August 2024 - Linux-stable-mirror

[PATCH net 12/13] can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open

by Marc Kleine-Budde

From: Simon Arlott <simon(a)octiron.net> The mcp251x_hw_wake() function is called with the mpc_lock mutex held and disables the interrupt handler so that no interrupts can be processed while waking the device. If an interrupt has already occurred then waiting for the interrupt handler to complete will deadlock because it will be trying to acquire the same mutex. CPU0 CPU1 ---- ---- mcp251x_open() mutex_lock(&priv->mcp_lock) request_threaded_irq() <interrupt> mcp251x_can_ist() mutex_lock(&priv->mcp_lock) mcp251x_hw_wake() disable_irq() <-- deadlock Use disable_irq_nosync() instead because the interrupt handler does everything while holding the mutex so it doesn't matter if it's still running. Fixes: 8ce8c0abcba3 ("can: mcp251x: only reset hardware as required") Signed-off-by: Simon Arlott <simon(a)octiron.net> Reviewed-by: Przemek Kitszel <przemyslaw.kitszel(a)intel.com> Cc: stable(a)vger.kernel.org Link: https://lore.kernel.org/all/4fc08687-1d80-43fe-9f0d-8ef8475e75f6@0882a8b5-c… Signed-off-by: Marc Kleine-Budde <mkl(a)pengutronix.de> --- drivers/net/can/spi/mcp251x.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/net/can/spi/mcp251x.c b/drivers/net/can/spi/mcp251x.c index 3b8736ff0345..ec5c64006a16 100644 --- a/drivers/net/can/spi/mcp251x.c +++ b/drivers/net/can/spi/mcp251x.c @@ -752,7 +752,7 @@ static int mcp251x_hw_wake(struct spi_device *spi) int ret; /* Force wakeup interrupt to wake device, but don't execute IST */ - disable_irq(spi->irq); + disable_irq_nosync(spi->irq); mcp251x_write_2regs(spi, CANINTE, CANINTE_WAKIE, CANINTF_WAKIF); /* Wait for oscillator startup timer after wake up */ -- 2.45.2

1 year, 2 months

1
0
0 0

[PATCH 4.19 0/1] Fix CVE-2021-3493

by hsimeliere.opensource＠witekio.com

https://nvd.nist.gov/vuln/detail/CVE-2021-3493

1 year, 2 months

2
5
0 0

FAILED: patch "[PATCH] smb/client: fix rdma usage in smb2_async_writev()" failed to apply to 6.6-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.6-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.6.y git checkout FETCH_HEAD git cherry-pick -x 017d1701743657fbfaea74397727a9d2b81846b7 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2024082910-depraved-thing-8c02@gregkh' --subject-prefix 'PATCH 6.6.y' HEAD^.. Possible dependencies: 017d17017436 ("smb/client: fix rdma usage in smb2_async_writev()") b608e2c31878 ("smb/client: remove unused rq_iter_size from struct smb_rqst") dc5939de82f1 ("cifs: Replace the writedata replay bool with a netfs sreq flag") ab58fbdeebc7 ("cifs: Use more fields from netfs_io_subrequest") a975a2f22cdc ("cifs: Replace cifs_writedata with a wrapper around netfs_io_subrequest") 753b67eb630d ("cifs: Replace cifs_readdata with a wrapper around netfs_io_subrequest") f3dc1bdb6b0b ("cifs: Fix writeback data corruption") d1bba17e20d5 ("Merge tag '6.8-rc1-smb3-client-fixes' of git://git.samba.org/sfrench/cifs-2.6") thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 017d1701743657fbfaea74397727a9d2b81846b7 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher <metze(a)samba.org> Date: Wed, 21 Aug 2024 16:31:39 +0200 Subject: [PATCH] smb/client: fix rdma usage in smb2_async_writev() rqst.rq_iter needs to be truncated otherwise we'll also send the bytes into the stream socket... This is the logic behind rqst.rq_npages = 0, which was removed in "cifs: Change the I/O paths to use an iterator rather than a page list" (d08089f649a0cfb2099c8551ac47eef0cc23fdf2). Cc: stable(a)vger.kernel.org Fixes: d08089f649a0 ("cifs: Change the I/O paths to use an iterator rather than a page list") Reviewed-by: David Howells <dhowells(a)redhat.com> Signed-off-by: Stefan Metzmacher <metze(a)samba.org> Signed-off-by: Steve French <stfrench(a)microsoft.com> diff --git a/fs/smb/client/smb2pdu.c b/fs/smb/client/smb2pdu.c index 63a2541d4a05..2d7e6c42cf18 100644 --- a/fs/smb/client/smb2pdu.c +++ b/fs/smb/client/smb2pdu.c @@ -4913,6 +4913,13 @@ smb2_async_writev(struct cifs_io_subrequest *wdata) if (rc) goto out; + rqst.rq_iov = iov; + rqst.rq_iter = wdata->subreq.io_iter; + + rqst.rq_iov[0].iov_len = total_len - 1; + rqst.rq_iov[0].iov_base = (char *)req; + rqst.rq_nvec += 1; + if (smb3_encryption_required(tcon)) flags |= CIFS_TRANSFORM_REQ; @@ -4924,6 +4931,7 @@ smb2_async_writev(struct cifs_io_subrequest *wdata) req->WriteChannelInfoOffset = 0; req->WriteChannelInfoLength = 0; req->Channel = SMB2_CHANNEL_NONE; + req->Length = cpu_to_le32(io_parms->length); req->Offset = cpu_to_le64(io_parms->offset); req->DataOffset = cpu_to_le16( offsetof(struct smb2_write_req, Buffer)); @@ -4943,7 +4951,6 @@ smb2_async_writev(struct cifs_io_subrequest *wdata) */ if (smb3_use_rdma_offload(io_parms)) { struct smbd_buffer_descriptor_v1 *v1; - size_t data_size = iov_iter_count(&wdata->subreq.io_iter); bool need_invalidate = server->dialect == SMB30_PROT_ID; wdata->mr = smbd_register_mr(server->smbd_conn, &wdata->subreq.io_iter, @@ -4952,9 +4959,10 @@ smb2_async_writev(struct cifs_io_subrequest *wdata) rc = -EAGAIN; goto async_writev_out; } + /* For RDMA read, I/O size is in RemainingBytes not in Length */ + req->RemainingBytes = req->Length; req->Length = 0; req->DataOffset = 0; - req->RemainingBytes = cpu_to_le32(data_size); req->Channel = SMB2_CHANNEL_RDMA_V1_INVALIDATE; if (need_invalidate) req->Channel = SMB2_CHANNEL_RDMA_V1; @@ -4966,30 +4974,22 @@ smb2_async_writev(struct cifs_io_subrequest *wdata) v1->offset = cpu_to_le64(wdata->mr->mr->iova); v1->token = cpu_to_le32(wdata->mr->mr->rkey); v1->length = cpu_to_le32(wdata->mr->mr->length); + + rqst.rq_iov[0].iov_len += sizeof(*v1); + + /* + * We keep wdata->subreq.io_iter, + * but we have to truncate rqst.rq_iter + */ + iov_iter_truncate(&rqst.rq_iter, 0); } #endif - iov[0].iov_len = total_len - 1; - iov[0].iov_base = (char *)req; - rqst.rq_iov = iov; - rqst.rq_nvec = 1; - rqst.rq_iter = wdata->subreq.io_iter; if (test_bit(NETFS_SREQ_RETRYING, &wdata->subreq.flags)) smb2_set_replay(server, &rqst); -#ifdef CONFIG_CIFS_SMB_DIRECT - if (wdata->mr) - iov[0].iov_len += sizeof(struct smbd_buffer_descriptor_v1); -#endif - cifs_dbg(FYI, "async write at %llu %u bytes iter=%zx\n", - io_parms->offset, io_parms->length, iov_iter_count(&rqst.rq_iter)); -#ifdef CONFIG_CIFS_SMB_DIRECT - /* For RDMA read, I/O size is in RemainingBytes not in Length */ - if (!wdata->mr) - req->Length = cpu_to_le32(io_parms->length); -#else - req->Length = cpu_to_le32(io_parms->length); -#endif + cifs_dbg(FYI, "async write at %llu %u bytes iter=%zx\n", + io_parms->offset, io_parms->length, iov_iter_count(&wdata->subreq.io_iter)); if (wdata->credits.value > 0) { shdr->CreditCharge = cpu_to_le16(DIV_ROUND_UP(wdata->subreq.len,

1 year, 2 months

1
0
0 0

FAILED: patch "[PATCH] smb/client: fix rdma usage in smb2_async_writev()" failed to apply to 6.10-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.10-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.10.y git checkout FETCH_HEAD git cherry-pick -x 017d1701743657fbfaea74397727a9d2b81846b7 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2024082909-everyday-familiar-e920@gregkh' --subject-prefix 'PATCH 6.10.y' HEAD^.. Possible dependencies: 017d17017436 ("smb/client: fix rdma usage in smb2_async_writev()") b608e2c31878 ("smb/client: remove unused rq_iter_size from struct smb_rqst") thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 017d1701743657fbfaea74397727a9d2b81846b7 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher <metze(a)samba.org> Date: Wed, 21 Aug 2024 16:31:39 +0200 Subject: [PATCH] smb/client: fix rdma usage in smb2_async_writev() rqst.rq_iter needs to be truncated otherwise we'll also send the bytes into the stream socket... This is the logic behind rqst.rq_npages = 0, which was removed in "cifs: Change the I/O paths to use an iterator rather than a page list" (d08089f649a0cfb2099c8551ac47eef0cc23fdf2). Cc: stable(a)vger.kernel.org Fixes: d08089f649a0 ("cifs: Change the I/O paths to use an iterator rather than a page list") Reviewed-by: David Howells <dhowells(a)redhat.com> Signed-off-by: Stefan Metzmacher <metze(a)samba.org> Signed-off-by: Steve French <stfrench(a)microsoft.com> diff --git a/fs/smb/client/smb2pdu.c b/fs/smb/client/smb2pdu.c index 63a2541d4a05..2d7e6c42cf18 100644 --- a/fs/smb/client/smb2pdu.c +++ b/fs/smb/client/smb2pdu.c @@ -4913,6 +4913,13 @@ smb2_async_writev(struct cifs_io_subrequest *wdata) if (rc) goto out; + rqst.rq_iov = iov; + rqst.rq_iter = wdata->subreq.io_iter; + + rqst.rq_iov[0].iov_len = total_len - 1; + rqst.rq_iov[0].iov_base = (char *)req; + rqst.rq_nvec += 1; + if (smb3_encryption_required(tcon)) flags |= CIFS_TRANSFORM_REQ; @@ -4924,6 +4931,7 @@ smb2_async_writev(struct cifs_io_subrequest *wdata) req->WriteChannelInfoOffset = 0; req->WriteChannelInfoLength = 0; req->Channel = SMB2_CHANNEL_NONE; + req->Length = cpu_to_le32(io_parms->length); req->Offset = cpu_to_le64(io_parms->offset); req->DataOffset = cpu_to_le16( offsetof(struct smb2_write_req, Buffer)); @@ -4943,7 +4951,6 @@ smb2_async_writev(struct cifs_io_subrequest *wdata) */ if (smb3_use_rdma_offload(io_parms)) { struct smbd_buffer_descriptor_v1 *v1; - size_t data_size = iov_iter_count(&wdata->subreq.io_iter); bool need_invalidate = server->dialect == SMB30_PROT_ID; wdata->mr = smbd_register_mr(server->smbd_conn, &wdata->subreq.io_iter, @@ -4952,9 +4959,10 @@ smb2_async_writev(struct cifs_io_subrequest *wdata) rc = -EAGAIN; goto async_writev_out; } + /* For RDMA read, I/O size is in RemainingBytes not in Length */ + req->RemainingBytes = req->Length; req->Length = 0; req->DataOffset = 0; - req->RemainingBytes = cpu_to_le32(data_size); req->Channel = SMB2_CHANNEL_RDMA_V1_INVALIDATE; if (need_invalidate) req->Channel = SMB2_CHANNEL_RDMA_V1; @@ -4966,30 +4974,22 @@ smb2_async_writev(struct cifs_io_subrequest *wdata) v1->offset = cpu_to_le64(wdata->mr->mr->iova); v1->token = cpu_to_le32(wdata->mr->mr->rkey); v1->length = cpu_to_le32(wdata->mr->mr->length); + + rqst.rq_iov[0].iov_len += sizeof(*v1); + + /* + * We keep wdata->subreq.io_iter, + * but we have to truncate rqst.rq_iter + */ + iov_iter_truncate(&rqst.rq_iter, 0); } #endif - iov[0].iov_len = total_len - 1; - iov[0].iov_base = (char *)req; - rqst.rq_iov = iov; - rqst.rq_nvec = 1; - rqst.rq_iter = wdata->subreq.io_iter; if (test_bit(NETFS_SREQ_RETRYING, &wdata->subreq.flags)) smb2_set_replay(server, &rqst); -#ifdef CONFIG_CIFS_SMB_DIRECT - if (wdata->mr) - iov[0].iov_len += sizeof(struct smbd_buffer_descriptor_v1); -#endif - cifs_dbg(FYI, "async write at %llu %u bytes iter=%zx\n", - io_parms->offset, io_parms->length, iov_iter_count(&rqst.rq_iter)); -#ifdef CONFIG_CIFS_SMB_DIRECT - /* For RDMA read, I/O size is in RemainingBytes not in Length */ - if (!wdata->mr) - req->Length = cpu_to_le32(io_parms->length); -#else - req->Length = cpu_to_le32(io_parms->length); -#endif + cifs_dbg(FYI, "async write at %llu %u bytes iter=%zx\n", + io_parms->offset, io_parms->length, iov_iter_count(&wdata->subreq.io_iter)); if (wdata->credits.value > 0) { shdr->CreditCharge = cpu_to_le16(DIV_ROUND_UP(wdata->subreq.len,

1 year, 2 months

1
0
0 0

FAILED: patch "[PATCH] ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy" failed to apply to 6.10-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.10-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.10.y git checkout FETCH_HEAD git cherry-pick -x 44ceabdec12f4e5938f5668c5a691aa3aac703d7 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2024082945-closable-sighing-5d70@gregkh' --subject-prefix 'PATCH 6.10.y' HEAD^.. Possible dependencies: 44ceabdec12f ("ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book3 Ultra") dcfed708742c ("ALSA: hda/realtek: Implement sound init sequence for Samsung Galaxy Book3 Pro 360") thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 44ceabdec12f4e5938f5668c5a691aa3aac703d7 Mon Sep 17 00:00:00 2001 From: YOUNGJIN JOO <neoelec(a)gmail.com> Date: Sun, 25 Aug 2024 18:25:15 +0900 Subject: [PATCH] ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book3 Ultra 144d:c1cc requires the same workaround to enable the speaker amp as other Samsung models with the ALC298 codec. Signed-off-by: YOUNGJIN JOO <neoelec(a)gmail.com> Cc: <stable(a)vger.kernel.org> Link: https://patch.msgid.link/20240825092515.28728-1-neoelec@gmail.com Signed-off-by: Takashi Iwai <tiwai(a)suse.de> diff --git a/sound/pci/hda/patch_realtek.c b/sound/pci/hda/patch_realtek.c index b5cc3417138c..c04eac6a5064 100644 --- a/sound/pci/hda/patch_realtek.c +++ b/sound/pci/hda/patch_realtek.c @@ -10540,6 +10540,7 @@ static const struct snd_pci_quirk alc269_fixup_tbl[] = { SND_PCI_QUIRK(0x144d, 0xca03, "Samsung Galaxy Book2 Pro 360 (NP930QED)", ALC298_FIXUP_SAMSUNG_AMP), SND_PCI_QUIRK(0x144d, 0xc868, "Samsung Galaxy Book2 Pro (NP930XED)", ALC298_FIXUP_SAMSUNG_AMP), SND_PCI_QUIRK(0x144d, 0xc1ca, "Samsung Galaxy Book3 Pro 360 (NP960QFG-KB1US)", ALC298_FIXUP_SAMSUNG_AMP2), + SND_PCI_QUIRK(0x144d, 0xc1cc, "Samsung Galaxy Book3 Ultra (NT960XFH-XD92G))", ALC298_FIXUP_SAMSUNG_AMP2), SND_PCI_QUIRK(0x1458, 0xfa53, "Gigabyte BXBT-2807", ALC283_FIXUP_HEADSET_MIC), SND_PCI_QUIRK(0x1462, 0xb120, "MSI Cubi MS-B120", ALC283_FIXUP_HEADSET_MIC), SND_PCI_QUIRK(0x1462, 0xb171, "Cubi N 8GL (MS-B171)", ALC283_FIXUP_HEADSET_MIC),

1 year, 2 months

1
0
0 0

Apply dbaee836d60a8 to linux-5.10.y

by Nathan Chancellor

Hi Greg and Sasha, Please apply commit dbaee836d60a ("KVM: arm64: Don't use cbz/adr with external symbols") to linux-5.10.y, as a recent LLVM optimization around __cold functions [1] can cause hyp_panic() to be too far away from __guest_enter(), resulting in the same error that occurred with LTO (for the same reason): ld.lld: error: arch/arm64/built-in.a(kvm/hyp/entry.o):(function __guest_enter: .text+0x120): relocation R_AARCH64_CONDBR19 out of range: 14339212 is not in [-1048576, 1048575]; references 'hyp_panic' >>> referenced by entry.S:88 (arch/arm64/kvm/hyp/vhe/../entry.S:88) >>> defined in arch/arm64/built-in.a(kvm/hyp/vhe/switch.o) ld.lld: error: arch/arm64/built-in.a(kvm/hyp/entry.o):(function __guest_enter: .text+0x134): relocation R_AARCH64_ADR_PREL_LO21 out of range: 14339192 is not in [-1048576, 1048575]; references 'hyp_panic' >>> referenced by entry.S:97 (arch/arm64/kvm/hyp/vhe/../entry.S:97) >>> defined in arch/arm64/built-in.a(kvm/hyp/vhe/switch.o) It applies cleanly with 'patch -p1' and I have verified that it fixes the issue. [1]: https://github.com/llvm/llvm-project/commit/6b11573b8c5e3d36beee099dbe7347c… Cheers, Nathan

1 year, 2 months

2
1
0 0

[PATCH v4.19-v6.1] drm/amdgpu: Using uninitialized value *size when calling

by Vamsi Krishna Brahmajosyula

From: Jesse Zhang <jesse.zhang(a)amd.com> [ Upstream commit 88a9a467c548d0b3c7761b4fd54a68e70f9c0944 ] Initialize the size before calling amdgpu_vce_cs_reloc, such as case 0x03000001. V2: To really improve the handling we would actually need to have a separate value of 0xffffffff.(Christian) Signed-off-by: Jesse Zhang <jesse.zhang(a)amd.com> Suggested-by: Christian König <christian.koenig(a)amd.com> Reviewed-by: Christian König <christian.koenig(a)amd.com> Signed-off-by: Alex Deucher <alexander.deucher(a)amd.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Vamsi Krishna Brahmajosyula <vamsi-krishna.brahmajosyula(a)broadcom.com> --- drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c b/drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c index ecaa2d748..0a28daa14 100644 --- a/drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c +++ b/drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c @@ -725,7 +725,8 @@ int amdgpu_vce_ring_parse_cs(struct amdgpu_cs_parser *p, uint32_t ib_idx) uint32_t created = 0; uint32_t allocated = 0; uint32_t tmp, handle = 0; - uint32_t *size = &tmp; + uint32_t dummy = 0xffffffff; + uint32_t *size = &dummy; unsigned idx; int i, r = 0; -- 2.39.4

1 year, 2 months

2
1
0 0

[PATCH 4.19 1/6] ovl: check permission to open real file

by hsimeliere.opensource＠witekio.com

From: Miklos Szeredi <mszeredi(a)redhat.com> commit 05acefb4872dae89e772729efb194af754c877e8 upstream. Call inode_permission() on real inode before opening regular file on one of the underlying layers. In some cases ovl_permission() already checks access to an underlying file, but it misses the metacopy case, and possibly other ones as well. Removing the redundant permission check from ovl_permission() should be considered later. Signed-off-by: Miklos Szeredi <mszeredi(a)redhat.com> Signed-off-by: Hugo SIMELIERE <hsimeliere.opensource(a)witekio.com> --- fs/overlayfs/file.c | 16 ++++++++++++++-- 1 file changed, 14 insertions(+), 2 deletions(-) diff --git a/fs/overlayfs/file.c b/fs/overlayfs/file.c index 73c3e2c21edb..24a83ed9829a 100644 --- a/fs/overlayfs/file.c +++ b/fs/overlayfs/file.c @@ -34,10 +34,22 @@ static struct file *ovl_open_realfile(const struct file *file, struct file *realfile; const struct cred *old_cred; int flags = file->f_flags | OVL_OPEN_FLAGS; + int acc_mode = ACC_MODE(flags); + int err; + + if (flags & O_APPEND) + acc_mode |= MAY_APPEND; old_cred = ovl_override_creds(inode->i_sb); - realfile = open_with_fake_path(&file->f_path, flags, realinode, - current_cred()); + err = inode_permission(realinode, MAY_OPEN | acc_mode); + if (err) { + realfile = ERR_PTR(err); + } else if (!inode_owner_or_capable(realinode)) { + realfile = ERR_PTR(-EPERM); + } else { + realfile = open_with_fake_path(&file->f_path, flags, realinode, + current_cred()); + } revert_creds(old_cred); pr_debug("open(%p[%pD2/%c], 0%o) -> (%p, 0%o)\n", -- 2.43.0

1 year, 2 months

2
7
0 0

Linux 6.10.7

by Greg Kroah-Hartman

I'm announcing the release of the 6.10.7 kernel. All users of the 6.10 kernel series must upgrade. The updated 6.10.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.10.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/ABI/testing/sysfs-devices-system-cpu | 3 Makefile | 4 arch/arm64/kernel/acpi_numa.c | 2 arch/arm64/kernel/setup.c | 3 arch/arm64/kernel/smp.c | 2 arch/arm64/kvm/sys_regs.c | 6 arch/arm64/kvm/vgic/vgic-debug.c | 2 arch/arm64/kvm/vgic/vgic.h | 7 arch/mips/kernel/cpu-probe.c | 4 arch/powerpc/include/asm/topology.h | 13 arch/riscv/kernel/traps.c | 4 arch/riscv/mm/init.c | 4 arch/s390/boot/startup.c | 55 +-- arch/s390/boot/vmem.c | 14 arch/s390/boot/vmlinux.lds.S | 7 arch/s390/include/asm/page.h | 3 arch/s390/include/asm/uv.h | 5 arch/s390/kernel/vmlinux.lds.S | 2 arch/s390/kvm/kvm-s390.h | 7 arch/s390/tools/relocs.c | 2 block/blk-mq-tag.c | 5 drivers/acpi/acpica/acevents.h | 6 drivers/acpi/acpica/evregion.c | 12 drivers/acpi/acpica/evxfregn.c | 64 --- drivers/acpi/ec.c | 14 drivers/acpi/internal.h | 1 drivers/acpi/scan.c | 2 drivers/acpi/video_detect.c | 22 + drivers/ata/pata_macio.c | 23 - drivers/atm/idt77252.c | 9 drivers/bluetooth/btintel.c | 10 drivers/bluetooth/btintel_pcie.c | 3 drivers/bluetooth/btmtksdio.c | 3 drivers/bluetooth/btrtl.c | 1 drivers/bluetooth/btusb.c | 4 drivers/bluetooth/hci_qca.c | 4 drivers/bluetooth/hci_vhci.c | 2 drivers/char/xillybus/xillyusb.c | 42 +- drivers/gpio/gpio-mlxbf3.c | 14 drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 3 drivers/gpu/drm/amd/amdgpu/amdgpu_ctx.c | 8 drivers/gpu/drm/amd/amdgpu/amdgpu_psp_ta.c | 3 drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.c | 53 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.h | 1 drivers/gpu/drm/amd/amdgpu/jpeg_v2_0.c | 4 drivers/gpu/drm/amd/amdgpu/jpeg_v4_0_3.c | 63 +++ drivers/gpu/drm/amd/amdgpu/jpeg_v4_0_3.h | 7 drivers/gpu/drm/amd/amdgpu/jpeg_v5_0_0.c | 1 drivers/gpu/drm/amd/amdgpu/sdma_v5_2.c | 18 - drivers/gpu/drm/amd/amdgpu/soc15d.h | 6 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 32 + drivers/gpu/drm/amd/display/dc/hwss/dcn10/dcn10_hwseq.c | 4 drivers/gpu/drm/amd/display/dc/resource/dcn321/dcn321_resource.c | 3 drivers/gpu/drm/i915/display/intel_dp_hdcp.c | 4 drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.c | 4 drivers/gpu/drm/msm/disp/dpu1/dpu_hw_catalog.c | 4 drivers/gpu/drm/msm/disp/dpu1/dpu_kms.h | 14 drivers/gpu/drm/msm/disp/dpu1/dpu_plane.c | 20 - drivers/gpu/drm/msm/dp/dp_ctrl.c | 2 drivers/gpu/drm/msm/dp/dp_panel.c | 19 - drivers/gpu/drm/msm/msm_mdss.c | 2 drivers/gpu/drm/nouveau/nvkm/core/firmware.c | 9 drivers/gpu/drm/nouveau/nvkm/falcon/fw.c | 6 drivers/gpu/drm/v3d/v3d_sched.c | 14 drivers/gpu/drm/xe/display/xe_display.c | 6 drivers/gpu/drm/xe/xe_device.c | 4 drivers/gpu/drm/xe/xe_exec_queue.c | 19 - drivers/gpu/drm/xe/xe_exec_queue_types.h | 10 drivers/gpu/drm/xe/xe_gt_pagefault.c | 18 - drivers/gpu/drm/xe/xe_guc_submit.c | 8 drivers/gpu/drm/xe/xe_hw_fence.c | 59 ++- drivers/gpu/drm/xe/xe_hw_fence.h | 7 drivers/gpu/drm/xe/xe_lrc.c | 48 ++ drivers/gpu/drm/xe/xe_lrc.h | 3 drivers/gpu/drm/xe/xe_mmio.c | 41 +- drivers/gpu/drm/xe/xe_mmio.h | 2 drivers/gpu/drm/xe/xe_ring_ops.c | 22 - drivers/gpu/drm/xe/xe_sched_job.c | 180 +++++----- drivers/gpu/drm/xe/xe_sched_job.h | 7 drivers/gpu/drm/xe/xe_sched_job_types.h | 20 + drivers/gpu/drm/xe/xe_trace.h | 11 drivers/hid/wacom_wac.c | 4 drivers/i2c/busses/i2c-qcom-geni.c | 4 drivers/i2c/busses/i2c-tegra.c | 4 drivers/input/input-mt.c | 3 drivers/input/serio/i8042-acpipnpio.h | 20 - drivers/input/serio/i8042.c | 10 drivers/iommu/io-pgfault.c | 1 drivers/iommu/iommufd/device.c | 2 drivers/md/dm-ioctl.c | 22 + drivers/md/dm.c | 4 drivers/md/persistent-data/dm-space-map-metadata.c | 4 drivers/md/raid1.c | 14 drivers/misc/fastrpc.c | 22 - drivers/mmc/core/mmc_test.c | 9 drivers/mmc/host/dw_mmc.c | 8 drivers/mmc/host/mtk-sd.c | 8 drivers/net/bonding/bond_main.c | 21 - drivers/net/bonding/bond_options.c | 2 drivers/net/dsa/microchip/ksz_ptp.c | 5 drivers/net/dsa/mv88e6xxx/global1_atu.c | 3 drivers/net/dsa/ocelot/felix.c | 11 drivers/net/dsa/vitesse-vsc73xx-core.c | 45 ++ drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 5 drivers/net/ethernet/chelsio/cxgb4/cxgb4_filter.c | 3 drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c | 7 drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 3 drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 28 + drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mdio.c | 3 drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 4 drivers/net/ethernet/intel/ice/devlink/devlink_port.c | 4 drivers/net/ethernet/intel/ice/ice_base.c | 21 + drivers/net/ethernet/intel/ice/ice_txrx.c | 47 -- drivers/net/ethernet/intel/igb/igb_main.c | 1 drivers/net/ethernet/intel/igc/igc_defines.h | 6 drivers/net/ethernet/intel/igc/igc_main.c | 8 drivers/net/ethernet/intel/igc/igc_tsn.c | 76 +++- drivers/net/ethernet/intel/igc/igc_tsn.h | 1 drivers/net/ethernet/marvell/octeontx2/af/rvu_cpt.c | 23 - drivers/net/ethernet/mediatek/mtk_wed.c | 6 drivers/net/ethernet/mellanox/mlx5/core/en/reporter_tx.c | 2 drivers/net/ethernet/mellanox/mlx5/core/en_fs_ethtool.c | 2 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 13 drivers/net/ethernet/mellanox/mlx5/core/lib/ipsec_fs_roce.c | 6 drivers/net/ethernet/mellanox/mlx5/core/lib/sd.c | 18 - drivers/net/ethernet/mellanox/mlxbf_gige/mlxbf_gige.h | 8 drivers/net/ethernet/mellanox/mlxbf_gige/mlxbf_gige_main.c | 10 drivers/net/ethernet/mellanox/mlxbf_gige/mlxbf_gige_regs.h | 2 drivers/net/ethernet/mellanox/mlxbf_gige/mlxbf_gige_rx.c | 50 ++ drivers/net/ethernet/microsoft/mana/mana_en.c | 30 + drivers/net/ethernet/mscc/ocelot.c | 91 ++++- drivers/net/ethernet/mscc/ocelot_fdma.c | 3 drivers/net/ethernet/mscc/ocelot_vsc7514.c | 4 drivers/net/ethernet/wangxun/ngbe/ngbe_mdio.c | 8 drivers/net/ethernet/xilinx/xilinx_axienet.h | 17 drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 25 - drivers/net/gtp.c | 3 drivers/net/wireless/ath/ath12k/dp_tx.c | 72 ++++ drivers/net/wireless/ath/ath12k/hw.c | 6 drivers/net/wireless/ath/ath12k/hw.h | 4 drivers/net/wireless/ath/ath12k/mac.c | 1 drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c | 13 drivers/nvme/host/core.c | 2 drivers/platform/surface/aggregator/controller.c | 3 drivers/platform/x86/dell/Kconfig | 1 drivers/platform/x86/dell/dell-uart-backlight.c | 8 drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c | 3 drivers/pmdomain/imx/imx93-pd.c | 5 drivers/pmdomain/imx/scu-pd.c | 5 drivers/s390/block/dasd.c | 36 +- drivers/s390/block/dasd_3990_erp.c | 10 drivers/s390/block/dasd_eckd.c | 55 +-- drivers/s390/block/dasd_genhd.c | 1 drivers/s390/block/dasd_int.h | 2 drivers/s390/crypto/ap_bus.c | 7 drivers/spi/spi-cadence-quadspi.c | 14 drivers/staging/media/atomisp/pci/ia_css_stream_public.h | 8 drivers/staging/media/atomisp/pci/sh_css_internal.h | 19 - drivers/thermal/gov_bang_bang.c | 87 +++- drivers/thermal/thermal_core.c | 3 drivers/thermal/thermal_debugfs.c | 6 drivers/thermal/thermal_of.c | 23 - drivers/thunderbolt/switch.c | 1 drivers/tty/serial/8250/8250_omap.c | 33 - drivers/tty/serial/atmel_serial.c | 2 drivers/tty/serial/fsl_lpuart.c | 1 drivers/tty/vt/conmakehash.c | 12 drivers/usb/host/xhci-mem.c | 2 drivers/usb/host/xhci.c | 8 drivers/usb/misc/usb-ljca.c | 1 drivers/usb/typec/tcpm/tcpm.c | 1 fs/btrfs/delayed-ref.c | 67 +++ fs/btrfs/delayed-ref.h | 2 fs/btrfs/extent-tree.c | 51 ++ fs/btrfs/extent_io.c | 14 fs/btrfs/extent_map.c | 22 - fs/btrfs/free-space-cache.c | 14 fs/btrfs/send.c | 52 ++ fs/btrfs/super.c | 18 - fs/btrfs/tree-checker.c | 74 ++++ fs/ceph/addr.c | 19 + fs/file.c | 30 - fs/fuse/dev.c | 6 fs/inode.c | 39 ++ fs/libfs.c | 35 + fs/locks.c | 2 fs/netfs/buffered_read.c | 8 fs/netfs/buffered_write.c | 2 fs/netfs/fscache_cookie.c | 4 fs/netfs/io.c | 144 ++++++++ fs/smb/client/cifsglob.h | 17 fs/smb/client/file.c | 55 ++- fs/smb/client/reparse.c | 11 fs/smb/client/smb1ops.c | 2 fs/smb/client/smb2ops.c | 42 ++ fs/smb/client/smb2pdu.c | 40 ++ fs/smb/client/trace.h | 55 +++ fs/smb/client/transport.c | 8 fs/smb/server/connection.c | 34 + fs/smb/server/connection.h | 3 fs/smb/server/mgmt/user_session.c | 8 fs/smb/server/smb2pdu.c | 5 include/acpi/acpixf.h | 5 include/acpi/video.h | 1 include/asm-generic/vmlinux.lds.h | 19 - include/linux/bitmap.h | 12 include/linux/bpf_verifier.h | 4 include/linux/dsa/ocelot.h | 47 ++ include/linux/fs.h | 5 include/linux/hugetlb.h | 33 + include/linux/io_uring_types.h | 2 include/linux/mm.h | 11 include/linux/panic.h | 1 include/linux/pgalloc_tag.h | 13 include/linux/thermal.h | 1 include/net/af_vsock.h | 4 include/net/bluetooth/hci.h | 17 include/net/bluetooth/hci_core.h | 2 include/net/kcm.h | 1 include/net/mana/mana.h | 1 include/scsi/scsi_cmnd.h | 2 include/soc/mscc/ocelot.h | 12 include/trace/events/netfs.h | 1 include/uapi/misc/fastrpc.h | 3 init/Kconfig | 25 - io_uring/io_uring.h | 2 io_uring/kbuf.c | 9 io_uring/napi.c | 50 +- io_uring/napi.h | 2 kernel/bpf/verifier.c | 5 kernel/cgroup/cpuset.c | 5 kernel/cpu.c | 12 kernel/events/core.c | 3 kernel/kallsyms.c | 60 --- kernel/kallsyms_internal.h | 6 kernel/kallsyms_selftest.c | 22 - kernel/panic.c | 8 kernel/printk/printk.c | 2 kernel/trace/trace.c | 2 kernel/vmcore_info.c | 4 kernel/workqueue.c | 47 +- mm/huge_memory.c | 29 - mm/memcontrol.c | 7 mm/memory-failure.c | 20 - mm/memory.c | 33 - mm/mm_init.c | 12 mm/mseal.c | 14 mm/page_alloc.c | 51 +- mm/vmalloc.c | 11 net/bluetooth/hci_core.c | 19 - net/bluetooth/hci_event.c | 2 net/bluetooth/mgmt.c | 4 net/bluetooth/smp.c | 144 ++++---- net/bridge/br_netfilter_hooks.c | 6 net/dsa/tag_ocelot.c | 37 -- net/ipv4/tcp_input.c | 28 - net/ipv4/tcp_ipv4.c | 14 net/ipv4/udp_offload.c | 3 net/ipv6/ip6_output.c | 10 net/ipv6/ip6_tunnel.c | 12 net/ipv6/netfilter/nf_conntrack_reasm.c | 4 net/iucv/iucv.c | 4 net/kcm/kcmsock.c | 4 net/mctp/test/route-test.c | 2 net/mptcp/diag.c | 2 net/mptcp/pm.c | 13 net/mptcp/pm_netlink.c | 142 +++++-- net/mptcp/protocol.h | 3 net/netfilter/nf_flow_table_inet.c | 3 net/netfilter/nf_flow_table_ip.c | 3 net/netfilter/nf_flow_table_offload.c | 2 net/netfilter/nf_tables_api.c | 147 +++++--- net/netfilter/nfnetlink.c | 5 net/netfilter/nfnetlink_queue.c | 35 + net/netfilter/nft_counter.c | 9 net/openvswitch/datapath.c | 2 net/sched/sch_netem.c | 47 +- net/vmw_vsock/af_vsock.c | 50 +- net/vmw_vsock/vsock_bpf.c | 4 scripts/kallsyms.c | 111 +----- scripts/link-vmlinux.sh | 106 +++-- scripts/rust_is_available.sh | 6 security/keys/trusted-keys/trusted_dcp.c | 35 + security/selinux/avc.c | 8 security/selinux/hooks.c | 12 sound/core/timer.c | 2 sound/pci/hda/patch_realtek.c | 1 sound/pci/hda/tas2781_hda_i2c.c | 14 sound/usb/quirks-table.h | 1 sound/usb/quirks.c | 2 tools/perf/tests/vmlinux-kallsyms.c | 1 tools/testing/selftests/bpf/progs/iters.c | 54 +++ tools/testing/selftests/core/close_range_test.c | 35 + tools/testing/selftests/drivers/net/mlxsw/ethtool_lanes.sh | 3 tools/testing/selftests/mm/Makefile | 2 tools/testing/selftests/mm/run_vmtests.sh | 3 tools/testing/selftests/net/af_unix/msg_oob.c | 2 tools/testing/selftests/net/lib.sh | 11 tools/testing/selftests/net/mptcp/mptcp_join.sh | 28 + tools/testing/selftests/net/udpgro.sh | 53 +- tools/testing/selftests/tc-testing/tdc.py | 1 tools/tracing/rtla/src/osnoise_top.c | 11 302 files changed, 3441 insertions(+), 1720 deletions(-) Abhinav Jain (1): selftest: af_unix: Fix kselftest compilation warnings Abhinav Kumar (4): drm/msm/dp: fix the max supported bpp logic drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable() drm/msm/dp: reset the link phy params before link training drm/msm: fix the highest_bank_bit for sc7180 Al Viro (2): fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE memcg_write_event_control(): fix a user-triggerable oops Alex Deucher (3): drm/amdgpu/jpeg2: properly set atomics vmid field drm/amdgpu/jpeg4: properly set atomics vmid field drm/amdgpu/sdma5.2: limit wptr workaround to sdma 5.2.1 Alexander Gordeev (2): s390/boot: Avoid possible physmem_info segment corruption s390/boot: Fix KASLR base offset off by __START_KERNEL bytes Alexander Stein (1): pmdomain: imx: scu-pd: Remove duplicated clocks Alexandra Winter (1): s390/iucv: Fix vargs handling in iucv_alloc_device() Alexandre Courbot (1): Makefile: add $(srctree) to dependency of compile_commands.json target Andi Shyti (1): i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume Asmaa Mnebhi (1): gpio: mlxbf3: Support shutdown() function Baochen Qiang (1): wifi: ath12k: use 128 bytes aligned iova in transmit path for WCN7850 Baojun Xu (1): ALSA: hda/tas2781: fix wrong calibrated data order Barak Biber (1): iommu: Restore lost return in iommu_report_device_fault() Bas Nieuwenhuizen (1): drm/amdgpu: Actually check flags for all context ops. Ben Whitten (1): mmc: dw_mmc: allow biu and ciu clocks to defer Bharat Bhushan (1): octeontx2-af: Fix CPT AF register offset calculation Boyuan Zhang (2): drm/amdgpu/vcn: identify unified queue in sw init drm/amdgpu/vcn: not pause dpg for unified queue Breno Leitao (1): i2c: tegra: Do not mark ACPI devices as irq safe Candice Li (1): drm/amdgpu: Validate TA binary size Carolina Jubran (1): net/mlx5e: XPS, Fix oversight of Multi-PF Netdev changes Celeste Liu (1): riscv: entry: always initialize regs->a0 to -ENOSYS Chaotian Jing (1): scsi: core: Fix the return value of scsi_logical_block_count() Chen Ridong (1): cgroup/cpuset: fix panic caused by partcmd_update Christian Brauner (2): pidfd: prevent creation of pidfds for kthreads Revert "pidfd: prevent creation of pidfds for kthreads" Claudio Imbrenda (1): s390/uv: Panic for set and remove shared access UVC errors Cong Wang (1): vsock: fix recursive ->recvmsg calls Cosmin Ratiu (1): net/mlx5e: Correctly report errors for ethtool rx flows Dan Carpenter (4): rtla/osnoise: Prevent NULL dereference in error handling atm: idt77252: prevent use after free in dequeue_rx() dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp() mmc: mmc_test: Fix NULL dereference on allocation failure Dave Airlie (1): nouveau/firmware: use dma non-coherent allocator David (Ming Qiang) Wu (1): drm/amd/amdgpu: command submission parser for JPEG David Gstir (2): KEYS: trusted: fix DCP blob payload length assignment KEYS: trusted: dcp: fix leak of blob encryption key David Hildenbrand (1): mm/hugetlb: fix hugetlb vs. core-mm PT locking David Howells (2): netfs, ceph: Revert "netfs: Remove deprecated use of PG_private_2 as a second writeback flag" cifs: Add a tracepoint to track credits involved in R/W requests David Thompson (1): mlxbf_gige: disable RX filters until RX path initialized Dmitry Baryshkov (5): drm/msm/dpu: don't play tricks with debug macros drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails drm/msm/dpu: limit QCM2290 to RGB formats only drm/msm/dpu: relax YUV requirements drm/msm/dpu: take plane rotation into account for wide planes Donald Hunter (2): netfilter: nfnetlink: Initialise extack before use in ACKs netfilter: flowtable: initialise extack before use Dragos Tatulea (1): net/mlx5e: Take state lock during tx timeout reporter Eli Billauer (3): char: xillybus: Don't destroy workqueue from work item running on it char: xillybus: Refine workqueue handling char: xillybus: Check USB endpoints when probing device Eric Dumazet (4): gtp: pull network headers in gtp_dev_xmit() ipv6: prevent UAF in ip6_send_skb() ipv6: fix possible UAF in ip6_finish_output2() ipv6: prevent possible UAF in ip6_xmit() Eric Farman (1): s390/dasd: Remove DMA alignment Eugene Syromiatnikov (1): mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size Faizal Rahim (4): igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer igc: Fix qbv_config_change_errors logics igc: Fix reset adapter logics when tx mode change igc: Fix qbv tx latency by setting gtxoffset Felix Fietkau (1): udp: fix receiving fraglist GSO packets Filipe Manana (2): btrfs: send: allow cloning non-aligned extent if it ends at i_size btrfs: only run the extent map shrinker from kswapd tasks Florian Westphal (2): netfilter: nf_queue: drop packets with cloned unconfirmed conntracks tcp: prevent concurrent execution of tcp_sk_exit_batch Greg Kroah-Hartman (1): Linux 6.10.7 Griffin Kroah-Hartman (3): Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD" Revert "serial: 8250_omap: Set the console genpd always on if no console suspend" Bluetooth: MGMT: Add error handling to pair_device() Haibo Xu (1): arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE Hailong Liu (1): mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0 Haiyang Zhang (1): net: mana: Fix RX buf alloc_size alignment and atomic op panic Hamza Mahfooz (1): drm/amd/display: fix s2idle entry for DCN3.5+ Hangbin Liu (2): selftests: udpgro: report error when receive failed selftests: udpgro: no need to load xdp for gro Hans de Goede (5): usb: misc: ljca: Add Lunar Lake ljca GPIO HID to ljca_gpio_hids[] media: atomisp: Fix streaming no longer working on BYT / ISP2400 devices ACPI: video: Add Dell UART backlight controller detection ACPI: video: Add backlight=native quirk for Dell OptiPlex 7760 AIO platform/x86: dell-uart-backlight: Use acpi_video_get_backlight_type() Harald Freudenberger (1): s390/ap: Refine AP bus bindings complete processing Ido Schimmel (1): selftests: mlxsw: ethtool_lanes: Source ethtool lib from correct path Jann Horn (2): fuse: Initialize beyond-EOF page contents before setting uptodate kallsyms: get rid of code for absolute kallsyms Janne Grunau (1): wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion Jason Gerecke (1): HID: wacom: Defer calculation of resolution until resolution_code is known Jens Axboe (1): io_uring/kbuf: sanitize peek buffer setup Jeremy Kerr (1): net: mctp: test: Use correct skb for route input check Jiaxun Yang (1): MIPS: Loongson64: Set timer mode in cpu-probe Jie Wang (2): net: hns3: fix wrong use of semaphore up net: hns3: fix a deadlock problem when config TC during resetting Josef Bacik (1): btrfs: check delayed refs when we're checking if a ref exists Joseph Huang (1): net: dsa: mv88e6xxx: Fix out-of-bound access Juan José Arboleda (1): ALSA: usb-audio: Support Yamaha P-125 quirk entry Khazhismel Kumykov (1): dm resume: don't return EINVAL when signalled Kirill A. Shutemov (1): mm: fix endless reclaim on machines with unaccepted memory Krzysztof Kozlowski (3): thermal: of: Fix OF node leak in thermal_of_trips_init() error path thermal: of: Fix OF node leak in thermal_of_zone_register() thermal: of: Fix OF node leak in of_thermal_zone_find() error paths Kuniyuki Iwashima (1): kcm: Serialise kcm_sendmsg() for the same socket. Kyle Huey (1): perf/bpf: Don't call bpf_overflow_handler() for tracing events Leon Hwang (1): bpf: Fix updating attached freplace prog in prog_array map Li Lingfeng (1): block: Fix lockdep warning in blk_mq_mark_tag_wait Lianqin Hu (1): ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET Loan Chen (1): drm/amd/display: Enable otg synchronization logic for DCN321 Long Li (1): net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings Lucas De Marchi (1): drm/xe: Fix opregion leak Luiz Augusto von Dentz (3): Bluetooth: HCI: Invert LE State quirk to be opt-out rather then opt-in Bluetooth: hci_core: Fix LE quote calculation Bluetooth: SMP: Fix assumption of Central always being Initiator Maciej Fijalkowski (3): ice: fix page reuse when PAGE_SIZE is over 8k ice: fix ICE_LAST_OFFSET formula ice: fix truesize operations for PAGE_SIZE >= 8192 Marc Zyngier (2): usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup() KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 Mario Limonciello (1): drm/amd/display: Don't register panel_power_savings on OLED panels Martin Whitaker (1): net: dsa: microchip: fix PTP config failure when using multiple ports Masahiro Yamada (7): tty: vt: conmakehash: remove non-portable code printing comment header kbuild: refactor variables in scripts/link-vmlinux.sh kbuild: remove PROVIDE() for kallsyms symbols rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT kbuild: merge temporary vmlinux for BTF and kallsyms kbuild: avoid scripts/kallsyms parsing /dev/null Mathias Nyman (1): xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration Mathieu Othacehe (1): tty: atmel_serial: use the correct RTS flag. Matthew Auld (3): drm/xe/display: stop calling domains_driver_remove twice drm/xe/mmio: move mmio_fini over to devm drm/xe: reset mmio mappings with devm Matthew Brost (4): drm/xe: Fix tile fini sequence drm/xe: Decouple job seqno and lrc seqno drm/xe: Free job before xe_exec_queue_put drm/xe: Do not dereference NULL job->fence in trace points Matthew Wilcox (Oracle) (1): netfs: Fault in smaller chunks for non-large folio mappings Matthieu Baerts (NGI0) (14): selftests: net: lib: ignore possible errors selftests: net: lib: kill PIDs before del netns mptcp: pm: re-using ID of unused removed ADD_ADDR mptcp: pm: re-using ID of unused removed subflows mptcp: pm: re-using ID of unused flushed subflows mptcp: pm: remove mptcp_pm_remove_subflow() mptcp: pm: only mark 'subflow' endp as available mptcp: pm: only decrement add_addr_accepted for MPJ req mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR mptcp: pm: only in-kernel cannot have entries with ID 0 mptcp: pm: fullmesh: select the right ID later mptcp: pm: avoid possible UaF when selecting endp selftests: mptcp: join: validate fullmesh endp on 1st sf selftests: mptcp: join: check re-using ID of closed subflow Max Kellermann (1): fs/netfs/fscache_cookie: add missing "n_accesses" check Maximilian Luz (1): platform/surface: aggregator: Fix warning when controller is destroyed in probe Maíra Canal (1): drm/v3d: Fix out-of-bounds read in `v3d_csd_job_run()` Melissa Wen (1): drm/amd/display: fix cursor offset on rotation 180 Menglong Dong (1): net: ovs: fix ovs_drop_reasons error Mengqi Zhang (1): mmc: mtk-sd: receive cmd8 data when hs400 tuning fail Mengyuan Lou (1): net: ngbe: Fix phy mode set to external phy Michael Ellerman (1): ata: pata_macio: Fix DMA table overflow Michael Mueller (1): KVM: s390: fix validity interception issue when gisa is switched off Michal Swiatkowski (1): ice: use internal pf id instead of function number Miguel Ojeda (1): rust: work around `bindgen` 0.69.0 issue Mika Westerberg (1): thunderbolt: Mark XDomain as unplugged when router is removed Mikulas Patocka (2): dm persistent data: fix memory allocation failure dm suspend: return -ERESTARTSYS instead of -EINTR Ming Lei (1): nvme: move stopping keep-alive into nvme_uninit_ctrl() Muhammad Usama Anjum (1): selftests: memfd_secret: don't build memfd_secret test on unsupported arches Nam Cao (1): riscv: change XIP's kernel_map.size to be size of the entire kernel Namjae Jeon (2): ksmbd: the buffer of smb2 query dir response has at least 1 byte ksmbd: fix race condition between destroy_previous_session() and smb2 operations() Naohiro Aota (2): btrfs: zoned: properly take lock to read/update block group's zoned variables btrfs: fix invalid mapping of extent xarray state Nicolin Chen (1): iommufd/device: Fix hwpt at err_unresv in iommufd_device_do_replace() Nikolay Aleksandrov (4): bonding: fix bond_ipsec_offload_ok return type bonding: fix null pointer deref in bond_ipsec_offload_ok bonding: fix xfrm real_dev null pointer dereference bonding: fix xfrm state handling when clearing active slave Nikolay Kuratov (1): cxgb4: add forgotten u64 ivlan cast before shift Nysal Jan K.A (2): cpu/SMT: Enable SMT only if a core is online powerpc/topology: Check if a core is online Olivier Langlois (1): io_uring/napi: check napi_enabled in io_napi_add() before proceeding Omar Sandoval (1): filelock: fix name of file_lease slab cache Pablo Neira Ayuso (1): netfilter: flowtable: validate vlan header Paolo Abeni (1): igb: cope with large MAX_SKB_FRAGS Parsa Poorshikhian (1): ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 Patrisious Haddad (1): net/mlx5: Fix IPsec RoCE MPV trace call Paul Moore (1): selinux: revert our use of vma_is_initial_heap() Paulo Alcantara (1): smb: client: ignore unhandled reparse tags Pavel Begunkov (1): io_uring/napi: use ktime in busy polling Pawel Dembicki (3): net: dsa: vsc73xx: fix port MAC configuration in full duplex mode net: dsa: vsc73xx: pass value in phy_write operation net: dsa: vsc73xx: check busy flag in MDIO operations Pedro Falcato (1): mseal: fix is_madv_discard() Peiyang Wang (1): net: hns3: use the user's cfg after reset Peng Fan (2): tty: serial: fsl_lpuart: mark last busy before uart_add_one_port pmdomain: imx: wait SSAR when i.MX93 power domain on Phil Sutter (3): netfilter: nf_tables: Audit log dump reset after the fact netfilter: nf_tables: Introduce nf_tables_getobj_single netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests Qu Wenruo (3): btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type btrfs: tree-checker: add dev extent item checks btrfs: only enable extent map shrinker for DEBUG builds Radhey Shyam Pandey (1): net: axienet: Fix register defines comment description Rafael J. Wysocki (8): Revert "ACPI: EC: Evaluate orphan _REG under EC device" thermal: gov_bang_bang: Call __thermal_cdev_update() directly ACPICA: Add a depth argument to acpi_execute_reg_methods() ACPI: EC: Evaluate _REG outside the EC scope more carefully thermal: gov_bang_bang: Drop unnecessary cooling device target state checks thermal: gov_bang_bang: Split bang_bang_control() thermal: gov_bang_bang: Add .manage() callback thermal: gov_bang_bang: Use governor_data to reduce overhead Rodrigo Siqueira (1): drm/amd/display: Adjust cursor position Rodrigo Vivi (1): drm/xe: Relax runtime pm protection during execution Ryo Takakura (1): printk/panic: Allow cpu backtraces to be written into ringbuffer during panic Samuel Holland (1): arm64: Fix KASAN random tag seed initialization Sean Anderson (2): net: xilinx: axienet: Always disable promiscuous mode net: xilinx: axienet: Fix dangling multicast addresses Sebastian Andrzej Siewior (2): netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). netfilter: nft_counter: Synchronize nft_counter_reset() against reader. Simon Horman (1): tc-testing: don't access non-existent variable on exception Somnath Kotur (1): bnxt_en: Fix double DMA unmapping for XDP_REDIRECT Song Liu (2): kallsyms: Do not cleanup .llvm.<hash> suffix before sorting symbols kallsyms: Match symbols exactly with CONFIG_LTO_CLANG Srinivas Pandruvada (1): platform/x86: ISST: Fix return value on last invalid resource Stefan Haberland (1): s390/dasd: fix error recovery leading to data corruption on ESE devices Stephen Hemminger (1): netem: fix return value if duplicate enqueue fails Steve French (2): smb3: fix lock breakage for cached writes smb3: fix broken cached reads when posix locks Steven Rostedt (1): tracing: Return from tracing_buffers_read() if the file has been closed Stuart Summers (1): drm/xe: Fix missing workqueue destroy in xe_gt_pagefault Su Hui (1): smb/client: avoid possible NULL dereference in cifs_free_subrequest() Subash Abhinov Kasiviswanathan (1): tcp: Update window clamping condition Suraj Kandpal (1): drm/i915/hdcp: Use correct cp_irq_count Suren Baghdasaryan (2): alloc_tag: mark pages reserved during CMA activation as not tagged alloc_tag: introduce clear_page_tag_ref() helper function Takashi Iwai (2): ALSA: timer: Relax start tick time check for slave timer elements ALSA: hda/tas2781: Use correct endian conversion Tariq Toukan (1): net/mlx5: SD, Do not query MPIR register if no sd_group Tejun Heo (1): workqueue: Fix spruious data race in __flush_work() Tetsuo Handa (1): Input: MT - limit max slots Thomas Bogendoerfer (1): ip6_tunnel: Fix broken GRO Thomas Hellström (2): drm/xe: Split lrc seqno fence creation up drm/xe: Don't initialize fences at xe_sched_job_create() Thorsten Blum (1): io_uring/napi: Remove unnecessary s64 cast Tom Hughes (1): netfilter: allow ipv6 fragments to arrive on different devices Vignesh Raghavendra (1): spi: spi-cadence-quadspi: Fix OSPI NOR failures during system resume Vladimir Oltean (3): net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q" net: mscc: ocelot: serialize access to the injection/extraction groups Waiman Long (2): mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if cpus.exclusive not set Werner Sembach (2): Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3 Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination Will Deacon (1): workqueue: Fix UBSAN 'subtraction overflow' error in shift_and_mask() Xu Yang (1): Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET" Yang Ruibin (1): thermal/debugfs: Fix the NULL vs IS_ERR() confusion in debugfs_create_dir() Yonghong Song (2): bpf: Fix a kernel verifier crash in stacksafe() selftests/bpf: Add a test to verify previous stacksafe() fix Yu Kuai (1): md/raid1: Fix data corruption for degraded array with slow disk Zenghui Yu (1): KVM: arm64: vgic-debug: Don't put unmarked LPIs Zhen Lei (2): selinux: fix potential counting error in avc_add_xperms_decision() selinux: add the processing of the failure of avc_add_xperms_decision() Zheng Zhang (1): net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb() Zhihao Cheng (1): vfs: Don't evict inode under the inode lru traversing context Zi Yan (2): mm/numa: no task_numa_fault() call if PMD is changed mm/numa: no task_numa_fault() call if PTE is changed yangerkun (1): libfs: fix infinite directory reads for offset dir

1 year, 2 months

1
1
0 0

Linux 6.6.48

by Greg Kroah-Hartman

I'm announcing the release of the 6.6.48 kernel. All users of the 6.6 kernel series must upgrade. The updated 6.6.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.6.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/ABI/testing/sysfs-devices-system-cpu | 3 Makefile | 2 arch/alpha/kernel/pci_iommu.c | 2 arch/arm64/kernel/acpi_numa.c | 2 arch/arm64/kernel/setup.c | 3 arch/arm64/kernel/smp.c | 2 arch/arm64/kvm/sys_regs.c | 6 arch/arm64/kvm/vgic/vgic.h | 7 arch/mips/jazz/jazzdma.c | 2 arch/mips/kernel/cpu-probe.c | 4 arch/openrisc/kernel/setup.c | 6 arch/parisc/kernel/irq.c | 4 arch/powerpc/boot/simple_alloc.c | 7 arch/powerpc/include/asm/topology.h | 13 arch/powerpc/kernel/dma-iommu.c | 2 arch/powerpc/platforms/ps3/system-bus.c | 4 arch/powerpc/platforms/pseries/papr-sysparm.c | 47 ++ arch/powerpc/platforms/pseries/vio.c | 2 arch/powerpc/sysdev/xics/icp-native.c | 2 arch/riscv/include/asm/asm.h | 10 arch/riscv/kernel/entry.S | 3 arch/riscv/kernel/traps.c | 3 arch/riscv/mm/init.c | 4 arch/s390/include/asm/uv.h | 5 arch/s390/kernel/early.c | 12 arch/s390/kernel/smp.c | 4 arch/s390/kvm/kvm-s390.h | 7 arch/x86/kernel/amd_gart_64.c | 2 arch/x86/kernel/process.c | 5 block/blk-mq-tag.c | 5 drivers/accel/habanalabs/common/debugfs.c | 14 drivers/accel/habanalabs/common/irq.c | 3 drivers/accel/habanalabs/common/memory.c | 15 drivers/accel/habanalabs/gaudi2/gaudi2_security.c | 1 drivers/acpi/acpica/acevents.h | 6 drivers/acpi/acpica/evregion.c | 12 drivers/acpi/acpica/evxfregn.c | 64 --- drivers/acpi/ec.c | 14 drivers/acpi/internal.h | 1 drivers/acpi/scan.c | 2 drivers/atm/idt77252.c | 9 drivers/char/xillybus/xillyusb.c | 42 +- drivers/clk/visconti/pll.c | 6 drivers/clocksource/arm_global_timer.c | 11 drivers/edac/skx_common.c | 4 drivers/firmware/cirrus/cs_dsp.c | 7 drivers/gpio/gpio-mlxbf3.c | 14 drivers/gpio/gpiolib-sysfs.c | 15 drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.h | 1 drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 40 ++ drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 3 drivers/gpu/drm/amd/amdgpu/amdgpu_ctx.c | 8 drivers/gpu/drm/amd/amdgpu/amdgpu_psp_ta.c | 3 drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.c | 53 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.h | 1 drivers/gpu/drm/amd/amdgpu/amdgpu_vm_pt.c | 6 drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 13 drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 13 drivers/gpu/drm/amd/amdgpu/imu_v11_0.c | 2 drivers/gpu/drm/amd/amdgpu/jpeg_v2_0.c | 4 drivers/gpu/drm/amd/amdgpu/jpeg_v4_0_3.c | 63 +++ drivers/gpu/drm/amd/amdgpu/jpeg_v4_0_3.h | 6 drivers/gpu/drm/amd/amdgpu/soc15d.h | 6 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 22 - drivers/gpu/drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 4 drivers/gpu/drm/amd/display/dc/dcn321/dcn321_resource.c | 3 drivers/gpu/drm/amd/pm/amdgpu_pm.c | 14 drivers/gpu/drm/bridge/tc358768.c | 213 ++++++++++- drivers/gpu/drm/lima/lima_gp.c | 12 drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.c | 96 +++-- drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.h | 22 - drivers/gpu/drm/msm/disp/dpu1/dpu_encoder_phys.h | 9 drivers/gpu/drm/msm/disp/dpu1/dpu_encoder_phys_cmd.c | 43 -- drivers/gpu/drm/msm/disp/dpu1/dpu_encoder_phys_vid.c | 22 - drivers/gpu/drm/msm/disp/dpu1/dpu_encoder_phys_wb.c | 21 - drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 2 drivers/gpu/drm/msm/disp/dpu1/dpu_kms.h | 14 drivers/gpu/drm/msm/disp/dpu1/dpu_plane.c | 23 + drivers/gpu/drm/msm/dp/dp_ctrl.c | 2 drivers/gpu/drm/msm/dp/dp_panel.c | 19 - drivers/gpu/drm/msm/msm_drv.h | 12 drivers/gpu/drm/msm/msm_gem_shrinker.c | 2 drivers/gpu/drm/msm/msm_mdss.c | 84 +++- drivers/gpu/drm/msm/msm_mdss.h | 1 drivers/gpu/drm/nouveau/nvkm/core/firmware.c | 9 drivers/gpu/drm/nouveau/nvkm/falcon/fw.c | 6 drivers/gpu/drm/panel/panel-novatek-nt36523.c | 6 drivers/gpu/drm/rockchip/rockchip_drm_vop2.c | 5 drivers/gpu/drm/tegra/gem.c | 2 drivers/hid/wacom_wac.c | 4 drivers/hwmon/ltc2992.c | 8 drivers/hwmon/pc87360.c | 6 drivers/i2c/busses/i2c-qcom-geni.c | 4 drivers/i2c/busses/i2c-riic.c | 2 drivers/i2c/busses/i2c-stm32f7.c | 51 ++ drivers/i2c/busses/i2c-tegra.c | 4 drivers/i3c/master/mipi-i3c-hci/dma.c | 5 drivers/infiniband/hw/hfi1/chip.c | 5 drivers/infiniband/ulp/rtrs/rtrs.c | 2 drivers/input/input-mt.c | 3 drivers/input/serio/i8042-acpipnpio.h | 20 - drivers/input/serio/i8042.c | 10 drivers/iommu/arm/arm-smmu/arm-smmu-qcom.c | 1 drivers/iommu/dma-iommu.c | 2 drivers/irqchip/irq-gic-v3-its.c | 2 drivers/irqchip/irq-renesas-rzg2l.c | 5 drivers/md/dm-clone-metadata.c | 5 drivers/md/dm-ioctl.c | 22 + drivers/md/dm.c | 4 drivers/md/md.c | 5 drivers/md/persistent-data/dm-space-map-metadata.c | 4 drivers/md/raid5-cache.c | 47 +- drivers/media/dvb-core/dvb_frontend.c | 12 drivers/media/pci/cx23885/cx23885-video.c | 8 drivers/media/platform/qcom/venus/pm_helpers.c | 2 drivers/media/platform/samsung/s5p-mfc/s5p_mfc_enc.c | 2 drivers/media/radio/radio-isa.c | 2 drivers/memory/stm32-fmc2-ebi.c | 122 ++++-- drivers/memory/tegra/tegra186.c | 3 drivers/misc/fastrpc.c | 22 - drivers/mmc/core/mmc_test.c | 9 drivers/mmc/host/dw_mmc.c | 8 drivers/mmc/host/mtk-sd.c | 8 drivers/net/bonding/bond_main.c | 21 - drivers/net/bonding/bond_options.c | 2 drivers/net/dsa/microchip/ksz_ptp.c | 5 drivers/net/dsa/mv88e6xxx/global1_atu.c | 3 drivers/net/dsa/ocelot/felix.c | 11 drivers/net/dsa/vitesse-vsc73xx-core.c | 69 ++- drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 5 drivers/net/ethernet/chelsio/cxgb4/cxgb4_filter.c | 3 drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c | 7 drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 3 drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 28 + drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c | 7 drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mdio.c | 3 drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 4 drivers/net/ethernet/i825xx/sun3_82586.c | 2 drivers/net/ethernet/intel/ice/ice_base.c | 21 + drivers/net/ethernet/intel/ice/ice_txrx.c | 47 -- drivers/net/ethernet/intel/igb/igb_main.c | 1 drivers/net/ethernet/intel/igc/igc_defines.h | 6 drivers/net/ethernet/intel/igc/igc_main.c | 8 drivers/net/ethernet/intel/igc/igc_tsn.c | 76 +++- drivers/net/ethernet/intel/igc/igc_tsn.h | 1 drivers/net/ethernet/marvell/octeontx2/af/rvu_cpt.c | 23 - drivers/net/ethernet/mediatek/mtk_wed.c | 6 drivers/net/ethernet/mediatek/mtk_wed_mcu.c | 3 drivers/net/ethernet/mellanox/mlx5/core/en/reporter_tx.c | 2 drivers/net/ethernet/mellanox/mlx5/core/en_fs_ethtool.c | 2 drivers/net/ethernet/mellanox/mlxbf_gige/mlxbf_gige.h | 8 drivers/net/ethernet/mellanox/mlxbf_gige/mlxbf_gige_main.c | 10 drivers/net/ethernet/mellanox/mlxbf_gige/mlxbf_gige_regs.h | 2 drivers/net/ethernet/mellanox/mlxbf_gige/mlxbf_gige_rx.c | 50 ++ drivers/net/ethernet/microsoft/mana/mana_en.c | 30 + drivers/net/ethernet/mscc/ocelot.c | 91 ++++- drivers/net/ethernet/mscc/ocelot_fdma.c | 3 drivers/net/ethernet/mscc/ocelot_vsc7514.c | 4 drivers/net/ethernet/pensando/ionic/ionic_bus_pci.c | 9 drivers/net/ethernet/pensando/ionic/ionic_dev.c | 33 + drivers/net/ethernet/pensando/ionic/ionic_ethtool.c | 7 drivers/net/ethernet/pensando/ionic/ionic_fw.c | 5 drivers/net/ethernet/pensando/ionic/ionic_main.c | 3 drivers/net/ethernet/wangxun/ngbe/ngbe_mdio.c | 6 drivers/net/ethernet/xilinx/xilinx_axienet.h | 17 drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 25 - drivers/net/gtp.c | 3 drivers/net/wireless/ath/ath11k/mac.c | 44 +- drivers/net/wireless/ath/ath12k/mac.c | 27 + drivers/net/wireless/ath/ath12k/qmi.c | 7 drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c | 13 drivers/net/wireless/intel/iwlwifi/fw/debugfs.c | 6 drivers/net/wireless/intel/iwlwifi/iwl-drv.c | 6 drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 3 drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 7 drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 2 drivers/net/wireless/mediatek/mt76/mac80211.c | 50 ++ drivers/net/wireless/mediatek/mt76/mt76.h | 24 - drivers/net/wireless/mediatek/mt76/mt7603/main.c | 4 drivers/net/wireless/mediatek/mt76/mt7615/main.c | 4 drivers/net/wireless/mediatek/mt76/mt76x02_util.c | 4 drivers/net/wireless/mediatek/mt76/mt7915/main.c | 4 drivers/net/wireless/mediatek/mt76/mt7921/main.c | 2 drivers/net/wireless/mediatek/mt76/mt792x_core.c | 2 drivers/net/wireless/mediatek/mt76/mt7996/main.c | 4 drivers/net/wireless/mediatek/mt76/tx.c | 108 ++++-- drivers/net/wireless/st/cw1200/txrx.c | 2 drivers/nvme/host/core.c | 107 +++-- drivers/nvme/host/ioctl.c | 15 drivers/nvme/host/multipath.c | 21 - drivers/nvme/host/nvme.h | 4 drivers/nvme/target/rdma.c | 16 drivers/nvme/target/tcp.c | 1 drivers/nvme/target/trace.c | 6 drivers/nvme/target/trace.h | 28 - drivers/parisc/ccio-dma.c | 2 drivers/parisc/sba_iommu.c | 2 drivers/platform/surface/aggregator/controller.c | 3 drivers/platform/x86/intel/ifs/load.c | 9 drivers/platform/x86/lg-laptop.c | 2 drivers/pmdomain/imx/imx93-pd.c | 5 drivers/pmdomain/imx/scu-pd.c | 5 drivers/rtc/rtc-nct3018y.c | 6 drivers/s390/block/dasd.c | 36 +- drivers/s390/block/dasd_3990_erp.c | 10 drivers/s390/block/dasd_diag.c | 1 drivers/s390/block/dasd_eckd.c | 56 +-- drivers/s390/block/dasd_int.h | 2 drivers/s390/cio/idset.c | 12 drivers/scsi/lpfc/lpfc_sli.c | 2 drivers/scsi/scsi_transport_spi.c | 4 drivers/ssb/main.c | 2 drivers/staging/iio/resolver/ad2s1210.c | 7 drivers/staging/ks7010/ks7010_sdio.c | 4 drivers/thunderbolt/switch.c | 1 drivers/tty/serial/atmel_serial.c | 2 drivers/tty/serial/fsl_lpuart.c | 1 drivers/usb/dwc3/core.c | 13 drivers/usb/gadget/udc/fsl_udc_core.c | 2 drivers/usb/host/xhci.c | 8 drivers/usb/typec/tcpm/tcpm.c | 1 drivers/xen/grant-dma-ops.c | 2 drivers/xen/swiotlb-xen.c | 2 fs/afs/file.c | 8 fs/binfmt_elf_fdpic.c | 2 fs/binfmt_misc.c | 216 +++++++++--- fs/btrfs/compression.c | 23 - fs/btrfs/compression.h | 2 fs/btrfs/defrag.c | 2 fs/btrfs/delayed-inode.c | 4 fs/btrfs/disk-io.c | 2 fs/btrfs/extent_io.c | 4 fs/btrfs/free-space-cache.c | 22 - fs/btrfs/inode.c | 24 - fs/btrfs/ioctl.c | 2 fs/btrfs/qgroup.c | 2 fs/btrfs/reflink.c | 6 fs/btrfs/send.c | 71 +++ fs/btrfs/super.c | 2 fs/btrfs/tests/extent-io-tests.c | 28 + fs/btrfs/tree-checker.c | 74 ++++ fs/btrfs/zlib.c | 73 +--- fs/ext4/extents.c | 3 fs/ext4/mballoc.c | 3 fs/f2fs/segment.c | 17 fs/file.c | 30 - fs/fscache/cookie.c | 4 fs/fuse/cuse.c | 3 fs/fuse/dev.c | 6 fs/fuse/fuse_i.h | 1 fs/fuse/inode.c | 15 fs/fuse/virtio_fs.c | 10 fs/gfs2/inode.c | 2 fs/gfs2/super.c | 2 fs/inode.c | 39 ++ fs/jfs/jfs_dinode.h | 2 fs/jfs/jfs_imap.c | 6 fs/jfs/jfs_incore.h | 2 fs/jfs/jfs_txnmgr.c | 4 fs/jfs/jfs_xtree.c | 4 fs/jfs/jfs_xtree.h | 37 +- fs/kernfs/file.c | 8 fs/nfs/pnfs.c | 8 fs/nfsd/nfssvc.c | 14 fs/ntfs3/bitmap.c | 4 fs/ntfs3/fsntfs.c | 2 fs/ntfs3/index.c | 11 fs/ntfs3/ntfs_fs.h | 4 fs/ntfs3/super.c | 2 fs/quota/dquot.c | 5 fs/smb/client/reparse.c | 11 fs/smb/server/connection.c | 34 + fs/smb/server/connection.h | 3 fs/smb/server/mgmt/user_session.c | 8 fs/smb/server/smb2pdu.c | 5 include/acpi/acpixf.h | 5 include/linux/bitmap.h | 20 - include/linux/bpf_verifier.h | 4 include/linux/cpumask.h | 2 include/linux/dma-map-ops.h | 2 include/linux/dsa/ocelot.h | 47 ++ include/linux/evm.h | 6 include/linux/f2fs_fs.h | 1 include/linux/fs.h | 5 include/linux/slab.h | 5 include/net/af_vsock.h | 4 include/net/inet_timewait_sock.h | 2 include/net/kcm.h | 1 include/net/mana/mana.h | 1 include/net/tcp.h | 2 include/scsi/scsi_cmnd.h | 2 include/soc/mscc/ocelot.h | 12 include/uapi/misc/fastrpc.h | 3 init/Kconfig | 7 kernel/bpf/verifier.c | 5 kernel/cgroup/cgroup.c | 4 kernel/cpu.c | 12 kernel/dma/mapping.c | 4 kernel/rcu/rcu.h | 7 kernel/rcu/srcutiny.c | 1 kernel/rcu/srcutree.c | 1 kernel/rcu/tasks.h | 1 kernel/rcu/tiny.c | 1 kernel/rcu/tree.c | 3 kernel/sched/topology.c | 3 kernel/time/clocksource.c | 42 +- kernel/time/hrtimer.c | 5 kernel/time/tick-sched.h | 2 lib/cpumask.c | 4 lib/math/prime_numbers.c | 2 mm/huge_memory.c | 30 - mm/memcontrol.c | 7 mm/memory-failure.c | 20 - mm/memory.c | 33 - mm/page_alloc.c | 42 +- mm/slab_common.c | 41 -- mm/util.c | 4 mm/vmalloc.c | 11 net/bluetooth/bnep/core.c | 3 net/bluetooth/hci_conn.c | 11 net/bluetooth/hci_core.c | 19 - net/bluetooth/mgmt.c | 4 net/bluetooth/smp.c | 144 ++++---- net/bridge/br_netfilter_hooks.c | 6 net/core/sock_map.c | 6 net/dccp/ipv4.c | 2 net/dccp/ipv6.c | 6 net/dsa/tag_ocelot.c | 37 -- net/ipv4/inet_timewait_sock.c | 16 net/ipv4/tcp_input.c | 28 - net/ipv4/tcp_ipv4.c | 16 net/ipv4/tcp_minisocks.c | 7 net/ipv4/udp_offload.c | 3 net/ipv6/ip6_output.c | 10 net/ipv6/ip6_tunnel.c | 12 net/ipv6/netfilter/nf_conntrack_reasm.c | 4 net/ipv6/tcp_ipv6.c | 6 net/iucv/iucv.c | 3 net/kcm/kcmsock.c | 4 net/mac80211/agg-tx.c | 6 net/mac80211/driver-ops.c | 3 net/mac80211/iface.c | 14 net/mac80211/main.c | 22 + net/mac80211/sta_info.c | 46 +- net/mctp/test/route-test.c | 2 net/mptcp/diag.c | 2 net/mptcp/pm.c | 13 net/mptcp/pm_netlink.c | 142 +++++-- net/mptcp/protocol.h | 3 net/netfilter/nf_flow_table_inet.c | 3 net/netfilter/nf_flow_table_ip.c | 3 net/netfilter/nf_flow_table_offload.c | 2 net/netfilter/nf_tables_api.c | 209 +++++++---- net/netfilter/nfnetlink_queue.c | 35 + net/netfilter/nft_counter.c | 9 net/netlink/af_netlink.c | 13 net/openvswitch/datapath.c | 2 net/rxrpc/rxkad.c | 8 net/sched/sch_netem.c | 47 +- net/vmw_vsock/af_vsock.c | 50 +- net/vmw_vsock/vsock_bpf.c | 4 net/wireless/core.h | 8 scripts/rust_is_available.sh | 6 security/integrity/evm/evm_main.c | 7 security/security.c | 2 security/selinux/avc.c | 8 security/selinux/hooks.c | 12 sound/core/timer.c | 2 sound/pci/hda/patch_realtek.c | 1 sound/pci/hda/tas2781_hda_i2c.c | 14 sound/soc/codecs/cs35l45.c | 5 sound/soc/sof/intel/hda-dsp.c | 3 sound/soc/sof/ipc4.c | 9 sound/usb/quirks-table.h | 1 sound/usb/quirks.c | 2 tools/include/linux/align.h | 12 tools/include/linux/bitmap.h | 9 tools/include/linux/mm.h | 5 tools/testing/selftests/bpf/progs/cpumask_failure.c | 3 tools/testing/selftests/bpf/progs/dynptr_fail.c | 12 tools/testing/selftests/bpf/progs/iters.c | 54 +++ tools/testing/selftests/bpf/progs/jeq_infer_not_null_fail.c | 4 tools/testing/selftests/bpf/progs/test_tunnel_kern.c | 47 +- tools/testing/selftests/core/close_range_test.c | 35 + tools/testing/selftests/mm/Makefile | 2 tools/testing/selftests/mm/run_vmtests.sh | 53 ++ tools/testing/selftests/net/lib.sh | 11 tools/testing/selftests/net/mptcp/mptcp_join.sh | 28 + tools/testing/selftests/net/udpgro.sh | 44 +- tools/testing/selftests/tc-testing/tdc.py | 1 tools/tracing/rtla/src/osnoise_top.c | 11 391 files changed, 3848 insertions(+), 1967 deletions(-) Abhinav Kumar (5): drm/msm/dp: fix the max supported bpp logic drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable() drm/msm/dp: reset the link phy params before link training drm/msm/dpu: try multirect based on mdp clock limits drm/msm: fix the highest_bank_bit for sc7180 Adrian Hunter (1): clocksource: Make watchdog and suspend-timing multiplication overflow safe Al Viro (4): fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE memcg_write_event_control(): fix a user-triggerable oops afs: fix __afs_break_callback() / afs_drop_open_mmap() race fuse: fix UAF in rcu pathwalks Alex Deucher (3): drm/amdgpu/jpeg2: properly set atomics vmid field drm/amdgpu/jpeg4: properly set atomics vmid field drm/amd/pm: fix error flow in sensor fetching Alex Hung (2): drm/amd/display: Validate hw_points_num before using it Revert "drm/amd/display: Validate hw_points_num before using it" Alexander Gordeev (1): s390/iucv: fix receive buffer virtual vs physical address confusion Alexander Lobakin (5): fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64() s390/cio: rename bitmap_size() -> idset_bitmap_size() btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits() bitmap: introduce generic optimized bitmap_size() tools: move alignment-related macros to new <linux/align.h> Alexander Stein (1): pmdomain: imx: scu-pd: Remove duplicated clocks Alexandre Belloni (1): rtc: nct3018y: fix possible NULL dereference Andi Shyti (1): i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume Andreas Gruenbacher (2): gfs2: setattr_chown: Add missing initialization gfs2: Refcounting fix in gfs2_thaw_super Andy Yan (1): drm/rockchip: vop2: clear afbc en and transform bit for cluster window at linear mode Antoniu Miclaus (1): hwmon: (ltc2992) Avoid division by zero Ashish Mhetre (1): memory: tegra: Skip SID programming if SID registers aren't set Asmaa Mnebhi (1): gpio: mlxbf3: Support shutdown() function Avri Kehat (1): accel/habanalabs: fix debugfs files permissions Baojun Xu (1): ALSA: hda/tas2781: fix wrong calibrated data order Baokun Li (2): ext4: do not trim the group with corrupted block bitmap ext4: set the type of max_zeroout to unsigned int to avoid overflow Bard Liao (1): ASoC: SOF: ipc4: check return value of snd_sof_ipc_msg_data Bartosz Golaszewski (1): gpio: sysfs: extend the critical section for unregistering sysfs devices Bas Nieuwenhuizen (1): drm/amdgpu: Actually check flags for all context ops. Ben Whitten (1): mmc: dw_mmc: allow biu and ciu clocks to defer Bharat Bhushan (1): octeontx2-af: Fix CPT AF register offset calculation Biju Das (1): irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time Boyuan Zhang (2): drm/amdgpu/vcn: identify unified queue in sw init drm/amdgpu/vcn: not pause dpg for unified queue Breno Leitao (1): i2c: tegra: Do not mark ACPI devices as irq safe Candice Li (1): drm/amdgpu: Validate TA binary size Celeste Liu (1): riscv: entry: always initialize regs->a0 to -ENOSYS Chaotian Jing (1): scsi: core: Fix the return value of scsi_logical_block_count() Chengfeng Ye (3): staging: ks7010: disable bh on tx_dev_lock media: s5p-mfc: Fix potential deadlock on condlock IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd->uctxt_lock Christian Brauner (1): binfmt_misc: cleanup on filesystem umount Christophe Kerello (1): memory: stm32-fmc2-ebi: check regmap_read return value Claudio Imbrenda (1): s390/uv: Panic for set and remove shared access UVC errors Clément Léger (1): riscv: blacklist assembly symbols for kprobe Cong Wang (1): vsock: fix recursive ->recvmsg calls Cosmin Ratiu (1): net/mlx5e: Correctly report errors for ethtool rx flows Costa Shulyupin (1): hrtimer: Select housekeeping CPU during migration Cupertino Miranda (1): selftests/bpf: Fix a few tests for GCC related warnings. Dan Carpenter (4): rtla/osnoise: Prevent NULL dereference in error handling atm: idt77252: prevent use after free in dequeue_rx() dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp() mmc: mmc_test: Fix NULL dereference on allocation failure Daniel Wagner (1): nvmet-trace: avoid dereferencing pointer too early Dave Airlie (1): nouveau/firmware: use dma non-coherent allocator Dave Kleikamp (1): jfs: define xtree root and page independently David (Ming Qiang) Wu (1): drm/amd/amdgpu: command submission parser for JPEG David Howells (1): rxrpc: Don't pick values out of the wire header when setting up security David Lechner (1): staging: iio: resolver: ad2s1210: fix use before initialization David Sterba (11): btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item() btrfs: defrag: change BUG_ON to assertion in btrfs_defrag_leaves() btrfs: change BUG_ON to assertion when checking for delayed_node root btrfs: tests: allocate dummy fs_info and root in test_find_delalloc() btrfs: push errors up from add_async_extent() btrfs: handle invalid root reference found in may_destroy_subvol() btrfs: send: handle unexpected data in header buffer in begin_cmd() btrfs: send: handle unexpected inode in header process_recorded_refs() btrfs: change BUG_ON to assertion in tree_move_down() btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent() btrfs: replace sb::s_blocksize by fs_info::sectorsize David Thompson (1): mlxbf_gige: disable RX filters until RX path initialized Dmitry Antipov (2): wifi: ath11k: fix ath11k_mac_op_remain_on_channel() stack usage wifi: iwlwifi: check for kmemdup() return value in iwl_parse_tlv_firmware() Dmitry Baryshkov (10): drm/msm/dpu: don't play tricks with debug macros drm/msm/dpu: use drmm-managed allocation for dpu_encoder_phys drm/msm/dpu: drop MSM_ENC_VBLANK support drm/msm/dpu: split dpu_encoder_wait_for_event into two functions drm/msm/dpu: capture snapshot on the first commit_done timeout drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails drm/msm/dpu: take plane rotation into account for wide planes drm/msm/mdss: switch mdss to use devm_of_icc_get() drm/msm/mdss: Handle the reg bus ICC path drm/msm/mdss: specify cfg bandwidth for SDM670 Donald Hunter (1): netfilter: flowtable: initialise extack before use Dragos Tatulea (1): net/mlx5e: Take state lock during tx timeout reporter Eli Billauer (3): char: xillybus: Don't destroy workqueue from work item running on it char: xillybus: Refine workqueue handling char: xillybus: Check USB endpoints when probing device Emmanuel Grumbach (1): wifi: iwlwifi: mvm: fix recovery flow in CSA Eric Dumazet (8): netlink: hold nlk->cb_mutex longer in __netlink_dump_start() gtp: pull network headers in gtp_dev_xmit() tcp/dccp: bypass empty buckets in inet_twsk_purge() tcp/dccp: do not care about families in inet_twsk_purge() ipv6: prevent UAF in ip6_send_skb() ipv6: fix possible UAF in ip6_finish_output2() ipv6: prevent possible UAF in ip6_xmit() tcp: do not export tcp_twsk_purge() Erico Nunes (1): drm/lima: set gp bus_stop bit before hard reset Eugene Syromiatnikov (1): mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size Faizal Rahim (4): igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer igc: Fix qbv_config_change_errors logics igc: Fix reset adapter logics when tx mode change igc: Fix qbv tx latency by setting gtxoffset Felix Fietkau (2): wifi: mt76: fix race condition related to checking tx queue fill status udp: fix receiving fraglist GSO packets Filipe Manana (1): btrfs: send: allow cloning non-aligned extent if it ends at i_size Florian Westphal (2): netfilter: nf_queue: drop packets with cloned unconfirmed conntracks tcp: prevent concurrent execution of tcp_sk_exit_batch Frederic Weisbecker (1): tick: Move got_idle_tick away from common flags Gergo Koteles (1): platform/x86: lg-laptop: fix %s null argument warning Greg Kroah-Hartman (2): Revert "usb: gadget: uvc: cleanup request when not in correct state" Linux 6.6.48 Griffin Kroah-Hartman (2): Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD" Bluetooth: MGMT: Add error handling to pair_device() Guanrui Huang (1): irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc Gustavo A. R. Silva (1): clk: visconti: Add bounds-checking coverage for struct visconti_pll_provider Haibo Xu (1): arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE Hailong Liu (1): mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0 Haiyang Zhang (1): net: mana: Fix RX buf alloc_size alignment and atomic op panic Hangbin Liu (1): selftests: udpgro: report error when receive failed Hannes Reinecke (1): nvmet-tcp: do not continue for invalid icreq Hans Verkuil (3): media: radio-isa: use dev_name to fill in bus_info media: qcom: venus: fix incorrect return value media: pci: cx23885: check cx23885_vdev_init() return Heiko Carstens (1): s390/smp,mcck: fix early IPI handling Helge Deller (1): parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367 Itaru Kitayama (1): tools/testing/selftests/mm/run_vmtests.sh: lower the ptrace permissions Jakub Sitnicki (1): Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem" Jan Höppner (1): Revert "s390/dasd: Establish DMA alignment" Jan Kara (1): quota: Remove BUG_ON from dqget() Jann Horn (1): fuse: Initialize beyond-EOF page contents before setting uptodate Janne Grunau (1): wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion Jarkko Nikula (2): i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer Jason Gerecke (1): HID: wacom: Defer calculation of resolution until resolution_code is known Javier Carrasco (1): hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt() Jeff Johnson (2): wifi: cw1200: Avoid processing an invalid TIM IE wifi: ath12k: Add missing qmi_txn_cancel() calls Jeremy Kerr (1): net: mctp: test: Use correct skb for route input check Jesse Zhang (1): drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent Jian Shen (1): net: hns3: add checking for vf id of mailbox Jianhua Lu (1): drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels Jiaxun Yang (1): MIPS: Loongson64: Set timer mode in cpu-probe Jie Wang (2): net: hns3: fix wrong use of semaphore up net: hns3: fix a deadlock problem when config TC during resetting Jithu Joseph (2): platform/x86/intel/ifs: Validate image size platform/x86/intel/ifs: Call release_firmware() when handling errors. Johannes Berg (4): wifi: mac80211: lock wiphy in IP address notifier wifi: cfg80211: check wiphy mutex is held for wdev mutex wifi: mac80211: fix BA session teardown race wifi: mac80211: flush STA queues on unauthorization Joseph Huang (1): net: dsa: mv88e6xxx: Fix out-of-bound access Juan José Arboleda (1): ALSA: usb-audio: Support Yamaha P-125 quirk entry Justin Tee (1): scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list() Kamalesh Babulal (1): cgroup: Avoid extra dereference in css_populate_dir() Kees Cook (3): hwmon: (pc87360) Bounds check data->innr usage net/sun3_82586: Avoid reading past buffer in debug output x86: Increase brk randomness entropy for 64-bit systems Keith Busch (3): nvme: clear caller pointer on identify failure nvme: use srcu for iterating namespace list nvme: fix namespace removal list Khazhismel Kumykov (1): dm resume: don't return EINVAL when signalled Kirill A. Shutemov (1): mm: fix endless reclaim on machines with unaccepted memory Konrad Dybcio (1): drm/msm/mdss: Rename path references to mdp_path Krishna Kurapati (1): usb: dwc3: core: Skip setting event buffers for host only controllers Kuniyuki Iwashima (1): kcm: Serialise kcm_sendmsg() for the same socket. Kunwu Chan (1): powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu Lang Yu (1): drm/amdkfd: reserve the BO before validating it Lee Jones (1): drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored Leon Hwang (1): bpf: Fix updating attached freplace prog in prog_array map Li Lingfeng (1): block: Fix lockdep warning in blk_mq_mark_tag_wait Li Nan (1): md: clean up invalid BUG_ON in md_ioctl Li zeming (1): powerpc/boot: Handle allocation failure in simple_realloc() Lianqin Hu (1): ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET Loan Chen (1): drm/amd/display: Enable otg synchronization logic for DCN321 Long Li (1): net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings Lorenzo Bianconi (1): net: ethernet: mtk_wed: check update_wo_rx_stats in mtk_wed_update_rx_stats() Luiz Augusto von Dentz (3): Bluetooth: bnep: Fix out-of-bound access Bluetooth: hci_core: Fix LE quote calculation Bluetooth: SMP: Fix assumption of Central always being Initiator Maciej Fijalkowski (3): ice: fix page reuse when PAGE_SIZE is over 8k ice: fix ICE_LAST_OFFSET formula ice: fix truesize operations for PAGE_SIZE >= 8192 Manish Dharanenthiran (1): wifi: ath12k: fix WARN_ON during ath12k_mac_update_vif_chan Marc Zyngier (1): KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 Martin Blumenstingl (1): clocksource/drivers/arm_global_timer: Guard against division by zero Martin Whitaker (1): net: dsa: microchip: fix PTP config failure when using multiple ports Masahiro Yamada (2): rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT Mathias Nyman (1): xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration Mathieu Othacehe (1): tty: atmel_serial: use the correct RTS flag. Matthieu Baerts (NGI0) (14): selftests: net: lib: ignore possible errors selftests: net: lib: kill PIDs before del netns mptcp: pm: re-using ID of unused removed ADD_ADDR mptcp: pm: re-using ID of unused removed subflows mptcp: pm: re-using ID of unused flushed subflows mptcp: pm: remove mptcp_pm_remove_subflow() mptcp: pm: only mark 'subflow' endp as available mptcp: pm: only decrement add_addr_accepted for MPJ req mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR mptcp: pm: only in-kernel cannot have entries with ID 0 mptcp: pm: fullmesh: select the right ID later mptcp: pm: avoid possible UaF when selecting endp selftests: mptcp: join: validate fullmesh endp on 1st sf selftests: mptcp: join: check re-using ID of closed subflow Max Filippov (1): fs: binfmt_elf_efpic: don't use missing interpreter's properties Max Kellermann (1): fs/netfs/fscache_cookie: add missing "n_accesses" check Maximilian Luz (1): platform/surface: aggregator: Fix warning when controller is destroyed in probe Melissa Wen (1): drm/amd/display: fix cursor offset on rotation 180 Menglong Dong (1): net: ovs: fix ovs_drop_reasons error Mengqi Zhang (1): mmc: mtk-sd: receive cmd8 data when hs400 tuning fail Mengyuan Lou (1): net: ngbe: Fix phy mode set to external phy Michael Ellerman (1): powerpc/boot: Only free if realloc() succeeds Michael Grzeschik (1): usb: gadget: uvc: cleanup request when not in correct state Michael Mueller (1): KVM: s390: fix validity interception issue when gisa is switched off Miguel Ojeda (1): rust: work around `bindgen` 0.69.0 issue Mika Westerberg (1): thunderbolt: Mark XDomain as unplugged when router is removed Mike Christie (1): scsi: spi: Fix sshdr use Mikko Perttunen (1): drm/tegra: Zero-initialize iosys_map Mikulas Patocka (2): dm persistent data: fix memory allocation failure dm suspend: return -ERESTARTSYS instead of -EINTR Mimi Zohar (1): evm: don't copy up 'security.evm' xattr Miri Korenblit (1): wifi: iwlwifi: abort scan when rfkill on but device enabled Muhammad Usama Anjum (1): selftests: memfd_secret: don't build memfd_secret test on unsupported arches Mukesh Sisodiya (1): wifi: iwlwifi: fw: Fix debugfs command sending Nam Cao (1): riscv: change XIP's kernel_map.size to be size of the entire kernel Namjae Jeon (2): ksmbd: the buffer of smb2 query dir response has at least 1 byte ksmbd: fix race condition between destroy_previous_session() and smb2 operations() Naohiro Aota (1): btrfs: zoned: properly take lock to read/update block group's zoned variables Nathan Lynch (1): powerpc/pseries/papr-sysparm: Validate buffer object lengths Neel Natu (1): kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files NeilBrown (2): NFS: avoid infinite loop in pnfs_update_layout. NFSD: simplify error paths in nfsd_svc() Nikolay Aleksandrov (4): bonding: fix bond_ipsec_offload_ok return type bonding: fix null pointer deref in bond_ipsec_offload_ok bonding: fix xfrm real_dev null pointer dereference bonding: fix xfrm state handling when clearing active slave Nikolay Kuratov (1): cxgb4: add forgotten u64 ivlan cast before shift Nysal Jan K.A (2): cpu/SMT: Enable SMT only if a core is online powerpc/topology: Check if a core is online Ofir Bitton (1): accel/habanalabs/gaudi2: unsecure tpc count registers Oreoluwa Babatunde (1): openrisc: Call setup_memory() earlier in the init sequence Pablo Neira Ayuso (1): netfilter: flowtable: validate vlan header Paolo Abeni (1): igb: cope with large MAX_SKB_FRAGS Parsa Poorshikhian (1): ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 Paul E. McKenney (1): rcu: Eliminate rcu_gp_slow_unregister() false positive Paul Moore (1): selinux: revert our use of vma_is_initial_heap() Paulo Alcantara (1): smb: client: ignore unhandled reparse tags Pawel Dembicki (3): net: dsa: vsc73xx: pass value in phy_write operation net: dsa: vsc73xx: use read_poll_timeout instead delay loop net: dsa: vsc73xx: check busy flag in MDIO operations Peiyang Wang (1): net: hns3: use the user's cfg after reset Peng Fan (2): tty: serial: fsl_lpuart: mark last busy before uart_add_one_port pmdomain: imx: wait SSAR when i.MX93 power domain on Peter Ujfalusi (1): ASoC: SOF: Intel: hda-dsp: Make sure that no irq handler is pending before suspend Phil Chang (1): hrtimer: Prevent queuing of hrtimer without a function callback Phil Sutter (9): netfilter: nf_tables: Audit log dump reset after the fact netfilter: nf_tables: Drop pointless memset in nf_tables_dump_obj netfilter: nf_tables: Unconditionally allocate nft_obj_filter netfilter: nf_tables: A better name for nft_obj_filter netfilter: nf_tables: Carry s_idx in nft_obj_dump_ctx netfilter: nf_tables: nft_obj_filter fits into cb->ctx netfilter: nf_tables: Carry reset boolean in nft_obj_dump_ctx netfilter: nf_tables: Introduce nf_tables_getobj_single netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests Philip Yang (1): drm/amdkfd: Move dma unmapping after TLB flush Philipp Stanner (1): media: drivers/media/dvb-core: copy user arrays safely Qiuxu Zhuo (2): EDAC/skx_common: Filter out the invalid address EDAC/skx_common: Allow decoding of SGX addresses Qu Wenruo (3): btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type btrfs: tree-checker: add dev extent item checks btrfs: zlib: fix and simplify the inline extent decompression Radhey Shyam Pandey (1): net: axienet: Fix register defines comment description Rafael J. Wysocki (3): Revert "ACPI: EC: Evaluate orphan _REG under EC device" ACPICA: Add a depth argument to acpi_execute_reg_methods() ACPI: EC: Evaluate _REG outside the EC scope more carefully Rand Deeb (1): ssb: Fix division by zero issue in ssb_calc_clock_rate Ricardo Rivera-Matos (1): ASoC: cs35l45: Checks index of cs35l45_irqs[] Richard Acayan (1): iommu/arm-smmu-qcom: Add SDM670 MDSS compatible Richard Fitzgerald (1): firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid Rob Clark (1): drm/msm: Reduce fallout of fence signaling vs reclaim hangs Rodrigo Siqueira (1): drm/amd/display: Adjust cursor position Ryan Roberts (1): selftests/mm: log run_vmtests.sh results in TAP format Sagi Grimberg (1): nvmet-rdma: fix possible bad dereference when freeing rsps Samuel Holland (1): arm64: Fix KASAN random tag seed initialization Sean Anderson (2): net: xilinx: axienet: Always disable promiscuous mode net: xilinx: axienet: Fix dangling multicast addresses Sean Nyekjaer (1): i2c: stm32f7: Add atomic_xfer method to driver Sebastian Andrzej Siewior (2): netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). netfilter: nft_counter: Synchronize nft_counter_reset() against reader. Shannon Nelson (4): ionic: prevent pci disable of already disabled device ionic: no fw read when PCI reset failed ionic: use pci_is_enabled not open code ionic: check cmd_regs before copying in or out Shaul Triebitz (1): wifi: iwlwifi: mvm: avoid garbage iPN Simon Horman (1): tc-testing: don't access non-existent variable on exception Somnath Kotur (1): bnxt_en: Fix double DMA unmapping for XDP_REDIRECT Stefan Haberland (1): s390/dasd: fix error recovery leading to data corruption on ESE devices Stefan Hajnoczi (1): virtiofs: forbid newlines in tags Stephen Hemminger (1): netem: fix return value if duplicate enqueue fails Subash Abhinov Kasiviswanathan (1): tcp: Update window clamping condition Suren Baghdasaryan (1): change alloc_pages name in dma_map_ops to avoid name conflicts Takashi Iwai (2): ALSA: hda/tas2781: Use correct endian conversion ALSA: timer: Relax start tick time check for slave timer elements Tetsuo Handa (1): Input: MT - limit max slots Thomas Bogendoerfer (1): ip6_tunnel: Fix broken GRO Tom Hughes (1): netfilter: allow ipv6 fragments to arrive on different devices Tomer Tayar (1): accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE Tomi Valkeinen (1): drm/bridge: tc358768: Attempt to fix DSI horizontal timings Uwe Kleine-König (1): usb: gadget: fsl: Increase size of name buffer for endpoints Vladimir Oltean (3): net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q" net: mscc: ocelot: serialize access to the injection/extraction groups Waiman Long (1): mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu Werner Sembach (2): Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3 Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination Wolfram Sang (1): i2c: riic: avoid potential division by zero Xu Yang (1): Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET" Yonghong Song (2): bpf: Fix a kernel verifier crash in stacksafe() selftests/bpf: Add a test to verify previous stacksafe() fix Yu Kuai (1): md/raid5-cache: use READ_ONCE/WRITE_ONCE for 'conf->log' Yury Norov (1): sched/topology: Handle NUMA_NO_NODE in sched_numa_find_nth_cpu() Zhen Lei (4): selinux: fix potential counting error in avc_add_xperms_decision() selinux: add the processing of the failure of avc_add_xperms_decision() mm: Remove kmem_valid_obj() rcu: Dump memory object info if callback function is invalid ZhenGuo Yin (1): drm/amdgpu: access RLC_SPM_MC_CNTL through MMIO in SRIOV runtime Zheng Zhang (1): net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb() Zhiguo Niu (2): f2fs: stop checkpoint when get a out-of-bounds segment f2fs: fix to do sanity check in update_sit_entry Zhihao Cheng (1): vfs: Don't evict inode under the inode lru traversing context Zhu Yanjun (1): RDMA/rtrs: Fix the problem of variable not initialized fully Zi Yan (2): mm/numa: no task_numa_fault() call if PMD is changed mm/numa: no task_numa_fault() call if PTE is changed Zijun Hu (1): Bluetooth: hci_conn: Check non NULL function before calling for HFP offload farah kassabri (1): accel/habanalabs: fix bug in timestamp interrupt handling

1 year, 2 months

1
1
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror August 2024