April 2025 - Linux-stable-mirror

[PATCH 1/2] mm/userfaultfd: Fix uninitialized output field for -EAGAIN race

by Peter Xu

While discussing some userfaultfd relevant issues recently, Andrea noticed a potential ABI breakage with -EAGAIN on almost all userfaultfd ioctl()s. Quote from Andrea, explaining how -EAGAIN was processed, and how this should fix it (taking example of UFFDIO_COPY ioctl): The "mmap_changing" and "stale pmd" conditions are already reported as -EAGAIN written in the copy field, this does not change it. This change removes the subnormal case that left copy.copy uninitialized and required apps to explicitly set the copy field to get deterministic behavior (which is a requirement contrary to the documentation in both the manpage and source code). In turn there's no alteration to backwards compatibility as result of this change because userland will find the copy field consistently set to -EAGAIN, and not anymore sometime -EAGAIN and sometime uninitialized. Even then the change only can make a difference to non cooperative users of userfaultfd, so when UFFD_FEATURE_EVENT_* is enabled, which is not true for the vast majority of apps using userfaultfd or this unintended uninitialized field may have been noticed sooner. Meanwhile, since this bug existed for years, it also almost affects all ioctl()s that was introduced later. Besides UFFDIO_ZEROPAGE, these also get affected in the same way: - UFFDIO_CONTINUE - UFFDIO_POISON - UFFDIO_MOVE This patch should have fixed all of them. Fixes: df2cc96e7701 ("userfaultfd: prevent non-cooperative events vs mcopy_atomic races") Fixes: f619147104c8 ("userfaultfd: add UFFDIO_CONTINUE ioctl") Fixes: fc71884a5f59 ("mm: userfaultfd: add new UFFDIO_POISON ioctl") Fixes: adef440691ba ("userfaultfd: UFFDIO_MOVE uABI") Cc: linux-stable <stable(a)vger.kernel.org> Cc: Mike Rapoport <rppt(a)kernel.org> Cc: Axel Rasmussen <axelrasmussen(a)google.com> Cc: Suren Baghdasaryan <surenb(a)google.com> Reported-by: Andrea Arcangeli <aarcange(a)redhat.com> Suggested-by: Andrea Arcangeli <aarcange(a)redhat.com> Signed-off-by: Peter Xu <peterx(a)redhat.com> --- fs/userfaultfd.c | 28 ++++++++++++++++++++++------ 1 file changed, 22 insertions(+), 6 deletions(-) diff --git a/fs/userfaultfd.c b/fs/userfaultfd.c index d80f94346199..22f4bf956ba1 100644 --- a/fs/userfaultfd.c +++ b/fs/userfaultfd.c @@ -1585,8 +1585,11 @@ static int userfaultfd_copy(struct userfaultfd_ctx *ctx, user_uffdio_copy = (struct uffdio_copy __user *) arg; ret = -EAGAIN; - if (atomic_read(&ctx->mmap_changing)) + if (unlikely(atomic_read(&ctx->mmap_changing))) { + if (unlikely(put_user(ret, &user_uffdio_copy->copy))) + return -EFAULT; goto out; + } ret = -EFAULT; if (copy_from_user(&uffdio_copy, user_uffdio_copy, @@ -1641,8 +1644,11 @@ static int userfaultfd_zeropage(struct userfaultfd_ctx *ctx, user_uffdio_zeropage = (struct uffdio_zeropage __user *) arg; ret = -EAGAIN; - if (atomic_read(&ctx->mmap_changing)) + if (unlikely(atomic_read(&ctx->mmap_changing))) { + if (unlikely(put_user(ret, &user_uffdio_zeropage->zeropage))) + return -EFAULT; goto out; + } ret = -EFAULT; if (copy_from_user(&uffdio_zeropage, user_uffdio_zeropage, @@ -1744,8 +1750,11 @@ static int userfaultfd_continue(struct userfaultfd_ctx *ctx, unsigned long arg) user_uffdio_continue = (struct uffdio_continue __user *)arg; ret = -EAGAIN; - if (atomic_read(&ctx->mmap_changing)) + if (unlikely(atomic_read(&ctx->mmap_changing))) { + if (unlikely(put_user(ret, &user_uffdio_continue->mapped))) + return -EFAULT; goto out; + } ret = -EFAULT; if (copy_from_user(&uffdio_continue, user_uffdio_continue, @@ -1801,8 +1810,11 @@ static inline int userfaultfd_poison(struct userfaultfd_ctx *ctx, unsigned long user_uffdio_poison = (struct uffdio_poison __user *)arg; ret = -EAGAIN; - if (atomic_read(&ctx->mmap_changing)) + if (unlikely(atomic_read(&ctx->mmap_changing))) { + if (unlikely(put_user(ret, &user_uffdio_poison->updated))) + return -EFAULT; goto out; + } ret = -EFAULT; if (copy_from_user(&uffdio_poison, user_uffdio_poison, @@ -1870,8 +1882,12 @@ static int userfaultfd_move(struct userfaultfd_ctx *ctx, user_uffdio_move = (struct uffdio_move __user *) arg; - if (atomic_read(&ctx->mmap_changing)) - return -EAGAIN; + ret = -EAGAIN; + if (unlikely(atomic_read(&ctx->mmap_changing))) { + if (unlikely(put_user(ret, &user_uffdio_move->move))) + return -EFAULT; + goto out; + } if (copy_from_user(&uffdio_move, user_uffdio_move, /* don't copy "move" last field */ -- 2.48.1

4 months, 1 week

3
3
0 0

Potential Linux Crash: possible deadlock in udf_page_mkwrite in linux6.12.24(longterm maintenance)

by Jianzhou Zhao

Hello, I found a potential bug titled " possible deadlock in udf_page_mkwrite " with modified syzkaller in the Linux6.12.24(longterm maintenance, last updated on April 20, 2025). Unfortunately, I am unable to reproduce this bug. If you fix this issue, please add the following tag to the commit: Reported-by: Jianzhou Zhao <luckd0g(a)163.com>, xingwei lee <xrivendell7(a)gmail.com>,Penglei Jiang <superman.xpt(a)gmail.com> The commit of the kernel is : b6efa8ce222e58cfe2bbaa4e3329818c2b4bd74e kernel config: https://syzkaller.appspot.com/text?tag=KernelConfig&x=55f8591b98dd132 compiler: gcc version 11.4.0 ------------[ cut here ]----------------------------------------- TITLE: possible deadlock in udf_page_mkwrite ------------[ cut here ]------------ ====================================================== WARNING: possible circular locking dependency detected 6.12.24 #3 Not tainted ------------------------------------------------------ syz.6.870/18445 is trying to acquire lock: ffff888053607700 (mapping.invalidate_lock#4){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:870 [inline] ffff888053607700 (mapping.invalidate_lock#4){++++}-{3:3}, at: udf_page_mkwrite+0x2af/0xa20 fs/udf/file.c:50 but task is already holding lock: ffff888044124518 (sb_pagefaults#2){.+.+}-{0:0}, at: do_page_mkwrite+0x17d/0x390 mm/memory.c:3161 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #9 (sb_pagefaults#2){.+.+}-{0:0}: percpu_down_read include/linux/percpu-rwsem.h:51 [inline] __sb_start_write include/linux/fs.h:1716 [inline] sb_start_pagefault include/linux/fs.h:1881 [inline] udf_page_mkwrite+0x18b/0xa20 fs/udf/file.c:48 do_page_mkwrite+0x17d/0x390 mm/memory.c:3161 wp_page_shared mm/memory.c:3562 [inline] do_wp_page+0x1291/0x4860 mm/memory.c:3712 handle_pte_fault mm/memory.c:5786 [inline] __handle_mm_fault+0x150c/0x2a20 mm/memory.c:5913 handle_mm_fault+0x404/0xab0 mm/memory.c:6081 do_user_addr_fault+0x61b/0x13a0 arch/x86/mm/fault.c:1338 handle_page_fault arch/x86/mm/fault.c:1481 [inline] exc_page_fault+0x98/0x180 arch/x86/mm/fault.c:1539 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 -> #8 (&vma->vm_lock->lock){++++}-{3:3}: down_write+0x92/0x200 kernel/locking/rwsem.c:1577 vma_start_write include/linux/mm.h:757 [inline] vma_link+0x268/0x490 mm/vma.c:1604 insert_vm_struct+0x197/0x3f0 mm/mmap.c:2011 __bprm_mm_init fs/exec.c:289 [inline] bprm_mm_init fs/exec.c:393 [inline] alloc_bprm+0x6d1/0xd30 fs/exec.c:1578 kernel_execve+0xb0/0x3d0 fs/exec.c:2010 try_to_run_init_process init/main.c:1397 [inline] kernel_init+0x154/0x2d0 init/main.c:1525 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 -> #7 (&mm->mmap_lock){++++}-{3:3}: __might_fault mm/memory.c:6719 [inline] __might_fault+0x118/0x190 mm/memory.c:6713 _inline_copy_from_user include/linux/uaccess.h:162 [inline] _copy_from_user+0x2b/0xd0 lib/usercopy.c:18 copy_from_user include/linux/uaccess.h:212 [inline] __blk_trace_setup+0x96/0x180 kernel/trace/blktrace.c:626 blk_trace_setup+0x47/0x70 kernel/trace/blktrace.c:648 sg_ioctl_common drivers/scsi/sg.c:1114 [inline] sg_ioctl+0x65e/0x2720 drivers/scsi/sg.c:1156 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl fs/ioctl.c:893 [inline] __x64_sys_ioctl+0x19d/0x210 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcb/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f -> #6 (&q->debugfs_mutex){+.+.}-{3:3}: __mutex_lock_common kernel/locking/mutex.c:608 [inline] __mutex_lock+0x147/0x930 kernel/locking/mutex.c:752 blk_mq_init_sched+0x436/0x650 block/blk-mq-sched.c:473 elevator_init_mq+0x2cc/0x420 block/elevator.c:610 device_add_disk+0x10e/0x12f0 block/genhd.c:411 sd_probe+0xa0e/0xf80 drivers/scsi/sd.c:4024 call_driver_probe drivers/base/dd.c:579 [inline] really_probe+0x24f/0xa90 drivers/base/dd.c:658 __driver_probe_device+0x1df/0x450 drivers/base/dd.c:800 driver_probe_device+0x4c/0x1a0 drivers/base/dd.c:830 __device_attach_driver+0x1db/0x2f0 drivers/base/dd.c:958 bus_for_each_drv+0x149/0x1d0 drivers/base/bus.c:459 __device_attach_async_helper+0x1d1/0x290 drivers/base/dd.c:987 async_run_entry_fn+0x9c/0x530 kernel/async.c:129 process_one_work+0xa02/0x1bf0 kernel/workqueue.c:3232 process_scheduled_works kernel/workqueue.c:3314 [inline] worker_thread+0x677/0xe90 kernel/workqueue.c:3395 kthread+0x2c7/0x3b0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 -> #5 (&q->q_usage_counter(queue)#51){++++}-{0:0}: blk_queue_enter+0x4d0/0x600 block/blk-core.c:328 blk_mq_alloc_request+0x422/0x9c0 block/blk-mq.c:680 scsi_alloc_request drivers/scsi/scsi_lib.c:1227 [inline] scsi_execute_cmd+0x1fe/0xf20 drivers/scsi/scsi_lib.c:304 read_capacity_16+0x1f2/0xe60 drivers/scsi/sd.c:2655 sd_read_capacity drivers/scsi/sd.c:2824 [inline] sd_revalidate_disk.isra.0+0x1989/0xa440 drivers/scsi/sd.c:3734 sd_probe+0x887/0xf80 drivers/scsi/sd.c:4010 call_driver_probe drivers/base/dd.c:579 [inline] really_probe+0x24f/0xa90 drivers/base/dd.c:658 __driver_probe_device+0x1df/0x450 drivers/base/dd.c:800 driver_probe_device+0x4c/0x1a0 drivers/base/dd.c:830 __device_attach_driver+0x1db/0x2f0 drivers/base/dd.c:958 bus_for_each_drv+0x149/0x1d0 drivers/base/bus.c:459 __device_attach_async_helper+0x1d1/0x290 drivers/base/dd.c:987 async_run_entry_fn+0x9c/0x530 kernel/async.c:129 process_one_work+0xa02/0x1bf0 kernel/workqueue.c:3232 process_scheduled_works kernel/workqueue.c:3314 [inline] worker_thread+0x677/0xe90 kernel/workqueue.c:3395 kthread+0x2c7/0x3b0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 -> #4 (&q->limits_lock){+.+.}-{3:3}: __mutex_lock_common kernel/locking/mutex.c:608 [inline] __mutex_lock+0x147/0x930 kernel/locking/mutex.c:752 queue_limits_start_update include/linux/blkdev.h:935 [inline] loop_reconfigure_limits+0x1f2/0x960 drivers/block/loop.c:1004 loop_set_block_size drivers/block/loop.c:1474 [inline] lo_simple_ioctl drivers/block/loop.c:1497 [inline] lo_ioctl+0xb92/0x1870 drivers/block/loop.c:1560 blkdev_ioctl+0x27b/0x6c0 block/ioctl.c:693 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl fs/ioctl.c:893 [inline] __x64_sys_ioctl+0x19d/0x210 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcb/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f -> #3 (&q->q_usage_counter(io)#19){++++}-{0:0}: bio_queue_enter block/blk.h:76 [inline] blk_mq_submit_bio+0x2167/0x2b70 block/blk-mq.c:3090 __submit_bio+0x399/0x630 block/blk-core.c:629 __submit_bio_noacct_mq block/blk-core.c:716 [inline] submit_bio_noacct_nocheck+0x6c3/0xd00 block/blk-core.c:745 submit_bio_noacct+0x57a/0x1fa0 block/blk-core.c:868 submit_bh fs/buffer.c:2824 [inline] __bread_slow fs/buffer.c:1270 [inline] __bread_gfp+0x189/0x340 fs/buffer.c:1494 sb_bread include/linux/buffer_head.h:346 [inline] read_block_bitmap fs/udf/balloc.c:43 [inline] load_block_bitmap+0x1ff/0x570 fs/udf/balloc.c:99 udf_bitmap_free_blocks fs/udf/balloc.c:150 [inline] udf_free_blocks+0x57c/0x10a0 fs/udf/balloc.c:674 udf_evict_inode+0x34c/0x590 fs/udf/inode.c:163 evict+0x3ef/0x940 fs/inode.c:725 iput_final fs/inode.c:1877 [inline] iput fs/inode.c:1903 [inline] iput+0x511/0x7f0 fs/inode.c:1889 do_unlinkat+0x58f/0x710 fs/namei.c:4540 __do_sys_unlink fs/namei.c:4581 [inline] __se_sys_unlink fs/namei.c:4579 [inline] __x64_sys_unlink+0xc7/0x110 fs/namei.c:4579 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcb/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f -> #2 (&sbi->s_alloc_mutex){+.+.}-{3:3}: __mutex_lock_common kernel/locking/mutex.c:608 [inline] __mutex_lock+0x147/0x930 kernel/locking/mutex.c:752 udf_bitmap_new_block fs/udf/balloc.c:236 [inline] udf_new_block+0x7e2/0x1750 fs/udf/balloc.c:721 inode_getblk+0xe88/0x3bb0 fs/udf/inode.c:895 udf_map_block+0x2e3/0x5a0 fs/udf/inode.c:447 __udf_get_block+0x9c/0x340 fs/udf/inode.c:461 __block_write_begin_int+0x4e5/0x1670 fs/buffer.c:2121 block_write_begin+0x9a/0x1d0 fs/buffer.c:2231 udf_write_begin+0x1bc/0x280 fs/udf/inode.c:256 generic_perform_write+0x2bd/0x900 mm/filemap.c:4065 __generic_file_write_iter+0x1f6/0x240 mm/filemap.c:4166 udf_file_write_iter+0x233/0x740 fs/udf/file.c:111 new_sync_write fs/read_write.c:590 [inline] vfs_write+0xbfc/0x10d0 fs/read_write.c:683 ksys_write+0x122/0x250 fs/read_write.c:736 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcb/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f -> #1 (&ei->i_data_sem#2){++++}-{3:3}: down_write+0x92/0x200 kernel/locking/rwsem.c:1577 udf_expand_file_adinicb+0x174/0x970 fs/udf/inode.c:363 udf_setsize+0x4b2/0x10f0 fs/udf/inode.c:1289 udf_setattr+0x523/0x6c0 fs/udf/file.c:236 notify_change+0x6d3/0x1280 fs/attr.c:503 do_truncate+0x143/0x200 fs/open.c:65 vfs_truncate+0x3e3/0x4c0 fs/open.c:111 do_sys_truncate.part.0+0xf7/0x140 fs/open.c:134 do_sys_truncate fs/open.c:128 [inline] __do_sys_truncate fs/open.c:146 [inline] __se_sys_truncate fs/open.c:144 [inline] __x64_sys_truncate+0x6d/0xa0 fs/open.c:144 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcb/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f -> #0 (mapping.invalidate_lock#4){++++}-{3:3}: check_prev_add kernel/locking/lockdep.c:3161 [inline] check_prevs_add kernel/locking/lockdep.c:3280 [inline] validate_chain kernel/locking/lockdep.c:3904 [inline] __lock_acquire+0x2425/0x3b90 kernel/locking/lockdep.c:5202 lock_acquire.part.0+0x11b/0x370 kernel/locking/lockdep.c:5825 down_read+0x9a/0x330 kernel/locking/rwsem.c:1524 filemap_invalidate_lock_shared include/linux/fs.h:870 [inline] udf_page_mkwrite+0x2af/0xa20 fs/udf/file.c:50 do_page_mkwrite+0x17d/0x390 mm/memory.c:3161 wp_page_shared mm/memory.c:3562 [inline] do_wp_page+0x1291/0x4860 mm/memory.c:3712 handle_pte_fault mm/memory.c:5786 [inline] __handle_mm_fault+0x150c/0x2a20 mm/memory.c:5913 handle_mm_fault+0x404/0xab0 mm/memory.c:6081 do_user_addr_fault+0x61b/0x13a0 arch/x86/mm/fault.c:1338 handle_page_fault arch/x86/mm/fault.c:1481 [inline] exc_page_fault+0x98/0x180 arch/x86/mm/fault.c:1539 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 other info that might help us debug this: Chain exists of: mapping.invalidate_lock#4 --> &vma->vm_lock->lock --> sb_pagefaults#2 Possible unsafe locking scenario: CPU0 CPU1 ---- ---- rlock(sb_pagefaults#2); lock(&vma->vm_lock->lock); lock(sb_pagefaults#2); rlock(mapping.invalidate_lock#4); *** DEADLOCK *** 2 locks held by syz.6.870/18445: #0: ffff888050dbed18 (&vma->vm_lock->lock){++++}-{3:3}, at: vma_start_read include/linux/mm.h:704 [inline] #0: ffff888050dbed18 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x141/0x9a0 mm/memory.c:6247 #1: ffff888044124518 (sb_pagefaults#2){.+.+}-{0:0}, at: do_page_mkwrite+0x17d/0x390 mm/memory.c:3161 stack backtrace: CPU: 0 UID: 0 PID: 18445 Comm: syz.6.870 Not tainted 6.12.24 #3 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1b0 lib/dump_stack.c:120 print_circular_bug+0x406/0x5c0 kernel/locking/lockdep.c:2074 check_noncircular+0x2f7/0x3e0 kernel/locking/lockdep.c:2206 check_prev_add kernel/locking/lockdep.c:3161 [inline] check_prevs_add kernel/locking/lockdep.c:3280 [inline] validate_chain kernel/locking/lockdep.c:3904 [inline] __lock_acquire+0x2425/0x3b90 kernel/locking/lockdep.c:5202 lock_acquire.part.0+0x11b/0x370 kernel/locking/lockdep.c:5825 down_read+0x9a/0x330 kernel/locking/rwsem.c:1524 filemap_invalidate_lock_shared include/linux/fs.h:870 [inline] udf_page_mkwrite+0x2af/0xa20 fs/udf/file.c:50 do_page_mkwrite+0x17d/0x390 mm/memory.c:3161 wp_page_shared mm/memory.c:3562 [inline] do_wp_page+0x1291/0x4860 mm/memory.c:3712 handle_pte_fault mm/memory.c:5786 [inline] __handle_mm_fault+0x150c/0x2a20 mm/memory.c:5913 handle_mm_fault+0x404/0xab0 mm/memory.c:6081 do_user_addr_fault+0x61b/0x13a0 arch/x86/mm/fault.c:1338 handle_page_fault arch/x86/mm/fault.c:1481 [inline] exc_page_fault+0x98/0x180 arch/x86/mm/fault.c:1539 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7fc9b0c4f002 Code: f0 48 8b 54 24 f0 8b 8a 80 00 00 00 8b 82 04 01 00 00 21 c8 83 c1 01 c1 e0 04 48 8b b4 02 40 01 00 00 48 8b 84 02 48 01 00 00 <89> 8a 80 00 00 00 48 81 fe 45 23 01 00 74 09 48 81 fe 56 34 02 00 RSP: 002b:00007fc9b1c9af88 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 00007fc9b0fe6080 RCX: 0000000000000001 RDX: 0000200000ff9000 RSI: 0000000000000000 RDI: 0000200000ff9000 RBP: 00007fc9b0e46d56 R08: 0000000000000000 R09: 0000000000000000 R10: 0000200000ff9000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 00007fc9b0fe6080 R15: 00007fc9b1c7b000 </TASK> ================================================================== I hope it helps. Best regards Jianzhou Zhao

4 months, 2 weeks

1
0
0 0

[PATCH] usb: uhci-platform: Make the clock really optional

by Alexey Charkov

Device tree bindings state that the clock is optional for UHCI platform controllers, and some existing device trees don't provide those - such as those for VIA/WonderMedia devices. The driver however fails to probe now if no clock is provided, because devm_clk_get returns an error pointer in such case. Switch to devm_clk_get_optional instead, so that it could probe again on those platforms where no clocks are given. Cc: stable(a)vger.kernel.org Fixes: 26c502701c52 ("usb: uhci: Add clk support to uhci-platform") Signed-off-by: Alexey Charkov <alchark(a)gmail.com> --- drivers/usb/host/uhci-platform.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/usb/host/uhci-platform.c b/drivers/usb/host/uhci-platform.c index a7c934404ebc7ed74f64265fafa7830809979ba5..62318291f5664c9ec94f24535c71d962e28354f3 100644 --- a/drivers/usb/host/uhci-platform.c +++ b/drivers/usb/host/uhci-platform.c @@ -121,7 +121,7 @@ static int uhci_hcd_platform_probe(struct platform_device *pdev) } /* Get and enable clock if any specified */ - uhci->clk = devm_clk_get(&pdev->dev, NULL); + uhci->clk = devm_clk_get_optional(&pdev->dev, NULL); if (IS_ERR(uhci->clk)) { ret = PTR_ERR(uhci->clk); goto err_rmr; --- base-commit: 0af2f6be1b4281385b618cb86ad946eded089ac8 change-id: 20250425-uhci-clock-optional-9a9d09560e17 Best regards, -- Alexey Charkov <alchark(a)gmail.com>

4 months, 2 weeks

2
2
0 0

[PATCH RESEND v3 0/3] Add ti,suppress-v1p8-ena

by Judith Mendez

Resend patch series to fix cc list There are MMC boot failures seen with V1P8_SIGNAL_ENA on Kingston eMMC and Microcenter/Patriot SD cards on Sitara K3 boards due to the HS200 initialization sequence involving V1P8_SIGNAL_ENA. Since V1P8_SIGNAL_ENA is optional for eMMC, do not set V1P8_SIGNAL_ENA by default for eMMC. For SD cards we shall parse DT for ti,suppress-v1p8-ena property to determine whether to suppress V1P8_SIGNAL_ENA. Add new ti,suppress-v1p8-ena to am62x, am62ax, and am62px SoC dtsi files since there is no internal LDO tied to sdhci1 interface so V1P8_SIGNAL_ENA only affects timing. This fix was previously merged in the kernel, but was reverted due to the "heuristics for enabling the quirk"[0]. This issue is adressed in this patch series by adding optional ti,suppress-v1p8-ena DT property which determines whether to apply the quirk for SD. Changes since v2: - Include patch 3/3 - Reword cover letter - Reword binding patch description - Add fixes/cc tags to driver patch - Reorder patches according to binding patch first - Resend to fix cc list in original v3 series Link to v2: https://lore.kernel.org/linux-mmc/20250417182652.3521104-1-jm@ti.com/ Link to v1: https://lore.kernel.org/linux-mmc/20250407222702.2199047-1-jm@ti.com/ [0] https://lore.kernel.org/linux-mmc/20250127-am654-mmc-regression-v2-1-9bb39f… Judith Mendez (3): dt-bindings: mmc: sdhci-am654: Add ti,suppress-v1p8-ena mmc: sdhci_am654: Add sdhci_am654_start_signal_voltage_switch arm64: dts: ti: k3-am62*: add ti,suppress-v1p8-ena .../devicetree/bindings/mmc/sdhci-am654.yaml | 5 +++ arch/arm64/boot/dts/ti/k3-am62-main.dtsi | 1 + arch/arm64/boot/dts/ti/k3-am62a-main.dtsi | 1 + .../dts/ti/k3-am62p-j722s-common-main.dtsi | 1 + drivers/mmc/host/sdhci_am654.c | 32 +++++++++++++++++++ 5 files changed, 40 insertions(+) base-commit: 1be38f81251f6d276713c259ecf4414f82f22c29 -- 2.49.0

4 months, 2 weeks

4
8
0 0

[PATCH v2 1/4] firmware: arm_scmi: Ensure that the message-id supports fastchannel

by Cristian Marussi

From: Sibi Sankar <quic_sibis(a)quicinc.com> Currently the perf and powercap protocol relies on the protocol domain attributes, which just ensures that one fastchannel per domain, before instantiating fastchannels for all possible message-ids. Fix this by ensuring that each message-id supports fastchannel before initialization. Logs: scmi: Failed to get FC for protocol 13 [MSG_ID:6 / RES_ID:0] - ret:-95. Using regular messaging. scmi: Failed to get FC for protocol 13 [MSG_ID:6 / RES_ID:1] - ret:-95. Using regular messaging. scmi: Failed to get FC for protocol 13 [MSG_ID:6 / RES_ID:2] - ret:-95. Using regular messaging. CC: stable(a)vger.kernel.org Reported-by: Johan Hovold <johan+linaro(a)kernel.org> Closes: https://lore.kernel.org/lkml/ZoQjAWse2YxwyRJv@hovoldconsulting.com/ Fixes: 6f9ea4dabd2d ("firmware: arm_scmi: Generalize the fast channel support") Reviewed-by: Johan Hovold <johan+linaro(a)kernel.org> Tested-by: Johan Hovold <johan+linaro(a)kernel.org> Signed-off-by: Sibi Sankar <quic_sibis(a)quicinc.com> [Cristian: Modified the condition checked to establish support or not] Signed-off-by: Cristian Marussi <cristian.marussi(a)arm.com> --- RFC -> V1 - picked up a few tags Since PROTOCOL_MESSAGE_ATTRIBUTES, used to check if message_id is supported, is a mandatory command, it cannot fail so we must bail-out NOT only if FC was not supported for that command but also if the query fails as a whole; so the condition checked for bailing out is modified to: if (ret || !MSG_SUPPORTS_FASTCHANNEL(attributes)) { --- drivers/firmware/arm_scmi/driver.c | 76 +++++++++++++++------------ drivers/firmware/arm_scmi/protocols.h | 2 + 2 files changed, 45 insertions(+), 33 deletions(-) diff --git a/drivers/firmware/arm_scmi/driver.c b/drivers/firmware/arm_scmi/driver.c index 1cf18cc8e63f..0e281fca0a38 100644 --- a/drivers/firmware/arm_scmi/driver.c +++ b/drivers/firmware/arm_scmi/driver.c @@ -1738,6 +1738,39 @@ static int scmi_common_get_max_msg_size(const struct scmi_protocol_handle *ph) return info->desc->max_msg_size; } +/** + * scmi_protocol_msg_check - Check protocol message attributes + * + * @ph: A reference to the protocol handle. + * @message_id: The ID of the message to check. + * @attributes: A parameter to optionally return the retrieved message + * attributes, in case of Success. + * + * An helper to check protocol message attributes for a specific protocol + * and message pair. + * + * Return: 0 on SUCCESS + */ +static int scmi_protocol_msg_check(const struct scmi_protocol_handle *ph, + u32 message_id, u32 *attributes) +{ + int ret; + struct scmi_xfer *t; + + ret = xfer_get_init(ph, PROTOCOL_MESSAGE_ATTRIBUTES, + sizeof(__le32), 0, &t); + if (ret) + return ret; + + put_unaligned_le32(message_id, t->tx.buf); + ret = do_xfer(ph, t); + if (!ret && attributes) + *attributes = get_unaligned_le32(t->rx.buf); + xfer_put(ph, t); + + return ret; +} + /** * struct scmi_iterator - Iterator descriptor * @msg: A reference to the message TX buffer; filled by @prepare_message with @@ -1879,6 +1912,7 @@ scmi_common_fastchannel_init(const struct scmi_protocol_handle *ph, int ret; u32 flags; u64 phys_addr; + u32 attributes; u8 size; void __iomem *addr; struct scmi_xfer *t; @@ -1887,6 +1921,15 @@ scmi_common_fastchannel_init(const struct scmi_protocol_handle *ph, struct scmi_msg_resp_desc_fc *resp; const struct scmi_protocol_instance *pi = ph_to_pi(ph); + /* Check if the MSG_ID supports fastchannel */ + ret = scmi_protocol_msg_check(ph, message_id, &attributes); + if (ret || !MSG_SUPPORTS_FASTCHANNEL(attributes)) { + dev_dbg(ph->dev, + "Skip FC init for 0x%02X/%d domain:%d - ret:%d\n", + pi->proto->id, message_id, domain, ret); + return; + } + if (!p_addr) { ret = -EINVAL; goto err_out; @@ -2004,39 +2047,6 @@ static void scmi_common_fastchannel_db_ring(struct scmi_fc_db_info *db) SCMI_PROTO_FC_RING_DB(64); } -/** - * scmi_protocol_msg_check - Check protocol message attributes - * - * @ph: A reference to the protocol handle. - * @message_id: The ID of the message to check. - * @attributes: A parameter to optionally return the retrieved message - * attributes, in case of Success. - * - * An helper to check protocol message attributes for a specific protocol - * and message pair. - * - * Return: 0 on SUCCESS - */ -static int scmi_protocol_msg_check(const struct scmi_protocol_handle *ph, - u32 message_id, u32 *attributes) -{ - int ret; - struct scmi_xfer *t; - - ret = xfer_get_init(ph, PROTOCOL_MESSAGE_ATTRIBUTES, - sizeof(__le32), 0, &t); - if (ret) - return ret; - - put_unaligned_le32(message_id, t->tx.buf); - ret = do_xfer(ph, t); - if (!ret && attributes) - *attributes = get_unaligned_le32(t->rx.buf); - xfer_put(ph, t); - - return ret; -} - static const struct scmi_proto_helpers_ops helpers_ops = { .extended_name_get = scmi_common_extended_name_get, .get_max_msg_size = scmi_common_get_max_msg_size, diff --git a/drivers/firmware/arm_scmi/protocols.h b/drivers/firmware/arm_scmi/protocols.h index aaee57cdcd55..d62c4469d1fd 100644 --- a/drivers/firmware/arm_scmi/protocols.h +++ b/drivers/firmware/arm_scmi/protocols.h @@ -31,6 +31,8 @@ #define SCMI_PROTOCOL_VENDOR_BASE 0x80 +#define MSG_SUPPORTS_FASTCHANNEL(x) ((x) & BIT(0)) + enum scmi_common_cmd { PROTOCOL_VERSION = 0x0, PROTOCOL_ATTRIBUTES = 0x1, -- 2.47.0

4 months, 2 weeks

1
0
0 0

[PATCH] ASoC: renesas: rz-ssi: Use NOIRQ_SYSTEM_SLEEP_PM_OPS()

by Claudiu

From: Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> In the latest kernel versions system crashes were noticed occasionally during suspend/resume. This occurs because the RZ SSI suspend trigger (called from snd_soc_suspend()) is executed after rz_ssi_pm_ops->suspend() and it accesses IP registers. After the rz_ssi_pm_ops->suspend() is executed the IP clocks are disabled and its reset line is asserted. Since snd_soc_suspend() is invoked through snd_soc_pm_ops->suspend(), snd_soc_pm_ops is associated with soc_driver (defined in sound/soc/soc-core.c), and there is no parent-child relationship between soc_driver and rz_ssi_driver the power management subsystem does not enforce a specific suspend/resume order between the RZ SSI platform driver and soc_driver. To ensure that the suspend/resume function of rz-ssi is executed after snd_soc_suspend(), use NOIRQ_SYSTEM_SLEEP_PM_OPS(). Fixes: 1fc778f7c833 ("ASoC: renesas: rz-ssi: Add suspend to RAM support") Cc: stable(a)vger.kernel.org Signed-off-by: Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> --- sound/soc/renesas/rz-ssi.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sound/soc/renesas/rz-ssi.c b/sound/soc/renesas/rz-ssi.c index 3a0af4ca7ab6..0f7458a43901 100644 --- a/sound/soc/renesas/rz-ssi.c +++ b/sound/soc/renesas/rz-ssi.c @@ -1244,7 +1244,7 @@ static int rz_ssi_runtime_resume(struct device *dev) static const struct dev_pm_ops rz_ssi_pm_ops = { RUNTIME_PM_OPS(rz_ssi_runtime_suspend, rz_ssi_runtime_resume, NULL) - SYSTEM_SLEEP_PM_OPS(pm_runtime_force_suspend, pm_runtime_force_resume) + NOIRQ_SYSTEM_SLEEP_PM_OPS(pm_runtime_force_suspend, pm_runtime_force_resume) }; static struct platform_driver rz_ssi_driver = { -- 2.43.0

4 months, 2 weeks

2
1
0 0

[PATCH] ASoC: meson: meson-card-utils: use of_property_present() for DT parsing

by Martin Blumenstingl

Commit c141ecc3cecd ("of: Warn when of_property_read_bool() is used on non-boolean properties") added a warning when trying to parse a property with a value (boolean properties are defined as: absent = false, present without any value = true). This causes a warning from meson-card-utils. meson-card-utils needs to know about the existence of the "audio-routing" and/or "audio-widgets" properties in order to properly parse them. Switch to of_property_present() in order to silence the following warning messages during boot: OF: /sound: Read of boolean property 'audio-routing' with a value. OF: /sound: Read of boolean property 'audio-widgets' with a value. Fixes: 7864a79f37b5 ("ASoC: meson: add axg sound card support") Tested-by: Christian Hewitt <christianshewitt(a)gmail.com> Cc: stable(a)vger.kernel.org Signed-off-by: Martin Blumenstingl <martin.blumenstingl(a)googlemail.com> --- sound/soc/meson/meson-card-utils.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sound/soc/meson/meson-card-utils.c b/sound/soc/meson/meson-card-utils.c index cfc7f6e41ab5..68531183fb60 100644 --- a/sound/soc/meson/meson-card-utils.c +++ b/sound/soc/meson/meson-card-utils.c @@ -231,7 +231,7 @@ static int meson_card_parse_of_optional(struct snd_soc_card *card, const char *p)) { /* If property is not provided, don't fail ... */ - if (!of_property_read_bool(card->dev->of_node, propname)) + if (!of_property_present(card->dev->of_node, propname)) return 0; /* ... but do fail if it is provided and the parsing fails */ -- 2.49.0

4 months, 2 weeks

2
1
0 0

[PATCH RESEND] usb: renesas_usbhs: Add error handling for usbhsf_fifo_select()

by Wentao Liang

In usbhsf_dcp_data_stage_prepare_pop(), the return value of usbhsf_fifo_select() needs to be checked. A proper implementation can be found in usbhsf_dma_try_pop_with_rx_irq(). Add an error check and jump to PIO pop when FIFO selection fails. Fixes: 9e74d601de8a ("usb: gadget: renesas_usbhs: add data/status stage handler") Cc: stable(a)vger.kernel.org # v3.2+ Signed-off-by: Wentao Liang <vulab(a)iscas.ac.cn> --- drivers/usb/renesas_usbhs/fifo.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/drivers/usb/renesas_usbhs/fifo.c b/drivers/usb/renesas_usbhs/fifo.c index 10607e273879..6cc07ab4782d 100644 --- a/drivers/usb/renesas_usbhs/fifo.c +++ b/drivers/usb/renesas_usbhs/fifo.c @@ -466,6 +466,7 @@ static int usbhsf_dcp_data_stage_prepare_pop(struct usbhs_pkt *pkt, struct usbhs_pipe *pipe = pkt->pipe; struct usbhs_priv *priv = usbhs_pipe_to_priv(pipe); struct usbhs_fifo *fifo = usbhsf_get_cfifo(priv); + int ret; if (usbhs_pipe_is_busy(pipe)) return 0; @@ -480,10 +481,14 @@ static int usbhsf_dcp_data_stage_prepare_pop(struct usbhs_pkt *pkt, usbhs_pipe_sequence_data1(pipe); /* DATA1 */ - usbhsf_fifo_select(pipe, fifo, 0); + ret = usbhsf_fifo_select(pipe, fifo, 0); + if (ret < 0) + goto usbhsf_pio_prepare_pop; + usbhsf_fifo_clear(pipe, fifo); usbhsf_fifo_unselect(pipe, fifo); +usbhsf_pio_prepare_pop: /* * change handler to PIO pop */ -- 2.42.0.windows.2

4 months, 2 weeks

2
1
0 0

[PATCH v2 1/2] platform/x86: int3472: add hpd pin support

by Dongcheng Yan

Typically HDMI to MIPI CSI-2 bridges have a pin to signal image data is being received. On the host side this is wired to a GPIO for polling or interrupts. This includes the Lontium HDMI to MIPI CSI-2 bridges lt6911uxe and lt6911uxc. The GPIO "hpd" is used already by other HDMI to CSI-2 bridges, use it here as well. Signed-off-by: Dongcheng Yan <dongcheng.yan(a)intel.com> --- drivers/platform/x86/intel/int3472/common.h | 1 + drivers/platform/x86/intel/int3472/discrete.c | 6 ++++++ 2 files changed, 7 insertions(+) diff --git a/drivers/platform/x86/intel/int3472/common.h b/drivers/platform/x86/intel/int3472/common.h index 145dec66df64..db4cd3720e24 100644 --- a/drivers/platform/x86/intel/int3472/common.h +++ b/drivers/platform/x86/intel/int3472/common.h @@ -22,6 +22,7 @@ #define INT3472_GPIO_TYPE_POWER_ENABLE 0x0b #define INT3472_GPIO_TYPE_CLK_ENABLE 0x0c #define INT3472_GPIO_TYPE_PRIVACY_LED 0x0d +#define INT3472_GPIO_TYPE_HOTPLUG_DETECT 0x13 #define INT3472_PDEV_MAX_NAME_LEN 23 #define INT3472_MAX_SENSOR_GPIOS 3 diff --git a/drivers/platform/x86/intel/int3472/discrete.c b/drivers/platform/x86/intel/int3472/discrete.c index 30ff8f3ea1f5..26215d1b63a2 100644 --- a/drivers/platform/x86/intel/int3472/discrete.c +++ b/drivers/platform/x86/intel/int3472/discrete.c @@ -186,6 +186,10 @@ static void int3472_get_con_id_and_polarity(struct acpi_device *adev, u8 *type, *con_id = "privacy-led"; *gpio_flags = GPIO_ACTIVE_HIGH; break; + case INT3472_GPIO_TYPE_HOTPLUG_DETECT: + *con_id = "hpd"; + *gpio_flags = GPIO_ACTIVE_HIGH; + break; case INT3472_GPIO_TYPE_POWER_ENABLE: *con_id = "power-enable"; *gpio_flags = GPIO_ACTIVE_HIGH; @@ -212,6 +216,7 @@ static void int3472_get_con_id_and_polarity(struct acpi_device *adev, u8 *type, * 0x0b Power enable * 0x0c Clock enable * 0x0d Privacy LED + * 0x13 Hotplug detect * * There are some known platform specific quirks where that does not quite * hold up; for example where a pin with type 0x01 (Power down) is mapped to @@ -281,6 +286,7 @@ static int skl_int3472_handle_gpio_resources(struct acpi_resource *ares, switch (type) { case INT3472_GPIO_TYPE_RESET: case INT3472_GPIO_TYPE_POWERDOWN: + case INT3472_GPIO_TYPE_HOTPLUG_DETECT: ret = skl_int3472_map_gpio_to_sensor(int3472, agpio, con_id, gpio_flags); if (ret) err_msg = "Failed to map GPIO pin to sensor\n"; base-commit: 01c6df60d5d4ae00cd5c1648818744838bba7763 -- 2.34.1

4 months, 2 weeks

4
4
0 0

Linux 6.14.4

by Greg Kroah-Hartman

I'm announcing the release of the 6.14.4 kernel. All users of the 6.14 kernel series must upgrade. The updated 6.14.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.14.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/arch/arm64/booting.rst | 22 + Documentation/devicetree/bindings/soc/fsl/fsl,ls1028a-reset.yaml | 2 Documentation/netlink/specs/ovs_vport.yaml | 4 Documentation/netlink/specs/rt_link.yaml | 20 - Documentation/netlink/specs/rt_neigh.yaml | 14 Documentation/wmi/devices/msi-wmi-platform.rst | 4 Makefile | 3 arch/arm64/include/asm/el2_setup.h | 25 + arch/arm64/tools/sysreg | 103 ++++++ arch/mips/dec/prom/init.c | 2 arch/mips/include/asm/ds1287.h | 2 arch/mips/kernel/cevt-ds1287.c | 1 arch/riscv/include/asm/kgdb.h | 9 arch/riscv/include/asm/syscall.h | 7 arch/riscv/kernel/kgdb.c | 6 arch/riscv/kernel/module-sections.c | 13 arch/riscv/kernel/module.c | 11 arch/riscv/kernel/setup.c | 36 ++ arch/x86/boot/compressed/mem.c | 5 arch/x86/boot/compressed/sev.c | 67 ---- arch/x86/boot/compressed/sev.h | 2 arch/x86/events/intel/ds.c | 8 arch/x86/events/intel/uncore_snbep.c | 107 ------ arch/x86/kernel/cpu/amd.c | 19 - arch/x86/kernel/cpu/microcode/amd.c | 9 arch/x86/xen/multicalls.c | 26 - arch/x86/xen/smp_pv.c | 1 arch/x86/xen/xen-ops.h | 3 block/bio-integrity.c | 17 - block/blk-sysfs.c | 2 drivers/accel/ivpu/ivpu_drv.c | 4 drivers/accel/ivpu/ivpu_fw.c | 3 drivers/accel/ivpu/ivpu_hw.h | 11 drivers/accel/ivpu/ivpu_hw_btrs.c | 126 +++----- drivers/accel/ivpu/ivpu_hw_btrs.h | 6 drivers/ata/libata-sata.c | 15 drivers/block/loop.c | 121 +------ drivers/bluetooth/btqca.c | 2 drivers/bluetooth/btrtl.c | 2 drivers/bluetooth/hci_vhci.c | 10 drivers/cpufreq/cpufreq.c | 8 drivers/crypto/caam/qi.c | 6 drivers/crypto/tegra/tegra-se-aes.c | 5 drivers/dma-buf/sw_sync.c | 19 - drivers/firmware/cirrus/test/cs_dsp_mock_mem_maps.c | 30 - drivers/firmware/cirrus/test/cs_dsp_test_bin.c | 2 drivers/firmware/cirrus/test/cs_dsp_test_bin_error.c | 2 drivers/gpu/drm/amd/amdgpu/amdgpu_bios.c | 34 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c | 2 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 44 +- drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 4 drivers/gpu/drm/amd/amdgpu/mes_v11_0.c | 4 drivers/gpu/drm/amd/amdgpu/mes_v12_0.c | 21 - drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 64 +++- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c | 6 drivers/gpu/drm/amd/display/dc/dml2/dml21/dml21_wrapper.c | 28 + drivers/gpu/drm/amd/display/dc/dml2/dml2_wrapper.c | 15 drivers/gpu/drm/amd/display/dc/hwss/dcn20/dcn20_hwseq.c | 6 drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 7 drivers/gpu/drm/amd/display/dc/resource/dcn31/dcn31_resource.c | 2 drivers/gpu/drm/amd/pm/powerplay/hwmgr/smu7_thermal.c | 4 drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega10_thermal.c | 4 drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_thermal.c | 2 drivers/gpu/drm/amd/pm/swsmu/smu11/arcturus_ppt.c | 3 drivers/gpu/drm/amd/pm/swsmu/smu11/smu_v11_0.c | 2 drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c | 2 drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 55 +++ drivers/gpu/drm/ast/ast_dp.c | 6 drivers/gpu/drm/i915/display/intel_bw.c | 14 drivers/gpu/drm/i915/display/intel_display.c | 4 drivers/gpu/drm/i915/display/intel_display_device.h | 1 drivers/gpu/drm/i915/display/intel_dp.c | 56 ++- drivers/gpu/drm/i915/display/intel_vblank.c | 4 drivers/gpu/drm/i915/gvt/opregion.c | 7 drivers/gpu/drm/i915/i915_drv.h | 1 drivers/gpu/drm/i915/soc/intel_dram.c | 4 drivers/gpu/drm/imagination/pvr_fw.c | 27 + drivers/gpu/drm/imagination/pvr_job.c | 7 drivers/gpu/drm/imagination/pvr_queue.c | 4 drivers/gpu/drm/mgag200/mgag200_mode.c | 2 drivers/gpu/drm/msm/adreno/a6xx_gmu.c | 72 ++-- drivers/gpu/drm/msm/adreno/a6xx_gpu.c | 8 drivers/gpu/drm/msm/disp/dpu1/catalog/dpu_1_14_msm8937.h | 2 drivers/gpu/drm/msm/disp/dpu1/catalog/dpu_1_15_msm8917.h | 1 drivers/gpu/drm/msm/disp/dpu1/catalog/dpu_1_16_msm8953.h | 3 drivers/gpu/drm/msm/disp/dpu1/catalog/dpu_1_7_msm8996.h | 4 drivers/gpu/drm/msm/disp/dpu1/catalog/dpu_3_2_sdm660.h | 3 drivers/gpu/drm/msm/disp/dpu1/catalog/dpu_3_3_sdm630.h | 2 drivers/gpu/drm/msm/disp/dpu1/dpu_plane.c | 3 drivers/gpu/drm/msm/dsi/dsi_host.c | 9 drivers/gpu/drm/msm/registers/adreno/adreno_pm4.xml | 7 drivers/gpu/drm/nouveau/nouveau_bo.c | 3 drivers/gpu/drm/nouveau/nouveau_gem.c | 3 drivers/gpu/drm/sti/Makefile | 2 drivers/gpu/drm/tiny/repaper.c | 4 drivers/gpu/drm/v3d/v3d_sched.c | 16 - drivers/gpu/drm/virtio/virtgpu_gem.c | 11 drivers/gpu/drm/virtio/virtgpu_plane.c | 20 - drivers/gpu/drm/xe/xe_device_types.h | 1 drivers/gpu/drm/xe/xe_dma_buf.c | 5 drivers/gpu/drm/xe/xe_gt_tlb_invalidation.c | 12 drivers/gpu/drm/xe/xe_guc_ads.c | 75 ++-- drivers/gpu/drm/xe/xe_hmm.c | 24 - drivers/gpu/drm/xe/xe_migrate.c | 2 drivers/i2c/busses/i2c-cros-ec-tunnel.c | 3 drivers/i2c/i2c-atr.c | 2 drivers/infiniband/core/cma.c | 4 drivers/infiniband/core/umem_odp.c | 6 drivers/infiniband/hw/bnxt_re/ib_verbs.c | 10 drivers/infiniband/hw/hns/hns_roce_main.c | 2 drivers/infiniband/hw/usnic/usnic_ib_main.c | 14 drivers/md/md-bitmap.c | 5 drivers/md/raid10.c | 1 drivers/net/can/rockchip/rockchip_canfd-core.c | 7 drivers/net/dsa/b53/b53_common.c | 10 drivers/net/dsa/mv88e6xxx/chip.c | 13 drivers/net/dsa/mv88e6xxx/devlink.c | 3 drivers/net/ethernet/amd/pds_core/debugfs.c | 5 drivers/net/ethernet/broadcom/bnxt/bnxt.c | 4 drivers/net/ethernet/chelsio/cxgb4/cxgb4_ethtool.c | 1 drivers/net/ethernet/hisilicon/hibmcge/hbg_err.c | 3 drivers/net/ethernet/hisilicon/hibmcge/hbg_hw.c | 7 drivers/net/ethernet/hisilicon/hibmcge/hbg_main.c | 6 drivers/net/ethernet/hisilicon/hibmcge/hbg_reg.h | 3 drivers/net/ethernet/intel/igc/igc.h | 1 drivers/net/ethernet/intel/igc/igc_defines.h | 6 drivers/net/ethernet/intel/igc/igc_main.c | 1 drivers/net/ethernet/intel/igc/igc_ptp.c | 113 ++++--- drivers/net/ethernet/marvell/octeontx2/nic/rep.c | 2 drivers/net/ethernet/mediatek/mtk_eth_soc.c | 49 +-- drivers/net/ethernet/mediatek/mtk_eth_soc.h | 1 drivers/net/ethernet/ti/am65-cpsw-nuss.c | 15 drivers/net/ethernet/ti/icssg/icss_iep.c | 154 ++++++---- drivers/net/ethernet/wangxun/ngbe/ngbe_main.c | 3 drivers/net/ethernet/wangxun/txgbe/txgbe_main.c | 3 drivers/net/wireless/ath/ath12k/dp_mon.c | 4 drivers/net/wireless/atmel/at76c50x-usb.c | 2 drivers/net/wireless/broadcom/brcm80211/brcmfmac/common.c | 4 drivers/net/wireless/intel/iwlwifi/pcie/trans-gen2.c | 8 drivers/net/wireless/ti/wl1251/tx.c | 4 drivers/nvme/target/fc.c | 14 drivers/nvme/target/pci-epf.c | 74 +++- drivers/pci/pci.c | 4 drivers/platform/mellanox/mlxbf-bootctl.c | 4 drivers/platform/x86/amd/pmf/auto-mode.c | 4 drivers/platform/x86/amd/pmf/cnqf.c | 8 drivers/platform/x86/amd/pmf/core.c | 14 drivers/platform/x86/amd/pmf/pmf.h | 1 drivers/platform/x86/amd/pmf/sps.c | 12 drivers/platform/x86/amd/pmf/tee-if.c | 6 drivers/platform/x86/asus-laptop.c | 9 drivers/platform/x86/dell/alienware-wmi.c | 56 +++ drivers/platform/x86/msi-wmi-platform.c | 99 ++++-- drivers/ptp/ptp_ocp.c | 1 drivers/ras/amd/atl/internal.h | 3 drivers/ras/amd/atl/umc.c | 19 + drivers/ras/amd/fmpm.c | 9 drivers/scsi/hisi_sas/hisi_sas_v2_hw.c | 9 drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 14 drivers/scsi/megaraid/megaraid_sas_base.c | 9 drivers/scsi/megaraid/megaraid_sas_fusion.c | 5 drivers/scsi/scsi_transport_iscsi.c | 7 drivers/scsi/smartpqi/smartpqi_init.c | 13 drivers/thermal/intel/int340x_thermal/processor_thermal_rfim.c | 33 +- drivers/ufs/host/ufs-exynos.c | 41 ++ drivers/ufs/host/ufs-exynos.h | 5 fs/Kconfig | 1 fs/btrfs/ioctl.c | 2 fs/btrfs/super.c | 3 fs/eventpoll.c | 38 +- fs/fuse/virtio_fs.c | 3 fs/hfs/bnode.c | 6 fs/hfsplus/bnode.c | 6 fs/isofs/export.c | 2 fs/nfs/Kconfig | 2 fs/nfs/internal.h | 7 fs/nfs/nfs4session.h | 4 fs/nfsd/Kconfig | 1 fs/nfsd/nfs4state.c | 2 fs/nfsd/nfsfh.h | 7 fs/overlayfs/overlayfs.h | 2 fs/overlayfs/super.c | 5 fs/smb/client/cifsproto.h | 2 fs/smb/client/connect.c | 34 -- fs/smb/client/file.c | 28 + fs/smb/server/connection.c | 4 fs/smb/server/oplock.c | 29 - fs/smb/server/oplock.h | 1 fs/smb/server/smb2pdu.c | 4 fs/smb/server/transport_ipc.c | 7 fs/smb/server/transport_tcp.c | 14 fs/smb/server/transport_tcp.h | 1 fs/smb/server/vfs.c | 3 include/drm/intel/pciids.h | 1 include/linux/backing-dev.h | 1 include/linux/firmware/cirrus/cs_dsp_test_utils.h | 1 include/linux/nfs.h | 7 include/uapi/drm/ivpu_accel.h | 4 io_uring/rsrc.c | 17 + kernel/sched/cpufreq_schedutil.c | 46 ++ kernel/trace/ftrace.c | 7 kernel/trace/trace_events_filter.c | 4 lib/alloc_tag.c | 15 lib/iov_iter.c | 2 lib/string.c | 13 mm/compaction.c | 6 mm/filemap.c | 1 mm/gup.c | 4 mm/memory.c | 4 mm/slub.c | 10 mm/userfaultfd.c | 13 mm/vma.c | 38 ++ mm/vma.h | 9 net/bluetooth/hci_event.c | 5 net/bluetooth/l2cap_core.c | 21 + net/bridge/br_vlan.c | 4 net/dsa/dsa.c | 59 +++ net/dsa/tag_8021q.c | 2 net/ethtool/cmis_cdb.c | 2 net/ipv6/route.c | 1 net/mac80211/iface.c | 3 net/mctp/af_mctp.c | 3 net/netfilter/nf_flow_table_core.c | 10 net/openvswitch/flow_netlink.c | 3 net/smc/af_smc.c | 5 rust/Makefile | 2 rust/helpers/io.c | 34 +- scripts/Makefile.compiler | 4 scripts/generate_rust_analyzer.py | 12 sound/pci/hda/Kconfig | 4 sound/pci/hda/patch_realtek.c | 23 - sound/soc/codecs/cs42l43-jack.c | 3 sound/soc/codecs/lpass-wsa-macro.c | 117 +++++-- sound/soc/dwc/dwc-i2s.c | 13 sound/soc/fsl/fsl_qmc_audio.c | 3 sound/soc/intel/avs/pcm.c | 3 sound/soc/intel/boards/sof_sdw.c | 1 sound/soc/qcom/lpass.h | 3 tools/objtool/check.c | 1 tools/perf/util/evsel.c | 22 - tools/testing/kunit/qemu_configs/sh.py | 4 tools/testing/selftests/mincore/mincore_selftest.c | 16 - tools/testing/selftests/mm/charge_reserved_hugetlb.sh | 4 tools/testing/selftests/mm/hugetlb_reparenting_test.sh | 2 tools/testing/shared/linux.c | 4 246 files changed, 2157 insertions(+), 1271 deletions(-) Abdun Nihaal (7): wifi: at76c50x: fix use after free access in at76_disconnect wifi: brcmfmac: fix memory leak in brcmf_get_module_param wifi: wl1251: fix memory leak in wl1251_tx_work pds_core: fix memory leak in pdsc_debugfs_add_qcq() net: ngbe: fix memory leak in ngbe_probe() error path cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path net: txgbe: fix memory leak in txgbe_probe() error path Akhil P Oommen (1): drm/msm/a6xx: Fix stale rpmh votes from GPU Akhil R (1): crypto: tegra - Fix IV usage for AES ECB Alex Deucher (3): drm/amdgpu/mes12: optimize MES pipe FW version fetching drm/amdgpu/mes11: optimize MES pipe FW version fetching drm/amd/display/dml2: use vzalloc rather than kzalloc Alex Williamson (1): Revert "PCI: Avoid reset when disabled via sysfs" Alexander Tsoy (1): Revert "wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process" Andreas Gruenbacher (1): writeback: fix false warning in inode_to_wb() Andrzej Kacprowski (1): accel/ivpu: Fix the NPU's DPU frequency calculation Andy Shevchenko (1): i2c: atr: Fix wrong include Ankit Nautiyal (3): drm/i915/vrr: Add vrr.vsync_{start, end} in vrr_params_changed drm/i915/display: Add macro for checking 3 DSC engines drm/i915/dp: Check for HAS_DSC_3ENGINES while configuring DSC slices Anshuman Khandual (7): arm64/sysreg: Update register fields for ID_AA64MMFR0_EL1 arm64/sysreg: Add register fields for HDFGRTR2_EL2 arm64/sysreg: Add register fields for HDFGWTR2_EL2 arm64/sysreg: Add register fields for HFGITR2_EL2 arm64/sysreg: Add register fields for HFGRTR2_EL2 arm64/sysreg: Add register fields for HFGWTR2_EL2 arm64/boot: Enable EL2 requirements for FEAT_PMUv3p9 Ard Biesheuvel (1): x86/boot/sev: Avoid shared GHCB page for early memory acceptance Armin Wolf (2): platform/x86: msi-wmi-platform: Rename "data" variable platform/x86: msi-wmi-platform: Workaround a ACPI firmware bug Aurabindo Pillai (1): drm/amd/display: Temporarily disable hostvm on DCN31 Baolin Wang (1): selftests: mincore: fix tmpfs mincore test failure Baoquan He (1): mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() Björn Töpel (1): riscv: Properly export reserved regions in /proc/iomem Bo-Cun Chen (3): net: ethernet: mtk_eth_soc: reapply mdc divider on reset net: ethernet: mtk_eth_soc: correct the max weight of the queue limit for 100Mbps net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings Borislav Petkov (AMD) (1): x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches Brady Norander (1): ASoC: dwc: always enable/disable i2s irqs Brendan King (2): drm/imagination: fix firmware memory leaks drm/imagination: take paired job reference Brendan Tam (1): drm/amd/display: prevent hang on link training fail Chandrakanth Patil (1): scsi: megaraid_sas: Block zero-length ATA VPD inquiry Charles Keepax (1): ASoC: cs42l43: Reset clamp override on jack removal Chengchang Tang (1): RDMA/hns: Fix wrong maximum DMA segment size Chenyuan Yang (2): octeontx2-pf: handle otx2_mbox_get_rsp errors drm/msm/dpu: Fix error pointers in dpu_plane_virtual_atomic_check Chris Bainbridge (1): drm/nouveau: prime: fix ttm_bo_delayed_delete oops Christian König (1): drm/amdgpu: immediately use GTT for new allocations Christoph Hellwig (1): loop: stop using vfs_iter_{read,write} for buffered I/O Christopher S M Hall (6): igc: fix PTM cycle trigger logic igc: increase wait time before retrying PTM igc: move ktime snapshot into PTM retry loop igc: handle the IGC_PTP_ENABLED flag correctly igc: cleanup PTP module if probe fails igc: add lock preventing multiple simultaneous PTM transactions Chunjie Zhu (1): smb3 client: fix open hardlink on deferred close file error Damien Le Moal (2): nvmet: pci-epf: always fully initialize completion entries nvmet: pci-epf: clear CC and CSTS when disabling the controller Damodharam Ammepalli (1): ethtool: cmis_cdb: use correct rpl size in ethtool_cmis_module_poll() Dan Carpenter (2): Bluetooth: btrtl: Prevent potential NULL dereference dma-buf/sw_sync: Decrement refcount on error in sw_sync_ioctl_get_deadline() Dapeng Mi (1): perf/x86/intel: Allow to update user space GPRs from PEBS records David Thompson (1): mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() Denis Arefev (8): asus-laptop: Fix an uninitialized variable ksmbd: Prevent integer overflow in calculation of deadtime drm/amd/pm: Prevent division by zero drm/amd/pm/powerplay: Prevent division by zero drm/amd/pm/smu11: Prevent division by zero drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero Dmitry Baryshkov (2): Bluetooth: qca: fix NV variant for one of WCN3950 SoCs drm/msm/dpu: drop rogue intr_tear_rd_ptr values Dmitry Osipenko (2): drm/virtio: Don't attach GEM to a non-created context in gem_object_open() drm/virtio: Fix missed dmabuf unpinning in error path of prepare_fb() Edward Adam Davis (1): isofs: Prevent the use of too small fid Eric Biggers (1): nfs: add missing selections of CONFIG_CRC32 Evgeny Pimenov (1): ASoC: qcom: Fix sc7280 lpass potential buffer overflow FUJITA Tomonori (1): rust: helpers: Remove volatile qualifier from io helpers Florian Westphal (1): netfilter: conntrack: fix erronous removal of offload bit Frédéric Danis (2): Bluetooth: l2cap: Check encryption key size on incoming connection Bluetooth: l2cap: Process valid commands in too long frame Geert Uytterhoeven (1): dt-bindings: soc: fsl: fsl,ls1028a-reset: Fix maintainer entry Giuseppe Scrivano (1): ovl: remove unused forward declaration Greg Kroah-Hartman (1): Linux 6.14.4 Haoxiang Li (1): drm/msm/dsi: Add check for devm_kstrdup() Henry Martin (1): ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe() Herbert Xu (1): crypto: caam/qi - Fix drv_ctx refcount bug Herve Codina (1): ASoC: fsl: fsl_qmc_audio: Reset audio data pointers on TRIGGER_START event Huacai Chen (3): drm/amd/display: Protect FPU in dml2_validate()/dml21_validate() drm/amd/display: Protect FPU in dml21_copy() drm/amd/display: Protect FPU in dml2_init()/dml21_init() Ilya Maximets (1): net: openvswitch: fix nested key length validation in the set() action Jakub Kicinski (6): netlink: specs: ovs_vport: align with C codegen capabilities eth: bnxt: fix missing ring index trim on error path netlink: specs: rt-link: add an attr layer around alt-ifname netlink: specs: rtnetlink: attribute naming corrections netlink: specs: rt-link: adjust mctp attribute naming netlink: specs: rt-neigh: prefix struct nfmsg members with ndm Jani Nikula (1): drm/i915/gvt: fix unterminated-string-initialization warning Jens Axboe (1): eventpoll: abstract out ep_try_send_events() helper Jijie Shao (4): net: hibmcge: fix incorrect pause frame statistics issue net: hibmcge: fix incorrect multicast filtering issue net: hibmcge: fix wrong mtu log issue net: hibmcge: fix not restore rx pause mac addr after reset issue Jocelyn Falempe (1): drm/ast: Fix ast_dp connection status Joe Damato (1): eventpoll: Set epoll timeout if it's in the future Johannes Berg (2): wifi: iwlwifi: pcie: set state to no-FW before reset handshake Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" Johannes Kimmel (1): btrfs: correctly escape subvol in btrfs_show_options() Jonas Gorski (2): net: b53: enable BPDU reception for management port net: bridge: switchdev: do not notify new brentries as changed Juergen Gross (1): xen: fix multicall debug feature Kailang Yang (1): ALSA: hda/realtek - Fixed ASUS platform headset Mic issue Kan Liang (3): perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR Kashyap Desai (1): RDMA/bnxt_re: Fix budget handling of notification queue Kees Cook (1): Bluetooth: vhci: Avoid needless snprintf() calls Kirill A. Shutemov (1): mm: fix apply_to_existing_page_range() Kuniyuki Iwashima (3): smc: Fix lockdep false-positive for IPPROTO_SMC. Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" Revert "smb: client: fix TCP timers deadlock after rmmod" Kurt Borja (2): platform/x86: alienware-wmi-wmax: Add G-Mode support to Alienware m16 R1 platform/x86: alienware-wmi-wmax: Extend support to more laptops Leo Li (2): drm/amd/display: Actually do immediate vblank disable drm/amd/display: Increase vblank offdelay for PSR panels Leon Romanovsky (1): RDMA/bnxt_re: Remove unusable nq variable Li Lingfeng (1): nfsd: decrease sc_count directly if fail to queue dl_recall Lijo Lazar (1): drm/amdgpu: Prefer shadow rom when available Lorenzo Stoakes (1): mm/vma: add give_up_on_oom option on modify/merge, use in uffd release Lucas De Marchi (1): drm/xe: Set LRC addresses before guc load Luiz Augusto von Dentz (1): Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address Lukas Fischer (1): scripts: generate_rust_analyzer: Add ffi crate Mario Limonciello (4): platform/x86: amd: pmf: Fix STT limits drm/amd: Handle being compiled without SI or CIK support better drm/amd/display: Add HP Elitebook 645 to the quirk list for eDP on DP1 drm/amd/display: Add HP Probook 445 and 465 to the quirk list for eDP on DP1 Mark Brown (1): selftests/mm: generate a temporary mountpoint for cgroup filesystem Martin K. Petersen (1): block: integrity: Do not call set_page_dirty_lock() Martin Wilck (1): scsi: smartpqi: Use is_kdump_kernel() to check for kdump Matt Johnston (1): net: mctp: Set SOCK_RCU_FREE Matt Roper (1): drm/xe/bmg: Add one additional PCI ID Matthew Auld (3): drm/amdgpu/dma_buf: fix page_link check drm/xe/dma_buf: stop relying on placement in unmap drm/xe/userptr: fix notifier vs folio deadlock Matthew Brost (1): drm/xe: Use local fence in error path of xe_migrate_clear Matthew Wilcox (Oracle) (1): test suite: use %zu to print size_t Maíra Canal (1): drm/v3d: Fix Indirect Dispatch configuration for V3D 7.1.6 and later Meghana Malladi (3): net: ti: icss-iep: Add pwidth configuration for perout signal net: ti: icss-iep: Add phase offset configuration for perout signal net: ti: icss-iep: Fix possible NULL pointer dereference for perout request Menglong Dong (1): ftrace: fix incorrect hash size in register_ftrace_direct() Miaoqian Lin (1): scsi: iscsi: Fix missing scsi_host_put() in error path Michael Walle (1): net: ethernet: ti: am65-cpsw: fix port_np reference counting Miguel Ojeda (4): objtool/rust: add one more `noreturn` Rust function for Rust 1.86.0 rust: kasan/kbuild: fix missing flags on first build rust: disable `clippy::needless_continue` rust: kbuild: use `pound` to support GNU Make < 4.3 Miklos Szeredi (1): ovl: don't allow datadir only Namhyung Kim (1): perf tools: Remove evsel__handle_error_quirks() Namjae Jeon (3): ksmbd: fix use-after-free in __smb2_lease_break_noti() ksmbd: fix use-after-free in smb_break_all_levII_oplock() ksmbd: fix the warning from __kernel_write_iter Nathan Chancellor (1): riscv: Avoid fortify warning in syscall_get_arguments() Nikita Zhandarovich (1): drm/repaper: fix integer overflows in repeat functions Niklas Cassel (1): ata: libata-sata: Save all fields from sense data descriptor P Praneesh (1): wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process Pavel Begunkov (1): io_uring: don't post tag CQEs on file/buffer registration failure Peter Collingbourne (1): string: Add load_unaligned_zeropad() code path to sized_strscpy() Peter Griffin (3): scsi: ufs: exynos: Move UFS shareability value to drvdata scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set scsi: ufs: exynos: Ensure consistent phy reference counts Peter Ujfalusi (1): ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S16 Rafael J. Wysocki (3): cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS cpufreq/sched: Explicitly synchronize limits_changed flag handling cpufreq: Reference count policy in cpufreq_update_limits() Remi Pommarel (2): wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue() wifi: mac80211: Purge vif txq in ieee80211_do_stop() Richard Fitzgerald (2): ALSA: hda/cirrus_scodec_test: Don't select dependencies firmware: cs_dsp: test_bin_error: Fix uninitialized data used as fw version Rob Clark (1): drm/msm/a6xx+: Don't let IB_SIZE overflow Rolf Eike Beer (1): drm/sti: remove duplicate object names Sagi Maimon (1): ptp: ocp: fix start time alignment in ptp_ocp_signal_set Sami Tolvanen (1): rust: kbuild: Don't export __pfx symbols Samuel Holland (2): riscv: module: Fix out-of-bounds relocation access riscv: module: Allocate PLT entries for R_RISCV_PLT32 Sandipan Das (1): x86/cpu/amd: Fix workaround for erratum 1054 Sean Heelan (1): ksmbd: Fix dangling pointer in krb_authenticate Sharath Srinivasan (1): RDMA/cma: Fix workqueue crash in cma_netevent_work_handler Shay Drory (1): RDMA/core: Silence oversized kvmalloc() warning Sheng Yong (1): lib/iov_iter: fix to increase non slab folio refcount Sidong Yang (1): btrfs: ioctl: don't free iov when btrfs_encoded_read() returns -EAGAIN Srinivas Kandagatla (2): ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels Srinivas Pandruvada (1): thermal: intel: int340x: Fix Panther Lake DLVR support Steven Rostedt (1): tracing: Fix filter string testing Suren Baghdasaryan (1): slab: ensure slab->obj_exts is clear in a newly allocated slab page T.J. Mercier (1): alloc_tag: handle incomplete bulk allocations in vm_module_tags_populate Thadeu Lima de Souza Cascardo (1): i2c: cros-ec-tunnel: defer probe if parent EC is not present Thomas Hellström (1): drm/xe: Fix an out-of-bounds shift when invalidating TLB Thomas Weißschuh (3): kunit: qemu_configs: SH: Respect kunit cmdline loop: properly send KOBJ_CHANGED uevent for disk device loop: LOOP_SET_FD: send uevents for partitions Thomas Zimmermann (1): drm/mgag200: Fix value in <VBLKSTR> register Tom Chung (1): drm/amd/display: Do not enable Replay and PSR while VRR is on in amdgpu_dm_commit_planes() Tomasz Pakuła (1): drm/amd/pm: Add zero RPM enabled OD setting support for SMU14.0.2 Vasiliy Kovalev (1): hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key Ville Syrjälä (2): drm/i915: Fix scanline_offset for LNL+ and BMG+ drm/i915/dp: Reject HBR3 when sink doesn't support TPS4 Vishal Moola (Oracle) (2): mm/compaction: fix bug in hugetlb handling pathway mm: fix filemap_get_folios_contig returning batches of identical folios Vivek Kasireddy (1): drm/i915/xe2hpd: Identify the memory type for SKUs with GDDR + ECC Vladimir Oltean (5): net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported net: dsa: clean up FDB, MDB, VLAN entries on unbind net: dsa: free routing table on probe failure net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails WangYuli (6): riscv: KGDB: Do not inline arch_kgdb_breakpoint() riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break nvmet-fc: Remove unused functions MIPS: dec: Declare which_prom() as static MIPS: cevt-ds1287: Add missing ds1287.h include MIPS: ds1287: Match ds1287_set_base_clock() function types Weizhao Ouyang (1): can: rockchip_canfd: fix broken quirks checks Will Pierce (1): riscv: Use kvmalloc_array on relocation_hashtable Xiangsheng Hou (1): virtiofs: add filesystem context source name check Xin Long (1): ipv6: add exception routes to GC list in rt6_insert_exception Xingui Yang (1): scsi: hisi_sas: Enable force phy when SATA disk directly connected Yazen Ghannam (2): RAS/AMD/ATL: Include row[13] bit in row retirement RAS/AMD/FMPM: Get masked address Yu Kuai (1): md/raid10: fix missing discard IO accounting Yue Haibing (1): RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe() Yunlong Xing (1): loop: aio inherit the ioprio of original request ZhenGuo Yin (1): drm/amdgpu: fix warning of drm_mm_clean Zheng Qixing (2): md/md-bitmap: fix stats collection for external bitmaps block: fix resource leak in blk_register_queue() error path

4 months, 2 weeks

1
1
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror April 2025