- Linux-stable-mirror - lists.linaro.org

Apply ccc35ff2fd2911986b716a87fe65e03fac2312c9 to 5.15, 6.1, and 6.6

by Nathan Chancellor

Hi stable folks, Please apply commit ccc35ff2fd29 ("leds: spi-byte: Use devm_led_classdev_register_ext()") to 5.15, 6.1, and 6.6. It inadvertently addresses an instance of -Wuninitialized visible with clang-21 and newer: drivers/leds/leds-spi-byte.c:99:26: error: variable 'child' is uninitialized when used here [-Werror,-Wuninitialized] 99 | of_property_read_string(child, "label", &name); | ^~~~~ drivers/leds/leds-spi-byte.c:83:27: note: initialize the variable 'child' to silence this warning 83 | struct device_node *child; | ^ | = NULL It applies cleanly to 6.6. I have attached a backport for 6.1 and 5.15, which can be generated locally with: $ git format-patch -1 --stdout ccc35ff2fd2911986b716a87fe65e03fac2312c9 | sed 's;strscpy;strlcpy;' | patch -p1 This change seems safe to me but if I am missing a massive dependency chain, an alternative would be moving child's initialization up in these stable branches. Cheers, Nathan diff --git a/drivers/leds/leds-spi-byte.c b/drivers/leds/leds-spi-byte.c index 82696e0607a5..7dd876df8b36 100644 --- a/drivers/leds/leds-spi-byte.c +++ b/drivers/leds/leds-spi-byte.c @@ -96,6 +96,7 @@ static int spi_byte_probe(struct spi_device *spi) if (!led) return -ENOMEM; + child = of_get_next_available_child(dev_of_node(dev), NULL); of_property_read_string(child, "label", &name); strlcpy(led->name, name, sizeof(led->name)); led->spi = spi; @@ -106,7 +107,6 @@ static int spi_byte_probe(struct spi_device *spi) led->ldev.max_brightness = led->cdef->max_value - led->cdef->off_value; led->ldev.brightness_set_blocking = spi_byte_brightness_set_blocking; - child = of_get_next_available_child(dev_of_node(dev), NULL); state = of_get_property(child, "default-state", NULL); if (state) { if (!strcmp(state, "on")) {

3 days, 6 hours

2
1
0 0

[PATCH AUTOSEL 6.18-6.1] ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency

by Sasha Levin

From: Namjae Jeon <linkinjeon(a)kernel.org> [ Upstream commit b39a1833cc4a2755b02603eec3a71a85e9dff926 ] Under high concurrency, A tree-connection object (tcon) is freed on a disconnect path while another path still holds a reference and later executes *_put()/write on it. Reported-by: Qianchang Zhao <pioooooooooip(a)gmail.com> Reported-by: Zhitong Liu <liuzhitong1993(a)gmail.com> Signed-off-by: Namjae Jeon <linkinjeon(a)kernel.org> Signed-off-by: Steve French <stfrench(a)microsoft.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- LLM Generated explanations, may be completely bogus: fs/smb/server/mgmt/tree_connect.c | 18 ++++-------------- fs/smb/server/mgmt/tree_connect.h | 1 - fs/smb/server/smb2pdu.c | 3 --- 3 files changed, 4 insertions(+), 18 deletions(-) diff --git a/fs/smb/server/mgmt/tree_connect.c b/fs/smb/server/mgmt/tree_connect.c index ecfc575086712..d3483d9c757c7 100644 --- a/fs/smb/server/mgmt/tree_connect.c +++ b/fs/smb/server/mgmt/tree_connect.c @@ -78,7 +78,6 @@ ksmbd_tree_conn_connect(struct ksmbd_work *work, const char *share_name) tree_conn->t_state = TREE_NEW; status.tree_conn = tree_conn; atomic_set(&tree_conn->refcount, 1); - init_waitqueue_head(&tree_conn->refcount_q); ret = xa_err(xa_store(&sess->tree_conns, tree_conn->id, tree_conn, KSMBD_DEFAULT_GFP)); @@ -100,14 +99,8 @@ ksmbd_tree_conn_connect(struct ksmbd_work *work, const char *share_name) void ksmbd_tree_connect_put(struct ksmbd_tree_connect *tcon) { - /* - * Checking waitqueue to releasing tree connect on - * tree disconnect. waitqueue_active is safe because it - * uses atomic operation for condition. - */ - if (!atomic_dec_return(&tcon->refcount) && - waitqueue_active(&tcon->refcount_q)) - wake_up(&tcon->refcount_q); + if (atomic_dec_and_test(&tcon->refcount)) + kfree(tcon); } int ksmbd_tree_conn_disconnect(struct ksmbd_session *sess, @@ -119,14 +112,11 @@ int ksmbd_tree_conn_disconnect(struct ksmbd_session *sess, xa_erase(&sess->tree_conns, tree_conn->id); write_unlock(&sess->tree_conns_lock); - if (!atomic_dec_and_test(&tree_conn->refcount)) - wait_event(tree_conn->refcount_q, - atomic_read(&tree_conn->refcount) == 0); - ret = ksmbd_ipc_tree_disconnect_request(sess->id, tree_conn->id); ksmbd_release_tree_conn_id(sess, tree_conn->id); ksmbd_share_config_put(tree_conn->share_conf); - kfree(tree_conn); + if (atomic_dec_and_test(&tree_conn->refcount)) + kfree(tree_conn); return ret; } diff --git a/fs/smb/server/mgmt/tree_connect.h b/fs/smb/server/mgmt/tree_connect.h index a42cdd0510411..f0023d86716f2 100644 --- a/fs/smb/server/mgmt/tree_connect.h +++ b/fs/smb/server/mgmt/tree_connect.h @@ -33,7 +33,6 @@ struct ksmbd_tree_connect { int maximal_access; bool posix_extensions; atomic_t refcount; - wait_queue_head_t refcount_q; unsigned int t_state; }; diff --git a/fs/smb/server/smb2pdu.c b/fs/smb/server/smb2pdu.c index a2830ec67e782..dba29881debdc 100644 --- a/fs/smb/server/smb2pdu.c +++ b/fs/smb/server/smb2pdu.c @@ -2200,7 +2200,6 @@ int smb2_tree_disconnect(struct ksmbd_work *work) goto err_out; } - WARN_ON_ONCE(atomic_dec_and_test(&tcon->refcount)); tcon->t_state = TREE_DISCONNECTED; write_unlock(&sess->tree_conns_lock); @@ -2210,8 +2209,6 @@ int smb2_tree_disconnect(struct ksmbd_work *work) goto err_out; } - work->tcon = NULL; - rsp->StructureSize = cpu_to_le16(4); err = ksmbd_iov_pin_rsp(work, rsp, sizeof(struct smb2_tree_disconnect_rsp)); -- 2.51.0

3 days, 8 hours

2
28
0 0

Linux 6.17.11

by Greg Kroah-Hartman

I'm announcing the release of the 6.17.11 kernel. All users of the 6.17 kernel series must upgrade. The updated 6.17.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.17.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Makefile | 2 arch/arm/boot/dts/nxp/imx/imx6ul.dtsi | 2 arch/arm64/boot/dts/freescale/imx8dxl-ss-conn.dtsi | 4 arch/arm64/boot/dts/freescale/imx8dxl-ss-hsio.dtsi | 5 arch/arm64/boot/dts/freescale/imx8qm-mek.dts | 4 arch/arm64/kernel/acpi.c | 10 arch/mips/mm/tlb-r4k.c | 116 ++++--- arch/riscv/boot/dts/allwinner/sun20i-d1s.dtsi | 2 arch/x86/events/core.c | 10 drivers/atm/fore200e.c | 2 drivers/bluetooth/btusb.c | 39 ++ drivers/counter/microchip-tcb-capture.c | 2 drivers/firmware/stratix10-svc.c | 7 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 3 drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 2 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 15 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c | 8 drivers/gpu/drm/amd/display/dc/core/dc_stream.c | 11 drivers/gpu/drm/amd/display/dc/hwss/dce110/dce110_hwseq.c | 1 drivers/gpu/drm/amd/display/dc/hwss/dcn20/dcn20_hwseq.c | 2 drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 2 drivers/gpu/drm/amd/display/dc/link/link_dpms.c | 3 drivers/gpu/drm/amd/display/dc/virtual/virtual_stream_encoder.c | 7 drivers/gpu/drm/bridge/sii902x.c | 20 - drivers/gpu/drm/drm_fb_helper.c | 14 drivers/gpu/drm/i915/display/intel_display.c | 8 drivers/gpu/drm/i915/display/intel_psr.c | 6 drivers/gpu/drm/sti/sti_vtg.c | 7 drivers/gpu/drm/xe/xe_gt_clock.c | 7 drivers/gpu/drm/xe/xe_guc_ct.c | 3 drivers/iio/accel/adxl355_core.c | 44 ++ drivers/iio/accel/bmc150-accel-core.c | 5 drivers/iio/accel/bmc150-accel.h | 1 drivers/iio/adc/ad4030.c | 2 drivers/iio/adc/ad7124.c | 12 drivers/iio/adc/ad7280a.c | 2 drivers/iio/adc/ad7380.c | 8 drivers/iio/adc/rtq6056.c | 2 drivers/iio/adc/stm32-dfsdm-adc.c | 5 drivers/iio/buffer/industrialio-buffer-dma.c | 6 drivers/iio/buffer/industrialio-buffer-dmaengine.c | 2 drivers/iio/common/ssp_sensors/ssp_dev.c | 4 drivers/iio/humidity/hdc3020.c | 73 ++-- drivers/iio/imu/st_lsm6dsx/st_lsm6dsx.h | 40 +- drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 19 - drivers/iio/industrialio-buffer.c | 21 + drivers/iio/pressure/bmp280-core.c | 15 drivers/iommu/iommufd/driver.c | 2 drivers/mailbox/mailbox-test.c | 2 drivers/mailbox/mtk-cmdq-mailbox.c | 45 +- drivers/mailbox/pcc.c | 8 drivers/md/dm-verity-fec.c | 6 drivers/mmc/host/sdhci-of-dwcmshc.c | 29 + drivers/most/most_usb.c | 14 drivers/net/can/rcar/rcar_canfd.c | 53 +-- drivers/net/can/sja1000/sja1000.c | 4 drivers/net/can/sun4i_can.c | 4 drivers/net/can/usb/gs_usb.c | 100 +++++- drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c | 4 drivers/net/dsa/microchip/ksz_common.c | 31 - drivers/net/dsa/microchip/ksz_ptp.c | 22 - drivers/net/dsa/sja1105/sja1105_main.c | 7 drivers/net/ethernet/aquantia/atlantic/aq_hw_utils.c | 22 + drivers/net/ethernet/aquantia/atlantic/aq_hw_utils.h | 1 drivers/net/ethernet/aquantia/atlantic/aq_ring.c | 5 drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_b0.c | 19 - drivers/net/ethernet/aquantia/atlantic/hw_atl2/hw_atl2.c | 2 drivers/net/ethernet/freescale/fec.h | 1 drivers/net/ethernet/freescale/fec_ptp.c | 64 +++- drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 2 drivers/net/ethernet/meta/fbnic/fbnic_fw.c | 2 drivers/net/ethernet/microchip/lan966x/lan966x_ptp.c | 5 drivers/net/ethernet/realtek/r8169_main.c | 19 - drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c | 4 drivers/net/phy/mxl-gpy.c | 20 - drivers/net/team/team_core.c | 23 - drivers/net/tun_vnet.h | 2 drivers/net/veth.c | 7 drivers/net/virtio_net.c | 3 drivers/net/wwan/mhi_wwan_mbim.c | 2 drivers/nvmem/layouts.c | 2 drivers/platform/x86/intel/punit_ipc.c | 2 drivers/pmdomain/tegra/powergate-bpmp.c | 1 drivers/regulator/rtq2208-regulator.c | 6 drivers/slimbus/qcom-ngd-ctrl.c | 1 drivers/spi/Kconfig | 4 drivers/spi/spi-amlogic-spifc-a1.c | 4 drivers/spi/spi-bcm63xx.c | 14 drivers/spi/spi-cadence-quadspi.c | 18 - drivers/spi/spi-nxp-fspi.c | 28 + drivers/thunderbolt/nhi.c | 2 drivers/thunderbolt/nhi.h | 1 drivers/tty/serial/8250/8250.h | 4 drivers/tty/serial/8250/8250_platform.c | 2 drivers/tty/serial/8250/8250_rsa.c | 26 + drivers/tty/serial/8250/Makefile | 2 drivers/tty/serial/amba-pl011.c | 2 drivers/usb/cdns3/cdns3-pci-wrap.c | 5 drivers/usb/dwc3/core.c | 3 drivers/usb/dwc3/dwc3-pci.c | 80 ++--- drivers/usb/dwc3/ep0.c | 1 drivers/usb/dwc3/gadget.c | 7 drivers/usb/gadget/function/f_eem.c | 7 drivers/usb/gadget/udc/core.c | 18 + drivers/usb/gadget/udc/renesas_usbf.c | 4 drivers/usb/gadget/udc/trace.h | 5 drivers/usb/host/xhci-dbgcap.h | 1 drivers/usb/host/xhci-dbgtty.c | 23 + drivers/usb/host/xhci-ring.c | 15 drivers/usb/host/xhci.c | 1 drivers/usb/renesas_usbhs/common.c | 14 drivers/usb/serial/ftdi_sio.c | 1 drivers/usb/serial/ftdi_sio_ids.h | 1 drivers/usb/serial/option.c | 10 drivers/usb/storage/sddr55.c | 6 drivers/usb/storage/transport.c | 16 + drivers/usb/storage/uas.c | 5 drivers/usb/storage/unusual_devs.h | 2 drivers/usb/typec/ucsi/psy.c | 5 drivers/vhost/net.c | 53 ++- drivers/vhost/vhost.c | 76 +++- drivers/vhost/vhost.h | 10 drivers/video/fbdev/core/fbcon.c | 9 fs/afs/cell.c | 43 -- fs/afs/internal.h | 1 fs/afs/security.c | 49 ++- fs/namespace.c | 7 fs/overlayfs/util.c | 4 fs/smb/client/connect.c | 1 include/linux/iio/buffer-dma.h | 1 include/linux/iio/buffer_impl.h | 2 include/linux/mailbox/mtk-cmdq-mailbox.h | 10 include/linux/usb/gadget.h | 5 include/linux/virtio_net.h | 7 include/net/bluetooth/hci_core.h | 21 - io_uring/net.c | 6 kernel/dma/direct.c | 1 kernel/time/timekeeping.c | 4 kernel/trace/trace.c | 10 mm/huge_memory.c | 22 - mm/memfd.c | 27 + mm/swapfile.c | 4 net/bluetooth/hci_core.c | 89 ++--- net/bluetooth/hci_sock.c | 2 net/bluetooth/iso.c | 30 + net/bluetooth/l2cap_core.c | 23 + net/bluetooth/sco.c | 35 +- net/bluetooth/smp.c | 31 - net/ceph/auth_x.c | 2 net/ceph/ceph_common.c | 53 ++- net/ceph/debugfs.c | 14 net/ceph/messenger_v2.c | 11 net/ceph/osdmap.c | 18 - net/mctp/route.c | 1 net/mptcp/protocol.c | 19 + net/xdp/xsk.c | 160 ++++++---- sound/hda/codecs/cirrus/cs420x.c | 1 sound/usb/quirks.c | 3 159 files changed, 1533 insertions(+), 802 deletions(-) Achim Gratz (1): iio: pressure: bmp280: correct meas_time_us calculation Alan Borzeszkowski (1): thunderbolt: Add support for Intel Wildcat Lake Alan Stern (1): USB: storage: Remove subclass and protocol overrides from Novatek quirk Alex Deucher (2): drm/amdgpu: fix cyan_skillfish2 gpu info fw handling Revert "drm/amd/display: Move setup_stream_attribute" Alex Hung (1): drm/amd/display: Check NULL before accessing Alexey Kodanev (1): net: sxgbe: fix potential NULL dereference in sxgbe_rx() Andrei Vagin (1): fs/namespace: fix reference leak in grab_requested_mnt_ns Andy Shevchenko (1): spi: nxp-fspi: Propagate fwnode in ACPI case as well Anurag Dutta (2): spi: spi-cadence-quadspi: Remove duplicate pm_runtime_put_autosuspend() call spi: spi-cadence-quadspi: Enable pm runtime earlier to avoid imbalance Bastien Curutchet (Schneider Electric) (5): net: dsa: microchip: common: Fix checks on irq_find_mapping() net: dsa: microchip: ptp: Fix checks on irq_find_mapping() net: dsa: microchip: Don't free uninitialized ksz_irq net: dsa: microchip: Free previously initialized ports on init failures net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() Biju Das (1): can: rcar_canfd: Fix CAN-FD mode as default ChiYuan Huang (3): iio: adc: rtq6056: Correct the sign bit index regulator: rtq2208: Correct buck group2 phase mapping logic regulator: rtq2208: Correct LDO2 logic judgment bits Chris Lu (1): Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface Christophe JAILLET (1): iio:common:ssp_sensors: Fix an error handling path ssp_probe() Claudiu Beznea (1): usb: renesas_usbhs: Fix synchronous external abort on unbind Dan Carpenter (2): platform/x86: intel: punit_ipc: fix memory corruption timekeeping: Fix error code in tk_aux_sysfs_init() Daniel Golle (2): net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY net: phy: mxl-gpy: fix link properties on USXGMII and internal PHYs Danielle Costantino (1): net/mlx5e: Fix validation logic in rate limiting David Howells (2): afs: Fix delayed allocation of a cell's anonymous key afs: Fix uninit var in afs_alloc_anon_key() David Lechner (3): iio: adc: ad7124: fix temperature channel iio: adc: ad7280a: fix ad7280_store_balance_timer() iio: adc: ad7380: fix SPI offload trigger rate Deepanshu Kartikey (2): tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs mm/memfd: fix information leak in hugetlb folios Desnes Nunes (1): usb: storage: Fix memory leak in USB bulk transport Devarsh Thakkar (1): drm/bridge: sii902x: Fix HDMI detection with DRM_BRIDGE_ATTACH_NO_CONNECTOR Dharma Balasubiramani (1): counter: microchip-tcb-capture: Allow shared IRQ for multi-channel TCBs Dimitri Fedrau (2): iio: humditiy: hdc3020: fix units for temperature and humidity measurement iio: humditiy: hdc3020: fix units for thresholds and hysteresis Douglas Anderson (1): Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref Edward Adam Davis (1): Bluetooth: hci_sock: Prevent race in socket write iter and sock bind Fernando Fernandez Mancera (1): xsk: avoid data corruption on cq descriptor number Francesco Lavra (2): spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields Frank Li (2): arm64: dts: imx8dxl-ss-conn: swap interrupts number of eqos arm64: dts: imx8dxl: Correct pcie-ep interrupt number Greg Kroah-Hartman (1): Linux 6.17.11 Gui-Dong Han (1): atm/fore200e: Fix possible data race in fore200e_open() Gustavo A. R. Silva (1): iommufd/driver: Fix counter initialization for counted_by annotation Haibo Chen (1): spi: spi-nxp-fspi: Add OCT-DTR mode support Hang Zhou (1): spi: bcm63xx: fix premature CS deassertion on RX-only transactions Haotian Zhang (3): usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors mailbox: mailbox-test: Fix debugfs_create_dir error checking spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors Harish Chegondi (1): drm/xe: Fix conversion from clock ticks to milliseconds Heikki Krogerus (2): usb: dwc3: pci: add support for the Intel Nova Lake -S usb: dwc3: pci: Sort out the Intel device IDs Heiner Kallweit (1): r8169: fix RTL8127 hang on suspend/shutdown Horatiu Vultur (1): net: lan966x: Fix the initialization of taprio Ilpo Järvinen (1): serial: 8250: Fix 8250_rsa symbol loop Ilya Dryomov (1): libceph: fix potential use-after-free in have_mon_and_osd_map() Ivan Zhaldak (1): ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 Jameson Thies (1): usb: typec: ucsi: psy: Set max current to zero when disconnected Jamie Iles (2): mailbox: pcc: don't zero error register drivers/usb/dwc3: fix PCI parent check Jason Wang (1): vhost: rewind next_avail_head while discarding descriptors Jason-JH Lin (1): mailbox: mtk-cmdq: Refine DMA address handling for the command buffer Jens Axboe (1): io_uring/net: ensure vectored buffer node import is tied to notification Jeremy Kerr (1): net: mctp: unconditionally set skb->dev on dst output Jesper Dangaard Brouer (1): veth: reduce XDP no_direct return section to fix race Jiefeng Zhang (1): net: atlantic: fix fragment overflow handling in RX path Jimmy Hu (1): usb: gadget: udc: fix use-after-free in usb_gadget_state_work Jiri Olsa (1): Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" Jisheng Zhang (1): mmc: sdhci-of-dwcmshc: Promote the th1520 reset handling to ip level Johan Hovold (2): most: usb: fix double free on late probe failure drm: sti: fix device leaks at component probe Jon Hunter (1): pmdomain: tegra: Add GENPD_FLAG_NO_STAY_ON flag Jon Kohler (1): virtio-net: avoid unnecessary checksum calculation on guest RX Kai-Heng Feng (1): net: aquantia: Add missing descriptor cache invalidation on ATL2 Khairul Anuar Romli (1): firmware: stratix10-svc: fix bug in saving controller data Kuen-Han Tsai (2): usb: gadget: f_eem: Fix memory leak in eem_unwrap usb: udc: Add trace event for usb_gadget_set_state Kuniyuki Iwashima (1): mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). Linus Walleij (1): iio: accel: bmc150: Fix irq assumption regression Lucas De Marchi (1): drm/xe/guc: Fix stack_depot usage Luiz Augusto von Dentz (2): Bluetooth: hci_core: Fix triggering cmd_timer for HCI_OP_NOP Bluetooth: SMP: Fix not generating mackey and ltk when repairing Maarten Zanders (1): ARM: dts: nxp: imx6ul: correct SAI3 interrupt line Maciej Fijalkowski (1): xsk: avoid overwriting skb fields for multi-buffer traffic Maciej W. Rozycki (1): MIPS: mm: Prevent a TLB shutdown on initial uniquification Manish Nagar (1): usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths Marc Kleine-Budde (4): can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling Marcelo Schmitt (1): iio: adc: ad4030: Fix _scale value for common-mode channels Mario Limonciello (AMD) (2): drm/amd/display: Don't change brightness for disabled connectors drm/amd/display: Increase EDID read retries Mario Tesi (1): iio: st_lsm6dsx: Fixed calibrated timestamp calculation Mathias Nyman (2): xhci: fix stale flag preventig URBs after link state error is cleared xhci: dbgtty: Fix data corruption when transmitting data form DbC to host Miaoqian Lin (3): slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves serial: amba-pl011: prefer dma_mapping_error() over explicit address checking usb: cdns3: Fix double resource release in cdns3_pci_probe Michael Chen (1): drm/amd/amdgpu: reserve vm invalidation engine for uni_mes Mikulas Patocka (1): dm-verity: fix unreliable memory allocation Mohsin Bashir (1): eth: fbnic: Fix counter roll-over issue NeilBrown (1): ovl: fail ovl_lock_rename_workdir() if either target is unhashed Nikola Z. Ivanov (1): team: Move team device type change at the end of team_port_add Nuno Sá (3): iio: buffer-dma: support getting the DMA channel iio: buffer-dmaengine: enable .get_dma_dev() iio: buffer: support getting dma channel from the buffer Oleksandr Suvorov (1): USB: serial: ftdi_sio: add support for u-blox EVK-M101 Olivier Moysan (1): iio: adc: stm32-dfsdm: fix st,adc-alt-channel property handling Owen Gu (1): usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer Paolo Abeni (1): mptcp: clear scheduled subflows on retransmit Pauli Virtanen (1): Bluetooth: hci_core: lookup hci_conn on RX path on protocol side Paulo Alcantara (1): smb: client: fix memory leak in cifs_construct_tcon() Pranjal Shrivastava (1): dma-direct: Fix missing sg_dma_len assignment in P2PDMA bus mappings Prike Liang (1): drm/amdgpu: attach tlb fence to the PTs update Punit Agrawal (1): Revert "ACPI: Suppress misleading SPCR console message when SPCR table is absent" René Rebe (1): ALSA: hda/cirrus fix cs420x MacPro 6,1 inverted jack detection Sergey Matyukevich (1): riscv: dts: allwinner: d1: fix vlenb property Seungjin Bae (1): can: kvaser_usb: leaf: Fix potential infinite loop in command parsers Siddharth Vadapalli (1): spi: cadence-quadspi: Fix cqspi_probe() error handling for runtime pm Slark Xiao (1): net: wwan: mhi: Keep modem name match with Foxconn T99W640 Thomas Bogendoerfer (1): MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow Thomas Mühlbacher (1): can: sja1000: fix max irq loop handling Thomas Zimmermann (1): drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup Tianchu Chen (1): usb: storage: sddr55: Reject out-of-bound new_pba Valek Andrej (1): iio: accel: fix ADXL355 startup race condition Vanillan Wang (1): USB: serial: option: add support for Rolling RW101R-GL Viacheslav Dubeyko (1): ceph: fix crash in process_v2_sparse_read() for encrypted directories Ville Syrjälä (1): drm/i915/psr: Reject async flips when selective fetch is enabled Vladimir Oltean (1): net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic Wei Fang (4): net: fec: cancel perout_timer when PEROUT is disabled net: fec: do not update PEROUT if it is enabled net: fec: do not allow enabling PPS and PEROUT simultaneously net: fec: do not register PPS event for PEROUT Wei Yang (1): mm/huge_memory: fix NULL pointer deference when splitting folio Wentao Guan (1): nvmem: layouts: fix nvmem_layout_bus_uevent Xu Yang (1): arm64: dts: imx8qm-mek: fix mux-controller select/enable-gpios polarity Youngjun Park (1): mm: swap: remove duplicate nr_swap_pages decrement in get_swap_page_of_type() ziming zhang (2): libceph: prevent potential out-of-bounds writes in handle_auth_session_key() libceph: replace BUG_ON with bounds check for map->max_osd Łukasz Bartosik (1): xhci: dbgtty: fix device unregister

3 days, 9 hours

1
1
0 0

Linux 6.12.61

by Greg Kroah-Hartman

I'm announcing the release of the 6.12.61 kernel. All users of the 6.12 kernel series must upgrade. The updated 6.12.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.12.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ MAINTAINERS | 5 Makefile | 2 arch/arm/boot/dts/nxp/imx/imx6ul.dtsi | 2 arch/arm64/boot/dts/freescale/imx8dxl-ss-conn.dtsi | 4 arch/arm64/boot/dts/freescale/imx8qm-mek.dts | 4 arch/arm64/kernel/acpi.c | 10 arch/mips/mm/tlb-r4k.c | 116 arch/x86/events/core.c | 10 arch/x86/kvm/svm/nested.c | 20 arch/x86/kvm/svm/svm.c | 94 arch/x86/kvm/svm/svm.h | 1 drivers/atm/fore200e.c | 2 drivers/bluetooth/btusb.c | 39 drivers/firmware/stratix10-svc.c | 7 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 3 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 15 drivers/gpu/drm/amd/display/dc/core/dc_stream.c | 11 drivers/gpu/drm/amd/display/dc/hwss/dce110/dce110_hwseq.c | 1 drivers/gpu/drm/amd/display/dc/hwss/dcn20/dcn20_hwseq.c | 2 drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 2 drivers/gpu/drm/amd/display/dc/link/link_dpms.c | 3 drivers/gpu/drm/amd/display/dc/virtual/virtual_stream_encoder.c | 7 drivers/gpu/drm/drm_fb_helper.c | 6 drivers/gpu/drm/i915/display/intel_dp.c | 5 drivers/gpu/drm/i915/display/intel_fbdev.c | 6 drivers/gpu/drm/radeon/radeon_fbdev.c | 5 drivers/gpu/drm/sti/sti_vtg.c | 7 drivers/gpu/drm/xe/xe_gt_clock.c | 7 drivers/iio/accel/adxl355_core.c | 44 drivers/iio/accel/bmc150-accel-core.c | 5 drivers/iio/accel/bmc150-accel.h | 1 drivers/iio/adc/ad7280a.c | 2 drivers/iio/adc/rtq6056.c | 2 drivers/iio/adc/stm32-dfsdm-adc.c | 5 drivers/iio/buffer/industrialio-buffer-dma.c | 6 drivers/iio/buffer/industrialio-buffer-dmaengine.c | 2 drivers/iio/common/ssp_sensors/ssp_dev.c | 4 drivers/iio/humidity/hdc3020.c | 73 drivers/iio/imu/st_lsm6dsx/st_lsm6dsx.h | 40 drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 19 drivers/iio/industrialio-buffer.c | 21 drivers/mailbox/mailbox-test.c | 2 drivers/mailbox/mtk-cmdq-mailbox.c | 45 drivers/mailbox/pcc.c | 32 drivers/md/dm-verity-fec.c | 6 drivers/mmc/host/sdhci-of-dwcmshc.c | 29 drivers/most/most_usb.c | 14 drivers/mtd/nand/spi/core.c | 2 drivers/net/can/rcar/rcar_canfd.c | 53 drivers/net/can/sja1000/sja1000.c | 4 drivers/net/can/sun4i_can.c | 4 drivers/net/can/usb/gs_usb.c | 100 drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c | 4 drivers/net/dsa/microchip/ksz_common.c | 65 drivers/net/dsa/microchip/ksz_common.h | 1 drivers/net/dsa/microchip/ksz_ptp.c | 22 drivers/net/dsa/sja1105/sja1105_main.c | 66 drivers/net/ethernet/aquantia/atlantic/aq_hw_utils.c | 22 drivers/net/ethernet/aquantia/atlantic/aq_hw_utils.h | 1 drivers/net/ethernet/aquantia/atlantic/aq_ring.c | 5 drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_b0.c | 19 drivers/net/ethernet/aquantia/atlantic/hw_atl2/hw_atl2.c | 2 drivers/net/ethernet/freescale/fec.h | 1 drivers/net/ethernet/freescale/fec_ptp.c | 64 drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 2 drivers/net/ethernet/meta/fbnic/fbnic_fw.c | 2 drivers/net/ethernet/microchip/lan966x/lan966x_ptp.c | 5 drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c | 4 drivers/net/phy/mxl-gpy.c | 2 drivers/net/team/team_core.c | 23 drivers/net/veth.c | 64 drivers/net/vrf.c | 4 drivers/net/wireless/ath/ath12k/dp_rx.c | 5 drivers/net/wireless/ath/ath12k/peer.c | 3 drivers/net/wireless/ath/ath12k/peer.h | 2 drivers/net/wwan/mhi_wwan_mbim.c | 2 drivers/nvmem/layouts.c | 2 drivers/platform/x86/intel/punit_ipc.c | 2 drivers/slimbus/qcom-ngd-ctrl.c | 1 drivers/spi/Kconfig | 4 drivers/spi/spi-amlogic-spifc-a1.c | 4 drivers/spi/spi-bcm63xx.c | 14 drivers/spi/spi-mem.c | 37 drivers/spi/spi-nxp-fspi.c | 123 drivers/staging/Kconfig | 2 drivers/staging/Makefile | 1 drivers/staging/rtl8712/Kconfig | 21 drivers/staging/rtl8712/Makefile | 35 drivers/staging/rtl8712/TODO | 13 drivers/staging/rtl8712/basic_types.h | 28 drivers/staging/rtl8712/drv_types.h | 175 drivers/staging/rtl8712/ethernet.h | 21 drivers/staging/rtl8712/hal_init.c | 401 - drivers/staging/rtl8712/ieee80211.c | 415 - drivers/staging/rtl8712/ieee80211.h | 165 drivers/staging/rtl8712/mlme_linux.c | 160 drivers/staging/rtl8712/mlme_osdep.h | 31 drivers/staging/rtl8712/mp_custom_oid.h | 287 - drivers/staging/rtl8712/os_intfs.c | 482 -- drivers/staging/rtl8712/osdep_intf.h | 32 drivers/staging/rtl8712/osdep_service.h | 60 drivers/staging/rtl8712/recv_linux.c | 139 drivers/staging/rtl8712/recv_osdep.h | 39 drivers/staging/rtl8712/rtl8712_bitdef.h | 26 drivers/staging/rtl8712/rtl8712_cmd.c | 409 - drivers/staging/rtl8712/rtl8712_cmd.h | 231 - drivers/staging/rtl8712/rtl8712_cmdctrl_bitdef.h | 95 drivers/staging/rtl8712/rtl8712_cmdctrl_regdef.h | 19 drivers/staging/rtl8712/rtl8712_debugctrl_bitdef.h | 41 drivers/staging/rtl8712/rtl8712_debugctrl_regdef.h | 32 drivers/staging/rtl8712/rtl8712_edcasetting_bitdef.h | 65 drivers/staging/rtl8712/rtl8712_edcasetting_regdef.h | 24 drivers/staging/rtl8712/rtl8712_efuse.c | 563 -- drivers/staging/rtl8712/rtl8712_efuse.h | 44 drivers/staging/rtl8712/rtl8712_event.h | 86 drivers/staging/rtl8712/rtl8712_fifoctrl_bitdef.h | 131 drivers/staging/rtl8712/rtl8712_fifoctrl_regdef.h | 61 drivers/staging/rtl8712/rtl8712_gp_bitdef.h | 68 drivers/staging/rtl8712/rtl8712_gp_regdef.h | 29 drivers/staging/rtl8712/rtl8712_hal.h | 142 drivers/staging/rtl8712/rtl8712_interrupt_bitdef.h | 44 drivers/staging/rtl8712/rtl8712_io.c | 99 drivers/staging/rtl8712/rtl8712_led.c | 1830 -------- drivers/staging/rtl8712/rtl8712_macsetting_bitdef.h | 31 drivers/staging/rtl8712/rtl8712_macsetting_regdef.h | 20 drivers/staging/rtl8712/rtl8712_powersave_bitdef.h | 39 drivers/staging/rtl8712/rtl8712_powersave_regdef.h | 26 drivers/staging/rtl8712/rtl8712_ratectrl_bitdef.h | 36 drivers/staging/rtl8712/rtl8712_ratectrl_regdef.h | 43 drivers/staging/rtl8712/rtl8712_recv.c | 1075 ---- drivers/staging/rtl8712/rtl8712_recv.h | 145 drivers/staging/rtl8712/rtl8712_regdef.h | 32 drivers/staging/rtl8712/rtl8712_security_bitdef.h | 34 drivers/staging/rtl8712/rtl8712_spec.h | 121 drivers/staging/rtl8712/rtl8712_syscfg_bitdef.h | 163 drivers/staging/rtl8712/rtl8712_syscfg_regdef.h | 42 drivers/staging/rtl8712/rtl8712_timectrl_bitdef.h | 49 drivers/staging/rtl8712/rtl8712_timectrl_regdef.h | 26 drivers/staging/rtl8712/rtl8712_wmac_bitdef.h | 49 drivers/staging/rtl8712/rtl8712_wmac_regdef.h | 36 drivers/staging/rtl8712/rtl8712_xmit.c | 732 --- drivers/staging/rtl8712/rtl8712_xmit.h | 108 drivers/staging/rtl8712/rtl871x_cmd.c | 750 --- drivers/staging/rtl8712/rtl871x_cmd.h | 750 --- drivers/staging/rtl8712/rtl871x_debug.h | 130 drivers/staging/rtl8712/rtl871x_eeprom.c | 220 drivers/staging/rtl8712/rtl871x_eeprom.h | 88 drivers/staging/rtl8712/rtl871x_event.h | 109 drivers/staging/rtl8712/rtl871x_ht.h | 33 drivers/staging/rtl8712/rtl871x_io.c | 147 drivers/staging/rtl8712/rtl871x_io.h | 236 - drivers/staging/rtl8712/rtl871x_ioctl.h | 94 drivers/staging/rtl8712/rtl871x_ioctl_linux.c | 2275 ---------- drivers/staging/rtl8712/rtl871x_ioctl_rtl.c | 519 -- drivers/staging/rtl8712/rtl871x_ioctl_rtl.h | 109 drivers/staging/rtl8712/rtl871x_ioctl_set.c | 354 - drivers/staging/rtl8712/rtl871x_ioctl_set.h | 45 drivers/staging/rtl8712/rtl871x_led.h | 118 drivers/staging/rtl8712/rtl871x_mlme.c | 1710 ------- drivers/staging/rtl8712/rtl871x_mlme.h | 205 drivers/staging/rtl8712/rtl871x_mp.c | 724 --- drivers/staging/rtl8712/rtl871x_mp.h | 275 - drivers/staging/rtl8712/rtl871x_mp_ioctl.c | 883 --- drivers/staging/rtl8712/rtl871x_mp_ioctl.h | 328 - drivers/staging/rtl8712/rtl871x_mp_phy_regdef.h | 1034 ---- drivers/staging/rtl8712/rtl871x_pwrctrl.c | 234 - drivers/staging/rtl8712/rtl871x_pwrctrl.h | 113 drivers/staging/rtl8712/rtl871x_recv.c | 671 -- drivers/staging/rtl8712/rtl871x_recv.h | 208 drivers/staging/rtl8712/rtl871x_rf.h | 55 drivers/staging/rtl8712/rtl871x_security.c | 1386 ------ drivers/staging/rtl8712/rtl871x_security.h | 218 drivers/staging/rtl8712/rtl871x_sta_mgt.c | 263 - drivers/staging/rtl8712/rtl871x_wlan_sme.h | 35 drivers/staging/rtl8712/rtl871x_xmit.c | 1056 ---- drivers/staging/rtl8712/rtl871x_xmit.h | 287 - drivers/staging/rtl8712/sta_info.h | 132 drivers/staging/rtl8712/usb_halinit.c | 307 - drivers/staging/rtl8712/usb_intf.c | 638 -- drivers/staging/rtl8712/usb_ops.c | 195 drivers/staging/rtl8712/usb_ops.h | 38 drivers/staging/rtl8712/usb_ops_linux.c | 508 -- drivers/staging/rtl8712/usb_osintf.h | 35 drivers/staging/rtl8712/wifi.h | 196 drivers/staging/rtl8712/wlan_bssdef.h | 223 drivers/staging/rtl8712/xmit_linux.c | 181 drivers/staging/rtl8712/xmit_osdep.h | 52 drivers/thunderbolt/nhi.c | 2 drivers/thunderbolt/nhi.h | 1 drivers/tty/serial/amba-pl011.c | 2 drivers/usb/cdns3/cdns3-pci-wrap.c | 5 drivers/usb/dwc3/core.c | 3 drivers/usb/dwc3/dwc3-pci.c | 80 drivers/usb/dwc3/ep0.c | 1 drivers/usb/dwc3/gadget.c | 7 drivers/usb/gadget/function/f_eem.c | 7 drivers/usb/gadget/udc/core.c | 18 drivers/usb/gadget/udc/renesas_usbf.c | 4 drivers/usb/gadget/udc/trace.h | 5 drivers/usb/host/xhci-dbgcap.h | 1 drivers/usb/host/xhci-dbgtty.c | 23 drivers/usb/host/xhci-ring.c | 15 drivers/usb/host/xhci.c | 1 drivers/usb/renesas_usbhs/common.c | 14 drivers/usb/serial/ftdi_sio.c | 1 drivers/usb/serial/ftdi_sio_ids.h | 1 drivers/usb/serial/option.c | 10 drivers/usb/storage/sddr55.c | 6 drivers/usb/storage/transport.c | 16 drivers/usb/storage/uas.c | 5 drivers/usb/storage/unusual_devs.h | 2 drivers/usb/typec/ucsi/psy.c | 5 drivers/video/fbdev/core/fbcon.c | 9 fs/namespace.c | 7 fs/nfsd/nfs4state.c | 6 fs/smb/client/connect.c | 1 include/linux/iio/buffer-dma.h | 1 include/linux/iio/buffer_impl.h | 2 include/linux/mailbox/mtk-cmdq-mailbox.h | 10 include/linux/spi/spi-mem.h | 22 include/linux/usb/gadget.h | 5 include/net/bluetooth/hci_core.h | 1 include/net/sch_generic.h | 8 kernel/trace/trace.c | 10 mm/huge_memory.c | 17 mm/memfd.c | 27 net/bluetooth/hci_core.c | 16 net/bluetooth/hci_sock.c | 2 net/bluetooth/smp.c | 31 net/ceph/auth_x.c | 2 net/ceph/ceph_common.c | 53 net/ceph/debugfs.c | 14 net/ceph/messenger_v2.c | 11 net/ceph/osdmap.c | 18 net/mptcp/protocol.c | 19 sound/usb/quirks.c | 3 237 files changed, 1336 insertions(+), 28204 deletions(-) Alan Borzeszkowski (1): thunderbolt: Add support for Intel Wildcat Lake Alan Stern (1): USB: storage: Remove subclass and protocol overrides from Novatek quirk Alex Deucher (2): drm/amdgpu: fix cyan_skillfish2 gpu info fw handling Revert "drm/amd/display: Move setup_stream_attribute" Alex Hung (1): drm/amd/display: Check NULL before accessing Alexey Kodanev (1): net: sxgbe: fix potential NULL dereference in sxgbe_rx() Andrei Vagin (1): fs/namespace: fix reference leak in grab_requested_mnt_ns Andy Shevchenko (1): spi: nxp-fspi: Propagate fwnode in ACPI case as well Bastien Curutchet (Schneider Electric) (5): net: dsa: microchip: common: Fix checks on irq_find_mapping() net: dsa: microchip: ptp: Fix checks on irq_find_mapping() net: dsa: microchip: Don't free uninitialized ksz_irq net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() net: dsa: microchip: Free previously initialized ports on init failures Biju Das (1): can: rcar_canfd: Fix CAN-FD mode as default ChiYuan Huang (1): iio: adc: rtq6056: Correct the sign bit index Chris Lu (1): Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface Christophe JAILLET (1): iio:common:ssp_sensors: Fix an error handling path ssp_probe() Claudiu Beznea (1): usb: renesas_usbhs: Fix synchronous external abort on unbind Dan Carpenter (1): platform/x86: intel: punit_ipc: fix memory corruption Daniel Golle (1): net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY Danielle Costantino (1): net/mlx5e: Fix validation logic in rate limiting David Lechner (1): iio: adc: ad7280a: fix ad7280_store_balance_timer() Deepanshu Kartikey (2): tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs mm/memfd: fix information leak in hugetlb folios Desnes Nunes (1): usb: storage: Fix memory leak in USB bulk transport Dimitri Fedrau (2): iio: humditiy: hdc3020: fix units for temperature and humidity measurement iio: humditiy: hdc3020: fix units for thresholds and hysteresis Douglas Anderson (1): Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref Edward Adam Davis (1): Bluetooth: hci_sock: Prevent race in socket write iter and sock bind Francesco Lavra (2): spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields Frank Li (1): arm64: dts: imx8dxl-ss-conn: swap interrupts number of eqos Greg Kroah-Hartman (1): Linux 6.12.61 Gui-Dong Han (1): atm/fore200e: Fix possible data race in fore200e_open() Haibo Chen (2): spi: spi-nxp-fspi: remove the goto in probe spi: spi-nxp-fspi: Add OCT-DTR mode support Hang Zhou (1): spi: bcm63xx: fix premature CS deassertion on RX-only transactions Haotian Zhang (3): usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors mailbox: mailbox-test: Fix debugfs_create_dir error checking spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors Harish Chegondi (1): drm/xe: Fix conversion from clock ticks to milliseconds Heikki Krogerus (2): usb: dwc3: pci: add support for the Intel Nova Lake -S usb: dwc3: pci: Sort out the Intel device IDs Horatiu Vultur (1): net: lan966x: Fix the initialization of taprio Ilya Dryomov (1): libceph: fix potential use-after-free in have_mon_and_osd_map() Imre Deak (1): drm/i915/dp: Initialize the source OUI write timestamp always Ivan Zhaldak (1): ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 Jameson Thies (1): usb: typec: ucsi: psy: Set max current to zero when disconnected Jamie Iles (2): mailbox: pcc: don't zero error register drivers/usb/dwc3: fix PCI parent check Jason-JH Lin (1): mailbox: mtk-cmdq: Refine DMA address handling for the command buffer Jesper Dangaard Brouer (5): net: sched: generalize check for no-queue qdisc on TX queue veth: apply qdisc backpressure on full ptr_ring to reduce TX drops veth: prevent NULL pointer dereference in veth_xdp_rcv veth: more robust handing of race to avoid txq getting stuck veth: reduce XDP no_direct return section to fix race Jiefeng Zhang (1): net: atlantic: fix fragment overflow handling in RX path Jimmy Hu (1): usb: gadget: udc: fix use-after-free in usb_gadget_state_work Jiri Olsa (1): Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" Jisheng Zhang (1): mmc: sdhci-of-dwcmshc: Promote the th1520 reset handling to ip level Johan Hovold (2): most: usb: fix double free on late probe failure drm: sti: fix device leaks at component probe Kai-Heng Feng (1): net: aquantia: Add missing descriptor cache invalidation on ATL2 Khairul Anuar Romli (1): firmware: stratix10-svc: fix bug in saving controller data Kuen-Han Tsai (2): usb: gadget: f_eem: Fix memory leak in eem_unwrap usb: udc: Add trace event for usb_gadget_set_state Kuniyuki Iwashima (1): mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). Linus Walleij (1): iio: accel: bmc150: Fix irq assumption regression Luiz Augusto von Dentz (2): Bluetooth: hci_core: Fix triggering cmd_timer for HCI_OP_NOP Bluetooth: SMP: Fix not generating mackey and ltk when repairing Maarten Zanders (1): ARM: dts: nxp: imx6ul: correct SAI3 interrupt line Maciej W. Rozycki (1): MIPS: mm: Prevent a TLB shutdown on initial uniquification Manish Nagar (1): usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths Marc Kleine-Budde (4): can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling Mario Limonciello (AMD) (1): drm/amd/display: Don't change brightness for disabled connectors Mario Tesi (1): iio: st_lsm6dsx: Fixed calibrated timestamp calculation Mathias Nyman (2): xhci: fix stale flag preventig URBs after link state error is cleared xhci: dbgtty: Fix data corruption when transmitting data form DbC to host Miaoqian Lin (3): slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves serial: amba-pl011: prefer dma_mapping_error() over explicit address checking usb: cdns3: Fix double resource release in cdns3_pci_probe Michael Chen (1): drm/amd/amdgpu: reserve vm invalidation engine for uni_mes Mikulas Patocka (1): dm-verity: fix unreliable memory allocation Miquel Raynal (3): spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency spi: spi-mem: Add a new controller capability spi: nxp-fspi: Support per spi-mem operation frequency switches Mohsin Bashir (1): eth: fbnic: Fix counter roll-over issue NeilBrown (1): nfsd: Replace clamp_t in nfsd4_get_drc_mem() Nikola Z. Ivanov (1): team: Move team device type change at the end of team_port_add Nuno Sá (3): iio: buffer-dma: support getting the DMA channel iio: buffer-dmaengine: enable .get_dma_dev() iio: buffer: support getting dma channel from the buffer Oleksandr Suvorov (1): USB: serial: ftdi_sio: add support for u-blox EVK-M101 Olivier Moysan (1): iio: adc: stm32-dfsdm: fix st,adc-alt-channel property handling Owen Gu (1): usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer Paolo Abeni (1): mptcp: clear scheduled subflows on retransmit Paulo Alcantara (1): smb: client: fix memory leak in cifs_construct_tcon() Philipp Hortmann (1): staging: rtl8712: Remove driver using deprecated API wext Punit Agrawal (1): Revert "ACPI: Suppress misleading SPCR console message when SPCR table is absent" Russell King (Oracle) (1): net: dsa: sja1105: simplify static configuration reload Sarika Sharma (1): wifi: ath12k: correctly handle mcast packets for clients Seungjin Bae (1): can: kvaser_usb: leaf: Fix potential infinite loop in command parsers Slark Xiao (1): net: wwan: mhi: Keep modem name match with Foxconn T99W640 Sudeep Holla (1): mailbox: pcc: Refactor error handling in irq handler into separate function Thomas Bogendoerfer (1): MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow Thomas Mühlbacher (1): can: sja1000: fix max irq loop handling Thomas Weißschuh (1): spi: spi-nxp-fspi: Check return value of devm_mutex_init() Thomas Zimmermann (1): drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup Tianchu Chen (1): usb: storage: sddr55: Reject out-of-bound new_pba Tristram Ha (1): net: dsa: microchip: Do not execute PTP driver code for unsupported switches Tudor Ambarus (1): spi: spi-mem: Allow specifying the byte order in Octal DTR mode Valek Andrej (1): iio: accel: fix ADXL355 startup race condition Vanillan Wang (1): USB: serial: option: add support for Rolling RW101R-GL Viacheslav Dubeyko (1): ceph: fix crash in process_v2_sparse_read() for encrypted directories Vladimir Oltean (1): net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic Wei Fang (4): net: fec: cancel perout_timer when PEROUT is disabled net: fec: do not update PEROUT if it is enabled net: fec: do not allow enabling PPS and PEROUT simultaneously net: fec: do not register PPS event for PEROUT Wei Yang (1): mm/huge_memory: fix NULL pointer deference when splitting folio Wentao Guan (1): nvmem: layouts: fix nvmem_layout_bus_uevent Xu Yang (1): arm64: dts: imx8qm-mek: fix mux-controller select/enable-gpios polarity Yosry Ahmed (4): KVM: SVM: Introduce svm_recalc_lbr_msr_intercepts() KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv() KVM: nSVM: Fix and simplify LBR virtualization handling with nested KVM: SVM: Fix redundant updates of LBR MSR intercepts ziming zhang (2): libceph: prevent potential out-of-bounds writes in handle_auth_session_key() libceph: replace BUG_ON with bounds check for map->max_osd Łukasz Bartosik (1): xhci: dbgtty: fix device unregister

3 days, 9 hours

1
1
0 0

Linux 6.6.119

by Greg Kroah-Hartman

I'm announcing the release of the 6.6.119 kernel. All users of the 6.6 kernel series must upgrade. The updated 6.6.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.6.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ MAINTAINERS | 6 Makefile | 2 arch/arm/boot/dts/nxp/imx/imx6ul.dtsi | 2 arch/mips/mm/tlb-r4k.c | 116 arch/x86/events/core.c | 10 drivers/atm/fore200e.c | 2 drivers/firmware/stratix10-svc.c | 7 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 drivers/gpu/drm/amd/display/dc/core/dc_stream.c | 11 drivers/gpu/drm/sti/sti_vtg.c | 7 drivers/hid/hid-core.c | 7 drivers/iio/accel/adxl355_core.c | 44 drivers/iio/accel/bmc150-accel-core.c | 5 drivers/iio/accel/bmc150-accel.h | 1 drivers/iio/adc/ad7280a.c | 2 drivers/iio/adc/rtq6056.c | 2 drivers/iio/common/ssp_sensors/ssp_dev.c | 4 drivers/iio/imu/st_lsm6dsx/st_lsm6dsx.h | 40 drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 19 drivers/mailbox/mailbox-test.c | 2 drivers/mailbox/pcc.c | 32 drivers/md/dm-verity-fec.c | 6 drivers/most/most_usb.c | 14 drivers/mtd/nand/spi/core.c | 2 drivers/net/bonding/bond_main.c | 11 drivers/net/bonding/bond_options.c | 3 drivers/net/can/rcar/rcar_canfd.c | 53 drivers/net/can/sja1000/sja1000.c | 4 drivers/net/can/sun4i_can.c | 4 drivers/net/can/usb/gs_usb.c | 100 drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c | 4 drivers/net/dsa/microchip/ksz_common.c | 30 drivers/net/dsa/microchip/ksz_ptp.c | 22 drivers/net/dsa/sja1105/sja1105_main.c | 66 drivers/net/ethernet/aquantia/atlantic/aq_hw_utils.c | 22 drivers/net/ethernet/aquantia/atlantic/aq_hw_utils.h | 1 drivers/net/ethernet/aquantia/atlantic/aq_ring.c | 5 drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_b0.c | 19 drivers/net/ethernet/aquantia/atlantic/hw_atl2/hw_atl2.c | 2 drivers/net/ethernet/cadence/macb_main.c | 2 drivers/net/ethernet/freescale/fec.h | 1 drivers/net/ethernet/freescale/fec_ptp.c | 64 drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 2 drivers/net/ethernet/microchip/lan966x/lan966x_ptp.c | 5 drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c | 4 drivers/net/phy/mxl-gpy.c | 2 drivers/platform/x86/intel/punit_ipc.c | 2 drivers/slimbus/qcom-ngd-ctrl.c | 1 drivers/spi/Kconfig | 4 drivers/spi/spi-amlogic-spifc-a1.c | 4 drivers/spi/spi-bcm63xx.c | 14 drivers/spi/spi-mem.c | 37 drivers/spi/spi-nxp-fspi.c | 22 drivers/staging/Kconfig | 2 drivers/staging/Makefile | 1 drivers/staging/rtl8712/Kconfig | 21 drivers/staging/rtl8712/Makefile | 35 drivers/staging/rtl8712/TODO | 13 drivers/staging/rtl8712/basic_types.h | 28 drivers/staging/rtl8712/drv_types.h | 175 - drivers/staging/rtl8712/ethernet.h | 21 drivers/staging/rtl8712/hal_init.c | 401 -- drivers/staging/rtl8712/ieee80211.c | 415 -- drivers/staging/rtl8712/ieee80211.h | 165 drivers/staging/rtl8712/mlme_linux.c | 160 drivers/staging/rtl8712/mlme_osdep.h | 31 drivers/staging/rtl8712/mp_custom_oid.h | 287 - drivers/staging/rtl8712/os_intfs.c | 482 -- drivers/staging/rtl8712/osdep_intf.h | 32 drivers/staging/rtl8712/osdep_service.h | 60 drivers/staging/rtl8712/recv_linux.c | 139 drivers/staging/rtl8712/recv_osdep.h | 39 drivers/staging/rtl8712/rtl8712_bitdef.h | 26 drivers/staging/rtl8712/rtl8712_cmd.c | 409 -- drivers/staging/rtl8712/rtl8712_cmd.h | 231 - drivers/staging/rtl8712/rtl8712_cmdctrl_bitdef.h | 95 drivers/staging/rtl8712/rtl8712_cmdctrl_regdef.h | 19 drivers/staging/rtl8712/rtl8712_debugctrl_bitdef.h | 41 drivers/staging/rtl8712/rtl8712_debugctrl_regdef.h | 32 drivers/staging/rtl8712/rtl8712_edcasetting_bitdef.h | 65 drivers/staging/rtl8712/rtl8712_edcasetting_regdef.h | 24 drivers/staging/rtl8712/rtl8712_efuse.c | 564 --- drivers/staging/rtl8712/rtl8712_efuse.h | 44 drivers/staging/rtl8712/rtl8712_event.h | 86 drivers/staging/rtl8712/rtl8712_fifoctrl_bitdef.h | 131 drivers/staging/rtl8712/rtl8712_fifoctrl_regdef.h | 61 drivers/staging/rtl8712/rtl8712_gp_bitdef.h | 68 drivers/staging/rtl8712/rtl8712_gp_regdef.h | 29 drivers/staging/rtl8712/rtl8712_hal.h | 142 drivers/staging/rtl8712/rtl8712_interrupt_bitdef.h | 44 drivers/staging/rtl8712/rtl8712_io.c | 99 drivers/staging/rtl8712/rtl8712_led.c | 1830 ---------- drivers/staging/rtl8712/rtl8712_macsetting_bitdef.h | 31 drivers/staging/rtl8712/rtl8712_macsetting_regdef.h | 20 drivers/staging/rtl8712/rtl8712_powersave_bitdef.h | 39 drivers/staging/rtl8712/rtl8712_powersave_regdef.h | 26 drivers/staging/rtl8712/rtl8712_ratectrl_bitdef.h | 36 drivers/staging/rtl8712/rtl8712_ratectrl_regdef.h | 43 drivers/staging/rtl8712/rtl8712_recv.c | 1080 ------ drivers/staging/rtl8712/rtl8712_recv.h | 145 drivers/staging/rtl8712/rtl8712_regdef.h | 32 drivers/staging/rtl8712/rtl8712_security_bitdef.h | 34 drivers/staging/rtl8712/rtl8712_spec.h | 121 drivers/staging/rtl8712/rtl8712_syscfg_bitdef.h | 163 drivers/staging/rtl8712/rtl8712_syscfg_regdef.h | 42 drivers/staging/rtl8712/rtl8712_timectrl_bitdef.h | 49 drivers/staging/rtl8712/rtl8712_timectrl_regdef.h | 26 drivers/staging/rtl8712/rtl8712_wmac_bitdef.h | 49 drivers/staging/rtl8712/rtl8712_wmac_regdef.h | 36 drivers/staging/rtl8712/rtl8712_xmit.c | 744 ---- drivers/staging/rtl8712/rtl8712_xmit.h | 108 drivers/staging/rtl8712/rtl871x_cmd.c | 796 ---- drivers/staging/rtl8712/rtl871x_cmd.h | 761 ---- drivers/staging/rtl8712/rtl871x_debug.h | 130 drivers/staging/rtl8712/rtl871x_eeprom.c | 220 - drivers/staging/rtl8712/rtl871x_eeprom.h | 88 drivers/staging/rtl8712/rtl871x_event.h | 109 drivers/staging/rtl8712/rtl871x_ht.h | 33 drivers/staging/rtl8712/rtl871x_io.c | 147 drivers/staging/rtl8712/rtl871x_io.h | 236 - drivers/staging/rtl8712/rtl871x_ioctl.h | 94 drivers/staging/rtl8712/rtl871x_ioctl_linux.c | 2330 -------------- drivers/staging/rtl8712/rtl871x_ioctl_rtl.c | 519 --- drivers/staging/rtl8712/rtl871x_ioctl_rtl.h | 109 drivers/staging/rtl8712/rtl871x_ioctl_set.c | 354 -- drivers/staging/rtl8712/rtl871x_ioctl_set.h | 45 drivers/staging/rtl8712/rtl871x_led.h | 118 drivers/staging/rtl8712/rtl871x_mlme.c | 1710 ---------- drivers/staging/rtl8712/rtl871x_mlme.h | 205 - drivers/staging/rtl8712/rtl871x_mp.c | 724 ---- drivers/staging/rtl8712/rtl871x_mp.h | 275 - drivers/staging/rtl8712/rtl871x_mp_ioctl.c | 883 ----- drivers/staging/rtl8712/rtl871x_mp_ioctl.h | 328 - drivers/staging/rtl8712/rtl871x_mp_phy_regdef.h | 1034 ------ drivers/staging/rtl8712/rtl871x_pwrctrl.c | 234 - drivers/staging/rtl8712/rtl871x_pwrctrl.h | 113 drivers/staging/rtl8712/rtl871x_recv.c | 671 ---- drivers/staging/rtl8712/rtl871x_recv.h | 208 - drivers/staging/rtl8712/rtl871x_rf.h | 55 drivers/staging/rtl8712/rtl871x_security.c | 1386 -------- drivers/staging/rtl8712/rtl871x_security.h | 218 - drivers/staging/rtl8712/rtl871x_sta_mgt.c | 263 - drivers/staging/rtl8712/rtl871x_wlan_sme.h | 35 drivers/staging/rtl8712/rtl871x_xmit.c | 1059 ------ drivers/staging/rtl8712/rtl871x_xmit.h | 288 - drivers/staging/rtl8712/sta_info.h | 132 drivers/staging/rtl8712/usb_halinit.c | 307 - drivers/staging/rtl8712/usb_intf.c | 638 --- drivers/staging/rtl8712/usb_ops.c | 195 - drivers/staging/rtl8712/usb_ops.h | 38 drivers/staging/rtl8712/usb_ops_linux.c | 515 --- drivers/staging/rtl8712/usb_osintf.h | 35 drivers/staging/rtl8712/wifi.h | 196 - drivers/staging/rtl8712/wlan_bssdef.h | 223 - drivers/staging/rtl8712/xmit_linux.c | 181 - drivers/staging/rtl8712/xmit_osdep.h | 52 drivers/thunderbolt/nhi.c | 2 drivers/thunderbolt/nhi.h | 1 drivers/tty/serial/amba-pl011.c | 2 drivers/usb/cdns3/cdns3-pci-wrap.c | 5 drivers/usb/dwc3/core.c | 3 drivers/usb/dwc3/dwc3-pci.c | 80 drivers/usb/dwc3/ep0.c | 1 drivers/usb/dwc3/gadget.c | 7 drivers/usb/gadget/function/f_eem.c | 7 drivers/usb/gadget/udc/core.c | 18 drivers/usb/gadget/udc/renesas_usbf.c | 4 drivers/usb/gadget/udc/trace.h | 5 drivers/usb/host/xhci-dbgcap.h | 1 drivers/usb/host/xhci-dbgtty.c | 23 drivers/usb/renesas_usbhs/common.c | 14 drivers/usb/serial/ftdi_sio.c | 1 drivers/usb/serial/ftdi_sio_ids.h | 1 drivers/usb/serial/option.c | 10 drivers/usb/storage/sddr55.c | 6 drivers/usb/storage/transport.c | 16 drivers/usb/storage/uas.c | 5 drivers/usb/storage/unusual_devs.h | 2 drivers/usb/typec/ucsi/psy.c | 5 fs/nfsd/nfs4state.c | 6 fs/smb/client/connect.c | 1 fs/smb/server/smb2pdu.c | 4 include/linux/spi/spi-mem.h | 22 include/linux/usb/gadget.h | 5 include/net/bonding.h | 1 net/bluetooth/hci_sock.c | 2 net/bluetooth/smp.c | 31 net/ceph/auth_x.c | 2 net/ceph/ceph_common.c | 53 net/ceph/debugfs.c | 14 net/ceph/messenger_v2.c | 11 net/ceph/osdmap.c | 18 net/mptcp/protocol.c | 48 sound/usb/quirks.c | 3 tools/testing/selftests/net/mptcp/mptcp_join.sh | 14 tools/testing/selftests/net/mptcp/mptcp_lib.sh | 21 196 files changed, 909 insertions(+), 28082 deletions(-) Alan Borzeszkowski (1): thunderbolt: Add support for Intel Wildcat Lake Alan Stern (2): USB: storage: Remove subclass and protocol overrides from Novatek quirk HID: core: Harden s32ton() against conversion to 0 bits Alex Deucher (1): drm/amdgpu: fix cyan_skillfish2 gpu info fw handling Alex Hung (1): drm/amd/display: Check NULL before accessing Alexey Kodanev (1): net: sxgbe: fix potential NULL dereference in sxgbe_rx() Andy Shevchenko (1): spi: nxp-fspi: Propagate fwnode in ACPI case as well Bastien Curutchet (Schneider Electric) (4): net: dsa: microchip: common: Fix checks on irq_find_mapping() net: dsa: microchip: ptp: Fix checks on irq_find_mapping() net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() net: dsa: microchip: Free previously initialized ports on init failures Biju Das (1): can: rcar_canfd: Fix CAN-FD mode as default ChiYuan Huang (1): iio: adc: rtq6056: Correct the sign bit index Christophe JAILLET (1): iio:common:ssp_sensors: Fix an error handling path ssp_probe() Claudiu Beznea (1): usb: renesas_usbhs: Fix synchronous external abort on unbind Dan Carpenter (1): platform/x86: intel: punit_ipc: fix memory corruption Daniel Golle (1): net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY Danielle Costantino (1): net/mlx5e: Fix validation logic in rate limiting David Lechner (1): iio: adc: ad7280a: fix ad7280_store_balance_timer() Desnes Nunes (1): usb: storage: Fix memory leak in USB bulk transport Edward Adam Davis (1): Bluetooth: hci_sock: Prevent race in socket write iter and sock bind Francesco Lavra (2): spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields Greg Kroah-Hartman (1): Linux 6.6.119 Gui-Dong Han (1): atm/fore200e: Fix possible data race in fore200e_open() Hang Zhou (1): spi: bcm63xx: fix premature CS deassertion on RX-only transactions Hangbin Liu (1): bonding: return detailed error when loading native XDP fails Haotian Zhang (3): usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors mailbox: mailbox-test: Fix debugfs_create_dir error checking spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors Heikki Krogerus (2): usb: dwc3: pci: add support for the Intel Nova Lake -S usb: dwc3: pci: Sort out the Intel device IDs Horatiu Vultur (1): net: lan966x: Fix the initialization of taprio Ilya Dryomov (1): libceph: fix potential use-after-free in have_mon_and_osd_map() Ivan Zhaldak (1): ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 Jameson Thies (1): usb: typec: ucsi: psy: Set max current to zero when disconnected Jamie Iles (2): mailbox: pcc: don't zero error register drivers/usb/dwc3: fix PCI parent check Jiefeng Zhang (1): net: atlantic: fix fragment overflow handling in RX path Jimmy Hu (1): usb: gadget: udc: fix use-after-free in usb_gadget_state_work Jiri Olsa (1): Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" Johan Hovold (2): most: usb: fix double free on late probe failure drm: sti: fix device leaks at component probe Kai-Heng Feng (1): net: aquantia: Add missing descriptor cache invalidation on ATL2 Khairul Anuar Romli (1): firmware: stratix10-svc: fix bug in saving controller data Kuen-Han Tsai (2): usb: gadget: f_eem: Fix memory leak in eem_unwrap usb: udc: Add trace event for usb_gadget_set_state Linus Walleij (1): iio: accel: bmc150: Fix irq assumption regression Luiz Augusto von Dentz (1): Bluetooth: SMP: Fix not generating mackey and ltk when repairing Maarten Zanders (1): ARM: dts: nxp: imx6ul: correct SAI3 interrupt line Maciej W. Rozycki (1): MIPS: mm: Prevent a TLB shutdown on initial uniquification Manish Nagar (1): usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths Marc Kleine-Budde (4): can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling Mario Tesi (1): iio: st_lsm6dsx: Fixed calibrated timestamp calculation Mathias Nyman (1): xhci: dbgtty: Fix data corruption when transmitting data form DbC to host Matthieu Baerts (NGI0) (1): selftests: mptcp: join: properly kill background tasks Miaoqian Lin (3): slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves serial: amba-pl011: prefer dma_mapping_error() over explicit address checking usb: cdns3: Fix double resource release in cdns3_pci_probe Mikulas Patocka (1): dm-verity: fix unreliable memory allocation Miquel Raynal (3): spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency spi: spi-mem: Add a new controller capability spi: nxp-fspi: Support per spi-mem operation frequency switches NeilBrown (1): nfsd: Replace clamp_t in nfsd4_get_drc_mem() Oleksandr Suvorov (1): USB: serial: ftdi_sio: add support for u-blox EVK-M101 Owen Gu (1): usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer Paolo Abeni (2): mptcp: clear scheduled subflows on retransmit mptcp: fix duplicate reset on fastclose Paulo Alcantara (1): smb: client: fix memory leak in cifs_construct_tcon() Philipp Hortmann (1): staging: rtl8712: Remove driver using deprecated API wext Russell King (Oracle) (1): net: dsa: sja1105: simplify static configuration reload Sean Heelan (1): ksmbd: fix use-after-free in session logoff Seungjin Bae (1): can: kvaser_usb: leaf: Fix potential infinite loop in command parsers Sudeep Holla (1): mailbox: pcc: Refactor error handling in irq handler into separate function Thomas Bogendoerfer (1): MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow Thomas Mühlbacher (1): can: sja1000: fix max irq loop handling Tianchu Chen (1): usb: storage: sddr55: Reject out-of-bound new_pba Tudor Ambarus (1): spi: spi-mem: Allow specifying the byte order in Octal DTR mode Valek Andrej (1): iio: accel: fix ADXL355 startup race condition Vanillan Wang (1): USB: serial: option: add support for Rolling RW101R-GL Viacheslav Dubeyko (1): ceph: fix crash in process_v2_sparse_read() for encrypted directories Vladimir Oltean (1): net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic Wang Liang (1): bonding: check xdp prog when set bond mode Wei Fang (4): net: fec: cancel perout_timer when PEROUT is disabled net: fec: do not update PEROUT if it is enabled net: fec: do not allow enabling PPS and PEROUT simultaneously net: fec: do not register PPS event for PEROUT luoguangfei (1): net: macb: fix unregister_netdev call order in macb_remove() ziming zhang (2): libceph: prevent potential out-of-bounds writes in handle_auth_session_key() libceph: replace BUG_ON with bounds check for map->max_osd Łukasz Bartosik (1): xhci: dbgtty: fix device unregister

3 days, 9 hours

1
1
0 0

Linux 6.1.159

by Greg Kroah-Hartman

I'm announcing the release of the 6.1.159 kernel. All users of the 6.1 kernel series must upgrade. The updated 6.1.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.1.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/ABI/testing/sysfs-bus-pci-drivers-xhci_hcd | 62 Documentation/devicetree/bindings/pinctrl/toshiba,visconti-pinctrl.yaml | 26 Documentation/devicetree/bindings/usb/fsl,imx8mp-dwc3.yaml | 10 MAINTAINERS | 7 Makefile | 2 arch/alpha/kernel/asm-offsets.c | 1 arch/arc/include/asm/bitops.h | 2 arch/arc/kernel/asm-offsets.c | 1 arch/arm/crypto/Kconfig | 2 arch/arm/kernel/asm-offsets.c | 2 arch/arm/mach-at91/pm_suspend.S | 8 arch/arm64/boot/dts/nvidia/tegra194.dtsi | 15 arch/arm64/boot/dts/nvidia/tegra210.dtsi | 1 arch/arm64/boot/dts/nvidia/tegra234.dtsi | 33 arch/arm64/kernel/asm-offsets.c | 1 arch/arm64/kernel/cacheinfo.c | 11 arch/csky/kernel/asm-offsets.c | 1 arch/hexagon/kernel/asm-offsets.c | 1 arch/loongarch/include/asm/pgtable.h | 11 arch/loongarch/include/uapi/asm/bitsperlong.h | 9 arch/loongarch/kernel/asm-offsets.c | 2 arch/loongarch/kernel/traps.c | 4 arch/loongarch/pci/pci.c | 8 arch/m68k/kernel/asm-offsets.c | 1 arch/microblaze/kernel/asm-offsets.c | 1 arch/mips/boot/dts/lantiq/danube.dtsi | 6 arch/mips/boot/dts/lantiq/danube_easy50712.dts | 4 arch/mips/kernel/asm-offsets.c | 2 arch/mips/lantiq/xway/sysctrl.c | 2 arch/mips/mm/tlb-r4k.c | 116 arch/mips/mti-malta/malta-init.c | 20 arch/nios2/kernel/asm-offsets.c | 1 arch/openrisc/kernel/asm-offsets.c | 1 arch/parisc/kernel/asm-offsets.c | 1 arch/powerpc/kernel/asm-offsets.c | 1 arch/powerpc/kernel/eeh_driver.c | 2 arch/riscv/kernel/asm-offsets.c | 1 arch/riscv/kernel/cacheinfo.c | 42 arch/riscv/kernel/cpu-hotplug.c | 1 arch/s390/include/asm/pci.h | 1 arch/s390/kernel/asm-offsets.c | 1 arch/s390/pci/pci_event.c | 7 arch/s390/pci/pci_irq.c | 9 arch/sh/kernel/asm-offsets.c | 1 arch/sparc/include/asm/elf_64.h | 1 arch/sparc/include/asm/io_64.h | 6 arch/sparc/kernel/asm-offsets.c | 1 arch/sparc/kernel/module.c | 1 arch/um/drivers/ssl.c | 5 arch/um/kernel/asm-offsets.c | 2 arch/x86/entry/vsyscall/vsyscall_64.c | 17 arch/x86/events/core.c | 10 arch/x86/kernel/cpu/bugs.c | 5 arch/x86/kernel/fpu/core.c | 3 arch/x86/kernel/kvm.c | 20 arch/x86/kvm/svm/svm.c | 10 arch/x86/net/bpf_jit_comp.c | 2 arch/xtensa/kernel/asm-offsets.c | 1 block/bdev.c | 17 block/blk-zoned.c | 5 block/fops.c | 61 block/ioctl.c | 6 drivers/acpi/acpi_video.c | 4 drivers/acpi/acpica/dsmethod.c | 10 drivers/acpi/cppc_acpi.c | 6 drivers/acpi/numa/srat.c | 2 drivers/acpi/pptt.c | 93 drivers/acpi/prmt.c | 19 drivers/acpi/property.c | 24 drivers/acpi/scan.c | 2 drivers/ata/libata-scsi.c | 12 drivers/atm/fore200e.c | 2 drivers/base/arch_topology.c | 12 drivers/base/cacheinfo.c | 156 drivers/base/power/wakeup.c | 5 drivers/base/regmap/regmap-slimbus.c | 6 drivers/bcma/main.c | 6 drivers/bluetooth/btmtksdio.c | 12 drivers/bluetooth/btusb.c | 30 drivers/bluetooth/hci_bcsp.c | 3 drivers/char/misc.c | 8 drivers/clk/at91/clk-master.c | 3 drivers/clk/at91/clk-sam9x60-pll.c | 75 drivers/clk/ti/clk-33xx.c | 2 drivers/clocksource/timer-vf-pit.c | 22 drivers/cpufreq/longhaul.c | 3 drivers/cpufreq/tegra186-cpufreq.c | 27 drivers/cpuidle/cpuidle.c | 8 drivers/dma/dw-edma/dw-edma-core.c | 22 drivers/dma/mv_xor.c | 4 drivers/dma/sh/shdma-base.c | 25 drivers/dma/sh/shdmac.c | 17 drivers/edac/altera_edac.c | 22 drivers/edac/edac_mc_sysfs.c | 24 drivers/extcon/extcon-adc-jack.c | 2 drivers/firmware/arm_scmi/scmi_pm_domain.c | 13 drivers/firmware/stratix10-svc.c | 7 drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 66 drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 23 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 10 drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 5 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 5 drivers/gpu/drm/amd/amdgpu/amdgpu_jpeg.c | 6 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 7 drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 5 drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c | 4 drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 4 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 19 drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 9 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 12 drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 8 drivers/gpu/drm/amd/display/dc/core/dc_stream.c | 11 drivers/gpu/drm/amd/display/include/dal_asic_id.h | 5 drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 5 drivers/gpu/drm/amd/pm/powerplay/smumgr/fiji_smumgr.c | 2 drivers/gpu/drm/amd/pm/powerplay/smumgr/iceland_smumgr.c | 2 drivers/gpu/drm/amd/pm/swsmu/smu11/arcturus_ppt.c | 2 drivers/gpu/drm/amd/pm/swsmu/smu13/aldebaran_ppt.c | 2 drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c | 2 drivers/gpu/drm/bridge/display-connector.c | 3 drivers/gpu/drm/drm_gem_atomic_helper.c | 6 drivers/gpu/drm/etnaviv/etnaviv_buffer.c | 2 drivers/gpu/drm/i915/gt/intel_gt_clock_utils.c | 4 drivers/gpu/drm/i915/i915_vma.c | 16 drivers/gpu/drm/msm/adreno/a6xx_gmu.c | 5 drivers/gpu/drm/msm/adreno/a6xx_gpu.c | 3 drivers/gpu/drm/msm/dsi/phy/dsi_phy_7nm.c | 10 drivers/gpu/drm/nouveau/nvkm/core/enum.c | 2 drivers/gpu/drm/scheduler/sched_entity.c | 3 drivers/gpu/drm/sti/sti_vtg.c | 7 drivers/gpu/drm/tegra/dc.c | 1 drivers/gpu/drm/tegra/uapi.c | 7 drivers/gpu/drm/tidss/tidss_crtc.c | 7 drivers/gpu/drm/tidss/tidss_dispc.c | 16 drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 5 drivers/gpu/host1x/context.c | 4 drivers/hid/amd-sfh-hid/sfh1_1/amd_sfh_init.c | 2 drivers/hid/hid-core.c | 7 drivers/hid/hid-ids.h | 7 drivers/hid/hid-ntrig.c | 7 drivers/hid/hid-quirks.c | 14 drivers/hwmon/asus-ec-sensors.c | 2 drivers/hwmon/dell-smm-hwmon.c | 7 drivers/hwmon/sbtsi_temp.c | 46 drivers/hwmon/sy7636a-hwmon.c | 1 drivers/i2c/busses/i2c-xgene-slimpro.c | 16 drivers/iio/accel/adxl355_core.c | 44 drivers/iio/accel/bmc150-accel-core.c | 5 drivers/iio/accel/bmc150-accel.h | 1 drivers/iio/adc/ad7280a.c | 2 drivers/iio/adc/rtq6056.c | 2 drivers/iio/adc/spear_adc.c | 9 drivers/iio/common/ssp_sensors/ssp_dev.c | 4 drivers/iio/imu/st_lsm6dsx/st_lsm6dsx.h | 22 drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 11 drivers/infiniband/hw/hns/hns_roce_qp.c | 2 drivers/infiniband/hw/irdma/pble.c | 2 drivers/infiniband/hw/irdma/verbs.c | 4 drivers/infiniband/hw/irdma/verbs.h | 8 drivers/input/keyboard/cros_ec_keyb.c | 6 drivers/input/keyboard/imx_sc_key.c | 2 drivers/input/tablet/pegasus_notetaker.c | 9 drivers/iommu/amd/init.c | 28 drivers/iommu/intel/debugfs.c | 10 drivers/iommu/intel/perf.c | 10 drivers/iommu/intel/perf.h | 5 drivers/irqchip/irq-gic-v2m.c | 13 drivers/irqchip/irq-loongson-pch-lpc.c | 9 drivers/irqchip/irq-sifive-plic.c | 6 drivers/isdn/hardware/mISDN/hfcsusb.c | 18 drivers/mailbox/mailbox-test.c | 2 drivers/mailbox/mailbox.c | 96 drivers/mailbox/pcc.c | 246 - drivers/md/dm-verity-fec.c | 6 drivers/media/i2c/Kconfig | 2 drivers/media/i2c/adv7180.c | 48 drivers/media/i2c/ir-kbd-i2c.c | 6 drivers/media/i2c/og01a1b.c | 6 drivers/media/pci/ivtv/ivtv-alsa-pcm.c | 2 drivers/media/pci/ivtv/ivtv-driver.h | 3 drivers/media/pci/ivtv/ivtv-fileops.c | 18 drivers/media/pci/ivtv/ivtv-irq.c | 4 drivers/media/platform/amphion/vpu_v4l2.c | 7 drivers/media/platform/verisilicon/hantro_drv.c | 2 drivers/media/platform/verisilicon/hantro_v4l2.c | 6 drivers/media/rc/imon.c | 61 drivers/media/rc/redrat3.c | 2 drivers/media/tuners/xc4000.c | 8 drivers/media/tuners/xc5000.c | 12 drivers/memstick/core/memstick.c | 8 drivers/mfd/da9063-i2c.c | 27 drivers/mfd/madera-core.c | 4 drivers/mfd/stmpe-i2c.c | 1 drivers/mfd/stmpe.c | 3 drivers/mmc/host/renesas_sdhi_core.c | 6 drivers/mmc/host/sdhci-msm.c | 15 drivers/mmc/host/sdhci-of-dwcmshc.c | 2 drivers/most/most_usb.c | 14 drivers/mtd/mtdchar.c | 6 drivers/mtd/nand/onenand/onenand_samsung.c | 2 drivers/mtd/nand/raw/cadence-nand-controller.c | 3 drivers/net/can/sja1000/sja1000.c | 4 drivers/net/can/sun4i_can.c | 4 drivers/net/can/usb/gs_usb.c | 64 drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c | 4 drivers/net/dsa/b53/b53_common.c | 15 drivers/net/dsa/b53/b53_regs.h | 3 drivers/net/dsa/dsa_loop.c | 9 drivers/net/dsa/hirschmann/hellcreek_ptp.c | 14 drivers/net/dsa/microchip/ksz9477.c | 98 drivers/net/dsa/microchip/ksz9477_reg.h | 3 drivers/net/dsa/microchip/ksz_common.c | 12 drivers/net/dsa/microchip/ksz_common.h | 2 drivers/net/dsa/microchip/lan937x_main.c | 1 drivers/net/dsa/sja1105/sja1105_main.c | 66 drivers/net/ethernet/aquantia/atlantic/aq_hw_utils.c | 22 drivers/net/ethernet/aquantia/atlantic/aq_hw_utils.h | 1 drivers/net/ethernet/aquantia/atlantic/aq_ring.c | 5 drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_b0.c | 19 drivers/net/ethernet/aquantia/atlantic/hw_atl2/hw_atl2.c | 2 drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c | 4 drivers/net/ethernet/cadence/macb_main.c | 6 drivers/net/ethernet/emulex/benet/be_main.c | 7 drivers/net/ethernet/freescale/fec_main.c | 2 drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 3 drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mdio.c | 9 drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mdio.h | 2 drivers/net/ethernet/intel/fm10k/fm10k_common.c | 5 drivers/net/ethernet/intel/fm10k/fm10k_common.h | 2 drivers/net/ethernet/intel/fm10k/fm10k_pf.c | 2 drivers/net/ethernet/intel/fm10k/fm10k_vf.c | 2 drivers/net/ethernet/intel/ice/ice_main.c | 2 drivers/net/ethernet/intel/ice/ice_trace.h | 10 drivers/net/ethernet/mellanox/mlx5/core/en.h | 10 drivers/net/ethernet/mellanox/mlx5/core/en/port.c | 72 drivers/net/ethernet/mellanox/mlx5/core/en/port.h | 6 drivers/net/ethernet/mellanox/mlx5/core/en/port_buffer.c | 282 + drivers/net/ethernet/mellanox/mlx5/core/en/port_buffer.h | 7 drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c | 8 drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 62 drivers/net/ethernet/mellanox/mlx5/core/en_ethtool.c | 18 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 5 drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 5 drivers/net/ethernet/mellanox/mlx5/core/en_stats.c | 12 drivers/net/ethernet/mellanox/mlxsw/core_linecards.c | 2 drivers/net/ethernet/mellanox/mlxsw/spectrum_flower.c | 6 drivers/net/ethernet/microchip/lan966x/lan966x_ptp.c | 5 drivers/net/ethernet/microchip/sparx5/Kconfig | 2 drivers/net/ethernet/qlogic/qede/qede_fp.c | 5 drivers/net/ethernet/realtek/Kconfig | 2 drivers/net/ethernet/realtek/r8169_main.c | 6 drivers/net/ethernet/renesas/sh_eth.c | 4 drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c | 4 drivers/net/ethernet/smsc/smsc911x.c | 14 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 9 drivers/net/ethernet/ti/netcp_core.c | 10 drivers/net/hamradio/6pack.c | 57 drivers/net/mdio/of_mdio.c | 1 drivers/net/phy/dp83867.c | 6 drivers/net/phy/fixed_phy.c | 1 drivers/net/phy/marvell.c | 39 drivers/net/phy/mdio_bus.c | 5 drivers/net/usb/asix_devices.c | 12 drivers/net/usb/qmi_wwan.c | 6 drivers/net/usb/usbnet.c | 2 drivers/net/virtio_net.c | 26 drivers/net/wireless/ath/ath10k/mac.c | 12 drivers/net/wireless/ath/ath10k/wmi.c | 40 drivers/net/wireless/ath/ath11k/hw.c | 1 drivers/net/wireless/ath/ath11k/mac.c | 5 drivers/net/wireless/ath/ath11k/wmi.c | 30 drivers/net/wireless/ath/ath11k/wmi.h | 3 drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c | 3 drivers/net/wireless/broadcom/brcm80211/brcmfmac/p2p.c | 28 drivers/net/wireless/broadcom/brcm80211/brcmfmac/p2p.h | 3 drivers/net/wireless/mediatek/mt76/mt7921/main.c | 2 drivers/ntb/hw/epf/ntb_hw_epf.c | 103 drivers/nvme/host/core.c | 8 drivers/nvme/host/fc.c | 12 drivers/nvme/host/multipath.c | 2 drivers/nvme/target/fc.c | 16 drivers/pci/controller/cadence/pcie-cadence-host.c | 2 drivers/pci/controller/cadence/pcie-cadence.c | 4 drivers/pci/controller/cadence/pcie-cadence.h | 6 drivers/pci/p2pdma.c | 2 drivers/pci/pci-driver.c | 2 drivers/pci/pci.c | 5 drivers/pci/quirks.c | 3 drivers/phy/cadence/cdns-dphy.c | 4 drivers/phy/rockchip/phy-rockchip-inno-csidphy.c | 5 drivers/pinctrl/pinctrl-single.c | 4 drivers/platform/x86/intel/punit_ipc.c | 2 drivers/platform/x86/intel/speed_select_if/isst_if_mmio.c | 4 drivers/power/supply/sbs-charger.c | 16 drivers/ptp/ptp_clock.c | 13 drivers/regulator/fixed.c | 1 drivers/remoteproc/qcom_q6v5.c | 5 drivers/rtc/rtc-pcf2127.c | 4 drivers/rtc/rtc-rx8025.c | 2 drivers/s390/net/ctcm_mpc.c | 1 drivers/scsi/hosts.c | 5 drivers/scsi/libfc/fc_encode.h | 2 drivers/scsi/lpfc/lpfc_debugfs.h | 3 drivers/scsi/lpfc/lpfc_els.c | 6 drivers/scsi/lpfc/lpfc_init.c | 7 drivers/scsi/lpfc/lpfc_scsi.c | 14 drivers/scsi/mpi3mr/mpi3mr_fw.c | 10 drivers/scsi/mpt3sas/mpt3sas_transport.c | 3 drivers/scsi/pm8001/pm8001_ctl.c | 24 drivers/scsi/pm8001/pm8001_init.c | 1 drivers/scsi/pm8001/pm8001_sas.c | 4 drivers/scsi/pm8001/pm8001_sas.h | 4 drivers/scsi/sg.c | 10 drivers/slimbus/qcom-ngd-ctrl.c | 1 drivers/soc/aspeed/aspeed-socinfo.c | 4 drivers/soc/imx/gpc.c | 2 drivers/soc/qcom/smem.c | 2 drivers/soc/samsung/pm_domains.c | 11 drivers/soc/ti/knav_dma.c | 14 drivers/soc/ti/pruss.c | 2 drivers/spi/spi-bcm63xx.c | 14 drivers/spi/spi-loopback-test.c | 12 drivers/spi/spi-rpc-if.c | 2 drivers/spi/spi.c | 10 drivers/staging/Kconfig | 2 drivers/staging/Makefile | 1 drivers/staging/rtl8712/Kconfig | 21 drivers/staging/rtl8712/Makefile | 35 drivers/staging/rtl8712/TODO | 13 drivers/staging/rtl8712/basic_types.h | 28 drivers/staging/rtl8712/drv_types.h | 175 drivers/staging/rtl8712/ethernet.h | 21 drivers/staging/rtl8712/hal_init.c | 401 - drivers/staging/rtl8712/ieee80211.c | 415 - drivers/staging/rtl8712/ieee80211.h | 165 drivers/staging/rtl8712/mlme_linux.c | 160 drivers/staging/rtl8712/mlme_osdep.h | 31 drivers/staging/rtl8712/mp_custom_oid.h | 287 - drivers/staging/rtl8712/os_intfs.c | 465 - drivers/staging/rtl8712/osdep_intf.h | 32 drivers/staging/rtl8712/osdep_service.h | 60 drivers/staging/rtl8712/recv_linux.c | 139 drivers/staging/rtl8712/recv_osdep.h | 39 drivers/staging/rtl8712/rtl8712_bitdef.h | 26 drivers/staging/rtl8712/rtl8712_cmd.c | 409 - drivers/staging/rtl8712/rtl8712_cmd.h | 231 drivers/staging/rtl8712/rtl8712_cmdctrl_bitdef.h | 95 drivers/staging/rtl8712/rtl8712_cmdctrl_regdef.h | 19 drivers/staging/rtl8712/rtl8712_debugctrl_bitdef.h | 41 drivers/staging/rtl8712/rtl8712_debugctrl_regdef.h | 32 drivers/staging/rtl8712/rtl8712_edcasetting_bitdef.h | 65 drivers/staging/rtl8712/rtl8712_edcasetting_regdef.h | 24 drivers/staging/rtl8712/rtl8712_efuse.c | 564 -- drivers/staging/rtl8712/rtl8712_efuse.h | 43 drivers/staging/rtl8712/rtl8712_event.h | 86 drivers/staging/rtl8712/rtl8712_fifoctrl_bitdef.h | 131 drivers/staging/rtl8712/rtl8712_fifoctrl_regdef.h | 61 drivers/staging/rtl8712/rtl8712_gp_bitdef.h | 68 drivers/staging/rtl8712/rtl8712_gp_regdef.h | 29 drivers/staging/rtl8712/rtl8712_hal.h | 142 drivers/staging/rtl8712/rtl8712_interrupt_bitdef.h | 44 drivers/staging/rtl8712/rtl8712_io.c | 99 drivers/staging/rtl8712/rtl8712_led.c | 1830 ------- drivers/staging/rtl8712/rtl8712_macsetting_bitdef.h | 31 drivers/staging/rtl8712/rtl8712_macsetting_regdef.h | 20 drivers/staging/rtl8712/rtl8712_powersave_bitdef.h | 39 drivers/staging/rtl8712/rtl8712_powersave_regdef.h | 26 drivers/staging/rtl8712/rtl8712_ratectrl_bitdef.h | 36 drivers/staging/rtl8712/rtl8712_ratectrl_regdef.h | 43 drivers/staging/rtl8712/rtl8712_recv.c | 1079 ---- drivers/staging/rtl8712/rtl8712_recv.h | 145 drivers/staging/rtl8712/rtl8712_regdef.h | 32 drivers/staging/rtl8712/rtl8712_security_bitdef.h | 34 drivers/staging/rtl8712/rtl8712_spec.h | 121 drivers/staging/rtl8712/rtl8712_syscfg_bitdef.h | 163 drivers/staging/rtl8712/rtl8712_syscfg_regdef.h | 42 drivers/staging/rtl8712/rtl8712_timectrl_bitdef.h | 49 drivers/staging/rtl8712/rtl8712_timectrl_regdef.h | 26 drivers/staging/rtl8712/rtl8712_wmac_bitdef.h | 49 drivers/staging/rtl8712/rtl8712_wmac_regdef.h | 36 drivers/staging/rtl8712/rtl8712_xmit.c | 745 --- drivers/staging/rtl8712/rtl8712_xmit.h | 108 drivers/staging/rtl8712/rtl871x_cmd.c | 796 --- drivers/staging/rtl8712/rtl871x_cmd.h | 761 --- drivers/staging/rtl8712/rtl871x_debug.h | 130 drivers/staging/rtl8712/rtl871x_eeprom.c | 220 drivers/staging/rtl8712/rtl871x_eeprom.h | 88 drivers/staging/rtl8712/rtl871x_event.h | 109 drivers/staging/rtl8712/rtl871x_ht.h | 33 drivers/staging/rtl8712/rtl871x_io.c | 147 drivers/staging/rtl8712/rtl871x_io.h | 236 - drivers/staging/rtl8712/rtl871x_ioctl.h | 94 drivers/staging/rtl8712/rtl871x_ioctl_linux.c | 2330 ---------- drivers/staging/rtl8712/rtl871x_ioctl_rtl.c | 519 -- drivers/staging/rtl8712/rtl871x_ioctl_rtl.h | 109 drivers/staging/rtl8712/rtl871x_ioctl_set.c | 354 - drivers/staging/rtl8712/rtl871x_ioctl_set.h | 45 drivers/staging/rtl8712/rtl871x_led.h | 118 drivers/staging/rtl8712/rtl871x_mlme.c | 1709 ------- drivers/staging/rtl8712/rtl871x_mlme.h | 205 drivers/staging/rtl8712/rtl871x_mp.c | 724 --- drivers/staging/rtl8712/rtl871x_mp.h | 275 - drivers/staging/rtl8712/rtl871x_mp_ioctl.c | 883 --- drivers/staging/rtl8712/rtl871x_mp_ioctl.h | 328 - drivers/staging/rtl8712/rtl871x_mp_phy_regdef.h | 1034 ---- drivers/staging/rtl8712/rtl871x_pwrctrl.c | 234 - drivers/staging/rtl8712/rtl871x_pwrctrl.h | 113 drivers/staging/rtl8712/rtl871x_recv.c | 669 -- drivers/staging/rtl8712/rtl871x_recv.h | 208 drivers/staging/rtl8712/rtl871x_rf.h | 55 drivers/staging/rtl8712/rtl871x_security.c | 1386 ----- drivers/staging/rtl8712/rtl871x_security.h | 218 drivers/staging/rtl8712/rtl871x_sta_mgt.c | 263 - drivers/staging/rtl8712/rtl871x_wlan_sme.h | 35 drivers/staging/rtl8712/rtl871x_xmit.c | 1059 ---- drivers/staging/rtl8712/rtl871x_xmit.h | 288 - drivers/staging/rtl8712/sta_info.h | 132 drivers/staging/rtl8712/usb_halinit.c | 307 - drivers/staging/rtl8712/usb_intf.c | 638 -- drivers/staging/rtl8712/usb_ops.c | 195 drivers/staging/rtl8712/usb_ops.h | 38 drivers/staging/rtl8712/usb_ops_linux.c | 515 -- drivers/staging/rtl8712/usb_osintf.h | 35 drivers/staging/rtl8712/wifi.h | 196 drivers/staging/rtl8712/wlan_bssdef.h | 223 drivers/staging/rtl8712/xmit_linux.c | 181 drivers/staging/rtl8712/xmit_osdep.h | 52 drivers/target/loopback/tcm_loop.c | 3 drivers/tee/tee_core.c | 2 drivers/thunderbolt/nhi.c | 2 drivers/thunderbolt/nhi.h | 1 drivers/thunderbolt/tb.c | 2 drivers/tty/serial/amba-pl011.c | 2 drivers/tty/serial/sc16is7xx.c | 185 drivers/ufs/core/ufshcd.c | 7 drivers/ufs/host/ufs-mediatek.c | 46 drivers/ufs/host/ufshcd-pci.c | 70 drivers/uio/uio_hv_generic.c | 21 drivers/usb/cdns3/cdns3-pci-wrap.c | 5 drivers/usb/cdns3/cdnsp-gadget.c | 8 drivers/usb/dwc3/core.c | 3 drivers/usb/dwc3/ep0.c | 1 drivers/usb/dwc3/gadget.c | 7 drivers/usb/gadget/function/f_eem.c | 7 drivers/usb/gadget/function/f_fs.c | 8 drivers/usb/gadget/function/f_hid.c | 4 drivers/usb/gadget/function/f_ncm.c | 3 drivers/usb/gadget/udc/core.c | 18 drivers/usb/gadget/udc/trace.h | 5 drivers/usb/host/xhci-dbgcap.c | 261 + drivers/usb/host/xhci-dbgcap.h | 12 drivers/usb/host/xhci-dbgtty.c | 23 drivers/usb/host/xhci-plat.c | 1 drivers/usb/mon/mon_bin.c | 14 drivers/usb/renesas_usbhs/common.c | 18 drivers/usb/serial/ftdi_sio.c | 1 drivers/usb/serial/ftdi_sio_ids.h | 1 drivers/usb/serial/option.c | 10 drivers/usb/storage/sddr55.c | 6 drivers/usb/storage/transport.c | 16 drivers/usb/storage/uas.c | 5 drivers/usb/storage/unusual_devs.h | 2 drivers/usb/typec/ucsi/psy.c | 5 drivers/vfio/iova_bitmap.c | 5 drivers/vfio/vfio_main.c | 2 drivers/video/backlight/lp855x_bl.c | 2 drivers/video/fbdev/aty/atyfb_base.c | 8 drivers/video/fbdev/core/bitblit.c | 33 drivers/video/fbdev/core/fbcon.c | 19 drivers/video/fbdev/core/fbmem.c | 1 drivers/video/fbdev/pvr2fb.c | 2 drivers/video/fbdev/valkyriefb.c | 2 drivers/watchdog/s3c2410_wdt.c | 10 fs/9p/v9fs.c | 9 fs/btrfs/disk-io.c | 2 fs/btrfs/extent-tree.c | 6 fs/btrfs/file.c | 10 fs/btrfs/scrub.c | 3 fs/btrfs/transaction.c | 2 fs/btrfs/tree-log.c | 3 fs/ceph/file.c | 2 fs/ceph/locks.c | 5 fs/direct-io.c | 10 fs/eventpoll.c | 139 fs/exfat/fatent.c | 11 fs/exfat/super.c | 5 fs/ext4/fast_commit.c | 2 fs/ext4/file.c | 9 fs/ext4/xattr.c | 2 fs/f2fs/file.c | 1 fs/hpfs/namei.c | 18 fs/iomap/direct-io.c | 12 fs/jfs/inode.c | 8 fs/jfs/jfs_txnmgr.c | 9 fs/libfs.c | 42 fs/nfs/file.c | 1 fs/nfs/nfs4client.c | 1 fs/nfs/nfs4proc.c | 15 fs/nfs/nfs4state.c | 3 fs/nfs/write.c | 3 fs/nfsd/nfs4proc.c | 7 fs/nfsd/nfs4state.c | 9 fs/nilfs2/the_nilfs.c | 3 fs/ntfs3/inode.c | 1 fs/open.c | 10 fs/orangefs/xattr.c | 12 fs/proc/generic.c | 12 fs/smb/client/cifsfs.c | 2 fs/smb/client/connect.c | 1 fs/smb/client/smb2inode.c | 2 fs/smb/client/smb2pdu.c | 7 fs/smb/client/transport.c | 10 fs/smb/server/smb2pdu.c | 6 fs/smb/server/transport_tcp.c | 12 include/acpi/pcc.h | 20 include/linux/array_size.h | 13 include/linux/ata.h | 1 include/linux/blk_types.h | 11 include/linux/cacheinfo.h | 11 include/linux/compiler_types.h | 5 include/linux/fbcon.h | 2 include/linux/filter.h | 22 include/linux/fs.h | 7 include/linux/host1x.h | 2 include/linux/kernel.h | 7 include/linux/mailbox_client.h | 1 include/linux/map_benchmark.h | 1 include/linux/mlx5/driver.h | 2 include/linux/mlx5/mlx5_ifc.h | 61 include/linux/pagemap.h | 2 include/linux/pci.h | 2 include/linux/shdma-base.h | 2 include/linux/string.h | 1 include/linux/suspend.h | 4 include/linux/usb/gadget.h | 5 include/net/bluetooth/hci.h | 12 include/net/bluetooth/hci_core.h | 8 include/net/bluetooth/mgmt.h | 2 include/net/cls_cgroup.h | 2 include/net/nfc/nci_core.h | 2 include/net/pkt_sched.h | 25 include/net/tc_act/tc_connmark.h | 10 include/net/tls.h | 6 include/net/xdp.h | 5 include/net/xfrm.h | 3 include/trace/events/irq.h | 47 include/uapi/asm-generic/bitsperlong.h | 13 include/ufs/ufshcd.h | 7 include/ufs/ufshci.h | 4 kernel/bpf/ringbuf.c | 2 kernel/events/callchain.c | 10 kernel/events/uprobes.c | 7 kernel/futex/syscalls.c | 106 kernel/gcov/gcc_4_7.c | 4 kernel/softirq.c | 9 kernel/time/timer.c | 7 kernel/trace/ftrace.c | 2 kernel/trace/trace_events_hist.c | 6 lib/crypto/Makefile | 2 lib/maple_tree.c | 30 mm/filemap.c | 161 mm/mempool.c | 32 mm/page_alloc.c | 2 mm/percpu.c | 8 mm/secretmem.c | 2 mm/truncate.c | 27 net/8021q/vlan.c | 2 net/bluetooth/6lowpan.c | 97 net/bluetooth/hci_event.c | 34 net/bluetooth/hci_sync.c | 17 net/bluetooth/iso.c | 36 net/bluetooth/l2cap_core.c | 1 net/bluetooth/mgmt.c | 7 net/bluetooth/sco.c | 7 net/bluetooth/smp.c | 31 net/bridge/br.c | 5 net/bridge/br_forward.c | 5 net/bridge/br_if.c | 1 net/bridge/br_input.c | 4 net/bridge/br_mst.c | 10 net/bridge/br_private.h | 13 net/ceph/auth_x.c | 2 net/ceph/ceph_common.c | 53 net/ceph/debugfs.c | 14 net/ceph/osdmap.c | 18 net/core/filter.c | 1 net/core/netpoll.c | 7 net/core/page_pool.c | 12 net/core/sock.c | 15 net/dsa/tag_brcm.c | 10 net/ethernet/eth.c | 5 net/hsr/hsr_device.c | 3 net/ipv4/esp4.c | 4 net/ipv4/esp4_offload.c | 6 net/ipv4/netfilter/nf_reject_ipv4.c | 25 net/ipv4/nexthop.c | 6 net/ipv4/route.c | 5 net/ipv4/udp_tunnel_nic.c | 2 net/ipv6/addrconf.c | 4 net/ipv6/ah6.c | 50 net/ipv6/esp6.c | 4 net/ipv6/esp6_offload.c | 6 net/ipv6/netfilter/nf_reject_ipv6.c | 30 net/ipv6/raw.c | 2 net/ipv6/udp.c | 2 net/mac80211/iface.c | 14 net/mac80211/mlme.c | 2 net/mac80211/rx.c | 10 net/mptcp/options.c | 54 net/mptcp/pm_netlink.c | 26 net/mptcp/protocol.c | 125 net/mptcp/protocol.h | 5 net/mptcp/subflow.c | 8 net/netfilter/nf_tables_api.c | 15 net/openvswitch/actions.c | 68 net/openvswitch/flow_netlink.c | 64 net/openvswitch/flow_netlink.h | 2 net/rds/rds.h | 2 net/sched/act_bpf.c | 6 net/sched/act_connmark.c | 134 net/sched/act_ife.c | 12 net/sched/cls_bpf.c | 6 net/sched/sch_api.c | 10 net/sched/sch_generic.c | 17 net/sched/sch_hfsc.c | 16 net/sched/sch_qfq.c | 2 net/sctp/diag.c | 21 net/sctp/transport.c | 13 net/smc/smc_clc.c | 1 net/strparser/strparser.c | 2 net/tipc/net.c | 2 net/tls/tls_device.c | 4 net/unix/garbage.c | 14 net/vmw_vsock/af_vsock.c | 40 net/xfrm/espintcp.c | 4 scripts/kconfig/mconf.c | 3 scripts/kconfig/nconf.c | 3 sound/drivers/serial-generic.c | 12 sound/pci/hda/patch_realtek.c | 17 sound/soc/codecs/cs4271.c | 10 sound/soc/codecs/lpass-va-macro.c | 2 sound/soc/codecs/max98090.c | 6 sound/soc/fsl/fsl_sai.c | 3 sound/soc/intel/avs/pcm.c | 2 sound/soc/meson/aiu-encoder-i2s.c | 9 sound/soc/qcom/qdsp6/q6asm.c | 2 sound/soc/qcom/sc8280xp.c | 3 sound/usb/endpoint.c | 6 sound/usb/mixer.c | 11 sound/usb/mixer_s1810c.c | 28 sound/usb/quirks.c | 3 sound/usb/validate.c | 9 tools/bpf/bpftool/btf_dumper.c | 2 tools/bpf/bpftool/prog.c | 2 tools/include/linux/bitmap.h | 1 tools/include/uapi/asm-generic/bitsperlong.h | 14 tools/include/uapi/asm/bitsperlong.h | 6 tools/lib/bpf/bpf_tracing.h | 2 tools/lib/thermal/Makefile | 9 tools/power/cpupower/lib/cpuidle.c | 5 tools/power/cpupower/lib/cpupower.c | 2 tools/power/x86/x86_energy_perf_policy/x86_energy_perf_policy.c | 30 tools/testing/selftests/Makefile | 2 tools/testing/selftests/bpf/test_lirc_mode2_user.c | 2 tools/testing/selftests/bpf/test_xsk.sh | 2 tools/testing/selftests/drivers/net/netdevsim/Makefile | 21 tools/testing/selftests/drivers/net/netdevsim/settings | 1 tools/testing/selftests/net/bareudp.sh | 2 tools/testing/selftests/net/fcnal-test.sh | 432 - tools/testing/selftests/net/forwarding/local_termination.sh | 2 tools/testing/selftests/net/gro.c | 101 tools/testing/selftests/net/mptcp/mptcp_connect.c | 18 tools/testing/selftests/net/mptcp/mptcp_connect.sh | 2 tools/testing/selftests/net/mptcp/mptcp_join.sh | 65 tools/testing/selftests/net/psock_tpacket.c | 4 tools/testing/selftests/net/traceroute.sh | 13 tools/tracing/latency/latency-collector.c | 2 usr/include/headers_check.pl | 2 678 files changed, 5740 insertions(+), 30290 deletions(-) Aaron Kling (1): cpufreq: tegra186: Initialize all cores to max frequencies Abdun Nihaal (1): isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() Abinaya Kalaiselvan (1): wifi: ath11k: Add tx ack signal support for management packets Adam Young (1): mailbox: pcc: Check before sending MCTP PCC response ACK Adrian Hunter (3): scsi: ufs: ufs-pci: Fix S0ix/S3 for Intel controllers scsi: ufs: core: Add a quirk to suppress link_startup_again scsi: ufs: ufs-pci: Set UFSHCD_QUIRK_PERFORM_LINK_STARTUP_ONCE for Intel ADL Akhil P Oommen (1): drm/msm/a6xx: Fix GMU firmware parser Al Viro (4): direct_write_fallback(): on error revert the ->ki_pos update from buffered write allow finish_no_open(file, ERR_PTR(-E...)) sparc64: fix prototypes of reads[bwl]() nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing Alan Borzeszkowski (1): thunderbolt: Add support for Intel Wildcat Lake Alan Stern (2): USB: storage: Remove subclass and protocol overrides from Novatek quirk HID: core: Harden s32ton() against conversion to 0 bits Albin Babu Varghese (1): fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds Alejandro Colomar (1): kernel.h: Move ARRAY_SIZE() to a separate header Aleksander Jan Bajkowski (5): mips: lantiq: danube: add missing properties to cpu node mips: lantiq: danube: add model to EASY50712 dts mips: lantiq: danube: add missing device_type in pci node mips: lantiq: xway: sysctrl: rename stp clock mips: lantiq: danube: rename stp node on EASY50712 reference board Aleksei Nikiforov (1): s390/ctcm: Fix double-kfree Alex Deucher (6): Reapply "Revert drm/amd/display: Enable Freesync Video Mode by default" drm/amd/display: add more cyan skillfish devices drm/amd: add more cyan skillfish PCI ids drm/amdgpu: don't enable SMU on cyan skillfish drm/amdgpu: add support for cyan skillfish gpu_info drm/amdgpu: fix cyan_skillfish2 gpu info fw handling Alex Hung (1): drm/amd/display: Check NULL before accessing Alex Mastro (1): vfio: return -ENOTTY for unsupported device feature Alexander Stein (2): mfd: stmpe: Remove IRQ domain upon removal mfd: stmpe-i2c: Add missing MODULE_LICENSE Alexander Sverdlin (1): selftests: net: local_termination: Wait for interfaces to come up Alexey Klimov (2): regmap: slimbus: fix bus_context pointer in regmap init calls ASoC: qcom: sc8280xp: explicitly set S16LE format in sc8280xp_be_hw_params_fixup() Alexey Kodanev (1): net: sxgbe: fix potential NULL dereference in sxgbe_rx() Alice Chao (2): scsi: ufs: host: mediatek: Assign power mode userdata before FASTAUTO mode change scsi: ufs: host: mediatek: Fix invalid access in vccqx handling Alistair Francis (1): nvme: Use non zero KATO for persistent discovery connections Alok Tiwari (2): udp_tunnel: use netdev_warn() instead of netdev_WARN() scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill() Amber Lin (1): drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption Amery Hung (1): bpf: Clear pfmemalloc flag when freeing all fragments Amirreza Zarrabi (1): tee: allow a driver to allocate a tee_device without a pool Andreas Kemnade (1): hwmon: sy7636a: add alias Andrey Vatoropin (1): be2net: pass wrb_params in case of OS2BMC Andrii Nakryiko (1): libbpf: Fix powerpc's stack register definition in bpf_tracing.h André Draszik (1): pmdomain: samsung: plug potential memleak during probe Anthony Iliopoulos (1): NFSv4.1: fix mount hang after CREATE_SESSION failure Antonino Maniscalco (1): drm/msm: make sure to not queue up recovery more than once Anubhav Singh (2): selftests/net: fix out-of-order delivery of FIN in gro:tcp test selftests/net: use destination options instead of hop-by-hop Arkadiusz Bokowy (1): Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI frames Armen Ratner (1): net/mlx5e: Preserve shared buffer capacity during headroom updates Armin Wolf (1): hwmon: (dell-smm) Add support for Dell OptiPlex 7040 Arnd Bergmann (2): mfd: madera: Work around false-positive -Wininitialized warning asm-generic: partially revert "Unify uapi bitsperlong.h for arm64, riscv and loongarch" Arseniy Krasnov (1): Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' Ashish Kalra (1): iommu/amd: Skip enabling command/event buffers for kdump Avadhut Naik (1): EDAC/mc_sysfs: Increase legacy channel support to 16 Baochen Qiang (1): Revert "wifi: ath10k: avoid unnecessary wait for service ready message" Bart Van Assche (2): scsi: sg: Do not sleep in atomic context scsi: core: Fix a regression triggered by scsi_host_busy() Bastien Curutchet (Schneider Electric) (1): net: dsa: microchip: common: Fix checks on irq_find_mapping() Ben Copeland (1): hwmon: (asus-ec-sensors) increase timeout for locking ACPI mutex Benjamin Berg (1): wifi: mac80211: skip rate verification for not captured PSDUs Biju Das (2): mmc: host: renesas_sdhi: Fix the actual clock spi: rpc-if: Add resume support for RZ/G3E Brahmajit Das (1): net: intel: fm10k: Fix parameter idx set but not used Breno Leitao (1): net: netpoll: fix incorrect refcount handling causing incorrect cleanup Buday Csaba (1): net: mdio: fix resource leak in mdiobus_register_device() Bui Quang Minh (1): virtio-net: fix received length check in big packets Carolina Jubran (1): net/mlx5e: Don't query FEC statistics when FEC is disabled Celeste Liu (1): can: gs_usb: increase max interface to U8_MAX Cen Zhang (1): Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once Cezary Rojewski (1): ASoC: Intel: avs: Unprepare a stream when XRUN occurs Chandrakanth Patil (1): scsi: mpi3mr: Fix controller init failure on fault during queue creation Chang S. Bae (1): x86/fpu: Ensure XFD state on signal delivery Charalampos Mitrodimas (1): net: ipv6: fix field-spanning memcpy warning in AH output Chelsy Ratnawat (1): media: fix uninitialized symbol warnings Chen Wang (1): PCI: cadence: Check for the existence of cdns_pcie::ops before using it Chen Yufeng (1): usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget Chi Zhang (1): pinctrl: single: fix bias pull up/down handling in pin_config_set Chi Zhiling (1): exfat: limit log print for IO error ChiYuan Huang (1): iio: adc: rtq6056: Correct the sign bit index Chris Lu (1): Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during reset Christian Bruel (1): irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment Christian König (1): drm/amdgpu: reject gang submissions under SRIOV Christoph Hellwig (5): filemap: add a kiocb_invalidate_pages helper filemap: add a kiocb_invalidate_post_direct_write helper filemap: update ki_pos in generic_perform_write fs: factor out a direct_write_fallback helper block: open code __generic_file_write_iter for blkdev writes Christoph Paasch (1): net: When removing nexthops, don't call synchronize_net if it is not necessary Christophe JAILLET (1): iio:common:ssp_sensors: Fix an error handling path ssp_probe() Chuande Chen (1): hwmon: (sbtsi_temp) AMD CPU extended temperature range support Chuang Wang (1): ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe Chuck Lever (1): NFSD: Fix crash in nfsd4_read_release() ChunHao Lin (1): r8169: set EEE speed down ratio to 1 Claudia Draghicescu (1): Bluetooth: ISO: Add support for periodic adv reports processing Claudiu Beznea (1): usb: renesas_usbhs: Fix synchronous external abort on unbind Colin Foster (1): smsc911x: add second read of EEPROM mac when possible corruption seen Cryolitia PukNgae (1): ALSA: usb-audio: apply quirk for MOONDROP Quark2 D. Wythe (1): net/smc: fix mismatch between CLC header and proposal Damien Le Moal (2): block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL block: make REQ_OP_ZONE_OPEN a write operation Dan Carpenter (4): mtd: onenand: Pass correct pointer to IRQ handler mtdchar: fix integer overflow in read/write ioctls Input: imx_sc_key - fix memory corruption on unload platform/x86: intel: punit_ipc: fix memory corruption Daniel Lezcano (1): clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel Daniel Palmer (2): fbdev: atyfb: Check if pll_ops->init_pll failed eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP Daniel Wagner (2): nvmet-fc: avoid scheduling association deletion twice nvme-fc: use lock accessing port_state and rport state Danielle Costantino (1): net/mlx5e: Fix validation logic in rate limiting Danil Skrebenkov (1): RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors Darrick J. Wong (1): block: fix race between set_blocksize and read paths David Ahern (2): selftests: Disable dad for ipv6 in fcnal-test.sh selftests: Replace sleep with slowwait David Francis (1): drm/amdgpu: Allow kfd CRIU with no buffer objects David Kaplan (1): x86/bugs: Fix reporting of LFENCE retpoline David Lechner (1): iio: adc: ad7280a: fix ad7280_store_balance_timer() David Wei (1): netdevsim: add Makefile for selftests Dennis Beier (1): cpufreq/longhaul: handle NULL policy in longhaul_exit Desnes Nunes (1): usb: storage: Fix memory leak in USB bulk transport Devendra K Verma (1): dmaengine: dw-edma: Set status for callback_result Dmitry Baryshkov (1): drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts Dragos Tatulea (2): page_pool: Clamp pool size to max 16K pages net/mlx5e: SHAMPO, Fix skb size check for 64K pages Elliot Berman (2): mailbox: Allow direct registration to a channel mailbox: pcc: Use mbox_bind_client Emanuele Ghidoli (1): net: phy: dp83867: Disable EEE support as not implemented Emil Dahl Juhl (1): tools: lib: thermal: don't preserve owner in install Eric Biggers (1): lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN Eric Dumazet (8): net: call cond_resched() less often in __release_sock() ipv6: np->rxpmtu race annotation sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto net_sched: act_connmark: use RCU in tcf_connmark_dump() net_sched: limit try_bulk_dequeue_skb() batches bpf: Add bpf_prog_run_data_pointers() mptcp: fix race condition in mptcp_schedule_work() mptcp: fix a race in mptcp_pm_del_add_timer() Eric Huang (1): drm/amdkfd: fix vram allocation failure for a special case Ewan D. Milne (1): nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() Fabien Proriol (1): power: supply: sbs-charger: Support multiple devices Fabio M. De Francesco (1): mm/mempool: replace kmap_atomic() with kmap_local_page() Farhan Ali (1): s390/pci: Restore IRQ unconditionally for the zPCI device Felix Maurer (1): hsr: Fix supervision frame sending on HSRv0 Filipe Manana (3): btrfs: always drop log root tree reference in btrfs_replay_log() btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot() btrfs: do not update last_log_commit when logging inode due to a new name Fiona Ebner (1): smb: client: transport: avoid reconnects triggered by pending task work Florian Fuchs (1): fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS Florian Westphal (1): netfilter: nf_reject: don't reply to icmp error messages Forest Crossman (1): usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs Francesco Lavra (1): iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields Francisco Gutierrez (1): scsi: pm80xx: Fix race condition caused by static variables Gal Pressman (4): net/mlx5e: Fix maxrate wraparound in threshold between units net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps net/mlx5e: Remove mlx5e_dbg() and msglvl support net/mlx5e: Fix potentially misleading debug message Gautham R. Shenoy (3): ACPI: CPPC: Check _CPC validity for only the online CPUs ACPI: CPPC: Perform fast check switch only for online CPUs ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs Geert Uytterhoeven (1): kbuild: uapi: Strip comments before size type check Geliang Tang (2): selftests: mptcp: disable add_addr retrans in endpoint_tests mptcp: change 'first' as a parameter Geoffrey McRae (1): drm/amdkfd: return -ENOTTY for unsupported IOCTLs Gerd Bayer (1): s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump Gokul Sivakumar (1): wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode Greg Kroah-Hartman (1): Linux 6.1.159 Gui-Dong Han (1): atm/fore200e: Fix possible data race in fore200e_open() Haein Lee (1): ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd Hamza Mahfooz (1): scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() Hang Zhou (1): spi: bcm63xx: fix premature CS deassertion on RX-only transactions Hangbin Liu (1): net: vlan: sync VLAN features with lower device Hans de Goede (3): ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[] ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() spi: Try to get ACPI GPIO IRQ earlier Haotian Zhang (5): regulator: fixed: fix GPIO descriptor leak on register failure ASoC: cs4271: Fix regulator leak on probe failure ASoC: codecs: va-macro: fix resource leak in probe error path platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos mailbox: mailbox-test: Fix debugfs_create_dir error checking Harikrishna Shenoy (1): phy: cadence: cdns-dphy: Enable lower resolutions in dphy Heiner Kallweit (1): net: phy: fixed_phy: let fixed_phy_unregister free the phy_device Horatiu Vultur (1): net: lan966x: Fix the initialization of taprio Hoyoung Seo (1): scsi: ufs: core: Include UTP error in INT_FATAL_ERRORS Huacai Chen (2): LoongArch: Use physical addresses for CSR_MERRENTRY/CSR_TLBRENTRY LoongArch: Don't panic if no valid cache info for PCI Hugo Villeneuve (4): serial: sc16is7xx: remove unused to_sc16is7xx_port macro serial: sc16is7xx: reorder code to remove prototype declarations serial: sc16is7xx: refactor EFR lock serial: sc16is7xx: remove useless enable of enhanced features Huisong Li (2): mailbox: pcc: Add support for platform notification handling mailbox: pcc: Support shared interrupt for multiple subspaces Ian Forbes (1): drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE Ian Rogers (1): tools bitmap: Add missing asm-generic/bitsperlong.h include Ido Schimmel (2): bridge: Redirect to backup port when port is administratively down selftests: traceroute: Use require_command() Igor Pylypiv (1): scsi: pm80xx: Set phy->enable_completion only when we Ilan Peer (1): wifi: mac80211: Fix HE capabilities element check Ilia Gavrilov (1): Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() Ilya Dryomov (1): libceph: fix potential use-after-free in have_mon_and_osd_map() Ilya Maximets (1): net: openvswitch: remove never-working support for setting nsh fields Inochi Amaoto (1): irqchip/sifive-plic: Respect mask state when setting affinity Isaac J. Manjarres (1): mm/mm_init: fix hash table order logging in alloc_large_system_hash() Ivan Pravdin (1): Bluetooth: bcsp: receive data only if registered Ivan Zhaldak (1): ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 Jacob Moroni (3): RDMA/irdma: Fix SD index calculation RDMA/irdma: Remove unused struct irdma_cq fields RDMA/irdma: Set irdma_cq cq_num field during CQ create Jakub Horký (2): kconfig/mconf: Initialize the default locale at startup kconfig/nconf: Initialize the default locale at startup Jakub Kicinski (3): selftests: net: replace sleeps in fcnal-test with waits page_pool: always add GFP_NOWARN for ATOMIC allocations selftests: netdevsim: set test timeout to 10 minutes Jameson Thies (1): usb: typec: ucsi: psy: Set max current to zero when disconnected Jamie Iles (2): mailbox: pcc: don't zero error register drivers/usb/dwc3: fix PCI parent check Janusz Krzysztofik (1): drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD Jason Gunthorpe (1): iommufd: Don't overflow during division for dirty tracking Jayesh Choudhary (1): drm/tidss: Set crtc modesetting parameters with adjusted mode Jens Kehne (1): mfd: da9063: Split chip variant reading in two bus transactions Jens Reidel (1): soc: qcom: smem: Fix endian-unaware access of num_entries Jerome Brunet (1): NTB: epf: Allow arbitrary BAR mapping Jesse.Zhang (1): drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices Jianbo Liu (1): xfrm: Determine inner GSO type from packet inner protocol Jiayi Li (1): memstick: Add timeout to prevent indefinite waiting Jiayuan Chen (2): mptcp: Disallow MPTCP subflows from sockmap mptcp: Fix proto fallback detection with BPF Jiefeng Zhang (1): net: atlantic: fix fragment overflow handling in RX path Jijie Shao (1): net: hns3: return error code when function fails Jimmy Hu (1): usb: gadget: udc: fix use-after-free in usb_gadget_state_work Jiri Olsa (2): uprobe: Do not emulate/sstep original instruction when ip is changed Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" Johan Hovold (2): most: usb: fix double free on late probe failure drm: sti: fix device leaks at component probe Johannes Berg (1): wifi: mac80211: reject address change while connecting John Keeping (1): ALSA: serial-generic: remove shared static buffer John Smith (2): drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland Jonas Gorski (4): net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx net: dsa: b53: fix resetting speed and pause on forced link net: dsa: b53: fix enabling ip multicast net: dsa: b53: stop reading ARL entries if search is done Josh Poimboeuf (1): perf: Have get_perf_callchain() return NULL if crosstask and user are set Joshua Rogers (2): smb: client: validate change notify buffer before copy ksmbd: close accepted socket when per-IP limit rejects connection Joshua Watt (1): NFS4: Fix state renewals missing after boot Josua Mayer (1): rtc: pcf2127: clear minute/second interrupt Julian Sun (1): ext4: increase IO priority of fastcommit Junjie Cao (1): fbdev: bitblit: bound-check glyph index in bit_putcs* Junxian Huang (1): RDMA/hns: Fix wrong WQE data when QP wraps around Juraj Šarinay (1): net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms Justin Tee (3): scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup scsi: lpfc: Define size of debugfs entry for xri rebalancing K Prateek Nayak (1): drivers: base: cacheinfo: Update cpu_map_populated during CPU Hotplug Kai-Heng Feng (2): PM: suspend: Fix pm_suspend_target_state handling for !CONFIG_PM net: aquantia: Add missing descriptor cache invalidation on ATL2 Kailang Yang (1): ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again Kalesh AP (1): bnxt_en: Fix a possible memory leak in bnxt_ptp_init Kaushlendra Kumar (3): tools/cpupower: fix error return value in cpupower_write_sysfs() tools/cpupower: Fix incorrect size in cpuidle_state_disable() tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage Kees Cook (1): arc: Fix __fls() const-foldability via __builtin_clzl() Khairul Anuar Romli (1): firmware: stratix10-svc: fix bug in saving controller data Kirill A. Shutemov (1): x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall Kiryl Shutsemau (1): mm/truncate: unmap large folio on split failure Koakuma (1): sparc/module: Add R_SPARC_UA64 relocation handling Krishna Kurapati (1): usb: xhci: plat: Facilitate using autosuspend for xhci plat devices Krzysztof Kozlowski (5): extcon: adc-jack: Fix wakeup source leaks on device unbind drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL drm/msm/dsi/phy_7nm: Fix missing initial VCO rate extcon: adc-jack: Cleanup wakeup source only if it was enabled dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups Kuen-Han Tsai (2): usb: gadget: f_eem: Fix memory leak in eem_unwrap usb: udc: Add trace event for usb_gadget_set_state Kuniyuki Iwashima (3): net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV. tipc: Fix use-after-free in tipc_mon_reinit_self(). af_unix: Initialise scc_index in unix_add_edge(). Lance Yang (1): mm/secretmem: fix use-after-free race in fault handler Laurent Pinchart (2): media: pci: ivtv: Don't create fake v4l2_fh media: amphion: Delete v4l2_fh synchronously in .release() Len Brown (2): tools/power x86_energy_perf_policy: Enhance HWP enable tools/power x86_energy_perf_policy: Prefer driver HWP limits Li RongQing (1): x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT Lijo Lazar (2): drm/amd/pm: Use cached metrics data on aldebaran drm/amd/pm: Use cached metrics data on arcturus Linus Walleij (1): iio: accel: bmc150: Fix irq assumption regression Lizhi Xu (1): usbnet: Prevents free active kevent Loic Poulain (2): wifi: ath10k: Fix memory leak on unsupported WMI command wifi: ath10k: Fix connection after GTK rekeying Long Li (1): uio_hv_generic: Set event for all channels on the device Luiz Augusto von Dentz (4): Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00 Bluetooth: ISO: Fix another instance of dst_type handling Bluetooth: SCO: Fix UAF on sco_conn_free Bluetooth: SMP: Fix not generating mackey and ltk when repairing Lukas Wunner (1): thunderbolt: Use is_pciehp instead of is_hotplug_bridge Ma Ke (1): drm/tegra: dc: Fix reference leak in tegra_dc_couple() Maciej W. Rozycki (2): MIPS: Malta: Fix !EVA SOC-it PCI MMIO MIPS: mm: Prevent a TLB shutdown on initial uniquification Maher Sanalla (6): net/mlx5: Expose shared buffer registers bits and structs net/mlx5e: Add API to query/modify SBPR and SBCM registers net/mlx5e: Update shared buffer along with device buffer changes net/mlx5e: Consider internal buffers size in port buffer calculations net/mlx5: Fix memory leak in error flow of port set buffer net/mlx5e: Do not update SBCM when prio2buffer command is invalid Manish Nagar (1): usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths Marc Kleine-Budde (3): can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling Marcos Del Sol Vives (1): PCI: Disable MSI on RDC PCI to PCIe bridges Mario Limonciello (2): PCI/PM: Skip resuming to D0 if device is disconnected drm/amd: Fix suspend failure with secure display TA Mario Limonciello (AMD) (2): drm/amd: Avoid evicting resources at S5 HID: amd_sfh: Stop sensor before starting Martin Kaiser (1): maple_tree: fix tracepoint string pointers Masami Ichikawa (1): HID: hid-ntrig: Prevent memory leak in ntrig_report_version() Mathias Nyman (6): xhci: dbc: Provide sysfs option to configure dbc descriptors xhci: dbc: poll at different rate depending on data transfer activity xhci: dbc: Improve performance by removing delay in transfer event polling. xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive. xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event xhci: dbgtty: Fix data corruption when transmitting data form DbC to host Matthias Schiffer (1): clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled Matthieu Baerts (NGI0) (6): mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR selftests: mptcp: join: mark 'delete re-add signal' as skipped if not supported selftests: mptcp: connect: trunc: read all recv data selftests: mptcp: join: rm: set backup flag selftests: mptcp: connect: fix fallback note due to OoO selftests: mptcp: join: endpoints: longer transfer Mehdi Djait (1): media: i2c: Kconfig: Ensure a dependency on HAVE_CLK for VIDEO_CAMERA_SENSOR Menglong Dong (1): arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c Miaoqian Lin (6): net: usb: asix_devices: Check return value of usbnet_get_endpoints fbdev: valkyriefb: Fix reference count leak in valkyriefb_init pmdomain: imx: Fix reference count leak in imx_gpc_remove slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves serial: amba-pl011: prefer dma_mapping_error() over explicit address checking usb: cdns3: Fix double resource release in cdns3_pci_probe Michael Riesch (1): phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0 Michal Hocko (1): mm, percpu: do not consider sleepable allocations atomic Michal Luczaj (1): vsock: Ignore signal/timeout on connect() if already established Mike Marshall (1): orangefs: fix xattr related buffer overflow... Mikko Perttunen (1): gpu: host1x: Select context device based on attached IOMMU Mikulas Patocka (1): dm-verity: fix unreliable memory allocation Ming Wang (1): irqchip/loongson-pch-lpc: Use legacy domain for PCH-LPC IRQ controller Miroslav Lichvar (1): ptp: Limit time setting of PTP clocks Nai-Chen Cheng (1): selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency Nam Cao (1): eventpoll: Replace rwlock with spinlock Namjae Jeon (1): ksmbd: use sock_create_kern interface to create kernel socket Naohiro Aota (1): btrfs: zoned: refine extent allocator hint selection Nate Karstens (1): strparser: Fix signed/unsigned mismatch bug Nathan Chancellor (1): lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC NeilBrown (1): nfsd: Replace clamp_t in nfsd4_get_drc_mem() Nicolas Escande (1): wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp() Nicolas Ferre (2): ARM: at91: pm: save and restore ACR during PLL disable/enable clk: at91: clk-sam9x60-pll: force write to PLL_UPDT register Niklas Cassel (1): ata: libata-scsi: Fix system suspend for a security locked drive Niklas Schnelle (2): powerpc/eeh: Use result of error_detected() in uevent s390/pci: Use pci_uevent_ers() in PCI recovery Niklas Söderlund (4): media: adv7180: Add missing lock in suspend callback media: adv7180: Do not write format to device in set_fmt media: adv7180: Only validate format in querystd net: sh_eth: Disable WoL if system can not suspend Nikolay Aleksandrov (2): net: bridge: fix use-after-free due to MST port state bypass net: bridge: fix MST static key usage Niravkumar L Rabara (3): EDAC/altera: Handle OCRAM ECC enable after warm reset EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection mtd: rawnand: cadence: fix DMA device NULL pointer dereference Nishanth Menon (1): net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error Noorain Eqbal (1): bpf: Sync pending IRQ work before freeing ring buffer Oleksandr Suvorov (1): USB: serial: ftdi_sio: add support for u-blox EVK-M101 Oleksij Rempel (1): net: dsa: microchip: lan937x: Fix RGMII delay tuning Olga Kornievskaia (2): NFSv4: handle ERR_GRACE on delegation recalls NFSD: free copynotify stateid in nfs4_free_ol_stateid() Ondrej Mosnacek (1): bpf: Do not audit capability check in do_jit() Owen Gu (2): usb: gadget: f_fs: Fix epfile null pointer access after ep enable. usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer Pablo Neira Ayuso (1): netfilter: nf_tables: reject duplicate device on updates Pankaj Raghav (1): filemap: cap PTE range to be created to allowed zero fill in folio_map_range() Paolo Abeni (8): mptcp: restore window probe mptcp: drop bogus optimization in __mptcp_check_push() mptcp: fix ack generation for fallback msk mptcp: fix premature close in case of fallback mptcp: avoid unneeded subflow-level drops mptcp: do not fallback when OoO is present mptcp: decouple mptcp fastclose from tcp close mptcp: fix duplicate reset on fastclose Paul Kocialkowski (1): media: verisilicon: Explicitly disable selection api ioctls for decoders Pauli Virtanen (5): Bluetooth: MGMT: cancel mesh send timer when hdev removed Bluetooth: 6lowpan: reset link-local header on ipv6 recv path Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions Bluetooth: L2CAP: export l2cap_chan_hold for modules Paulo Alcantara (1): smb: client: fix memory leak in cifs_construct_tcon() Pavel Zhigulin (3): net: dsa: hellcreek: fix missing error handling in LED registration net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get() net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() Pedro Tammela (2): net/sched: act_connmark: transition to percpu stats and rcu net/sched: act_connmark: handle errno on tcf_idr_check_alloc Peter Oberparleiter (1): gcov: add support for GCC 15 Peter Wang (2): scsi: ufs: host: mediatek: Change reset sequence for improved stability scsi: ufs: host: mediatek: Enhance recovery on resume failure Peter Zijlstra (1): compiler_types: Move unused static inline functions warning to W=2 Petr Machata (1): net: bridge: Install FDB for bridge MAC on VLAN 0 Philipp Hortmann (1): staging: rtl8712: Remove driver using deprecated API wext Philipp Stanner (1): drm/sched: Fix race in drm_sched_entity_select_rq() Pierre Gondois (8): cacheinfo: Use RISC-V's init_cache_level() as generic OF implementation cacheinfo: Return error code in init_of_cache_level() cacheinfo: Check 'cache-unified' property to count cache leaves ACPI: PPTT: Remove acpi_find_cache_levels() ACPI: PPTT: Update acpi_find_last_cache_level() to acpi_get_cache_info() arch_topology: Build cacheinfo from primary CPU cacheinfo: Initialize variables in fetch_cache_info() arm64: tegra: Update cache properties Po-Hsu Lin (1): selftests: net: use BASH for bareudp testing Pranav Tyagi (1): futex: Don't leak robust_list pointer on exec race Prateek Agarwal (1): drm/tegra: Add call to put_pid() Qendrim Maxhuni (1): net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup Qianfeng Rong (2): scsi: pm8001: Use int instead of u32 to store error codes media: redrat3: use int type to store negative error codes Qingfang Deng (1): 6pack: drop redundant locking and refcounting Qinxin Xia (1): dma-mapping: benchmark: Restore padding to ensure uABI remained consistent Quan Zhou (1): wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device Quanmin Yan (1): fbcon: Set fb_display[i]->mode to NULL when the mode is released Rafael J. Wysocki (1): cpuidle: Fail cpuidle device registration if there is one already Rafał Miłecki (1): bcma: don't register devices disabled in OF Randall P. Embry (2): 9p: fix /sys/fs/9p/caches overwriting itself 9p: sysfs_init: don't hardcode error to ENOMEM Ranganath V N (2): net: sched: act_connmark: initialize struct tc_ife to fix kernel leak net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak Ranjan Kumar (1): scsi: mpt3sas: Add support for 22.5 Gbps SAS link rate Raphael Pinsonneault-Thibeault (2): Bluetooth: hci_event: validate skb length for unknown CC opcode Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF René Rebe (1): ALSA: usb-audio: fix uac2 clock source at terminal parser Ricardo B. Marlière (2): selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 selftests/bpf: Upon failures, exit with code 1 in test_xsk.sh Richard Gobert (1): selftests/net: fix GRO coalesce test and add ext header coalesce tests Robert Marko (1): net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X Rodrigo Gobbi (1): iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register Rohan G Thomas (1): net: phy: marvell: Fix 88e1510 downshift counter errata Rosen Penev (1): dmaengine: mv_xor: match alloc_wc and free_wc Roy Vegard Ovesen (2): ALSA: usb-audio: fix control pipe direction ALSA: usb-audio: add mono main switch to Presonus S1824c Russell King (Oracle) (1): net: dsa: sja1105: simplify static configuration reload Ryan Chen (1): soc: aspeed: socinfo: Add AST27xx silicon IDs Ryan Wanner (1): clk: at91: clk-master: Add check for divide by 3 Ryusuke Konishi (1): nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() Sabrina Dubroca (1): espintcp: fix skb leaks Sakari Ailus (1): ACPI: property: Return present device nodes only on fwnode interface Saket Dumbre (1): ACPICA: Update dsmethod.c to get rid of unused variable warning Sangwook Shin (1): watchdog: s3c2410_wdt: Fix max_timeout being calculated larger Sarthak Garg (1): mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card Sascha Hauer (1): tools: lib: thermal: use pkg-config to locate libnl3 Sathishkumar S (1): drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff Scott Mayhew (1): NFS: check if suid/sgid was cleared after a write as needed Sean Heelan (1): ksmbd: fix use-after-free in session logoff Seungjin Bae (2): Input: pegasus-notetaker - fix potential out-of-bounds access can: kvaser_usb: leaf: Fix potential infinite loop in command parsers Seyediman Seyedarab (2): drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf() iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot() Shahar Shitrit (1): net: tls: Cancel RX async resync request on rcd_delta overflow Shang song (Lenovo) (1): ACPI: PRM: Skip handlers with NULL handler_address or NULL VA Sharique Mohammad (1): ASoC: max98090/91: fixed max98091 ALSA widget powering up/down Shaurya Rane (1): jfs: fix uninitialized waitqueue in transaction manager Shawn Lin (1): mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4 Shengjiu Wang (1): ASoC: fsl_sai: fix bit order for DSD format Shin'ichiro Kawasaki (1): nvme-multipath: fix lockdep WARN due to partition scan work Shuai Xue (1): acpi,srat: Fix incorrect device handle check for Generic Initiator Shuhao Fu (1): smb: client: fix refcount leak in smb2_set_path_attr Srinivas Kandagatla (1): ASoC: qdsp6: q6asm: do not sleep while atomic Srinivasan Shanmugam (1): drm/amdgpu: Fix function header names in amdgpu_connectors.c Stefan Wahren (1): ethernet: Extend device_get_mac_address() to use NVMEM Stefan Wiehler (3): sctp: Hold RCU read lock while iterating over address list sctp: Prevent TOCTOU out-of-bounds write sctp: Hold sock lock while iterating over address list Stephan Gerhold (1): remoteproc: qcom: q6v5: Avoid handling handover twice Steve French (1): cifs: fix typo in enable_gcm_256 module parameter Sudeep Holla (4): pmdomain: arm: scmi: Fix genpd leak on provider registration failure ACPI: PCC: Add PCC shared memory region command and status bitfields mailbox: pcc: Refactor error handling in irq handler into separate function i2c: xgene-slimpro: Migrate to use generic PCC shmem related macros Sumanth Gavini (1): softirq: Add trace points for tasklet entry/exit Sungho Kim (1): PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call Svyatoslav Ryhel (1): video: backlight: lp855x_bl: Set correct EPROM start for LP8556 Takashi Iwai (3): ALSA: usb-audio: Add validation of UAC2/UAC3 effect units ALSA: usb-audio: Fix potential overflow of PCM transfer buffer ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check Tetsuo Handa (3): media: imon: make send_packet() more robust ntfs3: pretend $Extend records as regular files jfs: Verify inode mode when loading from disk Thomas Andreatta (1): dmaengine: sh: setup_xref error handling Thomas Bogendoerfer (1): MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow Thomas Mühlbacher (1): can: sja1000: fix max irq loop handling Thomas Weißschuh (4): spi: loopback-test: Don't use %pK through printk soc: ti: pruss: don't use %pK through printk bpf: Don't use %pK through printk ice: Don't use %pK through printk or tracepoints Thomas Zimmermann (1): drm/sysfb: Do not dereference NULL pointer in plane reset Thorsten Blum (1): btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io() Théo Lebrun (1): net: macb: avoid dealing with endianness in macb_set_hwaddr() Tianchu Chen (1): usb: storage: sddr55: Reject out-of-bound new_pba Tianyang Zhang (1): LoongArch: Let {pte,pmd}_modify() record the status of _PAGE_DIRTY Tiezhu Yang (2): net: stmmac: Check stmmac_hw_setup() in stmmac_resume() asm-generic: Unify uapi bitsperlong.h for arm64, riscv and loongarch Timur Kristóf (2): drm/amdgpu: Respect max pixel clock for HDMI and DVI-D (v2) drm/amd/pm: Disable MCLK switching on SI at high pixel clocks Tiwei Bie (1): um: Fix help message for ssl-non-raw Tom Stellard (1): bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21 Tomeu Vizoso (1): drm/etnaviv: fix flush sequence logic Tomi Valkeinen (1): drm/tidss: Use the crtc_* timings when programming the HW Tristan Lobb (1): HID: quirks: avoid Cooler Master MM712 dongle wakeup bug Tristram Ha (1): net: dsa: microchip: Fix reserved multicast address table programming Trond Myklebust (1): NFSv4: Fix an incorrect parameter when calling nfs4_call_sync() Tvrtko Ursulin (1): drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl Tzung-Bi Shih (1): Input: cros_ec_keyb - fix an invalid memory access Uday M Bhat (1): xhci: dbc: Allow users to modify DbC poll interval via sysfs Ujwal Kundur (1): rds: Fix endianness annotation for RDS_MPATH_HASH Umesh Nerlige Ramappa (1): drm/i915: Fix conversion between clock ticks and nanoseconds Uwe Kleine-König (1): usb: renesas_usbhs: Convert to platform remove callback returning void Valek Andrej (1): iio: accel: fix ADXL355 startup race condition Valerio Setti (1): ASoC: meson: aiu-encoder-i2s: fix bit clock polarity Vanillan Wang (1): USB: serial: option: add support for Rolling RW101R-GL Viacheslav Dubeyko (1): ceph: add checking of wait_for_completion_killable() return value Vladimir Oltean (1): net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic Vladimir Riabchun (1): ftrace: Fix softlockup in ftrace_module_enable Vladimir Zapolskiy (1): media: i2c: og01a1b: Specify monochrome media bus format instead of Bayer Vlastimil Babka (1): mm/mempool: fix poisoning order>0 pages with HIGHMEM Wake Liu (2): selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8 selftests/net: Ensure assert() triggers in psock_tpacket.c Wang Liang (1): selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing ethtool-common.sh Wei Fang (1): net: fec: correct rx_bytes statistic for the case SHIFT16 is set Wei Yang (1): fs/proc: fix uaf in proc_readdir_de() William Wu (1): usb: gadget: f_hid: Fix zero length packet transfer Wonkon Kim (1): scsi: ufs: core: Initialize value of an attribute returned by uic cmd Xiang Mei (1): net/sched: sch_qfq: Fix null-deref in agg_dequeue Xu Yang (1): dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp Yafang Shao (1): net/cls_cgroup: Fix task_get_classid() during qdisc run Yang Wang (1): drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table() Yicong Yang (1): cacheinfo: Fix LLC is not exported through sysfs Yifan Zha (1): drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled Yihang Li (1): ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan() Yikang Yue (1): fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink Yipeng Zou (1): timers: Fix NULL function pointer race in timer_shutdown_sync() Yongpeng Yang (1): exfat: check return value of sb_min_blocksize in exfat_read_boot_sector Yosry Ahmed (1): KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated Yue Haibing (1): ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled Yuhao Jiang (1): ACPI: video: Fix use-after-free in acpi_video_switch_brightness() Yuta Hayama (1): rtc: rx8025: fix incorrect register reference Zhang Chujun (1): tracing/tools: Fix incorrcet short option in usage text for --threads Zhang Heng (1): HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155 ZhangGuoDong (2): smb/server: fix possible memory leak in smb2_read() smb/server: fix possible refcount leak in smb2_sess_setup() Zijun Hu (1): char: misc: Does not request module for miscdevice with dynamic minor Zilin Guan (2): tracing: Fix memory leaks in create_field_var() mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() austinchang (1): btrfs: mark dirty extent range for out of bound prealloc extents chuguangqing (1): fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock luoguangfei (1): net: macb: fix unregister_netdev call order in macb_remove() raub camaioni (1): usb: gadget: f_ncm: Fix MAC assignment NCM ethernet wenglianfa (1): RDMA/hns: Fix the modification of max_send_sge ziming zhang (2): libceph: prevent potential out-of-bounds writes in handle_auth_session_key() libceph: replace BUG_ON with bounds check for map->max_osd Łukasz Bartosik (1): xhci: dbgtty: fix device unregister

3 days, 9 hours

1
1
0 0

Linux 5.15.197

by Greg Kroah-Hartman

I'm announcing the release of the 5.15.197 kernel. All users of the 5.15 kernel series must upgrade. The updated 5.15.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.15.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/ABI/testing/sysfs-bus-pci-drivers-xhci_hcd | 62 Documentation/devicetree/bindings/pinctrl/toshiba,visconti-pinctrl.yaml | 26 Documentation/devicetree/bindings/usb/fsl,imx8mp-dwc3.yaml | 10 Documentation/kbuild/makefiles.rst | 29 Documentation/process/howto.rst | 2 Documentation/translations/it_IT/process/howto.rst | 2 Documentation/translations/ja_JP/howto.rst | 2 Documentation/translations/ko_KR/howto.rst | 2 Documentation/translations/zh_CN/process/howto.rst | 2 Documentation/translations/zh_TW/process/howto.rst | 2 MAINTAINERS | 7 Makefile | 8 arch/arc/include/asm/bitops.h | 2 arch/arm/crypto/Kconfig | 2 arch/arm/mach-at91/pm_suspend.S | 8 arch/mips/boot/dts/lantiq/danube.dtsi | 6 arch/mips/lantiq/xway/sysctrl.c | 2 arch/mips/loongson64/Platform | 2 arch/mips/mm/tlb-r4k.c | 100 arch/mips/mti-malta/malta-init.c | 20 arch/parisc/boot/compressed/Makefile | 2 arch/powerpc/kernel/eeh_driver.c | 2 arch/riscv/kernel/cpu-hotplug.c | 1 arch/riscv/mm/ptdump.c | 2 arch/s390/Makefile | 6 arch/s390/purgatory/Makefile | 2 arch/sparc/include/asm/elf_64.h | 1 arch/sparc/kernel/module.c | 1 arch/um/drivers/ssl.c | 5 arch/x86/Makefile | 2 arch/x86/boot/compressed/Makefile | 2 arch/x86/entry/vsyscall/vsyscall_64.c | 17 arch/x86/events/core.c | 10 arch/x86/kernel/cpu/bugs.c | 5 arch/x86/kernel/cpu/resctrl/monitor.c | 10 arch/x86/kernel/kvm.c | 20 arch/x86/net/bpf_jit_comp.c | 2 block/partitions/core.c | 5 drivers/acpi/acpi_video.c | 4 drivers/acpi/acpica/dsmethod.c | 10 drivers/acpi/numa/srat.c | 2 drivers/acpi/prmt.c | 19 drivers/acpi/property.c | 24 drivers/acpi/scan.c | 2 drivers/acpi/video_detect.c | 8 drivers/ata/libata-scsi.c | 8 drivers/atm/fore200e.c | 2 drivers/base/regmap/regmap-slimbus.c | 6 drivers/bluetooth/btusb.c | 13 drivers/bluetooth/hci_bcsp.c | 3 drivers/char/misc.c | 8 drivers/clk/at91/clk-master.c | 3 drivers/clk/ti/clk-33xx.c | 2 drivers/clocksource/timer-vf-pit.c | 22 drivers/cpufreq/longhaul.c | 3 drivers/cpufreq/tegra186-cpufreq.c | 27 drivers/cpuidle/cpuidle.c | 8 drivers/dma/dw-edma/dw-edma-core.c | 22 drivers/dma/mv_xor.c | 4 drivers/dma/sh/shdma-base.c | 25 drivers/dma/sh/shdmac.c | 17 drivers/edac/altera_edac.c | 22 drivers/extcon/extcon-adc-jack.c | 2 drivers/firmware/arm_scmi/scmi_pm_domain.c | 13 drivers/firmware/efi/libstub/Makefile | 2 drivers/firmware/stratix10-svc.c | 7 drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 19 drivers/gpu/drm/amd/amdgpu/amdgpu_jpeg.c | 6 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 8 drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 9 drivers/gpu/drm/amd/display/dc/core/dc_stream.c | 11 drivers/gpu/drm/amd/display/dc/dcn20/Makefile | 2 drivers/gpu/drm/amd/display/dc/dcn21/Makefile | 2 drivers/gpu/drm/amd/display/dc/dcn30/Makefile | 2 drivers/gpu/drm/amd/display/dc/dcn301/Makefile | 2 drivers/gpu/drm/amd/display/dc/dcn302/Makefile | 2 drivers/gpu/drm/amd/display/dc/dcn303/Makefile | 2 drivers/gpu/drm/amd/display/dc/dcn31/Makefile | 2 drivers/gpu/drm/amd/display/dc/dml/Makefile | 2 drivers/gpu/drm/amd/pm/powerplay/smumgr/fiji_smumgr.c | 2 drivers/gpu/drm/amd/pm/powerplay/smumgr/iceland_smumgr.c | 2 drivers/gpu/drm/amd/pm/swsmu/smu11/arcturus_ppt.c | 2 drivers/gpu/drm/amd/pm/swsmu/smu13/aldebaran_ppt.c | 2 drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c | 2 drivers/gpu/drm/bridge/display-connector.c | 3 drivers/gpu/drm/drm_gem_atomic_helper.c | 6 drivers/gpu/drm/etnaviv/etnaviv_buffer.c | 2 drivers/gpu/drm/i915/i915_vma.c | 16 drivers/gpu/drm/msm/adreno/a6xx_gmu.c | 5 drivers/gpu/drm/msm/adreno/a6xx_gpu.c | 3 drivers/gpu/drm/msm/dsi/phy/dsi_phy_7nm.c | 10 drivers/gpu/drm/nouveau/nvkm/core/enum.c | 2 drivers/gpu/drm/scheduler/sched_entity.c | 3 drivers/gpu/drm/sti/sti_vtg.c | 7 drivers/gpu/drm/tegra/dc.c | 1 drivers/gpu/drm/tidss/tidss_crtc.c | 7 drivers/gpu/drm/tidss/tidss_dispc.c | 16 drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 5 drivers/hid/hid-ids.h | 7 drivers/hid/hid-ntrig.c | 7 drivers/hid/hid-quirks.c | 14 drivers/hwmon/dell-smm-hwmon.c | 7 drivers/hwmon/sbtsi_temp.c | 46 drivers/iio/accel/bmc150-accel-core.c | 5 drivers/iio/accel/bmc150-accel.h | 1 drivers/iio/adc/spear_adc.c | 9 drivers/iio/common/ssp_sensors/ssp_dev.c | 4 drivers/iio/imu/st_lsm6dsx/st_lsm6dsx.h | 22 drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 11 drivers/infiniband/hw/irdma/pble.c | 2 drivers/infiniband/hw/irdma/verbs.c | 4 drivers/infiniband/hw/irdma/verbs.h | 8 drivers/input/keyboard/cros_ec_keyb.c | 6 drivers/input/keyboard/imx_sc_key.c | 2 drivers/input/misc/ati_remote2.c | 2 drivers/input/misc/cm109.c | 2 drivers/input/misc/powermate.c | 2 drivers/input/misc/yealink.c | 2 drivers/input/tablet/acecad.c | 2 drivers/input/tablet/pegasus_notetaker.c | 11 drivers/iommu/amd/init.c | 28 drivers/iommu/intel/debugfs.c | 10 drivers/iommu/intel/perf.c | 10 drivers/iommu/intel/perf.h | 5 drivers/irqchip/irq-gic-v2m.c | 13 drivers/isdn/hardware/mISDN/hfcsusb.c | 18 drivers/mailbox/mailbox-test.c | 2 drivers/md/dm-verity-fec.c | 6 drivers/media/i2c/ir-kbd-i2c.c | 6 drivers/media/pci/ivtv/ivtv-alsa-pcm.c | 2 drivers/media/pci/ivtv/ivtv-driver.h | 3 drivers/media/pci/ivtv/ivtv-fileops.c | 18 drivers/media/pci/ivtv/ivtv-irq.c | 4 drivers/media/rc/imon.c | 61 drivers/media/rc/redrat3.c | 2 drivers/media/tuners/xc4000.c | 8 drivers/media/tuners/xc5000.c | 12 drivers/memstick/core/memstick.c | 8 drivers/mfd/da9063-i2c.c | 27 drivers/mfd/madera-core.c | 4 drivers/mfd/stmpe-i2c.c | 1 drivers/mfd/stmpe.c | 3 drivers/mmc/host/renesas_sdhi_core.c | 6 drivers/mmc/host/sdhci-msm.c | 15 drivers/mmc/host/sdhci-of-dwcmshc.c | 2 drivers/most/most_usb.c | 14 drivers/mtd/nand/onenand/onenand_samsung.c | 2 drivers/mtd/nand/raw/cadence-nand-controller.c | 3 drivers/net/can/sja1000/sja1000.c | 4 drivers/net/can/sun4i_can.c | 4 drivers/net/can/usb/gs_usb.c | 23 drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c | 4 drivers/net/dsa/b53/b53_common.c | 15 drivers/net/dsa/b53/b53_regs.h | 3 drivers/net/dsa/hirschmann/hellcreek_ptp.c | 14 drivers/net/dsa/sja1105/sja1105_main.c | 71 drivers/net/ethernet/aquantia/atlantic/aq_hw_utils.c | 22 drivers/net/ethernet/aquantia/atlantic/aq_hw_utils.h | 1 drivers/net/ethernet/aquantia/atlantic/aq_ring.c | 5 drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_b0.c | 19 drivers/net/ethernet/aquantia/atlantic/hw_atl2/hw_atl2.c | 2 drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c | 45 drivers/net/ethernet/cadence/macb_main.c | 4 drivers/net/ethernet/emulex/benet/be_main.c | 7 drivers/net/ethernet/freescale/fec_main.c | 2 drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 3 drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mdio.c | 9 drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_mdio.h | 2 drivers/net/ethernet/intel/fm10k/fm10k_common.c | 5 drivers/net/ethernet/intel/fm10k/fm10k_common.h | 2 drivers/net/ethernet/intel/fm10k/fm10k_pf.c | 2 drivers/net/ethernet/intel/fm10k/fm10k_vf.c | 2 drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 15 drivers/net/ethernet/mellanox/mlxsw/spectrum_flower.c | 6 drivers/net/ethernet/microchip/sparx5/Kconfig | 2 drivers/net/ethernet/qlogic/qede/qede_fp.c | 5 drivers/net/ethernet/qlogic/qede/qede_main.c | 2 drivers/net/ethernet/realtek/Kconfig | 2 drivers/net/ethernet/realtek/r8169_main.c | 6 drivers/net/ethernet/renesas/ravb_main.c | 99 drivers/net/ethernet/renesas/sh_eth.c | 4 drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c | 4 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 9 drivers/net/ethernet/ti/netcp_core.c | 10 drivers/net/phy/dp83867.c | 6 drivers/net/phy/marvell.c | 39 drivers/net/phy/mdio_bus.c | 5 drivers/net/usb/asix_devices.c | 12 drivers/net/usb/qmi_wwan.c | 6 drivers/net/usb/usbnet.c | 2 drivers/net/wireless/ath/ath10k/mac.c | 12 drivers/net/wireless/ath/ath10k/wmi.c | 40 drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c | 3 drivers/net/wireless/broadcom/brcm80211/brcmfmac/p2p.c | 28 drivers/net/wireless/broadcom/brcm80211/brcmfmac/p2p.h | 3 drivers/nvme/host/fc.c | 12 drivers/nvme/target/fc.c | 16 drivers/pci/controller/cadence/pcie-cadence-host.c | 2 drivers/pci/controller/cadence/pcie-cadence.c | 4 drivers/pci/controller/cadence/pcie-cadence.h | 6 drivers/pci/p2pdma.c | 2 drivers/pci/quirks.c | 3 drivers/phy/cadence/cdns-dphy.c | 4 drivers/phy/rockchip/phy-rockchip-inno-csidphy.c | 5 drivers/pinctrl/pinctrl-single.c | 4 drivers/platform/x86/intel/punit_ipc.c | 2 drivers/platform/x86/intel/speed_select_if/isst_if_mmio.c | 4 drivers/power/supply/sbs-charger.c | 16 drivers/ptp/ptp_clock.c | 13 drivers/regulator/fixed.c | 1 drivers/remoteproc/qcom_q6v5.c | 5 drivers/rtc/rtc-pcf2127.c | 4 drivers/rtc/rtc-rx8025.c | 2 drivers/s390/net/ctcm_mpc.c | 1 drivers/scsi/hosts.c | 5 drivers/scsi/libfc/fc_encode.h | 2 drivers/scsi/lpfc/lpfc_debugfs.h | 3 drivers/scsi/lpfc/lpfc_els.c | 6 drivers/scsi/lpfc/lpfc_init.c | 7 drivers/scsi/lpfc/lpfc_scsi.c | 14 drivers/scsi/mpi3mr/mpi3mr_fw.c | 10 drivers/scsi/pm8001/pm8001_ctl.c | 24 drivers/scsi/pm8001/pm8001_init.c | 1 drivers/scsi/pm8001/pm8001_sas.c | 4 drivers/scsi/pm8001/pm8001_sas.h | 4 drivers/scsi/sg.c | 10 drivers/slimbus/qcom-ngd-ctrl.c | 1 drivers/soc/aspeed/aspeed-socinfo.c | 4 drivers/soc/imx/gpc.c | 2 drivers/soc/qcom/smem.c | 2 drivers/soc/samsung/pm_domains.c | 11 drivers/soc/ti/knav_dma.c | 14 drivers/soc/ti/pruss.c | 2 drivers/spi/spi-bcm63xx.c | 14 drivers/spi/spi-loopback-test.c | 12 drivers/spi/spi.c | 10 drivers/staging/Kconfig | 2 drivers/staging/Makefile | 1 drivers/staging/rtl8712/Kconfig | 21 drivers/staging/rtl8712/Makefile | 35 drivers/staging/rtl8712/TODO | 13 drivers/staging/rtl8712/basic_types.h | 28 drivers/staging/rtl8712/drv_types.h | 176 drivers/staging/rtl8712/ethernet.h | 21 drivers/staging/rtl8712/hal_init.c | 401 - drivers/staging/rtl8712/ieee80211.c | 415 - drivers/staging/rtl8712/ieee80211.h | 165 drivers/staging/rtl8712/mlme_linux.c | 160 drivers/staging/rtl8712/mlme_osdep.h | 31 drivers/staging/rtl8712/mp_custom_oid.h | 287 - drivers/staging/rtl8712/os_intfs.c | 464 - drivers/staging/rtl8712/osdep_intf.h | 32 drivers/staging/rtl8712/osdep_service.h | 61 drivers/staging/rtl8712/recv_linux.c | 139 drivers/staging/rtl8712/recv_osdep.h | 39 drivers/staging/rtl8712/rtl8712_bitdef.h | 26 drivers/staging/rtl8712/rtl8712_cmd.c | 409 - drivers/staging/rtl8712/rtl8712_cmd.h | 231 drivers/staging/rtl8712/rtl8712_cmdctrl_bitdef.h | 96 drivers/staging/rtl8712/rtl8712_cmdctrl_regdef.h | 19 drivers/staging/rtl8712/rtl8712_debugctrl_bitdef.h | 41 drivers/staging/rtl8712/rtl8712_debugctrl_regdef.h | 32 drivers/staging/rtl8712/rtl8712_edcasetting_bitdef.h | 65 drivers/staging/rtl8712/rtl8712_edcasetting_regdef.h | 24 drivers/staging/rtl8712/rtl8712_efuse.c | 566 -- drivers/staging/rtl8712/rtl8712_efuse.h | 43 drivers/staging/rtl8712/rtl8712_event.h | 86 drivers/staging/rtl8712/rtl8712_fifoctrl_bitdef.h | 131 drivers/staging/rtl8712/rtl8712_fifoctrl_regdef.h | 61 drivers/staging/rtl8712/rtl8712_gp_bitdef.h | 68 drivers/staging/rtl8712/rtl8712_gp_regdef.h | 29 drivers/staging/rtl8712/rtl8712_hal.h | 142 drivers/staging/rtl8712/rtl8712_interrupt_bitdef.h | 44 drivers/staging/rtl8712/rtl8712_io.c | 99 drivers/staging/rtl8712/rtl8712_led.c | 1830 ------- drivers/staging/rtl8712/rtl8712_macsetting_bitdef.h | 34 drivers/staging/rtl8712/rtl8712_macsetting_regdef.h | 22 drivers/staging/rtl8712/rtl8712_powersave_bitdef.h | 39 drivers/staging/rtl8712/rtl8712_powersave_regdef.h | 26 drivers/staging/rtl8712/rtl8712_ratectrl_bitdef.h | 36 drivers/staging/rtl8712/rtl8712_ratectrl_regdef.h | 44 drivers/staging/rtl8712/rtl8712_recv.c | 1079 ---- drivers/staging/rtl8712/rtl8712_recv.h | 145 drivers/staging/rtl8712/rtl8712_regdef.h | 32 drivers/staging/rtl8712/rtl8712_security_bitdef.h | 35 drivers/staging/rtl8712/rtl8712_spec.h | 124 drivers/staging/rtl8712/rtl8712_syscfg_bitdef.h | 167 drivers/staging/rtl8712/rtl8712_syscfg_regdef.h | 44 drivers/staging/rtl8712/rtl8712_timectrl_bitdef.h | 50 drivers/staging/rtl8712/rtl8712_timectrl_regdef.h | 26 drivers/staging/rtl8712/rtl8712_wmac_bitdef.h | 50 drivers/staging/rtl8712/rtl8712_wmac_regdef.h | 36 drivers/staging/rtl8712/rtl8712_xmit.c | 745 --- drivers/staging/rtl8712/rtl8712_xmit.h | 108 drivers/staging/rtl8712/rtl871x_cmd.c | 796 --- drivers/staging/rtl8712/rtl871x_cmd.h | 764 --- drivers/staging/rtl8712/rtl871x_debug.h | 130 drivers/staging/rtl8712/rtl871x_eeprom.c | 220 drivers/staging/rtl8712/rtl871x_eeprom.h | 88 drivers/staging/rtl8712/rtl871x_event.h | 109 drivers/staging/rtl8712/rtl871x_ht.h | 33 drivers/staging/rtl8712/rtl871x_io.c | 147 drivers/staging/rtl8712/rtl871x_io.h | 236 - drivers/staging/rtl8712/rtl871x_ioctl.h | 95 drivers/staging/rtl8712/rtl871x_ioctl_linux.c | 2330 ---------- drivers/staging/rtl8712/rtl871x_ioctl_rtl.c | 520 -- drivers/staging/rtl8712/rtl871x_ioctl_rtl.h | 109 drivers/staging/rtl8712/rtl871x_ioctl_set.c | 355 - drivers/staging/rtl8712/rtl871x_ioctl_set.h | 45 drivers/staging/rtl8712/rtl871x_led.h | 118 drivers/staging/rtl8712/rtl871x_mlme.c | 1749 ------- drivers/staging/rtl8712/rtl871x_mlme.h | 205 drivers/staging/rtl8712/rtl871x_mp.c | 724 --- drivers/staging/rtl8712/rtl871x_mp.h | 275 - drivers/staging/rtl8712/rtl871x_mp_ioctl.c | 883 --- drivers/staging/rtl8712/rtl871x_mp_ioctl.h | 329 - drivers/staging/rtl8712/rtl871x_mp_phy_regdef.h | 1037 ---- drivers/staging/rtl8712/rtl871x_pwrctrl.c | 234 - drivers/staging/rtl8712/rtl871x_pwrctrl.h | 113 drivers/staging/rtl8712/rtl871x_recv.c | 670 -- drivers/staging/rtl8712/rtl871x_recv.h | 216 drivers/staging/rtl8712/rtl871x_rf.h | 55 drivers/staging/rtl8712/rtl871x_security.c | 1387 ----- drivers/staging/rtl8712/rtl871x_security.h | 218 drivers/staging/rtl8712/rtl871x_sta_mgt.c | 263 - drivers/staging/rtl8712/rtl871x_wlan_sme.h | 35 drivers/staging/rtl8712/rtl871x_xmit.c | 1059 ---- drivers/staging/rtl8712/rtl871x_xmit.h | 288 - drivers/staging/rtl8712/sta_info.h | 133 drivers/staging/rtl8712/usb_halinit.c | 307 - drivers/staging/rtl8712/usb_intf.c | 638 -- drivers/staging/rtl8712/usb_ops.c | 195 drivers/staging/rtl8712/usb_ops.h | 38 drivers/staging/rtl8712/usb_ops_linux.c | 508 -- drivers/staging/rtl8712/usb_osintf.h | 35 drivers/staging/rtl8712/wifi.h | 197 drivers/staging/rtl8712/wlan_bssdef.h | 223 drivers/staging/rtl8712/xmit_linux.c | 187 drivers/staging/rtl8712/xmit_osdep.h | 52 drivers/target/loopback/tcm_loop.c | 3 drivers/tee/tee_core.c | 2 drivers/thunderbolt/nhi.c | 2 drivers/thunderbolt/nhi.h | 1 drivers/thunderbolt/tb.c | 2 drivers/tty/serial/8250/8250_dw.c | 67 drivers/tty/serial/amba-pl011.c | 2 drivers/uio/uio_hv_generic.c | 21 drivers/usb/cdns3/cdns3-pci-wrap.c | 5 drivers/usb/cdns3/cdnsp-gadget.c | 8 drivers/usb/dwc3/core.c | 3 drivers/usb/dwc3/ep0.c | 1 drivers/usb/dwc3/gadget.c | 7 drivers/usb/gadget/function/f_eem.c | 7 drivers/usb/gadget/function/f_fs.c | 8 drivers/usb/gadget/function/f_hid.c | 4 drivers/usb/gadget/function/f_ncm.c | 3 drivers/usb/host/xhci-dbgcap.c | 261 + drivers/usb/host/xhci-dbgcap.h | 12 drivers/usb/host/xhci-dbgtty.c | 17 drivers/usb/host/xhci-plat.c | 1 drivers/usb/mon/mon_bin.c | 14 drivers/usb/renesas_usbhs/common.c | 18 drivers/usb/serial/ftdi_sio.c | 1 drivers/usb/serial/ftdi_sio_ids.h | 1 drivers/usb/serial/option.c | 10 drivers/usb/storage/sddr55.c | 6 drivers/usb/storage/transport.c | 16 drivers/usb/storage/uas.c | 5 drivers/usb/storage/unusual_devs.h | 2 drivers/usb/typec/ucsi/psy.c | 5 drivers/video/backlight/lp855x_bl.c | 2 drivers/video/fbdev/aty/atyfb_base.c | 8 drivers/video/fbdev/core/bitblit.c | 33 drivers/video/fbdev/pvr2fb.c | 2 drivers/video/fbdev/valkyriefb.c | 2 fs/9p/v9fs.c | 9 fs/btrfs/disk-io.c | 2 fs/btrfs/file.c | 10 fs/btrfs/scrub.c | 3 fs/btrfs/transaction.c | 2 fs/btrfs/tree-log.c | 48 fs/ceph/locks.c | 5 fs/cifs/connect.c | 1 fs/exfat/fatent.c | 11 fs/exfat/super.c | 5 fs/ext4/xattr.c | 2 fs/hpfs/namei.c | 18 fs/jfs/inode.c | 8 fs/jfs/jfs_txnmgr.c | 9 fs/nfs/nfs4client.c | 1 fs/nfs/nfs4proc.c | 15 fs/nfs/nfs4state.c | 3 fs/nfs/write.c | 3 fs/nfsd/nfs4proc.c | 7 fs/nfsd/nfs4state.c | 3 fs/ntfs3/inode.c | 1 fs/open.c | 10 fs/orangefs/xattr.c | 12 fs/proc/generic.c | 12 include/linux/array_size.h | 13 include/linux/ata.h | 1 include/linux/blk_types.h | 11 include/linux/compiler_types.h | 5 include/linux/filter.h | 22 include/linux/kernel.h | 7 include/linux/mm.h | 2 include/linux/shdma-base.h | 2 include/linux/string.h | 1 include/linux/usb.h | 16 include/net/act_api.h | 1 include/net/cls_cgroup.h | 2 include/net/nfc/nci_core.h | 2 include/net/pkt_sched.h | 25 include/net/tc_act/tc_connmark.h | 10 include/net/tls.h | 6 kernel/bpf/ringbuf.c | 2 kernel/events/uprobes.c | 7 kernel/gcov/gcc_4_7.c | 4 kernel/trace/trace_events_hist.c | 6 lib/crypto/Makefile | 2 mm/page_alloc.c | 2 mm/secretmem.c | 2 net/8021q/vlan.c | 2 net/bluetooth/6lowpan.c | 97 net/bluetooth/hci_event.c | 21 net/bluetooth/l2cap_core.c | 1 net/bluetooth/sco.c | 7 net/bluetooth/smp.c | 31 net/bridge/br_forward.c | 3 net/ceph/auth_x.c | 2 net/ceph/ceph_common.c | 53 net/ceph/debugfs.c | 14 net/core/netpoll.c | 7 net/core/page_pool.c | 12 net/core/sock.c | 15 net/dsa/tag_brcm.c | 10 net/hsr/hsr_device.c | 3 net/ipv4/netfilter/nf_reject_ipv4.c | 25 net/ipv4/nexthop.c | 6 net/ipv4/route.c | 5 net/ipv4/udp_tunnel_nic.c | 2 net/ipv6/addrconf.c | 4 net/ipv6/ah6.c | 50 net/ipv6/netfilter/nf_reject_ipv6.c | 30 net/ipv6/raw.c | 2 net/ipv6/udp.c | 2 net/mac80211/rx.c | 10 net/mptcp/options.c | 57 net/mptcp/pm_netlink.c | 26 net/mptcp/protocol.c | 47 net/mptcp/protocol.h | 1 net/mptcp/subflow.c | 8 net/netfilter/nf_tables_api.c | 15 net/openvswitch/actions.c | 68 net/openvswitch/flow_netlink.c | 64 net/openvswitch/flow_netlink.h | 2 net/rds/rds.h | 2 net/sched/act_bpf.c | 19 net/sched/act_connmark.c | 154 net/sched/act_csum.c | 13 net/sched/act_ct.c | 17 net/sched/act_ctinfo.c | 13 net/sched/act_gact.c | 13 net/sched/act_gate.c | 13 net/sched/act_ife.c | 25 net/sched/act_ipt.c | 31 net/sched/act_mirred.c | 13 net/sched/act_mpls.c | 13 net/sched/act_nat.c | 13 net/sched/act_pedit.c | 13 net/sched/act_police.c | 13 net/sched/act_sample.c | 13 net/sched/act_simple.c | 13 net/sched/act_skbedit.c | 13 net/sched/act_skbmod.c | 13 net/sched/act_tunnel_key.c | 13 net/sched/act_vlan.c | 13 net/sched/cls_bpf.c | 6 net/sched/sch_api.c | 10 net/sched/sch_generic.c | 17 net/sched/sch_hfsc.c | 16 net/sched/sch_qfq.c | 2 net/sctp/diag.c | 21 net/sctp/transport.c | 13 net/smc/smc_clc.c | 1 net/strparser/strparser.c | 2 net/tipc/net.c | 2 net/tls/tls_device.c | 4 net/vmw_vsock/af_vsock.c | 40 scripts/Makefile.compiler | 10 scripts/kconfig/mconf.c | 3 scripts/kconfig/nconf.c | 3 sound/pci/hda/patch_realtek.c | 17 sound/soc/codecs/cs4271.c | 10 sound/soc/codecs/max98090.c | 6 sound/soc/meson/aiu-encoder-i2s.c | 9 sound/soc/qcom/qdsp6/q6asm.c | 2 sound/usb/endpoint.c | 6 sound/usb/mixer.c | 4 sound/usb/mixer_s1810c.c | 28 sound/usb/validate.c | 9 tools/lib/bpf/bpf_tracing.h | 365 - tools/power/cpupower/lib/cpuidle.c | 5 tools/power/cpupower/lib/cpupower.c | 2 tools/power/x86/x86_energy_perf_policy/x86_energy_perf_policy.c | 30 tools/testing/selftests/Makefile | 2 tools/testing/selftests/bpf/progs/loop3.c | 4 tools/testing/selftests/bpf/test_lirc_mode2_user.c | 2 tools/testing/selftests/drivers/net/netdevsim/Makefile | 21 tools/testing/selftests/drivers/net/netdevsim/settings | 1 tools/testing/selftests/net/bareudp.sh | 2 tools/testing/selftests/net/fcnal-test.sh | 4 tools/testing/selftests/net/gro.c | 101 tools/testing/selftests/net/mptcp/mptcp_connect.sh | 2 tools/testing/selftests/net/mptcp/mptcp_join.sh | 54 tools/testing/selftests/net/psock_tpacket.c | 4 tools/testing/selftests/net/traceroute.sh | 13 tools/tracing/latency/latency-collector.c | 2 518 files changed, 3315 insertions(+), 29492 deletions(-) Aaron Kling (1): cpufreq: tegra186: Initialize all cores to max frequencies Abdun Nihaal (1): isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() Akhil P Oommen (1): drm/msm/a6xx: Fix GMU firmware parser Al Viro (2): allow finish_no_open(file, ERR_PTR(-E...)) nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing Alan Borzeszkowski (1): thunderbolt: Add support for Intel Wildcat Lake Alan Stern (1): USB: storage: Remove subclass and protocol overrides from Novatek quirk Albin Babu Varghese (1): fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds Alejandro Colomar (1): kernel.h: Move ARRAY_SIZE() to a separate header Aleksander Jan Bajkowski (3): mips: lantiq: danube: add missing properties to cpu node mips: lantiq: danube: add missing device_type in pci node mips: lantiq: xway: sysctrl: rename stp clock Aleksei Nikiforov (1): s390/ctcm: Fix double-kfree Alex Hung (1): drm/amd/display: Check NULL before accessing Alex Lu (1): Bluetooth: Add more enc key size check Alexander Stein (2): mfd: stmpe: Remove IRQ domain upon removal mfd: stmpe-i2c: Add missing MODULE_LICENSE Alexey Dobriyan (1): x86/boot: Compile boot code with -std=gnu11 too Alexey Klimov (1): regmap: slimbus: fix bus_context pointer in regmap init calls Alexey Kodanev (1): net: sxgbe: fix potential NULL dereference in sxgbe_rx() Alok Tiwari (2): udp_tunnel: use netdev_warn() instead of netdev_WARN() scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill() Amber Lin (1): drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption Amirreza Zarrabi (1): tee: allow a driver to allocate a tee_device without a pool Andrew Lunn (1): net: dsa: sja1105: Convert to mdiobus_c45_read Andrey Vatoropin (1): be2net: pass wrb_params in case of OS2BMC Andrii Nakryiko (3): libbpf: Normalize PT_REGS_xxx() macro definitions libbpf: Fix powerpc's stack register definition in bpf_tracing.h selftests/bpf: Don't rely on preserving volatile in PT_REGS macros in loop3 André Draszik (1): pmdomain: samsung: plug potential memleak during probe Andy Shevchenko (1): serial: 8250_dw: Use devm_add_action_or_reset() Anthony Iliopoulos (1): NFSv4.1: fix mount hang after CREATE_SESSION failure Antonino Maniscalco (1): drm/msm: make sure to not queue up recovery more than once Anubhav Singh (2): selftests/net: fix out-of-order delivery of FIN in gro:tcp test selftests/net: use destination options instead of hop-by-hop Armin Wolf (1): hwmon: (dell-smm) Add support for Dell OptiPlex 7040 Arnd Bergmann (1): mfd: madera: Work around false-positive -Wininitialized warning Artem Shimko (1): serial: 8250_dw: handle reset control deassert error Ashish Kalra (1): iommu/amd: Skip enabling command/event buffers for kdump Babu Moger (1): x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID Baochen Qiang (1): Revert "wifi: ath10k: avoid unnecessary wait for service ready message" Bart Van Assche (2): scsi: sg: Do not sleep in atomic context scsi: core: Fix a regression triggered by scsi_host_busy() Benjamin Berg (1): wifi: mac80211: skip rate verification for not captured PSDUs Biju Das (2): ravb: Exclude gPTP feature support for RZ/G2L mmc: host: renesas_sdhi: Fix the actual clock Björn Töpel (1): riscv, libbpf: Add RISC-V (RV64) support to bpf_tracing.h Brahmajit Das (1): net: intel: fm10k: Fix parameter idx set but not used Breno Leitao (1): net: netpoll: fix incorrect refcount handling causing incorrect cleanup Buday Csaba (1): net: mdio: fix resource leak in mdiobus_register_device() Celeste Liu (1): can: gs_usb: increase max interface to U8_MAX Chandrakanth Patil (1): scsi: mpi3mr: Fix controller init failure on fault during queue creation Charalampos Mitrodimas (1): net: ipv6: fix field-spanning memcpy warning in AH output Chelsy Ratnawat (1): media: fix uninitialized symbol warnings Chen Wang (1): PCI: cadence: Check for the existence of cdns_pcie::ops before using it Chen Yufeng (1): usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget Chi Zhang (1): pinctrl: single: fix bias pull up/down handling in pin_config_set Chi Zhiling (1): exfat: limit log print for IO error Christian Bruel (1): irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment Christoph Paasch (1): net: When removing nexthops, don't call synchronize_net if it is not necessary Christophe JAILLET (1): iio:common:ssp_sensors: Fix an error handling path ssp_probe() Chuande Chen (1): hwmon: (sbtsi_temp) AMD CPU extended temperature range support Chuang Wang (1): ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe Chuck Lever (1): NFSD: Fix crash in nfsd4_read_release() ChunHao Lin (1): r8169: set EEE speed down ratio to 1 Claudiu Beznea (1): usb: renesas_usbhs: Fix synchronous external abort on unbind D. Wythe (1): net/smc: fix mismatch between CLC header and proposal Damien Le Moal (2): block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL block: make REQ_OP_ZONE_OPEN a write operation Dan Carpenter (3): mtd: onenand: Pass correct pointer to IRQ handler Input: imx_sc_key - fix memory corruption on unload platform/x86: intel: punit_ipc: fix memory corruption Daniel Lezcano (1): clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel Daniel Palmer (2): fbdev: atyfb: Check if pll_ops->init_pll failed eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP Daniel T. Lee (1): libbpf: Fix invalid return address register in s390 Daniel Wagner (2): nvmet-fc: avoid scheduling association deletion twice nvme-fc: use lock accessing port_state and rport state Danielle Costantino (1): net/mlx5e: Fix validation logic in rate limiting Danil Skrebenkov (1): RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors David Ahern (2): selftests: Disable dad for ipv6 in fcnal-test.sh selftests: Replace sleep with slowwait David Kaplan (1): x86/bugs: Fix reporting of LFENCE retpoline David Wei (1): netdevsim: add Makefile for selftests Dennis Beier (1): cpufreq/longhaul: handle NULL policy in longhaul_exit Desnes Nunes (1): usb: storage: Fix memory leak in USB bulk transport Devendra K Verma (1): dmaengine: dw-edma: Set status for callback_result Dmitry Baryshkov (1): drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts Dragos Tatulea (1): page_pool: Clamp pool size to max 16K pages Emanuele Ghidoli (1): net: phy: dp83867: Disable EEE support as not implemented Eric Biggers (1): lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN Eric Dumazet (8): net: call cond_resched() less often in __release_sock() ipv6: np->rxpmtu race annotation sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto net_sched: act_connmark: use RCU in tcf_connmark_dump() net_sched: limit try_bulk_dequeue_skb() batches bpf: Add bpf_prog_run_data_pointers() mptcp: fix race condition in mptcp_schedule_work() mptcp: fix a race in mptcp_pm_del_add_timer() Ewan D. Milne (1): nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() Fabien Proriol (1): power: supply: sbs-charger: Support multiple devices Felix Maurer (1): hsr: Fix supervision frame sending on HSRv0 Filipe Manana (3): btrfs: always drop log root tree reference in btrfs_replay_log() btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot() btrfs: add helper to truncate inode items when logging inode Florian Fuchs (1): fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS Florian Westphal (1): netfilter: nf_reject: don't reply to icmp error messages Forest Crossman (1): usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs Francesco Lavra (1): iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields Francisco Gutierrez (1): scsi: pm80xx: Fix race condition caused by static variables Gal Pressman (2): net/mlx5e: Fix maxrate wraparound in threshold between units net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps Geoffrey McRae (1): drm/amdkfd: return -ENOTTY for unsupported IOCTLs Gokul Sivakumar (1): wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode Greg Kroah-Hartman (1): Linux 5.15.197 Gui-Dong Han (1): atm/fore200e: Fix possible data race in fore200e_open() Gulam Mohamed (2): Revert "block: Move checking GENHD_FL_NO_PART to bdev_add_partition()" Revert "block: don't add or resize partition on the disk with GENHD_FL_NO_PART" Haein Lee (1): ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd Hamza Mahfooz (1): scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() Hang Zhou (1): spi: bcm63xx: fix premature CS deassertion on RX-only transactions Hangbin Liu (1): net: vlan: sync VLAN features with lower device Hans de Goede (3): ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[] ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() spi: Try to get ACPI GPIO IRQ earlier Haotian Zhang (4): regulator: fixed: fix GPIO descriptor leak on register failure ASoC: cs4271: Fix regulator leak on probe failure platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos mailbox: mailbox-test: Fix debugfs_create_dir error checking Harikrishna Shenoy (1): phy: cadence: cdns-dphy: Enable lower resolutions in dphy Ian Forbes (1): drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE Ido Schimmel (2): bridge: Redirect to backup port when port is administratively down selftests: traceroute: Use require_command() Igor Pylypiv (1): scsi: pm80xx: Set phy->enable_completion only when we Ilya Dryomov (1): libceph: fix potential use-after-free in have_mon_and_osd_map() Ilya Leoshkevich (1): libbpf: Fix riscv register names Ilya Maximets (1): net: openvswitch: remove never-working support for setting nsh fields Isaac J. Manjarres (1): mm/mm_init: fix hash table order logging in alloc_large_system_hash() Ivan Pravdin (1): Bluetooth: bcsp: receive data only if registered Jacob Moroni (3): RDMA/irdma: Fix SD index calculation RDMA/irdma: Remove unused struct irdma_cq fields RDMA/irdma: Set irdma_cq cq_num field during CQ create Jakub Acs (1): mm/ksm: fix flag-dropping behavior in ksm_madvise Jakub Horký (2): kconfig/mconf: Initialize the default locale at startup kconfig/nconf: Initialize the default locale at startup Jakub Kicinski (2): page_pool: always add GFP_NOWARN for ATOMIC allocations selftests: netdevsim: set test timeout to 10 minutes Jameson Thies (1): usb: typec: ucsi: psy: Set max current to zero when disconnected Jamie Iles (1): drivers/usb/dwc3: fix PCI parent check Janusz Krzysztofik (1): drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD Jayesh Choudhary (1): drm/tidss: Set crtc modesetting parameters with adjusted mode Jens Kehne (1): mfd: da9063: Split chip variant reading in two bus transactions Jens Reidel (1): soc: qcom: smem: Fix endian-unaware access of num_entries Jiayi Li (1): memstick: Add timeout to prevent indefinite waiting Jiayuan Chen (2): mptcp: Disallow MPTCP subflows from sockmap mptcp: Fix proto fallback detection with BPF Jiefeng Zhang (1): net: atlantic: fix fragment overflow handling in RX path Jijie Shao (1): net: hns3: return error code when function fails Jiri Olsa (2): uprobe: Do not emulate/sstep original instruction when ip is changed Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" Johan Hovold (2): most: usb: fix double free on late probe failure drm: sti: fix device leaks at component probe John Smith (2): drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland Jonas Gorski (4): net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx net: dsa: b53: fix resetting speed and pause on forced link net: dsa: b53: fix enabling ip multicast net: dsa: b53: stop reading ARL entries if search is done Josephine Pfeiffer (1): riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro Joshua Watt (1): NFS4: Fix state renewals missing after boot Josua Mayer (1): rtc: pcf2127: clear minute/second interrupt Junjie Cao (1): fbdev: bitblit: bound-check glyph index in bit_putcs* Junxian Huang (1): RDMA/hns: Fix wrong WQE data when QP wraps around Juraj Šarinay (1): net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms Justin Tee (3): scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup scsi: lpfc: Define size of debugfs entry for xri rebalancing Kai-Heng Feng (1): net: aquantia: Add missing descriptor cache invalidation on ATL2 Kailang Yang (1): ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again Kalesh AP (1): bnxt_en: Fix a possible memory leak in bnxt_ptp_init Kaushlendra Kumar (3): tools/cpupower: fix error return value in cpupower_write_sysfs() tools/cpupower: Fix incorrect size in cpuidle_state_disable() tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage Kees Cook (1): arc: Fix __fls() const-foldability via __builtin_clzl() Khairul Anuar Romli (1): firmware: stratix10-svc: fix bug in saving controller data Kirill A. Shutemov (1): x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall Koakuma (1): sparc/module: Add R_SPARC_UA64 relocation handling Krishna Kurapati (1): usb: xhci: plat: Facilitate using autosuspend for xhci plat devices Krzysztof Kozlowski (5): extcon: adc-jack: Fix wakeup source leaks on device unbind drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL drm/msm/dsi/phy_7nm: Fix missing initial VCO rate extcon: adc-jack: Cleanup wakeup source only if it was enabled dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups Kuen-Han Tsai (1): usb: gadget: f_eem: Fix memory leak in eem_unwrap Kuniyuki Iwashima (2): net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV. tipc: Fix use-after-free in tipc_mon_reinit_self(). Lad Prabhakar (1): net: ravb: Enforce descriptor type ordering Lance Yang (1): mm/secretmem: fix use-after-free race in fault handler Laurent Pinchart (1): media: pci: ivtv: Don't create fake v4l2_fh Len Brown (2): tools/power x86_energy_perf_policy: Enhance HWP enable tools/power x86_energy_perf_policy: Prefer driver HWP limits Li RongQing (1): x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT Lijo Lazar (2): drm/amd/pm: Use cached metrics data on aldebaran drm/amd/pm: Use cached metrics data on arcturus Linus Walleij (1): iio: accel: bmc150: Fix irq assumption regression Lizhi Xu (1): usbnet: Prevents free active kevent Loic Poulain (2): wifi: ath10k: Fix memory leak on unsupported WMI command wifi: ath10k: Fix connection after GTK rekeying Long Li (1): uio_hv_generic: Set event for all channels on the device Luiz Augusto von Dentz (2): Bluetooth: SCO: Fix UAF on sco_conn_free Bluetooth: SMP: Fix not generating mackey and ltk when repairing Lukas Wunner (1): thunderbolt: Use is_pciehp instead of is_hotplug_bridge Ma Ke (1): drm/tegra: dc: Fix reference leak in tegra_dc_couple() Maciej W. Rozycki (2): MIPS: Malta: Fix !EVA SOC-it PCI MMIO MIPS: mm: Prevent a TLB shutdown on initial uniquification Manish Nagar (1): usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths Marc Kleine-Budde (1): can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling Marcos Del Sol Vives (1): PCI: Disable MSI on RDC PCI to PCIe bridges Mario Limonciello (AMD) (1): ACPI: video: force native for Lenovo 82K8 Masami Ichikawa (1): HID: hid-ntrig: Prevent memory leak in ntrig_report_version() Mathias Nyman (6): xhci: dbc: Provide sysfs option to configure dbc descriptors xhci: dbc: poll at different rate depending on data transfer activity xhci: dbc: Improve performance by removing delay in transfer event polling. xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive. xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event xhci: dbgtty: Fix data corruption when transmitting data form DbC to host Matthias Schiffer (1): clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled Matthieu Baerts (NGI0) (5): arch: back to -std=gnu89 in < v5.18 Revert "docs/process/howto: Replace C89 with C11" mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR selftests: mptcp: connect: fix fallback note due to OoO selftests: mptcp: join: rm: set backup flag Miaoqian Lin (6): net: usb: asix_devices: Check return value of usbnet_get_endpoints fbdev: valkyriefb: Fix reference count leak in valkyriefb_init pmdomain: imx: Fix reference count leak in imx_gpc_remove slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves serial: amba-pl011: prefer dma_mapping_error() over explicit address checking usb: cdns3: Fix double resource release in cdns3_pci_probe Michael Riesch (1): phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0 Michal Luczaj (1): vsock: Ignore signal/timeout on connect() if already established Mike Marshall (1): orangefs: fix xattr related buffer overflow... Mikulas Patocka (1): dm-verity: fix unreliable memory allocation Miroslav Lichvar (1): ptp: Limit time setting of PTP clocks Nai-Chen Cheng (1): selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency Nate Karstens (1): strparser: Fix signed/unsigned mismatch bug Nathan Chancellor (2): lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC net: qede: Initialize qede_ll_ops with designated initializer Nick Desaulniers (1): Makefile.compiler: replace cc-ifversion with compiler-specific macros Nicolas Ferre (1): ARM: at91: pm: save and restore ACR during PLL disable/enable Niklas Cassel (1): ata: libata-scsi: Fix system suspend for a security locked drive Niklas Schnelle (1): powerpc/eeh: Use result of error_detected() in uevent Niklas Söderlund (1): net: sh_eth: Disable WoL if system can not suspend Niravkumar L Rabara (3): EDAC/altera: Handle OCRAM ECC enable after warm reset EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection mtd: rawnand: cadence: fix DMA device NULL pointer dereference Nishanth Menon (1): net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error Noorain Eqbal (1): bpf: Sync pending IRQ work before freeing ring buffer Oleksandr Suvorov (1): USB: serial: ftdi_sio: add support for u-blox EVK-M101 Olga Kornievskaia (2): NFSv4: handle ERR_GRACE on delegation recalls NFSD: free copynotify stateid in nfs4_free_ol_stateid() Omar Sandoval (1): btrfs: fix crash on racing fsync and size-extending write into prealloc Ondrej Mosnacek (1): bpf: Do not audit capability check in do_jit() Owen Gu (2): usb: gadget: f_fs: Fix epfile null pointer access after ep enable. usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer Pablo Neira Ayuso (1): netfilter: nf_tables: reject duplicate device on updates Paolo Abeni (5): mptcp: restore window probe mptcp: fix ack generation for fallback msk mptcp: fix premature close in case of fallback mptcp: do not fallback when OoO is present mptcp: avoid unneeded subflow-level drops Pauli Virtanen (4): Bluetooth: 6lowpan: reset link-local header on ipv6 recv path Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions Bluetooth: L2CAP: export l2cap_chan_hold for modules Paulo Alcantara (1): smb: client: fix memory leak in cifs_construct_tcon() Pavan Chebbi (1): bnxt_en: PTP: Refactor PTP initialization functions Pavel Zhigulin (2): net: dsa: hellcreek: fix missing error handling in LED registration net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() Pedro Tammela (2): net/sched: act_connmark: transition to percpu stats and rcu net/sched: act_connmark: handle errno on tcf_idr_check_alloc Peter Oberparleiter (1): gcov: add support for GCC 15 Peter Zijlstra (1): compiler_types: Move unused static inline functions warning to W=2 Philipp Hortmann (1): staging: rtl8712: Remove driver using deprecated API wext Philipp Stanner (1): drm/sched: Fix race in drm_sched_entity_select_rq() Po-Hsu Lin (1): selftests: net: use BASH for bareudp testing Qendrim Maxhuni (1): net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup Qianfeng Rong (2): scsi: pm8001: Use int instead of u32 to store error codes media: redrat3: use int type to store negative error codes Rafael J. Wysocki (1): cpuidle: Fail cpuidle device registration if there is one already Randall P. Embry (2): 9p: fix /sys/fs/9p/caches overwriting itself 9p: sysfs_init: don't hardcode error to ENOMEM Ranganath V N (2): net: sched: act_connmark: initialize struct tc_ife to fix kernel leak net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak Raphael Pinsonneault-Thibeault (1): Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF René Rebe (1): ALSA: usb-audio: fix uac2 clock source at terminal parser Ricardo B. Marlière (1): selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 Richard Gobert (1): selftests/net: fix GRO coalesce test and add ext header coalesce tests Robert Marko (1): net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X Rodrigo Gobbi (1): iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register Rohan G Thomas (1): net: phy: marvell: Fix 88e1510 downshift counter errata Rosen Penev (1): dmaengine: mv_xor: match alloc_wc and free_wc Roy Vegard Ovesen (2): ALSA: usb-audio: fix control pipe direction ALSA: usb-audio: add mono main switch to Presonus S1824c Russell King (Oracle) (1): net: dsa: sja1105: simplify static configuration reload Ryan Chen (1): soc: aspeed: socinfo: Add AST27xx silicon IDs Ryan Wanner (1): clk: at91: clk-master: Add check for divide by 3 Sakari Ailus (1): ACPI: property: Return present device nodes only on fwnode interface Saket Dumbre (1): ACPICA: Update dsmethod.c to get rid of unused variable warning Sarthak Garg (1): mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card Sathishkumar S (1): drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff Scott Mayhew (1): NFS: check if suid/sgid was cleared after a write as needed Seungjin Bae (2): Input: pegasus-notetaker - fix potential out-of-bounds access can: kvaser_usb: leaf: Fix potential infinite loop in command parsers Seyediman Seyedarab (2): drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf() iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot() Shahar Shitrit (1): net: tls: Cancel RX async resync request on rcd_delta overflow Shang song (Lenovo) (1): ACPI: PRM: Skip handlers with NULL handler_address or NULL VA Sharique Mohammad (1): ASoC: max98090/91: fixed max98091 ALSA widget powering up/down Shaurya Rane (1): jfs: fix uninitialized waitqueue in transaction manager Shawn Lin (1): mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4 Shuai Xue (1): acpi,srat: Fix incorrect device handle check for Generic Initiator Srinivas Kandagatla (1): ASoC: qdsp6: q6asm: do not sleep while atomic Stefan Wiehler (3): sctp: Hold RCU read lock while iterating over address list sctp: Prevent TOCTOU out-of-bounds write sctp: Hold sock lock while iterating over address list Stephan Gerhold (1): remoteproc: qcom: q6v5: Avoid handling handover twice Sudeep Holla (1): pmdomain: arm: scmi: Fix genpd leak on provider registration failure Sungho Kim (1): PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call Svyatoslav Ryhel (1): video: backlight: lp855x_bl: Set correct EPROM start for LP8556 Takashi Iwai (3): ALSA: usb-audio: Add validation of UAC2/UAC3 effect units ALSA: usb-audio: Fix potential overflow of PCM transfer buffer ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check Tetsuo Handa (3): media: imon: make send_packet() more robust ntfs3: pretend $Extend records as regular files jfs: Verify inode mode when loading from disk Thomas Andreatta (1): dmaengine: sh: setup_xref error handling Thomas Mühlbacher (1): can: sja1000: fix max irq loop handling Thomas Weißschuh (3): spi: loopback-test: Don't use %pK through printk soc: ti: pruss: don't use %pK through printk bpf: Don't use %pK through printk Thomas Zimmermann (1): drm/sysfb: Do not dereference NULL pointer in plane reset Thorsten Blum (1): btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io() Théo Lebrun (1): net: macb: avoid dealing with endianness in macb_set_hwaddr() Tianchu Chen (1): usb: storage: sddr55: Reject out-of-bound new_pba Tiezhu Yang (1): net: stmmac: Check stmmac_hw_setup() in stmmac_resume() Tiwei Bie (1): um: Fix help message for ssl-non-raw Tomeu Vizoso (1): drm/etnaviv: fix flush sequence logic Tomi Valkeinen (1): drm/tidss: Use the crtc_* timings when programming the HW Tristan Lobb (1): HID: quirks: avoid Cooler Master MM712 dongle wakeup bug Trond Myklebust (1): NFSv4: Fix an incorrect parameter when calling nfs4_call_sync() Tvrtko Ursulin (1): drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl Tzung-Bi Shih (1): Input: cros_ec_keyb - fix an invalid memory access Uday M Bhat (1): xhci: dbc: Allow users to modify DbC poll interval via sysfs Ujwal Kundur (1): rds: Fix endianness annotation for RDS_MPATH_HASH Uwe Kleine-König (1): usb: renesas_usbhs: Convert to platform remove callback returning void Valerio Setti (1): ASoC: meson: aiu-encoder-i2s: fix bit clock polarity Vanillan Wang (1): USB: serial: option: add support for Rolling RW101R-GL Viacheslav Dubeyko (1): ceph: add checking of wait_for_completion_killable() return value Vincent Mailhol (2): usb: deprecate the third argument of usb_maxpacket() Input: remove third argument of usb_maxpacket() Vladimir Oltean (1): net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic Wake Liu (2): selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8 selftests/net: Ensure assert() triggers in psock_tpacket.c Wang Liang (1): selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing ethtool-common.sh Wei Fang (1): net: fec: correct rx_bytes statistic for the case SHIFT16 is set Wei Yang (1): fs/proc: fix uaf in proc_readdir_de() William Wu (1): usb: gadget: f_hid: Fix zero length packet transfer Xiang Mei (1): net/sched: sch_qfq: Fix null-deref in agg_dequeue Xu Yang (1): dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp Yafang Shao (1): net/cls_cgroup: Fix task_get_classid() during qdisc run Yang Wang (1): drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table() Yikang Yue (1): fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink Yixun Lan (1): libbpf, riscv: Use a0 for RC register Yongpeng Yang (1): exfat: check return value of sb_min_blocksize in exfat_read_boot_sector Yue Haibing (1): ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled Yuhao Jiang (1): ACPI: video: Fix use-after-free in acpi_video_switch_brightness() Yuta Hayama (1): rtc: rx8025: fix incorrect register reference Zhang Chujun (1): tracing/tools: Fix incorrcet short option in usage text for --threads Zhang Heng (1): HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155 Zhengchao Shao (2): net: sched: act: move global static variable net_id to tc_action_ops net: sched: act_connmark: get rid of tcf_connmark_walker and tcf_connmark_search Zijun Hu (1): char: misc: Does not request module for miscdevice with dynamic minor Zilin Guan (2): tracing: Fix memory leaks in create_field_var() mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() austinchang (1): btrfs: mark dirty extent range for out of bound prealloc extents chuguangqing (1): fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock raub camaioni (1): usb: gadget: f_ncm: Fix MAC assignment NCM ethernet ziming zhang (1): libceph: prevent potential out-of-bounds writes in handle_auth_session_key()

3 days, 9 hours

1
1
0 0

Linux 5.10.247

by Greg Kroah-Hartman

I'm announcing the release of the 5.10.247 kernel. All users of the 5.10 kernel series must upgrade. The updated 5.10.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.10.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/devicetree/bindings/pinctrl/toshiba,visconti-pinctrl.yaml | 26 + Documentation/kbuild/makefiles.rst | 29 +- Makefile | 6 arch/arc/include/asm/bitops.h | 2 arch/arm/crypto/Kconfig | 2 arch/arm/mach-at91/pm_suspend.S | 8 arch/mips/boot/dts/lantiq/danube.dtsi | 6 arch/mips/lantiq/xway/sysctrl.c | 2 arch/mips/loongson64/Platform | 2 arch/mips/mm/tlb-r4k.c | 100 ++++--- arch/mips/mti-malta/malta-init.c | 20 - arch/parisc/boot/compressed/Makefile | 2 arch/powerpc/Makefile | 4 arch/powerpc/kernel/eeh_driver.c | 2 arch/riscv/kernel/cpu-hotplug.c | 1 arch/riscv/mm/ptdump.c | 2 arch/s390/Makefile | 6 arch/s390/purgatory/Makefile | 2 arch/sparc/include/asm/elf_64.h | 1 arch/sparc/kernel/module.c | 1 arch/um/drivers/ssl.c | 5 arch/x86/Makefile | 2 arch/x86/boot/compressed/Makefile | 2 arch/x86/entry/vsyscall/vsyscall_64.c | 17 + arch/x86/events/core.c | 10 arch/x86/kernel/cpu/bugs.c | 5 arch/x86/kernel/cpu/resctrl/monitor.c | 10 arch/x86/kernel/kvm.c | 20 - drivers/acpi/acpi_video.c | 4 drivers/acpi/acpica/dsmethod.c | 10 drivers/acpi/numa/srat.c | 2 drivers/acpi/property.c | 24 + drivers/acpi/video_detect.c | 8 drivers/ata/libata-scsi.c | 8 drivers/atm/fore200e.c | 2 drivers/base/devcoredump.c | 138 ++++++---- drivers/base/regmap/regmap-slimbus.c | 6 drivers/bluetooth/btusb.c | 13 drivers/bluetooth/hci_bcsp.c | 3 drivers/char/misc.c | 8 drivers/clocksource/timer-vf-pit.c | 22 - drivers/cpufreq/longhaul.c | 3 drivers/cpuidle/cpuidle.c | 8 drivers/dma/dw-edma/dw-edma-core.c | 22 + drivers/dma/mv_xor.c | 4 drivers/dma/sh/shdma-base.c | 25 + drivers/dma/sh/shdmac.c | 17 - drivers/edac/altera_edac.c | 22 + drivers/extcon/extcon-adc-jack.c | 2 drivers/firmware/arm_scmi/scmi_pm_domain.c | 13 drivers/firmware/efi/libstub/Makefile | 2 drivers/firmware/stratix10-svc.c | 7 drivers/gpu/drm/amd/amdgpu/amdgpu_jpeg.c | 6 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 8 drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 9 drivers/gpu/drm/amd/display/dc/calcs/Makefile | 2 drivers/gpu/drm/amd/display/dc/core/dc_stream.c | 11 drivers/gpu/drm/amd/display/dc/dcn20/Makefile | 2 drivers/gpu/drm/amd/display/dc/dcn21/Makefile | 2 drivers/gpu/drm/amd/display/dc/dcn30/Makefile | 2 drivers/gpu/drm/amd/display/dc/dml/Makefile | 2 drivers/gpu/drm/amd/display/dc/dsc/Makefile | 2 drivers/gpu/drm/amd/pm/powerplay/smumgr/fiji_smumgr.c | 2 drivers/gpu/drm/amd/pm/powerplay/smumgr/iceland_smumgr.c | 2 drivers/gpu/drm/amd/pm/swsmu/smu11/arcturus_ppt.c | 2 drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c | 2 drivers/gpu/drm/bridge/display-connector.c | 3 drivers/gpu/drm/etnaviv/etnaviv_buffer.c | 2 drivers/gpu/drm/msm/adreno/a6xx_gmu.c | 5 drivers/gpu/drm/nouveau/nvkm/core/enum.c | 2 drivers/gpu/drm/sti/sti_vtg.c | 7 drivers/gpu/drm/tegra/dc.c | 1 drivers/gpu/drm/tidss/tidss_crtc.c | 2 drivers/gpu/drm/tidss/tidss_dispc.c | 16 - drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 5 drivers/hid/hid-ids.h | 7 drivers/hid/hid-ntrig.c | 7 drivers/hid/hid-quirks.c | 14 - drivers/hwmon/dell-smm-hwmon.c | 7 drivers/iio/adc/spear_adc.c | 9 drivers/iio/common/ssp_sensors/ssp_dev.c | 4 drivers/iio/imu/st_lsm6dsx/st_lsm6dsx.h | 22 - drivers/input/keyboard/cros_ec_keyb.c | 6 drivers/input/keyboard/imx_sc_key.c | 2 drivers/input/misc/ati_remote2.c | 2 drivers/input/misc/cm109.c | 2 drivers/input/misc/powermate.c | 2 drivers/input/misc/yealink.c | 2 drivers/input/tablet/acecad.c | 2 drivers/input/tablet/pegasus_notetaker.c | 11 drivers/iommu/amd/init.c | 28 +- drivers/irqchip/irq-gic-v2m.c | 13 drivers/isdn/hardware/mISDN/hfcsusb.c | 18 - drivers/mailbox/mailbox-test.c | 2 drivers/md/dm-verity-fec.c | 6 drivers/media/i2c/ir-kbd-i2c.c | 6 drivers/media/pci/ivtv/ivtv-alsa-pcm.c | 2 drivers/media/pci/ivtv/ivtv-driver.h | 3 drivers/media/pci/ivtv/ivtv-fileops.c | 18 - drivers/media/pci/ivtv/ivtv-irq.c | 4 drivers/media/rc/imon.c | 61 ++-- drivers/media/rc/redrat3.c | 2 drivers/media/tuners/xc4000.c | 8 drivers/media/tuners/xc5000.c | 12 drivers/memstick/core/memstick.c | 8 drivers/mfd/da9063-i2c.c | 27 + drivers/mfd/madera-core.c | 4 drivers/mfd/stmpe-i2c.c | 1 drivers/mfd/stmpe.c | 3 drivers/mmc/host/renesas_sdhi_core.c | 6 drivers/mmc/host/sdhci-msm.c | 15 + drivers/most/most_usb.c | 14 - drivers/mtd/nand/onenand/onenand_samsung.c | 2 drivers/mtd/nand/raw/cadence-nand-controller.c | 3 drivers/net/can/sja1000/sja1000.c | 4 drivers/net/can/sun4i_can.c | 4 drivers/net/can/usb/gs_usb.c | 23 - drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c | 4 drivers/net/dsa/b53/b53_common.c | 15 - drivers/net/dsa/b53/b53_regs.h | 3 drivers/net/ethernet/aquantia/atlantic/aq_hw_utils.c | 22 + drivers/net/ethernet/aquantia/atlantic/aq_hw_utils.h | 1 drivers/net/ethernet/aquantia/atlantic/aq_ring.c | 5 drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_b0.c | 19 - drivers/net/ethernet/aquantia/atlantic/hw_atl2/hw_atl2.c | 2 drivers/net/ethernet/cadence/macb_main.c | 4 drivers/net/ethernet/emulex/benet/be_main.c | 7 drivers/net/ethernet/freescale/fec_main.c | 2 drivers/net/ethernet/intel/fm10k/fm10k_common.c | 5 drivers/net/ethernet/intel/fm10k/fm10k_common.h | 2 drivers/net/ethernet/intel/fm10k/fm10k_pf.c | 2 drivers/net/ethernet/intel/fm10k/fm10k_vf.c | 2 drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 15 - drivers/net/ethernet/mellanox/mlxsw/spectrum_flower.c | 6 drivers/net/ethernet/qlogic/qede/qede_main.c | 2 drivers/net/ethernet/realtek/Kconfig | 2 drivers/net/ethernet/realtek/r8169_main.c | 6 drivers/net/ethernet/renesas/ravb_main.c | 16 + drivers/net/ethernet/renesas/sh_eth.c | 4 drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c | 4 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 9 drivers/net/ethernet/ti/netcp_core.c | 10 drivers/net/phy/dp83867.c | 6 drivers/net/phy/marvell.c | 39 ++ drivers/net/phy/mdio_bus.c | 5 drivers/net/usb/asix_devices.c | 12 drivers/net/usb/qmi_wwan.c | 6 drivers/net/usb/usbnet.c | 2 drivers/net/wireless/ath/ath10k/mac.c | 12 drivers/net/wireless/ath/ath10k/wmi.c | 1 drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c | 3 drivers/net/wireless/broadcom/brcm80211/brcmfmac/p2p.c | 28 -- drivers/net/wireless/broadcom/brcm80211/brcmfmac/p2p.h | 3 drivers/nvme/host/fc.c | 12 drivers/pci/controller/cadence/pcie-cadence-host.c | 2 drivers/pci/controller/cadence/pcie-cadence.c | 4 drivers/pci/controller/cadence/pcie-cadence.h | 6 drivers/pci/p2pdma.c | 2 drivers/pci/quirks.c | 1 drivers/phy/cadence/cdns-dphy.c | 4 drivers/pinctrl/pinctrl-single.c | 4 drivers/regulator/fixed.c | 6 drivers/remoteproc/qcom_q6v5.c | 5 drivers/s390/net/ctcm_mpc.c | 1 drivers/scsi/hosts.c | 5 drivers/scsi/lpfc/lpfc_debugfs.h | 3 drivers/scsi/pm8001/pm8001_ctl.c | 24 - drivers/scsi/pm8001/pm8001_init.c | 1 drivers/scsi/pm8001/pm8001_sas.c | 4 drivers/scsi/pm8001/pm8001_sas.h | 4 drivers/scsi/sg.c | 10 drivers/slimbus/qcom-ngd-ctrl.c | 1 drivers/soc/imx/gpc.c | 2 drivers/soc/qcom/smem.c | 2 drivers/soc/ti/knav_dma.c | 14 - drivers/soc/ti/pruss.c | 2 drivers/spi/spi-bcm63xx.c | 14 + drivers/spi/spi-loopback-test.c | 12 drivers/spi/spi.c | 10 drivers/target/loopback/tcm_loop.c | 3 drivers/tee/tee_core.c | 2 drivers/thunderbolt/nhi.c | 2 drivers/thunderbolt/nhi.h | 1 drivers/tty/serial/8250/8250_dw.c | 67 ++-- drivers/tty/serial/amba-pl011.c | 2 drivers/uio/uio_hv_generic.c | 21 + drivers/usb/cdns3/cdns3-pci-wrap.c | 5 drivers/usb/dwc3/ep0.c | 1 drivers/usb/dwc3/gadget.c | 7 drivers/usb/gadget/function/f_eem.c | 7 drivers/usb/gadget/function/f_fs.c | 8 drivers/usb/gadget/function/f_hid.c | 4 drivers/usb/gadget/function/f_ncm.c | 3 drivers/usb/host/xhci-dbgcap.h | 1 drivers/usb/host/xhci-dbgtty.c | 17 + drivers/usb/host/xhci-plat.c | 1 drivers/usb/mon/mon_bin.c | 14 - drivers/usb/renesas_usbhs/common.c | 14 - drivers/usb/serial/ftdi_sio.c | 1 drivers/usb/serial/ftdi_sio_ids.h | 1 drivers/usb/serial/option.c | 10 drivers/usb/storage/sddr55.c | 6 drivers/usb/storage/transport.c | 16 + drivers/usb/storage/uas.c | 7 drivers/usb/storage/unusual_devs.h | 2 drivers/usb/typec/ucsi/psy.c | 5 drivers/video/backlight/lp855x_bl.c | 2 drivers/video/fbdev/aty/atyfb_base.c | 8 drivers/video/fbdev/core/bitblit.c | 33 ++ drivers/video/fbdev/pvr2fb.c | 2 drivers/video/fbdev/valkyriefb.c | 2 fs/9p/v9fs.c | 9 fs/btrfs/disk-io.c | 2 fs/btrfs/file.c | 10 fs/btrfs/transaction.c | 2 fs/btrfs/tree-log.c | 1 fs/ceph/locks.c | 5 fs/cifs/connect.c | 1 fs/dax.c | 2 fs/exfat/fatent.c | 11 fs/exfat/super.c | 5 fs/ext4/xattr.c | 2 fs/fs-writeback.c | 7 fs/hpfs/namei.c | 18 - fs/jfs/inode.c | 8 fs/jfs/jfs_txnmgr.c | 9 fs/nfs/inode.c | 6 fs/nfs/nfs4client.c | 1 fs/nfs/nfs4proc.c | 7 fs/nfs/nfs4state.c | 3 fs/nfsd/nfs4proc.c | 7 fs/nfsd/nfs4state.c | 3 fs/open.c | 10 fs/orangefs/xattr.c | 12 fs/overlayfs/copy_up.c | 2 fs/proc/generic.c | 12 fs/xfs/xfs_super.c | 33 +- include/linux/ata.h | 1 include/linux/blk_types.h | 11 include/linux/compiler_types.h | 5 include/linux/filter.h | 2 include/linux/mm.h | 2 include/linux/shdma-base.h | 2 include/linux/usb.h | 16 - include/net/cls_cgroup.h | 2 include/net/nfc/nci_core.h | 2 include/net/pkt_sched.h | 25 + include/net/sctp/sctp.h | 3 include/net/tls.h | 6 kernel/bpf/ringbuf.c | 2 kernel/events/uprobes.c | 7 kernel/gcov/gcc_4_7.c | 4 kernel/trace/trace_events_hist.c | 6 kernel/trace/trace_events_synth.c | 3 lib/crypto/Makefile | 2 mm/page_alloc.c | 2 net/8021q/vlan.c | 2 net/bluetooth/6lowpan.c | 97 ++++--- net/bluetooth/hci_event.c | 21 + net/bluetooth/l2cap_core.c | 1 net/bluetooth/sco.c | 7 net/bluetooth/smp.c | 31 -- net/bridge/br_forward.c | 3 net/ceph/ceph_common.c | 53 ++- net/ceph/debugfs.c | 14 - net/core/netpoll.c | 7 net/core/page_pool.c | 6 net/core/sock.c | 15 - net/hsr/hsr_device.c | 3 net/ipv4/fib_frontend.c | 2 net/ipv4/inet_diag.c | 5 net/ipv4/nexthop.c | 6 net/ipv4/raw_diag.c | 7 net/ipv4/route.c | 5 net/ipv4/udp_diag.c | 6 net/ipv4/udp_tunnel_nic.c | 2 net/ipv6/addrconf.c | 4 net/ipv6/ah6.c | 50 ++- net/ipv6/raw.c | 2 net/ipv6/udp.c | 2 net/mac80211/rx.c | 10 net/mptcp/mptcp_diag.c | 6 net/mptcp/pm.c | 3 net/mptcp/pm_netlink.c | 20 - net/mptcp/protocol.c | 59 +++- net/mptcp/protocol.h | 1 net/netfilter/nf_tables_api.c | 15 + net/netfilter/nft_set_pipapo.c | 4 net/netfilter/nft_set_pipapo.h | 21 + net/netfilter/nft_set_pipapo_avx2.c | 31 +- net/netlink/af_netlink.c | 2 net/openvswitch/actions.c | 68 ---- net/openvswitch/flow_netlink.c | 64 ---- net/openvswitch/flow_netlink.h | 2 net/rds/rds.h | 2 net/sched/act_ife.c | 12 net/sched/sch_api.c | 10 net/sched/sch_generic.c | 17 - net/sched/sch_hfsc.c | 16 - net/sched/sch_qfq.c | 2 net/sctp/diag.c | 69 ++--- net/sctp/sm_make_chunk.c | 2 net/sctp/socket.c | 24 + net/sctp/transport.c | 13 net/smc/smc_clc.c | 1 net/strparser/strparser.c | 2 net/tipc/net.c | 2 net/tls/tls_device.c | 4 net/unix/diag.c | 6 net/vmw_vsock/af_vsock.c | 40 ++ scripts/Kbuild.include | 10 scripts/kconfig/mconf.c | 3 scripts/kconfig/nconf.c | 3 sound/pci/hda/patch_realtek.c | 17 - sound/soc/codecs/cs4271.c | 10 sound/soc/codecs/max98090.c | 6 sound/soc/meson/aiu-encoder-i2s.c | 9 sound/soc/qcom/qdsp6/q6asm.c | 2 sound/usb/endpoint.c | 5 sound/usb/mixer.c | 11 sound/usb/mixer_s1810c.c | 28 +- sound/usb/validate.c | 9 tools/power/cpupower/lib/cpuidle.c | 5 tools/power/x86/x86_energy_perf_policy/x86_energy_perf_policy.c | 30 +- tools/testing/selftests/Makefile | 2 tools/testing/selftests/bpf/test_lirc_mode2_user.c | 2 tools/testing/selftests/net/fcnal-test.sh | 4 tools/testing/selftests/net/psock_tpacket.c | 4 tools/testing/selftests/net/traceroute.sh | 13 329 files changed, 2071 insertions(+), 1149 deletions(-) Abdun Nihaal (1): isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() Akhil P Oommen (1): drm/msm/a6xx: Fix GMU firmware parser Al Viro (2): allow finish_no_open(file, ERR_PTR(-E...)) nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing Alan Borzeszkowski (1): thunderbolt: Add support for Intel Wildcat Lake Alan Stern (1): USB: storage: Remove subclass and protocol overrides from Novatek quirk Albin Babu Varghese (1): fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds Aleksander Jan Bajkowski (3): mips: lantiq: danube: add missing properties to cpu node mips: lantiq: danube: add missing device_type in pci node mips: lantiq: xway: sysctrl: rename stp clock Aleksei Nikiforov (1): s390/ctcm: Fix double-kfree Alex Hung (1): drm/amd/display: Check NULL before accessing Alex Lu (1): Bluetooth: Add more enc key size check Alexander Stein (2): mfd: stmpe: Remove IRQ domain upon removal mfd: stmpe-i2c: Add missing MODULE_LICENSE Alexey Dobriyan (1): x86/boot: Compile boot code with -std=gnu11 too Alexey Klimov (1): regmap: slimbus: fix bus_context pointer in regmap init calls Alexey Kodanev (1): net: sxgbe: fix potential NULL dereference in sxgbe_rx() Alok Tiwari (1): udp_tunnel: use netdev_warn() instead of netdev_WARN() Amber Lin (1): drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption Amirreza Zarrabi (1): tee: allow a driver to allocate a tee_device without a pool Andrey Vatoropin (1): be2net: pass wrb_params in case of OS2BMC Andy Shevchenko (1): serial: 8250_dw: Use devm_add_action_or_reset() Anthony Iliopoulos (1): NFSv4.1: fix mount hang after CREATE_SESSION failure Armin Wolf (1): hwmon: (dell-smm) Add support for Dell OptiPlex 7040 Arnd Bergmann (1): mfd: madera: Work around false-positive -Wininitialized warning Artem Shimko (1): serial: 8250_dw: handle reset control deassert error Ashish Kalra (1): iommu/amd: Skip enabling command/event buffers for kdump Babu Moger (1): x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID Bart Van Assche (2): scsi: sg: Do not sleep in atomic context scsi: core: Fix a regression triggered by scsi_host_busy() Benjamin Berg (1): wifi: mac80211: skip rate verification for not captured PSDUs Biju Das (1): mmc: host: renesas_sdhi: Fix the actual clock Brahmajit Das (1): net: intel: fm10k: Fix parameter idx set but not used Breno Leitao (1): net: netpoll: fix incorrect refcount handling causing incorrect cleanup Buday Csaba (1): net: mdio: fix resource leak in mdiobus_register_device() Celeste Liu (1): can: gs_usb: increase max interface to U8_MAX Charalampos Mitrodimas (1): net: ipv6: fix field-spanning memcpy warning in AH output Chelsy Ratnawat (1): media: fix uninitialized symbol warnings Chen Wang (1): PCI: cadence: Check for the existence of cdns_pcie::ops before using it Chi Zhang (1): pinctrl: single: fix bias pull up/down handling in pin_config_set Chi Zhiling (1): exfat: limit log print for IO error Chris Morgan (1): regulator: fixed: use dev_err_probe for register Christian Bruel (1): irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment Christoph Hellwig (1): fsdax: mark the iomap argument to dax_iomap_sector as const Christoph Paasch (1): net: When removing nexthops, don't call synchronize_net if it is not necessary Christophe JAILLET (1): iio:common:ssp_sensors: Fix an error handling path ssp_probe() Chuang Wang (1): ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe Chuck Lever (1): NFSD: Fix crash in nfsd4_read_release() ChunHao Lin (1): r8169: set EEE speed down ratio to 1 Claudiu Beznea (1): usb: renesas_usbhs: Fix synchronous external abort on unbind Cryolitia PukNgae (1): ALSA: usb-audio: apply quirk for MOONDROP Quark2 D. Wythe (1): net/smc: fix mismatch between CLC header and proposal Damien Le Moal (2): block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL block: make REQ_OP_ZONE_OPEN a write operation Dan Carpenter (2): mtd: onenand: Pass correct pointer to IRQ handler Input: imx_sc_key - fix memory corruption on unload Daniel Lezcano (1): clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel Daniel Palmer (2): fbdev: atyfb: Check if pll_ops->init_pll failed eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP Daniel Wagner (1): nvme-fc: use lock accessing port_state and rport state Danielle Costantino (1): net/mlx5e: Fix validation logic in rate limiting Danil Skrebenkov (1): RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors Darrick J. Wong (1): xfs: always warn about deprecated mount options David Ahern (2): selftests: Disable dad for ipv6 in fcnal-test.sh selftests: Replace sleep with slowwait David Kaplan (1): x86/bugs: Fix reporting of LFENCE retpoline Dennis Beier (1): cpufreq/longhaul: handle NULL policy in longhaul_exit Desnes Nunes (1): usb: storage: Fix memory leak in USB bulk transport Devendra K Verma (1): dmaengine: dw-edma: Set status for callback_result Dmitry Baryshkov (1): drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts Dragos Tatulea (1): page_pool: Clamp pool size to max 16K pages Emanuele Ghidoli (1): net: phy: dp83867: Disable EEE support as not implemented Eric Biggers (1): lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN Eric Dumazet (6): net: call cond_resched() less often in __release_sock() ipv6: np->rxpmtu race annotation sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto net_sched: limit try_bulk_dequeue_skb() batches mptcp: fix race condition in mptcp_schedule_work() mptcp: fix a race in mptcp_pm_del_add_timer() Ewan D. Milne (1): nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() Felix Maurer (1): hsr: Fix supervision frame sending on HSRv0 Filipe Manana (2): btrfs: always drop log root tree reference in btrfs_replay_log() btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot() Florian Fuchs (1): fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS Florian Westphal (2): netfilter: nf_set_pipapo: fix initial map fill netfilter: nf_set_pipapo_avx2: fix initial map fill Forest Crossman (1): usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs Francesco Lavra (1): iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields Francisco Gutierrez (1): scsi: pm80xx: Fix race condition caused by static variables Gal Pressman (2): net/mlx5e: Fix maxrate wraparound in threshold between units net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps Geoffrey McRae (1): drm/amdkfd: return -ENOTTY for unsupported IOCTLs Gokul Sivakumar (1): wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode Greg Kroah-Hartman (1): Linux 5.10.247 Gui-Dong Han (1): atm/fore200e: Fix possible data race in fore200e_open() Haein Lee (1): ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd Hamza Mahfooz (1): scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() Hang Zhou (1): spi: bcm63xx: fix premature CS deassertion on RX-only transactions Hangbin Liu (1): net: vlan: sync VLAN features with lower device Hans de Goede (2): ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() spi: Try to get ACPI GPIO IRQ earlier Haotian Zhang (3): regulator: fixed: fix GPIO descriptor leak on register failure ASoC: cs4271: Fix regulator leak on probe failure mailbox: mailbox-test: Fix debugfs_create_dir error checking Harikrishna Shenoy (1): phy: cadence: cdns-dphy: Enable lower resolutions in dphy Ian Forbes (1): drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE Ido Schimmel (2): bridge: Redirect to backup port when port is administratively down selftests: traceroute: Use require_command() Igor Pylypiv (1): scsi: pm80xx: Set phy->enable_completion only when we Ilya Dryomov (1): libceph: fix potential use-after-free in have_mon_and_osd_map() Ilya Maximets (1): net: openvswitch: remove never-working support for setting nsh fields Isaac J. Manjarres (1): mm/mm_init: fix hash table order logging in alloc_large_system_hash() Ivan Pravdin (1): Bluetooth: bcsp: receive data only if registered Jakub Acs (1): mm/ksm: fix flag-dropping behavior in ksm_madvise Jakub Horký (2): kconfig/mconf: Initialize the default locale at startup kconfig/nconf: Initialize the default locale at startup Jameson Thies (1): usb: typec: ucsi: psy: Set max current to zero when disconnected Jens Kehne (1): mfd: da9063: Split chip variant reading in two bus transactions Jens Reidel (1): soc: qcom: smem: Fix endian-unaware access of num_entries Jiayi Li (1): memstick: Add timeout to prevent indefinite waiting Jiayuan Chen (1): mptcp: Fix proto fallback detection with BPF Jiefeng Zhang (1): net: atlantic: fix fragment overflow handling in RX path Jiri Olsa (2): uprobe: Do not emulate/sstep original instruction when ip is changed Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" Jiufei Xue (1): fs: writeback: fix use-after-free in __mark_inode_dirty() Johan Hovold (2): most: usb: fix double free on late probe failure drm: sti: fix device leaks at component probe John Smith (2): drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland Jonas Gorski (3): net: dsa: b53: fix resetting speed and pause on forced link net: dsa: b53: fix enabling ip multicast net: dsa: b53: stop reading ARL entries if search is done Josephine Pfeiffer (1): riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro Joshua Watt (1): NFS4: Fix state renewals missing after boot Junjie Cao (1): fbdev: bitblit: bound-check glyph index in bit_putcs* Juraj Šarinay (1): net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms Justin Tee (1): scsi: lpfc: Define size of debugfs entry for xri rebalancing Kai-Heng Feng (1): net: aquantia: Add missing descriptor cache invalidation on ATL2 Kailang Yang (1): ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again Kaushlendra Kumar (2): tools/cpupower: Fix incorrect size in cpuidle_state_disable() tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage Kees Cook (1): arc: Fix __fls() const-foldability via __builtin_clzl() Khairul Anuar Romli (1): firmware: stratix10-svc: fix bug in saving controller data Kirill A. Shutemov (1): x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall Koakuma (1): sparc/module: Add R_SPARC_UA64 relocation handling Krishna Kurapati (1): usb: xhci: plat: Facilitate using autosuspend for xhci plat devices Krzysztof Kozlowski (3): extcon: adc-jack: Fix wakeup source leaks on device unbind extcon: adc-jack: Cleanup wakeup source only if it was enabled dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups Kuen-Han Tsai (1): usb: gadget: f_eem: Fix memory leak in eem_unwrap Kuniyuki Iwashima (2): net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV. tipc: Fix use-after-free in tipc_mon_reinit_self(). Lad Prabhakar (1): net: ravb: Enforce descriptor type ordering Laurent Pinchart (1): media: pci: ivtv: Don't create fake v4l2_fh Len Brown (2): tools/power x86_energy_perf_policy: Enhance HWP enable tools/power x86_energy_perf_policy: Prefer driver HWP limits Li RongQing (1): x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT Lijo Lazar (1): drm/amd/pm: Use cached metrics data on arcturus Lizhi Xu (1): usbnet: Prevents free active kevent Loic Poulain (2): wifi: ath10k: Fix memory leak on unsupported WMI command wifi: ath10k: Fix connection after GTK rekeying Long Li (1): uio_hv_generic: Set event for all channels on the device Lu Wei (1): net: sctp: Fix some typos Luiz Augusto von Dentz (2): Bluetooth: SCO: Fix UAF on sco_conn_free Bluetooth: SMP: Fix not generating mackey and ltk when repairing Ma Ke (1): drm/tegra: dc: Fix reference leak in tegra_dc_couple() Maarten Lankhorst (1): devcoredump: Fix circular locking dependency with devcd->mutex. Maciej W. Rozycki (2): MIPS: Malta: Fix !EVA SOC-it PCI MMIO MIPS: mm: Prevent a TLB shutdown on initial uniquification Manish Nagar (1): usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths Marc Kleine-Budde (1): can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling Marcos Del Sol Vives (1): PCI: Disable MSI on RDC PCI to PCIe bridges Mario Limonciello (AMD) (1): ACPI: video: force native for Lenovo 82K8 Masami Ichikawa (1): HID: hid-ntrig: Prevent memory leak in ntrig_report_version() Mathias Nyman (1): xhci: dbgtty: Fix data corruption when transmitting data form DbC to host Matthieu Baerts (NGI0) (2): arch: back to -std=gnu89 in < v5.18 tracing: fix declaration-after-statement warning Miaoqian Lin (6): net: usb: asix_devices: Check return value of usbnet_get_endpoints fbdev: valkyriefb: Fix reference count leak in valkyriefb_init pmdomain: imx: Fix reference count leak in imx_gpc_remove slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves serial: amba-pl011: prefer dma_mapping_error() over explicit address checking usb: cdns3: Fix double resource release in cdns3_pci_probe Michal Luczaj (1): vsock: Ignore signal/timeout on connect() if already established Mike Marshall (1): orangefs: fix xattr related buffer overflow... Mikulas Patocka (1): dm-verity: fix unreliable memory allocation Nai-Chen Cheng (1): selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency Nate Karstens (1): strparser: Fix signed/unsigned mismatch bug Nathan Chancellor (2): lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC net: qede: Initialize qede_ll_ops with designated initializer Nick Desaulniers (1): Makefile.compiler: replace cc-ifversion with compiler-specific macros Nicolas Ferre (1): ARM: at91: pm: save and restore ACR during PLL disable/enable Niklas Cassel (1): ata: libata-scsi: Fix system suspend for a security locked drive Niklas Schnelle (1): powerpc/eeh: Use result of error_detected() in uevent Niklas Söderlund (1): net: sh_eth: Disable WoL if system can not suspend Niravkumar L Rabara (3): EDAC/altera: Handle OCRAM ECC enable after warm reset EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection mtd: rawnand: cadence: fix DMA device NULL pointer dereference Nishanth Menon (1): net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error Noorain Eqbal (1): bpf: Sync pending IRQ work before freeing ring buffer Oleksandr Suvorov (1): USB: serial: ftdi_sio: add support for u-blox EVK-M101 Olga Kornievskaia (2): NFSv4: handle ERR_GRACE on delegation recalls NFSD: free copynotify stateid in nfs4_free_ol_stateid() Owen Gu (2): usb: gadget: f_fs: Fix epfile null pointer access after ep enable. usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer Pablo Neira Ayuso (1): netfilter: nf_tables: reject duplicate device on updates Paolo Abeni (2): mptcp: introduce mptcp_schedule_work mptcp: do not fallback when OoO is present Pauli Virtanen (4): Bluetooth: 6lowpan: reset link-local header on ipv6 recv path Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions Bluetooth: L2CAP: export l2cap_chan_hold for modules Paulo Alcantara (1): smb: client: fix memory leak in cifs_construct_tcon() Peter Oberparleiter (1): gcov: add support for GCC 15 Peter Zijlstra (1): compiler_types: Move unused static inline functions warning to W=2 Qendrim Maxhuni (1): net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup Qianfeng Rong (2): scsi: pm8001: Use int instead of u32 to store error codes media: redrat3: use int type to store negative error codes Rafael J. Wysocki (1): cpuidle: Fail cpuidle device registration if there is one already Randall P. Embry (2): 9p: fix /sys/fs/9p/caches overwriting itself 9p: sysfs_init: don't hardcode error to ENOMEM Ranganath V N (1): net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak Raphael Pinsonneault-Thibeault (1): Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF René Rebe (1): ALSA: usb-audio: fix uac2 clock source at terminal parser Ricardo B. Marlière (1): selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 Rodrigo Gobbi (1): iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register Rohan G Thomas (1): net: phy: marvell: Fix 88e1510 downshift counter errata Rosen Penev (1): dmaengine: mv_xor: match alloc_wc and free_wc Roy Vegard Ovesen (2): ALSA: usb-audio: fix control pipe direction ALSA: usb-audio: add mono main switch to Presonus S1824c Sakari Ailus (1): ACPI: property: Return present device nodes only on fwnode interface Saket Dumbre (1): ACPICA: Update dsmethod.c to get rid of unused variable warning Sarthak Garg (1): mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card Sathishkumar S (1): drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff Seungjin Bae (2): Input: pegasus-notetaker - fix potential out-of-bounds access can: kvaser_usb: leaf: Fix potential infinite loop in command parsers Seyediman Seyedarab (1): drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf() Shahar Shitrit (1): net: tls: Cancel RX async resync request on rcd_delta overflow Sharique Mohammad (1): ASoC: max98090/91: fixed max98091 ALSA widget powering up/down Shaurya Rane (1): jfs: fix uninitialized waitqueue in transaction manager Shuai Xue (1): acpi,srat: Fix incorrect device handle check for Generic Initiator Srinivas Kandagatla (1): ASoC: qdsp6: q6asm: do not sleep while atomic Stefan Wiehler (3): sctp: Hold RCU read lock while iterating over address list sctp: Prevent TOCTOU out-of-bounds write sctp: Hold sock lock while iterating over address list Stephan Gerhold (1): remoteproc: qcom: q6v5: Avoid handling handover twice Sudeep Holla (1): pmdomain: arm: scmi: Fix genpd leak on provider registration failure Sungho Kim (1): PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call Svyatoslav Ryhel (1): video: backlight: lp855x_bl: Set correct EPROM start for LP8556 Takashi Iwai (2): ALSA: usb-audio: Add validation of UAC2/UAC3 effect units ALSA: usb-audio: Fix potential overflow of PCM transfer buffer Tetsuo Handa (2): media: imon: make send_packet() more robust jfs: Verify inode mode when loading from disk Thomas Andreatta (1): dmaengine: sh: setup_xref error handling Thomas Mühlbacher (1): can: sja1000: fix max irq loop handling Thomas Weißschuh (3): spi: loopback-test: Don't use %pK through printk soc: ti: pruss: don't use %pK through printk bpf: Don't use %pK through printk Théo Lebrun (1): net: macb: avoid dealing with endianness in macb_set_hwaddr() Tianchu Chen (1): usb: storage: sddr55: Reject out-of-bound new_pba Tiezhu Yang (1): net: stmmac: Check stmmac_hw_setup() in stmmac_resume() Tiwei Bie (1): um: Fix help message for ssl-non-raw Tomeu Vizoso (1): drm/etnaviv: fix flush sequence logic Tomi Valkeinen (1): drm/tidss: Use the crtc_* timings when programming the HW Tristan Lobb (1): HID: quirks: avoid Cooler Master MM712 dongle wakeup bug Trond Myklebust (1): Revert "NFS: Don't set NFS_INO_REVAL_PAGECACHE in the inode cache validity" Tzung-Bi Shih (1): Input: cros_ec_keyb - fix an invalid memory access Ujwal Kundur (1): rds: Fix endianness annotation for RDS_MPATH_HASH Valerio Setti (1): ASoC: meson: aiu-encoder-i2s: fix bit clock polarity Vanillan Wang (1): USB: serial: option: add support for Rolling RW101R-GL Vasiliy Kovalev (1): ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up Viacheslav Dubeyko (1): ceph: add checking of wait_for_completion_killable() return value Vincent Mailhol (2): usb: deprecate the third argument of usb_maxpacket() Input: remove third argument of usb_maxpacket() Wake Liu (2): selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8 selftests/net: Ensure assert() triggers in psock_tpacket.c Wei Fang (1): net: fec: correct rx_bytes statistic for the case SHIFT16 is set Wei Yang (1): fs/proc: fix uaf in proc_readdir_de() William Wu (1): usb: gadget: f_hid: Fix zero length packet transfer Xiang Mei (1): net/sched: sch_qfq: Fix null-deref in agg_dequeue Xin Long (1): sctp: hold endpoint before calling cb in sctp_transport_lookup_process Yafang Shao (1): net/cls_cgroup: Fix task_get_classid() during qdisc run Yajun Deng (1): net: Use nlmsg_unicast() instead of netlink_unicast() Yang Wang (1): drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table() Yikang Yue (1): fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink Yongpeng Yang (1): exfat: check return value of sb_min_blocksize in exfat_read_boot_sector Yue Haibing (1): ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled Yuhao Jiang (1): ACPI: video: Fix use-after-free in acpi_video_switch_brightness() Zhang Heng (1): HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155 Zijun Hu (1): char: misc: Does not request module for miscdevice with dynamic minor Zilin Guan (2): tracing: Fix memory leaks in create_field_var() mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() austinchang (1): btrfs: mark dirty extent range for out of bound prealloc extents chuguangqing (1): fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock raub camaioni (1): usb: gadget: f_ncm: Fix MAC assignment NCM ethernet

3 days, 9 hours

1
1
0 0

+ mm-hugetlb-fix-excessive-ipi-broadcasts-when-unsharing-pmd-tables-using-mmu_gather.patch added to mm-unstable branch

by Andrew Morton

The patch titled Subject: mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather has been added to the -mm mm-unstable branch. Its filename is mm-hugetlb-fix-excessive-ipi-broadcasts-when-unsharing-pmd-tables-using-mmu_gather.patch This patch will shortly appear at https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patche… This patch will later appear in the mm-unstable branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm Before you just go and hit "reply", please: a) Consider who else should be cc'ed b) Prefer to cc a suitable mailing list as well c) Ideally: find the original patch on the mailing list and do a reply-to-all to that, adding suitable additional cc's *** Remember to use Documentation/process/submit-checklist.rst when testing your code *** The -mm tree is included into linux-next via the mm-everything branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm and is updated there every 2-3 working days ------------------------------------------------------ From: "David Hildenbrand (Red Hat)" <david(a)kernel.org> Subject: mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather Date: Fri, 5 Dec 2025 22:35:58 +0100 As reported, ever since commit 1013af4f585f ("mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race") we can end up in some situations where we perform so many IPI broadcasts when unsharing hugetlb PMD page tables that it severely regresses some workloads. In particular, when we fork()+exit(), or when we munmap() a large area backed by many shared PMD tables, we perform one IPI broadcast per unshared PMD table. There are two optimizations to be had: (1) When we process (unshare) multiple such PMD tables, such as during exit(), it is sufficient to send a single IPI broadcast (as long as we respect locking rules) instead of one per PMD table. Locking prevents that any of these PMD tables could get reuse before we drop the lock. (2) When we are not the last sharer (> 2 users including us), there is no need to send the IPI broadcast. The shared PMD tables cannot become exclusive (fully unshared) before an IPI will be broadcasted by the last sharer. Concurrent GUP-fast could walk into a PMD table just before we unshared it. It could then succeed in grabbing a page from the shared page table even after munmap() etc succeeded (and supressed an IPI). But there is not difference compared to GUP-fast just sleeping for a while after grabbing the page and re-enabling IRQs. Most importantly, GUP-fast will never walk into page tables that are no-longer shared, because the last sharer will issue an IPI broadcast. (if ever required, checking whether the PUD changed in GUP-fast after grabbing the page like we do in the PTE case could handle this) So let's rework PMD sharing TLB flushing + IPI sync to use the mmu_gather infrastructure so we can implement these optimizations and demystify the code at least a bit. Extend the mmu_gather infrastructure to be able to deal with our special hugetlb PMD table sharing implementation. We'll consolidate the handling for (full) unsharing of PMD tables in tlb_unshare_pmd_ptdesc() and tlb_flush_unshared_tables(), and track in "struct mmu_gather" whether we had (full) unsharing of PMD tables. Because locking is very special (concurrent unsharing+reuse must be prevented), we disallow deferring flushing to tlb_finish_mmu() and instead require an explicit earlier call to tlb_flush_unshared_tables(). From hugetlb code, we call huge_pmd_unshare_flush() where we make sure that the expected lock protecting us from concurrent unsharing+reuse is still held. Check with a VM_WARN_ON_ONCE() in tlb_finish_mmu() that tlb_flush_unshared_tables() was properly called earlier. Document it all properly. Notes about tlb_remove_table_sync_one() interaction with unsharing: There are two fairly tricky things: (1) tlb_remove_table_sync_one() is a NOP on architectures without CONFIG_MMU_GATHER_RCU_TABLE_FREE. Here, the assumption is that the previous TLB flush would send an IPI to all relevant CPUs. Careful: some architectures like x86 only send IPIs to all relevant CPUs when tlb->freed_tables is set. The relevant architectures should be selecting MMU_GATHER_RCU_TABLE_FREE, but x86 might not do that in stable kernels and it might have been problematic before this patch. Also, the arch flushing behavior (independent of IPIs) is different when tlb->freed_tables is set. Do we have to enlighten them to also take care of tlb->unshared_tables? So far we didn't care, so hopefully we are fine. Of course, we could be setting tlb->freed_tables as well, but that might then unnecessarily flush too much, because the semantics of tlb->freed_tables are a bit fuzzy. This patch changes nothing in this regard. (2) tlb_remove_table_sync_one() is not a NOP on architectures with CONFIG_MMU_GATHER_RCU_TABLE_FREE that actually don't need a sync. Take x86 as an example: in the common case (!pv, !X86_FEATURE_INVLPGB) we still issue IPIs during TLB flushes and don't actually need the second tlb_remove_table_sync_one(). This optimized can be implemented on top of this, by checking e.g., in tlb_remove_table_sync_one() whether we really need IPIs. But as described in (1), it really must honor tlb->freed_tables then to send IPIs to all relevant CPUs. Further note that the ptdesc_pmd_pts_dec() in huge_pmd_share() is not a concern, as we are holding the i_mmap_lock the whole time, preventing concurrent unsharing. That ptdesc_pmd_pts_dec() usage will be removed separately as a cleanup later. There are plenty more cleanups to be had, but they have to wait until this is fixed. Link: https://lkml.kernel.org/r/20251205213558.2980480-5-david@kernel.org Fixes: 1013af4f585f ("mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race") Signed-off-by: David Hildenbrand (Red Hat) <david(a)kernel.org> Reported-by: Uschakow, Stanislav" <suschako(a)amazon.de> Closes: https://lore.kernel.org/all/4d3878531c76479d9f8ca9789dc6485d@amazon.de/ Tested-by: Laurence Oberman <loberman(a)redhat.com> Cc: "Aneesh Kumar K.V" <aneesh.kumar(a)kernel.org> Cc: Arnd Bergmann <arnd(a)arndb.de> Cc: Jann Horn <jannh(a)google.com> Cc: Liam Howlett <liam.howlett(a)oracle.com> Cc: Liu Shixin <liushixin2(a)huawei.com> Cc: Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com> Cc: Muchun Song <muchun.song(a)linux.dev> Cc: Nadav Amit <nadav.amit(a)gmail.com> Cc: Nicholas Piggin <npiggin(a)gmail.com> Cc: Oscar Salvador <osalvador(a)suse.de> Cc: Peter Zijlstra <peterz(a)infradead.org> Cc: Prakash Sangappa <prakash.sangappa(a)oracle.com> Cc: Rik van Riel <riel(a)surriel.com> Cc: Vlastimil Babka <vbabka(a)suse.cz> Cc: Will Deacon <will(a)kernel.org> Cc: Lance Yang <lance.yang(a)linux.dev> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> --- include/asm-generic/tlb.h | 69 ++++++++++++++++++++ include/linux/hugetlb.h | 19 +++-- mm/hugetlb.c | 121 ++++++++++++++++++++---------------- mm/mmu_gather.c | 6 + mm/mprotect.c | 2 mm/rmap.c | 25 +++++-- 6 files changed, 173 insertions(+), 69 deletions(-) --- a/include/asm-generic/tlb.h~mm-hugetlb-fix-excessive-ipi-broadcasts-when-unsharing-pmd-tables-using-mmu_gather +++ a/include/asm-generic/tlb.h @@ -364,6 +364,17 @@ struct mmu_gather { unsigned int vma_huge : 1; unsigned int vma_pfn : 1; + /* + * Did we unshare (unmap) any shared page tables? + */ + unsigned int unshared_tables : 1; + + /* + * Did we unshare any page tables such that they are now exclusive + * and could get reused+modified by the new owner? + */ + unsigned int fully_unshared_tables : 1; + unsigned int batch_count; #ifndef CONFIG_MMU_GATHER_NO_GATHER @@ -400,6 +411,7 @@ static inline void __tlb_reset_range(str tlb->cleared_pmds = 0; tlb->cleared_puds = 0; tlb->cleared_p4ds = 0; + tlb->unshared_tables = 0; /* * Do not reset mmu_gather::vma_* fields here, we do not * call into tlb_start_vma() again to set them if there is an @@ -484,7 +496,7 @@ static inline void tlb_flush_mmu_tlbonly * these bits. */ if (!(tlb->freed_tables || tlb->cleared_ptes || tlb->cleared_pmds || - tlb->cleared_puds || tlb->cleared_p4ds)) + tlb->cleared_puds || tlb->cleared_p4ds || tlb->unshared_tables)) return; tlb_flush(tlb); @@ -773,6 +785,61 @@ static inline bool huge_pmd_needs_flush( } #endif +#ifdef CONFIG_HUGETLB_PMD_PAGE_TABLE_SHARING +static inline void tlb_unshare_pmd_ptdesc(struct mmu_gather *tlb, struct ptdesc *pt, + unsigned long addr) +{ + /* + * The caller must make sure that concurrent unsharing + exclusive + * reuse is impossible until tlb_flush_unshared_tables() was called. + */ + VM_WARN_ON_ONCE(!ptdesc_pmd_is_shared(pt)); + ptdesc_pmd_pts_dec(pt); + + /* Clearing a PUD pointing at a PMD table with PMD leaves. */ + tlb_flush_pmd_range(tlb, addr & PUD_MASK, PUD_SIZE); + + /* + * If the page table is now exclusively owned, we fully unshared + * a page table. + */ + if (!ptdesc_pmd_is_shared(pt)) + tlb->fully_unshared_tables = true; + tlb->unshared_tables = true; +} + +static inline void tlb_flush_unshared_tables(struct mmu_gather *tlb) +{ + /* + * As soon as the caller drops locks to allow for reuse of + * previously-shared tables, these tables could get modified and + * even reused outside of hugetlb context. So flush the TLB now. + * + * Note that we cannot defer the flush to a later point even if we are + * not the last sharer of the page table. + */ + if (tlb->unshared_tables) + tlb_flush_mmu_tlbonly(tlb); + + /* + * Similarly, we must make sure that concurrent GUP-fast will not + * walk previously-shared page tables that are getting modified+reused + * elsewhere. So broadcast an IPI to wait for any concurrent GUP-fast. + * + * We only perform this when we are the last sharer of a page table, + * as the IPI will reach all CPUs: any GUP-fast. + * + * Note that on configs where tlb_remove_table_sync_one() is a NOP, + * the expectation is that the tlb_flush_mmu_tlbonly() would have issued + * required IPIs already for us. + */ + if (tlb->fully_unshared_tables) { + tlb_remove_table_sync_one(); + tlb->fully_unshared_tables = false; + } +} +#endif /* CONFIG_HUGETLB_PMD_PAGE_TABLE_SHARING */ + #endif /* CONFIG_MMU */ #endif /* _ASM_GENERIC__TLB_H */ --- a/include/linux/hugetlb.h~mm-hugetlb-fix-excessive-ipi-broadcasts-when-unsharing-pmd-tables-using-mmu_gather +++ a/include/linux/hugetlb.h @@ -240,8 +240,9 @@ pte_t *huge_pte_alloc(struct mm_struct * pte_t *huge_pte_offset(struct mm_struct *mm, unsigned long addr, unsigned long sz); unsigned long hugetlb_mask_last_page(struct hstate *h); -int huge_pmd_unshare(struct mm_struct *mm, struct vm_area_struct *vma, - unsigned long addr, pte_t *ptep); +int huge_pmd_unshare(struct mmu_gather *tlb, struct vm_area_struct *vma, + unsigned long addr, pte_t *ptep); +void huge_pmd_unshare_flush(struct mmu_gather *tlb, struct vm_area_struct *vma); void adjust_range_if_pmd_sharing_possible(struct vm_area_struct *vma, unsigned long *start, unsigned long *end); @@ -271,7 +272,7 @@ void hugetlb_vma_unlock_write(struct vm_ int hugetlb_vma_trylock_write(struct vm_area_struct *vma); void hugetlb_vma_assert_locked(struct vm_area_struct *vma); void hugetlb_vma_lock_release(struct kref *kref); -long hugetlb_change_protection(struct vm_area_struct *vma, +long hugetlb_change_protection(struct mmu_gather *tlb, struct vm_area_struct *vma, unsigned long address, unsigned long end, pgprot_t newprot, unsigned long cp_flags); void hugetlb_unshare_all_pmds(struct vm_area_struct *vma); @@ -300,13 +301,17 @@ static inline struct address_space *huge return NULL; } -static inline int huge_pmd_unshare(struct mm_struct *mm, - struct vm_area_struct *vma, - unsigned long addr, pte_t *ptep) +static inline int huge_pmd_unshare(struct mmu_gather *tlb, + struct vm_area_struct *vma, unsigned long addr, pte_t *ptep) { return 0; } +static inline void huge_pmd_unshare_flush(struct mmu_gather *tlb, + struct vm_area_struct *vma) +{ +} + static inline void adjust_range_if_pmd_sharing_possible( struct vm_area_struct *vma, unsigned long *start, unsigned long *end) @@ -432,7 +437,7 @@ static inline void move_hugetlb_state(st { } -static inline long hugetlb_change_protection( +static inline long hugetlb_change_protection(struct mmu_gather *tlb, struct vm_area_struct *vma, unsigned long address, unsigned long end, pgprot_t newprot, unsigned long cp_flags) --- a/mm/hugetlb.c~mm-hugetlb-fix-excessive-ipi-broadcasts-when-unsharing-pmd-tables-using-mmu_gather +++ a/mm/hugetlb.c @@ -5096,8 +5096,9 @@ int move_hugetlb_page_tables(struct vm_a unsigned long last_addr_mask; pte_t *src_pte, *dst_pte; struct mmu_notifier_range range; - bool shared_pmd = false; + struct mmu_gather tlb; + tlb_gather_mmu(&tlb, vma->vm_mm); mmu_notifier_range_init(&range, MMU_NOTIFY_CLEAR, 0, mm, old_addr, old_end); adjust_range_if_pmd_sharing_possible(vma, &range.start, &range.end); @@ -5122,12 +5123,12 @@ int move_hugetlb_page_tables(struct vm_a if (huge_pte_none(huge_ptep_get(mm, old_addr, src_pte))) continue; - if (huge_pmd_unshare(mm, vma, old_addr, src_pte)) { - shared_pmd = true; + if (huge_pmd_unshare(&tlb, vma, old_addr, src_pte)) { old_addr |= last_addr_mask; new_addr |= last_addr_mask; continue; } + tlb_remove_huge_tlb_entry(h, &tlb, src_pte, old_addr); dst_pte = huge_pte_alloc(mm, new_vma, new_addr, sz); if (!dst_pte) @@ -5136,13 +5137,13 @@ int move_hugetlb_page_tables(struct vm_a move_huge_pte(vma, old_addr, new_addr, src_pte, dst_pte, sz); } - if (shared_pmd) - flush_hugetlb_tlb_range(vma, range.start, range.end); - else - flush_hugetlb_tlb_range(vma, old_end - len, old_end); + tlb_flush_mmu_tlbonly(&tlb); + huge_pmd_unshare_flush(&tlb, vma); + mmu_notifier_invalidate_range_end(&range); i_mmap_unlock_write(mapping); hugetlb_vma_unlock_write(vma); + tlb_finish_mmu(&tlb); return len + old_addr - old_end; } @@ -5161,7 +5162,6 @@ void __unmap_hugepage_range(struct mmu_g unsigned long sz = huge_page_size(h); bool adjust_reservation; unsigned long last_addr_mask; - bool force_flush = false; WARN_ON(!is_vm_hugetlb_page(vma)); BUG_ON(start & ~huge_page_mask(h)); @@ -5184,10 +5184,8 @@ void __unmap_hugepage_range(struct mmu_g } ptl = huge_pte_lock(h, mm, ptep); - if (huge_pmd_unshare(mm, vma, address, ptep)) { + if (huge_pmd_unshare(tlb, vma, address, ptep)) { spin_unlock(ptl); - tlb_flush_pmd_range(tlb, address & PUD_MASK, PUD_SIZE); - force_flush = true; address |= last_addr_mask; continue; } @@ -5303,14 +5301,7 @@ void __unmap_hugepage_range(struct mmu_g } tlb_end_vma(tlb, vma); - /* - * There is nothing protecting a previously-shared page table that we - * unshared through huge_pmd_unshare() from getting freed after we - * release i_mmap_rwsem, so flush the TLB now. If huge_pmd_unshare() - * succeeded, flush the range corresponding to the pud. - */ - if (force_flush) - tlb_flush_mmu_tlbonly(tlb); + huge_pmd_unshare_flush(tlb, vma); } void __hugetlb_zap_begin(struct vm_area_struct *vma, @@ -6399,7 +6390,7 @@ out_release_nounlock: } #endif /* CONFIG_USERFAULTFD */ -long hugetlb_change_protection(struct vm_area_struct *vma, +long hugetlb_change_protection(struct mmu_gather *tlb, struct vm_area_struct *vma, unsigned long address, unsigned long end, pgprot_t newprot, unsigned long cp_flags) { @@ -6409,7 +6400,6 @@ long hugetlb_change_protection(struct vm pte_t pte; struct hstate *h = hstate_vma(vma); long pages = 0, psize = huge_page_size(h); - bool shared_pmd = false; struct mmu_notifier_range range; unsigned long last_addr_mask; bool uffd_wp = cp_flags & MM_CP_UFFD_WP; @@ -6452,7 +6442,7 @@ long hugetlb_change_protection(struct vm } } ptl = huge_pte_lock(h, mm, ptep); - if (huge_pmd_unshare(mm, vma, address, ptep)) { + if (huge_pmd_unshare(tlb, vma, address, ptep)) { /* * When uffd-wp is enabled on the vma, unshare * shouldn't happen at all. Warn about it if it @@ -6461,7 +6451,6 @@ long hugetlb_change_protection(struct vm WARN_ON_ONCE(uffd_wp || uffd_wp_resolve); pages++; spin_unlock(ptl); - shared_pmd = true; address |= last_addr_mask; continue; } @@ -6522,22 +6511,16 @@ long hugetlb_change_protection(struct vm pte = huge_pte_clear_uffd_wp(pte); huge_ptep_modify_prot_commit(vma, address, ptep, old_pte, pte); pages++; + tlb_remove_huge_tlb_entry(h, tlb, ptep, address); } next: spin_unlock(ptl); cond_resched(); } - /* - * There is nothing protecting a previously-shared page table that we - * unshared through huge_pmd_unshare() from getting freed after we - * release i_mmap_rwsem, so flush the TLB now. If huge_pmd_unshare() - * succeeded, flush the range corresponding to the pud. - */ - if (shared_pmd) - flush_hugetlb_tlb_range(vma, range.start, range.end); - else - flush_hugetlb_tlb_range(vma, start, end); + + tlb_flush_mmu_tlbonly(tlb); + huge_pmd_unshare_flush(tlb, vma); /* * No need to call mmu_notifier_arch_invalidate_secondary_tlbs() we are * downgrading page table protection not changing it to point to a new @@ -6904,18 +6887,27 @@ out: return pte; } -/* - * unmap huge page backed by shared pte. +/** + * huge_pmd_unshare - Unmap a pmd table if it is shared by multiple users + * @tlb: the current mmu_gather. + * @vma: the vma covering the pmd table. + * @addr: the address we are trying to unshare. + * @ptep: pointer into the (pmd) page table. + * + * Called with the page table lock held, the i_mmap_rwsem held in write mode + * and the hugetlb vma lock held in write mode. * - * Called with page table lock held. + * Note: The caller must call huge_pmd_unshare_flush() before dropping the + * i_mmap_rwsem. * - * returns: 1 successfully unmapped a shared pte page - * 0 the underlying pte page is not shared, or it is the last user + * Returns: 1 if it was a shared PMD table and it got unmapped, or 0 if it + * was not a shared PMD table. */ -int huge_pmd_unshare(struct mm_struct *mm, struct vm_area_struct *vma, - unsigned long addr, pte_t *ptep) +int huge_pmd_unshare(struct mmu_gather *tlb, struct vm_area_struct *vma, + unsigned long addr, pte_t *ptep) { unsigned long sz = huge_page_size(hstate_vma(vma)); + struct mm_struct *mm = vma->vm_mm; pgd_t *pgd = pgd_offset(mm, addr); p4d_t *p4d = p4d_offset(pgd, addr); pud_t *pud = pud_offset(p4d, addr); @@ -6927,18 +6919,36 @@ int huge_pmd_unshare(struct mm_struct *m i_mmap_assert_write_locked(vma->vm_file->f_mapping); hugetlb_vma_assert_locked(vma); pud_clear(pud); - /* - * Once our caller drops the rmap lock, some other process might be - * using this page table as a normal, non-hugetlb page table. - * Wait for pending gup_fast() in other threads to finish before letting - * that happen. - */ - tlb_remove_table_sync_one(); - ptdesc_pmd_pts_dec(virt_to_ptdesc(ptep)); + + tlb_unshare_pmd_ptdesc(tlb, virt_to_ptdesc(ptep), addr); + mm_dec_nr_pmds(mm); return 1; } +/* + * huge_pmd_unshare_flush - Complete a sequence of huge_pmd_unshare() calls + * @tlb: the current mmu_gather. + * @vma: the vma covering the pmd table. + * + * Perform necessary TLB flushes or IPI broadcasts to synchronize PMD table + * unsharing with concurrent page table walkers (TLB, GUP-fast, etc.). + * + * This function must be called after a sequence of huge_pmd_unshare() + * calls while still holding the i_mmap_rwsem. + */ +void huge_pmd_unshare_flush(struct mmu_gather *tlb, struct vm_area_struct *vma) +{ + /* + * We must synchronize page table unsharing such that nobody will + * try reusing a previously-shared page table while it might still + * be in use by previous sharers (TLB, GUP_fast). + */ + i_mmap_assert_write_locked(vma->vm_file->f_mapping); + + tlb_flush_unshared_tables(tlb); +} + #else /* !CONFIG_HUGETLB_PMD_PAGE_TABLE_SHARING */ pte_t *huge_pmd_share(struct mm_struct *mm, struct vm_area_struct *vma, @@ -6947,12 +6957,16 @@ pte_t *huge_pmd_share(struct mm_struct * return NULL; } -int huge_pmd_unshare(struct mm_struct *mm, struct vm_area_struct *vma, - unsigned long addr, pte_t *ptep) +int huge_pmd_unshare(struct mmu_gather *tlb, struct vm_area_struct *vma, + unsigned long addr, pte_t *ptep) { return 0; } +void huge_pmd_unshare_flush(struct mmu_gather *tlb, struct vm_area_struct *vma) +{ +} + void adjust_range_if_pmd_sharing_possible(struct vm_area_struct *vma, unsigned long *start, unsigned long *end) { @@ -7219,6 +7233,7 @@ static void hugetlb_unshare_pmds(struct unsigned long sz = huge_page_size(h); struct mm_struct *mm = vma->vm_mm; struct mmu_notifier_range range; + struct mmu_gather tlb; unsigned long address; spinlock_t *ptl; pte_t *ptep; @@ -7229,6 +7244,7 @@ static void hugetlb_unshare_pmds(struct if (start >= end) return; + tlb_gather_mmu(&tlb, mm); flush_cache_range(vma, start, end); /* * No need to call adjust_range_if_pmd_sharing_possible(), because @@ -7248,10 +7264,10 @@ static void hugetlb_unshare_pmds(struct if (!ptep) continue; ptl = huge_pte_lock(h, mm, ptep); - huge_pmd_unshare(mm, vma, address, ptep); + huge_pmd_unshare(&tlb, vma, address, ptep); spin_unlock(ptl); } - flush_hugetlb_tlb_range(vma, start, end); + huge_pmd_unshare_flush(&tlb, vma); if (take_locks) { i_mmap_unlock_write(vma->vm_file->f_mapping); hugetlb_vma_unlock_write(vma); @@ -7261,6 +7277,7 @@ static void hugetlb_unshare_pmds(struct * Documentation/mm/mmu_notifier.rst. */ mmu_notifier_invalidate_range_end(&range); + tlb_finish_mmu(&tlb); } /* --- a/mm/mmu_gather.c~mm-hugetlb-fix-excessive-ipi-broadcasts-when-unsharing-pmd-tables-using-mmu_gather +++ a/mm/mmu_gather.c @@ -469,6 +469,12 @@ void tlb_gather_mmu_fullmm(struct mmu_ga void tlb_finish_mmu(struct mmu_gather *tlb) { /* + * We expect an earlier huge_pmd_unshare_flush() call to sort this out, + * due to complicated locking requirements with page table unsharing. + */ + VM_WARN_ON_ONCE(tlb->fully_unshared_tables); + + /* * If there are parallel threads are doing PTE changes on same range * under non-exclusive lock (e.g., mmap_lock read-side) but defer TLB * flush by batching, one thread may end up seeing inconsistent PTEs --- a/mm/mprotect.c~mm-hugetlb-fix-excessive-ipi-broadcasts-when-unsharing-pmd-tables-using-mmu_gather +++ a/mm/mprotect.c @@ -652,7 +652,7 @@ long change_protection(struct mmu_gather #endif if (is_vm_hugetlb_page(vma)) - pages = hugetlb_change_protection(vma, start, end, newprot, + pages = hugetlb_change_protection(tlb, vma, start, end, newprot, cp_flags); else pages = change_protection_range(tlb, vma, start, end, newprot, --- a/mm/rmap.c~mm-hugetlb-fix-excessive-ipi-broadcasts-when-unsharing-pmd-tables-using-mmu_gather +++ a/mm/rmap.c @@ -76,7 +76,7 @@ #include <linux/mm_inline.h> #include <linux/oom.h> -#include <asm/tlbflush.h> +#include <asm/tlb.h> #define CREATE_TRACE_POINTS #include <trace/events/migrate.h> @@ -2008,13 +2008,17 @@ static bool try_to_unmap_one(struct foli * if unsuccessful. */ if (!anon) { + struct mmu_gather tlb; + VM_BUG_ON(!(flags & TTU_RMAP_LOCKED)); if (!hugetlb_vma_trylock_write(vma)) goto walk_abort; - if (huge_pmd_unshare(mm, vma, address, pvmw.pte)) { + + tlb_gather_mmu(&tlb, mm); + if (huge_pmd_unshare(&tlb, vma, address, pvmw.pte)) { hugetlb_vma_unlock_write(vma); - flush_tlb_range(vma, - range.start, range.end); + huge_pmd_unshare_flush(&tlb, vma); + tlb_finish_mmu(&tlb); /* * The PMD table was unmapped, * consequently unmapping the folio. @@ -2022,6 +2026,7 @@ static bool try_to_unmap_one(struct foli goto walk_done; } hugetlb_vma_unlock_write(vma); + tlb_finish_mmu(&tlb); } pteval = huge_ptep_clear_flush(vma, address, pvmw.pte); if (pte_dirty(pteval)) @@ -2398,17 +2403,20 @@ static bool try_to_migrate_one(struct fo * fail if unsuccessful. */ if (!anon) { + struct mmu_gather tlb; + VM_BUG_ON(!(flags & TTU_RMAP_LOCKED)); if (!hugetlb_vma_trylock_write(vma)) { page_vma_mapped_walk_done(&pvmw); ret = false; break; } - if (huge_pmd_unshare(mm, vma, address, pvmw.pte)) { - hugetlb_vma_unlock_write(vma); - flush_tlb_range(vma, - range.start, range.end); + tlb_gather_mmu(&tlb, mm); + if (huge_pmd_unshare(&tlb, vma, address, pvmw.pte)) { + hugetlb_vma_unlock_write(vma); + huge_pmd_unshare_flush(&tlb, vma); + tlb_finish_mmu(&tlb); /* * The PMD table was unmapped, * consequently unmapping the folio. @@ -2417,6 +2425,7 @@ static bool try_to_migrate_one(struct fo break; } hugetlb_vma_unlock_write(vma); + tlb_finish_mmu(&tlb); } /* Nuke the hugetlb page table entry */ pteval = huge_ptep_clear_flush(vma, address, pvmw.pte); _ Patches currently in -mm which might be from david(a)kernel.org are mm-hugetlb-fix-hugetlb_pmd_shared.patch mm-hugetlb-fix-two-comments-related-to-huge_pmd_unshare.patch mm-rmap-fix-two-comments-related-to-huge_pmd_unshare.patch mm-hugetlb-fix-excessive-ipi-broadcasts-when-unsharing-pmd-tables-using-mmu_gather.patch

3 days, 9 hours

1
0
0 0

+ mm-hugetlb-fix-hugetlb_pmd_shared.patch added to mm-unstable branch

by Andrew Morton

The patch titled Subject: mm/hugetlb: fix hugetlb_pmd_shared() has been added to the -mm mm-unstable branch. Its filename is mm-hugetlb-fix-hugetlb_pmd_shared.patch This patch will shortly appear at https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patche… This patch will later appear in the mm-unstable branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm Before you just go and hit "reply", please: a) Consider who else should be cc'ed b) Prefer to cc a suitable mailing list as well c) Ideally: find the original patch on the mailing list and do a reply-to-all to that, adding suitable additional cc's *** Remember to use Documentation/process/submit-checklist.rst when testing your code *** The -mm tree is included into linux-next via the mm-everything branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm and is updated there every 2-3 working days ------------------------------------------------------ From: "David Hildenbrand (Red Hat)" <david(a)kernel.org> Subject: mm/hugetlb: fix hugetlb_pmd_shared() Date: Fri, 5 Dec 2025 22:35:55 +0100 Patch series "mm/hugetlb: fixes for PMD table sharing (incl. using mmu_gather)". One functional fix, one performance regression fix, and two related comment fixes. I cleaned up my prototype I recently shared [1] for the performance fix, deferring most of the cleanups I had in the prototype to a later point. While doing that I identified the other things. The goal of this patch set is to be backported to stable trees "fairly" easily. At least patch #1 and #4. Patch #1 fixes hugetlb_pmd_shared() not detecting any sharing Patch #2 + #3 are simple comment fixes that patch #4 interacts with. Patch #4 is a fix for the reported performance regression due to excessive IPI broadcasts during fork()+exit(). The last patch is all about TLB flushes, IPIs and mmu_gather. Read: complicated I added as much comments + description that I possibly could, and I am hoping for review from Jann. There are plenty of cleanups in the future to be had + one reasonable optimization on x86. But that's all out of scope for this series. This patch (of 4): We switched from (wrongly) using the page count to an independent shared count. Now, shared page tables have a refcount of 1 (excluding speculative references) and instead use ptdesc->pt_share_count to identify sharing. We didn't convert hugetlb_pmd_shared(), so right now, we would never detect a shared PMD table as such, because sharing/unsharing no longer touches the refcount of a PMD table. Page migration, like mbind() or migrate_pages() would allow for migrating folios mapped into such shared PMD tables, even though the folios are not exclusive. In smaps we would account them as "private" although they are "shared", and we would be wrongly setting the PM_MMAP_EXCLUSIVE in the pagemap interface. Fix it by properly using ptdesc_pmd_is_shared() in hugetlb_pmd_shared(). Link: https://lkml.kernel.org/r/20251205213558.2980480-1-david@kernel.org Link: https://lkml.kernel.org/r/20251205213558.2980480-2-david@kernel.org Link: https://lore.kernel.org/all/8cab934d-4a56-44aa-b641-bfd7e23bd673@kernel.org/ [1] Fixes: 59d9094df3d7 ("mm: hugetlb: independent PMD page table shared count") Signed-off-by: David Hildenbrand (Red Hat) <david(a)kernel.org> Tested-by: Laurence Oberman <loberman(a)redhat.com> Reviewed-by: Rik van Riel <riel(a)surriel.com> Reviewed-by: Lance Yang <lance.yang(a)linux.dev> Cc: Liu Shixin <liushixin2(a)huawei.com> Cc: "Aneesh Kumar K.V" <aneesh.kumar(a)kernel.org> Cc: Arnd Bergmann <arnd(a)arndb.de> Cc: Jann Horn <jannh(a)google.com> Cc: Liam Howlett <liam.howlett(a)oracle.com> Cc: Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com> Cc: Muchun Song <muchun.song(a)linux.dev> Cc: Nadav Amit <nadav.amit(a)gmail.com> Cc: Nicholas Piggin <npiggin(a)gmail.com> Cc: Oscar Salvador <osalvador(a)suse.de> Cc: Peter Zijlstra <peterz(a)infradead.org> Cc: Prakash Sangappa <prakash.sangappa(a)oracle.com> Cc: Vlastimil Babka <vbabka(a)suse.cz> Cc: Will Deacon <will(a)kernel.org> Cc: Uschakow, Stanislav" <suschako(a)amazon.de> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> --- include/linux/hugetlb.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/include/linux/hugetlb.h~mm-hugetlb-fix-hugetlb_pmd_shared +++ a/include/linux/hugetlb.h @@ -1326,7 +1326,7 @@ static inline __init void hugetlb_cma_re #ifdef CONFIG_HUGETLB_PMD_PAGE_TABLE_SHARING static inline bool hugetlb_pmd_shared(pte_t *pte) { - return page_count(virt_to_page(pte)) > 1; + return ptdesc_pmd_is_shared(virt_to_ptdesc(pte)); } #else static inline bool hugetlb_pmd_shared(pte_t *pte) _ Patches currently in -mm which might be from david(a)kernel.org are mm-hugetlb-fix-hugetlb_pmd_shared.patch mm-hugetlb-fix-two-comments-related-to-huge_pmd_unshare.patch mm-rmap-fix-two-comments-related-to-huge_pmd_unshare.patch mm-hugetlb-fix-excessive-ipi-broadcasts-when-unsharing-pmd-tables-using-mmu_gather.patch

3 days, 9 hours

1
0
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror