- Linux-stable-mirror - lists.linaro.org

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.31 release. There are 626 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 29 May 2025 16:22:51 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.31-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.31-rc1 Thomas Zimmermann <tzimmermann(a)suse.de> drm/gem: Internally test import_attach for imported objects Balbir Singh <balbirs(a)nvidia.com> x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers bounce buffers Nathan Chancellor <nathan(a)kernel.org> i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work() Dan Carpenter <dan.carpenter(a)linaro.org> pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group() Arnd Bergmann <arnd(a)arndb.de> watchdog: aspeed: fix 64-bit division Amber Lin <Amber.Lin(a)amd.com> drm/amdkfd: Correct F8_MODE for gfx950 Geert Uytterhoeven <geert+renesas(a)glider.be> serial: sh-sci: Save and restore more registers Eduard Zingerman <eddyz87(a)gmail.com> bpf: abort verification if env->cur_state->loop_entry != NULL Ovidiu Bunea <Ovidiu.Bunea(a)amd.com> drm/amd/display: Exit idle optimizations before accessing PHY Nathan Chancellor <nathan(a)kernel.org> kbuild: Properly disable -Wunterminated-string-initialization for clang Linus Torvalds <torvalds(a)linux-foundation.org> Fix mis-uses of 'cc-option' for warning disablement Linus Torvalds <torvalds(a)linux-foundation.org> gcc-15: disable '-Wunterminated-string-initialization' entirely for now Linus Torvalds <torvalds(a)linux-foundation.org> gcc-15: make 'unterminated string initialization' just a warning Raag Jadav <raag.jadav(a)intel.com> err.h: move IOMEM_ERR_PTR() to err.h Larisa Grigore <larisa.grigore(a)nxp.com> spi: spi-fsl-dspi: Reset SR flags before sending a new message Bogdan-Gabriel Roman <bogdan-gabriel.roman(a)nxp.com> spi: spi-fsl-dspi: Halt the module after a new message transfer Larisa Grigore <larisa.grigore(a)nxp.com> spi: spi-fsl-dspi: restrict register range for regmap access Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> spi: use container_of_cont() for to_spi_device() Mark Pearson <mpearson-lenovo(a)squebb.ca> platform/x86: think-lmi: Fix attribute name usage for non-compliant items Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix stream write failure Jernej Skrabec <jernej.skrabec(a)gmail.com> Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection" Chris Lu <chris.lu(a)mediatek.com> Bluetooth: btmtksdio: Do close if SDIO card removed without close Chris Lu <chris.lu(a)mediatek.com> Bluetooth: btmtksdio: Check function enabled before doing close Ryusuke Konishi <konishi.ryusuke(a)gmail.com> nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() Kees Cook <kees(a)kernel.org> mm: vmalloc: only zero-init on vrealloc shrink Kees Cook <kees(a)kernel.org> mm: vmalloc: actually use the in-place vrealloc region Ignacio Moreno Gonzalez <Ignacio.MorenoGonzalez(a)kuka.com> mm: mmap: map MAP_STACK to VM_NOHUGEPAGE only if THP is enabled Tianyang Zhang <zhangtianyang(a)loongson.cn> mm/page_alloc.c: avoid infinite retries caused by cpuset race Breno Leitao <leitao(a)debian.org> memcg: always call cond_resched() after fn() Matthew Wilcox (Oracle) <willy(a)infradead.org> highmem: add folio_test_partial_kmap() Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: synaptics-rmi - fix crash with unsupported versions of F34 Vicki Pfau <vi(a)endrift.com> Input: xpad - add more controllers Mario Limonciello <mario.limonciello(a)amd.com> Revert "drm/amd: Keep display off while going into S4" Wang Zhaolong <wangzhaolong1(a)huawei.com> smb: client: Reset all search buffer pointers when releasing buffer Gabor Juhos <j4g8y7(a)gmail.com> arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs Wang Zhaolong <wangzhaolong1(a)huawei.com> smb: client: Fix use-after-free in cifs_fill_dirent feijuan.li <feijuan.li(a)samsung.com> drm/edid: fixed the bug that hdr metadata was not reset Zhang Rui <rui.zhang(a)intel.com> thermal: intel: x86_pkg_temp_thermal: Fix bogus trip temperature Vladimir Moskovkin <Vladimir.Moskovkin(a)kaspersky.com> platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() Dan Carpenter <dan.carpenter(a)linaro.org> pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id() Geert Uytterhoeven <geert+renesas(a)glider.be> pmdomain: renesas: rcar: Remove obsolete nullify checks Ronak Doshi <ronak.doshi(a)broadcom.com> vmxnet3: update MTU after device quiesce Jakob Unterwurzacher <jakobunt(a)gmail.com> net: dsa: microchip: linearize skb for tail-tagging switches Axel Forsman <axfo(a)kvaser.com> can: kvaser_pciefd: Fix echo_skb race Axel Forsman <axfo(a)kvaser.com> can: kvaser_pciefd: Continue parsing DMA buf after dropped RX Ilia Gavrilov <Ilia.Gavrilov(a)infotecs.ru> llc: fix data loss when reading from a socket in llc_ui_recvmsg() Ed Burcher <git(a)edburcher.com> ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10 Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Fix race of buffer access at PCM OSS layer Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-pcm: Delay reporting is only supported for playback direction Kai Vehmanen <kai.vehmanen(a)linux.intel.com> ASoc: SOF: topology: connect DAI to a single DAI link Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: Intel: hda-bus: Use PIO mode on ACE2+ platforms Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-control: Use SOF_CTRL_CMD_BINARY as numid for bytes_ext Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing rcu read protection for procfs content Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add locking for bcm_op runtime updates Carlos Sanchez <carlossanchez(a)geotab.com> can: slcan: allow reception of short error messages Dominik Grzegorzek <dominik.grzegorzek(a)oracle.com> padata: do not leak refcount in reorder_work Ivan Pravdin <ipravdin.official(a)gmail.com> crypto: algif_hash - fix double free in hash_accept André Draszik <andre.draszik(a)linaro.org> clk: s2mps11: initialise clk_hw_onecell_data::num before accessing ::hws[] in probe() Geetha sowjanya <gakula(a)marvell.com> octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG Subbaraya Sundeep <sbhatta(a)marvell.com> octeontx2-af: Set LMT_ENA bit for APR table entries Wang Liang <wangliang74(a)huawei.com> net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done Suman Ghosh <sumang(a)marvell.com> octeontx2-pf: Add AF_XDP non-zero copy support Cong Wang <xiyou.wangcong(a)gmail.com> sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() Eric Dumazet <edumazet(a)google.com> idpf: fix idpf_vport_splitq_napi_poll() Pavel Begunkov <asml.silence(a)gmail.com> io_uring: fix overflow resched cqe reordering Thangaraj Samynathan <thangaraj.s(a)microchip.com> net: lan743x: Restore SGMII CTRL register on resume Paul Kocialkowski <paulk(a)sys-base.io> net: dwmac-sun8i: Use parsed internal PHY address instead of 1 Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> pinctrl: qcom: switch to devm_register_sys_off_handler() Christoph Hellwig <hch(a)lst.de> loop: don't require ->write_iter for writable files in loop_configure Pavan Kumar Linga <pavan.kumar.linga(a)intel.com> idpf: fix null-ptr-deref in idpf_features_check Dave Ertman <david.m.ertman(a)intel.com> ice: Fix LACP bonds without SRIOV environment Jacob Keller <jacob.e.keller(a)intel.com> ice: fix vf->num_mac count with port representors Ido Schimmel <idosch(a)nvidia.com> bridge: netfilter: Fix forwarding of fragmented packets Sagi Maimon <maimon.sagi(a)gmail.com> ptp: ocp: Limit signal/freq counts in summary output functions En-Wei Wu <en-wei.wu(a)canonical.com> Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump handling Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix not checking l2cap_chan security level Adrian Hunter <adrian.hunter(a)intel.com> perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq Andrew Bresticker <abrestic(a)rivosinc.com> irqchip/riscv-imsic: Start local sync timer on correct CPU Tavian Barnes <tavianator(a)tavianator.com> ASoC: SOF: Intel: hda: Fix UAF when reloading module Raag Jadav <raag.jadav(a)intel.com> devres: Introduce devm_kmemdup_array() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> driver core: Split devres APIs to device/devres.h Stefan Wahren <wahrenst(a)gmx.net> dmaengine: fsl-edma: Fix return code for unhandled interrupts Dave Jiang <dave.jiang(a)intel.com> dmaengine: idxd: Fix ->poll() return value Paul Chaignon <paul.chaignon(a)gmail.com> xfrm: Sanitize marks before insert Andre Przywara <andre.przywara(a)arm.com> clk: sunxi-ng: d1: Add missing divider for MMC mod clocks Matti Lehtimäki <matti.lehtimaki(a)gmail.com> remoteproc: qcom_wcnss: Fix on platforms without fallback regulators David Hildenbrand <david(a)redhat.com> kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork() Seongman Lee <augustus92(a)kaist.ac.kr> x86/sev: Fix operator precedence in GHCB_MSR_VMPL_REQ_LEVEL macro Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix allowing write() from different address spaces Tobias Brunner <tobias(a)strongswan.org> xfrm: Fix UDP GRO handling for some corner cases Sabrina Dubroca <sd(a)queasysnail.net> espintcp: remove encap socket caching to avoid reference leak Sabrina Dubroca <sd(a)queasysnail.net> espintcp: fix skb leaks Charles Keepax <ckeepax(a)opensource.cirrus.com> soundwire: bus: Fix race on the creation of the IRQ domain Al Viro <viro(a)zeniv.linux.org.uk> __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock Austin Zheng <Austin.Zheng(a)amd.com> drm/amd/display: Call FP Protect Before Mode Programming/Mode Support Jason Andryuk <jason.andryuk(a)amd.com> xenbus: Allow PVH dom0 a non-local xenstore Paweł Anikiel <panikiel(a)google.com> x86/Kconfig: make CFI_AUTO_DEFAULT depend on !RUST or Rust >= 1.88 Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: add support for Killer on MTL Johannes Thumshirn <johannes.thumshirn(a)wdc.com> block: only update request sector if needed David Wei <dw(a)davidwei.uk> tools: ynl-gen: validate 0 len strings from kernel Qu Wenruo <wqu(a)suse.com> btrfs: avoid NULL pointer dereference if no valid csum tree Boris Burkov <boris(a)bur.io> btrfs: handle empty eb->folios in num_extent_folios() Goldwyn Rodrigues <rgoldwyn(a)suse.de> btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref Kees Cook <kees(a)kernel.org> btrfs: compression: adjust cb->compressed_folios allocation type Stefan Binding <sbinding(a)opensource.cirrus.com> ASoC: intel/sdw_utils: Add volume limit to cs42l43 speakers Pali Rohár <pali(a)kernel.org> cifs: Fix changing times and read-only attr over SMB1 smb_set_file_info() function Pali Rohár <pali(a)kernel.org> cifs: Fix and improve cifs_query_path_info() and cifs_query_file_info() Jens Axboe <axboe(a)kernel.dk> io_uring/fdinfo: annotate racy sq/cq head/tail reads Alistair Francis <alistair.francis(a)wdc.com> nvmet-tcp: don't restore null sk_state_change Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Fix duplicated name in MIDI substream names Wentao Guan <guanwentao(a)uniontech.com> nvme-pci: add quirks for WDC Blue SN550 15b7:5009 Wentao Guan <guanwentao(a)uniontech.com> nvme-pci: add quirks for device 126f:1001 Takashi Iwai <tiwai(a)suse.de> ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx Takashi Iwai <tiwai(a)suse.de> ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: cs42l43: Disable headphone clamps during type detection Gašper Nemgar <gasper.nemgar(a)gmail.com> platform/x86: ideapad-laptop: add support for some new buttons Pavel Nikulin <pavel(a)noa-labs.com> platform/x86: asus-wmi: Disable OOBE state after resume from hibernation Saranya Gopal <saranya.gopal(a)intel.com> platform/x86/intel: hid: Add Pantherlake support Salah Triki <salah.triki(a)gmail.com> smb: server: smb2pdu: check return value of xa_store() Martin Blumenstingl <martin.blumenstingl(a)googlemail.com> pinctrl: meson: define the pull up/down resistor value as 60 kOhm Ritesh Harjani (IBM) <ritesh.list(a)gmail.com> book3s64/radix: Fix compile errors when CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n Chenyuan Yang <chenyuan0y(a)gmail.com> ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of() Jessica Zhang <quic_jesszhan(a)quicinc.com> drm: Add valid clones check Douglas Anderson <dianders(a)chromium.org> drm/panel-edp: Add Starry 116KHD024006 Lin.Cao <lincao12(a)amd.com> drm/buddy: fix issue that force_merge cannot free all roots Simona Vetter <simona.vetter(a)ffwll.ch> drm/atomic: clarify the rules around drm_atomic_state->allow_modeset Oak Zeng <oak.zeng(a)intel.com> drm/xe: Reject BO eviction if BO is bound to current VM Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe/sa: Always call drm_suballoc_manager_fini() Ching-Te Ku <ku920601(a)realtek.com> wifi: rtw89: coex: Separated Wi-Fi connecting event from Wi-Fi scan event Maarten Lankhorst <dev(a)lankhorst.se> drm/xe: Do not attempt to bootstrap VF in execlists mode Maarten Lankhorst <dev(a)lankhorst.se> drm/xe: Move suballocator init to after display init P Praneesh <quic_ppranees(a)quicinc.com> wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation Zhi Wang <zhiw(a)nvidia.com> drm/nouveau: fix the broken marco GSP_MSG_MAX_SIZE Olivier Moysan <olivier.moysan(a)foss.st.com> drm: bridge: adv7511: fill stream capabilities P Praneesh <quic_ppranees(a)quicinc.com> wifi: ath12k: Fix end offset bit definition in monitor ring descriptor Aaradhana Sahu <quic_aarasahu(a)quicinc.com> wifi: ath12k: Fetch regdb.bin file from board-2.bin Rosen Penev <rosenp(a)gmail.com> wifi: ath9k: return by of_get_mac_address Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe/pf: Reset GuC VF config when unprovisioning critical resource Youssef Samir <quic_yabdulra(a)quicinc.com> accel/qaic: Mask out SR-IOV PCI resources Nicolas Escande <nico.escande(a)gmail.com> wifi: ath12k: fix ath12k_hal_tx_cmd_ext_desc_setup() info1 override Isaac Scott <isaac.scott(a)ideasonboard.com> regulator: ad5398: Add device tree support Sean Anderson <sean.anderson(a)linux.dev> spi: zynqmp-gqspi: Always acknowledge interrupts Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate Soeren Moch <smoch(a)web.de> wifi: rtl8xxxu: retry firmware download on error Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> clk: renesas: rzg2l-cpg: Refactor Runtime PM clock validation Ravi Bangoria <ravi.bangoria(a)amd.com> perf/amd/ibs: Fix ->config to sample period calculation for OP PMU Ravi Bangoria <ravi.bangoria(a)amd.com> perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt Sudeep Holla <sudeep.holla(a)arm.com> firmware: arm_scmi: Relax duplicate name constraint across protocol ids Viktor Malik <vmalik(a)redhat.com> bpftool: Fix readlink usage in get_fd_type Martin KaFai Lau <martin.lau(a)kernel.org> bpf: Use kallsyms to find the function name of a struct_ops's stub function Thomas Zimmermann <tzimmermann(a)suse.de> drm/ast: Find VBIOS mode from regular display size Matthew Sakai <msakai(a)redhat.com> dm vdo: use a short static string for thread name prefix Chung Chung <cchung(a)redhat.com> dm vdo indexer: prevent unterminated string warning Ken Raeburn <raeburn(a)redhat.com> dm vdo vio-pool: allow variable-sized metadata vios Vladimir Kondratiev <vladimir.kondratiev(a)mobileye.com> irqchip/riscv-aplic: Add support for hart indexes Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: rt722-sdca: Add some missing readable registers Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode Naman Trivedi <naman.trivedimanojbhai(a)amd.com> arm64: zynqmp: add clock-output-names property in clock nodes junan <junan76(a)163.com> HID: usbkbd: Fix the bit shift number for LED_KANA Avula Sri Charan <quic_asrichar(a)quicinc.com> wifi: ath12k: Avoid napi_sync() before napi_enable() Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: st: Restore some drive settings after reset Justin Tee <justin.tee(a)broadcom.com> scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails Justin Tee <justin.tee(a)broadcom.com> scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk Justin Tee <justin.tee(a)broadcom.com> scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine Konstantin Taranov <kotaranov(a)microsoft.com> net/mana: fix warning in the writer of client oob Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe/relay: Don't use GFP_KERNEL for new transactions Michal Swiatkowski <michal.swiatkowski(a)linux.intel.com> ice: count combined queues using Rx/Tx count Peter Zijlstra (Intel) <peterz(a)infradead.org> perf: Avoid the read if the count is already updated Ankur Arora <ankur.a.arora(a)oracle.com> rcu: fix header guard for rcu_all_qs() Ankur Arora <ankur.a.arora(a)oracle.com> rcu: handle unstable rdp in rcu_read_unlock_strict() Ankur Arora <ankur.a.arora(a)oracle.com> rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y Michal Swiatkowski <michal.swiatkowski(a)linux.intel.com> ice: treat dyn_allowed only as suggestion Michal Swiatkowski <michal.swiatkowski(a)linux.intel.com> ice: init flow director before RDMA Petr Machata <petrm(a)nvidia.com> bridge: mdb: Allow replace of a host-joined group Eric Dumazet <edumazet(a)google.com> net: flush_backlog() small changes Heiner Kallweit <hkallweit1(a)gmail.com> r8169: don't scan PHY addresses > 0 Geert Uytterhoeven <geert(a)linux-m68k.org> ipv4: ip_gre: Fix set but not used warning in ipgre_err() if IPv4-only Ido Schimmel <idosch(a)nvidia.com> vxlan: Annotate FDB data races Dhananjay Ugwekar <dhananjay.ugwekar(a)amd.com> cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost Carolina Jubran <cjubran(a)nvidia.com> net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled Jakub Kicinski <kuba(a)kernel.org> tools: ynl-gen: don't output external constants Alexander Duyck <alexanderduyck(a)meta.com> eth: fbnic: set IFF_UNICAST_FLT to avoid enabling promiscuous mode when adding unicast addrs Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> drm/rockchip: vop2: Improve display modes handling on RK3588 HDMI0 Depeng Shao <quic_depengs(a)quicinc.com> media: qcom: camss: Add default case in vfe_src_pad_code Depeng Shao <quic_depengs(a)quicinc.com> media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is available Jaegeuk Kim <jaegeuk(a)kernel.org> f2fs: introduce f2fs_base_attr for global sysfs entries Andrey Vatoropin <a.vatoropin(a)crpt.ru> hwmon: (xgene-hwmon) use appropriate type for the latency value Len Brown <len.brown(a)intel.com> tools/power turbostat: Clustered Uncore MHz counters should honor show/hide options Jakub Kicinski <kuba(a)kernel.org> net: page_pool: avoid false positive warning if NAPI was never added Jordan Crouse <jorcrous(a)amazon.com> clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: call power_on ahead before selecting firmware Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: fw: validate multi-firmware header before accessing Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: fw: validate multi-firmware header before getting its size Ching-Te Ku <ku920601(a)realtek.com> wifi: rtw89: coex: Assign value over than 0 to avoid firmware timer hang Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix __rtw_download_firmware() for RTL8814AU Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix download_firmware_validate() for RTL8814AU Zhang Yi <yi.zhang(a)huawei.com> ext4: remove writable userspace mappings before truncating page cache Zhang Yi <yi.zhang(a)huawei.com> ext4: don't write back data before punch hole in nojournal mode Marek Vasut <marex(a)denx.de> leds: trigger: netdev: Configure LED blink interval for HW offload Kees Cook <kees(a)kernel.org> pstore: Change kmsg_bytes storage size to u32 David Lechner <dlechner(a)baylibre.com> iio: adc: ad7944: don't use storagebits for sizing Aleksander Jan Bajkowski <olek2(a)wp.pl> r8152: add vendor/device ID pair for Dell Alienware AW1022z Kuniyuki Iwashima <kuniyu(a)amazon.com> ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). Athira Rajeev <atrajeev(a)linux.vnet.ibm.com> arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src Gaurav Batra <gbatra(a)linux.ibm.com> powerpc/pseries/iommu: create DDW for devices with DMA mask less than 64-bits Gaurav Batra <gbatra(a)linux.ibm.com> powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory Csókás, Bence <csokas.bence(a)prolan.hu> net: fec: Refactor MAC reset to function Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: mac80211: set ieee80211_prep_tx_info::link_id upon Auth Rx Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: remove misplaced drv_mgd_complete_tx() call Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't unconditionally call drv_mgd_complete_tx() Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: iwlwifi: don't warn during reprobe Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: use correct IMR dump variable Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: userspace: flags: clearer msg if no remote addr P Praneesh <quic_ppranees(a)quicinc.com> wifi: ath12k: fix the ampdu id fetch in the HAL_RX_MPDU_START TLV Leon Romanovsky <leon(a)kernel.org> xfrm: prevent high SEQ input in non-ESN mode Stefan Wahren <wahrenst(a)gmx.net> drm/v3d: Add clock handling William Tu <witu(a)nvidia.com> net/mlx5e: reduce the max log mpwrq sz for ECPF and reps William Tu <witu(a)nvidia.com> net/mlx5e: reduce rep rxq depth to 256 for ECPF William Tu <witu(a)nvidia.com> net/mlx5e: set the tx_queue_len for pfifo_fast Alexei Lazar <alazar(a)nvidia.com> net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB Alexei Lazar <alazar(a)nvidia.com> net/mlx5: XDP, Enable TX side XDP multi-buffer support Chaohai Chen <wdhh66(a)163.com> scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr() Alex Deucher <alexander.deucher(a)amd.com> drm/amd/display/dm: drop hw_support check in amdgpu_dm_i2c_xfer() Shiwu Zhang <shiwu.zhang(a)amd.com> drm/amdgpu: enlarge the VBIOS binary size limit Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Use active umc info from discovery Dillon Varone <dillon.varone(a)amd.com> drm/amd/display: Populate register address for dentist for dcn401 Austin Zheng <Austin.Zheng(a)amd.com> drm/amd/display: Use Nominal vBlank If Provided Instead Of Capping It Joshua Aberback <joshua.aberback(a)amd.com> drm/amd/display: Increase block_sequence array size Tom Chung <chiahsuan.chung(a)amd.com> drm/amd/display: Initial psr_version with correct setting George Shen <george.shen(a)amd.com> drm/amd/display: Update CR AUX RD interval interpretation Brandon Syu <Brandon.Syu(a)amd.com> Revert "drm/amd/display: Exit idle optimizations before attempt to access PHY" Martin Tsai <Martin.Tsai(a)amd.com> drm/amd/display: Support multiple options during psr entry. Asad Kamal <asad.kamal(a)amd.com> drm/amd/pm: Skip P2S load for SMU v13.0.12 Jiang Liu <gerry(a)linux.alibaba.com> drm/amdgpu: reset psp->cmd to NULL after releasing the buffer Ilya Bakoulin <Ilya.Bakoulin(a)amd.com> drm/amd/display: Don't try AUX transactions on disconnected link Charlene Liu <Charlene.Liu(a)amd.com> drm/amd/display: pass calculated dram_speed_mts to dml2 Harish Kasiviswanathan <Harish.Kasiviswanathan(a)amd.com> drm/amdgpu: Set snoop bit for SDMA for MI series Eric Huang <jinhuieric.huang(a)amd.com> drm/amdkfd: fix missing L2 cache info in topology Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mes11: fix set_hw_resources_1 calculation Huacai Chen <chenhuacai(a)kernel.org> net: stmmac: dwmac-loongson: Set correct {tx,rx}_fifo_size Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: cadence_master: set frame shape and divider based on actual clk freq Vijendar Mukunda <Vijendar.Mukunda(a)amd.com> soundwire: amd: change the soundwire wake enable/disable sequence André Draszik <andre.draszik(a)linaro.org> phy: exynos5-usbdrd: fix EDS distribution tuning (gs101) Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> phy: core: don't require set_mode() callback for phy_get_mode() to work Damon Ding <damon.ding(a)rock-chips.com> phy: phy-rockchip-samsung-hdptx: Swap the definitions of LCPLL_REF and ROPLL_REF Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> pinctrl: renesas: rzg2l: Add suspend/resume support for pull up/down Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> serial: sh-sci: Update the suspend/resume support zihan zhou <15645113830zzh(a)gmail.com> sched: Reduce the default slice to avoid tasks getting an extra tick Peter Zijlstra <peterz(a)infradead.org> x86/traps: Cleanup and robustify decode_bug() Peter Zijlstra <peterz(a)infradead.org> x86/ibt: Handle FineIBT in handle_cfi_failure() Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/debugfs: Add missing xe_pm_runtime_put in wedge_mode_set Xin Wang <x.wang(a)intel.com> drm/xe/debugfs: fixed the return value of wedged_mode_set Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> clk: qcom: clk-alpha-pll: Do not use random stack value for recalc rate Karl Chan <exxxxkc(a)getgoogleoff.me> clk: qcom: ipq5018: allow it to be bulid on arm32 Lucas De Marchi <lucas.demarchi(a)intel.com> drm/xe: Fix xe_tile_init_noalloc() error propagation Lucas De Marchi <lucas.demarchi(a)intel.com> drm/xe: Stop ignoring errors from xe_ttm_stolen_mgr_init() Kees Cook <kees(a)kernel.org> net/mlx4_core: Avoid impossible mlx4_db_alloc() order value Sakari Ailus <sakari.ailus(a)linux.intel.com> media: v4l: Memset argument to 0 before calling get_mbus_config pad op David Plowman <david.plowman(a)raspberrypi.com> media: i2c: imx219: Correct the minimum vblanking value Brendan Jackman <jackmanb(a)google.com> kunit: tool: Use qboot on QEMU x86_64 Konstantin Andreev <andreev(a)swemel.ru> smack: Revert "smackfs: Added check catlen" Konstantin Andreev <andreev(a)swemel.ru> smack: recognize ipv4 CIPSO w/o categories Valentin Caron <valentin.caron(a)foss.st.com> pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot() Hector Martin <marcan(a)marcan.st> ASoC: tas2764: Power up/down amp on mute ops Hector Martin <marcan(a)marcan.st> ASoC: tas2764: Mark SW_RESET as volatile Hector Martin <marcan(a)marcan.st> ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG Martin Povišer <povik+lin(a)cutebit.org> ASoC: ops: Enforce platform maximum on initial value Siva Durga Prasad Paladugu <siva.durga.prasad.paladugu(a)amd.com> firmware: xilinx: Dont send linux address to get fpga config get status Sudeep Holla <sudeep.holla(a)arm.com> firmware: arm_ffa: Handle the presence of host partition in the partition info Sudeep Holla <sudeep.holla(a)arm.com> firmware: arm_ffa: Reject higher major version as incompatible Shahar Shitrit <shshitrit(a)nvidia.com> net/mlx5: Apply rate-limiting to high temperature warning Shahar Shitrit <shshitrit(a)nvidia.com> net/mlx5: Modify LSB bitmask in temperature event to include only the first bit Hans Verkuil <hverkuil(a)xs4all.nl> media: test-drivers: vivid: don't call schedule in loop Andrew Jones <ajones(a)ventanamicro.com> irqchip/riscv-imsic: Set irq_set_affinity() for IMSIC base Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> hrtimers: Replace hrtimer_clock_to_base_table with switch-case Brian Gerst <brgerst(a)gmail.com> x86/boot: Disable stack protector for early boot code Petr Machata <petrm(a)nvidia.com> vxlan: Join / leave MC group after remote changes Xiaofei Tan <tanxiaofei(a)huawei.com> ACPI: HED: Always initialize before evged Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Fix old_size lower bound in calculate_iosize() too Jakub Kicinski <kuba(a)kernel.org> eth: mlx4: don't try to complete XDP frames in netpoll Eduard Zingerman <eddyz87(a)gmail.com> bpf: copy_verifier_state() should copy 'loop_entry' field Eduard Zingerman <eddyz87(a)gmail.com> bpf: don't do clean_live_states when state->loop_entry->branches > 0 Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> can: c_can: Use of_property_present() to test existence of DT property Ahmad Fatoum <a.fatoum(a)pengutronix.de> pmdomain: imx: gpcv2: use proper helper for property detection Michael Margolin <mrgolin(a)amazon.com> RDMA/core: Fix best page size finding when it can cross SG entries Alexis Lothoré <alexis.lothore(a)bootlin.com> serial: mctrl_gpio: split disable_ms into sync and no_sync APIs Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink Leo Zeng <Leo.Zeng(a)amd.com> Revert "drm/amd/display: Request HW cursor on DCN3.2 with SubVP" George Shen <george.shen(a)amd.com> drm/amd/display: Read LTTPR ALPM caps during link cap retrieval Ilya Bakoulin <Ilya.Bakoulin(a)amd.com> drm/amd/display: Fix BT2020 YCbCr limited/full range input Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> drm/amd/display: Guard against setting dispclk low when active Harry VanZyllDeJong <hvanzyll(a)amd.com> drm/amd/display: Add support for disconnected eDP streams Lijo Lazar <lijo.lazar(a)amd.com> drm/amd/pm: Fetch current power limit from PMFW Anup Patel <apatel(a)ventanamicro.com> irqchip/riscv-imsic: Separate next and previous pointers in IMSIC vector Eddie James <eajames(a)linux.ibm.com> eeprom: ee1004: Check chip before probing Chris Morgan <macromorgan(a)hotmail.com> mfd: axp20x: AXP717: Add AXP717_TS_PIN_CFG to writeable regs Frank Li <Frank.Li(a)nxp.com> i3c: master: svc: Flush FIFO before sending Dynamic Address Assignment(DAA) Arnd Bergmann <arnd(a)arndb.de> EDAC/ie31200: work around false positive build warning Chris Morgan <macromorgan(a)hotmail.com> power: supply: axp20x_battery: Update temp sensor for AXP717 from device tree Peter Seiderer <ps.report(a)gmx.net> net: pktgen: fix access outside of user given buffer in pktgen_thread_write() Kuan-Chung Chen <damon.chen(a)realtek.com> wifi: rtw89: 8922a: fix incorrect STA-ID in EHT MU PPDU Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: fw: add blacklist to avoid obsolete secure firmware Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: fw: get sb_sel_ver via get_unaligned_le32() Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: fw: propagate error code from rtw89_h2c_tx() Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31 Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU Shivasharan S <shivasharan.srikanteshwara(a)broadcom.com> scsi: mpt3sas: Send a diag reset if target reset fails Mrinmay Sarkar <quic_msarkar(a)quicinc.com> PCI: epf-mhi: Update device ID for SA8775P Paul Burton <paulburton(a)kernel.org> clocksource: mips-gic-timer: Enable counter when CPUs start Paul Burton <paulburton(a)kernel.org> MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core Jason Gunthorpe <jgg(a)ziepe.ca> genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie Uros Bizjak <ubizjak(a)gmail.com> x86/locking: Use ALT_OUTPUT_SP() for percpu_{,try_}cmpxchg{64,128}_op() Christian König <christian.koenig(a)amd.com> drm/amdgpu: remove all KFD fences from the BO on release Bibo Mao <maobibo(a)loongson.cn> MIPS: Use arch specific syscall name match function Umesh Nerlige Ramappa <umesh.nerlige.ramappa(a)intel.com> drm/xe/oa: Ensure that polled read returns latest data Xiao Liang <shaw.leon(a)gmail.com> net: ipv6: Init tunnel link-netns before registering dev Herbert Xu <herbert(a)gondor.apana.org.au> crypto: skcipher - Zap type in crypto_alloc_sync_skcipher Herbert Xu <herbert(a)gondor.apana.org.au> crypto: ahash - Set default reqsize from ahash_alg Balbir Singh <balbirs(a)nvidia.com> x86/kaslr: Reduce KASLR entropy on most x86 systems Patrisious Haddad <phaddad(a)nvidia.com> net/mlx5: Change POOL_NEXT_SIZE define value and make it global Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: scsi_debug: First fixes for tapes Jinliang Zheng <alexjlzheng(a)gmail.com> dm: fix unconditional IO throttle caused by REQ_PREFLUSH Nandakumar Edamana <nandakumar(a)nandakumar.co.in> libbpf: Fix out-of-bound read Christoph Hellwig <hch(a)lst.de> loop: check in LO_FLAGS_DIRECT_IO in loop_default_blocksize Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpi3mr: Update timestamp only for supervisor IOCs Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Add correct match to check IPSec syndromes for switchdev mode Matthias Fend <matthias.fend(a)emfend.at> media: tc358746: improve calculation of the D-PHY timing registers Niklas Söderlund <niklas.soderlund+renesas(a)ragnatech.se> media: adv7180: Disable test-pattern control on adv7180 Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpuidle: menu: Avoid discarding useful information Konstantin Shkolnyy <kshk(a)linux.ibm.com> vdpa/mlx5: Fix mlx5_vdpa_get_config() endianness on big-endian machines Mike Christie <michael.christie(a)oracle.com> vhost-scsi: Return queue full for page alloc failures during copy Waiman Long <longman(a)redhat.com> x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() Nícolas F. R. A. Prado <nfraprado(a)collabora.com> ASoC: mediatek: mt8188: Add reference for dmic clocks Nícolas F. R. A. Prado <nfraprado(a)collabora.com> ASoC: mediatek: mt8188: Treat DMIC_GAINx_CUR as non-volatile Assadian, Navid <navid.assadian(a)amd.com> drm/amd/display: Fix mismatch type comparison Charlene Liu <Charlene.Liu(a)amd.com> drm/amd/display: fix dcn4x init failed Yihan Zhu <Yihan.Zhu(a)amd.com> drm/amd/display: handle max_downscale_src_width fail check Nir Lichtman <nir(a)lichtman.org> x86/build: Fix broken copy command in genimage.sh when making isoimage Hariprasad Kelam <hkelam(a)marvell.com> Octeontx2-af: RPM: Register driver with PCI subsys IDs Amery Hung <amery.hung(a)bytedance.com> bpf: Search and add kfuncs in struct_ops prologue and epilogue Andrew Davis <afd(a)ti.com> soc: ti: k3-socinfo: Do not use syscon helper to build regmap Ramasamy Kaliappan <quic_rkaliapp(a)quicinc.com> wifi: ath12k: Improve BSS discovery with hidden SSID in 6 GHz band Hangbin Liu <liuhangbin(a)gmail.com> bonding: report duplicate MAC address in all situations Arnd Bergmann <arnd(a)arndb.de> net: xgene-v2: remove incorrect ACPI_PTR annotation Eric Woudstra <ericwouds(a)gmail.com> net: ethernet: mtk_ppe_offload: Allow QinQ, double ETH_P_8021Q only Yuanjun Gong <ruc_gongyuanjun(a)163.com> leds: pwm-multicolor: Add check for fwnode_property_read_u32 Daniel Gomez <da.gomez(a)samsung.com> drm/xe: xe_gen_wa_oob: replace program_invocation_short_name Philip Yang <Philip.Yang(a)amd.com> drm/amdkfd: KFD release_work possible circular locking Inochi Amaoto <inochiama(a)gmail.com> pinctrl: sophgo: avoid to modify untouched bit when setting cv1800 pinconf Kevin Krakauer <krakauer(a)google.com> selftests/net: have `gro.sh -t` return a correct exit code Moshe Shemesh <moshe(a)nvidia.com> net/mlx5: Avoid report two health errors on same syndrome Satyanarayana K V P <satyanarayana.k.v.p(a)intel.com> drm/xe/pf: Create a link between PF and VF devices Satyanarayana K V P <satyanarayana.k.v.p(a)intel.com> drm/xe/vf: Retry sending MMIO request to GUC on timeout error Viresh Kumar <viresh.kumar(a)linaro.org> firmware: arm_ffa: Set dma_mask for ffa devices Stanimir Varbanov <svarbanov(a)suse.de> PCI: brcmstb: Add a softdep to MIP MSI-X driver Stanimir Varbanov <svarbanov(a)suse.de> PCI: brcmstb: Expand inbound window size up to 64GB Vinith Kumar R <quic_vinithku(a)quicinc.com> wifi: ath12k: Report proper tx completion status to mac80211 Hector Martin <marcan(a)marcan.st> soc: apple: rtkit: Implement OSLog buffers properly Janne Grunau <j(a)jannau.net> soc: apple: rtkit: Use high prio work queue Rob Herring (Arm) <robh(a)kernel.org> perf: arm_pmuv3: Call kvm_vcpu_pmu_resync_el0() before enabling counters Kuhanh Murugasen Krishnan <kuhanh.murugasen.krishnan(a)intel.com> fpga: altera-cvp: Increase credit timeout AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence Li Bin <bin.li(a)microchip.com> ARM: at91: pm: fix at91_suspend_finish for ZQ calibration Alexander Stein <alexander.stein(a)ew.tq-group.com> hwmon: (gpio-fan) Add missing mutex locks Breno Leitao <leitao(a)debian.org> x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 Ahmad Fatoum <a.fatoum(a)pengutronix.de> clk: imx8mp: inform CCF of maximum frequency of clocks Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map Caleb Sander Mateos <csander(a)purestorage.com> ublk: complete command synchronously on error Christoph Hellwig <hch(a)lst.de> block: mark bounce buffering as incompatible with integrity Andy Yan <andy.yan(a)rock-chips.com> drm/rockchip: vop2: Add uv swap for cluster window Kuniyuki Iwashima <kuniyu(a)amazon.com> ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). Nicolas Bouchinet <nicolas.bouchinet(a)ssi.gouv.fr> scsi: logging: Fix scsi_logging_level bounds Maciej S. Szmigiero <mail(a)maciej.szmigiero.name> ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7 Saket Kumar Bhaskar <skb99(a)linux.ibm.com> perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type Peter Seiderer <ps.report(a)gmx.net> net: pktgen: fix mpls maximum labels list parsing Paul Elder <paul.elder(a)ideasonboard.com> media: imx335: Set vblank immediately Yi Liu <yi.l.liu(a)intel.com> iommufd: Disallow allocating nested parent domain with fault ID Uday Shankar <ushankar(a)purestorage.com> ublk: enforce ublks_max only for unprivileged devices Jiasheng Jiang <jiashengjiangcool(a)gmail.com> dpll: Add an assertion to check freq_supported_num Andrei Botila <andrei.botila(a)oss.nxp.com> net: phy: nxp-c45-tja11xx: add match_phy_device to TJA1103/TJA1104 Alexander Sverdlin <alexander.sverdlin(a)siemens.com> net: ethernet: ti: cpsw_new: populate netdev of_node Paul E. McKenney <paulmck(a)kernel.org> rcu: Fix get_state_synchronize_rcu_full() GP-start detection Artur Weber <aweber.kernel(a)gmail.com> pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" Hans Verkuil <hverkuil(a)xs4all.nl> media: cx231xx: set device_caps for 417 Peter Zijlstra <peterz(a)infradead.org> perf/core: Clean up perf_try_init_event() Aric Cyr <Aric.Cyr(a)amd.com> drm/amd/display: Request HW cursor on DCN3.2 with SubVP Dillon Varone <Dillon.Varone(a)amd.com> drm/amd/display: Fix p-state type when p-state is unsupported Dillon Varone <Dillon.Varone(a)amd.com> drm/amd/display: Fix DMUB reset sequence for DCN401 George Shen <george.shen(a)amd.com> drm/amd/display: Skip checking FRL_MODE bit for PCON BW determination Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> drm/amd/display: Ensure DMCUB idle before reset on DCN31/DCN35 Victor Lu <victorchengchi.lu(a)amd.com> drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c Matti Lehtimäki <matti.lehtimaki(a)gmail.com> remoteproc: qcom_wcnss: Handle platforms with only single power domain Ming Lei <ming.lei(a)redhat.com> blk-throttle: don't take carryover for prioritized processing of metadata Choong Yong Liang <yong.liang.choong(a)linux.intel.com> net: phylink: use pl->link_interface in phylink_expects_phy() Thomas Zimmermann <tzimmermann(a)suse.de> drm/gem: Test for imported GEM buffers with helper Matthew Wilcox (Oracle) <willy(a)infradead.org> orangefs: Do not truncate file size AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> soc: mediatek: mtk-mutex: Add DPI1 SOF/EOF to MT8188 mutex tables Ming-Hung Tsai <mtsai(a)redhat.com> dm cache: prevent BUG_ON by blocking retries on failed device resumes Niklas Neronin <niklas.neronin(a)linux.intel.com> usb: xhci: set page size to the xHCI-supported size Markus Elfring <elfring(a)users.sourceforge.net> media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() Svyatoslav Ryhel <clamor95(a)gmail.com> ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 Arnd Bergmann <arnd(a)arndb.de> soc: samsung: include linux/array_size.h where needed Matthew Brost <matthew.brost(a)intel.com> drm/xe: Retry BO allocation Matthew Brost <matthew.brost(a)intel.com> drm/xe: Nuke VM's mapping upon close Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> ieee802154: ca8210: Use proper setters and getters for bitwise types Alexandre Belloni <alexandre.belloni(a)bootlin.com> rtc: ds1307: stop disabling alarms on probe Eric Dumazet <edumazet(a)google.com> tcp: bring back NUMA dispersion in inet_ehash_locks_alloc() Takashi Iwai <tiwai(a)suse.de> ALSA: seq: Improve data consistency at polling Andreas Schwab <schwab(a)linux-m68k.org> powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 Jon Hunter <jonathanh(a)nvidia.com> arm64: tegra: Resize aperture for the IGX PCIe C5 slot Diogo Ivo <diogo.ivo(a)tecnico.ulisboa.pt> arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator Emily Deng <Emily.Deng(a)amd.com> drm/amdgpu: Fix missing drain retry fault the last entry Harish Kasiviswanathan <Harish.Kasiviswanathan(a)amd.com> drm/amdkfd: Set per-process flags only once cik/vi Harish Kasiviswanathan <Harish.Kasiviswanathan(a)amd.com> drm/amdkfd: Set per-process flags only once for gfx9/10/11/12 Sven Schwermer <sven(a)svenschwermer.de> crypto: mxs-dcp - Only set OTP_KEY bit for OTP key Herbert Xu <herbert(a)gondor.apana.org.au> crypto: lzo - Fix compression buffer overrun Niklas Cassel <cassel(a)kernel.org> misc: pci_endpoint_test: Give disabled BARs a distinct error code Christian Bruel <christian.bruel(a)foss.st.com> PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops Chin-Ting Kuo <chin-ting_kuo(a)aspeedtech.com> watchdog: aspeed: Update bootstatus handling Aaron Kling <luceoscutum(a)gmail.com> cpufreq: tegra186: Share policy per cluster Vasant Hegde <vasant.hegde(a)amd.com> iommu/amd/pgtbl_v2: Improve error handling Yeoreum Yun <yeoreum.yun(a)arm.com> coresight-etb10: change etb_drvdata spinlock's type to raw_spinlock_t Coly Li <colyli(a)kernel.org> badblocks: Fix a nonsense WARN_ON() which checks whether a u64 variable < 0 Alexey Klimov <alexey.klimov(a)linaro.org> ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct hd44780_common" Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: Check for empty queue in run_queue Leon Huang <Leon.Huang1(a)amd.com> drm/amd/display: Fix incorrect DPCD configs while Replay/PSR switch Peichen Huang <PeiChen.Huang(a)amd.com> drm/amd/display: not abort link train when bw is low Zhikai Zhai <zhikai.zhai(a)amd.com> drm/amd/display: calculate the remain segments for all pipes Charlene Liu <Charlene.Liu(a)amd.com> drm/amd/display: remove minimum Dispclk and apply oem panel timing. Willem de Bruijn <willemb(a)google.com> ipv6: save dontfrag in cork Anjaneyulu <pagadala.yesu.anjaneyulu(a)intel.com> wifi: cfg80211: allow IR in 20 MHz configurations Ilan Peer <ilan.peer(a)intel.com> wifi: mac80211_hwsim: Fix MLD address translation Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: fix warning on disconnect during failed ML reconf Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: fix the ECKV UEFI variable name Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: mark Br device not integrated Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: fix debug actions order Daniel Gabay <daniel.gabay(a)intel.com> wifi: iwlwifi: w/a FW SMPS mode selection Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: iwlwifi: don't warn when if there is a FW error Marcos Paulo de Souza <mpdesouza(a)suse.com> printk: Check CON_SUSPEND when unblanking a console Robin Murphy <robin.murphy(a)arm.com> iommu: Keep dev->iommu state consistent Kurt Borja <kuurtb(a)gmail.com> hwmon: (dell-smm) Increment the number of fans Avraham Stern <avraham.stern(a)intel.com> wifi: iwlwifi: mvm: fix setting the TK when associated Michal Pecio <michal.pecio(a)gmail.com> usb: xhci: Don't change the status of stalled TDs on failed Stop EP Erick Shepherd <erick.shepherd(a)ni.com> mmc: sdhci: Disable SD card clock before changing parameters Kaustabh Chakraborty <kauschluss(a)disroot.org> mmc: dw_mmc: add exynos7870 DW MMC support Ryan Roberts <ryan.roberts(a)arm.com> arm64/mm: Check PUD_TYPE_TABLE in pud_bad() Ryan Roberts <ryan.roberts(a)arm.com> arm64/mm: Check pmd_table() in pmd_trans_huge() Andy Yan <andy.yan(a)rock-chips.com> phy: rockchip: usbdp: Only verify link rates/lanes/voltage when the corresponding set flags are set Kees Cook <kees(a)kernel.org> PNP: Expand length of fixup id string Nicolas Bouchinet <nicolas.bouchinet(a)ssi.gouv.fr> netfilter: conntrack: Bound nf_conntrack sysctl writes Dian-Syuan Yang <dian_syuan0116(a)realtek.com> wifi: rtw89: set force HE TB mode when connecting to 11ax AP Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> timer_list: Don't use %pK through printk() Jaakko Karrenpalo <jkarrenpalo(a)gmail.com> net: hsr: Fix PRP duplicate detection Jonas Karlman <jonas(a)kwiboo.se> net: stmmac: dwmac-rk: Validate GRF and peripheral GRF during probe Thomas Gleixner <tglx(a)linutronix.de> posix-timers: Ensure that timer initialization is fully visible Eric Dumazet <edumazet(a)google.com> posix-timers: Add cond_resched() to posix_timer_add() search loop Maher Sanalla <msanalla(a)nvidia.com> RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject() Baokun Li <libaokun1(a)huawei.com> ext4: do not convert the unwritten extents if data writeback fails Baokun Li <libaokun1(a)huawei.com> ext4: reject the 'data_err=abort' option in nojournal mode Taniya Das <quic_tdas(a)quicinc.com> clk: qcom: lpassaudiocc-sc7280: Add support for LPASS resets for QCM6490 Ryan Walklin <ryan(a)testtoast.com> ASoC: sun4i-codec: support hp-det-gpios property David Rosca <david.rosca(a)amd.com> drm/amdgpu: Update SRIOV video codec caps Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx11: don't read registers in mqd init Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx12: don't read registers in mqd init Shree Ramamoorthy <s-ramamoorthy(a)ti.com> mfd: tps65219: Remove TPS65219_REG_TI_DEV_ID check Prathamesh Shete <pshete(a)nvidia.com> pinctrl-tegra: Restore SFSEL bit when freeing pins Frediano Ziglio <frediano.ziglio(a)cloud.com> xen: Add support for XenServer 6.1 platform device Guangguan Wang <guangguan.wang(a)linux.alibaba.com> net/smc: use the correct ndev to find pnetid by pnetid table Mikulas Patocka <mpatocka(a)redhat.com> dm: restrict dm device size to 2^63-512 bytes Shashank Gupta <shashankg(a)marvell.com> crypto: octeontx2 - suppress auth failure screaming due to negative tests Masahiro Yamada <masahiroy(a)kernel.org> kconfig: do not clear SYMBOL_VALID when reading include/config/auto.conf Seyediman Seyedarab <imandevel(a)gmail.com> kbuild: fix argument parsing in scripts/config Yonghong Song <yonghong.song(a)linux.dev> bpf: Allow pre-ordering for bpf cgroup progs Nícolas F. R. A. Prado <nfraprado(a)collabora.com> ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect Linus Walleij <linus.walleij(a)linaro.org> ASoC: pcm6240: Drop bogus code handling IRQ as GPIO Sergio Perez Gonzalez <sperezglz(a)gmail.com> spi: spi-mux: Fix coverity issue, unchecked return value Gao Xiang <xiang(a)kernel.org> erofs: initialize decompression early Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for retimer Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Fix error handling inconsistencies in check() Alexandre Belloni <alexandre.belloni(a)bootlin.com> rtc: rv3032: fix EERD location Ilpo Järvinen <ij(a)kernel.org> tcp: reorganize tcp_in_ack_event() and tcp_count_delivered() Jan Kara <jack(a)suse.cz> jbd2: do not try to recover wiped journal Frank Li <Frank.Li(a)nxp.com> PCI: dwc: Use resource start as ioremap() input in dw_pcie_pme_turn_off() Mykyta Yatsenko <yatsenko(a)meta.com> bpf: Return prog btf_id without capable check Alex Williamson <alex.williamson(a)redhat.com> vfio/pci: Handle INTx IRQ_NOTCONNECTED Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: st: ERASE does not change tape location Kai Mäkisara <Kai.Makisara(a)kolumbus.fi> scsi: st: Tighten the page format heuristics with MODE SELECT Al Viro <viro(a)zeniv.linux.org.uk> hypfs_create_cpu_files(): add missing check for hypfs_mkdir() failure Christian Göttsche <cgzones(a)googlemail.com> ext4: reorder capability check last Alexandre Ghiti <alexghiti(a)rivosinc.com> riscv: Call secondary mmu notifier when flushing the tlb shantiprasad shettar <shantiprasad.shettar(a)broadcom.com> bnxt_en: Query FW parameters when the CAPS_CHANGE bit is set Jeff Chen <jeff.chen_1(a)nxp.com> wifi: mwifiex: Fix HT40 bandwidth issue. Tiwei Bie <tiwei.btw(a)antgroup.com> um: Update min_low_pfn to match changes in uml_reserved Benjamin Berg <benjamin(a)sipsolutions.net> um: Store full CSGSFS and SS register from mcontext Nick Hu <nick.hu(a)sifive.com> clocksource/drivers/timer-riscv: Stop stimecmp when cpu hotplug Heming Zhao <heming.zhao(a)suse.com> dlm: make tcp still work in multi-link env Heiko Carstens <hca(a)linux.ibm.com> s390/tlb: Use mm_has_pgste() instead of mm_alloc_pgste() Stanley Chu <yschu(a)nuvoton.com> i3c: master: svc: Fix missing STOP for master request Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: adjust drm_firmware_drivers_only() handling Jing Zhou <Jing.Zhou(a)amd.com> drm/amd/display: Guard against setting dispclk low for dcn31x Flora Cui <flora.cui(a)amd.com> drm/amdgpu: release xcp_mgr on exit Chen Linxuan <chenlinxuan(a)uniontech.com> blk-cgroup: improve policy registration error handling Filipe Manana <fdmanana(a)suse.com> btrfs: send: return -ENAMETOOLONG when attempting a path that is too long Filipe Manana <fdmanana(a)suse.com> btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work() Filipe Manana <fdmanana(a)suse.com> btrfs: fix non-empty delayed iputs list on unmount due to async workers Qu Wenruo <wqu(a)suse.com> btrfs: run btrfs_error_commit_super() early Mark Harmstone <maharmstone(a)fb.com> btrfs: avoid linker error in btrfs_find_create_tree_block() Boris Burkov <boris(a)bur.io> btrfs: make btrfs_discard_workfn() block_group ref explicit Vitalii Mordan <mordan(a)ispras.ru> i2c: pxa: fix call balance of i2c->clk handling routines Stephan Gerhold <stephan.gerhold(a)kernkonzept.com> i2c: qup: Vote for interconnect bandwidth to DRAM Philip Redkin <me(a)rarity.fan> x86/mm: Check return value from memblock_phys_alloc_range() Sohil Mehta <sohil.mehta(a)intel.com> x86/microcode: Update the Intel processor flag scan check Sohil Mehta <sohil.mehta(a)intel.com> x86/smpboot: Fix INIT delay assignment for extended Intel Families Ingo Molnar <mingo(a)kernel.org> x86/stackprotector/64: Only export __ref_stack_chk_guard on CONFIG_SMP Thomas Huth <thuth(a)redhat.com> x86/headers: Replace __ASSEMBLY__ with __ASSEMBLER__ in UAPI headers Quan Zhou <quan.zhou(a)mediatek.com> wifi: mt76: mt7925: fix fails to enter low power mode in suspend state Ming Yen Hsieh <mingyen.hsieh(a)mediatek.com> wifi: mt76: mt7925: load the appropriate CLC data based on hardware type Benjamin Lin <benjamin-jw.lin(a)mediatek.com> wifi: mt76: mt7996: revise TXS size Rex Lu <rex.lu(a)mediatek.com> wifi: mt76: mt7996: fix SER reset trigger on WED reset Felix Fietkau <nbd(a)nbd.name> wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2 Eric Dumazet <edumazet(a)google.com> cgroup/rstat: avoid disabling irqs for O(num_cpu) Victor Skvortsov <victor.skvortsov(a)amd.com> drm/amdgpu: Skip pcie_replay_count sysfs creation for VF Erick Shepherd <erick.shepherd(a)ni.com> mmc: host: Wait for Vdd to settle on card power off Stefan Wahren <wahrenst(a)gmx.net> staging: vchiq_arm: Create keep-alive thread during probe Christian Brauner <brauner(a)kernel.org> pidfs: improve multi-threaded exec and premature thread-group leader exit polling Robert Richter <rrichter(a)amd.com> libnvdimm/labels: Fix divide error in nd_label_data_init() Nicolas Bretz <bretznic(a)gmail.com> ext4: on a remount, only log the ro or r/w state when it has changed Roger Pau Monne <roger.pau(a)citrix.com> xen/pci: Do not register devices with segments >= 0x10000 Roger Pau Monne <roger.pau(a)citrix.com> PCI: vmd: Disable MSI remapping bypass under Xen Jonathan Kim <jonathan.kim(a)amd.com> drm/amdkfd: set precise mem ops caps to disabled for gfx 11 and 12 Flora Cui <flora.cui(a)amd.com> drm/amdgpu/discovery: check ip_discovery fw file available Trond Myklebust <trond.myklebust(a)hammerspace.com> pNFS/flexfiles: Report ENETDOWN as a connection error Ian Rogers <irogers(a)google.com> tools/build: Don't pass test log files to linker ChunHao Lin <hau(a)realtek.com> r8169: disable RTL8126 ZRX-DC timeout Frank Li <Frank.Li(a)nxp.com> PCI: dwc: ep: Ensure proper iteration over outbound map windows Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Properly disable uaccess validation Ryo Takakura <ryotkkr98(a)gmail.com> lockdep: Fix wait context check on softirq for PREEMPT_RT Jing Su <jingsusu(a)didiglobal.com> dql: Fix dql->limit value when reset. Pedro Nishiyama <nishiyama.pedro(a)gmail.com> Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken Sean Wang <sean.wang(a)mediatek.com> Bluetooth: btmtksdio: Prevent enabling interrupts after IRQ handler removal Alice Guo <alice.guo(a)nxp.com> thermal/drivers/qoriq: Power down TMU on system suspend Nícolas F. R. A. Prado <nfraprado(a)collabora.com> thermal/drivers/mediatek/lvts: Start sensor interrupts disabled Hans-Frieder Vogt <hfdevel(a)gmx.net> net: tn40xx: create swnode for mdio and aqr105 phy and add to mdiobus Hans-Frieder Vogt <hfdevel(a)gmx.net> net: tn40xx: add pci-id of the aqr105-based Tehuti TN4010 cards Daniel Hsu <d486250(a)gmail.com> mctp: Fix incorrect tx flow invalidation condition in mctp-i2c Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> ASoC: codecs: wsa883x: Correct VI sense channel mask Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> ASoC: codecs: wsa884x: Correct VI sense channel mask Luis de Arquer <luis.dearquer(a)inertim.com> spi-rockchip: Fix register out of bounds access Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: rpcbind should never reset the port to the value '0' Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: rpc_clnt_set_transport() must not change the autobind setting Trond Myklebust <trond.myklebust(a)hammerspace.com> NFSv4: Treat ENETUNREACH errors as fatal for state recovery Pali Rohár <pali(a)kernel.org> cifs: Fix establishing NetBIOS session for SMB2+ connection Namjae Jeon <linkinjeon(a)kernel.org> cifs: add validation check for the fields in smb_aces Pali Rohár <pali(a)kernel.org> cifs: Set default Netbios RFC1001 server name to hostname in UNC Zsolt Kajtar <soci(a)c64.rulez.org> fbdev: core: tileblit: Implement missing margin clearing for tileblit Zsolt Kajtar <soci(a)c64.rulez.org> fbcon: Use correct erase colour for clearing in fbcon Shixiong Ou <oushixiong(a)kylinos.cn> fbdev: fsl-diu-fb: add missing device_remove_file() Samuel Holland <samuel.holland(a)sifive.com> riscv: Allow NOMMU kernels to access all of RAM Tudor Ambarus <tudor.ambarus(a)linaro.org> mailbox: use error ret code of of_parse_phandle_with_args() Sudeep Holla <sudeep.holla(a)arm.com> mailbox: pcc: Use acpi_os_ioremap() instead of ioremap() Jonathan McDowell <noodles(a)meta.com> tpm: Convert warn to dbg in tpm2_start_auth_session() Diogo Ivo <diogo.ivo(a)siemens.com> ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> tracing: Mark binary printing functions with __printf() attribute Yi Liu <yi.l.liu(a)intel.com> iommufd: Extend IOMMU_GET_HW_INFO to report PASID capability Jinqian Yang <yangjinqian1(a)huawei.com> arm64: Add support for HIP09 Spectre-BHB mitigation Trond Myklebust <trond.myklebust(a)hammerspace.com> SUNRPC: Don't allow waiting for exiting tasks Trond Myklebust <trond.myklebust(a)hammerspace.com> NFS: Don't allow waiting for exiting tasks Trond Myklebust <trond.myklebust(a)hammerspace.com> NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() Pavel Begunkov <asml.silence(a)gmail.com> io_uring/msg: initialise msg request opcode Sungjong Seo <sj1557.seo(a)samsung.com> exfat: call bh_read in get_block only when necessary Matt Johnston <matt(a)codeconstruct.com.au> fuse: Return EPERM rather than ENOSYS from link() Wang Zhaolong <wangzhaolong1(a)huawei.com> smb: client: Store original IO parameters and prevent zero IO sizes Pali Rohár <pali(a)kernel.org> cifs: Fix negotiate retry functionality Pali Rohár <pali(a)kernel.org> cifs: Fix querying and creating MF symlinks over SMB1 Pali Rohár <pali(a)kernel.org> cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES Anthony Krowiak <akrowiak(a)linux.ibm.com> s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log Xin Li (Intel) <xin(a)zytor.com> x86/fred: Fix system hang during S4 resume with FRED enabled Daniel Gomez <da.gomez(a)samsung.com> kconfig: merge_config: use an empty file as initfile Haoran Jiang <jianghaoran(a)kylinos.cn> samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora Brandon Kammerdiener <brandon.kammerdiener(a)intel.com> bpf: fix possible endless loop in BPF map iteration Pavel Begunkov <asml.silence(a)gmail.com> io_uring: don't duplicate flushing in io_req_post_cqe Darrick J. Wong <djwong(a)kernel.org> block: fix race between set_blocksize and read paths Ihor Solodrai <ihor.solodrai(a)linux.dev> selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure Felix Kuehling <felix.kuehling(a)amd.com> drm/amdgpu: Allow P2P access through XGMI Nicholas Susanto <nsusanto(a)amd.com> drm/amd/display: Enable urgent latency adjustment on DCN35 Davidlohr Bueso <dave(a)stgolabs.net> fs/ext4: use sleeping version of sb_find_get_block() Davidlohr Bueso <dave(a)stgolabs.net> fs/jbd2: use sleeping version of __find_get_block() Davidlohr Bueso <dave(a)stgolabs.net> fs/ocfs2: use sleeping version of __find_get_block() Davidlohr Bueso <dave(a)stgolabs.net> fs/buffer: use sleeping version of __find_get_block() Davidlohr Bueso <dave(a)stgolabs.net> fs/buffer: introduce sleeping flavors for pagecache lookups Davidlohr Bueso <dave(a)stgolabs.net> fs/buffer: split locking for pagecache lookups Frederick Lawler <fred(a)cloudflare.com> ima: process_measurement() needlessly takes inode_lock() on MAY_READ Balbir Singh <balbirs(a)nvidia.com> dma-mapping: Fix warning reported for missing prototype Vladimir Oltean <vladimir.oltean(a)nxp.com> net: enetc: refactor bulk flipping of RX buffers to separate function Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpi3mr: Add level check to control event logging Dongli Zhang <dongli.zhang(a)oracle.com> vhost-scsi: protect vq->log_used with vq->mutex Stefano Garzarella <sgarzare(a)redhat.com> vhost_task: fix vhost_task_create() documentation gaoxu <gaoxu2(a)honor.com> cgroup: Fix compilation issue due to cgroup_mutex not being exported Marek Szyprowski <m.szyprowski(a)samsung.com> dma-mapping: avoid potential unused data compilation warning Hans de Goede <hdegoede(a)redhat.com> mei: vsc: Use struct vsc_tp_packet as vsc-tp tx_buf and rx_buf type Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com> intel_th: avoid using deprecated page->mapping, index fields Balbir Singh <balbirs(a)nvidia.com> dma/mapping.c: dev_dbg support for dma_addressing_limited Zhongqiu Han <quic_zhonhan(a)quicinc.com> virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN Manish Pandey <quic_mapa(a)quicinc.com> scsi: ufs: Introduce quirk to extend PA_HIBERN8TIME for UFS devices Dmitry Bogdanov <d.bogdanov(a)yadro.com> scsi: target: iscsi: Fix timeout on deleted connection Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> nvmem: qfprom: switch to 4-byte aligned reads Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> nvmem: core: update raw_len if the bit reading is required Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> nvmem: core: verify cell's raw_len Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> nvmem: core: fix bit offsets of more than one byte Heiko Stuebner <heiko(a)sntech.de> nvmem: rockchip-otp: add rk3576 variant data Heiko Stuebner <heiko(a)sntech.de> nvmem: rockchip-otp: Move read-offset into variant-data Pengyu Luo <mitltlatltl(a)gmail.com> cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Move IRQ request in probe Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> i2c: designware: Fix an error handling path in i2c_dw_pci_probe() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> i2c: designware: Use temporary variable for struct device John Olender <john.olender(a)gmail.com> drm/amd/display: Defer BW-optimization-blocked DRR adjustments Zhongwei Zhang <Zhongwei.Zhang(a)amd.com> drm/amd/display: Correct timing_adjust_pending flag setting. Danny Wang <danny.wang(a)amd.com> drm/amd/display: Do not enable replay when vtotal update is pending. Dillon Varone <dillon.varone(a)amd.com> drm/amd/display: Configure DTBCLK_P with OPTC only for dcn401 ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 2 + Documentation/driver-api/serial/driver.rst | 2 +- Documentation/hwmon/dell-smm-hwmon.rst | 14 +- Makefile | 8 +- arch/arm/boot/dts/nvidia/tegra114.dtsi | 2 +- arch/arm/mach-at91/pm.c | 21 +- .../boot/dts/allwinner/sun50i-h6-beelink-gs1.dts | 38 ++-- .../boot/dts/allwinner/sun50i-h6-orangepi-3.dts | 14 +- .../boot/dts/allwinner/sun50i-h6-orangepi.dtsi | 22 +- arch/arm64/boot/dts/marvell/armada-3720-uDPU.dtsi | 8 +- arch/arm64/boot/dts/nvidia/tegra210-p2597.dtsi | 2 +- .../dts/nvidia/tegra234-p3740-0002+p3701-0008.dts | 10 + arch/arm64/boot/dts/xilinx/zynqmp-clk-ccf.dtsi | 15 +- arch/arm64/include/asm/cputype.h | 2 + arch/arm64/include/asm/pgtable.h | 27 +-- arch/arm64/kernel/proton-pack.c | 1 + arch/loongarch/kernel/Makefile | 8 +- arch/loongarch/kvm/Makefile | 2 +- arch/mips/include/asm/ftrace.h | 16 ++ arch/mips/kernel/pm-cps.c | 30 +-- arch/powerpc/include/asm/mmzone.h | 1 + arch/powerpc/kernel/prom_init.c | 4 +- arch/powerpc/mm/book3s64/radix_pgtable.c | 3 +- arch/powerpc/mm/numa.c | 2 +- arch/powerpc/perf/core-book3s.c | 20 ++ arch/powerpc/perf/isa207-common.c | 4 +- arch/powerpc/platforms/pseries/iommu.c | 139 ++++++++++--- arch/riscv/include/asm/page.h | 12 +- arch/riscv/include/asm/pgtable.h | 2 +- arch/riscv/kernel/Makefile | 4 +- arch/riscv/mm/tlbflush.c | 37 ++-- arch/s390/hypfs/hypfs_diag_fs.c | 2 + arch/s390/include/asm/tlb.h | 2 +- arch/um/kernel/mem.c | 1 + arch/x86/Kconfig | 1 + arch/x86/boot/genimage.sh | 5 +- arch/x86/entry/entry.S | 2 +- arch/x86/events/amd/ibs.c | 20 +- arch/x86/events/intel/ds.c | 9 +- arch/x86/include/asm/bug.h | 5 +- arch/x86/include/asm/cfi.h | 11 + arch/x86/include/asm/ibt.h | 4 +- arch/x86/include/asm/intel-family.h | 1 + arch/x86/include/asm/nmi.h | 2 + arch/x86/include/asm/percpu.h | 28 +-- arch/x86/include/asm/perf_event.h | 1 + arch/x86/include/asm/sev-common.h | 2 +- arch/x86/include/uapi/asm/bootparam.h | 4 +- arch/x86/include/uapi/asm/e820.h | 4 +- arch/x86/include/uapi/asm/ldt.h | 4 +- arch/x86/include/uapi/asm/msr.h | 4 +- arch/x86/include/uapi/asm/ptrace-abi.h | 6 +- arch/x86/include/uapi/asm/ptrace.h | 4 +- arch/x86/include/uapi/asm/setup_data.h | 4 +- arch/x86/include/uapi/asm/signal.h | 8 +- arch/x86/kernel/Makefile | 2 + arch/x86/kernel/alternative.c | 30 +++ arch/x86/kernel/cfi.c | 22 +- arch/x86/kernel/cpu/bugs.c | 10 +- arch/x86/kernel/cpu/microcode/intel.c | 2 +- arch/x86/kernel/nmi.c | 42 ++++ arch/x86/kernel/reboot.c | 10 +- arch/x86/kernel/smpboot.c | 6 +- arch/x86/kernel/traps.c | 82 ++++++-- arch/x86/mm/init.c | 9 +- arch/x86/mm/init_64.c | 15 +- arch/x86/mm/kaslr.c | 10 +- arch/x86/power/cpu.c | 14 ++ arch/x86/um/os-Linux/mcontext.c | 3 +- block/badblocks.c | 5 +- block/bdev.c | 17 ++ block/blk-cgroup.c | 30 +-- block/blk-settings.c | 5 + block/blk-throttle.c | 15 +- block/blk-zoned.c | 5 +- block/blk.h | 3 +- block/bounce.c | 2 - block/fops.c | 16 ++ block/ioctl.c | 6 + crypto/ahash.c | 4 + crypto/algif_hash.c | 4 - crypto/lzo-rle.c | 2 +- crypto/lzo.c | 2 +- crypto/skcipher.c | 1 + drivers/accel/qaic/qaic_drv.c | 2 +- drivers/acpi/Kconfig | 2 +- drivers/acpi/acpi_pnp.c | 2 + drivers/acpi/hed.c | 7 +- drivers/auxdisplay/charlcd.c | 5 +- drivers/auxdisplay/charlcd.h | 5 +- drivers/auxdisplay/hd44780.c | 2 +- drivers/auxdisplay/lcd2s.c | 2 +- drivers/auxdisplay/panel.c | 2 +- drivers/block/loop.c | 5 +- drivers/block/ublk_drv.c | 53 +++-- drivers/bluetooth/btmtksdio.c | 15 +- drivers/bluetooth/btusb.c | 98 ++++----- drivers/char/tpm/tpm2-sessions.c | 2 +- drivers/clk/clk-s2mps11.c | 3 +- drivers/clk/imx/clk-imx8mp.c | 151 ++++++++++++++ drivers/clk/qcom/Kconfig | 2 +- drivers/clk/qcom/camcc-sm8250.c | 56 ++--- drivers/clk/qcom/clk-alpha-pll.c | 52 +++-- drivers/clk/qcom/lpassaudiocc-sc7280.c | 23 ++- drivers/clk/renesas/rzg2l-cpg.c | 106 +++++----- drivers/clk/sunxi-ng/ccu-sun20i-d1.c | 42 ++-- drivers/clk/sunxi-ng/ccu_mp.h | 22 ++ drivers/clocksource/mips-gic-timer.c | 6 +- drivers/clocksource/timer-riscv.c | 6 + drivers/cpufreq/amd-pstate.c | 1 - drivers/cpufreq/cpufreq-dt-platdev.c | 1 + drivers/cpufreq/tegra186-cpufreq.c | 7 + drivers/cpuidle/governors/menu.c | 13 +- .../crypto/marvell/octeontx2/otx2_cptvf_reqmgr.c | 7 +- drivers/crypto/mxs-dcp.c | 8 +- drivers/dma/fsl-edma-main.c | 2 +- drivers/dma/idxd/cdev.c | 9 + drivers/dpll/dpll_core.c | 5 +- drivers/edac/ie31200_edac.c | 28 ++- drivers/firmware/arm_ffa/bus.c | 1 + drivers/firmware/arm_ffa/driver.c | 12 ++ drivers/firmware/arm_scmi/bus.c | 19 +- drivers/firmware/xilinx/zynqmp.c | 6 +- drivers/fpga/altera-cvp.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.h | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 52 ++--- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 30 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 31 +-- drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c | 30 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 ++ drivers/gpu/drm/amd/amdgpu/amdgpu_ih.h | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 38 ++-- drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 7 +- drivers/gpu/drm/amd/amdgpu/amdgpu_umc.c | 42 ++++ drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 47 +++-- drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 48 +++-- drivers/gpu/drm/amd/amdgpu/gfxhub_v1_0.c | 10 +- drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c | 1 - drivers/gpu/drm/amd/amdgpu/mes_v11_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/mmhub_v1_7.c | 25 +++ drivers/gpu/drm/amd/amdgpu/mmhub_v1_8.c | 27 +++ drivers/gpu/drm/amd/amdgpu/mmhub_v9_4.c | 31 +++ drivers/gpu/drm/amd/amdgpu/nv.c | 16 +- drivers/gpu/drm/amd/amdgpu/soc21.c | 10 +- .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 39 +--- .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 69 ++++--- .../drm/amd/amdkfd/kfd_device_queue_manager_v10.c | 43 ++-- .../drm/amd/amdkfd/kfd_device_queue_manager_v11.c | 45 ++-- .../drm/amd/amdkfd/kfd_device_queue_manager_v12.c | 45 ++-- .../drm/amd/amdkfd/kfd_device_queue_manager_v9.c | 35 +++- .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 77 ++++--- drivers/gpu/drm/amd/amdkfd/kfd_process.c | 16 +- drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_topology.c | 23 ++- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 41 ++-- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h | 2 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 2 +- .../amd/display/amdgpu_dm/amdgpu_dm_mst_types.c | 6 +- drivers/gpu/drm/amd/display/dc/basics/dc_common.c | 3 +- .../gpu/drm/amd/display/dc/bios/command_table2.c | 9 - .../amd/display/dc/bios/command_table_helper2.c | 3 +- .../amd/display/dc/clk_mgr/dcn315/dcn315_clk_mgr.c | 22 +- .../amd/display/dc/clk_mgr/dcn316/dcn316_clk_mgr.c | 15 +- .../amd/display/dc/clk_mgr/dcn35/dcn35_clk_mgr.c | 13 +- .../amd/display/dc/clk_mgr/dcn401/dcn401_clk_mgr.c | 2 + drivers/gpu/drm/amd/display/dc/core/dc.c | 22 +- .../gpu/drm/amd/display/dc/core/dc_hw_sequencer.c | 21 +- drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 4 +- drivers/gpu/drm/amd/display/dc/dc_dp_types.h | 12 ++ drivers/gpu/drm/amd/display/dc/dc_hw_types.h | 5 +- drivers/gpu/drm/amd/display/dc/dc_types.h | 7 + .../drm/amd/display/dc/dccg/dcn401/dcn401_dccg.c | 3 - .../drm/amd/display/dc/dce/dce_stream_encoder.c | 3 +- drivers/gpu/drm/amd/display/dc/dce/dmub_psr.c | 4 + .../display/dc/dio/dcn10/dcn10_stream_encoder.c | 3 +- .../dc/dio/dcn401/dcn401_dio_stream_encoder.c | 3 +- .../gpu/drm/amd/display/dc/dml/dcn35/dcn35_fpu.c | 6 +- .../gpu/drm/amd/display/dc/dml/dcn351/dcn351_fpu.c | 1 + .../drm/amd/display/dc/dml2/dml21/dml21_wrapper.c | 8 +- .../dml21/src/dml2_core/dml2_core_dcn4_calcs.c | 5 +- drivers/gpu/drm/amd/display/dc/dml2/dml2_wrapper.h | 1 + .../gpu/drm/amd/display/dc/dpp/dcn30/dcn30_dpp.c | 11 +- .../dc/hpo/dcn31/dcn31_hpo_dp_stream_encoder.c | 3 +- .../drm/amd/display/dc/hwss/dce110/dce110_hwseq.c | 10 +- .../drm/amd/display/dc/hwss/dcn10/dcn10_hwseq.c | 7 +- .../drm/amd/display/dc/hwss/dcn20/dcn20_hwseq.c | 8 +- .../drm/amd/display/dc/hwss/dcn31/dcn31_hwseq.c | 4 +- .../drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c | 3 +- .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 139 ++++++++++++- .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.h | 7 + .../drm/amd/display/dc/hwss/dcn401/dcn401_init.c | 4 +- drivers/gpu/drm/amd/display/dc/hwss/hw_sequencer.h | 6 + drivers/gpu/drm/amd/display/dc/inc/core_types.h | 2 +- .../drm/amd/display/dc/inc/hw/clk_mgr_internal.h | 1 + drivers/gpu/drm/amd/display/dc/inc/hw/dpp.h | 6 +- .../display/dc/link/protocols/link_dp_capability.c | 42 ++-- .../amd/display/dc/link/protocols/link_dp_phy.c | 8 +- .../display/dc/link/protocols/link_dp_training.c | 5 +- .../dc/link/protocols/link_dp_training_8b_10b.c | 7 +- .../dc/link/protocols/link_edp_panel_control.c | 25 ++- .../display/dc/resource/dcn315/dcn315_resource.c | 40 ++-- drivers/gpu/drm/amd/display/dc/spl/dc_spl.c | 4 +- drivers/gpu/drm/amd/display/dc/spl/dc_spl_types.h | 2 +- drivers/gpu/drm/amd/display/dmub/inc/dmub_cmd.h | 6 + drivers/gpu/drm/amd/display/dmub/src/dmub_dcn31.c | 17 +- drivers/gpu/drm/amd/display/dmub/src/dmub_dcn35.c | 4 +- drivers/gpu/drm/amd/display/dmub/src/dmub_dcn401.c | 47 +++-- drivers/gpu/drm/amd/display/dmub/src/dmub_dcn401.h | 3 +- .../amd/display/modules/info_packet/info_packet.c | 4 +- .../include/asic_reg/mmhub/mmhub_9_4_1_offset.h | 32 +++ .../include/asic_reg/mmhub/mmhub_9_4_1_sh_mask.h | 48 +++++ drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 1 + .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c | 5 +- drivers/gpu/drm/ast/ast_mode.c | 10 +- drivers/gpu/drm/bridge/adv7511/adv7511_audio.c | 2 + drivers/gpu/drm/drm_atomic_helper.c | 28 +++ drivers/gpu/drm/drm_buddy.c | 5 +- drivers/gpu/drm/drm_edid.c | 1 + drivers/gpu/drm/drm_gem.c | 4 +- drivers/gpu/drm/mediatek/mtk_dpi.c | 5 +- drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c | 2 +- drivers/gpu/drm/panel/panel-edp.c | 1 + drivers/gpu/drm/rockchip/rockchip_drm_vop2.c | 40 +++- drivers/gpu/drm/v3d/v3d_drv.c | 25 ++- drivers/gpu/drm/xe/xe_bo.c | 22 ++ drivers/gpu/drm/xe/xe_debugfs.c | 3 +- drivers/gpu/drm/xe/xe_device.c | 10 +- drivers/gpu/drm/xe/xe_gen_wa_oob.c | 6 +- drivers/gpu/drm/xe/xe_gt_sriov_pf_config.c | 37 +++- drivers/gpu/drm/xe/xe_gt_sriov_vf.c | 12 +- drivers/gpu/drm/xe/xe_gt_tlb_invalidation.c | 22 ++ drivers/gpu/drm/xe/xe_gt_tlb_invalidation.h | 2 + drivers/gpu/drm/xe/xe_guc_relay.c | 2 +- drivers/gpu/drm/xe/xe_oa.c | 1 + drivers/gpu/drm/xe/xe_pci_sriov.c | 51 +++++ drivers/gpu/drm/xe/xe_pt.c | 14 ++ drivers/gpu/drm/xe/xe_pt.h | 3 + drivers/gpu/drm/xe/xe_sa.c | 3 +- drivers/gpu/drm/xe/xe_tile.c | 12 +- drivers/gpu/drm/xe/xe_tile.h | 1 + drivers/gpu/drm/xe/xe_ttm_stolen_mgr.c | 17 +- drivers/gpu/drm/xe/xe_ttm_stolen_mgr.h | 2 +- drivers/gpu/drm/xe/xe_vm.c | 32 +++ drivers/hid/usbhid/usbkbd.c | 2 +- drivers/hwmon/dell-smm-hwmon.c | 5 +- drivers/hwmon/gpio-fan.c | 16 +- drivers/hwmon/xgene-hwmon.c | 2 +- drivers/hwtracing/coresight/coresight-etb10.c | 26 +-- drivers/hwtracing/intel_th/Kconfig | 1 + drivers/hwtracing/intel_th/msu.c | 31 +-- drivers/i2c/busses/i2c-designware-pcidrv.c | 33 +-- drivers/i2c/busses/i2c-designware-platdrv.c | 48 +++-- drivers/i2c/busses/i2c-pxa.c | 5 +- drivers/i2c/busses/i2c-qup.c | 36 ++++ drivers/i3c/master/svc-i3c-master.c | 4 + drivers/iio/adc/ad7944.c | 16 +- drivers/infiniband/core/umem.c | 36 +++- drivers/infiniband/core/uverbs_cmd.c | 144 +++++++------ drivers/infiniband/core/verbs.c | 11 +- drivers/input/joystick/xpad.c | 3 + drivers/input/rmi4/rmi_f34.c | 133 ++++++------ drivers/iommu/amd/io_pgtable_v2.c | 2 +- drivers/iommu/dma-iommu.c | 28 ++- drivers/iommu/iommu-priv.h | 2 + drivers/iommu/iommu.c | 2 +- drivers/iommu/iommufd/device.c | 34 ++- drivers/iommu/iommufd/hw_pagetable.c | 3 + drivers/iommu/of_iommu.c | 6 +- drivers/irqchip/irq-riscv-aplic-direct.c | 24 ++- drivers/irqchip/irq-riscv-imsic-early.c | 8 +- drivers/irqchip/irq-riscv-imsic-platform.c | 16 +- drivers/irqchip/irq-riscv-imsic-state.c | 96 ++++++--- drivers/irqchip/irq-riscv-imsic-state.h | 7 +- drivers/leds/rgb/leds-pwm-multicolor.c | 5 +- drivers/leds/trigger/ledtrig-netdev.c | 16 +- drivers/mailbox/mailbox.c | 7 +- drivers/mailbox/pcc.c | 8 +- drivers/md/dm-cache-target.c | 24 +++ drivers/md/dm-table.c | 4 + drivers/md/dm-vdo/indexer/index-layout.c | 5 +- drivers/md/dm-vdo/io-submitter.c | 6 +- drivers/md/dm-vdo/io-submitter.h | 18 +- drivers/md/dm-vdo/types.h | 3 + drivers/md/dm-vdo/vdo.c | 11 +- drivers/md/dm-vdo/vio.c | 36 ++-- drivers/md/dm-vdo/vio.h | 2 + drivers/md/dm.c | 8 +- drivers/media/i2c/adv7180.c | 34 +-- drivers/media/i2c/imx219.c | 2 +- drivers/media/i2c/imx335.c | 21 +- drivers/media/i2c/tc358746.c | 19 +- drivers/media/platform/qcom/camss/camss-csid.c | 64 +++--- drivers/media/platform/qcom/camss/camss-vfe.c | 4 + .../platform/st/sti/c8sectpfe/c8sectpfe-core.c | 3 +- .../media/test-drivers/vivid/vivid-kthread-cap.c | 11 +- .../media/test-drivers/vivid/vivid-kthread-out.c | 11 +- .../media/test-drivers/vivid/vivid-kthread-touch.c | 11 +- drivers/media/test-drivers/vivid/vivid-sdr-cap.c | 11 +- drivers/media/usb/cx231xx/cx231xx-417.c | 2 + drivers/media/usb/uvc/uvc_ctrl.c | 77 +++---- drivers/media/usb/uvc/uvc_v4l2.c | 6 + drivers/media/v4l2-core/v4l2-subdev.c | 2 + drivers/mfd/axp20x.c | 1 + drivers/mfd/tps65219.c | 7 - drivers/misc/eeprom/ee1004.c | 4 + drivers/misc/mei/vsc-tp.c | 14 +- drivers/misc/pci_endpoint_test.c | 6 +- drivers/mmc/host/dw_mmc-exynos.c | 41 +++- drivers/mmc/host/sdhci-pci-core.c | 6 +- drivers/mmc/host/sdhci.c | 9 +- drivers/net/bonding/bond_main.c | 2 +- drivers/net/can/c_can/c_can_platform.c | 2 +- drivers/net/can/kvaser_pciefd.c | 101 +++++---- drivers/net/can/slcan/slcan-core.c | 26 ++- drivers/net/ethernet/apm/xgene-v2/main.c | 4 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 8 +- drivers/net/ethernet/freescale/enetc/enetc.c | 16 +- drivers/net/ethernet/freescale/fec_main.c | 52 +++-- drivers/net/ethernet/intel/ice/ice_ethtool.c | 3 +- drivers/net/ethernet/intel/ice/ice_irq.c | 25 +-- drivers/net/ethernet/intel/ice/ice_lag.c | 6 + drivers/net/ethernet/intel/ice/ice_lib.c | 2 + drivers/net/ethernet/intel/ice/ice_main.c | 6 +- drivers/net/ethernet/intel/ice/ice_virtchnl.c | 1 - drivers/net/ethernet/intel/idpf/idpf.h | 2 + drivers/net/ethernet/intel/idpf/idpf_lib.c | 10 +- drivers/net/ethernet/intel/idpf/idpf_txrx.c | 18 +- drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 14 +- drivers/net/ethernet/marvell/octeontx2/af/rvu.h | 2 + .../net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 24 ++- .../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 11 +- .../ethernet/marvell/octeontx2/nic/otx2_common.c | 8 +- drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 22 +- drivers/net/ethernet/mellanox/mlx4/alloc.c | 6 +- drivers/net/ethernet/mellanox/mlx4/en_tx.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/en.h | 3 - .../net/ethernet/mellanox/mlx5/core/en/params.c | 16 +- .../net/ethernet/mellanox/mlx5/core/en/params.h | 1 - .../ethernet/mellanox/mlx5/core/en/reporter_tx.c | 1 - drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c | 53 +++-- .../mellanox/mlx5/core/en_accel/ipsec_fs.c | 28 ++- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 36 +--- drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 5 + .../net/ethernet/mellanox/mlx5/core/en_selftest.c | 3 + .../net/ethernet/mellanox/mlx5/core/esw/ipsec_fs.c | 13 ++ .../net/ethernet/mellanox/mlx5/core/esw/ipsec_fs.h | 5 + .../net/ethernet/mellanox/mlx5/core/esw/legacy.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/events.c | 11 +- .../net/ethernet/mellanox/mlx5/core/fs_ft_pool.c | 6 +- .../net/ethernet/mellanox/mlx5/core/fs_ft_pool.h | 2 - drivers/net/ethernet/mellanox/mlx5/core/health.c | 1 + .../ethernet/mellanox/mlx5/core/lib/fs_chains.c | 3 +- drivers/net/ethernet/meta/fbnic/fbnic_netdev.c | 2 + drivers/net/ethernet/microchip/lan743x_main.c | 19 +- drivers/net/ethernet/microsoft/mana/gdma_main.c | 2 +- drivers/net/ethernet/realtek/r8169_main.c | 28 +++ .../net/ethernet/stmicro/stmmac/dwmac-loongson.c | 3 + drivers/net/ethernet/stmicro/stmmac/dwmac-rk.c | 21 +- drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c | 2 +- drivers/net/ethernet/tehuti/tn40.c | 9 +- drivers/net/ethernet/tehuti/tn40.h | 33 +++ drivers/net/ethernet/tehuti/tn40_mdio.c | 82 +++++++- drivers/net/ethernet/ti/cpsw_new.c | 1 + drivers/net/ieee802154/ca8210.c | 9 +- drivers/net/mctp/mctp-i2c.c | 2 +- drivers/net/phy/nxp-c45-tja11xx.c | 54 ++++- drivers/net/phy/phylink.c | 2 +- drivers/net/usb/r8152.c | 1 + drivers/net/vmxnet3/vmxnet3_drv.c | 5 +- drivers/net/vxlan/vxlan_core.c | 36 +++- drivers/net/wireless/ath/ath11k/dp.h | 6 +- drivers/net/wireless/ath/ath11k/dp_rx.c | 117 +++++------ drivers/net/wireless/ath/ath12k/core.c | 12 +- drivers/net/wireless/ath/ath12k/core.h | 1 + drivers/net/wireless/ath/ath12k/dp_mon.c | 16 +- drivers/net/wireless/ath/ath12k/dp_tx.c | 6 +- drivers/net/wireless/ath/ath12k/hal_desc.h | 2 +- drivers/net/wireless/ath/ath12k/hal_rx.h | 3 +- drivers/net/wireless/ath/ath12k/pci.c | 13 +- drivers/net/wireless/ath/ath12k/wmi.c | 4 +- drivers/net/wireless/ath/ath9k/init.c | 4 +- drivers/net/wireless/intel/iwlwifi/cfg/dr.c | 2 - drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 4 +- drivers/net/wireless/intel/iwlwifi/fw/uefi.c | 8 +- drivers/net/wireless/intel/iwlwifi/fw/uefi.h | 4 +- drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.c | 10 +- drivers/net/wireless/intel/iwlwifi/iwl-trans.c | 8 +- .../net/wireless/intel/iwlwifi/mvm/ftm-initiator.c | 4 + drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 15 ++ .../net/wireless/intel/iwlwifi/mvm/mld-mac80211.c | 3 +- drivers/net/wireless/intel/iwlwifi/mvm/mvm.h | 3 + drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 2 + drivers/net/wireless/marvell/mwifiex/11n.c | 6 +- drivers/net/wireless/mediatek/mt76/mt76.h | 1 + .../net/wireless/mediatek/mt76/mt76_connac3_mac.h | 3 + drivers/net/wireless/mediatek/mt76/mt76x0/pci.c | 3 +- drivers/net/wireless/mediatek/mt76/mt76x0/usb.c | 3 +- drivers/net/wireless/mediatek/mt76/mt76x2/pci.c | 3 +- drivers/net/wireless/mediatek/mt76/mt76x2/usb.c | 3 +- drivers/net/wireless/mediatek/mt76/mt7925/mcu.c | 64 +++++- drivers/net/wireless/mediatek/mt76/mt7925/mt7925.h | 3 + drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7996/mcu.h | 3 +- drivers/net/wireless/mediatek/mt76/mt7996/mmio.c | 2 +- drivers/net/wireless/mediatek/mt76/tx.c | 3 +- drivers/net/wireless/realtek/rtl8xxxu/core.c | 17 +- drivers/net/wireless/realtek/rtw88/mac.c | 6 +- drivers/net/wireless/realtek/rtw88/main.c | 40 ++-- drivers/net/wireless/realtek/rtw88/reg.h | 3 +- drivers/net/wireless/realtek/rtw88/rtw8822b.c | 14 +- drivers/net/wireless/realtek/rtw88/util.c | 3 +- drivers/net/wireless/realtek/rtw89/coex.c | 14 +- drivers/net/wireless/realtek/rtw89/core.c | 23 ++- drivers/net/wireless/realtek/rtw89/core.h | 2 + drivers/net/wireless/realtek/rtw89/fw.c | 101 ++++++++- drivers/net/wireless/realtek/rtw89/fw.h | 12 ++ drivers/net/wireless/realtek/rtw89/mac.c | 55 ++++- drivers/net/wireless/realtek/rtw89/mac.h | 3 + drivers/net/wireless/realtek/rtw89/mac80211.c | 1 + drivers/net/wireless/realtek/rtw89/reg.h | 4 + drivers/net/wireless/realtek/rtw89/regd.c | 2 + drivers/net/wireless/realtek/rtw89/rtw8851b.c | 1 + drivers/net/wireless/realtek/rtw89/rtw8852a.c | 1 + drivers/net/wireless/realtek/rtw89/rtw8852b.c | 1 + drivers/net/wireless/realtek/rtw89/rtw8852bt.c | 1 + drivers/net/wireless/realtek/rtw89/rtw8852c.c | 1 + drivers/net/wireless/realtek/rtw89/rtw8922a.c | 1 + drivers/net/wireless/realtek/rtw89/ser.c | 4 + drivers/net/wireless/virtual/mac80211_hwsim.c | 14 +- drivers/nvdimm/label.c | 3 +- drivers/nvme/host/pci.c | 6 + drivers/nvme/target/tcp.c | 3 + drivers/nvmem/core.c | 40 +++- drivers/nvmem/qfprom.c | 26 ++- drivers/nvmem/rockchip-otp.c | 17 +- drivers/pci/Kconfig | 6 + drivers/pci/ats.c | 33 +++ drivers/pci/controller/dwc/pcie-designware-ep.c | 2 +- drivers/pci/controller/dwc/pcie-designware-host.c | 2 +- drivers/pci/controller/pcie-brcmstb.c | 5 +- drivers/pci/controller/vmd.c | 20 ++ drivers/pci/endpoint/functions/pci-epf-mhi.c | 2 +- drivers/pci/endpoint/functions/pci-epf-test.c | 2 + drivers/pci/setup-bus.c | 6 +- drivers/perf/arm_pmuv3.c | 4 +- drivers/phy/phy-core.c | 7 +- drivers/phy/renesas/phy-rcar-gen3-usb2.c | 95 +++++---- drivers/phy/rockchip/phy-rockchip-samsung-hdptx.c | 4 +- drivers/phy/rockchip/phy-rockchip-usbdp.c | 105 ++++++---- drivers/phy/samsung/phy-exynos5-usbdrd.c | 7 +- drivers/pinctrl/bcm/pinctrl-bcm281xx.c | 44 ++-- drivers/pinctrl/devicetree.c | 10 +- drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/pinctrl/qcom/pinctrl-msm.c | 23 ++- drivers/pinctrl/renesas/pinctrl-rzg2l.c | 19 +- drivers/pinctrl/sophgo/pinctrl-cv18xx.c | 33 ++- drivers/pinctrl/tegra/pinctrl-tegra.c | 59 +++++- drivers/pinctrl/tegra/pinctrl-tegra.h | 6 + drivers/platform/x86/asus-wmi.c | 11 +- .../x86/dell/dell-wmi-sysman/passobj-attributes.c | 2 +- drivers/platform/x86/ideapad-laptop.c | 16 ++ drivers/platform/x86/intel/hid.c | 21 +- drivers/platform/x86/think-lmi.c | 26 +-- drivers/platform/x86/think-lmi.h | 1 + drivers/pmdomain/core.c | 2 +- drivers/pmdomain/imx/gpcv2.c | 2 +- drivers/pmdomain/renesas/rcar-gen4-sysc.c | 5 - drivers/pmdomain/renesas/rcar-sysc.c | 5 - drivers/power/supply/axp20x_battery.c | 21 ++ drivers/ptp/ptp_ocp.c | 24 ++- drivers/regulator/ad5398.c | 12 +- drivers/remoteproc/qcom_wcnss.c | 34 ++- drivers/rtc/rtc-ds1307.c | 4 +- drivers/rtc/rtc-rv3032.c | 2 +- drivers/s390/crypto/vfio_ap_ops.c | 72 ++++--- drivers/scsi/lpfc/lpfc_hbadisc.c | 29 ++- drivers/scsi/lpfc/lpfc_init.c | 2 + drivers/scsi/mpi3mr/mpi3mr_fw.c | 8 +- drivers/scsi/mpt3sas/mpt3sas_ctl.c | 12 +- drivers/scsi/scsi_debug.c | 55 ++++- drivers/scsi/scsi_sysctl.c | 4 +- drivers/scsi/st.c | 29 ++- drivers/scsi/st.h | 2 + drivers/soc/apple/rtkit-internal.h | 1 + drivers/soc/apple/rtkit.c | 58 +++--- drivers/soc/mediatek/mtk-mutex.c | 6 + drivers/soc/samsung/exynos-asv.c | 1 + drivers/soc/samsung/exynos-chipid.c | 1 + drivers/soc/samsung/exynos-pmu.c | 1 + drivers/soc/samsung/exynos-usi.c | 1 + drivers/soc/samsung/exynos3250-pmu.c | 1 + drivers/soc/samsung/exynos5250-pmu.c | 1 + drivers/soc/samsung/exynos5420-pmu.c | 1 + drivers/soc/ti/k3-socinfo.c | 13 +- drivers/soundwire/amd_manager.c | 2 + drivers/soundwire/bus.c | 9 +- drivers/soundwire/cadence_master.c | 22 +- drivers/spi/spi-fsl-dspi.c | 46 ++++- drivers/spi/spi-mux.c | 4 +- drivers/spi/spi-rockchip.c | 2 +- drivers/spi/spi-zynqmp-gqspi.c | 22 +- .../vc04_services/interface/vchiq_arm/vchiq_arm.c | 69 +++---- drivers/target/iscsi/iscsi_target.c | 2 +- drivers/target/target_core_spc.c | 14 +- drivers/thermal/intel/x86_pkg_temp_thermal.c | 1 + drivers/thermal/mediatek/lvts_thermal.c | 3 +- drivers/thermal/qoriq_thermal.c | 13 ++ drivers/thunderbolt/retimer.c | 8 +- drivers/tty/serial/8250/8250_port.c | 2 +- drivers/tty/serial/atmel_serial.c | 2 +- drivers/tty/serial/imx.c | 2 +- drivers/tty/serial/serial_mctrl_gpio.c | 34 ++- drivers/tty/serial/serial_mctrl_gpio.h | 17 +- drivers/tty/serial/sh-sci.c | 98 ++++++++- drivers/tty/serial/stm32-usart.c | 2 +- drivers/ufs/core/ufshcd.c | 29 +++ drivers/usb/host/xhci-mem.c | 34 +-- drivers/usb/host/xhci-ring.c | 12 +- drivers/usb/host/xhci.h | 8 +- drivers/vdpa/mlx5/net/mlx5_vnet.c | 3 + drivers/vfio/pci/vfio_pci_config.c | 3 +- drivers/vfio/pci/vfio_pci_core.c | 10 +- drivers/vfio/pci/vfio_pci_intrs.c | 2 +- drivers/vhost/scsi.c | 23 ++- drivers/video/fbdev/core/bitblit.c | 5 +- drivers/video/fbdev/core/fbcon.c | 10 +- drivers/video/fbdev/core/fbcon.h | 38 +--- drivers/video/fbdev/core/fbcon_ccw.c | 5 +- drivers/video/fbdev/core/fbcon_cw.c | 5 +- drivers/video/fbdev/core/fbcon_ud.c | 5 +- drivers/video/fbdev/core/tileblit.c | 45 +++- drivers/video/fbdev/fsl-diu-fb.c | 1 + drivers/virtio/virtio_ring.c | 2 +- drivers/watchdog/aspeed_wdt.c | 81 +++++++- drivers/xen/pci.c | 32 +++ drivers/xen/platform-pci.c | 4 + drivers/xen/xenbus/xenbus_probe.c | 14 +- fs/btrfs/block-group.c | 18 +- fs/btrfs/compression.c | 2 +- fs/btrfs/discard.c | 34 ++- fs/btrfs/disk-io.c | 28 ++- fs/btrfs/extent_io.c | 7 +- fs/btrfs/extent_io.h | 2 + fs/btrfs/scrub.c | 4 +- fs/btrfs/send.c | 6 +- fs/buffer.c | 61 ++++-- fs/dlm/lowcomms.c | 4 +- fs/erofs/internal.h | 4 +- fs/erofs/super.c | 46 ++--- fs/erofs/zdata.c | 4 +- fs/exfat/inode.c | 169 ++++++++------- fs/ext4/balloc.c | 4 +- fs/ext4/ext4.h | 5 +- fs/ext4/extents.c | 19 +- fs/ext4/inode.c | 81 ++++++-- fs/ext4/mballoc.c | 3 +- fs/ext4/page-io.c | 16 +- fs/ext4/super.c | 19 +- fs/f2fs/sysfs.c | 74 +++++-- fs/fuse/dir.c | 2 + fs/gfs2/glock.c | 11 +- fs/jbd2/recovery.c | 11 +- fs/jbd2/revoke.c | 15 +- fs/namespace.c | 6 +- fs/nfs/delegation.c | 3 +- fs/nfs/flexfilelayout/flexfilelayout.c | 1 + fs/nfs/inode.c | 2 + fs/nfs/internal.h | 5 + fs/nfs/nfs3proc.c | 2 +- fs/nfs/nfs4proc.c | 9 +- fs/nfs/nfs4state.c | 10 +- fs/nilfs2/the_nilfs.c | 3 - fs/ocfs2/journal.c | 2 +- fs/orangefs/inode.c | 7 +- fs/pidfs.c | 9 +- fs/pstore/inode.c | 2 +- fs/pstore/internal.h | 4 +- fs/pstore/platform.c | 11 +- fs/smb/client/cifsacl.c | 17 +- fs/smb/client/cifspdu.h | 5 +- fs/smb/client/cifsproto.h | 7 + fs/smb/client/cifssmb.c | 57 ++++++ fs/smb/client/connect.c | 30 ++- fs/smb/client/fs_context.c | 13 ++ fs/smb/client/fs_context.h | 3 + fs/smb/client/link.c | 8 +- fs/smb/client/readdir.c | 7 +- fs/smb/client/smb1ops.c | 228 ++++++++++++++++++--- fs/smb/client/smb2file.c | 11 +- fs/smb/client/smb2ops.c | 30 ++- fs/smb/client/transport.c | 2 +- fs/smb/common/smb2pdu.h | 3 + fs/smb/server/smb2pdu.c | 9 +- fs/smb/server/vfs.c | 14 +- include/crypto/hash.h | 3 + include/drm/drm_atomic.h | 23 ++- include/drm/drm_gem.h | 13 ++ include/linux/bpf-cgroup.h | 1 + include/linux/buffer_head.h | 8 + include/linux/device.h | 119 +---------- include/linux/device/devres.h | 129 ++++++++++++ include/linux/dma-mapping.h | 12 +- include/linux/err.h | 3 + include/linux/highmem.h | 10 +- include/linux/io.h | 2 - include/linux/ipv6.h | 1 + include/linux/lzo.h | 8 + include/linux/mfd/axp20x.h | 1 + include/linux/mlx4/device.h | 2 +- include/linux/mlx5/eswitch.h | 2 + include/linux/mlx5/fs.h | 2 + include/linux/mman.h | 2 + include/linux/msi.h | 33 ++- include/linux/page-flags.h | 7 + include/linux/pci-ats.h | 3 + include/linux/perf_event.h | 8 +- include/linux/pnp.h | 2 +- include/linux/rcupdate.h | 2 +- include/linux/rcutree.h | 2 +- include/linux/spi/spi.h | 5 +- include/linux/trace.h | 4 +- include/linux/trace_seq.h | 8 +- include/linux/usb/r8152.h | 1 + include/media/v4l2-subdev.h | 4 +- include/net/cfg80211.h | 3 + include/net/mac80211.h | 4 +- include/net/xfrm.h | 1 - include/rdma/uverbs_std_types.h | 2 +- include/sound/hda_codec.h | 1 + include/sound/pcm.h | 2 + include/trace/events/btrfs.h | 2 +- include/uapi/linux/bpf.h | 1 + include/uapi/linux/iommufd.h | 14 +- include/uapi/linux/nl80211.h | 52 ++--- include/ufs/ufs_quirks.h | 6 + io_uring/fdinfo.c | 4 +- io_uring/io_uring.c | 12 +- io_uring/msg_ring.c | 1 + kernel/bpf/bpf_struct_ops.c | 98 ++++----- kernel/bpf/cgroup.c | 33 ++- kernel/bpf/hashtab.c | 2 +- kernel/bpf/syscall.c | 7 +- kernel/bpf/verifier.c | 34 ++- kernel/cgroup/cgroup.c | 2 +- kernel/cgroup/rstat.c | 12 +- kernel/dma/mapping.c | 27 ++- kernel/events/core.c | 102 ++++----- kernel/events/hw_breakpoint.c | 5 +- kernel/events/ring_buffer.c | 1 + kernel/exit.c | 6 +- kernel/fork.c | 9 +- kernel/padata.c | 3 +- kernel/printk/printk.c | 14 +- kernel/rcu/rcu.h | 2 +- kernel/rcu/tree.c | 15 +- kernel/rcu/tree_plugin.h | 22 +- kernel/sched/fair.c | 6 +- kernel/signal.c | 3 +- kernel/softirq.c | 18 ++ kernel/time/hrtimer.c | 29 ++- kernel/time/posix-timers.c | 22 +- kernel/time/timer_list.c | 4 +- kernel/trace/trace.c | 11 +- kernel/trace/trace.h | 16 +- kernel/vhost_task.c | 2 +- lib/dynamic_queue_limits.c | 2 +- lib/lzo/Makefile | 2 +- lib/lzo/lzo1x_compress.c | 102 ++++++--- lib/lzo/lzo1x_compress_safe.c | 18 ++ mm/memcontrol.c | 6 +- mm/page_alloc.c | 8 + mm/vmalloc.c | 13 +- net/bluetooth/hci_event.c | 3 + net/bluetooth/l2cap_core.c | 15 +- net/bridge/br_mdb.c | 2 +- net/bridge/br_nf_core.c | 7 +- net/bridge/br_private.h | 1 + net/can/bcm.c | 79 ++++--- net/core/dev.c | 12 +- net/core/dev.h | 12 ++ net/core/page_pool.c | 7 +- net/core/pktgen.c | 13 +- net/dsa/tag_ksz.c | 19 +- net/hsr/hsr_device.c | 2 + net/hsr/hsr_forward.c | 4 +- net/hsr/hsr_framereg.c | 95 ++++++++- net/hsr/hsr_framereg.h | 8 +- net/hsr/hsr_main.h | 2 + net/ipv4/esp4.c | 53 +---- net/ipv4/fib_frontend.c | 18 +- net/ipv4/fib_rules.c | 4 +- net/ipv4/fib_trie.c | 22 -- net/ipv4/inet_hashtables.c | 37 +++- net/ipv4/ip_gre.c | 16 +- net/ipv4/tcp_input.c | 56 ++--- net/ipv4/xfrm4_input.c | 18 +- net/ipv6/esp6.c | 53 +---- net/ipv6/fib6_rules.c | 4 +- net/ipv6/ip6_gre.c | 2 - net/ipv6/ip6_output.c | 9 +- net/ipv6/ip6_tunnel.c | 3 +- net/ipv6/ip6_vti.c | 3 +- net/ipv6/sit.c | 8 +- net/ipv6/xfrm6_input.c | 18 +- net/llc/af_llc.c | 8 +- net/mac80211/driver-ops.h | 3 +- net/mac80211/mlme.c | 10 +- net/mptcp/pm_userspace.c | 8 +- net/netfilter/nf_conntrack_standalone.c | 12 +- net/sched/sch_hfsc.c | 6 +- net/smc/smc_pnet.c | 8 +- net/sunrpc/clnt.c | 3 - net/sunrpc/rpcb_clnt.c | 5 +- net/sunrpc/sched.c | 2 + net/tipc/crypto.c | 5 + net/wireless/chan.c | 8 +- net/wireless/nl80211.c | 4 + net/wireless/reg.c | 4 +- net/xfrm/espintcp.c | 4 +- net/xfrm/xfrm_policy.c | 3 + net/xfrm/xfrm_state.c | 6 +- net/xfrm/xfrm_user.c | 12 ++ samples/bpf/Makefile | 2 +- scripts/Makefile.extrawarn | 11 +- scripts/config | 26 ++- scripts/kconfig/confdata.c | 19 +- scripts/kconfig/merge_config.sh | 4 +- security/integrity/ima/ima_main.c | 4 +- security/smack/smackfs.c | 21 +- sound/core/oss/pcm_oss.c | 3 +- sound/core/pcm_native.c | 11 + sound/core/seq/seq_clientmgr.c | 5 +- sound/core/seq/seq_memory.c | 1 + sound/pci/hda/hda_beep.c | 15 +- sound/pci/hda/patch_realtek.c | 77 ++++++- sound/soc/codecs/cs42l43-jack.c | 7 + sound/soc/codecs/mt6359-accdet.h | 9 + sound/soc/codecs/pcm3168a.c | 6 +- sound/soc/codecs/pcm6240.c | 28 +-- sound/soc/codecs/pcm6240.h | 7 +- sound/soc/codecs/rt722-sdca-sdw.c | 49 ++++- sound/soc/codecs/tas2764.c | 53 +++-- sound/soc/codecs/wsa883x.c | 2 +- sound/soc/codecs/wsa884x.c | 2 +- sound/soc/fsl/imx-card.c | 2 +- sound/soc/intel/boards/bytcr_rt5640.c | 13 ++ sound/soc/mediatek/mt8188/mt8188-afe-clk.c | 8 + sound/soc/mediatek/mt8188/mt8188-afe-clk.h | 8 + sound/soc/mediatek/mt8188/mt8188-afe-pcm.c | 4 - sound/soc/qcom/sm8250.c | 3 + sound/soc/sdw_utils/soc_sdw_cs42l43.c | 10 + sound/soc/soc-dai.c | 8 +- sound/soc/soc-ops.c | 29 ++- sound/soc/sof/intel/hda-bus.c | 2 +- sound/soc/sof/intel/hda.c | 16 +- sound/soc/sof/ipc4-control.c | 11 +- sound/soc/sof/ipc4-pcm.c | 3 +- sound/soc/sof/topology.c | 18 +- sound/soc/sunxi/sun4i-codec.c | 53 +++++ sound/usb/midi.c | 16 +- tools/bpf/bpftool/common.c | 3 +- tools/build/Makefile.build | 6 +- tools/include/uapi/linux/bpf.h | 1 + tools/lib/bpf/libbpf.c | 2 +- tools/net/ynl/lib/ynl.c | 2 +- tools/net/ynl/ynl-gen-c.py | 3 + tools/objtool/check.c | 21 +- tools/power/x86/turbostat/turbostat.8 | 1 + tools/power/x86/turbostat/turbostat.c | 13 +- tools/testing/kunit/qemu_configs/x86_64.py | 4 +- .../selftests/bpf/prog_tests/sockmap_ktls.c | 1 - tools/testing/selftests/iommu/iommufd.c | 4 + .../testing/selftests/net/forwarding/bridge_mdb.sh | 2 +- tools/testing/selftests/net/gro.sh | 3 +- 774 files changed, 8381 insertions(+), 3730 deletions(-)

20 hours, 39 minutes

16
655
0 0

[PATCH] arm64/mm: Fix annotated branch unbootable kernel

by Breno Leitao

The arm64 kernel doesn't boot with annotated branches (PROFILE_ANNOTATED_BRANCHES) enabled and CONFIG_DEBUG_VIRTUAL together. Bisecting it, I found that disabling branch profiling in arch/arm64/mm solved the problem. Narrowing down a bit further, I found that physaddr.c is the file that needs to have branch profiling disabled to get the machine to boot. I suspect that it might invoke some ftrace helper very early in the boot process and ftrace is still not enabled(!?). Disable branch profiling for physaddr.o to allow booting an arm64 machine with CONFIG_PROFILE_ANNOTATED_BRANCHES and CONFIG_DEBUG_VIRTUAL together. Cc: stable(a)vger.kernel.org Fixes: ec6d06efb0bac ("arm64: Add support for CONFIG_DEBUG_VIRTUAL") Signed-off-by: Breno Leitao <leitao(a)debian.org> --- Another approach is to disable profiling on all arch/arm64 code, similarly to x86, where DISABLE_BRANCH_PROFILING is called for all arch/x86 code. See commit 2cbb20b008dba ("tracing: Disable branch profiling in noinstr code"). --- arch/arm64/mm/Makefile | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/arch/arm64/mm/Makefile b/arch/arm64/mm/Makefile index c26489cf96cd..8bfe2451ea26 100644 --- a/arch/arm64/mm/Makefile +++ b/arch/arm64/mm/Makefile @@ -14,5 +14,10 @@ obj-$(CONFIG_ARM64_MTE) += mteswap.o obj-$(CONFIG_ARM64_GCS) += gcs.o KASAN_SANITIZE_physaddr.o += n +# Branch profiling isn't noinstr-safe +ifdef CONFIG_TRACE_BRANCH_PROFILING +CFLAGS_physaddr.o += -DDISABLE_BRANCH_PROFILING +endif + obj-$(CONFIG_KASAN) += kasan_init.o KASAN_SANITIZE_kasan_init.o := n --- base-commit: c8ebd433459bcbf068682b09544e830acd7ed222 change-id: 20251231-annotated-75de3f33cd7b Best regards, -- Breno Leitao <leitao(a)debian.org>

21 hours, 26 minutes

1
0
0 0

[PATCH] dmaengine: apple-admac: Add "apple,t8103-admac" compatible

by Janne Grunau

After discussion with the devicetree maintainers we agreed to not extend lists with the generic compatible "apple,admac" anymore [1]. Use "apple,t8103-admac" as base compatible as it is the SoC the driver and bindings were written for. [1]: https://lore.kernel.org/asahi/12ab93b7-1fc2-4ce0-926e-c8141cfe81bf@kernel.o… Fixes: b127315d9a78 ("dmaengine: apple-admac: Add Apple ADMAC driver") Cc: stable(a)vger.kernel.org Reviewed-by: Neal Gompa <neal(a)gompa.dev> Signed-off-by: Janne Grunau <j(a)jannau.net> --- This is split off from the v1 series adding Apple M2 Pro/Max/Ultra device trees in https://lore.kernel.org/r/20250828-dt-apple-t6020-v1-0-507ba4c4b98e@jannau.… Changes compared to the patch in that series: - rebased onto v6.19-rc1 - added "Fixes:" and "Cc: stable" tags for handling this as fix adding a device id - added Neal's Reviewed-by: --- drivers/dma/apple-admac.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/dma/apple-admac.c b/drivers/dma/apple-admac.c index bd49f03742912198804a02a22e38da2c21093761..04bbd774b3b444f928986c266c53becf286daeea 100644 --- a/drivers/dma/apple-admac.c +++ b/drivers/dma/apple-admac.c @@ -936,6 +936,7 @@ static void admac_remove(struct platform_device *pdev) } static const struct of_device_id admac_of_match[] = { + { .compatible = "apple,t8103-admac", }, { .compatible = "apple,admac", }, { } }; --- base-commit: 8f0b4cce4481fb22653697cced8d0d04027cb1e8 change-id: 20251231-apple-admac-t8103-base-compat-18288e7d62b3 Best regards, -- Janne Grunau <j(a)jannau.net>

21 hours, 36 minutes

1
0
0 0

Please add 127b90315ca0 ("sched/proxy: Yield the donor task") to 6.12.y / 6.18.y

by Holger Hoffstätte

Hi - a Gentoo user recently found that 6.18.2 started to reproducuibly crash when building their go toolchain [1]. Apparently the addition of "sched/fair: Forfeit vruntime on yield" (mainline 79104becf42b) can result in the infamous NULL returned from pick_eevdf(), which is not supposed to happen. It turned out that the mentioned commit triggered a bug related to the recently added proxy execution feature, which was already fixed in mainline by "sched/proxy: Yield the donor task" (127b90315ca0), though not marked for stable. Applying this to 6.18.2/.3-rc1 (and probably 6.12 as well) has reproducibly fixed the problem. A possible reason the crash was triggered by the Go runtime could be its specific use of yield(), though that's just speculation on my part. So please add 127b90315ca0 ("sched/proxy: Yield the donor task") to 6.18.y/6.12.y. I know we're already in 6.18.3-rc1, but the crasher seems reproducible. Fernand, please correct me if I got the explanations wrong. Thanks! Holger [1] https://bugs.gentoo.org/968116 starting at #8

21 hours, 48 minutes

2
2
0 0

[PATCH] clk: clk-apple-nco: Add "apple,t8103-nco" compatible

by Janne Grunau

After discussion with the devicetree maintainers we agreed to not extend lists with the generic compatible "apple,nco" anymore [1]. Use "apple,t8103-nco" as base compatible as it is the SoC the driver and bindings were written for. [1]: https://lore.kernel.org/asahi/12ab93b7-1fc2-4ce0-926e-c8141cfe81bf@kernel.o… Fixes: 6641057d5dba ("clk: clk-apple-nco: Add driver for Apple NCO") Cc: stable(a)vger.kernel.org Acked-by: Stephen Boyd <sboyd(a)kernel.org> Reviewed-by: Neal Gompa <neal(a)gompa.dev> Signed-off-by: Janne Grunau <j(a)jannau.net> --- This is split off from the v1 series adding Apple M2 Pro/Max/Ultra device trees in [2]. Changes compared to that series: - add "Fixes:" and "Cc: stable" for handling this as fix adding a device id - add Neal's and Stephen's trailers --- drivers/clk/clk-apple-nco.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/clk/clk-apple-nco.c b/drivers/clk/clk-apple-nco.c index d3ced4a0f029ec0440ff42d49d31e314fdf86846..434c067968bbc1afdb5c9216277486bf826666c2 100644 --- a/drivers/clk/clk-apple-nco.c +++ b/drivers/clk/clk-apple-nco.c @@ -320,6 +320,7 @@ static int applnco_probe(struct platform_device *pdev) } static const struct of_device_id applnco_ids[] = { + { .compatible = "apple,t8103-nco" }, { .compatible = "apple,nco" }, { } }; --- base-commit: 8f0b4cce4481fb22653697cced8d0d04027cb1e8 change-id: 20251231-clk-apple-nco-t8103-base-compat-dea037ecce88 Best regards, -- Janne Grunau <j(a)jannau.net>

21 hours, 49 minutes

1
0
0 0

[PATCH 1/2] nvmem: Drop OF node reference on nvmem_add_one_cell() failure

by Krzysztof Kozlowski

If nvmem_add_one_cell() failed, the ownership of "child" (or "info.np"), thus its OF reference, is not passed further and function should clean up by putting the reference it got via earlier of_node_get(). Note that this is independent of references obtained via for_each_child_of_node() loop. Fixes: 50014d659617 ("nvmem: core: use nvmem_add_one_cell() in nvmem_add_cells_from_of()") Cc: <stable(a)vger.kernel.org> Signed-off-by: Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> --- drivers/nvmem/core.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/nvmem/core.c b/drivers/nvmem/core.c index 387c88c55259..ff68fd5ad3d6 100644 --- a/drivers/nvmem/core.c +++ b/drivers/nvmem/core.c @@ -831,6 +831,7 @@ static int nvmem_add_cells_from_dt(struct nvmem_device *nvmem, struct device_nod kfree(info.name); if (ret) { of_node_put(child); + of_node_put(info.np); return ret; } } -- 2.51.0

22 hours, 1 minute

1
0
0 0

[PATCH v2 0/2] net: qrtr: Drop the MHI 'auto_queue' feature

by Manivannan Sadhasivam via B4 Relay

Hi, This series intends to fix the race between the MHI stack and the MHI client drivers due to the MHI 'auto_queue' feature. As it turns out often, the best way to fix an issue in a feature is to drop the feature itself and this series does exactly that. There is no real benefit in having the 'auto_queue' feature in the MHI stack, other than saving a few lines of code in the client drivers. Since the QRTR is the only client driver which makes use of this feature, this series reworks the QRTR driver to manage the buffer on its own. Testing ======= Tested on Qcom X1E based Lenovo Thinkpad T14s laptop with WLAN device. Merge Strategy ============== Since this series modifies many subsystem drivers, I'd like to get acks from relevant subsystem maintainers and take the series through MHI tree. Signed-off-by: Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> --- Changes in v2: - Used mhi_get_free_desc_count() to queue the buffers - Collected tags - Link to v1: https://lore.kernel.org/r/20251217-qrtr-fix-v1-0-f6142a3ec9d8@oss.qualcomm.… --- Manivannan Sadhasivam (2): net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels bus: mhi: host: Drop the auto_queue support drivers/accel/qaic/mhi_controller.c | 44 ------------------- drivers/bus/mhi/host/init.c | 10 ----- drivers/bus/mhi/host/internal.h | 3 -- drivers/bus/mhi/host/main.c | 81 +---------------------------------- drivers/bus/mhi/host/pci_generic.c | 20 +-------- drivers/net/wireless/ath/ath11k/mhi.c | 4 -- drivers/net/wireless/ath/ath12k/mhi.c | 4 -- include/linux/mhi.h | 14 ------ net/qrtr/mhi.c | 69 ++++++++++++++++++++++++----- 9 files changed, 62 insertions(+), 187 deletions(-) --- base-commit: 8f0b4cce4481fb22653697cced8d0d04027cb1e8 change-id: 20251217-qrtr-fix-c058251d8d1a Best regards, -- Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com>

23 hours, 15 minutes

5
5
0 0

[PATCH] spmi: apple: Add "apple,t8103-spmi" compatible

by Janne Grunau

After discussion with the devicetree maintainers we agreed to not extend lists with the generic compatible "apple,spmi" anymore [1]. Use "apple,t8103-spmi" as base compatible as it is the SoC the driver and bindings were written for. [1]: https://lore.kernel.org/asahi/12ab93b7-1fc2-4ce0-926e-c8141cfe81bf@kernel.o… Fixes: 77ca75e80c71 ("spmi: add a spmi driver for Apple SoC") Cc: stable(a)vger.kernel.org Reviewed-by: Neal Gompa <neal(a)gompa.dev> Signed-off-by: Janne Grunau <j(a)jannau.net> --- This is split off from the v1 series adding Apple M2 Pro/Max/Ultra device trees in [2]. 2: https://lore.kernel.org/r/20250828-dt-apple-t6020-v1-0-507ba4c4b98e@jannau.… --- drivers/spmi/spmi-apple-controller.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/spmi/spmi-apple-controller.c b/drivers/spmi/spmi-apple-controller.c index 697b3e8bb023566f17911fc222666d84f5e14c91..87e3ee9d4f2aa5517808827f5dd365055c08446a 100644 --- a/drivers/spmi/spmi-apple-controller.c +++ b/drivers/spmi/spmi-apple-controller.c @@ -149,6 +149,7 @@ static int apple_spmi_probe(struct platform_device *pdev) } static const struct of_device_id apple_spmi_match_table[] = { + { .compatible = "apple,t8103-spmi", }, { .compatible = "apple,spmi", }, {} }; --- base-commit: 8f0b4cce4481fb22653697cced8d0d04027cb1e8 change-id: 20251231-spmi-apple-t8103-base-compat-e7c1b862b9a4 Best regards, -- Janne Grunau <j(a)jannau.net>

23 hours, 29 minutes

1
0
0 0

[PATCH] nvme-apple: Add "apple,t8103-nvme-ans2" as compatible

by Janne Grunau

After discussion with the devicetree maintainers we agreed to not extend lists with the generic compatible "apple,nvme-ans2" anymore [1]. Add "apple,t8103-nvme-ans2" as fallback compatible as it is the SoC the driver and bindings were written for. [1]: https://lore.kernel.org/asahi/12ab93b7-1fc2-4ce0-926e-c8141cfe81bf@kernel.o… Cc: stable(a)vger.kernel.org # v6.18+ Fixes: 5bd2927aceba ("nvme-apple: Add initial Apple SoC NVMe driver") Reviewed-by: Neal Gompa <neal(a)gompa.dev> Signed-off-by: Janne Grunau <j(a)jannau.net> --- This is split off from the v1 series adding Apple M2 Pro/Max/Ultra device trees in [2]. Handling this as fix adding a device id only for v6.18+ for two reasons. apple_nvme_of_match gained hw_data in v6.18 and device trees using this compatible were only added in v6.18. 2: https://lore.kernel.org/r/20250828-dt-apple-t6020-v1-0-507ba4c4b98e@jannau.… Changes compared to the patch in that series: - rebased onto v6.19-rc1 since commit 04d8ecf37b5e ("nvme: apple: Add Apple A11 support") introduced hw data for the match table --- drivers/nvme/host/apple.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/nvme/host/apple.c b/drivers/nvme/host/apple.c index 15b3d07f8ccdd023cd3be75eedd349b747c1ecad..ed61b97fde59f7e02664798d9c2612ac16307f5c 100644 --- a/drivers/nvme/host/apple.c +++ b/drivers/nvme/host/apple.c @@ -1704,6 +1704,7 @@ static const struct apple_nvme_hw apple_nvme_t8103_hw = { static const struct of_device_id apple_nvme_of_match[] = { { .compatible = "apple,t8015-nvme-ans2", .data = &apple_nvme_t8015_hw }, + { .compatible = "apple,t8103-nvme-ans2", .data = &apple_nvme_t8103_hw }, { .compatible = "apple,nvme-ans2", .data = &apple_nvme_t8103_hw }, {}, }; --- base-commit: 8f0b4cce4481fb22653697cced8d0d04027cb1e8 change-id: 20251026-nvme-apple-t8103-base-compat-358ba0564f76 Best regards, -- Janne Grunau <j(a)jannau.net>

1 day

1
0
0 0

[PATCH v5.10] ovl: Use "buf" flexible array for memcpy() destination

by Shivani Agarwal

From: Kees Cook <keescook(a)chromium.org> commit cf8aa9bf97cadf85745506c6a3e244b22c268d63 upstream. The "buf" flexible array needs to be the memcpy() destination to avoid false positive run-time warning from the recent FORTIFY_SOURCE hardening: memcpy: detected field-spanning write (size 93) of single field "&fh->fb" at fs/overlayfs/export.c:799 (size 21) Reported-by: syzbot+9d14351a171d0d1c7955(a)syzkaller.appspotmail.com Link: https://lore.kernel.org/all/000000000000763a6c05e95a5985@google.com/ Signed-off-by: Kees Cook <keescook(a)chromium.org> Reviewed-by: Gustavo A. R. Silva <gustavoars(a)kernel.org> Signed-off-by: Miklos Szeredi <mszeredi(a)redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> [Shivani: Modified to apply on 5.10.y] Signed-off-by: Shivani Agarwal <shivani.agarwal(a)broadcom.com> --- fs/overlayfs/export.c | 2 +- fs/overlayfs/overlayfs.h | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/fs/overlayfs/export.c b/fs/overlayfs/export.c index f98128317..dd3e1969e 100644 --- a/fs/overlayfs/export.c +++ b/fs/overlayfs/export.c @@ -788,7 +788,7 @@ static struct ovl_fh *ovl_fid_to_fh(struct fid *fid, int buflen, int fh_type) return ERR_PTR(-ENOMEM); /* Copy unaligned inner fh into aligned buffer */ - memcpy(&fh->fb, fid, buflen - OVL_FH_WIRE_OFFSET); + memcpy(fh->buf, fid, buflen - OVL_FH_WIRE_OFFSET); return fh; } diff --git a/fs/overlayfs/overlayfs.h b/fs/overlayfs/overlayfs.h index 87b7a4a74..5ac968f70 100644 --- a/fs/overlayfs/overlayfs.h +++ b/fs/overlayfs/overlayfs.h @@ -104,7 +104,7 @@ struct ovl_fh { u8 padding[3]; /* make sure fb.fid is 32bit aligned */ union { struct ovl_fb fb; - u8 buf[0]; + DECLARE_FLEX_ARRAY(u8, buf); }; } __packed; -- 2.40.4

1 day

1
0
0 0

[PATCH v2] mfd: macsmc: Initialize mutex

by Janne Grunau

Initialize struct apple_smc's mutex in apple_smc_probe(). Using the mutex uninitialized surprisingly resulted only in occasional NULL pointer dereferences in apple_smc_read() calls from the probe() functions of sub devices. Fixes: e038d985c9823 ("mfd: Add Apple Silicon System Management Controller") Cc: stable(a)vger.kernel.org Signed-off-by: Janne Grunau <j(a)jannau.net> --- Changes in v2: - rewritten commit message - added missing Cc: stable - rebased onto v6.19-rc1 - Link to v1: https://lore.kernel.org/r/20250925-macsmc-mutex_init-v1-1-416e9e644735@jann… --- drivers/mfd/macsmc.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/mfd/macsmc.c b/drivers/mfd/macsmc.c index e3893e255ce5e4bb4832d80ad1fc002d413a291a..3015e8d36d6e5bfdcea342c7d05a7b34788d7845 100644 --- a/drivers/mfd/macsmc.c +++ b/drivers/mfd/macsmc.c @@ -413,6 +413,7 @@ static int apple_smc_probe(struct platform_device *pdev) if (!smc) return -ENOMEM; + mutex_init(&smc->mutex); smc->dev = &pdev->dev; smc->sram_base = devm_platform_get_and_ioremap_resource(pdev, 1, &smc->sram); if (IS_ERR(smc->sram_base)) --- base-commit: 8f0b4cce4481fb22653697cced8d0d04027cb1e8 change-id: 20250925-macsmc-mutex_init-80d7cb2aacfa Best regards, -- Janne Grunau <j(a)jannau.net>

1 day

1
0
0 0

[PATCH] rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add

by Ali Tariq

The driver does not set hw->sta_data_size, which causes mac80211 to allocate insufficient space for driver private station data in __sta_info_alloc(). When rtl8xxxu_sta_add() accesses members of struct rtl8xxxu_sta_info through sta->drv_priv, this results in a slab-out-of-bounds write. KASAN report on RISC-V (VisionFive 2) with RTL8192EU adapter: BUG: KASAN: slab-out-of-bounds in rtl8xxxu_sta_add+0x31c/0x346 Write of size 8 at addr ffffffd6d3e9ae88 by task kworker/u16:0/12 Set hw->sta_data_size to sizeof(struct rtl8xxxu_sta_info) during probe, similar to how hw->vif_data_size is configured. This ensures mac80211 allocates sufficient space for the driver's per-station private data. Tested on StarFive VisionFive 2 v1.2A board. Fixes: eef55f1545c9 ("wifi: rtl8xxxu: support multiple interfaces in {add,remove}_interface()") Cc: stable(a)vger.kernel.org Signed-off-by: Ali Tariq <alitariq45892(a)gmail.com> --- drivers/net/wireless/realtek/rtl8xxxu/core.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/net/wireless/realtek/rtl8xxxu/core.c b/drivers/net/wireless/realtek/rtl8xxxu/core.c index c06ad064f37c..f9a527f6a175 100644 --- a/drivers/net/wireless/realtek/rtl8xxxu/core.c +++ b/drivers/net/wireless/realtek/rtl8xxxu/core.c @@ -7826,6 +7826,7 @@ static int rtl8xxxu_probe(struct usb_interface *interface, goto err_set_intfdata; hw->vif_data_size = sizeof(struct rtl8xxxu_vif); + hw->sta_data_size = sizeof(struct rtl8xxxu_sta_info); hw->wiphy->max_scan_ssids = 1; hw->wiphy->max_scan_ie_len = IEEE80211_MAX_DATA_LEN; -- 2.43.0

1 day, 2 hours

2
2
0 0

[PATCH v3 0/3] Address page fault in ima_restore_measurement_list()

by Harshit Mogalapalli

On x86_64: When the second-stage kernel is booted via kexec with a limiting command line such as "mem=<size>" we observe a pafe fault that happens. BUG: unable to handle page fault for address: ffff97793ff47000 RIP: ima_restore_measurement_list+0xdc/0x45a #PF: error_code(0x0000) – not-present page This happens on x86_64 only, as this is already fixed in aarch64 in commit: cbf9c4b9617b ("of: check previous kernel's ima-kexec-buffer against memory bounds") V1: https://lore.kernel.org/all/20251112193005.3772542-1-harshit.m.mogalapalli@… V1 attempted to do a similar sanity check in x86_64. Borislav suggested to add a generic helper ima_validate_range() which could then be used for both OF based and x86_64. Testing information: -------------------- On x86_64: With latest 6.19-rc2 based, we could reproduce the issue, and patched kernel works fine. (with mem=8G on a 16G memory machine) Thanks to Yifei for finding enabling IMA_KEXEC is the cause. Thanks for the reviews on V1. V1 -> V2: - Patch 1: Add a generic helper "ima_validate_range()" - Patch 2: Use this new helper in drivers/of/kexec.c -> No functional change. - Patch 3: Fix the page fault by doing sanity check with "ima_validate_range()" V2: https://lore.kernel.org/all/20251229081523.622515-1-harshit.m.mogalapalli@o… V2 -> V3: Update subject of Patch 1 to more appropriate one (Suggested by Mimi Zohar) Thanks, Harshit Harshit Mogalapalli (3): ima: verify the previous kernel's IMA buffer lies in addressable RAM of/kexec: refactor ima_get_kexec_buffer() to use ima_validate_range() x86/kexec: Add a sanity check on previous kernel's ima kexec buffer arch/x86/kernel/setup.c | 6 +++++ drivers/of/kexec.c | 15 +++---------- include/linux/ima.h | 1 + security/integrity/ima/ima_kexec.c | 35 ++++++++++++++++++++++++++++++ 4 files changed, 45 insertions(+), 12 deletions(-) -- 2.50.1

1 day, 3 hours

1
3
0 0

[PATCH v2 0/3] Address page fault in ima_restore_measurement_list()

by Harshit Mogalapalli

On x86_64: When the second-stage kernel is booted via kexec with a limiting command line such as "mem=<size>" we observe a pafe fault that happens. BUG: unable to handle page fault for address: ffff97793ff47000 RIP: ima_restore_measurement_list+0xdc/0x45a #PF: error_code(0x0000) – not-present page This happens on x86_64 only, as this is already fixed in aarch64 in commit: cbf9c4b9617b ("of: check previous kernel's ima-kexec-buffer against memory bounds") V1: https://lore.kernel.org/all/20251112193005.3772542-1-harshit.m.mogalapalli@… V1 attempted to do a similar sanity check in x86_64. Borislav suggested to add a generic helper ima_validate_range() which could then be used for both OF based and x86_64. Testing information: -------------------- On x86_64: With latest 6.19-rc2 based, we could reproduce the issue, and patched kernel works fine. (with mem=8G on a 16G memory machine) Thanks for the reviews on V1. V1 -> V2: - Patch 1: Add a generic helper "ima_validate_range()" - Patch 2: Use this new helper in drivers/of/kexec.c -> No functional change. - Patch 3: Fix the page fault by doing sanity check with "ima_validate_range()" Thanks, Harshit Harshit Mogalapalli (3): ima: Add ima_validate_range() for previous kernel IMA buffer of/kexec: refactor ima_get_kexec_buffer() to use ima_validate_range() x86/kexec: Add a sanity check on previous kernel's ima kexec buffer arch/x86/kernel/setup.c | 6 +++++ drivers/of/kexec.c | 15 +++---------- include/linux/ima.h | 1 + security/integrity/ima/ima_kexec.c | 35 ++++++++++++++++++++++++++++++ 4 files changed, 45 insertions(+), 12 deletions(-) -- 2.50.1

1 day, 4 hours

2
7
0 0

[PATCH] drm/gud: fix NULL fb and crtc dereferences on USB disconnect

by Shenghao Yang

On disconnect drm_atomic_helper_disable_all() is called which sets both the fb and crtc for a plane to NULL before invoking a commit. This causes a kernel oops on every display disconnect. Add guards for those dereferences. Cc: <stable(a)vger.kernel.org> # 6.18.x Signed-off-by: Shenghao Yang <me(a)shenghaoyang.info> --- drivers/gpu/drm/gud/gud_pipe.c | 20 ++++++++------------ 1 file changed, 8 insertions(+), 12 deletions(-) diff --git a/drivers/gpu/drm/gud/gud_pipe.c b/drivers/gpu/drm/gud/gud_pipe.c index 76d77a736d84..4b77be94348d 100644 --- a/drivers/gpu/drm/gud/gud_pipe.c +++ b/drivers/gpu/drm/gud/gud_pipe.c @@ -457,27 +457,20 @@ int gud_plane_atomic_check(struct drm_plane *plane, struct drm_plane_state *old_plane_state = drm_atomic_get_old_plane_state(state, plane); struct drm_plane_state *new_plane_state = drm_atomic_get_new_plane_state(state, plane); struct drm_crtc *crtc = new_plane_state->crtc; - struct drm_crtc_state *crtc_state; + struct drm_crtc_state *crtc_state = NULL; const struct drm_display_mode *mode; struct drm_framebuffer *old_fb = old_plane_state->fb; struct drm_connector_state *connector_state = NULL; struct drm_framebuffer *fb = new_plane_state->fb; - const struct drm_format_info *format = fb->format; + const struct drm_format_info *format; struct drm_connector *connector; unsigned int i, num_properties; struct gud_state_req *req; int idx, ret; size_t len; - if (drm_WARN_ON_ONCE(plane->dev, !fb)) - return -EINVAL; - - if (drm_WARN_ON_ONCE(plane->dev, !crtc)) - return -EINVAL; - - crtc_state = drm_atomic_get_new_crtc_state(state, crtc); - - mode = &crtc_state->mode; + if (crtc) + crtc_state = drm_atomic_get_new_crtc_state(state, crtc); ret = drm_atomic_helper_check_plane_state(new_plane_state, crtc_state, DRM_PLANE_NO_SCALING, @@ -492,6 +485,9 @@ int gud_plane_atomic_check(struct drm_plane *plane, if (old_plane_state->rotation != new_plane_state->rotation) crtc_state->mode_changed = true; + mode = &crtc_state->mode; + format = fb->format; + if (old_fb && old_fb->format != format) crtc_state->mode_changed = true; @@ -598,7 +594,7 @@ void gud_plane_atomic_update(struct drm_plane *plane, struct drm_atomic_helper_damage_iter iter; int ret, idx; - if (crtc->state->mode_changed || !crtc->state->enable) { + if (!crtc || crtc->state->mode_changed || !crtc->state->enable) { cancel_work_sync(&gdrm->work); mutex_lock(&gdrm->damage_lock); if (gdrm->fb) { -- 2.52.0

1 day, 4 hours

1
0
0 0

[PATCH] libceph: Reset sparse-read on fault

by Sam Edwards

When a fault occurs, the connection is abandoned, reestablished, and any pending operations are retried. The OSD client tracks the progress of a sparse-read reply using a separate state machine, largely independent of the messenger's state. If a connection is lost mid-payload or the sparse-read state machine returns an error, the sparse-read state is not reset. The OSD client will then interpret the beginning of a new reply as the continuation of the old one. If this makes the sparse-read machinery enter a failure state, it may never recover, producing loops like: libceph: [0] got 0 extents libceph: data len 142248331 != extent len 0 libceph: osd0 (1)...:6801 socket error on read libceph: data len 142248331 != extent len 0 libceph: osd0 (1)...:6801 socket error on read Therefore, reset the sparse-read state in osd_fault(), ensuring retries start from a clean state. Cc: stable(a)vger.kernel.org Signed-off-by: Sam Edwards <CFSworks(a)gmail.com> --- net/ceph/osd_client.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/net/ceph/osd_client.c b/net/ceph/osd_client.c index 3667319b949d..1a7be2f615dc 100644 --- a/net/ceph/osd_client.c +++ b/net/ceph/osd_client.c @@ -4281,6 +4281,9 @@ static void osd_fault(struct ceph_connection *con) goto out_unlock; } + osd->o_sparse_op_idx = -1; + ceph_init_sparse_read(&osd->o_sparse_read); + if (!reopen_osd(osd)) kick_osd_requests(osd); maybe_request_map(osdc); -- 2.51.2

1 day, 6 hours

1
0
0 0

FAILED: patch "[PATCH] NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap" failed to apply to 6.1-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.1-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.1.y git checkout FETCH_HEAD git cherry-pick -x 27d17641cacfedd816789b75d342430f6b912bd2 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025122920-sequence-vixen-bb32@gregkh' --subject-prefix 'PATCH 6.1.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 27d17641cacfedd816789b75d342430f6b912bd2 Mon Sep 17 00:00:00 2001 From: Chuck Lever <chuck.lever(a)oracle.com> Date: Mon, 17 Nov 2025 11:00:49 -0500 Subject: [PATCH] NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap >From RFC 8881: 5.8.1.14. Attribute 75: suppattr_exclcreat > The bit vector that would set all REQUIRED and RECOMMENDED > attributes that are supported by the EXCLUSIVE4_1 method of file > creation via the OPEN operation. The scope of this attribute > applies to all objects with a matching fsid. There's nothing in RFC 8881 that states that suppattr_exclcreat is or is not allowed to contain bits for attributes that are clear in the reported supported_attrs bitmask. But it doesn't make sense for an NFS server to indicate that it /doesn't/ implement an attribute, but then also indicate that clients /are/ allowed to set that attribute using OPEN(create) with EXCLUSIVE4_1. Ensure that the SECURITY_LABEL and ACL bits are not set in the suppattr_exclcreat bitmask when they are also not set in the supported_attrs bitmask. Fixes: 8c18f2052e75 ("nfsd41: SUPPATTR_EXCLCREAT attribute") Cc: stable(a)vger.kernel.org Reviewed-by: Jeff Layton <jlayton(a)kernel.org> Signed-off-by: Chuck Lever <chuck.lever(a)oracle.com> diff --git a/fs/nfsd/nfs4xdr.c b/fs/nfsd/nfs4xdr.c index 30ce5851fe4c..51ef97c25456 100644 --- a/fs/nfsd/nfs4xdr.c +++ b/fs/nfsd/nfs4xdr.c @@ -3375,6 +3375,11 @@ static __be32 nfsd4_encode_fattr4_suppattr_exclcreat(struct xdr_stream *xdr, u32 supp[3]; memcpy(supp, nfsd_suppattrs[resp->cstate.minorversion], sizeof(supp)); + if (!IS_POSIXACL(d_inode(args->dentry))) + supp[0] &= ~FATTR4_WORD0_ACL; + if (!args->contextsupport) + supp[2] &= ~FATTR4_WORD2_SECURITY_LABEL; + supp[0] &= NFSD_SUPPATTR_EXCLCREAT_WORD0; supp[1] &= NFSD_SUPPATTR_EXCLCREAT_WORD1; supp[2] &= NFSD_SUPPATTR_EXCLCREAT_WORD2;

1 day, 6 hours

2
1
0 0

FAILED: patch "[PATCH] NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap" failed to apply to 6.6-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.6-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.6.y git checkout FETCH_HEAD git cherry-pick -x 27d17641cacfedd816789b75d342430f6b912bd2 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025122919-carried-livestock-9465@gregkh' --subject-prefix 'PATCH 6.6.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 27d17641cacfedd816789b75d342430f6b912bd2 Mon Sep 17 00:00:00 2001 From: Chuck Lever <chuck.lever(a)oracle.com> Date: Mon, 17 Nov 2025 11:00:49 -0500 Subject: [PATCH] NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap >From RFC 8881: 5.8.1.14. Attribute 75: suppattr_exclcreat > The bit vector that would set all REQUIRED and RECOMMENDED > attributes that are supported by the EXCLUSIVE4_1 method of file > creation via the OPEN operation. The scope of this attribute > applies to all objects with a matching fsid. There's nothing in RFC 8881 that states that suppattr_exclcreat is or is not allowed to contain bits for attributes that are clear in the reported supported_attrs bitmask. But it doesn't make sense for an NFS server to indicate that it /doesn't/ implement an attribute, but then also indicate that clients /are/ allowed to set that attribute using OPEN(create) with EXCLUSIVE4_1. Ensure that the SECURITY_LABEL and ACL bits are not set in the suppattr_exclcreat bitmask when they are also not set in the supported_attrs bitmask. Fixes: 8c18f2052e75 ("nfsd41: SUPPATTR_EXCLCREAT attribute") Cc: stable(a)vger.kernel.org Reviewed-by: Jeff Layton <jlayton(a)kernel.org> Signed-off-by: Chuck Lever <chuck.lever(a)oracle.com> diff --git a/fs/nfsd/nfs4xdr.c b/fs/nfsd/nfs4xdr.c index 30ce5851fe4c..51ef97c25456 100644 --- a/fs/nfsd/nfs4xdr.c +++ b/fs/nfsd/nfs4xdr.c @@ -3375,6 +3375,11 @@ static __be32 nfsd4_encode_fattr4_suppattr_exclcreat(struct xdr_stream *xdr, u32 supp[3]; memcpy(supp, nfsd_suppattrs[resp->cstate.minorversion], sizeof(supp)); + if (!IS_POSIXACL(d_inode(args->dentry))) + supp[0] &= ~FATTR4_WORD0_ACL; + if (!args->contextsupport) + supp[2] &= ~FATTR4_WORD2_SECURITY_LABEL; + supp[0] &= NFSD_SUPPATTR_EXCLCREAT_WORD0; supp[1] &= NFSD_SUPPATTR_EXCLCREAT_WORD1; supp[2] &= NFSD_SUPPATTR_EXCLCREAT_WORD2;

1 day, 6 hours

2
1
0 0

FAILED: patch "[PATCH] xfs: fix a memory leak in xfs_buf_item_init()" failed to apply to 5.10-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 5.10-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.10.y git checkout FETCH_HEAD git cherry-pick -x fc40459de82543b565ebc839dca8f7987f16f62e # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025122919-catty-unrated-e504@gregkh' --subject-prefix 'PATCH 5.10.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From fc40459de82543b565ebc839dca8f7987f16f62e Mon Sep 17 00:00:00 2001 From: Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> Date: Wed, 10 Dec 2025 17:06:01 +0800 Subject: [PATCH] xfs: fix a memory leak in xfs_buf_item_init() xfs_buf_item_get_format() may allocate memory for bip->bli_formats, free the memory in the error path. Fixes: c3d5f0c2fb85 ("xfs: complain if anyone tries to create a too-large buffer log item") Cc: stable(a)vger.kernel.org Signed-off-by: Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> Reviewed-by: Christoph Hellwig <hch(a)lst.de> Reviewed-by: Carlos Maiolino <cmaiolino(a)redhat.com> Signed-off-by: Carlos Maiolino <cem(a)kernel.org> diff --git a/fs/xfs/xfs_buf_item.c b/fs/xfs/xfs_buf_item.c index 8d85b5eee444..f4c5be67826e 100644 --- a/fs/xfs/xfs_buf_item.c +++ b/fs/xfs/xfs_buf_item.c @@ -896,6 +896,7 @@ xfs_buf_item_init( map_size = DIV_ROUND_UP(chunks, NBWORD); if (map_size > XFS_BLF_DATAMAP_SIZE) { + xfs_buf_item_free_format(bip); kmem_cache_free(xfs_buf_item_cache, bip); xfs_err(mp, "buffer item dirty bitmap (%u uints) too small to reflect %u bytes!",

1 day, 6 hours

2
1
0 0

FAILED: patch "[PATCH] KVM: nVMX: Immediately refresh APICv controls as needed on" failed to apply to 5.15-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 5.15-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.15.y git checkout FETCH_HEAD git cherry-pick -x 29763138830916f46daaa50e83e7f4f907a3236b # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025122927-delegate-composed-5765@gregkh' --subject-prefix 'PATCH 5.15.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 29763138830916f46daaa50e83e7f4f907a3236b Mon Sep 17 00:00:00 2001 From: Dongli Zhang <dongli.zhang(a)oracle.com> Date: Fri, 5 Dec 2025 15:19:05 -0800 Subject: [PATCH] KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit If an APICv status updated was pended while L2 was active, immediately refresh vmcs01's controls instead of pending KVM_REQ_APICV_UPDATE as kvm_vcpu_update_apicv() only calls into vendor code if a change is necessary. E.g. if APICv is inhibited, and then activated while L2 is running: kvm_vcpu_update_apicv() | -> __kvm_vcpu_update_apicv() | -> apic->apicv_active = true | -> vmx_refresh_apicv_exec_ctrl() | -> vmx->nested.update_vmcs01_apicv_status = true | -> return Then L2 exits to L1: __nested_vmx_vmexit() | -> kvm_make_request(KVM_REQ_APICV_UPDATE) vcpu_enter_guest(): KVM_REQ_APICV_UPDATE -> kvm_vcpu_update_apicv() | -> __kvm_vcpu_update_apicv() | -> return // because if (apic->apicv_active == activate) Reported-by: Chao Gao <chao.gao(a)intel.com> Closes: https://lore.kernel.org/all/aQ2jmnN8wUYVEawF@intel.com Fixes: 7c69661e225c ("KVM: nVMX: Defer APICv updates while L2 is active until L1 is active") Cc: stable(a)vger.kernel.org Signed-off-by: Dongli Zhang <dongli.zhang(a)oracle.com> [sean: write changelog] Link: https://patch.msgid.link/20251205231913.441872-3-seanjc@google.com Signed-off-by: Sean Christopherson <seanjc(a)google.com> diff --git a/arch/x86/kvm/vmx/nested.c b/arch/x86/kvm/vmx/nested.c index bcea087b642f..1725c6a94f99 100644 --- a/arch/x86/kvm/vmx/nested.c +++ b/arch/x86/kvm/vmx/nested.c @@ -19,6 +19,7 @@ #include "trace.h" #include "vmx.h" #include "smm.h" +#include "x86_ops.h" static bool __read_mostly enable_shadow_vmcs = 1; module_param_named(enable_shadow_vmcs, enable_shadow_vmcs, bool, S_IRUGO); @@ -5216,7 +5217,7 @@ void __nested_vmx_vmexit(struct kvm_vcpu *vcpu, u32 vm_exit_reason, if (vmx->nested.update_vmcs01_apicv_status) { vmx->nested.update_vmcs01_apicv_status = false; - kvm_make_request(KVM_REQ_APICV_UPDATE, vcpu); + vmx_refresh_apicv_exec_ctrl(vcpu); } if (vmx->nested.update_vmcs01_hwapic_isr) {

1 day, 6 hours

2
1
0 0

FAILED: patch "[PATCH] KVM: s390: Fix gmap_helper_zap_one_page() again" failed to apply to 6.18-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 6.18-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-6.18.y git checkout FETCH_HEAD git cherry-pick -x 2f393c228cc519ddf19b8c6c05bf15723241aa96 # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025122907-grant-reformist-a323@gregkh' --subject-prefix 'PATCH 6.18.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From 2f393c228cc519ddf19b8c6c05bf15723241aa96 Mon Sep 17 00:00:00 2001 From: Claudio Imbrenda <imbrenda(a)linux.ibm.com> Date: Tue, 4 Nov 2025 16:40:48 +0100 Subject: [PATCH] KVM: s390: Fix gmap_helper_zap_one_page() again A few checks were missing in gmap_helper_zap_one_page(), which can lead to memory corruption in the guest under specific circumstances. Add the missing checks. Fixes: 5deafa27d9ae ("KVM: s390: Fix to clear PTE when discarding a swapped page") Cc: stable(a)vger.kernel.org Reported-by: Marc Hartmayer <mhartmay(a)linux.ibm.com> Tested-by: Marc Hartmayer <mhartmay(a)linux.ibm.com> Acked-by: Christian Borntraeger <borntraeger(a)linux.ibm.com> Signed-off-by: Claudio Imbrenda <imbrenda(a)linux.ibm.com> Signed-off-by: Heiko Carstens <hca(a)linux.ibm.com> diff --git a/arch/s390/mm/gmap_helpers.c b/arch/s390/mm/gmap_helpers.c index 549f14ad08af..d41b19925a5a 100644 --- a/arch/s390/mm/gmap_helpers.c +++ b/arch/s390/mm/gmap_helpers.c @@ -47,6 +47,7 @@ static void ptep_zap_softleaf_entry(struct mm_struct *mm, softleaf_t entry) void gmap_helper_zap_one_page(struct mm_struct *mm, unsigned long vmaddr) { struct vm_area_struct *vma; + unsigned long pgstev; spinlock_t *ptl; pgste_t pgste; pte_t *ptep; @@ -65,9 +66,13 @@ void gmap_helper_zap_one_page(struct mm_struct *mm, unsigned long vmaddr) if (pte_swap(*ptep)) { preempt_disable(); pgste = pgste_get_lock(ptep); + pgstev = pgste_val(pgste); - ptep_zap_softleaf_entry(mm, softleaf_from_pte(*ptep)); - pte_clear(mm, vmaddr, ptep); + if ((pgstev & _PGSTE_GPS_USAGE_MASK) == _PGSTE_GPS_USAGE_UNUSED || + (pgstev & _PGSTE_GPS_ZERO)) { + ptep_zap_softleaf_entry(mm, softleaf_from_pte(*ptep)); + pte_clear(mm, vmaddr, ptep); + } pgste_set_unlock(ptep, pgste); preempt_enable();

1 day, 6 hours

2
1
0 0

FAILED: patch "[PATCH] xfs: fix a memory leak in xfs_buf_item_init()" failed to apply to 5.15-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 5.15-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. To reproduce the conflict and resubmit, you may use the following commands: git fetch https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ linux-5.15.y git checkout FETCH_HEAD git cherry-pick -x fc40459de82543b565ebc839dca8f7987f16f62e # <resolve conflicts, build, test, etc.> git commit -s git send-email --to '<stable(a)vger.kernel.org>' --in-reply-to '2025122919-balancing-colony-41ee@gregkh' --subject-prefix 'PATCH 5.15.y' HEAD^.. Possible dependencies: thanks, greg k-h ------------------ original commit in Linus's tree ------------------ From fc40459de82543b565ebc839dca8f7987f16f62e Mon Sep 17 00:00:00 2001 From: Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> Date: Wed, 10 Dec 2025 17:06:01 +0800 Subject: [PATCH] xfs: fix a memory leak in xfs_buf_item_init() xfs_buf_item_get_format() may allocate memory for bip->bli_formats, free the memory in the error path. Fixes: c3d5f0c2fb85 ("xfs: complain if anyone tries to create a too-large buffer log item") Cc: stable(a)vger.kernel.org Signed-off-by: Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> Reviewed-by: Christoph Hellwig <hch(a)lst.de> Reviewed-by: Carlos Maiolino <cmaiolino(a)redhat.com> Signed-off-by: Carlos Maiolino <cem(a)kernel.org> diff --git a/fs/xfs/xfs_buf_item.c b/fs/xfs/xfs_buf_item.c index 8d85b5eee444..f4c5be67826e 100644 --- a/fs/xfs/xfs_buf_item.c +++ b/fs/xfs/xfs_buf_item.c @@ -896,6 +896,7 @@ xfs_buf_item_init( map_size = DIV_ROUND_UP(chunks, NBWORD); if (map_size > XFS_BLF_DATAMAP_SIZE) { + xfs_buf_item_free_format(bip); kmem_cache_free(xfs_buf_item_cache, bip); xfs_err(mp, "buffer item dirty bitmap (%u uints) too small to reflect %u bytes!",

1 day, 6 hours

2
1
0 0

[PATCH 5/5] ceph: Fix write storm on fscrypted files

by Sam Edwards

CephFS stores file data across multiple RADOS objects. An object is the atomic unit of storage, so the writeback code must clean only folios that belong to the same object with each OSD request. CephFS also supports RAID0-style striping of file contents: if enabled, each object stores multiple unbroken "stripe units" covering different portions of the file; if disabled, a "stripe unit" is simply the whole object. The stripe unit is (usually) reported as the inode's block size. Though the writeback logic could, in principle, lock all dirty folios belonging to the same object, its current design is to lock only a single stripe unit at a time. Ever since this code was first written, it has determined this size by checking the inode's block size. However, the relatively-new fscrypt support needed to reduce the block size for encrypted inodes to the crypto block size (see 'fixes' commit), which causes an unnecessarily high number of write operations (~1024x as many, with 4MiB objects) and grossly degraded performance. Fix this (and clarify intent) by using i_layout.stripe_unit directly in ceph_define_write_size() so that encrypted inodes are written back with the same number of operations as if they were unencrypted. Fixes: 94af0470924c ("ceph: add some fscrypt guardrails") Cc: stable(a)vger.kernel.org Signed-off-by: Sam Edwards <CFSworks(a)gmail.com> --- fs/ceph/addr.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/fs/ceph/addr.c b/fs/ceph/addr.c index b3569d44d510..cb1da8e27c2b 100644 --- a/fs/ceph/addr.c +++ b/fs/ceph/addr.c @@ -1000,7 +1000,8 @@ unsigned int ceph_define_write_size(struct address_space *mapping) { struct inode *inode = mapping->host; struct ceph_fs_client *fsc = ceph_inode_to_fs_client(inode); - unsigned int wsize = i_blocksize(inode); + struct ceph_inode_info *ci = ceph_inode(inode); + unsigned int wsize = ci->i_layout.stripe_unit; if (fsc->mount_options->wsize < wsize) wsize = fsc->mount_options->wsize; -- 2.51.2

1 day, 7 hours

1
0
0 0

[PATCH 3/5] ceph: Free page array when ceph_submit_write fails

by Sam Edwards

If `locked_pages` is zero, the page array must not be allocated: ceph_process_folio_batch() uses `locked_pages` to decide when to allocate `pages`, and redundant allocations trigger ceph_allocate_page_array()'s BUG_ON(), resulting in a worker oops (and writeback stall) or even a kernel panic. Consequently, the main loop in ceph_writepages_start() assumes that the lifetime of `pages` is confined to a single iteration. The ceph_submit_write() function claims ownership of the page array on success. But failures only redirty/unlock the pages and fail to free the array, making the failure case in ceph_submit_write() fatal. Free the page array in ceph_submit_write()'s error-handling 'if' block so that the caller's invariant (that the array does not outlive the iteration) is maintained unconditionally, allowing failures in ceph_submit_write() to be recoverable as originally intended. Fixes: 1551ec61dc55 ("ceph: introduce ceph_submit_write() method") Cc: stable(a)vger.kernel.org Signed-off-by: Sam Edwards <CFSworks(a)gmail.com> --- fs/ceph/addr.c | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/fs/ceph/addr.c b/fs/ceph/addr.c index 2b722916fb9b..91cc43950162 100644 --- a/fs/ceph/addr.c +++ b/fs/ceph/addr.c @@ -1466,6 +1466,13 @@ int ceph_submit_write(struct address_space *mapping, unlock_page(page); } + if (ceph_wbc->from_pool) { + mempool_free(ceph_wbc->pages, ceph_wb_pagevec_pool); + ceph_wbc->from_pool = false; + } else + kfree(ceph_wbc->pages); + ceph_wbc->pages = NULL; + ceph_osdc_put_request(req); return -EIO; } -- 2.51.2

1 day, 7 hours

1
0
0 0

[PATCH 1/5] ceph: Do not propagate page array emplacement errors as batch errors

by Sam Edwards

When fscrypt is enabled, move_dirty_folio_in_page_array() may fail because it needs to allocate bounce buffers to store the encrypted versions of each folio. Each folio beyond the first allocates its bounce buffer with GFP_NOWAIT. Failures are common (and expected) under this allocation mode; they should flush (not abort) the batch. However, ceph_process_folio_batch() uses the same `rc` variable for its own return code and for capturing the return codes of its routine calls; failing to reset `rc` back to 0 results in the error being propagated out to the main writeback loop, which cannot actually tolerate any errors here: once `ceph_wbc.pages` is allocated, it must be passed to ceph_submit_write() to be freed. If it survives until the next iteration (e.g. due to the goto being followed), ceph_allocate_page_array()'s BUG_ON() will oops the worker. (Subsequent patches in this series make the loop more robust.) Note that this failure mode is currently masked due to another bug (addressed later in this series) that prevents multiple encrypted folios from being selected for the same write. For now, just reset `rc` when redirtying the folio and prevent the error from propagating. After this change, ceph_process_folio_batch() no longer returns errors; its only remaining failure indicator is `locked_pages == 0`, which the caller already handles correctly. The next patch in this series addresses this. Fixes: ce80b76dd327 ("ceph: introduce ceph_process_folio_batch() method") Cc: stable(a)vger.kernel.org Signed-off-by: Sam Edwards <CFSworks(a)gmail.com> --- fs/ceph/addr.c | 1 + 1 file changed, 1 insertion(+) diff --git a/fs/ceph/addr.c b/fs/ceph/addr.c index 63b75d214210..3462df35d245 100644 --- a/fs/ceph/addr.c +++ b/fs/ceph/addr.c @@ -1369,6 +1369,7 @@ int ceph_process_folio_batch(struct address_space *mapping, rc = move_dirty_folio_in_page_array(mapping, wbc, ceph_wbc, folio); if (rc) { + rc = 0; folio_redirty_for_writepage(wbc, folio); folio_unlock(folio); break; -- 2.51.2

1 day, 7 hours

1
0
0 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror