alloc.c | 13
mm/ptdump.c | 2
mm/shmem.c | 2
mm/vmalloc.c | 17
mm/zsmalloc.c | 3
net/8021q/vlan.c | 42 +
net/8021q/vlan.h | 1
net/appletalk/aarp.c | 24
net/bluetooth/l2cap_core.c | 26
net/bluetooth/l2cap_sock.c | 3
net/bluetooth/smp.c | 21
net/bluetooth/smp.h | 1
net/bridge/br_multicast.c | 16
net/bridge/br_private.h | 2
net/bridge/br_switchdev.c | 3
net/caif/cfctrl.c | 294 ++++------
net/core/filter.c | 3
net/core/netpoll.c | 7
net/core/skmsg.c | 57 +
net/hsr/hsr_slave.c | 8
net/ipv4/netfilter/nf_reject_ipv4.c | 6
net/ipv4/route.c | 1
net/ipv4/tcp_input.c | 3
net/ipv4/udp_offload.c | 2
net/ipv6/addrconf.c | 7
net/ipv6/ip6_offload.c | 4
net/ipv6/mcast.c | 13
net/ipv6/netfilter/nf_reject_ipv6.c | 5
net/ipv6/rpl_iptunnel.c | 8
net/ipv6/seg6_hmac.c | 6
net/mac80211/cfg.c | 13
net/mac80211/mlme.c | 9
net/mac80211/tx.c | 10
net/mctp/af_mctp.c | 26
net/mptcp/options.c | 7
net/mptcp/pm_netlink.c | 14
net/mptcp/protocol.c | 17
net/mptcp/protocol.h | 11
net/mptcp/subflow.c | 20
net/ncsi/internal.h | 2
net/ncsi/ncsi-rsp.c | 1
net/netfilter/nf_conntrack_netlink.c | 24
net/netfilter/nf_tables_api.c | 4
net/netfilter/xt_nfacct.c | 4
net/netlink/af_netlink.c | 2
net/packet/af_packet.c | 39 -
net/phonet/pep.c | 2
net/sched/act_ctinfo.c | 19
net/sched/sch_cake.c | 14
net/sched/sch_codel.c | 5
net/sched/sch_drr.c | 7
net/sched/sch_ets.c | 46 -
net/sched/sch_fq_codel.c | 6
net/sched/sch_hfsc.c | 8
net/sched/sch_htb.c | 19
net/sched/sch_netem.c | 40 +
net/sched/sch_qfq.c | 40 -
net/sctp/input.c | 2
net/tls/tls_sw.c | 13
net/vmw_vsock/af_vsock.c | 3
net/wireless/mlme.c | 3
samples/mei/mei-amt-version.c | 2
scripts/kconfig/gconf.c | 8
scripts/kconfig/lxdialog/inputbox.c | 6
scripts/kconfig/lxdialog/menubox.c | 2
scripts/kconfig/nconf.c | 2
scripts/kconfig/nconf.gui.c | 1
scripts/kconfig/qconf.cc | 2
security/apparmor/include/match.h | 3
security/apparmor/match.c | 1
security/inode.c | 2
sound/core/pcm_native.c | 19
sound/pci/hda/patch_ca0132.c | 7
sound/pci/hda/patch_hdmi.c | 19
sound/pci/hda/patch_realtek.c | 3
sound/pci/intel8x0.c | 2
sound/soc/codecs/hdac_hdmi.c | 10
sound/soc/codecs/rt5640.c | 5
sound/soc/fsl/fsl_sai.c | 30 -
sound/soc/generic/audio-graph-card.c | 2
sound/soc/intel/boards/Kconfig | 2
sound/soc/soc-core.c | 28
sound/soc/soc-dai.c | 59 +-
sound/soc/soc-dapm.c | 4
sound/soc/soc-ops.c | 26
sound/usb/mixer_quirks.c | 14
sound/usb/mixer_scarlett_gen2.c | 8
sound/usb/stream.c | 25
sound/usb/validate.c | 14
sound/x86/intel_hdmi_audio.c | 2
tools/bpf/bpftool/net.c | 15
tools/include/linux/sched/mm.h | 2
tools/include/nolibc/std.h | 4
tools/perf/builtin-sched.c | 12
tools/perf/tests/bp_account.c | 1
tools/perf/util/evsel.c | 11
tools/perf/util/evsel.h | 2
tools/power/cpupower/utils/idle_monitor/mperf_monitor.c | 4
tools/testing/ktest/ktest.pl | 5
tools/testing/selftests/ftrace/test.d/event/subsystem-enable.tc | 28
tools/testing/selftests/ftrace/test.d/ftrace/func-filter-glob.tc | 2
tools/testing/selftests/futex/include/futextest.h | 11
tools/testing/selftests/memfd/memfd_test.c | 43 +
tools/testing/selftests/net/mptcp/Makefile | 3
tools/testing/selftests/net/mptcp/mptcp_connect.c | 28
tools/testing/selftests/net/mptcp/mptcp_connect_checksum.sh | 5
tools/testing/selftests/net/mptcp/mptcp_connect_mmap.sh | 5
tools/testing/selftests/net/mptcp/mptcp_connect_sendfile.sh | 5
tools/testing/selftests/net/mptcp/mptcp_join.sh | 1
tools/testing/selftests/net/mptcp/pm_netlink.sh | 1
tools/testing/selftests/net/rtnetlink.sh | 6
tools/testing/selftests/net/udpgro.sh | 46 -
tools/testing/selftests/perf_events/.gitignore | 1
tools/testing/selftests/perf_events/Makefile | 2
tools/testing/selftests/perf_events/mmap.c | 236 ++++++++
tools/testing/selftests/syscall_user_dispatch/sud_test.c | 50 -
677 files changed, 6071 insertions(+), 2522 deletions(-)
Aaron Kling (1):
ARM: tegra: Use I/O memcpy to write to IRAM
Aaron Plattner (1):
watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition
Abdun Nihaal (2):
regmap: fix potential memory leak of regmap_bus
staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
Abinash Singh (1):
f2fs: fix KMSAN uninit-value in extent_info usage
Ada Couprie Diaz (1):
arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
Adam Ford (2):
arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed
arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed
Aditya Garg (1):
HID: magicmouse: avoid setting up battery timer when not needed
Adrian Hunter (1):
scsi: ufs: ufs-pci: Fix default runtime and system PM levels
Al Viro (5):
clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
better lockdep annotations for simple_recursive_removal()
securityfs: don't pin dentries twice, once is enough...
use uniform permission checks for all mount propagation changes
alloc_fdtable(): change calling conventions.
Albin Törnqvist (1):
arm: dts: ti: omap: Fixup pinheader typo
Alessandro Carminati (1):
regulator: core: fix NULL dereference on unbind due to stale coupling data
Alex Guo (2):
media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
Alexander Gordeev (1):
mm/vmalloc: leave lazy MMU mode on PTE mapping error
Alexander Kochetkov (1):
ARM: rockchip: fix kernel hang during smp initialization
Alexander Wetzel (1):
wifi: mac80211: Don't call fq_flow_idx() for management frames
Alexander Wilhelm (1):
bus: mhi: host: Fix endianness of BHI vector table
Alok Tiwari (7):
thunderbolt: Fix bit masking in tb_dp_port_set_hops()
net: emaclite: Fix missing pointer increment in aligned_read()
staging: nvec: Fix incorrect null termination of battery manufacturer
ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
be2net: Use correct byte order and format string for TCP seq and ack_seq
net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
gve: Return error for unknown admin queue command
Amir Mohammad Jahangirzad (1):
fs/orangefs: use snprintf() instead of sprintf()
Ammar Faizi (1):
net: usbnet: Fix the wrong netif_carrier_on() call
Anantha Prabhu (1):
RDMA/bnxt_re: Fix to initialize the PBL array
Andreas Dilger (1):
ext4: check fast symlink for ea_inode correctly
Andrew Jeffery (2):
soc: aspeed: lpc-snoop: Cleanup resources in stack-order
soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
André Draszik (1):
scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
Andy Shevchenko (2):
mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
Documentation: ACPI: Fix parent device references
Andy Yan (1):
drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed
Anna Schumaker (1):
NFS: Create an nfs4_server_set_init_caps() function
Annette Kobou (1):
ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
Anshuman Khandual (1):
mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
Anthoine Bourgeois (1):
xen/netfront: Fix TX response spurious interrupts
Archana Patni (1):
scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers
Arnaud Lecomte (1):
jfs: upper bound check of tree index in dbAllocAG
Arnd Bergmann (6):
ethernet: intel: fix building with large NR_CPUS
ASoC: Intel: fix SND_SOC_SOF dependencies
ASoC: ops: dynamically allocate struct snd_ctl_elem_value
caif: reduce stack size, again
kernel: trace: preemptirq_delay_test: use offstack cpu mask
RDMA/core: reduce stack using in nldev_stat_get_doit()
Arun Raghavan (1):
ASoC: fsl_sai: Force a software reset when starting in consumer mode
Aruna Ramakrishna (1):
sched: Change nr_uninterruptible type to unsigned long
Avraham Stern (1):
wifi: iwlwifi: mvm: fix scan request validation
Baihan Li (1):
drm/hisilicon/hibmc: fix the hibmc loaded failed bug
Balamanikandan Gunasundar (1):
mtd: rawnand: atmel: set pmecc data setup time
Baokun Li (2):
ext4: fix largest free orders lists corruption on mb_optimize_scan switch
jbd2: prevent softlockup in jbd2_log_do_checkpoint()
Bard Liao (1):
soundwire: stream: restore params when prepare ports fail
Bartosz Golaszewski (2):
gpio: wcd934x: check the return value of regmap_update_bits()
gpio: tps65912: check the return value of regmap_update_bits()
Ben Ben-Ishay (1):
net/mlx5e: Add support to klm_umr_wqe
Ben Hutchings (1):
sh: Do not use hyphen in exported variable name
Benjamin Coddington (1):
NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
Benjamin Tissoires (3):
HID: core: ensure the allocated report buffer can contain the reserved report ID
HID: core: ensure __hid_request reserves the report ID as the first byte
HID: core: do not bypass hid_hw_raw_request
Benson Leung (1):
usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default
Bharat Bhushan (1):
crypto: octeontx2 - add timeout for load_fvc completion poll
Bingbu Cao (1):
media: hi556: correct the test pattern configuration
Bjorn Andersson (1):
soc: qcom: mdt_loader: Ensure we don't read past the ELF header
Brahmajit Das (1):
samples: mei: Fix building on musl libc
Breno Leitao (4):
ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
arm64: Mark kernel as tainted on SAE and SError panic
ipmi: Use dev_warn_ratelimited() for incorrect message warnings
mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
Brian Masney (5):
rtc: ds1307: fix incorrect maximum clock rate handling
rtc: hym8563: fix incorrect maximum clock rate handling
rtc: pcf85063: fix incorrect maximum clock rate handling
rtc: pcf8563: fix incorrect maximum clock rate handling
rtc: rv3028: fix incorrect maximum clock rate handling
Buday Csaba (1):
net: phy: smsc: add proper reset flags for LAN8710A
Budimir Markovic (1):
vsock: Do not allow binding to VMADDR_PORT_ANY
Chao Gao (1):
KVM: VMX: Flush shadow VMCS on emergency reboot
Chao Yu (6):
f2fs: doc: fix wrong quota mount option description
f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
f2fs: fix to avoid panic in f2fs_evict_inode
f2fs: fix to avoid out-of-boundary access in devs.path
f2fs: fix to do sanity check on ino and xnid
f2fs: fix to avoid out-of-boundary access in dnode page
Charalampos Mitrodimas (1):
usb: misc: apple-mfi-fastcharge: Make power supply names unique
Charles Han (2):
power: supply: cpcap-charger: Fix null check for power_supply_get_by_name
power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
Cheick Traore (1):
pinctrl: stm32: Manage irq affinity settings
Chen Ni (1):
iio: adc: stm32-adc: Fix race in installing chained IRQ handler
Chen-Yu Tsai (1):
platform/chrome: cros_ec: Use per-device lockdep key
Chenyuan Yang (2):
fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
Christoph Paasch (3):
net/mlx5: Correctly set gso_size when LRO is used
net/mlx5: Correctly set gso_segs when LRO is used
mptcp: drop skb if MPTCP skb extension allocation fails
Christophe Leroy (1):
ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
Clément Le Goffic (1):
i2c: stm32: fix the device used for the DMA map
Cong Wang (6):
sch_htb: make htb_qlen_notify() idempotent
sch_hfsc: make hfsc_qlen_notify() idempotent
sch_qfq: make qfq_qlen_notify() idempotent
sch_drr: make drr_qlen_notify() idempotent
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
sch_htb: make htb_deactivate() idempotent
Corey Minyard (1):
ipmi: Fix strcpy source and destination the same
Cristian Ciocaltea (1):
ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
Cynthia Huang (1):
selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
Dai Ngo (1):
NFSD: detect mismatch of file handle and delegation stateid in OPEN op
Damien Le Moal (7):
ata: libata-sata: Disallow changing LPM state if not supported
scsi: mpt3sas: Correctly handle ATA device errors
ata: libata-scsi: Fix ata_to_sense_error() status handling
PCI: endpoint: Fix configfs group list head handling
PCI: endpoint: Fix configfs group removal on driver teardown
block: Make REQ_OP_ZONE_FINISH a write operation
ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
Dan Carpenter (7):
dmaengine: nbpfaxi: Fix memory corruption in probe()
watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
fs/orangefs: Allow 2 more characters in do_c_string()
cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
media: gspca: Add bounds checking to firmware parser
scsi: qla4xxx: Prevent a potential error pointer dereference
ALSA: usb-audio: Fix size validation in convert_chmap_v3()
Daniel Dadap (1):
ALSA: hda: Add missing NVIDIA HDA codec IDs
Daniil Dulov (1):
wifi: rtl818x: Kill URBs before clearing tx status queue
Dave Hansen (1):
x86/fpu: Delay instruction pointer fixup until after warning
Dave Stevenson (3):
media: tc358743: Check I2C succeeded during probe
media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
media: tc358743: Increase FIFO trigger level to 374
David Collins (1):
thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required
David Lechner (2):
iio: proximity: isl29501: fix buffered read on big-endian systems
iio: adc: ad_sigma_delta: change to buffer predisable
Davide Caratti (2):
net/sched: sch_ets: properly init all active DRR list handles
net/sched: ets: use old 'nbands' while purging unused classes
Dawid Rezler (1):
ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx
Denis OSTERLAND-HEIM (1):
pps: fix poll support
Dennis Chen (1):
i40e: report VF tx_dropped with tx_errors instead of tx_discards
Dikshita Agarwal (1):
media: venus: Add support for SSR trigger using fault injection
Dmitry Antipov (1):
jfs: reject on-disk inodes of an unsupported type
Dmitry Vyukov (1):
selftests: Fix errno checking in syscall_user_dispatch test
Dong Chenchen (1):
net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
Drew Hamilton (1):
usb: musb: fix gadget state on disconnect
Edson Juliano Drosdeck (1):
mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
Edward Adam Davis (2):
jfs: Regular file corruption check
comedi: pcl726: Prevent invalid irq number
Eliav Farber (1):
pps: clients: gpio: fix interrupt handling order in remove path
Emily Deng (1):
drm/ttm: Should to return the evict error
Eric Biggers (3):
thunderbolt: Fix copy+paste error in match_service_id()
lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
ipv6: sr: Fix MAC comparison to be constant-time
Eric Dumazet (5):
net_sched: act_ctinfo: use atomic64_t for three counters
pptp: ensure minimal skb length in pptp_xmit()
ipv6: reject malicious packets in ipv6_gso_segment()
pptp: fix pptp_xmit() error path
net_sched: sch_ets: implement lockless ets_dump()
Eric Work (1):
net: atlantic: add set_power to fw_ops for atl2 to fix wol
Evgeniy Harchenko (1):
ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
Fabio Estevam (2):
iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
iio: adc: max1363: Reorder mode_list[] entries
Fabio Porcedda (1):
USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
Fabrice Gasnier (1):
Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT
Fedor Pchelkin (3):
drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
netfilter: nf_tables: adjust lockdep assertions handling
netlink: avoid infinite retry looping in netlink_unicast()
Feng Tang (1):
mm/page_alloc: detect allocation forbidden by cpuset and bail out early
Filipe Manana (1):
btrfs: fix log tree replay failure due to file with 0 links and extents
Finn Thain (2):
m68k: Don't unregister boot console needlessly
m68k: Fix lost column on framebuffer debug console
Florian Westphal (4):
netfilter: xt_nfacct: don't assume acct name is null-terminated
netfilter: ctnetlink: fix refcount leak on table dump
selftests: mptcp: make sendfile selftest work
netfilter: nf_reject: don't leak dst refcount for loopback packets
Gabor Juhos (1):
mtd: spinand: propagate spinand_wait() errors from spinand_write_page()
Gal Pressman (1):
net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
Gautham R. Shenoy (1):
pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
Geliang Tang (2):
mptcp: drop unused sk in mptcp_push_release
mptcp: disable add_addr retransmission when timeout is 0
Geoffrey D. Bennett (1):
ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
Giovanni Cabiddu (1):
crypto: qat - fix seq_file position update in adf_ring_next()
Gokul Sivakumar (1):
wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE
Greg Kroah-Hartman (2):
Revert "vmci: Prevent the dispatching of uninitialized payloads"
Linux 5.15.190
Gui-Dong Han (1):
media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
Haiyang Zhang (1):
hv_netvsc: Fix panic during namespace deletion with VF
Hangbin Liu (2):
selftests: udpgro: report error when receive failed
bonding: update LACP activity flag after setting lacp_active
Hans Zhang (1):
PCI: rockchip-host: Fix "Unexpected Completion" log message
Haoxiang Li (2):
media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
Harald Mommer (1):
gpio: virtio: Fix config space reading.
Hari Kalavakunta (1):
net: ncsi: Fix buffer overflow in fetching version id
Harry Yoo (1):
mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
Heiner Kallweit (1):
dpaa_eth: don't use fixed_phy_change_carrier
Helge Deller (1):
Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
Henry Martin (1):
clk: davinci: Add NULL check in davinci_lpsc_clk_register()
Herbert Xu (1):
crypto: marvell/cesa - Fix engine load inaccuracy
Herton R. Krzesinski (1):
mm/debug_vm_pgtable: clear page table entries at destroy_args()
Horatiu Vultur (2):
phy: mscc: Fix parsing of unicast frames
phy: mscc: Fix timestamping for vsc8584
Hsin-Te Yuan (1):
thermal: sysfs: Return ENODATA instead of EAGAIN for reads
Ian Abbott (12):
comedi: pcl812: Fix bit shift out of bounds
comedi: aio_iiro_16: Fix bit shift out of bounds
comedi: das16m1: Fix bit shift out of bounds
comedi: das6402: Fix bit shift out of bounds
comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
comedi: Fix some signed shift left operations
comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
comedi: Fix initialization of data for instructions that write to subdevice
comedi: comedi_test: Fix possible deletion of uninitialized timers
comedi: fix race between polling and detaching
comedi: Make insn_rw_emulate_bits() do insn->n samples
comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
Ido Schimmel (1):
mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
Ilan Peer (1):
wifi: cfg80211: Fix interface type validation
Ilya Bakoulin (1):
drm/amd/display: Separate set_gsl from set_gsl_source_select
Imre Deak (1):
drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
Ivan Stepchenko (1):
mtd: fix possible integer overflow in erase_xfer()
Jacek Kowalski (2):
e1000e: disregard NVM checksum on tgp when valid checksum bit is not set
e1000e: ignore uninitialized checksum word on tgp
Jack Xiao (1):
drm/amdgpu: fix incorrect vm flags to map bo
Jakub Acs (1):
net, hsr: reject HSR frame if skb can't hold tag
Jakub Kicinski (2):
netpoll: prevent hanging NAPI when netcons gets enabled
uapi: in6: restore visibility of most IPv6 socket options
James Cowgill (1):
media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check
Jan Beulich (1):
compiler: remove __ADDRESSABLE_ASM{_STR,}() again
Jan Kara (2):
isofs: Verify inode mode when loading from disk
udf: Verify partition map count
Jann Horn (1):
eventpoll: Fix semi-unbounded recursion
Jason Wang (1):
vhost: fail early when __vhost_add_used() fails
Jason Xing (1):
ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
Jay Chen (1):
usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
Jean-Baptiste Maneyrol (1):
iio: imu: inv_icm42600: change invalid data error to -EBUSY
Jeff Layton (1):
nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
Jeongjun Park (1):
ptp: prevent possible ABBA deadlock in ptp_clock_freerun()
Jerome Brunet (1):
PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails
Jian Shen (2):
net: hns3: fix concurrent setting vlan filter issue
net: hns3: fixed vf get max channels bug
Jiasheng Jiang (2):
iwlwifi: Add missing check for alloc_ordered_workqueue
scsi: lpfc: Remove redundant assignment to avoid memory leak
Jiaxun Yang (1):
MIPS: mm: tlb-r4k: Uniquify TLB entries on init
Jiayi Li (2):
ACPI: processor: perflib: Fix initial _PPC limit application
memstick: Fix deadlock by moving removing flag earlier
Jiayuan Chen (3):
bpf, sockmap: Fix panic when calling skb_linearize
bpf, sockmap: Fix psock incorrectly pointing to sk
bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
Jimmy Assarsson (2):
can: kvaser_pciefd: Store device channel index
can: kvaser_usb: Assign netdev.dev_port based on device channel index
Jinjiang Tu (1):
mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn
Johan Adolfsson (1):
leds: leds-lp50xx: Handle reg to get correct multi_index
Johan Hovold (9):
net: gianfar: fix device leak when querying time stamp info
net: dpaa: fix device leak when querying time stamp info
usb: gadget: udc: renesas_usb3: fix device leak at unbind
usb: dwc3: meson-g12a: fix device leaks at unbind
wifi: ath11k: fix source ring-buffer corruption
net: enetc: fix device and OF node leak at probe
usb: musb: omap2430: fix device leak at unbind
usb: dwc3: imx8mp: fix device leak at unbind
wifi: ath11k: fix dest ring-buffer corruption when ring is full
Johan Korsnes (1):
arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
Johannes Berg (2):
wifi: cfg80211: reject HTC bit for management frames
wifi: mac80211: don't complete management TX on SAE commit
John Ernberg (1):
net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
John Garry (2):
scsi: aacraid: Stop using PCI_IRQ_AFFINITY
block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
Jon Hunter (1):
soc/tegra: pmc: Ensure power-domains are in a known state
Jonas Rebmann (1):
net: fec: allow disable coalescing
Jonathan Cameron (1):
iio: light: as73211: Ensure buffer holes are zeroed
Jonathan Santos (1):
iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
Jorge Ramirez-Ortiz (2):
media: venus: hfi: explicitly release IRQ during teardown
media: venus: protect against spurious interrupts during probe
Joseph Huang (1):
net: bridge: Do not offload IGMP/MLD messages
Judith Mendez (1):
mmc: sdhci_am654: Workaround for Errata i2312
Juergen Gross (1):
xen/gntdev: remove struct gntdev_copy_batch from stack
Junxian Huang (1):
RDMA/hns: Fix -Wframe-larger-than issue
Juri Lelli (1):
sched/deadline: Fix accounting after global limits change
Justin Tee (1):
scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
Kees Cook (4):
sched: Add wrapper for get_wchan() to keep task blocked
arm64: Handle KCOV __init vs inline mismatches
platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
iommu/amd: Avoid stack buffer overflow from kernel cmdline
Kefeng Wang (1):
asm-generic: Add memory barrier dma_mb()
Kito Xu (veritas501) (1):
net: appletalk: Fix use-after-free in AARP proxy probe
Konstantin Komarov (1):
Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
Krishna Kurapati (1):
usb: dwc3: qcom: Don't leave BCR asserted
Krzysztof Kozlowski (1):
ARM: dts: vfxxx: Correctly use two tuples for timer address
Kuen-Han Tsai (1):
usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
Kuninori Morimoto (4):
ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask()
ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
ASoC: soc-dai.c: add missing flag check at snd_soc_pcm_dai_probe()
ASoC: soc-dai.h: merge DAI call back functions into ops
Kuniyuki Iwashima (3):
rpl: Fix use-after-free in rpl_do_srh_inline().
Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc().
Kurt Borja (1):
platform/x86: think-lmi: Fix kobject cleanup
Laurentiu Mihalcea (1):
pwm: imx-tpm: Reset counter if CMOD is 0
Len Brown (1):
intel_idle: Allow loading ACPI tables for any family
Leo Yan (1):
perf tests bp_account: Fix leaked file descriptor
Leon Romanovsky (1):
net/mlx5e: Properly access RCU protected qdisc_sleeping variable
Li Zhong (1):
ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value
Liao Yuanhong (1):
ext4: use kmalloc_array() for array space allocation
Lifeng Zheng (5):
PM / devfreq: Check governor before using governor->name
cpufreq: Initialize cpufreq-based frequency-invariance later
cpufreq: Init policy->rwsem before it may be possibly used
cpufreq: Exit governor when failed to start old governor
PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()
Lin.Cao (1):
drm/sched: Remove optimization that causes hang when killing dependent jobs
Lizhi Xu (3):
vmci: Prevent the dispatching of uninitialized payloads
fs/ntfs3: Add sanity check for file name
jfs: truncate good inode pages when hard link is 0
Lorenzo Stoakes (5):
selftests/perf_events: Add a mmap() correctness test
mm: drop the assumption that VM_SHARED always implies writable
mm: update memfd seal write check to include F_SEAL_WRITE
mm: reinstate ability to map write-sealed memfd mappings read-only
selftests/memfd: add test for mapping write-sealed memfd read-only
Lucas De Marchi (1):
usb: early: xhci-dbc: Fix early_ioremap leak
Lucy Thrun (1):
ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
Ludwig Disterhof (1):
media: usbtv: Lock resolution while streaming
Luiz Augusto von Dentz (3):
Bluetooth: SMP: If an unallowed command is received consider it a failure
Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
Lukas Wunner (1):
PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
Ma Ke (4):
bus: fsl-mc: Fix potential double device reference in fsl_mc_get_endpoint()
dpaa2-eth: Fix device reference count leak in MAC endpoint handling
dpaa2-switch: Fix device reference count leak in MAC endpoint handling
sunvdc: Balance device refcount in vdc_port_mpgroup_check
Maciej W. Rozycki (1):
powerpc/eeh: Rely on dev->link_active_reporting
Mael GUERIN (1):
USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
Manivannan Sadhasivam (1):
PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute
Maor Gottlieb (1):
RDMA/core: Rate limit GID cache warning messages
Marco Elver (1):
locking/barriers, kcsan: Support generic instrumentation
Marek Szyprowski (1):
zynq_fpga: use sgtable-based scatterlist wrappers
Marek Vasut (1):
usb: renesas-xhci: Fix External ROM access timeouts
Mario Limonciello (5):
usb: xhci: Avoid showing warnings for dying controller
usb: xhci: Avoid showing errors during surprise removal
drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual
drm/amd: Restore cached power limit during resume
drm/amd/display: Avoid a NULL pointer dereference
Marius Zachmann (1):
hwmon: (corsair-cpro) Validate the size of the received input buffer
Mark Brown (1):
ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
Martin Kaistra (1):
wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
Masahiro Yamada (3):
kconfig: qconf: fix ConfigList::updateListAllforAll()
kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
kconfig: gconf: fix potential memory leak in renderer_edited()
Masami Hiramatsu (Google) (1):
selftests: tracing: Use mutex_unlock for testing glob filter
Mat Martineau (1):
selftests: mptcp: Initialize variables to quiet gcc 12 warnings
Mathias Nyman (5):
usb: hub: fix detection of high tier USB3 devices behind suspended hubs
usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
usb: hub: Fix flushing of delayed work used for post resume purposes
usb: hub: avoid warm port reset during USB3 disconnect
usb: hub: Don't try to recover devices lost during warm reset.
Matt Johnston (1):
net: mctp: Prevent duplicate binds
Matthew Wilcox (Oracle) (1):
XArray: Add calls to might_alloc()
Matthieu Baerts (1):
selftests: mptcp: add missing join check
Matthieu Baerts (NGI0) (4):
mptcp: pm: kernel: flush: do not reset ADD_ADDR limit
selftests: mptcp: connect: also cover alt modes
selftests: mptcp: connect: also cover checksum
selftests: mptcp: pm: check flush doesn't reset limits
Maulik Shah (1):
pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
Maurizio Lombardi (1):
scsi: target: core: Generate correct identifiers for PR OUT transport IDs
Meagan Lloyd (2):
rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
Mengbiao Xiong (1):
crypto: ccp - Fix crash when rebind ccp device for ccp.ko
Miao Li (1):
usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
Miaoqian Lin (1):
most: core: Drop device reference after usage in get_channel()
Michael Grzeschik (2):
usb: typec: tcpm: allow to use sink in accessory mode
usb: typec: tcpm: allow switching to mode accessory to mux properly
Michael Zhivich (1):
x86/bugs: Fix use of possibly uninit value in amd_check_tsa_microcode()
Michal Schmidt (1):
benet: fix BUG when creating VFs
Mike Christie (1):
vhost-scsi: Fix log flooding with target does not exist errors
Mikhail Lobanov (1):
wifi: mac80211: check basic rates validity in sta_link_apply_parameters
Mikulas Patocka (1):
dm-mpath: don't print the "loaded" message if registering fails
Mina Almasry (1):
netmem: fix skb_frag_address_safe with unreadable skbs
Minhong He (1):
ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
Myrrh Periwinkle (3):
usb: typec: ucsi: Update power_supply on power role change
vt: keyboard: Don't process Unicode characters in K_OFF mode
vt: defkeymap: Map keycodes above 127 to K_HOLE
Namhyung Kim (1):
perf sched: Fix memory leaks for evsel->priv in timehist
Nathan Chancellor (5):
phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
NeilBrown (1):
smb/server: avoid deadlock when linking with ReplaceIfExists
Niklas Söderlund (1):
media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control
Nilton Perim Neto (1):
Input: xpad - set correct controller type for Acer NGR200
Nirmal Patel (1):
PCI: vmd: Assign VMD IRQ domain before enumeration
Nuno Sá (1):
clk: clk-axi-clkgen: fix fpfd_max frequency for zynq
Ojaswin Mujoo (2):
ext4: fix fsmap end of range reporting with bigalloc
ext4: fix reserved gdt blocks handling in fsmap
Olga Kornievskaia (1):
NFSv4.2: another fix for listxattr
Oliver Neukum (3):
usb: net: sierra: check for no status endpoint
usb: core: usb_submit_urb: downgrade type check
cdc-acm: fix race between initial clearing halt and open
Oscar Maes (1):
net: ipv4: fix incorrect MTU in broadcast routes
Ovidiu Panait (1):
hwrng: mtk - handle devm_pm_runtime_enable errors
Pagadala Yesu Anjaneyulu (1):
wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
Pali Rohár (1):
cifs: Fix calling CIFSFindFirst() for root path without msearch
Paolo Abeni (4):
selftests: net: increase inter-packet timeout in udpgro.sh
mptcp: fix error mibs accounting
mptcp: introduce MAPPING_BAD_CSUM
mptcp: do not queue data on closed subflows
Paul Cercueil (1):
usb: musb: Add and use inline functions musb_{get,set}_state
Paul Chaignon (2):
bpf: Reject %p% format string in bprintf-like helpers
bpf: Check flow_dissector ctx accesses are aligned
Paul E. McKenney (1):
rcu: Protect ->defer_qs_iw_pending from data race
Paul Kocialkowski (1):
clk: sunxi-ng: v3s: Fix de clock definition
Pavel Begunkov (1):
io_uring: don't use int for ABI
Pawan Gupta (1):
x86/bugs: Avoid warning when overriding return thunk
Peter Oberparleiter (2):
s390/hypfs: Avoid unnecessary ioctl registration in debugfs
s390/hypfs: Enable limited access during lockdown
Peter Robinson (1):
reset: brcmstb: Enable reset drivers for ARCH_BCM2835
Peter Ujfalusi (1):
ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
Peter Zijlstra (2):
x86: Fix __get_wchan() for !STACKTRACE
x86: Pin task-stack in __get_wchan()
Petr Pavlu (1):
module: Restore the moduleparam prefix length check
Phillip Lougher (1):
squashfs: fix memory leak in squashfs_fill_super
Prashant Malani (1):
cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
Praveen Kaligineedi (1):
gve: Fix stuck TX queue for DQ queue format
Pu Lehui (1):
tracing: Limit access to parser->buffer when trace_get_user failed
Purva Yeshi (1):
md: dm-zoned-target: Initialize return variable r to avoid uninitialized use
Qi Zheng (1):
x86: Fix get_wchan() to support the ORC unwinder
Qingfang Deng (1):
ppp: fix race conditions in ppp_fill_forward_path
Qu Wenruo (2):
btrfs: do not allow relocation of partially dropped subvolumes
btrfs: populate otime when logging an inode item
Quang Le (1):
net/packet: fix a race in packet_set_ring() and packet_notifier()
RD Babiera (1):
usb: typec: tcpm: apply vbus before data bringup in tcpm_src_attach
Rafael J. Wysocki (4):
cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode
ACPI: processor: perflib: Move problematic pr->performance check
cpuidle: governors: menu: Avoid using invalid recent intervals data
PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
Rand Deeb (1):
wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
Randy Dunlap (1):
parisc: Makefile: fix a typo in palo.conf
Ranjan Kumar (4):
scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
scsi: mpi3mr: Fix race between config read submit and interrupt completion
scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers
scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems
Remi Pommarel (2):
wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key()
Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
Ricardo Ribalda (3):
media: uvcvideo: Do not mark valid metadata as invalid
media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
media: venus: venc: Clamp param smaller than 1fps and bigger than 240
Ricky Wu (1):
misc: rtsx: usb: Ensure mmc child device is active when card is present
Rob Clark (1):
drm/msm: use trylock for debugfs
Rohit Visavalia (1):
clk: xilinx: vcu: unregister pll_post only if registered correctly
Rong Zhang (2):
platform/x86: ideapad-laptop: Fix kbd backlight not remembered among boots
fs/ntfs3: correctly create symlink for relative path
RubenKelevra (1):
fs_context: fix parameter name in infofc() macro
Ryan Lee (1):
apparmor: ensure WB_HISTORY_SIZE value is a power of 2
Ryan Mann (NDI) (1):
USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
Ryusuke Konishi (1):
nilfs2: reject invalid file types when reading inodes
Sabrina Dubroca (1):
udp: also consider secpath when evaluating ipsec use for checksumming
Sakari Ailus (1):
media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
Salah Triki (1):
iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
Sam Shih (1):
pinctrl: mediatek: moore: check if pin_desc is valid before use
Sarah Newman (1):
drbd: add missing kref_get in handle_write_conflicts
Sarthak Garg (1):
mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
Sasha Levin (2):
fs: Prevent file descriptor table allocations exceeding INT_MAX
media: qcom: camss: cleanup media device allocated resource on error path
Sebastian Andrzej Siewior (1):
net: phy: Use netif_rx().
Sebastian Ott (1):
ACPI: processor: fix acpi_object initialization
Sebastian Reichel (2):
watchdog: dw_wdt: Fix default timeout
usb: typec: fusb302: cache PD RX state
Selvarasu Ganesan (1):
usb: dwc3: Remove WARN_ON for device endpoint command timeouts
Sergey Bashirov (4):
pNFS: Fix stripe mapping in block/scsi layout
pNFS: Fix disk addr range check in block/scsi layout
pNFS: Handle RPC size limit for layoutcommits
pNFS: Fix uninited ptr deref in block/scsi layout
Sergey Senozhatsky (1):
wifi: ath11k: clear initialized flag for deinit-ed srng lists
Seunghui Lee (1):
scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume
Shankari Anand (1):
kconfig: nconf: Ensure null termination where strncpy is used
Shengjiu Wang (1):
ASoC: fsl_sai: replace regmap_write with regmap_update_bits
Shiji Yang (1):
MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
Showrya M N (1):
scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
Shubhrajyoti Datta (1):
EDAC/synopsys: Clear the ECC counters on init
Slark Xiao (2):
USB: serial: option: add Foxconn T99W640
USB: serial: option: add Foxconn T99W709
Sravan Kumar Gundu (1):
fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
Stanislav Fomichev (1):
vrf: Drop existing dst reference in vrf_ip6_input_dst
Stanislaw Gruszka (1):
wifi: iwlegacy: Check rate_idx range after addition
Stav Aviram (1):
net/mlx5: Check device memory pointer before usage
Stefan Metzmacher (5):
smb: server: remove separate empty_recvmsg_queue
smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already
smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection
smb: server: let recv_done() avoid touching data_transfer after cleanup/move
smb: client: let recv_done() cleanup before notifying the callers.
Steven Rostedt (5):
tracing: Add down_write(trace_event_sem) when adding trace event
selftests/tracing: Fix false failure of subsystem event test
ktest.pl: Prevent recursion of default variable options
ftrace: Also allocate and copy hash for reading of filter files
tracing: Remove unneeded goto out logic
Su Hui (1):
usb: xhci: print xhci->xhc_state when queue_command failed
Suchit Karunakaran (1):
kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
Sven Schnelle (2):
s390/time: Use monotonic clock in get_cycles()
s390/stp: Remove udelay from stp_sync_clock()
Takashi Iwai (4):
ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out()
ALSA: usb-audio: Validate UAC3 power domain descriptors, too
ALSA: usb-audio: Validate UAC3 cluster segment descriptors
ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
Tao Xue (1):
usb: gadget : fix use-after-free in composite_dev_cleanup()
Tariq Toukan (1):
lib: bitmap: Introduce node-aware alloc API
Tetsuo Handa (1):
hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
Theodore Ts'o (2):
ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
ext4: don't try to clear the orphan_present feature block device is r/o
Thomas Fourier (19):
pch_uart: Fix dma_sync_sg_for_device() nents value
mmc: bcm2835: Fix dma_unmap_sg() nents value
mwl8k: Add missing check after DMA map
crypto: inside-secure - Fix `dma_unmap_sg()` nents value
scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
scsi: mvsas: Fix dma_unmap_sg() nents value
scsi: isci: Fix dma_unmap_sg() nents value
crypto: keembay - Fix dma_unmap_sg() nents value
crypto: img-hash - Fix dma_unmap_sg() nents value
dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
dmaengine: nbpfaxi: Add missing check after DMA map
mtd: rawnand: atmel: Fix dma_mapping_error() address
mtd: rawnand: rockchip: Add missing check after DMA map
et131x: Add missing check after DMA map
net: ag71xx: Add missing check after DMA map
(powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc()
mtd: rawnand: fsmc: Add missing check after DMA map
Thomas Gleixner (3):
perf/core: Don't leak AUX buffer refcount on allocation failure
perf/core: Exit early on perf_mmap() fail
perf/core: Prevent VMA split of buffer mappings
Thomas Weißschuh (3):
tools/nolibc: define time_t in terms of __kernel_old_time_t
MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
kbuild: userprogs: use correct linker when mixing clang and GNU ld
Thorsten Blum (3):
ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe()
smb: server: Fix extension string in ksmbd_extract_shortname()
usb: storage: realtek_cr: Use correct byte order for bcs->Residue
Tianxiang Peng (1):
x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
Tigran Mkrtchyan (1):
pNFS/flexfiles: don't attempt pnfs on fatal DS errors
Tim Harvey (1):
hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
Timothy Pearson (5):
PCI: pnv_php: Clean up allocated IRQs on unplug
PCI: pnv_php: Work around switches with broken presence detection
powerpc/eeh: Export eeh_unfreeze_pe()
powerpc/eeh: Make EEH driver device hotplug safe
PCI: pnv_php: Fix surprise plug detection and recovery
Timur Kristóf (6):
drm/amd/display: Don't overwrite dce60_clk_mgr
drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
drm/amd/display: Don't overclock DCE 6 by 15%
Tiwei Bie (1):
um: rtc: Avoid shadowing err in uml_rtc_start()
Tomas Henzl (1):
scsi: mpt3sas: Fix a fw_event memory leak
Tomasz Michalec (2):
usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
platform/chrome: cros_ec_typec: Defer probe on missing EC parent
Trond Myklebust (2):
NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
NFS: Fix the setting of capabilities when automounting a new filesystem
Tvrtko Ursulin (1):
drm/ttm: Respect the shrinker core free target
Tzung-Bi Shih (2):
platform/chrome: cros_ec: remove unneeded label and if-condition
platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
Ulf Hansson (1):
mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
Uros Bizjak (1):
ucount: fix atomic_long_inc_below() argument type
Uwe Kleine-König (6):
usb: musb: omap2430: Convert to platform remove callback returning void
platform/chrome: cros_ec: Make cros_ec_unregister() return void
media: camss: Convert to platform remove callback returning void
pwm: mediatek: Implement .apply() callback
pwm: mediatek: Handle hardware enable and clock enable separately
pwm: mediatek: Fix duty and period setting
ValdikSS (1):
igc: fix disabling L1.2 PCI-E link substate on I226 on init
Vedang Nagar (1):
media: venus: Add a check for packet size after reading from shared memory
Viacheslav Dubeyko (4):
hfs: fix slab-out-of-bounds in hfs_bnode_read()
hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
hfs: fix not erasing deleted b-tree node issue
Victor Shih (1):
mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
Viresh Kumar (1):
i2c: virtio: Avoid hang by using interruptible completion wait
Waiman Long (2):
mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
Wang Liang (2):
net: drop UFO packets in udp_rcv_segment()
net: bridge: fix soft lockup in br_multicast_query_expired()
Wang Zhaolong (2):
smb: client: fix use-after-free in cifs_oplock_break
smb: client: fix use-after-free in crypt_message when using async crypto
Wayne Chang (1):
phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode
Wei Gao (1):
ext2: Handle fiemap on empty files to prevent EINVAL
Weitao Wang (1):
usb: xhci: Fix slot_id resource race conflict
Wen Chen (1):
drm/amd/display: Fix 'failed to blank crtc!'
Will Deacon (1):
KVM: arm64: Fix kernel BUG() due to bad backport of FPSIMD/SVE/SME fix
William Liu (4):
net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
net/sched: Restrict conditions for adding duplicating netems to qdisc tree
net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
Wolfram Sang (3):
media: usb: hdpvr: disable zero-length read messages
i3c: add missing include to internal header
i3c: don't fail if GETHDRCAP is unsupported
Xiang Mei (2):
net/sched: sch_qfq: Fix race condition on qfq_aggregate
net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
Xilin Wu (1):
interconnect: qcom: sc7280: Add missing num_links to xm_pcie3_1 node
Xin Long (1):
sctp: linearize cloned gso packets in sctp_rcv
Xinxin Wan (1):
ASoC: codecs: rt5640: Retry DEVICE_ID verification
Xinyu Liu (2):
usb: gadget: configfs: Fix OOB read on empty string write
usb: core: config: Prevent OOB read in SS endpoint companion parsing
Xiu Jianfeng (1):
wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
Xiumei Mu (1):
selftests: rtnetlink.sh: remove esp4_offload after test
Xu Yang (4):
usb: chipidea: add USB PHY event
usb: phy: mxs: disconnect line when USB charger is attached
net: usb: asix_devices: add phy_mask for ax88772 mdio bus
usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test
Xu Yilun (1):
fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
Yajun Deng (1):
i40e: Add rx_missed_errors for buffer exhaustion
Yang Xiwen (1):
i2c: qup: jump out of the loop in case of timeout
Yangtao Li (1):
hfsplus: remove mutex_lock check in hfsplus_free_extents
Yann E. MORIN (1):
kconfig: lxdialog: fix 'space' to (de)select options
Yazen Ghannam (1):
x86/mce/amd: Add default names for MCA banks and blocks
Ye Bin (1):
fs/buffer: fix use-after-free when call bh_read() helper
Yonglong Liu (1):
net: hns3: disable interrupt when ptp init failed
Youngjun Lee (1):
media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
Youssef Samir (1):
bus: mhi: host: Detect events pointing to unexpected TREs
Yu Kuai (1):
nvme: fix misaccounting of nvme-mpath inflight I/O
Yuan Chen (2):
bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
pinctrl: sunxi: Fix memory leak on krealloc failure
Yue Haibing (1):
ipv6: mcast: Delay put pmc->idev in mld_del_delrec()
Yuichiro Tsuji (1):
net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
Yun Lu (2):
af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
af_packet: fix soft lockup issue caused by tpacket_snd()
Yunhui Cui (1):
serial: 8250: fix panic due to PSLVERR
Yury Norov [NVIDIA] (1):
RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
Zenm Chen (1):
USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
Zhang Lixu (2):
iio: hid-sensor-prox: Restore lost scale assignments
iio: hid-sensor-prox: Fix incorrect OFFSET calculation
Zhang Rui (1):
powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be changed
Zhang Shurong (1):
media: ov2659: Fix memory leaks in ov2659_probe()
Zhang Yi (1):
ext4: fix hole length calculation overflow in non-extent inodes
Zheng Yu (1):
jfs: fix metapage reference count leak in dbAllocCtl
Zhiqi Song (1):
crypto: hisilicon/hpre - fix dma unmap sequence
Zhu Qiyu (1):
ACPI: PRM: Reduce unnecessary printing to avoid user confusion
Ziyan Fu (1):
watchdog: iTCO_wdt: Report error if timeout configuration fails
chenchangcheng (1):
media: uvcvideo: Fix bandwidth issue for Alcor camera
fangzhong.zhou (1):
i2c: Force DLL0945 touchpad i2c freq to 100khz
jackysliu (1):
scsi: bfa: Double-free fix
tuhaowen (1):
PM: sleep: console: Fix the black screen issue
xin.guo (1):
tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
zhangjianrong (1):
net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths()
Álvaro Fernández Rojas (5):
net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
net: dsa: b53: prevent DIS_LEARNING access on BCM5325
net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
3 weeks, 2 days
- 1
- 1
Linux 5.10.241
by Greg Kroah-Hartman
I'm announcing the release of the 5.10.241 kernel.
All users of the 5.10 kernel series must upgrade.
The updated 5.10.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.10.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/filesystems/f2fs.rst | 6
Documentation/firmware-guide/acpi/i2c-muxes.rst | 8
Documentation/memory-barriers.txt | 11
Makefile | 4
arch/arm/Makefile | 2
arch/arm/boot/dts/imx6ul-kontron-n6x1x-s.dtsi | 1
arch/arm/boot/dts/vfxxx.dtsi | 2
arch/arm/mach-rockchip/platsmp.c | 15
arch/arm/mach-tegra/reset.c | 2
arch/arm64/boot/dts/freescale/imx8mm-beacon-som.dtsi | 2
arch/arm64/include/asm/acpi.h | 2
arch/arm64/mm/ptdump_debugfs.c | 3
arch/m68k/Kconfig.debug | 2
arch/m68k/kernel/early_printk.c | 42 -
arch/m68k/kernel/head.S | 39 -
arch/mips/crypto/chacha-core.S | 20
arch/mips/include/asm/vpe.h | 8
arch/mips/kernel/process.c | 16
arch/mips/mm/tlb-r4k.c | 56 +
arch/parisc/Makefile | 2
arch/powerpc/configs/ppc6xx_defconfig | 1
arch/powerpc/kernel/eeh.c | 1
arch/powerpc/kernel/eeh_driver.c | 48 +
arch/powerpc/kernel/eeh_pe.c | 11
arch/powerpc/kernel/pci-hotplug.c | 3
arch/powerpc/platforms/512x/mpc512x_lpbfifo.c | 6
arch/s390/hypfs/hypfs_dbfs.c | 19
arch/s390/include/asm/timex.h | 13
arch/s390/kernel/time.c | 2
arch/s390/mm/dump_pagetables.c | 2
arch/sh/Makefile | 10
arch/sh/boot/compressed/Makefile | 4
arch/sh/boot/romimage/Makefile | 4
arch/x86/include/asm/xen/hypercall.h | 6
arch/x86/kernel/cpu/amd.c | 2
arch/x86/kernel/cpu/bugs.c | 5
arch/x86/kernel/cpu/mce/amd.c | 13
arch/x86/mm/extable.c | 5
block/bio.c | 2
block/blk-settings.c | 2
drivers/acpi/acpi_processor.c | 2
drivers/acpi/apei/ghes.c | 2
drivers/acpi/processor_idle.c | 4
drivers/acpi/processor_perflib.c | 11
drivers/ata/Kconfig | 35 -
drivers/ata/libata-sata.c | 5
drivers/ata/libata-scsi.c | 20
drivers/base/power/domain_governor.c | 18
drivers/base/power/runtime.c | 5
drivers/block/drbd/drbd_receiver.c | 6
drivers/block/sunvdc.c | 4
drivers/bus/mhi/host/boot.c | 8
drivers/bus/mhi/host/internal.h | 4
drivers/char/hw_random/mtk-rng.c | 4
drivers/char/ipmi/ipmi_msghandler.c | 8
drivers/char/ipmi/ipmi_watchdog.c | 59 +-
drivers/clk/davinci/psc.c | 5
drivers/clk/sunxi-ng/ccu-sun8i-v3s.c | 3
drivers/cpufreq/armada-8k-cpufreq.c | 2
drivers/cpufreq/cppc_cpufreq.c | 2
drivers/cpufreq/cpufreq.c | 29
drivers/cpuidle/governors/menu.c | 21
drivers/crypto/ccp/ccp-debugfs.c | 3
drivers/crypto/img-hash.c | 2
drivers/crypto/inside-secure/safexcel_hash.c | 8
drivers/crypto/marvell/cesa/cipher.c | 4
drivers/crypto/marvell/cesa/hash.c | 5
drivers/crypto/qat/qat_common/adf_transport_debug.c | 4
drivers/devfreq/governor_userspace.c | 6
drivers/dma-buf/dma-resv.c | 5
drivers/dma/mv_xor.c | 21
drivers/dma/nbpfaxi.c | 24
drivers/fpga/zynq-fpga.c | 10
drivers/gpio/gpio-rcar.c | 20
drivers/gpio/gpio-tps65912.c | 7
drivers/gpio/gpio-wcd934x.c | 7
drivers/gpu/drm/amd/amdgpu/amdgpu.h | 1
drivers/gpu/drm/amd/amdgpu/amdgpu_csa.c | 4
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 6
drivers/gpu/drm/amd/display/dc/bios/command_table.c | 2
drivers/gpu/drm/amd/display/dc/clk_mgr/dce100/dce_clk_mgr.c | 2
drivers/gpu/drm/amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 40 -
drivers/gpu/drm/amd/display/dc/clk_mgr/dce60/dce60_clk_mgr.c | 31 -
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 11
drivers/gpu/drm/amd/pm/powerplay/hwmgr/smu_helper.c | 2
drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 6
drivers/gpu/drm/drm_dp_helper.c | 2
drivers/gpu/drm/rockchip/rockchip_drm_fb.c | 9
drivers/gpu/drm/scheduler/sched_entity.c | 23
drivers/gpu/drm/ttm/ttm_resource.c | 3
drivers/hid/hid-core.c | 19
drivers/hwmon/corsair-cpro.c | 5
drivers/hwmon/gsc-hwmon.c | 4
drivers/i2c/busses/i2c-qup.c | 4
drivers/i2c/busses/i2c-stm32.c | 8
drivers/i2c/busses/i2c-stm32f7.c | 4
drivers/i2c/i2c-core-acpi.c | 1
drivers/i3c/internals.h | 1
drivers/i3c/master.c | 2
drivers/idle/intel_idle.c | 2
drivers/iio/adc/ad7768-1.c | 23
drivers/iio/adc/ad_sigma_delta.c | 4
drivers/iio/adc/max1363.c | 43 -
drivers/iio/adc/stm32-adc-core.c | 7
drivers/iio/imu/inv_icm42600/inv_icm42600_temp.c | 6
drivers/iio/light/as73211.c | 2
drivers/iio/light/hid-sensor-prox.c | 3
drivers/iio/pressure/bmp280-core.c | 9
drivers/iio/proximity/isl29501.c | 16
drivers/infiniband/core/cache.c | 4
drivers/infiniband/core/nldev.c | 22
drivers/infiniband/hw/bnxt_re/qplib_res.c | 2
drivers/infiniband/hw/hfi1/affinity.c | 44 -
drivers/infiniband/sw/rxe/rxe_comp.c | 16
drivers/input/joystick/xpad.c | 2
drivers/iommu/amd/init.c | 4
drivers/leds/leds-lp50xx.c | 11
drivers/md/dm-core.h | 52 +
drivers/md/dm-historical-service-time.c | 4
drivers/md/dm-queue-length.c | 4
drivers/md/dm-round-robin.c | 4
drivers/md/dm-rq.c | 8
drivers/md/dm-service-time.c | 4
drivers/md/dm-zoned-target.c | 2
drivers/md/dm.c | 59 --
drivers/media/cec/usb/rainshadow/rainshadow-cec.c | 3
drivers/media/dvb-frontends/dib7000p.c | 8
drivers/media/i2c/hi556.c | 26
drivers/media/i2c/ov2659.c | 3
drivers/media/i2c/tc358743.c | 86 +-
drivers/media/platform/qcom/camss/camss.c | 4
drivers/media/platform/qcom/venus/core.c | 21
drivers/media/platform/qcom/venus/core.h | 2
drivers/media/platform/qcom/venus/dbgfs.c | 9
drivers/media/platform/qcom/venus/dbgfs.h | 13
drivers/media/platform/qcom/venus/hfi_venus.c | 14
drivers/media/platform/qcom/venus/vdec.c | 5
drivers/media/usb/gspca/vicam.c | 10
drivers/media/usb/hdpvr/hdpvr-i2c.c | 6
drivers/media/usb/usbtv/usbtv-video.c | 4
drivers/media/usb/uvc/uvc_driver.c | 3
drivers/media/usb/uvc/uvc_video.c | 21
drivers/media/v4l2-core/v4l2-ctrls.c | 37 +
drivers/memstick/core/memstick.c | 3
drivers/memstick/host/rtsx_usb_ms.c | 1
drivers/misc/cardreader/rtsx_usb.c | 16
drivers/mmc/host/bcm2835.c | 3
drivers/mmc/host/rtsx_usb_sdmmc.c | 4
drivers/mmc/host/sdhci-msm.c | 14
drivers/mmc/host/sdhci-pci-core.c | 3
drivers/mmc/host/sdhci-pci-gli.c | 4
drivers/mmc/host/sdhci_am654.c | 9
drivers/most/core.c | 2
drivers/mtd/ftl.c | 2
drivers/mtd/nand/raw/atmel/nand-controller.c | 2
drivers/mtd/nand/raw/atmel/pmecc.c | 6
drivers/mtd/nand/raw/fsmc_nand.c | 2
drivers/net/can/kvaser_pciefd.c | 1
drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 1
drivers/net/dsa/b53/b53_common.c | 54 +
drivers/net/dsa/b53/b53_regs.h | 2
drivers/net/ethernet/agere/et131x.c | 36 +
drivers/net/ethernet/atheros/ag71xx.c | 9
drivers/net/ethernet/cavium/thunder/thunder_bgx.c | 4
drivers/net/ethernet/emulex/benet/be_cmds.c | 2
drivers/net/ethernet/emulex/benet/be_main.c | 8
drivers/net/ethernet/freescale/dpaa/dpaa_ethtool.c | 4
drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c | 66 +-
drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.h | 13
drivers/net/ethernet/freescale/dpaa2/dpaa2-ethtool.c | 16
drivers/net/ethernet/freescale/dpaa2/dpaa2-mac.c | 95 +--
drivers/net/ethernet/freescale/dpaa2/dpaa2-mac.h | 5
drivers/net/ethernet/freescale/fec_main.c | 34 -
drivers/net/ethernet/freescale/gianfar_ethtool.c | 4
drivers/net/ethernet/google/gve/gve_adminq.c | 1
drivers/net/ethernet/google/gve/gve_main.c | 67 +-
drivers/net/ethernet/hisilicon/hns3/hnae3.h | 17
drivers/net/ethernet/hisilicon/hns3/hns3_debugfs.c | 3
drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 33 -
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_debugfs.c | 2
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 4
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c | 2
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c | 49 -
drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 25
drivers/net/ethernet/intel/e1000e/defines.h | 3
drivers/net/ethernet/intel/e1000e/ich8lan.c | 2
drivers/net/ethernet/intel/e1000e/nvm.c | 6
drivers/net/ethernet/intel/fm10k/fm10k.h | 3
drivers/net/ethernet/intel/i40e/i40e.h | 2
drivers/net/ethernet/intel/i40e/i40e_ethtool.c | 3
drivers/net/ethernet/intel/i40e/i40e_main.c | 18
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 4
drivers/net/ethernet/intel/ice/ice_flex_pipe.c | 2
drivers/net/ethernet/intel/ixgbe/ixgbe.h | 3
drivers/net/ethernet/intel/ixgbe/ixgbe_xsk.c | 4
drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2
drivers/net/ethernet/mellanox/mlxsw/trap.h | 1
drivers/net/ethernet/xilinx/xilinx_emaclite.c | 2
drivers/net/hyperv/hyperv_net.h | 3
drivers/net/hyperv/netvsc_drv.c | 29
drivers/net/phy/mscc/mscc_ptp.c | 1
drivers/net/phy/mscc/mscc_ptp.h | 1
drivers/net/phy/smsc.c | 1
drivers/net/ppp/pptp.c | 18
drivers/net/usb/sierra_net.c | 4
drivers/net/usb/usbnet.c | 11
drivers/net/virtio_net.c | 38 +
drivers/net/vrf.c | 2
drivers/net/wireless/ath/ath11k/hal.c | 25
drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c | 8
drivers/net/wireless/broadcom/brcm80211/brcmsmac/phy/phy_lcn.c | 2
drivers/net/wireless/intel/iwlegacy/4965-mac.c | 5
drivers/net/wireless/intel/iwlwifi/dvm/main.c | 11
drivers/net/wireless/intel/iwlwifi/dvm/rs.c | 2
drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 7
drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 4
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 2
drivers/net/wireless/marvell/mwl8k.c | 4
drivers/net/wireless/realtek/rtl818x/rtl8187/dev.c | 3
drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 2
drivers/net/wireless/realtek/rtlwifi/pci.c | 23
drivers/net/xen-netfront.c | 5
drivers/pci/controller/pcie-rockchip-host.c | 2
drivers/pci/endpoint/pci-ep-cfs.c | 1
drivers/pci/endpoint/pci-epf-core.c | 2
drivers/pci/hotplug/pnv_php.c | 233 +++++++
drivers/pci/pci-acpi.c | 4
drivers/pci/pci.c | 8
drivers/pci/probe.c | 2
drivers/phy/tegra/xusb-tegra186.c | 59 +-
drivers/pinctrl/stm32/pinctrl-stm32.c | 1
drivers/pinctrl/sunxi/pinctrl-sunxi.c | 11
drivers/platform/chrome/cros_ec.c | 23
drivers/platform/chrome/cros_ec.h | 2
drivers/platform/chrome/cros_ec_i2c.c | 4
drivers/platform/chrome/cros_ec_lpc.c | 4
drivers/platform/chrome/cros_ec_spi.c | 4
drivers/platform/chrome/cros_ec_typec.c | 4
drivers/platform/x86/thinkpad_acpi.c | 4
drivers/power/supply/max14577_charger.c | 4
drivers/pps/pps.c | 11
drivers/ptp/ptp_clock.c | 13
drivers/pwm/pwm-imx-tpm.c | 9
drivers/pwm/pwm-mediatek.c | 78 +-
drivers/regulator/core.c | 1
drivers/reset/Kconfig | 10
drivers/rtc/rtc-ds1307.c | 17
drivers/rtc/rtc-hym8563.c | 2
drivers/rtc/rtc-pcf85063.c | 2
drivers/rtc/rtc-pcf8563.c | 2
drivers/rtc/rtc-rv3028.c | 2
drivers/scsi/aacraid/comminit.c | 3
drivers/scsi/bfa/bfad_im.c | 1
drivers/scsi/ibmvscsi_tgt/libsrp.c | 6
drivers/scsi/isci/request.c | 2
drivers/scsi/libiscsi.c | 3
drivers/scsi/lpfc/lpfc_debugfs.c | 1
drivers/scsi/lpfc/lpfc_scsi.c | 4
drivers/scsi/lpfc/lpfc_sli.c | 8
drivers/scsi/mpt3sas/mpt3sas_scsih.c | 19
drivers/scsi/mvsas/mv_sas.c | 4
drivers/scsi/pm8001/pm8001_init.c | 11
drivers/scsi/pm8001/pm8001_sas.h | 1
drivers/scsi/qla4xxx/ql4_os.c | 2
drivers/scsi/scsi_scan.c | 2
drivers/scsi/scsi_transport_sas.c | 60 +-
drivers/scsi/ufs/ufs-exynos.c | 4
drivers/scsi/ufs/ufshcd.c | 10
drivers/soc/aspeed/aspeed-lpc-snoop.c | 13
drivers/soc/qcom/mdt_loader.c | 41 +
drivers/soc/tegra/pmc.c | 51 -
drivers/soundwire/stream.c | 2
drivers/staging/comedi/comedi_fops.c | 61 +-
drivers/staging/comedi/comedi_internal.h | 1
drivers/staging/comedi/drivers.c | 30 -
drivers/staging/comedi/drivers/aio_iiro_16.c | 3
drivers/staging/comedi/drivers/comedi_test.c | 2
drivers/staging/comedi/drivers/das16m1.c | 3
drivers/staging/comedi/drivers/das6402.c | 3
drivers/staging/comedi/drivers/pcl812.c | 3
drivers/staging/fbtft/fbtft-core.c | 1
drivers/staging/media/imx/imx-media-csc-scaler.c | 2
drivers/staging/nvec/nvec_power.c | 2
drivers/thermal/thermal_sysfs.c | 9
drivers/thunderbolt/domain.c | 2
drivers/thunderbolt/switch.c | 2
drivers/tty/serial/8250/8250_port.c | 3
drivers/tty/serial/pch_uart.c | 2
drivers/tty/vt/defkeymap.c_shipped | 112 +++
drivers/tty/vt/keyboard.c | 2
drivers/uio/uio_hv_generic.c | 4
drivers/usb/atm/cxacru.c | 106 +--
drivers/usb/chipidea/ci.h | 18
drivers/usb/chipidea/udc.c | 10
drivers/usb/class/cdc-acm.c | 13
drivers/usb/core/config.c | 10
drivers/usb/core/hub.c | 60 +-
drivers/usb/core/hub.h | 1
drivers/usb/core/quirks.c | 1
drivers/usb/core/urb.c | 2
drivers/usb/dwc3/core.c | 10
drivers/usb/dwc3/dwc3-meson-g12a.c | 3
drivers/usb/dwc3/dwc3-qcom.c | 7
drivers/usb/dwc3/gadget.c | 14
drivers/usb/early/xhci-dbc.c | 4
drivers/usb/gadget/composite.c | 5
drivers/usb/gadget/configfs.c | 2
drivers/usb/gadget/udc/renesas_usb3.c | 1
drivers/usb/host/xhci-hub.c | 3
drivers/usb/host/xhci-mem.c | 24
drivers/usb/host/xhci-pci-renesas.c | 7
drivers/usb/host/xhci-plat.c | 3
drivers/usb/host/xhci-ring.c | 19
drivers/usb/host/xhci.c | 24
drivers/usb/host/xhci.h | 3
drivers/usb/musb/musb_core.c | 62 +-
drivers/usb/musb/musb_core.h | 11
drivers/usb/musb/musb_debugfs.c | 6
drivers/usb/musb/musb_gadget.c | 30 -
drivers/usb/musb/musb_host.c | 6
drivers/usb/musb/musb_virthub.c | 18
drivers/usb/musb/omap2430.c | 10
drivers/usb/phy/phy-mxs-usb.c | 4
drivers/usb/serial/ftdi_sio.c | 2
drivers/usb/serial/ftdi_sio_ids.h | 3
drivers/usb/serial/option.c | 7
drivers/usb/storage/realtek_cr.c | 2
drivers/usb/storage/unusual_devs.h | 29
drivers/usb/typec/mux/intel_pmc_mux.c | 2
drivers/usb/typec/tcpm/fusb302.c | 8
drivers/usb/typec/ucsi/psy.c | 2
drivers/usb/typec/ucsi/ucsi.c | 1
drivers/usb/typec/ucsi/ucsi.h | 7
drivers/vhost/scsi.c | 4
drivers/vhost/vhost.c | 3
drivers/video/console/vgacon.c | 2
drivers/video/fbdev/imxfb.c | 9
drivers/watchdog/dw_wdt.c | 2
drivers/watchdog/ziirave_wdt.c | 3
drivers/xen/gntdev-common.h | 4
drivers/xen/gntdev.c | 71 +-
fs/btrfs/ctree.h | 2
fs/btrfs/inode.c | 4
fs/btrfs/ioctl.c | 2
fs/btrfs/qgroup.c | 2
fs/btrfs/send.c | 4
fs/btrfs/transaction.c | 2
fs/btrfs/tree-log.c | 53 +
fs/buffer.c | 2
fs/cifs/cifssmb.c | 10
fs/cifs/smb2ops.c | 7
fs/cifs/smbdirect.c | 14
fs/ext4/fsmap.c | 23
fs/ext4/indirect.c | 4
fs/ext4/inline.c | 19
fs/ext4/inode.c | 2
fs/f2fs/f2fs.h | 2
fs/f2fs/inode.c | 28
fs/f2fs/node.c | 10
fs/file.c | 83 +-
fs/hfs/bnode.c | 93 +++
fs/hfsplus/bnode.c | 92 +++
fs/hfsplus/extents.c | 3
fs/hfsplus/unicode.c | 7
fs/hfsplus/xattr.c | 6
fs/hugetlbfs/inode.c | 2
fs/isofs/inode.c | 9
fs/jbd2/checkpoint.c | 1
fs/jfs/file.c | 3
fs/jfs/inode.c | 2
fs/jfs/jfs_dmap.c | 10
fs/libfs.c | 4
fs/namespace.c | 89 ++-
fs/nfs/blocklayout/blocklayout.c | 4
fs/nfs/blocklayout/dev.c | 5
fs/nfs/blocklayout/extent_tree.c | 20
fs/nfs/client.c | 46 +
fs/nfs/export.c | 11
fs/nfs/flexfilelayout/flexfilelayout.c | 32 -
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 6
fs/nfs/inode.c | 6
fs/nfs/internal.h | 10
fs/nfs/nfs4client.c | 15
fs/nfs/nfs4proc.c | 46 -
fs/nfs/pnfs.c | 11
fs/nfsd/nfs4state.c | 34 -
fs/nilfs2/inode.c | 9
fs/orangefs/orangefs-debugfs.c | 8
fs/squashfs/super.c | 14
fs/udf/super.c | 13
include/asm-generic/barrier.h | 33 +
include/linux/blk_types.h | 8
include/linux/compiler.h | 8
include/linux/cpuset.h | 17
include/linux/fs.h | 4
include/linux/fs_context.h | 2
include/linux/if_vlan.h | 6
include/linux/memfd.h | 14
include/linux/minmax.h | 17
include/linux/mm.h | 80 +-
include/linux/mmzone.h | 22
include/linux/moduleparam.h | 5
include/linux/pci.h | 1
include/linux/platform_data/cros_ec_proto.h | 4
include/linux/pps_kernel.h | 1
include/linux/sched/mm.h | 16
include/linux/skbuff.h | 31 +
include/linux/usb/usbnet.h | 1
include/linux/xarray.h | 15
include/net/cfg80211.h | 2
include/net/tc_act/tc_ctinfo.h | 6
include/net/udp.h | 24
include/uapi/linux/in6.h | 4
include/uapi/linux/io_uring.h | 2
include/uapi/linux/mount.h | 3
kernel/cgroup/cpuset.c | 23
kernel/events/core.c | 20
kernel/fork.c | 2
kernel/power/console.c | 7
kernel/rcu/tree_plugin.h | 3
kernel/trace/ftrace.c | 19
kernel/trace/trace.c | 33 -
kernel/trace/trace.h | 8
kernel/trace/trace_events.c | 5
mm/filemap.c | 2
mm/hmm.c | 2
mm/kmemleak.c | 10
mm/madvise.c | 2
mm/memfd.c | 2
mm/mmap.c | 10
mm/page_alloc.c | 13
mm/ptdump.c | 2
mm/shmem.c | 2
mm/slab.h | 5
mm/slob.c | 6
mm/vmalloc.c | 16
mm/zsmalloc.c | 6
net/8021q/vlan.c | 42 +
net/8021q/vlan.h | 1
net/appletalk/aarp.c | 42 +
net/appletalk/ddp.c | 7
net/bluetooth/l2cap_core.c | 26
net/bluetooth/l2cap_sock.c | 3
net/bluetooth/smp.c | 21
net/bluetooth/smp.h | 1
net/bridge/netfilter/nft_reject_bridge.c | 60 --
net/caif/cfctrl.c | 294 ++++------
net/core/filter.c | 3
net/core/netpoll.c | 7
net/hsr/hsr_slave.c | 8
net/ipv4/netfilter/nf_reject_ipv4.c | 4
net/ipv4/route.c | 1
net/ipv4/tcp_input.c | 3
net/ipv4/udp_offload.c | 2
net/ipv6/ip6_offload.c | 4
net/ipv6/netfilter/nf_reject_ipv6.c | 4
net/ipv6/rpl_iptunnel.c | 8
net/ipv6/seg6_hmac.c | 3
net/mac80211/tx.c | 7
net/ncsi/internal.h | 2
net/ncsi/ncsi-rsp.c | 1
net/netfilter/nf_conntrack_netlink.c | 24
net/netfilter/nf_tables_api.c | 4
net/netfilter/nft_reject.c | 12
net/netfilter/nft_reject_inet.c | 68 --
net/netfilter/xt_nfacct.c | 4
net/netlink/af_netlink.c | 2
net/packet/af_packet.c | 39 -
net/phonet/pep.c | 2
net/sched/act_ctinfo.c | 19
net/sched/sch_cake.c | 14
net/sched/sch_codel.c | 5
net/sched/sch_drr.c | 7
net/sched/sch_ets.c | 46 -
net/sched/sch_fq_codel.c | 6
net/sched/sch_hfsc.c | 8
net/sched/sch_htb.c | 19
net/sched/sch_netem.c | 40 +
net/sched/sch_qfq.c | 40 -
net/sctp/input.c | 2
net/tls/tls_sw.c | 13
net/vmw_vsock/af_vsock.c | 3
net/wireless/mlme.c | 3
samples/mei/mei-amt-version.c | 2
scripts/kconfig/gconf.c | 8
scripts/kconfig/lxdialog/inputbox.c | 6
scripts/kconfig/lxdialog/menubox.c | 2
scripts/kconfig/nconf.c | 2
scripts/kconfig/nconf.gui.c | 1
scripts/kconfig/qconf.cc | 2
security/apparmor/include/match.h | 3
security/apparmor/match.c | 1
security/inode.c | 2
sound/core/pcm_native.c | 19
sound/pci/hda/patch_ca0132.c | 7
sound/pci/hda/patch_hdmi.c | 19
sound/pci/hda/patch_realtek.c | 3
sound/pci/intel8x0.c | 2
sound/soc/codecs/hdac_hdmi.c | 10
sound/soc/codecs/rt5640.c | 5
sound/soc/fsl/fsl_sai.c | 30 -
sound/soc/intel/boards/Kconfig | 2
sound/soc/soc-core.c | 3
sound/soc/soc-dai.c | 19
sound/soc/soc-dapm.c | 4
sound/soc/soc-ops.c | 26
sound/usb/mixer_quirks.c | 14
sound/usb/mixer_scarlett_gen2.c | 8
sound/usb/stream.c | 25
sound/usb/validate.c | 14
tools/bpf/bpftool/net.c | 15
tools/include/linux/sched/mm.h | 2
tools/perf/tests/bp_account.c | 1
tools/power/cpupower/utils/idle_monitor/mperf_monitor.c | 4
tools/testing/ktest/ktest.pl | 5
tools/testing/selftests/ftrace/test.d/event/subsystem-enable.tc | 28
tools/testing/selftests/ftrace/test.d/ftrace/func-filter-glob.tc | 2
tools/testing/selftests/futex/include/futextest.h | 11
tools/testing/selftests/memfd/memfd_test.c | 43 +
tools/testing/selftests/net/mptcp/Makefile | 3
tools/testing/selftests/net/mptcp/mptcp_connect_mmap.sh | 5
tools/testing/selftests/net/mptcp/pm_netlink.sh | 1
tools/testing/selftests/net/rtnetlink.sh | 6
523 files changed, 4755 insertions(+), 2125 deletions(-)
Aaron Kling (1):
ARM: tegra: Use I/O memcpy to write to IRAM
Abdun Nihaal (1):
staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
Adam Ford (1):
arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed
Ajish Koshy (1):
scsi: pm80xx: Fix memory leak during rmmod
Al Viro (4):
better lockdep annotations for simple_recursive_removal()
securityfs: don't pin dentries twice, once is enough...
use uniform permission checks for all mount propagation changes
alloc_fdtable(): change calling conventions.
Alessandro Carminati (1):
regulator: core: fix NULL dereference on unbind due to stale coupling data
Alex Guo (2):
media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
Alexander Gordeev (1):
mm/vmalloc: leave lazy MMU mode on PTE mapping error
Alexander Kochetkov (1):
ARM: rockchip: fix kernel hang during smp initialization
Alexander Wilhelm (1):
bus: mhi: host: Fix endianness of BHI vector table
Alok Tiwari (7):
thunderbolt: Fix bit masking in tb_dp_port_set_hops()
net: emaclite: Fix missing pointer increment in aligned_read()
staging: nvec: Fix incorrect null termination of battery manufacturer
ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
be2net: Use correct byte order and format string for TCP seq and ack_seq
net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
gve: Return error for unknown admin queue command
Amir Mohammad Jahangirzad (1):
fs/orangefs: use snprintf() instead of sprintf()
Ammar Faizi (1):
net: usbnet: Fix the wrong netif_carrier_on() call
Anantha Prabhu (1):
RDMA/bnxt_re: Fix to initialize the PBL array
Andreas Dilger (1):
ext4: check fast symlink for ea_inode correctly
Andrew Jeffery (2):
soc: aspeed: lpc-snoop: Cleanup resources in stack-order
soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
Andrew Lunn (1):
net: appletalk: fix kerneldoc warnings
André Draszik (1):
scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
Andy Shevchenko (2):
mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
Documentation: ACPI: Fix parent device references
Andy Yan (1):
drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed
Anna Schumaker (1):
NFS: Create an nfs4_server_set_init_caps() function
Annette Kobou (1):
ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
Anshuman Khandual (1):
mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
Anthoine Bourgeois (1):
xen/netfront: Fix TX response spurious interrupts
Arnaud Lecomte (1):
jfs: upper bound check of tree index in dbAllocAG
Arnd Bergmann (5):
ethernet: intel: fix building with large NR_CPUS
ASoC: Intel: fix SND_SOC_SOF dependencies
ASoC: ops: dynamically allocate struct snd_ctl_elem_value
caif: reduce stack size, again
RDMA/core: reduce stack using in nldev_stat_get_doit()
Arun Raghavan (1):
ASoC: fsl_sai: Force a software reset when starting in consumer mode
Avraham Stern (1):
wifi: iwlwifi: mvm: fix scan request validation
Balamanikandan Gunasundar (1):
mtd: rawnand: atmel: set pmecc data setup time
Baokun Li (1):
jbd2: prevent softlockup in jbd2_log_do_checkpoint()
Bard Liao (1):
soundwire: stream: restore params when prepare ports fail
Bartosz Golaszewski (2):
gpio: wcd934x: check the return value of regmap_update_bits()
gpio: tps65912: check the return value of regmap_update_bits()
Ben Hutchings (1):
sh: Do not use hyphen in exported variable name
Benjamin Coddington (1):
NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
Benjamin Tissoires (3):
HID: core: ensure the allocated report buffer can contain the reserved report ID
HID: core: ensure __hid_request reserves the report ID as the first byte
HID: core: do not bypass hid_hw_raw_request
Benson Leung (1):
usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default
Bingbu Cao (1):
media: hi556: correct the test pattern configuration
Bjorn Andersson (1):
soc: qcom: mdt_loader: Ensure we don't read past the ELF header
Brahmajit Das (1):
samples: mei: Fix building on musl libc
Breno Leitao (3):
ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
ipmi: Use dev_warn_ratelimited() for incorrect message warnings
mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
Brian Masney (5):
rtc: ds1307: fix incorrect maximum clock rate handling
rtc: hym8563: fix incorrect maximum clock rate handling
rtc: pcf85063: fix incorrect maximum clock rate handling
rtc: pcf8563: fix incorrect maximum clock rate handling
rtc: rv3028: fix incorrect maximum clock rate handling
Buday Csaba (1):
net: phy: smsc: add proper reset flags for LAN8710A
Budimir Markovic (1):
vsock: Do not allow binding to VMADDR_PORT_ANY
Bui Quang Minh (1):
virtio-net: ensure the received length does not exceed allocated size
Chao Yu (6):
f2fs: doc: fix wrong quota mount option description
f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
f2fs: fix to avoid panic in f2fs_evict_inode
f2fs: fix to avoid out-of-boundary access in devs.path
f2fs: fix to do sanity check on ino and xnid
f2fs: fix to avoid out-of-boundary access in dnode page
Charles Han (1):
power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
Cheick Traore (1):
pinctrl: stm32: Manage irq affinity settings
Chen Ni (1):
iio: adc: stm32-adc: Fix race in installing chained IRQ handler
Chen-Yu Tsai (1):
platform/chrome: cros_ec: Use per-device lockdep key
Chenyuan Yang (1):
fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
Christophe JAILLET (1):
uio_hv_generic: Fix another memory leak in error handling paths
Christophe Leroy (1):
ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
Clément Le Goffic (1):
i2c: stm32: fix the device used for the DMA map
Cong Wang (6):
sch_htb: make htb_qlen_notify() idempotent
sch_drr: make drr_qlen_notify() idempotent
sch_hfsc: make hfsc_qlen_notify() idempotent
sch_qfq: make qfq_qlen_notify() idempotent
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
sch_htb: make htb_deactivate() idempotent
Corey Minyard (1):
ipmi: Fix strcpy source and destination the same
Cristian Ciocaltea (1):
ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
Cynthia Huang (1):
selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
Dai Ngo (1):
NFSD: detect mismatch of file handle and delegation stateid in OPEN op
Damien Le Moal (8):
ata: libata-sata: Disallow changing LPM state if not supported
scsi: mpt3sas: Correctly handle ATA device errors
ata: libata-scsi: Fix ata_to_sense_error() status handling
PCI: endpoint: Fix configfs group list head handling
PCI: endpoint: Fix configfs group removal on driver teardown
block: Make REQ_OP_ZONE_FINISH a write operation
ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
dm: rearrange core declarations for extended use from dm-zone.c
Dan Carpenter (7):
dmaengine: nbpfaxi: Fix memory corruption in probe()
watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
fs/orangefs: Allow 2 more characters in do_c_string()
cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
media: gspca: Add bounds checking to firmware parser
scsi: qla4xxx: Prevent a potential error pointer dereference
ALSA: usb-audio: Fix size validation in convert_chmap_v3()
Daniel Dadap (1):
ALSA: hda: Add missing NVIDIA HDA codec IDs
Daniel Vetter (1):
mm: extract might_alloc() debug check
Daniil Dulov (1):
wifi: rtl818x: Kill URBs before clearing tx status queue
Dave Hansen (1):
x86/fpu: Delay instruction pointer fixup until after warning
Dave Stevenson (3):
media: tc358743: Check I2C succeeded during probe
media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
media: tc358743: Increase FIFO trigger level to 374
David Laight (1):
minmax: add umin(a, b) and umax(a, b)
David Lechner (2):
iio: proximity: isl29501: fix buffered read on big-endian systems
iio: adc: ad_sigma_delta: change to buffer predisable
Davide Caratti (2):
net/sched: sch_ets: properly init all active DRR list handles
net/sched: ets: use old 'nbands' while purging unused classes
Dawid Rezler (1):
ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx
Denis OSTERLAND-HEIM (1):
pps: fix poll support
Dennis Chen (1):
i40e: report VF tx_dropped with tx_errors instead of tx_discards
Dikshita Agarwal (1):
media: venus: Add support for SSR trigger using fault injection
Dong Chenchen (1):
net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
Drew Hamilton (1):
usb: musb: fix gadget state on disconnect
Edson Juliano Drosdeck (1):
mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
Edward Adam Davis (1):
jfs: Regular file corruption check
Emily Deng (1):
drm/ttm: Should to return the evict error
Eric Biggers (2):
thunderbolt: Fix copy+paste error in match_service_id()
lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
Eric Dumazet (5):
net_sched: act_ctinfo: use atomic64_t for three counters
pptp: ensure minimal skb length in pptp_xmit()
ipv6: reject malicious packets in ipv6_gso_segment()
pptp: fix pptp_xmit() error path
net_sched: sch_ets: implement lockless ets_dump()
Evgeniy Harchenko (1):
ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
Fabio Estevam (2):
iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
iio: adc: max1363: Reorder mode_list[] entries
Fabio Porcedda (1):
USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
Fedor Pchelkin (3):
drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
netfilter: nf_tables: adjust lockdep assertions handling
netlink: avoid infinite retry looping in netlink_unicast()
Feng Tang (1):
mm/page_alloc: detect allocation forbidden by cpuset and bail out early
Filipe Manana (2):
btrfs: fix log tree replay failure due to file with 0 links and extents
btrfs: fix deadlock when cloning inline extents and using qgroups
Finn Thain (2):
m68k: Don't unregister boot console needlessly
m68k: Fix lost column on framebuffer debug console
Florian Westphal (3):
netfilter: xt_nfacct: don't assume acct name is null-terminated
netfilter: ctnetlink: fix refcount leak on table dump
netfilter: nf_reject: don't leak dst refcount for loopback packets
Gal Pressman (1):
net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
Gautham R. Shenoy (1):
pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
Geoffrey D. Bennett (1):
ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
Giovanni Cabiddu (1):
crypto: qat - fix seq_file position update in adf_ring_next()
Gokul Sivakumar (1):
wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE
Greg Kroah-Hartman (2):
Revert "vmci: Prevent the dispatching of uninitialized payloads"
Linux 5.10.241
Guchun Chen (1):
drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
Gui-Dong Han (1):
media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
Haiyang Zhang (1):
hv_netvsc: Fix panic during namespace deletion with VF
Hans Verkuil (1):
media: v4l2-ctrls: always copy the controls on completion
Hans Zhang (1):
PCI: rockchip-host: Fix "Unexpected Completion" log message
Haoxiang Li (2):
media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
Hari Kalavakunta (1):
net: ncsi: Fix buffer overflow in fetching version id
Harry Yoo (1):
mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
Helge Deller (1):
Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
Henry Martin (1):
clk: davinci: Add NULL check in davinci_lpsc_clk_register()
Herbert Xu (1):
crypto: marvell/cesa - Fix engine load inaccuracy
Hongyu Xie (1):
xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
Horatiu Vultur (1):
phy: mscc: Fix parsing of unicast frames
Hsin-Te Yuan (1):
thermal: sysfs: Return ENODATA instead of EAGAIN for reads
Hyejeong Choi (1):
dma-buf: insert memory barrier before updating num_fences
Ian Abbott (10):
comedi: pcl812: Fix bit shift out of bounds
comedi: aio_iiro_16: Fix bit shift out of bounds
comedi: das16m1: Fix bit shift out of bounds
comedi: das6402: Fix bit shift out of bounds
comedi: Fix some signed shift left operations
comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
comedi: Fix initialization of data for instructions that write to subdevice
comedi: comedi_test: Fix possible deletion of uninitialized timers
comedi: fix race between polling and detaching
comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
Ido Schimmel (1):
mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
Ilan Peer (1):
wifi: cfg80211: Fix interface type validation
Ilya Bakoulin (1):
drm/amd/display: Separate set_gsl from set_gsl_source_select
Imre Deak (1):
drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
Ioana Ciornei (3):
dpaa2-mac: split up initializing the MAC object from connecting to it
dpaa2-mac: export MAC counters even when in TYPE_FIXED
dpaa2-eth: retry the probe when the MAC is not yet discovered on the bus
Ivan Stepchenko (1):
mtd: fix possible integer overflow in erase_xfer()
Jacek Kowalski (2):
e1000e: disregard NVM checksum on tgp when valid checksum bit is not set
e1000e: ignore uninitialized checksum word on tgp
Jack Xiao (1):
drm/amdgpu: fix incorrect vm flags to map bo
Jakub Acs (1):
net, hsr: reject HSR frame if skb can't hold tag
Jakub Kicinski (2):
netpoll: prevent hanging NAPI when netcons gets enabled
uapi: in6: restore visibility of most IPv6 socket options
James Smart (1):
scsi: lpfc: Fix link down processing to address NULL pointer dereference
Jan Beulich (1):
compiler: remove __ADDRESSABLE_ASM{_STR,}() again
Jan Kara (2):
isofs: Verify inode mode when loading from disk
udf: Verify partition map count
Jason Wang (1):
vhost: fail early when __vhost_add_used() fails
Jason Xing (1):
ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
Jay Chen (1):
usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
Jean-Baptiste Maneyrol (1):
iio: imu: inv_icm42600: change invalid data error to -EBUSY
Jeff Layton (1):
nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
Jian Shen (2):
net: hns3: refine the struct hane3_tc_info
net: hns3: fixed vf get max channels bug
Jiasheng Jiang (2):
iwlwifi: Add missing check for alloc_ordered_workqueue
scsi: lpfc: Remove redundant assignment to avoid memory leak
Jiaxun Yang (1):
MIPS: mm: tlb-r4k: Uniquify TLB entries on init
Jiayi Li (2):
ACPI: processor: perflib: Fix initial _PPC limit application
memstick: Fix deadlock by moving removing flag earlier
Jiayuan Chen (1):
bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
Jimmy Assarsson (2):
can: kvaser_pciefd: Store device channel index
can: kvaser_usb: Assign netdev.dev_port based on device channel index
Johan Adolfsson (1):
leds: leds-lp50xx: Handle reg to get correct multi_index
Johan Hovold (8):
net: gianfar: fix device leak when querying time stamp info
net: dpaa: fix device leak when querying time stamp info
usb: gadget: udc: renesas_usb3: fix device leak at unbind
usb: dwc3: meson-g12a: fix device leaks at unbind
wifi: ath11k: fix source ring-buffer corruption
USB: cdc-acm: do not log successful probe on later errors
usb: musb: omap2430: fix device leak at unbind
wifi: ath11k: fix dest ring-buffer corruption when ring is full
Johan Korsnes (1):
arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
Johannes Berg (1):
wifi: cfg80211: reject HTC bit for management frames
John Ernberg (1):
net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
John Garry (2):
scsi: aacraid: Stop using PCI_IRQ_AFFINITY
block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
Jon Hunter (1):
soc/tegra: pmc: Ensure power-domains are in a known state
Jonas Rebmann (1):
net: fec: allow disable coalescing
Jonathan Cameron (1):
iio: light: as73211: Ensure buffer holes are zeroed
Jonathan Santos (1):
iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
Jorge Ramirez-Ortiz (2):
media: venus: hfi: explicitly release IRQ during teardown
media: venus: protect against spurious interrupts during probe
Jose M. Guisado Gomez (1):
netfilter: nft_reject: unify reject init and dump into nft_reject
Judith Mendez (1):
mmc: sdhci_am654: Workaround for Errata i2312
Juergen Gross (1):
xen/gntdev: remove struct gntdev_copy_batch from stack
Justin Tee (1):
scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
Kees Cook (3):
arm64: Handle KCOV __init vs inline mismatches
platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
iommu/amd: Avoid stack buffer overflow from kernel cmdline
Kefeng Wang (1):
asm-generic: Add memory barrier dma_mb()
Kito Xu (veritas501) (1):
net: appletalk: Fix use-after-free in AARP proxy probe
Krishna Kurapati (1):
usb: dwc3: qcom: Don't leave BCR asserted
Krzysztof Kozlowski (1):
ARM: dts: vfxxx: Correctly use two tuples for timer address
Kuen-Han Tsai (1):
usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
Kuninori Morimoto (3):
ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask()
ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
ASoC: soc-dai.c: add missing flag check at snd_soc_pcm_dai_probe()
Kuniyuki Iwashima (2):
rpl: Fix use-after-free in rpl_do_srh_inline().
Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
Laurentiu Mihalcea (1):
pwm: imx-tpm: Reset counter if CMOD is 0
Len Brown (1):
intel_idle: Allow loading ACPI tables for any family
Leo Yan (1):
perf tests bp_account: Fix leaked file descriptor
Leon Romanovsky (1):
RDMA/rxe: Return CQE error if invalid lkey was supplied
Li Zhong (1):
ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value
Lifeng Zheng (4):
cpufreq: Initialize cpufreq-based frequency-invariance later
cpufreq: Init policy->rwsem before it may be possibly used
cpufreq: Exit governor when failed to start old governor
PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()
Lin.Cao (1):
drm/sched: Remove optimization that causes hang when killing dependent jobs
Lizhi Xu (2):
vmci: Prevent the dispatching of uninitialized payloads
jfs: truncate good inode pages when hard link is 0
Lorenzo Stoakes (4):
mm: drop the assumption that VM_SHARED always implies writable
mm: update memfd seal write check to include F_SEAL_WRITE
mm: reinstate ability to map write-sealed memfd mappings read-only
selftests/memfd: add test for mapping write-sealed memfd read-only
Lucas De Marchi (1):
usb: early: xhci-dbc: Fix early_ioremap leak
Lucy Thrun (1):
ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
Ludwig Disterhof (1):
media: usbtv: Lock resolution while streaming
Luiz Augusto von Dentz (3):
Bluetooth: SMP: If an unallowed command is received consider it a failure
Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
Lukas Wunner (1):
PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
Ma Ke (2):
sunvdc: Balance device refcount in vdc_port_mpgroup_check
dpaa2-eth: Fix device reference count leak in MAC endpoint handling
Maciej W. Rozycki (1):
powerpc/eeh: Rely on dev->link_active_reporting
Mael GUERIN (1):
USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
Maor Gottlieb (1):
RDMA/core: Rate limit GID cache warning messages
Marco Elver (1):
locking/barriers, kcsan: Support generic instrumentation
Marek Szyprowski (1):
zynq_fpga: use sgtable-based scatterlist wrappers
Marek Vasut (1):
usb: renesas-xhci: Fix External ROM access timeouts
Mario Limonciello (3):
usb: xhci: Avoid showing warnings for dying controller
usb: xhci: Avoid showing errors during surprise removal
drm/amd: Restore cached power limit during resume
Marius Zachmann (1):
hwmon: (corsair-cpro) Validate the size of the received input buffer
Mark Brown (1):
ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
Martin Kaistra (1):
wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
Masahiro Yamada (3):
kconfig: qconf: fix ConfigList::updateListAllforAll()
kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
kconfig: gconf: fix potential memory leak in renderer_edited()
Masami Hiramatsu (Google) (1):
selftests: tracing: Use mutex_unlock for testing glob filter
Mathias Nyman (5):
usb: hub: fix detection of high tier USB3 devices behind suspended hubs
usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
usb: hub: Fix flushing of delayed work used for post resume purposes
usb: hub: avoid warm port reset during USB3 disconnect
usb: hub: Don't try to recover devices lost during warm reset.
Matthew Wilcox (Oracle) (1):
XArray: Add calls to might_alloc()
Matthieu Baerts (NGI0) (2):
selftests: mptcp: connect: also cover alt modes
selftests: mptcp: pm: check flush doesn't reset limits
Maulik Shah (1):
pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
Mauro Carvalho Chehab (1):
media: venus: don't de-reference NULL pointers at IRQ time
Meagan Lloyd (2):
rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
Meng Li (1):
usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
Mengbiao Xiong (1):
crypto: ccp - Fix crash when rebind ccp device for ccp.ko
Miao Li (1):
usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
Miaohe Lin (1):
mm/zsmalloc.c: convert to use kmem_cache_zalloc in cache_alloc_zspage()
Miaoqian Lin (1):
most: core: Drop device reference after usage in get_channel()
Michael Zhivich (1):
x86/bugs: Fix use of possibly uninit value in amd_check_tsa_microcode()
Michal Schmidt (1):
benet: fix BUG when creating VFs
Mike Christie (1):
vhost-scsi: Fix log flooding with target does not exist errors
Mikulas Patocka (1):
dm-mpath: don't print the "loaded" message if registering fails
Mina Almasry (1):
netmem: fix skb_frag_address_safe with unreadable skbs
Ming Lei (2):
block: don't call rq_qos_ops->done_bio if the bio isn't tracked
dm rq: don't queue request to blk-mq during DM suspend
Minhong He (1):
ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
Myrrh Periwinkle (3):
usb: typec: ucsi: Update power_supply on power role change
vt: keyboard: Don't process Unicode characters in K_OFF mode
vt: defkeymap: Map keycodes above 127 to K_HOLE
Nathan Chancellor (5):
phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
Niklas Söderlund (1):
gpio: rcar: Use raw_spinlock to protect register access
Nilton Perim Neto (1):
Input: xpad - set correct controller type for Acer NGR200
Ojaswin Mujoo (2):
ext4: fix fsmap end of range reporting with bigalloc
ext4: fix reserved gdt blocks handling in fsmap
Olga Kornievskaia (1):
NFSv4.2: another fix for listxattr
Oliver Neukum (3):
usb: net: sierra: check for no status endpoint
usb: core: usb_submit_urb: downgrade type check
cdc-acm: fix race between initial clearing halt and open
Oscar Maes (1):
net: ipv4: fix incorrect MTU in broadcast routes
Ovidiu Panait (1):
hwrng: mtk - handle devm_pm_runtime_enable errors
Pablo Neira Ayuso (1):
netfilter: nft_reject_inet: allow to use reject from inet ingress
Pagadala Yesu Anjaneyulu (1):
wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
Pali Rohár (1):
cifs: Fix calling CIFSFindFirst() for root path without msearch
Paul Cercueil (1):
usb: musb: Add and use inline functions musb_{get,set}_state
Paul Chaignon (1):
bpf: Check flow_dissector ctx accesses are aligned
Paul E. McKenney (1):
rcu: Protect ->defer_qs_iw_pending from data race
Paul Kocialkowski (1):
clk: sunxi-ng: v3s: Fix de clock definition
Pavel Begunkov (1):
io_uring: don't use int for ABI
Pavel Tikhomirov (1):
move_mount: allow to add a mount into an existing group
Pawan Gupta (1):
x86/bugs: Avoid warning when overriding return thunk
Peter Oberparleiter (2):
s390/hypfs: Avoid unnecessary ioctl registration in debugfs
s390/hypfs: Enable limited access during lockdown
Peter Robinson (1):
reset: brcmstb: Enable reset drivers for ARCH_BCM2835
Peter Ujfalusi (1):
ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
Petr Pavlu (1):
module: Restore the moduleparam prefix length check
Phillip Lougher (1):
squashfs: fix memory leak in squashfs_fill_super
Prashant Malani (1):
cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
Praveen Kaligineedi (1):
gve: Fix stuck TX queue for DQ queue format
Pu Lehui (1):
tracing: Limit access to parser->buffer when trace_get_user failed
Purva Yeshi (1):
md: dm-zoned-target: Initialize return variable r to avoid uninitialized use
Qu Wenruo (1):
btrfs: populate otime when logging an inode item
Quang Le (1):
net/packet: fix a race in packet_set_ring() and packet_notifier()
Rafael J. Wysocki (3):
ACPI: processor: perflib: Move problematic pr->performance check
cpuidle: governors: menu: Avoid using invalid recent intervals data
PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
Rand Deeb (1):
wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
Randy Dunlap (1):
parisc: Makefile: fix a typo in palo.conf
Ranjan Kumar (1):
scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
Remi Pommarel (2):
wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key()
Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
Ricardo Ribalda (2):
media: uvcvideo: Do not mark valid metadata as invalid
media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
Ricky Wu (1):
misc: rtsx: usb: Ensure mmc child device is active when card is present
RubenKelevra (1):
fs_context: fix parameter name in infofc() macro
Ryan Lee (1):
apparmor: ensure WB_HISTORY_SIZE value is a power of 2
Ryan Mann (NDI) (1):
USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
Ryusuke Konishi (1):
nilfs2: reject invalid file types when reading inodes
Sabrina Dubroca (1):
udp: also consider secpath when evaluating ipsec use for checksumming
Sakari Ailus (1):
media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
Salah Triki (1):
iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
Sarah Newman (1):
drbd: add missing kref_get in handle_write_conflicts
Sarthak Garg (1):
mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
Sasha Levin (1):
fs: Prevent file descriptor table allocations exceeding INT_MAX
Sebastian Ott (1):
ACPI: processor: fix acpi_object initialization
Sebastian Reichel (2):
watchdog: dw_wdt: Fix default timeout
usb: typec: fusb302: cache PD RX state
Sergey Bashirov (4):
pNFS: Fix stripe mapping in block/scsi layout
pNFS: Fix disk addr range check in block/scsi layout
pNFS: Handle RPC size limit for layoutcommits
pNFS: Fix uninited ptr deref in block/scsi layout
Sergey Senozhatsky (1):
wifi: ath11k: clear initialized flag for deinit-ed srng lists
Seunghui Lee (1):
scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume
Shankari Anand (1):
kconfig: nconf: Ensure null termination where strncpy is used
Shengjiu Wang (1):
ASoC: fsl_sai: replace regmap_write with regmap_update_bits
Shiji Yang (1):
MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
Showrya M N (1):
scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
Slark Xiao (2):
USB: serial: option: add Foxconn T99W640
USB: serial: option: add Foxconn T99W709
Stanislav Fomichev (1):
vrf: Drop existing dst reference in vrf_ip6_input_dst
Stanislaw Gruszka (1):
wifi: iwlegacy: Check rate_idx range after addition
Stefan Metzmacher (1):
smb: client: let recv_done() cleanup before notifying the callers.
Steven Rostedt (5):
selftests/tracing: Fix false failure of subsystem event test
ktest.pl: Prevent recursion of default variable options
ftrace: Also allocate and copy hash for reading of filter files
tracing: Add down_write(trace_event_sem) when adding trace event
tracing: Remove unneeded goto out logic
Su Hui (1):
usb: xhci: print xhci->xhc_state when queue_command failed
Suchit Karunakaran (1):
kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
Sven Schnelle (2):
s390/time: Use monotonic clock in get_cycles()
s390/stp: Remove udelay from stp_sync_clock()
Takashi Iwai (4):
ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out()
ALSA: usb-audio: Validate UAC3 power domain descriptors, too
ALSA: usb-audio: Validate UAC3 cluster segment descriptors
ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
Tao Xue (1):
usb: gadget : fix use-after-free in composite_dev_cleanup()
Tetsuo Handa (1):
hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
Theodore Ts'o (1):
ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
Thomas Fourier (17):
pch_uart: Fix dma_sync_sg_for_device() nents value
mmc: bcm2835: Fix dma_unmap_sg() nents value
mwl8k: Add missing check after DMA map
crypto: inside-secure - Fix `dma_unmap_sg()` nents value
scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
scsi: mvsas: Fix dma_unmap_sg() nents value
scsi: isci: Fix dma_unmap_sg() nents value
crypto: img-hash - Fix dma_unmap_sg() nents value
dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
dmaengine: nbpfaxi: Add missing check after DMA map
mtd: rawnand: atmel: Fix dma_mapping_error() address
et131x: Add missing check after DMA map
net: ag71xx: Add missing check after DMA map
(powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc()
mtd: rawnand: fsmc: Add missing check after DMA map
Thomas Gleixner (3):
perf/core: Don't leak AUX buffer refcount on allocation failure
perf/core: Exit early on perf_mmap() fail
perf/core: Prevent VMA split of buffer mappings
Thomas Weißschuh (2):
MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
kbuild: userprogs: use correct linker when mixing clang and GNU ld
Thorsten Blum (1):
usb: storage: realtek_cr: Use correct byte order for bcs->Residue
Tigran Mkrtchyan (1):
pNFS/flexfiles: don't attempt pnfs on fatal DS errors
Tim Harvey (1):
hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
Timothy Pearson (5):
PCI: pnv_php: Clean up allocated IRQs on unplug
PCI: pnv_php: Work around switches with broken presence detection
powerpc/eeh: Export eeh_unfreeze_pe()
powerpc/eeh: Make EEH driver device hotplug safe
PCI: pnv_php: Fix surprise plug detection and recovery
Timur Kristóf (5):
drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
drm/amd/display: Don't overclock DCE 6 by 15%
Tomasz Michalec (2):
usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
platform/chrome: cros_ec_typec: Defer probe on missing EC parent
Trond Myklebust (5):
pNFS/flexfiles: Avoid spurious layout returns in ff_layout_choose_ds_for_read
NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
NFS: Don't set NFS_INO_REVAL_PAGECACHE in the inode cache validity
NFSv4: Fix nfs4_bitmap_copy_adjust()
NFS: Fix the setting of capabilities when automounting a new filesystem
Tzung-Bi Shih (2):
platform/chrome: cros_ec: remove unneeded label and if-condition
platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
Ulf Hansson (1):
mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
Uwe Kleine-König (4):
platform/chrome: cros_ec: Make cros_ec_unregister() return void
pwm: mediatek: Implement .apply() callback
pwm: mediatek: Handle hardware enable and clock enable separately
pwm: mediatek: Fix duty and period setting
Vedang Nagar (1):
media: venus: Add a check for packet size after reading from shared memory
Viacheslav Dubeyko (4):
hfs: fix slab-out-of-bounds in hfs_bnode_read()
hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
hfs: fix not erasing deleted b-tree node issue
Victor Shih (1):
mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
Vladimir Zapolskiy (1):
media: qcom: camss: cleanup media device allocated resource on error path
Waiman Long (2):
mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
Wang Liang (1):
net: drop UFO packets in udp_rcv_segment()
Wang Zhaolong (1):
smb: client: fix use-after-free in crypt_message when using async crypto
Wayne Chang (1):
phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode
Weitao Wang (1):
usb: xhci: Fix slot_id resource race conflict
Wen Chen (1):
drm/amd/display: Fix 'failed to blank crtc!'
Wesley Cheng (1):
usb: dwc3: Remove DWC3 locking during gadget suspend/resume
William Liu (4):
net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
net/sched: Restrict conditions for adding duplicating netems to qdisc tree
net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
Wolfram Sang (3):
media: usb: hdpvr: disable zero-length read messages
i3c: add missing include to internal header
i3c: don't fail if GETHDRCAP is unsupported
Xiang Mei (2):
net/sched: sch_qfq: Fix race condition on qfq_aggregate
net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
Xin Long (1):
sctp: linearize cloned gso packets in sctp_rcv
Xinxin Wan (1):
ASoC: codecs: rt5640: Retry DEVICE_ID verification
Xinyu Liu (2):
usb: gadget: configfs: Fix OOB read on empty string write
usb: core: config: Prevent OOB read in SS endpoint companion parsing
Xiu Jianfeng (1):
wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
Xiumei Mu (1):
selftests: rtnetlink.sh: remove esp4_offload after test
Xu Yang (2):
usb: chipidea: add USB PHY event
usb: phy: mxs: disconnect line when USB charger is attached
Xu Yilun (1):
fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
Yajun Deng (1):
i40e: Add rx_missed_errors for buffer exhaustion
Yang Xiwen (1):
i2c: qup: jump out of the loop in case of timeout
Yang Yingliang (1):
ptp: Fix possible memory leak in ptp_clock_register()
Yangtao Li (1):
hfsplus: remove mutex_lock check in hfsplus_free_extents
Yann E. MORIN (1):
kconfig: lxdialog: fix 'space' to (de)select options
Yazen Ghannam (1):
x86/mce/amd: Add default names for MCA banks and blocks
Ye Bin (1):
fs/buffer: fix use-after-free when call bh_read() helper
Youngjun Lee (1):
media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
Yuan Chen (2):
bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
pinctrl: sunxi: Fix memory leak on krealloc failure
Yun Lu (2):
af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
af_packet: fix soft lockup issue caused by tpacket_snd()
Yunhui Cui (1):
serial: 8250: fix panic due to PSLVERR
Yury Norov [NVIDIA] (1):
RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
Zenm Chen (1):
USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
Zhang Lixu (1):
iio: hid-sensor-prox: Fix incorrect OFFSET calculation
Zhang Shurong (1):
media: ov2659: Fix memory leaks in ov2659_probe()
Zhang Yi (1):
ext4: fix hole length calculation overflow in non-extent inodes
Zheng Yu (1):
jfs: fix metapage reference count leak in dbAllocCtl
chenchangcheng (1):
media: uvcvideo: Fix bandwidth issue for Alcor camera
fangzhong.zhou (1):
i2c: Force DLL0945 touchpad i2c freq to 100khz
jackysliu (1):
scsi: bfa: Double-free fix
tuhaowen (1):
PM: sleep: console: Fix the black screen issue
xin.guo (1):
tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
Álvaro Fernández Rojas (4):
net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
3 weeks, 2 days
- 1
- 1
Linux 5.4.297
by Greg Kroah-Hartman
I'm announcing the release of the 5.4.297 kernel.
All users of the 5.4 kernel series must upgrade.
The updated 5.4.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.4.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/firmware-guide/acpi/i2c-muxes.rst | 8
Makefile | 5
arch/arm/Makefile | 2
arch/arm/boot/dts/imx6ul-kontron-n6310-s.dts | 1
arch/arm/boot/dts/vfxxx.dtsi | 2
arch/arm/mach-rockchip/platsmp.c | 15
arch/arm/mach-tegra/reset.c | 2
arch/arm64/include/asm/acpi.h | 2
arch/m68k/Kconfig.debug | 2
arch/m68k/kernel/early_printk.c | 42 -
arch/m68k/kernel/head.S | 39 -
arch/mips/Makefile | 2
arch/mips/include/asm/vpe.h | 8
arch/mips/kernel/process.c | 16
arch/mips/mm/tlb-r4k.c | 56 +
arch/parisc/Makefile | 2
arch/powerpc/configs/ppc6xx_defconfig | 1
arch/powerpc/platforms/512x/mpc512x_lpbfifo.c | 6
arch/s390/hypfs/hypfs_dbfs.c | 19
arch/s390/include/asm/timex.h | 13
arch/s390/kernel/time.c | 2
arch/x86/kernel/cpu/mce/amd.c | 13
arch/x86/mm/extable.c | 5
drivers/acpi/acpi_processor.c | 2
drivers/acpi/apei/ghes.c | 2
drivers/acpi/processor_idle.c | 4
drivers/acpi/processor_perflib.c | 11
drivers/ata/Kconfig | 35 -
drivers/ata/libata-scsi.c | 20
drivers/base/power/domain_governor.c | 18
drivers/base/power/runtime.c | 5
drivers/block/drbd/drbd_receiver.c | 6
drivers/block/sunvdc.c | 4
drivers/char/hw_random/mtk-rng.c | 4
drivers/char/ipmi/ipmi_msghandler.c | 8
drivers/char/ipmi/ipmi_watchdog.c | 59 +-
drivers/clk/davinci/psc.c | 5
drivers/clk/sunxi-ng/ccu-sun8i-v3s.c | 3
drivers/cpufreq/armada-8k-cpufreq.c | 2
drivers/cpufreq/cpufreq.c | 11
drivers/crypto/ccp/ccp-debugfs.c | 3
drivers/crypto/img-hash.c | 2
drivers/crypto/marvell/cipher.c | 4
drivers/crypto/marvell/hash.c | 5
drivers/crypto/qat/qat_common/adf_transport_debug.c | 4
drivers/dma/mv_xor.c | 21
drivers/dma/nbpfaxi.c | 24
drivers/fpga/zynq-fpga.c | 10
drivers/gpio/gpio-tps65912.c | 7
drivers/gpu/drm/amd/amdgpu/amdgpu_csa.c | 4
drivers/gpu/drm/amd/display/dc/bios/command_table.c | 2
drivers/gpu/drm/amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 30 -
drivers/gpu/drm/amd/powerplay/hwmgr/smu_helper.c | 2
drivers/gpu/drm/drm_dp_helper.c | 2
drivers/gpu/drm/scheduler/sched_entity.c | 23
drivers/hid/hid-core.c | 19
drivers/i2c/busses/i2c-qup.c | 4
drivers/i2c/busses/i2c-stm32.c | 8
drivers/i2c/busses/i2c-stm32f7.c | 4
drivers/i3c/internals.h | 1
drivers/i3c/master.c | 2
drivers/iio/adc/max1363.c | 43 -
drivers/iio/adc/stm32-adc-core.c | 7
drivers/iio/light/hid-sensor-prox.c | 3
drivers/iio/proximity/isl29501.c | 16
drivers/infiniband/core/cache.c | 4
drivers/infiniband/hw/hfi1/affinity.c | 44 -
drivers/input/joystick/xpad.c | 2
drivers/media/dvb-frontends/dib7000p.c | 8
drivers/media/i2c/ov2659.c | 3
drivers/media/i2c/tc358743.c | 86 +-
drivers/media/platform/qcom/camss/camss.c | 4
drivers/media/platform/qcom/venus/core.c | 8
drivers/media/platform/qcom/venus/core.h | 2
drivers/media/platform/qcom/venus/hfi_venus.c | 5
drivers/media/platform/qcom/venus/vdec.c | 5
drivers/media/usb/gspca/vicam.c | 10
drivers/media/usb/hdpvr/hdpvr-i2c.c | 6
drivers/media/usb/rainshadow-cec/rainshadow-cec.c | 3
drivers/media/usb/usbtv/usbtv-video.c | 4
drivers/media/usb/uvc/uvc_driver.c | 3
drivers/media/usb/uvc/uvc_video.c | 21
drivers/media/v4l2-core/v4l2-ctrls.c | 37 +
drivers/memstick/core/memstick.c | 3
drivers/memstick/host/rtsx_usb_ms.c | 1
drivers/misc/cardreader/rtsx_usb.c | 16
drivers/mmc/host/bcm2835.c | 3
drivers/mmc/host/rtsx_usb_sdmmc.c | 4
drivers/mmc/host/sdhci-pci-core.c | 3
drivers/mmc/host/sdhci_am654.c | 9
drivers/mtd/ftl.c | 2
drivers/mtd/nand/raw/atmel/nand-controller.c | 2
drivers/mtd/nand/raw/atmel/pmecc.c | 6
drivers/mtd/nand/raw/fsmc_nand.c | 2
drivers/net/can/kvaser_pciefd.c | 1
drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 1
drivers/net/dsa/b53/b53_common.c | 33 -
drivers/net/dsa/b53/b53_regs.h | 1
drivers/net/ethernet/agere/et131x.c | 36 +
drivers/net/ethernet/atheros/ag71xx.c | 9
drivers/net/ethernet/cavium/thunder/thunder_bgx.c | 4
drivers/net/ethernet/emulex/benet/be_cmds.c | 2
drivers/net/ethernet/emulex/benet/be_main.c | 8
drivers/net/ethernet/freescale/dpaa/dpaa_ethtool.c | 4
drivers/net/ethernet/freescale/fec_main.c | 34 -
drivers/net/ethernet/freescale/gianfar_ethtool.c | 4
drivers/net/ethernet/intel/fm10k/fm10k.h | 3
drivers/net/ethernet/intel/i40e/i40e.h | 2
drivers/net/ethernet/intel/ice/ice_flex_pipe.c | 2
drivers/net/ethernet/intel/ixgbe/ixgbe.h | 3
drivers/net/ethernet/intel/ixgbe/ixgbe_xsk.c | 4
drivers/net/ethernet/xilinx/xilinx_emaclite.c | 2
drivers/net/phy/smsc.c | 1
drivers/net/ppp/pptp.c | 18
drivers/net/usb/sierra_net.c | 4
drivers/net/usb/usbnet.c | 11
drivers/net/virtio_net.c | 38 +
drivers/net/vrf.c | 2
drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c | 8
drivers/net/wireless/broadcom/brcm80211/brcmsmac/phy/phy_lcn.c | 2
drivers/net/wireless/intel/iwlegacy/4965-mac.c | 5
drivers/net/wireless/intel/iwlwifi/dvm/main.c | 11
drivers/net/wireless/intel/iwlwifi/dvm/rs.c | 2
drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 7
drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 4
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 2
drivers/net/wireless/marvell/mwl8k.c | 4
drivers/net/wireless/realtek/rtl818x/rtl8187/dev.c | 3
drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 2
drivers/net/wireless/realtek/rtlwifi/pci.c | 18
drivers/pci/controller/pcie-rockchip-host.c | 2
drivers/pci/endpoint/pci-ep-cfs.c | 1
drivers/pci/endpoint/pci-epf-core.c | 2
drivers/pci/hotplug/pnv_php.c | 90 ++-
drivers/pci/pci-acpi.c | 4
drivers/pci/pci.c | 8
drivers/pci/probe.c | 2
drivers/pinctrl/stm32/pinctrl-stm32.c | 1
drivers/pinctrl/sunxi/pinctrl-sunxi.c | 11
drivers/platform/x86/thinkpad_acpi.c | 4
drivers/power/supply/bq24190_charger.c | 60 --
drivers/power/supply/max14577_charger.c | 4
drivers/pps/pps.c | 11
drivers/pwm/pwm-imx-tpm.c | 9
drivers/pwm/pwm-mediatek.c | 78 +-
drivers/regulator/core.c | 1
drivers/rtc/rtc-ds1307.c | 17
drivers/rtc/rtc-hym8563.c | 2
drivers/rtc/rtc-pcf8563.c | 2
drivers/scsi/aacraid/comminit.c | 3
drivers/scsi/bfa/bfad_im.c | 1
drivers/scsi/ibmvscsi_tgt/libsrp.c | 6
drivers/scsi/isci/request.c | 2
drivers/scsi/libiscsi.c | 3
drivers/scsi/lpfc/lpfc_debugfs.c | 1
drivers/scsi/lpfc/lpfc_scsi.c | 4
drivers/scsi/mpt3sas/mpt3sas_scsih.c | 19
drivers/scsi/mvsas/mv_sas.c | 4
drivers/scsi/qla4xxx/ql4_os.c | 2
drivers/scsi/scsi_scan.c | 2
drivers/scsi/scsi_transport_sas.c | 60 +-
drivers/soc/aspeed/aspeed-lpc-snoop.c | 13
drivers/soc/qcom/mdt_loader.c | 41 +
drivers/soc/tegra/pmc.c | 51 -
drivers/soundwire/stream.c | 2
drivers/staging/comedi/comedi_compat32.c | 3
drivers/staging/comedi/comedi_fops.c | 58 +
drivers/staging/comedi/comedi_internal.h | 1
drivers/staging/comedi/drivers.c | 30 -
drivers/staging/comedi/drivers/aio_iiro_16.c | 3
drivers/staging/comedi/drivers/comedi_test.c | 2
drivers/staging/comedi/drivers/das16m1.c | 3
drivers/staging/comedi/drivers/das6402.c | 3
drivers/staging/comedi/drivers/pcl812.c | 3
drivers/staging/fbtft/fbtft-core.c | 1
drivers/staging/media/imx/imx-media-csc-scaler.c | 2
drivers/staging/nvec/nvec_power.c | 2
drivers/thermal/thermal_sysfs.c | 9
drivers/thunderbolt/domain.c | 2
drivers/tty/serial/8250/8250_port.c | 3
drivers/tty/serial/pch_uart.c | 2
drivers/tty/vt/defkeymap.c_shipped | 112 +++
drivers/tty/vt/keyboard.c | 2
drivers/usb/atm/cxacru.c | 106 +--
drivers/usb/chipidea/ci.h | 18
drivers/usb/chipidea/udc.c | 89 +--
drivers/usb/class/cdc-acm.c | 13
drivers/usb/core/hub.c | 67 ++
drivers/usb/core/quirks.c | 1
drivers/usb/core/urb.c | 2
drivers/usb/dwc3/dwc3-meson-g12a.c | 3
drivers/usb/dwc3/dwc3-qcom.c | 8
drivers/usb/dwc3/gadget.c | 9
drivers/usb/early/xhci-dbc.c | 4
drivers/usb/gadget/composite.c | 5
drivers/usb/gadget/configfs.c | 2
drivers/usb/gadget/udc/renesas_usb3.c | 1
drivers/usb/host/xhci-hub.c | 3
drivers/usb/host/xhci-mem.c | 24
drivers/usb/host/xhci-plat.c | 3
drivers/usb/host/xhci-ring.c | 19
drivers/usb/host/xhci.c | 24
drivers/usb/host/xhci.h | 3
drivers/usb/musb/musb_gadget.c | 2
drivers/usb/musb/omap2430.c | 10
drivers/usb/phy/phy-mxs-usb.c | 4
drivers/usb/serial/ftdi_sio.c | 2
drivers/usb/serial/ftdi_sio_ids.h | 3
drivers/usb/serial/option.c | 7
drivers/usb/storage/realtek_cr.c | 2
drivers/usb/storage/unusual_devs.h | 29
drivers/usb/typec/tcpm/fusb302.c | 8
drivers/vhost/vhost.c | 3
drivers/video/console/vgacon.c | 2
drivers/video/fbdev/imxfb.c | 9
drivers/watchdog/dw_wdt.c | 2
drivers/watchdog/ziirave_wdt.c | 3
fs/btrfs/tree-log.c | 53 +
fs/buffer.c | 2
fs/cifs/cifsglob.h | 1
fs/cifs/cifssmb.c | 10
fs/cifs/smbdirect.c | 14
fs/cifs/transport.c | 34 -
fs/ext4/fsmap.c | 23
fs/ext4/inline.c | 19
fs/ext4/inode.c | 2
fs/f2fs/f2fs.h | 2
fs/f2fs/inode.c | 28
fs/f2fs/node.c | 10
fs/file.c | 81 +-
fs/hfs/bnode.c | 93 +++
fs/hfsplus/bnode.c | 92 +++
fs/hfsplus/extents.c | 3
fs/hfsplus/unicode.c | 7
fs/hfsplus/xattr.c | 6
fs/hugetlbfs/inode.c | 2
fs/isofs/inode.c | 9
fs/jbd2/checkpoint.c | 1
fs/jfs/file.c | 3
fs/jfs/inode.c | 2
fs/jfs/jfs_dmap.c | 10
fs/namespace.c | 89 ++-
fs/nfs/blocklayout/blocklayout.c | 4
fs/nfs/blocklayout/dev.c | 5
fs/nfs/blocklayout/extent_tree.c | 20
fs/nfs/client.c | 44 +
fs/nfs/direct.c | 13
fs/nfs/export.c | 11
fs/nfs/inode.c | 6
fs/nfs/internal.h | 1
fs/nfs/nfs4client.c | 13
fs/nfs/nfs4proc.c | 35 -
fs/nfs/pnfs.c | 11
fs/nfs/write.c | 11
fs/nfsd/nfs4state.c | 34 -
fs/nilfs2/inode.c | 9
fs/orangefs/orangefs-debugfs.c | 8
fs/squashfs/super.c | 14
fs/udf/super.c | 13
include/linux/fs.h | 4
include/linux/if_vlan.h | 6
include/linux/mm.h | 26
include/linux/moduleparam.h | 5
include/linux/nfs_fs.h | 2
include/linux/pci.h | 1
include/linux/pps_kernel.h | 1
include/linux/skbuff.h | 31 +
include/linux/usb/chipidea.h | 1
include/linux/usb/usbnet.h | 1
include/net/act_api.h | 25
include/net/cfg80211.h | 2
include/net/sch_generic.h | 13
include/net/udp.h | 24
include/uapi/linux/in6.h | 4
include/uapi/linux/io_uring.h | 2
include/uapi/linux/mount.h | 3
kernel/events/core.c | 20
kernel/fork.c | 2
kernel/power/console.c | 7
kernel/rcu/tree_plugin.h | 3
kernel/trace/ftrace.c | 19
kernel/trace/trace_events.c | 5
mm/filemap.c | 2
mm/hmm.c | 2
mm/kmemleak.c | 120 ++--
mm/madvise.c | 2
mm/mmap.c | 26
mm/shmem.c | 2
mm/zsmalloc.c | 6
net/8021q/vlan.c | 42 +
net/8021q/vlan.h | 1
net/appletalk/aarp.c | 42 +
net/appletalk/ddp.c | 7
net/bluetooth/hci_sysfs.c | 15
net/bluetooth/l2cap_core.c | 26
net/bluetooth/l2cap_sock.c | 3
net/bluetooth/smp.c | 21
net/bluetooth/smp.h | 1
net/caif/cfctrl.c | 294 ++++------
net/core/filter.c | 3
net/core/netpoll.c | 7
net/ipv4/route.c | 1
net/ipv4/tcp_input.c | 3
net/ipv4/udp_offload.c | 2
net/ipv6/ip6_offload.c | 4
net/ipv6/seg6_hmac.c | 3
net/mac80211/tx.c | 1
net/ncsi/internal.h | 2
net/ncsi/ncsi-rsp.c | 1
net/netfilter/nf_conntrack_netlink.c | 24
net/netfilter/nf_tables_api.c | 4
net/netfilter/xt_nfacct.c | 4
net/netlink/af_netlink.c | 2
net/packet/af_packet.c | 39 -
net/phonet/pep.c | 2
net/sched/act_api.c | 14
net/sched/act_csum.c | 4
net/sched/act_ct.c | 10
net/sched/act_gact.c | 14
net/sched/act_mirred.c | 55 +
net/sched/act_police.c | 5
net/sched/act_tunnel_key.c | 2
net/sched/act_vlan.c | 9
net/sched/sch_cake.c | 14
net/sched/sch_codel.c | 5
net/sched/sch_drr.c | 7
net/sched/sch_fq_codel.c | 6
net/sched/sch_hfsc.c | 8
net/sched/sch_htb.c | 6
net/sched/sch_netem.c | 40 +
net/sched/sch_qfq.c | 40 -
net/sched/sch_sfq.c | 114 ++-
net/sctp/input.c | 2
net/tls/tls_sw.c | 13
net/vmw_vsock/af_vsock.c | 3
net/wireless/mlme.c | 3
samples/mei/mei-amt-version.c | 2
scripts/Kbuild.include | 8
scripts/kconfig/gconf.c | 8
scripts/kconfig/lxdialog/inputbox.c | 6
scripts/kconfig/lxdialog/menubox.c | 2
scripts/kconfig/nconf.c | 2
scripts/kconfig/nconf.gui.c | 1
security/inode.c | 2
sound/pci/hda/patch_ca0132.c | 2
sound/pci/hda/patch_hdmi.c | 19
sound/pci/intel8x0.c | 2
sound/soc/codecs/hdac_hdmi.c | 10
sound/soc/codecs/rt5640.c | 5
sound/soc/fsl/fsl_sai.c | 14
sound/soc/intel/boards/Kconfig | 2
sound/soc/soc-dapm.c | 4
sound/soc/soc-ops.c | 26
sound/usb/mixer_quirks.c | 14
sound/usb/mixer_scarlett_gen2.c | 9
sound/usb/stream.c | 25
sound/usb/validate.c | 14
tools/bpf/bpftool/net.c | 15
tools/perf/tests/bp_account.c | 1
tools/power/cpupower/utils/idle_monitor/mperf_monitor.c | 4
tools/testing/ktest/ktest.pl | 5
tools/testing/selftests/ftrace/test.d/ftrace/func-filter-glob.tc | 2
tools/testing/selftests/futex/include/futextest.h | 11
tools/testing/selftests/net/forwarding/tc_actions.sh | 72 ++
tools/testing/selftests/net/rtnetlink.sh | 6
365 files changed, 3516 insertions(+), 1487 deletions(-)
Aaron Kling (1):
ARM: tegra: Use I/O memcpy to write to IRAM
Abdun Nihaal (1):
staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
Al Viro (3):
securityfs: don't pin dentries twice, once is enough...
use uniform permission checks for all mount propagation changes
alloc_fdtable(): change calling conventions.
Alessandro Carminati (1):
regulator: core: fix NULL dereference on unbind due to stale coupling data
Alex Guo (2):
media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
Alexander Kochetkov (1):
ARM: rockchip: fix kernel hang during smp initialization
Alok Tiwari (5):
net: emaclite: Fix missing pointer increment in aligned_read()
staging: nvec: Fix incorrect null termination of battery manufacturer
ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
be2net: Use correct byte order and format string for TCP seq and ack_seq
net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
Amir Mohammad Jahangirzad (1):
fs/orangefs: use snprintf() instead of sprintf()
Ammar Faizi (1):
net: usbnet: Fix the wrong netif_carrier_on() call
Andreas Dilger (1):
ext4: check fast symlink for ea_inode correctly
Andrew Jeffery (2):
soc: aspeed: lpc-snoop: Cleanup resources in stack-order
soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
Andrew Lunn (1):
net: appletalk: fix kerneldoc warnings
Andy Shevchenko (2):
Documentation: ACPI: Fix parent device references
mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
Annette Kobou (1):
ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
Arnaud Lecomte (1):
jfs: upper bound check of tree index in dbAllocAG
Arnd Bergmann (4):
ethernet: intel: fix building with large NR_CPUS
ASoC: Intel: fix SND_SOC_SOF dependencies
ASoC: ops: dynamically allocate struct snd_ctl_elem_value
caif: reduce stack size, again
Arun Raghavan (1):
ASoC: fsl_sai: Force a software reset when starting in consumer mode
Avraham Stern (1):
wifi: iwlwifi: mvm: fix scan request validation
Balamanikandan Gunasundar (1):
mtd: rawnand: atmel: set pmecc data setup time
Baokun Li (1):
jbd2: prevent softlockup in jbd2_log_do_checkpoint()
Bard Liao (1):
soundwire: stream: restore params when prepare ports fail
Bartosz Golaszewski (1):
gpio: tps65912: check the return value of regmap_update_bits()
Benjamin Tissoires (3):
HID: core: ensure the allocated report buffer can contain the reserved report ID
HID: core: ensure __hid_request reserves the report ID as the first byte
HID: core: do not bypass hid_hw_raw_request
Bjorn Andersson (1):
soc: qcom: mdt_loader: Ensure we don't read past the ELF header
Brahmajit Das (1):
samples: mei: Fix building on musl libc
Breno Leitao (3):
ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
ipmi: Use dev_warn_ratelimited() for incorrect message warnings
mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
Brian Masney (3):
rtc: ds1307: fix incorrect maximum clock rate handling
rtc: hym8563: fix incorrect maximum clock rate handling
rtc: pcf8563: fix incorrect maximum clock rate handling
Buday Csaba (1):
net: phy: smsc: add proper reset flags for LAN8710A
Budimir Markovic (1):
vsock: Do not allow binding to VMADDR_PORT_ANY
Bui Quang Minh (1):
virtio-net: ensure the received length does not exceed allocated size
Chao Yu (5):
f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
f2fs: fix to avoid panic in f2fs_evict_inode
f2fs: fix to avoid out-of-boundary access in devs.path
f2fs: fix to do sanity check on ino and xnid
f2fs: fix to avoid out-of-boundary access in dnode page
Charles Han (1):
power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
Cheick Traore (1):
pinctrl: stm32: Manage irq affinity settings
Chen Ni (1):
iio: adc: stm32-adc: Fix race in installing chained IRQ handler
Chenyuan Yang (1):
fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
Clément Le Goffic (1):
i2c: stm32: fix the device used for the DMA map
Cong Wang (4):
sch_drr: make drr_qlen_notify() idempotent
sch_hfsc: make hfsc_qlen_notify() idempotent
sch_qfq: make qfq_qlen_notify() idempotent
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
Corey Minyard (1):
ipmi: Fix strcpy source and destination the same
Cristian Ciocaltea (1):
ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
Cynthia Huang (1):
selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
Dai Ngo (1):
NFSD: detect mismatch of file handle and delegation stateid in OPEN op
Damien Le Moal (5):
scsi: mpt3sas: Correctly handle ATA device errors
ata: libata-scsi: Fix ata_to_sense_error() status handling
PCI: endpoint: Fix configfs group list head handling
PCI: endpoint: Fix configfs group removal on driver teardown
ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
Dan Carpenter (7):
dmaengine: nbpfaxi: Fix memory corruption in probe()
watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
fs/orangefs: Allow 2 more characters in do_c_string()
cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
media: gspca: Add bounds checking to firmware parser
scsi: qla4xxx: Prevent a potential error pointer dereference
ALSA: usb-audio: Fix size validation in convert_chmap_v3()
Daniel Dadap (1):
ALSA: hda: Add missing NVIDIA HDA codec IDs
Daniil Dulov (1):
wifi: rtl818x: Kill URBs before clearing tx status queue
Dave Hansen (1):
x86/fpu: Delay instruction pointer fixup until after warning
Dave Stevenson (3):
media: tc358743: Check I2C succeeded during probe
media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
media: tc358743: Increase FIFO trigger level to 374
David Lechner (1):
iio: proximity: isl29501: fix buffered read on big-endian systems
Davide Caratti (2):
net/sched: act_mirred: better wording on protection against excessive stack growth
act_mirred: use the backlog for nested calls to mirred ingress
Denis OSTERLAND-HEIM (1):
pps: fix poll support
Dinghao Liu (1):
power: supply: bq24190_charger: Fix runtime PM imbalance on error
Dmitry Antipov (1):
Bluetooth: fix use-after-free in device_for_each_child()
Dong Chenchen (1):
net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
Drew Hamilton (1):
usb: musb: fix gadget state on disconnect
Edson Juliano Drosdeck (1):
mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
Edward Adam Davis (1):
jfs: Regular file corruption check
Eric Biggers (1):
thunderbolt: Fix copy+paste error in match_service_id()
Eric Dumazet (6):
net_sched: sch_sfq: annotate data-races around q->perturb_period
net_sched: sch_sfq: handle bigger packets
net_sched: sch_sfq: reject invalid perturb period
pptp: ensure minimal skb length in pptp_xmit()
ipv6: reject malicious packets in ipv6_gso_segment()
pptp: fix pptp_xmit() error path
Fabio Estevam (2):
iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
iio: adc: max1363: Reorder mode_list[] entries
Fabio Porcedda (1):
USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
Fedor Pchelkin (3):
drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
netfilter: nf_tables: adjust lockdep assertions handling
netlink: avoid infinite retry looping in netlink_unicast()
Filipe Manana (1):
btrfs: fix log tree replay failure due to file with 0 links and extents
Finn Thain (2):
m68k: Don't unregister boot console needlessly
m68k: Fix lost column on framebuffer debug console
Florian Westphal (2):
netfilter: xt_nfacct: don't assume acct name is null-terminated
netfilter: ctnetlink: fix refcount leak on table dump
Frederic Barrat (2):
pci/hotplug/pnv-php: Improve error msg on power state change failure
pci/hotplug/pnv-php: Wrap warnings in macro
Gal Pressman (1):
net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
Gautham R. Shenoy (1):
pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
Geoffrey D. Bennett (1):
ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
Giovanni Cabiddu (1):
crypto: qat - fix seq_file position update in adf_ring_next()
Gokul Sivakumar (1):
wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE
Greg Kroah-Hartman (2):
Revert "vmci: Prevent the dispatching of uninitialized payloads"
Linux 5.4.297
Gui-Dong Han (1):
media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
Hans Verkuil (1):
media: v4l2-ctrls: always copy the controls on completion
Hans Zhang (1):
PCI: rockchip-host: Fix "Unexpected Completion" log message
Haoxiang Li (2):
media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
Hari Kalavakunta (1):
net: ncsi: Fix buffer overflow in fetching version id
Harry Yoo (1):
mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
He Zhe (1):
mm/kmemleak: turn kmemleak_lock and object->lock to raw_spinlock_t
Helge Deller (1):
Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
Henry Martin (1):
clk: davinci: Add NULL check in davinci_lpsc_clk_register()
Herbert Xu (1):
crypto: marvell/cesa - Fix engine load inaccuracy
Hongyu Xie (1):
xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
Hsin-Te Yuan (1):
thermal: sysfs: Return ENODATA instead of EAGAIN for reads
Ian Abbott (10):
comedi: pcl812: Fix bit shift out of bounds
comedi: aio_iiro_16: Fix bit shift out of bounds
comedi: das16m1: Fix bit shift out of bounds
comedi: das6402: Fix bit shift out of bounds
comedi: Fix some signed shift left operations
comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
comedi: comedi_test: Fix possible deletion of uninitialized timers
comedi: fix race between polling and detaching
comedi: Fix initialization of data for instructions that write to subdevice
comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
Ilan Peer (1):
wifi: cfg80211: Fix interface type validation
Imre Deak (1):
drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
Ivan Stepchenko (1):
mtd: fix possible integer overflow in erase_xfer()
Jack Xiao (1):
drm/amdgpu: fix incorrect vm flags to map bo
Jakub Kicinski (2):
netpoll: prevent hanging NAPI when netcons gets enabled
uapi: in6: restore visibility of most IPv6 socket options
Jan Kara (2):
isofs: Verify inode mode when loading from disk
udf: Verify partition map count
Jason Wang (1):
vhost: fail early when __vhost_add_used() fails
Jason Xing (1):
ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
Jay Chen (1):
usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
Jeff Layton (1):
nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
Jiasheng Jiang (2):
iwlwifi: Add missing check for alloc_ordered_workqueue
scsi: lpfc: Remove redundant assignment to avoid memory leak
Jiaxun Yang (1):
MIPS: mm: tlb-r4k: Uniquify TLB entries on init
Jiayi Li (2):
ACPI: processor: perflib: Fix initial _PPC limit application
memstick: Fix deadlock by moving removing flag earlier
Jiayuan Chen (1):
bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
Jimmy Assarsson (2):
can: kvaser_pciefd: Store device channel index
can: kvaser_usb: Assign netdev.dev_port based on device channel index
Jiri Pirko (1):
selftests: forwarding: tc_actions.sh: add matchall mirror test
Johan Hovold (6):
net: gianfar: fix device leak when querying time stamp info
net: dpaa: fix device leak when querying time stamp info
usb: gadget: udc: renesas_usb3: fix device leak at unbind
usb: dwc3: meson-g12a: fix device leaks at unbind
USB: cdc-acm: do not log successful probe on later errors
usb: musb: omap2430: fix device leak at unbind
Johan Korsnes (1):
arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
Johannes Berg (1):
wifi: cfg80211: reject HTC bit for management frames
John Ernberg (1):
net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
John Garry (1):
scsi: aacraid: Stop using PCI_IRQ_AFFINITY
Jon Hunter (1):
soc/tegra: pmc: Ensure power-domains are in a known state
Jonas Rebmann (1):
net: fec: allow disable coalescing
Jorge Ramirez-Ortiz (2):
media: venus: protect against spurious interrupts during probe
media: venus: hfi: explicitly release IRQ during teardown
Josef Bacik (1):
nfs: fix UAF in direct writes
Judith Mendez (1):
mmc: sdhci_am654: Workaround for Errata i2312
Jun Li (1):
usb: chipidea: udc: protect usb interrupt enable
Justin Tee (1):
scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
Kees Cook (2):
arm64: Handle KCOV __init vs inline mismatches
platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
Kito Xu (veritas501) (1):
net: appletalk: Fix use-after-free in AARP proxy probe
Krishna Kurapati (1):
usb: dwc3: qcom: Don't leave BCR asserted
Krzysztof Kozlowski (1):
ARM: dts: vfxxx: Correctly use two tuples for timer address
Kuen-Han Tsai (1):
usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
Kuninori Morimoto (1):
ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
Kuniyuki Iwashima (1):
Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
Laurentiu Mihalcea (1):
pwm: imx-tpm: Reset counter if CMOD is 0
Leo Yan (1):
perf tests bp_account: Fix leaked file descriptor
Li Zhong (1):
ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value
Lifeng Zheng (2):
cpufreq: Init policy->rwsem before it may be possibly used
cpufreq: Exit governor when failed to start old governor
Lin.Cao (1):
drm/sched: Remove optimization that causes hang when killing dependent jobs
Lizhi Xu (2):
vmci: Prevent the dispatching of uninitialized payloads
jfs: truncate good inode pages when hard link is 0
Lorenzo Stoakes (3):
mm: drop the assumption that VM_SHARED always implies writable
mm: update memfd seal write check to include F_SEAL_WRITE
mm: perform the mapping_map_writable() check after call_mmap()
Lucas De Marchi (1):
usb: early: xhci-dbc: Fix early_ioremap leak
Lucy Thrun (1):
ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
Ludwig Disterhof (1):
media: usbtv: Lock resolution while streaming
Luiz Augusto von Dentz (3):
Bluetooth: SMP: If an unallowed command is received consider it a failure
Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
Lukas Wunner (1):
PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
Ma Ke (1):
sunvdc: Balance device refcount in vdc_port_mpgroup_check
Mael GUERIN (1):
USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
Maor Gottlieb (1):
RDMA/core: Rate limit GID cache warning messages
Marek Szyprowski (1):
zynq_fpga: use sgtable-based scatterlist wrappers
Mario Limonciello (2):
usb: xhci: Avoid showing warnings for dying controller
usb: xhci: Avoid showing errors during surprise removal
Mark Brown (1):
ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
Martin Kaistra (1):
wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
Masahiro Yamada (3):
kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
kconfig: gconf: fix potential memory leak in renderer_edited()
kbuild: add $(CLANG_FLAGS) to KBUILD_CPPFLAGS
Masami Hiramatsu (Google) (1):
selftests: tracing: Use mutex_unlock for testing glob filter
Mathias Nyman (4):
usb: hub: fix detection of high tier USB3 devices behind suspended hubs
usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
usb: hub: avoid warm port reset during USB3 disconnect
usb: hub: Don't try to recover devices lost during warm reset.
Maulik Shah (1):
pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
Meagan Lloyd (2):
rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
Mengbiao Xiong (1):
crypto: ccp - Fix crash when rebind ccp device for ccp.ko
Miao Li (1):
usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
Miaohe Lin (1):
mm/zsmalloc.c: convert to use kmem_cache_zalloc in cache_alloc_zspage()
Michal Schmidt (1):
benet: fix BUG when creating VFs
Mina Almasry (1):
netmem: fix skb_frag_address_safe with unreadable skbs
Minghao Chi (1):
power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync
Minhong He (1):
ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
Myrrh Periwinkle (2):
vt: keyboard: Don't process Unicode characters in K_OFF mode
vt: defkeymap: Map keycodes above 127 to K_HOLE
Nathan Chancellor (8):
phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
mips: Include KBUILD_CPPFLAGS in CHECKFLAGS invocation
kbuild: Add CLANG_FLAGS to as-instr
kbuild: Add KBUILD_CPPFLAGS to as-option invocation
Nick Desaulniers (1):
kbuild: Update assembler calls to use proper flags and language target
Nilton Perim Neto (1):
Input: xpad - set correct controller type for Acer NGR200
Octavian Purdila (3):
net_sched: sch_sfq: don't allow 1 packet limit
net_sched: sch_sfq: use a temporary work area for validating configuration
net_sched: sch_sfq: move the limit validation
Ojaswin Mujoo (2):
ext4: fix fsmap end of range reporting with bigalloc
ext4: fix reserved gdt blocks handling in fsmap
Oliver Neukum (3):
usb: net: sierra: check for no status endpoint
usb: core: usb_submit_urb: downgrade type check
cdc-acm: fix race between initial clearing halt and open
Oscar Maes (1):
net: ipv4: fix incorrect MTU in broadcast routes
Ovidiu Panait (1):
hwrng: mtk - handle devm_pm_runtime_enable errors
Pagadala Yesu Anjaneyulu (1):
wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
Pali Rohár (1):
cifs: Fix calling CIFSFindFirst() for root path without msearch
Paul Chaignon (1):
bpf: Check flow_dissector ctx accesses are aligned
Paul E. McKenney (1):
rcu: Protect ->defer_qs_iw_pending from data race
Paul Kocialkowski (1):
clk: sunxi-ng: v3s: Fix de clock definition
Pavel Begunkov (1):
io_uring: don't use int for ABI
Pavel Tikhomirov (1):
move_mount: allow to add a mount into an existing group
Peter Chen (3):
usb: chipidea: udc: add new API ci_hdrc_gadget_connect
usb: chipidea: introduce CI_HDRC_CONTROLLER_VBUS_EVENT glue layer use
usb: chipidea: udc: fix sleeping function called from invalid context
Peter Oberparleiter (2):
s390/hypfs: Avoid unnecessary ioctl registration in debugfs
s390/hypfs: Enable limited access during lockdown
Petr Pavlu (1):
module: Restore the moduleparam prefix length check
Phillip Lougher (1):
squashfs: fix memory leak in squashfs_fill_super
Qu Wenruo (1):
btrfs: populate otime when logging an inode item
Quang Le (1):
net/packet: fix a race in packet_set_ring() and packet_notifier()
Rafael J. Wysocki (2):
ACPI: processor: perflib: Move problematic pr->performance check
PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
Rand Deeb (1):
wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
Randy Dunlap (1):
parisc: Makefile: fix a typo in palo.conf
Ranjan Kumar (1):
scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
Remi Pommarel (1):
Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
Ricardo Ribalda (2):
media: uvcvideo: Do not mark valid metadata as invalid
media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
Ricky Wu (1):
misc: rtsx: usb: Ensure mmc child device is active when card is present
Ryan Mann (NDI) (1):
USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
Ryusuke Konishi (1):
nilfs2: reject invalid file types when reading inodes
Sabrina Dubroca (1):
udp: also consider secpath when evaluating ipsec use for checksumming
Sakari Ailus (1):
media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
Sarah Newman (1):
drbd: add missing kref_get in handle_write_conflicts
Sasha Levin (1):
fs: Prevent file descriptor table allocations exceeding INT_MAX
Sebastian Ott (1):
ACPI: processor: fix acpi_object initialization
Sebastian Reichel (2):
watchdog: dw_wdt: Fix default timeout
usb: typec: fusb302: cache PD RX state
Sergey Bashirov (4):
pNFS: Fix stripe mapping in block/scsi layout
pNFS: Fix disk addr range check in block/scsi layout
pNFS: Handle RPC size limit for layoutcommits
pNFS: Fix uninited ptr deref in block/scsi layout
Shankari Anand (1):
kconfig: nconf: Ensure null termination where strncpy is used
Shiji Yang (1):
MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
Showrya M N (1):
scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
Slark Xiao (2):
USB: serial: option: add Foxconn T99W640
USB: serial: option: add Foxconn T99W709
Stanislav Fomichev (1):
vrf: Drop existing dst reference in vrf_ip6_input_dst
Stanislaw Gruszka (1):
wifi: iwlegacy: Check rate_idx range after addition
Stefan Metzmacher (1):
smb: client: let recv_done() cleanup before notifying the callers.
Steven Rostedt (3):
ktest.pl: Prevent recursion of default variable options
ftrace: Also allocate and copy hash for reading of filter files
tracing: Add down_write(trace_event_sem) when adding trace event
Su Hui (1):
usb: xhci: print xhci->xhc_state when queue_command failed
Suchit Karunakaran (1):
kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
Sven Schnelle (2):
s390/time: Use monotonic clock in get_cycles()
s390/stp: Remove udelay from stp_sync_clock()
Takashi Iwai (3):
ALSA: usb-audio: Validate UAC3 power domain descriptors, too
ALSA: usb-audio: Validate UAC3 cluster segment descriptors
ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
Tao Xue (1):
usb: gadget : fix use-after-free in composite_dev_cleanup()
Tetsuo Handa (1):
hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
Theodore Ts'o (1):
ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
Thomas Fourier (15):
pch_uart: Fix dma_sync_sg_for_device() nents value
mmc: bcm2835: Fix dma_unmap_sg() nents value
mwl8k: Add missing check after DMA map
scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
scsi: mvsas: Fix dma_unmap_sg() nents value
scsi: isci: Fix dma_unmap_sg() nents value
crypto: img-hash - Fix dma_unmap_sg() nents value
dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
dmaengine: nbpfaxi: Add missing check after DMA map
mtd: rawnand: atmel: Fix dma_mapping_error() address
et131x: Add missing check after DMA map
net: ag71xx: Add missing check after DMA map
(powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
mtd: rawnand: fsmc: Add missing check after DMA map
Thomas Gleixner (3):
perf/core: Don't leak AUX buffer refcount on allocation failure
perf/core: Exit early on perf_mmap() fail
perf/core: Prevent VMA split of buffer mappings
Thomas Weißschuh (1):
MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
Thorsten Blum (1):
usb: storage: realtek_cr: Use correct byte order for bcs->Residue
Timothy Pearson (1):
PCI: pnv_php: Work around switches with broken presence detection
Timur Kristóf (2):
drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
Trond Myklebust (5):
NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
NFSv4: Fix nfs4_bitmap_copy_adjust()
NFS: Fix up handling of outstanding layoutcommit in nfs_update_inode()
NFS: Fix the setting of capabilities when automounting a new filesystem
NFS: Fix up commit deadlocks
Ulf Hansson (1):
mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
Uwe Kleine-König (3):
pwm: mediatek: Implement .apply() callback
pwm: mediatek: Handle hardware enable and clock enable separately
pwm: mediatek: Fix duty and period setting
Vedang Nagar (1):
media: venus: Add a check for packet size after reading from shared memory
Viacheslav Dubeyko (4):
hfs: fix slab-out-of-bounds in hfs_bnode_read()
hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
hfs: fix not erasing deleted b-tree node issue
Vlad Buslov (4):
net: sched: extract common action counters update code into function
net: sched: extract bstats update code into function
net: sched: extract qstats update code into functions
net: sched: don't expose action qstats to skb_tc_reinsert()
Vladimir Zapolskiy (1):
media: qcom: camss: cleanup media device allocated resource on error path
Waiman Long (1):
mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
Wang Liang (1):
net: drop UFO packets in udp_rcv_segment()
Weitao Wang (1):
usb: xhci: Fix slot_id resource race conflict
William Liu (4):
net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
net/sched: Restrict conditions for adding duplicating netems to qdisc tree
net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
Wolfram Sang (3):
media: usb: hdpvr: disable zero-length read messages
i3c: add missing include to internal header
i3c: don't fail if GETHDRCAP is unsupported
Xiang Mei (2):
net/sched: sch_qfq: Fix race condition on qfq_aggregate
net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
Xin Long (1):
sctp: linearize cloned gso packets in sctp_rcv
Xinxin Wan (1):
ASoC: codecs: rt5640: Retry DEVICE_ID verification
Xinyu Liu (1):
usb: gadget: configfs: Fix OOB read on empty string write
Xiu Jianfeng (1):
wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
Xiumei Mu (1):
selftests: rtnetlink.sh: remove esp4_offload after test
Xu Yang (2):
usb: chipidea: add USB PHY event
usb: phy: mxs: disconnect line when USB charger is attached
Xu Yilun (1):
fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
Yang Xiwen (1):
i2c: qup: jump out of the loop in case of timeout
Yangtao Li (1):
hfsplus: remove mutex_lock check in hfsplus_free_extents
Yann E. MORIN (1):
kconfig: lxdialog: fix 'space' to (de)select options
Yazen Ghannam (1):
x86/mce/amd: Add default names for MCA banks and blocks
Ye Bin (1):
fs/buffer: fix use-after-free when call bh_read() helper
Youngjun Lee (1):
media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
Yuan Chen (2):
bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
pinctrl: sunxi: Fix memory leak on krealloc failure
Yun Lu (2):
af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
af_packet: fix soft lockup issue caused by tpacket_snd()
Yunhui Cui (1):
serial: 8250: fix panic due to PSLVERR
Yury Norov [NVIDIA] (1):
RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
Zenm Chen (1):
USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
Zhang Lixu (1):
iio: hid-sensor-prox: Fix incorrect OFFSET calculation
Zhang Shurong (1):
media: ov2659: Fix memory leaks in ov2659_probe()
Zhang Xiaoxu (1):
cifs: Fix UAF in cifs_demultiplex_thread()
Zheng Wang (1):
power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
Zheng Yu (1):
jfs: fix metapage reference count leak in dbAllocCtl
chenchangcheng (1):
media: uvcvideo: Fix bandwidth issue for Alcor camera
jackysliu (1):
scsi: bfa: Double-free fix
tuhaowen (1):
PM: sleep: console: Fix the black screen issue
wenxu (1):
net/sched: act_mirred: refactor the handle of xmit
xin.guo (1):
tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
Álvaro Fernández Rojas (3):
net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
3 weeks, 2 days
- 1
- 1
[PATCH v2] mm/mremap: fix regression in vrm->new_addr check
by Carlos Llamas
Commit 3215eaceca87 ("mm/mremap: refactor initial parameter sanity
checks") moved the sanity check for vrm->new_addr from mremap_to() to
check_mremap_params().
However, this caused a regression as vrm->new_addr is now checked even
when MREMAP_FIXED and MREMAP_DONTUNMAP flags are not specified. In this
case, vrm->new_addr can be garbage and create unexpected failures.
Fix this by moving the new_addr check after the vrm_implies_new_addr()
guard. This ensures that the new_addr is only checked when the user has
specified one explicitly.
Cc: stable(a)vger.kernel.org
Fixes: 3215eaceca87 ("mm/mremap: refactor initial parameter sanity checks")
Reviewed-by: Liam R. Howlett <Liam.Howlett(a)oracle.com>
Signed-off-by: Carlos Llamas <cmllamas(a)google.com>
---
v2:
- split out vrm->new_len into individual checks
- cc stable, collect tags
v1:
https://lore.kernel.org/all/20250828032653.521314-1-cmllamas@google.com/
mm/mremap.c | 9 ++++++---
1 file changed, 6 insertions(+), 3 deletions(-)
diff --git a/mm/mremap.c b/mm/mremap.c
index e618a706aff5..35de0a7b910e 100644
--- a/mm/mremap.c
+++ b/mm/mremap.c
@@ -1774,15 +1774,18 @@ static unsigned long check_mremap_params(struct vma_remap_struct *vrm)
if (!vrm->new_len)
return -EINVAL;
- /* Is the new length or address silly? */
- if (vrm->new_len > TASK_SIZE ||
- vrm->new_addr > TASK_SIZE - vrm->new_len)
+ /* Is the new length silly? */
+ if (vrm->new_len > TASK_SIZE)
return -EINVAL;
/* Remainder of checks are for cases with specific new_addr. */
if (!vrm_implies_new_addr(vrm))
return 0;
+ /* Is the new address silly? */
+ if (vrm->new_addr > TASK_SIZE - vrm->new_len)
+ return -EINVAL;
+
/* The new address must be page-aligned. */
if (offset_in_page(vrm->new_addr))
return -EINVAL;
--
2.51.0.268.g9569e192d0-goog
3 weeks, 2 days
- 3
- 2
[PATCH 5.10 000/523] 5.10.241-rc1 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 5.10.241 release.
There are 523 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 28 Aug 2025 11:08:19 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.241-r…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 5.10.241-rc1
Florian Westphal <fw(a)strlen.de>
netfilter: nf_reject: don't leak dst refcount for loopback packets
Pablo Neira Ayuso <pablo(a)netfilter.org>
netfilter: nft_reject_inet: allow to use reject from inet ingress
Jose M. Guisado Gomez <guigom(a)riseup.net>
netfilter: nft_reject: unify reject init and dump into nft_reject
Peter Oberparleiter <oberpar(a)linux.ibm.com>
s390/hypfs: Enable limited access during lockdown
Peter Oberparleiter <oberpar(a)linux.ibm.com>
s390/hypfs: Avoid unnecessary ioctl registration in debugfs
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
William Liu <will(a)willsroot.io>
net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
William Liu <will(a)willsroot.io>
net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
Jason Xing <kernelxing(a)tencent.com>
ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
Minhong He <heminhong(a)kylinos.cn>
ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
Dan Carpenter <dan.carpenter(a)linaro.org>
ALSA: usb-audio: Fix size validation in convert_chmap_v3()
Ido Schimmel <idosch(a)nvidia.com>
mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
Kees Cook <kees(a)kernel.org>
iommu/amd: Avoid stack buffer overflow from kernel cmdline
Dan Carpenter <dan.carpenter(a)linaro.org>
scsi: qla4xxx: Prevent a potential error pointer dereference
Anantha Prabhu <anantha.prabhu(a)broadcom.com>
RDMA/bnxt_re: Fix to initialize the PBL array
Waiman Long <longman(a)redhat.com>
cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
Feng Tang <feng.tang(a)intel.com>
mm/page_alloc: detect allocation forbidden by cpuset and bail out early
Jonathan Cameron <Jonathan.Cameron(a)huawei.com>
iio: light: as73211: Ensure buffer holes are zeroed
Pu Lehui <pulehui(a)huawei.com>
tracing: Limit access to parser->buffer when trace_get_user failed
Steven Rostedt <rostedt(a)goodmis.org>
tracing: Remove unneeded goto out logic
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com>
iio: imu: inv_icm42600: change invalid data error to -EBUSY
Weitao Wang <WeitaoWang-oc(a)zhaoxin.com>
usb: xhci: Fix slot_id resource race conflict
Jan Beulich <jbeulich(a)suse.com>
compiler: remove __ADDRESSABLE_ASM{_STR,}() again
Ammar Faizi <ammarfaizi2(a)gnuweeb.org>
net: usbnet: Fix the wrong netif_carrier_on() call
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
selftests: mptcp: pm: check flush doesn't reset limits
Niklas Söderlund <niklas.soderlund+renesas(a)ragnatech.se>
gpio: rcar: Use raw_spinlock to protect register access
Meng Li <Meng.Li(a)windriver.com>
usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
Wesley Cheng <quic_wcheng(a)quicinc.com>
usb: dwc3: Remove DWC3 locking during gadget suspend/resume
Ming Lei <ming.lei(a)redhat.com>
dm rq: don't queue request to blk-mq during DM suspend
Damien Le Moal <damien.lemoal(a)wdc.com>
dm: rearrange core declarations for extended use from dm-zone.c
Christophe JAILLET <christophe.jaillet(a)wanadoo.fr>
uio_hv_generic: Fix another memory leak in error handling paths
Ricardo Ribalda <ribalda(a)chromium.org>
media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
Chao Yu <chao(a)kernel.org>
f2fs: fix to avoid out-of-boundary access in dnode page
Vladimir Zapolskiy <vladimir.zapolskiy(a)linaro.org>
media: qcom: camss: cleanup media device allocated resource on error path
Imre Deak <imre.deak(a)intel.com>
drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Don't overclock DCE 6 by 15%
Jorge Ramirez-Ortiz <jorge.ramirez(a)oss.qualcomm.com>
media: venus: protect against spurious interrupts during probe
Dikshita Agarwal <quic_dikshita(a)quicinc.com>
media: venus: Add support for SSR trigger using fault injection
Jorge Ramirez-Ortiz <jorge.ramirez(a)oss.qualcomm.com>
media: venus: hfi: explicitly release IRQ during teardown
Mauro Carvalho Chehab <mchehab+huawei(a)kernel.org>
media: venus: don't de-reference NULL pointers at IRQ time
Sakari Ailus <sakari.ailus(a)linux.intel.com>
media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
Hans Verkuil <hverkuil-cisco(a)xs4all.nl>
media: v4l2-ctrls: always copy the controls on completion
Johan Hovold <johan+linaro(a)kernel.org>
wifi: ath11k: fix dest ring-buffer corruption when ring is full
Kefeng Wang <wangkefeng.wang(a)huawei.com>
asm-generic: Add memory barrier dma_mb()
Marco Elver <elver(a)google.com>
locking/barriers, kcsan: Support generic instrumentation
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Fix duty and period setting
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Handle hardware enable and clock enable separately
Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de>
pwm: mediatek: Implement .apply() callback
Tzung-Bi Shih <tzungbi(a)kernel.org>
platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
Tzung-Bi Shih <tzungbi(a)kernel.org>
platform/chrome: cros_ec: remove unneeded label and if-condition
Chen-Yu Tsai <wenst(a)chromium.org>
platform/chrome: cros_ec: Use per-device lockdep key
Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de>
platform/chrome: cros_ec: Make cros_ec_unregister() return void
Zhang Yi <yi.zhang(a)huawei.com>
ext4: fix hole length calculation overflow in non-extent inodes
David Laight <David.Laight(a)ACULAB.COM>
minmax: add umin(a, b) and umax(a, b)
Li Zhong <floridsleeves(a)gmail.com>
ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value
Qu Wenruo <wqu(a)suse.com>
btrfs: populate otime when logging an inode item
Johan Hovold <johan(a)kernel.org>
usb: musb: omap2430: fix device leak at unbind
Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com>
soc: qcom: mdt_loader: Ensure we don't read past the ELF header
David Lechner <dlechner(a)baylibre.com>
iio: adc: ad_sigma_delta: change to buffer predisable
André Draszik <andre.draszik(a)linaro.org>
scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
Damien Le Moal <dlemoal(a)kernel.org>
ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
Anshuman Khandual <anshuman.khandual(a)arm.com>
mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
Davide Caratti <dcaratti(a)redhat.com>
net/sched: ets: use old 'nbands' while purging unused classes
Eric Dumazet <edumazet(a)google.com>
net_sched: sch_ets: implement lockless ets_dump()
Davide Caratti <dcaratti(a)redhat.com>
net/sched: sch_ets: properly init all active DRR list handles
Trond Myklebust <trond.myklebust(a)hammerspace.com>
NFS: Fix the setting of capabilities when automounting a new filesystem
Anna Schumaker <Anna.Schumaker(a)Netapp.com>
NFS: Create an nfs4_server_set_init_caps() function
Trond Myklebust <trond.myklebust(a)hammerspace.com>
NFSv4: Fix nfs4_bitmap_copy_adjust()
Trond Myklebust <trond.myklebust(a)hammerspace.com>
NFS: Don't set NFS_INO_REVAL_PAGECACHE in the inode cache validity
Ajish Koshy <Ajish.Koshy(a)microchip.com>
scsi: pm80xx: Fix memory leak during rmmod
James Smart <jsmart2021(a)gmail.com>
scsi: lpfc: Fix link down processing to address NULL pointer dereference
Leon Romanovsky <leon(a)kernel.org>
RDMA/rxe: Return CQE error if invalid lkey was supplied
Guchun Chen <guchun.chen(a)amd.com>
drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
Hyejeong Choi <hjeong.choi(a)samsung.com>
dma-buf: insert memory barrier before updating num_fences
Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com>
selftests/memfd: add test for mapping write-sealed memfd read-only
Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com>
mm: reinstate ability to map write-sealed memfd mappings read-only
Lorenzo Stoakes <lstoakes(a)gmail.com>
mm: update memfd seal write check to include F_SEAL_WRITE
Lorenzo Stoakes <lstoakes(a)gmail.com>
mm: drop the assumption that VM_SHARED always implies writable
Ma Ke <make24(a)iscas.ac.cn>
dpaa2-eth: Fix device reference count leak in MAC endpoint handling
Ioana Ciornei <ioana.ciornei(a)nxp.com>
dpaa2-eth: retry the probe when the MAC is not yet discovered on the bus
Ioana Ciornei <ioana.ciornei(a)nxp.com>
dpaa2-mac: export MAC counters even when in TYPE_FIXED
Ioana Ciornei <ioana.ciornei(a)nxp.com>
dpaa2-mac: split up initializing the MAC object from connecting to it
Nathan Chancellor <nathan(a)kernel.org>
ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix deadlock when cloning inline extents and using qgroups
Ming Lei <ming.lei(a)redhat.com>
block: don't call rq_qos_ops->done_bio if the bio isn't tracked
Yang Yingliang <yangyingliang(a)huawei.com>
ptp: Fix possible memory leak in ptp_clock_register()
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
Oliver Neukum <oneukum(a)suse.com>
cdc-acm: fix race between initial clearing halt and open
Johan Hovold <johan(a)kernel.org>
USB: cdc-acm: do not log successful probe on later errors
Haiyang Zhang <haiyangz(a)microsoft.com>
hv_netvsc: Fix panic during namespace deletion with VF
Damien Le Moal <dlemoal(a)kernel.org>
block: Make REQ_OP_ZONE_FINISH a write operation
Lukas Wunner <lukas(a)wunner.de>
PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
Sebastian Reichel <sebastian.reichel(a)collabora.com>
usb: typec: fusb302: cache PD RX state
John Ernberg <john.ernberg(a)actia.se>
net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
Geoffrey D. Bennett <g(a)b4.vu>
ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
Dave Hansen <dave.hansen(a)linux.intel.com>
x86/fpu: Delay instruction pointer fixup until after warning
Harry Yoo <harry.yoo(a)oracle.com>
mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
Miaohe Lin <linmiaohe(a)huawei.com>
mm/zsmalloc.c: convert to use kmem_cache_zalloc in cache_alloc_zspage()
Lin.Cao <lincao12(a)amd.com>
drm/sched: Remove optimization that causes hang when killing dependent jobs
Haoxiang Li <haoxiang_li2024(a)163.com>
ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
Maulik Shah <maulik.shah(a)oss.qualcomm.com>
pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
Steven Rostedt <rostedt(a)goodmis.org>
tracing: Add down_write(trace_event_sem) when adding trace event
Wang Zhaolong <wangzhaolong(a)huaweicloud.com>
smb: client: fix use-after-free in crypt_message when using async crypto
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: hub: Don't try to recover devices lost during warm reset.
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: hub: avoid warm port reset during USB3 disconnect
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce/amd: Add default names for MCA banks and blocks
Zhang Lixu <lixu.zhang(a)intel.com>
iio: hid-sensor-prox: Fix incorrect OFFSET calculation
Chao Yu <chao(a)kernel.org>
f2fs: fix to do sanity check on ino and xnid
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
kbuild: userprogs: use correct linker when mixing clang and GNU ld
Kuen-Han Tsai <khtsai(a)google.com>
usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
Zenm Chen <zenmchen(a)gmail.com>
USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
Thorsten Blum <thorsten.blum(a)linux.dev>
usb: storage: realtek_cr: Use correct byte order for bcs->Residue
Mael GUERIN <mael.guerin(a)murena.io>
USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
Marek Vasut <marek.vasut+renesas(a)mailbox.org>
usb: renesas-xhci: Fix External ROM access timeouts
Miao Li <limiao(a)kylinos.cn>
usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
Miaoqian Lin <linmq006(a)gmail.com>
most: core: Drop device reference after usage in get_channel()
David Lechner <dlechner(a)baylibre.com>
iio: proximity: isl29501: fix buffered read on big-endian systems
Salah Triki <salah.triki(a)gmail.com>
iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
Steven Rostedt <rostedt(a)goodmis.org>
ftrace: Also allocate and copy hash for reading of filter files
Xu Yilun <yilun.xu(a)linux.intel.com>
fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
Al Viro <viro(a)zeniv.linux.org.uk>
use uniform permission checks for all mount propagation changes
Pavel Tikhomirov <ptikhomirov(a)virtuozzo.com>
move_mount: allow to add a mount into an existing group
Ye Bin <yebin10(a)huawei.com>
fs/buffer: fix use-after-free when call bh_read() helper
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
selftests: mptcp: connect: also cover alt modes
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
Evgeniy Harchenko <evgeniyharchenko.dev(a)gmail.com>
ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
Phillip Lougher <phillip(a)squashfs.org.uk>
squashfs: fix memory leak in squashfs_fill_super
Victor Shih <victor.shih(a)genesyslogic.com.tw>
mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
Jiayi Li <lijiayi(a)kylinos.cn>
memstick: Fix deadlock by moving removing flag earlier
Cong Wang <xiyou.wangcong(a)gmail.com>
sch_htb: make htb_deactivate() idempotent
Cong Wang <xiyou.wangcong(a)gmail.com>
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
Cong Wang <xiyou.wangcong(a)gmail.com>
sch_qfq: make qfq_qlen_notify() idempotent
Cong Wang <xiyou.wangcong(a)gmail.com>
sch_hfsc: make hfsc_qlen_notify() idempotent
Cong Wang <xiyou.wangcong(a)gmail.com>
sch_drr: make drr_qlen_notify() idempotent
Cong Wang <xiyou.wangcong(a)gmail.com>
sch_htb: make htb_qlen_notify() idempotent
Jakub Acs <acsjakub(a)amazon.de>
net, hsr: reject HSR frame if skb can't hold tag
Mario Limonciello <mario.limonciello(a)amd.com>
drm/amd: Restore cached power limit during resume
Vedang Nagar <quic_vnagar(a)quicinc.com>
media: venus: Add a check for packet size after reading from shared memory
Zhang Shurong <zhang_shurong(a)foxmail.com>
media: ov2659: Fix memory leaks in ov2659_probe()
Gui-Dong Han <hanguidong02(a)gmail.com>
media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
Ludwig Disterhof <ludwig(a)disterhof.eu>
media: usbtv: Lock resolution while streaming
Haoxiang Li <haoxiang_li2024(a)163.com>
media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
Bingbu Cao <bingbu.cao(a)intel.com>
media: hi556: correct the test pattern configuration
Dan Carpenter <dan.carpenter(a)linaro.org>
media: gspca: Add bounds checking to firmware parser
Jon Hunter <jonathanh(a)nvidia.com>
soc/tegra: pmc: Ensure power-domains are in a known state
Baokun Li <libaokun1(a)huawei.com>
jbd2: prevent softlockup in jbd2_log_do_checkpoint()
Damien Le Moal <dlemoal(a)kernel.org>
PCI: endpoint: Fix configfs group removal on driver teardown
Damien Le Moal <dlemoal(a)kernel.org>
PCI: endpoint: Fix configfs group list head handling
Thomas Fourier <fourier.thomas(a)gmail.com>
mtd: rawnand: fsmc: Add missing check after DMA map
Tim Harvey <tharvey(a)gateworks.com>
hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
Laurentiu Mihalcea <laurentiu.mihalcea(a)nxp.com>
pwm: imx-tpm: Reset counter if CMOD is 0
Johan Hovold <johan+linaro(a)kernel.org>
wifi: ath11k: fix source ring-buffer corruption
Nathan Chancellor <nathan(a)kernel.org>
wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
Marek Szyprowski <m.szyprowski(a)samsung.com>
zynq_fpga: use sgtable-based scatterlist wrappers
Damien Le Moal <dlemoal(a)kernel.org>
ata: libata-scsi: Fix ata_to_sense_error() status handling
Ojaswin Mujoo <ojaswin(a)linux.ibm.com>
ext4: fix reserved gdt blocks handling in fsmap
Ojaswin Mujoo <ojaswin(a)linux.ibm.com>
ext4: fix fsmap end of range reporting with bigalloc
Andreas Dilger <adilger(a)dilger.ca>
ext4: check fast symlink for ea_inode correctly
Helge Deller <deller(a)gmx.de>
Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
Eric Biggers <ebiggers(a)kernel.org>
lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
Myrrh Periwinkle <myrrhperiwinkle(a)qtmlabs.xyz>
vt: defkeymap: Map keycodes above 127 to K_HOLE
Myrrh Periwinkle <myrrhperiwinkle(a)qtmlabs.xyz>
vt: keyboard: Don't process Unicode characters in K_OFF mode
Alexander Wilhelm <alexander.wilhelm(a)westermo.com>
bus: mhi: host: Fix endianness of BHI vector table
Johan Hovold <johan(a)kernel.org>
usb: dwc3: meson-g12a: fix device leaks at unbind
Johan Hovold <johan(a)kernel.org>
usb: gadget: udc: renesas_usb3: fix device leak at unbind
Nathan Chancellor <nathan(a)kernel.org>
usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
Finn Thain <fthain(a)linux-m68k.org>
m68k: Fix lost column on framebuffer debug console
Dan Carpenter <dan.carpenter(a)linaro.org>
cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
Yunhui Cui <cuiyunhui(a)bytedance.com>
serial: 8250: fix panic due to PSLVERR
Ricardo Ribalda <ribalda(a)chromium.org>
media: uvcvideo: Do not mark valid metadata as invalid
Youngjun Lee <yjjuny.lee(a)samsung.com>
media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
Breno Leitao <leitao(a)debian.org>
mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
Waiman Long <longman(a)redhat.com>
mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
Randy Dunlap <rdunlap(a)infradead.org>
parisc: Makefile: fix a typo in palo.conf
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix log tree replay failure due to file with 0 links and extents
Eric Biggers <ebiggers(a)kernel.org>
thunderbolt: Fix copy+paste error in match_service_id()
Ian Abbott <abbotti(a)mev.co.uk>
comedi: fix race between polling and detaching
Myrrh Periwinkle <myrrhperiwinkle(a)qtmlabs.xyz>
usb: typec: ucsi: Update power_supply on power role change
Ricky Wu <ricky_wu(a)realtek.com>
misc: rtsx: usb: Ensure mmc child device is active when card is present
Xinyu Liu <katieeliu(a)tencent.com>
usb: core: config: Prevent OOB read in SS endpoint companion parsing
Jack Xiao <Jack.Xiao(a)amd.com>
drm/amdgpu: fix incorrect vm flags to map bo
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ASoC: fsl_sai: replace regmap_write with regmap_update_bits
Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com>
ASoC: soc-dai.c: add missing flag check at snd_soc_pcm_dai_probe()
Jiasheng Jiang <jiashengjiangcool(a)gmail.com>
scsi: lpfc: Remove redundant assignment to avoid memory leak
Meagan Lloyd <meaganlloyd(a)linux.microsoft.com>
rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Fix uninited ptr deref in block/scsi layout
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Handle RPC size limit for layoutcommits
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Fix disk addr range check in block/scsi layout
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Fix stripe mapping in block/scsi layout
John Garry <john.g.garry(a)oracle.com>
block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
Buday Csaba <buday.csaba(a)prolan.hu>
net: phy: smsc: add proper reset flags for LAN8710A
Corey Minyard <corey(a)minyard.net>
ipmi: Fix strcpy source and destination the same
Yann E. MORIN <yann.morin.1998(a)free.fr>
kconfig: lxdialog: fix 'space' to (de)select options
Masahiro Yamada <masahiroy(a)kernel.org>
kconfig: gconf: fix potential memory leak in renderer_edited()
Masahiro Yamada <masahiroy(a)kernel.org>
kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
Breno Leitao <leitao(a)debian.org>
ipmi: Use dev_warn_ratelimited() for incorrect message warnings
John Garry <john.g.garry(a)oracle.com>
scsi: aacraid: Stop using PCI_IRQ_AFFINITY
Ranjan Kumar <ranjan.kumar(a)broadcom.com>
scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
Shankari Anand <shankari.ak0208(a)gmail.com>
kconfig: nconf: Ensure null termination where strncpy is used
Suchit Karunakaran <suchitkarunakaran(a)gmail.com>
kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
fangzhong.zhou <myth5(a)myth5.com>
i2c: Force DLL0945 touchpad i2c freq to 100khz
Mikulas Patocka <mpatocka(a)redhat.com>
dm-mpath: don't print the "loaded" message if registering fails
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
i3c: don't fail if GETHDRCAP is unsupported
Meagan Lloyd <meaganlloyd(a)linux.microsoft.com>
rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
i3c: add missing include to internal header
Purva Yeshi <purvayeshi550(a)gmail.com>
md: dm-zoned-target: Initialize return variable r to avoid uninitialized use
chenchangcheng <chenchangcheng(a)kylinos.cn>
media: uvcvideo: Fix bandwidth issue for Alcor camera
Alex Guo <alexguo1023(a)gmail.com>
media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
Alex Guo <alexguo1023(a)gmail.com>
media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
media: usb: hdpvr: disable zero-length read messages
Dave Stevenson <dave.stevenson(a)raspberrypi.com>
media: tc358743: Increase FIFO trigger level to 374
Dave Stevenson <dave.stevenson(a)raspberrypi.com>
media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
Dave Stevenson <dave.stevenson(a)raspberrypi.com>
media: tc358743: Check I2C succeeded during probe
Cheick Traore <cheick.traore(a)foss.st.com>
pinctrl: stm32: Manage irq affinity settings
Damien Le Moal <dlemoal(a)kernel.org>
scsi: mpt3sas: Correctly handle ATA device errors
Justin Tee <justin.tee(a)broadcom.com>
scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
Arnd Bergmann <arnd(a)arndb.de>
RDMA/core: reduce stack using in nldev_stat_get_doit()
Yury Norov [NVIDIA] <yury.norov(a)gmail.com>
RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
Johan Adolfsson <johan.adolfsson(a)axis.com>
leds: leds-lp50xx: Handle reg to get correct multi_index
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
Arnaud Lecomte <contact(a)arnaud-lcm.com>
jfs: upper bound check of tree index in dbAllocAG
Edward Adam Davis <eadavis(a)qq.com>
jfs: Regular file corruption check
Lizhi Xu <lizhi.xu(a)windriver.com>
jfs: truncate good inode pages when hard link is 0
jackysliu <1972843537(a)qq.com>
scsi: bfa: Double-free fix
Shiji Yang <yangshiji66(a)outlook.com>
MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
Sebastian Reichel <sebastian.reichel(a)collabora.com>
watchdog: dw_wdt: Fix default timeout
Amir Mohammad Jahangirzad <a.jahangirzad(a)gmail.com>
fs/orangefs: use snprintf() instead of sprintf()
Showrya M N <showrya(a)chelsio.com>
scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
Theodore Ts'o <tytso(a)mit.edu>
ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
Pali Rohár <pali(a)kernel.org>
cifs: Fix calling CIFSFindFirst() for root path without msearch
Jason Wang <jasowang(a)redhat.com>
vhost: fail early when __vhost_add_used() fails
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
Jakub Kicinski <kuba(a)kernel.org>
uapi: in6: restore visibility of most IPv6 socket options
Emily Deng <Emily.Deng(a)amd.com>
drm/ttm: Should to return the evict error
Hari Kalavakunta <kalavakunta.hari.prasad(a)gmail.com>
net: ncsi: Fix buffer overflow in fetching version id
Thomas Fourier <fourier.thomas(a)gmail.com>
wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc()
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
Alok Tiwari <alok.a.tiwari(a)oracle.com>
gve: Return error for unknown admin queue command
Gal Pressman <gal(a)nvidia.com>
net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
Stanislaw Gruszka <stf_xl(a)wp.pl>
wifi: iwlegacy: Check rate_idx range after addition
Mina Almasry <almasrymina(a)google.com>
netmem: fix skb_frag_address_safe with unreadable skbs
Thomas Fourier <fourier.thomas(a)gmail.com>
wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
Wen Chen <Wen.Chen3(a)amd.com>
drm/amd/display: Fix 'failed to blank crtc!'
Pagadala Yesu Anjaneyulu <pagadala.yesu.anjaneyulu(a)intel.com>
wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
Rand Deeb <rand.sec96(a)gmail.com>
wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
Ilya Bakoulin <Ilya.Bakoulin(a)amd.com>
drm/amd/display: Separate set_gsl from set_gsl_source_select
Jonas Rebmann <jre(a)pengutronix.de>
net: fec: allow disable coalescing
Thomas Fourier <fourier.thomas(a)gmail.com>
(powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
Sven Schnelle <svens(a)linux.ibm.com>
s390/stp: Remove udelay from stp_sync_clock()
Avraham Stern <avraham.stern(a)intel.com>
wifi: iwlwifi: mvm: fix scan request validation
Alok Tiwari <alok.a.tiwari(a)oracle.com>
net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
Oscar Maes <oscmaes92(a)gmail.com>
net: ipv4: fix incorrect MTU in broadcast routes
Ilan Peer <ilan.peer(a)intel.com>
wifi: cfg80211: Fix interface type validation
Paul E. McKenney <paulmck(a)kernel.org>
rcu: Protect ->defer_qs_iw_pending from data race
Thomas Fourier <fourier.thomas(a)gmail.com>
net: ag71xx: Add missing check after DMA map
Thomas Fourier <fourier.thomas(a)gmail.com>
et131x: Add missing check after DMA map
Alok Tiwari <alok.a.tiwari(a)oracle.com>
be2net: Use correct byte order and format string for TCP seq and ack_seq
Sven Schnelle <svens(a)linux.ibm.com>
s390/time: Use monotonic clock in get_cycles()
Johannes Berg <johannes.berg(a)intel.com>
wifi: cfg80211: reject HTC bit for management frames
Steven Rostedt <rostedt(a)goodmis.org>
ktest.pl: Prevent recursion of default variable options
Anthoine Bourgeois <anthoine.bourgeois(a)vates.tech>
xen/netfront: Fix TX response spurious interrupts
Xinxin Wan <xinxin.wan(a)intel.com>
ASoC: codecs: rt5640: Retry DEVICE_ID verification
Jonathan Santos <Jonathan.Santos(a)analog.com>
iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com>
ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
Christophe Leroy <christophe.leroy(a)csgroup.eu>
ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
Lucy Thrun <lucy.thrun(a)digital-rabbithole.de>
ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
Tomasz Michalec <tmichalec(a)google.com>
platform/chrome: cros_ec_typec: Defer probe on missing EC parent
Kees Cook <kees(a)kernel.org>
platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
Gautham R. Shenoy <gautham.shenoy(a)amd.com>
pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
Oliver Neukum <oneukum(a)suse.com>
usb: core: usb_submit_urb: downgrade type check
Tomasz Michalec <tmichalec(a)google.com>
usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com>
ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
Alok Tiwari <alok.a.tiwari(a)oracle.com>
ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
Mark Brown <broonie(a)kernel.org>
ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
x86/bugs: Avoid warning when overriding return thunk
Ulf Hansson <ulf.hansson(a)linaro.org>
mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
Peter Robinson <pbrobinson(a)gmail.com>
reset: brcmstb: Enable reset drivers for ARCH_BCM2835
Breno Leitao <leitao(a)debian.org>
ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
Sarthak Garg <quic_sartgarg(a)quicinc.com>
mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
Sebastian Ott <sebott(a)redhat.com>
ACPI: processor: fix acpi_object initialization
tuhaowen <tuhaowen(a)uniontech.com>
PM: sleep: console: Fix the black screen issue
Hsin-Te Yuan <yuanhsinte(a)chromium.org>
thermal: sysfs: Return ENODATA instead of EAGAIN for reads
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
selftests: tracing: Use mutex_unlock for testing glob filter
Aaron Kling <webgeek1234(a)gmail.com>
ARM: tegra: Use I/O memcpy to write to IRAM
Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org>
gpio: tps65912: check the return value of regmap_update_bits()
Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com>
ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
Lifeng Zheng <zhenglifeng1(a)huawei.com>
PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()
Alexander Kochetkov <al.kochet(a)gmail.com>
ARM: rockchip: fix kernel hang during smp initialization
Lifeng Zheng <zhenglifeng1(a)huawei.com>
cpufreq: Exit governor when failed to start old governor
Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org>
gpio: wcd934x: check the return value of regmap_update_bits()
Mario Limonciello <mario.limonciello(a)amd.com>
usb: xhci: Avoid showing errors during surprise removal
Jay Chen <shawn2000100(a)gmail.com>
usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
Mario Limonciello <mario.limonciello(a)amd.com>
usb: xhci: Avoid showing warnings for dying controller
Benson Leung <bleung(a)chromium.org>
usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default
Cynthia Huang <cynthia(a)andestech.com>
selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
Prashant Malani <pmalani(a)google.com>
cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
Su Hui <suhui(a)nfschina.com>
usb: xhci: print xhci->xhc_state when queue_command failed
Al Viro <viro(a)zeniv.linux.org.uk>
securityfs: don't pin dentries twice, once is enough...
Damien Le Moal <dlemoal(a)kernel.org>
ata: libata-sata: Disallow changing LPM state if not supported
Al Viro <viro(a)zeniv.linux.org.uk>
better lockdep annotations for simple_recursive_removal()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfs: fix not erasing deleted b-tree node issue
Sarah Newman <srn(a)prgmr.com>
drbd: add missing kref_get in handle_write_conflicts
Jan Kara <jack(a)suse.cz>
udf: Verify partition map count
Kees Cook <kees(a)kernel.org>
arm64: Handle KCOV __init vs inline mismatches
Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp>
hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfs: fix slab-out-of-bounds in hfs_bnode_read()
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
cpuidle: governors: menu: Avoid using invalid recent intervals data
Len Brown <len.brown(a)intel.com>
intel_idle: Allow loading ACPI tables for any family
Xin Long <lucien.xin(a)gmail.com>
sctp: linearize cloned gso packets in sctp_rcv
Florian Westphal <fw(a)strlen.de>
netfilter: ctnetlink: fix refcount leak on table dump
Sabrina Dubroca <sd(a)queasysnail.net>
udp: also consider secpath when evaluating ipsec use for checksumming
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
ACPI: processor: perflib: Move problematic pr->performance check
Jiayi Li <lijiayi(a)kylinos.cn>
ACPI: processor: perflib: Fix initial _PPC limit application
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
Documentation: ACPI: Fix parent device references
Sasha Levin <sashal(a)kernel.org>
fs: Prevent file descriptor table allocations exceeding INT_MAX
Ma Ke <make24(a)iscas.ac.cn>
sunvdc: Balance device refcount in vdc_port_mpgroup_check
Dai Ngo <dai.ngo(a)oracle.com>
NFSD: detect mismatch of file handle and delegation stateid in OPEN op
Jeff Layton <jlayton(a)kernel.org>
nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
Johan Hovold <johan(a)kernel.org>
net: dpaa: fix device leak when querying time stamp info
Johan Hovold <johan(a)kernel.org>
net: gianfar: fix device leak when querying time stamp info
Fedor Pchelkin <pchelkin(a)ispras.ru>
netlink: avoid infinite retry looping in netlink_unicast()
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Validate UAC3 cluster segment descriptors
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Validate UAC3 power domain descriptors, too
Pavel Begunkov <asml.silence(a)gmail.com>
io_uring: don't use int for ABI
Tao Xue <xuetao09(a)huawei.com>
usb: gadget : fix use-after-free in composite_dev_cleanup()
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
Jiaxun Yang <jiaxun.yang(a)flygoat.com>
MIPS: mm: tlb-r4k: Uniquify TLB entries on init
Slark Xiao <slark_xiao(a)163.com>
USB: serial: option: add Foxconn T99W709
Budimir Markovic <markovicbudimir(a)gmail.com>
vsock: Do not allow binding to VMADDR_PORT_ANY
Quang Le <quanglex97(a)gmail.com>
net/packet: fix a race in packet_set_ring() and packet_notifier()
Thomas Gleixner <tglx(a)linutronix.de>
perf/core: Prevent VMA split of buffer mappings
Thomas Gleixner <tglx(a)linutronix.de>
perf/core: Exit early on perf_mmap() fail
Thomas Gleixner <tglx(a)linutronix.de>
perf/core: Don't leak AUX buffer refcount on allocation failure
Eric Dumazet <edumazet(a)google.com>
pptp: fix pptp_xmit() error path
Stefan Metzmacher <metze(a)samba.org>
smb: client: let recv_done() cleanup before notifying the callers.
Takashi Iwai <tiwai(a)suse.de>
ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out()
Michal Schmidt <mschmidt(a)redhat.com>
benet: fix BUG when creating VFs
Wang Liang <wangliang74(a)huawei.com>
net: drop UFO packets in udp_rcv_segment()
Eric Dumazet <edumazet(a)google.com>
ipv6: reject malicious packets in ipv6_gso_segment()
Eric Dumazet <edumazet(a)google.com>
pptp: ensure minimal skb length in pptp_xmit()
Horatiu Vultur <horatiu.vultur(a)microchip.com>
phy: mscc: Fix parsing of unicast frames
Jakub Kicinski <kuba(a)kernel.org>
netpoll: prevent hanging NAPI when netcons gets enabled
Benjamin Coddington <bcodding(a)redhat.com>
NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
Matthew Wilcox (Oracle) <willy(a)infradead.org>
XArray: Add calls to might_alloc()
Daniel Vetter <daniel.vetter(a)ffwll.ch>
mm: extract might_alloc() debug check
Olga Kornievskaia <okorniev(a)redhat.com>
NFSv4.2: another fix for listxattr
Trond Myklebust <trond.myklebust(a)hammerspace.com>
NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
Tigran Mkrtchyan <tigran.mkrtchyan(a)desy.de>
pNFS/flexfiles: don't attempt pnfs on fatal DS errors
Trond Myklebust <trond.myklebust(a)hammerspace.com>
pNFS/flexfiles: Avoid spurious layout returns in ff_layout_choose_ds_for_read
Timothy Pearson <tpearson(a)raptorengineering.com>
PCI: pnv_php: Fix surprise plug detection and recovery
Timothy Pearson <tpearson(a)raptorengineering.com>
powerpc/eeh: Make EEH driver device hotplug safe
Maciej W. Rozycki <macro(a)orcam.me.uk>
powerpc/eeh: Rely on dev->link_active_reporting
Timothy Pearson <tpearson(a)raptorengineering.com>
powerpc/eeh: Export eeh_unfreeze_pe()
Timothy Pearson <tpearson(a)raptorengineering.com>
PCI: pnv_php: Work around switches with broken presence detection
Timothy Pearson <tpearson(a)raptorengineering.com>
PCI: pnv_php: Clean up allocated IRQs on unplug
Masahiro Yamada <masahiroy(a)kernel.org>
kconfig: qconf: fix ConfigList::updateListAllforAll()
Seunghui Lee <sh043.lee(a)samsung.com>
scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume
Chao Yu <chao(a)kernel.org>
f2fs: fix to avoid out-of-boundary access in devs.path
Chao Yu <chao(a)kernel.org>
f2fs: fix to avoid panic in f2fs_evict_inode
Chao Yu <chao(a)kernel.org>
f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
Chao Yu <chao(a)kernel.org>
f2fs: doc: fix wrong quota mount option description
Brian Masney <bmasney(a)redhat.com>
rtc: rv3028: fix incorrect maximum clock rate handling
Brian Masney <bmasney(a)redhat.com>
rtc: pcf8563: fix incorrect maximum clock rate handling
Brian Masney <bmasney(a)redhat.com>
rtc: pcf85063: fix incorrect maximum clock rate handling
Brian Masney <bmasney(a)redhat.com>
rtc: hym8563: fix incorrect maximum clock rate handling
Brian Masney <bmasney(a)redhat.com>
rtc: ds1307: fix incorrect maximum clock rate handling
Petr Pavlu <petr.pavlu(a)suse.com>
module: Restore the moduleparam prefix length check
Ryan Lee <ryan.lee(a)canonical.com>
apparmor: ensure WB_HISTORY_SIZE value is a power of 2
Paul Chaignon <paul.chaignon(a)gmail.com>
bpf: Check flow_dissector ctx accesses are aligned
Mike Christie <michael.christie(a)oracle.com>
vhost-scsi: Fix log flooding with target does not exist errors
Balamanikandan Gunasundar <balamanikandan.gunasundar(a)microchip.com>
mtd: rawnand: atmel: set pmecc data setup time
Thomas Fourier <fourier.thomas(a)gmail.com>
mtd: rawnand: atmel: Fix dma_mapping_error() address
Zheng Yu <zheng.yu(a)northwestern.edu>
jfs: fix metapage reference count leak in dbAllocCtl
Chenyuan Yang <chenyuan0y(a)gmail.com>
fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
Giovanni Cabiddu <giovanni.cabiddu(a)intel.com>
crypto: qat - fix seq_file position update in adf_ring_next()
Ben Hutchings <benh(a)debian.org>
sh: Do not use hyphen in exported variable name
Thomas Fourier <fourier.thomas(a)gmail.com>
dmaengine: nbpfaxi: Add missing check after DMA map
Thomas Fourier <fourier.thomas(a)gmail.com>
dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
Dan Carpenter <dan.carpenter(a)linaro.org>
fs/orangefs: Allow 2 more characters in do_c_string()
Bard Liao <yung-chuan.liao(a)linux.intel.com>
soundwire: stream: restore params when prepare ports fail
Thomas Fourier <fourier.thomas(a)gmail.com>
crypto: img-hash - Fix dma_unmap_sg() nents value
Ovidiu Panait <ovidiu.panait.oss(a)gmail.com>
hwrng: mtk - handle devm_pm_runtime_enable errors
Dan Carpenter <dan.carpenter(a)linaro.org>
watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
Thomas Fourier <fourier.thomas(a)gmail.com>
scsi: isci: Fix dma_unmap_sg() nents value
Thomas Fourier <fourier.thomas(a)gmail.com>
scsi: mvsas: Fix dma_unmap_sg() nents value
Thomas Fourier <fourier.thomas(a)gmail.com>
scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
Paul Kocialkowski <paulk(a)sys-base.io>
clk: sunxi-ng: v3s: Fix de clock definition
Leo Yan <leo.yan(a)arm.com>
perf tests bp_account: Fix leaked file descriptor
Mengbiao Xiong <xisme1998(a)gmail.com>
crypto: ccp - Fix crash when rebind ccp device for ccp.ko
Thomas Fourier <fourier.thomas(a)gmail.com>
crypto: inside-secure - Fix `dma_unmap_sg()` nents value
Yuan Chen <chenyuan(a)kylinos.cn>
pinctrl: sunxi: Fix memory leak on krealloc failure
Charles Han <hanchunchao(a)inspur.com>
power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
Henry Martin <bsdhenrymartin(a)gmail.com>
clk: davinci: Add NULL check in davinci_lpsc_clk_register()
Ivan Stepchenko <sid(a)itb.spb.ru>
mtd: fix possible integer overflow in erase_xfer()
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: marvell/cesa - Fix engine load inaccuracy
Hans Zhang <18255117159(a)163.com>
PCI: rockchip-host: Fix "Unexpected Completion" log message
Stanislav Fomichev <sdf(a)fomichev.me>
vrf: Drop existing dst reference in vrf_ip6_input_dst
Xiumei Mu <xmu(a)redhat.com>
selftests: rtnetlink.sh: remove esp4_offload after test
Florian Westphal <fw(a)strlen.de>
netfilter: xt_nfacct: don't assume acct name is null-terminated
Jimmy Assarsson <extja(a)kvaser.com>
can: kvaser_usb: Assign netdev.dev_port based on device channel index
Jimmy Assarsson <extja(a)kvaser.com>
can: kvaser_pciefd: Store device channel index
Gokul Sivakumar <gokulkumar.sivakumar(a)infineon.com>
wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE
Remi Pommarel <repk(a)triplefau.lt>
Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
Remi Pommarel <repk(a)triplefau.lt>
wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key()
Thomas Fourier <fourier.thomas(a)gmail.com>
mwl8k: Add missing check after DMA map
Martin Kaistra <martin.kaistra(a)linutronix.de>
wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
Juergen Gross <jgross(a)suse.com>
xen/gntdev: remove struct gntdev_copy_batch from stack
Eric Dumazet <edumazet(a)google.com>
net_sched: act_ctinfo: use atomic64_t for three counters
William Liu <will(a)willsroot.io>
net/sched: Restrict conditions for adding duplicating netems to qdisc tree
Johan Korsnes <johan.korsnes(a)gmail.com>
arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
Fedor Pchelkin <pchelkin(a)ispras.ru>
netfilter: nf_tables: adjust lockdep assertions handling
Fedor Pchelkin <pchelkin(a)ispras.ru>
drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
Finn Thain <fthain(a)linux-m68k.org>
m68k: Don't unregister boot console needlessly
xin.guo <guoxin0309(a)gmail.com>
tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
Sergey Senozhatsky <senozhatsky(a)chromium.org>
wifi: ath11k: clear initialized flag for deinit-ed srng lists
Jiasheng Jiang <jiasheng(a)iscas.ac.cn>
iwlwifi: Add missing check for alloc_ordered_workqueue
Xiu Jianfeng <xiujianfeng(a)huawei.com>
wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
Daniil Dulov <d.dulov(a)aladdin.ru>
wifi: rtl818x: Kill URBs before clearing tx status queue
Arnd Bergmann <arnd(a)arndb.de>
caif: reduce stack size, again
Yuan Chen <chenyuan(a)kylinos.cn>
bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
Jiayuan Chen <jiayuan.chen(a)linux.dev>
bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
Andy Yan <andy.yan(a)rock-chips.com>
drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed
Steven Rostedt <rostedt(a)goodmis.org>
selftests/tracing: Fix false failure of subsystem event test
Alok Tiwari <alok.a.tiwari(a)oracle.com>
staging: nvec: Fix incorrect null termination of battery manufacturer
Brahmajit Das <listout(a)listout.xyz>
samples: mei: Fix building on musl libc
Lifeng Zheng <zhenglifeng1(a)huawei.com>
cpufreq: Init policy->rwsem before it may be possibly used
Lifeng Zheng <zhenglifeng1(a)huawei.com>
cpufreq: Initialize cpufreq-based frequency-invariance later
Adam Ford <aford173(a)gmail.com>
arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed
Annette Kobou <annette.kobou(a)kontron.de>
ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
Lucas De Marchi <lucas.demarchi(a)intel.com>
usb: early: xhci-dbc: Fix early_ioremap leak
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Revert "vmci: Prevent the dispatching of uninitialized payloads"
Denis OSTERLAND-HEIM <denis.osterland(a)diehl.com>
pps: fix poll support
Lizhi Xu <lizhi.xu(a)windriver.com>
vmci: Prevent the dispatching of uninitialized payloads
Abdun Nihaal <abdun.nihaal(a)gmail.com>
staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
ARM: dts: vfxxx: Correctly use two tuples for timer address
Arnd Bergmann <arnd(a)arndb.de>
ASoC: ops: dynamically allocate struct snd_ctl_elem_value
Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com>
ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask()
Yangtao Li <frank.li(a)vivo.com>
hfsplus: remove mutex_lock check in hfsplus_free_extents
RubenKelevra <rubenkelevra(a)gmail.com>
fs_context: fix parameter name in infofc() macro
Arnd Bergmann <arnd(a)arndb.de>
ASoC: Intel: fix SND_SOC_SOF dependencies
Arnd Bergmann <arnd(a)arndb.de>
ethernet: intel: fix building with large NR_CPUS
Xu Yang <xu.yang_2(a)nxp.com>
usb: phy: mxs: disconnect line when USB charger is attached
Xu Yang <xu.yang_2(a)nxp.com>
usb: chipidea: add USB PHY event
Daniel Dadap <ddadap(a)nvidia.com>
ALSA: hda: Add missing NVIDIA HDA codec IDs
Ian Abbott <abbotti(a)mev.co.uk>
comedi: comedi_test: Fix possible deletion of uninitialized timers
Michael Zhivich <mzhivich(a)akamai.com>
x86/bugs: Fix use of possibly uninit value in amd_check_tsa_microcode()
Ryusuke Konishi <konishi.ryusuke(a)gmail.com>
nilfs2: reject invalid file types when reading inodes
Praveen Kaligineedi <pkaligineedi(a)google.com>
gve: Fix stuck TX queue for DQ queue format
Jacek Kowalski <jacek(a)jacekk.info>
e1000e: ignore uninitialized checksum word on tgp
Jacek Kowalski <jacek(a)jacekk.info>
e1000e: disregard NVM checksum on tgp when valid checksum bit is not set
Dawid Rezler <dawidrezler.patches(a)gmail.com>
ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx
Yang Xiwen <forbidden405(a)outlook.com>
i2c: qup: jump out of the loop in case of timeout
Jian Shen <shenjian15(a)huawei.com>
net: hns3: fixed vf get max channels bug
Jian Shen <shenjian15(a)huawei.com>
net: hns3: refine the struct hane3_tc_info
Xiang Mei <xmei5(a)asu.edu>
net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
Kito Xu (veritas501) <hxzene(a)gmail.com>
net: appletalk: Fix use-after-free in AARP proxy probe
Andrew Lunn <andrew(a)lunn.ch>
net: appletalk: fix kerneldoc warnings
Dennis Chen <dechen(a)redhat.com>
i40e: report VF tx_dropped with tx_errors instead of tx_discards
Yajun Deng <yajun.deng(a)linux.dev>
i40e: Add rx_missed_errors for buffer exhaustion
Maor Gottlieb <maorg(a)nvidia.com>
RDMA/core: Rate limit GID cache warning messages
Alessandro Carminati <acarmina(a)redhat.com>
regulator: core: fix NULL dereference on unbind due to stale coupling data
Hongyu Xie <xiehongyu1(a)kylinos.cn>
xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
Bui Quang Minh <minhquangbui99(a)gmail.com>
virtio-net: ensure the received length does not exceed allocated size
Alexander Gordeev <agordeev(a)linux.ibm.com>
mm/vmalloc: leave lazy MMU mode on PTE mapping error
Arun Raghavan <arun(a)asymptotic.io>
ASoC: fsl_sai: Force a software reset when starting in consumer mode
Krishna Kurapati <krishna.kurapati(a)oss.qualcomm.com>
usb: dwc3: qcom: Don't leave BCR asserted
Drew Hamilton <drew.hamilton(a)zetier.com>
usb: musb: fix gadget state on disconnect
Paul Cercueil <paul(a)crapouillou.net>
usb: musb: Add and use inline functions musb_{get,set}_state
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: hub: Fix flushing of delayed work used for post resume purposes
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: hub: fix detection of high tier USB3 devices behind suspended hubs
William Liu <will(a)willsroot.io>
net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
Dong Chenchen <dongchenchen2(a)huawei.com>
net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: SMP: If an unallowed command is received consider it a failure
Kuniyuki Iwashima <kuniyu(a)google.com>
Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
Oliver Neukum <oneukum(a)suse.com>
usb: net: sierra: check for no status endpoint
Marius Zachmann <mail(a)mariuszachmann.de>
hwmon: (corsair-cpro) Validate the size of the received input buffer
Kuniyuki Iwashima <kuniyu(a)google.com>
rpl: Fix use-after-free in rpl_do_srh_inline().
Xiang Mei <xmei5(a)asu.edu>
net/sched: sch_qfq: Fix race condition on qfq_aggregate
Alok Tiwari <alok.a.tiwari(a)oracle.com>
net: emaclite: Fix missing pointer increment in aligned_read()
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fix initialization of data for instructions that write to subdevice
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fix some signed shift left operations
Ian Abbott <abbotti(a)mev.co.uk>
comedi: das6402: Fix bit shift out of bounds
Ian Abbott <abbotti(a)mev.co.uk>
comedi: das16m1: Fix bit shift out of bounds
Ian Abbott <abbotti(a)mev.co.uk>
comedi: aio_iiro_16: Fix bit shift out of bounds
Ian Abbott <abbotti(a)mev.co.uk>
comedi: pcl812: Fix bit shift out of bounds
Chen Ni <nichen(a)iscas.ac.cn>
iio: adc: stm32-adc: Fix race in installing chained IRQ handler
Fabio Estevam <festevam(a)denx.de>
iio: adc: max1363: Reorder mode_list[] entries
Fabio Estevam <festevam(a)denx.de>
iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
Andrew Jeffery <andrew(a)codeconstruct.com.au>
soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
Andrew Jeffery <andrew(a)codeconstruct.com.au>
soc: aspeed: lpc-snoop: Cleanup resources in stack-order
Judith Mendez <jm(a)ti.com>
mmc: sdhci_am654: Workaround for Errata i2312
Edson Juliano Drosdeck <edson.drosdeck(a)gmail.com>
mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
Thomas Fourier <fourier.thomas(a)gmail.com>
mmc: bcm2835: Fix dma_unmap_sg() nents value
Nathan Chancellor <nathan(a)kernel.org>
memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
Jan Kara <jack(a)suse.cz>
isofs: Verify inode mode when loading from disk
Dan Carpenter <dan.carpenter(a)linaro.org>
dmaengine: nbpfaxi: Fix memory corruption in probe()
Yun Lu <luyun(a)kylinos.cn>
af_packet: fix soft lockup issue caused by tpacket_snd()
Yun Lu <luyun(a)kylinos.cn>
af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
Nathan Chancellor <nathan(a)kernel.org>
phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
Benjamin Tissoires <bentiss(a)kernel.org>
HID: core: do not bypass hid_hw_raw_request
Benjamin Tissoires <bentiss(a)kernel.org>
HID: core: ensure __hid_request reserves the report ID as the first byte
Benjamin Tissoires <bentiss(a)kernel.org>
HID: core: ensure the allocated report buffer can contain the reserved report ID
Thomas Fourier <fourier.thomas(a)gmail.com>
pch_uart: Fix dma_sync_sg_for_device() nents value
Nilton Perim Neto <niltonperimneto(a)gmail.com>
Input: xpad - set correct controller type for Acer NGR200
Alok Tiwari <alok.a.tiwari(a)oracle.com>
thunderbolt: Fix bit masking in tb_dp_port_set_hops()
Clément Le Goffic <clement.legoffic(a)foss.st.com>
i2c: stm32: fix the device used for the DMA map
Xinyu Liu <1171169449(a)qq.com>
usb: gadget: configfs: Fix OOB read on empty string write
Ryan Mann (NDI) <rmann(a)ndigital.com>
USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
Slark Xiao <slark_xiao(a)163.com>
USB: serial: option: add Foxconn T99W640
Fabio Porcedda <fabio.porcedda(a)gmail.com>
USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
Wayne Chang <waynec(a)nvidia.com>
phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode
-------------
Diffstat:
Documentation/filesystems/f2fs.rst | 6 +-
Documentation/firmware-guide/acpi/i2c-muxes.rst | 8 +-
Documentation/memory-barriers.txt | 11 +-
Makefile | 6 +-
arch/arm/Makefile | 2 +-
arch/arm/boot/dts/imx6ul-kontron-n6x1x-s.dtsi | 1 -
arch/arm/boot/dts/vfxxx.dtsi | 2 +-
arch/arm/mach-rockchip/platsmp.c | 15 +-
arch/arm/mach-tegra/reset.c | 2 +-
.../boot/dts/freescale/imx8mm-beacon-som.dtsi | 2 +
arch/arm64/include/asm/acpi.h | 2 +-
arch/arm64/mm/ptdump_debugfs.c | 3 -
arch/m68k/Kconfig.debug | 2 +-
arch/m68k/kernel/early_printk.c | 42 +--
arch/m68k/kernel/head.S | 39 ++-
arch/mips/crypto/chacha-core.S | 20 +-
arch/mips/include/asm/vpe.h | 8 +
arch/mips/kernel/process.c | 16 +-
arch/mips/mm/tlb-r4k.c | 56 +++-
arch/parisc/Makefile | 2 +-
arch/powerpc/configs/ppc6xx_defconfig | 1 -
arch/powerpc/kernel/eeh.c | 1 +
arch/powerpc/kernel/eeh_driver.c | 48 ++--
arch/powerpc/kernel/eeh_pe.c | 11 +-
arch/powerpc/kernel/pci-hotplug.c | 3 +
arch/powerpc/platforms/512x/mpc512x_lpbfifo.c | 6 +-
arch/s390/hypfs/hypfs_dbfs.c | 19 +-
arch/s390/include/asm/timex.h | 13 +-
arch/s390/kernel/time.c | 2 +-
arch/s390/mm/dump_pagetables.c | 2 -
arch/sh/Makefile | 10 +-
arch/sh/boot/compressed/Makefile | 4 +-
arch/sh/boot/romimage/Makefile | 4 +-
arch/x86/include/asm/xen/hypercall.h | 6 +-
arch/x86/kernel/cpu/amd.c | 2 +
arch/x86/kernel/cpu/bugs.c | 5 +-
arch/x86/kernel/cpu/mce/amd.c | 13 +-
arch/x86/mm/extable.c | 5 +-
block/bio.c | 2 +-
block/blk-settings.c | 2 +-
drivers/acpi/acpi_processor.c | 2 +-
drivers/acpi/apei/ghes.c | 2 +
drivers/acpi/processor_idle.c | 4 +-
drivers/acpi/processor_perflib.c | 11 +
drivers/ata/Kconfig | 35 ++-
drivers/ata/libata-sata.c | 5 +
drivers/ata/libata-scsi.c | 20 +-
drivers/base/power/domain_governor.c | 18 +-
drivers/base/power/runtime.c | 5 +
drivers/block/drbd/drbd_receiver.c | 6 +-
drivers/block/sunvdc.c | 4 +-
drivers/bus/mhi/host/boot.c | 8 +-
drivers/bus/mhi/host/internal.h | 4 +-
drivers/char/hw_random/mtk-rng.c | 4 +-
drivers/char/ipmi/ipmi_msghandler.c | 8 +-
drivers/char/ipmi/ipmi_watchdog.c | 59 +++--
drivers/clk/davinci/psc.c | 5 +
drivers/clk/sunxi-ng/ccu-sun8i-v3s.c | 3 +-
drivers/cpufreq/armada-8k-cpufreq.c | 2 +-
drivers/cpufreq/cppc_cpufreq.c | 2 +-
drivers/cpufreq/cpufreq.c | 29 +-
drivers/cpuidle/governors/menu.c | 21 +-
drivers/crypto/ccp/ccp-debugfs.c | 3 +
drivers/crypto/img-hash.c | 2 +-
drivers/crypto/inside-secure/safexcel_hash.c | 8 +-
drivers/crypto/marvell/cesa/cipher.c | 4 +-
drivers/crypto/marvell/cesa/hash.c | 5 +-
.../crypto/qat/qat_common/adf_transport_debug.c | 4 +-
drivers/devfreq/governor_userspace.c | 6 +-
drivers/dma-buf/dma-resv.c | 5 +-
drivers/dma/mv_xor.c | 21 +-
drivers/dma/nbpfaxi.c | 24 +-
drivers/fpga/zynq-fpga.c | 10 +-
drivers/gpio/gpio-rcar.c | 20 +-
drivers/gpio/gpio-tps65912.c | 7 +-
drivers/gpio/gpio-wcd934x.c | 7 +-
drivers/gpu/drm/amd/amdgpu/amdgpu.h | 1 +
drivers/gpu/drm/amd/amdgpu/amdgpu_csa.c | 4 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 6 +
.../gpu/drm/amd/display/dc/bios/command_table.c | 2 +-
.../amd/display/dc/clk_mgr/dce100/dce_clk_mgr.c | 2 -
.../amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 40 +--
.../amd/display/dc/clk_mgr/dce60/dce60_clk_mgr.c | 31 +--
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 11 +-
.../gpu/drm/amd/pm/powerplay/hwmgr/smu_helper.c | 2 +-
drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 6 +
drivers/gpu/drm/drm_dp_helper.c | 2 +-
drivers/gpu/drm/rockchip/rockchip_drm_fb.c | 9 +-
drivers/gpu/drm/scheduler/sched_entity.c | 23 +-
drivers/gpu/drm/ttm/ttm_resource.c | 3 +
drivers/hid/hid-core.c | 21 +-
drivers/hwmon/corsair-cpro.c | 5 +
drivers/hwmon/gsc-hwmon.c | 4 +-
drivers/i2c/busses/i2c-qup.c | 4 +-
drivers/i2c/busses/i2c-stm32.c | 8 +-
drivers/i2c/busses/i2c-stm32f7.c | 4 +-
drivers/i2c/i2c-core-acpi.c | 1 +
drivers/i3c/internals.h | 1 +
drivers/i3c/master.c | 2 +-
drivers/idle/intel_idle.c | 2 +-
drivers/iio/adc/ad7768-1.c | 23 +-
drivers/iio/adc/ad_sigma_delta.c | 4 +-
drivers/iio/adc/max1363.c | 43 ++-
drivers/iio/adc/stm32-adc-core.c | 7 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_temp.c | 6 +-
drivers/iio/light/as73211.c | 2 +-
drivers/iio/light/hid-sensor-prox.c | 3 +-
drivers/iio/pressure/bmp280-core.c | 9 +-
drivers/iio/proximity/isl29501.c | 14 +-
drivers/infiniband/core/cache.c | 4 +-
drivers/infiniband/core/nldev.c | 22 +-
drivers/infiniband/hw/bnxt_re/qplib_res.c | 2 +
drivers/infiniband/hw/hfi1/affinity.c | 44 +--
drivers/infiniband/sw/rxe/rxe_comp.c | 16 +-
drivers/input/joystick/xpad.c | 2 +-
drivers/iommu/amd/init.c | 4 +-
drivers/leds/leds-lp50xx.c | 11 +-
drivers/md/dm-core.h | 52 ++++
drivers/md/dm-historical-service-time.c | 4 +-
drivers/md/dm-queue-length.c | 4 +-
drivers/md/dm-round-robin.c | 4 +-
drivers/md/dm-rq.c | 8 +
drivers/md/dm-service-time.c | 4 +-
drivers/md/dm-zoned-target.c | 2 +-
drivers/md/dm.c | 59 +----
drivers/media/cec/usb/rainshadow/rainshadow-cec.c | 3 +-
drivers/media/dvb-frontends/dib7000p.c | 8 +
drivers/media/i2c/hi556.c | 26 +-
drivers/media/i2c/ov2659.c | 3 +-
drivers/media/i2c/tc358743.c | 86 +++---
drivers/media/platform/qcom/camss/camss.c | 4 +-
drivers/media/platform/qcom/venus/core.c | 21 +-
drivers/media/platform/qcom/venus/core.h | 2 +
drivers/media/platform/qcom/venus/dbgfs.c | 9 +
drivers/media/platform/qcom/venus/dbgfs.h | 13 +
drivers/media/platform/qcom/venus/hfi_venus.c | 14 +-
drivers/media/platform/qcom/venus/vdec.c | 5 +-
drivers/media/usb/gspca/vicam.c | 10 +-
drivers/media/usb/hdpvr/hdpvr-i2c.c | 6 +
drivers/media/usb/usbtv/usbtv-video.c | 4 +
drivers/media/usb/uvc/uvc_driver.c | 3 +
drivers/media/usb/uvc/uvc_video.c | 21 +-
drivers/media/v4l2-core/v4l2-ctrls.c | 37 ++-
drivers/memstick/core/memstick.c | 3 +-
drivers/memstick/host/rtsx_usb_ms.c | 1 +
drivers/misc/cardreader/rtsx_usb.c | 16 +-
drivers/mmc/host/bcm2835.c | 3 +-
drivers/mmc/host/rtsx_usb_sdmmc.c | 4 +-
drivers/mmc/host/sdhci-msm.c | 14 +
drivers/mmc/host/sdhci-pci-core.c | 3 +-
drivers/mmc/host/sdhci-pci-gli.c | 4 +-
drivers/mmc/host/sdhci_am654.c | 9 +-
drivers/most/core.c | 2 +-
drivers/mtd/ftl.c | 2 +-
drivers/mtd/nand/raw/atmel/nand-controller.c | 2 +-
drivers/mtd/nand/raw/atmel/pmecc.c | 6 +
drivers/mtd/nand/raw/fsmc_nand.c | 2 +
drivers/net/can/kvaser_pciefd.c | 1 +
drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 1 +
drivers/net/dsa/b53/b53_common.c | 52 ++--
drivers/net/dsa/b53/b53_regs.h | 2 +
drivers/net/ethernet/agere/et131x.c | 36 +++
drivers/net/ethernet/atheros/ag71xx.c | 9 +
drivers/net/ethernet/cavium/thunder/thunder_bgx.c | 4 +-
drivers/net/ethernet/emulex/benet/be_cmds.c | 2 +-
drivers/net/ethernet/emulex/benet/be_main.c | 8 +-
drivers/net/ethernet/freescale/dpaa/dpaa_ethtool.c | 4 +-
drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c | 66 +++--
drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.h | 13 +
.../net/ethernet/freescale/dpaa2/dpaa2-ethtool.c | 16 +-
drivers/net/ethernet/freescale/dpaa2/dpaa2-mac.c | 97 +++----
drivers/net/ethernet/freescale/dpaa2/dpaa2-mac.h | 5 +
drivers/net/ethernet/freescale/fec_main.c | 34 ++-
drivers/net/ethernet/freescale/gianfar_ethtool.c | 4 +-
drivers/net/ethernet/google/gve/gve_adminq.c | 1 +
drivers/net/ethernet/google/gve/gve_main.c | 67 ++---
drivers/net/ethernet/hisilicon/hns3/hnae3.h | 19 +-
drivers/net/ethernet/hisilicon/hns3/hns3_debugfs.c | 3 +-
drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 33 ++-
.../ethernet/hisilicon/hns3/hns3pf/hclge_debugfs.c | 2 +-
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 4 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c | 2 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c | 49 ++--
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 25 +-
drivers/net/ethernet/intel/e1000e/defines.h | 3 +
drivers/net/ethernet/intel/e1000e/ich8lan.c | 2 +
drivers/net/ethernet/intel/e1000e/nvm.c | 6 +
drivers/net/ethernet/intel/fm10k/fm10k.h | 3 +-
drivers/net/ethernet/intel/i40e/i40e.h | 2 +-
drivers/net/ethernet/intel/i40e/i40e_ethtool.c | 3 +-
drivers/net/ethernet/intel/i40e/i40e_main.c | 18 +-
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 4 +-
drivers/net/ethernet/intel/ice/ice_flex_pipe.c | 2 +
drivers/net/ethernet/intel/ixgbe/ixgbe.h | 3 +-
drivers/net/ethernet/intel/ixgbe/ixgbe_xsk.c | 4 +-
drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +
drivers/net/ethernet/mellanox/mlxsw/trap.h | 1 +
drivers/net/ethernet/xilinx/xilinx_emaclite.c | 2 +-
drivers/net/hyperv/hyperv_net.h | 3 +
drivers/net/hyperv/netvsc_drv.c | 29 +-
drivers/net/phy/mscc/mscc_ptp.c | 1 +
drivers/net/phy/mscc/mscc_ptp.h | 1 +
drivers/net/phy/smsc.c | 1 +
drivers/net/ppp/pptp.c | 18 +-
drivers/net/usb/sierra_net.c | 4 +
drivers/net/usb/usbnet.c | 11 +-
drivers/net/virtio_net.c | 38 ++-
drivers/net/vrf.c | 2 +
drivers/net/wireless/ath/ath11k/hal.c | 25 +-
.../broadcom/brcm80211/brcmfmac/cfg80211.c | 8 +-
.../broadcom/brcm80211/brcmsmac/phy/phy_lcn.c | 2 +-
drivers/net/wireless/intel/iwlegacy/4965-mac.c | 5 +-
drivers/net/wireless/intel/iwlwifi/dvm/main.c | 11 +-
drivers/net/wireless/intel/iwlwifi/dvm/rs.c | 2 +-
drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 7 +-
drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 4 +-
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 2 +-
drivers/net/wireless/marvell/mwl8k.c | 4 +
drivers/net/wireless/realtek/rtl818x/rtl8187/dev.c | 3 +-
.../net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 2 +-
drivers/net/wireless/realtek/rtlwifi/pci.c | 23 +-
drivers/net/xen-netfront.c | 5 -
drivers/pci/controller/pcie-rockchip-host.c | 2 +-
drivers/pci/endpoint/pci-ep-cfs.c | 1 +
drivers/pci/endpoint/pci-epf-core.c | 2 +-
drivers/pci/hotplug/pnv_php.c | 235 ++++++++++++++--
drivers/pci/pci-acpi.c | 4 +-
drivers/pci/pci.c | 8 +-
drivers/pci/probe.c | 2 +-
drivers/phy/tegra/xusb-tegra186.c | 61 +++--
drivers/pinctrl/stm32/pinctrl-stm32.c | 1 +
drivers/pinctrl/sunxi/pinctrl-sunxi.c | 11 +-
drivers/platform/chrome/cros_ec.c | 23 +-
drivers/platform/chrome/cros_ec.h | 2 +-
drivers/platform/chrome/cros_ec_i2c.c | 4 +-
drivers/platform/chrome/cros_ec_lpc.c | 4 +-
drivers/platform/chrome/cros_ec_spi.c | 4 +-
drivers/platform/chrome/cros_ec_typec.c | 4 +-
drivers/platform/x86/thinkpad_acpi.c | 4 +-
drivers/power/supply/max14577_charger.c | 4 +-
drivers/pps/pps.c | 11 +-
drivers/ptp/ptp_clock.c | 13 +-
drivers/pwm/pwm-imx-tpm.c | 9 +
drivers/pwm/pwm-mediatek.c | 78 ++++--
drivers/regulator/core.c | 1 +
drivers/reset/Kconfig | 10 +-
drivers/rtc/rtc-ds1307.c | 17 +-
drivers/rtc/rtc-hym8563.c | 2 +-
drivers/rtc/rtc-pcf85063.c | 2 +-
drivers/rtc/rtc-pcf8563.c | 2 +-
drivers/rtc/rtc-rv3028.c | 2 +-
drivers/scsi/aacraid/comminit.c | 3 +-
drivers/scsi/bfa/bfad_im.c | 1 +
drivers/scsi/ibmvscsi_tgt/libsrp.c | 6 +-
drivers/scsi/isci/request.c | 2 +-
drivers/scsi/libiscsi.c | 3 +-
drivers/scsi/lpfc/lpfc_debugfs.c | 1 -
drivers/scsi/lpfc/lpfc_scsi.c | 4 +
drivers/scsi/lpfc/lpfc_sli.c | 8 +-
drivers/scsi/mpt3sas/mpt3sas_scsih.c | 19 ++
drivers/scsi/mvsas/mv_sas.c | 4 +-
drivers/scsi/pm8001/pm8001_init.c | 11 +
drivers/scsi/pm8001/pm8001_sas.h | 1 +
drivers/scsi/qla4xxx/ql4_os.c | 2 +
drivers/scsi/scsi_scan.c | 2 +-
drivers/scsi/scsi_transport_sas.c | 62 ++++-
drivers/scsi/ufs/ufs-exynos.c | 4 +-
drivers/scsi/ufs/ufshcd.c | 10 +-
drivers/soc/aspeed/aspeed-lpc-snoop.c | 13 +-
drivers/soc/qcom/mdt_loader.c | 41 +++
drivers/soc/tegra/pmc.c | 51 ++--
drivers/soundwire/stream.c | 2 +-
drivers/staging/comedi/comedi_fops.c | 63 ++++-
drivers/staging/comedi/comedi_internal.h | 1 +
drivers/staging/comedi/drivers.c | 30 ++-
drivers/staging/comedi/drivers/aio_iiro_16.c | 3 +-
drivers/staging/comedi/drivers/comedi_test.c | 2 +-
drivers/staging/comedi/drivers/das16m1.c | 3 +-
drivers/staging/comedi/drivers/das6402.c | 3 +-
drivers/staging/comedi/drivers/pcl812.c | 3 +-
drivers/staging/fbtft/fbtft-core.c | 1 +
drivers/staging/media/imx/imx-media-csc-scaler.c | 2 +-
drivers/staging/nvec/nvec_power.c | 2 +-
drivers/thermal/thermal_sysfs.c | 9 +-
drivers/thunderbolt/domain.c | 2 +-
drivers/thunderbolt/switch.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 3 +-
drivers/tty/serial/pch_uart.c | 2 +-
drivers/tty/vt/defkeymap.c_shipped | 112 ++++++++
drivers/tty/vt/keyboard.c | 2 +-
drivers/uio/uio_hv_generic.c | 4 +-
drivers/usb/atm/cxacru.c | 172 ++++++------
drivers/usb/chipidea/ci.h | 18 +-
drivers/usb/chipidea/udc.c | 10 +
drivers/usb/class/cdc-acm.c | 13 +-
drivers/usb/core/config.c | 10 +-
drivers/usb/core/hub.c | 60 ++++-
drivers/usb/core/hub.h | 1 +
drivers/usb/core/quirks.c | 1 +
drivers/usb/core/urb.c | 2 +-
drivers/usb/dwc3/core.c | 10 -
drivers/usb/dwc3/dwc3-meson-g12a.c | 3 +
drivers/usb/dwc3/dwc3-qcom.c | 7 +-
drivers/usb/dwc3/gadget.c | 14 +
drivers/usb/early/xhci-dbc.c | 4 +
drivers/usb/gadget/composite.c | 5 +
drivers/usb/gadget/configfs.c | 2 +
drivers/usb/gadget/udc/renesas_usb3.c | 1 +
drivers/usb/host/xhci-hub.c | 3 +-
drivers/usb/host/xhci-mem.c | 24 +-
drivers/usb/host/xhci-pci-renesas.c | 7 +-
drivers/usb/host/xhci-plat.c | 3 +-
drivers/usb/host/xhci-ring.c | 19 +-
drivers/usb/host/xhci.c | 24 +-
drivers/usb/host/xhci.h | 3 +-
drivers/usb/musb/musb_core.c | 62 ++---
drivers/usb/musb/musb_core.h | 11 +
drivers/usb/musb/musb_debugfs.c | 6 +-
drivers/usb/musb/musb_gadget.c | 30 ++-
drivers/usb/musb/musb_host.c | 6 +-
drivers/usb/musb/musb_virthub.c | 18 +-
drivers/usb/musb/omap2430.c | 10 +-
drivers/usb/phy/phy-mxs-usb.c | 4 +-
drivers/usb/serial/ftdi_sio.c | 2 +
drivers/usb/serial/ftdi_sio_ids.h | 3 +
drivers/usb/serial/option.c | 7 +
drivers/usb/storage/realtek_cr.c | 2 +-
drivers/usb/storage/unusual_devs.h | 29 ++
drivers/usb/typec/mux/intel_pmc_mux.c | 2 +-
drivers/usb/typec/tcpm/fusb302.c | 8 +
drivers/usb/typec/ucsi/psy.c | 2 +-
drivers/usb/typec/ucsi/ucsi.c | 1 +
drivers/usb/typec/ucsi/ucsi.h | 7 +-
drivers/vhost/scsi.c | 4 +-
drivers/vhost/vhost.c | 3 +
drivers/video/console/vgacon.c | 2 +-
drivers/video/fbdev/imxfb.c | 9 +-
drivers/watchdog/dw_wdt.c | 2 +
drivers/watchdog/ziirave_wdt.c | 3 +
drivers/xen/gntdev-common.h | 4 +
drivers/xen/gntdev.c | 71 +++--
fs/btrfs/ctree.h | 2 +-
fs/btrfs/inode.c | 4 +-
fs/btrfs/ioctl.c | 2 +-
fs/btrfs/qgroup.c | 2 +-
fs/btrfs/send.c | 4 +-
fs/btrfs/transaction.c | 2 +-
fs/btrfs/tree-log.c | 53 ++--
fs/buffer.c | 2 +-
fs/cifs/cifssmb.c | 10 +
fs/cifs/smb2ops.c | 7 +-
fs/cifs/smbdirect.c | 14 +-
fs/ext4/fsmap.c | 23 +-
fs/ext4/indirect.c | 4 +-
fs/ext4/inline.c | 19 +-
fs/ext4/inode.c | 2 +-
fs/f2fs/f2fs.h | 2 +-
fs/f2fs/inode.c | 28 +-
fs/f2fs/node.c | 10 +
fs/file.c | 15 ++
fs/hfs/bnode.c | 93 +++++++
fs/hfsplus/bnode.c | 92 +++++++
fs/hfsplus/extents.c | 3 -
fs/hfsplus/unicode.c | 7 +
fs/hfsplus/xattr.c | 6 +-
fs/hugetlbfs/inode.c | 2 +-
fs/isofs/inode.c | 9 +-
fs/jbd2/checkpoint.c | 1 +
fs/jfs/file.c | 3 +
fs/jfs/inode.c | 2 +-
fs/jfs/jfs_dmap.c | 10 +-
fs/libfs.c | 4 +-
fs/namespace.c | 89 ++++++-
fs/nfs/blocklayout/blocklayout.c | 4 +-
fs/nfs/blocklayout/dev.c | 5 +-
fs/nfs/blocklayout/extent_tree.c | 20 +-
fs/nfs/client.c | 46 +++-
fs/nfs/export.c | 11 +-
fs/nfs/flexfilelayout/flexfilelayout.c | 32 +--
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 6 +-
fs/nfs/inode.c | 6 +-
fs/nfs/internal.h | 10 +-
fs/nfs/nfs4client.c | 15 +-
fs/nfs/nfs4proc.c | 46 ++--
fs/nfs/pnfs.c | 11 +-
fs/nfsd/nfs4state.c | 34 ++-
fs/nilfs2/inode.c | 9 +-
fs/orangefs/orangefs-debugfs.c | 8 +-
fs/squashfs/super.c | 14 +-
fs/udf/super.c | 13 +-
include/asm-generic/barrier.h | 33 +++
include/linux/blk_types.h | 8 +-
include/linux/compiler.h | 8 -
include/linux/cpuset.h | 17 ++
include/linux/fs.h | 4 +-
include/linux/fs_context.h | 2 +-
include/linux/if_vlan.h | 6 +-
include/linux/memfd.h | 14 +
include/linux/minmax.h | 17 ++
include/linux/mm.h | 76 ++++--
include/linux/mmzone.h | 22 ++
include/linux/moduleparam.h | 5 +-
include/linux/pci.h | 1 +
include/linux/platform_data/cros_ec_proto.h | 4 +
include/linux/pps_kernel.h | 1 +
include/linux/sched/mm.h | 16 ++
include/linux/skbuff.h | 31 ++-
include/linux/usb/usbnet.h | 1 +
include/linux/xarray.h | 15 ++
include/net/cfg80211.h | 2 +-
include/net/tc_act/tc_ctinfo.h | 6 +-
include/net/udp.h | 24 +-
include/uapi/linux/in6.h | 4 +-
include/uapi/linux/io_uring.h | 2 +-
include/uapi/linux/mount.h | 3 +-
kernel/cgroup/cpuset.c | 23 ++
kernel/events/core.c | 20 +-
kernel/fork.c | 2 +-
kernel/power/console.c | 7 +-
kernel/rcu/tree_plugin.h | 3 +
kernel/trace/ftrace.c | 19 +-
kernel/trace/trace.c | 33 ++-
kernel/trace/trace.h | 8 +-
kernel/trace/trace_events.c | 5 +
mm/filemap.c | 2 +-
mm/hmm.c | 2 +-
mm/kmemleak.c | 10 +-
mm/madvise.c | 2 +-
mm/memfd.c | 2 +-
mm/mmap.c | 10 +-
mm/page_alloc.c | 13 +
mm/ptdump.c | 2 +
mm/shmem.c | 2 +-
mm/slab.h | 5 +-
mm/slob.c | 6 +-
mm/vmalloc.c | 16 +-
mm/zsmalloc.c | 6 +-
net/8021q/vlan.c | 42 ++-
net/8021q/vlan.h | 1 +
net/appletalk/aarp.c | 42 ++-
net/appletalk/ddp.c | 7 +-
net/bluetooth/l2cap_core.c | 26 +-
net/bluetooth/l2cap_sock.c | 3 +
net/bluetooth/smp.c | 21 +-
net/bluetooth/smp.h | 1 +
net/bridge/netfilter/nft_reject_bridge.c | 60 +----
net/caif/cfctrl.c | 294 ++++++++++-----------
net/core/filter.c | 3 +
net/core/netpoll.c | 7 +
net/hsr/hsr_slave.c | 8 +-
net/ipv4/netfilter/nf_reject_ipv4.c | 4 +-
net/ipv4/route.c | 1 -
net/ipv4/tcp_input.c | 3 +-
net/ipv4/udp_offload.c | 2 +-
net/ipv6/ip6_offload.c | 4 +-
net/ipv6/netfilter/nf_reject_ipv6.c | 4 +-
net/ipv6/rpl_iptunnel.c | 8 +-
net/ipv6/seg6_hmac.c | 3 +
net/mac80211/tx.c | 7 +
net/ncsi/internal.h | 2 +-
net/ncsi/ncsi-rsp.c | 1 +
net/netfilter/nf_conntrack_netlink.c | 24 +-
net/netfilter/nf_tables_api.c | 4 +-
net/netfilter/nft_reject.c | 12 +-
net/netfilter/nft_reject_inet.c | 68 +----
net/netfilter/xt_nfacct.c | 4 +-
net/netlink/af_netlink.c | 2 +-
net/packet/af_packet.c | 39 ++-
net/phonet/pep.c | 2 +-
net/sched/act_ctinfo.c | 19 +-
net/sched/sch_cake.c | 14 +-
net/sched/sch_codel.c | 5 +-
net/sched/sch_drr.c | 7 +-
net/sched/sch_ets.c | 46 ++--
net/sched/sch_fq_codel.c | 6 +-
net/sched/sch_hfsc.c | 8 +-
net/sched/sch_htb.c | 19 +-
net/sched/sch_netem.c | 40 +++
net/sched/sch_qfq.c | 40 ++-
net/sctp/input.c | 2 +-
net/tls/tls_sw.c | 13 +
net/vmw_vsock/af_vsock.c | 3 +-
net/wireless/mlme.c | 3 +-
samples/mei/mei-amt-version.c | 2 +-
scripts/kconfig/gconf.c | 8 +-
scripts/kconfig/lxdialog/inputbox.c | 6 +-
scripts/kconfig/lxdialog/menubox.c | 2 +-
scripts/kconfig/nconf.c | 2 +
scripts/kconfig/nconf.gui.c | 1 +
scripts/kconfig/qconf.cc | 2 +-
security/apparmor/include/match.h | 3 +-
security/apparmor/match.c | 1 +
security/inode.c | 2 -
sound/core/pcm_native.c | 19 +-
sound/pci/hda/patch_ca0132.c | 7 +-
sound/pci/hda/patch_hdmi.c | 19 ++
sound/pci/hda/patch_realtek.c | 3 +
sound/pci/intel8x0.c | 2 +-
sound/soc/codecs/hdac_hdmi.c | 10 +-
sound/soc/codecs/rt5640.c | 5 +
sound/soc/fsl/fsl_sai.c | 30 ++-
sound/soc/intel/boards/Kconfig | 2 +-
sound/soc/soc-core.c | 3 +
sound/soc/soc-dai.c | 19 +-
sound/soc/soc-dapm.c | 4 +
sound/soc/soc-ops.c | 28 +-
sound/usb/mixer_quirks.c | 14 +-
sound/usb/mixer_scarlett_gen2.c | 8 +
sound/usb/stream.c | 25 +-
sound/usb/validate.c | 14 +-
tools/bpf/bpftool/net.c | 15 +-
tools/include/linux/sched/mm.h | 2 +
tools/perf/tests/bp_account.c | 1 +
.../cpupower/utils/idle_monitor/mperf_monitor.c | 4 +-
tools/testing/ktest/ktest.pl | 5 +-
.../ftrace/test.d/event/subsystem-enable.tc | 28 +-
.../ftrace/test.d/ftrace/func-filter-glob.tc | 2 +-
tools/testing/selftests/futex/include/futextest.h | 11 +
tools/testing/selftests/memfd/memfd_test.c | 43 +++
tools/testing/selftests/net/mptcp/Makefile | 3 +-
.../selftests/net/mptcp/mptcp_connect_mmap.sh | 5 +
tools/testing/selftests/net/mptcp/pm_netlink.sh | 1 +
tools/testing/selftests/net/rtnetlink.sh | 6 +
523 files changed, 4765 insertions(+), 2123 deletions(-)
3 weeks, 2 days
- 7
- 530
[PATCH] Revert "virtio_pci: Support surprise removal of virtio pci device"
by Parav Pandit
This reverts commit 43bb40c5b926 ("virtio_pci: Support surprise removal of virtio pci device").
Virtio drivers and PCI devices have never fully supported true
surprise (aka hot unplug) removal. Drivers historically continued
processing and waiting for pending I/O and even continued synchronous
device reset during surprise removal. Devices have also continued
completing I/Os, doing DMA and allowing device reset after surprise
removal to support such drivers.
Supporting it correctly would require a new device capability and
driver negotiation in the virtio specification to safely stop
I/O and free queue memory. Failure to do so either breaks all the
existing drivers with call trace listed in the commit or crashes the
host on continuing the DMA. Hence, until such specification and devices
are invented, restore the previous behavior of treating surprise
removal as graceful removal to avoid regressions and maintain system
stability same as before the
commit 43bb40c5b926 ("virtio_pci: Support surprise removal of virtio pci device").
As explained above, previous analysis of solving this only in driver
was incomplete and non-reliable at [1] and at [2]; Hence reverting commit
43bb40c5b926 ("virtio_pci: Support surprise removal of virtio pci device")
is still the best stand to restore failures of virtio net and
block devices.
[1] https://lore.kernel.org/virtualization/CY8PR12MB719506CC5613EB100BC6C638DCB…
[2] https://lore.kernel.org/virtualization/20250602024358.57114-1-parav@nvidia.…
Fixes: 43bb40c5b926 ("virtio_pci: Support surprise removal of virtio pci device")
Cc: stable(a)vger.kernel.org
Reported-by: lirongqing(a)baidu.com
Closes: https://lore.kernel.org/virtualization/c45dd68698cd47238c55fb73ca9b4741@bai…
Signed-off-by: Parav Pandit <parav(a)nvidia.com>
---
drivers/virtio/virtio_pci_common.c | 7 -------
1 file changed, 7 deletions(-)
diff --git a/drivers/virtio/virtio_pci_common.c b/drivers/virtio/virtio_pci_common.c
index d6d79af44569..dba5eb2eaff9 100644
--- a/drivers/virtio/virtio_pci_common.c
+++ b/drivers/virtio/virtio_pci_common.c
@@ -747,13 +747,6 @@ static void virtio_pci_remove(struct pci_dev *pci_dev)
struct virtio_pci_device *vp_dev = pci_get_drvdata(pci_dev);
struct device *dev = get_device(&vp_dev->vdev.dev);
- /*
- * Device is marked broken on surprise removal so that virtio upper
- * layers can abort any ongoing operation.
- */
- if (!pci_device_is_present(pci_dev))
- virtio_break_device(&vp_dev->vdev);
-
pci_disable_sriov(pci_dev);
unregister_virtio_device(&vp_dev->vdev);
--
2.26.2
3 weeks, 2 days
- 3
- 17
Ref:-""Breakthrough Funding for Innovative Ideas"
by Mr. William Man Fu Hung
Dear Entrepreneur,
"Global Support for Project & Business Development"
Need funds for your project or business plan? Our investors are ready to help and support you. Our network of professional investors offers soft loans to support project owners worldwide. Contact us to explore funding opportunities."
"Businesses and entrepreneurs seeking strategic partnerships and investment opportunities can benefit from our expertise. We consider collaborations in various sectors, including:
1. Business development
2. Project financing
3. Growth and expansion
4. Real estate investments
5. Strategic contracts
Note: IF YOU BRING A PROJECT OWNER TO US, YOU WILL RECEIVE A REFERER COMMISION. KINDLY DISCUSS PARTNERSHIP WITH US TODAY. info(a)firstcapitalsinvestors.com or firstcapitalsinvestors(a)gmail.com
We finance all kinds of viable projects ranging from personal projects to multi mega capital project. Organizational projects, . Government projects and community development are part of our services to humanity. We have support project such as real estate projects, Oil and Gas Projects, Health and medications, Engineering, Construction, Agriculture, Aviation, Retail sales business. All viable projects and businesses are welcome. Our investors are ready to support you.
Best Regards
Mr. William Man Fu Hung
First Capital Loans and Finance
www.firstcapitalsinvestors.com
info(a)firstcapitalsinvestors.com
3 weeks, 2 days
- 1
- 0
[PATCH] perf lzma: Fix return value in lzma_is_compressed()
by Miaoqian Lin
lzma_is_compressed() returns -1 on error but is declared as bool.
And -1 gets converted to true, which could be misleading.
Return false instead to match the declared type.
Fixes: 4b57fd44b61b ("perf tools: Add lzma_is_compressed function")
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Miaoqian Lin <linmq006(a)gmail.com>
---
tools/perf/util/lzma.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/tools/perf/util/lzma.c b/tools/perf/util/lzma.c
index bbcd2ffcf4bd..c355757ed391 100644
--- a/tools/perf/util/lzma.c
+++ b/tools/perf/util/lzma.c
@@ -120,7 +120,7 @@ bool lzma_is_compressed(const char *input)
ssize_t rc;
if (fd < 0)
- return -1;
+ return false;
rc = read(fd, buf, sizeof(buf));
close(fd);
--
2.39.5 (Apple Git-154)
3 weeks, 2 days
- 1
- 0
[PATCH] perf tools: Fix bool return value in gzip_is_compressed()
by Miaoqian Lin
gzip_is_compressed() returns -1 on error but is declared as bool.
And -1 gets converted to true, which could be misleading.
Return false instead to match the declared type.
Fixes: 88c74dc76a30 ("perf tools: Add gzip_is_compressed function")
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Miaoqian Lin <linmq006(a)gmail.com>
---
tools/perf/util/zlib.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/tools/perf/util/zlib.c b/tools/perf/util/zlib.c
index 78d2297c1b67..1f7c06523059 100644
--- a/tools/perf/util/zlib.c
+++ b/tools/perf/util/zlib.c
@@ -88,7 +88,7 @@ bool gzip_is_compressed(const char *input)
ssize_t rc;
if (fd < 0)
- return -1;
+ return false;
rc = read(fd, buf, sizeof(buf));
close(fd);
--
2.39.5 (Apple Git-154)
3 weeks, 2 days
- 1
- 0
RE: [PATCH] Revert "virtio_pci: Support surprise removal of virtio pci device"
by Li,Rongqing
> This reverts commit 43bb40c5b926 ("virtio_pci: Support surprise removal of
> virtio pci device").
>
> Virtio drivers and PCI devices have never fully supported true surprise (aka hot
> unplug) removal. Drivers historically continued processing and waiting for
> pending I/O and even continued synchronous device reset during surprise
> removal. Devices have also continued completing I/Os, doing DMA and allowing
> device reset after surprise removal to support such drivers.
>
> Supporting it correctly would require a new device capability and driver
> negotiation in the virtio specification to safely stop I/O and free queue memory.
> Failure to do so either breaks all the existing drivers with call trace listed in the
> commit or crashes the host on continuing the DMA. Hence, until such
> specification and devices are invented, restore the previous behavior of treating
> surprise removal as graceful removal to avoid regressions and maintain system
> stability same as before the commit 43bb40c5b926 ("virtio_pci: Support surprise
> removal of virtio pci device").
>
> As explained above, previous analysis of solving this only in driver was
> incomplete and non-reliable at [1] and at [2]; Hence reverting commit
> 43bb40c5b926 ("virtio_pci: Support surprise removal of virtio pci device") is still
> the best stand to restore failures of virtio net and block devices.
>
> [1]
> https://lore.kernel.org/virtualization/CY8PR12MB719506CC5613EB100BC6C638
> DCBD2(a)CY8PR12MB7195.namprd12.prod.outlook.com/#t
> [2]
> https://lore.kernel.org/virtualization/20250602024358.57114-1-parav@nvidia.c
> om/
>
> Fixes: 43bb40c5b926 ("virtio_pci: Support surprise removal of virtio pci device")
> Cc: stable(a)vger.kernel.org
> Reported-by: lirongqing(a)baidu.com
> Closes:
> https://lore.kernel.org/virtualization/c45dd68698cd47238c55fb73ca9b4741@b
> aidu.com/
> Signed-off-by: Parav Pandit <parav(a)nvidia.com>
Tested-by: Li RongQing <lirongqing(a)baidu.com>
Thanks
-Li
> ---
> drivers/virtio/virtio_pci_common.c | 7 -------
> 1 file changed, 7 deletions(-)
>
> diff --git a/drivers/virtio/virtio_pci_common.c
> b/drivers/virtio/virtio_pci_common.c
> index d6d79af44569..dba5eb2eaff9 100644
> --- a/drivers/virtio/virtio_pci_common.c
> +++ b/drivers/virtio/virtio_pci_common.c
> @@ -747,13 +747,6 @@ static void virtio_pci_remove(struct pci_dev *pci_dev)
> struct virtio_pci_device *vp_dev = pci_get_drvdata(pci_dev);
> struct device *dev = get_device(&vp_dev->vdev.dev);
>
> - /*
> - * Device is marked broken on surprise removal so that virtio upper
> - * layers can abort any ongoing operation.
> - */
> - if (!pci_device_is_present(pci_dev))
> - virtio_break_device(&vp_dev->vdev);
> -
> pci_disable_sriov(pci_dev);
>
> unregister_virtio_device(&vp_dev->vdev);
> --
> 2.26.2
3 weeks, 2 days
- 3
- 14
[PATCH net v3 1/2] net: ipv4: fix regression in local-broadcast routes
by Oscar Maes
Commit 9e30ecf23b1b ("net: ipv4: fix incorrect MTU in broadcast routes")
introduced a regression where local-broadcast packets would have their
gateway set in __mkroute_output, which was caused by fi = NULL being
removed.
Fix this by resetting the fib_info for local-broadcast packets. This
preserves the intended changes for directed-broadcast packets.
Cc: stable(a)vger.kernel.org
Fixes: 9e30ecf23b1b ("net: ipv4: fix incorrect MTU in broadcast routes")
Reported-by: Brett A C Sheffield <bacs(a)librecast.net>
Closes: https://lore.kernel.org/regressions/20250822165231.4353-4-bacs@librecast.net
Signed-off-by: Oscar Maes <oscmaes92(a)gmail.com>
---
Link to discussion:
https://lore.kernel.org/netdev/20250822165231.4353-4-bacs@librecast.net/
Thanks to Brett Sheffield for finding the regression and writing
the initial fix!
net/ipv4/route.c | 10 +++++++---
1 file changed, 7 insertions(+), 3 deletions(-)
diff --git a/net/ipv4/route.c b/net/ipv4/route.c
index f639a2ae881a..baa43e5966b1 100644
--- a/net/ipv4/route.c
+++ b/net/ipv4/route.c
@@ -2575,12 +2575,16 @@ static struct rtable *__mkroute_output(const struct fib_result *res,
!netif_is_l3_master(dev_out))
return ERR_PTR(-EINVAL);
- if (ipv4_is_lbcast(fl4->daddr))
+ if (ipv4_is_lbcast(fl4->daddr)) {
type = RTN_BROADCAST;
- else if (ipv4_is_multicast(fl4->daddr))
+
+ /* reset fi to prevent gateway resolution */
+ fi = NULL;
+ } else if (ipv4_is_multicast(fl4->daddr)) {
type = RTN_MULTICAST;
- else if (ipv4_is_zeronet(fl4->daddr))
+ } else if (ipv4_is_zeronet(fl4->daddr)) {
return ERR_PTR(-EINVAL);
+ }
if (dev_out->flags & IFF_LOOPBACK)
flags |= RTCF_LOCAL;
--
2.39.5
3 weeks, 2 days
- 6
- 6
[PATCH v1] usb: typec: tcpm: properly deliver cable vdms to altmode drivers
by RD Babiera
tcpm_handle_vdm_request delivers messages to the partner altmode or the
cable altmode depending on the SVDM response type, which is incorrect.
The partner or cable should be chosen based on the received message type
instead.
Also add this filter to ADEV_NOTIFY_USB_AND_QUEUE_VDM, which is used when
the Enter Mode command is responded to by a NAK on SOP or SOP' and when
the Exit Mode command is responded to by an ACK on SOP.
Fixes: 7e7877c55eb1 ("usb: typec: tcpm: add alt mode enter/exit/vdm support for sop'")
Cc: stable(a)vger.kernel.org
Signed-off-by: RD Babiera <rdbabiera(a)google.com>
Reviewed-by: Badhri Jagan Sridharan <badhri(a)google.com>
---
drivers/usb/typec/tcpm/tcpm.c | 12 ++++++++----
1 file changed, 8 insertions(+), 4 deletions(-)
diff --git a/drivers/usb/typec/tcpm/tcpm.c b/drivers/usb/typec/tcpm/tcpm.c
index 1f6fdfaa34bf..b2a568a5bc9b 100644
--- a/drivers/usb/typec/tcpm/tcpm.c
+++ b/drivers/usb/typec/tcpm/tcpm.c
@@ -2426,17 +2426,21 @@ static void tcpm_handle_vdm_request(struct tcpm_port *port,
case ADEV_NONE:
break;
case ADEV_NOTIFY_USB_AND_QUEUE_VDM:
- WARN_ON(typec_altmode_notify(adev, TYPEC_STATE_USB, NULL));
- typec_altmode_vdm(adev, p[0], &p[1], cnt);
+ if (rx_sop_type == TCPC_TX_SOP_PRIME) {
+ typec_cable_altmode_vdm(adev, TYPEC_PLUG_SOP_P, p[0], &p[1], cnt);
+ } else {
+ WARN_ON(typec_altmode_notify(adev, TYPEC_STATE_USB, NULL));
+ typec_altmode_vdm(adev, p[0], &p[1], cnt);
+ }
break;
case ADEV_QUEUE_VDM:
- if (response_tx_sop_type == TCPC_TX_SOP_PRIME)
+ if (rx_sop_type == TCPC_TX_SOP_PRIME)
typec_cable_altmode_vdm(adev, TYPEC_PLUG_SOP_P, p[0], &p[1], cnt);
else
typec_altmode_vdm(adev, p[0], &p[1], cnt);
break;
case ADEV_QUEUE_VDM_SEND_EXIT_MODE_ON_FAIL:
- if (response_tx_sop_type == TCPC_TX_SOP_PRIME) {
+ if (rx_sop_type == TCPC_TX_SOP_PRIME) {
if (typec_cable_altmode_vdm(adev, TYPEC_PLUG_SOP_P,
p[0], &p[1], cnt)) {
int svdm_version = typec_get_cable_svdm_version(
base-commit: 956606bafb5fc6e5968aadcda86fc0037e1d7548
--
2.51.0.261.g7ce5a0a67e-goog
3 weeks, 2 days
- 2
- 1
[PATCH 5.15 000/644] 5.15.190-rc1 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 5.15.190 release.
There are 644 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 28 Aug 2025 11:08:21 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.190-r…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 5.15.190-rc1
Mikhail Lobanov <m.lobanov(a)rosa.ru>
wifi: mac80211: check basic rates validity in sta_link_apply_parameters
Florian Westphal <fw(a)strlen.de>
netfilter: nf_reject: don't leak dst refcount for loopback packets
Peter Oberparleiter <oberpar(a)linux.ibm.com>
s390/hypfs: Enable limited access during lockdown
Peter Oberparleiter <oberpar(a)linux.ibm.com>
s390/hypfs: Avoid unnecessary ioctl registration in debugfs
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
Hangbin Liu <liuhangbin(a)gmail.com>
bonding: update LACP activity flag after setting lacp_active
William Liu <will(a)willsroot.io>
net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
William Liu <will(a)willsroot.io>
net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
ValdikSS <iam(a)valdikss.org.ru>
igc: fix disabling L1.2 PCI-E link substate on I226 on init
Jason Xing <kernelxing(a)tencent.com>
ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
Yuichiro Tsuji <yuichtsu(a)amazon.com>
net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
Horatiu Vultur <horatiu.vultur(a)microchip.com>
phy: mscc: Fix timestamping for vsc8584
Sebastian Andrzej Siewior <bigeasy(a)linutronix.de>
net: phy: Use netif_rx().
Qingfang Deng <dqfext(a)gmail.com>
ppp: fix race conditions in ppp_fill_forward_path
Minhong He <heminhong(a)kylinos.cn>
ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
Chenyuan Yang <chenyuan0y(a)gmail.com>
drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
Dan Carpenter <dan.carpenter(a)linaro.org>
ALSA: usb-audio: Fix size validation in convert_chmap_v3()
Baihan Li <libaihan(a)huawei.com>
drm/hisilicon/hibmc: fix the hibmc loaded failed bug
Ido Schimmel <idosch(a)nvidia.com>
mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
Kees Cook <kees(a)kernel.org>
iommu/amd: Avoid stack buffer overflow from kernel cmdline
Dan Carpenter <dan.carpenter(a)linaro.org>
scsi: qla4xxx: Prevent a potential error pointer dereference
Wang Liang <wangliang74(a)huawei.com>
net: bridge: fix soft lockup in br_multicast_query_expired()
Anantha Prabhu <anantha.prabhu(a)broadcom.com>
RDMA/bnxt_re: Fix to initialize the PBL array
Waiman Long <longman(a)redhat.com>
cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
Feng Tang <feng.tang(a)intel.com>
mm/page_alloc: detect allocation forbidden by cpuset and bail out early
Tianxiang Peng <txpeng(a)tencent.com>
x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
Jinjiang Tu <tujinjiang(a)huawei.com>
mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn
Jonathan Cameron <Jonathan.Cameron(a)huawei.com>
iio: light: as73211: Ensure buffer holes are zeroed
Pu Lehui <pulehui(a)huawei.com>
tracing: Limit access to parser->buffer when trace_get_user failed
Steven Rostedt <rostedt(a)goodmis.org>
tracing: Remove unneeded goto out logic
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com>
iio: imu: inv_icm42600: change invalid data error to -EBUSY
Weitao Wang <WeitaoWang-oc(a)zhaoxin.com>
usb: xhci: Fix slot_id resource race conflict
Jan Beulich <jbeulich(a)suse.com>
compiler: remove __ADDRESSABLE_ASM{_STR,}() again
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
selftests: mptcp: pm: check flush doesn't reset limits
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Fix duty and period setting
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Handle hardware enable and clock enable separately
Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de>
pwm: mediatek: Implement .apply() callback
Ranjan Kumar <ranjan.kumar(a)broadcom.com>
scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems
Ranjan Kumar <ranjan.kumar(a)broadcom.com>
scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers
André Draszik <andre.draszik(a)linaro.org>
scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
David Lechner <dlechner(a)baylibre.com>
iio: adc: ad_sigma_delta: change to buffer predisable
Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com>
soc: qcom: mdt_loader: Ensure we don't read past the ELF header
Johan Hovold <johan+linaro(a)kernel.org>
wifi: ath11k: fix dest ring-buffer corruption when ring is full
Kefeng Wang <wangkefeng.wang(a)huawei.com>
asm-generic: Add memory barrier dma_mb()
Marco Elver <elver(a)google.com>
locking/barriers, kcsan: Support generic instrumentation
Jorge Ramirez-Ortiz <jorge.ramirez(a)oss.qualcomm.com>
media: venus: protect against spurious interrupts during probe
Dikshita Agarwal <quic_dikshita(a)quicinc.com>
media: venus: Add support for SSR trigger using fault injection
Sasha Levin <sashal(a)kernel.org>
media: qcom: camss: cleanup media device allocated resource on error path
Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de>
media: camss: Convert to platform remove callback returning void
Chao Yu <chao(a)kernel.org>
f2fs: fix to avoid out-of-boundary access in dnode page
Imre Deak <imre.deak(a)intel.com>
drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
Geliang Tang <tanggeliang(a)kylinos.cn>
mptcp: disable add_addr retransmission when timeout is 0
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Don't overclock DCE 6 by 15%
Selvarasu Ganesan <selvarasu.g(a)samsung.com>
usb: dwc3: Remove WARN_ON for device endpoint command timeouts
Kuen-Han Tsai <khtsai(a)google.com>
usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
Zenm Chen <zenmchen(a)gmail.com>
USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
Thorsten Blum <thorsten.blum(a)linux.dev>
usb: storage: realtek_cr: Use correct byte order for bcs->Residue
Mael GUERIN <mael.guerin(a)murena.io>
USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
Marek Vasut <marek.vasut+renesas(a)mailbox.org>
usb: renesas-xhci: Fix External ROM access timeouts
Xu Yang <xu.yang_2(a)nxp.com>
usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
Edward Adam Davis <eadavis(a)qq.com>
comedi: pcl726: Prevent invalid irq number
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Make insn_rw_emulate_bits() do insn->n samples
Miao Li <limiao(a)kylinos.cn>
usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
Miaoqian Lin <linmq006(a)gmail.com>
most: core: Drop device reference after usage in get_channel()
David Lechner <dlechner(a)baylibre.com>
iio: proximity: isl29501: fix buffered read on big-endian systems
Salah Triki <salah.triki(a)gmail.com>
iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
Steven Rostedt <rostedt(a)goodmis.org>
ftrace: Also allocate and copy hash for reading of filter files
Xu Yilun <yilun.xu(a)linux.intel.com>
fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
Al Viro <viro(a)zeniv.linux.org.uk>
use uniform permission checks for all mount propagation changes
Ye Bin <yebin10(a)huawei.com>
fs/buffer: fix use-after-free when call bh_read() helper
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
Mario Limonciello <mario.limonciello(a)amd.com>
drm/amd/display: Avoid a NULL pointer dereference
Evgeniy Harchenko <evgeniyharchenko.dev(a)gmail.com>
ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
Herton R. Krzesinski <herton(a)redhat.com>
mm/debug_vm_pgtable: clear page table entries at destroy_args()
Phillip Lougher <phillip(a)squashfs.org.uk>
squashfs: fix memory leak in squashfs_fill_super
Victor Shih <victor.shih(a)genesyslogic.com.tw>
mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
Jiayi Li <lijiayi(a)kylinos.cn>
memstick: Fix deadlock by moving removing flag earlier
Will Deacon <will(a)kernel.org>
KVM: arm64: Fix kernel BUG() due to bad backport of FPSIMD/SVE/SME fix
Adrian Hunter <adrian.hunter(a)intel.com>
scsi: ufs: ufs-pci: Fix default runtime and system PM levels
Archana Patni <archana.patni(a)intel.com>
scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers
Paolo Abeni <pabeni(a)redhat.com>
mptcp: do not queue data on closed subflows
Geliang Tang <geliang.tang(a)suse.com>
mptcp: drop unused sk in mptcp_push_release
Mat Martineau <mathew.j.martineau(a)linux.intel.com>
selftests: mptcp: Initialize variables to quiet gcc 12 warnings
Paolo Abeni <pabeni(a)redhat.com>
mptcp: introduce MAPPING_BAD_CSUM
Paolo Abeni <pabeni(a)redhat.com>
mptcp: fix error mibs accounting
Matthieu Baerts <matthieu.baerts(a)tessares.net>
selftests: mptcp: add missing join check
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
selftests: mptcp: connect: also cover checksum
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
selftests: mptcp: connect: also cover alt modes
Florian Westphal <fw(a)strlen.de>
selftests: mptcp: make sendfile selftest work
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
kbuild: userprogs: use correct linker when mixing clang and GNU ld
Li Zhong <floridsleeves(a)gmail.com>
ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value
Nirmal Patel <nirmal.patel(a)linux.intel.com>
PCI: vmd: Assign VMD IRQ domain before enumeration
Cong Wang <xiyou.wangcong(a)gmail.com>
sch_htb: make htb_deactivate() idempotent
Cong Wang <xiyou.wangcong(a)gmail.com>
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
Cong Wang <xiyou.wangcong(a)gmail.com>
sch_drr: make drr_qlen_notify() idempotent
Qu Wenruo <wqu(a)suse.com>
btrfs: populate otime when logging an inode item
Chao Gao <chao.gao(a)intel.com>
KVM: VMX: Flush shadow VMCS on emergency reboot
Davide Caratti <dcaratti(a)redhat.com>
net/sched: ets: use old 'nbands' while purging unused classes
Eric Dumazet <edumazet(a)google.com>
net_sched: sch_ets: implement lockless ets_dump()
Davide Caratti <dcaratti(a)redhat.com>
net/sched: sch_ets: properly init all active DRR list handles
Tzung-Bi Shih <tzungbi(a)kernel.org>
platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
Tzung-Bi Shih <tzungbi(a)kernel.org>
platform/chrome: cros_ec: remove unneeded label and if-condition
Chen-Yu Tsai <wenst(a)chromium.org>
platform/chrome: cros_ec: Use per-device lockdep key
Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de>
platform/chrome: cros_ec: Make cros_ec_unregister() return void
Johan Hovold <johan(a)kernel.org>
usb: dwc3: imx8mp: fix device leak at unbind
Youssef Samir <quic_yabdulra(a)quicinc.com>
bus: mhi: host: Detect events pointing to unexpected TREs
Damien Le Moal <dlemoal(a)kernel.org>
ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
Johan Hovold <johan(a)kernel.org>
usb: musb: omap2430: fix device leak at unbind
Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de>
usb: musb: omap2430: Convert to platform remove callback returning void
Anshuman Khandual <anshuman.khandual(a)arm.com>
mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
Trond Myklebust <trond.myklebust(a)hammerspace.com>
NFS: Fix the setting of capabilities when automounting a new filesystem
Anna Schumaker <Anna.Schumaker(a)Netapp.com>
NFS: Create an nfs4_server_set_init_caps() function
Johan Hovold <johan(a)kernel.org>
net: enetc: fix device and OF node leak at probe
Damien Le Moal <dlemoal(a)kernel.org>
block: Make REQ_OP_ZONE_FINISH a write operation
Lukas Wunner <lukas(a)wunner.de>
PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
Sebastian Reichel <sebastian.reichel(a)collabora.com>
usb: typec: fusb302: cache PD RX state
Haiyang Zhang <haiyangz(a)microsoft.com>
hv_netvsc: Fix panic during namespace deletion with VF
Thorsten Blum <thorsten.blum(a)linux.dev>
smb: server: Fix extension string in ksmbd_extract_shortname()
Geoffrey D. Bennett <g(a)b4.vu>
ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
Dave Hansen <dave.hansen(a)linux.intel.com>
x86/fpu: Delay instruction pointer fixup until after warning
Wang Zhaolong <wangzhaolong(a)huaweicloud.com>
smb: client: fix use-after-free in crypt_message when using async crypto
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: hub: Don't try to recover devices lost during warm reset.
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: hub: avoid warm port reset during USB3 disconnect
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce/amd: Add default names for MCA banks and blocks
Zhang Lixu <lixu.zhang(a)intel.com>
iio: hid-sensor-prox: Fix incorrect OFFSET calculation
Zhang Lixu <lixu.zhang(a)intel.com>
iio: hid-sensor-prox: Restore lost scale assignments
Chao Yu <chao(a)kernel.org>
f2fs: fix to do sanity check on ino and xnid
Nathan Chancellor <nathan(a)kernel.org>
ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
Ada Couprie Diaz <ada.coupriediaz(a)arm.com>
arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
Lin.Cao <lincao12(a)amd.com>
drm/sched: Remove optimization that causes hang when killing dependent jobs
Haoxiang Li <haoxiang_li2024(a)163.com>
ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com>
selftests/memfd: add test for mapping write-sealed memfd read-only
Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com>
mm: reinstate ability to map write-sealed memfd mappings read-only
Lorenzo Stoakes <lstoakes(a)gmail.com>
mm: update memfd seal write check to include F_SEAL_WRITE
Lorenzo Stoakes <lstoakes(a)gmail.com>
mm: drop the assumption that VM_SHARED always implies writable
Cong Wang <xiyou.wangcong(a)gmail.com>
sch_qfq: make qfq_qlen_notify() idempotent
Cong Wang <xiyou.wangcong(a)gmail.com>
sch_hfsc: make hfsc_qlen_notify() idempotent
Cong Wang <xiyou.wangcong(a)gmail.com>
sch_htb: make htb_qlen_notify() idempotent
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
mptcp: pm: kernel: flush: do not reset ADD_ADDR limit
Christoph Paasch <cpaasch(a)openai.com>
mptcp: drop skb if MPTCP skb extension allocation fails
Eric Biggers <ebiggers(a)kernel.org>
ipv6: sr: Fix MAC comparison to be constant-time
Jakub Acs <acsjakub(a)amazon.de>
net, hsr: reject HSR frame if skb can't hold tag
Timur Kristóf <timur.kristof(a)gmail.com>
drm/amd/display: Don't overwrite dce60_clk_mgr
Mario Limonciello <mario.limonciello(a)amd.com>
drm/amd: Restore cached power limit during resume
Ricardo Ribalda <ribalda(a)chromium.org>
media: venus: venc: Clamp param smaller than 1fps and bigger than 240
Ricardo Ribalda <ribalda(a)chromium.org>
media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
Jorge Ramirez-Ortiz <jorge.ramirez(a)oss.qualcomm.com>
media: venus: hfi: explicitly release IRQ during teardown
Vedang Nagar <quic_vnagar(a)quicinc.com>
media: venus: Add a check for packet size after reading from shared memory
Zhang Shurong <zhang_shurong(a)foxmail.com>
media: ov2659: Fix memory leaks in ov2659_probe()
Gui-Dong Han <hanguidong02(a)gmail.com>
media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
Ludwig Disterhof <ludwig(a)disterhof.eu>
media: usbtv: Lock resolution while streaming
Sakari Ailus <sakari.ailus(a)linux.intel.com>
media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
Haoxiang Li <haoxiang_li2024(a)163.com>
media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
Bingbu Cao <bingbu.cao(a)intel.com>
media: hi556: correct the test pattern configuration
Dan Carpenter <dan.carpenter(a)linaro.org>
media: gspca: Add bounds checking to firmware parser
Jon Hunter <jonathanh(a)nvidia.com>
soc/tegra: pmc: Ensure power-domains are in a known state
Baokun Li <libaokun1(a)huawei.com>
jbd2: prevent softlockup in jbd2_log_do_checkpoint()
Damien Le Moal <dlemoal(a)kernel.org>
PCI: endpoint: Fix configfs group removal on driver teardown
Damien Le Moal <dlemoal(a)kernel.org>
PCI: endpoint: Fix configfs group list head handling
Thomas Fourier <fourier.thomas(a)gmail.com>
mtd: rawnand: fsmc: Add missing check after DMA map
Gabor Juhos <j4g8y7(a)gmail.com>
mtd: spinand: propagate spinand_wait() errors from spinand_write_page()
Tim Harvey <tharvey(a)gateworks.com>
hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
Laurentiu Mihalcea <laurentiu.mihalcea(a)nxp.com>
pwm: imx-tpm: Reset counter if CMOD is 0
Johan Hovold <johan+linaro(a)kernel.org>
wifi: ath11k: fix source ring-buffer corruption
Nathan Chancellor <nathan(a)kernel.org>
wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
Marek Szyprowski <m.szyprowski(a)samsung.com>
zynq_fpga: use sgtable-based scatterlist wrappers
Damien Le Moal <dlemoal(a)kernel.org>
ata: libata-scsi: Fix ata_to_sense_error() status handling
Ranjan Kumar <ranjan.kumar(a)broadcom.com>
scsi: mpi3mr: Fix race between config read submit and interrupt completion
Zhang Yi <yi.zhang(a)huawei.com>
ext4: fix hole length calculation overflow in non-extent inodes
Liao Yuanhong <liaoyuanhong(a)vivo.com>
ext4: use kmalloc_array() for array space allocation
Theodore Ts'o <tytso(a)mit.edu>
ext4: don't try to clear the orphan_present feature block device is r/o
Ojaswin Mujoo <ojaswin(a)linux.ibm.com>
ext4: fix reserved gdt blocks handling in fsmap
Ojaswin Mujoo <ojaswin(a)linux.ibm.com>
ext4: fix fsmap end of range reporting with bigalloc
Andreas Dilger <adilger(a)dilger.ca>
ext4: check fast symlink for ea_inode correctly
Helge Deller <deller(a)gmx.de>
Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
Eric Biggers <ebiggers(a)kernel.org>
lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
Myrrh Periwinkle <myrrhperiwinkle(a)qtmlabs.xyz>
vt: defkeymap: Map keycodes above 127 to K_HOLE
Myrrh Periwinkle <myrrhperiwinkle(a)qtmlabs.xyz>
vt: keyboard: Don't process Unicode characters in K_OFF mode
Alexander Wilhelm <alexander.wilhelm(a)westermo.com>
bus: mhi: host: Fix endianness of BHI vector table
Johan Hovold <johan(a)kernel.org>
usb: dwc3: meson-g12a: fix device leaks at unbind
Johan Hovold <johan(a)kernel.org>
usb: gadget: udc: renesas_usb3: fix device leak at unbind
Nathan Chancellor <nathan(a)kernel.org>
usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
Finn Thain <fthain(a)linux-m68k.org>
m68k: Fix lost column on framebuffer debug console
Dan Carpenter <dan.carpenter(a)linaro.org>
cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
Yunhui Cui <cuiyunhui(a)bytedance.com>
serial: 8250: fix panic due to PSLVERR
Aditya Garg <gargaditya08(a)live.com>
HID: magicmouse: avoid setting up battery timer when not needed
Ricardo Ribalda <ribalda(a)chromium.org>
media: uvcvideo: Do not mark valid metadata as invalid
Youngjun Lee <yjjuny.lee(a)samsung.com>
media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
Breno Leitao <leitao(a)debian.org>
mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
Waiman Long <longman(a)redhat.com>
mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
Randy Dunlap <rdunlap(a)infradead.org>
parisc: Makefile: fix a typo in palo.conf
Sravan Kumar Gundu <sravankumarlpu(a)gmail.com>
fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
Qu Wenruo <wqu(a)suse.com>
btrfs: do not allow relocation of partially dropped subvolumes
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix log tree replay failure due to file with 0 links and extents
Oliver Neukum <oneukum(a)suse.com>
cdc-acm: fix race between initial clearing halt and open
Eric Biggers <ebiggers(a)kernel.org>
thunderbolt: Fix copy+paste error in match_service_id()
Ian Abbott <abbotti(a)mev.co.uk>
comedi: fix race between polling and detaching
Myrrh Periwinkle <myrrhperiwinkle(a)qtmlabs.xyz>
usb: typec: ucsi: Update power_supply on power role change
Ricky Wu <ricky_wu(a)realtek.com>
misc: rtsx: usb: Ensure mmc child device is active when card is present
Xinyu Liu <katieeliu(a)tencent.com>
usb: core: config: Prevent OOB read in SS endpoint companion parsing
Baokun Li <libaokun1(a)huawei.com>
ext4: fix largest free orders lists corruption on mb_optimize_scan switch
Jack Xiao <Jack.Xiao(a)amd.com>
drm/amdgpu: fix incorrect vm flags to map bo
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ASoC: fsl_sai: replace regmap_write with regmap_update_bits
Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com>
ASoC: soc-dai.h: merge DAI call back functions into ops
Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com>
ASoC: soc-dai.c: add missing flag check at snd_soc_pcm_dai_probe()
Jiasheng Jiang <jiashengjiangcool(a)gmail.com>
scsi: lpfc: Remove redundant assignment to avoid memory leak
Meagan Lloyd <meaganlloyd(a)linux.microsoft.com>
rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Fix uninited ptr deref in block/scsi layout
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Handle RPC size limit for layoutcommits
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Fix disk addr range check in block/scsi layout
Sergey Bashirov <sergeybashirov(a)gmail.com>
pNFS: Fix stripe mapping in block/scsi layout
John Garry <john.g.garry(a)oracle.com>
block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
Buday Csaba <buday.csaba(a)prolan.hu>
net: phy: smsc: add proper reset flags for LAN8710A
Corey Minyard <corey(a)minyard.net>
ipmi: Fix strcpy source and destination the same
Yann E. MORIN <yann.morin.1998(a)free.fr>
kconfig: lxdialog: fix 'space' to (de)select options
Masahiro Yamada <masahiroy(a)kernel.org>
kconfig: gconf: fix potential memory leak in renderer_edited()
Masahiro Yamada <masahiroy(a)kernel.org>
kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
Breno Leitao <leitao(a)debian.org>
ipmi: Use dev_warn_ratelimited() for incorrect message warnings
John Garry <john.g.garry(a)oracle.com>
scsi: aacraid: Stop using PCI_IRQ_AFFINITY
Maurizio Lombardi <mlombard(a)redhat.com>
scsi: target: core: Generate correct identifiers for PR OUT transport IDs
Ranjan Kumar <ranjan.kumar(a)broadcom.com>
scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
Shankari Anand <shankari.ak0208(a)gmail.com>
kconfig: nconf: Ensure null termination where strncpy is used
Suchit Karunakaran <suchitkarunakaran(a)gmail.com>
kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
fangzhong.zhou <myth5(a)myth5.com>
i2c: Force DLL0945 touchpad i2c freq to 100khz
Mikulas Patocka <mpatocka(a)redhat.com>
dm-mpath: don't print the "loaded" message if registering fails
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
i3c: don't fail if GETHDRCAP is unsupported
Meagan Lloyd <meaganlloyd(a)linux.microsoft.com>
rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
i3c: add missing include to internal header
Purva Yeshi <purvayeshi550(a)gmail.com>
md: dm-zoned-target: Initialize return variable r to avoid uninitialized use
Bharat Bhushan <bbhushan2(a)marvell.com>
crypto: octeontx2 - add timeout for load_fvc completion poll
chenchangcheng <chenchangcheng(a)kylinos.cn>
media: uvcvideo: Fix bandwidth issue for Alcor camera
Alex Guo <alexguo1023(a)gmail.com>
media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
Alex Guo <alexguo1023(a)gmail.com>
media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
media: usb: hdpvr: disable zero-length read messages
Dave Stevenson <dave.stevenson(a)raspberrypi.com>
media: tc358743: Increase FIFO trigger level to 374
Dave Stevenson <dave.stevenson(a)raspberrypi.com>
media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
Dave Stevenson <dave.stevenson(a)raspberrypi.com>
media: tc358743: Check I2C succeeded during probe
Cheick Traore <cheick.traore(a)foss.st.com>
pinctrl: stm32: Manage irq affinity settings
Damien Le Moal <dlemoal(a)kernel.org>
scsi: mpt3sas: Correctly handle ATA device errors
Justin Tee <justin.tee(a)broadcom.com>
scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
Arnd Bergmann <arnd(a)arndb.de>
RDMA/core: reduce stack using in nldev_stat_get_doit()
Yury Norov [NVIDIA] <yury.norov(a)gmail.com>
RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
Johan Adolfsson <johan.adolfsson(a)axis.com>
leds: leds-lp50xx: Handle reg to get correct multi_index
Niklas Söderlund <niklas.soderlund+renesas(a)ragnatech.se>
media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
Arnaud Lecomte <contact(a)arnaud-lcm.com>
jfs: upper bound check of tree index in dbAllocAG
Edward Adam Davis <eadavis(a)qq.com>
jfs: Regular file corruption check
Lizhi Xu <lizhi.xu(a)windriver.com>
jfs: truncate good inode pages when hard link is 0
jackysliu <1972843537(a)qq.com>
scsi: bfa: Double-free fix
Ziyan Fu <fuzy5(a)lenovo.com>
watchdog: iTCO_wdt: Report error if timeout configuration fails
Shiji Yang <yangshiji66(a)outlook.com>
MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
Sebastian Reichel <sebastian.reichel(a)collabora.com>
watchdog: dw_wdt: Fix default timeout
Amir Mohammad Jahangirzad <a.jahangirzad(a)gmail.com>
fs/orangefs: use snprintf() instead of sprintf()
Showrya M N <showrya(a)chelsio.com>
scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
Theodore Ts'o <tytso(a)mit.edu>
ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
Zhiqi Song <songzhiqi1(a)huawei.com>
crypto: hisilicon/hpre - fix dma unmap sequence
Pali Rohár <pali(a)kernel.org>
cifs: Fix calling CIFSFindFirst() for root path without msearch
Aaron Plattner <aplattner(a)nvidia.com>
watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition
Jason Wang <jasowang(a)redhat.com>
vhost: fail early when __vhost_add_used() fails
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com>
drm/ttm: Respect the shrinker core free target
Jakub Kicinski <kuba(a)kernel.org>
uapi: in6: restore visibility of most IPv6 socket options
Emily Deng <Emily.Deng(a)amd.com>
drm/ttm: Should to return the evict error
Hari Kalavakunta <kalavakunta.hari.prasad(a)gmail.com>
net: ncsi: Fix buffer overflow in fetching version id
Thomas Fourier <fourier.thomas(a)gmail.com>
wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc()
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: prevent DIS_LEARNING access on BCM5325
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
Álvaro Fernández Rojas <noltari(a)gmail.com>
net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
Alok Tiwari <alok.a.tiwari(a)oracle.com>
gve: Return error for unknown admin queue command
Gal Pressman <gal(a)nvidia.com>
net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
Mario Limonciello <mario.limonciello(a)amd.com>
drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual
Heiner Kallweit <hkallweit1(a)gmail.com>
dpaa_eth: don't use fixed_phy_change_carrier
Stanislaw Gruszka <stf_xl(a)wp.pl>
wifi: iwlegacy: Check rate_idx range after addition
Mina Almasry <almasrymina(a)google.com>
netmem: fix skb_frag_address_safe with unreadable skbs
Thomas Fourier <fourier.thomas(a)gmail.com>
wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
Wen Chen <Wen.Chen3(a)amd.com>
drm/amd/display: Fix 'failed to blank crtc!'
Pagadala Yesu Anjaneyulu <pagadala.yesu.anjaneyulu(a)intel.com>
wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
Rand Deeb <rand.sec96(a)gmail.com>
wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
Ilya Bakoulin <Ilya.Bakoulin(a)amd.com>
drm/amd/display: Separate set_gsl from set_gsl_source_select
Jonas Rebmann <jre(a)pengutronix.de>
net: fec: allow disable coalescing
Eric Work <work.eric(a)gmail.com>
net: atlantic: add set_power to fw_ops for atl2 to fix wol
zhangjianrong <zhangjianrong5(a)huawei.com>
net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths()
Rob Clark <robdclark(a)chromium.org>
drm/msm: use trylock for debugfs
Kuniyuki Iwashima <kuniyu(a)google.com>
ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc().
Thomas Fourier <fourier.thomas(a)gmail.com>
(powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
Johannes Berg <johannes.berg(a)intel.com>
wifi: mac80211: don't complete management TX on SAE commit
Sven Schnelle <svens(a)linux.ibm.com>
s390/stp: Remove udelay from stp_sync_clock()
Avraham Stern <avraham.stern(a)intel.com>
wifi: iwlwifi: mvm: fix scan request validation
Juri Lelli <juri.lelli(a)redhat.com>
sched/deadline: Fix accounting after global limits change
Alok Tiwari <alok.a.tiwari(a)oracle.com>
net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
Oscar Maes <oscmaes92(a)gmail.com>
net: ipv4: fix incorrect MTU in broadcast routes
Ilan Peer <ilan.peer(a)intel.com>
wifi: cfg80211: Fix interface type validation
Matt Johnston <matt(a)codeconstruct.com.au>
net: mctp: Prevent duplicate binds
Paul E. McKenney <paulmck(a)kernel.org>
rcu: Protect ->defer_qs_iw_pending from data race
Breno Leitao <leitao(a)debian.org>
arm64: Mark kernel as tainted on SAE and SError panic
Leon Romanovsky <leon(a)kernel.org>
net/mlx5e: Properly access RCU protected qdisc_sleeping variable
Thomas Fourier <fourier.thomas(a)gmail.com>
net: ag71xx: Add missing check after DMA map
Thomas Fourier <fourier.thomas(a)gmail.com>
et131x: Add missing check after DMA map
Alok Tiwari <alok.a.tiwari(a)oracle.com>
be2net: Use correct byte order and format string for TCP seq and ack_seq
Sven Schnelle <svens(a)linux.ibm.com>
s390/time: Use monotonic clock in get_cycles()
Johannes Berg <johannes.berg(a)intel.com>
wifi: cfg80211: reject HTC bit for management frames
Steven Rostedt <rostedt(a)goodmis.org>
ktest.pl: Prevent recursion of default variable options
Anthoine Bourgeois <anthoine.bourgeois(a)vates.tech>
xen/netfront: Fix TX response spurious interrupts
Xinxin Wan <xinxin.wan(a)intel.com>
ASoC: codecs: rt5640: Retry DEVICE_ID verification
Jonathan Santos <Jonathan.Santos(a)analog.com>
iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com>
ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
Christophe Leroy <christophe.leroy(a)csgroup.eu>
ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
Lucy Thrun <lucy.thrun(a)digital-rabbithole.de>
ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
Tomasz Michalec <tmichalec(a)google.com>
platform/chrome: cros_ec_typec: Defer probe on missing EC parent
Kees Cook <kees(a)kernel.org>
platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
Gautham R. Shenoy <gautham.shenoy(a)amd.com>
pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
Oliver Neukum <oneukum(a)suse.com>
usb: core: usb_submit_urb: downgrade type check
Tomasz Michalec <tmichalec(a)google.com>
usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com>
ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
Alok Tiwari <alok.a.tiwari(a)oracle.com>
ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
Mark Brown <broonie(a)kernel.org>
ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
x86/bugs: Avoid warning when overriding return thunk
Ulf Hansson <ulf.hansson(a)linaro.org>
mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
Peter Robinson <pbrobinson(a)gmail.com>
reset: brcmstb: Enable reset drivers for ARCH_BCM2835
Eliav Farber <farbere(a)amazon.com>
pps: clients: gpio: fix interrupt handling order in remove path
Breno Leitao <leitao(a)debian.org>
ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
Sarthak Garg <quic_sartgarg(a)quicinc.com>
mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
Sebastian Ott <sebott(a)redhat.com>
ACPI: processor: fix acpi_object initialization
tuhaowen <tuhaowen(a)uniontech.com>
PM: sleep: console: Fix the black screen issue
Hsin-Te Yuan <yuanhsinte(a)chromium.org>
thermal: sysfs: Return ENODATA instead of EAGAIN for reads
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
Zhu Qiyu <qiyuzhu2(a)amd.com>
ACPI: PRM: Reduce unnecessary printing to avoid user confusion
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
selftests: tracing: Use mutex_unlock for testing glob filter
Aaron Kling <webgeek1234(a)gmail.com>
ARM: tegra: Use I/O memcpy to write to IRAM
Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org>
gpio: tps65912: check the return value of regmap_update_bits()
Thomas Weißschuh <linux(a)weissschuh.net>
tools/nolibc: define time_t in terms of __kernel_old_time_t
David Collins <david.collins(a)oss.qualcomm.com>
thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required
Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com>
ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
Shubhrajyoti Datta <shubhrajyoti.datta(a)amd.com>
EDAC/synopsys: Clear the ECC counters on init
Lifeng Zheng <zhenglifeng1(a)huawei.com>
PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()
Alexander Kochetkov <al.kochet(a)gmail.com>
ARM: rockchip: fix kernel hang during smp initialization
Lifeng Zheng <zhenglifeng1(a)huawei.com>
cpufreq: Exit governor when failed to start old governor
Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org>
gpio: wcd934x: check the return value of regmap_update_bits()
Mario Limonciello <mario.limonciello(a)amd.com>
usb: xhci: Avoid showing errors during surprise removal
Jay Chen <shawn2000100(a)gmail.com>
usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
Mario Limonciello <mario.limonciello(a)amd.com>
usb: xhci: Avoid showing warnings for dying controller
Benson Leung <bleung(a)chromium.org>
usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default
Cynthia Huang <cynthia(a)andestech.com>
selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
Prashant Malani <pmalani(a)google.com>
cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
Su Hui <suhui(a)nfschina.com>
usb: xhci: print xhci->xhc_state when queue_command failed
Al Viro <viro(a)zeniv.linux.org.uk>
securityfs: don't pin dentries twice, once is enough...
Wei Gao <wegao(a)suse.com>
ext2: Handle fiemap on empty files to prevent EINVAL
Rong Zhang <ulin0208(a)gmail.com>
fs/ntfs3: correctly create symlink for relative path
Lizhi Xu <lizhi.xu(a)windriver.com>
fs/ntfs3: Add sanity check for file name
Damien Le Moal <dlemoal(a)kernel.org>
ata: libata-sata: Disallow changing LPM state if not supported
Al Viro <viro(a)zeniv.linux.org.uk>
better lockdep annotations for simple_recursive_removal()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfs: fix not erasing deleted b-tree node issue
Sarah Newman <srn(a)prgmr.com>
drbd: add missing kref_get in handle_write_conflicts
Jan Kara <jack(a)suse.cz>
udf: Verify partition map count
NeilBrown <neil(a)brown.name>
smb/server: avoid deadlock when linking with ReplaceIfExists
Kees Cook <kees(a)kernel.org>
arm64: Handle KCOV __init vs inline mismatches
Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp>
hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
Viacheslav Dubeyko <slava(a)dubeyko.com>
hfs: fix slab-out-of-bounds in hfs_bnode_read()
Jeongjun Park <aha310510(a)gmail.com>
ptp: prevent possible ABBA deadlock in ptp_clock_freerun()
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
cpuidle: governors: menu: Avoid using invalid recent intervals data
Len Brown <len.brown(a)intel.com>
intel_idle: Allow loading ACPI tables for any family
Xin Long <lucien.xin(a)gmail.com>
sctp: linearize cloned gso packets in sctp_rcv
Florian Westphal <fw(a)strlen.de>
netfilter: ctnetlink: fix refcount leak on table dump
Sabrina Dubroca <sd(a)queasysnail.net>
udp: also consider secpath when evaluating ipsec use for checksumming
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
ACPI: processor: perflib: Move problematic pr->performance check
Jiayi Li <lijiayi(a)kylinos.cn>
ACPI: processor: perflib: Fix initial _PPC limit application
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
Documentation: ACPI: Fix parent device references
Jann Horn <jannh(a)google.com>
eventpoll: Fix semi-unbounded recursion
Sasha Levin <sashal(a)kernel.org>
fs: Prevent file descriptor table allocations exceeding INT_MAX
Ma Ke <make24(a)iscas.ac.cn>
sunvdc: Balance device refcount in vdc_port_mpgroup_check
Dai Ngo <dai.ngo(a)oracle.com>
NFSD: detect mismatch of file handle and delegation stateid in OPEN op
Jeff Layton <jlayton(a)kernel.org>
nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
Xu Yang <xu.yang_2(a)nxp.com>
net: usb: asix_devices: add phy_mask for ax88772 mdio bus
Johan Hovold <johan(a)kernel.org>
net: dpaa: fix device leak when querying time stamp info
Johan Hovold <johan(a)kernel.org>
net: gianfar: fix device leak when querying time stamp info
Fedor Pchelkin <pchelkin(a)ispras.ru>
netlink: avoid infinite retry looping in netlink_unicast()
Harald Mommer <harald.mommer(a)oss.qualcomm.com>
gpio: virtio: Fix config space reading.
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Validate UAC3 cluster segment descriptors
Takashi Iwai <tiwai(a)suse.de>
ALSA: usb-audio: Validate UAC3 power domain descriptors, too
Pavel Begunkov <asml.silence(a)gmail.com>
io_uring: don't use int for ABI
Tao Xue <xuetao09(a)huawei.com>
usb: gadget : fix use-after-free in composite_dev_cleanup()
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
Jiaxun Yang <jiaxun.yang(a)flygoat.com>
MIPS: mm: tlb-r4k: Uniquify TLB entries on init
Thorsten Blum <thorsten.blum(a)linux.dev>
ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe()
Ammar Faizi <ammarfaizi2(a)gnuweeb.org>
net: usbnet: Fix the wrong netif_carrier_on() call
John Ernberg <john.ernberg(a)actia.se>
net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
Slark Xiao <slark_xiao(a)163.com>
USB: serial: option: add Foxconn T99W709
Budimir Markovic <markovicbudimir(a)gmail.com>
vsock: Do not allow binding to VMADDR_PORT_ANY
Quang Le <quanglex97(a)gmail.com>
net/packet: fix a race in packet_set_ring() and packet_notifier()
Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com>
selftests/perf_events: Add a mmap() correctness test
Thomas Gleixner <tglx(a)linutronix.de>
perf/core: Prevent VMA split of buffer mappings
Thomas Gleixner <tglx(a)linutronix.de>
perf/core: Exit early on perf_mmap() fail
Thomas Gleixner <tglx(a)linutronix.de>
perf/core: Don't leak AUX buffer refcount on allocation failure
Eric Dumazet <edumazet(a)google.com>
pptp: fix pptp_xmit() error path
Stefan Metzmacher <metze(a)samba.org>
smb: client: let recv_done() cleanup before notifying the callers.
Stefan Metzmacher <metze(a)samba.org>
smb: server: let recv_done() avoid touching data_transfer after cleanup/move
Stefan Metzmacher <metze(a)samba.org>
smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection
Stefan Metzmacher <metze(a)samba.org>
smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already
Stefan Metzmacher <metze(a)samba.org>
smb: server: remove separate empty_recvmsg_queue
Takashi Iwai <tiwai(a)suse.de>
ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out()
Michal Schmidt <mschmidt(a)redhat.com>
benet: fix BUG when creating VFs
Wang Liang <wangliang74(a)huawei.com>
net: drop UFO packets in udp_rcv_segment()
Eric Dumazet <edumazet(a)google.com>
ipv6: reject malicious packets in ipv6_gso_segment()
Christoph Paasch <cpaasch(a)openai.com>
net/mlx5: Correctly set gso_segs when LRO is used
Eric Dumazet <edumazet(a)google.com>
pptp: ensure minimal skb length in pptp_xmit()
Horatiu Vultur <horatiu.vultur(a)microchip.com>
phy: mscc: Fix parsing of unicast frames
Jakub Kicinski <kuba(a)kernel.org>
netpoll: prevent hanging NAPI when netcons gets enabled
Benjamin Coddington <bcodding(a)redhat.com>
NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
Matthew Wilcox (Oracle) <willy(a)infradead.org>
XArray: Add calls to might_alloc()
Olga Kornievskaia <okorniev(a)redhat.com>
NFSv4.2: another fix for listxattr
Trond Myklebust <trond.myklebust(a)hammerspace.com>
NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
Tigran Mkrtchyan <tigran.mkrtchyan(a)desy.de>
pNFS/flexfiles: don't attempt pnfs on fatal DS errors
Timothy Pearson <tpearson(a)raptorengineering.com>
PCI: pnv_php: Fix surprise plug detection and recovery
Timothy Pearson <tpearson(a)raptorengineering.com>
powerpc/eeh: Make EEH driver device hotplug safe
Maciej W. Rozycki <macro(a)orcam.me.uk>
powerpc/eeh: Rely on dev->link_active_reporting
Timothy Pearson <tpearson(a)raptorengineering.com>
powerpc/eeh: Export eeh_unfreeze_pe()
Timothy Pearson <tpearson(a)raptorengineering.com>
PCI: pnv_php: Work around switches with broken presence detection
Timothy Pearson <tpearson(a)raptorengineering.com>
PCI: pnv_php: Clean up allocated IRQs on unplug
Masahiro Yamada <masahiroy(a)kernel.org>
kconfig: qconf: fix ConfigList::updateListAllforAll()
Seunghui Lee <sh043.lee(a)samsung.com>
scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume
Tomas Henzl <thenzl(a)redhat.com>
scsi: mpt3sas: Fix a fw_event memory leak
Chao Yu <chao(a)kernel.org>
f2fs: fix to avoid out-of-boundary access in devs.path
Chao Yu <chao(a)kernel.org>
f2fs: fix to avoid panic in f2fs_evict_inode
Chao Yu <chao(a)kernel.org>
f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
Chao Yu <chao(a)kernel.org>
f2fs: doc: fix wrong quota mount option description
Abinash Singh <abinashlalotra(a)gmail.com>
f2fs: fix KMSAN uninit-value in extent_info usage
Brian Masney <bmasney(a)redhat.com>
rtc: rv3028: fix incorrect maximum clock rate handling
Brian Masney <bmasney(a)redhat.com>
rtc: pcf8563: fix incorrect maximum clock rate handling
Brian Masney <bmasney(a)redhat.com>
rtc: pcf85063: fix incorrect maximum clock rate handling
Brian Masney <bmasney(a)redhat.com>
rtc: hym8563: fix incorrect maximum clock rate handling
Brian Masney <bmasney(a)redhat.com>
rtc: ds1307: fix incorrect maximum clock rate handling
Uros Bizjak <ubizjak(a)gmail.com>
ucount: fix atomic_long_inc_below() argument type
Petr Pavlu <petr.pavlu(a)suse.com>
module: Restore the moduleparam prefix length check
Ryan Lee <ryan.lee(a)canonical.com>
apparmor: ensure WB_HISTORY_SIZE value is a power of 2
Paul Chaignon <paul.chaignon(a)gmail.com>
bpf: Check flow_dissector ctx accesses are aligned
Mike Christie <michael.christie(a)oracle.com>
vhost-scsi: Fix log flooding with target does not exist errors
Balamanikandan Gunasundar <balamanikandan.gunasundar(a)microchip.com>
mtd: rawnand: atmel: set pmecc data setup time
Thomas Fourier <fourier.thomas(a)gmail.com>
mtd: rawnand: rockchip: Add missing check after DMA map
Thomas Fourier <fourier.thomas(a)gmail.com>
mtd: rawnand: atmel: Fix dma_mapping_error() address
Zheng Yu <zheng.yu(a)northwestern.edu>
jfs: fix metapage reference count leak in dbAllocCtl
Chenyuan Yang <chenyuan0y(a)gmail.com>
fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
Giovanni Cabiddu <giovanni.cabiddu(a)intel.com>
crypto: qat - fix seq_file position update in adf_ring_next()
Ben Hutchings <benh(a)debian.org>
sh: Do not use hyphen in exported variable name
Thomas Fourier <fourier.thomas(a)gmail.com>
dmaengine: nbpfaxi: Add missing check after DMA map
Thomas Fourier <fourier.thomas(a)gmail.com>
dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
Dan Carpenter <dan.carpenter(a)linaro.org>
fs/orangefs: Allow 2 more characters in do_c_string()
Manivannan Sadhasivam <mani(a)kernel.org>
PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute
Bard Liao <yung-chuan.liao(a)linux.intel.com>
soundwire: stream: restore params when prepare ports fail
Thomas Fourier <fourier.thomas(a)gmail.com>
crypto: img-hash - Fix dma_unmap_sg() nents value
Thomas Fourier <fourier.thomas(a)gmail.com>
crypto: keembay - Fix dma_unmap_sg() nents value
Ovidiu Panait <ovidiu.panait.oss(a)gmail.com>
hwrng: mtk - handle devm_pm_runtime_enable errors
Dan Carpenter <dan.carpenter(a)linaro.org>
watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
Thomas Fourier <fourier.thomas(a)gmail.com>
scsi: isci: Fix dma_unmap_sg() nents value
Thomas Fourier <fourier.thomas(a)gmail.com>
scsi: mvsas: Fix dma_unmap_sg() nents value
Thomas Fourier <fourier.thomas(a)gmail.com>
scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
Paul Kocialkowski <paulk(a)sys-base.io>
clk: sunxi-ng: v3s: Fix de clock definition
Leo Yan <leo.yan(a)arm.com>
perf tests bp_account: Fix leaked file descriptor
Arnd Bergmann <arnd(a)arndb.de>
kernel: trace: preemptirq_delay_test: use offstack cpu mask
Junxian Huang <huangjunxian6(a)hisilicon.com>
RDMA/hns: Fix -Wframe-larger-than issue
Mengbiao Xiong <xisme1998(a)gmail.com>
crypto: ccp - Fix crash when rebind ccp device for ccp.ko
Thomas Fourier <fourier.thomas(a)gmail.com>
crypto: inside-secure - Fix `dma_unmap_sg()` nents value
Namhyung Kim <namhyung(a)kernel.org>
perf sched: Fix memory leaks for evsel->priv in timehist
Nuno Sá <nuno.sa(a)analog.com>
clk: clk-axi-clkgen: fix fpfd_max frequency for zynq
Yuan Chen <chenyuan(a)kylinos.cn>
pinctrl: sunxi: Fix memory leak on krealloc failure
Jerome Brunet <jbrunet(a)baylibre.com>
PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails
Charles Han <hanchunchao(a)inspur.com>
power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
Charles Han <hanchunchao(a)inspur.com>
power: supply: cpcap-charger: Fix null check for power_supply_get_by_name
Rohit Visavalia <rohit.visavalia(a)amd.com>
clk: xilinx: vcu: unregister pll_post only if registered correctly
James Cowgill <james.cowgill(a)blaize.com>
media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check
Henry Martin <bsdhenrymartin(a)gmail.com>
clk: davinci: Add NULL check in davinci_lpsc_clk_register()
Ivan Stepchenko <sid(a)itb.spb.ru>
mtd: fix possible integer overflow in erase_xfer()
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: marvell/cesa - Fix engine load inaccuracy
Hans Zhang <18255117159(a)163.com>
PCI: rockchip-host: Fix "Unexpected Completion" log message
Stanislav Fomichev <sdf(a)fomichev.me>
vrf: Drop existing dst reference in vrf_ip6_input_dst
Xiumei Mu <xmu(a)redhat.com>
selftests: rtnetlink.sh: remove esp4_offload after test
Florian Westphal <fw(a)strlen.de>
netfilter: xt_nfacct: don't assume acct name is null-terminated
Jimmy Assarsson <extja(a)kvaser.com>
can: kvaser_usb: Assign netdev.dev_port based on device channel index
Jimmy Assarsson <extja(a)kvaser.com>
can: kvaser_pciefd: Store device channel index
Gokul Sivakumar <gokulkumar.sivakumar(a)infineon.com>
wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE
Remi Pommarel <repk(a)triplefau.lt>
Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
Remi Pommarel <repk(a)triplefau.lt>
wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key()
Alexander Wetzel <Alexander(a)wetzel-home.de>
wifi: mac80211: Don't call fq_flow_idx() for management frames
Thomas Fourier <fourier.thomas(a)gmail.com>
mwl8k: Add missing check after DMA map
Martin Kaistra <martin.kaistra(a)linutronix.de>
wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
Juergen Gross <jgross(a)suse.com>
xen/gntdev: remove struct gntdev_copy_batch from stack
Eric Dumazet <edumazet(a)google.com>
net_sched: act_ctinfo: use atomic64_t for three counters
William Liu <will(a)willsroot.io>
net/sched: Restrict conditions for adding duplicating netems to qdisc tree
Tiwei Bie <tiwei.btw(a)antgroup.com>
um: rtc: Avoid shadowing err in uml_rtc_start()
Johan Korsnes <johan.korsnes(a)gmail.com>
arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
Fedor Pchelkin <pchelkin(a)ispras.ru>
netfilter: nf_tables: adjust lockdep assertions handling
Fedor Pchelkin <pchelkin(a)ispras.ru>
drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
Finn Thain <fthain(a)linux-m68k.org>
m68k: Don't unregister boot console needlessly
Stav Aviram <saviram(a)nvidia.com>
net/mlx5: Check device memory pointer before usage
xin.guo <guoxin0309(a)gmail.com>
tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
Sergey Senozhatsky <senozhatsky(a)chromium.org>
wifi: ath11k: clear initialized flag for deinit-ed srng lists
Jiasheng Jiang <jiasheng(a)iscas.ac.cn>
iwlwifi: Add missing check for alloc_ordered_workqueue
Xiu Jianfeng <xiujianfeng(a)huawei.com>
wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
Daniil Dulov <d.dulov(a)aladdin.ru>
wifi: rtl818x: Kill URBs before clearing tx status queue
Arnd Bergmann <arnd(a)arndb.de>
caif: reduce stack size, again
Yuan Chen <chenyuan(a)kylinos.cn>
bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
Jiayuan Chen <jiayuan.chen(a)linux.dev>
bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
Jiayuan Chen <jiayuan.chen(a)linux.dev>
bpf, sockmap: Fix psock incorrectly pointing to sk
Andy Yan <andy.yan(a)rock-chips.com>
drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed
Steven Rostedt <rostedt(a)goodmis.org>
selftests/tracing: Fix false failure of subsystem event test
Alok Tiwari <alok.a.tiwari(a)oracle.com>
staging: nvec: Fix incorrect null termination of battery manufacturer
Brahmajit Das <listout(a)listout.xyz>
samples: mei: Fix building on musl libc
Lifeng Zheng <zhenglifeng1(a)huawei.com>
cpufreq: Init policy->rwsem before it may be possibly used
Lifeng Zheng <zhenglifeng1(a)huawei.com>
cpufreq: Initialize cpufreq-based frequency-invariance later
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode
Lifeng Zheng <zhenglifeng1(a)huawei.com>
PM / devfreq: Check governor before using governor->name
Adam Ford <aford173(a)gmail.com>
arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed
Adam Ford <aford173(a)gmail.com>
arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed
Annette Kobou <annette.kobou(a)kontron.de>
ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
Albin Törnqvist <albin.tornqvist(a)codiax.se>
arm: dts: ti: omap: Fixup pinheader typo
Lucas De Marchi <lucas.demarchi(a)intel.com>
usb: early: xhci-dbc: Fix early_ioremap leak
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Revert "vmci: Prevent the dispatching of uninitialized payloads"
Denis OSTERLAND-HEIM <denis.osterland(a)diehl.com>
pps: fix poll support
Lizhi Xu <lizhi.xu(a)windriver.com>
vmci: Prevent the dispatching of uninitialized payloads
Abdun Nihaal <abdun.nihaal(a)gmail.com>
staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
Charalampos Mitrodimas <charmitro(a)posteo.net>
usb: misc: apple-mfi-fastcharge: Make power supply names unique
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
ARM: dts: vfxxx: Correctly use two tuples for timer address
Dmitry Vyukov <dvyukov(a)google.com>
selftests: Fix errno checking in syscall_user_dispatch test
Arnd Bergmann <arnd(a)arndb.de>
ASoC: ops: dynamically allocate struct snd_ctl_elem_value
Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com>
ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask()
Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com>
Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
Yangtao Li <frank.li(a)vivo.com>
hfsplus: remove mutex_lock check in hfsplus_free_extents
RubenKelevra <rubenkelevra(a)gmail.com>
fs_context: fix parameter name in infofc() macro
Arnd Bergmann <arnd(a)arndb.de>
ASoC: Intel: fix SND_SOC_SOF dependencies
Arnd Bergmann <arnd(a)arndb.de>
ethernet: intel: fix building with large NR_CPUS
Xu Yang <xu.yang_2(a)nxp.com>
usb: phy: mxs: disconnect line when USB charger is attached
Xu Yang <xu.yang_2(a)nxp.com>
usb: chipidea: add USB PHY event
Daniel Dadap <ddadap(a)nvidia.com>
ALSA: hda: Add missing NVIDIA HDA codec IDs
Ian Abbott <abbotti(a)mev.co.uk>
comedi: comedi_test: Fix possible deletion of uninitialized timers
Dmitry Antipov <dmantipov(a)yandex.ru>
jfs: reject on-disk inodes of an unsupported type
Michael Zhivich <mzhivich(a)akamai.com>
x86/bugs: Fix use of possibly uninit value in amd_check_tsa_microcode()
RD Babiera <rdbabiera(a)google.com>
usb: typec: tcpm: apply vbus before data bringup in tcpm_src_attach
Michael Grzeschik <m.grzeschik(a)pengutronix.de>
usb: typec: tcpm: allow switching to mode accessory to mux properly
Michael Grzeschik <m.grzeschik(a)pengutronix.de>
usb: typec: tcpm: allow to use sink in accessory mode
Harry Yoo <harry.yoo(a)oracle.com>
mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
Ryusuke Konishi <konishi.ryusuke(a)gmail.com>
nilfs2: reject invalid file types when reading inodes
Praveen Kaligineedi <pkaligineedi(a)google.com>
gve: Fix stuck TX queue for DQ queue format
Jacek Kowalski <jacek(a)jacekk.info>
e1000e: ignore uninitialized checksum word on tgp
Jacek Kowalski <jacek(a)jacekk.info>
e1000e: disregard NVM checksum on tgp when valid checksum bit is not set
Ma Ke <make24(a)iscas.ac.cn>
dpaa2-switch: Fix device reference count leak in MAC endpoint handling
Ma Ke <make24(a)iscas.ac.cn>
dpaa2-eth: Fix device reference count leak in MAC endpoint handling
Dawid Rezler <dawidrezler.patches(a)gmail.com>
ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx
Ma Ke <make24(a)iscas.ac.cn>
bus: fsl-mc: Fix potential double device reference in fsl_mc_get_endpoint()
Viresh Kumar <viresh.kumar(a)linaro.org>
i2c: virtio: Avoid hang by using interruptible completion wait
Yang Xiwen <forbidden405(a)outlook.com>
i2c: qup: jump out of the loop in case of timeout
Rong Zhang <i(a)rong.moe>
platform/x86: ideapad-laptop: Fix kbd backlight not remembered among boots
Jian Shen <shenjian15(a)huawei.com>
net: hns3: fixed vf get max channels bug
Yonglong Liu <liuyonglong(a)huawei.com>
net: hns3: disable interrupt when ptp init failed
Jian Shen <shenjian15(a)huawei.com>
net: hns3: fix concurrent setting vlan filter issue
Xiang Mei <xmei5(a)asu.edu>
net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
Kito Xu (veritas501) <hxzene(a)gmail.com>
net: appletalk: Fix use-after-free in AARP proxy probe
Dennis Chen <dechen(a)redhat.com>
i40e: report VF tx_dropped with tx_errors instead of tx_discards
Yajun Deng <yajun.deng(a)linux.dev>
i40e: Add rx_missed_errors for buffer exhaustion
Abdun Nihaal <abdun.nihaal(a)gmail.com>
regmap: fix potential memory leak of regmap_bus
Xilin Wu <sophon(a)radxa.com>
interconnect: qcom: sc7280: Add missing num_links to xm_pcie3_1 node
Maor Gottlieb <maorg(a)nvidia.com>
RDMA/core: Rate limit GID cache warning messages
Alessandro Carminati <acarmina(a)redhat.com>
regulator: core: fix NULL dereference on unbind due to stale coupling data
Fabrice Gasnier <fabrice.gasnier(a)foss.st.com>
Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT
Peter Zijlstra <peterz(a)infradead.org>
x86: Pin task-stack in __get_wchan()
Peter Zijlstra <peterz(a)infradead.org>
x86: Fix __get_wchan() for !STACKTRACE
Kees Cook <keescook(a)chromium.org>
sched: Add wrapper for get_wchan() to keep task blocked
Qi Zheng <zhengqi.arch(a)bytedance.com>
x86: Fix get_wchan() to support the ORC unwinder
Jiayuan Chen <jiayuan.chen(a)linux.dev>
bpf, sockmap: Fix panic when calling skb_linearize
Kurt Borja <kuurtb(a)gmail.com>
platform/x86: think-lmi: Fix kobject cleanup
Zhang Rui <rui.zhang(a)intel.com>
powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be changed
Alexander Gordeev <agordeev(a)linux.ibm.com>
mm/vmalloc: leave lazy MMU mode on PTE mapping error
Arun Raghavan <arun(a)asymptotic.io>
ASoC: fsl_sai: Force a software reset when starting in consumer mode
Krishna Kurapati <krishna.kurapati(a)oss.qualcomm.com>
usb: dwc3: qcom: Don't leave BCR asserted
Drew Hamilton <drew.hamilton(a)zetier.com>
usb: musb: fix gadget state on disconnect
Paul Cercueil <paul(a)crapouillou.net>
usb: musb: Add and use inline functions musb_{get,set}_state
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: hub: Fix flushing of delayed work used for post resume purposes
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: hub: fix detection of high tier USB3 devices behind suspended hubs
Al Viro <viro(a)zeniv.linux.org.uk>
clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
Aruna Ramakrishna <aruna.ramakrishna(a)oracle.com>
sched: Change nr_uninterruptible type to unsigned long
William Liu <will(a)willsroot.io>
net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
Joseph Huang <Joseph.Huang(a)garmin.com>
net: bridge: Do not offload IGMP/MLD messages
Dong Chenchen <dongchenchen2(a)huawei.com>
net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
Yue Haibing <yuehaibing(a)huawei.com>
ipv6: mcast: Delay put pmc->idev in mld_del_delrec()
Christoph Paasch <cpaasch(a)openai.com>
net/mlx5: Correctly set gso_size when LRO is used
Ben Ben-Ishay <benishay(a)nvidia.com>
net/mlx5e: Add support to klm_umr_wqe
Tariq Toukan <tariqt(a)nvidia.com>
lib: bitmap: Introduce node-aware alloc API
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: SMP: If an unallowed command is received consider it a failure
Kuniyuki Iwashima <kuniyu(a)google.com>
Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
Oliver Neukum <oneukum(a)suse.com>
usb: net: sierra: check for no status endpoint
Marius Zachmann <mail(a)mariuszachmann.de>
hwmon: (corsair-cpro) Validate the size of the received input buffer
Paolo Abeni <pabeni(a)redhat.com>
selftests: net: increase inter-packet timeout in udpgro.sh
Hangbin Liu <liuhangbin(a)gmail.com>
selftests: udpgro: report error when receive failed
Yu Kuai <yukuai3(a)huawei.com>
nvme: fix misaccounting of nvme-mpath inflight I/O
Wang Zhaolong <wangzhaolong(a)huaweicloud.com>
smb: client: fix use-after-free in cifs_oplock_break
Sam Shih <sam.shih(a)mediatek.com>
pinctrl: mediatek: moore: check if pin_desc is valid before use
Kuniyuki Iwashima <kuniyu(a)google.com>
rpl: Fix use-after-free in rpl_do_srh_inline().
Xiang Mei <xmei5(a)asu.edu>
net/sched: sch_qfq: Fix race condition on qfq_aggregate
Alok Tiwari <alok.a.tiwari(a)oracle.com>
net: emaclite: Fix missing pointer increment in aligned_read()
Paul Chaignon <paul.chaignon(a)gmail.com>
bpf: Reject %p% format string in bprintf-like helpers
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fix initialization of data for instructions that write to subdevice
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fix some signed shift left operations
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
Ian Abbott <abbotti(a)mev.co.uk>
comedi: das6402: Fix bit shift out of bounds
Ian Abbott <abbotti(a)mev.co.uk>
comedi: das16m1: Fix bit shift out of bounds
Ian Abbott <abbotti(a)mev.co.uk>
comedi: aio_iiro_16: Fix bit shift out of bounds
Ian Abbott <abbotti(a)mev.co.uk>
comedi: pcl812: Fix bit shift out of bounds
Chen Ni <nichen(a)iscas.ac.cn>
iio: adc: stm32-adc: Fix race in installing chained IRQ handler
Fabio Estevam <festevam(a)denx.de>
iio: adc: max1363: Reorder mode_list[] entries
Fabio Estevam <festevam(a)denx.de>
iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
Andrew Jeffery <andrew(a)codeconstruct.com.au>
soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
Andrew Jeffery <andrew(a)codeconstruct.com.au>
soc: aspeed: lpc-snoop: Cleanup resources in stack-order
Maulik Shah <maulik.shah(a)oss.qualcomm.com>
pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
Judith Mendez <jm(a)ti.com>
mmc: sdhci_am654: Workaround for Errata i2312
Edson Juliano Drosdeck <edson.drosdeck(a)gmail.com>
mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
Thomas Fourier <fourier.thomas(a)gmail.com>
mmc: bcm2835: Fix dma_unmap_sg() nents value
Nathan Chancellor <nathan(a)kernel.org>
memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
Jan Kara <jack(a)suse.cz>
isofs: Verify inode mode when loading from disk
Dan Carpenter <dan.carpenter(a)linaro.org>
dmaengine: nbpfaxi: Fix memory corruption in probe()
Yun Lu <luyun(a)kylinos.cn>
af_packet: fix soft lockup issue caused by tpacket_snd()
Yun Lu <luyun(a)kylinos.cn>
af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
Nathan Chancellor <nathan(a)kernel.org>
phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
Steven Rostedt <rostedt(a)goodmis.org>
tracing: Add down_write(trace_event_sem) when adding trace event
Benjamin Tissoires <bentiss(a)kernel.org>
HID: core: do not bypass hid_hw_raw_request
Benjamin Tissoires <bentiss(a)kernel.org>
HID: core: ensure __hid_request reserves the report ID as the first byte
Benjamin Tissoires <bentiss(a)kernel.org>
HID: core: ensure the allocated report buffer can contain the reserved report ID
Thomas Fourier <fourier.thomas(a)gmail.com>
pch_uart: Fix dma_sync_sg_for_device() nents value
Nilton Perim Neto <niltonperimneto(a)gmail.com>
Input: xpad - set correct controller type for Acer NGR200
Alok Tiwari <alok.a.tiwari(a)oracle.com>
thunderbolt: Fix bit masking in tb_dp_port_set_hops()
Clément Le Goffic <clement.legoffic(a)foss.st.com>
i2c: stm32: fix the device used for the DMA map
Xinyu Liu <1171169449(a)qq.com>
usb: gadget: configfs: Fix OOB read on empty string write
Ryan Mann (NDI) <rmann(a)ndigital.com>
USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
Slark Xiao <slark_xiao(a)163.com>
USB: serial: option: add Foxconn T99W640
Fabio Porcedda <fabio.porcedda(a)gmail.com>
USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
Wayne Chang <waynec(a)nvidia.com>
phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode
-------------
Diffstat:
Documentation/filesystems/f2fs.rst | 6 +-
Documentation/firmware-guide/acpi/i2c-muxes.rst | 8 +-
Documentation/memory-barriers.txt | 11 +-
Documentation/networking/mptcp-sysctl.rst | 2 +
Makefile | 6 +-
arch/alpha/include/asm/processor.h | 2 +-
arch/alpha/kernel/process.c | 5 +-
arch/arc/include/asm/processor.h | 2 +-
arch/arc/kernel/stacktrace.c | 4 +-
arch/arm/Makefile | 2 +-
arch/arm/boot/dts/am335x-boneblack.dts | 2 +-
arch/arm/boot/dts/imx6ul-kontron-n6x1x-s.dtsi | 1 -
arch/arm/boot/dts/vfxxx.dtsi | 2 +-
arch/arm/include/asm/processor.h | 2 +-
arch/arm/kernel/process.c | 4 +-
arch/arm/mach-rockchip/platsmp.c | 15 +-
arch/arm/mach-tegra/reset.c | 2 +-
.../boot/dts/freescale/imx8mm-beacon-som.dtsi | 2 +
.../boot/dts/freescale/imx8mn-beacon-som.dtsi | 2 +
arch/arm64/include/asm/acpi.h | 2 +-
arch/arm64/include/asm/processor.h | 2 +-
arch/arm64/kernel/entry.S | 6 +
arch/arm64/kernel/fpsimd.c | 4 +-
arch/arm64/kernel/process.c | 4 +-
arch/arm64/kernel/traps.c | 1 +
arch/arm64/mm/fault.c | 1 +
arch/arm64/mm/ptdump_debugfs.c | 3 -
arch/csky/include/asm/processor.h | 2 +-
arch/csky/kernel/stacktrace.c | 5 +-
arch/h8300/include/asm/processor.h | 2 +-
arch/h8300/kernel/process.c | 5 +-
arch/hexagon/include/asm/processor.h | 2 +-
arch/hexagon/kernel/process.c | 4 +-
arch/ia64/include/asm/processor.h | 2 +-
arch/ia64/kernel/process.c | 5 +-
arch/m68k/Kconfig.debug | 2 +-
arch/m68k/include/asm/processor.h | 2 +-
arch/m68k/kernel/early_printk.c | 42 +--
arch/m68k/kernel/head.S | 39 ++-
arch/m68k/kernel/process.c | 4 +-
arch/microblaze/include/asm/processor.h | 2 +-
arch/microblaze/kernel/process.c | 2 +-
arch/mips/crypto/chacha-core.S | 20 +-
arch/mips/include/asm/processor.h | 2 +-
arch/mips/include/asm/vpe.h | 8 +
arch/mips/kernel/process.c | 24 +-
arch/mips/mm/tlb-r4k.c | 56 +++-
arch/nds32/include/asm/processor.h | 2 +-
arch/nds32/kernel/process.c | 7 +-
arch/nios2/include/asm/processor.h | 2 +-
arch/nios2/kernel/process.c | 5 +-
arch/openrisc/include/asm/processor.h | 2 +-
arch/openrisc/kernel/process.c | 2 +-
arch/parisc/Makefile | 2 +-
arch/parisc/include/asm/processor.h | 2 +-
arch/parisc/kernel/process.c | 5 +-
arch/powerpc/configs/ppc6xx_defconfig | 1 -
arch/powerpc/include/asm/processor.h | 2 +-
arch/powerpc/kernel/eeh.c | 1 +
arch/powerpc/kernel/eeh_driver.c | 48 ++--
arch/powerpc/kernel/eeh_pe.c | 11 +-
arch/powerpc/kernel/pci-hotplug.c | 3 +
arch/powerpc/kernel/process.c | 9 +-
arch/powerpc/platforms/512x/mpc512x_lpbfifo.c | 6 +-
arch/riscv/include/asm/processor.h | 2 +-
arch/riscv/kernel/stacktrace.c | 12 +-
arch/s390/hypfs/hypfs_dbfs.c | 19 +-
arch/s390/include/asm/processor.h | 2 +-
arch/s390/include/asm/timex.h | 13 +-
arch/s390/kernel/process.c | 4 +-
arch/s390/kernel/time.c | 2 +-
arch/s390/mm/dump_pagetables.c | 2 -
arch/sh/Makefile | 10 +-
arch/sh/boot/compressed/Makefile | 4 +-
arch/sh/boot/romimage/Makefile | 4 +-
arch/sh/include/asm/processor_32.h | 2 +-
arch/sh/kernel/process_32.c | 5 +-
arch/sparc/include/asm/processor_32.h | 2 +-
arch/sparc/include/asm/processor_64.h | 2 +-
arch/sparc/kernel/process_32.c | 5 +-
arch/sparc/kernel/process_64.c | 5 +-
arch/um/drivers/rtc_user.c | 2 +-
arch/um/include/asm/processor-generic.h | 2 +-
arch/um/kernel/process.c | 5 +-
arch/x86/include/asm/processor.h | 2 +-
arch/x86/include/asm/xen/hypercall.h | 6 +-
arch/x86/kernel/cpu/amd.c | 2 +
arch/x86/kernel/cpu/bugs.c | 5 +-
arch/x86/kernel/cpu/hygon.c | 3 +
arch/x86/kernel/cpu/mce/amd.c | 13 +-
arch/x86/kernel/process.c | 62 ++---
arch/x86/kvm/vmx/vmx.c | 5 +-
arch/x86/mm/extable.c | 5 +-
arch/xtensa/include/asm/processor.h | 2 +-
arch/xtensa/kernel/process.c | 5 +-
block/blk-settings.c | 2 +-
drivers/acpi/acpi_processor.c | 2 +-
drivers/acpi/apei/ghes.c | 2 +
drivers/acpi/prmt.c | 26 +-
drivers/acpi/processor_idle.c | 4 +-
drivers/acpi/processor_perflib.c | 11 +
drivers/ata/Kconfig | 35 ++-
drivers/ata/libata-sata.c | 5 +
drivers/ata/libata-scsi.c | 20 +-
drivers/base/power/domain_governor.c | 18 +-
drivers/base/power/runtime.c | 5 +
drivers/base/regmap/regmap.c | 2 +
drivers/block/drbd/drbd_receiver.c | 6 +-
drivers/block/sunvdc.c | 4 +-
drivers/bus/fsl-mc/fsl-mc-bus.c | 19 +-
drivers/bus/mhi/host/boot.c | 8 +-
drivers/bus/mhi/host/internal.h | 4 +-
drivers/bus/mhi/host/main.c | 15 +-
drivers/char/hw_random/mtk-rng.c | 4 +-
drivers/char/ipmi/ipmi_msghandler.c | 8 +-
drivers/char/ipmi/ipmi_watchdog.c | 59 +++--
drivers/clk/clk-axi-clkgen.c | 2 +-
drivers/clk/davinci/psc.c | 5 +
drivers/clk/sunxi-ng/ccu-sun8i-v3s.c | 3 +-
drivers/clk/xilinx/xlnx_vcu.c | 4 +-
drivers/comedi/comedi_fops.c | 68 ++++-
drivers/comedi/comedi_internal.h | 1 +
drivers/comedi/drivers.c | 47 ++--
drivers/comedi/drivers/aio_iiro_16.c | 3 +-
drivers/comedi/drivers/comedi_test.c | 2 +-
drivers/comedi/drivers/das16m1.c | 3 +-
drivers/comedi/drivers/das6402.c | 3 +-
drivers/comedi/drivers/pcl726.c | 3 +-
drivers/comedi/drivers/pcl812.c | 3 +-
drivers/cpufreq/armada-8k-cpufreq.c | 2 +-
drivers/cpufreq/cppc_cpufreq.c | 2 +-
drivers/cpufreq/cpufreq.c | 29 +-
drivers/cpufreq/intel_pstate.c | 4 +-
drivers/cpuidle/governors/menu.c | 21 +-
drivers/crypto/ccp/ccp-debugfs.c | 3 +
drivers/crypto/hisilicon/hpre/hpre_crypto.c | 8 +-
drivers/crypto/img-hash.c | 2 +-
drivers/crypto/inside-secure/safexcel_hash.c | 8 +-
drivers/crypto/keembay/keembay-ocs-hcu-core.c | 8 +-
drivers/crypto/marvell/cesa/cipher.c | 4 +-
drivers/crypto/marvell/cesa/hash.c | 5 +-
.../crypto/marvell/octeontx2/otx2_cptpf_ucode.c | 16 +-
.../crypto/qat/qat_common/adf_transport_debug.c | 4 +-
drivers/devfreq/devfreq.c | 10 +-
drivers/devfreq/governor_userspace.c | 6 +-
drivers/dma/mv_xor.c | 21 +-
drivers/dma/nbpfaxi.c | 24 +-
drivers/edac/synopsys_edac.c | 93 +++----
drivers/fpga/zynq-fpga.c | 10 +-
drivers/gpio/gpio-tps65912.c | 7 +-
drivers/gpio/gpio-virtio.c | 9 +-
drivers/gpio/gpio-wcd934x.c | 7 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_csa.c | 4 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 3 +
.../gpu/drm/amd/display/dc/bios/command_table.c | 2 +-
drivers/gpu/drm/amd/display/dc/clk_mgr/clk_mgr.c | 1 -
.../amd/display/dc/clk_mgr/dce100/dce_clk_mgr.c | 2 -
.../amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 40 +--
.../amd/display/dc/clk_mgr/dce60/dce60_clk_mgr.c | 31 +--
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 11 +-
.../gpu/drm/amd/display/modules/hdcp/hdcp_psp.c | 3 +
.../gpu/drm/amd/pm/powerplay/hwmgr/smu_helper.c | 2 +-
drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 6 +
drivers/gpu/drm/amd/pm/swsmu/smu11/vangogh_ppt.c | 37 ++-
drivers/gpu/drm/drm_dp_helper.c | 2 +-
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 4 +-
drivers/gpu/drm/msm/msm_gem.c | 3 +-
drivers/gpu/drm/rockchip/rockchip_drm_fb.c | 9 +-
drivers/gpu/drm/scheduler/sched_entity.c | 27 +-
drivers/gpu/drm/ttm/ttm_pool.c | 8 +-
drivers/gpu/drm/ttm/ttm_resource.c | 3 +
drivers/hid/hid-core.c | 21 +-
drivers/hid/hid-magicmouse.c | 51 ++--
drivers/hwmon/corsair-cpro.c | 5 +
drivers/hwmon/gsc-hwmon.c | 4 +-
drivers/i2c/busses/i2c-qup.c | 4 +-
drivers/i2c/busses/i2c-stm32.c | 8 +-
drivers/i2c/busses/i2c-stm32f7.c | 4 +-
drivers/i2c/busses/i2c-virtio.c | 15 +-
drivers/i2c/i2c-core-acpi.c | 1 +
drivers/i3c/internals.h | 1 +
drivers/i3c/master.c | 2 +-
drivers/idle/intel_idle.c | 2 +-
drivers/iio/adc/ad7768-1.c | 23 +-
drivers/iio/adc/ad_sigma_delta.c | 4 +-
drivers/iio/adc/max1363.c | 43 ++-
drivers/iio/adc/stm32-adc-core.c | 7 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_temp.c | 6 +-
drivers/iio/light/as73211.c | 2 +-
drivers/iio/light/hid-sensor-prox.c | 8 +-
drivers/iio/pressure/bmp280-core.c | 9 +-
drivers/iio/proximity/isl29501.c | 14 +-
drivers/infiniband/core/cache.c | 4 +-
drivers/infiniband/core/nldev.c | 22 +-
drivers/infiniband/hw/bnxt_re/qplib_res.c | 2 +
drivers/infiniband/hw/hfi1/affinity.c | 44 +--
drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 15 +-
drivers/infiniband/hw/mlx5/dm.c | 2 +-
drivers/input/joystick/xpad.c | 2 +-
drivers/input/keyboard/gpio_keys.c | 4 +-
drivers/interconnect/qcom/sc7280.c | 1 +
drivers/iommu/amd/init.c | 4 +-
drivers/leds/leds-lp50xx.c | 11 +-
drivers/md/dm-ps-historical-service-time.c | 4 +-
drivers/md/dm-ps-queue-length.c | 4 +-
drivers/md/dm-ps-round-robin.c | 4 +-
drivers/md/dm-ps-service-time.c | 4 +-
drivers/md/dm-zoned-target.c | 2 +-
drivers/media/cec/usb/rainshadow/rainshadow-cec.c | 3 +-
drivers/media/dvb-frontends/dib7000p.c | 10 +
drivers/media/i2c/hi556.c | 26 +-
drivers/media/i2c/ov2659.c | 3 +-
drivers/media/i2c/tc358743.c | 86 +++---
drivers/media/platform/qcom/camss/camss.c | 10 +-
drivers/media/platform/qcom/venus/core.c | 21 +-
drivers/media/platform/qcom/venus/core.h | 2 +
drivers/media/platform/qcom/venus/dbgfs.c | 9 +
drivers/media/platform/qcom/venus/dbgfs.h | 13 +
drivers/media/platform/qcom/venus/hfi_venus.c | 5 +
drivers/media/platform/qcom/venus/vdec.c | 5 +-
drivers/media/platform/qcom/venus/venc.c | 5 +-
drivers/media/usb/gspca/vicam.c | 10 +-
drivers/media/usb/hdpvr/hdpvr-i2c.c | 6 +
drivers/media/usb/usbtv/usbtv-video.c | 4 +
drivers/media/usb/uvc/uvc_driver.c | 3 +
drivers/media/usb/uvc/uvc_video.c | 21 +-
drivers/media/v4l2-core/v4l2-common.c | 8 +-
drivers/media/v4l2-core/v4l2-ctrls-core.c | 9 +-
drivers/memstick/core/memstick.c | 3 +-
drivers/memstick/host/rtsx_usb_ms.c | 1 +
drivers/misc/cardreader/rtsx_usb.c | 16 +-
drivers/mmc/host/bcm2835.c | 3 +-
drivers/mmc/host/rtsx_usb_sdmmc.c | 4 +-
drivers/mmc/host/sdhci-msm.c | 14 +
drivers/mmc/host/sdhci-pci-core.c | 3 +-
drivers/mmc/host/sdhci-pci-gli.c | 4 +-
drivers/mmc/host/sdhci_am654.c | 9 +-
drivers/most/core.c | 2 +-
drivers/mtd/ftl.c | 2 +-
drivers/mtd/nand/raw/atmel/nand-controller.c | 2 +-
drivers/mtd/nand/raw/atmel/pmecc.c | 6 +
drivers/mtd/nand/raw/fsmc_nand.c | 2 +
drivers/mtd/nand/raw/rockchip-nand-controller.c | 15 ++
drivers/mtd/nand/spi/core.c | 5 +-
drivers/net/bonding/bond_3ad.c | 25 ++
drivers/net/bonding/bond_options.c | 1 +
drivers/net/can/kvaser_pciefd.c | 1 +
drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 1 +
drivers/net/dsa/b53/b53_common.c | 63 +++--
drivers/net/dsa/b53/b53_regs.h | 2 +
drivers/net/ethernet/agere/et131x.c | 36 +++
drivers/net/ethernet/aquantia/atlantic/aq_hw.h | 2 +
.../aquantia/atlantic/hw_atl2/hw_atl2_utils_fw.c | 39 +++
drivers/net/ethernet/atheros/ag71xx.c | 9 +
drivers/net/ethernet/cavium/thunder/thunder_bgx.c | 4 +-
drivers/net/ethernet/emulex/benet/be_cmds.c | 2 +-
drivers/net/ethernet/emulex/benet/be_main.c | 8 +-
drivers/net/ethernet/freescale/dpaa/dpaa_eth.c | 2 -
drivers/net/ethernet/freescale/dpaa/dpaa_ethtool.c | 4 +-
drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c | 15 +-
.../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 15 +-
drivers/net/ethernet/freescale/enetc/enetc_pf.c | 14 +-
drivers/net/ethernet/freescale/fec_main.c | 34 ++-
drivers/net/ethernet/freescale/gianfar_ethtool.c | 4 +-
drivers/net/ethernet/google/gve/gve_adminq.c | 1 +
drivers/net/ethernet/google/gve/gve_main.c | 67 ++---
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 36 +--
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_ptp.c | 9 +-
.../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 6 +-
drivers/net/ethernet/intel/e1000e/defines.h | 3 +
drivers/net/ethernet/intel/e1000e/ich8lan.c | 2 +
drivers/net/ethernet/intel/e1000e/nvm.c | 6 +
drivers/net/ethernet/intel/fm10k/fm10k.h | 3 +-
drivers/net/ethernet/intel/i40e/i40e.h | 2 +-
drivers/net/ethernet/intel/i40e/i40e_ethtool.c | 3 +-
drivers/net/ethernet/intel/i40e/i40e_main.c | 18 +-
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 4 +-
drivers/net/ethernet/intel/ice/ice_flex_pipe.c | 2 +
drivers/net/ethernet/intel/igc/igc_main.c | 14 +-
drivers/net/ethernet/intel/ixgbe/ixgbe.h | 3 +-
drivers/net/ethernet/intel/ixgbe/ixgbe_xsk.c | 4 +-
drivers/net/ethernet/mellanox/mlx5/core/en.h | 24 +-
drivers/net/ethernet/mellanox/mlx5/core/en/qos.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 13 +-
drivers/net/ethernet/mellanox/mlx5/core/lib/dm.c | 4 +-
drivers/net/ethernet/mellanox/mlx5/core/main.c | 3 -
drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +
drivers/net/ethernet/mellanox/mlxsw/trap.h | 1 +
drivers/net/ethernet/xilinx/xilinx_emaclite.c | 2 +-
drivers/net/hyperv/hyperv_net.h | 3 +
drivers/net/hyperv/netvsc_drv.c | 29 +-
drivers/net/phy/dp83640.c | 6 +-
drivers/net/phy/mscc/mscc.h | 12 +
drivers/net/phy/mscc/mscc_main.c | 12 +
drivers/net/phy/mscc/mscc_ptp.c | 50 +++-
drivers/net/phy/mscc/mscc_ptp.h | 1 +
drivers/net/phy/nxp-c45-tja11xx.c | 2 +-
drivers/net/phy/smsc.c | 1 +
drivers/net/ppp/ppp_generic.c | 17 +-
drivers/net/ppp/pptp.c | 18 +-
drivers/net/thunderbolt.c | 8 +-
drivers/net/usb/asix_devices.c | 1 +
drivers/net/usb/sierra_net.c | 4 +
drivers/net/usb/usbnet.c | 11 +-
drivers/net/vrf.c | 2 +
drivers/net/wireless/ath/ath11k/hal.c | 25 +-
.../broadcom/brcm80211/brcmfmac/cfg80211.c | 8 +-
.../broadcom/brcm80211/brcmsmac/phy/phy_lcn.c | 2 +-
drivers/net/wireless/intel/iwlegacy/4965-mac.c | 5 +-
drivers/net/wireless/intel/iwlwifi/dvm/main.c | 11 +-
drivers/net/wireless/intel/iwlwifi/dvm/rs.c | 2 +-
drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 7 +-
drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 4 +-
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 2 +-
drivers/net/wireless/marvell/mwl8k.c | 4 +
drivers/net/wireless/realtek/rtl818x/rtl8187/dev.c | 3 +-
.../net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 2 +-
drivers/net/wireless/realtek/rtlwifi/pci.c | 23 +-
drivers/net/xen-netfront.c | 5 -
drivers/nvme/host/core.c | 4 +
drivers/pci/controller/pcie-rockchip-host.c | 2 +-
drivers/pci/controller/vmd.c | 3 +
drivers/pci/endpoint/functions/pci-epf-vntb.c | 4 +-
drivers/pci/endpoint/pci-ep-cfs.c | 1 +
drivers/pci/endpoint/pci-epf-core.c | 2 +-
drivers/pci/hotplug/pnv_php.c | 235 ++++++++++++++--
drivers/pci/pci-acpi.c | 4 +-
drivers/pci/pci.c | 8 +-
drivers/pci/probe.c | 2 +-
drivers/phy/tegra/xusb-tegra186.c | 61 +++--
drivers/pinctrl/mediatek/pinctrl-moore.c | 18 ++
drivers/pinctrl/stm32/pinctrl-stm32.c | 1 +
drivers/pinctrl/sunxi/pinctrl-sunxi.c | 11 +-
drivers/platform/chrome/cros_ec.c | 23 +-
drivers/platform/chrome/cros_ec.h | 2 +-
drivers/platform/chrome/cros_ec_i2c.c | 4 +-
drivers/platform/chrome/cros_ec_lpc.c | 4 +-
drivers/platform/chrome/cros_ec_spi.c | 4 +-
drivers/platform/chrome/cros_ec_typec.c | 4 +-
drivers/platform/x86/ideapad-laptop.c | 2 +-
drivers/platform/x86/think-lmi.c | 27 +-
drivers/platform/x86/thinkpad_acpi.c | 4 +-
drivers/power/supply/cpcap-charger.c | 5 +-
drivers/power/supply/max14577_charger.c | 4 +-
drivers/powercap/intel_rapl_common.c | 23 +-
drivers/pps/clients/pps-gpio.c | 5 +-
drivers/pps/pps.c | 11 +-
drivers/ptp/ptp_private.h | 5 +
drivers/ptp/ptp_vclock.c | 7 +
drivers/pwm/pwm-imx-tpm.c | 9 +
drivers/pwm/pwm-mediatek.c | 78 ++++--
drivers/regulator/core.c | 1 +
drivers/reset/Kconfig | 10 +-
drivers/rtc/rtc-ds1307.c | 17 +-
drivers/rtc/rtc-hym8563.c | 2 +-
drivers/rtc/rtc-pcf85063.c | 2 +-
drivers/rtc/rtc-pcf8563.c | 2 +-
drivers/rtc/rtc-rv3028.c | 2 +-
drivers/scsi/aacraid/comminit.c | 3 +-
drivers/scsi/bfa/bfad_im.c | 1 +
drivers/scsi/ibmvscsi_tgt/libsrp.c | 6 +-
drivers/scsi/isci/request.c | 2 +-
drivers/scsi/libiscsi.c | 3 +-
drivers/scsi/lpfc/lpfc_debugfs.c | 1 -
drivers/scsi/lpfc/lpfc_scsi.c | 4 +
drivers/scsi/mpi3mr/mpi3mr.h | 6 +-
drivers/scsi/mpi3mr/mpi3mr_fw.c | 17 +-
drivers/scsi/mpi3mr/mpi3mr_os.c | 2 +
drivers/scsi/mpt3sas/mpt3sas_scsih.c | 22 +-
drivers/scsi/mvsas/mv_sas.c | 4 +-
drivers/scsi/qla4xxx/ql4_os.c | 2 +
drivers/scsi/scsi_scan.c | 2 +-
drivers/scsi/scsi_transport_sas.c | 62 ++++-
drivers/scsi/ufs/ufs-exynos.c | 4 +-
drivers/scsi/ufs/ufshcd-pci.c | 42 ++-
drivers/scsi/ufs/ufshcd.c | 10 +-
drivers/soc/aspeed/aspeed-lpc-snoop.c | 13 +-
drivers/soc/qcom/mdt_loader.c | 41 +++
drivers/soc/tegra/pmc.c | 51 ++--
drivers/soundwire/stream.c | 2 +-
drivers/staging/fbtft/fbtft-core.c | 1 +
drivers/staging/media/imx/imx-media-csc-scaler.c | 2 +-
drivers/staging/nvec/nvec_power.c | 2 +-
drivers/target/target_core_fabric_lib.c | 65 +++--
drivers/target/target_core_internal.h | 4 +-
drivers/target/target_core_pr.c | 18 +-
drivers/thermal/qcom/qcom-spmi-temp-alarm.c | 43 ++-
drivers/thermal/thermal_sysfs.c | 9 +-
drivers/thunderbolt/domain.c | 2 +-
drivers/thunderbolt/switch.c | 2 +-
drivers/tty/serial/8250/8250_port.c | 3 +-
drivers/tty/serial/pch_uart.c | 2 +-
drivers/tty/vt/defkeymap.c_shipped | 112 ++++++++
drivers/tty/vt/keyboard.c | 2 +-
drivers/usb/atm/cxacru.c | 172 ++++++------
drivers/usb/chipidea/ci.h | 18 +-
drivers/usb/chipidea/udc.c | 10 +
drivers/usb/class/cdc-acm.c | 11 +-
drivers/usb/core/config.c | 10 +-
drivers/usb/core/hcd.c | 8 +-
drivers/usb/core/hub.c | 60 ++++-
drivers/usb/core/hub.h | 1 +
drivers/usb/core/quirks.c | 1 +
drivers/usb/core/urb.c | 2 +-
drivers/usb/dwc3/dwc3-imx8mp.c | 6 +-
drivers/usb/dwc3/dwc3-meson-g12a.c | 3 +
drivers/usb/dwc3/dwc3-qcom.c | 7 +-
drivers/usb/dwc3/ep0.c | 20 +-
drivers/usb/dwc3/gadget.c | 19 +-
drivers/usb/early/xhci-dbc.c | 4 +
drivers/usb/gadget/composite.c | 5 +
drivers/usb/gadget/configfs.c | 2 +
drivers/usb/gadget/udc/renesas_usb3.c | 1 +
drivers/usb/host/xhci-hub.c | 3 +-
drivers/usb/host/xhci-mem.c | 24 +-
drivers/usb/host/xhci-pci-renesas.c | 7 +-
drivers/usb/host/xhci-ring.c | 19 +-
drivers/usb/host/xhci.c | 24 +-
drivers/usb/host/xhci.h | 3 +-
drivers/usb/misc/apple-mfi-fastcharge.c | 24 +-
drivers/usb/musb/musb_core.c | 62 ++---
drivers/usb/musb/musb_core.h | 11 +
drivers/usb/musb/musb_debugfs.c | 6 +-
drivers/usb/musb/musb_gadget.c | 30 ++-
drivers/usb/musb/musb_host.c | 6 +-
drivers/usb/musb/musb_virthub.c | 18 +-
drivers/usb/musb/omap2430.c | 16 +-
drivers/usb/phy/phy-mxs-usb.c | 4 +-
drivers/usb/serial/ftdi_sio.c | 2 +
drivers/usb/serial/ftdi_sio_ids.h | 3 +
drivers/usb/serial/option.c | 7 +
drivers/usb/storage/realtek_cr.c | 2 +-
drivers/usb/storage/unusual_devs.h | 29 ++
drivers/usb/typec/mux/intel_pmc_mux.c | 2 +-
drivers/usb/typec/tcpm/fusb302.c | 8 +
drivers/usb/typec/tcpm/tcpm.c | 64 +++--
drivers/usb/typec/ucsi/psy.c | 2 +-
drivers/usb/typec/ucsi/ucsi.c | 1 +
drivers/usb/typec/ucsi/ucsi.h | 7 +-
drivers/vhost/scsi.c | 4 +-
drivers/vhost/vhost.c | 3 +
drivers/video/console/vgacon.c | 2 +-
drivers/video/fbdev/core/fbcon.c | 9 +-
drivers/video/fbdev/imxfb.c | 9 +-
drivers/watchdog/dw_wdt.c | 2 +
drivers/watchdog/iTCO_wdt.c | 6 +-
drivers/watchdog/sbsa_gwdt.c | 50 +++-
drivers/watchdog/ziirave_wdt.c | 3 +
drivers/xen/gntdev-common.h | 4 +
drivers/xen/gntdev.c | 71 +++--
fs/btrfs/relocation.c | 19 ++
fs/btrfs/tree-log.c | 53 ++--
fs/buffer.c | 2 +-
fs/cifs/cifssmb.c | 10 +
fs/cifs/file.c | 10 +-
fs/cifs/smb2ops.c | 7 +-
fs/cifs/smbdirect.c | 14 +-
fs/eventpoll.c | 60 ++++-
fs/ext2/inode.c | 12 +-
fs/ext4/fsmap.c | 23 +-
fs/ext4/indirect.c | 4 +-
fs/ext4/inline.c | 19 +-
fs/ext4/inode.c | 2 +-
fs/ext4/mballoc.c | 35 ++-
fs/ext4/orphan.c | 5 +-
fs/ext4/super.c | 2 +
fs/f2fs/extent_cache.c | 2 +-
fs/f2fs/f2fs.h | 2 +-
fs/f2fs/inode.c | 28 +-
fs/f2fs/node.c | 10 +
fs/file.c | 15 ++
fs/hfs/bnode.c | 93 +++++++
fs/hfsplus/bnode.c | 92 +++++++
fs/hfsplus/extents.c | 3 -
fs/hfsplus/unicode.c | 7 +
fs/hfsplus/xattr.c | 6 +-
fs/hugetlbfs/inode.c | 2 +-
fs/isofs/inode.c | 9 +-
fs/jbd2/checkpoint.c | 1 +
fs/jfs/file.c | 3 +
fs/jfs/inode.c | 2 +-
fs/jfs/jfs_dmap.c | 10 +-
fs/jfs/jfs_imap.c | 13 +-
fs/ksmbd/smb2pdu.c | 16 +-
fs/ksmbd/smb_common.c | 2 +-
fs/ksmbd/transport_rdma.c | 97 +++----
fs/libfs.c | 4 +-
fs/namespace.c | 39 ++-
fs/nfs/blocklayout/blocklayout.c | 4 +-
fs/nfs/blocklayout/dev.c | 5 +-
fs/nfs/blocklayout/extent_tree.c | 20 +-
fs/nfs/client.c | 44 ++-
fs/nfs/export.c | 11 +-
fs/nfs/flexfilelayout/flexfilelayout.c | 26 +-
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 6 +-
fs/nfs/internal.h | 10 +-
fs/nfs/nfs4client.c | 15 +-
fs/nfs/nfs4proc.c | 12 +-
fs/nfs/pnfs.c | 11 +-
fs/nfsd/nfs4state.c | 34 ++-
fs/nilfs2/inode.c | 9 +-
fs/ntfs3/dir.c | 3 +
fs/ntfs3/file.c | 5 +-
fs/ntfs3/inode.c | 31 ++-
fs/orangefs/orangefs-debugfs.c | 8 +-
fs/squashfs/super.c | 14 +-
fs/udf/super.c | 13 +-
include/asm-generic/barrier.h | 33 +++
include/linux/bitmap.h | 2 +
include/linux/blk_types.h | 8 +-
include/linux/compiler.h | 8 -
include/linux/cpuset.h | 17 ++
include/linux/fs.h | 4 +-
include/linux/fs_context.h | 2 +-
include/linux/if_vlan.h | 6 +-
include/linux/memfd.h | 14 +
include/linux/mlx5/device.h | 1 +
include/linux/mm.h | 76 ++++--
include/linux/mmzone.h | 22 ++
include/linux/moduleparam.h | 5 +-
include/linux/pci.h | 10 +-
include/linux/platform_data/cros_ec_proto.h | 4 +
include/linux/pps_kernel.h | 1 +
include/linux/sched.h | 1 +
include/linux/skbuff.h | 31 ++-
include/linux/usb/usbnet.h | 1 +
include/linux/xarray.h | 15 ++
include/net/bond_3ad.h | 1 +
include/net/cfg80211.h | 2 +-
include/net/mac80211.h | 2 +
include/net/tc_act/tc_ctinfo.h | 6 +-
include/net/udp.h | 24 +-
include/sound/soc-dai.h | 13 +
include/uapi/linux/in6.h | 4 +-
include/uapi/linux/io_uring.h | 2 +-
kernel/bpf/helpers.c | 11 +-
kernel/cgroup/cpuset.c | 23 ++
kernel/events/core.c | 20 +-
kernel/fork.c | 2 +-
kernel/power/console.c | 7 +-
kernel/rcu/tree_plugin.h | 3 +
kernel/sched/core.c | 19 ++
kernel/sched/deadline.c | 4 +-
kernel/sched/loadavg.c | 2 +-
kernel/sched/rt.c | 6 +
kernel/sched/sched.h | 2 +-
kernel/trace/ftrace.c | 19 +-
kernel/trace/preemptirq_delay_test.c | 13 +-
kernel/trace/trace.c | 33 ++-
kernel/trace/trace.h | 8 +-
kernel/trace/trace_events.c | 5 +
kernel/ucount.c | 2 +-
lib/bitmap.c | 13 +
mm/debug_vm_pgtable.c | 9 +-
mm/filemap.c | 2 +-
mm/hmm.c | 2 +-
mm/kmemleak.c | 10 +-
mm/madvise.c | 2 +-
mm/memfd.c | 2 +-
mm/memory-failure.c | 8 +
mm/mmap.c | 10 +-
mm/page_alloc.c | 13 +
mm/ptdump.c | 2 +
mm/shmem.c | 2 +-
mm/vmalloc.c | 17 +-
mm/zsmalloc.c | 3 +
net/8021q/vlan.c | 42 ++-
net/8021q/vlan.h | 1 +
net/appletalk/aarp.c | 24 +-
net/bluetooth/l2cap_core.c | 26 +-
net/bluetooth/l2cap_sock.c | 3 +
net/bluetooth/smp.c | 21 +-
net/bluetooth/smp.h | 1 +
net/bridge/br_multicast.c | 16 ++
net/bridge/br_private.h | 2 +
net/bridge/br_switchdev.c | 3 +
net/caif/cfctrl.c | 294 ++++++++++-----------
net/core/filter.c | 3 +
net/core/netpoll.c | 7 +
net/core/skmsg.c | 57 ++--
net/hsr/hsr_slave.c | 8 +-
net/ipv4/netfilter/nf_reject_ipv4.c | 6 +-
net/ipv4/route.c | 1 -
net/ipv4/tcp_input.c | 3 +-
net/ipv4/udp_offload.c | 2 +-
net/ipv6/addrconf.c | 7 +-
net/ipv6/ip6_offload.c | 4 +-
net/ipv6/mcast.c | 13 +-
net/ipv6/netfilter/nf_reject_ipv6.c | 5 +-
net/ipv6/rpl_iptunnel.c | 8 +-
net/ipv6/seg6_hmac.c | 6 +-
net/mac80211/cfg.c | 13 +-
net/mac80211/mlme.c | 9 +-
net/mac80211/tx.c | 10 +-
net/mctp/af_mctp.c | 28 +-
net/mptcp/options.c | 7 +-
net/mptcp/pm_netlink.c | 14 +-
net/mptcp/protocol.c | 17 +-
net/mptcp/protocol.h | 11 +-
net/mptcp/subflow.c | 20 +-
net/ncsi/internal.h | 2 +-
net/ncsi/ncsi-rsp.c | 1 +
net/netfilter/nf_conntrack_netlink.c | 24 +-
net/netfilter/nf_tables_api.c | 4 +-
net/netfilter/xt_nfacct.c | 4 +-
net/netlink/af_netlink.c | 2 +-
net/packet/af_packet.c | 39 ++-
net/phonet/pep.c | 2 +-
net/sched/act_ctinfo.c | 19 +-
net/sched/sch_cake.c | 14 +-
net/sched/sch_codel.c | 5 +-
net/sched/sch_drr.c | 7 +-
net/sched/sch_ets.c | 46 ++--
net/sched/sch_fq_codel.c | 6 +-
net/sched/sch_hfsc.c | 8 +-
net/sched/sch_htb.c | 19 +-
net/sched/sch_netem.c | 40 +++
net/sched/sch_qfq.c | 40 ++-
net/sctp/input.c | 2 +-
net/tls/tls_sw.c | 13 +
net/vmw_vsock/af_vsock.c | 3 +-
net/wireless/mlme.c | 3 +-
samples/mei/mei-amt-version.c | 2 +-
scripts/kconfig/gconf.c | 8 +-
scripts/kconfig/lxdialog/inputbox.c | 6 +-
scripts/kconfig/lxdialog/menubox.c | 2 +-
scripts/kconfig/nconf.c | 2 +
scripts/kconfig/nconf.gui.c | 1 +
scripts/kconfig/qconf.cc | 2 +-
security/apparmor/include/match.h | 3 +-
security/apparmor/match.c | 1 +
security/inode.c | 2 -
sound/core/pcm_native.c | 19 +-
sound/pci/hda/patch_ca0132.c | 7 +-
sound/pci/hda/patch_hdmi.c | 19 ++
sound/pci/hda/patch_realtek.c | 3 +
sound/pci/intel8x0.c | 2 +-
sound/soc/codecs/hdac_hdmi.c | 10 +-
sound/soc/codecs/rt5640.c | 5 +
sound/soc/fsl/fsl_sai.c | 30 ++-
sound/soc/generic/audio-graph-card.c | 2 +-
sound/soc/intel/boards/Kconfig | 2 +-
sound/soc/soc-core.c | 28 ++
sound/soc/soc-dai.c | 59 +++--
sound/soc/soc-dapm.c | 4 +
sound/soc/soc-ops.c | 28 +-
sound/usb/mixer_quirks.c | 14 +-
sound/usb/mixer_scarlett_gen2.c | 8 +
sound/usb/stream.c | 25 +-
sound/usb/validate.c | 14 +-
sound/x86/intel_hdmi_audio.c | 2 +-
tools/bpf/bpftool/net.c | 15 +-
tools/include/linux/sched/mm.h | 2 +
tools/include/nolibc/std.h | 4 +-
tools/perf/builtin-sched.c | 12 +
tools/perf/tests/bp_account.c | 1 +
tools/perf/util/evsel.c | 11 +
tools/perf/util/evsel.h | 2 +
.../cpupower/utils/idle_monitor/mperf_monitor.c | 4 +-
tools/testing/ktest/ktest.pl | 5 +-
.../ftrace/test.d/event/subsystem-enable.tc | 28 +-
.../ftrace/test.d/ftrace/func-filter-glob.tc | 2 +-
tools/testing/selftests/futex/include/futextest.h | 11 +
tools/testing/selftests/memfd/memfd_test.c | 43 +++
tools/testing/selftests/net/mptcp/Makefile | 3 +-
tools/testing/selftests/net/mptcp/mptcp_connect.c | 28 +-
.../selftests/net/mptcp/mptcp_connect_checksum.sh | 5 +
.../selftests/net/mptcp/mptcp_connect_mmap.sh | 5 +
.../selftests/net/mptcp/mptcp_connect_sendfile.sh | 5 +
tools/testing/selftests/net/mptcp/mptcp_join.sh | 1 +
tools/testing/selftests/net/mptcp/pm_netlink.sh | 1 +
tools/testing/selftests/net/rtnetlink.sh | 6 +
tools/testing/selftests/net/udpgro.sh | 46 ++--
tools/testing/selftests/perf_events/.gitignore | 1 +
tools/testing/selftests/perf_events/Makefile | 2 +-
tools/testing/selftests/perf_events/mmap.c | 236 +++++++++++++++++
.../selftests/syscall_user_dispatch/sud_test.c | 50 ++--
677 files changed, 6081 insertions(+), 2515 deletions(-)
3 weeks, 2 days
- 7
- 650
[PATCH 5.4.y] wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()
by Alexander Wetzel
[ Upstream commit 2c5dee15239f3f3e31aa5c8808f18996c039e2c1 ]
Callers of wdev_chandef() must hold the wiphy mutex.
But the worker cfg80211_propagate_cac_done_wk() never takes the lock.
Which triggers the warning below with the mesh_peer_connected_dfs
test from hostapd and not (yet) released mac80211 code changes:
WARNING: CPU: 0 PID: 495 at net/wireless/chan.c:1552 wdev_chandef+0x60/0x165
Modules linked in:
CPU: 0 UID: 0 PID: 495 Comm: kworker/u4:2 Not tainted 6.14.0-rc5-wt-g03960e6f9d47 #33 13c287eeabfe1efea01c0bcc863723ab082e17cf
Workqueue: cfg80211 cfg80211_propagate_cac_done_wk
Stack:
00000000 00000001 ffffff00 6093267c
00000000 6002ec30 6d577c50 60037608
00000000 67e8d108 6063717b 00000000
Call Trace:
[<6002ec30>] ? _printk+0x0/0x98
[<6003c2b3>] show_stack+0x10e/0x11a
[<6002ec30>] ? _printk+0x0/0x98
[<60037608>] dump_stack_lvl+0x71/0xb8
[<6063717b>] ? wdev_chandef+0x60/0x165
[<6003766d>] dump_stack+0x1e/0x20
[<6005d1b7>] __warn+0x101/0x20f
[<6005d3a8>] warn_slowpath_fmt+0xe3/0x15d
[<600b0c5c>] ? mark_lock.part.0+0x0/0x4ec
[<60751191>] ? __this_cpu_preempt_check+0x0/0x16
[<600b11a2>] ? mark_held_locks+0x5a/0x6e
[<6005d2c5>] ? warn_slowpath_fmt+0x0/0x15d
[<60052e53>] ? unblock_signals+0x3a/0xe7
[<60052f2d>] ? um_set_signals+0x2d/0x43
[<60751191>] ? __this_cpu_preempt_check+0x0/0x16
[<607508b2>] ? lock_is_held_type+0x207/0x21f
[<6063717b>] wdev_chandef+0x60/0x165
[<605f89b4>] regulatory_propagate_dfs_state+0x247/0x43f
[<60052f00>] ? um_set_signals+0x0/0x43
[<605e6bfd>] cfg80211_propagate_cac_done_wk+0x3a/0x4a
[<6007e460>] process_scheduled_works+0x3bc/0x60e
[<6007d0ec>] ? move_linked_works+0x4d/0x81
[<6007d120>] ? assign_work+0x0/0xaa
[<6007f81f>] worker_thread+0x220/0x2dc
[<600786ef>] ? set_pf_worker+0x0/0x57
[<60087c96>] ? to_kthread+0x0/0x43
[<6008ab3c>] kthread+0x2d3/0x2e2
[<6007f5ff>] ? worker_thread+0x0/0x2dc
[<6006c05b>] ? calculate_sigpending+0x0/0x56
[<6003b37d>] new_thread_handler+0x4a/0x64
irq event stamp: 614611
hardirqs last enabled at (614621): [<00000000600bc96b>] __up_console_sem+0x82/0xaf
hardirqs last disabled at (614630): [<00000000600bc92c>] __up_console_sem+0x43/0xaf
softirqs last enabled at (614268): [<00000000606c55c6>] __ieee80211_wake_queue+0x933/0x985
softirqs last disabled at (614266): [<00000000606c52d6>] __ieee80211_wake_queue+0x643/0x985
Fixes: 26ec17a1dc5e ("cfg80211: Fix radar event during another phy CAC")
Signed-off-by: Alexander Wetzel <Alexander(a)wetzel-home.de>
Link: https://patch.msgid.link/20250717162547.94582-1-Alexander@wetzel-home.de
Signed-off-by: Johannes Berg <johannes.berg(a)intel.com>
Conflicts:
net/wireless/reg.c
Signed-off-by: lifangxu <lifangxu(a)kylinos.cn>
---
net/wireless/reg.c | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/net/wireless/reg.c b/net/wireless/reg.c
index 213655aa6e48..950bf146227e 100644
--- a/net/wireless/reg.c
+++ b/net/wireless/reg.c
@@ -3906,6 +3906,9 @@ EXPORT_SYMBOL(regulatory_pre_cac_allowed);
static void cfg80211_check_and_end_cac(struct cfg80211_registered_device *rdev)
{
struct wireless_dev *wdev;
+
+ wdev_lock(wdev);
+
/* If we finished CAC or received radar, we should end any
* CAC running on the same channels.
* the check !cfg80211_chandef_dfs_usable contain 2 options:
@@ -3920,6 +3923,7 @@ static void cfg80211_check_and_end_cac(struct cfg80211_registered_device *rdev)
!cfg80211_chandef_dfs_usable(&rdev->wiphy, &wdev->chandef))
rdev_end_cac(rdev, wdev->netdev);
}
+ wdev_unlock(wdev);
}
void regulatory_propagate_dfs_state(struct wiphy *wiphy,
--
2.43.0
3 weeks, 2 days
- 3
- 2
[merged mm-hotfixes-stable] mm-fix-possible-deadlock-in-kmemleak.patch removed from -mm tree
by Andrew Morton
The quilt patch titled
Subject: mm: gix possible deadlock in kmemleak
has been removed from the -mm tree. Its filename was
mm-fix-possible-deadlock-in-kmemleak.patch
This patch was dropped because it was merged into the mm-hotfixes-stable branch
of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
------------------------------------------------------
From: Gu Bowen <gubowen5(a)huawei.com>
Subject: mm: gix possible deadlock in kmemleak
Date: Fri, 22 Aug 2025 15:35:41 +0800
There are some AA deadlock issues in kmemleak, similar to the situation
reported by Breno [1]. The deadlock path is as follows:
mem_pool_alloc()
-> raw_spin_lock_irqsave(&kmemleak_lock, flags);
-> pr_warn()
-> netconsole subsystem
-> netpoll
-> __alloc_skb
-> __create_object
-> raw_spin_lock_irqsave(&kmemleak_lock, flags);
To solve this problem, switch to printk_safe mode before printing warning
message, this will redirect all printk()-s to a special per-CPU buffer,
which will be flushed later from a safe context (irq work), and this
deadlock problem can be avoided. The proper API to use should be
printk_deferred_enter()/printk_deferred_exit() [2]. Another way is to
place the warn print after kmemleak is released.
Link: https://lkml.kernel.org/r/20250822073541.1886469-1-gubowen5@huawei.com
Link: https://lore.kernel.org/all/20250731-kmemleak_lock-v1-1-728fd470198f@debian… [1]
Link: https://lore.kernel.org/all/5ca375cd-4a20-4807-b897-68b289626550@redhat.com/ [2]
Signed-off-by: Gu Bowen <gubowen5(a)huawei.com>
Reviewed-by: Waiman Long <longman(a)redhat.com>
Reviewed-by: Catalin Marinas <catalin.marinas(a)arm.com>
Reviewed-by: Breno Leitao <leitao(a)debian.org>
Cc: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Cc: John Ogness <john.ogness(a)linutronix.de>
Cc: Lu Jialin <lujialin4(a)huawei.com>
Cc: Petr Mladek <pmladek(a)suse.com>
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
mm/kmemleak.c | 27 ++++++++++++++++++++-------
1 file changed, 20 insertions(+), 7 deletions(-)
--- a/mm/kmemleak.c~mm-fix-possible-deadlock-in-kmemleak
+++ a/mm/kmemleak.c
@@ -437,9 +437,15 @@ static struct kmemleak_object *__lookup_
else if (untagged_objp == untagged_ptr || alias)
return object;
else {
+ /*
+ * Printk deferring due to the kmemleak_lock held.
+ * This is done to avoid deadlock.
+ */
+ printk_deferred_enter();
kmemleak_warn("Found object by alias at 0x%08lx\n",
ptr);
dump_object_info(object);
+ printk_deferred_exit();
break;
}
}
@@ -736,6 +742,11 @@ static int __link_object(struct kmemleak
else if (untagged_objp + parent->size <= untagged_ptr)
link = &parent->rb_node.rb_right;
else {
+ /*
+ * Printk deferring due to the kmemleak_lock held.
+ * This is done to avoid deadlock.
+ */
+ printk_deferred_enter();
kmemleak_stop("Cannot insert 0x%lx into the object search tree (overlaps existing)\n",
ptr);
/*
@@ -743,6 +754,7 @@ static int __link_object(struct kmemleak
* be freed while the kmemleak_lock is held.
*/
dump_object_info(parent);
+ printk_deferred_exit();
return -EEXIST;
}
}
@@ -856,13 +868,8 @@ static void delete_object_part(unsigned
raw_spin_lock_irqsave(&kmemleak_lock, flags);
object = __find_and_remove_object(ptr, 1, objflags);
- if (!object) {
-#ifdef DEBUG
- kmemleak_warn("Partially freeing unknown object at 0x%08lx (size %zu)\n",
- ptr, size);
-#endif
+ if (!object)
goto unlock;
- }
/*
* Create one or two objects that may result from the memory block
@@ -882,8 +889,14 @@ static void delete_object_part(unsigned
unlock:
raw_spin_unlock_irqrestore(&kmemleak_lock, flags);
- if (object)
+ if (object) {
__delete_object(object);
+ } else {
+#ifdef DEBUG
+ kmemleak_warn("Partially freeing unknown object at 0x%08lx (size %zu)\n",
+ ptr, size);
+#endif
+ }
out:
if (object_l)
_
Patches currently in -mm which might be from gubowen5(a)huawei.com are
3 weeks, 2 days
- 1
- 0
[merged mm-hotfixes-stable] x86-mm-64-define-arch_page_table_sync_mask-and-arch_sync_kernel_mappings.patch removed from -mm tree
by Andrew Morton
The quilt patch titled
Subject: x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()
has been removed from the -mm tree. Its filename was
x86-mm-64-define-arch_page_table_sync_mask-and-arch_sync_kernel_mappings.patch
This patch was dropped because it was merged into the mm-hotfixes-stable branch
of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
------------------------------------------------------
From: Harry Yoo <harry.yoo(a)oracle.com>
Subject: x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()
Date: Mon, 18 Aug 2025 11:02:06 +0900
Define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() to ensure
page tables are properly synchronized when calling p*d_populate_kernel().
For 5-level paging, synchronization is performed via
pgd_populate_kernel(). In 4-level paging, pgd_populate() is a no-op, so
synchronization is instead performed at the P4D level via
p4d_populate_kernel().
This fixes intermittent boot failures on systems using 4-level paging and
a large amount of persistent memory:
BUG: unable to handle page fault for address: ffffe70000000034
#PF: supervisor write access in kernel mode
#PF: error_code(0x0002) - not-present page
PGD 0 P4D 0
Oops: 0002 [#1] SMP NOPTI
RIP: 0010:__init_single_page+0x9/0x6d
Call Trace:
<TASK>
__init_zone_device_page+0x17/0x5d
memmap_init_zone_device+0x154/0x1bb
pagemap_range+0x2e0/0x40f
memremap_pages+0x10b/0x2f0
devm_memremap_pages+0x1e/0x60
dev_dax_probe+0xce/0x2ec [device_dax]
dax_bus_probe+0x6d/0xc9
[... snip ...]
</TASK>
It also fixes a crash in vmemmap_set_pmd() caused by accessing vmemmap
before sync_global_pgds() [1]:
BUG: unable to handle page fault for address: ffffeb3ff1200000
#PF: supervisor write access in kernel mode
#PF: error_code(0x0002) - not-present page
PGD 0 P4D 0
Oops: Oops: 0002 [#1] PREEMPT SMP NOPTI
Tainted: [W]=WARN
RIP: 0010:vmemmap_set_pmd+0xff/0x230
<TASK>
vmemmap_populate_hugepages+0x176/0x180
vmemmap_populate+0x34/0x80
__populate_section_memmap+0x41/0x90
sparse_add_section+0x121/0x3e0
__add_pages+0xba/0x150
add_pages+0x1d/0x70
memremap_pages+0x3dc/0x810
devm_memremap_pages+0x1c/0x60
xe_devm_add+0x8b/0x100 [xe]
xe_tile_init_noalloc+0x6a/0x70 [xe]
xe_device_probe+0x48c/0x740 [xe]
[... snip ...]
Link: https://lkml.kernel.org/r/20250818020206.4517-4-harry.yoo@oracle.com
Fixes: 8d400913c231 ("x86/vmemmap: handle unpopulated sub-pmd ranges")
Signed-off-by: Harry Yoo <harry.yoo(a)oracle.com>
Closes: https://lore.kernel.org/linux-mm/20250311114420.240341-1-gwan-gyeong.mun@in… [1]
Suggested-by: Dave Hansen <dave.hansen(a)linux.intel.com>
Acked-by: Kiryl Shutsemau <kas(a)kernel.org>
Reviewed-by: Mike Rapoport (Microsoft) <rppt(a)kernel.org>
Reviewed-by: Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com>
Acked-by: David Hildenbrand <david(a)redhat.com>
Cc: Alexander Potapenko <glider(a)google.com>
Cc: Alistair Popple <apopple(a)nvidia.com>
Cc: Andrey Konovalov <andreyknvl(a)gmail.com>
Cc: Andrey Ryabinin <ryabinin.a.a(a)gmail.com>
Cc: Andy Lutomirski <luto(a)kernel.org>
Cc: "Aneesh Kumar K.V" <aneesh.kumar(a)linux.ibm.com>
Cc: Anshuman Khandual <anshuman.khandual(a)arm.com>
Cc: Ard Biesheuvel <ardb(a)kernel.org>
Cc: Arnd Bergmann <arnd(a)arndb.de>
Cc: bibo mao <maobibo(a)loongson.cn>
Cc: Borislav Betkov <bp(a)alien8.de>
Cc: Christoph Lameter (Ampere) <cl(a)gentwo.org>
Cc: Dennis Zhou <dennis(a)kernel.org>
Cc: Dev Jain <dev.jain(a)arm.com>
Cc: Dmitriy Vyukov <dvyukov(a)google.com>
Cc: Ingo Molnar <mingo(a)redhat.com>
Cc: Jane Chu <jane.chu(a)oracle.com>
Cc: Joao Martins <joao.m.martins(a)oracle.com>
Cc: Joerg Roedel <joro(a)8bytes.org>
Cc: John Hubbard <jhubbard(a)nvidia.com>
Cc: Kevin Brodsky <kevin.brodsky(a)arm.com>
Cc: Liam Howlett <liam.howlett(a)oracle.com>
Cc: Michal Hocko <mhocko(a)suse.com>
Cc: Oscar Salvador <osalvador(a)suse.de>
Cc: Peter Xu <peterx(a)redhat.com>
Cc: Peter Zijlstra <peterz(a)infradead.org>
Cc: Qi Zheng <zhengqi.arch(a)bytedance.com>
Cc: Ryan Roberts <ryan.roberts(a)arm.com>
Cc: Suren Baghdasaryan <surenb(a)google.com>
Cc: Tejun Heo <tj(a)kernel.org>
Cc: Thomas Gleinxer <tglx(a)linutronix.de>
Cc: Thomas Huth <thuth(a)redhat.com>
Cc: "Uladzislau Rezki (Sony)" <urezki(a)gmail.com>
Cc: Vincenzo Frascino <vincenzo.frascino(a)arm.com>
Cc: Vlastimil Babka <vbabka(a)suse.cz>
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
arch/x86/include/asm/pgtable_64_types.h | 3 +++
arch/x86/mm/init_64.c | 18 ++++++++++++++++++
2 files changed, 21 insertions(+)
--- a/arch/x86/include/asm/pgtable_64_types.h~x86-mm-64-define-arch_page_table_sync_mask-and-arch_sync_kernel_mappings
+++ a/arch/x86/include/asm/pgtable_64_types.h
@@ -36,6 +36,9 @@ static inline bool pgtable_l5_enabled(vo
#define pgtable_l5_enabled() cpu_feature_enabled(X86_FEATURE_LA57)
#endif /* USE_EARLY_PGTABLE_L5 */
+#define ARCH_PAGE_TABLE_SYNC_MASK \
+ (pgtable_l5_enabled() ? PGTBL_PGD_MODIFIED : PGTBL_P4D_MODIFIED)
+
extern unsigned int pgdir_shift;
extern unsigned int ptrs_per_p4d;
--- a/arch/x86/mm/init_64.c~x86-mm-64-define-arch_page_table_sync_mask-and-arch_sync_kernel_mappings
+++ a/arch/x86/mm/init_64.c
@@ -224,6 +224,24 @@ static void sync_global_pgds(unsigned lo
}
/*
+ * Make kernel mappings visible in all page tables in the system.
+ * This is necessary except when the init task populates kernel mappings
+ * during the boot process. In that case, all processes originating from
+ * the init task copies the kernel mappings, so there is no issue.
+ * Otherwise, missing synchronization could lead to kernel crashes due
+ * to missing page table entries for certain kernel mappings.
+ *
+ * Synchronization is performed at the top level, which is the PGD in
+ * 5-level paging systems. But in 4-level paging systems, however,
+ * pgd_populate() is a no-op, so synchronization is done at the P4D level.
+ * sync_global_pgds() handles this difference between paging levels.
+ */
+void arch_sync_kernel_mappings(unsigned long start, unsigned long end)
+{
+ sync_global_pgds(start, end);
+}
+
+/*
* NOTE: This function is marked __ref because it calls __init function
* (alloc_bootmem_pages). It's safe to do it ONLY when after_bootmem == 0.
*/
_
Patches currently in -mm which might be from harry.yoo(a)oracle.com are
3 weeks, 2 days
- 1
- 0
[merged mm-hotfixes-stable] mm-introduce-and-use-pgdp4d_populate_kernel.patch removed from -mm tree
by Andrew Morton
The quilt patch titled
Subject: mm: introduce and use {pgd,p4d}_populate_kernel()
has been removed from the -mm tree. Its filename was
mm-introduce-and-use-pgdp4d_populate_kernel.patch
This patch was dropped because it was merged into the mm-hotfixes-stable branch
of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
------------------------------------------------------
From: Harry Yoo <harry.yoo(a)oracle.com>
Subject: mm: introduce and use {pgd,p4d}_populate_kernel()
Date: Mon, 18 Aug 2025 11:02:05 +0900
Introduce and use {pgd,p4d}_populate_kernel() in core MM code when
populating PGD and P4D entries for the kernel address space. These
helpers ensure proper synchronization of page tables when updating the
kernel portion of top-level page tables.
Until now, the kernel has relied on each architecture to handle
synchronization of top-level page tables in an ad-hoc manner. For
example, see commit 9b861528a801 ("x86-64, mem: Update all PGDs for direct
mapping and vmemmap mapping changes").
However, this approach has proven fragile for following reasons:
1) It is easy to forget to perform the necessary page table
synchronization when introducing new changes.
For instance, commit 4917f55b4ef9 ("mm/sparse-vmemmap: improve memory
savings for compound devmaps") overlooked the need to synchronize
page tables for the vmemmap area.
2) It is also easy to overlook that the vmemmap and direct mapping areas
must not be accessed before explicit page table synchronization.
For example, commit 8d400913c231 ("x86/vmemmap: handle unpopulated
sub-pmd ranges")) caused crashes by accessing the vmemmap area
before calling sync_global_pgds().
To address this, as suggested by Dave Hansen, introduce _kernel() variants
of the page table population helpers, which invoke architecture-specific
hooks to properly synchronize page tables. These are introduced in a new
header file, include/linux/pgalloc.h, so they can be called from common
code.
They reuse existing infrastructure for vmalloc and ioremap.
Synchronization requirements are determined by ARCH_PAGE_TABLE_SYNC_MASK,
and the actual synchronization is performed by
arch_sync_kernel_mappings().
This change currently targets only x86_64, so only PGD and P4D level
helpers are introduced. Currently, these helpers are no-ops since no
architecture sets PGTBL_{PGD,P4D}_MODIFIED in ARCH_PAGE_TABLE_SYNC_MASK.
In theory, PUD and PMD level helpers can be added later if needed by other
architectures. For now, 32-bit architectures (x86-32 and arm) only handle
PGTBL_PMD_MODIFIED, so p*d_populate_kernel() will never affect them unless
we introduce a PMD level helper.
[harry.yoo(a)oracle.com: fix KASAN build error due to p*d_populate_kernel()]
Link: https://lkml.kernel.org/r/20250822020727.202749-1-harry.yoo@oracle.com
Link: https://lkml.kernel.org/r/20250818020206.4517-3-harry.yoo@oracle.com
Fixes: 8d400913c231 ("x86/vmemmap: handle unpopulated sub-pmd ranges")
Signed-off-by: Harry Yoo <harry.yoo(a)oracle.com>
Suggested-by: Dave Hansen <dave.hansen(a)linux.intel.com>
Acked-by: Kiryl Shutsemau <kas(a)kernel.org>
Reviewed-by: Mike Rapoport (Microsoft) <rppt(a)kernel.org>
Reviewed-by: Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com>
Acked-by: David Hildenbrand <david(a)redhat.com>
Cc: Alexander Potapenko <glider(a)google.com>
Cc: Alistair Popple <apopple(a)nvidia.com>
Cc: Andrey Konovalov <andreyknvl(a)gmail.com>
Cc: Andrey Ryabinin <ryabinin.a.a(a)gmail.com>
Cc: Andy Lutomirski <luto(a)kernel.org>
Cc: "Aneesh Kumar K.V" <aneesh.kumar(a)linux.ibm.com>
Cc: Anshuman Khandual <anshuman.khandual(a)arm.com>
Cc: Ard Biesheuvel <ardb(a)kernel.org>
Cc: Arnd Bergmann <arnd(a)arndb.de>
Cc: bibo mao <maobibo(a)loongson.cn>
Cc: Borislav Betkov <bp(a)alien8.de>
Cc: Christoph Lameter (Ampere) <cl(a)gentwo.org>
Cc: Dennis Zhou <dennis(a)kernel.org>
Cc: Dev Jain <dev.jain(a)arm.com>
Cc: Dmitriy Vyukov <dvyukov(a)google.com>
Cc: Gwan-gyeong Mun <gwan-gyeong.mun(a)intel.com>
Cc: Ingo Molnar <mingo(a)redhat.com>
Cc: Jane Chu <jane.chu(a)oracle.com>
Cc: Joao Martins <joao.m.martins(a)oracle.com>
Cc: Joerg Roedel <joro(a)8bytes.org>
Cc: John Hubbard <jhubbard(a)nvidia.com>
Cc: Kevin Brodsky <kevin.brodsky(a)arm.com>
Cc: Liam Howlett <liam.howlett(a)oracle.com>
Cc: Michal Hocko <mhocko(a)suse.com>
Cc: Oscar Salvador <osalvador(a)suse.de>
Cc: Peter Xu <peterx(a)redhat.com>
Cc: Peter Zijlstra <peterz(a)infradead.org>
Cc: Qi Zheng <zhengqi.arch(a)bytedance.com>
Cc: Ryan Roberts <ryan.roberts(a)arm.com>
Cc: Suren Baghdasaryan <surenb(a)google.com>
Cc: Tejun Heo <tj(a)kernel.org>
Cc: Thomas Gleinxer <tglx(a)linutronix.de>
Cc: Thomas Huth <thuth(a)redhat.com>
Cc: "Uladzislau Rezki (Sony)" <urezki(a)gmail.com>
Cc: Vincenzo Frascino <vincenzo.frascino(a)arm.com>
Cc: Vlastimil Babka <vbabka(a)suse.cz>
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
include/linux/pgalloc.h | 29 +++++++++++++++++++++++++++++
include/linux/pgtable.h | 13 +++++++------
mm/kasan/init.c | 12 ++++++------
mm/percpu.c | 6 +++---
mm/sparse-vmemmap.c | 6 +++---
5 files changed, 48 insertions(+), 18 deletions(-)
diff --git a/include/linux/pgalloc.h a/include/linux/pgalloc.h
new file mode 100644
--- /dev/null
+++ a/include/linux/pgalloc.h
@@ -0,0 +1,29 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+#ifndef _LINUX_PGALLOC_H
+#define _LINUX_PGALLOC_H
+
+#include <linux/pgtable.h>
+#include <asm/pgalloc.h>
+
+/*
+ * {pgd,p4d}_populate_kernel() are defined as macros to allow
+ * compile-time optimization based on the configured page table levels.
+ * Without this, linking may fail because callers (e.g., KASAN) may rely
+ * on calls to these functions being optimized away when passing symbols
+ * that exist only for certain page table levels.
+ */
+#define pgd_populate_kernel(addr, pgd, p4d) \
+ do { \
+ pgd_populate(&init_mm, pgd, p4d); \
+ if (ARCH_PAGE_TABLE_SYNC_MASK & PGTBL_PGD_MODIFIED) \
+ arch_sync_kernel_mappings(addr, addr); \
+ } while (0)
+
+#define p4d_populate_kernel(addr, p4d, pud) \
+ do { \
+ p4d_populate(&init_mm, p4d, pud); \
+ if (ARCH_PAGE_TABLE_SYNC_MASK & PGTBL_P4D_MODIFIED) \
+ arch_sync_kernel_mappings(addr, addr); \
+ } while (0)
+
+#endif /* _LINUX_PGALLOC_H */
--- a/include/linux/pgtable.h~mm-introduce-and-use-pgdp4d_populate_kernel
+++ a/include/linux/pgtable.h
@@ -1469,8 +1469,8 @@ static inline void modify_prot_commit_pt
/*
* Architectures can set this mask to a combination of PGTBL_P?D_MODIFIED values
- * and let generic vmalloc and ioremap code know when arch_sync_kernel_mappings()
- * needs to be called.
+ * and let generic vmalloc, ioremap and page table update code know when
+ * arch_sync_kernel_mappings() needs to be called.
*/
#ifndef ARCH_PAGE_TABLE_SYNC_MASK
#define ARCH_PAGE_TABLE_SYNC_MASK 0
@@ -1954,10 +1954,11 @@ static inline bool arch_has_pfn_modify_c
/*
* Page Table Modification bits for pgtbl_mod_mask.
*
- * These are used by the p?d_alloc_track*() set of functions an in the generic
- * vmalloc/ioremap code to track at which page-table levels entries have been
- * modified. Based on that the code can better decide when vmalloc and ioremap
- * mapping changes need to be synchronized to other page-tables in the system.
+ * These are used by the p?d_alloc_track*() and p*d_populate_kernel()
+ * functions in the generic vmalloc, ioremap and page table update code
+ * to track at which page-table levels entries have been modified.
+ * Based on that the code can better decide when page table changes need
+ * to be synchronized to other page-tables in the system.
*/
#define __PGTBL_PGD_MODIFIED 0
#define __PGTBL_P4D_MODIFIED 1
--- a/mm/kasan/init.c~mm-introduce-and-use-pgdp4d_populate_kernel
+++ a/mm/kasan/init.c
@@ -13,9 +13,9 @@
#include <linux/mm.h>
#include <linux/pfn.h>
#include <linux/slab.h>
+#include <linux/pgalloc.h>
#include <asm/page.h>
-#include <asm/pgalloc.h>
#include "kasan.h"
@@ -191,7 +191,7 @@ static int __ref zero_p4d_populate(pgd_t
pud_t *pud;
pmd_t *pmd;
- p4d_populate(&init_mm, p4d,
+ p4d_populate_kernel(addr, p4d,
lm_alias(kasan_early_shadow_pud));
pud = pud_offset(p4d, addr);
pud_populate(&init_mm, pud,
@@ -212,7 +212,7 @@ static int __ref zero_p4d_populate(pgd_t
} else {
p = early_alloc(PAGE_SIZE, NUMA_NO_NODE);
pud_init(p);
- p4d_populate(&init_mm, p4d, p);
+ p4d_populate_kernel(addr, p4d, p);
}
}
zero_pud_populate(p4d, addr, next);
@@ -251,10 +251,10 @@ int __ref kasan_populate_early_shadow(co
* puds,pmds, so pgd_populate(), pud_populate()
* is noops.
*/
- pgd_populate(&init_mm, pgd,
+ pgd_populate_kernel(addr, pgd,
lm_alias(kasan_early_shadow_p4d));
p4d = p4d_offset(pgd, addr);
- p4d_populate(&init_mm, p4d,
+ p4d_populate_kernel(addr, p4d,
lm_alias(kasan_early_shadow_pud));
pud = pud_offset(p4d, addr);
pud_populate(&init_mm, pud,
@@ -273,7 +273,7 @@ int __ref kasan_populate_early_shadow(co
if (!p)
return -ENOMEM;
} else {
- pgd_populate(&init_mm, pgd,
+ pgd_populate_kernel(addr, pgd,
early_alloc(PAGE_SIZE, NUMA_NO_NODE));
}
}
--- a/mm/percpu.c~mm-introduce-and-use-pgdp4d_populate_kernel
+++ a/mm/percpu.c
@@ -3108,7 +3108,7 @@ out_free:
#endif /* BUILD_EMBED_FIRST_CHUNK */
#ifdef BUILD_PAGE_FIRST_CHUNK
-#include <asm/pgalloc.h>
+#include <linux/pgalloc.h>
#ifndef P4D_TABLE_SIZE
#define P4D_TABLE_SIZE PAGE_SIZE
@@ -3134,13 +3134,13 @@ void __init __weak pcpu_populate_pte(uns
if (pgd_none(*pgd)) {
p4d = memblock_alloc_or_panic(P4D_TABLE_SIZE, P4D_TABLE_SIZE);
- pgd_populate(&init_mm, pgd, p4d);
+ pgd_populate_kernel(addr, pgd, p4d);
}
p4d = p4d_offset(pgd, addr);
if (p4d_none(*p4d)) {
pud = memblock_alloc_or_panic(PUD_TABLE_SIZE, PUD_TABLE_SIZE);
- p4d_populate(&init_mm, p4d, pud);
+ p4d_populate_kernel(addr, p4d, pud);
}
pud = pud_offset(p4d, addr);
--- a/mm/sparse-vmemmap.c~mm-introduce-and-use-pgdp4d_populate_kernel
+++ a/mm/sparse-vmemmap.c
@@ -27,9 +27,9 @@
#include <linux/spinlock.h>
#include <linux/vmalloc.h>
#include <linux/sched.h>
+#include <linux/pgalloc.h>
#include <asm/dma.h>
-#include <asm/pgalloc.h>
#include <asm/tlbflush.h>
#include "hugetlb_vmemmap.h"
@@ -229,7 +229,7 @@ p4d_t * __meminit vmemmap_p4d_populate(p
if (!p)
return NULL;
pud_init(p);
- p4d_populate(&init_mm, p4d, p);
+ p4d_populate_kernel(addr, p4d, p);
}
return p4d;
}
@@ -241,7 +241,7 @@ pgd_t * __meminit vmemmap_pgd_populate(u
void *p = vmemmap_alloc_block_zero(PAGE_SIZE, node);
if (!p)
return NULL;
- pgd_populate(&init_mm, pgd, p);
+ pgd_populate_kernel(addr, pgd, p);
}
return pgd;
}
_
Patches currently in -mm which might be from harry.yoo(a)oracle.com are
3 weeks, 2 days
- 1
- 0
[merged mm-hotfixes-stable] mm-move-page-table-sync-declarations-to-linux-pgtableh.patch removed from -mm tree
by Andrew Morton
The quilt patch titled
Subject: mm: move page table sync declarations to linux/pgtable.h
has been removed from the -mm tree. Its filename was
mm-move-page-table-sync-declarations-to-linux-pgtableh.patch
This patch was dropped because it was merged into the mm-hotfixes-stable branch
of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
------------------------------------------------------
From: Harry Yoo <harry.yoo(a)oracle.com>
Subject: mm: move page table sync declarations to linux/pgtable.h
Date: Mon, 18 Aug 2025 11:02:04 +0900
During our internal testing, we started observing intermittent boot
failures when the machine uses 4-level paging and has a large amount of
persistent memory:
BUG: unable to handle page fault for address: ffffe70000000034
#PF: supervisor write access in kernel mode
#PF: error_code(0x0002) - not-present page
PGD 0 P4D 0
Oops: 0002 [#1] SMP NOPTI
RIP: 0010:__init_single_page+0x9/0x6d
Call Trace:
<TASK>
__init_zone_device_page+0x17/0x5d
memmap_init_zone_device+0x154/0x1bb
pagemap_range+0x2e0/0x40f
memremap_pages+0x10b/0x2f0
devm_memremap_pages+0x1e/0x60
dev_dax_probe+0xce/0x2ec [device_dax]
dax_bus_probe+0x6d/0xc9
[... snip ...]
</TASK>
It turns out that the kernel panics while initializing vmemmap (struct
page array) when the vmemmap region spans two PGD entries, because the new
PGD entry is only installed in init_mm.pgd, but not in the page tables of
other tasks.
And looking at __populate_section_memmap():
if (vmemmap_can_optimize(altmap, pgmap))
// does not sync top level page tables
r = vmemmap_populate_compound_pages(pfn, start, end, nid, pgmap);
else
// sync top level page tables in x86
r = vmemmap_populate(start, end, nid, altmap);
In the normal path, vmemmap_populate() in arch/x86/mm/init_64.c
synchronizes the top level page table (See commit 9b861528a801 ("x86-64,
mem: Update all PGDs for direct mapping and vmemmap mapping changes")) so
that all tasks in the system can see the new vmemmap area.
However, when vmemmap_can_optimize() returns true, the optimized path
skips synchronization of top-level page tables. This is because
vmemmap_populate_compound_pages() is implemented in core MM code, which
does not handle synchronization of the top-level page tables. Instead,
the core MM has historically relied on each architecture to perform this
synchronization manually.
We're not the first party to encounter a crash caused by not-sync'd top
level page tables: earlier this year, Gwan-gyeong Mun attempted to address
the issue [1] [2] after hitting a kernel panic when x86 code accessed the
vmemmap area before the corresponding top-level entries were synced. At
that time, the issue was believed to be triggered only when struct page
was enlarged for debugging purposes, and the patch did not get further
updates.
It turns out that current approach of relying on each arch to handle the
page table sync manually is fragile because 1) it's easy to forget to sync
the top level page table, and 2) it's also easy to overlook that the
kernel should not access the vmemmap and direct mapping areas before the
sync.
# The solution: Make page table sync more code robust and harder to miss
To address this, Dave Hansen suggested [3] [4] introducing
{pgd,p4d}_populate_kernel() for updating kernel portion of the page tables
and allow each architecture to explicitly perform synchronization when
installing top-level entries. With this approach, we no longer need to
worry about missing the sync step, reducing the risk of future
regressions.
The new interface reuses existing ARCH_PAGE_TABLE_SYNC_MASK,
PGTBL_P*D_MODIFIED and arch_sync_kernel_mappings() facility used by
vmalloc and ioremap to synchronize page tables.
pgd_populate_kernel() looks like this:
static inline void pgd_populate_kernel(unsigned long addr, pgd_t *pgd,
p4d_t *p4d)
{
pgd_populate(&init_mm, pgd, p4d);
if (ARCH_PAGE_TABLE_SYNC_MASK & PGTBL_PGD_MODIFIED)
arch_sync_kernel_mappings(addr, addr);
}
It is worth noting that vmalloc() and apply_to_range() carefully
synchronizes page tables by calling p*d_alloc_track() and
arch_sync_kernel_mappings(), and thus they are not affected by this patch
series.
This series was hugely inspired by Dave Hansen's suggestion and hence
added Suggested-by: Dave Hansen.
Cc stable because lack of this series opens the door to intermittent
boot failures.
This patch (of 3):
Move ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() to
linux/pgtable.h so that they can be used outside of vmalloc and ioremap.
Link: https://lkml.kernel.org/r/20250818020206.4517-1-harry.yoo@oracle.com
Link: https://lkml.kernel.org/r/20250818020206.4517-2-harry.yoo@oracle.com
Link: https://lore.kernel.org/linux-mm/20250220064105.808339-1-gwan-gyeong.mun@in… [1]
Link: https://lore.kernel.org/linux-mm/20250311114420.240341-1-gwan-gyeong.mun@in… [2]
Link: https://lore.kernel.org/linux-mm/d1da214c-53d3-45ac-a8b6-51821c5416e4@intel… [3]
Link: https://lore.kernel.org/linux-mm/4d800744-7b88-41aa-9979-b245e8bf794b@intel… [4]
Fixes: 8d400913c231 ("x86/vmemmap: handle unpopulated sub-pmd ranges")
Signed-off-by: Harry Yoo <harry.yoo(a)oracle.com>
Acked-by: Kiryl Shutsemau <kas(a)kernel.org>
Reviewed-by: Mike Rapoport (Microsoft) <rppt(a)kernel.org>
Reviewed-by: "Uladzislau Rezki (Sony)" <urezki(a)gmail.com>
Reviewed-by: Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com>
Acked-by: David Hildenbrand <david(a)redhat.com>
Cc: Alexander Potapenko <glider(a)google.com>
Cc: Alistair Popple <apopple(a)nvidia.com>
Cc: Andrey Konovalov <andreyknvl(a)gmail.com>
Cc: Andrey Ryabinin <ryabinin.a.a(a)gmail.com>
Cc: Andy Lutomirski <luto(a)kernel.org>
Cc: "Aneesh Kumar K.V" <aneesh.kumar(a)linux.ibm.com>
Cc: Anshuman Khandual <anshuman.khandual(a)arm.com>
Cc: Ard Biesheuvel <ardb(a)kernel.org>
Cc: Arnd Bergmann <arnd(a)arndb.de>
Cc: bibo mao <maobibo(a)loongson.cn>
Cc: Borislav Betkov <bp(a)alien8.de>
Cc: Christoph Lameter (Ampere) <cl(a)gentwo.org>
Cc: Dennis Zhou <dennis(a)kernel.org>
Cc: Dev Jain <dev.jain(a)arm.com>
Cc: Dmitriy Vyukov <dvyukov(a)google.com>
Cc: Gwan-gyeong Mun <gwan-gyeong.mun(a)intel.com>
Cc: Ingo Molnar <mingo(a)redhat.com>
Cc: Jane Chu <jane.chu(a)oracle.com>
Cc: Joao Martins <joao.m.martins(a)oracle.com>
Cc: Joerg Roedel <joro(a)8bytes.org>
Cc: John Hubbard <jhubbard(a)nvidia.com>
Cc: Kevin Brodsky <kevin.brodsky(a)arm.com>
Cc: Liam Howlett <liam.howlett(a)oracle.com>
Cc: Michal Hocko <mhocko(a)suse.com>
Cc: Oscar Salvador <osalvador(a)suse.de>
Cc: Peter Xu <peterx(a)redhat.com>
Cc: Peter Zijlstra <peterz(a)infradead.org>
Cc: Qi Zheng <zhengqi.arch(a)bytedance.com>
Cc: Ryan Roberts <ryan.roberts(a)arm.com>
Cc: Suren Baghdasaryan <surenb(a)google.com>
Cc: Tejun Heo <tj(a)kernel.org>
Cc: Thomas Gleinxer <tglx(a)linutronix.de>
Cc: Thomas Huth <thuth(a)redhat.com>
Cc: Vincenzo Frascino <vincenzo.frascino(a)arm.com>
Cc: Vlastimil Babka <vbabka(a)suse.cz>
Cc: Dave Hansen <dave.hansen(a)linux.intel.com>
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
include/linux/pgtable.h | 16 ++++++++++++++++
include/linux/vmalloc.h | 16 ----------------
2 files changed, 16 insertions(+), 16 deletions(-)
--- a/include/linux/pgtable.h~mm-move-page-table-sync-declarations-to-linux-pgtableh
+++ a/include/linux/pgtable.h
@@ -1467,6 +1467,22 @@ static inline void modify_prot_commit_pt
}
#endif
+/*
+ * Architectures can set this mask to a combination of PGTBL_P?D_MODIFIED values
+ * and let generic vmalloc and ioremap code know when arch_sync_kernel_mappings()
+ * needs to be called.
+ */
+#ifndef ARCH_PAGE_TABLE_SYNC_MASK
+#define ARCH_PAGE_TABLE_SYNC_MASK 0
+#endif
+
+/*
+ * There is no default implementation for arch_sync_kernel_mappings(). It is
+ * relied upon the compiler to optimize calls out if ARCH_PAGE_TABLE_SYNC_MASK
+ * is 0.
+ */
+void arch_sync_kernel_mappings(unsigned long start, unsigned long end);
+
#endif /* CONFIG_MMU */
/*
--- a/include/linux/vmalloc.h~mm-move-page-table-sync-declarations-to-linux-pgtableh
+++ a/include/linux/vmalloc.h
@@ -220,22 +220,6 @@ int vmap_pages_range(unsigned long addr,
struct page **pages, unsigned int page_shift);
/*
- * Architectures can set this mask to a combination of PGTBL_P?D_MODIFIED values
- * and let generic vmalloc and ioremap code know when arch_sync_kernel_mappings()
- * needs to be called.
- */
-#ifndef ARCH_PAGE_TABLE_SYNC_MASK
-#define ARCH_PAGE_TABLE_SYNC_MASK 0
-#endif
-
-/*
- * There is no default implementation for arch_sync_kernel_mappings(). It is
- * relied upon the compiler to optimize calls out if ARCH_PAGE_TABLE_SYNC_MASK
- * is 0.
- */
-void arch_sync_kernel_mappings(unsigned long start, unsigned long end);
-
-/*
* Lowlevel-APIs (not for driver use!)
*/
_
Patches currently in -mm which might be from harry.yoo(a)oracle.com are
3 weeks, 2 days
- 1
- 0
[merged mm-hotfixes-stable] proc-fix-missing-pde_set_flags-for-net-proc-files.patch removed from -mm tree
by Andrew Morton
The quilt patch titled
Subject: proc: fix missing pde_set_flags() for net proc files
has been removed from the -mm tree. Its filename was
proc-fix-missing-pde_set_flags-for-net-proc-files.patch
This patch was dropped because it was merged into the mm-hotfixes-stable branch
of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
------------------------------------------------------
From: wangzijie <wangzijie1(a)honor.com>
Subject: proc: fix missing pde_set_flags() for net proc files
Date: Mon, 18 Aug 2025 20:31:02 +0800
To avoid potential UAF issues during module removal races, we use
pde_set_flags() to save proc_ops flags in PDE itself before
proc_register(), and then use pde_has_proc_*() helpers instead of directly
dereferencing pde->proc_ops->*.
However, the pde_set_flags() call was missing when creating net related
proc files. This omission caused incorrect behavior which FMODE_LSEEK was
being cleared inappropriately in proc_reg_open() for net proc files. Lars
reported it in this link[1].
Fix this by ensuring pde_set_flags() is called when register proc entry,
and add NULL check for proc_ops in pde_set_flags().
[wangzijie1(a)honor.com: stash pde->proc_ops in a local const variable, per Christian]
Link: https://lkml.kernel.org/r/20250821105806.1453833-1-wangzijie1@honor.com
Link: https://lkml.kernel.org/r/20250818123102.959595-1-wangzijie1@honor.com
Link: https://lore.kernel.org/all/20250815195616.64497967@chagall.paradoxon.rec/ [1]
Fixes: ff7ec8dc1b64 ("proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al")
Signed-off-by: wangzijie <wangzijie1(a)honor.com>
Reported-by: Lars Wendler <polynomial-c(a)gmx.de>
Tested-by: Stefano Brivio <sbrivio(a)redhat.com>
Tested-by: Petr Van��k <pv(a)excello.cz>
Tested by: Lars Wendler <polynomial-c(a)gmx.de>
Cc: Alexei Starovoitov <ast(a)kernel.org>
Cc: Alexey Dobriyan <adobriyan(a)gmail.com>
Cc: Al Viro <viro(a)zeniv.linux.org.uk>
Cc: "Edgecombe, Rick P" <rick.p.edgecombe(a)intel.com>
Cc: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Cc: Jiri Slaby <jirislaby(a)kernel.org>
Cc: Kirill A. Shutemov <k.shutemov(a)gmail.com>
Cc: wangzijie <wangzijie1(a)honor.com>
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
fs/proc/generic.c | 38 +++++++++++++++++++++-----------------
1 file changed, 21 insertions(+), 17 deletions(-)
--- a/fs/proc/generic.c~proc-fix-missing-pde_set_flags-for-net-proc-files
+++ a/fs/proc/generic.c
@@ -367,6 +367,25 @@ static const struct inode_operations pro
.setattr = proc_notify_change,
};
+static void pde_set_flags(struct proc_dir_entry *pde)
+{
+ const struct proc_ops *proc_ops = pde->proc_ops;
+
+ if (!proc_ops)
+ return;
+
+ if (proc_ops->proc_flags & PROC_ENTRY_PERMANENT)
+ pde->flags |= PROC_ENTRY_PERMANENT;
+ if (proc_ops->proc_read_iter)
+ pde->flags |= PROC_ENTRY_proc_read_iter;
+#ifdef CONFIG_COMPAT
+ if (proc_ops->proc_compat_ioctl)
+ pde->flags |= PROC_ENTRY_proc_compat_ioctl;
+#endif
+ if (proc_ops->proc_lseek)
+ pde->flags |= PROC_ENTRY_proc_lseek;
+}
+
/* returns the registered entry, or frees dp and returns NULL on failure */
struct proc_dir_entry *proc_register(struct proc_dir_entry *dir,
struct proc_dir_entry *dp)
@@ -374,6 +393,8 @@ struct proc_dir_entry *proc_register(str
if (proc_alloc_inum(&dp->low_ino))
goto out_free_entry;
+ pde_set_flags(dp);
+
write_lock(&proc_subdir_lock);
dp->parent = dir;
if (pde_subdir_insert(dir, dp) == false) {
@@ -561,20 +582,6 @@ struct proc_dir_entry *proc_create_reg(c
return p;
}
-static void pde_set_flags(struct proc_dir_entry *pde)
-{
- if (pde->proc_ops->proc_flags & PROC_ENTRY_PERMANENT)
- pde->flags |= PROC_ENTRY_PERMANENT;
- if (pde->proc_ops->proc_read_iter)
- pde->flags |= PROC_ENTRY_proc_read_iter;
-#ifdef CONFIG_COMPAT
- if (pde->proc_ops->proc_compat_ioctl)
- pde->flags |= PROC_ENTRY_proc_compat_ioctl;
-#endif
- if (pde->proc_ops->proc_lseek)
- pde->flags |= PROC_ENTRY_proc_lseek;
-}
-
struct proc_dir_entry *proc_create_data(const char *name, umode_t mode,
struct proc_dir_entry *parent,
const struct proc_ops *proc_ops, void *data)
@@ -585,7 +592,6 @@ struct proc_dir_entry *proc_create_data(
if (!p)
return NULL;
p->proc_ops = proc_ops;
- pde_set_flags(p);
return proc_register(parent, p);
}
EXPORT_SYMBOL(proc_create_data);
@@ -636,7 +642,6 @@ struct proc_dir_entry *proc_create_seq_p
p->proc_ops = &proc_seq_ops;
p->seq_ops = ops;
p->state_size = state_size;
- pde_set_flags(p);
return proc_register(parent, p);
}
EXPORT_SYMBOL(proc_create_seq_private);
@@ -667,7 +672,6 @@ struct proc_dir_entry *proc_create_singl
return NULL;
p->proc_ops = &proc_single_ops;
p->single_show = show;
- pde_set_flags(p);
return proc_register(parent, p);
}
EXPORT_SYMBOL(proc_create_single_data);
_
Patches currently in -mm which might be from wangzijie1(a)honor.com are
3 weeks, 2 days
- 1
- 0
[merged mm-hotfixes-stable] mm-fix-accounting-of-memmap-pages.patch removed from -mm tree
by Andrew Morton
The quilt patch titled
Subject: mm: fix accounting of memmap pages
has been removed from the -mm tree. Its filename was
mm-fix-accounting-of-memmap-pages.patch
This patch was dropped because it was merged into the mm-hotfixes-stable branch
of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
------------------------------------------------------
From: Sumanth Korikkar <sumanthk(a)linux.ibm.com>
Subject: mm: fix accounting of memmap pages
Date: Thu, 7 Aug 2025 20:35:45 +0200
For !CONFIG_SPARSEMEM_VMEMMAP, memmap page accounting is currently done
upfront in sparse_buffer_init(). However, sparse_buffer_alloc() may
return NULL in failure scenario.
Also, memmap pages may be allocated either from the memblock allocator
during early boot or from the buddy allocator. When removed via
arch_remove_memory(), accounting of memmap pages must reflect the original
allocation source.
To ensure correctness:
* Account memmap pages after successful allocation in sparse_init_nid()
and section_activate().
* Account memmap pages in section_deactivate() based on allocation
source.
Link: https://lkml.kernel.org/r/20250807183545.1424509-1-sumanthk@linux.ibm.com
Fixes: 15995a352474 ("mm: report per-page metadata information")
Signed-off-by: Sumanth Korikkar <sumanthk(a)linux.ibm.com>
Suggested-by: David Hildenbrand <david(a)redhat.com>
Reviewed-by: Wei Yang <richard.weiyang(a)gmail.com>
Cc: Alexander Gordeev <agordeev(a)linux.ibm.com>
Cc: Gerald Schaefer <gerald.schaefer(a)linux.ibm.com>
Cc: Heiko Carstens <hca(a)linux.ibm.com>
Cc: Vasily Gorbik <gor(a)linux.ibm.com>
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
mm/sparse-vmemmap.c | 5 -----
mm/sparse.c | 15 +++++++++------
2 files changed, 9 insertions(+), 11 deletions(-)
--- a/mm/sparse.c~mm-fix-accounting-of-memmap-pages
+++ a/mm/sparse.c
@@ -454,9 +454,6 @@ static void __init sparse_buffer_init(un
*/
sparsemap_buf = memmap_alloc(size, section_map_size(), addr, nid, true);
sparsemap_buf_end = sparsemap_buf + size;
-#ifndef CONFIG_SPARSEMEM_VMEMMAP
- memmap_boot_pages_add(DIV_ROUND_UP(size, PAGE_SIZE));
-#endif
}
static void __init sparse_buffer_fini(void)
@@ -567,6 +564,8 @@ static void __init sparse_init_nid(int n
sparse_buffer_fini();
goto failed;
}
+ memmap_boot_pages_add(DIV_ROUND_UP(PAGES_PER_SECTION * sizeof(struct page),
+ PAGE_SIZE));
sparse_init_early_section(nid, map, pnum, 0);
}
}
@@ -680,7 +679,6 @@ static void depopulate_section_memmap(un
unsigned long start = (unsigned long) pfn_to_page(pfn);
unsigned long end = start + nr_pages * sizeof(struct page);
- memmap_pages_add(-1L * (DIV_ROUND_UP(end - start, PAGE_SIZE)));
vmemmap_free(start, end, altmap);
}
static void free_map_bootmem(struct page *memmap)
@@ -856,10 +854,14 @@ static void section_deactivate(unsigned
* The memmap of early sections is always fully populated. See
* section_activate() and pfn_valid() .
*/
- if (!section_is_early)
+ if (!section_is_early) {
+ memmap_pages_add(-1L * (DIV_ROUND_UP(nr_pages * sizeof(struct page), PAGE_SIZE)));
depopulate_section_memmap(pfn, nr_pages, altmap);
- else if (memmap)
+ } else if (memmap) {
+ memmap_boot_pages_add(-1L * (DIV_ROUND_UP(nr_pages * sizeof(struct page),
+ PAGE_SIZE)));
free_map_bootmem(memmap);
+ }
if (empty)
ms->section_mem_map = (unsigned long)NULL;
@@ -904,6 +906,7 @@ static struct page * __meminit section_a
section_deactivate(pfn, nr_pages, altmap);
return ERR_PTR(-ENOMEM);
}
+ memmap_pages_add(DIV_ROUND_UP(nr_pages * sizeof(struct page), PAGE_SIZE));
return memmap;
}
--- a/mm/sparse-vmemmap.c~mm-fix-accounting-of-memmap-pages
+++ a/mm/sparse-vmemmap.c
@@ -578,11 +578,6 @@ struct page * __meminit __populate_secti
if (r < 0)
return NULL;
- if (system_state == SYSTEM_BOOTING)
- memmap_boot_pages_add(DIV_ROUND_UP(end - start, PAGE_SIZE));
- else
- memmap_pages_add(DIV_ROUND_UP(end - start, PAGE_SIZE));
-
return pfn_to_page(pfn);
}
_
Patches currently in -mm which might be from sumanthk(a)linux.ibm.com are
3 weeks, 2 days
- 1
- 0
[merged mm-hotfixes-stable] mm-damon-core-prevent-unnecessary-overflow-in-damos_set_effective_quota.patch removed from -mm tree
by Andrew Morton
The quilt patch titled
Subject: mm/damon/core: prevent unnecessary overflow in damos_set_effective_quota()
has been removed from the -mm tree. Its filename was
mm-damon-core-prevent-unnecessary-overflow-in-damos_set_effective_quota.patch
This patch was dropped because it was merged into the mm-hotfixes-stable branch
of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
------------------------------------------------------
From: Quanmin Yan <yanquanmin1(a)huawei.com>
Subject: mm/damon/core: prevent unnecessary overflow in damos_set_effective_quota()
Date: Thu, 21 Aug 2025 20:55:55 +0800
On 32-bit systems, the throughput calculation in
damos_set_effective_quota() is prone to unnecessary multiplication
overflow. Using mult_frac() to fix it.
Andrew Paniakin also recently found and privately reported this issue, on
64 bit systems. This can also happen on 64-bit systems, once the charged
size exceeds ~17 TiB. On systems running for long time in production,
this issue can actually happen.
More specifically, when a DAMOS scheme having the time quota run for
longtime, throughput calculation can overflow and set esz too small. As a
result, speed of the scheme get unexpectedly slow.
Link: https://lkml.kernel.org/r/20250821125555.3020951-1-yanquanmin1@huawei.com
Fixes: 1cd243030059 ("mm/damon/schemes: implement time quota")
Signed-off-by: Quanmin Yan <yanquanmin1(a)huawei.com>
Reported-by: Andrew Paniakin <apanyaki(a)amazon.com>
Reviewed-by: SeongJae Park <sj(a)kernel.org>
Cc: Kefeng Wang <wangkefeng.wang(a)huawei.com>
Cc: ze zuo <zuoze1(a)huawei.com>
Cc: <stable(a)vger.kernel.org> [5.16+]
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
mm/damon/core.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
--- a/mm/damon/core.c~mm-damon-core-prevent-unnecessary-overflow-in-damos_set_effective_quota
+++ a/mm/damon/core.c
@@ -2073,8 +2073,8 @@ static void damos_set_effective_quota(st
if (quota->ms) {
if (quota->total_charged_ns)
- throughput = quota->total_charged_sz * 1000000 /
- quota->total_charged_ns;
+ throughput = mult_frac(quota->total_charged_sz, 1000000,
+ quota->total_charged_ns);
else
throughput = PAGE_SIZE * 1024;
esz = min(throughput * quota->ms, esz);
_
Patches currently in -mm which might be from yanquanmin1(a)huawei.com are
mm-damon-lru_sort-avoid-divide-by-zero-in-damon_lru_sort_apply_parameters.patch
mm-damon-reclaim-avoid-divide-by-zero-in-damon_reclaim_apply_parameters.patch
3 weeks, 2 days
- 1
- 0
[merged mm-hotfixes-stable] kasan-fix-gcc-mem-intrinsic-prefix-with-sw-tags.patch removed from -mm tree
by Andrew Morton
The quilt patch titled
Subject: kasan: fix GCC mem-intrinsic prefix with sw tags
has been removed from the -mm tree. Its filename was
kasan-fix-gcc-mem-intrinsic-prefix-with-sw-tags.patch
This patch was dropped because it was merged into the mm-hotfixes-stable branch
of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
------------------------------------------------------
From: Ada Couprie Diaz <ada.coupriediaz(a)arm.com>
Subject: kasan: fix GCC mem-intrinsic prefix with sw tags
Date: Thu, 21 Aug 2025 13:07:35 +0100
GCC doesn't support "hwasan-kernel-mem-intrinsic-prefix", only
"asan-kernel-mem-intrinsic-prefix"[0], while LLVM supports both. This is
already taken into account when checking
"CONFIG_CC_HAS_KASAN_MEMINTRINSIC_PREFIX", but not in the KASAN Makefile
adding those parameters when "CONFIG_KASAN_SW_TAGS" is enabled.
Replace the version check with "CONFIG_CC_HAS_KASAN_MEMINTRINSIC_PREFIX",
which already validates that mem-intrinsic prefix parameter can be used,
and choose the correct name depending on compiler.
GCC 13 and above trigger "CONFIG_CC_HAS_KASAN_MEMINTRINSIC_PREFIX" which
prevents `mem{cpy,move,set}()` being redefined in "mm/kasan/shadow.c"
since commit 36be5cba99f6 ("kasan: treat meminstrinsic as builtins in
uninstrumented files"), as we expect the compiler to prefix those calls
with `__(hw)asan_` instead. But as the option passed to GCC has been
incorrect, the compiler has not been emitting those prefixes, effectively
never calling the instrumented versions of `mem{cpy,move,set}()` with
"CONFIG_KASAN_SW_TAGS" enabled.
If "CONFIG_FORTIFY_SOURCES" is enabled, this issue would be mitigated as
it redefines `mem{cpy,move,set}()` and properly aliases the
`__underlying_mem*()` that will be called to the instrumented versions.
Link: https://lkml.kernel.org/r/20250821120735.156244-1-ada.coupriediaz@arm.com
Link: https://gcc.gnu.org/onlinedocs/gcc-13.4.0/gcc/Optimize-Options.html [0]
Signed-off-by: Ada Couprie Diaz <ada.coupriediaz(a)arm.com>
Fixes: 36be5cba99f6 ("kasan: treat meminstrinsic as builtins in uninstrumented files")
Reviewed-by: Yeoreum Yun <yeoreum.yun(a)arm.com>
Cc: Alexander Potapenko <glider(a)google.com>
Cc: Andrey Konovalov <andreyknvl(a)gmail.com>
Cc: Andrey Ryabinin <ryabinin.a.a(a)gmail.com>
Cc: Dmitriy Vyukov <dvyukov(a)google.com>
Cc: Marco Elver <elver(a)google.com>
Cc: Marc Rutland <mark.rutland(a)arm.com>
Cc: Michael Ellerman <mpe(a)ellerman.id.au>
Cc: Nathan Chancellor <nathan(a)kernel.org>
Cc: Vincenzo Frascino <vincenzo.frascino(a)arm.com>
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
scripts/Makefile.kasan | 12 ++++++++----
1 file changed, 8 insertions(+), 4 deletions(-)
--- a/scripts/Makefile.kasan~kasan-fix-gcc-mem-intrinsic-prefix-with-sw-tags
+++ a/scripts/Makefile.kasan
@@ -86,10 +86,14 @@ kasan_params += hwasan-instrument-stack=
hwasan-use-short-granules=0 \
hwasan-inline-all-checks=0
-# Instrument memcpy/memset/memmove calls by using instrumented __hwasan_mem*().
-ifeq ($(call clang-min-version, 150000)$(call gcc-min-version, 130000),y)
- kasan_params += hwasan-kernel-mem-intrinsic-prefix=1
-endif
+# Instrument memcpy/memset/memmove calls by using instrumented __(hw)asan_mem*().
+ifdef CONFIG_CC_HAS_KASAN_MEMINTRINSIC_PREFIX
+ ifdef CONFIG_CC_IS_GCC
+ kasan_params += asan-kernel-mem-intrinsic-prefix=1
+ else
+ kasan_params += hwasan-kernel-mem-intrinsic-prefix=1
+ endif
+endif # CONFIG_CC_HAS_KASAN_MEMINTRINSIC_PREFIX
endif # CONFIG_KASAN_SW_TAGS
_
Patches currently in -mm which might be from ada.coupriediaz(a)arm.com are
3 weeks, 2 days
- 1
- 0
[merged mm-hotfixes-stable] kunit-kasan_test-disable-fortify-string-checker-on-kasan_strings-test.patch removed from -mm tree
by Andrew Morton
The quilt patch titled
Subject: kunit: kasan_test: disable fortify string checker on kasan_strings() test
has been removed from the -mm tree. Its filename was
kunit-kasan_test-disable-fortify-string-checker-on-kasan_strings-test.patch
This patch was dropped because it was merged into the mm-hotfixes-stable branch
of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
------------------------------------------------------
From: Yeoreum Yun <yeoreum.yun(a)arm.com>
Subject: kunit: kasan_test: disable fortify string checker on kasan_strings() test
Date: Fri, 1 Aug 2025 13:02:36 +0100
Similar to commit 09c6304e38e4 ("kasan: test: fix compatibility with
FORTIFY_SOURCE") the kernel is panicing in kasan_string().
This is due to the `src` and `ptr` not being hidden from the optimizer
which would disable the runtime fortify string checker.
Call trace:
__fortify_panic+0x10/0x20 (P)
kasan_strings+0x980/0x9b0
kunit_try_run_case+0x68/0x190
kunit_generic_run_threadfn_adapter+0x34/0x68
kthread+0x1c4/0x228
ret_from_fork+0x10/0x20
Code: d503233f a9bf7bfd 910003fd 9424b243 (d4210000)
---[ end trace 0000000000000000 ]---
note: kunit_try_catch[128] exited with irqs disabled
note: kunit_try_catch[128] exited with preempt_count 1
# kasan_strings: try faulted: last
** replaying previous printk message **
# kasan_strings: try faulted: last line seen mm/kasan/kasan_test_c.c:1600
# kasan_strings: internal error occurred preventing test case from running: -4
Link: https://lkml.kernel.org/r/20250801120236.2962642-1-yeoreum.yun@arm.com
Fixes: 73228c7ecc5e ("KASAN: port KASAN Tests to KUnit")
Signed-off-by: Yeoreum Yun <yeoreum.yun(a)arm.com>
Cc: Alexander Potapenko <glider(a)google.com>
Cc: Andrey Konovalov <andreyknvl(a)gmail.com>
Cc: Andrey Ryabinin <ryabinin.a.a(a)gmail.com>
Cc: Dmitriy Vyukov <dvyukov(a)google.com>
Cc: Vincenzo Frascino <vincenzo.frascino(a)arm.com>
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
mm/kasan/kasan_test_c.c | 2 ++
1 file changed, 2 insertions(+)
--- a/mm/kasan/kasan_test_c.c~kunit-kasan_test-disable-fortify-string-checker-on-kasan_strings-test
+++ a/mm/kasan/kasan_test_c.c
@@ -1578,9 +1578,11 @@ static void kasan_strings(struct kunit *
ptr = kmalloc(size, GFP_KERNEL | __GFP_ZERO);
KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr);
+ OPTIMIZER_HIDE_VAR(ptr);
src = kmalloc(KASAN_GRANULE_SIZE, GFP_KERNEL | __GFP_ZERO);
strscpy(src, "f0cacc1a0000000", KASAN_GRANULE_SIZE);
+ OPTIMIZER_HIDE_VAR(src);
/*
* Make sure that strscpy() does not trigger KASAN if it overreads into
_
Patches currently in -mm which might be from yeoreum.yun(a)arm.com are
kasan-hw-tags-introduce-kasanwrite_only-option.patch
kasan-apply-write-only-mode-in-kasan-kunit-testcases.patch
3 weeks, 2 days
- 1
- 0
[merged mm-hotfixes-stable] mm-userfaultfd-fix-kmap_local-lifo-ordering-for-config_highpte.patch removed from -mm tree
by Andrew Morton
The quilt patch titled
Subject: mm/userfaultfd: fix kmap_local LIFO ordering for CONFIG_HIGHPTE
has been removed from the -mm tree. Its filename was
mm-userfaultfd-fix-kmap_local-lifo-ordering-for-config_highpte.patch
This patch was dropped because it was merged into the mm-hotfixes-stable branch
of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
------------------------------------------------------
From: Sasha Levin <sashal(a)kernel.org>
Subject: mm/userfaultfd: fix kmap_local LIFO ordering for CONFIG_HIGHPTE
Date: Thu, 31 Jul 2025 10:44:31 -0400
With CONFIG_HIGHPTE on 32-bit ARM, move_pages_pte() maps PTE pages using
kmap_local_page(), which requires unmapping in Last-In-First-Out order.
The current code maps dst_pte first, then src_pte, but unmaps them in the
same order (dst_pte, src_pte), violating the LIFO requirement. This
causes the warning in kunmap_local_indexed():
WARNING: CPU: 0 PID: 604 at mm/highmem.c:622 kunmap_local_indexed+0x178/0x17c
addr \!= __fix_to_virt(FIX_KMAP_BEGIN + idx)
Fix this by reversing the unmap order to respect LIFO ordering.
This issue follows the same pattern as similar fixes:
- commit eca6828403b8 ("crypto: skcipher - fix mismatch between mapping and unmapping order")
- commit 8cf57c6df818 ("nilfs2: eliminate staggered calls to kunmap in nilfs_rename")
Both of which addressed the same fundamental requirement that kmap_local
operations must follow LIFO ordering.
Link: https://lkml.kernel.org/r/20250731144431.773923-1-sashal@kernel.org
Fixes: adef440691ba ("userfaultfd: UFFDIO_MOVE uABI")
Signed-off-by: Sasha Levin <sashal(a)kernel.org>
Acked-by: David Hildenbrand <david(a)redhat.com>
Reviewed-by: Suren Baghdasaryan <surenb(a)google.com>
Cc: Andrea Arcangeli <aarcange(a)redhat.com>
Cc: <stable(a)vger.kernel.org>
Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org>
---
mm/userfaultfd.c | 9 +++++++--
1 file changed, 7 insertions(+), 2 deletions(-)
--- a/mm/userfaultfd.c~mm-userfaultfd-fix-kmap_local-lifo-ordering-for-config_highpte
+++ a/mm/userfaultfd.c
@@ -1453,10 +1453,15 @@ out:
folio_unlock(src_folio);
folio_put(src_folio);
}
- if (dst_pte)
- pte_unmap(dst_pte);
+ /*
+ * Unmap in reverse order (LIFO) to maintain proper kmap_local
+ * index ordering when CONFIG_HIGHPTE is enabled. We mapped dst_pte
+ * first, then src_pte, so we must unmap src_pte first, then dst_pte.
+ */
if (src_pte)
pte_unmap(src_pte);
+ if (dst_pte)
+ pte_unmap(dst_pte);
mmu_notifier_invalidate_range_end(&range);
if (si)
put_swap_device(si);
_
Patches currently in -mm which might be from sashal(a)kernel.org are
3 weeks, 2 days
- 1
- 0