Linux-stable-mirror
August 2024
linux-stable-mirror@lists.linaro.org
- 504 participants
- 1304 discussions
FAILED: patch "[PATCH] smb/client: fix rdma usage in smb2_async_writev()" failed to apply to 6.10-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 6.10-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.10.y
git checkout FETCH_HEAD
git cherry-pick -x 017d1701743657fbfaea74397727a9d2b81846b7
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2024082909-everyday-familiar-e920@gregkh' --subject-prefix 'PATCH 6.10.y' HEAD^..
Possible dependencies:
017d17017436 ("smb/client: fix rdma usage in smb2_async_writev()")
b608e2c31878 ("smb/client: remove unused rq_iter_size from struct smb_rqst")
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From 017d1701743657fbfaea74397727a9d2b81846b7 Mon Sep 17 00:00:00 2001
From: Stefan Metzmacher <metze(a)samba.org>
Date: Wed, 21 Aug 2024 16:31:39 +0200
Subject: [PATCH] smb/client: fix rdma usage in smb2_async_writev()
rqst.rq_iter needs to be truncated otherwise we'll
also send the bytes into the stream socket...
This is the logic behind rqst.rq_npages = 0, which was removed in
"cifs: Change the I/O paths to use an iterator rather than a page list"
(d08089f649a0cfb2099c8551ac47eef0cc23fdf2).
Cc: stable(a)vger.kernel.org
Fixes: d08089f649a0 ("cifs: Change the I/O paths to use an iterator rather than a page list")
Reviewed-by: David Howells <dhowells(a)redhat.com>
Signed-off-by: Stefan Metzmacher <metze(a)samba.org>
Signed-off-by: Steve French <stfrench(a)microsoft.com>
diff --git a/fs/smb/client/smb2pdu.c b/fs/smb/client/smb2pdu.c
index 63a2541d4a05..2d7e6c42cf18 100644
--- a/fs/smb/client/smb2pdu.c
+++ b/fs/smb/client/smb2pdu.c
@@ -4913,6 +4913,13 @@ smb2_async_writev(struct cifs_io_subrequest *wdata)
if (rc)
goto out;
+ rqst.rq_iov = iov;
+ rqst.rq_iter = wdata->subreq.io_iter;
+
+ rqst.rq_iov[0].iov_len = total_len - 1;
+ rqst.rq_iov[0].iov_base = (char *)req;
+ rqst.rq_nvec += 1;
+
if (smb3_encryption_required(tcon))
flags |= CIFS_TRANSFORM_REQ;
@@ -4924,6 +4931,7 @@ smb2_async_writev(struct cifs_io_subrequest *wdata)
req->WriteChannelInfoOffset = 0;
req->WriteChannelInfoLength = 0;
req->Channel = SMB2_CHANNEL_NONE;
+ req->Length = cpu_to_le32(io_parms->length);
req->Offset = cpu_to_le64(io_parms->offset);
req->DataOffset = cpu_to_le16(
offsetof(struct smb2_write_req, Buffer));
@@ -4943,7 +4951,6 @@ smb2_async_writev(struct cifs_io_subrequest *wdata)
*/
if (smb3_use_rdma_offload(io_parms)) {
struct smbd_buffer_descriptor_v1 *v1;
- size_t data_size = iov_iter_count(&wdata->subreq.io_iter);
bool need_invalidate = server->dialect == SMB30_PROT_ID;
wdata->mr = smbd_register_mr(server->smbd_conn, &wdata->subreq.io_iter,
@@ -4952,9 +4959,10 @@ smb2_async_writev(struct cifs_io_subrequest *wdata)
rc = -EAGAIN;
goto async_writev_out;
}
+ /* For RDMA read, I/O size is in RemainingBytes not in Length */
+ req->RemainingBytes = req->Length;
req->Length = 0;
req->DataOffset = 0;
- req->RemainingBytes = cpu_to_le32(data_size);
req->Channel = SMB2_CHANNEL_RDMA_V1_INVALIDATE;
if (need_invalidate)
req->Channel = SMB2_CHANNEL_RDMA_V1;
@@ -4966,30 +4974,22 @@ smb2_async_writev(struct cifs_io_subrequest *wdata)
v1->offset = cpu_to_le64(wdata->mr->mr->iova);
v1->token = cpu_to_le32(wdata->mr->mr->rkey);
v1->length = cpu_to_le32(wdata->mr->mr->length);
+
+ rqst.rq_iov[0].iov_len += sizeof(*v1);
+
+ /*
+ * We keep wdata->subreq.io_iter,
+ * but we have to truncate rqst.rq_iter
+ */
+ iov_iter_truncate(&rqst.rq_iter, 0);
}
#endif
- iov[0].iov_len = total_len - 1;
- iov[0].iov_base = (char *)req;
- rqst.rq_iov = iov;
- rqst.rq_nvec = 1;
- rqst.rq_iter = wdata->subreq.io_iter;
if (test_bit(NETFS_SREQ_RETRYING, &wdata->subreq.flags))
smb2_set_replay(server, &rqst);
-#ifdef CONFIG_CIFS_SMB_DIRECT
- if (wdata->mr)
- iov[0].iov_len += sizeof(struct smbd_buffer_descriptor_v1);
-#endif
- cifs_dbg(FYI, "async write at %llu %u bytes iter=%zx\n",
- io_parms->offset, io_parms->length, iov_iter_count(&rqst.rq_iter));
-#ifdef CONFIG_CIFS_SMB_DIRECT
- /* For RDMA read, I/O size is in RemainingBytes not in Length */
- if (!wdata->mr)
- req->Length = cpu_to_le32(io_parms->length);
-#else
- req->Length = cpu_to_le32(io_parms->length);
-#endif
+ cifs_dbg(FYI, "async write at %llu %u bytes iter=%zx\n",
+ io_parms->offset, io_parms->length, iov_iter_count(&wdata->subreq.io_iter));
if (wdata->credits.value > 0) {
shdr->CreditCharge = cpu_to_le16(DIV_ROUND_UP(wdata->subreq.len,
3 weeks
- 1
- 0
FAILED: patch "[PATCH] ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy" failed to apply to 6.10-stable tree
by gregkh＠linuxfoundation.org
The patch below does not apply to the 6.10-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <stable(a)vger.kernel.org>.
To reproduce the conflict and resubmit, you may use the following commands:
git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.10.y
git checkout FETCH_HEAD
git cherry-pick -x 44ceabdec12f4e5938f5668c5a691aa3aac703d7
# <resolve conflicts, build, test, etc.>
git commit -s
git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2024082945-closable-sighing-5d70@gregkh' --subject-prefix 'PATCH 6.10.y' HEAD^..
Possible dependencies:
44ceabdec12f ("ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book3 Ultra")
dcfed708742c ("ALSA: hda/realtek: Implement sound init sequence for Samsung Galaxy Book3 Pro 360")
thanks,
greg k-h
------------------ original commit in Linus's tree ------------------
From 44ceabdec12f4e5938f5668c5a691aa3aac703d7 Mon Sep 17 00:00:00 2001
From: YOUNGJIN JOO <neoelec(a)gmail.com>
Date: Sun, 25 Aug 2024 18:25:15 +0900
Subject: [PATCH] ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy
Book3 Ultra
144d:c1cc requires the same workaround to enable the speaker amp
as other Samsung models with the ALC298 codec.
Signed-off-by: YOUNGJIN JOO <neoelec(a)gmail.com>
Cc: <stable(a)vger.kernel.org>
Link: https://patch.msgid.link/20240825092515.28728-1-neoelec@gmail.com
Signed-off-by: Takashi Iwai <tiwai(a)suse.de>
diff --git a/sound/pci/hda/patch_realtek.c b/sound/pci/hda/patch_realtek.c
index b5cc3417138c..c04eac6a5064 100644
--- a/sound/pci/hda/patch_realtek.c
+++ b/sound/pci/hda/patch_realtek.c
@@ -10540,6 +10540,7 @@ static const struct snd_pci_quirk alc269_fixup_tbl[] = {
SND_PCI_QUIRK(0x144d, 0xca03, "Samsung Galaxy Book2 Pro 360 (NP930QED)", ALC298_FIXUP_SAMSUNG_AMP),
SND_PCI_QUIRK(0x144d, 0xc868, "Samsung Galaxy Book2 Pro (NP930XED)", ALC298_FIXUP_SAMSUNG_AMP),
SND_PCI_QUIRK(0x144d, 0xc1ca, "Samsung Galaxy Book3 Pro 360 (NP960QFG-KB1US)", ALC298_FIXUP_SAMSUNG_AMP2),
+ SND_PCI_QUIRK(0x144d, 0xc1cc, "Samsung Galaxy Book3 Ultra (NT960XFH-XD92G))", ALC298_FIXUP_SAMSUNG_AMP2),
SND_PCI_QUIRK(0x1458, 0xfa53, "Gigabyte BXBT-2807", ALC283_FIXUP_HEADSET_MIC),
SND_PCI_QUIRK(0x1462, 0xb120, "MSI Cubi MS-B120", ALC283_FIXUP_HEADSET_MIC),
SND_PCI_QUIRK(0x1462, 0xb171, "Cubi N 8GL (MS-B171)", ALC283_FIXUP_HEADSET_MIC),
3 weeks
- 1
- 0
Apply dbaee836d60a8 to linux-5.10.y
by Nathan Chancellor
Hi Greg and Sasha,
Please apply commit dbaee836d60a ("KVM: arm64: Don't use cbz/adr with
external symbols") to linux-5.10.y, as a recent LLVM optimization around
__cold functions [1] can cause hyp_panic() to be too far away from
__guest_enter(), resulting in the same error that occurred with LTO (for
the same reason):
ld.lld: error: arch/arm64/built-in.a(kvm/hyp/entry.o):(function __guest_enter: .text+0x120): relocation R_AARCH64_CONDBR19 out of range: 14339212 is not in [-1048576, 1048575]; references 'hyp_panic'
>>> referenced by entry.S:88 (arch/arm64/kvm/hyp/vhe/../entry.S:88)
>>> defined in arch/arm64/built-in.a(kvm/hyp/vhe/switch.o)
ld.lld: error: arch/arm64/built-in.a(kvm/hyp/entry.o):(function __guest_enter: .text+0x134): relocation R_AARCH64_ADR_PREL_LO21 out of range: 14339192 is not in [-1048576, 1048575]; references 'hyp_panic'
>>> referenced by entry.S:97 (arch/arm64/kvm/hyp/vhe/../entry.S:97)
>>> defined in arch/arm64/built-in.a(kvm/hyp/vhe/switch.o)
It applies cleanly with 'patch -p1' and I have verified that it fixes
the issue.
[1]: https://github.com/llvm/llvm-project/commit/6b11573b8c5e3d36beee099dbe7347c…
Cheers,
Nathan
3 weeks
- 2
- 1
[PATCH v4.19-v6.1] drm/amdgpu: Using uninitialized value *size when calling
by Vamsi Krishna Brahmajosyula
From: Jesse Zhang <jesse.zhang(a)amd.com>
[ Upstream commit 88a9a467c548d0b3c7761b4fd54a68e70f9c0944 ]
Initialize the size before calling amdgpu_vce_cs_reloc, such as case 0x03000001.
V2: To really improve the handling we would actually
need to have a separate value of 0xffffffff.(Christian)
Signed-off-by: Jesse Zhang <jesse.zhang(a)amd.com>
Suggested-by: Christian König <christian.koenig(a)amd.com>
Reviewed-by: Christian König <christian.koenig(a)amd.com>
Signed-off-by: Alex Deucher <alexander.deucher(a)amd.com>
Signed-off-by: Sasha Levin <sashal(a)kernel.org>
Signed-off-by: Vamsi Krishna Brahmajosyula <vamsi-krishna.brahmajosyula(a)broadcom.com>
---
drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c b/drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c
index ecaa2d748..0a28daa14 100644
--- a/drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c
+++ b/drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c
@@ -725,7 +725,8 @@ int amdgpu_vce_ring_parse_cs(struct amdgpu_cs_parser *p, uint32_t ib_idx)
uint32_t created = 0;
uint32_t allocated = 0;
uint32_t tmp, handle = 0;
- uint32_t *size = &tmp;
+ uint32_t dummy = 0xffffffff;
+ uint32_t *size = &dummy;
unsigned idx;
int i, r = 0;
--
2.39.4
3 weeks
- 2
- 1
[PATCH 4.19 1/6] ovl: check permission to open real file
by hsimeliere.opensource＠witekio.com
From: Miklos Szeredi <mszeredi(a)redhat.com>
commit 05acefb4872dae89e772729efb194af754c877e8 upstream.
Call inode_permission() on real inode before opening regular file on one of
the underlying layers.
In some cases ovl_permission() already checks access to an underlying file,
but it misses the metacopy case, and possibly other ones as well.
Removing the redundant permission check from ovl_permission() should be
considered later.
Signed-off-by: Miklos Szeredi <mszeredi(a)redhat.com>
Signed-off-by: Hugo SIMELIERE <hsimeliere.opensource(a)witekio.com>
---
fs/overlayfs/file.c | 16 ++++++++++++++--
1 file changed, 14 insertions(+), 2 deletions(-)
diff --git a/fs/overlayfs/file.c b/fs/overlayfs/file.c
index 73c3e2c21edb..24a83ed9829a 100644
--- a/fs/overlayfs/file.c
+++ b/fs/overlayfs/file.c
@@ -34,10 +34,22 @@ static struct file *ovl_open_realfile(const struct file *file,
struct file *realfile;
const struct cred *old_cred;
int flags = file->f_flags | OVL_OPEN_FLAGS;
+ int acc_mode = ACC_MODE(flags);
+ int err;
+
+ if (flags & O_APPEND)
+ acc_mode |= MAY_APPEND;
old_cred = ovl_override_creds(inode->i_sb);
- realfile = open_with_fake_path(&file->f_path, flags, realinode,
- current_cred());
+ err = inode_permission(realinode, MAY_OPEN | acc_mode);
+ if (err) {
+ realfile = ERR_PTR(err);
+ } else if (!inode_owner_or_capable(realinode)) {
+ realfile = ERR_PTR(-EPERM);
+ } else {
+ realfile = open_with_fake_path(&file->f_path, flags, realinode,
+ current_cred());
+ }
revert_creds(old_cred);
pr_debug("open(%p[%pD2/%c], 0%o) -> (%p, 0%o)\n",
--
2.43.0
3 weeks
- 2
- 7
Linux 6.10.7
by Greg Kroah-Hartman
I'm announcing the release of the 6.10.7 kernel.
All users of the 6.10 kernel series must upgrade.
The updated 6.10.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.10.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/ABI/testing/sysfs-devices-system-cpu | 3
Makefile | 4
arch/arm64/kernel/acpi_numa.c | 2
arch/arm64/kernel/setup.c | 3
arch/arm64/kernel/smp.c | 2
arch/arm64/kvm/sys_regs.c | 6
arch/arm64/kvm/vgic/vgic-debug.c | 2
arch/arm64/kvm/vgic/vgic.h | 7
arch/mips/kernel/cpu-probe.c | 4
arch/powerpc/include/asm/topology.h | 13
arch/riscv/kernel/traps.c | 4
arch/riscv/mm/init.c | 4
arch/s390/boot/startup.c | 55 +--
arch/s390/boot/vmem.c | 14
arch/s390/boot/vmlinux.lds.S | 7
arch/s390/include/asm/page.h | 3
arch/s390/include/asm/uv.h | 5
arch/s390/kernel/vmlinux.lds.S | 2
arch/s390/kvm/kvm-s390.h | 7
arch/s390/tools/relocs.c | 2
block/blk-mq-tag.c | 5
drivers/acpi/acpica/acevents.h | 6
drivers/acpi/acpica/evregion.c | 12
drivers/acpi/acpica/evxfregn.c | 64 ---
drivers/acpi/ec.c | 14
drivers/acpi/internal.h | 1
drivers/acpi/scan.c | 2
drivers/acpi/video_detect.c | 22 +
drivers/ata/pata_macio.c | 23 -
drivers/atm/idt77252.c | 9
drivers/bluetooth/btintel.c | 10
drivers/bluetooth/btintel_pcie.c | 3
drivers/bluetooth/btmtksdio.c | 3
drivers/bluetooth/btrtl.c | 1
drivers/bluetooth/btusb.c | 4
drivers/bluetooth/hci_qca.c | 4
drivers/bluetooth/hci_vhci.c | 2
drivers/char/xillybus/xillyusb.c | 42 +-
drivers/gpio/gpio-mlxbf3.c | 14
drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 3
drivers/gpu/drm/amd/amdgpu/amdgpu_ctx.c | 8
drivers/gpu/drm/amd/amdgpu/amdgpu_psp_ta.c | 3
drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.c | 53 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.h | 1
drivers/gpu/drm/amd/amdgpu/jpeg_v2_0.c | 4
drivers/gpu/drm/amd/amdgpu/jpeg_v4_0_3.c | 63 +++
drivers/gpu/drm/amd/amdgpu/jpeg_v4_0_3.h | 7
drivers/gpu/drm/amd/amdgpu/jpeg_v5_0_0.c | 1
drivers/gpu/drm/amd/amdgpu/sdma_v5_2.c | 18 -
drivers/gpu/drm/amd/amdgpu/soc15d.h | 6
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 32 +
drivers/gpu/drm/amd/display/dc/hwss/dcn10/dcn10_hwseq.c | 4
drivers/gpu/drm/amd/display/dc/resource/dcn321/dcn321_resource.c | 3
drivers/gpu/drm/i915/display/intel_dp_hdcp.c | 4
drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.c | 4
drivers/gpu/drm/msm/disp/dpu1/dpu_hw_catalog.c | 4
drivers/gpu/drm/msm/disp/dpu1/dpu_kms.h | 14
drivers/gpu/drm/msm/disp/dpu1/dpu_plane.c | 20 -
drivers/gpu/drm/msm/dp/dp_ctrl.c | 2
drivers/gpu/drm/msm/dp/dp_panel.c | 19 -
drivers/gpu/drm/msm/msm_mdss.c | 2
drivers/gpu/drm/nouveau/nvkm/core/firmware.c | 9
drivers/gpu/drm/nouveau/nvkm/falcon/fw.c | 6
drivers/gpu/drm/v3d/v3d_sched.c | 14
drivers/gpu/drm/xe/display/xe_display.c | 6
drivers/gpu/drm/xe/xe_device.c | 4
drivers/gpu/drm/xe/xe_exec_queue.c | 19 -
drivers/gpu/drm/xe/xe_exec_queue_types.h | 10
drivers/gpu/drm/xe/xe_gt_pagefault.c | 18 -
drivers/gpu/drm/xe/xe_guc_submit.c | 8
drivers/gpu/drm/xe/xe_hw_fence.c | 59 ++-
drivers/gpu/drm/xe/xe_hw_fence.h | 7
drivers/gpu/drm/xe/xe_lrc.c | 48 ++
drivers/gpu/drm/xe/xe_lrc.h | 3
drivers/gpu/drm/xe/xe_mmio.c | 41 +-
drivers/gpu/drm/xe/xe_mmio.h | 2
drivers/gpu/drm/xe/xe_ring_ops.c | 22 -
drivers/gpu/drm/xe/xe_sched_job.c | 180 +++++-----
drivers/gpu/drm/xe/xe_sched_job.h | 7
drivers/gpu/drm/xe/xe_sched_job_types.h | 20 +
drivers/gpu/drm/xe/xe_trace.h | 11
drivers/hid/wacom_wac.c | 4
drivers/i2c/busses/i2c-qcom-geni.c | 4
drivers/i2c/busses/i2c-tegra.c | 4
drivers/input/input-mt.c | 3
drivers/input/serio/i8042-acpipnpio.h | 20 -
drivers/input/serio/i8042.c | 10
drivers/iommu/io-pgfault.c | 1
drivers/iommu/iommufd/device.c | 2
drivers/md/dm-ioctl.c | 22 +
drivers/md/dm.c | 4
drivers/md/persistent-data/dm-space-map-metadata.c | 4
drivers/md/raid1.c | 14
drivers/misc/fastrpc.c | 22 -
drivers/mmc/core/mmc_test.c | 9
drivers/mmc/host/dw_mmc.c | 8
drivers/mmc/host/mtk-sd.c | 8
drivers/net/bonding/bond_main.c | 21 -
drivers/net/bonding/bond_options.c | 2
drivers/net/dsa/microchip/ksz_ptp.c | 5
drivers/net/dsa/mv88e6xxx/global1_atu.c | 3
drivers/net/dsa/ocelot/felix.c | 11
drivers/net/dsa/vitesse-vsc73xx-core.c | 45 ++
drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 5
drivers/net/ethernet/chelsio/cxgb4/cxgb4_filter.c | 3
drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c | 7
drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 3
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 28 +
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mdio.c | 3
drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 4
drivers/net/ethernet/intel/ice/devlink/devlink_port.c | 4
drivers/net/ethernet/intel/ice/ice_base.c | 21 +
drivers/net/ethernet/intel/ice/ice_txrx.c | 47 --
drivers/net/ethernet/intel/igb/igb_main.c | 1
drivers/net/ethernet/intel/igc/igc_defines.h | 6
drivers/net/ethernet/intel/igc/igc_main.c | 8
drivers/net/ethernet/intel/igc/igc_tsn.c | 76 +++-
drivers/net/ethernet/intel/igc/igc_tsn.h | 1
drivers/net/ethernet/marvell/octeontx2/af/rvu_cpt.c | 23 -
drivers/net/ethernet/mediatek/mtk_wed.c | 6
drivers/net/ethernet/mellanox/mlx5/core/en/reporter_tx.c | 2
drivers/net/ethernet/mellanox/mlx5/core/en_fs_ethtool.c | 2
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 13
drivers/net/ethernet/mellanox/mlx5/core/lib/ipsec_fs_roce.c | 6
drivers/net/ethernet/mellanox/mlx5/core/lib/sd.c | 18 -
drivers/net/ethernet/mellanox/mlxbf_gige/mlxbf_gige.h | 8
drivers/net/ethernet/mellanox/mlxbf_gige/mlxbf_gige_main.c | 10
drivers/net/ethernet/mellanox/mlxbf_gige/mlxbf_gige_regs.h | 2
drivers/net/ethernet/mellanox/mlxbf_gige/mlxbf_gige_rx.c | 50 ++
drivers/net/ethernet/microsoft/mana/mana_en.c | 30 +
drivers/net/ethernet/mscc/ocelot.c | 91 ++++-
drivers/net/ethernet/mscc/ocelot_fdma.c | 3
drivers/net/ethernet/mscc/ocelot_vsc7514.c | 4
drivers/net/ethernet/wangxun/ngbe/ngbe_mdio.c | 8
drivers/net/ethernet/xilinx/xilinx_axienet.h | 17
drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 25 -
drivers/net/gtp.c | 3
drivers/net/wireless/ath/ath12k/dp_tx.c | 72 ++++
drivers/net/wireless/ath/ath12k/hw.c | 6
drivers/net/wireless/ath/ath12k/hw.h | 4
drivers/net/wireless/ath/ath12k/mac.c | 1
drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c | 13
drivers/nvme/host/core.c | 2
drivers/platform/surface/aggregator/controller.c | 3
drivers/platform/x86/dell/Kconfig | 1
drivers/platform/x86/dell/dell-uart-backlight.c | 8
drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c | 3
drivers/pmdomain/imx/imx93-pd.c | 5
drivers/pmdomain/imx/scu-pd.c | 5
drivers/s390/block/dasd.c | 36 +-
drivers/s390/block/dasd_3990_erp.c | 10
drivers/s390/block/dasd_eckd.c | 55 +--
drivers/s390/block/dasd_genhd.c | 1
drivers/s390/block/dasd_int.h | 2
drivers/s390/crypto/ap_bus.c | 7
drivers/spi/spi-cadence-quadspi.c | 14
drivers/staging/media/atomisp/pci/ia_css_stream_public.h | 8
drivers/staging/media/atomisp/pci/sh_css_internal.h | 19 -
drivers/thermal/gov_bang_bang.c | 87 +++-
drivers/thermal/thermal_core.c | 3
drivers/thermal/thermal_debugfs.c | 6
drivers/thermal/thermal_of.c | 23 -
drivers/thunderbolt/switch.c | 1
drivers/tty/serial/8250/8250_omap.c | 33 -
drivers/tty/serial/atmel_serial.c | 2
drivers/tty/serial/fsl_lpuart.c | 1
drivers/tty/vt/conmakehash.c | 12
drivers/usb/host/xhci-mem.c | 2
drivers/usb/host/xhci.c | 8
drivers/usb/misc/usb-ljca.c | 1
drivers/usb/typec/tcpm/tcpm.c | 1
fs/btrfs/delayed-ref.c | 67 +++
fs/btrfs/delayed-ref.h | 2
fs/btrfs/extent-tree.c | 51 ++
fs/btrfs/extent_io.c | 14
fs/btrfs/extent_map.c | 22 -
fs/btrfs/free-space-cache.c | 14
fs/btrfs/send.c | 52 ++
fs/btrfs/super.c | 18 -
fs/btrfs/tree-checker.c | 74 ++++
fs/ceph/addr.c | 19 +
fs/file.c | 30 -
fs/fuse/dev.c | 6
fs/inode.c | 39 ++
fs/libfs.c | 35 +
fs/locks.c | 2
fs/netfs/buffered_read.c | 8
fs/netfs/buffered_write.c | 2
fs/netfs/fscache_cookie.c | 4
fs/netfs/io.c | 144 ++++++++
fs/smb/client/cifsglob.h | 17
fs/smb/client/file.c | 55 ++-
fs/smb/client/reparse.c | 11
fs/smb/client/smb1ops.c | 2
fs/smb/client/smb2ops.c | 42 ++
fs/smb/client/smb2pdu.c | 40 ++
fs/smb/client/trace.h | 55 +++
fs/smb/client/transport.c | 8
fs/smb/server/connection.c | 34 +
fs/smb/server/connection.h | 3
fs/smb/server/mgmt/user_session.c | 8
fs/smb/server/smb2pdu.c | 5
include/acpi/acpixf.h | 5
include/acpi/video.h | 1
include/asm-generic/vmlinux.lds.h | 19 -
include/linux/bitmap.h | 12
include/linux/bpf_verifier.h | 4
include/linux/dsa/ocelot.h | 47 ++
include/linux/fs.h | 5
include/linux/hugetlb.h | 33 +
include/linux/io_uring_types.h | 2
include/linux/mm.h | 11
include/linux/panic.h | 1
include/linux/pgalloc_tag.h | 13
include/linux/thermal.h | 1
include/net/af_vsock.h | 4
include/net/bluetooth/hci.h | 17
include/net/bluetooth/hci_core.h | 2
include/net/kcm.h | 1
include/net/mana/mana.h | 1
include/scsi/scsi_cmnd.h | 2
include/soc/mscc/ocelot.h | 12
include/trace/events/netfs.h | 1
include/uapi/misc/fastrpc.h | 3
init/Kconfig | 25 -
io_uring/io_uring.h | 2
io_uring/kbuf.c | 9
io_uring/napi.c | 50 +-
io_uring/napi.h | 2
kernel/bpf/verifier.c | 5
kernel/cgroup/cpuset.c | 5
kernel/cpu.c | 12
kernel/events/core.c | 3
kernel/kallsyms.c | 60 ---
kernel/kallsyms_internal.h | 6
kernel/kallsyms_selftest.c | 22 -
kernel/panic.c | 8
kernel/printk/printk.c | 2
kernel/trace/trace.c | 2
kernel/vmcore_info.c | 4
kernel/workqueue.c | 47 +-
mm/huge_memory.c | 29 -
mm/memcontrol.c | 7
mm/memory-failure.c | 20 -
mm/memory.c | 33 -
mm/mm_init.c | 12
mm/mseal.c | 14
mm/page_alloc.c | 51 +-
mm/vmalloc.c | 11
net/bluetooth/hci_core.c | 19 -
net/bluetooth/hci_event.c | 2
net/bluetooth/mgmt.c | 4
net/bluetooth/smp.c | 144 ++++----
net/bridge/br_netfilter_hooks.c | 6
net/dsa/tag_ocelot.c | 37 --
net/ipv4/tcp_input.c | 28 -
net/ipv4/tcp_ipv4.c | 14
net/ipv4/udp_offload.c | 3
net/ipv6/ip6_output.c | 10
net/ipv6/ip6_tunnel.c | 12
net/ipv6/netfilter/nf_conntrack_reasm.c | 4
net/iucv/iucv.c | 4
net/kcm/kcmsock.c | 4
net/mctp/test/route-test.c | 2
net/mptcp/diag.c | 2
net/mptcp/pm.c | 13
net/mptcp/pm_netlink.c | 142 +++++--
net/mptcp/protocol.h | 3
net/netfilter/nf_flow_table_inet.c | 3
net/netfilter/nf_flow_table_ip.c | 3
net/netfilter/nf_flow_table_offload.c | 2
net/netfilter/nf_tables_api.c | 147 +++++---
net/netfilter/nfnetlink.c | 5
net/netfilter/nfnetlink_queue.c | 35 +
net/netfilter/nft_counter.c | 9
net/openvswitch/datapath.c | 2
net/sched/sch_netem.c | 47 +-
net/vmw_vsock/af_vsock.c | 50 +-
net/vmw_vsock/vsock_bpf.c | 4
scripts/kallsyms.c | 111 +-----
scripts/link-vmlinux.sh | 106 +++--
scripts/rust_is_available.sh | 6
security/keys/trusted-keys/trusted_dcp.c | 35 +
security/selinux/avc.c | 8
security/selinux/hooks.c | 12
sound/core/timer.c | 2
sound/pci/hda/patch_realtek.c | 1
sound/pci/hda/tas2781_hda_i2c.c | 14
sound/usb/quirks-table.h | 1
sound/usb/quirks.c | 2
tools/perf/tests/vmlinux-kallsyms.c | 1
tools/testing/selftests/bpf/progs/iters.c | 54 +++
tools/testing/selftests/core/close_range_test.c | 35 +
tools/testing/selftests/drivers/net/mlxsw/ethtool_lanes.sh | 3
tools/testing/selftests/mm/Makefile | 2
tools/testing/selftests/mm/run_vmtests.sh | 3
tools/testing/selftests/net/af_unix/msg_oob.c | 2
tools/testing/selftests/net/lib.sh | 11
tools/testing/selftests/net/mptcp/mptcp_join.sh | 28 +
tools/testing/selftests/net/udpgro.sh | 53 +-
tools/testing/selftests/tc-testing/tdc.py | 1
tools/tracing/rtla/src/osnoise_top.c | 11
302 files changed, 3441 insertions(+), 1720 deletions(-)
Abhinav Jain (1):
selftest: af_unix: Fix kselftest compilation warnings
Abhinav Kumar (4):
drm/msm/dp: fix the max supported bpp logic
drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()
drm/msm/dp: reset the link phy params before link training
drm/msm: fix the highest_bank_bit for sc7180
Al Viro (2):
fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
memcg_write_event_control(): fix a user-triggerable oops
Alex Deucher (3):
drm/amdgpu/jpeg2: properly set atomics vmid field
drm/amdgpu/jpeg4: properly set atomics vmid field
drm/amdgpu/sdma5.2: limit wptr workaround to sdma 5.2.1
Alexander Gordeev (2):
s390/boot: Avoid possible physmem_info segment corruption
s390/boot: Fix KASLR base offset off by __START_KERNEL bytes
Alexander Stein (1):
pmdomain: imx: scu-pd: Remove duplicated clocks
Alexandra Winter (1):
s390/iucv: Fix vargs handling in iucv_alloc_device()
Alexandre Courbot (1):
Makefile: add $(srctree) to dependency of compile_commands.json target
Andi Shyti (1):
i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
Asmaa Mnebhi (1):
gpio: mlxbf3: Support shutdown() function
Baochen Qiang (1):
wifi: ath12k: use 128 bytes aligned iova in transmit path for WCN7850
Baojun Xu (1):
ALSA: hda/tas2781: fix wrong calibrated data order
Barak Biber (1):
iommu: Restore lost return in iommu_report_device_fault()
Bas Nieuwenhuizen (1):
drm/amdgpu: Actually check flags for all context ops.
Ben Whitten (1):
mmc: dw_mmc: allow biu and ciu clocks to defer
Bharat Bhushan (1):
octeontx2-af: Fix CPT AF register offset calculation
Boyuan Zhang (2):
drm/amdgpu/vcn: identify unified queue in sw init
drm/amdgpu/vcn: not pause dpg for unified queue
Breno Leitao (1):
i2c: tegra: Do not mark ACPI devices as irq safe
Candice Li (1):
drm/amdgpu: Validate TA binary size
Carolina Jubran (1):
net/mlx5e: XPS, Fix oversight of Multi-PF Netdev changes
Celeste Liu (1):
riscv: entry: always initialize regs->a0 to -ENOSYS
Chaotian Jing (1):
scsi: core: Fix the return value of scsi_logical_block_count()
Chen Ridong (1):
cgroup/cpuset: fix panic caused by partcmd_update
Christian Brauner (2):
pidfd: prevent creation of pidfds for kthreads
Revert "pidfd: prevent creation of pidfds for kthreads"
Claudio Imbrenda (1):
s390/uv: Panic for set and remove shared access UVC errors
Cong Wang (1):
vsock: fix recursive ->recvmsg calls
Cosmin Ratiu (1):
net/mlx5e: Correctly report errors for ethtool rx flows
Dan Carpenter (4):
rtla/osnoise: Prevent NULL dereference in error handling
atm: idt77252: prevent use after free in dequeue_rx()
dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
mmc: mmc_test: Fix NULL dereference on allocation failure
Dave Airlie (1):
nouveau/firmware: use dma non-coherent allocator
David (Ming Qiang) Wu (1):
drm/amd/amdgpu: command submission parser for JPEG
David Gstir (2):
KEYS: trusted: fix DCP blob payload length assignment
KEYS: trusted: dcp: fix leak of blob encryption key
David Hildenbrand (1):
mm/hugetlb: fix hugetlb vs. core-mm PT locking
David Howells (2):
netfs, ceph: Revert "netfs: Remove deprecated use of PG_private_2 as a second writeback flag"
cifs: Add a tracepoint to track credits involved in R/W requests
David Thompson (1):
mlxbf_gige: disable RX filters until RX path initialized
Dmitry Baryshkov (5):
drm/msm/dpu: don't play tricks with debug macros
drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
drm/msm/dpu: limit QCM2290 to RGB formats only
drm/msm/dpu: relax YUV requirements
drm/msm/dpu: take plane rotation into account for wide planes
Donald Hunter (2):
netfilter: nfnetlink: Initialise extack before use in ACKs
netfilter: flowtable: initialise extack before use
Dragos Tatulea (1):
net/mlx5e: Take state lock during tx timeout reporter
Eli Billauer (3):
char: xillybus: Don't destroy workqueue from work item running on it
char: xillybus: Refine workqueue handling
char: xillybus: Check USB endpoints when probing device
Eric Dumazet (4):
gtp: pull network headers in gtp_dev_xmit()
ipv6: prevent UAF in ip6_send_skb()
ipv6: fix possible UAF in ip6_finish_output2()
ipv6: prevent possible UAF in ip6_xmit()
Eric Farman (1):
s390/dasd: Remove DMA alignment
Eugene Syromiatnikov (1):
mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
Faizal Rahim (4):
igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
igc: Fix qbv_config_change_errors logics
igc: Fix reset adapter logics when tx mode change
igc: Fix qbv tx latency by setting gtxoffset
Felix Fietkau (1):
udp: fix receiving fraglist GSO packets
Filipe Manana (2):
btrfs: send: allow cloning non-aligned extent if it ends at i_size
btrfs: only run the extent map shrinker from kswapd tasks
Florian Westphal (2):
netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
tcp: prevent concurrent execution of tcp_sk_exit_batch
Greg Kroah-Hartman (1):
Linux 6.10.7
Griffin Kroah-Hartman (3):
Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD"
Revert "serial: 8250_omap: Set the console genpd always on if no console suspend"
Bluetooth: MGMT: Add error handling to pair_device()
Haibo Xu (1):
arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
Hailong Liu (1):
mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0
Haiyang Zhang (1):
net: mana: Fix RX buf alloc_size alignment and atomic op panic
Hamza Mahfooz (1):
drm/amd/display: fix s2idle entry for DCN3.5+
Hangbin Liu (2):
selftests: udpgro: report error when receive failed
selftests: udpgro: no need to load xdp for gro
Hans de Goede (5):
usb: misc: ljca: Add Lunar Lake ljca GPIO HID to ljca_gpio_hids[]
media: atomisp: Fix streaming no longer working on BYT / ISP2400 devices
ACPI: video: Add Dell UART backlight controller detection
ACPI: video: Add backlight=native quirk for Dell OptiPlex 7760 AIO
platform/x86: dell-uart-backlight: Use acpi_video_get_backlight_type()
Harald Freudenberger (1):
s390/ap: Refine AP bus bindings complete processing
Ido Schimmel (1):
selftests: mlxsw: ethtool_lanes: Source ethtool lib from correct path
Jann Horn (2):
fuse: Initialize beyond-EOF page contents before setting uptodate
kallsyms: get rid of code for absolute kallsyms
Janne Grunau (1):
wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
Jason Gerecke (1):
HID: wacom: Defer calculation of resolution until resolution_code is known
Jens Axboe (1):
io_uring/kbuf: sanitize peek buffer setup
Jeremy Kerr (1):
net: mctp: test: Use correct skb for route input check
Jiaxun Yang (1):
MIPS: Loongson64: Set timer mode in cpu-probe
Jie Wang (2):
net: hns3: fix wrong use of semaphore up
net: hns3: fix a deadlock problem when config TC during resetting
Josef Bacik (1):
btrfs: check delayed refs when we're checking if a ref exists
Joseph Huang (1):
net: dsa: mv88e6xxx: Fix out-of-bound access
Juan José Arboleda (1):
ALSA: usb-audio: Support Yamaha P-125 quirk entry
Khazhismel Kumykov (1):
dm resume: don't return EINVAL when signalled
Kirill A. Shutemov (1):
mm: fix endless reclaim on machines with unaccepted memory
Krzysztof Kozlowski (3):
thermal: of: Fix OF node leak in thermal_of_trips_init() error path
thermal: of: Fix OF node leak in thermal_of_zone_register()
thermal: of: Fix OF node leak in of_thermal_zone_find() error paths
Kuniyuki Iwashima (1):
kcm: Serialise kcm_sendmsg() for the same socket.
Kyle Huey (1):
perf/bpf: Don't call bpf_overflow_handler() for tracing events
Leon Hwang (1):
bpf: Fix updating attached freplace prog in prog_array map
Li Lingfeng (1):
block: Fix lockdep warning in blk_mq_mark_tag_wait
Lianqin Hu (1):
ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
Loan Chen (1):
drm/amd/display: Enable otg synchronization logic for DCN321
Long Li (1):
net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings
Lucas De Marchi (1):
drm/xe: Fix opregion leak
Luiz Augusto von Dentz (3):
Bluetooth: HCI: Invert LE State quirk to be opt-out rather then opt-in
Bluetooth: hci_core: Fix LE quote calculation
Bluetooth: SMP: Fix assumption of Central always being Initiator
Maciej Fijalkowski (3):
ice: fix page reuse when PAGE_SIZE is over 8k
ice: fix ICE_LAST_OFFSET formula
ice: fix truesize operations for PAGE_SIZE >= 8192
Marc Zyngier (2):
usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup()
KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
Mario Limonciello (1):
drm/amd/display: Don't register panel_power_savings on OLED panels
Martin Whitaker (1):
net: dsa: microchip: fix PTP config failure when using multiple ports
Masahiro Yamada (7):
tty: vt: conmakehash: remove non-portable code printing comment header
kbuild: refactor variables in scripts/link-vmlinux.sh
kbuild: remove PROVIDE() for kallsyms symbols
rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
kbuild: merge temporary vmlinux for BTF and kallsyms
kbuild: avoid scripts/kallsyms parsing /dev/null
Mathias Nyman (1):
xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
Mathieu Othacehe (1):
tty: atmel_serial: use the correct RTS flag.
Matthew Auld (3):
drm/xe/display: stop calling domains_driver_remove twice
drm/xe/mmio: move mmio_fini over to devm
drm/xe: reset mmio mappings with devm
Matthew Brost (4):
drm/xe: Fix tile fini sequence
drm/xe: Decouple job seqno and lrc seqno
drm/xe: Free job before xe_exec_queue_put
drm/xe: Do not dereference NULL job->fence in trace points
Matthew Wilcox (Oracle) (1):
netfs: Fault in smaller chunks for non-large folio mappings
Matthieu Baerts (NGI0) (14):
selftests: net: lib: ignore possible errors
selftests: net: lib: kill PIDs before del netns
mptcp: pm: re-using ID of unused removed ADD_ADDR
mptcp: pm: re-using ID of unused removed subflows
mptcp: pm: re-using ID of unused flushed subflows
mptcp: pm: remove mptcp_pm_remove_subflow()
mptcp: pm: only mark 'subflow' endp as available
mptcp: pm: only decrement add_addr_accepted for MPJ req
mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
mptcp: pm: only in-kernel cannot have entries with ID 0
mptcp: pm: fullmesh: select the right ID later
mptcp: pm: avoid possible UaF when selecting endp
selftests: mptcp: join: validate fullmesh endp on 1st sf
selftests: mptcp: join: check re-using ID of closed subflow
Max Kellermann (1):
fs/netfs/fscache_cookie: add missing "n_accesses" check
Maximilian Luz (1):
platform/surface: aggregator: Fix warning when controller is destroyed in probe
Maíra Canal (1):
drm/v3d: Fix out-of-bounds read in `v3d_csd_job_run()`
Melissa Wen (1):
drm/amd/display: fix cursor offset on rotation 180
Menglong Dong (1):
net: ovs: fix ovs_drop_reasons error
Mengqi Zhang (1):
mmc: mtk-sd: receive cmd8 data when hs400 tuning fail
Mengyuan Lou (1):
net: ngbe: Fix phy mode set to external phy
Michael Ellerman (1):
ata: pata_macio: Fix DMA table overflow
Michael Mueller (1):
KVM: s390: fix validity interception issue when gisa is switched off
Michal Swiatkowski (1):
ice: use internal pf id instead of function number
Miguel Ojeda (1):
rust: work around `bindgen` 0.69.0 issue
Mika Westerberg (1):
thunderbolt: Mark XDomain as unplugged when router is removed
Mikulas Patocka (2):
dm persistent data: fix memory allocation failure
dm suspend: return -ERESTARTSYS instead of -EINTR
Ming Lei (1):
nvme: move stopping keep-alive into nvme_uninit_ctrl()
Muhammad Usama Anjum (1):
selftests: memfd_secret: don't build memfd_secret test on unsupported arches
Nam Cao (1):
riscv: change XIP's kernel_map.size to be size of the entire kernel
Namjae Jeon (2):
ksmbd: the buffer of smb2 query dir response has at least 1 byte
ksmbd: fix race condition between destroy_previous_session() and smb2 operations()
Naohiro Aota (2):
btrfs: zoned: properly take lock to read/update block group's zoned variables
btrfs: fix invalid mapping of extent xarray state
Nicolin Chen (1):
iommufd/device: Fix hwpt at err_unresv in iommufd_device_do_replace()
Nikolay Aleksandrov (4):
bonding: fix bond_ipsec_offload_ok return type
bonding: fix null pointer deref in bond_ipsec_offload_ok
bonding: fix xfrm real_dev null pointer dereference
bonding: fix xfrm state handling when clearing active slave
Nikolay Kuratov (1):
cxgb4: add forgotten u64 ivlan cast before shift
Nysal Jan K.A (2):
cpu/SMT: Enable SMT only if a core is online
powerpc/topology: Check if a core is online
Olivier Langlois (1):
io_uring/napi: check napi_enabled in io_napi_add() before proceeding
Omar Sandoval (1):
filelock: fix name of file_lease slab cache
Pablo Neira Ayuso (1):
netfilter: flowtable: validate vlan header
Paolo Abeni (1):
igb: cope with large MAX_SKB_FRAGS
Parsa Poorshikhian (1):
ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
Patrisious Haddad (1):
net/mlx5: Fix IPsec RoCE MPV trace call
Paul Moore (1):
selinux: revert our use of vma_is_initial_heap()
Paulo Alcantara (1):
smb: client: ignore unhandled reparse tags
Pavel Begunkov (1):
io_uring/napi: use ktime in busy polling
Pawel Dembicki (3):
net: dsa: vsc73xx: fix port MAC configuration in full duplex mode
net: dsa: vsc73xx: pass value in phy_write operation
net: dsa: vsc73xx: check busy flag in MDIO operations
Pedro Falcato (1):
mseal: fix is_madv_discard()
Peiyang Wang (1):
net: hns3: use the user's cfg after reset
Peng Fan (2):
tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
pmdomain: imx: wait SSAR when i.MX93 power domain on
Phil Sutter (3):
netfilter: nf_tables: Audit log dump reset after the fact
netfilter: nf_tables: Introduce nf_tables_getobj_single
netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
Qu Wenruo (3):
btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type
btrfs: tree-checker: add dev extent item checks
btrfs: only enable extent map shrinker for DEBUG builds
Radhey Shyam Pandey (1):
net: axienet: Fix register defines comment description
Rafael J. Wysocki (8):
Revert "ACPI: EC: Evaluate orphan _REG under EC device"
thermal: gov_bang_bang: Call __thermal_cdev_update() directly
ACPICA: Add a depth argument to acpi_execute_reg_methods()
ACPI: EC: Evaluate _REG outside the EC scope more carefully
thermal: gov_bang_bang: Drop unnecessary cooling device target state checks
thermal: gov_bang_bang: Split bang_bang_control()
thermal: gov_bang_bang: Add .manage() callback
thermal: gov_bang_bang: Use governor_data to reduce overhead
Rodrigo Siqueira (1):
drm/amd/display: Adjust cursor position
Rodrigo Vivi (1):
drm/xe: Relax runtime pm protection during execution
Ryo Takakura (1):
printk/panic: Allow cpu backtraces to be written into ringbuffer during panic
Samuel Holland (1):
arm64: Fix KASAN random tag seed initialization
Sean Anderson (2):
net: xilinx: axienet: Always disable promiscuous mode
net: xilinx: axienet: Fix dangling multicast addresses
Sebastian Andrzej Siewior (2):
netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
Simon Horman (1):
tc-testing: don't access non-existent variable on exception
Somnath Kotur (1):
bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
Song Liu (2):
kallsyms: Do not cleanup .llvm.<hash> suffix before sorting symbols
kallsyms: Match symbols exactly with CONFIG_LTO_CLANG
Srinivas Pandruvada (1):
platform/x86: ISST: Fix return value on last invalid resource
Stefan Haberland (1):
s390/dasd: fix error recovery leading to data corruption on ESE devices
Stephen Hemminger (1):
netem: fix return value if duplicate enqueue fails
Steve French (2):
smb3: fix lock breakage for cached writes
smb3: fix broken cached reads when posix locks
Steven Rostedt (1):
tracing: Return from tracing_buffers_read() if the file has been closed
Stuart Summers (1):
drm/xe: Fix missing workqueue destroy in xe_gt_pagefault
Su Hui (1):
smb/client: avoid possible NULL dereference in cifs_free_subrequest()
Subash Abhinov Kasiviswanathan (1):
tcp: Update window clamping condition
Suraj Kandpal (1):
drm/i915/hdcp: Use correct cp_irq_count
Suren Baghdasaryan (2):
alloc_tag: mark pages reserved during CMA activation as not tagged
alloc_tag: introduce clear_page_tag_ref() helper function
Takashi Iwai (2):
ALSA: timer: Relax start tick time check for slave timer elements
ALSA: hda/tas2781: Use correct endian conversion
Tariq Toukan (1):
net/mlx5: SD, Do not query MPIR register if no sd_group
Tejun Heo (1):
workqueue: Fix spruious data race in __flush_work()
Tetsuo Handa (1):
Input: MT - limit max slots
Thomas Bogendoerfer (1):
ip6_tunnel: Fix broken GRO
Thomas Hellström (2):
drm/xe: Split lrc seqno fence creation up
drm/xe: Don't initialize fences at xe_sched_job_create()
Thorsten Blum (1):
io_uring/napi: Remove unnecessary s64 cast
Tom Hughes (1):
netfilter: allow ipv6 fragments to arrive on different devices
Vignesh Raghavendra (1):
spi: spi-cadence-quadspi: Fix OSPI NOR failures during system resume
Vladimir Oltean (3):
net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection
net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q"
net: mscc: ocelot: serialize access to the injection/extraction groups
Waiman Long (2):
mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if cpus.exclusive not set
Werner Sembach (2):
Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3
Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination
Will Deacon (1):
workqueue: Fix UBSAN 'subtraction overflow' error in shift_and_mask()
Xu Yang (1):
Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET"
Yang Ruibin (1):
thermal/debugfs: Fix the NULL vs IS_ERR() confusion in debugfs_create_dir()
Yonghong Song (2):
bpf: Fix a kernel verifier crash in stacksafe()
selftests/bpf: Add a test to verify previous stacksafe() fix
Yu Kuai (1):
md/raid1: Fix data corruption for degraded array with slow disk
Zenghui Yu (1):
KVM: arm64: vgic-debug: Don't put unmarked LPIs
Zhen Lei (2):
selinux: fix potential counting error in avc_add_xperms_decision()
selinux: add the processing of the failure of avc_add_xperms_decision()
Zheng Zhang (1):
net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()
Zhihao Cheng (1):
vfs: Don't evict inode under the inode lru traversing context
Zi Yan (2):
mm/numa: no task_numa_fault() call if PMD is changed
mm/numa: no task_numa_fault() call if PTE is changed
yangerkun (1):
libfs: fix infinite directory reads for offset dir
3 weeks
- 1
- 1
Linux 6.6.48
by Greg Kroah-Hartman
I'm announcing the release of the 6.6.48 kernel.
All users of the 6.6 kernel series must upgrade.
The updated 6.6.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.6.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/ABI/testing/sysfs-devices-system-cpu | 3
Makefile | 2
arch/alpha/kernel/pci_iommu.c | 2
arch/arm64/kernel/acpi_numa.c | 2
arch/arm64/kernel/setup.c | 3
arch/arm64/kernel/smp.c | 2
arch/arm64/kvm/sys_regs.c | 6
arch/arm64/kvm/vgic/vgic.h | 7
arch/mips/jazz/jazzdma.c | 2
arch/mips/kernel/cpu-probe.c | 4
arch/openrisc/kernel/setup.c | 6
arch/parisc/kernel/irq.c | 4
arch/powerpc/boot/simple_alloc.c | 7
arch/powerpc/include/asm/topology.h | 13
arch/powerpc/kernel/dma-iommu.c | 2
arch/powerpc/platforms/ps3/system-bus.c | 4
arch/powerpc/platforms/pseries/papr-sysparm.c | 47 ++
arch/powerpc/platforms/pseries/vio.c | 2
arch/powerpc/sysdev/xics/icp-native.c | 2
arch/riscv/include/asm/asm.h | 10
arch/riscv/kernel/entry.S | 3
arch/riscv/kernel/traps.c | 3
arch/riscv/mm/init.c | 4
arch/s390/include/asm/uv.h | 5
arch/s390/kernel/early.c | 12
arch/s390/kernel/smp.c | 4
arch/s390/kvm/kvm-s390.h | 7
arch/x86/kernel/amd_gart_64.c | 2
arch/x86/kernel/process.c | 5
block/blk-mq-tag.c | 5
drivers/accel/habanalabs/common/debugfs.c | 14
drivers/accel/habanalabs/common/irq.c | 3
drivers/accel/habanalabs/common/memory.c | 15
drivers/accel/habanalabs/gaudi2/gaudi2_security.c | 1
drivers/acpi/acpica/acevents.h | 6
drivers/acpi/acpica/evregion.c | 12
drivers/acpi/acpica/evxfregn.c | 64 ---
drivers/acpi/ec.c | 14
drivers/acpi/internal.h | 1
drivers/acpi/scan.c | 2
drivers/atm/idt77252.c | 9
drivers/char/xillybus/xillyusb.c | 42 +-
drivers/clk/visconti/pll.c | 6
drivers/clocksource/arm_global_timer.c | 11
drivers/edac/skx_common.c | 4
drivers/firmware/cirrus/cs_dsp.c | 7
drivers/gpio/gpio-mlxbf3.c | 14
drivers/gpio/gpiolib-sysfs.c | 15
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.h | 1
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 40 ++
drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 3
drivers/gpu/drm/amd/amdgpu/amdgpu_ctx.c | 8
drivers/gpu/drm/amd/amdgpu/amdgpu_psp_ta.c | 3
drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.c | 53 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.h | 1
drivers/gpu/drm/amd/amdgpu/amdgpu_vm_pt.c | 6
drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 13
drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 13
drivers/gpu/drm/amd/amdgpu/imu_v11_0.c | 2
drivers/gpu/drm/amd/amdgpu/jpeg_v2_0.c | 4
drivers/gpu/drm/amd/amdgpu/jpeg_v4_0_3.c | 63 +++
drivers/gpu/drm/amd/amdgpu/jpeg_v4_0_3.h | 6
drivers/gpu/drm/amd/amdgpu/soc15d.h | 6
drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 22 -
drivers/gpu/drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 4
drivers/gpu/drm/amd/display/dc/dcn321/dcn321_resource.c | 3
drivers/gpu/drm/amd/pm/amdgpu_pm.c | 14
drivers/gpu/drm/bridge/tc358768.c | 213 ++++++++++-
drivers/gpu/drm/lima/lima_gp.c | 12
drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.c | 96 +++--
drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.h | 22 -
drivers/gpu/drm/msm/disp/dpu1/dpu_encoder_phys.h | 9
drivers/gpu/drm/msm/disp/dpu1/dpu_encoder_phys_cmd.c | 43 --
drivers/gpu/drm/msm/disp/dpu1/dpu_encoder_phys_vid.c | 22 -
drivers/gpu/drm/msm/disp/dpu1/dpu_encoder_phys_wb.c | 21 -
drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 2
drivers/gpu/drm/msm/disp/dpu1/dpu_kms.h | 14
drivers/gpu/drm/msm/disp/dpu1/dpu_plane.c | 23 +
drivers/gpu/drm/msm/dp/dp_ctrl.c | 2
drivers/gpu/drm/msm/dp/dp_panel.c | 19 -
drivers/gpu/drm/msm/msm_drv.h | 12
drivers/gpu/drm/msm/msm_gem_shrinker.c | 2
drivers/gpu/drm/msm/msm_mdss.c | 84 +++-
drivers/gpu/drm/msm/msm_mdss.h | 1
drivers/gpu/drm/nouveau/nvkm/core/firmware.c | 9
drivers/gpu/drm/nouveau/nvkm/falcon/fw.c | 6
drivers/gpu/drm/panel/panel-novatek-nt36523.c | 6
drivers/gpu/drm/rockchip/rockchip_drm_vop2.c | 5
drivers/gpu/drm/tegra/gem.c | 2
drivers/hid/wacom_wac.c | 4
drivers/hwmon/ltc2992.c | 8
drivers/hwmon/pc87360.c | 6
drivers/i2c/busses/i2c-qcom-geni.c | 4
drivers/i2c/busses/i2c-riic.c | 2
drivers/i2c/busses/i2c-stm32f7.c | 51 ++
drivers/i2c/busses/i2c-tegra.c | 4
drivers/i3c/master/mipi-i3c-hci/dma.c | 5
drivers/infiniband/hw/hfi1/chip.c | 5
drivers/infiniband/ulp/rtrs/rtrs.c | 2
drivers/input/input-mt.c | 3
drivers/input/serio/i8042-acpipnpio.h | 20 -
drivers/input/serio/i8042.c | 10
drivers/iommu/arm/arm-smmu/arm-smmu-qcom.c | 1
drivers/iommu/dma-iommu.c | 2
drivers/irqchip/irq-gic-v3-its.c | 2
drivers/irqchip/irq-renesas-rzg2l.c | 5
drivers/md/dm-clone-metadata.c | 5
drivers/md/dm-ioctl.c | 22 +
drivers/md/dm.c | 4
drivers/md/md.c | 5
drivers/md/persistent-data/dm-space-map-metadata.c | 4
drivers/md/raid5-cache.c | 47 +-
drivers/media/dvb-core/dvb_frontend.c | 12
drivers/media/pci/cx23885/cx23885-video.c | 8
drivers/media/platform/qcom/venus/pm_helpers.c | 2
drivers/media/platform/samsung/s5p-mfc/s5p_mfc_enc.c | 2
drivers/media/radio/radio-isa.c | 2
drivers/memory/stm32-fmc2-ebi.c | 122 ++++--
drivers/memory/tegra/tegra186.c | 3
drivers/misc/fastrpc.c | 22 -
drivers/mmc/core/mmc_test.c | 9
drivers/mmc/host/dw_mmc.c | 8
drivers/mmc/host/mtk-sd.c | 8
drivers/net/bonding/bond_main.c | 21 -
drivers/net/bonding/bond_options.c | 2
drivers/net/dsa/microchip/ksz_ptp.c | 5
drivers/net/dsa/mv88e6xxx/global1_atu.c | 3
drivers/net/dsa/ocelot/felix.c | 11
drivers/net/dsa/vitesse-vsc73xx-core.c | 69 ++-
drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 5
drivers/net/ethernet/chelsio/cxgb4/cxgb4_filter.c | 3
drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c | 7
drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 3
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 28 +
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c | 7
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mdio.c | 3
drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 4
drivers/net/ethernet/i825xx/sun3_82586.c | 2
drivers/net/ethernet/intel/ice/ice_base.c | 21 +
drivers/net/ethernet/intel/ice/ice_txrx.c | 47 --
drivers/net/ethernet/intel/igb/igb_main.c | 1
drivers/net/ethernet/intel/igc/igc_defines.h | 6
drivers/net/ethernet/intel/igc/igc_main.c | 8
drivers/net/ethernet/intel/igc/igc_tsn.c | 76 +++-
drivers/net/ethernet/intel/igc/igc_tsn.h | 1
drivers/net/ethernet/marvell/octeontx2/af/rvu_cpt.c | 23 -
drivers/net/ethernet/mediatek/mtk_wed.c | 6
drivers/net/ethernet/mediatek/mtk_wed_mcu.c | 3
drivers/net/ethernet/mellanox/mlx5/core/en/reporter_tx.c | 2
drivers/net/ethernet/mellanox/mlx5/core/en_fs_ethtool.c | 2
drivers/net/ethernet/mellanox/mlxbf_gige/mlxbf_gige.h | 8
drivers/net/ethernet/mellanox/mlxbf_gige/mlxbf_gige_main.c | 10
drivers/net/ethernet/mellanox/mlxbf_gige/mlxbf_gige_regs.h | 2
drivers/net/ethernet/mellanox/mlxbf_gige/mlxbf_gige_rx.c | 50 ++
drivers/net/ethernet/microsoft/mana/mana_en.c | 30 +
drivers/net/ethernet/mscc/ocelot.c | 91 ++++-
drivers/net/ethernet/mscc/ocelot_fdma.c | 3
drivers/net/ethernet/mscc/ocelot_vsc7514.c | 4
drivers/net/ethernet/pensando/ionic/ionic_bus_pci.c | 9
drivers/net/ethernet/pensando/ionic/ionic_dev.c | 33 +
drivers/net/ethernet/pensando/ionic/ionic_ethtool.c | 7
drivers/net/ethernet/pensando/ionic/ionic_fw.c | 5
drivers/net/ethernet/pensando/ionic/ionic_main.c | 3
drivers/net/ethernet/wangxun/ngbe/ngbe_mdio.c | 6
drivers/net/ethernet/xilinx/xilinx_axienet.h | 17
drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 25 -
drivers/net/gtp.c | 3
drivers/net/wireless/ath/ath11k/mac.c | 44 +-
drivers/net/wireless/ath/ath12k/mac.c | 27 +
drivers/net/wireless/ath/ath12k/qmi.c | 7
drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c | 13
drivers/net/wireless/intel/iwlwifi/fw/debugfs.c | 6
drivers/net/wireless/intel/iwlwifi/iwl-drv.c | 6
drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 3
drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 7
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 2
drivers/net/wireless/mediatek/mt76/mac80211.c | 50 ++
drivers/net/wireless/mediatek/mt76/mt76.h | 24 -
drivers/net/wireless/mediatek/mt76/mt7603/main.c | 4
drivers/net/wireless/mediatek/mt76/mt7615/main.c | 4
drivers/net/wireless/mediatek/mt76/mt76x02_util.c | 4
drivers/net/wireless/mediatek/mt76/mt7915/main.c | 4
drivers/net/wireless/mediatek/mt76/mt7921/main.c | 2
drivers/net/wireless/mediatek/mt76/mt792x_core.c | 2
drivers/net/wireless/mediatek/mt76/mt7996/main.c | 4
drivers/net/wireless/mediatek/mt76/tx.c | 108 ++++--
drivers/net/wireless/st/cw1200/txrx.c | 2
drivers/nvme/host/core.c | 107 +++--
drivers/nvme/host/ioctl.c | 15
drivers/nvme/host/multipath.c | 21 -
drivers/nvme/host/nvme.h | 4
drivers/nvme/target/rdma.c | 16
drivers/nvme/target/tcp.c | 1
drivers/nvme/target/trace.c | 6
drivers/nvme/target/trace.h | 28 -
drivers/parisc/ccio-dma.c | 2
drivers/parisc/sba_iommu.c | 2
drivers/platform/surface/aggregator/controller.c | 3
drivers/platform/x86/intel/ifs/load.c | 9
drivers/platform/x86/lg-laptop.c | 2
drivers/pmdomain/imx/imx93-pd.c | 5
drivers/pmdomain/imx/scu-pd.c | 5
drivers/rtc/rtc-nct3018y.c | 6
drivers/s390/block/dasd.c | 36 +-
drivers/s390/block/dasd_3990_erp.c | 10
drivers/s390/block/dasd_diag.c | 1
drivers/s390/block/dasd_eckd.c | 56 +--
drivers/s390/block/dasd_int.h | 2
drivers/s390/cio/idset.c | 12
drivers/scsi/lpfc/lpfc_sli.c | 2
drivers/scsi/scsi_transport_spi.c | 4
drivers/ssb/main.c | 2
drivers/staging/iio/resolver/ad2s1210.c | 7
drivers/staging/ks7010/ks7010_sdio.c | 4
drivers/thunderbolt/switch.c | 1
drivers/tty/serial/atmel_serial.c | 2
drivers/tty/serial/fsl_lpuart.c | 1
drivers/usb/dwc3/core.c | 13
drivers/usb/gadget/udc/fsl_udc_core.c | 2
drivers/usb/host/xhci.c | 8
drivers/usb/typec/tcpm/tcpm.c | 1
drivers/xen/grant-dma-ops.c | 2
drivers/xen/swiotlb-xen.c | 2
fs/afs/file.c | 8
fs/binfmt_elf_fdpic.c | 2
fs/binfmt_misc.c | 216 +++++++++---
fs/btrfs/compression.c | 23 -
fs/btrfs/compression.h | 2
fs/btrfs/defrag.c | 2
fs/btrfs/delayed-inode.c | 4
fs/btrfs/disk-io.c | 2
fs/btrfs/extent_io.c | 4
fs/btrfs/free-space-cache.c | 22 -
fs/btrfs/inode.c | 24 -
fs/btrfs/ioctl.c | 2
fs/btrfs/qgroup.c | 2
fs/btrfs/reflink.c | 6
fs/btrfs/send.c | 71 +++
fs/btrfs/super.c | 2
fs/btrfs/tests/extent-io-tests.c | 28 +
fs/btrfs/tree-checker.c | 74 ++++
fs/btrfs/zlib.c | 73 +---
fs/ext4/extents.c | 3
fs/ext4/mballoc.c | 3
fs/f2fs/segment.c | 17
fs/file.c | 30 -
fs/fscache/cookie.c | 4
fs/fuse/cuse.c | 3
fs/fuse/dev.c | 6
fs/fuse/fuse_i.h | 1
fs/fuse/inode.c | 15
fs/fuse/virtio_fs.c | 10
fs/gfs2/inode.c | 2
fs/gfs2/super.c | 2
fs/inode.c | 39 ++
fs/jfs/jfs_dinode.h | 2
fs/jfs/jfs_imap.c | 6
fs/jfs/jfs_incore.h | 2
fs/jfs/jfs_txnmgr.c | 4
fs/jfs/jfs_xtree.c | 4
fs/jfs/jfs_xtree.h | 37 +-
fs/kernfs/file.c | 8
fs/nfs/pnfs.c | 8
fs/nfsd/nfssvc.c | 14
fs/ntfs3/bitmap.c | 4
fs/ntfs3/fsntfs.c | 2
fs/ntfs3/index.c | 11
fs/ntfs3/ntfs_fs.h | 4
fs/ntfs3/super.c | 2
fs/quota/dquot.c | 5
fs/smb/client/reparse.c | 11
fs/smb/server/connection.c | 34 +
fs/smb/server/connection.h | 3
fs/smb/server/mgmt/user_session.c | 8
fs/smb/server/smb2pdu.c | 5
include/acpi/acpixf.h | 5
include/linux/bitmap.h | 20 -
include/linux/bpf_verifier.h | 4
include/linux/cpumask.h | 2
include/linux/dma-map-ops.h | 2
include/linux/dsa/ocelot.h | 47 ++
include/linux/evm.h | 6
include/linux/f2fs_fs.h | 1
include/linux/fs.h | 5
include/linux/slab.h | 5
include/net/af_vsock.h | 4
include/net/inet_timewait_sock.h | 2
include/net/kcm.h | 1
include/net/mana/mana.h | 1
include/net/tcp.h | 2
include/scsi/scsi_cmnd.h | 2
include/soc/mscc/ocelot.h | 12
include/uapi/misc/fastrpc.h | 3
init/Kconfig | 7
kernel/bpf/verifier.c | 5
kernel/cgroup/cgroup.c | 4
kernel/cpu.c | 12
kernel/dma/mapping.c | 4
kernel/rcu/rcu.h | 7
kernel/rcu/srcutiny.c | 1
kernel/rcu/srcutree.c | 1
kernel/rcu/tasks.h | 1
kernel/rcu/tiny.c | 1
kernel/rcu/tree.c | 3
kernel/sched/topology.c | 3
kernel/time/clocksource.c | 42 +-
kernel/time/hrtimer.c | 5
kernel/time/tick-sched.h | 2
lib/cpumask.c | 4
lib/math/prime_numbers.c | 2
mm/huge_memory.c | 30 -
mm/memcontrol.c | 7
mm/memory-failure.c | 20 -
mm/memory.c | 33 -
mm/page_alloc.c | 42 +-
mm/slab_common.c | 41 --
mm/util.c | 4
mm/vmalloc.c | 11
net/bluetooth/bnep/core.c | 3
net/bluetooth/hci_conn.c | 11
net/bluetooth/hci_core.c | 19 -
net/bluetooth/mgmt.c | 4
net/bluetooth/smp.c | 144 ++++----
net/bridge/br_netfilter_hooks.c | 6
net/core/sock_map.c | 6
net/dccp/ipv4.c | 2
net/dccp/ipv6.c | 6
net/dsa/tag_ocelot.c | 37 --
net/ipv4/inet_timewait_sock.c | 16
net/ipv4/tcp_input.c | 28 -
net/ipv4/tcp_ipv4.c | 16
net/ipv4/tcp_minisocks.c | 7
net/ipv4/udp_offload.c | 3
net/ipv6/ip6_output.c | 10
net/ipv6/ip6_tunnel.c | 12
net/ipv6/netfilter/nf_conntrack_reasm.c | 4
net/ipv6/tcp_ipv6.c | 6
net/iucv/iucv.c | 3
net/kcm/kcmsock.c | 4
net/mac80211/agg-tx.c | 6
net/mac80211/driver-ops.c | 3
net/mac80211/iface.c | 14
net/mac80211/main.c | 22 +
net/mac80211/sta_info.c | 46 +-
net/mctp/test/route-test.c | 2
net/mptcp/diag.c | 2
net/mptcp/pm.c | 13
net/mptcp/pm_netlink.c | 142 +++++--
net/mptcp/protocol.h | 3
net/netfilter/nf_flow_table_inet.c | 3
net/netfilter/nf_flow_table_ip.c | 3
net/netfilter/nf_flow_table_offload.c | 2
net/netfilter/nf_tables_api.c | 209 +++++++----
net/netfilter/nfnetlink_queue.c | 35 +
net/netfilter/nft_counter.c | 9
net/netlink/af_netlink.c | 13
net/openvswitch/datapath.c | 2
net/rxrpc/rxkad.c | 8
net/sched/sch_netem.c | 47 +-
net/vmw_vsock/af_vsock.c | 50 +-
net/vmw_vsock/vsock_bpf.c | 4
net/wireless/core.h | 8
scripts/rust_is_available.sh | 6
security/integrity/evm/evm_main.c | 7
security/security.c | 2
security/selinux/avc.c | 8
security/selinux/hooks.c | 12
sound/core/timer.c | 2
sound/pci/hda/patch_realtek.c | 1
sound/pci/hda/tas2781_hda_i2c.c | 14
sound/soc/codecs/cs35l45.c | 5
sound/soc/sof/intel/hda-dsp.c | 3
sound/soc/sof/ipc4.c | 9
sound/usb/quirks-table.h | 1
sound/usb/quirks.c | 2
tools/include/linux/align.h | 12
tools/include/linux/bitmap.h | 9
tools/include/linux/mm.h | 5
tools/testing/selftests/bpf/progs/cpumask_failure.c | 3
tools/testing/selftests/bpf/progs/dynptr_fail.c | 12
tools/testing/selftests/bpf/progs/iters.c | 54 +++
tools/testing/selftests/bpf/progs/jeq_infer_not_null_fail.c | 4
tools/testing/selftests/bpf/progs/test_tunnel_kern.c | 47 +-
tools/testing/selftests/core/close_range_test.c | 35 +
tools/testing/selftests/mm/Makefile | 2
tools/testing/selftests/mm/run_vmtests.sh | 53 ++
tools/testing/selftests/net/lib.sh | 11
tools/testing/selftests/net/mptcp/mptcp_join.sh | 28 +
tools/testing/selftests/net/udpgro.sh | 44 +-
tools/testing/selftests/tc-testing/tdc.py | 1
tools/tracing/rtla/src/osnoise_top.c | 11
391 files changed, 3848 insertions(+), 1967 deletions(-)
Abhinav Kumar (5):
drm/msm/dp: fix the max supported bpp logic
drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()
drm/msm/dp: reset the link phy params before link training
drm/msm/dpu: try multirect based on mdp clock limits
drm/msm: fix the highest_bank_bit for sc7180
Adrian Hunter (1):
clocksource: Make watchdog and suspend-timing multiplication overflow safe
Al Viro (4):
fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
memcg_write_event_control(): fix a user-triggerable oops
afs: fix __afs_break_callback() / afs_drop_open_mmap() race
fuse: fix UAF in rcu pathwalks
Alex Deucher (3):
drm/amdgpu/jpeg2: properly set atomics vmid field
drm/amdgpu/jpeg4: properly set atomics vmid field
drm/amd/pm: fix error flow in sensor fetching
Alex Hung (2):
drm/amd/display: Validate hw_points_num before using it
Revert "drm/amd/display: Validate hw_points_num before using it"
Alexander Gordeev (1):
s390/iucv: fix receive buffer virtual vs physical address confusion
Alexander Lobakin (5):
fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
s390/cio: rename bitmap_size() -> idset_bitmap_size()
btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits()
bitmap: introduce generic optimized bitmap_size()
tools: move alignment-related macros to new <linux/align.h>
Alexander Stein (1):
pmdomain: imx: scu-pd: Remove duplicated clocks
Alexandre Belloni (1):
rtc: nct3018y: fix possible NULL dereference
Andi Shyti (1):
i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
Andreas Gruenbacher (2):
gfs2: setattr_chown: Add missing initialization
gfs2: Refcounting fix in gfs2_thaw_super
Andy Yan (1):
drm/rockchip: vop2: clear afbc en and transform bit for cluster window at linear mode
Antoniu Miclaus (1):
hwmon: (ltc2992) Avoid division by zero
Ashish Mhetre (1):
memory: tegra: Skip SID programming if SID registers aren't set
Asmaa Mnebhi (1):
gpio: mlxbf3: Support shutdown() function
Avri Kehat (1):
accel/habanalabs: fix debugfs files permissions
Baojun Xu (1):
ALSA: hda/tas2781: fix wrong calibrated data order
Baokun Li (2):
ext4: do not trim the group with corrupted block bitmap
ext4: set the type of max_zeroout to unsigned int to avoid overflow
Bard Liao (1):
ASoC: SOF: ipc4: check return value of snd_sof_ipc_msg_data
Bartosz Golaszewski (1):
gpio: sysfs: extend the critical section for unregistering sysfs devices
Bas Nieuwenhuizen (1):
drm/amdgpu: Actually check flags for all context ops.
Ben Whitten (1):
mmc: dw_mmc: allow biu and ciu clocks to defer
Bharat Bhushan (1):
octeontx2-af: Fix CPT AF register offset calculation
Biju Das (1):
irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time
Boyuan Zhang (2):
drm/amdgpu/vcn: identify unified queue in sw init
drm/amdgpu/vcn: not pause dpg for unified queue
Breno Leitao (1):
i2c: tegra: Do not mark ACPI devices as irq safe
Candice Li (1):
drm/amdgpu: Validate TA binary size
Celeste Liu (1):
riscv: entry: always initialize regs->a0 to -ENOSYS
Chaotian Jing (1):
scsi: core: Fix the return value of scsi_logical_block_count()
Chengfeng Ye (3):
staging: ks7010: disable bh on tx_dev_lock
media: s5p-mfc: Fix potential deadlock on condlock
IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd->uctxt_lock
Christian Brauner (1):
binfmt_misc: cleanup on filesystem umount
Christophe Kerello (1):
memory: stm32-fmc2-ebi: check regmap_read return value
Claudio Imbrenda (1):
s390/uv: Panic for set and remove shared access UVC errors
Clément Léger (1):
riscv: blacklist assembly symbols for kprobe
Cong Wang (1):
vsock: fix recursive ->recvmsg calls
Cosmin Ratiu (1):
net/mlx5e: Correctly report errors for ethtool rx flows
Costa Shulyupin (1):
hrtimer: Select housekeeping CPU during migration
Cupertino Miranda (1):
selftests/bpf: Fix a few tests for GCC related warnings.
Dan Carpenter (4):
rtla/osnoise: Prevent NULL dereference in error handling
atm: idt77252: prevent use after free in dequeue_rx()
dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
mmc: mmc_test: Fix NULL dereference on allocation failure
Daniel Wagner (1):
nvmet-trace: avoid dereferencing pointer too early
Dave Airlie (1):
nouveau/firmware: use dma non-coherent allocator
Dave Kleikamp (1):
jfs: define xtree root and page independently
David (Ming Qiang) Wu (1):
drm/amd/amdgpu: command submission parser for JPEG
David Howells (1):
rxrpc: Don't pick values out of the wire header when setting up security
David Lechner (1):
staging: iio: resolver: ad2s1210: fix use before initialization
David Sterba (11):
btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item()
btrfs: defrag: change BUG_ON to assertion in btrfs_defrag_leaves()
btrfs: change BUG_ON to assertion when checking for delayed_node root
btrfs: tests: allocate dummy fs_info and root in test_find_delalloc()
btrfs: push errors up from add_async_extent()
btrfs: handle invalid root reference found in may_destroy_subvol()
btrfs: send: handle unexpected data in header buffer in begin_cmd()
btrfs: send: handle unexpected inode in header process_recorded_refs()
btrfs: change BUG_ON to assertion in tree_move_down()
btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent()
btrfs: replace sb::s_blocksize by fs_info::sectorsize
David Thompson (1):
mlxbf_gige: disable RX filters until RX path initialized
Dmitry Antipov (2):
wifi: ath11k: fix ath11k_mac_op_remain_on_channel() stack usage
wifi: iwlwifi: check for kmemdup() return value in iwl_parse_tlv_firmware()
Dmitry Baryshkov (10):
drm/msm/dpu: don't play tricks with debug macros
drm/msm/dpu: use drmm-managed allocation for dpu_encoder_phys
drm/msm/dpu: drop MSM_ENC_VBLANK support
drm/msm/dpu: split dpu_encoder_wait_for_event into two functions
drm/msm/dpu: capture snapshot on the first commit_done timeout
drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
drm/msm/dpu: take plane rotation into account for wide planes
drm/msm/mdss: switch mdss to use devm_of_icc_get()
drm/msm/mdss: Handle the reg bus ICC path
drm/msm/mdss: specify cfg bandwidth for SDM670
Donald Hunter (1):
netfilter: flowtable: initialise extack before use
Dragos Tatulea (1):
net/mlx5e: Take state lock during tx timeout reporter
Eli Billauer (3):
char: xillybus: Don't destroy workqueue from work item running on it
char: xillybus: Refine workqueue handling
char: xillybus: Check USB endpoints when probing device
Emmanuel Grumbach (1):
wifi: iwlwifi: mvm: fix recovery flow in CSA
Eric Dumazet (8):
netlink: hold nlk->cb_mutex longer in __netlink_dump_start()
gtp: pull network headers in gtp_dev_xmit()
tcp/dccp: bypass empty buckets in inet_twsk_purge()
tcp/dccp: do not care about families in inet_twsk_purge()
ipv6: prevent UAF in ip6_send_skb()
ipv6: fix possible UAF in ip6_finish_output2()
ipv6: prevent possible UAF in ip6_xmit()
tcp: do not export tcp_twsk_purge()
Erico Nunes (1):
drm/lima: set gp bus_stop bit before hard reset
Eugene Syromiatnikov (1):
mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
Faizal Rahim (4):
igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
igc: Fix qbv_config_change_errors logics
igc: Fix reset adapter logics when tx mode change
igc: Fix qbv tx latency by setting gtxoffset
Felix Fietkau (2):
wifi: mt76: fix race condition related to checking tx queue fill status
udp: fix receiving fraglist GSO packets
Filipe Manana (1):
btrfs: send: allow cloning non-aligned extent if it ends at i_size
Florian Westphal (2):
netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
tcp: prevent concurrent execution of tcp_sk_exit_batch
Frederic Weisbecker (1):
tick: Move got_idle_tick away from common flags
Gergo Koteles (1):
platform/x86: lg-laptop: fix %s null argument warning
Greg Kroah-Hartman (2):
Revert "usb: gadget: uvc: cleanup request when not in correct state"
Linux 6.6.48
Griffin Kroah-Hartman (2):
Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD"
Bluetooth: MGMT: Add error handling to pair_device()
Guanrui Huang (1):
irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
Gustavo A. R. Silva (1):
clk: visconti: Add bounds-checking coverage for struct visconti_pll_provider
Haibo Xu (1):
arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
Hailong Liu (1):
mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0
Haiyang Zhang (1):
net: mana: Fix RX buf alloc_size alignment and atomic op panic
Hangbin Liu (1):
selftests: udpgro: report error when receive failed
Hannes Reinecke (1):
nvmet-tcp: do not continue for invalid icreq
Hans Verkuil (3):
media: radio-isa: use dev_name to fill in bus_info
media: qcom: venus: fix incorrect return value
media: pci: cx23885: check cx23885_vdev_init() return
Heiko Carstens (1):
s390/smp,mcck: fix early IPI handling
Helge Deller (1):
parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
Itaru Kitayama (1):
tools/testing/selftests/mm/run_vmtests.sh: lower the ptrace permissions
Jakub Sitnicki (1):
Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
Jan Höppner (1):
Revert "s390/dasd: Establish DMA alignment"
Jan Kara (1):
quota: Remove BUG_ON from dqget()
Jann Horn (1):
fuse: Initialize beyond-EOF page contents before setting uptodate
Janne Grunau (1):
wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
Jarkko Nikula (2):
i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out
i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer
Jason Gerecke (1):
HID: wacom: Defer calculation of resolution until resolution_code is known
Javier Carrasco (1):
hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt()
Jeff Johnson (2):
wifi: cw1200: Avoid processing an invalid TIM IE
wifi: ath12k: Add missing qmi_txn_cancel() calls
Jeremy Kerr (1):
net: mctp: test: Use correct skb for route input check
Jesse Zhang (1):
drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent
Jian Shen (1):
net: hns3: add checking for vf id of mailbox
Jianhua Lu (1):
drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels
Jiaxun Yang (1):
MIPS: Loongson64: Set timer mode in cpu-probe
Jie Wang (2):
net: hns3: fix wrong use of semaphore up
net: hns3: fix a deadlock problem when config TC during resetting
Jithu Joseph (2):
platform/x86/intel/ifs: Validate image size
platform/x86/intel/ifs: Call release_firmware() when handling errors.
Johannes Berg (4):
wifi: mac80211: lock wiphy in IP address notifier
wifi: cfg80211: check wiphy mutex is held for wdev mutex
wifi: mac80211: fix BA session teardown race
wifi: mac80211: flush STA queues on unauthorization
Joseph Huang (1):
net: dsa: mv88e6xxx: Fix out-of-bound access
Juan José Arboleda (1):
ALSA: usb-audio: Support Yamaha P-125 quirk entry
Justin Tee (1):
scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
Kamalesh Babulal (1):
cgroup: Avoid extra dereference in css_populate_dir()
Kees Cook (3):
hwmon: (pc87360) Bounds check data->innr usage
net/sun3_82586: Avoid reading past buffer in debug output
x86: Increase brk randomness entropy for 64-bit systems
Keith Busch (3):
nvme: clear caller pointer on identify failure
nvme: use srcu for iterating namespace list
nvme: fix namespace removal list
Khazhismel Kumykov (1):
dm resume: don't return EINVAL when signalled
Kirill A. Shutemov (1):
mm: fix endless reclaim on machines with unaccepted memory
Konrad Dybcio (1):
drm/msm/mdss: Rename path references to mdp_path
Krishna Kurapati (1):
usb: dwc3: core: Skip setting event buffers for host only controllers
Kuniyuki Iwashima (1):
kcm: Serialise kcm_sendmsg() for the same socket.
Kunwu Chan (1):
powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
Lang Yu (1):
drm/amdkfd: reserve the BO before validating it
Lee Jones (1):
drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored
Leon Hwang (1):
bpf: Fix updating attached freplace prog in prog_array map
Li Lingfeng (1):
block: Fix lockdep warning in blk_mq_mark_tag_wait
Li Nan (1):
md: clean up invalid BUG_ON in md_ioctl
Li zeming (1):
powerpc/boot: Handle allocation failure in simple_realloc()
Lianqin Hu (1):
ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
Loan Chen (1):
drm/amd/display: Enable otg synchronization logic for DCN321
Long Li (1):
net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings
Lorenzo Bianconi (1):
net: ethernet: mtk_wed: check update_wo_rx_stats in mtk_wed_update_rx_stats()
Luiz Augusto von Dentz (3):
Bluetooth: bnep: Fix out-of-bound access
Bluetooth: hci_core: Fix LE quote calculation
Bluetooth: SMP: Fix assumption of Central always being Initiator
Maciej Fijalkowski (3):
ice: fix page reuse when PAGE_SIZE is over 8k
ice: fix ICE_LAST_OFFSET formula
ice: fix truesize operations for PAGE_SIZE >= 8192
Manish Dharanenthiran (1):
wifi: ath12k: fix WARN_ON during ath12k_mac_update_vif_chan
Marc Zyngier (1):
KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
Martin Blumenstingl (1):
clocksource/drivers/arm_global_timer: Guard against division by zero
Martin Whitaker (1):
net: dsa: microchip: fix PTP config failure when using multiple ports
Masahiro Yamada (2):
rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
Mathias Nyman (1):
xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
Mathieu Othacehe (1):
tty: atmel_serial: use the correct RTS flag.
Matthieu Baerts (NGI0) (14):
selftests: net: lib: ignore possible errors
selftests: net: lib: kill PIDs before del netns
mptcp: pm: re-using ID of unused removed ADD_ADDR
mptcp: pm: re-using ID of unused removed subflows
mptcp: pm: re-using ID of unused flushed subflows
mptcp: pm: remove mptcp_pm_remove_subflow()
mptcp: pm: only mark 'subflow' endp as available
mptcp: pm: only decrement add_addr_accepted for MPJ req
mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
mptcp: pm: only in-kernel cannot have entries with ID 0
mptcp: pm: fullmesh: select the right ID later
mptcp: pm: avoid possible UaF when selecting endp
selftests: mptcp: join: validate fullmesh endp on 1st sf
selftests: mptcp: join: check re-using ID of closed subflow
Max Filippov (1):
fs: binfmt_elf_efpic: don't use missing interpreter's properties
Max Kellermann (1):
fs/netfs/fscache_cookie: add missing "n_accesses" check
Maximilian Luz (1):
platform/surface: aggregator: Fix warning when controller is destroyed in probe
Melissa Wen (1):
drm/amd/display: fix cursor offset on rotation 180
Menglong Dong (1):
net: ovs: fix ovs_drop_reasons error
Mengqi Zhang (1):
mmc: mtk-sd: receive cmd8 data when hs400 tuning fail
Mengyuan Lou (1):
net: ngbe: Fix phy mode set to external phy
Michael Ellerman (1):
powerpc/boot: Only free if realloc() succeeds
Michael Grzeschik (1):
usb: gadget: uvc: cleanup request when not in correct state
Michael Mueller (1):
KVM: s390: fix validity interception issue when gisa is switched off
Miguel Ojeda (1):
rust: work around `bindgen` 0.69.0 issue
Mika Westerberg (1):
thunderbolt: Mark XDomain as unplugged when router is removed
Mike Christie (1):
scsi: spi: Fix sshdr use
Mikko Perttunen (1):
drm/tegra: Zero-initialize iosys_map
Mikulas Patocka (2):
dm persistent data: fix memory allocation failure
dm suspend: return -ERESTARTSYS instead of -EINTR
Mimi Zohar (1):
evm: don't copy up 'security.evm' xattr
Miri Korenblit (1):
wifi: iwlwifi: abort scan when rfkill on but device enabled
Muhammad Usama Anjum (1):
selftests: memfd_secret: don't build memfd_secret test on unsupported arches
Mukesh Sisodiya (1):
wifi: iwlwifi: fw: Fix debugfs command sending
Nam Cao (1):
riscv: change XIP's kernel_map.size to be size of the entire kernel
Namjae Jeon (2):
ksmbd: the buffer of smb2 query dir response has at least 1 byte
ksmbd: fix race condition between destroy_previous_session() and smb2 operations()
Naohiro Aota (1):
btrfs: zoned: properly take lock to read/update block group's zoned variables
Nathan Lynch (1):
powerpc/pseries/papr-sysparm: Validate buffer object lengths
Neel Natu (1):
kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files
NeilBrown (2):
NFS: avoid infinite loop in pnfs_update_layout.
NFSD: simplify error paths in nfsd_svc()
Nikolay Aleksandrov (4):
bonding: fix bond_ipsec_offload_ok return type
bonding: fix null pointer deref in bond_ipsec_offload_ok
bonding: fix xfrm real_dev null pointer dereference
bonding: fix xfrm state handling when clearing active slave
Nikolay Kuratov (1):
cxgb4: add forgotten u64 ivlan cast before shift
Nysal Jan K.A (2):
cpu/SMT: Enable SMT only if a core is online
powerpc/topology: Check if a core is online
Ofir Bitton (1):
accel/habanalabs/gaudi2: unsecure tpc count registers
Oreoluwa Babatunde (1):
openrisc: Call setup_memory() earlier in the init sequence
Pablo Neira Ayuso (1):
netfilter: flowtable: validate vlan header
Paolo Abeni (1):
igb: cope with large MAX_SKB_FRAGS
Parsa Poorshikhian (1):
ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
Paul E. McKenney (1):
rcu: Eliminate rcu_gp_slow_unregister() false positive
Paul Moore (1):
selinux: revert our use of vma_is_initial_heap()
Paulo Alcantara (1):
smb: client: ignore unhandled reparse tags
Pawel Dembicki (3):
net: dsa: vsc73xx: pass value in phy_write operation
net: dsa: vsc73xx: use read_poll_timeout instead delay loop
net: dsa: vsc73xx: check busy flag in MDIO operations
Peiyang Wang (1):
net: hns3: use the user's cfg after reset
Peng Fan (2):
tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
pmdomain: imx: wait SSAR when i.MX93 power domain on
Peter Ujfalusi (1):
ASoC: SOF: Intel: hda-dsp: Make sure that no irq handler is pending before suspend
Phil Chang (1):
hrtimer: Prevent queuing of hrtimer without a function callback
Phil Sutter (9):
netfilter: nf_tables: Audit log dump reset after the fact
netfilter: nf_tables: Drop pointless memset in nf_tables_dump_obj
netfilter: nf_tables: Unconditionally allocate nft_obj_filter
netfilter: nf_tables: A better name for nft_obj_filter
netfilter: nf_tables: Carry s_idx in nft_obj_dump_ctx
netfilter: nf_tables: nft_obj_filter fits into cb->ctx
netfilter: nf_tables: Carry reset boolean in nft_obj_dump_ctx
netfilter: nf_tables: Introduce nf_tables_getobj_single
netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
Philip Yang (1):
drm/amdkfd: Move dma unmapping after TLB flush
Philipp Stanner (1):
media: drivers/media/dvb-core: copy user arrays safely
Qiuxu Zhuo (2):
EDAC/skx_common: Filter out the invalid address
EDAC/skx_common: Allow decoding of SGX addresses
Qu Wenruo (3):
btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type
btrfs: tree-checker: add dev extent item checks
btrfs: zlib: fix and simplify the inline extent decompression
Radhey Shyam Pandey (1):
net: axienet: Fix register defines comment description
Rafael J. Wysocki (3):
Revert "ACPI: EC: Evaluate orphan _REG under EC device"
ACPICA: Add a depth argument to acpi_execute_reg_methods()
ACPI: EC: Evaluate _REG outside the EC scope more carefully
Rand Deeb (1):
ssb: Fix division by zero issue in ssb_calc_clock_rate
Ricardo Rivera-Matos (1):
ASoC: cs35l45: Checks index of cs35l45_irqs[]
Richard Acayan (1):
iommu/arm-smmu-qcom: Add SDM670 MDSS compatible
Richard Fitzgerald (1):
firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid
Rob Clark (1):
drm/msm: Reduce fallout of fence signaling vs reclaim hangs
Rodrigo Siqueira (1):
drm/amd/display: Adjust cursor position
Ryan Roberts (1):
selftests/mm: log run_vmtests.sh results in TAP format
Sagi Grimberg (1):
nvmet-rdma: fix possible bad dereference when freeing rsps
Samuel Holland (1):
arm64: Fix KASAN random tag seed initialization
Sean Anderson (2):
net: xilinx: axienet: Always disable promiscuous mode
net: xilinx: axienet: Fix dangling multicast addresses
Sean Nyekjaer (1):
i2c: stm32f7: Add atomic_xfer method to driver
Sebastian Andrzej Siewior (2):
netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
Shannon Nelson (4):
ionic: prevent pci disable of already disabled device
ionic: no fw read when PCI reset failed
ionic: use pci_is_enabled not open code
ionic: check cmd_regs before copying in or out
Shaul Triebitz (1):
wifi: iwlwifi: mvm: avoid garbage iPN
Simon Horman (1):
tc-testing: don't access non-existent variable on exception
Somnath Kotur (1):
bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
Stefan Haberland (1):
s390/dasd: fix error recovery leading to data corruption on ESE devices
Stefan Hajnoczi (1):
virtiofs: forbid newlines in tags
Stephen Hemminger (1):
netem: fix return value if duplicate enqueue fails
Subash Abhinov Kasiviswanathan (1):
tcp: Update window clamping condition
Suren Baghdasaryan (1):
change alloc_pages name in dma_map_ops to avoid name conflicts
Takashi Iwai (2):
ALSA: hda/tas2781: Use correct endian conversion
ALSA: timer: Relax start tick time check for slave timer elements
Tetsuo Handa (1):
Input: MT - limit max slots
Thomas Bogendoerfer (1):
ip6_tunnel: Fix broken GRO
Tom Hughes (1):
netfilter: allow ipv6 fragments to arrive on different devices
Tomer Tayar (1):
accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE
Tomi Valkeinen (1):
drm/bridge: tc358768: Attempt to fix DSI horizontal timings
Uwe Kleine-König (1):
usb: gadget: fsl: Increase size of name buffer for endpoints
Vladimir Oltean (3):
net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection
net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q"
net: mscc: ocelot: serialize access to the injection/extraction groups
Waiman Long (1):
mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
Werner Sembach (2):
Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3
Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination
Wolfram Sang (1):
i2c: riic: avoid potential division by zero
Xu Yang (1):
Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET"
Yonghong Song (2):
bpf: Fix a kernel verifier crash in stacksafe()
selftests/bpf: Add a test to verify previous stacksafe() fix
Yu Kuai (1):
md/raid5-cache: use READ_ONCE/WRITE_ONCE for 'conf->log'
Yury Norov (1):
sched/topology: Handle NUMA_NO_NODE in sched_numa_find_nth_cpu()
Zhen Lei (4):
selinux: fix potential counting error in avc_add_xperms_decision()
selinux: add the processing of the failure of avc_add_xperms_decision()
mm: Remove kmem_valid_obj()
rcu: Dump memory object info if callback function is invalid
ZhenGuo Yin (1):
drm/amdgpu: access RLC_SPM_MC_CNTL through MMIO in SRIOV runtime
Zheng Zhang (1):
net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()
Zhiguo Niu (2):
f2fs: stop checkpoint when get a out-of-bounds segment
f2fs: fix to do sanity check in update_sit_entry
Zhihao Cheng (1):
vfs: Don't evict inode under the inode lru traversing context
Zhu Yanjun (1):
RDMA/rtrs: Fix the problem of variable not initialized fully
Zi Yan (2):
mm/numa: no task_numa_fault() call if PMD is changed
mm/numa: no task_numa_fault() call if PTE is changed
Zijun Hu (1):
Bluetooth: hci_conn: Check non NULL function before calling for HFP offload
farah kassabri (1):
accel/habanalabs: fix bug in timestamp interrupt handling
3 weeks
- 1
- 1
Linux 6.1.107
by Greg Kroah-Hartman
I'm announcing the release of the 6.1.107 kernel.
All users of the 6.1 kernel series must upgrade.
The updated 6.1.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.1.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/bpf/map_lpm_trie.rst | 181 ++++++
Documentation/filesystems/gfs2-glocks.rst | 3
Makefile | 2
arch/arm64/kernel/acpi_numa.c | 2
arch/arm64/kernel/setup.c | 3
arch/arm64/kernel/smp.c | 2
arch/arm64/kvm/sys_regs.c | 6
arch/arm64/kvm/vgic/vgic.h | 7
arch/mips/kernel/cpu-probe.c | 4
arch/openrisc/kernel/setup.c | 6
arch/parisc/kernel/irq.c | 4
arch/powerpc/boot/simple_alloc.c | 7
arch/powerpc/sysdev/xics/icp-native.c | 2
arch/riscv/mm/init.c | 4
arch/s390/include/asm/uv.h | 5
arch/s390/kernel/early.c | 12
arch/s390/kernel/smp.c | 4
arch/x86/kernel/process.c | 5
arch/x86/kvm/lapic.c | 8
block/blk-mq-tag.c | 5
drivers/atm/idt77252.c | 9
drivers/bluetooth/hci_ldisc.c | 3
drivers/char/xillybus/xillyusb.c | 42 +
drivers/clk/visconti/pll.c | 6
drivers/clocksource/arm_global_timer.c | 11
drivers/firmware/cirrus/cs_dsp.c | 7
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.h | 1
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 40 +
drivers/gpu/drm/amd/amdgpu/amdgpu_ctx.c | 8
drivers/gpu/drm/amd/amdgpu/amdgpu_psp_ta.c | 3
drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.c | 53 -
drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.h | 1
drivers/gpu/drm/amd/amdgpu/amdgpu_vm_pt.c | 6
drivers/gpu/drm/amd/amdgpu/imu_v11_0.c | 2
drivers/gpu/drm/amd/amdgpu/jpeg_v2_0.c | 4
drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 22
drivers/gpu/drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 2
drivers/gpu/drm/bridge/tc358768.c | 213 ++++++-
drivers/gpu/drm/lima/lima_gp.c | 12
drivers/gpu/drm/msm/disp/dpu1/dpu_kms.h | 14
drivers/gpu/drm/msm/disp/dpu1/dpu_plane.c | 3
drivers/gpu/drm/msm/dp/dp_ctrl.c | 2
drivers/gpu/drm/msm/dp/dp_panel.c | 19
drivers/gpu/drm/msm/msm_gem_shrinker.c | 2
drivers/gpu/drm/rockchip/rockchip_drm_vop2.c | 5
drivers/gpu/drm/tegra/gem.c | 2
drivers/hid/hid-ids.h | 10
drivers/hid/hid-microsoft.c | 11
drivers/hid/wacom_wac.c | 4
drivers/hwmon/ltc2992.c | 8
drivers/hwmon/pc87360.c | 6
drivers/i2c/busses/i2c-qcom-geni.c | 4
drivers/i2c/busses/i2c-riic.c | 2
drivers/i2c/busses/i2c-tegra.c | 41 -
drivers/i3c/master/mipi-i3c-hci/dma.c | 5
drivers/infiniband/hw/hfi1/chip.c | 5
drivers/infiniband/ulp/rtrs/rtrs.c | 2
drivers/input/input-mt.c | 3
drivers/input/serio/i8042-acpipnpio.h | 20
drivers/input/serio/i8042.c | 10
drivers/irqchip/irq-gic-v3-its.c | 2
drivers/irqchip/irq-renesas-rzg2l.c | 5
drivers/md/dm-clone-metadata.c | 5
drivers/md/dm-ioctl.c | 22
drivers/md/dm.c | 4
drivers/md/md.c | 5
drivers/md/persistent-data/dm-space-map-metadata.c | 4
drivers/md/raid5-cache.c | 47 -
drivers/media/dvb-core/dvb_frontend.c | 12
drivers/media/pci/cx23885/cx23885-video.c | 8
drivers/media/pci/solo6x10/solo6x10-offsets.h | 10
drivers/media/platform/qcom/venus/pm_helpers.c | 2
drivers/media/platform/samsung/s5p-mfc/s5p_mfc_enc.c | 2
drivers/media/radio/radio-isa.c | 2
drivers/memory/stm32-fmc2-ebi.c | 122 ++--
drivers/memory/tegra/tegra186.c | 3
drivers/mmc/core/mmc_test.c | 9
drivers/mmc/host/dw_mmc.c | 8
drivers/net/bonding/bond_main.c | 21
drivers/net/bonding/bond_options.c | 2
drivers/net/dsa/mv88e6xxx/global1_atu.c | 3
drivers/net/dsa/ocelot/felix.c | 11
drivers/net/dsa/vitesse-vsc73xx-core.c | 69 +-
drivers/net/ethernet/chelsio/cxgb4/cxgb4_filter.c | 3
drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c | 7
drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 3
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 28
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c | 7
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mdio.c | 3
drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 4
drivers/net/ethernet/i825xx/sun3_82586.c | 2
drivers/net/ethernet/intel/ice/ice_base.c | 4
drivers/net/ethernet/intel/ice/ice_lib.c | 8
drivers/net/ethernet/intel/ice/ice_main.c | 10
drivers/net/ethernet/intel/ice/ice_txrx.c | 117 +--
drivers/net/ethernet/intel/ice/ice_txrx.h | 6
drivers/net/ethernet/intel/ice/ice_txrx_lib.c | 1
drivers/net/ethernet/intel/igc/igc_defines.h | 15
drivers/net/ethernet/intel/igc/igc_main.c | 7
drivers/net/ethernet/intel/igc/igc_regs.h | 1
drivers/net/ethernet/intel/igc/igc_tsn.c | 64 ++
drivers/net/ethernet/intel/igc/igc_tsn.h | 1
drivers/net/ethernet/marvell/octeontx2/af/rvu_cpt.c | 23
drivers/net/ethernet/mellanox/mlx5/core/en/reporter_tx.c | 2
drivers/net/ethernet/mellanox/mlx5/core/en_fs_ethtool.c | 2
drivers/net/ethernet/mellanox/mlxbf_gige/mlxbf_gige.h | 9
drivers/net/ethernet/mellanox/mlxbf_gige/mlxbf_gige_main.c | 10
drivers/net/ethernet/mellanox/mlxbf_gige/mlxbf_gige_regs.h | 2
drivers/net/ethernet/mellanox/mlxbf_gige/mlxbf_gige_rx.c | 50 +
drivers/net/ethernet/microsoft/mana/mana.h | 1
drivers/net/ethernet/microsoft/mana/mana_en.c | 24
drivers/net/ethernet/mscc/ocelot.c | 91 ++-
drivers/net/ethernet/mscc/ocelot_fdma.c | 3
drivers/net/ethernet/mscc/ocelot_vsc7514.c | 4
drivers/net/ethernet/xilinx/xilinx_axienet.h | 17
drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 25
drivers/net/gtp.c | 3
drivers/net/ppp/pppoe.c | 23
drivers/net/wireless/intel/iwlwifi/fw/debugfs.c | 6
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 2
drivers/net/wireless/marvell/mwifiex/11n_rxreorder.c | 2
drivers/net/wireless/st/cw1200/txrx.c | 2
drivers/nvme/host/core.c | 5
drivers/nvme/target/rdma.c | 16
drivers/nvme/target/tcp.c | 1
drivers/nvme/target/trace.c | 6
drivers/nvme/target/trace.h | 28
drivers/platform/surface/aggregator/controller.c | 3
drivers/platform/x86/lg-laptop.c | 2
drivers/rtc/rtc-nct3018y.c | 6
drivers/s390/block/dasd.c | 36 -
drivers/s390/block/dasd_3990_erp.c | 10
drivers/s390/block/dasd_diag.c | 1
drivers/s390/block/dasd_eckd.c | 56 -
drivers/s390/block/dasd_int.h | 2
drivers/s390/cio/idset.c | 12
drivers/scsi/lpfc/lpfc_sli.c | 2
drivers/scsi/scsi_transport_spi.c | 4
drivers/soc/imx/imx93-pd.c | 5
drivers/ssb/main.c | 2
drivers/staging/iio/resolver/ad2s1210.c | 7
drivers/staging/ks7010/ks7010_sdio.c | 4
drivers/thunderbolt/switch.c | 1
drivers/tty/serial/atmel_serial.c | 2
drivers/usb/dwc3/core.c | 13
drivers/usb/gadget/udc/fsl_udc_core.c | 2
drivers/usb/host/xhci.c | 8
drivers/video/fbdev/offb.c | 3
fs/9p/xattr.c | 8
fs/afs/file.c | 8
fs/binfmt_elf_fdpic.c | 2
fs/binfmt_misc.c | 216 +++++--
fs/btrfs/delayed-inode.c | 4
fs/btrfs/disk-io.c | 2
fs/btrfs/extent_io.c | 4
fs/btrfs/free-space-cache.c | 22
fs/btrfs/inode.c | 11
fs/btrfs/ioctl.c | 2
fs/btrfs/qgroup.c | 2
fs/btrfs/reflink.c | 6
fs/btrfs/send.c | 63 +-
fs/btrfs/super.c | 2
fs/btrfs/tests/extent-io-tests.c | 28
fs/btrfs/tree-checker.c | 69 ++
fs/erofs/decompressor.c | 8
fs/ext4/extents.c | 3
fs/ext4/mballoc.c | 3
fs/ext4/super.c | 23
fs/ext4/xattr.c | 158 ++---
fs/f2fs/segment.c | 5
fs/file.c | 30 -
fs/fscache/cookie.c | 4
fs/fuse/cuse.c | 3
fs/fuse/dev.c | 6
fs/fuse/fuse_i.h | 1
fs/fuse/inode.c | 15
fs/fuse/virtio_fs.c | 10
fs/gfs2/glock.c | 27
fs/gfs2/glock.h | 9
fs/gfs2/glops.c | 66 --
fs/gfs2/incore.h | 2
fs/gfs2/inode.c | 2
fs/gfs2/lock_dlm.c | 5
fs/gfs2/log.c | 2
fs/gfs2/ops_fstype.c | 13
fs/gfs2/recovery.c | 28
fs/gfs2/super.c | 197 ++++--
fs/gfs2/super.h | 1
fs/gfs2/sys.c | 2
fs/gfs2/util.c | 55 -
fs/gfs2/util.h | 5
fs/inode.c | 39 +
fs/jbd2/journal.c | 9
fs/jfs/jfs_dmap.c | 2
fs/jfs/jfs_dtree.c | 2
fs/kernfs/file.c | 8
fs/nfs/pnfs.c | 8
fs/nfsd/nfs4proc.c | 4
fs/nfsd/nfs4state.c | 2
fs/nfsd/nfsctl.c | 32 -
fs/nfsd/nfsd.h | 3
fs/nfsd/nfssvc.c | 85 --
fs/nfsd/vfs.c | 6
fs/nilfs2/btree.c | 1
fs/nilfs2/dat.c | 11
fs/nilfs2/direct.c | 1
fs/ntfs3/bitmap.c | 4
fs/ntfs3/frecord.c | 75 ++
fs/ntfs3/fsntfs.c | 2
fs/ntfs3/index.c | 11
fs/ntfs3/ntfs_fs.h | 4
fs/ntfs3/super.c | 2
fs/quota/dquot.c | 5
fs/quota/quota_tree.c | 128 +++-
fs/quota/quota_v2.c | 15
fs/reiserfs/stree.c | 2
fs/smb/server/smb2pdu.c | 3
fs/squashfs/block.c | 2
fs/squashfs/file.c | 3
fs/squashfs/file_direct.c | 6
fs/udf/namei.c | 1
include/linux/bitmap.h | 20
include/linux/bpf_verifier.h | 23
include/linux/cpumask.h | 2
include/linux/dsa/ocelot.h | 47 +
include/linux/fs.h | 5
include/linux/if_vlan.h | 21
include/linux/jbd2.h | 8
include/linux/pid.h | 2
include/linux/sched/signal.h | 2
include/linux/slab.h | 5
include/linux/sunrpc/svc.h | 13
include/linux/udp.h | 2
include/linux/virtio_net.h | 35 -
include/net/cfg80211.h | 40 +
include/net/inet_timewait_sock.h | 2
include/net/kcm.h | 1
include/net/tcp.h | 2
include/scsi/scsi_cmnd.h | 2
include/soc/mscc/ocelot.h | 12
include/trace/events/huge_memory.h | 3
include/uapi/linux/bpf.h | 19
init/Kconfig | 7
kernel/bpf/Makefile | 3
kernel/bpf/log.c | 82 ++
kernel/bpf/lpm_trie.c | 33 -
kernel/bpf/verifier.c | 69 --
kernel/cgroup/cgroup.c | 4
kernel/pid.c | 7
kernel/pid_namespace.c | 2
kernel/rcu/rcu.h | 7
kernel/rcu/srcutiny.c | 1
kernel/rcu/srcutree.c | 1
kernel/rcu/tasks.h | 1
kernel/rcu/tiny.c | 1
kernel/rcu/tree.c | 3
kernel/time/clocksource.c | 42 -
kernel/time/hrtimer.c | 5
kernel/time/posix-timers.c | 31 -
lib/math/prime_numbers.c | 2
mm/huge_memory.c | 30 -
mm/khugepaged.c | 20
mm/memcontrol.c | 7
mm/memory-failure.c | 20
mm/memory.c | 29
mm/slab_common.c | 41 -
mm/util.c | 4
mm/vmalloc.c | 11
net/bluetooth/bnep/core.c | 3
net/bluetooth/hci_conn.c | 11
net/bluetooth/hci_core.c | 24
net/bluetooth/mgmt.c | 4
net/bluetooth/rfcomm/sock.c | 14
net/bluetooth/smp.c | 144 ++--
net/bridge/br_netfilter_hooks.c | 6
net/core/filter.c | 8
net/core/skbuff.c | 8
net/dccp/ipv4.c | 2
net/dccp/ipv6.c | 6
net/dsa/tag_ocelot.c | 37 -
net/ipv4/fou.c | 2
net/ipv4/inet_timewait_sock.c | 16
net/ipv4/tcp_ipv4.c | 16
net/ipv4/tcp_minisocks.c | 7
net/ipv4/tcp_offload.c | 3
net/ipv4/udp_offload.c | 18
net/ipv6/ip6_output.c | 10
net/ipv6/ip6_tunnel.c | 12
net/ipv6/netfilter/nf_conntrack_reasm.c | 4
net/ipv6/tcp_ipv6.c | 6
net/iucv/iucv.c | 3
net/kcm/kcmsock.c | 4
net/mac80211/agg-tx.c | 6
net/mac80211/debugfs_netdev.c | 3
net/mac80211/driver-ops.c | 3
net/mac80211/ieee80211_i.h | 1
net/mac80211/iface.c | 27
net/mac80211/rx.c | 387 ++++++-------
net/mac80211/sta_info.c | 17
net/mac80211/sta_info.h | 3
net/mctp/test/route-test.c | 2
net/mptcp/diag.c | 2
net/mptcp/pm_netlink.c | 31 -
net/netfilter/nf_flow_table_inet.c | 3
net/netfilter/nf_flow_table_ip.c | 3
net/netfilter/nf_flow_table_offload.c | 2
net/netfilter/nf_tables_api.c | 209 ++++---
net/netfilter/nfnetlink_queue.c | 35 +
net/netfilter/nft_counter.c | 9
net/netlink/af_netlink.c | 13
net/rds/recv.c | 13
net/sched/sch_generic.c | 11
net/sched/sch_netem.c | 47 -
net/sctp/inqueue.c | 14
net/wireless/core.h | 8
net/wireless/util.c | 195 ++++--
samples/bpf/map_perf_test_user.c | 2
samples/bpf/xdp_router_ipv4_user.c | 2
scripts/rust_is_available.sh | 41 +
security/selinux/avc.c | 2
sound/core/timer.c | 2
sound/pci/hda/patch_realtek.c | 1
sound/soc/sof/ipc4.c | 9
sound/usb/mixer.c | 7
sound/usb/quirks-table.h | 1
sound/usb/quirks.c | 2
tools/include/linux/align.h | 12
tools/include/linux/bitmap.h | 9
tools/include/linux/mm.h | 5
tools/include/uapi/linux/bpf.h | 19
tools/testing/selftests/bpf/progs/map_ptr_kern.c | 2
tools/testing/selftests/bpf/test_lpm_map.c | 18
tools/testing/selftests/core/close_range_test.c | 35 +
tools/testing/selftests/net/net_helper.sh | 25
tools/testing/selftests/net/udpgro.sh | 57 +
tools/testing/selftests/net/udpgro_bench.sh | 5
tools/testing/selftests/net/udpgro_frglist.sh | 5
tools/testing/selftests/net/udpgso.c | 2
tools/testing/selftests/tc-testing/tdc.py | 1
tools/tracing/rtla/src/osnoise_top.c | 11
340 files changed, 4069 insertions(+), 2057 deletions(-)
Abdulrasaq Lawani (1):
fbdev: offb: replace of_node_put with __free(device_node)
Abhinav Kumar (2):
drm/msm/dp: fix the max supported bpp logic
drm/msm/dp: reset the link phy params before link training
Adrian Hunter (1):
clocksource: Make watchdog and suspend-timing multiplication overflow safe
Al Viro (4):
fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
memcg_write_event_control(): fix a user-triggerable oops
afs: fix __afs_break_callback() / afs_drop_open_mmap() race
fuse: fix UAF in rcu pathwalks
Alex Deucher (1):
drm/amdgpu/jpeg2: properly set atomics vmid field
Alex Hung (2):
drm/amd/display: Validate hw_points_num before using it
Revert "drm/amd/display: Validate hw_points_num before using it"
Alexander Gordeev (1):
s390/iucv: fix receive buffer virtual vs physical address confusion
Alexander Lobakin (5):
fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
s390/cio: rename bitmap_size() -> idset_bitmap_size()
btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits()
bitmap: introduce generic optimized bitmap_size()
tools: move alignment-related macros to new <linux/align.h>
Alexandre Belloni (1):
rtc: nct3018y: fix possible NULL dereference
Alexei Starovoitov (1):
bpf: Avoid kfree_rcu() under lock in bpf_lpm_trie.
Allison Henderson (1):
net:rds: Fix possible deadlock in rds_message_put
Andi Shyti (1):
i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
Andreas Gruenbacher (12):
gfs2: Rename remaining "transaction" glock references
gfs2: Rename the {freeze,thaw}_super callbacks
gfs2: Rename gfs2_freeze_lock{ => _shared }
gfs2: Rename SDF_{FS_FROZEN => FREEZE_INITIATOR}
gfs2: Rework freeze / thaw logic
gfs2: Stop using gfs2_make_fs_ro for withdraw
gfs2: setattr_chown: Add missing initialization
gfs2: Refcounting fix in gfs2_thaw_super
gfs2: Fix another freeze/thaw hang
gfs2: don't withdraw if init_threads() got interrupted
gfs2: Remove LM_FLAG_PRIORITY flag
gfs2: Remove freeze_go_demote_ok
Andrew Melnychenko (1):
udp: allow header check for dodgy GSO_UDP_L4 packets.
Andrii Nakryiko (2):
bpf: Split off basic BPF verifier log into separate file
bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
Andy Yan (1):
drm/rockchip: vop2: clear afbc en and transform bit for cluster window at linear mode
Antoniu Miclaus (1):
hwmon: (ltc2992) Avoid division by zero
Ashish Mhetre (1):
memory: tegra: Skip SID programming if SID registers aren't set
Aurelien Jarno (1):
media: solo6x10: replace max(a, min(b, c)) by clamp(b, a, c)
Baokun Li (2):
ext4: do not trim the group with corrupted block bitmap
ext4: set the type of max_zeroout to unsigned int to avoid overflow
Bard Liao (1):
ASoC: SOF: ipc4: check return value of snd_sof_ipc_msg_data
Bas Nieuwenhuizen (1):
drm/amdgpu: Actually check flags for all context ops.
Ben Whitten (1):
mmc: dw_mmc: allow biu and ciu clocks to defer
Bharat Bhushan (1):
octeontx2-af: Fix CPT AF register offset calculation
Biju Das (1):
irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time
Boyuan Zhang (2):
drm/amdgpu/vcn: identify unified queue in sw init
drm/amdgpu/vcn: not pause dpg for unified queue
Breno Leitao (1):
i2c: tegra: Do not mark ACPI devices as irq safe
Candice Li (1):
drm/amdgpu: Validate TA binary size
Chaotian Jing (1):
scsi: core: Fix the return value of scsi_logical_block_count()
Chengfeng Ye (3):
staging: ks7010: disable bh on tx_dev_lock
media: s5p-mfc: Fix potential deadlock on condlock
IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd->uctxt_lock
Christian Brauner (1):
binfmt_misc: cleanup on filesystem umount
Christophe Kerello (1):
memory: stm32-fmc2-ebi: check regmap_read return value
Claudio Imbrenda (1):
s390/uv: Panic for set and remove shared access UVC errors
Cosmin Ratiu (1):
net/mlx5e: Correctly report errors for ethtool rx flows
Costa Shulyupin (1):
hrtimer: Select housekeeping CPU during migration
Dan Carpenter (4):
rtla/osnoise: Prevent NULL dereference in error handling
atm: idt77252: prevent use after free in dequeue_rx()
dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
mmc: mmc_test: Fix NULL dereference on allocation failure
Daniel Wagner (1):
nvmet-trace: avoid dereferencing pointer too early
Dave Kleikamp (1):
Revert "jfs: fix shift-out-of-bounds in dbJoin"
David Lechner (1):
staging: iio: resolver: ad2s1210: fix use before initialization
David Sterba (8):
btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item()
btrfs: change BUG_ON to assertion when checking for delayed_node root
btrfs: tests: allocate dummy fs_info and root in test_find_delalloc()
btrfs: handle invalid root reference found in may_destroy_subvol()
btrfs: send: handle unexpected data in header buffer in begin_cmd()
btrfs: change BUG_ON to assertion in tree_move_down()
btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent()
btrfs: replace sb::s_blocksize by fs_info::sectorsize
David Thompson (1):
mlxbf_gige: disable RX filters until RX path initialized
Dmitry Antipov (1):
net: sctp: fix skb leak in sctp_inq_free()
Dmitry Baryshkov (2):
drm/msm/dpu: don't play tricks with debug macros
drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
Donald Hunter (2):
docs/bpf: Document BPF_MAP_TYPE_LPM_TRIE map
netfilter: flowtable: initialise extack before use
Dragos Tatulea (1):
net/mlx5e: Take state lock during tx timeout reporter
Edward Adam Davis (2):
reiserfs: fix uninit-value in comp_keys
jfs: fix null ptr deref in dtInsertEntry
Eli Billauer (3):
char: xillybus: Don't destroy workqueue from work item running on it
char: xillybus: Refine workqueue handling
char: xillybus: Check USB endpoints when probing device
Eric Dumazet (8):
netlink: hold nlk->cb_mutex longer in __netlink_dump_start()
gtp: pull network headers in gtp_dev_xmit()
tcp/dccp: bypass empty buckets in inet_twsk_purge()
tcp/dccp: do not care about families in inet_twsk_purge()
ipv6: prevent UAF in ip6_send_skb()
ipv6: fix possible UAF in ip6_finish_output2()
ipv6: prevent possible UAF in ip6_xmit()
tcp: do not export tcp_twsk_purge()
Erico Nunes (1):
drm/lima: set gp bus_stop bit before hard reset
Eugene Syromiatnikov (1):
mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
Faizal Rahim (1):
igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
Felix Fietkau (14):
wifi: mac80211: fix and simplify unencrypted drop check for mesh
wifi: cfg80211: move A-MSDU check in ieee80211_data_to_8023_exthdr
wifi: cfg80211: factor out bridge tunnel / RFC1042 header check
wifi: mac80211: remove mesh forwarding congestion check
wifi: mac80211: fix receiving A-MSDU frames on mesh interfaces
wifi: mac80211: add a workaround for receiving non-standard mesh A-MSDU
wifi: mac80211: fix mesh path discovery based on unicast packets
wifi: mac80211: fix mesh forwarding
wifi: mac80211: fix flow dissection for forwarded packets
wifi: mac80211: fix receiving mesh packets in forwarding=0 networks
wifi: mac80211: drop bogus static keywords in A-MSDU rx
wifi: mac80211: fix potential null pointer dereference
wifi: cfg80211: fix receiving mesh packets without RFC1042 header
udp: fix receiving fraglist GSO packets
Filipe Manana (1):
btrfs: send: allow cloning non-aligned extent if it ends at i_size
Florian Westphal (2):
netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
tcp: prevent concurrent execution of tcp_sk_exit_batch
Gao Xiang (1):
erofs: avoid debugging output for (de)compressed data
Gavrilov Ilia (1):
pppoe: Fix memory leak in pppoe_sendmsg()
Gergo Koteles (1):
platform/x86: lg-laptop: fix %s null argument warning
Greg Kroah-Hartman (2):
Revert "usb: gadget: uvc: cleanup request when not in correct state"
Linux 6.1.107
Griffin Kroah-Hartman (1):
Bluetooth: MGMT: Add error handling to pair_device()
Guanrui Huang (1):
irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
Gustavo A. R. Silva (1):
clk: visconti: Add bounds-checking coverage for struct visconti_pll_provider
Haibo Xu (1):
arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
Hailong Liu (1):
mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0
Hangbin Liu (1):
selftests: udpgro: report error when receive failed
Hannes Reinecke (1):
nvmet-tcp: do not continue for invalid icreq
Hans Verkuil (3):
media: radio-isa: use dev_name to fill in bus_info
media: qcom: venus: fix incorrect return value
media: pci: cx23885: check cx23885_vdev_init() return
Heiko Carstens (1):
s390/smp,mcck: fix early IPI handling
Helge Deller (1):
parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
Ivan Orlov (2):
9P FS: Fix wild-memory-access write in v9fs_get_acl
mm: khugepaged: fix kernel BUG in hpage_collapse_scan_file()
Jakub Kicinski (1):
net: don't dump stack on queue timeout
Jan Höppner (1):
Revert "s390/dasd: Establish DMA alignment"
Jan Kara (5):
quota: Detect loops in quota tree
ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
ext4: do not create EA inode under buffer lock
udf: Fix bogus checksum computation in udf_rename()
quota: Remove BUG_ON from dqget()
Jann Horn (1):
fuse: Initialize beyond-EOF page contents before setting uptodate
Jarkko Nikula (2):
i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out
i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer
Jason Gerecke (1):
HID: wacom: Defer calculation of resolution until resolution_code is known
Javier Carrasco (1):
hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt()
Jeff Johnson (1):
wifi: cw1200: Avoid processing an invalid TIM IE
Jeff Layton (1):
nfsd: drop the nfsd_put helper
Jeremy Kerr (1):
net: mctp: test: Use correct skb for route input check
Jesse Brandeburg (1):
ice: fix W=1 headers mismatch
Jesse Zhang (1):
drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent
Jian Shen (1):
net: hns3: add checking for vf id of mailbox
Jiaxun Yang (1):
MIPS: Loongson64: Set timer mode in cpu-probe
Jie Wang (2):
net: hns3: fix wrong use of semaphore up
net: hns3: fix a deadlock problem when config TC during resetting
Johannes Berg (6):
wifi: mac80211: take wiphy lock for MAC addr change
wifi: mac80211: fix change_address deadlock during unregister
wifi: cfg80211: check A-MSDU format more carefully
wifi: cfg80211: check wiphy mutex is held for wdev mutex
wifi: mac80211: fix BA session teardown race
wifi: mac80211: add documentation for amsdu_mesh_control
Joseph Huang (1):
net: dsa: mv88e6xxx: Fix out-of-bound access
Juan José Arboleda (1):
ALSA: usb-audio: Support Yamaha P-125 quirk entry
Justin Tee (1):
scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
Kamalesh Babulal (1):
cgroup: Avoid extra dereference in css_populate_dir()
Kees Cook (5):
pid: Replace struct pid 1-element array with flex-array
bpf: Replace bpf_lpm_trie_key 0-length array with flexible array
hwmon: (pc87360) Bounds check data->innr usage
net/sun3_82586: Avoid reading past buffer in debug output
x86: Increase brk randomness entropy for 64-bit systems
Keith Busch (1):
nvme: clear caller pointer on identify failure
Khazhismel Kumykov (1):
dm resume: don't return EINVAL when signalled
Konstantin Komarov (1):
fs/ntfs3: Do copy_to_user out of run_lock
Krishna Kurapati (1):
usb: dwc3: core: Skip setting event buffers for host only controllers
Kuniyuki Iwashima (1):
kcm: Serialise kcm_sendmsg() for the same socket.
Kunwu Chan (1):
powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
Lang Yu (1):
drm/amdkfd: reserve the BO before validating it
Lee Jones (1):
drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored
Lee, Chun-Yi (1):
Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
Leon Hwang (1):
bpf: Fix updating attached freplace prog in prog_array map
Li Lingfeng (1):
block: Fix lockdep warning in blk_mq_mark_tag_wait
Li Nan (1):
md: clean up invalid BUG_ON in md_ioctl
Li RongQing (1):
KVM: x86: fire timer when it is migrated and expired, and in oneshot mode
Li Zhong (1):
ext4: check the return value of ext4_xattr_inode_dec_ref()
Li zeming (1):
powerpc/boot: Handle allocation failure in simple_realloc()
Lianqin Hu (1):
ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
Lizhi Xu (1):
squashfs: squashfs_read_data need to check if the length is 0
Long Li (1):
net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings
Lucas Karpinski (1):
selftests/net: synchronize udpgro tests' tx and rx connection
Luiz Augusto von Dentz (4):
Bluetooth: RFCOMM: Fix not validating setsockopt user input
Bluetooth: bnep: Fix out-of-bound access
Bluetooth: hci_core: Fix LE quote calculation
Bluetooth: SMP: Fix assumption of Central always being Initiator
Maciej Fijalkowski (6):
ice: Prepare legacy-rx for upcoming XDP multi-buffer support
ice: Add xdp_buff to ice_rx_ring struct
ice: Store page count inside ice_rx_buf
ice: Pull out next_to_clean bump out of ice_put_rx_buf()
ice: fix page reuse when PAGE_SIZE is over 8k
ice: fix ICE_LAST_OFFSET formula
Manas Ghandat (1):
jfs: fix shift-out-of-bounds in dbJoin
Marc Zyngier (1):
KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
Martin Blumenstingl (1):
clocksource/drivers/arm_global_timer: Guard against division by zero
Masahiro Yamada (2):
rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
Mathias Nyman (1):
xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
Mathieu Othacehe (1):
tty: atmel_serial: use the correct RTS flag.
Matthieu Baerts (NGI0) (4):
mptcp: pm: re-using ID of unused removed ADD_ADDR
mptcp: pm: re-using ID of unused removed subflows
mptcp: pm: re-using ID of unused flushed subflows
mptcp: pm: only decrement add_addr_accepted for MPJ req
Max Filippov (1):
fs: binfmt_elf_efpic: don't use missing interpreter's properties
Max Kellermann (1):
fs/netfs/fscache_cookie: add missing "n_accesses" check
Maximilian Luz (1):
platform/surface: aggregator: Fix warning when controller is destroyed in probe
Michael Ellerman (1):
powerpc/boot: Only free if realloc() succeeds
Michael Grzeschik (1):
usb: gadget: uvc: cleanup request when not in correct state
Michał Mirosław (2):
i2c: tegra: allow DVC support to be compiled out
i2c: tegra: allow VI support to be compiled out
Miguel Ojeda (3):
kbuild: rust_is_available: normalize version matching
kbuild: rust_is_available: handle failures calling `$RUSTC`/`$BINDGEN`
rust: work around `bindgen` 0.69.0 issue
Mika Westerberg (1):
thunderbolt: Mark XDomain as unplugged when router is removed
Mike Christie (1):
scsi: spi: Fix sshdr use
Mikko Perttunen (1):
drm/tegra: Zero-initialize iosys_map
Mikulas Patocka (2):
dm persistent data: fix memory allocation failure
dm suspend: return -ERESTARTSYS instead of -EINTR
Miri Korenblit (1):
wifi: iwlwifi: abort scan when rfkill on but device enabled
Muhammad Husaini Zulkifli (1):
igc: Correct the launchtime offset
Mukesh Sisodiya (1):
wifi: iwlwifi: fw: Fix debugfs command sending
Nam Cao (1):
riscv: change XIP's kernel_map.size to be size of the entire kernel
Namjae Jeon (1):
ksmbd: the buffer of smb2 query dir response has at least 1 byte
Naohiro Aota (1):
btrfs: zoned: properly take lock to read/update block group's zoned variables
Neel Natu (1):
kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files
NeilBrown (6):
NFS: avoid infinite loop in pnfs_update_layout.
nfsd: Simplify code around svc_exit_thread() call in nfsd()
nfsd: separate nfsd_last_thread() from nfsd_put()
NFSD: simplify error paths in nfsd_svc()
nfsd: call nfsd_last_thread() before final nfsd_put()
nfsd: don't call locks_release_private() twice concurrently
Nikolay Aleksandrov (4):
bonding: fix bond_ipsec_offload_ok return type
bonding: fix null pointer deref in bond_ipsec_offload_ok
bonding: fix xfrm real_dev null pointer dereference
bonding: fix xfrm state handling when clearing active slave
Nikolay Kuratov (1):
cxgb4: add forgotten u64 ivlan cast before shift
Oreoluwa Babatunde (1):
openrisc: Call setup_memory() earlier in the init sequence
Pablo Neira Ayuso (1):
netfilter: flowtable: validate vlan header
Paolo Abeni (1):
selftests: net: more strict check in net_helper
Parsa Poorshikhian (1):
ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
Paul E. McKenney (1):
rcu: Eliminate rcu_gp_slow_unregister() false positive
Pawel Dembicki (3):
net: dsa: vsc73xx: pass value in phy_write operation
net: dsa: vsc73xx: use read_poll_timeout instead delay loop
net: dsa: vsc73xx: check busy flag in MDIO operations
Pei Li (1):
jfs: Fix shift-out-of-bounds in dbDiscardAG
Peiyang Wang (1):
net: hns3: use the user's cfg after reset
Peng Fan (1):
pmdomain: imx: wait SSAR when i.MX93 power domain on
Phil Chang (1):
hrtimer: Prevent queuing of hrtimer without a function callback
Phil Sutter (9):
netfilter: nf_tables: Audit log dump reset after the fact
netfilter: nf_tables: Drop pointless memset in nf_tables_dump_obj
netfilter: nf_tables: Unconditionally allocate nft_obj_filter
netfilter: nf_tables: A better name for nft_obj_filter
netfilter: nf_tables: Carry s_idx in nft_obj_dump_ctx
netfilter: nf_tables: nft_obj_filter fits into cb->ctx
netfilter: nf_tables: Carry reset boolean in nft_obj_dump_ctx
netfilter: nf_tables: Introduce nf_tables_getobj_single
netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
Philip Yang (1):
drm/amdkfd: Move dma unmapping after TLB flush
Philipp Stanner (1):
media: drivers/media/dvb-core: copy user arrays safely
Phillip Lougher (1):
Squashfs: fix variable overflow triggered by sysbot
Qu Wenruo (1):
btrfs: tree-checker: add dev extent item checks
Radhey Shyam Pandey (1):
net: axienet: Fix register defines comment description
Rand Deeb (1):
ssb: Fix division by zero issue in ssb_calc_clock_rate
Richard Fitzgerald (1):
firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid
Rob Clark (1):
drm/msm: Reduce fallout of fence signaling vs reclaim hangs
Rodrigo Siqueira (1):
drm/amd/display: Adjust cursor position
Ryusuke Konishi (1):
nilfs2: prevent WARNING in nilfs_dat_commit_end()
Sagi Grimberg (1):
nvmet-rdma: fix possible bad dereference when freeing rsps
Samuel Holland (1):
arm64: Fix KASAN random tag seed initialization
Sean Anderson (2):
net: xilinx: axienet: Always disable promiscuous mode
net: xilinx: axienet: Fix dangling multicast addresses
Sebastian Andrzej Siewior (2):
netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
Siarhei Vishniakou (1):
HID: microsoft: Add rumble support to latest xbox controllers
Simon Horman (1):
tc-testing: don't access non-existent variable on exception
Stefan Haberland (1):
s390/dasd: fix error recovery leading to data corruption on ESE devices
Stefan Hajnoczi (1):
virtiofs: forbid newlines in tags
Stephen Hemminger (1):
netem: fix return value if duplicate enqueue fails
Takashi Iwai (2):
ALSA: usb: Fix UBSAN warning in parse_audio_unit()
ALSA: timer: Relax start tick time check for slave timer elements
Tetsuo Handa (2):
nilfs2: initialize "struct nilfs_binfo_dat"->bi_pad field
Input: MT - limit max slots
Theodore Ts'o (1):
ext4, jbd2: add an optimized bmap for the journal inode
Thomas Bogendoerfer (1):
ip6_tunnel: Fix broken GRO
Thomas Gleixner (1):
posix-timers: Ensure timer ID search-loop limit is valid
Tom Hughes (1):
netfilter: allow ipv6 fragments to arrive on different devices
Tomi Valkeinen (1):
drm/bridge: tc358768: Attempt to fix DSI horizontal timings
Trond Myklebust (1):
nfsd: Fix a regression in nfsd_setattr()
Uwe Kleine-König (1):
usb: gadget: fsl: Increase size of name buffer for endpoints
Vladimir Oltean (5):
net: dsa: tag_ocelot: do not rely on skb_mac_header() for VLAN xmit
net: dsa: tag_ocelot: call only the relevant portion of __skb_vlan_pop() on TX
net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection
net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q"
net: mscc: ocelot: serialize access to the injection/extraction groups
Waiman Long (1):
mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
Werner Sembach (2):
Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3
Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination
Willem de Bruijn (3):
fou: remove warn in gue_gro_receive on unsupported protocol
net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation
net: drop bad gso csum_start and offset in virtio_net_hdr
Wolfram Sang (1):
i2c: riic: avoid potential division by zero
Yajun Deng (1):
net: sched: Print msecs when transmit queue time out
Yan Zhai (1):
gso: fix dodgy bit handling for GSO_UDP_L4
Ying Hsu (1):
Bluetooth: Fix hci_link_tx_to RCU lock usage
Yu Kuai (1):
md/raid5-cache: use READ_ONCE/WRITE_ONCE for 'conf->log'
Yue Haibing (1):
mlxbf_gige: Remove two unused function declarations
Yuri Benditovich (1):
net: change maximum number of UDP segments to 128
Zhen Lei (3):
selinux: fix potential counting error in avc_add_xperms_decision()
mm: Remove kmem_valid_obj()
rcu: Dump memory object info if callback function is invalid
Zhiguo Niu (1):
f2fs: fix to do sanity check in update_sit_entry
Zhihao Cheng (1):
vfs: Don't evict inode under the inode lru traversing context
Zhu Yanjun (1):
RDMA/rtrs: Fix the problem of variable not initialized fully
Zi Yan (2):
mm/numa: no task_numa_fault() call if PMD is changed
mm/numa: no task_numa_fault() call if PTE is changed
Zijun Hu (1):
Bluetooth: hci_conn: Check non NULL function before calling for HFP offload
yunshui (1):
bpf, net: Use DEV_STAT_INC()
3 weeks
- 1
- 1
[PATCH] ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK)
by Markuss Broks
MSI Bravo 17 (D7VEK), like other laptops from the family,
has broken ACPI tables and needs a quirk for internal mic
to work.
Signed-off-by: Markuss Broks <markuss.broks(a)gmail.com>
---
sound/soc/amd/yc/acp6x-mach.c | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/sound/soc/amd/yc/acp6x-mach.c b/sound/soc/amd/yc/acp6x-mach.c
index 0523c16305db..843abc378b28 100644
--- a/sound/soc/amd/yc/acp6x-mach.c
+++ b/sound/soc/amd/yc/acp6x-mach.c
@@ -353,6 +353,13 @@ static const struct dmi_system_id yc_acp_quirk_table[] = {
DMI_MATCH(DMI_PRODUCT_NAME, "Bravo 15 C7VF"),
}
},
+ {
+ .driver_data = &acp6x_card,
+ .matches = {
+ DMI_MATCH(DMI_BOARD_VENDOR, "Micro-Star International Co., Ltd."),
+ DMI_MATCH(DMI_PRODUCT_NAME, "Bravo 17 D7VEK"),
+ }
+ },
{
.driver_data = &acp6x_card,
.matches = {
--
2.46.0
3 weeks
- 3
- 4
[PATCH v2 net-next 1/3] icmp: change the order of rate limits
by Eric Dumazet
ICMP messages are ratelimited :
After the blamed commits, the two rate limiters are applied in this order:
1) host wide ratelimit (icmp_global_allow())
2) Per destination ratelimit (inetpeer based)
In order to avoid side-channels attacks, we need to apply
the per destination check first.
This patch makes the following change :
1) icmp_global_allow() checks if the host wide limit is reached.
But credits are not yet consumed. This is deferred to 3)
2) The per destination limit is checked/updated.
This might add a new node in inetpeer tree.
3) icmp_global_consume() consumes tokens if prior operations succeeded.
This means that host wide ratelimit is still effective
in keeping inetpeer tree small even under DDOS.
As a bonus, I removed icmp_global.lock as the fast path
can use a lock-free operation.
Fixes: c0303efeab73 ("net: reduce cycles spend on ICMP replies that gets rate limited")
Fixes: 4cdf507d5452 ("icmp: add a global rate limitation")
Reported-by: Keyu Man <keyu.man(a)email.ucr.edu>
Signed-off-by: Eric Dumazet <edumazet(a)google.com>
Reviewed-by: David Ahern <dsahern(a)kernel.org>
Cc: Jesper Dangaard Brouer <hawk(a)kernel.org>
Cc: stable(a)vger.kernel.org
---
include/net/ip.h | 2 +
net/ipv4/icmp.c | 103 ++++++++++++++++++++++++++---------------------
net/ipv6/icmp.c | 28 ++++++++-----
3 files changed, 76 insertions(+), 57 deletions(-)
diff --git a/include/net/ip.h b/include/net/ip.h
index c5606cadb1a552f3e282a5e1e721fd47b07432b2..82248813619e3f21e09d52976accbdc76c7668c2 100644
--- a/include/net/ip.h
+++ b/include/net/ip.h
@@ -795,6 +795,8 @@ static inline void ip_cmsg_recv(struct msghdr *msg, struct sk_buff *skb)
}
bool icmp_global_allow(void);
+void icmp_global_consume(void);
+
extern int sysctl_icmp_msgs_per_sec;
extern int sysctl_icmp_msgs_burst;
diff --git a/net/ipv4/icmp.c b/net/ipv4/icmp.c
index b8f56d03fcbb62970a828e20dd9f05fcede2d552..0078e8fb2e86d0552ef85eb5bf5bef947b0f1c3d 100644
--- a/net/ipv4/icmp.c
+++ b/net/ipv4/icmp.c
@@ -224,57 +224,59 @@ int sysctl_icmp_msgs_per_sec __read_mostly = 1000;
int sysctl_icmp_msgs_burst __read_mostly = 50;
static struct {
- spinlock_t lock;
- u32 credit;
+ atomic_t credit;
u32 stamp;
-} icmp_global = {
- .lock = __SPIN_LOCK_UNLOCKED(icmp_global.lock),
-};
+} icmp_global;
/**
* icmp_global_allow - Are we allowed to send one more ICMP message ?
*
* Uses a token bucket to limit our ICMP messages to ~sysctl_icmp_msgs_per_sec.
* Returns false if we reached the limit and can not send another packet.
- * Note: called with BH disabled
+ * Works in tandem with icmp_global_consume().
*/
bool icmp_global_allow(void)
{
- u32 credit, delta, incr = 0, now = (u32)jiffies;
- bool rc = false;
+ u32 delta, now, oldstamp;
+ int incr, new, old;
- /* Check if token bucket is empty and cannot be refilled
- * without taking the spinlock. The READ_ONCE() are paired
- * with the following WRITE_ONCE() in this same function.
+ /* Note: many cpus could find this condition true.
+ * Then later icmp_global_consume() could consume more credits,
+ * this is an acceptable race.
*/
- if (!READ_ONCE(icmp_global.credit)) {
- delta = min_t(u32, now - READ_ONCE(icmp_global.stamp), HZ);
- if (delta < HZ / 50)
- return false;
- }
+ if (atomic_read(&icmp_global.credit) > 0)
+ return true;
- spin_lock(&icmp_global.lock);
- delta = min_t(u32, now - icmp_global.stamp, HZ);
- if (delta >= HZ / 50) {
- incr = READ_ONCE(sysctl_icmp_msgs_per_sec) * delta / HZ;
- if (incr)
- WRITE_ONCE(icmp_global.stamp, now);
- }
- credit = min_t(u32, icmp_global.credit + incr,
- READ_ONCE(sysctl_icmp_msgs_burst));
- if (credit) {
- /* We want to use a credit of one in average, but need to randomize
- * it for security reasons.
- */
- credit = max_t(int, credit - get_random_u32_below(3), 0);
- rc = true;
+ now = jiffies;
+ oldstamp = READ_ONCE(icmp_global.stamp);
+ delta = min_t(u32, now - oldstamp, HZ);
+ if (delta < HZ / 50)
+ return false;
+
+ incr = READ_ONCE(sysctl_icmp_msgs_per_sec) * delta / HZ;
+ if (!incr)
+ return false;
+
+ if (cmpxchg(&icmp_global.stamp, oldstamp, now) == oldstamp) {
+ old = atomic_read(&icmp_global.credit);
+ do {
+ new = min(old + incr, READ_ONCE(sysctl_icmp_msgs_burst));
+ } while (!atomic_try_cmpxchg(&icmp_global.credit, &old, new));
}
- WRITE_ONCE(icmp_global.credit, credit);
- spin_unlock(&icmp_global.lock);
- return rc;
+ return true;
}
EXPORT_SYMBOL(icmp_global_allow);
+void icmp_global_consume(void)
+{
+ int credits = get_random_u32_below(3);
+
+ /* Note: this might make icmp_global.credit negative. */
+ if (credits)
+ atomic_sub(credits, &icmp_global.credit);
+}
+EXPORT_SYMBOL(icmp_global_consume);
+
static bool icmpv4_mask_allow(struct net *net, int type, int code)
{
if (type > NR_ICMP_TYPES)
@@ -291,14 +293,16 @@ static bool icmpv4_mask_allow(struct net *net, int type, int code)
return false;
}
-static bool icmpv4_global_allow(struct net *net, int type, int code)
+static bool icmpv4_global_allow(struct net *net, int type, int code,
+ bool *apply_ratelimit)
{
if (icmpv4_mask_allow(net, type, code))
return true;
- if (icmp_global_allow())
+ if (icmp_global_allow()) {
+ *apply_ratelimit = true;
return true;
-
+ }
__ICMP_INC_STATS(net, ICMP_MIB_RATELIMITGLOBAL);
return false;
}
@@ -308,15 +312,16 @@ static bool icmpv4_global_allow(struct net *net, int type, int code)
*/
static bool icmpv4_xrlim_allow(struct net *net, struct rtable *rt,
- struct flowi4 *fl4, int type, int code)
+ struct flowi4 *fl4, int type, int code,
+ bool apply_ratelimit)
{
struct dst_entry *dst = &rt->dst;
struct inet_peer *peer;
bool rc = true;
int vif;
- if (icmpv4_mask_allow(net, type, code))
- goto out;
+ if (!apply_ratelimit)
+ return true;
/* No rate limit on loopback */
if (dst->dev && (dst->dev->flags&IFF_LOOPBACK))
@@ -331,6 +336,8 @@ static bool icmpv4_xrlim_allow(struct net *net, struct rtable *rt,
out:
if (!rc)
__ICMP_INC_STATS(net, ICMP_MIB_RATELIMITHOST);
+ else
+ icmp_global_consume();
return rc;
}
@@ -402,6 +409,7 @@ static void icmp_reply(struct icmp_bxm *icmp_param, struct sk_buff *skb)
struct ipcm_cookie ipc;
struct rtable *rt = skb_rtable(skb);
struct net *net = dev_net(rt->dst.dev);
+ bool apply_ratelimit = false;
struct flowi4 fl4;
struct sock *sk;
struct inet_sock *inet;
@@ -413,11 +421,11 @@ static void icmp_reply(struct icmp_bxm *icmp_param, struct sk_buff *skb)
if (ip_options_echo(net, &icmp_param->replyopts.opt.opt, skb))
return;
- /* Needed by both icmp_global_allow and icmp_xmit_lock */
+ /* Needed by both icmpv4_global_allow and icmp_xmit_lock */
local_bh_disable();
- /* global icmp_msgs_per_sec */
- if (!icmpv4_global_allow(net, type, code))
+ /* is global icmp_msgs_per_sec exhausted ? */
+ if (!icmpv4_global_allow(net, type, code, &apply_ratelimit))
goto out_bh_enable;
sk = icmp_xmit_lock(net);
@@ -450,7 +458,7 @@ static void icmp_reply(struct icmp_bxm *icmp_param, struct sk_buff *skb)
rt = ip_route_output_key(net, &fl4);
if (IS_ERR(rt))
goto out_unlock;
- if (icmpv4_xrlim_allow(net, rt, &fl4, type, code))
+ if (icmpv4_xrlim_allow(net, rt, &fl4, type, code, apply_ratelimit))
icmp_push_reply(sk, icmp_param, &fl4, &ipc, &rt);
ip_rt_put(rt);
out_unlock:
@@ -596,6 +604,7 @@ void __icmp_send(struct sk_buff *skb_in, int type, int code, __be32 info,
int room;
struct icmp_bxm icmp_param;
struct rtable *rt = skb_rtable(skb_in);
+ bool apply_ratelimit = false;
struct ipcm_cookie ipc;
struct flowi4 fl4;
__be32 saddr;
@@ -677,7 +686,7 @@ void __icmp_send(struct sk_buff *skb_in, int type, int code, __be32 info,
}
}
- /* Needed by both icmp_global_allow and icmp_xmit_lock */
+ /* Needed by both icmpv4_global_allow and icmp_xmit_lock */
local_bh_disable();
/* Check global sysctl_icmp_msgs_per_sec ratelimit, unless
@@ -685,7 +694,7 @@ void __icmp_send(struct sk_buff *skb_in, int type, int code, __be32 info,
* loopback, then peer ratelimit still work (in icmpv4_xrlim_allow)
*/
if (!(skb_in->dev && (skb_in->dev->flags&IFF_LOOPBACK)) &&
- !icmpv4_global_allow(net, type, code))
+ !icmpv4_global_allow(net, type, code, &apply_ratelimit))
goto out_bh_enable;
sk = icmp_xmit_lock(net);
@@ -744,7 +753,7 @@ void __icmp_send(struct sk_buff *skb_in, int type, int code, __be32 info,
goto out_unlock;
/* peer icmp_ratelimit */
- if (!icmpv4_xrlim_allow(net, rt, &fl4, type, code))
+ if (!icmpv4_xrlim_allow(net, rt, &fl4, type, code, apply_ratelimit))
goto ende;
/* RFC says return as much as we can without exceeding 576 bytes. */
diff --git a/net/ipv6/icmp.c b/net/ipv6/icmp.c
index 7b31674644efc338ec458d92dfe495480825b0fd..46f70e4a835139ef7d8925c49440865355048193 100644
--- a/net/ipv6/icmp.c
+++ b/net/ipv6/icmp.c
@@ -175,14 +175,16 @@ static bool icmpv6_mask_allow(struct net *net, int type)
return false;
}
-static bool icmpv6_global_allow(struct net *net, int type)
+static bool icmpv6_global_allow(struct net *net, int type,
+ bool *apply_ratelimit)
{
if (icmpv6_mask_allow(net, type))
return true;
- if (icmp_global_allow())
+ if (icmp_global_allow()) {
+ *apply_ratelimit = true;
return true;
-
+ }
__ICMP_INC_STATS(net, ICMP_MIB_RATELIMITGLOBAL);
return false;
}
@@ -191,13 +193,13 @@ static bool icmpv6_global_allow(struct net *net, int type)
* Check the ICMP output rate limit
*/
static bool icmpv6_xrlim_allow(struct sock *sk, u8 type,
- struct flowi6 *fl6)
+ struct flowi6 *fl6, bool apply_ratelimit)
{
struct net *net = sock_net(sk);
struct dst_entry *dst;
bool res = false;
- if (icmpv6_mask_allow(net, type))
+ if (!apply_ratelimit)
return true;
/*
@@ -228,6 +230,8 @@ static bool icmpv6_xrlim_allow(struct sock *sk, u8 type,
if (!res)
__ICMP6_INC_STATS(net, ip6_dst_idev(dst),
ICMP6_MIB_RATELIMITHOST);
+ else
+ icmp_global_consume();
dst_release(dst);
return res;
}
@@ -452,6 +456,7 @@ void icmp6_send(struct sk_buff *skb, u8 type, u8 code, __u32 info,
struct net *net;
struct ipv6_pinfo *np;
const struct in6_addr *saddr = NULL;
+ bool apply_ratelimit = false;
struct dst_entry *dst;
struct icmp6hdr tmp_hdr;
struct flowi6 fl6;
@@ -533,11 +538,12 @@ void icmp6_send(struct sk_buff *skb, u8 type, u8 code, __u32 info,
return;
}
- /* Needed by both icmp_global_allow and icmpv6_xmit_lock */
+ /* Needed by both icmpv6_global_allow and icmpv6_xmit_lock */
local_bh_disable();
/* Check global sysctl_icmp_msgs_per_sec ratelimit */
- if (!(skb->dev->flags & IFF_LOOPBACK) && !icmpv6_global_allow(net, type))
+ if (!(skb->dev->flags & IFF_LOOPBACK) &&
+ !icmpv6_global_allow(net, type, &apply_ratelimit))
goto out_bh_enable;
mip6_addr_swap(skb, parm);
@@ -575,7 +581,7 @@ void icmp6_send(struct sk_buff *skb, u8 type, u8 code, __u32 info,
np = inet6_sk(sk);
- if (!icmpv6_xrlim_allow(sk, type, &fl6))
+ if (!icmpv6_xrlim_allow(sk, type, &fl6, apply_ratelimit))
goto out;
tmp_hdr.icmp6_type = type;
@@ -717,6 +723,7 @@ static enum skb_drop_reason icmpv6_echo_reply(struct sk_buff *skb)
struct ipv6_pinfo *np;
const struct in6_addr *saddr = NULL;
struct icmp6hdr *icmph = icmp6_hdr(skb);
+ bool apply_ratelimit = false;
struct icmp6hdr tmp_hdr;
struct flowi6 fl6;
struct icmpv6_msg msg;
@@ -781,8 +788,9 @@ static enum skb_drop_reason icmpv6_echo_reply(struct sk_buff *skb)
goto out;
/* Check the ratelimit */
- if ((!(skb->dev->flags & IFF_LOOPBACK) && !icmpv6_global_allow(net, ICMPV6_ECHO_REPLY)) ||
- !icmpv6_xrlim_allow(sk, ICMPV6_ECHO_REPLY, &fl6))
+ if ((!(skb->dev->flags & IFF_LOOPBACK) &&
+ !icmpv6_global_allow(net, ICMPV6_ECHO_REPLY, &apply_ratelimit)) ||
+ !icmpv6_xrlim_allow(sk, ICMPV6_ECHO_REPLY, &fl6, apply_ratelimit))
goto out_dst_release;
idev = __in6_dev_get(skb->dev);
--
2.46.0.295.g3b9ea8a38a-goog
3 weeks
- 1
- 0