- Linux-stable-mirror - lists.linaro.org

[PATCH AUTOSEL 6.15 01/21] cifs: Correctly set SMB1 SessionKey field in Session Setup Request

by Sasha Levin

From: Pali Rohár <pali(a)kernel.org> [ Upstream commit 89381c72d52094988e11d23ef24a00066a0fa458 ] [MS-CIFS] specification in section 2.2.4.53.1 where is described SMB_COM_SESSION_SETUP_ANDX Request, for SessionKey field says: The client MUST set this field to be equal to the SessionKey field in the SMB_COM_NEGOTIATE Response for this SMB connection. Linux SMB client currently set this field to zero. This is working fine against Windows NT SMB servers thanks to [MS-CIFS] product behavior <94>: Windows NT Server ignores the client's SessionKey. For compatibility with [MS-CIFS], set this SessionKey field in Session Setup Request to value retrieved from Negotiate response. Signed-off-by: Pali Rohár <pali(a)kernel.org> Signed-off-by: Steve French <stfrench(a)microsoft.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- Based on my comprehensive analysis of both the commit message and code changes, examining the current kernel tree context: **YES** ## Extensive Analysis ### **Nature of the Fix** This is a **specification compliance fix** for SMB1 protocol handling. The commit addresses a clear violation of the MS-CIFS specification section 2.2.4.53.1, which mandates that the SessionKey field in SMB_COM_SESSION_SETUP_ANDX Request must be set to the value from the SMB_COM_NEGOTIATE Response. ### **Code Changes Analysis** **1. Structural Changes (Low Risk)** - **cifsglob.h**: Adds `__le32 session_key_id` to `TCP_Server_Info` structure - minimal ABI impact as this is kernel-internal - **cifspdu.h**: Corrects endianness annotations from `__u32` to `__le32` - pure annotation fix, no behavioral change **2. Functional Changes (Contained and Safe)** - **cifssmb.c**: Captures SessionKey from negotiate response (`server->session_key_id = pSMBr->SessionKey`) - simple field assignment - **sess.c**: Sets SessionKey in session setup request (`pSMB->req.SessionKey = server->session_key_id`) - follows specification requirement ### **Risk Assessment** **Minimal Regression Risk:** - Changes are isolated to SMB1 legacy protocol code - Current behavior (setting SessionKey to zero) works with Windows NT due to MS- CIFS product behavior <94> - New behavior follows specification exactly, improving compatibility with non-Windows SMB1 servers - No security implications - purely a protocol compliance improvement **Code Maturity:** - SMB1 session setup code is very mature and stable - Limited recent changes in this area except compatibility fixes - Well- understood code path with clear specification backing ### **Backport Suitability Criteria Met** **1. Important Bug Fix:** ✅ Fixes protocol specification violation that could cause compatibility issues with strict SMB1 implementations **2. Small and Contained:** ✅ Four minimal changes across related files, all implementing the same specification requirement **3. Clear Side Effects:** ✅ No side effects beyond fixing the specification compliance issue **4. No Architectural Changes:** ✅ Simple field additions and assignments, no structural changes **5. Non- Critical Subsystem:** ✅ Legacy SMB1 protocol code, deprecated since 2017 **6. Minimal Risk:** ✅ Maintains backward compatibility while improving forward compatibility **7. Stable Tree Rules Compliance:** ✅ Important compatibility bugfix with minimal regression risk ### **Comparison to Similar Commits** This commit closely matches the pattern of **Similar Commit #3** and **Similar Commit #5** (both marked YES for backporting): - Protocol compliance improvements - Session setup related fixes - Clear specification backing - Minimal, contained changes - Authored by maintainers (Steve French involvement) ### **Conclusion** This commit represents an ideal stable backport candidate: a clear specification compliance fix with minimal code changes, no security implications, and improvement in interoperability. The fix ensures Linux kernel SMB client properly follows MS-CIFS specification, which is valuable for enterprise environments using diverse SMB1 server implementations. fs/smb/client/cifsglob.h | 1 + fs/smb/client/cifspdu.h | 6 +++--- fs/smb/client/cifssmb.c | 1 + fs/smb/client/sess.c | 1 + 4 files changed, 6 insertions(+), 3 deletions(-) diff --git a/fs/smb/client/cifsglob.h b/fs/smb/client/cifsglob.h index 3b32116b0b496..4d097b074b5fd 100644 --- a/fs/smb/client/cifsglob.h +++ b/fs/smb/client/cifsglob.h @@ -773,6 +773,7 @@ struct TCP_Server_Info { char workstation_RFC1001_name[RFC1001_NAME_LEN_WITH_NULL]; __u32 sequence_number; /* for signing, protected by srv_mutex */ __u32 reconnect_instance; /* incremented on each reconnect */ + __le32 session_key_id; /* retrieved from negotiate response and send in session setup request */ struct session_key session_key; unsigned long lstrp; /* when we got last response from this server */ struct cifs_secmech secmech; /* crypto sec mech functs, descriptors */ diff --git a/fs/smb/client/cifspdu.h b/fs/smb/client/cifspdu.h index 1b79fe07476f6..d9cf7db0ac35e 100644 --- a/fs/smb/client/cifspdu.h +++ b/fs/smb/client/cifspdu.h @@ -597,7 +597,7 @@ typedef union smb_com_session_setup_andx { __le16 MaxBufferSize; __le16 MaxMpxCount; __le16 VcNumber; - __u32 SessionKey; + __le32 SessionKey; __le16 SecurityBlobLength; __u32 Reserved; __le32 Capabilities; /* see below */ @@ -616,7 +616,7 @@ typedef union smb_com_session_setup_andx { __le16 MaxBufferSize; __le16 MaxMpxCount; __le16 VcNumber; - __u32 SessionKey; + __le32 SessionKey; __le16 CaseInsensitivePasswordLength; /* ASCII password len */ __le16 CaseSensitivePasswordLength; /* Unicode password length*/ __u32 Reserved; /* see below */ @@ -654,7 +654,7 @@ typedef union smb_com_session_setup_andx { __le16 MaxBufferSize; __le16 MaxMpxCount; __le16 VcNumber; - __u32 SessionKey; + __le32 SessionKey; __le16 PasswordLength; __u32 Reserved; /* encrypt key len and offset */ __le16 ByteCount; diff --git a/fs/smb/client/cifssmb.c b/fs/smb/client/cifssmb.c index f55457b4b82e3..f6ec0045c5138 100644 --- a/fs/smb/client/cifssmb.c +++ b/fs/smb/client/cifssmb.c @@ -498,6 +498,7 @@ CIFSSMBNegotiate(const unsigned int xid, server->max_rw = le32_to_cpu(pSMBr->MaxRawSize); cifs_dbg(NOISY, "Max buf = %d\n", ses->server->maxBuf); server->capabilities = le32_to_cpu(pSMBr->Capabilities); + server->session_key_id = pSMBr->SessionKey; server->timeAdj = (int)(__s16)le16_to_cpu(pSMBr->ServerTimeZone); server->timeAdj *= 60; diff --git a/fs/smb/client/sess.c b/fs/smb/client/sess.c index b3fa9ee269127..d53705595a512 100644 --- a/fs/smb/client/sess.c +++ b/fs/smb/client/sess.c @@ -628,6 +628,7 @@ static __u32 cifs_ssetup_hdr(struct cifs_ses *ses, USHRT_MAX)); pSMB->req.MaxMpxCount = cpu_to_le16(server->maxReq); pSMB->req.VcNumber = cpu_to_le16(1); + pSMB->req.SessionKey = server->session_key_id; /* Now no need to set SMBFLG_CASELESS or obsolete CANONICAL PATH */ -- 2.39.5

1 month, 1 week

1
20
0 0

[PATCH] hwmon: (ftsteutates) Fix TOCTOU race in fts_read()

by Gui-Dong Han

In the fts_read() function, when handling hwmon_pwm_auto_channels_temp, the code accesses the shared variable data->fan_source[channel] twice without holding any locks. It is first checked against FTS_FAN_SOURCE_INVALID, and if the check passes, it is read again when used as an argument to the BIT() macro. This creates a Time-of-Check to Time-of-Use (TOCTOU) race condition. Another thread executing fts_update_device() can modify the value of data->fan_source[channel] between the check and its use. If the value is changed to FTS_FAN_SOURCE_INVALID (0xff) during this window, the BIT() macro will be called with a large shift value (BIT(255)). A bit shift by a value greater than or equal to the type width is undefined behavior and can lead to a crash or incorrect values being returned to userspace. Fix this by reading data->fan_source[channel] into a local variable once, eliminating the race condition. Additionally, add a bounds check to ensure the value is less than BITS_PER_LONG before passing it to the BIT() macro, making the code more robust against undefined behavior. This possible bug was found by an experimental static analysis tool developed by our team. Fixes: 1c5759d8ce05 ("hwmon: (ftsteutates) Replace fanX_source with pwmX_auto_channels_temp") Cc: stable(a)vger.kernel.org Signed-off-by: Gui-Dong Han <hanguidong02(a)gmail.com> --- drivers/hwmon/ftsteutates.c | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/drivers/hwmon/ftsteutates.c b/drivers/hwmon/ftsteutates.c index a3a07662e491..8aeec16a7a90 100644 --- a/drivers/hwmon/ftsteutates.c +++ b/drivers/hwmon/ftsteutates.c @@ -423,13 +423,16 @@ static int fts_read(struct device *dev, enum hwmon_sensor_types type, u32 attr, break; case hwmon_pwm: switch (attr) { - case hwmon_pwm_auto_channels_temp: - if (data->fan_source[channel] == FTS_FAN_SOURCE_INVALID) + case hwmon_pwm_auto_channels_temp: { + u8 fan_source = data->fan_source[channel]; + + if (fan_source == FTS_FAN_SOURCE_INVALID || fan_source >= BITS_PER_LONG) *val = 0; else - *val = BIT(data->fan_source[channel]); + *val = BIT(fan_source); return 0; + } default: break; } -- 2.25.1

1 month, 1 week

2
1
0 0

[PATCH] platform/loongarch: laptop: Unregister generic_sub_drivers on exit

by Yao Zi

Without correct unregisteration, ACPI notify handlers and the platform driver installed by generic_subdriver_init will become dangling references after removing loongson_laptop module, triggering various kernel faults when a hotkey is sent or at kernel shutdown. Cc: stable(a)vger.kernel.org Fixes: 6246ed09111f ("LoongArch: Add ACPI-based generic laptop driver") Signed-off-by: Yao Zi <ziyao(a)disroot.org> --- drivers/platform/loongarch/loongson-laptop.c | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/drivers/platform/loongarch/loongson-laptop.c b/drivers/platform/loongarch/loongson-laptop.c index 99203584949d..cfe2cf79dbbe 100644 --- a/drivers/platform/loongarch/loongson-laptop.c +++ b/drivers/platform/loongarch/loongson-laptop.c @@ -611,11 +611,17 @@ static int __init generic_acpi_laptop_init(void) static void __exit generic_acpi_laptop_exit(void) { + int i; + if (generic_inputdev) { - if (input_device_registered) + if (input_device_registered) { input_unregister_device(generic_inputdev); - else + + for (i = 0; i < ARRAY_SIZE(generic_sub_drivers); i++) + generic_subdriver_exit(&generic_sub_drivers[i]); + } else { input_free_device(generic_inputdev); + } } } -- 2.49.0

1 month, 1 week

2
1
0 0

[PATCH v1] mm: Close theoretical race where stale TLB entries could linger

by Ryan Roberts

Commit 3ea277194daa ("mm, mprotect: flush TLB if potentially racing with a parallel reclaim leaving stale TLB entries") described a theoretical race as such: """ Nadav Amit identified a theoritical race between page reclaim and mprotect due to TLB flushes being batched outside of the PTL being held. He described the race as follows: CPU0 CPU1 ---- ---- user accesses memory using RW PTE [PTE now cached in TLB] try_to_unmap_one() ==> ptep_get_and_clear() ==> set_tlb_ubc_flush_pending() mprotect(addr, PROT_READ) ==> change_pte_range() ==> [ PTE non-present - no flush ] user writes using cached RW PTE ... try_to_unmap_flush() The same type of race exists for reads when protecting for PROT_NONE and also exists for operations that can leave an old TLB entry behind such as munmap, mremap and madvise. """ The solution was to introduce flush_tlb_batched_pending() and call it under the PTL from mprotect/madvise/munmap/mremap to complete any pending tlb flushes. However, while madvise_free_pte_range() and madvise_cold_or_pageout_pte_range() were both retro-fitted to call flush_tlb_batched_pending() immediately after initially acquiring the PTL, they both temporarily release the PTL to split a large folio if they stumble upon one. In this case, where re-acquiring the PTL flush_tlb_batched_pending() must be called again, but it previously was not. Let's fix that. There are 2 Fixes: tags here: the first is the commit that fixed madvise_free_pte_range(). The second is the commit that added madvise_cold_or_pageout_pte_range(), which looks like it copy/pasted the faulty pattern from madvise_free_pte_range(). This is a theoretical bug discovered during code review. Cc: stable(a)vger.kernel.org Fixes: 3ea277194daa ("mm, mprotect: flush TLB if potentially racing with a parallel reclaim leaving stale TLB entries") Fixes: 9c276cc65a58 ("mm: introduce MADV_COLD") Signed-off-by: Ryan Roberts <ryan.roberts(a)arm.com> --- Applies on today's mm-unstable (3f676fe5c7a0). All mm selftests continue to pass. Thanks, Ryan mm/madvise.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/mm/madvise.c b/mm/madvise.c index 5f7a66a1617e..1d44a35ae85c 100644 --- a/mm/madvise.c +++ b/mm/madvise.c @@ -508,6 +508,7 @@ static int madvise_cold_or_pageout_pte_range(pmd_t *pmd, pte_offset_map_lock(mm, pmd, addr, &ptl); if (!start_pte) break; + flush_tlb_batched_pending(mm); arch_enter_lazy_mmu_mode(); if (!err) nr = 0; @@ -741,6 +742,7 @@ static int madvise_free_pte_range(pmd_t *pmd, unsigned long addr, start_pte = pte; if (!start_pte) break; + flush_tlb_batched_pending(mm); arch_enter_lazy_mmu_mode(); if (!err) nr = 0; -- 2.43.0

1 month, 1 week

3
2
0 0

[PATCH] drm/xe/bmg: fix compressed VRAM handling

by Matthew Auld

There looks to be an issue in our compression handling when the BO pages are very fragmented, where we choose to skip the identity map and instead fall back to emitting the PTEs by hand when migrating memory, such that we can hopefully do more work per blit operation. However in such a case we need to ensure the src PTEs are correctly tagged with a compression enabled PAT index on dgpu xe2+, otherwise the copy will simply treat the src memory as uncompressed, leading to corruption if the memory was compressed by the user. To fix this it looks like we can pass use_comp_pat into emit_pte() on the src side. There are reports of VRAM corruption in some heavy user workloads, which might be related: https://gitlab.freedesktop.org/drm/xe/kernel/-/issues/4495 Fixes: 523f191cc0c7 ("drm/xe/xe_migrate: Handle migration logic for xe2+ dgfx") Signed-off-by: Matthew Auld <matthew.auld(a)intel.com> Cc: Himal Prasad Ghimiray <himal.prasad.ghimiray(a)intel.com> Cc: Thomas Hellström <thomas.hellstrom(a)linux.intel.com> Cc: Akshata Jahagirdar <akshata.jahagirdar(a)intel.com> Cc: <stable(a)vger.kernel.org> # v6.12+ --- drivers/gpu/drm/xe/xe_migrate.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/gpu/drm/xe/xe_migrate.c b/drivers/gpu/drm/xe/xe_migrate.c index 8f8e9fdfb2a8..16788ecf924a 100644 --- a/drivers/gpu/drm/xe/xe_migrate.c +++ b/drivers/gpu/drm/xe/xe_migrate.c @@ -863,7 +863,7 @@ struct dma_fence *xe_migrate_copy(struct xe_migrate *m, if (src_is_vram && xe_migrate_allow_identity(src_L0, &src_it)) xe_res_next(&src_it, src_L0); else - emit_pte(m, bb, src_L0_pt, src_is_vram, copy_system_ccs, + emit_pte(m, bb, src_L0_pt, src_is_vram, copy_system_ccs || use_comp_pat, &src_it, src_L0, src); if (dst_is_vram && xe_migrate_allow_identity(src_L0, &dst_it)) -- 2.49.0

1 month, 1 week

2
2
0 0

[PATCH v2 4/4] wifi: ath12k: fix dest ring-buffer corruption when ring is full

by Johan Hovold

Add the missing memory barriers to make sure that destination ring descriptors are read before updating the tail pointer (and passing ownership to the device) to avoid memory corruption on weakly ordered architectures like aarch64 when the ring is full. Tested-on: WCN7850 hw2.0 WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 Fixes: d889913205cf ("wifi: ath12k: driver for Qualcomm Wi-Fi 7 devices") Cc: stable(a)vger.kernel.org # 6.3 Signed-off-by: Johan Hovold <johan+linaro(a)kernel.org> --- drivers/net/wireless/ath/ath12k/hal.c | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/drivers/net/wireless/ath/ath12k/hal.c b/drivers/net/wireless/ath/ath12k/hal.c index 1e2d13cc2d19..4da354e86a75 100644 --- a/drivers/net/wireless/ath/ath12k/hal.c +++ b/drivers/net/wireless/ath/ath12k/hal.c @@ -2153,7 +2153,6 @@ void ath12k_hal_srng_access_end(struct ath12k_base *ab, struct hal_srng *srng) { lockdep_assert_held(&srng->lock); - /* TODO: See if we need a write memory barrier here */ if (srng->flags & HAL_SRNG_FLAGS_LMAC_RING) { /* For LMAC rings, ring pointer updates are done through FW and * hence written to a shared memory location that is read by FW @@ -2168,7 +2167,11 @@ void ath12k_hal_srng_access_end(struct ath12k_base *ab, struct hal_srng *srng) WRITE_ONCE(*srng->u.src_ring.hp_addr, srng->u.src_ring.hp); } else { srng->u.dst_ring.last_hp = *srng->u.dst_ring.hp_addr; - *srng->u.dst_ring.tp_addr = srng->u.dst_ring.tp; + /* Make sure descriptor is read before updating the + * tail pointer. + */ + dma_mb(); + WRITE_ONCE(*srng->u.dst_ring.tp_addr, srng->u.dst_ring.tp); } } else { if (srng->ring_dir == HAL_SRNG_DIR_SRC) { @@ -2184,6 +2187,10 @@ void ath12k_hal_srng_access_end(struct ath12k_base *ab, struct hal_srng *srng) srng->u.src_ring.hp); } else { srng->u.dst_ring.last_hp = *srng->u.dst_ring.hp_addr; + /* Make sure descriptor is read before updating the + * tail pointer. + */ + mb(); ath12k_hif_write32(ab, (unsigned long)srng->u.dst_ring.tp_addr - (unsigned long)ab->mem, -- 2.49.0

1 month, 1 week

3
3
0 0

[PATCH] LoongArch: vDSO: correctly use asm parameters in syscall wrappers

by Thomas Weißschuh

The syscall wrappers use the "a0" register for two different register variables, both the first argument and the return value. The "ret" variable is used as both input and output while the argument register is only used as input. Clang treats the conflicting input parameters as undefined behaviour and optimizes away the argument assignment. The code seems to work by chance for the most part today but that may change in the future. Specifically clock_gettime_fallback() fails with clockids from 16 to 23, as implemented by the upcoming auxiliary clocks. Switch the "ret" register variable to a pure output, similar to the other architectures' vDSO code. This works in both clang and GCC. Link: https://lore.kernel.org/lkml/20250602102825-42aa84f0-23f1-4d10-89fc-e8bbaff… Link: https://lore.kernel.org/lkml/20250519082042.742926976@linutronix.de/ Fixes: c6b99bed6b8f ("LoongArch: Add VDSO and VSYSCALL support") Fixes: 18efd0b10e0f ("LoongArch: vDSO: Wire up getrandom() vDSO implementation") Cc: stable(a)vger.kernel.org Signed-off-by: Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> --- arch/loongarch/include/asm/vdso/getrandom.h | 2 +- arch/loongarch/include/asm/vdso/gettimeofday.h | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/arch/loongarch/include/asm/vdso/getrandom.h b/arch/loongarch/include/asm/vdso/getrandom.h index 48c43f55b039b42168698614d0479b7a872d20f3..a81724b69f291ee49dd1f46b12d6893fc18442b8 100644 --- a/arch/loongarch/include/asm/vdso/getrandom.h +++ b/arch/loongarch/include/asm/vdso/getrandom.h @@ -20,7 +20,7 @@ static __always_inline ssize_t getrandom_syscall(void *_buffer, size_t _len, uns asm volatile( " syscall 0\n" - : "+r" (ret) + : "=r" (ret) : "r" (nr), "r" (buffer), "r" (len), "r" (flags) : "$t0", "$t1", "$t2", "$t3", "$t4", "$t5", "$t6", "$t7", "$t8", "memory"); diff --git a/arch/loongarch/include/asm/vdso/gettimeofday.h b/arch/loongarch/include/asm/vdso/gettimeofday.h index 88cfcf13311630ed5f1a734d23a2bc3f65d79a88..f15503e3336ca1bdc9675ec6e17bbb77abc35ef4 100644 --- a/arch/loongarch/include/asm/vdso/gettimeofday.h +++ b/arch/loongarch/include/asm/vdso/gettimeofday.h @@ -25,7 +25,7 @@ static __always_inline long gettimeofday_fallback( asm volatile( " syscall 0\n" - : "+r" (ret) + : "=r" (ret) : "r" (nr), "r" (tv), "r" (tz) : "$t0", "$t1", "$t2", "$t3", "$t4", "$t5", "$t6", "$t7", "$t8", "memory"); @@ -44,7 +44,7 @@ static __always_inline long clock_gettime_fallback( asm volatile( " syscall 0\n" - : "+r" (ret) + : "=r" (ret) : "r" (nr), "r" (clkid), "r" (ts) : "$t0", "$t1", "$t2", "$t3", "$t4", "$t5", "$t6", "$t7", "$t8", "memory"); @@ -63,7 +63,7 @@ static __always_inline int clock_getres_fallback( asm volatile( " syscall 0\n" - : "+r" (ret) + : "=r" (ret) : "r" (nr), "r" (clkid), "r" (ts) : "$t0", "$t1", "$t2", "$t3", "$t4", "$t5", "$t6", "$t7", "$t8", "memory"); --- base-commit: 546b1c9e93c2bb8cf5ed24e0be1c86bb089b3253 change-id: 20250603-loongarch-vdso-syscall-f585a99bea03 Best regards, -- Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>

1 month, 1 week

6
8
0 0

[PATCH 1/1] dm-verity: fix a memory leak if some arguments are specified multiple times

by Brahmajit Das

From: Mikulas Patocka <mpatocka(a)redhat.com> From: Mikulas Patocka <mpatocka(a)redhat.com> [ Upstream commit 66be40a14e496689e1f0add50118408e22c96169 ] If some of the arguments "check_at_most_once", "ignore_zero_blocks", "use_fec_from_device", "root_hash_sig_key_desc" were specified more than once on the target line, a memory leak would happen. This commit fixes the memory leak. It also fixes error handling in verity_verify_sig_parse_opt_args. Signed-off-by: Mikulas Patocka <mpatocka(a)redhat.com> Cc: stable(a)vger.kernel.org Signed-off-by: Brahmajit Das <listout(a)listout.xyz> --- drivers/md/dm-verity-fec.c | 4 ++++ drivers/md/dm-verity-target.c | 8 +++++++- drivers/md/dm-verity-verify-sig.c | 17 +++++++++++++---- 3 files changed, 24 insertions(+), 5 deletions(-) diff --git a/drivers/md/dm-verity-fec.c b/drivers/md/dm-verity-fec.c index 0c41949db784..631a887b487c 100644 --- a/drivers/md/dm-verity-fec.c +++ b/drivers/md/dm-verity-fec.c @@ -593,6 +593,10 @@ int verity_fec_parse_opt_args(struct dm_arg_set *as, struct dm_verity *v, (*argc)--; if (!strcasecmp(arg_name, DM_VERITY_OPT_FEC_DEV)) { + if (v->fec->dev) { + ti->error = "FEC device already specified"; + return -EINVAL; + } r = dm_get_device(ti, arg_value, BLK_OPEN_READ, &v->fec->dev); if (r) { ti->error = "FEC device lookup failed"; diff --git a/drivers/md/dm-verity-target.c b/drivers/md/dm-verity-target.c index 3c427f18a04b..ed49bcbd224f 100644 --- a/drivers/md/dm-verity-target.c +++ b/drivers/md/dm-verity-target.c @@ -1120,6 +1120,9 @@ static int verity_alloc_most_once(struct dm_verity *v) { struct dm_target *ti = v->ti; + if (v->validated_blocks) + return 0; + /* the bitset can only handle INT_MAX blocks */ if (v->data_blocks > INT_MAX) { ti->error = "device too large to use check_at_most_once"; @@ -1143,6 +1146,9 @@ static int verity_alloc_zero_digest(struct dm_verity *v) struct dm_verity_io *io; u8 *zero_data; + if (v->zero_digest) + return 0; + v->zero_digest = kmalloc(v->digest_size, GFP_KERNEL); if (!v->zero_digest) @@ -1577,7 +1583,7 @@ static int verity_ctr(struct dm_target *ti, unsigned int argc, char **argv) goto bad; } - /* Root hash signature is a optional parameter*/ + /* Root hash signature is an optional parameter */ r = verity_verify_root_hash(root_hash_digest_to_validate, strlen(root_hash_digest_to_validate), verify_args.sig, diff --git a/drivers/md/dm-verity-verify-sig.c b/drivers/md/dm-verity-verify-sig.c index a9e2c6c0a33c..d5261a0e4232 100644 --- a/drivers/md/dm-verity-verify-sig.c +++ b/drivers/md/dm-verity-verify-sig.c @@ -71,9 +71,14 @@ int verity_verify_sig_parse_opt_args(struct dm_arg_set *as, const char *arg_name) { struct dm_target *ti = v->ti; - int ret = 0; + int ret; const char *sig_key = NULL; + if (v->signature_key_desc) { + ti->error = DM_VERITY_VERIFY_ERR("root_hash_sig_key_desc already specified"); + return -EINVAL; + } + if (!*argc) { ti->error = DM_VERITY_VERIFY_ERR("Signature key not specified"); return -EINVAL; @@ -83,14 +88,18 @@ int verity_verify_sig_parse_opt_args(struct dm_arg_set *as, (*argc)--; ret = verity_verify_get_sig_from_key(sig_key, sig_opts); - if (ret < 0) + if (ret < 0) { ti->error = DM_VERITY_VERIFY_ERR("Invalid key specified"); + return ret; + } v->signature_key_desc = kstrdup(sig_key, GFP_KERNEL); - if (!v->signature_key_desc) + if (!v->signature_key_desc) { + ti->error = DM_VERITY_VERIFY_ERR("Could not allocate memory for signature key"); return -ENOMEM; + } - return ret; + return 0; } /* -- 2.49.0

1 month, 1 week

2
4
0 0

FAILED: patch "[PATCH] arm64: dts: ti: k3-j721e-sk: Add DT nodes for power" failed to apply to 6.6-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.6-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.6.y git checkout FETCH_HEAD git cherry-pick -x 97b67cc102dc2cc8aa39a569c22a196e21af5a21 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060241-numbly-remarry-d1a6@gregkh' --subject-prefix 'PATCH 6.6.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 97b67cc102dc2cc8aa39a569c22a196e21af5a21 Mon Sep 17 00:00:00 2001 From: Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> Date: Tue, 15 Apr 2025 16:43:22 +0530 Subject: [PATCH] arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators Add device tree nodes for two power regulators on the J721E SK board. vsys_5v0: A fixed regulator representing the 5V supply output from the LM61460 and vdd_sd_dv: A GPIO-controlled TLV71033 regulator. J721E-SK schematics: https://www.ti.com/lit/zip/sprr438 Fixes: 1bfda92a3a36 ("arm64: dts: ti: Add support for J721E SK") Cc: stable(a)vger.kernel.org Signed-off-by: Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> Reviewed-by: Udit Kumar <u-kumar1(a)ti.com> Link: https://lore.kernel.org/r/20250415111328.3847502-2-y-abhilashchandra@ti.com Signed-off-by: Nishanth Menon <nm(a)ti.com> diff --git a/arch/arm64/boot/dts/ti/k3-j721e-sk.dts b/arch/arm64/boot/dts/ti/k3-j721e-sk.dts index 440ef57be294..ffef3d1cfd55 100644 --- a/arch/arm64/boot/dts/ti/k3-j721e-sk.dts +++ b/arch/arm64/boot/dts/ti/k3-j721e-sk.dts @@ -184,6 +184,17 @@ vsys_3v3: fixedregulator-vsys3v3 { regulator-boot-on; }; + vsys_5v0: fixedregulator-vsys5v0 { + /* Output of LM61460 */ + compatible = "regulator-fixed"; + regulator-name = "vsys_5v0"; + regulator-min-microvolt = <5000000>; + regulator-max-microvolt = <5000000>; + vin-supply = <&vusb_main>; + regulator-always-on; + regulator-boot-on; + }; + vdd_mmc1: fixedregulator-sd { compatible = "regulator-fixed"; pinctrl-names = "default"; @@ -211,6 +222,20 @@ vdd_sd_dv_alt: gpio-regulator-tps659411 { <3300000 0x1>; }; + vdd_sd_dv: gpio-regulator-TLV71033 { + compatible = "regulator-gpio"; + pinctrl-names = "default"; + pinctrl-0 = <&vdd_sd_dv_pins_default>; + regulator-name = "tlv71033"; + regulator-min-microvolt = <1800000>; + regulator-max-microvolt = <3300000>; + regulator-boot-on; + vin-supply = <&vsys_5v0>; + gpios = <&main_gpio0 118 GPIO_ACTIVE_HIGH>; + states = <1800000 0x0>, + <3300000 0x1>; + }; + transceiver1: can-phy1 { compatible = "ti,tcan1042"; #phy-cells = <0>; @@ -613,6 +638,12 @@ J721E_WKUP_IOPAD(0xd4, PIN_OUTPUT, 7) /* (G26) WKUP_GPIO0_9 */ >; }; + vdd_sd_dv_pins_default: vdd-sd-dv-default-pins { + pinctrl-single,pins = < + J721E_IOPAD(0x1dc, PIN_OUTPUT, 7) /* (Y1) SPI1_CLK.GPIO0_118 */ + >; + }; + wkup_uart0_pins_default: wkup-uart0-default-pins { pinctrl-single,pins = < J721E_WKUP_IOPAD(0xa0, PIN_INPUT, 0) /* (J29) WKUP_UART0_RXD */

1 month, 1 week

2
1
0 0

FAILED: patch "[PATCH] arm64: dts: ti: k3-j721e-sk: Add DT nodes for power" failed to apply to 6.1-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.1-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.1.y git checkout FETCH_HEAD git cherry-pick -x 97b67cc102dc2cc8aa39a569c22a196e21af5a21 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060241-precut-candle-50a9@gregkh' --subject-prefix 'PATCH 6.1.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 97b67cc102dc2cc8aa39a569c22a196e21af5a21 Mon Sep 17 00:00:00 2001 From: Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> Date: Tue, 15 Apr 2025 16:43:22 +0530 Subject: [PATCH] arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators Add device tree nodes for two power regulators on the J721E SK board. vsys_5v0: A fixed regulator representing the 5V supply output from the LM61460 and vdd_sd_dv: A GPIO-controlled TLV71033 regulator. J721E-SK schematics: https://www.ti.com/lit/zip/sprr438 Fixes: 1bfda92a3a36 ("arm64: dts: ti: Add support for J721E SK") Cc: stable(a)vger.kernel.org Signed-off-by: Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> Reviewed-by: Udit Kumar <u-kumar1(a)ti.com> Link: https://lore.kernel.org/r/20250415111328.3847502-2-y-abhilashchandra@ti.com Signed-off-by: Nishanth Menon <nm(a)ti.com> diff --git a/arch/arm64/boot/dts/ti/k3-j721e-sk.dts b/arch/arm64/boot/dts/ti/k3-j721e-sk.dts index 440ef57be294..ffef3d1cfd55 100644 --- a/arch/arm64/boot/dts/ti/k3-j721e-sk.dts +++ b/arch/arm64/boot/dts/ti/k3-j721e-sk.dts @@ -184,6 +184,17 @@ vsys_3v3: fixedregulator-vsys3v3 { regulator-boot-on; }; + vsys_5v0: fixedregulator-vsys5v0 { + /* Output of LM61460 */ + compatible = "regulator-fixed"; + regulator-name = "vsys_5v0"; + regulator-min-microvolt = <5000000>; + regulator-max-microvolt = <5000000>; + vin-supply = <&vusb_main>; + regulator-always-on; + regulator-boot-on; + }; + vdd_mmc1: fixedregulator-sd { compatible = "regulator-fixed"; pinctrl-names = "default"; @@ -211,6 +222,20 @@ vdd_sd_dv_alt: gpio-regulator-tps659411 { <3300000 0x1>; }; + vdd_sd_dv: gpio-regulator-TLV71033 { + compatible = "regulator-gpio"; + pinctrl-names = "default"; + pinctrl-0 = <&vdd_sd_dv_pins_default>; + regulator-name = "tlv71033"; + regulator-min-microvolt = <1800000>; + regulator-max-microvolt = <3300000>; + regulator-boot-on; + vin-supply = <&vsys_5v0>; + gpios = <&main_gpio0 118 GPIO_ACTIVE_HIGH>; + states = <1800000 0x0>, + <3300000 0x1>; + }; + transceiver1: can-phy1 { compatible = "ti,tcan1042"; #phy-cells = <0>; @@ -613,6 +638,12 @@ J721E_WKUP_IOPAD(0xd4, PIN_OUTPUT, 7) /* (G26) WKUP_GPIO0_9 */ >; }; + vdd_sd_dv_pins_default: vdd-sd-dv-default-pins { + pinctrl-single,pins = < + J721E_IOPAD(0x1dc, PIN_OUTPUT, 7) /* (Y1) SPI1_CLK.GPIO0_118 */ + >; + }; + wkup_uart0_pins_default: wkup-uart0-default-pins { pinctrl-single,pins = < J721E_WKUP_IOPAD(0xa0, PIN_INPUT, 0) /* (J29) WKUP_UART0_RXD */

1 month, 1 week

2
1
0 0

[PATCH] tools/resolve_btfids: Fix build when cross compiling kernel with clang.

by Suleiman Souhlal

When cross compiling the kernel with clang, we need to override CLANG_CROSS_FLAGS when preparing the step libraries for resolve_btfids. Prior to commit d1d096312176 ("tools: fix annoying "mkdir -p ..." logs when building tools in parallel"), MAKEFLAGS would have been set to a value that wouldn't set a value for CLANG_CROSS_FLAGS, hiding the fact that we weren't properly overriding it. Cc: stable(a)vger.kernel.org Fixes: 56a2df7615fa ("tools/resolve_btfids: Compile resolve_btfids as host program") Signed-of-by: Suleiman Souhlal <suleiman(a)google.com> --- tools/bpf/resolve_btfids/Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/bpf/resolve_btfids/Makefile b/tools/bpf/resolve_btfids/Makefile index afbddea3a39c..ce1b556dfa90 100644 --- a/tools/bpf/resolve_btfids/Makefile +++ b/tools/bpf/resolve_btfids/Makefile @@ -17,7 +17,7 @@ endif # Overrides for the prepare step libraries. HOST_OVERRIDES := AR="$(HOSTAR)" CC="$(HOSTCC)" LD="$(HOSTLD)" ARCH="$(HOSTARCH)" \ - CROSS_COMPILE="" EXTRA_CFLAGS="$(HOSTCFLAGS)" + CROSS_COMPILE="" CLANG_CROSS_FLAGS="" EXTRA_CFLAGS="$(HOSTCFLAGS)" RM ?= rm HOSTCC ?= gcc -- 2.50.0.rc0.642.g800a2b2222-goog

1 month, 1 week

2
6
0 0

[merged mm-hotfixes-stable] mm-hugetlb-fix-huge_pmd_unshare-vs-gup-fast-race.patch removed from -mm tree

by Andrew Morton

The quilt patch titled Subject: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race has been removed from the -mm tree. Its filename was mm-hugetlb-fix-huge_pmd_unshare-vs-gup-fast-race.patch This patch was dropped because it was merged into the mm-hotfixes-stable branch of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm ------------------------------------------------------ From: Jann Horn <jannh(a)google.com> Subject: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race Date: Tue, 27 May 2025 23:23:54 +0200 huge_pmd_unshare() drops a reference on a page table that may have previously been shared across processes, potentially turning it into a normal page table used in another process in which unrelated VMAs can afterwards be installed. If this happens in the middle of a concurrent gup_fast(), gup_fast() could end up walking the page tables of another process. While I don't see any way in which that immediately leads to kernel memory corruption, it is really weird and unexpected. Fix it with an explicit broadcast IPI through tlb_remove_table_sync_one(), just like we do in khugepaged when removing page tables for a THP collapse. Link: https://lkml.kernel.org/r/20250528-hugetlb-fixes-splitrace-v2-2-1329349bad1… Link: https://lkml.kernel.org/r/20250527-hugetlb-fixes-splitrace-v1-2-f4136f5ec58… Fixes: 39dde65c9940 ("[PATCH] shared page table for hugetlb page") Signed-off-by: Jann Horn <jannh(a)google.com> Reviewed-by: Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com> Cc: Liam Howlett <liam.howlett(a)oracle.com> Cc: Muchun Song <muchun.song(a)linux.dev> Cc: Oscar Salvador <osalvador(a)suse.de> Cc: Vlastimil Babka <vbabka(a)suse.cz> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> --- mm/hugetlb.c | 7 +++++++ 1 file changed, 7 insertions(+) --- a/mm/hugetlb.c~mm-hugetlb-fix-huge_pmd_unshare-vs-gup-fast-race +++ a/mm/hugetlb.c @@ -7629,6 +7629,13 @@ int huge_pmd_unshare(struct mm_struct *m return 0; pud_clear(pud); + /* + * Once our caller drops the rmap lock, some other process might be + * using this page table as a normal, non-hugetlb page table. + * Wait for pending gup_fast() in other threads to finish before letting + * that happen. + */ + tlb_remove_table_sync_one(); ptdesc_pmd_pts_dec(virt_to_ptdesc(ptep)); mm_dec_nr_pmds(mm); return 1; _ Patches currently in -mm which might be from jannh(a)google.com are hugetlb-block-hugetlb-file-creation-if-hugetlb-is-not-set-up.patch

1 month, 1 week

1
0
0 0

[merged mm-hotfixes-stable] mm-hugetlb-unshare-page-tables-during-vma-split-not-before.patch removed from -mm tree

by Andrew Morton

The quilt patch titled Subject: mm/hugetlb: unshare page tables during VMA split, not before has been removed from the -mm tree. Its filename was mm-hugetlb-unshare-page-tables-during-vma-split-not-before.patch This patch was dropped because it was merged into the mm-hotfixes-stable branch of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm ------------------------------------------------------ From: Jann Horn <jannh(a)google.com> Subject: mm/hugetlb: unshare page tables during VMA split, not before Date: Tue, 27 May 2025 23:23:53 +0200 Currently, __split_vma() triggers hugetlb page table unsharing through vm_ops->may_split(). This happens before the VMA lock and rmap locks are taken - which is too early, it allows racing VMA-locked page faults in our process and racing rmap walks from other processes to cause page tables to be shared again before we actually perform the split. Fix it by explicitly calling into the hugetlb unshare logic from __split_vma() in the same place where THP splitting also happens. At that point, both the VMA and the rmap(s) are write-locked. An annoying detail is that we can now call into the helper hugetlb_unshare_pmds() from two different locking contexts: 1. from hugetlb_split(), holding: - mmap lock (exclusively) - VMA lock - file rmap lock (exclusively) 2. hugetlb_unshare_all_pmds(), which I think is designed to be able to call us with only the mmap lock held (in shared mode), but currently only runs while holding mmap lock (exclusively) and VMA lock Backporting note: This commit fixes a racy protection that was introduced in commit b30c14cd6102 ("hugetlb: unshare some PMDs when splitting VMAs"); that commit claimed to fix an issue introduced in 5.13, but it should actually also go all the way back. [jannh(a)google.com: v2] Link: https://lkml.kernel.org/r/20250528-hugetlb-fixes-splitrace-v2-1-1329349bad1… Link: https://lkml.kernel.org/r/20250528-hugetlb-fixes-splitrace-v2-0-1329349bad1… Link: https://lkml.kernel.org/r/20250527-hugetlb-fixes-splitrace-v1-1-f4136f5ec58… Fixes: 39dde65c9940 ("[PATCH] shared page table for hugetlb page") Signed-off-by: Jann Horn <jannh(a)google.com> Cc: Liam Howlett <liam.howlett(a)oracle.com> Reviewed-by: Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com> Reviewed-by: Oscar Salvador <osalvador(a)suse.de> Cc: Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com> Cc: Vlastimil Babka <vbabka(a)suse.cz> Cc: <stable(a)vger.kernel.org> [b30c14cd6102: hugetlb: unshare some PMDs when splitting VMAs] Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> --- include/linux/hugetlb.h | 3 + mm/hugetlb.c | 60 +++++++++++++++++++++-------- mm/vma.c | 7 +++ tools/testing/vma/vma_internal.h | 2 4 files changed, 56 insertions(+), 16 deletions(-) --- a/include/linux/hugetlb.h~mm-hugetlb-unshare-page-tables-during-vma-split-not-before +++ a/include/linux/hugetlb.h @@ -279,6 +279,7 @@ bool is_hugetlb_entry_migration(pte_t pt bool is_hugetlb_entry_hwpoisoned(pte_t pte); void hugetlb_unshare_all_pmds(struct vm_area_struct *vma); void fixup_hugetlb_reservations(struct vm_area_struct *vma); +void hugetlb_split(struct vm_area_struct *vma, unsigned long addr); #else /* !CONFIG_HUGETLB_PAGE */ @@ -476,6 +477,8 @@ static inline void fixup_hugetlb_reserva { } +static inline void hugetlb_split(struct vm_area_struct *vma, unsigned long addr) {} + #endif /* !CONFIG_HUGETLB_PAGE */ #ifndef pgd_write --- a/mm/hugetlb.c~mm-hugetlb-unshare-page-tables-during-vma-split-not-before +++ a/mm/hugetlb.c @@ -121,7 +121,7 @@ static void hugetlb_vma_lock_free(struct static void hugetlb_vma_lock_alloc(struct vm_area_struct *vma); static void __hugetlb_vma_unlock_write_free(struct vm_area_struct *vma); static void hugetlb_unshare_pmds(struct vm_area_struct *vma, - unsigned long start, unsigned long end); + unsigned long start, unsigned long end, bool take_locks); static struct resv_map *vma_resv_map(struct vm_area_struct *vma); static void hugetlb_free_folio(struct folio *folio) @@ -5426,26 +5426,40 @@ static int hugetlb_vm_op_split(struct vm { if (addr & ~(huge_page_mask(hstate_vma(vma)))) return -EINVAL; + return 0; +} +void hugetlb_split(struct vm_area_struct *vma, unsigned long addr) +{ /* * PMD sharing is only possible for PUD_SIZE-aligned address ranges * in HugeTLB VMAs. If we will lose PUD_SIZE alignment due to this * split, unshare PMDs in the PUD_SIZE interval surrounding addr now. + * This function is called in the middle of a VMA split operation, with + * MM, VMA and rmap all write-locked to prevent concurrent page table + * walks (except hardware and gup_fast()). */ + vma_assert_write_locked(vma); + i_mmap_assert_write_locked(vma->vm_file->f_mapping); + if (addr & ~PUD_MASK) { - /* - * hugetlb_vm_op_split is called right before we attempt to - * split the VMA. We will need to unshare PMDs in the old and - * new VMAs, so let's unshare before we split. - */ unsigned long floor = addr & PUD_MASK; unsigned long ceil = floor + PUD_SIZE; - if (floor >= vma->vm_start && ceil <= vma->vm_end) - hugetlb_unshare_pmds(vma, floor, ceil); + if (floor >= vma->vm_start && ceil <= vma->vm_end) { + /* + * Locking: + * Use take_locks=false here. + * The file rmap lock is already held. + * The hugetlb VMA lock can't be taken when we already + * hold the file rmap lock, and we don't need it because + * its purpose is to synchronize against concurrent page + * table walks, which are not possible thanks to the + * locks held by our caller. + */ + hugetlb_unshare_pmds(vma, floor, ceil, /* take_locks = */ false); + } } - - return 0; } static unsigned long hugetlb_vm_op_pagesize(struct vm_area_struct *vma) @@ -7885,9 +7899,16 @@ void move_hugetlb_state(struct folio *ol spin_unlock_irq(&hugetlb_lock); } +/* + * If @take_locks is false, the caller must ensure that no concurrent page table + * access can happen (except for gup_fast() and hardware page walks). + * If @take_locks is true, we take the hugetlb VMA lock (to lock out things like + * concurrent page fault handling) and the file rmap lock. + */ static void hugetlb_unshare_pmds(struct vm_area_struct *vma, unsigned long start, - unsigned long end) + unsigned long end, + bool take_locks) { struct hstate *h = hstate_vma(vma); unsigned long sz = huge_page_size(h); @@ -7911,8 +7932,12 @@ static void hugetlb_unshare_pmds(struct mmu_notifier_range_init(&range, MMU_NOTIFY_CLEAR, 0, mm, start, end); mmu_notifier_invalidate_range_start(&range); - hugetlb_vma_lock_write(vma); - i_mmap_lock_write(vma->vm_file->f_mapping); + if (take_locks) { + hugetlb_vma_lock_write(vma); + i_mmap_lock_write(vma->vm_file->f_mapping); + } else { + i_mmap_assert_write_locked(vma->vm_file->f_mapping); + } for (address = start; address < end; address += PUD_SIZE) { ptep = hugetlb_walk(vma, address, sz); if (!ptep) @@ -7922,8 +7947,10 @@ static void hugetlb_unshare_pmds(struct spin_unlock(ptl); } flush_hugetlb_tlb_range(vma, start, end); - i_mmap_unlock_write(vma->vm_file->f_mapping); - hugetlb_vma_unlock_write(vma); + if (take_locks) { + i_mmap_unlock_write(vma->vm_file->f_mapping); + hugetlb_vma_unlock_write(vma); + } /* * No need to call mmu_notifier_arch_invalidate_secondary_tlbs(), see * Documentation/mm/mmu_notifier.rst. @@ -7938,7 +7965,8 @@ static void hugetlb_unshare_pmds(struct void hugetlb_unshare_all_pmds(struct vm_area_struct *vma) { hugetlb_unshare_pmds(vma, ALIGN(vma->vm_start, PUD_SIZE), - ALIGN_DOWN(vma->vm_end, PUD_SIZE)); + ALIGN_DOWN(vma->vm_end, PUD_SIZE), + /* take_locks = */ true); } /* --- a/mm/vma.c~mm-hugetlb-unshare-page-tables-during-vma-split-not-before +++ a/mm/vma.c @@ -539,7 +539,14 @@ __split_vma(struct vma_iterator *vmi, st init_vma_prep(&vp, vma); vp.insert = new; vma_prepare(&vp); + + /* + * Get rid of huge pages and shared page tables straddling the split + * boundary. + */ vma_adjust_trans_huge(vma, vma->vm_start, addr, NULL); + if (is_vm_hugetlb_page(vma)) + hugetlb_split(vma, addr); if (new_below) { vma->vm_start = addr; --- a/tools/testing/vma/vma_internal.h~mm-hugetlb-unshare-page-tables-during-vma-split-not-before +++ a/tools/testing/vma/vma_internal.h @@ -932,6 +932,8 @@ static inline void vma_adjust_trans_huge (void)next; } +static inline void hugetlb_split(struct vm_area_struct *, unsigned long) {} + static inline void vma_iter_free(struct vma_iterator *vmi) { mas_destroy(&vmi->mas); _ Patches currently in -mm which might be from jannh(a)google.com are hugetlb-block-hugetlb-file-creation-if-hugetlb-is-not-set-up.patch

1 month, 1 week

1
0
0 0

[merged mm-hotfixes-stable] alloc_tag-handle-module-codetag-load-errors-as-module-load-failures.patch removed from -mm tree

by Andrew Morton

The quilt patch titled Subject: alloc_tag: handle module codetag load errors as module load failures has been removed from the -mm tree. Its filename was alloc_tag-handle-module-codetag-load-errors-as-module-load-failures.patch This patch was dropped because it was merged into the mm-hotfixes-stable branch of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm ------------------------------------------------------ From: Suren Baghdasaryan <surenb(a)google.com> Subject: alloc_tag: handle module codetag load errors as module load failures Date: Wed, 21 May 2025 09:06:02 -0700 Failures inside codetag_load_module() are currently ignored. As a result an error there would not cause a module load failure and freeing of the associated resources. Correct this behavior by propagating the error code to the caller and handling possible errors. With this change, error to allocate percpu counters, which happens at this stage, will not be ignored and will cause a module load failure and freeing of resources. With this change we also do not need to disable memory allocation profiling when this error happens, instead we fail to load the module. Link: https://lkml.kernel.org/r/20250521160602.1940771-1-surenb@google.com Fixes: 10075262888b ("alloc_tag: allocate percpu counters for module tags dynamically") Signed-off-by: Suren Baghdasaryan <surenb(a)google.com> Reported-by: Casey Chen <cachen(a)purestorage.com> Closes: https://lore.kernel.org/all/20250520231620.15259-1-cachen@purestorage.com/ Cc: Daniel Gomez <da.gomez(a)samsung.com> Cc: David Wang <00107082(a)163.com> Cc: Kent Overstreet <kent.overstreet(a)linux.dev> Cc: Luis Chamberalin <mcgrof(a)kernel.org> Cc: Petr Pavlu <petr.pavlu(a)suse.com> Cc: Sami Tolvanen <samitolvanen(a)google.com> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> --- include/linux/codetag.h | 8 ++++---- kernel/module/main.c | 5 +++-- lib/alloc_tag.c | 12 +++++++----- lib/codetag.c | 34 +++++++++++++++++++++++++--------- 4 files changed, 39 insertions(+), 20 deletions(-) --- a/include/linux/codetag.h~alloc_tag-handle-module-codetag-load-errors-as-module-load-failures +++ a/include/linux/codetag.h @@ -36,8 +36,8 @@ union codetag_ref { struct codetag_type_desc { const char *section; size_t tag_size; - void (*module_load)(struct module *mod, - struct codetag *start, struct codetag *end); + int (*module_load)(struct module *mod, + struct codetag *start, struct codetag *end); void (*module_unload)(struct module *mod, struct codetag *start, struct codetag *end); #ifdef CONFIG_MODULES @@ -89,7 +89,7 @@ void *codetag_alloc_module_section(struc unsigned long align); void codetag_free_module_sections(struct module *mod); void codetag_module_replaced(struct module *mod, struct module *new_mod); -void codetag_load_module(struct module *mod); +int codetag_load_module(struct module *mod); void codetag_unload_module(struct module *mod); #else /* defined(CONFIG_CODE_TAGGING) && defined(CONFIG_MODULES) */ @@ -103,7 +103,7 @@ codetag_alloc_module_section(struct modu unsigned long align) { return NULL; } static inline void codetag_free_module_sections(struct module *mod) {} static inline void codetag_module_replaced(struct module *mod, struct module *new_mod) {} -static inline void codetag_load_module(struct module *mod) {} +static inline int codetag_load_module(struct module *mod) { return 0; } static inline void codetag_unload_module(struct module *mod) {} #endif /* defined(CONFIG_CODE_TAGGING) && defined(CONFIG_MODULES) */ --- a/kernel/module/main.c~alloc_tag-handle-module-codetag-load-errors-as-module-load-failures +++ a/kernel/module/main.c @@ -3386,11 +3386,12 @@ static int load_module(struct load_info goto sysfs_cleanup; } + if (codetag_load_module(mod)) + goto sysfs_cleanup; + /* Get rid of temporary copy. */ free_copy(info, flags); - codetag_load_module(mod); - /* Done! */ trace_module_load(mod); --- a/lib/alloc_tag.c~alloc_tag-handle-module-codetag-load-errors-as-module-load-failures +++ a/lib/alloc_tag.c @@ -607,15 +607,16 @@ out: mas_unlock(&mas); } -static void load_module(struct module *mod, struct codetag *start, struct codetag *stop) +static int load_module(struct module *mod, struct codetag *start, struct codetag *stop) { /* Allocate module alloc_tag percpu counters */ struct alloc_tag *start_tag; struct alloc_tag *stop_tag; struct alloc_tag *tag; + /* percpu counters for core allocations are already statically allocated */ if (!mod) - return; + return 0; start_tag = ct_to_alloc_tag(start); stop_tag = ct_to_alloc_tag(stop); @@ -627,12 +628,13 @@ static void load_module(struct module *m free_percpu(tag->counters); tag->counters = NULL; } - shutdown_mem_profiling(true); - pr_err("Failed to allocate memory for allocation tag percpu counters in the module %s. Memory allocation profiling is disabled!\n", + pr_err("Failed to allocate memory for allocation tag percpu counters in the module %s\n", mod->name); - break; + return -ENOMEM; } } + + return 0; } static void replace_module(struct module *mod, struct module *new_mod) --- a/lib/codetag.c~alloc_tag-handle-module-codetag-load-errors-as-module-load-failures +++ a/lib/codetag.c @@ -167,6 +167,7 @@ static int codetag_module_init(struct co { struct codetag_range range; struct codetag_module *cmod; + int mod_id; int err; range = get_section_range(mod, cttype->desc.section); @@ -190,11 +191,20 @@ static int codetag_module_init(struct co cmod->range = range; down_write(&cttype->mod_lock); - err = idr_alloc(&cttype->mod_idr, cmod, 0, 0, GFP_KERNEL); - if (err >= 0) { - cttype->count += range_size(cttype, &range); - if (cttype->desc.module_load) - cttype->desc.module_load(mod, range.start, range.stop); + mod_id = idr_alloc(&cttype->mod_idr, cmod, 0, 0, GFP_KERNEL); + if (mod_id >= 0) { + if (cttype->desc.module_load) { + err = cttype->desc.module_load(mod, range.start, range.stop); + if (!err) + cttype->count += range_size(cttype, &range); + else + idr_remove(&cttype->mod_idr, mod_id); + } else { + cttype->count += range_size(cttype, &range); + err = 0; + } + } else { + err = mod_id; } up_write(&cttype->mod_lock); @@ -295,17 +305,23 @@ void codetag_module_replaced(struct modu mutex_unlock(&codetag_lock); } -void codetag_load_module(struct module *mod) +int codetag_load_module(struct module *mod) { struct codetag_type *cttype; + int ret = 0; if (!mod) - return; + return 0; mutex_lock(&codetag_lock); - list_for_each_entry(cttype, &codetag_types, link) - codetag_module_init(cttype, mod); + list_for_each_entry(cttype, &codetag_types, link) { + ret = codetag_module_init(cttype, mod); + if (ret) + break; + } mutex_unlock(&codetag_lock); + + return ret; } void codetag_unload_module(struct module *mod) _ Patches currently in -mm which might be from surenb(a)google.com are

1 month, 1 week

1
0
0 0

[merged mm-hotfixes-stable] mm-madvise-handle-madvise_lock-failure-during-race-unwinding.patch removed from -mm tree

by Andrew Morton

The quilt patch titled Subject: mm/madvise: handle madvise_lock() failure during race unwinding has been removed from the -mm tree. Its filename was mm-madvise-handle-madvise_lock-failure-during-race-unwinding.patch This patch was dropped because it was merged into the mm-hotfixes-stable branch of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm ------------------------------------------------------ From: SeongJae Park <sj(a)kernel.org> Subject: mm/madvise: handle madvise_lock() failure during race unwinding Date: Mon, 2 Jun 2025 10:49:26 -0700 When unwinding race on -ERESTARTNOINTR handling of process_madvise(), madvise_lock() failure is ignored. Check the failure and abort remaining works in the case. Link: https://lkml.kernel.org/r/20250602174926.1074-1-sj@kernel.org Fixes: 4000e3d0a367 ("mm/madvise: remove redundant mmap_lock operations from process_madvise()") Signed-off-by: SeongJae Park <sj(a)kernel.org> Reported-by: Barry Song <21cnbao(a)gmail.com> Closes: https://lore.kernel.org/CAGsJ_4xJXXO0G+4BizhohSZ4yDteziPw43_uF8nPXPWxUVChzw… Reviewed-by: Jann Horn <jannh(a)google.com> Reviewed-by: Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com> Acked-by: David Hildenbrand <david(a)redhat.com> Reviewed-by: Shakeel Butt <shakeel.butt(a)linux.dev> Reviewed-by: Barry Song <baohua(a)kernel.org> Cc: Liam Howlett <liam.howlett(a)oracle.com> Cc: Vlastimil Babka <vbabka(a)suse.cz> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> --- mm/madvise.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) --- a/mm/madvise.c~mm-madvise-handle-madvise_lock-failure-during-race-unwinding +++ a/mm/madvise.c @@ -1881,7 +1881,9 @@ static ssize_t vector_madvise(struct mm_ /* Drop and reacquire lock to unwind race. */ madvise_finish_tlb(&madv_behavior); madvise_unlock(mm, behavior); - madvise_lock(mm, behavior); + ret = madvise_lock(mm, behavior); + if (ret) + goto out; madvise_init_tlb(&madv_behavior, mm); continue; } @@ -1892,6 +1894,7 @@ static ssize_t vector_madvise(struct mm_ madvise_finish_tlb(&madv_behavior); madvise_unlock(mm, behavior); +out: ret = (total_len - iov_iter_count(iter)) ? : ret; return ret; _ Patches currently in -mm which might be from sj(a)kernel.org are mm-damon-introduce-damon_stat-module.patch mm-damon-introduce-damon_stat-module-fix.patch mm-damon-stat-calculate-and-expose-estimated-memory-bandwidth.patch mm-damon-stat-calculate-and-expose-idle-time-percentiles.patch docs-admin-guide-mm-damon-add-damon_stat-usage-document.patch

1 month, 1 week

1
0
0 0

[merged mm-hotfixes-stable] kvm-s390-rename-prot_none-to-prot_type_dummy.patch removed from -mm tree

by Andrew Morton

The quilt patch titled Subject: KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY has been removed from the -mm tree. Its filename was kvm-s390-rename-prot_none-to-prot_type_dummy.patch This patch was dropped because it was merged into the mm-hotfixes-stable branch of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm ------------------------------------------------------ From: Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com> Subject: KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY Date: Mon, 19 May 2025 15:56:57 +0100 The enum type prot_type declared in arch/s390/kvm/gaccess.c declares an unfortunate identifier within it - PROT_NONE. This clashes with the protection bit define from the uapi for mmap() declared in include/uapi/asm-generic/mman-common.h, which is indeed what those casually reading this code would assume this to refer to. This means that any changes which subsequently alter headers in any way which results in the uapi header being imported here will cause build errors. Resolve the issue by renaming PROT_NONE to PROT_TYPE_DUMMY. Link: https://lkml.kernel.org/r/20250519145657.178365-1-lorenzo.stoakes@oracle.com Fixes: b3cefd6bf16e ("KVM: s390: Pass initialized arg even if unused") Signed-off-by: Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com> Suggested-by: Ignacio Moreno Gonzalez <Ignacio.MorenoGonzalez(a)kuka.com> Reported-by: kernel test robot <lkp(a)intel.com> Closes: https://lore.kernel.org/oe-kbuild-all/202505140943.IgHDa9s7-lkp@intel.com/ Acked-by: Christian Borntraeger <borntraeger(a)linux.ibm.com> Acked-by: Ignacio Moreno Gonzalez <Ignacio.MorenoGonzalez(a)kuka.com> Acked-by: Yang Shi <yang(a)os.amperecomputing.com> Reviewed-by: David Hildenbrand <david(a)redhat.com> Acked-by: Liam R. Howlett <Liam.Howlett(a)oracle.com> Reviewed-by: Oscar Salvador <osalvador(a)suse.de> Reviewed-by: Claudio Imbrenda <imbrenda(a)linux.ibm.com> Cc: <stable(a)vger.kernel.org> Cc: Alexander Gordeev <agordeev(a)linux.ibm.com> Cc: Heiko Carstens <hca(a)linux.ibm.com> Cc: James Houghton <jthoughton(a)google.com> Cc: Janosch Frank <frankja(a)linux.ibm.com> Cc: Matthew Wilcox (Oracle) <willy(a)infradead.org> Cc: Paolo Bonzini <pbonzini(a)redhat.com> Cc: Sven Schnelle <svens(a)linux.ibm.com> Cc: Vasily Gorbik <gor(a)linux.ibm.com> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> --- arch/s390/kvm/gaccess.c | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) --- a/arch/s390/kvm/gaccess.c~kvm-s390-rename-prot_none-to-prot_type_dummy +++ a/arch/s390/kvm/gaccess.c @@ -319,7 +319,7 @@ enum prot_type { PROT_TYPE_DAT = 3, PROT_TYPE_IEP = 4, /* Dummy value for passing an initialized value when code != PGM_PROTECTION */ - PROT_NONE, + PROT_TYPE_DUMMY, }; static int trans_exc_ending(struct kvm_vcpu *vcpu, int code, unsigned long gva, u8 ar, @@ -335,7 +335,7 @@ static int trans_exc_ending(struct kvm_v switch (code) { case PGM_PROTECTION: switch (prot) { - case PROT_NONE: + case PROT_TYPE_DUMMY: /* We should never get here, acts like termination */ WARN_ON_ONCE(1); break; @@ -805,7 +805,7 @@ static int guest_range_to_gpas(struct kv gpa = kvm_s390_real_to_abs(vcpu, ga); if (!kvm_is_gpa_in_memslot(vcpu->kvm, gpa)) { rc = PGM_ADDRESSING; - prot = PROT_NONE; + prot = PROT_TYPE_DUMMY; } } if (rc) @@ -963,7 +963,7 @@ int access_guest_with_key(struct kvm_vcp if (rc == PGM_PROTECTION) prot = PROT_TYPE_KEYC; else - prot = PROT_NONE; + prot = PROT_TYPE_DUMMY; rc = trans_exc_ending(vcpu, rc, ga, ar, mode, prot, terminate); } out_unlock: _ Patches currently in -mm which might be from lorenzo.stoakes(a)oracle.com are docs-mm-expand-vma-doc-to-highlight-pte-freeing-non-vma-traversal.patch mm-ksm-have-ksm-vma-checks-not-require-a-vma-pointer.patch mm-ksm-refer-to-special-vmas-via-vm_special-in-ksm_compatible.patch mm-prevent-ksm-from-breaking-vma-merging-for-new-vmas.patch tools-testing-selftests-add-vma-merge-tests-for-ksm-merge.patch mm-pagewalk-split-walk_page_range_novma-into-kernel-user-parts.patch

1 month, 1 week

1
0
0 0

[merged mm-stable] mm-fix-uprobe-pte-be-overwritten-when-expanding-vma.patch removed from -mm tree

by Andrew Morton

The quilt patch titled Subject: mm: fix uprobe pte be overwritten when expanding vma has been removed from the -mm tree. Its filename was mm-fix-uprobe-pte-be-overwritten-when-expanding-vma.patch This patch was dropped because it was merged into the mm-stable branch of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm ------------------------------------------------------ From: Pu Lehui <pulehui(a)huawei.com> Subject: mm: fix uprobe pte be overwritten when expanding vma Date: Thu, 29 May 2025 15:56:47 +0000 Patch series "Fix uprobe pte be overwritten when expanding vma". This patch (of 4): We encountered a BUG alert triggered by Syzkaller as follows: BUG: Bad rss-counter state mm:00000000b4a60fca type:MM_ANONPAGES val:1 And we can reproduce it with the following steps: 1. register uprobe on file at zero offset 2. mmap the file at zero offset: addr1 = mmap(NULL, 2 * 4096, PROT_NONE, MAP_PRIVATE, fd, 0); 3. mremap part of vma1 to new vma2: addr2 = mremap(addr1, 4096, 2 * 4096, MREMAP_MAYMOVE); 4. mremap back to orig addr1: mremap(addr2, 4096, 4096, MREMAP_MAYMOVE | MREMAP_FIXED, addr1); In step 3, the vma1 range [addr1, addr1 + 4096] will be remap to new vma2 with range [addr2, addr2 + 8192], and remap uprobe anon page from the vma1 to vma2, then unmap the vma1 range [addr1, addr1 + 4096]. In step 4, the vma2 range [addr2, addr2 + 4096] will be remap back to the addr range [addr1, addr1 + 4096]. Since the addr range [addr1 + 4096, addr1 + 8192] still maps the file, it will take vma_merge_new_range to expand the range, and then do uprobe_mmap in vma_complete. Since the merged vma pgoff is also zero offset, it will install uprobe anon page to the merged vma. However, the upcomming move_page_tables step, which use set_pte_at to remap the vma2 uprobe pte to the merged vma, will overwrite the newly uprobe pte in the merged vma, and lead that pte to be orphan. Since the uprobe pte will be remapped to the merged vma, we can remove the unnecessary uprobe_mmap upon merged vma. This problem was first found in linux-6.6.y and also exists in the community syzkaller: https://lore.kernel.org/all/000000000000ada39605a5e71711@google.com/T/ Link: https://lkml.kernel.org/r/20250529155650.4017699-1-pulehui@huaweicloud.com Link: https://lkml.kernel.org/r/20250529155650.4017699-2-pulehui@huaweicloud.com Fixes: 2b1444983508 ("uprobes, mm, x86: Add the ability to install and remove uprobes breakpoints") Signed-off-by: Pu Lehui <pulehui(a)huawei.com> Suggested-by: Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com> Reviewed-by: Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com> Acked-by: David Hildenbrand <david(a)redhat.com> Cc: Jann Horn <jannh(a)google.com> Cc: Liam Howlett <liam.howlett(a)oracle.com> Cc: "Masami Hiramatsu (Google)" <mhiramat(a)kernel.org> Cc: Oleg Nesterov <oleg(a)redhat.com> Cc: Peter Zijlstra <peterz(a)infradead.org> Cc: Vlastimil Babka <vbabka(a)suse.cz> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> --- mm/vma.c | 20 +++++++++++++++++--- mm/vma.h | 7 +++++++ 2 files changed, 24 insertions(+), 3 deletions(-) --- a/mm/vma.c~mm-fix-uprobe-pte-be-overwritten-when-expanding-vma +++ a/mm/vma.c @@ -169,6 +169,9 @@ static void init_multi_vma_prep(struct v vp->file = vma->vm_file; if (vp->file) vp->mapping = vma->vm_file->f_mapping; + + if (vmg && vmg->skip_vma_uprobe) + vp->skip_vma_uprobe = true; } /* @@ -358,10 +361,13 @@ static void vma_complete(struct vma_prep if (vp->file) { i_mmap_unlock_write(vp->mapping); - uprobe_mmap(vp->vma); - if (vp->adj_next) - uprobe_mmap(vp->adj_next); + if (!vp->skip_vma_uprobe) { + uprobe_mmap(vp->vma); + + if (vp->adj_next) + uprobe_mmap(vp->adj_next); + } } if (vp->remove) { @@ -1823,6 +1829,14 @@ struct vm_area_struct *copy_vma(struct v faulted_in_anon_vma = false; } + /* + * If the VMA we are copying might contain a uprobe PTE, ensure + * that we do not establish one upon merge. Otherwise, when mremap() + * moves page tables, it will orphan the newly created PTE. + */ + if (vma->vm_file) + vmg.skip_vma_uprobe = true; + new_vma = find_vma_prev(mm, addr, &vmg.prev); if (new_vma && new_vma->vm_start < addr + len) return NULL; /* should never get here */ --- a/mm/vma.h~mm-fix-uprobe-pte-be-overwritten-when-expanding-vma +++ a/mm/vma.h @@ -19,6 +19,8 @@ struct vma_prepare { struct vm_area_struct *insert; struct vm_area_struct *remove; struct vm_area_struct *remove2; + + bool skip_vma_uprobe :1; }; struct unlink_vma_file_batch { @@ -120,6 +122,11 @@ struct vma_merge_struct { */ bool give_up_on_oom :1; + /* + * If set, skip uprobe_mmap upon merged vma. + */ + bool skip_vma_uprobe :1; + /* Internal flags set during merge process: */ /* _ Patches currently in -mm which might be from pulehui(a)huawei.com are

1 month, 1 week

1
0
0 0

[PATCH 0/3] (no cover subject)

by Bjorn Andersson

Signed-off-by: Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> --- Bjorn Andersson (3): soc: qcom: mdt_loader: Ensure we don't read past the ELF header soc: qcom: mdt_loader: Rename mdt_phdr_valid() soc: qcom: mdt_loader: Actually use the e_phoff drivers/soc/qcom/mdt_loader.c | 57 +++++++++++++++++++++++++++++++++++-------- 1 file changed, 47 insertions(+), 10 deletions(-) --- base-commit: a0bea9e39035edc56a994630e6048c8a191a99d8 change-id: 20250604-mdt-loader-validation-and-fixes-5c3267f5b19f Best regards, -- Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com>

1 month, 1 week

4
4
0 0

[PATCH] media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()

by Gui-Dong Han

In the interrupt handler rain_interrupt(), the buffer full check on rain->buf_len is performed before acquiring rain->buf_lock. This creates a Time-of-Check to Time-of-Use (TOCTOU) race condition, as rain->buf_len is concurrently accessed and modified in the work handler rain_irq_work_handler() under the same lock. Multiple interrupt invocations can race, with each reading buf_len before it becomes full and then proceeding. This can lead to both interrupts attempting to write to the buffer, incrementing buf_len beyond its capacity (DATA_SIZE) and causing a buffer overflow. Fix this bug by moving the spin_lock() to before the buffer full check. This ensures that the check and the subsequent buffer modification are performed atomically, preventing the race condition. An corresponding spin_unlock() is added to the overflow path to correctly release the lock. This possible bug was found by an experimental static analysis tool developed by our team. Fixes: 0f314f6c2e77 ("[media] rainshadow-cec: new RainShadow Tech HDMI CEC driver") Cc: stable(a)vger.kernel.org Signed-off-by: Gui-Dong Han <hanguidong02(a)gmail.com> --- drivers/media/cec/usb/rainshadow/rainshadow-cec.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/drivers/media/cec/usb/rainshadow/rainshadow-cec.c b/drivers/media/cec/usb/rainshadow/rainshadow-cec.c index ee870ea1a886..6f8d6797c614 100644 --- a/drivers/media/cec/usb/rainshadow/rainshadow-cec.c +++ b/drivers/media/cec/usb/rainshadow/rainshadow-cec.c @@ -171,11 +171,12 @@ static irqreturn_t rain_interrupt(struct serio *serio, unsigned char data, { struct rain *rain = serio_get_drvdata(serio); + spin_lock(&rain->buf_lock); if (rain->buf_len == DATA_SIZE) { + spin_unlock(&rain->buf_lock); dev_warn_once(rain->dev, "buffer overflow\n"); return IRQ_HANDLED; } - spin_lock(&rain->buf_lock); rain->buf_len++; rain->buf[rain->buf_wr_idx] = data; rain->buf_wr_idx = (rain->buf_wr_idx + 1) & 0xff; -- 2.25.1

1 month, 1 week

1
0
0 0

[PATCH 6.12 1/1] PCI/ASPM: Disable L1 before disabling L1 PM Substates

by Macpaul Lin

From: Ajay Agarwal <ajayagarwal(a)google.com> [ Upstream commit 7447990137bf06b2aeecad9c6081e01a9f47f2aa ] PCIe r6.2, sec 5.5.4, requires that: If setting either or both of the enable bits for ASPM L1 PM Substates, both ports must be configured as described in this section while ASPM L1 is disabled. Previously, pcie_config_aspm_l1ss() assumed that "setting enable bits" meant "setting them to 1", and it configured L1SS as follows: - Clear L1SS enable bits - Disable L1 - Configure L1SS enable bits as required - Enable L1 if required With this sequence, when disabling L1SS on an ARM A-core with a Synopsys DesignWare PCIe core, the CPU occasionally hangs when reading PCI_L1SS_CTL1, leading to a reboot when the CPU watchdog expires. Move the L1 disable to the caller (pcie_config_aspm_link(), where L1 was already enabled) so L1 is always disabled while updating the L1SS bits: - Disable L1 - Clear L1SS enable bits - Configure L1SS enable bits as required - Enable L1 if required Change pcie_aspm_cap_init() similarly. Link: https://lore.kernel.org/r/20241007032917.872262-1-ajayagarwal@google.com Signed-off-by: Ajay Agarwal <ajayagarwal(a)google.com> [bhelgaas: comments, commit log, compute L1SS setting before config access] Signed-off-by: Bjorn Helgaas <bhelgaas(a)google.com> Tested-by: Johnny-CC Chang <Johnny-CC.Chang(a)mediatek.com> Signed-off-by: Macpaul Lin <macpaul.lin(a)mediatek.com> --- drivers/pci/pcie/aspm.c | 92 ++++++++++++++++++++++------------------- 1 file changed, 50 insertions(+), 42 deletions(-) diff --git a/drivers/pci/pcie/aspm.c b/drivers/pci/pcie/aspm.c index cee2365e54b8..e943691bc931 100644 --- a/drivers/pci/pcie/aspm.c +++ b/drivers/pci/pcie/aspm.c @@ -805,6 +805,15 @@ static void pcie_aspm_cap_init(struct pcie_link_state *link, int blacklist) pcie_capability_read_word(parent, PCI_EXP_LNKCTL, &parent_lnkctl); pcie_capability_read_word(child, PCI_EXP_LNKCTL, &child_lnkctl); + /* Disable L0s/L1 before updating L1SS config */ + if (FIELD_GET(PCI_EXP_LNKCTL_ASPMC, child_lnkctl) || + FIELD_GET(PCI_EXP_LNKCTL_ASPMC, parent_lnkctl)) { + pcie_capability_write_word(child, PCI_EXP_LNKCTL, + child_lnkctl & ~PCI_EXP_LNKCTL_ASPMC); + pcie_capability_write_word(parent, PCI_EXP_LNKCTL, + parent_lnkctl & ~PCI_EXP_LNKCTL_ASPMC); + } + /* * Setup L0s state * @@ -829,6 +838,13 @@ static void pcie_aspm_cap_init(struct pcie_link_state *link, int blacklist) aspm_l1ss_init(link); + /* Restore L0s/L1 if they were enabled */ + if (FIELD_GET(PCI_EXP_LNKCTL_ASPMC, child_lnkctl) || + FIELD_GET(PCI_EXP_LNKCTL_ASPMC, parent_lnkctl)) { + pcie_capability_write_word(parent, PCI_EXP_LNKCTL, parent_lnkctl); + pcie_capability_write_word(child, PCI_EXP_LNKCTL, child_lnkctl); + } + /* Save default state */ link->aspm_default = link->aspm_enabled; @@ -845,25 +861,28 @@ static void pcie_aspm_cap_init(struct pcie_link_state *link, int blacklist) } } -/* Configure the ASPM L1 substates */ +/* Configure the ASPM L1 substates. Caller must disable L1 first. */ static void pcie_config_aspm_l1ss(struct pcie_link_state *link, u32 state) { - u32 val, enable_req; + u32 val; struct pci_dev *child = link->downstream, *parent = link->pdev; - enable_req = (link->aspm_enabled ^ state) & state; + val = 0; + if (state & PCIE_LINK_STATE_L1_1) + val |= PCI_L1SS_CTL1_ASPM_L1_1; + if (state & PCIE_LINK_STATE_L1_2) + val |= PCI_L1SS_CTL1_ASPM_L1_2; + if (state & PCIE_LINK_STATE_L1_1_PCIPM) + val |= PCI_L1SS_CTL1_PCIPM_L1_1; + if (state & PCIE_LINK_STATE_L1_2_PCIPM) + val |= PCI_L1SS_CTL1_PCIPM_L1_2; /* - * Here are the rules specified in the PCIe spec for enabling L1SS: - * - When enabling L1.x, enable bit at parent first, then at child - * - When disabling L1.x, disable bit at child first, then at parent - * - When enabling ASPM L1.x, need to disable L1 - * (at child followed by parent). - * - The ASPM/PCIPM L1.2 must be disabled while programming timing + * PCIe r6.2, sec 5.5.4, rules for enabling L1 PM Substates: + * - Clear L1.x enable bits at child first, then at parent + * - Set L1.x enable bits at parent first, then at child + * - ASPM/PCIPM L1.2 must be disabled while programming timing * parameters - * - * To keep it simple, disable all L1SS bits first, and later enable - * what is needed. */ /* Disable all L1 substates */ @@ -871,26 +890,6 @@ static void pcie_config_aspm_l1ss(struct pcie_link_state *link, u32 state) PCI_L1SS_CTL1_L1SS_MASK, 0); pci_clear_and_set_config_dword(parent, parent->l1ss + PCI_L1SS_CTL1, PCI_L1SS_CTL1_L1SS_MASK, 0); - /* - * If needed, disable L1, and it gets enabled later - * in pcie_config_aspm_link(). - */ - if (enable_req & (PCIE_LINK_STATE_L1_1 | PCIE_LINK_STATE_L1_2)) { - pcie_capability_clear_word(child, PCI_EXP_LNKCTL, - PCI_EXP_LNKCTL_ASPM_L1); - pcie_capability_clear_word(parent, PCI_EXP_LNKCTL, - PCI_EXP_LNKCTL_ASPM_L1); - } - - val = 0; - if (state & PCIE_LINK_STATE_L1_1) - val |= PCI_L1SS_CTL1_ASPM_L1_1; - if (state & PCIE_LINK_STATE_L1_2) - val |= PCI_L1SS_CTL1_ASPM_L1_2; - if (state & PCIE_LINK_STATE_L1_1_PCIPM) - val |= PCI_L1SS_CTL1_PCIPM_L1_1; - if (state & PCIE_LINK_STATE_L1_2_PCIPM) - val |= PCI_L1SS_CTL1_PCIPM_L1_2; /* Enable what we need to enable */ pci_clear_and_set_config_dword(parent, parent->l1ss + PCI_L1SS_CTL1, @@ -937,21 +936,30 @@ static void pcie_config_aspm_link(struct pcie_link_state *link, u32 state) dwstream |= PCI_EXP_LNKCTL_ASPM_L1; } + /* + * Per PCIe r6.2, sec 5.5.4, setting either or both of the enable + * bits for ASPM L1 PM Substates must be done while ASPM L1 is + * disabled. Disable L1 here and apply new configuration after L1SS + * configuration has been completed. + * + * Per sec 7.5.3.7, when disabling ASPM L1, software must disable + * it in the Downstream component prior to disabling it in the + * Upstream component, and ASPM L1 must be enabled in the Upstream + * component prior to enabling it in the Downstream component. + * + * Sec 7.5.3.7 also recommends programming the same ASPM Control + * value for all functions of a multi-function device. + */ + list_for_each_entry(child, &linkbus->devices, bus_list) + pcie_config_aspm_dev(child, 0); + pcie_config_aspm_dev(parent, 0); + if (link->aspm_capable & PCIE_LINK_STATE_L1SS) pcie_config_aspm_l1ss(link, state); - /* - * Spec 2.0 suggests all functions should be configured the - * same setting for ASPM. Enabling ASPM L1 should be done in - * upstream component first and then downstream, and vice - * versa for disabling ASPM L1. Spec doesn't mention L0S. - */ - if (state & PCIE_LINK_STATE_L1) - pcie_config_aspm_dev(parent, upstream); + pcie_config_aspm_dev(parent, upstream); list_for_each_entry(child, &linkbus->devices, bus_list) pcie_config_aspm_dev(child, dwstream); - if (!(state & PCIE_LINK_STATE_L1)) - pcie_config_aspm_dev(parent, upstream); link->aspm_enabled = state; -- 2.45.2

1 month, 1 week

1
0
0 0

[PATCH 6.12.y] block: fix adding folio to bio

by alvalan9＠foxmail.com

From: Ming Lei <ming.lei(a)redhat.com> [ Upstream commit 26064d3e2b4d9a14df1072980e558c636fb023ea ] >4GB folio is possible on some ARCHs, such as aarch64, 16GB hugepage is supported, then 'offset' of folio can't be held in 'unsigned int', cause warning in bio_add_folio_nofail() and IO failure. Fix it by adjusting 'page' & trimming 'offset' so that `->bi_offset` won't be overflow, and folio can be added to bio successfully. Fixes: ed9832bc08db ("block: introduce folio awareness and add a bigger size from folio") Cc: Kundan Kumar <kundan.kumar(a)samsung.com> Cc: Matthew Wilcox (Oracle) <willy(a)infradead.org> Cc: Christoph Hellwig <hch(a)lst.de> Cc: Luis Chamberlain <mcgrof(a)kernel.org> Cc: Gavin Shan <gshan(a)redhat.com> Signed-off-by: Ming Lei <ming.lei(a)redhat.com> Reviewed-by: Matthew Wilcox (Oracle) <willy(a)infradead.org> Link: https://lore.kernel.org/r/20250312145136.2891229-1-ming.lei@redhat.com Signed-off-by: Jens Axboe <axboe(a)kernel.dk> Signed-off-by: Alva Lan <alvalan9(a)foxmail.com> --- The follow-up fix fbecd731de05 ("xfs: fix zoned GC data corruption due to wrong bv_offset") addresses issues in the file fs/xfs/xfs_zone_gc.c. This file was first introduced in version v6.15-rc1. So don't backport the follow up fix to 6.12.y. --- block/bio.c | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/block/bio.c b/block/bio.c index 20c74696bf23..094a5adf79d2 100644 --- a/block/bio.c +++ b/block/bio.c @@ -1156,9 +1156,10 @@ EXPORT_SYMBOL(bio_add_page); void bio_add_folio_nofail(struct bio *bio, struct folio *folio, size_t len, size_t off) { + unsigned long nr = off / PAGE_SIZE; + WARN_ON_ONCE(len > UINT_MAX); - WARN_ON_ONCE(off > UINT_MAX); - __bio_add_page(bio, &folio->page, len, off); + __bio_add_page(bio, folio_page(folio, nr), len, off % PAGE_SIZE); } EXPORT_SYMBOL_GPL(bio_add_folio_nofail); @@ -1179,9 +1180,11 @@ EXPORT_SYMBOL_GPL(bio_add_folio_nofail); bool bio_add_folio(struct bio *bio, struct folio *folio, size_t len, size_t off) { - if (len > UINT_MAX || off > UINT_MAX) + unsigned long nr = off / PAGE_SIZE; + + if (len > UINT_MAX) return false; - return bio_add_page(bio, &folio->page, len, off) > 0; + return bio_add_page(bio, folio_page(folio, nr), len, off % PAGE_SIZE) > 0; } EXPORT_SYMBOL(bio_add_folio); -- 2.34.1

1 month, 1 week

1
0
0 0

[PATCH v2 1/2] drm/nouveau/instmem/gk20a: fix overflow in IOVA calculation for iommu_map/unmap

by Alexey Nepomnyashih

Fix possible overflow in the address expression used as the second argument to iommu_map() and iommu_unmap(). Without an explicit cast, this expression may overflow when 'r->offset' or 'i' are large. Cast the result to unsigned long before shifting to ensure correct IOVA computation and prevent unintended wraparound. Found by Linux Verification Center (linuxtesting.org) with SVACE. Cc: stable(a)vger.kernel.org # v4.4+ Signed-off-by: Alexey Nepomnyashih <sdl(a)nppct.ru> --- drivers/gpu/drm/nouveau/nvkm/subdev/instmem/gk20a.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/gpu/drm/nouveau/nvkm/subdev/instmem/gk20a.c b/drivers/gpu/drm/nouveau/nvkm/subdev/instmem/gk20a.c index 201022ae9214..17a0e1a46211 100644 --- a/drivers/gpu/drm/nouveau/nvkm/subdev/instmem/gk20a.c +++ b/drivers/gpu/drm/nouveau/nvkm/subdev/instmem/gk20a.c @@ -334,7 +334,7 @@ gk20a_instobj_dtor_iommu(struct nvkm_memory *memory) /* Unmap pages from GPU address space and free them */ for (i = 0; i < node->base.mn->length; i++) { iommu_unmap(imem->domain, - (r->offset + i) << imem->iommu_pgshift, PAGE_SIZE); + ((unsigned long)r->offset + i) << imem->iommu_pgshift, PAGE_SIZE); dma_unmap_page(dev, node->dma_addrs[i], PAGE_SIZE, DMA_BIDIRECTIONAL); __free_page(node->pages[i]); @@ -472,7 +472,7 @@ gk20a_instobj_ctor_iommu(struct gk20a_instmem *imem, u32 npages, u32 align, /* Map into GPU address space */ for (i = 0; i < npages; i++) { - u32 offset = (r->offset + i) << imem->iommu_pgshift; + unsigned long offset = ((unsigned long)r->offset + i) << imem->iommu_pgshift; ret = iommu_map(imem->domain, offset, node->dma_addrs[i], PAGE_SIZE, IOMMU_READ | IOMMU_WRITE, -- 2.43.0

1 month, 1 week

1
1
0 0

[PATCH 1/2] drm/nouveau/instmem/gk20a: fix overflow in IOVA calculation for iommu_map/unmap

by Alexey Nepomnyashih

Fix possible overflow in the address expression used as the second argument to iommu_map() and iommu_unmap(). Without an explicit cast, this expression may overflow when 'r->offset' or 'i' are large. Cast the result to unsigned long before shifting to ensure correct IOVA computation and prevent unintended wraparound. Found by Linux Verification Center (linuxtesting.org) with SVACE. Cc: stable(a)vger.kernel.org # v4.4+ Signed-off-by: Alexey Nepomnyashih <sdl(a)nppct.ru> --- drivers/gpu/drm/nouveau/nvkm/subdev/instmem/gk20a.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/gpu/drm/nouveau/nvkm/subdev/instmem/gk20a.c b/drivers/gpu/drm/nouveau/nvkm/subdev/instmem/gk20a.c index 201022ae9214..17a0e1a46211 100644 --- a/drivers/gpu/drm/nouveau/nvkm/subdev/instmem/gk20a.c +++ b/drivers/gpu/drm/nouveau/nvkm/subdev/instmem/gk20a.c @@ -334,7 +334,7 @@ gk20a_instobj_dtor_iommu(struct nvkm_memory *memory) /* Unmap pages from GPU address space and free them */ for (i = 0; i < node->base.mn->length; i++) { iommu_unmap(imem->domain, - (r->offset + i) << imem->iommu_pgshift, PAGE_SIZE); + ((unsigned long)r->offset + i) << imem->iommu_pgshift, PAGE_SIZE); dma_unmap_page(dev, node->dma_addrs[i], PAGE_SIZE, DMA_BIDIRECTIONAL); __free_page(node->pages[i]); @@ -472,7 +472,7 @@ gk20a_instobj_ctor_iommu(struct gk20a_instmem *imem, u32 npages, u32 align, /* Map into GPU address space */ for (i = 0; i < npages; i++) { - u32 offset = (r->offset + i) << imem->iommu_pgshift; + unsigned long offset = ((unsigned long)r->offset + i) << imem->iommu_pgshift; ret = iommu_map(imem->domain, offset, node->dma_addrs[i], PAGE_SIZE, IOMMU_READ | IOMMU_WRITE, -- 2.43.0

1 month, 1 week

1
1
0 0

[PATCH v3 02/11] platform/x86/intel/pmt: crashlog binary file endpoint

by Michael J. Ruhl

Usage of the intel_pmt_read() for binary sysfs, requires an allocated endpoint struct. The crashlog driver does not allocate the endpoint. Without the ep, the crashlog usage causes the following NULL pointer exception: BUG: kernel NULL pointer dereference, address: 0000000000000000 Oops: Oops: 0000 [#1] SMP NOPTI RIP: 0010:intel_pmt_read+0x3b/0x70 [pmt_class] Code: Call Trace: <TASK> ? sysfs_kf_bin_read+0xc0/0xe0 kernfs_fop_read_iter+0xac/0x1a0 vfs_read+0x26d/0x350 ksys_read+0x6b/0xe0 __x64_sys_read+0x1d/0x30 x64_sys_call+0x1bc8/0x1d70 do_syscall_64+0x6d/0x110 Add the endpoint information to the crashlog driver to avoid the NULL pointer exception. Fixes: 416eeb2e1fc7 ("platform/x86/intel/pmt: telemetry: Export API to read telemetry") Cc: <stable(a)vger.kernel.org> Signed-off-by: Michael J. Ruhl <michael.j.ruhl(a)intel.com> --- drivers/platform/x86/intel/pmt/crashlog.c | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/drivers/platform/x86/intel/pmt/crashlog.c b/drivers/platform/x86/intel/pmt/crashlog.c index 6a9eb3c4b313..74ce199e59f0 100644 --- a/drivers/platform/x86/intel/pmt/crashlog.c +++ b/drivers/platform/x86/intel/pmt/crashlog.c @@ -252,6 +252,7 @@ static struct intel_pmt_namespace pmt_crashlog_ns = { .xa = &crashlog_array, .attr_grp = &pmt_crashlog_group, .pmt_header_decode = pmt_crashlog_header_decode, + .pmt_add_endpoint = intel_pmt_add_endpoint, }; /* @@ -262,8 +263,12 @@ static void pmt_crashlog_remove(struct auxiliary_device *auxdev) struct pmt_crashlog_priv *priv = auxiliary_get_drvdata(auxdev); int i; - for (i = 0; i < priv->num_entries; i++) - intel_pmt_dev_destroy(&priv->entry[i].entry, &pmt_crashlog_ns); + for (i = 0; i < priv->num_entries; i++) { + struct intel_pmt_entry *entry = &priv->entry[i].entry; + + intel_pmt_release_endpoint(entry->ep); + intel_pmt_dev_destroy(entry, &pmt_crashlog_ns); + } } static int pmt_crashlog_probe(struct auxiliary_device *auxdev, -- 2.49.0

1 month, 1 week

1
0
0 0

[PATCH v3 01/11] platform/x86/intel: refactor endpoint usage

by Michael J. Ruhl

The use of an endpoint has introduced a dependency in all class/pmt drivers to have an endpoint allocated. The telemetry driver has this allocation, the crashlog does not. The current usage is very telemetry focused, but should be common code. With this in mind: rename the struct telemetry_endpoint to struct class_endpoint, refactor the common endpoint code to be in the class.c module Fixes: 416eeb2e1fc7 ("platform/x86/intel/pmt: telemetry: Export API to read telemetry") Cc: <stable(a)vger.kernel.org> Signed-off-by: Michael J. Ruhl <michael.j.ruhl(a)intel.com> --- drivers/platform/x86/intel/pmc/core.c | 3 +- drivers/platform/x86/intel/pmc/core.h | 4 +- drivers/platform/x86/intel/pmc/core_ssram.c | 2 +- drivers/platform/x86/intel/pmt/class.c | 45 ++++++++++++++++++ drivers/platform/x86/intel/pmt/class.h | 21 +++++++-- drivers/platform/x86/intel/pmt/telemetry.c | 51 ++++----------------- drivers/platform/x86/intel/pmt/telemetry.h | 23 ++++------ 7 files changed, 84 insertions(+), 65 deletions(-) diff --git a/drivers/platform/x86/intel/pmc/core.c b/drivers/platform/x86/intel/pmc/core.c index 7a1d11f2914f..805f56665d1d 100644 --- a/drivers/platform/x86/intel/pmc/core.c +++ b/drivers/platform/x86/intel/pmc/core.c @@ -29,6 +29,7 @@ #include <asm/tsc.h> #include "core.h" +#include "../pmt/class.h" #include "../pmt/telemetry.h" /* Maximum number of modes supported by platfoms that has low power mode capability */ @@ -1198,7 +1199,7 @@ int get_primary_reg_base(struct pmc *pmc) void pmc_core_punit_pmt_init(struct pmc_dev *pmcdev, u32 guid) { - struct telem_endpoint *ep; + struct class_endpoint *ep; struct pci_dev *pcidev; pcidev = pci_get_domain_bus_and_slot(0, 0, PCI_DEVFN(10, 0)); diff --git a/drivers/platform/x86/intel/pmc/core.h b/drivers/platform/x86/intel/pmc/core.h index 945a1c440cca..1c12ea7c3ce3 100644 --- a/drivers/platform/x86/intel/pmc/core.h +++ b/drivers/platform/x86/intel/pmc/core.h @@ -16,7 +16,7 @@ #include <linux/bits.h> #include <linux/platform_device.h> -struct telem_endpoint; +struct class_endpoint; #define SLP_S0_RES_COUNTER_MASK GENMASK(31, 0) @@ -432,7 +432,7 @@ struct pmc_dev { bool has_die_c6; u32 die_c6_offset; - struct telem_endpoint *punit_ep; + struct class_endpoint *punit_ep; struct pmc_info *regmap_list; }; diff --git a/drivers/platform/x86/intel/pmc/core_ssram.c b/drivers/platform/x86/intel/pmc/core_ssram.c index 739569803017..3e670fc380a5 100644 --- a/drivers/platform/x86/intel/pmc/core_ssram.c +++ b/drivers/platform/x86/intel/pmc/core_ssram.c @@ -42,7 +42,7 @@ static u32 pmc_core_find_guid(struct pmc_info *list, const struct pmc_reg_map *m static int pmc_core_get_lpm_req(struct pmc_dev *pmcdev, struct pmc *pmc) { - struct telem_endpoint *ep; + struct class_endpoint *ep; const u8 *lpm_indices; int num_maps, mode_offset = 0; int ret, mode; diff --git a/drivers/platform/x86/intel/pmt/class.c b/drivers/platform/x86/intel/pmt/class.c index 7233b654bbad..bba552131bc2 100644 --- a/drivers/platform/x86/intel/pmt/class.c +++ b/drivers/platform/x86/intel/pmt/class.c @@ -76,6 +76,47 @@ int pmt_telem_read_mmio(struct pci_dev *pdev, struct pmt_callbacks *cb, u32 guid } EXPORT_SYMBOL_NS_GPL(pmt_telem_read_mmio, "INTEL_PMT"); +/* Called when all users unregister and the device is removed */ +static void pmt_class_ep_release(struct kref *kref) +{ + struct class_endpoint *ep; + + ep = container_of(kref, struct class_endpoint, kref); + kfree(ep); +} + +void intel_pmt_release_endpoint(struct class_endpoint *ep) +{ + kref_put(&ep->kref, pmt_class_ep_release); +} +EXPORT_SYMBOL_NS_GPL(intel_pmt_release_endpoint, "INTEL_PMT"); + +int intel_pmt_add_endpoint(struct intel_vsec_device *ivdev, + struct intel_pmt_entry *entry) +{ + struct class_endpoint *ep; + + ep = kzalloc(sizeof(*ep), GFP_KERNEL); + if (!ep) + return -ENOMEM; + + ep->pcidev = ivdev->pcidev; + ep->header.access_type = entry->header.access_type; + ep->header.guid = entry->header.guid; + ep->header.base_offset = entry->header.base_offset; + ep->header.size = entry->header.size; + ep->base = entry->base; + ep->present = true; + ep->cb = ivdev->priv_data; + + /* Endpoint lifetimes are managed by kref, not devres */ + kref_init(&ep->kref); + + entry->ep = ep; + + return 0; +} +EXPORT_SYMBOL_NS_GPL(intel_pmt_add_endpoint, "INTEL_PMT"); /* * sysfs */ @@ -97,6 +138,10 @@ intel_pmt_read(struct file *filp, struct kobject *kobj, if (count > entry->size - off) count = entry->size - off; + /* verify endpoint is available */ + if (!entry->ep) + return -ENODEV; + count = pmt_telem_read_mmio(entry->ep->pcidev, entry->cb, entry->header.guid, buf, entry->base, off, count); diff --git a/drivers/platform/x86/intel/pmt/class.h b/drivers/platform/x86/intel/pmt/class.h index b2006d57779d..d2d8f9e31c9d 100644 --- a/drivers/platform/x86/intel/pmt/class.h +++ b/drivers/platform/x86/intel/pmt/class.h @@ -9,8 +9,6 @@ #include <linux/err.h> #include <linux/io.h> -#include "telemetry.h" - /* PMT access types */ #define ACCESS_BARID 2 #define ACCESS_LOCAL 3 @@ -19,11 +17,19 @@ #define GET_BIR(v) ((v) & GENMASK(2, 0)) #define GET_ADDRESS(v) ((v) & GENMASK(31, 3)) +struct kref; struct pci_dev; -struct telem_endpoint { +struct class_header { + u8 access_type; + u16 size; + u32 guid; + u32 base_offset; +}; + +struct class_endpoint { struct pci_dev *pcidev; - struct telem_header header; + struct class_header header; struct pmt_callbacks *cb; void __iomem *base; bool present; @@ -38,7 +44,7 @@ struct intel_pmt_header { }; struct intel_pmt_entry { - struct telem_endpoint *ep; + struct class_endpoint *ep; struct intel_pmt_header header; struct bin_attribute pmt_bin_attr; struct kobject *kobj; @@ -69,4 +75,9 @@ int intel_pmt_dev_create(struct intel_pmt_entry *entry, struct intel_vsec_device *dev, int idx); void intel_pmt_dev_destroy(struct intel_pmt_entry *entry, struct intel_pmt_namespace *ns); + +int intel_pmt_add_endpoint(struct intel_vsec_device *ivdev, + struct intel_pmt_entry *entry); +void intel_pmt_release_endpoint(struct class_endpoint *ep); + #endif diff --git a/drivers/platform/x86/intel/pmt/telemetry.c b/drivers/platform/x86/intel/pmt/telemetry.c index ac3a9bdf5601..27d09867e6a3 100644 --- a/drivers/platform/x86/intel/pmt/telemetry.c +++ b/drivers/platform/x86/intel/pmt/telemetry.c @@ -18,6 +18,7 @@ #include <linux/overflow.h> #include "class.h" +#include "telemetry.h" #define TELEM_SIZE_OFFSET 0x0 #define TELEM_GUID_OFFSET 0x4 @@ -93,48 +94,14 @@ static int pmt_telem_header_decode(struct intel_pmt_entry *entry, return 0; } -static int pmt_telem_add_endpoint(struct intel_vsec_device *ivdev, - struct intel_pmt_entry *entry) -{ - struct telem_endpoint *ep; - - /* Endpoint lifetimes are managed by kref, not devres */ - entry->ep = kzalloc(sizeof(*(entry->ep)), GFP_KERNEL); - if (!entry->ep) - return -ENOMEM; - - ep = entry->ep; - ep->pcidev = ivdev->pcidev; - ep->header.access_type = entry->header.access_type; - ep->header.guid = entry->header.guid; - ep->header.base_offset = entry->header.base_offset; - ep->header.size = entry->header.size; - ep->base = entry->base; - ep->present = true; - ep->cb = ivdev->priv_data; - - kref_init(&ep->kref); - - return 0; -} - static DEFINE_XARRAY_ALLOC(telem_array); static struct intel_pmt_namespace pmt_telem_ns = { .name = "telem", .xa = &telem_array, .pmt_header_decode = pmt_telem_header_decode, - .pmt_add_endpoint = pmt_telem_add_endpoint, + .pmt_add_endpoint = intel_pmt_add_endpoint, }; -/* Called when all users unregister and the device is removed */ -static void pmt_telem_ep_release(struct kref *kref) -{ - struct telem_endpoint *ep; - - ep = container_of(kref, struct telem_endpoint, kref); - kfree(ep); -} - unsigned long pmt_telem_get_next_endpoint(unsigned long start) { struct intel_pmt_entry *entry; @@ -155,7 +122,7 @@ unsigned long pmt_telem_get_next_endpoint(unsigned long start) } EXPORT_SYMBOL_NS_GPL(pmt_telem_get_next_endpoint, "INTEL_PMT_TELEMETRY"); -struct telem_endpoint *pmt_telem_register_endpoint(int devid) +struct class_endpoint *pmt_telem_register_endpoint(int devid) { struct intel_pmt_entry *entry; unsigned long index = devid; @@ -174,9 +141,9 @@ struct telem_endpoint *pmt_telem_register_endpoint(int devid) } EXPORT_SYMBOL_NS_GPL(pmt_telem_register_endpoint, "INTEL_PMT_TELEMETRY"); -void pmt_telem_unregister_endpoint(struct telem_endpoint *ep) +void pmt_telem_unregister_endpoint(struct class_endpoint *ep) { - kref_put(&ep->kref, pmt_telem_ep_release); + intel_pmt_release_endpoint(ep); } EXPORT_SYMBOL_NS_GPL(pmt_telem_unregister_endpoint, "INTEL_PMT_TELEMETRY"); @@ -206,7 +173,7 @@ int pmt_telem_get_endpoint_info(int devid, struct telem_endpoint_info *info) } EXPORT_SYMBOL_NS_GPL(pmt_telem_get_endpoint_info, "INTEL_PMT_TELEMETRY"); -int pmt_telem_read(struct telem_endpoint *ep, u32 id, u64 *data, u32 count) +int pmt_telem_read(struct class_endpoint *ep, u32 id, u64 *data, u32 count) { u32 offset, size; @@ -226,7 +193,7 @@ int pmt_telem_read(struct telem_endpoint *ep, u32 id, u64 *data, u32 count) } EXPORT_SYMBOL_NS_GPL(pmt_telem_read, "INTEL_PMT_TELEMETRY"); -int pmt_telem_read32(struct telem_endpoint *ep, u32 id, u32 *data, u32 count) +int pmt_telem_read32(struct class_endpoint *ep, u32 id, u32 *data, u32 count) { u32 offset, size; @@ -245,7 +212,7 @@ int pmt_telem_read32(struct telem_endpoint *ep, u32 id, u32 *data, u32 count) } EXPORT_SYMBOL_NS_GPL(pmt_telem_read32, "INTEL_PMT_TELEMETRY"); -struct telem_endpoint * +struct class_endpoint * pmt_telem_find_and_register_endpoint(struct pci_dev *pcidev, u32 guid, u16 pos) { int devid = 0; @@ -279,7 +246,7 @@ static void pmt_telem_remove(struct auxiliary_device *auxdev) for (i = 0; i < priv->num_entries; i++) { struct intel_pmt_entry *entry = &priv->entry[i]; - kref_put(&entry->ep->kref, pmt_telem_ep_release); + pmt_telem_unregister_endpoint(entry->ep); intel_pmt_dev_destroy(entry, &pmt_telem_ns); } mutex_unlock(&ep_lock); diff --git a/drivers/platform/x86/intel/pmt/telemetry.h b/drivers/platform/x86/intel/pmt/telemetry.h index d45af5512b4e..e987dd32a58a 100644 --- a/drivers/platform/x86/intel/pmt/telemetry.h +++ b/drivers/platform/x86/intel/pmt/telemetry.h @@ -2,6 +2,8 @@ #ifndef _TELEMETRY_H #define _TELEMETRY_H +#include "class.h" + /* Telemetry types */ #define PMT_TELEM_TELEMETRY 0 #define PMT_TELEM_CRASHLOG 1 @@ -9,16 +11,9 @@ struct telem_endpoint; struct pci_dev; -struct telem_header { - u8 access_type; - u16 size; - u32 guid; - u32 base_offset; -}; - struct telem_endpoint_info { struct pci_dev *pdev; - struct telem_header header; + struct class_header header; }; /** @@ -47,7 +42,7 @@ unsigned long pmt_telem_get_next_endpoint(unsigned long start); * * endpoint - On success returns pointer to the telemetry endpoint * * -ENXIO - telemetry endpoint not found */ -struct telem_endpoint *pmt_telem_register_endpoint(int devid); +struct class_endpoint *pmt_telem_register_endpoint(int devid); /** * pmt_telem_unregister_endpoint() - Unregister a telemetry endpoint @@ -55,7 +50,7 @@ struct telem_endpoint *pmt_telem_register_endpoint(int devid); * * Decrements the kref usage counter for the endpoint. */ -void pmt_telem_unregister_endpoint(struct telem_endpoint *ep); +void pmt_telem_unregister_endpoint(struct class_endpoint *ep); /** * pmt_telem_get_endpoint_info() - Get info for an endpoint from its devid @@ -80,8 +75,8 @@ int pmt_telem_get_endpoint_info(int devid, struct telem_endpoint_info *info); * * endpoint - On success returns pointer to the telemetry endpoint * * -ENXIO - telemetry endpoint not found */ -struct telem_endpoint *pmt_telem_find_and_register_endpoint(struct pci_dev *pcidev, - u32 guid, u16 pos); +struct class_endpoint *pmt_telem_find_and_register_endpoint(struct pci_dev *pcidev, + u32 guid, u16 pos); /** * pmt_telem_read() - Read qwords from counter sram using sample id @@ -101,7 +96,7 @@ struct telem_endpoint *pmt_telem_find_and_register_endpoint(struct pci_dev *pcid * * -EPIPE - The device was removed during the read. Data written * but should be considered invalid. */ -int pmt_telem_read(struct telem_endpoint *ep, u32 id, u64 *data, u32 count); +int pmt_telem_read(struct class_endpoint *ep, u32 id, u64 *data, u32 count); /** * pmt_telem_read32() - Read qwords from counter sram using sample id @@ -121,6 +116,6 @@ int pmt_telem_read(struct telem_endpoint *ep, u32 id, u64 *data, u32 count); * * -EPIPE - The device was removed during the read. Data written * but should be considered invalid. */ -int pmt_telem_read32(struct telem_endpoint *ep, u32 id, u32 *data, u32 count); +int pmt_telem_read32(struct class_endpoint *ep, u32 id, u32 *data, u32 count); #endif -- 2.49.0

1 month, 1 week

1
0
0 0

[PATCH v3 02/11] platform/x86/intel/pmt: crashlog binary file endpoint

by Michael J. Ruhl

Usage of the intel_pmt_read() for binary sysfs, requires an allocated endpoint struct. The crashlog driver does not allocate the endpoint. Without the ep, the crashlog usage causes the following NULL pointer exception: BUG: kernel NULL pointer dereference, address: 0000000000000000 Oops: Oops: 0000 [#1] SMP NOPTI RIP: 0010:intel_pmt_read+0x3b/0x70 [pmt_class] Code: Call Trace: <TASK> ? sysfs_kf_bin_read+0xc0/0xe0 kernfs_fop_read_iter+0xac/0x1a0 vfs_read+0x26d/0x350 ksys_read+0x6b/0xe0 __x64_sys_read+0x1d/0x30 x64_sys_call+0x1bc8/0x1d70 do_syscall_64+0x6d/0x110 Add the endpoint information to the crashlog driver to avoid the NULL pointer exception. Fixes: 416eeb2e1fc7 ("platform/x86/intel/pmt: telemetry: Export API to read telemetry") Cc: <stable(a)vger.kernel.org> Signed-off-by: Michael J. Ruhl <michael.j.ruhl(a)intel.com> --- drivers/platform/x86/intel/pmt/crashlog.c | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/drivers/platform/x86/intel/pmt/crashlog.c b/drivers/platform/x86/intel/pmt/crashlog.c index 6a9eb3c4b313..74ce199e59f0 100644 --- a/drivers/platform/x86/intel/pmt/crashlog.c +++ b/drivers/platform/x86/intel/pmt/crashlog.c @@ -252,6 +252,7 @@ static struct intel_pmt_namespace pmt_crashlog_ns = { .xa = &crashlog_array, .attr_grp = &pmt_crashlog_group, .pmt_header_decode = pmt_crashlog_header_decode, + .pmt_add_endpoint = intel_pmt_add_endpoint, }; /* @@ -262,8 +263,12 @@ static void pmt_crashlog_remove(struct auxiliary_device *auxdev) struct pmt_crashlog_priv *priv = auxiliary_get_drvdata(auxdev); int i; - for (i = 0; i < priv->num_entries; i++) - intel_pmt_dev_destroy(&priv->entry[i].entry, &pmt_crashlog_ns); + for (i = 0; i < priv->num_entries; i++) { + struct intel_pmt_entry *entry = &priv->entry[i].entry; + + intel_pmt_release_endpoint(entry->ep); + intel_pmt_dev_destroy(entry, &pmt_crashlog_ns); + } } static int pmt_crashlog_probe(struct auxiliary_device *auxdev, -- 2.49.0

1 month, 1 week

1
0
0 0

[PATCH v3 01/11] platform/x86/intel: refactor endpoint usage

by Michael J. Ruhl

The use of an endpoint has introduced a dependency in all class/pmt drivers to have an endpoint allocated. The telemetry driver has this allocation, the crashlog does not. The current usage is very telemetry focused, but should be common code. With this in mind: rename the struct telemetry_endpoint to struct class_endpoint, refactor the common endpoint code to be in the class.c module Fixes: 416eeb2e1fc7 ("platform/x86/intel/pmt: telemetry: Export API to read telemetry") Cc: <stable(a)vger.kernel.org> Signed-off-by: Michael J. Ruhl <michael.j.ruhl(a)intel.com> --- drivers/platform/x86/intel/pmc/core.c | 3 +- drivers/platform/x86/intel/pmc/core.h | 4 +- drivers/platform/x86/intel/pmc/core_ssram.c | 2 +- drivers/platform/x86/intel/pmt/class.c | 45 ++++++++++++++++++ drivers/platform/x86/intel/pmt/class.h | 21 +++++++-- drivers/platform/x86/intel/pmt/telemetry.c | 51 ++++----------------- drivers/platform/x86/intel/pmt/telemetry.h | 23 ++++------ 7 files changed, 84 insertions(+), 65 deletions(-) diff --git a/drivers/platform/x86/intel/pmc/core.c b/drivers/platform/x86/intel/pmc/core.c index 7a1d11f2914f..805f56665d1d 100644 --- a/drivers/platform/x86/intel/pmc/core.c +++ b/drivers/platform/x86/intel/pmc/core.c @@ -29,6 +29,7 @@ #include <asm/tsc.h> #include "core.h" +#include "../pmt/class.h" #include "../pmt/telemetry.h" /* Maximum number of modes supported by platfoms that has low power mode capability */ @@ -1198,7 +1199,7 @@ int get_primary_reg_base(struct pmc *pmc) void pmc_core_punit_pmt_init(struct pmc_dev *pmcdev, u32 guid) { - struct telem_endpoint *ep; + struct class_endpoint *ep; struct pci_dev *pcidev; pcidev = pci_get_domain_bus_and_slot(0, 0, PCI_DEVFN(10, 0)); diff --git a/drivers/platform/x86/intel/pmc/core.h b/drivers/platform/x86/intel/pmc/core.h index 945a1c440cca..1c12ea7c3ce3 100644 --- a/drivers/platform/x86/intel/pmc/core.h +++ b/drivers/platform/x86/intel/pmc/core.h @@ -16,7 +16,7 @@ #include <linux/bits.h> #include <linux/platform_device.h> -struct telem_endpoint; +struct class_endpoint; #define SLP_S0_RES_COUNTER_MASK GENMASK(31, 0) @@ -432,7 +432,7 @@ struct pmc_dev { bool has_die_c6; u32 die_c6_offset; - struct telem_endpoint *punit_ep; + struct class_endpoint *punit_ep; struct pmc_info *regmap_list; }; diff --git a/drivers/platform/x86/intel/pmc/core_ssram.c b/drivers/platform/x86/intel/pmc/core_ssram.c index 739569803017..3e670fc380a5 100644 --- a/drivers/platform/x86/intel/pmc/core_ssram.c +++ b/drivers/platform/x86/intel/pmc/core_ssram.c @@ -42,7 +42,7 @@ static u32 pmc_core_find_guid(struct pmc_info *list, const struct pmc_reg_map *m static int pmc_core_get_lpm_req(struct pmc_dev *pmcdev, struct pmc *pmc) { - struct telem_endpoint *ep; + struct class_endpoint *ep; const u8 *lpm_indices; int num_maps, mode_offset = 0; int ret, mode; diff --git a/drivers/platform/x86/intel/pmt/class.c b/drivers/platform/x86/intel/pmt/class.c index 7233b654bbad..bba552131bc2 100644 --- a/drivers/platform/x86/intel/pmt/class.c +++ b/drivers/platform/x86/intel/pmt/class.c @@ -76,6 +76,47 @@ int pmt_telem_read_mmio(struct pci_dev *pdev, struct pmt_callbacks *cb, u32 guid } EXPORT_SYMBOL_NS_GPL(pmt_telem_read_mmio, "INTEL_PMT"); +/* Called when all users unregister and the device is removed */ +static void pmt_class_ep_release(struct kref *kref) +{ + struct class_endpoint *ep; + + ep = container_of(kref, struct class_endpoint, kref); + kfree(ep); +} + +void intel_pmt_release_endpoint(struct class_endpoint *ep) +{ + kref_put(&ep->kref, pmt_class_ep_release); +} +EXPORT_SYMBOL_NS_GPL(intel_pmt_release_endpoint, "INTEL_PMT"); + +int intel_pmt_add_endpoint(struct intel_vsec_device *ivdev, + struct intel_pmt_entry *entry) +{ + struct class_endpoint *ep; + + ep = kzalloc(sizeof(*ep), GFP_KERNEL); + if (!ep) + return -ENOMEM; + + ep->pcidev = ivdev->pcidev; + ep->header.access_type = entry->header.access_type; + ep->header.guid = entry->header.guid; + ep->header.base_offset = entry->header.base_offset; + ep->header.size = entry->header.size; + ep->base = entry->base; + ep->present = true; + ep->cb = ivdev->priv_data; + + /* Endpoint lifetimes are managed by kref, not devres */ + kref_init(&ep->kref); + + entry->ep = ep; + + return 0; +} +EXPORT_SYMBOL_NS_GPL(intel_pmt_add_endpoint, "INTEL_PMT"); /* * sysfs */ @@ -97,6 +138,10 @@ intel_pmt_read(struct file *filp, struct kobject *kobj, if (count > entry->size - off) count = entry->size - off; + /* verify endpoint is available */ + if (!entry->ep) + return -ENODEV; + count = pmt_telem_read_mmio(entry->ep->pcidev, entry->cb, entry->header.guid, buf, entry->base, off, count); diff --git a/drivers/platform/x86/intel/pmt/class.h b/drivers/platform/x86/intel/pmt/class.h index b2006d57779d..d2d8f9e31c9d 100644 --- a/drivers/platform/x86/intel/pmt/class.h +++ b/drivers/platform/x86/intel/pmt/class.h @@ -9,8 +9,6 @@ #include <linux/err.h> #include <linux/io.h> -#include "telemetry.h" - /* PMT access types */ #define ACCESS_BARID 2 #define ACCESS_LOCAL 3 @@ -19,11 +17,19 @@ #define GET_BIR(v) ((v) & GENMASK(2, 0)) #define GET_ADDRESS(v) ((v) & GENMASK(31, 3)) +struct kref; struct pci_dev; -struct telem_endpoint { +struct class_header { + u8 access_type; + u16 size; + u32 guid; + u32 base_offset; +}; + +struct class_endpoint { struct pci_dev *pcidev; - struct telem_header header; + struct class_header header; struct pmt_callbacks *cb; void __iomem *base; bool present; @@ -38,7 +44,7 @@ struct intel_pmt_header { }; struct intel_pmt_entry { - struct telem_endpoint *ep; + struct class_endpoint *ep; struct intel_pmt_header header; struct bin_attribute pmt_bin_attr; struct kobject *kobj; @@ -69,4 +75,9 @@ int intel_pmt_dev_create(struct intel_pmt_entry *entry, struct intel_vsec_device *dev, int idx); void intel_pmt_dev_destroy(struct intel_pmt_entry *entry, struct intel_pmt_namespace *ns); + +int intel_pmt_add_endpoint(struct intel_vsec_device *ivdev, + struct intel_pmt_entry *entry); +void intel_pmt_release_endpoint(struct class_endpoint *ep); + #endif diff --git a/drivers/platform/x86/intel/pmt/telemetry.c b/drivers/platform/x86/intel/pmt/telemetry.c index ac3a9bdf5601..27d09867e6a3 100644 --- a/drivers/platform/x86/intel/pmt/telemetry.c +++ b/drivers/platform/x86/intel/pmt/telemetry.c @@ -18,6 +18,7 @@ #include <linux/overflow.h> #include "class.h" +#include "telemetry.h" #define TELEM_SIZE_OFFSET 0x0 #define TELEM_GUID_OFFSET 0x4 @@ -93,48 +94,14 @@ static int pmt_telem_header_decode(struct intel_pmt_entry *entry, return 0; } -static int pmt_telem_add_endpoint(struct intel_vsec_device *ivdev, - struct intel_pmt_entry *entry) -{ - struct telem_endpoint *ep; - - /* Endpoint lifetimes are managed by kref, not devres */ - entry->ep = kzalloc(sizeof(*(entry->ep)), GFP_KERNEL); - if (!entry->ep) - return -ENOMEM; - - ep = entry->ep; - ep->pcidev = ivdev->pcidev; - ep->header.access_type = entry->header.access_type; - ep->header.guid = entry->header.guid; - ep->header.base_offset = entry->header.base_offset; - ep->header.size = entry->header.size; - ep->base = entry->base; - ep->present = true; - ep->cb = ivdev->priv_data; - - kref_init(&ep->kref); - - return 0; -} - static DEFINE_XARRAY_ALLOC(telem_array); static struct intel_pmt_namespace pmt_telem_ns = { .name = "telem", .xa = &telem_array, .pmt_header_decode = pmt_telem_header_decode, - .pmt_add_endpoint = pmt_telem_add_endpoint, + .pmt_add_endpoint = intel_pmt_add_endpoint, }; -/* Called when all users unregister and the device is removed */ -static void pmt_telem_ep_release(struct kref *kref) -{ - struct telem_endpoint *ep; - - ep = container_of(kref, struct telem_endpoint, kref); - kfree(ep); -} - unsigned long pmt_telem_get_next_endpoint(unsigned long start) { struct intel_pmt_entry *entry; @@ -155,7 +122,7 @@ unsigned long pmt_telem_get_next_endpoint(unsigned long start) } EXPORT_SYMBOL_NS_GPL(pmt_telem_get_next_endpoint, "INTEL_PMT_TELEMETRY"); -struct telem_endpoint *pmt_telem_register_endpoint(int devid) +struct class_endpoint *pmt_telem_register_endpoint(int devid) { struct intel_pmt_entry *entry; unsigned long index = devid; @@ -174,9 +141,9 @@ struct telem_endpoint *pmt_telem_register_endpoint(int devid) } EXPORT_SYMBOL_NS_GPL(pmt_telem_register_endpoint, "INTEL_PMT_TELEMETRY"); -void pmt_telem_unregister_endpoint(struct telem_endpoint *ep) +void pmt_telem_unregister_endpoint(struct class_endpoint *ep) { - kref_put(&ep->kref, pmt_telem_ep_release); + intel_pmt_release_endpoint(ep); } EXPORT_SYMBOL_NS_GPL(pmt_telem_unregister_endpoint, "INTEL_PMT_TELEMETRY"); @@ -206,7 +173,7 @@ int pmt_telem_get_endpoint_info(int devid, struct telem_endpoint_info *info) } EXPORT_SYMBOL_NS_GPL(pmt_telem_get_endpoint_info, "INTEL_PMT_TELEMETRY"); -int pmt_telem_read(struct telem_endpoint *ep, u32 id, u64 *data, u32 count) +int pmt_telem_read(struct class_endpoint *ep, u32 id, u64 *data, u32 count) { u32 offset, size; @@ -226,7 +193,7 @@ int pmt_telem_read(struct telem_endpoint *ep, u32 id, u64 *data, u32 count) } EXPORT_SYMBOL_NS_GPL(pmt_telem_read, "INTEL_PMT_TELEMETRY"); -int pmt_telem_read32(struct telem_endpoint *ep, u32 id, u32 *data, u32 count) +int pmt_telem_read32(struct class_endpoint *ep, u32 id, u32 *data, u32 count) { u32 offset, size; @@ -245,7 +212,7 @@ int pmt_telem_read32(struct telem_endpoint *ep, u32 id, u32 *data, u32 count) } EXPORT_SYMBOL_NS_GPL(pmt_telem_read32, "INTEL_PMT_TELEMETRY"); -struct telem_endpoint * +struct class_endpoint * pmt_telem_find_and_register_endpoint(struct pci_dev *pcidev, u32 guid, u16 pos) { int devid = 0; @@ -279,7 +246,7 @@ static void pmt_telem_remove(struct auxiliary_device *auxdev) for (i = 0; i < priv->num_entries; i++) { struct intel_pmt_entry *entry = &priv->entry[i]; - kref_put(&entry->ep->kref, pmt_telem_ep_release); + pmt_telem_unregister_endpoint(entry->ep); intel_pmt_dev_destroy(entry, &pmt_telem_ns); } mutex_unlock(&ep_lock); diff --git a/drivers/platform/x86/intel/pmt/telemetry.h b/drivers/platform/x86/intel/pmt/telemetry.h index d45af5512b4e..e987dd32a58a 100644 --- a/drivers/platform/x86/intel/pmt/telemetry.h +++ b/drivers/platform/x86/intel/pmt/telemetry.h @@ -2,6 +2,8 @@ #ifndef _TELEMETRY_H #define _TELEMETRY_H +#include "class.h" + /* Telemetry types */ #define PMT_TELEM_TELEMETRY 0 #define PMT_TELEM_CRASHLOG 1 @@ -9,16 +11,9 @@ struct telem_endpoint; struct pci_dev; -struct telem_header { - u8 access_type; - u16 size; - u32 guid; - u32 base_offset; -}; - struct telem_endpoint_info { struct pci_dev *pdev; - struct telem_header header; + struct class_header header; }; /** @@ -47,7 +42,7 @@ unsigned long pmt_telem_get_next_endpoint(unsigned long start); * * endpoint - On success returns pointer to the telemetry endpoint * * -ENXIO - telemetry endpoint not found */ -struct telem_endpoint *pmt_telem_register_endpoint(int devid); +struct class_endpoint *pmt_telem_register_endpoint(int devid); /** * pmt_telem_unregister_endpoint() - Unregister a telemetry endpoint @@ -55,7 +50,7 @@ struct telem_endpoint *pmt_telem_register_endpoint(int devid); * * Decrements the kref usage counter for the endpoint. */ -void pmt_telem_unregister_endpoint(struct telem_endpoint *ep); +void pmt_telem_unregister_endpoint(struct class_endpoint *ep); /** * pmt_telem_get_endpoint_info() - Get info for an endpoint from its devid @@ -80,8 +75,8 @@ int pmt_telem_get_endpoint_info(int devid, struct telem_endpoint_info *info); * * endpoint - On success returns pointer to the telemetry endpoint * * -ENXIO - telemetry endpoint not found */ -struct telem_endpoint *pmt_telem_find_and_register_endpoint(struct pci_dev *pcidev, - u32 guid, u16 pos); +struct class_endpoint *pmt_telem_find_and_register_endpoint(struct pci_dev *pcidev, + u32 guid, u16 pos); /** * pmt_telem_read() - Read qwords from counter sram using sample id @@ -101,7 +96,7 @@ struct telem_endpoint *pmt_telem_find_and_register_endpoint(struct pci_dev *pcid * * -EPIPE - The device was removed during the read. Data written * but should be considered invalid. */ -int pmt_telem_read(struct telem_endpoint *ep, u32 id, u64 *data, u32 count); +int pmt_telem_read(struct class_endpoint *ep, u32 id, u64 *data, u32 count); /** * pmt_telem_read32() - Read qwords from counter sram using sample id @@ -121,6 +116,6 @@ int pmt_telem_read(struct telem_endpoint *ep, u32 id, u64 *data, u32 count); * * -EPIPE - The device was removed during the read. Data written * but should be considered invalid. */ -int pmt_telem_read32(struct telem_endpoint *ep, u32 id, u32 *data, u32 count); +int pmt_telem_read32(struct class_endpoint *ep, u32 id, u32 *data, u32 count); #endif -- 2.49.0

1 month, 1 week

1
0
0 0

[PATCH net] gve: Fix stuck TX queue for DQ queue format

by Harshitha Ramamurthy

From: Praveen Kaligineedi <pkaligineedi(a)google.com> gve_tx_timeout was calculating missed completions in a way that is only relevant in the GQ queue format. Additionally, it was attempting to disable device interrupts, which is not needed in either GQ or DQ queue formats. As a result, TX timeouts with the DQ queue format likely would have triggered early resets without kicking the queue at all. This patch drops the check for pending work altogether and always kicks the queue after validating the queue has not seen a TX timeout too recently. Fixes: 87a7f321bb6a ("gve: Recover from queue stall due to missed IRQ") Co-developed-by: Tim Hostetler <thostet(a)google.com> Signed-off-by: Tim Hostetler <thostet(a)google.com> Signed-off-by: Praveen Kaligineedi <pkaligineedi(a)google.com> Signed-off-by: Harshitha Ramamurthy <hramamurthy(a)google.com> --- drivers/net/ethernet/google/gve/gve_main.c | 16 ++++------------ 1 file changed, 4 insertions(+), 12 deletions(-) diff --git a/drivers/net/ethernet/google/gve/gve_main.c b/drivers/net/ethernet/google/gve/gve_main.c index c3791cf..0c6328b 100644 --- a/drivers/net/ethernet/google/gve/gve_main.c +++ b/drivers/net/ethernet/google/gve/gve_main.c @@ -1921,7 +1921,6 @@ static void gve_tx_timeout(struct net_device *dev, unsigned int txqueue) struct gve_notify_block *block; struct gve_tx_ring *tx = NULL; struct gve_priv *priv; - u32 last_nic_done; u32 current_time; u32 ntfy_idx; @@ -1941,17 +1940,10 @@ static void gve_tx_timeout(struct net_device *dev, unsigned int txqueue) if (tx->last_kick_msec + MIN_TX_TIMEOUT_GAP > current_time) goto reset; - /* Check to see if there are missed completions, which will allow us to - * kick the queue. - */ - last_nic_done = gve_tx_load_event_counter(priv, tx); - if (last_nic_done - tx->done) { - netdev_info(dev, "Kicking queue %d", txqueue); - iowrite32be(GVE_IRQ_MASK, gve_irq_doorbell(priv, block)); - napi_schedule(&block->napi); - tx->last_kick_msec = current_time; - goto out; - } // Else reset. + netdev_info(dev, "Kicking queue %d", txqueue); + napi_schedule(&block->napi); + tx->last_kick_msec = current_time; + goto out; reset: gve_schedule_reset(priv); -- 2.49.0.805.g082f7c87e0-goog

1 month, 1 week

4
3
0 0

[PATCH] accel/ivpu: Reorder doorbell unregister and command queue destruction

by Maciej Falkowski

From: Karol Wachowski <karol.wachowski(a)intel.com> Refactor ivpu_cmdq_unregister() to ensure the doorbell is unregistered before destroying the command queue. The NPU firmware requires doorbells to be unregistered prior to command queue destruction. If doorbell remains registered when command queue destroy command is sent firmware will automatically unregister the doorbell, making subsequent unregister attempts no-operations (NOPs). Ensure compliance with firmware expectations by moving the doorbell unregister call ahead of the command queue destruction logic, thus preventing unnecessary NOP operation. Fixes: 2a18ceff9482 ("accel/ivpu: Implement support for hardware scheduler") Cc: <stable(a)vger.kernel.org> # v6.11+ Signed-off-by: Karol Wachowski <karol.wachowski(a)intel.com> Signed-off-by: Maciej Falkowski <maciej.falkowski(a)linux.intel.com> --- drivers/accel/ivpu/ivpu_job.c | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/drivers/accel/ivpu/ivpu_job.c b/drivers/accel/ivpu/ivpu_job.c index bd351dd46d6b..060f1fc031d3 100644 --- a/drivers/accel/ivpu/ivpu_job.c +++ b/drivers/accel/ivpu/ivpu_job.c @@ -271,6 +271,10 @@ static int ivpu_cmdq_unregister(struct ivpu_file_priv *file_priv, struct ivpu_cm if (!cmdq->db_id) return 0; + ret = ivpu_jsm_unregister_db(vdev, cmdq->db_id); + if (!ret) + ivpu_dbg(vdev, JOB, "DB %d unregistered\n", cmdq->db_id); + if (vdev->fw->sched_mode == VPU_SCHEDULING_MODE_HW) { ret = ivpu_jsm_hws_destroy_cmdq(vdev, file_priv->ctx.id, cmdq->id); if (!ret) @@ -278,10 +282,6 @@ static int ivpu_cmdq_unregister(struct ivpu_file_priv *file_priv, struct ivpu_cm cmdq->id, file_priv->ctx.id); } - ret = ivpu_jsm_unregister_db(vdev, cmdq->db_id); - if (!ret) - ivpu_dbg(vdev, JOB, "DB %d unregistered\n", cmdq->db_id); - xa_erase(&file_priv->vdev->db_xa, cmdq->db_id); cmdq->db_id = 0; -- 2.43.0

1 month, 1 week

3
2
0 0

[PATCH 1/2] dmaengine: qcom_hidma: fix memory leak on probe failure

by Qasim Ijaz

hidma_ll_init() is invoked to create and initialise a struct hidma_lldev object during hidma probe. During this a FIFO buffer is allocated, but if some failure occurs after (like hidma_ll_setup failure) we should clean up the FIFO. Fixes: d1615ca2e085 ("dmaengine: qcom_hidma: implement lower level hardware interface") Cc: stable(a)vger.kernel.org Signed-off-by: Qasim Ijaz <qasdev00(a)gmail.com> --- drivers/dma/qcom/hidma_ll.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/drivers/dma/qcom/hidma_ll.c b/drivers/dma/qcom/hidma_ll.c index 53244e0e34a3..fee448499777 100644 --- a/drivers/dma/qcom/hidma_ll.c +++ b/drivers/dma/qcom/hidma_ll.c @@ -788,8 +788,10 @@ struct hidma_lldev *hidma_ll_init(struct device *dev, u32 nr_tres, return NULL; rc = hidma_ll_setup(lldev); - if (rc) + if (rc) { + kfifo_free(&lldev->handoff_fifo); return NULL; + } spin_lock_init(&lldev->lock); tasklet_setup(&lldev->task, hidma_ll_tre_complete); -- 2.39.5

1 month, 1 week

2
1
0 0

[PATCH 6.12] Revert "cpufreq: tegra186: Share policy per cluster"

by Jon Hunter

This reverts commit d95fdee2253e612216e72f29c65b92ec42d254eb which is upstream commit be4ae8c19492cd6d5de61ccb34ffb3f5ede5eec8. This commit is causing a suspend regression on Tegra186 Jetson TX2 with Linux v6.12.y kernels. This is not seen with Linux v6.15 that includes this change but indicates that there are there changes missing. Therefore, revert this change. Fixes: d95fdee2253e ("cpufreq: tegra186: Share policy per cluster") Link: https://lore.kernel.org/linux-tegra/bf1dabf7-0337-40e9-8b8e-4e93a0ffd4cc@nv… Signed-off-by: Jon Hunter <jonathanh(a)nvidia.com> --- drivers/cpufreq/tegra186-cpufreq.c | 7 ------- 1 file changed, 7 deletions(-) diff --git a/drivers/cpufreq/tegra186-cpufreq.c b/drivers/cpufreq/tegra186-cpufreq.c index 4e5b6f9a56d1..7b8fcfa55038 100644 --- a/drivers/cpufreq/tegra186-cpufreq.c +++ b/drivers/cpufreq/tegra186-cpufreq.c @@ -73,18 +73,11 @@ static int tegra186_cpufreq_init(struct cpufreq_policy *policy) { struct tegra186_cpufreq_data *data = cpufreq_get_driver_data(); unsigned int cluster = data->cpus[policy->cpu].bpmp_cluster_id; - u32 cpu; policy->freq_table = data->clusters[cluster].table; policy->cpuinfo.transition_latency = 300 * 1000; policy->driver_data = NULL; - /* set same policy for all cpus in a cluster */ - for (cpu = 0; cpu < ARRAY_SIZE(tegra186_cpus); cpu++) { - if (data->cpus[cpu].bpmp_cluster_id == cluster) - cpumask_set_cpu(cpu, policy->cpus); - } - return 0; } -- 2.43.0

1 month, 1 week

1
0
0 0

[PATCH 6.1] Revert "cpufreq: tegra186: Share policy per cluster"

by Jon Hunter

This reverts commit 89172666228de1cefcacf5bc6f61c6281751d2ed which is upstream commit be4ae8c19492cd6d5de61ccb34ffb3f5ede5eec8. This commit is causing a suspend regression on Tegra186 Jetson TX2 with Linux v6.12.y kernels. This is not seen with Linux v6.15 that includes this change but indicates that there are there changes missing. Therefore, revert this change. Link: https://lore.kernel.org/linux-tegra/bf1dabf7-0337-40e9-8b8e-4e93a0ffd4cc@nv… Fixes: 89172666228d ("cpufreq: tegra186: Share policy per cluster") Signed-off-by: Jon Hunter <jonathanh(a)nvidia.com> --- drivers/cpufreq/tegra186-cpufreq.c | 7 ------- 1 file changed, 7 deletions(-) diff --git a/drivers/cpufreq/tegra186-cpufreq.c b/drivers/cpufreq/tegra186-cpufreq.c index 1d6b54303723..6c88827f4e62 100644 --- a/drivers/cpufreq/tegra186-cpufreq.c +++ b/drivers/cpufreq/tegra186-cpufreq.c @@ -73,18 +73,11 @@ static int tegra186_cpufreq_init(struct cpufreq_policy *policy) { struct tegra186_cpufreq_data *data = cpufreq_get_driver_data(); unsigned int cluster = data->cpus[policy->cpu].bpmp_cluster_id; - u32 cpu; policy->freq_table = data->clusters[cluster].table; policy->cpuinfo.transition_latency = 300 * 1000; policy->driver_data = NULL; - /* set same policy for all cpus in a cluster */ - for (cpu = 0; cpu < ARRAY_SIZE(tegra186_cpus); cpu++) { - if (data->cpus[cpu].bpmp_cluster_id == cluster) - cpumask_set_cpu(cpu, policy->cpus); - } - return 0; } -- 2.43.0

1 month, 1 week

1
0
0 0

[PATCH 5.15] Revert "cpufreq: tegra186: Share policy per cluster"

by Jon Hunter

This reverts commit 2592aeda794c9ea73193effdab69f1cf90d0851a which is upstream commit be4ae8c19492cd6d5de61ccb34ffb3f5ede5eec8. This commit is causing a suspend regression on Tegra186 Jetson TX2 with Linux v6.12.y kernels. This is not seen with Linux v6.15 that includes this change but indicates that there are there changes missing. Therefore, revert this change. Fixes: 2592aeda794c ("cpufreq: tegra186: Share policy per cluster") Link: https://lore.kernel.org/linux-tegra/bf1dabf7-0337-40e9-8b8e-4e93a0ffd4cc@nv… Signed-off-by: Jon Hunter <jonathanh(a)nvidia.com> --- drivers/cpufreq/tegra186-cpufreq.c | 7 ------- 1 file changed, 7 deletions(-) diff --git a/drivers/cpufreq/tegra186-cpufreq.c b/drivers/cpufreq/tegra186-cpufreq.c index 19597246f9cc..5d1943e787b0 100644 --- a/drivers/cpufreq/tegra186-cpufreq.c +++ b/drivers/cpufreq/tegra186-cpufreq.c @@ -73,18 +73,11 @@ static int tegra186_cpufreq_init(struct cpufreq_policy *policy) { struct tegra186_cpufreq_data *data = cpufreq_get_driver_data(); unsigned int cluster = data->cpus[policy->cpu].bpmp_cluster_id; - u32 cpu; policy->freq_table = data->clusters[cluster].table; policy->cpuinfo.transition_latency = 300 * 1000; policy->driver_data = NULL; - /* set same policy for all cpus in a cluster */ - for (cpu = 0; cpu < ARRAY_SIZE(tegra186_cpus); cpu++) { - if (data->cpus[cpu].bpmp_cluster_id == cluster) - cpumask_set_cpu(cpu, policy->cpus); - } - return 0; } -- 2.43.0

1 month, 1 week

1
0
0 0

[PATCH v2] accel/ivpu: Fix warning in ivpu_gem_bo_free()

by Jacek Lawrynowicz

Don't WARN if imported buffers are in use in ivpu_gem_bo_free() as they can be indeed used in the original context/driver. Fixes: 647371a6609d ("accel/ivpu: Add GEM buffer object management") Cc: stable(a)vger.kernel.org # v6.3 Signed-off-by: Jacek Lawrynowicz <jacek.lawrynowicz(a)linux.intel.com> --- v2: Use drm_gem_is_imported() to check if the buffer is imported. --- drivers/accel/ivpu/ivpu_gem.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/drivers/accel/ivpu/ivpu_gem.c b/drivers/accel/ivpu/ivpu_gem.c index c193a80241f5f..5ff0bac739fc9 100644 --- a/drivers/accel/ivpu/ivpu_gem.c +++ b/drivers/accel/ivpu/ivpu_gem.c @@ -278,7 +278,8 @@ static void ivpu_gem_bo_free(struct drm_gem_object *obj) list_del(&bo->bo_list_node); mutex_unlock(&vdev->bo_list_lock); - drm_WARN_ON(&vdev->drm, !dma_resv_test_signaled(obj->resv, DMA_RESV_USAGE_READ)); + drm_WARN_ON(&vdev->drm, !drm_gem_is_imported(&bo->base.base) && + !dma_resv_test_signaled(obj->resv, DMA_RESV_USAGE_READ)); drm_WARN_ON(&vdev->drm, ivpu_bo_size(bo) == 0); drm_WARN_ON(&vdev->drm, bo->base.vaddr); -- 2.45.1

1 month, 1 week

3
3
0 0

[PATCH] accel/ivpu: Trigger device recovery on engine reset/resume failure

by Jacek Lawrynowicz

From: Karol Wachowski <karol.wachowski(a)intel.com> Trigger full device recovery when the driver fails to restore device state via engine reset and resume operations. This is necessary because, even if submissions from a faulty context are blocked, the NPU may still process previously submitted faulty jobs if the engine reset fails to abort them. Such jobs can continue to generate faults and occupy device resources. When engine reset is ineffective, the only way to recover is to perform a full device recovery. Fixes: dad945c27a42 ("accel/ivpu: Add handling of VPU_JSM_STATUS_MVNCI_CONTEXT_VIOLATION_HW") Cc: <stable(a)vger.kernel.org> # v6.15+ Signed-off-by: Karol Wachowski <karol.wachowski(a)intel.com> Signed-off-by: Jacek Lawrynowicz <jacek.lawrynowicz(a)linux.intel.com> --- drivers/accel/ivpu/ivpu_job.c | 6 ++++-- drivers/accel/ivpu/ivpu_jsm_msg.c | 9 +++++++-- 2 files changed, 11 insertions(+), 4 deletions(-) diff --git a/drivers/accel/ivpu/ivpu_job.c b/drivers/accel/ivpu/ivpu_job.c index 1c8e283ad9854..fae8351aa3309 100644 --- a/drivers/accel/ivpu/ivpu_job.c +++ b/drivers/accel/ivpu/ivpu_job.c @@ -986,7 +986,8 @@ void ivpu_context_abort_work_fn(struct work_struct *work) return; if (vdev->fw->sched_mode == VPU_SCHEDULING_MODE_HW) - ivpu_jsm_reset_engine(vdev, 0); + if (ivpu_jsm_reset_engine(vdev, 0)) + return; mutex_lock(&vdev->context_list_lock); xa_for_each(&vdev->context_xa, ctx_id, file_priv) { @@ -1009,7 +1010,8 @@ void ivpu_context_abort_work_fn(struct work_struct *work) if (vdev->fw->sched_mode != VPU_SCHEDULING_MODE_HW) goto runtime_put; - ivpu_jsm_hws_resume_engine(vdev, 0); + if (ivpu_jsm_hws_resume_engine(vdev, 0)) + return; /* * In hardware scheduling mode NPU already has stopped processing jobs * and won't send us any further notifications, thus we have to free job related resources diff --git a/drivers/accel/ivpu/ivpu_jsm_msg.c b/drivers/accel/ivpu/ivpu_jsm_msg.c index 219ab8afefabd..0256b2dfefc10 100644 --- a/drivers/accel/ivpu/ivpu_jsm_msg.c +++ b/drivers/accel/ivpu/ivpu_jsm_msg.c @@ -7,6 +7,7 @@ #include "ivpu_hw.h" #include "ivpu_ipc.h" #include "ivpu_jsm_msg.h" +#include "ivpu_pm.h" #include "vpu_jsm_api.h" const char *ivpu_jsm_msg_type_to_str(enum vpu_ipc_msg_type type) @@ -163,8 +164,10 @@ int ivpu_jsm_reset_engine(struct ivpu_device *vdev, u32 engine) ret = ivpu_ipc_send_receive(vdev, &req, VPU_JSM_MSG_ENGINE_RESET_DONE, &resp, VPU_IPC_CHAN_ASYNC_CMD, vdev->timeout.jsm); - if (ret) + if (ret) { ivpu_err_ratelimited(vdev, "Failed to reset engine %d: %d\n", engine, ret); + ivpu_pm_trigger_recovery(vdev, "Engine reset failed"); + } return ret; } @@ -354,8 +357,10 @@ int ivpu_jsm_hws_resume_engine(struct ivpu_device *vdev, u32 engine) ret = ivpu_ipc_send_receive(vdev, &req, VPU_JSM_MSG_HWS_RESUME_ENGINE_DONE, &resp, VPU_IPC_CHAN_ASYNC_CMD, vdev->timeout.jsm); - if (ret) + if (ret) { ivpu_err_ratelimited(vdev, "Failed to resume engine %d: %d\n", engine, ret); + ivpu_pm_trigger_recovery(vdev, "Engine resume failed"); + } return ret; } -- 2.45.1

1 month, 1 week

2
4
0 0

[PATCH] accel/ivpu: Use dma_resv_lock() instead of a custom mutex

by Jacek Lawrynowicz

This fixes a potential race conditions in: - ivpu_bo_unbind_locked() where we modified the shmem->sgt without holding the dma_resv_lock(). - ivpu_bo_print_info() where we read the shmem->pages without holding the dma_resv_lock(). Using dma_resv_lock() also protects against future syncronisation issues that may arise when accessing drm_gem_shmem_object or drm_gem_object members. Fixes: 42328003ecb6 ("accel/ivpu: Refactor BO creation functions") Cc: <stable(a)vger.kernel.org> # v6.9+ Signed-off-by: Jacek Lawrynowicz <jacek.lawrynowicz(a)linux.intel.com> --- drivers/accel/ivpu/ivpu_gem.c | 63 +++++++++++++++++++---------------- drivers/accel/ivpu/ivpu_gem.h | 1 - 2 files changed, 34 insertions(+), 30 deletions(-) diff --git a/drivers/accel/ivpu/ivpu_gem.c b/drivers/accel/ivpu/ivpu_gem.c index c193a80241f5f..5908268ca45e9 100644 --- a/drivers/accel/ivpu/ivpu_gem.c +++ b/drivers/accel/ivpu/ivpu_gem.c @@ -33,6 +33,16 @@ static inline void ivpu_dbg_bo(struct ivpu_device *vdev, struct ivpu_bo *bo, con (bool)bo->base.base.import_attach); } +static inline int ivpu_bo_lock(struct ivpu_bo *bo) +{ + return dma_resv_lock(bo->base.base.resv, NULL); +} + +static inline void ivpu_bo_unlock(struct ivpu_bo *bo) +{ + dma_resv_unlock(bo->base.base.resv); +} + /* * ivpu_bo_pin() - pin the backing physical pages and map them to VPU. * @@ -43,22 +53,22 @@ static inline void ivpu_dbg_bo(struct ivpu_device *vdev, struct ivpu_bo *bo, con int __must_check ivpu_bo_pin(struct ivpu_bo *bo) { struct ivpu_device *vdev = ivpu_bo_to_vdev(bo); + struct sg_table *sgt; int ret = 0; - mutex_lock(&bo->lock); - ivpu_dbg_bo(vdev, bo, "pin"); - drm_WARN_ON(&vdev->drm, !bo->ctx); - if (!bo->mmu_mapped) { - struct sg_table *sgt = drm_gem_shmem_get_pages_sgt(&bo->base); + sgt = drm_gem_shmem_get_pages_sgt(&bo->base); + if (IS_ERR(sgt)) { + ret = PTR_ERR(sgt); + ivpu_err(vdev, "Failed to map BO in IOMMU: %d\n", ret); + return ret; + } - if (IS_ERR(sgt)) { - ret = PTR_ERR(sgt); - ivpu_err(vdev, "Failed to map BO in IOMMU: %d\n", ret); - goto unlock; - } + ivpu_bo_lock(bo); + if (!bo->mmu_mapped) { + drm_WARN_ON(&vdev->drm, !bo->ctx); ret = ivpu_mmu_context_map_sgt(vdev, bo->ctx, bo->vpu_addr, sgt, ivpu_bo_is_snooped(bo)); if (ret) { @@ -69,7 +79,7 @@ int __must_check ivpu_bo_pin(struct ivpu_bo *bo) } unlock: - mutex_unlock(&bo->lock); + ivpu_bo_unlock(bo); return ret; } @@ -84,7 +94,7 @@ ivpu_bo_alloc_vpu_addr(struct ivpu_bo *bo, struct ivpu_mmu_context *ctx, if (!drm_dev_enter(&vdev->drm, &idx)) return -ENODEV; - mutex_lock(&bo->lock); + ivpu_bo_lock(bo); ret = ivpu_mmu_context_insert_node(ctx, range, ivpu_bo_size(bo), &bo->mm_node); if (!ret) { @@ -94,7 +104,7 @@ ivpu_bo_alloc_vpu_addr(struct ivpu_bo *bo, struct ivpu_mmu_context *ctx, ivpu_err(vdev, "Failed to add BO to context %u: %d\n", ctx->id, ret); } - mutex_unlock(&bo->lock); + ivpu_bo_unlock(bo); drm_dev_exit(idx); @@ -105,7 +115,7 @@ static void ivpu_bo_unbind_locked(struct ivpu_bo *bo) { struct ivpu_device *vdev = ivpu_bo_to_vdev(bo); - lockdep_assert(lockdep_is_held(&bo->lock) || !kref_read(&bo->base.base.refcount)); + lockdep_assert(dma_resv_held(bo->base.base.resv) || !kref_read(&bo->base.base.refcount)); if (bo->mmu_mapped) { drm_WARN_ON(&vdev->drm, !bo->ctx); @@ -123,14 +133,12 @@ static void ivpu_bo_unbind_locked(struct ivpu_bo *bo) if (bo->base.base.import_attach) return; - dma_resv_lock(bo->base.base.resv, NULL); if (bo->base.sgt) { dma_unmap_sgtable(vdev->drm.dev, bo->base.sgt, DMA_BIDIRECTIONAL, 0); sg_free_table(bo->base.sgt); kfree(bo->base.sgt); bo->base.sgt = NULL; } - dma_resv_unlock(bo->base.base.resv); } void ivpu_bo_unbind_all_bos_from_context(struct ivpu_device *vdev, struct ivpu_mmu_context *ctx) @@ -142,12 +150,12 @@ void ivpu_bo_unbind_all_bos_from_context(struct ivpu_device *vdev, struct ivpu_m mutex_lock(&vdev->bo_list_lock); list_for_each_entry(bo, &vdev->bo_list, bo_list_node) { - mutex_lock(&bo->lock); + ivpu_bo_lock(bo); if (bo->ctx == ctx) { ivpu_dbg_bo(vdev, bo, "unbind"); ivpu_bo_unbind_locked(bo); } - mutex_unlock(&bo->lock); + ivpu_bo_unlock(bo); } mutex_unlock(&vdev->bo_list_lock); } @@ -167,7 +175,6 @@ struct drm_gem_object *ivpu_gem_create_object(struct drm_device *dev, size_t siz bo->base.pages_mark_dirty_on_put = true; /* VPU can dirty a BO anytime */ INIT_LIST_HEAD(&bo->bo_list_node); - mutex_init(&bo->lock); return &bo->base.base; } @@ -286,8 +293,6 @@ static void ivpu_gem_bo_free(struct drm_gem_object *obj) drm_WARN_ON(&vdev->drm, bo->mmu_mapped); drm_WARN_ON(&vdev->drm, bo->ctx); - mutex_destroy(&bo->lock); - drm_WARN_ON(obj->dev, bo->base.pages_use_count > 1); drm_gem_shmem_free(&bo->base); } @@ -370,9 +375,9 @@ ivpu_bo_create(struct ivpu_device *vdev, struct ivpu_mmu_context *ctx, goto err_put; if (flags & DRM_IVPU_BO_MAPPABLE) { - dma_resv_lock(bo->base.base.resv, NULL); + ivpu_bo_lock(bo); ret = drm_gem_shmem_vmap(&bo->base, &map); - dma_resv_unlock(bo->base.base.resv); + ivpu_bo_unlock(bo); if (ret) goto err_put; @@ -395,9 +400,9 @@ void ivpu_bo_free(struct ivpu_bo *bo) struct iosys_map map = IOSYS_MAP_INIT_VADDR(bo->base.vaddr); if (bo->flags & DRM_IVPU_BO_MAPPABLE) { - dma_resv_lock(bo->base.base.resv, NULL); + ivpu_bo_lock(bo); drm_gem_shmem_vunmap(&bo->base, &map); - dma_resv_unlock(bo->base.base.resv); + ivpu_bo_unlock(bo); } drm_gem_object_put(&bo->base.base); @@ -416,12 +421,12 @@ int ivpu_bo_info_ioctl(struct drm_device *dev, void *data, struct drm_file *file bo = to_ivpu_bo(obj); - mutex_lock(&bo->lock); + ivpu_bo_lock(bo); args->flags = bo->flags; args->mmap_offset = drm_vma_node_offset_addr(&obj->vma_node); args->vpu_addr = bo->vpu_addr; args->size = obj->size; - mutex_unlock(&bo->lock); + ivpu_bo_unlock(bo); drm_gem_object_put(obj); return ret; @@ -458,7 +463,7 @@ int ivpu_bo_wait_ioctl(struct drm_device *dev, void *data, struct drm_file *file static void ivpu_bo_print_info(struct ivpu_bo *bo, struct drm_printer *p) { - mutex_lock(&bo->lock); + ivpu_bo_lock(bo); drm_printf(p, "%-9p %-3u 0x%-12llx %-10lu 0x%-8x %-4u", bo, bo->ctx_id, bo->vpu_addr, bo->base.base.size, @@ -475,7 +480,7 @@ static void ivpu_bo_print_info(struct ivpu_bo *bo, struct drm_printer *p) drm_printf(p, "\n"); - mutex_unlock(&bo->lock); + ivpu_bo_unlock(bo); } void ivpu_bo_list(struct drm_device *dev, struct drm_printer *p) diff --git a/drivers/accel/ivpu/ivpu_gem.h b/drivers/accel/ivpu/ivpu_gem.h index 0c93118c85bd3..aa8ff14f7aae1 100644 --- a/drivers/accel/ivpu/ivpu_gem.h +++ b/drivers/accel/ivpu/ivpu_gem.h @@ -17,7 +17,6 @@ struct ivpu_bo { struct list_head bo_list_node; struct drm_mm_node mm_node; - struct mutex lock; /* Protects: ctx, mmu_mapped, vpu_addr */ u64 vpu_addr; u32 flags; u32 job_status; /* Valid only for command buffer */ -- 2.45.1

1 month, 1 week

2
4
0 0

[PATCH wireless v1] Revert "wifi: mwifiex: Fix HT40 bandwidth issue."

by Francesco Dolcini

From: Francesco Dolcini <francesco.dolcini(a)toradex.com> This reverts commit 34253084291cb210b251d64657958b8041ce4ab1. That commit introduces a regression, when HT40 mode is enabled, received packets are lost, this was experience with W8997 with both SDIO-UART and SDIO-SDIO variants. From an initial investigation the issue solves on its own after some time, but it's not clear what is the reason. Given that this was just a performance optimization, let's revert it till we have a better understanding of the issue and a proper fix. Cc: Jeff Chen <jeff.chen_1(a)nxp.com> Cc: stable(a)vger.kernel.org Fixes: 34253084291c ("wifi: mwifiex: Fix HT40 bandwidth issue.") Closes: https://lore.kernel.org/all/20250603203337.GA109929@francesco-nb/ Signed-off-by: Francesco Dolcini <francesco.dolcini(a)toradex.com> --- drivers/net/wireless/marvell/mwifiex/11n.c | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/drivers/net/wireless/marvell/mwifiex/11n.c b/drivers/net/wireless/marvell/mwifiex/11n.c index 738bafc3749b..66f0f5377ac1 100644 --- a/drivers/net/wireless/marvell/mwifiex/11n.c +++ b/drivers/net/wireless/marvell/mwifiex/11n.c @@ -403,14 +403,12 @@ mwifiex_cmd_append_11n_tlv(struct mwifiex_private *priv, if (sband->ht_cap.cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 && bss_desc->bcn_ht_oper->ht_param & - IEEE80211_HT_PARAM_CHAN_WIDTH_ANY) { - chan_list->chan_scan_param[0].radio_type |= - CHAN_BW_40MHZ << 2; + IEEE80211_HT_PARAM_CHAN_WIDTH_ANY) SET_SECONDARYCHAN(chan_list->chan_scan_param[0]. radio_type, (bss_desc->bcn_ht_oper->ht_param & IEEE80211_HT_PARAM_CHA_SEC_OFFSET)); - } + *buffer += struct_size(chan_list, chan_scan_param, 1); ret_len += struct_size(chan_list, chan_scan_param, 1); } -- 2.39.5

1 month, 1 week

2
2
0 0

Re: [PATCH v3] PCI/ASPM: Disable L1 before disabling L1ss

by Macpaul Lin (林智斌)

On Tue, 2024-10-22 at 17:30 -0500, Bjorn Helgaas wrote: > On Mon, Oct 07, 2024 at 08:59:17AM +0530, Ajay Agarwal wrote: > > The current sequence in the driver for L1ss update is as follows. > > > > Disable L1ss > > Disable L1 > > Enable L1ss as required > > Enable L1 if required > > > > With this sequence, a bus hang is observed during the L1ss > > disable sequence when the RC CPU attempts to clear the RC L1ss > > register after clearing the EP L1ss register. It looks like the > > RC attempts to enter L1ss again and at the same time, access to > > RC L1ss register fails because aux clk is still not active. > > > > PCIe spec r6.2, section 5.5.4, recommends that setting either > > or both of the enable bits for ASPM L1 PM Substates must be done > > while ASPM L1 is disabled. My interpretation here is that > > clearing L1ss should also be done when L1 is disabled. Thereby, > > change the sequence as follows. > > > > Disable L1 > > Disable L1ss > > Enable L1ss as required > > Enable L1 if required > > > > Signed-off-by: Ajay Agarwal <ajayagarwal(a)google.com> > > Applied to pci/aspm for v6.13, thank you, Ajay! Thanks! MediaTek also found this issue will happen on some old kernel, for example 6.11 or 6.12. would you please pick this patch also to some stable tree? LINK:https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commi… Thanks a lot. Macpaul Lin

1 month, 1 week

2
1
0 0

FAILED: patch "[PATCH] randstruct: gcc-plugin: Fix attribute addition" failed to apply to 5.4-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 5.4-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.4.y git checkout FETCH_HEAD git cherry-pick -x f39f18f3c3531aa802b58a20d39d96e82eb96c14 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060528-osmosis-arose-1289@gregkh' --subject-prefix 'PATCH 5.4.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From f39f18f3c3531aa802b58a20d39d96e82eb96c14 Mon Sep 17 00:00:00 2001 From: Kees Cook <kees(a)kernel.org> Date: Fri, 30 May 2025 15:18:28 -0700 Subject: [PATCH] randstruct: gcc-plugin: Fix attribute addition Based on changes in the 2021 public version of the randstruct out-of-tree GCC plugin[1], more carefully update the attributes on resulting decls, to avoid tripping checks in GCC 15's comptypes_check_enum_int() when it has been configured with "--enable-checking=misc": arch/arm64/kernel/kexec_image.c:132:14: internal compiler error: in comptypes_check_enum_int, at c/c-typeck.cc:1519 132 | const struct kexec_file_ops kexec_image_ops = { | ^~~~~~~~~~~~~~ internal_error(char const*, ...), at gcc/gcc/diagnostic-global-context.cc:517 fancy_abort(char const*, int, char const*), at gcc/gcc/diagnostic.cc:1803 comptypes_check_enum_int(tree_node*, tree_node*, bool*), at gcc/gcc/c/c-typeck.cc:1519 ... Link: https://archive.org/download/grsecurity/grsecurity-3.1-5.10.41-202105280954… [1] Reported-by: Thiago Jung Bauermann <thiago.bauermann(a)linaro.org> Closes: https://github.com/KSPP/linux/issues/367 Closes: https://lore.kernel.org/lkml/20250530000646.104457-1-thiago.bauermann@linar… Reported-by: Ingo Saitz <ingo(a)hannover.ccc.de> Closes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104745 Fixes: 313dd1b62921 ("gcc-plugins: Add the randstruct plugin") Tested-by: Thiago Jung Bauermann <thiago.bauermann(a)linaro.org> Link: https://lore.kernel.org/r/20250530221824.work.623-kees@kernel.org Signed-off-by: Kees Cook <kees(a)kernel.org> diff --git a/scripts/gcc-plugins/gcc-common.h b/scripts/gcc-plugins/gcc-common.h index 3222c1070444..ef12c8f929ed 100644 --- a/scripts/gcc-plugins/gcc-common.h +++ b/scripts/gcc-plugins/gcc-common.h @@ -123,6 +123,38 @@ static inline tree build_const_char_string(int len, const char *str) return cstr; } +static inline void __add_type_attr(tree type, const char *attr, tree args) +{ + tree oldattr; + + if (type == NULL_TREE) + return; + oldattr = lookup_attribute(attr, TYPE_ATTRIBUTES(type)); + if (oldattr != NULL_TREE) { + gcc_assert(TREE_VALUE(oldattr) == args || TREE_VALUE(TREE_VALUE(oldattr)) == TREE_VALUE(args)); + return; + } + + TYPE_ATTRIBUTES(type) = copy_list(TYPE_ATTRIBUTES(type)); + TYPE_ATTRIBUTES(type) = tree_cons(get_identifier(attr), args, TYPE_ATTRIBUTES(type)); +} + +static inline void add_type_attr(tree type, const char *attr, tree args) +{ + tree main_variant = TYPE_MAIN_VARIANT(type); + + __add_type_attr(TYPE_CANONICAL(type), attr, args); + __add_type_attr(TYPE_CANONICAL(main_variant), attr, args); + __add_type_attr(main_variant, attr, args); + + for (type = TYPE_NEXT_VARIANT(main_variant); type; type = TYPE_NEXT_VARIANT(type)) { + if (!lookup_attribute(attr, TYPE_ATTRIBUTES(type))) + TYPE_ATTRIBUTES(type) = TYPE_ATTRIBUTES(main_variant); + + __add_type_attr(TYPE_CANONICAL(type), attr, args); + } +} + #define PASS_INFO(NAME, REF, ID, POS) \ struct register_pass_info NAME##_pass_info = { \ .pass = make_##NAME##_pass(), \ diff --git a/scripts/gcc-plugins/randomize_layout_plugin.c b/scripts/gcc-plugins/randomize_layout_plugin.c index 971a1908a8cc..ff65a4f87f24 100644 --- a/scripts/gcc-plugins/randomize_layout_plugin.c +++ b/scripts/gcc-plugins/randomize_layout_plugin.c @@ -73,6 +73,9 @@ static tree handle_randomize_layout_attr(tree *node, tree name, tree args, int f if (TYPE_P(*node)) { type = *node; + } else if (TREE_CODE(*node) == FIELD_DECL) { + *no_add_attrs = false; + return NULL_TREE; } else { gcc_assert(TREE_CODE(*node) == TYPE_DECL); type = TREE_TYPE(*node); @@ -348,15 +351,14 @@ static int relayout_struct(tree type) TREE_CHAIN(newtree[i]) = newtree[i+1]; TREE_CHAIN(newtree[num_fields - 1]) = NULL_TREE; + add_type_attr(type, "randomize_performed", NULL_TREE); + add_type_attr(type, "designated_init", NULL_TREE); + if (has_flexarray) + add_type_attr(type, "has_flexarray", NULL_TREE); + main_variant = TYPE_MAIN_VARIANT(type); - for (variant = main_variant; variant; variant = TYPE_NEXT_VARIANT(variant)) { + for (variant = main_variant; variant; variant = TYPE_NEXT_VARIANT(variant)) TYPE_FIELDS(variant) = newtree[0]; - TYPE_ATTRIBUTES(variant) = copy_list(TYPE_ATTRIBUTES(variant)); - TYPE_ATTRIBUTES(variant) = tree_cons(get_identifier("randomize_performed"), NULL_TREE, TYPE_ATTRIBUTES(variant)); - TYPE_ATTRIBUTES(variant) = tree_cons(get_identifier("designated_init"), NULL_TREE, TYPE_ATTRIBUTES(variant)); - if (has_flexarray) - TYPE_ATTRIBUTES(type) = tree_cons(get_identifier("has_flexarray"), NULL_TREE, TYPE_ATTRIBUTES(type)); - } /* * force a re-layout of the main variant @@ -424,10 +426,8 @@ static void randomize_type(tree type) if (lookup_attribute("randomize_layout", TYPE_ATTRIBUTES(TYPE_MAIN_VARIANT(type))) || is_pure_ops_struct(type)) relayout_struct(type); - for (variant = TYPE_MAIN_VARIANT(type); variant; variant = TYPE_NEXT_VARIANT(variant)) { - TYPE_ATTRIBUTES(type) = copy_list(TYPE_ATTRIBUTES(type)); - TYPE_ATTRIBUTES(type) = tree_cons(get_identifier("randomize_considered"), NULL_TREE, TYPE_ATTRIBUTES(type)); - } + add_type_attr(type, "randomize_considered", NULL_TREE); + #ifdef __DEBUG_PLUGIN fprintf(stderr, "Marking randomize_considered on struct %s\n", ORIG_TYPE_NAME(type)); #ifdef __DEBUG_VERBOSE

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] randstruct: gcc-plugin: Fix attribute addition" failed to apply to 5.10-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 5.10-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.10.y git checkout FETCH_HEAD git cherry-pick -x f39f18f3c3531aa802b58a20d39d96e82eb96c14 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060528-ramble-bulge-34cb@gregkh' --subject-prefix 'PATCH 5.10.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From f39f18f3c3531aa802b58a20d39d96e82eb96c14 Mon Sep 17 00:00:00 2001 From: Kees Cook <kees(a)kernel.org> Date: Fri, 30 May 2025 15:18:28 -0700 Subject: [PATCH] randstruct: gcc-plugin: Fix attribute addition Based on changes in the 2021 public version of the randstruct out-of-tree GCC plugin[1], more carefully update the attributes on resulting decls, to avoid tripping checks in GCC 15's comptypes_check_enum_int() when it has been configured with "--enable-checking=misc": arch/arm64/kernel/kexec_image.c:132:14: internal compiler error: in comptypes_check_enum_int, at c/c-typeck.cc:1519 132 | const struct kexec_file_ops kexec_image_ops = { | ^~~~~~~~~~~~~~ internal_error(char const*, ...), at gcc/gcc/diagnostic-global-context.cc:517 fancy_abort(char const*, int, char const*), at gcc/gcc/diagnostic.cc:1803 comptypes_check_enum_int(tree_node*, tree_node*, bool*), at gcc/gcc/c/c-typeck.cc:1519 ... Link: https://archive.org/download/grsecurity/grsecurity-3.1-5.10.41-202105280954… [1] Reported-by: Thiago Jung Bauermann <thiago.bauermann(a)linaro.org> Closes: https://github.com/KSPP/linux/issues/367 Closes: https://lore.kernel.org/lkml/20250530000646.104457-1-thiago.bauermann@linar… Reported-by: Ingo Saitz <ingo(a)hannover.ccc.de> Closes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104745 Fixes: 313dd1b62921 ("gcc-plugins: Add the randstruct plugin") Tested-by: Thiago Jung Bauermann <thiago.bauermann(a)linaro.org> Link: https://lore.kernel.org/r/20250530221824.work.623-kees@kernel.org Signed-off-by: Kees Cook <kees(a)kernel.org> diff --git a/scripts/gcc-plugins/gcc-common.h b/scripts/gcc-plugins/gcc-common.h index 3222c1070444..ef12c8f929ed 100644 --- a/scripts/gcc-plugins/gcc-common.h +++ b/scripts/gcc-plugins/gcc-common.h @@ -123,6 +123,38 @@ static inline tree build_const_char_string(int len, const char *str) return cstr; } +static inline void __add_type_attr(tree type, const char *attr, tree args) +{ + tree oldattr; + + if (type == NULL_TREE) + return; + oldattr = lookup_attribute(attr, TYPE_ATTRIBUTES(type)); + if (oldattr != NULL_TREE) { + gcc_assert(TREE_VALUE(oldattr) == args || TREE_VALUE(TREE_VALUE(oldattr)) == TREE_VALUE(args)); + return; + } + + TYPE_ATTRIBUTES(type) = copy_list(TYPE_ATTRIBUTES(type)); + TYPE_ATTRIBUTES(type) = tree_cons(get_identifier(attr), args, TYPE_ATTRIBUTES(type)); +} + +static inline void add_type_attr(tree type, const char *attr, tree args) +{ + tree main_variant = TYPE_MAIN_VARIANT(type); + + __add_type_attr(TYPE_CANONICAL(type), attr, args); + __add_type_attr(TYPE_CANONICAL(main_variant), attr, args); + __add_type_attr(main_variant, attr, args); + + for (type = TYPE_NEXT_VARIANT(main_variant); type; type = TYPE_NEXT_VARIANT(type)) { + if (!lookup_attribute(attr, TYPE_ATTRIBUTES(type))) + TYPE_ATTRIBUTES(type) = TYPE_ATTRIBUTES(main_variant); + + __add_type_attr(TYPE_CANONICAL(type), attr, args); + } +} + #define PASS_INFO(NAME, REF, ID, POS) \ struct register_pass_info NAME##_pass_info = { \ .pass = make_##NAME##_pass(), \ diff --git a/scripts/gcc-plugins/randomize_layout_plugin.c b/scripts/gcc-plugins/randomize_layout_plugin.c index 971a1908a8cc..ff65a4f87f24 100644 --- a/scripts/gcc-plugins/randomize_layout_plugin.c +++ b/scripts/gcc-plugins/randomize_layout_plugin.c @@ -73,6 +73,9 @@ static tree handle_randomize_layout_attr(tree *node, tree name, tree args, int f if (TYPE_P(*node)) { type = *node; + } else if (TREE_CODE(*node) == FIELD_DECL) { + *no_add_attrs = false; + return NULL_TREE; } else { gcc_assert(TREE_CODE(*node) == TYPE_DECL); type = TREE_TYPE(*node); @@ -348,15 +351,14 @@ static int relayout_struct(tree type) TREE_CHAIN(newtree[i]) = newtree[i+1]; TREE_CHAIN(newtree[num_fields - 1]) = NULL_TREE; + add_type_attr(type, "randomize_performed", NULL_TREE); + add_type_attr(type, "designated_init", NULL_TREE); + if (has_flexarray) + add_type_attr(type, "has_flexarray", NULL_TREE); + main_variant = TYPE_MAIN_VARIANT(type); - for (variant = main_variant; variant; variant = TYPE_NEXT_VARIANT(variant)) { + for (variant = main_variant; variant; variant = TYPE_NEXT_VARIANT(variant)) TYPE_FIELDS(variant) = newtree[0]; - TYPE_ATTRIBUTES(variant) = copy_list(TYPE_ATTRIBUTES(variant)); - TYPE_ATTRIBUTES(variant) = tree_cons(get_identifier("randomize_performed"), NULL_TREE, TYPE_ATTRIBUTES(variant)); - TYPE_ATTRIBUTES(variant) = tree_cons(get_identifier("designated_init"), NULL_TREE, TYPE_ATTRIBUTES(variant)); - if (has_flexarray) - TYPE_ATTRIBUTES(type) = tree_cons(get_identifier("has_flexarray"), NULL_TREE, TYPE_ATTRIBUTES(type)); - } /* * force a re-layout of the main variant @@ -424,10 +426,8 @@ static void randomize_type(tree type) if (lookup_attribute("randomize_layout", TYPE_ATTRIBUTES(TYPE_MAIN_VARIANT(type))) || is_pure_ops_struct(type)) relayout_struct(type); - for (variant = TYPE_MAIN_VARIANT(type); variant; variant = TYPE_NEXT_VARIANT(variant)) { - TYPE_ATTRIBUTES(type) = copy_list(TYPE_ATTRIBUTES(type)); - TYPE_ATTRIBUTES(type) = tree_cons(get_identifier("randomize_considered"), NULL_TREE, TYPE_ATTRIBUTES(type)); - } + add_type_attr(type, "randomize_considered", NULL_TREE); + #ifdef __DEBUG_PLUGIN fprintf(stderr, "Marking randomize_considered on struct %s\n", ORIG_TYPE_NAME(type)); #ifdef __DEBUG_VERBOSE

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] randstruct: gcc-plugin: Fix attribute addition" failed to apply to 6.1-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.1-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.1.y git checkout FETCH_HEAD git cherry-pick -x f39f18f3c3531aa802b58a20d39d96e82eb96c14 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060527-yippee-acrobat-a2f3@gregkh' --subject-prefix 'PATCH 6.1.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From f39f18f3c3531aa802b58a20d39d96e82eb96c14 Mon Sep 17 00:00:00 2001 From: Kees Cook <kees(a)kernel.org> Date: Fri, 30 May 2025 15:18:28 -0700 Subject: [PATCH] randstruct: gcc-plugin: Fix attribute addition Based on changes in the 2021 public version of the randstruct out-of-tree GCC plugin[1], more carefully update the attributes on resulting decls, to avoid tripping checks in GCC 15's comptypes_check_enum_int() when it has been configured with "--enable-checking=misc": arch/arm64/kernel/kexec_image.c:132:14: internal compiler error: in comptypes_check_enum_int, at c/c-typeck.cc:1519 132 | const struct kexec_file_ops kexec_image_ops = { | ^~~~~~~~~~~~~~ internal_error(char const*, ...), at gcc/gcc/diagnostic-global-context.cc:517 fancy_abort(char const*, int, char const*), at gcc/gcc/diagnostic.cc:1803 comptypes_check_enum_int(tree_node*, tree_node*, bool*), at gcc/gcc/c/c-typeck.cc:1519 ... Link: https://archive.org/download/grsecurity/grsecurity-3.1-5.10.41-202105280954… [1] Reported-by: Thiago Jung Bauermann <thiago.bauermann(a)linaro.org> Closes: https://github.com/KSPP/linux/issues/367 Closes: https://lore.kernel.org/lkml/20250530000646.104457-1-thiago.bauermann@linar… Reported-by: Ingo Saitz <ingo(a)hannover.ccc.de> Closes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104745 Fixes: 313dd1b62921 ("gcc-plugins: Add the randstruct plugin") Tested-by: Thiago Jung Bauermann <thiago.bauermann(a)linaro.org> Link: https://lore.kernel.org/r/20250530221824.work.623-kees@kernel.org Signed-off-by: Kees Cook <kees(a)kernel.org> diff --git a/scripts/gcc-plugins/gcc-common.h b/scripts/gcc-plugins/gcc-common.h index 3222c1070444..ef12c8f929ed 100644 --- a/scripts/gcc-plugins/gcc-common.h +++ b/scripts/gcc-plugins/gcc-common.h @@ -123,6 +123,38 @@ static inline tree build_const_char_string(int len, const char *str) return cstr; } +static inline void __add_type_attr(tree type, const char *attr, tree args) +{ + tree oldattr; + + if (type == NULL_TREE) + return; + oldattr = lookup_attribute(attr, TYPE_ATTRIBUTES(type)); + if (oldattr != NULL_TREE) { + gcc_assert(TREE_VALUE(oldattr) == args || TREE_VALUE(TREE_VALUE(oldattr)) == TREE_VALUE(args)); + return; + } + + TYPE_ATTRIBUTES(type) = copy_list(TYPE_ATTRIBUTES(type)); + TYPE_ATTRIBUTES(type) = tree_cons(get_identifier(attr), args, TYPE_ATTRIBUTES(type)); +} + +static inline void add_type_attr(tree type, const char *attr, tree args) +{ + tree main_variant = TYPE_MAIN_VARIANT(type); + + __add_type_attr(TYPE_CANONICAL(type), attr, args); + __add_type_attr(TYPE_CANONICAL(main_variant), attr, args); + __add_type_attr(main_variant, attr, args); + + for (type = TYPE_NEXT_VARIANT(main_variant); type; type = TYPE_NEXT_VARIANT(type)) { + if (!lookup_attribute(attr, TYPE_ATTRIBUTES(type))) + TYPE_ATTRIBUTES(type) = TYPE_ATTRIBUTES(main_variant); + + __add_type_attr(TYPE_CANONICAL(type), attr, args); + } +} + #define PASS_INFO(NAME, REF, ID, POS) \ struct register_pass_info NAME##_pass_info = { \ .pass = make_##NAME##_pass(), \ diff --git a/scripts/gcc-plugins/randomize_layout_plugin.c b/scripts/gcc-plugins/randomize_layout_plugin.c index 971a1908a8cc..ff65a4f87f24 100644 --- a/scripts/gcc-plugins/randomize_layout_plugin.c +++ b/scripts/gcc-plugins/randomize_layout_plugin.c @@ -73,6 +73,9 @@ static tree handle_randomize_layout_attr(tree *node, tree name, tree args, int f if (TYPE_P(*node)) { type = *node; + } else if (TREE_CODE(*node) == FIELD_DECL) { + *no_add_attrs = false; + return NULL_TREE; } else { gcc_assert(TREE_CODE(*node) == TYPE_DECL); type = TREE_TYPE(*node); @@ -348,15 +351,14 @@ static int relayout_struct(tree type) TREE_CHAIN(newtree[i]) = newtree[i+1]; TREE_CHAIN(newtree[num_fields - 1]) = NULL_TREE; + add_type_attr(type, "randomize_performed", NULL_TREE); + add_type_attr(type, "designated_init", NULL_TREE); + if (has_flexarray) + add_type_attr(type, "has_flexarray", NULL_TREE); + main_variant = TYPE_MAIN_VARIANT(type); - for (variant = main_variant; variant; variant = TYPE_NEXT_VARIANT(variant)) { + for (variant = main_variant; variant; variant = TYPE_NEXT_VARIANT(variant)) TYPE_FIELDS(variant) = newtree[0]; - TYPE_ATTRIBUTES(variant) = copy_list(TYPE_ATTRIBUTES(variant)); - TYPE_ATTRIBUTES(variant) = tree_cons(get_identifier("randomize_performed"), NULL_TREE, TYPE_ATTRIBUTES(variant)); - TYPE_ATTRIBUTES(variant) = tree_cons(get_identifier("designated_init"), NULL_TREE, TYPE_ATTRIBUTES(variant)); - if (has_flexarray) - TYPE_ATTRIBUTES(type) = tree_cons(get_identifier("has_flexarray"), NULL_TREE, TYPE_ATTRIBUTES(type)); - } /* * force a re-layout of the main variant @@ -424,10 +426,8 @@ static void randomize_type(tree type) if (lookup_attribute("randomize_layout", TYPE_ATTRIBUTES(TYPE_MAIN_VARIANT(type))) || is_pure_ops_struct(type)) relayout_struct(type); - for (variant = TYPE_MAIN_VARIANT(type); variant; variant = TYPE_NEXT_VARIANT(variant)) { - TYPE_ATTRIBUTES(type) = copy_list(TYPE_ATTRIBUTES(type)); - TYPE_ATTRIBUTES(type) = tree_cons(get_identifier("randomize_considered"), NULL_TREE, TYPE_ATTRIBUTES(type)); - } + add_type_attr(type, "randomize_considered", NULL_TREE); + #ifdef __DEBUG_PLUGIN fprintf(stderr, "Marking randomize_considered on struct %s\n", ORIG_TYPE_NAME(type)); #ifdef __DEBUG_VERBOSE

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] randstruct: gcc-plugin: Fix attribute addition" failed to apply to 5.15-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 5.15-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.15.y git checkout FETCH_HEAD git cherry-pick -x f39f18f3c3531aa802b58a20d39d96e82eb96c14 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060527-upwind-coveting-bcba@gregkh' --subject-prefix 'PATCH 5.15.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From f39f18f3c3531aa802b58a20d39d96e82eb96c14 Mon Sep 17 00:00:00 2001 From: Kees Cook <kees(a)kernel.org> Date: Fri, 30 May 2025 15:18:28 -0700 Subject: [PATCH] randstruct: gcc-plugin: Fix attribute addition Based on changes in the 2021 public version of the randstruct out-of-tree GCC plugin[1], more carefully update the attributes on resulting decls, to avoid tripping checks in GCC 15's comptypes_check_enum_int() when it has been configured with "--enable-checking=misc": arch/arm64/kernel/kexec_image.c:132:14: internal compiler error: in comptypes_check_enum_int, at c/c-typeck.cc:1519 132 | const struct kexec_file_ops kexec_image_ops = { | ^~~~~~~~~~~~~~ internal_error(char const*, ...), at gcc/gcc/diagnostic-global-context.cc:517 fancy_abort(char const*, int, char const*), at gcc/gcc/diagnostic.cc:1803 comptypes_check_enum_int(tree_node*, tree_node*, bool*), at gcc/gcc/c/c-typeck.cc:1519 ... Link: https://archive.org/download/grsecurity/grsecurity-3.1-5.10.41-202105280954… [1] Reported-by: Thiago Jung Bauermann <thiago.bauermann(a)linaro.org> Closes: https://github.com/KSPP/linux/issues/367 Closes: https://lore.kernel.org/lkml/20250530000646.104457-1-thiago.bauermann@linar… Reported-by: Ingo Saitz <ingo(a)hannover.ccc.de> Closes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104745 Fixes: 313dd1b62921 ("gcc-plugins: Add the randstruct plugin") Tested-by: Thiago Jung Bauermann <thiago.bauermann(a)linaro.org> Link: https://lore.kernel.org/r/20250530221824.work.623-kees@kernel.org Signed-off-by: Kees Cook <kees(a)kernel.org> diff --git a/scripts/gcc-plugins/gcc-common.h b/scripts/gcc-plugins/gcc-common.h index 3222c1070444..ef12c8f929ed 100644 --- a/scripts/gcc-plugins/gcc-common.h +++ b/scripts/gcc-plugins/gcc-common.h @@ -123,6 +123,38 @@ static inline tree build_const_char_string(int len, const char *str) return cstr; } +static inline void __add_type_attr(tree type, const char *attr, tree args) +{ + tree oldattr; + + if (type == NULL_TREE) + return; + oldattr = lookup_attribute(attr, TYPE_ATTRIBUTES(type)); + if (oldattr != NULL_TREE) { + gcc_assert(TREE_VALUE(oldattr) == args || TREE_VALUE(TREE_VALUE(oldattr)) == TREE_VALUE(args)); + return; + } + + TYPE_ATTRIBUTES(type) = copy_list(TYPE_ATTRIBUTES(type)); + TYPE_ATTRIBUTES(type) = tree_cons(get_identifier(attr), args, TYPE_ATTRIBUTES(type)); +} + +static inline void add_type_attr(tree type, const char *attr, tree args) +{ + tree main_variant = TYPE_MAIN_VARIANT(type); + + __add_type_attr(TYPE_CANONICAL(type), attr, args); + __add_type_attr(TYPE_CANONICAL(main_variant), attr, args); + __add_type_attr(main_variant, attr, args); + + for (type = TYPE_NEXT_VARIANT(main_variant); type; type = TYPE_NEXT_VARIANT(type)) { + if (!lookup_attribute(attr, TYPE_ATTRIBUTES(type))) + TYPE_ATTRIBUTES(type) = TYPE_ATTRIBUTES(main_variant); + + __add_type_attr(TYPE_CANONICAL(type), attr, args); + } +} + #define PASS_INFO(NAME, REF, ID, POS) \ struct register_pass_info NAME##_pass_info = { \ .pass = make_##NAME##_pass(), \ diff --git a/scripts/gcc-plugins/randomize_layout_plugin.c b/scripts/gcc-plugins/randomize_layout_plugin.c index 971a1908a8cc..ff65a4f87f24 100644 --- a/scripts/gcc-plugins/randomize_layout_plugin.c +++ b/scripts/gcc-plugins/randomize_layout_plugin.c @@ -73,6 +73,9 @@ static tree handle_randomize_layout_attr(tree *node, tree name, tree args, int f if (TYPE_P(*node)) { type = *node; + } else if (TREE_CODE(*node) == FIELD_DECL) { + *no_add_attrs = false; + return NULL_TREE; } else { gcc_assert(TREE_CODE(*node) == TYPE_DECL); type = TREE_TYPE(*node); @@ -348,15 +351,14 @@ static int relayout_struct(tree type) TREE_CHAIN(newtree[i]) = newtree[i+1]; TREE_CHAIN(newtree[num_fields - 1]) = NULL_TREE; + add_type_attr(type, "randomize_performed", NULL_TREE); + add_type_attr(type, "designated_init", NULL_TREE); + if (has_flexarray) + add_type_attr(type, "has_flexarray", NULL_TREE); + main_variant = TYPE_MAIN_VARIANT(type); - for (variant = main_variant; variant; variant = TYPE_NEXT_VARIANT(variant)) { + for (variant = main_variant; variant; variant = TYPE_NEXT_VARIANT(variant)) TYPE_FIELDS(variant) = newtree[0]; - TYPE_ATTRIBUTES(variant) = copy_list(TYPE_ATTRIBUTES(variant)); - TYPE_ATTRIBUTES(variant) = tree_cons(get_identifier("randomize_performed"), NULL_TREE, TYPE_ATTRIBUTES(variant)); - TYPE_ATTRIBUTES(variant) = tree_cons(get_identifier("designated_init"), NULL_TREE, TYPE_ATTRIBUTES(variant)); - if (has_flexarray) - TYPE_ATTRIBUTES(type) = tree_cons(get_identifier("has_flexarray"), NULL_TREE, TYPE_ATTRIBUTES(type)); - } /* * force a re-layout of the main variant @@ -424,10 +426,8 @@ static void randomize_type(tree type) if (lookup_attribute("randomize_layout", TYPE_ATTRIBUTES(TYPE_MAIN_VARIANT(type))) || is_pure_ops_struct(type)) relayout_struct(type); - for (variant = TYPE_MAIN_VARIANT(type); variant; variant = TYPE_NEXT_VARIANT(variant)) { - TYPE_ATTRIBUTES(type) = copy_list(TYPE_ATTRIBUTES(type)); - TYPE_ATTRIBUTES(type) = tree_cons(get_identifier("randomize_considered"), NULL_TREE, TYPE_ATTRIBUTES(type)); - } + add_type_attr(type, "randomize_considered", NULL_TREE); + #ifdef __DEBUG_PLUGIN fprintf(stderr, "Marking randomize_considered on struct %s\n", ORIG_TYPE_NAME(type)); #ifdef __DEBUG_VERBOSE

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] randstruct: gcc-plugin: Fix attribute addition" failed to apply to 6.6-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.6-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.6.y git checkout FETCH_HEAD git cherry-pick -x f39f18f3c3531aa802b58a20d39d96e82eb96c14 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060526-repaying-detonate-885b@gregkh' --subject-prefix 'PATCH 6.6.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From f39f18f3c3531aa802b58a20d39d96e82eb96c14 Mon Sep 17 00:00:00 2001 From: Kees Cook <kees(a)kernel.org> Date: Fri, 30 May 2025 15:18:28 -0700 Subject: [PATCH] randstruct: gcc-plugin: Fix attribute addition Based on changes in the 2021 public version of the randstruct out-of-tree GCC plugin[1], more carefully update the attributes on resulting decls, to avoid tripping checks in GCC 15's comptypes_check_enum_int() when it has been configured with "--enable-checking=misc": arch/arm64/kernel/kexec_image.c:132:14: internal compiler error: in comptypes_check_enum_int, at c/c-typeck.cc:1519 132 | const struct kexec_file_ops kexec_image_ops = { | ^~~~~~~~~~~~~~ internal_error(char const*, ...), at gcc/gcc/diagnostic-global-context.cc:517 fancy_abort(char const*, int, char const*), at gcc/gcc/diagnostic.cc:1803 comptypes_check_enum_int(tree_node*, tree_node*, bool*), at gcc/gcc/c/c-typeck.cc:1519 ... Link: https://archive.org/download/grsecurity/grsecurity-3.1-5.10.41-202105280954… [1] Reported-by: Thiago Jung Bauermann <thiago.bauermann(a)linaro.org> Closes: https://github.com/KSPP/linux/issues/367 Closes: https://lore.kernel.org/lkml/20250530000646.104457-1-thiago.bauermann@linar… Reported-by: Ingo Saitz <ingo(a)hannover.ccc.de> Closes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104745 Fixes: 313dd1b62921 ("gcc-plugins: Add the randstruct plugin") Tested-by: Thiago Jung Bauermann <thiago.bauermann(a)linaro.org> Link: https://lore.kernel.org/r/20250530221824.work.623-kees@kernel.org Signed-off-by: Kees Cook <kees(a)kernel.org> diff --git a/scripts/gcc-plugins/gcc-common.h b/scripts/gcc-plugins/gcc-common.h index 3222c1070444..ef12c8f929ed 100644 --- a/scripts/gcc-plugins/gcc-common.h +++ b/scripts/gcc-plugins/gcc-common.h @@ -123,6 +123,38 @@ static inline tree build_const_char_string(int len, const char *str) return cstr; } +static inline void __add_type_attr(tree type, const char *attr, tree args) +{ + tree oldattr; + + if (type == NULL_TREE) + return; + oldattr = lookup_attribute(attr, TYPE_ATTRIBUTES(type)); + if (oldattr != NULL_TREE) { + gcc_assert(TREE_VALUE(oldattr) == args || TREE_VALUE(TREE_VALUE(oldattr)) == TREE_VALUE(args)); + return; + } + + TYPE_ATTRIBUTES(type) = copy_list(TYPE_ATTRIBUTES(type)); + TYPE_ATTRIBUTES(type) = tree_cons(get_identifier(attr), args, TYPE_ATTRIBUTES(type)); +} + +static inline void add_type_attr(tree type, const char *attr, tree args) +{ + tree main_variant = TYPE_MAIN_VARIANT(type); + + __add_type_attr(TYPE_CANONICAL(type), attr, args); + __add_type_attr(TYPE_CANONICAL(main_variant), attr, args); + __add_type_attr(main_variant, attr, args); + + for (type = TYPE_NEXT_VARIANT(main_variant); type; type = TYPE_NEXT_VARIANT(type)) { + if (!lookup_attribute(attr, TYPE_ATTRIBUTES(type))) + TYPE_ATTRIBUTES(type) = TYPE_ATTRIBUTES(main_variant); + + __add_type_attr(TYPE_CANONICAL(type), attr, args); + } +} + #define PASS_INFO(NAME, REF, ID, POS) \ struct register_pass_info NAME##_pass_info = { \ .pass = make_##NAME##_pass(), \ diff --git a/scripts/gcc-plugins/randomize_layout_plugin.c b/scripts/gcc-plugins/randomize_layout_plugin.c index 971a1908a8cc..ff65a4f87f24 100644 --- a/scripts/gcc-plugins/randomize_layout_plugin.c +++ b/scripts/gcc-plugins/randomize_layout_plugin.c @@ -73,6 +73,9 @@ static tree handle_randomize_layout_attr(tree *node, tree name, tree args, int f if (TYPE_P(*node)) { type = *node; + } else if (TREE_CODE(*node) == FIELD_DECL) { + *no_add_attrs = false; + return NULL_TREE; } else { gcc_assert(TREE_CODE(*node) == TYPE_DECL); type = TREE_TYPE(*node); @@ -348,15 +351,14 @@ static int relayout_struct(tree type) TREE_CHAIN(newtree[i]) = newtree[i+1]; TREE_CHAIN(newtree[num_fields - 1]) = NULL_TREE; + add_type_attr(type, "randomize_performed", NULL_TREE); + add_type_attr(type, "designated_init", NULL_TREE); + if (has_flexarray) + add_type_attr(type, "has_flexarray", NULL_TREE); + main_variant = TYPE_MAIN_VARIANT(type); - for (variant = main_variant; variant; variant = TYPE_NEXT_VARIANT(variant)) { + for (variant = main_variant; variant; variant = TYPE_NEXT_VARIANT(variant)) TYPE_FIELDS(variant) = newtree[0]; - TYPE_ATTRIBUTES(variant) = copy_list(TYPE_ATTRIBUTES(variant)); - TYPE_ATTRIBUTES(variant) = tree_cons(get_identifier("randomize_performed"), NULL_TREE, TYPE_ATTRIBUTES(variant)); - TYPE_ATTRIBUTES(variant) = tree_cons(get_identifier("designated_init"), NULL_TREE, TYPE_ATTRIBUTES(variant)); - if (has_flexarray) - TYPE_ATTRIBUTES(type) = tree_cons(get_identifier("has_flexarray"), NULL_TREE, TYPE_ATTRIBUTES(type)); - } /* * force a re-layout of the main variant @@ -424,10 +426,8 @@ static void randomize_type(tree type) if (lookup_attribute("randomize_layout", TYPE_ATTRIBUTES(TYPE_MAIN_VARIANT(type))) || is_pure_ops_struct(type)) relayout_struct(type); - for (variant = TYPE_MAIN_VARIANT(type); variant; variant = TYPE_NEXT_VARIANT(variant)) { - TYPE_ATTRIBUTES(type) = copy_list(TYPE_ATTRIBUTES(type)); - TYPE_ATTRIBUTES(type) = tree_cons(get_identifier("randomize_considered"), NULL_TREE, TYPE_ATTRIBUTES(type)); - } + add_type_attr(type, "randomize_considered", NULL_TREE); + #ifdef __DEBUG_PLUGIN fprintf(stderr, "Marking randomize_considered on struct %s\n", ORIG_TYPE_NAME(type)); #ifdef __DEBUG_VERBOSE

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] randstruct: gcc-plugin: Fix attribute addition" failed to apply to 6.12-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.12-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.12.y git checkout FETCH_HEAD git cherry-pick -x f39f18f3c3531aa802b58a20d39d96e82eb96c14 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060525-desktop-undesired-32b3@gregkh' --subject-prefix 'PATCH 6.12.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From f39f18f3c3531aa802b58a20d39d96e82eb96c14 Mon Sep 17 00:00:00 2001 From: Kees Cook <kees(a)kernel.org> Date: Fri, 30 May 2025 15:18:28 -0700 Subject: [PATCH] randstruct: gcc-plugin: Fix attribute addition Based on changes in the 2021 public version of the randstruct out-of-tree GCC plugin[1], more carefully update the attributes on resulting decls, to avoid tripping checks in GCC 15's comptypes_check_enum_int() when it has been configured with "--enable-checking=misc": arch/arm64/kernel/kexec_image.c:132:14: internal compiler error: in comptypes_check_enum_int, at c/c-typeck.cc:1519 132 | const struct kexec_file_ops kexec_image_ops = { | ^~~~~~~~~~~~~~ internal_error(char const*, ...), at gcc/gcc/diagnostic-global-context.cc:517 fancy_abort(char const*, int, char const*), at gcc/gcc/diagnostic.cc:1803 comptypes_check_enum_int(tree_node*, tree_node*, bool*), at gcc/gcc/c/c-typeck.cc:1519 ... Link: https://archive.org/download/grsecurity/grsecurity-3.1-5.10.41-202105280954… [1] Reported-by: Thiago Jung Bauermann <thiago.bauermann(a)linaro.org> Closes: https://github.com/KSPP/linux/issues/367 Closes: https://lore.kernel.org/lkml/20250530000646.104457-1-thiago.bauermann@linar… Reported-by: Ingo Saitz <ingo(a)hannover.ccc.de> Closes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104745 Fixes: 313dd1b62921 ("gcc-plugins: Add the randstruct plugin") Tested-by: Thiago Jung Bauermann <thiago.bauermann(a)linaro.org> Link: https://lore.kernel.org/r/20250530221824.work.623-kees@kernel.org Signed-off-by: Kees Cook <kees(a)kernel.org> diff --git a/scripts/gcc-plugins/gcc-common.h b/scripts/gcc-plugins/gcc-common.h index 3222c1070444..ef12c8f929ed 100644 --- a/scripts/gcc-plugins/gcc-common.h +++ b/scripts/gcc-plugins/gcc-common.h @@ -123,6 +123,38 @@ static inline tree build_const_char_string(int len, const char *str) return cstr; } +static inline void __add_type_attr(tree type, const char *attr, tree args) +{ + tree oldattr; + + if (type == NULL_TREE) + return; + oldattr = lookup_attribute(attr, TYPE_ATTRIBUTES(type)); + if (oldattr != NULL_TREE) { + gcc_assert(TREE_VALUE(oldattr) == args || TREE_VALUE(TREE_VALUE(oldattr)) == TREE_VALUE(args)); + return; + } + + TYPE_ATTRIBUTES(type) = copy_list(TYPE_ATTRIBUTES(type)); + TYPE_ATTRIBUTES(type) = tree_cons(get_identifier(attr), args, TYPE_ATTRIBUTES(type)); +} + +static inline void add_type_attr(tree type, const char *attr, tree args) +{ + tree main_variant = TYPE_MAIN_VARIANT(type); + + __add_type_attr(TYPE_CANONICAL(type), attr, args); + __add_type_attr(TYPE_CANONICAL(main_variant), attr, args); + __add_type_attr(main_variant, attr, args); + + for (type = TYPE_NEXT_VARIANT(main_variant); type; type = TYPE_NEXT_VARIANT(type)) { + if (!lookup_attribute(attr, TYPE_ATTRIBUTES(type))) + TYPE_ATTRIBUTES(type) = TYPE_ATTRIBUTES(main_variant); + + __add_type_attr(TYPE_CANONICAL(type), attr, args); + } +} + #define PASS_INFO(NAME, REF, ID, POS) \ struct register_pass_info NAME##_pass_info = { \ .pass = make_##NAME##_pass(), \ diff --git a/scripts/gcc-plugins/randomize_layout_plugin.c b/scripts/gcc-plugins/randomize_layout_plugin.c index 971a1908a8cc..ff65a4f87f24 100644 --- a/scripts/gcc-plugins/randomize_layout_plugin.c +++ b/scripts/gcc-plugins/randomize_layout_plugin.c @@ -73,6 +73,9 @@ static tree handle_randomize_layout_attr(tree *node, tree name, tree args, int f if (TYPE_P(*node)) { type = *node; + } else if (TREE_CODE(*node) == FIELD_DECL) { + *no_add_attrs = false; + return NULL_TREE; } else { gcc_assert(TREE_CODE(*node) == TYPE_DECL); type = TREE_TYPE(*node); @@ -348,15 +351,14 @@ static int relayout_struct(tree type) TREE_CHAIN(newtree[i]) = newtree[i+1]; TREE_CHAIN(newtree[num_fields - 1]) = NULL_TREE; + add_type_attr(type, "randomize_performed", NULL_TREE); + add_type_attr(type, "designated_init", NULL_TREE); + if (has_flexarray) + add_type_attr(type, "has_flexarray", NULL_TREE); + main_variant = TYPE_MAIN_VARIANT(type); - for (variant = main_variant; variant; variant = TYPE_NEXT_VARIANT(variant)) { + for (variant = main_variant; variant; variant = TYPE_NEXT_VARIANT(variant)) TYPE_FIELDS(variant) = newtree[0]; - TYPE_ATTRIBUTES(variant) = copy_list(TYPE_ATTRIBUTES(variant)); - TYPE_ATTRIBUTES(variant) = tree_cons(get_identifier("randomize_performed"), NULL_TREE, TYPE_ATTRIBUTES(variant)); - TYPE_ATTRIBUTES(variant) = tree_cons(get_identifier("designated_init"), NULL_TREE, TYPE_ATTRIBUTES(variant)); - if (has_flexarray) - TYPE_ATTRIBUTES(type) = tree_cons(get_identifier("has_flexarray"), NULL_TREE, TYPE_ATTRIBUTES(type)); - } /* * force a re-layout of the main variant @@ -424,10 +426,8 @@ static void randomize_type(tree type) if (lookup_attribute("randomize_layout", TYPE_ATTRIBUTES(TYPE_MAIN_VARIANT(type))) || is_pure_ops_struct(type)) relayout_struct(type); - for (variant = TYPE_MAIN_VARIANT(type); variant; variant = TYPE_NEXT_VARIANT(variant)) { - TYPE_ATTRIBUTES(type) = copy_list(TYPE_ATTRIBUTES(type)); - TYPE_ATTRIBUTES(type) = tree_cons(get_identifier("randomize_considered"), NULL_TREE, TYPE_ATTRIBUTES(type)); - } + add_type_attr(type, "randomize_considered", NULL_TREE); + #ifdef __DEBUG_PLUGIN fprintf(stderr, "Marking randomize_considered on struct %s\n", ORIG_TYPE_NAME(type)); #ifdef __DEBUG_VERBOSE

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] randstruct: gcc-plugin: Fix attribute addition" failed to apply to 6.14-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.14-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.14.y git checkout FETCH_HEAD git cherry-pick -x f39f18f3c3531aa802b58a20d39d96e82eb96c14 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060525-flaxseed-vowed-ff5b@gregkh' --subject-prefix 'PATCH 6.14.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From f39f18f3c3531aa802b58a20d39d96e82eb96c14 Mon Sep 17 00:00:00 2001 From: Kees Cook <kees(a)kernel.org> Date: Fri, 30 May 2025 15:18:28 -0700 Subject: [PATCH] randstruct: gcc-plugin: Fix attribute addition Based on changes in the 2021 public version of the randstruct out-of-tree GCC plugin[1], more carefully update the attributes on resulting decls, to avoid tripping checks in GCC 15's comptypes_check_enum_int() when it has been configured with "--enable-checking=misc": arch/arm64/kernel/kexec_image.c:132:14: internal compiler error: in comptypes_check_enum_int, at c/c-typeck.cc:1519 132 | const struct kexec_file_ops kexec_image_ops = { | ^~~~~~~~~~~~~~ internal_error(char const*, ...), at gcc/gcc/diagnostic-global-context.cc:517 fancy_abort(char const*, int, char const*), at gcc/gcc/diagnostic.cc:1803 comptypes_check_enum_int(tree_node*, tree_node*, bool*), at gcc/gcc/c/c-typeck.cc:1519 ... Link: https://archive.org/download/grsecurity/grsecurity-3.1-5.10.41-202105280954… [1] Reported-by: Thiago Jung Bauermann <thiago.bauermann(a)linaro.org> Closes: https://github.com/KSPP/linux/issues/367 Closes: https://lore.kernel.org/lkml/20250530000646.104457-1-thiago.bauermann@linar… Reported-by: Ingo Saitz <ingo(a)hannover.ccc.de> Closes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104745 Fixes: 313dd1b62921 ("gcc-plugins: Add the randstruct plugin") Tested-by: Thiago Jung Bauermann <thiago.bauermann(a)linaro.org> Link: https://lore.kernel.org/r/20250530221824.work.623-kees@kernel.org Signed-off-by: Kees Cook <kees(a)kernel.org> diff --git a/scripts/gcc-plugins/gcc-common.h b/scripts/gcc-plugins/gcc-common.h index 3222c1070444..ef12c8f929ed 100644 --- a/scripts/gcc-plugins/gcc-common.h +++ b/scripts/gcc-plugins/gcc-common.h @@ -123,6 +123,38 @@ static inline tree build_const_char_string(int len, const char *str) return cstr; } +static inline void __add_type_attr(tree type, const char *attr, tree args) +{ + tree oldattr; + + if (type == NULL_TREE) + return; + oldattr = lookup_attribute(attr, TYPE_ATTRIBUTES(type)); + if (oldattr != NULL_TREE) { + gcc_assert(TREE_VALUE(oldattr) == args || TREE_VALUE(TREE_VALUE(oldattr)) == TREE_VALUE(args)); + return; + } + + TYPE_ATTRIBUTES(type) = copy_list(TYPE_ATTRIBUTES(type)); + TYPE_ATTRIBUTES(type) = tree_cons(get_identifier(attr), args, TYPE_ATTRIBUTES(type)); +} + +static inline void add_type_attr(tree type, const char *attr, tree args) +{ + tree main_variant = TYPE_MAIN_VARIANT(type); + + __add_type_attr(TYPE_CANONICAL(type), attr, args); + __add_type_attr(TYPE_CANONICAL(main_variant), attr, args); + __add_type_attr(main_variant, attr, args); + + for (type = TYPE_NEXT_VARIANT(main_variant); type; type = TYPE_NEXT_VARIANT(type)) { + if (!lookup_attribute(attr, TYPE_ATTRIBUTES(type))) + TYPE_ATTRIBUTES(type) = TYPE_ATTRIBUTES(main_variant); + + __add_type_attr(TYPE_CANONICAL(type), attr, args); + } +} + #define PASS_INFO(NAME, REF, ID, POS) \ struct register_pass_info NAME##_pass_info = { \ .pass = make_##NAME##_pass(), \ diff --git a/scripts/gcc-plugins/randomize_layout_plugin.c b/scripts/gcc-plugins/randomize_layout_plugin.c index 971a1908a8cc..ff65a4f87f24 100644 --- a/scripts/gcc-plugins/randomize_layout_plugin.c +++ b/scripts/gcc-plugins/randomize_layout_plugin.c @@ -73,6 +73,9 @@ static tree handle_randomize_layout_attr(tree *node, tree name, tree args, int f if (TYPE_P(*node)) { type = *node; + } else if (TREE_CODE(*node) == FIELD_DECL) { + *no_add_attrs = false; + return NULL_TREE; } else { gcc_assert(TREE_CODE(*node) == TYPE_DECL); type = TREE_TYPE(*node); @@ -348,15 +351,14 @@ static int relayout_struct(tree type) TREE_CHAIN(newtree[i]) = newtree[i+1]; TREE_CHAIN(newtree[num_fields - 1]) = NULL_TREE; + add_type_attr(type, "randomize_performed", NULL_TREE); + add_type_attr(type, "designated_init", NULL_TREE); + if (has_flexarray) + add_type_attr(type, "has_flexarray", NULL_TREE); + main_variant = TYPE_MAIN_VARIANT(type); - for (variant = main_variant; variant; variant = TYPE_NEXT_VARIANT(variant)) { + for (variant = main_variant; variant; variant = TYPE_NEXT_VARIANT(variant)) TYPE_FIELDS(variant) = newtree[0]; - TYPE_ATTRIBUTES(variant) = copy_list(TYPE_ATTRIBUTES(variant)); - TYPE_ATTRIBUTES(variant) = tree_cons(get_identifier("randomize_performed"), NULL_TREE, TYPE_ATTRIBUTES(variant)); - TYPE_ATTRIBUTES(variant) = tree_cons(get_identifier("designated_init"), NULL_TREE, TYPE_ATTRIBUTES(variant)); - if (has_flexarray) - TYPE_ATTRIBUTES(type) = tree_cons(get_identifier("has_flexarray"), NULL_TREE, TYPE_ATTRIBUTES(type)); - } /* * force a re-layout of the main variant @@ -424,10 +426,8 @@ static void randomize_type(tree type) if (lookup_attribute("randomize_layout", TYPE_ATTRIBUTES(TYPE_MAIN_VARIANT(type))) || is_pure_ops_struct(type)) relayout_struct(type); - for (variant = TYPE_MAIN_VARIANT(type); variant; variant = TYPE_NEXT_VARIANT(variant)) { - TYPE_ATTRIBUTES(type) = copy_list(TYPE_ATTRIBUTES(type)); - TYPE_ATTRIBUTES(type) = tree_cons(get_identifier("randomize_considered"), NULL_TREE, TYPE_ATTRIBUTES(type)); - } + add_type_attr(type, "randomize_considered", NULL_TREE); + #ifdef __DEBUG_PLUGIN fprintf(stderr, "Marking randomize_considered on struct %s\n", ORIG_TYPE_NAME(type)); #ifdef __DEBUG_VERBOSE

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] randstruct: gcc-plugin: Fix attribute addition" failed to apply to 6.15-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.15-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.15.y git checkout FETCH_HEAD git cherry-pick -x f39f18f3c3531aa802b58a20d39d96e82eb96c14 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060524-bargraph-overhear-5497@gregkh' --subject-prefix 'PATCH 6.15.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From f39f18f3c3531aa802b58a20d39d96e82eb96c14 Mon Sep 17 00:00:00 2001 From: Kees Cook <kees(a)kernel.org> Date: Fri, 30 May 2025 15:18:28 -0700 Subject: [PATCH] randstruct: gcc-plugin: Fix attribute addition Based on changes in the 2021 public version of the randstruct out-of-tree GCC plugin[1], more carefully update the attributes on resulting decls, to avoid tripping checks in GCC 15's comptypes_check_enum_int() when it has been configured with "--enable-checking=misc": arch/arm64/kernel/kexec_image.c:132:14: internal compiler error: in comptypes_check_enum_int, at c/c-typeck.cc:1519 132 | const struct kexec_file_ops kexec_image_ops = { | ^~~~~~~~~~~~~~ internal_error(char const*, ...), at gcc/gcc/diagnostic-global-context.cc:517 fancy_abort(char const*, int, char const*), at gcc/gcc/diagnostic.cc:1803 comptypes_check_enum_int(tree_node*, tree_node*, bool*), at gcc/gcc/c/c-typeck.cc:1519 ... Link: https://archive.org/download/grsecurity/grsecurity-3.1-5.10.41-202105280954… [1] Reported-by: Thiago Jung Bauermann <thiago.bauermann(a)linaro.org> Closes: https://github.com/KSPP/linux/issues/367 Closes: https://lore.kernel.org/lkml/20250530000646.104457-1-thiago.bauermann@linar… Reported-by: Ingo Saitz <ingo(a)hannover.ccc.de> Closes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104745 Fixes: 313dd1b62921 ("gcc-plugins: Add the randstruct plugin") Tested-by: Thiago Jung Bauermann <thiago.bauermann(a)linaro.org> Link: https://lore.kernel.org/r/20250530221824.work.623-kees@kernel.org Signed-off-by: Kees Cook <kees(a)kernel.org> diff --git a/scripts/gcc-plugins/gcc-common.h b/scripts/gcc-plugins/gcc-common.h index 3222c1070444..ef12c8f929ed 100644 --- a/scripts/gcc-plugins/gcc-common.h +++ b/scripts/gcc-plugins/gcc-common.h @@ -123,6 +123,38 @@ static inline tree build_const_char_string(int len, const char *str) return cstr; } +static inline void __add_type_attr(tree type, const char *attr, tree args) +{ + tree oldattr; + + if (type == NULL_TREE) + return; + oldattr = lookup_attribute(attr, TYPE_ATTRIBUTES(type)); + if (oldattr != NULL_TREE) { + gcc_assert(TREE_VALUE(oldattr) == args || TREE_VALUE(TREE_VALUE(oldattr)) == TREE_VALUE(args)); + return; + } + + TYPE_ATTRIBUTES(type) = copy_list(TYPE_ATTRIBUTES(type)); + TYPE_ATTRIBUTES(type) = tree_cons(get_identifier(attr), args, TYPE_ATTRIBUTES(type)); +} + +static inline void add_type_attr(tree type, const char *attr, tree args) +{ + tree main_variant = TYPE_MAIN_VARIANT(type); + + __add_type_attr(TYPE_CANONICAL(type), attr, args); + __add_type_attr(TYPE_CANONICAL(main_variant), attr, args); + __add_type_attr(main_variant, attr, args); + + for (type = TYPE_NEXT_VARIANT(main_variant); type; type = TYPE_NEXT_VARIANT(type)) { + if (!lookup_attribute(attr, TYPE_ATTRIBUTES(type))) + TYPE_ATTRIBUTES(type) = TYPE_ATTRIBUTES(main_variant); + + __add_type_attr(TYPE_CANONICAL(type), attr, args); + } +} + #define PASS_INFO(NAME, REF, ID, POS) \ struct register_pass_info NAME##_pass_info = { \ .pass = make_##NAME##_pass(), \ diff --git a/scripts/gcc-plugins/randomize_layout_plugin.c b/scripts/gcc-plugins/randomize_layout_plugin.c index 971a1908a8cc..ff65a4f87f24 100644 --- a/scripts/gcc-plugins/randomize_layout_plugin.c +++ b/scripts/gcc-plugins/randomize_layout_plugin.c @@ -73,6 +73,9 @@ static tree handle_randomize_layout_attr(tree *node, tree name, tree args, int f if (TYPE_P(*node)) { type = *node; + } else if (TREE_CODE(*node) == FIELD_DECL) { + *no_add_attrs = false; + return NULL_TREE; } else { gcc_assert(TREE_CODE(*node) == TYPE_DECL); type = TREE_TYPE(*node); @@ -348,15 +351,14 @@ static int relayout_struct(tree type) TREE_CHAIN(newtree[i]) = newtree[i+1]; TREE_CHAIN(newtree[num_fields - 1]) = NULL_TREE; + add_type_attr(type, "randomize_performed", NULL_TREE); + add_type_attr(type, "designated_init", NULL_TREE); + if (has_flexarray) + add_type_attr(type, "has_flexarray", NULL_TREE); + main_variant = TYPE_MAIN_VARIANT(type); - for (variant = main_variant; variant; variant = TYPE_NEXT_VARIANT(variant)) { + for (variant = main_variant; variant; variant = TYPE_NEXT_VARIANT(variant)) TYPE_FIELDS(variant) = newtree[0]; - TYPE_ATTRIBUTES(variant) = copy_list(TYPE_ATTRIBUTES(variant)); - TYPE_ATTRIBUTES(variant) = tree_cons(get_identifier("randomize_performed"), NULL_TREE, TYPE_ATTRIBUTES(variant)); - TYPE_ATTRIBUTES(variant) = tree_cons(get_identifier("designated_init"), NULL_TREE, TYPE_ATTRIBUTES(variant)); - if (has_flexarray) - TYPE_ATTRIBUTES(type) = tree_cons(get_identifier("has_flexarray"), NULL_TREE, TYPE_ATTRIBUTES(type)); - } /* * force a re-layout of the main variant @@ -424,10 +426,8 @@ static void randomize_type(tree type) if (lookup_attribute("randomize_layout", TYPE_ATTRIBUTES(TYPE_MAIN_VARIANT(type))) || is_pure_ops_struct(type)) relayout_struct(type); - for (variant = TYPE_MAIN_VARIANT(type); variant; variant = TYPE_NEXT_VARIANT(variant)) { - TYPE_ATTRIBUTES(type) = copy_list(TYPE_ATTRIBUTES(type)); - TYPE_ATTRIBUTES(type) = tree_cons(get_identifier("randomize_considered"), NULL_TREE, TYPE_ATTRIBUTES(type)); - } + add_type_attr(type, "randomize_considered", NULL_TREE); + #ifdef __DEBUG_PLUGIN fprintf(stderr, "Marking randomize_considered on struct %s\n", ORIG_TYPE_NAME(type)); #ifdef __DEBUG_VERBOSE

1 month, 1 week

1
0
0 0

[PATCH v3 1/5] drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS

by Imre Deak

Reading DPCD registers has side-effects in general. In particular accessing registers outside of the link training register range (0x102-0x106, 0x202-0x207, 0x200c-0x200f, 0x2216) is explicitly forbidden by the DP v2.1 Standard, see 3.6.5.1 DPTX AUX Transaction Handling Mandates 3.6.7.4 128b/132b DP Link Layer LTTPR Link Training Mandates Based on my tests, accessing the DPCD_REV register during the link training of an UHBR TBT DP tunnel sink leads to link training failures. Solve the above by using the DP_LANE0_1_STATUS (0x202) register for the DPCD register access quirk. Cc: <stable(a)vger.kernel.org> Cc: Ville Syrjälä <ville.syrjala(a)linux.intel.com> Cc: Jani Nikula <jani.nikula(a)linux.intel.com> Acked-by: Jani Nikula <jani.nikula(a)linux.intel.com> Signed-off-by: Imre Deak <imre.deak(a)intel.com> --- drivers/gpu/drm/display/drm_dp_helper.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/gpu/drm/display/drm_dp_helper.c b/drivers/gpu/drm/display/drm_dp_helper.c index f2a6559a27100..dc622c78db9d4 100644 --- a/drivers/gpu/drm/display/drm_dp_helper.c +++ b/drivers/gpu/drm/display/drm_dp_helper.c @@ -725,7 +725,7 @@ ssize_t drm_dp_dpcd_read(struct drm_dp_aux *aux, unsigned int offset, * monitor doesn't power down exactly after the throw away read. */ if (!aux->is_remote) { - ret = drm_dp_dpcd_probe(aux, DP_DPCD_REV); + ret = drm_dp_dpcd_probe(aux, DP_LANE0_1_STATUS); if (ret < 0) return ret; } -- 2.44.2

1 month, 1 week

1
0
0 0

[Compiler Error] 5.10.238 - Werror=incompatible-pointer-types

by Philip Müller

I see the following compiler error with: 2025-06-04T18:53:58.6366470Z CC net/core/skmsg.o 2025-06-04T18:53:58.7689837Z CC [M] sound/pci/ca0106/ca0106_proc.o 2025-06-04T18:53:58.9485675Z drivers/video/fbdev/core/dummyblit.c: In function ‘fbcon_set_dummyops’: 2025-06-04T18:53:58.9488404Z drivers/video/fbdev/core/dummyblit.c:78:20: error: assignment to ‘void (*)(struct vc_data *, struct fb_info *, int, int, int, int, int, int)’ from incompatible pointer type ‘void (*)(struct vc_data *, struct fb_info *, int, int, int, int)’ [-Werror=incompatible-pointer-types] 2025-06-04T18:53:58.9490536Z 78 | ops->clear = dummy_clear; 2025-06-04T18:53:58.9491362Z | ^ 2025-06-04T18:53:58.9492571Z drivers/video/fbdev/core/dummyblit.c:33:13: note: ‘dummy_clear’ declared here 2025-06-04T18:53:58.9494125Z 33 | static void dummy_clear(struct vc_data *vc, struct fb_info *info, int sy, 2025-06-04T18:53:58.9495247Z | ^~~~~~~~~~~ 2025-06-04T18:53:59.0185422Z cc1: some warnings being treated as errors 2025-06-04T18:53:59.0229239Z make[4]: *** [scripts/Makefile.build:286: drivers/video/fbdev/core/dummyblit.o] Error 1 2025-06-04T18:53:59.0235041Z make[3]: *** [scripts/Makefile.build:503: drivers/video/fbdev/core] Error 2 2025-06-04T18:53:59.0243143Z make[2]: *** [scripts/Makefile.build:503: drivers/video/fbdev] Error 2 2025-06-04T18:53:59.0257657Z make[1]: *** [scripts/Makefile.build:503: drivers/video] Error 2 2025-06-04T18:53:59.0262623Z make: *** [Makefile:1852: drivers] Error 2 Full build log attached; -- Best, Philip

1 month, 1 week

1
2
0 0

[PATCH v2 1/2] platform/loongarch: laptop: Get brightness setting from EC on probe

by Yao Zi

Previously during probe, 1 is unconditionally taken as current brightness value and set to props.brightness, which will be considered as the brightness before suspend and restored to EC on resume. Since a brightness value of 1 almost never matches EC's state on coldboot (my laptop's EC defaults to 80), this causes surprising changes of screen brightness on the first time of resume after coldboot. Let's get brightness from EC and take it as the current brightness on probe of the laptop driver to avoid the surprising behavior. Tested on TongFang L860-T2 3A5000 laptop. Cc: stable(a)vger.kernel.org Fixes: 6246ed09111f ("LoongArch: Add ACPI-based generic laptop driver") Signed-off-by: Yao Zi <ziyao(a)disroot.org> --- drivers/platform/loongarch/loongson-laptop.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/platform/loongarch/loongson-laptop.c b/drivers/platform/loongarch/loongson-laptop.c index 99203584949d..828bd62e3596 100644 --- a/drivers/platform/loongarch/loongson-laptop.c +++ b/drivers/platform/loongarch/loongson-laptop.c @@ -392,7 +392,7 @@ static int laptop_backlight_register(void) if (!acpi_evalf(hotkey_handle, &status, "ECLL", "d")) return -EIO; - props.brightness = 1; + props.brightness = ec_get_brightness(); props.max_brightness = status; props.type = BACKLIGHT_PLATFORM; -- 2.49.0

1 month, 1 week

1
0
0 0

Are you satisfied with your supplier?

by Ironman＠duwoal.cn

1 month, 1 week

1
0
0 0

[PATCH -stable,5.4 0/1] Netfilter fix for -stable

by Pablo Neira Ayuso

Hi Greg, Sasha, This batch contains backported fixes for 6.1 -stable. The following list shows the backported patch, I am using original commit IDs for reference: 1) 039b1f4f24ec ("netfilter: nft_socket: fix erroneous socket assignment") this is to fix a sk memleak. Please, apply, Thanks. Florian Westphal (1): netfilter: nft_socket: fix sk refcount leaks net/netfilter/nft_socket.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) -- 2.30.2

1 month, 1 week

1
2
0 0

[PATCH -stable,5.10 0/1] Netfilter fix for -stable

by Pablo Neira Ayuso

Hi Greg, Sasha, This batch contains backported fixes for 5.10 -stable. The following list shows the backported patch, I am using original commit IDs for reference: 1) 8b26ff7af8c3 ("netfilter: nft_socket: fix sk refcount leaks") This is to fix a sk memleak, backport patch posted by Denis Arefev. Please, apply, Thanks Florian Westphal (1): netfilter: nft_socket: fix sk refcount leaks net/netfilter/nft_socket.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) -- 2.30.2

1 month, 1 week

1
1
0 0

Backports for 6.1 and older due to clang -Qunused-arguments change

by Nathan Chancellor

Hi Greg and Sasha, Please find attached backports for commit feb843a469fb ("kbuild: add $(CLANG_FLAGS) to KBUILD_CPPFLAGS") and its dependent changes, commit d5c8d6e0fa61 ("kbuild: Update assembler calls to use proper flags and language target") and its dependent changes, and commit 7db038d9790e ("drm/amd/display: Do not add '-mhard-float' to dml_ccflags for clang") for 6.1 and earlier. The second listed change is already in 6.1 so that series is a little shorter. These changes are needed there due to an upstream LLVM change [1] that changes the behavior of -Qunused-arguments with unknown target options, which is only used in 6.1 and older since I removed it in commit 8d9acfce3332 ("kbuild: Stop using '-Qunused-arguments' with clang") in 6.3. Please let me know if there are any issues, I will try to pay attention for any issues that crop up in the stable review period from these changes but please ping me if you remember. Cheers, Nathan [1]: https://github.com/llvm/llvm-project/commit/a4b2f4a72aa9b4655ecc723838830e0…

1 month, 1 week

1
0
0 0

[PATCH] pidfs: never refuse ppid == 0 in PIDFD_GET_INFO

by Mike Yuan

In systemd we spotted an issue after switching to ioctl(PIDFD_GET_INFO) for obtaining pid number the pidfd refers to, that for processes with a parent from outer pidns PIDFD_GET_INFO unexpectedly yields -ESRCH [1]. It turned out that there's an arbitrary check blocking this, which is not really sensible given getppid() happily returns 0 for such processes. Just drop the spurious check and userspace ought to handle ppid == 0 properly everywhere. [1] https://github.com/systemd/systemd/issues/37715 Fixes: cdda1f26e74b ("pidfd: add ioctl to retrieve pid info") Signed-off-by: Mike Yuan <me(a)yhndnzj.com> Cc: Christian Brauner <brauner(a)kernel.org> Cc: Luca Boccassi <luca.boccassi(a)gmail.com> Cc: <stable(a)vger.kernel.org> --- fs/pidfs.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fs/pidfs.c b/fs/pidfs.c index c1f0a067be40..69919be1c9d8 100644 --- a/fs/pidfs.c +++ b/fs/pidfs.c @@ -366,7 +366,7 @@ static long pidfd_info(struct file *file, unsigned int cmd, unsigned long arg) kinfo.pid = task_pid_vnr(task); kinfo.mask |= PIDFD_INFO_PID; - if (kinfo.pid == 0 || kinfo.tgid == 0 || (kinfo.ppid == 0 && kinfo.pid != 1)) + if (kinfo.pid == 0 || kinfo.tgid == 0) return -ESRCH; copy_out: base-commit: 5abc7438f1e9d62e91ad775cc83c9594c48d2282 -- 2.49.0

1 month, 1 week

2
1
0 0

[PATCH] drm/amdgpu: fix NULL dereference in gfx_v9_0_kcq() and kiq_init_queue()

by Alexey Nepomnyashih

A potential NULL pointer dereference may occur when accessing tmp_mqd->cp_hqd_pq_control without verifying that tmp_mqd is non-NULL. This may happen if mqd_backup[mqd_idx] is unexpectedly NULL. Although a NULL check for mqd_backup[mqd_idx] existed previously, it was moved to a position after the dereference in a recent commit, which renders it ineffective. Add an explicit NULL check for tmp_mqd before dereferencing its members. Found by Linux Verification Center (linuxtesting.org) with SVACE. Cc: stable(a)vger.kernel.org # v5.13+ Fixes: a330b52a9e59 ("drm/amdgpu: Init the cp MQD if it's not be initialized before") Signed-off-by: Alexey Nepomnyashih <sdl(a)nppct.ru> --- drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) diff --git a/drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c b/drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c index d7db4cb907ae..134cab16a00d 100644 --- a/drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c +++ b/drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c @@ -3817,10 +3817,9 @@ static int gfx_v9_0_kiq_init_queue(struct amdgpu_ring *ring) * check mqd->cp_hqd_pq_control since this value should not be 0 */ tmp_mqd = (struct v9_mqd *)adev->gfx.kiq[0].mqd_backup; - if (amdgpu_in_reset(adev) && tmp_mqd->cp_hqd_pq_control){ + if (amdgpu_in_reset(adev) && tmp_mqd && tmp_mqd->cp_hqd_pq_control) { /* for GPU_RESET case , reset MQD to a clean status */ - if (adev->gfx.kiq[0].mqd_backup) - memcpy(mqd, adev->gfx.kiq[0].mqd_backup, sizeof(struct v9_mqd_allocation)); + memcpy(mqd, adev->gfx.kiq[0].mqd_backup, sizeof(struct v9_mqd_allocation)); /* reset ring buffer */ ring->wptr = 0; @@ -3863,7 +3862,7 @@ static int gfx_v9_0_kcq_init_queue(struct amdgpu_ring *ring, bool restore) */ tmp_mqd = (struct v9_mqd *)adev->gfx.mec.mqd_backup[mqd_idx]; - if (!restore && (!tmp_mqd->cp_hqd_pq_control || + if (!restore && tmp_mqd && (!tmp_mqd->cp_hqd_pq_control || (!amdgpu_in_reset(adev) && !adev->in_suspend))) { memset((void *)mqd, 0, sizeof(struct v9_mqd_allocation)); ((struct v9_mqd_allocation *)mqd)->dynamic_cu_mask = 0xFFFFFFFF; @@ -3874,8 +3873,7 @@ static int gfx_v9_0_kcq_init_queue(struct amdgpu_ring *ring, bool restore) soc15_grbm_select(adev, 0, 0, 0, 0, 0); mutex_unlock(&adev->srbm_mutex); - if (adev->gfx.mec.mqd_backup[mqd_idx]) - memcpy(adev->gfx.mec.mqd_backup[mqd_idx], mqd, sizeof(struct v9_mqd_allocation)); + memcpy(adev->gfx.mec.mqd_backup[mqd_idx], mqd, sizeof(struct v9_mqd_allocation)); } else { /* restore MQD to a clean status */ if (adev->gfx.mec.mqd_backup[mqd_idx]) -- 2.43.0

1 month, 1 week

3
4
0 0

+ mm-userfaultfd-fix-race-of-userfaultfd_move-and-swap-cache.patch added to mm-hotfixes-unstable branch

by Andrew Morton

The patch titled Subject: mm: userfaultfd: fix race of userfaultfd_move and swap cache has been added to the -mm mm-hotfixes-unstable branch. Its filename is mm-userfaultfd-fix-race-of-userfaultfd_move-and-swap-cache.patch This patch will shortly appear at https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patche… This patch will later appear in the mm-hotfixes-unstable branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm Before you just go and hit "reply", please: a) Consider who else should be cc'ed b) Prefer to cc a suitable mailing list as well c) Ideally: find the original patch on the mailing list and do a reply-to-all to that, adding suitable additional cc's *** Remember to use Documentation/process/submit-checklist.rst when testing your code *** The -mm tree is included into linux-next via the mm-everything branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm and is updated there every 2-3 working days ------------------------------------------------------ From: Kairui Song <kasong(a)tencent.com> Subject: mm: userfaultfd: fix race of userfaultfd_move and swap cache Date: Wed, 4 Jun 2025 23:10:38 +0800 On seeing a swap entry PTE, userfaultfd_move does a lockless swap cache lookup, and tries to move the found folio to the faulting vma. Currently, it relies on checking the PTE value to ensure that the moved folio still belongs to the src swap entry and that no new folio has been added to the swap cache, which turns out to be unreliable. While working and reviewing the swap table series with Barry, following existing races are observed and reproduced [1]: In the example below, move_pages_pte is moving src_pte to dst_pte, where src_pte is a swap entry PTE holding swap entry S1, and S1 is not in the swap cache: CPU1 CPU2 userfaultfd_move move_pages_pte() entry = pte_to_swp_entry(orig_src_pte); // Here it got entry = S1 ... < interrupted> ... <swapin src_pte, alloc and use folio A> // folio A is a new allocated folio // and get installed into src_pte <frees swap entry S1> // src_pte now points to folio A, S1 // has swap count == 0, it can be freed // by folio_swap_swap or swap // allocator's reclaim. <try to swap out another folio B> // folio B is a folio in another VMA. <put folio B to swap cache using S1 > // S1 is freed, folio B can use it // for swap out with no problem. ... folio = filemap_get_folio(S1) // Got folio B here !!! ... < interrupted again> ... <swapin folio B and free S1> // Now S1 is free to be used again. <swapout src_pte & folio A using S1> // Now src_pte is a swap entry PTE // holding S1 again. folio_trylock(folio) move_swap_pte double_pt_lock is_pte_pages_stable // Check passed because src_pte == S1 folio_move_anon_rmap(...) // Moved invalid folio B here !!! The race window is very short and requires multiple collisions of multiple rare events, so it's very unlikely to happen, but with a deliberately constructed reproducer and increased time window, it can be reproduced easily. This can be fixed by checking if the folio returned by filemap is the valid swap cache folio after acquiring the folio lock. Another similar race is possible: filemap_get_folio may return NULL, but folio (A) could be swapped in and then swapped out again using the same swap entry after the lookup. In such a case, folio (A) may remain in the swap cache, so it must be moved too: CPU1 CPU2 userfaultfd_move move_pages_pte() entry = pte_to_swp_entry(orig_src_pte); // Here it got entry = S1, and S1 is not in swap cache folio = filemap_get_folio(S1) // Got NULL ... < interrupted again> ... <swapin folio A and free S1> <swapout folio A re-using S1> move_swap_pte double_pt_lock is_pte_pages_stable // Check passed because src_pte == S1 folio_move_anon_rmap(...) // folio A is ignored !!! Fix this by checking the swap cache again after acquiring the src_pte lock. And to avoid the filemap overhead, we check swap_map directly [2]. The SWP_SYNCHRONOUS_IO path does make the problem more complex, but so far we don't need to worry about that, since folios can only be exposed to the swap cache in the swap out path, and this is covered in this patch by checking the swap cache again after acquiring the src_pte lock. Testing with a simple C program that allocates and moves several GB of memory did not show any observable performance change. Link: https://lkml.kernel.org/r/20250604151038.21968-1-ryncsn@gmail.com Fixes: adef440691ba ("userfaultfd: UFFDIO_MOVE uABI") Signed-off-by: Kairui Song <kasong(a)tencent.com> Closes: https://lore.kernel.org/linux-mm/CAMgjq7B1K=6OOrK2OUZ0-tqCzi+EJt+2_K97TPGoS… [1] Link: https://lore.kernel.org/all/CAGsJ_4yJhJBo16XhiC-nUzSheyX-V3-nFE+tAi=8Y560K8… [2] Reviewed-by: Lokesh Gidra <lokeshgidra(a)google.com> Acked-by: Peter Xu <peterx(a)redhat.com> Reviewed-by: Suren Baghdasaryan <surenb(a)google.com> Cc: Andrea Arcangeli <aarcange(a)redhat.com> Cc: Barry Song <21cnbao(a)gmail.com> Cc: David Hildenbrand <david(a)redhat.com> Cc: Kairui Song <kasong(a)tencent.com> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> --- mm/userfaultfd.c | 33 +++++++++++++++++++++++++++++++-- 1 file changed, 31 insertions(+), 2 deletions(-) --- a/mm/userfaultfd.c~mm-userfaultfd-fix-race-of-userfaultfd_move-and-swap-cache +++ a/mm/userfaultfd.c @@ -1084,8 +1084,18 @@ static int move_swap_pte(struct mm_struc pte_t orig_dst_pte, pte_t orig_src_pte, pmd_t *dst_pmd, pmd_t dst_pmdval, spinlock_t *dst_ptl, spinlock_t *src_ptl, - struct folio *src_folio) + struct folio *src_folio, + struct swap_info_struct *si, swp_entry_t entry) { + /* + * Check if the folio still belongs to the target swap entry after + * acquiring the lock. Folio can be freed in the swap cache while + * not locked. + */ + if (src_folio && unlikely(!folio_test_swapcache(src_folio) || + entry.val != src_folio->swap.val)) + return -EAGAIN; + double_pt_lock(dst_ptl, src_ptl); if (!is_pte_pages_stable(dst_pte, src_pte, orig_dst_pte, orig_src_pte, @@ -1102,6 +1112,25 @@ static int move_swap_pte(struct mm_struc if (src_folio) { folio_move_anon_rmap(src_folio, dst_vma); src_folio->index = linear_page_index(dst_vma, dst_addr); + } else { + /* + * Check if the swap entry is cached after acquiring the src_pte + * lock. Otherwise, we might miss a newly loaded swap cache folio. + * + * Check swap_map directly to minimize overhead, READ_ONCE is sufficient. + * We are trying to catch newly added swap cache, the only possible case is + * when a folio is swapped in and out again staying in swap cache, using the + * same entry before the PTE check above. The PTL is acquired and released + * twice, each time after updating the swap_map's flag. So holding + * the PTL here ensures we see the updated value. False positive is possible, + * e.g. SWP_SYNCHRONOUS_IO swapin may set the flag without touching the + * cache, or during the tiny synchronization window between swap cache and + * swap_map, but it will be gone very quickly, worst result is retry jitters. + */ + if (READ_ONCE(si->swap_map[swp_offset(entry)]) & SWAP_HAS_CACHE) { + double_pt_unlock(dst_ptl, src_ptl); + return -EAGAIN; + } } orig_src_pte = ptep_get_and_clear(mm, src_addr, src_pte); @@ -1412,7 +1441,7 @@ retry: } err = move_swap_pte(mm, dst_vma, dst_addr, src_addr, dst_pte, src_pte, orig_dst_pte, orig_src_pte, dst_pmd, dst_pmdval, - dst_ptl, src_ptl, src_folio); + dst_ptl, src_ptl, src_folio, si, entry); } out: _ Patches currently in -mm which might be from kasong(a)tencent.com are mm-userfaultfd-fix-race-of-userfaultfd_move-and-swap-cache.patch

1 month, 1 week

1
0
0 0

[PATCH v6.1 00/27] af_unix: Align with upstream to avoid a potential UAF

by Lee Jones

This is the second attempt at achieving the same goal. This time, the submission avoids forking the current code base, ensuring it remains easier to maintain over time. The set has been tested using the SCM_RIGHTS test suite [1] using QEMU and has been seen to successfully mitigate a UAF on on a top tier handset. RESULTS: TAP version 13 1..20 # Starting 20 tests from 5 test cases. # RUN scm_rights.dgram.self_ref ... # OK scm_rights.dgram.self_ref ok 1 scm_rights.dgram.self_ref # RUN scm_rights.dgram.triangle ... # OK scm_rights.dgram.triangle ok 2 scm_rights.dgram.triangle # RUN scm_rights.dgram.cross_edge ... # OK scm_rights.dgram.cross_edge ok 3 scm_rights.dgram.cross_edge # RUN scm_rights.dgram.backtrack_from_scc ... # OK scm_rights.dgram.backtrack_from_scc ok 4 scm_rights.dgram.backtrack_from_scc # RUN scm_rights.stream.self_ref ... # OK scm_rights.stream.self_ref ok 5 scm_rights.stream.self_ref # RUN scm_rights.stream.triangle ... # OK scm_rights.stream.triangle ok 6 scm_rights.stream.triangle # RUN scm_rights.stream.cross_edge ... # OK scm_rights.stream.cross_edge ok 7 scm_rights.stream.cross_edge # RUN scm_rights.stream.backtrack_from_scc ... # OK scm_rights.stream.backtrack_from_scc ok 8 scm_rights.stream.backtrack_from_scc # RUN scm_rights.stream_oob.self_ref ... # OK scm_rights.stream_oob.self_ref ok 9 scm_rights.stream_oob.self_ref # RUN scm_rights.stream_oob.triangle ... # OK scm_rights.stream_oob.triangle ok 10 scm_rights.stream_oob.triangle # RUN scm_rights.stream_oob.cross_edge ... # OK scm_rights.stream_oob.cross_edge ok 11 scm_rights.stream_oob.cross_edge # RUN scm_rights.stream_oob.backtrack_from_scc ... # OK scm_rights.stream_oob.backtrack_from_scc ok 12 scm_rights.stream_oob.backtrack_from_scc # RUN scm_rights.stream_listener.self_ref ... # OK scm_rights.stream_listener.self_ref ok 13 scm_rights.stream_listener.self_ref # RUN scm_rights.stream_listener.triangle ... # OK scm_rights.stream_listener.triangle ok 14 scm_rights.stream_listener.triangle # RUN scm_rights.stream_listener.cross_edge ... # OK scm_rights.stream_listener.cross_edge ok 15 scm_rights.stream_listener.cross_edge # RUN scm_rights.stream_listener.backtrack_from_scc ... # OK scm_rights.stream_listener.backtrack_from_scc ok 16 scm_rights.stream_listener.backtrack_from_scc # RUN scm_rights.stream_listener_oob.self_ref ... # OK scm_rights.stream_listener_oob.self_ref ok 17 scm_rights.stream_listener_oob.self_ref # RUN scm_rights.stream_listener_oob.triangle ... # OK scm_rights.stream_listener_oob.triangle ok 18 scm_rights.stream_listener_oob.triangle # RUN scm_rights.stream_listener_oob.cross_edge ... # OK scm_rights.stream_listener_oob.cross_edge ok 19 scm_rights.stream_listener_oob.cross_edge # RUN scm_rights.stream_listener_oob.backtrack_from_scc ... # OK scm_rights.stream_listener_oob.backtrack_from_scc ok 20 scm_rights.stream_listener_oob.backtrack_from_scc # PASSED: 20 / 20 tests passed. # Totals: pass:20 fail:0 xfail:0 xpass:0 skip:0 error:0 [0] https://lore.kernel.org/all/20250304030149.82265-1-kuniyu@amazon.com/ [1] https://lore.kernel.org/all/20240325202425.60930-16-kuniyu@amazon.com/ Alexander Mikhalitsyn (1): af_unix: Kconfig: make CONFIG_UNIX bool Kuniyuki Iwashima (24): af_unix: Return struct unix_sock from unix_get_socket(). af_unix: Run GC on only one CPU. af_unix: Try to run GC async. af_unix: Replace BUG_ON() with WARN_ON_ONCE(). af_unix: Remove io_uring code for GC. af_unix: Remove CONFIG_UNIX_SCM. af_unix: Allocate struct unix_vertex for each inflight AF_UNIX fd. af_unix: Allocate struct unix_edge for each inflight AF_UNIX fd. af_unix: Link struct unix_edge when queuing skb. af_unix: Bulk update unix_tot_inflight/unix_inflight when queuing skb. af_unix: Iterate all vertices by DFS. af_unix: Detect Strongly Connected Components. af_unix: Save listener for embryo socket. af_unix: Fix up unix_edge.successor for embryo socket. af_unix: Save O(n) setup of Tarjan's algo. af_unix: Skip GC if no cycle exists. af_unix: Avoid Tarjan's algorithm if unnecessary. af_unix: Assign a unique index to SCC. af_unix: Detect dead SCC. af_unix: Replace garbage collection algorithm. af_unix: Remove lock dance in unix_peek_fds(). af_unix: Try not to hold unix_gc_lock during accept(). af_unix: Don't access successor in unix_del_edges() during GC. af_unix: Add dead flag to struct scm_fp_list. Michal Luczaj (1): af_unix: Fix garbage collection of embryos carrying OOB with SCM_RIGHTS Shigeru Yoshida (1): af_unix: Fix uninit-value in __unix_walk_scc() include/net/af_unix.h | 48 ++- include/net/scm.h | 11 + net/Makefile | 2 +- net/core/scm.c | 17 ++ net/unix/Kconfig | 11 +- net/unix/Makefile | 2 - net/unix/af_unix.c | 120 +++++--- net/unix/garbage.c | 691 +++++++++++++++++++++++++++++------------- net/unix/scm.c | 154 ---------- net/unix/scm.h | 10 - 10 files changed, 618 insertions(+), 448 deletions(-) delete mode 100644 net/unix/scm.c delete mode 100644 net/unix/scm.h -- 2.49.0.1143.g0be31eac6b-goog

1 month, 1 week

4
57
0 0

[PATCH 21/23] drm/amd/display: Export full brightness range to userspace

by Alex Hung

From: Mario Limonciello <mario.limonciello(a)amd.com> [WHY] Userspace currently is offered a range from 0-0xFF but the PWM is programmed from 0-0xFFFF. This can be limiting to some software that wants to apply greater granularity. [HOW] Convert internally to firmware values only when mapping custom brightness curves because these are in 0-0xFF range. Advertise full PWM range to userspace. Cc: Mario Limonciello <mario.limonciello(a)amd.com> Cc: Alex Deucher <alexander.deucher(a)amd.com> Cc: stable(a)vger.kernel.org Reviewed-by: Roman Li <roman.li(a)amd.com> Signed-off-by: Mario Limonciello <mario.limonciello(a)amd.com> Signed-off-by: Alex Hung <alex.hung(a)amd.com> --- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 41 ++++++++++++------- 1 file changed, 27 insertions(+), 14 deletions(-) diff --git a/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c b/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c index 31df545f8c0f..19d38357f508 100644 --- a/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c +++ b/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c @@ -4721,9 +4721,23 @@ static int get_brightness_range(const struct amdgpu_dm_backlight_caps *caps, return 1; } +/* Rescale from [min..max] to [0..AMDGPU_MAX_BL_LEVEL] */ +static inline u32 scale_input_to_fw(int min, int max, u64 input) +{ + return DIV_ROUND_CLOSEST_ULL(input * AMDGPU_MAX_BL_LEVEL, max - min); +} + +/* Rescale from [0..AMDGPU_MAX_BL_LEVEL] to [min..max] */ +static inline u32 scale_fw_to_input(int min, int max, u64 input) +{ + return min + DIV_ROUND_CLOSEST_ULL(input * (max - min), AMDGPU_MAX_BL_LEVEL); +} + static void convert_custom_brightness(const struct amdgpu_dm_backlight_caps *caps, - uint32_t *brightness) + unsigned int min, unsigned int max, + uint32_t *user_brightness) { + u32 brightness = scale_input_to_fw(min, max, *user_brightness); u8 prev_signal = 0, prev_lum = 0; int i = 0; @@ -4734,7 +4748,7 @@ static void convert_custom_brightness(const struct amdgpu_dm_backlight_caps *cap return; /* choose start to run less interpolation steps */ - if (caps->luminance_data[caps->data_points/2].input_signal > *brightness) + if (caps->luminance_data[caps->data_points/2].input_signal > brightness) i = caps->data_points/2; do { u8 signal = caps->luminance_data[i].input_signal; @@ -4745,17 +4759,18 @@ static void convert_custom_brightness(const struct amdgpu_dm_backlight_caps *cap * brightness < signal: interpolate between previous and current luminance numerator * brightness > signal: find next data point */ - if (*brightness > signal) { + if (brightness > signal) { prev_signal = signal; prev_lum = lum; i++; continue; } - if (*brightness < signal) + if (brightness < signal) lum = prev_lum + DIV_ROUND_CLOSEST((lum - prev_lum) * - (*brightness - prev_signal), + (brightness - prev_signal), signal - prev_signal); - *brightness = DIV_ROUND_CLOSEST(lum * *brightness, 101); + *user_brightness = scale_fw_to_input(min, max, + DIV_ROUND_CLOSEST(lum * brightness, 101)); return; } while (i < caps->data_points); } @@ -4768,11 +4783,10 @@ static u32 convert_brightness_from_user(const struct amdgpu_dm_backlight_caps *c if (!get_brightness_range(caps, &min, &max)) return brightness; - convert_custom_brightness(caps, &brightness); + convert_custom_brightness(caps, min, max, &brightness); - // Rescale 0..255 to min..max - return min + DIV_ROUND_CLOSEST((max - min) * brightness, - AMDGPU_MAX_BL_LEVEL); + // Rescale 0..max to min..max + return min + DIV_ROUND_CLOSEST_ULL((u64)(max - min) * brightness, max); } static u32 convert_brightness_to_user(const struct amdgpu_dm_backlight_caps *caps, @@ -4785,8 +4799,8 @@ static u32 convert_brightness_to_user(const struct amdgpu_dm_backlight_caps *cap if (brightness < min) return 0; - // Rescale min..max to 0..255 - return DIV_ROUND_CLOSEST(AMDGPU_MAX_BL_LEVEL * (brightness - min), + // Rescale min..max to 0..max + return DIV_ROUND_CLOSEST_ULL((u64)max * (brightness - min), max - min); } @@ -4936,11 +4950,10 @@ amdgpu_dm_register_backlight_device(struct amdgpu_dm_connector *aconnector) drm_dbg(drm, "Backlight caps: min: %d, max: %d, ac %d, dc %d\n", min, max, caps->ac_level, caps->dc_level); } else - props.brightness = AMDGPU_MAX_BL_LEVEL; + props.brightness = props.max_brightness = AMDGPU_MAX_BL_LEVEL; if (caps->data_points && !(amdgpu_dc_debug_mask & DC_DISABLE_CUSTOM_BRIGHTNESS_CURVE)) drm_info(drm, "Using custom brightness curve\n"); - props.max_brightness = AMDGPU_MAX_BL_LEVEL; props.type = BACKLIGHT_RAW; snprintf(bl_name, sizeof(bl_name), "amdgpu_bl%d", -- 2.43.0

1 month, 1 week

1
0
0 0

[PATCH 20/23] drm/amd/display: Only read ACPI backlight caps once

by Alex Hung

From: Mario Limonciello <mario.limonciello(a)amd.com> [WHY] Backlight caps are read already in amdgpu_dm_update_backlight_caps(). They may be updated by update_connector_ext_caps(). Reading again when registering backlight device may cause wrong values to be used. [HOW] Use backlight caps already registered to the dm. Cc: Mario Limonciello <mario.limonciello(a)amd.com> Cc: Alex Deucher <alexander.deucher(a)amd.com> Cc: stable(a)vger.kernel.org Reviewed-by: Roman Li <roman.li(a)amd.com> Signed-off-by: Mario Limonciello <mario.limonciello(a)amd.com> Signed-off-by: Alex Hung <alex.hung(a)amd.com> --- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c b/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c index 6c23aec44295..31df545f8c0f 100644 --- a/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c +++ b/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c @@ -4911,7 +4911,7 @@ amdgpu_dm_register_backlight_device(struct amdgpu_dm_connector *aconnector) struct drm_device *drm = aconnector->base.dev; struct amdgpu_display_manager *dm = &drm_to_adev(drm)->dm; struct backlight_properties props = { 0 }; - struct amdgpu_dm_backlight_caps caps = { 0 }; + struct amdgpu_dm_backlight_caps *caps; char bl_name[16]; int min, max; @@ -4925,20 +4925,20 @@ amdgpu_dm_register_backlight_device(struct amdgpu_dm_connector *aconnector) return; } - amdgpu_acpi_get_backlight_caps(&caps); - if (caps.caps_valid && get_brightness_range(&caps, &min, &max)) { + caps = &dm->backlight_caps[aconnector->bl_idx]; + if (get_brightness_range(caps, &min, &max)) { if (power_supply_is_system_supplied() > 0) - props.brightness = (max - min) * DIV_ROUND_CLOSEST(caps.ac_level, 100); + props.brightness = (max - min) * DIV_ROUND_CLOSEST(caps->ac_level, 100); else - props.brightness = (max - min) * DIV_ROUND_CLOSEST(caps.dc_level, 100); + props.brightness = (max - min) * DIV_ROUND_CLOSEST(caps->dc_level, 100); /* min is zero, so max needs to be adjusted */ props.max_brightness = max - min; drm_dbg(drm, "Backlight caps: min: %d, max: %d, ac %d, dc %d\n", min, max, - caps.ac_level, caps.dc_level); + caps->ac_level, caps->dc_level); } else props.brightness = AMDGPU_MAX_BL_LEVEL; - if (caps.data_points && !(amdgpu_dc_debug_mask & DC_DISABLE_CUSTOM_BRIGHTNESS_CURVE)) + if (caps->data_points && !(amdgpu_dc_debug_mask & DC_DISABLE_CUSTOM_BRIGHTNESS_CURVE)) drm_info(drm, "Using custom brightness curve\n"); props.max_brightness = AMDGPU_MAX_BL_LEVEL; props.type = BACKLIGHT_RAW; -- 2.43.0

1 month, 1 week

1
0
0 0

[PATCH 19/23] drm/amd/display: Fix RMCM programming seq errors

by Alex Hung

From: Yihan Zhu <Yihan.Zhu(a)amd.com> [WHY & HOW] Fix RMCM programming sequence errors and mapping issues to pass the RMCM test. Cc: Mario Limonciello <mario.limonciello(a)amd.com> Cc: Alex Deucher <alexander.deucher(a)amd.com> Cc: stable(a)vger.kernel.org Reviewed-by: Dmytro Laktyushkin <dmytro.laktyushkin(a)amd.com> Signed-off-by: Yihan Zhu <Yihan.Zhu(a)amd.com> Signed-off-by: Alex Hung <alex.hung(a)amd.com> --- .../dc/dml2/dml21/src/dml2_core/dml2_core_dcn4_calcs.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/drivers/gpu/drm/amd/display/dc/dml2/dml21/src/dml2_core/dml2_core_dcn4_calcs.c b/drivers/gpu/drm/amd/display/dc/dml2/dml21/src/dml2_core/dml2_core_dcn4_calcs.c index 0addef1f844e..5dceab1208f2 100644 --- a/drivers/gpu/drm/amd/display/dc/dml2/dml21/src/dml2_core/dml2_core_dcn4_calcs.c +++ b/drivers/gpu/drm/amd/display/dc/dml2/dml21/src/dml2_core/dml2_core_dcn4_calcs.c @@ -4685,7 +4685,10 @@ static void calculate_tdlut_setting( //the tdlut is fetched during the 2 row times of prefetch. if (p->setup_for_tdlut) { *p->tdlut_groups_per_2row_ub = (unsigned int)math_ceil2((double) *p->tdlut_bytes_per_frame / *p->tdlut_bytes_per_group, 1); - *p->tdlut_opt_time = (*p->tdlut_bytes_per_frame - p->cursor_buffer_size * 1024) / tdlut_drain_rate; + if (*p->tdlut_bytes_per_frame > p->cursor_buffer_size * 1024) + *p->tdlut_opt_time = (*p->tdlut_bytes_per_frame - p->cursor_buffer_size * 1024) / tdlut_drain_rate; + else + *p->tdlut_opt_time = 0; *p->tdlut_drain_time = p->cursor_buffer_size * 1024 / tdlut_drain_rate; *p->tdlut_bytes_to_deliver = (unsigned int) (p->cursor_buffer_size * 1024.0); } -- 2.43.0

1 month, 1 week

1
0
0 0

[PATCH 16/23] drm/amd/display: Fix mpv playback corruption on weston

by Alex Hung

[WHAT] Severe video playback corruption is observed in the following setup: weston 14.0.90 (built from source) + mpv v0.40.0 with command: mpv bbb_sunflower_1080p_60fps_normal.mp4 --vo=gpu [HOW] ABGR16161616 needs to be included in dml2/2.1 translation. Cc: Mario Limonciello <mario.limonciello(a)amd.com> Cc: Alex Deucher <alexander.deucher(a)amd.com> Cc: stable(a)vger.kernel.org Reviewed-by: Harry Wentland <harry.wentland(a)amd.com> Reviewed-by: Austin Zheng <austin.zheng(a)amd.com> Signed-off-by: Alex Hung <alex.hung(a)amd.com> --- .../gpu/drm/amd/display/dc/dml2/dml21/dml21_translation_helper.c | 1 + drivers/gpu/drm/amd/display/dc/dml2/dml2_translation_helper.c | 1 + 2 files changed, 2 insertions(+) diff --git a/drivers/gpu/drm/amd/display/dc/dml2/dml21/dml21_translation_helper.c b/drivers/gpu/drm/amd/display/dc/dml2/dml21/dml21_translation_helper.c index 13a12f38eb3b..19f794e46e0e 100644 --- a/drivers/gpu/drm/amd/display/dc/dml2/dml21/dml21_translation_helper.c +++ b/drivers/gpu/drm/amd/display/dc/dml2/dml21/dml21_translation_helper.c @@ -797,6 +797,7 @@ static void populate_dml21_plane_config_from_plane_state(struct dml2_context *dm plane->pixel_format = dml2_420_10; break; case SURFACE_PIXEL_FORMAT_GRPH_ARGB16161616: + case SURFACE_PIXEL_FORMAT_GRPH_ABGR16161616: case SURFACE_PIXEL_FORMAT_GRPH_ARGB16161616F: case SURFACE_PIXEL_FORMAT_GRPH_ABGR16161616F: plane->pixel_format = dml2_444_64; diff --git a/drivers/gpu/drm/amd/display/dc/dml2/dml2_translation_helper.c b/drivers/gpu/drm/amd/display/dc/dml2/dml2_translation_helper.c index 5de775fd8fce..208630754c8a 100644 --- a/drivers/gpu/drm/amd/display/dc/dml2/dml2_translation_helper.c +++ b/drivers/gpu/drm/amd/display/dc/dml2/dml2_translation_helper.c @@ -953,6 +953,7 @@ static void populate_dml_surface_cfg_from_plane_state(enum dml_project_id dml2_p out->SourcePixelFormat[location] = dml_420_10; break; case SURFACE_PIXEL_FORMAT_GRPH_ARGB16161616: + case SURFACE_PIXEL_FORMAT_GRPH_ABGR16161616: case SURFACE_PIXEL_FORMAT_GRPH_ARGB16161616F: case SURFACE_PIXEL_FORMAT_GRPH_ABGR16161616F: out->SourcePixelFormat[location] = dml_444_64; -- 2.43.0

1 month, 1 week

1
0
0 0

[PATCH 08/23] drm/amd/display: Add more checks for DSC / HUBP ONO guarantees

by Alex Hung

From: Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> [WHY] For non-zero DSC instances it's possible that the HUBP domain required to drive it for sequential ONO ASICs isn't met, potentially causing the logic to the tile to enter an undefined state leading to a system hang. [HOW] Add more checks to ensure that the HUBP domain matching the DSC instance is appropriately powered. Cc: Mario Limonciello <mario.limonciello(a)amd.com> Cc: Alex Deucher <alexander.deucher(a)amd.com> Cc: stable(a)vger.kernel.org Reviewed-by: Duncan Ma <duncan.ma(a)amd.com> Signed-off-by: Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> Signed-off-by: Alex Hung <alex.hung(a)amd.com> --- .../amd/display/dc/hwss/dcn35/dcn35_hwseq.c | 28 +++++++++++++++++++ 1 file changed, 28 insertions(+) diff --git a/drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c b/drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c index c814d957305a..a267f574b619 100644 --- a/drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c +++ b/drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c @@ -1047,6 +1047,15 @@ void dcn35_calc_blocks_to_gate(struct dc *dc, struct dc_state *context, if (dc->caps.sequential_ono) { update_state->pg_pipe_res_update[PG_HUBP][pipe_ctx->stream_res.dsc->inst] = false; update_state->pg_pipe_res_update[PG_DPP][pipe_ctx->stream_res.dsc->inst] = false; + + /* All HUBP/DPP instances must be powered if the DSC inst != HUBP inst */ + if (!pipe_ctx->top_pipe && pipe_ctx->plane_res.hubp && + pipe_ctx->plane_res.hubp->inst != pipe_ctx->stream_res.dsc->inst) { + for (j = 0; j < dc->res_pool->pipe_count; ++j) { + update_state->pg_pipe_res_update[PG_HUBP][j] = false; + update_state->pg_pipe_res_update[PG_DPP][j] = false; + } + } } } @@ -1193,6 +1202,25 @@ void dcn35_calc_blocks_to_ungate(struct dc *dc, struct dc_state *context, update_state->pg_pipe_res_update[PG_HDMISTREAM][0] = true; if (dc->caps.sequential_ono) { + for (i = 0; i < dc->res_pool->pipe_count; i++) { + struct pipe_ctx *new_pipe = &context->res_ctx.pipe_ctx[i]; + + if (new_pipe->stream_res.dsc && !new_pipe->top_pipe && + update_state->pg_pipe_res_update[PG_DSC][new_pipe->stream_res.dsc->inst]) { + update_state->pg_pipe_res_update[PG_HUBP][new_pipe->stream_res.dsc->inst] = true; + update_state->pg_pipe_res_update[PG_DPP][new_pipe->stream_res.dsc->inst] = true; + + /* All HUBP/DPP instances must be powered if the DSC inst != HUBP inst */ + if (new_pipe->plane_res.hubp && + new_pipe->plane_res.hubp->inst != new_pipe->stream_res.dsc->inst) { + for (j = 0; j < dc->res_pool->pipe_count; ++j) { + update_state->pg_pipe_res_update[PG_HUBP][j] = true; + update_state->pg_pipe_res_update[PG_DPP][j] = true; + } + } + } + } + for (i = dc->res_pool->pipe_count - 1; i >= 0; i--) { if (update_state->pg_pipe_res_update[PG_HUBP][i] && update_state->pg_pipe_res_update[PG_DPP][i]) { -- 2.43.0

1 month, 1 week

1
0
0 0

[PATCH 05/23] drm/amd/display: Get LTTPR IEEE OUI/Device ID From Closest LTTPR To Host

by Alex Hung

From: Michael Strauss <michael.strauss(a)amd.com> [WHY] These fields are read for the explicit purpose of detecting embedded LTTPRs (i.e. between host ASIC and the user-facing port), and thus need to calculate the correct DPCD address offset based on LTTPR count to target the appropriate LTTPR's DPCD register space with these queries. [HOW] Cascaded LTTPRs in a link each snoop and increment LTTPR count when queried via DPCD read, so an LTTPR embedded in a source device (e.g. USB4 port on a laptop) will always be addressible using the max LTTPR count seen by the host. Therefore we simply need to use a recently added helper function to calculate the correct DPCD address to target potentially embedded LTTPRs based on the received LTTPR count. Cc: Mario Limonciello <mario.limonciello(a)amd.com> Cc: Alex Deucher <alexander.deucher(a)amd.com> Cc: stable(a)vger.kernel.org Reviewed-by: Wenjing Liu <wenjing.liu(a)amd.com> Signed-off-by: Michael Strauss <michael.strauss(a)amd.com> Signed-off-by: Alex Hung <alex.hung(a)amd.com> --- drivers/gpu/drm/amd/display/dc/dc_dp_types.h | 4 +- .../dc/link/protocols/link_dp_capability.c | 38 +++++++++++++++---- 2 files changed, 33 insertions(+), 9 deletions(-) diff --git a/drivers/gpu/drm/amd/display/dc/dc_dp_types.h b/drivers/gpu/drm/amd/display/dc/dc_dp_types.h index 0bad8304ccf6..d346f8ae1634 100644 --- a/drivers/gpu/drm/amd/display/dc/dc_dp_types.h +++ b/drivers/gpu/drm/amd/display/dc/dc_dp_types.h @@ -1172,8 +1172,8 @@ struct dc_lttpr_caps { union dp_128b_132b_supported_lttpr_link_rates supported_128b_132b_rates; union dp_alpm_lttpr_cap alpm; uint8_t aux_rd_interval[MAX_REPEATER_CNT - 1]; - uint8_t lttpr_ieee_oui[3]; - uint8_t lttpr_device_id[6]; + uint8_t lttpr_ieee_oui[3]; // Always read from closest LTTPR to host + uint8_t lttpr_device_id[6]; // Always read from closest LTTPR to host }; struct dc_dongle_dfp_cap_ext { diff --git a/drivers/gpu/drm/amd/display/dc/link/protocols/link_dp_capability.c b/drivers/gpu/drm/amd/display/dc/link/protocols/link_dp_capability.c index a5127c2d47ef..0f965380a9b4 100644 --- a/drivers/gpu/drm/amd/display/dc/link/protocols/link_dp_capability.c +++ b/drivers/gpu/drm/amd/display/dc/link/protocols/link_dp_capability.c @@ -385,9 +385,15 @@ bool dp_is_128b_132b_signal(struct pipe_ctx *pipe_ctx) bool dp_is_lttpr_present(struct dc_link *link) { /* Some sink devices report invalid LTTPR revision, so don't validate against that cap */ - return (dp_parse_lttpr_repeater_count(link->dpcd_caps.lttpr_caps.phy_repeater_cnt) != 0 && + uint32_t lttpr_count = dp_parse_lttpr_repeater_count(link->dpcd_caps.lttpr_caps.phy_repeater_cnt); + bool is_lttpr_present = (lttpr_count > 0 && link->dpcd_caps.lttpr_caps.max_lane_count > 0 && link->dpcd_caps.lttpr_caps.max_lane_count <= 4); + + if (lttpr_count > 0 && !is_lttpr_present) + DC_LOG_ERROR("LTTPR count is nonzero but invalid lane count reported. Assuming no LTTPR present.\n"); + + return is_lttpr_present; } /* in DP compliance test, DPR-120 may have @@ -1551,6 +1557,8 @@ enum dc_status dp_retrieve_lttpr_cap(struct dc_link *link) uint8_t lttpr_dpcd_data[10] = {0}; enum dc_status status; bool is_lttpr_present; + uint32_t lttpr_count; + uint32_t closest_lttpr_offset; /* Logic to determine LTTPR support*/ bool vbios_lttpr_interop = link->dc->caps.vbios_lttpr_aware; @@ -1602,20 +1610,22 @@ enum dc_status dp_retrieve_lttpr_cap(struct dc_link *link) lttpr_dpcd_data[DP_LTTPR_ALPM_CAPABILITIES - DP_LT_TUNABLE_PHY_REPEATER_FIELD_DATA_STRUCTURE_REV]; + lttpr_count = dp_parse_lttpr_repeater_count(link->dpcd_caps.lttpr_caps.phy_repeater_cnt); + /* If this chip cap is set, at least one retimer must exist in the chain * Override count to 1 if we receive a known bad count (0 or an invalid value) */ if (((link->chip_caps & AMD_EXT_DISPLAY_PATH_CAPS__EXT_CHIP_MASK) == AMD_EXT_DISPLAY_PATH_CAPS__DP_FIXED_VS_EN) && - (dp_parse_lttpr_repeater_count(link->dpcd_caps.lttpr_caps.phy_repeater_cnt) == 0)) { + lttpr_count == 0) { /* If you see this message consistently, either the host platform has FIXED_VS flag * incorrectly configured or the sink device is returning an invalid count. */ DC_LOG_ERROR("lttpr_caps phy_repeater_cnt is 0x%x, forcing it to 0x80.", link->dpcd_caps.lttpr_caps.phy_repeater_cnt); link->dpcd_caps.lttpr_caps.phy_repeater_cnt = 0x80; + lttpr_count = 1; DC_LOG_DC("lttpr_caps forced phy_repeater_cnt = %d\n", link->dpcd_caps.lttpr_caps.phy_repeater_cnt); } - /* Attempt to train in LTTPR transparent mode if repeater count exceeds 8. */ is_lttpr_present = dp_is_lttpr_present(link); DC_LOG_DC("is_lttpr_present = %d\n", is_lttpr_present); @@ -1623,11 +1633,25 @@ enum dc_status dp_retrieve_lttpr_cap(struct dc_link *link) if (is_lttpr_present) { CONN_DATA_DETECT(link, lttpr_dpcd_data, sizeof(lttpr_dpcd_data), "LTTPR Caps: "); - core_link_read_dpcd(link, DP_LTTPR_IEEE_OUI, link->dpcd_caps.lttpr_caps.lttpr_ieee_oui, sizeof(link->dpcd_caps.lttpr_caps.lttpr_ieee_oui)); - CONN_DATA_DETECT(link, link->dpcd_caps.lttpr_caps.lttpr_ieee_oui, sizeof(link->dpcd_caps.lttpr_caps.lttpr_ieee_oui), "LTTPR IEEE OUI: "); + // Identify closest LTTPR to determine if workarounds required for known embedded LTTPR + closest_lttpr_offset = dp_get_closest_lttpr_offset(lttpr_count); - core_link_read_dpcd(link, DP_LTTPR_DEVICE_ID, link->dpcd_caps.lttpr_caps.lttpr_device_id, sizeof(link->dpcd_caps.lttpr_caps.lttpr_device_id)); - CONN_DATA_DETECT(link, link->dpcd_caps.lttpr_caps.lttpr_device_id, sizeof(link->dpcd_caps.lttpr_caps.lttpr_device_id), "LTTPR Device ID: "); + core_link_read_dpcd(link, (DP_LTTPR_IEEE_OUI + closest_lttpr_offset), + link->dpcd_caps.lttpr_caps.lttpr_ieee_oui, sizeof(link->dpcd_caps.lttpr_caps.lttpr_ieee_oui)); + core_link_read_dpcd(link, (DP_LTTPR_DEVICE_ID + closest_lttpr_offset), + link->dpcd_caps.lttpr_caps.lttpr_device_id, sizeof(link->dpcd_caps.lttpr_caps.lttpr_device_id)); + + if (lttpr_count > 1) { + CONN_DATA_DETECT(link, link->dpcd_caps.lttpr_caps.lttpr_ieee_oui, sizeof(link->dpcd_caps.lttpr_caps.lttpr_ieee_oui), + "Closest LTTPR To Host's IEEE OUI: "); + CONN_DATA_DETECT(link, link->dpcd_caps.lttpr_caps.lttpr_device_id, sizeof(link->dpcd_caps.lttpr_caps.lttpr_device_id), + "Closest LTTPR To Host's LTTPR Device ID: "); + } else { + CONN_DATA_DETECT(link, link->dpcd_caps.lttpr_caps.lttpr_ieee_oui, sizeof(link->dpcd_caps.lttpr_caps.lttpr_ieee_oui), + "LTTPR IEEE OUI: "); + CONN_DATA_DETECT(link, link->dpcd_caps.lttpr_caps.lttpr_device_id, sizeof(link->dpcd_caps.lttpr_caps.lttpr_device_id), + "LTTPR Device ID: "); + } } return status; -- 2.43.0

1 month, 1 week

1
0
0 0

[PATCH 02/23] drm/amd/display: Add dc cap for dp tunneling

by Alex Hung

From: Peichen Huang <PeiChen.Huang(a)amd.com> [WHAT] 1. add dc cap for dp tunneling 2. add function to get index of host router Cc: Mario Limonciello <mario.limonciello(a)amd.com> Cc: Alex Deucher <alexander.deucher(a)amd.com> Cc: stable(a)vger.kernel.org Reviewed-by: Cruise Hung <cruise.hung(a)amd.com> Signed-off-by: Peichen Huang <PeiChen.Huang(a)amd.com> Signed-off-by: Alex Hung <alex.hung(a)amd.com> --- drivers/gpu/drm/amd/display/dc/core/dc.c | 33 +++++++++++++++++++ drivers/gpu/drm/amd/display/dc/dc.h | 8 ++++- .../dc/resource/dcn31/dcn31_resource.c | 3 ++ .../dc/resource/dcn314/dcn314_resource.c | 3 ++ .../dc/resource/dcn35/dcn35_resource.c | 3 ++ .../dc/resource/dcn351/dcn351_resource.c | 3 ++ .../dc/resource/dcn36/dcn36_resource.c | 3 ++ 7 files changed, 55 insertions(+), 1 deletion(-) diff --git a/drivers/gpu/drm/amd/display/dc/core/dc.c b/drivers/gpu/drm/amd/display/dc/core/dc.c index 284261cd372f..eaf44e6046b5 100644 --- a/drivers/gpu/drm/amd/display/dc/core/dc.c +++ b/drivers/gpu/drm/amd/display/dc/core/dc.c @@ -241,6 +241,7 @@ static bool create_links( DC_LOG_DC("BIOS object table - end"); /* Create a link for each usb4 dpia port */ + dc->lowest_dpia_link_index = MAX_LINKS; for (i = 0; i < dc->res_pool->usb4_dpia_count; i++) { struct link_init_data link_init_params = {0}; struct dc_link *link; @@ -253,6 +254,9 @@ static bool create_links( link = dc->link_srv->create_link(&link_init_params); if (link) { + if (dc->lowest_dpia_link_index > dc->link_count) + dc->lowest_dpia_link_index = dc->link_count; + dc->links[dc->link_count] = link; link->dc = dc; ++dc->link_count; @@ -6378,6 +6382,35 @@ unsigned int dc_get_det_buffer_size_from_state(const struct dc_state *context) else return 0; } +/** + *********************************************************************************************** + * dc_get_host_router_index: Get index of host router from a dpia link + * + * This function return a host router index of the target link. If the target link is dpia link. + * + * @param [in] link: target link + * @param [out] host_router_index: host router index of the target link + * + * @return: true if the host router index is found and valid. + * + *********************************************************************************************** + */ +bool dc_get_host_router_index(const struct dc_link *link, unsigned int *host_router_index) +{ + struct dc *dc = link->ctx->dc; + + if (link->ep_type != DISPLAY_ENDPOINT_USB4_DPIA) + return false; + + if (link->link_index < dc->lowest_dpia_link_index) + return false; + + *host_router_index = (link->link_index - dc->lowest_dpia_link_index) / dc->caps.num_of_dpias_per_host_router; + if (*host_router_index < dc->caps.num_of_host_routers) + return true; + else + return false; +} bool dc_is_cursor_limit_pending(struct dc *dc) { diff --git a/drivers/gpu/drm/amd/display/dc/dc.h b/drivers/gpu/drm/amd/display/dc/dc.h index d0839a679901..5c01a535b4fa 100644 --- a/drivers/gpu/drm/amd/display/dc/dc.h +++ b/drivers/gpu/drm/amd/display/dc/dc.h @@ -68,7 +68,8 @@ struct dmub_notification; #define MAX_STREAMS 6 #define MIN_VIEWPORT_SIZE 12 #define MAX_NUM_EDP 2 -#define MAX_HOST_ROUTERS_NUM 2 +#define MAX_HOST_ROUTERS_NUM 3 +#define MAX_DPIA_PER_HOST_ROUTER 2 #define MAX_SUPPORTED_FORMATS 7 /* Display Core Interfaces */ @@ -338,6 +339,8 @@ struct dc_caps { /* Conservative limit for DCC cases which require ODM4:1 to support*/ uint32_t dcc_plane_width_limit; struct dc_scl_caps scl_caps; + uint8_t num_of_host_routers; + uint8_t num_of_dpias_per_host_router; }; struct dc_bug_wa { @@ -1637,6 +1640,7 @@ struct dc { uint8_t link_count; struct dc_link *links[MAX_LINKS]; + uint8_t lowest_dpia_link_index; struct link_service *link_srv; struct dc_state *current_state; @@ -2625,6 +2629,8 @@ struct dc_power_profile dc_get_power_profile_for_dc_state(const struct dc_state unsigned int dc_get_det_buffer_size_from_state(const struct dc_state *context); +bool dc_get_host_router_index(const struct dc_link *link, unsigned int *host_router_index); + /* DSC Interfaces */ #include "dc_dsc.h" diff --git a/drivers/gpu/drm/amd/display/dc/resource/dcn31/dcn31_resource.c b/drivers/gpu/drm/amd/display/dc/resource/dcn31/dcn31_resource.c index 6b6efc2e75c0..2a33c82cfedb 100644 --- a/drivers/gpu/drm/amd/display/dc/resource/dcn31/dcn31_resource.c +++ b/drivers/gpu/drm/amd/display/dc/resource/dcn31/dcn31_resource.c @@ -1954,6 +1954,9 @@ static bool dcn31_resource_construct( dc->caps.color.mpc.ogam_rom_caps.hlg = 0; dc->caps.color.mpc.ocsc = 1; + dc->caps.num_of_host_routers = 2; + dc->caps.num_of_dpias_per_host_router = 2; + /* Use pipe context based otg sync logic */ dc->config.use_pipe_ctx_sync_logic = true; dc->config.disable_hbr_audio_dp2 = true; diff --git a/drivers/gpu/drm/amd/display/dc/resource/dcn314/dcn314_resource.c b/drivers/gpu/drm/amd/display/dc/resource/dcn314/dcn314_resource.c index e84526c51590..cec03e81c6bd 100644 --- a/drivers/gpu/drm/amd/display/dc/resource/dcn314/dcn314_resource.c +++ b/drivers/gpu/drm/amd/display/dc/resource/dcn314/dcn314_resource.c @@ -1885,6 +1885,9 @@ static bool dcn314_resource_construct( dc->caps.max_disp_clock_khz_at_vmin = 650000; + dc->caps.num_of_host_routers = 2; + dc->caps.num_of_dpias_per_host_router = 2; + /* Use pipe context based otg sync logic */ dc->config.use_pipe_ctx_sync_logic = true; diff --git a/drivers/gpu/drm/amd/display/dc/resource/dcn35/dcn35_resource.c b/drivers/gpu/drm/amd/display/dc/resource/dcn35/dcn35_resource.c index 62f6c7abb9c6..1f20069018ca 100644 --- a/drivers/gpu/drm/amd/display/dc/resource/dcn35/dcn35_resource.c +++ b/drivers/gpu/drm/amd/display/dc/resource/dcn35/dcn35_resource.c @@ -1894,6 +1894,9 @@ static bool dcn35_resource_construct( dc->caps.color.mpc.ogam_rom_caps.hlg = 0; dc->caps.color.mpc.ocsc = 1; + dc->caps.num_of_host_routers = 2; + dc->caps.num_of_dpias_per_host_router = 2; + /* max_disp_clock_khz_at_vmin is slightly lower than the STA value in order * to provide some margin. * It's expected for furture ASIC to have equal or higher value, in order to diff --git a/drivers/gpu/drm/amd/display/dc/resource/dcn351/dcn351_resource.c b/drivers/gpu/drm/amd/display/dc/resource/dcn351/dcn351_resource.c index 85a96258bce8..6266fc77c7eb 100644 --- a/drivers/gpu/drm/amd/display/dc/resource/dcn351/dcn351_resource.c +++ b/drivers/gpu/drm/amd/display/dc/resource/dcn351/dcn351_resource.c @@ -1866,6 +1866,9 @@ static bool dcn351_resource_construct( dc->caps.color.mpc.ogam_rom_caps.hlg = 0; dc->caps.color.mpc.ocsc = 1; + dc->caps.num_of_host_routers = 2; + dc->caps.num_of_dpias_per_host_router = 2; + /* max_disp_clock_khz_at_vmin is slightly lower than the STA value in order * to provide some margin. * It's expected for furture ASIC to have equal or higher value, in order to diff --git a/drivers/gpu/drm/amd/display/dc/resource/dcn36/dcn36_resource.c b/drivers/gpu/drm/amd/display/dc/resource/dcn36/dcn36_resource.c index e977866802bf..10d3182b3058 100644 --- a/drivers/gpu/drm/amd/display/dc/resource/dcn36/dcn36_resource.c +++ b/drivers/gpu/drm/amd/display/dc/resource/dcn36/dcn36_resource.c @@ -1867,6 +1867,9 @@ static bool dcn36_resource_construct( dc->caps.color.mpc.ogam_rom_caps.hlg = 0; dc->caps.color.mpc.ocsc = 1; + dc->caps.num_of_host_routers = 2; + dc->caps.num_of_dpias_per_host_router = 2; + /* max_disp_clock_khz_at_vmin is slightly lower than the STA value in order * to provide some margin. * It's expected for furture ASIC to have equal or higher value, in order to -- 2.43.0

1 month, 1 week

1
0
0 0

[PATCH 6.14] orangefs: adjust counting code to recover from 665575cf

by hubcap＠kernel.org

From: Mike Marshall <hubcap(a)omnibond.com> A late commit to 6.14-rc7 (665575cf) broke orangefs. This is a several line adjustment to some counters needed to keep orangefs from deadlocking when writing page cache data out to the filesystem. Signed-off-by: Mike Marshall <hubcap(a)omnibond.com> --- fs/orangefs/inode.c | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/fs/orangefs/inode.c b/fs/orangefs/inode.c index aae6d2b8767d..3e8ce0fea4d7 100644 --- a/fs/orangefs/inode.c +++ b/fs/orangefs/inode.c @@ -32,12 +32,13 @@ static int orangefs_writepage_locked(struct page *page, len = i_size_read(inode); if (PagePrivate(page)) { wr = (struct orangefs_write_range *)page_private(page); - WARN_ON(wr->pos >= len); off = wr->pos; - if (off + wr->len > len) + if ((off + wr->len > len) && (off <= len)) wlen = len - off; else wlen = wr->len; + if (wlen == 0) + wlen = wr->len; } else { WARN_ON(1); off = page_offset(page); @@ -46,8 +47,6 @@ static int orangefs_writepage_locked(struct page *page, else wlen = PAGE_SIZE; } - /* Should've been handled in orangefs_invalidate_folio. */ - WARN_ON(off == len || off + wlen > len); WARN_ON(wlen == 0); bvec_set_page(&bv, page, wlen, off % PAGE_SIZE); @@ -341,6 +340,8 @@ static int orangefs_write_begin(struct file *file, wr->len += len; goto okay; } else { + wr->pos = pos; + wr->len = len; ret = orangefs_launder_folio(folio); if (ret) return ret; -- 2.49.0

1 month, 1 week

1
0
0 0

[PATCH 5.4 000/204] 5.4.294-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.4.294 release. There are 204 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 04 Jun 2025 13:42:20 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.294-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.4.294-rc1 Juergen Gross <jgross(a)suse.com> xen/swiotlb: relax alignment requirements Mark Pearson <mpearson-lenovo(a)squebb.ca> platform/x86: thinkpad_acpi: Ignore battery threshold change event notification Valtteri Koskivuori <vkoskiv(a)gmail.com> platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys Alessandro Grassi <alessandro.grassi(a)mailbox.org> spi: spi-sun4i: fix early activation Masahiro Yamada <masahiroy(a)kernel.org> um: let 'make clean' properly clean underlying SUBARCH as well John Chau <johnchau(a)0atlas.com> platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS Jeff Layton <jlayton(a)kernel.org> nfs: don't share pNFS DS connections between net namespaces Milton Barrera <miltonjosue2001(a)gmail.com> HID: quirks: Add ADATA XPG alpha wireless mouse support Christian Brauner <brauner(a)kernel.org> coredump: hand a pidfd to the usermode coredump helper Christian Brauner <brauner(a)kernel.org> fork: use pidfd_prepare() Christian Brauner <brauner(a)kernel.org> pid: add pidfd_prepare() Christian Brauner <christian.brauner(a)ubuntu.com> pidfd: check pid has attached task in fdinfo Christian Brauner <brauner(a)kernel.org> coredump: fix error handling for replace_fd() Pedro Tammela <pctammela(a)mojatatu.com> net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Wang Zhaolong <wangzhaolong1(a)huawei.com> smb: client: Reset all search buffer pointers when releasing buffer Wang Zhaolong <wangzhaolong1(a)huawei.com> smb: client: Fix use-after-free in cifs_fill_dirent Jani Nikula <jani.nikula(a)intel.com> drm/i915/gvt: fix unterminated-string-initialization warning Florian Westphal <fw(a)strlen.de> netfilter: nf_tables: do not defer rule destruction via call_rcu Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: wait for rcu grace period on net_device removal Florian Westphal <fw(a)strlen.de> netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx Nathan Chancellor <nathan(a)kernel.org> kbuild: Disable -Wdefault-const-init-unsafe Larisa Grigore <larisa.grigore(a)nxp.com> spi: spi-fsl-dspi: restrict register range for regmap access Tianyang Zhang <zhangtianyang(a)loongson.cn> mm/page_alloc.c: avoid infinite retries caused by cpuset race Breno Leitao <leitao(a)debian.org> memcg: always call cond_resched() after fn() feijuan.li <feijuan.li(a)samsung.com> drm/edid: fixed the bug that hdr metadata was not reset Ilia Gavrilov <Ilia.Gavrilov(a)infotecs.ru> llc: fix data loss when reading from a socket in llc_ui_recvmsg() Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Fix race of buffer access at PCM OSS layer Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing rcu read protection for procfs content Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add locking for bcm_op runtime updates Ivan Pravdin <ipravdin.official(a)gmail.com> crypto: algif_hash - fix double free in hash_accept Cong Wang <xiyou.wangcong(a)gmail.com> sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() Paul Kocialkowski <paulk(a)sys-base.io> net: dwmac-sun8i: Use parsed internal PHY address instead of 1 Ido Schimmel <idosch(a)nvidia.com> bridge: netfilter: Fix forwarding of fragmented packets Paul Chaignon <paul.chaignon(a)gmail.com> xfrm: Sanitize marks before insert Al Viro <viro(a)zeniv.linux.org.uk> __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock Jason Andryuk <jason.andryuk(a)amd.com> xenbus: Allow PVH dom0 a non-local xenstore Goldwyn Rodrigues <rgoldwyn(a)suse.de> btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref Alistair Francis <alistair.francis(a)wdc.com> nvmet-tcp: don't restore null sk_state_change Takashi Iwai <tiwai(a)suse.de> ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 Martin Blumenstingl <martin.blumenstingl(a)googlemail.com> pinctrl: meson: define the pull up/down resistor value as 60 kOhm Jessica Zhang <quic_jesszhan(a)quicinc.com> drm: Add valid clones check Simona Vetter <simona.vetter(a)ffwll.ch> drm/atomic: clarify the rules around drm_atomic_state->allow_modeset Isaac Scott <isaac.scott(a)ideasonboard.com> regulator: ad5398: Add device tree support Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate Viktor Malik <vmalik(a)redhat.com> bpftool: Fix readlink usage in get_fd_type junan <junan76(a)163.com> HID: usbkbd: Fix the bit shift number for LED_KANA Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: st: Restore some drive settings after reset Justin Tee <justin.tee(a)broadcom.com> scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine Ankur Arora <ankur.a.arora(a)oracle.com> rcu: fix header guard for rcu_all_qs() Ankur Arora <ankur.a.arora(a)oracle.com> rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y Ido Schimmel <idosch(a)nvidia.com> vxlan: Annotate FDB data races Andrey Vatoropin <a.vatoropin(a)crpt.ru> hwmon: (xgene-hwmon) use appropriate type for the latency value Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). William Tu <witu(a)nvidia.com> net/mlx5e: reduce rep rxq depth to 256 for ECPF William Tu <witu(a)nvidia.com> net/mlx5e: set the tx_queue_len for pfifo_fast Alexei Lazar <alazar(a)nvidia.com> net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> phy: core: don't require set_mode() callback for phy_get_mode() to work Kees Cook <kees(a)kernel.org> net/mlx4_core: Avoid impossible mlx4_db_alloc() order value Konstantin Andreev <andreev(a)swemel.ru> smack: recognize ipv4 CIPSO w/o categories Valentin Caron <valentin.caron(a)foss.st.com> pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map Martin Povišer <povik+lin(a)cutebit.org> ASoC: ops: Enforce platform maximum on initial value Shahar Shitrit <shshitrit(a)nvidia.com> net/mlx5: Apply rate-limiting to high temperature warning Shahar Shitrit <shshitrit(a)nvidia.com> net/mlx5: Modify LSB bitmask in temperature event to include only the first bit Xiaofei Tan <tanxiaofei(a)huawei.com> ACPI: HED: Always initialize before evged Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Fix old_size lower bound in calculate_iosize() too Arnd Bergmann <arnd(a)arndb.de> EDAC/ie31200: work around false positive build warning Peter Seiderer <ps.report(a)gmx.net> net: pktgen: fix access outside of user given buffer in pktgen_thread_write() Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU Shivasharan S <shivasharan.srikanteshwara(a)broadcom.com> scsi: mpt3sas: Send a diag reset if target reset fails Paul Burton <paulburton(a)kernel.org> MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core Bibo Mao <maobibo(a)loongson.cn> MIPS: Use arch specific syscall name match function Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpuidle: menu: Avoid discarding useful information Waiman Long <longman(a)redhat.com> x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() Hangbin Liu <liuhangbin(a)gmail.com> bonding: report duplicate MAC address in all situations Arnd Bergmann <arnd(a)arndb.de> net: xgene-v2: remove incorrect ACPI_PTR annotation Philip Yang <Philip.Yang(a)amd.com> drm/amdkfd: KFD release_work possible circular locking Moshe Shemesh <moshe(a)nvidia.com> net/mlx5: Avoid report two health errors on same syndrome Kuhanh Murugasen Krishnan <kuhanh.murugasen.krishnan(a)intel.com> fpga: altera-cvp: Increase credit timeout AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence Alexander Stein <alexander.stein(a)ew.tq-group.com> hwmon: (gpio-fan) Add missing mutex locks Breno Leitao <leitao(a)debian.org> x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 Peter Seiderer <ps.report(a)gmx.net> net: pktgen: fix mpls maximum labels list parsing Artur Weber <aweber.kernel(a)gmail.com> pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" Hans Verkuil <hverkuil(a)xs4all.nl> media: cx231xx: set device_caps for 417 Matthew Wilcox (Oracle) <willy(a)infradead.org> orangefs: Do not truncate file size Ming-Hung Tsai <mtsai(a)redhat.com> dm cache: prevent BUG_ON by blocking retries on failed device resumes Markus Elfring <elfring(a)users.sourceforge.net> media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() Svyatoslav Ryhel <clamor95(a)gmail.com> ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> ieee802154: ca8210: Use proper setters and getters for bitwise types Alexandre Belloni <alexandre.belloni(a)bootlin.com> rtc: ds1307: stop disabling alarms on probe Andreas Schwab <schwab(a)linux-m68k.org> powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 Erick Shepherd <erick.shepherd(a)ni.com> mmc: sdhci: Disable SD card clock before changing parameters Nicolas Bouchinet <nicolas.bouchinet(a)ssi.gouv.fr> netfilter: conntrack: Bound nf_conntrack sysctl writes Eric Dumazet <edumazet(a)google.com> posix-timers: Add cond_resched() to posix_timer_add() search loop Frediano Ziglio <frediano.ziglio(a)cloud.com> xen: Add support for XenServer 6.1 platform device Mikulas Patocka <mpatocka(a)redhat.com> dm: restrict dm device size to 2^63-512 bytes Seyediman Seyedarab <imandevel(a)gmail.com> kbuild: fix argument parsing in scripts/config Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: st: ERASE does not change tape location Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: st: Tighten the page format heuristics with MODE SELECT Christian Göttsche <cgzones(a)googlemail.com> ext4: reorder capability check last Tiwei Bie <tiwei.btw(a)antgroup.com> um: Update min_low_pfn to match changes in uml_reserved Benjamin Berg <benjamin(a)sipsolutions.net> um: Store full CSGSFS and SS register from mcontext Filipe Manana <fdmanana(a)suse.com> btrfs: send: return -ENAMETOOLONG when attempting a path that is too long Mark Harmstone <maharmstone(a)fb.com> btrfs: avoid linker error in btrfs_find_create_tree_block() Vitalii Mordan <mordan(a)ispras.ru> i2c: pxa: fix call balance of i2c->clk handling routines Erick Shepherd <erick.shepherd(a)ni.com> mmc: host: Wait for Vdd to settle on card power off Robert Richter <rrichter(a)amd.com> libnvdimm/labels: Fix divide error in nd_label_data_init() Trond Myklebust <trond.myklebust(a)hammerspace.com> pNFS/flexfiles: Report ENETDOWN as a connection error Ian Rogers <irogers(a)google.com> tools/build: Don't pass test log files to linker Jing Su <jingsusu(a)didiglobal.com> dql: Fix dql->limit value when reset. Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: rpc_clnt_set_transport() must not change the autobind setting Trond Myklebust <trond.myklebust(a)hammerspace.com> NFSv4: Treat ENETUNREACH errors as fatal for state recovery Zsolt Kajtar <soci(a)c64.rulez.org> fbdev: core: tileblit: Implement missing margin clearing for tileblit Shixiong Ou <oushixiong(a)kylinos.cn> fbdev: fsl-diu-fb: add missing device_remove_file() Tudor Ambarus <tudor.ambarus(a)linaro.org> mailbox: use error ret code of of_parse_phandle_with_args() Daniel Gomez <da.gomez(a)samsung.com> kconfig: merge_config: use an empty file as initfile gaoxu <gaoxu2(a)honor.com> cgroup: Fix compilation issue due to cgroup_mutex not being exported Marek Szyprowski <m.szyprowski(a)samsung.com> dma-mapping: avoid potential unused data compilation warning Dmitry Bogdanov <d.bogdanov(a)yadro.com> scsi: target: iscsi: Fix timeout on deleted connection Eelco Chaudron <echaudro(a)redhat.com> openvswitch: Fix unsafe attribute parsing in output_userspace() Aditya Garg <gargaditya08(a)live.com> Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5 Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: synaptics - enable SMBus for HP Elitebook 850 G1 Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable() Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Set timing registers only once Ma Ke <make24(a)iscas.ac.cn> phy: Fix error handling in tegra_xusb_port_init Wentao Liang <vulab(a)iscas.ac.cn> ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2() Jeremy Linton <jeremy.linton(a)arm.com> ACPI: PPTT: Fix processor subtable walk Nathan Lynch <nathan.lynch(a)amd.com> dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted" Trond Myklebust <trond.myklebust(a)hammerspace.com> NFSv4/pnfs: Reset the layout state after a layoutreturn Trond Myklebust <trond.myklebust(a)hammerspace.com> NFSv4/pnfs: pnfs_set_layout_stateid() should update the layout cred Abdun Nihaal <abdun.nihaal(a)gmail.com> qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd() Geert Uytterhoeven <geert+renesas(a)glider.be> ALSA: sh: SND_AICA should depend on SH_DMA_API Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING Geert Uytterhoeven <geert+renesas(a)glider.be> spi: loopback-test: Do not split 1024-byte hexdumps Li Lingfeng <lilingfeng3(a)huawei.com> nfs: handle failure of nfs_get_lock_context in unlock path Zhu Yanjun <yanjun.zhu(a)linux.dev> RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug David Lechner <dlechner(a)baylibre.com> iio: chemical: sps30: use aligned_s64 for timestamp Jonathan Cameron <Jonathan.Cameron(a)huawei.com> iio: adc: ad7768-1: Fix insufficient alignment of timestamp. Gabriel Shahrouzi <gshahrouzi(a)gmail.com> staging: axis-fifo: Correct handling of tx_fifo_depth for size validation Quentin Deslandes <quentin.deslandes(a)itdev.co.uk> staging: axis-fifo: avoid parsing ignored device tree properties Gabriel Shahrouzi <gshahrouzi(a)gmail.com> staging: axis-fifo: Remove hardware resets for user errors Quentin Deslandes <quentin.deslandes(a)itdev.co.uk> staging: axis-fifo: replace spinlock with mutex Hans de Goede <hdegoede(a)redhat.com> platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection Al Viro <viro(a)zeniv.linux.org.uk> do_umount(): add missing barrier before refcount checks in sync case Daniel Wagner <wagi(a)kernel.org> nvme: unblock ctrl state transition for firmware update Thorsten Blum <thorsten.blum(a)linux.dev> MIPS: Fix MAX_REG_OFFSET Jonathan Cameron <Jonathan.Cameron(a)huawei.com> iio: adc: dln2: Use aligned_s64 for timestamp Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> types: Complement the aligned types with signed 64-bit one Dave Penkler <dpenkler(a)gmail.com> usb: usbtmc: Fix erroneous generic_read ioctl return Dave Penkler <dpenkler(a)gmail.com> usb: usbtmc: Fix erroneous wait_srq ioctl return Dave Penkler <dpenkler(a)gmail.com> usb: usbtmc: Fix erroneous get_stb ioctl error returns Oliver Neukum <oneukum(a)suse.com> USB: usbtmc: use interruptible sleep in usbtmc_read Andrei Kuchynski <akuchynski(a)chromium.org> usb: typec: ucsi: displayport: Fix NULL pointer access RD Babiera <rdbabiera(a)google.com> usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition Jan Kara <jack(a)suse.cz> ocfs2: stop quota recovery before disabling quotas Jan Kara <jack(a)suse.cz> ocfs2: implement handshaking with ocfs2 recovery thread Jan Kara <jack(a)suse.cz> ocfs2: switch osb->disable_recovery to enum Dmitry Antipov <dmantipov(a)yandex.ru> module: ensure that kobject_put() is safe for module type kobjects Jason Andryuk <jason.andryuk(a)amd.com> xenbus: Use kref to track req lifetime Alexey Charkov <alchark(a)gmail.com> usb: uhci-platform: Make the clock really optional Silvano Seva <s.seva(a)4sigma.it> iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo Silvano Seva <s.seva(a)4sigma.it> iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo Gabriel Shahrouzi <gshahrouzi(a)gmail.com> iio: adis16201: Correct inclinometer channel resolution Angelo Dureghello <adureghello(a)baylibre.com> iio: adc: ad7606: fix serial register access Gabriel Shahrouzi <gshahrouzi(a)gmail.com> staging: iio: adc: ad7816: Correct conditional logic for store mode Aditya Garg <gargaditya08(a)live.com> Input: synaptics - enable InterTouch on Dell Precision M3800 Aditya Garg <gargaditya08(a)live.com> Input: synaptics - enable InterTouch on Dynabook Portege X30L-G Manuel Fombuena <fombuena(a)outlook.com> Input: synaptics - enable InterTouch on Dynabook Portege X30-D Jonas Gorski <jonas.gorski(a)gmail.com> net: dsa: b53: fix learning on VLAN unaware bridges Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: fix region locking in hash types Cong Wang <xiyou.wangcong(a)gmail.com> sch_htb: make htb_deactivate() idempotent Mike Christie <michael.christie(a)oracle.com> scsi: target: Fix WRITE_SAME No Data Buffer crash Tudor Ambarus <tudor.ambarus(a)linaro.org> dm: fix copying after src array boundaries Pavel Paklov <Pavel.Paklov(a)cyberprotect.ru> iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid Heiko Stuebner <heiko(a)sntech.de> arm64: dts: rockchip: fix iface clock-name on px30 iommus Fedor Pchelkin <pchelkin(a)ispras.ru> usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling Alexander Stein <alexander.stein(a)ew.tq-group.com> usb: chipidea: ci_hdrc_imx: use dev_err_probe() Peter Chen <peter.chen(a)nxp.com> usb: chipidea: imx: refine the error handling for hsic Peter Chen <peter.chen(a)nxp.com> usb: chipidea: imx: change hsic power regulator as optional Suzuki K Poulose <suzuki.poulose(a)arm.com> irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() Thomas Gleixner <tglx(a)linutronix.de> irqchip/gic-v2m: Mark a few functions __init Xiang wangx <wangxiang(a)cdjrlc.com> irqchip/gic-v2m: Add const to of_device_id Cong Wang <xiyou.wangcong(a)gmail.com> sch_htb: make htb_qlen_notify() idempotent Sergey Shtylyov <s.shtylyov(a)omp.ru> of: module: add buffer overflow check in of_modalias() Richard Zhu <hongxing.zhu(a)nxp.com> PCI: imx6: Skip controller_id generation logic for i.MX7D Mattias Barthel <mattias.barthel(a)atlascopco.com> net: fec: ERR007885 Workaround for conventional TX Thangaraj Samynathan <thangaraj.s(a)microchip.com> net: lan743x: Fix memleak issue when GSO enabled Alexey Denisov <rtgbnm(a)gmail.com> lan743x: fix endianness when accessing descriptors Colin Ian King <colin.king(a)canonical.com> lan743x: remove redundant initialization of variable current_head_index Michael Liang <mliang(a)purestorage.com> nvme-tcp: fix premature queue removal and I/O failover Simon Horman <horms(a)kernel.org> net: dlink: Correct endianness handling of led_mode Victor Nogueira <victor(a)mojatatu.com> net_sched: qfq: Fix double list add in class with netem as child qdisc Victor Nogueira <victor(a)mojatatu.com> net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc Victor Nogueira <victor(a)mojatatu.com> net_sched: drr: Fix double list add in class with netem as child qdisc Maor Gottlieb <maorg(a)nvidia.com> net/mlx5: E-Switch, Initialize MAC Address for Default GID Jeongjun Park <aha310510(a)gmail.com> tracing: Fix oob write in trace_seq_to_buffer() Benjamin Marzinski <bmarzins(a)redhat.com> dm: always update the array size in realloc_argv on success Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: fix a warning on invalid table line Wentao Liang <vulab(a)iscas.ac.cn> wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() Vishal Badole <Vishal.Badole(a)amd.com> amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload Helge Deller <deller(a)gmx.de> parisc: Fix double SIGFPE crash Clark Wang <xiaoning.wang(a)nxp.com> i2c: imx-lpi2c: Fix clock count when probe defers Niravkumar L Rabara <niravkumar.l.rabara(a)altera.com> EDAC/altera: Set DDR and SDMMC interrupt mask before registration Niravkumar L Rabara <niravkumar.l.rabara(a)altera.com> EDAC/altera: Test the correct error reg offset ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 2 + Makefile | 16 +- arch/arm/boot/dts/tegra114.dtsi | 2 +- arch/arm64/boot/dts/rockchip/px30.dtsi | 4 +- arch/mips/include/asm/ftrace.h | 16 + arch/mips/include/asm/ptrace.h | 3 +- arch/mips/kernel/pm-cps.c | 30 +- arch/parisc/math-emu/driver.c | 16 +- arch/powerpc/kernel/prom_init.c | 4 +- arch/um/Makefile | 1 + arch/um/kernel/mem.c | 1 + arch/x86/include/asm/nmi.h | 2 + arch/x86/kernel/cpu/bugs.c | 10 +- arch/x86/kernel/nmi.c | 42 +++ arch/x86/kernel/reboot.c | 10 +- arch/x86/um/os-Linux/mcontext.c | 3 +- crypto/algif_hash.c | 4 - drivers/acpi/Kconfig | 2 +- drivers/acpi/hed.c | 7 +- drivers/acpi/pptt.c | 11 +- drivers/clocksource/i8253.c | 6 +- drivers/cpuidle/governors/menu.c | 13 +- drivers/dma/dmatest.c | 6 +- drivers/edac/altera_edac.c | 9 +- drivers/edac/altera_edac.h | 2 + drivers/edac/ie31200_edac.c | 28 +- drivers/fpga/altera-cvp.c | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_process.c | 16 +- drivers/gpu/drm/drm_atomic_helper.c | 28 ++ drivers/gpu/drm/drm_edid.c | 1 + drivers/gpu/drm/i915/gvt/opregion.c | 8 +- drivers/gpu/drm/mediatek/mtk_dpi.c | 5 +- drivers/hid/hid-ids.h | 4 + drivers/hid/hid-quirks.c | 2 + drivers/hid/usbhid/usbkbd.c | 2 +- drivers/hwmon/gpio-fan.c | 16 +- drivers/hwmon/xgene-hwmon.c | 2 +- drivers/i2c/busses/i2c-imx-lpi2c.c | 4 +- drivers/i2c/busses/i2c-pxa.c | 5 +- drivers/iio/accel/adis16201.c | 4 +- drivers/iio/adc/ad7606_spi.c | 2 +- drivers/iio/adc/ad7768-1.c | 2 +- drivers/iio/adc/dln2-adc.c | 2 +- drivers/iio/chemical/sps30.c | 2 +- drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c | 6 + drivers/infiniband/sw/rxe/rxe_cq.c | 5 +- drivers/input/mouse/synaptics.c | 5 + drivers/iommu/amd_iommu_init.c | 8 + drivers/irqchip/irq-gic-v2m.c | 8 +- drivers/mailbox/mailbox.c | 7 +- drivers/md/dm-cache-target.c | 24 ++ drivers/md/dm-integrity.c | 2 +- drivers/md/dm-table.c | 9 +- .../media/platform/sti/c8sectpfe/c8sectpfe-core.c | 3 +- drivers/media/usb/cx231xx/cx231xx-417.c | 2 + drivers/mmc/host/sdhci-pci-core.c | 6 +- drivers/mmc/host/sdhci.c | 9 +- drivers/net/bonding/bond_main.c | 2 +- drivers/net/dsa/b53/b53_common.c | 2 +- drivers/net/dsa/sja1105/sja1105_main.c | 6 +- drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 9 +- drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 24 +- drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 11 +- drivers/net/ethernet/amd/xgbe/xgbe.h | 4 + drivers/net/ethernet/apm/xgene-v2/main.c | 4 +- drivers/net/ethernet/dlink/dl2k.c | 2 +- drivers/net/ethernet/dlink/dl2k.h | 2 +- drivers/net/ethernet/freescale/fec_main.c | 7 +- drivers/net/ethernet/mellanox/mlx4/alloc.c | 6 +- drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 5 + .../net/ethernet/mellanox/mlx5/core/en_selftest.c | 3 + drivers/net/ethernet/mellanox/mlx5/core/events.c | 11 +- drivers/net/ethernet/mellanox/mlx5/core/health.c | 1 + drivers/net/ethernet/mellanox/mlx5/core/rdma.c | 2 +- drivers/net/ethernet/microchip/lan743x_main.c | 75 ++-- drivers/net/ethernet/microchip/lan743x_main.h | 21 +- .../ethernet/qlogic/qlcnic/qlcnic_sriov_common.c | 7 +- drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c | 2 +- drivers/net/ieee802154/ca8210.c | 9 +- drivers/net/vxlan.c | 18 +- .../net/wireless/broadcom/brcm80211/brcmfmac/usb.c | 6 +- drivers/net/wireless/realtek/rtw88/main.c | 17 +- drivers/net/wireless/realtek/rtw88/rtw8822b.c | 14 +- drivers/nvdimm/label.c | 3 +- drivers/nvme/host/core.c | 3 +- drivers/nvme/host/tcp.c | 31 +- drivers/nvme/target/tcp.c | 3 + drivers/of/device.c | 7 +- drivers/pci/controller/dwc/pci-imx6.c | 5 +- drivers/pci/setup-bus.c | 6 +- drivers/phy/phy-core.c | 7 +- drivers/phy/renesas/phy-rcar-gen3-usb2.c | 7 +- drivers/phy/tegra/xusb.c | 8 +- drivers/pinctrl/bcm/pinctrl-bcm281xx.c | 44 +-- drivers/pinctrl/devicetree.c | 10 +- drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/platform/x86/asus-wmi.c | 3 +- drivers/platform/x86/fujitsu-laptop.c | 33 +- drivers/platform/x86/thinkpad_acpi.c | 7 + drivers/regulator/ad5398.c | 12 +- drivers/rtc/rtc-ds1307.c | 4 +- drivers/scsi/lpfc/lpfc_hbadisc.c | 17 +- drivers/scsi/mpt3sas/mpt3sas_ctl.c | 12 +- drivers/scsi/st.c | 29 +- drivers/scsi/st.h | 2 + drivers/spi/spi-fsl-dspi.c | 20 +- drivers/spi/spi-loopback-test.c | 2 +- drivers/spi/spi-sun4i.c | 5 +- drivers/staging/axis-fifo/axis-fifo.c | 417 ++++++++------------- drivers/staging/axis-fifo/axis-fifo.txt | 18 +- drivers/staging/iio/adc/ad7816.c | 2 +- drivers/target/iscsi/iscsi_target.c | 2 +- drivers/target/target_core_file.c | 3 + drivers/target/target_core_iblock.c | 4 + drivers/target/target_core_sbc.c | 6 + drivers/usb/chipidea/ci_hdrc_imx.c | 42 ++- drivers/usb/class/usbtmc.c | 59 +-- drivers/usb/host/uhci-platform.c | 2 +- drivers/usb/typec/tcpm/tcpm.c | 2 +- drivers/usb/typec/ucsi/displayport.c | 2 + drivers/video/fbdev/core/tileblit.c | 37 +- drivers/video/fbdev/fsl-diu-fb.c | 1 + drivers/xen/platform-pci.c | 4 + drivers/xen/swiotlb-xen.c | 18 +- drivers/xen/xenbus/xenbus.h | 2 + drivers/xen/xenbus/xenbus_comms.c | 9 +- drivers/xen/xenbus/xenbus_dev_frontend.c | 2 +- drivers/xen/xenbus/xenbus_probe.c | 14 +- drivers/xen/xenbus/xenbus_xs.c | 18 +- fs/btrfs/extent_io.c | 7 +- fs/btrfs/send.c | 6 +- fs/cifs/readdir.c | 7 +- fs/coredump.c | 80 +++- fs/ext4/balloc.c | 4 +- fs/namespace.c | 9 +- fs/nfs/callback_proc.c | 2 +- fs/nfs/filelayout/filelayoutdev.c | 6 +- fs/nfs/flexfilelayout/flexfilelayout.c | 1 + fs/nfs/flexfilelayout/flexfilelayoutdev.c | 6 +- fs/nfs/nfs4proc.c | 9 +- fs/nfs/nfs4state.c | 10 +- fs/nfs/pnfs.c | 29 +- fs/nfs/pnfs.h | 5 +- fs/nfs/pnfs_nfs.c | 9 +- fs/ocfs2/journal.c | 80 ++-- fs/ocfs2/journal.h | 1 + fs/ocfs2/ocfs2.h | 17 +- fs/ocfs2/quota_local.c | 9 +- fs/ocfs2/super.c | 3 + fs/orangefs/inode.c | 7 +- include/drm/drm_atomic.h | 23 +- include/linux/binfmts.h | 1 + include/linux/dma-mapping.h | 12 +- include/linux/mlx4/device.h | 2 +- include/linux/pid.h | 5 + include/linux/rcutree.h | 2 +- include/linux/types.h | 3 +- include/sound/pcm.h | 2 + include/trace/events/btrfs.h | 2 +- include/uapi/linux/types.h | 1 + kernel/cgroup/cgroup.c | 2 +- kernel/fork.c | 108 +++++- kernel/params.c | 4 +- kernel/rcu/tree_plugin.h | 11 +- kernel/time/posix-timers.c | 1 + kernel/trace/trace.c | 5 +- lib/dynamic_queue_limits.c | 2 +- mm/memcontrol.c | 6 +- mm/page_alloc.c | 8 + net/bridge/br_nf_core.c | 7 +- net/bridge/br_private.h | 1 + net/can/bcm.c | 79 ++-- net/core/pktgen.c | 13 +- net/ipv4/fib_rules.c | 4 +- net/ipv6/fib6_rules.c | 4 +- net/llc/af_llc.c | 8 +- net/netfilter/ipset/ip_set_hash_gen.h | 2 +- net/netfilter/nf_conntrack_standalone.c | 12 +- net/netfilter/nf_tables_api.c | 51 ++- net/openvswitch/actions.c | 3 +- net/sched/sch_drr.c | 9 +- net/sched/sch_hfsc.c | 15 +- net/sched/sch_htb.c | 13 +- net/sched/sch_qfq.c | 11 +- net/sunrpc/clnt.c | 3 - net/xfrm/xfrm_policy.c | 3 + net/xfrm/xfrm_state.c | 3 + scripts/config | 26 +- scripts/kconfig/merge_config.sh | 4 +- security/smack/smackfs.c | 4 + sound/core/oss/pcm_oss.c | 3 +- sound/core/pcm_native.c | 11 + sound/pci/es1968.c | 6 +- sound/sh/Kconfig | 2 +- sound/soc/intel/boards/bytcr_rt5640.c | 13 + sound/soc/soc-ops.c | 29 +- tools/bpf/bpftool/common.c | 3 +- tools/build/Makefile.build | 6 +- 198 files changed, 1682 insertions(+), 840 deletions(-)

1 month, 1 week

7
213
0 0

[PATCH 1/2] platform/loongarch: laptop: Get brightness setting from EC on probe

by Yao Zi

Previously 1 is unconditionally taken as current brightness value. This causes problems since it's required to restore brightness settings on resumption, and a value that doesn't match EC's state before suspension will cause surprising changes of screen brightness. Let's get brightness from EC and take it as the current brightness on probe of the laptop driver to avoid the surprising behavior. Tested on TongFang L860-T2 3A5000 laptop. Cc: stable(a)vger.kernel.org Fixes: 6246ed09111f ("LoongArch: Add ACPI-based generic laptop driver") Signed-off-by: Yao Zi <ziyao(a)disroot.org> --- drivers/platform/loongarch/loongson-laptop.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/platform/loongarch/loongson-laptop.c b/drivers/platform/loongarch/loongson-laptop.c index 99203584949d..828bd62e3596 100644 --- a/drivers/platform/loongarch/loongson-laptop.c +++ b/drivers/platform/loongarch/loongson-laptop.c @@ -392,7 +392,7 @@ static int laptop_backlight_register(void) if (!acpi_evalf(hotkey_handle, &status, "ECLL", "d")) return -EIO; - props.brightness = 1; + props.brightness = ec_get_brightness(); props.max_brightness = status; props.type = BACKLIGHT_PLATFORM; -- 2.49.0

1 month, 1 week

2
4
0 0

[PATCH v2 3/4] wifi: ath12k: fix source ring-buffer corruption

by Johan Hovold

Add the missing memory barrier to make sure that LMAC source ring descriptors are written before updating the head pointer to avoid passing stale data to the firmware on weakly ordered architectures like aarch64. Note that non-LMAC rings use MMIO write accessors which have the required write memory barrier. Tested-on: WCN7850 hw2.0 WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 Fixes: d889913205cf ("wifi: ath12k: driver for Qualcomm Wi-Fi 7 devices") Cc: stable(a)vger.kernel.org # 6.3 Signed-off-by: Johan Hovold <johan+linaro(a)kernel.org> --- drivers/net/wireless/ath/ath12k/hal.c | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/drivers/net/wireless/ath/ath12k/hal.c b/drivers/net/wireless/ath/ath12k/hal.c index 8615578bb802..1e2d13cc2d19 100644 --- a/drivers/net/wireless/ath/ath12k/hal.c +++ b/drivers/net/wireless/ath/ath12k/hal.c @@ -2161,7 +2161,11 @@ void ath12k_hal_srng_access_end(struct ath12k_base *ab, struct hal_srng *srng) if (srng->ring_dir == HAL_SRNG_DIR_SRC) { srng->u.src_ring.last_tp = *(volatile u32 *)srng->u.src_ring.tp_addr; - *srng->u.src_ring.hp_addr = srng->u.src_ring.hp; + /* Make sure descriptor is written before updating the + * head pointer. + */ + dma_wmb(); + WRITE_ONCE(*srng->u.src_ring.hp_addr, srng->u.src_ring.hp); } else { srng->u.dst_ring.last_hp = *srng->u.dst_ring.hp_addr; *srng->u.dst_ring.tp_addr = srng->u.dst_ring.tp; @@ -2170,6 +2174,10 @@ void ath12k_hal_srng_access_end(struct ath12k_base *ab, struct hal_srng *srng) if (srng->ring_dir == HAL_SRNG_DIR_SRC) { srng->u.src_ring.last_tp = *(volatile u32 *)srng->u.src_ring.tp_addr; + /* Assume implementation use an MMIO write accessor + * which has the required wmb() so that the descriptor + * is written before the updating the head pointer. + */ ath12k_hif_write32(ab, (unsigned long)srng->u.src_ring.hp_addr - (unsigned long)ab->mem, -- 2.49.0

1 month, 1 week

1
0
0 0

[PATCH 6.14] orangefs: adjust counting code to recover from 665575cf

by hubcap＠kernel.org

From: Mike Marshall <hubcap(a)omnibond.com> A late commit to 6.14-rc7 (665575cf) broke orangefs. I made a patch that fixes orangefs in 6.15, but some pagecache/folio code got pulled into 6.15 that causes my 6.15 patch not to apply to 6.14. Here is a tested 6.14 flavored patch that was never upstream that I hope can get applied to 6.14-stable... --- fs/orangefs/inode.c | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/fs/orangefs/inode.c b/fs/orangefs/inode.c index aae6d2b8767d..3e8ce0fea4d7 100644 --- a/fs/orangefs/inode.c +++ b/fs/orangefs/inode.c @@ -32,12 +32,13 @@ static int orangefs_writepage_locked(struct page *page, len = i_size_read(inode); if (PagePrivate(page)) { wr = (struct orangefs_write_range *)page_private(page); - WARN_ON(wr->pos >= len); off = wr->pos; - if (off + wr->len > len) + if ((off + wr->len > len) && (off <= len)) wlen = len - off; else wlen = wr->len; + if (wlen == 0) + wlen = wr->len; } else { WARN_ON(1); off = page_offset(page); @@ -46,8 +47,6 @@ static int orangefs_writepage_locked(struct page *page, else wlen = PAGE_SIZE; } - /* Should've been handled in orangefs_invalidate_folio. */ - WARN_ON(off == len || off + wlen > len); WARN_ON(wlen == 0); bvec_set_page(&bv, page, wlen, off % PAGE_SIZE); @@ -341,6 +340,8 @@ static int orangefs_write_begin(struct file *file, wr->len += len; goto okay; } else { + wr->pos = pos; + wr->len = len; ret = orangefs_launder_folio(folio); if (ret) return ret; -- 2.49.0

1 month, 1 week

2
1
0 0

Re: [PATCH] xen/x86: fix initial memory balloon target

by Marek Marczykowski-Górecki

On Thu, May 15, 2025 at 11:01:24AM +0200, Marek Marczykowski-Górecki wrote: > On Wed, May 14, 2025 at 10:04:26AM +0200, Roger Pau Monne wrote: > > When adding extra memory regions as ballooned pages also adjust the balloon > > target, otherwise when the balloon driver is started it will populate > > memory to match the target value and consume all the extra memory regions > > added. > > > > This made the usage of the Xen `dom0_mem=,max:` command line parameter for > > dom0 not work as expected, as the target won't be adjusted and when the > > balloon is started it will populate memory straight to the 'max:' value. > > It would equally affect domUs that have memory != maxmem. > > > > Kernels built with CONFIG_XEN_UNPOPULATED_ALLOC are not affected, because > > the extra memory regions are consumed by the unpopulated allocation driver, > > and then balloon_add_regions() becomes a no-op. > > > > Reported-by: John <jw(a)nuclearfallout.net> > > Fixes: 87af633689ce ('x86/xen: fix balloon target initialization for PVH dom0') > > Signed-off-by: Roger Pau Monné <roger.pau(a)citrix.com> > > Tested-by: Marek Marczykowski-Górecki <marmarek(a)invisiblethingslab.com> I think this wants Cc: stable, since the commit named in Fixes: got backported too. Or is the Fixes tag enough? -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] pinctrl: samsung: add gs101 specific eint suspend/resume" failed to apply to 6.15-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.15-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.15.y git checkout FETCH_HEAD git cherry-pick -x bdbe0a0f71003b997d6a2dbe4bc7b5b0438207c7 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060426-panhandle-gothic-137c@gregkh' --subject-prefix 'PATCH 6.15.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From bdbe0a0f71003b997d6a2dbe4bc7b5b0438207c7 Mon Sep 17 00:00:00 2001 From: Peter Griffin <peter.griffin(a)linaro.org> Date: Wed, 2 Apr 2025 16:17:32 +0100 Subject: [PATCH] pinctrl: samsung: add gs101 specific eint suspend/resume callbacks MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit gs101 differs to other SoCs in that fltcon1 register doesn't always exist. Additionally the offset of fltcon0 is not fixed and needs to use the newly added eint_fltcon_offset variable. Fixes: 4a8be01a1a7a ("pinctrl: samsung: Add gs101 SoC pinctrl configuration") Cc: stable(a)vger.kernel.org # depends on the previous three patches Reviewed-by: André Draszik <andre.draszik(a)linaro.org> Signed-off-by: Peter Griffin <peter.griffin(a)linaro.org> Link: https://lore.kernel.org/r/20250402-pinctrl-fltcon-suspend-v6-3-78ce0d4eb30c… Signed-off-by: Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> diff --git a/drivers/pinctrl/samsung/pinctrl-exynos-arm64.c b/drivers/pinctrl/samsung/pinctrl-exynos-arm64.c index 4b5d4e436a33..9fd894729a7b 100644 --- a/drivers/pinctrl/samsung/pinctrl-exynos-arm64.c +++ b/drivers/pinctrl/samsung/pinctrl-exynos-arm64.c @@ -1762,15 +1762,15 @@ static const struct samsung_pin_ctrl gs101_pin_ctrl[] __initconst = { .pin_banks = gs101_pin_alive, .nr_banks = ARRAY_SIZE(gs101_pin_alive), .eint_wkup_init = exynos_eint_wkup_init, - .suspend = exynos_pinctrl_suspend, - .resume = exynos_pinctrl_resume, + .suspend = gs101_pinctrl_suspend, + .resume = gs101_pinctrl_resume, }, { /* pin banks of gs101 pin-controller (FAR_ALIVE) */ .pin_banks = gs101_pin_far_alive, .nr_banks = ARRAY_SIZE(gs101_pin_far_alive), .eint_wkup_init = exynos_eint_wkup_init, - .suspend = exynos_pinctrl_suspend, - .resume = exynos_pinctrl_resume, + .suspend = gs101_pinctrl_suspend, + .resume = gs101_pinctrl_resume, }, { /* pin banks of gs101 pin-controller (GSACORE) */ .pin_banks = gs101_pin_gsacore, @@ -1784,29 +1784,29 @@ static const struct samsung_pin_ctrl gs101_pin_ctrl[] __initconst = { .pin_banks = gs101_pin_peric0, .nr_banks = ARRAY_SIZE(gs101_pin_peric0), .eint_gpio_init = exynos_eint_gpio_init, - .suspend = exynos_pinctrl_suspend, - .resume = exynos_pinctrl_resume, + .suspend = gs101_pinctrl_suspend, + .resume = gs101_pinctrl_resume, }, { /* pin banks of gs101 pin-controller (PERIC1) */ .pin_banks = gs101_pin_peric1, .nr_banks = ARRAY_SIZE(gs101_pin_peric1), .eint_gpio_init = exynos_eint_gpio_init, - .suspend = exynos_pinctrl_suspend, - .resume = exynos_pinctrl_resume, + .suspend = gs101_pinctrl_suspend, + .resume = gs101_pinctrl_resume, }, { /* pin banks of gs101 pin-controller (HSI1) */ .pin_banks = gs101_pin_hsi1, .nr_banks = ARRAY_SIZE(gs101_pin_hsi1), .eint_gpio_init = exynos_eint_gpio_init, - .suspend = exynos_pinctrl_suspend, - .resume = exynos_pinctrl_resume, + .suspend = gs101_pinctrl_suspend, + .resume = gs101_pinctrl_resume, }, { /* pin banks of gs101 pin-controller (HSI2) */ .pin_banks = gs101_pin_hsi2, .nr_banks = ARRAY_SIZE(gs101_pin_hsi2), .eint_gpio_init = exynos_eint_gpio_init, - .suspend = exynos_pinctrl_suspend, - .resume = exynos_pinctrl_resume, + .suspend = gs101_pinctrl_suspend, + .resume = gs101_pinctrl_resume, }, }; diff --git a/drivers/pinctrl/samsung/pinctrl-exynos.c b/drivers/pinctrl/samsung/pinctrl-exynos.c index 18c327f7e313..0879684338c7 100644 --- a/drivers/pinctrl/samsung/pinctrl-exynos.c +++ b/drivers/pinctrl/samsung/pinctrl-exynos.c @@ -800,6 +800,41 @@ void exynos_pinctrl_suspend(struct samsung_pin_bank *bank) } } +void gs101_pinctrl_suspend(struct samsung_pin_bank *bank) +{ + struct exynos_eint_gpio_save *save = bank->soc_priv; + const void __iomem *regs = bank->eint_base; + + if (bank->eint_type == EINT_TYPE_GPIO) { + save->eint_con = readl(regs + EXYNOS_GPIO_ECON_OFFSET + + bank->eint_offset); + + save->eint_fltcon0 = readl(regs + EXYNOS_GPIO_EFLTCON_OFFSET + + bank->eint_fltcon_offset); + + /* fltcon1 register only exists for pins 4-7 */ + if (bank->nr_pins > 4) + save->eint_fltcon1 = readl(regs + + EXYNOS_GPIO_EFLTCON_OFFSET + + bank->eint_fltcon_offset + 4); + + save->eint_mask = readl(regs + bank->irq_chip->eint_mask + + bank->eint_offset); + + pr_debug("%s: save con %#010x\n", + bank->name, save->eint_con); + pr_debug("%s: save fltcon0 %#010x\n", + bank->name, save->eint_fltcon0); + if (bank->nr_pins > 4) + pr_debug("%s: save fltcon1 %#010x\n", + bank->name, save->eint_fltcon1); + pr_debug("%s: save mask %#010x\n", + bank->name, save->eint_mask); + } else if (bank->eint_type == EINT_TYPE_WKUP) { + exynos_set_wakeup(bank); + } +} + void exynosautov920_pinctrl_suspend(struct samsung_pin_bank *bank) { struct exynos_eint_gpio_save *save = bank->soc_priv; @@ -819,6 +854,42 @@ void exynosautov920_pinctrl_suspend(struct samsung_pin_bank *bank) } } +void gs101_pinctrl_resume(struct samsung_pin_bank *bank) +{ + struct exynos_eint_gpio_save *save = bank->soc_priv; + + void __iomem *regs = bank->eint_base; + void __iomem *eint_fltcfg0 = regs + EXYNOS_GPIO_EFLTCON_OFFSET + + bank->eint_fltcon_offset; + + if (bank->eint_type == EINT_TYPE_GPIO) { + pr_debug("%s: con %#010x => %#010x\n", bank->name, + readl(regs + EXYNOS_GPIO_ECON_OFFSET + + bank->eint_offset), save->eint_con); + + pr_debug("%s: fltcon0 %#010x => %#010x\n", bank->name, + readl(eint_fltcfg0), save->eint_fltcon0); + + /* fltcon1 register only exists for pins 4-7 */ + if (bank->nr_pins > 4) + pr_debug("%s: fltcon1 %#010x => %#010x\n", bank->name, + readl(eint_fltcfg0 + 4), save->eint_fltcon1); + + pr_debug("%s: mask %#010x => %#010x\n", bank->name, + readl(regs + bank->irq_chip->eint_mask + + bank->eint_offset), save->eint_mask); + + writel(save->eint_con, regs + EXYNOS_GPIO_ECON_OFFSET + + bank->eint_offset); + writel(save->eint_fltcon0, eint_fltcfg0); + + if (bank->nr_pins > 4) + writel(save->eint_fltcon1, eint_fltcfg0 + 4); + writel(save->eint_mask, regs + bank->irq_chip->eint_mask + + bank->eint_offset); + } +} + void exynos_pinctrl_resume(struct samsung_pin_bank *bank) { struct exynos_eint_gpio_save *save = bank->soc_priv; diff --git a/drivers/pinctrl/samsung/pinctrl-exynos.h b/drivers/pinctrl/samsung/pinctrl-exynos.h index 3a771862b4b1..2bee52b61b93 100644 --- a/drivers/pinctrl/samsung/pinctrl-exynos.h +++ b/drivers/pinctrl/samsung/pinctrl-exynos.h @@ -244,6 +244,8 @@ void exynosautov920_pinctrl_resume(struct samsung_pin_bank *bank); void exynosautov920_pinctrl_suspend(struct samsung_pin_bank *bank); void exynos_pinctrl_suspend(struct samsung_pin_bank *bank); void exynos_pinctrl_resume(struct samsung_pin_bank *bank); +void gs101_pinctrl_suspend(struct samsung_pin_bank *bank); +void gs101_pinctrl_resume(struct samsung_pin_bank *bank); struct samsung_retention_ctrl * exynos_retention_init(struct samsung_pinctrl_drv_data *drvdata, const struct samsung_retention_data *data);

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] pinctrl: samsung: add gs101 specific eint suspend/resume" failed to apply to 6.12-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.12-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.12.y git checkout FETCH_HEAD git cherry-pick -x bdbe0a0f71003b997d6a2dbe4bc7b5b0438207c7 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060426-broiling-facility-b691@gregkh' --subject-prefix 'PATCH 6.12.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From bdbe0a0f71003b997d6a2dbe4bc7b5b0438207c7 Mon Sep 17 00:00:00 2001 From: Peter Griffin <peter.griffin(a)linaro.org> Date: Wed, 2 Apr 2025 16:17:32 +0100 Subject: [PATCH] pinctrl: samsung: add gs101 specific eint suspend/resume callbacks MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit gs101 differs to other SoCs in that fltcon1 register doesn't always exist. Additionally the offset of fltcon0 is not fixed and needs to use the newly added eint_fltcon_offset variable. Fixes: 4a8be01a1a7a ("pinctrl: samsung: Add gs101 SoC pinctrl configuration") Cc: stable(a)vger.kernel.org # depends on the previous three patches Reviewed-by: André Draszik <andre.draszik(a)linaro.org> Signed-off-by: Peter Griffin <peter.griffin(a)linaro.org> Link: https://lore.kernel.org/r/20250402-pinctrl-fltcon-suspend-v6-3-78ce0d4eb30c… Signed-off-by: Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> diff --git a/drivers/pinctrl/samsung/pinctrl-exynos-arm64.c b/drivers/pinctrl/samsung/pinctrl-exynos-arm64.c index 4b5d4e436a33..9fd894729a7b 100644 --- a/drivers/pinctrl/samsung/pinctrl-exynos-arm64.c +++ b/drivers/pinctrl/samsung/pinctrl-exynos-arm64.c @@ -1762,15 +1762,15 @@ static const struct samsung_pin_ctrl gs101_pin_ctrl[] __initconst = { .pin_banks = gs101_pin_alive, .nr_banks = ARRAY_SIZE(gs101_pin_alive), .eint_wkup_init = exynos_eint_wkup_init, - .suspend = exynos_pinctrl_suspend, - .resume = exynos_pinctrl_resume, + .suspend = gs101_pinctrl_suspend, + .resume = gs101_pinctrl_resume, }, { /* pin banks of gs101 pin-controller (FAR_ALIVE) */ .pin_banks = gs101_pin_far_alive, .nr_banks = ARRAY_SIZE(gs101_pin_far_alive), .eint_wkup_init = exynos_eint_wkup_init, - .suspend = exynos_pinctrl_suspend, - .resume = exynos_pinctrl_resume, + .suspend = gs101_pinctrl_suspend, + .resume = gs101_pinctrl_resume, }, { /* pin banks of gs101 pin-controller (GSACORE) */ .pin_banks = gs101_pin_gsacore, @@ -1784,29 +1784,29 @@ static const struct samsung_pin_ctrl gs101_pin_ctrl[] __initconst = { .pin_banks = gs101_pin_peric0, .nr_banks = ARRAY_SIZE(gs101_pin_peric0), .eint_gpio_init = exynos_eint_gpio_init, - .suspend = exynos_pinctrl_suspend, - .resume = exynos_pinctrl_resume, + .suspend = gs101_pinctrl_suspend, + .resume = gs101_pinctrl_resume, }, { /* pin banks of gs101 pin-controller (PERIC1) */ .pin_banks = gs101_pin_peric1, .nr_banks = ARRAY_SIZE(gs101_pin_peric1), .eint_gpio_init = exynos_eint_gpio_init, - .suspend = exynos_pinctrl_suspend, - .resume = exynos_pinctrl_resume, + .suspend = gs101_pinctrl_suspend, + .resume = gs101_pinctrl_resume, }, { /* pin banks of gs101 pin-controller (HSI1) */ .pin_banks = gs101_pin_hsi1, .nr_banks = ARRAY_SIZE(gs101_pin_hsi1), .eint_gpio_init = exynos_eint_gpio_init, - .suspend = exynos_pinctrl_suspend, - .resume = exynos_pinctrl_resume, + .suspend = gs101_pinctrl_suspend, + .resume = gs101_pinctrl_resume, }, { /* pin banks of gs101 pin-controller (HSI2) */ .pin_banks = gs101_pin_hsi2, .nr_banks = ARRAY_SIZE(gs101_pin_hsi2), .eint_gpio_init = exynos_eint_gpio_init, - .suspend = exynos_pinctrl_suspend, - .resume = exynos_pinctrl_resume, + .suspend = gs101_pinctrl_suspend, + .resume = gs101_pinctrl_resume, }, }; diff --git a/drivers/pinctrl/samsung/pinctrl-exynos.c b/drivers/pinctrl/samsung/pinctrl-exynos.c index 18c327f7e313..0879684338c7 100644 --- a/drivers/pinctrl/samsung/pinctrl-exynos.c +++ b/drivers/pinctrl/samsung/pinctrl-exynos.c @@ -800,6 +800,41 @@ void exynos_pinctrl_suspend(struct samsung_pin_bank *bank) } } +void gs101_pinctrl_suspend(struct samsung_pin_bank *bank) +{ + struct exynos_eint_gpio_save *save = bank->soc_priv; + const void __iomem *regs = bank->eint_base; + + if (bank->eint_type == EINT_TYPE_GPIO) { + save->eint_con = readl(regs + EXYNOS_GPIO_ECON_OFFSET + + bank->eint_offset); + + save->eint_fltcon0 = readl(regs + EXYNOS_GPIO_EFLTCON_OFFSET + + bank->eint_fltcon_offset); + + /* fltcon1 register only exists for pins 4-7 */ + if (bank->nr_pins > 4) + save->eint_fltcon1 = readl(regs + + EXYNOS_GPIO_EFLTCON_OFFSET + + bank->eint_fltcon_offset + 4); + + save->eint_mask = readl(regs + bank->irq_chip->eint_mask + + bank->eint_offset); + + pr_debug("%s: save con %#010x\n", + bank->name, save->eint_con); + pr_debug("%s: save fltcon0 %#010x\n", + bank->name, save->eint_fltcon0); + if (bank->nr_pins > 4) + pr_debug("%s: save fltcon1 %#010x\n", + bank->name, save->eint_fltcon1); + pr_debug("%s: save mask %#010x\n", + bank->name, save->eint_mask); + } else if (bank->eint_type == EINT_TYPE_WKUP) { + exynos_set_wakeup(bank); + } +} + void exynosautov920_pinctrl_suspend(struct samsung_pin_bank *bank) { struct exynos_eint_gpio_save *save = bank->soc_priv; @@ -819,6 +854,42 @@ void exynosautov920_pinctrl_suspend(struct samsung_pin_bank *bank) } } +void gs101_pinctrl_resume(struct samsung_pin_bank *bank) +{ + struct exynos_eint_gpio_save *save = bank->soc_priv; + + void __iomem *regs = bank->eint_base; + void __iomem *eint_fltcfg0 = regs + EXYNOS_GPIO_EFLTCON_OFFSET + + bank->eint_fltcon_offset; + + if (bank->eint_type == EINT_TYPE_GPIO) { + pr_debug("%s: con %#010x => %#010x\n", bank->name, + readl(regs + EXYNOS_GPIO_ECON_OFFSET + + bank->eint_offset), save->eint_con); + + pr_debug("%s: fltcon0 %#010x => %#010x\n", bank->name, + readl(eint_fltcfg0), save->eint_fltcon0); + + /* fltcon1 register only exists for pins 4-7 */ + if (bank->nr_pins > 4) + pr_debug("%s: fltcon1 %#010x => %#010x\n", bank->name, + readl(eint_fltcfg0 + 4), save->eint_fltcon1); + + pr_debug("%s: mask %#010x => %#010x\n", bank->name, + readl(regs + bank->irq_chip->eint_mask + + bank->eint_offset), save->eint_mask); + + writel(save->eint_con, regs + EXYNOS_GPIO_ECON_OFFSET + + bank->eint_offset); + writel(save->eint_fltcon0, eint_fltcfg0); + + if (bank->nr_pins > 4) + writel(save->eint_fltcon1, eint_fltcfg0 + 4); + writel(save->eint_mask, regs + bank->irq_chip->eint_mask + + bank->eint_offset); + } +} + void exynos_pinctrl_resume(struct samsung_pin_bank *bank) { struct exynos_eint_gpio_save *save = bank->soc_priv; diff --git a/drivers/pinctrl/samsung/pinctrl-exynos.h b/drivers/pinctrl/samsung/pinctrl-exynos.h index 3a771862b4b1..2bee52b61b93 100644 --- a/drivers/pinctrl/samsung/pinctrl-exynos.h +++ b/drivers/pinctrl/samsung/pinctrl-exynos.h @@ -244,6 +244,8 @@ void exynosautov920_pinctrl_resume(struct samsung_pin_bank *bank); void exynosautov920_pinctrl_suspend(struct samsung_pin_bank *bank); void exynos_pinctrl_suspend(struct samsung_pin_bank *bank); void exynos_pinctrl_resume(struct samsung_pin_bank *bank); +void gs101_pinctrl_suspend(struct samsung_pin_bank *bank); +void gs101_pinctrl_resume(struct samsung_pin_bank *bank); struct samsung_retention_ctrl * exynos_retention_init(struct samsung_pinctrl_drv_data *drvdata, const struct samsung_retention_data *data);

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] pinctrl: samsung: add gs101 specific eint suspend/resume" failed to apply to 6.14-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.14-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.14.y git checkout FETCH_HEAD git cherry-pick -x bdbe0a0f71003b997d6a2dbe4bc7b5b0438207c7 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060426-catsup-vitalize-6254@gregkh' --subject-prefix 'PATCH 6.14.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From bdbe0a0f71003b997d6a2dbe4bc7b5b0438207c7 Mon Sep 17 00:00:00 2001 From: Peter Griffin <peter.griffin(a)linaro.org> Date: Wed, 2 Apr 2025 16:17:32 +0100 Subject: [PATCH] pinctrl: samsung: add gs101 specific eint suspend/resume callbacks MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit gs101 differs to other SoCs in that fltcon1 register doesn't always exist. Additionally the offset of fltcon0 is not fixed and needs to use the newly added eint_fltcon_offset variable. Fixes: 4a8be01a1a7a ("pinctrl: samsung: Add gs101 SoC pinctrl configuration") Cc: stable(a)vger.kernel.org # depends on the previous three patches Reviewed-by: André Draszik <andre.draszik(a)linaro.org> Signed-off-by: Peter Griffin <peter.griffin(a)linaro.org> Link: https://lore.kernel.org/r/20250402-pinctrl-fltcon-suspend-v6-3-78ce0d4eb30c… Signed-off-by: Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> diff --git a/drivers/pinctrl/samsung/pinctrl-exynos-arm64.c b/drivers/pinctrl/samsung/pinctrl-exynos-arm64.c index 4b5d4e436a33..9fd894729a7b 100644 --- a/drivers/pinctrl/samsung/pinctrl-exynos-arm64.c +++ b/drivers/pinctrl/samsung/pinctrl-exynos-arm64.c @@ -1762,15 +1762,15 @@ static const struct samsung_pin_ctrl gs101_pin_ctrl[] __initconst = { .pin_banks = gs101_pin_alive, .nr_banks = ARRAY_SIZE(gs101_pin_alive), .eint_wkup_init = exynos_eint_wkup_init, - .suspend = exynos_pinctrl_suspend, - .resume = exynos_pinctrl_resume, + .suspend = gs101_pinctrl_suspend, + .resume = gs101_pinctrl_resume, }, { /* pin banks of gs101 pin-controller (FAR_ALIVE) */ .pin_banks = gs101_pin_far_alive, .nr_banks = ARRAY_SIZE(gs101_pin_far_alive), .eint_wkup_init = exynos_eint_wkup_init, - .suspend = exynos_pinctrl_suspend, - .resume = exynos_pinctrl_resume, + .suspend = gs101_pinctrl_suspend, + .resume = gs101_pinctrl_resume, }, { /* pin banks of gs101 pin-controller (GSACORE) */ .pin_banks = gs101_pin_gsacore, @@ -1784,29 +1784,29 @@ static const struct samsung_pin_ctrl gs101_pin_ctrl[] __initconst = { .pin_banks = gs101_pin_peric0, .nr_banks = ARRAY_SIZE(gs101_pin_peric0), .eint_gpio_init = exynos_eint_gpio_init, - .suspend = exynos_pinctrl_suspend, - .resume = exynos_pinctrl_resume, + .suspend = gs101_pinctrl_suspend, + .resume = gs101_pinctrl_resume, }, { /* pin banks of gs101 pin-controller (PERIC1) */ .pin_banks = gs101_pin_peric1, .nr_banks = ARRAY_SIZE(gs101_pin_peric1), .eint_gpio_init = exynos_eint_gpio_init, - .suspend = exynos_pinctrl_suspend, - .resume = exynos_pinctrl_resume, + .suspend = gs101_pinctrl_suspend, + .resume = gs101_pinctrl_resume, }, { /* pin banks of gs101 pin-controller (HSI1) */ .pin_banks = gs101_pin_hsi1, .nr_banks = ARRAY_SIZE(gs101_pin_hsi1), .eint_gpio_init = exynos_eint_gpio_init, - .suspend = exynos_pinctrl_suspend, - .resume = exynos_pinctrl_resume, + .suspend = gs101_pinctrl_suspend, + .resume = gs101_pinctrl_resume, }, { /* pin banks of gs101 pin-controller (HSI2) */ .pin_banks = gs101_pin_hsi2, .nr_banks = ARRAY_SIZE(gs101_pin_hsi2), .eint_gpio_init = exynos_eint_gpio_init, - .suspend = exynos_pinctrl_suspend, - .resume = exynos_pinctrl_resume, + .suspend = gs101_pinctrl_suspend, + .resume = gs101_pinctrl_resume, }, }; diff --git a/drivers/pinctrl/samsung/pinctrl-exynos.c b/drivers/pinctrl/samsung/pinctrl-exynos.c index 18c327f7e313..0879684338c7 100644 --- a/drivers/pinctrl/samsung/pinctrl-exynos.c +++ b/drivers/pinctrl/samsung/pinctrl-exynos.c @@ -800,6 +800,41 @@ void exynos_pinctrl_suspend(struct samsung_pin_bank *bank) } } +void gs101_pinctrl_suspend(struct samsung_pin_bank *bank) +{ + struct exynos_eint_gpio_save *save = bank->soc_priv; + const void __iomem *regs = bank->eint_base; + + if (bank->eint_type == EINT_TYPE_GPIO) { + save->eint_con = readl(regs + EXYNOS_GPIO_ECON_OFFSET + + bank->eint_offset); + + save->eint_fltcon0 = readl(regs + EXYNOS_GPIO_EFLTCON_OFFSET + + bank->eint_fltcon_offset); + + /* fltcon1 register only exists for pins 4-7 */ + if (bank->nr_pins > 4) + save->eint_fltcon1 = readl(regs + + EXYNOS_GPIO_EFLTCON_OFFSET + + bank->eint_fltcon_offset + 4); + + save->eint_mask = readl(regs + bank->irq_chip->eint_mask + + bank->eint_offset); + + pr_debug("%s: save con %#010x\n", + bank->name, save->eint_con); + pr_debug("%s: save fltcon0 %#010x\n", + bank->name, save->eint_fltcon0); + if (bank->nr_pins > 4) + pr_debug("%s: save fltcon1 %#010x\n", + bank->name, save->eint_fltcon1); + pr_debug("%s: save mask %#010x\n", + bank->name, save->eint_mask); + } else if (bank->eint_type == EINT_TYPE_WKUP) { + exynos_set_wakeup(bank); + } +} + void exynosautov920_pinctrl_suspend(struct samsung_pin_bank *bank) { struct exynos_eint_gpio_save *save = bank->soc_priv; @@ -819,6 +854,42 @@ void exynosautov920_pinctrl_suspend(struct samsung_pin_bank *bank) } } +void gs101_pinctrl_resume(struct samsung_pin_bank *bank) +{ + struct exynos_eint_gpio_save *save = bank->soc_priv; + + void __iomem *regs = bank->eint_base; + void __iomem *eint_fltcfg0 = regs + EXYNOS_GPIO_EFLTCON_OFFSET + + bank->eint_fltcon_offset; + + if (bank->eint_type == EINT_TYPE_GPIO) { + pr_debug("%s: con %#010x => %#010x\n", bank->name, + readl(regs + EXYNOS_GPIO_ECON_OFFSET + + bank->eint_offset), save->eint_con); + + pr_debug("%s: fltcon0 %#010x => %#010x\n", bank->name, + readl(eint_fltcfg0), save->eint_fltcon0); + + /* fltcon1 register only exists for pins 4-7 */ + if (bank->nr_pins > 4) + pr_debug("%s: fltcon1 %#010x => %#010x\n", bank->name, + readl(eint_fltcfg0 + 4), save->eint_fltcon1); + + pr_debug("%s: mask %#010x => %#010x\n", bank->name, + readl(regs + bank->irq_chip->eint_mask + + bank->eint_offset), save->eint_mask); + + writel(save->eint_con, regs + EXYNOS_GPIO_ECON_OFFSET + + bank->eint_offset); + writel(save->eint_fltcon0, eint_fltcfg0); + + if (bank->nr_pins > 4) + writel(save->eint_fltcon1, eint_fltcfg0 + 4); + writel(save->eint_mask, regs + bank->irq_chip->eint_mask + + bank->eint_offset); + } +} + void exynos_pinctrl_resume(struct samsung_pin_bank *bank) { struct exynos_eint_gpio_save *save = bank->soc_priv; diff --git a/drivers/pinctrl/samsung/pinctrl-exynos.h b/drivers/pinctrl/samsung/pinctrl-exynos.h index 3a771862b4b1..2bee52b61b93 100644 --- a/drivers/pinctrl/samsung/pinctrl-exynos.h +++ b/drivers/pinctrl/samsung/pinctrl-exynos.h @@ -244,6 +244,8 @@ void exynosautov920_pinctrl_resume(struct samsung_pin_bank *bank); void exynosautov920_pinctrl_suspend(struct samsung_pin_bank *bank); void exynos_pinctrl_suspend(struct samsung_pin_bank *bank); void exynos_pinctrl_resume(struct samsung_pin_bank *bank); +void gs101_pinctrl_suspend(struct samsung_pin_bank *bank); +void gs101_pinctrl_resume(struct samsung_pin_bank *bank); struct samsung_retention_ctrl * exynos_retention_init(struct samsung_pinctrl_drv_data *drvdata, const struct samsung_retention_data *data);

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] clk: samsung: correct clock summary for hsi1 block" failed to apply to 6.12-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.12-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.12.y git checkout FETCH_HEAD git cherry-pick -x 81214185e7e1fc6dfc8661a574c457accaf9a5a4 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060414-sprinkler-species-7979@gregkh' --subject-prefix 'PATCH 6.12.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 81214185e7e1fc6dfc8661a574c457accaf9a5a4 Mon Sep 17 00:00:00 2001 From: Pritam Manohar Sutar <pritam.sutar(a)samsung.com> Date: Tue, 6 May 2025 13:31:54 +0530 Subject: [PATCH] clk: samsung: correct clock summary for hsi1 block clk_summary shows wrong value for "mout_hsi1_usbdrd_user". It shows 400Mhz instead of 40Mhz as below. dout_shared2_div4 1 1 0 400000000 0 0 50000 Y ... mout_hsi1_usbdrd_user 0 0 0 400000000 0 0 50000 Y ... dout_clkcmu_hsi1_usbdrd 0 0 0 40000000 0 0 50000 Y ... Correct the clk_tree by adding correct clock parent for "mout_hsi1_usbdrd_user". Post this change, clk_summary shows correct value. dout_shared2_div4 1 1 0 400000000 0 0 50000 Y ... mout_clkcmu_hsi1_usbdrd 0 0 0 400000000 0 0 50000 Y ... dout_clkcmu_hsi1_usbdrd 0 0 0 40000000 0 0 50000 Y ... mout_hsi1_usbdrd_user 0 0 0 40000000 0 0 50000 Y ... Fixes: 485e13fe2fb6 ("clk: samsung: add top clock support for ExynosAuto v920 SoC") Cc: <stable(a)kernel.org> Signed-off-by: Pritam Manohar Sutar <pritam.sutar(a)samsung.com> Reviewed-by: Alim Akhtar <alim.akhtar(a)samsung.com> Link: https://lore.kernel.org/r/20250506080154.3995512-1-pritam.sutar@samsung.com Signed-off-by: Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> diff --git a/drivers/clk/samsung/clk-exynosautov920.c b/drivers/clk/samsung/clk-exynosautov920.c index f8168eed4a66..da4afe8ac2ab 100644 --- a/drivers/clk/samsung/clk-exynosautov920.c +++ b/drivers/clk/samsung/clk-exynosautov920.c @@ -1729,7 +1729,7 @@ static const unsigned long hsi1_clk_regs[] __initconst = { /* List of parent clocks for Muxes in CMU_HSI1 */ PNAME(mout_hsi1_mmc_card_user_p) = {"oscclk", "dout_clkcmu_hsi1_mmc_card"}; PNAME(mout_hsi1_noc_user_p) = { "oscclk", "dout_clkcmu_hsi1_noc" }; -PNAME(mout_hsi1_usbdrd_user_p) = { "oscclk", "mout_clkcmu_hsi1_usbdrd" }; +PNAME(mout_hsi1_usbdrd_user_p) = { "oscclk", "dout_clkcmu_hsi1_usbdrd" }; PNAME(mout_hsi1_usbdrd_p) = { "dout_tcxo_div2", "mout_hsi1_usbdrd_user" }; static const struct samsung_mux_clock hsi1_mux_clks[] __initconst = {

1 month, 1 week

1
0
0 0

[PATCH 6.12 000/626] 6.12.31-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.31 release. There are 626 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 29 May 2025 16:22:51 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.31-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.31-rc1 Thomas Zimmermann <tzimmermann(a)suse.de> drm/gem: Internally test import_attach for imported objects Balbir Singh <balbirs(a)nvidia.com> x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers bounce buffers Nathan Chancellor <nathan(a)kernel.org> i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work() Dan Carpenter <dan.carpenter(a)linaro.org> pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group() Arnd Bergmann <arnd(a)arndb.de> watchdog: aspeed: fix 64-bit division Amber Lin <Amber.Lin(a)amd.com> drm/amdkfd: Correct F8_MODE for gfx950 Geert Uytterhoeven <geert+renesas(a)glider.be> serial: sh-sci: Save and restore more registers Eduard Zingerman <eddyz87(a)gmail.com> bpf: abort verification if env->cur_state->loop_entry != NULL Ovidiu Bunea <Ovidiu.Bunea(a)amd.com> drm/amd/display: Exit idle optimizations before accessing PHY Nathan Chancellor <nathan(a)kernel.org> kbuild: Properly disable -Wunterminated-string-initialization for clang Linus Torvalds <torvalds(a)linux-foundation.org> Fix mis-uses of 'cc-option' for warning disablement Linus Torvalds <torvalds(a)linux-foundation.org> gcc-15: disable '-Wunterminated-string-initialization' entirely for now Linus Torvalds <torvalds(a)linux-foundation.org> gcc-15: make 'unterminated string initialization' just a warning Raag Jadav <raag.jadav(a)intel.com> err.h: move IOMEM_ERR_PTR() to err.h Larisa Grigore <larisa.grigore(a)nxp.com> spi: spi-fsl-dspi: Reset SR flags before sending a new message Bogdan-Gabriel Roman <bogdan-gabriel.roman(a)nxp.com> spi: spi-fsl-dspi: Halt the module after a new message transfer Larisa Grigore <larisa.grigore(a)nxp.com> spi: spi-fsl-dspi: restrict register range for regmap access Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> spi: use container_of_cont() for to_spi_device() Mark Pearson <mpearson-lenovo(a)squebb.ca> platform/x86: think-lmi: Fix attribute name usage for non-compliant items Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix stream write failure Jernej Skrabec <jernej.skrabec(a)gmail.com> Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection" Chris Lu <chris.lu(a)mediatek.com> Bluetooth: btmtksdio: Do close if SDIO card removed without close Chris Lu <chris.lu(a)mediatek.com> Bluetooth: btmtksdio: Check function enabled before doing close Ryusuke Konishi <konishi.ryusuke(a)gmail.com> nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() Kees Cook <kees(a)kernel.org> mm: vmalloc: only zero-init on vrealloc shrink Kees Cook <kees(a)kernel.org> mm: vmalloc: actually use the in-place vrealloc region Ignacio Moreno Gonzalez <Ignacio.MorenoGonzalez(a)kuka.com> mm: mmap: map MAP_STACK to VM_NOHUGEPAGE only if THP is enabled Tianyang Zhang <zhangtianyang(a)loongson.cn> mm/page_alloc.c: avoid infinite retries caused by cpuset race Breno Leitao <leitao(a)debian.org> memcg: always call cond_resched() after fn() Matthew Wilcox (Oracle) <willy(a)infradead.org> highmem: add folio_test_partial_kmap() Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: synaptics-rmi - fix crash with unsupported versions of F34 Vicki Pfau <vi(a)endrift.com> Input: xpad - add more controllers Mario Limonciello <mario.limonciello(a)amd.com> Revert "drm/amd: Keep display off while going into S4" Wang Zhaolong <wangzhaolong1(a)huawei.com> smb: client: Reset all search buffer pointers when releasing buffer Gabor Juhos <j4g8y7(a)gmail.com> arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs Wang Zhaolong <wangzhaolong1(a)huawei.com> smb: client: Fix use-after-free in cifs_fill_dirent feijuan.li <feijuan.li(a)samsung.com> drm/edid: fixed the bug that hdr metadata was not reset Zhang Rui <rui.zhang(a)intel.com> thermal: intel: x86_pkg_temp_thermal: Fix bogus trip temperature Vladimir Moskovkin <Vladimir.Moskovkin(a)kaspersky.com> platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() Dan Carpenter <dan.carpenter(a)linaro.org> pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id() Geert Uytterhoeven <geert+renesas(a)glider.be> pmdomain: renesas: rcar: Remove obsolete nullify checks Ronak Doshi <ronak.doshi(a)broadcom.com> vmxnet3: update MTU after device quiesce Jakob Unterwurzacher <jakobunt(a)gmail.com> net: dsa: microchip: linearize skb for tail-tagging switches Axel Forsman <axfo(a)kvaser.com> can: kvaser_pciefd: Fix echo_skb race Axel Forsman <axfo(a)kvaser.com> can: kvaser_pciefd: Continue parsing DMA buf after dropped RX Ilia Gavrilov <Ilia.Gavrilov(a)infotecs.ru> llc: fix data loss when reading from a socket in llc_ui_recvmsg() Ed Burcher <git(a)edburcher.com> ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10 Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Fix race of buffer access at PCM OSS layer Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-pcm: Delay reporting is only supported for playback direction Kai Vehmanen <kai.vehmanen(a)linux.intel.com> ASoc: SOF: topology: connect DAI to a single DAI link Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: Intel: hda-bus: Use PIO mode on ACE2+ platforms Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-control: Use SOF_CTRL_CMD_BINARY as numid for bytes_ext Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing rcu read protection for procfs content Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add locking for bcm_op runtime updates Carlos Sanchez <carlossanchez(a)geotab.com> can: slcan: allow reception of short error messages Dominik Grzegorzek <dominik.grzegorzek(a)oracle.com> padata: do not leak refcount in reorder_work Ivan Pravdin <ipravdin.official(a)gmail.com> crypto: algif_hash - fix double free in hash_accept André Draszik <andre.draszik(a)linaro.org> clk: s2mps11: initialise clk_hw_onecell_data::num before accessing ::hws[] in probe() Geetha sowjanya <gakula(a)marvell.com> octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG Subbaraya Sundeep <sbhatta(a)marvell.com> octeontx2-af: Set LMT_ENA bit for APR table entries Wang Liang <wangliang74(a)huawei.com> net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done Suman Ghosh <sumang(a)marvell.com> octeontx2-pf: Add AF_XDP non-zero copy support Cong Wang <xiyou.wangcong(a)gmail.com> sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() Eric Dumazet <edumazet(a)google.com> idpf: fix idpf_vport_splitq_napi_poll() Pavel Begunkov <asml.silence(a)gmail.com> io_uring: fix overflow resched cqe reordering Thangaraj Samynathan <thangaraj.s(a)microchip.com> net: lan743x: Restore SGMII CTRL register on resume Paul Kocialkowski <paulk(a)sys-base.io> net: dwmac-sun8i: Use parsed internal PHY address instead of 1 Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> pinctrl: qcom: switch to devm_register_sys_off_handler() Christoph Hellwig <hch(a)lst.de> loop: don't require ->write_iter for writable files in loop_configure Pavan Kumar Linga <pavan.kumar.linga(a)intel.com> idpf: fix null-ptr-deref in idpf_features_check Dave Ertman <david.m.ertman(a)intel.com> ice: Fix LACP bonds without SRIOV environment Jacob Keller <jacob.e.keller(a)intel.com> ice: fix vf->num_mac count with port representors Ido Schimmel <idosch(a)nvidia.com> bridge: netfilter: Fix forwarding of fragmented packets Sagi Maimon <maimon.sagi(a)gmail.com> ptp: ocp: Limit signal/freq counts in summary output functions En-Wei Wu <en-wei.wu(a)canonical.com> Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump handling Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix not checking l2cap_chan security level Adrian Hunter <adrian.hunter(a)intel.com> perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq Andrew Bresticker <abrestic(a)rivosinc.com> irqchip/riscv-imsic: Start local sync timer on correct CPU Tavian Barnes <tavianator(a)tavianator.com> ASoC: SOF: Intel: hda: Fix UAF when reloading module Raag Jadav <raag.jadav(a)intel.com> devres: Introduce devm_kmemdup_array() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> driver core: Split devres APIs to device/devres.h Stefan Wahren <wahrenst(a)gmx.net> dmaengine: fsl-edma: Fix return code for unhandled interrupts Dave Jiang <dave.jiang(a)intel.com> dmaengine: idxd: Fix ->poll() return value Paul Chaignon <paul.chaignon(a)gmail.com> xfrm: Sanitize marks before insert Andre Przywara <andre.przywara(a)arm.com> clk: sunxi-ng: d1: Add missing divider for MMC mod clocks Matti Lehtimäki <matti.lehtimaki(a)gmail.com> remoteproc: qcom_wcnss: Fix on platforms without fallback regulators David Hildenbrand <david(a)redhat.com> kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork() Seongman Lee <augustus92(a)kaist.ac.kr> x86/sev: Fix operator precedence in GHCB_MSR_VMPL_REQ_LEVEL macro Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix allowing write() from different address spaces Tobias Brunner <tobias(a)strongswan.org> xfrm: Fix UDP GRO handling for some corner cases Sabrina Dubroca <sd(a)queasysnail.net> espintcp: remove encap socket caching to avoid reference leak Sabrina Dubroca <sd(a)queasysnail.net> espintcp: fix skb leaks Charles Keepax <ckeepax(a)opensource.cirrus.com> soundwire: bus: Fix race on the creation of the IRQ domain Al Viro <viro(a)zeniv.linux.org.uk> __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock Austin Zheng <Austin.Zheng(a)amd.com> drm/amd/display: Call FP Protect Before Mode Programming/Mode Support Jason Andryuk <jason.andryuk(a)amd.com> xenbus: Allow PVH dom0 a non-local xenstore Paweł Anikiel <panikiel(a)google.com> x86/Kconfig: make CFI_AUTO_DEFAULT depend on !RUST or Rust >= 1.88 Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: add support for Killer on MTL Johannes Thumshirn <johannes.thumshirn(a)wdc.com> block: only update request sector if needed David Wei <dw(a)davidwei.uk> tools: ynl-gen: validate 0 len strings from kernel Qu Wenruo <wqu(a)suse.com> btrfs: avoid NULL pointer dereference if no valid csum tree Boris Burkov <boris(a)bur.io> btrfs: handle empty eb->folios in num_extent_folios() Goldwyn Rodrigues <rgoldwyn(a)suse.de> btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref Kees Cook <kees(a)kernel.org> btrfs: compression: adjust cb->compressed_folios allocation type Stefan Binding <sbinding(a)opensource.cirrus.com> ASoC: intel/sdw_utils: Add volume limit to cs42l43 speakers Pali Rohár <pali(a)kernel.org> cifs: Fix changing times and read-only attr over SMB1 smb_set_file_info() function Pali Rohár <pali(a)kernel.org> cifs: Fix and improve cifs_query_path_info() and cifs_query_file_info() Jens Axboe <axboe(a)kernel.dk> io_uring/fdinfo: annotate racy sq/cq head/tail reads Alistair Francis <alistair.francis(a)wdc.com> nvmet-tcp: don't restore null sk_state_change Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Fix duplicated name in MIDI substream names Wentao Guan <guanwentao(a)uniontech.com> nvme-pci: add quirks for WDC Blue SN550 15b7:5009 Wentao Guan <guanwentao(a)uniontech.com> nvme-pci: add quirks for device 126f:1001 Takashi Iwai <tiwai(a)suse.de> ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx Takashi Iwai <tiwai(a)suse.de> ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: cs42l43: Disable headphone clamps during type detection Gašper Nemgar <gasper.nemgar(a)gmail.com> platform/x86: ideapad-laptop: add support for some new buttons Pavel Nikulin <pavel(a)noa-labs.com> platform/x86: asus-wmi: Disable OOBE state after resume from hibernation Saranya Gopal <saranya.gopal(a)intel.com> platform/x86/intel: hid: Add Pantherlake support Salah Triki <salah.triki(a)gmail.com> smb: server: smb2pdu: check return value of xa_store() Martin Blumenstingl <martin.blumenstingl(a)googlemail.com> pinctrl: meson: define the pull up/down resistor value as 60 kOhm Ritesh Harjani (IBM) <ritesh.list(a)gmail.com> book3s64/radix: Fix compile errors when CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n Chenyuan Yang <chenyuan0y(a)gmail.com> ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of() Jessica Zhang <quic_jesszhan(a)quicinc.com> drm: Add valid clones check Douglas Anderson <dianders(a)chromium.org> drm/panel-edp: Add Starry 116KHD024006 Lin.Cao <lincao12(a)amd.com> drm/buddy: fix issue that force_merge cannot free all roots Simona Vetter <simona.vetter(a)ffwll.ch> drm/atomic: clarify the rules around drm_atomic_state->allow_modeset Oak Zeng <oak.zeng(a)intel.com> drm/xe: Reject BO eviction if BO is bound to current VM Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe/sa: Always call drm_suballoc_manager_fini() Ching-Te Ku <ku920601(a)realtek.com> wifi: rtw89: coex: Separated Wi-Fi connecting event from Wi-Fi scan event Maarten Lankhorst <dev(a)lankhorst.se> drm/xe: Do not attempt to bootstrap VF in execlists mode Maarten Lankhorst <dev(a)lankhorst.se> drm/xe: Move suballocator init to after display init P Praneesh <quic_ppranees(a)quicinc.com> wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation Zhi Wang <zhiw(a)nvidia.com> drm/nouveau: fix the broken marco GSP_MSG_MAX_SIZE Olivier Moysan <olivier.moysan(a)foss.st.com> drm: bridge: adv7511: fill stream capabilities P Praneesh <quic_ppranees(a)quicinc.com> wifi: ath12k: Fix end offset bit definition in monitor ring descriptor Aaradhana Sahu <quic_aarasahu(a)quicinc.com> wifi: ath12k: Fetch regdb.bin file from board-2.bin Rosen Penev <rosenp(a)gmail.com> wifi: ath9k: return by of_get_mac_address Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe/pf: Reset GuC VF config when unprovisioning critical resource Youssef Samir <quic_yabdulra(a)quicinc.com> accel/qaic: Mask out SR-IOV PCI resources Nicolas Escande <nico.escande(a)gmail.com> wifi: ath12k: fix ath12k_hal_tx_cmd_ext_desc_setup() info1 override Isaac Scott <isaac.scott(a)ideasonboard.com> regulator: ad5398: Add device tree support Sean Anderson <sean.anderson(a)linux.dev> spi: zynqmp-gqspi: Always acknowledge interrupts Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate Soeren Moch <smoch(a)web.de> wifi: rtl8xxxu: retry firmware download on error Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> clk: renesas: rzg2l-cpg: Refactor Runtime PM clock validation Ravi Bangoria <ravi.bangoria(a)amd.com> perf/amd/ibs: Fix ->config to sample period calculation for OP PMU Ravi Bangoria <ravi.bangoria(a)amd.com> perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt Sudeep Holla <sudeep.holla(a)arm.com> firmware: arm_scmi: Relax duplicate name constraint across protocol ids Viktor Malik <vmalik(a)redhat.com> bpftool: Fix readlink usage in get_fd_type Martin KaFai Lau <martin.lau(a)kernel.org> bpf: Use kallsyms to find the function name of a struct_ops's stub function Thomas Zimmermann <tzimmermann(a)suse.de> drm/ast: Find VBIOS mode from regular display size Matthew Sakai <msakai(a)redhat.com> dm vdo: use a short static string for thread name prefix Chung Chung <cchung(a)redhat.com> dm vdo indexer: prevent unterminated string warning Ken Raeburn <raeburn(a)redhat.com> dm vdo vio-pool: allow variable-sized metadata vios Vladimir Kondratiev <vladimir.kondratiev(a)mobileye.com> irqchip/riscv-aplic: Add support for hart indexes Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: rt722-sdca: Add some missing readable registers Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode Naman Trivedi <naman.trivedimanojbhai(a)amd.com> arm64: zynqmp: add clock-output-names property in clock nodes junan <junan76(a)163.com> HID: usbkbd: Fix the bit shift number for LED_KANA Avula Sri Charan <quic_asrichar(a)quicinc.com> wifi: ath12k: Avoid napi_sync() before napi_enable() Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: st: Restore some drive settings after reset Justin Tee <justin.tee(a)broadcom.com> scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails Justin Tee <justin.tee(a)broadcom.com> scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk Justin Tee <justin.tee(a)broadcom.com> scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine Konstantin Taranov <kotaranov(a)microsoft.com> net/mana: fix warning in the writer of client oob Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe/relay: Don't use GFP_KERNEL for new transactions Michal Swiatkowski <michal.swiatkowski(a)linux.intel.com> ice: count combined queues using Rx/Tx count Peter Zijlstra (Intel) <peterz(a)infradead.org> perf: Avoid the read if the count is already updated Ankur Arora <ankur.a.arora(a)oracle.com> rcu: fix header guard for rcu_all_qs() Ankur Arora <ankur.a.arora(a)oracle.com> rcu: handle unstable rdp in rcu_read_unlock_strict() Ankur Arora <ankur.a.arora(a)oracle.com> rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y Michal Swiatkowski <michal.swiatkowski(a)linux.intel.com> ice: treat dyn_allowed only as suggestion Michal Swiatkowski <michal.swiatkowski(a)linux.intel.com> ice: init flow director before RDMA Petr Machata <petrm(a)nvidia.com> bridge: mdb: Allow replace of a host-joined group Eric Dumazet <edumazet(a)google.com> net: flush_backlog() small changes Heiner Kallweit <hkallweit1(a)gmail.com> r8169: don't scan PHY addresses > 0 Geert Uytterhoeven <geert(a)linux-m68k.org> ipv4: ip_gre: Fix set but not used warning in ipgre_err() if IPv4-only Ido Schimmel <idosch(a)nvidia.com> vxlan: Annotate FDB data races Dhananjay Ugwekar <dhananjay.ugwekar(a)amd.com> cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost Carolina Jubran <cjubran(a)nvidia.com> net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled Jakub Kicinski <kuba(a)kernel.org> tools: ynl-gen: don't output external constants Alexander Duyck <alexanderduyck(a)meta.com> eth: fbnic: set IFF_UNICAST_FLT to avoid enabling promiscuous mode when adding unicast addrs Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> drm/rockchip: vop2: Improve display modes handling on RK3588 HDMI0 Depeng Shao <quic_depengs(a)quicinc.com> media: qcom: camss: Add default case in vfe_src_pad_code Depeng Shao <quic_depengs(a)quicinc.com> media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is available Jaegeuk Kim <jaegeuk(a)kernel.org> f2fs: introduce f2fs_base_attr for global sysfs entries Andrey Vatoropin <a.vatoropin(a)crpt.ru> hwmon: (xgene-hwmon) use appropriate type for the latency value Len Brown <len.brown(a)intel.com> tools/power turbostat: Clustered Uncore MHz counters should honor show/hide options Jakub Kicinski <kuba(a)kernel.org> net: page_pool: avoid false positive warning if NAPI was never added Jordan Crouse <jorcrous(a)amazon.com> clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: call power_on ahead before selecting firmware Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: fw: validate multi-firmware header before accessing Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: fw: validate multi-firmware header before getting its size Ching-Te Ku <ku920601(a)realtek.com> wifi: rtw89: coex: Assign value over than 0 to avoid firmware timer hang Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix __rtw_download_firmware() for RTL8814AU Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix download_firmware_validate() for RTL8814AU Zhang Yi <yi.zhang(a)huawei.com> ext4: remove writable userspace mappings before truncating page cache Zhang Yi <yi.zhang(a)huawei.com> ext4: don't write back data before punch hole in nojournal mode Marek Vasut <marex(a)denx.de> leds: trigger: netdev: Configure LED blink interval for HW offload Kees Cook <kees(a)kernel.org> pstore: Change kmsg_bytes storage size to u32 David Lechner <dlechner(a)baylibre.com> iio: adc: ad7944: don't use storagebits for sizing Aleksander Jan Bajkowski <olek2(a)wp.pl> r8152: add vendor/device ID pair for Dell Alienware AW1022z Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). Athira Rajeev <atrajeev(a)linux.vnet.ibm.com> arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src Gaurav Batra <gbatra(a)linux.ibm.com> powerpc/pseries/iommu: create DDW for devices with DMA mask less than 64-bits Gaurav Batra <gbatra(a)linux.ibm.com> powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory Csókás, Bence <csokas.bence(a)prolan.hu> net: fec: Refactor MAC reset to function Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: mac80211: set ieee80211_prep_tx_info::link_id upon Auth Rx Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: remove misplaced drv_mgd_complete_tx() call Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't unconditionally call drv_mgd_complete_tx() Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: iwlwifi: don't warn during reprobe Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: use correct IMR dump variable Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: userspace: flags: clearer msg if no remote addr P Praneesh <quic_ppranees(a)quicinc.com> wifi: ath12k: fix the ampdu id fetch in the HAL_RX_MPDU_START TLV Leon Romanovsky <leon(a)kernel.org> xfrm: prevent high SEQ input in non-ESN mode Stefan Wahren <wahrenst(a)gmx.net> drm/v3d: Add clock handling William Tu <witu(a)nvidia.com> net/mlx5e: reduce the max log mpwrq sz for ECPF and reps William Tu <witu(a)nvidia.com> net/mlx5e: reduce rep rxq depth to 256 for ECPF William Tu <witu(a)nvidia.com> net/mlx5e: set the tx_queue_len for pfifo_fast Alexei Lazar <alazar(a)nvidia.com> net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB Alexei Lazar <alazar(a)nvidia.com> net/mlx5: XDP, Enable TX side XDP multi-buffer support Chaohai Chen <wdhh66(a)163.com> scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr() Alex Deucher <alexander.deucher(a)amd.com> drm/amd/display/dm: drop hw_support check in amdgpu_dm_i2c_xfer() Shiwu Zhang <shiwu.zhang(a)amd.com> drm/amdgpu: enlarge the VBIOS binary size limit Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Use active umc info from discovery Dillon Varone <dillon.varone(a)amd.com> drm/amd/display: Populate register address for dentist for dcn401 Austin Zheng <Austin.Zheng(a)amd.com> drm/amd/display: Use Nominal vBlank If Provided Instead Of Capping It Joshua Aberback <joshua.aberback(a)amd.com> drm/amd/display: Increase block_sequence array size Tom Chung <chiahsuan.chung(a)amd.com> drm/amd/display: Initial psr_version with correct setting George Shen <george.shen(a)amd.com> drm/amd/display: Update CR AUX RD interval interpretation Brandon Syu <Brandon.Syu(a)amd.com> Revert "drm/amd/display: Exit idle optimizations before attempt to access PHY" Martin Tsai <Martin.Tsai(a)amd.com> drm/amd/display: Support multiple options during psr entry. Asad Kamal <asad.kamal(a)amd.com> drm/amd/pm: Skip P2S load for SMU v13.0.12 Jiang Liu <gerry(a)linux.alibaba.com> drm/amdgpu: reset psp->cmd to NULL after releasing the buffer Ilya Bakoulin <Ilya.Bakoulin(a)amd.com> drm/amd/display: Don't try AUX transactions on disconnected link Charlene Liu <Charlene.Liu(a)amd.com> drm/amd/display: pass calculated dram_speed_mts to dml2 Harish Kasiviswanathan <Harish.Kasiviswanathan(a)amd.com> drm/amdgpu: Set snoop bit for SDMA for MI series Eric Huang <jinhuieric.huang(a)amd.com> drm/amdkfd: fix missing L2 cache info in topology Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mes11: fix set_hw_resources_1 calculation Huacai Chen <chenhuacai(a)kernel.org> net: stmmac: dwmac-loongson: Set correct {tx,rx}_fifo_size Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: cadence_master: set frame shape and divider based on actual clk freq Vijendar Mukunda <Vijendar.Mukunda(a)amd.com> soundwire: amd: change the soundwire wake enable/disable sequence André Draszik <andre.draszik(a)linaro.org> phy: exynos5-usbdrd: fix EDS distribution tuning (gs101) Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> phy: core: don't require set_mode() callback for phy_get_mode() to work Damon Ding <damon.ding(a)rock-chips.com> phy: phy-rockchip-samsung-hdptx: Swap the definitions of LCPLL_REF and ROPLL_REF Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> pinctrl: renesas: rzg2l: Add suspend/resume support for pull up/down Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> serial: sh-sci: Update the suspend/resume support zihan zhou <15645113830zzh(a)gmail.com> sched: Reduce the default slice to avoid tasks getting an extra tick Peter Zijlstra <peterz(a)infradead.org> x86/traps: Cleanup and robustify decode_bug() Peter Zijlstra <peterz(a)infradead.org> x86/ibt: Handle FineIBT in handle_cfi_failure() Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/debugfs: Add missing xe_pm_runtime_put in wedge_mode_set Xin Wang <x.wang(a)intel.com> drm/xe/debugfs: fixed the return value of wedged_mode_set Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> clk: qcom: clk-alpha-pll: Do not use random stack value for recalc rate Karl Chan <exxxxkc(a)getgoogleoff.me> clk: qcom: ipq5018: allow it to be bulid on arm32 Lucas De Marchi <lucas.demarchi(a)intel.com> drm/xe: Fix xe_tile_init_noalloc() error propagation Lucas De Marchi <lucas.demarchi(a)intel.com> drm/xe: Stop ignoring errors from xe_ttm_stolen_mgr_init() Kees Cook <kees(a)kernel.org> net/mlx4_core: Avoid impossible mlx4_db_alloc() order value Sakari Ailus <sakari.ailus(a)linux.intel.com> media: v4l: Memset argument to 0 before calling get_mbus_config pad op David Plowman <david.plowman(a)raspberrypi.com> media: i2c: imx219: Correct the minimum vblanking value Brendan Jackman <jackmanb(a)google.com> kunit: tool: Use qboot on QEMU x86_64 Konstantin Andreev <andreev(a)swemel.ru> smack: Revert "smackfs: Added check catlen" Konstantin Andreev <andreev(a)swemel.ru> smack: recognize ipv4 CIPSO w/o categories Valentin Caron <valentin.caron(a)foss.st.com> pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot() Hector Martin <marcan(a)marcan.st> ASoC: tas2764: Power up/down amp on mute ops Hector Martin <marcan(a)marcan.st> ASoC: tas2764: Mark SW_RESET as volatile Hector Martin <marcan(a)marcan.st> ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG Martin Povišer <povik+lin(a)cutebit.org> ASoC: ops: Enforce platform maximum on initial value Siva Durga Prasad Paladugu <siva.durga.prasad.paladugu(a)amd.com> firmware: xilinx: Dont send linux address to get fpga config get status Sudeep Holla <sudeep.holla(a)arm.com> firmware: arm_ffa: Handle the presence of host partition in the partition info Sudeep Holla <sudeep.holla(a)arm.com> firmware: arm_ffa: Reject higher major version as incompatible Shahar Shitrit <shshitrit(a)nvidia.com> net/mlx5: Apply rate-limiting to high temperature warning Shahar Shitrit <shshitrit(a)nvidia.com> net/mlx5: Modify LSB bitmask in temperature event to include only the first bit Hans Verkuil <hverkuil(a)xs4all.nl> media: test-drivers: vivid: don't call schedule in loop Andrew Jones <ajones(a)ventanamicro.com> irqchip/riscv-imsic: Set irq_set_affinity() for IMSIC base Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> hrtimers: Replace hrtimer_clock_to_base_table with switch-case Brian Gerst <brgerst(a)gmail.com> x86/boot: Disable stack protector for early boot code Petr Machata <petrm(a)nvidia.com> vxlan: Join / leave MC group after remote changes Xiaofei Tan <tanxiaofei(a)huawei.com> ACPI: HED: Always initialize before evged Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Fix old_size lower bound in calculate_iosize() too Jakub Kicinski <kuba(a)kernel.org> eth: mlx4: don't try to complete XDP frames in netpoll Eduard Zingerman <eddyz87(a)gmail.com> bpf: copy_verifier_state() should copy 'loop_entry' field Eduard Zingerman <eddyz87(a)gmail.com> bpf: don't do clean_live_states when state->loop_entry->branches > 0 Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> can: c_can: Use of_property_present() to test existence of DT property Ahmad Fatoum <a.fatoum(a)pengutronix.de> pmdomain: imx: gpcv2: use proper helper for property detection Michael Margolin <mrgolin(a)amazon.com> RDMA/core: Fix best page size finding when it can cross SG entries Alexis Lothoré <alexis.lothore(a)bootlin.com> serial: mctrl_gpio: split disable_ms into sync and no_sync APIs Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink Leo Zeng <Leo.Zeng(a)amd.com> Revert "drm/amd/display: Request HW cursor on DCN3.2 with SubVP" George Shen <george.shen(a)amd.com> drm/amd/display: Read LTTPR ALPM caps during link cap retrieval Ilya Bakoulin <Ilya.Bakoulin(a)amd.com> drm/amd/display: Fix BT2020 YCbCr limited/full range input Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> drm/amd/display: Guard against setting dispclk low when active Harry VanZyllDeJong <hvanzyll(a)amd.com> drm/amd/display: Add support for disconnected eDP streams Lijo Lazar <lijo.lazar(a)amd.com> drm/amd/pm: Fetch current power limit from PMFW Anup Patel <apatel(a)ventanamicro.com> irqchip/riscv-imsic: Separate next and previous pointers in IMSIC vector Eddie James <eajames(a)linux.ibm.com> eeprom: ee1004: Check chip before probing Chris Morgan <macromorgan(a)hotmail.com> mfd: axp20x: AXP717: Add AXP717_TS_PIN_CFG to writeable regs Frank Li <Frank.Li(a)nxp.com> i3c: master: svc: Flush FIFO before sending Dynamic Address Assignment(DAA) Arnd Bergmann <arnd(a)arndb.de> EDAC/ie31200: work around false positive build warning Chris Morgan <macromorgan(a)hotmail.com> power: supply: axp20x_battery: Update temp sensor for AXP717 from device tree Peter Seiderer <ps.report(a)gmx.net> net: pktgen: fix access outside of user given buffer in pktgen_thread_write() Kuan-Chung Chen <damon.chen(a)realtek.com> wifi: rtw89: 8922a: fix incorrect STA-ID in EHT MU PPDU Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: fw: add blacklist to avoid obsolete secure firmware Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: fw: get sb_sel_ver via get_unaligned_le32() Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: fw: propagate error code from rtw89_h2c_tx() Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31 Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU Shivasharan S <shivasharan.srikanteshwara(a)broadcom.com> scsi: mpt3sas: Send a diag reset if target reset fails Mrinmay Sarkar <quic_msarkar(a)quicinc.com> PCI: epf-mhi: Update device ID for SA8775P Paul Burton <paulburton(a)kernel.org> clocksource: mips-gic-timer: Enable counter when CPUs start Paul Burton <paulburton(a)kernel.org> MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core Jason Gunthorpe <jgg(a)ziepe.ca> genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie Uros Bizjak <ubizjak(a)gmail.com> x86/locking: Use ALT_OUTPUT_SP() for percpu_{,try_}cmpxchg{64,128}_op() Christian König <christian.koenig(a)amd.com> drm/amdgpu: remove all KFD fences from the BO on release Bibo Mao <maobibo(a)loongson.cn> MIPS: Use arch specific syscall name match function Umesh Nerlige Ramappa <umesh.nerlige.ramappa(a)intel.com> drm/xe/oa: Ensure that polled read returns latest data Xiao Liang <shaw.leon(a)gmail.com> net: ipv6: Init tunnel link-netns before registering dev Herbert Xu <herbert(a)gondor.apana.org.au> crypto: skcipher - Zap type in crypto_alloc_sync_skcipher Herbert Xu <herbert(a)gondor.apana.org.au> crypto: ahash - Set default reqsize from ahash_alg Balbir Singh <balbirs(a)nvidia.com> x86/kaslr: Reduce KASLR entropy on most x86 systems Patrisious Haddad <phaddad(a)nvidia.com> net/mlx5: Change POOL_NEXT_SIZE define value and make it global Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: scsi_debug: First fixes for tapes Jinliang Zheng <alexjlzheng(a)gmail.com> dm: fix unconditional IO throttle caused by REQ_PREFLUSH Nandakumar Edamana <nandakumar(a)nandakumar.co.in> libbpf: Fix out-of-bound read Christoph Hellwig <hch(a)lst.de> loop: check in LO_FLAGS_DIRECT_IO in loop_default_blocksize Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpi3mr: Update timestamp only for supervisor IOCs Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Add correct match to check IPSec syndromes for switchdev mode Matthias Fend <matthias.fend(a)emfend.at> media: tc358746: improve calculation of the D-PHY timing registers Niklas Söderlund <niklas.soderlund+renesas(a)ragnatech.se> media: adv7180: Disable test-pattern control on adv7180 Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpuidle: menu: Avoid discarding useful information Konstantin Shkolnyy <kshk(a)linux.ibm.com> vdpa/mlx5: Fix mlx5_vdpa_get_config() endianness on big-endian machines Mike Christie <michael.christie(a)oracle.com> vhost-scsi: Return queue full for page alloc failures during copy Waiman Long <longman(a)redhat.com> x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() Nícolas F. R. A. Prado <nfraprado(a)collabora.com> ASoC: mediatek: mt8188: Add reference for dmic clocks Nícolas F. R. A. Prado <nfraprado(a)collabora.com> ASoC: mediatek: mt8188: Treat DMIC_GAINx_CUR as non-volatile Assadian, Navid <navid.assadian(a)amd.com> drm/amd/display: Fix mismatch type comparison Charlene Liu <Charlene.Liu(a)amd.com> drm/amd/display: fix dcn4x init failed Yihan Zhu <Yihan.Zhu(a)amd.com> drm/amd/display: handle max_downscale_src_width fail check Nir Lichtman <nir(a)lichtman.org> x86/build: Fix broken copy command in genimage.sh when making isoimage Hariprasad Kelam <hkelam(a)marvell.com> Octeontx2-af: RPM: Register driver with PCI subsys IDs Amery Hung <amery.hung(a)bytedance.com> bpf: Search and add kfuncs in struct_ops prologue and epilogue Andrew Davis <afd(a)ti.com> soc: ti: k3-socinfo: Do not use syscon helper to build regmap Ramasamy Kaliappan <quic_rkaliapp(a)quicinc.com> wifi: ath12k: Improve BSS discovery with hidden SSID in 6 GHz band Hangbin Liu <liuhangbin(a)gmail.com> bonding: report duplicate MAC address in all situations Arnd Bergmann <arnd(a)arndb.de> net: xgene-v2: remove incorrect ACPI_PTR annotation Eric Woudstra <ericwouds(a)gmail.com> net: ethernet: mtk_ppe_offload: Allow QinQ, double ETH_P_8021Q only Yuanjun Gong <ruc_gongyuanjun(a)163.com> leds: pwm-multicolor: Add check for fwnode_property_read_u32 Daniel Gomez <da.gomez(a)samsung.com> drm/xe: xe_gen_wa_oob: replace program_invocation_short_name Philip Yang <Philip.Yang(a)amd.com> drm/amdkfd: KFD release_work possible circular locking Inochi Amaoto <inochiama(a)gmail.com> pinctrl: sophgo: avoid to modify untouched bit when setting cv1800 pinconf Kevin Krakauer <krakauer(a)google.com> selftests/net: have `gro.sh -t` return a correct exit code Moshe Shemesh <moshe(a)nvidia.com> net/mlx5: Avoid report two health errors on same syndrome Satyanarayana K V P <satyanarayana.k.v.p(a)intel.com> drm/xe/pf: Create a link between PF and VF devices Satyanarayana K V P <satyanarayana.k.v.p(a)intel.com> drm/xe/vf: Retry sending MMIO request to GUC on timeout error Viresh Kumar <viresh.kumar(a)linaro.org> firmware: arm_ffa: Set dma_mask for ffa devices Stanimir Varbanov <svarbanov(a)suse.de> PCI: brcmstb: Add a softdep to MIP MSI-X driver Stanimir Varbanov <svarbanov(a)suse.de> PCI: brcmstb: Expand inbound window size up to 64GB Vinith Kumar R <quic_vinithku(a)quicinc.com> wifi: ath12k: Report proper tx completion status to mac80211 Hector Martin <marcan(a)marcan.st> soc: apple: rtkit: Implement OSLog buffers properly Janne Grunau <j(a)jannau.net> soc: apple: rtkit: Use high prio work queue Rob Herring (Arm) <robh(a)kernel.org> perf: arm_pmuv3: Call kvm_vcpu_pmu_resync_el0() before enabling counters Kuhanh Murugasen Krishnan <kuhanh.murugasen.krishnan(a)intel.com> fpga: altera-cvp: Increase credit timeout AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence Li Bin <bin.li(a)microchip.com> ARM: at91: pm: fix at91_suspend_finish for ZQ calibration Alexander Stein <alexander.stein(a)ew.tq-group.com> hwmon: (gpio-fan) Add missing mutex locks Breno Leitao <leitao(a)debian.org> x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 Ahmad Fatoum <a.fatoum(a)pengutronix.de> clk: imx8mp: inform CCF of maximum frequency of clocks Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map Caleb Sander Mateos <csander(a)purestorage.com> ublk: complete command synchronously on error Christoph Hellwig <hch(a)lst.de> block: mark bounce buffering as incompatible with integrity Andy Yan <andy.yan(a)rock-chips.com> drm/rockchip: vop2: Add uv swap for cluster window Kuniyuki Iwashima <kuniyu(a)amazon.com> ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). Nicolas Bouchinet <nicolas.bouchinet(a)ssi.gouv.fr> scsi: logging: Fix scsi_logging_level bounds Maciej S. Szmigiero <mail(a)maciej.szmigiero.name> ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7 Saket Kumar Bhaskar <skb99(a)linux.ibm.com> perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type Peter Seiderer <ps.report(a)gmx.net> net: pktgen: fix mpls maximum labels list parsing Paul Elder <paul.elder(a)ideasonboard.com> media: imx335: Set vblank immediately Yi Liu <yi.l.liu(a)intel.com> iommufd: Disallow allocating nested parent domain with fault ID Uday Shankar <ushankar(a)purestorage.com> ublk: enforce ublks_max only for unprivileged devices Jiasheng Jiang <jiashengjiangcool(a)gmail.com> dpll: Add an assertion to check freq_supported_num Andrei Botila <andrei.botila(a)oss.nxp.com> net: phy: nxp-c45-tja11xx: add match_phy_device to TJA1103/TJA1104 Alexander Sverdlin <alexander.sverdlin(a)siemens.com> net: ethernet: ti: cpsw_new: populate netdev of_node Paul E. McKenney <paulmck(a)kernel.org> rcu: Fix get_state_synchronize_rcu_full() GP-start detection Artur Weber <aweber.kernel(a)gmail.com> pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" Hans Verkuil <hverkuil(a)xs4all.nl> media: cx231xx: set device_caps for 417 Peter Zijlstra <peterz(a)infradead.org> perf/core: Clean up perf_try_init_event() Aric Cyr <Aric.Cyr(a)amd.com> drm/amd/display: Request HW cursor on DCN3.2 with SubVP Dillon Varone <Dillon.Varone(a)amd.com> drm/amd/display: Fix p-state type when p-state is unsupported Dillon Varone <Dillon.Varone(a)amd.com> drm/amd/display: Fix DMUB reset sequence for DCN401 George Shen <george.shen(a)amd.com> drm/amd/display: Skip checking FRL_MODE bit for PCON BW determination Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> drm/amd/display: Ensure DMCUB idle before reset on DCN31/DCN35 Victor Lu <victorchengchi.lu(a)amd.com> drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c Matti Lehtimäki <matti.lehtimaki(a)gmail.com> remoteproc: qcom_wcnss: Handle platforms with only single power domain Ming Lei <ming.lei(a)redhat.com> blk-throttle: don't take carryover for prioritized processing of metadata Choong Yong Liang <yong.liang.choong(a)linux.intel.com> net: phylink: use pl->link_interface in phylink_expects_phy() Thomas Zimmermann <tzimmermann(a)suse.de> drm/gem: Test for imported GEM buffers with helper Matthew Wilcox (Oracle) <willy(a)infradead.org> orangefs: Do not truncate file size AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> soc: mediatek: mtk-mutex: Add DPI1 SOF/EOF to MT8188 mutex tables Ming-Hung Tsai <mtsai(a)redhat.com> dm cache: prevent BUG_ON by blocking retries on failed device resumes Niklas Neronin <niklas.neronin(a)linux.intel.com> usb: xhci: set page size to the xHCI-supported size Markus Elfring <elfring(a)users.sourceforge.net> media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() Svyatoslav Ryhel <clamor95(a)gmail.com> ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 Arnd Bergmann <arnd(a)arndb.de> soc: samsung: include linux/array_size.h where needed Matthew Brost <matthew.brost(a)intel.com> drm/xe: Retry BO allocation Matthew Brost <matthew.brost(a)intel.com> drm/xe: Nuke VM's mapping upon close Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> ieee802154: ca8210: Use proper setters and getters for bitwise types Alexandre Belloni <alexandre.belloni(a)bootlin.com> rtc: ds1307: stop disabling alarms on probe Eric Dumazet <edumazet(a)google.com> tcp: bring back NUMA dispersion in inet_ehash_locks_alloc() Takashi Iwai <tiwai(a)suse.de> ALSA: seq: Improve data consistency at polling Andreas Schwab <schwab(a)linux-m68k.org> powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 Jon Hunter <jonathanh(a)nvidia.com> arm64: tegra: Resize aperture for the IGX PCIe C5 slot Diogo Ivo <diogo.ivo(a)tecnico.ulisboa.pt> arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator Emily Deng <Emily.Deng(a)amd.com> drm/amdgpu: Fix missing drain retry fault the last entry Harish Kasiviswanathan <Harish.Kasiviswanathan(a)amd.com> drm/amdkfd: Set per-process flags only once cik/vi Harish Kasiviswanathan <Harish.Kasiviswanathan(a)amd.com> drm/amdkfd: Set per-process flags only once for gfx9/10/11/12 Sven Schwermer <sven(a)svenschwermer.de> crypto: mxs-dcp - Only set OTP_KEY bit for OTP key Herbert Xu <herbert(a)gondor.apana.org.au> crypto: lzo - Fix compression buffer overrun Niklas Cassel <cassel(a)kernel.org> misc: pci_endpoint_test: Give disabled BARs a distinct error code Christian Bruel <christian.bruel(a)foss.st.com> PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops Chin-Ting Kuo <chin-ting_kuo(a)aspeedtech.com> watchdog: aspeed: Update bootstatus handling Aaron Kling <luceoscutum(a)gmail.com> cpufreq: tegra186: Share policy per cluster Vasant Hegde <vasant.hegde(a)amd.com> iommu/amd/pgtbl_v2: Improve error handling Yeoreum Yun <yeoreum.yun(a)arm.com> coresight-etb10: change etb_drvdata spinlock's type to raw_spinlock_t Coly Li <colyli(a)kernel.org> badblocks: Fix a nonsense WARN_ON() which checks whether a u64 variable < 0 Alexey Klimov <alexey.klimov(a)linaro.org> ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct hd44780_common" Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: Check for empty queue in run_queue Leon Huang <Leon.Huang1(a)amd.com> drm/amd/display: Fix incorrect DPCD configs while Replay/PSR switch Peichen Huang <PeiChen.Huang(a)amd.com> drm/amd/display: not abort link train when bw is low Zhikai Zhai <zhikai.zhai(a)amd.com> drm/amd/display: calculate the remain segments for all pipes Charlene Liu <Charlene.Liu(a)amd.com> drm/amd/display: remove minimum Dispclk and apply oem panel timing. Willem de Bruijn <willemb(a)google.com> ipv6: save dontfrag in cork Anjaneyulu <pagadala.yesu.anjaneyulu(a)intel.com> wifi: cfg80211: allow IR in 20 MHz configurations Ilan Peer <ilan.peer(a)intel.com> wifi: mac80211_hwsim: Fix MLD address translation Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: fix warning on disconnect during failed ML reconf Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: fix the ECKV UEFI variable name Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: mark Br device not integrated Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: fix debug actions order Daniel Gabay <daniel.gabay(a)intel.com> wifi: iwlwifi: w/a FW SMPS mode selection Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: iwlwifi: don't warn when if there is a FW error Marcos Paulo de Souza <mpdesouza(a)suse.com> printk: Check CON_SUSPEND when unblanking a console Robin Murphy <robin.murphy(a)arm.com> iommu: Keep dev->iommu state consistent Kurt Borja <kuurtb(a)gmail.com> hwmon: (dell-smm) Increment the number of fans Avraham Stern <avraham.stern(a)intel.com> wifi: iwlwifi: mvm: fix setting the TK when associated Michal Pecio <michal.pecio(a)gmail.com> usb: xhci: Don't change the status of stalled TDs on failed Stop EP Erick Shepherd <erick.shepherd(a)ni.com> mmc: sdhci: Disable SD card clock before changing parameters Kaustabh Chakraborty <kauschluss(a)disroot.org> mmc: dw_mmc: add exynos7870 DW MMC support Ryan Roberts <ryan.roberts(a)arm.com> arm64/mm: Check PUD_TYPE_TABLE in pud_bad() Ryan Roberts <ryan.roberts(a)arm.com> arm64/mm: Check pmd_table() in pmd_trans_huge() Andy Yan <andy.yan(a)rock-chips.com> phy: rockchip: usbdp: Only verify link rates/lanes/voltage when the corresponding set flags are set Kees Cook <kees(a)kernel.org> PNP: Expand length of fixup id string Nicolas Bouchinet <nicolas.bouchinet(a)ssi.gouv.fr> netfilter: conntrack: Bound nf_conntrack sysctl writes Dian-Syuan Yang <dian_syuan0116(a)realtek.com> wifi: rtw89: set force HE TB mode when connecting to 11ax AP Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> timer_list: Don't use %pK through printk() Jaakko Karrenpalo <jkarrenpalo(a)gmail.com> net: hsr: Fix PRP duplicate detection Jonas Karlman <jonas(a)kwiboo.se> net: stmmac: dwmac-rk: Validate GRF and peripheral GRF during probe Thomas Gleixner <tglx(a)linutronix.de> posix-timers: Ensure that timer initialization is fully visible Eric Dumazet <edumazet(a)google.com> posix-timers: Add cond_resched() to posix_timer_add() search loop Maher Sanalla <msanalla(a)nvidia.com> RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject() Baokun Li <libaokun1(a)huawei.com> ext4: do not convert the unwritten extents if data writeback fails Baokun Li <libaokun1(a)huawei.com> ext4: reject the 'data_err=abort' option in nojournal mode Taniya Das <quic_tdas(a)quicinc.com> clk: qcom: lpassaudiocc-sc7280: Add support for LPASS resets for QCM6490 Ryan Walklin <ryan(a)testtoast.com> ASoC: sun4i-codec: support hp-det-gpios property David Rosca <david.rosca(a)amd.com> drm/amdgpu: Update SRIOV video codec caps Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx11: don't read registers in mqd init Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx12: don't read registers in mqd init Shree Ramamoorthy <s-ramamoorthy(a)ti.com> mfd: tps65219: Remove TPS65219_REG_TI_DEV_ID check Prathamesh Shete <pshete(a)nvidia.com> pinctrl-tegra: Restore SFSEL bit when freeing pins Frediano Ziglio <frediano.ziglio(a)cloud.com> xen: Add support for XenServer 6.1 platform device Guangguan Wang <guangguan.wang(a)linux.alibaba.com> net/smc: use the correct ndev to find pnetid by pnetid table Mikulas Patocka <mpatocka(a)redhat.com> dm: restrict dm device size to 2^63-512 bytes Shashank Gupta <shashankg(a)marvell.com> crypto: octeontx2 - suppress auth failure screaming due to negative tests Masahiro Yamada <masahiroy(a)kernel.org> kconfig: do not clear SYMBOL_VALID when reading include/config/auto.conf Seyediman Seyedarab <imandevel(a)gmail.com> kbuild: fix argument parsing in scripts/config Yonghong Song <yonghong.song(a)linux.dev> bpf: Allow pre-ordering for bpf cgroup progs Nícolas F. R. A. Prado <nfraprado(a)collabora.com> ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect Linus Walleij <linus.walleij(a)linaro.org> ASoC: pcm6240: Drop bogus code handling IRQ as GPIO Sergio Perez Gonzalez <sperezglz(a)gmail.com> spi: spi-mux: Fix coverity issue, unchecked return value Gao Xiang <xiang(a)kernel.org> erofs: initialize decompression early Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for retimer Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Fix error handling inconsistencies in check() Alexandre Belloni <alexandre.belloni(a)bootlin.com> rtc: rv3032: fix EERD location Ilpo Järvinen <ij(a)kernel.org> tcp: reorganize tcp_in_ack_event() and tcp_count_delivered() Jan Kara <jack(a)suse.cz> jbd2: do not try to recover wiped journal Frank Li <Frank.Li(a)nxp.com> PCI: dwc: Use resource start as ioremap() input in dw_pcie_pme_turn_off() Mykyta Yatsenko <yatsenko(a)meta.com> bpf: Return prog btf_id without capable check Alex Williamson <alex.williamson(a)redhat.com> vfio/pci: Handle INTx IRQ_NOTCONNECTED Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: st: ERASE does not change tape location Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: st: Tighten the page format heuristics with MODE SELECT Al Viro <viro(a)zeniv.linux.org.uk> hypfs_create_cpu_files(): add missing check for hypfs_mkdir() failure Christian Göttsche <cgzones(a)googlemail.com> ext4: reorder capability check last Alexandre Ghiti <alexghiti(a)rivosinc.com> riscv: Call secondary mmu notifier when flushing the tlb shantiprasad shettar <shantiprasad.shettar(a)broadcom.com> bnxt_en: Query FW parameters when the CAPS_CHANGE bit is set Jeff Chen <jeff.chen_1(a)nxp.com> wifi: mwifiex: Fix HT40 bandwidth issue. Tiwei Bie <tiwei.btw(a)antgroup.com> um: Update min_low_pfn to match changes in uml_reserved Benjamin Berg <benjamin(a)sipsolutions.net> um: Store full CSGSFS and SS register from mcontext Nick Hu <nick.hu(a)sifive.com> clocksource/drivers/timer-riscv: Stop stimecmp when cpu hotplug Heming Zhao <heming.zhao(a)suse.com> dlm: make tcp still work in multi-link env Heiko Carstens <hca(a)linux.ibm.com> s390/tlb: Use mm_has_pgste() instead of mm_alloc_pgste() Stanley Chu <yschu(a)nuvoton.com> i3c: master: svc: Fix missing STOP for master request Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: adjust drm_firmware_drivers_only() handling Jing Zhou <Jing.Zhou(a)amd.com> drm/amd/display: Guard against setting dispclk low for dcn31x Flora Cui <flora.cui(a)amd.com> drm/amdgpu: release xcp_mgr on exit Chen Linxuan <chenlinxuan(a)uniontech.com> blk-cgroup: improve policy registration error handling Filipe Manana <fdmanana(a)suse.com> btrfs: send: return -ENAMETOOLONG when attempting a path that is too long Filipe Manana <fdmanana(a)suse.com> btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work() Filipe Manana <fdmanana(a)suse.com> btrfs: fix non-empty delayed iputs list on unmount due to async workers Qu Wenruo <wqu(a)suse.com> btrfs: run btrfs_error_commit_super() early Mark Harmstone <maharmstone(a)fb.com> btrfs: avoid linker error in btrfs_find_create_tree_block() Boris Burkov <boris(a)bur.io> btrfs: make btrfs_discard_workfn() block_group ref explicit Vitalii Mordan <mordan(a)ispras.ru> i2c: pxa: fix call balance of i2c->clk handling routines Stephan Gerhold <stephan.gerhold(a)kernkonzept.com> i2c: qup: Vote for interconnect bandwidth to DRAM Philip Redkin <me(a)rarity.fan> x86/mm: Check return value from memblock_phys_alloc_range() Sohil Mehta <sohil.mehta(a)intel.com> x86/microcode: Update the Intel processor flag scan check Sohil Mehta <sohil.mehta(a)intel.com> x86/smpboot: Fix INIT delay assignment for extended Intel Families Ingo Molnar <mingo(a)kernel.org> x86/stackprotector/64: Only export __ref_stack_chk_guard on CONFIG_SMP Thomas Huth <thuth(a)redhat.com> x86/headers: Replace __ASSEMBLY__ with __ASSEMBLER__ in UAPI headers Quan Zhou <quan.zhou(a)mediatek.com> wifi: mt76: mt7925: fix fails to enter low power mode in suspend state Ming Yen Hsieh <mingyen.hsieh(a)mediatek.com> wifi: mt76: mt7925: load the appropriate CLC data based on hardware type Benjamin Lin <benjamin-jw.lin(a)mediatek.com> wifi: mt76: mt7996: revise TXS size Rex Lu <rex.lu(a)mediatek.com> wifi: mt76: mt7996: fix SER reset trigger on WED reset Felix Fietkau <nbd(a)nbd.name> wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2 Eric Dumazet <edumazet(a)google.com> cgroup/rstat: avoid disabling irqs for O(num_cpu) Victor Skvortsov <victor.skvortsov(a)amd.com> drm/amdgpu: Skip pcie_replay_count sysfs creation for VF Erick Shepherd <erick.shepherd(a)ni.com> mmc: host: Wait for Vdd to settle on card power off Stefan Wahren <wahrenst(a)gmx.net> staging: vchiq_arm: Create keep-alive thread during probe Christian Brauner <brauner(a)kernel.org> pidfs: improve multi-threaded exec and premature thread-group leader exit polling Robert Richter <rrichter(a)amd.com> libnvdimm/labels: Fix divide error in nd_label_data_init() Nicolas Bretz <bretznic(a)gmail.com> ext4: on a remount, only log the ro or r/w state when it has changed Roger Pau Monne <roger.pau(a)citrix.com> xen/pci: Do not register devices with segments >= 0x10000 Roger Pau Monne <roger.pau(a)citrix.com> PCI: vmd: Disable MSI remapping bypass under Xen Jonathan Kim <jonathan.kim(a)amd.com> drm/amdkfd: set precise mem ops caps to disabled for gfx 11 and 12 Flora Cui <flora.cui(a)amd.com> drm/amdgpu/discovery: check ip_discovery fw file available Trond Myklebust <trond.myklebust(a)hammerspace.com> pNFS/flexfiles: Report ENETDOWN as a connection error Ian Rogers <irogers(a)google.com> tools/build: Don't pass test log files to linker ChunHao Lin <hau(a)realtek.com> r8169: disable RTL8126 ZRX-DC timeout Frank Li <Frank.Li(a)nxp.com> PCI: dwc: ep: Ensure proper iteration over outbound map windows Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Properly disable uaccess validation Ryo Takakura <ryotkkr98(a)gmail.com> lockdep: Fix wait context check on softirq for PREEMPT_RT Jing Su <jingsusu(a)didiglobal.com> dql: Fix dql->limit value when reset. Pedro Nishiyama <nishiyama.pedro(a)gmail.com> Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken Sean Wang <sean.wang(a)mediatek.com> Bluetooth: btmtksdio: Prevent enabling interrupts after IRQ handler removal Alice Guo <alice.guo(a)nxp.com> thermal/drivers/qoriq: Power down TMU on system suspend Nícolas F. R. A. Prado <nfraprado(a)collabora.com> thermal/drivers/mediatek/lvts: Start sensor interrupts disabled Hans-Frieder Vogt <hfdevel(a)gmx.net> net: tn40xx: create swnode for mdio and aqr105 phy and add to mdiobus Hans-Frieder Vogt <hfdevel(a)gmx.net> net: tn40xx: add pci-id of the aqr105-based Tehuti TN4010 cards Daniel Hsu <d486250(a)gmail.com> mctp: Fix incorrect tx flow invalidation condition in mctp-i2c Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> ASoC: codecs: wsa883x: Correct VI sense channel mask Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> ASoC: codecs: wsa884x: Correct VI sense channel mask Luis de Arquer <luis.dearquer(a)inertim.com> spi-rockchip: Fix register out of bounds access Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: rpcbind should never reset the port to the value '0' Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: rpc_clnt_set_transport() must not change the autobind setting Trond Myklebust <trond.myklebust(a)hammerspace.com> NFSv4: Treat ENETUNREACH errors as fatal for state recovery Pali Rohár <pali(a)kernel.org> cifs: Fix establishing NetBIOS session for SMB2+ connection Namjae Jeon <linkinjeon(a)kernel.org> cifs: add validation check for the fields in smb_aces Pali Rohár <pali(a)kernel.org> cifs: Set default Netbios RFC1001 server name to hostname in UNC Zsolt Kajtar <soci(a)c64.rulez.org> fbdev: core: tileblit: Implement missing margin clearing for tileblit Zsolt Kajtar <soci(a)c64.rulez.org> fbcon: Use correct erase colour for clearing in fbcon Shixiong Ou <oushixiong(a)kylinos.cn> fbdev: fsl-diu-fb: add missing device_remove_file() Samuel Holland <samuel.holland(a)sifive.com> riscv: Allow NOMMU kernels to access all of RAM Tudor Ambarus <tudor.ambarus(a)linaro.org> mailbox: use error ret code of of_parse_phandle_with_args() Sudeep Holla <sudeep.holla(a)arm.com> mailbox: pcc: Use acpi_os_ioremap() instead of ioremap() Jonathan McDowell <noodles(a)meta.com> tpm: Convert warn to dbg in tpm2_start_auth_session() Diogo Ivo <diogo.ivo(a)siemens.com> ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> tracing: Mark binary printing functions with __printf() attribute Yi Liu <yi.l.liu(a)intel.com> iommufd: Extend IOMMU_GET_HW_INFO to report PASID capability Jinqian Yang <yangjinqian1(a)huawei.com> arm64: Add support for HIP09 Spectre-BHB mitigation Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: Don't allow waiting for exiting tasks Trond Myklebust <trond.myklebust(a)hammerspace.com> NFS: Don't allow waiting for exiting tasks Trond Myklebust <trond.myklebust(a)hammerspace.com> NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() Pavel Begunkov <asml.silence(a)gmail.com> io_uring/msg: initialise msg request opcode Sungjong Seo <sj1557.seo(a)samsung.com> exfat: call bh_read in get_block only when necessary Matt Johnston <matt(a)codeconstruct.com.au> fuse: Return EPERM rather than ENOSYS from link() Wang Zhaolong <wangzhaolong1(a)huawei.com> smb: client: Store original IO parameters and prevent zero IO sizes Pali Rohár <pali(a)kernel.org> cifs: Fix negotiate retry functionality Pali Rohár <pali(a)kernel.org> cifs: Fix querying and creating MF symlinks over SMB1 Pali Rohár <pali(a)kernel.org> cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES Anthony Krowiak <akrowiak(a)linux.ibm.com> s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log Xin Li (Intel) <xin(a)zytor.com> x86/fred: Fix system hang during S4 resume with FRED enabled Daniel Gomez <da.gomez(a)samsung.com> kconfig: merge_config: use an empty file as initfile Haoran Jiang <jianghaoran(a)kylinos.cn> samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora Brandon Kammerdiener <brandon.kammerdiener(a)intel.com> bpf: fix possible endless loop in BPF map iteration Pavel Begunkov <asml.silence(a)gmail.com> io_uring: don't duplicate flushing in io_req_post_cqe Darrick J. Wong <djwong(a)kernel.org> block: fix race between set_blocksize and read paths Ihor Solodrai <ihor.solodrai(a)linux.dev> selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure Felix Kuehling <felix.kuehling(a)amd.com> drm/amdgpu: Allow P2P access through XGMI Nicholas Susanto <nsusanto(a)amd.com> drm/amd/display: Enable urgent latency adjustment on DCN35 Davidlohr Bueso <dave(a)stgolabs.net> fs/ext4: use sleeping version of sb_find_get_block() Davidlohr Bueso <dave(a)stgolabs.net> fs/jbd2: use sleeping version of __find_get_block() Davidlohr Bueso <dave(a)stgolabs.net> fs/ocfs2: use sleeping version of __find_get_block() Davidlohr Bueso <dave(a)stgolabs.net> fs/buffer: use sleeping version of __find_get_block() Davidlohr Bueso <dave(a)stgolabs.net> fs/buffer: introduce sleeping flavors for pagecache lookups Davidlohr Bueso <dave(a)stgolabs.net> fs/buffer: split locking for pagecache lookups Frederick Lawler <fred(a)cloudflare.com> ima: process_measurement() needlessly takes inode_lock() on MAY_READ Balbir Singh <balbirs(a)nvidia.com> dma-mapping: Fix warning reported for missing prototype Vladimir Oltean <vladimir.oltean(a)nxp.com> net: enetc: refactor bulk flipping of RX buffers to separate function Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpi3mr: Add level check to control event logging Dongli Zhang <dongli.zhang(a)oracle.com> vhost-scsi: protect vq->log_used with vq->mutex Stefano Garzarella <sgarzare(a)redhat.com> vhost_task: fix vhost_task_create() documentation gaoxu <gaoxu2(a)honor.com> cgroup: Fix compilation issue due to cgroup_mutex not being exported Marek Szyprowski <m.szyprowski(a)samsung.com> dma-mapping: avoid potential unused data compilation warning Hans de Goede <hdegoede(a)redhat.com> mei: vsc: Use struct vsc_tp_packet as vsc-tp tx_buf and rx_buf type Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com> intel_th: avoid using deprecated page->mapping, index fields Balbir Singh <balbirs(a)nvidia.com> dma/mapping.c: dev_dbg support for dma_addressing_limited Zhongqiu Han <quic_zhonhan(a)quicinc.com> virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN Manish Pandey <quic_mapa(a)quicinc.com> scsi: ufs: Introduce quirk to extend PA_HIBERN8TIME for UFS devices Dmitry Bogdanov <d.bogdanov(a)yadro.com> scsi: target: iscsi: Fix timeout on deleted connection Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> nvmem: qfprom: switch to 4-byte aligned reads Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> nvmem: core: update raw_len if the bit reading is required Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> nvmem: core: verify cell's raw_len Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> nvmem: core: fix bit offsets of more than one byte Heiko Stuebner <heiko(a)sntech.de> nvmem: rockchip-otp: add rk3576 variant data Heiko Stuebner <heiko(a)sntech.de> nvmem: rockchip-otp: Move read-offset into variant-data Pengyu Luo <mitltlatltl(a)gmail.com> cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Move IRQ request in probe Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> i2c: designware: Fix an error handling path in i2c_dw_pci_probe() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> i2c: designware: Use temporary variable for struct device John Olender <john.olender(a)gmail.com> drm/amd/display: Defer BW-optimization-blocked DRR adjustments Zhongwei Zhang <Zhongwei.Zhang(a)amd.com> drm/amd/display: Correct timing_adjust_pending flag setting. Danny Wang <danny.wang(a)amd.com> drm/amd/display: Do not enable replay when vtotal update is pending. Dillon Varone <dillon.varone(a)amd.com> drm/amd/display: Configure DTBCLK_P with OPTC only for dcn401 ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 2 + Documentation/driver-api/serial/driver.rst | 2 +- Documentation/hwmon/dell-smm-hwmon.rst | 14 +- Makefile | 8 +- arch/arm/boot/dts/nvidia/tegra114.dtsi | 2 +- arch/arm/mach-at91/pm.c | 21 +- .../boot/dts/allwinner/sun50i-h6-beelink-gs1.dts | 38 ++-- .../boot/dts/allwinner/sun50i-h6-orangepi-3.dts | 14 +- .../boot/dts/allwinner/sun50i-h6-orangepi.dtsi | 22 +- arch/arm64/boot/dts/marvell/armada-3720-uDPU.dtsi | 8 +- arch/arm64/boot/dts/nvidia/tegra210-p2597.dtsi | 2 +- .../dts/nvidia/tegra234-p3740-0002+p3701-0008.dts | 10 + arch/arm64/boot/dts/xilinx/zynqmp-clk-ccf.dtsi | 15 +- arch/arm64/include/asm/cputype.h | 2 + arch/arm64/include/asm/pgtable.h | 27 +-- arch/arm64/kernel/proton-pack.c | 1 + arch/loongarch/kernel/Makefile | 8 +- arch/loongarch/kvm/Makefile | 2 +- arch/mips/include/asm/ftrace.h | 16 ++ arch/mips/kernel/pm-cps.c | 30 +-- arch/powerpc/include/asm/mmzone.h | 1 + arch/powerpc/kernel/prom_init.c | 4 +- arch/powerpc/mm/book3s64/radix_pgtable.c | 3 +- arch/powerpc/mm/numa.c | 2 +- arch/powerpc/perf/core-book3s.c | 20 ++ arch/powerpc/perf/isa207-common.c | 4 +- arch/powerpc/platforms/pseries/iommu.c | 139 ++++++++++--- arch/riscv/include/asm/page.h | 12 +- arch/riscv/include/asm/pgtable.h | 2 +- arch/riscv/kernel/Makefile | 4 +- arch/riscv/mm/tlbflush.c | 37 ++-- arch/s390/hypfs/hypfs_diag_fs.c | 2 + arch/s390/include/asm/tlb.h | 2 +- arch/um/kernel/mem.c | 1 + arch/x86/Kconfig | 1 + arch/x86/boot/genimage.sh | 5 +- arch/x86/entry/entry.S | 2 +- arch/x86/events/amd/ibs.c | 20 +- arch/x86/events/intel/ds.c | 9 +- arch/x86/include/asm/bug.h | 5 +- arch/x86/include/asm/cfi.h | 11 + arch/x86/include/asm/ibt.h | 4 +- arch/x86/include/asm/intel-family.h | 1 + arch/x86/include/asm/nmi.h | 2 + arch/x86/include/asm/percpu.h | 28 +-- arch/x86/include/asm/perf_event.h | 1 + arch/x86/include/asm/sev-common.h | 2 +- arch/x86/include/uapi/asm/bootparam.h | 4 +- arch/x86/include/uapi/asm/e820.h | 4 +- arch/x86/include/uapi/asm/ldt.h | 4 +- arch/x86/include/uapi/asm/msr.h | 4 +- arch/x86/include/uapi/asm/ptrace-abi.h | 6 +- arch/x86/include/uapi/asm/ptrace.h | 4 +- arch/x86/include/uapi/asm/setup_data.h | 4 +- arch/x86/include/uapi/asm/signal.h | 8 +- arch/x86/kernel/Makefile | 2 + arch/x86/kernel/alternative.c | 30 +++ arch/x86/kernel/cfi.c | 22 +- arch/x86/kernel/cpu/bugs.c | 10 +- arch/x86/kernel/cpu/microcode/intel.c | 2 +- arch/x86/kernel/nmi.c | 42 ++++ arch/x86/kernel/reboot.c | 10 +- arch/x86/kernel/smpboot.c | 6 +- arch/x86/kernel/traps.c | 82 ++++++-- arch/x86/mm/init.c | 9 +- arch/x86/mm/init_64.c | 15 +- arch/x86/mm/kaslr.c | 10 +- arch/x86/power/cpu.c | 14 ++ arch/x86/um/os-Linux/mcontext.c | 3 +- block/badblocks.c | 5 +- block/bdev.c | 17 ++ block/blk-cgroup.c | 30 +-- block/blk-settings.c | 5 + block/blk-throttle.c | 15 +- block/blk-zoned.c | 5 +- block/blk.h | 3 +- block/bounce.c | 2 - block/fops.c | 16 ++ block/ioctl.c | 6 + crypto/ahash.c | 4 + crypto/algif_hash.c | 4 - crypto/lzo-rle.c | 2 +- crypto/lzo.c | 2 +- crypto/skcipher.c | 1 + drivers/accel/qaic/qaic_drv.c | 2 +- drivers/acpi/Kconfig | 2 +- drivers/acpi/acpi_pnp.c | 2 + drivers/acpi/hed.c | 7 +- drivers/auxdisplay/charlcd.c | 5 +- drivers/auxdisplay/charlcd.h | 5 +- drivers/auxdisplay/hd44780.c | 2 +- drivers/auxdisplay/lcd2s.c | 2 +- drivers/auxdisplay/panel.c | 2 +- drivers/block/loop.c | 5 +- drivers/block/ublk_drv.c | 53 +++-- drivers/bluetooth/btmtksdio.c | 15 +- drivers/bluetooth/btusb.c | 98 ++++----- drivers/char/tpm/tpm2-sessions.c | 2 +- drivers/clk/clk-s2mps11.c | 3 +- drivers/clk/imx/clk-imx8mp.c | 151 ++++++++++++++ drivers/clk/qcom/Kconfig | 2 +- drivers/clk/qcom/camcc-sm8250.c | 56 ++--- drivers/clk/qcom/clk-alpha-pll.c | 52 +++-- drivers/clk/qcom/lpassaudiocc-sc7280.c | 23 ++- drivers/clk/renesas/rzg2l-cpg.c | 106 +++++----- drivers/clk/sunxi-ng/ccu-sun20i-d1.c | 42 ++-- drivers/clk/sunxi-ng/ccu_mp.h | 22 ++ drivers/clocksource/mips-gic-timer.c | 6 +- drivers/clocksource/timer-riscv.c | 6 + drivers/cpufreq/amd-pstate.c | 1 - drivers/cpufreq/cpufreq-dt-platdev.c | 1 + drivers/cpufreq/tegra186-cpufreq.c | 7 + drivers/cpuidle/governors/menu.c | 13 +- .../crypto/marvell/octeontx2/otx2_cptvf_reqmgr.c | 7 +- drivers/crypto/mxs-dcp.c | 8 +- drivers/dma/fsl-edma-main.c | 2 +- drivers/dma/idxd/cdev.c | 9 + drivers/dpll/dpll_core.c | 5 +- drivers/edac/ie31200_edac.c | 28 ++- drivers/firmware/arm_ffa/bus.c | 1 + drivers/firmware/arm_ffa/driver.c | 12 ++ drivers/firmware/arm_scmi/bus.c | 19 +- drivers/firmware/xilinx/zynqmp.c | 6 +- drivers/fpga/altera-cvp.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.h | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 52 ++--- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 30 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 31 +-- drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c | 30 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 ++ drivers/gpu/drm/amd/amdgpu/amdgpu_ih.h | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 38 ++-- drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 7 +- drivers/gpu/drm/amd/amdgpu/amdgpu_umc.c | 42 ++++ drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 47 +++-- drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 48 +++-- drivers/gpu/drm/amd/amdgpu/gfxhub_v1_0.c | 10 +- drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c | 1 - drivers/gpu/drm/amd/amdgpu/mes_v11_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/mmhub_v1_7.c | 25 +++ drivers/gpu/drm/amd/amdgpu/mmhub_v1_8.c | 27 +++ drivers/gpu/drm/amd/amdgpu/mmhub_v9_4.c | 31 +++ drivers/gpu/drm/amd/amdgpu/nv.c | 16 +- drivers/gpu/drm/amd/amdgpu/soc21.c | 10 +- .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 39 +--- .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 69 ++++--- .../drm/amd/amdkfd/kfd_device_queue_manager_v10.c | 43 ++-- .../drm/amd/amdkfd/kfd_device_queue_manager_v11.c | 45 ++-- .../drm/amd/amdkfd/kfd_device_queue_manager_v12.c | 45 ++-- .../drm/amd/amdkfd/kfd_device_queue_manager_v9.c | 35 +++- .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 77 ++++--- drivers/gpu/drm/amd/amdkfd/kfd_process.c | 16 +- drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_topology.c | 23 ++- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 41 ++-- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h | 2 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 2 +- .../amd/display/amdgpu_dm/amdgpu_dm_mst_types.c | 6 +- drivers/gpu/drm/amd/display/dc/basics/dc_common.c | 3 +- .../gpu/drm/amd/display/dc/bios/command_table2.c | 9 - .../amd/display/dc/bios/command_table_helper2.c | 3 +- .../amd/display/dc/clk_mgr/dcn315/dcn315_clk_mgr.c | 22 +- .../amd/display/dc/clk_mgr/dcn316/dcn316_clk_mgr.c | 15 +- .../amd/display/dc/clk_mgr/dcn35/dcn35_clk_mgr.c | 13 +- .../amd/display/dc/clk_mgr/dcn401/dcn401_clk_mgr.c | 2 + drivers/gpu/drm/amd/display/dc/core/dc.c | 22 +- .../gpu/drm/amd/display/dc/core/dc_hw_sequencer.c | 21 +- drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 4 +- drivers/gpu/drm/amd/display/dc/dc_dp_types.h | 12 ++ drivers/gpu/drm/amd/display/dc/dc_hw_types.h | 5 +- drivers/gpu/drm/amd/display/dc/dc_types.h | 7 + .../drm/amd/display/dc/dccg/dcn401/dcn401_dccg.c | 3 - .../drm/amd/display/dc/dce/dce_stream_encoder.c | 3 +- drivers/gpu/drm/amd/display/dc/dce/dmub_psr.c | 4 + .../display/dc/dio/dcn10/dcn10_stream_encoder.c | 3 +- .../dc/dio/dcn401/dcn401_dio_stream_encoder.c | 3 +- .../gpu/drm/amd/display/dc/dml/dcn35/dcn35_fpu.c | 6 +- .../gpu/drm/amd/display/dc/dml/dcn351/dcn351_fpu.c | 1 + .../drm/amd/display/dc/dml2/dml21/dml21_wrapper.c | 8 +- .../dml21/src/dml2_core/dml2_core_dcn4_calcs.c | 5 +- drivers/gpu/drm/amd/display/dc/dml2/dml2_wrapper.h | 1 + .../gpu/drm/amd/display/dc/dpp/dcn30/dcn30_dpp.c | 11 +- .../dc/hpo/dcn31/dcn31_hpo_dp_stream_encoder.c | 3 +- .../drm/amd/display/dc/hwss/dce110/dce110_hwseq.c | 10 +- .../drm/amd/display/dc/hwss/dcn10/dcn10_hwseq.c | 7 +- .../drm/amd/display/dc/hwss/dcn20/dcn20_hwseq.c | 8 +- .../drm/amd/display/dc/hwss/dcn31/dcn31_hwseq.c | 4 +- .../drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c | 3 +- .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 139 ++++++++++++- .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.h | 7 + .../drm/amd/display/dc/hwss/dcn401/dcn401_init.c | 4 +- drivers/gpu/drm/amd/display/dc/hwss/hw_sequencer.h | 6 + drivers/gpu/drm/amd/display/dc/inc/core_types.h | 2 +- .../drm/amd/display/dc/inc/hw/clk_mgr_internal.h | 1 + drivers/gpu/drm/amd/display/dc/inc/hw/dpp.h | 6 +- .../display/dc/link/protocols/link_dp_capability.c | 42 ++-- .../amd/display/dc/link/protocols/link_dp_phy.c | 8 +- .../display/dc/link/protocols/link_dp_training.c | 5 +- .../dc/link/protocols/link_dp_training_8b_10b.c | 7 +- .../dc/link/protocols/link_edp_panel_control.c | 25 ++- .../display/dc/resource/dcn315/dcn315_resource.c | 40 ++-- drivers/gpu/drm/amd/display/dc/spl/dc_spl.c | 4 +- drivers/gpu/drm/amd/display/dc/spl/dc_spl_types.h | 2 +- drivers/gpu/drm/amd/display/dmub/inc/dmub_cmd.h | 6 + drivers/gpu/drm/amd/display/dmub/src/dmub_dcn31.c | 17 +- drivers/gpu/drm/amd/display/dmub/src/dmub_dcn35.c | 4 +- drivers/gpu/drm/amd/display/dmub/src/dmub_dcn401.c | 47 +++-- drivers/gpu/drm/amd/display/dmub/src/dmub_dcn401.h | 3 +- .../amd/display/modules/info_packet/info_packet.c | 4 +- .../include/asic_reg/mmhub/mmhub_9_4_1_offset.h | 32 +++ .../include/asic_reg/mmhub/mmhub_9_4_1_sh_mask.h | 48 +++++ drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 1 + .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c | 5 +- drivers/gpu/drm/ast/ast_mode.c | 10 +- drivers/gpu/drm/bridge/adv7511/adv7511_audio.c | 2 + drivers/gpu/drm/drm_atomic_helper.c | 28 +++ drivers/gpu/drm/drm_buddy.c | 5 +- drivers/gpu/drm/drm_edid.c | 1 + drivers/gpu/drm/drm_gem.c | 4 +- drivers/gpu/drm/mediatek/mtk_dpi.c | 5 +- drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c | 2 +- drivers/gpu/drm/panel/panel-edp.c | 1 + drivers/gpu/drm/rockchip/rockchip_drm_vop2.c | 40 +++- drivers/gpu/drm/v3d/v3d_drv.c | 25 ++- drivers/gpu/drm/xe/xe_bo.c | 22 ++ drivers/gpu/drm/xe/xe_debugfs.c | 3 +- drivers/gpu/drm/xe/xe_device.c | 10 +- drivers/gpu/drm/xe/xe_gen_wa_oob.c | 6 +- drivers/gpu/drm/xe/xe_gt_sriov_pf_config.c | 37 +++- drivers/gpu/drm/xe/xe_gt_sriov_vf.c | 12 +- drivers/gpu/drm/xe/xe_gt_tlb_invalidation.c | 22 ++ drivers/gpu/drm/xe/xe_gt_tlb_invalidation.h | 2 + drivers/gpu/drm/xe/xe_guc_relay.c | 2 +- drivers/gpu/drm/xe/xe_oa.c | 1 + drivers/gpu/drm/xe/xe_pci_sriov.c | 51 +++++ drivers/gpu/drm/xe/xe_pt.c | 14 ++ drivers/gpu/drm/xe/xe_pt.h | 3 + drivers/gpu/drm/xe/xe_sa.c | 3 +- drivers/gpu/drm/xe/xe_tile.c | 12 +- drivers/gpu/drm/xe/xe_tile.h | 1 + drivers/gpu/drm/xe/xe_ttm_stolen_mgr.c | 17 +- drivers/gpu/drm/xe/xe_ttm_stolen_mgr.h | 2 +- drivers/gpu/drm/xe/xe_vm.c | 32 +++ drivers/hid/usbhid/usbkbd.c | 2 +- drivers/hwmon/dell-smm-hwmon.c | 5 +- drivers/hwmon/gpio-fan.c | 16 +- drivers/hwmon/xgene-hwmon.c | 2 +- drivers/hwtracing/coresight/coresight-etb10.c | 26 +-- drivers/hwtracing/intel_th/Kconfig | 1 + drivers/hwtracing/intel_th/msu.c | 31 +-- drivers/i2c/busses/i2c-designware-pcidrv.c | 33 +-- drivers/i2c/busses/i2c-designware-platdrv.c | 48 +++-- drivers/i2c/busses/i2c-pxa.c | 5 +- drivers/i2c/busses/i2c-qup.c | 36 ++++ drivers/i3c/master/svc-i3c-master.c | 4 + drivers/iio/adc/ad7944.c | 16 +- drivers/infiniband/core/umem.c | 36 +++- drivers/infiniband/core/uverbs_cmd.c | 144 +++++++------ drivers/infiniband/core/verbs.c | 11 +- drivers/input/joystick/xpad.c | 3 + drivers/input/rmi4/rmi_f34.c | 133 ++++++------ drivers/iommu/amd/io_pgtable_v2.c | 2 +- drivers/iommu/dma-iommu.c | 28 ++- drivers/iommu/iommu-priv.h | 2 + drivers/iommu/iommu.c | 2 +- drivers/iommu/iommufd/device.c | 34 ++- drivers/iommu/iommufd/hw_pagetable.c | 3 + drivers/iommu/of_iommu.c | 6 +- drivers/irqchip/irq-riscv-aplic-direct.c | 24 ++- drivers/irqchip/irq-riscv-imsic-early.c | 8 +- drivers/irqchip/irq-riscv-imsic-platform.c | 16 +- drivers/irqchip/irq-riscv-imsic-state.c | 96 ++++++--- drivers/irqchip/irq-riscv-imsic-state.h | 7 +- drivers/leds/rgb/leds-pwm-multicolor.c | 5 +- drivers/leds/trigger/ledtrig-netdev.c | 16 +- drivers/mailbox/mailbox.c | 7 +- drivers/mailbox/pcc.c | 8 +- drivers/md/dm-cache-target.c | 24 +++ drivers/md/dm-table.c | 4 + drivers/md/dm-vdo/indexer/index-layout.c | 5 +- drivers/md/dm-vdo/io-submitter.c | 6 +- drivers/md/dm-vdo/io-submitter.h | 18 +- drivers/md/dm-vdo/types.h | 3 + drivers/md/dm-vdo/vdo.c | 11 +- drivers/md/dm-vdo/vio.c | 36 ++-- drivers/md/dm-vdo/vio.h | 2 + drivers/md/dm.c | 8 +- drivers/media/i2c/adv7180.c | 34 +-- drivers/media/i2c/imx219.c | 2 +- drivers/media/i2c/imx335.c | 21 +- drivers/media/i2c/tc358746.c | 19 +- drivers/media/platform/qcom/camss/camss-csid.c | 64 +++--- drivers/media/platform/qcom/camss/camss-vfe.c | 4 + .../platform/st/sti/c8sectpfe/c8sectpfe-core.c | 3 +- .../media/test-drivers/vivid/vivid-kthread-cap.c | 11 +- .../media/test-drivers/vivid/vivid-kthread-out.c | 11 +- .../media/test-drivers/vivid/vivid-kthread-touch.c | 11 +- drivers/media/test-drivers/vivid/vivid-sdr-cap.c | 11 +- drivers/media/usb/cx231xx/cx231xx-417.c | 2 + drivers/media/usb/uvc/uvc_ctrl.c | 77 +++---- drivers/media/usb/uvc/uvc_v4l2.c | 6 + drivers/media/v4l2-core/v4l2-subdev.c | 2 + drivers/mfd/axp20x.c | 1 + drivers/mfd/tps65219.c | 7 - drivers/misc/eeprom/ee1004.c | 4 + drivers/misc/mei/vsc-tp.c | 14 +- drivers/misc/pci_endpoint_test.c | 6 +- drivers/mmc/host/dw_mmc-exynos.c | 41 +++- drivers/mmc/host/sdhci-pci-core.c | 6 +- drivers/mmc/host/sdhci.c | 9 +- drivers/net/bonding/bond_main.c | 2 +- drivers/net/can/c_can/c_can_platform.c | 2 +- drivers/net/can/kvaser_pciefd.c | 101 +++++---- drivers/net/can/slcan/slcan-core.c | 26 ++- drivers/net/ethernet/apm/xgene-v2/main.c | 4 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 8 +- drivers/net/ethernet/freescale/enetc/enetc.c | 16 +- drivers/net/ethernet/freescale/fec_main.c | 52 +++-- drivers/net/ethernet/intel/ice/ice_ethtool.c | 3 +- drivers/net/ethernet/intel/ice/ice_irq.c | 25 +-- drivers/net/ethernet/intel/ice/ice_lag.c | 6 + drivers/net/ethernet/intel/ice/ice_lib.c | 2 + drivers/net/ethernet/intel/ice/ice_main.c | 6 +- drivers/net/ethernet/intel/ice/ice_virtchnl.c | 1 - drivers/net/ethernet/intel/idpf/idpf.h | 2 + drivers/net/ethernet/intel/idpf/idpf_lib.c | 10 +- drivers/net/ethernet/intel/idpf/idpf_txrx.c | 18 +- drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 14 +- drivers/net/ethernet/marvell/octeontx2/af/rvu.h | 2 + .../net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 24 ++- .../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 11 +- .../ethernet/marvell/octeontx2/nic/otx2_common.c | 8 +- drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 22 +- drivers/net/ethernet/mellanox/mlx4/alloc.c | 6 +- drivers/net/ethernet/mellanox/mlx4/en_tx.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/en.h | 3 - .../net/ethernet/mellanox/mlx5/core/en/params.c | 16 +- .../net/ethernet/mellanox/mlx5/core/en/params.h | 1 - .../ethernet/mellanox/mlx5/core/en/reporter_tx.c | 1 - drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c | 53 +++-- .../mellanox/mlx5/core/en_accel/ipsec_fs.c | 28 ++- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 36 +--- drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 5 + .../net/ethernet/mellanox/mlx5/core/en_selftest.c | 3 + .../net/ethernet/mellanox/mlx5/core/esw/ipsec_fs.c | 13 ++ .../net/ethernet/mellanox/mlx5/core/esw/ipsec_fs.h | 5 + .../net/ethernet/mellanox/mlx5/core/esw/legacy.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/events.c | 11 +- .../net/ethernet/mellanox/mlx5/core/fs_ft_pool.c | 6 +- .../net/ethernet/mellanox/mlx5/core/fs_ft_pool.h | 2 - drivers/net/ethernet/mellanox/mlx5/core/health.c | 1 + .../ethernet/mellanox/mlx5/core/lib/fs_chains.c | 3 +- drivers/net/ethernet/meta/fbnic/fbnic_netdev.c | 2 + drivers/net/ethernet/microchip/lan743x_main.c | 19 +- drivers/net/ethernet/microsoft/mana/gdma_main.c | 2 +- drivers/net/ethernet/realtek/r8169_main.c | 28 +++ .../net/ethernet/stmicro/stmmac/dwmac-loongson.c | 3 + drivers/net/ethernet/stmicro/stmmac/dwmac-rk.c | 21 +- drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c | 2 +- drivers/net/ethernet/tehuti/tn40.c | 9 +- drivers/net/ethernet/tehuti/tn40.h | 33 +++ drivers/net/ethernet/tehuti/tn40_mdio.c | 82 +++++++- drivers/net/ethernet/ti/cpsw_new.c | 1 + drivers/net/ieee802154/ca8210.c | 9 +- drivers/net/mctp/mctp-i2c.c | 2 +- drivers/net/phy/nxp-c45-tja11xx.c | 54 ++++- drivers/net/phy/phylink.c | 2 +- drivers/net/usb/r8152.c | 1 + drivers/net/vmxnet3/vmxnet3_drv.c | 5 +- drivers/net/vxlan/vxlan_core.c | 36 +++- drivers/net/wireless/ath/ath11k/dp.h | 6 +- drivers/net/wireless/ath/ath11k/dp_rx.c | 117 +++++------ drivers/net/wireless/ath/ath12k/core.c | 12 +- drivers/net/wireless/ath/ath12k/core.h | 1 + drivers/net/wireless/ath/ath12k/dp_mon.c | 16 +- drivers/net/wireless/ath/ath12k/dp_tx.c | 6 +- drivers/net/wireless/ath/ath12k/hal_desc.h | 2 +- drivers/net/wireless/ath/ath12k/hal_rx.h | 3 +- drivers/net/wireless/ath/ath12k/pci.c | 13 +- drivers/net/wireless/ath/ath12k/wmi.c | 4 +- drivers/net/wireless/ath/ath9k/init.c | 4 +- drivers/net/wireless/intel/iwlwifi/cfg/dr.c | 2 - drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 4 +- drivers/net/wireless/intel/iwlwifi/fw/uefi.c | 8 +- drivers/net/wireless/intel/iwlwifi/fw/uefi.h | 4 +- drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.c | 10 +- drivers/net/wireless/intel/iwlwifi/iwl-trans.c | 8 +- .../net/wireless/intel/iwlwifi/mvm/ftm-initiator.c | 4 + drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 15 ++ .../net/wireless/intel/iwlwifi/mvm/mld-mac80211.c | 3 +- drivers/net/wireless/intel/iwlwifi/mvm/mvm.h | 3 + drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 2 + drivers/net/wireless/marvell/mwifiex/11n.c | 6 +- drivers/net/wireless/mediatek/mt76/mt76.h | 1 + .../net/wireless/mediatek/mt76/mt76_connac3_mac.h | 3 + drivers/net/wireless/mediatek/mt76/mt76x0/pci.c | 3 +- drivers/net/wireless/mediatek/mt76/mt76x0/usb.c | 3 +- drivers/net/wireless/mediatek/mt76/mt76x2/pci.c | 3 +- drivers/net/wireless/mediatek/mt76/mt76x2/usb.c | 3 +- drivers/net/wireless/mediatek/mt76/mt7925/mcu.c | 64 +++++- drivers/net/wireless/mediatek/mt76/mt7925/mt7925.h | 3 + drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7996/mcu.h | 3 +- drivers/net/wireless/mediatek/mt76/mt7996/mmio.c | 2 +- drivers/net/wireless/mediatek/mt76/tx.c | 3 +- drivers/net/wireless/realtek/rtl8xxxu/core.c | 17 +- drivers/net/wireless/realtek/rtw88/mac.c | 6 +- drivers/net/wireless/realtek/rtw88/main.c | 40 ++-- drivers/net/wireless/realtek/rtw88/reg.h | 3 +- drivers/net/wireless/realtek/rtw88/rtw8822b.c | 14 +- drivers/net/wireless/realtek/rtw88/util.c | 3 +- drivers/net/wireless/realtek/rtw89/coex.c | 14 +- drivers/net/wireless/realtek/rtw89/core.c | 23 ++- drivers/net/wireless/realtek/rtw89/core.h | 2 + drivers/net/wireless/realtek/rtw89/fw.c | 101 ++++++++- drivers/net/wireless/realtek/rtw89/fw.h | 12 ++ drivers/net/wireless/realtek/rtw89/mac.c | 55 ++++- drivers/net/wireless/realtek/rtw89/mac.h | 3 + drivers/net/wireless/realtek/rtw89/mac80211.c | 1 + drivers/net/wireless/realtek/rtw89/reg.h | 4 + drivers/net/wireless/realtek/rtw89/regd.c | 2 + drivers/net/wireless/realtek/rtw89/rtw8851b.c | 1 + drivers/net/wireless/realtek/rtw89/rtw8852a.c | 1 + drivers/net/wireless/realtek/rtw89/rtw8852b.c | 1 + drivers/net/wireless/realtek/rtw89/rtw8852bt.c | 1 + drivers/net/wireless/realtek/rtw89/rtw8852c.c | 1 + drivers/net/wireless/realtek/rtw89/rtw8922a.c | 1 + drivers/net/wireless/realtek/rtw89/ser.c | 4 + drivers/net/wireless/virtual/mac80211_hwsim.c | 14 +- drivers/nvdimm/label.c | 3 +- drivers/nvme/host/pci.c | 6 + drivers/nvme/target/tcp.c | 3 + drivers/nvmem/core.c | 40 +++- drivers/nvmem/qfprom.c | 26 ++- drivers/nvmem/rockchip-otp.c | 17 +- drivers/pci/Kconfig | 6 + drivers/pci/ats.c | 33 +++ drivers/pci/controller/dwc/pcie-designware-ep.c | 2 +- drivers/pci/controller/dwc/pcie-designware-host.c | 2 +- drivers/pci/controller/pcie-brcmstb.c | 5 +- drivers/pci/controller/vmd.c | 20 ++ drivers/pci/endpoint/functions/pci-epf-mhi.c | 2 +- drivers/pci/endpoint/functions/pci-epf-test.c | 2 + drivers/pci/setup-bus.c | 6 +- drivers/perf/arm_pmuv3.c | 4 +- drivers/phy/phy-core.c | 7 +- drivers/phy/renesas/phy-rcar-gen3-usb2.c | 95 +++++---- drivers/phy/rockchip/phy-rockchip-samsung-hdptx.c | 4 +- drivers/phy/rockchip/phy-rockchip-usbdp.c | 105 ++++++---- drivers/phy/samsung/phy-exynos5-usbdrd.c | 7 +- drivers/pinctrl/bcm/pinctrl-bcm281xx.c | 44 ++-- drivers/pinctrl/devicetree.c | 10 +- drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/pinctrl/qcom/pinctrl-msm.c | 23 ++- drivers/pinctrl/renesas/pinctrl-rzg2l.c | 19 +- drivers/pinctrl/sophgo/pinctrl-cv18xx.c | 33 ++- drivers/pinctrl/tegra/pinctrl-tegra.c | 59 +++++- drivers/pinctrl/tegra/pinctrl-tegra.h | 6 + drivers/platform/x86/asus-wmi.c | 11 +- .../x86/dell/dell-wmi-sysman/passobj-attributes.c | 2 +- drivers/platform/x86/ideapad-laptop.c | 16 ++ drivers/platform/x86/intel/hid.c | 21 +- drivers/platform/x86/think-lmi.c | 26 +-- drivers/platform/x86/think-lmi.h | 1 + drivers/pmdomain/core.c | 2 +- drivers/pmdomain/imx/gpcv2.c | 2 +- drivers/pmdomain/renesas/rcar-gen4-sysc.c | 5 - drivers/pmdomain/renesas/rcar-sysc.c | 5 - drivers/power/supply/axp20x_battery.c | 21 ++ drivers/ptp/ptp_ocp.c | 24 ++- drivers/regulator/ad5398.c | 12 +- drivers/remoteproc/qcom_wcnss.c | 34 ++- drivers/rtc/rtc-ds1307.c | 4 +- drivers/rtc/rtc-rv3032.c | 2 +- drivers/s390/crypto/vfio_ap_ops.c | 72 ++++--- drivers/scsi/lpfc/lpfc_hbadisc.c | 29 ++- drivers/scsi/lpfc/lpfc_init.c | 2 + drivers/scsi/mpi3mr/mpi3mr_fw.c | 8 +- drivers/scsi/mpt3sas/mpt3sas_ctl.c | 12 +- drivers/scsi/scsi_debug.c | 55 ++++- drivers/scsi/scsi_sysctl.c | 4 +- drivers/scsi/st.c | 29 ++- drivers/scsi/st.h | 2 + drivers/soc/apple/rtkit-internal.h | 1 + drivers/soc/apple/rtkit.c | 58 +++--- drivers/soc/mediatek/mtk-mutex.c | 6 + drivers/soc/samsung/exynos-asv.c | 1 + drivers/soc/samsung/exynos-chipid.c | 1 + drivers/soc/samsung/exynos-pmu.c | 1 + drivers/soc/samsung/exynos-usi.c | 1 + drivers/soc/samsung/exynos3250-pmu.c | 1 + drivers/soc/samsung/exynos5250-pmu.c | 1 + drivers/soc/samsung/exynos5420-pmu.c | 1 + drivers/soc/ti/k3-socinfo.c | 13 +- drivers/soundwire/amd_manager.c | 2 + drivers/soundwire/bus.c | 9 +- drivers/soundwire/cadence_master.c | 22 +- drivers/spi/spi-fsl-dspi.c | 46 ++++- drivers/spi/spi-mux.c | 4 +- drivers/spi/spi-rockchip.c | 2 +- drivers/spi/spi-zynqmp-gqspi.c | 22 +- .../vc04_services/interface/vchiq_arm/vchiq_arm.c | 69 +++---- drivers/target/iscsi/iscsi_target.c | 2 +- drivers/target/target_core_spc.c | 14 +- drivers/thermal/intel/x86_pkg_temp_thermal.c | 1 + drivers/thermal/mediatek/lvts_thermal.c | 3 +- drivers/thermal/qoriq_thermal.c | 13 ++ drivers/thunderbolt/retimer.c | 8 +- drivers/tty/serial/8250/8250_port.c | 2 +- drivers/tty/serial/atmel_serial.c | 2 +- drivers/tty/serial/imx.c | 2 +- drivers/tty/serial/serial_mctrl_gpio.c | 34 ++- drivers/tty/serial/serial_mctrl_gpio.h | 17 +- drivers/tty/serial/sh-sci.c | 98 ++++++++- drivers/tty/serial/stm32-usart.c | 2 +- drivers/ufs/core/ufshcd.c | 29 +++ drivers/usb/host/xhci-mem.c | 34 +-- drivers/usb/host/xhci-ring.c | 12 +- drivers/usb/host/xhci.h | 8 +- drivers/vdpa/mlx5/net/mlx5_vnet.c | 3 + drivers/vfio/pci/vfio_pci_config.c | 3 +- drivers/vfio/pci/vfio_pci_core.c | 10 +- drivers/vfio/pci/vfio_pci_intrs.c | 2 +- drivers/vhost/scsi.c | 23 ++- drivers/video/fbdev/core/bitblit.c | 5 +- drivers/video/fbdev/core/fbcon.c | 10 +- drivers/video/fbdev/core/fbcon.h | 38 +--- drivers/video/fbdev/core/fbcon_ccw.c | 5 +- drivers/video/fbdev/core/fbcon_cw.c | 5 +- drivers/video/fbdev/core/fbcon_ud.c | 5 +- drivers/video/fbdev/core/tileblit.c | 45 +++- drivers/video/fbdev/fsl-diu-fb.c | 1 + drivers/virtio/virtio_ring.c | 2 +- drivers/watchdog/aspeed_wdt.c | 81 +++++++- drivers/xen/pci.c | 32 +++ drivers/xen/platform-pci.c | 4 + drivers/xen/xenbus/xenbus_probe.c | 14 +- fs/btrfs/block-group.c | 18 +- fs/btrfs/compression.c | 2 +- fs/btrfs/discard.c | 34 ++- fs/btrfs/disk-io.c | 28 ++- fs/btrfs/extent_io.c | 7 +- fs/btrfs/extent_io.h | 2 + fs/btrfs/scrub.c | 4 +- fs/btrfs/send.c | 6 +- fs/buffer.c | 61 ++++-- fs/dlm/lowcomms.c | 4 +- fs/erofs/internal.h | 4 +- fs/erofs/super.c | 46 ++--- fs/erofs/zdata.c | 4 +- fs/exfat/inode.c | 169 ++++++++------- fs/ext4/balloc.c | 4 +- fs/ext4/ext4.h | 5 +- fs/ext4/extents.c | 19 +- fs/ext4/inode.c | 81 ++++++-- fs/ext4/mballoc.c | 3 +- fs/ext4/page-io.c | 16 +- fs/ext4/super.c | 19 +- fs/f2fs/sysfs.c | 74 +++++-- fs/fuse/dir.c | 2 + fs/gfs2/glock.c | 11 +- fs/jbd2/recovery.c | 11 +- fs/jbd2/revoke.c | 15 +- fs/namespace.c | 6 +- fs/nfs/delegation.c | 3 +- fs/nfs/flexfilelayout/flexfilelayout.c | 1 + fs/nfs/inode.c | 2 + fs/nfs/internal.h | 5 + fs/nfs/nfs3proc.c | 2 +- fs/nfs/nfs4proc.c | 9 +- fs/nfs/nfs4state.c | 10 +- fs/nilfs2/the_nilfs.c | 3 - fs/ocfs2/journal.c | 2 +- fs/orangefs/inode.c | 7 +- fs/pidfs.c | 9 +- fs/pstore/inode.c | 2 +- fs/pstore/internal.h | 4 +- fs/pstore/platform.c | 11 +- fs/smb/client/cifsacl.c | 17 +- fs/smb/client/cifspdu.h | 5 +- fs/smb/client/cifsproto.h | 7 + fs/smb/client/cifssmb.c | 57 ++++++ fs/smb/client/connect.c | 30 ++- fs/smb/client/fs_context.c | 13 ++ fs/smb/client/fs_context.h | 3 + fs/smb/client/link.c | 8 +- fs/smb/client/readdir.c | 7 +- fs/smb/client/smb1ops.c | 228 ++++++++++++++++++--- fs/smb/client/smb2file.c | 11 +- fs/smb/client/smb2ops.c | 30 ++- fs/smb/client/transport.c | 2 +- fs/smb/common/smb2pdu.h | 3 + fs/smb/server/smb2pdu.c | 9 +- fs/smb/server/vfs.c | 14 +- include/crypto/hash.h | 3 + include/drm/drm_atomic.h | 23 ++- include/drm/drm_gem.h | 13 ++ include/linux/bpf-cgroup.h | 1 + include/linux/buffer_head.h | 8 + include/linux/device.h | 119 +---------- include/linux/device/devres.h | 129 ++++++++++++ include/linux/dma-mapping.h | 12 +- include/linux/err.h | 3 + include/linux/highmem.h | 10 +- include/linux/io.h | 2 - include/linux/ipv6.h | 1 + include/linux/lzo.h | 8 + include/linux/mfd/axp20x.h | 1 + include/linux/mlx4/device.h | 2 +- include/linux/mlx5/eswitch.h | 2 + include/linux/mlx5/fs.h | 2 + include/linux/mman.h | 2 + include/linux/msi.h | 33 ++- include/linux/page-flags.h | 7 + include/linux/pci-ats.h | 3 + include/linux/perf_event.h | 8 +- include/linux/pnp.h | 2 +- include/linux/rcupdate.h | 2 +- include/linux/rcutree.h | 2 +- include/linux/spi/spi.h | 5 +- include/linux/trace.h | 4 +- include/linux/trace_seq.h | 8 +- include/linux/usb/r8152.h | 1 + include/media/v4l2-subdev.h | 4 +- include/net/cfg80211.h | 3 + include/net/mac80211.h | 4 +- include/net/xfrm.h | 1 - include/rdma/uverbs_std_types.h | 2 +- include/sound/hda_codec.h | 1 + include/sound/pcm.h | 2 + include/trace/events/btrfs.h | 2 +- include/uapi/linux/bpf.h | 1 + include/uapi/linux/iommufd.h | 14 +- include/uapi/linux/nl80211.h | 52 ++--- include/ufs/ufs_quirks.h | 6 + io_uring/fdinfo.c | 4 +- io_uring/io_uring.c | 12 +- io_uring/msg_ring.c | 1 + kernel/bpf/bpf_struct_ops.c | 98 ++++----- kernel/bpf/cgroup.c | 33 ++- kernel/bpf/hashtab.c | 2 +- kernel/bpf/syscall.c | 7 +- kernel/bpf/verifier.c | 34 ++- kernel/cgroup/cgroup.c | 2 +- kernel/cgroup/rstat.c | 12 +- kernel/dma/mapping.c | 27 ++- kernel/events/core.c | 102 ++++----- kernel/events/hw_breakpoint.c | 5 +- kernel/events/ring_buffer.c | 1 + kernel/exit.c | 6 +- kernel/fork.c | 9 +- kernel/padata.c | 3 +- kernel/printk/printk.c | 14 +- kernel/rcu/rcu.h | 2 +- kernel/rcu/tree.c | 15 +- kernel/rcu/tree_plugin.h | 22 +- kernel/sched/fair.c | 6 +- kernel/signal.c | 3 +- kernel/softirq.c | 18 ++ kernel/time/hrtimer.c | 29 ++- kernel/time/posix-timers.c | 22 +- kernel/time/timer_list.c | 4 +- kernel/trace/trace.c | 11 +- kernel/trace/trace.h | 16 +- kernel/vhost_task.c | 2 +- lib/dynamic_queue_limits.c | 2 +- lib/lzo/Makefile | 2 +- lib/lzo/lzo1x_compress.c | 102 ++++++--- lib/lzo/lzo1x_compress_safe.c | 18 ++ mm/memcontrol.c | 6 +- mm/page_alloc.c | 8 + mm/vmalloc.c | 13 +- net/bluetooth/hci_event.c | 3 + net/bluetooth/l2cap_core.c | 15 +- net/bridge/br_mdb.c | 2 +- net/bridge/br_nf_core.c | 7 +- net/bridge/br_private.h | 1 + net/can/bcm.c | 79 ++++--- net/core/dev.c | 12 +- net/core/dev.h | 12 ++ net/core/page_pool.c | 7 +- net/core/pktgen.c | 13 +- net/dsa/tag_ksz.c | 19 +- net/hsr/hsr_device.c | 2 + net/hsr/hsr_forward.c | 4 +- net/hsr/hsr_framereg.c | 95 ++++++++- net/hsr/hsr_framereg.h | 8 +- net/hsr/hsr_main.h | 2 + net/ipv4/esp4.c | 53 +---- net/ipv4/fib_frontend.c | 18 +- net/ipv4/fib_rules.c | 4 +- net/ipv4/fib_trie.c | 22 -- net/ipv4/inet_hashtables.c | 37 +++- net/ipv4/ip_gre.c | 16 +- net/ipv4/tcp_input.c | 56 ++--- net/ipv4/xfrm4_input.c | 18 +- net/ipv6/esp6.c | 53 +---- net/ipv6/fib6_rules.c | 4 +- net/ipv6/ip6_gre.c | 2 - net/ipv6/ip6_output.c | 9 +- net/ipv6/ip6_tunnel.c | 3 +- net/ipv6/ip6_vti.c | 3 +- net/ipv6/sit.c | 8 +- net/ipv6/xfrm6_input.c | 18 +- net/llc/af_llc.c | 8 +- net/mac80211/driver-ops.h | 3 +- net/mac80211/mlme.c | 10 +- net/mptcp/pm_userspace.c | 8 +- net/netfilter/nf_conntrack_standalone.c | 12 +- net/sched/sch_hfsc.c | 6 +- net/smc/smc_pnet.c | 8 +- net/sunrpc/clnt.c | 3 - net/sunrpc/rpcb_clnt.c | 5 +- net/sunrpc/sched.c | 2 + net/tipc/crypto.c | 5 + net/wireless/chan.c | 8 +- net/wireless/nl80211.c | 4 + net/wireless/reg.c | 4 +- net/xfrm/espintcp.c | 4 +- net/xfrm/xfrm_policy.c | 3 + net/xfrm/xfrm_state.c | 6 +- net/xfrm/xfrm_user.c | 12 ++ samples/bpf/Makefile | 2 +- scripts/Makefile.extrawarn | 11 +- scripts/config | 26 ++- scripts/kconfig/confdata.c | 19 +- scripts/kconfig/merge_config.sh | 4 +- security/integrity/ima/ima_main.c | 4 +- security/smack/smackfs.c | 21 +- sound/core/oss/pcm_oss.c | 3 +- sound/core/pcm_native.c | 11 + sound/core/seq/seq_clientmgr.c | 5 +- sound/core/seq/seq_memory.c | 1 + sound/pci/hda/hda_beep.c | 15 +- sound/pci/hda/patch_realtek.c | 77 ++++++- sound/soc/codecs/cs42l43-jack.c | 7 + sound/soc/codecs/mt6359-accdet.h | 9 + sound/soc/codecs/pcm3168a.c | 6 +- sound/soc/codecs/pcm6240.c | 28 +-- sound/soc/codecs/pcm6240.h | 7 +- sound/soc/codecs/rt722-sdca-sdw.c | 49 ++++- sound/soc/codecs/tas2764.c | 53 +++-- sound/soc/codecs/wsa883x.c | 2 +- sound/soc/codecs/wsa884x.c | 2 +- sound/soc/fsl/imx-card.c | 2 +- sound/soc/intel/boards/bytcr_rt5640.c | 13 ++ sound/soc/mediatek/mt8188/mt8188-afe-clk.c | 8 + sound/soc/mediatek/mt8188/mt8188-afe-clk.h | 8 + sound/soc/mediatek/mt8188/mt8188-afe-pcm.c | 4 - sound/soc/qcom/sm8250.c | 3 + sound/soc/sdw_utils/soc_sdw_cs42l43.c | 10 + sound/soc/soc-dai.c | 8 +- sound/soc/soc-ops.c | 29 ++- sound/soc/sof/intel/hda-bus.c | 2 +- sound/soc/sof/intel/hda.c | 16 +- sound/soc/sof/ipc4-control.c | 11 +- sound/soc/sof/ipc4-pcm.c | 3 +- sound/soc/sof/topology.c | 18 +- sound/soc/sunxi/sun4i-codec.c | 53 +++++ sound/usb/midi.c | 16 +- tools/bpf/bpftool/common.c | 3 +- tools/build/Makefile.build | 6 +- tools/include/uapi/linux/bpf.h | 1 + tools/lib/bpf/libbpf.c | 2 +- tools/net/ynl/lib/ynl.c | 2 +- tools/net/ynl/ynl-gen-c.py | 3 + tools/objtool/check.c | 21 +- tools/power/x86/turbostat/turbostat.8 | 1 + tools/power/x86/turbostat/turbostat.c | 13 +- tools/testing/kunit/qemu_configs/x86_64.py | 4 +- .../selftests/bpf/prog_tests/sockmap_ktls.c | 1 - tools/testing/selftests/iommu/iommufd.c | 4 + .../testing/selftests/net/forwarding/bridge_mdb.sh | 2 +- tools/testing/selftests/net/gro.sh | 3 +- 774 files changed, 8381 insertions(+), 3730 deletions(-)

1 month, 1 week

15
654
0 0

[PATCH 5.10.y 0/4] serial: sh-sci: Backport fixes

by Claudiu

From: Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> Hi, Commit 653143ed73ec ("serial: sh-sci: Check if TX data was written to device in .tx_empty()") doesn't apply cleanly on top of v5.10.y stable tree. This series adjust it. Along with it, propose for backporting other sh-sci fixes. Please provide your feedback. Thank you, Claudiu Beznea Claudiu Beznea (4): serial: sh-sci: Check if TX data was written to device in .tx_empty() serial: sh-sci: Move runtime PM enable to sci_probe_single() serial: sh-sci: Clean sci_ports[0] after at earlycon exit serial: sh-sci: Increment the runtime usage counter for the earlycon device drivers/tty/serial/sh-sci.c | 97 ++++++++++++++++++++++++++++++------- 1 file changed, 79 insertions(+), 18 deletions(-) -- 2.43.0

1 month, 1 week

3
9
0 0

[PATCH 6.1.y] arm64: dts: imx8mm: Drop sd-vsel-gpios from i.MX8M Mini Verdin SoM

by Francesco Dolcini

From: Marek Vasut <marex(a)denx.de> [ Upstream commit 8bad8c923f217d238ba4f1a6d19d761e53bfbd26 ] The VSELECT pin is configured as MX8MM_IOMUXC_GPIO1_IO04_USDHC2_VSELECT and not as a GPIO, drop the bogus sd-vsel-gpios property as the eSDHC block handles the VSELECT pin on its own. Signed-off-by: Marek Vasut <marex(a)denx.de> Reviewed-by: Frieder Schrempf <frieder.schrempf(a)kontron.de> Signed-off-by: Shawn Guo <shawnguo(a)kernel.org> --- 6.1.y is currently broken on imx8mm-verdin, because commit 5591ce0069ddda97cdbbea596bed53e698f399c2, that was backported correctly on 6.1, depends on this one. This fixes the following error: [ 1.735149] gpio-regulator: probe of regulator-usdhc2-vqmmc failed with error -16 --- arch/arm64/boot/dts/freescale/imx8mm-verdin.dtsi | 1 - 1 file changed, 1 deletion(-) diff --git a/arch/arm64/boot/dts/freescale/imx8mm-verdin.dtsi b/arch/arm64/boot/dts/freescale/imx8mm-verdin.dtsi index 5b2493bb8dd9..37acaf62f5c7 100644 --- a/arch/arm64/boot/dts/freescale/imx8mm-verdin.dtsi +++ b/arch/arm64/boot/dts/freescale/imx8mm-verdin.dtsi @@ -362,7 +362,6 @@ pca9450: pmic@25 { pinctrl-names = "default"; pinctrl-0 = <&pinctrl_pmic>; reg = <0x25>; - sd-vsel-gpios = <&gpio1 4 GPIO_ACTIVE_HIGH>; /* * The bootloader is expected to switch on the I2C level shifter for the TLA2024 ADC -- 2.39.5

1 month, 1 week

3
2
0 0

[6.15-stable backport request] ACPICA commits

by Jiri Slaby

Hi, can we have: 6da5e6f3028d ACPICA: Introduce ACPI_NONSTRING 2b82118845e0 ACPICA: Apply ACPI_NONSTRING 70662db73d54 ACPICA: Apply ACPI_NONSTRING in more places in 6.15? They fix the build of acpica against the kernel -- __nonstring is undefined otherwise. thanks, -- js suse labs

1 month, 1 week

2
1
0 0

6.15 bug fix to backport

by Rafael J. Wysocki

Hi Greg et al, Please pick up the following commit: commit 70523f335734b0b42f97647556d331edf684c7dc Author: Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> Date: Thu May 29 15:40:43 2025 +0200 Revert "x86/smp: Eliminate mwait_play_dead_cpuid_hint()" for the closest 6.15.y. The bug fixed by it is kind of nasty. Thanks!

1 month, 1 week

2
1
0 0

Linux 6.15.1

by Greg Kroah-Hartman

I'm announcing the release of the 6.15.1 kernel. All users of the 6.15 kernel series must upgrade. The updated 6.15.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.15.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm64/boot/dts/intel/socfpga_agilex5.dtsi | 4 arch/arm64/boot/dts/qcom/ipq9574.dtsi | 2 arch/arm64/boot/dts/qcom/sa8775p.dtsi | 248 +----------- arch/arm64/boot/dts/qcom/sm8350.dtsi | 2 arch/arm64/boot/dts/qcom/sm8450.dtsi | 2 arch/arm64/boot/dts/qcom/sm8550.dtsi | 2 arch/arm64/boot/dts/qcom/sm8650.dtsi | 2 arch/arm64/boot/dts/qcom/x1e001de-devkit.dts | 6 arch/arm64/boot/dts/qcom/x1e80100-asus-vivobook-s15.dts | 4 arch/arm64/boot/dts/qcom/x1e80100-dell-xps13-9345.dts | 2 arch/arm64/boot/dts/qcom/x1e80100-hp-omnibook-x14.dts | 14 arch/arm64/boot/dts/qcom/x1e80100-lenovo-yoga-slim7x.dts | 7 arch/arm64/boot/dts/qcom/x1e80100-qcp.dts | 6 arch/arm64/boot/dts/qcom/x1e80100.dtsi | 309 +++++++-------- arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi | 40 + arch/arm64/boot/dts/rockchip/rk3576.dtsi | 2 arch/arm64/boot/dts/ti/k3-am62-main.dtsi | 2 arch/arm64/boot/dts/ti/k3-am62a-main.dtsi | 2 arch/arm64/boot/dts/ti/k3-am62p-j722s-common-main.dtsi | 2 arch/arm64/boot/dts/ti/k3-am62x-sk-csi2-imx219.dtso | 3 arch/arm64/boot/dts/ti/k3-am62x-sk-csi2-ov5640.dtso | 2 arch/arm64/boot/dts/ti/k3-am62x-sk-csi2-tevi-ov5640.dtso | 2 arch/arm64/boot/dts/ti/k3-am65-main.dtsi | 2 arch/arm64/boot/dts/ti/k3-am68-sk-base-board.dts | 13 arch/arm64/boot/dts/ti/k3-j721e-sk-csi2-dual-imx219.dtso | 35 + arch/arm64/boot/dts/ti/k3-j721e-sk.dts | 31 + arch/arm64/boot/dts/ti/k3-j722s-evm.dts | 8 arch/arm64/boot/dts/ti/k3-j722s-main.dtsi | 4 arch/arm64/boot/dts/ti/k3-j784s4-j742s2-main-common.dtsi | 2 drivers/iommu/iommu.c | 34 + drivers/perf/arm-cmn.c | 11 fs/coredump.c | 65 ++- fs/pidfs.c | 1 include/linux/coredump.h | 1 include/linux/iommu.h | 2 net/sched/sch_hfsc.c | 9 37 files changed, 446 insertions(+), 439 deletions(-) Abel Vesa (1): arm64: dts: qcom: x1e80100: Fix PCIe 3rd controller DBI size Alok Tiwari (1): arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node Christian Brauner (3): pidfs: move O_RDWR into pidfs_alloc_file() coredump: fix error handling for replace_fd() coredump: hand a pidfd to the usermode coredump helper Greg Kroah-Hartman (1): Linux 6.15.1 Johan Hovold (5): arm64: dts: qcom: x1e001de-devkit: mark l12b and l15b always-on arm64: dts: qcom: x1e80100-dell-xps13-9345: mark l12b and l15b always-on arm64: dts: qcom: x1e80100-hp-x14: mark l12b and l15b always-on arm64: dts: qcom: x1e80100-qcp: mark l12b and l15b always-on arm64: dts: qcom: x1e80100-yoga-slim7x: mark l12b and l15b always-on Judith Mendez (4): arm64: dts: ti: k3-am62-main: Set eMMC clock parent to default arm64: dts: ti: k3-am62a-main: Set eMMC clock parent to default arm64: dts: ti: k3-am62p-j722s-common-main: Set eMMC clock parent to default arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0 Juerg Haefliger (1): arm64: dts: qcom: x1e80100-hp-omnibook-x14: Enable SMB2360 0 and 1 Karthik Sanagavarapu (1): arm64: dts: qcom: sa8775p: Remove cdsp compute-cb@10 Ling Xu (1): arm64: dts: qcom: sa8775p: Remove extra entries from the iommus property Lukasz Czechowski (1): arm64: dts: rockchip: fix internal USB hub instability on RK3399 Puma Niravkumar L Rabara (1): arm64: dts: socfpga: agilex5: fix gpio0 address Pedro Tammela (1): net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Robin Murphy (5): perf/arm-cmn: Fix REQ2/SNP2 mixup perf/arm-cmn: Initialise cmn->cpu earlier perf/arm-cmn: Add CMN S3 ACPI binding iommu: Avoid introducing more races iommu: Handle yet another race around registration Sebastian Reichel (1): arm64: dts: rockchip: Add missing SFC power-domains to rk3576 Siddharth Vadapalli (3): arm64: dts: ti: k3-j722s-evm: Enable "serdes_wiz0" and "serdes_wiz1" arm64: dts: ti: k3-j722s-main: Disable "serdes_wiz0" and "serdes_wiz1" arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix length of serdes_ln_ctrl Stephan Gerhold (13): arm64: dts: qcom: ipq9574: Add missing properties for cryptobam arm64: dts: qcom: sa8775p: Add missing properties for cryptobam arm64: dts: qcom: sm8450: Add missing properties for cryptobam arm64: dts: qcom: sm8550: Add missing properties for cryptobam arm64: dts: qcom: sm8650: Add missing properties for cryptobam arm64: dts: qcom: x1e001de-devkit: Fix vreg_l2j_1p2 voltage arm64: dts: qcom: x1e80100-asus-vivobook-s15: Fix vreg_l2j_1p2 voltage arm64: dts: qcom: x1e80100-hp-omnibook-x14: Fix vreg_l2j_1p2 voltage arm64: dts: qcom: x1e80100-lenovo-yoga-slim7x: Fix vreg_l2j_1p2 voltage arm64: dts: qcom: x1e80100-qcp: Fix vreg_l2j_1p2 voltage arm64: dts: qcom: x1e80100: Fix video thermal zone arm64: dts: qcom: x1e80100: Apply consistent critical thermal shutdown arm64: dts: qcom: x1e80100: Add GPU cooling Yemike Abhilash Chandra (7): arm64: dts: ti: k3-am62x: Remove clock-names property from IMX219 overlay arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in IMX219 overlay arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in OV5640 overlay arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators arm64: dts: ti: k3-j721e-sk: Remove clock-names property from IMX219 overlay arm64: dts: ti: k3-j721e-sk: Add requiried voltage supplies for IMX219

1 month, 1 week

1
1
0 0

Linux 6.14.10

by Greg Kroah-Hartman

I'm announcing the release of the 6.14.10 kernel. All users of the 6.14 kernel series must upgrade. The updated 6.14.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.14.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm64/boot/dts/intel/socfpga_agilex5.dtsi | 4 arch/arm64/boot/dts/qcom/ipq9574.dtsi | 2 arch/arm64/boot/dts/qcom/sa8775p.dtsi | 248 -------- arch/arm64/boot/dts/qcom/sm8350.dtsi | 2 arch/arm64/boot/dts/qcom/sm8450.dtsi | 2 arch/arm64/boot/dts/qcom/sm8550.dtsi | 2 arch/arm64/boot/dts/qcom/sm8650.dtsi | 2 arch/arm64/boot/dts/qcom/x1e001de-devkit.dts | 6 arch/arm64/boot/dts/qcom/x1e80100-asus-vivobook-s15.dts | 4 arch/arm64/boot/dts/qcom/x1e80100-dell-xps13-9345.dts | 2 arch/arm64/boot/dts/qcom/x1e80100-hp-omnibook-x14.dts | 14 arch/arm64/boot/dts/qcom/x1e80100-lenovo-yoga-slim7x.dts | 7 arch/arm64/boot/dts/qcom/x1e80100-qcp.dts | 6 arch/arm64/boot/dts/qcom/x1e80100.dtsi | 309 +++++----- arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi | 40 - arch/arm64/boot/dts/ti/k3-am62-main.dtsi | 2 arch/arm64/boot/dts/ti/k3-am62a-main.dtsi | 2 arch/arm64/boot/dts/ti/k3-am62p-j722s-common-main.dtsi | 2 arch/arm64/boot/dts/ti/k3-am62x-sk-csi2-imx219.dtso | 3 arch/arm64/boot/dts/ti/k3-am62x-sk-csi2-ov5640.dtso | 2 arch/arm64/boot/dts/ti/k3-am62x-sk-csi2-tevi-ov5640.dtso | 2 arch/arm64/boot/dts/ti/k3-am65-main.dtsi | 2 arch/arm64/boot/dts/ti/k3-am68-sk-base-board.dts | 13 arch/arm64/boot/dts/ti/k3-j721e-sk-csi2-dual-imx219.dtso | 35 + arch/arm64/boot/dts/ti/k3-j721e-sk.dts | 31 + arch/arm64/boot/dts/ti/k3-j722s-evm.dts | 8 arch/arm64/boot/dts/ti/k3-j722s-main.dtsi | 4 arch/arm64/boot/dts/ti/k3-j784s4-j742s2-main-common.dtsi | 2 arch/um/Makefile | 1 drivers/char/tpm/tpm-buf.c | 6 drivers/dma/idxd/cdev.c | 4 drivers/gpio/gpio-virtuser.c | 12 drivers/gpu/drm/amd/display/dc/dml2/dml21/dml21_translation_helper.c | 20 drivers/gpu/drm/amd/display/dc/link/link_dpms.c | 13 drivers/gpu/drm/xe/regs/xe_gt_regs.h | 1 drivers/gpu/drm/xe/xe_lrc.c | 4 drivers/gpu/drm/xe/xe_lrc_types.h | 4 drivers/gpu/drm/xe/xe_wa.c | 4 drivers/hid/amd-sfh-hid/sfh1_1/amd_sfh_init.c | 5 drivers/hid/hid-ids.h | 4 drivers/hid/hid-quirks.c | 2 drivers/iommu/iommu.c | 26 drivers/net/can/kvaser_pciefd.c | 81 +- drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2 drivers/nvme/host/core.c | 30 drivers/nvme/host/multipath.c | 3 drivers/nvme/host/nvme.h | 3 drivers/nvme/host/pci.c | 2 drivers/nvme/target/pci-epf.c | 10 drivers/perf/arm-cmn.c | 11 drivers/phy/rockchip/phy-rockchip-samsung-hdptx.c | 2 drivers/phy/starfive/phy-jh7110-usb.c | 7 drivers/platform/x86/fujitsu-laptop.c | 33 - drivers/platform/x86/thinkpad_acpi.c | 7 drivers/spi/spi-sun4i.c | 5 fs/coredump.c | 65 +- fs/nfs/client.c | 2 fs/nfs/dir.c | 15 fs/nfs/filelayout/filelayoutdev.c | 6 fs/nfs/flexfilelayout/flexfilelayoutdev.c | 6 fs/nfs/pnfs.h | 4 fs/nfs/pnfs_nfs.c | 9 fs/smb/server/oplock.c | 7 include/linux/coredump.h | 1 include/linux/iommu.h | 2 include/linux/nfs_fs_sb.h | 12 kernel/module/Kconfig | 5 net/sched/sch_hfsc.c | 9 sound/pci/hda/patch_realtek.c | 5 70 files changed, 672 insertions(+), 538 deletions(-) Abel Vesa (1): arm64: dts: qcom: x1e80100: Fix PCIe 3rd controller DBI size Alan Adamson (2): nvme: multipath: enable BLK_FEAT_ATOMIC_WRITES for multipathing nvme: all namespaces in a subsystem must adhere to a common atomic write size Alessandro Grassi (1): spi: spi-sun4i: fix early activation Algea Cao (1): phy: phy-rockchip-samsung-hdptx: Fix PHY PLL output 50.25MHz error Alok Tiwari (1): arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node Aradhya Bhatia (1): drm/xe/xe2hpg: Add Wa_22021007897 Aurabindo Pillai (1): drm/amd/display: check stream id dml21 wrapper to get plane_id Axel Forsman (1): can: kvaser_pciefd: Force IRQ edge in case of nested IRQ Christian Brauner (2): coredump: fix error handling for replace_fd() coredump: hand a pidfd to the usermode coredump helper Damien Le Moal (1): nvmet: pci-epf: cleanup nvmet_pci_epf_raise_irq() George Shen (1): drm/amd/display: fix link_set_dpms_off multi-display MST corner case Greg Kroah-Hartman (1): Linux 6.14.10 Hal Feng (1): phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure Ilya Guterman (1): nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro Jeff Layton (1): nfs: don't share pNFS DS connections between net namespaces Johan Hovold (5): arm64: dts: qcom: x1e001de-devkit: mark l12b and l15b always-on arm64: dts: qcom: x1e80100-dell-xps13-9345: mark l12b and l15b always-on arm64: dts: qcom: x1e80100-hp-x14: mark l12b and l15b always-on arm64: dts: qcom: x1e80100-qcp: mark l12b and l15b always-on arm64: dts: qcom: x1e80100-yoga-slim7x: mark l12b and l15b always-on John Chau (1): platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS Judith Mendez (4): arm64: dts: ti: k3-am62-main: Set eMMC clock parent to default arm64: dts: ti: k3-am62a-main: Set eMMC clock parent to default arm64: dts: ti: k3-am62p-j722s-common-main: Set eMMC clock parent to default arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0 Juerg Haefliger (1): arm64: dts: qcom: x1e80100-hp-omnibook-x14: Enable SMB2360 0 and 1 Kailang Yang (1): ALSA: hda/realtek - restore auto-mute mode for Dell Chrome platform Karthik Sanagavarapu (1): arm64: dts: qcom: sa8775p: Remove cdsp compute-cb@10 Ling Xu (1): arm64: dts: qcom: sa8775p: Remove extra entries from the iommus property Lukasz Czechowski (1): arm64: dts: rockchip: fix internal USB hub instability on RK3399 Puma Mario Limonciello (1): HID: amd_sfh: Avoid clearing reports for SRA sensor Mark Pearson (1): platform/x86: thinkpad_acpi: Ignore battery threshold change event notification Markus Burri (1): gpio: virtuser: fix potential out-of-bound write Masahiro Yamada (1): um: let 'make clean' properly clean underlying SUBARCH as well Milton Barrera (1): HID: quirks: Add ADATA XPG alpha wireless mouse support Namjae Jeon (1): ksmbd: use list_first_entry_or_null for opinfo_get_list() Niravkumar L Rabara (1): arm64: dts: socfpga: agilex5: fix gpio0 address Nishanth Menon (1): net: ethernet: ti: am65-cpsw: Lower random mac address error print to info Pedro Tammela (1): net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Purva Yeshi (2): dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open char: tpm: tpm-buf: Add sanity check fallback in read helpers Robin Murphy (4): perf/arm-cmn: Fix REQ2/SNP2 mixup perf/arm-cmn: Initialise cmn->cpu earlier perf/arm-cmn: Add CMN S3 ACPI binding iommu: Handle yet another race around registration Sami Tolvanen (1): kbuild: Require pahole <v1.28 or >v1.29 with GENDWARFKSYMS on X86 Siddharth Vadapalli (3): arm64: dts: ti: k3-j722s-evm: Enable "serdes_wiz0" and "serdes_wiz1" arm64: dts: ti: k3-j722s-main: Disable "serdes_wiz0" and "serdes_wiz1" arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix length of serdes_ln_ctrl Stephan Gerhold (13): arm64: dts: qcom: ipq9574: Add missing properties for cryptobam arm64: dts: qcom: sa8775p: Add missing properties for cryptobam arm64: dts: qcom: sm8450: Add missing properties for cryptobam arm64: dts: qcom: sm8550: Add missing properties for cryptobam arm64: dts: qcom: sm8650: Add missing properties for cryptobam arm64: dts: qcom: x1e001de-devkit: Fix vreg_l2j_1p2 voltage arm64: dts: qcom: x1e80100-asus-vivobook-s15: Fix vreg_l2j_1p2 voltage arm64: dts: qcom: x1e80100-hp-omnibook-x14: Fix vreg_l2j_1p2 voltage arm64: dts: qcom: x1e80100-lenovo-yoga-slim7x: Fix vreg_l2j_1p2 voltage arm64: dts: qcom: x1e80100-qcp: Fix vreg_l2j_1p2 voltage arm64: dts: qcom: x1e80100: Fix video thermal zone arm64: dts: qcom: x1e80100: Apply consistent critical thermal shutdown arm64: dts: qcom: x1e80100: Add GPU cooling Trond Myklebust (1): NFS: Avoid flushing data while holding directory locks in nfs_rename() Umesh Nerlige Ramappa (1): drm/xe: Save the gt pointer in lrc and drop the tile Valtteri Koskivuori (1): platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys Yemike Abhilash Chandra (7): arm64: dts: ti: k3-am62x: Remove clock-names property from IMX219 overlay arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in IMX219 overlay arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in OV5640 overlay arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators arm64: dts: ti: k3-j721e-sk: Remove clock-names property from IMX219 overlay arm64: dts: ti: k3-j721e-sk: Add requiried voltage supplies for IMX219

1 month, 1 week

1
1
0 0

Linux 6.12.32

by Greg Kroah-Hartman

I'm announcing the release of the 6.12.32 kernel. All users of the 6.12 kernel series must upgrade. The updated 6.12.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.12.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm64/boot/dts/qcom/ipq9574.dtsi | 2 arch/arm64/boot/dts/qcom/sa8775p.dtsi | 246 ---------- arch/arm64/boot/dts/qcom/sm8350.dtsi | 2 arch/arm64/boot/dts/qcom/sm8450.dtsi | 2 arch/arm64/boot/dts/qcom/sm8550.dtsi | 2 arch/arm64/boot/dts/qcom/sm8650.dtsi | 2 arch/arm64/boot/dts/qcom/x1e80100-asus-vivobook-s15.dts | 4 arch/arm64/boot/dts/qcom/x1e80100-lenovo-yoga-slim7x.dts | 7 arch/arm64/boot/dts/qcom/x1e80100-qcp.dts | 6 arch/arm64/boot/dts/qcom/x1e80100.dtsi | 10 arch/arm64/boot/dts/ti/k3-am62-main.dtsi | 2 arch/arm64/boot/dts/ti/k3-am62a-main.dtsi | 2 arch/arm64/boot/dts/ti/k3-am62p-j722s-common-main.dtsi | 2 arch/arm64/boot/dts/ti/k3-am62x-sk-csi2-imx219.dtso | 3 arch/arm64/boot/dts/ti/k3-am62x-sk-csi2-ov5640.dtso | 2 arch/arm64/boot/dts/ti/k3-am62x-sk-csi2-tevi-ov5640.dtso | 2 arch/arm64/boot/dts/ti/k3-am65-main.dtsi | 2 arch/arm64/boot/dts/ti/k3-am68-sk-base-board.dts | 13 arch/arm64/boot/dts/ti/k3-j721e-sk-csi2-dual-imx219.dtso | 35 + arch/arm64/boot/dts/ti/k3-j721e-sk.dts | 31 + arch/arm64/boot/dts/ti/k3-j722s-evm.dts | 8 arch/arm64/boot/dts/ti/k3-j722s-main.dtsi | 4 arch/arm64/boot/dts/ti/k3-j784s4-j742s2-main-common.dtsi | 2 arch/um/Makefile | 1 drivers/char/tpm/tpm-buf.c | 6 drivers/dma/idxd/cdev.c | 4 drivers/gpio/gpio-virtuser.c | 12 drivers/gpu/drm/amd/display/dc/dml2/dml21/dml21_translation_helper.c | 20 drivers/gpu/drm/amd/display/dc/link/link_dpms.c | 13 drivers/gpu/drm/xe/regs/xe_gt_regs.h | 1 drivers/gpu/drm/xe/xe_lrc.c | 4 drivers/gpu/drm/xe/xe_lrc_types.h | 4 drivers/gpu/drm/xe/xe_wa.c | 4 drivers/hid/hid-ids.h | 4 drivers/hid/hid-quirks.c | 2 drivers/net/can/kvaser_pciefd.c | 81 +-- drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2 drivers/nvme/host/pci.c | 2 drivers/perf/arm-cmn.c | 11 drivers/phy/rockchip/phy-rockchip-samsung-hdptx.c | 2 drivers/phy/starfive/phy-jh7110-usb.c | 7 drivers/platform/x86/fujitsu-laptop.c | 33 + drivers/platform/x86/thinkpad_acpi.c | 7 drivers/spi/spi-sun4i.c | 5 fs/coredump.c | 65 ++ fs/nfs/client.c | 2 fs/nfs/dir.c | 15 fs/nfs/filelayout/filelayoutdev.c | 6 fs/nfs/flexfilelayout/flexfilelayoutdev.c | 6 fs/nfs/pnfs.h | 4 fs/nfs/pnfs_nfs.c | 9 fs/smb/server/oplock.c | 7 include/linux/coredump.h | 1 include/linux/nfs_fs_sb.h | 12 net/sched/sch_hfsc.c | 9 sound/pci/hda/patch_realtek.c | 5 57 files changed, 406 insertions(+), 353 deletions(-) Alessandro Grassi (1): spi: spi-sun4i: fix early activation Algea Cao (1): phy: phy-rockchip-samsung-hdptx: Fix PHY PLL output 50.25MHz error Alok Tiwari (1): arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node Aradhya Bhatia (1): drm/xe/xe2hpg: Add Wa_22021007897 Aurabindo Pillai (1): drm/amd/display: check stream id dml21 wrapper to get plane_id Axel Forsman (1): can: kvaser_pciefd: Force IRQ edge in case of nested IRQ Christian Brauner (2): coredump: fix error handling for replace_fd() coredump: hand a pidfd to the usermode coredump helper George Shen (1): drm/amd/display: fix link_set_dpms_off multi-display MST corner case Greg Kroah-Hartman (1): Linux 6.12.32 Hal Feng (1): phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure Ilya Guterman (1): nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro Jeff Layton (1): nfs: don't share pNFS DS connections between net namespaces Johan Hovold (2): arm64: dts: qcom: x1e80100-qcp: mark l12b and l15b always-on arm64: dts: qcom: x1e80100-yoga-slim7x: mark l12b and l15b always-on John Chau (1): platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS Judith Mendez (4): arm64: dts: ti: k3-am62-main: Set eMMC clock parent to default arm64: dts: ti: k3-am62a-main: Set eMMC clock parent to default arm64: dts: ti: k3-am62p-j722s-common-main: Set eMMC clock parent to default arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0 Kailang Yang (1): ALSA: hda/realtek - restore auto-mute mode for Dell Chrome platform Karthik Sanagavarapu (1): arm64: dts: qcom: sa8775p: Remove cdsp compute-cb@10 Ling Xu (1): arm64: dts: qcom: sa8775p: Remove extra entries from the iommus property Mark Pearson (1): platform/x86: thinkpad_acpi: Ignore battery threshold change event notification Markus Burri (1): gpio: virtuser: fix potential out-of-bound write Masahiro Yamada (1): um: let 'make clean' properly clean underlying SUBARCH as well Milton Barrera (1): HID: quirks: Add ADATA XPG alpha wireless mouse support Namjae Jeon (1): ksmbd: use list_first_entry_or_null for opinfo_get_list() Nishanth Menon (1): net: ethernet: ti: am65-cpsw: Lower random mac address error print to info Pedro Tammela (1): net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Purva Yeshi (2): dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open char: tpm: tpm-buf: Add sanity check fallback in read helpers Robin Murphy (3): perf/arm-cmn: Fix REQ2/SNP2 mixup perf/arm-cmn: Initialise cmn->cpu earlier perf/arm-cmn: Add CMN S3 ACPI binding Siddharth Vadapalli (3): arm64: dts: ti: k3-j722s-evm: Enable "serdes_wiz0" and "serdes_wiz1" arm64: dts: ti: k3-j722s-main: Disable "serdes_wiz0" and "serdes_wiz1" arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix length of serdes_ln_ctrl Stephan Gerhold (8): arm64: dts: qcom: ipq9574: Add missing properties for cryptobam arm64: dts: qcom: sm8450: Add missing properties for cryptobam arm64: dts: qcom: sm8550: Add missing properties for cryptobam arm64: dts: qcom: sm8650: Add missing properties for cryptobam arm64: dts: qcom: x1e80100-asus-vivobook-s15: Fix vreg_l2j_1p2 voltage arm64: dts: qcom: x1e80100-lenovo-yoga-slim7x: Fix vreg_l2j_1p2 voltage arm64: dts: qcom: x1e80100-qcp: Fix vreg_l2j_1p2 voltage arm64: dts: qcom: x1e80100: Fix video thermal zone Trond Myklebust (1): NFS: Avoid flushing data while holding directory locks in nfs_rename() Umesh Nerlige Ramappa (1): drm/xe: Save the gt pointer in lrc and drop the tile Valtteri Koskivuori (1): platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys Yemike Abhilash Chandra (7): arm64: dts: ti: k3-am62x: Remove clock-names property from IMX219 overlay arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in IMX219 overlay arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in OV5640 overlay arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators arm64: dts: ti: k3-j721e-sk: Remove clock-names property from IMX219 overlay arm64: dts: ti: k3-j721e-sk: Add requiried voltage supplies for IMX219

1 month, 1 week

1
1
0 0

Linux 6.6.93

by Greg Kroah-Hartman

I'm announcing the release of the 6.6.93 kernel. All users of the 6.6 kernel series must upgrade. The updated 6.6.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.6.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/ABI/stable/sysfs-driver-dma-idxd | 6 Documentation/admin-guide/kernel-parameters.txt | 2 Documentation/driver-api/serial/driver.rst | 2 Documentation/hwmon/dell-smm-hwmon.rst | 14 Makefile | 2 arch/arm/boot/dts/nvidia/tegra114.dtsi | 2 arch/arm/mach-at91/pm.c | 21 arch/arm64/boot/dts/allwinner/sun50i-h6-beelink-gs1.dts | 38 arch/arm64/boot/dts/allwinner/sun50i-h6-orangepi-3.dts | 14 arch/arm64/boot/dts/allwinner/sun50i-h6-orangepi.dtsi | 22 arch/arm64/boot/dts/marvell/armada-3720-uDPU.dtsi | 8 arch/arm64/boot/dts/nvidia/tegra210-p2597.dtsi | 2 arch/arm64/boot/dts/nvidia/tegra234-p3740-0002+p3701-0008.dts | 10 arch/arm64/boot/dts/qcom/ipq9574.dtsi | 2 arch/arm64/boot/dts/qcom/sm8350.dtsi | 2 arch/arm64/boot/dts/qcom/sm8450.dtsi | 2 arch/arm64/boot/dts/qcom/sm8550.dtsi | 2 arch/arm64/boot/dts/ti/k3-am68-sk-base-board.dts | 13 arch/arm64/boot/dts/xilinx/zynqmp-clk-ccf.dtsi | 15 arch/arm64/include/asm/cputype.h | 2 arch/arm64/include/asm/pgtable.h | 3 arch/arm64/kernel/proton-pack.c | 1 arch/mips/include/asm/ftrace.h | 16 arch/mips/kernel/pm-cps.c | 30 arch/powerpc/include/asm/mmzone.h | 1 arch/powerpc/kernel/prom_init.c | 4 arch/powerpc/mm/book3s64/radix_pgtable.c | 3 arch/powerpc/mm/numa.c | 2 arch/powerpc/perf/core-book3s.c | 20 arch/powerpc/perf/isa207-common.c | 4 arch/powerpc/platforms/pseries/iommu.c | 29 arch/riscv/include/asm/page.h | 12 arch/riscv/include/asm/pgtable.h | 2 arch/s390/hypfs/hypfs_diag_fs.c | 2 arch/um/Makefile | 1 arch/um/kernel/mem.c | 1 arch/x86/Makefile | 2 arch/x86/boot/genimage.sh | 5 arch/x86/entry/entry.S | 2 arch/x86/events/amd/ibs.c | 20 arch/x86/include/asm/bug.h | 5 arch/x86/include/asm/ibt.h | 4 arch/x86/include/asm/nmi.h | 2 arch/x86/include/asm/perf_event.h | 1 arch/x86/kernel/cpu/bugs.c | 10 arch/x86/kernel/nmi.c | 42 arch/x86/kernel/reboot.c | 10 arch/x86/kernel/traps.c | 82 - arch/x86/mm/init.c | 9 arch/x86/mm/init_64.c | 15 arch/x86/mm/kaslr.c | 10 arch/x86/um/os-Linux/mcontext.c | 3 crypto/ahash.c | 4 crypto/algif_hash.c | 4 crypto/lzo-rle.c | 2 crypto/lzo.c | 2 crypto/skcipher.c | 1 drivers/accel/qaic/qaic_drv.c | 2 drivers/acpi/Kconfig | 2 drivers/acpi/acpi_pnp.c | 2 drivers/acpi/hed.c | 7 drivers/auxdisplay/charlcd.c | 5 drivers/auxdisplay/charlcd.h | 5 drivers/auxdisplay/hd44780.c | 2 drivers/auxdisplay/lcd2s.c | 2 drivers/auxdisplay/panel.c | 2 drivers/bluetooth/btusb.c | 98 - drivers/clk/clk-s2mps11.c | 3 drivers/clk/imx/clk-imx8mp.c | 151 ++ drivers/clk/qcom/Kconfig | 2 drivers/clk/qcom/camcc-sm8250.c | 56 drivers/clk/qcom/clk-alpha-pll.c | 52 drivers/clk/sunxi-ng/ccu-sun20i-d1.c | 44 drivers/clk/sunxi-ng/ccu_mp.h | 22 drivers/clocksource/mips-gic-timer.c | 6 drivers/cpufreq/cpufreq-dt-platdev.c | 1 drivers/cpufreq/tegra186-cpufreq.c | 7 drivers/cpuidle/governors/menu.c | 13 drivers/crypto/marvell/octeontx2/otx2_cptvf_reqmgr.c | 7 drivers/dma/fsl-edma-main.c | 2 drivers/dma/idxd/cdev.c | 20 drivers/dma/idxd/dma.c | 6 drivers/dma/idxd/idxd.h | 9 drivers/dma/idxd/sysfs.c | 34 drivers/edac/ie31200_edac.c | 28 drivers/firmware/arm_ffa/bus.c | 1 drivers/firmware/arm_ffa/driver.c | 8 drivers/firmware/arm_scmi/bus.c | 19 drivers/fpga/altera-cvp.c | 2 drivers/gpio/gpio-pca953x.c | 111 - drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c | 30 drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 7 drivers/gpu/drm/amd/amdgpu/gfxhub_v1_0.c | 10 drivers/gpu/drm/amd/amdgpu/mmhub_v1_7.c | 25 drivers/gpu/drm/amd/amdgpu/mmhub_v1_8.c | 27 drivers/gpu/drm/amd/amdgpu/mmhub_v9_4.c | 31 drivers/gpu/drm/amd/amdgpu/nv.c | 16 drivers/gpu/drm/amd/amdgpu/soc21.c | 10 drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 39 drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 69 drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 71 - drivers/gpu/drm/amd/amdkfd/kfd_process.c | 16 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 7 drivers/gpu/drm/amd/display/dc/clk_mgr/dcn315/dcn315_clk_mgr.c | 22 drivers/gpu/drm/amd/display/dc/clk_mgr/dcn316/dcn316_clk_mgr.c | 15 drivers/gpu/drm/amd/display/dc/core/dc.c | 1 drivers/gpu/drm/amd/display/dc/dce110/dce110_hw_sequencer.c | 3 drivers/gpu/drm/amd/display/dc/dcn30/dcn30_dpp.c | 11 drivers/gpu/drm/amd/display/dc/dcn315/dcn315_resource.c | 42 drivers/gpu/drm/amd/display/dc/inc/core_types.h | 2 drivers/gpu/drm/amd/display/dc/link/link_dpms.c | 13 drivers/gpu/drm/amd/display/dc/link/protocols/link_dp_capability.c | 33 drivers/gpu/drm/amd/display/dc/link/protocols/link_dp_phy.c | 8 drivers/gpu/drm/amd/display/dc/link/protocols/link_dp_training_8b_10b.c | 7 drivers/gpu/drm/amd/display/dc/link/protocols/link_edp_panel_control.c | 25 drivers/gpu/drm/amd/include/asic_reg/mmhub/mmhub_9_4_1_offset.h | 32 drivers/gpu/drm/amd/include/asic_reg/mmhub/mmhub_9_4_1_sh_mask.h | 48 drivers/gpu/drm/ast/ast_mode.c | 10 drivers/gpu/drm/bridge/adv7511/adv7511_audio.c | 2 drivers/gpu/drm/drm_atomic_helper.c | 28 drivers/gpu/drm/drm_edid.c | 1 drivers/gpu/drm/drm_gem.c | 4 drivers/gpu/drm/mediatek/mtk_dpi.c | 5 drivers/gpu/drm/panel/panel-edp.c | 1 drivers/gpu/drm/rockchip/rockchip_drm_vop2.c | 6 drivers/gpu/drm/v3d/v3d_drv.c | 25 drivers/hid/hid-ids.h | 4 drivers/hid/hid-quirks.c | 2 drivers/hid/usbhid/usbkbd.c | 2 drivers/hwmon/dell-smm-hwmon.c | 5 drivers/hwmon/gpio-fan.c | 16 drivers/hwmon/xgene-hwmon.c | 2 drivers/hwtracing/intel_th/Kconfig | 1 drivers/hwtracing/intel_th/msu.c | 31 drivers/i2c/busses/i2c-designware-common.c | 1 drivers/i2c/busses/i2c-designware-core.h | 5 drivers/i2c/busses/i2c-designware-master.c | 43 drivers/i2c/busses/i2c-designware-pcidrv.c | 40 drivers/i2c/busses/i2c-designware-platdrv.c | 54 drivers/i2c/busses/i2c-designware-slave.c | 3 drivers/i2c/busses/i2c-pxa.c | 5 drivers/i2c/busses/i2c-qup.c | 36 drivers/i3c/master/svc-i3c-master.c | 4 drivers/infiniband/core/umem.c | 36 drivers/infiniband/core/uverbs_cmd.c | 144 +- drivers/infiniband/core/verbs.c | 11 drivers/input/joystick/xpad.c | 3 drivers/iommu/amd/io_pgtable_v2.c | 2 drivers/iommu/dma-iommu.c | 28 drivers/leds/rgb/leds-pwm-multicolor.c | 5 drivers/leds/trigger/ledtrig-netdev.c | 16 drivers/mailbox/mailbox.c | 7 drivers/mailbox/pcc.c | 8 drivers/md/dm-cache-target.c | 24 drivers/md/dm-table.c | 4 drivers/md/dm.c | 8 drivers/media/i2c/adv7180.c | 34 drivers/media/i2c/imx219.c | 2 drivers/media/i2c/tc358746.c | 19 drivers/media/platform/qcom/camss/camss-csid.c | 60 drivers/media/platform/st/sti/c8sectpfe/c8sectpfe-core.c | 3 drivers/media/test-drivers/vivid/vivid-kthread-cap.c | 11 drivers/media/test-drivers/vivid/vivid-kthread-out.c | 11 drivers/media/test-drivers/vivid/vivid-kthread-touch.c | 11 drivers/media/test-drivers/vivid/vivid-sdr-cap.c | 11 drivers/media/usb/cx231xx/cx231xx-417.c | 2 drivers/media/usb/uvc/uvc_ctrl.c | 77 - drivers/media/usb/uvc/uvc_v4l2.c | 6 drivers/media/v4l2-core/v4l2-subdev.c | 2 drivers/mfd/tps65219.c | 7 drivers/mmc/host/dw_mmc-exynos.c | 41 drivers/mmc/host/sdhci-pci-core.c | 6 drivers/mmc/host/sdhci.c | 9 drivers/net/bonding/bond_main.c | 2 drivers/net/can/c_can/c_can_platform.c | 2 drivers/net/can/kvaser_pciefd.c | 88 - drivers/net/can/slcan/slcan-core.c | 26 drivers/net/ethernet/amd/pds_core/core.c | 5 drivers/net/ethernet/amd/pds_core/core.h | 2 drivers/net/ethernet/apm/xgene-v2/main.c | 4 drivers/net/ethernet/freescale/enetc/enetc.c | 16 drivers/net/ethernet/freescale/fec_main.c | 52 drivers/net/ethernet/intel/ice/ice_ethtool.c | 3 drivers/net/ethernet/intel/ice/ice_irq.c | 25 drivers/net/ethernet/intel/ice/ice_lag.c | 6 drivers/net/ethernet/intel/ice/ice_lib.c | 2 drivers/net/ethernet/intel/ice/ice_virtchnl.c | 1 drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 14 drivers/net/ethernet/marvell/octeontx2/af/rvu.h | 2 drivers/net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 24 drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c | 11 drivers/net/ethernet/marvell/octeontx2/nic/otx2_common.c | 8 drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 22 drivers/net/ethernet/mellanox/mlx4/alloc.c | 6 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 2 drivers/net/ethernet/mellanox/mlx5/core/en.h | 2 drivers/net/ethernet/mellanox/mlx5/core/en/params.c | 15 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 5 drivers/net/ethernet/mellanox/mlx5/core/en_selftest.c | 3 drivers/net/ethernet/mellanox/mlx5/core/esw/legacy.c | 2 drivers/net/ethernet/mellanox/mlx5/core/events.c | 11 drivers/net/ethernet/mellanox/mlx5/core/fs_ft_pool.c | 6 drivers/net/ethernet/mellanox/mlx5/core/fs_ft_pool.h | 2 drivers/net/ethernet/mellanox/mlx5/core/health.c | 1 drivers/net/ethernet/mellanox/mlx5/core/lib/fs_chains.c | 3 drivers/net/ethernet/microchip/lan743x_main.c | 19 drivers/net/ethernet/microsoft/mana/gdma_main.c | 2 drivers/net/ethernet/realtek/r8169_main.c | 1 drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c | 2 drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2 drivers/net/ethernet/ti/cpsw_new.c | 1 drivers/net/ieee802154/ca8210.c | 9 drivers/net/phy/phylink.c | 2 drivers/net/usb/r8152.c | 1 drivers/net/vxlan/vxlan_core.c | 36 drivers/net/wireless/ath/ath12k/core.h | 1 drivers/net/wireless/ath/ath12k/dp_tx.c | 6 drivers/net/wireless/ath/ath12k/hal_desc.h | 2 drivers/net/wireless/ath/ath12k/pci.c | 13 drivers/net/wireless/ath/ath12k/wmi.c | 4 drivers/net/wireless/ath/ath9k/init.c | 4 drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.c | 10 drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 2 drivers/net/wireless/mediatek/mt76/mt76.h | 1 drivers/net/wireless/mediatek/mt76/mt76_connac3_mac.h | 3 drivers/net/wireless/mediatek/mt76/mt76x0/pci.c | 3 drivers/net/wireless/mediatek/mt76/mt76x0/usb.c | 3 drivers/net/wireless/mediatek/mt76/mt76x2/pci.c | 3 drivers/net/wireless/mediatek/mt76/mt76x2/usb.c | 3 drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 4 drivers/net/wireless/mediatek/mt76/tx.c | 3 drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 17 drivers/net/wireless/realtek/rtw88/mac.c | 6 drivers/net/wireless/realtek/rtw88/main.c | 40 drivers/net/wireless/realtek/rtw88/reg.h | 3 drivers/net/wireless/realtek/rtw88/rtw8822b.c | 14 drivers/net/wireless/realtek/rtw88/util.c | 3 drivers/net/wireless/realtek/rtw89/fw.c | 2 drivers/net/wireless/realtek/rtw89/regd.c | 2 drivers/net/wireless/realtek/rtw89/ser.c | 4 drivers/nvdimm/label.c | 3 drivers/nvme/host/pci.c | 8 drivers/nvme/target/tcp.c | 3 drivers/nvmem/core.c | 16 drivers/nvmem/qfprom.c | 26 drivers/nvmem/rockchip-otp.c | 17 drivers/pci/Kconfig | 6 drivers/pci/controller/dwc/pcie-designware-ep.c | 2 drivers/pci/controller/pcie-brcmstb.c | 5 drivers/pci/controller/vmd.c | 20 drivers/pci/setup-bus.c | 6 drivers/perf/arm-cmn.c | 10 drivers/perf/arm_pmuv3.c | 4 drivers/phy/phy-core.c | 7 drivers/phy/renesas/phy-rcar-gen3-usb2.c | 143 +- drivers/phy/starfive/phy-jh7110-usb.c | 7 drivers/pinctrl/bcm/pinctrl-bcm281xx.c | 44 drivers/pinctrl/devicetree.c | 10 drivers/pinctrl/meson/pinctrl-meson.c | 2 drivers/pinctrl/qcom/pinctrl-apq8064.c | 2 drivers/pinctrl/qcom/pinctrl-apq8084.c | 2 drivers/pinctrl/qcom/pinctrl-ipq4019.c | 2 drivers/pinctrl/qcom/pinctrl-ipq5018.c | 2 drivers/pinctrl/qcom/pinctrl-ipq5332.c | 2 drivers/pinctrl/qcom/pinctrl-ipq6018.c | 2 drivers/pinctrl/qcom/pinctrl-ipq8064.c | 2 drivers/pinctrl/qcom/pinctrl-ipq8074.c | 2 drivers/pinctrl/qcom/pinctrl-ipq9574.c | 2 drivers/pinctrl/qcom/pinctrl-mdm9607.c | 2 drivers/pinctrl/qcom/pinctrl-mdm9615.c | 2 drivers/pinctrl/qcom/pinctrl-msm.c | 27 drivers/pinctrl/qcom/pinctrl-msm.h | 2 drivers/pinctrl/qcom/pinctrl-msm8226.c | 2 drivers/pinctrl/qcom/pinctrl-msm8660.c | 2 drivers/pinctrl/qcom/pinctrl-msm8909.c | 2 drivers/pinctrl/qcom/pinctrl-msm8916.c | 2 drivers/pinctrl/qcom/pinctrl-msm8953.c | 2 drivers/pinctrl/qcom/pinctrl-msm8960.c | 2 drivers/pinctrl/qcom/pinctrl-msm8976.c | 2 drivers/pinctrl/qcom/pinctrl-msm8994.c | 2 drivers/pinctrl/qcom/pinctrl-msm8996.c | 2 drivers/pinctrl/qcom/pinctrl-msm8998.c | 2 drivers/pinctrl/qcom/pinctrl-msm8x74.c | 2 drivers/pinctrl/qcom/pinctrl-qcm2290.c | 2 drivers/pinctrl/qcom/pinctrl-qcs404.c | 2 drivers/pinctrl/qcom/pinctrl-qdf2xxx.c | 2 drivers/pinctrl/qcom/pinctrl-qdu1000.c | 2 drivers/pinctrl/qcom/pinctrl-sa8775p.c | 2 drivers/pinctrl/qcom/pinctrl-sc7180.c | 2 drivers/pinctrl/qcom/pinctrl-sc7280.c | 2 drivers/pinctrl/qcom/pinctrl-sc8180x.c | 2 drivers/pinctrl/qcom/pinctrl-sc8280xp.c | 2 drivers/pinctrl/qcom/pinctrl-sdm660.c | 2 drivers/pinctrl/qcom/pinctrl-sdm670.c | 2 drivers/pinctrl/qcom/pinctrl-sdm845.c | 2 drivers/pinctrl/qcom/pinctrl-sdx55.c | 2 drivers/pinctrl/qcom/pinctrl-sdx65.c | 2 drivers/pinctrl/qcom/pinctrl-sdx75.c | 2 drivers/pinctrl/qcom/pinctrl-sm6115.c | 2 drivers/pinctrl/qcom/pinctrl-sm6125.c | 2 drivers/pinctrl/qcom/pinctrl-sm6350.c | 2 drivers/pinctrl/qcom/pinctrl-sm6375.c | 2 drivers/pinctrl/qcom/pinctrl-sm7150.c | 2 drivers/pinctrl/qcom/pinctrl-sm8150.c | 2 drivers/pinctrl/qcom/pinctrl-sm8250.c | 2 drivers/pinctrl/qcom/pinctrl-sm8350.c | 2 drivers/pinctrl/qcom/pinctrl-sm8450.c | 2 drivers/pinctrl/qcom/pinctrl-sm8550.c | 2 drivers/pinctrl/tegra/pinctrl-tegra.c | 59 drivers/pinctrl/tegra/pinctrl-tegra.h | 6 drivers/platform/x86/dell/dell-wmi-sysman/passobj-attributes.c | 2 drivers/platform/x86/fujitsu-laptop.c | 33 drivers/platform/x86/thinkpad_acpi.c | 7 drivers/pmdomain/imx/gpcv2.c | 2 drivers/regulator/ad5398.c | 12 drivers/remoteproc/qcom_wcnss.c | 34 drivers/rtc/rtc-ds1307.c | 4 drivers/rtc/rtc-rv3032.c | 2 drivers/s390/crypto/vfio_ap_ops.c | 72 - drivers/scsi/lpfc/lpfc_hbadisc.c | 17 drivers/scsi/lpfc/lpfc_init.c | 2 drivers/scsi/mpi3mr/mpi3mr_fw.c | 3 drivers/scsi/mpt3sas/mpt3sas_ctl.c | 12 drivers/scsi/st.c | 29 drivers/scsi/st.h | 2 drivers/soc/apple/rtkit-internal.h | 1 drivers/soc/apple/rtkit.c | 58 drivers/soc/ti/k3-socinfo.c | 13 drivers/soundwire/amd_manager.c | 2 drivers/soundwire/bus.c | 9 drivers/spi/spi-fsl-dspi.c | 46 drivers/spi/spi-rockchip.c | 2 drivers/spi/spi-sun4i.c | 5 drivers/spi/spi-zynqmp-gqspi.c | 20 drivers/target/iscsi/iscsi_target.c | 2 drivers/target/target_core_spc.c | 14 drivers/thermal/intel/x86_pkg_temp_thermal.c | 1 drivers/thermal/qoriq_thermal.c | 13 drivers/thunderbolt/retimer.c | 8 drivers/tty/serial/8250/8250_port.c | 2 drivers/tty/serial/atmel_serial.c | 2 drivers/tty/serial/imx.c | 2 drivers/tty/serial/serial_mctrl_gpio.c | 34 drivers/tty/serial/serial_mctrl_gpio.h | 17 drivers/tty/serial/sh-sci.c | 98 + drivers/tty/serial/stm32-usart.c | 2 drivers/ufs/core/ufshcd.c | 29 drivers/usb/host/xhci-ring.c | 12 drivers/vdpa/mlx5/net/mlx5_vnet.c | 3 drivers/vfio/pci/vfio_pci_config.c | 3 drivers/vfio/pci/vfio_pci_core.c | 10 drivers/vfio/pci/vfio_pci_intrs.c | 2 drivers/vhost/scsi.c | 23 drivers/video/fbdev/core/bitblit.c | 5 drivers/video/fbdev/core/fbcon.c | 10 drivers/video/fbdev/core/fbcon.h | 38 drivers/video/fbdev/core/fbcon_ccw.c | 5 drivers/video/fbdev/core/fbcon_cw.c | 5 drivers/video/fbdev/core/fbcon_ud.c | 5 drivers/video/fbdev/core/tileblit.c | 45 drivers/video/fbdev/fsl-diu-fb.c | 1 drivers/virtio/virtio_ring.c | 2 drivers/watchdog/aspeed_wdt.c | 81 + drivers/xen/platform-pci.c | 4 drivers/xen/xenbus/xenbus_probe.c | 14 fs/btrfs/block-group.c | 18 fs/btrfs/discard.c | 34 fs/btrfs/disk-io.c | 28 fs/btrfs/extent_io.c | 7 fs/btrfs/relocation.c | 6 fs/btrfs/scrub.c | 4 fs/btrfs/send.c | 6 fs/coredump.c | 81 + fs/dlm/lowcomms.c | 4 fs/ext4/balloc.c | 4 fs/ext4/ext4.h | 5 fs/ext4/extents.c | 19 fs/ext4/inode.c | 81 - fs/ext4/page-io.c | 16 fs/ext4/super.c | 19 fs/f2fs/sysfs.c | 74 - fs/fuse/dir.c | 2 fs/gfs2/glock.c | 11 fs/jbd2/recovery.c | 11 fs/namespace.c | 6 fs/nfs/client.c | 2 fs/nfs/delegation.c | 3 fs/nfs/dir.c | 15 fs/nfs/filelayout/filelayoutdev.c | 6 fs/nfs/flexfilelayout/flexfilelayout.c | 1 fs/nfs/flexfilelayout/flexfilelayoutdev.c | 6 fs/nfs/inode.c | 2 fs/nfs/internal.h | 5 fs/nfs/nfs3proc.c | 2 fs/nfs/nfs4proc.c | 9 fs/nfs/nfs4state.c | 10 fs/nfs/pnfs.h | 4 fs/nfs/pnfs_nfs.c | 9 fs/orangefs/inode.c | 7 fs/pstore/inode.c | 2 fs/pstore/internal.h | 4 fs/pstore/platform.c | 11 fs/smb/client/cifsacl.c | 17 fs/smb/client/cifspdu.h | 5 fs/smb/client/cifsproto.h | 7 fs/smb/client/cifssmb.c | 57 fs/smb/client/connect.c | 30 fs/smb/client/fs_context.c | 2 fs/smb/client/fs_context.h | 3 fs/smb/client/link.c | 8 fs/smb/client/readdir.c | 7 fs/smb/client/smb1ops.c | 228 ++- fs/smb/client/smb2file.c | 11 fs/smb/client/smb2ops.c | 30 fs/smb/client/transport.c | 2 fs/smb/common/smb2pdu.h | 3 fs/smb/server/oplock.c | 7 fs/smb/server/vfs.c | 14 include/crypto/hash.h | 3 include/drm/drm_atomic.h | 23 include/drm/drm_gem.h | 13 include/linux/bpf-cgroup.h | 1 include/linux/coredump.h | 1 include/linux/dma-mapping.h | 12 include/linux/highmem.h | 6 include/linux/hrtimer.h | 1 include/linux/ipv6.h | 1 include/linux/lzo.h | 8 include/linux/mlx4/device.h | 2 include/linux/mlx5/fs.h | 2 include/linux/msi.h | 33 include/linux/nfs_fs_sb.h | 12 include/linux/page-flags.h | 7 include/linux/perf_event.h | 8 include/linux/rcupdate.h | 2 include/linux/rcutree.h | 2 include/linux/trace.h | 4 include/linux/trace_seq.h | 8 include/linux/usb/r8152.h | 1 include/media/v4l2-subdev.h | 4 include/net/af_unix.h | 49 include/net/scm.h | 11 include/net/xfrm.h | 1 include/rdma/uverbs_std_types.h | 2 include/sound/hda_codec.h | 1 include/sound/pcm.h | 2 include/trace/events/btrfs.h | 2 include/uapi/linux/bpf.h | 1 include/uapi/linux/idxd.h | 1 include/ufs/ufs_quirks.h | 6 io_uring/fdinfo.c | 4 io_uring/io_uring.c | 1 kernel/bpf/cgroup.c | 33 kernel/bpf/hashtab.c | 2 kernel/bpf/syscall.c | 7 kernel/bpf/verifier.c | 4 kernel/cgroup/cgroup.c | 2 kernel/events/core.c | 33 kernel/events/hw_breakpoint.c | 5 kernel/events/ring_buffer.c | 1 kernel/fork.c | 9 kernel/padata.c | 3 kernel/printk/printk.c | 14 kernel/rcu/tree_plugin.h | 22 kernel/sched/fair.c | 6 kernel/softirq.c | 18 kernel/time/hrtimer.c | 103 + kernel/time/posix-timers.c | 1 kernel/time/timer_list.c | 4 kernel/trace/trace.c | 11 kernel/trace/trace.h | 16 lib/dynamic_queue_limits.c | 2 lib/lzo/Makefile | 2 lib/lzo/lzo1x_compress.c | 102 + lib/lzo/lzo1x_compress_safe.c | 18 mm/memcontrol.c | 6 mm/page_alloc.c | 8 net/Makefile | 2 net/bluetooth/l2cap_core.c | 15 net/bridge/br_mdb.c | 2 net/bridge/br_nf_core.c | 7 net/bridge/br_private.h | 1 net/can/bcm.c | 79 - net/core/pktgen.c | 13 net/core/scm.c | 17 net/ipv4/esp4.c | 49 net/ipv4/fib_frontend.c | 18 net/ipv4/fib_rules.c | 4 net/ipv4/fib_trie.c | 22 net/ipv4/inet_hashtables.c | 37 net/ipv4/ip_gre.c | 16 net/ipv4/tcp_input.c | 56 net/ipv6/esp6.c | 49 net/ipv6/fib6_rules.c | 4 net/ipv6/ip6_output.c | 9 net/llc/af_llc.c | 8 net/mac80211/mlme.c | 4 net/netfilter/nf_conntrack_standalone.c | 12 net/sched/sch_hfsc.c | 15 net/smc/smc_pnet.c | 8 net/sunrpc/clnt.c | 3 net/sunrpc/rpcb_clnt.c | 5 net/sunrpc/sched.c | 2 net/tipc/crypto.c | 5 net/unix/Kconfig | 5 net/unix/Makefile | 2 net/unix/af_unix.c | 120 + net/unix/garbage.c | 691 ++++++---- net/unix/scm.c | 161 -- net/unix/scm.h | 10 net/xfrm/xfrm_policy.c | 3 net/xfrm/xfrm_state.c | 6 samples/bpf/Makefile | 2 scripts/config | 26 scripts/kconfig/merge_config.sh | 4 security/integrity/ima/ima_main.c | 4 security/smack/smackfs.c | 21 sound/core/oss/pcm_oss.c | 3 sound/core/pcm_native.c | 11 sound/core/seq/seq_clientmgr.c | 5 sound/core/seq/seq_memory.c | 1 sound/pci/hda/hda_beep.c | 15 sound/pci/hda/patch_realtek.c | 77 + sound/soc/codecs/cs42l43-jack.c | 7 sound/soc/codecs/mt6359-accdet.h | 9 sound/soc/codecs/pcm3168a.c | 6 sound/soc/codecs/rt722-sdca-sdw.c | 49 sound/soc/codecs/tas2764.c | 53 sound/soc/fsl/imx-card.c | 2 sound/soc/intel/boards/bytcr_rt5640.c | 13 sound/soc/mediatek/mt8188/mt8188-afe-clk.c | 8 sound/soc/mediatek/mt8188/mt8188-afe-clk.h | 8 sound/soc/mediatek/mt8188/mt8188-afe-pcm.c | 4 sound/soc/qcom/sm8250.c | 3 sound/soc/soc-dai.c | 8 sound/soc/soc-ops.c | 29 sound/soc/sof/ipc4-control.c | 11 sound/soc/sof/ipc4-pcm.c | 3 sound/soc/sof/topology.c | 18 sound/soc/sunxi/sun4i-codec.c | 53 tools/bpf/bpftool/common.c | 3 tools/build/Makefile.build | 6 tools/include/uapi/linux/bpf.h | 1 tools/lib/bpf/libbpf.c | 2 tools/net/ynl/lib/ynl.c | 2 tools/objtool/check.c | 21 tools/testing/kunit/qemu_configs/x86_64.py | 4 tools/testing/selftests/bpf/prog_tests/sockmap_ktls.c | 1 tools/testing/selftests/net/forwarding/bridge_mdb.sh | 2 tools/testing/selftests/net/gro.sh | 3 551 files changed, 5714 insertions(+), 2737 deletions(-) Aaron Kling (1): cpufreq: tegra186: Share policy per cluster Ahmad Fatoum (2): clk: imx8mp: inform CCF of maximum frequency of clocks pmdomain: imx: gpcv2: use proper helper for property detection Al Viro (2): hypfs_create_cpu_files(): add missing check for hypfs_mkdir() failure __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock Aleksander Jan Bajkowski (1): r8152: add vendor/device ID pair for Dell Alienware AW1022z Alessandro Grassi (1): spi: spi-sun4i: fix early activation Alex Deucher (1): drm/amd/display/dm: drop hw_support check in amdgpu_dm_i2c_xfer() Alex Williamson (1): vfio/pci: Handle INTx IRQ_NOTCONNECTED Alexander Stein (1): hwmon: (gpio-fan) Add missing mutex locks Alexander Sverdlin (1): net: ethernet: ti: cpsw_new: populate netdev of_node Alexandre Belloni (2): rtc: rv3032: fix EERD location rtc: ds1307: stop disabling alarms on probe Alexei Lazar (1): net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB Alexey Dobriyan (1): x86/boot: Compile boot code with -std=gnu11 too Alexey Klimov (1): ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup() Alexis Lothoré (1): serial: mctrl_gpio: split disable_ms into sync and no_sync APIs Alice Guo (1): thermal/drivers/qoriq: Power down TMU on system suspend Alistair Francis (1): nvmet-tcp: don't restore null sk_state_change Alok Tiwari (1): arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node Andre Przywara (1): clk: sunxi-ng: d1: Add missing divider for MMC mod clocks Andreas Gruenbacher (1): gfs2: Check for empty queue in run_queue Andreas Schwab (1): powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 Andrew Davis (1): soc: ti: k3-socinfo: Do not use syscon helper to build regmap Andrey Vatoropin (1): hwmon: (xgene-hwmon) use appropriate type for the latency value André Draszik (1): clk: s2mps11: initialise clk_hw_onecell_data::num before accessing ::hws[] in probe() Andy Shevchenko (7): gpio: pca953x: Split pca953x_restore_context() and pca953x_save_context() gpio: pca953x: Simplify code with cleanup helpers i2c: designware: Remove ->disable() callback i2c: designware: Use temporary variable for struct device tracing: Mark binary printing functions with __printf() attribute auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct hd44780_common" ieee802154: ca8210: Use proper setters and getters for bitwise types Andy Yan (1): drm/rockchip: vop2: Add uv swap for cluster window AngeloGioacchino Del Regno (1): drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence Ankur Arora (3): rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y rcu: handle unstable rdp in rcu_read_unlock_strict() rcu: fix header guard for rcu_all_qs() Anthony Krowiak (1): s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log Arnd Bergmann (3): net: xgene-v2: remove incorrect ACPI_PTR annotation EDAC/ie31200: work around false positive build warning watchdog: aspeed: fix 64-bit division Artur Weber (1): pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" Athira Rajeev (1): arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src Avula Sri Charan (1): wifi: ath12k: Avoid napi_sync() before napi_enable() Axel Forsman (2): can: kvaser_pciefd: Continue parsing DMA buf after dropped RX can: kvaser_pciefd: Force IRQ edge in case of nested IRQ Balbir Singh (2): x86/kaslr: Reduce KASLR entropy on most x86 systems x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers bounce buffers Baokun Li (2): ext4: reject the 'data_err=abort' option in nojournal mode ext4: do not convert the unwritten extents if data writeback fails Benjamin Berg (1): um: Store full CSGSFS and SS register from mcontext Benjamin Lin (1): wifi: mt76: mt7996: revise TXS size Bibo Mao (1): MIPS: Use arch specific syscall name match function Bitterblue Smith (6): wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31 wifi: rtw88: Fix download_firmware_validate() for RTL8814AU wifi: rtw88: Fix __rtw_download_firmware() for RTL8814AU wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate Bogdan-Gabriel Roman (1): spi: spi-fsl-dspi: Halt the module after a new message transfer Boris Burkov (2): btrfs: make btrfs_discard_workfn() block_group ref explicit btrfs: check folio mapping after unlock in relocate_one_folio() Brandon Kammerdiener (1): bpf: fix possible endless loop in BPF map iteration Brendan Jackman (1): kunit: tool: Use qboot on QEMU x86_64 Breno Leitao (2): x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 memcg: always call cond_resched() after fn() Brett Creeley (1): pds_core: Prevent possible adminq overflow/stuck condition Carlos Sanchez (1): can: slcan: allow reception of short error messages Carolina Jubran (1): net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled Cezary Rojewski (1): ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode Chaohai Chen (1): scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr() Charlene Liu (1): drm/amd/display: remove minimum Dispclk and apply oem panel timing. Charles Keepax (3): ASoC: rt722-sdca: Add some missing readable registers ASoC: cs42l43: Disable headphone clamps during type detection soundwire: bus: Fix race on the creation of the IRQ domain Chenyuan Yang (1): ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of() Chin-Ting Kuo (1): watchdog: aspeed: Update bootstatus handling Choong Yong Liang (1): net: phylink: use pl->link_interface in phylink_expects_phy() Christian Brauner (2): coredump: fix error handling for replace_fd() coredump: hand a pidfd to the usermode coredump helper Christian Göttsche (1): ext4: reorder capability check last Christophe JAILLET (1): i2c: designware: Fix an error handling path in i2c_dw_pci_probe() Claudiu Beznea (5): phy: renesas: rcar-gen3-usb2: Add support to initialize the bus phy: renesas: rcar-gen3-usb2: Move IRQ request in probe phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off serial: sh-sci: Update the suspend/resume support Cong Wang (1): sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() Csókás, Bence (1): net: fec: Refactor MAC reset to function Dan Carpenter (1): pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group() Daniel Gomez (1): kconfig: merge_config: use an empty file as initfile Dave Ertman (1): ice: Fix LACP bonds without SRIOV environment Dave Jiang (2): dmaengine: idxd: add wq driver name support for accel-config user tool dmaengine: idxd: Fix ->poll() return value David Hildenbrand (1): kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork() David Plowman (1): media: i2c: imx219: Correct the minimum vblanking value David Rosca (1): drm/amdgpu: Update SRIOV video codec caps David Wei (1): tools: ynl-gen: validate 0 len strings from kernel Depeng Shao (1): media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is available Diogo Ivo (2): ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator Dmitry Baryshkov (5): nvmem: core: verify cell's raw_len nvmem: core: update raw_len if the bit reading is required nvmem: qfprom: switch to 4-byte aligned reads phy: core: don't require set_mode() callback for phy_get_mode() to work pinctrl: qcom: switch to devm_register_sys_off_handler() Dmitry Bogdanov (1): scsi: target: iscsi: Fix timeout on deleted connection Dominik Grzegorzek (1): padata: do not leak refcount in reorder_work Dongli Zhang (1): vhost-scsi: protect vq->log_used with vq->mutex Douglas Anderson (1): drm/panel-edp: Add Starry 116KHD024006 Ed Burcher (1): ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10 Eduard Zingerman (1): bpf: don't do clean_live_states when state->loop_entry->branches > 0 Emanuele Ghidoli (1): gpio: pca953x: fix IRQ storm on system wake up En-Wei Wu (1): Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump handling Eric Dumazet (2): posix-timers: Add cond_resched() to posix_timer_add() search loop tcp: bring back NUMA dispersion in inet_ehash_locks_alloc() Eric Woudstra (1): net: ethernet: mtk_ppe_offload: Allow QinQ, double ETH_P_8021Q only Erick Shepherd (2): mmc: host: Wait for Vdd to settle on card power off mmc: sdhci: Disable SD card clock before changing parameters Felix Fietkau (1): wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2 Felix Kuehling (1): drm/amdgpu: Allow P2P access through XGMI Filipe Manana (3): btrfs: fix non-empty delayed iputs list on unmount due to async workers btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work() btrfs: send: return -ENAMETOOLONG when attempting a path that is too long Frank Li (2): PCI: dwc: ep: Ensure proper iteration over outbound map windows i3c: master: svc: Flush FIFO before sending Dynamic Address Assignment(DAA) Frederic Weisbecker (1): hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING Frederick Lawler (1): ima: process_measurement() needlessly takes inode_lock() on MAY_READ Frediano Ziglio (1): xen: Add support for XenServer 6.1 platform device Gabor Juhos (1): arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs Gaurav Batra (1): powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory Geert Uytterhoeven (2): ipv4: ip_gre: Fix set but not used warning in ipgre_err() if IPv4-only serial: sh-sci: Save and restore more registers Geetha sowjanya (1): octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG George Shen (3): drm/amd/display: Skip checking FRL_MODE bit for PCON BW determination drm/amd/display: Update CR AUX RD interval interpretation drm/amd/display: fix link_set_dpms_off multi-display MST corner case Goldwyn Rodrigues (1): btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref Greg Kroah-Hartman (1): Linux 6.6.93 Guangguan Wang (1): net/smc: use the correct ndev to find pnetid by pnetid table Hal Feng (1): phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure Hangbin Liu (1): bonding: report duplicate MAC address in all situations Hans Verkuil (2): media: cx231xx: set device_caps for 417 media: test-drivers: vivid: don't call schedule in loop Haoran Jiang (1): samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora Hariprasad Kelam (1): Octeontx2-af: RPM: Register driver with PCI subsys IDs Harish Kasiviswanathan (2): drm/amdkfd: Set per-process flags only once cik/vi drm/amdgpu: Set snoop bit for SDMA for MI series Harry VanZyllDeJong (1): drm/amd/display: Add support for disconnected eDP streams Hector Martin (4): soc: apple: rtkit: Implement OSLog buffers properly ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG ASoC: tas2764: Mark SW_RESET as volatile ASoC: tas2764: Power up/down amp on mute ops Heiko Stuebner (2): nvmem: rockchip-otp: Move read-offset into variant-data nvmem: rockchip-otp: add rk3576 variant data Heiner Kallweit (1): r8169: don't scan PHY addresses > 0 Heming Zhao (1): dlm: make tcp still work in multi-link env Herbert Xu (3): crypto: lzo - Fix compression buffer overrun crypto: ahash - Set default reqsize from ahash_alg crypto: skcipher - Zap type in crypto_alloc_sync_skcipher Ian Rogers (1): tools/build: Don't pass test log files to linker Ido Schimmel (2): vxlan: Annotate FDB data races bridge: netfilter: Fix forwarding of fragmented packets Ihor Solodrai (1): selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure Ilia Gavrilov (1): llc: fix data loss when reading from a socket in llc_ui_recvmsg() Ilpo Järvinen (2): tcp: reorganize tcp_in_ack_event() and tcp_count_delivered() PCI: Fix old_size lower bound in calculate_iosize() too Ilya Bakoulin (1): drm/amd/display: Don't try AUX transactions on disconnected link Ilya Guterman (1): nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro Ingo Molnar (1): x86/stackprotector/64: Only export __ref_stack_chk_guard on CONFIG_SMP Isaac Scott (1): regulator: ad5398: Add device tree support Ivan Pravdin (1): crypto: algif_hash - fix double free in hash_accept Jacob Keller (1): ice: fix vf->num_mac count with port representors Jaegeuk Kim (1): f2fs: introduce f2fs_base_attr for global sysfs entries Jakub Kicinski (1): eth: mlx4: don't try to complete XDP frames in netpoll Jan Kara (1): jbd2: do not try to recover wiped journal Janne Grunau (1): soc: apple: rtkit: Use high prio work queue Jarkko Nikula (1): i2c: designware: Uniform initialization flow for polling mode Jason Andryuk (1): xenbus: Allow PVH dom0 a non-local xenstore Jason Gunthorpe (1): genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie Jeff Layton (1): nfs: don't share pNFS DS connections between net namespaces Jens Axboe (1): io_uring/fdinfo: annotate racy sq/cq head/tail reads Jernej Skrabec (1): Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection" Jessica Zhang (1): drm: Add valid clones check Jiang Liu (1): drm/amdgpu: reset psp->cmd to NULL after releasing the buffer Jing Su (1): dql: Fix dql->limit value when reset. Jing Zhou (1): drm/amd/display: Guard against setting dispclk low for dcn31x Jinliang Zheng (1): dm: fix unconditional IO throttle caused by REQ_PREFLUSH Jinqian Yang (1): arm64: Add support for HIP09 Spectre-BHB mitigation Johannes Berg (4): wifi: iwlwifi: fix debug actions order wifi: mac80211: don't unconditionally call drv_mgd_complete_tx() wifi: mac80211: remove misplaced drv_mgd_complete_tx() call wifi: iwlwifi: add support for Killer on MTL John Chau (1): platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS Jon Hunter (1): arm64: tegra: Resize aperture for the IGX PCIe C5 slot Jordan Crouse (1): clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs Josh Poimboeuf (2): objtool: Properly disable uaccess validation objtool: Fix error handling inconsistencies in check() Joshua Aberback (1): drm/amd/display: Increase block_sequence array size Justin Tee (2): scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails Kai Mäkisara (3): scsi: st: Tighten the page format heuristics with MODE SELECT scsi: st: ERASE does not change tape location scsi: st: Restore some drive settings after reset Kai Vehmanen (1): ASoc: SOF: topology: connect DAI to a single DAI link Karl Chan (1): clk: qcom: ipq5018: allow it to be bulid on arm32 Kaustabh Chakraborty (1): mmc: dw_mmc: add exynos7870 DW MMC support Kees Cook (2): net/mlx4_core: Avoid impossible mlx4_db_alloc() order value pstore: Change kmsg_bytes storage size to u32 Kevin Krakauer (1): selftests/net: have `gro.sh -t` return a correct exit code Konstantin Andreev (2): smack: recognize ipv4 CIPSO w/o categories smack: Revert "smackfs: Added check catlen" Konstantin Shkolnyy (1): vdpa/mlx5: Fix mlx5_vdpa_get_config() endianness on big-endian machines Konstantin Taranov (1): net/mana: fix warning in the writer of client oob Krzysztof Kozlowski (2): can: c_can: Use of_property_present() to test existence of DT property clk: qcom: clk-alpha-pll: Do not use random stack value for recalc rate Kuhanh Murugasen Krishnan (1): fpga: altera-cvp: Increase credit timeout Kuninori Morimoto (1): ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot() Kuniyuki Iwashima (26): ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). af_unix: Return struct unix_sock from unix_get_socket(). af_unix: Run GC on only one CPU. af_unix: Try to run GC async. af_unix: Replace BUG_ON() with WARN_ON_ONCE(). af_unix: Remove io_uring code for GC. af_unix: Remove CONFIG_UNIX_SCM. af_unix: Allocate struct unix_vertex for each inflight AF_UNIX fd. af_unix: Allocate struct unix_edge for each inflight AF_UNIX fd. af_unix: Link struct unix_edge when queuing skb. af_unix: Bulk update unix_tot_inflight/unix_inflight when queuing skb. af_unix: Iterate all vertices by DFS. af_unix: Detect Strongly Connected Components. af_unix: Save listener for embryo socket. af_unix: Fix up unix_edge.successor for embryo socket. af_unix: Save O(n) setup of Tarjan's algo. af_unix: Skip GC if no cycle exists. af_unix: Avoid Tarjan's algorithm if unnecessary. af_unix: Assign a unique index to SCC. af_unix: Detect dead SCC. af_unix: Replace garbage collection algorithm. af_unix: Remove lock dance in unix_peek_fds(). af_unix: Try not to hold unix_gc_lock during accept(). af_unix: Don't access successor in unix_del_edges() during GC. af_unix: Add dead flag to struct scm_fp_list. Kurt Borja (1): hwmon: (dell-smm) Increment the number of fans Larisa Grigore (2): spi: spi-fsl-dspi: restrict register range for regmap access spi: spi-fsl-dspi: Reset SR flags before sending a new message Leon Huang (1): drm/amd/display: Fix incorrect DPCD configs while Replay/PSR switch Li Bin (1): ARM: at91: pm: fix at91_suspend_finish for ZQ calibration Lorenzo Stoakes (1): intel_th: avoid using deprecated page->mapping, index fields Luis de Arquer (1): spi-rockchip: Fix register out of bounds access Luiz Augusto von Dentz (1): Bluetooth: L2CAP: Fix not checking l2cap_chan security level Maciej S. Szmigiero (1): ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7 Maher Sanalla (1): RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject() Manish Pandey (1): scsi: ufs: Introduce quirk to extend PA_HIBERN8TIME for UFS devices Marcos Paulo de Souza (1): printk: Check CON_SUSPEND when unblanking a console Marek Szyprowski (1): dma-mapping: avoid potential unused data compilation warning Marek Vasut (1): leds: trigger: netdev: Configure LED blink interval for HW offload Mario Limonciello (1): Revert "drm/amd: Keep display off while going into S4" Mark Harmstone (1): btrfs: avoid linker error in btrfs_find_create_tree_block() Mark Pearson (1): platform/x86: thinkpad_acpi: Ignore battery threshold change event notification Markus Elfring (1): media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() Martin Blumenstingl (1): pinctrl: meson: define the pull up/down resistor value as 60 kOhm Martin Povišer (1): ASoC: ops: Enforce platform maximum on initial value Masahiro Yamada (1): um: let 'make clean' properly clean underlying SUBARCH as well Matt Johnston (1): fuse: Return EPERM rather than ENOSYS from link() Matthew Wilcox (Oracle) (2): orangefs: Do not truncate file size highmem: add folio_test_partial_kmap() Matthias Fend (1): media: tc358746: improve calculation of the D-PHY timing registers Matti Lehtimäki (2): remoteproc: qcom_wcnss: Handle platforms with only single power domain remoteproc: qcom_wcnss: Fix on platforms without fallback regulators Michael Margolin (1): RDMA/core: Fix best page size finding when it can cross SG entries Michal Luczaj (1): af_unix: Fix garbage collection of embryos carrying OOB with SCM_RIGHTS Michal Pecio (1): usb: xhci: Don't change the status of stalled TDs on failed Stop EP Michal Swiatkowski (2): ice: treat dyn_allowed only as suggestion ice: count combined queues using Rx/Tx count Mika Westerberg (1): thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for retimer Mike Christie (1): vhost-scsi: Return queue full for page alloc failures during copy Mikulas Patocka (1): dm: restrict dm device size to 2^63-512 bytes Milton Barrera (1): HID: quirks: Add ADATA XPG alpha wireless mouse support Ming-Hung Tsai (1): dm cache: prevent BUG_ON by blocking retries on failed device resumes Moshe Shemesh (1): net/mlx5: Avoid report two health errors on same syndrome Mykyta Yatsenko (1): bpf: Return prog btf_id without capable check Naman Trivedi (1): arm64: zynqmp: add clock-output-names property in clock nodes Namjae Jeon (3): cifs: add validation check for the fields in smb_aces ksmbd: fix stream write failure ksmbd: use list_first_entry_or_null for opinfo_get_list() Nandakumar Edamana (1): libbpf: Fix out-of-bound read Nathan Chancellor (1): i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work() Nicolas Bouchinet (1): netfilter: conntrack: Bound nf_conntrack sysctl writes Nicolas Bretz (1): ext4: on a remount, only log the ro or r/w state when it has changed Nicolas Escande (1): wifi: ath12k: fix ath12k_hal_tx_cmd_ext_desc_setup() info1 override Niklas Söderlund (1): media: adv7180: Disable test-pattern control on adv7180 Nir Lichtman (1): x86/build: Fix broken copy command in genimage.sh when making isoimage Nishanth Menon (1): net: ethernet: ti: am65-cpsw: Lower random mac address error print to info Nícolas F. R. A. Prado (3): ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect ASoC: mediatek: mt8188: Treat DMIC_GAINx_CUR as non-volatile ASoC: mediatek: mt8188: Add reference for dmic clocks Oliver Hartkopp (2): can: bcm: add locking for bcm_op runtime updates can: bcm: add missing rcu read protection for procfs content Olivier Moysan (1): drm: bridge: adv7511: fill stream capabilities P Praneesh (1): wifi: ath12k: Fix end offset bit definition in monitor ring descriptor Pali Rohár (6): cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES cifs: Fix querying and creating MF symlinks over SMB1 cifs: Fix negotiate retry functionality cifs: Fix establishing NetBIOS session for SMB2+ connection cifs: Fix and improve cifs_query_path_info() and cifs_query_file_info() cifs: Fix changing times and read-only attr over SMB1 smb_set_file_info() function Patrisious Haddad (1): net/mlx5: Change POOL_NEXT_SIZE define value and make it global Paul Burton (2): MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core clocksource: mips-gic-timer: Enable counter when CPUs start Paul Chaignon (1): xfrm: Sanitize marks before insert Paul Kocialkowski (1): net: dwmac-sun8i: Use parsed internal PHY address instead of 1 Pavel Begunkov (1): io_uring: fix overflow resched cqe reordering Pedro Tammela (1): net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Pengyu Luo (1): cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist Peter Seiderer (2): net: pktgen: fix mpls maximum labels list parsing net: pktgen: fix access outside of user given buffer in pktgen_thread_write() Peter Ujfalusi (2): ASoC: SOF: ipc4-control: Use SOF_CTRL_CMD_BINARY as numid for bytes_ext ASoC: SOF: ipc4-pcm: Delay reporting is only supported for playback direction Peter Zijlstra (1): x86/traps: Cleanup and robustify decode_bug() Peter Zijlstra (Intel) (1): perf: Avoid the read if the count is already updated Petr Machata (2): vxlan: Join / leave MC group after remote changes bridge: mdb: Allow replace of a host-joined group Philip Redkin (1): x86/mm: Check return value from memblock_phys_alloc_range() Philip Yang (1): drm/amdkfd: KFD release_work possible circular locking Ping-Ke Shih (2): wifi: rtw89: fw: propagate error code from rtw89_h2c_tx() wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet Prathamesh Shete (1): pinctrl-tegra: Restore SFSEL bit when freeing pins Purva Yeshi (1): dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open Qu Wenruo (2): btrfs: run btrfs_error_commit_super() early btrfs: avoid NULL pointer dereference if no valid csum tree Rafael J. Wysocki (1): cpuidle: menu: Avoid discarding useful information Ramasamy Kaliappan (1): wifi: ath12k: Improve BSS discovery with hidden SSID in 6 GHz band Ranjan Kumar (1): scsi: mpi3mr: Add level check to control event logging Ravi Bangoria (2): perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt perf/amd/ibs: Fix ->config to sample period calculation for OP PMU Ricardo Ribalda (2): media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value Ritesh Harjani (IBM) (1): book3s64/radix: Fix compile errors when CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n Rob Herring (Arm) (1): perf: arm_pmuv3: Call kvm_vcpu_pmu_resync_el0() before enabling counters Robert Richter (1): libnvdimm/labels: Fix divide error in nd_label_data_init() Robin Murphy (2): perf/arm-cmn: Fix REQ2/SNP2 mixup perf/arm-cmn: Initialise cmn->cpu earlier Roger Pau Monne (1): PCI: vmd: Disable MSI remapping bypass under Xen Rosen Penev (1): wifi: ath9k: return by of_get_mac_address Ryan Roberts (1): arm64/mm: Check PUD_TYPE_TABLE in pud_bad() Ryan Walklin (1): ASoC: sun4i-codec: support hp-det-gpios property Ryo Takakura (1): lockdep: Fix wait context check on softirq for PREEMPT_RT Sabrina Dubroca (1): espintcp: remove encap socket caching to avoid reference leak Sakari Ailus (1): media: v4l: Memset argument to 0 before calling get_mbus_config pad op Saket Kumar Bhaskar (1): perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type Samuel Holland (1): riscv: Allow NOMMU kernels to access all of RAM Sean Anderson (1): spi: zynqmp-gqspi: Always acknowledge interrupts Seyediman Seyedarab (1): kbuild: fix argument parsing in scripts/config Shahar Shitrit (2): net/mlx5: Modify LSB bitmask in temperature event to include only the first bit net/mlx5: Apply rate-limiting to high temperature warning Shashank Gupta (1): crypto: octeontx2 - suppress auth failure screaming due to negative tests Shigeru Yoshida (1): af_unix: Fix uninit-value in __unix_walk_scc() Shivasharan S (1): scsi: mpt3sas: Send a diag reset if target reset fails Shiwu Zhang (1): drm/amdgpu: enlarge the VBIOS binary size limit Shixiong Ou (1): fbdev: fsl-diu-fb: add missing device_remove_file() Shree Ramamoorthy (1): mfd: tps65219: Remove TPS65219_REG_TI_DEV_ID check Simona Vetter (1): drm/atomic: clarify the rules around drm_atomic_state->allow_modeset Soeren Moch (1): wifi: rtl8xxxu: retry firmware download on error Stanimir Varbanov (2): PCI: brcmstb: Expand inbound window size up to 64GB PCI: brcmstb: Add a softdep to MIP MSI-X driver Stanley Chu (1): i3c: master: svc: Fix missing STOP for master request Stefan Wahren (2): drm/v3d: Add clock handling dmaengine: fsl-edma: Fix return code for unhandled interrupts Stephan Gerhold (4): i2c: qup: Vote for interconnect bandwidth to DRAM arm64: dts: qcom: ipq9574: Add missing properties for cryptobam arm64: dts: qcom: sm8450: Add missing properties for cryptobam arm64: dts: qcom: sm8550: Add missing properties for cryptobam Subbaraya Sundeep (1): octeontx2-af: Set LMT_ENA bit for APR table entries Sudeep Holla (3): mailbox: pcc: Use acpi_os_ioremap() instead of ioremap() firmware: arm_ffa: Reject higher major version as incompatible firmware: arm_scmi: Relax duplicate name constraint across protocol ids Suman Ghosh (1): octeontx2-pf: Add AF_XDP non-zero copy support Svyatoslav Ryhel (1): ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 Takashi Iwai (4): ALSA: seq: Improve data consistency at polling ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx ALSA: pcm: Fix race of buffer access at PCM OSS layer Thangaraj Samynathan (1): net: lan743x: Restore SGMII CTRL register on resume Thomas Weißschuh (1): timer_list: Don't use %pK through printk() Thomas Zimmermann (3): drm/gem: Test for imported GEM buffers with helper drm/ast: Find VBIOS mode from regular display size drm/gem: Internally test import_attach for imported objects Tianyang Zhang (1): mm/page_alloc.c: avoid infinite retries caused by cpuset race Tiwei Bie (1): um: Update min_low_pfn to match changes in uml_reserved Tom Chung (1): drm/amd/display: Initial psr_version with correct setting Trond Myklebust (8): NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() NFS: Don't allow waiting for exiting tasks SUNRPC: Don't allow waiting for exiting tasks NFSv4: Treat ENETUNREACH errors as fatal for state recovery SUNRPC: rpc_clnt_set_transport() must not change the autobind setting SUNRPC: rpcbind should never reset the port to the value '0' pNFS/flexfiles: Report ENETDOWN as a connection error NFS: Avoid flushing data while holding directory locks in nfs_rename() Tudor Ambarus (1): mailbox: use error ret code of of_parse_phandle_with_args() Uwe Kleine-König (1): pinctrl: qcom/msm: Convert to platform remove callback returning void Valentin Caron (1): pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map Valtteri Koskivuori (1): platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys Vasant Hegde (1): iommu/amd/pgtbl_v2: Improve error handling Vicki Pfau (1): Input: xpad - add more controllers Victor Lu (1): drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c Vijendar Mukunda (1): soundwire: amd: change the soundwire wake enable/disable sequence Viktor Malik (1): bpftool: Fix readlink usage in get_fd_type Vinicius Costa Gomes (1): dmaengine: idxd: Fix allowing write() from different address spaces Vinith Kumar R (1): wifi: ath12k: Report proper tx completion status to mac80211 Viresh Kumar (1): firmware: arm_ffa: Set dma_mask for ffa devices Vitalii Mordan (1): i2c: pxa: fix call balance of i2c->clk handling routines Vladimir Moskovkin (1): platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() Vladimir Oltean (1): net: enetc: refactor bulk flipping of RX buffers to separate function Waiman Long (1): x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() Wang Liang (1): net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done Wang Zhaolong (3): smb: client: Store original IO parameters and prevent zero IO sizes smb: client: Fix use-after-free in cifs_fill_dirent smb: client: Reset all search buffer pointers when releasing buffer Wentao Guan (2): nvme-pci: add quirks for device 126f:1001 nvme-pci: add quirks for WDC Blue SN550 15b7:5009 Willem de Bruijn (1): ipv6: save dontfrag in cork William Tu (3): net/mlx5e: set the tx_queue_len for pfifo_fast net/mlx5e: reduce rep rxq depth to 256 for ECPF net/mlx5e: reduce the max log mpwrq sz for ECPF and reps Xiaofei Tan (1): ACPI: HED: Always initialize before evged Yemike Abhilash Chandra (1): arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy Yihan Zhu (1): drm/amd/display: handle max_downscale_src_width fail check Yonghong Song (1): bpf: Allow pre-ordering for bpf cgroup progs Youssef Samir (1): accel/qaic: Mask out SR-IOV PCI resources Yuanjun Gong (1): leds: pwm-multicolor: Add check for fwnode_property_read_u32 Zhang Rui (1): thermal: intel: x86_pkg_temp_thermal: Fix bogus trip temperature Zhang Yi (2): ext4: don't write back data before punch hole in nojournal mode ext4: remove writable userspace mappings before truncating page cache Zhikai Zhai (1): drm/amd/display: calculate the remain segments for all pipes Zhongqiu Han (1): virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN Zsolt Kajtar (2): fbcon: Use correct erase colour for clearing in fbcon fbdev: core: tileblit: Implement missing margin clearing for tileblit feijuan.li (1): drm/edid: fixed the bug that hdr metadata was not reset gaoxu (1): cgroup: Fix compilation issue due to cgroup_mutex not being exported junan (1): HID: usbkbd: Fix the bit shift number for LED_KANA zihan zhou (1): sched: Reduce the default slice to avoid tasks getting an extra tick

1 month, 1 week

1
1
0 0

Linux 6.1.141

by Greg Kroah-Hartman

I'm announcing the release of the 6.1.141 kernel. All users of the 6.1 kernel series must upgrade. The updated 6.1.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.1.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/admin-guide/kernel-parameters.txt | 2 Documentation/driver-api/serial/driver.rst | 2 Documentation/hwmon/dell-smm-hwmon.rst | 14 Makefile | 14 arch/arm/boot/dts/tegra114.dtsi | 2 arch/arm/mach-at91/pm.c | 21 arch/arm64/boot/dts/allwinner/sun50i-h6-beelink-gs1.dts | 38 arch/arm64/boot/dts/allwinner/sun50i-h6-orangepi-3.dts | 14 arch/arm64/boot/dts/allwinner/sun50i-h6-orangepi.dtsi | 22 arch/arm64/boot/dts/nvidia/tegra210-p2597.dtsi | 2 arch/arm64/boot/dts/qcom/sm8350.dtsi | 2 arch/arm64/include/asm/cputype.h | 2 arch/arm64/include/asm/pgtable.h | 3 arch/arm64/kernel/proton-pack.c | 1 arch/mips/include/asm/ftrace.h | 16 arch/mips/kernel/pm-cps.c | 30 arch/powerpc/kernel/prom_init.c | 4 arch/powerpc/perf/core-book3s.c | 20 arch/powerpc/perf/isa207-common.c | 4 arch/um/Makefile | 1 arch/um/kernel/mem.c | 1 arch/x86/boot/genimage.sh | 5 arch/x86/events/amd/ibs.c | 3 arch/x86/include/asm/nmi.h | 2 arch/x86/include/asm/perf_event.h | 1 arch/x86/kernel/cpu/bugs.c | 10 arch/x86/kernel/nmi.c | 42 arch/x86/kernel/reboot.c | 10 arch/x86/mm/init.c | 9 arch/x86/mm/init_64.c | 15 arch/x86/mm/kaslr.c | 10 arch/x86/um/os-Linux/mcontext.c | 3 crypto/algif_hash.c | 4 crypto/lzo-rle.c | 2 crypto/lzo.c | 2 drivers/acpi/Kconfig | 2 drivers/acpi/hed.c | 7 drivers/auxdisplay/charlcd.c | 5 drivers/auxdisplay/charlcd.h | 5 drivers/auxdisplay/hd44780.c | 2 drivers/auxdisplay/lcd2s.c | 2 drivers/auxdisplay/panel.c | 2 drivers/clk/imx/clk-imx8mp.c | 151 ++ drivers/clk/qcom/camcc-sm8250.c | 56 drivers/clk/qcom/clk-alpha-pll.c | 52 drivers/clk/sunxi-ng/ccu-sun20i-d1.c | 44 drivers/clk/sunxi-ng/ccu_mp.h | 22 drivers/clocksource/mips-gic-timer.c | 6 drivers/cpufreq/tegra186-cpufreq.c | 7 drivers/cpuidle/governors/menu.c | 13 drivers/crypto/marvell/octeontx2/otx2_cptvf_reqmgr.c | 7 drivers/dma/idxd/cdev.c | 128 + drivers/dma/idxd/idxd.h | 7 drivers/dma/idxd/init.c | 2 drivers/dma/idxd/sysfs.c | 1 drivers/edac/ie31200_edac.c | 28 drivers/firmware/arm_ffa/bus.c | 1 drivers/fpga/altera-cvp.c | 2 drivers/gpio/gpio-pca953x.c | 114 - drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c | 30 drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 7 drivers/gpu/drm/amd/amdgpu/gfxhub_v1_0.c | 10 drivers/gpu/drm/amd/amdkfd/kfd_process.c | 16 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 7 drivers/gpu/drm/amd/display/dc/clk_mgr/dcn315/dcn315_clk_mgr.c | 20 drivers/gpu/drm/amd/display/dc/clk_mgr/dcn316/dcn316_clk_mgr.c | 13 drivers/gpu/drm/amd/display/dc/core/dc.c | 1 drivers/gpu/drm/amd/display/dc/dcn30/dcn30_dpp.c | 11 drivers/gpu/drm/amd/display/dc/dcn315/dcn315_resource.c | 42 drivers/gpu/drm/ast/ast_mode.c | 10 drivers/gpu/drm/drm_atomic_helper.c | 28 drivers/gpu/drm/drm_edid.c | 1 drivers/gpu/drm/mediatek/mtk_dpi.c | 5 drivers/gpu/drm/panel/panel-edp.c | 1 drivers/gpu/drm/rockchip/rockchip_drm_vop2.c | 6 drivers/hid/hid-ids.h | 4 drivers/hid/hid-quirks.c | 2 drivers/hid/usbhid/usbkbd.c | 2 drivers/hwmon/dell-smm-hwmon.c | 5 drivers/hwmon/gpio-fan.c | 16 drivers/hwmon/xgene-hwmon.c | 2 drivers/i2c/busses/i2c-pxa.c | 5 drivers/i2c/busses/i2c-qup.c | 36 drivers/i3c/master/svc-i3c-master.c | 4 drivers/infiniband/core/umem.c | 36 drivers/infiniband/core/uverbs_cmd.c | 144 +- drivers/infiniband/core/verbs.c | 11 drivers/iommu/amd/io_pgtable_v2.c | 2 drivers/iommu/dma-iommu.c | 28 drivers/leds/rgb/leds-pwm-multicolor.c | 5 drivers/mailbox/mailbox.c | 7 drivers/md/dm-cache-target.c | 24 drivers/md/dm-table.c | 4 drivers/md/dm.c | 8 drivers/media/i2c/adv7180.c | 34 drivers/media/platform/qcom/camss/camss-csid.c | 60 drivers/media/platform/st/sti/c8sectpfe/c8sectpfe-core.c | 3 drivers/media/test-drivers/vivid/vivid-kthread-cap.c | 11 drivers/media/test-drivers/vivid/vivid-kthread-out.c | 11 drivers/media/test-drivers/vivid/vivid-kthread-touch.c | 11 drivers/media/test-drivers/vivid/vivid-sdr-cap.c | 11 drivers/media/usb/cx231xx/cx231xx-417.c | 2 drivers/media/usb/uvc/uvc_v4l2.c | 6 drivers/mmc/host/dw_mmc-exynos.c | 41 drivers/mmc/host/sdhci-pci-core.c | 6 drivers/mmc/host/sdhci.c | 9 drivers/net/bonding/bond_main.c | 2 drivers/net/can/c_can/c_can_platform.c | 2 drivers/net/can/slcan/slcan-core.c | 26 drivers/net/ethernet/apm/xgene-v2/main.c | 4 drivers/net/ethernet/freescale/enetc/enetc.c | 16 drivers/net/ethernet/intel/ice/ice_ethtool.c | 3 drivers/net/ethernet/intel/ice/ice_virtchnl.c | 1 drivers/net/ethernet/marvell/octeontx2/Kconfig | 1 drivers/net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 24 drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c | 11 drivers/net/ethernet/marvell/octeontx2/nic/cn10k.c | 6 drivers/net/ethernet/marvell/octeontx2/nic/cn10k.h | 2 drivers/net/ethernet/marvell/octeontx2/nic/otx2_common.c | 130 + drivers/net/ethernet/marvell/octeontx2/nic/otx2_common.h | 9 drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 18 drivers/net/ethernet/marvell/octeontx2/nic/otx2_txrx.c | 49 drivers/net/ethernet/marvell/octeontx2/nic/otx2_txrx.h | 7 drivers/net/ethernet/marvell/octeontx2/nic/qos_sq.c | 2 drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 22 drivers/net/ethernet/mellanox/mlx4/alloc.c | 6 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 2 drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 5 drivers/net/ethernet/mellanox/mlx5/core/en_selftest.c | 3 drivers/net/ethernet/mellanox/mlx5/core/events.c | 11 drivers/net/ethernet/mellanox/mlx5/core/health.c | 1 drivers/net/ethernet/microchip/lan743x_main.c | 19 drivers/net/ethernet/microsoft/mana/gdma_main.c | 2 drivers/net/ethernet/realtek/r8169_main.c | 1 drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c | 2 drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2 drivers/net/ethernet/ti/cpsw_new.c | 1 drivers/net/ieee802154/ca8210.c | 9 drivers/net/phy/phylink.c | 2 drivers/net/usb/r8152.c | 1 drivers/net/vxlan/vxlan_core.c | 36 drivers/net/wireless/ath/ath9k/init.c | 4 drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 2 drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 17 drivers/net/wireless/realtek/rtw88/main.c | 40 drivers/net/wireless/realtek/rtw88/reg.h | 3 drivers/net/wireless/realtek/rtw88/rtw8822b.c | 14 drivers/net/wireless/realtek/rtw88/util.c | 3 drivers/net/wireless/realtek/rtw89/fw.c | 2 drivers/net/wireless/realtek/rtw89/regd.c | 2 drivers/net/wireless/realtek/rtw89/ser.c | 4 drivers/nvdimm/label.c | 3 drivers/nvme/host/pci.c | 2 drivers/nvme/target/tcp.c | 3 drivers/pci/Kconfig | 6 drivers/pci/controller/dwc/pcie-designware-ep.c | 2 drivers/pci/controller/pcie-brcmstb.c | 5 drivers/pci/controller/vmd.c | 20 drivers/pci/setup-bus.c | 6 drivers/perf/arm-cmn.c | 10 drivers/phy/phy-core.c | 7 drivers/phy/renesas/phy-rcar-gen3-usb2.c | 143 +- drivers/pinctrl/bcm/pinctrl-bcm281xx.c | 44 drivers/pinctrl/devicetree.c | 10 drivers/pinctrl/meson/pinctrl-meson.c | 2 drivers/pinctrl/tegra/pinctrl-tegra.c | 59 drivers/pinctrl/tegra/pinctrl-tegra.h | 6 drivers/platform/x86/dell/dell-wmi-sysman/passobj-attributes.c | 2 drivers/platform/x86/fujitsu-laptop.c | 33 drivers/platform/x86/thinkpad_acpi.c | 7 drivers/regulator/ad5398.c | 12 drivers/remoteproc/qcom_wcnss.c | 34 drivers/rtc/rtc-ds1307.c | 4 drivers/rtc/rtc-rv3032.c | 2 drivers/s390/crypto/vfio_ap_ops.c | 72 - drivers/scsi/lpfc/lpfc_hbadisc.c | 17 drivers/scsi/lpfc/lpfc_init.c | 2 drivers/scsi/mpi3mr/mpi3mr_fw.c | 3 drivers/scsi/mpt3sas/mpt3sas_ctl.c | 12 drivers/scsi/st.c | 29 drivers/scsi/st.h | 2 drivers/soc/apple/rtkit-internal.h | 1 drivers/soc/apple/rtkit.c | 58 drivers/soc/imx/gpcv2.c | 2 drivers/soc/ti/k3-socinfo.c | 13 drivers/spi/spi-fsl-dspi.c | 46 drivers/spi/spi-sun4i.c | 5 drivers/spi/spi-zynqmp-gqspi.c | 20 drivers/target/iscsi/iscsi_target.c | 2 drivers/thermal/qoriq_thermal.c | 13 drivers/thunderbolt/retimer.c | 8 drivers/tty/serial/8250/8250_port.c | 2 drivers/tty/serial/atmel_serial.c | 2 drivers/tty/serial/imx.c | 2 drivers/tty/serial/serial_mctrl_gpio.c | 34 drivers/tty/serial/serial_mctrl_gpio.h | 17 drivers/tty/serial/sh-sci.c | 98 + drivers/tty/serial/stm32-usart.c | 2 drivers/vfio/pci/vfio_pci_config.c | 3 drivers/vfio/pci/vfio_pci_core.c | 10 drivers/vfio/pci/vfio_pci_intrs.c | 2 drivers/video/fbdev/core/bitblit.c | 5 drivers/video/fbdev/core/fbcon.c | 10 drivers/video/fbdev/core/fbcon.h | 38 drivers/video/fbdev/core/fbcon_ccw.c | 5 drivers/video/fbdev/core/fbcon_cw.c | 5 drivers/video/fbdev/core/fbcon_ud.c | 5 drivers/video/fbdev/core/tileblit.c | 45 drivers/video/fbdev/fsl-diu-fb.c | 1 drivers/virtio/virtio_ring.c | 2 drivers/xen/platform-pci.c | 4 drivers/xen/xenbus/xenbus_probe.c | 14 fs/btrfs/block-group.c | 18 fs/btrfs/discard.c | 34 fs/btrfs/disk-io.c | 28 fs/btrfs/extent_io.c | 7 fs/btrfs/relocation.c | 6 fs/btrfs/send.c | 6 fs/coredump.c | 81 + fs/dlm/lowcomms.c | 4 fs/ext4/balloc.c | 4 fs/ext4/super.c | 12 fs/fuse/dir.c | 2 fs/gfs2/glock.c | 11 fs/namespace.c | 6 fs/nfs/client.c | 2 fs/nfs/delegation.c | 3 fs/nfs/dir.c | 15 fs/nfs/filelayout/filelayoutdev.c | 6 fs/nfs/flexfilelayout/flexfilelayout.c | 1 fs/nfs/flexfilelayout/flexfilelayoutdev.c | 6 fs/nfs/inode.c | 2 fs/nfs/internal.h | 5 fs/nfs/nfs3proc.c | 2 fs/nfs/nfs4proc.c | 9 fs/nfs/nfs4state.c | 10 fs/nfs/pnfs.h | 4 fs/nfs/pnfs_nfs.c | 9 fs/orangefs/inode.c | 7 fs/smb/client/cifsproto.h | 3 fs/smb/client/connect.c | 30 fs/smb/client/link.c | 8 fs/smb/client/readdir.c | 7 fs/smb/client/smb1ops.c | 7 fs/smb/client/smb2file.c | 11 fs/smb/client/smb2ops.c | 3 fs/smb/client/transport.c | 2 fs/smb/server/vfs.c | 14 include/drm/drm_atomic.h | 23 include/linux/coredump.h | 1 include/linux/dma-mapping.h | 12 include/linux/hrtimer.h | 1 include/linux/ipv6.h | 1 include/linux/lzo.h | 8 include/linux/mlx4/device.h | 2 include/linux/msi.h | 33 include/linux/nfs_fs_sb.h | 12 include/linux/perf_event.h | 8 include/linux/pid.h | 1 include/linux/rcupdate.h | 2 include/linux/rcutree.h | 2 include/linux/trace.h | 4 include/linux/trace_seq.h | 8 include/linux/usb/r8152.h | 1 include/net/af_unix.h | 48 include/net/scm.h | 11 include/net/xfrm.h | 1 include/rdma/uverbs_std_types.h | 2 include/sound/hda_codec.h | 1 include/sound/pcm.h | 2 include/trace/events/btrfs.h | 2 io_uring/fdinfo.c | 4 io_uring/io_uring.c | 1 kernel/bpf/hashtab.c | 2 kernel/bpf/syscall.c | 4 kernel/cgroup/cgroup.c | 2 kernel/events/core.c | 33 kernel/events/hw_breakpoint.c | 5 kernel/events/ring_buffer.c | 1 kernel/fork.c | 98 + kernel/padata.c | 3 kernel/pid.c | 19 kernel/rcu/tree_plugin.h | 22 kernel/softirq.c | 18 kernel/time/hrtimer.c | 103 + kernel/time/posix-timers.c | 1 kernel/time/timer_list.c | 4 kernel/trace/trace.c | 11 kernel/trace/trace.h | 16 lib/dynamic_queue_limits.c | 2 lib/lzo/Makefile | 2 lib/lzo/lzo1x_compress.c | 102 + lib/lzo/lzo1x_compress_safe.c | 18 mm/memcontrol.c | 6 mm/page_alloc.c | 8 net/Makefile | 2 net/bluetooth/l2cap_core.c | 15 net/bridge/br_nf_core.c | 7 net/bridge/br_private.h | 1 net/can/bcm.c | 79 - net/core/pktgen.c | 13 net/core/scm.c | 17 net/ipv4/esp4.c | 49 net/ipv4/fib_frontend.c | 18 net/ipv4/fib_rules.c | 4 net/ipv4/fib_trie.c | 22 net/ipv4/inet_hashtables.c | 37 net/ipv4/tcp_input.c | 56 net/ipv6/esp6.c | 49 net/ipv6/fib6_rules.c | 4 net/ipv6/ip6_output.c | 9 net/llc/af_llc.c | 8 net/mac80211/mlme.c | 4 net/netfilter/nf_conntrack_standalone.c | 12 net/sched/sch_hfsc.c | 15 net/smc/smc_pnet.c | 8 net/sunrpc/clnt.c | 3 net/sunrpc/rpcb_clnt.c | 5 net/sunrpc/sched.c | 2 net/tipc/crypto.c | 5 net/unix/Kconfig | 11 net/unix/Makefile | 2 net/unix/af_unix.c | 120 + net/unix/garbage.c | 691 ++++++---- net/unix/scm.c | 154 -- net/unix/scm.h | 10 net/xfrm/xfrm_policy.c | 3 net/xfrm/xfrm_state.c | 6 samples/bpf/Makefile | 2 scripts/config | 26 scripts/kconfig/merge_config.sh | 4 security/smack/smackfs.c | 4 sound/core/oss/pcm_oss.c | 3 sound/core/pcm_native.c | 11 sound/core/seq/seq_clientmgr.c | 5 sound/core/seq/seq_memory.c | 1 sound/pci/hda/hda_beep.c | 15 sound/pci/hda/patch_realtek.c | 77 + sound/soc/codecs/mt6359-accdet.h | 9 sound/soc/codecs/pcm3168a.c | 6 sound/soc/codecs/tas2764.c | 53 sound/soc/fsl/imx-card.c | 2 sound/soc/intel/boards/bytcr_rt5640.c | 13 sound/soc/qcom/sm8250.c | 3 sound/soc/soc-dai.c | 8 sound/soc/soc-ops.c | 29 sound/soc/sunxi/sun4i-codec.c | 53 tools/bpf/bpftool/common.c | 3 tools/build/Makefile.build | 6 tools/lib/bpf/libbpf.c | 2 tools/objtool/check.c | 11 tools/testing/kunit/qemu_configs/x86_64.py | 4 tools/testing/selftests/bpf/prog_tests/sockmap_ktls.c | 1 tools/testing/selftests/net/gro.sh | 3 354 files changed, 4184 insertions(+), 1986 deletions(-) Aaron Kling (1): cpufreq: tegra186: Share policy per cluster Ahmad Fatoum (2): clk: imx8mp: inform CCF of maximum frequency of clocks pmdomain: imx: gpcv2: use proper helper for property detection Al Viro (1): __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock Aleksander Jan Bajkowski (1): r8152: add vendor/device ID pair for Dell Alienware AW1022z Alessandro Grassi (1): spi: spi-sun4i: fix early activation Alex Deucher (1): drm/amd/display/dm: drop hw_support check in amdgpu_dm_i2c_xfer() Alex Williamson (1): vfio/pci: Handle INTx IRQ_NOTCONNECTED Alexander Mikhalitsyn (1): af_unix: Kconfig: make CONFIG_UNIX bool Alexander Stein (1): hwmon: (gpio-fan) Add missing mutex locks Alexander Sverdlin (1): net: ethernet: ti: cpsw_new: populate netdev of_node Alexandre Belloni (2): rtc: rv3032: fix EERD location rtc: ds1307: stop disabling alarms on probe Alexei Lazar (1): net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB Alexey Klimov (1): ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup() Alexis Lothoré (1): serial: mctrl_gpio: split disable_ms into sync and no_sync APIs Alice Guo (1): thermal/drivers/qoriq: Power down TMU on system suspend Alistair Francis (1): nvmet-tcp: don't restore null sk_state_change Alok Tiwari (1): arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node Andre Przywara (1): clk: sunxi-ng: d1: Add missing divider for MMC mod clocks Andreas Gruenbacher (1): gfs2: Check for empty queue in run_queue Andreas Schwab (1): powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 Andrew Davis (1): soc: ti: k3-socinfo: Do not use syscon helper to build regmap Andrey Vatoropin (1): hwmon: (xgene-hwmon) use appropriate type for the latency value Andy Shevchenko (6): gpio: pca953x: Add missing header(s) gpio: pca953x: Split pca953x_restore_context() and pca953x_save_context() gpio: pca953x: Simplify code with cleanup helpers tracing: Mark binary printing functions with __printf() attribute auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct hd44780_common" ieee802154: ca8210: Use proper setters and getters for bitwise types Andy Yan (1): drm/rockchip: vop2: Add uv swap for cluster window AngeloGioacchino Del Regno (1): drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence Ankur Arora (3): rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y rcu: handle unstable rdp in rcu_read_unlock_strict() rcu: fix header guard for rcu_all_qs() Anthony Krowiak (1): s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log Arnd Bergmann (2): net: xgene-v2: remove incorrect ACPI_PTR annotation EDAC/ie31200: work around false positive build warning Artur Weber (1): pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" Athira Rajeev (1): arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src Balbir Singh (2): x86/kaslr: Reduce KASLR entropy on most x86 systems x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers bounce buffers Baokun Li (1): ext4: reject the 'data_err=abort' option in nojournal mode Benjamin Berg (1): um: Store full CSGSFS and SS register from mcontext Bibo Mao (1): MIPS: Use arch specific syscall name match function Bitterblue Smith (5): wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31 wifi: rtw88: Fix download_firmware_validate() for RTL8814AU wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate Bogdan-Gabriel Roman (1): spi: spi-fsl-dspi: Halt the module after a new message transfer Boris Burkov (2): btrfs: make btrfs_discard_workfn() block_group ref explicit btrfs: check folio mapping after unlock in relocate_one_folio() Brandon Kammerdiener (1): bpf: fix possible endless loop in BPF map iteration Brendan Jackman (1): kunit: tool: Use qboot on QEMU x86_64 Breno Leitao (2): x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 memcg: always call cond_resched() after fn() Carlos Sanchez (1): can: slcan: allow reception of short error messages Cezary Rojewski (1): ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode Chenyuan Yang (1): ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of() Choong Yong Liang (1): net: phylink: use pl->link_interface in phylink_expects_phy() Christian Brauner (4): coredump: fix error handling for replace_fd() pid: add pidfd_prepare() fork: use pidfd_prepare() coredump: hand a pidfd to the usermode coredump helper Christian Göttsche (1): ext4: reorder capability check last Claudiu Beznea (5): phy: renesas: rcar-gen3-usb2: Add support to initialize the bus phy: renesas: rcar-gen3-usb2: Move IRQ request in probe phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off serial: sh-sci: Update the suspend/resume support Cong Wang (1): sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() Dan Carpenter (1): pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group() Daniel Gomez (1): kconfig: merge_config: use an empty file as initfile Dave Jiang (2): dmaengine: idxd: add per DSA wq workqueue for processing cr faults dmaengine: idxd: Fix ->poll() return value Depeng Shao (1): media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is available Diogo Ivo (1): arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator Dmitry Baryshkov (1): phy: core: don't require set_mode() callback for phy_get_mode() to work Dmitry Bogdanov (1): scsi: target: iscsi: Fix timeout on deleted connection Dominik Grzegorzek (1): padata: do not leak refcount in reorder_work Douglas Anderson (1): drm/panel-edp: Add Starry 116KHD024006 Ed Burcher (1): ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10 Emanuele Ghidoli (1): gpio: pca953x: fix IRQ storm on system wake up Eric Dumazet (2): posix-timers: Add cond_resched() to posix_timer_add() search loop tcp: bring back NUMA dispersion in inet_ehash_locks_alloc() Eric Woudstra (1): net: ethernet: mtk_ppe_offload: Allow QinQ, double ETH_P_8021Q only Erick Shepherd (2): mmc: host: Wait for Vdd to settle on card power off mmc: sdhci: Disable SD card clock before changing parameters Felix Kuehling (1): drm/amdgpu: Allow P2P access through XGMI Fenghua Yu (1): dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling Filipe Manana (3): btrfs: fix non-empty delayed iputs list on unmount due to async workers btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work() btrfs: send: return -ENAMETOOLONG when attempting a path that is too long Frank Li (2): PCI: dwc: ep: Ensure proper iteration over outbound map windows i3c: master: svc: Flush FIFO before sending Dynamic Address Assignment(DAA) Frederic Weisbecker (1): hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING Frediano Ziglio (1): xen: Add support for XenServer 6.1 platform device Geert Uytterhoeven (1): serial: sh-sci: Save and restore more registers Geetha sowjanya (1): octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG Goldwyn Rodrigues (1): btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref Greg Kroah-Hartman (1): Linux 6.1.141 Guangguan Wang (1): net/smc: use the correct ndev to find pnetid by pnetid table Hangbin Liu (1): bonding: report duplicate MAC address in all situations Hans Verkuil (2): media: cx231xx: set device_caps for 417 media: test-drivers: vivid: don't call schedule in loop Haoran Jiang (1): samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora Harshit Mogalapalli (1): dmaengine: idxd: Fix passing freed memory in idxd_cdev_open() Hector Martin (4): soc: apple: rtkit: Implement OSLog buffers properly ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG ASoC: tas2764: Mark SW_RESET as volatile ASoC: tas2764: Power up/down amp on mute ops Heiner Kallweit (1): r8169: don't scan PHY addresses > 0 Heming Zhao (1): dlm: make tcp still work in multi-link env Herbert Xu (1): crypto: lzo - Fix compression buffer overrun Ian Rogers (1): tools/build: Don't pass test log files to linker Ido Schimmel (2): vxlan: Annotate FDB data races bridge: netfilter: Fix forwarding of fragmented packets Ihor Solodrai (1): selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure Ilia Gavrilov (1): llc: fix data loss when reading from a socket in llc_ui_recvmsg() Ilpo Järvinen (2): tcp: reorganize tcp_in_ack_event() and tcp_count_delivered() PCI: Fix old_size lower bound in calculate_iosize() too Ilya Guterman (1): nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro Isaac Scott (1): regulator: ad5398: Add device tree support Ivan Pravdin (1): crypto: algif_hash - fix double free in hash_accept Jacob Keller (1): ice: fix vf->num_mac count with port representors Jakub Kicinski (1): eth: mlx4: don't try to complete XDP frames in netpoll Janne Grunau (1): soc: apple: rtkit: Use high prio work queue Jason Andryuk (1): xenbus: Allow PVH dom0 a non-local xenstore Jason Gunthorpe (1): genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie Jeff Layton (1): nfs: don't share pNFS DS connections between net namespaces Jens Axboe (1): io_uring/fdinfo: annotate racy sq/cq head/tail reads Jernej Skrabec (1): Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection" Jessica Zhang (1): drm: Add valid clones check Jiang Liu (1): drm/amdgpu: reset psp->cmd to NULL after releasing the buffer Jing Su (1): dql: Fix dql->limit value when reset. Jing Zhou (1): drm/amd/display: Guard against setting dispclk low for dcn31x Jinliang Zheng (1): dm: fix unconditional IO throttle caused by REQ_PREFLUSH Jinqian Yang (1): arm64: Add support for HIP09 Spectre-BHB mitigation Johannes Berg (3): wifi: mac80211: don't unconditionally call drv_mgd_complete_tx() wifi: mac80211: remove misplaced drv_mgd_complete_tx() call wifi: iwlwifi: add support for Killer on MTL John Chau (1): platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS Jordan Crouse (1): clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs Josh Poimboeuf (1): objtool: Properly disable uaccess validation Justin Tee (2): scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails Kai Mäkisara (3): scsi: st: Tighten the page format heuristics with MODE SELECT scsi: st: ERASE does not change tape location scsi: st: Restore some drive settings after reset Kaustabh Chakraborty (1): mmc: dw_mmc: add exynos7870 DW MMC support Kees Cook (1): net/mlx4_core: Avoid impossible mlx4_db_alloc() order value Kevin Krakauer (1): selftests/net: have `gro.sh -t` return a correct exit code Konstantin Andreev (1): smack: recognize ipv4 CIPSO w/o categories Konstantin Taranov (1): net/mana: fix warning in the writer of client oob Krzysztof Kozlowski (2): can: c_can: Use of_property_present() to test existence of DT property clk: qcom: clk-alpha-pll: Do not use random stack value for recalc rate Kuhanh Murugasen Krishnan (1): fpga: altera-cvp: Increase credit timeout Kuninori Morimoto (1): ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot() Kuniyuki Iwashima (26): ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). af_unix: Return struct unix_sock from unix_get_socket(). af_unix: Run GC on only one CPU. af_unix: Try to run GC async. af_unix: Replace BUG_ON() with WARN_ON_ONCE(). af_unix: Remove io_uring code for GC. af_unix: Remove CONFIG_UNIX_SCM. af_unix: Allocate struct unix_vertex for each inflight AF_UNIX fd. af_unix: Allocate struct unix_edge for each inflight AF_UNIX fd. af_unix: Link struct unix_edge when queuing skb. af_unix: Bulk update unix_tot_inflight/unix_inflight when queuing skb. af_unix: Iterate all vertices by DFS. af_unix: Detect Strongly Connected Components. af_unix: Save listener for embryo socket. af_unix: Fix up unix_edge.successor for embryo socket. af_unix: Save O(n) setup of Tarjan's algo. af_unix: Skip GC if no cycle exists. af_unix: Avoid Tarjan's algorithm if unnecessary. af_unix: Assign a unique index to SCC. af_unix: Detect dead SCC. af_unix: Replace garbage collection algorithm. af_unix: Remove lock dance in unix_peek_fds(). af_unix: Try not to hold unix_gc_lock during accept(). af_unix: Don't access successor in unix_del_edges() during GC. af_unix: Add dead flag to struct scm_fp_list. Kurt Borja (1): hwmon: (dell-smm) Increment the number of fans Larisa Grigore (2): spi: spi-fsl-dspi: restrict register range for regmap access spi: spi-fsl-dspi: Reset SR flags before sending a new message Li Bin (1): ARM: at91: pm: fix at91_suspend_finish for ZQ calibration Luiz Augusto von Dentz (1): Bluetooth: L2CAP: Fix not checking l2cap_chan security level Maciej S. Szmigiero (1): ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7 Maher Sanalla (1): RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject() Marek Szyprowski (1): dma-mapping: avoid potential unused data compilation warning Mario Limonciello (1): Revert "drm/amd: Keep display off while going into S4" Mark Harmstone (1): btrfs: avoid linker error in btrfs_find_create_tree_block() Mark Pearson (1): platform/x86: thinkpad_acpi: Ignore battery threshold change event notification Markus Elfring (1): media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() Martin Blumenstingl (1): pinctrl: meson: define the pull up/down resistor value as 60 kOhm Martin Povišer (1): ASoC: ops: Enforce platform maximum on initial value Masahiro Yamada (1): um: let 'make clean' properly clean underlying SUBARCH as well Matt Johnston (1): fuse: Return EPERM rather than ENOSYS from link() Matthew Wilcox (Oracle) (1): orangefs: Do not truncate file size Matti Lehtimäki (2): remoteproc: qcom_wcnss: Handle platforms with only single power domain remoteproc: qcom_wcnss: Fix on platforms without fallback regulators Michael Margolin (1): RDMA/core: Fix best page size finding when it can cross SG entries Michal Luczaj (1): af_unix: Fix garbage collection of embryos carrying OOB with SCM_RIGHTS Michal Swiatkowski (1): ice: count combined queues using Rx/Tx count Mika Westerberg (1): thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for retimer Mikulas Patocka (1): dm: restrict dm device size to 2^63-512 bytes Milton Barrera (1): HID: quirks: Add ADATA XPG alpha wireless mouse support Ming-Hung Tsai (1): dm cache: prevent BUG_ON by blocking retries on failed device resumes Moshe Shemesh (1): net/mlx5: Avoid report two health errors on same syndrome Mykyta Yatsenko (1): bpf: Return prog btf_id without capable check Namjae Jeon (1): ksmbd: fix stream write failure Nandakumar Edamana (1): libbpf: Fix out-of-bound read Nathan Chancellor (2): kbuild: Disable -Wdefault-const-init-unsafe i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work() Nicolas Bouchinet (1): netfilter: conntrack: Bound nf_conntrack sysctl writes Niklas Söderlund (1): media: adv7180: Disable test-pattern control on adv7180 Nir Lichtman (1): x86/build: Fix broken copy command in genimage.sh when making isoimage Nishanth Menon (1): net: ethernet: ti: am65-cpsw: Lower random mac address error print to info Nícolas F. R. A. Prado (1): ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect Oliver Hartkopp (2): can: bcm: add locking for bcm_op runtime updates can: bcm: add missing rcu read protection for procfs content Pali Rohár (4): cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES cifs: Fix querying and creating MF symlinks over SMB1 cifs: Fix negotiate retry functionality cifs: Fix establishing NetBIOS session for SMB2+ connection Paul Burton (2): MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core clocksource: mips-gic-timer: Enable counter when CPUs start Paul Chaignon (1): xfrm: Sanitize marks before insert Paul Kocialkowski (1): net: dwmac-sun8i: Use parsed internal PHY address instead of 1 Pavel Begunkov (1): io_uring: fix overflow resched cqe reordering Pedro Tammela (1): net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Peter Seiderer (2): net: pktgen: fix mpls maximum labels list parsing net: pktgen: fix access outside of user given buffer in pktgen_thread_write() Peter Zijlstra (Intel) (1): perf: Avoid the read if the count is already updated Petr Machata (1): vxlan: Join / leave MC group after remote changes Philip Redkin (1): x86/mm: Check return value from memblock_phys_alloc_range() Philip Yang (1): drm/amdkfd: KFD release_work possible circular locking Ping-Ke Shih (2): wifi: rtw89: fw: propagate error code from rtw89_h2c_tx() wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet Prathamesh Shete (1): pinctrl-tegra: Restore SFSEL bit when freeing pins Qu Wenruo (1): btrfs: run btrfs_error_commit_super() early Rafael J. Wysocki (1): cpuidle: menu: Avoid discarding useful information Ranjan Kumar (1): scsi: mpi3mr: Add level check to control event logging Ratheesh Kannoth (4): octeontx2-pf: Add support for page pool octeontx2-pf: fix page_pool creation fail for rings > 32k octeontx2-pf: Fix page pool cache index corruption. octeontx2-pf: Fix page pool frag allocation warning Ravi Bangoria (1): perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt Ricardo Ribalda (1): media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map Robert Richter (1): libnvdimm/labels: Fix divide error in nd_label_data_init() Robin Murphy (2): perf/arm-cmn: Fix REQ2/SNP2 mixup perf/arm-cmn: Initialise cmn->cpu earlier Roger Pau Monne (1): PCI: vmd: Disable MSI remapping bypass under Xen Rosen Penev (1): wifi: ath9k: return by of_get_mac_address Ryan Roberts (1): arm64/mm: Check PUD_TYPE_TABLE in pud_bad() Ryan Walklin (1): ASoC: sun4i-codec: support hp-det-gpios property Ryo Takakura (1): lockdep: Fix wait context check on softirq for PREEMPT_RT Sabrina Dubroca (1): espintcp: remove encap socket caching to avoid reference leak Saket Kumar Bhaskar (1): perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type Sean Anderson (1): spi: zynqmp-gqspi: Always acknowledge interrupts Seyediman Seyedarab (1): kbuild: fix argument parsing in scripts/config Shahar Shitrit (2): net/mlx5: Modify LSB bitmask in temperature event to include only the first bit net/mlx5: Apply rate-limiting to high temperature warning Shashank Gupta (1): crypto: octeontx2 - suppress auth failure screaming due to negative tests Shigeru Yoshida (1): af_unix: Fix uninit-value in __unix_walk_scc() Shivasharan S (1): scsi: mpt3sas: Send a diag reset if target reset fails Shiwu Zhang (1): drm/amdgpu: enlarge the VBIOS binary size limit Shixiong Ou (1): fbdev: fsl-diu-fb: add missing device_remove_file() Simona Vetter (1): drm/atomic: clarify the rules around drm_atomic_state->allow_modeset Soeren Moch (1): wifi: rtl8xxxu: retry firmware download on error Stanimir Varbanov (2): PCI: brcmstb: Expand inbound window size up to 64GB PCI: brcmstb: Add a softdep to MIP MSI-X driver Stanley Chu (1): i3c: master: svc: Fix missing STOP for master request Stephan Gerhold (1): i2c: qup: Vote for interconnect bandwidth to DRAM Subbaraya Sundeep (1): octeontx2-af: Set LMT_ENA bit for APR table entries Suman Ghosh (1): octeontx2-pf: Add AF_XDP non-zero copy support Svyatoslav Ryhel (1): ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 Takashi Iwai (4): ALSA: seq: Improve data consistency at polling ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx ALSA: pcm: Fix race of buffer access at PCM OSS layer Thangaraj Samynathan (1): net: lan743x: Restore SGMII CTRL register on resume Thomas Weißschuh (1): timer_list: Don't use %pK through printk() Thomas Zimmermann (1): drm/ast: Find VBIOS mode from regular display size Tianyang Zhang (1): mm/page_alloc.c: avoid infinite retries caused by cpuset race Tiwei Bie (1): um: Update min_low_pfn to match changes in uml_reserved Tom Chung (1): drm/amd/display: Initial psr_version with correct setting Trond Myklebust (8): NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() NFS: Don't allow waiting for exiting tasks SUNRPC: Don't allow waiting for exiting tasks NFSv4: Treat ENETUNREACH errors as fatal for state recovery SUNRPC: rpc_clnt_set_transport() must not change the autobind setting SUNRPC: rpcbind should never reset the port to the value '0' pNFS/flexfiles: Report ENETDOWN as a connection error NFS: Avoid flushing data while holding directory locks in nfs_rename() Tudor Ambarus (1): mailbox: use error ret code of of_parse_phandle_with_args() Valentin Caron (1): pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map Valtteri Koskivuori (1): platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys Vasant Hegde (1): iommu/amd/pgtbl_v2: Improve error handling Victor Lu (1): drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c Viktor Malik (1): bpftool: Fix readlink usage in get_fd_type Vinicius Costa Gomes (1): dmaengine: idxd: Fix allowing write() from different address spaces Viresh Kumar (1): firmware: arm_ffa: Set dma_mask for ffa devices Vitalii Mordan (1): i2c: pxa: fix call balance of i2c->clk handling routines Vladimir Moskovkin (1): platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() Vladimir Oltean (1): net: enetc: refactor bulk flipping of RX buffers to separate function Waiman Long (1): x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() Wang Liang (1): net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done Wang Zhaolong (2): smb: client: Fix use-after-free in cifs_fill_dirent smb: client: Reset all search buffer pointers when releasing buffer Willem de Bruijn (1): ipv6: save dontfrag in cork William Tu (2): net/mlx5e: set the tx_queue_len for pfifo_fast net/mlx5e: reduce rep rxq depth to 256 for ECPF Xiaofei Tan (1): ACPI: HED: Always initialize before evged Yihan Zhu (1): drm/amd/display: handle max_downscale_src_width fail check Yuanjun Gong (1): leds: pwm-multicolor: Add check for fwnode_property_read_u32 Zhikai Zhai (1): drm/amd/display: calculate the remain segments for all pipes Zhongqiu Han (1): virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN Zsolt Kajtar (2): fbcon: Use correct erase colour for clearing in fbcon fbdev: core: tileblit: Implement missing margin clearing for tileblit feijuan.li (1): drm/edid: fixed the bug that hdr metadata was not reset gaoxu (1): cgroup: Fix compilation issue due to cgroup_mutex not being exported junan (1): HID: usbkbd: Fix the bit shift number for LED_KANA

1 month, 1 week

1
1
0 0

Linux 5.15.185

by Greg Kroah-Hartman

I'm announcing the release of the 5.15.185 kernel. All users of the 5.15 kernel series must upgrade. The updated 5.15.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.15.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/admin-guide/kernel-parameters.txt | 2 Makefile | 14 arch/arm/boot/dts/tegra114.dtsi | 2 arch/arm/mach-at91/pm.c | 21 - arch/arm64/boot/dts/allwinner/sun50i-h6-beelink-gs1.dts | 38 +- arch/arm64/boot/dts/allwinner/sun50i-h6-orangepi-3.dts | 14 arch/arm64/boot/dts/allwinner/sun50i-h6-orangepi.dtsi | 22 - arch/arm64/boot/dts/nvidia/tegra210-p2597.dtsi | 2 arch/arm64/boot/dts/qcom/sm8350.dtsi | 2 arch/arm64/include/asm/pgtable.h | 3 arch/mips/include/asm/ftrace.h | 16 + arch/mips/kernel/pm-cps.c | 30 + arch/powerpc/kernel/prom_init.c | 4 arch/powerpc/perf/core-book3s.c | 20 + arch/powerpc/perf/isa207-common.c | 4 arch/um/Makefile | 1 arch/um/kernel/mem.c | 1 arch/x86/boot/genimage.sh | 5 arch/x86/events/amd/ibs.c | 3 arch/x86/include/asm/alternative.h | 2 arch/x86/include/asm/nmi.h | 2 arch/x86/include/asm/perf_event.h | 1 arch/x86/kernel/cpu/bugs.c | 10 arch/x86/kernel/nmi.c | 42 ++ arch/x86/kernel/reboot.c | 10 arch/x86/mm/kaslr.c | 10 arch/x86/um/os-Linux/mcontext.c | 3 crypto/algif_hash.c | 4 crypto/lzo-rle.c | 2 crypto/lzo.c | 2 drivers/acpi/Kconfig | 2 drivers/acpi/hed.c | 7 drivers/auxdisplay/charlcd.c | 5 drivers/auxdisplay/charlcd.h | 5 drivers/auxdisplay/hd44780.c | 2 drivers/auxdisplay/lcd2s.c | 2 drivers/auxdisplay/panel.c | 2 drivers/char/tpm/tpm_tis_core.h | 2 drivers/clk/imx/clk-imx8mp.c | 151 ++++++++++ drivers/clk/qcom/camcc-sm8250.c | 56 +-- drivers/clocksource/mips-gic-timer.c | 6 drivers/cpufreq/tegra186-cpufreq.c | 7 drivers/cpuidle/governors/menu.c | 13 drivers/crypto/marvell/octeontx2/otx2_cptvf_reqmgr.c | 7 drivers/edac/ie31200_edac.c | 28 - drivers/firmware/arm_ffa/bus.c | 1 drivers/fpga/altera-cvp.c | 2 drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 5 drivers/gpu/drm/amd/amdgpu/gfxhub_v1_0.c | 10 drivers/gpu/drm/amd/amdkfd/kfd_process.c | 16 - drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 5 drivers/gpu/drm/amd/display/dc/core/dc.c | 1 drivers/gpu/drm/amd/display/dc/dcn30/dcn30_dpp.c | 11 drivers/gpu/drm/ast/ast_mode.c | 10 drivers/gpu/drm/drm_atomic_helper.c | 28 + drivers/gpu/drm/drm_edid.c | 1 drivers/gpu/drm/i915/gvt/opregion.c | 8 drivers/gpu/drm/mediatek/mtk_dpi.c | 5 drivers/hid/hid-ids.h | 4 drivers/hid/hid-quirks.c | 2 drivers/hid/usbhid/usbkbd.c | 2 drivers/hwmon/gpio-fan.c | 16 - drivers/hwmon/xgene-hwmon.c | 2 drivers/i2c/busses/i2c-pxa.c | 5 drivers/i2c/busses/i2c-qup.c | 36 ++ drivers/i3c/master/svc-i3c-master.c | 2 drivers/infiniband/core/umem.c | 36 +- drivers/infiniband/core/uverbs_cmd.c | 144 +++++---- drivers/infiniband/core/verbs.c | 11 drivers/mailbox/mailbox.c | 7 drivers/md/dm-cache-target.c | 24 + drivers/md/dm-table.c | 4 drivers/media/platform/qcom/camss/camss-csid.c | 60 ++- drivers/media/platform/sti/c8sectpfe/c8sectpfe-core.c | 3 drivers/media/usb/cx231xx/cx231xx-417.c | 2 drivers/media/usb/uvc/uvc_v4l2.c | 6 drivers/media/v4l2-core/v4l2-subdev.c | 2 drivers/mmc/host/sdhci-pci-core.c | 6 drivers/mmc/host/sdhci.c | 9 drivers/net/bonding/bond_main.c | 2 drivers/net/can/c_can/c_can_platform.c | 2 drivers/net/ethernet/apm/xgene-v2/main.c | 4 drivers/net/ethernet/freescale/enetc/enetc.c | 16 - drivers/net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 15 drivers/net/ethernet/mellanox/mlx4/alloc.c | 6 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 2 drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 5 drivers/net/ethernet/mellanox/mlx5/core/en_selftest.c | 3 drivers/net/ethernet/mellanox/mlx5/core/events.c | 11 drivers/net/ethernet/mellanox/mlx5/core/health.c | 1 drivers/net/ethernet/microsoft/mana/gdma_main.c | 2 drivers/net/ethernet/realtek/r8169_main.c | 1 drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c | 2 drivers/net/ethernet/ti/cpsw_new.c | 1 drivers/net/ieee802154/ca8210.c | 9 drivers/net/usb/r8152.c | 1 drivers/net/vxlan/vxlan_core.c | 18 - drivers/net/wireless/ath/ath9k/init.c | 4 drivers/net/wireless/mediatek/mt76/mt76.h | 1 drivers/net/wireless/mediatek/mt76/mt76x0/pci.c | 3 drivers/net/wireless/mediatek/mt76/mt76x0/usb.c | 3 drivers/net/wireless/mediatek/mt76/mt76x2/pci.c | 3 drivers/net/wireless/mediatek/mt76/mt76x2/usb.c | 3 drivers/net/wireless/mediatek/mt76/tx.c | 3 drivers/net/wireless/realtek/rtw88/main.c | 40 -- drivers/net/wireless/realtek/rtw88/reg.h | 3 drivers/net/wireless/realtek/rtw88/rtw8822b.c | 14 drivers/net/wireless/realtek/rtw88/util.c | 3 drivers/nvdimm/label.c | 3 drivers/nvme/host/pci.c | 2 drivers/nvme/target/tcp.c | 3 drivers/pci/Kconfig | 6 drivers/pci/controller/dwc/pcie-designware-ep.c | 2 drivers/pci/controller/pcie-brcmstb.c | 5 drivers/pci/controller/vmd.c | 20 + drivers/pci/setup-bus.c | 6 drivers/perf/arm-cmn.c | 2 drivers/phy/phy-core.c | 7 drivers/pinctrl/bcm/pinctrl-bcm281xx.c | 44 +- drivers/pinctrl/devicetree.c | 10 drivers/pinctrl/meson/pinctrl-meson.c | 2 drivers/platform/x86/dell/dell-wmi-sysman/passobj-attributes.c | 2 drivers/platform/x86/fujitsu-laptop.c | 33 +- drivers/platform/x86/thinkpad_acpi.c | 7 drivers/regulator/ad5398.c | 12 drivers/remoteproc/qcom_wcnss.c | 34 +- drivers/rtc/rtc-ds1307.c | 4 drivers/rtc/rtc-rv3032.c | 2 drivers/scsi/lpfc/lpfc_hbadisc.c | 17 - drivers/scsi/mpt3sas/mpt3sas_ctl.c | 12 drivers/scsi/st.c | 29 + drivers/scsi/st.h | 2 drivers/soc/ti/k3-socinfo.c | 13 drivers/spi/spi-fsl-dspi.c | 46 ++- drivers/spi/spi-sun4i.c | 5 drivers/spi/spi-zynqmp-gqspi.c | 20 - drivers/target/iscsi/iscsi_target.c | 2 drivers/thermal/qoriq_thermal.c | 13 drivers/vfio/pci/vfio_pci_config.c | 3 drivers/vfio/pci/vfio_pci_core.c | 10 drivers/vfio/pci/vfio_pci_intrs.c | 2 drivers/video/fbdev/core/bitblit.c | 5 drivers/video/fbdev/core/fbcon.c | 10 drivers/video/fbdev/core/fbcon.h | 38 -- drivers/video/fbdev/core/fbcon_ccw.c | 5 drivers/video/fbdev/core/fbcon_cw.c | 5 drivers/video/fbdev/core/fbcon_ud.c | 5 drivers/video/fbdev/core/tileblit.c | 45 ++ drivers/video/fbdev/fsl-diu-fb.c | 1 drivers/virtio/virtio_ring.c | 2 drivers/xen/platform-pci.c | 4 drivers/xen/swiotlb-xen.c | 18 - drivers/xen/xenbus/xenbus_probe.c | 14 fs/btrfs/block-group.c | 18 - fs/btrfs/discard.c | 34 +- fs/btrfs/extent_io.c | 7 fs/btrfs/send.c | 6 fs/cifs/readdir.c | 7 fs/coredump.c | 80 ++++- fs/dlm/lowcomms.c | 4 fs/ext4/balloc.c | 4 fs/namespace.c | 6 fs/nfs/delegation.c | 3 fs/nfs/filelayout/filelayoutdev.c | 6 fs/nfs/flexfilelayout/flexfilelayout.c | 1 fs/nfs/flexfilelayout/flexfilelayoutdev.c | 6 fs/nfs/nfs4state.c | 10 fs/nfs/pnfs.h | 4 fs/nfs/pnfs_nfs.c | 9 fs/orangefs/inode.c | 7 include/drm/drm_atomic.h | 23 + include/linux/binfmts.h | 1 include/linux/dma-mapping.h | 12 include/linux/ipv6.h | 1 include/linux/lzo.h | 8 include/linux/mlx4/device.h | 2 include/linux/pid.h | 1 include/linux/rcutree.h | 2 include/linux/tpm.h | 2 include/linux/trace.h | 4 include/linux/trace_seq.h | 8 include/linux/usb/r8152.h | 1 include/media/v4l2-subdev.h | 4 include/rdma/uverbs_std_types.h | 2 include/sound/pcm.h | 2 include/trace/events/btrfs.h | 2 kernel/bpf/hashtab.c | 2 kernel/cgroup/cgroup.c | 2 kernel/fork.c | 98 +++++- kernel/padata.c | 3 kernel/rcu/tree_plugin.h | 11 kernel/softirq.c | 18 + kernel/time/posix-timers.c | 1 kernel/time/timer_list.c | 4 kernel/trace/trace.c | 11 kernel/trace/trace.h | 16 - lib/dynamic_queue_limits.c | 2 lib/lzo/Makefile | 2 lib/lzo/lzo1x_compress.c | 102 +++++- lib/lzo/lzo1x_compress_safe.c | 18 + mm/memcontrol.c | 6 mm/page_alloc.c | 8 net/bluetooth/l2cap_core.c | 15 net/bridge/br_nf_core.c | 7 net/bridge/br_private.h | 1 net/can/bcm.c | 79 +++-- net/core/pktgen.c | 13 net/ipv4/fib_frontend.c | 18 + net/ipv4/fib_rules.c | 4 net/ipv4/fib_trie.c | 22 - net/ipv4/inet_hashtables.c | 37 +- net/ipv4/tcp_input.c | 56 ++- net/ipv6/fib6_rules.c | 4 net/ipv6/ip6_output.c | 9 net/llc/af_llc.c | 8 net/mac80211/mlme.c | 4 net/netfilter/nf_conntrack_standalone.c | 12 net/sched/sch_hfsc.c | 15 net/sunrpc/clnt.c | 3 net/sunrpc/rpcb_clnt.c | 5 net/tipc/crypto.c | 5 net/xfrm/xfrm_policy.c | 3 net/xfrm/xfrm_state.c | 3 samples/bpf/Makefile | 2 scripts/config | 26 + scripts/kconfig/merge_config.sh | 4 security/smack/smackfs.c | 4 sound/core/oss/pcm_oss.c | 3 sound/core/pcm_native.c | 11 sound/pci/hda/patch_realtek.c | 42 ++ sound/soc/codecs/mt6359-accdet.h | 9 sound/soc/codecs/tas2764.c | 51 +-- sound/soc/fsl/imx-card.c | 2 sound/soc/intel/boards/bytcr_rt5640.c | 13 sound/soc/qcom/sm8250.c | 3 sound/soc/soc-dai.c | 8 sound/soc/soc-ops.c | 29 + tools/bpf/bpftool/common.c | 3 tools/build/Makefile.build | 6 tools/lib/bpf/libbpf.c | 2 tools/testing/selftests/net/gro.sh | 3 241 files changed, 2043 insertions(+), 878 deletions(-) Aaron Kling (1): cpufreq: tegra186: Share policy per cluster Ahmad Fatoum (1): clk: imx8mp: inform CCF of maximum frequency of clocks Al Viro (1): __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock Aleksander Jan Bajkowski (1): r8152: add vendor/device ID pair for Dell Alienware AW1022z Alessandro Grassi (1): spi: spi-sun4i: fix early activation Alex Williamson (1): vfio/pci: Handle INTx IRQ_NOTCONNECTED Alexander Stein (1): hwmon: (gpio-fan) Add missing mutex locks Alexander Sverdlin (1): net: ethernet: ti: cpsw_new: populate netdev of_node Alexandre Belloni (2): rtc: rv3032: fix EERD location rtc: ds1307: stop disabling alarms on probe Alexei Lazar (1): net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB Alexey Klimov (1): ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup() Alice Guo (1): thermal/drivers/qoriq: Power down TMU on system suspend Alistair Francis (1): nvmet-tcp: don't restore null sk_state_change Alok Tiwari (1): arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node Andreas Schwab (1): powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 Andrew Davis (1): soc: ti: k3-socinfo: Do not use syscon helper to build regmap Andrey Vatoropin (1): hwmon: (xgene-hwmon) use appropriate type for the latency value Andy Shevchenko (3): tracing: Mark binary printing functions with __printf() attribute auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct hd44780_common" ieee802154: ca8210: Use proper setters and getters for bitwise types AngeloGioacchino Del Regno (1): drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence Ankur Arora (2): rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y rcu: fix header guard for rcu_all_qs() Arnd Bergmann (2): net: xgene-v2: remove incorrect ACPI_PTR annotation EDAC/ie31200: work around false positive build warning Artur Weber (1): pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" Athira Rajeev (1): arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src Balbir Singh (1): x86/kaslr: Reduce KASLR entropy on most x86 systems Benjamin Berg (1): um: Store full CSGSFS and SS register from mcontext Bibo Mao (1): MIPS: Use arch specific syscall name match function Bitterblue Smith (5): wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31 wifi: rtw88: Fix download_firmware_validate() for RTL8814AU wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate Bogdan-Gabriel Roman (1): spi: spi-fsl-dspi: Halt the module after a new message transfer Boris Burkov (1): btrfs: make btrfs_discard_workfn() block_group ref explicit Brandon Kammerdiener (1): bpf: fix possible endless loop in BPF map iteration Breno Leitao (2): x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 memcg: always call cond_resched() after fn() Chenyuan Yang (1): ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of() Christian Brauner (4): coredump: fix error handling for replace_fd() pid: add pidfd_prepare() fork: use pidfd_prepare() coredump: hand a pidfd to the usermode coredump helper Christian Göttsche (1): ext4: reorder capability check last Cong Wang (1): sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() Daniel Gomez (1): kconfig: merge_config: use an empty file as initfile Depeng Shao (1): media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is available Diogo Ivo (1): arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator Dmitry Baryshkov (1): phy: core: don't require set_mode() callback for phy_get_mode() to work Dmitry Bogdanov (1): scsi: target: iscsi: Fix timeout on deleted connection Dominik Grzegorzek (1): padata: do not leak refcount in reorder_work Eric Dumazet (2): posix-timers: Add cond_resched() to posix_timer_add() search loop tcp: bring back NUMA dispersion in inet_ehash_locks_alloc() Erick Shepherd (2): mmc: host: Wait for Vdd to settle on card power off mmc: sdhci: Disable SD card clock before changing parameters Felix Fietkau (1): wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2 Filipe Manana (2): btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work() btrfs: send: return -ENAMETOOLONG when attempting a path that is too long Frank Li (1): PCI: dwc: ep: Ensure proper iteration over outbound map windows Frediano Ziglio (1): xen: Add support for XenServer 6.1 platform device Goldwyn Rodrigues (1): btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref Greg Kroah-Hartman (1): Linux 5.15.185 Hangbin Liu (1): bonding: report duplicate MAC address in all situations Hans Verkuil (1): media: cx231xx: set device_caps for 417 Haoran Jiang (1): samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora Hector Martin (1): ASoC: tas2764: Power up/down amp on mute ops Heiner Kallweit (1): r8169: don't scan PHY addresses > 0 Heming Zhao (1): dlm: make tcp still work in multi-link env Herbert Xu (1): crypto: lzo - Fix compression buffer overrun Ian Rogers (1): tools/build: Don't pass test log files to linker Ido Schimmel (2): vxlan: Annotate FDB data races bridge: netfilter: Fix forwarding of fragmented packets Ilia Gavrilov (1): llc: fix data loss when reading from a socket in llc_ui_recvmsg() Ilpo Järvinen (2): tcp: reorganize tcp_in_ack_event() and tcp_count_delivered() PCI: Fix old_size lower bound in calculate_iosize() too Ilya Guterman (1): nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro Isaac Scott (1): regulator: ad5398: Add device tree support Ivan Pravdin (1): crypto: algif_hash - fix double free in hash_accept Jakub Kicinski (1): eth: mlx4: don't try to complete XDP frames in netpoll Jani Nikula (1): drm/i915/gvt: fix unterminated-string-initialization warning Jason Andryuk (1): xenbus: Allow PVH dom0 a non-local xenstore Jeff Layton (1): nfs: don't share pNFS DS connections between net namespaces Jernej Skrabec (1): Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection" Jessica Zhang (1): drm: Add valid clones check Jiang Liu (1): drm/amdgpu: reset psp->cmd to NULL after releasing the buffer Jing Su (1): dql: Fix dql->limit value when reset. Johannes Berg (2): wifi: mac80211: don't unconditionally call drv_mgd_complete_tx() wifi: mac80211: remove misplaced drv_mgd_complete_tx() call John Chau (1): platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS Jordan Crouse (1): clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs Juergen Gross (1): xen/swiotlb: relax alignment requirements Justin Tee (1): scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine Kai Mäkisara (3): scsi: st: Tighten the page format heuristics with MODE SELECT scsi: st: ERASE does not change tape location scsi: st: Restore some drive settings after reset Kees Cook (1): net/mlx4_core: Avoid impossible mlx4_db_alloc() order value Kevin Krakauer (1): selftests/net: have `gro.sh -t` return a correct exit code Konstantin Andreev (1): smack: recognize ipv4 CIPSO w/o categories Konstantin Taranov (1): net/mana: fix warning in the writer of client oob Krzysztof Kozlowski (1): can: c_can: Use of_property_present() to test existence of DT property Kuhanh Murugasen Krishnan (1): fpga: altera-cvp: Increase credit timeout Kuninori Morimoto (1): ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot() Kuniyuki Iwashima (2): ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). Larisa Grigore (2): spi: spi-fsl-dspi: restrict register range for regmap access spi: spi-fsl-dspi: Reset SR flags before sending a new message Li Bin (1): ARM: at91: pm: fix at91_suspend_finish for ZQ calibration Luiz Augusto von Dentz (1): Bluetooth: L2CAP: Fix not checking l2cap_chan security level Maher Sanalla (1): RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject() Marek Szyprowski (1): dma-mapping: avoid potential unused data compilation warning Mario Limonciello (1): Revert "drm/amd: Keep display off while going into S4" Mark Harmstone (1): btrfs: avoid linker error in btrfs_find_create_tree_block() Mark Pearson (1): platform/x86: thinkpad_acpi: Ignore battery threshold change event notification Markus Elfring (1): media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() Martin Blumenstingl (1): pinctrl: meson: define the pull up/down resistor value as 60 kOhm Martin Povišer (1): ASoC: ops: Enforce platform maximum on initial value Masahiro Yamada (1): um: let 'make clean' properly clean underlying SUBARCH as well Matthew Wilcox (Oracle) (1): orangefs: Do not truncate file size Matti Lehtimäki (2): remoteproc: qcom_wcnss: Handle platforms with only single power domain remoteproc: qcom_wcnss: Fix on platforms without fallback regulators Michael Margolin (1): RDMA/core: Fix best page size finding when it can cross SG entries Michal Suchanek (1): tpm: tis: Double the timeout B to 4s Mikulas Patocka (1): dm: restrict dm device size to 2^63-512 bytes Milton Barrera (1): HID: quirks: Add ADATA XPG alpha wireless mouse support Ming-Hung Tsai (1): dm cache: prevent BUG_ON by blocking retries on failed device resumes Moshe Shemesh (1): net/mlx5: Avoid report two health errors on same syndrome Nandakumar Edamana (1): libbpf: Fix out-of-bound read Nathan Chancellor (2): kbuild: Disable -Wdefault-const-init-unsafe i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work() Nicolas Bouchinet (1): netfilter: conntrack: Bound nf_conntrack sysctl writes Nir Lichtman (1): x86/build: Fix broken copy command in genimage.sh when making isoimage Nícolas F. R. A. Prado (1): ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect Oliver Hartkopp (2): can: bcm: add locking for bcm_op runtime updates can: bcm: add missing rcu read protection for procfs content Paul Burton (2): MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core clocksource: mips-gic-timer: Enable counter when CPUs start Paul Chaignon (1): xfrm: Sanitize marks before insert Paul Kocialkowski (1): net: dwmac-sun8i: Use parsed internal PHY address instead of 1 Pawan Gupta (1): x86/its: Fix undefined reference to cpu_wants_rethunk_at() Pedro Tammela (1): net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Peter Seiderer (2): net: pktgen: fix mpls maximum labels list parsing net: pktgen: fix access outside of user given buffer in pktgen_thread_write() Philip Yang (1): drm/amdkfd: KFD release_work possible circular locking Rafael J. Wysocki (1): cpuidle: menu: Avoid discarding useful information Ravi Bangoria (1): perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt Ricardo Ribalda (1): media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map Robert Richter (1): libnvdimm/labels: Fix divide error in nd_label_data_init() Robin Murphy (1): perf/arm-cmn: Initialise cmn->cpu earlier Roger Pau Monne (1): PCI: vmd: Disable MSI remapping bypass under Xen Rosen Penev (1): wifi: ath9k: return by of_get_mac_address Ryan Roberts (1): arm64/mm: Check PUD_TYPE_TABLE in pud_bad() Ryo Takakura (1): lockdep: Fix wait context check on softirq for PREEMPT_RT Sakari Ailus (1): media: v4l: Memset argument to 0 before calling get_mbus_config pad op Sean Anderson (1): spi: zynqmp-gqspi: Always acknowledge interrupts Seyediman Seyedarab (1): kbuild: fix argument parsing in scripts/config Shahar Shitrit (2): net/mlx5: Modify LSB bitmask in temperature event to include only the first bit net/mlx5: Apply rate-limiting to high temperature warning Shashank Gupta (1): crypto: octeontx2 - suppress auth failure screaming due to negative tests Shivasharan S (1): scsi: mpt3sas: Send a diag reset if target reset fails Shixiong Ou (1): fbdev: fsl-diu-fb: add missing device_remove_file() Simona Vetter (1): drm/atomic: clarify the rules around drm_atomic_state->allow_modeset Stanimir Varbanov (2): PCI: brcmstb: Expand inbound window size up to 64GB PCI: brcmstb: Add a softdep to MIP MSI-X driver Stanley Chu (1): i3c: master: svc: Fix missing STOP for master request Stephan Gerhold (1): i2c: qup: Vote for interconnect bandwidth to DRAM Subbaraya Sundeep (1): octeontx2-af: Set LMT_ENA bit for APR table entries Svyatoslav Ryhel (1): ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 Takashi Iwai (3): ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx ALSA: pcm: Fix race of buffer access at PCM OSS layer Thomas Weißschuh (1): timer_list: Don't use %pK through printk() Thomas Zimmermann (1): drm/ast: Find VBIOS mode from regular display size Tianyang Zhang (1): mm/page_alloc.c: avoid infinite retries caused by cpuset race Tiwei Bie (1): um: Update min_low_pfn to match changes in uml_reserved Tom Chung (1): drm/amd/display: Initial psr_version with correct setting Trond Myklebust (5): NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() NFSv4: Treat ENETUNREACH errors as fatal for state recovery SUNRPC: rpc_clnt_set_transport() must not change the autobind setting SUNRPC: rpcbind should never reset the port to the value '0' pNFS/flexfiles: Report ENETDOWN as a connection error Tudor Ambarus (1): mailbox: use error ret code of of_parse_phandle_with_args() Valentin Caron (1): pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map Valtteri Koskivuori (1): platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys Victor Lu (1): drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c Viktor Malik (1): bpftool: Fix readlink usage in get_fd_type Viresh Kumar (1): firmware: arm_ffa: Set dma_mask for ffa devices Vitalii Mordan (1): i2c: pxa: fix call balance of i2c->clk handling routines Vladimir Moskovkin (1): platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() Vladimir Oltean (1): net: enetc: refactor bulk flipping of RX buffers to separate function Waiman Long (1): x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() Wang Liang (1): net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done Wang Zhaolong (2): smb: client: Fix use-after-free in cifs_fill_dirent smb: client: Reset all search buffer pointers when releasing buffer Willem de Bruijn (1): ipv6: save dontfrag in cork William Tu (2): net/mlx5e: set the tx_queue_len for pfifo_fast net/mlx5e: reduce rep rxq depth to 256 for ECPF Xiaofei Tan (1): ACPI: HED: Always initialize before evged Yihan Zhu (1): drm/amd/display: handle max_downscale_src_width fail check Zhongqiu Han (1): virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN Zsolt Kajtar (2): fbcon: Use correct erase colour for clearing in fbcon fbdev: core: tileblit: Implement missing margin clearing for tileblit feijuan.li (1): drm/edid: fixed the bug that hdr metadata was not reset gaoxu (1): cgroup: Fix compilation issue due to cgroup_mutex not being exported junan (1): HID: usbkbd: Fix the bit shift number for LED_KANA

1 month, 1 week

1
1
0 0

Linux 5.10.238

by Greg Kroah-Hartman

I'm announcing the release of the 5.10.238 kernel. All users of the 5.10 kernel series must upgrade. The updated 5.10.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.10.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/admin-guide/kernel-parameters.txt | 2 Makefile | 14 arch/arm/boot/dts/tegra114.dtsi | 2 arch/arm64/boot/dts/nvidia/tegra210-p2597.dtsi | 2 arch/arm64/include/asm/pgtable.h | 3 arch/mips/include/asm/ftrace.h | 16 arch/mips/include/asm/ptrace.h | 3 arch/mips/kernel/pm-cps.c | 30 + arch/parisc/math-emu/driver.c | 16 arch/powerpc/kernel/prom_init.c | 4 arch/um/Makefile | 1 arch/um/kernel/mem.c | 1 arch/x86/events/amd/ibs.c | 3 arch/x86/include/asm/nmi.h | 2 arch/x86/include/asm/perf_event.h | 1 arch/x86/kernel/cpu/bugs.c | 10 arch/x86/kernel/nmi.c | 42 ++ arch/x86/kernel/reboot.c | 10 arch/x86/um/os-Linux/mcontext.c | 3 crypto/algif_hash.c | 4 drivers/acpi/Kconfig | 2 drivers/acpi/hed.c | 7 drivers/acpi/pptt.c | 11 drivers/char/tpm/tpm_tis_core.h | 2 drivers/clk/imx/clk-imx8mp.c | 151 +++++++++ drivers/clocksource/i8253.c | 6 drivers/clocksource/mips-gic-timer.c | 6 drivers/cpuidle/governors/menu.c | 13 drivers/dma/dmatest.c | 6 drivers/dma/ti/k3-udma.c | 10 drivers/edac/altera_edac.c | 9 drivers/edac/altera_edac.h | 2 drivers/edac/ie31200_edac.c | 28 - drivers/fpga/altera-cvp.c | 2 drivers/gpu/drm/amd/amdgpu/gfxhub_v1_0.c | 10 drivers/gpu/drm/amd/amdkfd/kfd_process.c | 16 drivers/gpu/drm/amd/display/dc/core/dc.c | 1 drivers/gpu/drm/ast/ast_mode.c | 10 drivers/gpu/drm/drm_atomic_helper.c | 28 + drivers/gpu/drm/drm_edid.c | 1 drivers/gpu/drm/i915/gvt/opregion.c | 8 drivers/gpu/drm/mediatek/mtk_dpi.c | 5 drivers/gpu/drm/meson/meson_vclk.c | 6 drivers/gpu/drm/nouveau/nouveau_fence.c | 2 drivers/gpu/drm/panel/panel-simple.c | 25 - drivers/gpu/drm/vmwgfx/vmwgfx_fence.c | 17 - drivers/hid/hid-ids.h | 4 drivers/hid/hid-quirks.c | 2 drivers/hid/usbhid/usbkbd.c | 2 drivers/hwmon/gpio-fan.c | 16 drivers/hwmon/xgene-hwmon.c | 2 drivers/i2c/busses/i2c-imx-lpi2c.c | 4 drivers/i2c/busses/i2c-pxa.c | 5 drivers/i2c/busses/i2c-qup.c | 36 ++ drivers/iio/accel/adis16201.c | 4 drivers/iio/adc/ad7606_spi.c | 2 drivers/iio/adc/ad7768-1.c | 2 drivers/iio/adc/dln2-adc.c | 2 drivers/iio/chemical/sps30.c | 2 drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c | 6 drivers/infiniband/sw/rxe/rxe_cq.c | 5 drivers/input/mouse/synaptics.c | 5 drivers/iommu/amd/init.c | 8 drivers/iommu/intel/iommu.c | 4 drivers/irqchip/irq-gic-v2m.c | 8 drivers/mailbox/mailbox.c | 7 drivers/md/dm-cache-target.c | 24 + drivers/md/dm-integrity.c | 2 drivers/md/dm-table.c | 9 drivers/media/platform/sti/c8sectpfe/c8sectpfe-core.c | 3 drivers/media/usb/cx231xx/cx231xx-417.c | 2 drivers/media/v4l2-core/v4l2-subdev.c | 2 drivers/mmc/host/renesas_sdhi_core.c | 10 drivers/mmc/host/sdhci-pci-core.c | 6 drivers/mmc/host/sdhci.c | 9 drivers/net/bonding/bond_main.c | 2 drivers/net/can/c_can/c_can_platform.c | 2 drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c | 2 drivers/net/dsa/b53/b53_common.c | 11 drivers/net/dsa/sja1105/sja1105_main.c | 6 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 9 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 24 + drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 11 drivers/net/ethernet/amd/xgbe/xgbe.h | 4 drivers/net/ethernet/apm/xgene-v2/main.c | 4 drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 36 +- drivers/net/ethernet/cadence/macb_main.c | 19 - drivers/net/ethernet/dlink/dl2k.c | 2 drivers/net/ethernet/dlink/dl2k.h | 2 drivers/net/ethernet/freescale/fec_main.c | 7 drivers/net/ethernet/intel/ice/ice_arfs.c | 9 drivers/net/ethernet/intel/ice/ice_lib.c | 5 drivers/net/ethernet/intel/ice/ice_main.c | 20 - drivers/net/ethernet/mellanox/mlx4/alloc.c | 6 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 2 drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 5 drivers/net/ethernet/mellanox/mlx5/core/en_selftest.c | 3 drivers/net/ethernet/mellanox/mlx5/core/eswitch_offloads.c | 5 drivers/net/ethernet/mellanox/mlx5/core/events.c | 11 drivers/net/ethernet/mellanox/mlx5/core/health.c | 1 drivers/net/ethernet/mellanox/mlx5/core/pci_irq.c | 1 drivers/net/ethernet/mellanox/mlx5/core/rdma.c | 12 drivers/net/ethernet/mellanox/mlx5/core/rdma.h | 4 drivers/net/ethernet/microchip/lan743x_main.c | 8 drivers/net/ethernet/microchip/lan743x_main.h | 1 drivers/net/ethernet/qlogic/qlcnic/qlcnic_sriov_common.c | 7 drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c | 2 drivers/net/ethernet/ti/cpsw_new.c | 1 drivers/net/ieee802154/ca8210.c | 9 drivers/net/vxlan/vxlan_core.c | 18 - drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c | 6 drivers/net/wireless/mediatek/mt76/dma.c | 1 drivers/net/wireless/realtek/rtw88/main.c | 40 -- drivers/net/wireless/realtek/rtw88/reg.h | 3 drivers/net/wireless/realtek/rtw88/rtw8822b.c | 14 drivers/net/wireless/realtek/rtw88/util.c | 3 drivers/nvdimm/label.c | 3 drivers/nvme/host/core.c | 3 drivers/nvme/host/tcp.c | 31 + drivers/nvme/target/tcp.c | 3 drivers/of/device.c | 7 drivers/pci/controller/dwc/pci-imx6.c | 5 drivers/pci/controller/pcie-brcmstb.c | 5 drivers/pci/setup-bus.c | 6 drivers/perf/arm-cmn.c | 2 drivers/phy/phy-core.c | 7 drivers/phy/renesas/phy-rcar-gen3-usb2.c | 7 drivers/phy/tegra/xusb.c | 8 drivers/pinctrl/bcm/pinctrl-bcm281xx.c | 44 +- drivers/pinctrl/devicetree.c | 10 drivers/pinctrl/meson/pinctrl-meson.c | 2 drivers/platform/x86/asus-wmi.c | 3 drivers/platform/x86/fujitsu-laptop.c | 33 +- drivers/platform/x86/thinkpad_acpi.c | 7 drivers/regulator/ad5398.c | 12 drivers/rtc/rtc-ds1307.c | 4 drivers/rtc/rtc-rv3032.c | 2 drivers/scsi/lpfc/lpfc_hbadisc.c | 17 - drivers/scsi/mpt3sas/mpt3sas_ctl.c | 12 drivers/scsi/st.c | 29 + drivers/scsi/st.h | 2 drivers/soc/ti/k3-socinfo.c | 13 drivers/spi/spi-fsl-dspi.c | 46 ++ drivers/spi/spi-loopback-test.c | 2 drivers/spi/spi-sun4i.c | 5 drivers/spi/spi-zynqmp-gqspi.c | 20 - drivers/staging/axis-fifo/axis-fifo.c | 14 drivers/staging/iio/adc/ad7816.c | 2 drivers/target/iscsi/iscsi_target.c | 2 drivers/target/target_core_file.c | 3 drivers/target/target_core_iblock.c | 4 drivers/target/target_core_sbc.c | 6 drivers/thermal/qoriq_thermal.c | 13 drivers/usb/chipidea/ci_hdrc_imx.c | 36 +- drivers/usb/class/usbtmc.c | 59 ++- drivers/usb/gadget/udc/tegra-xudc.c | 4 drivers/usb/host/uhci-platform.c | 2 drivers/usb/host/xhci-tegra.c | 3 drivers/usb/typec/altmodes/displayport.c | 18 - drivers/usb/typec/tcpm/tcpm.c | 2 drivers/usb/typec/ucsi/displayport.c | 2 drivers/usb/typec/ucsi/ucsi_ccg.c | 5 drivers/video/fbdev/core/bitblit.c | 5 drivers/video/fbdev/core/fbcon.c | 10 drivers/video/fbdev/core/fbcon.h | 38 -- drivers/video/fbdev/core/fbcon_ccw.c | 5 drivers/video/fbdev/core/fbcon_cw.c | 5 drivers/video/fbdev/core/fbcon_ud.c | 5 drivers/video/fbdev/core/tileblit.c | 45 ++ drivers/video/fbdev/fsl-diu-fb.c | 1 drivers/xen/platform-pci.c | 4 drivers/xen/swiotlb-xen.c | 18 - drivers/xen/xenbus/xenbus.h | 2 drivers/xen/xenbus/xenbus_comms.c | 9 drivers/xen/xenbus/xenbus_dev_frontend.c | 2 drivers/xen/xenbus/xenbus_probe.c | 14 drivers/xen/xenbus/xenbus_xs.c | 18 - fs/btrfs/extent-tree.c | 25 + fs/btrfs/extent_io.c | 7 fs/btrfs/send.c | 6 fs/cifs/readdir.c | 7 fs/coredump.c | 81 ++++- fs/ext4/balloc.c | 4 fs/namespace.c | 9 fs/nfs/delegation.c | 3 fs/nfs/filelayout/filelayoutdev.c | 6 fs/nfs/flexfilelayout/flexfilelayout.c | 1 fs/nfs/flexfilelayout/flexfilelayoutdev.c | 6 fs/nfs/nfs4proc.c | 9 fs/nfs/nfs4state.c | 10 fs/nfs/pnfs.c | 9 fs/nfs/pnfs.h | 4 fs/nfs/pnfs_nfs.c | 9 fs/ocfs2/journal.c | 80 +++- fs/ocfs2/journal.h | 1 fs/ocfs2/ocfs2.h | 17 - fs/ocfs2/quota_local.c | 9 fs/ocfs2/super.c | 3 fs/orangefs/inode.c | 7 include/drm/drm_atomic.h | 23 + include/linux/binfmts.h | 1 include/linux/dma-mapping.h | 12 include/linux/ipv6.h | 1 include/linux/mlx4/device.h | 2 include/linux/pid.h | 1 include/linux/rcupdate.h | 3 include/linux/rcutree.h | 2 include/linux/tpm.h | 2 include/linux/types.h | 3 include/media/v4l2-subdev.h | 4 include/net/netfilter/nf_tables.h | 2 include/net/sch_generic.h | 15 include/sound/pcm.h | 2 include/trace/events/btrfs.h | 2 include/uapi/linux/types.h | 1 kernel/cgroup/cgroup.c | 2 kernel/fork.c | 98 +++++- kernel/padata.c | 3 kernel/params.c | 4 kernel/rcu/tree_plugin.h | 11 kernel/time/posix-timers.c | 1 kernel/trace/trace.c | 5 lib/dynamic_queue_limits.c | 2 mm/memcontrol.c | 6 mm/page_alloc.c | 8 net/bridge/br_nf_core.c | 7 net/bridge/br_private.h | 1 net/can/bcm.c | 79 +++- net/can/gw.c | 165 ++++++---- net/core/pktgen.c | 13 net/ipv4/fib_frontend.c | 18 - net/ipv4/fib_rules.c | 4 net/ipv4/fib_trie.c | 22 - net/ipv4/inet_hashtables.c | 37 +- net/ipv4/tcp_input.c | 56 +-- net/ipv4/udp_offload.c | 61 +++ net/ipv6/fib6_rules.c | 4 net/ipv6/ip6_output.c | 9 net/llc/af_llc.c | 8 net/netfilter/ipset/ip_set_hash_gen.h | 2 net/netfilter/nf_conntrack_standalone.c | 12 net/netfilter/nf_tables_api.c | 54 ++- net/netfilter/nft_immediate.c | 2 net/openvswitch/actions.c | 3 net/sched/act_mirred.c | 22 - net/sched/sch_codel.c | 2 net/sched/sch_drr.c | 9 net/sched/sch_ets.c | 9 net/sched/sch_fq.c | 2 net/sched/sch_fq_codel.c | 2 net/sched/sch_fq_pie.c | 2 net/sched/sch_hfsc.c | 15 net/sched/sch_hhf.c | 2 net/sched/sch_pie.c | 2 net/sched/sch_qfq.c | 11 net/sunrpc/clnt.c | 3 net/sunrpc/rpcb_clnt.c | 5 net/tipc/crypto.c | 5 net/xfrm/xfrm_policy.c | 3 net/xfrm/xfrm_state.c | 3 samples/ftrace/sample-trace-array.c | 2 scripts/config | 26 - scripts/kconfig/merge_config.sh | 4 security/smack/smackfs.c | 4 sound/core/oss/pcm_oss.c | 3 sound/core/pcm_native.c | 11 sound/pci/es1968.c | 6 sound/pci/hda/patch_realtek.c | 42 ++ sound/sh/Kconfig | 2 sound/soc/codecs/tas2764.c | 51 +-- sound/soc/intel/boards/bytcr_rt5640.c | 13 sound/soc/qcom/qdsp6/q6afe-clocks.c | 209 ++++++------- sound/soc/qcom/qdsp6/q6afe.c | 2 sound/soc/qcom/qdsp6/q6afe.h | 2 sound/soc/soc-dai.c | 8 sound/soc/soc-ops.c | 29 + sound/usb/format.c | 3 tools/bpf/bpftool/common.c | 3 tools/build/Makefile.build | 6 tools/lib/bpf/libbpf.c | 2 tools/testing/selftests/vm/compaction_test.c | 19 - 281 files changed, 2381 insertions(+), 1039 deletions(-) Abdun Nihaal (1): qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd() Aditya Garg (3): Input: synaptics - enable InterTouch on Dynabook Portege X30L-G Input: synaptics - enable InterTouch on Dell Precision M3800 Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5 Ahmad Fatoum (1): clk: imx8mp: inform CCF of maximum frequency of clocks Al Viro (2): do_umount(): add missing barrier before refcount checks in sync case __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock Alessandro Grassi (1): spi: spi-sun4i: fix early activation Alexander Lobakin (1): ice: arfs: fix use-after-free when freeing @rx_cpu_rmap Alexander Stein (2): usb: chipidea: ci_hdrc_imx: use dev_err_probe() hwmon: (gpio-fan) Add missing mutex locks Alexander Sverdlin (1): net: ethernet: ti: cpsw_new: populate netdev of_node Alexandre Belloni (2): rtc: rv3032: fix EERD location rtc: ds1307: stop disabling alarms on probe Alexei Lazar (1): net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB Alexey Charkov (1): usb: uhci-platform: Make the clock really optional Alice Guo (1): thermal/drivers/qoriq: Power down TMU on system suspend Alistair Francis (1): nvmet-tcp: don't restore null sk_state_change Andreas Schwab (1): powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 Andrei Kuchynski (1): usb: typec: ucsi: displayport: Fix NULL pointer access Andrew Davis (1): soc: ti: k3-socinfo: Do not use syscon helper to build regmap Andrey Vatoropin (1): hwmon: (xgene-hwmon) use appropriate type for the latency value Andy Shevchenko (2): types: Complement the aligned types with signed 64-bit one ieee802154: ca8210: Use proper setters and getters for bitwise types Angelo Dureghello (1): iio: adc: ad7606: fix serial register access AngeloGioacchino Del Regno (1): drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence Ankur Arora (2): rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y rcu: fix header guard for rcu_all_qs() Arnd Bergmann (2): net: xgene-v2: remove incorrect ACPI_PTR annotation EDAC/ie31200: work around false positive build warning Artur Weber (1): pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" Benjamin Berg (1): um: Store full CSGSFS and SS register from mcontext Benjamin Marzinski (1): dm: always update the array size in realloc_argv on success Bibo Mao (1): MIPS: Use arch specific syscall name match function Bitterblue Smith (5): wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31 wifi: rtw88: Fix download_firmware_validate() for RTL8814AU wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate Bogdan-Gabriel Roman (1): spi: spi-fsl-dspi: Halt the module after a new message transfer Breno Leitao (2): x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 memcg: always call cond_resched() after fn() Chris Mi (1): net/mlx5: E-switch, Fix error handling for enabling roce Christian Brauner (4): coredump: fix error handling for replace_fd() pid: add pidfd_prepare() fork: use pidfd_prepare() coredump: hand a pidfd to the usermode coredump helper Christian Göttsche (1): ext4: reorder capability check last Christian Hewitt (1): Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates" Clark Wang (1): i2c: imx-lpi2c: Fix clock count when probe defers Claudiu Beznea (1): phy: renesas: rcar-gen3-usb2: Set timing registers only once Cong Wang (2): net_sched: Flush gso_skb list too during ->change() sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() Dan Carpenter (1): usb: typec: fix potential array underflow in ucsi_ccg_sync_control() Daniel Gomez (1): kconfig: merge_config: use an empty file as initfile Daniel Wagner (1): nvme: unblock ctrl state transition for firmware update Dave Penkler (3): usb: usbtmc: Fix erroneous get_stb ioctl error returns usb: usbtmc: Fix erroneous wait_srq ioctl return usb: usbtmc: Fix erroneous generic_read ioctl return David Lechner (1): iio: chemical: sps30: use aligned_s64 for timestamp Diogo Ivo (1): arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator Dmitry Antipov (1): module: ensure that kobject_put() is safe for module type kobjects Dmitry Baryshkov (2): ASoC: q6afe-clocks: fix reprobing of the driver phy: core: don't require set_mode() callback for phy_get_mode() to work Dmitry Bogdanov (1): scsi: target: iscsi: Fix timeout on deleted connection Dmitry Torokhov (1): Input: synaptics - enable SMBus for HP Elitebook 850 G1 Dominik Grzegorzek (1): padata: do not leak refcount in reorder_work Eelco Chaudron (1): openvswitch: Fix unsafe attribute parsing in output_userspace() Eric Dumazet (3): can: gw: use call_rcu() instead of costly synchronize_rcu() posix-timers: Add cond_resched() to posix_timer_add() search loop tcp: bring back NUMA dispersion in inet_ehash_locks_alloc() Erick Shepherd (2): mmc: host: Wait for Vdd to settle on card power off mmc: sdhci: Disable SD card clock before changing parameters Fedor Pchelkin (2): usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling wifi: mt76: disable napi on driver removal Felix Fietkau (1): net: ipv6: fix UDPv6 GSO segmentation with NAT Feng Tang (1): selftests/mm: compaction_test: support platform with huge mount of memory Filipe Manana (2): btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() btrfs: send: return -ENAMETOOLONG when attempting a path that is too long Florian Westphal (2): netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx netfilter: nf_tables: do not defer rule destruction via call_rcu Frediano Ziglio (1): xen: Add support for XenServer 6.1 platform device GONG Ruiqi (1): usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() Gabriel Shahrouzi (4): staging: iio: adc: ad7816: Correct conditional logic for store mode staging: axis-fifo: Remove hardware resets for user errors staging: axis-fifo: Correct handling of tx_fifo_depth for size validation iio: adis16201: Correct inclinometer channel resolution Geert Uytterhoeven (2): spi: loopback-test: Do not split 1024-byte hexdumps ALSA: sh: SND_AICA should depend on SH_DMA_API Goldwyn Rodrigues (1): btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref Greg Kroah-Hartman (1): Linux 5.10.238 Hangbin Liu (1): bonding: report duplicate MAC address in all situations Hans Verkuil (1): media: cx231xx: set device_caps for 417 Hans de Goede (1): platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection Hector Martin (1): ASoC: tas2764: Power up/down amp on mute ops Helge Deller (1): parisc: Fix double SIGFPE crash Ian Rogers (1): tools/build: Don't pass test log files to linker Ido Schimmel (2): vxlan: Annotate FDB data races bridge: netfilter: Fix forwarding of fragmented packets Ilia Gavrilov (1): llc: fix data loss when reading from a socket in llc_ui_recvmsg() Ilpo Järvinen (2): tcp: reorganize tcp_in_ack_event() and tcp_count_delivered() PCI: Fix old_size lower bound in calculate_iosize() too Isaac Scott (1): regulator: ad5398: Add device tree support Ivan Pravdin (1): crypto: algif_hash - fix double free in hash_accept Jakub Kicinski (2): net/sched: act_mirred: don't override retval if we already lost the skb eth: mlx4: don't try to complete XDP frames in netpoll Jan Kara (3): ocfs2: switch osb->disable_recovery to enum ocfs2: implement handshaking with ocfs2 recovery thread ocfs2: stop quota recovery before disabling quotas Jani Nikula (1): drm/i915/gvt: fix unterminated-string-initialization warning Jason Andryuk (2): xenbus: Use kref to track req lifetime xenbus: Allow PVH dom0 a non-local xenstore Jeff Layton (1): nfs: don't share pNFS DS connections between net namespaces Jeongjun Park (1): tracing: Fix oob write in trace_seq_to_buffer() Jeremy Linton (1): ACPI: PPTT: Fix processor subtable walk Jessica Zhang (1): drm: Add valid clones check Jim Lin (1): usb: host: tegra: Prevent host controller crash when OTG port is used Jing Su (1): dql: Fix dql->limit value when reset. Joachim Priesner (1): ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset John Chau (1): platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS Jonas Gorski (3): net: dsa: b53: allow leaky reserved multicast net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave net: dsa: b53: fix learning on VLAN unaware bridges Jonathan Cameron (2): iio: adc: dln2: Use aligned_s64 for timestamp iio: adc: ad7768-1: Fix insufficient alignment of timestamp. Jozsef Kadlecsik (1): netfilter: ipset: fix region locking in hash types Juergen Gross (1): xen/swiotlb: relax alignment requirements Justin Tee (1): scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine Kai Mäkisara (3): scsi: st: Tighten the page format heuristics with MODE SELECT scsi: st: ERASE does not change tape location scsi: st: Restore some drive settings after reset Kees Cook (1): net/mlx4_core: Avoid impossible mlx4_db_alloc() order value Kevin Baker (1): drm/panel: simple: Update timings for AUO G101EVN010 Konstantin Andreev (1): smack: recognize ipv4 CIPSO w/o categories Krzysztof Kozlowski (1): can: c_can: Use of_property_present() to test existence of DT property Kuhanh Murugasen Krishnan (1): fpga: altera-cvp: Increase credit timeout Kuninori Morimoto (1): ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot() Kuniyuki Iwashima (2): ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). Larisa Grigore (2): spi: spi-fsl-dspi: restrict register range for regmap access spi: spi-fsl-dspi: Reset SR flags before sending a new message Li Lingfeng (1): nfs: handle failure of nfs_get_lock_context in unlock path Ma Ke (1): phy: Fix error handling in tegra_xusb_port_init Manuel Fombuena (1): Input: synaptics - enable InterTouch on Dynabook Portege X30-D Maor Gottlieb (1): net/mlx5: E-Switch, Initialize MAC Address for Default GID Marc Kleine-Budde (1): can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls Marek Szyprowski (1): dma-mapping: avoid potential unused data compilation warning Mark Harmstone (1): btrfs: avoid linker error in btrfs_find_create_tree_block() Mark Pearson (1): platform/x86: thinkpad_acpi: Ignore battery threshold change event notification Markus Elfring (1): media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() Martin Blumenstingl (1): pinctrl: meson: define the pull up/down resistor value as 60 kOhm Martin Povišer (1): ASoC: ops: Enforce platform maximum on initial value Masahiro Yamada (1): um: let 'make clean' properly clean underlying SUBARCH as well Mathieu Othacehe (1): net: cadence: macb: Fix a possible deadlock in macb_halt_tx. Matthew Wilcox (Oracle) (1): orangefs: Do not truncate file size Mattias Barthel (1): net: fec: ERR007885 Workaround for conventional TX Michael Chan (1): bnxt_en: Fix ethtool -d byte order for 32-bit values Michael Liang (1): nvme-tcp: fix premature queue removal and I/O failover Michal Suchanek (1): tpm: tis: Double the timeout B to 4s Mike Christie (1): scsi: target: Fix WRITE_SAME No Data Buffer crash Mikulas Patocka (2): dm-integrity: fix a warning on invalid table line dm: restrict dm device size to 2^63-512 bytes Milton Barrera (1): HID: quirks: Add ADATA XPG alpha wireless mouse support Ming-Hung Tsai (1): dm cache: prevent BUG_ON by blocking retries on failed device resumes Mingcong Bai (1): iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57) Moshe Shemesh (1): net/mlx5: Avoid report two health errors on same syndrome Nandakumar Edamana (1): libbpf: Fix out-of-bound read Nathan Chancellor (1): kbuild: Disable -Wdefault-const-init-unsafe Nathan Lynch (1): dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted" Nicolas Bouchinet (1): netfilter: conntrack: Bound nf_conntrack sysctl writes Niravkumar L Rabara (2): EDAC/altera: Test the correct error reg offset EDAC/altera: Set DDR and SDMMC interrupt mask before registration Oliver Hartkopp (3): can: gw: fix RCU/BH usage in cgw_create_job() can: bcm: add locking for bcm_op runtime updates can: bcm: add missing rcu read protection for procfs content Oliver Neukum (1): USB: usbtmc: use interruptible sleep in usbtmc_read Pablo Neira Ayuso (1): netfilter: nf_tables: wait for rcu grace period on net_device removal Paul Burton (2): MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core clocksource: mips-gic-timer: Enable counter when CPUs start Paul Chaignon (1): xfrm: Sanitize marks before insert Paul Kocialkowski (1): net: dwmac-sun8i: Use parsed internal PHY address instead of 1 Pavel Paklov (1): iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid Pedro Tammela (1): net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Peter Seiderer (2): net: pktgen: fix mpls maximum labels list parsing net: pktgen: fix access outside of user given buffer in pktgen_thread_write() Philip Yang (1): drm/amdkfd: KFD release_work possible circular locking Philipp Stanner (1): drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() RD Babiera (2): usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group Rafael J. Wysocki (1): cpuidle: menu: Avoid discarding useful information Ravi Bangoria (1): perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt Richard Zhu (1): PCI: imx6: Skip controller_id generation logic for i.MX7D Robert Richter (1): libnvdimm/labels: Fix divide error in nd_label_data_init() Robin Murphy (1): perf/arm-cmn: Initialise cmn->cpu earlier Ronald Wahl (1): dmaengine: ti: k3-udma: Add missing locking Ruslan Piasetskyi (1): mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe Ryan Roberts (1): arm64/mm: Check PUD_TYPE_TABLE in pud_bad() Sakari Ailus (1): media: v4l: Memset argument to 0 before calling get_mbus_config pad op Sean Anderson (1): spi: zynqmp-gqspi: Always acknowledge interrupts Sebastian Andrzej Siewior (1): clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable() Sergey Shtylyov (1): of: module: add buffer overflow check in of_modalias() Seyediman Seyedarab (1): kbuild: fix argument parsing in scripts/config Shahar Shitrit (2): net/mlx5: Modify LSB bitmask in temperature event to include only the first bit net/mlx5: Apply rate-limiting to high temperature warning Shivasharan S (1): scsi: mpt3sas: Send a diag reset if target reset fails Shixiong Ou (1): fbdev: fsl-diu-fb: add missing device_remove_file() Silvano Seva (2): iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo Simon Horman (1): net: dlink: Correct endianness handling of led_mode Simona Vetter (1): drm/atomic: clarify the rules around drm_atomic_state->allow_modeset Stanimir Varbanov (2): PCI: brcmstb: Expand inbound window size up to 64GB PCI: brcmstb: Add a softdep to MIP MSI-X driver Stephan Gerhold (1): i2c: qup: Vote for interconnect bandwidth to DRAM Steven Rostedt (1): tracing: samples: Initialize trace_array_printk() with the correct function Suzuki K Poulose (1): irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() Svyatoslav Ryhel (1): ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 Takashi Iwai (3): ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx ALSA: pcm: Fix race of buffer access at PCM OSS layer Thangaraj Samynathan (1): net: lan743x: Fix memleak issue when GSO enabled Thomas Gleixner (1): irqchip/gic-v2m: Mark a few functions __init Thomas Zimmermann (1): drm/ast: Find VBIOS mode from regular display size Thorsten Blum (1): MIPS: Fix MAX_REG_OFFSET Tianyang Zhang (1): mm/page_alloc.c: avoid infinite retries caused by cpuset race Tiwei Bie (1): um: Update min_low_pfn to match changes in uml_reserved Tom Chung (1): drm/amd/display: Initial psr_version with correct setting Trond Myklebust (6): NFSv4/pnfs: Reset the layout state after a layoutreturn NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() NFSv4: Treat ENETUNREACH errors as fatal for state recovery SUNRPC: rpc_clnt_set_transport() must not change the autobind setting SUNRPC: rpcbind should never reset the port to the value '0' pNFS/flexfiles: Report ENETDOWN as a connection error Tudor Ambarus (2): dm: fix copying after src array boundaries mailbox: use error ret code of of_parse_phandle_with_args() Uladzislau Rezki (Sony) (1): rcu/kvfree: Add kvfree_rcu_mightsleep() and kfree_rcu_mightsleep() Valentin Caron (1): pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map Valtteri Koskivuori (1): platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys Victor Lu (1): drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c Victor Nogueira (4): net_sched: drr: Fix double list add in class with netem as child qdisc net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc net_sched: ets: Fix double list add in class with netem as child qdisc net_sched: qfq: Fix double list add in class with netem as child qdisc Viktor Malik (1): bpftool: Fix readlink usage in get_fd_type Vishal Badole (1): amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload Vitalii Mordan (1): i2c: pxa: fix call balance of i2c->clk handling routines Vladimir Oltean (1): net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING Waiman Long (1): x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() Wang Liang (1): net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done Wang Zhaolong (2): smb: client: Fix use-after-free in cifs_fill_dirent smb: client: Reset all search buffer pointers when releasing buffer Wayne Chang (1): usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN Wenpeng Liang (1): net/mlx5: Remove return statement exist at the end of void function Wentao Liang (2): wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2() Willem de Bruijn (1): ipv6: save dontfrag in cork William Tu (2): net/mlx5e: set the tx_queue_len for pfifo_fast net/mlx5e: reduce rep rxq depth to 256 for ECPF Xiang wangx (1): irqchip/gic-v2m: Add const to of_device_id Xiaofei Tan (1): ACPI: HED: Always initialize before evged Yemike Abhilash Chandra (1): dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure instead of a local copy Zack Rusin (1): drm/vmwgfx: Fix a deadlock in dma buf fence polling Zhu Yanjun (1): RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug Zsolt Kajtar (2): fbcon: Use correct erase colour for clearing in fbcon fbdev: core: tileblit: Implement missing margin clearing for tileblit feijuan.li (1): drm/edid: fixed the bug that hdr metadata was not reset gaoxu (1): cgroup: Fix compilation issue due to cgroup_mutex not being exported junan (1): HID: usbkbd: Fix the bit shift number for LED_KANA

1 month, 1 week

1
1
0 0

Linux 5.4.294

by Greg Kroah-Hartman

I'm announcing the release of the 5.4.294 kernel. All users of the 5.4 kernel series must upgrade. The updated 5.4.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.4.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/admin-guide/kernel-parameters.txt | 2 Makefile | 14 arch/arm/boot/dts/tegra114.dtsi | 2 arch/arm64/boot/dts/rockchip/px30.dtsi | 4 arch/mips/include/asm/ftrace.h | 16 arch/mips/include/asm/ptrace.h | 3 arch/mips/kernel/pm-cps.c | 30 - arch/parisc/math-emu/driver.c | 16 arch/powerpc/kernel/prom_init.c | 4 arch/um/Makefile | 1 arch/um/kernel/mem.c | 1 arch/x86/include/asm/nmi.h | 2 arch/x86/kernel/cpu/bugs.c | 10 arch/x86/kernel/nmi.c | 42 + arch/x86/kernel/reboot.c | 10 arch/x86/um/os-Linux/mcontext.c | 3 crypto/algif_hash.c | 4 drivers/acpi/Kconfig | 2 drivers/acpi/hed.c | 7 drivers/acpi/pptt.c | 11 drivers/clocksource/i8253.c | 6 drivers/cpuidle/governors/menu.c | 13 drivers/dma/dmatest.c | 6 drivers/edac/altera_edac.c | 9 drivers/edac/altera_edac.h | 2 drivers/edac/ie31200_edac.c | 28 - drivers/fpga/altera-cvp.c | 2 drivers/gpu/drm/amd/amdkfd/kfd_process.c | 16 drivers/gpu/drm/drm_atomic_helper.c | 28 + drivers/gpu/drm/drm_edid.c | 1 drivers/gpu/drm/i915/gvt/opregion.c | 8 drivers/gpu/drm/mediatek/mtk_dpi.c | 5 drivers/hid/hid-ids.h | 4 drivers/hid/hid-quirks.c | 2 drivers/hid/usbhid/usbkbd.c | 2 drivers/hwmon/gpio-fan.c | 16 drivers/hwmon/xgene-hwmon.c | 2 drivers/i2c/busses/i2c-imx-lpi2c.c | 4 drivers/i2c/busses/i2c-pxa.c | 5 drivers/iio/accel/adis16201.c | 4 drivers/iio/adc/ad7606_spi.c | 2 drivers/iio/adc/ad7768-1.c | 2 drivers/iio/adc/dln2-adc.c | 2 drivers/iio/chemical/sps30.c | 2 drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c | 6 drivers/infiniband/sw/rxe/rxe_cq.c | 5 drivers/input/mouse/synaptics.c | 5 drivers/iommu/amd_iommu_init.c | 8 drivers/irqchip/irq-gic-v2m.c | 8 drivers/mailbox/mailbox.c | 7 drivers/md/dm-cache-target.c | 24 drivers/md/dm-integrity.c | 2 drivers/md/dm-table.c | 9 drivers/media/platform/sti/c8sectpfe/c8sectpfe-core.c | 3 drivers/media/usb/cx231xx/cx231xx-417.c | 2 drivers/mmc/host/sdhci-pci-core.c | 6 drivers/mmc/host/sdhci.c | 9 drivers/net/bonding/bond_main.c | 2 drivers/net/dsa/b53/b53_common.c | 2 drivers/net/dsa/sja1105/sja1105_main.c | 6 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 9 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 24 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 11 drivers/net/ethernet/amd/xgbe/xgbe.h | 4 drivers/net/ethernet/apm/xgene-v2/main.c | 4 drivers/net/ethernet/dlink/dl2k.c | 2 drivers/net/ethernet/dlink/dl2k.h | 2 drivers/net/ethernet/freescale/fec_main.c | 7 drivers/net/ethernet/mellanox/mlx4/alloc.c | 6 drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 5 drivers/net/ethernet/mellanox/mlx5/core/en_selftest.c | 3 drivers/net/ethernet/mellanox/mlx5/core/events.c | 11 drivers/net/ethernet/mellanox/mlx5/core/health.c | 1 drivers/net/ethernet/mellanox/mlx5/core/rdma.c | 2 drivers/net/ethernet/microchip/lan743x_main.c | 75 +- drivers/net/ethernet/microchip/lan743x_main.h | 21 drivers/net/ethernet/qlogic/qlcnic/qlcnic_sriov_common.c | 7 drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c | 2 drivers/net/ieee802154/ca8210.c | 9 drivers/net/vxlan.c | 18 drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c | 6 drivers/net/wireless/realtek/rtw88/main.c | 17 drivers/net/wireless/realtek/rtw88/rtw8822b.c | 14 drivers/nvdimm/label.c | 3 drivers/nvme/host/core.c | 3 drivers/nvme/host/tcp.c | 31 + drivers/nvme/target/tcp.c | 3 drivers/of/device.c | 7 drivers/pci/controller/dwc/pci-imx6.c | 5 drivers/pci/setup-bus.c | 6 drivers/phy/phy-core.c | 7 drivers/phy/renesas/phy-rcar-gen3-usb2.c | 7 drivers/phy/tegra/xusb.c | 8 drivers/pinctrl/bcm/pinctrl-bcm281xx.c | 44 - drivers/pinctrl/devicetree.c | 10 drivers/pinctrl/meson/pinctrl-meson.c | 2 drivers/platform/x86/asus-wmi.c | 3 drivers/platform/x86/fujitsu-laptop.c | 33 + drivers/platform/x86/thinkpad_acpi.c | 7 drivers/regulator/ad5398.c | 12 drivers/rtc/rtc-ds1307.c | 4 drivers/scsi/lpfc/lpfc_hbadisc.c | 17 drivers/scsi/mpt3sas/mpt3sas_ctl.c | 12 drivers/scsi/st.c | 29 - drivers/scsi/st.h | 2 drivers/spi/spi-fsl-dspi.c | 20 drivers/spi/spi-loopback-test.c | 2 drivers/spi/spi-sun4i.c | 5 drivers/staging/axis-fifo/axis-fifo.c | 415 +++++---------- drivers/staging/axis-fifo/axis-fifo.txt | 18 drivers/staging/iio/adc/ad7816.c | 2 drivers/target/iscsi/iscsi_target.c | 2 drivers/target/target_core_file.c | 3 drivers/target/target_core_iblock.c | 4 drivers/target/target_core_sbc.c | 6 drivers/usb/chipidea/ci_hdrc_imx.c | 42 - drivers/usb/class/usbtmc.c | 59 +- drivers/usb/host/uhci-platform.c | 2 drivers/usb/typec/tcpm/tcpm.c | 2 drivers/usb/typec/ucsi/displayport.c | 2 drivers/video/fbdev/core/tileblit.c | 37 + drivers/video/fbdev/fsl-diu-fb.c | 1 drivers/xen/platform-pci.c | 4 drivers/xen/swiotlb-xen.c | 18 drivers/xen/xenbus/xenbus.h | 2 drivers/xen/xenbus/xenbus_comms.c | 9 drivers/xen/xenbus/xenbus_dev_frontend.c | 2 drivers/xen/xenbus/xenbus_probe.c | 14 drivers/xen/xenbus/xenbus_xs.c | 18 fs/btrfs/extent_io.c | 7 fs/btrfs/send.c | 6 fs/cifs/readdir.c | 7 fs/coredump.c | 80 ++ fs/ext4/balloc.c | 4 fs/namespace.c | 9 fs/nfs/callback_proc.c | 2 fs/nfs/filelayout/filelayoutdev.c | 6 fs/nfs/flexfilelayout/flexfilelayout.c | 1 fs/nfs/flexfilelayout/flexfilelayoutdev.c | 6 fs/nfs/nfs4proc.c | 9 fs/nfs/nfs4state.c | 10 fs/nfs/pnfs.c | 29 - fs/nfs/pnfs.h | 5 fs/nfs/pnfs_nfs.c | 9 fs/ocfs2/journal.c | 80 ++ fs/ocfs2/journal.h | 1 fs/ocfs2/ocfs2.h | 17 fs/ocfs2/quota_local.c | 9 fs/ocfs2/super.c | 3 fs/orangefs/inode.c | 7 include/drm/drm_atomic.h | 23 include/linux/binfmts.h | 1 include/linux/dma-mapping.h | 12 include/linux/mlx4/device.h | 2 include/linux/pid.h | 5 include/linux/rcutree.h | 2 include/linux/types.h | 3 include/sound/pcm.h | 2 include/trace/events/btrfs.h | 2 include/uapi/linux/types.h | 1 kernel/cgroup/cgroup.c | 2 kernel/fork.c | 108 +++ kernel/params.c | 4 kernel/rcu/tree_plugin.h | 11 kernel/time/posix-timers.c | 1 kernel/trace/trace.c | 5 lib/dynamic_queue_limits.c | 2 mm/memcontrol.c | 6 mm/page_alloc.c | 8 net/bridge/br_nf_core.c | 7 net/bridge/br_private.h | 1 net/can/bcm.c | 79 +- net/core/pktgen.c | 13 net/ipv4/fib_rules.c | 4 net/ipv6/fib6_rules.c | 4 net/llc/af_llc.c | 8 net/netfilter/ipset/ip_set_hash_gen.h | 2 net/netfilter/nf_conntrack_standalone.c | 12 net/netfilter/nf_tables_api.c | 51 + net/openvswitch/actions.c | 3 net/sched/sch_drr.c | 9 net/sched/sch_hfsc.c | 15 net/sched/sch_htb.c | 13 net/sched/sch_qfq.c | 11 net/sunrpc/clnt.c | 3 net/xfrm/xfrm_policy.c | 3 net/xfrm/xfrm_state.c | 3 scripts/config | 26 scripts/kconfig/merge_config.sh | 4 security/smack/smackfs.c | 4 sound/core/oss/pcm_oss.c | 3 sound/core/pcm_native.c | 11 sound/pci/es1968.c | 6 sound/sh/Kconfig | 2 sound/soc/intel/boards/bytcr_rt5640.c | 13 sound/soc/soc-ops.c | 29 + tools/bpf/bpftool/common.c | 3 tools/build/Makefile.build | 6 198 files changed, 1680 insertions(+), 838 deletions(-) Abdun Nihaal (1): qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd() Aditya Garg (3): Input: synaptics - enable InterTouch on Dynabook Portege X30L-G Input: synaptics - enable InterTouch on Dell Precision M3800 Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5 Al Viro (2): do_umount(): add missing barrier before refcount checks in sync case __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock Alessandro Grassi (1): spi: spi-sun4i: fix early activation Alexander Stein (2): usb: chipidea: ci_hdrc_imx: use dev_err_probe() hwmon: (gpio-fan) Add missing mutex locks Alexandre Belloni (1): rtc: ds1307: stop disabling alarms on probe Alexei Lazar (1): net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB Alexey Charkov (1): usb: uhci-platform: Make the clock really optional Alexey Denisov (1): lan743x: fix endianness when accessing descriptors Alistair Francis (1): nvmet-tcp: don't restore null sk_state_change Andreas Schwab (1): powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 Andrei Kuchynski (1): usb: typec: ucsi: displayport: Fix NULL pointer access Andrey Vatoropin (1): hwmon: (xgene-hwmon) use appropriate type for the latency value Andy Shevchenko (2): types: Complement the aligned types with signed 64-bit one ieee802154: ca8210: Use proper setters and getters for bitwise types Angelo Dureghello (1): iio: adc: ad7606: fix serial register access AngeloGioacchino Del Regno (1): drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence Ankur Arora (2): rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y rcu: fix header guard for rcu_all_qs() Arnd Bergmann (2): net: xgene-v2: remove incorrect ACPI_PTR annotation EDAC/ie31200: work around false positive build warning Artur Weber (1): pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" Benjamin Berg (1): um: Store full CSGSFS and SS register from mcontext Benjamin Marzinski (1): dm: always update the array size in realloc_argv on success Bibo Mao (1): MIPS: Use arch specific syscall name match function Bitterblue Smith (2): wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate Breno Leitao (2): x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 memcg: always call cond_resched() after fn() Christian Brauner (5): coredump: fix error handling for replace_fd() pidfd: check pid has attached task in fdinfo pid: add pidfd_prepare() fork: use pidfd_prepare() coredump: hand a pidfd to the usermode coredump helper Christian Göttsche (1): ext4: reorder capability check last Clark Wang (1): i2c: imx-lpi2c: Fix clock count when probe defers Claudiu Beznea (1): phy: renesas: rcar-gen3-usb2: Set timing registers only once Colin Ian King (1): lan743x: remove redundant initialization of variable current_head_index Cong Wang (3): sch_htb: make htb_qlen_notify() idempotent sch_htb: make htb_deactivate() idempotent sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() Daniel Gomez (1): kconfig: merge_config: use an empty file as initfile Daniel Wagner (1): nvme: unblock ctrl state transition for firmware update Dave Penkler (3): usb: usbtmc: Fix erroneous get_stb ioctl error returns usb: usbtmc: Fix erroneous wait_srq ioctl return usb: usbtmc: Fix erroneous generic_read ioctl return David Lechner (1): iio: chemical: sps30: use aligned_s64 for timestamp Dmitry Antipov (1): module: ensure that kobject_put() is safe for module type kobjects Dmitry Baryshkov (1): phy: core: don't require set_mode() callback for phy_get_mode() to work Dmitry Bogdanov (1): scsi: target: iscsi: Fix timeout on deleted connection Dmitry Torokhov (1): Input: synaptics - enable SMBus for HP Elitebook 850 G1 Eelco Chaudron (1): openvswitch: Fix unsafe attribute parsing in output_userspace() Eric Dumazet (1): posix-timers: Add cond_resched() to posix_timer_add() search loop Erick Shepherd (2): mmc: host: Wait for Vdd to settle on card power off mmc: sdhci: Disable SD card clock before changing parameters Fedor Pchelkin (1): usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling Filipe Manana (1): btrfs: send: return -ENAMETOOLONG when attempting a path that is too long Florian Westphal (2): netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx netfilter: nf_tables: do not defer rule destruction via call_rcu Frediano Ziglio (1): xen: Add support for XenServer 6.1 platform device Gabriel Shahrouzi (4): staging: iio: adc: ad7816: Correct conditional logic for store mode iio: adis16201: Correct inclinometer channel resolution staging: axis-fifo: Remove hardware resets for user errors staging: axis-fifo: Correct handling of tx_fifo_depth for size validation Geert Uytterhoeven (2): spi: loopback-test: Do not split 1024-byte hexdumps ALSA: sh: SND_AICA should depend on SH_DMA_API Goldwyn Rodrigues (1): btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref Greg Kroah-Hartman (1): Linux 5.4.294 Hangbin Liu (1): bonding: report duplicate MAC address in all situations Hans Verkuil (1): media: cx231xx: set device_caps for 417 Hans de Goede (1): platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection Heiko Stuebner (1): arm64: dts: rockchip: fix iface clock-name on px30 iommus Helge Deller (1): parisc: Fix double SIGFPE crash Ian Rogers (1): tools/build: Don't pass test log files to linker Ido Schimmel (2): vxlan: Annotate FDB data races bridge: netfilter: Fix forwarding of fragmented packets Ilia Gavrilov (1): llc: fix data loss when reading from a socket in llc_ui_recvmsg() Ilpo Järvinen (1): PCI: Fix old_size lower bound in calculate_iosize() too Isaac Scott (1): regulator: ad5398: Add device tree support Ivan Pravdin (1): crypto: algif_hash - fix double free in hash_accept Jan Kara (3): ocfs2: switch osb->disable_recovery to enum ocfs2: implement handshaking with ocfs2 recovery thread ocfs2: stop quota recovery before disabling quotas Jani Nikula (1): drm/i915/gvt: fix unterminated-string-initialization warning Jason Andryuk (2): xenbus: Use kref to track req lifetime xenbus: Allow PVH dom0 a non-local xenstore Jeff Layton (1): nfs: don't share pNFS DS connections between net namespaces Jeongjun Park (1): tracing: Fix oob write in trace_seq_to_buffer() Jeremy Linton (1): ACPI: PPTT: Fix processor subtable walk Jessica Zhang (1): drm: Add valid clones check Jing Su (1): dql: Fix dql->limit value when reset. John Chau (1): platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS Jonas Gorski (1): net: dsa: b53: fix learning on VLAN unaware bridges Jonathan Cameron (2): iio: adc: dln2: Use aligned_s64 for timestamp iio: adc: ad7768-1: Fix insufficient alignment of timestamp. Jozsef Kadlecsik (1): netfilter: ipset: fix region locking in hash types Juergen Gross (1): xen/swiotlb: relax alignment requirements Justin Tee (1): scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine Kai Mäkisara (3): scsi: st: Tighten the page format heuristics with MODE SELECT scsi: st: ERASE does not change tape location scsi: st: Restore some drive settings after reset Kees Cook (1): net/mlx4_core: Avoid impossible mlx4_db_alloc() order value Konstantin Andreev (1): smack: recognize ipv4 CIPSO w/o categories Kuhanh Murugasen Krishnan (1): fpga: altera-cvp: Increase credit timeout Kuniyuki Iwashima (1): ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). Larisa Grigore (1): spi: spi-fsl-dspi: restrict register range for regmap access Li Lingfeng (1): nfs: handle failure of nfs_get_lock_context in unlock path Ma Ke (1): phy: Fix error handling in tegra_xusb_port_init Manuel Fombuena (1): Input: synaptics - enable InterTouch on Dynabook Portege X30-D Maor Gottlieb (1): net/mlx5: E-Switch, Initialize MAC Address for Default GID Marek Szyprowski (1): dma-mapping: avoid potential unused data compilation warning Mark Harmstone (1): btrfs: avoid linker error in btrfs_find_create_tree_block() Mark Pearson (1): platform/x86: thinkpad_acpi: Ignore battery threshold change event notification Markus Elfring (1): media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() Martin Blumenstingl (1): pinctrl: meson: define the pull up/down resistor value as 60 kOhm Martin Povišer (1): ASoC: ops: Enforce platform maximum on initial value Masahiro Yamada (1): um: let 'make clean' properly clean underlying SUBARCH as well Matthew Wilcox (Oracle) (1): orangefs: Do not truncate file size Mattias Barthel (1): net: fec: ERR007885 Workaround for conventional TX Michael Liang (1): nvme-tcp: fix premature queue removal and I/O failover Mike Christie (1): scsi: target: Fix WRITE_SAME No Data Buffer crash Mikulas Patocka (2): dm-integrity: fix a warning on invalid table line dm: restrict dm device size to 2^63-512 bytes Milton Barrera (1): HID: quirks: Add ADATA XPG alpha wireless mouse support Ming-Hung Tsai (1): dm cache: prevent BUG_ON by blocking retries on failed device resumes Moshe Shemesh (1): net/mlx5: Avoid report two health errors on same syndrome Nathan Chancellor (1): kbuild: Disable -Wdefault-const-init-unsafe Nathan Lynch (1): dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted" Nicolas Bouchinet (1): netfilter: conntrack: Bound nf_conntrack sysctl writes Niravkumar L Rabara (2): EDAC/altera: Test the correct error reg offset EDAC/altera: Set DDR and SDMMC interrupt mask before registration Oliver Hartkopp (2): can: bcm: add locking for bcm_op runtime updates can: bcm: add missing rcu read protection for procfs content Oliver Neukum (1): USB: usbtmc: use interruptible sleep in usbtmc_read Pablo Neira Ayuso (1): netfilter: nf_tables: wait for rcu grace period on net_device removal Paul Burton (1): MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core Paul Chaignon (1): xfrm: Sanitize marks before insert Paul Kocialkowski (1): net: dwmac-sun8i: Use parsed internal PHY address instead of 1 Pavel Paklov (1): iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid Pedro Tammela (1): net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Peter Chen (2): usb: chipidea: imx: change hsic power regulator as optional usb: chipidea: imx: refine the error handling for hsic Peter Seiderer (2): net: pktgen: fix mpls maximum labels list parsing net: pktgen: fix access outside of user given buffer in pktgen_thread_write() Philip Yang (1): drm/amdkfd: KFD release_work possible circular locking Quentin Deslandes (2): staging: axis-fifo: replace spinlock with mutex staging: axis-fifo: avoid parsing ignored device tree properties RD Babiera (1): usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition Rafael J. Wysocki (1): cpuidle: menu: Avoid discarding useful information Richard Zhu (1): PCI: imx6: Skip controller_id generation logic for i.MX7D Robert Richter (1): libnvdimm/labels: Fix divide error in nd_label_data_init() Sebastian Andrzej Siewior (1): clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable() Sergey Shtylyov (1): of: module: add buffer overflow check in of_modalias() Seyediman Seyedarab (1): kbuild: fix argument parsing in scripts/config Shahar Shitrit (2): net/mlx5: Modify LSB bitmask in temperature event to include only the first bit net/mlx5: Apply rate-limiting to high temperature warning Shivasharan S (1): scsi: mpt3sas: Send a diag reset if target reset fails Shixiong Ou (1): fbdev: fsl-diu-fb: add missing device_remove_file() Silvano Seva (2): iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo Simon Horman (1): net: dlink: Correct endianness handling of led_mode Simona Vetter (1): drm/atomic: clarify the rules around drm_atomic_state->allow_modeset Suzuki K Poulose (1): irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() Svyatoslav Ryhel (1): ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 Takashi Iwai (2): ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 ALSA: pcm: Fix race of buffer access at PCM OSS layer Thangaraj Samynathan (1): net: lan743x: Fix memleak issue when GSO enabled Thomas Gleixner (1): irqchip/gic-v2m: Mark a few functions __init Thorsten Blum (1): MIPS: Fix MAX_REG_OFFSET Tianyang Zhang (1): mm/page_alloc.c: avoid infinite retries caused by cpuset race Tiwei Bie (1): um: Update min_low_pfn to match changes in uml_reserved Trond Myklebust (5): NFSv4/pnfs: pnfs_set_layout_stateid() should update the layout cred NFSv4/pnfs: Reset the layout state after a layoutreturn NFSv4: Treat ENETUNREACH errors as fatal for state recovery SUNRPC: rpc_clnt_set_transport() must not change the autobind setting pNFS/flexfiles: Report ENETDOWN as a connection error Tudor Ambarus (2): dm: fix copying after src array boundaries mailbox: use error ret code of of_parse_phandle_with_args() Valentin Caron (1): pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map Valtteri Koskivuori (1): platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys Victor Nogueira (3): net_sched: drr: Fix double list add in class with netem as child qdisc net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc net_sched: qfq: Fix double list add in class with netem as child qdisc Viktor Malik (1): bpftool: Fix readlink usage in get_fd_type Vishal Badole (1): amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload Vitalii Mordan (1): i2c: pxa: fix call balance of i2c->clk handling routines Vladimir Oltean (1): net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING Waiman Long (1): x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() Wang Zhaolong (2): smb: client: Fix use-after-free in cifs_fill_dirent smb: client: Reset all search buffer pointers when releasing buffer Wentao Liang (2): wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2() William Tu (2): net/mlx5e: set the tx_queue_len for pfifo_fast net/mlx5e: reduce rep rxq depth to 256 for ECPF Xiang wangx (1): irqchip/gic-v2m: Add const to of_device_id Xiaofei Tan (1): ACPI: HED: Always initialize before evged Zhu Yanjun (1): RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug Zsolt Kajtar (1): fbdev: core: tileblit: Implement missing margin clearing for tileblit feijuan.li (1): drm/edid: fixed the bug that hdr metadata was not reset gaoxu (1): cgroup: Fix compilation issue due to cgroup_mutex not being exported junan (1): HID: usbkbd: Fix the bit shift number for LED_KANA

1 month, 1 week

1
1
0 0

[PATCH stable 6.6.y] arm64: kaslr: fix nokaslr cmdline parsing

by Chen Ridong

From: Chen Ridong <chenridong(a)huawei.com> Currently, when the command line contains "nokaslrxxx", it was incorrectly treated as a request to disable KASLR virtual memory. However, the behavior is different from physical address handling. This issue exists before the commit af73b9a2dd39 ("arm64: kaslr: Use feature override instead of parsing the cmdline again"). This patch fixes the parsing logic for the 'nokaslr' command line argument. Only the exact strings, 'nokaslr', will disable KASLR. Other inputs such as 'xxnokaslr', 'xxnokaslrxx', or 'xxnokaslr=xx' will not disable KASLR. Fixes: f80fb3a3d508 ("arm64: add support for kernel ASLR") Cc: stable(a)vger.kernel.org # <= v6.6 Signed-off-by: Chen Ridong <chenridong(a)huawei.com> --- arch/arm64/kernel/pi/kaslr_early.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/arch/arm64/kernel/pi/kaslr_early.c b/arch/arm64/kernel/pi/kaslr_early.c index 17bff6e399e4..731d0a3f1a89 100644 --- a/arch/arm64/kernel/pi/kaslr_early.c +++ b/arch/arm64/kernel/pi/kaslr_early.c @@ -35,9 +35,14 @@ static char *__strstr(const char *s1, const char *s2) static bool cmdline_contains_nokaslr(const u8 *cmdline) { const u8 *str; + size_t len = strlen("nokaslr"); + const char *after = cmdline + len; str = __strstr(cmdline, "nokaslr"); - return str == cmdline || (str > cmdline && *(str - 1) == ' '); + if ((str == cmdline || (str > cmdline && *(str - 1) == ' ')) && + (*after == ' ' || *after == '\0')) + return true; + return false; } static bool is_kaslr_disabled_cmdline(void *fdt) -- 2.34.1

1 month, 1 week

3
2
0 0

[PATCH AUTOSEL 6.15 1/9] fbcon: Make sure modelist not set on unregistered console

by Sasha Levin

From: Kees Cook <kees(a)kernel.org> [ Upstream commit cedc1b63394a866bf8663a3e40f4546f1d28c8d8 ] It looks like attempting to write to the "store_modes" sysfs node will run afoul of unregistered consoles: UBSAN: array-index-out-of-bounds in drivers/video/fbdev/core/fbcon.c:122:28 index -1 is out of range for type 'fb_info *[32]' ... fbcon_info_from_console+0x192/0x1a0 drivers/video/fbdev/core/fbcon.c:122 fbcon_new_modelist+0xbf/0x2d0 drivers/video/fbdev/core/fbcon.c:3048 fb_new_modelist+0x328/0x440 drivers/video/fbdev/core/fbmem.c:673 store_modes+0x1c9/0x3e0 drivers/video/fbdev/core/fbsysfs.c:113 dev_attr_store+0x55/0x80 drivers/base/core.c:2439 static struct fb_info *fbcon_registered_fb[FB_MAX]; ... static signed char con2fb_map[MAX_NR_CONSOLES]; ... static struct fb_info *fbcon_info_from_console(int console) ... return fbcon_registered_fb[con2fb_map[console]]; If con2fb_map contains a -1 things go wrong here. Instead, return NULL, as callers of fbcon_info_from_console() are trying to compare against existing "info" pointers, so error handling should kick in correctly. Reported-by: syzbot+a7d4444e7b6e743572f7(a)syzkaller.appspotmail.com Closes: https://lore.kernel.org/all/679d0a8f.050a0220.163cdc.000c.GAE@google.com/ Signed-off-by: Kees Cook <kees(a)kernel.org> Signed-off-by: Helge Deller <deller(a)gmx.de> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- **YES** This commit should be backported to stable kernel trees. Here's my analysis: ## Security and Stability Issue This commit fixes a critical **array-index-out-of-bounds vulnerability** that can be triggered via sysfs. The issue occurs when `con2fb_map[console]` contains `-1`, causing `fbcon_info_from_console()` to access `fbcon_registered_fb[-1]`, which is an out-of-bounds array access. ## Bug Analysis The problem is in the `fbcon_info_from_console()` function at line 122: ```c // Before fix: return fbcon_registered_fb[con2fb_map[console]]; // After fix: fb = con2fb_map[console]; if (fb < 0 || fb >= ARRAY_SIZE(fbcon_registered_fb)) return NULL; return fbcon_registered_fb[fb]; ``` ## Trigger Path The vulnerability can be triggered through: 1. **sysfs interface**: Writing to `/sys/class/graphics/fbX/modes` 2. **Call chain**: `store_modes()` → `fb_new_modelist()` → `fbcon_new_modelist()` → `fbcon_info_from_console()` 3. **User-accessible**: This is exploitable from userspace through the sysfs interface ## Code Context from Analysis Based on the git blame, the vulnerable code path in `fbcon_new_modelist()` has existed since: - Original code from **2005** (Linus Torvalds) - The problematic `fbcon_info_from_console()` call was added in **2022** by commit `409d6c95f9c6` ("fbcon: Introduce wrapper for console->fb_info lookup") ## Risk Assessment 1. **High Impact**: UBSAN array bounds violation, potential for memory corruption 2. **User Triggerable**: Accessible via standard sysfs interface 3. **Long- standing**: The vulnerable pattern has existed since 2022 when the wrapper was introduced 4. **Active Exploitation**: Reported by syzbot, indicating active fuzzing found this issue ## Backport Suitability 1. **Small & Contained**: Only 6 lines changed in a single function 2. **Safe Fix**: Adds bounds checking without changing logic flow 3. **No Dependencies**: The fix is self-contained and doesn't require other commits 4. **Clear Bug**: Definitively fixes out-of-bounds access with proper NULL return 5. **Stable Pattern**: Callers already handle NULL returns from `fbcon_info_from_console()` ## Comparison to Historical Precedent Looking at the similar commits provided: - **Similar Commit #1** (Backport Status: YES): Fixed boundary checks in fbcon parameter parsing - this follows the same pattern of fixing bounds issues in fbcon - The other NO commits were architectural changes or refactoring, not security fixes This commit perfectly fits the stable tree criteria: it's an important bugfix, has minimal regression risk, is contained to a single subsystem, and fixes a user-triggerable vulnerability. drivers/video/fbdev/core/fbcon.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/drivers/video/fbdev/core/fbcon.c b/drivers/video/fbdev/core/fbcon.c index ac3c99ed92d1a..2df48037688d1 100644 --- a/drivers/video/fbdev/core/fbcon.c +++ b/drivers/video/fbdev/core/fbcon.c @@ -117,9 +117,14 @@ static signed char con2fb_map_boot[MAX_NR_CONSOLES]; static struct fb_info *fbcon_info_from_console(int console) { + signed char fb; WARN_CONSOLE_UNLOCKED(); - return fbcon_registered_fb[con2fb_map[console]]; + fb = con2fb_map[console]; + if (fb < 0 || fb >= ARRAY_SIZE(fbcon_registered_fb)) + return NULL; + + return fbcon_registered_fb[fb]; } static int logo_lines; -- 2.39.5

1 month, 1 week

2
9
0 0

[PATCH v6 0/4] media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 + other meta fixes

by Ricardo Ribalda

This series introduces a new metadata format for UVC cameras and adds a couple of improvements to the UVC metadata handling. The new metadata format can be enabled in runtime with quirks. Signed-off-by: Ricardo Ribalda <ribalda(a)chromium.org> --- Changes in v6 (Thanks Laurent): - Fix typo in metafmt-uvc.rst - Improve metafmt-uvc-msxu-1-5.rst - uvc_meta_v4l2_try_format() block MSXU format unless the quirk is active - Refactor uvc_enable_msxu - Document uvc_meta_detect_msxu - Rebase series - Add R-b - Link to v5: https://lore.kernel.org/r/20250404-uvc-meta-v5-0-f79974fc2d20@chromium.org Changes in v5: - Fix codestyle and kerneldoc warnings reported by media-ci - Link to v4: https://lore.kernel.org/r/20250403-uvc-meta-v4-0-877aa6475975@chromium.org Changes in v4: - Rename format to V4L2_META_FMT_UVC_MSXU_1_5 (Thanks Mauro) - Flag the new format with a quirk. - Autodetect MSXU devices. - Link to v3: https://lore.kernel.org/linux-media/20250313-uvc-metadata-v3-0-c467af869c60… Changes in v3: - Fix doc syntax errors. - Link to v2: https://lore.kernel.org/r/20250306-uvc-metadata-v2-0-7e939857cad5@chromium.… Changes in v2: - Add metadata invalid fix - Move doc note to a separate patch - Introduce V4L2_META_FMT_UVC_CUSTOM (thanks HdG!). - Link to v1: https://lore.kernel.org/r/20250226-uvc-metadata-v1-1-6cd6fe5ec2cb@chromium.… --- Ricardo Ribalda (4): media: uvcvideo: Do not mark valid metadata as invalid media: Documentation: Add note about UVCH length field media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META .../userspace-api/media/v4l/meta-formats.rst | 1 + .../media/v4l/metafmt-uvc-msxu-1-5.rst | 23 ++++ .../userspace-api/media/v4l/metafmt-uvc.rst | 4 +- MAINTAINERS | 1 + drivers/media/usb/uvc/uvc_metadata.c | 116 +++++++++++++++++++-- drivers/media/usb/uvc/uvc_video.c | 12 +-- drivers/media/usb/uvc/uvcvideo.h | 1 + drivers/media/v4l2-core/v4l2-ioctl.c | 1 + include/linux/usb/uvc.h | 3 + include/uapi/linux/videodev2.h | 1 + 10 files changed, 150 insertions(+), 13 deletions(-) --- base-commit: 5e1ff2314797bf53636468a97719a8222deca9ae change-id: 20250403-uvc-meta-e556773d12ae Best regards, -- Ricardo Ribalda <ribalda(a)chromium.org>

1 month, 1 week

1
1
0 0

[PATCH AUTOSEL 5.4 1/5] watchdog: da9052_wdt: respect TWDMIN

by Sasha Levin

From: Marcus Folkesson <marcus.folkesson(a)gmail.com> [ Upstream commit 325f510fcd9cda5a44bcb662b74ba4e3dabaca10 ] We have to wait at least the minimium time for the watchdog window (TWDMIN) before writings to the wdt register after the watchdog is activated. Otherwise the chip will assert TWD_ERROR and power down to reset mode. Signed-off-by: Marcus Folkesson <marcus.folkesson(a)gmail.com> Reviewed-by: Guenter Roeck <linux(a)roeck-us.net> Link: https://lore.kernel.org/r/20250326-da9052-fixes-v3-4-a38a560fef0e@gmail.com Signed-off-by: Guenter Roeck <linux(a)roeck-us.net> Signed-off-by: Wim Van Sebroeck <wim(a)linux-watchdog.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- Based on my analysis, here's my assessment: **YES** This commit should be backported to stable kernel trees. Here's my extensive analysis: ## Analysis of the Commit ### 1. **Bug Fix Nature** The commit fixes a critical hardware timing constraint issue. The DA9052 PMIC has a minimum watchdog window time (TWDMIN = 256ms) that must be respected. Writing to the watchdog register before this time elapses causes the chip to assert TWD_ERROR and power down to reset mode, which is a serious system failure. ### 2. **Code Changes Analysis** The commit makes a single, targeted change in `drivers/watchdog/da9052_wdt.c`: ```c da9052_wdt->timeout = DA9052_DEF_TIMEOUT; +da9052_wdt->min_hw_heartbeat_ms = DA9052_TWDMIN; da9052_wdt->info = &da9052_wdt_info; ``` This change adds `min_hw_heartbeat_ms = DA9052_TWDMIN` (256ms) to the watchdog device structure during probe. ### 3. **Technical Correctness** - **DA9052_TWDMIN is already defined** as 256 in the driver (line 25) - **The current code already implements manual timing protection** in `da9052_wdt_ping()` (lines 119-121) using jiffies tracking and `mdelay()` - **The watchdog core provides proper infrastructure** for `min_hw_heartbeat_ms` as seen in similar DA9062/DA9063 drivers and watchdog core code - **This replaces manual timing logic with standard core handling**, making it more reliable and consistent ### 4. **Risk Assessment - Very Low** - **Minimal code change**: Only adds one line setting a field - **No behavioral change**: The timing constraint was already enforced manually - **Uses existing infrastructure**: `min_hw_heartbeat_ms` is well-established in watchdog core - **Consistent with related drivers**: DA9062 and DA9063 drivers use the same pattern - **No architectural changes**: Just moves timing enforcement from driver to core ### 5. **User Impact - High** - **Prevents system resets**: Without this fix, rapid watchdog pings can cause unexpected system shutdowns - **Hardware protection**: Prevents TWD_ERROR assertion which leads to PMIC reset - **Critical for production systems**: Watchdog failures can cause data loss and system instability ### 6. **Stable Tree Criteria Compliance** - ✅ **Important bugfix**: Prevents system resets due to hardware timing violations - ✅ **Minimal risk**: Single line addition using existing infrastructure - ✅ **Small and contained**: Only affects DA9052 watchdog driver - ✅ **No new features**: Just improves existing timing protection - ✅ **Clear benefit**: Moves from manual to core-handled timing protection ### 7. **Comparison with Similar Commits** The provided similar commits (all marked "NO") were different in nature: - **Commits #1-3**: Added new functionality or made architectural changes to use core protection - **Commits #4-5**: Simple cleanup removing error messages - **This commit**: Fixes a critical hardware timing bug that can cause system resets This commit is fundamentally different - it fixes a real hardware constraint violation that can cause system failures, not just cleanup or new features. The commit perfectly fits stable tree criteria: it's a small, low-risk fix for an important hardware-related bug that can cause system instability. drivers/watchdog/da9052_wdt.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/watchdog/da9052_wdt.c b/drivers/watchdog/da9052_wdt.c index d708c091bf1b1..180526220d8c4 100644 --- a/drivers/watchdog/da9052_wdt.c +++ b/drivers/watchdog/da9052_wdt.c @@ -164,6 +164,7 @@ static int da9052_wdt_probe(struct platform_device *pdev) da9052_wdt = &driver_data->wdt; da9052_wdt->timeout = DA9052_DEF_TIMEOUT; + da9052_wdt->min_hw_heartbeat_ms = DA9052_TWDMIN; da9052_wdt->info = &da9052_wdt_info; da9052_wdt->ops = &da9052_wdt_ops; da9052_wdt->parent = dev; -- 2.39.5

1 month, 1 week

1
4
0 0

[PATCH AUTOSEL 5.10 1/5] watchdog: da9052_wdt: respect TWDMIN

by Sasha Levin

From: Marcus Folkesson <marcus.folkesson(a)gmail.com> [ Upstream commit 325f510fcd9cda5a44bcb662b74ba4e3dabaca10 ] We have to wait at least the minimium time for the watchdog window (TWDMIN) before writings to the wdt register after the watchdog is activated. Otherwise the chip will assert TWD_ERROR and power down to reset mode. Signed-off-by: Marcus Folkesson <marcus.folkesson(a)gmail.com> Reviewed-by: Guenter Roeck <linux(a)roeck-us.net> Link: https://lore.kernel.org/r/20250326-da9052-fixes-v3-4-a38a560fef0e@gmail.com Signed-off-by: Guenter Roeck <linux(a)roeck-us.net> Signed-off-by: Wim Van Sebroeck <wim(a)linux-watchdog.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- Based on my analysis, here's my assessment: **YES** This commit should be backported to stable kernel trees. Here's my extensive analysis: ## Analysis of the Commit ### 1. **Bug Fix Nature** The commit fixes a critical hardware timing constraint issue. The DA9052 PMIC has a minimum watchdog window time (TWDMIN = 256ms) that must be respected. Writing to the watchdog register before this time elapses causes the chip to assert TWD_ERROR and power down to reset mode, which is a serious system failure. ### 2. **Code Changes Analysis** The commit makes a single, targeted change in `drivers/watchdog/da9052_wdt.c`: ```c da9052_wdt->timeout = DA9052_DEF_TIMEOUT; +da9052_wdt->min_hw_heartbeat_ms = DA9052_TWDMIN; da9052_wdt->info = &da9052_wdt_info; ``` This change adds `min_hw_heartbeat_ms = DA9052_TWDMIN` (256ms) to the watchdog device structure during probe. ### 3. **Technical Correctness** - **DA9052_TWDMIN is already defined** as 256 in the driver (line 25) - **The current code already implements manual timing protection** in `da9052_wdt_ping()` (lines 119-121) using jiffies tracking and `mdelay()` - **The watchdog core provides proper infrastructure** for `min_hw_heartbeat_ms` as seen in similar DA9062/DA9063 drivers and watchdog core code - **This replaces manual timing logic with standard core handling**, making it more reliable and consistent ### 4. **Risk Assessment - Very Low** - **Minimal code change**: Only adds one line setting a field - **No behavioral change**: The timing constraint was already enforced manually - **Uses existing infrastructure**: `min_hw_heartbeat_ms` is well-established in watchdog core - **Consistent with related drivers**: DA9062 and DA9063 drivers use the same pattern - **No architectural changes**: Just moves timing enforcement from driver to core ### 5. **User Impact - High** - **Prevents system resets**: Without this fix, rapid watchdog pings can cause unexpected system shutdowns - **Hardware protection**: Prevents TWD_ERROR assertion which leads to PMIC reset - **Critical for production systems**: Watchdog failures can cause data loss and system instability ### 6. **Stable Tree Criteria Compliance** - ✅ **Important bugfix**: Prevents system resets due to hardware timing violations - ✅ **Minimal risk**: Single line addition using existing infrastructure - ✅ **Small and contained**: Only affects DA9052 watchdog driver - ✅ **No new features**: Just improves existing timing protection - ✅ **Clear benefit**: Moves from manual to core-handled timing protection ### 7. **Comparison with Similar Commits** The provided similar commits (all marked "NO") were different in nature: - **Commits #1-3**: Added new functionality or made architectural changes to use core protection - **Commits #4-5**: Simple cleanup removing error messages - **This commit**: Fixes a critical hardware timing bug that can cause system resets This commit is fundamentally different - it fixes a real hardware constraint violation that can cause system failures, not just cleanup or new features. The commit perfectly fits stable tree criteria: it's a small, low-risk fix for an important hardware-related bug that can cause system instability. drivers/watchdog/da9052_wdt.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/watchdog/da9052_wdt.c b/drivers/watchdog/da9052_wdt.c index d708c091bf1b1..180526220d8c4 100644 --- a/drivers/watchdog/da9052_wdt.c +++ b/drivers/watchdog/da9052_wdt.c @@ -164,6 +164,7 @@ static int da9052_wdt_probe(struct platform_device *pdev) da9052_wdt = &driver_data->wdt; da9052_wdt->timeout = DA9052_DEF_TIMEOUT; + da9052_wdt->min_hw_heartbeat_ms = DA9052_TWDMIN; da9052_wdt->info = &da9052_wdt_info; da9052_wdt->ops = &da9052_wdt_ops; da9052_wdt->parent = dev; -- 2.39.5

1 month, 1 week

1
4
0 0

[PATCH AUTOSEL 5.15 1/5] watchdog: da9052_wdt: respect TWDMIN

by Sasha Levin

From: Marcus Folkesson <marcus.folkesson(a)gmail.com> [ Upstream commit 325f510fcd9cda5a44bcb662b74ba4e3dabaca10 ] We have to wait at least the minimium time for the watchdog window (TWDMIN) before writings to the wdt register after the watchdog is activated. Otherwise the chip will assert TWD_ERROR and power down to reset mode. Signed-off-by: Marcus Folkesson <marcus.folkesson(a)gmail.com> Reviewed-by: Guenter Roeck <linux(a)roeck-us.net> Link: https://lore.kernel.org/r/20250326-da9052-fixes-v3-4-a38a560fef0e@gmail.com Signed-off-by: Guenter Roeck <linux(a)roeck-us.net> Signed-off-by: Wim Van Sebroeck <wim(a)linux-watchdog.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- Based on my analysis, here's my assessment: **YES** This commit should be backported to stable kernel trees. Here's my extensive analysis: ## Analysis of the Commit ### 1. **Bug Fix Nature** The commit fixes a critical hardware timing constraint issue. The DA9052 PMIC has a minimum watchdog window time (TWDMIN = 256ms) that must be respected. Writing to the watchdog register before this time elapses causes the chip to assert TWD_ERROR and power down to reset mode, which is a serious system failure. ### 2. **Code Changes Analysis** The commit makes a single, targeted change in `drivers/watchdog/da9052_wdt.c`: ```c da9052_wdt->timeout = DA9052_DEF_TIMEOUT; +da9052_wdt->min_hw_heartbeat_ms = DA9052_TWDMIN; da9052_wdt->info = &da9052_wdt_info; ``` This change adds `min_hw_heartbeat_ms = DA9052_TWDMIN` (256ms) to the watchdog device structure during probe. ### 3. **Technical Correctness** - **DA9052_TWDMIN is already defined** as 256 in the driver (line 25) - **The current code already implements manual timing protection** in `da9052_wdt_ping()` (lines 119-121) using jiffies tracking and `mdelay()` - **The watchdog core provides proper infrastructure** for `min_hw_heartbeat_ms` as seen in similar DA9062/DA9063 drivers and watchdog core code - **This replaces manual timing logic with standard core handling**, making it more reliable and consistent ### 4. **Risk Assessment - Very Low** - **Minimal code change**: Only adds one line setting a field - **No behavioral change**: The timing constraint was already enforced manually - **Uses existing infrastructure**: `min_hw_heartbeat_ms` is well-established in watchdog core - **Consistent with related drivers**: DA9062 and DA9063 drivers use the same pattern - **No architectural changes**: Just moves timing enforcement from driver to core ### 5. **User Impact - High** - **Prevents system resets**: Without this fix, rapid watchdog pings can cause unexpected system shutdowns - **Hardware protection**: Prevents TWD_ERROR assertion which leads to PMIC reset - **Critical for production systems**: Watchdog failures can cause data loss and system instability ### 6. **Stable Tree Criteria Compliance** - ✅ **Important bugfix**: Prevents system resets due to hardware timing violations - ✅ **Minimal risk**: Single line addition using existing infrastructure - ✅ **Small and contained**: Only affects DA9052 watchdog driver - ✅ **No new features**: Just improves existing timing protection - ✅ **Clear benefit**: Moves from manual to core-handled timing protection ### 7. **Comparison with Similar Commits** The provided similar commits (all marked "NO") were different in nature: - **Commits #1-3**: Added new functionality or made architectural changes to use core protection - **Commits #4-5**: Simple cleanup removing error messages - **This commit**: Fixes a critical hardware timing bug that can cause system resets This commit is fundamentally different - it fixes a real hardware constraint violation that can cause system failures, not just cleanup or new features. The commit perfectly fits stable tree criteria: it's a small, low-risk fix for an important hardware-related bug that can cause system instability. drivers/watchdog/da9052_wdt.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/watchdog/da9052_wdt.c b/drivers/watchdog/da9052_wdt.c index d708c091bf1b1..180526220d8c4 100644 --- a/drivers/watchdog/da9052_wdt.c +++ b/drivers/watchdog/da9052_wdt.c @@ -164,6 +164,7 @@ static int da9052_wdt_probe(struct platform_device *pdev) da9052_wdt = &driver_data->wdt; da9052_wdt->timeout = DA9052_DEF_TIMEOUT; + da9052_wdt->min_hw_heartbeat_ms = DA9052_TWDMIN; da9052_wdt->info = &da9052_wdt_info; da9052_wdt->ops = &da9052_wdt_ops; da9052_wdt->parent = dev; -- 2.39.5

1 month, 1 week

1
4
0 0

[PATCH AUTOSEL 6.1 1/6] fbcon: Make sure modelist not set on unregistered console

by Sasha Levin

From: Kees Cook <kees(a)kernel.org> [ Upstream commit cedc1b63394a866bf8663a3e40f4546f1d28c8d8 ] It looks like attempting to write to the "store_modes" sysfs node will run afoul of unregistered consoles: UBSAN: array-index-out-of-bounds in drivers/video/fbdev/core/fbcon.c:122:28 index -1 is out of range for type 'fb_info *[32]' ... fbcon_info_from_console+0x192/0x1a0 drivers/video/fbdev/core/fbcon.c:122 fbcon_new_modelist+0xbf/0x2d0 drivers/video/fbdev/core/fbcon.c:3048 fb_new_modelist+0x328/0x440 drivers/video/fbdev/core/fbmem.c:673 store_modes+0x1c9/0x3e0 drivers/video/fbdev/core/fbsysfs.c:113 dev_attr_store+0x55/0x80 drivers/base/core.c:2439 static struct fb_info *fbcon_registered_fb[FB_MAX]; ... static signed char con2fb_map[MAX_NR_CONSOLES]; ... static struct fb_info *fbcon_info_from_console(int console) ... return fbcon_registered_fb[con2fb_map[console]]; If con2fb_map contains a -1 things go wrong here. Instead, return NULL, as callers of fbcon_info_from_console() are trying to compare against existing "info" pointers, so error handling should kick in correctly. Reported-by: syzbot+a7d4444e7b6e743572f7(a)syzkaller.appspotmail.com Closes: https://lore.kernel.org/all/679d0a8f.050a0220.163cdc.000c.GAE@google.com/ Signed-off-by: Kees Cook <kees(a)kernel.org> Signed-off-by: Helge Deller <deller(a)gmx.de> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- **YES** This commit should be backported to stable kernel trees. Here's my analysis: ## Security and Stability Issue This commit fixes a critical **array-index-out-of-bounds vulnerability** that can be triggered via sysfs. The issue occurs when `con2fb_map[console]` contains `-1`, causing `fbcon_info_from_console()` to access `fbcon_registered_fb[-1]`, which is an out-of-bounds array access. ## Bug Analysis The problem is in the `fbcon_info_from_console()` function at line 122: ```c // Before fix: return fbcon_registered_fb[con2fb_map[console]]; // After fix: fb = con2fb_map[console]; if (fb < 0 || fb >= ARRAY_SIZE(fbcon_registered_fb)) return NULL; return fbcon_registered_fb[fb]; ``` ## Trigger Path The vulnerability can be triggered through: 1. **sysfs interface**: Writing to `/sys/class/graphics/fbX/modes` 2. **Call chain**: `store_modes()` → `fb_new_modelist()` → `fbcon_new_modelist()` → `fbcon_info_from_console()` 3. **User-accessible**: This is exploitable from userspace through the sysfs interface ## Code Context from Analysis Based on the git blame, the vulnerable code path in `fbcon_new_modelist()` has existed since: - Original code from **2005** (Linus Torvalds) - The problematic `fbcon_info_from_console()` call was added in **2022** by commit `409d6c95f9c6` ("fbcon: Introduce wrapper for console->fb_info lookup") ## Risk Assessment 1. **High Impact**: UBSAN array bounds violation, potential for memory corruption 2. **User Triggerable**: Accessible via standard sysfs interface 3. **Long- standing**: The vulnerable pattern has existed since 2022 when the wrapper was introduced 4. **Active Exploitation**: Reported by syzbot, indicating active fuzzing found this issue ## Backport Suitability 1. **Small & Contained**: Only 6 lines changed in a single function 2. **Safe Fix**: Adds bounds checking without changing logic flow 3. **No Dependencies**: The fix is self-contained and doesn't require other commits 4. **Clear Bug**: Definitively fixes out-of-bounds access with proper NULL return 5. **Stable Pattern**: Callers already handle NULL returns from `fbcon_info_from_console()` ## Comparison to Historical Precedent Looking at the similar commits provided: - **Similar Commit #1** (Backport Status: YES): Fixed boundary checks in fbcon parameter parsing - this follows the same pattern of fixing bounds issues in fbcon - The other NO commits were architectural changes or refactoring, not security fixes This commit perfectly fits the stable tree criteria: it's an important bugfix, has minimal regression risk, is contained to a single subsystem, and fixes a user-triggerable vulnerability. drivers/video/fbdev/core/fbcon.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/drivers/video/fbdev/core/fbcon.c b/drivers/video/fbdev/core/fbcon.c index e6640edec155e..030ba5b808dfe 100644 --- a/drivers/video/fbdev/core/fbcon.c +++ b/drivers/video/fbdev/core/fbcon.c @@ -115,9 +115,14 @@ static signed char con2fb_map_boot[MAX_NR_CONSOLES]; static struct fb_info *fbcon_info_from_console(int console) { + signed char fb; WARN_CONSOLE_UNLOCKED(); - return fbcon_registered_fb[con2fb_map[console]]; + fb = con2fb_map[console]; + if (fb < 0 || fb >= ARRAY_SIZE(fbcon_registered_fb)) + return NULL; + + return fbcon_registered_fb[fb]; } static int logo_lines; -- 2.39.5

1 month, 1 week

1
5
0 0

[PATCH AUTOSEL 6.6 1/6] fbcon: Make sure modelist not set on unregistered console

by Sasha Levin

From: Kees Cook <kees(a)kernel.org> [ Upstream commit cedc1b63394a866bf8663a3e40f4546f1d28c8d8 ] It looks like attempting to write to the "store_modes" sysfs node will run afoul of unregistered consoles: UBSAN: array-index-out-of-bounds in drivers/video/fbdev/core/fbcon.c:122:28 index -1 is out of range for type 'fb_info *[32]' ... fbcon_info_from_console+0x192/0x1a0 drivers/video/fbdev/core/fbcon.c:122 fbcon_new_modelist+0xbf/0x2d0 drivers/video/fbdev/core/fbcon.c:3048 fb_new_modelist+0x328/0x440 drivers/video/fbdev/core/fbmem.c:673 store_modes+0x1c9/0x3e0 drivers/video/fbdev/core/fbsysfs.c:113 dev_attr_store+0x55/0x80 drivers/base/core.c:2439 static struct fb_info *fbcon_registered_fb[FB_MAX]; ... static signed char con2fb_map[MAX_NR_CONSOLES]; ... static struct fb_info *fbcon_info_from_console(int console) ... return fbcon_registered_fb[con2fb_map[console]]; If con2fb_map contains a -1 things go wrong here. Instead, return NULL, as callers of fbcon_info_from_console() are trying to compare against existing "info" pointers, so error handling should kick in correctly. Reported-by: syzbot+a7d4444e7b6e743572f7(a)syzkaller.appspotmail.com Closes: https://lore.kernel.org/all/679d0a8f.050a0220.163cdc.000c.GAE@google.com/ Signed-off-by: Kees Cook <kees(a)kernel.org> Signed-off-by: Helge Deller <deller(a)gmx.de> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- **YES** This commit should be backported to stable kernel trees. Here's my analysis: ## Security and Stability Issue This commit fixes a critical **array-index-out-of-bounds vulnerability** that can be triggered via sysfs. The issue occurs when `con2fb_map[console]` contains `-1`, causing `fbcon_info_from_console()` to access `fbcon_registered_fb[-1]`, which is an out-of-bounds array access. ## Bug Analysis The problem is in the `fbcon_info_from_console()` function at line 122: ```c // Before fix: return fbcon_registered_fb[con2fb_map[console]]; // After fix: fb = con2fb_map[console]; if (fb < 0 || fb >= ARRAY_SIZE(fbcon_registered_fb)) return NULL; return fbcon_registered_fb[fb]; ``` ## Trigger Path The vulnerability can be triggered through: 1. **sysfs interface**: Writing to `/sys/class/graphics/fbX/modes` 2. **Call chain**: `store_modes()` → `fb_new_modelist()` → `fbcon_new_modelist()` → `fbcon_info_from_console()` 3. **User-accessible**: This is exploitable from userspace through the sysfs interface ## Code Context from Analysis Based on the git blame, the vulnerable code path in `fbcon_new_modelist()` has existed since: - Original code from **2005** (Linus Torvalds) - The problematic `fbcon_info_from_console()` call was added in **2022** by commit `409d6c95f9c6` ("fbcon: Introduce wrapper for console->fb_info lookup") ## Risk Assessment 1. **High Impact**: UBSAN array bounds violation, potential for memory corruption 2. **User Triggerable**: Accessible via standard sysfs interface 3. **Long- standing**: The vulnerable pattern has existed since 2022 when the wrapper was introduced 4. **Active Exploitation**: Reported by syzbot, indicating active fuzzing found this issue ## Backport Suitability 1. **Small & Contained**: Only 6 lines changed in a single function 2. **Safe Fix**: Adds bounds checking without changing logic flow 3. **No Dependencies**: The fix is self-contained and doesn't require other commits 4. **Clear Bug**: Definitively fixes out-of-bounds access with proper NULL return 5. **Stable Pattern**: Callers already handle NULL returns from `fbcon_info_from_console()` ## Comparison to Historical Precedent Looking at the similar commits provided: - **Similar Commit #1** (Backport Status: YES): Fixed boundary checks in fbcon parameter parsing - this follows the same pattern of fixing bounds issues in fbcon - The other NO commits were architectural changes or refactoring, not security fixes This commit perfectly fits the stable tree criteria: it's an important bugfix, has minimal regression risk, is contained to a single subsystem, and fixes a user-triggerable vulnerability. drivers/video/fbdev/core/fbcon.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/drivers/video/fbdev/core/fbcon.c b/drivers/video/fbdev/core/fbcon.c index 405d587450ef8..b46719b95a8aa 100644 --- a/drivers/video/fbdev/core/fbcon.c +++ b/drivers/video/fbdev/core/fbcon.c @@ -115,9 +115,14 @@ static signed char con2fb_map_boot[MAX_NR_CONSOLES]; static struct fb_info *fbcon_info_from_console(int console) { + signed char fb; WARN_CONSOLE_UNLOCKED(); - return fbcon_registered_fb[con2fb_map[console]]; + fb = con2fb_map[console]; + if (fb < 0 || fb >= ARRAY_SIZE(fbcon_registered_fb)) + return NULL; + + return fbcon_registered_fb[fb]; } static int logo_lines; -- 2.39.5

1 month, 1 week

1
5
0 0

[PATCH AUTOSEL 6.12 1/6] fbcon: Make sure modelist not set on unregistered console

by Sasha Levin

From: Kees Cook <kees(a)kernel.org> [ Upstream commit cedc1b63394a866bf8663a3e40f4546f1d28c8d8 ] It looks like attempting to write to the "store_modes" sysfs node will run afoul of unregistered consoles: UBSAN: array-index-out-of-bounds in drivers/video/fbdev/core/fbcon.c:122:28 index -1 is out of range for type 'fb_info *[32]' ... fbcon_info_from_console+0x192/0x1a0 drivers/video/fbdev/core/fbcon.c:122 fbcon_new_modelist+0xbf/0x2d0 drivers/video/fbdev/core/fbcon.c:3048 fb_new_modelist+0x328/0x440 drivers/video/fbdev/core/fbmem.c:673 store_modes+0x1c9/0x3e0 drivers/video/fbdev/core/fbsysfs.c:113 dev_attr_store+0x55/0x80 drivers/base/core.c:2439 static struct fb_info *fbcon_registered_fb[FB_MAX]; ... static signed char con2fb_map[MAX_NR_CONSOLES]; ... static struct fb_info *fbcon_info_from_console(int console) ... return fbcon_registered_fb[con2fb_map[console]]; If con2fb_map contains a -1 things go wrong here. Instead, return NULL, as callers of fbcon_info_from_console() are trying to compare against existing "info" pointers, so error handling should kick in correctly. Reported-by: syzbot+a7d4444e7b6e743572f7(a)syzkaller.appspotmail.com Closes: https://lore.kernel.org/all/679d0a8f.050a0220.163cdc.000c.GAE@google.com/ Signed-off-by: Kees Cook <kees(a)kernel.org> Signed-off-by: Helge Deller <deller(a)gmx.de> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- **YES** This commit should be backported to stable kernel trees. Here's my analysis: ## Security and Stability Issue This commit fixes a critical **array-index-out-of-bounds vulnerability** that can be triggered via sysfs. The issue occurs when `con2fb_map[console]` contains `-1`, causing `fbcon_info_from_console()` to access `fbcon_registered_fb[-1]`, which is an out-of-bounds array access. ## Bug Analysis The problem is in the `fbcon_info_from_console()` function at line 122: ```c // Before fix: return fbcon_registered_fb[con2fb_map[console]]; // After fix: fb = con2fb_map[console]; if (fb < 0 || fb >= ARRAY_SIZE(fbcon_registered_fb)) return NULL; return fbcon_registered_fb[fb]; ``` ## Trigger Path The vulnerability can be triggered through: 1. **sysfs interface**: Writing to `/sys/class/graphics/fbX/modes` 2. **Call chain**: `store_modes()` → `fb_new_modelist()` → `fbcon_new_modelist()` → `fbcon_info_from_console()` 3. **User-accessible**: This is exploitable from userspace through the sysfs interface ## Code Context from Analysis Based on the git blame, the vulnerable code path in `fbcon_new_modelist()` has existed since: - Original code from **2005** (Linus Torvalds) - The problematic `fbcon_info_from_console()` call was added in **2022** by commit `409d6c95f9c6` ("fbcon: Introduce wrapper for console->fb_info lookup") ## Risk Assessment 1. **High Impact**: UBSAN array bounds violation, potential for memory corruption 2. **User Triggerable**: Accessible via standard sysfs interface 3. **Long- standing**: The vulnerable pattern has existed since 2022 when the wrapper was introduced 4. **Active Exploitation**: Reported by syzbot, indicating active fuzzing found this issue ## Backport Suitability 1. **Small & Contained**: Only 6 lines changed in a single function 2. **Safe Fix**: Adds bounds checking without changing logic flow 3. **No Dependencies**: The fix is self-contained and doesn't require other commits 4. **Clear Bug**: Definitively fixes out-of-bounds access with proper NULL return 5. **Stable Pattern**: Callers already handle NULL returns from `fbcon_info_from_console()` ## Comparison to Historical Precedent Looking at the similar commits provided: - **Similar Commit #1** (Backport Status: YES): Fixed boundary checks in fbcon parameter parsing - this follows the same pattern of fixing bounds issues in fbcon - The other NO commits were architectural changes or refactoring, not security fixes This commit perfectly fits the stable tree criteria: it's an important bugfix, has minimal regression risk, is contained to a single subsystem, and fixes a user-triggerable vulnerability. drivers/video/fbdev/core/fbcon.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/drivers/video/fbdev/core/fbcon.c b/drivers/video/fbdev/core/fbcon.c index 07d127110ca4c..c98786996c647 100644 --- a/drivers/video/fbdev/core/fbcon.c +++ b/drivers/video/fbdev/core/fbcon.c @@ -117,9 +117,14 @@ static signed char con2fb_map_boot[MAX_NR_CONSOLES]; static struct fb_info *fbcon_info_from_console(int console) { + signed char fb; WARN_CONSOLE_UNLOCKED(); - return fbcon_registered_fb[con2fb_map[console]]; + fb = con2fb_map[console]; + if (fb < 0 || fb >= ARRAY_SIZE(fbcon_registered_fb)) + return NULL; + + return fbcon_registered_fb[fb]; } static int logo_lines; -- 2.39.5

1 month, 1 week

1
5
0 0

[PATCH AUTOSEL 6.14 1/8] fbcon: Make sure modelist not set on unregistered console

by Sasha Levin

From: Kees Cook <kees(a)kernel.org> [ Upstream commit cedc1b63394a866bf8663a3e40f4546f1d28c8d8 ] It looks like attempting to write to the "store_modes" sysfs node will run afoul of unregistered consoles: UBSAN: array-index-out-of-bounds in drivers/video/fbdev/core/fbcon.c:122:28 index -1 is out of range for type 'fb_info *[32]' ... fbcon_info_from_console+0x192/0x1a0 drivers/video/fbdev/core/fbcon.c:122 fbcon_new_modelist+0xbf/0x2d0 drivers/video/fbdev/core/fbcon.c:3048 fb_new_modelist+0x328/0x440 drivers/video/fbdev/core/fbmem.c:673 store_modes+0x1c9/0x3e0 drivers/video/fbdev/core/fbsysfs.c:113 dev_attr_store+0x55/0x80 drivers/base/core.c:2439 static struct fb_info *fbcon_registered_fb[FB_MAX]; ... static signed char con2fb_map[MAX_NR_CONSOLES]; ... static struct fb_info *fbcon_info_from_console(int console) ... return fbcon_registered_fb[con2fb_map[console]]; If con2fb_map contains a -1 things go wrong here. Instead, return NULL, as callers of fbcon_info_from_console() are trying to compare against existing "info" pointers, so error handling should kick in correctly. Reported-by: syzbot+a7d4444e7b6e743572f7(a)syzkaller.appspotmail.com Closes: https://lore.kernel.org/all/679d0a8f.050a0220.163cdc.000c.GAE@google.com/ Signed-off-by: Kees Cook <kees(a)kernel.org> Signed-off-by: Helge Deller <deller(a)gmx.de> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- **YES** This commit should be backported to stable kernel trees. Here's my analysis: ## Security and Stability Issue This commit fixes a critical **array-index-out-of-bounds vulnerability** that can be triggered via sysfs. The issue occurs when `con2fb_map[console]` contains `-1`, causing `fbcon_info_from_console()` to access `fbcon_registered_fb[-1]`, which is an out-of-bounds array access. ## Bug Analysis The problem is in the `fbcon_info_from_console()` function at line 122: ```c // Before fix: return fbcon_registered_fb[con2fb_map[console]]; // After fix: fb = con2fb_map[console]; if (fb < 0 || fb >= ARRAY_SIZE(fbcon_registered_fb)) return NULL; return fbcon_registered_fb[fb]; ``` ## Trigger Path The vulnerability can be triggered through: 1. **sysfs interface**: Writing to `/sys/class/graphics/fbX/modes` 2. **Call chain**: `store_modes()` → `fb_new_modelist()` → `fbcon_new_modelist()` → `fbcon_info_from_console()` 3. **User-accessible**: This is exploitable from userspace through the sysfs interface ## Code Context from Analysis Based on the git blame, the vulnerable code path in `fbcon_new_modelist()` has existed since: - Original code from **2005** (Linus Torvalds) - The problematic `fbcon_info_from_console()` call was added in **2022** by commit `409d6c95f9c6` ("fbcon: Introduce wrapper for console->fb_info lookup") ## Risk Assessment 1. **High Impact**: UBSAN array bounds violation, potential for memory corruption 2. **User Triggerable**: Accessible via standard sysfs interface 3. **Long- standing**: The vulnerable pattern has existed since 2022 when the wrapper was introduced 4. **Active Exploitation**: Reported by syzbot, indicating active fuzzing found this issue ## Backport Suitability 1. **Small & Contained**: Only 6 lines changed in a single function 2. **Safe Fix**: Adds bounds checking without changing logic flow 3. **No Dependencies**: The fix is self-contained and doesn't require other commits 4. **Clear Bug**: Definitively fixes out-of-bounds access with proper NULL return 5. **Stable Pattern**: Callers already handle NULL returns from `fbcon_info_from_console()` ## Comparison to Historical Precedent Looking at the similar commits provided: - **Similar Commit #1** (Backport Status: YES): Fixed boundary checks in fbcon parameter parsing - this follows the same pattern of fixing bounds issues in fbcon - The other NO commits were architectural changes or refactoring, not security fixes This commit perfectly fits the stable tree criteria: it's an important bugfix, has minimal regression risk, is contained to a single subsystem, and fixes a user-triggerable vulnerability. drivers/video/fbdev/core/fbcon.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/drivers/video/fbdev/core/fbcon.c b/drivers/video/fbdev/core/fbcon.c index 07d127110ca4c..c98786996c647 100644 --- a/drivers/video/fbdev/core/fbcon.c +++ b/drivers/video/fbdev/core/fbcon.c @@ -117,9 +117,14 @@ static signed char con2fb_map_boot[MAX_NR_CONSOLES]; static struct fb_info *fbcon_info_from_console(int console) { + signed char fb; WARN_CONSOLE_UNLOCKED(); - return fbcon_registered_fb[con2fb_map[console]]; + fb = con2fb_map[console]; + if (fb < 0 || fb >= ARRAY_SIZE(fbcon_registered_fb)) + return NULL; + + return fbcon_registered_fb[fb]; } static int logo_lines; -- 2.39.5

1 month, 1 week

1
7
0 0

[PATCH] sysfb: Fix screen_info type check for VGA

by Thomas Zimmermann

Use the helper screen_info_video_type() to get the framebuffer type from struct screen_info. Handle supported values in sorted switch statement. Reading orig_video_isVGA is unreliable. On most systems it is a VIDEO_TYPE_ constant. On some systems with VGA it is simply set to 1 to signal the presence of a VGA output. See vga_probe() for an example. Retrieving the screen_info type with the helper screen_info_video_type() detects these cases and returns the appropriate VIDEO_TYPE_ constant. For VGA, sysfb creates a device named "vga-framebuffer". The sysfb code has been taken from vga16fb, where it likely didn't work correctly either. With this bugfix applied, vga16fb loads for compatible vga-framebuffer devices. Fixes: 0db5b61e0dc0 ("fbdev/vga16fb: Create EGA/VGA devices in sysfb code") Cc: Thomas Zimmermann <tzimmermann(a)suse.de> Cc: Javier Martinez Canillas <javierm(a)redhat.com> Cc: Alex Deucher <alexander.deucher(a)amd.com> Cc: Tzung-Bi Shih <tzungbi(a)kernel.org> Cc: Helge Deller <deller(a)gmx.de> Cc: "Uwe Kleine-König" <u.kleine-koenig(a)baylibre.com> Cc: Zsolt Kajtar <soci(a)c64.rulez.org> Cc: <stable(a)vger.kernel.org> # v6.1+ Signed-off-by: Thomas Zimmermann <tzimmermann(a)suse.de> --- drivers/firmware/sysfb.c | 26 ++++++++++++++++++-------- 1 file changed, 18 insertions(+), 8 deletions(-) diff --git a/drivers/firmware/sysfb.c b/drivers/firmware/sysfb.c index 7c5c03f274b9..889e5b05c739 100644 --- a/drivers/firmware/sysfb.c +++ b/drivers/firmware/sysfb.c @@ -143,6 +143,7 @@ static __init int sysfb_init(void) { struct screen_info *si = &screen_info; struct device *parent; + unsigned int type; struct simplefb_platform_data mode; const char *name; bool compatible; @@ -170,17 +171,26 @@ static __init int sysfb_init(void) goto put_device; } + type = screen_info_video_type(si); + /* if the FB is incompatible, create a legacy framebuffer device */ - if (si->orig_video_isVGA == VIDEO_TYPE_EFI) - name = "efi-framebuffer"; - else if (si->orig_video_isVGA == VIDEO_TYPE_VLFB) - name = "vesa-framebuffer"; - else if (si->orig_video_isVGA == VIDEO_TYPE_VGAC) - name = "vga-framebuffer"; - else if (si->orig_video_isVGA == VIDEO_TYPE_EGAC) + switch (type) { + case VIDEO_TYPE_EGAC: name = "ega-framebuffer"; - else + break; + case VIDEO_TYPE_VGAC: + name = "vga-framebuffer"; + break; + case VIDEO_TYPE_VLFB: + name = "vesa-framebuffer"; + break; + case VIDEO_TYPE_EFI: + name = "efi-framebuffer"; + break; + default: name = "platform-framebuffer"; + break; + } pd = platform_device_alloc(name, 0); if (!pd) { -- 2.49.0

1 month, 1 week

3
2
0 0

[PATCH v3] video: screen_info: Relocate framebuffers behind PCI bridges

by Thomas Zimmermann

Apply PCI host-bridge window offsets to screen_info framebuffers. Fixes invalid access to I/O memory. Resources behind a PCI host bridge can be relocated by a certain offset in the kernel's CPU address range used for I/O. The framebuffer memory range stored in screen_info refers to the CPU addresses as seen during boot (where the offset is 0). During boot up, firmware may assign a different memory offset to the PCI host bridge and thereby relocating the framebuffer address of the PCI graphics device as seen by the kernel. The information in screen_info must be updated as well. The helper pcibios_bus_to_resource() performs the relocation of the screen_info's framebuffer resource (given in PCI bus addresses). The result matches the I/O-memory resource of the PCI graphics device (given in CPU addresses). As before, we store away the information necessary to later update the information in screen_info itself. Commit 78aa89d1dfba ("firmware/sysfb: Update screen_info for relocated EFI framebuffers") added the code for updating screen_info. It is based on similar functionality that pre-existed in efifb. Efifb uses a pointer to the PCI resource, while the newer code does a memcpy of the region. Hence efifb sees any updates to the PCI resource and avoids the issue. v3: - Only use struct pci_bus_region for PCI bus addresses (Bjorn) - Clarify address semantics in commit messages and comments (Bjorn) v2: - Fixed tags (Takashi, Ivan) - Updated information on efifb Signed-off-by: Thomas Zimmermann <tzimmermann(a)suse.de> Reviewed-by: Javier Martinez Canillas <javierm(a)redhat.com> Reported-by: "Ivan T. Ivanov" <iivanov(a)suse.de> Closes: https://bugzilla.suse.com/show_bug.cgi?id=1240696 Tested-by: "Ivan T. Ivanov" <iivanov(a)suse.de> Fixes: 78aa89d1dfba ("firmware/sysfb: Update screen_info for relocated EFI framebuffers") Cc: dri-devel(a)lists.freedesktop.org Cc: <stable(a)vger.kernel.org> # v6.9+ --- drivers/video/screen_info_pci.c | 79 +++++++++++++++++++++------------ 1 file changed, 50 insertions(+), 29 deletions(-) diff --git a/drivers/video/screen_info_pci.c b/drivers/video/screen_info_pci.c index 6c5833517141..66bfc1d0a6dc 100644 --- a/drivers/video/screen_info_pci.c +++ b/drivers/video/screen_info_pci.c @@ -7,8 +7,8 @@ static struct pci_dev *screen_info_lfb_pdev; static size_t screen_info_lfb_bar; -static resource_size_t screen_info_lfb_offset; -static struct resource screen_info_lfb_res = DEFINE_RES_MEM(0, 0); +static resource_size_t screen_info_lfb_res_start; // original start of resource +static resource_size_t screen_info_lfb_offset; // framebuffer offset within resource static bool __screen_info_relocation_is_valid(const struct screen_info *si, struct resource *pr) { @@ -31,7 +31,7 @@ void screen_info_apply_fixups(void) if (screen_info_lfb_pdev) { struct resource *pr = &screen_info_lfb_pdev->resource[screen_info_lfb_bar]; - if (pr->start != screen_info_lfb_res.start) { + if (pr->start != screen_info_lfb_res_start) { if (__screen_info_relocation_is_valid(si, pr)) { /* * Only update base if we have an actual @@ -47,46 +47,67 @@ void screen_info_apply_fixups(void) } } +static int __screen_info_lfb_pci_bus_region(const struct screen_info *si, unsigned int type, + struct pci_bus_region *r) +{ + u64 base, size; + + base = __screen_info_lfb_base(si); + if (!base) + return -EINVAL; + + size = __screen_info_lfb_size(si, type); + if (!size) + return -EINVAL; + + r->start = base; + r->end = base + size - 1; + + return 0; +} + static void screen_info_fixup_lfb(struct pci_dev *pdev) { unsigned int type; - struct resource res[SCREEN_INFO_MAX_RESOURCES]; - size_t i, numres; + struct pci_bus_region bus_region; int ret; + struct resource r = { + .flags = IORESOURCE_MEM, + }; + const struct resource *pr; const struct screen_info *si = &screen_info; if (screen_info_lfb_pdev) return; // already found type = screen_info_video_type(si); - if (type != VIDEO_TYPE_EFI) - return; // only applies to EFI + if (!__screen_info_has_lfb(type)) + return; // only applies to EFI; maybe VESA - ret = screen_info_resources(si, res, ARRAY_SIZE(res)); + ret = __screen_info_lfb_pci_bus_region(si, type, &bus_region); if (ret < 0) return; - numres = ret; - for (i = 0; i < numres; ++i) { - struct resource *r = &res[i]; - const struct resource *pr; - - if (!(r->flags & IORESOURCE_MEM)) - continue; - pr = pci_find_resource(pdev, r); - if (!pr) - continue; - - /* - * We've found a PCI device with the framebuffer - * resource. Store away the parameters to track - * relocation of the framebuffer aperture. - */ - screen_info_lfb_pdev = pdev; - screen_info_lfb_bar = pr - pdev->resource; - screen_info_lfb_offset = r->start - pr->start; - memcpy(&screen_info_lfb_res, r, sizeof(screen_info_lfb_res)); - } + /* + * Translate the PCI bus address to resource. Account + * for an offset if the framebuffer is behind a PCI host + * bridge. + */ + pcibios_bus_to_resource(pdev->bus, &r, &bus_region); + + pr = pci_find_resource(pdev, &r); + if (!pr) + return; + + /* + * We've found a PCI device with the framebuffer + * resource. Store away the parameters to track + * relocation of the framebuffer aperture. + */ + screen_info_lfb_pdev = pdev; + screen_info_lfb_bar = pr - pdev->resource; + screen_info_lfb_offset = r.start - pr->start; + screen_info_lfb_res_start = bus_region.start; } DECLARE_PCI_FIXUP_CLASS_HEADER(PCI_ANY_ID, PCI_ANY_ID, PCI_BASE_CLASS_DISPLAY, 16, screen_info_fixup_lfb); -- 2.49.0

1 month, 1 week

1
1
0 0

[PATCH 6.12 00/55] 6.12.32-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.32 release. There are 55 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 04 Jun 2025 13:42:20 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.32-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.32-rc1 Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use list_first_entry_or_null for opinfo_get_list() Nishanth Menon <nm(a)ti.com> net: ethernet: ti: am65-cpsw: Lower random mac address error print to info Mark Pearson <mpearson-lenovo(a)squebb.ca> platform/x86: thinkpad_acpi: Ignore battery threshold change event notification Kailang Yang <kailang(a)realtek.com> ALSA: hda/realtek - restore auto-mute mode for Dell Chrome platform Valtteri Koskivuori <vkoskiv(a)gmail.com> platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys Trond Myklebust <trond.myklebust(a)hammerspace.com> NFS: Avoid flushing data while holding directory locks in nfs_rename() Purva Yeshi <purvayeshi550(a)gmail.com> char: tpm: tpm-buf: Add sanity check fallback in read helpers Umesh Nerlige Ramappa <umesh.nerlige.ramappa(a)intel.com> drm/xe: Save the gt pointer in lrc and drop the tile Aradhya Bhatia <aradhya.bhatia(a)intel.com> drm/xe/xe2hpg: Add Wa_22021007897 Ilya Guterman <amfernusus(a)gmail.com> nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro Alessandro Grassi <alessandro.grassi(a)mailbox.org> spi: spi-sun4i: fix early activation Algea Cao <algea.cao(a)rock-chips.com> phy: phy-rockchip-samsung-hdptx: Fix PHY PLL output 50.25MHz error Hal Feng <hal.feng(a)starfivetech.com> phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure Aurabindo Pillai <aurabindo.pillai(a)amd.com> drm/amd/display: check stream id dml21 wrapper to get plane_id George Shen <george.shen(a)amd.com> drm/amd/display: fix link_set_dpms_off multi-display MST corner case Markus Burri <markus.burri(a)mt.com> gpio: virtuser: fix potential out-of-bound write Masahiro Yamada <masahiroy(a)kernel.org> um: let 'make clean' properly clean underlying SUBARCH as well John Chau <johnchau(a)0atlas.com> platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS Jeff Layton <jlayton(a)kernel.org> nfs: don't share pNFS DS connections between net namespaces Milton Barrera <miltonjosue2001(a)gmail.com> HID: quirks: Add ADATA XPG alpha wireless mouse support Purva Yeshi <purvayeshi550(a)gmail.com> dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open Christian Brauner <brauner(a)kernel.org> coredump: hand a pidfd to the usermode coredump helper Christian Brauner <brauner(a)kernel.org> coredump: fix error handling for replace_fd() Robin Murphy <robin.murphy(a)arm.com> perf/arm-cmn: Add CMN S3 ACPI binding Robin Murphy <robin.murphy(a)arm.com> perf/arm-cmn: Initialise cmn->cpu earlier Robin Murphy <robin.murphy(a)arm.com> perf/arm-cmn: Fix REQ2/SNP2 mixup Pedro Tammela <pctammela(a)mojatatu.com> net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Siddharth Vadapalli <s-vadapalli(a)ti.com> arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix length of serdes_ln_ctrl Siddharth Vadapalli <s-vadapalli(a)ti.com> arm64: dts: ti: k3-j722s-main: Disable "serdes_wiz0" and "serdes_wiz1" Siddharth Vadapalli <s-vadapalli(a)ti.com> arm64: dts: ti: k3-j722s-evm: Enable "serdes_wiz0" and "serdes_wiz1" Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> arm64: dts: ti: k3-j721e-sk: Add requiried voltage supplies for IMX219 Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> arm64: dts: ti: k3-j721e-sk: Remove clock-names property from IMX219 overlay Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0 Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in OV5640 overlay Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in IMX219 overlay Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> arm64: dts: ti: k3-am62x: Remove clock-names property from IMX219 overlay Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62p-j722s-common-main: Set eMMC clock parent to default Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62a-main: Set eMMC clock parent to default Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62-main: Set eMMC clock parent to default Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: x1e80100: Fix video thermal zone Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: x1e80100-yoga-slim7x: mark l12b and l15b always-on Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: x1e80100-qcp: mark l12b and l15b always-on Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: x1e80100-qcp: Fix vreg_l2j_1p2 voltage Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: x1e80100-lenovo-yoga-slim7x: Fix vreg_l2j_1p2 voltage Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: x1e80100-asus-vivobook-s15: Fix vreg_l2j_1p2 voltage Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: sm8650: Add missing properties for cryptobam Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: sm8550: Add missing properties for cryptobam Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: sm8450: Add missing properties for cryptobam Alok Tiwari <alok.a.tiwari(a)oracle.com> arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node Karthik Sanagavarapu <quic_kartsana(a)quicinc.com> arm64: dts: qcom: sa8775p: Remove cdsp compute-cb@10 Ling Xu <quic_lxu5(a)quicinc.com> arm64: dts: qcom: sa8775p: Remove extra entries from the iommus property Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: ipq9574: Add missing properties for cryptobam Axel Forsman <axfo(a)kvaser.com> can: kvaser_pciefd: Force IRQ edge in case of nested IRQ ------------- Diffstat: Makefile | 4 +- arch/arm64/boot/dts/qcom/ipq9574.dtsi | 2 + arch/arm64/boot/dts/qcom/sa8775p.dtsi | 246 ++------------------- arch/arm64/boot/dts/qcom/sm8350.dtsi | 2 +- arch/arm64/boot/dts/qcom/sm8450.dtsi | 2 + arch/arm64/boot/dts/qcom/sm8550.dtsi | 2 + arch/arm64/boot/dts/qcom/sm8650.dtsi | 2 + .../boot/dts/qcom/x1e80100-asus-vivobook-s15.dts | 4 +- .../boot/dts/qcom/x1e80100-lenovo-yoga-slim7x.dts | 7 +- arch/arm64/boot/dts/qcom/x1e80100-qcp.dts | 6 +- arch/arm64/boot/dts/qcom/x1e80100.dtsi | 10 +- arch/arm64/boot/dts/ti/k3-am62-main.dtsi | 2 - arch/arm64/boot/dts/ti/k3-am62a-main.dtsi | 2 - .../boot/dts/ti/k3-am62p-j722s-common-main.dtsi | 2 - .../arm64/boot/dts/ti/k3-am62x-sk-csi2-imx219.dtso | 3 +- .../arm64/boot/dts/ti/k3-am62x-sk-csi2-ov5640.dtso | 2 +- .../boot/dts/ti/k3-am62x-sk-csi2-tevi-ov5640.dtso | 2 +- arch/arm64/boot/dts/ti/k3-am65-main.dtsi | 2 + arch/arm64/boot/dts/ti/k3-am68-sk-base-board.dts | 13 +- .../boot/dts/ti/k3-j721e-sk-csi2-dual-imx219.dtso | 35 ++- arch/arm64/boot/dts/ti/k3-j721e-sk.dts | 31 +++ arch/arm64/boot/dts/ti/k3-j722s-evm.dts | 8 + arch/arm64/boot/dts/ti/k3-j722s-main.dtsi | 4 + .../boot/dts/ti/k3-j784s4-j742s2-main-common.dtsi | 2 +- arch/um/Makefile | 1 + drivers/char/tpm/tpm-buf.c | 6 +- drivers/dma/idxd/cdev.c | 4 +- drivers/gpio/gpio-virtuser.c | 12 +- .../dc/dml2/dml21/dml21_translation_helper.c | 20 +- drivers/gpu/drm/amd/display/dc/link/link_dpms.c | 13 +- drivers/gpu/drm/xe/regs/xe_gt_regs.h | 1 + drivers/gpu/drm/xe/xe_lrc.c | 4 +- drivers/gpu/drm/xe/xe_lrc_types.h | 4 +- drivers/gpu/drm/xe/xe_wa.c | 4 + drivers/hid/hid-ids.h | 4 + drivers/hid/hid-quirks.c | 2 + drivers/net/can/kvaser_pciefd.c | 83 ++++--- drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2 +- drivers/nvme/host/pci.c | 2 + drivers/perf/arm-cmn.c | 11 +- drivers/phy/rockchip/phy-rockchip-samsung-hdptx.c | 2 + drivers/phy/starfive/phy-jh7110-usb.c | 7 + drivers/platform/x86/fujitsu-laptop.c | 33 ++- drivers/platform/x86/thinkpad_acpi.c | 7 + drivers/spi/spi-sun4i.c | 5 +- fs/coredump.c | 65 +++++- fs/nfs/client.c | 2 + fs/nfs/dir.c | 15 +- fs/nfs/filelayout/filelayoutdev.c | 6 +- fs/nfs/flexfilelayout/flexfilelayoutdev.c | 6 +- fs/nfs/pnfs.h | 4 +- fs/nfs/pnfs_nfs.c | 9 +- fs/smb/server/oplock.c | 7 +- include/linux/coredump.h | 1 + include/linux/nfs_fs_sb.h | 12 +- net/sched/sch_hfsc.c | 9 +- sound/pci/hda/patch_realtek.c | 5 +- 57 files changed, 408 insertions(+), 355 deletions(-)

1 month, 1 week

11
71
0 0

[PATCH 1/4] drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS

by Imre Deak

Reading DPCD registers has side-effects in general. In particular accessing registers outside of the link training register range (0x102-0x106, 0x202-0x207, 0x200c-0x200f, 0x2216) is explicitly forbidden by the DP v2.1 Standard, see 3.6.5.1 DPTX AUX Transaction Handling Mandates 3.6.7.4 128b/132b DP Link Layer LTTPR Link Training Mandates Based on my tests, accessing the DPCD_REV register during the link training of an UHBR TBT DP tunnel sink leads to link training failures. Solve the above by using the DP_LANE0_1_STATUS (0x202) register for the DPCD register access quirk. Cc: <stable(a)vger.kernel.org> Cc: Ville Syrjälä <ville.syrjala(a)linux.intel.com> Cc: Jani Nikula <jani.nikula(a)linux.intel.com> Signed-off-by: Imre Deak <imre.deak(a)intel.com> --- drivers/gpu/drm/display/drm_dp_helper.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/gpu/drm/display/drm_dp_helper.c b/drivers/gpu/drm/display/drm_dp_helper.c index f2a6559a27100..dc622c78db9d4 100644 --- a/drivers/gpu/drm/display/drm_dp_helper.c +++ b/drivers/gpu/drm/display/drm_dp_helper.c @@ -725,7 +725,7 @@ ssize_t drm_dp_dpcd_read(struct drm_dp_aux *aux, unsigned int offset, * monitor doesn't power down exactly after the throw away read. */ if (!aux->is_remote) { - ret = drm_dp_dpcd_probe(aux, DP_DPCD_REV); + ret = drm_dp_dpcd_probe(aux, DP_LANE0_1_STATUS); if (ret < 0) return ret; } -- 2.44.2

1 month, 1 week

2
1
0 0

Re:Jordan recommend me get in touch

by Seven

Hi, Glad to know you and your company from Jordan. I‘m Seven CTO of STHL We are a one-stop service provider for PCBA. We can help you with production from PCB to finished product assembly. Why Partner With Us? ✅ One-Stop Expertise: From PCB fabrication, PCBA (SMT & Through-Hole), custom cable harnesses, , to final product assembly – we eliminate multi-vendor coordination risks. ✅ Cost Efficiency: 40%+ clients reduce logistics/QC costs through our integrated service model (ISO 9001:2015 certified). ✅ Speed-to-Market: Average 15% faster lead times achieved via in-house vertical integration. Recent Success Case: Helped a German IoT startup scale from prototype to 50K-unit/month production within 6 months through our: PCB Design-for-Manufacturing (DFM) optimizationAutomated PCBA with 99.98% first-pass yieldMechanical housing CNC machining & IP67-rated assembly Seven Marcus CTO Shenzhen STHL Technology Co,Ltd +8618569002840 Seven(a)pcba-china.com

1 month, 1 week

1
0
0 0

[PATCH 6.15 00/49] 6.15.1-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.15.1 release. There are 49 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 04 Jun 2025 13:42:20 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.15.1-rc1… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.15.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.15.1-rc1 Robin Murphy <robin.murphy(a)arm.com> iommu: Handle yet another race around registration Robin Murphy <robin.murphy(a)arm.com> iommu: Avoid introducing more races Christian Brauner <brauner(a)kernel.org> coredump: hand a pidfd to the usermode coredump helper Christian Brauner <brauner(a)kernel.org> coredump: fix error handling for replace_fd() Christian Brauner <brauner(a)kernel.org> pidfs: move O_RDWR into pidfs_alloc_file() Robin Murphy <robin.murphy(a)arm.com> perf/arm-cmn: Add CMN S3 ACPI binding Robin Murphy <robin.murphy(a)arm.com> perf/arm-cmn: Initialise cmn->cpu earlier Robin Murphy <robin.murphy(a)arm.com> perf/arm-cmn: Fix REQ2/SNP2 mixup Pedro Tammela <pctammela(a)mojatatu.com> net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Siddharth Vadapalli <s-vadapalli(a)ti.com> arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix length of serdes_ln_ctrl Siddharth Vadapalli <s-vadapalli(a)ti.com> arm64: dts: ti: k3-j722s-main: Disable "serdes_wiz0" and "serdes_wiz1" Siddharth Vadapalli <s-vadapalli(a)ti.com> arm64: dts: ti: k3-j722s-evm: Enable "serdes_wiz0" and "serdes_wiz1" Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> arm64: dts: ti: k3-j721e-sk: Add requiried voltage supplies for IMX219 Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> arm64: dts: ti: k3-j721e-sk: Remove clock-names property from IMX219 overlay Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0 Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in OV5640 overlay Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in IMX219 overlay Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> arm64: dts: ti: k3-am62x: Remove clock-names property from IMX219 overlay Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62p-j722s-common-main: Set eMMC clock parent to default Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62a-main: Set eMMC clock parent to default Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62-main: Set eMMC clock parent to default Abel Vesa <abel.vesa(a)linaro.org> arm64: dts: qcom: x1e80100: Fix PCIe 3rd controller DBI size Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: x1e80100: Add GPU cooling Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: x1e80100: Apply consistent critical thermal shutdown Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: x1e80100: Fix video thermal zone Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: x1e80100-yoga-slim7x: mark l12b and l15b always-on Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: x1e80100-qcp: mark l12b and l15b always-on Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: x1e80100-qcp: Fix vreg_l2j_1p2 voltage Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: x1e80100-lenovo-yoga-slim7x: Fix vreg_l2j_1p2 voltage Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: x1e80100-hp-x14: mark l12b and l15b always-on Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: x1e80100-hp-omnibook-x14: Fix vreg_l2j_1p2 voltage Juerg Haefliger <juerg.haefliger(a)canonical.com> arm64: dts: qcom: x1e80100-hp-omnibook-x14: Enable SMB2360 0 and 1 Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: x1e80100-dell-xps13-9345: mark l12b and l15b always-on Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: x1e80100-asus-vivobook-s15: Fix vreg_l2j_1p2 voltage Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: x1e001de-devkit: mark l12b and l15b always-on Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: x1e001de-devkit: Fix vreg_l2j_1p2 voltage Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: sm8650: Add missing properties for cryptobam Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: sm8550: Add missing properties for cryptobam Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: sm8450: Add missing properties for cryptobam Alok Tiwari <alok.a.tiwari(a)oracle.com> arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node Karthik Sanagavarapu <quic_kartsana(a)quicinc.com> arm64: dts: qcom: sa8775p: Remove cdsp compute-cb@10 Ling Xu <quic_lxu5(a)quicinc.com> arm64: dts: qcom: sa8775p: Remove extra entries from the iommus property Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: sa8775p: Add missing properties for cryptobam Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: ipq9574: Add missing properties for cryptobam Sebastian Reichel <sebastian.reichel(a)collabora.com> arm64: dts: rockchip: Add missing SFC power-domains to rk3576 Lukasz Czechowski <lukasz.czechowski(a)thaumatec.com> arm64: dts: rockchip: fix internal USB hub instability on RK3399 Puma Niravkumar L Rabara <niravkumar.l.rabara(a)intel.com> arm64: dts: socfpga: agilex5: fix gpio0 address ------------- Diffstat: Makefile | 4 +- arch/arm64/boot/dts/intel/socfpga_agilex5.dtsi | 4 +- arch/arm64/boot/dts/qcom/ipq9574.dtsi | 2 + arch/arm64/boot/dts/qcom/sa8775p.dtsi | 248 ++--------------- arch/arm64/boot/dts/qcom/sm8350.dtsi | 2 +- arch/arm64/boot/dts/qcom/sm8450.dtsi | 2 + arch/arm64/boot/dts/qcom/sm8550.dtsi | 2 + arch/arm64/boot/dts/qcom/sm8650.dtsi | 2 + arch/arm64/boot/dts/qcom/x1e001de-devkit.dts | 6 +- .../boot/dts/qcom/x1e80100-asus-vivobook-s15.dts | 4 +- .../boot/dts/qcom/x1e80100-dell-xps13-9345.dts | 2 + .../boot/dts/qcom/x1e80100-hp-omnibook-x14.dts | 14 +- .../boot/dts/qcom/x1e80100-lenovo-yoga-slim7x.dts | 7 +- arch/arm64/boot/dts/qcom/x1e80100-qcp.dts | 6 +- arch/arm64/boot/dts/qcom/x1e80100.dtsi | 309 +++++++++++---------- arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi | 40 ++- arch/arm64/boot/dts/rockchip/rk3576.dtsi | 2 + arch/arm64/boot/dts/ti/k3-am62-main.dtsi | 2 - arch/arm64/boot/dts/ti/k3-am62a-main.dtsi | 2 - .../boot/dts/ti/k3-am62p-j722s-common-main.dtsi | 2 - .../arm64/boot/dts/ti/k3-am62x-sk-csi2-imx219.dtso | 3 +- .../arm64/boot/dts/ti/k3-am62x-sk-csi2-ov5640.dtso | 2 +- .../boot/dts/ti/k3-am62x-sk-csi2-tevi-ov5640.dtso | 2 +- arch/arm64/boot/dts/ti/k3-am65-main.dtsi | 2 + arch/arm64/boot/dts/ti/k3-am68-sk-base-board.dts | 13 +- .../boot/dts/ti/k3-j721e-sk-csi2-dual-imx219.dtso | 35 ++- arch/arm64/boot/dts/ti/k3-j721e-sk.dts | 31 +++ arch/arm64/boot/dts/ti/k3-j722s-evm.dts | 8 + arch/arm64/boot/dts/ti/k3-j722s-main.dtsi | 4 + .../boot/dts/ti/k3-j784s4-j742s2-main-common.dtsi | 2 +- drivers/iommu/iommu.c | 34 ++- drivers/perf/arm-cmn.c | 11 +- fs/coredump.c | 65 ++++- fs/pidfs.c | 1 + include/linux/coredump.h | 1 + include/linux/iommu.h | 2 + net/sched/sch_hfsc.c | 9 +- 37 files changed, 447 insertions(+), 440 deletions(-)

1 month, 1 week

10
58
0 0

[PATCH 6.14 000/783] 6.14.9-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.14.9 release. There are 783 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 29 May 2025 16:22:51 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.14.9-rc1… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.14.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.14.9-rc1 Nathan Chancellor <nathan(a)kernel.org> kbuild: Properly disable -Wunterminated-string-initialization for clang Linus Torvalds <torvalds(a)linux-foundation.org> Fix mis-uses of 'cc-option' for warning disablement Linus Torvalds <torvalds(a)linux-foundation.org> gcc-15: disable '-Wunterminated-string-initialization' entirely for now Linus Torvalds <torvalds(a)linux-foundation.org> gcc-15: make 'unterminated string initialization' just a warning David (Ming Qiang) Wu <David.Wu3(a)amd.com> drm/amdgpu: read back register after written for VCN v4.0.5 Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/vcn4.0.5: split code along instances Imre Deak <imre.deak(a)intel.com> drm/i915/dp: Fix determining SST/MST mode during MTP TU state computation Raag Jadav <raag.jadav(a)intel.com> err.h: move IOMEM_ERR_PTR() to err.h Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe: Use xe_mmio_read32() to read mtcfg register Larisa Grigore <larisa.grigore(a)nxp.com> spi: spi-fsl-dspi: Reset SR flags before sending a new message Bogdan-Gabriel Roman <bogdan-gabriel.roman(a)nxp.com> spi: spi-fsl-dspi: Halt the module after a new message transfer Larisa Grigore <larisa.grigore(a)nxp.com> spi: spi-fsl-dspi: restrict register range for regmap access Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> spi: use container_of_cont() for to_spi_device() Mark Pearson <mpearson-lenovo(a)squebb.ca> platform/x86: think-lmi: Fix attribute name usage for non-compliant items Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix stream write failure Jernej Skrabec <jernej.skrabec(a)gmail.com> Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection" Chris Lu <chris.lu(a)mediatek.com> Bluetooth: btmtksdio: Do close if SDIO card removed without close Chris Lu <chris.lu(a)mediatek.com> Bluetooth: btmtksdio: Check function enabled before doing close Ryusuke Konishi <konishi.ryusuke(a)gmail.com> nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: restore monitor for outgoing frames Arnd Bergmann <arnd(a)arndb.de> octeontx2: hide unused label Kees Cook <kees(a)kernel.org> mm: vmalloc: only zero-init on vrealloc shrink Kees Cook <kees(a)kernel.org> mm: vmalloc: actually use the in-place vrealloc region Florent Revest <revest(a)chromium.org> mm: fix VM_UFFD_MINOR == VM_SHADOW_STACK on USERFAULTFD=y && ARM64_GCS=y Ignacio Moreno Gonzalez <Ignacio.MorenoGonzalez(a)kuka.com> mm: mmap: map MAP_STACK to VM_NOHUGEPAGE only if THP is enabled Wang Yaxin <wang.yaxin(a)zte.com.cn> taskstats: fix struct taskstats breaks backward compatibility since version 15 David Wang <00107082(a)163.com> module: release codetag section when module load fails Tianyang Zhang <zhangtianyang(a)loongson.cn> mm/page_alloc.c: avoid infinite retries caused by cpuset race Ge Yang <yangge1116(a)126.com> mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb folios Breno Leitao <leitao(a)debian.org> memcg: always call cond_resched() after fn() Alexander Gordeev <agordeev(a)linux.ibm.com> kasan: avoid sleepable page allocation from atomic context Matthew Wilcox (Oracle) <willy(a)infradead.org> highmem: add folio_test_partial_kmap() Suren Baghdasaryan <surenb(a)google.com> alloc_tag: allocate percpu counters for module tags dynamically Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: synaptics-rmi - fix crash with unsupported versions of F34 Vicki Pfau <vi(a)endrift.com> Input: xpad - add more controllers Mario Limonciello <mario.limonciello(a)amd.com> Revert "drm/amd: Keep display off while going into S4" Wang Zhaolong <wangzhaolong1(a)huawei.com> smb: client: Reset all search buffer pointers when releasing buffer Gabor Juhos <j4g8y7(a)gmail.com> arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs Wang Zhaolong <wangzhaolong1(a)huawei.com> smb: client: Fix use-after-free in cifs_fill_dirent feijuan.li <feijuan.li(a)samsung.com> drm/edid: fixed the bug that hdr metadata was not reset Zhang Rui <rui.zhang(a)intel.com> thermal: intel: x86_pkg_temp_thermal: Fix bogus trip temperature Vladimir Moskovkin <Vladimir.Moskovkin(a)kaspersky.com> platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() Dan Carpenter <dan.carpenter(a)linaro.org> pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id() Geert Uytterhoeven <geert+renesas(a)glider.be> pmdomain: renesas: rcar: Remove obsolete nullify checks Judith Mendez <jm(a)ti.com> mmc: sdhci_am654: Add SDHCI_QUIRK2_SUPPRESS_V1P8_ENA quirk to am62 compatible Ronak Doshi <ronak.doshi(a)broadcom.com> vmxnet3: update MTU after device quiesce Jakob Unterwurzacher <jakobunt(a)gmail.com> net: dsa: microchip: linearize skb for tail-tagging switches Jens Axboe <axboe(a)kernel.dk> io_uring/net: only retry recv bundle for a full transfer Axel Forsman <axfo(a)kvaser.com> can: kvaser_pciefd: Fix echo_skb race Axel Forsman <axfo(a)kvaser.com> can: kvaser_pciefd: Continue parsing DMA buf after dropped RX Ilia Gavrilov <Ilia.Gavrilov(a)infotecs.ru> llc: fix data loss when reading from a socket in llc_ui_recvmsg() Ed Burcher <git(a)edburcher.com> ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10 Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Fix race of buffer access at PCM OSS layer Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-pcm: Delay reporting is only supported for playback direction Kai Vehmanen <kai.vehmanen(a)linux.intel.com> ASoc: SOF: topology: connect DAI to a single DAI link Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: Intel: hda-bus: Use PIO mode on ACE2+ platforms Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-control: Use SOF_CTRL_CMD_BINARY as numid for bytes_ext Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing rcu read protection for procfs content Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add locking for bcm_op runtime updates Carlos Sanchez <carlossanchez(a)geotab.com> can: slcan: allow reception of short error messages Dominik Grzegorzek <dominik.grzegorzek(a)oracle.com> padata: do not leak refcount in reorder_work Ivan Pravdin <ipravdin.official(a)gmail.com> crypto: algif_hash - fix double free in hash_accept André Draszik <andre.draszik(a)linaro.org> clk: s2mps11: initialise clk_hw_onecell_data::num before accessing ::hws[] in probe() Geetha sowjanya <gakula(a)marvell.com> octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG Subbaraya Sundeep <sbhatta(a)marvell.com> octeontx2-af: Set LMT_ENA bit for APR table entries Wang Liang <wangliang74(a)huawei.com> net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done Suman Ghosh <sumang(a)marvell.com> octeontx2-pf: Avoid adding dcbnl_ops for LBK and SDP vf Suman Ghosh <sumang(a)marvell.com> octeontx2-pf: AF_XDP zero copy receive support Suman Ghosh <sumang(a)marvell.com> octeontx2-pf: Add AF_XDP non-zero copy support Suman Ghosh <sumang(a)marvell.com> octeontx2-pf: use xdp_return_frame() to free xdp buffers Cong Wang <xiyou.wangcong(a)gmail.com> sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() Eric Dumazet <edumazet(a)google.com> idpf: fix idpf_vport_splitq_napi_poll() Pavel Begunkov <asml.silence(a)gmail.com> io_uring: fix overflow resched cqe reordering Samiullah Khawaja <skhawaja(a)google.com> xsk: Bring back busy polling support in XDP_COPY Thangaraj Samynathan <thangaraj.s(a)microchip.com> net: lan743x: Restore SGMII CTRL register on resume Paul Kocialkowski <paulk(a)sys-base.io> net: dwmac-sun8i: Use parsed internal PHY address instead of 1 Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> pinctrl: qcom: switch to devm_register_sys_off_handler() Christoph Hellwig <hch(a)lst.de> loop: don't require ->write_iter for writable files in loop_configure Pavan Kumar Linga <pavan.kumar.linga(a)intel.com> idpf: fix null-ptr-deref in idpf_features_check Dave Ertman <david.m.ertman(a)intel.com> ice: Fix LACP bonds without SRIOV environment Jacob Keller <jacob.e.keller(a)intel.com> ice: fix vf->num_mac count with port representors Paolo Abeni <pabeni(a)redhat.com> mr: consolidate the ipmr_can_free_table() checks. Ido Schimmel <idosch(a)nvidia.com> bridge: netfilter: Fix forwarding of fragmented packets Sagi Maimon <maimon.sagi(a)gmail.com> ptp: ocp: Limit signal/freq counts in summary output functions En-Wei Wu <en-wei.wu(a)canonical.com> Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump handling Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix not checking l2cap_chan security level Adrian Hunter <adrian.hunter(a)intel.com> perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq Andrew Bresticker <abrestic(a)rivosinc.com> irqchip/riscv-imsic: Start local sync timer on correct CPU Tavian Barnes <tavianator(a)tavianator.com> ASoC: SOF: Intel: hda: Fix UAF when reloading module Raag Jadav <raag.jadav(a)intel.com> devres: Introduce devm_kmemdup_array() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> driver core: Split devres APIs to device/devres.h Stefan Wahren <wahrenst(a)gmx.net> dmaengine: fsl-edma: Fix return code for unhandled interrupts Dave Jiang <dave.jiang(a)intel.com> dmaengine: idxd: Fix ->poll() return value Paul Chaignon <paul.chaignon(a)gmail.com> xfrm: Sanitize marks before insert Andre Przywara <andre.przywara(a)arm.com> clk: sunxi-ng: d1: Add missing divider for MMC mod clocks Matti Lehtimäki <matti.lehtimaki(a)gmail.com> remoteproc: qcom_wcnss: Fix on platforms without fallback regulators David Hildenbrand <david(a)redhat.com> kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork() Seongman Lee <augustus92(a)kaist.ac.kr> x86/sev: Fix operator precedence in GHCB_MSR_VMPL_REQ_LEVEL macro Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix allowing write() from different address spaces Tobias Brunner <tobias(a)strongswan.org> xfrm: Fix UDP GRO handling for some corner cases Sabrina Dubroca <sd(a)queasysnail.net> espintcp: remove encap socket caching to avoid reference leak Sabrina Dubroca <sd(a)queasysnail.net> espintcp: fix skb leaks Charles Keepax <ckeepax(a)opensource.cirrus.com> soundwire: bus: Fix race on the creation of the IRQ domain Al Viro <viro(a)zeniv.linux.org.uk> __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock Austin Zheng <Austin.Zheng(a)amd.com> drm/amd/display: Call FP Protect Before Mode Programming/Mode Support Jason Andryuk <jason.andryuk(a)amd.com> xenbus: Allow PVH dom0 a non-local xenstore Paweł Anikiel <panikiel(a)google.com> x86/Kconfig: make CFI_AUTO_DEFAULT depend on !RUST or Rust >= 1.88 Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: add support for Killer on MTL Johannes Thumshirn <johannes.thumshirn(a)wdc.com> block: only update request sector if needed David Wei <dw(a)davidwei.uk> tools: ynl-gen: validate 0 len strings from kernel Qu Wenruo <wqu(a)suse.com> btrfs: avoid NULL pointer dereference if no valid csum tree Boris Burkov <boris(a)bur.io> btrfs: handle empty eb->folios in num_extent_folios() Goldwyn Rodrigues <rgoldwyn(a)suse.de> btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref Kees Cook <kees(a)kernel.org> btrfs: compression: adjust cb->compressed_folios allocation type Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> iio: imu: st_lsm6dsx: Fix wakeup source leaks on device unbind Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> iio: adc: qcom-spmi-iadc: Fix wakeup source leaks on device unbind Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> iio: accel: fxls8962af: Fix wakeup source leaks on device unbind Stefan Binding <sbinding(a)opensource.cirrus.com> ASoC: intel/sdw_utils: Add volume limit to cs35l56 speakers Stefan Binding <sbinding(a)opensource.cirrus.com> ASoC: intel/sdw_utils: Add volume limit to cs42l43 speakers Pali Rohár <pali(a)kernel.org> cifs: Fix changing times and read-only attr over SMB1 smb_set_file_info() function Pali Rohár <pali(a)kernel.org> cifs: Fix and improve cifs_query_path_info() and cifs_query_file_info() Jens Axboe <axboe(a)kernel.dk> io_uring/fdinfo: annotate racy sq/cq head/tail reads Alistair Francis <alistair.francis(a)wdc.com> nvmet-tcp: don't restore null sk_state_change Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Fix duplicated name in MIDI substream names Wentao Guan <guanwentao(a)uniontech.com> nvme-pci: add quirks for WDC Blue SN550 15b7:5009 Wentao Guan <guanwentao(a)uniontech.com> nvme-pci: add quirks for device 126f:1001 Sunil Khatri <sunil.khatri(a)amd.com> drm/ttm: fix the warning for hit_low and evict_low Takashi Iwai <tiwai(a)suse.de> ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx Takashi Iwai <tiwai(a)suse.de> ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: cs42l43: Disable headphone clamps during type detection Gašper Nemgar <gasper.nemgar(a)gmail.com> platform/x86: ideapad-laptop: add support for some new buttons Pavel Nikulin <pavel(a)noa-labs.com> platform/x86: asus-wmi: Disable OOBE state after resume from hibernation Saranya Gopal <saranya.gopal(a)intel.com> platform/x86/intel: hid: Add Pantherlake support Salah Triki <salah.triki(a)gmail.com> smb: server: smb2pdu: check return value of xa_store() Martin Blumenstingl <martin.blumenstingl(a)googlemail.com> pinctrl: meson: define the pull up/down resistor value as 60 kOhm Ritesh Harjani (IBM) <ritesh.list(a)gmail.com> book3s64/radix: Fix compile errors when CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n Chenyuan Yang <chenyuan0y(a)gmail.com> ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of() Eric Dumazet <edumazet(a)google.com> net-sysfs: restore behavior for not running devices Kate Hsuan <hpa(a)redhat.com> HID: Kconfig: Add LEDS_CLASS_MULTICOLOR dependency to HID_LOGITECH Alexander Wetzel <Alexander(a)wetzel-home.de> wifi: mac80211: Add counter for all monitor interfaces Xiaogang Chen <xiaogang.chen(a)amd.com> drm/amdkfd: Fix pasid value leak Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdkfd: Fix error handling for missing PASID in 'kfd_process_device_init_vm' Ovidiu Bunea <Ovidiu.Bunea(a)amd.com> drm/amd/display: Exit idle optimizations before accessing PHY Geert Uytterhoeven <geert+renesas(a)glider.be> serial: sh-sci: Save and restore more registers Willem de Bruijn <willemb(a)google.com> ipv6: remove leftover ip6 cookie initializer Eduard Zingerman <eddyz87(a)gmail.com> bpf: abort verification if env->cur_state->loop_entry != NULL Balbir Singh <balbirs(a)nvidia.com> x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers Michael S. Tsirkin <mst(a)redhat.com> virtgpu: don't reset on shutdown Thomas Zimmermann <tzimmermann(a)suse.de> drm/gem: Internally test import_attach for imported objects Amber Lin <Amber.Lin(a)amd.com> drm/amdkfd: Correct F8_MODE for gfx950 Arnd Bergmann <arnd(a)arndb.de> watchdog: aspeed: fix 64-bit division Dan Carpenter <dan.carpenter(a)linaro.org> pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group() Dan Carpenter <dan.carpenter(a)linaro.org> ASoC: sma1307: Fix error handling in sma1307_setting_loaded() Nathan Chancellor <nathan(a)kernel.org> i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work() Jessica Zhang <quic_jesszhan(a)quicinc.com> drm: Add valid clones check Douglas Anderson <dianders(a)chromium.org> drm/panel-edp: Add Starry 116KHD024006 Vinay Belgaumkar <vinay.belgaumkar(a)intel.com> drm/xe: Add locks in gtidle code Lin.Cao <lincao12(a)amd.com> drm/buddy: fix issue that force_merge cannot free all roots Simona Vetter <simona.vetter(a)ffwll.ch> drm/atomic: clarify the rules around drm_atomic_state->allow_modeset Oak Zeng <oak.zeng(a)intel.com> drm/xe: Reject BO eviction if BO is bound to current VM John Harrison <John.C.Harrison(a)Intel.com> drm/xe/guc: Drop error messages about missing GuC logs Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe: Always setup GT MMIO adjustment data Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe/vf: Perform early GT MMIO initialization to read GMDID Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe/sa: Always call drm_suballoc_manager_fini() Ching-Te Ku <ku920601(a)realtek.com> wifi: rtw89: coex: Add protect to avoid A2DP lag while Wi-Fi connecting Ching-Te Ku <ku920601(a)realtek.com> wifi: rtw89: coex: Separated Wi-Fi connecting event from Wi-Fi scan event Maarten Lankhorst <dev(a)lankhorst.se> drm/xe: Do not attempt to bootstrap VF in execlists mode Maarten Lankhorst <dev(a)lankhorst.se> drm/xe: Move suballocator init to after display init Thomas Zimmermann <tzimmermann(a)suse.de> drm/ast: Hide Gens 1 to 3 TX detection in branch P Praneesh <quic_ppranees(a)quicinc.com> wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation Zhi Wang <zhiw(a)nvidia.com> drm/nouveau: fix the broken marco GSP_MSG_MAX_SIZE Olivier Moysan <olivier.moysan(a)foss.st.com> drm: bridge: adv7511: fill stream capabilities Lingbo Kong <quic_lingbok(a)quicinc.com> wifi: ath12k: report station mode transmit rate Lingbo Kong <quic_lingbok(a)quicinc.com> wifi: ath12k: report station mode receive rate for IEEE 802.11be P Praneesh <quic_ppranees(a)quicinc.com> wifi: ath12k: Fix end offset bit definition in monitor ring descriptor Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe/pf: Move VFs reprovisioning to worker Aaradhana Sahu <quic_aarasahu(a)quicinc.com> wifi: ath12k: Fetch regdb.bin file from board-2.bin Rosen Penev <rosenp(a)gmail.com> wifi: ath9k: return by of_get_mac_address Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe/pf: Reset GuC VF config when unprovisioning critical resource Youssef Samir <quic_yabdulra(a)quicinc.com> accel/qaic: Mask out SR-IOV PCI resources Nicolas Escande <nico.escande(a)gmail.com> wifi: ath12k: fix ath12k_hal_tx_cmd_ext_desc_setup() info1 override Isaac Scott <isaac.scott(a)ideasonboard.com> regulator: ad5398: Add device tree support Sean Anderson <sean.anderson(a)linux.dev> spi: zynqmp-gqspi: Always acknowledge interrupts Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate Soeren Moch <smoch(a)web.de> wifi: rtl8xxxu: retry firmware download on error Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> clk: renesas: rzg2l-cpg: Refactor Runtime PM clock validation Ravi Bangoria <ravi.bangoria(a)amd.com> perf/amd/ibs: Fix ->config to sample period calculation for OP PMU Ravi Bangoria <ravi.bangoria(a)amd.com> perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt Sudeep Holla <sudeep.holla(a)arm.com> firmware: arm_scmi: Relax duplicate name constraint across protocol ids Viktor Malik <vmalik(a)redhat.com> bpftool: Fix readlink usage in get_fd_type Martin KaFai Lau <martin.lau(a)kernel.org> bpf: Use kallsyms to find the function name of a struct_ops's stub function Thomas Zimmermann <tzimmermann(a)suse.de> drm/ast: Find VBIOS mode from regular display size Matthew Sakai <msakai(a)redhat.com> dm vdo: use a short static string for thread name prefix Chung Chung <cchung(a)redhat.com> dm vdo indexer: prevent unterminated string warning Ken Raeburn <raeburn(a)redhat.com> dm vdo vio-pool: allow variable-sized metadata vios Vladimir Kondratiev <vladimir.kondratiev(a)mobileye.com> irqchip/riscv-aplic: Add support for hart indexes Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: rt722-sdca: Add some missing readable registers Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode Naman Trivedi <naman.trivedimanojbhai(a)amd.com> arm64: zynqmp: add clock-output-names property in clock nodes junan <junan76(a)163.com> HID: usbkbd: Fix the bit shift number for LED_KANA Avula Sri Charan <quic_asrichar(a)quicinc.com> wifi: ath12k: Avoid napi_sync() before napi_enable() Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: st: Restore some drive settings after reset Justin Tee <justin.tee(a)broadcom.com> scsi: lpfc: Reduce log message generation during ELS ring clean up Justin Tee <justin.tee(a)broadcom.com> scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails Justin Tee <justin.tee(a)broadcom.com> scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk Justin Tee <justin.tee(a)broadcom.com> scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine Konstantin Taranov <kotaranov(a)microsoft.com> net/mana: fix warning in the writer of client oob Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe/relay: Don't use GFP_KERNEL for new transactions Michal Swiatkowski <michal.swiatkowski(a)linux.intel.com> ice: count combined queues using Rx/Tx count Peter Zijlstra (Intel) <peterz(a)infradead.org> perf: Avoid the read if the count is already updated Ankur Arora <ankur.a.arora(a)oracle.com> rcu: fix header guard for rcu_all_qs() Ankur Arora <ankur.a.arora(a)oracle.com> rcu: handle unstable rdp in rcu_read_unlock_strict() Ankur Arora <ankur.a.arora(a)oracle.com> rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y Michal Swiatkowski <michal.swiatkowski(a)linux.intel.com> ice: treat dyn_allowed only as suggestion Michal Swiatkowski <michal.swiatkowski(a)linux.intel.com> ice: init flow director before RDMA Petr Machata <petrm(a)nvidia.com> bridge: mdb: Allow replace of a host-joined group Eric Dumazet <edumazet(a)google.com> net: flush_backlog() small changes Heiner Kallweit <hkallweit1(a)gmail.com> r8169: don't scan PHY addresses > 0 Geert Uytterhoeven <geert(a)linux-m68k.org> ipv4: ip_gre: Fix set but not used warning in ipgre_err() if IPv4-only Ido Schimmel <idosch(a)nvidia.com> vxlan: Annotate FDB data races Dhananjay Ugwekar <dhananjay.ugwekar(a)amd.com> cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost Carolina Jubran <cjubran(a)nvidia.com> net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled Jakub Kicinski <kuba(a)kernel.org> tools: ynl-gen: don't output external constants Alexander Duyck <alexanderduyck(a)meta.com> eth: fbnic: set IFF_UNICAST_FLT to avoid enabling promiscuous mode when adding unicast addrs Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> drm/rockchip: vop2: Improve display modes handling on RK3588 HDMI0 Depeng Shao <quic_depengs(a)quicinc.com> media: qcom: camss: Add default case in vfe_src_pad_code Depeng Shao <quic_depengs(a)quicinc.com> media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is available Jaegeuk Kim <jaegeuk(a)kernel.org> f2fs: introduce f2fs_base_attr for global sysfs entries Rodrigo Vivi <rodrigo.vivi(a)intel.com> drm/xe: Fix PVC RPe and RPa information Andrey Vatoropin <a.vatoropin(a)crpt.ru> hwmon: (xgene-hwmon) use appropriate type for the latency value Len Brown <len.brown(a)intel.com> tools/power turbostat: Clustered Uncore MHz counters should honor show/hide options Jakub Kicinski <kuba(a)kernel.org> net: page_pool: avoid false positive warning if NAPI was never added Jakub Kicinski <kuba(a)kernel.org> netdevsim: allow normal queue reset while down Jordan Crouse <jorcrous(a)amazon.com> clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs Angelo Dureghello <adureghello(a)baylibre.com> iio: dac: adi-axi-dac: add bus mode setup Angelo Dureghello <adureghello(a)baylibre.com> iio: dac: ad3552r-hs: use instruction mode for configuration Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: call power_on ahead before selecting firmware Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: fw: validate multi-firmware header before accessing Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: fw: validate multi-firmware header before getting its size Ching-Te Ku <ku920601(a)realtek.com> wifi: rtw89: coex: Assign value over than 0 to avoid firmware timer hang Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix __rtw_download_firmware() for RTL8814AU Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix download_firmware_validate() for RTL8814AU Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Extend rtw_fw_send_ra_info() for RTL8814AU Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix rtw_update_sta_info() for RTL8814AU Zhang Yi <yi.zhang(a)huawei.com> ext4: remove writable userspace mappings before truncating page cache Zhang Yi <yi.zhang(a)huawei.com> ext4: don't write back data before punch hole in nojournal mode Marek Vasut <marex(a)denx.de> leds: trigger: netdev: Configure LED blink interval for HW offload Kees Cook <kees(a)kernel.org> pstore: Change kmsg_bytes storage size to u32 Song Yoong Siang <yoong.siang.song(a)intel.com> igc: Avoid unnecessary link down event in XDP_SETUP_PROG process David Lechner <dlechner(a)baylibre.com> iio: adc: ad7944: don't use storagebits for sizing Akihiko Odaki <akihiko.odaki(a)daynix.com> s390/crash: Use note name macros Aleksander Jan Bajkowski <olek2(a)wp.pl> r8152: add vendor/device ID pair for Dell Alienware AW1022z Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). Athira Rajeev <atrajeev(a)linux.vnet.ibm.com> arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src Gaurav Batra <gbatra(a)linux.ibm.com> powerpc/pseries/iommu: create DDW for devices with DMA mask less than 64-bits Gaurav Batra <gbatra(a)linux.ibm.com> powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory Csókás, Bence <csokas.bence(a)prolan.hu> net: fec: Refactor MAC reset to function Alexander Wetzel <Alexander(a)wetzel-home.de> wifi: mac80211: Drop cooked monitor support Benjamin Berg <benjamin.berg(a)intel.com> wifi: mac80211: add HT and VHT basic set verification Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: mac80211: set ieee80211_prep_tx_info::link_id upon Auth Rx Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: remove misplaced drv_mgd_complete_tx() call Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't unconditionally call drv_mgd_complete_tx() Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: always send max agg subframe num in strict mode Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: iwlwifi: don't warn during reprobe Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: use correct IMR dump variable Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: userspace: flags: clearer msg if no remote addr Karthikeyan Periyasamy <quic_periyasa(a)quicinc.com> wifi: ath12k: Update the peer id in PPDU end user stats TLV P Praneesh <quic_ppranees(a)quicinc.com> wifi: ath12k: fix the ampdu id fetch in the HAL_RX_MPDU_START TLV Aditya Kumar Singh <aditya.kumar.singh(a)oss.qualcomm.com> wifi: ath12k: use arvif instead of link_conf in ath12k_mac_set_key() Aaradhana Sahu <quic_aarasahu(a)quicinc.com> wifi: ath12k: Enable MLO setup ready and teardown commands for single split-phy device Angelo Dureghello <adureghello(a)baylibre.com> iio: adc: ad7606: protect register access Leon Romanovsky <leon(a)kernel.org> xfrm: prevent high SEQ input in non-ESN mode Stefan Wahren <wahrenst(a)gmx.net> drm/v3d: Add clock handling William Tu <witu(a)nvidia.com> net/mlx5e: reduce the max log mpwrq sz for ECPF and reps William Tu <witu(a)nvidia.com> net/mlx5e: reduce rep rxq depth to 256 for ECPF William Tu <witu(a)nvidia.com> net/mlx5e: set the tx_queue_len for pfifo_fast Alexei Lazar <alazar(a)nvidia.com> net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB Alexei Lazar <alazar(a)nvidia.com> net/mlx5: XDP, Enable TX side XDP multi-buffer support Chaohai Chen <wdhh66(a)163.com> scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr() Alex Deucher <alexander.deucher(a)amd.com> drm/amd/display/dm: drop hw_support check in amdgpu_dm_i2c_xfer() Xiaogang Chen <xiaogang.chen(a)amd.com> drm/amdkfd: Have kfd driver use same PASID values from graphic driver Shiwu Zhang <shiwu.zhang(a)amd.com> drm/amdgpu: enlarge the VBIOS binary size limit Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Use active umc info from discovery Dillon Varone <dillon.varone(a)amd.com> drm/amd/display: Populate register address for dentist for dcn401 Austin Zheng <Austin.Zheng(a)amd.com> drm/amd/display: Use Nominal vBlank If Provided Instead Of Capping It Joshua Aberback <joshua.aberback(a)amd.com> drm/amd/display: Increase block_sequence array size Peterson Guo <peterson.guo(a)amd.com> drm/amd/display: Reverse the visual confirm recouts Jiang Liu <gerry(a)linux.alibaba.com> amdgpu/soc15: enable asic reset for dGPU in case of suspend abort Victor Skvortsov <victor.skvortsov(a)amd.com> drm/amdgpu: Skip err_count sysfs creation on VF unsupported RAS blocks Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdgpu/gfx10: Add cleaner shader for GFX10.1.10 Tom Chung <chiahsuan.chung(a)amd.com> drm/amd/display: Initial psr_version with correct setting George Shen <george.shen(a)amd.com> drm/amd/display: Update CR AUX RD interval interpretation Austin Zheng <Austin.Zheng(a)amd.com> drm/amd/display: Account For OTO Prefetch Bandwidth When Calculating Urgent Bandwidth Dillon Varone <dillon.varone(a)amd.com> drm/amd/display: Ammend DCPG IP control sequences to align with HW guidance Dillon Varone <dillon.varone(a)amd.com> drm/amd/display: Fixes for mcache programming in DML21 Brandon Syu <Brandon.Syu(a)amd.com> Revert "drm/amd/display: Exit idle optimizations before attempt to access PHY" Martin Tsai <Martin.Tsai(a)amd.com> drm/amd/display: Support multiple options during psr entry. Asad Kamal <asad.kamal(a)amd.com> drm/amd/pm: Skip P2S load for SMU v13.0.12 Jiang Liu <gerry(a)linux.alibaba.com> drm/amdgpu: reset psp->cmd to NULL after releasing the buffer Ilya Bakoulin <Ilya.Bakoulin(a)amd.com> drm/amd/display: Don't try AUX transactions on disconnected link Samson Tam <Samson.Tam(a)amd.com> drm/amd/display: remove TF check for LLS policy Charlene Liu <Charlene.Liu(a)amd.com> drm/amd/display: pass calculated dram_speed_mts to dml2 Harish Kasiviswanathan <Harish.Kasiviswanathan(a)amd.com> drm/amdgpu: Set snoop bit for SDMA for MI series Eric Huang <jinhuieric.huang(a)amd.com> drm/amdkfd: fix missing L2 cache info in topology Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mes11: fix set_hw_resources_1 calculation Bart Van Assche <bvanassche(a)acm.org> scsi: usb: Rename the RESERVE and RELEASE constants Huacai Chen <chenhuacai(a)kernel.org> net: stmmac: dwmac-loongson: Set correct {tx,rx}_fifo_size Jan Kara <jack(a)suse.cz> jbd2: Avoid long replay times due to high number or revoke blocks Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: cadence_master: set frame shape and divider based on actual clk freq Vijendar Mukunda <Vijendar.Mukunda(a)amd.com> soundwire: amd: change the soundwire wake enable/disable sequence André Draszik <andre.draszik(a)linaro.org> phy: exynos5-usbdrd: fix EDS distribution tuning (gs101) Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> phy: core: don't require set_mode() callback for phy_get_mode() to work Damon Ding <damon.ding(a)rock-chips.com> phy: phy-rockchip-samsung-hdptx: Swap the definitions of LCPLL_REF and ROPLL_REF Rodrigo Vivi <rodrigo.vivi(a)intel.com> drm/xe/display: Remove hpd cancel work sync from runtime pm path Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> pinctrl: renesas: rzg2l: Add suspend/resume support for pull up/down Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> serial: sh-sci: Update the suspend/resume support zihan zhou <15645113830zzh(a)gmail.com> sched: Reduce the default slice to avoid tasks getting an extra tick Peter Zijlstra <peterz(a)infradead.org> x86/boot: Mark start_secondary() with __noendbr Peter Zijlstra <peterz(a)infradead.org> x86/traps: Cleanup and robustify decode_bug() Peter Zijlstra <peterz(a)infradead.org> x86/ibt: Handle FineIBT in handle_cfi_failure() Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/debugfs: Add missing xe_pm_runtime_put in wedge_mode_set Xin Wang <x.wang(a)intel.com> drm/xe/debugfs: fixed the return value of wedged_mode_set Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> clk: qcom: clk-alpha-pll: Do not use random stack value for recalc rate Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Refactor hardware context destroy routine Karl Chan <exxxxkc(a)getgoogleoff.me> clk: qcom: ipq5018: allow it to be bulid on arm32 Lucas De Marchi <lucas.demarchi(a)intel.com> drm/xe: Fix xe_tile_init_noalloc() error propagation Lucas De Marchi <lucas.demarchi(a)intel.com> drm/xe: Stop ignoring errors from xe_ttm_stolen_mgr_init() Kees Cook <kees(a)kernel.org> net/mlx4_core: Avoid impossible mlx4_db_alloc() order value Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Set NPAR 1.2 support when registering with firmware Sakari Ailus <sakari.ailus(a)linux.intel.com> media: i2c: ov2740: Free control handler on error path Alain Volmat <alain.volmat(a)foss.st.com> media: stm32: csi: add missing pm_runtime_put on error Alain Volmat <alain.volmat(a)foss.st.com> media: stm32: csi: use ARRAY_SIZE to search D-PHY table Sakari Ailus <sakari.ailus(a)linux.intel.com> media: v4l: Memset argument to 0 before calling get_mbus_config pad op David Plowman <david.plowman(a)raspberrypi.com> media: i2c: imx219: Correct the minimum vblanking value Brendan Jackman <jackmanb(a)google.com> kunit: tool: Use qboot on QEMU x86_64 Konstantin Andreev <andreev(a)swemel.ru> smack: Revert "smackfs: Added check catlen" Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe/pf: Release all VFs configs on device removal Konstantin Andreev <andreev(a)swemel.ru> smack: recognize ipv4 CIPSO w/o categories Valentin Caron <valentin.caron(a)foss.st.com> pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot() Hector Martin <marcan(a)marcan.st> ASoC: tas2764: Power up/down amp on mute ops Hector Martin <marcan(a)marcan.st> ASoC: tas2764: Mark SW_RESET as volatile Hector Martin <marcan(a)marcan.st> ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG Martin Povišer <povik+lin(a)cutebit.org> ASoC: ops: Enforce platform maximum on initial value Pavel Begunkov <asml.silence(a)gmail.com> io_uring: sanitise ring params earlier Caleb Sander Mateos <csander(a)purestorage.com> io_uring: use IO_REQ_LINK_FLAGS more Siva Durga Prasad Paladugu <siva.durga.prasad.paladugu(a)amd.com> firmware: xilinx: Dont send linux address to get fpga config get status Sudeep Holla <sudeep.holla(a)arm.com> firmware: arm_ffa: Handle the presence of host partition in the partition info Sudeep Holla <sudeep.holla(a)arm.com> firmware: arm_ffa: Reject higher major version as incompatible Shahar Shitrit <shshitrit(a)nvidia.com> net/mlx5: Apply rate-limiting to high temperature warning Shahar Shitrit <shshitrit(a)nvidia.com> net/mlx5: Modify LSB bitmask in temperature event to include only the first bit Amery Hung <ameryhung(a)gmail.com> bpf: Make every prog keep a copy of ctx_arg_info Hans Verkuil <hverkuil(a)xs4all.nl> media: test-drivers: vivid: don't call schedule in loop Andrew Jones <ajones(a)ventanamicro.com> irqchip/riscv-imsic: Set irq_set_affinity() for IMSIC base Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> hrtimers: Replace hrtimer_clock_to_base_table with switch-case Benjamin Segall <bsegall(a)google.com> posix-timers: Invoke cond_resched() during exit_itimers() Brian Gerst <brgerst(a)gmail.com> x86/boot: Disable stack protector for early boot code Petr Machata <petrm(a)nvidia.com> vxlan: Join / leave MC group after remote changes Xiaofei Tan <tanxiaofei(a)huawei.com> ACPI: HED: Always initialize before evged Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Fix old_size lower bound in calculate_iosize() too Jakub Kicinski <kuba(a)kernel.org> eth: mlx4: don't try to complete XDP frames in netpoll Eduard Zingerman <eddyz87(a)gmail.com> bpf: copy_verifier_state() should copy 'loop_entry' field Eduard Zingerman <eddyz87(a)gmail.com> bpf: don't do clean_live_states when state->loop_entry->branches > 0 Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> can: c_can: Use of_property_present() to test existence of DT property Ahmad Fatoum <a.fatoum(a)pengutronix.de> pmdomain: imx: gpcv2: use proper helper for property detection Michael Margolin <mrgolin(a)amazon.com> RDMA/core: Fix best page size finding when it can cross SG entries Alexis Lothoré <alexis.lothore(a)bootlin.com> serial: mctrl_gpio: split disable_ms into sync and no_sync APIs Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink Leo Zeng <Leo.Zeng(a)amd.com> Revert "drm/amd/display: Request HW cursor on DCN3.2 with SubVP" George Shen <george.shen(a)amd.com> drm/amd/display: Read LTTPR ALPM caps during link cap retrieval Ilya Bakoulin <Ilya.Bakoulin(a)amd.com> drm/amd/display: Fix BT2020 YCbCr limited/full range input Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> drm/amd/display: Guard against setting dispclk low when active Harry VanZyllDeJong <hvanzyll(a)amd.com> drm/amd/display: Add support for disconnected eDP streams Lijo Lazar <lijo.lazar(a)amd.com> drm/amd/pm: Fetch current power limit from PMFW Marcin Bernatowicz <marcin.bernatowicz(a)linux.intel.com> drm/xe/client: Skip show_run_ticks if unable to read timestamp Anup Patel <apatel(a)ventanamicro.com> irqchip/riscv-imsic: Separate next and previous pointers in IMSIC vector Eddie James <eajames(a)linux.ibm.com> eeprom: ee1004: Check chip before probing Chris Morgan <macromorgan(a)hotmail.com> mfd: axp20x: AXP717: Add AXP717_TS_PIN_CFG to writeable regs Breno Leitao <leitao(a)debian.org> netdevsim: call napi_schedule from a timer context Frank Li <Frank.Li(a)nxp.com> i3c: master: svc: Flush FIFO before sending Dynamic Address Assignment(DAA) Arnd Bergmann <arnd(a)arndb.de> EDAC/ie31200: work around false positive build warning Chris Morgan <macromorgan(a)hotmail.com> power: supply: axp20x_battery: Update temp sensor for AXP717 from device tree Peter Seiderer <ps.report(a)gmx.net> net: pktgen: fix access outside of user given buffer in pktgen_thread_write() Kuan-Chung Chen <damon.chen(a)realtek.com> wifi: rtw89: 8922a: fix incorrect STA-ID in EHT MU PPDU Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: fw: add blacklist to avoid obsolete secure firmware Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: fw: get sb_sel_ver via get_unaligned_le32() Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: fw: propagate error code from rtw89_h2c_tx() Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix rtw_mac_power_switch() for RTL8814AU Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31 Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU Shivasharan S <shivasharan.srikanteshwara(a)broadcom.com> scsi: mpt3sas: Send a diag reset if target reset fails Mrinmay Sarkar <quic_msarkar(a)quicinc.com> PCI: epf-mhi: Update device ID for SA8775P Paul Burton <paulburton(a)kernel.org> clocksource: mips-gic-timer: Enable counter when CPUs start Paul Burton <paulburton(a)kernel.org> MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core Subramanian Mohan <subramanian.mohan(a)intel.com> pps: generators: replace copy of pps-gen info struct with const pointer Jason Gunthorpe <jgg(a)ziepe.ca> genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie Uros Bizjak <ubizjak(a)gmail.com> x86/locking: Use ALT_OUTPUT_SP() for percpu_{,try_}cmpxchg{64,128}_op() Rik van Riel <riel(a)surriel.com> x86/mm: Make MMU_GATHER_RCU_TABLE_FREE unconditional Christian König <christian.koenig(a)amd.com> drm/amdgpu: remove all KFD fences from the BO on release Bibo Mao <maobibo(a)loongson.cn> MIPS: Use arch specific syscall name match function Umesh Nerlige Ramappa <umesh.nerlige.ramappa(a)intel.com> drm/xe/oa: Ensure that polled read returns latest data Xiao Liang <shaw.leon(a)gmail.com> rtnetlink: Lookup device in target netns when creating link Xiao Liang <shaw.leon(a)gmail.com> net: ipv6: Init tunnel link-netns before registering dev Herbert Xu <herbert(a)gondor.apana.org.au> crypto: skcipher - Zap type in crypto_alloc_sync_skcipher Herbert Xu <herbert(a)gondor.apana.org.au> crypto: ahash - Set default reqsize from ahash_alg Balbir Singh <balbirs(a)nvidia.com> x86/kaslr: Reduce KASLR entropy on most x86 systems Patrisious Haddad <phaddad(a)nvidia.com> net/mlx5: Change POOL_NEXT_SIZE define value and make it global Philippe Simons <simons.philippe(a)gmail.com> clk: sunxi-ng: h616: Reparent GPU clock during frequency changes Song Liu <song(a)kernel.org> bpf: arm64: Silence "UBSAN: negation-overflow" warning Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: scsi_debug: First fixes for tapes Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org> gpiolib: sanitize the return value of gpio_chip::set_config() Jinliang Zheng <alexjlzheng(a)gmail.com> dm: fix unconditional IO throttle caused by REQ_PREFLUSH Michael S. Tsirkin <mst(a)redhat.com> virtio: break and reset virtio devices on device_shutdown() Nandakumar Edamana <nandakumar(a)nandakumar.co.in> libbpf: Fix out-of-bound read Kunihiko Hayashi <hayashi.kunihiko(a)socionext.com> net: stmmac: Correct usage of maximum queue number macros Christoph Hellwig <hch(a)lst.de> loop: check in LO_FLAGS_DIRECT_IO in loop_default_blocksize Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpi3mr: Update timestamp only for supervisor IOCs Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Add correct match to check IPSec syndromes for switchdev mode Matthias Fend <matthias.fend(a)emfend.at> media: tc358746: improve calculation of the D-PHY timing registers Niklas Söderlund <niklas.soderlund+renesas(a)ragnatech.se> media: adv7180: Disable test-pattern control on adv7180 Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpuidle: menu: Avoid discarding useful information Konstantin Shkolnyy <kshk(a)linux.ibm.com> vdpa/mlx5: Fix mlx5_vdpa_get_config() endianness on big-endian machines Mike Christie <michael.christie(a)oracle.com> vhost-scsi: Return queue full for page alloc failures during copy Waiman Long <longman(a)redhat.com> x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() Nícolas F. R. A. Prado <nfraprado(a)collabora.com> ASoC: mediatek: mt8188: Add reference for dmic clocks Nícolas F. R. A. Prado <nfraprado(a)collabora.com> ASoC: mediatek: mt8188: Treat DMIC_GAINx_CUR as non-volatile Samson Tam <Samson.Tam(a)amd.com> drm/amd/display: Fix mismatch type comparison in custom_float Navid Assadian <Navid.Assadian(a)amd.com> drm/amd/display: Add opp recout adjustment Assadian, Navid <navid.assadian(a)amd.com> drm/amd/display: Fix mismatch type comparison Samson Tam <Samson.Tam(a)amd.com> drm/amd/display: fix check for identity ratio Charlene Liu <Charlene.Liu(a)amd.com> drm/amd/display: fix dcn4x init failed Yihan Zhu <Yihan.Zhu(a)amd.com> drm/amd/display: handle max_downscale_src_width fail check Nir Lichtman <nir(a)lichtman.org> x86/build: Fix broken copy command in genimage.sh when making isoimage Hariprasad Kelam <hkelam(a)marvell.com> Octeontx2-af: RPM: Register driver with PCI subsys IDs Amery Hung <amery.hung(a)bytedance.com> bpf: Search and add kfuncs in struct_ops prologue and epilogue Andrew Davis <afd(a)ti.com> soc: ti: k3-socinfo: Do not use syscon helper to build regmap Ramasamy Kaliappan <quic_rkaliapp(a)quicinc.com> wifi: ath12k: Improve BSS discovery with hidden SSID in 6 GHz band Dang Huynh <danct12(a)riseup.net> pinctrl: qcom: msm8917: Add MSM8937 wsa_reset pin Eric Dumazet <edumazet(a)google.com> tcp: be less liberal in TSEcr received while in SYN_RECV state Hangbin Liu <liuhangbin(a)gmail.com> bonding: report duplicate MAC address in all situations Chih-Kang Chang <gary.chang(a)realtek.com> wifi: rtw89: Parse channel from IE to correct invalid hardware reports during scanning Roger Quadros <rogerq(a)kernel.org> dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_chn Arnd Bergmann <arnd(a)arndb.de> net: xgene-v2: remove incorrect ACPI_PTR annotation Eric Woudstra <ericwouds(a)gmail.com> net: ethernet: mtk_ppe_offload: Allow QinQ, double ETH_P_8021Q only Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Check interrupt register before mailbox_rx_worker exits Yuanjun Gong <ruc_gongyuanjun(a)163.com> leds: pwm-multicolor: Add check for fwnode_property_read_u32 Daniel Gomez <da.gomez(a)samsung.com> drm/xe: xe_gen_wa_oob: replace program_invocation_short_name Philip Yang <Philip.Yang(a)amd.com> drm/amdkfd: KFD release_work possible circular locking Inochi Amaoto <inochiama(a)gmail.com> pinctrl: sophgo: avoid to modify untouched bit when setting cv1800 pinconf Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> driver core: faux: only create the device if probe() succeeds Kevin Krakauer <krakauer(a)google.com> selftests/net: have `gro.sh -t` return a correct exit code Moshe Shemesh <moshe(a)nvidia.com> net/mlx5: Avoid report two health errors on same syndrome Satyanarayana K V P <satyanarayana.k.v.p(a)intel.com> drm/xe/pf: Create a link between PF and VF devices Satyanarayana K V P <satyanarayana.k.v.p(a)intel.com> drm/xe/vf: Retry sending MMIO request to GUC on timeout error Viresh Kumar <viresh.kumar(a)linaro.org> firmware: arm_ffa: Set dma_mask for ffa devices Stanimir Varbanov <svarbanov(a)suse.de> PCI: brcmstb: Add a softdep to MIP MSI-X driver Stanimir Varbanov <svarbanov(a)suse.de> PCI: brcmstb: Expand inbound window size up to 64GB Vinith Kumar R <quic_vinithku(a)quicinc.com> wifi: ath12k: Report proper tx completion status to mac80211 Hector Martin <marcan(a)marcan.st> soc: apple: rtkit: Implement OSLog buffers properly Janne Grunau <j(a)jannau.net> soc: apple: rtkit: Use high prio work queue Rob Herring (Arm) <robh(a)kernel.org> perf: arm_pmuv3: Call kvm_vcpu_pmu_resync_el0() before enabling counters Kuhanh Murugasen Krishnan <kuhanh.murugasen.krishnan(a)intel.com> fpga: altera-cvp: Increase credit timeout AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence Li Bin <bin.li(a)microchip.com> ARM: at91: pm: fix at91_suspend_finish for ZQ calibration Alexander Stein <alexander.stein(a)ew.tq-group.com> hwmon: (gpio-fan) Add missing mutex locks Huisong Li <lihuisong(a)huawei.com> hwmon: (acpi_power_meter) Fix the fake power alarm reporting Breno Leitao <leitao(a)debian.org> x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 Xu Yang <xu.yang_2(a)nxp.com> PM: sleep: Suppress sleeping parent warning in special case Ahmad Fatoum <a.fatoum(a)pengutronix.de> clk: imx8mp: inform CCF of maximum frequency of clocks Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map Caleb Sander Mateos <csander(a)purestorage.com> ublk: complete command synchronously on error Shin'ichiro Kawasaki <shinichiro.kawasaki(a)wdc.com> null_blk: generate null_blk configfs features string Christoph Hellwig <hch(a)lst.de> block: mark bounce buffering as incompatible with integrity Andy Yan <andy.yan(a)rock-chips.com> drm/rockchip: vop2: Add uv swap for cluster window Kuniyuki Iwashima <kuniyu(a)amazon.com> ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). Kuniyuki Iwashima <kuniyu(a)amazon.com> ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). Nicolas Bouchinet <nicolas.bouchinet(a)ssi.gouv.fr> scsi: logging: Fix scsi_logging_level bounds Maciej S. Szmigiero <mail(a)maciej.szmigiero.name> ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7 Saket Kumar Bhaskar <skb99(a)linux.ibm.com> perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type Peter Zijlstra <peterz(a)infradead.org> perf/core: Fix perf_mmap() failure path Peter Seiderer <ps.report(a)gmx.net> net: pktgen: fix mpls maximum labels list parsing Paul Elder <paul.elder(a)ideasonboard.com> media: imx335: Set vblank immediately Yi Liu <yi.l.liu(a)intel.com> iommufd: Disallow allocating nested parent domain with fault ID Uday Shankar <ushankar(a)purestorage.com> ublk: enforce ublks_max only for unprivileged devices Jiasheng Jiang <jiashengjiangcool(a)gmail.com> dpll: Add an assertion to check freq_supported_num Andrei Botila <andrei.botila(a)oss.nxp.com> net: phy: nxp-c45-tja11xx: add match_phy_device to TJA1103/TJA1104 Lee Trager <lee(a)trager.us> eth: fbnic: Prepend TSENE FW fields with FBNIC_FW Alexander Sverdlin <alexander.sverdlin(a)siemens.com> net: ethernet: ti: cpsw_new: populate netdev of_node Jessica Zhang <quic_jesszhan(a)quicinc.com> drm/msm/dpu: Set possible clones for all encoders Paul E. McKenney <paulmck(a)kernel.org> rcu: Fix get_state_synchronize_rcu_full() GP-start detection Artur Weber <aweber.kernel(a)gmail.com> pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" Hans Verkuil <hverkuil(a)xs4all.nl> media: cx231xx: set device_caps for 417 Peter Zijlstra <peterz(a)infradead.org> perf/core: Clean up perf_try_init_event() Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Add offset normalization in VCN v5.0.1 Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Avoid HDP flush on JPEG v5.0.1 Aric Cyr <Aric.Cyr(a)amd.com> drm/amd/display: Request HW cursor on DCN3.2 with SubVP Dillon Varone <Dillon.Varone(a)amd.com> drm/amd/display: Fix p-state type when p-state is unsupported Dillon Varone <Dillon.Varone(a)amd.com> drm/amd/display: Fix DMUB reset sequence for DCN401 George Shen <george.shen(a)amd.com> drm/amd/display: Skip checking FRL_MODE bit for PCON BW determination Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> drm/amd/display: Ensure DMCUB idle before reset on DCN31/DCN35 Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Reinit FW shared flags on VCN v5.0.1 Victor Lu <victorchengchi.lu(a)amd.com> drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c Gustavo Sousa <gustavo.sousa(a)intel.com> drm/xe: Disambiguate GMDID-based IP names Matti Lehtimäki <matti.lehtimaki(a)gmail.com> remoteproc: qcom_wcnss: Handle platforms with only single power domain Ming Lei <ming.lei(a)redhat.com> blk-throttle: don't take carryover for prioritized processing of metadata Choong Yong Liang <yong.liang.choong(a)linux.intel.com> net: phylink: use pl->link_interface in phylink_expects_phy() Thomas Zimmermann <tzimmermann(a)suse.de> drm/gem: Test for imported GEM buffers with helper Matthew Wilcox (Oracle) <willy(a)infradead.org> orangefs: Do not truncate file size AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> soc: mediatek: mtk-mutex: Add DPI1 SOF/EOF to MT8188 mutex tables Ming-Hung Tsai <mtsai(a)redhat.com> dm cache: prevent BUG_ON by blocking retries on failed device resumes Niklas Neronin <niklas.neronin(a)linux.intel.com> usb: xhci: set page size to the xHCI-supported size Vitaliy Shevtsov <v.shevtsov(a)mt-integration.ru> media: cec: use us_to_ktime() where appropriate Markus Elfring <elfring(a)users.sourceforge.net> media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() Svyatoslav Ryhel <clamor95(a)gmail.com> ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 Arnd Bergmann <arnd(a)arndb.de> soc: samsung: include linux/array_size.h where needed Matthew Brost <matthew.brost(a)intel.com> drm/xe: Retry BO allocation Matthew Brost <matthew.brost(a)intel.com> drm/xe: Nuke VM's mapping upon close Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> ieee802154: ca8210: Use proper setters and getters for bitwise types Alexandre Belloni <alexandre.belloni(a)bootlin.com> rtc: ds1307: stop disabling alarms on probe Michael Jeanson <mjeanson(a)efficios.com> rseq: Fix segfault on registration when rseq_cs is non-zero Eric Dumazet <edumazet(a)google.com> tcp: bring back NUMA dispersion in inet_ehash_locks_alloc() Takashi Iwai <tiwai(a)suse.de> ALSA: seq: Improve data consistency at polling Andreas Schwab <schwab(a)linux-m68k.org> powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 Jon Hunter <jonathanh(a)nvidia.com> arm64: tegra: Resize aperture for the IGX PCIe C5 slot Diogo Ivo <diogo.ivo(a)tecnico.ulisboa.pt> arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator Emily Deng <Emily.Deng(a)amd.com> drm/amdgpu: Fix missing drain retry fault the last entry Tao Zhou <tao.zhou1(a)amd.com> drm/amdgpu: increase RAS bad page threshold Alex Sierra <alex.sierra(a)amd.com> drm/amdkfd: clear F8_MODE for gfx950 Harish Kasiviswanathan <Harish.Kasiviswanathan(a)amd.com> drm/amdkfd: Set per-process flags only once cik/vi Harish Kasiviswanathan <Harish.Kasiviswanathan(a)amd.com> drm/amdkfd: Set per-process flags only once for gfx9/10/11/12 Sven Schwermer <sven(a)svenschwermer.de> crypto: mxs-dcp - Only set OTP_KEY bit for OTP key Herbert Xu <herbert(a)gondor.apana.org.au> crypto: lzo - Fix compression buffer overrun Niklas Cassel <cassel(a)kernel.org> selftests: pci_endpoint: Skip disabled BARs Niklas Cassel <cassel(a)kernel.org> misc: pci_endpoint_test: Give disabled BARs a distinct error code Christian Bruel <christian.bruel(a)foss.st.com> PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops Chin-Ting Kuo <chin-ting_kuo(a)aspeedtech.com> watchdog: aspeed: Update bootstatus handling Kyunghwan Seo <khwan.seo(a)samsung.com> watchdog: s3c2410_wdt: Fix PMU register bits for ExynosAutoV920 SoC Aaron Kling <luceoscutum(a)gmail.com> cpufreq: tegra186: Share policy per cluster K Prateek Nayak <kprateek.nayak(a)amd.com> fs/pipe: Limit the slots in pipe_resize_ring() Vasant Hegde <vasant.hegde(a)amd.com> iommu/amd/pgtbl_v2: Improve error handling Jason Gunthorpe <jgg(a)ziepe.ca> iommu/vt-d: Check if SVA is supported when attaching the SVA domain Yeoreum Yun <yeoreum.yun(a)arm.com> coresight: change coresight_trace_id_map's lock type to raw_spinlock_t Yeoreum Yun <yeoreum.yun(a)arm.com> coresight-etb10: change etb_drvdata spinlock's type to raw_spinlock_t Nilay Shroff <nilay(a)linux.ibm.com> block: acquire q->limits_lock while reading sysfs attributes Coly Li <colyli(a)kernel.org> badblocks: Fix a nonsense WARN_ON() which checks whether a u64 variable < 0 Alexey Klimov <alexey.klimov(a)linaro.org> ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct hd44780_common" Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: Check for empty queue in run_queue Leon Huang <Leon.Huang1(a)amd.com> drm/amd/display: Fix incorrect DPCD configs while Replay/PSR switch Peichen Huang <PeiChen.Huang(a)amd.com> drm/amd/display: not abort link train when bw is low Zhikai Zhai <zhikai.zhai(a)amd.com> drm/amd/display: calculate the remain segments for all pipes Charlene Liu <Charlene.Liu(a)amd.com> drm/amd/display: remove minimum Dispclk and apply oem panel timing. Willem de Bruijn <willemb(a)google.com> ipv6: save dontfrag in cork Heiner Kallweit <hkallweit1(a)gmail.com> r8169: increase max jumbo packet size on RTL8125/RTL8126 Anjaneyulu <pagadala.yesu.anjaneyulu(a)intel.com> wifi: cfg80211: allow IR in 20 MHz configurations Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: fix U-APSD check in ML reconfiguration Ilan Peer <ilan.peer(a)intel.com> wifi: mac80211_hwsim: Fix MLD address translation Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: fix warning on disconnect during failed ML reconf Ilan Peer <ilan.peer(a)intel.com> wifi: cfg80211: Update the link address when a link is added Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't include MLE in ML reconf per-STA profile Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: fix the ECKV UEFI variable name Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: mark Br device not integrated Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: fix debug actions order Daniel Gabay <daniel.gabay(a)intel.com> wifi: iwlwifi: w/a FW SMPS mode selection Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: iwlwifi: don't warn when if there is a FW error Marcos Paulo de Souza <mpdesouza(a)suse.com> printk: Check CON_SUSPEND when unblanking a console Robin Murphy <robin.murphy(a)arm.com> iommu: Keep dev->iommu state consistent Kurt Borja <kuurtb(a)gmail.com> hwmon: (dell-smm) Increment the number of fans Avraham Stern <avraham.stern(a)intel.com> wifi: iwlwifi: mvm: fix setting the TK when associated Michal Pecio <michal.pecio(a)gmail.com> usb: xhci: Don't change the status of stalled TDs on failed Stop EP Erick Shepherd <erick.shepherd(a)ni.com> mmc: sdhci: Disable SD card clock before changing parameters Kaustabh Chakraborty <kauschluss(a)disroot.org> mmc: dw_mmc: add exynos7870 DW MMC support Ryan Roberts <ryan.roberts(a)arm.com> arm64/mm: Check PUD_TYPE_TABLE in pud_bad() Ryan Roberts <ryan.roberts(a)arm.com> arm64/mm: Check pmd_table() in pmd_trans_huge() Andy Yan <andy.yan(a)rock-chips.com> phy: rockchip: usbdp: Only verify link rates/lanes/voltage when the corresponding set flags are set Kees Cook <kees(a)kernel.org> PNP: Expand length of fixup id string Nicolas Bouchinet <nicolas.bouchinet(a)ssi.gouv.fr> netfilter: conntrack: Bound nf_conntrack sysctl writes Dian-Syuan Yang <dian_syuan0116(a)realtek.com> wifi: rtw89: set force HE TB mode when connecting to 11ax AP Ching-Te Ku <ku920601(a)realtek.com> wifi: rtw89: coex: Fix coexistence report not show as expected Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> timer_list: Don't use %pK through printk() Jaakko Karrenpalo <jkarrenpalo(a)gmail.com> net: hsr: Fix PRP duplicate detection Jonas Karlman <jonas(a)kwiboo.se> net: stmmac: dwmac-rk: Validate GRF and peripheral GRF during probe Thomas Gleixner <tglx(a)linutronix.de> posix-timers: Ensure that timer initialization is fully visible Eric Dumazet <edumazet(a)google.com> posix-timers: Add cond_resched() to posix_timer_add() search loop Maher Sanalla <msanalla(a)nvidia.com> RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject() Baokun Li <libaokun1(a)huawei.com> ext4: do not convert the unwritten extents if data writeback fails Baokun Li <libaokun1(a)huawei.com> ext4: reject the 'data_err=abort' option in nojournal mode Manuel Fombuena <fombuena(a)outlook.com> leds: leds-st1202: Initialize hardware before DT node child operations Manuel Fombuena <fombuena(a)outlook.com> leds: Kconfig: leds-st1202: Add select for required LEDS_TRIGGER_PATTERN Taniya Das <quic_tdas(a)quicinc.com> clk: qcom: lpassaudiocc-sc7280: Add support for LPASS resets for QCM6490 Ryan Walklin <ryan(a)testtoast.com> ASoC: sun4i-codec: correct dapm widgets and controls for h616 Ryan Walklin <ryan(a)testtoast.com> ASoC: sun4i-codec: support hp-det-gpios property David Rosca <david.rosca(a)amd.com> drm/amdgpu: Update SRIOV video codec caps Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx11: don't read registers in mqd init Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx12: don't read registers in mqd init Shree Ramamoorthy <s-ramamoorthy(a)ti.com> mfd: tps65219: Remove TPS65219_REG_TI_DEV_ID check Eder Zulian <ezulian(a)redhat.com> mfd: syscon: Add check for invalid resource size Prathamesh Shete <pshete(a)nvidia.com> pinctrl-tegra: Restore SFSEL bit when freeing pins Frediano Ziglio <frediano.ziglio(a)cloud.com> xen: Add support for XenServer 6.1 platform device Guangguan Wang <guangguan.wang(a)linux.alibaba.com> net/smc: use the correct ndev to find pnetid by pnetid table Mikulas Patocka <mpatocka(a)redhat.com> dm: restrict dm device size to 2^63-512 bytes Shashank Gupta <shashankg(a)marvell.com> crypto: octeontx2 - suppress auth failure screaming due to negative tests Masahiro Yamada <masahiroy(a)kernel.org> kconfig: do not clear SYMBOL_VALID when reading include/config/auto.conf Seyediman Seyedarab <imandevel(a)gmail.com> kbuild: fix argument parsing in scripts/config Yonghong Song <yonghong.song(a)linux.dev> bpf: Allow pre-ordering for bpf cgroup progs Rae Moar <rmoar(a)google.com> kunit: tool: Fix bug in parsing test plan Nícolas F. R. A. Prado <nfraprado(a)collabora.com> ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect Linus Walleij <linus.walleij(a)linaro.org> ASoC: pcm6240: Drop bogus code handling IRQ as GPIO Chenyuan Yang <chenyuan0y(a)gmail.com> ASoC: sma1307: Add NULL check in sma1307_setting_loaded() Sergio Perez Gonzalez <sperezglz(a)gmail.com> spi: spi-mux: Fix coverity issue, unchecked return value Gao Xiang <xiang(a)kernel.org> erofs: initialize decompression early Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for retimer Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Fix error handling inconsistencies in check() Alexandre Belloni <alexandre.belloni(a)bootlin.com> rtc: rv3032: fix EERD location Ilpo Järvinen <ij(a)kernel.org> tcp: reorganize tcp_in_ack_event() and tcp_count_delivered() Jan Kara <jack(a)suse.cz> jbd2: do not try to recover wiped journal Frank Li <Frank.Li(a)nxp.com> PCI: dwc: Use resource start as ioremap() input in dw_pcie_pme_turn_off() Mykyta Yatsenko <yatsenko(a)meta.com> bpf: Return prog btf_id without capable check Jiayuan Chen <jiayuan.chen(a)linux.dev> bpftool: Using the right format specifiers Alex Williamson <alex.williamson(a)redhat.com> vfio/pci: Handle INTx IRQ_NOTCONNECTED Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: st: ERASE does not change tape location Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: st: Tighten the page format heuristics with MODE SELECT Al Viro <viro(a)zeniv.linux.org.uk> hypfs_create_cpu_files(): add missing check for hypfs_mkdir() failure Christian Göttsche <cgzones(a)googlemail.com> ext4: reorder capability check last Alexandre Ghiti <alexghiti(a)rivosinc.com> riscv: Call secondary mmu notifier when flushing the tlb Jedrzej Jagielski <jedrzej.jagielski(a)intel.com> ixgbe: add support for thermal sensor event reception shantiprasad shettar <shantiprasad.shettar(a)broadcom.com> bnxt_en: Query FW parameters when the CAPS_CHANGE bit is set Jeff Chen <jeff.chen_1(a)nxp.com> wifi: mwifiex: Fix HT40 bandwidth issue. Carolina Jubran <cjubran(a)nvidia.com> net/mlx5: Preserve rate settings when creating a rate node Tiwei Bie <tiwei.btw(a)antgroup.com> um: Update min_low_pfn to match changes in uml_reserved Benjamin Berg <benjamin(a)sipsolutions.net> um: Store full CSGSFS and SS register from mcontext Nick Hu <nick.hu(a)sifive.com> clocksource/drivers/timer-riscv: Stop stimecmp when cpu hotplug Ming Lei <ming.lei(a)redhat.com> loop: move vfs_fsync() out of loop_update_dio() Heming Zhao <heming.zhao(a)suse.com> dlm: make tcp still work in multi-link env Heiko Carstens <hca(a)linux.ibm.com> s390/tlb: Use mm_has_pgste() instead of mm_alloc_pgste() Stanley Chu <yschu(a)nuvoton.com> i3c: master: svc: Fix missing STOP for master request Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: adjust drm_firmware_drivers_only() handling Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: don't free conflicting apertures for non-display devices Jing Zhou <Jing.Zhou(a)amd.com> drm/amd/display: Guard against setting dispclk low for dcn31x Flora Cui <flora.cui(a)amd.com> drm/amdgpu: release xcp_mgr on exit Chen Linxuan <chenlinxuan(a)uniontech.com> blk-cgroup: improve policy registration error handling Filipe Manana <fdmanana(a)suse.com> btrfs: send: return -ENAMETOOLONG when attempting a path that is too long Filipe Manana <fdmanana(a)suse.com> btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work() Filipe Manana <fdmanana(a)suse.com> btrfs: fix non-empty delayed iputs list on unmount due to async workers Qu Wenruo <wqu(a)suse.com> btrfs: run btrfs_error_commit_super() early Mark Harmstone <maharmstone(a)fb.com> btrfs: avoid linker error in btrfs_find_create_tree_block() Boris Burkov <boris(a)bur.io> btrfs: make btrfs_discard_workfn() block_group ref explicit Vitalii Mordan <mordan(a)ispras.ru> i2c: pxa: fix call balance of i2c->clk handling routines Shyam Sundar S K <Shyam-sundar.S-k(a)amd.com> i2c: amd-asf: Set cmd variable when encountering an error Stephan Gerhold <stephan.gerhold(a)kernkonzept.com> i2c: qup: Vote for interconnect bandwidth to DRAM Philip Redkin <me(a)rarity.fan> x86/mm: Check return value from memblock_phys_alloc_range() Mario Limonciello <mario.limonciello(a)amd.com> x86/amd_node: Add SMN offsets to exclusive region access Sohil Mehta <sohil.mehta(a)intel.com> x86/microcode: Update the Intel processor flag scan check Sohil Mehta <sohil.mehta(a)intel.com> x86/smpboot: Fix INIT delay assignment for extended Intel Families Ingo Molnar <mingo(a)kernel.org> x86/stackprotector/64: Only export __ref_stack_chk_guard on CONFIG_SMP Thomas Huth <thuth(a)redhat.com> x86/headers: Replace __ASSEMBLY__ with __ASSEMBLER__ in UAPI headers Thomas Huth <thuth(a)redhat.com> x86/headers: Replace __ASSEMBLY__ with __ASSEMBLER__ in non-UAPI headers Quan Zhou <quan.zhou(a)mediatek.com> wifi: mt76: mt7925: fix fails to enter low power mode in suspend state Quan Zhou <quan.zhou(a)mediatek.com> wifi: mt76: mt7925: Simplify HIF suspend handling to avoid suspend fail Ming Yen Hsieh <mingyen.hsieh(a)mediatek.com> wifi: mt76: mt7925: load the appropriate CLC data based on hardware type Benjamin Lin <benjamin-jw.lin(a)mediatek.com> wifi: mt76: mt7996: revise TXS size Rex Lu <rex.lu(a)mediatek.com> wifi: mt76: mt7996: fix SER reset trigger on WED reset Felix Fietkau <nbd(a)nbd.name> wifi: mt76: scan: set vif offchannel link for scanning/roc Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt7996: use the correct vif link for scanning/roc Felix Fietkau <nbd(a)nbd.name> wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2 Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt7996: implement driver specific get_txpower function Felix Fietkau <nbd(a)nbd.name> wifi: mt76: scan: fix setting tx_info fields Shayne Chen <shayne.chen(a)mediatek.com> wifi: mt76: Check link_conf pointer in mt76_connac_mcu_sta_basic_tlv() Eric Dumazet <edumazet(a)google.com> cgroup/rstat: avoid disabling irqs for O(num_cpu) Victor Skvortsov <victor.skvortsov(a)amd.com> drm/amdgpu: Skip pcie_replay_count sysfs creation for VF Erick Shepherd <erick.shepherd(a)ni.com> mmc: host: Wait for Vdd to settle on card power off Stefan Wahren <wahrenst(a)gmx.net> staging: vchiq_arm: Create keep-alive thread during probe Christian Brauner <brauner(a)kernel.org> pidfs: improve multi-threaded exec and premature thread-group leader exit polling Robert Richter <rrichter(a)amd.com> libnvdimm/labels: Fix divide error in nd_label_data_init() Nicolas Bretz <bretznic(a)gmail.com> ext4: on a remount, only log the ro or r/w state when it has changed Roger Pau Monne <roger.pau(a)citrix.com> xen/pci: Do not register devices with segments >= 0x10000 Roger Pau Monne <roger.pau(a)citrix.com> PCI: vmd: Disable MSI remapping bypass under Xen Jonathan Kim <jonathan.kim(a)amd.com> drm/amdkfd: set precise mem ops caps to disabled for gfx 11 and 12 Christian König <christian.koenig(a)amd.com> drm/amdgpu: use GFP_NOWAIT for memory allocations Christian König <christian.koenig(a)amd.com> drm/amdgpu: rework how isolation is enforced v2 Christian König <christian.koenig(a)amd.com> drm/amdgpu: rework how the cleaner shader is emitted v3 Flora Cui <flora.cui(a)amd.com> drm/amdgpu/discovery: check ip_discovery fw file available Trond Myklebust <trond.myklebust(a)hammerspace.com> pNFS/flexfiles: Report ENETDOWN as a connection error Mukesh Kumar Savaliya <quic_msavaliy(a)quicinc.com> i2c: qcom-geni: Update i2c frequency table to match hardware guidance Thippeswamy Havalige <thippeswamy.havalige(a)amd.com> PCI: xilinx-cpm: Add cpm_csr register mapping for CPM5_HOST1 variant Ian Rogers <irogers(a)google.com> tools/build: Don't pass test log files to linker ChunHao Lin <hau(a)realtek.com> r8169: disable RTL8126 ZRX-DC timeout Frank Li <Frank.Li(a)nxp.com> PCI: dwc: ep: Ensure proper iteration over outbound map windows Mark Zhang <markzhang(a)nvidia.com> net/mlx5e: Use right API to free bitmap memory Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Properly disable uaccess validation Ryo Takakura <ryotkkr98(a)gmail.com> lockdep: Fix wait context check on softirq for PREEMPT_RT Jing Su <jingsusu(a)didiglobal.com> dql: Fix dql->limit value when reset. Conor Dooley <conor.dooley(a)microchip.com> RISC-V: add vector extension validation checks Pedro Nishiyama <nishiyama.pedro(a)gmail.com> Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken Sean Wang <sean.wang(a)mediatek.com> Bluetooth: btmtksdio: Prevent enabling interrupts after IRQ handler removal Alice Guo <alice.guo(a)nxp.com> thermal/drivers/qoriq: Power down TMU on system suspend Nícolas F. R. A. Prado <nfraprado(a)collabora.com> thermal/drivers/mediatek/lvts: Start sensor interrupts disabled Hans-Frieder Vogt <hfdevel(a)gmx.net> net: tn40xx: create swnode for mdio and aqr105 phy and add to mdiobus Hans-Frieder Vogt <hfdevel(a)gmx.net> net: tn40xx: add pci-id of the aqr105-based Tehuti TN4010 cards Daniel Hsu <d486250(a)gmail.com> mctp: Fix incorrect tx flow invalidation condition in mctp-i2c Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> ASoC: codecs: wsa883x: Correct VI sense channel mask Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> ASoC: codecs: wsa884x: Correct VI sense channel mask Luis de Arquer <luis.dearquer(a)inertim.com> spi-rockchip: Fix register out of bounds access Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: rpcbind should never reset the port to the value '0' Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: rpc_clnt_set_transport() must not change the autobind setting Trond Myklebust <trond.myklebust(a)hammerspace.com> NFSv4: Treat ENETUNREACH errors as fatal for state recovery Pali Rohár <pali(a)kernel.org> cifs: Check if server supports reparse points before using them Pali Rohár <pali(a)kernel.org> cifs: Fix getting DACL-only xattr system.cifs_acl and system.smb3_acl Pali Rohár <pali(a)kernel.org> cifs: Fix establishing NetBIOS session for SMB2+ connection Namjae Jeon <linkinjeon(a)kernel.org> cifs: add validation check for the fields in smb_aces Pali Rohár <pali(a)kernel.org> cifs: Set default Netbios RFC1001 server name to hostname in UNC Zsolt Kajtar <soci(a)c64.rulez.org> fbdev: core: tileblit: Implement missing margin clearing for tileblit Zsolt Kajtar <soci(a)c64.rulez.org> fbcon: Use correct erase colour for clearing in fbcon Shixiong Ou <oushixiong(a)kylinos.cn> fbdev: fsl-diu-fb: add missing device_remove_file() Samuel Holland <samuel.holland(a)sifive.com> riscv: Allow NOMMU kernels to access all of RAM Tudor Ambarus <tudor.ambarus(a)linaro.org> mailbox: use error ret code of of_parse_phandle_with_args() Sudeep Holla <sudeep.holla(a)arm.com> mailbox: pcc: Use acpi_os_ioremap() instead of ioremap() Jonathan McDowell <noodles(a)meta.com> tpm: Convert warn to dbg in tpm2_start_auth_session() Diogo Ivo <diogo.ivo(a)siemens.com> ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> tracing: Mark binary printing functions with __printf() attribute Steven Rostedt <rostedt(a)goodmis.org> ring-buffer: Use kaslr address instead of text delta Yi Liu <yi.l.liu(a)intel.com> iommufd: Extend IOMMU_GET_HW_INFO to report PASID capability Jinqian Yang <yangjinqian1(a)huawei.com> arm64: Add support for HIP09 Spectre-BHB mitigation Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: Don't allow waiting for exiting tasks Trond Myklebust <trond.myklebust(a)hammerspace.com> NFS: Don't allow waiting for exiting tasks Trond Myklebust <trond.myklebust(a)hammerspace.com> NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() Pavel Begunkov <asml.silence(a)gmail.com> io_uring/msg: initialise msg request opcode Sungjong Seo <sj1557.seo(a)samsung.com> exfat: call bh_read in get_block only when necessary Matt Johnston <matt(a)codeconstruct.com.au> fuse: Return EPERM rather than ENOSYS from link() Wang Zhaolong <wangzhaolong1(a)huawei.com> smb: client: Store original IO parameters and prevent zero IO sizes Pali Rohár <pali(a)kernel.org> cifs: Fix negotiate retry functionality Pali Rohár <pali(a)kernel.org> cifs: Fix access_flags_to_smbopen_mode Pali Rohár <pali(a)kernel.org> cifs: Fix querying and creating MF symlinks over SMB1 Pali Rohár <pali(a)kernel.org> cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES Anthony Krowiak <akrowiak(a)linux.ibm.com> s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log Xin Li (Intel) <xin(a)zytor.com> x86/fred: Fix system hang during S4 resume with FRED enabled Daniel Gomez <da.gomez(a)samsung.com> kconfig: merge_config: use an empty file as initfile Haoran Jiang <jianghaoran(a)kylinos.cn> samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora Brandon Kammerdiener <brandon.kammerdiener(a)intel.com> bpf: fix possible endless loop in BPF map iteration Pavel Begunkov <asml.silence(a)gmail.com> io_uring: don't duplicate flushing in io_req_post_cqe Darrick J. Wong <djwong(a)kernel.org> block: hoist block size validation code to a separate function Darrick J. Wong <djwong(a)kernel.org> block: fix race between set_blocksize and read paths Ihor Solodrai <ihor.solodrai(a)linux.dev> selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure Felix Kuehling <felix.kuehling(a)amd.com> drm/amdgpu: Allow P2P access through XGMI Nicholas Susanto <nsusanto(a)amd.com> drm/amd/display: Enable urgent latency adjustment on DCN35 Davidlohr Bueso <dave(a)stgolabs.net> fs/ext4: use sleeping version of sb_find_get_block() Davidlohr Bueso <dave(a)stgolabs.net> fs/jbd2: use sleeping version of __find_get_block() Davidlohr Bueso <dave(a)stgolabs.net> fs/ocfs2: use sleeping version of __find_get_block() Davidlohr Bueso <dave(a)stgolabs.net> fs/buffer: use sleeping version of __find_get_block() Davidlohr Bueso <dave(a)stgolabs.net> fs/buffer: introduce sleeping flavors for pagecache lookups Davidlohr Bueso <dave(a)stgolabs.net> fs/buffer: split locking for pagecache lookups Frederick Lawler <fred(a)cloudflare.com> ima: process_measurement() needlessly takes inode_lock() on MAY_READ Balbir Singh <balbirs(a)nvidia.com> dma-mapping: Fix warning reported for missing prototype Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpi3mr: Add level check to control event logging Dongli Zhang <dongli.zhang(a)oracle.com> vhost-scsi: protect vq->log_used with vq->mutex Stefano Garzarella <sgarzare(a)redhat.com> vhost_task: fix vhost_task_create() documentation gaoxu <gaoxu2(a)honor.com> cgroup: Fix compilation issue due to cgroup_mutex not being exported David Sterba <dsterba(a)suse.com> btrfs: tree-checker: adjust error code for header level check Marek Szyprowski <m.szyprowski(a)samsung.com> dma-mapping: avoid potential unused data compilation warning Hans de Goede <hdegoede(a)redhat.com> mei: vsc: Use struct vsc_tp_packet as vsc-tp tx_buf and rx_buf type Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com> intel_th: avoid using deprecated page->mapping, index fields Balbir Singh <balbirs(a)nvidia.com> dma/mapping.c: dev_dbg support for dma_addressing_limited Zhongqiu Han <quic_zhonhan(a)quicinc.com> virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN Manish Pandey <quic_mapa(a)quicinc.com> scsi: ufs: Introduce quirk to extend PA_HIBERN8TIME for UFS devices Dmitry Bogdanov <d.bogdanov(a)yadro.com> scsi: target: iscsi: Fix timeout on deleted connection Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> nvmem: qfprom: switch to 4-byte aligned reads Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> nvmem: core: update raw_len if the bit reading is required Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> nvmem: core: verify cell's raw_len Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> nvmem: core: fix bit offsets of more than one byte Heiko Stuebner <heiko(a)sntech.de> nvmem: rockchip-otp: add rk3576 variant data Heiko Stuebner <heiko(a)sntech.de> nvmem: rockchip-otp: Move read-offset into variant-data Pengyu Luo <mitltlatltl(a)gmail.com> cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist Damien Le Moal <dlemoal(a)kernel.org> nvmet: pci-epf: clear completion queue IRQ flag on delete Damien Le Moal <dlemoal(a)kernel.org> nvmet: pci-epf: Keep completion queues mapped Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Move IRQ request in probe John Olender <john.olender(a)gmail.com> drm/amd/display: Defer BW-optimization-blocked DRR adjustments Zhongwei Zhang <Zhongwei.Zhang(a)amd.com> drm/amd/display: Correct timing_adjust_pending flag setting. Danny Wang <danny.wang(a)amd.com> drm/amd/display: Do not enable replay when vtotal update is pending. ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 2 + Documentation/driver-api/pps.rst | 3 +- Documentation/driver-api/serial/driver.rst | 2 +- Documentation/hwmon/dell-smm-hwmon.rst | 14 +- Documentation/networking/net_cachelines/snmp.rst | 1 + Makefile | 8 +- arch/arm/boot/dts/nvidia/tegra114.dtsi | 2 +- arch/arm/mach-at91/pm.c | 21 +- .../boot/dts/allwinner/sun50i-h6-beelink-gs1.dts | 38 +- .../boot/dts/allwinner/sun50i-h6-orangepi-3.dts | 14 +- .../boot/dts/allwinner/sun50i-h6-orangepi.dtsi | 22 +- arch/arm64/boot/dts/marvell/armada-3720-uDPU.dtsi | 8 +- arch/arm64/boot/dts/nvidia/tegra210-p2597.dtsi | 2 +- .../dts/nvidia/tegra234-p3740-0002+p3701-0008.dts | 10 + arch/arm64/boot/dts/xilinx/zynqmp-clk-ccf.dtsi | 15 +- arch/arm64/include/asm/cputype.h | 2 + arch/arm64/include/asm/pgtable.h | 27 +- arch/arm64/kernel/proton-pack.c | 1 + arch/arm64/net/bpf_jit_comp.c | 6 +- arch/loongarch/kernel/Makefile | 8 +- arch/loongarch/kvm/Makefile | 2 +- arch/mips/include/asm/ftrace.h | 16 + arch/mips/kernel/pm-cps.c | 30 +- arch/powerpc/include/asm/mmzone.h | 1 + arch/powerpc/kernel/prom_init.c | 4 +- arch/powerpc/mm/book3s64/radix_pgtable.c | 3 +- arch/powerpc/mm/numa.c | 2 +- arch/powerpc/perf/core-book3s.c | 20 + arch/powerpc/perf/isa207-common.c | 4 +- arch/powerpc/platforms/pseries/iommu.c | 139 ++++-- arch/riscv/include/asm/cpufeature.h | 3 + arch/riscv/include/asm/page.h | 12 +- arch/riscv/include/asm/pgtable.h | 2 +- arch/riscv/kernel/Makefile | 4 +- arch/riscv/kernel/cpufeature.c | 60 ++- arch/riscv/mm/tlbflush.c | 37 +- arch/s390/hypfs/hypfs_diag_fs.c | 2 + arch/s390/include/asm/tlb.h | 2 +- arch/s390/kernel/crash_dump.c | 62 +-- arch/um/kernel/mem.c | 1 + arch/x86/Kconfig | 3 +- arch/x86/boot/boot.h | 4 +- arch/x86/boot/genimage.sh | 5 +- arch/x86/entry/entry.S | 2 +- arch/x86/entry/vdso/extable.h | 2 +- arch/x86/events/amd/ibs.c | 20 +- arch/x86/events/intel/ds.c | 9 +- arch/x86/include/asm/alternative.h | 6 +- arch/x86/include/asm/asm.h | 10 +- arch/x86/include/asm/boot.h | 2 +- arch/x86/include/asm/bug.h | 5 +- arch/x86/include/asm/cfi.h | 11 + arch/x86/include/asm/cpufeature.h | 4 +- arch/x86/include/asm/cpumask.h | 4 +- arch/x86/include/asm/current.h | 4 +- arch/x86/include/asm/desc_defs.h | 4 +- arch/x86/include/asm/dwarf2.h | 2 +- arch/x86/include/asm/fixmap.h | 4 +- arch/x86/include/asm/frame.h | 10 +- arch/x86/include/asm/fred.h | 4 +- arch/x86/include/asm/fsgsbase.h | 4 +- arch/x86/include/asm/ftrace.h | 8 +- arch/x86/include/asm/hw_irq.h | 4 +- arch/x86/include/asm/ibt.h | 16 +- arch/x86/include/asm/idtentry.h | 6 +- arch/x86/include/asm/inst.h | 2 +- arch/x86/include/asm/intel-family.h | 1 + arch/x86/include/asm/irqflags.h | 10 +- arch/x86/include/asm/jump_label.h | 4 +- arch/x86/include/asm/kasan.h | 2 +- arch/x86/include/asm/kexec.h | 4 +- arch/x86/include/asm/linkage.h | 6 +- arch/x86/include/asm/mem_encrypt.h | 4 +- arch/x86/include/asm/msr.h | 4 +- arch/x86/include/asm/nmi.h | 2 + arch/x86/include/asm/nops.h | 2 +- arch/x86/include/asm/nospec-branch.h | 6 +- arch/x86/include/asm/orc_types.h | 4 +- arch/x86/include/asm/page.h | 4 +- arch/x86/include/asm/page_32.h | 4 +- arch/x86/include/asm/page_32_types.h | 4 +- arch/x86/include/asm/page_64.h | 4 +- arch/x86/include/asm/page_64_types.h | 2 +- arch/x86/include/asm/page_types.h | 4 +- arch/x86/include/asm/paravirt.h | 14 +- arch/x86/include/asm/paravirt_types.h | 4 +- arch/x86/include/asm/percpu.h | 32 +- arch/x86/include/asm/perf_event.h | 1 + arch/x86/include/asm/pgtable-2level_types.h | 4 +- arch/x86/include/asm/pgtable-3level_types.h | 4 +- arch/x86/include/asm/pgtable-invert.h | 4 +- arch/x86/include/asm/pgtable.h | 12 +- arch/x86/include/asm/pgtable_32.h | 4 +- arch/x86/include/asm/pgtable_32_areas.h | 2 +- arch/x86/include/asm/pgtable_64.h | 6 +- arch/x86/include/asm/pgtable_64_types.h | 4 +- arch/x86/include/asm/pgtable_types.h | 10 +- arch/x86/include/asm/prom.h | 4 +- arch/x86/include/asm/pti.h | 4 +- arch/x86/include/asm/ptrace.h | 4 +- arch/x86/include/asm/purgatory.h | 4 +- arch/x86/include/asm/pvclock-abi.h | 4 +- arch/x86/include/asm/realmode.h | 4 +- arch/x86/include/asm/segment.h | 8 +- arch/x86/include/asm/setup.h | 6 +- arch/x86/include/asm/setup_data.h | 4 +- arch/x86/include/asm/sev-common.h | 2 +- arch/x86/include/asm/shared/tdx.h | 4 +- arch/x86/include/asm/shstk.h | 4 +- arch/x86/include/asm/signal.h | 8 +- arch/x86/include/asm/smap.h | 6 +- arch/x86/include/asm/smp.h | 4 +- arch/x86/include/asm/tdx.h | 4 +- arch/x86/include/asm/thread_info.h | 12 +- arch/x86/include/asm/unwind_hints.h | 4 +- arch/x86/include/asm/vdso/getrandom.h | 4 +- arch/x86/include/asm/vdso/gettimeofday.h | 4 +- arch/x86/include/asm/vdso/processor.h | 4 +- arch/x86/include/asm/vdso/vsyscall.h | 4 +- arch/x86/include/asm/xen/interface.h | 10 +- arch/x86/include/asm/xen/interface_32.h | 4 +- arch/x86/include/asm/xen/interface_64.h | 4 +- arch/x86/include/uapi/asm/bootparam.h | 4 +- arch/x86/include/uapi/asm/e820.h | 4 +- arch/x86/include/uapi/asm/ldt.h | 4 +- arch/x86/include/uapi/asm/msr.h | 4 +- arch/x86/include/uapi/asm/ptrace-abi.h | 6 +- arch/x86/include/uapi/asm/ptrace.h | 4 +- arch/x86/include/uapi/asm/setup_data.h | 4 +- arch/x86/include/uapi/asm/signal.h | 8 +- arch/x86/kernel/Makefile | 2 + arch/x86/kernel/alternative.c | 30 ++ arch/x86/kernel/amd_node.c | 41 ++ arch/x86/kernel/cfi.c | 22 +- arch/x86/kernel/cpu/bugs.c | 10 +- arch/x86/kernel/cpu/microcode/intel.c | 2 +- arch/x86/kernel/nmi.c | 42 ++ arch/x86/kernel/paravirt.c | 17 +- arch/x86/kernel/reboot.c | 10 +- arch/x86/kernel/smpboot.c | 9 +- arch/x86/kernel/traps.c | 82 +++- arch/x86/math-emu/control_w.h | 2 +- arch/x86/math-emu/exception.h | 6 +- arch/x86/math-emu/fpu_emu.h | 6 +- arch/x86/math-emu/status_w.h | 6 +- arch/x86/mm/init.c | 9 +- arch/x86/mm/init_64.c | 15 +- arch/x86/mm/kaslr.c | 10 +- arch/x86/mm/pgtable.c | 27 +- arch/x86/power/cpu.c | 14 + arch/x86/realmode/rm/realmode.h | 4 +- arch/x86/realmode/rm/wakeup.h | 2 +- arch/x86/um/os-Linux/mcontext.c | 3 +- block/badblocks.c | 5 +- block/bdev.c | 50 ++- block/blk-cgroup.c | 30 +- block/blk-settings.c | 5 + block/blk-sysfs.c | 102 +++-- block/blk-throttle.c | 15 +- block/blk-zoned.c | 5 +- block/blk.h | 3 +- block/bounce.c | 2 - block/fops.c | 16 + block/ioctl.c | 6 + crypto/ahash.c | 4 + crypto/algif_hash.c | 4 - crypto/lzo-rle.c | 2 +- crypto/lzo.c | 2 +- crypto/skcipher.c | 1 + drivers/accel/amdxdna/aie2_ctx.c | 37 +- drivers/accel/amdxdna/amdxdna_ctx.c | 2 + drivers/accel/amdxdna/amdxdna_ctx.h | 3 + drivers/accel/amdxdna/amdxdna_mailbox.c | 17 +- drivers/accel/qaic/qaic_drv.c | 2 +- drivers/acpi/Kconfig | 2 +- drivers/acpi/acpi_pnp.c | 2 + drivers/acpi/hed.c | 7 +- drivers/auxdisplay/charlcd.c | 5 +- drivers/auxdisplay/charlcd.h | 5 +- drivers/auxdisplay/hd44780.c | 2 +- drivers/auxdisplay/lcd2s.c | 2 +- drivers/auxdisplay/panel.c | 2 +- drivers/base/faux.c | 15 +- drivers/base/power/main.c | 7 + drivers/block/loop.c | 25 +- drivers/block/null_blk/main.c | 90 ++-- drivers/block/ublk_drv.c | 53 ++- drivers/bluetooth/btmtksdio.c | 15 +- drivers/bluetooth/btusb.c | 98 ++--- drivers/char/tpm/tpm2-sessions.c | 2 +- drivers/clk/clk-s2mps11.c | 3 +- drivers/clk/imx/clk-imx8mp.c | 151 +++++++ drivers/clk/qcom/Kconfig | 2 +- drivers/clk/qcom/camcc-sm8250.c | 56 +-- drivers/clk/qcom/clk-alpha-pll.c | 52 ++- drivers/clk/qcom/lpassaudiocc-sc7280.c | 23 +- drivers/clk/renesas/rzg2l-cpg.c | 106 ++--- drivers/clk/sunxi-ng/ccu-sun20i-d1.c | 42 +- drivers/clk/sunxi-ng/ccu-sun50i-h616.c | 36 +- drivers/clk/sunxi-ng/ccu_mp.h | 22 + drivers/clocksource/mips-gic-timer.c | 6 +- drivers/clocksource/timer-riscv.c | 6 + drivers/cpufreq/amd-pstate.c | 1 - drivers/cpufreq/cpufreq-dt-platdev.c | 1 + drivers/cpufreq/tegra186-cpufreq.c | 7 + drivers/cpuidle/governors/menu.c | 13 +- .../crypto/marvell/octeontx2/otx2_cptvf_reqmgr.c | 7 +- drivers/crypto/mxs-dcp.c | 8 +- drivers/dma/fsl-edma-main.c | 2 +- drivers/dma/idxd/cdev.c | 9 + drivers/dma/ti/k3-udma-glue.c | 15 +- drivers/dpll/dpll_core.c | 5 +- drivers/edac/ie31200_edac.c | 28 +- drivers/firmware/arm_ffa/bus.c | 1 + drivers/firmware/arm_ffa/driver.c | 12 + drivers/firmware/arm_scmi/bus.c | 19 +- drivers/firmware/xilinx/zynqmp.c | 6 +- drivers/fpga/altera-cvp.c | 2 +- drivers/gpio/gpiolib.c | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu.h | 13 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.h | 10 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 102 ++--- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 18 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 143 ++++++- drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 31 +- drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c | 30 +- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 + drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 54 +-- drivers/gpu/drm/amd/amdgpu/amdgpu_ih.h | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_job.c | 16 +- drivers/gpu/drm/amd/amdgpu/amdgpu_mes.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 38 +- drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 7 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_ras_eeprom.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_sync.c | 30 +- drivers/gpu/drm/amd/amdgpu/amdgpu_sync.h | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_umc.c | 42 ++ drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c | 17 +- drivers/gpu/drm/amd/amdgpu/amdgpu_virt.h | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 41 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.h | 1 - drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 14 + .../gpu/drm/amd/amdgpu/gfx_v10_0_cleaner_shader.h | 35 ++ .../drm/amd/amdgpu/gfx_v10_1_10_cleaner_shader.asm | 126 ++++++ drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 47 +- drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 48 ++- drivers/gpu/drm/amd/amdgpu/gfxhub_v1_0.c | 10 +- drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c | 1 - drivers/gpu/drm/amd/amdgpu/jpeg_v4_0_3.c | 2 +- drivers/gpu/drm/amd/amdgpu/jpeg_v4_0_3.h | 1 + drivers/gpu/drm/amd/amdgpu/jpeg_v5_0_1.c | 1 + drivers/gpu/drm/amd/amdgpu/mes_v11_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/mmhub_v1_7.c | 25 ++ drivers/gpu/drm/amd/amdgpu/mmhub_v1_8.c | 27 ++ drivers/gpu/drm/amd/amdgpu/mmhub_v9_4.c | 31 ++ drivers/gpu/drm/amd/amdgpu/nv.c | 16 +- drivers/gpu/drm/amd/amdgpu/soc15.c | 8 +- drivers/gpu/drm/amd/amdgpu/soc21.c | 10 +- drivers/gpu/drm/amd/amdgpu/vcn_v4_0_3.c | 14 +- drivers/gpu/drm/amd/amdgpu/vcn_v4_0_3.h | 9 + drivers/gpu/drm/amd/amdgpu/vcn_v4_0_5.c | 474 +++++++++++---------- drivers/gpu/drm/amd/amdgpu/vcn_v5_0_1.c | 48 ++- drivers/gpu/drm/amd/amdkfd/cik_event_interrupt.c | 18 +- drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 25 +- drivers/gpu/drm/amd/amdkfd/kfd_debug.c | 14 +- drivers/gpu/drm/amd/amdkfd/kfd_device.c | 2 +- .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 126 ++---- .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 69 ++- .../drm/amd/amdkfd/kfd_device_queue_manager_v10.c | 43 +- .../drm/amd/amdkfd/kfd_device_queue_manager_v11.c | 45 +- .../drm/amd/amdkfd/kfd_device_queue_manager_v12.c | 45 +- .../drm/amd/amdkfd/kfd_device_queue_manager_v9.c | 38 +- .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 77 ++-- drivers/gpu/drm/amd/amdkfd/kfd_events.c | 43 +- drivers/gpu/drm/amd/amdkfd/kfd_int_process_v11.c | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_int_process_v9.c | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_packet_manager_v9.c | 4 +- drivers/gpu/drm/amd/amdkfd/kfd_packet_manager_vi.c | 3 +- drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 11 +- drivers/gpu/drm/amd/amdkfd/kfd_process.c | 137 +++--- .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 10 +- drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 21 +- drivers/gpu/drm/amd/amdkfd/kfd_topology.c | 23 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 41 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h | 2 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 2 +- .../amd/display/amdgpu_dm/amdgpu_dm_mst_types.c | 6 +- drivers/gpu/drm/amd/display/dc/basics/dc_common.c | 3 +- .../gpu/drm/amd/display/dc/bios/command_table2.c | 9 - .../amd/display/dc/bios/command_table_helper2.c | 3 +- .../amd/display/dc/clk_mgr/dcn315/dcn315_clk_mgr.c | 22 +- .../amd/display/dc/clk_mgr/dcn316/dcn316_clk_mgr.c | 15 +- .../amd/display/dc/clk_mgr/dcn35/dcn35_clk_mgr.c | 13 +- .../amd/display/dc/clk_mgr/dcn401/dcn401_clk_mgr.c | 2 + drivers/gpu/drm/amd/display/dc/core/dc.c | 22 +- .../gpu/drm/amd/display/dc/core/dc_hw_sequencer.c | 21 +- drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 71 ++- drivers/gpu/drm/amd/display/dc/dc_dmub_srv.c | 50 +-- drivers/gpu/drm/amd/display/dc/dc_dp_types.h | 12 + drivers/gpu/drm/amd/display/dc/dc_hw_types.h | 5 +- drivers/gpu/drm/amd/display/dc/dc_types.h | 7 + .../drm/amd/display/dc/dce/dce_stream_encoder.c | 3 +- drivers/gpu/drm/amd/display/dc/dce/dmub_psr.c | 4 + .../display/dc/dio/dcn10/dcn10_stream_encoder.c | 3 +- .../dc/dio/dcn401/dcn401_dio_stream_encoder.c | 3 +- .../gpu/drm/amd/display/dc/dml/dcn35/dcn35_fpu.c | 6 +- .../gpu/drm/amd/display/dc/dml/dcn351/dcn351_fpu.c | 1 + .../drm/amd/display/dc/dml2/dml21/dml21_utils.c | 1 - .../drm/amd/display/dc/dml2/dml21/dml21_wrapper.c | 22 +- .../amd/display/dc/dml2/dml21/inc/dml_top_types.h | 1 + .../dc/dml2/dml21/src/dml2_core/dml2_core_dcn4.c | 30 +- .../dml21/src/dml2_core/dml2_core_dcn4_calcs.c | 33 +- .../dml21/src/dml2_core/dml2_core_shared_types.h | 5 + .../dml2/dml21/src/dml2_pmo/dml2_pmo_dcn4_fams2.c | 21 + .../dc/dml2/dml21/src/dml2_top/dml2_top_soc15.c | 8 - drivers/gpu/drm/amd/display/dc/dml2/dml2_wrapper.h | 1 + .../gpu/drm/amd/display/dc/dpp/dcn30/dcn30_dpp.c | 11 +- .../dc/hpo/dcn31/dcn31_hpo_dp_stream_encoder.c | 3 +- .../drm/amd/display/dc/hwss/dce110/dce110_hwseq.c | 10 +- .../drm/amd/display/dc/hwss/dcn10/dcn10_hwseq.c | 55 +-- .../drm/amd/display/dc/hwss/dcn20/dcn20_hwseq.c | 22 +- .../drm/amd/display/dc/hwss/dcn31/dcn31_hwseq.c | 4 +- .../drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c | 3 +- .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 92 ++-- .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.h | 3 + .../drm/amd/display/dc/hwss/dcn401/dcn401_init.c | 2 +- drivers/gpu/drm/amd/display/dc/hwss/hw_sequencer.h | 6 + drivers/gpu/drm/amd/display/dc/inc/core_types.h | 2 +- .../drm/amd/display/dc/inc/hw/clk_mgr_internal.h | 1 + drivers/gpu/drm/amd/display/dc/inc/hw/dpp.h | 6 +- drivers/gpu/drm/amd/display/dc/inc/resource.h | 2 + .../display/dc/link/protocols/link_dp_capability.c | 42 +- .../amd/display/dc/link/protocols/link_dp_phy.c | 8 +- .../display/dc/link/protocols/link_dp_training.c | 5 +- .../dc/link/protocols/link_dp_training_8b_10b.c | 7 +- .../dc/link/protocols/link_edp_panel_control.c | 25 +- .../display/dc/resource/dcn315/dcn315_resource.c | 40 +- drivers/gpu/drm/amd/display/dc/spl/dc_spl.c | 87 ++-- drivers/gpu/drm/amd/display/dc/spl/dc_spl_types.h | 12 +- .../gpu/drm/amd/display/dc/spl/spl_fixpt31_32.c | 2 +- .../gpu/drm/amd/display/dc/spl/spl_fixpt31_32.h | 4 +- drivers/gpu/drm/amd/display/dmub/inc/dmub_cmd.h | 6 + drivers/gpu/drm/amd/display/dmub/src/dmub_dcn31.c | 17 +- drivers/gpu/drm/amd/display/dmub/src/dmub_dcn35.c | 4 +- drivers/gpu/drm/amd/display/dmub/src/dmub_dcn401.c | 47 +- drivers/gpu/drm/amd/display/dmub/src/dmub_dcn401.h | 3 +- .../amd/display/modules/info_packet/info_packet.c | 4 +- .../include/asic_reg/mmhub/mmhub_9_4_1_offset.h | 32 ++ .../include/asic_reg/mmhub/mmhub_9_4_1_sh_mask.h | 48 +++ drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 1 + .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c | 5 +- drivers/gpu/drm/ast/ast_main.c | 30 +- drivers/gpu/drm/ast/ast_mode.c | 10 +- drivers/gpu/drm/bridge/adv7511/adv7511_audio.c | 2 + drivers/gpu/drm/drm_atomic_helper.c | 28 ++ drivers/gpu/drm/drm_buddy.c | 5 +- drivers/gpu/drm/drm_edid.c | 1 + drivers/gpu/drm/drm_gem.c | 4 +- drivers/gpu/drm/i915/display/intel_dp_mst.c | 3 +- drivers/gpu/drm/mediatek/mtk_dpi.c | 5 +- drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.c | 32 ++ drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.h | 2 + drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 7 +- drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c | 2 +- drivers/gpu/drm/panel/panel-edp.c | 1 + drivers/gpu/drm/rockchip/rockchip_drm_vop2.c | 40 +- drivers/gpu/drm/ttm/ttm_bo.c | 3 +- drivers/gpu/drm/v3d/v3d_drv.c | 25 +- drivers/gpu/drm/virtio/virtgpu_drv.c | 9 + drivers/gpu/drm/xe/display/xe_display.c | 3 +- drivers/gpu/drm/xe/xe_bo.c | 22 + drivers/gpu/drm/xe/xe_debugfs.c | 3 +- drivers/gpu/drm/xe/xe_device.c | 10 +- drivers/gpu/drm/xe/xe_drm_client.c | 8 + drivers/gpu/drm/xe/xe_gen_wa_oob.c | 6 +- drivers/gpu/drm/xe/xe_gt.c | 3 + drivers/gpu/drm/xe/xe_gt_idle.c | 23 +- drivers/gpu/drm/xe/xe_gt_idle.h | 1 + drivers/gpu/drm/xe/xe_gt_idle_types.h | 3 + drivers/gpu/drm/xe/xe_gt_sriov_pf.c | 49 ++- drivers/gpu/drm/xe/xe_gt_sriov_pf_config.c | 66 ++- drivers/gpu/drm/xe/xe_gt_sriov_pf_config.h | 1 + drivers/gpu/drm/xe/xe_gt_sriov_pf_types.h | 10 + drivers/gpu/drm/xe/xe_gt_sriov_vf.c | 12 +- drivers/gpu/drm/xe/xe_gt_tlb_invalidation.c | 22 + drivers/gpu/drm/xe/xe_gt_tlb_invalidation.h | 2 + drivers/gpu/drm/xe/xe_guc_log.c | 8 +- drivers/gpu/drm/xe/xe_guc_pc.c | 22 +- drivers/gpu/drm/xe/xe_guc_relay.c | 2 +- drivers/gpu/drm/xe/xe_mmio.c | 10 +- drivers/gpu/drm/xe/xe_oa.c | 1 + drivers/gpu/drm/xe/xe_pci.c | 37 +- drivers/gpu/drm/xe/xe_pci_sriov.c | 51 +++ drivers/gpu/drm/xe/xe_pci_types.h | 1 + drivers/gpu/drm/xe/xe_pt.c | 14 + drivers/gpu/drm/xe/xe_pt.h | 3 + drivers/gpu/drm/xe/xe_sa.c | 3 +- drivers/gpu/drm/xe/xe_tile.c | 12 +- drivers/gpu/drm/xe/xe_tile.h | 1 + drivers/gpu/drm/xe/xe_ttm_stolen_mgr.c | 17 +- drivers/gpu/drm/xe/xe_ttm_stolen_mgr.h | 2 +- drivers/gpu/drm/xe/xe_vm.c | 32 ++ drivers/hid/Kconfig | 1 + drivers/hid/usbhid/usbkbd.c | 2 +- drivers/hwmon/acpi_power_meter.c | 8 +- drivers/hwmon/dell-smm-hwmon.c | 5 +- drivers/hwmon/gpio-fan.c | 16 +- drivers/hwmon/xgene-hwmon.c | 2 +- drivers/hwtracing/coresight/coresight-core.c | 2 +- drivers/hwtracing/coresight/coresight-etb10.c | 26 +- drivers/hwtracing/coresight/coresight-trace-id.c | 22 +- drivers/hwtracing/intel_th/Kconfig | 1 + drivers/hwtracing/intel_th/msu.c | 31 +- drivers/i2c/busses/i2c-amd-asf-plat.c | 2 +- drivers/i2c/busses/i2c-pxa.c | 5 +- drivers/i2c/busses/i2c-qcom-geni.c | 6 +- drivers/i2c/busses/i2c-qup.c | 36 ++ drivers/i3c/master/svc-i3c-master.c | 4 + drivers/iio/accel/fxls8962af-core.c | 7 +- drivers/iio/adc/ad7606.c | 10 + drivers/iio/adc/ad7944.c | 16 +- drivers/iio/adc/qcom-spmi-iadc.c | 4 +- drivers/iio/dac/ad3552r-hs.c | 29 +- drivers/iio/dac/ad3552r-hs.h | 8 + drivers/iio/dac/adi-axi-dac.c | 22 +- drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 7 +- drivers/infiniband/core/umem.c | 36 +- drivers/infiniband/core/uverbs_cmd.c | 144 ++++--- drivers/infiniband/core/verbs.c | 11 +- drivers/input/joystick/xpad.c | 3 + drivers/input/rmi4/rmi_f34.c | 133 +++--- drivers/iommu/amd/io_pgtable_v2.c | 2 +- drivers/iommu/dma-iommu.c | 28 +- drivers/iommu/intel/iommu.c | 37 +- drivers/iommu/intel/svm.c | 43 ++ drivers/iommu/iommu-priv.h | 2 + drivers/iommu/iommu.c | 2 +- drivers/iommu/iommufd/device.c | 34 +- drivers/iommu/iommufd/hw_pagetable.c | 3 + drivers/iommu/of_iommu.c | 6 +- drivers/irqchip/irq-riscv-aplic-direct.c | 24 +- drivers/irqchip/irq-riscv-imsic-early.c | 8 +- drivers/irqchip/irq-riscv-imsic-platform.c | 16 +- drivers/irqchip/irq-riscv-imsic-state.c | 96 +++-- drivers/irqchip/irq-riscv-imsic-state.h | 7 +- drivers/leds/Kconfig | 1 + drivers/leds/leds-st1202.c | 4 +- drivers/leds/rgb/leds-pwm-multicolor.c | 5 +- drivers/leds/trigger/ledtrig-netdev.c | 16 +- drivers/mailbox/mailbox.c | 7 +- drivers/mailbox/pcc.c | 8 +- drivers/md/dm-cache-target.c | 24 ++ drivers/md/dm-table.c | 4 + drivers/md/dm-vdo/indexer/index-layout.c | 5 +- drivers/md/dm-vdo/io-submitter.c | 6 +- drivers/md/dm-vdo/io-submitter.h | 18 +- drivers/md/dm-vdo/types.h | 3 + drivers/md/dm-vdo/vdo.c | 11 +- drivers/md/dm-vdo/vio.c | 36 +- drivers/md/dm-vdo/vio.h | 2 + drivers/md/dm.c | 8 +- drivers/media/cec/core/cec-pin.c | 11 +- drivers/media/i2c/adv7180.c | 34 +- drivers/media/i2c/imx219.c | 2 +- drivers/media/i2c/imx335.c | 21 +- drivers/media/i2c/ov2740.c | 4 +- drivers/media/i2c/tc358746.c | 19 +- drivers/media/platform/qcom/camss/camss-csid.c | 64 +-- drivers/media/platform/qcom/camss/camss-vfe.c | 4 + .../platform/st/sti/c8sectpfe/c8sectpfe-core.c | 3 +- drivers/media/platform/st/stm32/stm32-csi.c | 36 +- .../media/test-drivers/vivid/vivid-kthread-cap.c | 11 +- .../media/test-drivers/vivid/vivid-kthread-out.c | 11 +- .../media/test-drivers/vivid/vivid-kthread-touch.c | 11 +- drivers/media/test-drivers/vivid/vivid-sdr-cap.c | 11 +- drivers/media/usb/cx231xx/cx231xx-417.c | 2 + drivers/media/usb/uvc/uvc_ctrl.c | 77 ++-- drivers/media/usb/uvc/uvc_v4l2.c | 6 + drivers/media/v4l2-core/v4l2-subdev.c | 2 + drivers/message/fusion/mptscsih.c | 4 +- drivers/mfd/axp20x.c | 1 + drivers/mfd/syscon.c | 9 +- drivers/mfd/tps65219.c | 7 - drivers/misc/eeprom/ee1004.c | 4 + drivers/misc/mei/vsc-tp.c | 14 +- drivers/misc/pci_endpoint_test.c | 6 +- drivers/mmc/host/dw_mmc-exynos.c | 41 +- drivers/mmc/host/sdhci-pci-core.c | 6 +- drivers/mmc/host/sdhci.c | 9 +- drivers/mmc/host/sdhci_am654.c | 35 +- drivers/net/bonding/bond_main.c | 2 +- drivers/net/can/c_can/c_can_platform.c | 2 +- drivers/net/can/kvaser_pciefd.c | 101 +++-- drivers/net/can/slcan/slcan-core.c | 26 +- drivers/net/ethernet/apm/xgene-v2/main.c | 4 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 13 +- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 1 + drivers/net/ethernet/freescale/fec_main.c | 52 ++- drivers/net/ethernet/intel/ice/ice_ethtool.c | 3 +- drivers/net/ethernet/intel/ice/ice_irq.c | 25 +- drivers/net/ethernet/intel/ice/ice_lag.c | 6 + drivers/net/ethernet/intel/ice/ice_lib.c | 2 + drivers/net/ethernet/intel/ice/ice_main.c | 6 +- drivers/net/ethernet/intel/ice/ice_virtchnl.c | 1 - drivers/net/ethernet/intel/idpf/idpf.h | 2 + drivers/net/ethernet/intel/idpf/idpf_lib.c | 10 +- drivers/net/ethernet/intel/idpf/idpf_txrx.c | 18 +- drivers/net/ethernet/intel/igc/igc_xdp.c | 19 +- drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 4 + drivers/net/ethernet/intel/ixgbe/ixgbe_type_e610.h | 3 + drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 14 +- drivers/net/ethernet/marvell/octeontx2/af/rvu.h | 2 + .../net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 24 +- .../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 11 +- .../net/ethernet/marvell/octeontx2/nic/Makefile | 2 +- drivers/net/ethernet/marvell/octeontx2/nic/cn10k.c | 7 +- .../ethernet/marvell/octeontx2/nic/otx2_common.c | 114 +++-- .../ethernet/marvell/octeontx2/nic/otx2_common.h | 10 +- .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 34 +- .../net/ethernet/marvell/octeontx2/nic/otx2_txrx.c | 124 ++++-- .../net/ethernet/marvell/octeontx2/nic/otx2_txrx.h | 7 + .../net/ethernet/marvell/octeontx2/nic/otx2_vf.c | 21 +- .../net/ethernet/marvell/octeontx2/nic/otx2_xsk.c | 182 ++++++++ .../net/ethernet/marvell/octeontx2/nic/otx2_xsk.h | 21 + .../net/ethernet/marvell/octeontx2/nic/qos_sq.c | 2 +- drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 22 +- drivers/net/ethernet/mellanox/mlx4/alloc.c | 6 +- drivers/net/ethernet/mellanox/mlx4/en_tx.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/en.h | 3 - .../net/ethernet/mellanox/mlx5/core/en/params.c | 16 +- .../net/ethernet/mellanox/mlx5/core/en/params.h | 1 - .../ethernet/mellanox/mlx5/core/en/reporter_tx.c | 1 - drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c | 53 +-- .../mellanox/mlx5/core/en_accel/ipsec_fs.c | 28 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 40 +- drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 5 + .../net/ethernet/mellanox/mlx5/core/en_selftest.c | 3 + .../net/ethernet/mellanox/mlx5/core/esw/ipsec_fs.c | 13 + .../net/ethernet/mellanox/mlx5/core/esw/ipsec_fs.h | 5 + .../net/ethernet/mellanox/mlx5/core/esw/legacy.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/esw/qos.c | 13 +- drivers/net/ethernet/mellanox/mlx5/core/events.c | 11 +- .../net/ethernet/mellanox/mlx5/core/fs_ft_pool.c | 6 +- .../net/ethernet/mellanox/mlx5/core/fs_ft_pool.h | 2 - drivers/net/ethernet/mellanox/mlx5/core/health.c | 1 + .../ethernet/mellanox/mlx5/core/lib/fs_chains.c | 3 +- drivers/net/ethernet/meta/fbnic/fbnic_fw.c | 16 +- drivers/net/ethernet/meta/fbnic/fbnic_fw.h | 8 +- drivers/net/ethernet/meta/fbnic/fbnic_netdev.c | 2 + drivers/net/ethernet/microchip/lan743x_main.c | 19 +- drivers/net/ethernet/microsoft/mana/gdma_main.c | 2 +- drivers/net/ethernet/realtek/r8169_main.c | 32 ++ drivers/net/ethernet/stmicro/stmmac/common.h | 4 +- .../net/ethernet/stmicro/stmmac/dwmac-loongson.c | 3 + drivers/net/ethernet/stmicro/stmmac/dwmac-rk.c | 21 +- drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c | 2 +- drivers/net/ethernet/stmicro/stmmac/stmmac.h | 7 +- drivers/net/ethernet/tehuti/tn40.c | 9 +- drivers/net/ethernet/tehuti/tn40.h | 33 ++ drivers/net/ethernet/tehuti/tn40_mdio.c | 82 +++- drivers/net/ethernet/ti/am65-cpsw-nuss.c | 4 +- drivers/net/ethernet/ti/cpsw_new.c | 1 + drivers/net/ethernet/ti/icssg/icssg_common.c | 2 +- drivers/net/ieee802154/ca8210.c | 9 +- drivers/net/mctp/mctp-i2c.c | 2 +- drivers/net/netdevsim/netdev.c | 31 +- drivers/net/netdevsim/netdevsim.h | 1 + drivers/net/phy/nxp-c45-tja11xx.c | 54 ++- drivers/net/phy/phylink.c | 2 +- drivers/net/usb/r8152.c | 1 + drivers/net/vmxnet3/vmxnet3_drv.c | 5 +- drivers/net/vxlan/vxlan_core.c | 36 +- drivers/net/wireless/ath/ath11k/dp.h | 6 +- drivers/net/wireless/ath/ath11k/dp_rx.c | 117 +++-- drivers/net/wireless/ath/ath12k/core.c | 45 +- drivers/net/wireless/ath/ath12k/core.h | 4 + drivers/net/wireless/ath/ath12k/dp_mon.c | 19 +- drivers/net/wireless/ath/ath12k/dp_rx.c | 22 +- drivers/net/wireless/ath/ath12k/dp_rx.h | 5 +- drivers/net/wireless/ath/ath12k/dp_tx.c | 145 ++++++- drivers/net/wireless/ath/ath12k/hal_desc.h | 2 +- drivers/net/wireless/ath/ath12k/hal_rx.h | 8 +- drivers/net/wireless/ath/ath12k/hal_tx.h | 10 +- drivers/net/wireless/ath/ath12k/mac.c | 102 ++++- drivers/net/wireless/ath/ath12k/mac.h | 5 +- drivers/net/wireless/ath/ath12k/pci.c | 13 +- drivers/net/wireless/ath/ath12k/rx_desc.h | 5 +- drivers/net/wireless/ath/ath12k/wmi.c | 4 +- drivers/net/wireless/ath/ath9k/init.c | 4 +- drivers/net/wireless/intel/iwlwifi/cfg/dr.c | 2 - drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 4 +- drivers/net/wireless/intel/iwlwifi/fw/uefi.c | 8 +- drivers/net/wireless/intel/iwlwifi/fw/uefi.h | 4 +- drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.c | 10 +- drivers/net/wireless/intel/iwlwifi/iwl-trans.c | 8 +- .../net/wireless/intel/iwlwifi/mvm/ftm-initiator.c | 4 + drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 15 + .../net/wireless/intel/iwlwifi/mvm/mld-mac80211.c | 3 +- drivers/net/wireless/intel/iwlwifi/mvm/mvm.h | 3 + drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 2 + drivers/net/wireless/marvell/mwifiex/11n.c | 6 +- drivers/net/wireless/mediatek/mt76/channel.c | 3 + drivers/net/wireless/mediatek/mt76/mt76.h | 3 + .../net/wireless/mediatek/mt76/mt76_connac3_mac.h | 3 + .../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 2 +- drivers/net/wireless/mediatek/mt76/mt76x0/pci.c | 3 +- drivers/net/wireless/mediatek/mt76/mt76x0/usb.c | 3 +- drivers/net/wireless/mediatek/mt76/mt76x2/pci.c | 3 +- drivers/net/wireless/mediatek/mt76/mt76x2/usb.c | 3 +- drivers/net/wireless/mediatek/mt76/mt7925/mcu.c | 76 +++- drivers/net/wireless/mediatek/mt76/mt7925/mt7925.h | 3 + drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 44 +- drivers/net/wireless/mediatek/mt76/mt7996/main.c | 30 +- drivers/net/wireless/mediatek/mt76/mt7996/mcu.h | 3 +- drivers/net/wireless/mediatek/mt76/mt7996/mmio.c | 2 +- drivers/net/wireless/mediatek/mt76/scan.c | 21 +- drivers/net/wireless/mediatek/mt76/tx.c | 3 +- drivers/net/wireless/realtek/rtl8xxxu/core.c | 17 +- drivers/net/wireless/realtek/rtw88/fw.c | 15 + drivers/net/wireless/realtek/rtw88/fw.h | 1 + drivers/net/wireless/realtek/rtw88/mac.c | 7 +- drivers/net/wireless/realtek/rtw88/main.c | 54 ++- drivers/net/wireless/realtek/rtw88/main.h | 1 + drivers/net/wireless/realtek/rtw88/reg.h | 3 +- drivers/net/wireless/realtek/rtw88/rtw8822b.c | 14 +- drivers/net/wireless/realtek/rtw88/util.c | 3 +- drivers/net/wireless/realtek/rtw89/coex.c | 107 +++-- drivers/net/wireless/realtek/rtw89/coex.h | 2 + drivers/net/wireless/realtek/rtw89/core.c | 67 ++- drivers/net/wireless/realtek/rtw89/core.h | 6 +- drivers/net/wireless/realtek/rtw89/fw.c | 101 ++++- drivers/net/wireless/realtek/rtw89/fw.h | 12 + drivers/net/wireless/realtek/rtw89/mac.c | 55 ++- drivers/net/wireless/realtek/rtw89/mac.h | 3 + drivers/net/wireless/realtek/rtw89/mac80211.c | 1 + drivers/net/wireless/realtek/rtw89/reg.h | 4 + drivers/net/wireless/realtek/rtw89/regd.c | 2 + drivers/net/wireless/realtek/rtw89/rtw8851b.c | 8 + drivers/net/wireless/realtek/rtw89/rtw8852a.c | 8 + drivers/net/wireless/realtek/rtw89/rtw8852b.c | 8 + drivers/net/wireless/realtek/rtw89/rtw8852bt.c | 8 + drivers/net/wireless/realtek/rtw89/rtw8852c.c | 8 + drivers/net/wireless/realtek/rtw89/rtw8922a.c | 2 + drivers/net/wireless/realtek/rtw89/ser.c | 4 + drivers/net/wireless/virtual/mac80211_hwsim.c | 14 +- drivers/nvdimm/label.c | 3 +- drivers/nvme/host/pci.c | 6 + drivers/nvme/target/pci-epf.c | 66 ++- drivers/nvme/target/tcp.c | 3 + drivers/nvmem/core.c | 40 +- drivers/nvmem/qfprom.c | 26 +- drivers/nvmem/rockchip-otp.c | 17 +- drivers/pci/Kconfig | 6 + drivers/pci/ats.c | 33 ++ drivers/pci/controller/dwc/pcie-designware-ep.c | 2 +- drivers/pci/controller/dwc/pcie-designware-host.c | 2 +- drivers/pci/controller/pcie-brcmstb.c | 5 +- drivers/pci/controller/pcie-xilinx-cpm.c | 3 +- drivers/pci/controller/vmd.c | 20 + drivers/pci/endpoint/functions/pci-epf-mhi.c | 2 +- drivers/pci/endpoint/functions/pci-epf-test.c | 2 + drivers/pci/setup-bus.c | 6 +- drivers/perf/arm_pmuv3.c | 4 +- drivers/phy/phy-core.c | 7 +- drivers/phy/renesas/phy-rcar-gen3-usb2.c | 95 +++-- drivers/phy/rockchip/phy-rockchip-samsung-hdptx.c | 4 +- drivers/phy/rockchip/phy-rockchip-usbdp.c | 105 +++-- drivers/phy/samsung/phy-exynos5-usbdrd.c | 7 +- drivers/pinctrl/bcm/pinctrl-bcm281xx.c | 44 +- drivers/pinctrl/devicetree.c | 10 +- drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/pinctrl/qcom/Kconfig.msm | 4 +- drivers/pinctrl/qcom/pinctrl-msm.c | 23 +- drivers/pinctrl/qcom/pinctrl-msm8917.c | 8 +- drivers/pinctrl/renesas/pinctrl-rzg2l.c | 19 +- drivers/pinctrl/sophgo/pinctrl-cv18xx.c | 33 +- drivers/pinctrl/tegra/pinctrl-tegra.c | 59 ++- drivers/pinctrl/tegra/pinctrl-tegra.h | 6 + drivers/platform/x86/asus-wmi.c | 11 +- .../x86/dell/dell-wmi-sysman/passobj-attributes.c | 2 +- drivers/platform/x86/ideapad-laptop.c | 16 + drivers/platform/x86/intel/hid.c | 21 +- drivers/platform/x86/think-lmi.c | 26 +- drivers/platform/x86/think-lmi.h | 1 + drivers/pmdomain/core.c | 2 +- drivers/pmdomain/imx/gpcv2.c | 2 +- drivers/pmdomain/renesas/rcar-gen4-sysc.c | 5 - drivers/pmdomain/renesas/rcar-sysc.c | 5 - drivers/power/supply/axp20x_battery.c | 21 + drivers/pps/generators/pps_gen-dummy.c | 2 +- drivers/pps/generators/pps_gen.c | 14 +- drivers/pps/generators/sysfs.c | 6 +- drivers/ptp/ptp_ocp.c | 24 +- drivers/regulator/ad5398.c | 12 +- drivers/remoteproc/qcom_wcnss.c | 34 +- drivers/rtc/rtc-ds1307.c | 4 +- drivers/rtc/rtc-rv3032.c | 2 +- drivers/s390/crypto/vfio_ap_ops.c | 72 ++-- drivers/scsi/aacraid/aachba.c | 4 +- drivers/scsi/arm/acornscsi.c | 2 +- drivers/scsi/ips.c | 8 +- drivers/scsi/lpfc/lpfc_els.c | 16 +- drivers/scsi/lpfc/lpfc_hbadisc.c | 29 +- drivers/scsi/lpfc/lpfc_init.c | 2 + drivers/scsi/megaraid.c | 10 +- drivers/scsi/megaraid/megaraid_mbox.c | 10 +- drivers/scsi/mpi3mr/mpi3mr_fw.c | 8 +- drivers/scsi/mpt3sas/mpt3sas_ctl.c | 12 +- drivers/scsi/scsi_debug.c | 55 ++- drivers/scsi/scsi_sysctl.c | 4 +- drivers/scsi/st.c | 29 +- drivers/scsi/st.h | 2 + drivers/soc/apple/rtkit-internal.h | 1 + drivers/soc/apple/rtkit.c | 58 ++- drivers/soc/mediatek/mtk-mutex.c | 6 + drivers/soc/samsung/exynos-asv.c | 1 + drivers/soc/samsung/exynos-chipid.c | 1 + drivers/soc/samsung/exynos-pmu.c | 1 + drivers/soc/samsung/exynos-usi.c | 1 + drivers/soc/samsung/exynos3250-pmu.c | 1 + drivers/soc/samsung/exynos5250-pmu.c | 1 + drivers/soc/samsung/exynos5420-pmu.c | 1 + drivers/soc/ti/k3-socinfo.c | 13 +- drivers/soundwire/amd_manager.c | 2 + drivers/soundwire/bus.c | 9 +- drivers/soundwire/cadence_master.c | 22 +- drivers/spi/spi-fsl-dspi.c | 46 +- drivers/spi/spi-mux.c | 4 +- drivers/spi/spi-rockchip.c | 2 +- drivers/spi/spi-zynqmp-gqspi.c | 22 +- .../vc04_services/interface/vchiq_arm/vchiq_arm.c | 69 ++- drivers/target/iscsi/iscsi_target.c | 2 +- drivers/target/target_core_device.c | 8 +- drivers/target/target_core_pr.c | 6 +- drivers/target/target_core_spc.c | 34 +- drivers/thermal/intel/x86_pkg_temp_thermal.c | 1 + drivers/thermal/mediatek/lvts_thermal.c | 3 +- drivers/thermal/qoriq_thermal.c | 13 + drivers/thunderbolt/retimer.c | 8 +- drivers/tty/serial/8250/8250_port.c | 2 +- drivers/tty/serial/atmel_serial.c | 2 +- drivers/tty/serial/imx.c | 2 +- drivers/tty/serial/serial_mctrl_gpio.c | 34 +- drivers/tty/serial/serial_mctrl_gpio.h | 17 +- drivers/tty/serial/sh-sci.c | 98 ++++- drivers/tty/serial/stm32-usart.c | 2 +- drivers/ufs/core/ufshcd.c | 29 ++ drivers/usb/gadget/function/f_mass_storage.c | 4 +- drivers/usb/host/xhci-mem.c | 34 +- drivers/usb/host/xhci-ring.c | 12 +- drivers/usb/host/xhci.h | 8 +- drivers/usb/storage/debug.c | 4 +- drivers/vdpa/mlx5/net/mlx5_vnet.c | 3 + drivers/vfio/pci/vfio_pci_config.c | 3 +- drivers/vfio/pci/vfio_pci_core.c | 10 +- drivers/vfio/pci/vfio_pci_intrs.c | 2 +- drivers/vhost/scsi.c | 23 +- drivers/video/fbdev/core/bitblit.c | 5 +- drivers/video/fbdev/core/fbcon.c | 10 +- drivers/video/fbdev/core/fbcon.h | 38 +- drivers/video/fbdev/core/fbcon_ccw.c | 5 +- drivers/video/fbdev/core/fbcon_cw.c | 5 +- drivers/video/fbdev/core/fbcon_ud.c | 5 +- drivers/video/fbdev/core/tileblit.c | 45 +- drivers/video/fbdev/fsl-diu-fb.c | 1 + drivers/virtio/virtio.c | 35 ++ drivers/virtio/virtio_ring.c | 2 +- drivers/watchdog/aspeed_wdt.c | 81 +++- drivers/watchdog/s3c2410_wdt.c | 10 +- drivers/xen/pci.c | 32 ++ drivers/xen/platform-pci.c | 4 + drivers/xen/xenbus/xenbus_probe.c | 14 +- fs/btrfs/block-group.c | 18 +- fs/btrfs/compression.c | 2 +- fs/btrfs/discard.c | 34 +- fs/btrfs/disk-io.c | 28 +- fs/btrfs/extent_io.c | 7 +- fs/btrfs/extent_io.h | 2 + fs/btrfs/scrub.c | 4 +- fs/btrfs/send.c | 6 +- fs/btrfs/tree-checker.c | 2 +- fs/buffer.c | 61 ++- fs/dlm/lowcomms.c | 4 +- fs/erofs/internal.h | 4 +- fs/erofs/super.c | 46 +- fs/erofs/zdata.c | 4 +- fs/exfat/inode.c | 169 ++++---- fs/ext4/balloc.c | 4 +- fs/ext4/ext4.h | 5 +- fs/ext4/extents.c | 19 +- fs/ext4/inode.c | 81 +++- fs/ext4/mballoc.c | 3 +- fs/ext4/page-io.c | 16 +- fs/ext4/super.c | 19 +- fs/f2fs/sysfs.c | 74 +++- fs/fuse/dir.c | 2 + fs/gfs2/glock.c | 11 +- fs/jbd2/recovery.c | 69 ++- fs/jbd2/revoke.c | 23 +- fs/namespace.c | 6 +- fs/nfs/delegation.c | 3 +- fs/nfs/flexfilelayout/flexfilelayout.c | 1 + fs/nfs/inode.c | 2 + fs/nfs/internal.h | 5 + fs/nfs/nfs3proc.c | 2 +- fs/nfs/nfs4proc.c | 9 +- fs/nfs/nfs4state.c | 10 +- fs/nilfs2/the_nilfs.c | 3 - fs/ocfs2/journal.c | 2 +- fs/orangefs/inode.c | 7 +- fs/pidfs.c | 9 +- fs/pipe.c | 4 + fs/pstore/inode.c | 2 +- fs/pstore/internal.h | 4 +- fs/pstore/platform.c | 11 +- fs/smb/client/cifsacl.c | 21 +- fs/smb/client/cifspdu.h | 5 +- fs/smb/client/cifsproto.h | 7 + fs/smb/client/cifssmb.c | 93 +++- fs/smb/client/connect.c | 30 +- fs/smb/client/fs_context.c | 13 + fs/smb/client/fs_context.h | 3 + fs/smb/client/link.c | 11 +- fs/smb/client/readdir.c | 7 +- fs/smb/client/smb1ops.c | 228 ++++++++-- fs/smb/client/smb2file.c | 11 +- fs/smb/client/smb2inode.c | 8 + fs/smb/client/smb2ops.c | 34 +- fs/smb/client/smb2pdu.c | 4 +- fs/smb/client/transport.c | 2 +- fs/smb/client/xattr.c | 15 +- fs/smb/common/smb2pdu.h | 3 + fs/smb/server/smb2pdu.c | 9 +- fs/smb/server/vfs.c | 14 +- include/crypto/hash.h | 3 + include/drm/drm_atomic.h | 23 +- include/drm/drm_gem.h | 13 + include/linux/alloc_tag.h | 12 + include/linux/blkdev.h | 1 + include/linux/bpf-cgroup.h | 1 + include/linux/bpf.h | 7 +- include/linux/buffer_head.h | 8 + include/linux/codetag.h | 8 +- include/linux/coresight.h | 2 +- include/linux/device.h | 119 +----- include/linux/device/devres.h | 129 ++++++ include/linux/dma-mapping.h | 12 +- include/linux/dma/k3-udma-glue.h | 3 +- include/linux/err.h | 3 + include/linux/gpio/driver.h | 3 +- include/linux/highmem.h | 10 +- include/linux/io.h | 2 - include/linux/ipv6.h | 1 + include/linux/jbd2.h | 2 + include/linux/lzo.h | 8 + include/linux/mfd/axp20x.h | 1 + include/linux/mlx4/device.h | 2 +- include/linux/mlx5/eswitch.h | 2 + include/linux/mlx5/fs.h | 2 + include/linux/mm.h | 2 +- include/linux/mman.h | 2 + include/linux/mroute_base.h | 5 + include/linux/msi.h | 33 +- include/linux/objtool.h | 4 +- include/linux/page-flags.h | 7 + include/linux/pci-ats.h | 3 + include/linux/percpu.h | 4 - include/linux/perf_event.h | 8 +- include/linux/pnp.h | 2 +- include/linux/pps_gen_kernel.h | 4 +- include/linux/rcupdate.h | 2 +- include/linux/rcutree.h | 2 +- include/linux/ring_buffer.h | 3 +- include/linux/spi/spi.h | 5 +- include/linux/tcp.h | 2 + include/linux/trace.h | 4 +- include/linux/trace_seq.h | 8 +- include/linux/usb/r8152.h | 1 + include/linux/virtio.h | 3 + include/media/v4l2-subdev.h | 4 +- include/net/cfg80211.h | 4 + include/net/dropreason.h | 6 - include/net/mac80211.h | 4 +- include/net/xfrm.h | 1 - include/rdma/uverbs_std_types.h | 2 +- include/scsi/scsi_proto.h | 4 +- include/sound/hda_codec.h | 1 + include/sound/pcm.h | 2 + include/sound/soc_sdw_utils.h | 1 + include/trace/events/btrfs.h | 2 +- include/trace/events/scsi.h | 4 +- include/trace/events/target.h | 4 +- include/uapi/linux/bpf.h | 1 + include/uapi/linux/iommufd.h | 14 +- include/uapi/linux/nl80211.h | 52 ++- include/uapi/linux/snmp.h | 1 + include/uapi/linux/taskstats.h | 47 +- include/ufs/ufs_quirks.h | 6 + io_uring/fdinfo.c | 4 +- io_uring/io_uring.c | 96 +++-- io_uring/msg_ring.c | 1 + io_uring/net.c | 14 +- kernel/bpf/bpf_iter.c | 13 +- kernel/bpf/bpf_struct_ops.c | 98 ++--- kernel/bpf/cgroup.c | 33 +- kernel/bpf/disasm.c | 4 +- kernel/bpf/hashtab.c | 2 +- kernel/bpf/syscall.c | 8 +- kernel/bpf/verifier.c | 56 ++- kernel/cgroup/cgroup.c | 2 +- kernel/cgroup/rstat.c | 12 +- kernel/dma/mapping.c | 27 +- kernel/events/core.c | 104 +++-- kernel/events/hw_breakpoint.c | 5 +- kernel/events/ring_buffer.c | 1 + kernel/exit.c | 6 +- kernel/fork.c | 9 +- kernel/module/main.c | 1 + kernel/padata.c | 3 +- kernel/printk/printk.c | 14 +- kernel/rcu/rcu.h | 2 +- kernel/rcu/tree.c | 15 +- kernel/rcu/tree_plugin.h | 22 +- kernel/rseq.c | 60 ++- kernel/sched/fair.c | 6 +- kernel/signal.c | 3 +- kernel/softirq.c | 18 + kernel/time/hrtimer.c | 29 +- kernel/time/posix-timers.c | 26 +- kernel/time/timer_list.c | 4 +- kernel/trace/ring_buffer.c | 31 +- kernel/trace/trace.c | 41 +- kernel/trace/trace.h | 25 +- kernel/vhost_task.c | 2 +- lib/alloc_tag.c | 87 +++- lib/codetag.c | 5 +- lib/dynamic_queue_limits.c | 2 +- lib/lzo/Makefile | 2 +- lib/lzo/lzo1x_compress.c | 102 +++-- lib/lzo/lzo1x_compress_safe.c | 18 + mm/hugetlb.c | 8 + mm/kasan/shadow.c | 92 +++- mm/memcontrol.c | 6 +- mm/page_alloc.c | 8 + mm/vmalloc.c | 13 +- net/bluetooth/hci_event.c | 3 + net/bluetooth/l2cap_core.c | 15 +- net/bridge/br_mdb.c | 2 +- net/bridge/br_nf_core.c | 7 +- net/bridge/br_private.h | 1 + net/can/bcm.c | 79 ++-- net/core/dev.c | 12 +- net/core/dev.h | 12 + net/core/net-sysfs.c | 5 +- net/core/page_pool.c | 7 +- net/core/pktgen.c | 13 +- net/core/rtnetlink.c | 10 +- net/dsa/tag_ksz.c | 19 +- net/hsr/hsr_device.c | 2 + net/hsr/hsr_forward.c | 4 +- net/hsr/hsr_framereg.c | 95 ++++- net/hsr/hsr_framereg.h | 8 +- net/hsr/hsr_main.h | 2 + net/ipv4/esp4.c | 53 +-- net/ipv4/fib_frontend.c | 28 +- net/ipv4/fib_rules.c | 4 +- net/ipv4/fib_trie.c | 22 - net/ipv4/inet_hashtables.c | 37 +- net/ipv4/ip_gre.c | 16 +- net/ipv4/ipmr.c | 12 +- net/ipv4/proc.c | 1 + net/ipv4/syncookies.c | 1 + net/ipv4/tcp_input.c | 57 +-- net/ipv4/tcp_minisocks.c | 26 +- net/ipv4/tcp_output.c | 6 + net/ipv4/xfrm4_input.c | 18 +- net/ipv6/esp6.c | 53 +-- net/ipv6/fib6_rules.c | 4 +- net/ipv6/ip6_gre.c | 2 - net/ipv6/ip6_output.c | 11 +- net/ipv6/ip6_tunnel.c | 3 +- net/ipv6/ip6_vti.c | 3 +- net/ipv6/ip6mr.c | 12 +- net/ipv6/sit.c | 8 +- net/ipv6/xfrm6_input.c | 18 +- net/llc/af_llc.c | 8 +- net/mac80211/agg-tx.c | 5 +- net/mac80211/cfg.c | 14 +- net/mac80211/driver-ops.h | 3 +- net/mac80211/drop.h | 21 +- net/mac80211/ethtool.c | 2 +- net/mac80211/ieee80211_i.h | 13 +- net/mac80211/iface.c | 60 ++- net/mac80211/main.c | 16 +- net/mac80211/mlme.c | 150 ++++++- net/mac80211/rx.c | 194 +++------ net/mac80211/status.c | 32 +- net/mac80211/tx.c | 2 +- net/mac80211/util.c | 3 +- net/mptcp/pm_userspace.c | 8 +- net/netfilter/nf_conntrack_standalone.c | 12 +- net/sched/sch_hfsc.c | 6 +- net/smc/smc_pnet.c | 8 +- net/sunrpc/clnt.c | 3 - net/sunrpc/rpcb_clnt.c | 5 +- net/sunrpc/sched.c | 2 + net/tipc/crypto.c | 5 + net/wireless/chan.c | 8 +- net/wireless/mlme.c | 4 + net/wireless/nl80211.c | 4 + net/wireless/reg.c | 4 +- net/xdp/xsk.c | 2 +- net/xfrm/espintcp.c | 4 +- net/xfrm/xfrm_policy.c | 3 + net/xfrm/xfrm_state.c | 6 +- net/xfrm/xfrm_user.c | 12 + samples/bpf/Makefile | 2 +- scripts/Makefile.extrawarn | 11 +- scripts/config | 26 +- scripts/kconfig/confdata.c | 19 +- scripts/kconfig/merge_config.sh | 4 +- security/integrity/ima/ima_main.c | 4 +- security/smack/smackfs.c | 21 +- sound/core/oss/pcm_oss.c | 3 +- sound/core/pcm_native.c | 11 + sound/core/seq/seq_clientmgr.c | 5 +- sound/core/seq/seq_memory.c | 1 + sound/pci/hda/hda_beep.c | 15 +- sound/pci/hda/patch_realtek.c | 77 +++- sound/soc/codecs/cs42l43-jack.c | 7 + sound/soc/codecs/mt6359-accdet.h | 9 + sound/soc/codecs/pcm3168a.c | 6 +- sound/soc/codecs/pcm6240.c | 28 +- sound/soc/codecs/pcm6240.h | 7 +- sound/soc/codecs/rt722-sdca-sdw.c | 49 ++- sound/soc/codecs/sma1307.c | 27 +- sound/soc/codecs/tas2764.c | 53 +-- sound/soc/codecs/wsa883x.c | 2 +- sound/soc/codecs/wsa884x.c | 2 +- sound/soc/fsl/imx-card.c | 2 +- sound/soc/intel/boards/bytcr_rt5640.c | 13 + sound/soc/mediatek/mt8188/mt8188-afe-clk.c | 8 + sound/soc/mediatek/mt8188/mt8188-afe-clk.h | 8 + sound/soc/mediatek/mt8188/mt8188-afe-pcm.c | 4 - sound/soc/qcom/sm8250.c | 3 + sound/soc/sdw_utils/soc_sdw_bridge_cs35l56.c | 4 + sound/soc/sdw_utils/soc_sdw_cs42l43.c | 10 + sound/soc/sdw_utils/soc_sdw_cs_amp.c | 24 ++ sound/soc/soc-dai.c | 8 +- sound/soc/soc-ops.c | 29 +- sound/soc/sof/intel/hda-bus.c | 2 +- sound/soc/sof/intel/hda.c | 16 +- sound/soc/sof/ipc4-control.c | 11 +- sound/soc/sof/ipc4-pcm.c | 3 +- sound/soc/sof/topology.c | 18 +- sound/soc/sunxi/sun4i-codec.c | 56 ++- sound/usb/midi.c | 16 +- tools/arch/x86/include/asm/asm.h | 8 +- tools/arch/x86/include/asm/nops.h | 2 +- tools/arch/x86/include/asm/orc_types.h | 4 +- tools/arch/x86/include/asm/pvclock-abi.h | 4 +- tools/bpf/bpftool/btf.c | 14 +- tools/bpf/bpftool/btf_dumper.c | 2 +- tools/bpf/bpftool/cgroup.c | 2 +- tools/bpf/bpftool/common.c | 7 +- tools/bpf/bpftool/jit_disasm.c | 3 +- tools/bpf/bpftool/map_perf_ring.c | 6 +- tools/bpf/bpftool/net.c | 4 +- tools/bpf/bpftool/netlink_dumper.c | 6 +- tools/bpf/bpftool/prog.c | 12 +- tools/bpf/bpftool/tracelog.c | 2 +- tools/bpf/bpftool/xlated_dumper.c | 6 +- tools/build/Makefile.build | 6 +- tools/include/uapi/linux/bpf.h | 1 + tools/lib/bpf/libbpf.c | 2 +- tools/net/ynl/lib/ynl.c | 2 +- tools/net/ynl/pyynl/ynl_gen_c.py | 3 + tools/objtool/check.c | 21 +- tools/power/x86/turbostat/turbostat.8 | 1 + tools/power/x86/turbostat/turbostat.c | 13 +- tools/testing/kunit/kunit_parser.py | 9 +- tools/testing/kunit/qemu_configs/x86_64.py | 4 +- .../selftests/bpf/prog_tests/sockmap_ktls.c | 1 - tools/testing/selftests/iommu/iommufd.c | 4 + .../testing/selftests/net/forwarding/bridge_mdb.sh | 2 +- tools/testing/selftests/net/gro.sh | 3 +- tools/testing/selftests/net/nl_netdev.py | 18 +- .../selftests/pci_endpoint/pci_endpoint_test.c | 2 + 1089 files changed, 12544 insertions(+), 5911 deletions(-)

1 month, 1 week

23
816
0 0

[PATCH 6.6 000/444] 6.6.93-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.6.93 release. There are 444 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 04 Jun 2025 13:42:20 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.93-rc1… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.6.93-rc1 Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use list_first_entry_or_null for opinfo_get_list() Nishanth Menon <nm(a)ti.com> net: ethernet: ti: am65-cpsw: Lower random mac address error print to info Mark Pearson <mpearson-lenovo(a)squebb.ca> platform/x86: thinkpad_acpi: Ignore battery threshold change event notification Valtteri Koskivuori <vkoskiv(a)gmail.com> platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys Trond Myklebust <trond.myklebust(a)hammerspace.com> NFS: Avoid flushing data while holding directory locks in nfs_rename() Ilya Guterman <amfernusus(a)gmail.com> nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro Alessandro Grassi <alessandro.grassi(a)mailbox.org> spi: spi-sun4i: fix early activation Hal Feng <hal.feng(a)starfivetech.com> phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure George Shen <george.shen(a)amd.com> drm/amd/display: fix link_set_dpms_off multi-display MST corner case Masahiro Yamada <masahiroy(a)kernel.org> um: let 'make clean' properly clean underlying SUBARCH as well John Chau <johnchau(a)0atlas.com> platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS Jeff Layton <jlayton(a)kernel.org> nfs: don't share pNFS DS connections between net namespaces Milton Barrera <miltonjosue2001(a)gmail.com> HID: quirks: Add ADATA XPG alpha wireless mouse support Purva Yeshi <purvayeshi550(a)gmail.com> dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open Christian Brauner <brauner(a)kernel.org> coredump: hand a pidfd to the usermode coredump helper Christian Brauner <brauner(a)kernel.org> coredump: fix error handling for replace_fd() Robin Murphy <robin.murphy(a)arm.com> perf/arm-cmn: Initialise cmn->cpu earlier Robin Murphy <robin.murphy(a)arm.com> perf/arm-cmn: Fix REQ2/SNP2 mixup Pedro Tammela <pctammela(a)mojatatu.com> net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: sm8550: Add missing properties for cryptobam Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: sm8450: Add missing properties for cryptobam Alok Tiwari <alok.a.tiwari(a)oracle.com> arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: ipq9574: Add missing properties for cryptobam Shigeru Yoshida <syoshida(a)redhat.com> af_unix: Fix uninit-value in __unix_walk_scc() Michal Luczaj <mhal(a)rbox.co> af_unix: Fix garbage collection of embryos carrying OOB with SCM_RIGHTS Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Add dead flag to struct scm_fp_list. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Don't access successor in unix_del_edges() during GC. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Try not to hold unix_gc_lock during accept(). Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Remove lock dance in unix_peek_fds(). Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Replace garbage collection algorithm. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Detect dead SCC. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Assign a unique index to SCC. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Avoid Tarjan's algorithm if unnecessary. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Skip GC if no cycle exists. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Save O(n) setup of Tarjan's algo. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Fix up unix_edge.successor for embryo socket. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Save listener for embryo socket. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Detect Strongly Connected Components. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Iterate all vertices by DFS. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Bulk update unix_tot_inflight/unix_inflight when queuing skb. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Link struct unix_edge when queuing skb. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Allocate struct unix_edge for each inflight AF_UNIX fd. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Allocate struct unix_vertex for each inflight AF_UNIX fd. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Remove CONFIG_UNIX_SCM. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Remove io_uring code for GC. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Replace BUG_ON() with WARN_ON_ONCE(). Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Try to run GC async. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Run GC on only one CPU. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Return struct unix_sock from unix_get_socket(). Boris Burkov <boris(a)bur.io> btrfs: check folio mapping after unlock in relocate_one_folio() Frederic Weisbecker <frederic(a)kernel.org> hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING Axel Forsman <axfo(a)kvaser.com> can: kvaser_pciefd: Force IRQ edge in case of nested IRQ Thomas Zimmermann <tzimmermann(a)suse.de> drm/gem: Internally test import_attach for imported objects Balbir Singh <balbirs(a)nvidia.com> x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers bounce buffers Nathan Chancellor <nathan(a)kernel.org> i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work() Dan Carpenter <dan.carpenter(a)linaro.org> pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group() Arnd Bergmann <arnd(a)arndb.de> watchdog: aspeed: fix 64-bit division Geert Uytterhoeven <geert+renesas(a)glider.be> serial: sh-sci: Save and restore more registers Brett Creeley <brett.creeley(a)amd.com> pds_core: Prevent possible adminq overflow/stuck condition Matthew Wilcox (Oracle) <willy(a)infradead.org> highmem: add folio_test_partial_kmap() Alexey Dobriyan <adobriyan(a)gmail.com> x86/boot: Compile boot code with -std=gnu11 too Larisa Grigore <larisa.grigore(a)nxp.com> spi: spi-fsl-dspi: Reset SR flags before sending a new message Bogdan-Gabriel Roman <bogdan-gabriel.roman(a)nxp.com> spi: spi-fsl-dspi: Halt the module after a new message transfer Larisa Grigore <larisa.grigore(a)nxp.com> spi: spi-fsl-dspi: restrict register range for regmap access Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix stream write failure Jernej Skrabec <jernej.skrabec(a)gmail.com> Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection" Tianyang Zhang <zhangtianyang(a)loongson.cn> mm/page_alloc.c: avoid infinite retries caused by cpuset race Breno Leitao <leitao(a)debian.org> memcg: always call cond_resched() after fn() Vicki Pfau <vi(a)endrift.com> Input: xpad - add more controllers Mario Limonciello <mario.limonciello(a)amd.com> Revert "drm/amd: Keep display off while going into S4" Wang Zhaolong <wangzhaolong1(a)huawei.com> smb: client: Reset all search buffer pointers when releasing buffer Gabor Juhos <j4g8y7(a)gmail.com> arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs Wang Zhaolong <wangzhaolong1(a)huawei.com> smb: client: Fix use-after-free in cifs_fill_dirent feijuan.li <feijuan.li(a)samsung.com> drm/edid: fixed the bug that hdr metadata was not reset Zhang Rui <rui.zhang(a)intel.com> thermal: intel: x86_pkg_temp_thermal: Fix bogus trip temperature Vladimir Moskovkin <Vladimir.Moskovkin(a)kaspersky.com> platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() Axel Forsman <axfo(a)kvaser.com> can: kvaser_pciefd: Continue parsing DMA buf after dropped RX Ilia Gavrilov <Ilia.Gavrilov(a)infotecs.ru> llc: fix data loss when reading from a socket in llc_ui_recvmsg() Ed Burcher <git(a)edburcher.com> ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10 Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Fix race of buffer access at PCM OSS layer Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-pcm: Delay reporting is only supported for playback direction Kai Vehmanen <kai.vehmanen(a)linux.intel.com> ASoc: SOF: topology: connect DAI to a single DAI link Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-control: Use SOF_CTRL_CMD_BINARY as numid for bytes_ext Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing rcu read protection for procfs content Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add locking for bcm_op runtime updates Carlos Sanchez <carlossanchez(a)geotab.com> can: slcan: allow reception of short error messages Dominik Grzegorzek <dominik.grzegorzek(a)oracle.com> padata: do not leak refcount in reorder_work Ivan Pravdin <ipravdin.official(a)gmail.com> crypto: algif_hash - fix double free in hash_accept André Draszik <andre.draszik(a)linaro.org> clk: s2mps11: initialise clk_hw_onecell_data::num before accessing ::hws[] in probe() Geetha sowjanya <gakula(a)marvell.com> octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG Subbaraya Sundeep <sbhatta(a)marvell.com> octeontx2-af: Set LMT_ENA bit for APR table entries Wang Liang <wangliang74(a)huawei.com> net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done Suman Ghosh <sumang(a)marvell.com> octeontx2-pf: Add AF_XDP non-zero copy support Cong Wang <xiyou.wangcong(a)gmail.com> sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() Pavel Begunkov <asml.silence(a)gmail.com> io_uring: fix overflow resched cqe reordering Thangaraj Samynathan <thangaraj.s(a)microchip.com> net: lan743x: Restore SGMII CTRL register on resume Paul Kocialkowski <paulk(a)sys-base.io> net: dwmac-sun8i: Use parsed internal PHY address instead of 1 Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> pinctrl: qcom: switch to devm_register_sys_off_handler() Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> pinctrl: qcom/msm: Convert to platform remove callback returning void Dave Ertman <david.m.ertman(a)intel.com> ice: Fix LACP bonds without SRIOV environment Jacob Keller <jacob.e.keller(a)intel.com> ice: fix vf->num_mac count with port representors Ido Schimmel <idosch(a)nvidia.com> bridge: netfilter: Fix forwarding of fragmented packets En-Wei Wu <en-wei.wu(a)canonical.com> Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump handling Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix not checking l2cap_chan security level Stefan Wahren <wahrenst(a)gmx.net> dmaengine: fsl-edma: Fix return code for unhandled interrupts Dave Jiang <dave.jiang(a)intel.com> dmaengine: idxd: Fix ->poll() return value Paul Chaignon <paul.chaignon(a)gmail.com> xfrm: Sanitize marks before insert Andre Przywara <andre.przywara(a)arm.com> clk: sunxi-ng: d1: Add missing divider for MMC mod clocks Matti Lehtimäki <matti.lehtimaki(a)gmail.com> remoteproc: qcom_wcnss: Fix on platforms without fallback regulators David Hildenbrand <david(a)redhat.com> kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork() Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix allowing write() from different address spaces Dave Jiang <dave.jiang(a)intel.com> dmaengine: idxd: add wq driver name support for accel-config user tool Sabrina Dubroca <sd(a)queasysnail.net> espintcp: remove encap socket caching to avoid reference leak Charles Keepax <ckeepax(a)opensource.cirrus.com> soundwire: bus: Fix race on the creation of the IRQ domain Al Viro <viro(a)zeniv.linux.org.uk> __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock Jason Andryuk <jason.andryuk(a)amd.com> xenbus: Allow PVH dom0 a non-local xenstore Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: add support for Killer on MTL David Wei <dw(a)davidwei.uk> tools: ynl-gen: validate 0 len strings from kernel Qu Wenruo <wqu(a)suse.com> btrfs: avoid NULL pointer dereference if no valid csum tree Goldwyn Rodrigues <rgoldwyn(a)suse.de> btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref Pali Rohár <pali(a)kernel.org> cifs: Fix changing times and read-only attr over SMB1 smb_set_file_info() function Pali Rohár <pali(a)kernel.org> cifs: Fix and improve cifs_query_path_info() and cifs_query_file_info() Jens Axboe <axboe(a)kernel.dk> io_uring/fdinfo: annotate racy sq/cq head/tail reads Alistair Francis <alistair.francis(a)wdc.com> nvmet-tcp: don't restore null sk_state_change Wentao Guan <guanwentao(a)uniontech.com> nvme-pci: add quirks for WDC Blue SN550 15b7:5009 Wentao Guan <guanwentao(a)uniontech.com> nvme-pci: add quirks for device 126f:1001 Takashi Iwai <tiwai(a)suse.de> ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx Takashi Iwai <tiwai(a)suse.de> ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: cs42l43: Disable headphone clamps during type detection Martin Blumenstingl <martin.blumenstingl(a)googlemail.com> pinctrl: meson: define the pull up/down resistor value as 60 kOhm Ritesh Harjani (IBM) <ritesh.list(a)gmail.com> book3s64/radix: Fix compile errors when CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n Chenyuan Yang <chenyuan0y(a)gmail.com> ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of() Jessica Zhang <quic_jesszhan(a)quicinc.com> drm: Add valid clones check Douglas Anderson <dianders(a)chromium.org> drm/panel-edp: Add Starry 116KHD024006 Simona Vetter <simona.vetter(a)ffwll.ch> drm/atomic: clarify the rules around drm_atomic_state->allow_modeset Olivier Moysan <olivier.moysan(a)foss.st.com> drm: bridge: adv7511: fill stream capabilities P Praneesh <quic_ppranees(a)quicinc.com> wifi: ath12k: Fix end offset bit definition in monitor ring descriptor Rosen Penev <rosenp(a)gmail.com> wifi: ath9k: return by of_get_mac_address Youssef Samir <quic_yabdulra(a)quicinc.com> accel/qaic: Mask out SR-IOV PCI resources Nicolas Escande <nico.escande(a)gmail.com> wifi: ath12k: fix ath12k_hal_tx_cmd_ext_desc_setup() info1 override Isaac Scott <isaac.scott(a)ideasonboard.com> regulator: ad5398: Add device tree support Sean Anderson <sean.anderson(a)linux.dev> spi: zynqmp-gqspi: Always acknowledge interrupts Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate Soeren Moch <smoch(a)web.de> wifi: rtl8xxxu: retry firmware download on error Ravi Bangoria <ravi.bangoria(a)amd.com> perf/amd/ibs: Fix ->config to sample period calculation for OP PMU Ravi Bangoria <ravi.bangoria(a)amd.com> perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt Sudeep Holla <sudeep.holla(a)arm.com> firmware: arm_scmi: Relax duplicate name constraint across protocol ids Viktor Malik <vmalik(a)redhat.com> bpftool: Fix readlink usage in get_fd_type Thomas Zimmermann <tzimmermann(a)suse.de> drm/ast: Find VBIOS mode from regular display size Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: rt722-sdca: Add some missing readable registers Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode Naman Trivedi <naman.trivedimanojbhai(a)amd.com> arm64: zynqmp: add clock-output-names property in clock nodes junan <junan76(a)163.com> HID: usbkbd: Fix the bit shift number for LED_KANA Avula Sri Charan <quic_asrichar(a)quicinc.com> wifi: ath12k: Avoid napi_sync() before napi_enable() Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: st: Restore some drive settings after reset Justin Tee <justin.tee(a)broadcom.com> scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails Justin Tee <justin.tee(a)broadcom.com> scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine Konstantin Taranov <kotaranov(a)microsoft.com> net/mana: fix warning in the writer of client oob Michal Swiatkowski <michal.swiatkowski(a)linux.intel.com> ice: count combined queues using Rx/Tx count Peter Zijlstra (Intel) <peterz(a)infradead.org> perf: Avoid the read if the count is already updated Ankur Arora <ankur.a.arora(a)oracle.com> rcu: fix header guard for rcu_all_qs() Ankur Arora <ankur.a.arora(a)oracle.com> rcu: handle unstable rdp in rcu_read_unlock_strict() Ankur Arora <ankur.a.arora(a)oracle.com> rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y Michal Swiatkowski <michal.swiatkowski(a)linux.intel.com> ice: treat dyn_allowed only as suggestion Petr Machata <petrm(a)nvidia.com> bridge: mdb: Allow replace of a host-joined group Heiner Kallweit <hkallweit1(a)gmail.com> r8169: don't scan PHY addresses > 0 Geert Uytterhoeven <geert(a)linux-m68k.org> ipv4: ip_gre: Fix set but not used warning in ipgre_err() if IPv4-only Ido Schimmel <idosch(a)nvidia.com> vxlan: Annotate FDB data races Carolina Jubran <cjubran(a)nvidia.com> net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled Depeng Shao <quic_depengs(a)quicinc.com> media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is available Jaegeuk Kim <jaegeuk(a)kernel.org> f2fs: introduce f2fs_base_attr for global sysfs entries Andrey Vatoropin <a.vatoropin(a)crpt.ru> hwmon: (xgene-hwmon) use appropriate type for the latency value Jordan Crouse <jorcrous(a)amazon.com> clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix __rtw_download_firmware() for RTL8814AU Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix download_firmware_validate() for RTL8814AU Zhang Yi <yi.zhang(a)huawei.com> ext4: remove writable userspace mappings before truncating page cache Zhang Yi <yi.zhang(a)huawei.com> ext4: don't write back data before punch hole in nojournal mode Marek Vasut <marex(a)denx.de> leds: trigger: netdev: Configure LED blink interval for HW offload Kees Cook <kees(a)kernel.org> pstore: Change kmsg_bytes storage size to u32 Aleksander Jan Bajkowski <olek2(a)wp.pl> r8152: add vendor/device ID pair for Dell Alienware AW1022z Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). Athira Rajeev <atrajeev(a)linux.vnet.ibm.com> arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src Gaurav Batra <gbatra(a)linux.ibm.com> powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory Csókás, Bence <csokas.bence(a)prolan.hu> net: fec: Refactor MAC reset to function Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: remove misplaced drv_mgd_complete_tx() call Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't unconditionally call drv_mgd_complete_tx() Stefan Wahren <wahrenst(a)gmx.net> drm/v3d: Add clock handling William Tu <witu(a)nvidia.com> net/mlx5e: reduce the max log mpwrq sz for ECPF and reps William Tu <witu(a)nvidia.com> net/mlx5e: reduce rep rxq depth to 256 for ECPF William Tu <witu(a)nvidia.com> net/mlx5e: set the tx_queue_len for pfifo_fast Alexei Lazar <alazar(a)nvidia.com> net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB Chaohai Chen <wdhh66(a)163.com> scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr() Alex Deucher <alexander.deucher(a)amd.com> drm/amd/display/dm: drop hw_support check in amdgpu_dm_i2c_xfer() Shiwu Zhang <shiwu.zhang(a)amd.com> drm/amdgpu: enlarge the VBIOS binary size limit Joshua Aberback <joshua.aberback(a)amd.com> drm/amd/display: Increase block_sequence array size Tom Chung <chiahsuan.chung(a)amd.com> drm/amd/display: Initial psr_version with correct setting George Shen <george.shen(a)amd.com> drm/amd/display: Update CR AUX RD interval interpretation Jiang Liu <gerry(a)linux.alibaba.com> drm/amdgpu: reset psp->cmd to NULL after releasing the buffer Ilya Bakoulin <Ilya.Bakoulin(a)amd.com> drm/amd/display: Don't try AUX transactions on disconnected link Harish Kasiviswanathan <Harish.Kasiviswanathan(a)amd.com> drm/amdgpu: Set snoop bit for SDMA for MI series Vijendar Mukunda <Vijendar.Mukunda(a)amd.com> soundwire: amd: change the soundwire wake enable/disable sequence Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> phy: core: don't require set_mode() callback for phy_get_mode() to work Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> serial: sh-sci: Update the suspend/resume support zihan zhou <15645113830zzh(a)gmail.com> sched: Reduce the default slice to avoid tasks getting an extra tick Peter Zijlstra <peterz(a)infradead.org> x86/traps: Cleanup and robustify decode_bug() Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> clk: qcom: clk-alpha-pll: Do not use random stack value for recalc rate Karl Chan <exxxxkc(a)getgoogleoff.me> clk: qcom: ipq5018: allow it to be bulid on arm32 Kees Cook <kees(a)kernel.org> net/mlx4_core: Avoid impossible mlx4_db_alloc() order value Sakari Ailus <sakari.ailus(a)linux.intel.com> media: v4l: Memset argument to 0 before calling get_mbus_config pad op David Plowman <david.plowman(a)raspberrypi.com> media: i2c: imx219: Correct the minimum vblanking value Brendan Jackman <jackmanb(a)google.com> kunit: tool: Use qboot on QEMU x86_64 Konstantin Andreev <andreev(a)swemel.ru> smack: Revert "smackfs: Added check catlen" Konstantin Andreev <andreev(a)swemel.ru> smack: recognize ipv4 CIPSO w/o categories Valentin Caron <valentin.caron(a)foss.st.com> pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot() Hector Martin <marcan(a)marcan.st> ASoC: tas2764: Power up/down amp on mute ops Hector Martin <marcan(a)marcan.st> ASoC: tas2764: Mark SW_RESET as volatile Hector Martin <marcan(a)marcan.st> ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG Martin Povišer <povik+lin(a)cutebit.org> ASoC: ops: Enforce platform maximum on initial value Sudeep Holla <sudeep.holla(a)arm.com> firmware: arm_ffa: Reject higher major version as incompatible Shahar Shitrit <shshitrit(a)nvidia.com> net/mlx5: Apply rate-limiting to high temperature warning Shahar Shitrit <shshitrit(a)nvidia.com> net/mlx5: Modify LSB bitmask in temperature event to include only the first bit Hans Verkuil <hverkuil(a)xs4all.nl> media: test-drivers: vivid: don't call schedule in loop Petr Machata <petrm(a)nvidia.com> vxlan: Join / leave MC group after remote changes Xiaofei Tan <tanxiaofei(a)huawei.com> ACPI: HED: Always initialize before evged Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Fix old_size lower bound in calculate_iosize() too Jakub Kicinski <kuba(a)kernel.org> eth: mlx4: don't try to complete XDP frames in netpoll Eduard Zingerman <eddyz87(a)gmail.com> bpf: don't do clean_live_states when state->loop_entry->branches > 0 Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> can: c_can: Use of_property_present() to test existence of DT property Ahmad Fatoum <a.fatoum(a)pengutronix.de> pmdomain: imx: gpcv2: use proper helper for property detection Michael Margolin <mrgolin(a)amazon.com> RDMA/core: Fix best page size finding when it can cross SG entries Alexis Lothoré <alexis.lothore(a)bootlin.com> serial: mctrl_gpio: split disable_ms into sync and no_sync APIs Harry VanZyllDeJong <hvanzyll(a)amd.com> drm/amd/display: Add support for disconnected eDP streams Frank Li <Frank.Li(a)nxp.com> i3c: master: svc: Flush FIFO before sending Dynamic Address Assignment(DAA) Arnd Bergmann <arnd(a)arndb.de> EDAC/ie31200: work around false positive build warning Peter Seiderer <ps.report(a)gmx.net> net: pktgen: fix access outside of user given buffer in pktgen_thread_write() Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: fw: propagate error code from rtw89_h2c_tx() Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31 Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU Shivasharan S <shivasharan.srikanteshwara(a)broadcom.com> scsi: mpt3sas: Send a diag reset if target reset fails Paul Burton <paulburton(a)kernel.org> clocksource: mips-gic-timer: Enable counter when CPUs start Paul Burton <paulburton(a)kernel.org> MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core Jason Gunthorpe <jgg(a)ziepe.ca> genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie Bibo Mao <maobibo(a)loongson.cn> MIPS: Use arch specific syscall name match function Herbert Xu <herbert(a)gondor.apana.org.au> crypto: skcipher - Zap type in crypto_alloc_sync_skcipher Herbert Xu <herbert(a)gondor.apana.org.au> crypto: ahash - Set default reqsize from ahash_alg Balbir Singh <balbirs(a)nvidia.com> x86/kaslr: Reduce KASLR entropy on most x86 systems Patrisious Haddad <phaddad(a)nvidia.com> net/mlx5: Change POOL_NEXT_SIZE define value and make it global Jinliang Zheng <alexjlzheng(a)gmail.com> dm: fix unconditional IO throttle caused by REQ_PREFLUSH Nandakumar Edamana <nandakumar(a)nandakumar.co.in> libbpf: Fix out-of-bound read Matthias Fend <matthias.fend(a)emfend.at> media: tc358746: improve calculation of the D-PHY timing registers Niklas Söderlund <niklas.soderlund+renesas(a)ragnatech.se> media: adv7180: Disable test-pattern control on adv7180 Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpuidle: menu: Avoid discarding useful information Konstantin Shkolnyy <kshk(a)linux.ibm.com> vdpa/mlx5: Fix mlx5_vdpa_get_config() endianness on big-endian machines Mike Christie <michael.christie(a)oracle.com> vhost-scsi: Return queue full for page alloc failures during copy Waiman Long <longman(a)redhat.com> x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() Nícolas F. R. A. Prado <nfraprado(a)collabora.com> ASoC: mediatek: mt8188: Add reference for dmic clocks Nícolas F. R. A. Prado <nfraprado(a)collabora.com> ASoC: mediatek: mt8188: Treat DMIC_GAINx_CUR as non-volatile Yihan Zhu <Yihan.Zhu(a)amd.com> drm/amd/display: handle max_downscale_src_width fail check Nir Lichtman <nir(a)lichtman.org> x86/build: Fix broken copy command in genimage.sh when making isoimage Hariprasad Kelam <hkelam(a)marvell.com> Octeontx2-af: RPM: Register driver with PCI subsys IDs Andrew Davis <afd(a)ti.com> soc: ti: k3-socinfo: Do not use syscon helper to build regmap Ramasamy Kaliappan <quic_rkaliapp(a)quicinc.com> wifi: ath12k: Improve BSS discovery with hidden SSID in 6 GHz band Hangbin Liu <liuhangbin(a)gmail.com> bonding: report duplicate MAC address in all situations Arnd Bergmann <arnd(a)arndb.de> net: xgene-v2: remove incorrect ACPI_PTR annotation Eric Woudstra <ericwouds(a)gmail.com> net: ethernet: mtk_ppe_offload: Allow QinQ, double ETH_P_8021Q only Yuanjun Gong <ruc_gongyuanjun(a)163.com> leds: pwm-multicolor: Add check for fwnode_property_read_u32 Philip Yang <Philip.Yang(a)amd.com> drm/amdkfd: KFD release_work possible circular locking Kevin Krakauer <krakauer(a)google.com> selftests/net: have `gro.sh -t` return a correct exit code Moshe Shemesh <moshe(a)nvidia.com> net/mlx5: Avoid report two health errors on same syndrome Viresh Kumar <viresh.kumar(a)linaro.org> firmware: arm_ffa: Set dma_mask for ffa devices Stanimir Varbanov <svarbanov(a)suse.de> PCI: brcmstb: Add a softdep to MIP MSI-X driver Stanimir Varbanov <svarbanov(a)suse.de> PCI: brcmstb: Expand inbound window size up to 64GB Vinith Kumar R <quic_vinithku(a)quicinc.com> wifi: ath12k: Report proper tx completion status to mac80211 Hector Martin <marcan(a)marcan.st> soc: apple: rtkit: Implement OSLog buffers properly Janne Grunau <j(a)jannau.net> soc: apple: rtkit: Use high prio work queue Rob Herring (Arm) <robh(a)kernel.org> perf: arm_pmuv3: Call kvm_vcpu_pmu_resync_el0() before enabling counters Kuhanh Murugasen Krishnan <kuhanh.murugasen.krishnan(a)intel.com> fpga: altera-cvp: Increase credit timeout AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence Li Bin <bin.li(a)microchip.com> ARM: at91: pm: fix at91_suspend_finish for ZQ calibration Alexander Stein <alexander.stein(a)ew.tq-group.com> hwmon: (gpio-fan) Add missing mutex locks Breno Leitao <leitao(a)debian.org> x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 Ahmad Fatoum <a.fatoum(a)pengutronix.de> clk: imx8mp: inform CCF of maximum frequency of clocks Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map Andy Yan <andy.yan(a)rock-chips.com> drm/rockchip: vop2: Add uv swap for cluster window Kuniyuki Iwashima <kuniyu(a)amazon.com> ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). Maciej S. Szmigiero <mail(a)maciej.szmigiero.name> ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7 Saket Kumar Bhaskar <skb99(a)linux.ibm.com> perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type Peter Seiderer <ps.report(a)gmx.net> net: pktgen: fix mpls maximum labels list parsing Alexander Sverdlin <alexander.sverdlin(a)siemens.com> net: ethernet: ti: cpsw_new: populate netdev of_node Artur Weber <aweber.kernel(a)gmail.com> pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" Hans Verkuil <hverkuil(a)xs4all.nl> media: cx231xx: set device_caps for 417 George Shen <george.shen(a)amd.com> drm/amd/display: Skip checking FRL_MODE bit for PCON BW determination Victor Lu <victorchengchi.lu(a)amd.com> drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c Matti Lehtimäki <matti.lehtimaki(a)gmail.com> remoteproc: qcom_wcnss: Handle platforms with only single power domain Choong Yong Liang <yong.liang.choong(a)linux.intel.com> net: phylink: use pl->link_interface in phylink_expects_phy() Thomas Zimmermann <tzimmermann(a)suse.de> drm/gem: Test for imported GEM buffers with helper Matthew Wilcox (Oracle) <willy(a)infradead.org> orangefs: Do not truncate file size Ming-Hung Tsai <mtsai(a)redhat.com> dm cache: prevent BUG_ON by blocking retries on failed device resumes Markus Elfring <elfring(a)users.sourceforge.net> media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() Svyatoslav Ryhel <clamor95(a)gmail.com> ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> ieee802154: ca8210: Use proper setters and getters for bitwise types Alexandre Belloni <alexandre.belloni(a)bootlin.com> rtc: ds1307: stop disabling alarms on probe Eric Dumazet <edumazet(a)google.com> tcp: bring back NUMA dispersion in inet_ehash_locks_alloc() Takashi Iwai <tiwai(a)suse.de> ALSA: seq: Improve data consistency at polling Andreas Schwab <schwab(a)linux-m68k.org> powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 Jon Hunter <jonathanh(a)nvidia.com> arm64: tegra: Resize aperture for the IGX PCIe C5 slot Diogo Ivo <diogo.ivo(a)tecnico.ulisboa.pt> arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator Harish Kasiviswanathan <Harish.Kasiviswanathan(a)amd.com> drm/amdkfd: Set per-process flags only once cik/vi Herbert Xu <herbert(a)gondor.apana.org.au> crypto: lzo - Fix compression buffer overrun Chin-Ting Kuo <chin-ting_kuo(a)aspeedtech.com> watchdog: aspeed: Update bootstatus handling Aaron Kling <luceoscutum(a)gmail.com> cpufreq: tegra186: Share policy per cluster Vasant Hegde <vasant.hegde(a)amd.com> iommu/amd/pgtbl_v2: Improve error handling Alexey Klimov <alexey.klimov(a)linaro.org> ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct hd44780_common" Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: Check for empty queue in run_queue Leon Huang <Leon.Huang1(a)amd.com> drm/amd/display: Fix incorrect DPCD configs while Replay/PSR switch Zhikai Zhai <zhikai.zhai(a)amd.com> drm/amd/display: calculate the remain segments for all pipes Charlene Liu <Charlene.Liu(a)amd.com> drm/amd/display: remove minimum Dispclk and apply oem panel timing. Willem de Bruijn <willemb(a)google.com> ipv6: save dontfrag in cork Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: fix debug actions order Marcos Paulo de Souza <mpdesouza(a)suse.com> printk: Check CON_SUSPEND when unblanking a console Kurt Borja <kuurtb(a)gmail.com> hwmon: (dell-smm) Increment the number of fans Michal Pecio <michal.pecio(a)gmail.com> usb: xhci: Don't change the status of stalled TDs on failed Stop EP Erick Shepherd <erick.shepherd(a)ni.com> mmc: sdhci: Disable SD card clock before changing parameters Kaustabh Chakraborty <kauschluss(a)disroot.org> mmc: dw_mmc: add exynos7870 DW MMC support Ryan Roberts <ryan.roberts(a)arm.com> arm64/mm: Check PUD_TYPE_TABLE in pud_bad() Nicolas Bouchinet <nicolas.bouchinet(a)ssi.gouv.fr> netfilter: conntrack: Bound nf_conntrack sysctl writes Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> timer_list: Don't use %pK through printk() Eric Dumazet <edumazet(a)google.com> posix-timers: Add cond_resched() to posix_timer_add() search loop Maher Sanalla <msanalla(a)nvidia.com> RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject() Baokun Li <libaokun1(a)huawei.com> ext4: do not convert the unwritten extents if data writeback fails Baokun Li <libaokun1(a)huawei.com> ext4: reject the 'data_err=abort' option in nojournal mode Ryan Walklin <ryan(a)testtoast.com> ASoC: sun4i-codec: support hp-det-gpios property David Rosca <david.rosca(a)amd.com> drm/amdgpu: Update SRIOV video codec caps Shree Ramamoorthy <s-ramamoorthy(a)ti.com> mfd: tps65219: Remove TPS65219_REG_TI_DEV_ID check Prathamesh Shete <pshete(a)nvidia.com> pinctrl-tegra: Restore SFSEL bit when freeing pins Frediano Ziglio <frediano.ziglio(a)cloud.com> xen: Add support for XenServer 6.1 platform device Guangguan Wang <guangguan.wang(a)linux.alibaba.com> net/smc: use the correct ndev to find pnetid by pnetid table Mikulas Patocka <mpatocka(a)redhat.com> dm: restrict dm device size to 2^63-512 bytes Shashank Gupta <shashankg(a)marvell.com> crypto: octeontx2 - suppress auth failure screaming due to negative tests Seyediman Seyedarab <imandevel(a)gmail.com> kbuild: fix argument parsing in scripts/config Yonghong Song <yonghong.song(a)linux.dev> bpf: Allow pre-ordering for bpf cgroup progs Nícolas F. R. A. Prado <nfraprado(a)collabora.com> ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for retimer Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Fix error handling inconsistencies in check() Alexandre Belloni <alexandre.belloni(a)bootlin.com> rtc: rv3032: fix EERD location Ilpo Järvinen <ij(a)kernel.org> tcp: reorganize tcp_in_ack_event() and tcp_count_delivered() Jan Kara <jack(a)suse.cz> jbd2: do not try to recover wiped journal Mykyta Yatsenko <yatsenko(a)meta.com> bpf: Return prog btf_id without capable check Alex Williamson <alex.williamson(a)redhat.com> vfio/pci: Handle INTx IRQ_NOTCONNECTED Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: st: ERASE does not change tape location Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: st: Tighten the page format heuristics with MODE SELECT Al Viro <viro(a)zeniv.linux.org.uk> hypfs_create_cpu_files(): add missing check for hypfs_mkdir() failure Christian Göttsche <cgzones(a)googlemail.com> ext4: reorder capability check last Tiwei Bie <tiwei.btw(a)antgroup.com> um: Update min_low_pfn to match changes in uml_reserved Benjamin Berg <benjamin(a)sipsolutions.net> um: Store full CSGSFS and SS register from mcontext Heming Zhao <heming.zhao(a)suse.com> dlm: make tcp still work in multi-link env Stanley Chu <yschu(a)nuvoton.com> i3c: master: svc: Fix missing STOP for master request Jing Zhou <Jing.Zhou(a)amd.com> drm/amd/display: Guard against setting dispclk low for dcn31x Filipe Manana <fdmanana(a)suse.com> btrfs: send: return -ENAMETOOLONG when attempting a path that is too long Filipe Manana <fdmanana(a)suse.com> btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work() Filipe Manana <fdmanana(a)suse.com> btrfs: fix non-empty delayed iputs list on unmount due to async workers Qu Wenruo <wqu(a)suse.com> btrfs: run btrfs_error_commit_super() early Mark Harmstone <maharmstone(a)fb.com> btrfs: avoid linker error in btrfs_find_create_tree_block() Boris Burkov <boris(a)bur.io> btrfs: make btrfs_discard_workfn() block_group ref explicit Vitalii Mordan <mordan(a)ispras.ru> i2c: pxa: fix call balance of i2c->clk handling routines Stephan Gerhold <stephan.gerhold(a)kernkonzept.com> i2c: qup: Vote for interconnect bandwidth to DRAM Philip Redkin <me(a)rarity.fan> x86/mm: Check return value from memblock_phys_alloc_range() Ingo Molnar <mingo(a)kernel.org> x86/stackprotector/64: Only export __ref_stack_chk_guard on CONFIG_SMP Benjamin Lin <benjamin-jw.lin(a)mediatek.com> wifi: mt76: mt7996: revise TXS size Felix Fietkau <nbd(a)nbd.name> wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2 Erick Shepherd <erick.shepherd(a)ni.com> mmc: host: Wait for Vdd to settle on card power off Robert Richter <rrichter(a)amd.com> libnvdimm/labels: Fix divide error in nd_label_data_init() Nicolas Bretz <bretznic(a)gmail.com> ext4: on a remount, only log the ro or r/w state when it has changed Roger Pau Monne <roger.pau(a)citrix.com> PCI: vmd: Disable MSI remapping bypass under Xen Trond Myklebust <trond.myklebust(a)hammerspace.com> pNFS/flexfiles: Report ENETDOWN as a connection error Ian Rogers <irogers(a)google.com> tools/build: Don't pass test log files to linker Frank Li <Frank.Li(a)nxp.com> PCI: dwc: ep: Ensure proper iteration over outbound map windows Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Properly disable uaccess validation Ryo Takakura <ryotkkr98(a)gmail.com> lockdep: Fix wait context check on softirq for PREEMPT_RT Jing Su <jingsusu(a)didiglobal.com> dql: Fix dql->limit value when reset. Alice Guo <alice.guo(a)nxp.com> thermal/drivers/qoriq: Power down TMU on system suspend Luis de Arquer <luis.dearquer(a)inertim.com> spi-rockchip: Fix register out of bounds access Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: rpcbind should never reset the port to the value '0' Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: rpc_clnt_set_transport() must not change the autobind setting Trond Myklebust <trond.myklebust(a)hammerspace.com> NFSv4: Treat ENETUNREACH errors as fatal for state recovery Pali Rohár <pali(a)kernel.org> cifs: Fix establishing NetBIOS session for SMB2+ connection Namjae Jeon <linkinjeon(a)kernel.org> cifs: add validation check for the fields in smb_aces Zsolt Kajtar <soci(a)c64.rulez.org> fbdev: core: tileblit: Implement missing margin clearing for tileblit Zsolt Kajtar <soci(a)c64.rulez.org> fbcon: Use correct erase colour for clearing in fbcon Shixiong Ou <oushixiong(a)kylinos.cn> fbdev: fsl-diu-fb: add missing device_remove_file() Samuel Holland <samuel.holland(a)sifive.com> riscv: Allow NOMMU kernels to access all of RAM Tudor Ambarus <tudor.ambarus(a)linaro.org> mailbox: use error ret code of of_parse_phandle_with_args() Sudeep Holla <sudeep.holla(a)arm.com> mailbox: pcc: Use acpi_os_ioremap() instead of ioremap() Diogo Ivo <diogo.ivo(a)siemens.com> ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> tracing: Mark binary printing functions with __printf() attribute Jinqian Yang <yangjinqian1(a)huawei.com> arm64: Add support for HIP09 Spectre-BHB mitigation Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: Don't allow waiting for exiting tasks Trond Myklebust <trond.myklebust(a)hammerspace.com> NFS: Don't allow waiting for exiting tasks Trond Myklebust <trond.myklebust(a)hammerspace.com> NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() Matt Johnston <matt(a)codeconstruct.com.au> fuse: Return EPERM rather than ENOSYS from link() Wang Zhaolong <wangzhaolong1(a)huawei.com> smb: client: Store original IO parameters and prevent zero IO sizes Pali Rohár <pali(a)kernel.org> cifs: Fix negotiate retry functionality Pali Rohár <pali(a)kernel.org> cifs: Fix querying and creating MF symlinks over SMB1 Pali Rohár <pali(a)kernel.org> cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES Anthony Krowiak <akrowiak(a)linux.ibm.com> s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log Daniel Gomez <da.gomez(a)samsung.com> kconfig: merge_config: use an empty file as initfile Haoran Jiang <jianghaoran(a)kylinos.cn> samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora Brandon Kammerdiener <brandon.kammerdiener(a)intel.com> bpf: fix possible endless loop in BPF map iteration Ihor Solodrai <ihor.solodrai(a)linux.dev> selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure Felix Kuehling <felix.kuehling(a)amd.com> drm/amdgpu: Allow P2P access through XGMI Frederick Lawler <fred(a)cloudflare.com> ima: process_measurement() needlessly takes inode_lock() on MAY_READ Vladimir Oltean <vladimir.oltean(a)nxp.com> net: enetc: refactor bulk flipping of RX buffers to separate function Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpi3mr: Add level check to control event logging Dongli Zhang <dongli.zhang(a)oracle.com> vhost-scsi: protect vq->log_used with vq->mutex Stefano Garzarella <sgarzare(a)redhat.com> vhost_task: fix vhost_task_create() documentation gaoxu <gaoxu2(a)honor.com> cgroup: Fix compilation issue due to cgroup_mutex not being exported Marek Szyprowski <m.szyprowski(a)samsung.com> dma-mapping: avoid potential unused data compilation warning Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com> intel_th: avoid using deprecated page->mapping, index fields Zhongqiu Han <quic_zhonhan(a)quicinc.com> virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN Manish Pandey <quic_mapa(a)quicinc.com> scsi: ufs: Introduce quirk to extend PA_HIBERN8TIME for UFS devices Dmitry Bogdanov <d.bogdanov(a)yadro.com> scsi: target: iscsi: Fix timeout on deleted connection Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> nvmem: qfprom: switch to 4-byte aligned reads Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> nvmem: core: update raw_len if the bit reading is required Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> nvmem: core: verify cell's raw_len Heiko Stuebner <heiko(a)sntech.de> nvmem: rockchip-otp: add rk3576 variant data Heiko Stuebner <heiko(a)sntech.de> nvmem: rockchip-otp: Move read-offset into variant-data Pengyu Luo <mitltlatltl(a)gmail.com> cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Move IRQ request in probe Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Add support to initialize the bus Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> i2c: designware: Fix an error handling path in i2c_dw_pci_probe() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> i2c: designware: Use temporary variable for struct device Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> i2c: designware: Remove ->disable() callback Jarkko Nikula <jarkko.nikula(a)linux.intel.com> i2c: designware: Uniform initialization flow for polling mode Emanuele Ghidoli <emanuele.ghidoli(a)toradex.com> gpio: pca953x: fix IRQ storm on system wake up Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> gpio: pca953x: Simplify code with cleanup helpers Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> gpio: pca953x: Split pca953x_restore_context() and pca953x_save_context() ------------- Diffstat: Documentation/ABI/stable/sysfs-driver-dma-idxd | 6 + Documentation/admin-guide/kernel-parameters.txt | 2 + Documentation/driver-api/serial/driver.rst | 2 +- Documentation/hwmon/dell-smm-hwmon.rst | 14 +- Makefile | 4 +- arch/arm/boot/dts/nvidia/tegra114.dtsi | 2 +- arch/arm/mach-at91/pm.c | 21 +- .../boot/dts/allwinner/sun50i-h6-beelink-gs1.dts | 38 +- .../boot/dts/allwinner/sun50i-h6-orangepi-3.dts | 14 +- .../boot/dts/allwinner/sun50i-h6-orangepi.dtsi | 22 +- arch/arm64/boot/dts/marvell/armada-3720-uDPU.dtsi | 8 +- arch/arm64/boot/dts/nvidia/tegra210-p2597.dtsi | 2 +- .../dts/nvidia/tegra234-p3740-0002+p3701-0008.dts | 10 + arch/arm64/boot/dts/qcom/ipq9574.dtsi | 2 + arch/arm64/boot/dts/qcom/sm8350.dtsi | 2 +- arch/arm64/boot/dts/qcom/sm8450.dtsi | 2 + arch/arm64/boot/dts/qcom/sm8550.dtsi | 2 + arch/arm64/boot/dts/ti/k3-am68-sk-base-board.dts | 13 +- arch/arm64/boot/dts/xilinx/zynqmp-clk-ccf.dtsi | 15 +- arch/arm64/include/asm/cputype.h | 2 + arch/arm64/include/asm/pgtable.h | 3 +- arch/arm64/kernel/proton-pack.c | 1 + arch/mips/include/asm/ftrace.h | 16 + arch/mips/kernel/pm-cps.c | 30 +- arch/powerpc/include/asm/mmzone.h | 1 + arch/powerpc/kernel/prom_init.c | 4 +- arch/powerpc/mm/book3s64/radix_pgtable.c | 3 +- arch/powerpc/mm/numa.c | 2 +- arch/powerpc/perf/core-book3s.c | 20 + arch/powerpc/perf/isa207-common.c | 4 +- arch/powerpc/platforms/pseries/iommu.c | 29 +- arch/riscv/include/asm/page.h | 12 +- arch/riscv/include/asm/pgtable.h | 2 +- arch/s390/hypfs/hypfs_diag_fs.c | 2 + arch/um/Makefile | 1 + arch/um/kernel/mem.c | 1 + arch/x86/Makefile | 2 +- arch/x86/boot/genimage.sh | 5 +- arch/x86/entry/entry.S | 2 +- arch/x86/events/amd/ibs.c | 20 +- arch/x86/include/asm/bug.h | 5 +- arch/x86/include/asm/ibt.h | 4 +- arch/x86/include/asm/nmi.h | 2 + arch/x86/include/asm/perf_event.h | 1 + arch/x86/kernel/cpu/bugs.c | 10 +- arch/x86/kernel/nmi.c | 42 ++ arch/x86/kernel/reboot.c | 10 +- arch/x86/kernel/traps.c | 82 ++- arch/x86/mm/init.c | 9 +- arch/x86/mm/init_64.c | 15 +- arch/x86/mm/kaslr.c | 10 +- arch/x86/um/os-Linux/mcontext.c | 3 +- crypto/ahash.c | 4 + crypto/algif_hash.c | 4 - crypto/lzo-rle.c | 2 +- crypto/lzo.c | 2 +- crypto/skcipher.c | 1 + drivers/accel/qaic/qaic_drv.c | 2 +- drivers/acpi/Kconfig | 2 +- drivers/acpi/acpi_pnp.c | 2 + drivers/acpi/hed.c | 7 +- drivers/auxdisplay/charlcd.c | 5 +- drivers/auxdisplay/charlcd.h | 5 +- drivers/auxdisplay/hd44780.c | 2 +- drivers/auxdisplay/lcd2s.c | 2 +- drivers/auxdisplay/panel.c | 2 +- drivers/bluetooth/btusb.c | 98 ++- drivers/clk/clk-s2mps11.c | 3 +- drivers/clk/imx/clk-imx8mp.c | 151 ++++ drivers/clk/qcom/Kconfig | 2 +- drivers/clk/qcom/camcc-sm8250.c | 56 +- drivers/clk/qcom/clk-alpha-pll.c | 52 +- drivers/clk/sunxi-ng/ccu-sun20i-d1.c | 42 +- drivers/clk/sunxi-ng/ccu_mp.h | 22 + drivers/clocksource/mips-gic-timer.c | 6 +- drivers/cpufreq/cpufreq-dt-platdev.c | 1 + drivers/cpufreq/tegra186-cpufreq.c | 7 + drivers/cpuidle/governors/menu.c | 13 +- .../crypto/marvell/octeontx2/otx2_cptvf_reqmgr.c | 7 +- drivers/dma/fsl-edma-main.c | 2 +- drivers/dma/idxd/cdev.c | 20 +- drivers/dma/idxd/dma.c | 6 + drivers/dma/idxd/idxd.h | 9 + drivers/dma/idxd/sysfs.c | 34 + drivers/edac/ie31200_edac.c | 28 +- drivers/firmware/arm_ffa/bus.c | 1 + drivers/firmware/arm_ffa/driver.c | 8 + drivers/firmware/arm_scmi/bus.c | 19 +- drivers/fpga/altera-cvp.c | 2 +- drivers/gpio/gpio-pca953x.c | 111 +-- drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c | 30 +- drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 7 +- drivers/gpu/drm/amd/amdgpu/gfxhub_v1_0.c | 10 +- drivers/gpu/drm/amd/amdgpu/mmhub_v1_7.c | 25 + drivers/gpu/drm/amd/amdgpu/mmhub_v1_8.c | 27 + drivers/gpu/drm/amd/amdgpu/mmhub_v9_4.c | 31 + drivers/gpu/drm/amd/amdgpu/nv.c | 16 +- drivers/gpu/drm/amd/amdgpu/soc21.c | 10 +- .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 39 +- .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 69 +- .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 77 +- drivers/gpu/drm/amd/amdkfd/kfd_process.c | 16 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 7 +- .../amd/display/dc/clk_mgr/dcn315/dcn315_clk_mgr.c | 22 +- .../amd/display/dc/clk_mgr/dcn316/dcn316_clk_mgr.c | 15 +- drivers/gpu/drm/amd/display/dc/core/dc.c | 1 + .../amd/display/dc/dce110/dce110_hw_sequencer.c | 3 +- drivers/gpu/drm/amd/display/dc/dcn30/dcn30_dpp.c | 11 +- .../drm/amd/display/dc/dcn315/dcn315_resource.c | 40 +- drivers/gpu/drm/amd/display/dc/inc/core_types.h | 2 +- drivers/gpu/drm/amd/display/dc/link/link_dpms.c | 13 +- .../display/dc/link/protocols/link_dp_capability.c | 33 +- .../amd/display/dc/link/protocols/link_dp_phy.c | 8 +- .../dc/link/protocols/link_dp_training_8b_10b.c | 7 +- .../dc/link/protocols/link_edp_panel_control.c | 25 +- .../include/asic_reg/mmhub/mmhub_9_4_1_offset.h | 32 + .../include/asic_reg/mmhub/mmhub_9_4_1_sh_mask.h | 48 ++ drivers/gpu/drm/ast/ast_mode.c | 10 +- drivers/gpu/drm/bridge/adv7511/adv7511_audio.c | 2 + drivers/gpu/drm/drm_atomic_helper.c | 28 + drivers/gpu/drm/drm_edid.c | 1 + drivers/gpu/drm/drm_gem.c | 4 +- drivers/gpu/drm/mediatek/mtk_dpi.c | 5 +- drivers/gpu/drm/panel/panel-edp.c | 1 + drivers/gpu/drm/rockchip/rockchip_drm_vop2.c | 6 +- drivers/gpu/drm/v3d/v3d_drv.c | 25 +- drivers/hid/hid-ids.h | 4 + drivers/hid/hid-quirks.c | 2 + drivers/hid/usbhid/usbkbd.c | 2 +- drivers/hwmon/dell-smm-hwmon.c | 5 +- drivers/hwmon/gpio-fan.c | 16 +- drivers/hwmon/xgene-hwmon.c | 2 +- drivers/hwtracing/intel_th/Kconfig | 1 + drivers/hwtracing/intel_th/msu.c | 31 +- drivers/i2c/busses/i2c-designware-common.c | 1 + drivers/i2c/busses/i2c-designware-core.h | 5 +- drivers/i2c/busses/i2c-designware-master.c | 43 +- drivers/i2c/busses/i2c-designware-pcidrv.c | 40 +- drivers/i2c/busses/i2c-designware-platdrv.c | 54 +- drivers/i2c/busses/i2c-designware-slave.c | 3 +- drivers/i2c/busses/i2c-pxa.c | 5 +- drivers/i2c/busses/i2c-qup.c | 36 + drivers/i3c/master/svc-i3c-master.c | 4 + drivers/infiniband/core/umem.c | 36 +- drivers/infiniband/core/uverbs_cmd.c | 144 ++-- drivers/infiniband/core/verbs.c | 11 +- drivers/input/joystick/xpad.c | 3 + drivers/iommu/amd/io_pgtable_v2.c | 2 +- drivers/iommu/dma-iommu.c | 28 +- drivers/leds/rgb/leds-pwm-multicolor.c | 5 +- drivers/leds/trigger/ledtrig-netdev.c | 16 +- drivers/mailbox/mailbox.c | 7 +- drivers/mailbox/pcc.c | 8 +- drivers/md/dm-cache-target.c | 24 + drivers/md/dm-table.c | 4 + drivers/md/dm.c | 8 +- drivers/media/i2c/adv7180.c | 34 +- drivers/media/i2c/imx219.c | 2 +- drivers/media/i2c/tc358746.c | 19 +- drivers/media/platform/qcom/camss/camss-csid.c | 64 +- .../platform/st/sti/c8sectpfe/c8sectpfe-core.c | 3 +- .../media/test-drivers/vivid/vivid-kthread-cap.c | 11 +- .../media/test-drivers/vivid/vivid-kthread-out.c | 11 +- .../media/test-drivers/vivid/vivid-kthread-touch.c | 11 +- drivers/media/test-drivers/vivid/vivid-sdr-cap.c | 11 +- drivers/media/usb/cx231xx/cx231xx-417.c | 2 + drivers/media/usb/uvc/uvc_ctrl.c | 77 +- drivers/media/usb/uvc/uvc_v4l2.c | 6 + drivers/media/v4l2-core/v4l2-subdev.c | 2 + drivers/mfd/tps65219.c | 7 - drivers/mmc/host/dw_mmc-exynos.c | 41 +- drivers/mmc/host/sdhci-pci-core.c | 6 +- drivers/mmc/host/sdhci.c | 9 +- drivers/net/bonding/bond_main.c | 2 +- drivers/net/can/c_can/c_can_platform.c | 2 +- drivers/net/can/kvaser_pciefd.c | 90 ++- drivers/net/can/slcan/slcan-core.c | 26 +- drivers/net/ethernet/amd/pds_core/core.c | 5 +- drivers/net/ethernet/amd/pds_core/core.h | 2 +- drivers/net/ethernet/apm/xgene-v2/main.c | 4 +- drivers/net/ethernet/freescale/enetc/enetc.c | 16 +- drivers/net/ethernet/freescale/fec_main.c | 52 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 3 +- drivers/net/ethernet/intel/ice/ice_irq.c | 25 +- drivers/net/ethernet/intel/ice/ice_lag.c | 6 + drivers/net/ethernet/intel/ice/ice_lib.c | 2 + drivers/net/ethernet/intel/ice/ice_virtchnl.c | 1 - drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 14 +- drivers/net/ethernet/marvell/octeontx2/af/rvu.h | 2 + .../net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 24 +- .../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 11 +- .../ethernet/marvell/octeontx2/nic/otx2_common.c | 8 +- drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 22 +- drivers/net/ethernet/mellanox/mlx4/alloc.c | 6 +- drivers/net/ethernet/mellanox/mlx4/en_tx.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/en.h | 2 - .../net/ethernet/mellanox/mlx5/core/en/params.c | 15 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +- drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 5 + .../net/ethernet/mellanox/mlx5/core/en_selftest.c | 3 + .../net/ethernet/mellanox/mlx5/core/esw/legacy.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/events.c | 11 +- .../net/ethernet/mellanox/mlx5/core/fs_ft_pool.c | 6 +- .../net/ethernet/mellanox/mlx5/core/fs_ft_pool.h | 2 - drivers/net/ethernet/mellanox/mlx5/core/health.c | 1 + .../ethernet/mellanox/mlx5/core/lib/fs_chains.c | 3 +- drivers/net/ethernet/microchip/lan743x_main.c | 19 +- drivers/net/ethernet/microsoft/mana/gdma_main.c | 2 +- drivers/net/ethernet/realtek/r8169_main.c | 1 + drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c | 2 +- drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2 +- drivers/net/ethernet/ti/cpsw_new.c | 1 + drivers/net/ieee802154/ca8210.c | 9 +- drivers/net/phy/phylink.c | 2 +- drivers/net/usb/r8152.c | 1 + drivers/net/vxlan/vxlan_core.c | 36 +- drivers/net/wireless/ath/ath12k/core.h | 1 + drivers/net/wireless/ath/ath12k/dp_tx.c | 6 +- drivers/net/wireless/ath/ath12k/hal_desc.h | 2 +- drivers/net/wireless/ath/ath12k/pci.c | 13 +- drivers/net/wireless/ath/ath12k/wmi.c | 4 +- drivers/net/wireless/ath/ath9k/init.c | 4 +- drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.c | 10 +- drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 2 + drivers/net/wireless/mediatek/mt76/mt76.h | 1 + .../net/wireless/mediatek/mt76/mt76_connac3_mac.h | 3 + drivers/net/wireless/mediatek/mt76/mt76x0/pci.c | 3 +- drivers/net/wireless/mediatek/mt76/mt76x0/usb.c | 3 +- drivers/net/wireless/mediatek/mt76/mt76x2/pci.c | 3 +- drivers/net/wireless/mediatek/mt76/mt76x2/usb.c | 3 +- drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 4 +- drivers/net/wireless/mediatek/mt76/tx.c | 3 +- .../net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 17 +- drivers/net/wireless/realtek/rtw88/mac.c | 6 +- drivers/net/wireless/realtek/rtw88/main.c | 40 +- drivers/net/wireless/realtek/rtw88/reg.h | 3 +- drivers/net/wireless/realtek/rtw88/rtw8822b.c | 14 +- drivers/net/wireless/realtek/rtw88/util.c | 3 +- drivers/net/wireless/realtek/rtw89/fw.c | 2 - drivers/net/wireless/realtek/rtw89/regd.c | 2 + drivers/net/wireless/realtek/rtw89/ser.c | 4 + drivers/nvdimm/label.c | 3 +- drivers/nvme/host/pci.c | 8 + drivers/nvme/target/tcp.c | 3 + drivers/nvmem/core.c | 16 +- drivers/nvmem/qfprom.c | 26 +- drivers/nvmem/rockchip-otp.c | 17 +- drivers/pci/Kconfig | 6 + drivers/pci/controller/dwc/pcie-designware-ep.c | 2 +- drivers/pci/controller/pcie-brcmstb.c | 5 +- drivers/pci/controller/vmd.c | 20 + drivers/pci/setup-bus.c | 6 +- drivers/perf/arm-cmn.c | 10 +- drivers/perf/arm_pmuv3.c | 4 +- drivers/phy/phy-core.c | 7 +- drivers/phy/renesas/phy-rcar-gen3-usb2.c | 143 ++-- drivers/phy/starfive/phy-jh7110-usb.c | 7 + drivers/pinctrl/bcm/pinctrl-bcm281xx.c | 44 +- drivers/pinctrl/devicetree.c | 10 +- drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/pinctrl/qcom/pinctrl-apq8064.c | 2 +- drivers/pinctrl/qcom/pinctrl-apq8084.c | 2 +- drivers/pinctrl/qcom/pinctrl-ipq4019.c | 2 +- drivers/pinctrl/qcom/pinctrl-ipq5018.c | 2 +- drivers/pinctrl/qcom/pinctrl-ipq5332.c | 2 +- drivers/pinctrl/qcom/pinctrl-ipq6018.c | 2 +- drivers/pinctrl/qcom/pinctrl-ipq8064.c | 2 +- drivers/pinctrl/qcom/pinctrl-ipq8074.c | 2 +- drivers/pinctrl/qcom/pinctrl-ipq9574.c | 2 +- drivers/pinctrl/qcom/pinctrl-mdm9607.c | 2 +- drivers/pinctrl/qcom/pinctrl-mdm9615.c | 2 +- drivers/pinctrl/qcom/pinctrl-msm.c | 27 +- drivers/pinctrl/qcom/pinctrl-msm.h | 2 +- drivers/pinctrl/qcom/pinctrl-msm8226.c | 2 +- drivers/pinctrl/qcom/pinctrl-msm8660.c | 2 +- drivers/pinctrl/qcom/pinctrl-msm8909.c | 2 +- drivers/pinctrl/qcom/pinctrl-msm8916.c | 2 +- drivers/pinctrl/qcom/pinctrl-msm8953.c | 2 +- drivers/pinctrl/qcom/pinctrl-msm8960.c | 2 +- drivers/pinctrl/qcom/pinctrl-msm8976.c | 2 +- drivers/pinctrl/qcom/pinctrl-msm8994.c | 2 +- drivers/pinctrl/qcom/pinctrl-msm8996.c | 2 +- drivers/pinctrl/qcom/pinctrl-msm8998.c | 2 +- drivers/pinctrl/qcom/pinctrl-msm8x74.c | 2 +- drivers/pinctrl/qcom/pinctrl-qcm2290.c | 2 +- drivers/pinctrl/qcom/pinctrl-qcs404.c | 2 +- drivers/pinctrl/qcom/pinctrl-qdf2xxx.c | 2 +- drivers/pinctrl/qcom/pinctrl-qdu1000.c | 2 +- drivers/pinctrl/qcom/pinctrl-sa8775p.c | 2 +- drivers/pinctrl/qcom/pinctrl-sc7180.c | 2 +- drivers/pinctrl/qcom/pinctrl-sc7280.c | 2 +- drivers/pinctrl/qcom/pinctrl-sc8180x.c | 2 +- drivers/pinctrl/qcom/pinctrl-sc8280xp.c | 2 +- drivers/pinctrl/qcom/pinctrl-sdm660.c | 2 +- drivers/pinctrl/qcom/pinctrl-sdm670.c | 2 +- drivers/pinctrl/qcom/pinctrl-sdm845.c | 2 +- drivers/pinctrl/qcom/pinctrl-sdx55.c | 2 +- drivers/pinctrl/qcom/pinctrl-sdx65.c | 2 +- drivers/pinctrl/qcom/pinctrl-sdx75.c | 2 +- drivers/pinctrl/qcom/pinctrl-sm6115.c | 2 +- drivers/pinctrl/qcom/pinctrl-sm6125.c | 2 +- drivers/pinctrl/qcom/pinctrl-sm6350.c | 2 +- drivers/pinctrl/qcom/pinctrl-sm6375.c | 2 +- drivers/pinctrl/qcom/pinctrl-sm7150.c | 2 +- drivers/pinctrl/qcom/pinctrl-sm8150.c | 2 +- drivers/pinctrl/qcom/pinctrl-sm8250.c | 2 +- drivers/pinctrl/qcom/pinctrl-sm8350.c | 2 +- drivers/pinctrl/qcom/pinctrl-sm8450.c | 2 +- drivers/pinctrl/qcom/pinctrl-sm8550.c | 2 +- drivers/pinctrl/tegra/pinctrl-tegra.c | 59 +- drivers/pinctrl/tegra/pinctrl-tegra.h | 6 + .../x86/dell/dell-wmi-sysman/passobj-attributes.c | 2 +- drivers/platform/x86/fujitsu-laptop.c | 33 +- drivers/platform/x86/thinkpad_acpi.c | 7 + drivers/pmdomain/imx/gpcv2.c | 2 +- drivers/regulator/ad5398.c | 12 +- drivers/remoteproc/qcom_wcnss.c | 34 +- drivers/rtc/rtc-ds1307.c | 4 +- drivers/rtc/rtc-rv3032.c | 2 +- drivers/s390/crypto/vfio_ap_ops.c | 72 +- drivers/scsi/lpfc/lpfc_hbadisc.c | 17 +- drivers/scsi/lpfc/lpfc_init.c | 2 + drivers/scsi/mpi3mr/mpi3mr_fw.c | 3 + drivers/scsi/mpt3sas/mpt3sas_ctl.c | 12 +- drivers/scsi/st.c | 29 +- drivers/scsi/st.h | 2 + drivers/soc/apple/rtkit-internal.h | 1 + drivers/soc/apple/rtkit.c | 58 +- drivers/soc/ti/k3-socinfo.c | 13 +- drivers/soundwire/amd_manager.c | 2 + drivers/soundwire/bus.c | 9 +- drivers/spi/spi-fsl-dspi.c | 46 +- drivers/spi/spi-rockchip.c | 2 +- drivers/spi/spi-sun4i.c | 5 +- drivers/spi/spi-zynqmp-gqspi.c | 22 +- drivers/target/iscsi/iscsi_target.c | 2 +- drivers/target/target_core_spc.c | 14 +- drivers/thermal/intel/x86_pkg_temp_thermal.c | 1 + drivers/thermal/qoriq_thermal.c | 13 + drivers/thunderbolt/retimer.c | 8 +- drivers/tty/serial/8250/8250_port.c | 2 +- drivers/tty/serial/atmel_serial.c | 2 +- drivers/tty/serial/imx.c | 2 +- drivers/tty/serial/serial_mctrl_gpio.c | 34 +- drivers/tty/serial/serial_mctrl_gpio.h | 17 +- drivers/tty/serial/sh-sci.c | 98 ++- drivers/tty/serial/stm32-usart.c | 2 +- drivers/ufs/core/ufshcd.c | 29 + drivers/usb/host/xhci-ring.c | 12 +- drivers/vdpa/mlx5/net/mlx5_vnet.c | 3 + drivers/vfio/pci/vfio_pci_config.c | 3 +- drivers/vfio/pci/vfio_pci_core.c | 10 +- drivers/vfio/pci/vfio_pci_intrs.c | 2 +- drivers/vhost/scsi.c | 23 +- drivers/video/fbdev/core/bitblit.c | 5 +- drivers/video/fbdev/core/fbcon.c | 10 +- drivers/video/fbdev/core/fbcon.h | 38 +- drivers/video/fbdev/core/fbcon_ccw.c | 5 +- drivers/video/fbdev/core/fbcon_cw.c | 5 +- drivers/video/fbdev/core/fbcon_ud.c | 5 +- drivers/video/fbdev/core/tileblit.c | 45 +- drivers/video/fbdev/fsl-diu-fb.c | 1 + drivers/virtio/virtio_ring.c | 2 +- drivers/watchdog/aspeed_wdt.c | 81 ++- drivers/xen/platform-pci.c | 4 + drivers/xen/xenbus/xenbus_probe.c | 14 +- fs/btrfs/block-group.c | 18 +- fs/btrfs/discard.c | 34 +- fs/btrfs/disk-io.c | 28 +- fs/btrfs/extent_io.c | 7 +- fs/btrfs/relocation.c | 6 + fs/btrfs/scrub.c | 4 +- fs/btrfs/send.c | 6 +- fs/coredump.c | 81 ++- fs/dlm/lowcomms.c | 4 +- fs/ext4/balloc.c | 4 +- fs/ext4/ext4.h | 5 +- fs/ext4/extents.c | 19 +- fs/ext4/inode.c | 81 ++- fs/ext4/page-io.c | 16 +- fs/ext4/super.c | 19 +- fs/f2fs/sysfs.c | 74 +- fs/fuse/dir.c | 2 + fs/gfs2/glock.c | 11 +- fs/jbd2/recovery.c | 11 +- fs/namespace.c | 6 +- fs/nfs/client.c | 2 + fs/nfs/delegation.c | 3 +- fs/nfs/dir.c | 15 +- fs/nfs/filelayout/filelayoutdev.c | 6 +- fs/nfs/flexfilelayout/flexfilelayout.c | 1 + fs/nfs/flexfilelayout/flexfilelayoutdev.c | 6 +- fs/nfs/inode.c | 2 + fs/nfs/internal.h | 5 + fs/nfs/nfs3proc.c | 2 +- fs/nfs/nfs4proc.c | 9 +- fs/nfs/nfs4state.c | 10 +- fs/nfs/pnfs.h | 4 +- fs/nfs/pnfs_nfs.c | 9 +- fs/orangefs/inode.c | 7 +- fs/pstore/inode.c | 2 +- fs/pstore/internal.h | 4 +- fs/pstore/platform.c | 11 +- fs/smb/client/cifsacl.c | 17 +- fs/smb/client/cifspdu.h | 5 +- fs/smb/client/cifsproto.h | 7 + fs/smb/client/cifssmb.c | 57 ++ fs/smb/client/connect.c | 30 +- fs/smb/client/fs_context.c | 2 + fs/smb/client/fs_context.h | 3 + fs/smb/client/link.c | 8 +- fs/smb/client/readdir.c | 7 +- fs/smb/client/smb1ops.c | 228 +++++- fs/smb/client/smb2file.c | 11 +- fs/smb/client/smb2ops.c | 30 +- fs/smb/client/transport.c | 2 +- fs/smb/common/smb2pdu.h | 3 + fs/smb/server/oplock.c | 7 +- fs/smb/server/vfs.c | 14 +- include/crypto/hash.h | 3 + include/drm/drm_atomic.h | 23 +- include/drm/drm_gem.h | 13 + include/linux/bpf-cgroup.h | 1 + include/linux/coredump.h | 1 + include/linux/dma-mapping.h | 12 +- include/linux/highmem.h | 6 +- include/linux/hrtimer.h | 1 + include/linux/ipv6.h | 1 + include/linux/lzo.h | 8 + include/linux/mlx4/device.h | 2 +- include/linux/mlx5/fs.h | 2 + include/linux/msi.h | 33 +- include/linux/nfs_fs_sb.h | 12 +- include/linux/page-flags.h | 7 + include/linux/perf_event.h | 8 +- include/linux/rcupdate.h | 2 +- include/linux/rcutree.h | 2 +- include/linux/trace.h | 4 +- include/linux/trace_seq.h | 8 +- include/linux/usb/r8152.h | 1 + include/media/v4l2-subdev.h | 4 +- include/net/af_unix.h | 49 +- include/net/scm.h | 11 + include/net/xfrm.h | 1 - include/rdma/uverbs_std_types.h | 2 +- include/sound/hda_codec.h | 1 + include/sound/pcm.h | 2 + include/trace/events/btrfs.h | 2 +- include/uapi/linux/bpf.h | 1 + include/uapi/linux/idxd.h | 1 + include/ufs/ufs_quirks.h | 6 + io_uring/fdinfo.c | 4 +- io_uring/io_uring.c | 1 + kernel/bpf/cgroup.c | 33 +- kernel/bpf/hashtab.c | 2 +- kernel/bpf/syscall.c | 7 +- kernel/bpf/verifier.c | 4 + kernel/cgroup/cgroup.c | 2 +- kernel/events/core.c | 33 +- kernel/events/hw_breakpoint.c | 5 +- kernel/events/ring_buffer.c | 1 + kernel/fork.c | 9 +- kernel/padata.c | 3 +- kernel/printk/printk.c | 14 +- kernel/rcu/tree_plugin.h | 22 +- kernel/sched/fair.c | 6 +- kernel/softirq.c | 18 + kernel/time/hrtimer.c | 103 ++- kernel/time/posix-timers.c | 1 + kernel/time/timer_list.c | 4 +- kernel/trace/trace.c | 11 +- kernel/trace/trace.h | 16 +- kernel/vhost_task.c | 2 +- lib/dynamic_queue_limits.c | 2 +- lib/lzo/Makefile | 2 +- lib/lzo/lzo1x_compress.c | 102 ++- lib/lzo/lzo1x_compress_safe.c | 18 + mm/memcontrol.c | 6 +- mm/page_alloc.c | 8 + net/Makefile | 2 +- net/bluetooth/l2cap_core.c | 15 +- net/bridge/br_mdb.c | 2 +- net/bridge/br_nf_core.c | 7 +- net/bridge/br_private.h | 1 + net/can/bcm.c | 79 ++- net/core/pktgen.c | 13 +- net/core/scm.c | 17 + net/ipv4/esp4.c | 49 +- net/ipv4/fib_frontend.c | 18 +- net/ipv4/fib_rules.c | 4 +- net/ipv4/fib_trie.c | 22 - net/ipv4/inet_hashtables.c | 37 +- net/ipv4/ip_gre.c | 16 +- net/ipv4/tcp_input.c | 56 +- net/ipv6/esp6.c | 49 +- net/ipv6/fib6_rules.c | 4 +- net/ipv6/ip6_output.c | 9 +- net/llc/af_llc.c | 8 +- net/mac80211/mlme.c | 4 +- net/netfilter/nf_conntrack_standalone.c | 12 +- net/sched/sch_hfsc.c | 15 +- net/smc/smc_pnet.c | 8 +- net/sunrpc/clnt.c | 3 - net/sunrpc/rpcb_clnt.c | 5 +- net/sunrpc/sched.c | 2 + net/tipc/crypto.c | 5 + net/unix/Kconfig | 5 - net/unix/Makefile | 2 - net/unix/af_unix.c | 120 ++-- net/unix/garbage.c | 779 ++++++++++++++------- net/unix/scm.c | 161 ----- net/unix/scm.h | 10 - net/xfrm/xfrm_policy.c | 3 + net/xfrm/xfrm_state.c | 6 +- samples/bpf/Makefile | 2 +- scripts/config | 26 +- scripts/kconfig/merge_config.sh | 4 +- security/integrity/ima/ima_main.c | 4 +- security/smack/smackfs.c | 21 +- sound/core/oss/pcm_oss.c | 3 +- sound/core/pcm_native.c | 11 + sound/core/seq/seq_clientmgr.c | 5 +- sound/core/seq/seq_memory.c | 1 + sound/pci/hda/hda_beep.c | 15 +- sound/pci/hda/patch_realtek.c | 77 +- sound/soc/codecs/cs42l43-jack.c | 7 + sound/soc/codecs/mt6359-accdet.h | 9 + sound/soc/codecs/pcm3168a.c | 6 +- sound/soc/codecs/rt722-sdca-sdw.c | 49 +- sound/soc/codecs/tas2764.c | 53 +- sound/soc/fsl/imx-card.c | 2 +- sound/soc/intel/boards/bytcr_rt5640.c | 13 + sound/soc/mediatek/mt8188/mt8188-afe-clk.c | 8 + sound/soc/mediatek/mt8188/mt8188-afe-clk.h | 8 + sound/soc/mediatek/mt8188/mt8188-afe-pcm.c | 4 - sound/soc/qcom/sm8250.c | 3 + sound/soc/soc-dai.c | 8 +- sound/soc/soc-ops.c | 29 +- sound/soc/sof/ipc4-control.c | 11 +- sound/soc/sof/ipc4-pcm.c | 3 +- sound/soc/sof/topology.c | 18 +- sound/soc/sunxi/sun4i-codec.c | 53 ++ tools/bpf/bpftool/common.c | 3 +- tools/build/Makefile.build | 6 +- tools/include/uapi/linux/bpf.h | 1 + tools/lib/bpf/libbpf.c | 2 +- tools/net/ynl/lib/ynl.c | 2 +- tools/objtool/check.c | 21 +- tools/testing/kunit/qemu_configs/x86_64.py | 4 +- .../selftests/bpf/prog_tests/sockmap_ktls.c | 1 - .../testing/selftests/net/forwarding/bridge_mdb.sh | 2 +- tools/testing/selftests/net/gro.sh | 3 +- 552 files changed, 5765 insertions(+), 2788 deletions(-)

1 month, 1 week

12
457
0 0

[PATCH 6.1 000/325] 6.1.141-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.1.141 release. There are 325 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 04 Jun 2025 13:42:20 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.141-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.1.141-rc1 Nishanth Menon <nm(a)ti.com> net: ethernet: ti: am65-cpsw: Lower random mac address error print to info Mark Pearson <mpearson-lenovo(a)squebb.ca> platform/x86: thinkpad_acpi: Ignore battery threshold change event notification Valtteri Koskivuori <vkoskiv(a)gmail.com> platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys Trond Myklebust <trond.myklebust(a)hammerspace.com> NFS: Avoid flushing data while holding directory locks in nfs_rename() Ilya Guterman <amfernusus(a)gmail.com> nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro Alessandro Grassi <alessandro.grassi(a)mailbox.org> spi: spi-sun4i: fix early activation Masahiro Yamada <masahiroy(a)kernel.org> um: let 'make clean' properly clean underlying SUBARCH as well John Chau <johnchau(a)0atlas.com> platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS Jeff Layton <jlayton(a)kernel.org> nfs: don't share pNFS DS connections between net namespaces Milton Barrera <miltonjosue2001(a)gmail.com> HID: quirks: Add ADATA XPG alpha wireless mouse support Christian Brauner <brauner(a)kernel.org> coredump: hand a pidfd to the usermode coredump helper Christian Brauner <brauner(a)kernel.org> fork: use pidfd_prepare() Christian Brauner <brauner(a)kernel.org> pid: add pidfd_prepare() Christian Brauner <brauner(a)kernel.org> coredump: fix error handling for replace_fd() Robin Murphy <robin.murphy(a)arm.com> perf/arm-cmn: Initialise cmn->cpu earlier Robin Murphy <robin.murphy(a)arm.com> perf/arm-cmn: Fix REQ2/SNP2 mixup Pedro Tammela <pctammela(a)mojatatu.com> net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Alok Tiwari <alok.a.tiwari(a)oracle.com> arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node Shigeru Yoshida <syoshida(a)redhat.com> af_unix: Fix uninit-value in __unix_walk_scc() Michal Luczaj <mhal(a)rbox.co> af_unix: Fix garbage collection of embryos carrying OOB with SCM_RIGHTS Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Add dead flag to struct scm_fp_list. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Don't access successor in unix_del_edges() during GC. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Try not to hold unix_gc_lock during accept(). Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Remove lock dance in unix_peek_fds(). Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Replace garbage collection algorithm. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Detect dead SCC. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Assign a unique index to SCC. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Avoid Tarjan's algorithm if unnecessary. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Skip GC if no cycle exists. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Save O(n) setup of Tarjan's algo. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Fix up unix_edge.successor for embryo socket. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Save listener for embryo socket. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Detect Strongly Connected Components. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Iterate all vertices by DFS. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Bulk update unix_tot_inflight/unix_inflight when queuing skb. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Link struct unix_edge when queuing skb. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Allocate struct unix_edge for each inflight AF_UNIX fd. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Allocate struct unix_vertex for each inflight AF_UNIX fd. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Remove CONFIG_UNIX_SCM. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Remove io_uring code for GC. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Replace BUG_ON() with WARN_ON_ONCE(). Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Try to run GC async. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Run GC on only one CPU. Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Return struct unix_sock from unix_get_socket(). Alexander Mikhalitsyn <aleksandr.mikhalitsyn(a)canonical.com> af_unix: Kconfig: make CONFIG_UNIX bool Boris Burkov <boris(a)bur.io> btrfs: check folio mapping after unlock in relocate_one_folio() Frederic Weisbecker <frederic(a)kernel.org> hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-pf: Fix page pool frag allocation warning Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-pf: Fix page pool cache index corruption. Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-pf: fix page_pool creation fail for rings > 32k Harshit Mogalapalli <harshit.m.mogalapalli(a)oracle.com> dmaengine: idxd: Fix passing freed memory in idxd_cdev_open() Balbir Singh <balbirs(a)nvidia.com> x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers bounce buffers Nathan Chancellor <nathan(a)kernel.org> i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work() Dan Carpenter <dan.carpenter(a)linaro.org> pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group() Geert Uytterhoeven <geert+renesas(a)glider.be> serial: sh-sci: Save and restore more registers Nathan Chancellor <nathan(a)kernel.org> kbuild: Disable -Wdefault-const-init-unsafe Larisa Grigore <larisa.grigore(a)nxp.com> spi: spi-fsl-dspi: Reset SR flags before sending a new message Bogdan-Gabriel Roman <bogdan-gabriel.roman(a)nxp.com> spi: spi-fsl-dspi: Halt the module after a new message transfer Larisa Grigore <larisa.grigore(a)nxp.com> spi: spi-fsl-dspi: restrict register range for regmap access Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix stream write failure Jernej Skrabec <jernej.skrabec(a)gmail.com> Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection" Tianyang Zhang <zhangtianyang(a)loongson.cn> mm/page_alloc.c: avoid infinite retries caused by cpuset race Breno Leitao <leitao(a)debian.org> memcg: always call cond_resched() after fn() Mario Limonciello <mario.limonciello(a)amd.com> Revert "drm/amd: Keep display off while going into S4" Wang Zhaolong <wangzhaolong1(a)huawei.com> smb: client: Reset all search buffer pointers when releasing buffer Wang Zhaolong <wangzhaolong1(a)huawei.com> smb: client: Fix use-after-free in cifs_fill_dirent feijuan.li <feijuan.li(a)samsung.com> drm/edid: fixed the bug that hdr metadata was not reset Vladimir Moskovkin <Vladimir.Moskovkin(a)kaspersky.com> platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() Ilia Gavrilov <Ilia.Gavrilov(a)infotecs.ru> llc: fix data loss when reading from a socket in llc_ui_recvmsg() Ed Burcher <git(a)edburcher.com> ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10 Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Fix race of buffer access at PCM OSS layer Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing rcu read protection for procfs content Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add locking for bcm_op runtime updates Carlos Sanchez <carlossanchez(a)geotab.com> can: slcan: allow reception of short error messages Dominik Grzegorzek <dominik.grzegorzek(a)oracle.com> padata: do not leak refcount in reorder_work Ivan Pravdin <ipravdin.official(a)gmail.com> crypto: algif_hash - fix double free in hash_accept Geetha sowjanya <gakula(a)marvell.com> octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG Subbaraya Sundeep <sbhatta(a)marvell.com> octeontx2-af: Set LMT_ENA bit for APR table entries Wang Liang <wangliang74(a)huawei.com> net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done Suman Ghosh <sumang(a)marvell.com> octeontx2-pf: Add AF_XDP non-zero copy support Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-pf: Add support for page pool Cong Wang <xiyou.wangcong(a)gmail.com> sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() Pavel Begunkov <asml.silence(a)gmail.com> io_uring: fix overflow resched cqe reordering Thangaraj Samynathan <thangaraj.s(a)microchip.com> net: lan743x: Restore SGMII CTRL register on resume Paul Kocialkowski <paulk(a)sys-base.io> net: dwmac-sun8i: Use parsed internal PHY address instead of 1 Jacob Keller <jacob.e.keller(a)intel.com> ice: fix vf->num_mac count with port representors Ido Schimmel <idosch(a)nvidia.com> bridge: netfilter: Fix forwarding of fragmented packets Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix not checking l2cap_chan security level Dave Jiang <dave.jiang(a)intel.com> dmaengine: idxd: Fix ->poll() return value Paul Chaignon <paul.chaignon(a)gmail.com> xfrm: Sanitize marks before insert Andre Przywara <andre.przywara(a)arm.com> clk: sunxi-ng: d1: Add missing divider for MMC mod clocks Matti Lehtimäki <matti.lehtimaki(a)gmail.com> remoteproc: qcom_wcnss: Fix on platforms without fallback regulators Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix allowing write() from different address spaces Fenghua Yu <fenghua.yu(a)intel.com> dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling Dave Jiang <dave.jiang(a)intel.com> dmaengine: idxd: add per DSA wq workqueue for processing cr faults Sabrina Dubroca <sd(a)queasysnail.net> espintcp: remove encap socket caching to avoid reference leak Al Viro <viro(a)zeniv.linux.org.uk> __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock Jason Andryuk <jason.andryuk(a)amd.com> xenbus: Allow PVH dom0 a non-local xenstore Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: add support for Killer on MTL Goldwyn Rodrigues <rgoldwyn(a)suse.de> btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref Jens Axboe <axboe(a)kernel.dk> io_uring/fdinfo: annotate racy sq/cq head/tail reads Alistair Francis <alistair.francis(a)wdc.com> nvmet-tcp: don't restore null sk_state_change Takashi Iwai <tiwai(a)suse.de> ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx Takashi Iwai <tiwai(a)suse.de> ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 Martin Blumenstingl <martin.blumenstingl(a)googlemail.com> pinctrl: meson: define the pull up/down resistor value as 60 kOhm Chenyuan Yang <chenyuan0y(a)gmail.com> ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of() Jessica Zhang <quic_jesszhan(a)quicinc.com> drm: Add valid clones check Douglas Anderson <dianders(a)chromium.org> drm/panel-edp: Add Starry 116KHD024006 Simona Vetter <simona.vetter(a)ffwll.ch> drm/atomic: clarify the rules around drm_atomic_state->allow_modeset Rosen Penev <rosenp(a)gmail.com> wifi: ath9k: return by of_get_mac_address Isaac Scott <isaac.scott(a)ideasonboard.com> regulator: ad5398: Add device tree support Sean Anderson <sean.anderson(a)linux.dev> spi: zynqmp-gqspi: Always acknowledge interrupts Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate Soeren Moch <smoch(a)web.de> wifi: rtl8xxxu: retry firmware download on error Ravi Bangoria <ravi.bangoria(a)amd.com> perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt Viktor Malik <vmalik(a)redhat.com> bpftool: Fix readlink usage in get_fd_type Thomas Zimmermann <tzimmermann(a)suse.de> drm/ast: Find VBIOS mode from regular display size Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode junan <junan76(a)163.com> HID: usbkbd: Fix the bit shift number for LED_KANA Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: st: Restore some drive settings after reset Justin Tee <justin.tee(a)broadcom.com> scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails Justin Tee <justin.tee(a)broadcom.com> scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine Konstantin Taranov <kotaranov(a)microsoft.com> net/mana: fix warning in the writer of client oob Michal Swiatkowski <michal.swiatkowski(a)linux.intel.com> ice: count combined queues using Rx/Tx count Peter Zijlstra (Intel) <peterz(a)infradead.org> perf: Avoid the read if the count is already updated Ankur Arora <ankur.a.arora(a)oracle.com> rcu: fix header guard for rcu_all_qs() Ankur Arora <ankur.a.arora(a)oracle.com> rcu: handle unstable rdp in rcu_read_unlock_strict() Ankur Arora <ankur.a.arora(a)oracle.com> rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y Heiner Kallweit <hkallweit1(a)gmail.com> r8169: don't scan PHY addresses > 0 Ido Schimmel <idosch(a)nvidia.com> vxlan: Annotate FDB data races Depeng Shao <quic_depengs(a)quicinc.com> media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is available Andrey Vatoropin <a.vatoropin(a)crpt.ru> hwmon: (xgene-hwmon) use appropriate type for the latency value Jordan Crouse <jorcrous(a)amazon.com> clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix download_firmware_validate() for RTL8814AU Aleksander Jan Bajkowski <olek2(a)wp.pl> r8152: add vendor/device ID pair for Dell Alienware AW1022z Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). Athira Rajeev <atrajeev(a)linux.vnet.ibm.com> arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: remove misplaced drv_mgd_complete_tx() call Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't unconditionally call drv_mgd_complete_tx() William Tu <witu(a)nvidia.com> net/mlx5e: reduce rep rxq depth to 256 for ECPF William Tu <witu(a)nvidia.com> net/mlx5e: set the tx_queue_len for pfifo_fast Alexei Lazar <alazar(a)nvidia.com> net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB Alex Deucher <alexander.deucher(a)amd.com> drm/amd/display/dm: drop hw_support check in amdgpu_dm_i2c_xfer() Shiwu Zhang <shiwu.zhang(a)amd.com> drm/amdgpu: enlarge the VBIOS binary size limit Tom Chung <chiahsuan.chung(a)amd.com> drm/amd/display: Initial psr_version with correct setting Jiang Liu <gerry(a)linux.alibaba.com> drm/amdgpu: reset psp->cmd to NULL after releasing the buffer Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> phy: core: don't require set_mode() callback for phy_get_mode() to work Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> serial: sh-sci: Update the suspend/resume support Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> clk: qcom: clk-alpha-pll: Do not use random stack value for recalc rate Kees Cook <kees(a)kernel.org> net/mlx4_core: Avoid impossible mlx4_db_alloc() order value Brendan Jackman <jackmanb(a)google.com> kunit: tool: Use qboot on QEMU x86_64 Konstantin Andreev <andreev(a)swemel.ru> smack: recognize ipv4 CIPSO w/o categories Valentin Caron <valentin.caron(a)foss.st.com> pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot() Hector Martin <marcan(a)marcan.st> ASoC: tas2764: Power up/down amp on mute ops Hector Martin <marcan(a)marcan.st> ASoC: tas2764: Mark SW_RESET as volatile Hector Martin <marcan(a)marcan.st> ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG Martin Povišer <povik+lin(a)cutebit.org> ASoC: ops: Enforce platform maximum on initial value Shahar Shitrit <shshitrit(a)nvidia.com> net/mlx5: Apply rate-limiting to high temperature warning Shahar Shitrit <shshitrit(a)nvidia.com> net/mlx5: Modify LSB bitmask in temperature event to include only the first bit Hans Verkuil <hverkuil(a)xs4all.nl> media: test-drivers: vivid: don't call schedule in loop Petr Machata <petrm(a)nvidia.com> vxlan: Join / leave MC group after remote changes Xiaofei Tan <tanxiaofei(a)huawei.com> ACPI: HED: Always initialize before evged Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Fix old_size lower bound in calculate_iosize() too Jakub Kicinski <kuba(a)kernel.org> eth: mlx4: don't try to complete XDP frames in netpoll Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> can: c_can: Use of_property_present() to test existence of DT property Ahmad Fatoum <a.fatoum(a)pengutronix.de> pmdomain: imx: gpcv2: use proper helper for property detection Michael Margolin <mrgolin(a)amazon.com> RDMA/core: Fix best page size finding when it can cross SG entries Alexis Lothoré <alexis.lothore(a)bootlin.com> serial: mctrl_gpio: split disable_ms into sync and no_sync APIs Frank Li <Frank.Li(a)nxp.com> i3c: master: svc: Flush FIFO before sending Dynamic Address Assignment(DAA) Arnd Bergmann <arnd(a)arndb.de> EDAC/ie31200: work around false positive build warning Peter Seiderer <ps.report(a)gmx.net> net: pktgen: fix access outside of user given buffer in pktgen_thread_write() Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: fw: propagate error code from rtw89_h2c_tx() Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31 Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU Shivasharan S <shivasharan.srikanteshwara(a)broadcom.com> scsi: mpt3sas: Send a diag reset if target reset fails Paul Burton <paulburton(a)kernel.org> clocksource: mips-gic-timer: Enable counter when CPUs start Paul Burton <paulburton(a)kernel.org> MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core Jason Gunthorpe <jgg(a)ziepe.ca> genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie Bibo Mao <maobibo(a)loongson.cn> MIPS: Use arch specific syscall name match function Balbir Singh <balbirs(a)nvidia.com> x86/kaslr: Reduce KASLR entropy on most x86 systems Jinliang Zheng <alexjlzheng(a)gmail.com> dm: fix unconditional IO throttle caused by REQ_PREFLUSH Nandakumar Edamana <nandakumar(a)nandakumar.co.in> libbpf: Fix out-of-bound read Niklas Söderlund <niklas.soderlund+renesas(a)ragnatech.se> media: adv7180: Disable test-pattern control on adv7180 Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpuidle: menu: Avoid discarding useful information Waiman Long <longman(a)redhat.com> x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() Yihan Zhu <Yihan.Zhu(a)amd.com> drm/amd/display: handle max_downscale_src_width fail check Nir Lichtman <nir(a)lichtman.org> x86/build: Fix broken copy command in genimage.sh when making isoimage Andrew Davis <afd(a)ti.com> soc: ti: k3-socinfo: Do not use syscon helper to build regmap Hangbin Liu <liuhangbin(a)gmail.com> bonding: report duplicate MAC address in all situations Arnd Bergmann <arnd(a)arndb.de> net: xgene-v2: remove incorrect ACPI_PTR annotation Eric Woudstra <ericwouds(a)gmail.com> net: ethernet: mtk_ppe_offload: Allow QinQ, double ETH_P_8021Q only Yuanjun Gong <ruc_gongyuanjun(a)163.com> leds: pwm-multicolor: Add check for fwnode_property_read_u32 Philip Yang <Philip.Yang(a)amd.com> drm/amdkfd: KFD release_work possible circular locking Kevin Krakauer <krakauer(a)google.com> selftests/net: have `gro.sh -t` return a correct exit code Moshe Shemesh <moshe(a)nvidia.com> net/mlx5: Avoid report two health errors on same syndrome Viresh Kumar <viresh.kumar(a)linaro.org> firmware: arm_ffa: Set dma_mask for ffa devices Stanimir Varbanov <svarbanov(a)suse.de> PCI: brcmstb: Add a softdep to MIP MSI-X driver Stanimir Varbanov <svarbanov(a)suse.de> PCI: brcmstb: Expand inbound window size up to 64GB Hector Martin <marcan(a)marcan.st> soc: apple: rtkit: Implement OSLog buffers properly Janne Grunau <j(a)jannau.net> soc: apple: rtkit: Use high prio work queue Kuhanh Murugasen Krishnan <kuhanh.murugasen.krishnan(a)intel.com> fpga: altera-cvp: Increase credit timeout AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence Li Bin <bin.li(a)microchip.com> ARM: at91: pm: fix at91_suspend_finish for ZQ calibration Alexander Stein <alexander.stein(a)ew.tq-group.com> hwmon: (gpio-fan) Add missing mutex locks Breno Leitao <leitao(a)debian.org> x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 Ahmad Fatoum <a.fatoum(a)pengutronix.de> clk: imx8mp: inform CCF of maximum frequency of clocks Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map Andy Yan <andy.yan(a)rock-chips.com> drm/rockchip: vop2: Add uv swap for cluster window Kuniyuki Iwashima <kuniyu(a)amazon.com> ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). Maciej S. Szmigiero <mail(a)maciej.szmigiero.name> ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7 Saket Kumar Bhaskar <skb99(a)linux.ibm.com> perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type Peter Seiderer <ps.report(a)gmx.net> net: pktgen: fix mpls maximum labels list parsing Alexander Sverdlin <alexander.sverdlin(a)siemens.com> net: ethernet: ti: cpsw_new: populate netdev of_node Artur Weber <aweber.kernel(a)gmail.com> pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" Hans Verkuil <hverkuil(a)xs4all.nl> media: cx231xx: set device_caps for 417 Victor Lu <victorchengchi.lu(a)amd.com> drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c Matti Lehtimäki <matti.lehtimaki(a)gmail.com> remoteproc: qcom_wcnss: Handle platforms with only single power domain Choong Yong Liang <yong.liang.choong(a)linux.intel.com> net: phylink: use pl->link_interface in phylink_expects_phy() Matthew Wilcox (Oracle) <willy(a)infradead.org> orangefs: Do not truncate file size Ming-Hung Tsai <mtsai(a)redhat.com> dm cache: prevent BUG_ON by blocking retries on failed device resumes Markus Elfring <elfring(a)users.sourceforge.net> media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() Svyatoslav Ryhel <clamor95(a)gmail.com> ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> ieee802154: ca8210: Use proper setters and getters for bitwise types Alexandre Belloni <alexandre.belloni(a)bootlin.com> rtc: ds1307: stop disabling alarms on probe Eric Dumazet <edumazet(a)google.com> tcp: bring back NUMA dispersion in inet_ehash_locks_alloc() Takashi Iwai <tiwai(a)suse.de> ALSA: seq: Improve data consistency at polling Andreas Schwab <schwab(a)linux-m68k.org> powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 Diogo Ivo <diogo.ivo(a)tecnico.ulisboa.pt> arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator Herbert Xu <herbert(a)gondor.apana.org.au> crypto: lzo - Fix compression buffer overrun Aaron Kling <luceoscutum(a)gmail.com> cpufreq: tegra186: Share policy per cluster Vasant Hegde <vasant.hegde(a)amd.com> iommu/amd/pgtbl_v2: Improve error handling Alexey Klimov <alexey.klimov(a)linaro.org> ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct hd44780_common" Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: Check for empty queue in run_queue Zhikai Zhai <zhikai.zhai(a)amd.com> drm/amd/display: calculate the remain segments for all pipes Willem de Bruijn <willemb(a)google.com> ipv6: save dontfrag in cork Kurt Borja <kuurtb(a)gmail.com> hwmon: (dell-smm) Increment the number of fans Erick Shepherd <erick.shepherd(a)ni.com> mmc: sdhci: Disable SD card clock before changing parameters Kaustabh Chakraborty <kauschluss(a)disroot.org> mmc: dw_mmc: add exynos7870 DW MMC support Ryan Roberts <ryan.roberts(a)arm.com> arm64/mm: Check PUD_TYPE_TABLE in pud_bad() Nicolas Bouchinet <nicolas.bouchinet(a)ssi.gouv.fr> netfilter: conntrack: Bound nf_conntrack sysctl writes Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> timer_list: Don't use %pK through printk() Eric Dumazet <edumazet(a)google.com> posix-timers: Add cond_resched() to posix_timer_add() search loop Maher Sanalla <msanalla(a)nvidia.com> RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject() Baokun Li <libaokun1(a)huawei.com> ext4: reject the 'data_err=abort' option in nojournal mode Ryan Walklin <ryan(a)testtoast.com> ASoC: sun4i-codec: support hp-det-gpios property Prathamesh Shete <pshete(a)nvidia.com> pinctrl-tegra: Restore SFSEL bit when freeing pins Frediano Ziglio <frediano.ziglio(a)cloud.com> xen: Add support for XenServer 6.1 platform device Guangguan Wang <guangguan.wang(a)linux.alibaba.com> net/smc: use the correct ndev to find pnetid by pnetid table Mikulas Patocka <mpatocka(a)redhat.com> dm: restrict dm device size to 2^63-512 bytes Shashank Gupta <shashankg(a)marvell.com> crypto: octeontx2 - suppress auth failure screaming due to negative tests Seyediman Seyedarab <imandevel(a)gmail.com> kbuild: fix argument parsing in scripts/config Nícolas F. R. A. Prado <nfraprado(a)collabora.com> ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for retimer Alexandre Belloni <alexandre.belloni(a)bootlin.com> rtc: rv3032: fix EERD location Ilpo Järvinen <ij(a)kernel.org> tcp: reorganize tcp_in_ack_event() and tcp_count_delivered() Mykyta Yatsenko <yatsenko(a)meta.com> bpf: Return prog btf_id without capable check Alex Williamson <alex.williamson(a)redhat.com> vfio/pci: Handle INTx IRQ_NOTCONNECTED Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: st: ERASE does not change tape location Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: st: Tighten the page format heuristics with MODE SELECT Christian Göttsche <cgzones(a)googlemail.com> ext4: reorder capability check last Tiwei Bie <tiwei.btw(a)antgroup.com> um: Update min_low_pfn to match changes in uml_reserved Benjamin Berg <benjamin(a)sipsolutions.net> um: Store full CSGSFS and SS register from mcontext Heming Zhao <heming.zhao(a)suse.com> dlm: make tcp still work in multi-link env Stanley Chu <yschu(a)nuvoton.com> i3c: master: svc: Fix missing STOP for master request Jing Zhou <Jing.Zhou(a)amd.com> drm/amd/display: Guard against setting dispclk low for dcn31x Filipe Manana <fdmanana(a)suse.com> btrfs: send: return -ENAMETOOLONG when attempting a path that is too long Filipe Manana <fdmanana(a)suse.com> btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work() Filipe Manana <fdmanana(a)suse.com> btrfs: fix non-empty delayed iputs list on unmount due to async workers Qu Wenruo <wqu(a)suse.com> btrfs: run btrfs_error_commit_super() early Mark Harmstone <maharmstone(a)fb.com> btrfs: avoid linker error in btrfs_find_create_tree_block() Boris Burkov <boris(a)bur.io> btrfs: make btrfs_discard_workfn() block_group ref explicit Vitalii Mordan <mordan(a)ispras.ru> i2c: pxa: fix call balance of i2c->clk handling routines Stephan Gerhold <stephan.gerhold(a)kernkonzept.com> i2c: qup: Vote for interconnect bandwidth to DRAM Philip Redkin <me(a)rarity.fan> x86/mm: Check return value from memblock_phys_alloc_range() Erick Shepherd <erick.shepherd(a)ni.com> mmc: host: Wait for Vdd to settle on card power off Robert Richter <rrichter(a)amd.com> libnvdimm/labels: Fix divide error in nd_label_data_init() Roger Pau Monne <roger.pau(a)citrix.com> PCI: vmd: Disable MSI remapping bypass under Xen Trond Myklebust <trond.myklebust(a)hammerspace.com> pNFS/flexfiles: Report ENETDOWN as a connection error Ian Rogers <irogers(a)google.com> tools/build: Don't pass test log files to linker Frank Li <Frank.Li(a)nxp.com> PCI: dwc: ep: Ensure proper iteration over outbound map windows Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Properly disable uaccess validation Ryo Takakura <ryotkkr98(a)gmail.com> lockdep: Fix wait context check on softirq for PREEMPT_RT Jing Su <jingsusu(a)didiglobal.com> dql: Fix dql->limit value when reset. Alice Guo <alice.guo(a)nxp.com> thermal/drivers/qoriq: Power down TMU on system suspend Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: rpcbind should never reset the port to the value '0' Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: rpc_clnt_set_transport() must not change the autobind setting Trond Myklebust <trond.myklebust(a)hammerspace.com> NFSv4: Treat ENETUNREACH errors as fatal for state recovery Pali Rohár <pali(a)kernel.org> cifs: Fix establishing NetBIOS session for SMB2+ connection Zsolt Kajtar <soci(a)c64.rulez.org> fbdev: core: tileblit: Implement missing margin clearing for tileblit Zsolt Kajtar <soci(a)c64.rulez.org> fbcon: Use correct erase colour for clearing in fbcon Shixiong Ou <oushixiong(a)kylinos.cn> fbdev: fsl-diu-fb: add missing device_remove_file() Tudor Ambarus <tudor.ambarus(a)linaro.org> mailbox: use error ret code of of_parse_phandle_with_args() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> tracing: Mark binary printing functions with __printf() attribute Jinqian Yang <yangjinqian1(a)huawei.com> arm64: Add support for HIP09 Spectre-BHB mitigation Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: Don't allow waiting for exiting tasks Trond Myklebust <trond.myklebust(a)hammerspace.com> NFS: Don't allow waiting for exiting tasks Trond Myklebust <trond.myklebust(a)hammerspace.com> NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() Matt Johnston <matt(a)codeconstruct.com.au> fuse: Return EPERM rather than ENOSYS from link() Pali Rohár <pali(a)kernel.org> cifs: Fix negotiate retry functionality Pali Rohár <pali(a)kernel.org> cifs: Fix querying and creating MF symlinks over SMB1 Pali Rohár <pali(a)kernel.org> cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES Anthony Krowiak <akrowiak(a)linux.ibm.com> s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log Daniel Gomez <da.gomez(a)samsung.com> kconfig: merge_config: use an empty file as initfile Haoran Jiang <jianghaoran(a)kylinos.cn> samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora Brandon Kammerdiener <brandon.kammerdiener(a)intel.com> bpf: fix possible endless loop in BPF map iteration Ihor Solodrai <ihor.solodrai(a)linux.dev> selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure Felix Kuehling <felix.kuehling(a)amd.com> drm/amdgpu: Allow P2P access through XGMI Vladimir Oltean <vladimir.oltean(a)nxp.com> net: enetc: refactor bulk flipping of RX buffers to separate function Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpi3mr: Add level check to control event logging gaoxu <gaoxu2(a)honor.com> cgroup: Fix compilation issue due to cgroup_mutex not being exported Marek Szyprowski <m.szyprowski(a)samsung.com> dma-mapping: avoid potential unused data compilation warning Zhongqiu Han <quic_zhonhan(a)quicinc.com> virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN Dmitry Bogdanov <d.bogdanov(a)yadro.com> scsi: target: iscsi: Fix timeout on deleted connection Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Move IRQ request in probe Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Add support to initialize the bus Emanuele Ghidoli <emanuele.ghidoli(a)toradex.com> gpio: pca953x: fix IRQ storm on system wake up Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> gpio: pca953x: Simplify code with cleanup helpers Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> gpio: pca953x: Split pca953x_restore_context() and pca953x_save_context() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> gpio: pca953x: Add missing header(s) ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 2 + Documentation/driver-api/serial/driver.rst | 2 +- Documentation/hwmon/dell-smm-hwmon.rst | 14 +- Makefile | 16 +- arch/arm/boot/dts/tegra114.dtsi | 2 +- arch/arm/mach-at91/pm.c | 21 +- .../boot/dts/allwinner/sun50i-h6-beelink-gs1.dts | 38 +- .../boot/dts/allwinner/sun50i-h6-orangepi-3.dts | 14 +- .../boot/dts/allwinner/sun50i-h6-orangepi.dtsi | 22 +- arch/arm64/boot/dts/nvidia/tegra210-p2597.dtsi | 2 +- arch/arm64/boot/dts/qcom/sm8350.dtsi | 2 +- arch/arm64/include/asm/cputype.h | 2 + arch/arm64/include/asm/pgtable.h | 3 +- arch/arm64/kernel/proton-pack.c | 1 + arch/mips/include/asm/ftrace.h | 16 + arch/mips/kernel/pm-cps.c | 30 +- arch/powerpc/kernel/prom_init.c | 4 +- arch/powerpc/perf/core-book3s.c | 20 + arch/powerpc/perf/isa207-common.c | 4 +- arch/um/Makefile | 1 + arch/um/kernel/mem.c | 1 + arch/x86/boot/genimage.sh | 5 +- arch/x86/events/amd/ibs.c | 3 +- arch/x86/include/asm/nmi.h | 2 + arch/x86/include/asm/perf_event.h | 1 + arch/x86/kernel/cpu/bugs.c | 10 +- arch/x86/kernel/nmi.c | 42 ++ arch/x86/kernel/reboot.c | 10 +- arch/x86/mm/init.c | 9 +- arch/x86/mm/init_64.c | 15 +- arch/x86/mm/kaslr.c | 10 +- arch/x86/um/os-Linux/mcontext.c | 3 +- crypto/algif_hash.c | 4 - crypto/lzo-rle.c | 2 +- crypto/lzo.c | 2 +- drivers/acpi/Kconfig | 2 +- drivers/acpi/hed.c | 7 +- drivers/auxdisplay/charlcd.c | 5 +- drivers/auxdisplay/charlcd.h | 5 +- drivers/auxdisplay/hd44780.c | 2 +- drivers/auxdisplay/lcd2s.c | 2 +- drivers/auxdisplay/panel.c | 2 +- drivers/clk/imx/clk-imx8mp.c | 151 ++++ drivers/clk/qcom/camcc-sm8250.c | 56 +- drivers/clk/qcom/clk-alpha-pll.c | 52 +- drivers/clk/sunxi-ng/ccu-sun20i-d1.c | 42 +- drivers/clk/sunxi-ng/ccu_mp.h | 22 + drivers/clocksource/mips-gic-timer.c | 6 +- drivers/cpufreq/tegra186-cpufreq.c | 7 + drivers/cpuidle/governors/menu.c | 13 +- .../crypto/marvell/octeontx2/otx2_cptvf_reqmgr.c | 7 +- drivers/dma/idxd/cdev.c | 128 +++- drivers/dma/idxd/idxd.h | 7 + drivers/dma/idxd/init.c | 2 + drivers/dma/idxd/sysfs.c | 1 + drivers/edac/ie31200_edac.c | 28 +- drivers/firmware/arm_ffa/bus.c | 1 + drivers/fpga/altera-cvp.c | 2 +- drivers/gpio/gpio-pca953x.c | 114 +-- drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c | 30 +- drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 7 +- drivers/gpu/drm/amd/amdgpu/gfxhub_v1_0.c | 10 +- drivers/gpu/drm/amd/amdkfd/kfd_process.c | 16 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 7 +- .../amd/display/dc/clk_mgr/dcn315/dcn315_clk_mgr.c | 20 +- .../amd/display/dc/clk_mgr/dcn316/dcn316_clk_mgr.c | 13 +- drivers/gpu/drm/amd/display/dc/core/dc.c | 1 + drivers/gpu/drm/amd/display/dc/dcn30/dcn30_dpp.c | 11 +- .../drm/amd/display/dc/dcn315/dcn315_resource.c | 40 +- drivers/gpu/drm/ast/ast_mode.c | 10 +- drivers/gpu/drm/drm_atomic_helper.c | 28 + drivers/gpu/drm/drm_edid.c | 1 + drivers/gpu/drm/mediatek/mtk_dpi.c | 5 +- drivers/gpu/drm/panel/panel-edp.c | 1 + drivers/gpu/drm/rockchip/rockchip_drm_vop2.c | 6 +- drivers/hid/hid-ids.h | 4 + drivers/hid/hid-quirks.c | 2 + drivers/hid/usbhid/usbkbd.c | 2 +- drivers/hwmon/dell-smm-hwmon.c | 5 +- drivers/hwmon/gpio-fan.c | 16 +- drivers/hwmon/xgene-hwmon.c | 2 +- drivers/i2c/busses/i2c-pxa.c | 5 +- drivers/i2c/busses/i2c-qup.c | 36 + drivers/i3c/master/svc-i3c-master.c | 4 + drivers/infiniband/core/umem.c | 36 +- drivers/infiniband/core/uverbs_cmd.c | 144 ++-- drivers/infiniband/core/verbs.c | 11 +- drivers/iommu/amd/io_pgtable_v2.c | 2 +- drivers/iommu/dma-iommu.c | 28 +- drivers/leds/rgb/leds-pwm-multicolor.c | 5 +- drivers/mailbox/mailbox.c | 7 +- drivers/md/dm-cache-target.c | 24 + drivers/md/dm-table.c | 4 + drivers/md/dm.c | 8 +- drivers/media/i2c/adv7180.c | 34 +- drivers/media/platform/qcom/camss/camss-csid.c | 64 +- .../platform/st/sti/c8sectpfe/c8sectpfe-core.c | 3 +- .../media/test-drivers/vivid/vivid-kthread-cap.c | 11 +- .../media/test-drivers/vivid/vivid-kthread-out.c | 11 +- .../media/test-drivers/vivid/vivid-kthread-touch.c | 11 +- drivers/media/test-drivers/vivid/vivid-sdr-cap.c | 11 +- drivers/media/usb/cx231xx/cx231xx-417.c | 2 + drivers/media/usb/uvc/uvc_v4l2.c | 6 + drivers/mmc/host/dw_mmc-exynos.c | 41 +- drivers/mmc/host/sdhci-pci-core.c | 6 +- drivers/mmc/host/sdhci.c | 9 +- drivers/net/bonding/bond_main.c | 2 +- drivers/net/can/c_can/c_can_platform.c | 2 +- drivers/net/can/slcan/slcan-core.c | 26 +- drivers/net/ethernet/apm/xgene-v2/main.c | 4 +- drivers/net/ethernet/freescale/enetc/enetc.c | 16 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 3 +- drivers/net/ethernet/intel/ice/ice_virtchnl.c | 1 - drivers/net/ethernet/marvell/octeontx2/Kconfig | 1 + .../net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 24 +- .../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 11 +- drivers/net/ethernet/marvell/octeontx2/nic/cn10k.c | 6 +- drivers/net/ethernet/marvell/octeontx2/nic/cn10k.h | 2 +- .../ethernet/marvell/octeontx2/nic/otx2_common.c | 130 ++-- .../ethernet/marvell/octeontx2/nic/otx2_common.h | 9 +- .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 18 +- .../net/ethernet/marvell/octeontx2/nic/otx2_txrx.c | 49 +- .../net/ethernet/marvell/octeontx2/nic/otx2_txrx.h | 7 +- .../net/ethernet/marvell/octeontx2/nic/qos_sq.c | 2 +- drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 22 +- drivers/net/ethernet/mellanox/mlx4/alloc.c | 6 +- drivers/net/ethernet/mellanox/mlx4/en_tx.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 5 + .../net/ethernet/mellanox/mlx5/core/en_selftest.c | 3 + drivers/net/ethernet/mellanox/mlx5/core/events.c | 11 +- drivers/net/ethernet/mellanox/mlx5/core/health.c | 1 + drivers/net/ethernet/microchip/lan743x_main.c | 19 +- drivers/net/ethernet/microsoft/mana/gdma_main.c | 2 +- drivers/net/ethernet/realtek/r8169_main.c | 1 + drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c | 2 +- drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2 +- drivers/net/ethernet/ti/cpsw_new.c | 1 + drivers/net/ieee802154/ca8210.c | 9 +- drivers/net/phy/phylink.c | 2 +- drivers/net/usb/r8152.c | 1 + drivers/net/vxlan/vxlan_core.c | 36 +- drivers/net/wireless/ath/ath9k/init.c | 4 +- drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 2 + .../net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 17 +- drivers/net/wireless/realtek/rtw88/main.c | 40 +- drivers/net/wireless/realtek/rtw88/reg.h | 3 +- drivers/net/wireless/realtek/rtw88/rtw8822b.c | 14 +- drivers/net/wireless/realtek/rtw88/util.c | 3 +- drivers/net/wireless/realtek/rtw89/fw.c | 2 - drivers/net/wireless/realtek/rtw89/regd.c | 2 + drivers/net/wireless/realtek/rtw89/ser.c | 4 + drivers/nvdimm/label.c | 3 +- drivers/nvme/host/pci.c | 2 + drivers/nvme/target/tcp.c | 3 + drivers/pci/Kconfig | 6 + drivers/pci/controller/dwc/pcie-designware-ep.c | 2 +- drivers/pci/controller/pcie-brcmstb.c | 5 +- drivers/pci/controller/vmd.c | 20 + drivers/pci/setup-bus.c | 6 +- drivers/perf/arm-cmn.c | 10 +- drivers/phy/phy-core.c | 7 +- drivers/phy/renesas/phy-rcar-gen3-usb2.c | 143 ++-- drivers/pinctrl/bcm/pinctrl-bcm281xx.c | 44 +- drivers/pinctrl/devicetree.c | 10 +- drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/pinctrl/tegra/pinctrl-tegra.c | 59 +- drivers/pinctrl/tegra/pinctrl-tegra.h | 6 + .../x86/dell/dell-wmi-sysman/passobj-attributes.c | 2 +- drivers/platform/x86/fujitsu-laptop.c | 33 +- drivers/platform/x86/thinkpad_acpi.c | 7 + drivers/regulator/ad5398.c | 12 +- drivers/remoteproc/qcom_wcnss.c | 34 +- drivers/rtc/rtc-ds1307.c | 4 +- drivers/rtc/rtc-rv3032.c | 2 +- drivers/s390/crypto/vfio_ap_ops.c | 72 +- drivers/scsi/lpfc/lpfc_hbadisc.c | 17 +- drivers/scsi/lpfc/lpfc_init.c | 2 + drivers/scsi/mpi3mr/mpi3mr_fw.c | 3 + drivers/scsi/mpt3sas/mpt3sas_ctl.c | 12 +- drivers/scsi/st.c | 29 +- drivers/scsi/st.h | 2 + drivers/soc/apple/rtkit-internal.h | 1 + drivers/soc/apple/rtkit.c | 58 +- drivers/soc/imx/gpcv2.c | 2 +- drivers/soc/ti/k3-socinfo.c | 13 +- drivers/spi/spi-fsl-dspi.c | 46 +- drivers/spi/spi-sun4i.c | 5 +- drivers/spi/spi-zynqmp-gqspi.c | 22 +- drivers/target/iscsi/iscsi_target.c | 2 +- drivers/thermal/qoriq_thermal.c | 13 + drivers/thunderbolt/retimer.c | 8 +- drivers/tty/serial/8250/8250_port.c | 2 +- drivers/tty/serial/atmel_serial.c | 2 +- drivers/tty/serial/imx.c | 2 +- drivers/tty/serial/serial_mctrl_gpio.c | 34 +- drivers/tty/serial/serial_mctrl_gpio.h | 17 +- drivers/tty/serial/sh-sci.c | 98 ++- drivers/tty/serial/stm32-usart.c | 2 +- drivers/vfio/pci/vfio_pci_config.c | 3 +- drivers/vfio/pci/vfio_pci_core.c | 10 +- drivers/vfio/pci/vfio_pci_intrs.c | 2 +- drivers/video/fbdev/core/bitblit.c | 5 +- drivers/video/fbdev/core/fbcon.c | 10 +- drivers/video/fbdev/core/fbcon.h | 38 +- drivers/video/fbdev/core/fbcon_ccw.c | 5 +- drivers/video/fbdev/core/fbcon_cw.c | 5 +- drivers/video/fbdev/core/fbcon_ud.c | 5 +- drivers/video/fbdev/core/tileblit.c | 45 +- drivers/video/fbdev/fsl-diu-fb.c | 1 + drivers/virtio/virtio_ring.c | 2 +- drivers/xen/platform-pci.c | 4 + drivers/xen/xenbus/xenbus_probe.c | 14 +- fs/btrfs/block-group.c | 18 +- fs/btrfs/discard.c | 34 +- fs/btrfs/disk-io.c | 28 +- fs/btrfs/extent_io.c | 7 +- fs/btrfs/relocation.c | 6 + fs/btrfs/send.c | 6 +- fs/coredump.c | 81 ++- fs/dlm/lowcomms.c | 4 +- fs/ext4/balloc.c | 4 +- fs/ext4/super.c | 12 + fs/fuse/dir.c | 2 + fs/gfs2/glock.c | 11 +- fs/namespace.c | 6 +- fs/nfs/client.c | 2 + fs/nfs/delegation.c | 3 +- fs/nfs/dir.c | 15 +- fs/nfs/filelayout/filelayoutdev.c | 6 +- fs/nfs/flexfilelayout/flexfilelayout.c | 1 + fs/nfs/flexfilelayout/flexfilelayoutdev.c | 6 +- fs/nfs/inode.c | 2 + fs/nfs/internal.h | 5 + fs/nfs/nfs3proc.c | 2 +- fs/nfs/nfs4proc.c | 9 +- fs/nfs/nfs4state.c | 10 +- fs/nfs/pnfs.h | 4 +- fs/nfs/pnfs_nfs.c | 9 +- fs/orangefs/inode.c | 7 +- fs/smb/client/cifsproto.h | 3 + fs/smb/client/connect.c | 30 +- fs/smb/client/link.c | 8 +- fs/smb/client/readdir.c | 7 +- fs/smb/client/smb1ops.c | 7 - fs/smb/client/smb2file.c | 11 +- fs/smb/client/smb2ops.c | 3 - fs/smb/client/transport.c | 2 +- fs/smb/server/vfs.c | 14 +- include/drm/drm_atomic.h | 23 +- include/linux/coredump.h | 1 + include/linux/dma-mapping.h | 12 +- include/linux/hrtimer.h | 1 + include/linux/ipv6.h | 1 + include/linux/lzo.h | 8 + include/linux/mlx4/device.h | 2 +- include/linux/msi.h | 33 +- include/linux/nfs_fs_sb.h | 12 +- include/linux/perf_event.h | 8 +- include/linux/pid.h | 1 + include/linux/rcupdate.h | 2 +- include/linux/rcutree.h | 2 +- include/linux/trace.h | 4 +- include/linux/trace_seq.h | 8 +- include/linux/usb/r8152.h | 1 + include/net/af_unix.h | 48 +- include/net/scm.h | 11 + include/net/xfrm.h | 1 - include/rdma/uverbs_std_types.h | 2 +- include/sound/hda_codec.h | 1 + include/sound/pcm.h | 2 + include/trace/events/btrfs.h | 2 +- io_uring/fdinfo.c | 4 +- io_uring/io_uring.c | 1 + kernel/bpf/hashtab.c | 2 +- kernel/bpf/syscall.c | 4 +- kernel/cgroup/cgroup.c | 2 +- kernel/events/core.c | 33 +- kernel/events/hw_breakpoint.c | 5 +- kernel/events/ring_buffer.c | 1 + kernel/fork.c | 98 ++- kernel/padata.c | 3 +- kernel/pid.c | 19 +- kernel/rcu/tree_plugin.h | 22 +- kernel/softirq.c | 18 + kernel/time/hrtimer.c | 103 ++- kernel/time/posix-timers.c | 1 + kernel/time/timer_list.c | 4 +- kernel/trace/trace.c | 11 +- kernel/trace/trace.h | 16 +- lib/dynamic_queue_limits.c | 2 +- lib/lzo/Makefile | 2 +- lib/lzo/lzo1x_compress.c | 102 ++- lib/lzo/lzo1x_compress_safe.c | 18 + mm/memcontrol.c | 6 +- mm/page_alloc.c | 8 + net/Makefile | 2 +- net/bluetooth/l2cap_core.c | 15 +- net/bridge/br_nf_core.c | 7 +- net/bridge/br_private.h | 1 + net/can/bcm.c | 79 ++- net/core/pktgen.c | 13 +- net/core/scm.c | 17 + net/ipv4/esp4.c | 49 +- net/ipv4/fib_frontend.c | 18 +- net/ipv4/fib_rules.c | 4 +- net/ipv4/fib_trie.c | 22 - net/ipv4/inet_hashtables.c | 37 +- net/ipv4/tcp_input.c | 56 +- net/ipv6/esp6.c | 49 +- net/ipv6/fib6_rules.c | 4 +- net/ipv6/ip6_output.c | 9 +- net/llc/af_llc.c | 8 +- net/mac80211/mlme.c | 4 +- net/netfilter/nf_conntrack_standalone.c | 12 +- net/sched/sch_hfsc.c | 15 +- net/smc/smc_pnet.c | 8 +- net/sunrpc/clnt.c | 3 - net/sunrpc/rpcb_clnt.c | 5 +- net/sunrpc/sched.c | 2 + net/tipc/crypto.c | 5 + net/unix/Kconfig | 11 +- net/unix/Makefile | 2 - net/unix/af_unix.c | 120 ++-- net/unix/garbage.c | 779 ++++++++++++++------- net/unix/scm.c | 154 ---- net/unix/scm.h | 10 - net/xfrm/xfrm_policy.c | 3 + net/xfrm/xfrm_state.c | 6 +- samples/bpf/Makefile | 2 +- scripts/config | 26 +- scripts/kconfig/merge_config.sh | 4 +- security/smack/smackfs.c | 4 + sound/core/oss/pcm_oss.c | 3 +- sound/core/pcm_native.c | 11 + sound/core/seq/seq_clientmgr.c | 5 +- sound/core/seq/seq_memory.c | 1 + sound/pci/hda/hda_beep.c | 15 +- sound/pci/hda/patch_realtek.c | 77 +- sound/soc/codecs/mt6359-accdet.h | 9 + sound/soc/codecs/pcm3168a.c | 6 +- sound/soc/codecs/tas2764.c | 53 +- sound/soc/fsl/imx-card.c | 2 +- sound/soc/intel/boards/bytcr_rt5640.c | 13 + sound/soc/qcom/sm8250.c | 3 + sound/soc/soc-dai.c | 8 +- sound/soc/soc-ops.c | 29 +- sound/soc/sunxi/sun4i-codec.c | 53 ++ tools/bpf/bpftool/common.c | 3 +- tools/build/Makefile.build | 6 +- tools/lib/bpf/libbpf.c | 2 +- tools/objtool/check.c | 11 +- tools/testing/kunit/qemu_configs/x86_64.py | 4 +- .../selftests/bpf/prog_tests/sockmap_ktls.c | 1 - tools/testing/selftests/net/gro.sh | 3 +- 354 files changed, 4230 insertions(+), 2032 deletions(-)

1 month, 1 week

11
335
0 0

[PATCH 5.15 000/207] 5.15.185-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.15.185 release. There are 207 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 04 Jun 2025 13:42:20 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.185-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.15.185-rc1 Robin Murphy <robin.murphy(a)arm.com> perf/arm-cmn: Initialise cmn->cpu earlier Mark Pearson <mpearson-lenovo(a)squebb.ca> platform/x86: thinkpad_acpi: Ignore battery threshold change event notification Valtteri Koskivuori <vkoskiv(a)gmail.com> platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys Michal Suchanek <msuchanek(a)suse.de> tpm: tis: Double the timeout B to 4s Ilya Guterman <amfernusus(a)gmail.com> nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro Alessandro Grassi <alessandro.grassi(a)mailbox.org> spi: spi-sun4i: fix early activation Masahiro Yamada <masahiroy(a)kernel.org> um: let 'make clean' properly clean underlying SUBARCH as well John Chau <johnchau(a)0atlas.com> platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS Jeff Layton <jlayton(a)kernel.org> nfs: don't share pNFS DS connections between net namespaces Milton Barrera <miltonjosue2001(a)gmail.com> HID: quirks: Add ADATA XPG alpha wireless mouse support Christian Brauner <brauner(a)kernel.org> coredump: hand a pidfd to the usermode coredump helper Christian Brauner <brauner(a)kernel.org> fork: use pidfd_prepare() Christian Brauner <brauner(a)kernel.org> pid: add pidfd_prepare() Christian Brauner <brauner(a)kernel.org> coredump: fix error handling for replace_fd() Pedro Tammela <pctammela(a)mojatatu.com> net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Alok Tiwari <alok.a.tiwari(a)oracle.com> arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node Wang Zhaolong <wangzhaolong1(a)huawei.com> smb: client: Reset all search buffer pointers when releasing buffer Wang Zhaolong <wangzhaolong1(a)huawei.com> smb: client: Fix use-after-free in cifs_fill_dirent Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com> x86/its: Fix undefined reference to cpu_wants_rethunk_at() Jani Nikula <jani.nikula(a)intel.com> drm/i915/gvt: fix unterminated-string-initialization warning Juergen Gross <jgross(a)suse.com> xen/swiotlb: relax alignment requirements Nathan Chancellor <nathan(a)kernel.org> i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work() Nathan Chancellor <nathan(a)kernel.org> kbuild: Disable -Wdefault-const-init-unsafe Larisa Grigore <larisa.grigore(a)nxp.com> spi: spi-fsl-dspi: Reset SR flags before sending a new message Bogdan-Gabriel Roman <bogdan-gabriel.roman(a)nxp.com> spi: spi-fsl-dspi: Halt the module after a new message transfer Larisa Grigore <larisa.grigore(a)nxp.com> spi: spi-fsl-dspi: restrict register range for regmap access Jernej Skrabec <jernej.skrabec(a)gmail.com> Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection" Tianyang Zhang <zhangtianyang(a)loongson.cn> mm/page_alloc.c: avoid infinite retries caused by cpuset race Breno Leitao <leitao(a)debian.org> memcg: always call cond_resched() after fn() Mario Limonciello <mario.limonciello(a)amd.com> Revert "drm/amd: Keep display off while going into S4" feijuan.li <feijuan.li(a)samsung.com> drm/edid: fixed the bug that hdr metadata was not reset Vladimir Moskovkin <Vladimir.Moskovkin(a)kaspersky.com> platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() Ilia Gavrilov <Ilia.Gavrilov(a)infotecs.ru> llc: fix data loss when reading from a socket in llc_ui_recvmsg() Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Fix race of buffer access at PCM OSS layer Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing rcu read protection for procfs content Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add locking for bcm_op runtime updates Dominik Grzegorzek <dominik.grzegorzek(a)oracle.com> padata: do not leak refcount in reorder_work Ivan Pravdin <ipravdin.official(a)gmail.com> crypto: algif_hash - fix double free in hash_accept Subbaraya Sundeep <sbhatta(a)marvell.com> octeontx2-af: Set LMT_ENA bit for APR table entries Wang Liang <wangliang74(a)huawei.com> net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done Cong Wang <xiyou.wangcong(a)gmail.com> sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() Paul Kocialkowski <paulk(a)sys-base.io> net: dwmac-sun8i: Use parsed internal PHY address instead of 1 Ido Schimmel <idosch(a)nvidia.com> bridge: netfilter: Fix forwarding of fragmented packets Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix not checking l2cap_chan security level Paul Chaignon <paul.chaignon(a)gmail.com> xfrm: Sanitize marks before insert Matti Lehtimäki <matti.lehtimaki(a)gmail.com> remoteproc: qcom_wcnss: Fix on platforms without fallback regulators Al Viro <viro(a)zeniv.linux.org.uk> __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock Jason Andryuk <jason.andryuk(a)amd.com> xenbus: Allow PVH dom0 a non-local xenstore Goldwyn Rodrigues <rgoldwyn(a)suse.de> btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref Alistair Francis <alistair.francis(a)wdc.com> nvmet-tcp: don't restore null sk_state_change Takashi Iwai <tiwai(a)suse.de> ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx Takashi Iwai <tiwai(a)suse.de> ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 Martin Blumenstingl <martin.blumenstingl(a)googlemail.com> pinctrl: meson: define the pull up/down resistor value as 60 kOhm Chenyuan Yang <chenyuan0y(a)gmail.com> ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of() Jessica Zhang <quic_jesszhan(a)quicinc.com> drm: Add valid clones check Simona Vetter <simona.vetter(a)ffwll.ch> drm/atomic: clarify the rules around drm_atomic_state->allow_modeset Rosen Penev <rosenp(a)gmail.com> wifi: ath9k: return by of_get_mac_address Isaac Scott <isaac.scott(a)ideasonboard.com> regulator: ad5398: Add device tree support Sean Anderson <sean.anderson(a)linux.dev> spi: zynqmp-gqspi: Always acknowledge interrupts Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate Ravi Bangoria <ravi.bangoria(a)amd.com> perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt Viktor Malik <vmalik(a)redhat.com> bpftool: Fix readlink usage in get_fd_type Thomas Zimmermann <tzimmermann(a)suse.de> drm/ast: Find VBIOS mode from regular display size junan <junan76(a)163.com> HID: usbkbd: Fix the bit shift number for LED_KANA Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: st: Restore some drive settings after reset Justin Tee <justin.tee(a)broadcom.com> scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine Konstantin Taranov <kotaranov(a)microsoft.com> net/mana: fix warning in the writer of client oob Ankur Arora <ankur.a.arora(a)oracle.com> rcu: fix header guard for rcu_all_qs() Ankur Arora <ankur.a.arora(a)oracle.com> rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y Heiner Kallweit <hkallweit1(a)gmail.com> r8169: don't scan PHY addresses > 0 Ido Schimmel <idosch(a)nvidia.com> vxlan: Annotate FDB data races Depeng Shao <quic_depengs(a)quicinc.com> media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is available Andrey Vatoropin <a.vatoropin(a)crpt.ru> hwmon: (xgene-hwmon) use appropriate type for the latency value Jordan Crouse <jorcrous(a)amazon.com> clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix download_firmware_validate() for RTL8814AU Aleksander Jan Bajkowski <olek2(a)wp.pl> r8152: add vendor/device ID pair for Dell Alienware AW1022z Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). Athira Rajeev <atrajeev(a)linux.vnet.ibm.com> arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: remove misplaced drv_mgd_complete_tx() call Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't unconditionally call drv_mgd_complete_tx() William Tu <witu(a)nvidia.com> net/mlx5e: reduce rep rxq depth to 256 for ECPF William Tu <witu(a)nvidia.com> net/mlx5e: set the tx_queue_len for pfifo_fast Alexei Lazar <alazar(a)nvidia.com> net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB Tom Chung <chiahsuan.chung(a)amd.com> drm/amd/display: Initial psr_version with correct setting Jiang Liu <gerry(a)linux.alibaba.com> drm/amdgpu: reset psp->cmd to NULL after releasing the buffer Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> phy: core: don't require set_mode() callback for phy_get_mode() to work Kees Cook <kees(a)kernel.org> net/mlx4_core: Avoid impossible mlx4_db_alloc() order value Sakari Ailus <sakari.ailus(a)linux.intel.com> media: v4l: Memset argument to 0 before calling get_mbus_config pad op Konstantin Andreev <andreev(a)swemel.ru> smack: recognize ipv4 CIPSO w/o categories Valentin Caron <valentin.caron(a)foss.st.com> pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot() Hector Martin <marcan(a)marcan.st> ASoC: tas2764: Power up/down amp on mute ops Martin Povišer <povik+lin(a)cutebit.org> ASoC: ops: Enforce platform maximum on initial value Shahar Shitrit <shshitrit(a)nvidia.com> net/mlx5: Apply rate-limiting to high temperature warning Shahar Shitrit <shshitrit(a)nvidia.com> net/mlx5: Modify LSB bitmask in temperature event to include only the first bit Xiaofei Tan <tanxiaofei(a)huawei.com> ACPI: HED: Always initialize before evged Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Fix old_size lower bound in calculate_iosize() too Jakub Kicinski <kuba(a)kernel.org> eth: mlx4: don't try to complete XDP frames in netpoll Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> can: c_can: Use of_property_present() to test existence of DT property Michael Margolin <mrgolin(a)amazon.com> RDMA/core: Fix best page size finding when it can cross SG entries Arnd Bergmann <arnd(a)arndb.de> EDAC/ie31200: work around false positive build warning Peter Seiderer <ps.report(a)gmx.net> net: pktgen: fix access outside of user given buffer in pktgen_thread_write() Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31 Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU Shivasharan S <shivasharan.srikanteshwara(a)broadcom.com> scsi: mpt3sas: Send a diag reset if target reset fails Paul Burton <paulburton(a)kernel.org> clocksource: mips-gic-timer: Enable counter when CPUs start Paul Burton <paulburton(a)kernel.org> MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core Bibo Mao <maobibo(a)loongson.cn> MIPS: Use arch specific syscall name match function Balbir Singh <balbirs(a)nvidia.com> x86/kaslr: Reduce KASLR entropy on most x86 systems Nandakumar Edamana <nandakumar(a)nandakumar.co.in> libbpf: Fix out-of-bound read Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpuidle: menu: Avoid discarding useful information Waiman Long <longman(a)redhat.com> x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() Yihan Zhu <Yihan.Zhu(a)amd.com> drm/amd/display: handle max_downscale_src_width fail check Nir Lichtman <nir(a)lichtman.org> x86/build: Fix broken copy command in genimage.sh when making isoimage Andrew Davis <afd(a)ti.com> soc: ti: k3-socinfo: Do not use syscon helper to build regmap Hangbin Liu <liuhangbin(a)gmail.com> bonding: report duplicate MAC address in all situations Arnd Bergmann <arnd(a)arndb.de> net: xgene-v2: remove incorrect ACPI_PTR annotation Philip Yang <Philip.Yang(a)amd.com> drm/amdkfd: KFD release_work possible circular locking Kevin Krakauer <krakauer(a)google.com> selftests/net: have `gro.sh -t` return a correct exit code Moshe Shemesh <moshe(a)nvidia.com> net/mlx5: Avoid report two health errors on same syndrome Viresh Kumar <viresh.kumar(a)linaro.org> firmware: arm_ffa: Set dma_mask for ffa devices Stanimir Varbanov <svarbanov(a)suse.de> PCI: brcmstb: Add a softdep to MIP MSI-X driver Stanimir Varbanov <svarbanov(a)suse.de> PCI: brcmstb: Expand inbound window size up to 64GB Kuhanh Murugasen Krishnan <kuhanh.murugasen.krishnan(a)intel.com> fpga: altera-cvp: Increase credit timeout AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence Li Bin <bin.li(a)microchip.com> ARM: at91: pm: fix at91_suspend_finish for ZQ calibration Alexander Stein <alexander.stein(a)ew.tq-group.com> hwmon: (gpio-fan) Add missing mutex locks Breno Leitao <leitao(a)debian.org> x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 Ahmad Fatoum <a.fatoum(a)pengutronix.de> clk: imx8mp: inform CCF of maximum frequency of clocks Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map Kuniyuki Iwashima <kuniyu(a)amazon.com> ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). Peter Seiderer <ps.report(a)gmx.net> net: pktgen: fix mpls maximum labels list parsing Alexander Sverdlin <alexander.sverdlin(a)siemens.com> net: ethernet: ti: cpsw_new: populate netdev of_node Artur Weber <aweber.kernel(a)gmail.com> pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" Hans Verkuil <hverkuil(a)xs4all.nl> media: cx231xx: set device_caps for 417 Victor Lu <victorchengchi.lu(a)amd.com> drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c Matti Lehtimäki <matti.lehtimaki(a)gmail.com> remoteproc: qcom_wcnss: Handle platforms with only single power domain Matthew Wilcox (Oracle) <willy(a)infradead.org> orangefs: Do not truncate file size Ming-Hung Tsai <mtsai(a)redhat.com> dm cache: prevent BUG_ON by blocking retries on failed device resumes Markus Elfring <elfring(a)users.sourceforge.net> media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() Svyatoslav Ryhel <clamor95(a)gmail.com> ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> ieee802154: ca8210: Use proper setters and getters for bitwise types Alexandre Belloni <alexandre.belloni(a)bootlin.com> rtc: ds1307: stop disabling alarms on probe Eric Dumazet <edumazet(a)google.com> tcp: bring back NUMA dispersion in inet_ehash_locks_alloc() Andreas Schwab <schwab(a)linux-m68k.org> powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 Diogo Ivo <diogo.ivo(a)tecnico.ulisboa.pt> arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator Herbert Xu <herbert(a)gondor.apana.org.au> crypto: lzo - Fix compression buffer overrun Aaron Kling <luceoscutum(a)gmail.com> cpufreq: tegra186: Share policy per cluster Alexey Klimov <alexey.klimov(a)linaro.org> ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct hd44780_common" Willem de Bruijn <willemb(a)google.com> ipv6: save dontfrag in cork Erick Shepherd <erick.shepherd(a)ni.com> mmc: sdhci: Disable SD card clock before changing parameters Ryan Roberts <ryan.roberts(a)arm.com> arm64/mm: Check PUD_TYPE_TABLE in pud_bad() Nicolas Bouchinet <nicolas.bouchinet(a)ssi.gouv.fr> netfilter: conntrack: Bound nf_conntrack sysctl writes Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> timer_list: Don't use %pK through printk() Eric Dumazet <edumazet(a)google.com> posix-timers: Add cond_resched() to posix_timer_add() search loop Maher Sanalla <msanalla(a)nvidia.com> RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject() Frediano Ziglio <frediano.ziglio(a)cloud.com> xen: Add support for XenServer 6.1 platform device Mikulas Patocka <mpatocka(a)redhat.com> dm: restrict dm device size to 2^63-512 bytes Shashank Gupta <shashankg(a)marvell.com> crypto: octeontx2 - suppress auth failure screaming due to negative tests Seyediman Seyedarab <imandevel(a)gmail.com> kbuild: fix argument parsing in scripts/config Nícolas F. R. A. Prado <nfraprado(a)collabora.com> ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect Alexandre Belloni <alexandre.belloni(a)bootlin.com> rtc: rv3032: fix EERD location Ilpo Järvinen <ij(a)kernel.org> tcp: reorganize tcp_in_ack_event() and tcp_count_delivered() Alex Williamson <alex.williamson(a)redhat.com> vfio/pci: Handle INTx IRQ_NOTCONNECTED Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: st: ERASE does not change tape location Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: st: Tighten the page format heuristics with MODE SELECT Christian Göttsche <cgzones(a)googlemail.com> ext4: reorder capability check last Tiwei Bie <tiwei.btw(a)antgroup.com> um: Update min_low_pfn to match changes in uml_reserved Benjamin Berg <benjamin(a)sipsolutions.net> um: Store full CSGSFS and SS register from mcontext Nick Hu <nick.hu(a)sifive.com> clocksource/drivers/timer-riscv: Stop stimecmp when cpu hotplug Heming Zhao <heming.zhao(a)suse.com> dlm: make tcp still work in multi-link env Stanley Chu <yschu(a)nuvoton.com> i3c: master: svc: Fix missing STOP for master request Filipe Manana <fdmanana(a)suse.com> btrfs: send: return -ENAMETOOLONG when attempting a path that is too long Filipe Manana <fdmanana(a)suse.com> btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work() Mark Harmstone <maharmstone(a)fb.com> btrfs: avoid linker error in btrfs_find_create_tree_block() Boris Burkov <boris(a)bur.io> btrfs: make btrfs_discard_workfn() block_group ref explicit Vitalii Mordan <mordan(a)ispras.ru> i2c: pxa: fix call balance of i2c->clk handling routines Stephan Gerhold <stephan.gerhold(a)kernkonzept.com> i2c: qup: Vote for interconnect bandwidth to DRAM Felix Fietkau <nbd(a)nbd.name> wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2 Erick Shepherd <erick.shepherd(a)ni.com> mmc: host: Wait for Vdd to settle on card power off Robert Richter <rrichter(a)amd.com> libnvdimm/labels: Fix divide error in nd_label_data_init() Roger Pau Monne <roger.pau(a)citrix.com> PCI: vmd: Disable MSI remapping bypass under Xen Trond Myklebust <trond.myklebust(a)hammerspace.com> pNFS/flexfiles: Report ENETDOWN as a connection error Ian Rogers <irogers(a)google.com> tools/build: Don't pass test log files to linker Frank Li <Frank.Li(a)nxp.com> PCI: dwc: ep: Ensure proper iteration over outbound map windows Ryo Takakura <ryotkkr98(a)gmail.com> lockdep: Fix wait context check on softirq for PREEMPT_RT Jing Su <jingsusu(a)didiglobal.com> dql: Fix dql->limit value when reset. Alice Guo <alice.guo(a)nxp.com> thermal/drivers/qoriq: Power down TMU on system suspend Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: rpcbind should never reset the port to the value '0' Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: rpc_clnt_set_transport() must not change the autobind setting Trond Myklebust <trond.myklebust(a)hammerspace.com> NFSv4: Treat ENETUNREACH errors as fatal for state recovery Zsolt Kajtar <soci(a)c64.rulez.org> fbdev: core: tileblit: Implement missing margin clearing for tileblit Zsolt Kajtar <soci(a)c64.rulez.org> fbcon: Use correct erase colour for clearing in fbcon Shixiong Ou <oushixiong(a)kylinos.cn> fbdev: fsl-diu-fb: add missing device_remove_file() Tudor Ambarus <tudor.ambarus(a)linaro.org> mailbox: use error ret code of of_parse_phandle_with_args() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> tracing: Mark binary printing functions with __printf() attribute Trond Myklebust <trond.myklebust(a)hammerspace.com> NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() Daniel Gomez <da.gomez(a)samsung.com> kconfig: merge_config: use an empty file as initfile Haoran Jiang <jianghaoran(a)kylinos.cn> samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora Brandon Kammerdiener <brandon.kammerdiener(a)intel.com> bpf: fix possible endless loop in BPF map iteration Vladimir Oltean <vladimir.oltean(a)nxp.com> net: enetc: refactor bulk flipping of RX buffers to separate function gaoxu <gaoxu2(a)honor.com> cgroup: Fix compilation issue due to cgroup_mutex not being exported Marek Szyprowski <m.szyprowski(a)samsung.com> dma-mapping: avoid potential unused data compilation warning Zhongqiu Han <quic_zhonhan(a)quicinc.com> virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN Dmitry Bogdanov <d.bogdanov(a)yadro.com> scsi: target: iscsi: Fix timeout on deleted connection ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 2 + Makefile | 16 ++- arch/arm/boot/dts/tegra114.dtsi | 2 +- arch/arm/mach-at91/pm.c | 21 +-- .../boot/dts/allwinner/sun50i-h6-beelink-gs1.dts | 38 +++--- .../boot/dts/allwinner/sun50i-h6-orangepi-3.dts | 14 +- .../boot/dts/allwinner/sun50i-h6-orangepi.dtsi | 22 +-- arch/arm64/boot/dts/nvidia/tegra210-p2597.dtsi | 2 +- arch/arm64/boot/dts/qcom/sm8350.dtsi | 2 +- arch/arm64/include/asm/pgtable.h | 3 +- arch/mips/include/asm/ftrace.h | 16 +++ arch/mips/kernel/pm-cps.c | 30 ++-- arch/powerpc/kernel/prom_init.c | 4 +- arch/powerpc/perf/core-book3s.c | 20 +++ arch/powerpc/perf/isa207-common.c | 4 +- arch/um/Makefile | 1 + arch/um/kernel/mem.c | 1 + arch/x86/boot/genimage.sh | 5 +- arch/x86/events/amd/ibs.c | 3 +- arch/x86/include/asm/alternative.h | 2 +- arch/x86/include/asm/nmi.h | 2 + arch/x86/include/asm/perf_event.h | 1 + arch/x86/kernel/cpu/bugs.c | 10 +- arch/x86/kernel/nmi.c | 42 ++++++ arch/x86/kernel/reboot.c | 10 +- arch/x86/mm/kaslr.c | 10 +- arch/x86/um/os-Linux/mcontext.c | 3 +- crypto/algif_hash.c | 4 - crypto/lzo-rle.c | 2 +- crypto/lzo.c | 2 +- drivers/acpi/Kconfig | 2 +- drivers/acpi/hed.c | 7 +- drivers/auxdisplay/charlcd.c | 5 +- drivers/auxdisplay/charlcd.h | 5 +- drivers/auxdisplay/hd44780.c | 2 +- drivers/auxdisplay/lcd2s.c | 2 +- drivers/auxdisplay/panel.c | 2 +- drivers/char/tpm/tpm_tis_core.h | 2 +- drivers/clk/imx/clk-imx8mp.c | 151 +++++++++++++++++++++ drivers/clk/qcom/camcc-sm8250.c | 56 ++++---- drivers/clocksource/mips-gic-timer.c | 6 +- drivers/clocksource/timer-riscv.c | 6 + drivers/cpufreq/tegra186-cpufreq.c | 7 + drivers/cpuidle/governors/menu.c | 13 +- .../crypto/marvell/octeontx2/otx2_cptvf_reqmgr.c | 7 +- drivers/edac/ie31200_edac.c | 28 ++-- drivers/firmware/arm_ffa/bus.c | 1 + drivers/fpga/altera-cvp.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 5 +- drivers/gpu/drm/amd/amdgpu/gfxhub_v1_0.c | 10 +- drivers/gpu/drm/amd/amdkfd/kfd_process.c | 16 +-- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 5 - drivers/gpu/drm/amd/display/dc/core/dc.c | 1 + drivers/gpu/drm/amd/display/dc/dcn30/dcn30_dpp.c | 11 +- drivers/gpu/drm/ast/ast_mode.c | 10 +- drivers/gpu/drm/drm_atomic_helper.c | 28 ++++ drivers/gpu/drm/drm_edid.c | 1 + drivers/gpu/drm/i915/gvt/opregion.c | 8 +- drivers/gpu/drm/mediatek/mtk_dpi.c | 5 +- drivers/hid/hid-ids.h | 4 + drivers/hid/hid-quirks.c | 2 + drivers/hid/usbhid/usbkbd.c | 2 +- drivers/hwmon/gpio-fan.c | 16 ++- drivers/hwmon/xgene-hwmon.c | 2 +- drivers/i2c/busses/i2c-pxa.c | 5 +- drivers/i2c/busses/i2c-qup.c | 36 +++++ drivers/i3c/master/svc-i3c-master.c | 2 + drivers/infiniband/core/umem.c | 36 +++-- drivers/infiniband/core/uverbs_cmd.c | 144 ++++++++++---------- drivers/infiniband/core/verbs.c | 11 +- drivers/mailbox/mailbox.c | 7 +- drivers/md/dm-cache-target.c | 24 ++++ drivers/md/dm-table.c | 4 + drivers/media/platform/qcom/camss/camss-csid.c | 64 +++++---- .../media/platform/sti/c8sectpfe/c8sectpfe-core.c | 3 +- drivers/media/usb/cx231xx/cx231xx-417.c | 2 + drivers/media/usb/uvc/uvc_v4l2.c | 6 + drivers/media/v4l2-core/v4l2-subdev.c | 2 + drivers/mmc/host/sdhci-pci-core.c | 6 +- drivers/mmc/host/sdhci.c | 9 +- drivers/net/bonding/bond_main.c | 2 +- drivers/net/can/c_can/c_can_platform.c | 2 +- drivers/net/ethernet/apm/xgene-v2/main.c | 4 +- drivers/net/ethernet/freescale/enetc/enetc.c | 16 ++- .../net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 15 +- drivers/net/ethernet/mellanox/mlx4/alloc.c | 6 +- drivers/net/ethernet/mellanox/mlx4/en_tx.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 5 + .../net/ethernet/mellanox/mlx5/core/en_selftest.c | 3 + drivers/net/ethernet/mellanox/mlx5/core/events.c | 11 +- drivers/net/ethernet/mellanox/mlx5/core/health.c | 1 + drivers/net/ethernet/microsoft/mana/gdma_main.c | 2 +- drivers/net/ethernet/realtek/r8169_main.c | 1 + drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c | 2 +- drivers/net/ethernet/ti/cpsw_new.c | 1 + drivers/net/ieee802154/ca8210.c | 9 +- drivers/net/usb/r8152.c | 1 + drivers/net/vxlan/vxlan_core.c | 18 +-- drivers/net/wireless/ath/ath9k/init.c | 4 +- drivers/net/wireless/mediatek/mt76/mt76.h | 1 + drivers/net/wireless/mediatek/mt76/mt76x0/pci.c | 3 +- drivers/net/wireless/mediatek/mt76/mt76x0/usb.c | 3 +- drivers/net/wireless/mediatek/mt76/mt76x2/pci.c | 3 +- drivers/net/wireless/mediatek/mt76/mt76x2/usb.c | 3 +- drivers/net/wireless/mediatek/mt76/tx.c | 3 +- drivers/net/wireless/realtek/rtw88/main.c | 40 ++---- drivers/net/wireless/realtek/rtw88/reg.h | 3 +- drivers/net/wireless/realtek/rtw88/rtw8822b.c | 14 +- drivers/net/wireless/realtek/rtw88/util.c | 3 +- drivers/nvdimm/label.c | 3 +- drivers/nvme/host/pci.c | 2 + drivers/nvme/target/tcp.c | 3 + drivers/pci/Kconfig | 6 + drivers/pci/controller/dwc/pcie-designware-ep.c | 2 +- drivers/pci/controller/pcie-brcmstb.c | 5 +- drivers/pci/controller/vmd.c | 20 +++ drivers/pci/setup-bus.c | 6 +- drivers/perf/arm-cmn.c | 2 +- drivers/phy/phy-core.c | 7 +- drivers/pinctrl/bcm/pinctrl-bcm281xx.c | 44 +++--- drivers/pinctrl/devicetree.c | 10 +- drivers/pinctrl/meson/pinctrl-meson.c | 2 +- .../x86/dell/dell-wmi-sysman/passobj-attributes.c | 2 +- drivers/platform/x86/fujitsu-laptop.c | 33 ++++- drivers/platform/x86/thinkpad_acpi.c | 7 + drivers/regulator/ad5398.c | 12 +- drivers/remoteproc/qcom_wcnss.c | 34 ++++- drivers/rtc/rtc-ds1307.c | 4 +- drivers/rtc/rtc-rv3032.c | 2 +- drivers/scsi/lpfc/lpfc_hbadisc.c | 17 ++- drivers/scsi/mpt3sas/mpt3sas_ctl.c | 12 +- drivers/scsi/st.c | 29 +++- drivers/scsi/st.h | 2 + drivers/soc/ti/k3-socinfo.c | 13 +- drivers/spi/spi-fsl-dspi.c | 46 ++++++- drivers/spi/spi-sun4i.c | 5 +- drivers/spi/spi-zynqmp-gqspi.c | 22 ++- drivers/target/iscsi/iscsi_target.c | 2 +- drivers/thermal/qoriq_thermal.c | 13 ++ drivers/vfio/pci/vfio_pci_config.c | 3 +- drivers/vfio/pci/vfio_pci_core.c | 10 +- drivers/vfio/pci/vfio_pci_intrs.c | 2 +- drivers/video/fbdev/core/bitblit.c | 5 +- drivers/video/fbdev/core/fbcon.c | 10 +- drivers/video/fbdev/core/fbcon.h | 38 +----- drivers/video/fbdev/core/fbcon_ccw.c | 5 +- drivers/video/fbdev/core/fbcon_cw.c | 5 +- drivers/video/fbdev/core/fbcon_ud.c | 5 +- drivers/video/fbdev/core/tileblit.c | 45 +++++- drivers/video/fbdev/fsl-diu-fb.c | 1 + drivers/virtio/virtio_ring.c | 2 +- drivers/xen/platform-pci.c | 4 + drivers/xen/swiotlb-xen.c | 18 ++- drivers/xen/xenbus/xenbus_probe.c | 14 +- fs/btrfs/block-group.c | 18 ++- fs/btrfs/discard.c | 34 +++-- fs/btrfs/extent_io.c | 7 +- fs/btrfs/send.c | 6 +- fs/cifs/readdir.c | 7 +- fs/coredump.c | 80 ++++++++++- fs/dlm/lowcomms.c | 4 +- fs/ext4/balloc.c | 4 +- fs/namespace.c | 6 +- fs/nfs/delegation.c | 3 +- fs/nfs/filelayout/filelayoutdev.c | 6 +- fs/nfs/flexfilelayout/flexfilelayout.c | 1 + fs/nfs/flexfilelayout/flexfilelayoutdev.c | 6 +- fs/nfs/nfs4state.c | 10 +- fs/nfs/pnfs.h | 4 +- fs/nfs/pnfs_nfs.c | 9 +- fs/orangefs/inode.c | 7 +- include/drm/drm_atomic.h | 23 +++- include/linux/binfmts.h | 1 + include/linux/dma-mapping.h | 12 +- include/linux/ipv6.h | 1 + include/linux/lzo.h | 8 ++ include/linux/mlx4/device.h | 2 +- include/linux/pid.h | 1 + include/linux/rcutree.h | 2 +- include/linux/tpm.h | 2 +- include/linux/trace.h | 4 +- include/linux/trace_seq.h | 8 +- include/linux/usb/r8152.h | 1 + include/media/v4l2-subdev.h | 4 +- include/rdma/uverbs_std_types.h | 2 +- include/sound/pcm.h | 2 + include/trace/events/btrfs.h | 2 +- kernel/bpf/hashtab.c | 2 +- kernel/cgroup/cgroup.c | 2 +- kernel/fork.c | 98 +++++++++++-- kernel/padata.c | 3 +- kernel/rcu/tree_plugin.h | 11 +- kernel/softirq.c | 18 +++ kernel/time/posix-timers.c | 1 + kernel/time/timer_list.c | 4 +- kernel/trace/trace.c | 11 +- kernel/trace/trace.h | 16 ++- lib/dynamic_queue_limits.c | 2 +- lib/lzo/Makefile | 2 +- lib/lzo/lzo1x_compress.c | 102 ++++++++++---- lib/lzo/lzo1x_compress_safe.c | 18 +++ mm/memcontrol.c | 6 +- mm/page_alloc.c | 8 ++ net/bluetooth/l2cap_core.c | 15 +- net/bridge/br_nf_core.c | 7 +- net/bridge/br_private.h | 1 + net/can/bcm.c | 79 +++++++---- net/core/pktgen.c | 13 +- net/ipv4/fib_frontend.c | 18 ++- net/ipv4/fib_rules.c | 4 +- net/ipv4/fib_trie.c | 22 --- net/ipv4/inet_hashtables.c | 37 +++-- net/ipv4/tcp_input.c | 56 ++++---- net/ipv6/fib6_rules.c | 4 +- net/ipv6/ip6_output.c | 9 +- net/llc/af_llc.c | 8 +- net/mac80211/mlme.c | 4 +- net/netfilter/nf_conntrack_standalone.c | 12 +- net/sched/sch_hfsc.c | 15 +- net/sunrpc/clnt.c | 3 - net/sunrpc/rpcb_clnt.c | 5 +- net/tipc/crypto.c | 5 + net/xfrm/xfrm_policy.c | 3 + net/xfrm/xfrm_state.c | 3 + samples/bpf/Makefile | 2 +- scripts/config | 26 ++-- scripts/kconfig/merge_config.sh | 4 +- security/smack/smackfs.c | 4 + sound/core/oss/pcm_oss.c | 3 +- sound/core/pcm_native.c | 11 ++ sound/pci/hda/patch_realtek.c | 42 ++++++ sound/soc/codecs/mt6359-accdet.h | 9 ++ sound/soc/codecs/tas2764.c | 51 +++---- sound/soc/fsl/imx-card.c | 2 +- sound/soc/intel/boards/bytcr_rt5640.c | 13 ++ sound/soc/qcom/sm8250.c | 3 + sound/soc/soc-dai.c | 8 +- sound/soc/soc-ops.c | 29 +++- tools/bpf/bpftool/common.c | 3 +- tools/build/Makefile.build | 6 +- tools/lib/bpf/libbpf.c | 2 +- tools/testing/selftests/net/gro.sh | 3 +- 242 files changed, 2053 insertions(+), 882 deletions(-)

1 month, 1 week

10
218
0 0

[PATCH 1/8] drm/gem: Fix race in drm_gem_handle_create_tail()

by Simona Vetter

Object creation is a careful dance where we must guarantee that the object is fully constructed before it is visible to other threads, and GEM buffer objects are no difference. Final publishing happens by calling drm_gem_handle_create(). After that the only allowed thing to do is call drm_gem_object_put() because a concurrent call to the GEM_CLOSE ioctl with a correctly guessed id (which is trivial since we have a linear allocator) can already tear down the object again. Luckily most drivers get this right, the very few exceptions I've pinged the relevant maintainers for. Unfortunately we also need drm_gem_handle_create() when creating additional handles for an already existing object (e.g. GETFB ioctl or the various bo import ioctl), and hence we cannot have a drm_gem_handle_create_and_put() as the only exported function to stop these issues from happening. Now unfortunately the implementation of drm_gem_handle_create() isn't living up to standards: It does correctly finishe object initialization at the global level, and hence is safe against a concurrent tear down. But it also sets up the file-private aspects of the handle, and that part goes wrong: We fully register the object in the drm_file.object_idr before calling drm_vma_node_allow() or obj->funcs->open, which opens up races against concurrent removal of that handle in drm_gem_handle_delete(). Fix this with the usual two-stage approach of first reserving the handle id, and then only registering the object after we've completed the file-private setup. Jacek reported this with a testcase of concurrently calling GEM_CLOSE on a freshly-created object (which also destroys the object), but it should be possible to hit this with just additional handles created through import or GETFB without completed destroying the underlying object with the concurrent GEM_CLOSE ioctl calls. Note that the close-side of this race was fixed in f6cd7daecff5 ("drm: Release driver references to handle before making it available again"), which means a cool 9 years have passed until someone noticed that we need to make this symmetry or there's still gaps left :-/ Without the 2-stage close approach we'd still have a race, therefore that's an integral part of this bugfix. More importantly, this means we can have NULL pointers behind allocated id in our drm_file.object_idr. We need to check for that now: - drm_gem_handle_delete() checks for ERR_OR_NULL already - drm_gem.c:object_lookup() also chekcs for NULL - drm_gem_release() should never be called if there's another thread still existing that could call into an IOCTL that creates a new handle, so cannot race. For paranoia I added a NULL check to drm_gem_object_release_handle() though. - most drivers (etnaviv, i915, msm) are find because they use idr_find, which maps both ENOENT and NULL to NULL. - vmgfx is already broken vmw_debugfs_gem_info_show() because NULL pointers might exist due to drm_gem_handle_delete(). This needs a separate patch. This is because idr_for_each_entry terminates on the first NULL entry and so might not iterate over everything. - similar for amd in amdgpu_debugfs_gem_info_show() and amdgpu_gem_force_release(). The latter is really questionable though since it's a best effort hack and there's no way to close all the races. Needs separate patches. - xe is really broken because it not uses idr_for_each_entry() but also drops the drm_file.table_lock, which can wreak the idr iterator state if you're unlucky enough. Maybe another reason to look into the drm fdinfo memory stats instead of hand-rolling too much. - drm_show_memory_stats() is also broken since it uses idr_for_each_entry. But since that's a preexisting bug I'll follow up with a separate patch. Reported-by: Jacek Lawrynowicz <jacek.lawrynowicz(a)linux.intel.com> Cc: stable(a)vger.kernel.org Cc: Jacek Lawrynowicz <jacek.lawrynowicz(a)linux.intel.com> Cc: Maarten Lankhorst <maarten.lankhorst(a)linux.intel.com> Cc: Maxime Ripard <mripard(a)kernel.org> Cc: Thomas Zimmermann <tzimmermann(a)suse.de> Cc: David Airlie <airlied(a)gmail.com> Cc: Simona Vetter <simona(a)ffwll.ch> Signed-off-by: Simona Vetter <simona.vetter(a)intel.com> Signed-off-by: Simona Vetter <simona.vetter(a)ffwll.ch> --- drivers/gpu/drm/drm_gem.c | 10 +++++++++- include/drm/drm_file.h | 3 +++ 2 files changed, 12 insertions(+), 1 deletion(-) diff --git a/drivers/gpu/drm/drm_gem.c b/drivers/gpu/drm/drm_gem.c index 1e659d2660f7..e4e20dda47b1 100644 --- a/drivers/gpu/drm/drm_gem.c +++ b/drivers/gpu/drm/drm_gem.c @@ -279,6 +279,9 @@ drm_gem_object_release_handle(int id, void *ptr, void *data) struct drm_file *file_priv = data; struct drm_gem_object *obj = ptr; + if (WARN_ON(!data)) + return 0; + if (obj->funcs->close) obj->funcs->close(obj, file_priv); @@ -399,7 +402,7 @@ drm_gem_handle_create_tail(struct drm_file *file_priv, idr_preload(GFP_KERNEL); spin_lock(&file_priv->table_lock); - ret = idr_alloc(&file_priv->object_idr, obj, 1, 0, GFP_NOWAIT); + ret = idr_alloc(&file_priv->object_idr, NULL, 1, 0, GFP_NOWAIT); spin_unlock(&file_priv->table_lock); idr_preload_end(); @@ -420,6 +423,11 @@ drm_gem_handle_create_tail(struct drm_file *file_priv, goto err_revoke; } + /* mirrors drm_gem_handle_delete to avoid races */ + spin_lock(&file_priv->table_lock); + obj = idr_replace(&file_priv->object_idr, obj, handle); + WARN_ON(obj != NULL); + spin_unlock(&file_priv->table_lock); *handlep = handle; return 0; diff --git a/include/drm/drm_file.h b/include/drm/drm_file.h index 5c3b2aa3e69d..d344d41e6cfe 100644 --- a/include/drm/drm_file.h +++ b/include/drm/drm_file.h @@ -300,6 +300,9 @@ struct drm_file { * * Mapping of mm object handles to object pointers. Used by the GEM * subsystem. Protected by @table_lock. + * + * Note that allocated entries might be NULL as a transient state when + * creating or deleting a handle. */ struct idr object_idr; -- 2.49.0

1 month, 1 week

3
6
0 0

[PATCH 1/2] wifi: ath12k: fix dest ring-buffer corruption

by Johan Hovold

Add the missing memory barriers to make sure that destination ring descriptors are read after the head pointers to avoid using stale data on weakly ordered architectures like aarch64. Note that this may fix the empty descriptor issue recently worked around by commit 51ad34a47e9f ("wifi: ath12k: Add drop descriptor handling for monitor ring"). Tested-on: WCN7850 hw2.0 WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 Fixes: d889913205cf ("wifi: ath12k: driver for Qualcomm Wi-Fi 7 devices") Cc: stable(a)vger.kernel.org # 6.3 Signed-off-by: Johan Hovold <johan+linaro(a)kernel.org> --- drivers/net/wireless/ath/ath12k/dp_mon.c | 3 +++ drivers/net/wireless/ath/ath12k/dp_rx.c | 12 ++++++++++++ drivers/net/wireless/ath/ath12k/dp_tx.c | 3 +++ 3 files changed, 18 insertions(+) diff --git a/drivers/net/wireless/ath/ath12k/dp_mon.c b/drivers/net/wireless/ath/ath12k/dp_mon.c index d22800e89485..90a7763502c8 100644 --- a/drivers/net/wireless/ath/ath12k/dp_mon.c +++ b/drivers/net/wireless/ath/ath12k/dp_mon.c @@ -3258,6 +3258,9 @@ int ath12k_dp_mon_srng_process(struct ath12k *ar, int *budget, spin_lock_bh(&srng->lock); ath12k_hal_srng_access_begin(ab, srng); + /* Make sure descriptor is read after the head pointer. */ + dma_rmb(); + while (likely(*budget)) { *budget -= 1; mon_dst_desc = ath12k_hal_srng_dst_peek(ab, srng); diff --git a/drivers/net/wireless/ath/ath12k/dp_rx.c b/drivers/net/wireless/ath/ath12k/dp_rx.c index 75bf4211ad42..68fceb4201d7 100644 --- a/drivers/net/wireless/ath/ath12k/dp_rx.c +++ b/drivers/net/wireless/ath/ath12k/dp_rx.c @@ -2753,6 +2753,9 @@ int ath12k_dp_rx_process(struct ath12k_base *ab, int ring_id, try_again: ath12k_hal_srng_access_begin(ab, srng); + /* Make sure descriptor is read after the head pointer. */ + dma_rmb(); + while ((desc = ath12k_hal_srng_dst_get_next_entry(ab, srng))) { struct rx_mpdu_desc *mpdu_info; struct rx_msdu_desc *msdu_info; @@ -3599,6 +3602,9 @@ int ath12k_dp_rx_process_err(struct ath12k_base *ab, struct napi_struct *napi, ath12k_hal_srng_access_begin(ab, srng); + /* Make sure descriptor is read after the head pointer. */ + dma_rmb(); + while (budget && (reo_desc = ath12k_hal_srng_dst_get_next_entry(ab, srng))) { drop = false; @@ -3941,6 +3947,9 @@ int ath12k_dp_rx_process_wbm_err(struct ath12k_base *ab, ath12k_hal_srng_access_begin(ab, srng); + /* Make sure descriptor is read after the head pointer. */ + dma_rmb(); + while (budget) { rx_desc = ath12k_hal_srng_dst_get_next_entry(ab, srng); if (!rx_desc) @@ -4122,6 +4131,9 @@ void ath12k_dp_rx_process_reo_status(struct ath12k_base *ab) ath12k_hal_srng_access_begin(ab, srng); + /* Make sure descriptor is read after the head pointer. */ + dma_rmb(); + while ((hdr = ath12k_hal_srng_dst_get_next_entry(ab, srng))) { tag = le64_get_bits(hdr->tl, HAL_SRNG_TLV_HDR_TAG); diff --git a/drivers/net/wireless/ath/ath12k/dp_tx.c b/drivers/net/wireless/ath/ath12k/dp_tx.c index ced232bf4aed..3124eafa0201 100644 --- a/drivers/net/wireless/ath/ath12k/dp_tx.c +++ b/drivers/net/wireless/ath/ath12k/dp_tx.c @@ -853,6 +853,9 @@ void ath12k_dp_tx_completion_handler(struct ath12k_base *ab, int ring_id) ath12k_hal_srng_access_begin(ab, status_ring); + /* Make sure descriptor is read after the head pointer. */ + dma_rmb(); + while (ATH12K_TX_COMPL_NEXT(tx_ring->tx_status_head) != tx_ring->tx_status_tail) { desc = ath12k_hal_srng_dst_get_next_entry(ab, status_ring); if (!desc) -- 2.49.0

1 month, 1 week

2
1
0 0

[PATCH AUTOSEL 5.4 01/20] net: macb: Check return value of dma_set_mask_and_coherent()

by Sasha Levin

From: Sergio Perez Gonzalez <sperezglz(a)gmail.com> [ Upstream commit 3920a758800762917177a6b5ab39707d8e376fe6 ] Issue flagged by coverity. Add a safety check for the return value of dma_set_mask_and_coherent, go to a safe exit if it returns error. Link: https://scan7.scan.coverity.com/#/project-view/53936/11354?selectedIssue=16… Signed-off-by: Sergio Perez Gonzalez <sperezglz(a)gmail.com> Reviewed-by: Claudiu Beznea <claudiu.beznea(a)tuxon.dev> Link: https://patch.msgid.link/20250526032034.84900-1-sperezglz@gmail.com Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- Based on my analysis of the commit and the codebase context, here's my assessment: **YES** This commit should be backported to stable kernel trees. Here's my extensive analysis: ## Code Analysis The commit adds proper error checking for `dma_set_mask_and_coherent()` in the macb network driver. Looking at the specific changes: **Before the fix:** ```c if (GEM_BFEXT(DAW64, gem_readl(bp, DCFG6))) { dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); bp->hw_dma_cap |= HW_DMA_CAP_64B; } ``` **After the fix:** ```c if (GEM_BFEXT(DAW64, gem_readl(bp, DCFG6))) { err = dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); if (err) { dev_err(&pdev->dev, "failed to set DMA mask\n"); goto err_out_free_netdev; } bp->hw_dma_cap |= HW_DMA_CAP_64B; } ``` ## Why this should be backported: 1. **Fixes a Real Bug**: The original code ignores the return value of `dma_set_mask_and_coherent()`. If this function fails (which can happen on systems with restricted DMA capabilities), the driver would continue execution assuming 44-bit DMA addressing is available when it's not, leading to potential memory corruption or system crashes. 2. **Small, Contained Fix**: This is a minimal change that only adds proper error checking without changing any core logic or introducing new features. It follows the stable tree principle of being a small, targeted bugfix. 3. **Follows Established Patterns**: Looking at the similar commits provided, this matches exactly the pattern of commits marked "YES" for backporting (commits #1, #2, and #5) which all add proper error checking for DMA mask functions. 4. **Critical Network Driver**: The macb driver is used in production systems, and DMA-related bugs can cause data corruption or system instability, making this a high-priority fix for stable trees. 5. **Proper Error Handling Path**: The fix correctly uses the existing `err_out_free_netdev` label, which properly cleans up allocated resources (line 5373-5383 in macb_main.c), preventing resource leaks when DMA setup fails. 6. **Static Analysis Tool Flagged**: The commit message mentions this was flagged by Coverity, indicating it's a legitimate code quality issue that could manifest as a runtime bug. 7. **Matches Stable Tree Criteria**: - Important bugfix ✓ - Minimal risk of regression ✓ - No architectural changes ✓ - Confined to one driver/subsystem ✓ - Clear side effects (proper cleanup on failure) ✓ This commit addresses the same class of vulnerability as the other "YES" examples: ignoring return values of critical DMA functions that can fail and lead to undefined behavior. The fix is surgical, safe, and addresses a genuine runtime issue in a widely-used network driver. drivers/net/ethernet/cadence/macb_main.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/drivers/net/ethernet/cadence/macb_main.c b/drivers/net/ethernet/cadence/macb_main.c index a750c752846cf..a635c9af26c3e 100644 --- a/drivers/net/ethernet/cadence/macb_main.c +++ b/drivers/net/ethernet/cadence/macb_main.c @@ -4320,7 +4320,11 @@ static int macb_probe(struct platform_device *pdev) #ifdef CONFIG_ARCH_DMA_ADDR_T_64BIT if (GEM_BFEXT(DAW64, gem_readl(bp, DCFG6))) { - dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); + err = dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); + if (err) { + dev_err(&pdev->dev, "failed to set DMA mask\n"); + goto err_out_free_netdev; + } bp->hw_dma_cap |= HW_DMA_CAP_64B; } #endif -- 2.39.5

1 month, 1 week

1
19
0 0

[PATCH AUTOSEL 5.10 01/27] net: macb: Check return value of dma_set_mask_and_coherent()

by Sasha Levin

From: Sergio Perez Gonzalez <sperezglz(a)gmail.com> [ Upstream commit 3920a758800762917177a6b5ab39707d8e376fe6 ] Issue flagged by coverity. Add a safety check for the return value of dma_set_mask_and_coherent, go to a safe exit if it returns error. Link: https://scan7.scan.coverity.com/#/project-view/53936/11354?selectedIssue=16… Signed-off-by: Sergio Perez Gonzalez <sperezglz(a)gmail.com> Reviewed-by: Claudiu Beznea <claudiu.beznea(a)tuxon.dev> Link: https://patch.msgid.link/20250526032034.84900-1-sperezglz@gmail.com Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- Based on my analysis of the commit and the codebase context, here's my assessment: **YES** This commit should be backported to stable kernel trees. Here's my extensive analysis: ## Code Analysis The commit adds proper error checking for `dma_set_mask_and_coherent()` in the macb network driver. Looking at the specific changes: **Before the fix:** ```c if (GEM_BFEXT(DAW64, gem_readl(bp, DCFG6))) { dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); bp->hw_dma_cap |= HW_DMA_CAP_64B; } ``` **After the fix:** ```c if (GEM_BFEXT(DAW64, gem_readl(bp, DCFG6))) { err = dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); if (err) { dev_err(&pdev->dev, "failed to set DMA mask\n"); goto err_out_free_netdev; } bp->hw_dma_cap |= HW_DMA_CAP_64B; } ``` ## Why this should be backported: 1. **Fixes a Real Bug**: The original code ignores the return value of `dma_set_mask_and_coherent()`. If this function fails (which can happen on systems with restricted DMA capabilities), the driver would continue execution assuming 44-bit DMA addressing is available when it's not, leading to potential memory corruption or system crashes. 2. **Small, Contained Fix**: This is a minimal change that only adds proper error checking without changing any core logic or introducing new features. It follows the stable tree principle of being a small, targeted bugfix. 3. **Follows Established Patterns**: Looking at the similar commits provided, this matches exactly the pattern of commits marked "YES" for backporting (commits #1, #2, and #5) which all add proper error checking for DMA mask functions. 4. **Critical Network Driver**: The macb driver is used in production systems, and DMA-related bugs can cause data corruption or system instability, making this a high-priority fix for stable trees. 5. **Proper Error Handling Path**: The fix correctly uses the existing `err_out_free_netdev` label, which properly cleans up allocated resources (line 5373-5383 in macb_main.c), preventing resource leaks when DMA setup fails. 6. **Static Analysis Tool Flagged**: The commit message mentions this was flagged by Coverity, indicating it's a legitimate code quality issue that could manifest as a runtime bug. 7. **Matches Stable Tree Criteria**: - Important bugfix ✓ - Minimal risk of regression ✓ - No architectural changes ✓ - Confined to one driver/subsystem ✓ - Clear side effects (proper cleanup on failure) ✓ This commit addresses the same class of vulnerability as the other "YES" examples: ignoring return values of critical DMA functions that can fail and lead to undefined behavior. The fix is surgical, safe, and addresses a genuine runtime issue in a widely-used network driver. drivers/net/ethernet/cadence/macb_main.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/drivers/net/ethernet/cadence/macb_main.c b/drivers/net/ethernet/cadence/macb_main.c index 0f18837def3c8..4d3332d96e086 100644 --- a/drivers/net/ethernet/cadence/macb_main.c +++ b/drivers/net/ethernet/cadence/macb_main.c @@ -4578,7 +4578,11 @@ static int macb_probe(struct platform_device *pdev) #ifdef CONFIG_ARCH_DMA_ADDR_T_64BIT if (GEM_BFEXT(DAW64, gem_readl(bp, DCFG6))) { - dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); + err = dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); + if (err) { + dev_err(&pdev->dev, "failed to set DMA mask\n"); + goto err_out_free_netdev; + } bp->hw_dma_cap |= HW_DMA_CAP_64B; } #endif -- 2.39.5

1 month, 1 week

1
26
0 0

[PATCH AUTOSEL 5.15 01/33] net: macb: Check return value of dma_set_mask_and_coherent()

by Sasha Levin

From: Sergio Perez Gonzalez <sperezglz(a)gmail.com> [ Upstream commit 3920a758800762917177a6b5ab39707d8e376fe6 ] Issue flagged by coverity. Add a safety check for the return value of dma_set_mask_and_coherent, go to a safe exit if it returns error. Link: https://scan7.scan.coverity.com/#/project-view/53936/11354?selectedIssue=16… Signed-off-by: Sergio Perez Gonzalez <sperezglz(a)gmail.com> Reviewed-by: Claudiu Beznea <claudiu.beznea(a)tuxon.dev> Link: https://patch.msgid.link/20250526032034.84900-1-sperezglz@gmail.com Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- Based on my analysis of the commit and the codebase context, here's my assessment: **YES** This commit should be backported to stable kernel trees. Here's my extensive analysis: ## Code Analysis The commit adds proper error checking for `dma_set_mask_and_coherent()` in the macb network driver. Looking at the specific changes: **Before the fix:** ```c if (GEM_BFEXT(DAW64, gem_readl(bp, DCFG6))) { dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); bp->hw_dma_cap |= HW_DMA_CAP_64B; } ``` **After the fix:** ```c if (GEM_BFEXT(DAW64, gem_readl(bp, DCFG6))) { err = dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); if (err) { dev_err(&pdev->dev, "failed to set DMA mask\n"); goto err_out_free_netdev; } bp->hw_dma_cap |= HW_DMA_CAP_64B; } ``` ## Why this should be backported: 1. **Fixes a Real Bug**: The original code ignores the return value of `dma_set_mask_and_coherent()`. If this function fails (which can happen on systems with restricted DMA capabilities), the driver would continue execution assuming 44-bit DMA addressing is available when it's not, leading to potential memory corruption or system crashes. 2. **Small, Contained Fix**: This is a minimal change that only adds proper error checking without changing any core logic or introducing new features. It follows the stable tree principle of being a small, targeted bugfix. 3. **Follows Established Patterns**: Looking at the similar commits provided, this matches exactly the pattern of commits marked "YES" for backporting (commits #1, #2, and #5) which all add proper error checking for DMA mask functions. 4. **Critical Network Driver**: The macb driver is used in production systems, and DMA-related bugs can cause data corruption or system instability, making this a high-priority fix for stable trees. 5. **Proper Error Handling Path**: The fix correctly uses the existing `err_out_free_netdev` label, which properly cleans up allocated resources (line 5373-5383 in macb_main.c), preventing resource leaks when DMA setup fails. 6. **Static Analysis Tool Flagged**: The commit message mentions this was flagged by Coverity, indicating it's a legitimate code quality issue that could manifest as a runtime bug. 7. **Matches Stable Tree Criteria**: - Important bugfix ✓ - Minimal risk of regression ✓ - No architectural changes ✓ - Confined to one driver/subsystem ✓ - Clear side effects (proper cleanup on failure) ✓ This commit addresses the same class of vulnerability as the other "YES" examples: ignoring return values of critical DMA functions that can fail and lead to undefined behavior. The fix is surgical, safe, and addresses a genuine runtime issue in a widely-used network driver. drivers/net/ethernet/cadence/macb_main.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/drivers/net/ethernet/cadence/macb_main.c b/drivers/net/ethernet/cadence/macb_main.c index 667af80a739b9..2266a3ecc5533 100644 --- a/drivers/net/ethernet/cadence/macb_main.c +++ b/drivers/net/ethernet/cadence/macb_main.c @@ -4809,7 +4809,11 @@ static int macb_probe(struct platform_device *pdev) #ifdef CONFIG_ARCH_DMA_ADDR_T_64BIT if (GEM_BFEXT(DAW64, gem_readl(bp, DCFG6))) { - dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); + err = dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); + if (err) { + dev_err(&pdev->dev, "failed to set DMA mask\n"); + goto err_out_free_netdev; + } bp->hw_dma_cap |= HW_DMA_CAP_64B; } #endif -- 2.39.5

1 month, 1 week

1
32
0 0

[PATCH AUTOSEL 6.1 01/46] net: macb: Check return value of dma_set_mask_and_coherent()

by Sasha Levin

From: Sergio Perez Gonzalez <sperezglz(a)gmail.com> [ Upstream commit 3920a758800762917177a6b5ab39707d8e376fe6 ] Issue flagged by coverity. Add a safety check for the return value of dma_set_mask_and_coherent, go to a safe exit if it returns error. Link: https://scan7.scan.coverity.com/#/project-view/53936/11354?selectedIssue=16… Signed-off-by: Sergio Perez Gonzalez <sperezglz(a)gmail.com> Reviewed-by: Claudiu Beznea <claudiu.beznea(a)tuxon.dev> Link: https://patch.msgid.link/20250526032034.84900-1-sperezglz@gmail.com Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- Based on my analysis of the commit and the codebase context, here's my assessment: **YES** This commit should be backported to stable kernel trees. Here's my extensive analysis: ## Code Analysis The commit adds proper error checking for `dma_set_mask_and_coherent()` in the macb network driver. Looking at the specific changes: **Before the fix:** ```c if (GEM_BFEXT(DAW64, gem_readl(bp, DCFG6))) { dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); bp->hw_dma_cap |= HW_DMA_CAP_64B; } ``` **After the fix:** ```c if (GEM_BFEXT(DAW64, gem_readl(bp, DCFG6))) { err = dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); if (err) { dev_err(&pdev->dev, "failed to set DMA mask\n"); goto err_out_free_netdev; } bp->hw_dma_cap |= HW_DMA_CAP_64B; } ``` ## Why this should be backported: 1. **Fixes a Real Bug**: The original code ignores the return value of `dma_set_mask_and_coherent()`. If this function fails (which can happen on systems with restricted DMA capabilities), the driver would continue execution assuming 44-bit DMA addressing is available when it's not, leading to potential memory corruption or system crashes. 2. **Small, Contained Fix**: This is a minimal change that only adds proper error checking without changing any core logic or introducing new features. It follows the stable tree principle of being a small, targeted bugfix. 3. **Follows Established Patterns**: Looking at the similar commits provided, this matches exactly the pattern of commits marked "YES" for backporting (commits #1, #2, and #5) which all add proper error checking for DMA mask functions. 4. **Critical Network Driver**: The macb driver is used in production systems, and DMA-related bugs can cause data corruption or system instability, making this a high-priority fix for stable trees. 5. **Proper Error Handling Path**: The fix correctly uses the existing `err_out_free_netdev` label, which properly cleans up allocated resources (line 5373-5383 in macb_main.c), preventing resource leaks when DMA setup fails. 6. **Static Analysis Tool Flagged**: The commit message mentions this was flagged by Coverity, indicating it's a legitimate code quality issue that could manifest as a runtime bug. 7. **Matches Stable Tree Criteria**: - Important bugfix ✓ - Minimal risk of regression ✓ - No architectural changes ✓ - Confined to one driver/subsystem ✓ - Clear side effects (proper cleanup on failure) ✓ This commit addresses the same class of vulnerability as the other "YES" examples: ignoring return values of critical DMA functions that can fail and lead to undefined behavior. The fix is surgical, safe, and addresses a genuine runtime issue in a widely-used network driver. drivers/net/ethernet/cadence/macb_main.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/drivers/net/ethernet/cadence/macb_main.c b/drivers/net/ethernet/cadence/macb_main.c index d2f4709dee0de..495a1cb0bc183 100644 --- a/drivers/net/ethernet/cadence/macb_main.c +++ b/drivers/net/ethernet/cadence/macb_main.c @@ -4956,7 +4956,11 @@ static int macb_probe(struct platform_device *pdev) #ifdef CONFIG_ARCH_DMA_ADDR_T_64BIT if (GEM_BFEXT(DAW64, gem_readl(bp, DCFG6))) { - dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); + err = dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); + if (err) { + dev_err(&pdev->dev, "failed to set DMA mask\n"); + goto err_out_free_netdev; + } bp->hw_dma_cap |= HW_DMA_CAP_64B; } #endif -- 2.39.5

1 month, 1 week

1
45
0 0

[PATCH AUTOSEL 6.6 01/62] net: macb: Check return value of dma_set_mask_and_coherent()

by Sasha Levin

From: Sergio Perez Gonzalez <sperezglz(a)gmail.com> [ Upstream commit 3920a758800762917177a6b5ab39707d8e376fe6 ] Issue flagged by coverity. Add a safety check for the return value of dma_set_mask_and_coherent, go to a safe exit if it returns error. Link: https://scan7.scan.coverity.com/#/project-view/53936/11354?selectedIssue=16… Signed-off-by: Sergio Perez Gonzalez <sperezglz(a)gmail.com> Reviewed-by: Claudiu Beznea <claudiu.beznea(a)tuxon.dev> Link: https://patch.msgid.link/20250526032034.84900-1-sperezglz@gmail.com Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- Based on my analysis of the commit and the codebase context, here's my assessment: **YES** This commit should be backported to stable kernel trees. Here's my extensive analysis: ## Code Analysis The commit adds proper error checking for `dma_set_mask_and_coherent()` in the macb network driver. Looking at the specific changes: **Before the fix:** ```c if (GEM_BFEXT(DAW64, gem_readl(bp, DCFG6))) { dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); bp->hw_dma_cap |= HW_DMA_CAP_64B; } ``` **After the fix:** ```c if (GEM_BFEXT(DAW64, gem_readl(bp, DCFG6))) { err = dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); if (err) { dev_err(&pdev->dev, "failed to set DMA mask\n"); goto err_out_free_netdev; } bp->hw_dma_cap |= HW_DMA_CAP_64B; } ``` ## Why this should be backported: 1. **Fixes a Real Bug**: The original code ignores the return value of `dma_set_mask_and_coherent()`. If this function fails (which can happen on systems with restricted DMA capabilities), the driver would continue execution assuming 44-bit DMA addressing is available when it's not, leading to potential memory corruption or system crashes. 2. **Small, Contained Fix**: This is a minimal change that only adds proper error checking without changing any core logic or introducing new features. It follows the stable tree principle of being a small, targeted bugfix. 3. **Follows Established Patterns**: Looking at the similar commits provided, this matches exactly the pattern of commits marked "YES" for backporting (commits #1, #2, and #5) which all add proper error checking for DMA mask functions. 4. **Critical Network Driver**: The macb driver is used in production systems, and DMA-related bugs can cause data corruption or system instability, making this a high-priority fix for stable trees. 5. **Proper Error Handling Path**: The fix correctly uses the existing `err_out_free_netdev` label, which properly cleans up allocated resources (line 5373-5383 in macb_main.c), preventing resource leaks when DMA setup fails. 6. **Static Analysis Tool Flagged**: The commit message mentions this was flagged by Coverity, indicating it's a legitimate code quality issue that could manifest as a runtime bug. 7. **Matches Stable Tree Criteria**: - Important bugfix ✓ - Minimal risk of regression ✓ - No architectural changes ✓ - Confined to one driver/subsystem ✓ - Clear side effects (proper cleanup on failure) ✓ This commit addresses the same class of vulnerability as the other "YES" examples: ignoring return values of critical DMA functions that can fail and lead to undefined behavior. The fix is surgical, safe, and addresses a genuine runtime issue in a widely-used network driver. drivers/net/ethernet/cadence/macb_main.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/drivers/net/ethernet/cadence/macb_main.c b/drivers/net/ethernet/cadence/macb_main.c index 6f45f4d9fba71..534e7f7bca4c2 100644 --- a/drivers/net/ethernet/cadence/macb_main.c +++ b/drivers/net/ethernet/cadence/macb_main.c @@ -5070,7 +5070,11 @@ static int macb_probe(struct platform_device *pdev) #ifdef CONFIG_ARCH_DMA_ADDR_T_64BIT if (GEM_BFEXT(DAW64, gem_readl(bp, DCFG6))) { - dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); + err = dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); + if (err) { + dev_err(&pdev->dev, "failed to set DMA mask\n"); + goto err_out_free_netdev; + } bp->hw_dma_cap |= HW_DMA_CAP_64B; } #endif -- 2.39.5

1 month, 1 week

1
61
0 0

[PATCH AUTOSEL 6.12 01/93] net: macb: Check return value of dma_set_mask_and_coherent()

by Sasha Levin

From: Sergio Perez Gonzalez <sperezglz(a)gmail.com> [ Upstream commit 3920a758800762917177a6b5ab39707d8e376fe6 ] Issue flagged by coverity. Add a safety check for the return value of dma_set_mask_and_coherent, go to a safe exit if it returns error. Link: https://scan7.scan.coverity.com/#/project-view/53936/11354?selectedIssue=16… Signed-off-by: Sergio Perez Gonzalez <sperezglz(a)gmail.com> Reviewed-by: Claudiu Beznea <claudiu.beznea(a)tuxon.dev> Link: https://patch.msgid.link/20250526032034.84900-1-sperezglz@gmail.com Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- Based on my analysis of the commit and the codebase context, here's my assessment: **YES** This commit should be backported to stable kernel trees. Here's my extensive analysis: ## Code Analysis The commit adds proper error checking for `dma_set_mask_and_coherent()` in the macb network driver. Looking at the specific changes: **Before the fix:** ```c if (GEM_BFEXT(DAW64, gem_readl(bp, DCFG6))) { dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); bp->hw_dma_cap |= HW_DMA_CAP_64B; } ``` **After the fix:** ```c if (GEM_BFEXT(DAW64, gem_readl(bp, DCFG6))) { err = dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); if (err) { dev_err(&pdev->dev, "failed to set DMA mask\n"); goto err_out_free_netdev; } bp->hw_dma_cap |= HW_DMA_CAP_64B; } ``` ## Why this should be backported: 1. **Fixes a Real Bug**: The original code ignores the return value of `dma_set_mask_and_coherent()`. If this function fails (which can happen on systems with restricted DMA capabilities), the driver would continue execution assuming 44-bit DMA addressing is available when it's not, leading to potential memory corruption or system crashes. 2. **Small, Contained Fix**: This is a minimal change that only adds proper error checking without changing any core logic or introducing new features. It follows the stable tree principle of being a small, targeted bugfix. 3. **Follows Established Patterns**: Looking at the similar commits provided, this matches exactly the pattern of commits marked "YES" for backporting (commits #1, #2, and #5) which all add proper error checking for DMA mask functions. 4. **Critical Network Driver**: The macb driver is used in production systems, and DMA-related bugs can cause data corruption or system instability, making this a high-priority fix for stable trees. 5. **Proper Error Handling Path**: The fix correctly uses the existing `err_out_free_netdev` label, which properly cleans up allocated resources (line 5373-5383 in macb_main.c), preventing resource leaks when DMA setup fails. 6. **Static Analysis Tool Flagged**: The commit message mentions this was flagged by Coverity, indicating it's a legitimate code quality issue that could manifest as a runtime bug. 7. **Matches Stable Tree Criteria**: - Important bugfix ✓ - Minimal risk of regression ✓ - No architectural changes ✓ - Confined to one driver/subsystem ✓ - Clear side effects (proper cleanup on failure) ✓ This commit addresses the same class of vulnerability as the other "YES" examples: ignoring return values of critical DMA functions that can fail and lead to undefined behavior. The fix is surgical, safe, and addresses a genuine runtime issue in a widely-used network driver. drivers/net/ethernet/cadence/macb_main.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/drivers/net/ethernet/cadence/macb_main.c b/drivers/net/ethernet/cadence/macb_main.c index ae100ed8ed6b9..3c2a7919b1289 100644 --- a/drivers/net/ethernet/cadence/macb_main.c +++ b/drivers/net/ethernet/cadence/macb_main.c @@ -5117,7 +5117,11 @@ static int macb_probe(struct platform_device *pdev) #ifdef CONFIG_ARCH_DMA_ADDR_T_64BIT if (GEM_BFEXT(DAW64, gem_readl(bp, DCFG6))) { - dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); + err = dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); + if (err) { + dev_err(&pdev->dev, "failed to set DMA mask\n"); + goto err_out_free_netdev; + } bp->hw_dma_cap |= HW_DMA_CAP_64B; } #endif -- 2.39.5

1 month, 1 week

1
92
0 0

[PATCH AUTOSEL 6.14 001/108] net: macb: Check return value of dma_set_mask_and_coherent()

by Sasha Levin

From: Sergio Perez Gonzalez <sperezglz(a)gmail.com> [ Upstream commit 3920a758800762917177a6b5ab39707d8e376fe6 ] Issue flagged by coverity. Add a safety check for the return value of dma_set_mask_and_coherent, go to a safe exit if it returns error. Link: https://scan7.scan.coverity.com/#/project-view/53936/11354?selectedIssue=16… Signed-off-by: Sergio Perez Gonzalez <sperezglz(a)gmail.com> Reviewed-by: Claudiu Beznea <claudiu.beznea(a)tuxon.dev> Link: https://patch.msgid.link/20250526032034.84900-1-sperezglz@gmail.com Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- Based on my analysis of the commit and the codebase context, here's my assessment: **YES** This commit should be backported to stable kernel trees. Here's my extensive analysis: ## Code Analysis The commit adds proper error checking for `dma_set_mask_and_coherent()` in the macb network driver. Looking at the specific changes: **Before the fix:** ```c if (GEM_BFEXT(DAW64, gem_readl(bp, DCFG6))) { dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); bp->hw_dma_cap |= HW_DMA_CAP_64B; } ``` **After the fix:** ```c if (GEM_BFEXT(DAW64, gem_readl(bp, DCFG6))) { err = dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); if (err) { dev_err(&pdev->dev, "failed to set DMA mask\n"); goto err_out_free_netdev; } bp->hw_dma_cap |= HW_DMA_CAP_64B; } ``` ## Why this should be backported: 1. **Fixes a Real Bug**: The original code ignores the return value of `dma_set_mask_and_coherent()`. If this function fails (which can happen on systems with restricted DMA capabilities), the driver would continue execution assuming 44-bit DMA addressing is available when it's not, leading to potential memory corruption or system crashes. 2. **Small, Contained Fix**: This is a minimal change that only adds proper error checking without changing any core logic or introducing new features. It follows the stable tree principle of being a small, targeted bugfix. 3. **Follows Established Patterns**: Looking at the similar commits provided, this matches exactly the pattern of commits marked "YES" for backporting (commits #1, #2, and #5) which all add proper error checking for DMA mask functions. 4. **Critical Network Driver**: The macb driver is used in production systems, and DMA-related bugs can cause data corruption or system instability, making this a high-priority fix for stable trees. 5. **Proper Error Handling Path**: The fix correctly uses the existing `err_out_free_netdev` label, which properly cleans up allocated resources (line 5373-5383 in macb_main.c), preventing resource leaks when DMA setup fails. 6. **Static Analysis Tool Flagged**: The commit message mentions this was flagged by Coverity, indicating it's a legitimate code quality issue that could manifest as a runtime bug. 7. **Matches Stable Tree Criteria**: - Important bugfix ✓ - Minimal risk of regression ✓ - No architectural changes ✓ - Confined to one driver/subsystem ✓ - Clear side effects (proper cleanup on failure) ✓ This commit addresses the same class of vulnerability as the other "YES" examples: ignoring return values of critical DMA functions that can fail and lead to undefined behavior. The fix is surgical, safe, and addresses a genuine runtime issue in a widely-used network driver. drivers/net/ethernet/cadence/macb_main.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/drivers/net/ethernet/cadence/macb_main.c b/drivers/net/ethernet/cadence/macb_main.c index e3cc26472c2f1..ec7f85cb0cbfa 100644 --- a/drivers/net/ethernet/cadence/macb_main.c +++ b/drivers/net/ethernet/cadence/macb_main.c @@ -5104,7 +5104,11 @@ static int macb_probe(struct platform_device *pdev) #ifdef CONFIG_ARCH_DMA_ADDR_T_64BIT if (GEM_BFEXT(DAW64, gem_readl(bp, DCFG6))) { - dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); + err = dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(44)); + if (err) { + dev_err(&pdev->dev, "failed to set DMA mask\n"); + goto err_out_free_netdev; + } bp->hw_dma_cap |= HW_DMA_CAP_64B; } #endif -- 2.39.5

1 month, 1 week

1
107
0 0

FAILED: patch "[PATCH] arm64: dts: ti: k3-am62-main: Set eMMC clock parent to" failed to apply to 6.1-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.1-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.1.y git checkout FETCH_HEAD git cherry-pick -x 3a71cdfec94436079513d9adf4b1d4f7a7edd917 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060230-sacrifice-vexingly-4e21@gregkh' --subject-prefix 'PATCH 6.1.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 3a71cdfec94436079513d9adf4b1d4f7a7edd917 Mon Sep 17 00:00:00 2001 From: Judith Mendez <jm(a)ti.com> Date: Tue, 29 Apr 2025 11:33:35 -0500 Subject: [PATCH] arm64: dts: ti: k3-am62-main: Set eMMC clock parent to default Set eMMC clock parents to the defaults which is MAIN_PLL0_HSDIV5_CLKOUT for eMMC. This change is necessary since DM is not implementing the correct procedure to switch PLL clock source for eMMC and MMC CLK mux is not glich-free. As a preventative action, lets switch back to the defaults. Fixes: c37c58fdeb8a ("arm64: dts: ti: k3-am62: Add more peripheral nodes") Cc: stable(a)vger.kernel.org Signed-off-by: Judith Mendez <jm(a)ti.com> Acked-by: Udit Kumar <u-kumar1(a)ti.com> Acked-by: Bryan Brattlof <bb(a)ti.com> Link: https://lore.kernel.org/r/20250429163337.15634-2-jm@ti.com Signed-off-by: Nishanth Menon <nm(a)ti.com> diff --git a/arch/arm64/boot/dts/ti/k3-am62-main.dtsi b/arch/arm64/boot/dts/ti/k3-am62-main.dtsi index 7d355aa73ea2..0c286f600296 100644 --- a/arch/arm64/boot/dts/ti/k3-am62-main.dtsi +++ b/arch/arm64/boot/dts/ti/k3-am62-main.dtsi @@ -552,8 +552,6 @@ sdhci0: mmc@fa10000 { power-domains = <&k3_pds 57 TI_SCI_PD_EXCLUSIVE>; clocks = <&k3_clks 57 5>, <&k3_clks 57 6>; clock-names = "clk_ahb", "clk_xin"; - assigned-clocks = <&k3_clks 57 6>; - assigned-clock-parents = <&k3_clks 57 8>; bus-width = <8>; mmc-ddr-1_8v; mmc-hs200-1_8v;

1 month, 1 week

4
3
0 0

[PATCH 6.12.y] f2fs: fix to avoid accessing uninitialized curseg

by alvalan9＠foxmail.com

From: Chao Yu <chao(a)kernel.org> [ Upstream commit 986c50f6bca109c6cf362b4e2babcb85aba958f6 ] syzbot reports a f2fs bug as below: F2FS-fs (loop3): Stopped filesystem due to reason: 7 kworker/u8:7: attempt to access beyond end of device BUG: unable to handle page fault for address: ffffed1604ea3dfa RIP: 0010:get_ckpt_valid_blocks fs/f2fs/segment.h:361 [inline] RIP: 0010:has_curseg_enough_space fs/f2fs/segment.h:570 [inline] RIP: 0010:__get_secs_required fs/f2fs/segment.h:620 [inline] RIP: 0010:has_not_enough_free_secs fs/f2fs/segment.h:633 [inline] RIP: 0010:has_enough_free_secs+0x575/0x1660 fs/f2fs/segment.h:649 <TASK> f2fs_is_checkpoint_ready fs/f2fs/segment.h:671 [inline] f2fs_write_inode+0x425/0x540 fs/f2fs/inode.c:791 write_inode fs/fs-writeback.c:1525 [inline] __writeback_single_inode+0x708/0x10d0 fs/fs-writeback.c:1745 writeback_sb_inodes+0x820/0x1360 fs/fs-writeback.c:1976 wb_writeback+0x413/0xb80 fs/fs-writeback.c:2156 wb_do_writeback fs/fs-writeback.c:2303 [inline] wb_workfn+0x410/0x1080 fs/fs-writeback.c:2343 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3317 worker_thread+0x870/0xd30 kernel/workqueue.c:3398 kthread+0x7a9/0x920 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Commit 8b10d3653735 ("f2fs: introduce FAULT_NO_SEGMENT") allows to trigger no free segment fault in allocator, then it will update curseg->segno to NULL_SEGNO, though, CP_ERROR_FLAG has been set, f2fs_write_inode() missed to check the flag, and access invalid curseg->segno directly in below call path, then resulting in panic: - f2fs_write_inode - f2fs_is_checkpoint_ready - has_enough_free_secs - has_not_enough_free_secs - __get_secs_required - has_curseg_enough_space - get_ckpt_valid_blocks : access invalid curseg->segno To avoid this issue, let's: - check CP_ERROR_FLAG flag in prior to f2fs_is_checkpoint_ready() in f2fs_write_inode(). - in has_curseg_enough_space(), save curseg->segno into a temp variable, and verify its validation before use. Fixes: 8b10d3653735 ("f2fs: introduce FAULT_NO_SEGMENT") Reported-by: syzbot+b6b347b7a4ea1b2e29b6(a)syzkaller.appspotmail.com Closes: https://lore.kernel.org/all/67973c2b.050a0220.11b1bb.0089.GAE@google.com Signed-off-by: Chao Yu <chao(a)kernel.org> Signed-off-by: Jaegeuk Kim <jaegeuk(a)kernel.org> Signed-off-by: Alva Lan <alvalan9(a)foxmail.com> --- Build test passed. The kernel booted up successfully with the patch applied. --- fs/f2fs/inode.c | 7 +++++++ fs/f2fs/segment.h | 9 ++++++++- 2 files changed, 15 insertions(+), 1 deletion(-) diff --git a/fs/f2fs/inode.c b/fs/f2fs/inode.c index a60db5e795a4..1061991434b1 100644 --- a/fs/f2fs/inode.c +++ b/fs/f2fs/inode.c @@ -777,6 +777,13 @@ int f2fs_write_inode(struct inode *inode, struct writeback_control *wbc) !is_inode_flag_set(inode, FI_DIRTY_INODE)) return 0; + /* + * no need to update inode page, ultimately f2fs_evict_inode() will + * clear dirty status of inode. + */ + if (f2fs_cp_error(sbi)) + return -EIO; + if (!f2fs_is_checkpoint_ready(sbi)) { f2fs_mark_inode_dirty_sync(inode, true); return -ENOSPC; diff --git a/fs/f2fs/segment.h b/fs/f2fs/segment.h index 51b2b8c5c749..0c004dd5595b 100644 --- a/fs/f2fs/segment.h +++ b/fs/f2fs/segment.h @@ -562,13 +562,16 @@ static inline bool has_curseg_enough_space(struct f2fs_sb_info *sbi, unsigned int node_blocks, unsigned int data_blocks, unsigned int dent_blocks) { - unsigned int segno, left_blocks, blocks; int i; /* check current data/node sections in the worst case. */ for (i = CURSEG_HOT_DATA; i < NR_PERSISTENT_LOG; i++) { segno = CURSEG_I(sbi, i)->segno; + + if (unlikely(segno == NULL_SEGNO)) + return false; + left_blocks = CAP_BLKS_PER_SEC(sbi) - get_ckpt_valid_blocks(sbi, segno, true); @@ -579,6 +582,10 @@ static inline bool has_curseg_enough_space(struct f2fs_sb_info *sbi, /* check current data section for dentry blocks. */ segno = CURSEG_I(sbi, CURSEG_HOT_DATA)->segno; + + if (unlikely(segno == NULL_SEGNO)) + return false; + left_blocks = CAP_BLKS_PER_SEC(sbi) - get_ckpt_valid_blocks(sbi, segno, true); if (dent_blocks > left_blocks) -- 2.34.1

1 month, 1 week

2
1
0 0

FAILED: patch "[PATCH] arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0" failed to apply to 6.6-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.6-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.6.y git checkout FETCH_HEAD git cherry-pick -x f55c9f087cc2e2252d44ffd9d58def2066fc176e # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060218-subdivide-smashing-0ef7@gregkh' --subject-prefix 'PATCH 6.6.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From f55c9f087cc2e2252d44ffd9d58def2066fc176e Mon Sep 17 00:00:00 2001 From: Judith Mendez <jm(a)ti.com> Date: Tue, 29 Apr 2025 12:30:08 -0500 Subject: [PATCH] arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0 For am65x, add missing ITAPDLYSEL values for Default Speed and High Speed SDR modes to sdhci0 node according to the device datasheet [0]. [0] https://www.ti.com/lit/gpn/am6548 Fixes: eac99d38f861 ("arm64: dts: ti: k3-am654-main: Update otap-del-sel values") Cc: stable(a)vger.kernel.org Signed-off-by: Judith Mendez <jm(a)ti.com> Reviewed-by: Moteen Shah <m-shah(a)ti.com> Link: https://lore.kernel.org/r/20250429173009.33994-1-jm@ti.com Signed-off-by: Nishanth Menon <nm(a)ti.com> diff --git a/arch/arm64/boot/dts/ti/k3-am65-main.dtsi b/arch/arm64/boot/dts/ti/k3-am65-main.dtsi index 6d3c467d7038..b085e7361116 100644 --- a/arch/arm64/boot/dts/ti/k3-am65-main.dtsi +++ b/arch/arm64/boot/dts/ti/k3-am65-main.dtsi @@ -449,6 +449,8 @@ sdhci0: mmc@4f80000 { ti,otap-del-sel-mmc-hs = <0x0>; ti,otap-del-sel-ddr52 = <0x5>; ti,otap-del-sel-hs200 = <0x5>; + ti,itap-del-sel-legacy = <0xa>; + ti,itap-del-sel-mmc-hs = <0x1>; ti,itap-del-sel-ddr52 = <0x0>; dma-coherent; status = "disabled";

1 month, 1 week

4
3
0 0

FAILED: patch "[PATCH] arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0" failed to apply to 5.10-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 5.10-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.10.y git checkout FETCH_HEAD git cherry-pick -x f55c9f087cc2e2252d44ffd9d58def2066fc176e # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060219-slicing-gargle-f481@gregkh' --subject-prefix 'PATCH 5.10.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From f55c9f087cc2e2252d44ffd9d58def2066fc176e Mon Sep 17 00:00:00 2001 From: Judith Mendez <jm(a)ti.com> Date: Tue, 29 Apr 2025 12:30:08 -0500 Subject: [PATCH] arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0 For am65x, add missing ITAPDLYSEL values for Default Speed and High Speed SDR modes to sdhci0 node according to the device datasheet [0]. [0] https://www.ti.com/lit/gpn/am6548 Fixes: eac99d38f861 ("arm64: dts: ti: k3-am654-main: Update otap-del-sel values") Cc: stable(a)vger.kernel.org Signed-off-by: Judith Mendez <jm(a)ti.com> Reviewed-by: Moteen Shah <m-shah(a)ti.com> Link: https://lore.kernel.org/r/20250429173009.33994-1-jm@ti.com Signed-off-by: Nishanth Menon <nm(a)ti.com> diff --git a/arch/arm64/boot/dts/ti/k3-am65-main.dtsi b/arch/arm64/boot/dts/ti/k3-am65-main.dtsi index 6d3c467d7038..b085e7361116 100644 --- a/arch/arm64/boot/dts/ti/k3-am65-main.dtsi +++ b/arch/arm64/boot/dts/ti/k3-am65-main.dtsi @@ -449,6 +449,8 @@ sdhci0: mmc@4f80000 { ti,otap-del-sel-mmc-hs = <0x0>; ti,otap-del-sel-ddr52 = <0x5>; ti,otap-del-sel-hs200 = <0x5>; + ti,itap-del-sel-legacy = <0xa>; + ti,itap-del-sel-mmc-hs = <0x1>; ti,itap-del-sel-ddr52 = <0x0>; dma-coherent; status = "disabled";

1 month, 1 week

4
3
0 0

FAILED: patch "[PATCH] arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0" failed to apply to 6.1-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.1-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.1.y git checkout FETCH_HEAD git cherry-pick -x f55c9f087cc2e2252d44ffd9d58def2066fc176e # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060218-borrowing-cartload-20af@gregkh' --subject-prefix 'PATCH 6.1.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From f55c9f087cc2e2252d44ffd9d58def2066fc176e Mon Sep 17 00:00:00 2001 From: Judith Mendez <jm(a)ti.com> Date: Tue, 29 Apr 2025 12:30:08 -0500 Subject: [PATCH] arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0 For am65x, add missing ITAPDLYSEL values for Default Speed and High Speed SDR modes to sdhci0 node according to the device datasheet [0]. [0] https://www.ti.com/lit/gpn/am6548 Fixes: eac99d38f861 ("arm64: dts: ti: k3-am654-main: Update otap-del-sel values") Cc: stable(a)vger.kernel.org Signed-off-by: Judith Mendez <jm(a)ti.com> Reviewed-by: Moteen Shah <m-shah(a)ti.com> Link: https://lore.kernel.org/r/20250429173009.33994-1-jm@ti.com Signed-off-by: Nishanth Menon <nm(a)ti.com> diff --git a/arch/arm64/boot/dts/ti/k3-am65-main.dtsi b/arch/arm64/boot/dts/ti/k3-am65-main.dtsi index 6d3c467d7038..b085e7361116 100644 --- a/arch/arm64/boot/dts/ti/k3-am65-main.dtsi +++ b/arch/arm64/boot/dts/ti/k3-am65-main.dtsi @@ -449,6 +449,8 @@ sdhci0: mmc@4f80000 { ti,otap-del-sel-mmc-hs = <0x0>; ti,otap-del-sel-ddr52 = <0x5>; ti,otap-del-sel-hs200 = <0x5>; + ti,itap-del-sel-legacy = <0xa>; + ti,itap-del-sel-mmc-hs = <0x1>; ti,itap-del-sel-ddr52 = <0x0>; dma-coherent; status = "disabled";

1 month, 1 week

4
3
0 0

[PATCH] drm/xe/guc_submit: add back fix

by Matthew Auld

Daniele noticed that the fix in commit 2d2be279f1ca ("drm/xe: fix UAF around queue destruction") looks to have been unintentionally removed as part of handling a conflict in some past merge commit. Add it back. Fixes: ac44ff7cec33 ("Merge tag 'drm-xe-fixes-2024-10-10' of https://gitlab.freedesktop.org/drm/xe/kernel into drm-fixes") Reported-by: Daniele Ceraolo Spurio <daniele.ceraolospurio(a)intel.com> Signed-off-by: Matthew Auld <matthew.auld(a)intel.com> Cc: Matthew Brost <matthew.brost(a)intel.com> Cc: <stable(a)vger.kernel.org> # v6.12+ --- drivers/gpu/drm/xe/xe_guc_submit.c | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/drivers/gpu/drm/xe/xe_guc_submit.c b/drivers/gpu/drm/xe/xe_guc_submit.c index 80f748baad3f..2b61d017eeca 100644 --- a/drivers/gpu/drm/xe/xe_guc_submit.c +++ b/drivers/gpu/drm/xe/xe_guc_submit.c @@ -229,6 +229,17 @@ static bool exec_queue_killed_or_banned_or_wedged(struct xe_exec_queue *q) static void guc_submit_fini(struct drm_device *drm, void *arg) { struct xe_guc *guc = arg; + struct xe_device *xe = guc_to_xe(guc); + struct xe_gt *gt = guc_to_gt(guc); + int ret; + + ret = wait_event_timeout(guc->submission_state.fini_wq, + xa_empty(&guc->submission_state.exec_queue_lookup), + HZ * 5); + + drain_workqueue(xe->destroy_wq); + + xe_gt_assert(gt, ret); xa_destroy(&guc->submission_state.exec_queue_lookup); } -- 2.49.0

1 month, 1 week

2
1
0 0

[for-linus][PATCH 1/5] ftrace: Fix UAF when lookup kallsym after ftrace disabled

by Steven Rostedt

From: Ye Bin <yebin10(a)huawei.com> The following issue happens with a buggy module: BUG: unable to handle page fault for address: ffffffffc05d0218 PGD 1bd66f067 P4D 1bd66f067 PUD 1bd671067 PMD 101808067 PTE 0 Oops: Oops: 0000 [#1] SMP KASAN PTI Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS RIP: 0010:sized_strscpy+0x81/0x2f0 RSP: 0018:ffff88812d76fa08 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffffffffc0601010 RCX: dffffc0000000000 RDX: 0000000000000038 RSI: dffffc0000000000 RDI: ffff88812608da2d RBP: 8080808080808080 R08: ffff88812608da2d R09: ffff88812608da68 R10: ffff88812608d82d R11: ffff88812608d810 R12: 0000000000000038 R13: ffff88812608da2d R14: ffffffffc05d0218 R15: fefefefefefefeff FS: 00007fef552de740(0000) GS:ffff8884251c7000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffc05d0218 CR3: 00000001146f0000 CR4: 00000000000006f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> ftrace_mod_get_kallsym+0x1ac/0x590 update_iter_mod+0x239/0x5b0 s_next+0x5b/0xa0 seq_read_iter+0x8c9/0x1070 seq_read+0x249/0x3b0 proc_reg_read+0x1b0/0x280 vfs_read+0x17f/0x920 ksys_read+0xf3/0x1c0 do_syscall_64+0x5f/0x2e0 entry_SYSCALL_64_after_hwframe+0x76/0x7e The above issue may happen as follows: (1) Add kprobe tracepoint; (2) insmod test.ko; (3) Module triggers ftrace disabled; (4) rmmod test.ko; (5) cat /proc/kallsyms; --> Will trigger UAF as test.ko already removed; ftrace_mod_get_kallsym() ... strscpy(module_name, mod_map->mod->name, MODULE_NAME_LEN); ... The problem is when a module triggers an issue with ftrace and sets ftrace_disable. The ftrace_disable is set when an anomaly is discovered and to prevent any more damage, ftrace stops all text modification. The issue that happened was that the ftrace_disable stops more than just the text modification. When a module is loaded, its init functions can also be traced. Because kallsyms deletes the init functions after a module has loaded, ftrace saves them when the module is loaded and function tracing is enabled. This allows the output of the function trace to show the init function names instead of just their raw memory addresses. When a module is removed, ftrace_release_mod() is called, and if ftrace_disable is set, it just returns without doing anything more. The problem here is that it leaves the mod_list still around and if kallsyms is called, it will call into this code and access the module memory that has already been freed as it will return: strscpy(module_name, mod_map->mod->name, MODULE_NAME_LEN); Where the "mod" no longer exists and triggers a UAF bug. Link: https://lore.kernel.org/all/20250523135452.626d8dcd@gandalf.local.home/ Cc: stable(a)vger.kernel.org Fixes: aba4b5c22cba ("ftrace: Save module init functions kallsyms symbols for tracing") Link: https://lore.kernel.org/20250529111955.2349189-2-yebin@huaweicloud.com Signed-off-by: Ye Bin <yebin10(a)huawei.com> Signed-off-by: Steven Rostedt (Google) <rostedt(a)goodmis.org> --- kernel/trace/ftrace.c | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/kernel/trace/ftrace.c b/kernel/trace/ftrace.c index 1af952cba48d..84fd2f8263fa 100644 --- a/kernel/trace/ftrace.c +++ b/kernel/trace/ftrace.c @@ -7438,9 +7438,10 @@ void ftrace_release_mod(struct module *mod) mutex_lock(&ftrace_lock); - if (ftrace_disabled) - goto out_unlock; - + /* + * To avoid the UAF problem after the module is unloaded, the + * 'mod_map' resource needs to be released unconditionally. + */ list_for_each_entry_safe(mod_map, n, &ftrace_mod_maps, list) { if (mod_map->mod == mod) { list_del_rcu(&mod_map->list); @@ -7449,6 +7450,9 @@ void ftrace_release_mod(struct module *mod) } } + if (ftrace_disabled) + goto out_unlock; + /* * Each module has its own ftrace_pages, remove * them from the list. -- 2.47.2

1 month, 1 week

1
0
0 0

[PATCH 6.14 00/73] 6.14.10-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.14.10 release. There are 73 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 04 Jun 2025 13:42:20 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.14.10-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.14.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.14.10-rc1 Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use list_first_entry_or_null for opinfo_get_list() Nishanth Menon <nm(a)ti.com> net: ethernet: ti: am65-cpsw: Lower random mac address error print to info Mark Pearson <mpearson-lenovo(a)squebb.ca> platform/x86: thinkpad_acpi: Ignore battery threshold change event notification Kailang Yang <kailang(a)realtek.com> ALSA: hda/realtek - restore auto-mute mode for Dell Chrome platform Valtteri Koskivuori <vkoskiv(a)gmail.com> platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys Trond Myklebust <trond.myklebust(a)hammerspace.com> NFS: Avoid flushing data while holding directory locks in nfs_rename() Purva Yeshi <purvayeshi550(a)gmail.com> char: tpm: tpm-buf: Add sanity check fallback in read helpers Umesh Nerlige Ramappa <umesh.nerlige.ramappa(a)intel.com> drm/xe: Save the gt pointer in lrc and drop the tile Aradhya Bhatia <aradhya.bhatia(a)intel.com> drm/xe/xe2hpg: Add Wa_22021007897 Ilya Guterman <amfernusus(a)gmail.com> nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro Alan Adamson <alan.adamson(a)oracle.com> nvme: all namespaces in a subsystem must adhere to a common atomic write size Alessandro Grassi <alessandro.grassi(a)mailbox.org> spi: spi-sun4i: fix early activation Algea Cao <algea.cao(a)rock-chips.com> phy: phy-rockchip-samsung-hdptx: Fix PHY PLL output 50.25MHz error Hal Feng <hal.feng(a)starfivetech.com> phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure Alan Adamson <alan.adamson(a)oracle.com> nvme: multipath: enable BLK_FEAT_ATOMIC_WRITES for multipathing Aurabindo Pillai <aurabindo.pillai(a)amd.com> drm/amd/display: check stream id dml21 wrapper to get plane_id George Shen <george.shen(a)amd.com> drm/amd/display: fix link_set_dpms_off multi-display MST corner case Markus Burri <markus.burri(a)mt.com> gpio: virtuser: fix potential out-of-bound write Damien Le Moal <dlemoal(a)kernel.org> nvmet: pci-epf: cleanup nvmet_pci_epf_raise_irq() Masahiro Yamada <masahiroy(a)kernel.org> um: let 'make clean' properly clean underlying SUBARCH as well Sami Tolvanen <samitolvanen(a)google.com> kbuild: Require pahole <v1.28 or >v1.29 with GENDWARFKSYMS on X86 John Chau <johnchau(a)0atlas.com> platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS Jeff Layton <jlayton(a)kernel.org> nfs: don't share pNFS DS connections between net namespaces Milton Barrera <miltonjosue2001(a)gmail.com> HID: quirks: Add ADATA XPG alpha wireless mouse support Mario Limonciello <mario.limonciello(a)amd.com> HID: amd_sfh: Avoid clearing reports for SRA sensor Purva Yeshi <purvayeshi550(a)gmail.com> dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open Christian Brauner <brauner(a)kernel.org> coredump: hand a pidfd to the usermode coredump helper Christian Brauner <brauner(a)kernel.org> coredump: fix error handling for replace_fd() Robin Murphy <robin.murphy(a)arm.com> iommu: Handle yet another race around registration Robin Murphy <robin.murphy(a)arm.com> perf/arm-cmn: Add CMN S3 ACPI binding Robin Murphy <robin.murphy(a)arm.com> perf/arm-cmn: Initialise cmn->cpu earlier Robin Murphy <robin.murphy(a)arm.com> perf/arm-cmn: Fix REQ2/SNP2 mixup Pedro Tammela <pctammela(a)mojatatu.com> net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Siddharth Vadapalli <s-vadapalli(a)ti.com> arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix length of serdes_ln_ctrl Siddharth Vadapalli <s-vadapalli(a)ti.com> arm64: dts: ti: k3-j722s-main: Disable "serdes_wiz0" and "serdes_wiz1" Siddharth Vadapalli <s-vadapalli(a)ti.com> arm64: dts: ti: k3-j722s-evm: Enable "serdes_wiz0" and "serdes_wiz1" Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> arm64: dts: ti: k3-j721e-sk: Add requiried voltage supplies for IMX219 Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> arm64: dts: ti: k3-j721e-sk: Remove clock-names property from IMX219 overlay Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0 Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in OV5640 overlay Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in IMX219 overlay Yemike Abhilash Chandra <y-abhilashchandra(a)ti.com> arm64: dts: ti: k3-am62x: Remove clock-names property from IMX219 overlay Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62p-j722s-common-main: Set eMMC clock parent to default Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62a-main: Set eMMC clock parent to default Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62-main: Set eMMC clock parent to default Abel Vesa <abel.vesa(a)linaro.org> arm64: dts: qcom: x1e80100: Fix PCIe 3rd controller DBI size Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: x1e80100: Add GPU cooling Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: x1e80100: Apply consistent critical thermal shutdown Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: x1e80100: Fix video thermal zone Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: x1e80100-yoga-slim7x: mark l12b and l15b always-on Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: x1e80100-qcp: mark l12b and l15b always-on Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: x1e80100-qcp: Fix vreg_l2j_1p2 voltage Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: x1e80100-lenovo-yoga-slim7x: Fix vreg_l2j_1p2 voltage Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: x1e80100-hp-x14: mark l12b and l15b always-on Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: x1e80100-hp-omnibook-x14: Fix vreg_l2j_1p2 voltage Juerg Haefliger <juerg.haefliger(a)canonical.com> arm64: dts: qcom: x1e80100-hp-omnibook-x14: Enable SMB2360 0 and 1 Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: x1e80100-dell-xps13-9345: mark l12b and l15b always-on Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: x1e80100-asus-vivobook-s15: Fix vreg_l2j_1p2 voltage Johan Hovold <johan+linaro(a)kernel.org> arm64: dts: qcom: x1e001de-devkit: mark l12b and l15b always-on Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: x1e001de-devkit: Fix vreg_l2j_1p2 voltage Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: sm8650: Add missing properties for cryptobam Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: sm8550: Add missing properties for cryptobam Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: sm8450: Add missing properties for cryptobam Alok Tiwari <alok.a.tiwari(a)oracle.com> arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node Karthik Sanagavarapu <quic_kartsana(a)quicinc.com> arm64: dts: qcom: sa8775p: Remove cdsp compute-cb@10 Ling Xu <quic_lxu5(a)quicinc.com> arm64: dts: qcom: sa8775p: Remove extra entries from the iommus property Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: sa8775p: Add missing properties for cryptobam Stephan Gerhold <stephan.gerhold(a)linaro.org> arm64: dts: qcom: ipq9574: Add missing properties for cryptobam Lukasz Czechowski <lukasz.czechowski(a)thaumatec.com> arm64: dts: rockchip: fix internal USB hub instability on RK3399 Puma Niravkumar L Rabara <niravkumar.l.rabara(a)intel.com> arm64: dts: socfpga: agilex5: fix gpio0 address Axel Forsman <axfo(a)kvaser.com> can: kvaser_pciefd: Force IRQ edge in case of nested IRQ ------------- Diffstat: Makefile | 4 +- arch/arm64/boot/dts/intel/socfpga_agilex5.dtsi | 4 +- arch/arm64/boot/dts/qcom/ipq9574.dtsi | 2 + arch/arm64/boot/dts/qcom/sa8775p.dtsi | 248 ++--------------- arch/arm64/boot/dts/qcom/sm8350.dtsi | 2 +- arch/arm64/boot/dts/qcom/sm8450.dtsi | 2 + arch/arm64/boot/dts/qcom/sm8550.dtsi | 2 + arch/arm64/boot/dts/qcom/sm8650.dtsi | 2 + arch/arm64/boot/dts/qcom/x1e001de-devkit.dts | 6 +- .../boot/dts/qcom/x1e80100-asus-vivobook-s15.dts | 4 +- .../boot/dts/qcom/x1e80100-dell-xps13-9345.dts | 2 + .../boot/dts/qcom/x1e80100-hp-omnibook-x14.dts | 14 +- .../boot/dts/qcom/x1e80100-lenovo-yoga-slim7x.dts | 7 +- arch/arm64/boot/dts/qcom/x1e80100-qcp.dts | 6 +- arch/arm64/boot/dts/qcom/x1e80100.dtsi | 309 +++++++++++---------- arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi | 40 ++- arch/arm64/boot/dts/ti/k3-am62-main.dtsi | 2 - arch/arm64/boot/dts/ti/k3-am62a-main.dtsi | 2 - .../boot/dts/ti/k3-am62p-j722s-common-main.dtsi | 2 - .../arm64/boot/dts/ti/k3-am62x-sk-csi2-imx219.dtso | 3 +- .../arm64/boot/dts/ti/k3-am62x-sk-csi2-ov5640.dtso | 2 +- .../boot/dts/ti/k3-am62x-sk-csi2-tevi-ov5640.dtso | 2 +- arch/arm64/boot/dts/ti/k3-am65-main.dtsi | 2 + arch/arm64/boot/dts/ti/k3-am68-sk-base-board.dts | 13 +- .../boot/dts/ti/k3-j721e-sk-csi2-dual-imx219.dtso | 35 ++- arch/arm64/boot/dts/ti/k3-j721e-sk.dts | 31 +++ arch/arm64/boot/dts/ti/k3-j722s-evm.dts | 8 + arch/arm64/boot/dts/ti/k3-j722s-main.dtsi | 4 + .../boot/dts/ti/k3-j784s4-j742s2-main-common.dtsi | 2 +- arch/um/Makefile | 1 + drivers/char/tpm/tpm-buf.c | 6 +- drivers/dma/idxd/cdev.c | 4 +- drivers/gpio/gpio-virtuser.c | 12 +- .../dc/dml2/dml21/dml21_translation_helper.c | 20 +- drivers/gpu/drm/amd/display/dc/link/link_dpms.c | 13 +- drivers/gpu/drm/xe/regs/xe_gt_regs.h | 1 + drivers/gpu/drm/xe/xe_lrc.c | 4 +- drivers/gpu/drm/xe/xe_lrc_types.h | 4 +- drivers/gpu/drm/xe/xe_wa.c | 4 + drivers/hid/amd-sfh-hid/sfh1_1/amd_sfh_init.c | 5 + drivers/hid/hid-ids.h | 4 + drivers/hid/hid-quirks.c | 2 + drivers/iommu/iommu.c | 26 +- drivers/net/can/kvaser_pciefd.c | 83 +++--- drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2 +- drivers/nvme/host/core.c | 30 +- drivers/nvme/host/multipath.c | 3 +- drivers/nvme/host/nvme.h | 3 +- drivers/nvme/host/pci.c | 2 + drivers/nvme/target/pci-epf.c | 10 +- drivers/perf/arm-cmn.c | 11 +- drivers/phy/rockchip/phy-rockchip-samsung-hdptx.c | 2 + drivers/phy/starfive/phy-jh7110-usb.c | 7 + drivers/platform/x86/fujitsu-laptop.c | 33 ++- drivers/platform/x86/thinkpad_acpi.c | 7 + drivers/spi/spi-sun4i.c | 5 +- fs/coredump.c | 65 ++++- fs/nfs/client.c | 2 + fs/nfs/dir.c | 15 +- fs/nfs/filelayout/filelayoutdev.c | 6 +- fs/nfs/flexfilelayout/flexfilelayoutdev.c | 6 +- fs/nfs/pnfs.h | 4 +- fs/nfs/pnfs_nfs.c | 9 +- fs/smb/server/oplock.c | 7 +- include/linux/coredump.h | 1 + include/linux/iommu.h | 2 + include/linux/nfs_fs_sb.h | 12 +- kernel/module/Kconfig | 5 + net/sched/sch_hfsc.c | 9 +- sound/pci/hda/patch_realtek.c | 5 +- 70 files changed, 674 insertions(+), 540 deletions(-)

1 month, 1 week

8
80
0 0

[PATCH v3] mm: userfaultfd: fix race of userfaultfd_move and swap cache

by Kairui Song

From: Kairui Song <kasong(a)tencent.com> On seeing a swap entry PTE, userfaultfd_move does a lockless swap cache lookup, and try to move the found folio to the faulting vma when. Currently, it relies on the PTE value check to ensure the moved folio still belongs to the src swap entry, which turns out is not reliable. While working and reviewing the swap table series with Barry, following existing race is observed and reproduced [1]: ( move_pages_pte is moving src_pte to dst_pte, where src_pte is a swap entry PTE holding swap entry S1, and S1 isn't in the swap cache.) CPU1 CPU2 userfaultfd_move move_pages_pte() entry = pte_to_swp_entry(orig_src_pte); // Here it got entry = S1 ... < Somehow interrupted> ... <swapin src_pte, alloc and use folio A> // folio A is just a new allocated folio // and get installed into src_pte <frees swap entry S1> // src_pte now points to folio A, S1 // has swap count == 0, it can be freed // by folio_swap_swap or swap // allocator's reclaim. <try to swap out another folio B> // folio B is a folio in another VMA. <put folio B to swap cache using S1 > // S1 is freed, folio B could use it // for swap out with no problem. ... folio = filemap_get_folio(S1) // Got folio B here !!! ... < Somehow interrupted again> ... <swapin folio B and free S1> // Now S1 is free to be used again. <swapout src_pte & folio A using S1> // Now src_pte is a swap entry pte // holding S1 again. folio_trylock(folio) move_swap_pte double_pt_lock is_pte_pages_stable // Check passed because src_pte == S1 folio_move_anon_rmap(...) // Moved invalid folio B here !!! The race window is very short and requires multiple collisions of multiple rare events, so it's very unlikely to happen, but with a deliberately constructed reproducer and increased time window, it can be reproduced [1]. It's also possible that folio (A) is swapped in, and swapped out again after the filemap_get_folio lookup, in such case folio (A) may stay in swap cache so it needs to be moved too. In this case we should also try again so kernel won't miss a folio move. Fix this by checking if the folio is the valid swap cache folio after acquiring the folio lock, and checking the swap cache again after acquiring the src_pte lock. SWP_SYNCRHONIZE_IO path does make the problem more complex, but so far we don't need to worry about that since folios only might get exposed to swap cache in the swap out path, and it's covered in this patch too by checking the swap cache again after acquiring src_pte lock. Testing with a simple C program to allocate and move several GB of memory did not show any observable performance change. Cc: <stable(a)vger.kernel.org> Fixes: adef440691ba ("userfaultfd: UFFDIO_MOVE uABI") Closes: https://lore.kernel.org/linux-mm/CAMgjq7B1K=6OOrK2OUZ0-tqCzi+EJt+2_K97TPGoS… [1] Signed-off-by: Kairui Song <kasong(a)tencent.com> --- V1: https://lore.kernel.org/linux-mm/20250530201710.81365-1-ryncsn@gmail.com/ Changes: - Check swap_map instead of doing a filemap lookup after acquiring the PTE lock to minimize critical section overhead [ Barry Song, Lokesh Gidra ] V2: https://lore.kernel.org/linux-mm/20250601200108.23186-1-ryncsn@gmail.com/ Changes: - Move the folio and swap check inside move_swap_pte to avoid skipping the check and potential overhead [ Lokesh Gidra ] - Add a READ_ONCE for the swap_map read to ensure it reads a up to dated value. mm/userfaultfd.c | 23 +++++++++++++++++++++-- 1 file changed, 21 insertions(+), 2 deletions(-) diff --git a/mm/userfaultfd.c b/mm/userfaultfd.c index bc473ad21202..5dc05346e360 100644 --- a/mm/userfaultfd.c +++ b/mm/userfaultfd.c @@ -1084,8 +1084,18 @@ static int move_swap_pte(struct mm_struct *mm, struct vm_area_struct *dst_vma, pte_t orig_dst_pte, pte_t orig_src_pte, pmd_t *dst_pmd, pmd_t dst_pmdval, spinlock_t *dst_ptl, spinlock_t *src_ptl, - struct folio *src_folio) + struct folio *src_folio, + struct swap_info_struct *si, swp_entry_t entry) { + /* + * Check if the folio still belongs to the target swap entry after + * acquiring the lock. Folio can be freed in the swap cache while + * not locked. + */ + if (src_folio && unlikely(!folio_test_swapcache(src_folio) || + entry.val != src_folio->swap.val)) + return -EAGAIN; + double_pt_lock(dst_ptl, src_ptl); if (!is_pte_pages_stable(dst_pte, src_pte, orig_dst_pte, orig_src_pte, @@ -1102,6 +1112,15 @@ static int move_swap_pte(struct mm_struct *mm, struct vm_area_struct *dst_vma, if (src_folio) { folio_move_anon_rmap(src_folio, dst_vma); src_folio->index = linear_page_index(dst_vma, dst_addr); + } else { + /* + * Check if the swap entry is cached after acquiring the src_pte + * lock. Or we might miss a new loaded swap cache folio. + */ + if (READ_ONCE(si->swap_map[swp_offset(entry)]) & SWAP_HAS_CACHE) { + double_pt_unlock(dst_ptl, src_ptl); + return -EAGAIN; + } } orig_src_pte = ptep_get_and_clear(mm, src_addr, src_pte); @@ -1412,7 +1431,7 @@ static int move_pages_pte(struct mm_struct *mm, pmd_t *dst_pmd, pmd_t *src_pmd, } err = move_swap_pte(mm, dst_vma, dst_addr, src_addr, dst_pte, src_pte, orig_dst_pte, orig_src_pte, dst_pmd, dst_pmdval, - dst_ptl, src_ptl, src_folio); + dst_ptl, src_ptl, src_folio, si, entry); } out: -- 2.49.0

1 month, 1 week

4
6
0 0

[tip: x86/urgent] x86/iopl: Cure TIF_IO_BITMAP inconsistencies

by tip-bot2 for Thomas Gleixner

The following commit has been merged into the x86/urgent branch of tip: Commit-ID: 8b68e978718f14fdcb080c2a7791c52a0d09bc6d Gitweb: https://git.kernel.org/tip/8b68e978718f14fdcb080c2a7791c52a0d09bc6d Author: Thomas Gleixner <tglx(a)linutronix.de> AuthorDate: Wed, 26 Feb 2025 16:01:57 +01:00 Committer: Borislav Petkov (AMD) <bp(a)alien8.de> CommitterDate: Tue, 03 Jun 2025 15:56:39 +02:00 x86/iopl: Cure TIF_IO_BITMAP inconsistencies io_bitmap_exit() is invoked from exit_thread() when a task exists or when a fork fails. In the latter case the exit_thread() cleans up resources which were allocated during fork(). io_bitmap_exit() invokes task_update_io_bitmap(), which in turn ends up in tss_update_io_bitmap(). tss_update_io_bitmap() operates on the current task. If current has TIF_IO_BITMAP set, but no bitmap installed, tss_update_io_bitmap() crashes with a NULL pointer dereference. There are two issues, which lead to that problem: 1) io_bitmap_exit() should not invoke task_update_io_bitmap() when the task, which is cleaned up, is not the current task. That's a clear indicator for a cleanup after a failed fork(). 2) A task should not have TIF_IO_BITMAP set and neither a bitmap installed nor IOPL emulation level 3 activated. This happens when a kernel thread is created in the context of a user space thread, which has TIF_IO_BITMAP set as the thread flags are copied and the IO bitmap pointer is cleared. Other than in the failed fork() case this has no impact because kernel threads including IO workers never return to user space and therefore never invoke tss_update_io_bitmap(). Cure this by adding the missing cleanups and checks: 1) Prevent io_bitmap_exit() to invoke task_update_io_bitmap() if the to be cleaned up task is not the current task. 2) Clear TIF_IO_BITMAP in copy_thread() unconditionally. For user space forks it is set later, when the IO bitmap is inherited in io_bitmap_share(). For paranoia sake, add a warning into tss_update_io_bitmap() to catch the case, when that code is invoked with inconsistent state. Fixes: ea5f1cd7ab49 ("x86/ioperm: Remove bitmap if all permissions dropped") Reported-by: syzbot+e2b1803445d236442e54(a)syzkaller.appspotmail.com Signed-off-by: Thomas Gleixner <tglx(a)linutronix.de> Signed-off-by: Borislav Petkov (AMD) <bp(a)alien8.de> Cc: stable(a)vger.kernel.org Link: https://lore.kernel.org/87wmdceom2.ffs@tglx --- arch/x86/kernel/ioport.c | 13 +++++++++---- arch/x86/kernel/process.c | 6 ++++++ 2 files changed, 15 insertions(+), 4 deletions(-) diff --git a/arch/x86/kernel/ioport.c b/arch/x86/kernel/ioport.c index 6290dd1..ff40f09 100644 --- a/arch/x86/kernel/ioport.c +++ b/arch/x86/kernel/ioport.c @@ -33,8 +33,9 @@ void io_bitmap_share(struct task_struct *tsk) set_tsk_thread_flag(tsk, TIF_IO_BITMAP); } -static void task_update_io_bitmap(struct task_struct *tsk) +static void task_update_io_bitmap(void) { + struct task_struct *tsk = current; struct thread_struct *t = &tsk->thread; if (t->iopl_emul == 3 || t->io_bitmap) { @@ -54,7 +55,12 @@ void io_bitmap_exit(struct task_struct *tsk) struct io_bitmap *iobm = tsk->thread.io_bitmap; tsk->thread.io_bitmap = NULL; - task_update_io_bitmap(tsk); + /* + * Don't touch the TSS when invoked on a failed fork(). TSS + * reflects the state of @current and not the state of @tsk. + */ + if (tsk == current) + task_update_io_bitmap(); if (iobm && refcount_dec_and_test(&iobm->refcnt)) kfree(iobm); } @@ -192,8 +198,7 @@ SYSCALL_DEFINE1(iopl, unsigned int, level) } t->iopl_emul = level; - task_update_io_bitmap(current); - + task_update_io_bitmap(); return 0; } diff --git a/arch/x86/kernel/process.c b/arch/x86/kernel/process.c index c1d2dac..704883c 100644 --- a/arch/x86/kernel/process.c +++ b/arch/x86/kernel/process.c @@ -176,6 +176,7 @@ int copy_thread(struct task_struct *p, const struct kernel_clone_args *args) frame->ret_addr = (unsigned long) ret_from_fork_asm; p->thread.sp = (unsigned long) fork_frame; p->thread.io_bitmap = NULL; + clear_tsk_thread_flag(p, TIF_IO_BITMAP); p->thread.iopl_warn = 0; memset(p->thread.ptrace_bps, 0, sizeof(p->thread.ptrace_bps)); @@ -464,6 +465,11 @@ void native_tss_update_io_bitmap(void) } else { struct io_bitmap *iobm = t->io_bitmap; + if (WARN_ON_ONCE(!iobm)) { + clear_thread_flag(TIF_IO_BITMAP); + native_tss_invalidate_io_bitmap(); + } + /* * Only copy bitmap data when the sequence number differs. The * update time is accounted to the incoming task.

1 month, 1 week

1
0
0 0

[PATCH v2 1/2] tty: Register device *after* creating the cdev for a tty

by Max Staudt

This change makes the tty device file available only after the tty's backing character device is ready. Since 6a7e6f78c235975cc14d4e141fa088afffe7062c, the class device is registered before the cdev is created, and userspace may pick it up, yet open() will fail because the backing cdev doesn't exist yet. Userspace is racing the bottom half of tty_register_device_attr() here, specifically the call to tty_cdev_add(). dev_set_uevent_suppress() was used to work around this, but this fails on embedded systems that rely on bare devtmpfs rather than udev. On such systems, the device file is created as part of device_add(), and userspace can pick it up via inotify, irrespective of uevent suppression. So let's undo the existing patch, and create the cdev first, and only afterwards register the class device in the kernel's device tree. However, this restores the original race of the cdev existing before the class device is registered, and an attempt to tty_[k]open() the chardev between these two steps will lead to tty->dev being assigned NULL by alloc_tty_struct(). This will be addressed in a second patch. Fixes: 6a7e6f78c235 ("tty: close race between device register and open") Signed-off-by: Max Staudt <max(a)enpas.org> Cc: <stable(a)vger.kernel.org> --- drivers/tty/tty_io.c | 54 +++++++++++++++++++++++++------------------- 1 file changed, 31 insertions(+), 23 deletions(-) diff --git a/drivers/tty/tty_io.c b/drivers/tty/tty_io.c index ca9b7d7bad2b..e922b84524d2 100644 --- a/drivers/tty/tty_io.c +++ b/drivers/tty/tty_io.c @@ -3245,6 +3245,7 @@ struct device *tty_register_device_attr(struct tty_driver *driver, struct ktermios *tp; struct device *dev; int retval; + bool cdev_added = false; if (index >= driver->num) { pr_err("%s: Attempt to register invalid tty line number (%d)\n", @@ -3257,24 +3258,6 @@ struct device *tty_register_device_attr(struct tty_driver *driver, else tty_line_name(driver, index, name); - dev = kzalloc(sizeof(*dev), GFP_KERNEL); - if (!dev) - return ERR_PTR(-ENOMEM); - - dev->devt = devt; - dev->class = &tty_class; - dev->parent = device; - dev->release = tty_device_create_release; - dev_set_name(dev, "%s", name); - dev->groups = attr_grp; - dev_set_drvdata(dev, drvdata); - - dev_set_uevent_suppress(dev, 1); - - retval = device_register(dev); - if (retval) - goto err_put; - if (!(driver->flags & TTY_DRIVER_DYNAMIC_ALLOC)) { /* * Free any saved termios data so that the termios state is @@ -3288,19 +3271,44 @@ struct device *tty_register_device_attr(struct tty_driver *driver, retval = tty_cdev_add(driver, devt, index, 1); if (retval) - goto err_del; + return ERR_PTR(retval); + + cdev_added = true; + } + + dev = kzalloc(sizeof(*dev), GFP_KERNEL); + if (!dev) { + retval = -ENOMEM; + goto err_del_cdev; } - dev_set_uevent_suppress(dev, 0); - kobject_uevent(&dev->kobj, KOBJ_ADD); + dev->devt = devt; + dev->class = &tty_class; + dev->parent = device; + dev->release = tty_device_create_release; + dev_set_name(dev, "%s", name); + dev->groups = attr_grp; + dev_set_drvdata(dev, drvdata); + + retval = device_register(dev); + if (retval) + goto err_put; return dev; -err_del: - device_del(dev); err_put: + /* + * device_register() calls device_add(), after which + * we must use put_device() instead of kfree(). + */ put_device(dev); +err_del_cdev: + if (cdev_added) { + cdev_del(driver->cdevs[index]); + driver->cdevs[index] = NULL; + } + return ERR_PTR(retval); } EXPORT_SYMBOL_GPL(tty_register_device_attr); -- 2.39.5

1 month, 1 week

4
5
0 0

[PATCH v2 4/7] LoongArch: KVM: Check validation of num_cpu from user space

by Bibo Mao

The maximum supported cpu number is EIOINTC_ROUTE_MAX_VCPUS about irqchip eiointc, here add validation about cpu number to avoid array pointer overflow. Cc: stable(a)vger.kernel.org Fixes: 1ad7efa552fd ("LoongArch: KVM: Add EIOINTC user mode read and write functions") Signed-off-by: Bibo Mao <maobibo(a)loongson.cn> --- arch/loongarch/kvm/intc/eiointc.c | 18 +++++++++++++----- 1 file changed, 13 insertions(+), 5 deletions(-) diff --git a/arch/loongarch/kvm/intc/eiointc.c b/arch/loongarch/kvm/intc/eiointc.c index b48511f903b5..ed80bf290755 100644 --- a/arch/loongarch/kvm/intc/eiointc.c +++ b/arch/loongarch/kvm/intc/eiointc.c @@ -798,7 +798,7 @@ static int kvm_eiointc_ctrl_access(struct kvm_device *dev, int ret = 0; unsigned long flags; unsigned long type = (unsigned long)attr->attr; - u32 i, start_irq; + u32 i, start_irq, val; void __user *data; struct loongarch_eiointc *s = dev->kvm->arch.eiointc; @@ -806,7 +806,12 @@ static int kvm_eiointc_ctrl_access(struct kvm_device *dev, spin_lock_irqsave(&s->lock, flags); switch (type) { case KVM_DEV_LOONGARCH_EXTIOI_CTRL_INIT_NUM_CPU: - if (copy_from_user(&s->num_cpu, data, 4)) + if (copy_from_user(&val, data, 4) == 0) { + if (val < EIOINTC_ROUTE_MAX_VCPUS) + s->num_cpu = val; + else + ret = -EINVAL; + } else ret = -EFAULT; break; case KVM_DEV_LOONGARCH_EXTIOI_CTRL_INIT_FEATURE: @@ -835,7 +840,7 @@ static int kvm_eiointc_regs_access(struct kvm_device *dev, struct kvm_device_attr *attr, bool is_write) { - int addr, cpuid, offset, ret = 0; + int addr, cpu, offset, ret = 0; unsigned long flags; void *p = NULL; void __user *data; @@ -843,7 +848,7 @@ static int kvm_eiointc_regs_access(struct kvm_device *dev, s = dev->kvm->arch.eiointc; addr = attr->attr; - cpuid = addr >> 16; + cpu = addr >> 16; addr &= 0xffff; data = (void __user *)attr->addr; switch (addr) { @@ -868,8 +873,11 @@ static int kvm_eiointc_regs_access(struct kvm_device *dev, p = &s->isr.reg_u32[offset]; break; case EIOINTC_COREISR_START ... EIOINTC_COREISR_END: + if (cpu >= s->num_cpu) + return -EINVAL; + offset = (addr - EIOINTC_COREISR_START) / 4; - p = &s->coreisr.reg_u32[cpuid][offset]; + p = &s->coreisr.reg_u32[cpu][offset]; break; case EIOINTC_COREMAP_START ... EIOINTC_COREMAP_END: offset = (addr - EIOINTC_COREMAP_START) / 4; -- 2.39.3

1 month, 1 week

1
0
0 0

[PATCH v2 3/7] LoongArch: KVM: Disable update property num_cpu and feature with eiointc

by Bibo Mao

Property num_cpu and feature is read-only once eiointc is created, which is set with KVM_DEV_LOONGARCH_EXTIOI_GRP_CTRL attr group before device creation. Attr group KVM_DEV_LOONGARCH_EXTIOI_GRP_SW_STATUS is to update register and software state for migration and reset usage, property num_cpu and feature can not be update again if it is created already. Here discard write operation with property num_cpu and feature in attr group KVM_DEV_LOONGARCH_EXTIOI_GRP_CTRL. Cc: stable(a)vger.kernel.org Fixes: 1ad7efa552fd ("LoongArch: KVM: Add EIOINTC user mode read and write functions") Signed-off-by: Bibo Mao <maobibo(a)loongson.cn> --- arch/loongarch/kvm/intc/eiointc.c | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/arch/loongarch/kvm/intc/eiointc.c b/arch/loongarch/kvm/intc/eiointc.c index 0b648c56b0c3..b48511f903b5 100644 --- a/arch/loongarch/kvm/intc/eiointc.c +++ b/arch/loongarch/kvm/intc/eiointc.c @@ -910,9 +910,22 @@ static int kvm_eiointc_sw_status_access(struct kvm_device *dev, data = (void __user *)attr->addr; switch (addr) { case KVM_DEV_LOONGARCH_EXTIOI_SW_STATUS_NUM_CPU: + /* + * Property num_cpu and feature is read-only once eiointc is + * created with KVM_DEV_LOONGARCH_EXTIOI_GRP_CTRL group API + * + * Disable writing with KVM_DEV_LOONGARCH_EXTIOI_GRP_SW_STATUS + * group API + */ + if (is_write) + return ret; + p = &s->num_cpu; break; case KVM_DEV_LOONGARCH_EXTIOI_SW_STATUS_FEATURE: + if (is_write) + return ret; + p = &s->features; break; case KVM_DEV_LOONGARCH_EXTIOI_SW_STATUS_STATE: -- 2.39.3

1 month, 1 week

1
0
0 0

[PATCH v2 2/7] LoongArch: KVM: Check interrupt route from physical cpu with eiointc

by Bibo Mao

With eiointc interrupt controller, physical cpu id is set for irq route. However function kvm_get_vcpu() is used to get destination vCPU when delivering irq. With API kvm_get_vcpu(), logical cpu is used. With API kvm_get_vcpu_by_cpuid(), vCPU can be searched from physical cpu id. Cc: stable(a)vger.kernel.org Fixes: 3956a52bc05b ("LoongArch: KVM: Add EIOINTC read and write functions") Signed-off-by: Bibo Mao <maobibo(a)loongson.cn> --- arch/loongarch/kvm/intc/eiointc.c | 24 ++++++++++++++++++------ 1 file changed, 18 insertions(+), 6 deletions(-) diff --git a/arch/loongarch/kvm/intc/eiointc.c b/arch/loongarch/kvm/intc/eiointc.c index d2c521b0e923..0b648c56b0c3 100644 --- a/arch/loongarch/kvm/intc/eiointc.c +++ b/arch/loongarch/kvm/intc/eiointc.c @@ -9,7 +9,8 @@ static void eiointc_set_sw_coreisr(struct loongarch_eiointc *s) { - int ipnum, cpu, irq_index, irq_mask, irq; + int ipnum, cpu, irq_index, irq_mask, irq, cpuid; + struct kvm_vcpu *vcpu; for (irq = 0; irq < EIOINTC_IRQS; irq++) { ipnum = s->ipmap.reg_u8[irq / 32]; @@ -20,7 +21,12 @@ static void eiointc_set_sw_coreisr(struct loongarch_eiointc *s) irq_index = irq / 32; irq_mask = BIT(irq & 0x1f); - cpu = s->coremap.reg_u8[irq]; + cpuid = s->coremap.reg_u8[irq]; + vcpu = kvm_get_vcpu_by_cpuid(s->kvm, cpuid); + if (vcpu == NULL) + continue; + + cpu = vcpu->vcpu_id; if (!!(s->coreisr.reg_u32[cpu][irq_index] & irq_mask)) set_bit(irq, s->sw_coreisr[cpu][ipnum]); else @@ -68,17 +74,23 @@ static void eiointc_update_irq(struct loongarch_eiointc *s, int irq, int level) static inline void eiointc_update_sw_coremap(struct loongarch_eiointc *s, int irq, u64 val, u32 len, bool notify) { - int i, cpu; + int i, cpu, cpuid; + struct kvm_vcpu *vcpu; for (i = 0; i < len; i++) { - cpu = val & 0xff; + cpuid = val & 0xff; val = val >> 8; if (!(s->status & BIT(EIOINTC_ENABLE_CPU_ENCODE))) { - cpu = ffs(cpu) - 1; - cpu = (cpu >= 4) ? 0 : cpu; + cpuid = ffs(cpuid) - 1; + cpuid = (cpuid >= 4) ? 0 : cpuid; } + vcpu = kvm_get_vcpu_by_cpuid(s->kvm, cpuid); + if (vcpu == NULL) + continue; + + cpu = vcpu->vcpu_id; if (s->sw_coremap[irq + i] == cpu) continue; -- 2.39.3

1 month, 1 week

1
0
0 0

[PATCH v2 1/7] LoongArch: KVM: Fix interrupt route update with eiointc

by Bibo Mao

With function eiointc_update_sw_coremap(), there is forced assignment like val = *(u64 *)pvalue. Parameter pvalue may be pointer to char type or others, there is problem with forced assignment with u64 type. Here the detailed value is passed rather address pointer. Cc: stable(a)vger.kernel.org Fixes: 3956a52bc05b ("LoongArch: KVM: Add EIOINTC read and write functions") Signed-off-by: Bibo Mao <maobibo(a)loongson.cn> --- arch/loongarch/kvm/intc/eiointc.c | 13 ++++++------- 1 file changed, 6 insertions(+), 7 deletions(-) diff --git a/arch/loongarch/kvm/intc/eiointc.c b/arch/loongarch/kvm/intc/eiointc.c index f39929d7bf8a..d2c521b0e923 100644 --- a/arch/loongarch/kvm/intc/eiointc.c +++ b/arch/loongarch/kvm/intc/eiointc.c @@ -66,10 +66,9 @@ static void eiointc_update_irq(struct loongarch_eiointc *s, int irq, int level) } static inline void eiointc_update_sw_coremap(struct loongarch_eiointc *s, - int irq, void *pvalue, u32 len, bool notify) + int irq, u64 val, u32 len, bool notify) { int i, cpu; - u64 val = *(u64 *)pvalue; for (i = 0; i < len; i++) { cpu = val & 0xff; @@ -398,7 +397,7 @@ static int loongarch_eiointc_writeb(struct kvm_vcpu *vcpu, irq = offset - EIOINTC_COREMAP_START; index = irq; s->coremap.reg_u8[index] = data; - eiointc_update_sw_coremap(s, irq, (void *)&data, sizeof(data), true); + eiointc_update_sw_coremap(s, irq, data, sizeof(data), true); break; default: ret = -EINVAL; @@ -484,7 +483,7 @@ static int loongarch_eiointc_writew(struct kvm_vcpu *vcpu, irq = offset - EIOINTC_COREMAP_START; index = irq >> 1; s->coremap.reg_u16[index] = data; - eiointc_update_sw_coremap(s, irq, (void *)&data, sizeof(data), true); + eiointc_update_sw_coremap(s, irq, data, sizeof(data), true); break; default: ret = -EINVAL; @@ -570,7 +569,7 @@ static int loongarch_eiointc_writel(struct kvm_vcpu *vcpu, irq = offset - EIOINTC_COREMAP_START; index = irq >> 2; s->coremap.reg_u32[index] = data; - eiointc_update_sw_coremap(s, irq, (void *)&data, sizeof(data), true); + eiointc_update_sw_coremap(s, irq, data, sizeof(data), true); break; default: ret = -EINVAL; @@ -656,7 +655,7 @@ static int loongarch_eiointc_writeq(struct kvm_vcpu *vcpu, irq = offset - EIOINTC_COREMAP_START; index = irq >> 3; s->coremap.reg_u64[index] = data; - eiointc_update_sw_coremap(s, irq, (void *)&data, sizeof(data), true); + eiointc_update_sw_coremap(s, irq, data, sizeof(data), true); break; default: ret = -EINVAL; @@ -809,7 +808,7 @@ static int kvm_eiointc_ctrl_access(struct kvm_device *dev, for (i = 0; i < (EIOINTC_IRQS / 4); i++) { start_irq = i * 4; eiointc_update_sw_coremap(s, start_irq, - (void *)&s->coremap.reg_u32[i], sizeof(u32), false); + s->coremap.reg_u32[i], sizeof(u32), false); } break; default: -- 2.39.3

1 month, 1 week

1
0
0 0

UITP 2025 Attendee List

by Michelle Calara

Hi, I wanted to check if you’d be interested in acquiring the attendees list of UITP Summit - Hamburg 2025? Event Overview: Dates: 15 - 18 Jun 2025 Location: Hamburg, Germany Attendees: 10,126 Exhibitors: 380 Each contact contains: Contact Name, First Name, Last Name, Job Title, Company, Website Address, City, State, Zip, Country Code, Revenue, Employee Size, Email, Phone Number, and Fax Number. This dataset is an excellent asset for companies looking to expand their reach, build partnerships, and strengthen market presence. If you're interested in the list, just reply "Send Counts and Cost"? Best regards, Michelle Calara Senior Marketing Manager To unsubscribe, simply respond with “Not interested.”

1 month, 1 week

1
0
0 0

Qualcomm WIFI-6 <IPQ5018>

by Alan Ye

Hi The IPQ50xx chip integrates only a 2x2 2.4GHz Wi-Fi module. Through the high-performance NSS core and PCIe expansion and integration the application range of the IPQ50xx chip ranges from Wi-Fi mesh node to Enterprise AP. OEM manufacturers can think in a unified way when doing circuit design and PCB layout, and the same packaging can really save designers a lot of trouble. .# Part Number Manufacturer Date Code Quantity Unit Price Lead Time Condition (PCS) USD/Each one 1 IPQ-5018-0-MRQFN232-TR-01-0 QUALCOMM 2022+ 30000pcs US$3.50/pcs 7days New & original - stock 2 QCN-6102-0-DRQFN116-TR-01-1 QUALCOMM 2022+ 30000pcs US$2.50/pcs 3 QCN-9024-0-MSP234-TR-01-0 QUALCOMM 2022+ 5000pcs US$3.50/pcs 4 QCN-6112-0-DRQFN116-TR-01-0 QUALCOMM 2023+ 15000pcs US$2.70/pcs 5 QCA-8337-AL3C-R QUALCOMM 2023+ 20000pcs US$1.30/pcs The above are our company's current inventory, all of which are genuine and original packaging. If you need anything, please feel free to contact me, thank you Best Regards Maintain your product-savvy edge with . Stay Updated on News If you prefer to exit, choose Review Communication Options.

1 month, 1 week

1
0
0 0

[merged] fs-dax-fix-dont-skip-locked-entries-when-scanning-entries.patch removed from -mm tree

by Andrew Morton

The quilt patch titled Subject: fs/dax: fix "don't skip locked entries when scanning entries" has been removed from the -mm tree. Its filename was fs-dax-fix-dont-skip-locked-entries-when-scanning-entries.patch This patch was dropped because it was merged into mainline or a subsystem tree ------------------------------------------------------ From: Alistair Popple <apopple(a)nvidia.com> Subject: fs/dax: fix "don't skip locked entries when scanning entries" Date: Fri, 23 May 2025 14:37:49 +1000 Commit 6be3e21d25ca ("fs/dax: don't skip locked entries when scanning entries") introduced a new function, wait_entry_unlocked_exclusive(), which waits for the current entry to become unlocked without advancing the XArray iterator state. Waiting for the entry to become unlocked requires dropping the XArray lock. This requires calling xas_pause() prior to dropping the lock which leaves the xas in a suitable state for the next iteration. However this has the side-effect of advancing the xas state to the next index. Normally this isn't an issue because xas_for_each() contains code to detect this state and thus avoid advancing the index a second time on the next loop iteration. However both callers of and wait_entry_unlocked_exclusive() itself subsequently use the xas state to reload the entry. As xas_pause() updated the state to the next index this will cause the current entry which is being waited on to be skipped. This caused the following warning to fire intermittently when running xftest generic/068 on an XFS filesystem with FS DAX enabled: [ 35.067397] ------------[ cut here ]------------ [ 35.068229] WARNING: CPU: 21 PID: 1640 at mm/truncate.c:89 truncate_folio_batch_exceptionals+0xd8/0x1e0 [ 35.069717] Modules linked in: nd_pmem dax_pmem nd_btt nd_e820 libnvdimm [ 35.071006] CPU: 21 UID: 0 PID: 1640 Comm: fstest Not tainted 6.15.0-rc7+ #77 PREEMPT(voluntary) [ 35.072613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/204 [ 35.074845] RIP: 0010:truncate_folio_batch_exceptionals+0xd8/0x1e0 [ 35.075962] Code: a1 00 00 00 f6 47 0d 20 0f 84 97 00 00 00 4c 63 e8 41 39 c4 7f 0b eb 61 49 83 c5 01 45 39 ec 7e 58 42 f68 [ 35.079522] RSP: 0018:ffffb04e426c7850 EFLAGS: 00010202 [ 35.080359] RAX: 0000000000000000 RBX: ffff9d21e3481908 RCX: ffffb04e426c77f4 [ 35.081477] RDX: ffffb04e426c79e8 RSI: ffffb04e426c79e0 RDI: ffff9d21e34816e8 [ 35.082590] RBP: ffffb04e426c79e0 R08: 0000000000000001 R09: 0000000000000003 [ 35.083733] R10: 0000000000000000 R11: 822b53c0f7a49868 R12: 000000000000001f [ 35.084850] R13: 0000000000000000 R14: ffffb04e426c78e8 R15: fffffffffffffffe [ 35.085953] FS: 00007f9134c87740(0000) GS:ffff9d22abba0000(0000) knlGS:0000000000000000 [ 35.087346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.088244] CR2: 00007f9134c86000 CR3: 000000040afff000 CR4: 00000000000006f0 [ 35.089354] Call Trace: [ 35.089749] <TASK> [ 35.090168] truncate_inode_pages_range+0xfc/0x4d0 [ 35.091078] truncate_pagecache+0x47/0x60 [ 35.091735] xfs_setattr_size+0xc7/0x3e0 [ 35.092648] xfs_vn_setattr+0x1ea/0x270 [ 35.093437] notify_change+0x1f4/0x510 [ 35.094219] ? do_truncate+0x97/0xe0 [ 35.094879] do_truncate+0x97/0xe0 [ 35.095640] path_openat+0xabd/0xca0 [ 35.096278] do_filp_open+0xd7/0x190 [ 35.096860] do_sys_openat2+0x8a/0xe0 [ 35.097459] __x64_sys_openat+0x6d/0xa0 [ 35.098076] do_syscall_64+0xbb/0x1d0 [ 35.098647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.099444] RIP: 0033:0x7f9134d81fc1 [ 35.100033] Code: 75 57 89 f0 25 00 00 41 00 3d 00 00 41 00 74 49 80 3d 2a 26 0e 00 00 74 6d 89 da 48 89 ee bf 9c ff ff ff5 [ 35.102993] RSP: 002b:00007ffcd41e0d10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 35.104263] RAX: ffffffffffffffda RBX: 0000000000000242 RCX: 00007f9134d81fc1 [ 35.105452] RDX: 0000000000000242 RSI: 00007ffcd41e1200 RDI: 00000000ffffff9c [ 35.106663] RBP: 00007ffcd41e1200 R08: 0000000000000000 R09: 0000000000000064 [ 35.107923] R10: 00000000000001a4 R11: 0000000000000202 R12: 0000000000000066 [ 35.109112] R13: 0000000000100000 R14: 0000000000100000 R15: 0000000000000400 [ 35.110357] </TASK> [ 35.110769] irq event stamp: 8415587 [ 35.111486] hardirqs last enabled at (8415599): [<ffffffff8d74b562>] __up_console_sem+0x52/0x60 [ 35.113067] hardirqs last disabled at (8415610): [<ffffffff8d74b547>] __up_console_sem+0x37/0x60 [ 35.114575] softirqs last enabled at (8415300): [<ffffffff8d6ac625>] handle_softirqs+0x315/0x3f0 [ 35.115933] softirqs last disabled at (8415291): [<ffffffff8d6ac811>] __irq_exit_rcu+0xa1/0xc0 [ 35.117316] ---[ end trace 0000000000000000 ]--- Fix this by using xas_reset() instead, which is equivalent in implementation to xas_pause() but does not advance the XArray state. Link: https://lkml.kernel.org/r/20250523043749.1460780-1-apopple@nvidia.com Fixes: 6be3e21d25ca ("fs/dax: don't skip locked entries when scanning entries") Signed-off-by: Alistair Popple <apopple(a)nvidia.com> Reviewed-by: Jan Kara <jack(a)suse.cz> Reviewed-by: Dan Williams <dan.j.williams(a)intel.com> Cc: Alison Schofield <alison.schofield(a)intel.com> Cc: Matthew Wilcow (Oracle) <willy(a)infradead.org> Cc: Balbir Singh <balbirs(a)nvidia.com> Cc: "Darrick J. Wong" <djwong(a)kernel.org> Cc: Dave Chinner <david(a)fromorbit.com> Cc: David Hildenbrand <david(a)redhat.com> Cc: John Hubbard <jhubbard(a)nvidia.com> Cc: Ted Ts'o <tytso(a)mit.edu> Cc: Alexander Viro <viro(a)zeniv.linux.org.uk> Cc: Christian Brauner <brauner(a)kernel.org> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> --- fs/dax.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/fs/dax.c~fs-dax-fix-dont-skip-locked-entries-when-scanning-entries +++ a/fs/dax.c @@ -257,7 +257,7 @@ static void *wait_entry_unlocked_exclusi wq = dax_entry_waitqueue(xas, entry, &ewait.key); prepare_to_wait_exclusive(wq, &ewait.wait, TASK_UNINTERRUPTIBLE); - xas_pause(xas); + xas_reset(xas); xas_unlock_irq(xas); schedule(); finish_wait(wq, &ewait.wait); _ Patches currently in -mm which might be from apopple(a)nvidia.com are maintainers-add-myself-as-reviewer-of-mm-memory-policy.patch

1 month, 1 week

1
0
0 0

+ mm-madvise-handle-madvise_lock-failure-during-race-unwinding.patch added to mm-hotfixes-unstable branch

by Andrew Morton

The patch titled Subject: mm/madvise: handle madvise_lock() failure during race unwinding has been added to the -mm mm-hotfixes-unstable branch. Its filename is mm-madvise-handle-madvise_lock-failure-during-race-unwinding.patch This patch will shortly appear at https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patche… This patch will later appear in the mm-hotfixes-unstable branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm Before you just go and hit "reply", please: a) Consider who else should be cc'ed b) Prefer to cc a suitable mailing list as well c) Ideally: find the original patch on the mailing list and do a reply-to-all to that, adding suitable additional cc's *** Remember to use Documentation/process/submit-checklist.rst when testing your code *** The -mm tree is included into linux-next via the mm-everything branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm and is updated there every 2-3 working days ------------------------------------------------------ From: SeongJae Park <sj(a)kernel.org> Subject: mm/madvise: handle madvise_lock() failure during race unwinding Date: Mon, 2 Jun 2025 10:49:26 -0700 When unwinding race on -ERESTARTNOINTR handling of process_madvise(), madvise_lock() failure is ignored. Check the failure and abort remaining works in the case. Link: https://lkml.kernel.org/r/20250602174926.1074-1-sj@kernel.org Fixes: 4000e3d0a367 ("mm/madvise: remove redundant mmap_lock operations from process_madvise()") Signed-off-by: SeongJae Park <sj(a)kernel.org> Reported-by: Barry Song <21cnbao(a)gmail.com> Closes: https://lore.kernel.org/CAGsJ_4xJXXO0G+4BizhohSZ4yDteziPw43_uF8nPXPWxUVChzw… Reviewed-by: Jann Horn <jannh(a)google.com> Reviewed-by: Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com> Acked-by: David Hildenbrand <david(a)redhat.com> Reviewed-by: Shakeel Butt <shakeel.butt(a)linux.dev> Reviewed-by: Barry Song <baohua(a)kernel.org> Cc: Liam Howlett <liam.howlett(a)oracle.com> Cc: Vlastimil Babka <vbabka(a)suse.cz> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> --- mm/madvise.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) --- a/mm/madvise.c~mm-madvise-handle-madvise_lock-failure-during-race-unwinding +++ a/mm/madvise.c @@ -1881,7 +1881,9 @@ static ssize_t vector_madvise(struct mm_ /* Drop and reacquire lock to unwind race. */ madvise_finish_tlb(&madv_behavior); madvise_unlock(mm, behavior); - madvise_lock(mm, behavior); + ret = madvise_lock(mm, behavior); + if (ret) + goto out; madvise_init_tlb(&madv_behavior, mm); continue; } @@ -1892,6 +1894,7 @@ static ssize_t vector_madvise(struct mm_ madvise_finish_tlb(&madv_behavior); madvise_unlock(mm, behavior); +out: ret = (total_len - iov_iter_count(iter)) ? : ret; return ret; _ Patches currently in -mm which might be from sj(a)kernel.org are mm-madvise-handle-madvise_lock-failure-during-race-unwinding.patch mm-damon-kconfig-set-damon_vaddrpaddrsysfs-default-to-damon.patch mm-damon-kconfig-enable-config_damon-by-default.patch

1 month, 1 week

1
0
0 0

[PATCH 5.10] netfilter: nft_socket: fix sk refcount leaks

by Denis Arefev

From: Florian Westphal <fw(a)strlen.de> commit 8b26ff7af8c32cb4148b3e147c52f9e4c695209c upstream. We must put 'sk' reference before returning. Fixes: 039b1f4f24ec ("netfilter: nft_socket: fix erroneous socket assignment") Signed-off-by: Florian Westphal <fw(a)strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo(a)netfilter.org> [Denis: minor fix to resolve merge conflict.] Signed-off-by: Denis Arefev <arefev(a)swemel.ru> --- Backport fix for CVE-2024-46855 Link: https://nvd.nist.gov/vuln/detail/CVE-2024-46855 --- net/netfilter/nft_socket.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/net/netfilter/nft_socket.c b/net/netfilter/nft_socket.c index 826e5f8c78f3..07e73e50b713 100644 --- a/net/netfilter/nft_socket.c +++ b/net/netfilter/nft_socket.c @@ -88,13 +88,13 @@ static void nft_socket_eval(const struct nft_expr *expr, *dest = sk->sk_mark; } else { regs->verdict.code = NFT_BREAK; - return; + goto out_put_sk; } break; case NFT_SOCKET_WILDCARD: if (!sk_fullsock(sk)) { regs->verdict.code = NFT_BREAK; - return; + goto out_put_sk; } nft_socket_wildcard(pkt, regs, sk, dest); break; @@ -103,6 +103,7 @@ static void nft_socket_eval(const struct nft_expr *expr, regs->verdict.code = NFT_BREAK; } +out_put_sk: if (sk != skb->sk) sock_gen_put(sk); } -- 2.43.0

1 month, 1 week

3
2
0 0

[PATCH 1/6] cifs: deal with the channel loading lag while picking channels

by nspmangalore＠gmail.com

From: Shyam Prasad N <sprasad(a)microsoft.com> Our current approach to select a channel for sending requests is this: 1. iterate all channels to find the min and max queue depth 2. if min and max are not the same, pick the channel with min depth 3. if min and max are same, round robin, as all channels are equally loaded The problem with this approach is that there's a lag between selecting a channel and sending the request (that increases the queue depth on the channel). While these numbers will eventually catch up, there could be a skew in the channel usage, depending on the application's I/O parallelism and the server's speed of handling requests. With sufficient parallelism, this lag can artificially increase the queue depth, thereby impacting the performance negatively. This change will change the step 1 above to start the iteration from the last selected channel. This is to reduce the skew in channel usage even in the presence of this lag. Fixes: ea90708d3cf3 ("cifs: use the least loaded channel for sending requests") Cc: <stable(a)vger.kernel.org> Signed-off-by: Shyam Prasad N <sprasad(a)microsoft.com> --- fs/smb/client/transport.c | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/fs/smb/client/transport.c b/fs/smb/client/transport.c index 266af17aa7d9..191783f553ce 100644 --- a/fs/smb/client/transport.c +++ b/fs/smb/client/transport.c @@ -1018,14 +1018,16 @@ struct TCP_Server_Info *cifs_pick_channel(struct cifs_ses *ses) uint index = 0; unsigned int min_in_flight = UINT_MAX, max_in_flight = 0; struct TCP_Server_Info *server = NULL; - int i; + int i, start, cur; if (!ses) return NULL; spin_lock(&ses->chan_lock); + start = atomic_inc_return(&ses->chan_seq); for (i = 0; i < ses->chan_count; i++) { - server = ses->chans[i].server; + cur = (start + i) % ses->chan_count; + server = ses->chans[cur].server; if (!server || server->terminate) continue; @@ -1042,17 +1044,15 @@ struct TCP_Server_Info *cifs_pick_channel(struct cifs_ses *ses) */ if (server->in_flight < min_in_flight) { min_in_flight = server->in_flight; - index = i; + index = cur; } if (server->in_flight > max_in_flight) max_in_flight = server->in_flight; } /* if all channels are equally loaded, fall back to round-robin */ - if (min_in_flight == max_in_flight) { - index = (uint)atomic_inc_return(&ses->chan_seq); - index %= ses->chan_count; - } + if (min_in_flight == max_in_flight) + index = (uint)start % ses->chan_count; server = ses->chans[index].server; spin_unlock(&ses->chan_lock); -- 2.43.0

1 month, 1 week

2
3
0 0

[PATCH] arm64: Add MIDR-based check for FEAT_ECBHB

by Oliver Upton

Prior to commit e8cde32f111f ("arm64/cpufeatures/kvm: Add ARMv8.9 FEAT_ECBHB bits in ID_AA64MMFR1 register") KVM was erroneously masking FEAT_ECBHB from VMs, giving the perception that safe implementations are actually vulnerable to Spectre-BHB. And, after commit e403e8538359 ("arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB") guests are enabling the loop mitigation. This broken virtual hardware is going to be around for some time, so do the ugly thing and check for revisions of Neoverse-V2 [1], Cortex-X3 [2], Cortex-A720 [3], and Neoverse-N3 [4] that are documented to have FEAT_ECBHB. Cc: stable(a)vger.kernel.org Link: https://developer.arm.com/documentation/102375/0002 Link: https://developer.arm.com/documentation/101593/0102 Link: https://developer.arm.com/documentation/102530/0002 Link: https://developer.arm.com/documentation/107997/0001 Signed-off-by: Oliver Upton <oliver.upton(a)linux.dev> --- I thoroughly hate this but the alternative of nuking these busted VMs isn't exactly popular... arch/arm64/include/asm/cputype.h | 1 + arch/arm64/kernel/proton-pack.c | 16 ++++++++++++++++ 2 files changed, 17 insertions(+) diff --git a/arch/arm64/include/asm/cputype.h b/arch/arm64/include/asm/cputype.h index d1cc0571798b..5c6152e61cad 100644 --- a/arch/arm64/include/asm/cputype.h +++ b/arch/arm64/include/asm/cputype.h @@ -282,6 +282,7 @@ struct midr_range { #define MIDR_REV_RANGE(m, v, r_min, r_max) MIDR_RANGE(m, v, r_min, v, r_max) #define MIDR_REV(m, v, r) MIDR_RANGE(m, v, r, v, r) #define MIDR_ALL_VERSIONS(m) MIDR_RANGE(m, 0, 0, 0xf, 0xf) +#define MIDR_MIN_VERSION(m, v, r) MIDR_RANGE(m, v, r, 0xf, 0xf) static inline bool midr_is_cpu_model_range(u32 midr, u32 model, u32 rv_min, u32 rv_max) diff --git a/arch/arm64/kernel/proton-pack.c b/arch/arm64/kernel/proton-pack.c index b198dde79e59..3d00d4c22d58 100644 --- a/arch/arm64/kernel/proton-pack.c +++ b/arch/arm64/kernel/proton-pack.c @@ -962,8 +962,24 @@ static bool has_spectre_bhb_fw_mitigation(void) static bool supports_ecbhb(int scope) { + static const struct midr_range spectre_ecbhb_list[] = { + MIDR_MIN_VERSION(MIDR_NEOVERSE_V2, 0, 2), + MIDR_MIN_VERSION(MIDR_CORTEX_X3, 1, 1), + MIDR_ALL_VERSIONS(MIDR_NEOVERSE_N3), + MIDR_MIN_VERSION(MIDR_CORTEX_A720, 0, 1), + {}, + }; u64 mmfr1; + /* + * Prior to commit e8cde32f111f ("arm64/cpufeatures/kvm: Add ARMv8.9 + * FEAT_ECBHB bits in ID_AA64MMFR1 register"), KVM masked FEAT_ECBHB + * on implementations that actually have the feature. That sucks; infer + * presence of FEAT_ECBHB based on MIDR. + */ + if (is_midr_in_range_list(spectre_ecbhb_list)) + return true; + if (scope == SCOPE_LOCAL_CPU) mmfr1 = read_sysreg_s(SYS_ID_AA64MMFR1_EL1); else base-commit: b4432656b36e5cc1d50a1f2dc15357543add530e -- 2.39.5

1 month, 1 week

2
2
0 0

[PATCH v3 0/3] pwm: axi-pwmgen: add external clock

by David Lechner

When we created the driver for the AXI PWMGEN IP block, we overlooked the fact that it can optionally be configured to use an external clock in addition to the AXI bus clock. This is easy to miss in testing because the bus clock is always on because it is driving other peripherals as well. Up to now, users were specifying the external clock if there was one and the AXI bus clock otherwise. But the proper way to do this is to would be to always specify the bus clock and only specify the external clock if the IP block has been configured to use it. To fix this, we add clock-names to the devicetree bindings and change clocks to allow 1 or 2 clocks. --- Changes in v3: - Fixed clock-names DT property restrictions (was failing dt_binding_check) - Added Cc: stable - Picked up trailers - Link to v2: https://lore.kernel.org/r/20250522-pwm-axi-pwmgen-add-external-clock-v2-0-0… Changes in v2: - Consider this a fix rather than a new feature. - Make clock-names required. - Simplify the logic in the pwm driver to avoid needing to test if clock-names is present in old dtbs that used the broken binding. - Link to v1: https://lore.kernel.org/r/20250520-pwm-axi-pwmgen-add-external-clock-v1-0-6… --- David Lechner (3): dt-bindings: pwm: adi,axi-pwmgen: update documentation link dt-bindings: pwm: adi,axi-pwmgen: fix clocks pwm: axi-pwmgen: fix missing separate external clock .../devicetree/bindings/pwm/adi,axi-pwmgen.yaml | 15 +++++++++++--- drivers/pwm/pwm-axi-pwmgen.c | 23 +++++++++++++++++++--- 2 files changed, 32 insertions(+), 6 deletions(-) --- base-commit: 484803582c77061b470ac64a634f25f89715be3f change-id: 20250515-pwm-axi-pwmgen-add-external-clock-0364fbdf809b Best regards, -- David Lechner <dlechner(a)baylibre.com>

1 month, 1 week

3
4
0 0

[PATCH 5.4.y 0/1] Manual Backport of 099606a7b2d5 to 5.4

by Harshvardhan Jha

The patch 099606a7b2d5 didn't cleanly apply to 5.4 due to the significant difference in codebases. I've tried to manually bring it back to 5.4 via some minor conflict resolution but also invoking the newly introduced API using inverted logic as the conditionals present in 5.4 are the opposite of those in 6.1 xen/swiotlib. Harshvardhan Jha (1): xen/swiotlb: relax alignment requirements drivers/xen/swiotlb-xen.c | 18 +++++++++++------- 1 file changed, 11 insertions(+), 7 deletions(-) -- 2.47.1

1 month, 1 week

2
2
0 0

[PATCH 5.10.y 0/1] Manual Backport of 099606a7b2d5 to 5.10

by Harshvardhan Jha

The patch 099606a7b2d5 didn't cleanly apply to 5.10 due to the significant difference in codebases. I've tried to manually bring it back to 5.10 via some minor conflict resolution but also invoking the newly introduced API using inverted logic as the conditionals present in 5.10 are the opposite of those in 6.1 xen/swiotlib. Harshvardhan Jha (1): xen/swiotlb: relax alignment requirements drivers/xen/swiotlb-xen.c | 18 +++++++++++------- 1 file changed, 11 insertions(+), 7 deletions(-) -- 2.47.1

1 month, 1 week

2
2
0 0

[PATCH 5.10/5.15] perf/arm-cmn: Initialise cmn->cpu earlier

by Robin Murphy

commit 597704e201068db3d104de3c7a4d447ff8209127 upstream. For all the complexity of handling affinity for CPU hotplug, what we've apparently managed to overlook is that arm_cmn_init_irqs() has in fact always been setting the *initial* affinity of all IRQs to CPU 0, not the CPU we subsequently choose for event scheduling. Oh dear. Cc: stable(a)vger.kernel.org Fixes: 0ba64770a2f2 ("perf: Add Arm CMN-600 PMU driver") Signed-off-by: Robin Murphy <robin.murphy(a)arm.com> Reviewed-by: Ilkka Koskinen <ilkka(a)os.amperecomputing.com> Link: https://lore.kernel.org/r/b12fccba6b5b4d2674944f59e4daad91cd63420b.17470699… Signed-off-by: Will Deacon <will(a)kernel.org> [ backport past NUMA changes in 5.17 ] Signed-off-by: Robin Murphy <robin.murphy(a)arm.com> --- drivers/perf/arm-cmn.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/perf/arm-cmn.c b/drivers/perf/arm-cmn.c index e2a055ba0b7a..cabeff8c944b 100644 --- a/drivers/perf/arm-cmn.c +++ b/drivers/perf/arm-cmn.c @@ -1512,6 +1512,7 @@ static int arm_cmn_probe(struct platform_device *pdev) return -ENOMEM; cmn->dev = &pdev->dev; + cmn->cpu = raw_smp_processor_id(); platform_set_drvdata(pdev, cmn); if (has_acpi_companion(cmn->dev)) @@ -1533,7 +1534,6 @@ static int arm_cmn_probe(struct platform_device *pdev) if (err) return err; - cmn->cpu = raw_smp_processor_id(); cmn->pmu = (struct pmu) { .module = THIS_MODULE, .attr_groups = arm_cmn_attr_groups, -- 2.39.2.101.g768bb238c484.dirty

1 month, 1 week

2
1
0 0

[PATCH 5.10] ibmvnic: Add tx check to prevent skb leak

by Denis Arefev

From: Nick Child <nnac123(a)linux.ibm.com> commit 0983d288caf984de0202c66641577b739caad561 upstream. Below is a summary of how the driver stores a reference to an skb during transmit: tx_buff[free_map[consumer_index]]->skb = new_skb; free_map[consumer_index] = IBMVNIC_INVALID_MAP; consumer_index ++; Where variable data looks like this: free_map == [4, IBMVNIC_INVALID_MAP, IBMVNIC_INVALID_MAP, 0, 3] consumer_index^ tx_buff == [skb=null, skb=<ptr>, skb=<ptr>, skb=null, skb=null] The driver has checks to ensure that free_map[consumer_index] pointed to a valid index but there was no check to ensure that this index pointed to an unused/null skb address. So, if, by some chance, our free_map and tx_buff lists become out of sync then we were previously risking an skb memory leak. This could then cause tcp congestion control to stop sending packets, eventually leading to ETIMEDOUT. Therefore, add a conditional to ensure that the skb address is null. If not then warn the user (because this is still a bug that should be patched) and free the old pointer to prevent memleak/tcp problems. Signed-off-by: Nick Child <nnac123(a)linux.ibm.com> Signed-off-by: Paolo Abeni <pabeni(a)redhat.com> [Denis: minor fix to resolve merge conflict.] Signed-off-by: Denis Arefev <arefev(a)swemel.ru> --- Backport fix for CVE-2024-41066 Link: https://nvd.nist.gov/vuln/detail/CVE-2024-41066 --- drivers/net/ethernet/ibm/ibmvnic.c | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/drivers/net/ethernet/ibm/ibmvnic.c b/drivers/net/ethernet/ibm/ibmvnic.c index 84da6ccaf339..e63220ebb2ea 100644 --- a/drivers/net/ethernet/ibm/ibmvnic.c +++ b/drivers/net/ethernet/ibm/ibmvnic.c @@ -1625,6 +1625,18 @@ static netdev_tx_t ibmvnic_xmit(struct sk_buff *skb, struct net_device *netdev) (tx_pool->consumer_index + 1) % tx_pool->num_buffers; tx_buff = &tx_pool->tx_buff[index]; + + /* Sanity checks on our free map to make sure it points to an index + * that is not being occupied by another skb. If skb memory is + * not freed then we see congestion control kick in and halt tx. + */ + if (unlikely(tx_buff->skb)) { + dev_warn_ratelimited(dev, "TX free map points to untracked skb (%s %d idx=%d)\n", + skb_is_gso(skb) ? "tso_pool" : "tx_pool", + queue_num, index); + dev_kfree_skb_any(tx_buff->skb); + } + tx_buff->skb = skb; tx_buff->data_dma[0] = data_dma_addr; tx_buff->data_len[0] = skb->len; -- 2.43.0

1 month, 1 week

1
0
0 0

[PATCH] iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush

by Sean Nyekjaer

fxls8962af_fifo_flush() uses indio_dev->active_scan_mask (with iio_for_each_active_channel()) without making sure the indio_dev stays in buffer mode. There is a race if indio_dev exits buffer mode in the middle of the interrupt that flushes the fifo. Fix this by calling iio_device_claim_buffer_mode() to ensure indio_dev can't exit buffer mode during the flush. Unable to handle kernel NULL pointer dereference at virtual address 00000000 when read [...] _find_first_bit_le from fxls8962af_fifo_flush+0x17c/0x290 fxls8962af_fifo_flush from fxls8962af_interrupt+0x80/0x178 fxls8962af_interrupt from irq_thread_fn+0x1c/0x7c irq_thread_fn from irq_thread+0x110/0x1f4 irq_thread from kthread+0xe0/0xfc kthread from ret_from_fork+0x14/0x2c Fixes: 79e3a5bdd9ef ("iio: accel: fxls8962af: add hw buffered sampling") Cc: stable(a)vger.kernel.org Signed-off-by: Sean Nyekjaer <sean(a)geanix.com> --- drivers/iio/accel/fxls8962af-core.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/drivers/iio/accel/fxls8962af-core.c b/drivers/iio/accel/fxls8962af-core.c index 6d23da3e7aa22c61f2d9348bb91d70cc5719a732..7db83ebeea823173d79bf8ff484add16f575edfc 100644 --- a/drivers/iio/accel/fxls8962af-core.c +++ b/drivers/iio/accel/fxls8962af-core.c @@ -973,6 +973,9 @@ static int fxls8962af_fifo_flush(struct iio_dev *indio_dev) if (ret) return ret; + if (iio_device_claim_buffer_mode(indio_dev) < 0) + return 0; + /* Demux hw FIFO into kfifo. */ for (i = 0; i < count; i++) { int j, bit; @@ -989,6 +992,8 @@ static int fxls8962af_fifo_flush(struct iio_dev *indio_dev) tstamp += sample_period; } + iio_device_release_buffer_mode(indio_dev); + return count; } --- base-commit: 5c3fcb36c92443a9a037683626a2e43d8825f783 change-id: 20250524-fxlsrace-f4d20e29fb29 Best regards, -- Sean Nyekjaer <sean(a)geanix.com>

1 month, 1 week

4
9
0 0

[PATCH 5.10] xfs: add bounds checking to xlog_recover_process_data

by Denis Arefev

From: lei lu <llfamsec(a)gmail.com> commit fb63435b7c7dc112b1ae1baea5486e0a6e27b196 upstream. There is a lack of verification of the space occupied by fixed members of xlog_op_header in the xlog_recover_process_data. We can create a crafted image to trigger an out of bounds read by following these steps: 1) Mount an image of xfs, and do some file operations to leave records 2) Before umounting, copy the image for subsequent steps to simulate abnormal exit. Because umount will ensure that tail_blk and head_blk are the same, which will result in the inability to enter xlog_recover_process_data 3) Write a tool to parse and modify the copied image in step 2 4) Make the end of the xlog_op_header entries only 1 byte away from xlog_rec_header->h_size 5) xlog_rec_header->h_num_logops++ 6) Modify xlog_rec_header->h_crc Fix: Add a check to make sure there is sufficient space to access fixed members of xlog_op_header. Signed-off-by: lei lu <llfamsec(a)gmail.com> Reviewed-by: Dave Chinner <dchinner(a)redhat.com> Reviewed-by: Darrick J. Wong <djwong(a)kernel.org> Signed-off-by: Chandan Babu R <chandanbabu(a)kernel.org> Signed-off-by: Denis Arefev <arefev(a)swemel.ru> --- Backport fix for CVE-2024-41014 Link: https://nvd.nist.gov/vuln/detail/cve-2024-41014 --- fs/xfs/xfs_log_recover.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/fs/xfs/xfs_log_recover.c b/fs/xfs/xfs_log_recover.c index e61f28ce3e44..eafe76f304ef 100644 --- a/fs/xfs/xfs_log_recover.c +++ b/fs/xfs/xfs_log_recover.c @@ -2419,7 +2419,10 @@ xlog_recover_process_data( ohead = (struct xlog_op_header *)dp; dp += sizeof(*ohead); - ASSERT(dp <= end); + if (dp > end) { + xfs_warn(log->l_mp, "%s: op header overrun", __func__); + return -EFSCORRUPTED; + } /* errors will abort recovery */ error = xlog_recover_process_ophdr(log, rhash, rhead, ohead, -- 2.43.0

1 month, 1 week

1
0
0 0

Please pick 0c8e9c148e29 and da33e87bd2bf for linux-6.15.y

by Robin Murphy

Hi Greg, Sasha, Please could you pick these commits for linux-6.15.y: 0c8e9c148e29 ("iommu: Avoid introducing more races") da33e87bd2bf ("iommu: Handle yet another race around registration") which in hindsight should ideally have been merged as fixes during the cycle, but for various reasons were queued as 6.16 material at the time. Thanks, Robin.

1 month, 1 week

2
1
0 0

Re: [PATCH v5] virtio_blk: Fix disk deletion hang on device surprise removal

by ALOK TIWARI

On 02-06-2025 08:14, Parav Pandit wrote: > When the PCI device is surprise removed, requests may not complete > the device as the VQ is marked as broken. Due to this, the disk > deletion hangs. > > Fix it by aborting the requests when the VQ is broken. > > With this fix now fio completes swiftly. > An alternative of IO timeout has been considered, however > when the driver knows about unresponsive block device, swiftly clearing > them enables users and upper layers to react quickly. > > Verified with multiple device unplug iterations with pending requests in > virtio used ring and some pending with the device. > > Fixes: 43bb40c5b926 ("virtio_pci: Support surprise removal of virtio pci device") > Cc:stable@vger.kernel.org > Reported-by: Li RongQing<lirongqing(a)baidu.com> > Closes:https://urldefense.com/v3/__https://lore.kernel.org/virtualization/ > c45dd68698cd47238c55fb73ca9b4741(a)baidu.com/__;!!ACWV5N9M2RV99hQ! > OKusQ3sGH7nkVTy9MUDtaIS17UDtjabP3Lby9jTBdT3Ur38XLl2_DOFo0eVzx_dNeh16lD3Ss6ItE9eG$ > Reviewed-by: Max Gurtovoy<mgurtovoy(a)nvidia.com> > Reviewed-by: Israel Rukshin<israelr(a)nvidia.com> > Signed-off-by: Parav Pandit<parav(a)nvidia.com> look good to me. Reviewed-by: Alok Tiwari <alok.a.tiwari(a)oracle.com> Thanks, Alok

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] perf/arm-cmn: Initialise cmn->cpu earlier" failed to apply to 5.10-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 5.10-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.10.y git checkout FETCH_HEAD git cherry-pick -x 597704e201068db3d104de3c7a4d447ff8209127 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060228-pureness-wildcat-f43e@gregkh' --subject-prefix 'PATCH 5.10.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 597704e201068db3d104de3c7a4d447ff8209127 Mon Sep 17 00:00:00 2001 From: Robin Murphy <robin.murphy(a)arm.com> Date: Mon, 12 May 2025 18:11:54 +0100 Subject: [PATCH] perf/arm-cmn: Initialise cmn->cpu earlier For all the complexity of handling affinity for CPU hotplug, what we've apparently managed to overlook is that arm_cmn_init_irqs() has in fact always been setting the *initial* affinity of all IRQs to CPU 0, not the CPU we subsequently choose for event scheduling. Oh dear. Cc: stable(a)vger.kernel.org Fixes: 0ba64770a2f2 ("perf: Add Arm CMN-600 PMU driver") Signed-off-by: Robin Murphy <robin.murphy(a)arm.com> Reviewed-by: Ilkka Koskinen <ilkka(a)os.amperecomputing.com> Link: https://lore.kernel.org/r/b12fccba6b5b4d2674944f59e4daad91cd63420b.17470699… Signed-off-by: Will Deacon <will(a)kernel.org> diff --git a/drivers/perf/arm-cmn.c b/drivers/perf/arm-cmn.c index 83f4ef985255..668c581e932a 100644 --- a/drivers/perf/arm-cmn.c +++ b/drivers/perf/arm-cmn.c @@ -2551,6 +2551,7 @@ static int arm_cmn_probe(struct platform_device *pdev) cmn->dev = &pdev->dev; cmn->part = (unsigned long)device_get_match_data(cmn->dev); + cmn->cpu = cpumask_local_spread(0, dev_to_node(cmn->dev)); platform_set_drvdata(pdev, cmn); if (cmn->part == PART_CMN600 && has_acpi_companion(cmn->dev)) { @@ -2578,7 +2579,6 @@ static int arm_cmn_probe(struct platform_device *pdev) if (err) return err; - cmn->cpu = cpumask_local_spread(0, dev_to_node(cmn->dev)); cmn->pmu = (struct pmu) { .module = THIS_MODULE, .parent = cmn->dev,

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] perf/arm-cmn: Initialise cmn->cpu earlier" failed to apply to 5.15-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 5.15-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.15.y git checkout FETCH_HEAD git cherry-pick -x 597704e201068db3d104de3c7a4d447ff8209127 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060228-output-connected-12d9@gregkh' --subject-prefix 'PATCH 5.15.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 597704e201068db3d104de3c7a4d447ff8209127 Mon Sep 17 00:00:00 2001 From: Robin Murphy <robin.murphy(a)arm.com> Date: Mon, 12 May 2025 18:11:54 +0100 Subject: [PATCH] perf/arm-cmn: Initialise cmn->cpu earlier For all the complexity of handling affinity for CPU hotplug, what we've apparently managed to overlook is that arm_cmn_init_irqs() has in fact always been setting the *initial* affinity of all IRQs to CPU 0, not the CPU we subsequently choose for event scheduling. Oh dear. Cc: stable(a)vger.kernel.org Fixes: 0ba64770a2f2 ("perf: Add Arm CMN-600 PMU driver") Signed-off-by: Robin Murphy <robin.murphy(a)arm.com> Reviewed-by: Ilkka Koskinen <ilkka(a)os.amperecomputing.com> Link: https://lore.kernel.org/r/b12fccba6b5b4d2674944f59e4daad91cd63420b.17470699… Signed-off-by: Will Deacon <will(a)kernel.org> diff --git a/drivers/perf/arm-cmn.c b/drivers/perf/arm-cmn.c index 83f4ef985255..668c581e932a 100644 --- a/drivers/perf/arm-cmn.c +++ b/drivers/perf/arm-cmn.c @@ -2551,6 +2551,7 @@ static int arm_cmn_probe(struct platform_device *pdev) cmn->dev = &pdev->dev; cmn->part = (unsigned long)device_get_match_data(cmn->dev); + cmn->cpu = cpumask_local_spread(0, dev_to_node(cmn->dev)); platform_set_drvdata(pdev, cmn); if (cmn->part == PART_CMN600 && has_acpi_companion(cmn->dev)) { @@ -2578,7 +2579,6 @@ static int arm_cmn_probe(struct platform_device *pdev) if (err) return err; - cmn->cpu = cpumask_local_spread(0, dev_to_node(cmn->dev)); cmn->pmu = (struct pmu) { .module = THIS_MODULE, .parent = cmn->dev,

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] arm64: dts: qcom: x1e80100-crd: mark l12b and l15b always-on" failed to apply to 6.12-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.12-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.12.y git checkout FETCH_HEAD git cherry-pick -x abf89bc4bb09c16a53d693b09ea85225cf57ff39 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060202-important-scribing-f981@gregkh' --subject-prefix 'PATCH 6.12.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From abf89bc4bb09c16a53d693b09ea85225cf57ff39 Mon Sep 17 00:00:00 2001 From: Johan Hovold <johan+linaro(a)kernel.org> Date: Fri, 14 Mar 2025 15:54:33 +0100 Subject: [PATCH] arm64: dts: qcom: x1e80100-crd: mark l12b and l15b always-on The l12b and l15b supplies are used by components that are not (fully) described (and some never will be) and must never be disabled. Mark the regulators as always-on to prevent them from being disabled, for example, when consumers probe defer or suspend. Fixes: bd50b1f5b6f3 ("arm64: dts: qcom: x1e80100: Add Compute Reference Device") Cc: stable(a)vger.kernel.org # 6.8 Cc: Abel Vesa <abel.vesa(a)linaro.org> Cc: Rajendra Nayak <quic_rjendra(a)quicinc.com> Cc: Sibi Sankar <quic_sibis(a)quicinc.com> Reviewed-by: Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> Signed-off-by: Johan Hovold <johan+linaro(a)kernel.org> Link: https://lore.kernel.org/r/20250314145440.11371-2-johan+linaro@kernel.org Signed-off-by: Bjorn Andersson <andersson(a)kernel.org> diff --git a/arch/arm64/boot/dts/qcom/x1-crd.dtsi b/arch/arm64/boot/dts/qcom/x1-crd.dtsi index 5ea7b30983d9..f73f053a46a0 100644 --- a/arch/arm64/boot/dts/qcom/x1-crd.dtsi +++ b/arch/arm64/boot/dts/qcom/x1-crd.dtsi @@ -606,6 +606,7 @@ vreg_l12b_1p2: ldo12 { regulator-min-microvolt = <1200000>; regulator-max-microvolt = <1200000>; regulator-initial-mode = <RPMH_REGULATOR_MODE_HPM>; + regulator-always-on; }; vreg_l13b_3p0: ldo13 { @@ -627,6 +628,7 @@ vreg_l15b_1p8: ldo15 { regulator-min-microvolt = <1800000>; regulator-max-microvolt = <1800000>; regulator-initial-mode = <RPMH_REGULATOR_MODE_HPM>; + regulator-always-on; }; vreg_l16b_2p9: ldo16 {

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] arm64: dts: qcom: x1e80100-crd: mark l12b and l15b always-on" failed to apply to 6.14-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.14-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.14.y git checkout FETCH_HEAD git cherry-pick -x abf89bc4bb09c16a53d693b09ea85225cf57ff39 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060202-overtake-bankbook-283a@gregkh' --subject-prefix 'PATCH 6.14.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From abf89bc4bb09c16a53d693b09ea85225cf57ff39 Mon Sep 17 00:00:00 2001 From: Johan Hovold <johan+linaro(a)kernel.org> Date: Fri, 14 Mar 2025 15:54:33 +0100 Subject: [PATCH] arm64: dts: qcom: x1e80100-crd: mark l12b and l15b always-on The l12b and l15b supplies are used by components that are not (fully) described (and some never will be) and must never be disabled. Mark the regulators as always-on to prevent them from being disabled, for example, when consumers probe defer or suspend. Fixes: bd50b1f5b6f3 ("arm64: dts: qcom: x1e80100: Add Compute Reference Device") Cc: stable(a)vger.kernel.org # 6.8 Cc: Abel Vesa <abel.vesa(a)linaro.org> Cc: Rajendra Nayak <quic_rjendra(a)quicinc.com> Cc: Sibi Sankar <quic_sibis(a)quicinc.com> Reviewed-by: Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> Signed-off-by: Johan Hovold <johan+linaro(a)kernel.org> Link: https://lore.kernel.org/r/20250314145440.11371-2-johan+linaro@kernel.org Signed-off-by: Bjorn Andersson <andersson(a)kernel.org> diff --git a/arch/arm64/boot/dts/qcom/x1-crd.dtsi b/arch/arm64/boot/dts/qcom/x1-crd.dtsi index 5ea7b30983d9..f73f053a46a0 100644 --- a/arch/arm64/boot/dts/qcom/x1-crd.dtsi +++ b/arch/arm64/boot/dts/qcom/x1-crd.dtsi @@ -606,6 +606,7 @@ vreg_l12b_1p2: ldo12 { regulator-min-microvolt = <1200000>; regulator-max-microvolt = <1200000>; regulator-initial-mode = <RPMH_REGULATOR_MODE_HPM>; + regulator-always-on; }; vreg_l13b_3p0: ldo13 { @@ -627,6 +628,7 @@ vreg_l15b_1p8: ldo15 { regulator-min-microvolt = <1800000>; regulator-max-microvolt = <1800000>; regulator-initial-mode = <RPMH_REGULATOR_MODE_HPM>; + regulator-always-on; }; vreg_l16b_2p9: ldo16 {

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] arm64: dts: qcom: x1e80100-crd: mark l12b and l15b always-on" failed to apply to 6.15-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.15-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.15.y git checkout FETCH_HEAD git cherry-pick -x abf89bc4bb09c16a53d693b09ea85225cf57ff39 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060201-licorice-bullfight-72d3@gregkh' --subject-prefix 'PATCH 6.15.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From abf89bc4bb09c16a53d693b09ea85225cf57ff39 Mon Sep 17 00:00:00 2001 From: Johan Hovold <johan+linaro(a)kernel.org> Date: Fri, 14 Mar 2025 15:54:33 +0100 Subject: [PATCH] arm64: dts: qcom: x1e80100-crd: mark l12b and l15b always-on The l12b and l15b supplies are used by components that are not (fully) described (and some never will be) and must never be disabled. Mark the regulators as always-on to prevent them from being disabled, for example, when consumers probe defer or suspend. Fixes: bd50b1f5b6f3 ("arm64: dts: qcom: x1e80100: Add Compute Reference Device") Cc: stable(a)vger.kernel.org # 6.8 Cc: Abel Vesa <abel.vesa(a)linaro.org> Cc: Rajendra Nayak <quic_rjendra(a)quicinc.com> Cc: Sibi Sankar <quic_sibis(a)quicinc.com> Reviewed-by: Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> Signed-off-by: Johan Hovold <johan+linaro(a)kernel.org> Link: https://lore.kernel.org/r/20250314145440.11371-2-johan+linaro@kernel.org Signed-off-by: Bjorn Andersson <andersson(a)kernel.org> diff --git a/arch/arm64/boot/dts/qcom/x1-crd.dtsi b/arch/arm64/boot/dts/qcom/x1-crd.dtsi index 5ea7b30983d9..f73f053a46a0 100644 --- a/arch/arm64/boot/dts/qcom/x1-crd.dtsi +++ b/arch/arm64/boot/dts/qcom/x1-crd.dtsi @@ -606,6 +606,7 @@ vreg_l12b_1p2: ldo12 { regulator-min-microvolt = <1200000>; regulator-max-microvolt = <1200000>; regulator-initial-mode = <RPMH_REGULATOR_MODE_HPM>; + regulator-always-on; }; vreg_l13b_3p0: ldo13 { @@ -627,6 +628,7 @@ vreg_l15b_1p8: ldo15 { regulator-min-microvolt = <1800000>; regulator-max-microvolt = <1800000>; regulator-initial-mode = <RPMH_REGULATOR_MODE_HPM>; + regulator-always-on; }; vreg_l16b_2p9: ldo16 {

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] arm64: dts: qcom: x1e78100-t14s: mark l12b and l15b always-on" failed to apply to 6.12-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.12-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.12.y git checkout FETCH_HEAD git cherry-pick -x 673fa129e558c5f1196adb27d97ac90ddfe4f19c # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060255-dislike-elaborate-1e0f@gregkh' --subject-prefix 'PATCH 6.12.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 673fa129e558c5f1196adb27d97ac90ddfe4f19c Mon Sep 17 00:00:00 2001 From: Johan Hovold <johan+linaro(a)kernel.org> Date: Fri, 14 Mar 2025 15:54:34 +0100 Subject: [PATCH] arm64: dts: qcom: x1e78100-t14s: mark l12b and l15b always-on The l12b and l15b supplies are used by components that are not (fully) described (and some never will be) and must never be disabled. Mark the regulators as always-on to prevent them from being disabled, for example, when consumers probe defer or suspend. Fixes: 7d1cbe2f4985 ("arm64: dts: qcom: Add X1E78100 ThinkPad T14s Gen 6") Cc: stable(a)vger.kernel.org # 6.12 Reviewed-by: Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> Signed-off-by: Johan Hovold <johan+linaro(a)kernel.org> Link: https://lore.kernel.org/r/20250314145440.11371-3-johan+linaro@kernel.org Signed-off-by: Bjorn Andersson <andersson(a)kernel.org> diff --git a/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi b/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi index eff0e73640bc..160c052db1ec 100644 --- a/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi +++ b/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi @@ -456,6 +456,7 @@ vreg_l12b_1p2: ldo12 { regulator-min-microvolt = <1200000>; regulator-max-microvolt = <1200000>; regulator-initial-mode = <RPMH_REGULATOR_MODE_HPM>; + regulator-always-on; }; vreg_l13b_3p0: ldo13 { @@ -477,6 +478,7 @@ vreg_l15b_1p8: ldo15 { regulator-min-microvolt = <1800000>; regulator-max-microvolt = <1800000>; regulator-initial-mode = <RPMH_REGULATOR_MODE_HPM>; + regulator-always-on; }; vreg_l17b_2p5: ldo17 {

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] arm64: dts: qcom: x1e78100-t14s: mark l12b and l15b always-on" failed to apply to 6.14-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.14-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.14.y git checkout FETCH_HEAD git cherry-pick -x 673fa129e558c5f1196adb27d97ac90ddfe4f19c # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060254-fling-reflex-4a17@gregkh' --subject-prefix 'PATCH 6.14.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 673fa129e558c5f1196adb27d97ac90ddfe4f19c Mon Sep 17 00:00:00 2001 From: Johan Hovold <johan+linaro(a)kernel.org> Date: Fri, 14 Mar 2025 15:54:34 +0100 Subject: [PATCH] arm64: dts: qcom: x1e78100-t14s: mark l12b and l15b always-on The l12b and l15b supplies are used by components that are not (fully) described (and some never will be) and must never be disabled. Mark the regulators as always-on to prevent them from being disabled, for example, when consumers probe defer or suspend. Fixes: 7d1cbe2f4985 ("arm64: dts: qcom: Add X1E78100 ThinkPad T14s Gen 6") Cc: stable(a)vger.kernel.org # 6.12 Reviewed-by: Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> Signed-off-by: Johan Hovold <johan+linaro(a)kernel.org> Link: https://lore.kernel.org/r/20250314145440.11371-3-johan+linaro@kernel.org Signed-off-by: Bjorn Andersson <andersson(a)kernel.org> diff --git a/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi b/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi index eff0e73640bc..160c052db1ec 100644 --- a/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi +++ b/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi @@ -456,6 +456,7 @@ vreg_l12b_1p2: ldo12 { regulator-min-microvolt = <1200000>; regulator-max-microvolt = <1200000>; regulator-initial-mode = <RPMH_REGULATOR_MODE_HPM>; + regulator-always-on; }; vreg_l13b_3p0: ldo13 { @@ -477,6 +478,7 @@ vreg_l15b_1p8: ldo15 { regulator-min-microvolt = <1800000>; regulator-max-microvolt = <1800000>; regulator-initial-mode = <RPMH_REGULATOR_MODE_HPM>; + regulator-always-on; }; vreg_l17b_2p5: ldo17 {

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] arm64: dts: qcom: x1e78100-t14s: mark l12b and l15b always-on" failed to apply to 6.15-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.15-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.15.y git checkout FETCH_HEAD git cherry-pick -x 673fa129e558c5f1196adb27d97ac90ddfe4f19c # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060254-gong-slimy-ea8d@gregkh' --subject-prefix 'PATCH 6.15.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 673fa129e558c5f1196adb27d97ac90ddfe4f19c Mon Sep 17 00:00:00 2001 From: Johan Hovold <johan+linaro(a)kernel.org> Date: Fri, 14 Mar 2025 15:54:34 +0100 Subject: [PATCH] arm64: dts: qcom: x1e78100-t14s: mark l12b and l15b always-on The l12b and l15b supplies are used by components that are not (fully) described (and some never will be) and must never be disabled. Mark the regulators as always-on to prevent them from being disabled, for example, when consumers probe defer or suspend. Fixes: 7d1cbe2f4985 ("arm64: dts: qcom: Add X1E78100 ThinkPad T14s Gen 6") Cc: stable(a)vger.kernel.org # 6.12 Reviewed-by: Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> Signed-off-by: Johan Hovold <johan+linaro(a)kernel.org> Link: https://lore.kernel.org/r/20250314145440.11371-3-johan+linaro@kernel.org Signed-off-by: Bjorn Andersson <andersson(a)kernel.org> diff --git a/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi b/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi index eff0e73640bc..160c052db1ec 100644 --- a/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi +++ b/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi @@ -456,6 +456,7 @@ vreg_l12b_1p2: ldo12 { regulator-min-microvolt = <1200000>; regulator-max-microvolt = <1200000>; regulator-initial-mode = <RPMH_REGULATOR_MODE_HPM>; + regulator-always-on; }; vreg_l13b_3p0: ldo13 { @@ -477,6 +478,7 @@ vreg_l15b_1p8: ldo15 { regulator-min-microvolt = <1800000>; regulator-max-microvolt = <1800000>; regulator-initial-mode = <RPMH_REGULATOR_MODE_HPM>; + regulator-always-on; }; vreg_l17b_2p5: ldo17 {

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] arm64: dts: qcom: x1e78100-t14s: fix missing HID supplies" failed to apply to 6.12-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.12-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.12.y git checkout FETCH_HEAD git cherry-pick -x 55e52d055393f11ba0193975d3db87af36f4b273 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060246-overstock-thumping-600e@gregkh' --subject-prefix 'PATCH 6.12.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 55e52d055393f11ba0193975d3db87af36f4b273 Mon Sep 17 00:00:00 2001 From: Johan Hovold <johan+linaro(a)kernel.org> Date: Fri, 14 Mar 2025 15:54:40 +0100 Subject: [PATCH] arm64: dts: qcom: x1e78100-t14s: fix missing HID supplies Add the missing HID supplies to avoid relying on other consumers to keep them on. This also avoids the following warnings on boot: i2c_hid_of 0-0010: supply vdd not found, using dummy regulator i2c_hid_of 0-0010: supply vddl not found, using dummy regulator i2c_hid_of 1-0015: supply vdd not found, using dummy regulator i2c_hid_of 1-002c: supply vdd not found, using dummy regulator i2c_hid_of 1-0015: supply vddl not found, using dummy regulator i2c_hid_of 1-002c: supply vddl not found, using dummy regulator i2c_hid_of 1-003a: supply vdd not found, using dummy regulator i2c_hid_of 1-003a: supply vddl not found, using dummy regulator Note that VCC3B is also used for things like the modem which are not yet described so mark the regulator as always-on for now. Fixes: 7d1cbe2f4985 ("arm64: dts: qcom: Add X1E78100 ThinkPad T14s Gen 6") Cc: stable(a)vger.kernel.org # 6.12 Reviewed-by: Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> Signed-off-by: Johan Hovold <johan+linaro(a)kernel.org> Link: https://lore.kernel.org/r/20250314145440.11371-9-johan+linaro@kernel.org Signed-off-by: Bjorn Andersson <andersson(a)kernel.org> diff --git a/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi b/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi index 160c052db1ec..962fb050c55c 100644 --- a/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi +++ b/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi @@ -9,6 +9,7 @@ #include <dt-bindings/gpio/gpio.h> #include <dt-bindings/input/gpio-keys.h> #include <dt-bindings/input/input.h> +#include <dt-bindings/pinctrl/qcom,pmic-gpio.h> #include <dt-bindings/regulator/qcom,rpmh-regulator.h> #include "x1e80100.dtsi" @@ -169,6 +170,23 @@ vreg_edp_3p3: regulator-edp-3p3 { regulator-boot-on; }; + vreg_misc_3p3: regulator-misc-3p3 { + compatible = "regulator-fixed"; + + regulator-name = "VCC3B"; + regulator-min-microvolt = <3300000>; + regulator-max-microvolt = <3300000>; + + gpio = <&pm8550ve_8_gpios 6 GPIO_ACTIVE_HIGH>; + enable-active-high; + + pinctrl-0 = <&misc_3p3_reg_en>; + pinctrl-names = "default"; + + regulator-boot-on; + regulator-always-on; + }; + vreg_nvme: regulator-nvme { compatible = "regulator-fixed"; @@ -692,6 +710,9 @@ touchpad@15 { hid-descr-addr = <0x1>; interrupts-extended = <&tlmm 3 IRQ_TYPE_LEVEL_LOW>; + vdd-supply = <&vreg_misc_3p3>; + vddl-supply = <&vreg_l12b_1p2>; + wakeup-source; }; @@ -703,6 +724,9 @@ touchpad@2c { hid-descr-addr = <0x20>; interrupts-extended = <&tlmm 3 IRQ_TYPE_LEVEL_LOW>; + vdd-supply = <&vreg_misc_3p3>; + vddl-supply = <&vreg_l12b_1p2>; + wakeup-source; }; @@ -714,6 +738,9 @@ keyboard@3a { hid-descr-addr = <0x1>; interrupts-extended = <&tlmm 67 IRQ_TYPE_LEVEL_LOW>; + vdd-supply = <&vreg_misc_3p3>; + vddl-supply = <&vreg_l15b_1p8>; + pinctrl-0 = <&kybd_default>; pinctrl-names = "default"; @@ -896,6 +923,9 @@ touchscreen@10 { hid-descr-addr = <0x1>; interrupts-extended = <&tlmm 51 IRQ_TYPE_LEVEL_LOW>; + vdd-supply = <&vreg_misc_3p3>; + vddl-supply = <&vreg_l15b_1p8>; + pinctrl-0 = <&ts0_default>; pinctrl-names = "default"; }; @@ -1037,6 +1067,19 @@ usb0_3p3_reg_en: usb0-3p3-reg-en-state { }; }; +&pm8550ve_8_gpios { + misc_3p3_reg_en: misc-3p3-reg-en-state { + pins = "gpio6"; + function = "normal"; + bias-disable; + drive-push-pull; + input-disable; + output-enable; + power-source = <1>; /* 1.8 V */ + qcom,drive-strength = <PMIC_GPIO_STRENGTH_LOW>; + }; +}; + &pm8550ve_9_gpios { usb0_1p8_reg_en: usb0-1p8-reg-en-state { pins = "gpio8";

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] arm64: dts: qcom: x1e78100-t14s: fix missing HID supplies" failed to apply to 6.14-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.14-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.14.y git checkout FETCH_HEAD git cherry-pick -x 55e52d055393f11ba0193975d3db87af36f4b273 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060244-reconvene-uncork-b34c@gregkh' --subject-prefix 'PATCH 6.14.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 55e52d055393f11ba0193975d3db87af36f4b273 Mon Sep 17 00:00:00 2001 From: Johan Hovold <johan+linaro(a)kernel.org> Date: Fri, 14 Mar 2025 15:54:40 +0100 Subject: [PATCH] arm64: dts: qcom: x1e78100-t14s: fix missing HID supplies Add the missing HID supplies to avoid relying on other consumers to keep them on. This also avoids the following warnings on boot: i2c_hid_of 0-0010: supply vdd not found, using dummy regulator i2c_hid_of 0-0010: supply vddl not found, using dummy regulator i2c_hid_of 1-0015: supply vdd not found, using dummy regulator i2c_hid_of 1-002c: supply vdd not found, using dummy regulator i2c_hid_of 1-0015: supply vddl not found, using dummy regulator i2c_hid_of 1-002c: supply vddl not found, using dummy regulator i2c_hid_of 1-003a: supply vdd not found, using dummy regulator i2c_hid_of 1-003a: supply vddl not found, using dummy regulator Note that VCC3B is also used for things like the modem which are not yet described so mark the regulator as always-on for now. Fixes: 7d1cbe2f4985 ("arm64: dts: qcom: Add X1E78100 ThinkPad T14s Gen 6") Cc: stable(a)vger.kernel.org # 6.12 Reviewed-by: Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> Signed-off-by: Johan Hovold <johan+linaro(a)kernel.org> Link: https://lore.kernel.org/r/20250314145440.11371-9-johan+linaro@kernel.org Signed-off-by: Bjorn Andersson <andersson(a)kernel.org> diff --git a/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi b/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi index 160c052db1ec..962fb050c55c 100644 --- a/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi +++ b/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi @@ -9,6 +9,7 @@ #include <dt-bindings/gpio/gpio.h> #include <dt-bindings/input/gpio-keys.h> #include <dt-bindings/input/input.h> +#include <dt-bindings/pinctrl/qcom,pmic-gpio.h> #include <dt-bindings/regulator/qcom,rpmh-regulator.h> #include "x1e80100.dtsi" @@ -169,6 +170,23 @@ vreg_edp_3p3: regulator-edp-3p3 { regulator-boot-on; }; + vreg_misc_3p3: regulator-misc-3p3 { + compatible = "regulator-fixed"; + + regulator-name = "VCC3B"; + regulator-min-microvolt = <3300000>; + regulator-max-microvolt = <3300000>; + + gpio = <&pm8550ve_8_gpios 6 GPIO_ACTIVE_HIGH>; + enable-active-high; + + pinctrl-0 = <&misc_3p3_reg_en>; + pinctrl-names = "default"; + + regulator-boot-on; + regulator-always-on; + }; + vreg_nvme: regulator-nvme { compatible = "regulator-fixed"; @@ -692,6 +710,9 @@ touchpad@15 { hid-descr-addr = <0x1>; interrupts-extended = <&tlmm 3 IRQ_TYPE_LEVEL_LOW>; + vdd-supply = <&vreg_misc_3p3>; + vddl-supply = <&vreg_l12b_1p2>; + wakeup-source; }; @@ -703,6 +724,9 @@ touchpad@2c { hid-descr-addr = <0x20>; interrupts-extended = <&tlmm 3 IRQ_TYPE_LEVEL_LOW>; + vdd-supply = <&vreg_misc_3p3>; + vddl-supply = <&vreg_l12b_1p2>; + wakeup-source; }; @@ -714,6 +738,9 @@ keyboard@3a { hid-descr-addr = <0x1>; interrupts-extended = <&tlmm 67 IRQ_TYPE_LEVEL_LOW>; + vdd-supply = <&vreg_misc_3p3>; + vddl-supply = <&vreg_l15b_1p8>; + pinctrl-0 = <&kybd_default>; pinctrl-names = "default"; @@ -896,6 +923,9 @@ touchscreen@10 { hid-descr-addr = <0x1>; interrupts-extended = <&tlmm 51 IRQ_TYPE_LEVEL_LOW>; + vdd-supply = <&vreg_misc_3p3>; + vddl-supply = <&vreg_l15b_1p8>; + pinctrl-0 = <&ts0_default>; pinctrl-names = "default"; }; @@ -1037,6 +1067,19 @@ usb0_3p3_reg_en: usb0-3p3-reg-en-state { }; }; +&pm8550ve_8_gpios { + misc_3p3_reg_en: misc-3p3-reg-en-state { + pins = "gpio6"; + function = "normal"; + bias-disable; + drive-push-pull; + input-disable; + output-enable; + power-source = <1>; /* 1.8 V */ + qcom,drive-strength = <PMIC_GPIO_STRENGTH_LOW>; + }; +}; + &pm8550ve_9_gpios { usb0_1p8_reg_en: usb0-1p8-reg-en-state { pins = "gpio8";

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] arm64: dts: qcom: x1e78100-t14s: fix missing HID supplies" failed to apply to 6.15-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.15-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.15.y git checkout FETCH_HEAD git cherry-pick -x 55e52d055393f11ba0193975d3db87af36f4b273 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060243-cheese-yield-b572@gregkh' --subject-prefix 'PATCH 6.15.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 55e52d055393f11ba0193975d3db87af36f4b273 Mon Sep 17 00:00:00 2001 From: Johan Hovold <johan+linaro(a)kernel.org> Date: Fri, 14 Mar 2025 15:54:40 +0100 Subject: [PATCH] arm64: dts: qcom: x1e78100-t14s: fix missing HID supplies Add the missing HID supplies to avoid relying on other consumers to keep them on. This also avoids the following warnings on boot: i2c_hid_of 0-0010: supply vdd not found, using dummy regulator i2c_hid_of 0-0010: supply vddl not found, using dummy regulator i2c_hid_of 1-0015: supply vdd not found, using dummy regulator i2c_hid_of 1-002c: supply vdd not found, using dummy regulator i2c_hid_of 1-0015: supply vddl not found, using dummy regulator i2c_hid_of 1-002c: supply vddl not found, using dummy regulator i2c_hid_of 1-003a: supply vdd not found, using dummy regulator i2c_hid_of 1-003a: supply vddl not found, using dummy regulator Note that VCC3B is also used for things like the modem which are not yet described so mark the regulator as always-on for now. Fixes: 7d1cbe2f4985 ("arm64: dts: qcom: Add X1E78100 ThinkPad T14s Gen 6") Cc: stable(a)vger.kernel.org # 6.12 Reviewed-by: Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> Signed-off-by: Johan Hovold <johan+linaro(a)kernel.org> Link: https://lore.kernel.org/r/20250314145440.11371-9-johan+linaro@kernel.org Signed-off-by: Bjorn Andersson <andersson(a)kernel.org> diff --git a/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi b/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi index 160c052db1ec..962fb050c55c 100644 --- a/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi +++ b/arch/arm64/boot/dts/qcom/x1e78100-lenovo-thinkpad-t14s.dtsi @@ -9,6 +9,7 @@ #include <dt-bindings/gpio/gpio.h> #include <dt-bindings/input/gpio-keys.h> #include <dt-bindings/input/input.h> +#include <dt-bindings/pinctrl/qcom,pmic-gpio.h> #include <dt-bindings/regulator/qcom,rpmh-regulator.h> #include "x1e80100.dtsi" @@ -169,6 +170,23 @@ vreg_edp_3p3: regulator-edp-3p3 { regulator-boot-on; }; + vreg_misc_3p3: regulator-misc-3p3 { + compatible = "regulator-fixed"; + + regulator-name = "VCC3B"; + regulator-min-microvolt = <3300000>; + regulator-max-microvolt = <3300000>; + + gpio = <&pm8550ve_8_gpios 6 GPIO_ACTIVE_HIGH>; + enable-active-high; + + pinctrl-0 = <&misc_3p3_reg_en>; + pinctrl-names = "default"; + + regulator-boot-on; + regulator-always-on; + }; + vreg_nvme: regulator-nvme { compatible = "regulator-fixed"; @@ -692,6 +710,9 @@ touchpad@15 { hid-descr-addr = <0x1>; interrupts-extended = <&tlmm 3 IRQ_TYPE_LEVEL_LOW>; + vdd-supply = <&vreg_misc_3p3>; + vddl-supply = <&vreg_l12b_1p2>; + wakeup-source; }; @@ -703,6 +724,9 @@ touchpad@2c { hid-descr-addr = <0x20>; interrupts-extended = <&tlmm 3 IRQ_TYPE_LEVEL_LOW>; + vdd-supply = <&vreg_misc_3p3>; + vddl-supply = <&vreg_l12b_1p2>; + wakeup-source; }; @@ -714,6 +738,9 @@ keyboard@3a { hid-descr-addr = <0x1>; interrupts-extended = <&tlmm 67 IRQ_TYPE_LEVEL_LOW>; + vdd-supply = <&vreg_misc_3p3>; + vddl-supply = <&vreg_l15b_1p8>; + pinctrl-0 = <&kybd_default>; pinctrl-names = "default"; @@ -896,6 +923,9 @@ touchscreen@10 { hid-descr-addr = <0x1>; interrupts-extended = <&tlmm 51 IRQ_TYPE_LEVEL_LOW>; + vdd-supply = <&vreg_misc_3p3>; + vddl-supply = <&vreg_l15b_1p8>; + pinctrl-0 = <&ts0_default>; pinctrl-names = "default"; }; @@ -1037,6 +1067,19 @@ usb0_3p3_reg_en: usb0-3p3-reg-en-state { }; }; +&pm8550ve_8_gpios { + misc_3p3_reg_en: misc-3p3-reg-en-state { + pins = "gpio6"; + function = "normal"; + bias-disable; + drive-push-pull; + input-disable; + output-enable; + power-source = <1>; /* 1.8 V */ + qcom,drive-strength = <PMIC_GPIO_STRENGTH_LOW>; + }; +}; + &pm8550ve_9_gpios { usb0_1p8_reg_en: usb0-1p8-reg-en-state { pins = "gpio8";

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] arm64: dts: qcom: x1-crd: Fix vreg_l2j_1p2 voltage" failed to apply to 6.12-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.12-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.12.y git checkout FETCH_HEAD git cherry-pick -x 5ce920e6a8db40e4b094c0d863cbd19fdcfbbb7a # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060236-resale-proactive-e484@gregkh' --subject-prefix 'PATCH 6.12.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 5ce920e6a8db40e4b094c0d863cbd19fdcfbbb7a Mon Sep 17 00:00:00 2001 From: Stephan Gerhold <stephan.gerhold(a)linaro.org> Date: Wed, 23 Apr 2025 09:30:07 +0200 Subject: [PATCH] arm64: dts: qcom: x1-crd: Fix vreg_l2j_1p2 voltage In the ACPI DSDT table, PPP_RESOURCE_ID_LDO2_J is configured with 1256000 uV instead of the 1200000 uV we have currently in the device tree. Use the same for consistency and correctness. Cc: stable(a)vger.kernel.org Fixes: bd50b1f5b6f3 ("arm64: dts: qcom: x1e80100: Add Compute Reference Device") Signed-off-by: Stephan Gerhold <stephan.gerhold(a)linaro.org> Reviewed-by: Johan Hovold <johan+linaro(a)kernel.org> Reviewed-by: Abel Vesa <abel.vesa(a)linaro.org> Reviewed-by: Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> Link: https://lore.kernel.org/r/20250423-x1e-vreg-l2j-voltage-v1-1-24b6a2043025@l… Signed-off-by: Bjorn Andersson <andersson(a)kernel.org> diff --git a/arch/arm64/boot/dts/qcom/x1-crd.dtsi b/arch/arm64/boot/dts/qcom/x1-crd.dtsi index f73f053a46a0..dbdf542c7ce5 100644 --- a/arch/arm64/boot/dts/qcom/x1-crd.dtsi +++ b/arch/arm64/boot/dts/qcom/x1-crd.dtsi @@ -846,8 +846,8 @@ vreg_l1j_0p8: ldo1 { vreg_l2j_1p2: ldo2 { regulator-name = "vreg_l2j_1p2"; - regulator-min-microvolt = <1200000>; - regulator-max-microvolt = <1200000>; + regulator-min-microvolt = <1256000>; + regulator-max-microvolt = <1256000>; regulator-initial-mode = <RPMH_REGULATOR_MODE_HPM>; };

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] arm64: dts: qcom: x1-crd: Fix vreg_l2j_1p2 voltage" failed to apply to 6.15-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.15-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.15.y git checkout FETCH_HEAD git cherry-pick -x 5ce920e6a8db40e4b094c0d863cbd19fdcfbbb7a # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060236-coat-unsterile-20f5@gregkh' --subject-prefix 'PATCH 6.15.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 5ce920e6a8db40e4b094c0d863cbd19fdcfbbb7a Mon Sep 17 00:00:00 2001 From: Stephan Gerhold <stephan.gerhold(a)linaro.org> Date: Wed, 23 Apr 2025 09:30:07 +0200 Subject: [PATCH] arm64: dts: qcom: x1-crd: Fix vreg_l2j_1p2 voltage In the ACPI DSDT table, PPP_RESOURCE_ID_LDO2_J is configured with 1256000 uV instead of the 1200000 uV we have currently in the device tree. Use the same for consistency and correctness. Cc: stable(a)vger.kernel.org Fixes: bd50b1f5b6f3 ("arm64: dts: qcom: x1e80100: Add Compute Reference Device") Signed-off-by: Stephan Gerhold <stephan.gerhold(a)linaro.org> Reviewed-by: Johan Hovold <johan+linaro(a)kernel.org> Reviewed-by: Abel Vesa <abel.vesa(a)linaro.org> Reviewed-by: Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> Link: https://lore.kernel.org/r/20250423-x1e-vreg-l2j-voltage-v1-1-24b6a2043025@l… Signed-off-by: Bjorn Andersson <andersson(a)kernel.org> diff --git a/arch/arm64/boot/dts/qcom/x1-crd.dtsi b/arch/arm64/boot/dts/qcom/x1-crd.dtsi index f73f053a46a0..dbdf542c7ce5 100644 --- a/arch/arm64/boot/dts/qcom/x1-crd.dtsi +++ b/arch/arm64/boot/dts/qcom/x1-crd.dtsi @@ -846,8 +846,8 @@ vreg_l1j_0p8: ldo1 { vreg_l2j_1p2: ldo2 { regulator-name = "vreg_l2j_1p2"; - regulator-min-microvolt = <1200000>; - regulator-max-microvolt = <1200000>; + regulator-min-microvolt = <1256000>; + regulator-max-microvolt = <1256000>; regulator-initial-mode = <RPMH_REGULATOR_MODE_HPM>; };

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] arm64: dts: qcom: x1-crd: Fix vreg_l2j_1p2 voltage" failed to apply to 6.14-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.14-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.14.y git checkout FETCH_HEAD git cherry-pick -x 5ce920e6a8db40e4b094c0d863cbd19fdcfbbb7a # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060236-swimming-deodorize-a6f9@gregkh' --subject-prefix 'PATCH 6.14.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 5ce920e6a8db40e4b094c0d863cbd19fdcfbbb7a Mon Sep 17 00:00:00 2001 From: Stephan Gerhold <stephan.gerhold(a)linaro.org> Date: Wed, 23 Apr 2025 09:30:07 +0200 Subject: [PATCH] arm64: dts: qcom: x1-crd: Fix vreg_l2j_1p2 voltage In the ACPI DSDT table, PPP_RESOURCE_ID_LDO2_J is configured with 1256000 uV instead of the 1200000 uV we have currently in the device tree. Use the same for consistency and correctness. Cc: stable(a)vger.kernel.org Fixes: bd50b1f5b6f3 ("arm64: dts: qcom: x1e80100: Add Compute Reference Device") Signed-off-by: Stephan Gerhold <stephan.gerhold(a)linaro.org> Reviewed-by: Johan Hovold <johan+linaro(a)kernel.org> Reviewed-by: Abel Vesa <abel.vesa(a)linaro.org> Reviewed-by: Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> Link: https://lore.kernel.org/r/20250423-x1e-vreg-l2j-voltage-v1-1-24b6a2043025@l… Signed-off-by: Bjorn Andersson <andersson(a)kernel.org> diff --git a/arch/arm64/boot/dts/qcom/x1-crd.dtsi b/arch/arm64/boot/dts/qcom/x1-crd.dtsi index f73f053a46a0..dbdf542c7ce5 100644 --- a/arch/arm64/boot/dts/qcom/x1-crd.dtsi +++ b/arch/arm64/boot/dts/qcom/x1-crd.dtsi @@ -846,8 +846,8 @@ vreg_l1j_0p8: ldo1 { vreg_l2j_1p2: ldo2 { regulator-name = "vreg_l2j_1p2"; - regulator-min-microvolt = <1200000>; - regulator-max-microvolt = <1200000>; + regulator-min-microvolt = <1256000>; + regulator-max-microvolt = <1256000>; regulator-initial-mode = <RPMH_REGULATOR_MODE_HPM>; };

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0" failed to apply to 5.15-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 5.15-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.15.y git checkout FETCH_HEAD git cherry-pick -x f55c9f087cc2e2252d44ffd9d58def2066fc176e # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060219-mustang-rocker-6ae2@gregkh' --subject-prefix 'PATCH 5.15.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From f55c9f087cc2e2252d44ffd9d58def2066fc176e Mon Sep 17 00:00:00 2001 From: Judith Mendez <jm(a)ti.com> Date: Tue, 29 Apr 2025 12:30:08 -0500 Subject: [PATCH] arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0 For am65x, add missing ITAPDLYSEL values for Default Speed and High Speed SDR modes to sdhci0 node according to the device datasheet [0]. [0] https://www.ti.com/lit/gpn/am6548 Fixes: eac99d38f861 ("arm64: dts: ti: k3-am654-main: Update otap-del-sel values") Cc: stable(a)vger.kernel.org Signed-off-by: Judith Mendez <jm(a)ti.com> Reviewed-by: Moteen Shah <m-shah(a)ti.com> Link: https://lore.kernel.org/r/20250429173009.33994-1-jm@ti.com Signed-off-by: Nishanth Menon <nm(a)ti.com> diff --git a/arch/arm64/boot/dts/ti/k3-am65-main.dtsi b/arch/arm64/boot/dts/ti/k3-am65-main.dtsi index 6d3c467d7038..b085e7361116 100644 --- a/arch/arm64/boot/dts/ti/k3-am65-main.dtsi +++ b/arch/arm64/boot/dts/ti/k3-am65-main.dtsi @@ -449,6 +449,8 @@ sdhci0: mmc@4f80000 { ti,otap-del-sel-mmc-hs = <0x0>; ti,otap-del-sel-ddr52 = <0x5>; ti,otap-del-sel-hs200 = <0x5>; + ti,itap-del-sel-legacy = <0xa>; + ti,itap-del-sel-mmc-hs = <0x1>; ti,itap-del-sel-ddr52 = <0x0>; dma-coherent; status = "disabled";

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] arm64: dts: ti: k3-am62-main: Set eMMC clock parent to" failed to apply to 6.6-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.6-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.6.y git checkout FETCH_HEAD git cherry-pick -x 3a71cdfec94436079513d9adf4b1d4f7a7edd917 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060230-demote-sappiness-b940@gregkh' --subject-prefix 'PATCH 6.6.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 3a71cdfec94436079513d9adf4b1d4f7a7edd917 Mon Sep 17 00:00:00 2001 From: Judith Mendez <jm(a)ti.com> Date: Tue, 29 Apr 2025 11:33:35 -0500 Subject: [PATCH] arm64: dts: ti: k3-am62-main: Set eMMC clock parent to default Set eMMC clock parents to the defaults which is MAIN_PLL0_HSDIV5_CLKOUT for eMMC. This change is necessary since DM is not implementing the correct procedure to switch PLL clock source for eMMC and MMC CLK mux is not glich-free. As a preventative action, lets switch back to the defaults. Fixes: c37c58fdeb8a ("arm64: dts: ti: k3-am62: Add more peripheral nodes") Cc: stable(a)vger.kernel.org Signed-off-by: Judith Mendez <jm(a)ti.com> Acked-by: Udit Kumar <u-kumar1(a)ti.com> Acked-by: Bryan Brattlof <bb(a)ti.com> Link: https://lore.kernel.org/r/20250429163337.15634-2-jm@ti.com Signed-off-by: Nishanth Menon <nm(a)ti.com> diff --git a/arch/arm64/boot/dts/ti/k3-am62-main.dtsi b/arch/arm64/boot/dts/ti/k3-am62-main.dtsi index 7d355aa73ea2..0c286f600296 100644 --- a/arch/arm64/boot/dts/ti/k3-am62-main.dtsi +++ b/arch/arm64/boot/dts/ti/k3-am62-main.dtsi @@ -552,8 +552,6 @@ sdhci0: mmc@fa10000 { power-domains = <&k3_pds 57 TI_SCI_PD_EXCLUSIVE>; clocks = <&k3_clks 57 5>, <&k3_clks 57 6>; clock-names = "clk_ahb", "clk_xin"; - assigned-clocks = <&k3_clks 57 6>; - assigned-clock-parents = <&k3_clks 57 8>; bus-width = <8>; mmc-ddr-1_8v; mmc-hs200-1_8v;

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] arm64: dts: qcom: x1e80100: Add GPU cooling" failed to apply to 6.12-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.12-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.12.y git checkout FETCH_HEAD git cherry-pick -x 5ba21fa11f473c9827f378ace8c9f983de9e0287 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060212-chamomile-scorecard-ba20@gregkh' --subject-prefix 'PATCH 6.12.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 5ba21fa11f473c9827f378ace8c9f983de9e0287 Mon Sep 17 00:00:00 2001 From: Stephan Gerhold <stephan.gerhold(a)linaro.org> Date: Wed, 19 Feb 2025 12:36:20 +0100 Subject: [PATCH] arm64: dts: qcom: x1e80100: Add GPU cooling MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Unlike the CPU, the GPU does not throttle its speed automatically when it reaches high temperatures. With certain high GPU loads it is possible to reach the critical hardware shutdown temperature of 120°C, endangering the hardware and making it impossible to run certain applications. Set up GPU cooling similar to the ACPI tables, by throttling the GPU speed when reaching 95°C and polling every 200ms. Cc: stable(a)vger.kernel.org Fixes: 721e38301b79 ("arm64: dts: qcom: x1e80100: Add gpu support") Signed-off-by: Stephan Gerhold <stephan.gerhold(a)linaro.org> Reviewed-by: Johan Hovold <johan+linaro(a)kernel.org> Reviewed-by: Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> Link: https://lore.kernel.org/r/20250219-x1e80100-thermal-fixes-v1-3-d110e44ac3f9… Signed-off-by: Bjorn Andersson <andersson(a)kernel.org> diff --git a/arch/arm64/boot/dts/qcom/x1e80100.dtsi b/arch/arm64/boot/dts/qcom/x1e80100.dtsi index e0ef5665f862..9382a2fce2f3 100644 --- a/arch/arm64/boot/dts/qcom/x1e80100.dtsi +++ b/arch/arm64/boot/dts/qcom/x1e80100.dtsi @@ -20,6 +20,7 @@ #include <dt-bindings/soc/qcom,gpr.h> #include <dt-bindings/soc/qcom,rpmh-rsc.h> #include <dt-bindings/sound/qcom,q6dsp-lpass-ports.h> +#include <dt-bindings/thermal/thermal.h> / { interrupt-parent = <&intc>; @@ -9372,24 +9373,25 @@ nsp3-critical { }; gpuss-0-thermal { - polling-delay-passive = <10>; + polling-delay-passive = <200>; thermal-sensors = <&tsens3 5>; + cooling-maps { + map0 { + trip = <&gpuss0_alert0>; + cooling-device = <&gpu THERMAL_NO_LIMIT THERMAL_NO_LIMIT>; + }; + }; + trips { - trip-point0 { - temperature = <85000>; + gpuss0_alert0: trip-point0 { + temperature = <95000>; hysteresis = <1000>; type = "passive"; }; - trip-point1 { - temperature = <90000>; - hysteresis = <1000>; - type = "hot"; - }; - - trip-point2 { + gpu-critical { temperature = <115000>; hysteresis = <1000>; type = "critical"; @@ -9398,24 +9400,25 @@ trip-point2 { }; gpuss-1-thermal { - polling-delay-passive = <10>; + polling-delay-passive = <200>; thermal-sensors = <&tsens3 6>; + cooling-maps { + map0 { + trip = <&gpuss1_alert0>; + cooling-device = <&gpu THERMAL_NO_LIMIT THERMAL_NO_LIMIT>; + }; + }; + trips { - trip-point0 { - temperature = <85000>; + gpuss1_alert0: trip-point0 { + temperature = <95000>; hysteresis = <1000>; type = "passive"; }; - trip-point1 { - temperature = <90000>; - hysteresis = <1000>; - type = "hot"; - }; - - trip-point2 { + gpu-critical { temperature = <115000>; hysteresis = <1000>; type = "critical"; @@ -9424,24 +9427,25 @@ trip-point2 { }; gpuss-2-thermal { - polling-delay-passive = <10>; + polling-delay-passive = <200>; thermal-sensors = <&tsens3 7>; + cooling-maps { + map0 { + trip = <&gpuss2_alert0>; + cooling-device = <&gpu THERMAL_NO_LIMIT THERMAL_NO_LIMIT>; + }; + }; + trips { - trip-point0 { - temperature = <85000>; + gpuss2_alert0: trip-point0 { + temperature = <95000>; hysteresis = <1000>; type = "passive"; }; - trip-point1 { - temperature = <90000>; - hysteresis = <1000>; - type = "hot"; - }; - - trip-point2 { + gpu-critical { temperature = <115000>; hysteresis = <1000>; type = "critical"; @@ -9450,24 +9454,25 @@ trip-point2 { }; gpuss-3-thermal { - polling-delay-passive = <10>; + polling-delay-passive = <200>; thermal-sensors = <&tsens3 8>; + cooling-maps { + map0 { + trip = <&gpuss3_alert0>; + cooling-device = <&gpu THERMAL_NO_LIMIT THERMAL_NO_LIMIT>; + }; + }; + trips { - trip-point0 { - temperature = <85000>; + gpuss3_alert0: trip-point0 { + temperature = <95000>; hysteresis = <1000>; type = "passive"; }; - trip-point1 { - temperature = <90000>; - hysteresis = <1000>; - type = "hot"; - }; - - trip-point2 { + gpu-critical { temperature = <115000>; hysteresis = <1000>; type = "critical"; @@ -9476,24 +9481,25 @@ trip-point2 { }; gpuss-4-thermal { - polling-delay-passive = <10>; + polling-delay-passive = <200>; thermal-sensors = <&tsens3 9>; + cooling-maps { + map0 { + trip = <&gpuss4_alert0>; + cooling-device = <&gpu THERMAL_NO_LIMIT THERMAL_NO_LIMIT>; + }; + }; + trips { - trip-point0 { - temperature = <85000>; + gpuss4_alert0: trip-point0 { + temperature = <95000>; hysteresis = <1000>; type = "passive"; }; - trip-point1 { - temperature = <90000>; - hysteresis = <1000>; - type = "hot"; - }; - - trip-point2 { + gpu-critical { temperature = <115000>; hysteresis = <1000>; type = "critical"; @@ -9502,24 +9508,25 @@ trip-point2 { }; gpuss-5-thermal { - polling-delay-passive = <10>; + polling-delay-passive = <200>; thermal-sensors = <&tsens3 10>; + cooling-maps { + map0 { + trip = <&gpuss5_alert0>; + cooling-device = <&gpu THERMAL_NO_LIMIT THERMAL_NO_LIMIT>; + }; + }; + trips { - trip-point0 { - temperature = <85000>; + gpuss5_alert0: trip-point0 { + temperature = <95000>; hysteresis = <1000>; type = "passive"; }; - trip-point1 { - temperature = <90000>; - hysteresis = <1000>; - type = "hot"; - }; - - trip-point2 { + gpu-critical { temperature = <115000>; hysteresis = <1000>; type = "critical"; @@ -9528,24 +9535,25 @@ trip-point2 { }; gpuss-6-thermal { - polling-delay-passive = <10>; + polling-delay-passive = <200>; thermal-sensors = <&tsens3 11>; + cooling-maps { + map0 { + trip = <&gpuss6_alert0>; + cooling-device = <&gpu THERMAL_NO_LIMIT THERMAL_NO_LIMIT>; + }; + }; + trips { - trip-point0 { - temperature = <85000>; + gpuss6_alert0: trip-point0 { + temperature = <95000>; hysteresis = <1000>; type = "passive"; }; - trip-point1 { - temperature = <90000>; - hysteresis = <1000>; - type = "hot"; - }; - - trip-point2 { + gpu-critical { temperature = <115000>; hysteresis = <1000>; type = "critical"; @@ -9554,24 +9562,25 @@ trip-point2 { }; gpuss-7-thermal { - polling-delay-passive = <10>; + polling-delay-passive = <200>; thermal-sensors = <&tsens3 12>; + cooling-maps { + map0 { + trip = <&gpuss7_alert0>; + cooling-device = <&gpu THERMAL_NO_LIMIT THERMAL_NO_LIMIT>; + }; + }; + trips { - trip-point0 { - temperature = <85000>; + gpuss7_alert0: trip-point0 { + temperature = <95000>; hysteresis = <1000>; type = "passive"; }; - trip-point1 { - temperature = <90000>; - hysteresis = <1000>; - type = "hot"; - }; - - trip-point2 { + gpu-critical { temperature = <115000>; hysteresis = <1000>; type = "critical";

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] arm64: dts: qcom: x1e80100: Apply consistent critical thermal" failed to apply to 6.12-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.12-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.12.y git checkout FETCH_HEAD git cherry-pick -x 03f2b8eed73418269a158ccebad5d8d8f2f6daa1 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060201-critter-racoon-92e9@gregkh' --subject-prefix 'PATCH 6.12.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 03f2b8eed73418269a158ccebad5d8d8f2f6daa1 Mon Sep 17 00:00:00 2001 From: Stephan Gerhold <stephan.gerhold(a)linaro.org> Date: Wed, 19 Feb 2025 12:36:19 +0100 Subject: [PATCH] arm64: dts: qcom: x1e80100: Apply consistent critical thermal shutdown MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The firmware configures the TSENS controller with a maximum temperature of 120°C. When reaching that temperature, the hardware automatically triggers a reset of the entire platform. Some of the thermal zones in x1e80100.dtsi use a critical trip point of 125°C. It's impossible to reach those. It's preferable to shut down the system cleanly before reaching the hardware trip point. Make the critical temperature trip points consistent by setting all of them to 115°C and apply a consistent hysteresis. The ACPI tables also specify 115°C as critical shutdown temperature. Cc: stable(a)vger.kernel.org Fixes: 4e915987ff5b ("arm64: dts: qcom: x1e80100: Enable tsens and thermal zone nodes") Signed-off-by: Stephan Gerhold <stephan.gerhold(a)linaro.org> Reviewed-by: Johan Hovold <johan+linaro(a)kernel.org> Reviewed-by: Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> Link: https://lore.kernel.org/r/20250219-x1e80100-thermal-fixes-v1-2-d110e44ac3f9… Signed-off-by: Bjorn Andersson <andersson(a)kernel.org> diff --git a/arch/arm64/boot/dts/qcom/x1e80100.dtsi b/arch/arm64/boot/dts/qcom/x1e80100.dtsi index 7d750a899e80..e0ef5665f862 100644 --- a/arch/arm64/boot/dts/qcom/x1e80100.dtsi +++ b/arch/arm64/boot/dts/qcom/x1e80100.dtsi @@ -8470,8 +8470,8 @@ trip-point0 { }; aoss0-critical { - temperature = <125000>; - hysteresis = <0>; + temperature = <115000>; + hysteresis = <1000>; type = "critical"; }; }; @@ -8496,7 +8496,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -8522,7 +8522,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -8548,7 +8548,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -8574,7 +8574,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -8600,7 +8600,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -8626,7 +8626,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -8652,7 +8652,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -8678,7 +8678,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -8696,8 +8696,8 @@ trip-point0 { }; cpuss2-critical { - temperature = <125000>; - hysteresis = <0>; + temperature = <115000>; + hysteresis = <1000>; type = "critical"; }; }; @@ -8714,8 +8714,8 @@ trip-point0 { }; cpuss2-critical { - temperature = <125000>; - hysteresis = <0>; + temperature = <115000>; + hysteresis = <1000>; type = "critical"; }; }; @@ -8732,7 +8732,7 @@ trip-point0 { }; mem-critical { - temperature = <125000>; + temperature = <115000>; hysteresis = <0>; type = "critical"; }; @@ -8750,7 +8750,7 @@ trip-point0 { }; video-critical { - temperature = <125000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -8768,8 +8768,8 @@ trip-point0 { }; aoss0-critical { - temperature = <125000>; - hysteresis = <0>; + temperature = <115000>; + hysteresis = <1000>; type = "critical"; }; }; @@ -8794,7 +8794,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -8820,7 +8820,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -8846,7 +8846,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -8872,7 +8872,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -8898,7 +8898,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -8924,7 +8924,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -8950,7 +8950,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -8976,7 +8976,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -8994,8 +8994,8 @@ trip-point0 { }; cpuss2-critical { - temperature = <125000>; - hysteresis = <0>; + temperature = <115000>; + hysteresis = <1000>; type = "critical"; }; }; @@ -9012,8 +9012,8 @@ trip-point0 { }; cpuss2-critical { - temperature = <125000>; - hysteresis = <0>; + temperature = <115000>; + hysteresis = <1000>; type = "critical"; }; }; @@ -9030,8 +9030,8 @@ trip-point0 { }; aoss0-critical { - temperature = <125000>; - hysteresis = <0>; + temperature = <115000>; + hysteresis = <1000>; type = "critical"; }; }; @@ -9056,7 +9056,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -9082,7 +9082,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -9108,7 +9108,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -9134,7 +9134,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -9160,7 +9160,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -9186,7 +9186,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -9212,7 +9212,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -9238,7 +9238,7 @@ trip-point1 { }; cpu-critical { - temperature = <110000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -9256,8 +9256,8 @@ trip-point0 { }; cpuss2-critical { - temperature = <125000>; - hysteresis = <0>; + temperature = <115000>; + hysteresis = <1000>; type = "critical"; }; }; @@ -9274,8 +9274,8 @@ trip-point0 { }; cpuss2-critical { - temperature = <125000>; - hysteresis = <0>; + temperature = <115000>; + hysteresis = <1000>; type = "critical"; }; }; @@ -9292,8 +9292,8 @@ trip-point0 { }; aoss0-critical { - temperature = <125000>; - hysteresis = <0>; + temperature = <115000>; + hysteresis = <1000>; type = "critical"; }; }; @@ -9310,8 +9310,8 @@ trip-point0 { }; nsp0-critical { - temperature = <125000>; - hysteresis = <0>; + temperature = <115000>; + hysteresis = <1000>; type = "critical"; }; }; @@ -9328,8 +9328,8 @@ trip-point0 { }; nsp1-critical { - temperature = <125000>; - hysteresis = <0>; + temperature = <115000>; + hysteresis = <1000>; type = "critical"; }; }; @@ -9346,8 +9346,8 @@ trip-point0 { }; nsp2-critical { - temperature = <125000>; - hysteresis = <0>; + temperature = <115000>; + hysteresis = <1000>; type = "critical"; }; }; @@ -9364,8 +9364,8 @@ trip-point0 { }; nsp3-critical { - temperature = <125000>; - hysteresis = <0>; + temperature = <115000>; + hysteresis = <1000>; type = "critical"; }; }; @@ -9390,7 +9390,7 @@ trip-point1 { }; trip-point2 { - temperature = <125000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -9416,7 +9416,7 @@ trip-point1 { }; trip-point2 { - temperature = <125000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -9442,7 +9442,7 @@ trip-point1 { }; trip-point2 { - temperature = <125000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -9468,7 +9468,7 @@ trip-point1 { }; trip-point2 { - temperature = <125000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -9494,7 +9494,7 @@ trip-point1 { }; trip-point2 { - temperature = <125000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -9520,7 +9520,7 @@ trip-point1 { }; trip-point2 { - temperature = <125000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -9546,7 +9546,7 @@ trip-point1 { }; trip-point2 { - temperature = <125000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -9572,7 +9572,7 @@ trip-point1 { }; trip-point2 { - temperature = <125000>; + temperature = <115000>; hysteresis = <1000>; type = "critical"; }; @@ -9591,7 +9591,7 @@ trip-point0 { camera0-critical { temperature = <115000>; - hysteresis = <0>; + hysteresis = <1000>; type = "critical"; }; }; @@ -9609,7 +9609,7 @@ trip-point0 { camera0-critical { temperature = <115000>; - hysteresis = <0>; + hysteresis = <1000>; type = "critical"; }; };

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] arm64: dts: rockchip: fix internal USB hub instability on" failed to apply to 5.4-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 5.4-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.4.y git checkout FETCH_HEAD git cherry-pick -x d7cc532df95f7f159e40595440e4e4b99481457b # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060238-graffiti-woof-6b4f@gregkh' --subject-prefix 'PATCH 5.4.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From d7cc532df95f7f159e40595440e4e4b99481457b Mon Sep 17 00:00:00 2001 From: Lukasz Czechowski <lukasz.czechowski(a)thaumatec.com> Date: Fri, 25 Apr 2025 17:18:08 +0200 Subject: [PATCH] arm64: dts: rockchip: fix internal USB hub instability on RK3399 Puma MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Currently, the onboard Cypress CYUSB3304 USB hub is not defined in the device tree, and hub reset pin is provided as vcc5v0_host regulator to usb phy. This causes instability issues, as a result of improper reset duration. The fixed regulator device requests the GPIO during probe in its inactive state (except if regulator-boot-on property is set, in which case it is requested in the active state). Considering gpio is GPIO_ACTIVE_LOW for Puma, it means it’s driving it high. Then the regulator gets enabled (because regulator-always-on property), which drives it to its active state, meaning driving it low. The Cypress CYUSB3304 USB hub actually requires the reset to be asserted for at least 5 ms, which we cannot guarantee right now since there's no delay in the current config, meaning the hub may sometimes work or not. We could add delay as offered by fixed-regulator but let's rather fix this by using the proper way to model onboard USB hubs. Define hub_2_0 and hub_3_0 nodes, as the onboard Cypress hub consist of two 'logical' hubs, for USB2.0 and USB3.0. Use the 'reset-gpios' property of hub to assign reset pin instead of using regulator. Rename the vcc5v0_host regulator to cy3304_reset to be more meaningful. Pin is configured to output-high by default, which sets the hub in reset state during pin controller initialization. This allows to avoid double enumeration of devices in case the bootloader has setup the USB hub before the kernel. The vdd-supply and vdd2-supply properties in hub nodes are added to provide correct dt-bindings, although power supplies are always enabled based on HW design. Fixes: 2c66fc34e945 ("arm64: dts: rockchip: add RK3399-Q7 (Puma) SoM") Cc: stable(a)vger.kernel.org # 6.6 Cc: stable(a)vger.kernel.org # Backport of the patch in this series fixing product ID in onboard_dev_id_table in drivers/usb/misc/onboard_usb_dev.c driver Signed-off-by: Lukasz Czechowski <lukasz.czechowski(a)thaumatec.com> Link: https://lore.kernel.org/r/20250425-onboard_usb_dev-v2-3-4a76a474a010@thauma… Signed-off-by: Heiko Stuebner <heiko(a)sntech.de> diff --git a/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi b/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi index e00fbaa8acc1..314d9dfdba57 100644 --- a/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi +++ b/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi @@ -60,16 +60,6 @@ vcc3v3_sys: regulator-vcc3v3-sys { vin-supply = <&vcc5v0_sys>; }; - vcc5v0_host: regulator-vcc5v0-host { - compatible = "regulator-fixed"; - gpio = <&gpio4 RK_PA3 GPIO_ACTIVE_LOW>; - pinctrl-names = "default"; - pinctrl-0 = <&vcc5v0_host_en>; - regulator-name = "vcc5v0_host"; - regulator-always-on; - vin-supply = <&vcc5v0_sys>; - }; - vcc5v0_sys: regulator-vcc5v0-sys { compatible = "regulator-fixed"; regulator-name = "vcc5v0_sys"; @@ -527,10 +517,10 @@ pmic_int_l: pmic-int-l { }; }; - usb2 { - vcc5v0_host_en: vcc5v0-host-en { + usb { + cy3304_reset: cy3304-reset { rockchip,pins = - <4 RK_PA3 RK_FUNC_GPIO &pcfg_pull_none>; + <4 RK_PA3 RK_FUNC_GPIO &pcfg_output_high>; }; }; @@ -597,7 +587,6 @@ u2phy1_otg: otg-port { }; u2phy1_host: host-port { - phy-supply = <&vcc5v0_host>; status = "okay"; }; }; @@ -609,6 +598,29 @@ &usbdrd3_1 { &usbdrd_dwc3_1 { status = "okay"; dr_mode = "host"; + pinctrl-names = "default"; + pinctrl-0 = <&cy3304_reset>; + #address-cells = <1>; + #size-cells = <0>; + + hub_2_0: hub@1 { + compatible = "usb4b4,6502", "usb4b4,6506"; + reg = <1>; + peer-hub = <&hub_3_0>; + reset-gpios = <&gpio4 RK_PA3 GPIO_ACTIVE_HIGH>; + vdd-supply = <&vcc1v2_phy>; + vdd2-supply = <&vcc3v3_sys>; + + }; + + hub_3_0: hub@2 { + compatible = "usb4b4,6500", "usb4b4,6504"; + reg = <2>; + peer-hub = <&hub_2_0>; + reset-gpios = <&gpio4 RK_PA3 GPIO_ACTIVE_HIGH>; + vdd-supply = <&vcc1v2_phy>; + vdd2-supply = <&vcc3v3_sys>; + }; }; &usb_host1_ehci {

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] arm64: dts: rockchip: fix internal USB hub instability on" failed to apply to 5.10-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 5.10-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.10.y git checkout FETCH_HEAD git cherry-pick -x d7cc532df95f7f159e40595440e4e4b99481457b # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060237-cactus-anew-7019@gregkh' --subject-prefix 'PATCH 5.10.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From d7cc532df95f7f159e40595440e4e4b99481457b Mon Sep 17 00:00:00 2001 From: Lukasz Czechowski <lukasz.czechowski(a)thaumatec.com> Date: Fri, 25 Apr 2025 17:18:08 +0200 Subject: [PATCH] arm64: dts: rockchip: fix internal USB hub instability on RK3399 Puma MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Currently, the onboard Cypress CYUSB3304 USB hub is not defined in the device tree, and hub reset pin is provided as vcc5v0_host regulator to usb phy. This causes instability issues, as a result of improper reset duration. The fixed regulator device requests the GPIO during probe in its inactive state (except if regulator-boot-on property is set, in which case it is requested in the active state). Considering gpio is GPIO_ACTIVE_LOW for Puma, it means it’s driving it high. Then the regulator gets enabled (because regulator-always-on property), which drives it to its active state, meaning driving it low. The Cypress CYUSB3304 USB hub actually requires the reset to be asserted for at least 5 ms, which we cannot guarantee right now since there's no delay in the current config, meaning the hub may sometimes work or not. We could add delay as offered by fixed-regulator but let's rather fix this by using the proper way to model onboard USB hubs. Define hub_2_0 and hub_3_0 nodes, as the onboard Cypress hub consist of two 'logical' hubs, for USB2.0 and USB3.0. Use the 'reset-gpios' property of hub to assign reset pin instead of using regulator. Rename the vcc5v0_host regulator to cy3304_reset to be more meaningful. Pin is configured to output-high by default, which sets the hub in reset state during pin controller initialization. This allows to avoid double enumeration of devices in case the bootloader has setup the USB hub before the kernel. The vdd-supply and vdd2-supply properties in hub nodes are added to provide correct dt-bindings, although power supplies are always enabled based on HW design. Fixes: 2c66fc34e945 ("arm64: dts: rockchip: add RK3399-Q7 (Puma) SoM") Cc: stable(a)vger.kernel.org # 6.6 Cc: stable(a)vger.kernel.org # Backport of the patch in this series fixing product ID in onboard_dev_id_table in drivers/usb/misc/onboard_usb_dev.c driver Signed-off-by: Lukasz Czechowski <lukasz.czechowski(a)thaumatec.com> Link: https://lore.kernel.org/r/20250425-onboard_usb_dev-v2-3-4a76a474a010@thauma… Signed-off-by: Heiko Stuebner <heiko(a)sntech.de> diff --git a/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi b/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi index e00fbaa8acc1..314d9dfdba57 100644 --- a/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi +++ b/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi @@ -60,16 +60,6 @@ vcc3v3_sys: regulator-vcc3v3-sys { vin-supply = <&vcc5v0_sys>; }; - vcc5v0_host: regulator-vcc5v0-host { - compatible = "regulator-fixed"; - gpio = <&gpio4 RK_PA3 GPIO_ACTIVE_LOW>; - pinctrl-names = "default"; - pinctrl-0 = <&vcc5v0_host_en>; - regulator-name = "vcc5v0_host"; - regulator-always-on; - vin-supply = <&vcc5v0_sys>; - }; - vcc5v0_sys: regulator-vcc5v0-sys { compatible = "regulator-fixed"; regulator-name = "vcc5v0_sys"; @@ -527,10 +517,10 @@ pmic_int_l: pmic-int-l { }; }; - usb2 { - vcc5v0_host_en: vcc5v0-host-en { + usb { + cy3304_reset: cy3304-reset { rockchip,pins = - <4 RK_PA3 RK_FUNC_GPIO &pcfg_pull_none>; + <4 RK_PA3 RK_FUNC_GPIO &pcfg_output_high>; }; }; @@ -597,7 +587,6 @@ u2phy1_otg: otg-port { }; u2phy1_host: host-port { - phy-supply = <&vcc5v0_host>; status = "okay"; }; }; @@ -609,6 +598,29 @@ &usbdrd3_1 { &usbdrd_dwc3_1 { status = "okay"; dr_mode = "host"; + pinctrl-names = "default"; + pinctrl-0 = <&cy3304_reset>; + #address-cells = <1>; + #size-cells = <0>; + + hub_2_0: hub@1 { + compatible = "usb4b4,6502", "usb4b4,6506"; + reg = <1>; + peer-hub = <&hub_3_0>; + reset-gpios = <&gpio4 RK_PA3 GPIO_ACTIVE_HIGH>; + vdd-supply = <&vcc1v2_phy>; + vdd2-supply = <&vcc3v3_sys>; + + }; + + hub_3_0: hub@2 { + compatible = "usb4b4,6500", "usb4b4,6504"; + reg = <2>; + peer-hub = <&hub_2_0>; + reset-gpios = <&gpio4 RK_PA3 GPIO_ACTIVE_HIGH>; + vdd-supply = <&vcc1v2_phy>; + vdd2-supply = <&vcc3v3_sys>; + }; }; &usb_host1_ehci {

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] arm64: dts: rockchip: fix internal USB hub instability on" failed to apply to 5.15-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 5.15-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.15.y git checkout FETCH_HEAD git cherry-pick -x d7cc532df95f7f159e40595440e4e4b99481457b # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060236-cone-armory-06ea@gregkh' --subject-prefix 'PATCH 5.15.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From d7cc532df95f7f159e40595440e4e4b99481457b Mon Sep 17 00:00:00 2001 From: Lukasz Czechowski <lukasz.czechowski(a)thaumatec.com> Date: Fri, 25 Apr 2025 17:18:08 +0200 Subject: [PATCH] arm64: dts: rockchip: fix internal USB hub instability on RK3399 Puma MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Currently, the onboard Cypress CYUSB3304 USB hub is not defined in the device tree, and hub reset pin is provided as vcc5v0_host regulator to usb phy. This causes instability issues, as a result of improper reset duration. The fixed regulator device requests the GPIO during probe in its inactive state (except if regulator-boot-on property is set, in which case it is requested in the active state). Considering gpio is GPIO_ACTIVE_LOW for Puma, it means it’s driving it high. Then the regulator gets enabled (because regulator-always-on property), which drives it to its active state, meaning driving it low. The Cypress CYUSB3304 USB hub actually requires the reset to be asserted for at least 5 ms, which we cannot guarantee right now since there's no delay in the current config, meaning the hub may sometimes work or not. We could add delay as offered by fixed-regulator but let's rather fix this by using the proper way to model onboard USB hubs. Define hub_2_0 and hub_3_0 nodes, as the onboard Cypress hub consist of two 'logical' hubs, for USB2.0 and USB3.0. Use the 'reset-gpios' property of hub to assign reset pin instead of using regulator. Rename the vcc5v0_host regulator to cy3304_reset to be more meaningful. Pin is configured to output-high by default, which sets the hub in reset state during pin controller initialization. This allows to avoid double enumeration of devices in case the bootloader has setup the USB hub before the kernel. The vdd-supply and vdd2-supply properties in hub nodes are added to provide correct dt-bindings, although power supplies are always enabled based on HW design. Fixes: 2c66fc34e945 ("arm64: dts: rockchip: add RK3399-Q7 (Puma) SoM") Cc: stable(a)vger.kernel.org # 6.6 Cc: stable(a)vger.kernel.org # Backport of the patch in this series fixing product ID in onboard_dev_id_table in drivers/usb/misc/onboard_usb_dev.c driver Signed-off-by: Lukasz Czechowski <lukasz.czechowski(a)thaumatec.com> Link: https://lore.kernel.org/r/20250425-onboard_usb_dev-v2-3-4a76a474a010@thauma… Signed-off-by: Heiko Stuebner <heiko(a)sntech.de> diff --git a/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi b/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi index e00fbaa8acc1..314d9dfdba57 100644 --- a/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi +++ b/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi @@ -60,16 +60,6 @@ vcc3v3_sys: regulator-vcc3v3-sys { vin-supply = <&vcc5v0_sys>; }; - vcc5v0_host: regulator-vcc5v0-host { - compatible = "regulator-fixed"; - gpio = <&gpio4 RK_PA3 GPIO_ACTIVE_LOW>; - pinctrl-names = "default"; - pinctrl-0 = <&vcc5v0_host_en>; - regulator-name = "vcc5v0_host"; - regulator-always-on; - vin-supply = <&vcc5v0_sys>; - }; - vcc5v0_sys: regulator-vcc5v0-sys { compatible = "regulator-fixed"; regulator-name = "vcc5v0_sys"; @@ -527,10 +517,10 @@ pmic_int_l: pmic-int-l { }; }; - usb2 { - vcc5v0_host_en: vcc5v0-host-en { + usb { + cy3304_reset: cy3304-reset { rockchip,pins = - <4 RK_PA3 RK_FUNC_GPIO &pcfg_pull_none>; + <4 RK_PA3 RK_FUNC_GPIO &pcfg_output_high>; }; }; @@ -597,7 +587,6 @@ u2phy1_otg: otg-port { }; u2phy1_host: host-port { - phy-supply = <&vcc5v0_host>; status = "okay"; }; }; @@ -609,6 +598,29 @@ &usbdrd3_1 { &usbdrd_dwc3_1 { status = "okay"; dr_mode = "host"; + pinctrl-names = "default"; + pinctrl-0 = <&cy3304_reset>; + #address-cells = <1>; + #size-cells = <0>; + + hub_2_0: hub@1 { + compatible = "usb4b4,6502", "usb4b4,6506"; + reg = <1>; + peer-hub = <&hub_3_0>; + reset-gpios = <&gpio4 RK_PA3 GPIO_ACTIVE_HIGH>; + vdd-supply = <&vcc1v2_phy>; + vdd2-supply = <&vcc3v3_sys>; + + }; + + hub_3_0: hub@2 { + compatible = "usb4b4,6500", "usb4b4,6504"; + reg = <2>; + peer-hub = <&hub_2_0>; + reset-gpios = <&gpio4 RK_PA3 GPIO_ACTIVE_HIGH>; + vdd-supply = <&vcc1v2_phy>; + vdd2-supply = <&vcc3v3_sys>; + }; }; &usb_host1_ehci {

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] arm64: dts: rockchip: fix internal USB hub instability on" failed to apply to 6.1-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.1-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.1.y git checkout FETCH_HEAD git cherry-pick -x d7cc532df95f7f159e40595440e4e4b99481457b # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060235-unroll-candy-0261@gregkh' --subject-prefix 'PATCH 6.1.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From d7cc532df95f7f159e40595440e4e4b99481457b Mon Sep 17 00:00:00 2001 From: Lukasz Czechowski <lukasz.czechowski(a)thaumatec.com> Date: Fri, 25 Apr 2025 17:18:08 +0200 Subject: [PATCH] arm64: dts: rockchip: fix internal USB hub instability on RK3399 Puma MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Currently, the onboard Cypress CYUSB3304 USB hub is not defined in the device tree, and hub reset pin is provided as vcc5v0_host regulator to usb phy. This causes instability issues, as a result of improper reset duration. The fixed regulator device requests the GPIO during probe in its inactive state (except if regulator-boot-on property is set, in which case it is requested in the active state). Considering gpio is GPIO_ACTIVE_LOW for Puma, it means it’s driving it high. Then the regulator gets enabled (because regulator-always-on property), which drives it to its active state, meaning driving it low. The Cypress CYUSB3304 USB hub actually requires the reset to be asserted for at least 5 ms, which we cannot guarantee right now since there's no delay in the current config, meaning the hub may sometimes work or not. We could add delay as offered by fixed-regulator but let's rather fix this by using the proper way to model onboard USB hubs. Define hub_2_0 and hub_3_0 nodes, as the onboard Cypress hub consist of two 'logical' hubs, for USB2.0 and USB3.0. Use the 'reset-gpios' property of hub to assign reset pin instead of using regulator. Rename the vcc5v0_host regulator to cy3304_reset to be more meaningful. Pin is configured to output-high by default, which sets the hub in reset state during pin controller initialization. This allows to avoid double enumeration of devices in case the bootloader has setup the USB hub before the kernel. The vdd-supply and vdd2-supply properties in hub nodes are added to provide correct dt-bindings, although power supplies are always enabled based on HW design. Fixes: 2c66fc34e945 ("arm64: dts: rockchip: add RK3399-Q7 (Puma) SoM") Cc: stable(a)vger.kernel.org # 6.6 Cc: stable(a)vger.kernel.org # Backport of the patch in this series fixing product ID in onboard_dev_id_table in drivers/usb/misc/onboard_usb_dev.c driver Signed-off-by: Lukasz Czechowski <lukasz.czechowski(a)thaumatec.com> Link: https://lore.kernel.org/r/20250425-onboard_usb_dev-v2-3-4a76a474a010@thauma… Signed-off-by: Heiko Stuebner <heiko(a)sntech.de> diff --git a/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi b/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi index e00fbaa8acc1..314d9dfdba57 100644 --- a/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi +++ b/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi @@ -60,16 +60,6 @@ vcc3v3_sys: regulator-vcc3v3-sys { vin-supply = <&vcc5v0_sys>; }; - vcc5v0_host: regulator-vcc5v0-host { - compatible = "regulator-fixed"; - gpio = <&gpio4 RK_PA3 GPIO_ACTIVE_LOW>; - pinctrl-names = "default"; - pinctrl-0 = <&vcc5v0_host_en>; - regulator-name = "vcc5v0_host"; - regulator-always-on; - vin-supply = <&vcc5v0_sys>; - }; - vcc5v0_sys: regulator-vcc5v0-sys { compatible = "regulator-fixed"; regulator-name = "vcc5v0_sys"; @@ -527,10 +517,10 @@ pmic_int_l: pmic-int-l { }; }; - usb2 { - vcc5v0_host_en: vcc5v0-host-en { + usb { + cy3304_reset: cy3304-reset { rockchip,pins = - <4 RK_PA3 RK_FUNC_GPIO &pcfg_pull_none>; + <4 RK_PA3 RK_FUNC_GPIO &pcfg_output_high>; }; }; @@ -597,7 +587,6 @@ u2phy1_otg: otg-port { }; u2phy1_host: host-port { - phy-supply = <&vcc5v0_host>; status = "okay"; }; }; @@ -609,6 +598,29 @@ &usbdrd3_1 { &usbdrd_dwc3_1 { status = "okay"; dr_mode = "host"; + pinctrl-names = "default"; + pinctrl-0 = <&cy3304_reset>; + #address-cells = <1>; + #size-cells = <0>; + + hub_2_0: hub@1 { + compatible = "usb4b4,6502", "usb4b4,6506"; + reg = <1>; + peer-hub = <&hub_3_0>; + reset-gpios = <&gpio4 RK_PA3 GPIO_ACTIVE_HIGH>; + vdd-supply = <&vcc1v2_phy>; + vdd2-supply = <&vcc3v3_sys>; + + }; + + hub_3_0: hub@2 { + compatible = "usb4b4,6500", "usb4b4,6504"; + reg = <2>; + peer-hub = <&hub_2_0>; + reset-gpios = <&gpio4 RK_PA3 GPIO_ACTIVE_HIGH>; + vdd-supply = <&vcc1v2_phy>; + vdd2-supply = <&vcc3v3_sys>; + }; }; &usb_host1_ehci {

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] arm64: dts: rockchip: fix internal USB hub instability on" failed to apply to 6.6-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.6-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.6.y git checkout FETCH_HEAD git cherry-pick -x d7cc532df95f7f159e40595440e4e4b99481457b # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060233-umpire-askew-5f0b@gregkh' --subject-prefix 'PATCH 6.6.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From d7cc532df95f7f159e40595440e4e4b99481457b Mon Sep 17 00:00:00 2001 From: Lukasz Czechowski <lukasz.czechowski(a)thaumatec.com> Date: Fri, 25 Apr 2025 17:18:08 +0200 Subject: [PATCH] arm64: dts: rockchip: fix internal USB hub instability on RK3399 Puma MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Currently, the onboard Cypress CYUSB3304 USB hub is not defined in the device tree, and hub reset pin is provided as vcc5v0_host regulator to usb phy. This causes instability issues, as a result of improper reset duration. The fixed regulator device requests the GPIO during probe in its inactive state (except if regulator-boot-on property is set, in which case it is requested in the active state). Considering gpio is GPIO_ACTIVE_LOW for Puma, it means it’s driving it high. Then the regulator gets enabled (because regulator-always-on property), which drives it to its active state, meaning driving it low. The Cypress CYUSB3304 USB hub actually requires the reset to be asserted for at least 5 ms, which we cannot guarantee right now since there's no delay in the current config, meaning the hub may sometimes work or not. We could add delay as offered by fixed-regulator but let's rather fix this by using the proper way to model onboard USB hubs. Define hub_2_0 and hub_3_0 nodes, as the onboard Cypress hub consist of two 'logical' hubs, for USB2.0 and USB3.0. Use the 'reset-gpios' property of hub to assign reset pin instead of using regulator. Rename the vcc5v0_host regulator to cy3304_reset to be more meaningful. Pin is configured to output-high by default, which sets the hub in reset state during pin controller initialization. This allows to avoid double enumeration of devices in case the bootloader has setup the USB hub before the kernel. The vdd-supply and vdd2-supply properties in hub nodes are added to provide correct dt-bindings, although power supplies are always enabled based on HW design. Fixes: 2c66fc34e945 ("arm64: dts: rockchip: add RK3399-Q7 (Puma) SoM") Cc: stable(a)vger.kernel.org # 6.6 Cc: stable(a)vger.kernel.org # Backport of the patch in this series fixing product ID in onboard_dev_id_table in drivers/usb/misc/onboard_usb_dev.c driver Signed-off-by: Lukasz Czechowski <lukasz.czechowski(a)thaumatec.com> Link: https://lore.kernel.org/r/20250425-onboard_usb_dev-v2-3-4a76a474a010@thauma… Signed-off-by: Heiko Stuebner <heiko(a)sntech.de> diff --git a/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi b/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi index e00fbaa8acc1..314d9dfdba57 100644 --- a/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi +++ b/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi @@ -60,16 +60,6 @@ vcc3v3_sys: regulator-vcc3v3-sys { vin-supply = <&vcc5v0_sys>; }; - vcc5v0_host: regulator-vcc5v0-host { - compatible = "regulator-fixed"; - gpio = <&gpio4 RK_PA3 GPIO_ACTIVE_LOW>; - pinctrl-names = "default"; - pinctrl-0 = <&vcc5v0_host_en>; - regulator-name = "vcc5v0_host"; - regulator-always-on; - vin-supply = <&vcc5v0_sys>; - }; - vcc5v0_sys: regulator-vcc5v0-sys { compatible = "regulator-fixed"; regulator-name = "vcc5v0_sys"; @@ -527,10 +517,10 @@ pmic_int_l: pmic-int-l { }; }; - usb2 { - vcc5v0_host_en: vcc5v0-host-en { + usb { + cy3304_reset: cy3304-reset { rockchip,pins = - <4 RK_PA3 RK_FUNC_GPIO &pcfg_pull_none>; + <4 RK_PA3 RK_FUNC_GPIO &pcfg_output_high>; }; }; @@ -597,7 +587,6 @@ u2phy1_otg: otg-port { }; u2phy1_host: host-port { - phy-supply = <&vcc5v0_host>; status = "okay"; }; }; @@ -609,6 +598,29 @@ &usbdrd3_1 { &usbdrd_dwc3_1 { status = "okay"; dr_mode = "host"; + pinctrl-names = "default"; + pinctrl-0 = <&cy3304_reset>; + #address-cells = <1>; + #size-cells = <0>; + + hub_2_0: hub@1 { + compatible = "usb4b4,6502", "usb4b4,6506"; + reg = <1>; + peer-hub = <&hub_3_0>; + reset-gpios = <&gpio4 RK_PA3 GPIO_ACTIVE_HIGH>; + vdd-supply = <&vcc1v2_phy>; + vdd2-supply = <&vcc3v3_sys>; + + }; + + hub_3_0: hub@2 { + compatible = "usb4b4,6500", "usb4b4,6504"; + reg = <2>; + peer-hub = <&hub_2_0>; + reset-gpios = <&gpio4 RK_PA3 GPIO_ACTIVE_HIGH>; + vdd-supply = <&vcc1v2_phy>; + vdd2-supply = <&vcc3v3_sys>; + }; }; &usb_host1_ehci {

1 month, 1 week

1
0
0 0

FAILED: patch "[PATCH] arm64: dts: rockchip: fix internal USB hub instability on" failed to apply to 6.12-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.12-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.12.y git checkout FETCH_HEAD git cherry-pick -x d7cc532df95f7f159e40595440e4e4b99481457b # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025060232-saga-chatty-ea5b@gregkh' --subject-prefix 'PATCH 6.12.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From d7cc532df95f7f159e40595440e4e4b99481457b Mon Sep 17 00:00:00 2001 From: Lukasz Czechowski <lukasz.czechowski(a)thaumatec.com> Date: Fri, 25 Apr 2025 17:18:08 +0200 Subject: [PATCH] arm64: dts: rockchip: fix internal USB hub instability on RK3399 Puma MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Currently, the onboard Cypress CYUSB3304 USB hub is not defined in the device tree, and hub reset pin is provided as vcc5v0_host regulator to usb phy. This causes instability issues, as a result of improper reset duration. The fixed regulator device requests the GPIO during probe in its inactive state (except if regulator-boot-on property is set, in which case it is requested in the active state). Considering gpio is GPIO_ACTIVE_LOW for Puma, it means it’s driving it high. Then the regulator gets enabled (because regulator-always-on property), which drives it to its active state, meaning driving it low. The Cypress CYUSB3304 USB hub actually requires the reset to be asserted for at least 5 ms, which we cannot guarantee right now since there's no delay in the current config, meaning the hub may sometimes work or not. We could add delay as offered by fixed-regulator but let's rather fix this by using the proper way to model onboard USB hubs. Define hub_2_0 and hub_3_0 nodes, as the onboard Cypress hub consist of two 'logical' hubs, for USB2.0 and USB3.0. Use the 'reset-gpios' property of hub to assign reset pin instead of using regulator. Rename the vcc5v0_host regulator to cy3304_reset to be more meaningful. Pin is configured to output-high by default, which sets the hub in reset state during pin controller initialization. This allows to avoid double enumeration of devices in case the bootloader has setup the USB hub before the kernel. The vdd-supply and vdd2-supply properties in hub nodes are added to provide correct dt-bindings, although power supplies are always enabled based on HW design. Fixes: 2c66fc34e945 ("arm64: dts: rockchip: add RK3399-Q7 (Puma) SoM") Cc: stable(a)vger.kernel.org # 6.6 Cc: stable(a)vger.kernel.org # Backport of the patch in this series fixing product ID in onboard_dev_id_table in drivers/usb/misc/onboard_usb_dev.c driver Signed-off-by: Lukasz Czechowski <lukasz.czechowski(a)thaumatec.com> Link: https://lore.kernel.org/r/20250425-onboard_usb_dev-v2-3-4a76a474a010@thauma… Signed-off-by: Heiko Stuebner <heiko(a)sntech.de> diff --git a/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi b/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi index e00fbaa8acc1..314d9dfdba57 100644 --- a/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi +++ b/arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi @@ -60,16 +60,6 @@ vcc3v3_sys: regulator-vcc3v3-sys { vin-supply = <&vcc5v0_sys>; }; - vcc5v0_host: regulator-vcc5v0-host { - compatible = "regulator-fixed"; - gpio = <&gpio4 RK_PA3 GPIO_ACTIVE_LOW>; - pinctrl-names = "default"; - pinctrl-0 = <&vcc5v0_host_en>; - regulator-name = "vcc5v0_host"; - regulator-always-on; - vin-supply = <&vcc5v0_sys>; - }; - vcc5v0_sys: regulator-vcc5v0-sys { compatible = "regulator-fixed"; regulator-name = "vcc5v0_sys"; @@ -527,10 +517,10 @@ pmic_int_l: pmic-int-l { }; }; - usb2 { - vcc5v0_host_en: vcc5v0-host-en { + usb { + cy3304_reset: cy3304-reset { rockchip,pins = - <4 RK_PA3 RK_FUNC_GPIO &pcfg_pull_none>; + <4 RK_PA3 RK_FUNC_GPIO &pcfg_output_high>; }; }; @@ -597,7 +587,6 @@ u2phy1_otg: otg-port { }; u2phy1_host: host-port { - phy-supply = <&vcc5v0_host>; status = "okay"; }; }; @@ -609,6 +598,29 @@ &usbdrd3_1 { &usbdrd_dwc3_1 { status = "okay"; dr_mode = "host"; + pinctrl-names = "default"; + pinctrl-0 = <&cy3304_reset>; + #address-cells = <1>; + #size-cells = <0>; + + hub_2_0: hub@1 { + compatible = "usb4b4,6502", "usb4b4,6506"; + reg = <1>; + peer-hub = <&hub_3_0>; + reset-gpios = <&gpio4 RK_PA3 GPIO_ACTIVE_HIGH>; + vdd-supply = <&vcc1v2_phy>; + vdd2-supply = <&vcc3v3_sys>; + + }; + + hub_3_0: hub@2 { + compatible = "usb4b4,6500", "usb4b4,6504"; + reg = <2>; + peer-hub = <&hub_2_0>; + reset-gpios = <&gpio4 RK_PA3 GPIO_ACTIVE_HIGH>; + vdd-supply = <&vcc1v2_phy>; + vdd2-supply = <&vcc3v3_sys>; + }; }; &usb_host1_ehci {

1 month, 1 week

1
0
0 0

[PATCH 6.1.y v2] selftests/vm: fix split huge page tests

by Guangming Wang

From: Zi Yan <ziy(a)nvidia.com> [ upstream commit dd63bd7df41a8f9393a2e3ff9157a441c08eb996 ] Fix two inputs to check_anon_huge() and one if condition, so the tests work as expected. Steps to reproduce the issue. make headers make -C tools/testing/selftests/vm Before patching:test fails with a non-zero exit code ~/linux$ sudo tools/testing/selftests/vm/split_huge_page_test \ > /dev/null 2>&1;echo $? 1 ~/linux$ ./split_huge_page_test No THP is allocated After patching: ~/linux$ sudo tools/testing/selftests/vm/split_huge_page_test \ > /dev/null 2>&1;echo $? 0 ~/linux$ sudo tools/testing/selftests/vm/split_huge_page_test Split huge pages successful ... Link: https://lkml.kernel.org/r/20230306160907.16804-1-zi.yan@sent.com Fixes: c07c343cda8e ("selftests/vm: dedup THP helpers") Cc: stable(a)vger.kernel.org Signed-off-by: Zi Yan <ziy(a)nvidia.com> Reviewed-by: Zach O'Keefe <zokeefe(a)google.com> Tested-by: Zach O'Keefe <zokeefe(a)google.com> Acked-by: David Hildenbrand <david(a)redhat.com> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> Signed-off-by: Guangming Wang <guangming.wang(a)windriver.com> --- tools/testing/selftests/vm/split_huge_page_test.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/tools/testing/selftests/vm/split_huge_page_test.c b/tools/testing/selftests/vm/split_huge_page_test.c index 76e1c36dd..b8558c7f1 100644 --- a/tools/testing/selftests/vm/split_huge_page_test.c +++ b/tools/testing/selftests/vm/split_huge_page_test.c @@ -106,7 +106,7 @@ void split_pmd_thp(void) for (i = 0; i < len; i++) one_page[i] = (char)i; - if (!check_huge_anon(one_page, 1, pmd_pagesize)) { + if (!check_huge_anon(one_page, 4, pmd_pagesize)) { printf("No THP is allocated\n"); exit(EXIT_FAILURE); } @@ -122,7 +122,7 @@ void split_pmd_thp(void) } - if (check_huge_anon(one_page, 0, pmd_pagesize)) { + if (!check_huge_anon(one_page, 0, pmd_pagesize)) { printf("Still AnonHugePages not split\n"); exit(EXIT_FAILURE); } @@ -169,7 +169,7 @@ void split_pte_mapped_thp(void) for (i = 0; i < len; i++) one_page[i] = (char)i; - if (!check_huge_anon(one_page, 1, pmd_pagesize)) { + if (!check_huge_anon(one_page, 4, pmd_pagesize)) { printf("No THP is allocated\n"); exit(EXIT_FAILURE); } -- 2.34.1

1 month, 1 week

3
2
0 0

[PATCH v2] mm: userfaultfd: fix race of userfaultfd_move and swap cache

by Kairui Song

From: Kairui Song <kasong(a)tencent.com> On seeing a swap entry PTE, userfaultfd_move does a lockless swap cache lookup, and try to move the found folio to the faulting vma when. Currently, it relies on the PTE value check to ensure the moved folio still belongs to the src swap entry, which turns out is not reliable. While working and reviewing the swap table series with Barry, following existing race is observed and reproduced [1]: ( move_pages_pte is moving src_pte to dst_pte, where src_pte is a swap entry PTE holding swap entry S1, and S1 isn't in the swap cache.) CPU1 CPU2 userfaultfd_move move_pages_pte() entry = pte_to_swp_entry(orig_src_pte); // Here it got entry = S1 ... < Somehow interrupted> ... <swapin src_pte, alloc and use folio A> // folio A is just a new allocated folio // and get installed into src_pte <frees swap entry S1> // src_pte now points to folio A, S1 // has swap count == 0, it can be freed // by folio_swap_swap or swap // allocator's reclaim. <try to swap out another folio B> // folio B is a folio in another VMA. <put folio B to swap cache using S1 > // S1 is freed, folio B could use it // for swap out with no problem. ... folio = filemap_get_folio(S1) // Got folio B here !!! ... < Somehow interrupted again> ... <swapin folio B and free S1> // Now S1 is free to be used again. <swapout src_pte & folio A using S1> // Now src_pte is a swap entry pte // holding S1 again. folio_trylock(folio) move_swap_pte double_pt_lock is_pte_pages_stable // Check passed because src_pte == S1 folio_move_anon_rmap(...) // Moved invalid folio B here !!! The race window is very short and requires multiple collisions of multiple rare events, so it's very unlikely to happen, but with a deliberately constructed reproducer and increased time window, it can be reproduced [1]. It's also possible that folio (A) is swapped in, and swapped out again after the filemap_get_folio lookup, in such case folio (A) may stay in swap cache so it needs to be moved too. In this case we should also try again so kernel won't miss a folio move. Fix this by checking if the folio is the valid swap cache folio after acquiring the folio lock, and checking the swap cache again after acquiring the src_pte lock. SWP_SYNCRHONIZE_IO path does make the problem more complex, but so far we don't need to worry about that since folios only might get exposed to swap cache in the swap out path, and it's covered in this patch too by checking the swap cache again after acquiring src_pte lock. Testing with a simple C program to allocate and move several GB of memory did not show any observable performance change. Cc: <stable(a)vger.kernel.org> Fixes: adef440691ba ("userfaultfd: UFFDIO_MOVE uABI") Closes: https://lore.kernel.org/linux-mm/CAMgjq7B1K=6OOrK2OUZ0-tqCzi+EJt+2_K97TPGoS… [1] Signed-off-by: Kairui Song <kasong(a)tencent.com> --- V1: https://lore.kernel.org/linux-mm/20250530201710.81365-1-ryncsn@gmail.com/ Changes: - Check swap_map instead of doing a filemap lookup after acquiring the PTE lock to minimize critical section overhead [ Barry Song, Lokesh Gidra ] mm/userfaultfd.c | 27 +++++++++++++++++++++++++-- 1 file changed, 25 insertions(+), 2 deletions(-) diff --git a/mm/userfaultfd.c b/mm/userfaultfd.c index bc473ad21202..a74ede04996c 100644 --- a/mm/userfaultfd.c +++ b/mm/userfaultfd.c @@ -1084,8 +1084,11 @@ static int move_swap_pte(struct mm_struct *mm, struct vm_area_struct *dst_vma, pte_t orig_dst_pte, pte_t orig_src_pte, pmd_t *dst_pmd, pmd_t dst_pmdval, spinlock_t *dst_ptl, spinlock_t *src_ptl, - struct folio *src_folio) + struct folio *src_folio, + struct swap_info_struct *si) { + swp_entry_t entry; + double_pt_lock(dst_ptl, src_ptl); if (!is_pte_pages_stable(dst_pte, src_pte, orig_dst_pte, orig_src_pte, @@ -1102,6 +1105,16 @@ static int move_swap_pte(struct mm_struct *mm, struct vm_area_struct *dst_vma, if (src_folio) { folio_move_anon_rmap(src_folio, dst_vma); src_folio->index = linear_page_index(dst_vma, dst_addr); + } else { + /* + * Check if the swap entry is cached after acquiring the src_pte + * lock. Or we might miss a new loaded swap cache folio. + */ + entry = pte_to_swp_entry(orig_src_pte); + if (si->swap_map[swp_offset(entry)] & SWAP_HAS_CACHE) { + double_pt_unlock(dst_ptl, src_ptl); + return -EAGAIN; + } } orig_src_pte = ptep_get_and_clear(mm, src_addr, src_pte); @@ -1409,10 +1422,20 @@ static int move_pages_pte(struct mm_struct *mm, pmd_t *dst_pmd, pmd_t *src_pmd, folio_lock(src_folio); goto retry; } + /* + * Check if the folio still belongs to the target swap entry after + * acquiring the lock. Folio can be freed in the swap cache while + * not locked. + */ + if (unlikely(!folio_test_swapcache(folio) || + entry.val != folio->swap.val)) { + err = -EAGAIN; + goto out; + } } err = move_swap_pte(mm, dst_vma, dst_addr, src_addr, dst_pte, src_pte, orig_dst_pte, orig_src_pte, dst_pmd, dst_pmdval, - dst_ptl, src_ptl, src_folio); + dst_ptl, src_ptl, src_folio, si); } out: -- 2.49.0

1 month, 1 week

3
3
0 0

[PATCH] mm: Fix vmstat after removing NR_BOUNCE

by Kirill A. Shutemov

Hongyu noticed that the nr_unaccepted counter kept growing even in the absence of unaccepted memory on the machine. This happens due to a commit that removed NR_BOUNCE: it removed the counter from the enum zone_stat_item, but left it in the vmstat_text array. As a result, all counters below nr_bounce in /proc/vmstat are shifted by one line, causing the numa_hit counter to be labeled as nr_unaccepted. To fix this issue, remove nr_bounce from the vmstat_text array. Signed-off-by: Kirill A. Shutemov <kirill.shutemov(a)linux.intel.com> Reported-by: Hongyu Ning <hongyu.ning(a)linux.intel.com> Fixes: 194df9f66db8 ("mm: remove NR_BOUNCE zone stat") Cc: stable(a)vger.kernel.org Cc: Christoph Hellwig <hch(a)lst.de> Cc: Hannes Reinecke <hare(a)suse.de> Cc: Johannes Thumshirn <johannes.thumshirn(a)wdc.com> Cc: Jens Axboe <axboe(a)kernel.dk> --- mm/vmstat.c | 1 - 1 file changed, 1 deletion(-) diff --git a/mm/vmstat.c b/mm/vmstat.c index 4c268ce39ff2..ae9882063d89 100644 --- a/mm/vmstat.c +++ b/mm/vmstat.c @@ -1201,7 +1201,6 @@ const char * const vmstat_text[] = { "nr_zone_unevictable", "nr_zone_write_pending", "nr_mlock", - "nr_bounce", #if IS_ENABLED(CONFIG_ZSMALLOC) "nr_zspages", #endif -- 2.47.2

1 month, 1 week

8
11
0 0

Re: [PATCH v4] virtio_blk: Fix disk deletion hang on device surprise removal

by ALOK TIWARI

On 31-05-2025 11:03, Parav Pandit wrote: > + if (!virtqueue_is_broken(vblk->vqs[0].vq)) is it call, if the virtqueue is not broken ? > + virtblk_cleanup_broken_device(vblk); > + > del_gendisk(vblk->disk); > blk_mq_free_tag_set(&vblk->tag_set); Thanks, Alok

1 month, 1 week

2
1
0 0

[PATCH AUTOSEL 5.4 01/22] drm/amdgpu/gfx6: fix CSIB handling

by Sasha Levin

From: Alex Deucher <alexander.deucher(a)amd.com> [ Upstream commit 8307ebc15c1ea98a8a0b7837af1faa6c01514577 ] We shouldn't return after the last section. We need to update the rest of the CSIB. Reviewed-by: Rodrigo Siqueira <siqueira(a)igalia.com> Signed-off-by: Alex Deucher <alexander.deucher(a)amd.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- Now let me understand what the bug is. Looking at the original code: ```c for (sect = adev->gfx.rlc.cs_data; sect->section != NULL; ++sect) { for (ext = sect->section; ext->extent != NULL; ++ext) { if (sect->id == SECT_CONTEXT) { // process SECT_CONTEXT sections } else { return; // BUG: This returns early, skipping remaining code } } } // Important code that should always run: buffer[count++] = cpu_to_le32(PACKET3(PACKET3_SET_CONTEXT_REG, 1)); buffer[count++] = cpu_to_le32(mmPA_SC_RASTER_CONFIG - PACKET3_SET_CONTEXT_REG_START); // ... more important buffer initialization ``` The fix removes the early return so that all sections are processed and the important buffer initialization at the end always runs. **YES** This commit should be backported to stable kernel trees for the following reasons: 1. **Clear Bug Fix**: The commit fixes a clear logic error where an early return statement prevents critical buffer initialization code from executing. The original code would return immediately when encountering a non- SECT_CONTEXT section, skipping the important packet commands that should always be written to the buffer (PACKET3_SET_CONTEXT_REG, PACKET3_PREAMBLE_END_CLEAR_STATE, PACKET3_CLEAR_STATE). 2. **Functional Impact**: This bug affects the Clear State Indirect Buffer (CSIB) handling in AMD GPU driver for GFX6 hardware. The incomplete buffer initialization could lead to: - Incorrect GPU state during graphics operations - Potential rendering issues or GPU hangs - Inconsistent hardware behavior 3. **Small and Contained Fix**: The fix is minimal - it simply removes two lines (the else block with return statement). This is a low-risk change that doesn't introduce new functionality or alter the architecture. 4. **Hardware-Specific Bug**: This affects real users with GFX6 AMD GPUs. The bug prevents proper initialization of the GPU's clear state buffer, which is essential for correct GPU operation. 5. **Similar to Historical Backports**: Looking at commit 4 in the similar commits (marked as YES for backporting), which also fixed preamble handling issues in the AMD GPU driver, this follows a similar pattern of fixing command buffer handling bugs. The commit message clearly indicates this is a bug fix ("We shouldn't return after the last section. We need to update the rest of the CSIB"), and the code change confirms that critical buffer initialization was being skipped due to the premature return. drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c | 2 -- 1 file changed, 2 deletions(-) diff --git a/drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c b/drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c index 7f0a63628c43a..eac329fe27902 100644 --- a/drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c +++ b/drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c @@ -2901,8 +2901,6 @@ static void gfx_v6_0_get_csb_buffer(struct amdgpu_device *adev, buffer[count++] = cpu_to_le32(ext->reg_index - 0xa000); for (i = 0; i < ext->reg_count; i++) buffer[count++] = cpu_to_le32(ext->extent[i]); - } else { - return; } } } -- 2.39.5

1 month, 1 week

1
21
0 0

[PATCH AUTOSEL 5.10 01/34] drm/amdgpu/gfx6: fix CSIB handling

by Sasha Levin

From: Alex Deucher <alexander.deucher(a)amd.com> [ Upstream commit 8307ebc15c1ea98a8a0b7837af1faa6c01514577 ] We shouldn't return after the last section. We need to update the rest of the CSIB. Reviewed-by: Rodrigo Siqueira <siqueira(a)igalia.com> Signed-off-by: Alex Deucher <alexander.deucher(a)amd.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- Now let me understand what the bug is. Looking at the original code: ```c for (sect = adev->gfx.rlc.cs_data; sect->section != NULL; ++sect) { for (ext = sect->section; ext->extent != NULL; ++ext) { if (sect->id == SECT_CONTEXT) { // process SECT_CONTEXT sections } else { return; // BUG: This returns early, skipping remaining code } } } // Important code that should always run: buffer[count++] = cpu_to_le32(PACKET3(PACKET3_SET_CONTEXT_REG, 1)); buffer[count++] = cpu_to_le32(mmPA_SC_RASTER_CONFIG - PACKET3_SET_CONTEXT_REG_START); // ... more important buffer initialization ``` The fix removes the early return so that all sections are processed and the important buffer initialization at the end always runs. **YES** This commit should be backported to stable kernel trees for the following reasons: 1. **Clear Bug Fix**: The commit fixes a clear logic error where an early return statement prevents critical buffer initialization code from executing. The original code would return immediately when encountering a non- SECT_CONTEXT section, skipping the important packet commands that should always be written to the buffer (PACKET3_SET_CONTEXT_REG, PACKET3_PREAMBLE_END_CLEAR_STATE, PACKET3_CLEAR_STATE). 2. **Functional Impact**: This bug affects the Clear State Indirect Buffer (CSIB) handling in AMD GPU driver for GFX6 hardware. The incomplete buffer initialization could lead to: - Incorrect GPU state during graphics operations - Potential rendering issues or GPU hangs - Inconsistent hardware behavior 3. **Small and Contained Fix**: The fix is minimal - it simply removes two lines (the else block with return statement). This is a low-risk change that doesn't introduce new functionality or alter the architecture. 4. **Hardware-Specific Bug**: This affects real users with GFX6 AMD GPUs. The bug prevents proper initialization of the GPU's clear state buffer, which is essential for correct GPU operation. 5. **Similar to Historical Backports**: Looking at commit 4 in the similar commits (marked as YES for backporting), which also fixed preamble handling issues in the AMD GPU driver, this follows a similar pattern of fixing command buffer handling bugs. The commit message clearly indicates this is a bug fix ("We shouldn't return after the last section. We need to update the rest of the CSIB"), and the code change confirms that critical buffer initialization was being skipped due to the premature return. drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c | 2 -- 1 file changed, 2 deletions(-) diff --git a/drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c b/drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c index 79c52c7a02e3a..d447b2416b98b 100644 --- a/drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c +++ b/drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c @@ -2896,8 +2896,6 @@ static void gfx_v6_0_get_csb_buffer(struct amdgpu_device *adev, buffer[count++] = cpu_to_le32(ext->reg_index - 0xa000); for (i = 0; i < ext->reg_count; i++) buffer[count++] = cpu_to_le32(ext->extent[i]); - } else { - return; } } } -- 2.39.5

1 month, 1 week

1
33
0 0

[PATCH AUTOSEL 5.15 01/43] drm/amdgpu/gfx6: fix CSIB handling

by Sasha Levin

From: Alex Deucher <alexander.deucher(a)amd.com> [ Upstream commit 8307ebc15c1ea98a8a0b7837af1faa6c01514577 ] We shouldn't return after the last section. We need to update the rest of the CSIB. Reviewed-by: Rodrigo Siqueira <siqueira(a)igalia.com> Signed-off-by: Alex Deucher <alexander.deucher(a)amd.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- Now let me understand what the bug is. Looking at the original code: ```c for (sect = adev->gfx.rlc.cs_data; sect->section != NULL; ++sect) { for (ext = sect->section; ext->extent != NULL; ++ext) { if (sect->id == SECT_CONTEXT) { // process SECT_CONTEXT sections } else { return; // BUG: This returns early, skipping remaining code } } } // Important code that should always run: buffer[count++] = cpu_to_le32(PACKET3(PACKET3_SET_CONTEXT_REG, 1)); buffer[count++] = cpu_to_le32(mmPA_SC_RASTER_CONFIG - PACKET3_SET_CONTEXT_REG_START); // ... more important buffer initialization ``` The fix removes the early return so that all sections are processed and the important buffer initialization at the end always runs. **YES** This commit should be backported to stable kernel trees for the following reasons: 1. **Clear Bug Fix**: The commit fixes a clear logic error where an early return statement prevents critical buffer initialization code from executing. The original code would return immediately when encountering a non- SECT_CONTEXT section, skipping the important packet commands that should always be written to the buffer (PACKET3_SET_CONTEXT_REG, PACKET3_PREAMBLE_END_CLEAR_STATE, PACKET3_CLEAR_STATE). 2. **Functional Impact**: This bug affects the Clear State Indirect Buffer (CSIB) handling in AMD GPU driver for GFX6 hardware. The incomplete buffer initialization could lead to: - Incorrect GPU state during graphics operations - Potential rendering issues or GPU hangs - Inconsistent hardware behavior 3. **Small and Contained Fix**: The fix is minimal - it simply removes two lines (the else block with return statement). This is a low-risk change that doesn't introduce new functionality or alter the architecture. 4. **Hardware-Specific Bug**: This affects real users with GFX6 AMD GPUs. The bug prevents proper initialization of the GPU's clear state buffer, which is essential for correct GPU operation. 5. **Similar to Historical Backports**: Looking at commit 4 in the similar commits (marked as YES for backporting), which also fixed preamble handling issues in the AMD GPU driver, this follows a similar pattern of fixing command buffer handling bugs. The commit message clearly indicates this is a bug fix ("We shouldn't return after the last section. We need to update the rest of the CSIB"), and the code change confirms that critical buffer initialization was being skipped due to the premature return. drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c | 2 -- 1 file changed, 2 deletions(-) diff --git a/drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c b/drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c index 6a8dadea40f92..79074d22959b9 100644 --- a/drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c +++ b/drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c @@ -2897,8 +2897,6 @@ static void gfx_v6_0_get_csb_buffer(struct amdgpu_device *adev, buffer[count++] = cpu_to_le32(ext->reg_index - 0xa000); for (i = 0; i < ext->reg_count; i++) buffer[count++] = cpu_to_le32(ext->extent[i]); - } else { - return; } } } -- 2.39.5

1 month, 1 week

1
42
0 0

[PATCH AUTOSEL 6.1 01/58] drm/amdgpu/gfx6: fix CSIB handling

by Sasha Levin

From: Alex Deucher <alexander.deucher(a)amd.com> [ Upstream commit 8307ebc15c1ea98a8a0b7837af1faa6c01514577 ] We shouldn't return after the last section. We need to update the rest of the CSIB. Reviewed-by: Rodrigo Siqueira <siqueira(a)igalia.com> Signed-off-by: Alex Deucher <alexander.deucher(a)amd.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- Now let me understand what the bug is. Looking at the original code: ```c for (sect = adev->gfx.rlc.cs_data; sect->section != NULL; ++sect) { for (ext = sect->section; ext->extent != NULL; ++ext) { if (sect->id == SECT_CONTEXT) { // process SECT_CONTEXT sections } else { return; // BUG: This returns early, skipping remaining code } } } // Important code that should always run: buffer[count++] = cpu_to_le32(PACKET3(PACKET3_SET_CONTEXT_REG, 1)); buffer[count++] = cpu_to_le32(mmPA_SC_RASTER_CONFIG - PACKET3_SET_CONTEXT_REG_START); // ... more important buffer initialization ``` The fix removes the early return so that all sections are processed and the important buffer initialization at the end always runs. **YES** This commit should be backported to stable kernel trees for the following reasons: 1. **Clear Bug Fix**: The commit fixes a clear logic error where an early return statement prevents critical buffer initialization code from executing. The original code would return immediately when encountering a non- SECT_CONTEXT section, skipping the important packet commands that should always be written to the buffer (PACKET3_SET_CONTEXT_REG, PACKET3_PREAMBLE_END_CLEAR_STATE, PACKET3_CLEAR_STATE). 2. **Functional Impact**: This bug affects the Clear State Indirect Buffer (CSIB) handling in AMD GPU driver for GFX6 hardware. The incomplete buffer initialization could lead to: - Incorrect GPU state during graphics operations - Potential rendering issues or GPU hangs - Inconsistent hardware behavior 3. **Small and Contained Fix**: The fix is minimal - it simply removes two lines (the else block with return statement). This is a low-risk change that doesn't introduce new functionality or alter the architecture. 4. **Hardware-Specific Bug**: This affects real users with GFX6 AMD GPUs. The bug prevents proper initialization of the GPU's clear state buffer, which is essential for correct GPU operation. 5. **Similar to Historical Backports**: Looking at commit 4 in the similar commits (marked as YES for backporting), which also fixed preamble handling issues in the AMD GPU driver, this follows a similar pattern of fixing command buffer handling bugs. The commit message clearly indicates this is a bug fix ("We shouldn't return after the last section. We need to update the rest of the CSIB"), and the code change confirms that critical buffer initialization was being skipped due to the premature return. drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c | 2 -- 1 file changed, 2 deletions(-) diff --git a/drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c b/drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c index 204b246f0e3f9..0219f1175c078 100644 --- a/drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c +++ b/drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c @@ -2873,8 +2873,6 @@ static void gfx_v6_0_get_csb_buffer(struct amdgpu_device *adev, buffer[count++] = cpu_to_le32(ext->reg_index - 0xa000); for (i = 0; i < ext->reg_count; i++) buffer[count++] = cpu_to_le32(ext->extent[i]); - } else { - return; } } } -- 2.39.5

1 month, 1 week

1
57
0 0

[PATCH AUTOSEL 6.6 01/66] drm/amdgpu/gfx6: fix CSIB handling

by Sasha Levin

From: Alex Deucher <alexander.deucher(a)amd.com> [ Upstream commit 8307ebc15c1ea98a8a0b7837af1faa6c01514577 ] We shouldn't return after the last section. We need to update the rest of the CSIB. Reviewed-by: Rodrigo Siqueira <siqueira(a)igalia.com> Signed-off-by: Alex Deucher <alexander.deucher(a)amd.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- Now let me understand what the bug is. Looking at the original code: ```c for (sect = adev->gfx.rlc.cs_data; sect->section != NULL; ++sect) { for (ext = sect->section; ext->extent != NULL; ++ext) { if (sect->id == SECT_CONTEXT) { // process SECT_CONTEXT sections } else { return; // BUG: This returns early, skipping remaining code } } } // Important code that should always run: buffer[count++] = cpu_to_le32(PACKET3(PACKET3_SET_CONTEXT_REG, 1)); buffer[count++] = cpu_to_le32(mmPA_SC_RASTER_CONFIG - PACKET3_SET_CONTEXT_REG_START); // ... more important buffer initialization ``` The fix removes the early return so that all sections are processed and the important buffer initialization at the end always runs. **YES** This commit should be backported to stable kernel trees for the following reasons: 1. **Clear Bug Fix**: The commit fixes a clear logic error where an early return statement prevents critical buffer initialization code from executing. The original code would return immediately when encountering a non- SECT_CONTEXT section, skipping the important packet commands that should always be written to the buffer (PACKET3_SET_CONTEXT_REG, PACKET3_PREAMBLE_END_CLEAR_STATE, PACKET3_CLEAR_STATE). 2. **Functional Impact**: This bug affects the Clear State Indirect Buffer (CSIB) handling in AMD GPU driver for GFX6 hardware. The incomplete buffer initialization could lead to: - Incorrect GPU state during graphics operations - Potential rendering issues or GPU hangs - Inconsistent hardware behavior 3. **Small and Contained Fix**: The fix is minimal - it simply removes two lines (the else block with return statement). This is a low-risk change that doesn't introduce new functionality or alter the architecture. 4. **Hardware-Specific Bug**: This affects real users with GFX6 AMD GPUs. The bug prevents proper initialization of the GPU's clear state buffer, which is essential for correct GPU operation. 5. **Similar to Historical Backports**: Looking at commit 4 in the similar commits (marked as YES for backporting), which also fixed preamble handling issues in the AMD GPU driver, this follows a similar pattern of fixing command buffer handling bugs. The commit message clearly indicates this is a bug fix ("We shouldn't return after the last section. We need to update the rest of the CSIB"), and the code change confirms that critical buffer initialization was being skipped due to the premature return. drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c | 2 -- 1 file changed, 2 deletions(-) diff --git a/drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c b/drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c index 34f9211b26793..80316297374cc 100644 --- a/drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c +++ b/drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c @@ -2860,8 +2860,6 @@ static void gfx_v6_0_get_csb_buffer(struct amdgpu_device *adev, buffer[count++] = cpu_to_le32(ext->reg_index - 0xa000); for (i = 0; i < ext->reg_count; i++) buffer[count++] = cpu_to_le32(ext->extent[i]); - } else { - return; } } } -- 2.39.5

1 month, 1 week

1
65
0 0

[PATCH AUTOSEL 6.12 01/93] drm/amd/display: disable DPP RCG before DPP CLK enable

by Sasha Levin

From: Charlene Liu <Charlene.Liu(a)amd.com> [ Upstream commit 1bcd679209420305a86833bc357d50021909edaf ] [why] DPP CLK enable needs to disable DPPCLK RCG first. The DPPCLK_en in dccg should always be enabled when the corresponding pipe is enabled. Reviewed-by: Hansen Dsouza <hansen.dsouza(a)amd.com> Signed-off-by: Charlene Liu <Charlene.Liu(a)amd.com> Signed-off-by: Ray Wu <ray.wu(a)amd.com> Tested-by: Daniel Wheeler <daniel.wheeler(a)amd.com> Signed-off-by: Alex Deucher <alexander.deucher(a)amd.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- Based on my analysis of both the commit message and code changes, my answer is: **YES** This commit should be backported to stable kernel trees for the following reasons: ## Critical Hardware Sequencing Fix The commit addresses a fundamental hardware sequencing requirement where DPP (Display Pipes and Planes) Root Clock Gating (RCG) must be disabled before enabling the DPP clock. This is a critical timing constraint that, if violated, can cause severe system issues. ## Specific Code Evidence 1. **In `dccg35_update_dpp_dto()`**, the fix adds a crucial sequencing step: ```c + dccg35_set_dppclk_rcg(dccg, dpp_inst, false); REG_SET_2(DPPCLK_DTO_PARAM[dpp_inst], 0, DPPCLK0_DTO_PHASE, phase, DPPCLK0_DTO_MODULO, modulo); dcn35_set_dppclk_enable(dccg, dpp_inst, true); ``` This ensures RCG is disabled (false) before enabling the DPP clock. 2. **In `dcn35_enable_plane()`**, explicit clock control is added: ```c + /*make sure DPPCLK is on*/ + dccg->funcs->dccg_root_gate_disable_control(dccg, dpp->inst, true); + dpp->funcs->dpp_dppclk_control(dpp, false, true); ``` 3. **Removal of problematic init code** in `dcn35_init_hw()`: ```c - if (res_pool->dccg->funcs->dccg_root_gate_disable_control) { - for (i = 0; i < res_pool->pipe_count; i++) - res_pool->dccg->funcs->dccg_root_gate_disable_control(res_pool->dccg, i, 0); - } ``` ## Similarity to Previous Critical Fixes This commit follows the pattern of Similar Commit #1, which also addressed clock gating sequencing issues that could cause system hangs. The commit message explicitly states this is needed because "DPP CLK enable needs to disable DPPCLK RCG first." ## Impact and Risk Assessment - **Bug Fixed**: Incorrect clock sequencing that can cause system instability - **Scope**: Limited to DCN35 display hardware (recent AMD GPUs) - **Complexity**: Small, focused changes with clear purpose - **Risk**: Low risk of regression - adds proper sequencing without major architectural changes This fix meets all criteria for stable backporting: - Fixes a real bug affecting users (system stability) - Small and contained changes - No new features or architectural changes - Addresses hardware constraints that cannot be worked around The commit should be backported to all stable kernels that include DCN35 display support to ensure proper display functionality and system stability for users with affected AMD GPUs. .../amd/display/dc/dccg/dcn35/dcn35_dccg.c | 38 ++++++++++++------- .../amd/display/dc/hwss/dcn35/dcn35_hwseq.c | 21 ++++++---- 2 files changed, 38 insertions(+), 21 deletions(-) diff --git a/drivers/gpu/drm/amd/display/dc/dccg/dcn35/dcn35_dccg.c b/drivers/gpu/drm/amd/display/dc/dccg/dcn35/dcn35_dccg.c index b363f5360818d..ad910065f463f 100644 --- a/drivers/gpu/drm/amd/display/dc/dccg/dcn35/dcn35_dccg.c +++ b/drivers/gpu/drm/amd/display/dc/dccg/dcn35/dcn35_dccg.c @@ -391,6 +391,7 @@ static void dccg35_set_dppclk_rcg(struct dccg *dccg, struct dcn_dccg *dccg_dcn = TO_DCN_DCCG(dccg); + if (!dccg->ctx->dc->debug.root_clock_optimization.bits.dpp && enable) return; @@ -411,6 +412,8 @@ static void dccg35_set_dppclk_rcg(struct dccg *dccg, BREAK_TO_DEBUGGER(); break; } + //DC_LOG_DEBUG("%s: inst(%d) DPPCLK rcg_disable: %d\n", __func__, inst, enable ? 0 : 1); + } static void dccg35_set_dpstreamclk_rcg( @@ -1112,30 +1115,24 @@ static void dcn35_set_dppclk_enable(struct dccg *dccg, { struct dcn_dccg *dccg_dcn = TO_DCN_DCCG(dccg); + switch (dpp_inst) { case 0: REG_UPDATE(DPPCLK_CTRL, DPPCLK0_EN, enable); - if (dccg->ctx->dc->debug.root_clock_optimization.bits.dpp) - REG_UPDATE(DCCG_GATE_DISABLE_CNTL6, DPPCLK0_ROOT_GATE_DISABLE, enable); break; case 1: REG_UPDATE(DPPCLK_CTRL, DPPCLK1_EN, enable); - if (dccg->ctx->dc->debug.root_clock_optimization.bits.dpp) - REG_UPDATE(DCCG_GATE_DISABLE_CNTL6, DPPCLK1_ROOT_GATE_DISABLE, enable); break; case 2: REG_UPDATE(DPPCLK_CTRL, DPPCLK2_EN, enable); - if (dccg->ctx->dc->debug.root_clock_optimization.bits.dpp) - REG_UPDATE(DCCG_GATE_DISABLE_CNTL6, DPPCLK2_ROOT_GATE_DISABLE, enable); break; case 3: REG_UPDATE(DPPCLK_CTRL, DPPCLK3_EN, enable); - if (dccg->ctx->dc->debug.root_clock_optimization.bits.dpp) - REG_UPDATE(DCCG_GATE_DISABLE_CNTL6, DPPCLK3_ROOT_GATE_DISABLE, enable); break; default: break; } + //DC_LOG_DEBUG("%s: dpp_inst(%d) DPPCLK_EN = %d\n", __func__, dpp_inst, enable); } @@ -1163,14 +1160,18 @@ static void dccg35_update_dpp_dto(struct dccg *dccg, int dpp_inst, ASSERT(false); phase = 0xff; } + dccg35_set_dppclk_rcg(dccg, dpp_inst, false); REG_SET_2(DPPCLK_DTO_PARAM[dpp_inst], 0, DPPCLK0_DTO_PHASE, phase, DPPCLK0_DTO_MODULO, modulo); dcn35_set_dppclk_enable(dccg, dpp_inst, true); - } else + } else { dcn35_set_dppclk_enable(dccg, dpp_inst, false); + /*we have this in hwss: disable_plane*/ + //dccg35_set_dppclk_rcg(dccg, dpp_inst, true); + } dccg->pipe_dppclk_khz[dpp_inst] = req_dppclk; } @@ -1182,6 +1183,7 @@ static void dccg35_set_dppclk_root_clock_gating(struct dccg *dccg, if (!dccg->ctx->dc->debug.root_clock_optimization.bits.dpp) return; + switch (dpp_inst) { case 0: REG_UPDATE(DCCG_GATE_DISABLE_CNTL6, DPPCLK0_ROOT_GATE_DISABLE, enable); @@ -1198,6 +1200,8 @@ static void dccg35_set_dppclk_root_clock_gating(struct dccg *dccg, default: break; } + //DC_LOG_DEBUG("%s: dpp_inst(%d) rcg: %d\n", __func__, dpp_inst, enable); + } static void dccg35_get_pixel_rate_div( @@ -1521,28 +1525,30 @@ static void dccg35_set_physymclk_root_clock_gating( switch (phy_inst) { case 0: REG_UPDATE(DCCG_GATE_DISABLE_CNTL2, - PHYASYMCLK_ROOT_GATE_DISABLE, enable ? 1 : 0); + PHYASYMCLK_ROOT_GATE_DISABLE, enable ? 0 : 1); break; case 1: REG_UPDATE(DCCG_GATE_DISABLE_CNTL2, - PHYBSYMCLK_ROOT_GATE_DISABLE, enable ? 1 : 0); + PHYBSYMCLK_ROOT_GATE_DISABLE, enable ? 0 : 1); break; case 2: REG_UPDATE(DCCG_GATE_DISABLE_CNTL2, - PHYCSYMCLK_ROOT_GATE_DISABLE, enable ? 1 : 0); + PHYCSYMCLK_ROOT_GATE_DISABLE, enable ? 0 : 1); break; case 3: REG_UPDATE(DCCG_GATE_DISABLE_CNTL2, - PHYDSYMCLK_ROOT_GATE_DISABLE, enable ? 1 : 0); + PHYDSYMCLK_ROOT_GATE_DISABLE, enable ? 0 : 1); break; case 4: REG_UPDATE(DCCG_GATE_DISABLE_CNTL2, - PHYESYMCLK_ROOT_GATE_DISABLE, enable ? 1 : 0); + PHYESYMCLK_ROOT_GATE_DISABLE, enable ? 0 : 1); break; default: BREAK_TO_DEBUGGER(); return; } + //DC_LOG_DEBUG("%s: dpp_inst(%d) PHYESYMCLK_ROOT_GATE_DISABLE:\n", __func__, phy_inst, enable ? 0 : 1); + } static void dccg35_set_physymclk( @@ -1643,6 +1649,8 @@ static void dccg35_dpp_root_clock_control( return; if (clock_on) { + dccg35_set_dppclk_rcg(dccg, dpp_inst, false); + /* turn off the DTO and leave phase/modulo at max */ dcn35_set_dppclk_enable(dccg, dpp_inst, 1); REG_SET_2(DPPCLK_DTO_PARAM[dpp_inst], 0, @@ -1654,6 +1662,8 @@ static void dccg35_dpp_root_clock_control( REG_SET_2(DPPCLK_DTO_PARAM[dpp_inst], 0, DPPCLK0_DTO_PHASE, 0, DPPCLK0_DTO_MODULO, 1); + /*we have this in hwss: disable_plane*/ + //dccg35_set_dppclk_rcg(dccg, dpp_inst, true); } dccg->dpp_clock_gated[dpp_inst] = !clock_on; diff --git a/drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c b/drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c index ca446e08f6a27..ff247689dd6d5 100644 --- a/drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c +++ b/drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c @@ -241,11 +241,6 @@ void dcn35_init_hw(struct dc *dc) dc->res_pool->hubbub->funcs->allow_self_refresh_control(dc->res_pool->hubbub, !dc->res_pool->hubbub->ctx->dc->debug.disable_stutter); } - if (res_pool->dccg->funcs->dccg_root_gate_disable_control) { - for (i = 0; i < res_pool->pipe_count; i++) - res_pool->dccg->funcs->dccg_root_gate_disable_control(res_pool->dccg, i, 0); - } - for (i = 0; i < res_pool->audio_count; i++) { struct audio *audio = res_pool->audios[i]; @@ -885,12 +880,18 @@ void dcn35_init_pipes(struct dc *dc, struct dc_state *context) void dcn35_enable_plane(struct dc *dc, struct pipe_ctx *pipe_ctx, struct dc_state *context) { + struct dpp *dpp = pipe_ctx->plane_res.dpp; + struct dccg *dccg = dc->res_pool->dccg; + + /* enable DCFCLK current DCHUB */ pipe_ctx->plane_res.hubp->funcs->hubp_clk_cntl(pipe_ctx->plane_res.hubp, true); /* initialize HUBP on power up */ pipe_ctx->plane_res.hubp->funcs->hubp_init(pipe_ctx->plane_res.hubp); - + /*make sure DPPCLK is on*/ + dccg->funcs->dccg_root_gate_disable_control(dccg, dpp->inst, true); + dpp->funcs->dpp_dppclk_control(dpp, false, true); /* make sure OPP_PIPE_CLOCK_EN = 1 */ pipe_ctx->stream_res.opp->funcs->opp_pipe_clock_control( pipe_ctx->stream_res.opp, @@ -907,6 +908,7 @@ void dcn35_enable_plane(struct dc *dc, struct pipe_ctx *pipe_ctx, // Program system aperture settings pipe_ctx->plane_res.hubp->funcs->hubp_set_vm_system_aperture_settings(pipe_ctx->plane_res.hubp, &apt); } + //DC_LOG_DEBUG("%s: dpp_inst(%d) =\n", __func__, dpp->inst); if (!pipe_ctx->top_pipe && pipe_ctx->plane_state @@ -922,6 +924,8 @@ void dcn35_plane_atomic_disable(struct dc *dc, struct pipe_ctx *pipe_ctx) { struct hubp *hubp = pipe_ctx->plane_res.hubp; struct dpp *dpp = pipe_ctx->plane_res.dpp; + struct dccg *dccg = dc->res_pool->dccg; + dc->hwss.wait_for_mpcc_disconnect(dc, dc->res_pool, pipe_ctx); @@ -939,7 +943,8 @@ void dcn35_plane_atomic_disable(struct dc *dc, struct pipe_ctx *pipe_ctx) hubp->funcs->hubp_clk_cntl(hubp, false); dpp->funcs->dpp_dppclk_control(dpp, false, false); -/*to do, need to support both case*/ + dccg->funcs->dccg_root_gate_disable_control(dccg, dpp->inst, false); + hubp->power_gated = true; hubp->funcs->hubp_reset(hubp); @@ -951,6 +956,8 @@ void dcn35_plane_atomic_disable(struct dc *dc, struct pipe_ctx *pipe_ctx) pipe_ctx->top_pipe = NULL; pipe_ctx->bottom_pipe = NULL; pipe_ctx->plane_state = NULL; + //DC_LOG_DEBUG("%s: dpp_inst(%d)=\n", __func__, dpp->inst); + } void dcn35_disable_plane(struct dc *dc, struct dc_state *state, struct pipe_ctx *pipe_ctx) -- 2.39.5

1 month, 1 week

1
92
0 0

[PATCH AUTOSEL 6.14 001/102] drm/amd/display: disable DPP RCG before DPP CLK enable

by Sasha Levin

From: Charlene Liu <Charlene.Liu(a)amd.com> [ Upstream commit 1bcd679209420305a86833bc357d50021909edaf ] [why] DPP CLK enable needs to disable DPPCLK RCG first. The DPPCLK_en in dccg should always be enabled when the corresponding pipe is enabled. Reviewed-by: Hansen Dsouza <hansen.dsouza(a)amd.com> Signed-off-by: Charlene Liu <Charlene.Liu(a)amd.com> Signed-off-by: Ray Wu <ray.wu(a)amd.com> Tested-by: Daniel Wheeler <daniel.wheeler(a)amd.com> Signed-off-by: Alex Deucher <alexander.deucher(a)amd.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- Based on my analysis of both the commit message and code changes, my answer is: **YES** This commit should be backported to stable kernel trees for the following reasons: ## Critical Hardware Sequencing Fix The commit addresses a fundamental hardware sequencing requirement where DPP (Display Pipes and Planes) Root Clock Gating (RCG) must be disabled before enabling the DPP clock. This is a critical timing constraint that, if violated, can cause severe system issues. ## Specific Code Evidence 1. **In `dccg35_update_dpp_dto()`**, the fix adds a crucial sequencing step: ```c + dccg35_set_dppclk_rcg(dccg, dpp_inst, false); REG_SET_2(DPPCLK_DTO_PARAM[dpp_inst], 0, DPPCLK0_DTO_PHASE, phase, DPPCLK0_DTO_MODULO, modulo); dcn35_set_dppclk_enable(dccg, dpp_inst, true); ``` This ensures RCG is disabled (false) before enabling the DPP clock. 2. **In `dcn35_enable_plane()`**, explicit clock control is added: ```c + /*make sure DPPCLK is on*/ + dccg->funcs->dccg_root_gate_disable_control(dccg, dpp->inst, true); + dpp->funcs->dpp_dppclk_control(dpp, false, true); ``` 3. **Removal of problematic init code** in `dcn35_init_hw()`: ```c - if (res_pool->dccg->funcs->dccg_root_gate_disable_control) { - for (i = 0; i < res_pool->pipe_count; i++) - res_pool->dccg->funcs->dccg_root_gate_disable_control(res_pool->dccg, i, 0); - } ``` ## Similarity to Previous Critical Fixes This commit follows the pattern of Similar Commit #1, which also addressed clock gating sequencing issues that could cause system hangs. The commit message explicitly states this is needed because "DPP CLK enable needs to disable DPPCLK RCG first." ## Impact and Risk Assessment - **Bug Fixed**: Incorrect clock sequencing that can cause system instability - **Scope**: Limited to DCN35 display hardware (recent AMD GPUs) - **Complexity**: Small, focused changes with clear purpose - **Risk**: Low risk of regression - adds proper sequencing without major architectural changes This fix meets all criteria for stable backporting: - Fixes a real bug affecting users (system stability) - Small and contained changes - No new features or architectural changes - Addresses hardware constraints that cannot be worked around The commit should be backported to all stable kernels that include DCN35 display support to ensure proper display functionality and system stability for users with affected AMD GPUs. .../amd/display/dc/dccg/dcn35/dcn35_dccg.c | 38 ++++++++++++------- .../amd/display/dc/hwss/dcn35/dcn35_hwseq.c | 21 ++++++---- 2 files changed, 38 insertions(+), 21 deletions(-) diff --git a/drivers/gpu/drm/amd/display/dc/dccg/dcn35/dcn35_dccg.c b/drivers/gpu/drm/amd/display/dc/dccg/dcn35/dcn35_dccg.c index b363f5360818d..ad910065f463f 100644 --- a/drivers/gpu/drm/amd/display/dc/dccg/dcn35/dcn35_dccg.c +++ b/drivers/gpu/drm/amd/display/dc/dccg/dcn35/dcn35_dccg.c @@ -391,6 +391,7 @@ static void dccg35_set_dppclk_rcg(struct dccg *dccg, struct dcn_dccg *dccg_dcn = TO_DCN_DCCG(dccg); + if (!dccg->ctx->dc->debug.root_clock_optimization.bits.dpp && enable) return; @@ -411,6 +412,8 @@ static void dccg35_set_dppclk_rcg(struct dccg *dccg, BREAK_TO_DEBUGGER(); break; } + //DC_LOG_DEBUG("%s: inst(%d) DPPCLK rcg_disable: %d\n", __func__, inst, enable ? 0 : 1); + } static void dccg35_set_dpstreamclk_rcg( @@ -1112,30 +1115,24 @@ static void dcn35_set_dppclk_enable(struct dccg *dccg, { struct dcn_dccg *dccg_dcn = TO_DCN_DCCG(dccg); + switch (dpp_inst) { case 0: REG_UPDATE(DPPCLK_CTRL, DPPCLK0_EN, enable); - if (dccg->ctx->dc->debug.root_clock_optimization.bits.dpp) - REG_UPDATE(DCCG_GATE_DISABLE_CNTL6, DPPCLK0_ROOT_GATE_DISABLE, enable); break; case 1: REG_UPDATE(DPPCLK_CTRL, DPPCLK1_EN, enable); - if (dccg->ctx->dc->debug.root_clock_optimization.bits.dpp) - REG_UPDATE(DCCG_GATE_DISABLE_CNTL6, DPPCLK1_ROOT_GATE_DISABLE, enable); break; case 2: REG_UPDATE(DPPCLK_CTRL, DPPCLK2_EN, enable); - if (dccg->ctx->dc->debug.root_clock_optimization.bits.dpp) - REG_UPDATE(DCCG_GATE_DISABLE_CNTL6, DPPCLK2_ROOT_GATE_DISABLE, enable); break; case 3: REG_UPDATE(DPPCLK_CTRL, DPPCLK3_EN, enable); - if (dccg->ctx->dc->debug.root_clock_optimization.bits.dpp) - REG_UPDATE(DCCG_GATE_DISABLE_CNTL6, DPPCLK3_ROOT_GATE_DISABLE, enable); break; default: break; } + //DC_LOG_DEBUG("%s: dpp_inst(%d) DPPCLK_EN = %d\n", __func__, dpp_inst, enable); } @@ -1163,14 +1160,18 @@ static void dccg35_update_dpp_dto(struct dccg *dccg, int dpp_inst, ASSERT(false); phase = 0xff; } + dccg35_set_dppclk_rcg(dccg, dpp_inst, false); REG_SET_2(DPPCLK_DTO_PARAM[dpp_inst], 0, DPPCLK0_DTO_PHASE, phase, DPPCLK0_DTO_MODULO, modulo); dcn35_set_dppclk_enable(dccg, dpp_inst, true); - } else + } else { dcn35_set_dppclk_enable(dccg, dpp_inst, false); + /*we have this in hwss: disable_plane*/ + //dccg35_set_dppclk_rcg(dccg, dpp_inst, true); + } dccg->pipe_dppclk_khz[dpp_inst] = req_dppclk; } @@ -1182,6 +1183,7 @@ static void dccg35_set_dppclk_root_clock_gating(struct dccg *dccg, if (!dccg->ctx->dc->debug.root_clock_optimization.bits.dpp) return; + switch (dpp_inst) { case 0: REG_UPDATE(DCCG_GATE_DISABLE_CNTL6, DPPCLK0_ROOT_GATE_DISABLE, enable); @@ -1198,6 +1200,8 @@ static void dccg35_set_dppclk_root_clock_gating(struct dccg *dccg, default: break; } + //DC_LOG_DEBUG("%s: dpp_inst(%d) rcg: %d\n", __func__, dpp_inst, enable); + } static void dccg35_get_pixel_rate_div( @@ -1521,28 +1525,30 @@ static void dccg35_set_physymclk_root_clock_gating( switch (phy_inst) { case 0: REG_UPDATE(DCCG_GATE_DISABLE_CNTL2, - PHYASYMCLK_ROOT_GATE_DISABLE, enable ? 1 : 0); + PHYASYMCLK_ROOT_GATE_DISABLE, enable ? 0 : 1); break; case 1: REG_UPDATE(DCCG_GATE_DISABLE_CNTL2, - PHYBSYMCLK_ROOT_GATE_DISABLE, enable ? 1 : 0); + PHYBSYMCLK_ROOT_GATE_DISABLE, enable ? 0 : 1); break; case 2: REG_UPDATE(DCCG_GATE_DISABLE_CNTL2, - PHYCSYMCLK_ROOT_GATE_DISABLE, enable ? 1 : 0); + PHYCSYMCLK_ROOT_GATE_DISABLE, enable ? 0 : 1); break; case 3: REG_UPDATE(DCCG_GATE_DISABLE_CNTL2, - PHYDSYMCLK_ROOT_GATE_DISABLE, enable ? 1 : 0); + PHYDSYMCLK_ROOT_GATE_DISABLE, enable ? 0 : 1); break; case 4: REG_UPDATE(DCCG_GATE_DISABLE_CNTL2, - PHYESYMCLK_ROOT_GATE_DISABLE, enable ? 1 : 0); + PHYESYMCLK_ROOT_GATE_DISABLE, enable ? 0 : 1); break; default: BREAK_TO_DEBUGGER(); return; } + //DC_LOG_DEBUG("%s: dpp_inst(%d) PHYESYMCLK_ROOT_GATE_DISABLE:\n", __func__, phy_inst, enable ? 0 : 1); + } static void dccg35_set_physymclk( @@ -1643,6 +1649,8 @@ static void dccg35_dpp_root_clock_control( return; if (clock_on) { + dccg35_set_dppclk_rcg(dccg, dpp_inst, false); + /* turn off the DTO and leave phase/modulo at max */ dcn35_set_dppclk_enable(dccg, dpp_inst, 1); REG_SET_2(DPPCLK_DTO_PARAM[dpp_inst], 0, @@ -1654,6 +1662,8 @@ static void dccg35_dpp_root_clock_control( REG_SET_2(DPPCLK_DTO_PARAM[dpp_inst], 0, DPPCLK0_DTO_PHASE, 0, DPPCLK0_DTO_MODULO, 1); + /*we have this in hwss: disable_plane*/ + //dccg35_set_dppclk_rcg(dccg, dpp_inst, true); } dccg->dpp_clock_gated[dpp_inst] = !clock_on; diff --git a/drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c b/drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c index 922b8d71cf1aa..63077c1fad859 100644 --- a/drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c +++ b/drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c @@ -241,11 +241,6 @@ void dcn35_init_hw(struct dc *dc) dc->res_pool->hubbub->funcs->allow_self_refresh_control(dc->res_pool->hubbub, !dc->res_pool->hubbub->ctx->dc->debug.disable_stutter); } - if (res_pool->dccg->funcs->dccg_root_gate_disable_control) { - for (i = 0; i < res_pool->pipe_count; i++) - res_pool->dccg->funcs->dccg_root_gate_disable_control(res_pool->dccg, i, 0); - } - for (i = 0; i < res_pool->audio_count; i++) { struct audio *audio = res_pool->audios[i]; @@ -901,12 +896,18 @@ void dcn35_init_pipes(struct dc *dc, struct dc_state *context) void dcn35_enable_plane(struct dc *dc, struct pipe_ctx *pipe_ctx, struct dc_state *context) { + struct dpp *dpp = pipe_ctx->plane_res.dpp; + struct dccg *dccg = dc->res_pool->dccg; + + /* enable DCFCLK current DCHUB */ pipe_ctx->plane_res.hubp->funcs->hubp_clk_cntl(pipe_ctx->plane_res.hubp, true); /* initialize HUBP on power up */ pipe_ctx->plane_res.hubp->funcs->hubp_init(pipe_ctx->plane_res.hubp); - + /*make sure DPPCLK is on*/ + dccg->funcs->dccg_root_gate_disable_control(dccg, dpp->inst, true); + dpp->funcs->dpp_dppclk_control(dpp, false, true); /* make sure OPP_PIPE_CLOCK_EN = 1 */ pipe_ctx->stream_res.opp->funcs->opp_pipe_clock_control( pipe_ctx->stream_res.opp, @@ -923,6 +924,7 @@ void dcn35_enable_plane(struct dc *dc, struct pipe_ctx *pipe_ctx, // Program system aperture settings pipe_ctx->plane_res.hubp->funcs->hubp_set_vm_system_aperture_settings(pipe_ctx->plane_res.hubp, &apt); } + //DC_LOG_DEBUG("%s: dpp_inst(%d) =\n", __func__, dpp->inst); if (!pipe_ctx->top_pipe && pipe_ctx->plane_state @@ -938,6 +940,8 @@ void dcn35_plane_atomic_disable(struct dc *dc, struct pipe_ctx *pipe_ctx) { struct hubp *hubp = pipe_ctx->plane_res.hubp; struct dpp *dpp = pipe_ctx->plane_res.dpp; + struct dccg *dccg = dc->res_pool->dccg; + dc->hwss.wait_for_mpcc_disconnect(dc, dc->res_pool, pipe_ctx); @@ -955,7 +959,8 @@ void dcn35_plane_atomic_disable(struct dc *dc, struct pipe_ctx *pipe_ctx) hubp->funcs->hubp_clk_cntl(hubp, false); dpp->funcs->dpp_dppclk_control(dpp, false, false); -/*to do, need to support both case*/ + dccg->funcs->dccg_root_gate_disable_control(dccg, dpp->inst, false); + hubp->power_gated = true; hubp->funcs->hubp_reset(hubp); @@ -967,6 +972,8 @@ void dcn35_plane_atomic_disable(struct dc *dc, struct pipe_ctx *pipe_ctx) pipe_ctx->top_pipe = NULL; pipe_ctx->bottom_pipe = NULL; pipe_ctx->plane_state = NULL; + //DC_LOG_DEBUG("%s: dpp_inst(%d)=\n", __func__, dpp->inst); + } void dcn35_disable_plane(struct dc *dc, struct dc_state *state, struct pipe_ctx *pipe_ctx) -- 2.39.5

1 month, 1 week

1
101
0 0

[PATCH 5.15] x86/its: Fix undefined reference to cpu_wants_rethunk_at()

by Pawan Gupta

Below error was reported in a 32-bit kernel build: static_call.c:(.ref.text+0x46): undefined reference to `cpu_wants_rethunk_at' make[1]: [Makefile:1234: vmlinux] Error This is because the definition of cpu_wants_rethunk_at() depends on CONFIG_STACK_VALIDATION which is only enabled in 64-bit mode. Define the empty function for CONFIG_STACK_VALIDATION=n, rethunk mitigation is anyways not supported without it. Reported-by: Guenter Roeck <linux(a)roeck-us.net> Fixes: 5d19a0574b75 ("x86/its: Add support for ITS-safe return thunk") Signed-off-by: Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com> Link: https://lore.kernel.org/stable/0f597436-5da6-4319-b918-9f57bde5634a@roeck-u… --- arch/x86/include/asm/alternative.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/arch/x86/include/asm/alternative.h b/arch/x86/include/asm/alternative.h index 1797f80c10de..a5f704dbb4a1 100644 --- a/arch/x86/include/asm/alternative.h +++ b/arch/x86/include/asm/alternative.h @@ -98,7 +98,7 @@ static inline u8 *its_static_thunk(int reg) } #endif -#ifdef CONFIG_RETHUNK +#if defined(CONFIG_RETHUNK) && defined(CONFIG_STACK_VALIDATION) extern bool cpu_wants_rethunk(void); extern bool cpu_wants_rethunk_at(void *addr); #else -- 2.34.1

1 month, 1 week

2
1
0 0

[merged mm-stable] mm-khugepaged-fix-race-with-folio-split-free-using-temporary-reference.patch removed from -mm tree

by Andrew Morton

The quilt patch titled Subject: mm/khugepaged: fix race with folio split/free using temporary reference has been removed from the -mm tree. Its filename was mm-khugepaged-fix-race-with-folio-split-free-using-temporary-reference.patch This patch was dropped because it was merged into the mm-stable branch of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm ------------------------------------------------------ From: Shivank Garg <shivankg(a)amd.com> Subject: mm/khugepaged: fix race with folio split/free using temporary reference Date: Mon, 26 May 2025 18:28:18 +0000 hpage_collapse_scan_file() calls is_refcount_suitable(), which in turn calls folio_mapcount(). folio_mapcount() checks folio_test_large() before proceeding to folio_large_mapcount(), but there is a race window where the folio may get split/freed between these checks, triggering: VM_WARN_ON_FOLIO(!folio_test_large(folio), folio) Take a temporary reference to the folio in hpage_collapse_scan_file(). This stabilizes the folio during refcount check and prevents incorrect large folio detection due to concurrent split/free. Use helper folio_expected_ref_count() + 1 to compare with folio_ref_count() instead of using is_refcount_suitable(). Link: https://lkml.kernel.org/r/20250526182818.37978-1-shivankg@amd.com Fixes: 05c5323b2a34 ("mm: track mapcount of large folios in single value") Signed-off-by: Shivank Garg <shivankg(a)amd.com> Reported-by: syzbot+2b99589e33edbe9475ca(a)syzkaller.appspotmail.com Closes: https://lore.kernel.org/all/6828470d.a70a0220.38f255.000c.GAE@google.com Suggested-by: David Hildenbrand <david(a)redhat.com> Acked-by: David Hildenbrand <david(a)redhat.com> Acked-by: Dev Jain <dev.jain(a)arm.com> Reviewed-by: Baolin Wang <baolin.wang(a)linux.alibaba.com> Cc: Bharata B Rao <bharata(a)amd.com> Cc: Fengwei Yin <fengwei.yin(a)intel.com> Cc: Liam Howlett <liam.howlett(a)oracle.com> Cc: Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com> Cc: Mariano Pache <npache(a)redhat.com> Cc: Ryan Roberts <ryan.roberts(a)arm.com> Cc: Zi Yan <ziy(a)nvidia.com> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> --- mm/khugepaged.c | 18 +++++++++++++++++- 1 file changed, 17 insertions(+), 1 deletion(-) --- a/mm/khugepaged.c~mm-khugepaged-fix-race-with-folio-split-free-using-temporary-reference +++ a/mm/khugepaged.c @@ -2293,6 +2293,17 @@ static int hpage_collapse_scan_file(stru continue; } + if (!folio_try_get(folio)) { + xas_reset(&xas); + continue; + } + + if (unlikely(folio != xas_reload(&xas))) { + folio_put(folio); + xas_reset(&xas); + continue; + } + if (folio_order(folio) == HPAGE_PMD_ORDER && folio->index == start) { /* Maybe PMD-mapped */ @@ -2303,23 +2314,27 @@ static int hpage_collapse_scan_file(stru * it's safe to skip LRU and refcount checks before * returning. */ + folio_put(folio); break; } node = folio_nid(folio); if (hpage_collapse_scan_abort(node, cc)) { result = SCAN_SCAN_ABORT; + folio_put(folio); break; } cc->node_load[node]++; if (!folio_test_lru(folio)) { result = SCAN_PAGE_LRU; + folio_put(folio); break; } - if (!is_refcount_suitable(folio)) { + if (folio_expected_ref_count(folio) + 1 != folio_ref_count(folio)) { result = SCAN_PAGE_COUNT; + folio_put(folio); break; } @@ -2331,6 +2346,7 @@ static int hpage_collapse_scan_file(stru */ present += folio_nr_pages(folio); + folio_put(folio); if (need_resched()) { xas_pause(&xas); _ Patches currently in -mm which might be from shivankg(a)amd.com are

1 month, 1 week

1
0
0 0

+ kvm-s390-rename-prot_none-to-prot_type_dummy.patch added to mm-hotfixes-unstable branch

by Andrew Morton

The patch titled Subject: KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY has been added to the -mm mm-hotfixes-unstable branch. Its filename is kvm-s390-rename-prot_none-to-prot_type_dummy.patch This patch will shortly appear at https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patche… This patch will later appear in the mm-hotfixes-unstable branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm Before you just go and hit "reply", please: a) Consider who else should be cc'ed b) Prefer to cc a suitable mailing list as well c) Ideally: find the original patch on the mailing list and do a reply-to-all to that, adding suitable additional cc's *** Remember to use Documentation/process/submit-checklist.rst when testing your code *** The -mm tree is included into linux-next via the mm-everything branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm and is updated there every 2-3 working days ------------------------------------------------------ From: Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com> Subject: KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY Date: Mon, 19 May 2025 15:56:57 +0100 The enum type prot_type declared in arch/s390/kvm/gaccess.c declares an unfortunate identifier within it - PROT_NONE. This clashes with the protection bit define from the uapi for mmap() declared in include/uapi/asm-generic/mman-common.h, which is indeed what those casually reading this code would assume this to refer to. This means that any changes which subsequently alter headers in any way which results in the uapi header being imported here will cause build errors. Resolve the issue by renaming PROT_NONE to PROT_TYPE_DUMMY. Link: https://lkml.kernel.org/r/20250519145657.178365-1-lorenzo.stoakes@oracle.com Fixes: b3cefd6bf16e ("KVM: s390: Pass initialized arg even if unused") Signed-off-by: Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com> Suggested-by: Ignacio Moreno Gonzalez <Ignacio.MorenoGonzalez(a)kuka.com> Reported-by: kernel test robot <lkp(a)intel.com> Closes: https://lore.kernel.org/oe-kbuild-all/202505140943.IgHDa9s7-lkp@intel.com/ Acked-by: Christian Borntraeger <borntraeger(a)linux.ibm.com> Acked-by: Ignacio Moreno Gonzalez <Ignacio.MorenoGonzalez(a)kuka.com> Acked-by: Yang Shi <yang(a)os.amperecomputing.com> Reviewed-by: David Hildenbrand <david(a)redhat.com> Acked-by: Liam R. Howlett <Liam.Howlett(a)oracle.com> Reviewed-by: Oscar Salvador <osalvador(a)suse.de> Reviewed-by: Claudio Imbrenda <imbrenda(a)linux.ibm.com> Cc: <stable(a)vger.kernel.org> Cc: Alexander Gordeev <agordeev(a)linux.ibm.com> Cc: Heiko Carstens <hca(a)linux.ibm.com> Cc: James Houghton <jthoughton(a)google.com> Cc: Janosch Frank <frankja(a)linux.ibm.com> Cc: Matthew Wilcox (Oracle) <willy(a)infradead.org> Cc: Paolo Bonzini <pbonzini(a)redhat.com> Cc: Sven Schnelle <svens(a)linux.ibm.com> Cc: Vasily Gorbik <gor(a)linux.ibm.com> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> --- arch/s390/kvm/gaccess.c | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) --- a/arch/s390/kvm/gaccess.c~kvm-s390-rename-prot_none-to-prot_type_dummy +++ a/arch/s390/kvm/gaccess.c @@ -318,7 +318,7 @@ enum prot_type { PROT_TYPE_DAT = 3, PROT_TYPE_IEP = 4, /* Dummy value for passing an initialized value when code != PGM_PROTECTION */ - PROT_NONE, + PROT_TYPE_DUMMY, }; static int trans_exc_ending(struct kvm_vcpu *vcpu, int code, unsigned long gva, u8 ar, @@ -334,7 +334,7 @@ static int trans_exc_ending(struct kvm_v switch (code) { case PGM_PROTECTION: switch (prot) { - case PROT_NONE: + case PROT_TYPE_DUMMY: /* We should never get here, acts like termination */ WARN_ON_ONCE(1); break; @@ -804,7 +804,7 @@ static int guest_range_to_gpas(struct kv gpa = kvm_s390_real_to_abs(vcpu, ga); if (!kvm_is_gpa_in_memslot(vcpu->kvm, gpa)) { rc = PGM_ADDRESSING; - prot = PROT_NONE; + prot = PROT_TYPE_DUMMY; } } if (rc) @@ -962,7 +962,7 @@ int access_guest_with_key(struct kvm_vcp if (rc == PGM_PROTECTION) prot = PROT_TYPE_KEYC; else - prot = PROT_NONE; + prot = PROT_TYPE_DUMMY; rc = trans_exc_ending(vcpu, rc, ga, ar, mode, prot, terminate); } out_unlock: _ Patches currently in -mm which might be from lorenzo.stoakes(a)oracle.com are kvm-s390-rename-prot_none-to-prot_type_dummy.patch tools-testing-vma-add-missing-function-stub.patch

1 month, 1 week

1
0
0 0

[PATCH v2] iio: adc: adi-axi-adc: fix ad7606_bus_reg_read()

by David Lechner

Mask the value read before returning it. The value read over the parallel bus via the AXI ADC IP block contains both the address and the data, but callers expect val to only contain the data. axi_adc_raw_write() takes a u32 parameter, so addr was the wrong type. This wasn't causing any issues but is corrected anyway since we are touching the same line to add a new variable. Cc: stable(a)vger.kernel.org Fixes: 79c47485e438 ("iio: adc: adi-axi-adc: add support for AD7606 register writing") Signed-off-by: David Lechner <dlechner(a)baylibre.com> --- Changes in v2: - Use ADI_AXI_REG_VALUE_MASK instead of hard-coding 0xFF. - Introduce local variable and use FIELD_PREP() instead of modifying val. - Link to v1: https://lore.kernel.org/r/20250530-iio-adc-adi-axi-adc-fix-ad7606_bus_reg_r… --- drivers/iio/adc/adi-axi-adc.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/drivers/iio/adc/adi-axi-adc.c b/drivers/iio/adc/adi-axi-adc.c index cf942c043457ccea49207c3900153ee371b3774f..fc745297bcb82cf2cf7f30c7fcf9bba2d861a48c 100644 --- a/drivers/iio/adc/adi-axi-adc.c +++ b/drivers/iio/adc/adi-axi-adc.c @@ -445,7 +445,7 @@ static int axi_adc_raw_read(struct iio_backend *back, u32 *val) static int ad7606_bus_reg_read(struct iio_backend *back, u32 reg, u32 *val) { struct adi_axi_adc_state *st = iio_backend_get_priv(back); - int addr; + u32 addr, reg_val; guard(mutex)(&st->lock); @@ -455,7 +455,9 @@ static int ad7606_bus_reg_read(struct iio_backend *back, u32 reg, u32 *val) */ addr = FIELD_PREP(ADI_AXI_REG_ADDRESS_MASK, reg) | ADI_AXI_REG_READ_BIT; axi_adc_raw_write(back, addr); - axi_adc_raw_read(back, val); + axi_adc_raw_read(back, &reg_val); + + *val = FIELD_GET(ADI_AXI_REG_VALUE_MASK, reg_val); /* Write 0x0 on the bus to get back to ADC mode */ axi_adc_raw_write(back, 0); --- base-commit: 7cdfbc0113d087348b8e65dd79276d0f57b89a10 change-id: 20250530-iio-adc-adi-axi-adc-fix-ad7606_bus_reg_read-f2bbb503db8b Best regards, -- David Lechner <dlechner(a)baylibre.com>

1 month, 2 weeks

2
1
0 0

[PATCH 1/2] apparmor: Fix 8-byte alignment for initial dfa blob streams

by deller＠kernel.org

From: Helge Deller <deller(a)gmx.de> The dfa blob stream for the aa_dfa_unpack() function is expected to be aligned on a 8 byte boundary. The static nulldfa_src[] and stacksplitdfa_src[] arrays store the inital apparmor dfa blob streams, but since they are declared as an array-of-chars the compiler and linker will only ensure a "char" (1-byte) alignment. Add an __aligned(8) annotation to the arrays to tell the linker to always align them on a 8-byte boundary. This avoids runtime warnings at startup on alignment-sensitive platforms like parisc such as: Kernel: unaligned access to 0x7f2a584a in aa_dfa_unpack+0x124/0x788 (iir 0xca0109f) Kernel: unaligned access to 0x7f2a584e in aa_dfa_unpack+0x210/0x788 (iir 0xca8109c) Kernel: unaligned access to 0x7f2a586a in aa_dfa_unpack+0x278/0x788 (iir 0xcb01090) Signed-off-by: Helge Deller <deller(a)gmx.de> Cc: stable(a)vger.kernel.org --- security/apparmor/lsm.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/security/apparmor/lsm.c b/security/apparmor/lsm.c index 9b6c2f157f83..531bde29cccb 100644 --- a/security/apparmor/lsm.c +++ b/security/apparmor/lsm.c @@ -2149,12 +2149,12 @@ static int __init apparmor_nf_ip_init(void) __initcall(apparmor_nf_ip_init); #endif -static char nulldfa_src[] = { +static char nulldfa_src[] __aligned(8) = { #include "nulldfa.in" }; static struct aa_dfa *nulldfa; -static char stacksplitdfa_src[] = { +static char stacksplitdfa_src[] __aligned(8) = { #include "stacksplitdfa.in" }; struct aa_dfa *stacksplitdfa; -- 2.47.0

1 month, 2 weeks

1
0
0 0

Re: 6.1.140 build failure(fs/btrfs/discard.c:247:5: error: implicit declaration of function 'ASSERT')

by Filipe Manana

On Mon, May 26, 2025 at 6:40 AM Wang Yugui <wangyugui(a)e16-tech.com> wrote: > > Hi, > Cc: Filipe Manana > > I noticed 6.1.140 build failure(fs/btrfs/discard.c:247:5: error: implicit declaration of function 'ASSERT') > > fs/btrfs/discard.c: In function 'peek_discard_list': > fs/btrfs/discard.c:247:5: error: implicit declaration of function 'ASSERT'; did you mean 'IS_ERR'? [-Werror=implicit-function-declaration] > ASSERT(block_group->discard_index != > ^~~~~~ > IS_ERR > > It seems realted to the patch(btrfs-fix-discard-worker-infinite-loop-after-disabling-discard.patch). Yes, it is. The patch, like most stable backports, was automatically picked by the stable scripts and added to stable releases. I assume that before the release was made, it was compile tested by the stable automatic processes. I just tried it, and it compiles successfully for me: fdmanana 11:56:26 ~/git/hub/linux ((v6.12))> git clean -xfd fdmanana 11:57:27 ~/git/hub/linux ((v6.12))> git co v6.1.140 fdmanana 11:59:53 ~/git/hub/linux ((v6.1.140))> make defconfig HOSTCC scripts/basic/fixdep HOSTCC scripts/kconfig/conf.o HOSTCC scripts/kconfig/confdata.o HOSTCC scripts/kconfig/expr.o LEX scripts/kconfig/lexer.lex.c YACC scripts/kconfig/parser.tab.[ch] HOSTCC scripts/kconfig/lexer.lex.o HOSTCC scripts/kconfig/menu.o HOSTCC scripts/kconfig/parser.tab.o HOSTCC scripts/kconfig/preprocess.o HOSTCC scripts/kconfig/symbol.o HOSTCC scripts/kconfig/util.o HOSTLD scripts/kconfig/conf *** Default configuration is based on 'x86_64_defconfig' # # configuration written to .config # # Run make menuconfig to enable btrfs and all its config options fdmanana 12:01:55 ~/git/hub/linux ((v6.1.140))> make menuconfig fdmanana 12:02:17 ~/git/hub/linux ((v6.1.140))> grep BTRFS .config CONFIG_BTRFS_FS=m CONFIG_BTRFS_FS_POSIX_ACL=y CONFIG_BTRFS_FS_CHECK_INTEGRITY=y CONFIG_BTRFS_FS_RUN_SANITY_TESTS=y CONFIG_BTRFS_DEBUG=y CONFIG_BTRFS_ASSERT=y CONFIG_BTRFS_FS_REF_VERIFY=y fdmanana 12:06:08 ~/git/hub/linux ((v6.1.140))> make fs/btrfs/btrfs.ko SYNC include/config/auto.conf CALL scripts/checksyscalls.sh DESCEND objtool CC [M] fs/btrfs/super.o CC [M] fs/btrfs/ctree.o CC [M] fs/btrfs/extent-tree.o CC [M] fs/btrfs/print-tree.o CC [M] fs/btrfs/root-tree.o CC [M] fs/btrfs/dir-item.o CC [M] fs/btrfs/file-item.o CC [M] fs/btrfs/inode-item.o CC [M] fs/btrfs/disk-io.o CC [M] fs/btrfs/transaction.o CC [M] fs/btrfs/inode.o CC [M] fs/btrfs/file.o CC [M] fs/btrfs/tree-defrag.o CC [M] fs/btrfs/extent_map.o CC [M] fs/btrfs/sysfs.o CC [M] fs/btrfs/struct-funcs.o CC [M] fs/btrfs/xattr.o CC [M] fs/btrfs/ordered-data.o CC [M] fs/btrfs/extent_io.o CC [M] fs/btrfs/volumes.o CC [M] fs/btrfs/async-thread.o CC [M] fs/btrfs/ioctl.o CC [M] fs/btrfs/locking.o CC [M] fs/btrfs/orphan.o CC [M] fs/btrfs/export.o CC [M] fs/btrfs/tree-log.o CC [M] fs/btrfs/free-space-cache.o CC [M] fs/btrfs/lzo.o CC [M] fs/btrfs/zstd.o CC [M] fs/btrfs/compression.o CC [M] fs/btrfs/delayed-ref.o CC [M] fs/btrfs/relocation.o CC [M] fs/btrfs/delayed-inode.o CC [M] fs/btrfs/scrub.o CC [M] fs/btrfs/backref.o CC [M] fs/btrfs/ulist.o CC [M] fs/btrfs/qgroup.o CC [M] fs/btrfs/send.o CC [M] fs/btrfs/dev-replace.o CC [M] fs/btrfs/raid56.o CC [M] fs/btrfs/uuid-tree.o CC [M] fs/btrfs/props.o CC [M] fs/btrfs/free-space-tree.o CC [M] fs/btrfs/tree-checker.o CC [M] fs/btrfs/space-info.o CC [M] fs/btrfs/block-rsv.o CC [M] fs/btrfs/delalloc-space.o CC [M] fs/btrfs/block-group.o CC [M] fs/btrfs/discard.o CC [M] fs/btrfs/reflink.o CC [M] fs/btrfs/subpage.o CC [M] fs/btrfs/tree-mod-log.o CC [M] fs/btrfs/extent-io-tree.o CC [M] fs/btrfs/acl.o CC [M] fs/btrfs/check-integrity.o CC [M] fs/btrfs/ref-verify.o CC [M] fs/btrfs/tests/free-space-tests.o CC [M] fs/btrfs/tests/extent-buffer-tests.o CC [M] fs/btrfs/tests/btrfs-tests.o CC [M] fs/btrfs/tests/extent-io-tests.o CC [M] fs/btrfs/tests/inode-tests.o CC [M] fs/btrfs/tests/qgroup-tests.o CC [M] fs/btrfs/tests/free-space-tree-tests.o CC [M] fs/btrfs/tests/extent-map-tests.o LD [M] fs/btrfs/btrfs.o make[3]: 'fs/btrfs/btrfs.mod' is up to date. MODPOST modules-only.symvers WARNING: vmlinux.o is missing. Modules may not have dependencies or modversions. You may get many unresolved symbol warnings. WARNING: modpost: "bio_associate_blkg" [fs/btrfs/btrfs.ko] undefined! WARNING: modpost: "zstd_cstream_workspace_bound" [fs/btrfs/btrfs.ko] undefined! WARNING: modpost: "folio_invalidate" [fs/btrfs/btrfs.ko] undefined! WARNING: modpost: "__page_file_index" [fs/btrfs/btrfs.ko] undefined! WARNING: modpost: "strcpy" [fs/btrfs/btrfs.ko] undefined! WARNING: modpost: "inode_init_owner" [fs/btrfs/btrfs.ko] undefined! WARNING: modpost: "generic_fillattr" [fs/btrfs/btrfs.ko] undefined! WARNING: modpost: "is_vmalloc_addr" [fs/btrfs/btrfs.ko] undefined! WARNING: modpost: "krealloc" [fs/btrfs/btrfs.ko] undefined! WARNING: modpost: "vfs_fsync_range" [fs/btrfs/btrfs.ko] undefined! WARNING: modpost: suppressed 521 unresolved symbol warnings because there were too many) LD [M] fs/btrfs/btrfs.ko fdmanana 12:11:12 ~/git/hub/linux ((v6.1.140))> gcc --version gcc (Debian 9.3.0-18) 9.3.0 > > I walked around it with the following patch. In the future please cc the stable list when you find problems with stable backports. > > diff --git a/fs/btrfs/discard.c b/fs/btrfs/discard.c > index 98bce18..9ffe5c4 100644 > --- a/fs/btrfs/discard.c > +++ b/fs/btrfs/discard.c > @@ -7,6 +7,7 @@ > #include <linux/math64.h> > #include <linux/sizes.h> > #include <linux/workqueue.h> > +#include "messages.h" > #include "ctree.h" > #include "block-group.h" > #include "discard.h" > > > Best Regards > Wang Yugui (wangyugui(a)e16-tech.com) > 2025/05/26 > > >

1 month, 2 weeks

2
1
0 0

ISE 2025 Visitors Contacts-20% OFF!

by Garnet Conwell

Hi, We’re excited to share exclusive access to the Integrated Systems Europe 2025 Visitor Contact List! Our database includes 88,351 verified visitor contacts, giving you a powerful resource to connect with key industry professionals. Each contact includes: Contact Name, Job Title, Company Name, Physical Address, Phone Number, Official Email Address, and more. Interested in the list? Simply reply with “Send me Pricing” to get full details. Kind regards, Garnet Conwell Sr. Marketing Manager To opt out of future messages, just reply “Unfollow.”

1 month, 2 weeks

1
0
0 0

[PATCH] mm: userfaultfd: fix race of userfaultfd_move and swap cache

by Kairui Song

From: Kairui Song <kasong(a)tencent.com> On seeing a swap entry PTE, userfaultfd_move does a lockless swap cache lookup, and try to move the found folio to the faulting vma when. Currently, it relies on the PTE value check to ensure the moved folio still belongs to the src swap entry, which turns out is not reliable. While working and reviewing the swap table series with Barry, following existing race is observed and reproduced [1]: ( move_pages_pte is moving src_pte to dst_pte, where src_pte is a swap entry PTE holding swap entry S1, and S1 isn't in the swap cache.) CPU1 CPU2 userfaultfd_move move_pages_pte() entry = pte_to_swp_entry(orig_src_pte); // Here it got entry = S1 ... < Somehow interrupted> ... <swapin src_pte, alloc and use folio A> // folio A is just a new allocated folio // and get installed into src_pte <frees swap entry S1> // src_pte now points to folio A, S1 // has swap count == 0, it can be freed // by folio_swap_swap or swap // allocator's reclaim. <try to swap out another folio B> // folio B is a folio in another VMA. <put folio B to swap cache using S1 > // S1 is freed, folio B could use it // for swap out with no problem. ... folio = filemap_get_folio(S1) // Got folio B here !!! ... < Somehow interrupted again> ... <swapin folio B and free S1> // Now S1 is free to be used again. <swapout src_pte & folio A using S1> // Now src_pte is a swap entry pte // holding S1 again. folio_trylock(folio) move_swap_pte double_pt_lock is_pte_pages_stable // Check passed because src_pte == S1 folio_move_anon_rmap(...) // Moved invalid folio B here !!! The race window is very short and requires multiple collisions of multiple rare events, so it's very unlikely to happen, but with a deliberately constructed reproducer and increased time window, it can be reproduced [1]. It's also possible that folio (A) is swapped in, and swapped out again after the filemap_get_folio lookup, in such case folio (A) may stay in swap cache so it needs to be moved too. In this case we should also try again so kernel won't miss a folio move. Fix this by checking if the folio is the valid swap cache folio after acquiring the folio lock, and checking the swap cache again after acquiring the src_pte lock. SWP_SYNCRHONIZE_IO path does make the problem more complex, but so far we don't need to worry about that since folios only might get exposed to swap cache in the swap out path, and it's covered in this patch too by checking the swap cache again after acquiring src_pte lock. Fixes: adef440691ba ("userfaultfd: UFFDIO_MOVE uABI") Closes: https://lore.kernel.org/linux-mm/CAMgjq7B1K=6OOrK2OUZ0-tqCzi+EJt+2_K97TPGoS… [1] Signed-off-by: Kairui Song <kasong(a)tencent.com> --- mm/userfaultfd.c | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) diff --git a/mm/userfaultfd.c b/mm/userfaultfd.c index bc473ad21202..a1564d205dfb 100644 --- a/mm/userfaultfd.c +++ b/mm/userfaultfd.c @@ -15,6 +15,7 @@ #include <linux/mmu_notifier.h> #include <linux/hugetlb.h> #include <linux/shmem_fs.h> +#include <linux/delay.h> #include <asm/tlbflush.h> #include <asm/tlb.h> #include "internal.h" @@ -1086,6 +1087,8 @@ static int move_swap_pte(struct mm_struct *mm, struct vm_area_struct *dst_vma, spinlock_t *dst_ptl, spinlock_t *src_ptl, struct folio *src_folio) { + swp_entry_t entry; + double_pt_lock(dst_ptl, src_ptl); if (!is_pte_pages_stable(dst_pte, src_pte, orig_dst_pte, orig_src_pte, @@ -1102,6 +1105,19 @@ static int move_swap_pte(struct mm_struct *mm, struct vm_area_struct *dst_vma, if (src_folio) { folio_move_anon_rmap(src_folio, dst_vma); src_folio->index = linear_page_index(dst_vma, dst_addr); + } else { + /* + * Check again after acquiring the src_pte lock. Or we might + * miss a new loaded swap cache folio. + */ + entry = pte_to_swp_entry(orig_src_pte); + src_folio = filemap_get_folio(swap_address_space(entry), + swap_cache_index(entry)); + if (!IS_ERR_OR_NULL(src_folio)) { + double_pt_unlock(dst_ptl, src_ptl); + folio_put(src_folio); + return -EAGAIN; + } } orig_src_pte = ptep_get_and_clear(mm, src_addr, src_pte); @@ -1409,6 +1425,16 @@ static int move_pages_pte(struct mm_struct *mm, pmd_t *dst_pmd, pmd_t *src_pmd, folio_lock(src_folio); goto retry; } + /* + * Check if the folio still belongs to the target swap entry after + * acquiring the lock. Folio can be freed in the swap cache while + * not locked. + */ + if (unlikely(!folio_test_swapcache(folio) || + entry.val != folio->swap.val)) { + err = -EAGAIN; + goto out; + } } err = move_swap_pte(mm, dst_vma, dst_addr, src_addr, dst_pte, src_pte, orig_dst_pte, orig_src_pte, dst_pmd, dst_pmdval, -- 2.49.0

1 month, 2 weeks

4
16
0 0

[PATCH net,v3] hv_netvsc: fix potential deadlock in netvsc_vf_setxdp()

by Saurabh Sengar

The MANA driver's probe registers netdevice via the following call chain: mana_probe() register_netdev() register_netdevice() register_netdevice() calls notifier callback for netvsc driver, holding the netdev mutex via netdev_lock_ops(). Further this netvsc notifier callback end up attempting to acquire the same lock again in dev_xdp_propagate() leading to deadlock. netvsc_netdev_event() netvsc_vf_setxdp() dev_xdp_propagate() This deadlock was not observed so far because net_shaper_ops was never set, and thus the lock was effectively a no-op in this case. Fix this by using netif_xdp_propagate() instead of dev_xdp_propagate() to avoid recursive locking in this path. And, since no deadlock is observed on the other path which is via netvsc_probe, add the lock exclusivly for that path. Also, clean up the unregistration path by removing the unnecessary call to netvsc_vf_setxdp(), since unregister_netdevice_many_notify() already performs this cleanup via dev_xdp_uninstall(). Fixes: 97246d6d21c2 ("net: hold netdev instance lock during ndo_bpf") Cc: stable(a)vger.kernel.org Signed-off-by: Saurabh Sengar <ssengar(a)linux.microsoft.com> Tested-by: Erni Sri Satya Vennela <ernis(a)linux.microsoft.com> Reviewed-by: Haiyang Zhang <haiyangz(a)microsoft.com> Reviewed-by: Subbaraya Sundeep <sbhatta(a)marvell.com> --- [V3] - Add the lock for netvsc probe path [V2] - Modified commit message drivers/net/hyperv/netvsc_bpf.c | 2 +- drivers/net/hyperv/netvsc_drv.c | 4 ++-- net/core/dev.c | 1 + 3 files changed, 4 insertions(+), 3 deletions(-) diff --git a/drivers/net/hyperv/netvsc_bpf.c b/drivers/net/hyperv/netvsc_bpf.c index e01c5997a551..1dd3755d9e6d 100644 --- a/drivers/net/hyperv/netvsc_bpf.c +++ b/drivers/net/hyperv/netvsc_bpf.c @@ -183,7 +183,7 @@ int netvsc_vf_setxdp(struct net_device *vf_netdev, struct bpf_prog *prog) xdp.command = XDP_SETUP_PROG; xdp.prog = prog; - ret = dev_xdp_propagate(vf_netdev, &xdp); + ret = netif_xdp_propagate(vf_netdev, &xdp); if (ret && prog) bpf_prog_put(prog); diff --git a/drivers/net/hyperv/netvsc_drv.c b/drivers/net/hyperv/netvsc_drv.c index 14a0d04e21ae..c41a025c66f0 100644 --- a/drivers/net/hyperv/netvsc_drv.c +++ b/drivers/net/hyperv/netvsc_drv.c @@ -2462,8 +2462,6 @@ static int netvsc_unregister_vf(struct net_device *vf_netdev) netdev_info(ndev, "VF unregistering: %s\n", vf_netdev->name); - netvsc_vf_setxdp(vf_netdev, NULL); - reinit_completion(&net_device_ctx->vf_add); netdev_rx_handler_unregister(vf_netdev); netdev_upper_dev_unlink(vf_netdev, ndev); @@ -2631,7 +2629,9 @@ static int netvsc_probe(struct hv_device *dev, continue; netvsc_prepare_bonding(vf_netdev); + netdev_lock_ops(vf_netdev); netvsc_register_vf(vf_netdev, VF_REG_IN_PROBE); + netdev_unlock_ops(vf_netdev); __netvsc_vf_setup(net, vf_netdev); break; } diff --git a/net/core/dev.c b/net/core/dev.c index 2b514d95c528..a388f459a366 100644 --- a/net/core/dev.c +++ b/net/core/dev.c @@ -9968,6 +9968,7 @@ int netif_xdp_propagate(struct net_device *dev, struct netdev_bpf *bpf) return dev->netdev_ops->ndo_bpf(dev, bpf); } +EXPORT_SYMBOL_GPL(netif_xdp_propagate); u32 dev_xdp_prog_id(struct net_device *dev, enum bpf_xdp_mode mode) { -- 2.43.0

1 month, 2 weeks

2
1
0 0

[PATCH] iio: adc: adi-axi-adc: fix ad7606_bus_reg_read()

by David Lechner

Mask the value read before returning it. The value read over the parallel bus via the AXI ADC IP block contains both the address and the data, but callers expect val to only contain the data. Cc: stable(a)vger.kernel.org Fixes: 79c47485e438 ("iio: adc: adi-axi-adc: add support for AD7606 register writing") Signed-off-by: David Lechner <dlechner(a)baylibre.com> --- drivers/iio/adc/adi-axi-adc.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/drivers/iio/adc/adi-axi-adc.c b/drivers/iio/adc/adi-axi-adc.c index cf942c043457ccea49207c3900153ee371b3774f..d4759a98b4062bc25ea088e3868806e82db03e8d 100644 --- a/drivers/iio/adc/adi-axi-adc.c +++ b/drivers/iio/adc/adi-axi-adc.c @@ -457,6 +457,9 @@ static int ad7606_bus_reg_read(struct iio_backend *back, u32 reg, u32 *val) axi_adc_raw_write(back, addr); axi_adc_raw_read(back, val); + /* Register value is 8 bits. Remove address bits. */ + *val &= 0xFF; + /* Write 0x0 on the bus to get back to ADC mode */ axi_adc_raw_write(back, 0); --- base-commit: 7cdfbc0113d087348b8e65dd79276d0f57b89a10 change-id: 20250530-iio-adc-adi-axi-adc-fix-ad7606_bus_reg_read-f2bbb503db8b Best regards, -- David Lechner <dlechner(a)baylibre.com>

1 month, 2 weeks

1
2
0 0

[PATCH resend 2/2] jffs2: initialize inocache earlier

by Fedor Pchelkin

Inside jffs2_new_inode() there is a small gap when jffs2_init_acl_pre() or jffs2_do_new_inode() may fail e.g. due to a memory allocation error while uninit inocache field is touched upon subsequent inode eviction. general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] CPU: 0 PID: 10592 Comm: syz-executor.1 Not tainted 5.10.209-syzkaller #0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:jffs2_xattr_delete_inode+0x35/0x130 fs/jffs2/xattr.c:602 Call Trace: jffs2_do_clear_inode+0x4c/0x570 fs/jffs2/readinode.c:1418 evict+0x281/0x6b0 fs/inode.c:577 iput_final fs/inode.c:1697 [inline] iput.part.0+0x4df/0x6d0 fs/inode.c:1723 iput+0x58/0x80 fs/inode.c:1713 jffs2_new_inode+0xb12/0xdb0 fs/jffs2/fs.c:469 jffs2_create+0x90/0x400 fs/jffs2/dir.c:177 lookup_open.isra.0+0xead/0x1260 fs/namei.c:3169 open_last_lookups fs/namei.c:3239 [inline] path_openat+0x96c/0x2670 fs/namei.c:3428 do_filp_open+0x1a4/0x3f0 fs/namei.c:3458 do_sys_openat2+0x171/0x420 fs/open.c:1186 do_sys_open fs/open.c:1202 [inline] __do_sys_openat fs/open.c:1218 [inline] __se_sys_openat fs/open.c:1213 [inline] __x64_sys_openat+0x13c/0x1f0 fs/open.c:1213 do_syscall_64+0x30/0x40 arch/x86/entry/common.c:46 Initialize the inocache pointer to a NULL value while preparing an inode in jffs2_init_inode_info(). jffs2_xattr_delete_inode() will handle it later just fine. Found by Linux Verification Center (linuxtesting.org) with Syzkaller. Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2") Cc: stable(a)vger.kernel.org Signed-off-by: Fedor Pchelkin <pchelkin(a)ispras.ru> Reviewed-by: Zhihao Cheng <chengzhihao1(a)huawei.com> --- fs/jffs2/os-linux.h | 1 + 1 file changed, 1 insertion(+) diff --git a/fs/jffs2/os-linux.h b/fs/jffs2/os-linux.h index 86ab014a349c..39b6565f10c9 100644 --- a/fs/jffs2/os-linux.h +++ b/fs/jffs2/os-linux.h @@ -55,6 +55,7 @@ static inline void jffs2_init_inode_info(struct jffs2_inode_info *f) f->metadata = NULL; f->dents = NULL; f->target = NULL; + f->inocache = NULL; f->flags = 0; f->usercompr = 0; } -- 2.49.0

1 month, 2 weeks

1
0
0 0

[PATCH resend 1/2] jffs2: initialize filesystem-private inode info in ->alloc_inode callback

by Fedor Pchelkin

The symlink body (->target) should be freed at the same time as the inode itself per commit 4fdcfab5b553 ("jffs2: fix use-after-free on symlink traversal"). It is a filesystem-specific field but there exist several error paths during generic inode allocation when ->free_inode(), namely jffs2_free_inode(), is called with still uninitialized private info. The calltrace looks like: alloc_inode inode_init_always // fails i_callback free_inode jffs2_free_inode // touches uninit ->target field Commit af9a8730ddb6 ("jffs2: Fix potential illegal address access in jffs2_free_inode") approached the observed problem but fixed it only partially. Our local Syzkaller instance is still hitting these kinds of failures. The thing is that jffs2_i_init_once(), where the initialization of f->target has been moved, is called once per slab allocation so it won't be called for the object structure possibly retrieved later from the slab cache for reuse. The practice followed by many other filesystems is to initialize filesystem-private inode contents in the corresponding ->alloc_inode() callbacks. This also allows to drop initialization from jffs2_iget() and jffs2_new_inode() as ->alloc_inode() is called in those places. Found by Linux Verification Center (linuxtesting.org) with Syzkaller. Fixes: 4fdcfab5b553 ("jffs2: fix use-after-free on symlink traversal") Cc: stable(a)vger.kernel.org Signed-off-by: Fedor Pchelkin <pchelkin(a)ispras.ru> Reviewed-by: Zhihao Cheng <chengzhihao1(a)huawei.com> --- fs/jffs2/fs.c | 2 -- fs/jffs2/super.c | 3 ++- 2 files changed, 2 insertions(+), 3 deletions(-) diff --git a/fs/jffs2/fs.c b/fs/jffs2/fs.c index d175cccb7c55..85c4b273918f 100644 --- a/fs/jffs2/fs.c +++ b/fs/jffs2/fs.c @@ -271,7 +271,6 @@ struct inode *jffs2_iget(struct super_block *sb, unsigned long ino) f = JFFS2_INODE_INFO(inode); c = JFFS2_SB_INFO(inode->i_sb); - jffs2_init_inode_info(f); mutex_lock(&f->sem); ret = jffs2_do_read_inode(c, f, inode->i_ino, &latest_node); @@ -439,7 +438,6 @@ struct inode *jffs2_new_inode (struct inode *dir_i, umode_t mode, struct jffs2_r return ERR_PTR(-ENOMEM); f = JFFS2_INODE_INFO(inode); - jffs2_init_inode_info(f); mutex_lock(&f->sem); memset(ri, 0, sizeof(*ri)); diff --git a/fs/jffs2/super.c b/fs/jffs2/super.c index 4545f885c41e..b56ff63357f3 100644 --- a/fs/jffs2/super.c +++ b/fs/jffs2/super.c @@ -42,6 +42,8 @@ static struct inode *jffs2_alloc_inode(struct super_block *sb) f = alloc_inode_sb(sb, jffs2_inode_cachep, GFP_KERNEL); if (!f) return NULL; + + jffs2_init_inode_info(f); return &f->vfs_inode; } @@ -58,7 +60,6 @@ static void jffs2_i_init_once(void *foo) struct jffs2_inode_info *f = foo; mutex_init(&f->sem); - f->target = NULL; inode_init_once(&f->vfs_inode); } -- 2.49.0

1 month, 2 weeks

1
0
0 0

FAILED: patch "[PATCH] x86/mm/init: Handle the special case of device private pages" failed to apply to 5.15-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 5.15-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.15.y git checkout FETCH_HEAD git cherry-pick -x 7170130e4c72ce0caa0cb42a1627c635cc262821 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025052750-fondness-revocable-a23b@gregkh' --subject-prefix 'PATCH 5.15.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 7170130e4c72ce0caa0cb42a1627c635cc262821 Mon Sep 17 00:00:00 2001 From: Balbir Singh <balbirs(a)nvidia.com> Date: Tue, 1 Apr 2025 11:07:52 +1100 Subject: [PATCH] x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit As Bert Karwatzki reported, the following recent commit causes a performance regression on AMD iGPU and dGPU systems: 7ffb791423c7 ("x86/kaslr: Reduce KASLR entropy on most x86 systems") It exposed a bug with nokaslr and zone device interaction. The root cause of the bug is that, the GPU driver registers a zone device private memory region. When KASLR is disabled or the above commit is applied, the direct_map_physmem_end is set to much higher than 10 TiB typically to the 64TiB address. When zone device private memory is added to the system via add_pages(), it bumps up the max_pfn to the same value. This causes dma_addressing_limited() to return true, since the device cannot address memory all the way up to max_pfn. This caused a regression for games played on the iGPU, as it resulted in the DMA32 zone being used for GPU allocations. Fix this by not bumping up max_pfn on x86 systems, when pgmap is passed into add_pages(). The presence of pgmap is used to determine if device private memory is being added via add_pages(). More details: devm_request_mem_region() and request_free_mem_region() request for device private memory. iomem_resource is passed as the base resource with start and end parameters. iomem_resource's end depends on several factors, including the platform and virtualization. On x86 for example on bare metal, this value is set to boot_cpu_data.x86_phys_bits. boot_cpu_data.x86_phys_bits can change depending on support for MKTME. By default it is set to the same as log2(direct_map_physmem_end) which is 46 to 52 bits depending on the number of levels in the page table. The allocation routines used iomem_resource's end and direct_map_physmem_end to figure out where to allocate the region. [ arch/powerpc is also impacted by this problem, but this patch does not fix the issue for PowerPC. ] Testing: 1. Tested on a virtual machine with test_hmm for zone device inseration 2. A previous version of this patch was tested by Bert, please see: https://lore.kernel.org/lkml/d87680bab997fdc9fb4e638983132af235d9a03a.camel… [ mingo: Clarified the comments and the changelog. ] Reported-by: Bert Karwatzki <spasswolf(a)web.de> Tested-by: Bert Karwatzki <spasswolf(a)web.de> Fixes: 7ffb791423c7 ("x86/kaslr: Reduce KASLR entropy on most x86 systems") Signed-off-by: Balbir Singh <balbirs(a)nvidia.com> Signed-off-by: Ingo Molnar <mingo(a)kernel.org> Cc: Brian Gerst <brgerst(a)gmail.com> Cc: Juergen Gross <jgross(a)suse.com> Cc: H. Peter Anvin <hpa(a)zytor.com> Cc: Linus Torvalds <torvalds(a)linux-foundation.org> Cc: Andrew Morton <akpm(a)linux-foundation.org> Cc: Christoph Hellwig <hch(a)lst.de> Cc: Pierre-Eric Pelloux-Prayer <pierre-eric.pelloux-prayer(a)amd.com> Cc: Alex Deucher <alexander.deucher(a)amd.com> Cc: Christian König <christian.koenig(a)amd.com> Cc: David Airlie <airlied(a)gmail.com> Cc: Simona Vetter <simona(a)ffwll.ch> Link: https://lore.kernel.org/r/20250401000752.249348-1-balbirs@nvidia.com diff --git a/arch/x86/mm/init_64.c b/arch/x86/mm/init_64.c index 519aa53114fa..821a0b53b21c 100644 --- a/arch/x86/mm/init_64.c +++ b/arch/x86/mm/init_64.c @@ -959,9 +959,18 @@ int add_pages(int nid, unsigned long start_pfn, unsigned long nr_pages, ret = __add_pages(nid, start_pfn, nr_pages, params); WARN_ON_ONCE(ret); - /* update max_pfn, max_low_pfn and high_memory */ - update_end_of_memory_vars(start_pfn << PAGE_SHIFT, - nr_pages << PAGE_SHIFT); + /* + * Special case: add_pages() is called by memremap_pages() for adding device + * private pages. Do not bump up max_pfn in the device private path, + * because max_pfn changes affect dma_addressing_limited(). + * + * dma_addressing_limited() returning true when max_pfn is the device's + * addressable memory can force device drivers to use bounce buffers + * and impact their performance negatively: + */ + if (!params->pgmap) + /* update max_pfn, max_low_pfn and high_memory */ + update_end_of_memory_vars(start_pfn << PAGE_SHIFT, nr_pages << PAGE_SHIFT); return ret; }

1 month, 2 weeks

4
5
0 0

[PATCH 3/3] ASoC: amd: acp3x-pdm-dma: free pdm device data on closing

by Fedor Pchelkin

Dynamic memory referenced by runtime->private_data pointer is allocated in acp_pdm_dma_open() and needs to be freed in the corresponding ->close() callback. Found by Linux Verification Center (linuxtesting.org). Fixes: 4a767b1d039a ("ASoC: amd: add acp3x pdm driver dma ops") Cc: stable(a)vger.kernel.org Signed-off-by: Fedor Pchelkin <pchelkin(a)ispras.ru> --- sound/soc/amd/renoir/acp3x-pdm-dma.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/sound/soc/amd/renoir/acp3x-pdm-dma.c b/sound/soc/amd/renoir/acp3x-pdm-dma.c index 95ac8c680037..6b294040e164 100644 --- a/sound/soc/amd/renoir/acp3x-pdm-dma.c +++ b/sound/soc/amd/renoir/acp3x-pdm-dma.c @@ -301,9 +301,11 @@ static int acp_pdm_dma_close(struct snd_soc_component *component, struct snd_pcm_substream *substream) { struct pdm_dev_data *adata = dev_get_drvdata(component->dev); + struct snd_pcm_runtime *runtime = substream->runtime; disable_pdm_interrupts(adata->acp_base); adata->capture_stream = NULL; + kfree(runtime->private_data); return 0; } -- 2.49.0

1 month, 2 weeks

1
0
0 0

[PATCH 2/3] ASoC: amd: acp3x-pcm-dma: free runtime private data on closing

by Fedor Pchelkin

Dynamic memory referenced by runtime->private_data pointer is allocated in acp3x_dma_open() and needs to be freed in the corresponding ->close() callback. Found by Linux Verification Center (linuxtesting.org). Fixes: c9fe7db6e884 ("ASoC: amd: Refactoring of DAI from DMA driver") Cc: stable(a)vger.kernel.org Signed-off-by: Fedor Pchelkin <pchelkin(a)ispras.ru> --- sound/soc/amd/raven/acp3x-pcm-dma.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sound/soc/amd/raven/acp3x-pcm-dma.c b/sound/soc/amd/raven/acp3x-pcm-dma.c index bb9ed52d744d..90559c8304bc 100644 --- a/sound/soc/amd/raven/acp3x-pcm-dma.c +++ b/sound/soc/amd/raven/acp3x-pcm-dma.c @@ -353,7 +353,7 @@ static int acp3x_dma_close(struct snd_soc_component *component, adata->i2ssp_capture_stream = NULL; } } - + kfree(ins); return 0; } -- 2.49.0

1 month, 2 weeks

1
0
0 0

[PATCH 1/3] ASoC: amd: acp6x-pdm-dma: free pdm device data on closing

by Fedor Pchelkin

Dynamic memory referenced by runtime->private_data pointer is allocated in acp6x_pdm_dma_open() and needs to be freed in the corresponding ->close() callback. unreferenced object 0xffff88813525a940 (size 32): comm "pipewire", pid 1238, jiffies 4294728195 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 3c 03 00 c9 ff ff ..........<..... backtrace (crc 14400236): __kmalloc_cache_noprof+0x3a3/0x490 acp6x_pdm_dma_open+0x10d/0x680 [snd_acp6x_pdm_dma] snd_soc_component_open+0x71/0x150 [snd_soc_core] __soc_pcm_open+0x221/0xb40 [snd_soc_core] soc_pcm_open+0x99/0x110 [snd_soc_core] snd_pcm_open_substream+0x18b/0x4e0 [snd_pcm] snd_pcm_open+0x244/0x670 [snd_pcm] snd_pcm_capture_open+0x72/0xd0 [snd_pcm] chrdev_open+0x1eb/0x5e0 do_dentry_open+0x494/0x1820 vfs_open+0x7a/0x440 do_open+0x3d0/0xd30 path_openat+0x1d3/0x580 do_filp_open+0x1c5/0x450 do_sys_openat2+0xef/0x180 __x64_sys_openat+0x10e/0x210 Found by Linux Verification Center (linuxtesting.org). Fixes: ceb4fcc13ae5 ("ASoC: amd: add acp6x pdm driver dma ops") Cc: stable(a)vger.kernel.org Signed-off-by: Fedor Pchelkin <pchelkin(a)ispras.ru> --- sound/soc/amd/yc/acp6x-pdm-dma.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/sound/soc/amd/yc/acp6x-pdm-dma.c b/sound/soc/amd/yc/acp6x-pdm-dma.c index ac758b90f441..167cd792d33d 100644 --- a/sound/soc/amd/yc/acp6x-pdm-dma.c +++ b/sound/soc/amd/yc/acp6x-pdm-dma.c @@ -275,9 +275,11 @@ static int acp6x_pdm_dma_close(struct snd_soc_component *component, struct snd_pcm_substream *substream) { struct pdm_dev_data *adata = dev_get_drvdata(component->dev); + struct snd_pcm_runtime *runtime = substream->runtime; acp6x_disable_pdm_interrupts(adata->acp6x_base); adata->capture_stream = NULL; + kfree(runtime->private_data); return 0; } -- 2.49.0

1 month, 2 weeks

1
0
0 0

[PATCH AUTOSEL 5.4 1/6] ACPICA: fix acpi operand cache leak in dswstate.c

by Sasha Levin

From: Seunghun Han <kkamagui(a)gmail.com> [ Upstream commit 156fd20a41e776bbf334bd5e45c4f78dfc90ce1c ] ACPICA commit 987a3b5cf7175916e2a4b6ea5b8e70f830dfe732 I found an ACPI cache leak in ACPI early termination and boot continuing case. When early termination occurs due to malicious ACPI table, Linux kernel terminates ACPI function and continues to boot process. While kernel terminates ACPI function, kmem_cache_destroy() reports Acpi-Operand cache leak. Boot log of ACPI operand cache leak is as follows: >[ 0.585957] ACPI: Added _OSI(Module Device) >[ 0.587218] ACPI: Added _OSI(Processor Device) >[ 0.588530] ACPI: Added _OSI(3.0 _SCP Extensions) >[ 0.589790] ACPI: Added _OSI(Processor Aggregator Device) >[ 0.591534] ACPI Error: Illegal I/O port address/length above 64K: C806E00000004002/0x2 (20170303/hwvalid-155) >[ 0.594351] ACPI Exception: AE_LIMIT, Unable to initialize fixed events (20170303/evevent-88) >[ 0.597858] ACPI: Unable to start the ACPI Interpreter >[ 0.599162] ACPI Error: Could not remove SCI handler (20170303/evmisc-281) >[ 0.601836] kmem_cache_destroy Acpi-Operand: Slab cache still has objects >[ 0.603556] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.12.0-rc5 #26 >[ 0.605159] Hardware name: innotek gmb_h virtual_box/virtual_box, BIOS virtual_box 12/01/2006 >[ 0.609177] Call Trace: >[ 0.610063] ? dump_stack+0x5c/0x81 >[ 0.611118] ? kmem_cache_destroy+0x1aa/0x1c0 >[ 0.612632] ? acpi_sleep_proc_init+0x27/0x27 >[ 0.613906] ? acpi_os_delete_cache+0xa/0x10 >[ 0.617986] ? acpi_ut_delete_caches+0x3f/0x7b >[ 0.619293] ? acpi_terminate+0xa/0x14 >[ 0.620394] ? acpi_init+0x2af/0x34f >[ 0.621616] ? __class_create+0x4c/0x80 >[ 0.623412] ? video_setup+0x7f/0x7f >[ 0.624585] ? acpi_sleep_proc_init+0x27/0x27 >[ 0.625861] ? do_one_initcall+0x4e/0x1a0 >[ 0.627513] ? kernel_init_freeable+0x19e/0x21f >[ 0.628972] ? rest_init+0x80/0x80 >[ 0.630043] ? kernel_init+0xa/0x100 >[ 0.631084] ? ret_from_fork+0x25/0x30 >[ 0.633343] vgaarb: loaded >[ 0.635036] EDAC MC: Ver: 3.0.0 >[ 0.638601] PCI: Probing PCI hardware >[ 0.639833] PCI host bridge to bus 0000:00 >[ 0.641031] pci_bus 0000:00: root bus resource [io 0x0000-0xffff] > ... Continue to boot and log is omitted ... I analyzed this memory leak in detail and found acpi_ds_obj_stack_pop_and_ delete() function miscalculated the top of the stack. acpi_ds_obj_stack_push() function uses walk_state->operand_index for start position of the top, but acpi_ds_obj_stack_pop_and_delete() function considers index 0 for it. Therefore, this causes acpi operand memory leak. This cache leak causes a security threat because an old kernel (<= 4.9) shows memory locations of kernel functions in stack dump. Some malicious users could use this information to neutralize kernel ASLR. I made a patch to fix ACPI operand cache leak. Link: https://github.com/acpica/acpica/commit/987a3b5c Signed-off-by: Seunghun Han <kkamagui(a)gmail.com> Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> Link: https://patch.msgid.link/4999480.31r3eYUQgx@rjwysocki.net Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- **YES** This commit should be backported to stable kernel trees based on the following analysis: ## Analysis of the Commit **1. Bug Fix Nature**: This commit fixes a clear memory leak bug in the ACPICA subsystem. The issue occurs when `acpi_ds_create_operands()` encounters an error during operand creation and needs to clean up allocated operands. **2. Root Cause**: The core issue is a mismatch between how operands are pushed and popped from the stack: - `acpi_ds_obj_stack_push()` uses `walk_state->operand_index` to track the current position - `acpi_ds_obj_stack_pop_and_delete()` incorrectly assumes operands start at index 0 - This causes incomplete cleanup when errors occur, leading to memory leaks **3. Code Analysis**: The fix correctly addresses the issue by: - Tracking the original operand count (`prev_num_operands`) - Calculating the correct number of operands to clean up (`new_num_operands`) - Setting `walk_state->num_operands = i` before cleanup to ensure proper indexing - Restoring the original operand count after cleanup **4. Security Implications**: The commit message explicitly mentions this is a security issue - the memory leak can expose kernel function addresses in older kernels (≤4.9), potentially defeating ASLR. This elevates the importance beyond a simple memory leak. **5. Pattern Consistency**: This follows the exact same pattern as other ACPICA operand cache leak fixes that were successfully backported (commits `97f3c0a4b057`, `2915f16bdce2`, etc.), all authored by the same developer addressing similar issues. **6. Stability Characteristics**: - **Small and contained**: Only 8 lines of actual logic changes - **Clear error path**: Only affects cleanup during error conditions - **No behavioral changes**: No impact on normal operation - **Low regression risk**: Only modifies error handling paths **7. Backport Suitability Criteria**: - ✅ Fixes important bug affecting users (memory leak) - ✅ Small, contained fix with minimal risk - ✅ No architectural changes - ✅ Addresses security concern (ASLR bypass potential) - ✅ Follows established patterns for ACPICA fixes - ✅ Critical kernel subsystem (ACPI) **8. Historical Precedent**: The similar commits in the reference examples (Similar Commits #1, #2, #3) all have "Backport Status: YES" and address nearly identical ACPICA operand cache leak issues with similar fixes and commit message patterns. This commit meets all criteria for stable tree backporting: it's an important bugfix, has minimal regression risk, affects a critical subsystem, and follows established patterns for similar fixes that were previously backported. drivers/acpi/acpica/dsutils.c | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/drivers/acpi/acpica/dsutils.c b/drivers/acpi/acpica/dsutils.c index fb9ed5e1da89d..2bdae8a25e084 100644 --- a/drivers/acpi/acpica/dsutils.c +++ b/drivers/acpi/acpica/dsutils.c @@ -668,6 +668,8 @@ acpi_ds_create_operands(struct acpi_walk_state *walk_state, union acpi_parse_object *arguments[ACPI_OBJ_NUM_OPERANDS]; u32 arg_count = 0; u32 index = walk_state->num_operands; + u32 prev_num_operands = walk_state->num_operands; + u32 new_num_operands; u32 i; ACPI_FUNCTION_TRACE_PTR(ds_create_operands, first_arg); @@ -696,6 +698,7 @@ acpi_ds_create_operands(struct acpi_walk_state *walk_state, /* Create the interpreter arguments, in reverse order */ + new_num_operands = index; index--; for (i = 0; i < arg_count; i++) { arg = arguments[index]; @@ -720,7 +723,11 @@ acpi_ds_create_operands(struct acpi_walk_state *walk_state, * pop everything off of the operand stack and delete those * objects */ - acpi_ds_obj_stack_pop_and_delete(arg_count, walk_state); + walk_state->num_operands = i; + acpi_ds_obj_stack_pop_and_delete(new_num_operands, walk_state); + + /* Restore operand count */ + walk_state->num_operands = prev_num_operands; ACPI_EXCEPTION((AE_INFO, status, "While creating Arg %u", index)); return_ACPI_STATUS(status); -- 2.39.5

1 month, 2 weeks

1
5
0 0

[PATCH AUTOSEL 5.10 01/10] ACPICA: fix acpi operand cache leak in dswstate.c

by Sasha Levin

From: Seunghun Han <kkamagui(a)gmail.com> [ Upstream commit 156fd20a41e776bbf334bd5e45c4f78dfc90ce1c ] ACPICA commit 987a3b5cf7175916e2a4b6ea5b8e70f830dfe732 I found an ACPI cache leak in ACPI early termination and boot continuing case. When early termination occurs due to malicious ACPI table, Linux kernel terminates ACPI function and continues to boot process. While kernel terminates ACPI function, kmem_cache_destroy() reports Acpi-Operand cache leak. Boot log of ACPI operand cache leak is as follows: >[ 0.585957] ACPI: Added _OSI(Module Device) >[ 0.587218] ACPI: Added _OSI(Processor Device) >[ 0.588530] ACPI: Added _OSI(3.0 _SCP Extensions) >[ 0.589790] ACPI: Added _OSI(Processor Aggregator Device) >[ 0.591534] ACPI Error: Illegal I/O port address/length above 64K: C806E00000004002/0x2 (20170303/hwvalid-155) >[ 0.594351] ACPI Exception: AE_LIMIT, Unable to initialize fixed events (20170303/evevent-88) >[ 0.597858] ACPI: Unable to start the ACPI Interpreter >[ 0.599162] ACPI Error: Could not remove SCI handler (20170303/evmisc-281) >[ 0.601836] kmem_cache_destroy Acpi-Operand: Slab cache still has objects >[ 0.603556] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.12.0-rc5 #26 >[ 0.605159] Hardware name: innotek gmb_h virtual_box/virtual_box, BIOS virtual_box 12/01/2006 >[ 0.609177] Call Trace: >[ 0.610063] ? dump_stack+0x5c/0x81 >[ 0.611118] ? kmem_cache_destroy+0x1aa/0x1c0 >[ 0.612632] ? acpi_sleep_proc_init+0x27/0x27 >[ 0.613906] ? acpi_os_delete_cache+0xa/0x10 >[ 0.617986] ? acpi_ut_delete_caches+0x3f/0x7b >[ 0.619293] ? acpi_terminate+0xa/0x14 >[ 0.620394] ? acpi_init+0x2af/0x34f >[ 0.621616] ? __class_create+0x4c/0x80 >[ 0.623412] ? video_setup+0x7f/0x7f >[ 0.624585] ? acpi_sleep_proc_init+0x27/0x27 >[ 0.625861] ? do_one_initcall+0x4e/0x1a0 >[ 0.627513] ? kernel_init_freeable+0x19e/0x21f >[ 0.628972] ? rest_init+0x80/0x80 >[ 0.630043] ? kernel_init+0xa/0x100 >[ 0.631084] ? ret_from_fork+0x25/0x30 >[ 0.633343] vgaarb: loaded >[ 0.635036] EDAC MC: Ver: 3.0.0 >[ 0.638601] PCI: Probing PCI hardware >[ 0.639833] PCI host bridge to bus 0000:00 >[ 0.641031] pci_bus 0000:00: root bus resource [io 0x0000-0xffff] > ... Continue to boot and log is omitted ... I analyzed this memory leak in detail and found acpi_ds_obj_stack_pop_and_ delete() function miscalculated the top of the stack. acpi_ds_obj_stack_push() function uses walk_state->operand_index for start position of the top, but acpi_ds_obj_stack_pop_and_delete() function considers index 0 for it. Therefore, this causes acpi operand memory leak. This cache leak causes a security threat because an old kernel (<= 4.9) shows memory locations of kernel functions in stack dump. Some malicious users could use this information to neutralize kernel ASLR. I made a patch to fix ACPI operand cache leak. Link: https://github.com/acpica/acpica/commit/987a3b5c Signed-off-by: Seunghun Han <kkamagui(a)gmail.com> Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> Link: https://patch.msgid.link/4999480.31r3eYUQgx@rjwysocki.net Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- **YES** This commit should be backported to stable kernel trees based on the following analysis: ## Analysis of the Commit **1. Bug Fix Nature**: This commit fixes a clear memory leak bug in the ACPICA subsystem. The issue occurs when `acpi_ds_create_operands()` encounters an error during operand creation and needs to clean up allocated operands. **2. Root Cause**: The core issue is a mismatch between how operands are pushed and popped from the stack: - `acpi_ds_obj_stack_push()` uses `walk_state->operand_index` to track the current position - `acpi_ds_obj_stack_pop_and_delete()` incorrectly assumes operands start at index 0 - This causes incomplete cleanup when errors occur, leading to memory leaks **3. Code Analysis**: The fix correctly addresses the issue by: - Tracking the original operand count (`prev_num_operands`) - Calculating the correct number of operands to clean up (`new_num_operands`) - Setting `walk_state->num_operands = i` before cleanup to ensure proper indexing - Restoring the original operand count after cleanup **4. Security Implications**: The commit message explicitly mentions this is a security issue - the memory leak can expose kernel function addresses in older kernels (≤4.9), potentially defeating ASLR. This elevates the importance beyond a simple memory leak. **5. Pattern Consistency**: This follows the exact same pattern as other ACPICA operand cache leak fixes that were successfully backported (commits `97f3c0a4b057`, `2915f16bdce2`, etc.), all authored by the same developer addressing similar issues. **6. Stability Characteristics**: - **Small and contained**: Only 8 lines of actual logic changes - **Clear error path**: Only affects cleanup during error conditions - **No behavioral changes**: No impact on normal operation - **Low regression risk**: Only modifies error handling paths **7. Backport Suitability Criteria**: - ✅ Fixes important bug affecting users (memory leak) - ✅ Small, contained fix with minimal risk - ✅ No architectural changes - ✅ Addresses security concern (ASLR bypass potential) - ✅ Follows established patterns for ACPICA fixes - ✅ Critical kernel subsystem (ACPI) **8. Historical Precedent**: The similar commits in the reference examples (Similar Commits #1, #2, #3) all have "Backport Status: YES" and address nearly identical ACPICA operand cache leak issues with similar fixes and commit message patterns. This commit meets all criteria for stable tree backporting: it's an important bugfix, has minimal regression risk, affects a critical subsystem, and follows established patterns for similar fixes that were previously backported. drivers/acpi/acpica/dsutils.c | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/drivers/acpi/acpica/dsutils.c b/drivers/acpi/acpica/dsutils.c index fb9ed5e1da89d..2bdae8a25e084 100644 --- a/drivers/acpi/acpica/dsutils.c +++ b/drivers/acpi/acpica/dsutils.c @@ -668,6 +668,8 @@ acpi_ds_create_operands(struct acpi_walk_state *walk_state, union acpi_parse_object *arguments[ACPI_OBJ_NUM_OPERANDS]; u32 arg_count = 0; u32 index = walk_state->num_operands; + u32 prev_num_operands = walk_state->num_operands; + u32 new_num_operands; u32 i; ACPI_FUNCTION_TRACE_PTR(ds_create_operands, first_arg); @@ -696,6 +698,7 @@ acpi_ds_create_operands(struct acpi_walk_state *walk_state, /* Create the interpreter arguments, in reverse order */ + new_num_operands = index; index--; for (i = 0; i < arg_count; i++) { arg = arguments[index]; @@ -720,7 +723,11 @@ acpi_ds_create_operands(struct acpi_walk_state *walk_state, * pop everything off of the operand stack and delete those * objects */ - acpi_ds_obj_stack_pop_and_delete(arg_count, walk_state); + walk_state->num_operands = i; + acpi_ds_obj_stack_pop_and_delete(new_num_operands, walk_state); + + /* Restore operand count */ + walk_state->num_operands = prev_num_operands; ACPI_EXCEPTION((AE_INFO, status, "While creating Arg %u", index)); return_ACPI_STATUS(status); -- 2.39.5

1 month, 2 weeks

1
9
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror