- Linux-stable-mirror - lists.linaro.org

+ mm-memory-failure-fix-vm_bug_on_pagepagepoisonedpage-when-unpoison-memory.patch added to mm-hotfixes-unstable branch

by Andrew Morton

The patch titled Subject: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory has been added to the -mm mm-hotfixes-unstable branch. Its filename is mm-memory-failure-fix-vm_bug_on_pagepagepoisonedpage-when-unpoison-memory.patch This patch will shortly appear at https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patche… This patch will later appear in the mm-hotfixes-unstable branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm Before you just go and hit "reply", please: a) Consider who else should be cc'ed b) Prefer to cc a suitable mailing list as well c) Ideally: find the original patch on the mailing list and do a reply-to-all to that, adding suitable additional cc's *** Remember to use Documentation/process/submit-checklist.rst when testing your code *** The -mm tree is included into linux-next via the mm-everything branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm and is updated there every 2-3 working days ------------------------------------------------------ From: Miaohe Lin <linmiaohe(a)huawei.com> Subject: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory Date: Thu, 28 Aug 2025 10:46:18 +0800 When I did memory failure tests, below panic occurs: page dumped because: VM_BUG_ON_PAGE(PagePoisoned(page)) kernel BUG at include/linux/page-flags.h:616! Oops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 3 PID: 720 Comm: bash Not tainted 6.10.0-rc1-00195-g148743902568 #40 RIP: 0010:unpoison_memory+0x2f3/0x590 RSP: 0018:ffffa57fc8787d60 EFLAGS: 00000246 RAX: 0000000000000037 RBX: 0000000000000009 RCX: ffff9be25fcdc9c8 RDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff9be25fcdc9c0 RBP: 0000000000300000 R08: ffffffffb4956f88 R09: 0000000000009ffb R10: 0000000000000284 R11: ffffffffb4926fa0 R12: ffffe6b00c000000 R13: ffff9bdb453dfd00 R14: 0000000000000000 R15: fffffffffffffffe FS: 00007f08f04e4740(0000) GS:ffff9be25fcc0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000564787a30410 CR3: 000000010d4e2000 CR4: 00000000000006f0 Call Trace: <TASK> unpoison_memory+0x2f3/0x590 simple_attr_write_xsigned.constprop.0.isra.0+0xb3/0x110 debugfs_attr_write+0x42/0x60 full_proxy_write+0x5b/0x80 vfs_write+0xd5/0x540 ksys_write+0x64/0xe0 do_syscall_64+0xb9/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f08f0314887 RSP: 002b:00007ffece710078 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f08f0314887 RDX: 0000000000000009 RSI: 0000564787a30410 RDI: 0000000000000001 RBP: 0000564787a30410 R08: 000000000000fefe R09: 000000007fffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 R13: 00007f08f041b780 R14: 00007f08f0417600 R15: 00007f08f0416a00 </TASK> Modules linked in: hwpoison_inject ---[ end trace 0000000000000000 ]--- RIP: 0010:unpoison_memory+0x2f3/0x590 RSP: 0018:ffffa57fc8787d60 EFLAGS: 00000246 RAX: 0000000000000037 RBX: 0000000000000009 RCX: ffff9be25fcdc9c8 RDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff9be25fcdc9c0 RBP: 0000000000300000 R08: ffffffffb4956f88 R09: 0000000000009ffb R10: 0000000000000284 R11: ffffffffb4926fa0 R12: ffffe6b00c000000 R13: ffff9bdb453dfd00 R14: 0000000000000000 R15: fffffffffffffffe FS: 00007f08f04e4740(0000) GS:ffff9be25fcc0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000564787a30410 CR3: 000000010d4e2000 CR4: 00000000000006f0 Kernel panic - not syncing: Fatal exception Kernel Offset: 0x31c00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) ---[ end Kernel panic - not syncing: Fatal exception ]--- The root cause is that unpoison_memory() tries to check the PG_HWPoison flags of an uninitialized page. So VM_BUG_ON_PAGE(PagePoisoned(page)) is triggered. This can be reproduced by below steps: 1.Offline memory block: echo offline > /sys/devices/system/memory/memory12/state 2.Get offlined memory pfn: page-types -b n -rlN 3.Write pfn to unpoison-pfn echo <pfn> > /sys/kernel/debug/hwpoison/unpoison-pfn This scenario can be identified by pfn_to_online_page() returning NULL. And ZONE_DEVICE pages are never expected, so we can simply fail if pfn_to_online_page() == NULL to fix the bug. Link: https://lkml.kernel.org/r/20250828024618.1744895-1-linmiaohe@huawei.com Fixes: f1dd2cd13c4b ("mm, memory_hotplug: do not associate hotadded memory to zones until online") Signed-off-by: Miaohe Lin <linmiaohe(a)huawei.com> Suggested-by: David Hildenbrand <david(a)redhat.com> Acked-by: David Hildenbrand <david(a)redhat.com> Cc: Naoya Horiguchi <nao.horiguchi(a)gmail.com> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> --- mm/memory-failure.c | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) --- a/mm/memory-failure.c~mm-memory-failure-fix-vm_bug_on_pagepagepoisonedpage-when-unpoison-memory +++ a/mm/memory-failure.c @@ -2568,10 +2568,9 @@ int unpoison_memory(unsigned long pfn) static DEFINE_RATELIMIT_STATE(unpoison_rs, DEFAULT_RATELIMIT_INTERVAL, DEFAULT_RATELIMIT_BURST); - if (!pfn_valid(pfn)) - return -ENXIO; - - p = pfn_to_page(pfn); + p = pfn_to_online_page(pfn); + if (!p) + return -EIO; folio = page_folio(p); mutex_lock(&mf_mutex); _ Patches currently in -mm which might be from linmiaohe(a)huawei.com are mm-memory-failure-fix-vm_bug_on_pagepagepoisonedpage-when-unpoison-memory.patch revert-hugetlb-make-hugetlb-depends-on-sysfs-or-sysctl.patch

2 weeks, 3 days

1
0
0 0

Loan Offer

by Mrs.Seinfield

Hello, Are you looking for a loan to either increase your activity or to carry out a project. We offer Crypto Loans at 2-7% interest rate with or without a credit check. We also pay 1% commission to brokers, who introduce project owners for finance or other opportunities. Please get back to me if you are interested in more details. Best Regards, Lucy Seinfield Assistant Secretary

2 weeks, 3 days

1
0
0 0

+ mm-memory-failure-fix-redundant-updates-for-already-poisoned-pages.patch added to mm-hotfixes-unstable branch

by Andrew Morton

The patch titled Subject: mm/memory-failure: fix redundant updates for already poisoned pages has been added to the -mm mm-hotfixes-unstable branch. Its filename is mm-memory-failure-fix-redundant-updates-for-already-poisoned-pages.patch This patch will shortly appear at https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patche… This patch will later appear in the mm-hotfixes-unstable branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm Before you just go and hit "reply", please: a) Consider who else should be cc'ed b) Prefer to cc a suitable mailing list as well c) Ideally: find the original patch on the mailing list and do a reply-to-all to that, adding suitable additional cc's *** Remember to use Documentation/process/submit-checklist.rst when testing your code *** The -mm tree is included into linux-next via the mm-everything branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm and is updated there every 2-3 working days ------------------------------------------------------ From: Kyle Meyer <kyle.meyer(a)hpe.com> Subject: mm/memory-failure: fix redundant updates for already poisoned pages Date: Thu, 28 Aug 2025 13:38:20 -0500 Duplicate memory errors can be reported by multiple sources. Passing an already poisoned page to action_result() causes issues: * The amount of hardware corrupted memory is incorrectly updated. * Per NUMA node MF stats are incorrectly updated. * Redundant "already poisoned" messages are printed. Avoid those issues by: * Skipping hardware corrupted memory updates for already poisoned pages. * Skipping per NUMA node MF stats updates for already poisoned pages. * Dropping redundant "already poisoned" messages. Make MF_MSG_ALREADY_POISONED consistent with other action_page_types and make calls to action_result() consistent for already poisoned normal pages and huge pages. Link: https://lkml.kernel.org/r/aLCiHMy12Ck3ouwC@hpe.com Fixes: b8b9488d50b7 ("mm/memory-failure: improve memory failure action_result messages") Signed-off-by: Kyle Meyer <kyle.meyer(a)hpe.com> Reviewed-by: Jiaqi Yan <jiaqiyan(a)google.com> Acked-by: David Hildenbrand <david(a)redhat.com> Cc: Borislav Betkov <bp(a)alien8.de> Cc: Jane Chu <jane.chu(a)oracle.com> Cc: Kyle Meyer <kyle.meyer(a)hpe.com> Cc: Liam Howlett <liam.howlett(a)oracle.com> Cc: Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com> Cc: "Luck, Tony" <tony.luck(a)intel.com> Cc: Miaohe Lin <linmiaohe(a)huawei.com> Cc: Michal Hocko <mhocko(a)suse.com> Cc: Mike Rapoport <rppt(a)kernel.org> Cc: Naoya Horiguchi <nao.horiguchi(a)gmail.com> Cc: Oscar Salvador <osalvador(a)suse.de> Cc: Russ Anderson <russ.anderson(a)hpe.com> Cc: Suren Baghdasaryan <surenb(a)google.com> Cc: Vlastimil Babka <vbabka(a)suse.cz> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> --- mm/memory-failure.c | 13 ++++++------- 1 file changed, 6 insertions(+), 7 deletions(-) --- a/mm/memory-failure.c~mm-memory-failure-fix-redundant-updates-for-already-poisoned-pages +++ a/mm/memory-failure.c @@ -956,7 +956,7 @@ static const char * const action_page_ty [MF_MSG_BUDDY] = "free buddy page", [MF_MSG_DAX] = "dax page", [MF_MSG_UNSPLIT_THP] = "unsplit thp", - [MF_MSG_ALREADY_POISONED] = "already poisoned", + [MF_MSG_ALREADY_POISONED] = "already poisoned page", [MF_MSG_UNKNOWN] = "unknown page", }; @@ -1349,9 +1349,10 @@ static int action_result(unsigned long p { trace_memory_failure_event(pfn, type, result); - num_poisoned_pages_inc(pfn); - - update_per_node_mf_stats(pfn, result); + if (type != MF_MSG_ALREADY_POISONED) { + num_poisoned_pages_inc(pfn); + update_per_node_mf_stats(pfn, result); + } pr_err("%#lx: recovery action for %s: %s\n", pfn, action_page_types[type], action_name[result]); @@ -2094,12 +2095,11 @@ retry: *hugetlb = 0; return 0; } else if (res == -EHWPOISON) { - pr_err("%#lx: already hardware poisoned\n", pfn); if (flags & MF_ACTION_REQUIRED) { folio = page_folio(p); res = kill_accessing_process(current, folio_pfn(folio), flags); - action_result(pfn, MF_MSG_ALREADY_POISONED, MF_FAILED); } + action_result(pfn, MF_MSG_ALREADY_POISONED, MF_FAILED); return res; } else if (res == -EBUSY) { if (!(flags & MF_NO_RETRY)) { @@ -2285,7 +2285,6 @@ try_again: goto unlock_mutex; if (TestSetPageHWPoison(p)) { - pr_err("%#lx: already hardware poisoned\n", pfn); res = -EHWPOISON; if (flags & MF_ACTION_REQUIRED) res = kill_accessing_process(current, pfn, flags); _ Patches currently in -mm which might be from kyle.meyer(a)hpe.com are mm-memory-failure-fix-redundant-updates-for-already-poisoned-pages.patch

2 weeks, 3 days

1
0
0 0

[PATCH v3 1/1] iommu/sva: Invalidate KVA range on kernel TLB flush

by Lu Baolu

In the IOMMU Shared Virtual Addressing (SVA) context, the IOMMU hardware shares and walks the CPU's page tables. The Linux x86 architecture maps the kernel address space into the upper portion of every process’s page table. Consequently, in an SVA context, the IOMMU hardware can walk and cache kernel space mappings. However, the Linux kernel currently lacks a notification mechanism for kernel space mapping changes. This means the IOMMU driver is not aware of such changes, leading to a break in IOMMU cache coherence. Modern IOMMUs often cache page table entries of the intermediate-level page table as long as the entry is valid, no matter the permissions, to optimize walk performance. Currently the iommu driver is notified only for changes of user VA mappings, so the IOMMU's internal caches may retain stale entries for kernel VA. When kernel page table mappings are changed (e.g., by vfree()), but the IOMMU's internal caches retain stale entries, Use-After-Free (UAF) vulnerability condition arises. If these freed page table pages are reallocated for a different purpose, potentially by an attacker, the IOMMU could misinterpret the new data as valid page table entries. This allows the IOMMU to walk into attacker- controlled memory, leading to arbitrary physical memory DMA access or privilege escalation. To mitigate this, introduce a new iommu interface to flush IOMMU caches. This interface should be invoked from architecture-specific code that manages combined user and kernel page tables, whenever a kernel page table update is done and the CPU TLB needs to be flushed. Fixes: 26b25a2b98e4 ("iommu: Bind process address spaces to devices") Cc: stable(a)vger.kernel.org Suggested-by: Jann Horn <jannh(a)google.com> Co-developed-by: Jason Gunthorpe <jgg(a)nvidia.com> Signed-off-by: Jason Gunthorpe <jgg(a)nvidia.com> Signed-off-by: Lu Baolu <baolu.lu(a)linux.intel.com> Reviewed-by: Jason Gunthorpe <jgg(a)nvidia.com> Reviewed-by: Vasant Hegde <vasant.hegde(a)amd.com> Reviewed-by: Kevin Tian <kevin.tian(a)intel.com> Tested-by: Yi Lai <yi1.lai(a)intel.com> --- arch/x86/mm/tlb.c | 4 +++ drivers/iommu/iommu-sva.c | 60 ++++++++++++++++++++++++++++++++++++++- include/linux/iommu.h | 4 +++ 3 files changed, 67 insertions(+), 1 deletion(-) Change log: v3: - iommu_sva_mms is an unbound list; iterating it in an atomic context could introduce significant latency issues. Schedule it in a kernel thread and replace the spinlock with a mutex. - Replace the static key with a normal bool; it can be brought back if data shows the benefit. - Invalidate KVA range in the flush_tlb_all() paths. - All previous reviewed-bys are preserved. Please let me know if there are any objections. v2: - https://lore.kernel.org/linux-iommu/20250709062800.651521-1-baolu.lu@linux.… - Remove EXPORT_SYMBOL_GPL(iommu_sva_invalidate_kva_range); - Replace the mutex with a spinlock to make the interface usable in the critical regions. v1: https://lore.kernel.org/linux-iommu/20250704133056.4023816-1-baolu.lu@linux… diff --git a/arch/x86/mm/tlb.c b/arch/x86/mm/tlb.c index 39f80111e6f1..3b85e7d3ba44 100644 --- a/arch/x86/mm/tlb.c +++ b/arch/x86/mm/tlb.c @@ -12,6 +12,7 @@ #include <linux/task_work.h> #include <linux/mmu_notifier.h> #include <linux/mmu_context.h> +#include <linux/iommu.h> #include <asm/tlbflush.h> #include <asm/mmu_context.h> @@ -1478,6 +1479,8 @@ void flush_tlb_all(void) else /* Fall back to the IPI-based invalidation. */ on_each_cpu(do_flush_tlb_all, NULL, 1); + + iommu_sva_invalidate_kva_range(0, TLB_FLUSH_ALL); } /* Flush an arbitrarily large range of memory with INVLPGB. */ @@ -1540,6 +1543,7 @@ void flush_tlb_kernel_range(unsigned long start, unsigned long end) kernel_tlb_flush_range(info); put_flush_tlb_info(); + iommu_sva_invalidate_kva_range(start, end); } /* diff --git a/drivers/iommu/iommu-sva.c b/drivers/iommu/iommu-sva.c index 1a51cfd82808..d0da2b3fd64b 100644 --- a/drivers/iommu/iommu-sva.c +++ b/drivers/iommu/iommu-sva.c @@ -10,6 +10,8 @@ #include "iommu-priv.h" static DEFINE_MUTEX(iommu_sva_lock); +static bool iommu_sva_present; +static LIST_HEAD(iommu_sva_mms); static struct iommu_domain *iommu_sva_domain_alloc(struct device *dev, struct mm_struct *mm); @@ -42,6 +44,7 @@ static struct iommu_mm_data *iommu_alloc_mm_data(struct mm_struct *mm, struct de return ERR_PTR(-ENOSPC); } iommu_mm->pasid = pasid; + iommu_mm->mm = mm; INIT_LIST_HEAD(&iommu_mm->sva_domains); /* * Make sure the write to mm->iommu_mm is not reordered in front of @@ -132,8 +135,13 @@ struct iommu_sva *iommu_sva_bind_device(struct device *dev, struct mm_struct *mm if (ret) goto out_free_domain; domain->users = 1; - list_add(&domain->next, &mm->iommu_mm->sva_domains); + if (list_empty(&iommu_mm->sva_domains)) { + if (list_empty(&iommu_sva_mms)) + WRITE_ONCE(iommu_sva_present, true); + list_add(&iommu_mm->mm_list_elm, &iommu_sva_mms); + } + list_add(&domain->next, &iommu_mm->sva_domains); out: refcount_set(&handle->users, 1); mutex_unlock(&iommu_sva_lock); @@ -175,6 +183,13 @@ void iommu_sva_unbind_device(struct iommu_sva *handle) list_del(&domain->next); iommu_domain_free(domain); } + + if (list_empty(&iommu_mm->sva_domains)) { + list_del(&iommu_mm->mm_list_elm); + if (list_empty(&iommu_sva_mms)) + WRITE_ONCE(iommu_sva_present, false); + } + mutex_unlock(&iommu_sva_lock); kfree(handle); } @@ -312,3 +327,46 @@ static struct iommu_domain *iommu_sva_domain_alloc(struct device *dev, return domain; } + +struct kva_invalidation_work_data { + struct work_struct work; + unsigned long start; + unsigned long end; +}; + +static void invalidate_kva_func(struct work_struct *work) +{ + struct kva_invalidation_work_data *data = + container_of(work, struct kva_invalidation_work_data, work); + struct iommu_mm_data *iommu_mm; + + guard(mutex)(&iommu_sva_lock); + list_for_each_entry(iommu_mm, &iommu_sva_mms, mm_list_elm) + mmu_notifier_arch_invalidate_secondary_tlbs(iommu_mm->mm, + data->start, data->end); + + kfree(data); +} + +void iommu_sva_invalidate_kva_range(unsigned long start, unsigned long end) +{ + struct kva_invalidation_work_data *data; + + if (likely(!READ_ONCE(iommu_sva_present))) + return; + + /* will be freed in the task function */ + data = kzalloc(sizeof(*data), GFP_ATOMIC); + if (!data) + return; + + data->start = start; + data->end = end; + INIT_WORK(&data->work, invalidate_kva_func); + + /* + * Since iommu_sva_mms is an unbound list, iterating it in an atomic + * context could introduce significant latency issues. + */ + schedule_work(&data->work); +} diff --git a/include/linux/iommu.h b/include/linux/iommu.h index c30d12e16473..66e4abb2df0d 100644 --- a/include/linux/iommu.h +++ b/include/linux/iommu.h @@ -1134,7 +1134,9 @@ struct iommu_sva { struct iommu_mm_data { u32 pasid; + struct mm_struct *mm; struct list_head sva_domains; + struct list_head mm_list_elm; }; int iommu_fwspec_init(struct device *dev, struct fwnode_handle *iommu_fwnode); @@ -1615,6 +1617,7 @@ struct iommu_sva *iommu_sva_bind_device(struct device *dev, struct mm_struct *mm); void iommu_sva_unbind_device(struct iommu_sva *handle); u32 iommu_sva_get_pasid(struct iommu_sva *handle); +void iommu_sva_invalidate_kva_range(unsigned long start, unsigned long end); #else static inline struct iommu_sva * iommu_sva_bind_device(struct device *dev, struct mm_struct *mm) @@ -1639,6 +1642,7 @@ static inline u32 mm_get_enqcmd_pasid(struct mm_struct *mm) } static inline void mm_pasid_drop(struct mm_struct *mm) {} +static inline void iommu_sva_invalidate_kva_range(unsigned long start, unsigned long end) {} #endif /* CONFIG_IOMMU_SVA */ #ifdef CONFIG_IOMMU_IOPF -- 2.43.0

2 weeks, 3 days

8
48
0 0

[PATCH 5.4.y] Revert "drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS"

by Imre Deak

This reverts commit 2402adce8da4e7396b63b5ffa71e1fa16e5fe5c4. The upstream commit a40c5d727b8111b5db424a1e43e14a1dcce1e77f ("drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS") the reverted commit backported causes a regression, on one eDP panel at least resulting in display flickering, described in detail at the Link: below. The issue fixed by the upstream commit will need a different solution, revert the backport for now. Cc: intel-gfx(a)lists.freedesktop.org Cc: dri-devel(a)lists.freedesktop.org Cc: Sasha Levin <sashal(a)kernel.org> Link: https://gitlab.freedesktop.org/drm/i915/kernel/-/issues/14558 Signed-off-by: Imre Deak <imre.deak(a)intel.com> --- drivers/gpu/drm/drm_dp_helper.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/gpu/drm/drm_dp_helper.c b/drivers/gpu/drm/drm_dp_helper.c index 4eabef5b86d0..ffc68d305afe 100644 --- a/drivers/gpu/drm/drm_dp_helper.c +++ b/drivers/gpu/drm/drm_dp_helper.c @@ -280,7 +280,7 @@ ssize_t drm_dp_dpcd_read(struct drm_dp_aux *aux, unsigned int offset, * We just have to do it before any DPCD access and hope that the * monitor doesn't power down exactly after the throw away read. */ - ret = drm_dp_dpcd_access(aux, DP_AUX_NATIVE_READ, DP_LANE0_1_STATUS, buffer, + ret = drm_dp_dpcd_access(aux, DP_AUX_NATIVE_READ, DP_DPCD_REV, buffer, 1); if (ret != 1) goto out; -- 2.49.1

2 weeks, 3 days

1
6
0 0

FAILED: patch "[PATCH] NFS: Fix a race when updating an existing write" failed to apply to 5.10-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 5.10-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.10.y git checkout FETCH_HEAD git cherry-pick -x 76d2e3890fb169168c73f2e4f8375c7cc24a765e # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025082225-attribute-embark-823b@gregkh' --subject-prefix 'PATCH 5.10.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 76d2e3890fb169168c73f2e4f8375c7cc24a765e Mon Sep 17 00:00:00 2001 From: Trond Myklebust <trond.myklebust(a)hammerspace.com> Date: Sat, 16 Aug 2025 07:25:20 -0700 Subject: [PATCH] NFS: Fix a race when updating an existing write After nfs_lock_and_join_requests() tests for whether the request is still attached to the mapping, nothing prevents a call to nfs_inode_remove_request() from succeeding until we actually lock the page group. The reason is that whoever called nfs_inode_remove_request() doesn't necessarily have a lock on the page group head. So in order to avoid races, let's take the page group lock earlier in nfs_lock_and_join_requests(), and hold it across the removal of the request in nfs_inode_remove_request(). Reported-by: Jeff Layton <jlayton(a)kernel.org> Tested-by: Joe Quanaim <jdq(a)meta.com> Tested-by: Andrew Steffen <aksteffen(a)meta.com> Reviewed-by: Jeff Layton <jlayton(a)kernel.org> Fixes: bd37d6fce184 ("NFSv4: Convert nfs_lock_and_join_requests() to use nfs_page_find_head_request()") Cc: stable(a)vger.kernel.org Signed-off-by: Trond Myklebust <trond.myklebust(a)hammerspace.com> diff --git a/fs/nfs/pagelist.c b/fs/nfs/pagelist.c index 11968dcb7243..6e69ce43a13f 100644 --- a/fs/nfs/pagelist.c +++ b/fs/nfs/pagelist.c @@ -253,13 +253,14 @@ nfs_page_group_unlock(struct nfs_page *req) nfs_page_clear_headlock(req); } -/* - * nfs_page_group_sync_on_bit_locked +/** + * nfs_page_group_sync_on_bit_locked - Test if all requests have @bit set + * @req: request in page group + * @bit: PG_* bit that is used to sync page group * * must be called with page group lock held */ -static bool -nfs_page_group_sync_on_bit_locked(struct nfs_page *req, unsigned int bit) +bool nfs_page_group_sync_on_bit_locked(struct nfs_page *req, unsigned int bit) { struct nfs_page *head = req->wb_head; struct nfs_page *tmp; diff --git a/fs/nfs/write.c b/fs/nfs/write.c index fa5c41d0989a..8b7c04737967 100644 --- a/fs/nfs/write.c +++ b/fs/nfs/write.c @@ -153,20 +153,10 @@ nfs_page_set_inode_ref(struct nfs_page *req, struct inode *inode) } } -static int -nfs_cancel_remove_inode(struct nfs_page *req, struct inode *inode) +static void nfs_cancel_remove_inode(struct nfs_page *req, struct inode *inode) { - int ret; - - if (!test_bit(PG_REMOVE, &req->wb_flags)) - return 0; - ret = nfs_page_group_lock(req); - if (ret) - return ret; if (test_and_clear_bit(PG_REMOVE, &req->wb_flags)) nfs_page_set_inode_ref(req, inode); - nfs_page_group_unlock(req); - return 0; } /** @@ -585,19 +575,18 @@ retry: } } + ret = nfs_page_group_lock(head); + if (ret < 0) + goto out_unlock; + /* Ensure that nobody removed the request before we locked it */ if (head != folio->private) { + nfs_page_group_unlock(head); nfs_unlock_and_release_request(head); goto retry; } - ret = nfs_cancel_remove_inode(head, inode); - if (ret < 0) - goto out_unlock; - - ret = nfs_page_group_lock(head); - if (ret < 0) - goto out_unlock; + nfs_cancel_remove_inode(head, inode); /* lock each request in the page group */ for (subreq = head->wb_this_page; @@ -786,7 +775,8 @@ static void nfs_inode_remove_request(struct nfs_page *req) { struct nfs_inode *nfsi = NFS_I(nfs_page_to_inode(req)); - if (nfs_page_group_sync_on_bit(req, PG_REMOVE)) { + nfs_page_group_lock(req); + if (nfs_page_group_sync_on_bit_locked(req, PG_REMOVE)) { struct folio *folio = nfs_page_to_folio(req->wb_head); struct address_space *mapping = folio->mapping; @@ -798,6 +788,7 @@ static void nfs_inode_remove_request(struct nfs_page *req) } spin_unlock(&mapping->i_private_lock); } + nfs_page_group_unlock(req); if (test_and_clear_bit(PG_INODE_REF, &req->wb_flags)) { atomic_long_dec(&nfsi->nrequests); diff --git a/include/linux/nfs_page.h b/include/linux/nfs_page.h index 169b4ae30ff4..9aed39abc94b 100644 --- a/include/linux/nfs_page.h +++ b/include/linux/nfs_page.h @@ -160,6 +160,7 @@ extern void nfs_join_page_group(struct nfs_page *head, extern int nfs_page_group_lock(struct nfs_page *); extern void nfs_page_group_unlock(struct nfs_page *); extern bool nfs_page_group_sync_on_bit(struct nfs_page *, unsigned int); +extern bool nfs_page_group_sync_on_bit_locked(struct nfs_page *, unsigned int); extern int nfs_page_set_headlock(struct nfs_page *req); extern void nfs_page_clear_headlock(struct nfs_page *req); extern bool nfs_async_iocounter_wait(struct rpc_task *, struct nfs_lock_context *);

2 weeks, 3 days

2
3
0 0

FAILED: patch "[PATCH] NFS: Fix a race when updating an existing write" failed to apply to 5.15-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 5.15-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.15.y git checkout FETCH_HEAD git cherry-pick -x 76d2e3890fb169168c73f2e4f8375c7cc24a765e # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025082225-cling-drainer-d884@gregkh' --subject-prefix 'PATCH 5.15.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 76d2e3890fb169168c73f2e4f8375c7cc24a765e Mon Sep 17 00:00:00 2001 From: Trond Myklebust <trond.myklebust(a)hammerspace.com> Date: Sat, 16 Aug 2025 07:25:20 -0700 Subject: [PATCH] NFS: Fix a race when updating an existing write After nfs_lock_and_join_requests() tests for whether the request is still attached to the mapping, nothing prevents a call to nfs_inode_remove_request() from succeeding until we actually lock the page group. The reason is that whoever called nfs_inode_remove_request() doesn't necessarily have a lock on the page group head. So in order to avoid races, let's take the page group lock earlier in nfs_lock_and_join_requests(), and hold it across the removal of the request in nfs_inode_remove_request(). Reported-by: Jeff Layton <jlayton(a)kernel.org> Tested-by: Joe Quanaim <jdq(a)meta.com> Tested-by: Andrew Steffen <aksteffen(a)meta.com> Reviewed-by: Jeff Layton <jlayton(a)kernel.org> Fixes: bd37d6fce184 ("NFSv4: Convert nfs_lock_and_join_requests() to use nfs_page_find_head_request()") Cc: stable(a)vger.kernel.org Signed-off-by: Trond Myklebust <trond.myklebust(a)hammerspace.com> diff --git a/fs/nfs/pagelist.c b/fs/nfs/pagelist.c index 11968dcb7243..6e69ce43a13f 100644 --- a/fs/nfs/pagelist.c +++ b/fs/nfs/pagelist.c @@ -253,13 +253,14 @@ nfs_page_group_unlock(struct nfs_page *req) nfs_page_clear_headlock(req); } -/* - * nfs_page_group_sync_on_bit_locked +/** + * nfs_page_group_sync_on_bit_locked - Test if all requests have @bit set + * @req: request in page group + * @bit: PG_* bit that is used to sync page group * * must be called with page group lock held */ -static bool -nfs_page_group_sync_on_bit_locked(struct nfs_page *req, unsigned int bit) +bool nfs_page_group_sync_on_bit_locked(struct nfs_page *req, unsigned int bit) { struct nfs_page *head = req->wb_head; struct nfs_page *tmp; diff --git a/fs/nfs/write.c b/fs/nfs/write.c index fa5c41d0989a..8b7c04737967 100644 --- a/fs/nfs/write.c +++ b/fs/nfs/write.c @@ -153,20 +153,10 @@ nfs_page_set_inode_ref(struct nfs_page *req, struct inode *inode) } } -static int -nfs_cancel_remove_inode(struct nfs_page *req, struct inode *inode) +static void nfs_cancel_remove_inode(struct nfs_page *req, struct inode *inode) { - int ret; - - if (!test_bit(PG_REMOVE, &req->wb_flags)) - return 0; - ret = nfs_page_group_lock(req); - if (ret) - return ret; if (test_and_clear_bit(PG_REMOVE, &req->wb_flags)) nfs_page_set_inode_ref(req, inode); - nfs_page_group_unlock(req); - return 0; } /** @@ -585,19 +575,18 @@ retry: } } + ret = nfs_page_group_lock(head); + if (ret < 0) + goto out_unlock; + /* Ensure that nobody removed the request before we locked it */ if (head != folio->private) { + nfs_page_group_unlock(head); nfs_unlock_and_release_request(head); goto retry; } - ret = nfs_cancel_remove_inode(head, inode); - if (ret < 0) - goto out_unlock; - - ret = nfs_page_group_lock(head); - if (ret < 0) - goto out_unlock; + nfs_cancel_remove_inode(head, inode); /* lock each request in the page group */ for (subreq = head->wb_this_page; @@ -786,7 +775,8 @@ static void nfs_inode_remove_request(struct nfs_page *req) { struct nfs_inode *nfsi = NFS_I(nfs_page_to_inode(req)); - if (nfs_page_group_sync_on_bit(req, PG_REMOVE)) { + nfs_page_group_lock(req); + if (nfs_page_group_sync_on_bit_locked(req, PG_REMOVE)) { struct folio *folio = nfs_page_to_folio(req->wb_head); struct address_space *mapping = folio->mapping; @@ -798,6 +788,7 @@ static void nfs_inode_remove_request(struct nfs_page *req) } spin_unlock(&mapping->i_private_lock); } + nfs_page_group_unlock(req); if (test_and_clear_bit(PG_INODE_REF, &req->wb_flags)) { atomic_long_dec(&nfsi->nrequests); diff --git a/include/linux/nfs_page.h b/include/linux/nfs_page.h index 169b4ae30ff4..9aed39abc94b 100644 --- a/include/linux/nfs_page.h +++ b/include/linux/nfs_page.h @@ -160,6 +160,7 @@ extern void nfs_join_page_group(struct nfs_page *head, extern int nfs_page_group_lock(struct nfs_page *); extern void nfs_page_group_unlock(struct nfs_page *); extern bool nfs_page_group_sync_on_bit(struct nfs_page *, unsigned int); +extern bool nfs_page_group_sync_on_bit_locked(struct nfs_page *, unsigned int); extern int nfs_page_set_headlock(struct nfs_page *req); extern void nfs_page_clear_headlock(struct nfs_page *req); extern bool nfs_async_iocounter_wait(struct rpc_task *, struct nfs_lock_context *);

2 weeks, 3 days

2
3
0 0

[PATCH] drm/xe: Fix incorrect migration of backed-up object to VRAM

by Thomas Hellström

If an object is backed up to shmem it is incorrectly identified as not having valid data by the move code. This means moving to VRAM skips the -EMULTIHOP step and the bo is cleared. This causes all sorts of weird behaviour on DGFX if an already evicted object is targeted by the shrinker. Fix this by using ttm_tt_is_swapped() to identify backed-up objects. Closes: https://gitlab.freedesktop.org/drm/xe/kernel/-/issues/5996 Fixes: 00c8efc3180f ("drm/xe: Add a shrinker for xe bos") Cc: Matthew Brost <matthew.brost(a)intel.com> Cc: Matthew Auld <matthew.auld(a)intel.com> Cc: <stable(a)vger.kernel.org> # v6.15+ Signed-off-by: Thomas Hellström <thomas.hellstrom(a)linux.intel.com> --- drivers/gpu/drm/xe/xe_bo.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/drivers/gpu/drm/xe/xe_bo.c b/drivers/gpu/drm/xe/xe_bo.c index 7d1ff642b02a..4faf15d5fa6d 100644 --- a/drivers/gpu/drm/xe/xe_bo.c +++ b/drivers/gpu/drm/xe/xe_bo.c @@ -823,8 +823,7 @@ static int xe_bo_move(struct ttm_buffer_object *ttm_bo, bool evict, return ret; } - tt_has_data = ttm && (ttm_tt_is_populated(ttm) || - (ttm->page_flags & TTM_TT_FLAG_SWAPPED)); + tt_has_data = ttm && (ttm_tt_is_populated(ttm) || ttm_tt_is_swapped(ttm)); move_lacks_source = !old_mem || (handle_system_ccs ? (!bo->ccs_cleared) : (!mem_type_is_vram(old_mem_type) && !tt_has_data)); -- 2.50.1

2 weeks, 3 days

2
2
0 0

Linux 6.16.4

by Greg Kroah-Hartman

I'm announcing the release of the 6.16.4 kernel. All users of the 6.16 kernel series must upgrade. The updated 6.16.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.16.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/devicetree/bindings/display/rockchip/rockchip-vop2.yaml | 56 +- Documentation/devicetree/bindings/display/sprd/sprd,sharkl3-dpu.yaml | 2 Documentation/devicetree/bindings/display/sprd/sprd,sharkl3-dsi-host.yaml | 2 Documentation/devicetree/bindings/ufs/mediatek,ufs.yaml | 4 Documentation/networking/mptcp-sysctl.rst | 2 Makefile | 4 arch/arm/lib/crypto/poly1305-glue.c | 3 arch/arm64/boot/dts/apple/t8012-j132.dts | 1 arch/arm64/boot/dts/exynos/exynos7870-j6lte.dts | 2 arch/arm64/boot/dts/exynos/exynos7870-on7xelte.dts | 2 arch/arm64/boot/dts/exynos/exynos7870.dtsi | 1 arch/arm64/boot/dts/exynos/google/gs101.dtsi | 1 arch/arm64/boot/dts/rockchip/rk3576.dtsi | 7 arch/arm64/boot/dts/rockchip/rk3588-turing-rk1.dtsi | 11 arch/arm64/boot/dts/ti/k3-am62-lp-sk.dts | 24 arch/arm64/boot/dts/ti/k3-am62-main.dtsi | 1 arch/arm64/boot/dts/ti/k3-am62-verdin.dtsi | 12 arch/arm64/boot/dts/ti/k3-am625-sk.dts | 24 arch/arm64/boot/dts/ti/k3-am62a7-sk.dts | 4 arch/arm64/boot/dts/ti/k3-am62x-sk-common.dtsi | 24 arch/arm64/boot/dts/ti/k3-pinctrl.h | 15 arch/arm64/lib/crypto/poly1305-glue.c | 3 arch/loongarch/Makefile | 6 arch/loongarch/kernel/module-sections.c | 36 - arch/loongarch/kvm/intc/eiointc.c | 32 - arch/loongarch/kvm/intc/ipi.c | 8 arch/loongarch/kvm/intc/pch_pic.c | 10 arch/loongarch/kvm/vcpu.c | 8 arch/m68k/kernel/head.S | 31 - arch/mips/lib/crypto/chacha-core.S | 20 arch/parisc/Makefile | 4 arch/parisc/include/asm/pgtable.h | 7 arch/parisc/include/asm/special_insns.h | 28 + arch/parisc/include/asm/uaccess.h | 21 arch/parisc/kernel/cache.c | 6 arch/parisc/kernel/entry.S | 17 arch/parisc/kernel/syscall.S | 30 - arch/parisc/lib/memcpy.c | 19 arch/parisc/mm/fault.c | 4 arch/s390/boot/vmem.c | 3 arch/s390/hypfs/hypfs_dbfs.c | 19 arch/x86/crypto/aegis128-aesni-glue.c | 40 + arch/x86/include/asm/xen/hypercall.h | 5 arch/x86/kernel/cpu/amd.c | 8 arch/x86/kernel/cpu/hygon.c | 3 block/bfq-iosched.c | 13 block/blk-mq-debugfs.c | 1 block/blk-mq-sched.c | 223 +++++--- block/blk-mq-sched.h | 12 block/blk-mq.c | 29 - block/blk-rq-qos.c | 8 block/blk-rq-qos.h | 48 + block/blk-sysfs.c | 2 block/blk.h | 4 block/elevator.c | 38 + block/elevator.h | 16 block/kyber-iosched.c | 11 block/mq-deadline.c | 14 crypto/deflate.c | 7 drivers/accel/habanalabs/gaudi2/gaudi2.c | 2 drivers/acpi/apei/einj-core.c | 12 drivers/acpi/pfr_update.c | 2 drivers/ata/Kconfig | 36 + drivers/ata/libata-scsi.c | 49 - drivers/base/power/runtime.c | 27 - drivers/bluetooth/btmtk.c | 7 drivers/bus/mhi/host/boot.c | 8 drivers/bus/mhi/host/internal.h | 4 drivers/bus/mhi/host/main.c | 12 drivers/cdx/controller/cdx_rpmsg.c | 3 drivers/comedi/comedi_fops.c | 5 drivers/comedi/drivers.c | 23 drivers/comedi/drivers/pcl726.c | 3 drivers/cpufreq/armada-8k-cpufreq.c | 2 drivers/cpuidle/governors/menu.c | 29 - drivers/crypto/caam/ctrl.c | 5 drivers/crypto/caam/intern.h | 1 drivers/crypto/ccp/sev-dev.c | 10 drivers/crypto/intel/qat/qat_common/adf_common_drv.h | 1 drivers/crypto/intel/qat/qat_common/adf_init.c | 1 drivers/crypto/intel/qat/qat_common/adf_isr.c | 5 drivers/crypto/intel/qat/qat_common/qat_algs.c | 12 drivers/crypto/marvell/octeontx2/otx2_cpt_reqmgr.h | 125 +++- drivers/crypto/marvell/octeontx2/otx2_cptpf_ucode.c | 35 - drivers/fpga/zynq-fpga.c | 10 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 1 drivers/gpu/drm/amd/amdgpu/amdgpu_cper.c | 6 drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 3 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 6 drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 76 +- drivers/gpu/drm/amd/amdgpu/amdgpu_job.c | 7 drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c | 1 drivers/gpu/drm/amd/amdgpu/amdgpu_ucode.c | 1 drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 21 drivers/gpu/drm/amd/amdgpu/aqua_vanjaram.c | 5 drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 14 drivers/gpu/drm/amd/amdgpu/imu_v12_0.c | 13 drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c | 57 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_3.c | 105 ++++ drivers/gpu/drm/amd/amdgpu/mmhub_v4_1_0.c | 34 - drivers/gpu/drm/amd/amdgpu/psp_v14_0.c | 2 drivers/gpu/drm/amd/amdgpu/soc15.c | 2 drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 2 drivers/gpu/drm/amd/amdkfd/kfd_module.c | 2 drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c | 61 +- drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 20 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 19 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c | 28 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 2 drivers/gpu/drm/amd/display/dc/bios/bios_parser.c | 5 drivers/gpu/drm/amd/display/dc/bios/command_table.c | 2 drivers/gpu/drm/amd/display/dc/clk_mgr/clk_mgr.c | 1 drivers/gpu/drm/amd/display/dc/clk_mgr/dce100/dce_clk_mgr.c | 19 drivers/gpu/drm/amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 40 - drivers/gpu/drm/amd/display/dc/clk_mgr/dce60/dce60_clk_mgr.c | 31 - drivers/gpu/drm/amd/display/dc/core/dc.c | 34 - drivers/gpu/drm/amd/display/dc/resource/dce60/dce60_resource.c | 34 - drivers/gpu/drm/amd/display/modules/hdcp/hdcp_psp.c | 3 drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 16 drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c | 11 drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 30 - drivers/gpu/drm/display/drm_dp_helper.c | 2 drivers/gpu/drm/drm_format_helper.c | 108 +++- drivers/gpu/drm/drm_format_internal.h | 8 drivers/gpu/drm/drm_panic_qr.rs | 22 drivers/gpu/drm/hisilicon/hibmc/dp/dp_link.c | 14 drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 22 drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.h | 1 drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_i2c.c | 5 drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_vdac.c | 11 drivers/gpu/drm/i915/display/intel_display_irq.c | 4 drivers/gpu/drm/i915/display/intel_tc.c | 93 ++- drivers/gpu/drm/i915/gt/intel_workarounds.c | 20 drivers/gpu/drm/nouveau/nvif/vmm.c | 3 drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/rpc.c | 4 drivers/gpu/drm/nova/file.rs | 3 drivers/gpu/drm/tests/drm_format_helper_test.c | 111 ---- drivers/gpu/drm/xe/Kconfig | 1 drivers/gpu/drm/xe/xe_migrate.c | 2 drivers/gpu/drm/xe/xe_pxp_submit.c | 2 drivers/gpu/drm/xe/xe_shrinker.c | 51 + drivers/gpu/drm/xe/xe_vm.c | 48 - drivers/gpu/drm/xe/xe_vm.h | 2 drivers/hwmon/gsc-hwmon.c | 4 drivers/i2c/busses/i2c-qcom-geni.c | 6 drivers/i2c/busses/i2c-rtl9300.c | 20 drivers/iio/accel/sca3300.c | 2 drivers/iio/adc/Kconfig | 2 drivers/iio/adc/ad7124.c | 14 drivers/iio/adc/ad7173.c | 137 ++++- drivers/iio/adc/ad7380.c | 1 drivers/iio/adc/ad_sigma_delta.c | 4 drivers/iio/adc/rzg2l_adc.c | 33 - drivers/iio/imu/bno055/bno055.c | 11 drivers/iio/imu/inv_icm42600/inv_icm42600.h | 8 drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 31 - drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 22 drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h | 10 drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 6 drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 41 - drivers/iio/imu/inv_icm42600/inv_icm42600_temp.c | 12 drivers/iio/light/as73211.c | 2 drivers/iio/pressure/bmp280-core.c | 9 drivers/iio/proximity/isl29501.c | 16 drivers/iio/temperature/maxim_thermocouple.c | 26 - drivers/infiniband/core/umem_odp.c | 4 drivers/infiniband/hw/bnxt_re/ib_verbs.c | 8 drivers/infiniband/hw/bnxt_re/main.c | 23 drivers/infiniband/hw/bnxt_re/qplib_fp.c | 30 - drivers/infiniband/hw/bnxt_re/qplib_fp.h | 2 drivers/infiniband/hw/bnxt_re/qplib_res.c | 2 drivers/infiniband/hw/erdma/erdma_verbs.c | 6 drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 6 drivers/infiniband/hw/hns/hns_roce_restrack.c | 9 drivers/infiniband/sw/rxe/rxe_net.c | 29 - drivers/infiniband/sw/rxe/rxe_qp.c | 2 drivers/iommu/amd/init.c | 4 drivers/iommu/apple-dart.c | 1 drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 2 drivers/iommu/intel/iommu.c | 1 drivers/iommu/iommufd/selftest.c | 1 drivers/iommu/riscv/iommu.c | 3 drivers/iommu/virtio-iommu.c | 19 drivers/md/dm-crypt.c | 49 + drivers/md/dm-raid.c | 42 - drivers/md/dm.c | 17 drivers/md/md-bitmap.c | 8 drivers/md/md-cluster.c | 16 drivers/md/md.c | 110 ++-- drivers/md/md.h | 2 drivers/md/raid0.c | 6 drivers/md/raid1-10.c | 2 drivers/md/raid1.c | 10 drivers/md/raid10.c | 16 drivers/md/raid5-ppl.c | 6 drivers/md/raid5.c | 30 - drivers/media/cec/usb/rainshadow/rainshadow-cec.c | 3 drivers/media/i2c/hi556.c | 26 - drivers/media/i2c/mt9m114.c | 8 drivers/media/i2c/ov2659.c | 3 drivers/media/pci/intel/ipu6/ipu6-isys-csi2.c | 12 drivers/media/pci/intel/ivsc/mei_ace.c | 2 drivers/media/pci/intel/ivsc/mei_csi.c | 2 drivers/media/platform/qcom/camss/camss-csiphy-3ph-1-0.c | 3 drivers/media/platform/qcom/camss/camss.c | 20 drivers/media/platform/qcom/iris/iris_buffer.c | 20 drivers/media/platform/qcom/iris/iris_buffer.h | 3 drivers/media/platform/qcom/iris/iris_ctrls.c | 7 drivers/media/platform/qcom/iris/iris_hfi_gen1_command.c | 27 - drivers/media/platform/qcom/iris/iris_hfi_gen1_defines.h | 1 drivers/media/platform/qcom/iris/iris_hfi_gen1_response.c | 20 drivers/media/platform/qcom/iris/iris_hfi_gen2_command.c | 4 drivers/media/platform/qcom/iris/iris_hfi_gen2_response.c | 11 drivers/media/platform/qcom/iris/iris_hfi_queue.c | 2 drivers/media/platform/qcom/iris/iris_instance.h | 2 drivers/media/platform/qcom/iris/iris_platform_common.h | 2 drivers/media/platform/qcom/iris/iris_platform_sm8250.c | 9 drivers/media/platform/qcom/iris/iris_state.c | 2 drivers/media/platform/qcom/iris/iris_state.h | 1 drivers/media/platform/qcom/iris/iris_vb2.c | 15 drivers/media/platform/qcom/iris/iris_vdec.c | 9 drivers/media/platform/qcom/iris/iris_vidc.c | 33 + drivers/media/platform/qcom/venus/core.c | 18 drivers/media/platform/qcom/venus/core.h | 2 drivers/media/platform/qcom/venus/hfi_venus.c | 5 drivers/media/platform/qcom/venus/vdec.c | 5 drivers/media/platform/qcom/venus/venc.c | 5 drivers/media/platform/raspberrypi/pisp_be/Kconfig | 1 drivers/media/platform/raspberrypi/pisp_be/pisp_be.c | 5 drivers/media/platform/verisilicon/rockchip_vpu_hw.c | 9 drivers/media/test-drivers/vivid/vivid-ctrls.c | 3 drivers/media/test-drivers/vivid/vivid-vid-cap.c | 4 drivers/media/usb/gspca/vicam.c | 10 drivers/media/usb/usbtv/usbtv-video.c | 4 drivers/media/v4l2-core/v4l2-ctrls-core.c | 1 drivers/memstick/core/memstick.c | 1 drivers/memstick/host/rtsx_usb_ms.c | 1 drivers/mfd/mt6397-core.c | 12 drivers/mmc/host/sdhci-of-arasan.c | 33 + drivers/mmc/host/sdhci-pci-gli.c | 37 - drivers/mmc/host/sdhci_am654.c | 18 drivers/most/core.c | 2 drivers/mtd/nand/raw/fsmc_nand.c | 2 drivers/mtd/nand/raw/renesas-nand-controller.c | 6 drivers/mtd/nand/spi/core.c | 5 drivers/mtd/spi-nor/swp.c | 19 drivers/net/bonding/bond_3ad.c | 67 +- drivers/net/bonding/bond_options.c | 1 drivers/net/dsa/microchip/ksz_common.c | 6 drivers/net/ethernet/airoha/airoha_ppe.c | 4 drivers/net/ethernet/broadcom/bnxt/bnxt.c | 2 drivers/net/ethernet/google/gve/gve_main.c | 2 drivers/net/ethernet/intel/igc/igc_main.c | 14 drivers/net/ethernet/intel/ixgbe/devlink/devlink.c | 1 drivers/net/ethernet/intel/ixgbe/ixgbe_xsk.c | 4 drivers/net/ethernet/marvell/octeontx2/af/rvu_npc_fs.c | 4 drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 2 drivers/net/ethernet/mellanox/mlx5/core/en/dcbnl.h | 1 drivers/net/ethernet/mellanox/mlx5/core/en/port_buffer.c | 18 drivers/net/ethernet/mellanox/mlx5/core/en/tc/ct_fs_hmfs.c | 2 drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 12 drivers/net/ethernet/mellanox/mlx5/core/esw/devlink_port.c | 4 drivers/net/ethernet/mellanox/mlx5/core/mlx5_core.h | 2 drivers/net/ethernet/mellanox/mlx5/core/port.c | 20 drivers/net/ethernet/mellanox/mlx5/core/steering/hws/bwc_complex.c | 41 + drivers/net/ethernet/mellanox/mlx5/core/steering/hws/cmd.c | 1 drivers/net/ethernet/mellanox/mlx5/core/steering/hws/cmd.h | 1 drivers/net/ethernet/mellanox/mlx5/core/steering/hws/fs_hws.c | 1 drivers/net/ethernet/mellanox/mlx5/core/steering/hws/matcher.c | 5 drivers/net/ethernet/mellanox/mlx5/core/steering/hws/mlx5hws.h | 1 drivers/net/ethernet/mellanox/mlx5/core/steering/hws/send.c | 1 drivers/net/ethernet/mellanox/mlx5/core/steering/hws/table.c | 13 drivers/net/ethernet/mellanox/mlx5/core/steering/hws/table.h | 3 drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 drivers/net/ethernet/mellanox/mlxsw/trap.h | 1 drivers/net/ethernet/microchip/lan865x/lan865x.c | 21 drivers/net/ethernet/realtek/rtase/rtase.h | 2 drivers/net/ethernet/stmicro/stmmac/dwmac-thead.c | 9 drivers/net/ethernet/ti/icssg/icssg_prueth.c | 72 +- drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 8 drivers/net/phy/mscc/mscc.h | 12 drivers/net/phy/mscc/mscc_main.c | 12 drivers/net/phy/mscc/mscc_ptp.c | 49 + drivers/net/ppp/ppp_generic.c | 17 drivers/net/usb/asix_devices.c | 2 drivers/net/wireless/ath/ath11k/ce.c | 3 drivers/net/wireless/ath/ath11k/dp_rx.c | 3 drivers/net/wireless/ath/ath11k/hal.c | 33 + drivers/net/wireless/ath/ath12k/ce.c | 3 drivers/net/wireless/ath/ath12k/hal.c | 38 + drivers/net/wireless/broadcom/brcm80211/brcmsmac/phy/phy_lcn.c | 2 drivers/pci/controller/dwc/pci-imx6.c | 12 drivers/pci/controller/dwc/pcie-designware.c | 8 drivers/pci/controller/pcie-rockchip-ep.c | 4 drivers/pci/controller/pcie-rockchip-host.c | 49 + drivers/pci/controller/pcie-rockchip.h | 12 drivers/pci/endpoint/pci-ep-cfs.c | 1 drivers/pci/endpoint/pci-epf-core.c | 2 drivers/pci/pci.h | 32 - drivers/pci/pcie/portdrv.c | 2 drivers/phy/qualcomm/phy-qcom-m31.c | 14 drivers/platform/chrome/cros_ec.c | 3 drivers/platform/x86/amd/hsmp/hsmp.c | 5 drivers/platform/x86/intel/uncore-frequency/uncore-frequency-tpmi.c | 5 drivers/pwm/pwm-imx-tpm.c | 9 drivers/pwm/pwm-mediatek.c | 71 +- drivers/regulator/pca9450-regulator.c | 13 drivers/regulator/tps65219-regulator.c | 12 drivers/s390/char/sclp.c | 11 drivers/scsi/mpi3mr/mpi3mr.h | 6 drivers/scsi/mpi3mr/mpi3mr_fw.c | 17 drivers/scsi/mpi3mr/mpi3mr_os.c | 2 drivers/scsi/qla4xxx/ql4_os.c | 2 drivers/soc/qcom/mdt_loader.c | 43 + drivers/soc/tegra/pmc.c | 51 + drivers/spi/spi-fsl-lpspi.c | 8 drivers/spi/spi-qpic-snand.c | 22 drivers/staging/media/imx/imx-media-csc-scaler.c | 2 drivers/tty/serial/8250/8250_port.c | 3 drivers/tty/vt/defkeymap.c_shipped | 112 ++++ drivers/tty/vt/keyboard.c | 2 drivers/ufs/core/ufshcd.c | 10 drivers/ufs/host/ufs-exynos.c | 4 drivers/ufs/host/ufs-qcom.c | 42 - drivers/ufs/host/ufshcd-pci.c | 42 + drivers/usb/atm/cxacru.c | 106 +--- drivers/usb/core/hcd.c | 20 drivers/usb/core/quirks.c | 1 drivers/usb/dwc3/dwc3-imx8mp.c | 7 drivers/usb/dwc3/dwc3-meson-g12a.c | 3 drivers/usb/dwc3/dwc3-pci.c | 2 drivers/usb/dwc3/ep0.c | 20 drivers/usb/dwc3/gadget.c | 19 drivers/usb/gadget/udc/renesas_usb3.c | 1 drivers/usb/host/xhci-hub.c | 3 drivers/usb/host/xhci-mem.c | 22 drivers/usb/host/xhci-pci-renesas.c | 7 drivers/usb/host/xhci-ring.c | 9 drivers/usb/host/xhci.c | 23 drivers/usb/host/xhci.h | 3 drivers/usb/musb/omap2430.c | 14 drivers/usb/storage/realtek_cr.c | 2 drivers/usb/storage/unusual_devs.h | 29 + drivers/usb/typec/tcpm/maxim_contaminant.c | 58 ++ drivers/usb/typec/tcpm/tcpci_maxim.h | 1 drivers/vhost/vsock.c | 6 drivers/video/console/vgacon.c | 2 fs/btrfs/ctree.c | 23 fs/btrfs/extent-tree.c | 2 fs/btrfs/extent_io.c | 94 +-- fs/btrfs/extent_io.h | 2 fs/btrfs/fiemap.c | 2 fs/btrfs/free-space-tree.c | 17 fs/btrfs/inode.c | 8 fs/btrfs/print-tree.c | 2 fs/btrfs/qgroup.c | 6 fs/btrfs/relocation.c | 4 fs/btrfs/subpage.c | 258 +++++----- fs/btrfs/subpage.h | 45 + fs/btrfs/super.c | 13 fs/btrfs/tree-log.c | 4 fs/btrfs/zoned.c | 70 ++ fs/buffer.c | 2 fs/debugfs/inode.c | 11 fs/erofs/Kconfig | 18 fs/ext4/fsmap.c | 23 fs/ext4/indirect.c | 4 fs/ext4/inode.c | 2 fs/ext4/orphan.c | 5 fs/ext4/super.c | 8 fs/f2fs/node.c | 10 fs/fhandle.c | 2 fs/internal.h | 3 fs/iomap/direct-io.c | 14 fs/jbd2/checkpoint.c | 1 fs/libfs.c | 27 - fs/namespace.c | 69 +- fs/netfs/read_collect.c | 4 fs/netfs/write_collect.c | 10 fs/netfs/write_issue.c | 4 fs/nfs/pagelist.c | 9 fs/nfs/write.c | 29 - fs/overlayfs/copy_up.c | 2 fs/proc/task_mmu.c | 4 fs/smb/client/smb2ops.c | 2 fs/smb/server/connection.c | 3 fs/smb/server/connection.h | 7 fs/smb/server/oplock.c | 13 fs/smb/server/transport_rdma.c | 5 fs/smb/server/transport_rdma.h | 4 fs/smb/server/transport_tcp.c | 26 - fs/splice.c | 3 fs/squashfs/super.c | 14 fs/xfs/libxfs/xfs_refcount.c | 4 fs/xfs/scrub/common.c | 3 fs/xfs/scrub/repair.c | 12 fs/xfs/scrub/scrub.c | 5 fs/xfs/xfs_attr_item.c | 5 fs/xfs/xfs_discard.c | 12 fs/xfs/xfs_fsmap.c | 4 fs/xfs/xfs_icache.c | 5 fs/xfs/xfs_inode.c | 7 fs/xfs/xfs_itable.c | 24 fs/xfs/xfs_iwalk.c | 11 fs/xfs/xfs_notify_failure.c | 6 fs/xfs/xfs_qm.c | 10 fs/xfs/xfs_rtalloc.c | 13 fs/xfs/xfs_trans.c | 56 +- fs/xfs/xfs_trans.h | 3 fs/xfs/xfs_zone_alloc.c | 10 fs/xfs/xfs_zone_gc.c | 5 include/crypto/hash.h | 2 include/crypto/internal/acompress.h | 5 include/drm/drm_format_helper.h | 9 include/drm/intel/pciids.h | 1 include/linux/blkdev.h | 1 include/linux/compiler.h | 8 include/linux/iosys-map.h | 7 include/linux/iov_iter.h | 20 include/linux/kcov.h | 47 - include/linux/mlx5/mlx5_ifc.h | 14 include/linux/netfs.h | 1 include/linux/nfs_page.h | 1 include/net/bluetooth/bluetooth.h | 4 include/net/bluetooth/hci.h | 1 include/net/bluetooth/hci_core.h | 54 +- include/net/bond_3ad.h | 1 include/net/devlink.h | 6 include/net/sch_generic.h | 11 include/sound/cs35l56.h | 5 include/trace/events/btrfs.h | 2 include/uapi/linux/pfrut.h | 1 include/uapi/linux/raid/md_p.h | 2 io_uring/futex.c | 3 kernel/Kconfig.kexec | 1 kernel/cgroup/cpuset.c | 9 kernel/cgroup/rstat.c | 3 kernel/kexec_handover.c | 29 - kernel/sched/ext.c | 4 kernel/signal.c | 6 kernel/trace/ftrace.c | 19 kernel/trace/trace.c | 34 - kernel/trace/trace.h | 10 mm/damon/core.c | 15 mm/damon/paddr.c | 4 mm/debug_vm_pgtable.c | 9 mm/filemap.c | 3 mm/kasan/kasan_test_c.c | 2 mm/memory-failure.c | 8 mm/mremap.c | 41 - net/bluetooth/hci_conn.c | 17 net/bluetooth/hci_core.c | 27 - net/bluetooth/hci_event.c | 15 net/bluetooth/hci_sync.c | 33 - net/bluetooth/iso.c | 20 net/bluetooth/mgmt.c | 13 net/bridge/br_multicast.c | 16 net/bridge/br_private.h | 2 net/core/dev.c | 12 net/devlink/port.c | 2 net/hsr/hsr_slave.c | 8 net/ipv4/netfilter/nf_reject_ipv4.c | 6 net/ipv6/netfilter/nf_reject_ipv6.c | 5 net/ipv6/seg6_hmac.c | 6 net/mptcp/options.c | 6 net/mptcp/pm.c | 18 net/mptcp/pm_kernel.c | 1 net/sched/sch_cake.c | 14 net/sched/sch_codel.c | 12 net/sched/sch_fq.c | 12 net/sched/sch_fq_codel.c | 12 net/sched/sch_fq_pie.c | 12 net/sched/sch_hhf.c | 12 net/sched/sch_htb.c | 2 net/sched/sch_pie.c | 12 net/smc/af_smc.c | 3 net/tls/tls_sw.c | 7 net/vmw_vsock/virtio_transport.c | 12 rust/kernel/alloc/allocator.rs | 30 - rust/kernel/alloc/allocator_test.rs | 11 rust/kernel/drm/device.rs | 32 - rust/kernel/faux.rs | 2 security/apparmor/lsm.c | 4 sound/core/timer.c | 4 sound/pci/hda/patch_realtek.c | 2 sound/pci/hda/tas2781_hda_i2c.c | 2 sound/soc/codecs/cs35l56-sdw.c | 69 -- sound/soc/codecs/cs35l56-shared.c | 29 + sound/soc/codecs/cs35l56.c | 2 sound/soc/codecs/cs35l56.h | 3 sound/soc/sof/amd/acp-loader.c | 6 sound/usb/stream.c | 2 sound/usb/validate.c | 2 tools/objtool/arch/loongarch/special.c | 23 tools/testing/selftests/net/mptcp/mptcp_connect.c | 5 tools/testing/selftests/net/mptcp/mptcp_inq.c | 5 tools/testing/selftests/net/mptcp/mptcp_sockopt.c | 5 tools/testing/selftests/net/mptcp/pm_netlink.sh | 1 498 files changed, 4865 insertions(+), 2704 deletions(-) Adrian Huang (Lenovo) (1): signal: Fix memory leak for PIDFD_SELF* sentinels Adrian Hunter (1): scsi: ufs: ufs-pci: Fix default runtime and system PM levels Akhilesh Patil (1): RDMA/core: Free pfn_list with appropriate kvfree call Al Viro (1): use uniform permission checks for all mount propagation changes Alan Huang (1): xfs: Remove unused label in xfs_dax_notify_dev_failure Aleksa Sarai (1): open_tree_attr: do not allow id-mapping changes without OPEN_TREE_CLONE Alex Deucher (7): drm/amdgpu/discovery: fix fw based ip discovery drm/amdgpu: add missing vram lost check for LEGACY RESET drm/amdgpu: track whether a queue is a kernel queue in amdgpu_mqd_prop drm/amdgpu: update mmhub 3.0.1 client id mappings drm/amdgpu: update mmhub 3.3 client id mappings drm/amdgpu: update mmhub 4.1.0 client id mappings drm/amdgpu/swm14: Update power limit logic Alex Guo (1): i2c: rtl9300: Fix out-of-bounds bug in rtl9300_i2c_smbus_xfer Alex Vesker (1): net/mlx5: HWS, Fix table creation UID Alexander Sverdlin (1): arm64: dts: ti: k3-pinctrl: Enable Schmitt Trigger by default Alexander Wilhelm (1): bus: mhi: host: Fix endianness of BHI vector table Alexei Lazar (1): net/mlx5e: Query FW for buffer ownership Amber Lin (1): drm/amdkfd: Destroy KFD debugfs after destroy KFD wq Amit Sunil Dhamne (2): usb: typec: maxim_contaminant: disable low power mode when reading comparator values usb: typec: maxim_contaminant: re-enable cc toggle if cc is open and port is clean Anantha Prabhu (1): RDMA/bnxt_re: Fix to initialize the PBL array Andrea Righi (1): sched/ext: Fix invalid task state transitions on class switch Andreas Dilger (1): ext4: check fast symlink for ea_inode correctly André Draszik (1): scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE Andy Shevchenko (1): iio: imu: inv_icm42600: Convert to uXX and sXX integer types Archana Patni (1): scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers Armen Ratner (1): net/mlx5e: Preserve shared buffer capacity during headroom updates Ashish Kalra (1): crypto: ccp - Fix SNP panic notifier unregistration Baihan Li (5): drm/hisilicon/hibmc: fix the i2c device resource leak when vdac init failed drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local drm/hisilicon/hibmc: fix the hibmc loaded failed bug drm/hisilicon/hibmc: fix rare monitors cannot display problem drm/hisilicon/hibmc: fix dp and vga cannot show together Bao D. Nguyen (1): scsi: ufs: ufs-qcom: Update esi_vec_mask for HW major version >= 6 Baokun Li (2): ext4: preserve SB_I_VERSION on remount jbd2: prevent softlockup in jbd2_log_do_checkpoint() Bart Van Assche (2): scsi: ufs: core: Fix IRQ lock inversion for the SCSI host lock scsi: ufs: core: Remove WARN_ON_ONCE() call from ufshcd_uic_cmd_compl() Bharat Bhushan (3): crypto: octeontx2 - Fix address alignment issue on ucode loading crypto: octeontx2 - Fix address alignment on CN10K A0/A1 and OcteonTX2 crypto: octeontx2 - Fix address alignment on CN10KB and CN10KA-B0 Bibo Mao (4): LoongArch: KVM: Make function kvm_own_lbt() robust LoongArch: KVM: Fix stack protector issue in send_ipi_data() LoongArch: KVM: Add address alignment check in pch_pic register access LoongArch: KVM: Use standard bitops API with eiointc Bingbu Cao (1): media: hi556: correct the test pattern configuration Bjorn Andersson (1): soc: qcom: mdt_loader: Ensure we don't read past the ELF header Bo Liu (OpenAnolis) (1): erofs: fix build error with CONFIG_EROFS_FS_ZIP_ACCEL=y Boshi Yu (2): RDMA/erdma: Fix ignored return value of init_kernel_qp RDMA/erdma: Fix unset QPN of GSI QP Bryan O'Donoghue (2): media: qcom: camss: csiphy-3ph: Fix inadvertent dropping of SDM660/SDM670 phy init media: qcom: camss: Remove extraneous -supply postfix on supply names Chao Yu (1): f2fs: fix to avoid out-of-boundary access in dnode page Charalampos Mitrodimas (1): debugfs: fix mount options not being applied Chen Yu (1): ACPI: pfr_update: Fix the driver update version check Chenyuan Yang (1): drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() Chi Zhiling (1): readahead: fix return value of page_cache_next_miss() when no hole is found Christian Brauner (1): libfs: massage path_from_stashed() to allow custom stashing behavior Christoph Hellwig (5): xfs: decouple xfs_trans_alloc_empty from xfs_trans_alloc xfs: return the allocated transaction from xfs_trans_alloc_empty xfs: improve the comments in xfs_select_zone_nowait xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags xfs: fix frozen file system assert in xfs_trans_alloc Christoph Manszewski (1): drm/xe: Fix vm_bind_ioctl double free bug Christoph Paasch (1): mptcp: drop skb if MPTCP skb extension allocation fails Claudiu Beznea (2): iio: adc: rzg2l_adc: Set driver data before enabling runtime PM iio: adc: rzg2l: Cleanup suspend/resume path Cristian Ciocaltea (3): arm64: dts: rockchip: Add HDMI PHY PLL clock source to VOP2 on rk3576 arm64: dts: rockchip: Enable HDMI PHY clk provider on rk3576 dt-bindings: display: vop2: Add optional PLL clock property for rk3576 D. Wythe (1): net/smc: fix UAF on smcsk after smc_listen_out() Damien Le Moal (7): ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig dm: dm-crypt: Do not partially accept write BIOs with zoned targets dm: Check for forbidden splitting of zone write operations ata: libata-scsi: Fix ata_to_sense_error() status handling ata: libata-scsi: Return aborted command when missing sense and result TF PCI: endpoint: Fix configfs group list head handling PCI: endpoint: Fix configfs group removal on driver teardown Dan Carpenter (6): cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table() media: gspca: Add bounds checking to firmware parser soc: qcom: mdt_loader: Fix error return values in mdt_header_valid() scsi: qla4xxx: Prevent a potential error pointer dereference ALSA: usb-audio: Fix size validation in convert_chmap_v3() regulator: tps65219: regulator: tps65219: Fix error codes in probe() Daniel Jurgens (1): net/mlx5: Base ECVF devlink port attrs from 0 Danilo Krummrich (4): rust: alloc: replace aligned_size() with Kmalloc::aligned_layout() rust: drm: ensure kmalloc() compatible Layout rust: drm: remove pin annotations from drm::Device rust: drm: don't pass the address of drm::Device to drm_dev_put() David Hildenbrand (1): mm/mremap: fix WARN with uffd that has remap events disabled David Howells (2): netfs: Fix unbuffered write error handling cifs: Fix oops due to uninitialised variable David Lechner (13): iio: adc: ad7173: fix num_slots iio: imu: bno055: fix OOB access of hw_xlate array iio: adc: ad_sigma_delta: change to buffer predisable iio: adc: ad7173: fix channels index for syscalib_mode iio: adc: ad7173: fix calibration channel iio: adc: ad7173: fix setting ODR in probe iio: adc: ad7380: fix missing max_conversion_rate_hz on adaq4381-4 iio: accel: sca3300: fix uninitialized iio scan data iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read() iio: adc: ad7124: fix channel lookup in syscalib functions iio: adc: ad7173: prevent scan if too many setups requested iio: proximity: isl29501: fix buffered read on big-endian systems iio: imu: inv_icm42600: use = { } instead of memset() David Sterba (1): btrfs: move transaction aborts to the error site in add_block_group_free_space() David Yat Sin (1): drm/amdkfd: Fix checkpoint-restore on multi-xcc Dewei Meng (1): ALSA: timer: fix ida_free call while not allocated Dikshita Agarwal (16): media: iris: Avoid updating frame size to firmware during reconfig media: iris: Drop port check for session property response media: iris: Fix buffer preparation failure during resolution change media: iris: Fix missing function pointer initialization media: iris: Fix NULL pointer dereference media: iris: Fix typo in depth variable media: iris: Prevent HFI queue writes when core is in deinit state media: iris: Remove deprecated property setting to firmware media: iris: Remove error check for non-zero v4l2 controls media: iris: Send V4L2_BUF_FLAG_ERROR for capture buffers with 0 filled length media: iris: Skip destroying internal buffer if not dequeued media: iris: Skip flush on first sequence change media: iris: Track flush responses to prevent premature completion media: iris: Update CAPTURE format info based on OUTPUT format media: iris: Verify internal buffer release on close media: iris: Remove unnecessary re-initialization of flush completion Dmitry Torokhov (1): mfd: mt6397: Do not use generic name for keypad sub-devices Dominique Martinet (1): iov_iter: iterate_folioq: fix handling of offset >= folio size Edward Adam Davis (1): comedi: pcl726: Prevent invalid irq number Emanuele Ghidoli (1): arm64: dts: ti: k3-am62-verdin: Enable pull-ups on I2C buses Eric Biggers (7): lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap lib/crypto: arm/poly1305: Fix register corruption in no-SIMD contexts lib/crypto: arm64/poly1305: Fix register corruption in no-SIMD contexts crypto: x86/aegis - Fix sleeping when disallowed on PREEMPT_RT crypto: x86/aegis - Add missing error checks ipv6: sr: Fix MAC comparison to be constant-time crypto: acomp - Fix CFI failure due to type punning Evgeniy Harchenko (1): ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6 Fanhua Li (1): drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor(). Filipe Manana (5): btrfs: always abort transaction on failure to add block group to free space tree btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() btrfs: reorganize logic at free_extent_buffer() for better readability btrfs: add comment for optimization in free_extent_buffer() btrfs: use refcount_t type for the extent buffer reference counter Finn Thain (1): m68k: Fix lost column on framebuffer debug console Florian Westphal (1): netfilter: nf_reject: don't leak dst refcount for loopback packets Frank Min (1): drm/amdgpu: add kicker fws loading for gfx12/smu14/psp14 Gabor Juhos (3): mtd: spinand: propagate spinand_wait() errors from spinand_write_page() spi: spi-qpic-snand: use correct CW_PER_PAGE value for OOB write spi: spi-qpic-snand: fix calculating of ECC OOB regions' properties Gang Ba (1): drm/amdgpu: Avoid extra evict-restore process. Geert Uytterhoeven (1): erofs: Do not select tristate symbols from bool symbols Geliang Tang (2): mptcp: remove duplicate sk_reset_timer call mptcp: disable add_addr retransmission when timeout is 0 Geraldo Nascimento (2): PCI: rockchip: Use standard PCIe definitions PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining Giovanni Cabiddu (2): crypto: qat - lower priority for skcipher and aead algorithms crypto: qat - flush misc workqueue during device shutdown Greg Kroah-Hartman (1): Linux 6.16.4 Gui-Dong Han (1): media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() Hangbin Liu (2): bonding: update LACP activity flag after setting lacp_active bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU Hans Verkuil (1): media: vivid: fix wrong pixel_array control size Hans de Goede (1): media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls Haoxiang Li (1): media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init() Hariprasad Kelam (1): Octeontx2-af: Skip overlap check for SPI field Harshal Gohel (1): i2c: rtl9300: Fix multi-byte I2C write Heikki Krogerus (1): usb: dwc3: pci: add support for the Intel Wildcat Lake Heiko Carstens (1): s390/mm: Do not map lowcore with identity mapping Helge Deller (2): Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()" apparmor: Fix 8-byte alignment for initial dfa blob streams Herbert Xu (1): crypto: hash - Increase HASH_MAX_DESCSIZE for hmac(sha3-224-s390) Herton R. Krzesinski (1): mm/debug_vm_pgtable: clear page table entries at destroy_args() Hong Guan (1): arm64: dts: ti: k3-am62a7-sk: fix pinmux for main_uart1 Horatiu Vultur (1): phy: mscc: Fix timestamping for vsc8584 Ian Abbott (2): comedi: Make insn_rw_emulate_bits() do insn->n samples comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() Ido Schimmel (1): mlxsw: spectrum: Forward packets with an IPv4 link-local source IP Igor Pylypiv (1): ata: libata-scsi: Fix CDL control Imre Deak (6): drm/i915/lnl+/tc: Fix handling of an enabled/disconnected dp-alt sink drm/i915/icl+/tc: Cache the max lane count value drm/i915/lnl+/tc: Fix max lane count HW readout drm/i915/lnl+/tc: Use the cached max lane count value drm/i915/icl+/tc: Convert AUX powered WARN to a debug message drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS JP Kobryn (1): cgroup: avoid null de-ref in css_rstat_exit() Jacopo Mondi (1): media: pisp_be: Fix pm_runtime underrun in probe Jakub Acs (1): net, hsr: reject HSR frame if skb can't hold tag Jakub Kicinski (1): tls: fix handling of zero-length records on the rx_list Jakub Ramaseuski (1): net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM Jan Beulich (1): compiler: remove __ADDRESSABLE_ASM{_STR,}() again Jan Kara (1): iomap: Fix broken data integrity guarantees for O_SYNC writes Jani Nikula (1): drm/i915: silence rpm wakeref asserts on GEN11_GU_MISC_IIR access Jann Horn (1): kasan/test: fix protection against compiler elision Jason Gunthorpe (1): iommu: Remove ops.pgsize_bitmap from drivers that don't use it Jason Xing (1): ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc Jean-Baptiste Maneyrol (1): iio: imu: inv_icm42600: change invalid data error to -EBUSY Jedrzej Jagielski (2): devlink: let driver opt out of automatic phys_port_name generation ixgbe: prevent from unwanted interface name changes Jens Axboe (1): io_uring/futex: ensure io_futex_wait() cleans up properly on failure Jialin Wang (1): proc: proc_maps_open allow proc_mem_open to return NULL Jiande Lu (1): Bluetooth: btmtk: Fix wait_on_bit_timeout interruption during shutdown Jiayi Li (1): memstick: Fix deadlock by moving removing flag earlier Jinjiang Tu (1): mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn Jiwei Sun (1): PCI: Fix link speed calculation on retrain failure Jocelyn Falempe (1): drm/panic: Add a u64 divide by 10 for arm32 Johan Hovold (10): usb: gadget: udc: renesas_usb3: fix device leak at unbind usb: musb: omap2430: fix device leak at unbind usb: dwc3: meson-g12a: fix device leaks at unbind usb: dwc3: imx8mp: fix device leak at unbind wifi: ath12k: fix dest ring-buffer corruption wifi: ath12k: fix source ring-buffer corruption wifi: ath12k: fix dest ring-buffer corruption when ring is full wifi: ath11k: fix dest ring-buffer corruption wifi: ath11k: fix source ring-buffer corruption wifi: ath11k: fix dest ring-buffer corruption when ring is full John David Anglin (8): parisc: Check region is readable by user in raw_copy_from_user() parisc: Define and use set_pte_at() parisc: Drop WARN_ON_ONCE() from flush_cache_vmap parisc: Rename pte_needs_flush() to pte_needs_cache_flush() in cache.c parisc: Revise __get_user() to probe user read access parisc: Revise gateway LWS calls to probe user read access parisc: Try to fixup kernel exception in bad_area_nosemaphore path of do_page_fault() parisc: Update comments in make_insert_tlb John Ernberg (1): crypto: caam - Prevent crash on suspend with iMX8QM / iMX8ULP Jon Hunter (1): soc/tegra: pmc: Ensure power-domains are in a known state Jonathan Cameron (1): iio: light: as73211: Ensure buffer holes are zeroed Jordan Rhee (1): gve: prevent ethtool ops after shutdown Jorge Ramirez-Ortiz (2): media: venus: hfi: explicitly release IRQ during teardown media: venus: protect against spurious interrupts during probe José Expósito (2): drm/tests: Fix endian warning drm/tests: Fix drm_test_fb_xrgb8888_to_xrgb2101010() on big-endian Judith Mendez (3): arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support arm64: dts: ti: k3-am62*: Move eMMC pinmux to top level board file mmc: sdhci_am654: Disable HS400 for AM62P SR1.0 and SR1.1 Julian Sun (1): block: restore default wbt enablement Junxian Huang (1): RDMA/hns: Fix dip entries leak on devices newer than hip09 Justin Lai (1): rtase: Fix Rx descriptor CRC error bit definition Kalesh AP (1): RDMA/bnxt_re: Fix a possible memory leak in the driver Kanglong Wang (1): LoongArch: Optimize module load time by optimizing PLT/GOT counting Kashyap Desai (2): RDMA/bnxt_re: Fix to do SRQ armena by default RDMA/bnxt_re: Fix to remove workload check in SRQ limit path Kathiravan Thirumoorthy (2): phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization sequence i2c: qcom-geni: fix I2C frequency table to achieve accurate bus rates Kaustabh Chakraborty (3): arm64: dts: exynos7870-j6lte: reduce memory ranges to base amount arm64: dts: exynos7870: add quirk to disable USB2 LPM in gadget mode arm64: dts: exynos7870-on7xelte: reduce memory ranges to base amount Kees Cook (1): iommu/amd: Avoid stack buffer overflow from kernel cmdline Konrad Dybcio (1): media: venus: Fix MSM8998 frequency table Krzysztof Kozlowski (2): dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks constraints Kuen-Han Tsai (1): usb: dwc3: Ignore late xferNotReady event to prevent halt timeout Kyoji Ogasawara (3): btrfs: fix incorrect log message for nobarrier mount option btrfs: restore mount option info messages during mount btrfs: fix printing of mount info messages for NODATACOW/NODATASUM Laurentiu Mihalcea (1): pwm: imx-tpm: Reset counter if CMOD is 0 Lauri Tirkkonen (1): drm/amd/display: fix initial backlight brightness calculation Leo Martins (1): btrfs: fix subpage deadlock in try_release_subpage_extent_buffer() Li Nan (1): md: rename recovery_cp to resync_offset Liao Yuanhong (1): ext4: use kmalloc_array() for array space allocation Lijo Lazar (2): drm/amdgpu: Update external revid for GC v9.5.0 drm/amdgpu: Update supported modes for GC v9.5.0 Liu01 Tong (1): drm/amdgpu: fix task hang from failed job submission during process kill Lorenzo Bianconi (1): net: airoha: ppe: Do not invalid PPE entries in case of SW hash collision Ludwig Disterhof (1): media: usbtv: Lock resolution while streaming Luiz Augusto von Dentz (4): Bluetooth: hci_sync: Fix scan state after PA Sync has been established Bluetooth: hci_core: Fix using {cis,bis}_capable for current settings Bluetooth: hci_core: Fix using ll_privacy_capable for current settings Bluetooth: hci_core: Fix not accounting for BIS/CIS/PA links separately Lukas Wunner (1): PCI/portdrv: Use is_pciehp instead of is_hotplug_bridge MD Danish Anwar (1): net: ti: icssg-prueth: Fix HSR and switch offload Enablement during firwmare reload. Macpaul Lin (1): scsi: dt-bindings: mediatek,ufs: Add ufs-disable-mcq flag for UFS host Mael GUERIN (1): USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera Marek Szyprowski (1): zynq_fpga: use sgtable-based scatterlist wrappers Marek Vasut (1): usb: renesas-xhci: Fix External ROM access timeouts Mario Limonciello (5): drm/amd: Restore cached power limit during resume drm/amd/display: Pass up errors for reset GPU that fails to init HW drm/amd/display: Revert "drm/amd/display: Fix AMDGPU_MAX_BL_LEVEL value" drm/amd/display: Avoid a NULL pointer dereference drm/amd: Restore cached manual clock settings during resume Masami Hiramatsu (Google) (1): tracing: fprobe-event: Sanitize wildcard for fprobe event name Mathis Foerst (1): media: mt9m114: Fix deadlock in get_frame_interval/set_frame_interval Matthieu Baerts (NGI0) (4): mptcp: pm: kernel: flush: do not reset ADD_ADDR limit selftests: mptcp: pm: check flush doesn't reset limits selftests: mptcp: connect: fix C23 extension warning selftests: mptcp: sockopt: fix C23 extension warning Matti Vaittinen (1): iio: adc: bd79124: Add GPIOLIB dependency Miao Li (1): usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive Miaoqian Lin (1): most: core: Drop device reference after usage in get_channel() Michael Chan (1): bnxt_en: Fix lockdep warning during rmmod Michael Walle (1): mtd: spi-nor: Fix spi_nor_try_unlock_all() Michel Dänzer (1): drm/amd/display: Add primary plane to commits for correct VRR handling Miguel Ojeda (3): rust: faux: fix C header link drm: nova-drm: fix 32-bit arm build rust: alloc: fix `rusttest` by providing `Cmalloc::aligned_layout` too Ming Lei (1): blk-mq: fix lockdep warning in __blk_mq_update_nr_hw_queues Minhong He (1): ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add Muhammad Usama Anjum (1): ASoC: SOF: amd: acp-loader: Use GFP_KERNEL for DMA allocations in resume context Myrrh Periwinkle (2): vt: keyboard: Don't process Unicode characters in K_OFF mode vt: defkeymap: Map keycodes above 127 to K_HOLE Namjae Jeon (1): ksmbd: extend the connection limiting mechanism to support IPv6 Naohiro Aota (3): btrfs: zoned: fix write time activation failure for metadata block group btrfs: subpage: keep TOWRITE tag until folio is cleaned btrfs: zoned: fix data relocation block group reservation Nathan Chancellor (3): usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init() wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table() drm/amdgpu: Initialize data to NULL in imu_v12_0_program_rlc_ram() NeilBrown (1): ovl: use I_MUTEX_PARENT when locking parent in ovl_create_temp() Nick Chan (1): arm64: dts: apple: t8012-j132: Include touchbar framebuffer node Nicolas Dufresne (1): media: verisilicon: Fix AV1 decoder clock frequency Nicolin Chen (1): iommu/arm-smmu-v3: Fix smmu_domain->nr_ats_masters decrement Niklas Cassel (1): PCI: dwc: Ensure that dw_pcie_wait_for_link() waits 100 ms after link up Niklas Neronin (1): usb: xhci: fix host not responding after suspend and resume Nilay Shroff (6): block: move elevator queue allocation logic into blk_mq_init_sched block: fix lockdep warning caused by lock dependency in elv_iosched_store block: fix potential deadlock while running nr_hw_queue update block: decrement block_rq_qos static key in rq_qos_del() block: skip q->rq_qos check in rq_qos_done_bio() block: avoid cpu_hotplug_lock depedency on freeze_lock Nitin Gote (1): iosys-map: Fix undefined behavior in iosys_map_clear() Nitin Rawat (1): scsi: ufs: ufs-qcom: Fix ESI null pointer dereference Ojaswin Mujoo (2): ext4: fix fsmap end of range reporting with bigalloc ext4: fix reserved gdt blocks handling in fsmap Oren Sidi (1): net/mlx5: Add IFC bits and enums for buf_ownership Parthiban Veerasooran (2): microchip: lan865x: fix missing netif_start_queue() call on device open microchip: lan865x: fix missing Timer Increment config for Rev.B0/B1 Pasha Tatashin (3): kho: init new_physxa->phys_bits to fix lockdep kho: mm: don't allow deferred struct page with KHO kho: warn if KHO is disabled due to an error Pauli Virtanen (1): Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established Peng Fan (1): regulator: pca9450: Use devm_register_sys_off_handler Peter Griffin (1): arm64: dts: exynos: gs101: ufs: add dma-coherent property Peter Oberparleiter (3): s390/sclp: Fix SCCB present check s390/hypfs: Avoid unnecessary ioctl registration in debugfs s390/hypfs: Enable limited access during lockdown Peter Shkenev (1): drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities Phillip Lougher (1): squashfs: fix memory leak in squashfs_fill_super Piotr Piórkowski (2): drm/xe: Assign ioctl xe file handler to vm in xe_vm_create drm/xe: Move ASID allocation and user PT BO tracking into xe_vm_create Pu Lehui (1): tracing: Limit access to parser->buffer when trace_get_user failed Qianfeng Rong (1): drm/nouveau/gsp: fix mismatched alloc/free for kvmalloc() Qingfang Deng (2): net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path ppp: fix race conditions in ppp_fill_forward_path Qu Wenruo (2): btrfs: add comments on the extra btrfs specific subpage bitmaps btrfs: rename btrfs_subpage structure Rafael J. Wysocki (2): PM: runtime: Take active children into account in pm_runtime_get_if_in_use() cpuidle: governors: menu: Avoid selecting states with too much latency Randy Dunlap (1): parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit compilers Ranjan Kumar (3): scsi: mpi3mr: Fix race between config read submit and interrupt completion scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems Ricardo Ribalda (2): media: venus: vdec: Clamp param smaller than 1fps and bigger than 240. media: venus: venc: Clamp param smaller than 1fps and bigger than 240 Richard Fitzgerald (1): ASoC: cs35l56: Handle new algorithms IDs for CS35L63 Richard Zhu (4): PCI: imx6: Add IMX8MQ_EP third 64-bit BAR in epc_features PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4 in epc_features PCI: imx6: Remove apps_reset toggling from imx_pcie_{assert/deassert}_core_reset PCI: imx6: Delay link start until configfs 'start' written Robin Murphy (1): iommu/virtio: Make instance lookup robust Sai Krishna Potthuri (1): mmc: sdhci-of-arasan: Ensure CD logic stabilization before power-up Sakari Ailus (2): media: ipu6: isys: Use correct pads for xlate_streams() media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() Salah Triki (1): iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe() Sam Edwards (1): arm64: dts: rockchip: Remove workaround that prevented Turing RK1 GPU power regulator control Sang-Heon Jeon (2): mm/damon/core: fix commit_ops_filters by using correct nth function mm/damon/core: fix damos_commit_filter not changing allow Sebastian Andrzej Siewior (1): kcov, usb: Don't disable interrupts in kcov_remote_start_usb_softirq() Sebastian Brzezinka (1): drm/i915/gt: Relocate compression repacking WA for JSL/EHL Selvarasu Ganesan (1): usb: dwc3: Remove WARN_ON for device endpoint command timeouts SeongJae Park (1): mm/damon/ops-common: ignore migration request to invalid nodes Sergey Shtylyov (1): Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync() Simon Richter (1): Mark xe driver as BROKEN if kernel page size is not 4kB Siyang Liu (1): drm/amd/display: fix a Null pointer dereference vulnerability Song Gao (1): LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu() Srinivas Pandruvada (1): platform/x86/intel-uncore-freq: Check write blocked for ELC Stefan Binding (2): ASoC: cs35l56: Update Firmware Addresses for CS35L63 for production silicon ASoC: cs35l56: Remove SoundWire Clock Divider workaround for CS35L63 Stefan Metzmacher (1): smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy() Stefan Wahren (1): spi: spi-fsl-lpspi: Clamp too high speed_hz Steven Rostedt (2): ftrace: Also allocate and copy hash for reading of filter files tracing: Remove unneeded goto out logic Suma Hegde (1): platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL Suraj Gupta (1): net: xilinx: axienet: Fix RX skb ring management in DMAengine mode Sven Eckelmann (2): i2c: rtl9300: Increase timeout for transfer polling i2c: rtl9300: Add missing count byte for SMBus Block Ops Takashi Iwai (2): ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation Theodore Ts'o (1): ext4: don't try to clear the orphan_present feature block device is r/o Thomas Bertschinger (1): fhandle: do_handle_open() should get FD with user flags Thomas Fourier (2): mtd: rawnand: fsmc: Add missing check after DMA map mtd: rawnand: renesas: Add missing check after DMA map Thomas Hellström (1): drm/xe: Defer buffer object shrinker write-backs and GPU waits Thomas Weißschuh (1): kbuild: userprogs: use correct linker when mixing clang and GNU ld Thomas Zimmermann (1): drm/tests: Do not use drm_fb_blit() in format-helper tests Thorsten Blum (3): accel/habanalabs/gaudi2: Use kvfree() for memory allocated with kvcalloc() cdx: Fix off-by-one error in cdx_rpmsg_probe() usb: storage: realtek_cr: Use correct byte order for bcs->Residue Tianxiang Peng (1): x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper Tiezhu Yang (2): objtool/LoongArch: Get table size correctly if LTO is enabled LoongArch: Pass annotate-tablejump option if LTO is enabled Tim Harvey (1): hwmon: (gsc-hwmon) fix fan pwm setpoint show functions Timur Kristóf (9): drm/amd/display: Fix DCE 6.0 and 6.4 PLL programming. drm/amd/display: Don't overwrite dce60_clk_mgr drm/amd/display: Don't overclock DCE 6 by 15% drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3 drm/amd/display: Fix DP audio DTO1 clock source on DCE 6. drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs drm/amd/display: Adjust DCE 8-10 clock, don't overclock by 15% drm/amd/display: Don't print errors for nonexistent connectors Tom Chung (1): drm/amd/display: Fix Xorg desktop unresponsive on Replay panel Tristram Ha (1): net: dsa: microchip: Fix KSZ9477 HSR port setup issue Trond Myklebust (1): NFS: Fix a race when updating an existing write Tzung-Bi Shih (1): platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister() Uwe Kleine-König (3): pwm: mediatek: Handle hardware enable and clock enable separately pwm: mediatek: Fix duty and period setting ACPI: APEI: EINJ: Fix resource leak by remove callback in .exit.text ValdikSS (1): igc: fix disabling L1.2 PCI-E link substate on I226 on init Vedang Nagar (1): media: venus: Add a check for packet size after reading from shared memory Victor Shih (3): mmc: sdhci-pci-gli: Add a new function to simplify the code mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency Vlad Dogaru (1): net/mlx5: CT: Use the correct counter offset Vladimir Zapolskiy (1): media: qcom: camss: cleanup media device allocated resource on error path Vodapalli, Ravi Kumar (1): drm/xe/bmg: Add one additional PCI ID Waiman Long (2): cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key cgroup/cpuset: Fix a partition error with CPU hotplug Wang Liang (1): net: bridge: fix soft lockup in br_multicast_query_expired() Weitao Wang (1): usb: xhci: Fix slot_id resource race conflict Will Deacon (2): vsock/virtio: Validate length in packet header before skb_put() vhost/vsock: Avoid allocating arbitrarily-sized SKBs William Liu (3): net/sched: Fix backlog accounting in qdisc_dequeue_internal net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate Xaver Hugl (1): amdgpu/amdgpu_discovery: increase timeout limit for IFWI init XianLiang Huang (1): iommu/riscv: prevent NULL deref in iova_to_phys Xu Yang (1): usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test Xu Yilun (1): fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable() Yang Li (2): Bluetooth: hci_sync: Prevent unintended PA sync when SID is 0xFF Bluetooth: Add PA_LINK to distinguish BIG sync and PA sync connections Yang Wang (1): drm/amd/amdgpu: fix missing lock for cper.ring->rptr/wptr access Yao Zi (1): net: stmmac: thead: Enable TX clock before MAC initialization Yazen Ghannam (1): x86/CPU/AMD: Ignore invalid reset reason value Ye Bin (1): fs/buffer: fix use-after-free when call bh_read() helper Yevgeny Kliteynik (2): net/mlx5: HWS, fix bad parameter in CQ creation net/mlx5: HWS, fix complex rules rehash error flow Youssef Samir (1): bus: mhi: host: Detect events pointing to unexpected TREs YuanShang (1): drm/amdgpu: Retain job->vm in amdgpu_job_prepare_job Yuichiro Tsuji (1): net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization Yunhui Cui (1): serial: 8250: fix panic due to PSLVERR Yuntao Wang (1): fs: fix incorrect lflags value in the move_mount syscall Zenm Chen (1): USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles Zhang Shurong (1): media: ov2659: Fix memory leaks in ov2659_probe() Zhang Yi (1): ext4: fix hole length calculation overflow in non-extent inodes Zheng Qixing (2): md: add helper rdev_needs_recovery() md: fix sync_action incorrect display during resync Zhu Yanjun (1): RDMA/rxe: Flush delayed SKBs while releasing RXE resources Ziyan Xu (1): ksmbd: fix refcount leak causing resource not released wenglianfa (1): RDMA/hns: Fix querying wrong SCC context for DIP algorithm

2 weeks, 3 days

1
1
0 0

Linux 6.12.44

by Greg Kroah-Hartman

I'm announcing the release of the 6.12.44 kernel. All users of the 6.12 kernel series must upgrade. The updated 6.12.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.12.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/devicetree/bindings/display/sprd/sprd,sharkl3-dpu.yaml | 2 Documentation/devicetree/bindings/display/sprd/sprd,sharkl3-dsi-host.yaml | 2 Documentation/devicetree/bindings/ufs/mediatek,ufs.yaml | 4 Documentation/networking/mptcp-sysctl.rst | 2 Makefile | 4 arch/arm64/boot/dts/exynos/google/gs101.dtsi | 1 arch/arm64/boot/dts/ti/k3-am62-lp-sk.dts | 36 + arch/arm64/boot/dts/ti/k3-am62-main.dtsi | 1 arch/arm64/boot/dts/ti/k3-am62-phycore-som.dtsi | 1 arch/arm64/boot/dts/ti/k3-am62-verdin.dtsi | 12 arch/arm64/boot/dts/ti/k3-am625-beagleplay.dts | 2 arch/arm64/boot/dts/ti/k3-am625-sk.dts | 24 arch/arm64/boot/dts/ti/k3-am62a-phycore-som.dtsi | 1 arch/arm64/boot/dts/ti/k3-am62a7-sk.dts | 7 arch/arm64/boot/dts/ti/k3-am62p5-sk.dts | 2 arch/arm64/boot/dts/ti/k3-am62x-sk-common.dtsi | 24 arch/arm64/boot/dts/ti/k3-am642-evm.dts | 1 arch/arm64/boot/dts/ti/k3-am654-base-board.dts | 1 arch/arm64/boot/dts/ti/k3-am6548-iot2050-advanced-common.dtsi | 1 arch/arm64/boot/dts/ti/k3-am69-sk.dts | 1 arch/arm64/boot/dts/ti/k3-pinctrl.h | 15 arch/loongarch/kernel/module-sections.c | 36 - arch/loongarch/kvm/vcpu.c | 8 arch/m68k/kernel/head.S | 31 arch/mips/crypto/chacha-core.S | 20 arch/parisc/Makefile | 4 arch/parisc/include/asm/pgtable.h | 7 arch/parisc/include/asm/special_insns.h | 28 arch/parisc/include/asm/uaccess.h | 21 arch/parisc/kernel/cache.c | 6 arch/parisc/kernel/entry.S | 17 arch/parisc/kernel/syscall.S | 30 arch/parisc/lib/memcpy.c | 19 arch/parisc/mm/fault.c | 4 arch/powerpc/boot/Makefile | 1 arch/s390/boot/vmem.c | 3 arch/s390/hypfs/hypfs_dbfs.c | 19 arch/x86/coco/sev/shared.c | 3 arch/x86/include/asm/xen/hypercall.h | 5 arch/x86/kernel/cpu/hygon.c | 3 arch/x86/kvm/mmu/mmu.c | 10 drivers/accel/habanalabs/gaudi2/gaudi2.c | 2 drivers/acpi/pfr_update.c | 2 drivers/ata/Kconfig | 36 - drivers/ata/libata-scsi.c | 58 - drivers/base/power/runtime.c | 27 drivers/bluetooth/btmtk.c | 7 drivers/bus/mhi/host/boot.c | 8 drivers/bus/mhi/host/internal.h | 4 drivers/bus/mhi/host/main.c | 12 drivers/cdx/controller/cdx_rpmsg.c | 3 drivers/comedi/comedi_fops.c | 5 drivers/comedi/drivers.c | 23 drivers/comedi/drivers/pcl726.c | 3 drivers/cpufreq/armada-8k-cpufreq.c | 2 drivers/cpuidle/governors/menu.c | 101 -- drivers/crypto/caam/ctrl.c | 5 drivers/crypto/caam/intern.h | 1 drivers/crypto/intel/qat/qat_common/adf_common_drv.h | 1 drivers/crypto/intel/qat/qat_common/adf_init.c | 1 drivers/crypto/intel/qat/qat_common/adf_isr.c | 5 drivers/crypto/intel/qat/qat_common/qat_algs.c | 12 drivers/crypto/marvell/octeontx2/otx2_cpt_reqmgr.h | 125 ++- drivers/crypto/marvell/octeontx2/otx2_cptpf_ucode.c | 35 drivers/fpga/zynq-fpga.c | 10 drivers/gpu/drm/Kconfig | 5 drivers/gpu/drm/Makefile | 1 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 5 drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 76 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 6 drivers/gpu/drm/amd/amdgpu/imu_v12_0.c | 2 drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c | 57 - drivers/gpu/drm/amd/amdgpu/mmhub_v4_1_0.c | 34 drivers/gpu/drm/amd/amdgpu/soc15.c | 2 drivers/gpu/drm/amd/amdkfd/kfd_module.c | 2 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 3 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c | 28 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 2 drivers/gpu/drm/amd/display/dc/bios/bios_parser.c | 5 drivers/gpu/drm/amd/display/dc/bios/command_table.c | 2 drivers/gpu/drm/amd/display/dc/clk_mgr/clk_mgr.c | 1 drivers/gpu/drm/amd/display/dc/clk_mgr/dce100/dce_clk_mgr.c | 2 drivers/gpu/drm/amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 40 - drivers/gpu/drm/amd/display/dc/clk_mgr/dce60/dce60_clk_mgr.c | 31 drivers/gpu/drm/amd/display/dc/core/dc.c | 34 drivers/gpu/drm/amd/display/modules/hdcp/hdcp_psp.c | 3 drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 6 drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 30 drivers/gpu/drm/display/drm_dp_helper.c | 2 drivers/gpu/drm/drm_draw.c | 155 ++++ drivers/gpu/drm/drm_draw_internal.h | 56 + drivers/gpu/drm/drm_format_helper.c | 234 ++++-- drivers/gpu/drm/drm_format_internal.h | 127 +++ drivers/gpu/drm/drm_panic.c | 269 ------- drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 4 drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.h | 17 drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_i2c.c | 46 - drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_vdac.c | 29 drivers/gpu/drm/i915/display/intel_tc.c | 58 + drivers/gpu/drm/nouveau/nvif/vmm.c | 3 drivers/gpu/drm/tests/drm_format_helper_test.c | 176 ++-- drivers/gpu/drm/xe/Kconfig | 1 drivers/hwmon/gsc-hwmon.c | 4 drivers/iio/adc/ad7173.c | 3 drivers/iio/adc/ad_sigma_delta.c | 4 drivers/iio/imu/bno055/bno055.c | 11 drivers/iio/imu/inv_icm42600/inv_icm42600.h | 8 drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 33 drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 22 drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h | 10 drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 6 drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 43 - drivers/iio/imu/inv_icm42600/inv_icm42600_temp.c | 12 drivers/iio/light/adjd_s311.c | 2 drivers/iio/light/as73211.c | 4 drivers/iio/light/bh1745.c | 2 drivers/iio/light/isl29125.c | 2 drivers/iio/light/ltr501.c | 2 drivers/iio/light/max44000.c | 2 drivers/iio/light/rohm-bu27034.c | 2 drivers/iio/light/rpr0521.c | 2 drivers/iio/light/st_uvis25.h | 2 drivers/iio/light/tcs3414.c | 2 drivers/iio/light/tcs3472.c | 2 drivers/iio/pressure/bmp280-core.c | 9 drivers/iio/proximity/isl29501.c | 16 drivers/iio/temperature/maxim_thermocouple.c | 26 drivers/infiniband/hw/bnxt_re/ib_verbs.c | 8 drivers/infiniband/hw/bnxt_re/main.c | 23 drivers/infiniband/hw/bnxt_re/qplib_fp.c | 30 drivers/infiniband/hw/bnxt_re/qplib_fp.h | 2 drivers/infiniband/hw/bnxt_re/qplib_res.c | 2 drivers/infiniband/hw/erdma/erdma_verbs.c | 4 drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 6 drivers/infiniband/hw/hns/hns_roce_restrack.c | 9 drivers/infiniband/sw/rxe/rxe_net.c | 29 drivers/infiniband/sw/rxe/rxe_qp.c | 2 drivers/iommu/amd/init.c | 4 drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 2 drivers/md/dm-crypt.c | 49 + drivers/md/dm.c | 17 drivers/media/cec/usb/rainshadow/rainshadow-cec.c | 3 drivers/media/i2c/hi556.c | 26 drivers/media/i2c/mt9m114.c | 8 drivers/media/i2c/ov2659.c | 3 drivers/media/pci/intel/ipu6/ipu6-isys-csi2.c | 12 drivers/media/pci/intel/ivsc/mei_ace.c | 2 drivers/media/pci/intel/ivsc/mei_csi.c | 2 drivers/media/platform/qcom/camss/camss.c | 4 drivers/media/platform/qcom/venus/core.c | 18 drivers/media/platform/qcom/venus/core.h | 2 drivers/media/platform/qcom/venus/hfi_venus.c | 5 drivers/media/platform/qcom/venus/vdec.c | 5 drivers/media/platform/qcom/venus/venc.c | 5 drivers/media/platform/raspberrypi/pisp_be/Kconfig | 1 drivers/media/platform/raspberrypi/pisp_be/pisp_be.c | 5 drivers/media/platform/verisilicon/rockchip_vpu_hw.c | 9 drivers/media/test-drivers/vivid/vivid-ctrls.c | 3 drivers/media/test-drivers/vivid/vivid-vid-cap.c | 4 drivers/media/usb/gspca/vicam.c | 10 drivers/media/usb/usbtv/usbtv-video.c | 4 drivers/media/v4l2-core/v4l2-ctrls-core.c | 1 drivers/memstick/core/memstick.c | 1 drivers/memstick/host/rtsx_usb_ms.c | 1 drivers/mmc/host/sdhci-pci-gli.c | 37 - drivers/mmc/host/sdhci_am654.c | 18 drivers/most/core.c | 2 drivers/mtd/nand/raw/fsmc_nand.c | 2 drivers/mtd/nand/raw/renesas-nand-controller.c | 6 drivers/mtd/nand/spi/core.c | 5 drivers/mtd/spi-nor/swp.c | 19 drivers/net/bonding/bond_3ad.c | 67 + drivers/net/bonding/bond_options.c | 1 drivers/net/can/ti_hecc.c | 2 drivers/net/dsa/microchip/ksz_common.c | 6 drivers/net/ethernet/google/gve/gve_main.c | 2 drivers/net/ethernet/intel/igc/igc_main.c | 14 drivers/net/ethernet/intel/ixgbe/ixgbe_xsk.c | 4 drivers/net/ethernet/marvell/octeontx2/af/rvu_npc_fs.c | 4 drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 2 drivers/net/ethernet/mellanox/mlx5/core/en/dcbnl.h | 1 drivers/net/ethernet/mellanox/mlx5/core/en/port_buffer.c | 18 drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 12 drivers/net/ethernet/mellanox/mlx5/core/esw/devlink_port.c | 4 drivers/net/ethernet/mellanox/mlx5/core/mlx5_core.h | 87 ++ drivers/net/ethernet/mellanox/mlx5/core/port.c | 40 - drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 drivers/net/ethernet/mellanox/mlxsw/trap.h | 1 drivers/net/ethernet/microchip/lan865x/lan865x.c | 21 drivers/net/ethernet/realtek/rtase/rtase.h | 2 drivers/net/ethernet/ti/icssg/icssg_prueth.c | 72 +- drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 8 drivers/net/phy/mscc/mscc.h | 12 drivers/net/phy/mscc/mscc_main.c | 12 drivers/net/phy/mscc/mscc_ptp.c | 49 + drivers/net/ppp/ppp_generic.c | 17 drivers/net/usb/asix_devices.c | 2 drivers/net/wireless/ath/ath11k/ce.c | 3 drivers/net/wireless/ath/ath11k/dp_rx.c | 3 drivers/net/wireless/ath/ath11k/hal.c | 33 drivers/net/wireless/ath/ath12k/ce.c | 3 drivers/net/wireless/ath/ath12k/hal.c | 38 - drivers/net/wireless/broadcom/brcm80211/brcmsmac/phy/phy_lcn.c | 2 drivers/pci/controller/dwc/pci-imx6.c | 32 drivers/pci/controller/pcie-rockchip-host.c | 49 - drivers/pci/controller/pcie-rockchip.h | 11 drivers/pci/endpoint/pci-ep-cfs.c | 1 drivers/pci/endpoint/pci-epf-core.c | 2 drivers/pci/pcie/portdrv.c | 2 drivers/phy/qualcomm/phy-qcom-m31.c | 14 drivers/platform/chrome/cros_ec.c | 3 drivers/platform/x86/intel/uncore-frequency/uncore-frequency-tpmi.c | 5 drivers/pwm/pwm-imx-tpm.c | 9 drivers/pwm/pwm-mediatek.c | 71 + drivers/s390/char/sclp.c | 11 drivers/scsi/mpi3mr/mpi3mr.h | 6 drivers/scsi/mpi3mr/mpi3mr_fw.c | 17 drivers/scsi/mpi3mr/mpi3mr_os.c | 2 drivers/scsi/qla4xxx/ql4_os.c | 2 drivers/scsi/scsi_lib.c | 3 drivers/soc/qcom/mdt_loader.c | 43 + drivers/soc/tegra/pmc.c | 51 - drivers/spi/spi-fsl-lpspi.c | 8 drivers/staging/media/imx/imx-media-csc-scaler.c | 2 drivers/tty/serial/8250/8250_port.c | 3 drivers/tty/vt/defkeymap.c_shipped | 112 +++ drivers/tty/vt/keyboard.c | 2 drivers/ufs/host/ufs-exynos.c | 4 drivers/ufs/host/ufshcd-pci.c | 42 + drivers/usb/atm/cxacru.c | 106 +- drivers/usb/core/hcd.c | 20 drivers/usb/core/quirks.c | 1 drivers/usb/dwc3/dwc3-imx8mp.c | 7 drivers/usb/dwc3/dwc3-meson-g12a.c | 3 drivers/usb/dwc3/dwc3-pci.c | 2 drivers/usb/dwc3/ep0.c | 20 drivers/usb/dwc3/gadget.c | 19 drivers/usb/gadget/udc/renesas_usb3.c | 1 drivers/usb/host/xhci-hub.c | 3 drivers/usb/host/xhci-mem.c | 22 drivers/usb/host/xhci-pci-renesas.c | 7 drivers/usb/host/xhci-ring.c | 9 drivers/usb/host/xhci.c | 21 drivers/usb/host/xhci.h | 3 drivers/usb/musb/omap2430.c | 14 drivers/usb/storage/realtek_cr.c | 2 drivers/usb/storage/unusual_devs.h | 29 drivers/usb/typec/class.c | 7 drivers/usb/typec/tcpm/fusb302.c | 32 drivers/usb/typec/tcpm/maxim_contaminant.c | 58 + drivers/usb/typec/tcpm/qcom/qcom_pmic_typec_pdphy.c | 3 drivers/usb/typec/tcpm/qcom/qcom_pmic_typec_pdphy_stub.c | 3 drivers/usb/typec/tcpm/qcom/qcom_pmic_typec_port.c | 4 drivers/usb/typec/tcpm/tcpci_maxim.h | 1 drivers/usb/typec/tcpm/tcpm.c | 7 drivers/vhost/vsock.c | 6 drivers/video/console/vgacon.c | 2 fs/btrfs/block-group.c | 59 - fs/btrfs/ctree.c | 9 fs/btrfs/free-space-tree.c | 17 fs/btrfs/qgroup.c | 38 - fs/btrfs/send.c | 359 +++++----- fs/btrfs/subpage.c | 19 fs/btrfs/super.c | 13 fs/btrfs/transaction.c | 1 fs/btrfs/zoned.c | 13 fs/buffer.c | 2 fs/debugfs/inode.c | 11 fs/ext4/fsmap.c | 23 fs/ext4/indirect.c | 4 fs/ext4/inode.c | 2 fs/ext4/orphan.c | 5 fs/ext4/super.c | 8 fs/f2fs/node.c | 10 fs/file.c | 75 -- fs/jbd2/checkpoint.c | 1 fs/namespace.c | 34 fs/netfs/write_collect.c | 10 fs/netfs/write_issue.c | 4 fs/nfs/pagelist.c | 9 fs/nfs/write.c | 29 fs/overlayfs/copy_up.c | 2 fs/smb/client/smb2ops.c | 2 fs/smb/server/connection.c | 3 fs/smb/server/connection.h | 7 fs/smb/server/oplock.c | 13 fs/smb/server/transport_rdma.c | 5 fs/smb/server/transport_rdma.h | 4 fs/smb/server/transport_tcp.c | 26 fs/splice.c | 3 fs/squashfs/super.c | 14 fs/xfs/xfs_itable.c | 6 include/drm/drm_format_helper.h | 12 include/linux/call_once.h | 47 - include/linux/compiler.h | 8 include/linux/iosys-map.h | 7 include/linux/iov_iter.h | 20 include/linux/kcov.h | 47 - include/linux/mlx5/mlx5_ifc.h | 14 include/linux/mlx5/port.h | 85 -- include/linux/netfs.h | 1 include/linux/nfs_page.h | 1 include/net/bond_3ad.h | 1 include/uapi/linux/pfrut.h | 1 io_uring/futex.c | 3 io_uring/net.c | 27 kernel/cgroup/cpuset.c | 9 kernel/sched/ext.c | 18 kernel/trace/ftrace.c | 19 kernel/trace/trace.c | 34 kernel/trace/trace.h | 10 mm/damon/paddr.c | 4 mm/debug_vm_pgtable.c | 9 mm/filemap.c | 3 mm/memory-failure.c | 8 net/bluetooth/hci_conn.c | 3 net/bluetooth/hci_event.c | 8 net/bluetooth/hci_sync.c | 19 net/bridge/br_multicast.c | 16 net/bridge/br_private.h | 2 net/core/dev.c | 12 net/hsr/hsr_slave.c | 8 net/ipv4/netfilter/nf_reject_ipv4.c | 6 net/ipv6/netfilter/nf_reject_ipv6.c | 5 net/ipv6/seg6_hmac.c | 6 net/mptcp/options.c | 6 net/mptcp/pm_netlink.c | 19 net/sched/sch_cake.c | 14 net/sched/sch_htb.c | 2 net/smc/af_smc.c | 3 net/tls/tls_sw.c | 7 net/vmw_vsock/virtio_transport.c | 12 rust/kernel/alloc/allocator.rs | 30 rust/kernel/alloc/allocator_test.rs | 11 security/apparmor/lsm.c | 4 sound/core/timer.c | 4 sound/pci/hda/patch_realtek.c | 2 sound/soc/sof/amd/acp-loader.c | 6 sound/usb/stream.c | 2 sound/usb/validate.c | 2 tools/testing/selftests/net/mptcp/pm_netlink.sh | 1 341 files changed, 3787 insertions(+), 2216 deletions(-) Adrian Hunter (1): scsi: ufs: ufs-pci: Fix default runtime and system PM levels Al Viro (2): use uniform permission checks for all mount propagation changes alloc_fdtable(): change calling conventions. Alex Deucher (4): drm/amdgpu/discovery: fix fw based ip discovery drm/amdgpu: update mmhub 3.0.1 client id mappings drm/amdgpu: update mmhub 4.1.0 client id mappings drm/amdgpu/swm14: Update power limit logic Alexander Sverdlin (1): arm64: dts: ti: k3-pinctrl: Enable Schmitt Trigger by default Alexander Wilhelm (1): bus: mhi: host: Fix endianness of BHI vector table Alexei Lazar (1): net/mlx5e: Query FW for buffer ownership Amber Lin (1): drm/amdkfd: Destroy KFD debugfs after destroy KFD wq Amit Sunil Dhamne (2): usb: typec: maxim_contaminant: disable low power mode when reading comparator values usb: typec: maxim_contaminant: re-enable cc toggle if cc is open and port is clean Anantha Prabhu (1): RDMA/bnxt_re: Fix to initialize the PBL array Andrea Righi (2): sched/ext: Fix invalid task state transitions on class switch sched_ext: initialize built-in idle state before ops.init() Andreas Dilger (1): ext4: check fast symlink for ea_inode correctly André Draszik (1): scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE Andy Shevchenko (1): iio: imu: inv_icm42600: Convert to uXX and sXX integer types Archana Patni (1): scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers Armen Ratner (1): net/mlx5e: Preserve shared buffer capacity during headroom updates Baihan Li (3): drm/hisilicon/hibmc: refactored struct hibmc_drm_private drm/hisilicon/hibmc: fix the i2c device resource leak when vdac init failed drm/hisilicon/hibmc: fix the hibmc loaded failed bug Baokun Li (2): jbd2: prevent softlockup in jbd2_log_do_checkpoint() ext4: preserve SB_I_VERSION on remount Bharat Bhushan (3): crypto: octeontx2 - Fix address alignment issue on ucode loading crypto: octeontx2 - Fix address alignment on CN10K A0/A1 and OcteonTX2 crypto: octeontx2 - Fix address alignment on CN10KB and CN10KA-B0 Bibo Mao (1): LoongArch: KVM: Make function kvm_own_lbt() robust Bingbu Cao (1): media: hi556: correct the test pattern configuration Bjorn Andersson (1): soc: qcom: mdt_loader: Ensure we don't read past the ELF header Boris Burkov (2): btrfs: explicitly ref count block_group on new_bgs list btrfs: codify pattern for adding block_group to bg_list Boshi Yu (1): RDMA/erdma: Fix ignored return value of init_kernel_qp Chao Yu (1): f2fs: fix to avoid out-of-boundary access in dnode page Charalampos Mitrodimas (1): debugfs: fix mount options not being applied Chen Yu (1): ACPI: pfr_update: Fix the driver update version check Chenyuan Yang (1): drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() Chi Zhiling (1): readahead: fix return value of page_cache_next_miss() when no hole is found Christian Loehle (1): cpuidle: menu: Remove iowait influence Christoph Hellwig (1): xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags Christoph Paasch (1): mptcp: drop skb if MPTCP skb extension allocation fails D. Wythe (1): net/smc: fix UAF on smcsk after smc_listen_out() Damien Le Moal (7): ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig dm: dm-crypt: Do not partially accept write BIOs with zoned targets dm: Check for forbidden splitting of zone write operations ata: libata-scsi: Fix ata_to_sense_error() status handling PCI: endpoint: Fix configfs group list head handling PCI: endpoint: Fix configfs group removal on driver teardown ata: libata-scsi: Return aborted command when missing sense and result TF Dan Carpenter (5): cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table() media: gspca: Add bounds checking to firmware parser soc: qcom: mdt_loader: Fix error return values in mdt_header_valid() scsi: qla4xxx: Prevent a potential error pointer dereference ALSA: usb-audio: Fix size validation in convert_chmap_v3() Daniel Jurgens (1): net/mlx5: Base ECVF devlink port attrs from 0 Danilo Krummrich (1): rust: alloc: replace aligned_size() with Kmalloc::aligned_layout() David Howells (2): netfs: Fix unbuffered write error handling cifs: Fix oops due to uninitialised variable David Lechner (6): iio: imu: bno055: fix OOB access of hw_xlate array iio: adc: ad_sigma_delta: change to buffer predisable iio: adc: ad7173: fix setting ODR in probe iio: proximity: isl29501: fix buffered read on big-endian systems iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read() iio: imu: inv_icm42600: use = { } instead of memset() David Sterba (2): btrfs: qgroup: drop unused parameter fs_info from __del_qgroup_rb() btrfs: move transaction aborts to the error site in add_block_group_free_space() Dewei Meng (1): ALSA: timer: fix ida_free call while not allocated Dominique Martinet (1): iov_iter: iterate_folioq: fix handling of offset >= folio size Edward Adam Davis (1): comedi: pcl726: Prevent invalid irq number Emanuele Ghidoli (1): arm64: dts: ti: k3-am62-verdin: Enable pull-ups on I2C buses Eric Biggers (2): lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap ipv6: sr: Fix MAC comparison to be constant-time Evgeniy Harchenko (1): ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6 Fanhua Li (1): drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor(). Filipe Manana (10): btrfs: qgroup: fix race between quota disable and quota rescan ioctl btrfs: always abort transaction on failure to add block group to free space tree btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() btrfs: send: factor out common logic when sending xattrs btrfs: send: only use boolean variables at process_recorded_refs() btrfs: send: add and use helper to rename current inode when processing refs btrfs: send: keep the current inode's path cached btrfs: send: avoid path allocation for the current inode when issuing commands btrfs: send: use fallocate for hole punching with send stream v2 btrfs: send: make fs_path_len() inline and constify its argument Finn Thain (1): m68k: Fix lost column on framebuffer debug console Florian Westphal (1): netfilter: nf_reject: don't leak dst refcount for loopback packets Frank Li (1): PCI: imx6: Add i.MX8Q PCIe Endpoint (EP) support Gabor Juhos (1): mtd: spinand: propagate spinand_wait() errors from spinand_write_page() Gang Ba (1): drm/amdgpu: Avoid extra evict-restore process. Geliang Tang (2): mptcp: remove duplicate sk_reset_timer call mptcp: disable add_addr retransmission when timeout is 0 Geraldo Nascimento (2): PCI: rockchip: Use standard PCIe definitions PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining Giovanni Cabiddu (2): crypto: qat - lower priority for skcipher and aead algorithms crypto: qat - flush misc workqueue during device shutdown Greg Kroah-Hartman (2): Revert "can: ti_hecc: fix -Woverflow compiler warning" Linux 6.12.44 Gui-Dong Han (1): media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() Hangbin Liu (2): bonding: update LACP activity flag after setting lacp_active bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU Hans Verkuil (1): media: vivid: fix wrong pixel_array control size Hans de Goede (1): media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls Haoxiang Li (1): media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init() Hariprasad Kelam (1): Octeontx2-af: Skip overlap check for SPI field Heikki Krogerus (1): usb: dwc3: pci: add support for the Intel Wildcat Lake Heiko Carstens (1): s390/mm: Do not map lowcore with identity mapping Helge Deller (2): Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()" apparmor: Fix 8-byte alignment for initial dfa blob streams Herton R. Krzesinski (1): mm/debug_vm_pgtable: clear page table entries at destroy_args() Hong Guan (1): arm64: dts: ti: k3-am62a7-sk: fix pinmux for main_uart1 Horatiu Vultur (1): phy: mscc: Fix timestamping for vsc8584 Ian Abbott (2): comedi: Make insn_rw_emulate_bits() do insn->n samples comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() Ido Schimmel (1): mlxsw: spectrum: Forward packets with an IPv4 link-local source IP Igor Pylypiv (1): ata: libata-scsi: Fix CDL control Imre Deak (3): drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS drm/i915/icl+/tc: Convert AUX powered WARN to a debug message drm/i915/icl+/tc: Cache the max lane count value Jacopo Mondi (1): media: pisp_be: Fix pm_runtime underrun in probe Jakub Acs (1): net, hsr: reject HSR frame if skb can't hold tag Jakub Kicinski (1): tls: fix handling of zero-length records on the rx_list Jakub Ramaseuski (1): net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM Jan Beulich (1): compiler: remove __ADDRESSABLE_ASM{_STR,}() again Jason Xing (1): ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc Jean-Baptiste Maneyrol (1): iio: imu: inv_icm42600: change invalid data error to -EBUSY Jens Axboe (2): io_uring/net: commit partial buffers on retry io_uring/futex: ensure io_futex_wait() cleans up properly on failure Jiande Lu (1): Bluetooth: btmtk: Fix wait_on_bit_timeout interruption during shutdown Jiayi Li (1): memstick: Fix deadlock by moving removing flag earlier Jinjiang Tu (1): mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn Jocelyn Falempe (1): drm/panic: Move drawing functions to drm_draw Johan Hovold (10): usb: gadget: udc: renesas_usb3: fix device leak at unbind usb: musb: omap2430: fix device leak at unbind usb: dwc3: meson-g12a: fix device leaks at unbind usb: dwc3: imx8mp: fix device leak at unbind wifi: ath12k: fix dest ring-buffer corruption wifi: ath12k: fix source ring-buffer corruption wifi: ath12k: fix dest ring-buffer corruption when ring is full wifi: ath11k: fix dest ring-buffer corruption wifi: ath11k: fix source ring-buffer corruption wifi: ath11k: fix dest ring-buffer corruption when ring is full John David Anglin (8): parisc: Check region is readable by user in raw_copy_from_user() parisc: Define and use set_pte_at() parisc: Drop WARN_ON_ONCE() from flush_cache_vmap parisc: Rename pte_needs_flush() to pte_needs_cache_flush() in cache.c parisc: Revise __get_user() to probe user read access parisc: Revise gateway LWS calls to probe user read access parisc: Try to fixup kernel exception in bad_area_nosemaphore path of do_page_fault() parisc: Update comments in make_insert_tlb John Ernberg (1): crypto: caam - Prevent crash on suspend with iMX8QM / iMX8ULP Jon Hunter (1): soc/tegra: pmc: Ensure power-domains are in a known state Jonathan Cameron (3): iio: light: Use aligned_s64 instead of open coding alignment. iio: light: as73211: Ensure buffer holes are zeroed iio: imu: inv_icm42600: switch timestamp type from int64_t __aligned(8) to aligned_s64 Jordan Rhee (1): gve: prevent ethtool ops after shutdown Jorge Ramirez-Ortiz (2): media: venus: hfi: explicitly release IRQ during teardown media: venus: protect against spurious interrupts during probe José Expósito (2): drm/tests: Fix endian warning drm/tests: Fix drm_test_fb_xrgb8888_to_xrgb2101010() on big-endian Judith Mendez (6): arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support arm64: dts: ti: k3-am6*: Add boot phase flag to support MMC boot arm64: dts: ti: k3-am62*: Add non-removable flag for eMMC arm64: dts: ti: k3-am6*: Remove disable-wp for eMMC arm64: dts: ti: k3-am62*: Move eMMC pinmux to top level board file mmc: sdhci_am654: Disable HS400 for AM62P SR1.0 and SR1.1 Junxian Huang (1): RDMA/hns: Fix dip entries leak on devices newer than hip09 Justin Lai (1): rtase: Fix Rx descriptor CRC error bit definition Kalesh AP (1): RDMA/bnxt_re: Fix a possible memory leak in the driver Kanglong Wang (1): LoongArch: Optimize module load time by optimizing PLT/GOT counting Kashyap Desai (2): RDMA/bnxt_re: Fix to do SRQ armena by default RDMA/bnxt_re: Fix to remove workload check in SRQ limit path Kathiravan Thirumoorthy (1): phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization sequence Kees Cook (1): iommu/amd: Avoid stack buffer overflow from kernel cmdline Keith Busch (1): kvm: retry nx_huge_page_recovery_thread creation Kerem Karabay (1): drm/format-helper: Add conversion from XRGB8888 to BGR888 Konrad Dybcio (1): media: venus: Fix MSM8998 frequency table Krzysztof Kozlowski (3): dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks constraints USB: typec: Use str_enable_disable-like helpers Kuen-Han Tsai (1): usb: dwc3: Ignore late xferNotReady event to prevent halt timeout Kyoji Ogasawara (3): btrfs: fix incorrect log message for nobarrier mount option btrfs: restore mount option info messages during mount btrfs: fix printing of mount info messages for NODATACOW/NODATASUM Laurentiu Mihalcea (1): pwm: imx-tpm: Reset counter if CMOD is 0 Liao Yuanhong (1): ext4: use kmalloc_array() for array space allocation Lijo Lazar (1): drm/amdgpu: Update external revid for GC v9.5.0 Ludwig Disterhof (1): media: usbtv: Lock resolution while streaming Luiz Augusto von Dentz (1): Bluetooth: hci_sync: Fix scan state after PA Sync has been established Lukas Wunner (1): PCI/portdrv: Use is_pciehp instead of is_hotplug_bridge MD Danish Anwar (1): net: ti: icssg-prueth: Fix HSR and switch offload Enablement during firwmare reload. Macpaul Lin (1): scsi: dt-bindings: mediatek,ufs: Add ufs-disable-mcq flag for UFS host Mael GUERIN (1): USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera Marek Szyprowski (1): zynq_fpga: use sgtable-based scatterlist wrappers Marek Vasut (1): usb: renesas-xhci: Fix External ROM access timeouts Mario Limonciello (2): drm/amd: Restore cached power limit during resume drm/amd/display: Avoid a NULL pointer dereference Masami Hiramatsu (Google) (1): tracing: fprobe-event: Sanitize wildcard for fprobe event name Mathis Foerst (1): media: mt9m114: Fix deadlock in get_frame_interval/set_frame_interval Matthieu Baerts (NGI0) (2): mptcp: pm: kernel: flush: do not reset ADD_ADDR limit selftests: mptcp: pm: check flush doesn't reset limits Miao Li (1): usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive Miaoqian Lin (1): most: core: Drop device reference after usage in get_channel() Michael Walle (1): mtd: spi-nor: Fix spi_nor_try_unlock_all() Michal Suchanek (1): powerpc/boot: Fix build with gcc 15 Michel Dänzer (1): drm/amd/display: Add primary plane to commits for correct VRR handling Miguel Ojeda (1): rust: alloc: fix `rusttest` by providing `Cmalloc::aligned_layout` too Mike Christie (1): scsi: core: Fix command pass through retry regression Minhong He (1): ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add Muhammad Usama Anjum (1): ASoC: SOF: amd: acp-loader: Use GFP_KERNEL for DMA allocations in resume context Myrrh Periwinkle (2): vt: keyboard: Don't process Unicode characters in K_OFF mode vt: defkeymap: Map keycodes above 127 to K_HOLE Namjae Jeon (1): ksmbd: extend the connection limiting mechanism to support IPv6 Naohiro Aota (3): btrfs: zoned: fix write time activation failure for metadata block group btrfs: zoned: requeue to unused block group list if zone finish failed btrfs: subpage: keep TOWRITE tag until folio is cleaned Nathan Chancellor (3): usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init() wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table() drm/amdgpu: Initialize data to NULL in imu_v12_0_program_rlc_ram() NeilBrown (1): ovl: use I_MUTEX_PARENT when locking parent in ovl_create_temp() Nicolas Dufresne (1): media: verisilicon: Fix AV1 decoder clock frequency Nicolin Chen (1): iommu/arm-smmu-v3: Fix smmu_domain->nr_ats_masters decrement Nitin Gote (1): iosys-map: Fix undefined behavior in iosys_map_clear() Ojaswin Mujoo (2): ext4: fix fsmap end of range reporting with bigalloc ext4: fix reserved gdt blocks handling in fsmap Oren Sidi (1): net/mlx5: Add IFC bits and enums for buf_ownership Parthiban Veerasooran (2): microchip: lan865x: fix missing netif_start_queue() call on device open microchip: lan865x: fix missing Timer Increment config for Rev.B0/B1 Pauli Virtanen (1): Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established Peter Griffin (1): arm64: dts: exynos: gs101: ufs: add dma-coherent property Peter Oberparleiter (3): s390/sclp: Fix SCCB present check s390/hypfs: Avoid unnecessary ioctl registration in debugfs s390/hypfs: Enable limited access during lockdown Peter Shkenev (1): drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities Phillip Lougher (1): squashfs: fix memory leak in squashfs_fill_super Pu Lehui (1): tracing: Limit access to parser->buffer when trace_get_user failed Qingfang Deng (2): net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path ppp: fix race conditions in ppp_fill_forward_path Rafael J. Wysocki (2): PM: runtime: Take active children into account in pm_runtime_get_if_in_use() cpuidle: governors: menu: Avoid selecting states with too much latency Randy Dunlap (1): parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit compilers Ranjan Kumar (3): scsi: mpi3mr: Fix race between config read submit and interrupt completion scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems Ricardo Ribalda (2): media: venus: vdec: Clamp param smaller than 1fps and bigger than 240. media: venus: venc: Clamp param smaller than 1fps and bigger than 240 Richard Zhu (4): PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4 in epc_features PCI: imx6: Remove apps_reset toggling from imx_pcie_{assert/deassert}_core_reset PCI: imx6: Delay link start until configfs 'start' written PCI: imx6: Add IMX8MQ_EP third 64-bit BAR in epc_features Sakari Ailus (2): media: ipu6: isys: Use correct pads for xlate_streams() media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() Salah Triki (1): iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe() Sebastian Andrzej Siewior (1): kcov, usb: Don't disable interrupts in kcov_remote_start_usb_softirq() Sebastian Reichel (1): usb: typec: fusb302: cache PD RX state Selvarasu Ganesan (1): usb: dwc3: Remove WARN_ON for device endpoint command timeouts SeongJae Park (1): mm/damon/ops-common: ignore migration request to invalid nodes Sergey Shtylyov (1): Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync() Shahar Shitrit (1): net/mlx5: Relocate function declarations from port.h to mlx5_core.h Simon Richter (1): Mark xe driver as BROKEN if kernel page size is not 4kB Siyang Liu (1): drm/amd/display: fix a Null pointer dereference vulnerability Srinivas Pandruvada (1): platform/x86/intel-uncore-freq: Check write blocked for ELC Stefan Metzmacher (1): smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy() Stefan Wahren (1): spi: spi-fsl-lpspi: Clamp too high speed_hz Steven Rostedt (2): ftrace: Also allocate and copy hash for reading of filter files tracing: Remove unneeded goto out logic Suraj Gupta (1): net: xilinx: axienet: Fix RX skb ring management in DMAengine mode Takashi Iwai (1): ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation Theodore Ts'o (1): ext4: don't try to clear the orphan_present feature block device is r/o Thomas Fourier (2): mtd: rawnand: fsmc: Add missing check after DMA map mtd: rawnand: renesas: Add missing check after DMA map Thomas Weißschuh (1): kbuild: userprogs: use correct linker when mixing clang and GNU ld Thomas Zimmermann (3): drm/format-helper: Move helpers for pixel conversion to header file drm/format-helper: Add generic conversion to 32-bit formats drm/tests: Do not use drm_fb_blit() in format-helper tests Thorsten Blum (3): accel/habanalabs/gaudi2: Use kvfree() for memory allocated with kvcalloc() cdx: Fix off-by-one error in cdx_rpmsg_probe() usb: storage: realtek_cr: Use correct byte order for bcs->Residue Tianxiang Peng (1): x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper Tim Harvey (1): hwmon: (gsc-hwmon) fix fan pwm setpoint show functions Timur Kristóf (7): drm/amd/display: Don't overwrite dce60_clk_mgr drm/amd/display: Don't overclock DCE 6 by 15% drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3 drm/amd/display: Fix DP audio DTO1 clock source on DCE 6. drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs drm/amd/display: Don't print errors for nonexistent connectors Tom Chung (1): drm/amd/display: Fix Xorg desktop unresponsive on Replay panel Tom Lendacky (1): x86/sev: Ensure SVSM reserved fields in a page validation entry are initialized to zero Tristram Ha (1): net: dsa: microchip: Fix KSZ9477 HSR port setup issue Trond Myklebust (1): NFS: Fix a race when updating an existing write Tzung-Bi Shih (1): platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister() Uwe Kleine-König (2): pwm: mediatek: Handle hardware enable and clock enable separately pwm: mediatek: Fix duty and period setting ValdikSS (1): igc: fix disabling L1.2 PCI-E link substate on I226 on init Vedang Nagar (1): media: venus: Add a check for packet size after reading from shared memory Victor Shih (3): mmc: sdhci-pci-gli: Add a new function to simplify the code mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency Vladimir Zapolskiy (1): media: qcom: camss: cleanup media device allocated resource on error path Waiman Long (2): cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key cgroup/cpuset: Fix a partition error with CPU hotplug Wang Liang (1): net: bridge: fix soft lockup in br_multicast_query_expired() Weitao Wang (1): usb: xhci: Fix slot_id resource race conflict Will Deacon (2): vsock/virtio: Validate length in packet header before skb_put() vhost/vsock: Avoid allocating arbitrarily-sized SKBs William Liu (2): net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate Xaver Hugl (1): amdgpu/amdgpu_discovery: increase timeout limit for IFWI init Xu Yang (1): usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test Xu Yilun (1): fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable() Yang Li (1): Bluetooth: hci_sync: Prevent unintended PA sync when SID is 0xFF Ye Bin (1): fs/buffer: fix use-after-free when call bh_read() helper Youssef Samir (1): bus: mhi: host: Detect events pointing to unexpected TREs Yuichiro Tsuji (1): net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization Yunhui Cui (1): serial: 8250: fix panic due to PSLVERR Zenm Chen (1): USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles Zhang Shurong (1): media: ov2659: Fix memory leaks in ov2659_probe() Zhang Yi (1): ext4: fix hole length calculation overflow in non-extent inodes Zhu Yanjun (1): RDMA/rxe: Flush delayed SKBs while releasing RXE resources Ziyan Xu (1): ksmbd: fix refcount leak causing resource not released wenglianfa (1): RDMA/hns: Fix querying wrong SCC context for DIP algorithm

2 weeks, 3 days

1
1
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror